@nodetool-ai/websocket 0.7.0-rc.23 → 0.8.1

package/dist/lib/workflow-service.js

@@ -0,0 +1,194 @@
+/**
+ * The one implementation of workflow create/update/delete.
+ *
+ * REST (`routes/workflows.ts` -> `http-api.ts`) and tRPC (`trpc/routers/
+ * workflows.ts`) both call these; each maps `WorkflowServiceError` onto its own
+ * wire shape. The three copies that preceded this had already drifted — REST
+ * deleted the row without the collaborator/share cascade, seeded an example's
+ * graph but not its `app_doc`, and re-implemented the collaborator role check.
+ *
+ * Authoring-quality validation (`normalizeWorkflowGraph`, model-selection and
+ * leftover-handle checks) deliberately stays in the agent capability: the
+ * editor saves in-progress graphs with unset models, so gating persistence on
+ * it would reject saves the UI makes today.
+ */
+import { Project, Workflow, WorkflowCollaborator } from "@nodetool-ai/models";
+import { createLogger } from "@nodetool-ai/config";
+import { ApiErrorCode } from "../error-codes.js";
+import { syncRegistrations } from "../triggers/registration-sync.js";
+import { loadExampleGraph, defaultExamplePackageName } from "../example-workflows.js";
+const log = createLogger("nodetool.websocket.workflow-service");
+export const WORKFLOW_CONFLICT_MESSAGE = "Workflow was modified since last read (optimistic concurrency conflict)";
+/** A failure both wire formats can map: tRPC reads `code`, REST reads `status`. */
+export class WorkflowServiceError extends Error {
+    code;
+    status;
+    constructor(code, message, status) {
+        super(message);
+        this.code = code;
+        this.status = status;
+        this.name = "WorkflowServiceError";
+    }
+}
+function notFound() {
+    throw new WorkflowServiceError(ApiErrorCode.WORKFLOW_NOT_FOUND, "Workflow not found", 404);
+}
+/**
+ * Reconcile `trigger_registrations` against the workflow's current graph.
+ * Non-fatal by design — a broken trigger sync must not stop a graph from
+ * saving, so failures are logged and swallowed.
+ */
+export async function syncTriggerRegistrations(workflow) {
+    try {
+        await syncRegistrations(workflow, {});
+    }
+    catch (error) {
+        log.error("Trigger registration sync failed", {
+            workflowId: workflow.id,
+            error: error instanceof Error ? error.message : String(error)
+        });
+    }
+}
+function requireGraph(input) {
+    if (input.name === undefined) {
+        throw new WorkflowServiceError(ApiErrorCode.INVALID_INPUT, "Invalid workflow", 400);
+    }
+    const graph = input.graph;
+    if (!graph || !Array.isArray(graph.nodes) || !Array.isArray(graph.edges)) {
+        throw new WorkflowServiceError(ApiErrorCode.INVALID_INPUT, "graph is required and must have nodes and edges arrays", 400);
+    }
+    return graph;
+}
+function createRow(userId, input, graph, appDoc, id) {
+    const row = {
+        user_id: userId,
+        name: input.name,
+        tool_name: input.tool_name ?? null,
+        package_name: input.package_name ?? null,
+        path: input.path ?? null,
+        tags: input.tags ?? [],
+        description: input.description ?? "",
+        thumbnail: input.thumbnail ?? null,
+        thumbnail_url: input.thumbnail_url ?? null,
+        access: input.access === "public" ? "public" : "private",
+        graph,
+        settings: input.settings ?? null,
+        run_mode: input.run_mode ?? "workflow",
+        workspace_id: input.workspace_id ?? null,
+        project_id: input.project_id ?? "default",
+        html_app: input.html_app ?? null,
+        app_doc: appDoc
+    };
+    // Upsert-on-PUT names the id; a plain create lets the model mint one.
+    if (id !== undefined)
+        row.id = id;
+    return Workflow.create(row);
+}
+/**
+ * Create a workflow, optionally seeding graph and app UI from a shipped
+ * example. Both the graph and the example's `app_doc` are carried over; only
+ * one of the two former copies did the latter.
+ */
+export async function createWorkflow(userId, input, seed) {
+    if (input.project_id !== undefined && input.project_id !== "default") {
+        await Project.requireOwned(userId, input.project_id);
+    }
+    let graph = input.graph ?? null;
+    let appDoc = input.app_doc ?? null;
+    if (seed && (!graph || graph.nodes?.length === 0)) {
+        const packageName = seed.packageName ?? defaultExamplePackageName(seed.apiOptions) ?? "nodetool-base";
+        const example = loadExampleGraph(packageName, seed.exampleName, seed.apiOptions);
+        if (example?.graph) {
+            graph = example.graph;
+        }
+        if (appDoc == null && example?.app_doc) {
+            appDoc = example.app_doc;
+        }
+    }
+    const resolved = requireGraph({ ...input, graph });
+    const workflow = (await createRow(userId, input, resolved, appDoc));
+    await syncTriggerRegistrations(workflow);
+    return workflow;
+}
+/**
+ * Update a workflow, or create it under `id` when it does not exist (the
+ * upsert-on-PUT both wire formats rely on). Optional columns are written only
+ * when the caller sent them, so a partial save does not wipe stored values.
+ */
+export async function updateWorkflow(userId, id, input) {
+    const graph = requireGraph(input);
+    const existing = (await Workflow.get(id));
+    if (existing) {
+        const isOwner = existing.user_id === userId;
+        if (!isOwner) {
+            const grant = await WorkflowCollaborator.findFor(id, userId);
+            if (grant?.role !== "editor")
+                notFound();
+        }
+        if (input.project_id !== undefined &&
+            input.project_id !== existing.project_id) {
+            if (!isOwner)
+                notFound();
+            if (input.project_id !== "default") {
+                await Project.requireOwned(userId, input.project_id);
+            }
+        }
+        const fields = {
+            name: input.name,
+            tool_name: input.tool_name ?? null,
+            description: input.description ?? "",
+            tags: input.tags ?? [],
+            package_name: input.package_name ?? null,
+            graph
+        };
+        // Only the owner can change visibility; editors keep it as-is.
+        if (isOwner) {
+            fields.access = input.access === "public" ? "public" : "private";
+        }
+        if (input.thumbnail !== undefined)
+            fields.thumbnail = input.thumbnail;
+        if (input.settings !== undefined)
+            fields.settings = input.settings ?? null;
+        if (input.run_mode !== undefined && input.run_mode !== null) {
+            fields.run_mode = input.run_mode;
+        }
+        if (input.workspace_id !== undefined) {
+            fields.workspace_id = input.workspace_id ?? null;
+        }
+        if (isOwner && input.project_id !== undefined) {
+            fields.project_id = input.project_id;
+        }
+        if (input.html_app !== undefined)
+            fields.html_app = input.html_app ?? null;
+        if (input.app_doc !== undefined)
+            fields.app_doc = input.app_doc;
+        const updated = await Workflow.updateFieldsIfUnchanged(id, input.expected_updated_at ?? existing.updated_at, fields);
+        if (!updated) {
+            throw new WorkflowServiceError(ApiErrorCode.ALREADY_EXISTS, WORKFLOW_CONFLICT_MESSAGE, 409);
+        }
+        await syncTriggerRegistrations(updated);
+        return updated;
+    }
+    // An `expected_updated_at` names a row the caller believes it read, so a
+    // missing row is a conflict, not an upsert.
+    if (input.expected_updated_at)
+        notFound();
+    if (input.project_id !== undefined && input.project_id !== "default") {
+        await Project.requireOwned(userId, input.project_id);
+    }
+    const workflow = (await createRow(userId, input, graph, input.app_doc ?? null, id));
+    await syncTriggerRegistrations(workflow);
+    return workflow;
+}
+/**
+ * Delete a workflow the caller owns. `deleteOwned` carries the collaborator
+ * and share rows with it: a workflow row can be recreated under the same id,
+ * and a grant left behind would then apply to a workflow its holder was never
+ * given.
+ */
+export async function deleteWorkflow(userId, id) {
+    const deleted = await Workflow.deleteOwned(userId, id);
+    if (!deleted)
+        notFound();
+}
+//# sourceMappingURL=workflow-service.js.map

package/dist/lib/workflow-service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"workflow-service.js","sourceRoot":"","sources":["../../src/lib/workflow-service.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AAE9E,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AACjD,OAAO,EAAE,iBAAiB,EAAE,MAAM,kCAAkC,CAAC;AACrE,OAAO,EACL,gBAAgB,EAChB,yBAAyB,EAC1B,MAAM,yBAAyB,CAAC;AAIjC,MAAM,GAAG,GAAG,YAAY,CAAC,qCAAqC,CAAC,CAAC;AAEhE,MAAM,CAAC,MAAM,yBAAyB,GACpC,yEAAyE,CAAC;AAE5E,mFAAmF;AACnF,MAAM,OAAO,oBAAqB,SAAQ,KAAK;IAElC,IAAI;IAEJ,MAAM;IAHjB,YACW,IAAkB,EAC3B,OAAe,EACN,MAAc;QAEvB,KAAK,CAAC,OAAO,CAAC,CAAC;oBAJN,IAAI;sBAEJ,MAAM;QAGf,IAAI,CAAC,IAAI,GAAG,sBAAsB,CAAC;IACrC,CAAC;CACF;AAED,SAAS,QAAQ;IACf,MAAM,IAAI,oBAAoB,CAC5B,YAAY,CAAC,kBAAkB,EAC/B,oBAAoB,EACpB,GAAG,CACJ,CAAC;AACJ,CAAC;AAmCD;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAC5C,QAAuB;IAEvB,IAAI,CAAC;QACH,MAAM,iBAAiB,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;IACxC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,GAAG,CAAC,KAAK,CAAC,kCAAkC,EAAE;YAC5C,UAAU,EAAE,QAAQ,CAAC,EAAE;YACvB,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;SAC9D,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED,SAAS,YAAY,CAAC,KAAyB;IAC7C,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAC7B,MAAM,IAAI,oBAAoB,CAC5B,YAAY,CAAC,aAAa,EAC1B,kBAAkB,EAClB,GAAG,CACJ,CAAC;IACJ,CAAC;IACD,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC;IAC1B,IAAI,CAAC,KAAK,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;QACzE,MAAM,IAAI,oBAAoB,CAC5B,YAAY,CAAC,aAAa,EAC1B,wDAAwD,EACxD,GAAG,CACJ,CAAC;IACJ,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,SAAS,CAChB,MAAc,EACd,KAAyB,EACzB,KAAyB,EACzB,MAAsC,EACtC,EAAW;IAEX,MAAM,GAAG,GAA4B;QACnC,OAAO,EAAE,MAAM;QACf,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,SAAS,EAAE,KAAK,CAAC,SAAS,IAAI,IAAI;QAClC,YAAY,EAAE,KAAK,CAAC,YAAY,IAAI,IAAI;QACxC,IAAI,EAAE,KAAK,CAAC,IAAI,IAAI,IAAI;QACxB,IAAI,EAAE,KAAK,CAAC,IAAI,IAAI,EAAE;QACtB,WAAW,EAAE,KAAK,CAAC,WAAW,IAAI,EAAE;QACpC,SAAS,EAAE,KAAK,CAAC,SAAS,IAAI,IAAI;QAClC,aAAa,EAAE,KAAK,CAAC,aAAa,IAAI,IAAI;QAC1C,MAAM,EAAE,KAAK,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS;QACxD,KAAK;QACL,QAAQ,EAAE,KAAK,CAAC,QAAQ,IAAI,IAAI;QAChC,QAAQ,EAAE,KAAK,CAAC,QAAQ,IAAI,UAAU;QACtC,YAAY,EAAE,KAAK,CAAC,YAAY,IAAI,IAAI;QACxC,UAAU,EAAE,KAAK,CAAC,UAAU,IAAI,SAAS;QACzC,QAAQ,EAAE,KAAK,CAAC,QAAQ,IAAI,IAAI;QAChC,OAAO,EAAE,MAAM;KAChB,CAAC;IACF,sEAAsE;IACtE,IAAI,EAAE,KAAK,SAAS;QAAE,GAAG,CAAC,EAAE,GAAG,EAAE,CAAC;IAClC,OAAO,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;AAC9B,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,MAAc,EACd,KAAyB,EACzB,IAAkB;IAElB,IAAI,KAAK,CAAC,UAAU,KAAK,SAAS,IAAI,KAAK,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;QACrE,MAAM,OAAO,CAAC,YAAY,CAAC,MAAM,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC;IACvD,CAAC;IACD,IAAI,KAAK,GAAG,KAAK,CAAC,KAAK,IAAI,IAAI,CAAC;IAChC,IAAI,MAAM,GAAG,KAAK,CAAC,OAAO,IAAI,IAAI,CAAC;IAEnC,IAAI,IAAI,IAAI,CAAC,CAAC,KAAK,IAAI,KAAK,CAAC,KAAK,EAAE,MAAM,KAAK,CAAC,CAAC,EAAE,CAAC;QAClD,MAAM,WAAW,GACf,IAAI,CAAC,WAAW,IAAI,yBAAyB,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,eAAe,CAAC;QACpF,MAAM,OAAO,GAAG,gBAAgB,CAAC,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;QACjF,IAAI,OAAO,EAAE,KAAK,EAAE,CAAC;YACnB,KAAK,GAAG,OAAO,CAAC,KAA2B,CAAC;QAC9C,CAAC;QACD,IAAI,MAAM,IAAI,IAAI,IAAI,OAAO,EAAE,OAAO,EAAE,CAAC;YACvC,MAAM,GAAG,OAAO,CAAC,OAAkC,CAAC;QACtD,CAAC;IACH,CAAC;IAED,MAAM,QAAQ,GAAG,YAAY,CAAC,EAAE,GAAG,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;IACnD,MAAM,QAAQ,GAAG,CAAC,MAAM,SAAS,CAC/B,MAAM,EACN,KAAK,EACL,QAAQ,EACR,MAAM,CACP,CAAkB,CAAC;IACpB,MAAM,wBAAwB,CAAC,QAAQ,CAAC,CAAC;IACzC,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,MAAc,EACd,EAAU,EACV,KAAyB;IAEzB,MAAM,KAAK,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC;IAClC,MAAM,QAAQ,GAAG,CAAC,MAAM,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,CAAyB,CAAC;IAElE,IAAI,QAAQ,EAAE,CAAC;QACb,MAAM,OAAO,GAAG,QAAQ,CAAC,OAAO,KAAK,MAAM,CAAC;QAC5C,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,KAAK,GAAG,MAAM,oBAAoB,CAAC,OAAO,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;YAC7D,IAAI,KAAK,EAAE,IAAI,KAAK,QAAQ;gBAAE,QAAQ,EAAE,CAAC;QAC3C,CAAC;QAED,IACE,KAAK,CAAC,UAAU,KAAK,SAAS;YAC9B,KAAK,CAAC,UAAU,KAAK,QAAQ,CAAC,UAAU,EACxC,CAAC;YACD,IAAI,CAAC,OAAO;gBAAE,QAAQ,EAAE,CAAC;YACzB,IAAI,KAAK,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;gBACnC,MAAM,OAAO,CAAC,YAAY,CAAC,MAAM,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC;YACvD,CAAC;QACH,CAAC;QAED,MAAM,MAAM,GAA2D;YACrE,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,SAAS,EAAE,KAAK,CAAC,SAAS,IAAI,IAAI;YAClC,WAAW,EAAE,KAAK,CAAC,WAAW,IAAI,EAAE;YACpC,IAAI,EAAE,KAAK,CAAC,IAAI,IAAI,EAAE;YACtB,YAAY,EAAE,KAAK,CAAC,YAAY,IAAI,IAAI;YACxC,KAAK;SACN,CAAC;QACF,+DAA+D;QAC/D,IAAI,OAAO,EAAE,CAAC;YACZ,MAAM,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;QACnE,CAAC;QACD,IAAI,KAAK,CAAC,SAAS,KAAK,SAAS;YAAE,MAAM,CAAC,SAAS,GAAG,KAAK,CAAC,SAAS,CAAC;QACtE,IAAI,KAAK,CAAC,QAAQ,KAAK,SAAS;YAAE,MAAM,CAAC,QAAQ,GAAG,KAAK,CAAC,QAAQ,IAAI,IAAI,CAAC;QAC3E,IAAI,KAAK,CAAC,QAAQ,KAAK,SAAS,IAAI,KAAK,CAAC,QAAQ,KAAK,IAAI,EAAE,CAAC;YAC5D,MAAM,CAAC,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC;QACnC,CAAC;QACD,IAAI,KAAK,CAAC,YAAY,KAAK,SAAS,EAAE,CAAC;YACrC,MAAM,CAAC,YAAY,GAAG,KAAK,CAAC,YAAY,IAAI,IAAI,CAAC;QACnD,CAAC;QACD,IAAI,OAAO,IAAI,KAAK,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;YAC9C,MAAM,CAAC,UAAU,GAAG,KAAK,CAAC,UAAU,CAAC;QACvC,CAAC;QACD,IAAI,KAAK,CAAC,QAAQ,KAAK,SAAS;YAAE,MAAM,CAAC,QAAQ,GAAG,KAAK,CAAC,QAAQ,IAAI,IAAI,CAAC;QAC3E,IAAI,KAAK,CAAC,OAAO,KAAK,SAAS;YAAE,MAAM,CAAC,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC;QAEhE,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,uBAAuB,CACpD,EAAE,EACF,KAAK,CAAC,mBAAmB,IAAI,QAAQ,CAAC,UAAU,EAChD,MAAM,CACP,CAAC;QACF,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,IAAI,oBAAoB,CAC5B,YAAY,CAAC,cAAc,EAC3B,yBAAyB,EACzB,GAAG,CACJ,CAAC;QACJ,CAAC;QACD,MAAM,wBAAwB,CAAC,OAAO,CAAC,CAAC;QACxC,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,yEAAyE;IACzE,4CAA4C;IAC5C,IAAI,KAAK,CAAC,mBAAmB;QAAE,QAAQ,EAAE,CAAC;IAE1C,IAAI,KAAK,CAAC,UAAU,KAAK,SAAS,IAAI,KAAK,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;QACrE,MAAM,OAAO,CAAC,YAAY,CAAC,MAAM,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC;IACvD,CAAC;IAED,MAAM,QAAQ,GAAG,CAAC,MAAM,SAAS,CAC/B,MAAM,EACN,KAAK,EACL,KAAK,EACL,KAAK,CAAC,OAAO,IAAI,IAAI,EACrB,EAAE,CACH,CAAkB,CAAC;IACpB,MAAM,wBAAwB,CAAC,QAAQ,CAAC,CAAC;IACzC,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,MAAc,EACd,EAAU;IAEV,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,WAAW,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IACvD,IAAI,CAAC,OAAO;QAAE,QAAQ,EAAE,CAAC;AAC3B,CAAC"}

package/dist/lib/workflow-workspace.d.ts

@@ -0,0 +1,20 @@
+export { resolveWorkflowWorkspace, workspaceFromRow, usesCloudWorkspaces, buildWorkspaceExecutionContext } from "@nodetool-ai/execution/service";
+/**
+ * Point virtual workspaces at the deployment's asset storage.
+ *
+ * Called once at startup. The adapter is the same one assets use — one bucket,
+ * one set of credentials — with each user's workspace carved out under its own
+ * key prefix. On a local install this is a no-op: workspaces are folders and
+ * the resolver never asks for cloud storage.
+ */
+export declare function initWorkspaceStorage(): void;
+/**
+ * Push workspace file writes to the clients browsing that workspace.
+ *
+ * Workspace files are not database rows, so `ModelObserver` never sees them and
+ * the Workspace Explorer had no way to learn that a chat turn had written one —
+ * it showed whatever the panel happened to fetch when it mounted. This closes
+ * that gap with the emitter the other non-DBModel resources already use.
+ */
+export declare function initWorkspaceChangeEvents(): void;
+//# sourceMappingURL=workflow-workspace.d.ts.map

package/dist/lib/workflow-workspace.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"workflow-workspace.d.ts","sourceRoot":"","sources":["../../src/lib/workflow-workspace.ts"],"names":[],"mappings":"AAgBA,OAAO,EACL,wBAAwB,EACxB,gBAAgB,EAChB,mBAAmB,EACnB,8BAA8B,EAC/B,MAAM,gCAAgC,CAAC;AAExC;;;;;;;GAOG;AACH,wBAAgB,oBAAoB,IAAI,IAAI,CAG3C;AAiBD;;;;;;;GAOG;AACH,wBAAgB,yBAAyB,IAAI,IAAI,CAoBhD"}

package/dist/lib/workflow-workspace.js

@@ -0,0 +1,65 @@
+/**
+ * Workspace resolution for a run. The implementation moved to
+ * `@nodetool-ai/execution/service` so every host — the server, the CLI, the
+ * agent tools — resolves a workflow's workspace the same way. This module is
+ * the server's import site for it, and the one place that tells the resolver
+ * which object store backs a virtual workspace.
+ */
+import { setWorkspaceChangeNotifier, setWorkspaceCloudStorage, usesCloudWorkspaces } from "@nodetool-ai/execution/service";
+import { getAssetAdapter } from "./storage.js";
+import { notifyResourceChange } from "../resource-events.js";
+export { resolveWorkflowWorkspace, workspaceFromRow, usesCloudWorkspaces, buildWorkspaceExecutionContext } from "@nodetool-ai/execution/service";
+/**
+ * Point virtual workspaces at the deployment's asset storage.
+ *
+ * Called once at startup. The adapter is the same one assets use — one bucket,
+ * one set of credentials — with each user's workspace carved out under its own
+ * key prefix. On a local install this is a no-op: workspaces are folders and
+ * the resolver never asks for cloud storage.
+ */
+export function initWorkspaceStorage() {
+    if (!usesCloudWorkspaces())
+        return;
+    setWorkspaceCloudStorage(getAssetAdapter());
+}
+/**
+ * How long writes are pooled before the browser is told, in ms.
+ *
+ * An agent that unpacks an archive writes hundreds of files in a burst, and
+ * every one of them would otherwise be a websocket frame and a full re-listing.
+ * The explorer only ever refetches, so one message per workspace per window
+ * says everything a hundred would.
+ */
+const WORKSPACE_CHANGE_COALESCE_MS = 400;
+const pendingWorkspaceChanges = new Map();
+/**
+ * Push workspace file writes to the clients browsing that workspace.
+ *
+ * Workspace files are not database rows, so `ModelObserver` never sees them and
+ * the Workspace Explorer had no way to learn that a chat turn had written one —
+ * it showed whatever the panel happened to fetch when it mounted. This closes
+ * that gap with the emitter the other non-DBModel resources already use.
+ */
+export function initWorkspaceChangeEvents() {
+    setWorkspaceChangeNotifier((change) => {
+        const pending = pendingWorkspaceChanges.get(change.workspaceId);
+        if (pending)
+            return;
+        const timer = setTimeout(() => {
+            pendingWorkspaceChanges.delete(change.workspaceId);
+            notifyResourceChange({
+                event: "updated",
+                resource_type: "workspacefile",
+                resource: { id: change.workspaceId },
+                userId: change.userId
+            });
+        }, WORKSPACE_CHANGE_COALESCE_MS);
+        // A pending flush must not hold the process open at shutdown.
+        timer.unref?.();
+        pendingWorkspaceChanges.set(change.workspaceId, {
+            userId: change.userId,
+            timer
+        });
+    });
+}
+//# sourceMappingURL=workflow-workspace.js.map

package/dist/lib/workflow-workspace.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"workflow-workspace.js","sourceRoot":"","sources":["../../src/lib/workflow-workspace.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,EACL,0BAA0B,EAC1B,wBAAwB,EACxB,mBAAmB,EAEpB,MAAM,gCAAgC,CAAC;AACxC,OAAO,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAC/C,OAAO,EAAE,oBAAoB,EAAE,MAAM,uBAAuB,CAAC;AAE7D,OAAO,EACL,wBAAwB,EACxB,gBAAgB,EAChB,mBAAmB,EACnB,8BAA8B,EAC/B,MAAM,gCAAgC,CAAC;AAExC;;;;;;;GAOG;AACH,MAAM,UAAU,oBAAoB;IAClC,IAAI,CAAC,mBAAmB,EAAE;QAAE,OAAO;IACnC,wBAAwB,CAAC,eAAe,EAAE,CAAC,CAAC;AAC9C,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,4BAA4B,GAAG,GAAG,CAAC;AAEzC,MAAM,uBAAuB,GAAG,IAAI,GAAG,EAGpC,CAAC;AAEJ;;;;;;;GAOG;AACH,MAAM,UAAU,yBAAyB;IACvC,0BAA0B,CAAC,CAAC,MAA2B,EAAE,EAAE;QACzD,MAAM,OAAO,GAAG,uBAAuB,CAAC,GAAG,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;QAChE,IAAI,OAAO;YAAE,OAAO;QACpB,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;YAC5B,uBAAuB,CAAC,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;YACnD,oBAAoB,CAAC;gBACnB,KAAK,EAAE,SAAS;gBAChB,aAAa,EAAE,eAAe;gBAC9B,QAAQ,EAAE,EAAE,EAAE,EAAE,MAAM,CAAC,WAAW,EAAE;gBACpC,MAAM,EAAE,MAAM,CAAC,MAAM;aACtB,CAAC,CAAC;QACL,CAAC,EAAE,4BAA4B,CAAC,CAAC;QACjC,8DAA8D;QAC9D,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC;QAChB,uBAAuB,CAAC,GAAG,CAAC,MAAM,CAAC,WAAW,EAAE;YAC9C,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,KAAK;SACN,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/lib/ws-connection-health.d.ts

@@ -0,0 +1,10 @@
+export interface WsConnectionHealthConfig {
+    enabled: boolean;
+    pingIntervalMs: number;
+    idleTimeoutMs: number;
+    maxBufferedBytes: number;
+    drainTimeoutMs: number;
+    maxQueuedFrames: number;
+}
+export declare function getWsConnectionHealthConfig(): WsConnectionHealthConfig;
+//# sourceMappingURL=ws-connection-health.d.ts.map

package/dist/lib/ws-connection-health.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ws-connection-health.d.ts","sourceRoot":"","sources":["../../src/lib/ws-connection-health.ts"],"names":[],"mappings":"AA0BA,MAAM,WAAW,wBAAwB;IACvC,OAAO,EAAE,OAAO,CAAC;IACjB,cAAc,EAAE,MAAM,CAAC;IACvB,aAAa,EAAE,MAAM,CAAC;IACtB,gBAAgB,EAAE,MAAM,CAAC;IACzB,cAAc,EAAE,MAAM,CAAC;IACvB,eAAe,EAAE,MAAM,CAAC;CACzB;AAED,wBAAgB,2BAA2B,IAAI,wBAAwB,CAWtE"}

package/dist/lib/ws-connection-health.js

@@ -0,0 +1,38 @@
+/**
+ * Per-connection health limits for the long-lived `/ws` socket.
+ *
+ * Two failure modes these bound, both invisible to `close` handlers:
+ *
+ *   Half-open peer — a client that vanished without a close frame (laptop
+ *   sleep, NAT rebind, killed browser). The socket stays "open" forever, and
+ *   with it the runner, its observers, its timers and its running jobs. A
+ *   protocol-level ping plus an idle deadline turns that into a real close.
+ *
+ *   Slow consumer — a client that reads slower than the server streams. `send`
+ *   buffers in memory with no upper bound, so one stalled reader can grow the
+ *   server's heap until it dies. Sends wait for the buffer to drain, and a peer
+ *   that never drains is dropped.
+ *
+ * Tunable via:
+ *
+ *   NODETOOL_WS_HEALTH_DISABLED         Set truthy to disable ping/idle checks.
+ *   NODETOOL_WS_PING_INTERVAL_MS        Ping cadence (default 20000).
+ *   NODETOOL_WS_IDLE_TIMEOUT_MS         Silence before the peer is dropped (default 70000).
+ *   NODETOOL_WS_MAX_BUFFERED_BYTES      Outbound buffer before sends wait (default 8388608).
+ *   NODETOOL_WS_DRAIN_TIMEOUT_MS        How long a send waits for drain (default 30000).
+ *   NODETOOL_WS_MAX_QUEUED_FRAMES       Undelivered inbound frames before close (default 2000).
+ */
+import { parseIntEnv, parseBoolEnv } from "./env-config.js";
+export function getWsConnectionHealthConfig() {
+    return {
+        enabled: !parseBoolEnv("NODETOOL_WS_HEALTH_DISABLED"),
+        pingIntervalMs: parseIntEnv("NODETOOL_WS_PING_INTERVAL_MS", 20_000),
+        // Above the client's own 45s silence threshold, so the client gets to
+        // notice and reconnect on its own before the server gives up on it.
+        idleTimeoutMs: parseIntEnv("NODETOOL_WS_IDLE_TIMEOUT_MS", 70_000),
+        maxBufferedBytes: parseIntEnv("NODETOOL_WS_MAX_BUFFERED_BYTES", 8 * 1024 * 1024),
+        drainTimeoutMs: parseIntEnv("NODETOOL_WS_DRAIN_TIMEOUT_MS", 30_000),
+        maxQueuedFrames: parseIntEnv("NODETOOL_WS_MAX_QUEUED_FRAMES", 2000)
+    };
+}
+//# sourceMappingURL=ws-connection-health.js.map

package/dist/lib/ws-connection-health.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ws-connection-health.js","sourceRoot":"","sources":["../../src/lib/ws-connection-health.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAW5D,MAAM,UAAU,2BAA2B;IACzC,OAAO;QACL,OAAO,EAAE,CAAC,YAAY,CAAC,6BAA6B,CAAC;QACrD,cAAc,EAAE,WAAW,CAAC,8BAA8B,EAAE,MAAM,CAAC;QACnE,sEAAsE;QACtE,oEAAoE;QACpE,aAAa,EAAE,WAAW,CAAC,6BAA6B,EAAE,MAAM,CAAC;QACjE,gBAAgB,EAAE,WAAW,CAAC,gCAAgC,EAAE,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC;QAChF,cAAc,EAAE,WAAW,CAAC,8BAA8B,EAAE,MAAM,CAAC;QACnE,eAAe,EAAE,WAAW,CAAC,+BAA+B,EAAE,IAAI,CAAC;KACpE,CAAC;AACJ,CAAC"}

package/dist/lib/ws-rate-limit.d.ts

@@ -0,0 +1,22 @@
+interface WsRateLimitConfig {
+    enabled: boolean;
+    maxMessages: number;
+    windowMs: number;
+}
+export declare function getWsRateLimitConfig(): WsRateLimitConfig;
+/**
+ * Fixed-window message counter. O(1) per check, one instance per connection.
+ */
+export declare class WsMessageRateLimiter {
+    private readonly config;
+    private windowStart;
+    private count;
+    constructor(config?: WsRateLimitConfig);
+    /**
+     * Record one inbound message. Returns false once the cap for the current
+     * window is exceeded, signalling the caller to drop or close the connection.
+     */
+    allow(now?: number): boolean;
+}
+export {};
+//# sourceMappingURL=ws-rate-limit.d.ts.map

package/dist/lib/ws-rate-limit.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ws-rate-limit.d.ts","sourceRoot":"","sources":["../../src/lib/ws-rate-limit.ts"],"names":[],"mappings":"AAaA,UAAU,iBAAiB;IACzB,OAAO,EAAE,OAAO,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,wBAAgB,oBAAoB,IAAI,iBAAiB,CAMxD;AAED;;GAEG;AACH,qBAAa,oBAAoB;IAK7B,OAAO,CAAC,QAAQ,CAAC,MAAM;IAJzB,OAAO,CAAC,WAAW,CAAK;IACxB,OAAO,CAAC,KAAK,CAAK;IAElB,YACmB,MAAM,GAAE,iBAA0C,EACjE;IAEJ;;;OAGG;IACH,KAAK,CAAC,GAAG,GAAE,MAAmB,GAAG,OAAO,CAQvC;CACF"}

package/dist/lib/ws-rate-limit.js

@@ -0,0 +1,45 @@
+/**
+ * Per-connection WebSocket message rate cap.
+ *
+ * Bounds how fast a single client can push inbound frames at the server, blunting
+ * message-flood DoS on the long-lived /ws socket (which sits past the one-time
+ * HTTP handshake the per-IP HTTP limiter sees). Tunable via:
+ *
+ *   NODETOOL_WS_RATE_LIMIT_DISABLED    Set truthy to turn the cap off.
+ *   NODETOOL_WS_RATE_LIMIT_MAX         Max inbound messages per window (default 200).
+ *   NODETOOL_WS_RATE_LIMIT_WINDOW_MS   Window length in ms (default 1000).
+ */
+import { parseIntEnv, parseBoolEnv } from "./env-config.js";
+export function getWsRateLimitConfig() {
+    return {
+        enabled: !parseBoolEnv("NODETOOL_WS_RATE_LIMIT_DISABLED"),
+        maxMessages: parseIntEnv("NODETOOL_WS_RATE_LIMIT_MAX", 200),
+        windowMs: parseIntEnv("NODETOOL_WS_RATE_LIMIT_WINDOW_MS", 1000)
+    };
+}
+/**
+ * Fixed-window message counter. O(1) per check, one instance per connection.
+ */
+export class WsMessageRateLimiter {
+    config;
+    windowStart = 0;
+    count = 0;
+    constructor(config = getWsRateLimitConfig()) {
+        this.config = config;
+    }
+    /**
+     * Record one inbound message. Returns false once the cap for the current
+     * window is exceeded, signalling the caller to drop or close the connection.
+     */
+    allow(now = Date.now()) {
+        if (!this.config.enabled)
+            return true;
+        if (now - this.windowStart >= this.config.windowMs) {
+            this.windowStart = now;
+            this.count = 0;
+        }
+        this.count += 1;
+        return this.count <= this.config.maxMessages;
+    }
+}
+//# sourceMappingURL=ws-rate-limit.js.map

package/dist/lib/ws-rate-limit.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ws-rate-limit.js","sourceRoot":"","sources":["../../src/lib/ws-rate-limit.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAQ5D,MAAM,UAAU,oBAAoB;IAClC,OAAO;QACL,OAAO,EAAE,CAAC,YAAY,CAAC,iCAAiC,CAAC;QACzD,WAAW,EAAE,WAAW,CAAC,4BAA4B,EAAE,GAAG,CAAC;QAC3D,QAAQ,EAAE,WAAW,CAAC,kCAAkC,EAAE,IAAI,CAAC;KAChE,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,OAAO,oBAAoB;IAKZ,MAAM;IAJjB,WAAW,GAAG,CAAC,CAAC;IAChB,KAAK,GAAG,CAAC,CAAC;IAElB,YACmB,MAAM,GAAsB,oBAAoB,EAAE;sBAAlD,MAAM;IACtB,CAAC;IAEJ;;;OAGG;IACH,KAAK,CAAC,GAAG,GAAW,IAAI,CAAC,GAAG,EAAE;QAC5B,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO;YAAE,OAAO,IAAI,CAAC;QACtC,IAAI,GAAG,GAAG,IAAI,CAAC,WAAW,IAAI,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC;YACnD,IAAI,CAAC,WAAW,GAAG,GAAG,CAAC;YACvB,IAAI,CAAC,KAAK,GAAG,CAAC,CAAC;QACjB,CAAC;QACD,IAAI,CAAC,KAAK,IAAI,CAAC,CAAC;QAChB,OAAO,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC;IAC/C,CAAC;CACF"}

package/dist/lib/ws-upgrade.d.ts

@@ -0,0 +1,40 @@
+import type { FastifyReply, FastifyRequest } from "fastify";
+/** True when this request is a WebSocket handshake rather than a plain call. */
+export declare function isWebSocketUpgrade(req: FastifyRequest): boolean;
+/**
+ * Refuse a request with 401, closing the connection when it is a WebSocket
+ * handshake.
+ *
+ * An upgrade cannot be refused through `reply.send()`. @fastify/websocket
+ * dispatches the handshake through the normal Fastify stack against a
+ * `ServerResponse` it assigned to the raw socket by hand, so that socket is
+ * outside the HTTP server's connection bookkeeping: writing a response to it
+ * closes nothing. The plugin does clean up after a refused upgrade, but from an
+ * `onResponse` hook gated on the `request.ws` flag its own `onRequest` hook
+ * sets — and hooks run in registration order, so an auth hook registered before
+ * the plugin short-circuits first and that cleanup never runs.
+ *
+ * The socket then outlives the request. The peer goes away, it parks in
+ * CLOSE_WAIT, and its descriptor is never released — one leaked fd per rejected
+ * connect. A client retrying a stale token exhausts the process's fd limit in
+ * hours, after which `accept()` fails and the server resets every incoming
+ * connection, health checks included.
+ *
+ * So answer the handshake on the socket and destroy it. `reply.hijack()` takes
+ * the request out of Fastify's lifecycle first, since we own the response from
+ * that point on.
+ */
+export declare function denyUnauthorized(req: FastifyRequest, reply: FastifyReply, body: {
+    error: string;
+}, challenge?: string): void;
+/**
+ * Refuse a WebSocket handshake with 503 while the process is draining, using
+ * the same socket-level answer {@link denyUnauthorized} documents — an upgrade
+ * cannot be refused through `reply.send()`, and a response written to the
+ * hijacked socket without destroying it leaks the descriptor.
+ *
+ * The client's own reconnect backoff then lands on a machine whose health
+ * check still passes.
+ */
+export declare function denyDraining(req: FastifyRequest, reply: FastifyReply): void;
+//# sourceMappingURL=ws-upgrade.d.ts.map

package/dist/lib/ws-upgrade.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ws-upgrade.d.ts","sourceRoot":"","sources":["../../src/lib/ws-upgrade.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,SAAS,CAAC;AAE5D,gFAAgF;AAChF,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,cAAc,GAAG,OAAO,CAE/D;AAED;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,wBAAgB,gBAAgB,CAC9B,GAAG,EAAE,cAAc,EACnB,KAAK,EAAE,YAAY,EACnB,IAAI,EAAE;IAAE,KAAK,EAAE,MAAM,CAAA;CAAE,EACvB,SAAS,CAAC,EAAE,MAAM,GACjB,IAAI,CAoBN;AAED;;;;;;;;GAQG;AACH,wBAAgB,YAAY,CAAC,GAAG,EAAE,cAAc,EAAE,KAAK,EAAE,YAAY,GAAG,IAAI,CAY3E"}

package/dist/lib/ws-upgrade.js

@@ -0,0 +1,66 @@
+/** True when this request is a WebSocket handshake rather than a plain call. */
+export function isWebSocketUpgrade(req) {
+    return req.headers["upgrade"]?.toLowerCase() === "websocket";
+}
+/**
+ * Refuse a request with 401, closing the connection when it is a WebSocket
+ * handshake.
+ *
+ * An upgrade cannot be refused through `reply.send()`. @fastify/websocket
+ * dispatches the handshake through the normal Fastify stack against a
+ * `ServerResponse` it assigned to the raw socket by hand, so that socket is
+ * outside the HTTP server's connection bookkeeping: writing a response to it
+ * closes nothing. The plugin does clean up after a refused upgrade, but from an
+ * `onResponse` hook gated on the `request.ws` flag its own `onRequest` hook
+ * sets — and hooks run in registration order, so an auth hook registered before
+ * the plugin short-circuits first and that cleanup never runs.
+ *
+ * The socket then outlives the request. The peer goes away, it parks in
+ * CLOSE_WAIT, and its descriptor is never released — one leaked fd per rejected
+ * connect. A client retrying a stale token exhausts the process's fd limit in
+ * hours, after which `accept()` fails and the server resets every incoming
+ * connection, health checks included.
+ *
+ * So answer the handshake on the socket and destroy it. `reply.hijack()` takes
+ * the request out of Fastify's lifecycle first, since we own the response from
+ * that point on.
+ */
+export function denyUnauthorized(req, reply, body, challenge) {
+    if (!isWebSocketUpgrade(req)) {
+        if (challenge) {
+            reply.header("WWW-Authenticate", challenge);
+        }
+        reply.status(401).send(body);
+        return;
+    }
+    reply.hijack();
+    const socket = req.raw.socket;
+    if (!socket || socket.destroyed)
+        return;
+    socket.write("HTTP/1.1 401 Unauthorized\r\n" +
+        "Connection: close\r\n" +
+        "Content-Length: 0\r\n" +
+        "\r\n");
+    socket.destroy();
+}
+/**
+ * Refuse a WebSocket handshake with 503 while the process is draining, using
+ * the same socket-level answer {@link denyUnauthorized} documents — an upgrade
+ * cannot be refused through `reply.send()`, and a response written to the
+ * hijacked socket without destroying it leaks the descriptor.
+ *
+ * The client's own reconnect backoff then lands on a machine whose health
+ * check still passes.
+ */
+export function denyDraining(req, reply) {
+    reply.hijack();
+    const socket = req.raw.socket;
+    if (!socket || socket.destroyed)
+        return;
+    socket.write("HTTP/1.1 503 Service Unavailable\r\n" +
+        "Connection: close\r\n" +
+        "Content-Length: 0\r\n" +
+        "\r\n");
+    socket.destroy();
+}
+//# sourceMappingURL=ws-upgrade.js.map

package/dist/lib/ws-upgrade.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ws-upgrade.js","sourceRoot":"","sources":["../../src/lib/ws-upgrade.ts"],"names":[],"mappings":"AAEA,gFAAgF;AAChF,MAAM,UAAU,kBAAkB,CAAC,GAAmB;IACpD,OAAO,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,WAAW,EAAE,KAAK,WAAW,CAAC;AAC/D,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,MAAM,UAAU,gBAAgB,CAC9B,GAAmB,EACnB,KAAmB,EACnB,IAAuB,EACvB,SAAkB;IAElB,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,EAAE,CAAC;QAC7B,IAAI,SAAS,EAAE,CAAC;YACd,KAAK,CAAC,MAAM,CAAC,kBAAkB,EAAE,SAAS,CAAC,CAAC;QAC9C,CAAC;QACD,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC7B,OAAO;IACT,CAAC;IAED,KAAK,CAAC,MAAM,EAAE,CAAC;IAEf,MAAM,MAAM,GAAG,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC;IAC9B,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,SAAS;QAAE,OAAO;IACxC,MAAM,CAAC,KAAK,CACV,+BAA+B;QAC7B,uBAAuB;QACvB,uBAAuB;QACvB,MAAM,CACT,CAAC;IACF,MAAM,CAAC,OAAO,EAAE,CAAC;AACnB,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,YAAY,CAAC,GAAmB,EAAE,KAAmB;IACnE,KAAK,CAAC,MAAM,EAAE,CAAC;IAEf,MAAM,MAAM,GAAG,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC;IAC9B,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,SAAS;QAAE,OAAO;IACxC,MAAM,CAAC,KAAK,CACV,sCAAsC;QACpC,uBAAuB;QACvB,uBAAuB;QACvB,MAAM,CACT,CAAC;IACF,MAAM,CAAC,OAAO,EAAE,CAAC;AACnB,CAAC"}

package/dist/lib/zip-stream.d.ts

@@ -0,0 +1,46 @@
+import { Readable } from "node:stream";
+/** A local file to read in place. */
+export interface LocalFileSource {
+    path: string;
+    size: number;
+}
+/** What an export entry reads from: bytes in memory or a local file. */
+export type ExportSource = Uint8Array | LocalFileSource;
+/** Largest entry fflate can write without Zip64. */
+export declare const MAX_ZIP_ENTRY_BYTES = 4294967295;
+export declare function isLocalFileSource(source: ExportSource): source is LocalFileSource;
+export declare function exportSourceSize(source: ExportSource): number;
+/** Hex sha256 of `source`, streaming a local file. */
+export declare function sha256OfSource(source: ExportSource): Promise<string>;
+/** Receives archive chunks in order and resolves when it can take more. */
+export type ZipChunkSink = (chunk: Uint8Array) => Promise<void>;
+/**
+ * Writes zip entries one after another to a sink, waiting on the sink between
+ * chunks so a slow reader holds back the file reads.
+ */
+export declare class ZipStreamWriter {
+    private readonly sink;
+    private readonly zip;
+    private pending;
+    private failure;
+    constructor(sink: ZipChunkSink);
+    private flush;
+    /**
+     * Add one entry. `compress` deflates it, which suits text; media is already
+     * compressed and is stored as-is.
+     */
+    add(name: string, source: ExportSource, options?: {
+        compress?: boolean;
+    }): Promise<void>;
+    /** Write the central directory. No entry may be added afterwards. */
+    finish(): Promise<void>;
+}
+/** Run `write` against a writer that collects the whole archive in memory. */
+export declare function collectZip(write: (writer: ZipStreamWriter) => Promise<void>): Promise<Uint8Array>;
+/**
+ * A readable stream of the archive `write` produces. Writing starts at once
+ * and waits whenever the reader falls behind; a failure or a reader that goes
+ * away destroys the stream, which ends the download early.
+ */
+export declare function streamZip(write: (writer: ZipStreamWriter) => Promise<void>): Readable;
+//# sourceMappingURL=zip-stream.d.ts.map

package/dist/lib/zip-stream.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"zip-stream.d.ts","sourceRoot":"","sources":["../../src/lib/zip-stream.ts"],"names":[],"mappings":"AAeA,OAAO,EAAe,QAAQ,EAAE,MAAM,aAAa,CAAC;AAGpD,qCAAqC;AACrC,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;CACd;AAED,wEAAwE;AACxE,MAAM,MAAM,YAAY,GAAG,UAAU,GAAG,eAAe,CAAC;AAExD,oDAAoD;AACpD,eAAO,MAAM,mBAAmB,aAAc,CAAC;AAE/C,wBAAgB,iBAAiB,CAC/B,MAAM,EAAE,YAAY,GACnB,MAAM,IAAI,eAAe,CAE3B;AAED,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,YAAY,GAAG,MAAM,CAE7D;AAaD,sDAAsD;AACtD,wBAAsB,cAAc,CAAC,MAAM,EAAE,YAAY,GAAG,OAAO,CAAC,MAAM,CAAC,CAM1E;AAED,2EAA2E;AAC3E,MAAM,MAAM,YAAY,GAAG,CAAC,KAAK,EAAE,UAAU,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;AAEhE;;;GAGG;AACH,qBAAa,eAAe;IAKd,OAAO,CAAC,QAAQ,CAAC,IAAI;IAJjC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAM;IAC1B,OAAO,CAAC,OAAO,CAAoB;IACnC,OAAO,CAAC,OAAO,CAAsB;IAErC,YAA6B,IAAI,EAAE,YAAY,EAQ9C;YAEa,KAAK;IAQnB;;;OAGG;IACG,GAAG,CACP,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,YAAY,EACpB,OAAO,GAAE;QAAE,QAAQ,CAAC,EAAE,OAAO,CAAA;KAAO,GACnC,OAAO,CAAC,IAAI,CAAC,CAWf;IAED,qEAAqE;IAC/D,MAAM,IAAI,OAAO,CAAC,IAAI,CAAC,CAG5B;CACF;AAED,8EAA8E;AAC9E,wBAAsB,UAAU,CAC9B,KAAK,EAAE,CAAC,MAAM,EAAE,eAAe,KAAK,OAAO,CAAC,IAAI,CAAC,GAChD,OAAO,CAAC,UAAU,CAAC,CAQrB;AAED;;;;GAIG;AACH,wBAAgB,SAAS,CACvB,KAAK,EAAE,CAAC,MAAM,EAAE,eAAe,KAAK,OAAO,CAAC,IAAI,CAAC,GAChD,QAAQ,CAgCV"}