@playcraft/cli 0.1.22 → 0.1.24

package/dist/workspace-runtime/workspaces/directories.js

@@ -1,106 +0,0 @@
-import { execFile } from 'node:child_process';
-import { randomUUID } from 'node:crypto';
-import { lstat, rename, rm } from 'node:fs/promises';
-import { join } from 'node:path';
-import { promisify } from 'node:util';
-import { workspaceDirectoryRegistrationSchema } from '@playcraft/common/cloud-workspace/runtime';
-import { workspaceContainerRoot, workspaceRoot, WorkspaceContextError } from './registry.js';
-import { openDirectoryToDevelopment } from './directory-access.js';
-import { prepareWorkspaceCheckout } from './prepare.js';
-import { readDependencies, scheduleDependencyInstall } from './dependencies.js';
-import { revisionScope } from './registry.js';
-import { ensureWorkspaceSkills } from './skills.js';
-const execute = promisify(execFile);
-/** Trusted Runtime registration clones an immutable local commit; it never follows basic's current branch head. */
-export async function registerWorkspaceDirectory(state, input, leaseFence) {
-    const directory = workspaceDirectoryRegistrationSchema.parse(input);
-    if (directory.directoryName === 'basic')
-        throw new WorkspaceContextError('workspace_directory_binding_conflict');
-    return state.journal.exclusive(`directory:${directory.workspaceId}:${directory.directoryName}`, async () => {
-        if (state.journal.destroyed())
-            throw new WorkspaceContextError('runtime_destroyed');
-        if (leaseFence < state.acceptedLeaseFence)
-            throw new WorkspaceContextError('stale_lease');
-        const binding = state.journal.getWorkspace(directory.workspaceId);
-        if (!binding || !binding.repositoryUrl)
-            throw new WorkspaceContextError('workspace_not_registered');
-        const existing = binding.directories?.find(item => item.directoryName === directory.directoryName);
-        if (existing && (existing.remixId !== directory.remixId || existing.branchName !== directory.branchName || (existing.sourceCommit !== undefined && existing.sourceCommit !== directory.sourceCommit)))
-            throw new WorkspaceContextError('workspace_directory_binding_conflict');
-        const parent = await workspaceContainerRoot(state, directory.workspaceId);
-        const root = join(parent, directory.directoryName);
-        const git = async (cwd, ...args) => (await execute('git', ['-c', 'core.hooksPath=/dev/null', '-c', 'credential.helper=', '-c', 'core.fsmonitor=false', '-C', cwd, ...args], {
-            timeout: 90_000, maxBuffer: 1024 * 1024,
-            env: { PATH: process.env.PATH, HOME: state.config.stateDir, GIT_CONFIG_GLOBAL: '/dev/null', GIT_CONFIG_NOSYSTEM: '1', GIT_TERMINAL_PROMPT: '0' },
-        })).stdout.trim();
-        const stat = await lstat(root).catch(() => undefined);
-        if (stat) {
-            if (!stat.isDirectory() || stat.isSymbolicLink() || await git(root, 'symbolic-ref', '--short', 'HEAD') !== directory.branchName || await git(root, 'config', '--get', 'remote.origin.url') !== binding.repositoryUrl)
-                throw new WorkspaceContextError('workspace_checkout_mismatch');
-        }
-        else {
-            if (existing && existing.status !== 'pending')
-                throw new WorkspaceContextError('workspace_recovery_required');
-            if (!directory.sourceCommit)
-                throw new WorkspaceContextError('workspace_directory_source_commit_required');
-            const source = await workspaceRoot(state, directory.workspaceId, 'basic');
-            await git(source, 'cat-file', '-e', `${directory.sourceCommit}^{commit}`);
-            const staging = join(parent, `.directory-${randomUUID()}`);
-            try {
-                await execute('git', ['-c', 'core.hooksPath=/dev/null', 'clone', '--local', '--no-hardlinks', '--no-checkout', '--', source, staging], { timeout: 90_000, maxBuffer: 1024 * 1024 });
-                await git(staging, 'checkout', '-b', directory.branchName, directory.sourceCommit);
-                await git(staging, 'remote', 'set-url', 'origin', binding.repositoryUrl);
-                await git(staging, 'config', 'user.name', 'PlayCraft');
-                await git(staging, 'config', 'user.email', 'playcraft@localhost');
-                await ensureWorkspaceSkills(staging, join(state.config.stateDir, 'skill-artifacts'));
-                if (leaseFence < state.acceptedLeaseFence)
-                    throw new WorkspaceContextError('stale_lease');
-                await rename(staging, root);
-            }
-            finally {
-                await rm(staging, { recursive: true, force: true });
-            }
-        }
-        await openDirectoryToDevelopment(root, (await lstat(state.config.workspaceRoot)).gid);
-        state.acceptedLeaseFence = Math.max(state.acceptedLeaseFence, leaseFence);
-        await state.journal.setAcceptedLeaseFence(state.acceptedLeaseFence);
-        await state.journal.putWorkspace({ ...binding, directories: [...(binding.directories ?? []).filter(item => item.directoryName !== directory.directoryName), { ...directory, status: 'ready' }] });
-        if (state.gitCredentials)
-            await state.gitCredentials.configure(binding, await state.gitCredentials.prepareDirectory(directory.workspaceId, directory.directoryName), directory.directoryName);
-        return directory;
-    });
-}
-/** A reclaimed checkout recovers its existing remote branch; no new variant or moving basic head is used. */
-export async function restoreWorkspaceDirectory(state, workspaceId, directoryName = 'basic') {
-    if (directoryName === 'root')
-        return;
-    await state.journal.exclusive(`directory:${workspaceId}:${directoryName}`, async () => {
-        const binding = state.journal.getWorkspace(workspaceId);
-        const directory = binding?.directories?.find(item => item.directoryName === directoryName);
-        if (!binding || directory?.status !== 'reclaimed')
-            return;
-        if (binding.targetKind === 'standalone' || !state.gitCredentials)
-            throw new WorkspaceContextError('workspace_recovery_required');
-        const preparation = await state.gitCredentials.prepareDirectory(workspaceId, directoryName);
-        const { pendingFork: _pendingFork, directories: _directories, ...base } = binding;
-        const target = directoryName === 'basic' ? base : { ...base, targetKind: 'remix', remixId: directory.remixId, branchName: directory.branchName };
-        const root = join(state.config.workspaceRoot, workspaceId, directoryName);
-        if (!await lstat(root).catch(() => undefined))
-            await prepareWorkspaceCheckout(state, target, preparation, state.acceptedLeaseFence, directoryName, true);
-        await ensureWorkspaceSkills(root, join(state.config.stateDir, 'skill-artifacts'));
-        await openDirectoryToDevelopment(root, (await lstat(state.config.workspaceRoot)).gid);
-        await state.journal.putWorkspace({ ...binding, directories: binding.directories?.map(item => item.directoryName === directoryName ? { ...item, status: 'ready' } : item) });
-        try {
-            await state.gitCredentials.configure(binding, preparation, directoryName);
-            const scope = revisionScope(state, workspaceId, directoryName);
-            await scheduleDependencyInstall(state, scope, root);
-            if (!['ready', 'none'].includes(readDependencies(state, scope).status))
-                throw new WorkspaceContextError('workspace_directory_restore_dependencies_failed');
-        }
-        catch (error) {
-            const current = state.journal.getWorkspace(workspaceId);
-            await state.journal.putWorkspace({ ...current, directories: current.directories?.map(item => item.directoryName === directoryName ? { ...item, status: 'reclaimed' } : item) });
-            throw error;
-        }
-    });
-}

package/dist/workspace-runtime/workspaces/directory-access.js

@@ -1,20 +0,0 @@
-import { chmod, chown, lstat, readdir } from 'node:fs/promises';
-import { join } from 'node:path';
-/** The sandbox development group can edit engine directories. Symlinks never grant access outside the tree. */
-export async function openDirectoryToDevelopment(root, groupId) {
-    const visit = async (path) => {
-        const stat = await lstat(path);
-        if (stat.isSymbolicLink())
-            return;
-        if (stat.gid !== groupId)
-            await chown(path, stat.uid, groupId);
-        if (stat.isDirectory()) {
-            await chmod(path, (stat.mode & 0o777) | 0o2770);
-            for (const entry of await readdir(path))
-                await visit(join(path, entry));
-        }
-        else if (stat.isFile())
-            await chmod(path, (stat.mode & 0o777) | 0o660);
-    };
-    await visit(root);
-}

package/dist/workspace-runtime/workspaces/directory-maintenance.js

@@ -1,111 +0,0 @@
-import { execFile } from 'node:child_process';
-import { mkdir, readFile, rename, rm, writeFile } from 'node:fs/promises';
-import { join } from 'node:path';
-import { randomUUID } from 'node:crypto';
-import { promisify } from 'node:util';
-import { workspaceDirectoryNameSchema } from '@playcraft/common/cloud-workspace/runtime';
-import { productionDirectoryBusy } from '../production/controller.js';
-import { workspaceRoot, workspaceSessions } from './registry.js';
-const execute = promisify(execFile);
-const git = async (state, root, ...args) => (await execute('git', ['-c', 'core.hooksPath=/dev/null', '-c', 'core.fsmonitor=false', '-C', root, ...args], {
-    timeout: 30_000, maxBuffer: 1024 * 1024, env: { PATH: process.env.PATH, HOME: state.config.stateDir, GIT_CONFIG_GLOBAL: '/dev/null', GIT_CONFIG_NOSYSTEM: '1', GIT_TERMINAL_PROMPT: '0' },
-})).stdout.trim();
-export async function workspaceDirectoryOccupied(state, workspaceId, directoryName) {
-    if (await productionDirectoryBusy(state, workspaceId, directoryName))
-        return true;
-    if (state.journal.listOperations().some(({ operation }) => operation.workspaceId === workspaceId
-        && (operation.directoryName ?? 'basic') === directoryName && ['queued', 'dispatched', 'accepted', 'uncertain'].includes(operation.status)))
-        return true;
-    if (workspaceSessions(state, workspaceId, directoryName).some(session => session.turnBlock === 'uncertain' || ['starting', 'running', 'waiting_for_user'].includes(session.turnStatus ?? '')))
-        return true;
-    if (state.journal.listTerminals().some(terminal => terminal.workspaceId === workspaceId && (terminal.directoryName ?? 'basic') === directoryName && terminal.status !== 'destroyed'))
-        return true;
-    return [workspaceId, `${workspaceId}:${directoryName}`].some(scope => state.journal.listManagedWrites(scope).some(write => !write.stoppedAt));
-}
-async function assertCleanAndPushed(state, root, allowedHead) {
-    if (await git(state, root, 'status', '--porcelain', '--untracked-files=all'))
-        throw new Error('workspace_directory_uncommitted');
-    const upstream = await git(state, root, 'rev-parse', '--abbrev-ref', '--symbolic-full-name', '@{upstream}').catch(() => '');
-    if (!upstream || (Number(await git(state, root, 'rev-list', '--count', `${upstream}..HEAD`)) > 0 && await git(state, root, 'rev-parse', 'HEAD') !== allowedHead))
-        throw new Error('workspace_directory_unpushed');
-}
-/** Keep remote branches, published previews and all journal identities; only local checkouts are reclaimed. */
-export async function cleanupWorkspaceDirectories(state, workspaceId, directoryNames) {
-    if (!Array.isArray(directoryNames) || directoryNames.length === 0 || directoryNames.length > 64)
-        throw new Error('workspace_directories_invalid');
-    const names = [...new Set(directoryNames.map(name => workspaceDirectoryNameSchema.parse(name)))];
-    return state.journal.exclusive(`maintenance:${workspaceId}`, async () => {
-        const cleaned = [];
-        const blocked = [];
-        for (const directoryName of names) {
-            try {
-                await state.journal.exclusive(`directory:${workspaceId}:${directoryName}`, async () => {
-                    if (await workspaceDirectoryOccupied(state, workspaceId, directoryName))
-                        throw new Error('workspace_directory_occupied');
-                    const root = await workspaceRoot(state, workspaceId, directoryName);
-                    await assertCleanAndPushed(state, root);
-                    const binding = state.journal.getWorkspace(workspaceId);
-                    // Persist recoverable identity before removing the checkout; a retry cannot silently adopt another branch.
-                    const existing = binding.directories?.find(item => item.directoryName === directoryName);
-                    const directory = existing ?? { workspaceId, directoryName, remixId: binding.remixId, branchName: binding.branchName };
-                    await state.journal.putWorkspace({ ...binding, directories: [...(binding.directories ?? []).filter(item => item.directoryName !== directoryName), { ...directory, status: 'reclaimed' }] });
-                    await rm(root, { recursive: true });
-                    cleaned.push(directoryName);
-                });
-            }
-            catch (error) {
-                blocked.push({ directoryName, reason: error instanceof Error && /^[a-z0-9_]+$/.test(error.message) ? error.message : 'workspace_cleanup_failed' });
-            }
-        }
-        return { cleaned, blocked };
-    });
-}
-/** Conflicts remain isolated to their own engineering directory. Busy directories are skipped without deferred work. */
-export async function syncWorkspaceDirectories(state, workspaceId, commitHash, targetDirectoryNames) {
-    if (typeof commitHash !== 'string' || !/^[a-f0-9]{40,64}$/.test(commitHash) || !Array.isArray(targetDirectoryNames) || targetDirectoryNames.length === 0 || targetDirectoryNames.length > 64)
-        throw new Error('workspace_sync_invalid');
-    const basic = await workspaceRoot(state, workspaceId, 'basic');
-    await git(state, basic, 'merge-base', '--is-ancestor', commitHash, 'HEAD');
-    const synced = [], skipped = [], conflicts = [];
-    for (const directoryName of [...new Set(targetDirectoryNames.map(name => workspaceDirectoryNameSchema.parse(name)))]) {
-        if (directoryName === 'basic')
-            throw new Error('workspace_sync_target_invalid');
-        await state.journal.exclusive(`directory:${workspaceId}:${directoryName}`, async () => {
-            if (await workspaceDirectoryOccupied(state, workspaceId, directoryName)) {
-                skipped.push({ directoryName, reason: 'directory_busy' });
-                return;
-            }
-            const root = await workspaceRoot(state, workspaceId, directoryName);
-            const ledger = join(state.config.stateDir, 'directory-sync', workspaceId, `${directoryName}.json`);
-            const applied = await readFile(ledger, 'utf8').then(value => JSON.parse(value), () => undefined);
-            await assertCleanAndPushed(state, root, applied?.sourceCommit === commitHash ? applied.targetCommit : undefined);
-            if (applied?.sourceCommit === commitHash && await git(state, root, 'rev-parse', 'HEAD') === applied.targetCommit) {
-                synced.push(directoryName);
-                return;
-            }
-            const containing = await git(state, root, 'merge-base', '--is-ancestor', commitHash, 'HEAD').then(() => true, () => false);
-            if (containing) {
-                synced.push(directoryName);
-                return;
-            }
-            // Import the exact preserved basic commit, without fetching a moving remote branch.
-            await execute('git', ['-c', 'core.hooksPath=/dev/null', '-C', root, 'fetch', '--no-tags', '--', basic, commitHash], { timeout: 30_000, maxBuffer: 1024 * 1024 });
-            const equivalent = (await git(state, root, 'cherry', 'HEAD', commitHash)).split('\n').some(line => line === `- ${commitHash}`);
-            if (!equivalent) {
-                try {
-                    await git(state, root, '-c', 'user.name=PlayCraft', '-c', 'user.email=playcraft@localhost', 'cherry-pick', commitHash);
-                }
-                catch {
-                    conflicts.push(directoryName);
-                    return;
-                }
-            }
-            await mkdir(join(state.config.stateDir, 'directory-sync', workspaceId), { recursive: true, mode: 0o700 });
-            const temporary = `${ledger}.${randomUUID()}.tmp`;
-            await writeFile(temporary, JSON.stringify({ sourceCommit: commitHash, targetCommit: await git(state, root, 'rev-parse', 'HEAD') }), { mode: 0o600 });
-            await rename(temporary, ledger);
-            synced.push(directoryName);
-        });
-    }
-    return { synced, skipped, conflicts, previewStale: true };
-}

package/dist/workspace-runtime/workspaces/directory-stats.js

@@ -1,49 +0,0 @@
-import { execFile } from 'node:child_process';
-import { promisify } from 'node:util';
-import { workspaceRoot, WorkspaceContextError } from './registry.js';
-const execute = promisify(execFile);
-/** Measures registered checkouts only when requested; journal activity never scans private neighboring workspaces. */
-export async function readWorkspaceDirectoryStats(state, workspaceId) {
-    const binding = state.journal.getWorkspace(workspaceId);
-    if (!binding)
-        throw new WorkspaceContextError('workspace_not_registered');
-    const names = [...new Set(['basic', ...(binding.directories ?? []).map(directory => directory.directoryName)])];
-    const operations = state.journal.listOperations().map(item => item.operation).filter(operation => operation.workspaceId === workspaceId);
-    const events = state.journal.listEvents().flatMap(event => {
-        const payload = event.payload && typeof event.payload === 'object' ? event.payload : {};
-        const session = typeof payload.sessionId === 'string' ? state.journal.getSession(payload.sessionId) : undefined;
-        if ((payload.workspaceId ?? session?.workspaceId) !== workspaceId)
-            return [];
-        return [{ directoryName: String(payload.directoryName ?? session?.directoryName ?? 'basic'), occurredAt: event.occurredAt }];
-    });
-    const latest = (dates) => {
-        const timestamps = dates.map(value => Date.parse(value)).filter(Number.isFinite);
-        return timestamps.length ? new Date(Math.max(...timestamps)).toISOString() : null;
-    };
-    const directories = [];
-    for (const directoryName of names) {
-        const lastUsedAt = latest([...operations.filter(operation => (operation.directoryName ?? 'basic') === directoryName).map(operation => operation.updatedAt),
-            ...events.filter(event => event.directoryName === directoryName).map(event => event.occurredAt)]);
-        if (binding.directories?.some(directory => directory.directoryName === directoryName && directory.status === 'reclaimed')) {
-            directories.push({ directoryName, sizeBytes: 0, lastUsedAt, status: 'reclaimed' });
-            continue;
-        }
-        let root;
-        try {
-            root = await workspaceRoot(state, workspaceId, directoryName);
-        }
-        catch (error) {
-            if (!(error instanceof WorkspaceContextError) || error.message !== 'workspace_not_prepared')
-                throw error;
-            directories.push({ directoryName, sizeBytes: 0, lastUsedAt, status: 'missing' });
-            continue;
-        }
-        const output = await execute('du', ['-sk', root], { timeout: 30_000, maxBuffer: 4096 });
-        const blocks = Number(output.stdout.trim().split(/\s+/)[0]);
-        if (!Number.isSafeInteger(blocks) || blocks < 0 || !Number.isSafeInteger(blocks * 1024))
-            throw new Error('workspace_directory_stats_invalid');
-        directories.push({ directoryName, sizeBytes: blocks * 1024, lastUsedAt, status: 'present' });
-    }
-    return { workspaceId, sizeBytes: directories.reduce((sum, directory) => sum + directory.sizeBytes, 0),
-        lastUsedAt: latest([...operations.map(operation => operation.updatedAt), ...events.map(event => event.occurredAt)]), directories };
-}

package/dist/workspace-runtime/workspaces/empty-template.js

@@ -1,32 +0,0 @@
-import { cp, mkdir } from 'node:fs/promises';
-import { join } from 'node:path';
-import { resolveCliPackageRoot } from '../../scaffold/compose.js';
-import { syncLocalProjectSkills } from '../../project-skills/local-store.js';
-export const EMPTY_WORKSPACE_DEFAULT_SKILLS = [
-    'playcraft-skill-recommender',
-    'playcraft-image-generation',
-    'playcraft-audio-generation',
-    'playcraft-image-processing',
-    'playcraft-build-optimizer',
-];
-/** Only called in a new, unpublished staging directory; existing workspaces are never scaffolded. */
-export async function scaffoldEmptyWorkspace(root, skillCache) {
-    const cliRoot = resolveCliPackageRoot();
-    const template = join(cliRoot, 'project-templates', 'empty');
-    for (const [source, target] of [
-        ['gitignore', '.gitignore'],
-        ['AGENTS.md', 'AGENTS.md'],
-    ]) {
-        await cp(join(template, source), join(root, target), { force: false, errorOnExist: true });
-    }
-    const skills = join(root, '.agents', 'skills');
-    await mkdir(skills, { recursive: true });
-    for (const name of EMPTY_WORKSPACE_DEFAULT_SKILLS) {
-        await cp(join(cliRoot, 'project-template', '.claude', 'skills', name), join(skills, name), {
-            recursive: true,
-            force: false,
-            errorOnExist: true,
-        });
-    }
-    await syncLocalProjectSkills(root, skillCache);
-}

package/dist/workspace-runtime/workspaces/files.js

@@ -1,113 +0,0 @@
-import { mkdir, readdir, readFile, realpath, writeFile } from 'node:fs/promises';
-import { dirname, join, relative, resolve, sep } from 'node:path';
-import { hashWorkspaceFileContent, workspaceFileContentSchema, workspaceFileListSchema, workspaceRelativePathSchema, } from '@playcraft/common/cloud-workspace/runtime';
-const SKIP_DIRECTORY_NAMES = new Set(['.git', 'node_modules']);
-export class InvalidWorkspacePathError extends Error {
-    code = 'invalid_workspace_path';
-    constructor(path) {
-        super(path);
-        this.name = 'InvalidWorkspacePathError';
-    }
-}
-export async function ensureWorkspaceRoot(root) {
-    await mkdir(root, { recursive: true, mode: 0o700 });
-    return realpath(root);
-}
-export async function resolveWorkspaceFile(root, relativePath) {
-    const parsed = workspaceRelativePathSchema.safeParse(relativePath);
-    if (!parsed.success)
-        throw new InvalidWorkspacePathError(relativePath);
-    const rootReal = await ensureWorkspaceRoot(root);
-    const target = resolve(rootReal, ...parsed.data.split('/'));
-    assertInsideRoot(rootReal, target);
-    try {
-        const existing = await realpath(target);
-        assertInsideRoot(rootReal, existing);
-        return existing;
-    }
-    catch (error) {
-        if (error.code !== 'ENOENT')
-            throw error;
-        await assertParentInsideRoot(rootReal, dirname(target));
-        return target;
-    }
-}
-export async function writeWorkspaceFile(root, relativePath, content) {
-    const target = await resolveWorkspaceFile(root, relativePath);
-    await mkdir(dirname(target), { recursive: true, mode: 0o700 });
-    const bytes = Buffer.from(content, 'utf8');
-    await writeFile(target, bytes, { mode: 0o600 });
-    return { path: relativePath, contentHash: hashWorkspaceFileContent(content), size: bytes.byteLength };
-}
-export async function readWorkspaceFile(root, relativePath, revisions) {
-    const target = await resolveWorkspaceFile(root, relativePath);
-    const content = await readFile(target, 'utf8');
-    const contentHash = hashWorkspaceFileContent(content);
-    return workspaceFileContentSchema.parse({
-        path: relativePath,
-        revision: revisions[relativePath]?.revision ?? 0,
-        contentHash,
-        content,
-    });
-}
-export async function listWorkspaceFiles(root, revisions) {
-    const rootReal = await ensureWorkspaceRoot(root);
-    const files = [];
-    for (const relativePath of await walkWorkspaceFiles(rootReal, rootReal)) {
-        const target = join(rootReal, ...relativePath.split('/'));
-        const content = await readFile(target, 'utf8');
-        files.push({
-            path: relativePath,
-            revision: revisions[relativePath]?.revision ?? 0,
-            contentHash: hashWorkspaceFileContent(content),
-            size: Buffer.byteLength(content, 'utf8'),
-        });
-    }
-    files.sort((left, right) => left.path.localeCompare(right.path));
-    return workspaceFileListSchema.parse({ files });
-}
-async function walkWorkspaceFiles(rootReal, current) {
-    const entries = await readdir(current, { withFileTypes: true });
-    const paths = [];
-    for (const entry of entries) {
-        if (entry.isDirectory()) {
-            if (SKIP_DIRECTORY_NAMES.has(entry.name) || entry.name === '.' || entry.name === '..')
-                continue;
-            const child = join(current, entry.name);
-            const childReal = await realpath(child);
-            assertInsideRoot(rootReal, childReal);
-            paths.push(...(await walkWorkspaceFiles(rootReal, childReal)));
-            continue;
-        }
-        if (!entry.isFile())
-            continue;
-        const childReal = await realpath(join(current, entry.name));
-        assertInsideRoot(rootReal, childReal);
-        paths.push(toPosixRelative(rootReal, childReal));
-    }
-    return paths;
-}
-async function assertParentInsideRoot(rootReal, parent) {
-    if (parent === rootReal)
-        return;
-    try {
-        const parentReal = await realpath(parent);
-        assertInsideRoot(rootReal, parentReal);
-    }
-    catch (error) {
-        if (error.code !== 'ENOENT')
-            throw error;
-        await mkdir(parent, { recursive: true, mode: 0o700 });
-        const parentReal = await realpath(parent);
-        assertInsideRoot(rootReal, parentReal);
-    }
-}
-function assertInsideRoot(rootReal, target) {
-    const rel = relative(rootReal, target);
-    if (rel === '' || rel.startsWith(`..${sep}`) || rel === '..' || rel.startsWith('..')) {
-        throw new InvalidWorkspacePathError(target);
-    }
-}
-function toPosixRelative(rootReal, target) {
-    return relative(rootReal, target).split(sep).join('/');
-}