@panorama-ai/gateway 2.30.207 → 2.30.279

package/dist/managed-runtime/config.d.ts

@@ -1,3 +1,15 @@
+export type ManagedGatewayDriveSyncConfig = {
+    enabled: boolean;
+    rootDir: string;
+    stateDir: string;
+    clientKey: string | null;
+    changeLimit: number;
+    maxBatchesPerTick: number;
+    debounceMs: number;
+    pollIntervalMs: number;
+    localAuditIntervalMs: number;
+    networkTimeoutMs?: number;
+};
 export type ManagedGatewayRuntimeConfig = {
     agentId: string;
     hostId: string;
@@ -15,6 +27,7 @@ export type ManagedGatewayRuntimeConfig = {
     outputCaptureBytes: number;
     heartbeatIntervalMs: number;
     maxConsecutiveHeartbeatFailures: number;
+    driveSync: ManagedGatewayDriveSyncConfig;
 };
 export declare function resolveManagedGatewayRuntimeConfig(env?: NodeJS.ProcessEnv): ManagedGatewayRuntimeConfig;
 //# sourceMappingURL=config.d.ts.map

package/dist/managed-runtime/config.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../src/managed-runtime/config.ts"],"names":[],"mappings":"AAYA,MAAM,MAAM,2BAA2B,GAAG;IACxC,OAAO,EAAE,MAAM,CAAA;IACf,MAAM,EAAE,MAAM,CAAA;IACd,qBAAqB,EAAE,MAAM,CAAA;IAC7B,SAAS,EAAE,MAAM,CAAA;IACjB,WAAW,EAAE,MAAM,CAAA;IACnB,eAAe,EAAE,MAAM,CAAA;IACvB,cAAc,EAAE,MAAM,CAAA;IACtB,gBAAgB,EAAE,MAAM,CAAA;IACxB,gBAAgB,EAAE,MAAM,CAAA;IACxB,kBAAkB,EAAE,MAAM,CAAA;IAC1B,cAAc,EAAE,MAAM,CAAA;IACtB,gBAAgB,EAAE,MAAM,CAAA;IACxB,aAAa,EAAE,MAAM,CAAA;IACrB,kBAAkB,EAAE,MAAM,CAAA;IAC1B,mBAAmB,EAAE,MAAM,CAAA;IAC3B,+BAA+B,EAAE,MAAM,CAAA;CACxC,CAAA;AAiCD,wBAAgB,kCAAkC,CAChD,GAAG,GAAE,MAAM,CAAC,UAAwB,GACnC,2BAA2B,CAsE7B"}
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../src/managed-runtime/config.ts"],"names":[],"mappings":"AAqBA,MAAM,MAAM,6BAA6B,GAAG;IAC1C,OAAO,EAAE,OAAO,CAAA;IAChB,OAAO,EAAE,MAAM,CAAA;IACf,QAAQ,EAAE,MAAM,CAAA;IAChB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;IACxB,WAAW,EAAE,MAAM,CAAA;IACnB,iBAAiB,EAAE,MAAM,CAAA;IACzB,UAAU,EAAE,MAAM,CAAA;IAClB,cAAc,EAAE,MAAM,CAAA;IACtB,oBAAoB,EAAE,MAAM,CAAA;IAC5B,gBAAgB,CAAC,EAAE,MAAM,CAAA;CAC1B,CAAA;AAED,MAAM,MAAM,2BAA2B,GAAG;IACxC,OAAO,EAAE,MAAM,CAAA;IACf,MAAM,EAAE,MAAM,CAAA;IACd,qBAAqB,EAAE,MAAM,CAAA;IAC7B,SAAS,EAAE,MAAM,CAAA;IACjB,WAAW,EAAE,MAAM,CAAA;IACnB,eAAe,EAAE,MAAM,CAAA;IACvB,cAAc,EAAE,MAAM,CAAA;IACtB,gBAAgB,EAAE,MAAM,CAAA;IACxB,gBAAgB,EAAE,MAAM,CAAA;IACxB,kBAAkB,EAAE,MAAM,CAAA;IAC1B,cAAc,EAAE,MAAM,CAAA;IACtB,gBAAgB,EAAE,MAAM,CAAA;IACxB,aAAa,EAAE,MAAM,CAAA;IACrB,kBAAkB,EAAE,MAAM,CAAA;IAC1B,mBAAmB,EAAE,MAAM,CAAA;IAC3B,+BAA+B,EAAE,MAAM,CAAA;IACvC,SAAS,EAAE,6BAA6B,CAAA;CACzC,CAAA;AA6CD,wBAAgB,kCAAkC,CAChD,GAAG,GAAE,MAAM,CAAC,UAAwB,GACnC,2BAA2B,CA0G7B"}

package/dist/managed-runtime/config.js

@@ -1,3 +1,4 @@
+import { DRIVE_TRANSFER_POLICY } from '@panorama/shared/drive-transfer-policy';
 import { buildLinuxHostControlUrl } from '@panorama/shared/linux-host-control/contract';
 import { buildToolExecutionUrl } from '@panorama/shared/tools/execution-contract';
 import { hostname } from 'node:os';
@@ -8,6 +9,14 @@ const DEFAULT_EXEC_TIMEOUT_MS = 300_000;
 const DEFAULT_HEARTBEAT_INTERVAL_MS = 15_000;
 const DEFAULT_MAX_CONSECUTIVE_HEARTBEAT_FAILURES = 3;
 const DEFAULT_OUTPUT_CAPTURE_BYTES = 5_000_000;
+const DEFAULT_DRIVE_SYNC_ROOT = '/panorama/drives';
+const DEFAULT_DRIVE_SYNC_STATE_DIR = '/var/lib/panorama/drive-sync';
+const DEFAULT_DRIVE_SYNC_CHANGE_LIMIT = 50;
+const DEFAULT_DRIVE_SYNC_MAX_BATCHES_PER_TICK = 25;
+const DEFAULT_DRIVE_SYNC_DEBOUNCE_MS = 1_000;
+const DEFAULT_DRIVE_SYNC_POLL_INTERVAL_MS = 5_000;
+const DEFAULT_DRIVE_SYNC_LOCAL_AUDIT_INTERVAL_MS = 300_000;
+const DEFAULT_DRIVE_SYNC_NETWORK_TIMEOUT_MS = DRIVE_TRANSFER_POLICY.networkRequestTimeoutMs;
 function requireEnv(name, env = process.env) {
     const value = env[name]?.trim();
     if (!value) {
@@ -25,6 +34,16 @@ function readPositiveInt(name, fallback, env = process.env) {
     }
     return Math.floor(parsed);
 }
+function readBoolean(name, fallback, env = process.env) {
+    const raw = env[name]?.trim().toLowerCase();
+    if (!raw)
+        return fallback;
+    if (['1', 'true', 'yes', 'on'].includes(raw))
+        return true;
+    if (['0', 'false', 'no', 'off'].includes(raw))
+        return false;
+    throw new Error(`${name} must be a boolean`);
+}
 function requirePositiveInt(name, env = process.env) {
     const raw = requireEnv(name, env);
     const parsed = Number(raw);
@@ -75,6 +94,18 @@ export function resolveManagedGatewayRuntimeConfig(env = process.env) {
         outputCaptureBytes: readPositiveInt('PANORAMA_MANAGED_RUNTIME_OUTPUT_CAPTURE_BYTES', DEFAULT_OUTPUT_CAPTURE_BYTES, env),
         heartbeatIntervalMs: readPositiveInt('PANORAMA_MANAGED_RUNTIME_HEARTBEAT_INTERVAL_MS', DEFAULT_HEARTBEAT_INTERVAL_MS, env),
         maxConsecutiveHeartbeatFailures: readPositiveInt('PANORAMA_MANAGED_RUNTIME_MAX_CONSECUTIVE_HEARTBEAT_FAILURES', DEFAULT_MAX_CONSECUTIVE_HEARTBEAT_FAILURES, env),
+        driveSync: {
+            enabled: readBoolean('PANORAMA_DRIVE_SYNC_ENABLED', false, env),
+            rootDir: env.PANORAMA_DRIVE_SYNC_ROOT?.trim() || DEFAULT_DRIVE_SYNC_ROOT,
+            stateDir: env.PANORAMA_DRIVE_SYNC_STATE_DIR?.trim() || DEFAULT_DRIVE_SYNC_STATE_DIR,
+            clientKey: env.PANORAMA_DRIVE_SYNC_CLIENT_KEY?.trim() || null,
+            changeLimit: readPositiveInt('PANORAMA_DRIVE_SYNC_CHANGE_LIMIT', DEFAULT_DRIVE_SYNC_CHANGE_LIMIT, env),
+            maxBatchesPerTick: readPositiveInt('PANORAMA_DRIVE_SYNC_MAX_BATCHES_PER_TICK', DEFAULT_DRIVE_SYNC_MAX_BATCHES_PER_TICK, env),
+            debounceMs: readPositiveInt('PANORAMA_DRIVE_SYNC_DEBOUNCE_MS', DEFAULT_DRIVE_SYNC_DEBOUNCE_MS, env),
+            pollIntervalMs: readPositiveInt('PANORAMA_DRIVE_SYNC_POLL_INTERVAL_MS', DEFAULT_DRIVE_SYNC_POLL_INTERVAL_MS, env),
+            localAuditIntervalMs: readPositiveInt('PANORAMA_DRIVE_SYNC_LOCAL_AUDIT_INTERVAL_MS', DEFAULT_DRIVE_SYNC_LOCAL_AUDIT_INTERVAL_MS, env),
+            networkTimeoutMs: readPositiveInt('PANORAMA_DRIVE_SYNC_NETWORK_TIMEOUT_MS', DEFAULT_DRIVE_SYNC_NETWORK_TIMEOUT_MS, env),
+        },
     };
 }
 //# sourceMappingURL=config.js.map

package/dist/managed-runtime/config.js.map

@@ -1 +1 @@
-{"version":3,"file":"config.js","sourceRoot":"","sources":["../../src/managed-runtime/config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,wBAAwB,EAAE,MAAM,8CAA8C,CAAA;AACvF,OAAO,EAAE,qBAAqB,EAAE,MAAM,2CAA2C,CAAA;AACjF,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAA;AAClC,OAAO,OAAO,MAAM,cAAc,CAAA;AAElC,MAAM,wBAAwB,GAAG,KAAK,CAAA;AACtC,MAAM,0BAA0B,GAAG,MAAM,CAAA;AACzC,MAAM,uBAAuB,GAAG,OAAO,CAAA;AACvC,MAAM,6BAA6B,GAAG,MAAM,CAAA;AAC5C,MAAM,0CAA0C,GAAG,CAAC,CAAA;AACpD,MAAM,4BAA4B,GAAG,SAAS,CAAA;AAqB9C,SAAS,UAAU,CAAC,IAAY,EAAE,MAAyB,OAAO,CAAC,GAAG;IACpE,MAAM,KAAK,GAAG,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAA;IAC/B,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,cAAc,CAAC,CAAA;IACxC,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC;AAED,SAAS,eAAe,CACtB,IAAY,EACZ,QAAgB,EAChB,MAAyB,OAAO,CAAC,GAAG;IAEpC,MAAM,GAAG,GAAG,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAA;IAC7B,IAAI,CAAC,GAAG;QAAE,OAAO,QAAQ,CAAA;IACzB,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,CAAA;IAC1B,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,MAAM,IAAI,CAAC,EAAE,CAAC;QAC5C,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,4BAA4B,CAAC,CAAA;IACtD,CAAC;IACD,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAA;AAC3B,CAAC;AAED,SAAS,kBAAkB,CAAC,IAAY,EAAE,MAAyB,OAAO,CAAC,GAAG;IAC5E,MAAM,GAAG,GAAG,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,CAAA;IACjC,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,CAAA;IAC1B,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,MAAM,IAAI,CAAC,EAAE,CAAC;QAC5C,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,4BAA4B,CAAC,CAAA;IACtD,CAAC;IACD,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAA;AAC3B,CAAC;AAED,MAAM,UAAU,kCAAkC,CAChD,MAAyB,OAAO,CAAC,GAAG;IAEpC,MAAM,OAAO,GAAG,UAAU,CAAC,mBAAmB,EAAE,GAAG,CAAC,CAAA;IACpD,MAAM,MAAM,GAAG,UAAU,CAAC,wBAAwB,EAAE,GAAG,CAAC,CAAA;IACxD,MAAM,qBAAqB,GAAG,kBAAkB,CAAC,wCAAwC,EAAE,GAAG,CAAC,CAAA;IAC/F,MAAM,WAAW,GAAG,GAAG,CAAC,qBAAqB,EAAE,IAAI,EAAE,IAAI,GAAG,CAAC,YAAY,EAAE,IAAI,EAAE,IAAI,IAAI,CAAA;IACzF,MAAM,eAAe,GACnB,GAAG,CAAC,0BAA0B,EAAE,IAAI,EAAE;QACtC,GAAG,CAAC,iBAAiB,EAAE,IAAI,EAAE;QAC7B,GAAG,CAAC,wBAAwB,EAAE,IAAI,EAAE;QACpC,IAAI,CAAA;IACN,MAAM,cAAc,GAClB,GAAG,CAAC,+BAA+B,EAAE,IAAI,EAAE;QAC3C,CAAC,WAAW,CAAC,CAAC,CAAC,wBAAwB,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAA;IAC9D,MAAM,gBAAgB,GACpB,GAAG,CAAC,2BAA2B,EAAE,IAAI,EAAE;QACvC,CAAC,WAAW,CAAC,CAAC,CAAC,qBAAqB,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAA;IAE3D,IAAI,CAAC,cAAc,EAAE,CAAC;QACpB,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAA;IAChE,CAAC;IACD,IAAI,CAAC,gBAAgB,EAAE,CAAC;QACtB,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAA;IAC5D,CAAC;IACD,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAA;IACtE,CAAC;IACD,IAAI,CAAC,eAAe,EAAE,CAAC;QACrB,MAAM,IAAI,KAAK,CACb,wFAAwF,CACzF,CAAA;IACH,CAAC;IAED,OAAO;QACL,OAAO;QACP,MAAM;QACN,qBAAqB;QACrB,SAAS,EAAE,GAAG,CAAC,2BAA2B,EAAE,IAAI,EAAE,IAAI,GAAG,QAAQ,EAAE,IAAI,OAAO,CAAC,GAAG,EAAE;QACpF,WAAW;QACX,eAAe;QACf,cAAc;QACd,gBAAgB,EAAE,UAAU,CAAC,mCAAmC,EAAE,GAAG,CAAC;QACtE,gBAAgB;QAChB,kBAAkB,EAAE,UAAU,CAAC,+BAA+B,EAAE,GAAG,CAAC;QACpE,cAAc,EAAE,eAAe,CAC7B,2CAA2C,EAC3C,wBAAwB,EACxB,GAAG,CACJ;QACD,gBAAgB,EAAE,eAAe,CAC/B,6CAA6C,EAC7C,0BAA0B,EAC1B,GAAG,CACJ;QACD,aAAa,EAAE,eAAe,CAAC,gCAAgC,EAAE,uBAAuB,EAAE,GAAG,CAAC;QAC9F,kBAAkB,EAAE,eAAe,CACjC,+CAA+C,EAC/C,4BAA4B,EAC5B,GAAG,CACJ;QACD,mBAAmB,EAAE,eAAe,CAClC,gDAAgD,EAChD,6BAA6B,EAC7B,GAAG,CACJ;QACD,+BAA+B,EAAE,eAAe,CAC9C,6DAA6D,EAC7D,0CAA0C,EAC1C,GAAG,CACJ;KACF,CAAA;AACH,CAAC"}
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../../src/managed-runtime/config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,qBAAqB,EAAE,MAAM,wCAAwC,CAAA;AAC9E,OAAO,EAAE,wBAAwB,EAAE,MAAM,8CAA8C,CAAA;AACvF,OAAO,EAAE,qBAAqB,EAAE,MAAM,2CAA2C,CAAA;AACjF,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAA;AAClC,OAAO,OAAO,MAAM,cAAc,CAAA;AAElC,MAAM,wBAAwB,GAAG,KAAK,CAAA;AACtC,MAAM,0BAA0B,GAAG,MAAM,CAAA;AACzC,MAAM,uBAAuB,GAAG,OAAO,CAAA;AACvC,MAAM,6BAA6B,GAAG,MAAM,CAAA;AAC5C,MAAM,0CAA0C,GAAG,CAAC,CAAA;AACpD,MAAM,4BAA4B,GAAG,SAAS,CAAA;AAC9C,MAAM,uBAAuB,GAAG,kBAAkB,CAAA;AAClD,MAAM,4BAA4B,GAAG,8BAA8B,CAAA;AACnE,MAAM,+BAA+B,GAAG,EAAE,CAAA;AAC1C,MAAM,uCAAuC,GAAG,EAAE,CAAA;AAClD,MAAM,8BAA8B,GAAG,KAAK,CAAA;AAC5C,MAAM,mCAAmC,GAAG,KAAK,CAAA;AACjD,MAAM,0CAA0C,GAAG,OAAO,CAAA;AAC1D,MAAM,qCAAqC,GAAG,qBAAqB,CAAC,uBAAuB,CAAA;AAmC3F,SAAS,UAAU,CAAC,IAAY,EAAE,MAAyB,OAAO,CAAC,GAAG;IACpE,MAAM,KAAK,GAAG,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAA;IAC/B,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,cAAc,CAAC,CAAA;IACxC,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC;AAED,SAAS,eAAe,CACtB,IAAY,EACZ,QAAgB,EAChB,MAAyB,OAAO,CAAC,GAAG;IAEpC,MAAM,GAAG,GAAG,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAA;IAC7B,IAAI,CAAC,GAAG;QAAE,OAAO,QAAQ,CAAA;IACzB,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,CAAA;IAC1B,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,MAAM,IAAI,CAAC,EAAE,CAAC;QAC5C,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,4BAA4B,CAAC,CAAA;IACtD,CAAC;IACD,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAA;AAC3B,CAAC;AAED,SAAS,WAAW,CAClB,IAAY,EACZ,QAAiB,EACjB,MAAyB,OAAO,CAAC,GAAG;IAEpC,MAAM,GAAG,GAAG,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,WAAW,EAAE,CAAA;IAC3C,IAAI,CAAC,GAAG;QAAE,OAAO,QAAQ,CAAA;IACzB,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAA;IACzD,IAAI,CAAC,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,OAAO,KAAK,CAAA;IAC3D,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,oBAAoB,CAAC,CAAA;AAC9C,CAAC;AAED,SAAS,kBAAkB,CAAC,IAAY,EAAE,MAAyB,OAAO,CAAC,GAAG;IAC5E,MAAM,GAAG,GAAG,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,CAAA;IACjC,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,CAAA;IAC1B,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,MAAM,IAAI,CAAC,EAAE,CAAC;QAC5C,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,4BAA4B,CAAC,CAAA;IACtD,CAAC;IACD,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAA;AAC3B,CAAC;AAED,MAAM,UAAU,kCAAkC,CAChD,MAAyB,OAAO,CAAC,GAAG;IAEpC,MAAM,OAAO,GAAG,UAAU,CAAC,mBAAmB,EAAE,GAAG,CAAC,CAAA;IACpD,MAAM,MAAM,GAAG,UAAU,CAAC,wBAAwB,EAAE,GAAG,CAAC,CAAA;IACxD,MAAM,qBAAqB,GAAG,kBAAkB,CAAC,wCAAwC,EAAE,GAAG,CAAC,CAAA;IAC/F,MAAM,WAAW,GAAG,GAAG,CAAC,qBAAqB,EAAE,IAAI,EAAE,IAAI,GAAG,CAAC,YAAY,EAAE,IAAI,EAAE,IAAI,IAAI,CAAA;IACzF,MAAM,eAAe,GACnB,GAAG,CAAC,0BAA0B,EAAE,IAAI,EAAE;QACtC,GAAG,CAAC,iBAAiB,EAAE,IAAI,EAAE;QAC7B,GAAG,CAAC,wBAAwB,EAAE,IAAI,EAAE;QACpC,IAAI,CAAA;IACN,MAAM,cAAc,GAClB,GAAG,CAAC,+BAA+B,EAAE,IAAI,EAAE;QAC3C,CAAC,WAAW,CAAC,CAAC,CAAC,wBAAwB,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAA;IAC9D,MAAM,gBAAgB,GACpB,GAAG,CAAC,2BAA2B,EAAE,IAAI,EAAE;QACvC,CAAC,WAAW,CAAC,CAAC,CAAC,qBAAqB,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAA;IAE3D,IAAI,CAAC,cAAc,EAAE,CAAC;QACpB,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAA;IAChE,CAAC;IACD,IAAI,CAAC,gBAAgB,EAAE,CAAC;QACtB,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAA;IAC5D,CAAC;IACD,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAA;IACtE,CAAC;IACD,IAAI,CAAC,eAAe,EAAE,CAAC;QACrB,MAAM,IAAI,KAAK,CACb,wFAAwF,CACzF,CAAA;IACH,CAAC;IAED,OAAO;QACL,OAAO;QACP,MAAM;QACN,qBAAqB;QACrB,SAAS,EAAE,GAAG,CAAC,2BAA2B,EAAE,IAAI,EAAE,IAAI,GAAG,QAAQ,EAAE,IAAI,OAAO,CAAC,GAAG,EAAE;QACpF,WAAW;QACX,eAAe;QACf,cAAc;QACd,gBAAgB,EAAE,UAAU,CAAC,mCAAmC,EAAE,GAAG,CAAC;QACtE,gBAAgB;QAChB,kBAAkB,EAAE,UAAU,CAAC,+BAA+B,EAAE,GAAG,CAAC;QACpE,cAAc,EAAE,eAAe,CAC7B,2CAA2C,EAC3C,wBAAwB,EACxB,GAAG,CACJ;QACD,gBAAgB,EAAE,eAAe,CAC/B,6CAA6C,EAC7C,0BAA0B,EAC1B,GAAG,CACJ;QACD,aAAa,EAAE,eAAe,CAAC,gCAAgC,EAAE,uBAAuB,EAAE,GAAG,CAAC;QAC9F,kBAAkB,EAAE,eAAe,CACjC,+CAA+C,EAC/C,4BAA4B,EAC5B,GAAG,CACJ;QACD,mBAAmB,EAAE,eAAe,CAClC,gDAAgD,EAChD,6BAA6B,EAC7B,GAAG,CACJ;QACD,+BAA+B,EAAE,eAAe,CAC9C,6DAA6D,EAC7D,0CAA0C,EAC1C,GAAG,CACJ;QACD,SAAS,EAAE;YACT,OAAO,EAAE,WAAW,CAAC,6BAA6B,EAAE,KAAK,EAAE,GAAG,CAAC;YAC/D,OAAO,EAAE,GAAG,CAAC,wBAAwB,EAAE,IAAI,EAAE,IAAI,uBAAuB;YACxE,QAAQ,EAAE,GAAG,CAAC,6BAA6B,EAAE,IAAI,EAAE,IAAI,4BAA4B;YACnF,SAAS,EAAE,GAAG,CAAC,8BAA8B,EAAE,IAAI,EAAE,IAAI,IAAI;YAC7D,WAAW,EAAE,eAAe,CAC1B,kCAAkC,EAClC,+BAA+B,EAC/B,GAAG,CACJ;YACD,iBAAiB,EAAE,eAAe,CAChC,0CAA0C,EAC1C,uCAAuC,EACvC,GAAG,CACJ;YACD,UAAU,EAAE,eAAe,CACzB,iCAAiC,EACjC,8BAA8B,EAC9B,GAAG,CACJ;YACD,cAAc,EAAE,eAAe,CAC7B,sCAAsC,EACtC,mCAAmC,EACnC,GAAG,CACJ;YACD,oBAAoB,EAAE,eAAe,CACnC,6CAA6C,EAC7C,0CAA0C,EAC1C,GAAG,CACJ;YACD,gBAAgB,EAAE,eAAe,CAC/B,wCAAwC,EACxC,qCAAqC,EACrC,GAAG,CACJ;SACF;KACF,CAAA;AACH,CAAC"}

package/dist/managed-runtime/dependencies.d.ts

@@ -1,5 +1,6 @@
 import { completeLinuxExecution, dispatchLinuxExecution, heartbeatLinuxHost, reconcileExecutionLifecycle, startLinuxExecution } from './control-client.js';
 import { createManagedRealtimeClient, startManagedRealtimeWakeLoop } from './realtime.js';
+import { createManagedDriveSyncService } from './drive-sync.js';
 import { executeCommand } from './shell-execution.js';
 export type ResolvedManagedGatewayRuntimeDependencies = {
     heartbeatLinuxHost: typeof heartbeatLinuxHost;
@@ -10,6 +11,7 @@ export type ResolvedManagedGatewayRuntimeDependencies = {
     executeCommand: typeof executeCommand;
     createRealtimeClient: typeof createManagedRealtimeClient;
     startRealtimeWakeLoop: typeof startManagedRealtimeWakeLoop;
+    createDriveSyncService: typeof createManagedDriveSyncService;
     registerSignalHandlers: (onSignal: (signal: NodeJS.Signals) => void) => () => void;
 };
 export type ManagedGatewayRuntimeDependencies = Partial<ResolvedManagedGatewayRuntimeDependencies>;

package/dist/managed-runtime/dependencies.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"dependencies.d.ts","sourceRoot":"","sources":["../../src/managed-runtime/dependencies.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,sBAAsB,EACtB,sBAAsB,EACtB,kBAAkB,EAClB,2BAA2B,EAC3B,mBAAmB,EACpB,MAAM,qBAAqB,CAAA;AAC5B,OAAO,EAAE,2BAA2B,EAAE,4BAA4B,EAAE,MAAM,eAAe,CAAA;AACzF,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAA;AAErD,MAAM,MAAM,yCAAyC,GAAG;IACtD,kBAAkB,EAAE,OAAO,kBAAkB,CAAA;IAC7C,sBAAsB,EAAE,OAAO,sBAAsB,CAAA;IACrD,mBAAmB,EAAE,OAAO,mBAAmB,CAAA;IAC/C,sBAAsB,EAAE,OAAO,sBAAsB,CAAA;IACrD,2BAA2B,EAAE,OAAO,2BAA2B,CAAA;IAC/D,cAAc,EAAE,OAAO,cAAc,CAAA;IACrC,oBAAoB,EAAE,OAAO,2BAA2B,CAAA;IACxD,qBAAqB,EAAE,OAAO,4BAA4B,CAAA;IAC1D,sBAAsB,EAAE,CAAC,QAAQ,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,OAAO,KAAK,IAAI,KAAK,MAAM,IAAI,CAAA;CACnF,CAAA;AAED,MAAM,MAAM,iCAAiC,GAAG,OAAO,CAAC,yCAAyC,CAAC,CAAA;AAqBlG,wBAAgB,wCAAwC,CACtD,YAAY,GAAE,iCAAsC,GACnD,yCAAyC,CAK3C"}
+{"version":3,"file":"dependencies.d.ts","sourceRoot":"","sources":["../../src/managed-runtime/dependencies.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,sBAAsB,EACtB,sBAAsB,EACtB,kBAAkB,EAClB,2BAA2B,EAC3B,mBAAmB,EACpB,MAAM,qBAAqB,CAAA;AAC5B,OAAO,EAAE,2BAA2B,EAAE,4BAA4B,EAAE,MAAM,eAAe,CAAA;AACzF,OAAO,EAAE,6BAA6B,EAAE,MAAM,iBAAiB,CAAA;AAC/D,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAA;AAErD,MAAM,MAAM,yCAAyC,GAAG;IACtD,kBAAkB,EAAE,OAAO,kBAAkB,CAAA;IAC7C,sBAAsB,EAAE,OAAO,sBAAsB,CAAA;IACrD,mBAAmB,EAAE,OAAO,mBAAmB,CAAA;IAC/C,sBAAsB,EAAE,OAAO,sBAAsB,CAAA;IACrD,2BAA2B,EAAE,OAAO,2BAA2B,CAAA;IAC/D,cAAc,EAAE,OAAO,cAAc,CAAA;IACrC,oBAAoB,EAAE,OAAO,2BAA2B,CAAA;IACxD,qBAAqB,EAAE,OAAO,4BAA4B,CAAA;IAC1D,sBAAsB,EAAE,OAAO,6BAA6B,CAAA;IAC5D,sBAAsB,EAAE,CAAC,QAAQ,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,OAAO,KAAK,IAAI,KAAK,MAAM,IAAI,CAAA;CACnF,CAAA;AAED,MAAM,MAAM,iCAAiC,GAAG,OAAO,CAAC,yCAAyC,CAAC,CAAA;AAsBlG,wBAAgB,wCAAwC,CACtD,YAAY,GAAE,iCAAsC,GACnD,yCAAyC,CAK3C"}

package/dist/managed-runtime/dependencies.js

@@ -1,5 +1,6 @@
 import { completeLinuxExecution, dispatchLinuxExecution, heartbeatLinuxHost, reconcileExecutionLifecycle, startLinuxExecution, } from './control-client.js';
 import { createManagedRealtimeClient, startManagedRealtimeWakeLoop } from './realtime.js';
+import { createManagedDriveSyncService } from './drive-sync.js';
 import { executeCommand } from './shell-execution.js';
 const defaultManagedGatewayRuntimeDependencies = {
     heartbeatLinuxHost,
@@ -10,6 +11,7 @@ const defaultManagedGatewayRuntimeDependencies = {
     executeCommand,
     createRealtimeClient: createManagedRealtimeClient,
     startRealtimeWakeLoop: startManagedRealtimeWakeLoop,
+    createDriveSyncService: createManagedDriveSyncService,
     registerSignalHandlers(onSignal) {
         process.once('SIGINT', onSignal);
         process.once('SIGTERM', onSignal);

package/dist/managed-runtime/dependencies.js.map

@@ -1 +1 @@
-{"version":3,"file":"dependencies.js","sourceRoot":"","sources":["../../src/managed-runtime/dependencies.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,sBAAsB,EACtB,sBAAsB,EACtB,kBAAkB,EAClB,2BAA2B,EAC3B,mBAAmB,GACpB,MAAM,qBAAqB,CAAA;AAC5B,OAAO,EAAE,2BAA2B,EAAE,4BAA4B,EAAE,MAAM,eAAe,CAAA;AACzF,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAA;AAgBrD,MAAM,wCAAwC,GAA8C;IAC1F,kBAAkB;IAClB,sBAAsB;IACtB,mBAAmB;IACnB,sBAAsB;IACtB,2BAA2B;IAC3B,cAAc;IACd,oBAAoB,EAAE,2BAA2B;IACjD,qBAAqB,EAAE,4BAA4B;IACnD,sBAAsB,CAAC,QAAQ;QAC7B,OAAO,CAAC,IAAI,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAA;QAChC,OAAO,CAAC,IAAI,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAA;QACjC,OAAO,GAAG,EAAE;YACV,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAA;YAC/B,OAAO,CAAC,GAAG,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAA;QAClC,CAAC,CAAA;IACH,CAAC;CACF,CAAA;AAED,MAAM,UAAU,wCAAwC,CACtD,eAAkD,EAAE;IAEpD,OAAO;QACL,GAAG,wCAAwC;QAC3C,GAAG,YAAY;KAChB,CAAA;AACH,CAAC"}
+{"version":3,"file":"dependencies.js","sourceRoot":"","sources":["../../src/managed-runtime/dependencies.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,sBAAsB,EACtB,sBAAsB,EACtB,kBAAkB,EAClB,2BAA2B,EAC3B,mBAAmB,GACpB,MAAM,qBAAqB,CAAA;AAC5B,OAAO,EAAE,2BAA2B,EAAE,4BAA4B,EAAE,MAAM,eAAe,CAAA;AACzF,OAAO,EAAE,6BAA6B,EAAE,MAAM,iBAAiB,CAAA;AAC/D,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAA;AAiBrD,MAAM,wCAAwC,GAA8C;IAC1F,kBAAkB;IAClB,sBAAsB;IACtB,mBAAmB;IACnB,sBAAsB;IACtB,2BAA2B;IAC3B,cAAc;IACd,oBAAoB,EAAE,2BAA2B;IACjD,qBAAqB,EAAE,4BAA4B;IACnD,sBAAsB,EAAE,6BAA6B;IACrD,sBAAsB,CAAC,QAAQ;QAC7B,OAAO,CAAC,IAAI,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAA;QAChC,OAAO,CAAC,IAAI,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAA;QACjC,OAAO,GAAG,EAAE;YACV,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAA;YAC/B,OAAO,CAAC,GAAG,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAA;QAClC,CAAC,CAAA;IACH,CAAC;CACF,CAAA;AAED,MAAM,UAAU,wCAAwC,CACtD,eAAkD,EAAE;IAEpD,OAAO;QACL,GAAG,wCAAwC;QAC3C,GAAG,YAAY;KAChB,CAAA;AACH,CAAC"}

package/dist/managed-runtime/drive-sync-filesystem.d.ts

@@ -0,0 +1,39 @@
+import { type LocalDriveScanEntry } from './drive-sync-planner.js';
+export declare const DRIVE_SYNC_MAX_LOCAL_FILE_BYTES: number;
+export type LocalDriveScanResult = {
+    entries: Map<string, LocalDriveScanEntry>;
+    deferredPaths: Set<string>;
+    deferredFileCount: number;
+};
+export declare function resolveDriveLocalRoot(rootDir: string, driveId: string): string;
+export declare function parkStaleDriveLocalFolder(rootDir: string, driveId: string): Promise<string | null>;
+export declare function resolveDriveLocalPath(driveRoot: string, drivePath: string): string;
+export declare function resolveDirtyDrivePathsForDrive(driveRoot: string, dirtyLocalPaths: string[] | undefined): Set<string> | null;
+export declare function readLocalDriveEntryAtPath(params: {
+    driveId: string;
+    driveRoot: string;
+    drivePath: string;
+}): Promise<LocalDriveScanEntry | null>;
+export declare function scanLocalDriveEntries(params: {
+    driveId: string;
+    driveRoot: string;
+    rootDrivePaths?: Set<string>;
+}): Promise<LocalDriveScanResult>;
+export declare function writeLocalConflictCopy(params: {
+    driveRoot: string;
+    source: LocalDriveScanEntry;
+    sourceRootPath: string;
+    conflictRootPath: string;
+}): Promise<string>;
+export declare function resolveAvailableConflictDrivePath(params: {
+    driveRoot: string;
+    sourcePath: string;
+    sourceRootPath: string;
+    conflictRootPath: string;
+}): Promise<string>;
+export declare function buildSubtreeConflictRootPath(deletedSubtreePath: string): string;
+export declare function assertPathExists(filePath: string, errorMessage: string): Promise<void>;
+export declare function assertLocalPathIsNotSymlink(filePath: string, errorMessage: string): Promise<void>;
+export declare function assertNoSymlinkInExistingPath(driveRoot: string, targetPath: string): Promise<void>;
+export declare function normalizeDrivePath(input: string): string;
+//# sourceMappingURL=drive-sync-filesystem.d.ts.map

package/dist/managed-runtime/drive-sync-filesystem.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"drive-sync-filesystem.d.ts","sourceRoot":"","sources":["../../src/managed-runtime/drive-sync-filesystem.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,KAAK,mBAAmB,EAAE,MAAM,yBAAyB,CAAA;AAElE,eAAO,MAAM,+BAA+B,QAA2C,CAAA;AAEvF,MAAM,MAAM,oBAAoB,GAAG;IACjC,OAAO,EAAE,GAAG,CAAC,MAAM,EAAE,mBAAmB,CAAC,CAAA;IACzC,aAAa,EAAE,GAAG,CAAC,MAAM,CAAC,CAAA;IAC1B,iBAAiB,EAAE,MAAM,CAAA;CAC1B,CAAA;AASD,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM,CAK9E;AAED,wBAAsB,yBAAyB,CAC7C,OAAO,EAAE,MAAM,EACf,OAAO,EAAE,MAAM,GACd,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAiBxB;AAED,wBAAgB,qBAAqB,CAAC,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,MAAM,CAYlF;AAED,wBAAgB,8BAA8B,CAC5C,SAAS,EAAE,MAAM,EACjB,eAAe,EAAE,MAAM,EAAE,GAAG,SAAS,GACpC,GAAG,CAAC,MAAM,CAAC,GAAG,IAAI,CAoBpB;AAED,wBAAsB,yBAAyB,CAAC,MAAM,EAAE;IACtD,OAAO,EAAE,MAAM,CAAA;IACf,SAAS,EAAE,MAAM,CAAA;IACjB,SAAS,EAAE,MAAM,CAAA;CAClB,GAAG,OAAO,CAAC,mBAAmB,GAAG,IAAI,CAAC,CAyDtC;AAED,wBAAsB,qBAAqB,CAAC,MAAM,EAAE;IAClD,OAAO,EAAE,MAAM,CAAA;IACf,SAAS,EAAE,MAAM,CAAA;IACjB,cAAc,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC,CAAA;CAC7B,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAoKhC;AAED,wBAAsB,sBAAsB,CAAC,MAAM,EAAE;IACnD,SAAS,EAAE,MAAM,CAAA;IACjB,MAAM,EAAE,mBAAmB,CAAA;IAC3B,cAAc,EAAE,MAAM,CAAA;IACtB,gBAAgB,EAAE,MAAM,CAAA;CACzB,GAAG,OAAO,CAAC,MAAM,CAAC,CAgBlB;AAED,wBAAsB,iCAAiC,CAAC,MAAM,EAAE;IAC9D,SAAS,EAAE,MAAM,CAAA;IACjB,UAAU,EAAE,MAAM,CAAA;IAClB,cAAc,EAAE,MAAM,CAAA;IACtB,gBAAgB,EAAE,MAAM,CAAA;CACzB,GAAG,OAAO,CAAC,MAAM,CAAC,CA8BlB;AAED,wBAAgB,4BAA4B,CAAC,kBAAkB,EAAE,MAAM,GAAG,MAAM,CAK/E;AAED,wBAAsB,gBAAgB,CAAC,QAAQ,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAM5F;AAED,wBAAsB,2BAA2B,CAC/C,QAAQ,EAAE,MAAM,EAChB,YAAY,EAAE,MAAM,GACnB,OAAO,CAAC,IAAI,CAAC,CAYf;AAED,wBAAsB,6BAA6B,CACjD,SAAS,EAAE,MAAM,EACjB,UAAU,EAAE,MAAM,GACjB,OAAO,CAAC,IAAI,CAAC,CA0Bf;AAED,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAWxD"}

package/dist/managed-runtime/drive-sync-filesystem.js

@@ -0,0 +1,434 @@
+import { createHash, randomUUID } from 'node:crypto';
+import { createReadStream } from 'node:fs';
+import { copyFile, lstat, mkdir, readdir, readlink, rename, stat } from 'node:fs/promises';
+import path from 'node:path';
+import { DRIVE_TRANSFER_POLICY } from '@panorama/shared/drive-transfer-policy';
+export const DRIVE_SYNC_MAX_LOCAL_FILE_BYTES = DRIVE_TRANSFER_POLICY.objectFileMaxBytes;
+class UnstableLocalFileError extends Error {
+    drivePath;
+    constructor(drivePath) {
+        super(`Local drive file changed while it was being read; deferring sync for ${drivePath}`);
+        this.drivePath = drivePath;
+        this.name = 'UnstableLocalFileError';
+    }
+}
+export function resolveDriveLocalRoot(rootDir, driveId) {
+    if (!/^[0-9a-f-]{36}$/i.test(driveId)) {
+        throw new Error(`Invalid drive id "${driveId}"`);
+    }
+    return path.join(rootDir, driveId);
+}
+export async function parkStaleDriveLocalFolder(rootDir, driveId) {
+    const sourcePath = resolveDriveLocalRoot(rootDir, driveId);
+    try {
+        await lstat(sourcePath);
+    }
+    catch (error) {
+        if (error instanceof Error && 'code' in error && error.code === 'ENOENT') {
+            return null;
+        }
+        throw error;
+    }
+    const staleRoot = path.join(path.resolve(rootDir), '.stale');
+    await mkdir(staleRoot, { recursive: true });
+    const timestamp = new Date().toISOString().replace(/[:.]/g, '-');
+    const targetPath = path.join(staleRoot, `${driveId}-${timestamp}-${randomUUID()}`);
+    await rename(sourcePath, targetPath);
+    return targetPath;
+}
+export function resolveDriveLocalPath(driveRoot, drivePath) {
+    const normalizedDrivePath = normalizeDrivePath(drivePath);
+    const resolvedRoot = path.resolve(driveRoot);
+    if (normalizedDrivePath === '/') {
+        return resolvedRoot;
+    }
+    const resolvedPath = path.resolve(resolvedRoot, normalizedDrivePath.slice(1));
+    if (resolvedPath !== resolvedRoot && !resolvedPath.startsWith(`${resolvedRoot}${path.sep}`)) {
+        throw new Error(`Drive path escapes drive root: ${drivePath}`);
+    }
+    return resolvedPath;
+}
+export function resolveDirtyDrivePathsForDrive(driveRoot, dirtyLocalPaths) {
+    if (!dirtyLocalPaths) {
+        return null;
+    }
+    const resolvedRoot = path.resolve(driveRoot);
+    const dirtyDrivePaths = new Set();
+    for (const dirtyLocalPath of dirtyLocalPaths) {
+        const resolvedDirtyPath = path.resolve(dirtyLocalPath);
+        const relativePath = path.relative(resolvedRoot, resolvedDirtyPath);
+        if (!relativePath) {
+            return null;
+        }
+        if (relativePath.startsWith('..') || path.isAbsolute(relativePath)) {
+            continue;
+        }
+        dirtyDrivePaths.add(normalizeDrivePath(`/${relativePath.split(path.sep).join('/')}`));
+    }
+    return dirtyDrivePaths;
+}
+export async function readLocalDriveEntryAtPath(params) {
+    const absolutePath = resolveDriveLocalPath(params.driveRoot, params.drivePath);
+    let localStat;
+    try {
+        localStat = await lstat(absolutePath);
+    }
+    catch (error) {
+        if (error instanceof Error && 'code' in error && error.code === 'ENOENT') {
+            return null;
+        }
+        throw error;
+    }
+    if (localStat.isDirectory()) {
+        return {
+            driveId: params.driveId,
+            path: normalizeDrivePath(params.drivePath),
+            entryType: 'directory',
+            contentSha256: null,
+            sizeBytes: null,
+            mimeType: null,
+            absolutePath,
+        };
+    }
+    if (localStat.isFile()) {
+        return await readStableLocalFileEntry({
+            driveId: params.driveId,
+            drivePath: normalizeDrivePath(params.drivePath),
+            absolutePath,
+            initialStat: localStat,
+        });
+    }
+    if (localStat.isSymbolicLink()) {
+        const linkTarget = await readlink(absolutePath).catch(() => '');
+        return {
+            driveId: params.driveId,
+            path: normalizeDrivePath(params.drivePath),
+            entryType: 'symlink',
+            contentSha256: sha256Hex(Buffer.from(linkTarget)),
+            sizeBytes: Buffer.byteLength(linkTarget),
+            mimeType: null,
+            absolutePath,
+            unsupportedReason: 'symlink_entry_unsupported',
+        };
+    }
+    return {
+        driveId: params.driveId,
+        path: normalizeDrivePath(params.drivePath),
+        entryType: 'unsupported',
+        contentSha256: null,
+        sizeBytes: null,
+        mimeType: null,
+        absolutePath,
+        unsupportedReason: describeUnsupportedLocalEntry(localStat),
+    };
+}
+export async function scanLocalDriveEntries(params) {
+    const entries = new Map();
+    const deferredPaths = new Set();
+    const visitedDirectories = new Set();
+    let deferredFileCount = 0;
+    async function addAncestorDirectories(drivePath) {
+        const normalizedPath = normalizeDrivePath(drivePath);
+        const segments = normalizedPath.split('/').filter(Boolean);
+        for (let index = 1; index < segments.length; index += 1) {
+            const ancestorPath = normalizeDrivePath(`/${segments.slice(0, index).join('/')}`);
+            if (entries.has(ancestorPath)) {
+                continue;
+            }
+            const absolutePath = resolveDriveLocalPath(params.driveRoot, ancestorPath);
+            try {
+                const ancestorStat = await lstat(absolutePath);
+                if (ancestorStat.isDirectory()) {
+                    entries.set(ancestorPath, {
+                        driveId: params.driveId,
+                        path: ancestorPath,
+                        entryType: 'directory',
+                        contentSha256: null,
+                        sizeBytes: null,
+                        mimeType: null,
+                        absolutePath,
+                    });
+                }
+            }
+            catch (error) {
+                if (error instanceof Error && 'code' in error && error.code === 'ENOENT') {
+                    return;
+                }
+                throw error;
+            }
+        }
+    }
+    async function addPathEntry(absolutePath, drivePath, childStat) {
+        await addAncestorDirectories(drivePath);
+        if (childStat.isDirectory()) {
+            entries.set(drivePath, {
+                driveId: params.driveId,
+                path: drivePath,
+                entryType: 'directory',
+                contentSha256: null,
+                sizeBytes: null,
+                mimeType: null,
+                absolutePath,
+            });
+            await visitDirectory(absolutePath, drivePath);
+            return;
+        }
+        if (childStat.isFile()) {
+            try {
+                entries.set(drivePath, await readStableLocalFileEntry({
+                    driveId: params.driveId,
+                    drivePath,
+                    absolutePath,
+                    initialStat: childStat,
+                }));
+            }
+            catch (error) {
+                if (error instanceof UnstableLocalFileError) {
+                    deferredPaths.add(drivePath);
+                    deferredFileCount += 1;
+                    return;
+                }
+                throw error;
+            }
+            return;
+        }
+        if (childStat.isSymbolicLink()) {
+            const linkTarget = await readlink(absolutePath).catch(() => '');
+            entries.set(drivePath, {
+                driveId: params.driveId,
+                path: drivePath,
+                entryType: 'symlink',
+                contentSha256: sha256Hex(Buffer.from(linkTarget)),
+                sizeBytes: Buffer.byteLength(linkTarget),
+                mimeType: null,
+                absolutePath,
+                unsupportedReason: 'symlink_entry_unsupported',
+            });
+            return;
+        }
+        entries.set(drivePath, {
+            driveId: params.driveId,
+            path: drivePath,
+            entryType: 'unsupported',
+            contentSha256: null,
+            sizeBytes: null,
+            mimeType: null,
+            absolutePath,
+            unsupportedReason: describeUnsupportedLocalEntry(childStat),
+        });
+    }
+    async function visitDirectory(absoluteDirectoryPath, driveDirectoryPath) {
+        const resolvedDirectoryPath = path.resolve(absoluteDirectoryPath);
+        if (visitedDirectories.has(resolvedDirectoryPath)) {
+            return;
+        }
+        visitedDirectories.add(resolvedDirectoryPath);
+        const children = await readdir(absoluteDirectoryPath, { withFileTypes: true });
+        for (const child of children) {
+            const childAbsolutePath = path.join(absoluteDirectoryPath, child.name);
+            const childDrivePath = normalizeDrivePath(driveDirectoryPath === '/' ? `/${child.name}` : `${driveDirectoryPath}/${child.name}`);
+            let childStat;
+            try {
+                childStat = await lstat(childAbsolutePath);
+            }
+            catch (error) {
+                if (error instanceof Error && 'code' in error && error.code === 'ENOENT') {
+                    continue;
+                }
+                throw error;
+            }
+            await addPathEntry(childAbsolutePath, childDrivePath, childStat);
+        }
+    }
+    const rootDrivePaths = params.rootDrivePaths;
+    if (!rootDrivePaths) {
+        await visitDirectory(path.resolve(params.driveRoot), '/');
+        return { entries, deferredPaths, deferredFileCount };
+    }
+    for (const dirtyPath of rootDrivePaths) {
+        const normalizedDirtyPath = normalizeDrivePath(dirtyPath);
+        if (normalizedDirtyPath === '/') {
+            await visitDirectory(path.resolve(params.driveRoot), '/');
+            return { entries, deferredPaths, deferredFileCount };
+        }
+        const absolutePath = resolveDriveLocalPath(params.driveRoot, normalizedDirtyPath);
+        try {
+            const childStat = await lstat(absolutePath);
+            await addPathEntry(absolutePath, normalizedDirtyPath, childStat);
+        }
+        catch (error) {
+            if (error instanceof Error && 'code' in error && error.code === 'ENOENT') {
+                await addAncestorDirectories(normalizedDirtyPath);
+                continue;
+            }
+            throw error;
+        }
+    }
+    return { entries, deferredPaths, deferredFileCount };
+}
+export async function writeLocalConflictCopy(params) {
+    if (params.source.entryType !== 'file') {
+        throw new Error(`Cannot preserve non-file local conflict candidate: ${params.source.path}`);
+    }
+    const conflictDrivePath = await resolveAvailableConflictDrivePath({
+        driveRoot: params.driveRoot,
+        sourcePath: params.source.path,
+        sourceRootPath: params.sourceRootPath,
+        conflictRootPath: params.conflictRootPath,
+    });
+    const conflictLocalPath = resolveDriveLocalPath(params.driveRoot, conflictDrivePath);
+    await assertNoSymlinkInExistingPath(params.driveRoot, path.dirname(conflictLocalPath));
+    await mkdir(path.dirname(conflictLocalPath), { recursive: true });
+    await copyFile(params.source.absolutePath, conflictLocalPath);
+    return conflictDrivePath;
+}
+export async function resolveAvailableConflictDrivePath(params) {
+    const parsed = path.posix.parse(normalizeDrivePath(params.sourcePath));
+    const conflictRoot = normalizeDrivePath(params.conflictRootPath);
+    const sourceRoot = normalizeDrivePath(params.sourceRootPath);
+    const timestamp = new Date()
+        .toISOString()
+        .replace(/[-:]/g, '')
+        .replace(/\.\d{3}Z$/, 'Z');
+    const baseName = `${parsed.name} (Panorama conflict ${timestamp})`;
+    const targetDirectory = sourceRoot === params.sourcePath
+        ? parsed.dir || '/'
+        : path.posix.join(conflictRoot, path.posix.relative(sourceRoot, parsed.dir || '/'));
+    for (let attempt = 0; attempt < 100; attempt += 1) {
+        const suffix = attempt === 0 ? '' : ` ${attempt + 1}`;
+        const candidate = normalizeDrivePath(path.posix.join(targetDirectory, `${baseName}${suffix}${parsed.ext}`));
+        try {
+            await lstat(resolveDriveLocalPath(params.driveRoot, candidate));
+        }
+        catch (error) {
+            if (error instanceof Error && 'code' in error && error.code === 'ENOENT') {
+                return candidate;
+            }
+            throw error;
+        }
+    }
+    throw new Error(`Could not allocate a local conflict path for ${params.sourcePath}`);
+}
+export function buildSubtreeConflictRootPath(deletedSubtreePath) {
+    const parsed = path.posix.parse(normalizeDrivePath(deletedSubtreePath));
+    return normalizeDrivePath(path.posix.join(parsed.dir || '/', `${parsed.base} (Panorama conflicts)`));
+}
+export async function assertPathExists(filePath, errorMessage) {
+    try {
+        await stat(filePath);
+    }
+    catch {
+        throw new Error(errorMessage);
+    }
+}
+export async function assertLocalPathIsNotSymlink(filePath, errorMessage) {
+    try {
+        const current = await lstat(filePath);
+        if (current.isSymbolicLink()) {
+            throw new Error(errorMessage);
+        }
+    }
+    catch (error) {
+        if (error instanceof Error && 'code' in error && error.code === 'ENOENT') {
+            return;
+        }
+        throw error;
+    }
+}
+export async function assertNoSymlinkInExistingPath(driveRoot, targetPath) {
+    const resolvedRoot = path.resolve(driveRoot);
+    const resolvedTarget = path.resolve(targetPath);
+    const relativePath = path.relative(resolvedRoot, resolvedTarget);
+    if (relativePath.startsWith('..') || path.isAbsolute(relativePath)) {
+        throw new Error(`Local drive path escapes drive root: ${targetPath}`);
+    }
+    if (!relativePath) {
+        return;
+    }
+    let currentPath = resolvedRoot;
+    for (const segment of relativePath.split(path.sep).filter(Boolean)) {
+        currentPath = path.join(currentPath, segment);
+        try {
+            const current = await lstat(currentPath);
+            if (current.isSymbolicLink()) {
+                throw new Error(`Local drive path contains a symlink: ${currentPath}`);
+            }
+        }
+        catch (error) {
+            if (error instanceof Error && 'code' in error && error.code === 'ENOENT') {
+                return;
+            }
+            throw error;
+        }
+    }
+}
+export function normalizeDrivePath(input) {
+    if (!input.startsWith('/')) {
+        throw new Error(`Drive path must be absolute: ${input}`);
+    }
+    const segments = input.split('/').filter(Boolean);
+    if (segments.some((segment) => segment === '.' || segment === '..')) {
+        throw new Error(`Drive path must not contain traversal segments: ${input}`);
+    }
+    return input === '/' ? '/' : `/${segments.join('/')}`;
+}
+async function readStableLocalFileEntry(params) {
+    const initialSizeBytes = Number(params.initialStat.size);
+    const initialMtimeMs = Number(params.initialStat.mtimeMs);
+    const initialCtimeMs = Number(params.initialStat.ctimeMs);
+    if (initialSizeBytes > DRIVE_SYNC_MAX_LOCAL_FILE_BYTES) {
+        return {
+            driveId: params.driveId,
+            path: params.drivePath,
+            entryType: 'unsupported',
+            contentSha256: null,
+            sizeBytes: initialSizeBytes,
+            mimeType: null,
+            absolutePath: params.absolutePath,
+            mtimeMs: initialMtimeMs,
+            ctimeMs: initialCtimeMs,
+            unsupportedReason: `file_size_${initialSizeBytes}_exceeds_${DRIVE_SYNC_MAX_LOCAL_FILE_BYTES}_byte_limit`,
+        };
+    }
+    const contentSha256 = await sha256File(params.absolutePath);
+    const finalStat = await lstat(params.absolutePath);
+    if (!finalStat.isFile() ||
+        Number(finalStat.size) !== initialSizeBytes ||
+        Number(finalStat.mtimeMs) !== initialMtimeMs ||
+        Number(finalStat.ctimeMs) !== initialCtimeMs) {
+        throw new UnstableLocalFileError(params.drivePath);
+    }
+    return {
+        driveId: params.driveId,
+        path: params.drivePath,
+        entryType: 'file',
+        contentSha256,
+        sizeBytes: Number(finalStat.size),
+        mimeType: null,
+        absolutePath: params.absolutePath,
+        mtimeMs: Number(finalStat.mtimeMs),
+        ctimeMs: Number(finalStat.ctimeMs),
+    };
+}
+async function sha256File(filePath) {
+    const hash = createHash('sha256');
+    for await (const chunk of createReadStream(filePath)) {
+        hash.update(chunk);
+    }
+    return hash.digest('hex');
+}
+function describeUnsupportedLocalEntry(entry) {
+    if (entry.isBlockDevice())
+        return 'block_device_unsupported';
+    if (entry.isCharacterDevice())
+        return 'character_device_unsupported';
+    if (entry.isFIFO())
+        return 'fifo_unsupported';
+    if (entry.isSocket())
+        return 'socket_unsupported';
+    return 'unsupported_entry_type';
+}
+function sha256Hex(bytes) {
+    return createHash('sha256').update(bytes).digest('hex');
+}
+//# sourceMappingURL=drive-sync-filesystem.js.map