@opengeni/contracts 3.0.1 → 3.0.2-canary.0

package/dist/{chunk-IRR7CBBW.js → chunk-FY5DZL7T.js}

@@ -4,7 +4,7 @@ import {
   SessionTenancyVisibility,
   UserResourceAuthorityGrant,
   UserResourceDelegation
-} from "./chunk-EHHDZLGY.js";
+} from "./chunk-FBXZZSXA.js";
 
 // src/connection-authority.ts
 import { z } from "zod";
@@ -345,4 +345,4 @@ export {
   ConnectionUseAuditFact,
   ConnectionUseAuthorizationResult
 };
-//# sourceMappingURL=chunk-IRR7CBBW.js.map
+//# sourceMappingURL=chunk-FY5DZL7T.js.map

package/dist/connect.js

@@ -1,7 +1,7 @@
 import {
   IntegrationInstanceKey,
   IntegrationSource
-} from "./chunk-EHHDZLGY.js";
+} from "./chunk-FBXZZSXA.js";
 import "./chunk-YBW5JSA3.js";
 import "./chunk-O5LEQHDM.js";
 import "./chunk-GRG7PHWQ.js";

package/dist/connection-authority.js

@@ -16,8 +16,8 @@ import {
   ListConnectionAuthoritiesQuery,
   ListConnectionAuthoritiesResponse,
   RevokeConnectionUseGrantQuery
-} from "./chunk-IRR7CBBW.js";
-import "./chunk-EHHDZLGY.js";
+} from "./chunk-FY5DZL7T.js";
+import "./chunk-FBXZZSXA.js";
 import "./chunk-YBW5JSA3.js";
 import "./chunk-O5LEQHDM.js";
 import "./chunk-GRG7PHWQ.js";

package/dist/google-drive.js

@@ -1,6 +1,6 @@
 import {
   ConnectionMetadata
-} from "./chunk-EHHDZLGY.js";
+} from "./chunk-FBXZZSXA.js";
 import "./chunk-YBW5JSA3.js";
 import "./chunk-O5LEQHDM.js";
 import "./chunk-GRG7PHWQ.js";

package/dist/host-mcp-bindings.js

@@ -1,12 +1,12 @@
 import {
   ConnectionUseAuthoritySnapshot,
   IssueConnectionUseGrantRequest
-} from "./chunk-IRR7CBBW.js";
+} from "./chunk-FY5DZL7T.js";
 import {
   HostMcpCreateSelections,
   McpServerConnectionRef,
   SessionTenancyVisibility
-} from "./chunk-EHHDZLGY.js";
+} from "./chunk-FBXZZSXA.js";
 import "./chunk-YBW5JSA3.js";
 import "./chunk-O5LEQHDM.js";
 import "./chunk-GRG7PHWQ.js";

package/dist/index.d.ts

@@ -37,7 +37,7 @@ export { CreateWorkspaceArtifactRequest, PublishWorkspaceArtifactVersionRequest,
 export { MCP_MUTATION_RECEIPT_MAX_BYTES, MCP_MUTATION_RECEIPT_VERSION, McpMutationReceipt, McpMutationReceiptIdempotencyStatus, McpMutationReceiptOutcome, McpMutationResource, type McpMutationReceipt as McpMutationReceiptType, type McpMutationReceiptIdempotencyStatus as McpMutationReceiptIdempotencyStatusType, type McpMutationReceiptOutcome as McpMutationReceiptOutcomeType, type McpMutationResource as McpMutationResourceType, } from "./mcp-receipts.js";
 export { SESSION_EVENT_PAYLOAD_MAX_BYTES, approximateSessionEventTokens, boundSessionEventPayload, measureSessionEventJson, sessionEventJsonBytes, sessionEventMediaPreview, sessionEventMediaPreviewFromDataUrl, sessionEventPayloadTruncation, type BoundSessionEventPayloadOptions, type SessionEventBoundarySurface, type SessionEventMediaPreview, type SessionEventJsonMeasurement, type SessionEventPayloadTruncation, } from "./event-preview.js";
 export { COMPUTER_SCREENSHOT_MAX_BYTES, COMPUTER_SCREENSHOT_MAX_DIMENSION, COMPUTER_SCREENSHOT_MAX_PIXELS, COMPUTER_SCREENSHOT_RETENTION_MS, COMPUTER_SCREENSHOT_WORKSPACE_QUOTA_BYTES, GENERATED_IMAGE_MAX_BYTES, GENERATED_VIDEO_MAX_BYTES, RETAINED_OUTPUT_DEFAULT_PAGE_BYTES, RETAINED_OUTPUT_MAX_PAGE_BYTES, RETAINED_OUTPUT_RECEIPT_MAX_BYTES, RetainedArtifactMetadataSchema, RetainedArtifactReferenceSchema, RetainedArtifactUnavailableSchema, RetainedOutputEvidenceSchema, RetainedOutputKind, RetainedOutputUnavailableReason, retainedArtifactReferenceFromFile, retainedGeneratedImageReferenceFromFile, retainedGeneratedVideoReferenceFromFile, retainedScreenshotReferenceFromFile, retainedOutputUnavailable, resolveRetainedOutputRange, validateRetainedOutputEvidence, type RetainedArtifactFileInput, type RetainedArtifactMetadata, type RetainedArtifactReference, type RetainedGeneratedImageArtifactInput, type RetainedGeneratedVideoArtifactInput, type RetainedScreenshotArtifactInput, type RetainedArtifactUnavailable, type RetainedOutputAvailableEvidence, type RetainedOutputEvidence, type RetainedOutputRangeResolution, type RetainedOutputResolvedRange, } from "./retained-output.js";
-export { NATIVE_SNAPSHOT_PREFIXES, WORKSPACE_ARCHIVE_DESCRIPTOR_VERSION, WORKSPACE_ARCHIVE_OBJECT_REF_SCHEMA, backendForNativeSnapshotProvider, decodeNativeSnapshotRef, encodeNativeSnapshotRef, omitInlineWorkspaceArchiveWhenObjectRefPresent, parseWorkspaceArchiveDescriptor, parseWorkspaceArchiveObjectRef, workspaceArchiveObjectKey, workspaceArchivePayloadPresent, type NativeSnapshotDescriptor, type NativeSnapshotProvider, type NativeSnapshotRef, type TarWorkspaceArchiveDescriptor, type WorkspaceArchiveDescriptor, type WorkspaceArchiveObjectRef, type WorkspaceTreeFingerprint, } from "./sandbox-snapshots.js";
+export { NATIVE_SNAPSHOT_PREFIXES, WORKSPACE_ARCHIVE_DESCRIPTOR_VERSION, WORKSPACE_ARCHIVE_OBJECT_REF_SCHEMA, backendForNativeSnapshotProvider, decodeNativeSnapshotRef, encodeNativeSnapshotRef, omitInlineWorkspaceArchiveWhenObjectRefPresent, parseWorkspaceArchiveDescriptor, parseWorkspaceArchiveObjectKey, parseWorkspaceArchiveObjectRef, validateWorkspaceArchiveObjectRef, workspaceArchiveObjectKey, workspaceArchivePayloadPresent, type NativeSnapshotDescriptor, type NativeSnapshotProvider, type NativeSnapshotRef, type TarWorkspaceArchiveDescriptor, type WorkspaceArchiveDescriptor, type WorkspaceArchiveObjectRef, type WorkspaceArchiveObjectKey, type WorkspaceTreeFingerprint, } from "./sandbox-snapshots.js";
 export { canonicalModalCheckpointProviderBinding, type ModalCheckpointProviderBinding, } from "./checkpoint-provider-bindings.js";
 export declare const SandboxBackend: z.ZodEnum<{
     blaxel: "blaxel";

package/dist/index.js

@@ -1798,6 +1798,7 @@ import {
   omitInlineWorkspaceArchiveWhenObjectRefPresent,
   parseSkillFrontmatter,
   parseWorkspaceArchiveDescriptor,
+  parseWorkspaceArchiveObjectKey,
   parseWorkspaceArchiveObjectRef,
   prefixedMcpToolName,
   readCodexCredentialPolicySnapshotV1,
@@ -1851,6 +1852,7 @@ import {
   toolResultSpillSandboxPath,
   turnExecutionPolicyAuditMetadata,
   validateSkillTextFiles,
+  validateWorkspaceArchiveObjectRef,
   variableSetVariableNameReservation,
   verifyDelegatedAccessToken,
   verifyEnrollToken,
@@ -1864,7 +1866,7 @@ import {
   workspaceLearningPolicyRouterContext,
   workspaceLearningSourceKey,
   workspaceSlackReactionChannelAllowed
-} from "./chunk-EHHDZLGY.js";
+} from "./chunk-FBXZZSXA.js";
 import {
   CONNECTOR_ATTACHMENT_FILENAME_MAX_UTF8_BYTES,
   CONNECTOR_ATTACHMENT_MAX_BYTES,
@@ -4215,6 +4217,7 @@ export {
   parseConnectorAttachmentTransferEnvelope,
   parseSkillFrontmatter,
   parseWorkspaceArchiveDescriptor,
+  parseWorkspaceArchiveObjectKey,
   parseWorkspaceArchiveObjectRef,
   prefixedMcpToolName,
   readCodexCredentialPolicySnapshotV1,
@@ -4279,6 +4282,7 @@ export {
   turnExecutionPolicyAuditMetadata,
   validateRetainedOutputEvidence,
   validateSkillTextFiles,
+  validateWorkspaceArchiveObjectRef,
   variableSetVariableNameReservation,
   verifyDelegatedAccessToken,
   verifyEnrollToken,

package/dist/personal-github.js

@@ -1,6 +1,6 @@
 import {
   ConnectionMetadata
-} from "./chunk-EHHDZLGY.js";
+} from "./chunk-FBXZZSXA.js";
 import "./chunk-YBW5JSA3.js";
 import "./chunk-O5LEQHDM.js";
 import "./chunk-GRG7PHWQ.js";

package/dist/sandbox-snapshots.d.ts

@@ -50,13 +50,31 @@ export type WorkspaceArchiveObjectRef = {
     bytes: number;
     backend: string;
 };
+export type WorkspaceArchiveObjectKey = {
+    accountId: string;
+    workspaceId: string;
+    sandboxGroupId: string;
+    revision: string;
+    uploadId: string | null;
+};
+export declare function parseWorkspaceArchiveObjectKey(value: unknown): WorkspaceArchiveObjectKey | null;
 export declare function parseWorkspaceArchiveObjectRef(value: unknown): WorkspaceArchiveObjectRef | null;
 export declare function workspaceArchiveObjectKey(input: {
     accountId: string;
     workspaceId: string;
     sandboxGroupId: string;
     revision: string;
+    /** New upload invocations supply a fresh randomUUID; omission is legacy-only. */
+    uploadId?: string;
 }): string;
+/** Bind a stored locator to its publication/restore scope and verified tar
+ * descriptor. A logical revision never substitutes for the exact physical key. */
+export declare function validateWorkspaceArchiveObjectRef(value: unknown, input: {
+    accountId: string;
+    workspaceId: string;
+    sandboxGroupId: string;
+    descriptor: WorkspaceArchiveDescriptor;
+}): WorkspaceArchiveObjectRef | null;
 export declare function workspaceArchivePayloadPresent(sessionState: Record<string, unknown> | null | undefined): boolean;
 /** Restore may inline object bytes in memory for hydrate. That copy must never
  *  be published onto a lease when a durable object-storage ref exists. */

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@opengeni/contracts",
-  "version": "3.0.1",
+  "version": "3.0.2-canary.0",
   "description": "Shared zod schemas and wire-contract types for the OpenGeni API.",
   "license": "Apache-2.0",
   "repository": {

package/src/index.ts

@@ -180,7 +180,9 @@ export {
   encodeNativeSnapshotRef,
   omitInlineWorkspaceArchiveWhenObjectRefPresent,
   parseWorkspaceArchiveDescriptor,
+  parseWorkspaceArchiveObjectKey,
   parseWorkspaceArchiveObjectRef,
+  validateWorkspaceArchiveObjectRef,
   workspaceArchiveObjectKey,
   workspaceArchivePayloadPresent,
   type NativeSnapshotDescriptor,
@@ -189,6 +191,7 @@ export {
   type TarWorkspaceArchiveDescriptor,
   type WorkspaceArchiveDescriptor,
   type WorkspaceArchiveObjectRef,
+  type WorkspaceArchiveObjectKey,
   type WorkspaceTreeFingerprint,
 } from "./sandbox-snapshots";
 

package/src/sandbox-snapshots.ts

@@ -64,8 +64,35 @@ export type WorkspaceArchiveObjectRef = {
   backend: string;
 };
 
+// Keep legacy scope/key spelling readable. New physical upload identities must
+// be a complete RFC UUID (including version and variant), never arbitrary text.
+const UPLOAD_ID = /^[0-9a-f]{8}-[0-9a-f]{4}-[1-8][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i;
 const OBJECT_KEY =
-  /^sandbox-archives\/v1\/[0-9a-f-]{36}\/[0-9a-f-]{36}\/[0-9a-f-]{36}\/wa1:[0-9]{13}:[0-9a-f]{64}\.tar$/i;
+  /^sandbox-archives\/v1\/([0-9a-f-]{36})\/([0-9a-f-]{36})\/([0-9a-f-]{36})\/(wa1:[0-9]{13}:[0-9a-f]{64})(?:\.([0-9a-f-]+))?\.tar$/i;
+
+export type WorkspaceArchiveObjectKey = {
+  accountId: string;
+  workspaceId: string;
+  sandboxGroupId: string;
+  revision: string;
+  uploadId: string | null;
+};
+
+export function parseWorkspaceArchiveObjectKey(value: unknown): WorkspaceArchiveObjectKey | null {
+  if (typeof value !== "string") return null;
+  const match = OBJECT_KEY.exec(value);
+  // JS $ may match before a final newline; a locator must match in full.
+  if (!match || match[0] !== value || (match[5] !== undefined && !UPLOAD_ID.test(match[5]))) {
+    return null;
+  }
+  return {
+    accountId: match[1]!,
+    workspaceId: match[2]!,
+    sandboxGroupId: match[3]!,
+    revision: match[4]!,
+    uploadId: match[5] ?? null,
+  };
+}
 
 export function parseWorkspaceArchiveObjectRef(value: unknown): WorkspaceArchiveObjectRef | null {
   if (!value || typeof value !== "object" || Array.isArray(value)) return null;
@@ -73,7 +100,7 @@ export function parseWorkspaceArchiveObjectRef(value: unknown): WorkspaceArchive
   if (
     candidate.schema !== WORKSPACE_ARCHIVE_OBJECT_REF_SCHEMA ||
     typeof candidate.key !== "string" ||
-    !OBJECT_KEY.test(candidate.key) ||
+    !parseWorkspaceArchiveObjectKey(candidate.key) ||
     typeof candidate.sha256 !== "string" ||
     !SHA256.test(candidate.sha256) ||
     !nonnegativeInteger(candidate.bytes) ||
@@ -98,8 +125,45 @@ export function workspaceArchiveObjectKey(input: {
   workspaceId: string;
   sandboxGroupId: string;
   revision: string;
+  /** New upload invocations supply a fresh randomUUID; omission is legacy-only. */
+  uploadId?: string;
 }): string {
-  return `sandbox-archives/v1/${input.accountId}/${input.workspaceId}/${input.sandboxGroupId}/${input.revision}.tar`;
+  if (
+    input.uploadId !== undefined &&
+    (!UPLOAD_ID.test(input.uploadId) || input.uploadId.length !== 36)
+  ) {
+    throw new Error("Invalid workspace archive upload UUID");
+  }
+  return `sandbox-archives/v1/${input.accountId}/${input.workspaceId}/${input.sandboxGroupId}/${input.revision}${input.uploadId === undefined ? "" : `.${input.uploadId}`}.tar`;
+}
+
+/** Bind a stored locator to its publication/restore scope and verified tar
+ * descriptor. A logical revision never substitutes for the exact physical key. */
+export function validateWorkspaceArchiveObjectRef(
+  value: unknown,
+  input: {
+    accountId: string;
+    workspaceId: string;
+    sandboxGroupId: string;
+    descriptor: WorkspaceArchiveDescriptor;
+  },
+): WorkspaceArchiveObjectRef | null {
+  const ref = parseWorkspaceArchiveObjectRef(value);
+  const key = ref && parseWorkspaceArchiveObjectKey(ref.key);
+  const descriptor = parseWorkspaceArchiveDescriptor(input.descriptor);
+  if (
+    !ref ||
+    !key ||
+    descriptor?.version !== 1 ||
+    key.accountId.toLowerCase() !== input.accountId.toLowerCase() ||
+    key.workspaceId.toLowerCase() !== input.workspaceId.toLowerCase() ||
+    key.sandboxGroupId.toLowerCase() !== input.sandboxGroupId.toLowerCase() ||
+    key.revision !== descriptor.revision ||
+    ref.sha256 !== descriptor.archiveSha256 ||
+    ref.bytes !== descriptor.archiveBytes
+  )
+    return null;
+  return ref;
 }
 
 export function workspaceArchivePayloadPresent(