@peerllm/client-core 0.1.0

package/dist/services/foundations/secrets/SecretService.Validations.js

@@ -0,0 +1,42 @@
+import { InvalidSecretException } from "../../../models/foundations/secrets/exceptions/InvalidSecretException.js";
+// The names the store uses are machine-made: `api-key:<profileId>`, `refresh-token:<accountId>`,
+// `registry-token`. A name outside that alphabet is a caller building one by hand out of something
+// a user typed, and the store is not the place to find that out.
+const SECRET_NAME = /^[A-Za-z0-9_.:-]{1,200}$/;
+export function validateName(name) {
+    if (name.trim().length === 0) {
+        throw new InvalidSecretException("could not read the secret: no name was given");
+    }
+    if (!SECRET_NAME.test(name)) {
+        throw new InvalidSecretException(`could not read the secret: '${name}' is not a secret name`);
+    }
+}
+// The store is read into the one shape both applications write. A file that is not that shape is
+// refused rather than guessed at, because guessing here hands back the wrong key or none.
+export function validateStore(document) {
+    const store = parseOrRefuse(document);
+    if (store === null || typeof store !== "object" || Array.isArray(store)) {
+        throw new InvalidSecretException("could not read the secret: the store is not a JSON object");
+    }
+    const secrets = store.secrets;
+    if (secrets === null || secrets === undefined || typeof secrets !== "object" || Array.isArray(secrets)) {
+        throw new InvalidSecretException("could not read the secret: the store carries no secrets map");
+    }
+    return secrets;
+}
+function parseOrRefuse(document) {
+    try {
+        return JSON.parse(document);
+    }
+    catch {
+        throw new InvalidSecretException("could not read the secret: the store is not valid JSON");
+    }
+}
+// A secret nobody set is not a secret. Writing an empty one would look like success and read back
+// as "no such name", and the sign-in that follows would fail somewhere else entirely.
+export function validateValue(value, name) {
+    if (value.length === 0) {
+        throw new InvalidSecretException(`could not write the secret: '${name}' was given no value`);
+    }
+}
+//# sourceMappingURL=SecretService.Validations.js.map

package/dist/services/foundations/secrets/SecretService.Validations.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"SecretService.Validations.js","sourceRoot":"","sources":["../../../../src/services/foundations/secrets/SecretService.Validations.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,sBAAsB,EAAE,MAAM,0EAA0E,CAAC;AAElH,iGAAiG;AACjG,mGAAmG;AACnG,iEAAiE;AACjE,MAAM,WAAW,GAAG,0BAA0B,CAAC;AAE/C,MAAM,UAAU,YAAY,CAAC,IAAY;IACvC,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC7B,MAAM,IAAI,sBAAsB,CAAC,8CAA8C,CAAC,CAAC;IACnF,CAAC;IAED,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QAC5B,MAAM,IAAI,sBAAsB,CAAC,+BAA+B,IAAI,wBAAwB,CAAC,CAAC;IAChG,CAAC;AACH,CAAC;AAED,iGAAiG;AACjG,0FAA0F;AAC1F,MAAM,UAAU,aAAa,CAAC,QAAgB;IAC5C,MAAM,KAAK,GAAG,aAAa,CAAC,QAAQ,CAAC,CAAC;IAEtC,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACxE,MAAM,IAAI,sBAAsB,CAAC,2DAA2D,CAAC,CAAC;IAChG,CAAC;IAED,MAAM,OAAO,GAAI,KAA+B,CAAC,OAAO,CAAC;IAEzD,IAAI,OAAO,KAAK,IAAI,IAAI,OAAO,KAAK,SAAS,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QACvG,MAAM,IAAI,sBAAsB,CAAC,6DAA6D,CAAC,CAAC;IAClG,CAAC;IAED,OAAO,OAAiC,CAAC;AAC3C,CAAC;AAED,SAAS,aAAa,CAAC,QAAgB;IACrC,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAY,CAAC;IACzC,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,sBAAsB,CAAC,wDAAwD,CAAC,CAAC;IAC7F,CAAC;AACH,CAAC;AAED,kGAAkG;AAClG,sFAAsF;AACtF,MAAM,UAAU,aAAa,CAAC,KAAa,EAAE,IAAY;IACvD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,MAAM,IAAI,sBAAsB,CAAC,gCAAgC,IAAI,sBAAsB,CAAC,CAAC;IAC/F,CAAC;AACH,CAAC"}

package/dist/services/foundations/secrets/SecretService.d.ts

@@ -0,0 +1,15 @@
+import type { LoggingBroker } from "@hassanhabib/standard-agents";
+import type { SecretBroker } from "../../../brokers/secrets/SecretBroker.js";
+export declare class SecretService {
+    private readonly secretBroker;
+    private readonly loggingBroker;
+    private readonly tryCatch;
+    constructor(secretBroker: SecretBroker, loggingBroker: LoggingBroker);
+    retrieveSecret(name: string): Promise<string | null>;
+    modifySecret(name: string, value: string): Promise<void>;
+    removeSecret(name: string): Promise<void>;
+    acquireLock(holder: string): Promise<void>;
+    private readStoreOrEmpty;
+    releaseLock(): Promise<void>;
+}
+//# sourceMappingURL=SecretService.d.ts.map

package/dist/services/foundations/secrets/SecretService.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"SecretService.d.ts","sourceRoot":"","sources":["../../../../src/services/foundations/secrets/SecretService.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,8BAA8B,CAAC;AAElE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,0CAA0C,CAAC;AAS7E,qBAAa,aAAa;IACxB,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAe;IAC5C,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAgB;IAC9C,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAW;gBAEjB,YAAY,EAAE,YAAY,EAAE,aAAa,EAAE,aAAa;IAMpE,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IAcpD,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAgBxD,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAsBzC,WAAW,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;YASnC,gBAAgB;IAYvB,WAAW,IAAI,OAAO,CAAC,IAAI,CAAC;CAKpC"}

package/dist/services/foundations/secrets/SecretService.js

@@ -0,0 +1,82 @@
+import { createTryCatch } from "./SecretService.Exceptions.js";
+import { validateName, validateStore, validateValue } from "./SecretService.Validations.js";
+// One secret out of the store (SPEC.md 14.4). The broker hands over the whole store because that is
+// what the file holds; naming a secret and finding it is this service's work.
+//
+// A name the store does not hold answers null rather than raising. Not having signed in yet is the
+// ordinary case, and an exception is not how the ordinary case is said.
+export class SecretService {
+    secretBroker;
+    loggingBroker;
+    tryCatch;
+    constructor(secretBroker, loggingBroker) {
+        this.secretBroker = secretBroker;
+        this.loggingBroker = loggingBroker;
+        this.tryCatch = createTryCatch(this.loggingBroker);
+    }
+    retrieveSecret(name) {
+        return this.tryCatch(async () => {
+            validateName(name);
+            const document = await this.secretBroker.selectStore();
+            const secrets = validateStore(document);
+            return secrets[name] ?? null;
+        });
+    }
+    // One secret into the store, leaving every other one exactly as it was. The whole blob is
+    // rewritten because that is what the file holds, which is why this must be done under the lock:
+    // two writers each reading and writing back would each lose the other's key.
+    modifySecret(name, value) {
+        return this.tryCatch(async () => {
+            validateName(name);
+            validateValue(value, name);
+            const secrets = await this.readStoreOrEmpty();
+            await this.secretBroker.upsertStore(JSON.stringify({ schemaVersion: SECRET_STORE_SCHEMA_VERSION, secrets: { ...secrets, [name]: value } }, null, 2));
+        });
+    }
+    // One secret out of the store. A different act from writing an empty one: an empty secret is
+    // refused because it would look like success and read back as "no such name", and a signing out
+    // that used it to forget a key would fail on the one machine that most needs to forget.
+    removeSecret(name) {
+        return this.tryCatch(async () => {
+            validateName(name);
+            const secrets = await this.readStoreOrEmpty();
+            // Forgetting something already forgotten is not a failure, and rewriting the whole store to
+            // change nothing is a chance for two writers to lose each other's work.
+            if (!(name in secrets)) {
+                return;
+            }
+            const kept = Object.fromEntries(Object.entries(secrets).filter(([held]) => held !== name));
+            await this.secretBroker.upsertStore(JSON.stringify({ schemaVersion: SECRET_STORE_SCHEMA_VERSION, secrets: kept }, null, 2));
+        });
+    }
+    // One attempt and no waiting. Whether to try again, and whether a holder has been there long
+    // enough to be taken from, is the acquisition loop's judgement.
+    acquireLock(holder) {
+        return this.tryCatch(async () => {
+            await this.secretBroker.insertLock(holder);
+        });
+    }
+    // A write into a store that is not there creates it. That is what upsert means, and it is the
+    // same rule `addFile` follows: a read reports what is there, a write makes what it needs. The
+    // errno is read here, in the foundation, because that is the only tier allowed to know one.
+    async readStoreOrEmpty() {
+        try {
+            return validateStore(await this.secretBroker.selectStore());
+        }
+        catch (error) {
+            if (error?.code === "ENOENT") {
+                return {};
+            }
+            throw error;
+        }
+    }
+    releaseLock() {
+        return this.tryCatch(async () => {
+            await this.secretBroker.deleteLock();
+        });
+    }
+}
+// The shape both applications write (SPEC.md 14.4). Named here because this service is what puts it
+// on disk; the broker hands over whatever text it finds.
+const SECRET_STORE_SCHEMA_VERSION = 1;
+//# sourceMappingURL=SecretService.js.map

package/dist/services/foundations/secrets/SecretService.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"SecretService.js","sourceRoot":"","sources":["../../../../src/services/foundations/secrets/SecretService.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,cAAc,EAAiB,MAAM,+BAA+B,CAAC;AAC9E,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,gCAAgC,CAAC;AAE5F,oGAAoG;AACpG,8EAA8E;AAC9E,EAAE;AACF,mGAAmG;AACnG,wEAAwE;AACxE,MAAM,OAAO,aAAa;IACP,YAAY,CAAe;IAC3B,aAAa,CAAgB;IAC7B,QAAQ,CAAW;IAEpC,YAAmB,YAA0B,EAAE,aAA4B;QACzE,IAAI,CAAC,YAAY,GAAG,YAAY,CAAC;QACjC,IAAI,CAAC,aAAa,GAAG,aAAa,CAAC;QACnC,IAAI,CAAC,QAAQ,GAAG,cAAc,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;IACrD,CAAC;IAEM,cAAc,CAAC,IAAY;QAChC,OAAO,IAAI,CAAC,QAAQ,CAAC,KAAK,IAAI,EAAE;YAC9B,YAAY,CAAC,IAAI,CAAC,CAAC;YAEnB,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,WAAW,EAAE,CAAC;YACvD,MAAM,OAAO,GAAG,aAAa,CAAC,QAAQ,CAAC,CAAC;YAExC,OAAO,OAAO,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC;QAC/B,CAAC,CAAC,CAAC;IACL,CAAC;IAED,0FAA0F;IAC1F,gGAAgG;IAChG,6EAA6E;IACtE,YAAY,CAAC,IAAY,EAAE,KAAa;QAC7C,OAAO,IAAI,CAAC,QAAQ,CAAC,KAAK,IAAI,EAAE;YAC9B,YAAY,CAAC,IAAI,CAAC,CAAC;YACnB,aAAa,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;YAE3B,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,gBAAgB,EAAE,CAAC;YAE9C,MAAM,IAAI,CAAC,YAAY,CAAC,WAAW,CACjC,IAAI,CAAC,SAAS,CAAC,EAAE,aAAa,EAAE,2BAA2B,EAAE,OAAO,EAAE,EAAE,GAAG,OAAO,EAAE,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAChH,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC;IAED,6FAA6F;IAC7F,gGAAgG;IAChG,wFAAwF;IACjF,YAAY,CAAC,IAAY;QAC9B,OAAO,IAAI,CAAC,QAAQ,CAAC,KAAK,IAAI,EAAE;YAC9B,YAAY,CAAC,IAAI,CAAC,CAAC;YAEnB,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,gBAAgB,EAAE,CAAC;YAE9C,4FAA4F;YAC5F,wEAAwE;YACxE,IAAI,CAAC,CAAC,IAAI,IAAI,OAAO,CAAC,EAAE,CAAC;gBACvB,OAAO;YACT,CAAC;YAED,MAAM,IAAI,GAAG,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC;YAE3F,MAAM,IAAI,CAAC,YAAY,CAAC,WAAW,CACjC,IAAI,CAAC,SAAS,CAAC,EAAE,aAAa,EAAE,2BAA2B,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CACvF,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC;IAED,6FAA6F;IAC7F,gEAAgE;IACzD,WAAW,CAAC,MAAc;QAC/B,OAAO,IAAI,CAAC,QAAQ,CAAC,KAAK,IAAI,EAAE;YAC9B,MAAM,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;QAC7C,CAAC,CAAC,CAAC;IACL,CAAC;IAED,8FAA8F;IAC9F,8FAA8F;IAC9F,4FAA4F;IACpF,KAAK,CAAC,gBAAgB;QAC5B,IAAI,CAAC;YACH,OAAO,aAAa,CAAC,MAAM,IAAI,CAAC,YAAY,CAAC,WAAW,EAAE,CAAC,CAAC;QAC9D,CAAC;QAAC,OAAO,KAAc,EAAE,CAAC;YACxB,IAAK,KAA+B,EAAE,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACxD,OAAO,EAAE,CAAC;YACZ,CAAC;YAED,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAEM,WAAW;QAChB,OAAO,IAAI,CAAC,QAAQ,CAAC,KAAK,IAAI,EAAE;YAC9B,MAAM,IAAI,CAAC,YAAY,CAAC,UAAU,EAAE,CAAC;QACvC,CAAC,CAAC,CAAC;IACL,CAAC;CACF;AAED,oGAAoG;AACpG,yDAAyD;AACzD,MAAM,2BAA2B,GAAG,CAAC,CAAC"}

package/dist/services/foundations/workspaceFiles/WorkspaceFileService.Exceptions.d.ts

@@ -0,0 +1,4 @@
+import type { LoggingBroker } from "@hassanhabib/standard-agents";
+export type TryCatch = <T>(routine: () => Promise<T>) => Promise<T>;
+export declare function createTryCatch(loggingBroker: LoggingBroker): TryCatch;
+//# sourceMappingURL=WorkspaceFileService.Exceptions.d.ts.map

package/dist/services/foundations/workspaceFiles/WorkspaceFileService.Exceptions.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"WorkspaceFileService.Exceptions.d.ts","sourceRoot":"","sources":["../../../../src/services/foundations/workspaceFiles/WorkspaceFileService.Exceptions.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,8BAA8B,CAAC;AAalE,MAAM,MAAM,QAAQ,GAAG,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,KAAK,OAAO,CAAC,CAAC,CAAC,CAAC;AAIpE,wBAAgB,cAAc,CAAC,aAAa,EAAE,aAAa,GAAG,QAAQ,CAqBrE"}

package/dist/services/foundations/workspaceFiles/WorkspaceFileService.Exceptions.js

@@ -0,0 +1,49 @@
+import { FailedWorkspaceFileDependencyException } from "../../../models/foundations/workspaceFiles/exceptions/FailedWorkspaceFileDependencyException.js";
+import { FailedWorkspaceFileServiceException } from "../../../models/foundations/workspaceFiles/exceptions/FailedWorkspaceFileServiceException.js";
+import { InvalidWorkspaceFileException } from "../../../models/foundations/workspaceFiles/exceptions/InvalidWorkspaceFileException.js";
+import { WorkspaceFileDependencyException } from "../../../models/foundations/workspaceFiles/exceptions/WorkspaceFileDependencyException.js";
+import { WorkspaceFileServiceException } from "../../../models/foundations/workspaceFiles/exceptions/WorkspaceFileServiceException.js";
+import { WorkspaceFileValidationException } from "../../../models/foundations/workspaceFiles/exceptions/WorkspaceFileValidationException.js";
+const FILE_SYSTEM_CODES = new Set(["EACCES", "EPERM", "EBUSY", "EMFILE", "ENFILE", "EIO", "ELOOP", "ENOTDIR", "ENAMETOOLONG"]);
+export function createTryCatch(loggingBroker) {
+    return async function tryCatch(routine) {
+        try {
+            return await routine();
+        }
+        catch (error) {
+            if (error instanceof InvalidWorkspaceFileException) {
+                throw await createAndLogValidationException(loggingBroker, error);
+            }
+            if (isFileSystemFault(error)) {
+                throw await createAndLogDependencyException(loggingBroker, error);
+            }
+            const failedWorkspaceFileServiceException = new FailedWorkspaceFileServiceException("Failed workspace file service error occurred, contact support.", error instanceof Error ? error : new Error(String(error)));
+            throw await createAndLogServiceException(loggingBroker, failedWorkspaceFileServiceException);
+        }
+    };
+}
+// Read by code rather than by message, because the message is the operating system's and it
+// changes with the locale.
+function isFileSystemFault(error) {
+    return (typeof error === "object" &&
+        error !== null &&
+        "code" in error &&
+        FILE_SYSTEM_CODES.has(String(error.code)));
+}
+async function createAndLogValidationException(loggingBroker, error) {
+    const workspaceFileValidationException = new WorkspaceFileValidationException("Workspace file validation error occurred, fix the error and try again.", error);
+    await loggingBroker.logError(workspaceFileValidationException);
+    return workspaceFileValidationException;
+}
+async function createAndLogDependencyException(loggingBroker, error) {
+    const failedWorkspaceFileDependencyException = new FailedWorkspaceFileDependencyException("Failed workspace file dependency error occurred, contact support.", error);
+    const workspaceFileDependencyException = new WorkspaceFileDependencyException("Workspace file dependency error occurred, contact support.", failedWorkspaceFileDependencyException);
+    await loggingBroker.logError(workspaceFileDependencyException);
+    return workspaceFileDependencyException;
+}
+async function createAndLogServiceException(loggingBroker, error) {
+    const workspaceFileServiceException = new WorkspaceFileServiceException("Workspace file service error occurred, contact support.", error);
+    await loggingBroker.logError(workspaceFileServiceException);
+    return workspaceFileServiceException;
+}
+//# sourceMappingURL=WorkspaceFileService.Exceptions.js.map

package/dist/services/foundations/workspaceFiles/WorkspaceFileService.Exceptions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"WorkspaceFileService.Exceptions.js","sourceRoot":"","sources":["../../../../src/services/foundations/workspaceFiles/WorkspaceFileService.Exceptions.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,sCAAsC,EAAE,MAAM,iGAAiG,CAAC;AACzJ,OAAO,EAAE,mCAAmC,EAAE,MAAM,8FAA8F,CAAC;AACnJ,OAAO,EAAE,6BAA6B,EAAE,MAAM,wFAAwF,CAAC;AACvI,OAAO,EAAE,gCAAgC,EAAE,MAAM,2FAA2F,CAAC;AAC7I,OAAO,EAAE,6BAA6B,EAAE,MAAM,wFAAwF,CAAC;AACvI,OAAO,EAAE,gCAAgC,EAAE,MAAM,2FAA2F,CAAC;AAQ7I,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAAC,CAAC,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,OAAO,EAAE,SAAS,EAAE,cAAc,CAAC,CAAC,CAAC;AAE/H,MAAM,UAAU,cAAc,CAAC,aAA4B;IACzD,OAAO,KAAK,UAAU,QAAQ,CAAI,OAAyB;QACzD,IAAI,CAAC;YACH,OAAO,MAAM,OAAO,EAAE,CAAC;QACzB,CAAC;QAAC,OAAO,KAAc,EAAE,CAAC;YACxB,IAAI,KAAK,YAAY,6BAA6B,EAAE,CAAC;gBACnD,MAAM,MAAM,+BAA+B,CAAC,aAAa,EAAE,KAAK,CAAC,CAAC;YACpE,CAAC;YAED,IAAI,iBAAiB,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC7B,MAAM,MAAM,+BAA+B,CAAC,aAAa,EAAE,KAAc,CAAC,CAAC;YAC7E,CAAC;YAED,MAAM,mCAAmC,GAAG,IAAI,mCAAmC,CACjF,gEAAgE,EAChE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAC1D,CAAC;YAEF,MAAM,MAAM,4BAA4B,CAAC,aAAa,EAAE,mCAAmC,CAAC,CAAC;QAC/F,CAAC;IACH,CAAC,CAAC;AACJ,CAAC;AAED,4FAA4F;AAC5F,2BAA2B;AAC3B,SAAS,iBAAiB,CAAC,KAAc;IACvC,OAAO,CACL,OAAO,KAAK,KAAK,QAAQ;QACzB,KAAK,KAAK,IAAI;QACd,MAAM,IAAI,KAAK;QACf,iBAAiB,CAAC,GAAG,CAAC,MAAM,CAAE,KAA2B,CAAC,IAAI,CAAC,CAAC,CACjE,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,+BAA+B,CAC5C,aAA4B,EAC5B,KAAY;IAEZ,MAAM,gCAAgC,GAAG,IAAI,gCAAgC,CAC3E,wEAAwE,EACxE,KAAK,CACN,CAAC;IAEF,MAAM,aAAa,CAAC,QAAQ,CAAC,gCAAgC,CAAC,CAAC;IAE/D,OAAO,gCAAgC,CAAC;AAC1C,CAAC;AAED,KAAK,UAAU,+BAA+B,CAC5C,aAA4B,EAC5B,KAAY;IAEZ,MAAM,sCAAsC,GAAG,IAAI,sCAAsC,CACvF,mEAAmE,EACnE,KAAK,CACN,CAAC;IAEF,MAAM,gCAAgC,GAAG,IAAI,gCAAgC,CAC3E,4DAA4D,EAC5D,sCAAsC,CACvC,CAAC;IAEF,MAAM,aAAa,CAAC,QAAQ,CAAC,gCAAgC,CAAC,CAAC;IAE/D,OAAO,gCAAgC,CAAC;AAC1C,CAAC;AAED,KAAK,UAAU,4BAA4B,CACzC,aAA4B,EAC5B,KAAY;IAEZ,MAAM,6BAA6B,GAAG,IAAI,6BAA6B,CACrE,yDAAyD,EACzD,KAAK,CACN,CAAC;IAEF,MAAM,aAAa,CAAC,QAAQ,CAAC,6BAA6B,CAAC,CAAC;IAE5D,OAAO,6BAA6B,CAAC;AACvC,CAAC"}

package/dist/services/foundations/workspaceFiles/WorkspaceFileService.Validations.d.ts

@@ -0,0 +1,14 @@
+export declare const MAXIMUM_FILE_BYTES = 1048576;
+export declare function validatePath(path: string): void;
+export declare function validateInsideWorkspace(resolvedPath: string, resolvedRoot: string): void;
+export declare function validateNotSensitive(resolvedPath: string): void;
+export declare function validateExists(exists: boolean, path: string): void;
+export declare function validateIsFile(isDirectory: boolean, path: string): void;
+export declare function validateIsDirectory(isDirectory: boolean, path: string): void;
+export declare function validateSize(bytes: number, path: string): void;
+export declare function validateIsText(content: string, path: string): void;
+export declare function validateDoesNotExist(exists: boolean, path: string): void;
+export declare function validateSnapshotKey(key: string): void;
+export declare function validateSnapshotsRoot(snapshotsRoot: string): void;
+export declare function validateIsNotDirectory(isDirectory: boolean, path: string): void;
+//# sourceMappingURL=WorkspaceFileService.Validations.d.ts.map

package/dist/services/foundations/workspaceFiles/WorkspaceFileService.Validations.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"WorkspaceFileService.Validations.d.ts","sourceRoot":"","sources":["../../../../src/services/foundations/workspaceFiles/WorkspaceFileService.Validations.ts"],"names":[],"mappings":"AAWA,eAAO,MAAM,kBAAkB,UAAY,CAAC;AAS5C,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAI/C;AAID,wBAAgB,uBAAuB,CAAC,YAAY,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,IAAI,CAOxF;AAKD,wBAAgB,oBAAoB,CAAC,YAAY,EAAE,MAAM,GAAG,IAAI,CAc/D;AAUD,wBAAgB,cAAc,CAAC,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,GAAG,IAAI,CAQlE;AAED,wBAAgB,cAAc,CAAC,WAAW,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,GAAG,IAAI,CAIvE;AAED,wBAAgB,mBAAmB,CAAC,WAAW,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,GAAG,IAAI,CAI5E;AAED,wBAAgB,YAAY,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,IAAI,CAI9D;AAED,wBAAgB,cAAc,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,IAAI,CAIlE;AAaD,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,GAAG,IAAI,CAIxE;AAOD,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAIrD;AAID,wBAAgB,qBAAqB,CAAC,aAAa,EAAE,MAAM,GAAG,IAAI,CAIjE;AAKD,wBAAgB,sBAAsB,CAAC,WAAW,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,GAAG,IAAI,CAM/E"}

package/dist/services/foundations/workspaceFiles/WorkspaceFileService.Validations.js

@@ -0,0 +1,119 @@
+import { InvalidWorkspaceFileException } from "../../../models/foundations/workspaceFiles/exceptions/InvalidWorkspaceFileException.js";
+// The read floor (SPEC.md 6.1, 7.4). These refusals are not the perimeter and are not a
+// permission mode: they are the things this agent will not read whatever anybody permits, checked
+// before any tool logic runs, so a tool cannot be written that forgets them.
+//
+// Every message begins with a marker the orchestrator's loop-breaker recognises, because the
+// model reads these words and a refusal it cannot classify is one it will retry forever.
+// The hard ceiling. The read tool pages by line range with its own smaller cap; this is the point
+// at which a file is not something to page through but something to refuse.
+export const MAXIMUM_FILE_BYTES = 1_048_576;
+const SENSITIVE_NAMES = new Set([".npmrc", ".netrc", "secrets.json"]);
+const SENSITIVE_SUFFIXES = [".pem", ".key", ".pfx"];
+// A NUL byte is the cheapest honest test for "this is not text". Handing a model the decoded bytes
+// of an image teaches it nothing and costs a fortune in tokens.
+const NOT_TEXT = /\u0000/;
+export function validatePath(path) {
+    if (path.trim().length === 0) {
+        throw new InvalidWorkspaceFileException("could not read: no path was given");
+    }
+}
+// The boundary is checked against the resolved path, never the one that was asked for, because a
+// symbolic link is exactly how a path inside the workspace becomes a file outside it.
+export function validateInsideWorkspace(resolvedPath, resolvedRoot) {
+    const path = withSeparators(resolvedPath);
+    const root = withSeparators(resolvedRoot);
+    if (path !== root && !path.startsWith(root.endsWith("/") ? root : `${root}/`)) {
+        throw new InvalidWorkspaceFileException(`permission denied: ${resolvedPath} is outside the workspace`);
+    }
+}
+// Named by shape rather than by list, so a secret in a file nobody thought of is still refused as
+// long as it is shaped like one. The whole of .git is refused because a repository's object store
+// holds every version of everything, including the secret that was committed and then removed.
+export function validateNotSensitive(resolvedPath) {
+    const segments = withSeparators(resolvedPath).split("/");
+    const name = (segments[segments.length - 1] ?? "").toLowerCase();
+    const isSensitive = segments.includes(".git") ||
+        name.startsWith(".env") ||
+        name.startsWith("id_") ||
+        SENSITIVE_NAMES.has(name) ||
+        SENSITIVE_SUFFIXES.some((suffix) => name.endsWith(suffix));
+    if (isSensitive) {
+        throw new InvalidWorkspaceFileException(`permission denied: ${resolvedPath} is a sensitive file`);
+    }
+}
+// Nothing is there, and what to do about it.
+//
+// The fact alone was true and useless. A model that read a path it was about to write was told the
+// path is not there, learned nothing it could act on, and read it again with the same path until
+// the loop was broken for it and the person was told their file might be too large to read.
+//
+// Both ways out are named because both are real: the path may be wrong, in which case looking is
+// the move, or the file may simply not exist yet, in which case making it is.
+export function validateExists(exists, path) {
+    if (!exists) {
+        throw new InvalidWorkspaceFileException(`does not exist: ${path}. Nothing is at that path. ` +
+            `Look with list_directory or glob_files if you expected something there, ` +
+            `and use create_new_file if this is a file you mean to write`);
+    }
+}
+export function validateIsFile(isDirectory, path) {
+    if (isDirectory) {
+        throw new InvalidWorkspaceFileException(`could not read: ${path} is a directory`);
+    }
+}
+export function validateIsDirectory(isDirectory, path) {
+    if (!isDirectory) {
+        throw new InvalidWorkspaceFileException(`could not read: ${path} is not a directory`);
+    }
+}
+export function validateSize(bytes, path) {
+    if (bytes > MAXIMUM_FILE_BYTES) {
+        throw new InvalidWorkspaceFileException(`too large: ${path} is ${bytes} bytes; read it by line range instead`);
+    }
+}
+export function validateIsText(content, path) {
+    if (NOT_TEXT.test(content)) {
+        throw new InvalidWorkspaceFileException(`could not read: ${path} is not a text file`);
+    }
+}
+function withSeparators(path) {
+    return path.replace(/\\/g, "/");
+}
+// A create that found something there is a create that would have destroyed it. Refusing is the
+// only answer that cannot lose work the user did not mention.
+//
+// And the refusal names the way on. It used to stop at the fact, and a model told only that its
+// call did not happen goes looking for a reason: it concluded its edit had been held for review,
+// told the user so, and waited for an approval nobody could give. A refusal that does not say what
+// to do next is how a run gets stuck.
+export function validateDoesNotExist(exists, path) {
+    if (exists) {
+        throw new InvalidWorkspaceFileException(`already exists: ${path}. Use write_file to replace it, after reading it.`);
+    }
+}
+// A key names one snapshot inside the snapshots directory and nothing outside it. A key with a
+// separator or a dot-dot in it is a path, and a path is how a restore writes somewhere nobody
+// asked it to.
+const SNAPSHOT_KEY = /^[A-Za-z0-9_.-]{1,120}$/;
+export function validateSnapshotKey(key) {
+    if (!SNAPSHOT_KEY.test(key) || key.includes("..")) {
+        throw new InvalidWorkspaceFileException(`could not read: '${key}' is not a snapshot key`);
+    }
+}
+// A composition that named no snapshots directory cannot keep one. Saying so is better than writing
+// the bytes to a path that begins with a slash and hoping nobody notices.
+export function validateSnapshotsRoot(snapshotsRoot) {
+    if (snapshotsRoot.trim().length === 0) {
+        throw new InvalidWorkspaceFileException("could not write: this composition keeps no snapshots");
+    }
+}
+// A directory is not a file, and taking one out means taking out everything inside it. This client
+// will not do that from a model's request: the blast radius of a wrong path is the whole of it, and
+// there is no anchor, no diff and no preview that can show a person what they are agreeing to.
+export function validateIsNotDirectory(isDirectory, path) {
+    if (isDirectory) {
+        throw new InvalidWorkspaceFileException(`could not delete: ${path} is a directory. This client deletes files, one at a time.`);
+    }
+}
+//# sourceMappingURL=WorkspaceFileService.Validations.js.map

package/dist/services/foundations/workspaceFiles/WorkspaceFileService.Validations.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"WorkspaceFileService.Validations.js","sourceRoot":"","sources":["../../../../src/services/foundations/workspaceFiles/WorkspaceFileService.Validations.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,6BAA6B,EAAE,MAAM,wFAAwF,CAAC;AAEvI,wFAAwF;AACxF,kGAAkG;AAClG,6EAA6E;AAC7E,EAAE;AACF,6FAA6F;AAC7F,yFAAyF;AAEzF,kGAAkG;AAClG,4EAA4E;AAC5E,MAAM,CAAC,MAAM,kBAAkB,GAAG,SAAS,CAAC;AAE5C,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC,CAAC,QAAQ,EAAE,QAAQ,EAAE,cAAc,CAAC,CAAC,CAAC;AACtE,MAAM,kBAAkB,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;AAEpD,mGAAmG;AACnG,gEAAgE;AAChE,MAAM,QAAQ,GAAG,QAAQ,CAAC;AAE1B,MAAM,UAAU,YAAY,CAAC,IAAY;IACvC,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC7B,MAAM,IAAI,6BAA6B,CAAC,mCAAmC,CAAC,CAAC;IAC/E,CAAC;AACH,CAAC;AAED,iGAAiG;AACjG,sFAAsF;AACtF,MAAM,UAAU,uBAAuB,CAAC,YAAoB,EAAE,YAAoB;IAChF,MAAM,IAAI,GAAG,cAAc,CAAC,YAAY,CAAC,CAAC;IAC1C,MAAM,IAAI,GAAG,cAAc,CAAC,YAAY,CAAC,CAAC;IAE1C,IAAI,IAAI,KAAK,IAAI,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,GAAG,CAAC,EAAE,CAAC;QAC9E,MAAM,IAAI,6BAA6B,CAAC,sBAAsB,YAAY,2BAA2B,CAAC,CAAC;IACzG,CAAC;AACH,CAAC;AAED,kGAAkG;AAClG,kGAAkG;AAClG,+FAA+F;AAC/F,MAAM,UAAU,oBAAoB,CAAC,YAAoB;IACvD,MAAM,QAAQ,GAAG,cAAc,CAAC,YAAY,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACzD,MAAM,IAAI,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;IAEjE,MAAM,WAAW,GACf,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC;QACzB,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC;QACvB,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC;QACtB,eAAe,CAAC,GAAG,CAAC,IAAI,CAAC;QACzB,kBAAkB,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;IAE7D,IAAI,WAAW,EAAE,CAAC;QAChB,MAAM,IAAI,6BAA6B,CAAC,sBAAsB,YAAY,sBAAsB,CAAC,CAAC;IACpG,CAAC;AACH,CAAC;AAED,6CAA6C;AAC7C,EAAE;AACF,mGAAmG;AACnG,iGAAiG;AACjG,4FAA4F;AAC5F,EAAE;AACF,iGAAiG;AACjG,8EAA8E;AAC9E,MAAM,UAAU,cAAc,CAAC,MAAe,EAAE,IAAY;IAC1D,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,IAAI,6BAA6B,CACrC,mBAAmB,IAAI,6BAA6B;YAClD,0EAA0E;YAC1E,6DAA6D,CAChE,CAAC;IACJ,CAAC;AACH,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,WAAoB,EAAE,IAAY;IAC/D,IAAI,WAAW,EAAE,CAAC;QAChB,MAAM,IAAI,6BAA6B,CAAC,mBAAmB,IAAI,iBAAiB,CAAC,CAAC;IACpF,CAAC;AACH,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,WAAoB,EAAE,IAAY;IACpE,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,MAAM,IAAI,6BAA6B,CAAC,mBAAmB,IAAI,qBAAqB,CAAC,CAAC;IACxF,CAAC;AACH,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,KAAa,EAAE,IAAY;IACtD,IAAI,KAAK,GAAG,kBAAkB,EAAE,CAAC;QAC/B,MAAM,IAAI,6BAA6B,CAAC,cAAc,IAAI,OAAO,KAAK,uCAAuC,CAAC,CAAC;IACjH,CAAC;AACH,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,OAAe,EAAE,IAAY;IAC1D,IAAI,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QAC3B,MAAM,IAAI,6BAA6B,CAAC,mBAAmB,IAAI,qBAAqB,CAAC,CAAC;IACxF,CAAC;AACH,CAAC;AAED,SAAS,cAAc,CAAC,IAAY;IAClC,OAAO,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;AAClC,CAAC;AAED,gGAAgG;AAChG,8DAA8D;AAC9D,EAAE;AACF,gGAAgG;AAChG,iGAAiG;AACjG,mGAAmG;AACnG,sCAAsC;AACtC,MAAM,UAAU,oBAAoB,CAAC,MAAe,EAAE,IAAY;IAChE,IAAI,MAAM,EAAE,CAAC;QACX,MAAM,IAAI,6BAA6B,CAAC,mBAAmB,IAAI,mDAAmD,CAAC,CAAC;IACtH,CAAC;AACH,CAAC;AAED,+FAA+F;AAC/F,8FAA8F;AAC9F,eAAe;AACf,MAAM,YAAY,GAAG,yBAAyB,CAAC;AAE/C,MAAM,UAAU,mBAAmB,CAAC,GAAW;IAC7C,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QAClD,MAAM,IAAI,6BAA6B,CAAC,oBAAoB,GAAG,yBAAyB,CAAC,CAAC;IAC5F,CAAC;AACH,CAAC;AAED,oGAAoG;AACpG,0EAA0E;AAC1E,MAAM,UAAU,qBAAqB,CAAC,aAAqB;IACzD,IAAI,aAAa,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtC,MAAM,IAAI,6BAA6B,CAAC,sDAAsD,CAAC,CAAC;IAClG,CAAC;AACH,CAAC;AAED,mGAAmG;AACnG,oGAAoG;AACpG,+FAA+F;AAC/F,MAAM,UAAU,sBAAsB,CAAC,WAAoB,EAAE,IAAY;IACvE,IAAI,WAAW,EAAE,CAAC;QAChB,MAAM,IAAI,6BAA6B,CACrC,qBAAqB,IAAI,4DAA4D,CACtF,CAAC;IACJ,CAAC;AACH,CAAC"}

package/dist/services/foundations/workspaceFiles/WorkspaceFileService.d.ts

@@ -0,0 +1,21 @@
+import type { FileBroker, LoggingBroker } from "@hassanhabib/standard-agents";
+import type { WorkspaceEntry } from "../../../models/foundations/workspaceFiles/WorkspaceEntry.js";
+export declare class WorkspaceFileService {
+    private readonly fileBroker;
+    private readonly loggingBroker;
+    private readonly workspaceRoot;
+    private readonly snapshotsRoot;
+    private readonly tryCatch;
+    constructor(fileBroker: FileBroker, loggingBroker: LoggingBroker, workspaceRoot: string, snapshotsRoot?: string);
+    retrieveFile(asked: string): Promise<string>;
+    retrieveEntries(asked: string): Promise<readonly WorkspaceEntry[]>;
+    addFile(asked: string, content: string): Promise<void>;
+    modifyFile(asked: string, content: string): Promise<void>;
+    removePath(asked: string): Promise<void>;
+    addSnapshot(key: string, content: string): Promise<void>;
+    retrieveSnapshot(key: string): Promise<string>;
+    private inWorkspace;
+    private writeInside;
+    private resolveWritePath;
+}
+//# sourceMappingURL=WorkspaceFileService.d.ts.map

package/dist/services/foundations/workspaceFiles/WorkspaceFileService.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"WorkspaceFileService.d.ts","sourceRoot":"","sources":["../../../../src/services/foundations/workspaceFiles/WorkspaceFileService.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,8BAA8B,CAAC;AAE9E,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,8DAA8D,CAAC;AAyBnG,qBAAa,oBAAoB;IAC/B,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAa;IACxC,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAgB;IAC9C,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAS;IACvC,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAS;IACvC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAW;gBAGlC,UAAU,EAAE,UAAU,EACtB,aAAa,EAAE,aAAa,EAC5B,aAAa,EAAE,MAAM,EACrB,aAAa,SAAK;IASb,YAAY,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IA8B5C,eAAe,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,cAAc,EAAE,CAAC;IAgDlE,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAetD,UAAU,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAqBzD,UAAU,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IA2BxC,WAAW,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IASxD,gBAAgB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAsBrD,OAAO,CAAC,WAAW;YAML,WAAW;YAYX,gBAAgB;CAa/B"}

package/dist/services/foundations/workspaceFiles/WorkspaceFileService.js

@@ -0,0 +1,195 @@
+import { isAbsolute } from "node:path";
+import { createTryCatch } from "./WorkspaceFileService.Exceptions.js";
+import { validateDoesNotExist, validateExists, validateInsideWorkspace, validateIsDirectory, validateIsFile, validateIsNotDirectory, validateIsText, validateNotSensitive, validatePath, validateSize, validateSnapshotKey, validateSnapshotsRoot, } from "./WorkspaceFileService.Validations.js";
+// The workspace's files, as the agent is allowed to see them (SPEC.md 6.1, 7.4). One broker, and
+// a floor under every tool that reads: outside the workspace, sensitive by shape, absent, a
+// directory, too large, or not text, and the read never happens.
+//
+// The floor lives here rather than in the tools because a tool is a thing somebody writes next
+// week. A rule enforced in the foundation is one a new tool inherits by existing; a rule enforced
+// in a tool is one the next tool forgets.
+export class WorkspaceFileService {
+    fileBroker;
+    loggingBroker;
+    workspaceRoot;
+    snapshotsRoot;
+    tryCatch;
+    constructor(fileBroker, loggingBroker, workspaceRoot, snapshotsRoot = "") {
+        this.fileBroker = fileBroker;
+        this.loggingBroker = loggingBroker;
+        this.workspaceRoot = workspaceRoot;
+        this.snapshotsRoot = snapshotsRoot;
+        this.tryCatch = createTryCatch(this.loggingBroker);
+    }
+    retrieveFile(asked) {
+        return this.tryCatch(async () => {
+            validatePath(asked);
+            const path = this.inWorkspace(asked);
+            const stat = await this.fileBroker.stat(path);
+            validateExists(stat !== null, path);
+            validateIsFile(stat?.isDirectory === true, path);
+            // Resolved before the boundary is judged, because a symbolic link is exactly how a path
+            // inside the workspace becomes a file outside it.
+            const resolvedPath = await this.fileBroker.realpath(path);
+            const resolvedRoot = await this.fileBroker.realpath(this.workspaceRoot);
+            validateInsideWorkspace(resolvedPath, resolvedRoot);
+            validateNotSensitive(resolvedPath);
+            validateSize(stat?.size ?? 0, path);
+            const content = await this.fileBroker.readFile(resolvedPath);
+            validateIsText(content, path);
+            return content;
+        });
+    }
+    // What a directory holds. The boundary and the sensitive shapes are judged for the directory
+    // itself; what is inside is listed as it is, because the existence of a file is not the secret,
+    // its contents are, and a model that can see a name it may not read can say so honestly.
+    //
+    // The repository store is the exception and is never listed, because walking it is never what
+    // anybody meant and it is enormous.
+    retrieveEntries(asked) {
+        return this.tryCatch(async () => {
+            validatePath(asked);
+            const path = this.inWorkspace(asked);
+            const stat = await this.fileBroker.stat(path);
+            validateExists(stat !== null, path);
+            validateIsDirectory(stat?.isDirectory === true, path);
+            const resolvedPath = await this.fileBroker.realpath(path);
+            const resolvedRoot = await this.fileBroker.realpath(this.workspaceRoot);
+            validateInsideWorkspace(resolvedPath, resolvedRoot);
+            validateNotSensitive(resolvedPath);
+            const names = await this.fileBroker.readdir(resolvedPath);
+            const entries = [];
+            for (const name of names) {
+                if (name === ".git") {
+                    continue;
+                }
+                const entryPath = `${resolvedPath}/${name}`;
+                const entryStat = await this.fileBroker.stat(entryPath);
+                // A name that vanished between the listing and the look is simply gone; it is not a
+                // fault, and reporting it as one would make a listing race with the file system.
+                if (entryStat === null) {
+                    continue;
+                }
+                entries.push({
+                    name,
+                    path: entryPath,
+                    relativePath: relativeTo(resolvedRoot, entryPath),
+                    modifiedOn: entryStat.modifiedOn,
+                    isDirectory: entryStat.isDirectory,
+                    size: entryStat.size,
+                });
+            }
+            return entries;
+        });
+    }
+    // A file the workspace does not have yet. The parent is resolved rather than the file, because a
+    // path that is not there has no real path of its own, and the boundary must still be judged
+    // against something the file system actually resolved.
+    addFile(asked, content) {
+        return this.tryCatch(async () => {
+            validatePath(asked);
+            const path = this.inWorkspace(asked);
+            validateIsText(content, path);
+            validateSize(Buffer.byteLength(content, "utf8"), path);
+            validateDoesNotExist((await this.fileBroker.stat(path)) !== null, path);
+            await this.writeInside(path, content);
+        });
+    }
+    // A file the workspace already has. Refusing a path that is not there is what keeps a modify from
+    // quietly becoming a create, which is the difference between editing a file and inventing one.
+    modifyFile(asked, content) {
+        return this.tryCatch(async () => {
+            validatePath(asked);
+            const path = this.inWorkspace(asked);
+            validateIsText(content, path);
+            validateSize(Buffer.byteLength(content, "utf8"), path);
+            const stat = await this.fileBroker.stat(path);
+            validateExists(stat !== null, path);
+            validateIsFile(stat?.isDirectory === true, path);
+            await this.writeInside(path, content);
+        });
+    }
+    // A file taken out of the workspace.
+    //
+    // The same floor as every other write: inside the workspace once the links are resolved, and
+    // never a path shaped like a secret. A delete needs it more than a write does, because a write
+    // to the wrong place leaves the right place alone and a delete does not.
+    removePath(asked) {
+        return this.tryCatch(async () => {
+            validatePath(asked);
+            const path = this.inWorkspace(asked);
+            const stat = await this.fileBroker.stat(path);
+            validateExists(stat !== null, path);
+            validateIsNotDirectory(stat?.isDirectory === true, path);
+            const resolvedPath = await this.fileBroker.realpath(path);
+            const resolvedRoot = await this.fileBroker.realpath(this.workspaceRoot);
+            validateInsideWorkspace(resolvedPath, resolvedRoot);
+            validateNotSensitive(resolvedPath);
+            await this.fileBroker.unlink(resolvedPath);
+        });
+    }
+    // What a file looked like before the agent touched it.
+    //
+    // Snapshots live outside the workspace, not inside it. A copy kept beside the original is a copy
+    // the next glob finds, the next grep searches and the next commit includes, and an undo that
+    // dirties the repository it is undoing in is not much of an undo.
+    //
+    // The key is opaque here: the tier above decides what a snapshot belongs to, and this only has to
+    // put the bytes somewhere it can find them again.
+    addSnapshot(key, content) {
+        return this.tryCatch(async () => {
+            validateSnapshotKey(key);
+            validateSnapshotsRoot(this.snapshotsRoot);
+            await this.fileBroker.writeFileAtomic(`${this.snapshotsRoot}/${key}`, content);
+        });
+    }
+    retrieveSnapshot(key) {
+        return this.tryCatch(async () => {
+            validateSnapshotKey(key);
+            validateSnapshotsRoot(this.snapshotsRoot);
+            const path = `${this.snapshotsRoot}/${key}`;
+            validateExists((await this.fileBroker.stat(path)) !== null, path);
+            return await this.fileBroker.readFile(path);
+        });
+    }
+    // What a path means in this workspace.
+    //
+    // A relative path is relative to the workspace, which is what every tool description promises and
+    // what a model naturally writes after a search answers with `src/index.ts`. Until now it was
+    // relative to whatever directory the process was sitting in. For the terminal those are the same
+    // directory by accident; for one process holding two workspaces they are not, and an accident
+    // that holds in one door and not the other is the kind that is found in the field.
+    //
+    // Forward slashes rather than the platform's own separator, because the rest of this service
+    // joins that way and the file system takes either.
+    inWorkspace(path) {
+        return isAbsolute(path) ? path : `${this.workspaceRoot}/${path}`;
+    }
+    // The floor under every write, exactly as `retrieveFile` is the floor under every read: inside
+    // the workspace once the links are resolved, and never a path shaped like a secret.
+    async writeInside(path, content) {
+        const resolvedRoot = await this.fileBroker.realpath(this.workspaceRoot);
+        const resolvedPath = await this.resolveWritePath(path);
+        validateInsideWorkspace(resolvedPath, resolvedRoot);
+        validateNotSensitive(resolvedPath);
+        await this.fileBroker.writeFileAtomic(resolvedPath, content);
+    }
+    // An existing file resolves itself; a new one borrows its parent's resolution, because a symbolic
+    // link in the parent is the way a path inside the workspace becomes a file outside it.
+    async resolveWritePath(path) {
+        const stat = await this.fileBroker.stat(path);
+        if (stat !== null) {
+            return await this.fileBroker.realpath(path);
+        }
+        const separator = Math.max(path.lastIndexOf("/"), path.lastIndexOf("\\"));
+        const parent = separator <= 0 ? this.workspaceRoot : path.slice(0, separator);
+        const name = separator <= 0 ? path : path.slice(separator + 1);
+        return `${await this.fileBroker.realpath(parent)}/${name}`;
+    }
+}
+function relativeTo(resolvedRoot, entryPath) {
+    const root = resolvedRoot.replace(/\\/g, "/").replace(/\/+$/, "");
+    const entry = entryPath.replace(/\\/g, "/");
+    return entry.startsWith(`${root}/`) ? entry.slice(root.length + 1) : entry;
+}
+//# sourceMappingURL=WorkspaceFileService.js.map

package/dist/services/foundations/workspaceFiles/WorkspaceFileService.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"WorkspaceFileService.js","sourceRoot":"","sources":["../../../../src/services/foundations/workspaceFiles/WorkspaceFileService.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AAMvC,OAAO,EAAE,cAAc,EAAiB,MAAM,sCAAsC,CAAC;AACrF,OAAO,EACL,oBAAoB,EACpB,cAAc,EACd,uBAAuB,EACvB,mBAAmB,EACnB,cAAc,EACd,sBAAsB,EACtB,cAAc,EACd,oBAAoB,EACpB,YAAY,EACZ,YAAY,EACZ,mBAAmB,EACnB,qBAAqB,GACtB,MAAM,uCAAuC,CAAC;AAE/C,iGAAiG;AACjG,4FAA4F;AAC5F,iEAAiE;AACjE,EAAE;AACF,+FAA+F;AAC/F,kGAAkG;AAClG,0CAA0C;AAC1C,MAAM,OAAO,oBAAoB;IACd,UAAU,CAAa;IACvB,aAAa,CAAgB;IAC7B,aAAa,CAAS;IACtB,aAAa,CAAS;IACtB,QAAQ,CAAW;IAEpC,YACE,UAAsB,EACtB,aAA4B,EAC5B,aAAqB,EACrB,aAAa,GAAG,EAAE;QAElB,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;QAC7B,IAAI,CAAC,aAAa,GAAG,aAAa,CAAC;QACnC,IAAI,CAAC,aAAa,GAAG,aAAa,CAAC;QACnC,IAAI,CAAC,aAAa,GAAG,aAAa,CAAC;QACnC,IAAI,CAAC,QAAQ,GAAG,cAAc,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;IACrD,CAAC;IAEM,YAAY,CAAC,KAAa;QAC/B,OAAO,IAAI,CAAC,QAAQ,CAAC,KAAK,IAAI,EAAE;YAC9B,YAAY,CAAC,KAAK,CAAC,CAAC;YAEpB,MAAM,IAAI,GAAG,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;YACrC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC9C,cAAc,CAAC,IAAI,KAAK,IAAI,EAAE,IAAI,CAAC,CAAC;YACpC,cAAc,CAAC,IAAI,EAAE,WAAW,KAAK,IAAI,EAAE,IAAI,CAAC,CAAC;YAEjD,wFAAwF;YACxF,kDAAkD;YAClD,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;YAC1D,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;YACxE,uBAAuB,CAAC,YAAY,EAAE,YAAY,CAAC,CAAC;YACpD,oBAAoB,CAAC,YAAY,CAAC,CAAC;YACnC,YAAY,CAAC,IAAI,EAAE,IAAI,IAAI,CAAC,EAAE,IAAI,CAAC,CAAC;YAEpC,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC;YAC7D,cAAc,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;YAE9B,OAAO,OAAO,CAAC;QACjB,CAAC,CAAC,CAAC;IACL,CAAC;IAED,6FAA6F;IAC7F,gGAAgG;IAChG,yFAAyF;IACzF,EAAE;IACF,8FAA8F;IAC9F,oCAAoC;IAC7B,eAAe,CAAC,KAAa;QAClC,OAAO,IAAI,CAAC,QAAQ,CAAC,KAAK,IAAI,EAAE;YAC9B,YAAY,CAAC,KAAK,CAAC,CAAC;YAEpB,MAAM,IAAI,GAAG,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;YACrC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC9C,cAAc,CAAC,IAAI,KAAK,IAAI,EAAE,IAAI,CAAC,CAAC;YACpC,mBAAmB,CAAC,IAAI,EAAE,WAAW,KAAK,IAAI,EAAE,IAAI,CAAC,CAAC;YAEtD,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;YAC1D,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;YACxE,uBAAuB,CAAC,YAAY,EAAE,YAAY,CAAC,CAAC;YACpD,oBAAoB,CAAC,YAAY,CAAC,CAAC;YAEnC,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;YAC1D,MAAM,OAAO,GAAqB,EAAE,CAAC;YAErC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;gBACzB,IAAI,IAAI,KAAK,MAAM,EAAE,CAAC;oBACpB,SAAS;gBACX,CAAC;gBAED,MAAM,SAAS,GAAG,GAAG,YAAY,IAAI,IAAI,EAAE,CAAC;gBAC5C,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;gBAExD,oFAAoF;gBACpF,iFAAiF;gBACjF,IAAI,SAAS,KAAK,IAAI,EAAE,CAAC;oBACvB,SAAS;gBACX,CAAC;gBAED,OAAO,CAAC,IAAI,CAAC;oBACX,IAAI;oBACJ,IAAI,EAAE,SAAS;oBACf,YAAY,EAAE,UAAU,CAAC,YAAY,EAAE,SAAS,CAAC;oBACjD,UAAU,EAAE,SAAS,CAAC,UAAU;oBAChC,WAAW,EAAE,SAAS,CAAC,WAAW;oBAClC,IAAI,EAAE,SAAS,CAAC,IAAI;iBACrB,CAAC,CAAC;YACL,CAAC;YAED,OAAO,OAAO,CAAC;QACjB,CAAC,CAAC,CAAC;IACL,CAAC;IAED,iGAAiG;IACjG,4FAA4F;IAC5F,uDAAuD;IAChD,OAAO,CAAC,KAAa,EAAE,OAAe;QAC3C,OAAO,IAAI,CAAC,QAAQ,CAAC,KAAK,IAAI,EAAE;YAC9B,YAAY,CAAC,KAAK,CAAC,CAAC;YAEpB,MAAM,IAAI,GAAG,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;YACrC,cAAc,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;YAC9B,YAAY,CAAC,MAAM,CAAC,UAAU,CAAC,OAAO,EAAE,MAAM,CAAC,EAAE,IAAI,CAAC,CAAC;YACvD,oBAAoB,CAAC,CAAC,MAAM,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,IAAI,EAAE,IAAI,CAAC,CAAC;YAExE,MAAM,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QACxC,CAAC,CAAC,CAAC;IACL,CAAC;IAED,kGAAkG;IAClG,+FAA+F;IACxF,UAAU,CAAC,KAAa,EAAE,OAAe;QAC9C,OAAO,IAAI,CAAC,QAAQ,CAAC,KAAK,IAAI,EAAE;YAC9B,YAAY,CAAC,KAAK,CAAC,CAAC;YAEpB,MAAM,IAAI,GAAG,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;YACrC,cAAc,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;YAC9B,YAAY,CAAC,MAAM,CAAC,UAAU,CAAC,OAAO,EAAE,MAAM,CAAC,EAAE,IAAI,CAAC,CAAC;YAEvD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC9C,cAAc,CAAC,IAAI,KAAK,IAAI,EAAE,IAAI,CAAC,CAAC;YACpC,cAAc,CAAC,IAAI,EAAE,WAAW,KAAK,IAAI,EAAE,IAAI,CAAC,CAAC;YAEjD,MAAM,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QACxC,CAAC,CAAC,CAAC;IACL,CAAC;IAED,qCAAqC;IACrC,EAAE;IACF,6FAA6F;IAC7F,+FAA+F;IAC/F,yEAAyE;IAClE,UAAU,CAAC,KAAa;QAC7B,OAAO,IAAI,CAAC,QAAQ,CAAC,KAAK,IAAI,EAAE;YAC9B,YAAY,CAAC,KAAK,CAAC,CAAC;YAEpB,MAAM,IAAI,GAAG,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;YACrC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC9C,cAAc,CAAC,IAAI,KAAK,IAAI,EAAE,IAAI,CAAC,CAAC;YACpC,sBAAsB,CAAC,IAAI,EAAE,WAAW,KAAK,IAAI,EAAE,IAAI,CAAC,CAAC;YAEzD,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;YAC1D,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;YAExE,uBAAuB,CAAC,YAAY,EAAE,YAAY,CAAC,CAAC;YACpD,oBAAoB,CAAC,YAAY,CAAC,CAAC;YAEnC,MAAM,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;QAC7C,CAAC,CAAC,CAAC;IACL,CAAC;IAEH,uDAAuD;IACrD,EAAE;IACF,iGAAiG;IACjG,6FAA6F;IAC7F,kEAAkE;IAClE,EAAE;IACF,kGAAkG;IAClG,kDAAkD;IAC3C,WAAW,CAAC,GAAW,EAAE,OAAe;QAC7C,OAAO,IAAI,CAAC,QAAQ,CAAC,KAAK,IAAI,EAAE;YAC9B,mBAAmB,CAAC,GAAG,CAAC,CAAC;YACzB,qBAAqB,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;YAE1C,MAAM,IAAI,CAAC,UAAU,CAAC,eAAe,CAAC,GAAG,IAAI,CAAC,aAAa,IAAI,GAAG,EAAE,EAAE,OAAO,CAAC,CAAC;QACjF,CAAC,CAAC,CAAC;IACL,CAAC;IAEM,gBAAgB,CAAC,GAAW;QACjC,OAAO,IAAI,CAAC,QAAQ,CAAC,KAAK,IAAI,EAAE;YAC9B,mBAAmB,CAAC,GAAG,CAAC,CAAC;YACzB,qBAAqB,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;YAE1C,MAAM,IAAI,GAAG,GAAG,IAAI,CAAC,aAAa,IAAI,GAAG,EAAE,CAAC;YAC5C,cAAc,CAAC,CAAC,MAAM,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,IAAI,EAAE,IAAI,CAAC,CAAC;YAElE,OAAO,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QAC9C,CAAC,CAAC,CAAC;IACL,CAAC;IAED,uCAAuC;IACvC,EAAE;IACF,kGAAkG;IAClG,6FAA6F;IAC7F,iGAAiG;IACjG,8FAA8F;IAC9F,mFAAmF;IACnF,EAAE;IACF,6FAA6F;IAC7F,mDAAmD;IAC3C,WAAW,CAAC,IAAY;QAC9B,OAAO,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,aAAa,IAAI,IAAI,EAAE,CAAC;IACnE,CAAC;IAED,+FAA+F;IAC/F,oFAAoF;IAC5E,KAAK,CAAC,WAAW,CAAC,IAAY,EAAE,OAAe;QACrD,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QACxE,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC;QAEvD,uBAAuB,CAAC,YAAY,EAAE,YAAY,CAAC,CAAC;QACpD,oBAAoB,CAAC,YAAY,CAAC,CAAC;QAEnC,MAAM,IAAI,CAAC,UAAU,CAAC,eAAe,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC;IAC/D,CAAC;IAED,kGAAkG;IAClG,uFAAuF;IAC/E,KAAK,CAAC,gBAAgB,CAAC,IAAY;QACzC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAE9C,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;YAClB,OAAO,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QAC9C,CAAC;QAED,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC;QAC1E,MAAM,MAAM,GAAG,SAAS,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;QAC9E,MAAM,IAAI,GAAG,SAAS,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC;QAE/D,OAAO,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;IAC7D,CAAC;CACF;AAED,SAAS,UAAU,CAAC,YAAoB,EAAE,SAAiB;IACzD,MAAM,IAAI,GAAG,YAAY,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAClE,MAAM,KAAK,GAAG,SAAS,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IAE5C,OAAO,KAAK,CAAC,UAAU,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;AAC7E,CAAC"}

package/dist/services/orchestrations/connections/ConnectionOrchestrationService.Exceptions.d.ts

@@ -0,0 +1,4 @@
+import type { LoggingBroker } from "@hassanhabib/standard-agents";
+export type TryCatch = <T>(routine: () => Promise<T>) => Promise<T>;
+export declare function createTryCatch(loggingBroker: LoggingBroker): TryCatch;
+//# sourceMappingURL=ConnectionOrchestrationService.Exceptions.d.ts.map

package/dist/services/orchestrations/connections/ConnectionOrchestrationService.Exceptions.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ConnectionOrchestrationService.Exceptions.d.ts","sourceRoot":"","sources":["../../../../src/services/orchestrations/connections/ConnectionOrchestrationService.Exceptions.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,8BAA8B,CAAC;AAmBlE,MAAM,MAAM,QAAQ,GAAG,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,KAAK,OAAO,CAAC,CAAC,CAAC,CAAC;AAEpE,wBAAgB,cAAc,CAAC,aAAa,EAAE,aAAa,GAAG,QAAQ,CAqDrE"}