@opengeni/contracts 3.0.0-canary.0 → 3.0.1-canary.0

package/dist/atlassian.js

@@ -17,7 +17,7 @@ import {
   AtlassianSyncCadence,
   SaveAtlassianSourcesRequest,
   atlassianScopesAllowRead
-} from "./chunk-OO4AEMQB.js";
+} from "./chunk-FBXZZSXA.js";
 import "./chunk-YBW5JSA3.js";
 import "./chunk-O5LEQHDM.js";
 import "./chunk-GRG7PHWQ.js";

package/dist/{chunk-OO4AEMQB.js → chunk-FBXZZSXA.js}

@@ -5517,11 +5517,26 @@ var McpMutationReceipt = z21.object({
 // src/sandbox-snapshots.ts
 var WORKSPACE_ARCHIVE_DESCRIPTOR_VERSION = 2;
 var WORKSPACE_ARCHIVE_OBJECT_REF_SCHEMA = "sandbox_archive_object_v1";
-var OBJECT_KEY = /^sandbox-archives\/v1\/[0-9a-f-]{36}\/[0-9a-f-]{36}\/[0-9a-f-]{36}\/wa1:[0-9]{13}:[0-9a-f]{64}\.tar$/i;
+var UPLOAD_ID = /^[0-9a-f]{8}-[0-9a-f]{4}-[1-8][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i;
+var OBJECT_KEY = /^sandbox-archives\/v1\/([0-9a-f-]{36})\/([0-9a-f-]{36})\/([0-9a-f-]{36})\/(wa1:[0-9]{13}:[0-9a-f]{64})(?:\.([0-9a-f-]+))?\.tar$/i;
+function parseWorkspaceArchiveObjectKey(value) {
+  if (typeof value !== "string") return null;
+  const match = OBJECT_KEY.exec(value);
+  if (!match || match[0] !== value || match[5] !== void 0 && !UPLOAD_ID.test(match[5])) {
+    return null;
+  }
+  return {
+    accountId: match[1],
+    workspaceId: match[2],
+    sandboxGroupId: match[3],
+    revision: match[4],
+    uploadId: match[5] ?? null
+  };
+}
 function parseWorkspaceArchiveObjectRef(value) {
   if (!value || typeof value !== "object" || Array.isArray(value)) return null;
   const candidate = value;
-  if (candidate.schema !== WORKSPACE_ARCHIVE_OBJECT_REF_SCHEMA || typeof candidate.key !== "string" || !OBJECT_KEY.test(candidate.key) || typeof candidate.sha256 !== "string" || !SHA256.test(candidate.sha256) || !nonnegativeInteger(candidate.bytes) || candidate.bytes <= 0 || typeof candidate.backend !== "string" || candidate.backend.length === 0 || candidate.backend.length > 64) {
+  if (candidate.schema !== WORKSPACE_ARCHIVE_OBJECT_REF_SCHEMA || typeof candidate.key !== "string" || !parseWorkspaceArchiveObjectKey(candidate.key) || typeof candidate.sha256 !== "string" || !SHA256.test(candidate.sha256) || !nonnegativeInteger(candidate.bytes) || candidate.bytes <= 0 || typeof candidate.backend !== "string" || candidate.backend.length === 0 || candidate.backend.length > 64) {
     return null;
   }
   return {
@@ -5533,7 +5548,18 @@ function parseWorkspaceArchiveObjectRef(value) {
   };
 }
 function workspaceArchiveObjectKey(input) {
-  return `sandbox-archives/v1/${input.accountId}/${input.workspaceId}/${input.sandboxGroupId}/${input.revision}.tar`;
+  if (input.uploadId !== void 0 && (!UPLOAD_ID.test(input.uploadId) || input.uploadId.length !== 36)) {
+    throw new Error("Invalid workspace archive upload UUID");
+  }
+  return `sandbox-archives/v1/${input.accountId}/${input.workspaceId}/${input.sandboxGroupId}/${input.revision}${input.uploadId === void 0 ? "" : `.${input.uploadId}`}.tar`;
+}
+function validateWorkspaceArchiveObjectRef(value, input) {
+  const ref = parseWorkspaceArchiveObjectRef(value);
+  const key = ref && parseWorkspaceArchiveObjectKey(ref.key);
+  const descriptor = parseWorkspaceArchiveDescriptor(input.descriptor);
+  if (!ref || !key || descriptor?.version !== 1 || key.accountId.toLowerCase() !== input.accountId.toLowerCase() || key.workspaceId.toLowerCase() !== input.workspaceId.toLowerCase() || key.sandboxGroupId.toLowerCase() !== input.sandboxGroupId.toLowerCase() || key.revision !== descriptor.revision || ref.sha256 !== descriptor.archiveSha256 || ref.bytes !== descriptor.archiveBytes)
+    return null;
+  return ref;
 }
 function workspaceArchivePayloadPresent(sessionState) {
   if (!sessionState) return false;
@@ -13145,7 +13171,10 @@ var SessionAuthorizationActor = z36.discriminatedUnion("kind", [
     /** Frozen authority that admitted the calling turn. */
     initiator: TurnInitiator,
     initiatorContext: TurnInitiatorContext,
-    /** Durable causal human for delegated/service work; null for pure service work. */
+    /**
+     * Durable causal-human selector for named human-bound capabilities. It never
+     * authorizes by itself and is null for pure service work.
+     */
     initiatingHumanSubjectId: z36.string().min(1).max(1024).nullable()
   })
 ]);
@@ -21169,8 +21198,10 @@ export {
   McpMutationReceipt,
   WORKSPACE_ARCHIVE_DESCRIPTOR_VERSION,
   WORKSPACE_ARCHIVE_OBJECT_REF_SCHEMA,
+  parseWorkspaceArchiveObjectKey,
   parseWorkspaceArchiveObjectRef,
   workspaceArchiveObjectKey,
+  validateWorkspaceArchiveObjectRef,
   workspaceArchivePayloadPresent,
   omitInlineWorkspaceArchiveWhenObjectRefPresent,
   NATIVE_SNAPSHOT_PREFIXES,
@@ -22522,4 +22553,4 @@ export {
   ClientConfig,
   evaluateWorkspaceModelPolicy
 };
-//# sourceMappingURL=chunk-OO4AEMQB.js.map
+//# sourceMappingURL=chunk-FBXZZSXA.js.map