@opengeni/contracts 3.0.1-canary.0 → 3.0.1

package/dist/{chunk-FY5DZL7T.js → chunk-IRR7CBBW.js}

@@ -4,7 +4,7 @@ import {
   SessionTenancyVisibility,
   UserResourceAuthorityGrant,
   UserResourceDelegation
-} from "./chunk-FBXZZSXA.js";
+} from "./chunk-EHHDZLGY.js";
 
 // src/connection-authority.ts
 import { z } from "zod";
@@ -345,4 +345,4 @@ export {
   ConnectionUseAuditFact,
   ConnectionUseAuthorizationResult
 };
-//# sourceMappingURL=chunk-FY5DZL7T.js.map
+//# sourceMappingURL=chunk-IRR7CBBW.js.map

package/dist/connect.js

@@ -1,7 +1,7 @@
 import {
   IntegrationInstanceKey,
   IntegrationSource
-} from "./chunk-FBXZZSXA.js";
+} from "./chunk-EHHDZLGY.js";
 import "./chunk-YBW5JSA3.js";
 import "./chunk-O5LEQHDM.js";
 import "./chunk-GRG7PHWQ.js";

package/dist/connection-authority.js

@@ -16,8 +16,8 @@ import {
   ListConnectionAuthoritiesQuery,
   ListConnectionAuthoritiesResponse,
   RevokeConnectionUseGrantQuery
-} from "./chunk-FY5DZL7T.js";
-import "./chunk-FBXZZSXA.js";
+} from "./chunk-IRR7CBBW.js";
+import "./chunk-EHHDZLGY.js";
 import "./chunk-YBW5JSA3.js";
 import "./chunk-O5LEQHDM.js";
 import "./chunk-GRG7PHWQ.js";

package/dist/google-drive.js

@@ -1,6 +1,6 @@
 import {
   ConnectionMetadata
-} from "./chunk-FBXZZSXA.js";
+} from "./chunk-EHHDZLGY.js";
 import "./chunk-YBW5JSA3.js";
 import "./chunk-O5LEQHDM.js";
 import "./chunk-GRG7PHWQ.js";

package/dist/host-mcp-bindings.js

@@ -1,12 +1,12 @@
 import {
   ConnectionUseAuthoritySnapshot,
   IssueConnectionUseGrantRequest
-} from "./chunk-FY5DZL7T.js";
+} from "./chunk-IRR7CBBW.js";
 import {
   HostMcpCreateSelections,
   McpServerConnectionRef,
   SessionTenancyVisibility
-} from "./chunk-FBXZZSXA.js";
+} from "./chunk-EHHDZLGY.js";
 import "./chunk-YBW5JSA3.js";
 import "./chunk-O5LEQHDM.js";
 import "./chunk-GRG7PHWQ.js";

package/dist/index.d.ts

@@ -37,7 +37,7 @@ export { CreateWorkspaceArtifactRequest, PublishWorkspaceArtifactVersionRequest,
 export { MCP_MUTATION_RECEIPT_MAX_BYTES, MCP_MUTATION_RECEIPT_VERSION, McpMutationReceipt, McpMutationReceiptIdempotencyStatus, McpMutationReceiptOutcome, McpMutationResource, type McpMutationReceipt as McpMutationReceiptType, type McpMutationReceiptIdempotencyStatus as McpMutationReceiptIdempotencyStatusType, type McpMutationReceiptOutcome as McpMutationReceiptOutcomeType, type McpMutationResource as McpMutationResourceType, } from "./mcp-receipts.js";
 export { SESSION_EVENT_PAYLOAD_MAX_BYTES, approximateSessionEventTokens, boundSessionEventPayload, measureSessionEventJson, sessionEventJsonBytes, sessionEventMediaPreview, sessionEventMediaPreviewFromDataUrl, sessionEventPayloadTruncation, type BoundSessionEventPayloadOptions, type SessionEventBoundarySurface, type SessionEventMediaPreview, type SessionEventJsonMeasurement, type SessionEventPayloadTruncation, } from "./event-preview.js";
 export { COMPUTER_SCREENSHOT_MAX_BYTES, COMPUTER_SCREENSHOT_MAX_DIMENSION, COMPUTER_SCREENSHOT_MAX_PIXELS, COMPUTER_SCREENSHOT_RETENTION_MS, COMPUTER_SCREENSHOT_WORKSPACE_QUOTA_BYTES, GENERATED_IMAGE_MAX_BYTES, GENERATED_VIDEO_MAX_BYTES, RETAINED_OUTPUT_DEFAULT_PAGE_BYTES, RETAINED_OUTPUT_MAX_PAGE_BYTES, RETAINED_OUTPUT_RECEIPT_MAX_BYTES, RetainedArtifactMetadataSchema, RetainedArtifactReferenceSchema, RetainedArtifactUnavailableSchema, RetainedOutputEvidenceSchema, RetainedOutputKind, RetainedOutputUnavailableReason, retainedArtifactReferenceFromFile, retainedGeneratedImageReferenceFromFile, retainedGeneratedVideoReferenceFromFile, retainedScreenshotReferenceFromFile, retainedOutputUnavailable, resolveRetainedOutputRange, validateRetainedOutputEvidence, type RetainedArtifactFileInput, type RetainedArtifactMetadata, type RetainedArtifactReference, type RetainedGeneratedImageArtifactInput, type RetainedGeneratedVideoArtifactInput, type RetainedScreenshotArtifactInput, type RetainedArtifactUnavailable, type RetainedOutputAvailableEvidence, type RetainedOutputEvidence, type RetainedOutputRangeResolution, type RetainedOutputResolvedRange, } from "./retained-output.js";
-export { NATIVE_SNAPSHOT_PREFIXES, WORKSPACE_ARCHIVE_DESCRIPTOR_VERSION, WORKSPACE_ARCHIVE_OBJECT_REF_SCHEMA, backendForNativeSnapshotProvider, decodeNativeSnapshotRef, encodeNativeSnapshotRef, omitInlineWorkspaceArchiveWhenObjectRefPresent, parseWorkspaceArchiveDescriptor, parseWorkspaceArchiveObjectKey, parseWorkspaceArchiveObjectRef, validateWorkspaceArchiveObjectRef, workspaceArchiveObjectKey, workspaceArchivePayloadPresent, type NativeSnapshotDescriptor, type NativeSnapshotProvider, type NativeSnapshotRef, type TarWorkspaceArchiveDescriptor, type WorkspaceArchiveDescriptor, type WorkspaceArchiveObjectRef, type WorkspaceArchiveObjectKey, type WorkspaceTreeFingerprint, } from "./sandbox-snapshots.js";
+export { NATIVE_SNAPSHOT_PREFIXES, WORKSPACE_ARCHIVE_DESCRIPTOR_VERSION, WORKSPACE_ARCHIVE_OBJECT_REF_SCHEMA, backendForNativeSnapshotProvider, decodeNativeSnapshotRef, encodeNativeSnapshotRef, omitInlineWorkspaceArchiveWhenObjectRefPresent, parseWorkspaceArchiveDescriptor, parseWorkspaceArchiveObjectRef, workspaceArchiveObjectKey, workspaceArchivePayloadPresent, type NativeSnapshotDescriptor, type NativeSnapshotProvider, type NativeSnapshotRef, type TarWorkspaceArchiveDescriptor, type WorkspaceArchiveDescriptor, type WorkspaceArchiveObjectRef, type WorkspaceTreeFingerprint, } from "./sandbox-snapshots.js";
 export { canonicalModalCheckpointProviderBinding, type ModalCheckpointProviderBinding, } from "./checkpoint-provider-bindings.js";
 export declare const SandboxBackend: z.ZodEnum<{
     blaxel: "blaxel";

package/dist/index.js

@@ -1798,7 +1798,6 @@ import {
   omitInlineWorkspaceArchiveWhenObjectRefPresent,
   parseSkillFrontmatter,
   parseWorkspaceArchiveDescriptor,
-  parseWorkspaceArchiveObjectKey,
   parseWorkspaceArchiveObjectRef,
   prefixedMcpToolName,
   readCodexCredentialPolicySnapshotV1,
@@ -1852,7 +1851,6 @@ import {
   toolResultSpillSandboxPath,
   turnExecutionPolicyAuditMetadata,
   validateSkillTextFiles,
-  validateWorkspaceArchiveObjectRef,
   variableSetVariableNameReservation,
   verifyDelegatedAccessToken,
   verifyEnrollToken,
@@ -1866,7 +1864,7 @@ import {
   workspaceLearningPolicyRouterContext,
   workspaceLearningSourceKey,
   workspaceSlackReactionChannelAllowed
-} from "./chunk-FBXZZSXA.js";
+} from "./chunk-EHHDZLGY.js";
 import {
   CONNECTOR_ATTACHMENT_FILENAME_MAX_UTF8_BYTES,
   CONNECTOR_ATTACHMENT_MAX_BYTES,
@@ -4217,7 +4215,6 @@ export {
   parseConnectorAttachmentTransferEnvelope,
   parseSkillFrontmatter,
   parseWorkspaceArchiveDescriptor,
-  parseWorkspaceArchiveObjectKey,
   parseWorkspaceArchiveObjectRef,
   prefixedMcpToolName,
   readCodexCredentialPolicySnapshotV1,
@@ -4282,7 +4279,6 @@ export {
   turnExecutionPolicyAuditMetadata,
   validateRetainedOutputEvidence,
   validateSkillTextFiles,
-  validateWorkspaceArchiveObjectRef,
   variableSetVariableNameReservation,
   verifyDelegatedAccessToken,
   verifyEnrollToken,

package/dist/personal-github.js

@@ -1,6 +1,6 @@
 import {
   ConnectionMetadata
-} from "./chunk-FBXZZSXA.js";
+} from "./chunk-EHHDZLGY.js";
 import "./chunk-YBW5JSA3.js";
 import "./chunk-O5LEQHDM.js";
 import "./chunk-GRG7PHWQ.js";

package/dist/sandbox-snapshots.d.ts

@@ -50,31 +50,13 @@ export type WorkspaceArchiveObjectRef = {
     bytes: number;
     backend: string;
 };
-export type WorkspaceArchiveObjectKey = {
-    accountId: string;
-    workspaceId: string;
-    sandboxGroupId: string;
-    revision: string;
-    uploadId: string | null;
-};
-export declare function parseWorkspaceArchiveObjectKey(value: unknown): WorkspaceArchiveObjectKey | null;
 export declare function parseWorkspaceArchiveObjectRef(value: unknown): WorkspaceArchiveObjectRef | null;
 export declare function workspaceArchiveObjectKey(input: {
     accountId: string;
     workspaceId: string;
     sandboxGroupId: string;
     revision: string;
-    /** New upload invocations supply a fresh randomUUID; omission is legacy-only. */
-    uploadId?: string;
 }): string;
-/** Bind a stored locator to its publication/restore scope and verified tar
- * descriptor. A logical revision never substitutes for the exact physical key. */
-export declare function validateWorkspaceArchiveObjectRef(value: unknown, input: {
-    accountId: string;
-    workspaceId: string;
-    sandboxGroupId: string;
-    descriptor: WorkspaceArchiveDescriptor;
-}): WorkspaceArchiveObjectRef | null;
 export declare function workspaceArchivePayloadPresent(sessionState: Record<string, unknown> | null | undefined): boolean;
 /** Restore may inline object bytes in memory for hydrate. That copy must never
  *  be published onto a lease when a durable object-storage ref exists. */

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@opengeni/contracts",
-  "version": "3.0.1-canary.0",
+  "version": "3.0.1",
   "description": "Shared zod schemas and wire-contract types for the OpenGeni API.",
   "license": "Apache-2.0",
   "repository": {

package/src/index.ts

@@ -180,9 +180,7 @@ export {
   encodeNativeSnapshotRef,
   omitInlineWorkspaceArchiveWhenObjectRefPresent,
   parseWorkspaceArchiveDescriptor,
-  parseWorkspaceArchiveObjectKey,
   parseWorkspaceArchiveObjectRef,
-  validateWorkspaceArchiveObjectRef,
   workspaceArchiveObjectKey,
   workspaceArchivePayloadPresent,
   type NativeSnapshotDescriptor,
@@ -191,7 +189,6 @@ export {
   type TarWorkspaceArchiveDescriptor,
   type WorkspaceArchiveDescriptor,
   type WorkspaceArchiveObjectRef,
-  type WorkspaceArchiveObjectKey,
   type WorkspaceTreeFingerprint,
 } from "./sandbox-snapshots";
 

package/src/sandbox-snapshots.ts

@@ -64,35 +64,8 @@ export type WorkspaceArchiveObjectRef = {
   backend: string;
 };
 
-// Keep legacy scope/key spelling readable. New physical upload identities must
-// be a complete RFC UUID (including version and variant), never arbitrary text.
-const UPLOAD_ID = /^[0-9a-f]{8}-[0-9a-f]{4}-[1-8][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i;
 const OBJECT_KEY =
-  /^sandbox-archives\/v1\/([0-9a-f-]{36})\/([0-9a-f-]{36})\/([0-9a-f-]{36})\/(wa1:[0-9]{13}:[0-9a-f]{64})(?:\.([0-9a-f-]+))?\.tar$/i;
-
-export type WorkspaceArchiveObjectKey = {
-  accountId: string;
-  workspaceId: string;
-  sandboxGroupId: string;
-  revision: string;
-  uploadId: string | null;
-};
-
-export function parseWorkspaceArchiveObjectKey(value: unknown): WorkspaceArchiveObjectKey | null {
-  if (typeof value !== "string") return null;
-  const match = OBJECT_KEY.exec(value);
-  // JS $ may match before a final newline; a locator must match in full.
-  if (!match || match[0] !== value || (match[5] !== undefined && !UPLOAD_ID.test(match[5]))) {
-    return null;
-  }
-  return {
-    accountId: match[1]!,
-    workspaceId: match[2]!,
-    sandboxGroupId: match[3]!,
-    revision: match[4]!,
-    uploadId: match[5] ?? null,
-  };
-}
+  /^sandbox-archives\/v1\/[0-9a-f-]{36}\/[0-9a-f-]{36}\/[0-9a-f-]{36}\/wa1:[0-9]{13}:[0-9a-f]{64}\.tar$/i;
 
 export function parseWorkspaceArchiveObjectRef(value: unknown): WorkspaceArchiveObjectRef | null {
   if (!value || typeof value !== "object" || Array.isArray(value)) return null;
@@ -100,7 +73,7 @@ export function parseWorkspaceArchiveObjectRef(value: unknown): WorkspaceArchive
   if (
     candidate.schema !== WORKSPACE_ARCHIVE_OBJECT_REF_SCHEMA ||
     typeof candidate.key !== "string" ||
-    !parseWorkspaceArchiveObjectKey(candidate.key) ||
+    !OBJECT_KEY.test(candidate.key) ||
     typeof candidate.sha256 !== "string" ||
     !SHA256.test(candidate.sha256) ||
     !nonnegativeInteger(candidate.bytes) ||
@@ -125,45 +98,8 @@ export function workspaceArchiveObjectKey(input: {
   workspaceId: string;
   sandboxGroupId: string;
   revision: string;
-  /** New upload invocations supply a fresh randomUUID; omission is legacy-only. */
-  uploadId?: string;
 }): string {
-  if (
-    input.uploadId !== undefined &&
-    (!UPLOAD_ID.test(input.uploadId) || input.uploadId.length !== 36)
-  ) {
-    throw new Error("Invalid workspace archive upload UUID");
-  }
-  return `sandbox-archives/v1/${input.accountId}/${input.workspaceId}/${input.sandboxGroupId}/${input.revision}${input.uploadId === undefined ? "" : `.${input.uploadId}`}.tar`;
-}
-
-/** Bind a stored locator to its publication/restore scope and verified tar
- * descriptor. A logical revision never substitutes for the exact physical key. */
-export function validateWorkspaceArchiveObjectRef(
-  value: unknown,
-  input: {
-    accountId: string;
-    workspaceId: string;
-    sandboxGroupId: string;
-    descriptor: WorkspaceArchiveDescriptor;
-  },
-): WorkspaceArchiveObjectRef | null {
-  const ref = parseWorkspaceArchiveObjectRef(value);
-  const key = ref && parseWorkspaceArchiveObjectKey(ref.key);
-  const descriptor = parseWorkspaceArchiveDescriptor(input.descriptor);
-  if (
-    !ref ||
-    !key ||
-    descriptor?.version !== 1 ||
-    key.accountId.toLowerCase() !== input.accountId.toLowerCase() ||
-    key.workspaceId.toLowerCase() !== input.workspaceId.toLowerCase() ||
-    key.sandboxGroupId.toLowerCase() !== input.sandboxGroupId.toLowerCase() ||
-    key.revision !== descriptor.revision ||
-    ref.sha256 !== descriptor.archiveSha256 ||
-    ref.bytes !== descriptor.archiveBytes
-  )
-    return null;
-  return ref;
+  return `sandbox-archives/v1/${input.accountId}/${input.workspaceId}/${input.sandboxGroupId}/${input.revision}.tar`;
 }
 
 export function workspaceArchivePayloadPresent(