@playcraft/common 0.1.24 → 0.1.26

package/dist/cloud-workspace/runtime/workspace-binding.js

@@ -0,0 +1,176 @@
+import { z } from 'zod';
+import { isLocalWorkspaceGitAuthMode, workspaceGitAuthModeSchema, workspaceGitDirectAccessSchema } from './git-auth-mode.js';
+import { workspaceDirectoryRegistrationSchema } from './workspace-directories.js';
+/** Trusted control-plane registration; never merge this with a browser operation payload. */
+const boundWorkspaceRegistrationSchema = z
+    .object({
+    workspaceId: z.string().uuid(),
+    projectId: z.string().uuid(),
+    targetKind: z.enum(['main', 'remix']),
+    remixId: z.string().uuid().nullable(),
+    repositoryUrl: z.string().min(1).max(2048),
+    branchName: z.string().min(1).max(512),
+    directories: z.array(workspaceDirectoryRegistrationSchema).optional(),
+    /** A batch may bind repository metadata while retaining the original local basic checkout. */
+    preserveLocalBasic: z.boolean().optional(),
+    /** Present only while the remix draft has not been pushed. Checkout creates the branch from this commit. */
+    pendingFork: z.object({
+        sourceBranchName: z.string().min(1).max(512),
+        sourceCommit: z.string().regex(/^[a-f0-9]{40,64}$/),
+    }).strict().optional(),
+})
+    .strict()
+    .refine((value) => (value.targetKind === 'main') === (value.remixId === null));
+export const workspaceRegistrationSchema = z.union([
+    boundWorkspaceRegistrationSchema,
+    z.object({
+        workspaceId: z.string().uuid(),
+        projectId: z.null(),
+        targetKind: z.literal('standalone'),
+        remixId: z.null(),
+        repositoryUrl: z.null(),
+        branchName: z.null(),
+        directories: z.array(workspaceDirectoryRegistrationSchema).optional(),
+    }).strict(),
+]);
+/**
+ * Checkout instructions for an unpushed remix draft. Present only until that draft is pushed,
+ * so two registrations of the same workspace can differ here without being different bindings.
+ */
+export function remixPendingFork(input) {
+    if (input.targetKind !== 'remix' || input.pushedAt != null)
+        return undefined;
+    if (typeof input.sourceBranchName !== 'string' || !input.sourceBranchName)
+        return undefined;
+    if (typeof input.sourceCommit !== 'string' || !input.sourceCommit)
+        return undefined;
+    return { sourceBranchName: input.sourceBranchName, sourceCommit: input.sourceCommit };
+}
+/** Identity of a workspace binding. `pendingFork` is excluded because it appears and disappears. */
+export function sameWorkspaceRegistration(left, right) {
+    return (left.workspaceId === right.workspaceId &&
+        left.projectId === right.projectId &&
+        left.targetKind === right.targetKind &&
+        left.remixId === right.remixId &&
+        left.repositoryUrl === right.repositoryUrl &&
+        left.branchName === right.branchName &&
+        ('preserveLocalBasic' in left ? left.preserveLocalBasic : undefined) === ('preserveLocalBasic' in right ? right.preserveLocalBasic : undefined));
+}
+/** Ephemeral clone access, never part of a persisted Workspace binding or operation. */
+export const workspaceGitAccessSchema = z
+    .object({
+    username: z
+        .string()
+        .min(1)
+        .max(256)
+        .regex(/^[^:\r\n\0]+$/),
+    password: z
+        .string()
+        .min(1)
+        .max(8192)
+        .regex(/^[^\r\n\0]+$/),
+    issuedAt: z.string().datetime(),
+    expiresAt: z.string().datetime(),
+})
+    .strict()
+    .refine((value) => {
+    const lifetime = Date.parse(value.expiresAt) - Date.parse(value.issuedAt);
+    return lifetime > 0 && lifetime <= 15 * 60_000;
+});
+/** Controlled read entry. The canonical repository URL stays on the remote. */
+export const workspaceGitTransportSchema = z
+    .object({
+    kind: z.enum(['git-read-gateway-v1', 'git-gateway-v2']),
+    cloneUrl: z.string().min(1).max(2048),
+})
+    .strict();
+const cloneWorkspacePreparationSchema = z
+    .object({
+    mode: z.literal('clone'),
+    authMode: workspaceGitAuthModeSchema.optional(),
+    directAccess: workspaceGitDirectAccessSchema.nullable().optional(),
+    gitAccess: workspaceGitAccessSchema.optional(),
+    transport: workspaceGitTransportSchema.optional(),
+})
+    .strict()
+    .refine((value) => value.transport === undefined || value.gitAccess !== undefined)
+    .refine(value => isLocalWorkspaceGitAuthMode(value.authMode)
+    ? value.directAccess !== undefined && !value.gitAccess && !value.transport
+    : value.directAccess === undefined);
+export const workspacePreparationSchema = z.union([
+    cloneWorkspacePreparationSchema,
+    z.object({ mode: z.literal('empty') }).strict(),
+]);
+const LOOPBACK_HOSTS = new Set(['localhost', '127.0.0.1', '[::1]']);
+export function parseWorkspaceGitGatewayOrigin(value) {
+    const url = new URL(value);
+    if (url.username ||
+        url.password ||
+        url.search ||
+        url.hash ||
+        (url.pathname !== '/' && url.pathname !== '') ||
+        (url.protocol !== 'https:' &&
+            !(url.protocol === 'http:' && LOOPBACK_HOSTS.has(url.hostname)))) {
+        throw new Error('invalid_git_gateway_origin');
+    }
+    return url.origin;
+}
+export function parseWorkspaceGitGatewayOrigins(value) {
+    if (!value?.trim())
+        return [];
+    return [
+        ...new Set(value
+            .split(',')
+            .map((item) => item.trim())
+            .filter(Boolean)
+            .map((item) => parseWorkspaceGitGatewayOrigin(item))),
+    ];
+}
+/** Proxy mode is rejected when no allowlisted origin is configured. */
+export function matchWorkspaceGitGatewayCloneUrl(cloneUrl, allowedOrigins, repositoryUrl) {
+    if (allowedOrigins.length === 0)
+        return { ok: false, reason: 'capability_missing' };
+    let gateway;
+    let repository;
+    try {
+        gateway = new URL(cloneUrl);
+        repository = new URL(repositoryUrl);
+    }
+    catch {
+        return { ok: false, reason: 'rejected' };
+    }
+    const allowed = new Set();
+    for (const origin of allowedOrigins) {
+        try {
+            allowed.add(parseWorkspaceGitGatewayOrigin(origin));
+        }
+        catch {
+            return { ok: false, reason: 'rejected' };
+        }
+    }
+    const request = /^\/workspace-git\/([a-f0-9]{64}|v2\/[a-f0-9]{8}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{12})$/.exec(gateway.pathname);
+    if (!request ||
+        gateway.username ||
+        gateway.password ||
+        gateway.search ||
+        gateway.hash ||
+        gateway.href !== `${gateway.origin}${gateway.pathname}` ||
+        gateway.origin === repository.origin ||
+        !allowed.has(gateway.origin) ||
+        (gateway.protocol !== 'https:' &&
+            !(gateway.protocol === 'http:' && LOOPBACK_HOSTS.has(gateway.hostname)))) {
+        return { ok: false, reason: 'rejected' };
+    }
+    return { ok: true, origin: gateway.origin, requestId: request[1] };
+}
+export const workspaceRegistrationRequestSchema = z
+    .object({
+    binding: workspaceRegistrationSchema,
+    generation: z.number().int().nonnegative(),
+    runtimeEpoch: z.number().int().nonnegative(),
+    leaseFence: z.number().int().nonnegative(),
+    preparation: workspacePreparationSchema.optional(),
+    cliCredentials: z.boolean().optional(),
+})
+    .strict();
+//# sourceMappingURL=workspace-binding.js.map

package/dist/cloud-workspace/runtime/workspace-binding.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"workspace-binding.js","sourceRoot":"","sources":["../../../src/cloud-workspace/runtime/workspace-binding.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,2BAA2B,EAAE,0BAA0B,EAAE,8BAA8B,EAAE,MAAM,oBAAoB,CAAC;AAC7H,OAAO,EAAE,oCAAoC,EAAE,MAAM,4BAA4B,CAAC;AAElF,6FAA6F;AAC7F,MAAM,gCAAgC,GAAG,CAAC;KACvC,MAAM,CAAC;IACN,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE;IAC9B,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE;IAC5B,UAAU,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACrC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE;IACrC,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC;IAC1C,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IACtC,WAAW,EAAE,CAAC,CAAC,KAAK,CAAC,oCAAoC,CAAC,CAAC,QAAQ,EAAE;IACrE,8FAA8F;IAC9F,kBAAkB,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IAC1C,4GAA4G;IAC5G,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC;QACpB,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;QAC5C,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,mBAAmB,CAAC;KACpD,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CACvB,CAAC;KACD,MAAM,EAAE;KACR,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,UAAU,KAAK,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,KAAK,IAAI,CAAC,CAAC,CAAC;AAEjF,MAAM,CAAC,MAAM,2BAA2B,GAAG,CAAC,CAAC,KAAK,CAAC;IACjD,gCAAgC;IAChC,CAAC,CAAC,MAAM,CAAC;QACP,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE;QAC9B,SAAS,EAAE,CAAC,CAAC,IAAI,EAAE;QACnB,UAAU,EAAE,CAAC,CAAC,OAAO,CAAC,YAAY,CAAC;QACnC,OAAO,EAAE,CAAC,CAAC,IAAI,EAAE;QACjB,aAAa,EAAE,CAAC,CAAC,IAAI,EAAE;QACvB,UAAU,EAAE,CAAC,CAAC,IAAI,EAAE;QACpB,WAAW,EAAE,CAAC,CAAC,KAAK,CAAC,oCAAoC,CAAC,CAAC,QAAQ,EAAE;KACtE,CAAC,CAAC,MAAM,EAAE;CACZ,CAAC,CAAC;AAIH;;;GAGG;AACH,MAAM,UAAU,gBAAgB,CAAC,KAKhC;IACC,IAAI,KAAK,CAAC,UAAU,KAAK,OAAO,IAAI,KAAK,CAAC,QAAQ,IAAI,IAAI;QAAE,OAAO,SAAS,CAAC;IAC7E,IAAI,OAAO,KAAK,CAAC,gBAAgB,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,gBAAgB;QAAE,OAAO,SAAS,CAAC;IAC5F,IAAI,OAAO,KAAK,CAAC,YAAY,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,YAAY;QAAE,OAAO,SAAS,CAAC;IACpF,OAAO,EAAE,gBAAgB,EAAE,KAAK,CAAC,gBAAgB,EAAE,YAAY,EAAE,KAAK,CAAC,YAAY,EAAE,CAAC;AACxF,CAAC;AAED,oGAAoG;AACpG,MAAM,UAAU,yBAAyB,CACvC,IAA2B,EAC3B,KAA4B;IAE5B,OAAO,CACL,IAAI,CAAC,WAAW,KAAK,KAAK,CAAC,WAAW;QACtC,IAAI,CAAC,SAAS,KAAK,KAAK,CAAC,SAAS;QAClC,IAAI,CAAC,UAAU,KAAK,KAAK,CAAC,UAAU;QACpC,IAAI,CAAC,OAAO,KAAK,KAAK,CAAC,OAAO;QAC9B,IAAI,CAAC,aAAa,KAAK,KAAK,CAAC,aAAa;QAC1C,IAAI,CAAC,UAAU,KAAK,KAAK,CAAC,UAAU;QACpC,CAAC,oBAAoB,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,oBAAoB,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC,CAAC,SAAS,CAAC,CAChJ,CAAC;AACJ,CAAC;AAED,wFAAwF;AACxF,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC;KACtC,MAAM,CAAC;IACN,QAAQ,EAAE,CAAC;SACR,MAAM,EAAE;SACR,GAAG,CAAC,CAAC,CAAC;SACN,GAAG,CAAC,GAAG,CAAC;SACR,KAAK,CAAC,eAAe,CAAC;IACzB,QAAQ,EAAE,CAAC;SACR,MAAM,EAAE;SACR,GAAG,CAAC,CAAC,CAAC;SACN,GAAG,CAAC,IAAI,CAAC;SACT,KAAK,CAAC,cAAc,CAAC;IACxB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC/B,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CACjC,CAAC;KACD,MAAM,EAAE;KACR,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE;IAChB,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IAC1E,OAAO,QAAQ,GAAG,CAAC,IAAI,QAAQ,IAAI,EAAE,GAAG,MAAM,CAAC;AACjD,CAAC,CAAC,CAAC;AAGL,+EAA+E;AAC/E,MAAM,CAAC,MAAM,2BAA2B,GAAG,CAAC;KACzC,MAAM,CAAC;IACN,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,qBAAqB,EAAE,gBAAgB,CAAC,CAAC;IACvD,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC;CACtC,CAAC;KACD,MAAM,EAAE,CAAC;AAGZ,MAAM,+BAA+B,GAAG,CAAC;KACtC,MAAM,CAAC;IACN,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC;IACxB,QAAQ,EAAE,0BAA0B,CAAC,QAAQ,EAAE;IAC/C,YAAY,EAAE,8BAA8B,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IAClE,SAAS,EAAE,wBAAwB,CAAC,QAAQ,EAAE;IAC9C,SAAS,EAAE,2BAA2B,CAAC,QAAQ,EAAE;CAClD,CAAC;KACD,MAAM,EAAE;KACR,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,SAAS,KAAK,SAAS,IAAI,KAAK,CAAC,SAAS,KAAK,SAAS,CAAC;KACjF,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,2BAA2B,CAAC,KAAK,CAAC,QAAQ,CAAC;IAC1D,CAAC,CAAC,KAAK,CAAC,YAAY,KAAK,SAAS,IAAI,CAAC,KAAK,CAAC,SAAS,IAAI,CAAC,KAAK,CAAC,SAAS;IAC1E,CAAC,CAAC,KAAK,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC;AACxC,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC,CAAC,KAAK,CAAC;IAChD,+BAA+B;IAC/B,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE;CAChD,CAAC,CAAC;AAGH,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC,CAAC,WAAW,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC,CAAC;AAEpE,MAAM,UAAU,8BAA8B,CAAC,KAAa;IAC1D,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;IAC3B,IACE,GAAG,CAAC,QAAQ;QACZ,GAAG,CAAC,QAAQ;QACZ,GAAG,CAAC,MAAM;QACV,GAAG,CAAC,IAAI;QACR,CAAC,GAAG,CAAC,QAAQ,KAAK,GAAG,IAAI,GAAG,CAAC,QAAQ,KAAK,EAAE,CAAC;QAC7C,CAAC,GAAG,CAAC,QAAQ,KAAK,QAAQ;YACxB,CAAC,CAAC,GAAG,CAAC,QAAQ,KAAK,OAAO,IAAI,cAAc,CAAC,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAClE,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;IAChD,CAAC;IACD,OAAO,GAAG,CAAC,MAAM,CAAC;AACpB,CAAC;AAED,MAAM,UAAU,+BAA+B,CAAC,KAAyB;IACvE,IAAI,CAAC,KAAK,EAAE,IAAI,EAAE;QAAE,OAAO,EAAE,CAAC;IAC9B,OAAO;QACL,GAAG,IAAI,GAAG,CACR,KAAK;aACF,KAAK,CAAC,GAAG,CAAC;aACV,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;aAC1B,MAAM,CAAC,OAAO,CAAC;aACf,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,8BAA8B,CAAC,IAAI,CAAC,CAAC,CACvD;KACF,CAAC;AACJ,CAAC;AAMD,uEAAuE;AACvE,MAAM,UAAU,gCAAgC,CAC9C,QAAgB,EAChB,cAAiC,EACjC,aAAqB;IAErB,IAAI,cAAc,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,oBAAoB,EAAE,CAAC;IACpF,IAAI,OAAY,CAAC;IACjB,IAAI,UAAe,CAAC;IACpB,IAAI,CAAC;QACH,OAAO,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC5B,UAAU,GAAG,IAAI,GAAG,CAAC,aAAa,CAAC,CAAC;IACtC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;IAC3C,CAAC;IACD,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;IAClC,KAAK,MAAM,MAAM,IAAI,cAAc,EAAE,CAAC;QACpC,IAAI,CAAC;YACH,OAAO,CAAC,GAAG,CAAC,8BAA8B,CAAC,MAAM,CAAC,CAAC,CAAC;QACtD,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;QAC3C,CAAC;IACH,CAAC;IACD,MAAM,OAAO,GAAG,oGAAoG,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC5I,IACE,CAAC,OAAO;QACR,OAAO,CAAC,QAAQ;QAChB,OAAO,CAAC,QAAQ;QAChB,OAAO,CAAC,MAAM;QACd,OAAO,CAAC,IAAI;QACZ,OAAO,CAAC,IAAI,KAAK,GAAG,OAAO,CAAC,MAAM,GAAG,OAAO,CAAC,QAAQ,EAAE;QACvD,OAAO,CAAC,MAAM,KAAK,UAAU,CAAC,MAAM;QACpC,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC;QAC5B,CAAC,OAAO,CAAC,QAAQ,KAAK,QAAQ;YAC5B,CAAC,CAAC,OAAO,CAAC,QAAQ,KAAK,OAAO,IAAI,cAAc,CAAC,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,EAC1E,CAAC;QACD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;IAC3C,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;AACrE,CAAC;AAED,MAAM,CAAC,MAAM,kCAAkC,GAAG,CAAC;KAChD,MAAM,CAAC;IACN,OAAO,EAAE,2BAA2B;IACpC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;IAC1C,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;IAC5C,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;IAC1C,WAAW,EAAE,0BAA0B,CAAC,QAAQ,EAAE;IAClD,cAAc,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;CACvC,CAAC;KACD,MAAM,EAAE,CAAC"}

package/dist/cloud-workspace/runtime/workspace-directories.d.ts

@@ -0,0 +1,44 @@
+import { z } from 'zod';
+/** Stable directory identities never contain a branch name or a relative path. */
+export declare const workspaceDirectoryNameSchema: z.ZodString;
+export type WorkspaceDirectoryName = z.infer<typeof workspaceDirectoryNameSchema>;
+/** The workspace root is an orchestration session, never an engineering checkout. */
+export declare const workspaceSessionScopeSchema: z.ZodUnion<readonly [z.ZodString, z.ZodLiteral<"root">]>;
+export type WorkspaceSessionScope = z.infer<typeof workspaceSessionScopeSchema>;
+export declare const workspaceDirectoryRegistrationSchema: z.ZodObject<{
+    workspaceId: z.ZodString;
+    directoryName: z.ZodString;
+    remixId: z.ZodNullable<z.ZodString>;
+    branchName: z.ZodString;
+    sourceCommit: z.ZodOptional<z.ZodString>;
+    status: z.ZodOptional<z.ZodEnum<{
+        pending: "pending";
+        failed: "failed";
+        ready: "ready";
+        reclaimed: "reclaimed";
+    }>>;
+}, z.core.$strict>;
+export type WorkspaceDirectoryRegistration = z.infer<typeof workspaceDirectoryRegistrationSchema>;
+export declare const workspaceDiskAdmissionSchema: z.ZodObject<{
+    usagePercent: z.ZodNumber;
+    collectedAt: z.ZodString;
+}, z.core.$strict>;
+export declare function workspaceDiskAdmission(usagePercent: number): 'allowed' | 'warning' | 'paused';
+/** Collected on demand; reclaimed checkouts retain identity without consuming local bytes. */
+export declare const workspaceDirectoryStatsSchema: z.ZodObject<{
+    workspaceId: z.ZodString;
+    sizeBytes: z.ZodNumber;
+    lastUsedAt: z.ZodNullable<z.ZodString>;
+    directories: z.ZodArray<z.ZodObject<{
+        directoryName: z.ZodString;
+        sizeBytes: z.ZodNumber;
+        lastUsedAt: z.ZodNullable<z.ZodString>;
+        status: z.ZodEnum<{
+            present: "present";
+            reclaimed: "reclaimed";
+            missing: "missing";
+        }>;
+    }, z.core.$strict>>;
+}, z.core.$strict>;
+export type WorkspaceDirectoryStats = z.infer<typeof workspaceDirectoryStatsSchema>;
+//# sourceMappingURL=workspace-directories.d.ts.map

package/dist/cloud-workspace/runtime/workspace-directories.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"workspace-directories.d.ts","sourceRoot":"","sources":["../../../src/cloud-workspace/runtime/workspace-directories.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,kFAAkF;AAClF,eAAO,MAAM,4BAA4B,aAAwE,CAAC;AAClH,MAAM,MAAM,sBAAsB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,4BAA4B,CAAC,CAAC;AAElF,qFAAqF;AACrF,eAAO,MAAM,2BAA2B,0DAA6D,CAAC;AACtG,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,2BAA2B,CAAC,CAAC;AAEhF,eAAO,MAAM,oCAAoC;;;;;;;;;;;;kBAOtC,CAAC;AACZ,MAAM,MAAM,8BAA8B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oCAAoC,CAAC,CAAC;AAElG,eAAO,MAAM,4BAA4B;;;kBAG9B,CAAC;AAEZ,wBAAgB,sBAAsB,CAAC,YAAY,EAAE,MAAM,GAAG,SAAS,GAAG,SAAS,GAAG,QAAQ,CAG7F;AAED,8FAA8F;AAC9F,eAAO,MAAM,6BAA6B;;;;;;;;;;;;;;kBAU/B,CAAC;AACZ,MAAM,MAAM,uBAAuB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,6BAA6B,CAAC,CAAC"}

package/dist/cloud-workspace/runtime/workspace-directories.js

@@ -0,0 +1,34 @@
+import { z } from 'zod';
+/** Stable directory identities never contain a branch name or a relative path. */
+export const workspaceDirectoryNameSchema = z.string().max(80).regex(/^(?:basic|remix-[a-z0-9][a-z0-9-]{3,63})$/);
+/** The workspace root is an orchestration session, never an engineering checkout. */
+export const workspaceSessionScopeSchema = z.union([workspaceDirectoryNameSchema, z.literal('root')]);
+export const workspaceDirectoryRegistrationSchema = z.object({
+    workspaceId: z.string().uuid(),
+    directoryName: workspaceDirectoryNameSchema,
+    remixId: z.string().uuid().nullable(),
+    branchName: z.string().trim().min(1).max(512),
+    sourceCommit: z.string().regex(/^(?:[a-f0-9]{40}|[a-f0-9]{64})$/).optional(),
+    status: z.enum(['pending', 'ready', 'reclaimed', 'failed']).optional(),
+}).strict();
+export const workspaceDiskAdmissionSchema = z.object({
+    usagePercent: z.number().finite().min(0).max(100),
+    collectedAt: z.string().datetime(),
+}).strict();
+export function workspaceDiskAdmission(usagePercent) {
+    const percent = workspaceDiskAdmissionSchema.shape.usagePercent.parse(usagePercent);
+    return percent >= 90 ? 'paused' : percent >= 70 ? 'warning' : 'allowed';
+}
+/** Collected on demand; reclaimed checkouts retain identity without consuming local bytes. */
+export const workspaceDirectoryStatsSchema = z.object({
+    workspaceId: z.string().uuid(),
+    sizeBytes: z.number().int().nonnegative().safe(),
+    lastUsedAt: z.string().datetime().nullable(),
+    directories: z.array(z.object({
+        directoryName: workspaceDirectoryNameSchema,
+        sizeBytes: z.number().int().nonnegative().safe(),
+        lastUsedAt: z.string().datetime().nullable(),
+        status: z.enum(['present', 'reclaimed', 'missing']),
+    }).strict()),
+}).strict();
+//# sourceMappingURL=workspace-directories.js.map

package/dist/cloud-workspace/runtime/workspace-directories.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"workspace-directories.js","sourceRoot":"","sources":["../../../src/cloud-workspace/runtime/workspace-directories.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,kFAAkF;AAClF,MAAM,CAAC,MAAM,4BAA4B,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,2CAA2C,CAAC,CAAC;AAGlH,qFAAqF;AACrF,MAAM,CAAC,MAAM,2BAA2B,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,4BAA4B,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;AAGtG,MAAM,CAAC,MAAM,oCAAoC,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3D,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE;IAC9B,aAAa,EAAE,4BAA4B;IAC3C,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE;IACrC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IAC7C,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,iCAAiC,CAAC,CAAC,QAAQ,EAAE;IAC5E,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,OAAO,EAAE,WAAW,EAAE,QAAQ,CAAC,CAAC,CAAC,QAAQ,EAAE;CACvE,CAAC,CAAC,MAAM,EAAE,CAAC;AAGZ,MAAM,CAAC,MAAM,4BAA4B,GAAG,CAAC,CAAC,MAAM,CAAC;IACnD,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IACjD,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CACnC,CAAC,CAAC,MAAM,EAAE,CAAC;AAEZ,MAAM,UAAU,sBAAsB,CAAC,YAAoB;IACzD,MAAM,OAAO,GAAG,4BAA4B,CAAC,KAAK,CAAC,YAAY,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;IACpF,OAAO,OAAO,IAAI,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;AAC1E,CAAC;AAED,8FAA8F;AAC9F,MAAM,CAAC,MAAM,6BAA6B,GAAG,CAAC,CAAC,MAAM,CAAC;IACpD,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE;IAC9B,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,IAAI,EAAE;IAChD,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IAC5C,WAAW,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC;QAC5B,aAAa,EAAE,4BAA4B;QAC3C,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,IAAI,EAAE;QAChD,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;QAC5C,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,WAAW,EAAE,SAAS,CAAC,CAAC;KACpD,CAAC,CAAC,MAAM,EAAE,CAAC;CACb,CAAC,CAAC,MAAM,EAAE,CAAC"}

package/dist/database/operators.d.ts

@@ -0,0 +1,2 @@
+export { eq, inArray } from 'drizzle-orm';
+//# sourceMappingURL=operators.d.ts.map

package/dist/database/operators.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"operators.d.ts","sourceRoot":"","sources":["../../src/database/operators.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,EAAE,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC"}

package/dist/database/operators.js

@@ -0,0 +1,2 @@
+export { eq, inArray } from 'drizzle-orm';
+//# sourceMappingURL=operators.js.map

package/dist/database/operators.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"operators.js","sourceRoot":"","sources":["../../src/database/operators.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,EAAE,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC"}

package/dist/database/postgres-adapter.js

@@ -2,7 +2,7 @@
 // 现有 backend 已有自己的数据库初始化逻辑；common 这里提供一个可选 adapter，
 // 方便后续统一数据访问层。
 //
-// Pool 参数对齐 `packages/backend/src/core/database/index.ts`：
+// Pool 参数对齐 `packages/backend-business-server/src/core/database/index.ts`：
 // - keepAlive：阻止云 LB (Load Balancer, 负载均衡) 静默 RST 空闲连接
 // - idleTimeoutMillis：Pool 自身主动回收空闲连接，远短于云 LB idle timeout
 // - statement_timeout / query_timeout：查询兜底，防止请求挂死

package/dist/database/postgres-adapter.js.map

@@ -1 +1 @@
-{"version":3,"file":"postgres-adapter.js","sourceRoot":"","sources":["../../src/database/postgres-adapter.ts"],"names":[],"mappings":"AAAA,qBAAqB;AACrB,oDAAoD;AACpD,eAAe;AACf,EAAE;AACF,2DAA2D;AAC3D,uDAAuD;AACvD,2DAA2D;AAC3D,kDAAkD;AAElD,OAAO,EAAE,OAAO,EAAE,MAAM,2BAA2B,CAAC;AACpD,OAAO,EAAE,IAAI,EAAE,MAAM,IAAI,CAAC;AAO1B,MAAM,UAAU,qBAAqB,CAAC,gBAAwB;IAC5D,MAAM,IAAI,GAAG,IAAI,IAAI,CAAC;QACpB,gBAAgB;QAChB,GAAG,EAAE,EAAE;QACP,iBAAiB,EAAE,MAAM;QACzB,uBAAuB,EAAE,MAAM;QAC/B,SAAS,EAAE,IAAI;QACf,2BAA2B,EAAE,MAAM;QACnC,iBAAiB,EAAE,MAAM;QACzB,aAAa,EAAE,MAAM;KACtB,CAAC,CAAC;IACH,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACzB,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;AACtB,CAAC"}
+{"version":3,"file":"postgres-adapter.js","sourceRoot":"","sources":["../../src/database/postgres-adapter.ts"],"names":[],"mappings":"AAAA,qBAAqB;AACrB,oDAAoD;AACpD,eAAe;AACf,EAAE;AACF,2EAA2E;AAC3E,uDAAuD;AACvD,2DAA2D;AAC3D,kDAAkD;AAElD,OAAO,EAAE,OAAO,EAAE,MAAM,2BAA2B,CAAC;AACpD,OAAO,EAAE,IAAI,EAAE,MAAM,IAAI,CAAC;AAO1B,MAAM,UAAU,qBAAqB,CAAC,gBAAwB;IAC5D,MAAM,IAAI,GAAG,IAAI,IAAI,CAAC;QACpB,gBAAgB;QAChB,GAAG,EAAE,EAAE;QACP,iBAAiB,EAAE,MAAM;QACzB,uBAAuB,EAAE,MAAM;QAC/B,SAAS,EAAE,IAAI;QACf,2BAA2B,EAAE,MAAM;QACnC,iBAAiB,EAAE,MAAM;QACzB,aAAa,EAAE,MAAM;KACtB,CAAC,CAAC;IACH,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACzB,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;AACtB,CAAC"}

package/dist/database/schema.d.ts

@@ -2,7 +2,7 @@
  * SQLite Schema for CLI Offline Mode
  *
  * ⚠️ 重要提示：
- * 此 schema 是 packages/backend/src/core/database/schema.ts（PostgreSQL）的简化版本。
+ * 此 schema 是 packages/backend-business-server/src/core/database/schema.ts（PostgreSQL）的简化版本。
  * 主要字段需要与 backend schema 保持同步，以确保项目导入/导出的兼容性。
  *
  * 主要差异：

package/dist/database/schema.js

@@ -3,7 +3,7 @@ import { sqliteTable, text, integer } from 'drizzle-orm/sqlite-core';
  * SQLite Schema for CLI Offline Mode
  *
  * ⚠️ 重要提示：
- * 此 schema 是 packages/backend/src/core/database/schema.ts（PostgreSQL）的简化版本。
+ * 此 schema 是 packages/backend-business-server/src/core/database/schema.ts（PostgreSQL）的简化版本。
  * 主要字段需要与 backend schema 保持同步，以确保项目导入/导出的兼容性。
  *
  * 主要差异：

package/dist/model-proxy/index.d.ts

@@ -0,0 +1,26 @@
+/** Values accepted by the internal model transport; executable code never crosses it. */
+export type ModelWireValue = null | boolean | number | string | ModelWireValue[] | {
+    [key: string]: ModelWireValue;
+};
+type WireHooks = {
+    callback?: (fn: (...args: unknown[]) => unknown) => string;
+    onCallback?: (id: string, args: unknown[]) => unknown;
+    signal?: AbortSignal;
+    onSignal?: (signal: AbortSignal) => void;
+};
+export declare function encodeModelValue(value: unknown, hooks?: WireHooks): ModelWireValue;
+export declare function decodeModelValue(value: ModelWireValue, hooks?: WireHooks): unknown;
+export type ModelOperationEvent = {
+    type: 'callback';
+    id: string;
+    args: ModelWireValue;
+} | {
+    type: 'result';
+    value: ModelWireValue;
+} | {
+    type: 'error';
+    status: number;
+    code: string;
+};
+export {};
+//# sourceMappingURL=index.d.ts.map

package/dist/model-proxy/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/model-proxy/index.ts"],"names":[],"mappings":"AAAA,yFAAyF;AACzF,MAAM,MAAM,cAAc,GAAG,IAAI,GAAG,OAAO,GAAG,MAAM,GAAG,MAAM,GAAG,cAAc,EAAE,GAAG;IAAE,CAAC,GAAG,EAAE,MAAM,GAAG,cAAc,CAAA;CAAE,CAAC;AACrH,KAAK,SAAS,GAAG;IACf,QAAQ,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,IAAI,EAAE,OAAO,EAAE,KAAK,OAAO,KAAK,MAAM,CAAC;IAC3D,UAAU,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,OAAO,CAAC;IACtD,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,QAAQ,CAAC,EAAE,CAAC,MAAM,EAAE,WAAW,KAAK,IAAI,CAAC;CAC1C,CAAC;AAGF,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,OAAO,EAAE,KAAK,GAAE,SAAc,GAAG,cAAc,CA6BtF;AAED,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,cAAc,EAAE,KAAK,GAAE,SAAc,GAAG,OAAO,CA6BtF;AAED,MAAM,MAAM,mBAAmB,GAC3B;IAAE,IAAI,EAAE,UAAU,CAAC;IAAC,EAAE,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,cAAc,CAAA;CAAE,GACtD;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,KAAK,EAAE,cAAc,CAAA;CAAE,GACzC;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC"}

package/dist/model-proxy/index.js

@@ -0,0 +1,81 @@
+const marker = '__playcraft_model_wire_v1__';
+export function encodeModelValue(value, hooks = {}) {
+    if (value === undefined)
+        return { [marker]: 'undefined' };
+    if (value === null || typeof value === 'string' || typeof value === 'boolean')
+        return value;
+    if (typeof value === 'number') {
+        if (!Number.isFinite(value))
+            throw new Error('invalid_model_transport_number');
+        return value;
+    }
+    if (typeof value === 'function') {
+        if (!hooks.callback)
+            throw new Error('model_transport_callback_not_allowed');
+        return { [marker]: 'callback', id: hooks.callback(value) };
+    }
+    if (value instanceof AbortSignal) {
+        hooks.onSignal?.(value);
+        return { [marker]: 'signal' };
+    }
+    if (value instanceof Date)
+        return { [marker]: 'date', value: value.toISOString() };
+    if (value instanceof URL)
+        return { [marker]: 'url', value: value.toString() };
+    if (value instanceof Error)
+        return { [marker]: 'error', name: value.name, message: value.message.slice(0, 2000) };
+    if (Buffer.isBuffer(value))
+        return { [marker]: 'buffer', value: value.toString('base64') };
+    if (value instanceof Uint8Array)
+        return { [marker]: 'bytes', value: Buffer.from(value).toString('base64') };
+    if (Array.isArray(value))
+        return value.map((item) => encodeModelValue(item, hooks));
+    if (typeof value !== 'object')
+        throw new Error('invalid_model_transport_value');
+    const result = {};
+    for (const [key, item] of Object.entries(value)) {
+        if (key === marker || key === '__proto__' || key === 'constructor' || key === 'prototype')
+            throw new Error('invalid_model_transport_key');
+        result[key] = encodeModelValue(item, hooks);
+    }
+    return result;
+}
+export function decodeModelValue(value, hooks = {}) {
+    if (value === null || typeof value !== 'object')
+        return value;
+    if (Array.isArray(value))
+        return value.map((item) => decodeModelValue(item, hooks));
+    if (marker in value) {
+        const kind = value[marker];
+        if (kind === 'undefined')
+            return undefined;
+        if (kind === 'signal')
+            return hooks.signal;
+        if (kind === 'callback' && typeof value.id === 'string' && hooks.onCallback)
+            return (...args) => hooks.onCallback(value.id, args);
+        if (kind === 'error' && typeof value.name === 'string' && typeof value.message === 'string') {
+            const error = new Error(value.message);
+            error.name = value.name;
+            return error;
+        }
+        if (typeof value.value === 'string') {
+            if (kind === 'buffer')
+                return Buffer.from(value.value, 'base64');
+            if (kind === 'bytes')
+                return Uint8Array.from(Buffer.from(value.value, 'base64'));
+            if (kind === 'date')
+                return new Date(value.value);
+            if (kind === 'url')
+                return new URL(value.value);
+        }
+        throw new Error('invalid_model_transport_tag');
+    }
+    const result = {};
+    for (const [key, item] of Object.entries(value)) {
+        if (key === '__proto__' || key === 'constructor' || key === 'prototype')
+            throw new Error('invalid_model_transport_key');
+        result[key] = decodeModelValue(item, hooks);
+    }
+    return result;
+}
+//# sourceMappingURL=index.js.map

package/dist/model-proxy/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/model-proxy/index.ts"],"names":[],"mappings":"AAQA,MAAM,MAAM,GAAG,6BAA6B,CAAC;AAE7C,MAAM,UAAU,gBAAgB,CAAC,KAAc,EAAE,QAAmB,EAAE;IACpE,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,EAAE,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,CAAC;IAC1D,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,KAAK,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IAC5F,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;QAC/E,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,OAAO,KAAK,KAAK,UAAU,EAAE,CAAC;QAChC,IAAI,CAAC,KAAK,CAAC,QAAQ;YAAE,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;QAC7E,OAAO,EAAE,CAAC,MAAM,CAAC,EAAE,UAAU,EAAE,EAAE,EAAE,KAAK,CAAC,QAAQ,CAAC,KAAwC,CAAC,EAAE,CAAC;IAChG,CAAC;IACD,IAAI,KAAK,YAAY,WAAW,EAAE,CAAC;QACjC,KAAK,CAAC,QAAQ,EAAE,CAAC,KAAK,CAAC,CAAC;QACxB,OAAO,EAAE,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,CAAC;IAChC,CAAC;IACD,IAAI,KAAK,YAAY,IAAI;QAAE,OAAO,EAAE,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;IACnF,IAAI,KAAK,YAAY,GAAG;QAAE,OAAO,EAAE,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC,QAAQ,EAAE,EAAE,CAAC;IAC9E,IAAI,KAAK,YAAY,KAAK;QAAE,OAAO,EAAE,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,EAAE,CAAC;IAClH,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;IAC3F,IAAI,KAAK,YAAY,UAAU;QAAE,OAAO,EAAE,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;IAC5G,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,gBAAgB,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC;IACpF,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;IAChF,MAAM,MAAM,GAAmC,EAAE,CAAC;IAClD,KAAK,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAChD,IAAI,GAAG,KAAK,MAAM,IAAI,GAAG,KAAK,WAAW,IAAI,GAAG,KAAK,aAAa,IAAI,GAAG,KAAK,WAAW;YACvF,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;QACjD,MAAM,CAAC,GAAG,CAAC,GAAG,gBAAgB,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IAC9C,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,KAAqB,EAAE,QAAmB,EAAE;IAC3E,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC9D,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,gBAAgB,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC;IACpF,IAAI,MAAM,IAAI,KAAK,EAAE,CAAC;QACpB,MAAM,IAAI,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC;QAC3B,IAAI,IAAI,KAAK,WAAW;YAAE,OAAO,SAAS,CAAC;QAC3C,IAAI,IAAI,KAAK,QAAQ;YAAE,OAAO,KAAK,CAAC,MAAM,CAAC;QAC3C,IAAI,IAAI,KAAK,UAAU,IAAI,OAAO,KAAK,CAAC,EAAE,KAAK,QAAQ,IAAI,KAAK,CAAC,UAAU;YACzE,OAAO,CAAC,GAAG,IAAe,EAAE,EAAE,CAAC,KAAK,CAAC,UAAW,CAAC,KAAK,CAAC,EAAY,EAAE,IAAI,CAAC,CAAC;QAC7E,IAAI,IAAI,KAAK,OAAO,IAAI,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,IAAI,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;YAC5F,MAAM,KAAK,GAAG,IAAI,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YACvC,KAAK,CAAC,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC;YACxB,OAAO,KAAK,CAAC;QACf,CAAC;QACD,IAAI,OAAO,KAAK,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;YACpC,IAAI,IAAI,KAAK,QAAQ;gBAAE,OAAO,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;YACjE,IAAI,IAAI,KAAK,OAAO;gBAAE,OAAO,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAC;YACjF,IAAI,IAAI,KAAK,MAAM;gBAAE,OAAO,IAAI,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YAClD,IAAI,IAAI,KAAK,KAAK;gBAAE,OAAO,IAAI,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAClD,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;IACjD,CAAC;IACD,MAAM,MAAM,GAA4B,EAAE,CAAC;IAC3C,KAAK,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAChD,IAAI,GAAG,KAAK,WAAW,IAAI,GAAG,KAAK,aAAa,IAAI,GAAG,KAAK,WAAW;YACrE,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;QACjD,MAAM,CAAC,GAAG,CAAC,GAAG,gBAAgB,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IAC9C,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/project-skills/bundle-archive.d.ts

@@ -0,0 +1,21 @@
+type SkillRegistryValidationIssue = {
+    severity: 'error' | 'warning';
+    code: 'bundle_too_large' | 'invalid_manifest' | 'unsafe_archive_entry' | 'unsupported_file' | 'duplicate_path';
+    message: string;
+    path?: string;
+};
+export type SkillBundleFile = {
+    path: string;
+    data: Buffer;
+};
+export declare function createCanonicalBundleArchive(files: readonly SkillBundleFile[]): Buffer;
+export type BundleArchiveExtractionOptions = {
+    maxArchiveBytes?: number;
+    maxExpandedBytes?: number;
+};
+export declare function extractBundleArchive(archive: Buffer, options?: BundleArchiveExtractionOptions): {
+    files: SkillBundleFile[];
+    issues: SkillRegistryValidationIssue[];
+};
+export {};
+//# sourceMappingURL=bundle-archive.d.ts.map

package/dist/project-skills/bundle-archive.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"bundle-archive.d.ts","sourceRoot":"","sources":["../../src/project-skills/bundle-archive.ts"],"names":[],"mappings":"AAEA,KAAK,4BAA4B,GAAG;IAAE,QAAQ,EAAE,OAAO,GAAG,SAAS,CAAC;IAAC,IAAI,EAAE,kBAAkB,GAAG,kBAAkB,GAAG,sBAAsB,GAAG,kBAAkB,GAAG,gBAAgB,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC;AAMtN,MAAM,MAAM,eAAe,GAAG;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;CACd,CAAC;AAEF,wBAAgB,4BAA4B,CAAC,KAAK,EAAE,SAAS,eAAe,EAAE,GAAG,MAAM,CAetF;AAED,MAAM,MAAM,8BAA8B,GAAG;IAC3C,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC3B,CAAC;AAEF,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,GAAE,8BAAmC,GAAG;IACnG,KAAK,EAAE,eAAe,EAAE,CAAC;IACzB,MAAM,EAAE,4BAA4B,EAAE,CAAC;CACxC,CAyEA"}

package/dist/project-skills/bundle-archive.js

@@ -0,0 +1,165 @@
+import { gunzipSync, gzipSync } from 'node:zlib';
+import { normalizeBundlePath } from './bundle-path.js';
+const TAR_BLOCK_SIZE = 512;
+const DEFAULT_MAX_ARCHIVE_BYTES = 64 * 1024 * 1024;
+const DEFAULT_MAX_EXPANDED_BYTES = 72 * 1024 * 1024;
+export function createCanonicalBundleArchive(files) {
+    const sorted = [...files].sort((left, right) => left.path.localeCompare(right.path));
+    const entries = sorted.map((file) => {
+        const path = normalizeBundlePath(file.path);
+        if (!path)
+            throw new Error(`Cannot archive an unsafe bundle path: ${file.path}`);
+        const { name, prefix } = splitTarPath(path);
+        const header = createTarHeader(name, prefix, file.data.length);
+        const padding = Buffer.alloc(paddedLength(file.data.length) - file.data.length);
+        return Buffer.concat([header, file.data, padding]);
+    });
+    const archive = gzipSync(Buffer.concat([...entries, Buffer.alloc(TAR_BLOCK_SIZE * 2)]));
+    // zlib writes the host operating system into the gzip header (macOS=19, Linux=3).
+    // Preserve the established Linux artifact format on every build host.
+    archive[9] = 3;
+    return archive;
+}
+export function extractBundleArchive(archive, options = {}) {
+    const issues = [];
+    const maxArchiveBytes = options.maxArchiveBytes ?? DEFAULT_MAX_ARCHIVE_BYTES;
+    const maxExpandedBytes = options.maxExpandedBytes ?? DEFAULT_MAX_EXPANDED_BYTES;
+    if (archive.length > maxArchiveBytes) {
+        return {
+            files: [],
+            issues: [{ severity: 'error', code: 'bundle_too_large', message: `The compressed bundle exceeds ${maxArchiveBytes} bytes.` }],
+        };
+    }
+    let contents;
+    try {
+        contents = gunzipSync(archive, { maxOutputLength: maxExpandedBytes });
+    }
+    catch {
+        return {
+            files: [],
+            issues: [{ severity: 'error', code: 'invalid_manifest', message: 'The bundle is not a valid gzip archive.' }],
+        };
+    }
+    const files = [];
+    const seen = new Set();
+    let offset = 0;
+    while (offset + TAR_BLOCK_SIZE <= contents.length) {
+        const header = contents.subarray(offset, offset + TAR_BLOCK_SIZE);
+        if (header.every((byte) => byte === 0))
+            break;
+        const parsed = parseTarHeader(header);
+        if (!parsed) {
+            issues.push({ severity: 'error', code: 'unsafe_archive_entry', message: 'The bundle contains an invalid tar entry.' });
+            break;
+        }
+        const path = normalizeBundlePath(parsed.path);
+        if (!path) {
+            issues.push({ severity: 'error', code: 'unsafe_archive_entry', message: `The bundle contains an unsafe tar path: ${parsed.path}` });
+            break;
+        }
+        if (parsed.type !== '0' && parsed.type !== '') {
+            issues.push({
+                severity: 'error',
+                code: 'unsafe_archive_entry',
+                message: `The bundle contains a non-regular tar entry: ${path}`,
+                path,
+            });
+            break;
+        }
+        if ((parsed.mode & 0o111) !== 0) {
+            issues.push({
+                severity: 'error',
+                code: 'unsupported_file',
+                message: `The bundle contains an executable tar entry: ${path}`,
+                path,
+            });
+            break;
+        }
+        const contentStart = offset + TAR_BLOCK_SIZE;
+        const contentEnd = contentStart + parsed.size;
+        if (parsed.size < 0 || contentEnd > contents.length) {
+            issues.push({ severity: 'error', code: 'unsafe_archive_entry', message: `The bundle entry is truncated: ${path}`, path });
+            break;
+        }
+        if (seen.has(path)) {
+            issues.push({ severity: 'error', code: 'duplicate_path', message: `The bundle contains a duplicate path: ${path}`, path });
+            break;
+        }
+        seen.add(path);
+        files.push({ path, data: Buffer.from(contents.subarray(contentStart, contentEnd)) });
+        offset = contentStart + paddedLength(parsed.size);
+    }
+    if (!issues.length && offset < contents.length && !contents.subarray(offset).every((byte) => byte === 0)) {
+        issues.push({ severity: 'error', code: 'unsafe_archive_entry', message: 'The bundle has trailing non-tar data.' });
+    }
+    return { files, issues };
+}
+function createTarHeader(name, prefix, size) {
+    const header = Buffer.alloc(TAR_BLOCK_SIZE);
+    writeString(header, 0, 100, name);
+    writeOctal(header, 100, 8, 0o644);
+    writeOctal(header, 108, 8, 0);
+    writeOctal(header, 116, 8, 0);
+    writeOctal(header, 124, 12, size);
+    writeOctal(header, 136, 12, 0);
+    header.fill(0x20, 148, 156);
+    writeString(header, 156, 1, '0');
+    writeString(header, 257, 6, 'ustar\0');
+    writeString(header, 263, 2, '00');
+    writeString(header, 345, 155, prefix);
+    const checksum = header.reduce((total, value) => total + value, 0);
+    const checksumValue = `${checksum.toString(8).padStart(6, '0')}\0 `;
+    writeString(header, 148, 8, checksumValue);
+    return header;
+}
+function parseTarHeader(header) {
+    const expectedChecksum = readOctal(header, 148, 8);
+    const checksumHeader = Buffer.from(header);
+    checksumHeader.fill(0x20, 148, 156);
+    const actualChecksum = checksumHeader.reduce((total, value) => total + value, 0);
+    const name = readString(header, 0, 100);
+    const prefix = readString(header, 345, 155);
+    const path = prefix ? `${prefix}/${name}` : name;
+    const size = readOctal(header, 124, 12);
+    const mode = readOctal(header, 100, 8);
+    const type = readString(header, 156, 1);
+    if (expectedChecksum === null || expectedChecksum !== actualChecksum || size === null || mode === null || !path)
+        return null;
+    return { path, size, mode, type };
+}
+function splitTarPath(path) {
+    if (Buffer.byteLength(path) <= 100)
+        return { name: path, prefix: '' };
+    const slash = path.lastIndexOf('/');
+    if (slash <= 0)
+        throw new Error(`Bundle path is too long for a tar archive: ${path}`);
+    const prefix = path.slice(0, slash);
+    const name = path.slice(slash + 1);
+    if (Buffer.byteLength(prefix) > 155 || Buffer.byteLength(name) > 100) {
+        throw new Error(`Bundle path is too long for a tar archive: ${path}`);
+    }
+    return { name, prefix };
+}
+function writeString(buffer, offset, length, value) {
+    const encoded = Buffer.from(value);
+    if (encoded.length > length)
+        throw new Error(`Tar header value exceeds ${length} bytes.`);
+    encoded.copy(buffer, offset);
+}
+function writeOctal(buffer, offset, length, value) {
+    const encoded = `${value.toString(8).padStart(length - 1, '0')}\0`;
+    writeString(buffer, offset, length, encoded);
+}
+function readString(buffer, offset, length) {
+    return buffer.subarray(offset, offset + length).toString('utf8').replace(/\0.*$/, '').trim();
+}
+function readOctal(buffer, offset, length) {
+    const value = readString(buffer, offset, length);
+    if (!value)
+        return 0;
+    return /^[0-7]+$/.test(value) ? Number.parseInt(value, 8) : null;
+}
+function paddedLength(length) {
+    return Math.ceil(length / TAR_BLOCK_SIZE) * TAR_BLOCK_SIZE;
+}
+//# sourceMappingURL=bundle-archive.js.map