@opengeni/contracts 0.50.0 → 1.0.0

package/dist/chunk-2VORLN2R.js

@@ -0,0 +1,353 @@
+// src/modal-native-proof-v2.ts
+import { z as z2 } from "zod";
+
+// src/sandbox-provider-command.ts
+import { z } from "zod";
+var ModalOutputCursor = z.object({
+  batchIndex: z.number().int().nonnegative().safe(),
+  utf8Remainder: z.string().max(8).regex(/^[A-Za-z0-9+/]*={0,2}$/u),
+  exitCode: z.number().int().nullable()
+}).strict();
+var ModalLegacyProviderCommand = z.object({
+  kind: z.literal("modal-control-v1"),
+  sandboxId: z.string().min(1).max(200),
+  taskId: z.string().min(1).max(200),
+  execId: z.string().min(1).max(200),
+  pty: z.boolean().optional(),
+  streams: z.object({ stdout: ModalOutputCursor, stderr: ModalOutputCursor }).strict()
+}).strict();
+var ModalByteCursor = z.object({
+  byteOffset: z.number().int().nonnegative().safe(),
+  utf8Remainder: z.string().max(8).regex(/^[A-Za-z0-9+/]*={0,2}$/u),
+  eof: z.boolean(),
+  exitCode: z.number().int().nullable()
+}).strict().refine((cursor) => cursor.exitCode === null || cursor.eof, {
+  message: "A terminal output cursor must have reached EOF"
+});
+var CommandSupervisionDescriptor = z.object({
+  protocol: z.literal("native-subreaper-v1"),
+  invocationId: z.string().uuid(),
+  nonce: z.string().regex(/^[a-f0-9]{64}$/u),
+  controlPath: z.string().regex(/^\/tmp\/opengeni-supervision\/[a-f0-9-]{36}\.sock$/u)
+}).strict();
+var CommandSupervisionReceipt = z.object({
+  protocol: z.literal("native-subreaper-v1"),
+  invocationId: z.string().uuid(),
+  receiptId: z.string().uuid(),
+  leaderExitCode: z.number().int()
+}).strict();
+var ModalRouterProviderCommand = z.object({
+  kind: z.literal("modal-router-v1"),
+  sandboxId: z.string().min(1).max(200),
+  taskId: z.string().min(1).max(200),
+  execId: z.string().uuid(),
+  pty: z.boolean().optional(),
+  supervision: CommandSupervisionDescriptor.optional(),
+  streams: z.object({ stdout: ModalByteCursor, stderr: ModalByteCursor }).strict()
+}).strict();
+var SandboxProviderCommand = z.discriminatedUnion("kind", [
+  ModalLegacyProviderCommand,
+  ModalRouterProviderCommand
+]);
+
+// src/modal-native-proof-v2.ts
+var MODAL_NATIVE_PROOF_PROTOCOL_VERSION = 2;
+var MODAL_NATIVE_FRESH_COMPILER_FINGERPRINT = "db6d33c8a1142e5ffe3d1a130d8b9f9d819e46832ad0417d41d5606b7fe25ab1";
+var uuid = z2.string().regex(/^[a-f0-9]{8}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{12}$/u);
+var commandExecId = uuid.pipe(ModalRouterProviderCommand.shape.execId);
+var positive = z2.number().int().positive().safe();
+var nonnegative = z2.number().int().nonnegative().safe();
+var digest = z2.string().regex(/^[a-f0-9]{64}$/u);
+var empty = z2.object({}).strict();
+var noItems = z2.tuple([]);
+var entrypoint = z2.tuple([z2.literal("sleep"), z2.literal("infinity")]);
+var sourceSha = "bb830ded1925e1d927d1fc221b2329d961f9a57eafdd9a85bf13fb7cfc982599";
+var ModalNativeFreshNormalizationV1 = z2.object({
+  recipeId: z2.literal("modal-native-fresh-v1"),
+  recipeRevision: z2.literal(1),
+  schema: z2.literal("modal.client.ModalClient/SandboxCreate"),
+  encoding: z2.literal("modal-create-json-v1"),
+  sdkVersion: z2.literal("0.9.0"),
+  sdkSourceSha256: z2.literal(sourceSha),
+  entrypoint,
+  createWorkdir: z2.literal("/tmp"),
+  env: empty,
+  mounts: noItems,
+  restore: z2.null(),
+  idleTimeout: z2.literal("unset"),
+  gpu: z2.literal("unset"),
+  gpuProto: z2.object({ type: z2.literal(0), count: z2.literal(0), gpuType: z2.literal("") }).strict(),
+  cpuLimit: z2.literal("unset"),
+  memoryLimit: z2.literal("unset"),
+  pty: z2.literal("unset"),
+  regions: z2.literal("unset"),
+  proxy: z2.literal("unset"),
+  readinessProbe: z2.literal("unset"),
+  environmentVariables: z2.literal("unset"),
+  network: z2.object({
+    access: z2.literal("OPEN"),
+    outboundCidrs: noItems,
+    outboundDomains: noItems,
+    inboundCidrs: noItems,
+    i6pn: z2.literal(false)
+  }).strict(),
+  volumes: noItems,
+  cloudBucketMounts: noItems,
+  secrets: noItems,
+  ports: noItems,
+  cloud: z2.literal(""),
+  verbose: z2.literal(false),
+  includeOidcIdentityToken: z2.literal(false),
+  experimentalOptions: empty,
+  experimentalOptionsV2: empty,
+  customDomain: z2.literal("")
+}).strict();
+function freezeLiteral(value) {
+  if (value !== null && typeof value === "object") {
+    for (const child of Object.values(value)) freezeLiteral(child);
+    Object.freeze(value);
+  }
+  return value;
+}
+var MODAL_NATIVE_FRESH_NORMALIZATION_V1 = freezeLiteral(
+  ModalNativeFreshNormalizationV1.parse({
+    recipeId: "modal-native-fresh-v1",
+    recipeRevision: 1,
+    schema: "modal.client.ModalClient/SandboxCreate",
+    encoding: "modal-create-json-v1",
+    sdkVersion: "0.9.0",
+    sdkSourceSha256: sourceSha,
+    entrypoint: ["sleep", "infinity"],
+    createWorkdir: "/tmp",
+    env: {},
+    mounts: [],
+    restore: null,
+    idleTimeout: "unset",
+    gpu: "unset",
+    gpuProto: { type: 0, count: 0, gpuType: "" },
+    cpuLimit: "unset",
+    memoryLimit: "unset",
+    pty: "unset",
+    regions: "unset",
+    proxy: "unset",
+    readinessProbe: "unset",
+    environmentVariables: "unset",
+    network: {
+      access: "OPEN",
+      outboundCidrs: [],
+      outboundDomains: [],
+      inboundCidrs: [],
+      i6pn: false
+    },
+    volumes: [],
+    cloudBucketMounts: [],
+    secrets: [],
+    ports: [],
+    cloud: "",
+    verbose: false,
+    includeOidcIdentityToken: false,
+    experimentalOptions: {},
+    experimentalOptionsV2: {},
+    customDomain: ""
+  })
+);
+var ModalNativePreparationRecipeV2 = z2.object({
+  version: z2.literal(1),
+  recipeId: z2.literal("modal-native-fresh-v1"),
+  recipeRevision: z2.literal(1),
+  createWorkdir: z2.literal("/tmp"),
+  entrypoint,
+  normalization: ModalNativeFreshNormalizationV1,
+  compilerFingerprint: z2.literal(MODAL_NATIVE_FRESH_COMPILER_FINGERPRINT)
+}).strict();
+var MODAL_NATIVE_PREPARATION_RECIPE_V2 = freezeLiteral(
+  ModalNativePreparationRecipeV2.parse({
+    version: 1,
+    recipeId: "modal-native-fresh-v1",
+    recipeRevision: 1,
+    createWorkdir: "/tmp",
+    entrypoint: ["sleep", "infinity"],
+    normalization: MODAL_NATIVE_FRESH_NORMALIZATION_V1,
+    compilerFingerprint: MODAL_NATIVE_FRESH_COMPILER_FINGERPRINT
+  })
+);
+var ModalNativeFreshBlueprintV1 = z2.object({
+  version: z2.literal(1),
+  adapterId: z2.literal("modal-native-fresh-creator-reservation-v1"),
+  create: z2.object({
+    operationId: uuid,
+    appId: z2.string().regex(/^ap-[A-Za-z0-9_-]{1,200}$/u),
+    imageId: z2.string().regex(/^im-[A-Za-z0-9_-]{1,200}$/u),
+    cpu: z2.number().positive().max(128).refine(
+      (v) => Number.isSafeInteger(Math.trunc(v * 1e3)) && Math.trunc(v * 1e3) >= 1 && Math.trunc(v * 1e3) / 1e3 === v
+    ),
+    memoryMiB: z2.number().int().min(128).max(1048576).safe(),
+    timeoutSeconds: z2.number().int().min(1).max(86400).safe(),
+    env: empty,
+    mounts: noItems
+  }).strict(),
+  restore: z2.null(),
+  readiness: z2.object({
+    operationId: uuid,
+    execId: commandExecId,
+    commandArgs: z2.tuple([z2.literal("/bin/true")]),
+    workdir: z2.literal("/tmp"),
+    env: empty
+  }).strict(),
+  publishOperationId: uuid,
+  cleanup: z2.object({ operationId: uuid, requires: z2.literal("physical-terminal-proof") }).strict()
+}).strict();
+var ModalNativeOriginalScopeV2 = z2.object({
+  version: z2.literal(2),
+  declarationId: uuid,
+  planId: uuid,
+  creatorId: uuid,
+  accountId: uuid,
+  workspaceId: uuid,
+  sessionId: uuid,
+  turnId: uuid,
+  attemptId: uuid,
+  executionGeneration: positive,
+  triggerEventId: uuid,
+  sandboxGroupId: uuid,
+  routeKind: z2.literal("home"),
+  routeTargetId: z2.null(),
+  routeEpoch: nonnegative
+}).strict().refine((v) => v.creatorId !== v.attemptId && v.creatorId !== v.planId, {
+  message: "A declared creator is distinct from the accepted attempt and plan"
+});
+var ModalNativeConfigurationCaptureRefV2 = z2.object({ id: uuid, revision: positive }).strict();
+var ModalNativeProofGrantRefV2 = z2.object({ id: uuid, epoch: positive }).strict();
+var ModalNativeReservedLeaseRefV2 = z2.object({ id: uuid, epoch: nonnegative }).strict();
+var ModalNativePreparationDeclarationV2 = z2.object({
+  version: z2.literal(2),
+  scope: ModalNativeOriginalScopeV2,
+  blueprint: ModalNativeFreshBlueprintV1,
+  preparationRecipe: ModalNativePreparationRecipeV2,
+  configurationCaptureRef: ModalNativeConfigurationCaptureRefV2,
+  proofGrantRef: ModalNativeProofGrantRefV2,
+  providerRecoveryCount: z2.union([
+    z2.literal(0),
+    z2.literal(1),
+    z2.literal(2),
+    z2.literal(3),
+    z2.literal(4),
+    z2.literal(5)
+  ]),
+  namespaceState: z2.literal("unbound")
+}).strict().superRefine((v, ctx) => {
+  const ids = [
+    v.scope.planId,
+    v.scope.creatorId,
+    v.blueprint.create.operationId,
+    v.blueprint.readiness.operationId,
+    v.blueprint.readiness.execId,
+    v.blueprint.publishOperationId,
+    v.blueprint.cleanup.operationId
+  ];
+  if (new Set(ids).size !== 7)
+    ctx.addIssue({
+      code: "custom",
+      message: "All seven supplied operation identities must be distinct"
+    });
+});
+var safeEndpoint = z2.string().url().max(1024).refine(
+  (v) => {
+    try {
+      const url = new URL(v);
+      return url.protocol === "https:" && !url.username && !url.password && !url.search && !url.hash;
+    } catch {
+      return false;
+    }
+  },
+  { message: "Only a credential-free captured HTTPS endpoint is supported" }
+);
+var ModalNativeNamespaceEvidenceV2 = z2.object({
+  version: z2.literal(2),
+  scope: ModalNativeOriginalScopeV2,
+  configurationCaptureRef: ModalNativeConfigurationCaptureRefV2,
+  proofGrantRef: ModalNativeProofGrantRefV2,
+  claimId: uuid,
+  nonce: uuid,
+  claimRevision: positive,
+  recordRevision: positive,
+  captureId: uuid,
+  purpose: z2.literal("original-namespace-read"),
+  reservation: ModalNativeReservedLeaseRefV2,
+  source: z2.literal("modal-client-workspace-name-lookup-v1"),
+  responseField: z2.enum(["workspaceName", "username"]),
+  binding: z2.object({
+    version: z2.literal(1),
+    serverUrl: safeEndpoint,
+    workspaceName: z2.string().min(1).max(200),
+    environment: z2.string().max(200)
+  }).strict()
+}).strict();
+var claimFields = {
+  version: z2.literal(2),
+  scope: ModalNativeOriginalScopeV2,
+  configurationCaptureRef: ModalNativeConfigurationCaptureRefV2,
+  proofGrantRef: ModalNativeProofGrantRefV2,
+  claimId: uuid,
+  nonce: uuid,
+  claimRevision: positive,
+  recordRevision: positive,
+  captureId: uuid,
+  expiresAt: z2.string().datetime()
+};
+var ModalNativeNamespaceReadClaimV2 = z2.object({
+  ...claimFields,
+  purpose: z2.literal("original-namespace-read"),
+  reservation: ModalNativeReservedLeaseRefV2
+}).strict();
+var ModalNativeOriginalCommandReadClaimV2 = z2.object({
+  ...claimFields,
+  purpose: z2.literal("original-readiness-read"),
+  reservation: ModalNativeReservedLeaseRefV2,
+  physicalOwnerGeneration: positive,
+  operationId: uuid,
+  providerBindingKey: z2.string().min(1).max(1024),
+  command: ModalRouterProviderCommand.refine((v) => v.pty !== true)
+}).strict();
+var ModalNativePreparedStartDescriptionV1 = z2.object({
+  taskId: z2.string().min(1).max(200),
+  execId: commandExecId,
+  descriptorProtocol: z2.literal("modal-prepared-start-descriptor"),
+  descriptorVersion: z2.literal(1),
+  readinessRecipe: z2.literal("modal-exec-readiness-bin-true-v1"),
+  readinessRecipeVersion: z2.literal(1),
+  startMessage: z2.literal("Start"),
+  rpcMethod: z2.literal("/modal.task_command_router.TaskCommandRouter/TaskExecStart"),
+  encoderVersion: z2.literal("protobufjs@7.6.5"),
+  preflight: z2.object({
+    encoding: z2.literal("modal-start-protobuf-preflight-v1"),
+    sha256: digest,
+    byteLength: positive.max(1024 * 1024),
+    encoderFingerprint: z2.string().regex(/^sha256:[a-f0-9]{64}$/u)
+  }).strict()
+}).strict();
+
+export {
+  ModalLegacyProviderCommand,
+  CommandSupervisionDescriptor,
+  CommandSupervisionReceipt,
+  ModalRouterProviderCommand,
+  SandboxProviderCommand,
+  MODAL_NATIVE_PROOF_PROTOCOL_VERSION,
+  MODAL_NATIVE_FRESH_COMPILER_FINGERPRINT,
+  ModalNativeFreshNormalizationV1,
+  MODAL_NATIVE_FRESH_NORMALIZATION_V1,
+  ModalNativePreparationRecipeV2,
+  MODAL_NATIVE_PREPARATION_RECIPE_V2,
+  ModalNativeFreshBlueprintV1,
+  ModalNativeOriginalScopeV2,
+  ModalNativeConfigurationCaptureRefV2,
+  ModalNativeProofGrantRefV2,
+  ModalNativeReservedLeaseRefV2,
+  ModalNativePreparationDeclarationV2,
+  ModalNativeNamespaceEvidenceV2,
+  ModalNativeNamespaceReadClaimV2,
+  ModalNativeOriginalCommandReadClaimV2,
+  ModalNativePreparedStartDescriptionV1
+};
+//# sourceMappingURL=chunk-2VORLN2R.js.map

package/dist/chunk-2VORLN2R.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/modal-native-proof-v2.ts","../src/sandbox-provider-command.ts"],"sourcesContent":["import { z } from \"zod\";\nimport { ModalRouterProviderCommand } from \"./sandbox-provider-command\";\n\n/** Secret-free descriptions for the NEW native proof protocol. Parsing any\n * value below establishes correlation ONLY. It does not authenticate a host,\n * native response, grant, election, capture, Start, or semantic continuation.\n * Frozen reservation/journal v1 values are never adopted into this protocol. */\nexport const MODAL_NATIVE_PROOF_PROTOCOL_VERSION = 2 as const;\nexport const MODAL_NATIVE_FRESH_COMPILER_FINGERPRINT =\n  \"db6d33c8a1142e5ffe3d1a130d8b9f9d819e46832ad0417d41d5606b7fe25ab1\" as const;\n\nconst uuid = z.string().regex(/^[a-f0-9]{8}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{12}$/u);\n// Fresh readiness must round-trip through the retained original-command schema.\n// Reuse its exact UUID domain; do not widen it or change the frozen compiler.\nconst commandExecId = uuid.pipe(ModalRouterProviderCommand.shape.execId);\nconst positive = z.number().int().positive().safe();\nconst nonnegative = z.number().int().nonnegative().safe();\nconst digest = z.string().regex(/^[a-f0-9]{64}$/u);\nconst empty = z.object({}).strict();\nconst noItems = z.tuple([]);\nconst entrypoint = z.tuple([z.literal(\"sleep\"), z.literal(\"infinity\")]);\nconst sourceSha = \"bb830ded1925e1d927d1fc221b2329d961f9a57eafdd9a85bf13fb7cfc982599\";\n\n/** This entire profile is declared BEFORE even namespace lookup. It is a\n * reviewed literal, not caller-selected defaults or an arbitrary self-hash. */\nexport const ModalNativeFreshNormalizationV1 = z\n  .object({\n    recipeId: z.literal(\"modal-native-fresh-v1\"),\n    recipeRevision: z.literal(1),\n    schema: z.literal(\"modal.client.ModalClient/SandboxCreate\"),\n    encoding: z.literal(\"modal-create-json-v1\"),\n    sdkVersion: z.literal(\"0.9.0\"),\n    sdkSourceSha256: z.literal(sourceSha),\n    entrypoint,\n    createWorkdir: z.literal(\"/tmp\"),\n    env: empty,\n    mounts: noItems,\n    restore: z.null(),\n    idleTimeout: z.literal(\"unset\"),\n    gpu: z.literal(\"unset\"),\n    gpuProto: z\n      .object({ type: z.literal(0), count: z.literal(0), gpuType: z.literal(\"\") })\n      .strict(),\n    cpuLimit: z.literal(\"unset\"),\n    memoryLimit: z.literal(\"unset\"),\n    pty: z.literal(\"unset\"),\n    regions: z.literal(\"unset\"),\n    proxy: z.literal(\"unset\"),\n    readinessProbe: z.literal(\"unset\"),\n    environmentVariables: z.literal(\"unset\"),\n    network: z\n      .object({\n        access: z.literal(\"OPEN\"),\n        outboundCidrs: noItems,\n        outboundDomains: noItems,\n        inboundCidrs: noItems,\n        i6pn: z.literal(false),\n      })\n      .strict(),\n    volumes: noItems,\n    cloudBucketMounts: noItems,\n    secrets: noItems,\n    ports: noItems,\n    cloud: z.literal(\"\"),\n    verbose: z.literal(false),\n    includeOidcIdentityToken: z.literal(false),\n    experimentalOptions: empty,\n    experimentalOptionsV2: empty,\n    customDomain: z.literal(\"\"),\n  })\n  .strict();\nexport type ModalNativeFreshNormalizationV1 = z.infer<typeof ModalNativeFreshNormalizationV1>;\n\nfunction freezeLiteral<T>(value: T): T {\n  if (value !== null && typeof value === \"object\") {\n    for (const child of Object.values(value)) freezeLiteral(child);\n    Object.freeze(value);\n  }\n  return value;\n}\n\n/** Public, credential-free recipe data. The host must normatively select this\n * literal before I/O; possessing a copy supplies no issuance provenance. */\nexport const MODAL_NATIVE_FRESH_NORMALIZATION_V1 = freezeLiteral(\n  ModalNativeFreshNormalizationV1.parse({\n    recipeId: \"modal-native-fresh-v1\",\n    recipeRevision: 1,\n    schema: \"modal.client.ModalClient/SandboxCreate\",\n    encoding: \"modal-create-json-v1\",\n    sdkVersion: \"0.9.0\",\n    sdkSourceSha256: sourceSha,\n    entrypoint: [\"sleep\", \"infinity\"],\n    createWorkdir: \"/tmp\",\n    env: {},\n    mounts: [],\n    restore: null,\n    idleTimeout: \"unset\",\n    gpu: \"unset\",\n    gpuProto: { type: 0, count: 0, gpuType: \"\" },\n    cpuLimit: \"unset\",\n    memoryLimit: \"unset\",\n    pty: \"unset\",\n    regions: \"unset\",\n    proxy: \"unset\",\n    readinessProbe: \"unset\",\n    environmentVariables: \"unset\",\n    network: {\n      access: \"OPEN\",\n      outboundCidrs: [],\n      outboundDomains: [],\n      inboundCidrs: [],\n      i6pn: false,\n    },\n    volumes: [],\n    cloudBucketMounts: [],\n    secrets: [],\n    ports: [],\n    cloud: \"\",\n    verbose: false,\n    includeOidcIdentityToken: false,\n    experimentalOptions: {},\n    experimentalOptionsV2: {},\n    customDomain: \"\",\n  }),\n);\n\nexport const ModalNativePreparationRecipeV2 = z\n  .object({\n    version: z.literal(1),\n    recipeId: z.literal(\"modal-native-fresh-v1\"),\n    recipeRevision: z.literal(1),\n    createWorkdir: z.literal(\"/tmp\"),\n    entrypoint,\n    normalization: ModalNativeFreshNormalizationV1,\n    compilerFingerprint: z.literal(MODAL_NATIVE_FRESH_COMPILER_FINGERPRINT),\n  })\n  .strict();\nexport type ModalNativePreparationRecipeV2 = z.infer<typeof ModalNativePreparationRecipeV2>;\n\nexport const MODAL_NATIVE_PREPARATION_RECIPE_V2 = freezeLiteral(\n  ModalNativePreparationRecipeV2.parse({\n    version: 1,\n    recipeId: \"modal-native-fresh-v1\",\n    recipeRevision: 1,\n    createWorkdir: \"/tmp\",\n    entrypoint: [\"sleep\", \"infinity\"],\n    normalization: MODAL_NATIVE_FRESH_NORMALIZATION_V1,\n    compilerFingerprint: MODAL_NATIVE_FRESH_COMPILER_FINGERPRINT,\n  }),\n);\n\n/** Exactly the old reservation vocabulary, NOT an extension to its keys. */\nexport const ModalNativeFreshBlueprintV1 = z\n  .object({\n    version: z.literal(1),\n    adapterId: z.literal(\"modal-native-fresh-creator-reservation-v1\"),\n    create: z\n      .object({\n        operationId: uuid,\n        appId: z.string().regex(/^ap-[A-Za-z0-9_-]{1,200}$/u),\n        imageId: z.string().regex(/^im-[A-Za-z0-9_-]{1,200}$/u),\n        cpu: z\n          .number()\n          .positive()\n          .max(128)\n          .refine(\n            (v) =>\n              Number.isSafeInteger(Math.trunc(v * 1000)) &&\n              Math.trunc(v * 1000) >= 1 &&\n              Math.trunc(v * 1000) / 1000 === v,\n          ),\n        memoryMiB: z.number().int().min(128).max(1048576).safe(),\n        timeoutSeconds: z.number().int().min(1).max(86400).safe(),\n        env: empty,\n        mounts: noItems,\n      })\n      .strict(),\n    restore: z.null(),\n    readiness: z\n      .object({\n        operationId: uuid,\n        execId: commandExecId,\n        commandArgs: z.tuple([z.literal(\"/bin/true\")]),\n        workdir: z.literal(\"/tmp\"),\n        env: empty,\n      })\n      .strict(),\n    publishOperationId: uuid,\n    cleanup: z\n      .object({ operationId: uuid, requires: z.literal(\"physical-terminal-proof\") })\n      .strict(),\n  })\n  .strict();\nexport type ModalNativeFreshBlueprintV1 = z.infer<typeof ModalNativeFreshBlueprintV1>;\n\n/** Full pre-election identity. routeEpoch is NOT the physical lease epoch;\n * creatorId is NOT an elected owner or a replacement accepted attempt. */\nexport const ModalNativeOriginalScopeV2 = z\n  .object({\n    version: z.literal(2),\n    declarationId: uuid,\n    planId: uuid,\n    creatorId: uuid,\n    accountId: uuid,\n    workspaceId: uuid,\n    sessionId: uuid,\n    turnId: uuid,\n    attemptId: uuid,\n    executionGeneration: positive,\n    triggerEventId: uuid,\n    sandboxGroupId: uuid,\n    routeKind: z.literal(\"home\"),\n    routeTargetId: z.null(),\n    routeEpoch: nonnegative,\n  })\n  .strict()\n  .refine((v) => v.creatorId !== v.attemptId && v.creatorId !== v.planId, {\n    message: \"A declared creator is distinct from the accepted attempt and plan\",\n  });\nexport type ModalNativeOriginalScopeV2 = z.infer<typeof ModalNativeOriginalScopeV2>;\n\n/** References must resolve through the complete protected scope/config join.\n * They are neither credentials nor canonical/native authentication receipts. */\nexport const ModalNativeConfigurationCaptureRefV2 = z\n  .object({ id: uuid, revision: positive })\n  .strict();\nexport type ModalNativeConfigurationCaptureRefV2 = z.infer<\n  typeof ModalNativeConfigurationCaptureRefV2\n>;\nexport const ModalNativeProofGrantRefV2 = z.object({ id: uuid, epoch: positive }).strict();\nexport type ModalNativeProofGrantRefV2 = z.infer<typeof ModalNativeProofGrantRefV2>;\nexport const ModalNativeReservedLeaseRefV2 = z.object({ id: uuid, epoch: nonnegative }).strict();\nexport type ModalNativeReservedLeaseRefV2 = z.infer<typeof ModalNativeReservedLeaseRefV2>;\n\nexport const ModalNativePreparationDeclarationV2 = z\n  .object({\n    version: z.literal(2),\n    scope: ModalNativeOriginalScopeV2,\n    blueprint: ModalNativeFreshBlueprintV1,\n    preparationRecipe: ModalNativePreparationRecipeV2,\n    configurationCaptureRef: ModalNativeConfigurationCaptureRefV2,\n    proofGrantRef: ModalNativeProofGrantRefV2,\n    providerRecoveryCount: z.union([\n      z.literal(0),\n      z.literal(1),\n      z.literal(2),\n      z.literal(3),\n      z.literal(4),\n      z.literal(5),\n    ]),\n    namespaceState: z.literal(\"unbound\"),\n  })\n  .strict()\n  .superRefine((v, ctx) => {\n    const ids = [\n      v.scope.planId,\n      v.scope.creatorId,\n      v.blueprint.create.operationId,\n      v.blueprint.readiness.operationId,\n      v.blueprint.readiness.execId,\n      v.blueprint.publishOperationId,\n      v.blueprint.cleanup.operationId,\n    ];\n    if (new Set(ids).size !== 7)\n      ctx.addIssue({\n        code: \"custom\",\n        message: \"All seven supplied operation identities must be distinct\",\n      });\n  });\nexport type ModalNativePreparationDeclarationV2 = z.infer<\n  typeof ModalNativePreparationDeclarationV2\n>;\n\nconst safeEndpoint = z\n  .string()\n  .url()\n  .max(1024)\n  .refine(\n    (v) => {\n      try {\n        const url = new URL(v);\n        return (\n          url.protocol === \"https:\" && !url.username && !url.password && !url.search && !url.hash\n        );\n      } catch {\n        return false;\n      }\n    },\n    { message: \"Only a credential-free captured HTTPS endpoint is supported\" },\n  );\n\n/** Separate bind-once append, linked to the SAME captured configuration and\n * claim. This deliberately has no invented immutable provider-principal ID.\n * Only a trusted native issuer + authenticated host ingress can attest it. */\nexport const ModalNativeNamespaceEvidenceV2 = z\n  .object({\n    version: z.literal(2),\n    scope: ModalNativeOriginalScopeV2,\n    configurationCaptureRef: ModalNativeConfigurationCaptureRefV2,\n    proofGrantRef: ModalNativeProofGrantRefV2,\n    claimId: uuid,\n    nonce: uuid,\n    claimRevision: positive,\n    recordRevision: positive,\n    captureId: uuid,\n    purpose: z.literal(\"original-namespace-read\"),\n    reservation: ModalNativeReservedLeaseRefV2,\n    source: z.literal(\"modal-client-workspace-name-lookup-v1\"),\n    responseField: z.enum([\"workspaceName\", \"username\"]),\n    binding: z\n      .object({\n        version: z.literal(1),\n        serverUrl: safeEndpoint,\n        workspaceName: z.string().min(1).max(200),\n        environment: z.string().max(200),\n      })\n      .strict(),\n  })\n  .strict();\nexport type ModalNativeNamespaceEvidenceV2 = z.infer<typeof ModalNativeNamespaceEvidenceV2>;\n\nconst claimFields = {\n  version: z.literal(2),\n  scope: ModalNativeOriginalScopeV2,\n  configurationCaptureRef: ModalNativeConfigurationCaptureRefV2,\n  proofGrantRef: ModalNativeProofGrantRefV2,\n  claimId: uuid,\n  nonce: uuid,\n  claimRevision: positive,\n  recordRevision: positive,\n  captureId: uuid,\n  expiresAt: z.string().datetime(),\n};\n\n/** Scheduling custody ONLY. No lease/task grant is fabricated to authorize\n * this prerequisite lookup. A reserved lease supplies exclusion, not effects. */\nexport const ModalNativeNamespaceReadClaimV2 = z\n  .object({\n    ...claimFields,\n    purpose: z.literal(\"original-namespace-read\"),\n    reservation: ModalNativeReservedLeaseRefV2,\n  })\n  .strict();\nexport type ModalNativeNamespaceReadClaimV2 = z.infer<typeof ModalNativeNamespaceReadClaimV2>;\n\n/** Exact original router command and authoritative prior cursors; no retarget,\n * new TaskGet adoption, legacy locator, PTY, Start, stdin or process-cancel API. */\nexport const ModalNativeOriginalCommandReadClaimV2 = z\n  .object({\n    ...claimFields,\n    purpose: z.literal(\"original-readiness-read\"),\n    reservation: ModalNativeReservedLeaseRefV2,\n    physicalOwnerGeneration: positive,\n    operationId: uuid,\n    providerBindingKey: z.string().min(1).max(1024),\n    command: ModalRouterProviderCommand.refine((v) => v.pty !== true),\n  })\n  .strict();\nexport type ModalNativeOriginalCommandReadClaimV2 = z.infer<\n  typeof ModalNativeOriginalCommandReadClaimV2\n>;\n\n/** Preserve the actual runtime descriptor's encoding/fingerprint domain. This\n * is passive protobuf PREFLIGHT, not the RPC's transmitted bytes or permission. */\nexport const ModalNativePreparedStartDescriptionV1 = z\n  .object({\n    taskId: z.string().min(1).max(200),\n    execId: commandExecId,\n    descriptorProtocol: z.literal(\"modal-prepared-start-descriptor\"),\n    descriptorVersion: z.literal(1),\n    readinessRecipe: z.literal(\"modal-exec-readiness-bin-true-v1\"),\n    readinessRecipeVersion: z.literal(1),\n    startMessage: z.literal(\"Start\"),\n    rpcMethod: z.literal(\"/modal.task_command_router.TaskCommandRouter/TaskExecStart\"),\n    encoderVersion: z.literal(\"protobufjs@7.6.5\"),\n    preflight: z\n      .object({\n        encoding: z.literal(\"modal-start-protobuf-preflight-v1\"),\n        sha256: digest,\n        byteLength: positive.max(1024 * 1024),\n        encoderFingerprint: z.string().regex(/^sha256:[a-f0-9]{64}$/u),\n      })\n      .strict(),\n  })\n  .strict();\nexport type ModalNativePreparedStartDescriptionV1 = z.infer<\n  typeof ModalNativePreparedStartDescriptionV1\n>;\n\n/** Host/native acquisition objects are intentionally NOT constructed here.\n * Raw DTOs, copied refs and any schema-success result cannot mint those objects.\n * Capture needs issuer-authenticated OWN bytes, the exact original claim and a\n * durable capture key; unknown ACK reconciles that same key/acquisition. */\nexport type ModalNativeProofCaptureStatusV2 =\n  | { status: \"committed\"; captureId: string; receiptId: string; recordRevision: number }\n  | { status: \"absent_fenced\"; captureId: string }\n  | { status: \"conflict\"; captureId: string }\n  | { status: \"unresolved\"; captureId: string };\n","import { z } from \"zod\";\n\nconst ModalOutputCursor = z\n  .object({\n    batchIndex: z.number().int().nonnegative().safe(),\n    utf8Remainder: z\n      .string()\n      .max(8)\n      .regex(/^[A-Za-z0-9+/]*={0,2}$/u),\n    exitCode: z.number().int().nullable(),\n  })\n  .strict();\n\n/** Provider-owned execution identity and acknowledged output cursors. These\n * values are retained by the control plane, never recovered from sandbox files. */\nexport const ModalLegacyProviderCommand = z\n  .object({\n    kind: z.literal(\"modal-control-v1\"),\n    sandboxId: z.string().min(1).max(200),\n    taskId: z.string().min(1).max(200),\n    execId: z.string().min(1).max(200),\n    pty: z.boolean().optional(),\n    streams: z.object({ stdout: ModalOutputCursor, stderr: ModalOutputCursor }).strict(),\n  })\n  .strict();\nexport type ModalLegacyProviderCommand = z.infer<typeof ModalLegacyProviderCommand>;\n\nconst ModalByteCursor = z\n  .object({\n    byteOffset: z.number().int().nonnegative().safe(),\n    utf8Remainder: z\n      .string()\n      .max(8)\n      .regex(/^[A-Za-z0-9+/]*={0,2}$/u),\n    eof: z.boolean(),\n    exitCode: z.number().int().nullable(),\n  })\n  .strict()\n  .refine((cursor) => cursor.exitCode === null || cursor.eof, {\n    message: \"A terminal output cursor must have reached EOF\",\n  });\n\nexport const CommandSupervisionDescriptor = z\n  .object({\n    protocol: z.literal(\"native-subreaper-v1\"),\n    invocationId: z.string().uuid(),\n    nonce: z.string().regex(/^[a-f0-9]{64}$/u),\n    controlPath: z.string().regex(/^\\/tmp\\/opengeni-supervision\\/[a-f0-9-]{36}\\.sock$/u),\n  })\n  .strict();\nexport type CommandSupervisionDescriptor = z.infer<typeof CommandSupervisionDescriptor>;\n\nexport const CommandSupervisionReceipt = z\n  .object({\n    protocol: z.literal(\"native-subreaper-v1\"),\n    invocationId: z.string().uuid(),\n    receiptId: z.string().uuid(),\n    leaderExitCode: z.number().int(),\n  })\n  .strict();\nexport type CommandSupervisionReceipt = z.infer<typeof CommandSupervisionReceipt>;\n\nexport const ModalRouterProviderCommand = z\n  .object({\n    kind: z.literal(\"modal-router-v1\"),\n    sandboxId: z.string().min(1).max(200),\n    taskId: z.string().min(1).max(200),\n    execId: z.string().uuid(),\n    pty: z.boolean().optional(),\n    supervision: CommandSupervisionDescriptor.optional(),\n    streams: z.object({ stdout: ModalByteCursor, stderr: ModalByteCursor }).strict(),\n  })\n  .strict();\nexport type ModalRouterProviderCommand = z.infer<typeof ModalRouterProviderCommand>;\n\n/** Legacy locators are read-only compatibility for already launched commands;\n * new starts use authenticated task-router byte offsets, never batch indices. */\nexport const SandboxProviderCommand = z.discriminatedUnion(\"kind\", [\n  ModalLegacyProviderCommand,\n  ModalRouterProviderCommand,\n]);\nexport type SandboxProviderCommand = z.infer<typeof SandboxProviderCommand>;\n"],"mappings":";AAAA,SAAS,KAAAA,UAAS;;;ACAlB,SAAS,SAAS;AAElB,IAAM,oBAAoB,EACvB,OAAO;AAAA,EACN,YAAY,EAAE,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK;AAAA,EAChD,eAAe,EACZ,OAAO,EACP,IAAI,CAAC,EACL,MAAM,yBAAyB;AAAA,EAClC,UAAU,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS;AACtC,CAAC,EACA,OAAO;AAIH,IAAM,6BAA6B,EACvC,OAAO;AAAA,EACN,MAAM,EAAE,QAAQ,kBAAkB;AAAA,EAClC,WAAW,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG;AAAA,EACpC,QAAQ,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG;AAAA,EACjC,QAAQ,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG;AAAA,EACjC,KAAK,EAAE,QAAQ,EAAE,SAAS;AAAA,EAC1B,SAAS,EAAE,OAAO,EAAE,QAAQ,mBAAmB,QAAQ,kBAAkB,CAAC,EAAE,OAAO;AACrF,CAAC,EACA,OAAO;AAGV,IAAM,kBAAkB,EACrB,OAAO;AAAA,EACN,YAAY,EAAE,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK;AAAA,EAChD,eAAe,EACZ,OAAO,EACP,IAAI,CAAC,EACL,MAAM,yBAAyB;AAAA,EAClC,KAAK,EAAE,QAAQ;AAAA,EACf,UAAU,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS;AACtC,CAAC,EACA,OAAO,EACP,OAAO,CAAC,WAAW,OAAO,aAAa,QAAQ,OAAO,KAAK;AAAA,EAC1D,SAAS;AACX,CAAC;AAEI,IAAM,+BAA+B,EACzC,OAAO;AAAA,EACN,UAAU,EAAE,QAAQ,qBAAqB;AAAA,EACzC,cAAc,EAAE,OAAO,EAAE,KAAK;AAAA,EAC9B,OAAO,EAAE,OAAO,EAAE,MAAM,iBAAiB;AAAA,EACzC,aAAa,EAAE,OAAO,EAAE,MAAM,qDAAqD;AACrF,CAAC,EACA,OAAO;AAGH,IAAM,4BAA4B,EACtC,OAAO;AAAA,EACN,UAAU,EAAE,QAAQ,qBAAqB;AAAA,EACzC,cAAc,EAAE,OAAO,EAAE,KAAK;AAAA,EAC9B,WAAW,EAAE,OAAO,EAAE,KAAK;AAAA,EAC3B,gBAAgB,EAAE,OAAO,EAAE,IAAI;AACjC,CAAC,EACA,OAAO;AAGH,IAAM,6BAA6B,EACvC,OAAO;AAAA,EACN,MAAM,EAAE,QAAQ,iBAAiB;AAAA,EACjC,WAAW,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG;AAAA,EACpC,QAAQ,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG;AAAA,EACjC,QAAQ,EAAE,OAAO,EAAE,KAAK;AAAA,EACxB,KAAK,EAAE,QAAQ,EAAE,SAAS;AAAA,EAC1B,aAAa,6BAA6B,SAAS;AAAA,EACnD,SAAS,EAAE,OAAO,EAAE,QAAQ,iBAAiB,QAAQ,gBAAgB,CAAC,EAAE,OAAO;AACjF,CAAC,EACA,OAAO;AAKH,IAAM,yBAAyB,EAAE,mBAAmB,QAAQ;AAAA,EACjE;AAAA,EACA;AACF,CAAC;;;ADzEM,IAAM,sCAAsC;AAC5C,IAAM,0CACX;AAEF,IAAM,OAAOC,GAAE,OAAO,EAAE,MAAM,iEAAiE;AAG/F,IAAM,gBAAgB,KAAK,KAAK,2BAA2B,MAAM,MAAM;AACvE,IAAM,WAAWA,GAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK;AAClD,IAAM,cAAcA,GAAE,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK;AACxD,IAAM,SAASA,GAAE,OAAO,EAAE,MAAM,iBAAiB;AACjD,IAAM,QAAQA,GAAE,OAAO,CAAC,CAAC,EAAE,OAAO;AAClC,IAAM,UAAUA,GAAE,MAAM,CAAC,CAAC;AAC1B,IAAM,aAAaA,GAAE,MAAM,CAACA,GAAE,QAAQ,OAAO,GAAGA,GAAE,QAAQ,UAAU,CAAC,CAAC;AACtE,IAAM,YAAY;AAIX,IAAM,kCAAkCA,GAC5C,OAAO;AAAA,EACN,UAAUA,GAAE,QAAQ,uBAAuB;AAAA,EAC3C,gBAAgBA,GAAE,QAAQ,CAAC;AAAA,EAC3B,QAAQA,GAAE,QAAQ,wCAAwC;AAAA,EAC1D,UAAUA,GAAE,QAAQ,sBAAsB;AAAA,EAC1C,YAAYA,GAAE,QAAQ,OAAO;AAAA,EAC7B,iBAAiBA,GAAE,QAAQ,SAAS;AAAA,EACpC;AAAA,EACA,eAAeA,GAAE,QAAQ,MAAM;AAAA,EAC/B,KAAK;AAAA,EACL,QAAQ;AAAA,EACR,SAASA,GAAE,KAAK;AAAA,EAChB,aAAaA,GAAE,QAAQ,OAAO;AAAA,EAC9B,KAAKA,GAAE,QAAQ,OAAO;AAAA,EACtB,UAAUA,GACP,OAAO,EAAE,MAAMA,GAAE,QAAQ,CAAC,GAAG,OAAOA,GAAE,QAAQ,CAAC,GAAG,SAASA,GAAE,QAAQ,EAAE,EAAE,CAAC,EAC1E,OAAO;AAAA,EACV,UAAUA,GAAE,QAAQ,OAAO;AAAA,EAC3B,aAAaA,GAAE,QAAQ,OAAO;AAAA,EAC9B,KAAKA,GAAE,QAAQ,OAAO;AAAA,EACtB,SAASA,GAAE,QAAQ,OAAO;AAAA,EAC1B,OAAOA,GAAE,QAAQ,OAAO;AAAA,EACxB,gBAAgBA,GAAE,QAAQ,OAAO;AAAA,EACjC,sBAAsBA,GAAE,QAAQ,OAAO;AAAA,EACvC,SAASA,GACN,OAAO;AAAA,IACN,QAAQA,GAAE,QAAQ,MAAM;AAAA,IACxB,eAAe;AAAA,IACf,iBAAiB;AAAA,IACjB,cAAc;AAAA,IACd,MAAMA,GAAE,QAAQ,KAAK;AAAA,EACvB,CAAC,EACA,OAAO;AAAA,EACV,SAAS;AAAA,EACT,mBAAmB;AAAA,EACnB,SAAS;AAAA,EACT,OAAO;AAAA,EACP,OAAOA,GAAE,QAAQ,EAAE;AAAA,EACnB,SAASA,GAAE,QAAQ,KAAK;AAAA,EACxB,0BAA0BA,GAAE,QAAQ,KAAK;AAAA,EACzC,qBAAqB;AAAA,EACrB,uBAAuB;AAAA,EACvB,cAAcA,GAAE,QAAQ,EAAE;AAC5B,CAAC,EACA,OAAO;AAGV,SAAS,cAAiB,OAAa;AACrC,MAAI,UAAU,QAAQ,OAAO,UAAU,UAAU;AAC/C,eAAW,SAAS,OAAO,OAAO,KAAK,EAAG,eAAc,KAAK;AAC7D,WAAO,OAAO,KAAK;AAAA,EACrB;AACA,SAAO;AACT;AAIO,IAAM,sCAAsC;AAAA,EACjD,gCAAgC,MAAM;AAAA,IACpC,UAAU;AAAA,IACV,gBAAgB;AAAA,IAChB,QAAQ;AAAA,IACR,UAAU;AAAA,IACV,YAAY;AAAA,IACZ,iBAAiB;AAAA,IACjB,YAAY,CAAC,SAAS,UAAU;AAAA,IAChC,eAAe;AAAA,IACf,KAAK,CAAC;AAAA,IACN,QAAQ,CAAC;AAAA,IACT,SAAS;AAAA,IACT,aAAa;AAAA,IACb,KAAK;AAAA,IACL,UAAU,EAAE,MAAM,GAAG,OAAO,GAAG,SAAS,GAAG;AAAA,IAC3C,UAAU;AAAA,IACV,aAAa;AAAA,IACb,KAAK;AAAA,IACL,SAAS;AAAA,IACT,OAAO;AAAA,IACP,gBAAgB;AAAA,IAChB,sBAAsB;AAAA,IACtB,SAAS;AAAA,MACP,QAAQ;AAAA,MACR,eAAe,CAAC;AAAA,MAChB,iBAAiB,CAAC;AAAA,MAClB,cAAc,CAAC;AAAA,MACf,MAAM;AAAA,IACR;AAAA,IACA,SAAS,CAAC;AAAA,IACV,mBAAmB,CAAC;AAAA,IACpB,SAAS,CAAC;AAAA,IACV,OAAO,CAAC;AAAA,IACR,OAAO;AAAA,IACP,SAAS;AAAA,IACT,0BAA0B;AAAA,IAC1B,qBAAqB,CAAC;AAAA,IACtB,uBAAuB,CAAC;AAAA,IACxB,cAAc;AAAA,EAChB,CAAC;AACH;AAEO,IAAM,iCAAiCA,GAC3C,OAAO;AAAA,EACN,SAASA,GAAE,QAAQ,CAAC;AAAA,EACpB,UAAUA,GAAE,QAAQ,uBAAuB;AAAA,EAC3C,gBAAgBA,GAAE,QAAQ,CAAC;AAAA,EAC3B,eAAeA,GAAE,QAAQ,MAAM;AAAA,EAC/B;AAAA,EACA,eAAe;AAAA,EACf,qBAAqBA,GAAE,QAAQ,uCAAuC;AACxE,CAAC,EACA,OAAO;AAGH,IAAM,qCAAqC;AAAA,EAChD,+BAA+B,MAAM;AAAA,IACnC,SAAS;AAAA,IACT,UAAU;AAAA,IACV,gBAAgB;AAAA,IAChB,eAAe;AAAA,IACf,YAAY,CAAC,SAAS,UAAU;AAAA,IAChC,eAAe;AAAA,IACf,qBAAqB;AAAA,EACvB,CAAC;AACH;AAGO,IAAM,8BAA8BA,GACxC,OAAO;AAAA,EACN,SAASA,GAAE,QAAQ,CAAC;AAAA,EACpB,WAAWA,GAAE,QAAQ,2CAA2C;AAAA,EAChE,QAAQA,GACL,OAAO;AAAA,IACN,aAAa;AAAA,IACb,OAAOA,GAAE,OAAO,EAAE,MAAM,4BAA4B;AAAA,IACpD,SAASA,GAAE,OAAO,EAAE,MAAM,4BAA4B;AAAA,IACtD,KAAKA,GACF,OAAO,EACP,SAAS,EACT,IAAI,GAAG,EACP;AAAA,MACC,CAAC,MACC,OAAO,cAAc,KAAK,MAAM,IAAI,GAAI,CAAC,KACzC,KAAK,MAAM,IAAI,GAAI,KAAK,KACxB,KAAK,MAAM,IAAI,GAAI,IAAI,QAAS;AAAA,IACpC;AAAA,IACF,WAAWA,GAAE,OAAO,EAAE,IAAI,EAAE,IAAI,GAAG,EAAE,IAAI,OAAO,EAAE,KAAK;AAAA,IACvD,gBAAgBA,GAAE,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,IAAI,KAAK,EAAE,KAAK;AAAA,IACxD,KAAK;AAAA,IACL,QAAQ;AAAA,EACV,CAAC,EACA,OAAO;AAAA,EACV,SAASA,GAAE,KAAK;AAAA,EAChB,WAAWA,GACR,OAAO;AAAA,IACN,aAAa;AAAA,IACb,QAAQ;AAAA,IACR,aAAaA,GAAE,MAAM,CAACA,GAAE,QAAQ,WAAW,CAAC,CAAC;AAAA,IAC7C,SAASA,GAAE,QAAQ,MAAM;AAAA,IACzB,KAAK;AAAA,EACP,CAAC,EACA,OAAO;AAAA,EACV,oBAAoB;AAAA,EACpB,SAASA,GACN,OAAO,EAAE,aAAa,MAAM,UAAUA,GAAE,QAAQ,yBAAyB,EAAE,CAAC,EAC5E,OAAO;AACZ,CAAC,EACA,OAAO;AAKH,IAAM,6BAA6BA,GACvC,OAAO;AAAA,EACN,SAASA,GAAE,QAAQ,CAAC;AAAA,EACpB,eAAe;AAAA,EACf,QAAQ;AAAA,EACR,WAAW;AAAA,EACX,WAAW;AAAA,EACX,aAAa;AAAA,EACb,WAAW;AAAA,EACX,QAAQ;AAAA,EACR,WAAW;AAAA,EACX,qBAAqB;AAAA,EACrB,gBAAgB;AAAA,EAChB,gBAAgB;AAAA,EAChB,WAAWA,GAAE,QAAQ,MAAM;AAAA,EAC3B,eAAeA,GAAE,KAAK;AAAA,EACtB,YAAY;AACd,CAAC,EACA,OAAO,EACP,OAAO,CAAC,MAAM,EAAE,cAAc,EAAE,aAAa,EAAE,cAAc,EAAE,QAAQ;AAAA,EACtE,SAAS;AACX,CAAC;AAKI,IAAM,uCAAuCA,GACjD,OAAO,EAAE,IAAI,MAAM,UAAU,SAAS,CAAC,EACvC,OAAO;AAIH,IAAM,6BAA6BA,GAAE,OAAO,EAAE,IAAI,MAAM,OAAO,SAAS,CAAC,EAAE,OAAO;AAElF,IAAM,gCAAgCA,GAAE,OAAO,EAAE,IAAI,MAAM,OAAO,YAAY,CAAC,EAAE,OAAO;AAGxF,IAAM,sCAAsCA,GAChD,OAAO;AAAA,EACN,SAASA,GAAE,QAAQ,CAAC;AAAA,EACpB,OAAO;AAAA,EACP,WAAW;AAAA,EACX,mBAAmB;AAAA,EACnB,yBAAyB;AAAA,EACzB,eAAe;AAAA,EACf,uBAAuBA,GAAE,MAAM;AAAA,IAC7BA,GAAE,QAAQ,CAAC;AAAA,IACXA,GAAE,QAAQ,CAAC;AAAA,IACXA,GAAE,QAAQ,CAAC;AAAA,IACXA,GAAE,QAAQ,CAAC;AAAA,IACXA,GAAE,QAAQ,CAAC;AAAA,IACXA,GAAE,QAAQ,CAAC;AAAA,EACb,CAAC;AAAA,EACD,gBAAgBA,GAAE,QAAQ,SAAS;AACrC,CAAC,EACA,OAAO,EACP,YAAY,CAAC,GAAG,QAAQ;AACvB,QAAM,MAAM;AAAA,IACV,EAAE,MAAM;AAAA,IACR,EAAE,MAAM;AAAA,IACR,EAAE,UAAU,OAAO;AAAA,IACnB,EAAE,UAAU,UAAU;AAAA,IACtB,EAAE,UAAU,UAAU;AAAA,IACtB,EAAE,UAAU;AAAA,IACZ,EAAE,UAAU,QAAQ;AAAA,EACtB;AACA,MAAI,IAAI,IAAI,GAAG,EAAE,SAAS;AACxB,QAAI,SAAS;AAAA,MACX,MAAM;AAAA,MACN,SAAS;AAAA,IACX,CAAC;AACL,CAAC;AAKH,IAAM,eAAeA,GAClB,OAAO,EACP,IAAI,EACJ,IAAI,IAAI,EACR;AAAA,EACC,CAAC,MAAM;AACL,QAAI;AACF,YAAM,MAAM,IAAI,IAAI,CAAC;AACrB,aACE,IAAI,aAAa,YAAY,CAAC,IAAI,YAAY,CAAC,IAAI,YAAY,CAAC,IAAI,UAAU,CAAC,IAAI;AAAA,IAEvF,QAAQ;AACN,aAAO;AAAA,IACT;AAAA,EACF;AAAA,EACA,EAAE,SAAS,8DAA8D;AAC3E;AAKK,IAAM,iCAAiCA,GAC3C,OAAO;AAAA,EACN,SAASA,GAAE,QAAQ,CAAC;AAAA,EACpB,OAAO;AAAA,EACP,yBAAyB;AAAA,EACzB,eAAe;AAAA,EACf,SAAS;AAAA,EACT,OAAO;AAAA,EACP,eAAe;AAAA,EACf,gBAAgB;AAAA,EAChB,WAAW;AAAA,EACX,SAASA,GAAE,QAAQ,yBAAyB;AAAA,EAC5C,aAAa;AAAA,EACb,QAAQA,GAAE,QAAQ,uCAAuC;AAAA,EACzD,eAAeA,GAAE,KAAK,CAAC,iBAAiB,UAAU,CAAC;AAAA,EACnD,SAASA,GACN,OAAO;AAAA,IACN,SAASA,GAAE,QAAQ,CAAC;AAAA,IACpB,WAAW;AAAA,IACX,eAAeA,GAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG;AAAA,IACxC,aAAaA,GAAE,OAAO,EAAE,IAAI,GAAG;AAAA,EACjC,CAAC,EACA,OAAO;AACZ,CAAC,EACA,OAAO;AAGV,IAAM,cAAc;AAAA,EAClB,SAASA,GAAE,QAAQ,CAAC;AAAA,EACpB,OAAO;AAAA,EACP,yBAAyB;AAAA,EACzB,eAAe;AAAA,EACf,SAAS;AAAA,EACT,OAAO;AAAA,EACP,eAAe;AAAA,EACf,gBAAgB;AAAA,EAChB,WAAW;AAAA,EACX,WAAWA,GAAE,OAAO,EAAE,SAAS;AACjC;AAIO,IAAM,kCAAkCA,GAC5C,OAAO;AAAA,EACN,GAAG;AAAA,EACH,SAASA,GAAE,QAAQ,yBAAyB;AAAA,EAC5C,aAAa;AACf,CAAC,EACA,OAAO;AAKH,IAAM,wCAAwCA,GAClD,OAAO;AAAA,EACN,GAAG;AAAA,EACH,SAASA,GAAE,QAAQ,yBAAyB;AAAA,EAC5C,aAAa;AAAA,EACb,yBAAyB;AAAA,EACzB,aAAa;AAAA,EACb,oBAAoBA,GAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,IAAI;AAAA,EAC9C,SAAS,2BAA2B,OAAO,CAAC,MAAM,EAAE,QAAQ,IAAI;AAClE,CAAC,EACA,OAAO;AAOH,IAAM,wCAAwCA,GAClD,OAAO;AAAA,EACN,QAAQA,GAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG;AAAA,EACjC,QAAQ;AAAA,EACR,oBAAoBA,GAAE,QAAQ,iCAAiC;AAAA,EAC/D,mBAAmBA,GAAE,QAAQ,CAAC;AAAA,EAC9B,iBAAiBA,GAAE,QAAQ,kCAAkC;AAAA,EAC7D,wBAAwBA,GAAE,QAAQ,CAAC;AAAA,EACnC,cAAcA,GAAE,QAAQ,OAAO;AAAA,EAC/B,WAAWA,GAAE,QAAQ,4DAA4D;AAAA,EACjF,gBAAgBA,GAAE,QAAQ,kBAAkB;AAAA,EAC5C,WAAWA,GACR,OAAO;AAAA,IACN,UAAUA,GAAE,QAAQ,mCAAmC;AAAA,IACvD,QAAQ;AAAA,IACR,YAAY,SAAS,IAAI,OAAO,IAAI;AAAA,IACpC,oBAAoBA,GAAE,OAAO,EAAE,MAAM,wBAAwB;AAAA,EAC/D,CAAC,EACA,OAAO;AACZ,CAAC,EACA,OAAO;","names":["z","z"]}

package/dist/{chunk-Y3MLSLB4.js → chunk-3SIZGL3O.js}

@@ -1,13 +1,13 @@
 import {
   COMMITTED_TRANSACTION_PROTOCOL_VERSION
-} from "./chunk-BVGIYW7D.js";
+} from "./chunk-PX3VCKAU.js";
 
 // src/editable-artifact-committed-transaction.ts
 var MAX_COMMITTED_TRANSACTION_BYTES = 8 * 1024 * 1024;
 var MAX_COMMITTED_TRANSACTION_OPERATIONS = 4096;
 var MAX_COMMITTED_TRANSACTION_CAUSAL_REPLICAS = 1e5;
 var MAX_COMMITTED_TRANSACTION_CELLS = 1e6;
-var MAGIC = new Uint8Array([79, 71, 65, 67, 79, 48, 48, 49]);
+var MAGIC = new Uint8Array([79, 71, 65, 67, 79, 48, 48, 50]);
 var HEADER_BYTES = 24;
 var CHECKSUM_BYTES = 8;
 var HASH_BYTES = 32;
@@ -16,6 +16,7 @@ var MAX_OPERATION_STRING_BYTES = 4 * 1024 * 1024;
 var MAX_SAFE_U64_HIGH = 2097151;
 var U32_SIZE = 4294967296;
 var U32_MAX = 4294967295;
+var MAX_DATE_MILLISECONDS = 8640000000000000n;
 var FNV_OFFSET_LOW = 2216829733;
 var FNV_OFFSET_HIGH = 3421674724;
 var FNV_PRIME_LOW = 435;
@@ -23,37 +24,37 @@ var HEX = Array.from({ length: 256 }, (_, value) => value.toString(16).padStart(
 function decodeCommittedTransactionSummary(bytes) {
   assertInput(bytes);
   if (bytes.byteLength > MAX_COMMITTED_TRANSACTION_BYTES) {
-    throw new RangeError("OGACO001 envelope exceeds its byte limit");
+    throw new RangeError("OGACO002 envelope exceeds its byte limit");
   }
   if (bytes.byteLength < HEADER_BYTES + CHECKSUM_BYTES) {
-    throw new TypeError("truncated OGACO001 envelope");
+    throw new TypeError("truncated OGACO002 envelope");
   }
   const view = new DataView(bytes.buffer, bytes.byteOffset, bytes.byteLength);
   for (let index = 0; index < MAGIC.byteLength; index += 1) {
-    if (bytes[index] !== MAGIC[index]) throw new TypeError("invalid OGACO001 magic");
+    if (bytes[index] !== MAGIC[index]) throw new TypeError("invalid OGACO002 magic");
   }
   const version = view.getUint16(8, true);
   if (version !== COMMITTED_TRANSACTION_PROTOCOL_VERSION) {
-    throw new TypeError(`unsupported OGACO001 version: ${version}`);
+    throw new TypeError(`unsupported OGACO002 version: ${version}`);
   }
   if (view.getUint16(10, true) !== 0) {
-    throw new TypeError("reserved OGACO001 header bits are set");
+    throw new TypeError("reserved OGACO002 header bits are set");
   }
   const operationCount = view.getUint32(12, true);
   if (operationCount === 0 || operationCount > MAX_COMMITTED_TRANSACTION_OPERATIONS) {
-    throw new RangeError("OGACO001 operation count is outside its canonical bounds");
+    throw new RangeError("OGACO002 operation count is outside its canonical bounds");
   }
-  const payloadLength = safeU64At(view, 16, "OGACO001 payload length", false);
-  const payloadEnd = checkedAdd(HEADER_BYTES, payloadLength, "OGACO001 payload length");
-  const expectedLength = checkedAdd(payloadEnd, CHECKSUM_BYTES, "OGACO001 envelope length");
+  const payloadLength = safeU64At(view, 16, "OGACO002 payload length", false);
+  const payloadEnd = checkedAdd(HEADER_BYTES, payloadLength, "OGACO002 payload length");
+  const expectedLength = checkedAdd(payloadEnd, CHECKSUM_BYTES, "OGACO002 envelope length");
   if (bytes.byteLength !== expectedLength) {
     throw new TypeError(
-      bytes.byteLength < expectedLength ? "truncated OGACO001 payload" : "trailing bytes after OGACO001 envelope"
+      bytes.byteLength < expectedLength ? "truncated OGACO002 payload" : "trailing bytes after OGACO002 envelope"
     );
   }
   const [checksumLow, checksumHigh] = fnv1a64(bytes, payloadEnd);
   if (view.getUint32(payloadEnd, true) !== checksumLow || view.getUint32(payloadEnd + 4, true) !== checksumHigh) {
-    throw new TypeError("OGACO001 checksum mismatch");
+    throw new TypeError("OGACO002 checksum mismatch");
   }
   const reader = new Reader(bytes, HEADER_BYTES, payloadEnd);
   const transactionId = reader.stableId("transaction id");
@@ -69,7 +70,7 @@ function decodeCommittedTransactionSummary(bytes) {
   for (let index = 0; index < operationCount; index += 1) {
     const operationId = reader.stableId(`operation ${index} id`);
     if (seenOperationIds.has(operationId)) {
-      throw new TypeError("OGACO001 operation ids must be unique");
+      throw new TypeError("OGACO002 operation ids must be unique");
     }
     seenOperationIds.add(operationId);
     operationIds.push(operationId);
@@ -209,7 +210,7 @@ var Reader = class {
         const endRow = this.u32("clear range end row");
         const endColumn = this.u32("clear range end column");
         if (startRow > endRow || startColumn > endColumn) {
-          throw new TypeError("OGACO001 clear range is not normalized");
+          throw new TypeError("OGACO002 clear range is not normalized");
         }
         return totalCells;
       }
@@ -217,7 +218,7 @@ var Reader = class {
         this.stableId("selective undo target");
         return totalCells;
       default:
-        throw new TypeError(`invalid OGACO001 collaboration command tag: ${tag}`);
+        throw new TypeError(`invalid OGACO002 collaboration command tag: ${tag}`);
     }
   }
   skipSetCells(totalCells) {
@@ -227,18 +228,18 @@ var Reader = class {
     const rows = this.u32("cell block rows");
     const columns = this.u32("cell block columns");
     if (rows === 0 || columns === 0) {
-      throw new TypeError("OGACO001 cell block dimensions must be nonzero");
+      throw new TypeError("OGACO002 cell block dimensions must be nonzero");
     }
     if (anchorRow > U32_MAX - (rows - 1) || anchorColumn > U32_MAX - (columns - 1)) {
-      throw new RangeError("OGACO001 cell block coordinates overflow u32");
+      throw new RangeError("OGACO002 cell block coordinates overflow u32");
     }
     if (rows > Math.floor(MAX_COMMITTED_TRANSACTION_CELLS / columns)) {
-      throw new RangeError("OGACO001 cell block exceeds its cell limit");
+      throw new RangeError("OGACO002 cell block exceeds its cell limit");
     }
     const cellCount = rows * columns;
     const nextTotal = totalCells + cellCount;
     if (nextTotal > MAX_COMMITTED_TRANSACTION_CELLS) {
-      throw new RangeError("OGACO001 transaction exceeds its cell limit");
+      throw new RangeError("OGACO002 transaction exceeds its cell limit");
     }
     for (let index = 0; index < cellCount; index += 1) this.skipCell();
     return nextTotal;
@@ -247,10 +248,11 @@ var Reader = class {
     const formulaTag = this.u8("cell formula tag");
     if (formulaTag === 1) {
       if (this.skipString("cell formula") === 0) {
-        throw new TypeError("OGACO001 formula must not be empty");
+        throw new TypeError("OGACO002 formula must not be empty");
       }
+      return;
     } else if (formulaTag !== 0) {
-      throw new TypeError(`invalid OGACO001 cell formula tag: ${formulaTag}`);
+      throw new TypeError(`invalid OGACO002 cell formula tag: ${formulaTag}`);
     }
     const valueTag = this.u8("cell value tag");
     switch (valueTag) {
@@ -267,8 +269,11 @@ var Reader = class {
       case 5:
         this.skipFormulaError();
         return;
+      case 6:
+        this.skipDate();
+        return;
       default:
-        throw new TypeError(`invalid OGACO001 cell value tag: ${valueTag}`);
+        throw new TypeError(`invalid OGACO002 cell value tag: ${valueTag}`);
     }
   }
   skipNumber() {
@@ -276,10 +281,17 @@ var Reader = class {
     const low = this.#view.getUint32(offset, true);
     const high = this.#view.getUint32(offset + 4, true);
     if (low === 0 && high === 2147483648) {
-      throw new TypeError("OGACO001 cell number uses negative zero");
+      throw new TypeError("OGACO002 cell number uses negative zero");
     }
     if ((high & 2146435072) === 2146435072) {
-      throw new TypeError("OGACO001 cell numbers must be finite");
+      throw new TypeError("OGACO002 cell numbers must be finite");
+    }
+  }
+  skipDate() {
+    const offset = this.reserve(8, "cell date");
+    const milliseconds = this.#view.getBigInt64(offset, true);
+    if (milliseconds < -MAX_DATE_MILLISECONDS || milliseconds > MAX_DATE_MILLISECONDS) {
+      throw new TypeError("OGACO002 cell date is outside the ECMAScript range");
     }
   }
   skipFormulaError() {
@@ -289,7 +301,7 @@ var Reader = class {
       this.skipString("custom formula error");
       return;
     }
-    throw new TypeError(`invalid OGACO001 formula error tag: ${tag}`);
+    throw new TypeError(`invalid OGACO002 formula error tag: ${tag}`);
   }
   skipGeneration(label) {
     this.sheetObjectId(`${label} sheet id`);
@@ -305,15 +317,15 @@ var Reader = class {
     return length;
   }
   done() {
-    if (this.#offset !== this.#end) throw new TypeError("trailing bytes in OGACO001 payload");
+    if (this.#offset !== this.#end) throw new TypeError("trailing bytes in OGACO002 payload");
   }
 };
 function assertInput(bytes) {
   if (!(bytes instanceof Uint8Array)) {
-    throw new TypeError("OGACO001 bytes must be a Uint8Array");
+    throw new TypeError("OGACO002 bytes must be a Uint8Array");
   }
   if (typeof SharedArrayBuffer !== "undefined" && bytes.buffer instanceof SharedArrayBuffer) {
-    throw new TypeError("OGACO001 bytes must not use shared mutable memory");
+    throw new TypeError("OGACO002 bytes must not use shared mutable memory");
   }
 }
 function safeU64At(view, offset, label, positive) {
@@ -389,4 +401,4 @@ export {
   MAX_COMMITTED_TRANSACTION_CELLS,
   decodeCommittedTransactionSummary
 };
-//# sourceMappingURL=chunk-Y3MLSLB4.js.map
+//# sourceMappingURL=chunk-3SIZGL3O.js.map