@playcraft/cli 0.1.54 → 0.1.55-beta

package/dist/workspace-runtime/workspaces/archive.js

@@ -0,0 +1,207 @@
+import { constants } from 'node:fs';
+import { lstat, open, opendir, realpath } from 'node:fs/promises';
+import { join, relative, sep } from 'node:path';
+import { Readable, Transform } from 'node:stream';
+import { pipeline } from 'node:stream/promises';
+import { createDeflateRaw } from 'node:zlib';
+import { isCredentialFile } from './git.js';
+const EXCLUDED_NAMES = new Set(['.git', 'node_modules', '.playcraft.json', '.playcraft-workspace.json']);
+const MAX_SOURCE_BYTES = 2 * 1024 * 1024 * 1024;
+const MAX_ENTRIES = 50_000;
+const UTF8_DESCRIPTOR_FLAGS = 0x0808;
+const CRC_TABLE = Uint32Array.from({ length: 256 }, (_, value) => {
+    let crc = value;
+    for (let bit = 0; bit < 8; bit += 1)
+        crc = (crc >>> 1) ^ (crc & 1 ? 0xedb88320 : 0);
+    return crc >>> 0;
+});
+/** Exports working files, including ignored deliverables, without following symbolic links. */
+export async function createWorkspaceArchive(root, options = {}) {
+    const rootReal = await realpath(root);
+    const excludedRoots = await Promise.all((options.excludedRoots ?? []).map(path => realpath(path).catch(() => path)));
+    const entries = [];
+    let bytes = 0;
+    const walk = async (directory) => {
+        options.signal?.throwIfAborted();
+        const info = await lstat(directory);
+        if (!info.isDirectory() || info.isSymbolicLink() || !inside(rootReal, await realpath(directory)))
+            throw new Error('workspace_archive_changed');
+        for await (const entry of await opendir(directory)) {
+            options.signal?.throwIfAborted();
+            if (EXCLUDED_NAMES.has(entry.name) || entry.name.startsWith('.playcraft-credential-'))
+                continue;
+            const target = join(directory, entry.name);
+            const path = relative(rootReal, target).split(sep).join('/');
+            if (isCredentialFile(path) || /(?:^|\/)\.playcraft\/(?:workspace-context(?:\.[^/]*)?|video-replication)(?:\/|$)/.test(path))
+                continue;
+            if (excludedRoots.some(excluded => inside(excluded, target)))
+                continue;
+            const info = await lstat(target);
+            if (info.isSymbolicLink())
+                continue;
+            if (!inside(rootReal, await realpath(target)))
+                throw new Error('workspace_archive_changed');
+            if (info.isDirectory()) {
+                await walk(target);
+                continue;
+            }
+            if (!info.isFile())
+                continue;
+            if (Buffer.byteLength(path) > 65_535 || /[\0\\]/.test(path))
+                throw new Error('workspace_archive_invalid_path');
+            bytes += info.size;
+            if (bytes > (options.maxSourceBytes ?? MAX_SOURCE_BYTES) || entries.length >= (options.maxEntries ?? MAX_ENTRIES))
+                throw new Error('workspace_archive_too_large');
+            entries.push({ path, target, info });
+        }
+    };
+    await walk(rootReal);
+    entries.sort((left, right) => left.path.localeCompare(right.path));
+    return Readable.from(zipFiles(rootReal, entries, options.signal));
+}
+/** Standard ZIP (ZIP archive format, 压缩归档格式) records are streamed with bounded buffers. */
+async function* zipFiles(root, entries, signal) {
+    const central = [];
+    let offset = 0;
+    for (const entry of entries) {
+        signal?.throwIfAborted();
+        if (!inside(root, await realpath(entry.target)))
+            throw new Error('workspace_archive_changed');
+        const handle = await open(entry.target, constants.O_RDONLY | constants.O_NOFOLLOW);
+        try {
+            const info = await handle.stat();
+            if (!info.isFile() || info.dev !== entry.info.dev || info.ino !== entry.info.ino || info.size !== entry.info.size
+                || info.mtimeMs !== entry.info.mtimeMs || info.ctimeMs !== entry.info.ctimeMs)
+                throw new Error('workspace_archive_changed');
+            const name = Buffer.from(entry.path);
+            const stamp = zipTimestamp(info.mtime);
+            const header = Buffer.alloc(30);
+            header.writeUInt32LE(0x04034b50, 0);
+            header.writeUInt16LE(20, 4);
+            header.writeUInt16LE(UTF8_DESCRIPTOR_FLAGS, 6);
+            header.writeUInt16LE(8, 8);
+            header.writeUInt32LE(stamp, 10);
+            header.writeUInt16LE(name.length, 26);
+            const start = offset;
+            yield header;
+            yield name;
+            offset += header.length + name.length;
+            let crc = 0xffffffff;
+            let size = 0;
+            let compressedSize = 0;
+            const checksum = new Transform({ transform(chunk, _encoding, done) {
+                    size += chunk.length;
+                    if (size > info.size) {
+                        done(new Error('workspace_archive_changed'));
+                        return;
+                    }
+                    for (const byte of chunk)
+                        crc = CRC_TABLE[(crc ^ byte) & 0xff] ^ (crc >>> 8);
+                    done(null, chunk);
+                } });
+            const compressed = createDeflateRaw();
+            const completion = pipeline(handle.createReadStream({ autoClose: false }), checksum, compressed, { signal });
+            void completion.catch(() => undefined);
+            try {
+                for await (const chunk of compressed) {
+                    signal?.throwIfAborted();
+                    compressedSize += chunk.length;
+                    offset += chunk.length;
+                    yield chunk;
+                }
+                await completion;
+            }
+            finally {
+                compressed.destroy();
+                checksum.destroy();
+                await completion.catch(() => undefined);
+            }
+            if (size !== info.size)
+                throw new Error('workspace_archive_changed');
+            const after = await handle.stat();
+            if (after.size !== info.size || after.mtimeMs !== info.mtimeMs || after.ctimeMs !== info.ctimeMs)
+                throw new Error('workspace_archive_changed');
+            crc = (crc ^ 0xffffffff) >>> 0;
+            const descriptor = Buffer.alloc(16);
+            descriptor.writeUInt32LE(0x08074b50, 0);
+            descriptor.writeUInt32LE(crc, 4);
+            descriptor.writeUInt32LE(compressedSize, 8);
+            descriptor.writeUInt32LE(size, 12);
+            yield descriptor;
+            offset += descriptor.length;
+            const record = Buffer.alloc(46);
+            record.writeUInt32LE(0x02014b50, 0);
+            record.writeUInt16LE(0x0314, 4);
+            record.writeUInt16LE(20, 6);
+            record.writeUInt16LE(UTF8_DESCRIPTOR_FLAGS, 8);
+            record.writeUInt16LE(8, 10);
+            record.writeUInt32LE(stamp, 12);
+            record.writeUInt32LE(crc, 16);
+            record.writeUInt32LE(compressedSize, 20);
+            record.writeUInt32LE(size, 24);
+            record.writeUInt16LE(name.length, 28);
+            record.writeUInt32LE(((info.mode & 0xffff) << 16) >>> 0, 38);
+            record.writeUInt32LE(start, 42);
+            central.push(record, name);
+        }
+        finally {
+            await handle.close();
+        }
+    }
+    const centralStart = offset;
+    for (const record of central) {
+        signal?.throwIfAborted();
+        yield record;
+        offset += record.length;
+    }
+    const end = Buffer.alloc(22);
+    end.writeUInt32LE(0x06054b50, 0);
+    end.writeUInt16LE(entries.length, 8);
+    end.writeUInt16LE(entries.length, 10);
+    end.writeUInt32LE(offset - centralStart, 12);
+    end.writeUInt32LE(centralStart, 16);
+    yield end;
+}
+export async function serveWorkspaceArchive(root, request, response, options = {}) {
+    const controller = new AbortController();
+    const abort = () => controller.abort();
+    const close = () => { if (!response.writableEnded)
+        abort(); };
+    request.once('aborted', abort);
+    response.once('close', close);
+    try {
+        const archive = await createWorkspaceArchive(root, { ...options, signal: controller.signal });
+        response.writeHead(200, {
+            'content-type': 'application/zip', 'content-disposition': 'attachment; filename="workspace.zip"',
+            'cache-control': 'private, no-store', 'x-content-type-options': 'nosniff',
+        });
+        if (request.method === 'HEAD') {
+            archive.destroy();
+            response.end();
+            return;
+        }
+        await pipeline(archive, response, { signal: controller.signal });
+    }
+    catch (error) {
+        if (response.headersSent)
+            response.destroy(error instanceof Error ? error : undefined);
+        else if (!controller.signal.aborted) {
+            const reason = error instanceof Error ? error.message : 'workspace_archive_failed';
+            response.writeHead(reason === 'workspace_archive_too_large' ? 413 : 409, { 'content-type': 'application/json', 'cache-control': 'private, no-store' });
+            response.end(JSON.stringify({ error: reason.startsWith('workspace_archive_') ? reason : 'workspace_archive_failed' }));
+        }
+    }
+    finally {
+        request.off('aborted', abort);
+        response.off('close', close);
+    }
+}
+function inside(root, target) {
+    const path = relative(root, target);
+    return path === '' || (path !== '..' && !path.startsWith(`..${sep}`) && !path.startsWith(sep));
+}
+function zipTimestamp(date) {
+    const year = Math.min(2107, Math.max(1980, date.getUTCFullYear()));
+    return (((year - 1980) << 25) | ((date.getUTCMonth() + 1) << 21) | (date.getUTCDate() << 16)
+        | (date.getUTCHours() << 11) | (date.getUTCMinutes() << 5) | (date.getUTCSeconds() >>> 1)) >>> 0;
+}

package/dist/workspace-runtime/workspaces/artifact-events.js

@@ -0,0 +1,55 @@
+import { PLATFORM_ROUTES, platformEndpoint } from '@playcraft/common/cloud-workspace/runtime';
+import { workspaceRoot } from './registry.js';
+import { WorkspaceArtifactStore } from './artifacts.js';
+export async function refreshWorkspaceArtifacts(state, workspaceId, origin) {
+    if (state.journal.destroyed())
+        throw new Error('runtime_destroyed');
+    const root = await workspaceRoot(state, workspaceId);
+    const result = await new WorkspaceArtifactStore(state.config.stateDir, workspaceId).discover(root, origin?.source, origin?.paths);
+    if (result.changed && !state.journal.destroyed()) {
+        const event = await state.journal.allocateSourceEvent({
+            runtimeId: state.config.runtimeId, generation: state.config.generation, runtimeEpoch: state.runtimeEpoch,
+            workspaceId, type: 'artifact.updated', occurredAt: result.list.scannedAt,
+            payload: { workspaceId, artifacts: result.list.artifacts.map(artifact => ({ id: artifact.id, currentVersionId: artifact.currentVersionId })) },
+        });
+        // The durable source stream remains authoritative when the callback is temporarily unavailable.
+        void fetch(platformEndpoint(state.config.publicBaseUrl, PLATFORM_ROUTES.events), {
+            method: 'POST', signal: AbortSignal.timeout(5000),
+            headers: { authorization: `Bearer ${state.config.controlToken}`, 'x-playcraft-control-token': state.config.controlToken, 'content-type': 'application/json' },
+            body: JSON.stringify({ runtimeId: state.config.runtimeId, generation: state.config.generation, runtimeEpoch: state.runtimeEpoch, events: [event] }),
+        }).then(response => response.body?.cancel()).catch(() => undefined);
+    }
+    return result.list;
+}
+/** Completed commands and turns reconcile outputs, including work done before a failed turn. */
+export function observeWorkspaceArtifacts(state) {
+    const pending = new Map();
+    const running = new Set();
+    const reconcile = (workspaceId) => {
+        const task = refreshWorkspaceArtifacts(state, workspaceId).catch(() => undefined);
+        running.add(task);
+        void task.finally(() => running.delete(task));
+    };
+    const stop = state.journal.onSourceEvent((event) => {
+        if (!['file.written', 'files.changed', 'filesystem.changed', 'item/completed', 'turn.completed', 'turn/completed', 'turn.failed', 'turn.interrupted'].includes(event.type))
+            return;
+        const payload = event.payload && typeof event.payload === 'object' ? event.payload : {};
+        const sessionId = typeof payload.sessionId === 'string' ? payload.sessionId : undefined;
+        const workspaceId = typeof payload.workspaceId === 'string' ? payload.workspaceId : sessionId ? state.journal.getSession(sessionId)?.workspaceId : undefined;
+        if (!workspaceId)
+            return;
+        const timer = pending.get(workspaceId);
+        if (timer)
+            clearTimeout(timer);
+        pending.set(workspaceId, setTimeout(() => { pending.delete(workspaceId); reconcile(workspaceId); }, 200));
+    });
+    return async () => {
+        stop();
+        for (const [workspaceId, timer] of pending) {
+            clearTimeout(timer);
+            reconcile(workspaceId);
+        }
+        pending.clear();
+        await Promise.all([...running]);
+    };
+}

package/dist/workspace-runtime/workspaces/artifact-files.js

@@ -0,0 +1,199 @@
+import { createHash, randomUUID } from 'node:crypto';
+import { constants } from 'node:fs';
+import { lstat, mkdir, open, readFile, realpath, link, unlink } from 'node:fs/promises';
+import { extname, join, posix, resolve, sep } from 'node:path';
+import { WORKSPACE_ARTIFACT_MAX_BYTES, isWorkspaceArtifactOutputPath, workspaceRelativePathSchema } from '@playcraft/common/cloud-workspace/runtime';
+const formats = {
+    '.png': ['image', 'image/png'], '.jpg': ['image', 'image/jpeg'], '.jpeg': ['image', 'image/jpeg'],
+    '.webp': ['image', 'image/webp'], '.gif': ['image', 'image/gif'], '.avif': ['image', 'image/avif'], '.svg': ['image', 'image/svg+xml'],
+    '.hdr': ['image', 'image/vnd.radiance'], '.exr': ['image', 'image/x-exr'],
+    '.ktx': ['image', 'image/ktx'], '.ktx2': ['image', 'image/ktx2'], '.dds': ['image', 'image/vnd-ms.dds'],
+    '.mp4': ['video', 'video/mp4'], '.webm': ['video', 'video/webm'], '.mov': ['video', 'video/quicktime'],
+    '.mp3': ['audio', 'audio/mpeg'], '.wav': ['audio', 'audio/wav'], '.ogg': ['audio', 'audio/ogg'], '.m4a': ['audio', 'audio/mp4'], '.flac': ['audio', 'audio/flac'],
+    '.glb': ['model', 'model/gltf-binary'], '.gltf': ['model', 'model/gltf+json'], '.obj': ['model', 'text/plain'], '.fbx': ['model', 'application/octet-stream'], '.stl': ['model', 'model/stl'], '.usdz': ['model', 'model/vnd.usdz+zip'],
+    '.md': ['document', 'text/markdown'], '.txt': ['document', 'text/plain'], '.pdf': ['document', 'application/pdf'],
+    '.html': ['document', 'text/html'], '.csv': ['document', 'text/csv'], '.docx': ['document', 'application/vnd.openxmlformats-officedocument.wordprocessingml.document'],
+    '.pptx': ['document', 'application/vnd.openxmlformats-officedocument.presentationml.presentation'], '.xlsx': ['document', 'application/vnd.openxmlformats-officedocument.spreadsheetml.sheet'],
+    '.zip': ['file', 'application/zip'],
+};
+export function artifactFormat(path) { return formats[extname(path).toLowerCase()]; }
+export function artifactMime(path) { return artifactFormat(path)?.[1] ?? 'application/octet-stream'; }
+/** Reject every redirected path segment, including links that happen to remain in the workspace. */
+export async function artifactPath(root, path) {
+    const parsed = workspaceRelativePathSchema.safeParse(path);
+    if (!parsed.success)
+        throw new Error('invalid_artifact_path');
+    const actualRoot = await realpath(root);
+    let target = actualRoot;
+    for (const part of parsed.data.split('/')) {
+        target = join(target, part);
+        if ((await lstat(target)).isSymbolicLink())
+            throw new Error('invalid_artifact_path');
+    }
+    if (!(await realpath(target)).startsWith(`${actualRoot}${sep}`))
+        throw new Error('invalid_artifact_path');
+    return target;
+}
+export async function artifactDirectory(root, relative) {
+    let target = await realpath(root);
+    for (const part of workspaceRelativePathSchema.parse(relative).split('/')) {
+        target = join(target, part);
+        await mkdir(target, { mode: 0o700 }).catch(error => { if (error.code !== 'EEXIST')
+            throw error; });
+        const stat = await lstat(target);
+        if (!stat.isDirectory() || stat.isSymbolicLink())
+            throw new Error('invalid_artifact_directory');
+    }
+    return target;
+}
+/** Copies the exact bytes observed, and refuses a file changed while being copied. */
+export async function snapshotArtifactFile(root, path, objects, role = 'primary') {
+    const target = await artifactPath(root, path);
+    const source = await open(target, constants.O_RDONLY | constants.O_NOFOLLOW);
+    const temporary = join(objects, `${randomUUID()}.tmp`);
+    let output;
+    try {
+        const before = await source.stat();
+        if (!before.isFile() || before.nlink !== 1 || before.size > WORKSPACE_ARTIFACT_MAX_BYTES)
+            throw new Error('artifact_file_unavailable');
+        output = await open(temporary, constants.O_WRONLY | constants.O_CREAT | constants.O_EXCL | constants.O_NOFOLLOW, 0o600);
+        const hash = createHash('sha256'), buffer = Buffer.allocUnsafe(64 * 1024);
+        let size = 0;
+        for (;;) {
+            const { bytesRead } = await source.read(buffer, 0, buffer.length, size);
+            if (!bytesRead)
+                break;
+            size += bytesRead;
+            if (size > WORKSPACE_ARTIFACT_MAX_BYTES)
+                throw new Error('artifact_file_unavailable');
+            const chunk = buffer.subarray(0, bytesRead);
+            hash.update(chunk);
+            let written = 0;
+            while (written < bytesRead)
+                written += (await output.write(chunk, written, bytesRead - written)).bytesWritten;
+        }
+        const after = await source.stat();
+        if (before.size !== size || before.size !== after.size || before.mtimeMs !== after.mtimeMs || before.ctimeMs !== after.ctimeMs)
+            throw new Error('artifact_file_changed');
+        await output.sync();
+        await output.close();
+        output = undefined;
+        const sha256 = hash.digest('hex');
+        await link(temporary, join(objects, sha256)).catch(async (error) => {
+            if (error.code !== 'EEXIST')
+                throw error;
+            const existing = await open(join(objects, sha256), constants.O_RDONLY | constants.O_NOFOLLOW);
+            try {
+                if (!(await existing.stat()).isFile() || (await existing.stat()).size !== size)
+                    throw new Error('artifact_snapshot_invalid');
+            }
+            finally {
+                await existing.close();
+            }
+        });
+        return { path, size, sha256, mimeType: artifactMime(path), role };
+    }
+    finally {
+        await source.close();
+        await output?.close();
+        await unlink(temporary).catch(error => { if (error.code !== 'ENOENT')
+            throw error; });
+    }
+}
+function resourcePath(primary, uri) {
+    if (uri.startsWith('data:'))
+        return undefined;
+    if (/^[a-z][a-z\d+.-]*:/i.test(uri) || uri.startsWith('/') || uri.includes('\\') || uri.includes('?') || uri.includes('#'))
+        throw new Error('invalid_artifact_resource');
+    const decoded = decodeURIComponent(uri);
+    const path = posix.normalize(posix.join(posix.dirname(primary), decoded));
+    if (!isWorkspaceArtifactOutputPath(path) || path.split('/').some(part => part.startsWith('.')))
+        throw new Error('invalid_artifact_resource');
+    return path;
+}
+async function smallText(root, path) {
+    const target = await artifactPath(root, path);
+    if ((await lstat(target)).size > 8 * 1024 * 1024)
+        throw new Error('artifact_metadata_too_large');
+    return readFile(target, 'utf8');
+}
+async function binaryModelDocument(root, path) {
+    const handle = await open(await artifactPath(root, path), constants.O_RDONLY | constants.O_NOFOLLOW);
+    try {
+        const header = Buffer.alloc(20);
+        const read = await handle.read(header, 0, header.length, 0);
+        if (read.bytesRead < 20 || header.readUInt32LE(0) !== 0x46546c67)
+            return undefined;
+        const size = (await handle.stat()).size, length = header.readUInt32LE(12);
+        if (header.readUInt32LE(4) !== 2 || header.readUInt32LE(8) !== size || header.readUInt32LE(16) !== 0x4e4f534a
+            || length < 2 || length > 8 * 1024 * 1024 || length + 20 > size)
+            throw new Error('artifact_model_invalid');
+        const bytes = Buffer.alloc(length);
+        let offset = 0;
+        while (offset < length) {
+            const part = await handle.read(bytes, offset, length - offset, 20 + offset);
+            if (!part.bytesRead)
+                throw new Error('artifact_model_invalid');
+            offset += part.bytesRead;
+        }
+        return JSON.parse(bytes.toString('utf8').replace(/\0+$/, ''));
+    }
+    finally {
+        await handle.close();
+    }
+}
+/** Only explicit model references become members; neighboring names never imply a relationship. */
+export async function artifactResources(root, path) {
+    const resources = new Set();
+    const add = (from, uri) => { const result = resourcePath(from, uri); if (result)
+        resources.add(result); };
+    const extension = extname(path).toLowerCase();
+    if (extension === '.gltf' || extension === '.glb') {
+        const body = (extension === '.gltf' ? JSON.parse(await smallText(root, path)) : await binaryModelDocument(root, path));
+        if (body)
+            for (const resource of [...(body.buffers ?? []), ...(body.images ?? [])])
+                if (typeof resource.uri === 'string')
+                    add(path, resource.uri);
+    }
+    else if (extname(path).toLowerCase() === '.obj') {
+        for (const line of (await smallText(root, path)).split(/\r?\n/)) {
+            const material = /^\s*mtllib\s+(.+?)\s*$/.exec(line)?.[1];
+            if (material)
+                add(path, material);
+        }
+        for (const material of [...resources]) {
+            for (const line of (await smallText(root, material)).split(/\r?\n/)) {
+                const texture = /^\s*(?:map_\w+|bump|disp|decal|norm)\s+(\S.*?)\s*$/.exec(line)?.[1];
+                // Options require a material parser; do not guess the filename from an option list.
+                if (texture && !texture.startsWith('-'))
+                    add(material, texture);
+            }
+        }
+    }
+    if (resources.size > 255)
+        throw new Error('artifact_too_many_resources');
+    return [...resources].sort();
+}
+export async function snapshotArtifactBundle(root, path, objects, thumbnailPath) {
+    if (!isWorkspaceArtifactOutputPath(path) || (thumbnailPath !== undefined && !isWorkspaceArtifactOutputPath(thumbnailPath)))
+        throw new Error('invalid_artifact_path');
+    const resources = await artifactResources(root, path);
+    const files = [await snapshotArtifactFile(root, path, objects)];
+    for (const resource of resources)
+        if (resource !== path)
+            files.push(await snapshotArtifactFile(root, resource, objects, 'resource'));
+    if (thumbnailPath && !files.some(file => file.path === thumbnailPath))
+        files.push(await snapshotArtifactFile(root, thumbnailPath, objects, 'thumbnail'));
+    if (files.reduce((size, file) => size + file.size, 0) > WORKSPACE_ARTIFACT_MAX_BYTES)
+        throw new Error('artifact_bundle_too_large');
+    return files;
+}
+export function artifactBundleDigest(files) {
+    return createHash('sha256').update(JSON.stringify([...files].sort((a, b) => a.path.localeCompare(b.path)).map(file => [file.path, file.sha256, file.role]))).digest('hex');
+}
+export function relativeArtifactPath(root, path) {
+    const target = resolve(path), prefix = `${resolve(root)}${sep}`;
+    if (!target.startsWith(prefix))
+        throw new Error('invalid_artifact_path');
+    return workspaceRelativePathSchema.parse(target.slice(prefix.length).split(sep).join('/'));
+}

package/dist/workspace-runtime/workspaces/artifact-receipts.js

@@ -0,0 +1,89 @@
+import { randomUUID } from 'node:crypto';
+import { constants } from 'node:fs';
+import { lstat, open, rename, unlink } from 'node:fs/promises';
+import { dirname, join, resolve } from 'node:path';
+import { isWorkspaceArtifactOutputPath, workspaceArtifactReceiptSchema } from '@playcraft/common/cloud-workspace/runtime';
+import { artifactDirectory, artifactFormat, relativeArtifactPath, snapshotArtifactBundle } from './artifact-files.js';
+import { excludeFromGit } from './dependencies.js';
+export const ARTIFACT_RECEIPTS_DIRECTORY = '.playcraft/artifact-receipts';
+export const artifactReceiptSchema = workspaceArtifactReceiptSchema;
+async function generatedWorkspace(cwd) {
+    for (let root = resolve(cwd);; root = dirname(root)) {
+        const file = join(root, '.playcraft/workspace-context.json');
+        try {
+            const handle = await open(file, constants.O_RDONLY | constants.O_NOFOLLOW);
+            try {
+                if ((await handle.stat()).size > 8192)
+                    throw new Error('invalid_workspace_context');
+                const value = JSON.parse(await handle.readFile('utf8'));
+                if (value.schemaVersion !== 'playcraft.workspace-context.v1' || typeof value.workspaceId !== 'string')
+                    throw new Error('invalid_workspace_context');
+                return { root, workspaceId: value.workspaceId };
+            }
+            finally {
+                await handle.close();
+            }
+        }
+        catch (error) {
+            if (error.code !== 'ENOENT')
+                throw error;
+        }
+        if (dirname(root) === root)
+            return undefined;
+    }
+}
+/** Preserve final outputs before another command overwrites them; intermediate project assets are not registered. */
+export async function captureGeneratedArtifact(output, tool, metadata = {}, cwd = process.cwd()) {
+    const context = await generatedWorkspace(cwd);
+    if (!context)
+        return;
+    const absolute = resolve(cwd, output);
+    let path;
+    try {
+        path = relativeArtifactPath(context.root, absolute);
+    }
+    catch {
+        return;
+    }
+    if (!isWorkspaceArtifactOutputPath(path) || !artifactFormat(path))
+        return;
+    const receipts = await artifactDirectory(context.root, ARTIFACT_RECEIPTS_DIRECTORY);
+    const objects = await artifactDirectory(context.root, `${ARTIFACT_RECEIPTS_DIRECTORY}/objects`);
+    const thumbnailPath = metadata.thumbnailPath ? relativeArtifactPath(context.root, resolve(cwd, metadata.thumbnailPath)) : undefined;
+    const files = await snapshotArtifactBundle(context.root, path, objects, thumbnailPath);
+    const receipt = artifactReceiptSchema.parse({
+        id: randomUUID(), workspaceId: context.workspaceId, path,
+        source: { kind: 'generated', tool, generatedAt: new Date().toISOString() }, files,
+        ...(metadata.width ? { width: metadata.width } : {}), ...(metadata.height ? { height: metadata.height } : {}),
+        ...(metadata.duration !== undefined ? { duration: metadata.duration } : {}),
+    });
+    const temporary = join(receipts, `${receipt.id}.tmp`);
+    const handle = await open(temporary, constants.O_WRONLY | constants.O_CREAT | constants.O_EXCL | constants.O_NOFOLLOW, 0o600);
+    try {
+        await handle.writeFile(`${JSON.stringify(receipt)}\n`);
+        await handle.sync();
+        await handle.close();
+        await rename(temporary, join(receipts, `${receipt.id}.json`));
+        // The workspace checkpoint retains these receipts; they are not source files or exported assets.
+        await excludeFromGit(context.root, `/${ARTIFACT_RECEIPTS_DIRECTORY}/`);
+    }
+    finally {
+        await handle.close();
+        await unlink(temporary).catch(error => { if (error.code !== 'ENOENT')
+            throw error; });
+    }
+}
+export async function readArtifactReceipt(path) {
+    if (!(await lstat(path)).isFile())
+        throw new Error('invalid_artifact_receipt');
+    const handle = await open(path, constants.O_RDONLY | constants.O_NOFOLLOW);
+    try {
+        const stat = await handle.stat();
+        if (!stat.isFile() || stat.nlink !== 1 || stat.size > 1024 * 1024)
+            throw new Error('invalid_artifact_receipt');
+        return artifactReceiptSchema.parse(JSON.parse(await handle.readFile('utf8')));
+    }
+    finally {
+        await handle.close();
+    }
+}