@playcraft/common 0.1.54 → 0.1.55-beta

package/dist/cloud-workspace/runtime/events.js

@@ -0,0 +1,70 @@
+import { z } from 'zod';
+export const EVENT_STREAM_KINDS = ['session', 'workspace', 'runtime'];
+export const eventStreamKindSchema = z.enum(EVENT_STREAM_KINDS);
+export const sourceEventIdSchema = z
+    .object({
+    runtimeId: z.string().min(1).max(128),
+    generation: z.number().int().nonnegative(),
+    runtimeEpoch: z.number().int().nonnegative(),
+    sourceSequence: z.number().int().positive(),
+})
+    .strict();
+export const publicEventCursorSchema = z
+    .object({
+    streamKind: eventStreamKindSchema,
+    streamId: z.string().min(1).max(128),
+    sequence: z.number().int().nonnegative(),
+})
+    .strict();
+export const pendingSourceEventSchema = z
+    .object({
+    source: sourceEventIdSchema,
+    payloadHash: z.string().length(64),
+    type: z.string().min(1).max(128),
+    payload: z.unknown(),
+    occurredAt: z.string().min(1),
+})
+    .strict();
+export const sourceEventReceiptSchema = z
+    .object({
+    source: sourceEventIdSchema,
+    payloadHash: z.string().length(64),
+    publicCursor: publicEventCursorSchema,
+})
+    .strict();
+export function sourceEventKey(id) {
+    return `${id.runtimeId}:${id.generation}:${id.runtimeEpoch}:${id.sourceSequence}`;
+}
+export function resolveSourceEvent(existing, payloadHash) {
+    if (!existing)
+        return { action: 'accept' };
+    if (existing.payloadHash === payloadHash)
+        return { action: 'reuse', receipt: existing };
+    return { action: 'reject', code: 'source_payload_mismatch' };
+}
+export function nextSourceSequence(last) {
+    if (!Number.isInteger(last) || last < 0) {
+        throw new Error('invalid_source_sequence');
+    }
+    return last + 1;
+}
+export const sourceEventBatchSchema = z
+    .object({
+    runtimeId: z.string().min(1).max(128),
+    generation: z.number().int().nonnegative(),
+    runtimeEpoch: z.number().int().nonnegative(),
+    events: z.array(pendingSourceEventSchema).min(1).max(100),
+})
+    .strict();
+export const publicEventSchema = z
+    .object({
+    streamKind: eventStreamKindSchema,
+    streamId: z.string().min(1).max(128),
+    sequence: z.number().int().positive(),
+    type: z.string().min(1).max(128),
+    payload: z.unknown(),
+    occurredAt: z.string().min(1),
+    source: sourceEventIdSchema.optional(),
+})
+    .strict();
+//# sourceMappingURL=events.js.map

package/dist/cloud-workspace/runtime/events.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"events.js","sourceRoot":"","sources":["../../../src/cloud-workspace/runtime/events.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,SAAS,EAAE,WAAW,EAAE,SAAS,CAAU,CAAC;AAE/E,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;AAEhE,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC;KACjC,MAAM,CAAC;IACN,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IACrC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;IAC1C,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;IAC5C,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;CAC5C,CAAC;KACD,MAAM,EAAE,CAAC;AAIZ,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC;KACrC,MAAM,CAAC;IACN,UAAU,EAAE,qBAAqB;IACjC,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IACpC,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;CACzC,CAAC;KACD,MAAM,EAAE,CAAC;AAIZ,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC;KACtC,MAAM,CAAC;IACN,MAAM,EAAE,mBAAmB;IAC3B,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC;IAClC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IAChC,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE;IACpB,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;CAC9B,CAAC;KACD,MAAM,EAAE,CAAC;AAIZ,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC;KACtC,MAAM,CAAC;IACN,MAAM,EAAE,mBAAmB;IAC3B,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC;IAClC,YAAY,EAAE,uBAAuB;CACtC,CAAC;KACD,MAAM,EAAE,CAAC;AAIZ,MAAM,UAAU,cAAc,CAAC,EAAiB;IAC9C,OAAO,GAAG,EAAE,CAAC,SAAS,IAAI,EAAE,CAAC,UAAU,IAAI,EAAE,CAAC,YAAY,IAAI,EAAE,CAAC,cAAc,EAAE,CAAC;AACpF,CAAC;AAOD,MAAM,UAAU,kBAAkB,CAChC,QAAwC,EACxC,WAAmB;IAEnB,IAAI,CAAC,QAAQ;QAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;IAC3C,IAAI,QAAQ,CAAC,WAAW,KAAK,WAAW;QAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC;IACxF,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,yBAAyB,EAAE,CAAC;AAC/D,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,IAAY;IAC7C,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,IAAI,GAAG,CAAC,EAAE,CAAC;QACxC,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;IAC7C,CAAC;IACD,OAAO,IAAI,GAAG,CAAC,CAAC;AAClB,CAAC;AAED,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC;KACpC,MAAM,CAAC;IACN,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IACrC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;IAC1C,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;IAC5C,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,wBAAwB,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;CAC1D,CAAC;KACD,MAAM,EAAE,CAAC;AAIZ,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC;KAC/B,MAAM,CAAC;IACN,UAAU,EAAE,qBAAqB;IACjC,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IACpC,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IACrC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IAChC,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE;IACpB,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC7B,MAAM,EAAE,mBAAmB,CAAC,QAAQ,EAAE;CACvC,CAAC;KACD,MAAM,EAAE,CAAC"}

package/dist/cloud-workspace/runtime/execution-admission.d.ts

@@ -0,0 +1,201 @@
+import { z } from 'zod';
+/**
+ * Execution admission shared by Runtime, Business and the sandbox runtime.
+ * See docs/architecture/backend/cloud-workspace/batch-variant-generation-design.md §5–§6.
+ */
+export declare const EXECUTION_CONCURRENCY_SETTING_KEY = "cloud_workspace.execution_concurrency";
+export declare const EXECUTION_CONCURRENCY_SAFETY_BOUND = 10;
+export declare const DEFAULT_EXECUTION_CONCURRENCY: Readonly<{
+    workspaceMax: 3;
+    sandboxMax: 3;
+}>;
+export declare const EXECUTION_WORKSPACE_MAX_ENV = "CLOUD_EXECUTION_WORKSPACE_MAX_CONCURRENCY";
+export declare const EXECUTION_SANDBOX_MAX_ENV = "CLOUD_EXECUTION_SANDBOX_MAX_CONCURRENCY";
+export declare const executionConcurrencySchema: z.ZodObject<{
+    workspaceMax: z.ZodNumber;
+    sandboxMax: z.ZodNumber;
+}, z.core.$strict>;
+export type ExecutionConcurrency = z.infer<typeof executionConcurrencySchema>;
+/** What holds the occupancy: an interactive turn, a standalone preview build, or a batch member Run. */
+export declare const executionOccupancySourceSchema: z.ZodEnum<{
+    session_turn: "session_turn";
+    preview_build: "preview_build";
+    batch_run: "batch_run";
+}>;
+export type ExecutionOccupancySource = z.infer<typeof executionOccupancySourceSchema>;
+/**
+ * `waiting_user` keeps the directory but not a slot; `released` is terminal.
+ * Slots are counted only for `active` and `reconciling`.
+ */
+export declare const executionOccupancyStatusSchema: z.ZodEnum<{
+    queued: "queued";
+    active: "active";
+    waiting_user: "waiting_user";
+    reconciling: "reconciling";
+    released: "released";
+}>;
+export type ExecutionOccupancyStatus = z.infer<typeof executionOccupancyStatusSchema>;
+export declare const SLOT_COUNTED_OCCUPANCY_STATUSES: readonly ExecutionOccupancyStatus[];
+export declare const DIRECTORY_HOLDING_OCCUPANCY_STATUSES: readonly ExecutionOccupancyStatus[];
+export declare const executionReleaseReasonSchema: z.ZodEnum<{
+    failed: "failed";
+    completed: "completed";
+    interrupted: "interrupted";
+    cancelled: "cancelled";
+    reconciled: "reconciled";
+    instance_terminated: "instance_terminated";
+    admission_rejected: "admission_rejected";
+}>;
+export type ExecutionReleaseReason = z.infer<typeof executionReleaseReasonSchema>;
+export declare const executionOccupancySchema: z.ZodObject<{
+    occupancyId: z.ZodString;
+    runtimeId: z.ZodString;
+    generation: z.ZodOptional<z.ZodNumber>;
+    workspaceId: z.ZodString;
+    directoryName: z.ZodUnion<readonly [z.ZodString, z.ZodLiteral<"root">]>;
+    source: z.ZodEnum<{
+        session_turn: "session_turn";
+        preview_build: "preview_build";
+        batch_run: "batch_run";
+    }>;
+    operationId: z.ZodOptional<z.ZodString>;
+    runId: z.ZodOptional<z.ZodString>;
+    status: z.ZodEnum<{
+        queued: "queued";
+        active: "active";
+        waiting_user: "waiting_user";
+        reconciling: "reconciling";
+        released: "released";
+    }>;
+    queueSequence: z.ZodString;
+    queuePosition: z.ZodOptional<z.ZodNumber>;
+    createdAt: z.ZodString;
+    admittedAt: z.ZodOptional<z.ZodString>;
+    releasedAt: z.ZodOptional<z.ZodString>;
+    releaseReason: z.ZodOptional<z.ZodEnum<{
+        failed: "failed";
+        completed: "completed";
+        interrupted: "interrupted";
+        cancelled: "cancelled";
+        reconciled: "reconciled";
+        instance_terminated: "instance_terminated";
+        admission_rejected: "admission_rejected";
+    }>>;
+}, z.core.$strict>;
+export type ExecutionOccupancy = z.infer<typeof executionOccupancySchema>;
+/**
+ * Returned (HTTP 202) when an execution is accepted but waits for a slot. These fields are added
+ * to the normal accepted operation payload, so parsing must not reject the other keys.
+ */
+export declare const EXECUTION_QUEUED_CODE = "execution_queued";
+/** The execution that keeps a queued request waiting, so the UI can name it instead of a bare count. */
+export declare const executionQueueHolderSchema: z.ZodObject<{
+    occupancyId: z.ZodString;
+    source: z.ZodEnum<{
+        session_turn: "session_turn";
+        preview_build: "preview_build";
+        batch_run: "batch_run";
+    }>;
+    sessionId: z.ZodOptional<z.ZodString>;
+}, z.core.$strict>;
+export type ExecutionQueueHolder = z.infer<typeof executionQueueHolderSchema>;
+export declare const executionQueuedSchema: z.ZodObject<{
+    code: z.ZodLiteral<"execution_queued">;
+    occupancyId: z.ZodString;
+    queuePosition: z.ZodNumber;
+    holder: z.ZodOptional<z.ZodObject<{
+        occupancyId: z.ZodString;
+        source: z.ZodEnum<{
+            session_turn: "session_turn";
+            preview_build: "preview_build";
+            batch_run: "batch_run";
+        }>;
+        sessionId: z.ZodOptional<z.ZodString>;
+    }, z.core.$strict>>;
+}, z.core.$strip>;
+export type ExecutionQueued = z.infer<typeof executionQueuedSchema>;
+/** Batch member Run — only batch members have one; it owns exactly one occupancy. */
+export declare const batchRunStatusSchema: z.ZodEnum<{
+    failed: "failed";
+    running: "running";
+    queued: "queued";
+    cancelled: "cancelled";
+    reconciling: "reconciling";
+    stopping: "stopping";
+    succeeded: "succeeded";
+}>;
+export type BatchRunStatus = z.infer<typeof batchRunStatusSchema>;
+export declare const BATCH_RUN_TERMINAL_STATUSES: readonly BatchRunStatus[];
+export declare const batchRunPhaseSchema: z.ZodEnum<{
+    prepare: "prepare";
+    generate: "generate";
+    deliver: "deliver";
+}>;
+export type BatchRunPhase = z.infer<typeof batchRunPhaseSchema>;
+/** Durable frozen source of one batch. New snapshots use the frozen commit as `digest`. */
+export declare const batchSourceSnapshotRefSchema: z.ZodObject<{
+    batchId: z.ZodString;
+    commitHash: z.ZodString;
+    digest: z.ZodString;
+    sourceWorkspaceId: z.ZodString;
+    sourceDirectoryName: z.ZodString;
+    remoteRef: z.ZodOptional<z.ZodString>;
+    artifactKey: z.ZodOptional<z.ZodString>;
+    frozenAt: z.ZodString;
+}, z.core.$strict>;
+export type BatchSourceSnapshotRef = z.infer<typeof batchSourceSnapshotRefSchema>;
+export declare function batchSourceRemoteRef(batchId: string): string;
+export declare const DEFAULT_BATCH_AUTO_RECOVERY_LIMIT = 2;
+export declare const batchRunDeliveryEvidenceSchema: z.ZodObject<{
+    savedCommit: z.ZodOptional<z.ZodString>;
+    pushedCommit: z.ZodOptional<z.ZodString>;
+    buildDigest: z.ZodOptional<z.ZodString>;
+    verified: z.ZodOptional<z.ZodBoolean>;
+    previewRef: z.ZodOptional<z.ZodString>;
+}, z.core.$strict>;
+export type BatchRunDeliveryEvidence = z.infer<typeof batchRunDeliveryEvidenceSchema>;
+export declare const batchRunSchema: z.ZodObject<{
+    runId: z.ZodString;
+    batchId: z.ZodString;
+    resultVersionId: z.ZodString;
+    runtimeId: z.ZodString;
+    workspaceId: z.ZodString;
+    directoryName: z.ZodString;
+    occupancyId: z.ZodOptional<z.ZodString>;
+    sessionId: z.ZodOptional<z.ZodString>;
+    operationId: z.ZodOptional<z.ZodString>;
+    status: z.ZodEnum<{
+        failed: "failed";
+        running: "running";
+        queued: "queued";
+        cancelled: "cancelled";
+        reconciling: "reconciling";
+        stopping: "stopping";
+        succeeded: "succeeded";
+    }>;
+    phase: z.ZodEnum<{
+        prepare: "prepare";
+        generate: "generate";
+        deliver: "deliver";
+    }>;
+    resumeFromCommit: z.ZodOptional<z.ZodString>;
+    evidence: z.ZodOptional<z.ZodObject<{
+        savedCommit: z.ZodOptional<z.ZodString>;
+        pushedCommit: z.ZodOptional<z.ZodString>;
+        buildDigest: z.ZodOptional<z.ZodString>;
+        verified: z.ZodOptional<z.ZodBoolean>;
+        previewRef: z.ZodOptional<z.ZodString>;
+    }, z.core.$strict>>;
+    previousRunId: z.ZodOptional<z.ZodString>;
+    autoRecoveryCount: z.ZodNumber;
+    cancelRequested: z.ZodBoolean;
+    ownerFence: z.ZodNumber;
+    revision: z.ZodNumber;
+    error: z.ZodOptional<z.ZodString>;
+    createdAt: z.ZodString;
+    updatedAt: z.ZodString;
+    startedAt: z.ZodOptional<z.ZodString>;
+    finishedAt: z.ZodOptional<z.ZodString>;
+}, z.core.$strict>;
+export type BatchRun = z.infer<typeof batchRunSchema>;
+//# sourceMappingURL=execution-admission.d.ts.map

package/dist/cloud-workspace/runtime/execution-admission.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"execution-admission.d.ts","sourceRoot":"","sources":["../../../src/cloud-workspace/runtime/execution-admission.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB;;;GAGG;AAEH,eAAO,MAAM,iCAAiC,0CAA0C,CAAC;AACzF,eAAO,MAAM,kCAAkC,KAAK,CAAC;AACrD,eAAO,MAAM,6BAA6B;;;EAAoD,CAAC;AAC/F,eAAO,MAAM,2BAA2B,8CAA8C,CAAC;AACvF,eAAO,MAAM,yBAAyB,4CAA4C,CAAC;AAGnF,eAAO,MAAM,0BAA0B;;;kBAG5B,CAAC;AACZ,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,0BAA0B,CAAC,CAAC;AAE9E,wGAAwG;AACxG,eAAO,MAAM,8BAA8B;;;;EAAyD,CAAC;AACrG,MAAM,MAAM,wBAAwB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,8BAA8B,CAAC,CAAC;AAEtF;;;GAGG;AACH,eAAO,MAAM,8BAA8B;;;;;;EAA0E,CAAC;AACtH,MAAM,MAAM,wBAAwB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,8BAA8B,CAAC,CAAC;AACtF,eAAO,MAAM,+BAA+B,EAAE,SAAS,wBAAwB,EAA8B,CAAC;AAC9G,eAAO,MAAM,oCAAoC,EAAE,SAAS,wBAAwB,EAA8C,CAAC;AAEnI,eAAO,MAAM,4BAA4B;;;;;;;;EAEvC,CAAC;AACH,MAAM,MAAM,sBAAsB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,4BAA4B,CAAC,CAAC;AAElF,eAAO,MAAM,wBAAwB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBAgB1B,CAAC;AACZ,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC;AAE1E;;;GAGG;AACH,eAAO,MAAM,qBAAqB,qBAAqB,CAAC;AAExD,wGAAwG;AACxG,eAAO,MAAM,0BAA0B;;;;;;;;kBAI5B,CAAC;AACZ,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,0BAA0B,CAAC,CAAC;AAE9E,eAAO,MAAM,qBAAqB;;;;;;;;;;;;;iBAKhC,CAAC;AACH,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAEpE,qFAAqF;AACrF,eAAO,MAAM,oBAAoB;;;;;;;;EAA+F,CAAC;AACjI,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAClE,eAAO,MAAM,2BAA2B,EAAE,SAAS,cAAc,EAAyC,CAAC;AAC3G,eAAO,MAAM,mBAAmB;;;;EAA6C,CAAC;AAC9E,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAIhE,2FAA2F;AAC3F,eAAO,MAAM,4BAA4B;;;;;;;;;kBAiBvC,CAAC;AACH,MAAM,MAAM,sBAAsB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,4BAA4B,CAAC,CAAC;AAElF,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAE5D;AAED,eAAO,MAAM,iCAAiC,IAAI,CAAC;AAEnD,eAAO,MAAM,8BAA8B;;;;;;kBAMhC,CAAC;AACZ,MAAM,MAAM,wBAAwB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,8BAA8B,CAAC,CAAC;AAEtF,eAAO,MAAM,cAAc;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBA2BhB,CAAC;AACZ,MAAM,MAAM,QAAQ,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,CAAC"}

package/dist/cloud-workspace/runtime/execution-admission.js

@@ -0,0 +1,127 @@
+import { z } from 'zod';
+import { workspaceDirectoryNameSchema, workspaceSessionScopeSchema } from './workspace-directories.js';
+/**
+ * Execution admission shared by Runtime, Business and the sandbox runtime.
+ * See docs/architecture/backend/cloud-workspace/batch-variant-generation-design.md §5–§6.
+ */
+export const EXECUTION_CONCURRENCY_SETTING_KEY = 'cloud_workspace.execution_concurrency';
+export const EXECUTION_CONCURRENCY_SAFETY_BOUND = 10;
+export const DEFAULT_EXECUTION_CONCURRENCY = Object.freeze({ workspaceMax: 3, sandboxMax: 3 });
+export const EXECUTION_WORKSPACE_MAX_ENV = 'CLOUD_EXECUTION_WORKSPACE_MAX_CONCURRENCY';
+export const EXECUTION_SANDBOX_MAX_ENV = 'CLOUD_EXECUTION_SANDBOX_MAX_CONCURRENCY';
+const concurrencyLimit = z.number().int().min(1).max(EXECUTION_CONCURRENCY_SAFETY_BOUND);
+export const executionConcurrencySchema = z.object({
+    workspaceMax: concurrencyLimit,
+    sandboxMax: concurrencyLimit,
+}).strict();
+/** What holds the occupancy: an interactive turn, a standalone preview build, or a batch member Run. */
+export const executionOccupancySourceSchema = z.enum(['session_turn', 'preview_build', 'batch_run']);
+/**
+ * `waiting_user` keeps the directory but not a slot; `released` is terminal.
+ * Slots are counted only for `active` and `reconciling`.
+ */
+export const executionOccupancyStatusSchema = z.enum(['queued', 'active', 'waiting_user', 'reconciling', 'released']);
+export const SLOT_COUNTED_OCCUPANCY_STATUSES = ['active', 'reconciling'];
+export const DIRECTORY_HOLDING_OCCUPANCY_STATUSES = ['active', 'waiting_user', 'reconciling'];
+export const executionReleaseReasonSchema = z.enum([
+    'completed', 'failed', 'interrupted', 'cancelled', 'reconciled', 'instance_terminated', 'admission_rejected',
+]);
+export const executionOccupancySchema = z.object({
+    occupancyId: z.string().uuid(),
+    runtimeId: z.string().min(1).max(128),
+    generation: z.number().int().min(0).optional(),
+    workspaceId: z.string().uuid(),
+    directoryName: workspaceSessionScopeSchema,
+    source: executionOccupancySourceSchema,
+    operationId: z.string().min(1).max(128).optional(),
+    runId: z.string().uuid().optional(),
+    status: executionOccupancyStatusSchema,
+    queueSequence: z.string().regex(/^\d+$/),
+    queuePosition: z.number().int().min(0).optional(),
+    createdAt: z.string().datetime(),
+    admittedAt: z.string().datetime().optional(),
+    releasedAt: z.string().datetime().optional(),
+    releaseReason: executionReleaseReasonSchema.optional(),
+}).strict();
+/**
+ * Returned (HTTP 202) when an execution is accepted but waits for a slot. These fields are added
+ * to the normal accepted operation payload, so parsing must not reject the other keys.
+ */
+export const EXECUTION_QUEUED_CODE = 'execution_queued';
+/** The execution that keeps a queued request waiting, so the UI can name it instead of a bare count. */
+export const executionQueueHolderSchema = z.object({
+    occupancyId: z.string().uuid(),
+    source: executionOccupancySourceSchema,
+    sessionId: z.string().optional(),
+}).strict();
+export const executionQueuedSchema = z.object({
+    code: z.literal(EXECUTION_QUEUED_CODE),
+    occupancyId: z.string().uuid(),
+    queuePosition: z.number().int().min(0),
+    holder: executionQueueHolderSchema.optional(),
+});
+/** Batch member Run — only batch members have one; it owns exactly one occupancy. */
+export const batchRunStatusSchema = z.enum(['queued', 'running', 'reconciling', 'stopping', 'succeeded', 'failed', 'cancelled']);
+export const BATCH_RUN_TERMINAL_STATUSES = ['succeeded', 'failed', 'cancelled'];
+export const batchRunPhaseSchema = z.enum(['prepare', 'generate', 'deliver']);
+const commitHash = z.string().regex(/^(?:[a-f0-9]{40}|[a-f0-9]{64})$/);
+/** Durable frozen source of one batch. New snapshots use the frozen commit as `digest`. */
+export const batchSourceSnapshotRefSchema = z.object({
+    batchId: z.string().uuid(),
+    commitHash,
+    digest: commitHash,
+    sourceWorkspaceId: z.string().uuid(),
+    sourceDirectoryName: workspaceDirectoryNameSchema,
+    /** Set when pushed to the project remote. */
+    remoteRef: z.string().min(1).max(512).optional(),
+    /** Set when stored in private artifact storage (standalone workspaces). */
+    artifactKey: z.string().min(1).max(512).optional(),
+    frozenAt: z.string().datetime(),
+}).strict().superRefine((value, context) => {
+    if (!value.remoteRef && !value.artifactKey)
+        context.addIssue({ code: 'custom', message: 'snapshot_not_durable' });
+    if (value.remoteRef && value.remoteRef !== batchSourceRemoteRef(value.batchId)
+        && value.remoteRef !== `refs/playcraft/batch/${value.batchId}/source`) {
+        context.addIssue({ code: 'custom', path: ['remoteRef'], message: 'batch_source_reference_mismatch' });
+    }
+});
+export function batchSourceRemoteRef(batchId) {
+    return `refs/tags/playcraft/batch/${z.string().uuid().parse(batchId)}/source`;
+}
+export const DEFAULT_BATCH_AUTO_RECOVERY_LIMIT = 2;
+export const batchRunDeliveryEvidenceSchema = z.object({
+    savedCommit: commitHash.optional(),
+    pushedCommit: commitHash.optional(),
+    buildDigest: z.string().regex(/^[a-f0-9]{64}$/).optional(),
+    verified: z.boolean().optional(),
+    previewRef: z.string().min(1).max(512).optional(),
+}).strict();
+export const batchRunSchema = z.object({
+    runId: z.string().uuid(),
+    batchId: z.string().uuid(),
+    resultVersionId: z.string().uuid(),
+    runtimeId: z.string().min(1).max(128),
+    workspaceId: z.string().uuid(),
+    directoryName: workspaceDirectoryNameSchema,
+    occupancyId: z.string().uuid().optional(),
+    sessionId: z.string().min(1).max(128).optional(),
+    operationId: z.string().min(1).max(128).optional(),
+    status: batchRunStatusSchema,
+    phase: batchRunPhaseSchema,
+    /** Present on retries and recovery: resume delivery from this exact commit. */
+    resumeFromCommit: commitHash.optional(),
+    evidence: batchRunDeliveryEvidenceSchema.optional(),
+    previousRunId: z.string().uuid().optional(),
+    autoRecoveryCount: z.number().int().min(0),
+    cancelRequested: z.boolean(),
+    ownerFence: z.number().int().min(0),
+    revision: z.number().int().min(0),
+    error: z.string().max(128).optional(),
+    createdAt: z.string().datetime(),
+    updatedAt: z.string().datetime(),
+    /** The associated occupancy's admission time; absent before execution or when unavailable. */
+    startedAt: z.string().datetime().optional(),
+    /** Terminal transition time; later heartbeats and receipts cannot change a terminal run. */
+    finishedAt: z.string().datetime().optional(),
+}).strict();
+//# sourceMappingURL=execution-admission.js.map

package/dist/cloud-workspace/runtime/execution-admission.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"execution-admission.js","sourceRoot":"","sources":["../../../src/cloud-workspace/runtime/execution-admission.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,4BAA4B,EAAE,2BAA2B,EAAE,MAAM,4BAA4B,CAAC;AAEvG;;;GAGG;AAEH,MAAM,CAAC,MAAM,iCAAiC,GAAG,uCAAuC,CAAC;AACzF,MAAM,CAAC,MAAM,kCAAkC,GAAG,EAAE,CAAC;AACrD,MAAM,CAAC,MAAM,6BAA6B,GAAG,MAAM,CAAC,MAAM,CAAC,EAAE,YAAY,EAAE,CAAC,EAAE,UAAU,EAAE,CAAC,EAAE,CAAC,CAAC;AAC/F,MAAM,CAAC,MAAM,2BAA2B,GAAG,2CAA2C,CAAC;AACvF,MAAM,CAAC,MAAM,yBAAyB,GAAG,yCAAyC,CAAC;AAEnF,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,kCAAkC,CAAC,CAAC;AACzF,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC,CAAC,MAAM,CAAC;IACjD,YAAY,EAAE,gBAAgB;IAC9B,UAAU,EAAE,gBAAgB;CAC7B,CAAC,CAAC,MAAM,EAAE,CAAC;AAGZ,wGAAwG;AACxG,MAAM,CAAC,MAAM,8BAA8B,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,cAAc,EAAE,eAAe,EAAE,WAAW,CAAC,CAAC,CAAC;AAGrG;;;GAGG;AACH,MAAM,CAAC,MAAM,8BAA8B,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,QAAQ,EAAE,cAAc,EAAE,aAAa,EAAE,UAAU,CAAC,CAAC,CAAC;AAEtH,MAAM,CAAC,MAAM,+BAA+B,GAAwC,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC;AAC9G,MAAM,CAAC,MAAM,oCAAoC,GAAwC,CAAC,QAAQ,EAAE,cAAc,EAAE,aAAa,CAAC,CAAC;AAEnI,MAAM,CAAC,MAAM,4BAA4B,GAAG,CAAC,CAAC,IAAI,CAAC;IACjD,WAAW,EAAE,QAAQ,EAAE,aAAa,EAAE,WAAW,EAAE,YAAY,EAAE,qBAAqB,EAAE,oBAAoB;CAC7G,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC/C,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE;IAC9B,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IACrC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAC9C,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE;IAC9B,aAAa,EAAE,2BAA2B;IAC1C,MAAM,EAAE,8BAA8B;IACtC,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;IAClD,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE;IACnC,MAAM,EAAE,8BAA8B;IACtC,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC;IACxC,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACjD,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAChC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IAC5C,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IAC5C,aAAa,EAAE,4BAA4B,CAAC,QAAQ,EAAE;CACvD,CAAC,CAAC,MAAM,EAAE,CAAC;AAGZ;;;GAGG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,kBAAkB,CAAC;AAExD,wGAAwG;AACxG,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC,CAAC,MAAM,CAAC;IACjD,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE;IAC9B,MAAM,EAAE,8BAA8B;IACtC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CACjC,CAAC,CAAC,MAAM,EAAE,CAAC;AAGZ,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC5C,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,qBAAqB,CAAC;IACtC,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE;IAC9B,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACtC,MAAM,EAAE,0BAA0B,CAAC,QAAQ,EAAE;CAC9C,CAAC,CAAC;AAGH,qFAAqF;AACrF,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,SAAS,EAAE,aAAa,EAAE,UAAU,EAAE,WAAW,EAAE,QAAQ,EAAE,WAAW,CAAC,CAAC,CAAC;AAEjI,MAAM,CAAC,MAAM,2BAA2B,GAA8B,CAAC,WAAW,EAAE,QAAQ,EAAE,WAAW,CAAC,CAAC;AAC3G,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,UAAU,EAAE,SAAS,CAAC,CAAC,CAAC;AAG9E,MAAM,UAAU,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,iCAAiC,CAAC,CAAC;AAEvE,2FAA2F;AAC3F,MAAM,CAAC,MAAM,4BAA4B,GAAG,CAAC,CAAC,MAAM,CAAC;IACnD,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE;IAC1B,UAAU;IACV,MAAM,EAAE,UAAU;IAClB,iBAAiB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE;IACpC,mBAAmB,EAAE,4BAA4B;IACjD,6CAA6C;IAC7C,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;IAChD,2EAA2E;IAC3E,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;IAClD,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAChC,CAAC,CAAC,MAAM,EAAE,CAAC,WAAW,CAAC,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE;IACzC,IAAI,CAAC,KAAK,CAAC,SAAS,IAAI,CAAC,KAAK,CAAC,WAAW;QAAE,OAAO,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,sBAAsB,EAAE,CAAC,CAAC;IAClH,IAAI,KAAK,CAAC,SAAS,IAAI,KAAK,CAAC,SAAS,KAAK,oBAAoB,CAAC,KAAK,CAAC,OAAO,CAAC;WACzE,KAAK,CAAC,SAAS,KAAK,wBAAwB,KAAK,CAAC,OAAO,SAAS,EAAE,CAAC;QACxE,OAAO,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,WAAW,CAAC,EAAE,OAAO,EAAE,iCAAiC,EAAE,CAAC,CAAC;IACxG,CAAC;AACH,CAAC,CAAC,CAAC;AAGH,MAAM,UAAU,oBAAoB,CAAC,OAAe;IAClD,OAAO,6BAA6B,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC;AAChF,CAAC;AAED,MAAM,CAAC,MAAM,iCAAiC,GAAG,CAAC,CAAC;AAEnD,MAAM,CAAC,MAAM,8BAA8B,GAAG,CAAC,CAAC,MAAM,CAAC;IACrD,WAAW,EAAE,UAAU,CAAC,QAAQ,EAAE;IAClC,YAAY,EAAE,UAAU,CAAC,QAAQ,EAAE;IACnC,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,QAAQ,EAAE;IAC1D,QAAQ,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IAChC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;CAClD,CAAC,CAAC,MAAM,EAAE,CAAC;AAGZ,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,CAAC,MAAM,CAAC;IACrC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE;IACxB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE;IAC1B,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE;IAClC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IACrC,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE;IAC9B,aAAa,EAAE,4BAA4B;IAC3C,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE;IACzC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;IAChD,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;IAClD,MAAM,EAAE,oBAAoB;IAC5B,KAAK,EAAE,mBAAmB;IAC1B,+EAA+E;IAC/E,gBAAgB,EAAE,UAAU,CAAC,QAAQ,EAAE;IACvC,QAAQ,EAAE,8BAA8B,CAAC,QAAQ,EAAE;IACnD,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE;IAC3C,iBAAiB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1C,eAAe,EAAE,CAAC,CAAC,OAAO,EAAE;IAC5B,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACnC,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACjC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;IACrC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAChC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAChC,8FAA8F;IAC9F,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IAC3C,4FAA4F;IAC5F,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;CAC7C,CAAC,CAAC,MAAM,EAAE,CAAC"}

package/dist/cloud-workspace/runtime/execution-grant.d.ts

@@ -0,0 +1,36 @@
+import { z } from 'zod';
+export declare const WORKSPACE_EXECUTION_KIND: "workspace-execution";
+export declare const WORKSPACE_EXECUTION_AUDIENCE: "playcraft-runtime";
+export declare const workspaceExecutionGrantClaimsSchema: z.ZodObject<{
+    kind: z.ZodLiteral<"workspace-execution">;
+    credentialType: z.ZodLiteral<"workspace-execution">;
+    environment: z.ZodString;
+    userId: z.ZodString;
+    workspaceId: z.ZodString;
+    runtimeId: z.ZodString;
+    generation: z.ZodNumber;
+    runtimeEpoch: z.ZodNumber;
+    grantId: z.ZodString;
+    aud: z.ZodLiteral<"playcraft-runtime">;
+}, z.core.$strict>;
+export type WorkspaceExecutionGrantClaims = z.infer<typeof workspaceExecutionGrantClaimsSchema>;
+/** Persisted grant metadata. The JWT itself is never part of this record. */
+export declare const workspaceExecutionGrantRecordSchema: z.ZodObject<{
+    grantId: z.ZodString;
+    environment: z.ZodString;
+    userId: z.ZodString;
+    workspaceId: z.ZodString;
+    runtimeId: z.ZodString;
+    generation: z.ZodNumber;
+    runtimeEpoch: z.ZodNumber;
+    expiresAt: z.ZodString;
+    revokedAt: z.ZodOptional<z.ZodString>;
+}, z.core.$strict>;
+export type WorkspaceExecutionGrantRecord = z.infer<typeof workspaceExecutionGrantRecordSchema>;
+export declare const GRANT_CLIENT_FORBIDDEN_FIELDS: readonly ["token", "grantId", "kind", "credentialType", "aud", "expiresAt", "revokedAt", "runtimeId", "generation", "runtimeEpoch", "leaseFence", "rootPath", "workspaceRoot", "binding", "repositoryUrl", "branchName", "preparation", "gitAccess", "parentGrantId", "authzRevision", "scope", "modelConfigIds"];
+export declare function findForbiddenGrantFields(input: unknown): string[];
+export declare function parseWorkspaceExecutionGrantClaims(input: unknown): WorkspaceExecutionGrantClaims;
+export declare function newGrantId(): string;
+export declare function mintWorkspaceExecutionGrant(claims: WorkspaceExecutionGrantClaims, secret: string, expiresIn?: string | number): Promise<string>;
+export declare function verifyWorkspaceExecutionGrant(token: string, secret: string): Promise<WorkspaceExecutionGrantClaims>;
+//# sourceMappingURL=execution-grant.d.ts.map

package/dist/cloud-workspace/runtime/execution-grant.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"execution-grant.d.ts","sourceRoot":"","sources":["../../../src/cloud-workspace/runtime/execution-grant.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,eAAO,MAAM,wBAAwB,EAAG,qBAA8B,CAAC;AACvE,eAAO,MAAM,4BAA4B,EAAG,mBAA4B,CAAC;AAIzE,eAAO,MAAM,mCAAmC;;;;;;;;;;;kBAarC,CAAC;AAEZ,MAAM,MAAM,6BAA6B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mCAAmC,CAAC,CAAC;AAEhG,6EAA6E;AAC7E,eAAO,MAAM,mCAAmC;;;;;;;;;;kBAYrC,CAAC;AAEZ,MAAM,MAAM,6BAA6B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mCAAmC,CAAC,CAAC;AAEhG,eAAO,MAAM,6BAA6B,mTAuBhC,CAAC;AAEX,wBAAgB,wBAAwB,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,EAAE,CAGjE;AAED,wBAAgB,kCAAkC,CAAC,KAAK,EAAE,OAAO,GAAG,6BAA6B,CAEhG;AAED,wBAAgB,UAAU,IAAI,MAAM,CAEnC;AAED,wBAAsB,2BAA2B,CAC/C,MAAM,EAAE,6BAA6B,EACrC,MAAM,EAAE,MAAM,EACd,SAAS,GAAE,MAAM,GAAG,MAAa,GAChC,OAAO,CAAC,MAAM,CAAC,CASjB;AAED,wBAAsB,6BAA6B,CACjD,KAAK,EAAE,MAAM,EACb,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,6BAA6B,CAAC,CAkBxC"}

package/dist/cloud-workspace/runtime/execution-grant.js

@@ -0,0 +1,102 @@
+import { randomUUID } from 'node:crypto';
+import { SignJWT, jwtVerify } from 'jose';
+import { z } from 'zod';
+import { generationSchema, runtimeEpochSchema } from './generations.js';
+export const WORKSPACE_EXECUTION_KIND = 'workspace-execution';
+export const WORKSPACE_EXECUTION_AUDIENCE = 'playcraft-runtime';
+const encoder = new TextEncoder();
+export const workspaceExecutionGrantClaimsSchema = z
+    .object({
+    kind: z.literal(WORKSPACE_EXECUTION_KIND),
+    credentialType: z.literal(WORKSPACE_EXECUTION_KIND),
+    environment: z.string().trim().min(1).max(64),
+    userId: z.string().trim().min(1).max(128),
+    workspaceId: z.string().trim().min(1).max(128),
+    runtimeId: z.string().trim().min(1).max(128),
+    generation: generationSchema,
+    runtimeEpoch: runtimeEpochSchema,
+    grantId: z.string().trim().min(1).max(128),
+    aud: z.literal(WORKSPACE_EXECUTION_AUDIENCE),
+})
+    .strict();
+/** Persisted grant metadata. The JWT itself is never part of this record. */
+export const workspaceExecutionGrantRecordSchema = z
+    .object({
+    grantId: z.string().trim().min(1).max(128),
+    environment: z.string().trim().min(1).max(64),
+    userId: z.string().trim().min(1).max(128),
+    workspaceId: z.string().trim().min(1).max(128),
+    runtimeId: z.string().trim().min(1).max(128),
+    generation: generationSchema,
+    runtimeEpoch: runtimeEpochSchema,
+    expiresAt: z.string().min(1),
+    revokedAt: z.string().min(1).optional(),
+})
+    .strict();
+export const GRANT_CLIENT_FORBIDDEN_FIELDS = [
+    'token',
+    'grantId',
+    'kind',
+    'credentialType',
+    'aud',
+    'expiresAt',
+    'revokedAt',
+    'runtimeId',
+    'generation',
+    'runtimeEpoch',
+    'leaseFence',
+    'rootPath',
+    'workspaceRoot',
+    'binding',
+    'repositoryUrl',
+    'branchName',
+    'preparation',
+    'gitAccess',
+    'parentGrantId',
+    'authzRevision',
+    'scope',
+    'modelConfigIds',
+];
+export function findForbiddenGrantFields(input) {
+    if (!input || typeof input !== 'object' || Array.isArray(input))
+        return [];
+    return GRANT_CLIENT_FORBIDDEN_FIELDS.filter((field) => field in input);
+}
+export function parseWorkspaceExecutionGrantClaims(input) {
+    return workspaceExecutionGrantClaimsSchema.parse(input);
+}
+export function newGrantId() {
+    return `grant_${randomUUID()}`;
+}
+export async function mintWorkspaceExecutionGrant(claims, secret, expiresIn = '1h') {
+    parseWorkspaceExecutionGrantClaims(claims);
+    if (secret.length < 16)
+        throw new Error('grant_secret_required');
+    return new SignJWT(claims)
+        .setProtectedHeader({ alg: 'HS256' })
+        .setIssuedAt()
+        .setExpirationTime(expiresIn)
+        .setJti(claims.grantId)
+        .sign(encoder.encode(secret));
+}
+export async function verifyWorkspaceExecutionGrant(token, secret) {
+    if (secret.length < 16)
+        throw new Error('grant_secret_required');
+    const { payload } = await jwtVerify(token, encoder.encode(secret), {
+        algorithms: ['HS256'],
+        audience: WORKSPACE_EXECUTION_AUDIENCE,
+    });
+    return parseWorkspaceExecutionGrantClaims({
+        kind: payload.kind,
+        credentialType: payload.credentialType,
+        environment: payload.environment,
+        userId: payload.userId,
+        workspaceId: payload.workspaceId,
+        runtimeId: payload.runtimeId,
+        generation: payload.generation,
+        runtimeEpoch: payload.runtimeEpoch,
+        grantId: payload.grantId,
+        aud: payload.aud ?? WORKSPACE_EXECUTION_AUDIENCE,
+    });
+}
+//# sourceMappingURL=execution-grant.js.map

package/dist/cloud-workspace/runtime/execution-grant.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"execution-grant.js","sourceRoot":"","sources":["../../../src/cloud-workspace/runtime/execution-grant.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,MAAM,CAAC;AAC1C,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AAExE,MAAM,CAAC,MAAM,wBAAwB,GAAG,qBAA8B,CAAC;AACvE,MAAM,CAAC,MAAM,4BAA4B,GAAG,mBAA4B,CAAC;AAEzE,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAC;AAElC,MAAM,CAAC,MAAM,mCAAmC,GAAG,CAAC;KACjD,MAAM,CAAC;IACN,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,wBAAwB,CAAC;IACzC,cAAc,EAAE,CAAC,CAAC,OAAO,CAAC,wBAAwB,CAAC;IACnD,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;IAC7C,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IACzC,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IAC9C,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IAC5C,UAAU,EAAE,gBAAgB;IAC5B,YAAY,EAAE,kBAAkB;IAChC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IAC1C,GAAG,EAAE,CAAC,CAAC,OAAO,CAAC,4BAA4B,CAAC;CAC7C,CAAC;KACD,MAAM,EAAE,CAAC;AAIZ,6EAA6E;AAC7E,MAAM,CAAC,MAAM,mCAAmC,GAAG,CAAC;KACjD,MAAM,CAAC;IACN,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IAC1C,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;IAC7C,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IACzC,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IAC9C,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IAC5C,UAAU,EAAE,gBAAgB;IAC5B,YAAY,EAAE,kBAAkB;IAChC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC5B,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;CACxC,CAAC;KACD,MAAM,EAAE,CAAC;AAIZ,MAAM,CAAC,MAAM,6BAA6B,GAAG;IAC3C,OAAO;IACP,SAAS;IACT,MAAM;IACN,gBAAgB;IAChB,KAAK;IACL,WAAW;IACX,WAAW;IACX,WAAW;IACX,YAAY;IACZ,cAAc;IACd,YAAY;IACZ,UAAU;IACV,eAAe;IACf,SAAS;IACT,eAAe;IACf,YAAY;IACZ,aAAa;IACb,WAAW;IACX,eAAe;IACf,eAAe;IACf,OAAO;IACP,gBAAgB;CACR,CAAC;AAEX,MAAM,UAAU,wBAAwB,CAAC,KAAc;IACrD,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAC3E,OAAO,6BAA6B,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,IAAI,KAAK,CAAC,CAAC;AACzE,CAAC;AAED,MAAM,UAAU,kCAAkC,CAAC,KAAc;IAC/D,OAAO,mCAAmC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;AAC1D,CAAC;AAED,MAAM,UAAU,UAAU;IACxB,OAAO,SAAS,UAAU,EAAE,EAAE,CAAC;AACjC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAC/C,MAAqC,EACrC,MAAc,EACd,YAA6B,IAAI;IAEjC,kCAAkC,CAAC,MAAM,CAAC,CAAC;IAC3C,IAAI,MAAM,CAAC,MAAM,GAAG,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;IACjE,OAAO,IAAI,OAAO,CAAC,MAAM,CAAC;SACvB,kBAAkB,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC;SACpC,WAAW,EAAE;SACb,iBAAiB,CAAC,SAAS,CAAC;SAC5B,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC;SACtB,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;AAClC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,6BAA6B,CACjD,KAAa,EACb,MAAc;IAEd,IAAI,MAAM,CAAC,MAAM,GAAG,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;IACjE,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,SAAS,CAAC,KAAK,EAAE,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE;QACjE,UAAU,EAAE,CAAC,OAAO,CAAC;QACrB,QAAQ,EAAE,4BAA4B;KACvC,CAAC,CAAC;IACH,OAAO,kCAAkC,CAAC;QACxC,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,cAAc,EAAE,OAAO,CAAC,cAAc;QACtC,WAAW,EAAE,OAAO,CAAC,WAAW;QAChC,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,WAAW,EAAE,OAAO,CAAC,WAAW;QAChC,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,UAAU,EAAE,OAAO,CAAC,UAAU;QAC9B,YAAY,EAAE,OAAO,CAAC,YAAY;QAClC,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,GAAG,EAAE,OAAO,CAAC,GAAG,IAAI,4BAA4B;KACjD,CAAC,CAAC;AACL,CAAC"}

package/dist/cloud-workspace/runtime/files-search.d.ts

@@ -0,0 +1,17 @@
+import { z } from 'zod';
+export declare const WORKSPACE_FILE_SEARCH_LIMIT = 100;
+export declare const workspaceFileSearchQuerySchema: z.ZodObject<{
+    query: z.ZodDefault<z.ZodString>;
+    limit: z.ZodDefault<z.ZodNumber>;
+    cursor: z.ZodOptional<z.ZodString>;
+}, z.core.$strict>;
+export type WorkspaceFileSearchQuery = z.input<typeof workspaceFileSearchQuerySchema>;
+export declare const workspaceFileSearchResultSchema: z.ZodObject<{
+    files: z.ZodArray<z.ZodObject<{
+        path: z.ZodString;
+    }, z.core.$strict>>;
+    truncated: z.ZodBoolean;
+    nextCursor: z.ZodOptional<z.ZodString>;
+}, z.core.$strict>;
+export type WorkspaceFileSearchResult = z.infer<typeof workspaceFileSearchResultSchema>;
+//# sourceMappingURL=files-search.d.ts.map

package/dist/cloud-workspace/runtime/files-search.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"files-search.d.ts","sourceRoot":"","sources":["../../../src/cloud-workspace/runtime/files-search.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,eAAO,MAAM,2BAA2B,MAAM,CAAC;AAC/C,eAAO,MAAM,8BAA8B;;;;kBAIhC,CAAC;AAEZ,MAAM,MAAM,wBAAwB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,8BAA8B,CAAC,CAAC;AACtF,eAAO,MAAM,+BAA+B;;;;;;kBAIjC,CAAC;AACZ,MAAM,MAAM,yBAAyB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,+BAA+B,CAAC,CAAC"}

package/dist/cloud-workspace/runtime/files-search.js

@@ -0,0 +1,14 @@
+import { z } from 'zod';
+import { workspaceRelativePathSchema } from './files.js';
+export const WORKSPACE_FILE_SEARCH_LIMIT = 100;
+export const workspaceFileSearchQuerySchema = z.object({
+    query: z.string().trim().max(256).default(''),
+    limit: z.number().int().min(1).max(WORKSPACE_FILE_SEARCH_LIMIT).default(WORKSPACE_FILE_SEARCH_LIMIT),
+    cursor: z.string().min(1).max(1024).optional(),
+}).strict();
+export const workspaceFileSearchResultSchema = z.object({
+    files: z.array(z.object({ path: workspaceRelativePathSchema }).strict()).max(WORKSPACE_FILE_SEARCH_LIMIT),
+    truncated: z.boolean(),
+    nextCursor: z.string().min(1).max(1024).optional(),
+}).strict();
+//# sourceMappingURL=files-search.js.map

package/dist/cloud-workspace/runtime/files-search.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"files-search.js","sourceRoot":"","sources":["../../../src/cloud-workspace/runtime/files-search.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,2BAA2B,EAAE,MAAM,YAAY,CAAC;AAEzD,MAAM,CAAC,MAAM,2BAA2B,GAAG,GAAG,CAAC;AAC/C,MAAM,CAAC,MAAM,8BAA8B,GAAG,CAAC,CAAC,MAAM,CAAC;IACrD,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IAC7C,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,2BAA2B,CAAC,CAAC,OAAO,CAAC,2BAA2B,CAAC;IACpG,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE;CAC/C,CAAC,CAAC,MAAM,EAAE,CAAC;AAGZ,MAAM,CAAC,MAAM,+BAA+B,GAAG,CAAC,CAAC,MAAM,CAAC;IACtD,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,2BAA2B,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,2BAA2B,CAAC;IACzG,SAAS,EAAE,CAAC,CAAC,OAAO,EAAE;IACtB,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE;CACnD,CAAC,CAAC,MAAM,EAAE,CAAC"}