@playcraft/common 0.1.42 → 0.1.44-beta

package/dist/cloud-workspace/runtime/directory-attachments.js

@@ -0,0 +1,30 @@
+import { z } from 'zod';
+import { attachmentUploadSchema, WORKSPACE_ATTACHMENT_MAX_BYTES, WORKSPACE_VIDEO_ATTACHMENT_MAX_BYTES, WORKSPACE_VIDEO_ATTACHMENT_MIME_TYPES } from './attachments.js';
+import { workspaceLibraryFilePathSchema } from './library-attachments.js';
+export const WORKSPACE_DIRECTORY_ATTACHMENT_MAX_FILES = 512;
+export const WORKSPACE_DIRECTORY_ATTACHMENT_MAX_BYTES = 100 * 1024 * 1024;
+export const workspaceDirectoryAttachmentFilePathSchema = workspaceLibraryFilePathSchema.refine(path => path.split('/').every(part => attachmentUploadSchema.shape.name.safeParse(part).success && new TextEncoder().encode(part).length <= 255), 'invalid_directory_file_path');
+const videoType = (file) => ({ mp4: 'video/mp4', webm: 'video/webm', mov: 'video/quicktime' }[/\.([^.\/]+)$/.exec(file.path)?.[1]?.toLowerCase() ?? ''] ?? file.mimeType);
+export const workspaceDirectoryAttachmentUploadSchema = z.object({
+    name: attachmentUploadSchema.shape.name.refine(name => workspaceDirectoryAttachmentFilePathSchema.safeParse(name).success),
+    files: z.array(z.object({
+        path: workspaceDirectoryAttachmentFilePathSchema,
+        size: z.number().int().nonnegative().max(WORKSPACE_VIDEO_ATTACHMENT_MAX_BYTES),
+        mimeType: z.string().min(1).max(255),
+    }).strict()).min(1).max(WORKSPACE_DIRECTORY_ATTACHMENT_MAX_FILES),
+}).strict().superRefine((directory, context) => {
+    const paths = directory.files.map(file => file.path);
+    if (new Set(paths).size !== paths.length || paths.some(path => paths.some(other => other.startsWith(`${path}/`))))
+        context.addIssue({ code: 'custom', message: 'duplicate_directory_file', path: ['files'] });
+    if (directory.files.reduce((total, file) => total + file.size, 0) > WORKSPACE_DIRECTORY_ATTACHMENT_MAX_BYTES)
+        context.addIssue({ code: 'custom', message: 'directory_attachment_too_large', path: ['files'] });
+    for (const [index, file] of directory.files.entries()) {
+        const mimeType = videoType(file);
+        const video = WORKSPACE_VIDEO_ATTACHMENT_MIME_TYPES.includes(mimeType);
+        if (file.size > (video ? WORKSPACE_VIDEO_ATTACHMENT_MAX_BYTES : WORKSPACE_ATTACHMENT_MAX_BYTES))
+            context.addIssue({ code: 'custom', message: 'directory_file_too_large', path: ['files', index, 'size'] });
+        if (mimeType.startsWith('video/') && !video)
+            context.addIssue({ code: 'custom', message: 'invalid_video_attachment', path: ['files', index, 'mimeType'] });
+    }
+}).transform(directory => ({ ...directory, files: directory.files.map(file => ({ ...file, mimeType: videoType(file) })) }));
+//# sourceMappingURL=directory-attachments.js.map

package/dist/cloud-workspace/runtime/directory-attachments.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"directory-attachments.js","sourceRoot":"","sources":["../../../src/cloud-workspace/runtime/directory-attachments.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,sBAAsB,EAAE,8BAA8B,EAAE,oCAAoC,EAAE,qCAAqC,EAAE,MAAM,kBAAkB,CAAC;AACvK,OAAO,EAAE,8BAA8B,EAAE,MAAM,0BAA0B,CAAC;AAE1E,MAAM,CAAC,MAAM,wCAAwC,GAAG,GAAG,CAAC;AAC5D,MAAM,CAAC,MAAM,wCAAwC,GAAG,GAAG,GAAG,IAAI,GAAG,IAAI,CAAC;AAC1E,MAAM,CAAC,MAAM,0CAA0C,GAAG,8BAA8B,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CACrG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,sBAAsB,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,OAAO,IAAI,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,IAAI,GAAG,CAAC,EACxI,6BAA6B,CAAC,CAAC;AAEjC,MAAM,SAAS,GAAG,CAAC,IAAwC,EAAE,EAAE,CAC7D,CAAC,EAAE,GAAG,EAAE,WAAW,EAAE,IAAI,EAAE,YAAY,EAAE,GAAG,EAAE,iBAAiB,EAA6B,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAA,CAAC;AAE1K,MAAM,CAAC,MAAM,wCAAwC,GAAG,CAAC,CAAC,MAAM,CAAC;IAC/D,IAAI,EAAE,sBAAsB,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,0CAA0C,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC;IAC1H,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC;QACtB,IAAI,EAAE,0CAA0C;QAChD,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,GAAG,CAAC,oCAAoC,CAAC;QAC9E,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;KACrC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,wCAAwC,CAAC;CAClE,CAAC,CAAC,MAAM,EAAE,CAAC,WAAW,CAAC,CAAC,SAAS,EAAE,OAAO,EAAE,EAAE;IAC7C,MAAM,KAAK,GAAG,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACrD,IAAI,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,KAAK,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC;QAC/G,OAAO,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,0BAA0B,EAAE,IAAI,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IAC7F,IAAI,SAAS,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,KAAK,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,GAAG,wCAAwC;QAC1G,OAAO,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,gCAAgC,EAAE,IAAI,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IACnG,KAAK,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,SAAS,CAAC,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC;QACtD,MAAM,QAAQ,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;QACjC,MAAM,KAAK,GAAI,qCAA2D,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QAC9F,IAAI,IAAI,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,oCAAoC,CAAC,CAAC,CAAC,8BAA8B,CAAC;YAC7F,OAAO,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,0BAA0B,EAAE,IAAI,EAAE,CAAC,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC;QAC5G,IAAI,QAAQ,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK;YACzC,OAAO,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,0BAA0B,EAAE,IAAI,EAAE,CAAC,OAAO,EAAE,KAAK,EAAE,UAAU,CAAC,EAAE,CAAC,CAAC;IAClH,CAAC;AACH,CAAC,CAAC,CAAC,SAAS,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,EAAE,GAAG,SAAS,EAAE,KAAK,EAAE,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,EAAE,GAAG,IAAI,EAAE,QAAQ,EAAE,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC"}

package/dist/cloud-workspace/runtime/errors.d.ts

@@ -0,0 +1,26 @@
+import { z } from 'zod';
+export declare const RUNTIME_ERROR_CODES: readonly ["protocol_incompatible", "unauthenticated", "untrusted_runtime_field", "idempotency_conflict", "uncertain_operation", "generation_mismatch", "stale_lease", "capability_unavailable", "identity_unavailable", "duplicate_instance", "invalid_config"];
+export type RuntimeErrorCode = (typeof RUNTIME_ERROR_CODES)[number];
+export declare const runtimeErrorSchema: z.ZodObject<{
+    code: z.ZodEnum<{
+        protocol_incompatible: "protocol_incompatible";
+        generation_mismatch: "generation_mismatch";
+        stale_lease: "stale_lease";
+        unauthenticated: "unauthenticated";
+        untrusted_runtime_field: "untrusted_runtime_field";
+        idempotency_conflict: "idempotency_conflict";
+        uncertain_operation: "uncertain_operation";
+        capability_unavailable: "capability_unavailable";
+        identity_unavailable: "identity_unavailable";
+        duplicate_instance: "duplicate_instance";
+        invalid_config: "invalid_config";
+    }>;
+    reason: z.ZodString;
+    operationId: z.ZodOptional<z.ZodString>;
+    currentRevision: z.ZodOptional<z.ZodNumber>;
+    retryAfterMs: z.ZodOptional<z.ZodNumber>;
+}, z.core.$strict>;
+export type RuntimeError = z.infer<typeof runtimeErrorSchema>;
+export declare function runtimeError(code: RuntimeErrorCode, reason: string, extra?: Omit<RuntimeError, 'code' | 'reason'>): RuntimeError;
+export declare const HTTP_STATUS_BY_ERROR: Record<RuntimeErrorCode, number>;
+//# sourceMappingURL=errors.d.ts.map

package/dist/cloud-workspace/runtime/errors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../../../src/cloud-workspace/runtime/errors.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,eAAO,MAAM,mBAAmB,iQAYtB,CAAC;AAEX,MAAM,MAAM,gBAAgB,GAAG,CAAC,OAAO,mBAAmB,CAAC,CAAC,MAAM,CAAC,CAAC;AAEpE,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;;;;;;kBAQpB,CAAC;AAEZ,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAE9D,wBAAgB,YAAY,CAC1B,IAAI,EAAE,gBAAgB,EACtB,MAAM,EAAE,MAAM,EACd,KAAK,GAAE,IAAI,CAAC,YAAY,EAAE,MAAM,GAAG,QAAQ,CAAM,GAChD,YAAY,CAEd;AAED,eAAO,MAAM,oBAAoB,EAAE,MAAM,CAAC,gBAAgB,EAAE,MAAM,CAYjE,CAAC"}

package/dist/cloud-workspace/runtime/errors.js

@@ -0,0 +1,40 @@
+import { z } from 'zod';
+export const RUNTIME_ERROR_CODES = [
+    'protocol_incompatible',
+    'unauthenticated',
+    'untrusted_runtime_field',
+    'idempotency_conflict',
+    'uncertain_operation',
+    'generation_mismatch',
+    'stale_lease',
+    'capability_unavailable',
+    'identity_unavailable',
+    'duplicate_instance',
+    'invalid_config',
+];
+export const runtimeErrorSchema = z
+    .object({
+    code: z.enum(RUNTIME_ERROR_CODES),
+    reason: z.string().min(1).max(256),
+    operationId: z.string().min(1).max(128).optional(),
+    currentRevision: z.number().int().nonnegative().optional(),
+    retryAfterMs: z.number().int().nonnegative().optional(),
+})
+    .strict();
+export function runtimeError(code, reason, extra = {}) {
+    return runtimeErrorSchema.parse({ code, reason, ...extra });
+}
+export const HTTP_STATUS_BY_ERROR = {
+    protocol_incompatible: 409,
+    unauthenticated: 401,
+    untrusted_runtime_field: 400,
+    idempotency_conflict: 409,
+    uncertain_operation: 409,
+    generation_mismatch: 409,
+    stale_lease: 409,
+    capability_unavailable: 409,
+    identity_unavailable: 503,
+    duplicate_instance: 409,
+    invalid_config: 500,
+};
+//# sourceMappingURL=errors.js.map

package/dist/cloud-workspace/runtime/errors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../../../src/cloud-workspace/runtime/errors.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,MAAM,CAAC,MAAM,mBAAmB,GAAG;IACjC,uBAAuB;IACvB,iBAAiB;IACjB,yBAAyB;IACzB,sBAAsB;IACtB,qBAAqB;IACrB,qBAAqB;IACrB,aAAa;IACb,wBAAwB;IACxB,sBAAsB;IACtB,oBAAoB;IACpB,gBAAgB;CACR,CAAC;AAIX,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC;KAChC,MAAM,CAAC;IACN,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC;IACjC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IAClC,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;IAClD,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE;IAC1D,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE;CACxD,CAAC;KACD,MAAM,EAAE,CAAC;AAIZ,MAAM,UAAU,YAAY,CAC1B,IAAsB,EACtB,MAAc,EACd,QAA+C,EAAE;IAEjD,OAAO,kBAAkB,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,KAAK,EAAE,CAAC,CAAC;AAC9D,CAAC;AAED,MAAM,CAAC,MAAM,oBAAoB,GAAqC;IACpE,qBAAqB,EAAE,GAAG;IAC1B,eAAe,EAAE,GAAG;IACpB,uBAAuB,EAAE,GAAG;IAC5B,oBAAoB,EAAE,GAAG;IACzB,mBAAmB,EAAE,GAAG;IACxB,mBAAmB,EAAE,GAAG;IACxB,WAAW,EAAE,GAAG;IAChB,sBAAsB,EAAE,GAAG;IAC3B,oBAAoB,EAAE,GAAG;IACzB,kBAAkB,EAAE,GAAG;IACvB,cAAc,EAAE,GAAG;CACpB,CAAC"}

package/dist/cloud-workspace/runtime/events.d.ts

@@ -0,0 +1,107 @@
+import { z } from 'zod';
+export declare const EVENT_STREAM_KINDS: readonly ["session", "workspace", "runtime"];
+export type EventStreamKind = (typeof EVENT_STREAM_KINDS)[number];
+export declare const eventStreamKindSchema: z.ZodEnum<{
+    session: "session";
+    runtime: "runtime";
+    workspace: "workspace";
+}>;
+export declare const sourceEventIdSchema: z.ZodObject<{
+    runtimeId: z.ZodString;
+    generation: z.ZodNumber;
+    runtimeEpoch: z.ZodNumber;
+    sourceSequence: z.ZodNumber;
+}, z.core.$strict>;
+export type SourceEventId = z.infer<typeof sourceEventIdSchema>;
+export declare const publicEventCursorSchema: z.ZodObject<{
+    streamKind: z.ZodEnum<{
+        session: "session";
+        runtime: "runtime";
+        workspace: "workspace";
+    }>;
+    streamId: z.ZodString;
+    sequence: z.ZodNumber;
+}, z.core.$strict>;
+export type PublicEventCursor = z.infer<typeof publicEventCursorSchema>;
+export declare const pendingSourceEventSchema: z.ZodObject<{
+    source: z.ZodObject<{
+        runtimeId: z.ZodString;
+        generation: z.ZodNumber;
+        runtimeEpoch: z.ZodNumber;
+        sourceSequence: z.ZodNumber;
+    }, z.core.$strict>;
+    payloadHash: z.ZodString;
+    type: z.ZodString;
+    payload: z.ZodUnknown;
+    occurredAt: z.ZodString;
+}, z.core.$strict>;
+export type PendingSourceEvent = z.infer<typeof pendingSourceEventSchema>;
+export declare const sourceEventReceiptSchema: z.ZodObject<{
+    source: z.ZodObject<{
+        runtimeId: z.ZodString;
+        generation: z.ZodNumber;
+        runtimeEpoch: z.ZodNumber;
+        sourceSequence: z.ZodNumber;
+    }, z.core.$strict>;
+    payloadHash: z.ZodString;
+    publicCursor: z.ZodObject<{
+        streamKind: z.ZodEnum<{
+            session: "session";
+            runtime: "runtime";
+            workspace: "workspace";
+        }>;
+        streamId: z.ZodString;
+        sequence: z.ZodNumber;
+    }, z.core.$strict>;
+}, z.core.$strict>;
+export type SourceEventReceipt = z.infer<typeof sourceEventReceiptSchema>;
+export declare function sourceEventKey(id: SourceEventId): string;
+export type EventDedupResult = {
+    action: 'accept';
+} | {
+    action: 'reuse';
+    receipt: SourceEventReceipt;
+} | {
+    action: 'reject';
+    code: 'source_payload_mismatch';
+};
+export declare function resolveSourceEvent(existing: SourceEventReceipt | undefined, payloadHash: string): EventDedupResult;
+export declare function nextSourceSequence(last: number): number;
+export declare const sourceEventBatchSchema: z.ZodObject<{
+    runtimeId: z.ZodString;
+    generation: z.ZodNumber;
+    runtimeEpoch: z.ZodNumber;
+    events: z.ZodArray<z.ZodObject<{
+        source: z.ZodObject<{
+            runtimeId: z.ZodString;
+            generation: z.ZodNumber;
+            runtimeEpoch: z.ZodNumber;
+            sourceSequence: z.ZodNumber;
+        }, z.core.$strict>;
+        payloadHash: z.ZodString;
+        type: z.ZodString;
+        payload: z.ZodUnknown;
+        occurredAt: z.ZodString;
+    }, z.core.$strict>>;
+}, z.core.$strict>;
+export type SourceEventBatch = z.infer<typeof sourceEventBatchSchema>;
+export declare const publicEventSchema: z.ZodObject<{
+    streamKind: z.ZodEnum<{
+        session: "session";
+        runtime: "runtime";
+        workspace: "workspace";
+    }>;
+    streamId: z.ZodString;
+    sequence: z.ZodNumber;
+    type: z.ZodString;
+    payload: z.ZodUnknown;
+    occurredAt: z.ZodString;
+    source: z.ZodOptional<z.ZodObject<{
+        runtimeId: z.ZodString;
+        generation: z.ZodNumber;
+        runtimeEpoch: z.ZodNumber;
+        sourceSequence: z.ZodNumber;
+    }, z.core.$strict>>;
+}, z.core.$strict>;
+export type PublicEvent = z.infer<typeof publicEventSchema>;
+//# sourceMappingURL=events.d.ts.map

package/dist/cloud-workspace/runtime/events.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"events.d.ts","sourceRoot":"","sources":["../../../src/cloud-workspace/runtime/events.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,eAAO,MAAM,kBAAkB,8CAA+C,CAAC;AAC/E,MAAM,MAAM,eAAe,GAAG,CAAC,OAAO,kBAAkB,CAAC,CAAC,MAAM,CAAC,CAAC;AAClE,eAAO,MAAM,qBAAqB;;;;EAA6B,CAAC;AAEhE,eAAO,MAAM,mBAAmB;;;;;kBAOrB,CAAC;AAEZ,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAEhE,eAAO,MAAM,uBAAuB;;;;;;;;kBAMzB,CAAC;AAEZ,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC;AAExE,eAAO,MAAM,wBAAwB;;;;;;;;;;;kBAQ1B,CAAC;AAEZ,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC;AAE1E,eAAO,MAAM,wBAAwB;;;;;;;;;;;;;;;;;kBAM1B,CAAC;AAEZ,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC;AAE1E,wBAAgB,cAAc,CAAC,EAAE,EAAE,aAAa,GAAG,MAAM,CAExD;AAED,MAAM,MAAM,gBAAgB,GACxB;IAAE,MAAM,EAAE,QAAQ,CAAA;CAAE,GACpB;IAAE,MAAM,EAAE,OAAO,CAAC;IAAC,OAAO,EAAE,kBAAkB,CAAA;CAAE,GAChD;IAAE,MAAM,EAAE,QAAQ,CAAC;IAAC,IAAI,EAAE,yBAAyB,CAAA;CAAE,CAAC;AAE1D,wBAAgB,kBAAkB,CAChC,QAAQ,EAAE,kBAAkB,GAAG,SAAS,EACxC,WAAW,EAAE,MAAM,GAClB,gBAAgB,CAIlB;AAED,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAKvD;AAED,eAAO,MAAM,sBAAsB;;;;;;;;;;;;;;;;kBAOxB,CAAC;AAEZ,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC;AAEtE,eAAO,MAAM,iBAAiB;;;;;;;;;;;;;;;;;kBAUnB,CAAC;AAEZ,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC"}

package/dist/cloud-workspace/runtime/events.js

@@ -0,0 +1,70 @@
+import { z } from 'zod';
+export const EVENT_STREAM_KINDS = ['session', 'workspace', 'runtime'];
+export const eventStreamKindSchema = z.enum(EVENT_STREAM_KINDS);
+export const sourceEventIdSchema = z
+    .object({
+    runtimeId: z.string().min(1).max(128),
+    generation: z.number().int().nonnegative(),
+    runtimeEpoch: z.number().int().nonnegative(),
+    sourceSequence: z.number().int().positive(),
+})
+    .strict();
+export const publicEventCursorSchema = z
+    .object({
+    streamKind: eventStreamKindSchema,
+    streamId: z.string().min(1).max(128),
+    sequence: z.number().int().nonnegative(),
+})
+    .strict();
+export const pendingSourceEventSchema = z
+    .object({
+    source: sourceEventIdSchema,
+    payloadHash: z.string().length(64),
+    type: z.string().min(1).max(128),
+    payload: z.unknown(),
+    occurredAt: z.string().min(1),
+})
+    .strict();
+export const sourceEventReceiptSchema = z
+    .object({
+    source: sourceEventIdSchema,
+    payloadHash: z.string().length(64),
+    publicCursor: publicEventCursorSchema,
+})
+    .strict();
+export function sourceEventKey(id) {
+    return `${id.runtimeId}:${id.generation}:${id.runtimeEpoch}:${id.sourceSequence}`;
+}
+export function resolveSourceEvent(existing, payloadHash) {
+    if (!existing)
+        return { action: 'accept' };
+    if (existing.payloadHash === payloadHash)
+        return { action: 'reuse', receipt: existing };
+    return { action: 'reject', code: 'source_payload_mismatch' };
+}
+export function nextSourceSequence(last) {
+    if (!Number.isInteger(last) || last < 0) {
+        throw new Error('invalid_source_sequence');
+    }
+    return last + 1;
+}
+export const sourceEventBatchSchema = z
+    .object({
+    runtimeId: z.string().min(1).max(128),
+    generation: z.number().int().nonnegative(),
+    runtimeEpoch: z.number().int().nonnegative(),
+    events: z.array(pendingSourceEventSchema).min(1).max(100),
+})
+    .strict();
+export const publicEventSchema = z
+    .object({
+    streamKind: eventStreamKindSchema,
+    streamId: z.string().min(1).max(128),
+    sequence: z.number().int().positive(),
+    type: z.string().min(1).max(128),
+    payload: z.unknown(),
+    occurredAt: z.string().min(1),
+    source: sourceEventIdSchema.optional(),
+})
+    .strict();
+//# sourceMappingURL=events.js.map

package/dist/cloud-workspace/runtime/events.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"events.js","sourceRoot":"","sources":["../../../src/cloud-workspace/runtime/events.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,SAAS,EAAE,WAAW,EAAE,SAAS,CAAU,CAAC;AAE/E,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;AAEhE,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC;KACjC,MAAM,CAAC;IACN,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IACrC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;IAC1C,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;IAC5C,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;CAC5C,CAAC;KACD,MAAM,EAAE,CAAC;AAIZ,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC;KACrC,MAAM,CAAC;IACN,UAAU,EAAE,qBAAqB;IACjC,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IACpC,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;CACzC,CAAC;KACD,MAAM,EAAE,CAAC;AAIZ,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC;KACtC,MAAM,CAAC;IACN,MAAM,EAAE,mBAAmB;IAC3B,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC;IAClC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IAChC,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE;IACpB,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;CAC9B,CAAC;KACD,MAAM,EAAE,CAAC;AAIZ,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC;KACtC,MAAM,CAAC;IACN,MAAM,EAAE,mBAAmB;IAC3B,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC;IAClC,YAAY,EAAE,uBAAuB;CACtC,CAAC;KACD,MAAM,EAAE,CAAC;AAIZ,MAAM,UAAU,cAAc,CAAC,EAAiB;IAC9C,OAAO,GAAG,EAAE,CAAC,SAAS,IAAI,EAAE,CAAC,UAAU,IAAI,EAAE,CAAC,YAAY,IAAI,EAAE,CAAC,cAAc,EAAE,CAAC;AACpF,CAAC;AAOD,MAAM,UAAU,kBAAkB,CAChC,QAAwC,EACxC,WAAmB;IAEnB,IAAI,CAAC,QAAQ;QAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;IAC3C,IAAI,QAAQ,CAAC,WAAW,KAAK,WAAW;QAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC;IACxF,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,yBAAyB,EAAE,CAAC;AAC/D,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,IAAY;IAC7C,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,IAAI,GAAG,CAAC,EAAE,CAAC;QACxC,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;IAC7C,CAAC;IACD,OAAO,IAAI,GAAG,CAAC,CAAC;AAClB,CAAC;AAED,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC;KACpC,MAAM,CAAC;IACN,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IACrC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;IAC1C,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;IAC5C,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,wBAAwB,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;CAC1D,CAAC;KACD,MAAM,EAAE,CAAC;AAIZ,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC;KAC/B,MAAM,CAAC;IACN,UAAU,EAAE,qBAAqB;IACjC,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IACpC,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IACrC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IAChC,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE;IACpB,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC7B,MAAM,EAAE,mBAAmB,CAAC,QAAQ,EAAE;CACvC,CAAC;KACD,MAAM,EAAE,CAAC"}

package/dist/cloud-workspace/runtime/execution-admission.d.ts

@@ -0,0 +1,179 @@
+import { z } from 'zod';
+/**
+ * Execution admission shared by Runtime, Business and the sandbox runtime.
+ * See docs/architecture/backend/cloud-workspace/batch-variant-generation-design.md §5–§6.
+ */
+export declare const EXECUTION_CONCURRENCY_SETTING_KEY = "cloud_workspace.execution_concurrency";
+export declare const EXECUTION_CONCURRENCY_SAFETY_BOUND = 10;
+export declare const DEFAULT_EXECUTION_CONCURRENCY: Readonly<{
+    workspaceMax: 3;
+    sandboxMax: 3;
+}>;
+export declare const EXECUTION_WORKSPACE_MAX_ENV = "CLOUD_EXECUTION_WORKSPACE_MAX_CONCURRENCY";
+export declare const EXECUTION_SANDBOX_MAX_ENV = "CLOUD_EXECUTION_SANDBOX_MAX_CONCURRENCY";
+export declare const executionConcurrencySchema: z.ZodObject<{
+    workspaceMax: z.ZodNumber;
+    sandboxMax: z.ZodNumber;
+}, z.core.$strict>;
+export type ExecutionConcurrency = z.infer<typeof executionConcurrencySchema>;
+/** What holds the occupancy: an interactive turn, a standalone preview build, or a batch member Run. */
+export declare const executionOccupancySourceSchema: z.ZodEnum<{
+    session_turn: "session_turn";
+    preview_build: "preview_build";
+    batch_run: "batch_run";
+}>;
+export type ExecutionOccupancySource = z.infer<typeof executionOccupancySourceSchema>;
+/**
+ * `waiting_user` keeps the directory but not a slot; `released` is terminal.
+ * Slots are counted only for `active` and `reconciling`.
+ */
+export declare const executionOccupancyStatusSchema: z.ZodEnum<{
+    queued: "queued";
+    active: "active";
+    waiting_user: "waiting_user";
+    reconciling: "reconciling";
+    released: "released";
+}>;
+export type ExecutionOccupancyStatus = z.infer<typeof executionOccupancyStatusSchema>;
+export declare const SLOT_COUNTED_OCCUPANCY_STATUSES: readonly ExecutionOccupancyStatus[];
+export declare const DIRECTORY_HOLDING_OCCUPANCY_STATUSES: readonly ExecutionOccupancyStatus[];
+export declare const executionReleaseReasonSchema: z.ZodEnum<{
+    completed: "completed";
+    failed: "failed";
+    cancelled: "cancelled";
+    interrupted: "interrupted";
+    reconciled: "reconciled";
+    instance_terminated: "instance_terminated";
+    admission_rejected: "admission_rejected";
+}>;
+export type ExecutionReleaseReason = z.infer<typeof executionReleaseReasonSchema>;
+export declare const executionOccupancySchema: z.ZodObject<{
+    occupancyId: z.ZodString;
+    runtimeId: z.ZodString;
+    generation: z.ZodOptional<z.ZodNumber>;
+    workspaceId: z.ZodString;
+    directoryName: z.ZodUnion<readonly [z.ZodString, z.ZodLiteral<"root">]>;
+    source: z.ZodEnum<{
+        session_turn: "session_turn";
+        preview_build: "preview_build";
+        batch_run: "batch_run";
+    }>;
+    operationId: z.ZodOptional<z.ZodString>;
+    runId: z.ZodOptional<z.ZodString>;
+    status: z.ZodEnum<{
+        queued: "queued";
+        active: "active";
+        waiting_user: "waiting_user";
+        reconciling: "reconciling";
+        released: "released";
+    }>;
+    queueSequence: z.ZodString;
+    queuePosition: z.ZodOptional<z.ZodNumber>;
+    createdAt: z.ZodString;
+    admittedAt: z.ZodOptional<z.ZodString>;
+    releasedAt: z.ZodOptional<z.ZodString>;
+    releaseReason: z.ZodOptional<z.ZodEnum<{
+        completed: "completed";
+        failed: "failed";
+        cancelled: "cancelled";
+        interrupted: "interrupted";
+        reconciled: "reconciled";
+        instance_terminated: "instance_terminated";
+        admission_rejected: "admission_rejected";
+    }>>;
+}, z.core.$strict>;
+export type ExecutionOccupancy = z.infer<typeof executionOccupancySchema>;
+/**
+ * Returned (HTTP 202) when an execution is accepted but waits for a slot. These fields are added
+ * to the normal accepted operation payload, so parsing must not reject the other keys.
+ */
+export declare const EXECUTION_QUEUED_CODE = "execution_queued";
+export declare const executionQueuedSchema: z.ZodObject<{
+    code: z.ZodLiteral<"execution_queued">;
+    occupancyId: z.ZodString;
+    queuePosition: z.ZodNumber;
+}, z.core.$strip>;
+export type ExecutionQueued = z.infer<typeof executionQueuedSchema>;
+/** Batch member Run — only batch members have one; it owns exactly one occupancy. */
+export declare const batchRunStatusSchema: z.ZodEnum<{
+    running: "running";
+    failed: "failed";
+    cancelled: "cancelled";
+    queued: "queued";
+    reconciling: "reconciling";
+    stopping: "stopping";
+    succeeded: "succeeded";
+}>;
+export type BatchRunStatus = z.infer<typeof batchRunStatusSchema>;
+export declare const BATCH_RUN_TERMINAL_STATUSES: readonly BatchRunStatus[];
+export declare const batchRunPhaseSchema: z.ZodEnum<{
+    prepare: "prepare";
+    generate: "generate";
+    deliver: "deliver";
+}>;
+export type BatchRunPhase = z.infer<typeof batchRunPhaseSchema>;
+/** Durable frozen source of one batch; members derive only from this. */
+export declare const batchSourceSnapshotRefSchema: z.ZodObject<{
+    batchId: z.ZodString;
+    commitHash: z.ZodString;
+    digest: z.ZodString;
+    sourceWorkspaceId: z.ZodString;
+    sourceDirectoryName: z.ZodString;
+    remoteRef: z.ZodOptional<z.ZodString>;
+    artifactKey: z.ZodOptional<z.ZodString>;
+    frozenAt: z.ZodString;
+}, z.core.$strict>;
+export type BatchSourceSnapshotRef = z.infer<typeof batchSourceSnapshotRefSchema>;
+export declare function batchSourceRemoteRef(batchId: string): string;
+export declare const DEFAULT_BATCH_AUTO_RECOVERY_LIMIT = 2;
+export declare const batchRunDeliveryEvidenceSchema: z.ZodObject<{
+    savedCommit: z.ZodString;
+    pushedCommit: z.ZodOptional<z.ZodString>;
+    buildDigest: z.ZodOptional<z.ZodString>;
+    verified: z.ZodOptional<z.ZodBoolean>;
+    previewRef: z.ZodOptional<z.ZodString>;
+}, z.core.$strict>;
+export type BatchRunDeliveryEvidence = z.infer<typeof batchRunDeliveryEvidenceSchema>;
+export declare const batchRunSchema: z.ZodObject<{
+    runId: z.ZodString;
+    batchId: z.ZodString;
+    resultVersionId: z.ZodString;
+    runtimeId: z.ZodString;
+    workspaceId: z.ZodString;
+    directoryName: z.ZodString;
+    occupancyId: z.ZodOptional<z.ZodString>;
+    sessionId: z.ZodOptional<z.ZodString>;
+    operationId: z.ZodOptional<z.ZodString>;
+    status: z.ZodEnum<{
+        running: "running";
+        failed: "failed";
+        cancelled: "cancelled";
+        queued: "queued";
+        reconciling: "reconciling";
+        stopping: "stopping";
+        succeeded: "succeeded";
+    }>;
+    phase: z.ZodEnum<{
+        prepare: "prepare";
+        generate: "generate";
+        deliver: "deliver";
+    }>;
+    resumeFromCommit: z.ZodOptional<z.ZodString>;
+    evidence: z.ZodOptional<z.ZodObject<{
+        savedCommit: z.ZodString;
+        pushedCommit: z.ZodOptional<z.ZodString>;
+        buildDigest: z.ZodOptional<z.ZodString>;
+        verified: z.ZodOptional<z.ZodBoolean>;
+        previewRef: z.ZodOptional<z.ZodString>;
+    }, z.core.$strict>>;
+    previousRunId: z.ZodOptional<z.ZodString>;
+    autoRecoveryCount: z.ZodNumber;
+    cancelRequested: z.ZodBoolean;
+    ownerFence: z.ZodNumber;
+    revision: z.ZodNumber;
+    error: z.ZodOptional<z.ZodString>;
+    createdAt: z.ZodString;
+    updatedAt: z.ZodString;
+}, z.core.$strict>;
+export type BatchRun = z.infer<typeof batchRunSchema>;
+//# sourceMappingURL=execution-admission.d.ts.map

package/dist/cloud-workspace/runtime/execution-admission.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"execution-admission.d.ts","sourceRoot":"","sources":["../../../src/cloud-workspace/runtime/execution-admission.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB;;;GAGG;AAEH,eAAO,MAAM,iCAAiC,0CAA0C,CAAC;AACzF,eAAO,MAAM,kCAAkC,KAAK,CAAC;AACrD,eAAO,MAAM,6BAA6B;;;EAAoD,CAAC;AAC/F,eAAO,MAAM,2BAA2B,8CAA8C,CAAC;AACvF,eAAO,MAAM,yBAAyB,4CAA4C,CAAC;AAGnF,eAAO,MAAM,0BAA0B;;;kBAG5B,CAAC;AACZ,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,0BAA0B,CAAC,CAAC;AAE9E,wGAAwG;AACxG,eAAO,MAAM,8BAA8B;;;;EAAyD,CAAC;AACrG,MAAM,MAAM,wBAAwB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,8BAA8B,CAAC,CAAC;AAEtF;;;GAGG;AACH,eAAO,MAAM,8BAA8B;;;;;;EAA0E,CAAC;AACtH,MAAM,MAAM,wBAAwB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,8BAA8B,CAAC,CAAC;AACtF,eAAO,MAAM,+BAA+B,EAAE,SAAS,wBAAwB,EAA8B,CAAC;AAC9G,eAAO,MAAM,oCAAoC,EAAE,SAAS,wBAAwB,EAA8C,CAAC;AAEnI,eAAO,MAAM,4BAA4B;;;;;;;;EAEvC,CAAC;AACH,MAAM,MAAM,sBAAsB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,4BAA4B,CAAC,CAAC;AAElF,eAAO,MAAM,wBAAwB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBAgB1B,CAAC;AACZ,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC;AAE1E;;;GAGG;AACH,eAAO,MAAM,qBAAqB,qBAAqB,CAAC;AACxD,eAAO,MAAM,qBAAqB;;;;iBAIhC,CAAC;AACH,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAEpE,qFAAqF;AACrF,eAAO,MAAM,oBAAoB;;;;;;;;EAA+F,CAAC;AACjI,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAClE,eAAO,MAAM,2BAA2B,EAAE,SAAS,cAAc,EAAyC,CAAC;AAC3G,eAAO,MAAM,mBAAmB;;;;EAA6C,CAAC;AAC9E,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAIhE,yEAAyE;AACzE,eAAO,MAAM,4BAA4B;;;;;;;;;kBAWsE,CAAC;AAChH,MAAM,MAAM,sBAAsB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,4BAA4B,CAAC,CAAC;AAElF,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAE5D;AAED,eAAO,MAAM,iCAAiC,IAAI,CAAC;AAEnD,eAAO,MAAM,8BAA8B;;;;;;kBAMhC,CAAC;AACZ,MAAM,MAAM,wBAAwB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,8BAA8B,CAAC,CAAC;AAEtF,eAAO,MAAM,cAAc;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBAuBhB,CAAC;AACZ,MAAM,MAAM,QAAQ,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,CAAC"}

package/dist/cloud-workspace/runtime/execution-admission.js

@@ -0,0 +1,109 @@
+import { z } from 'zod';
+import { workspaceDirectoryNameSchema, workspaceSessionScopeSchema } from './workspace-directories.js';
+/**
+ * Execution admission shared by Runtime, Business and the sandbox runtime.
+ * See docs/architecture/backend/cloud-workspace/batch-variant-generation-design.md §5–§6.
+ */
+export const EXECUTION_CONCURRENCY_SETTING_KEY = 'cloud_workspace.execution_concurrency';
+export const EXECUTION_CONCURRENCY_SAFETY_BOUND = 10;
+export const DEFAULT_EXECUTION_CONCURRENCY = Object.freeze({ workspaceMax: 3, sandboxMax: 3 });
+export const EXECUTION_WORKSPACE_MAX_ENV = 'CLOUD_EXECUTION_WORKSPACE_MAX_CONCURRENCY';
+export const EXECUTION_SANDBOX_MAX_ENV = 'CLOUD_EXECUTION_SANDBOX_MAX_CONCURRENCY';
+const concurrencyLimit = z.number().int().min(1).max(EXECUTION_CONCURRENCY_SAFETY_BOUND);
+export const executionConcurrencySchema = z.object({
+    workspaceMax: concurrencyLimit,
+    sandboxMax: concurrencyLimit,
+}).strict();
+/** What holds the occupancy: an interactive turn, a standalone preview build, or a batch member Run. */
+export const executionOccupancySourceSchema = z.enum(['session_turn', 'preview_build', 'batch_run']);
+/**
+ * `waiting_user` keeps the directory but not a slot; `released` is terminal.
+ * Slots are counted only for `active` and `reconciling`.
+ */
+export const executionOccupancyStatusSchema = z.enum(['queued', 'active', 'waiting_user', 'reconciling', 'released']);
+export const SLOT_COUNTED_OCCUPANCY_STATUSES = ['active', 'reconciling'];
+export const DIRECTORY_HOLDING_OCCUPANCY_STATUSES = ['active', 'waiting_user', 'reconciling'];
+export const executionReleaseReasonSchema = z.enum([
+    'completed', 'failed', 'interrupted', 'cancelled', 'reconciled', 'instance_terminated', 'admission_rejected',
+]);
+export const executionOccupancySchema = z.object({
+    occupancyId: z.string().uuid(),
+    runtimeId: z.string().min(1).max(128),
+    generation: z.number().int().min(0).optional(),
+    workspaceId: z.string().uuid(),
+    directoryName: workspaceSessionScopeSchema,
+    source: executionOccupancySourceSchema,
+    operationId: z.string().min(1).max(128).optional(),
+    runId: z.string().uuid().optional(),
+    status: executionOccupancyStatusSchema,
+    queueSequence: z.string().regex(/^\d+$/),
+    queuePosition: z.number().int().min(0).optional(),
+    createdAt: z.string().datetime(),
+    admittedAt: z.string().datetime().optional(),
+    releasedAt: z.string().datetime().optional(),
+    releaseReason: executionReleaseReasonSchema.optional(),
+}).strict();
+/**
+ * Returned (HTTP 202) when an execution is accepted but waits for a slot. These fields are added
+ * to the normal accepted operation payload, so parsing must not reject the other keys.
+ */
+export const EXECUTION_QUEUED_CODE = 'execution_queued';
+export const executionQueuedSchema = z.object({
+    code: z.literal(EXECUTION_QUEUED_CODE),
+    occupancyId: z.string().uuid(),
+    queuePosition: z.number().int().min(0),
+});
+/** Batch member Run — only batch members have one; it owns exactly one occupancy. */
+export const batchRunStatusSchema = z.enum(['queued', 'running', 'reconciling', 'stopping', 'succeeded', 'failed', 'cancelled']);
+export const BATCH_RUN_TERMINAL_STATUSES = ['succeeded', 'failed', 'cancelled'];
+export const batchRunPhaseSchema = z.enum(['prepare', 'generate', 'deliver']);
+const commitHash = z.string().regex(/^(?:[a-f0-9]{40}|[a-f0-9]{64})$/);
+/** Durable frozen source of one batch; members derive only from this. */
+export const batchSourceSnapshotRefSchema = z.object({
+    batchId: z.string().uuid(),
+    commitHash,
+    digest: z.string().regex(/^[a-f0-9]{64}$/),
+    sourceWorkspaceId: z.string().uuid(),
+    sourceDirectoryName: workspaceDirectoryNameSchema,
+    /** Set when pushed to the project remote. */
+    remoteRef: z.string().startsWith('refs/playcraft/batch/').optional(),
+    /** Set when stored in private artifact storage (standalone workspaces). */
+    artifactKey: z.string().min(1).max(512).optional(),
+    frozenAt: z.string().datetime(),
+}).strict().refine(value => Boolean(value.remoteRef || value.artifactKey), { message: 'snapshot_not_durable' });
+export function batchSourceRemoteRef(batchId) {
+    return `refs/playcraft/batch/${z.string().uuid().parse(batchId)}/source`;
+}
+export const DEFAULT_BATCH_AUTO_RECOVERY_LIMIT = 2;
+export const batchRunDeliveryEvidenceSchema = z.object({
+    savedCommit: commitHash,
+    pushedCommit: commitHash.optional(),
+    buildDigest: z.string().regex(/^[a-f0-9]{64}$/).optional(),
+    verified: z.boolean().optional(),
+    previewRef: z.string().min(1).max(512).optional(),
+}).strict();
+export const batchRunSchema = z.object({
+    runId: z.string().uuid(),
+    batchId: z.string().uuid(),
+    resultVersionId: z.string().uuid(),
+    runtimeId: z.string().min(1).max(128),
+    workspaceId: z.string().uuid(),
+    directoryName: workspaceDirectoryNameSchema,
+    occupancyId: z.string().uuid().optional(),
+    sessionId: z.string().min(1).max(128).optional(),
+    operationId: z.string().min(1).max(128).optional(),
+    status: batchRunStatusSchema,
+    phase: batchRunPhaseSchema,
+    /** Present on retries and recovery: resume delivery from this exact commit. */
+    resumeFromCommit: commitHash.optional(),
+    evidence: batchRunDeliveryEvidenceSchema.optional(),
+    previousRunId: z.string().uuid().optional(),
+    autoRecoveryCount: z.number().int().min(0),
+    cancelRequested: z.boolean(),
+    ownerFence: z.number().int().min(0),
+    revision: z.number().int().min(0),
+    error: z.string().max(128).optional(),
+    createdAt: z.string().datetime(),
+    updatedAt: z.string().datetime(),
+}).strict();
+//# sourceMappingURL=execution-admission.js.map

package/dist/cloud-workspace/runtime/execution-admission.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"execution-admission.js","sourceRoot":"","sources":["../../../src/cloud-workspace/runtime/execution-admission.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,4BAA4B,EAAE,2BAA2B,EAAE,MAAM,4BAA4B,CAAC;AAEvG;;;GAGG;AAEH,MAAM,CAAC,MAAM,iCAAiC,GAAG,uCAAuC,CAAC;AACzF,MAAM,CAAC,MAAM,kCAAkC,GAAG,EAAE,CAAC;AACrD,MAAM,CAAC,MAAM,6BAA6B,GAAG,MAAM,CAAC,MAAM,CAAC,EAAE,YAAY,EAAE,CAAC,EAAE,UAAU,EAAE,CAAC,EAAE,CAAC,CAAC;AAC/F,MAAM,CAAC,MAAM,2BAA2B,GAAG,2CAA2C,CAAC;AACvF,MAAM,CAAC,MAAM,yBAAyB,GAAG,yCAAyC,CAAC;AAEnF,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,kCAAkC,CAAC,CAAC;AACzF,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC,CAAC,MAAM,CAAC;IACjD,YAAY,EAAE,gBAAgB;IAC9B,UAAU,EAAE,gBAAgB;CAC7B,CAAC,CAAC,MAAM,EAAE,CAAC;AAGZ,wGAAwG;AACxG,MAAM,CAAC,MAAM,8BAA8B,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,cAAc,EAAE,eAAe,EAAE,WAAW,CAAC,CAAC,CAAC;AAGrG;;;GAGG;AACH,MAAM,CAAC,MAAM,8BAA8B,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,QAAQ,EAAE,cAAc,EAAE,aAAa,EAAE,UAAU,CAAC,CAAC,CAAC;AAEtH,MAAM,CAAC,MAAM,+BAA+B,GAAwC,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC;AAC9G,MAAM,CAAC,MAAM,oCAAoC,GAAwC,CAAC,QAAQ,EAAE,cAAc,EAAE,aAAa,CAAC,CAAC;AAEnI,MAAM,CAAC,MAAM,4BAA4B,GAAG,CAAC,CAAC,IAAI,CAAC;IACjD,WAAW,EAAE,QAAQ,EAAE,aAAa,EAAE,WAAW,EAAE,YAAY,EAAE,qBAAqB,EAAE,oBAAoB;CAC7G,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC/C,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE;IAC9B,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IACrC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAC9C,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE;IAC9B,aAAa,EAAE,2BAA2B;IAC1C,MAAM,EAAE,8BAA8B;IACtC,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;IAClD,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE;IACnC,MAAM,EAAE,8BAA8B;IACtC,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC;IACxC,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACjD,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAChC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IAC5C,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IAC5C,aAAa,EAAE,4BAA4B,CAAC,QAAQ,EAAE;CACvD,CAAC,CAAC,MAAM,EAAE,CAAC;AAGZ;;;GAGG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,kBAAkB,CAAC;AACxD,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC5C,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,qBAAqB,CAAC;IACtC,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE;IAC9B,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;CACvC,CAAC,CAAC;AAGH,qFAAqF;AACrF,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,SAAS,EAAE,aAAa,EAAE,UAAU,EAAE,WAAW,EAAE,QAAQ,EAAE,WAAW,CAAC,CAAC,CAAC;AAEjI,MAAM,CAAC,MAAM,2BAA2B,GAA8B,CAAC,WAAW,EAAE,QAAQ,EAAE,WAAW,CAAC,CAAC;AAC3G,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,UAAU,EAAE,SAAS,CAAC,CAAC,CAAC;AAG9E,MAAM,UAAU,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,iCAAiC,CAAC,CAAC;AAEvE,yEAAyE;AACzE,MAAM,CAAC,MAAM,4BAA4B,GAAG,CAAC,CAAC,MAAM,CAAC;IACnD,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE;IAC1B,UAAU;IACV,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,gBAAgB,CAAC;IAC1C,iBAAiB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE;IACpC,mBAAmB,EAAE,4BAA4B;IACjD,6CAA6C;IAC7C,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,UAAU,CAAC,uBAAuB,CAAC,CAAC,QAAQ,EAAE;IACpE,2EAA2E;IAC3E,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;IAClD,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAChC,CAAC,CAAC,MAAM,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,SAAS,IAAI,KAAK,CAAC,WAAW,CAAC,EAAE,EAAE,OAAO,EAAE,sBAAsB,EAAE,CAAC,CAAC;AAGhH,MAAM,UAAU,oBAAoB,CAAC,OAAe;IAClD,OAAO,wBAAwB,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC;AAC3E,CAAC;AAED,MAAM,CAAC,MAAM,iCAAiC,GAAG,CAAC,CAAC;AAEnD,MAAM,CAAC,MAAM,8BAA8B,GAAG,CAAC,CAAC,MAAM,CAAC;IACrD,WAAW,EAAE,UAAU;IACvB,YAAY,EAAE,UAAU,CAAC,QAAQ,EAAE;IACnC,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,QAAQ,EAAE;IAC1D,QAAQ,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IAChC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;CAClD,CAAC,CAAC,MAAM,EAAE,CAAC;AAGZ,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,CAAC,MAAM,CAAC;IACrC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE;IACxB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE;IAC1B,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE;IAClC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IACrC,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE;IAC9B,aAAa,EAAE,4BAA4B;IAC3C,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE;IACzC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;IAChD,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;IAClD,MAAM,EAAE,oBAAoB;IAC5B,KAAK,EAAE,mBAAmB;IAC1B,+EAA+E;IAC/E,gBAAgB,EAAE,UAAU,CAAC,QAAQ,EAAE;IACvC,QAAQ,EAAE,8BAA8B,CAAC,QAAQ,EAAE;IACnD,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE;IAC3C,iBAAiB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1C,eAAe,EAAE,CAAC,CAAC,OAAO,EAAE;IAC5B,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACnC,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACjC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;IACrC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAChC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CACjC,CAAC,CAAC,MAAM,EAAE,CAAC"}

package/dist/cloud-workspace/runtime/execution-grant.d.ts

@@ -0,0 +1,36 @@
+import { z } from 'zod';
+export declare const WORKSPACE_EXECUTION_KIND: "workspace-execution";
+export declare const WORKSPACE_EXECUTION_AUDIENCE: "playcraft-runtime";
+export declare const workspaceExecutionGrantClaimsSchema: z.ZodObject<{
+    kind: z.ZodLiteral<"workspace-execution">;
+    credentialType: z.ZodLiteral<"workspace-execution">;
+    environment: z.ZodString;
+    userId: z.ZodString;
+    workspaceId: z.ZodString;
+    runtimeId: z.ZodString;
+    generation: z.ZodNumber;
+    runtimeEpoch: z.ZodNumber;
+    grantId: z.ZodString;
+    aud: z.ZodLiteral<"playcraft-runtime">;
+}, z.core.$strict>;
+export type WorkspaceExecutionGrantClaims = z.infer<typeof workspaceExecutionGrantClaimsSchema>;
+/** Persisted grant metadata. The JWT itself is never part of this record. */
+export declare const workspaceExecutionGrantRecordSchema: z.ZodObject<{
+    grantId: z.ZodString;
+    environment: z.ZodString;
+    userId: z.ZodString;
+    workspaceId: z.ZodString;
+    runtimeId: z.ZodString;
+    generation: z.ZodNumber;
+    runtimeEpoch: z.ZodNumber;
+    expiresAt: z.ZodString;
+    revokedAt: z.ZodOptional<z.ZodString>;
+}, z.core.$strict>;
+export type WorkspaceExecutionGrantRecord = z.infer<typeof workspaceExecutionGrantRecordSchema>;
+export declare const GRANT_CLIENT_FORBIDDEN_FIELDS: readonly ["token", "grantId", "kind", "credentialType", "aud", "expiresAt", "revokedAt", "runtimeId", "generation", "runtimeEpoch", "leaseFence", "rootPath", "workspaceRoot", "binding", "repositoryUrl", "branchName", "preparation", "gitAccess", "parentGrantId", "authzRevision", "scope", "modelConfigIds"];
+export declare function findForbiddenGrantFields(input: unknown): string[];
+export declare function parseWorkspaceExecutionGrantClaims(input: unknown): WorkspaceExecutionGrantClaims;
+export declare function newGrantId(): string;
+export declare function mintWorkspaceExecutionGrant(claims: WorkspaceExecutionGrantClaims, secret: string, expiresIn?: string | number): Promise<string>;
+export declare function verifyWorkspaceExecutionGrant(token: string, secret: string): Promise<WorkspaceExecutionGrantClaims>;
+//# sourceMappingURL=execution-grant.d.ts.map