@playcraft/common 0.0.56 → 0.0.58

package/dist/cloud-workspace/runtime/checkpoints.d.ts

@@ -0,0 +1,60 @@
+import { z } from 'zod';
+export declare const SESSION_RECOVERABILITY: readonly ["native", "history_only"];
+export type SessionRecoverability = (typeof SESSION_RECOVERABILITY)[number];
+export declare const sessionRecoverabilitySchema: z.ZodEnum<{
+    native: "native";
+    history_only: "history_only";
+}>;
+export declare const CHECKPOINT_KINDS: readonly ["coordinated", "file", "best_effort"];
+export type CheckpointKind = (typeof CHECKPOINT_KINDS)[number];
+export declare const checkpointKindSchema: z.ZodEnum<{
+    file: "file";
+    coordinated: "coordinated";
+    best_effort: "best_effort";
+}>;
+export declare const checkpointSessionSchema: z.ZodObject<{
+    sessionId: z.ZodString;
+    nativeThreadId: z.ZodOptional<z.ZodString>;
+    nativeDurableTurnId: z.ZodOptional<z.ZodString>;
+    recoverability: z.ZodEnum<{
+        native: "native";
+        history_only: "history_only";
+    }>;
+}, z.core.$strict>;
+export type CheckpointSession = z.infer<typeof checkpointSessionSchema>;
+export declare const checkpointRecordSchema: z.ZodObject<{
+    checkpointId: z.ZodString;
+    kind: z.ZodEnum<{
+        file: "file";
+        coordinated: "coordinated";
+        best_effort: "best_effort";
+    }>;
+    workspaceId: z.ZodString;
+    generation: z.ZodNumber;
+    runtimeEpoch: z.ZodNumber;
+    sessions: z.ZodArray<z.ZodObject<{
+        sessionId: z.ZodString;
+        nativeThreadId: z.ZodOptional<z.ZodString>;
+        nativeDurableTurnId: z.ZodOptional<z.ZodString>;
+        recoverability: z.ZodEnum<{
+            native: "native";
+            history_only: "history_only";
+        }>;
+    }, z.core.$strict>>;
+    files: z.ZodOptional<z.ZodArray<z.ZodObject<{
+        path: z.ZodString;
+        contentHash: z.ZodString;
+        revision: z.ZodNumber;
+    }, z.core.$strict>>>;
+    createdAt: z.ZodString;
+    nativeRecoverable: z.ZodBoolean;
+    consistent: z.ZodOptional<z.ZodBoolean>;
+    manifestKey: z.ZodOptional<z.ZodString>;
+    checksum: z.ZodOptional<z.ZodString>;
+    snapshotStatus: z.ZodOptional<z.ZodEnum<{
+        complete: "complete";
+        incomplete: "incomplete";
+    }>>;
+}, z.core.$strict>;
+export type CheckpointRecord = z.infer<typeof checkpointRecordSchema>;
+//# sourceMappingURL=checkpoints.d.ts.map

package/dist/cloud-workspace/runtime/checkpoints.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"checkpoints.d.ts","sourceRoot":"","sources":["../../../src/cloud-workspace/runtime/checkpoints.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAIxB,eAAO,MAAM,sBAAsB,qCAAsC,CAAC;AAC1E,MAAM,MAAM,qBAAqB,GAAG,CAAC,OAAO,sBAAsB,CAAC,CAAC,MAAM,CAAC,CAAC;AAC5E,eAAO,MAAM,2BAA2B;;;EAAiC,CAAC;AAE1E,eAAO,MAAM,gBAAgB,iDAAkD,CAAC;AAChF,MAAM,MAAM,cAAc,GAAG,CAAC,OAAO,gBAAgB,CAAC,CAAC,MAAM,CAAC,CAAC;AAC/D,eAAO,MAAM,oBAAoB;;;;EAA2B,CAAC;AAE7D,eAAO,MAAM,uBAAuB;;;;;;;;kBAOzB,CAAC;AAEZ,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC;AAExE,eAAO,MAAM,sBAAsB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBAgBxB,CAAC;AAEZ,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC"}

package/dist/cloud-workspace/runtime/checkpoints.js

@@ -0,0 +1,33 @@
+import { z } from 'zod';
+import { checkpointFileSchema } from './files.js';
+import { generationSchema, runtimeEpochSchema } from './generations.js';
+export const SESSION_RECOVERABILITY = ['native', 'history_only'];
+export const sessionRecoverabilitySchema = z.enum(SESSION_RECOVERABILITY);
+export const CHECKPOINT_KINDS = ['coordinated', 'file', 'best_effort'];
+export const checkpointKindSchema = z.enum(CHECKPOINT_KINDS);
+export const checkpointSessionSchema = z
+    .object({
+    sessionId: z.string().min(1).max(128),
+    nativeThreadId: z.string().min(1).max(128).optional(),
+    nativeDurableTurnId: z.string().min(1).max(128).optional(),
+    recoverability: sessionRecoverabilitySchema,
+})
+    .strict();
+export const checkpointRecordSchema = z
+    .object({
+    checkpointId: z.string().min(1).max(128),
+    kind: checkpointKindSchema,
+    workspaceId: z.string().min(1).max(128),
+    generation: generationSchema,
+    runtimeEpoch: runtimeEpochSchema,
+    sessions: z.array(checkpointSessionSchema),
+    files: z.array(checkpointFileSchema).optional(),
+    createdAt: z.string().min(1),
+    nativeRecoverable: z.boolean(),
+    consistent: z.boolean().optional(),
+    manifestKey: z.string().min(1).max(512).optional(),
+    checksum: z.string().length(64).optional(),
+    snapshotStatus: z.enum(['complete', 'incomplete']).optional(),
+})
+    .strict();
+//# sourceMappingURL=checkpoints.js.map

package/dist/cloud-workspace/runtime/checkpoints.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"checkpoints.js","sourceRoot":"","sources":["../../../src/cloud-workspace/runtime/checkpoints.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAC;AAClD,OAAO,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AAExE,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,QAAQ,EAAE,cAAc,CAAU,CAAC;AAE1E,MAAM,CAAC,MAAM,2BAA2B,GAAG,CAAC,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;AAE1E,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,aAAa,EAAE,MAAM,EAAE,aAAa,CAAU,CAAC;AAEhF,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;AAE7D,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC;KACrC,MAAM,CAAC;IACN,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IACrC,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;IACrD,mBAAmB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;IAC1D,cAAc,EAAE,2BAA2B;CAC5C,CAAC;KACD,MAAM,EAAE,CAAC;AAIZ,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC;KACpC,MAAM,CAAC;IACN,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IACxC,IAAI,EAAE,oBAAoB;IAC1B,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IACvC,UAAU,EAAE,gBAAgB;IAC5B,YAAY,EAAE,kBAAkB;IAChC,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,uBAAuB,CAAC;IAC1C,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC,QAAQ,EAAE;IAC/C,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC5B,iBAAiB,EAAE,CAAC,CAAC,OAAO,EAAE;IAC9B,UAAU,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IAClC,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;IAClD,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE;IAC1C,cAAc,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC,CAAC,QAAQ,EAAE;CAC9D,CAAC;KACD,MAAM,EAAE,CAAC"}

package/dist/cloud-workspace/runtime/config.d.ts

@@ -0,0 +1,42 @@
+import { z } from 'zod';
+export declare const sandboxListenSchema: z.ZodObject<{
+    host: z.ZodEnum<{
+        "127.0.0.1": "127.0.0.1";
+        "::1": "::1";
+    }>;
+    port: z.ZodDefault<z.ZodNumber>;
+}, z.core.$strict>;
+export declare const sandboxRuntimeConfigSchema: z.ZodObject<{
+    protocolMajor: z.ZodNumber;
+    protocolMinor: z.ZodNumber;
+    environment: z.ZodString;
+    runtimeId: z.ZodString;
+    userId: z.ZodString;
+    generation: z.ZodNumber;
+    runtimeEpoch: z.ZodNumber;
+    workspaceRoot: z.ZodString;
+    workspaceMode: z.ZodDefault<z.ZodEnum<{
+        single: "single";
+        multi: "multi";
+    }>>;
+    callbackUrl: z.ZodString;
+    modelProxyUrl: z.ZodString;
+    controlToken: z.ZodString;
+    cliVersion: z.ZodString;
+    codexVersion: z.ZodOptional<z.ZodString>;
+    imageDigest: z.ZodOptional<z.ZodString>;
+    stateDir: z.ZodString;
+    listen: z.ZodDefault<z.ZodObject<{
+        host: z.ZodEnum<{
+            "127.0.0.1": "127.0.0.1";
+            "::1": "::1";
+        }>;
+        port: z.ZodDefault<z.ZodNumber>;
+    }, z.core.$strict>>;
+    gitGatewayOrigins: z.ZodDefault<z.ZodArray<z.ZodString>>;
+    gitCredentialDirectory: z.ZodOptional<z.ZodString>;
+    fileObjectStoreUrl: z.ZodOptional<z.ZodString>;
+}, z.core.$strict>;
+export type SandboxRuntimeConfig = z.infer<typeof sandboxRuntimeConfigSchema>;
+export declare function parseSandboxRuntimeConfig(input: unknown): SandboxRuntimeConfig;
+//# sourceMappingURL=config.d.ts.map

package/dist/cloud-workspace/runtime/config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../../src/cloud-workspace/runtime/config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAKxB,eAAO,MAAM,mBAAmB;;;;;;kBAKrB,CAAC;AAEZ,eAAO,MAAM,0BAA0B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBAwEnC,CAAC;AAEL,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,0BAA0B,CAAC,CAAC;AAE9E,wBAAgB,yBAAyB,CAAC,KAAK,EAAE,OAAO,GAAG,oBAAoB,CAE9E"}

package/dist/cloud-workspace/runtime/config.js

@@ -0,0 +1,89 @@
+import { z } from 'zod';
+import { protocolVersionSchema } from './protocol.js';
+import { generationSchema, runtimeEpochSchema } from './generations.js';
+import { parseWorkspaceGitGatewayOrigin } from './workspace-binding.js';
+export const sandboxListenSchema = z
+    .object({
+    host: z.enum(['127.0.0.1', '::1']),
+    port: z.number().int().min(0).max(65535).default(8787),
+})
+    .strict();
+export const sandboxRuntimeConfigSchema = protocolVersionSchema
+    .safeExtend({
+    environment: z.string().trim().min(1).max(64),
+    runtimeId: z.string().trim().min(1).max(128),
+    userId: z.string().trim().min(1).max(128),
+    generation: generationSchema,
+    runtimeEpoch: runtimeEpochSchema,
+    workspaceRoot: z.string().trim().min(1),
+    workspaceMode: z.enum(['single', 'multi']).default('single'),
+    callbackUrl: z.string().url(),
+    modelProxyUrl: z.string().url(),
+    controlToken: z.string().min(16).max(512),
+    cliVersion: z.string().trim().min(1).max(64),
+    codexVersion: z.string().trim().min(1).max(64).optional(),
+    imageDigest: z.string().trim().min(1).max(128).optional(),
+    stateDir: z.string().trim().min(1),
+    listen: sandboxListenSchema.default({ host: '127.0.0.1', port: 8787 }),
+    gitGatewayOrigins: z.array(z.string().trim().min(1).max(256)).max(8).default([]),
+    gitCredentialDirectory: z.string().trim().min(1).max(4096).optional(),
+    fileObjectStoreUrl: z.string().url().optional(),
+})
+    .strict()
+    .superRefine((value, context) => {
+    if (!value.workspaceRoot.startsWith('/') || value.workspaceRoot.includes('\0')) {
+        context.addIssue({
+            code: z.ZodIssueCode.custom,
+            message: 'workspaceRoot must be an absolute path',
+            path: ['workspaceRoot'],
+        });
+    }
+    if (!value.stateDir.startsWith('/') || value.stateDir.includes('\0')) {
+        context.addIssue({
+            code: z.ZodIssueCode.custom,
+            message: 'stateDir must be an absolute path',
+            path: ['stateDir'],
+        });
+    }
+    if (value.gitCredentialDirectory &&
+        (!value.gitCredentialDirectory.startsWith('/') ||
+            value.gitCredentialDirectory.includes('\0') ||
+            value.gitCredentialDirectory.includes('\n'))) {
+        context.addIssue({
+            code: z.ZodIssueCode.custom,
+            message: 'gitCredentialDirectory must be an absolute path',
+            path: ['gitCredentialDirectory'],
+        });
+    }
+    if (value.fileObjectStoreUrl) {
+        try {
+            const parsed = new URL(value.fileObjectStoreUrl);
+            if (parsed.protocol !== 'http:' && parsed.protocol !== 'https:')
+                throw new Error();
+        }
+        catch {
+            context.addIssue({
+                code: z.ZodIssueCode.custom,
+                message: 'fileObjectStoreUrl must be an http(s) object endpoint',
+                path: ['fileObjectStoreUrl'],
+            });
+        }
+    }
+    for (const origin of value.gitGatewayOrigins) {
+        try {
+            if (parseWorkspaceGitGatewayOrigin(origin) !== origin)
+                throw new Error();
+        }
+        catch {
+            context.addIssue({
+                code: z.ZodIssueCode.custom,
+                message: 'gitGatewayOrigins must be fixed gateway origins',
+                path: ['gitGatewayOrigins'],
+            });
+        }
+    }
+});
+export function parseSandboxRuntimeConfig(input) {
+    return sandboxRuntimeConfigSchema.parse(input);
+}
+//# sourceMappingURL=config.js.map

package/dist/cloud-workspace/runtime/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../../../src/cloud-workspace/runtime/config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,qBAAqB,EAAE,MAAM,eAAe,CAAC;AACtD,OAAO,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AACxE,OAAO,EAAE,8BAA8B,EAAE,MAAM,wBAAwB,CAAC;AAExE,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC;KACjC,MAAM,CAAC;IACN,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC;IAClC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC;CACvD,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,MAAM,CAAC,MAAM,0BAA0B,GAAG,qBAAqB;KAC5D,UAAU,CAAC;IACV,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;IAC7C,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IAC5C,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IACzC,UAAU,EAAE,gBAAgB;IAC5B,YAAY,EAAE,kBAAkB;IAChC,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACvC,aAAa,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC;IAC5D,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE;IAC7B,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE;IAC/B,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IACzC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;IAC5C,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE;IACzD,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;IACzD,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAClC,MAAM,EAAE,mBAAmB,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IACtE,iBAAiB,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IAChF,sBAAsB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE;IACrE,kBAAkB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;CAChD,CAAC;KACD,MAAM,EAAE;KACR,WAAW,CAAC,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE;IAC9B,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,aAAa,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QAC/E,OAAO,CAAC,QAAQ,CAAC;YACf,IAAI,EAAE,CAAC,CAAC,YAAY,CAAC,MAAM;YAC3B,OAAO,EAAE,wCAAwC;YACjD,IAAI,EAAE,CAAC,eAAe,CAAC;SACxB,CAAC,CAAC;IACL,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACrE,OAAO,CAAC,QAAQ,CAAC;YACf,IAAI,EAAE,CAAC,CAAC,YAAY,CAAC,MAAM;YAC3B,OAAO,EAAE,mCAAmC;YAC5C,IAAI,EAAE,CAAC,UAAU,CAAC;SACnB,CAAC,CAAC;IACL,CAAC;IACD,IACE,KAAK,CAAC,sBAAsB;QAC5B,CAAC,CAAC,KAAK,CAAC,sBAAsB,CAAC,UAAU,CAAC,GAAG,CAAC;YAC5C,KAAK,CAAC,sBAAsB,CAAC,QAAQ,CAAC,IAAI,CAAC;YAC3C,KAAK,CAAC,sBAAsB,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,EAC9C,CAAC;QACD,OAAO,CAAC,QAAQ,CAAC;YACf,IAAI,EAAE,CAAC,CAAC,YAAY,CAAC,MAAM;YAC3B,OAAO,EAAE,iDAAiD;YAC1D,IAAI,EAAE,CAAC,wBAAwB,CAAC;SACjC,CAAC,CAAC;IACL,CAAC;IACD,IAAI,KAAK,CAAC,kBAAkB,EAAE,CAAC;QAC7B,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC;YACjD,IAAI,MAAM,CAAC,QAAQ,KAAK,OAAO,IAAI,MAAM,CAAC,QAAQ,KAAK,QAAQ;gBAAE,MAAM,IAAI,KAAK,EAAE,CAAC;QACrF,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,CAAC,QAAQ,CAAC;gBACf,IAAI,EAAE,CAAC,CAAC,YAAY,CAAC,MAAM;gBAC3B,OAAO,EAAE,uDAAuD;gBAChE,IAAI,EAAE,CAAC,oBAAoB,CAAC;aAC7B,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,KAAK,MAAM,MAAM,IAAI,KAAK,CAAC,iBAAiB,EAAE,CAAC;QAC7C,IAAI,CAAC;YACH,IAAI,8BAA8B,CAAC,MAAM,CAAC,KAAK,MAAM;gBAAE,MAAM,IAAI,KAAK,EAAE,CAAC;QAC3E,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,CAAC,QAAQ,CAAC;gBACf,IAAI,EAAE,CAAC,CAAC,YAAY,CAAC,MAAM;gBAC3B,OAAO,EAAE,iDAAiD;gBAC1D,IAAI,EAAE,CAAC,mBAAmB,CAAC;aAC5B,CAAC,CAAC;QACL,CAAC;IACH,CAAC;AACH,CAAC,CAAC,CAAC;AAIL,MAAM,UAAU,yBAAyB,CAAC,KAAc;IACtD,OAAO,0BAA0B,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;AACjD,CAAC"}

package/dist/cloud-workspace/runtime/errors.d.ts

@@ -0,0 +1,26 @@
+import { z } from 'zod';
+export declare const RUNTIME_ERROR_CODES: readonly ["protocol_incompatible", "unauthenticated", "untrusted_runtime_field", "idempotency_conflict", "uncertain_operation", "generation_mismatch", "stale_lease", "capability_unavailable", "identity_unavailable", "duplicate_instance", "invalid_config"];
+export type RuntimeErrorCode = (typeof RUNTIME_ERROR_CODES)[number];
+export declare const runtimeErrorSchema: z.ZodObject<{
+    code: z.ZodEnum<{
+        generation_mismatch: "generation_mismatch";
+        stale_lease: "stale_lease";
+        protocol_incompatible: "protocol_incompatible";
+        unauthenticated: "unauthenticated";
+        untrusted_runtime_field: "untrusted_runtime_field";
+        idempotency_conflict: "idempotency_conflict";
+        uncertain_operation: "uncertain_operation";
+        capability_unavailable: "capability_unavailable";
+        identity_unavailable: "identity_unavailable";
+        duplicate_instance: "duplicate_instance";
+        invalid_config: "invalid_config";
+    }>;
+    reason: z.ZodString;
+    operationId: z.ZodOptional<z.ZodString>;
+    currentRevision: z.ZodOptional<z.ZodNumber>;
+    retryAfterMs: z.ZodOptional<z.ZodNumber>;
+}, z.core.$strict>;
+export type RuntimeError = z.infer<typeof runtimeErrorSchema>;
+export declare function runtimeError(code: RuntimeErrorCode, reason: string, extra?: Omit<RuntimeError, 'code' | 'reason'>): RuntimeError;
+export declare const HTTP_STATUS_BY_ERROR: Record<RuntimeErrorCode, number>;
+//# sourceMappingURL=errors.d.ts.map

package/dist/cloud-workspace/runtime/errors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../../../src/cloud-workspace/runtime/errors.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,eAAO,MAAM,mBAAmB,iQAYtB,CAAC;AAEX,MAAM,MAAM,gBAAgB,GAAG,CAAC,OAAO,mBAAmB,CAAC,CAAC,MAAM,CAAC,CAAC;AAEpE,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;;;;;;kBAQpB,CAAC;AAEZ,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAE9D,wBAAgB,YAAY,CAC1B,IAAI,EAAE,gBAAgB,EACtB,MAAM,EAAE,MAAM,EACd,KAAK,GAAE,IAAI,CAAC,YAAY,EAAE,MAAM,GAAG,QAAQ,CAAM,GAChD,YAAY,CAEd;AAED,eAAO,MAAM,oBAAoB,EAAE,MAAM,CAAC,gBAAgB,EAAE,MAAM,CAYjE,CAAC"}

package/dist/cloud-workspace/runtime/errors.js

@@ -0,0 +1,40 @@
+import { z } from 'zod';
+export const RUNTIME_ERROR_CODES = [
+    'protocol_incompatible',
+    'unauthenticated',
+    'untrusted_runtime_field',
+    'idempotency_conflict',
+    'uncertain_operation',
+    'generation_mismatch',
+    'stale_lease',
+    'capability_unavailable',
+    'identity_unavailable',
+    'duplicate_instance',
+    'invalid_config',
+];
+export const runtimeErrorSchema = z
+    .object({
+    code: z.enum(RUNTIME_ERROR_CODES),
+    reason: z.string().min(1).max(256),
+    operationId: z.string().min(1).max(128).optional(),
+    currentRevision: z.number().int().nonnegative().optional(),
+    retryAfterMs: z.number().int().nonnegative().optional(),
+})
+    .strict();
+export function runtimeError(code, reason, extra = {}) {
+    return runtimeErrorSchema.parse({ code, reason, ...extra });
+}
+export const HTTP_STATUS_BY_ERROR = {
+    protocol_incompatible: 409,
+    unauthenticated: 401,
+    untrusted_runtime_field: 400,
+    idempotency_conflict: 409,
+    uncertain_operation: 409,
+    generation_mismatch: 409,
+    stale_lease: 409,
+    capability_unavailable: 409,
+    identity_unavailable: 503,
+    duplicate_instance: 409,
+    invalid_config: 500,
+};
+//# sourceMappingURL=errors.js.map

package/dist/cloud-workspace/runtime/errors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../../../src/cloud-workspace/runtime/errors.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,MAAM,CAAC,MAAM,mBAAmB,GAAG;IACjC,uBAAuB;IACvB,iBAAiB;IACjB,yBAAyB;IACzB,sBAAsB;IACtB,qBAAqB;IACrB,qBAAqB;IACrB,aAAa;IACb,wBAAwB;IACxB,sBAAsB;IACtB,oBAAoB;IACpB,gBAAgB;CACR,CAAC;AAIX,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC;KAChC,MAAM,CAAC;IACN,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC;IACjC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IAClC,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;IAClD,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE;IAC1D,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE;CACxD,CAAC;KACD,MAAM,EAAE,CAAC;AAIZ,MAAM,UAAU,YAAY,CAC1B,IAAsB,EACtB,MAAc,EACd,QAA+C,EAAE;IAEjD,OAAO,kBAAkB,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,KAAK,EAAE,CAAC,CAAC;AAC9D,CAAC;AAED,MAAM,CAAC,MAAM,oBAAoB,GAAqC;IACpE,qBAAqB,EAAE,GAAG;IAC1B,eAAe,EAAE,GAAG;IACpB,uBAAuB,EAAE,GAAG;IAC5B,oBAAoB,EAAE,GAAG;IACzB,mBAAmB,EAAE,GAAG;IACxB,mBAAmB,EAAE,GAAG;IACxB,WAAW,EAAE,GAAG;IAChB,sBAAsB,EAAE,GAAG;IAC3B,oBAAoB,EAAE,GAAG;IACzB,kBAAkB,EAAE,GAAG;IACvB,cAAc,EAAE,GAAG;CACpB,CAAC"}

package/dist/cloud-workspace/runtime/events.d.ts

@@ -0,0 +1,107 @@
+import { z } from 'zod';
+export declare const EVENT_STREAM_KINDS: readonly ["session", "workspace", "runtime"];
+export type EventStreamKind = (typeof EVENT_STREAM_KINDS)[number];
+export declare const eventStreamKindSchema: z.ZodEnum<{
+    session: "session";
+    runtime: "runtime";
+    workspace: "workspace";
+}>;
+export declare const sourceEventIdSchema: z.ZodObject<{
+    runtimeId: z.ZodString;
+    generation: z.ZodNumber;
+    runtimeEpoch: z.ZodNumber;
+    sourceSequence: z.ZodNumber;
+}, z.core.$strict>;
+export type SourceEventId = z.infer<typeof sourceEventIdSchema>;
+export declare const publicEventCursorSchema: z.ZodObject<{
+    streamKind: z.ZodEnum<{
+        session: "session";
+        runtime: "runtime";
+        workspace: "workspace";
+    }>;
+    streamId: z.ZodString;
+    sequence: z.ZodNumber;
+}, z.core.$strict>;
+export type PublicEventCursor = z.infer<typeof publicEventCursorSchema>;
+export declare const pendingSourceEventSchema: z.ZodObject<{
+    source: z.ZodObject<{
+        runtimeId: z.ZodString;
+        generation: z.ZodNumber;
+        runtimeEpoch: z.ZodNumber;
+        sourceSequence: z.ZodNumber;
+    }, z.core.$strict>;
+    payloadHash: z.ZodString;
+    type: z.ZodString;
+    payload: z.ZodUnknown;
+    occurredAt: z.ZodString;
+}, z.core.$strict>;
+export type PendingSourceEvent = z.infer<typeof pendingSourceEventSchema>;
+export declare const sourceEventReceiptSchema: z.ZodObject<{
+    source: z.ZodObject<{
+        runtimeId: z.ZodString;
+        generation: z.ZodNumber;
+        runtimeEpoch: z.ZodNumber;
+        sourceSequence: z.ZodNumber;
+    }, z.core.$strict>;
+    payloadHash: z.ZodString;
+    publicCursor: z.ZodObject<{
+        streamKind: z.ZodEnum<{
+            session: "session";
+            runtime: "runtime";
+            workspace: "workspace";
+        }>;
+        streamId: z.ZodString;
+        sequence: z.ZodNumber;
+    }, z.core.$strict>;
+}, z.core.$strict>;
+export type SourceEventReceipt = z.infer<typeof sourceEventReceiptSchema>;
+export declare function sourceEventKey(id: SourceEventId): string;
+export type EventDedupResult = {
+    action: 'accept';
+} | {
+    action: 'reuse';
+    receipt: SourceEventReceipt;
+} | {
+    action: 'reject';
+    code: 'source_payload_mismatch';
+};
+export declare function resolveSourceEvent(existing: SourceEventReceipt | undefined, payloadHash: string): EventDedupResult;
+export declare function nextSourceSequence(last: number): number;
+export declare const sourceEventBatchSchema: z.ZodObject<{
+    runtimeId: z.ZodString;
+    generation: z.ZodNumber;
+    runtimeEpoch: z.ZodNumber;
+    events: z.ZodArray<z.ZodObject<{
+        source: z.ZodObject<{
+            runtimeId: z.ZodString;
+            generation: z.ZodNumber;
+            runtimeEpoch: z.ZodNumber;
+            sourceSequence: z.ZodNumber;
+        }, z.core.$strict>;
+        payloadHash: z.ZodString;
+        type: z.ZodString;
+        payload: z.ZodUnknown;
+        occurredAt: z.ZodString;
+    }, z.core.$strict>>;
+}, z.core.$strict>;
+export type SourceEventBatch = z.infer<typeof sourceEventBatchSchema>;
+export declare const publicEventSchema: z.ZodObject<{
+    streamKind: z.ZodEnum<{
+        session: "session";
+        runtime: "runtime";
+        workspace: "workspace";
+    }>;
+    streamId: z.ZodString;
+    sequence: z.ZodNumber;
+    type: z.ZodString;
+    payload: z.ZodUnknown;
+    occurredAt: z.ZodString;
+    source: z.ZodOptional<z.ZodObject<{
+        runtimeId: z.ZodString;
+        generation: z.ZodNumber;
+        runtimeEpoch: z.ZodNumber;
+        sourceSequence: z.ZodNumber;
+    }, z.core.$strict>>;
+}, z.core.$strict>;
+export type PublicEvent = z.infer<typeof publicEventSchema>;
+//# sourceMappingURL=events.d.ts.map

package/dist/cloud-workspace/runtime/events.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"events.d.ts","sourceRoot":"","sources":["../../../src/cloud-workspace/runtime/events.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,eAAO,MAAM,kBAAkB,8CAA+C,CAAC;AAC/E,MAAM,MAAM,eAAe,GAAG,CAAC,OAAO,kBAAkB,CAAC,CAAC,MAAM,CAAC,CAAC;AAClE,eAAO,MAAM,qBAAqB;;;;EAA6B,CAAC;AAEhE,eAAO,MAAM,mBAAmB;;;;;kBAOrB,CAAC;AAEZ,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAEhE,eAAO,MAAM,uBAAuB;;;;;;;;kBAMzB,CAAC;AAEZ,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC;AAExE,eAAO,MAAM,wBAAwB;;;;;;;;;;;kBAQ1B,CAAC;AAEZ,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC;AAE1E,eAAO,MAAM,wBAAwB;;;;;;;;;;;;;;;;;kBAM1B,CAAC;AAEZ,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC;AAE1E,wBAAgB,cAAc,CAAC,EAAE,EAAE,aAAa,GAAG,MAAM,CAExD;AAED,MAAM,MAAM,gBAAgB,GACxB;IAAE,MAAM,EAAE,QAAQ,CAAA;CAAE,GACpB;IAAE,MAAM,EAAE,OAAO,CAAC;IAAC,OAAO,EAAE,kBAAkB,CAAA;CAAE,GAChD;IAAE,MAAM,EAAE,QAAQ,CAAC;IAAC,IAAI,EAAE,yBAAyB,CAAA;CAAE,CAAC;AAE1D,wBAAgB,kBAAkB,CAChC,QAAQ,EAAE,kBAAkB,GAAG,SAAS,EACxC,WAAW,EAAE,MAAM,GAClB,gBAAgB,CAIlB;AAED,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAKvD;AAED,eAAO,MAAM,sBAAsB;;;;;;;;;;;;;;;;kBAOxB,CAAC;AAEZ,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC;AAEtE,eAAO,MAAM,iBAAiB;;;;;;;;;;;;;;;;;kBAUnB,CAAC;AAEZ,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC"}

package/dist/cloud-workspace/runtime/events.js

@@ -0,0 +1,70 @@
+import { z } from 'zod';
+export const EVENT_STREAM_KINDS = ['session', 'workspace', 'runtime'];
+export const eventStreamKindSchema = z.enum(EVENT_STREAM_KINDS);
+export const sourceEventIdSchema = z
+    .object({
+    runtimeId: z.string().min(1).max(128),
+    generation: z.number().int().nonnegative(),
+    runtimeEpoch: z.number().int().nonnegative(),
+    sourceSequence: z.number().int().positive(),
+})
+    .strict();
+export const publicEventCursorSchema = z
+    .object({
+    streamKind: eventStreamKindSchema,
+    streamId: z.string().min(1).max(128),
+    sequence: z.number().int().nonnegative(),
+})
+    .strict();
+export const pendingSourceEventSchema = z
+    .object({
+    source: sourceEventIdSchema,
+    payloadHash: z.string().length(64),
+    type: z.string().min(1).max(128),
+    payload: z.unknown(),
+    occurredAt: z.string().min(1),
+})
+    .strict();
+export const sourceEventReceiptSchema = z
+    .object({
+    source: sourceEventIdSchema,
+    payloadHash: z.string().length(64),
+    publicCursor: publicEventCursorSchema,
+})
+    .strict();
+export function sourceEventKey(id) {
+    return `${id.runtimeId}:${id.generation}:${id.runtimeEpoch}:${id.sourceSequence}`;
+}
+export function resolveSourceEvent(existing, payloadHash) {
+    if (!existing)
+        return { action: 'accept' };
+    if (existing.payloadHash === payloadHash)
+        return { action: 'reuse', receipt: existing };
+    return { action: 'reject', code: 'source_payload_mismatch' };
+}
+export function nextSourceSequence(last) {
+    if (!Number.isInteger(last) || last < 0) {
+        throw new Error('invalid_source_sequence');
+    }
+    return last + 1;
+}
+export const sourceEventBatchSchema = z
+    .object({
+    runtimeId: z.string().min(1).max(128),
+    generation: z.number().int().nonnegative(),
+    runtimeEpoch: z.number().int().nonnegative(),
+    events: z.array(pendingSourceEventSchema).min(1).max(100),
+})
+    .strict();
+export const publicEventSchema = z
+    .object({
+    streamKind: eventStreamKindSchema,
+    streamId: z.string().min(1).max(128),
+    sequence: z.number().int().positive(),
+    type: z.string().min(1).max(128),
+    payload: z.unknown(),
+    occurredAt: z.string().min(1),
+    source: sourceEventIdSchema.optional(),
+})
+    .strict();
+//# sourceMappingURL=events.js.map

package/dist/cloud-workspace/runtime/events.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"events.js","sourceRoot":"","sources":["../../../src/cloud-workspace/runtime/events.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,SAAS,EAAE,WAAW,EAAE,SAAS,CAAU,CAAC;AAE/E,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;AAEhE,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC;KACjC,MAAM,CAAC;IACN,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IACrC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;IAC1C,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;IAC5C,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;CAC5C,CAAC;KACD,MAAM,EAAE,CAAC;AAIZ,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC;KACrC,MAAM,CAAC;IACN,UAAU,EAAE,qBAAqB;IACjC,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IACpC,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;CACzC,CAAC;KACD,MAAM,EAAE,CAAC;AAIZ,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC;KACtC,MAAM,CAAC;IACN,MAAM,EAAE,mBAAmB;IAC3B,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC;IAClC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IAChC,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE;IACpB,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;CAC9B,CAAC;KACD,MAAM,EAAE,CAAC;AAIZ,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC;KACtC,MAAM,CAAC;IACN,MAAM,EAAE,mBAAmB;IAC3B,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC;IAClC,YAAY,EAAE,uBAAuB;CACtC,CAAC;KACD,MAAM,EAAE,CAAC;AAIZ,MAAM,UAAU,cAAc,CAAC,EAAiB;IAC9C,OAAO,GAAG,EAAE,CAAC,SAAS,IAAI,EAAE,CAAC,UAAU,IAAI,EAAE,CAAC,YAAY,IAAI,EAAE,CAAC,cAAc,EAAE,CAAC;AACpF,CAAC;AAOD,MAAM,UAAU,kBAAkB,CAChC,QAAwC,EACxC,WAAmB;IAEnB,IAAI,CAAC,QAAQ;QAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;IAC3C,IAAI,QAAQ,CAAC,WAAW,KAAK,WAAW;QAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC;IACxF,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,yBAAyB,EAAE,CAAC;AAC/D,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,IAAY;IAC7C,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,IAAI,GAAG,CAAC,EAAE,CAAC;QACxC,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;IAC7C,CAAC;IACD,OAAO,IAAI,GAAG,CAAC,CAAC;AAClB,CAAC;AAED,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC;KACpC,MAAM,CAAC;IACN,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IACrC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;IAC1C,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;IAC5C,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,wBAAwB,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;CAC1D,CAAC;KACD,MAAM,EAAE,CAAC;AAIZ,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC;KAC/B,MAAM,CAAC;IACN,UAAU,EAAE,qBAAqB;IACjC,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IACpC,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IACrC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IAChC,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE;IACpB,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC7B,MAAM,EAAE,mBAAmB,CAAC,QAAQ,EAAE;CACvC,CAAC;KACD,MAAM,EAAE,CAAC"}

package/dist/cloud-workspace/runtime/execution-grant.d.ts

@@ -0,0 +1,36 @@
+import { z } from 'zod';
+export declare const WORKSPACE_EXECUTION_KIND: "workspace-execution";
+export declare const WORKSPACE_EXECUTION_AUDIENCE: "playcraft-runtime";
+export declare const workspaceExecutionGrantClaimsSchema: z.ZodObject<{
+    kind: z.ZodLiteral<"workspace-execution">;
+    credentialType: z.ZodLiteral<"workspace-execution">;
+    environment: z.ZodString;
+    userId: z.ZodString;
+    workspaceId: z.ZodString;
+    runtimeId: z.ZodString;
+    generation: z.ZodNumber;
+    runtimeEpoch: z.ZodNumber;
+    grantId: z.ZodString;
+    aud: z.ZodLiteral<"playcraft-runtime">;
+}, z.core.$strict>;
+export type WorkspaceExecutionGrantClaims = z.infer<typeof workspaceExecutionGrantClaimsSchema>;
+/** Persisted grant metadata. The JWT itself is never part of this record. */
+export declare const workspaceExecutionGrantRecordSchema: z.ZodObject<{
+    grantId: z.ZodString;
+    environment: z.ZodString;
+    userId: z.ZodString;
+    workspaceId: z.ZodString;
+    runtimeId: z.ZodString;
+    generation: z.ZodNumber;
+    runtimeEpoch: z.ZodNumber;
+    expiresAt: z.ZodString;
+    revokedAt: z.ZodOptional<z.ZodString>;
+}, z.core.$strict>;
+export type WorkspaceExecutionGrantRecord = z.infer<typeof workspaceExecutionGrantRecordSchema>;
+export declare const GRANT_CLIENT_FORBIDDEN_FIELDS: readonly ["token", "grantId", "kind", "credentialType", "aud", "expiresAt", "revokedAt", "runtimeId", "generation", "runtimeEpoch", "leaseFence", "rootPath", "workspaceRoot", "binding", "repositoryUrl", "branchName", "preparation", "gitAccess", "parentGrantId", "authzRevision", "scope", "modelConfigIds"];
+export declare function findForbiddenGrantFields(input: unknown): string[];
+export declare function parseWorkspaceExecutionGrantClaims(input: unknown): WorkspaceExecutionGrantClaims;
+export declare function newGrantId(): string;
+export declare function mintWorkspaceExecutionGrant(claims: WorkspaceExecutionGrantClaims, secret: string, expiresIn?: string | number): Promise<string>;
+export declare function verifyWorkspaceExecutionGrant(token: string, secret: string): Promise<WorkspaceExecutionGrantClaims>;
+//# sourceMappingURL=execution-grant.d.ts.map

package/dist/cloud-workspace/runtime/execution-grant.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"execution-grant.d.ts","sourceRoot":"","sources":["../../../src/cloud-workspace/runtime/execution-grant.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,eAAO,MAAM,wBAAwB,EAAG,qBAA8B,CAAC;AACvE,eAAO,MAAM,4BAA4B,EAAG,mBAA4B,CAAC;AAIzE,eAAO,MAAM,mCAAmC;;;;;;;;;;;kBAarC,CAAC;AAEZ,MAAM,MAAM,6BAA6B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mCAAmC,CAAC,CAAC;AAEhG,6EAA6E;AAC7E,eAAO,MAAM,mCAAmC;;;;;;;;;;kBAYrC,CAAC;AAEZ,MAAM,MAAM,6BAA6B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mCAAmC,CAAC,CAAC;AAEhG,eAAO,MAAM,6BAA6B,mTAuBhC,CAAC;AAEX,wBAAgB,wBAAwB,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,EAAE,CAGjE;AAED,wBAAgB,kCAAkC,CAAC,KAAK,EAAE,OAAO,GAAG,6BAA6B,CAEhG;AAED,wBAAgB,UAAU,IAAI,MAAM,CAEnC;AAED,wBAAsB,2BAA2B,CAC/C,MAAM,EAAE,6BAA6B,EACrC,MAAM,EAAE,MAAM,EACd,SAAS,GAAE,MAAM,GAAG,MAAa,GAChC,OAAO,CAAC,MAAM,CAAC,CASjB;AAED,wBAAsB,6BAA6B,CACjD,KAAK,EAAE,MAAM,EACb,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,6BAA6B,CAAC,CAkBxC"}