@playcraft/common 0.0.56 → 0.0.58

package/dist/cloud-workspace/runtime/execution-grant.js

@@ -0,0 +1,102 @@
+import { randomUUID } from 'node:crypto';
+import { SignJWT, jwtVerify } from 'jose';
+import { z } from 'zod';
+import { generationSchema, runtimeEpochSchema } from './generations.js';
+export const WORKSPACE_EXECUTION_KIND = 'workspace-execution';
+export const WORKSPACE_EXECUTION_AUDIENCE = 'playcraft-runtime';
+const encoder = new TextEncoder();
+export const workspaceExecutionGrantClaimsSchema = z
+    .object({
+    kind: z.literal(WORKSPACE_EXECUTION_KIND),
+    credentialType: z.literal(WORKSPACE_EXECUTION_KIND),
+    environment: z.string().trim().min(1).max(64),
+    userId: z.string().trim().min(1).max(128),
+    workspaceId: z.string().trim().min(1).max(128),
+    runtimeId: z.string().trim().min(1).max(128),
+    generation: generationSchema,
+    runtimeEpoch: runtimeEpochSchema,
+    grantId: z.string().trim().min(1).max(128),
+    aud: z.literal(WORKSPACE_EXECUTION_AUDIENCE),
+})
+    .strict();
+/** Persisted grant metadata. The JWT itself is never part of this record. */
+export const workspaceExecutionGrantRecordSchema = z
+    .object({
+    grantId: z.string().trim().min(1).max(128),
+    environment: z.string().trim().min(1).max(64),
+    userId: z.string().trim().min(1).max(128),
+    workspaceId: z.string().trim().min(1).max(128),
+    runtimeId: z.string().trim().min(1).max(128),
+    generation: generationSchema,
+    runtimeEpoch: runtimeEpochSchema,
+    expiresAt: z.string().min(1),
+    revokedAt: z.string().min(1).optional(),
+})
+    .strict();
+export const GRANT_CLIENT_FORBIDDEN_FIELDS = [
+    'token',
+    'grantId',
+    'kind',
+    'credentialType',
+    'aud',
+    'expiresAt',
+    'revokedAt',
+    'runtimeId',
+    'generation',
+    'runtimeEpoch',
+    'leaseFence',
+    'rootPath',
+    'workspaceRoot',
+    'binding',
+    'repositoryUrl',
+    'branchName',
+    'preparation',
+    'gitAccess',
+    'parentGrantId',
+    'authzRevision',
+    'scope',
+    'modelConfigIds',
+];
+export function findForbiddenGrantFields(input) {
+    if (!input || typeof input !== 'object' || Array.isArray(input))
+        return [];
+    return GRANT_CLIENT_FORBIDDEN_FIELDS.filter((field) => field in input);
+}
+export function parseWorkspaceExecutionGrantClaims(input) {
+    return workspaceExecutionGrantClaimsSchema.parse(input);
+}
+export function newGrantId() {
+    return `grant_${randomUUID()}`;
+}
+export async function mintWorkspaceExecutionGrant(claims, secret, expiresIn = '1h') {
+    parseWorkspaceExecutionGrantClaims(claims);
+    if (secret.length < 16)
+        throw new Error('grant_secret_required');
+    return new SignJWT(claims)
+        .setProtectedHeader({ alg: 'HS256' })
+        .setIssuedAt()
+        .setExpirationTime(expiresIn)
+        .setJti(claims.grantId)
+        .sign(encoder.encode(secret));
+}
+export async function verifyWorkspaceExecutionGrant(token, secret) {
+    if (secret.length < 16)
+        throw new Error('grant_secret_required');
+    const { payload } = await jwtVerify(token, encoder.encode(secret), {
+        algorithms: ['HS256'],
+        audience: WORKSPACE_EXECUTION_AUDIENCE,
+    });
+    return parseWorkspaceExecutionGrantClaims({
+        kind: payload.kind,
+        credentialType: payload.credentialType,
+        environment: payload.environment,
+        userId: payload.userId,
+        workspaceId: payload.workspaceId,
+        runtimeId: payload.runtimeId,
+        generation: payload.generation,
+        runtimeEpoch: payload.runtimeEpoch,
+        grantId: payload.grantId,
+        aud: payload.aud ?? WORKSPACE_EXECUTION_AUDIENCE,
+    });
+}
+//# sourceMappingURL=execution-grant.js.map

package/dist/cloud-workspace/runtime/execution-grant.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"execution-grant.js","sourceRoot":"","sources":["../../../src/cloud-workspace/runtime/execution-grant.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,MAAM,CAAC;AAC1C,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AAExE,MAAM,CAAC,MAAM,wBAAwB,GAAG,qBAA8B,CAAC;AACvE,MAAM,CAAC,MAAM,4BAA4B,GAAG,mBAA4B,CAAC;AAEzE,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAC;AAElC,MAAM,CAAC,MAAM,mCAAmC,GAAG,CAAC;KACjD,MAAM,CAAC;IACN,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,wBAAwB,CAAC;IACzC,cAAc,EAAE,CAAC,CAAC,OAAO,CAAC,wBAAwB,CAAC;IACnD,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;IAC7C,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IACzC,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IAC9C,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IAC5C,UAAU,EAAE,gBAAgB;IAC5B,YAAY,EAAE,kBAAkB;IAChC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IAC1C,GAAG,EAAE,CAAC,CAAC,OAAO,CAAC,4BAA4B,CAAC;CAC7C,CAAC;KACD,MAAM,EAAE,CAAC;AAIZ,6EAA6E;AAC7E,MAAM,CAAC,MAAM,mCAAmC,GAAG,CAAC;KACjD,MAAM,CAAC;IACN,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IAC1C,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;IAC7C,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IACzC,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IAC9C,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IAC5C,UAAU,EAAE,gBAAgB;IAC5B,YAAY,EAAE,kBAAkB;IAChC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC5B,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;CACxC,CAAC;KACD,MAAM,EAAE,CAAC;AAIZ,MAAM,CAAC,MAAM,6BAA6B,GAAG;IAC3C,OAAO;IACP,SAAS;IACT,MAAM;IACN,gBAAgB;IAChB,KAAK;IACL,WAAW;IACX,WAAW;IACX,WAAW;IACX,YAAY;IACZ,cAAc;IACd,YAAY;IACZ,UAAU;IACV,eAAe;IACf,SAAS;IACT,eAAe;IACf,YAAY;IACZ,aAAa;IACb,WAAW;IACX,eAAe;IACf,eAAe;IACf,OAAO;IACP,gBAAgB;CACR,CAAC;AAEX,MAAM,UAAU,wBAAwB,CAAC,KAAc;IACrD,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAC3E,OAAO,6BAA6B,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,IAAI,KAAK,CAAC,CAAC;AACzE,CAAC;AAED,MAAM,UAAU,kCAAkC,CAAC,KAAc;IAC/D,OAAO,mCAAmC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;AAC1D,CAAC;AAED,MAAM,UAAU,UAAU;IACxB,OAAO,SAAS,UAAU,EAAE,EAAE,CAAC;AACjC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAC/C,MAAqC,EACrC,MAAc,EACd,YAA6B,IAAI;IAEjC,kCAAkC,CAAC,MAAM,CAAC,CAAC;IAC3C,IAAI,MAAM,CAAC,MAAM,GAAG,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;IACjE,OAAO,IAAI,OAAO,CAAC,MAAM,CAAC;SACvB,kBAAkB,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC;SACpC,WAAW,EAAE;SACb,iBAAiB,CAAC,SAAS,CAAC;SAC5B,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC;SACtB,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;AAClC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,6BAA6B,CACjD,KAAa,EACb,MAAc;IAEd,IAAI,MAAM,CAAC,MAAM,GAAG,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;IACjE,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,SAAS,CAAC,KAAK,EAAE,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE;QACjE,UAAU,EAAE,CAAC,OAAO,CAAC;QACrB,QAAQ,EAAE,4BAA4B;KACvC,CAAC,CAAC;IACH,OAAO,kCAAkC,CAAC;QACxC,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,cAAc,EAAE,OAAO,CAAC,cAAc;QACtC,WAAW,EAAE,OAAO,CAAC,WAAW;QAChC,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,WAAW,EAAE,OAAO,CAAC,WAAW;QAChC,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,UAAU,EAAE,OAAO,CAAC,UAAU;QAC9B,YAAY,EAAE,OAAO,CAAC,YAAY;QAClC,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,GAAG,EAAE,OAAO,CAAC,GAAG,IAAI,4BAA4B;KACjD,CAAC,CAAC;AACL,CAAC"}

package/dist/cloud-workspace/runtime/file-snapshot.d.ts

@@ -0,0 +1,62 @@
+import { z } from 'zod';
+export declare const FILE_SNAPSHOT_ENTRY_KINDS: readonly ["file", "symlink", "deleted"];
+export type FileSnapshotEntryKind = (typeof FILE_SNAPSHOT_ENTRY_KINDS)[number];
+export declare const FILE_SNAPSHOT_STATUSES: readonly ["complete", "incomplete"];
+export type FileSnapshotStatus = (typeof FILE_SNAPSHOT_STATUSES)[number];
+export declare const fileSnapshotStatusSchema: z.ZodEnum<{
+    complete: "complete";
+    incomplete: "incomplete";
+}>;
+export declare const fileSnapshotEntrySchema: z.ZodObject<{
+    path: z.ZodString;
+    kind: z.ZodEnum<{
+        file: "file";
+        symlink: "symlink";
+        deleted: "deleted";
+    }>;
+    mode: z.ZodOptional<z.ZodNumber>;
+    contentHash: z.ZodOptional<z.ZodString>;
+    size: z.ZodOptional<z.ZodNumber>;
+    target: z.ZodOptional<z.ZodString>;
+}, z.core.$strict>;
+export type FileSnapshotEntry = z.infer<typeof fileSnapshotEntrySchema>;
+export declare const fileSnapshotManifestSchema: z.ZodObject<{
+    snapshotId: z.ZodString;
+    workspaceId: z.ZodString;
+    generation: z.ZodNumber;
+    status: z.ZodEnum<{
+        complete: "complete";
+        incomplete: "incomplete";
+    }>;
+    entries: z.ZodArray<z.ZodObject<{
+        path: z.ZodString;
+        kind: z.ZodEnum<{
+            file: "file";
+            symlink: "symlink";
+            deleted: "deleted";
+        }>;
+        mode: z.ZodOptional<z.ZodNumber>;
+        contentHash: z.ZodOptional<z.ZodString>;
+        size: z.ZodOptional<z.ZodNumber>;
+        target: z.ZodOptional<z.ZodString>;
+    }, z.core.$strict>>;
+    digest: z.ZodString;
+}, z.core.$strict>;
+export type FileSnapshotManifest = z.infer<typeof fileSnapshotManifestSchema>;
+export type FileSnapshotVerification = {
+    ok: true;
+    snapshotId: string;
+    checksum: string;
+} | {
+    ok: false;
+    reason: 'incomplete' | 'mismatch' | 'unreadable';
+};
+export declare function fileSnapshotObjectKey(workspaceId: string, generation: number, snapshotId: string, contentHash: string): string;
+export declare function fileSnapshotManifestKey(workspaceId: string, generation: number, snapshotId: string): string;
+export declare function hashSnapshotBytes(body: Buffer): string;
+export declare function fileSnapshotDigest(entries: readonly FileSnapshotEntry[]): string;
+export declare function assertHttpObjectStoreUrl(value: string): string;
+export declare function putObjectBytes(baseUrl: string, key: string, body: Buffer, client: 'cli' | 'runtime'): Promise<void>;
+export declare function getObjectBytes(baseUrl: string, key: string, client: 'cli' | 'runtime'): Promise<Buffer>;
+export declare function verifyFileSnapshotManifest(manifestKey: string, getObject: (key: string) => Promise<Buffer | undefined>): Promise<FileSnapshotVerification>;
+//# sourceMappingURL=file-snapshot.d.ts.map

package/dist/cloud-workspace/runtime/file-snapshot.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"file-snapshot.d.ts","sourceRoot":"","sources":["../../../src/cloud-workspace/runtime/file-snapshot.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAIxB,eAAO,MAAM,yBAAyB,yCAA0C,CAAC;AACjF,MAAM,MAAM,qBAAqB,GAAG,CAAC,OAAO,yBAAyB,CAAC,CAAC,MAAM,CAAC,CAAC;AAE/E,eAAO,MAAM,sBAAsB,qCAAsC,CAAC;AAC1E,MAAM,MAAM,kBAAkB,GAAG,CAAC,OAAO,sBAAsB,CAAC,CAAC,MAAM,CAAC,CAAC;AACzE,eAAO,MAAM,wBAAwB;;;EAAiC,CAAC;AAEvE,eAAO,MAAM,uBAAuB;;;;;;;;;;;kBASzB,CAAC;AAEZ,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC;AAExE,eAAO,MAAM,0BAA0B;;;;;;;;;;;;;;;;;;;;;kBAuBnC,CAAC;AAEL,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,0BAA0B,CAAC,CAAC;AAE9E,MAAM,MAAM,wBAAwB,GAChC;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,GAClD;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,YAAY,GAAG,UAAU,GAAG,YAAY,CAAA;CAAE,CAAC;AAEpE,wBAAgB,qBAAqB,CACnC,WAAW,EAAE,MAAM,EACnB,UAAU,EAAE,MAAM,EAClB,UAAU,EAAE,MAAM,EAClB,WAAW,EAAE,MAAM,GAClB,MAAM,CAER;AAED,wBAAgB,uBAAuB,CAAC,WAAW,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,MAAM,CAE3G;AAED,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAEtD;AAED,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,SAAS,iBAAiB,EAAE,GAAG,MAAM,CAKhF;AAED,wBAAgB,wBAAwB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAW9D;AAED,wBAAsB,cAAc,CAClC,OAAO,EAAE,MAAM,EACf,GAAG,EAAE,MAAM,EACX,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,KAAK,GAAG,SAAS,GACxB,OAAO,CAAC,IAAI,CAAC,CAWf;AAED,wBAAsB,cAAc,CAClC,OAAO,EAAE,MAAM,EACf,GAAG,EAAE,MAAM,EACX,MAAM,EAAE,KAAK,GAAG,SAAS,GACxB,OAAO,CAAC,MAAM,CAAC,CAOjB;AAED,wBAAsB,0BAA0B,CAC9C,WAAW,EAAE,MAAM,EACnB,SAAS,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,GACtD,OAAO,CAAC,wBAAwB,CAAC,CAgCnC"}

package/dist/cloud-workspace/runtime/file-snapshot.js

@@ -0,0 +1,147 @@
+import { createHash } from 'node:crypto';
+import { z } from 'zod';
+import { workspaceRelativePathSchema } from './files.js';
+import { generationSchema } from './generations.js';
+export const FILE_SNAPSHOT_ENTRY_KINDS = ['file', 'symlink', 'deleted'];
+export const FILE_SNAPSHOT_STATUSES = ['complete', 'incomplete'];
+export const fileSnapshotStatusSchema = z.enum(FILE_SNAPSHOT_STATUSES);
+export const fileSnapshotEntrySchema = z
+    .object({
+    path: workspaceRelativePathSchema,
+    kind: z.enum(FILE_SNAPSHOT_ENTRY_KINDS),
+    mode: z.number().int().min(0).max(0o777).optional(),
+    contentHash: z.string().length(64).optional(),
+    size: z.number().int().nonnegative().optional(),
+    target: z.string().min(1).max(512).optional(),
+})
+    .strict();
+export const fileSnapshotManifestSchema = z
+    .object({
+    snapshotId: z.string().min(1).max(128),
+    workspaceId: z.string().min(1).max(128),
+    generation: generationSchema,
+    status: fileSnapshotStatusSchema,
+    entries: z.array(fileSnapshotEntrySchema),
+    digest: z.string().length(64),
+})
+    .strict()
+    .superRefine((value, context) => {
+    if (value.status !== 'complete')
+        return;
+    for (const entry of value.entries) {
+        if (entry.kind === 'file' && (!entry.contentHash || entry.mode === undefined || entry.size === undefined)) {
+            context.addIssue({ code: z.ZodIssueCode.custom, message: 'file_snapshot_entry_incomplete' });
+        }
+        if (entry.kind === 'symlink' && (!entry.target || entry.mode === undefined)) {
+            context.addIssue({ code: z.ZodIssueCode.custom, message: 'symlink_snapshot_entry_incomplete' });
+        }
+        if (entry.kind === 'deleted' && (entry.contentHash || entry.target || entry.mode !== undefined)) {
+            context.addIssue({ code: z.ZodIssueCode.custom, message: 'deleted_snapshot_entry_invalid' });
+        }
+    }
+});
+export function fileSnapshotObjectKey(workspaceId, generation, snapshotId, contentHash) {
+    return `workspaces/${workspaceId}/snapshots/${generation}/${snapshotId}/objects/${contentHash}`;
+}
+export function fileSnapshotManifestKey(workspaceId, generation, snapshotId) {
+    return `workspaces/${workspaceId}/snapshots/${generation}/${snapshotId}/manifest.json`;
+}
+export function hashSnapshotBytes(body) {
+    return createHash('sha256').update(body).digest('hex');
+}
+export function fileSnapshotDigest(entries) {
+    const sorted = [...entries].sort((left, right) => left.path.localeCompare(right.path) || left.kind.localeCompare(right.kind));
+    return createHash('sha256').update(canonicalJson(sorted)).digest('hex');
+}
+export function assertHttpObjectStoreUrl(value) {
+    let parsed;
+    try {
+        parsed = new URL(value);
+    }
+    catch {
+        throw new Error('object_store_url_invalid');
+    }
+    if (parsed.protocol !== 'http:' && parsed.protocol !== 'https:') {
+        throw new Error('object_store_url_invalid');
+    }
+    return value.replace(/\/$/, '');
+}
+export async function putObjectBytes(baseUrl, key, body, client) {
+    const response = await fetch(objectUrl(baseUrl, key), {
+        method: 'PUT',
+        headers: {
+            'content-type': 'application/octet-stream',
+            'x-playcraft-object-client': client,
+        },
+        body: new Uint8Array(body),
+    });
+    if (response.status === 409)
+        throw new Error('object_conflict');
+    if (response.status !== 201 && response.status !== 200)
+        throw new Error('object_put_failed');
+}
+export async function getObjectBytes(baseUrl, key, client) {
+    const response = await fetch(objectUrl(baseUrl, key), {
+        headers: { 'x-playcraft-object-client': client },
+    });
+    if (response.status === 404)
+        throw new Error('object_missing');
+    if (!response.ok)
+        throw new Error('object_get_failed');
+    return Buffer.from(await response.arrayBuffer());
+}
+export async function verifyFileSnapshotManifest(manifestKey, getObject) {
+    const raw = await getObject(manifestKey).catch(() => undefined);
+    if (!raw)
+        return { ok: false, reason: 'unreadable' };
+    let parsed;
+    try {
+        parsed = JSON.parse(raw.toString('utf8'));
+    }
+    catch {
+        return { ok: false, reason: 'mismatch' };
+    }
+    const manifest = fileSnapshotManifestSchema.safeParse(parsed);
+    if (!manifest.success)
+        return { ok: false, reason: 'mismatch' };
+    if (manifest.data.status !== 'complete')
+        return { ok: false, reason: 'incomplete' };
+    const digest = fileSnapshotDigest(manifest.data.entries);
+    if (digest !== manifest.data.digest)
+        return { ok: false, reason: 'mismatch' };
+    for (const entry of manifest.data.entries) {
+        if (entry.kind === 'deleted')
+            continue;
+        if (entry.kind === 'symlink') {
+            if (!entry.target || entry.mode === undefined)
+                return { ok: false, reason: 'mismatch' };
+            continue;
+        }
+        if (!entry.contentHash || entry.mode === undefined)
+            return { ok: false, reason: 'mismatch' };
+        const key = fileSnapshotObjectKey(manifest.data.workspaceId, manifest.data.generation, manifest.data.snapshotId, entry.contentHash);
+        const body = await getObject(key).catch(() => undefined);
+        if (!body || hashSnapshotBytes(body) !== entry.contentHash)
+            return { ok: false, reason: 'mismatch' };
+        if (entry.size !== undefined && body.byteLength !== entry.size)
+            return { ok: false, reason: 'mismatch' };
+    }
+    return { ok: true, snapshotId: manifest.data.snapshotId, checksum: digest };
+}
+function objectUrl(baseUrl, key) {
+    return `${assertHttpObjectStoreUrl(baseUrl)}/objects/${encodeURIComponent(key)}`;
+}
+function canonicalJson(value) {
+    return JSON.stringify(sortValue(value));
+}
+function sortValue(value) {
+    if (Array.isArray(value))
+        return value.map(sortValue);
+    if (value && typeof value === 'object') {
+        return Object.fromEntries(Object.entries(value)
+            .sort(([left], [right]) => left.localeCompare(right))
+            .map(([key, nested]) => [key, sortValue(nested)]));
+    }
+    return value;
+}
+//# sourceMappingURL=file-snapshot.js.map

package/dist/cloud-workspace/runtime/file-snapshot.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"file-snapshot.js","sourceRoot":"","sources":["../../../src/cloud-workspace/runtime/file-snapshot.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,2BAA2B,EAAE,MAAM,YAAY,CAAC;AACzD,OAAO,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AAEpD,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,MAAM,EAAE,SAAS,EAAE,SAAS,CAAU,CAAC;AAGjF,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,UAAU,EAAE,YAAY,CAAU,CAAC;AAE1E,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;AAEvE,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC;KACrC,MAAM,CAAC;IACN,IAAI,EAAE,2BAA2B;IACjC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,yBAAyB,CAAC;IACvC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,QAAQ,EAAE;IACnD,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE;IAC7C,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE;IAC/C,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;CAC9C,CAAC;KACD,MAAM,EAAE,CAAC;AAIZ,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC;KACxC,MAAM,CAAC;IACN,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IACtC,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IACvC,UAAU,EAAE,gBAAgB;IAC5B,MAAM,EAAE,wBAAwB;IAChC,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,uBAAuB,CAAC;IACzC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC;CAC9B,CAAC;KACD,MAAM,EAAE;KACR,WAAW,CAAC,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE;IAC9B,IAAI,KAAK,CAAC,MAAM,KAAK,UAAU;QAAE,OAAO;IACxC,KAAK,MAAM,KAAK,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;QAClC,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM,IAAI,CAAC,CAAC,KAAK,CAAC,WAAW,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,CAAC,EAAE,CAAC;YAC1G,OAAO,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,YAAY,CAAC,MAAM,EAAE,OAAO,EAAE,gCAAgC,EAAE,CAAC,CAAC;QAC/F,CAAC;QACD,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,IAAI,CAAC,CAAC,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,CAAC,EAAE,CAAC;YAC5E,OAAO,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,YAAY,CAAC,MAAM,EAAE,OAAO,EAAE,mCAAmC,EAAE,CAAC,CAAC;QAClG,CAAC;QACD,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,IAAI,CAAC,KAAK,CAAC,WAAW,IAAI,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,CAAC,EAAE,CAAC;YAChG,OAAO,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,YAAY,CAAC,MAAM,EAAE,OAAO,EAAE,gCAAgC,EAAE,CAAC,CAAC;QAC/F,CAAC;IACH,CAAC;AACH,CAAC,CAAC,CAAC;AAQL,MAAM,UAAU,qBAAqB,CACnC,WAAmB,EACnB,UAAkB,EAClB,UAAkB,EAClB,WAAmB;IAEnB,OAAO,cAAc,WAAW,cAAc,UAAU,IAAI,UAAU,YAAY,WAAW,EAAE,CAAC;AAClG,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,WAAmB,EAAE,UAAkB,EAAE,UAAkB;IACjG,OAAO,cAAc,WAAW,cAAc,UAAU,IAAI,UAAU,gBAAgB,CAAC;AACzF,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,IAAY;IAC5C,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACzD,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,OAAqC;IACtE,MAAM,MAAM,GAAG,CAAC,GAAG,OAAO,CAAC,CAAC,IAAI,CAC9B,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC,CAC5F,CAAC;IACF,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC1E,CAAC;AAED,MAAM,UAAU,wBAAwB,CAAC,KAAa;IACpD,IAAI,MAAW,CAAC;IAChB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;IAC1B,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;IAC9C,CAAC;IACD,IAAI,MAAM,CAAC,QAAQ,KAAK,OAAO,IAAI,MAAM,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAChE,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;IAC9C,CAAC;IACD,OAAO,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;AAClC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,OAAe,EACf,GAAW,EACX,IAAY,EACZ,MAAyB;IAEzB,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,SAAS,CAAC,OAAO,EAAE,GAAG,CAAC,EAAE;QACpD,MAAM,EAAE,KAAK;QACb,OAAO,EAAE;YACP,cAAc,EAAE,0BAA0B;YAC1C,2BAA2B,EAAE,MAAM;SACpC;QACD,IAAI,EAAE,IAAI,UAAU,CAAC,IAAI,CAAC;KAC3B,CAAC,CAAC;IACH,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG;QAAE,MAAM,IAAI,KAAK,CAAC,iBAAiB,CAAC,CAAC;IAChE,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG;QAAE,MAAM,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC;AAC/F,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,OAAe,EACf,GAAW,EACX,MAAyB;IAEzB,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,SAAS,CAAC,OAAO,EAAE,GAAG,CAAC,EAAE;QACpD,OAAO,EAAE,EAAE,2BAA2B,EAAE,MAAM,EAAE;KACjD,CAAC,CAAC;IACH,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG;QAAE,MAAM,IAAI,KAAK,CAAC,gBAAgB,CAAC,CAAC;IAC/D,IAAI,CAAC,QAAQ,CAAC,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC;IACvD,OAAO,MAAM,CAAC,IAAI,CAAC,MAAM,QAAQ,CAAC,WAAW,EAAE,CAAC,CAAC;AACnD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAC9C,WAAmB,EACnB,SAAuD;IAEvD,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,WAAW,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IAChE,IAAI,CAAC,GAAG;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC;IACrD,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;IAC5C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;IAC3C,CAAC;IACD,MAAM,QAAQ,GAAG,0BAA0B,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;IAC9D,IAAI,CAAC,QAAQ,CAAC,OAAO;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;IAChE,IAAI,QAAQ,CAAC,IAAI,CAAC,MAAM,KAAK,UAAU;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC;IACpF,MAAM,MAAM,GAAG,kBAAkB,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACzD,IAAI,MAAM,KAAK,QAAQ,CAAC,IAAI,CAAC,MAAM;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;IAC9E,KAAK,MAAM,KAAK,IAAI,QAAQ,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;QAC1C,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS;YAAE,SAAS;QACvC,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YAC7B,IAAI,CAAC,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS;gBAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;YACxF,SAAS;QACX,CAAC;QACD,IAAI,CAAC,KAAK,CAAC,WAAW,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;QAC7F,MAAM,GAAG,GAAG,qBAAqB,CAC/B,QAAQ,CAAC,IAAI,CAAC,WAAW,EACzB,QAAQ,CAAC,IAAI,CAAC,UAAU,EACxB,QAAQ,CAAC,IAAI,CAAC,UAAU,EACxB,KAAK,CAAC,WAAW,CAClB,CAAC;QACF,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QACzD,IAAI,CAAC,IAAI,IAAI,iBAAiB,CAAC,IAAI,CAAC,KAAK,KAAK,CAAC,WAAW;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;QACrG,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,IAAI,IAAI,CAAC,UAAU,KAAK,KAAK,CAAC,IAAI;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;IAC3G,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,CAAC,IAAI,CAAC,UAAU,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC;AAC9E,CAAC;AAED,SAAS,SAAS,CAAC,OAAe,EAAE,GAAW;IAC7C,OAAO,GAAG,wBAAwB,CAAC,OAAO,CAAC,YAAY,kBAAkB,CAAC,GAAG,CAAC,EAAE,CAAC;AACnF,CAAC;AAED,SAAS,aAAa,CAAC,KAAc;IACnC,OAAO,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;AAC1C,CAAC;AAED,SAAS,SAAS,CAAC,KAAc;IAC/B,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IACtD,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACvC,OAAO,MAAM,CAAC,WAAW,CACvB,MAAM,CAAC,OAAO,CAAC,KAAgC,CAAC;aAC7C,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;aACpD,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,EAAE,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,CACpD,CAAC;IACJ,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/cloud-workspace/runtime/files.d.ts

@@ -0,0 +1,58 @@
+import { z } from 'zod';
+export declare const WORKSPACE_RELATIVE_PATH_MAX = 512;
+export declare const WORKSPACE_FILE_CONTENT_MAX: number;
+export declare const workspaceRelativePathSchema: z.ZodString;
+export type WorkspaceRelativePath = z.infer<typeof workspaceRelativePathSchema>;
+export declare const MANAGED_WRITE_SOURCES: readonly ["manual", "agent", "background"];
+export type ManagedWriteSource = (typeof MANAGED_WRITE_SOURCES)[number];
+export declare const managedWriteSourceSchema: z.ZodEnum<{
+    background: "background";
+    manual: "manual";
+    agent: "agent";
+}>;
+export declare const fileWritePayloadSchema: z.ZodObject<{
+    path: z.ZodString;
+    content: z.ZodString;
+    expectedRevision: z.ZodOptional<z.ZodNumber>;
+    writer: z.ZodOptional<z.ZodEnum<{
+        background: "background";
+        manual: "manual";
+        agent: "agent";
+    }>>;
+    writeId: z.ZodOptional<z.ZodString>;
+    hold: z.ZodOptional<z.ZodBoolean>;
+    release: z.ZodOptional<z.ZodBoolean>;
+}, z.core.$strict>;
+export type FileWritePayload = z.infer<typeof fileWritePayloadSchema>;
+export declare const workspaceFileRecordSchema: z.ZodObject<{
+    path: z.ZodString;
+    revision: z.ZodNumber;
+    contentHash: z.ZodString;
+    size: z.ZodNumber;
+}, z.core.$strict>;
+export type WorkspaceFileRecord = z.infer<typeof workspaceFileRecordSchema>;
+export declare const workspaceFileListSchema: z.ZodObject<{
+    files: z.ZodArray<z.ZodObject<{
+        path: z.ZodString;
+        revision: z.ZodNumber;
+        contentHash: z.ZodString;
+        size: z.ZodNumber;
+    }, z.core.$strict>>;
+}, z.core.$strict>;
+export type WorkspaceFileList = z.infer<typeof workspaceFileListSchema>;
+export declare const workspaceFileContentSchema: z.ZodObject<{
+    path: z.ZodString;
+    revision: z.ZodNumber;
+    contentHash: z.ZodString;
+    content: z.ZodString;
+}, z.core.$strict>;
+export type WorkspaceFileContent = z.infer<typeof workspaceFileContentSchema>;
+export declare const checkpointFileSchema: z.ZodObject<{
+    path: z.ZodString;
+    contentHash: z.ZodString;
+    revision: z.ZodNumber;
+}, z.core.$strict>;
+export type CheckpointFile = z.infer<typeof checkpointFileSchema>;
+export declare function hashWorkspaceFileContent(content: string): string;
+export declare function isWorkspaceRelativePath(value: string): boolean;
+//# sourceMappingURL=files.d.ts.map

package/dist/cloud-workspace/runtime/files.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"files.d.ts","sourceRoot":"","sources":["../../../src/cloud-workspace/runtime/files.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,eAAO,MAAM,2BAA2B,MAAM,CAAC;AAC/C,eAAO,MAAM,0BAA0B,QAAc,CAAC;AAEtD,eAAO,MAAM,2BAA2B,aAcpC,CAAC;AAEL,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,2BAA2B,CAAC,CAAC;AAEhF,eAAO,MAAM,qBAAqB,4CAA6C,CAAC;AAChF,MAAM,MAAM,kBAAkB,GAAG,CAAC,OAAO,qBAAqB,CAAC,CAAC,MAAM,CAAC,CAAC;AACxE,eAAO,MAAM,wBAAwB;;;;EAAgC,CAAC;AAEtE,eAAO,MAAM,sBAAsB;;;;;;;;;;;;kBAqB/B,CAAC;AAEL,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC;AAEtE,eAAO,MAAM,yBAAyB;;;;;kBAO3B,CAAC;AAEZ,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC;AAE5E,eAAO,MAAM,uBAAuB;;;;;;;kBAIzB,CAAC;AAEZ,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC;AAExE,eAAO,MAAM,0BAA0B;;;;;kBAO5B,CAAC;AAEZ,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,0BAA0B,CAAC,CAAC;AAE9E,eAAO,MAAM,oBAAoB;;;;kBAMtB,CAAC;AAEZ,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAElE,wBAAgB,wBAAwB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAEhE;AAED,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAE9D"}

package/dist/cloud-workspace/runtime/files.js

@@ -0,0 +1,78 @@
+import { createHash } from 'node:crypto';
+import { z } from 'zod';
+export const WORKSPACE_RELATIVE_PATH_MAX = 512;
+export const WORKSPACE_FILE_CONTENT_MAX = 1024 * 1024;
+export const workspaceRelativePathSchema = z
+    .string()
+    .trim()
+    .min(1)
+    .max(WORKSPACE_RELATIVE_PATH_MAX)
+    .superRefine((value, context) => {
+    if (value.includes('\0') || value.includes('\\') || value.startsWith('/') || value.includes(':')) {
+        context.addIssue({ code: z.ZodIssueCode.custom, message: 'invalid_workspace_path' });
+        return;
+    }
+    const segments = value.split('/');
+    if (segments.some((segment) => segment === '' || segment === '.' || segment === '..')) {
+        context.addIssue({ code: z.ZodIssueCode.custom, message: 'invalid_workspace_path' });
+    }
+});
+export const MANAGED_WRITE_SOURCES = ['manual', 'agent', 'background'];
+export const managedWriteSourceSchema = z.enum(MANAGED_WRITE_SOURCES);
+export const fileWritePayloadSchema = z
+    .object({
+    path: workspaceRelativePathSchema,
+    content: z.string().max(WORKSPACE_FILE_CONTENT_MAX),
+    expectedRevision: z.number().int().nonnegative().optional(),
+    writer: managedWriteSourceSchema.optional(),
+    writeId: z.string().trim().min(1).max(128).optional(),
+    hold: z.boolean().optional(),
+    release: z.boolean().optional(),
+})
+    .strict()
+    .superRefine((value, context) => {
+    if ((value.hold || value.release) && !value.writeId) {
+        context.addIssue({ code: z.ZodIssueCode.custom, message: 'write_id_required' });
+    }
+    if (value.hold && value.release) {
+        context.addIssue({ code: z.ZodIssueCode.custom, message: 'write_hold_conflict' });
+    }
+    if (value.writer === 'background' && value.hold !== true && value.release !== true) {
+        context.addIssue({ code: z.ZodIssueCode.custom, message: 'background_write_unmanaged' });
+    }
+});
+export const workspaceFileRecordSchema = z
+    .object({
+    path: workspaceRelativePathSchema,
+    revision: z.number().int().nonnegative(),
+    contentHash: z.string().length(64),
+    size: z.number().int().nonnegative(),
+})
+    .strict();
+export const workspaceFileListSchema = z
+    .object({
+    files: z.array(workspaceFileRecordSchema),
+})
+    .strict();
+export const workspaceFileContentSchema = z
+    .object({
+    path: workspaceRelativePathSchema,
+    revision: z.number().int().nonnegative(),
+    contentHash: z.string().length(64),
+    content: z.string().max(WORKSPACE_FILE_CONTENT_MAX),
+})
+    .strict();
+export const checkpointFileSchema = z
+    .object({
+    path: workspaceRelativePathSchema,
+    contentHash: z.string().length(64),
+    revision: z.number().int().nonnegative(),
+})
+    .strict();
+export function hashWorkspaceFileContent(content) {
+    return createHash('sha256').update(content, 'utf8').digest('hex');
+}
+export function isWorkspaceRelativePath(value) {
+    return workspaceRelativePathSchema.safeParse(value).success;
+}
+//# sourceMappingURL=files.js.map

package/dist/cloud-workspace/runtime/files.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"files.js","sourceRoot":"","sources":["../../../src/cloud-workspace/runtime/files.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,MAAM,CAAC,MAAM,2BAA2B,GAAG,GAAG,CAAC;AAC/C,MAAM,CAAC,MAAM,0BAA0B,GAAG,IAAI,GAAG,IAAI,CAAC;AAEtD,MAAM,CAAC,MAAM,2BAA2B,GAAG,CAAC;KACzC,MAAM,EAAE;KACR,IAAI,EAAE;KACN,GAAG,CAAC,CAAC,CAAC;KACN,GAAG,CAAC,2BAA2B,CAAC;KAChC,WAAW,CAAC,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE;IAC9B,IAAI,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QACjG,OAAO,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,YAAY,CAAC,MAAM,EAAE,OAAO,EAAE,wBAAwB,EAAE,CAAC,CAAC;QACrF,OAAO;IACT,CAAC;IACD,MAAM,QAAQ,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAClC,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,KAAK,EAAE,IAAI,OAAO,KAAK,GAAG,IAAI,OAAO,KAAK,IAAI,CAAC,EAAE,CAAC;QACtF,OAAO,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,YAAY,CAAC,MAAM,EAAE,OAAO,EAAE,wBAAwB,EAAE,CAAC,CAAC;IACvF,CAAC;AACH,CAAC,CAAC,CAAC;AAIL,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,QAAQ,EAAE,OAAO,EAAE,YAAY,CAAU,CAAC;AAEhF,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;AAEtE,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC;KACpC,MAAM,CAAC;IACN,IAAI,EAAE,2BAA2B;IACjC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,0BAA0B,CAAC;IACnD,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE;IAC3D,MAAM,EAAE,wBAAwB,CAAC,QAAQ,EAAE;IAC3C,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;IACrD,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IAC5B,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;CAChC,CAAC;KACD,MAAM,EAAE;KACR,WAAW,CAAC,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE;IAC9B,IAAI,CAAC,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;QACpD,OAAO,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,YAAY,CAAC,MAAM,EAAE,OAAO,EAAE,mBAAmB,EAAE,CAAC,CAAC;IAClF,CAAC;IACD,IAAI,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;QAChC,OAAO,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,YAAY,CAAC,MAAM,EAAE,OAAO,EAAE,qBAAqB,EAAE,CAAC,CAAC;IACpF,CAAC;IACD,IAAI,KAAK,CAAC,MAAM,KAAK,YAAY,IAAI,KAAK,CAAC,IAAI,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,KAAK,IAAI,EAAE,CAAC;QACnF,OAAO,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,YAAY,CAAC,MAAM,EAAE,OAAO,EAAE,4BAA4B,EAAE,CAAC,CAAC;IAC3F,CAAC;AACH,CAAC,CAAC,CAAC;AAIL,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC;KACvC,MAAM,CAAC;IACN,IAAI,EAAE,2BAA2B;IACjC,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;IACxC,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC;IAClC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;CACrC,CAAC;KACD,MAAM,EAAE,CAAC;AAIZ,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC;KACrC,MAAM,CAAC;IACN,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,yBAAyB,CAAC;CAC1C,CAAC;KACD,MAAM,EAAE,CAAC;AAIZ,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC;KACxC,MAAM,CAAC;IACN,IAAI,EAAE,2BAA2B;IACjC,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;IACxC,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC;IAClC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,0BAA0B,CAAC;CACpD,CAAC;KACD,MAAM,EAAE,CAAC;AAIZ,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC;KAClC,MAAM,CAAC;IACN,IAAI,EAAE,2BAA2B;IACjC,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC;IAClC,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;CACzC,CAAC;KACD,MAAM,EAAE,CAAC;AAIZ,MAAM,UAAU,wBAAwB,CAAC,OAAe;IACtD,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACpE,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,KAAa;IACnD,OAAO,2BAA2B,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC;AAC9D,CAAC"}

package/dist/cloud-workspace/runtime/generations.d.ts

@@ -0,0 +1,18 @@
+import { z } from 'zod';
+export declare const generationSchema: z.ZodNumber;
+export declare const runtimeEpochSchema: z.ZodNumber;
+export declare const leaseFenceSchema: z.ZodNumber;
+export declare const runtimeGenerationsSchema: z.ZodObject<{
+    generation: z.ZodNumber;
+    runtimeEpoch: z.ZodNumber;
+    leaseFence: z.ZodNumber;
+}, z.core.$strict>;
+export type RuntimeGenerations = z.infer<typeof runtimeGenerationsSchema>;
+/** Fields the browser client must not choose. Trusted config or server registration fills them.
+ *  Sandbox control HTTP still accepts dispatcher `leaseFence` and checks it separately. */
+export declare const UNTRUSTED_RUNTIME_FIELDS: readonly ["userId", "runtimeId", "generation", "runtimeEpoch", "leaseFence", "rootPath", "workspaceRoot"];
+export type UntrustedRuntimeField = (typeof UNTRUSTED_RUNTIME_FIELDS)[number];
+export declare function findUntrustedRuntimeFields(input: unknown): UntrustedRuntimeField[];
+export declare function assertTrustedGenerations(actual: RuntimeGenerations, expected: Pick<RuntimeGenerations, 'generation' | 'runtimeEpoch'>): 'ok' | 'generation_mismatch';
+export declare function assertLeaseFence(actual: number, acceptedFence: number): 'ok' | 'stale_lease';
+//# sourceMappingURL=generations.d.ts.map

package/dist/cloud-workspace/runtime/generations.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"generations.d.ts","sourceRoot":"","sources":["../../../src/cloud-workspace/runtime/generations.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,eAAO,MAAM,gBAAgB,aAAiC,CAAC;AAC/D,eAAO,MAAM,kBAAkB,aAAiC,CAAC;AACjE,eAAO,MAAM,gBAAgB,aAAiC,CAAC;AAE/D,eAAO,MAAM,wBAAwB;;;;kBAM1B,CAAC;AAEZ,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC;AAE1E;2FAC2F;AAC3F,eAAO,MAAM,wBAAwB,2GAQ3B,CAAC;AAEX,MAAM,MAAM,qBAAqB,GAAG,CAAC,OAAO,wBAAwB,CAAC,CAAC,MAAM,CAAC,CAAC;AAE9E,wBAAgB,0BAA0B,CAAC,KAAK,EAAE,OAAO,GAAG,qBAAqB,EAAE,CAGlF;AAED,wBAAgB,wBAAwB,CACtC,MAAM,EAAE,kBAAkB,EAC1B,QAAQ,EAAE,IAAI,CAAC,kBAAkB,EAAE,YAAY,GAAG,cAAc,CAAC,GAChE,IAAI,GAAG,qBAAqB,CAK9B;AAED,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,GAAG,IAAI,GAAG,aAAa,CAG5F"}

package/dist/cloud-workspace/runtime/generations.js

@@ -0,0 +1,39 @@
+import { z } from 'zod';
+export const generationSchema = z.number().int().nonnegative();
+export const runtimeEpochSchema = z.number().int().nonnegative();
+export const leaseFenceSchema = z.number().int().nonnegative();
+export const runtimeGenerationsSchema = z
+    .object({
+    generation: generationSchema,
+    runtimeEpoch: runtimeEpochSchema,
+    leaseFence: leaseFenceSchema,
+})
+    .strict();
+/** Fields the browser client must not choose. Trusted config or server registration fills them.
+ *  Sandbox control HTTP still accepts dispatcher `leaseFence` and checks it separately. */
+export const UNTRUSTED_RUNTIME_FIELDS = [
+    'userId',
+    'runtimeId',
+    'generation',
+    'runtimeEpoch',
+    'leaseFence',
+    'rootPath',
+    'workspaceRoot',
+];
+export function findUntrustedRuntimeFields(input) {
+    if (!input || typeof input !== 'object' || Array.isArray(input))
+        return [];
+    return UNTRUSTED_RUNTIME_FIELDS.filter((field) => field in input);
+}
+export function assertTrustedGenerations(actual, expected) {
+    if (actual.generation !== expected.generation || actual.runtimeEpoch !== expected.runtimeEpoch) {
+        return 'generation_mismatch';
+    }
+    return 'ok';
+}
+export function assertLeaseFence(actual, acceptedFence) {
+    if (actual < acceptedFence)
+        return 'stale_lease';
+    return 'ok';
+}
+//# sourceMappingURL=generations.js.map

package/dist/cloud-workspace/runtime/generations.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"generations.js","sourceRoot":"","sources":["../../../src/cloud-workspace/runtime/generations.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC;AAC/D,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC;AACjE,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC;AAE/D,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC;KACtC,MAAM,CAAC;IACN,UAAU,EAAE,gBAAgB;IAC5B,YAAY,EAAE,kBAAkB;IAChC,UAAU,EAAE,gBAAgB;CAC7B,CAAC;KACD,MAAM,EAAE,CAAC;AAIZ;2FAC2F;AAC3F,MAAM,CAAC,MAAM,wBAAwB,GAAG;IACtC,QAAQ;IACR,WAAW;IACX,YAAY;IACZ,cAAc;IACd,YAAY;IACZ,UAAU;IACV,eAAe;CACP,CAAC;AAIX,MAAM,UAAU,0BAA0B,CAAC,KAAc;IACvD,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAC3E,OAAO,wBAAwB,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,IAAI,KAAK,CAAC,CAAC;AACpE,CAAC;AAED,MAAM,UAAU,wBAAwB,CACtC,MAA0B,EAC1B,QAAiE;IAEjE,IAAI,MAAM,CAAC,UAAU,KAAK,QAAQ,CAAC,UAAU,IAAI,MAAM,CAAC,YAAY,KAAK,QAAQ,CAAC,YAAY,EAAE,CAAC;QAC/F,OAAO,qBAAqB,CAAC;IAC/B,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,MAAc,EAAE,aAAqB;IACpE,IAAI,MAAM,GAAG,aAAa;QAAE,OAAO,aAAa,CAAC;IACjD,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/cloud-workspace/runtime/git.d.ts

@@ -0,0 +1,46 @@
+import { z } from 'zod';
+export declare const gitCommitPayloadSchema: z.ZodObject<{
+    message: z.ZodString;
+    paths: z.ZodOptional<z.ZodArray<z.ZodString>>;
+}, z.core.$strict>;
+export type GitCommitPayload = z.infer<typeof gitCommitPayloadSchema>;
+export declare const gitPushPayloadSchema: z.ZodObject<{}, z.core.$strict>;
+export type GitPushPayload = z.infer<typeof gitPushPayloadSchema>;
+export declare const gitStatusEntrySchema: z.ZodObject<{
+    path: z.ZodString;
+    indexStatus: z.ZodString;
+    worktreeStatus: z.ZodString;
+}, z.core.$strict>;
+export type GitStatusEntry = z.infer<typeof gitStatusEntrySchema>;
+export declare const gitStatusSchema: z.ZodObject<{
+    initialized: z.ZodBoolean;
+    branch: z.ZodString;
+    ahead: z.ZodNumber;
+    behind: z.ZodNumber;
+    hasUpstream: z.ZodBoolean;
+    files: z.ZodArray<z.ZodObject<{
+        path: z.ZodString;
+        indexStatus: z.ZodString;
+        worktreeStatus: z.ZodString;
+    }, z.core.$strict>>;
+}, z.core.$strict>;
+export type GitStatus = z.infer<typeof gitStatusSchema>;
+export declare const gitDiffSchema: z.ZodObject<{
+    patch: z.ZodString;
+}, z.core.$strict>;
+export type GitDiff = z.infer<typeof gitDiffSchema>;
+export declare const gitCommitSummarySchema: z.ZodObject<{
+    sha: z.ZodString;
+    subject: z.ZodString;
+    committedAt: z.ZodString;
+}, z.core.$strict>;
+export type GitCommitSummary = z.infer<typeof gitCommitSummarySchema>;
+export declare const gitGraphSchema: z.ZodObject<{
+    commits: z.ZodArray<z.ZodObject<{
+        sha: z.ZodString;
+        subject: z.ZodString;
+        committedAt: z.ZodString;
+    }, z.core.$strict>>;
+}, z.core.$strict>;
+export type GitGraph = z.infer<typeof gitGraphSchema>;
+//# sourceMappingURL=git.d.ts.map

package/dist/cloud-workspace/runtime/git.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"git.d.ts","sourceRoot":"","sources":["../../../src/cloud-workspace/runtime/git.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,eAAO,MAAM,sBAAsB;;;kBAKxB,CAAC;AAEZ,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC;AAEtE,eAAO,MAAM,oBAAoB,iCAAwB,CAAC;AAE1D,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAElE,eAAO,MAAM,oBAAoB;;;;kBAMtB,CAAC;AAEZ,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAElE,eAAO,MAAM,eAAe;;;;;;;;;;;kBASjB,CAAC;AAEZ,MAAM,MAAM,SAAS,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAC;AAExD,eAAO,MAAM,aAAa;;kBAIf,CAAC;AAEZ,MAAM,MAAM,OAAO,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,aAAa,CAAC,CAAC;AAEpD,eAAO,MAAM,sBAAsB;;;;kBAMxB,CAAC;AAEZ,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC;AAEtE,eAAO,MAAM,cAAc;;;;;;kBAIhB,CAAC;AAEZ,MAAM,MAAM,QAAQ,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,CAAC"}