@qduc/term2 0.14.0 → 0.16.0

package/dist/gateway/trusted-clients.js

@@ -0,0 +1,157 @@
+import crypto from 'node:crypto';
+import fs from 'node:fs';
+import path from 'node:path';
+import { randomUUID } from 'node:crypto';
+export class TrustedClientsError extends Error {
+    constructor(message = 'trusted client store is unavailable') {
+        super(message);
+        this.name = 'TrustedClientsError';
+    }
+}
+export class TrustedClientsStore {
+    #filePath;
+    #file;
+    constructor(filePath) {
+        if (!path.isAbsolute(filePath) || filePath.includes('\u0000'))
+            throw new TrustedClientsError();
+        this.#filePath = filePath;
+        this.#file = this.#load();
+    }
+    get filePath() {
+        return this.#filePath;
+    }
+    get size() {
+        return Object.keys(this.#file.clients).length;
+    }
+    entries() {
+        return Object.entries(this.#file.clients).map(([kid, client]) => ({
+            kid,
+            publicKeyPem: client.publicKeyPem,
+            fingerprint: client.fingerprint,
+        }));
+    }
+    add(publicKeyPem) {
+        const normalized = normalizePublicKey(publicKeyPem);
+        const client = {
+            publicKeyPem: normalized.publicKeyPem,
+            pairedAt: new Date().toISOString(),
+            fingerprint: normalized.fingerprint,
+        };
+        const next = {
+            version: 1,
+            clients: { ...this.#file.clients, [normalized.fingerprint]: client },
+        };
+        this.#write(next);
+        this.#file = next;
+        return { kid: normalized.fingerprint, ...normalized };
+    }
+    static normalizePublicKey(publicKeyPem) {
+        const normalized = normalizePublicKey(publicKeyPem);
+        return { kid: normalized.fingerprint, ...normalized };
+    }
+    #load() {
+        let parsed;
+        try {
+            parsed = JSON.parse(fs.readFileSync(this.#filePath, 'utf8'));
+        }
+        catch (error) {
+            if (error.code === 'ENOENT')
+                return { version: 1, clients: {} };
+            throw new TrustedClientsError();
+        }
+        if (!isTrustedClientsFile(parsed))
+            throw new TrustedClientsError();
+        return parsed;
+    }
+    #write(file) {
+        const directory = path.dirname(this.#filePath);
+        fs.mkdirSync(directory, { recursive: true, mode: 0o700 });
+        try {
+            fs.chmodSync(directory, 0o700);
+        }
+        catch {
+            throw new TrustedClientsError();
+        }
+        const tempPath = `${this.#filePath}.${process.pid}.${randomUUID()}.tmp`;
+        let fd;
+        let renamed = false;
+        try {
+            fd = fs.openSync(tempPath, 'w', 0o600);
+            fs.writeFileSync(fd, JSON.stringify(file, null, 2), { encoding: 'utf8' });
+            fs.fsyncSync(fd);
+            fs.closeSync(fd);
+            fd = undefined;
+            fs.renameSync(tempPath, this.#filePath);
+            renamed = true;
+            fs.chmodSync(this.#filePath, 0o600);
+            const directoryFd = fs.openSync(directory, 'r');
+            try {
+                fs.fsyncSync(directoryFd);
+            }
+            finally {
+                fs.closeSync(directoryFd);
+            }
+        }
+        catch {
+            throw new TrustedClientsError();
+        }
+        finally {
+            if (fd !== undefined) {
+                try {
+                    fs.closeSync(fd);
+                }
+                catch {
+                    // Preserve the original store failure.
+                }
+            }
+            if (!renamed) {
+                try {
+                    fs.unlinkSync(tempPath);
+                }
+                catch {
+                    // Best effort; no secret is exposed through the error surface.
+                }
+            }
+        }
+    }
+}
+function normalizePublicKey(publicKeyPem) {
+    if (typeof publicKeyPem !== 'string' || publicKeyPem.length === 0 || publicKeyPem.length > 16_384)
+        throw new TrustedClientsError('public key is invalid');
+    if (/PRIVATE KEY/i.test(publicKeyPem))
+        throw new TrustedClientsError('public key is invalid');
+    let key;
+    try {
+        key = crypto.createPublicKey(publicKeyPem);
+    }
+    catch {
+        throw new TrustedClientsError('public key is invalid');
+    }
+    if (key.asymmetricKeyType !== 'rsa')
+        throw new TrustedClientsError('public key is invalid');
+    const der = key.export({ type: 'spki', format: 'der' });
+    const normalized = key.export({ type: 'spki', format: 'pem' }).toString();
+    return {
+        publicKeyPem: normalized,
+        fingerprint: crypto.createHash('sha256').update(der).digest('hex'),
+    };
+}
+function isTrustedClientsFile(value) {
+    if (!value || typeof value !== 'object' || Array.isArray(value))
+        return false;
+    const candidate = value;
+    if (candidate.version !== 1 || !candidate.clients || typeof candidate.clients !== 'object')
+        return false;
+    return Object.entries(candidate.clients).every(([kid, client]) => {
+        if (!/^[a-f0-9]{64}$/.test(kid) || !client || typeof client !== 'object' || Array.isArray(client))
+            return false;
+        const record = client;
+        return (typeof record.publicKeyPem === 'string' &&
+            record.publicKeyPem.length > 0 &&
+            record.publicKeyPem.length <= 16_384 &&
+            typeof record.pairedAt === 'string' &&
+            typeof record.fingerprint === 'string' &&
+            record.fingerprint === kid);
+    });
+}
+//# sourceMappingURL=trusted-clients.js.map

package/dist/gateway/trusted-clients.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"trusted-clients.js","sourceRoot":"","sources":["../../source/gateway/trusted-clients.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,aAAa,CAAC;AACjC,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAmBzC,MAAM,OAAO,mBAAoB,SAAQ,KAAK;IAC5C,YAAY,OAAO,GAAG,qCAAqC;QACzD,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,qBAAqB,CAAC;IACpC,CAAC;CACF;AAED,MAAM,OAAO,mBAAmB;IACrB,SAAS,CAAS;IAC3B,KAAK,CAAqB;IAE1B,YAAY,QAAgB;QAC1B,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC;YAAE,MAAM,IAAI,mBAAmB,EAAE,CAAC;QAC/F,IAAI,CAAC,SAAS,GAAG,QAAQ,CAAC;QAC1B,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,EAAE,CAAC;IAC5B,CAAC;IAED,IAAI,QAAQ;QACV,OAAO,IAAI,CAAC,SAAS,CAAC;IACxB,CAAC;IAED,IAAI,IAAI;QACN,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC;IAChD,CAAC;IAED,OAAO;QACL,OAAO,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC;YAChE,GAAG;YACH,YAAY,EAAE,MAAM,CAAC,YAAY;YACjC,WAAW,EAAE,MAAM,CAAC,WAAW;SAChC,CAAC,CAAC,CAAC;IACN,CAAC;IAED,GAAG,CAAC,YAAoB;QACtB,MAAM,UAAU,GAAG,kBAAkB,CAAC,YAAY,CAAC,CAAC;QACpD,MAAM,MAAM,GAAkB;YAC5B,YAAY,EAAE,UAAU,CAAC,YAAY;YACrC,QAAQ,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YAClC,WAAW,EAAE,UAAU,CAAC,WAAW;SACpC,CAAC;QACF,MAAM,IAAI,GAAuB;YAC/B,OAAO,EAAE,CAAC;YACV,OAAO,EAAE,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,MAAM,EAAE;SACrE,CAAC;QACF,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAClB,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;QAClB,OAAO,EAAE,GAAG,EAAE,UAAU,CAAC,WAAW,EAAE,GAAG,UAAU,EAAE,CAAC;IACxD,CAAC;IAED,MAAM,CAAC,kBAAkB,CAAC,YAAoB;QAC5C,MAAM,UAAU,GAAG,kBAAkB,CAAC,YAAY,CAAC,CAAC;QACpD,OAAO,EAAE,GAAG,EAAE,UAAU,CAAC,WAAW,EAAE,GAAG,UAAU,EAAE,CAAC;IACxD,CAAC;IAED,KAAK;QACH,IAAI,MAAe,CAAC;QACpB,IAAI,CAAC;YACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC;QAC/D,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;gBAAE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;YAC3F,MAAM,IAAI,mBAAmB,EAAE,CAAC;QAClC,CAAC;QACD,IAAI,CAAC,oBAAoB,CAAC,MAAM,CAAC;YAAE,MAAM,IAAI,mBAAmB,EAAE,CAAC;QACnE,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,MAAM,CAAC,IAAwB;QAC7B,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAC/C,EAAE,CAAC,SAAS,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAC1D,IAAI,CAAC;YACH,EAAE,CAAC,SAAS,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;QACjC,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,mBAAmB,EAAE,CAAC;QAClC,CAAC;QACD,MAAM,QAAQ,GAAG,GAAG,IAAI,CAAC,SAAS,IAAI,OAAO,CAAC,GAAG,IAAI,UAAU,EAAE,MAAM,CAAC;QACxE,IAAI,EAAsB,CAAC;QAC3B,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,IAAI,CAAC;YACH,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC;YACvC,EAAE,CAAC,aAAa,CAAC,EAAE,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;YAC1E,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;YACjB,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;YACjB,EAAE,GAAG,SAAS,CAAC;YACf,EAAE,CAAC,UAAU,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;YACxC,OAAO,GAAG,IAAI,CAAC;YACf,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;YACpC,MAAM,WAAW,GAAG,EAAE,CAAC,QAAQ,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;YAChD,IAAI,CAAC;gBACH,EAAE,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC;YAC5B,CAAC;oBAAS,CAAC;gBACT,EAAE,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC;YAC5B,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,mBAAmB,EAAE,CAAC;QAClC,CAAC;gBAAS,CAAC;YACT,IAAI,EAAE,KAAK,SAAS,EAAE,CAAC;gBACrB,IAAI,CAAC;oBACH,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;gBACnB,CAAC;gBAAC,MAAM,CAAC;oBACP,uCAAuC;gBACzC,CAAC;YACH,CAAC;YACD,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,IAAI,CAAC;oBACH,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;gBAC1B,CAAC;gBAAC,MAAM,CAAC;oBACP,+DAA+D;gBACjE,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;CACF;AAED,SAAS,kBAAkB,CAAC,YAAoB;IAC9C,IAAI,OAAO,YAAY,KAAK,QAAQ,IAAI,YAAY,CAAC,MAAM,KAAK,CAAC,IAAI,YAAY,CAAC,MAAM,GAAG,MAAM;QAC/F,MAAM,IAAI,mBAAmB,CAAC,uBAAuB,CAAC,CAAC;IACzD,IAAI,cAAc,CAAC,IAAI,CAAC,YAAY,CAAC;QAAE,MAAM,IAAI,mBAAmB,CAAC,uBAAuB,CAAC,CAAC;IAC9F,IAAI,GAAqB,CAAC;IAC1B,IAAI,CAAC;QACH,GAAG,GAAG,MAAM,CAAC,eAAe,CAAC,YAAY,CAAC,CAAC;IAC7C,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,mBAAmB,CAAC,uBAAuB,CAAC,CAAC;IACzD,CAAC;IACD,IAAI,GAAG,CAAC,iBAAiB,KAAK,KAAK;QAAE,MAAM,IAAI,mBAAmB,CAAC,uBAAuB,CAAC,CAAC;IAC5F,MAAM,GAAG,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;IACxD,MAAM,UAAU,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC;IAC1E,OAAO;QACL,YAAY,EAAE,UAAU;QACxB,WAAW,EAAE,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;KACnE,CAAC;AACJ,CAAC;AAED,SAAS,oBAAoB,CAAC,KAAc;IAC1C,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAC9E,MAAM,SAAS,GAAG,KAAgC,CAAC;IACnD,IAAI,SAAS,CAAC,OAAO,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,IAAI,OAAO,SAAS,CAAC,OAAO,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IACzG,OAAO,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,OAAkC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,EAAE,MAAM,CAAC,EAAE,EAAE;QAC1F,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;YAAE,OAAO,KAAK,CAAC;QAChH,MAAM,MAAM,GAAG,MAAiC,CAAC;QACjD,OAAO,CACL,OAAO,MAAM,CAAC,YAAY,KAAK,QAAQ;YACvC,MAAM,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC;YAC9B,MAAM,CAAC,YAAY,CAAC,MAAM,IAAI,MAAM;YACpC,OAAO,MAAM,CAAC,QAAQ,KAAK,QAAQ;YACnC,OAAO,MAAM,CAAC,WAAW,KAAK,QAAQ;YACtC,MAAM,CAAC,WAAW,KAAK,GAAG,CAC3B,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/gateway/worker-boundary.d.ts

@@ -0,0 +1,41 @@
+import { ExecutionContext } from '../services/execution-context.js';
+import type { GatewaySessionComposition, ProviderBrokerCapability, SecretFreeWorkerSettings, SessionSettingsSnapshot, SessionBinding } from './contracts.js';
+export declare class WorkerBoundaryError extends Error {
+    readonly code: 'provider_unavailable' | 'invalid_broker' | 'unsafe_environment' | 'sandbox_unavailable';
+    constructor(code: WorkerBoundaryError['code']);
+}
+export type WorkerBoundaryProbe = {
+    available: boolean;
+    secretFree: boolean;
+};
+export declare function assertProviderBrokerReady(capability: ProviderBrokerCapability | undefined, probe: WorkerBoundaryProbe | undefined): ProviderBrokerCapability;
+export declare function createSessionScopedProviderBroker(base: ProviderBrokerCapability, sessionId: string, options?: {
+    maxRequestsPerTurn?: number;
+}): ProviderBrokerCapability;
+export declare function createSecretFreeWorkerSettings(capability: ProviderBrokerCapability | undefined, canonicalRoot: string, snapshot?: SessionSettingsSnapshot): SecretFreeWorkerSettings;
+export declare function createSanitizedWorkerEnv(input: {
+    sessionId: string;
+    tmpDir: string;
+    path?: string;
+    locale?: string;
+}): Readonly<Record<string, string>>;
+export declare function assertExplicitSanitizedEnv(env: Readonly<Record<string, string>>): void;
+export type GatewaySessionCompositionOptions = {
+    binding: SessionBinding;
+    providerBroker?: ProviderBrokerCapability;
+    providerProbe?: WorkerBoundaryProbe;
+    settingsSnapshot?: SessionSettingsSnapshot;
+    tmpDir: string;
+    env?: Readonly<Record<string, string>>;
+    sandboxAvailable?: boolean;
+    maxProviderRequestsPerTurn?: number;
+    createRuntime?: (input: {
+        executionContext: ExecutionContext;
+        settings: SecretFreeWorkerSettings;
+        env: Readonly<Record<string, string>>;
+        providerBroker?: ProviderBrokerCapability;
+    }) => GatewaySessionComposition['runtime'];
+};
+/** Composes the session-owned capabilities without changing process cwd or env. */
+export declare function composeGatewaySession(options: GatewaySessionCompositionOptions): GatewaySessionComposition;
+//# sourceMappingURL=worker-boundary.d.ts.map

package/dist/gateway/worker-boundary.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"worker-boundary.d.ts","sourceRoot":"","sources":["../../source/gateway/worker-boundary.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,gBAAgB,EAAE,MAAM,kCAAkC,CAAC;AACpE,OAAO,KAAK,EACV,yBAAyB,EACzB,wBAAwB,EACxB,wBAAwB,EACxB,uBAAuB,EACvB,cAAc,EACf,MAAM,gBAAgB,CAAC;AAKxB,qBAAa,mBAAoB,SAAQ,KAAK;IAC5C,QAAQ,CAAC,IAAI,EAAE,sBAAsB,GAAG,gBAAgB,GAAG,oBAAoB,GAAG,qBAAqB,CAAC;IACxG,YAAY,IAAI,EAAE,mBAAmB,CAAC,MAAM,CAAC,EAI5C;CACF;AAED,MAAM,MAAM,mBAAmB,GAAG;IAChC,SAAS,EAAE,OAAO,CAAC;IACnB,UAAU,EAAE,OAAO,CAAC;CACrB,CAAC;AAEF,wBAAgB,yBAAyB,CACvC,UAAU,EAAE,wBAAwB,GAAG,SAAS,EAChD,KAAK,EAAE,mBAAmB,GAAG,SAAS,GACrC,wBAAwB,CAU1B;AAED,wBAAgB,iCAAiC,CAC/C,IAAI,EAAE,wBAAwB,EAC9B,SAAS,EAAE,MAAM,EACjB,OAAO,GAAE;IAAE,kBAAkB,CAAC,EAAE,MAAM,CAAA;CAAO,GAC5C,wBAAwB,CA+C1B;AAED,wBAAgB,8BAA8B,CAC5C,UAAU,EAAE,wBAAwB,GAAG,SAAS,EAChD,aAAa,EAAE,MAAM,EACrB,QAAQ,CAAC,EAAE,uBAAuB,GACjC,wBAAwB,CAiB1B;AAED,wBAAgB,wBAAwB,CAAC,KAAK,EAAE;IAC9C,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB,GAAG,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAqBnC;AAED,wBAAgB,0BAA0B,CAAC,GAAG,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,GAAG,IAAI,CActF;AAED,MAAM,MAAM,gCAAgC,GAAG;IAC7C,OAAO,EAAE,cAAc,CAAC;IACxB,cAAc,CAAC,EAAE,wBAAwB,CAAC;IAC1C,aAAa,CAAC,EAAE,mBAAmB,CAAC;IACpC,gBAAgB,CAAC,EAAE,uBAAuB,CAAC;IAC3C,MAAM,EAAE,MAAM,CAAC;IACf,GAAG,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IACvC,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B,0BAA0B,CAAC,EAAE,MAAM,CAAC;IACpC,aAAa,CAAC,EAAE,CAAC,KAAK,EAAE;QACtB,gBAAgB,EAAE,gBAAgB,CAAC;QACnC,QAAQ,EAAE,wBAAwB,CAAC;QACnC,GAAG,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;QACtC,cAAc,CAAC,EAAE,wBAAwB,CAAC;KAC3C,KAAK,yBAAyB,CAAC,SAAS,CAAC,CAAC;CAC5C,CAAC;AAEF,mFAAmF;AACnF,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,gCAAgC,GAAG,yBAAyB,CAoC1G"}

package/dist/gateway/worker-boundary.js

@@ -0,0 +1,159 @@
+import { randomUUID } from 'node:crypto';
+import { ExecutionContext } from '../services/execution-context.js';
+const SAFE_ENV_KEYS = new Set(['PATH', 'LANG', 'LC_ALL', 'LC_CTYPE', 'TERM', 'TMPDIR', 'TERM2_SESSION_ID']);
+const SECRET_ENV_PATTERN = /(KEY|TOKEN|SECRET|PASSWORD|CREDENTIAL|AUTH|COOKIE|SSH)/i;
+export class WorkerBoundaryError extends Error {
+    code;
+    constructor(code) {
+        super('gateway worker boundary rejected');
+        this.name = 'WorkerBoundaryError';
+        this.code = code;
+    }
+}
+export function assertProviderBrokerReady(capability, probe) {
+    if (!capability || !capability.capabilityId || !capability.providerId || !capability.modelId) {
+        throw new WorkerBoundaryError('provider_unavailable');
+    }
+    if (typeof capability.request !== 'function' || typeof capability.stream !== 'function') {
+        throw new WorkerBoundaryError('invalid_broker');
+    }
+    if (!probe?.available || !probe.secretFree)
+        throw new WorkerBoundaryError('provider_unavailable');
+    if ('execute' in capability || 'spawn' in capability)
+        throw new WorkerBoundaryError('invalid_broker');
+    return capability;
+}
+export function createSessionScopedProviderBroker(base, sessionId, options = {}) {
+    const capabilityId = randomUUID();
+    let revoked = false;
+    let requestCount = 0;
+    const maxRequestsPerTurn = options.maxRequestsPerTurn;
+    const consumeRequest = () => {
+        if (maxRequestsPerTurn !== undefined && ++requestCount > maxRequestsPerTurn) {
+            throw new WorkerBoundaryError('provider_unavailable');
+        }
+    };
+    const validateRequest = (input) => {
+        if (!input || typeof input !== 'object')
+            throw new WorkerBoundaryError('invalid_broker');
+        const candidate = input;
+        if (!Array.isArray(candidate.messages) ||
+            candidate.messages.length > 10_000 ||
+            'headers' in candidate ||
+            'url' in candidate ||
+            'apiKey' in candidate) {
+            throw new WorkerBoundaryError('invalid_broker');
+        }
+    };
+    const scoped = {
+        capabilityId,
+        providerId: base.providerId,
+        modelId: base.modelId,
+        request: async (input) => {
+            if (!sessionId || revoked)
+                throw new WorkerBoundaryError('invalid_broker');
+            validateRequest(input);
+            consumeRequest();
+            return base.request(input);
+        },
+        stream: async function* (input) {
+            if (!sessionId || revoked)
+                throw new WorkerBoundaryError('invalid_broker');
+            validateRequest(input);
+            consumeRequest();
+            yield* base.stream(input);
+        },
+        resetRequestBudget: () => {
+            requestCount = 0;
+        },
+        revoke: () => {
+            revoked = true;
+        },
+    };
+    return scoped;
+}
+export function createSecretFreeWorkerSettings(capability, canonicalRoot, snapshot) {
+    if (!capability && !snapshot)
+        throw new WorkerBoundaryError('provider_unavailable');
+    return Object.freeze({
+        providerId: snapshot?.providerId ?? capability.providerId,
+        modelId: snapshot?.modelId ?? capability.modelId,
+        ...(capability ? { brokerCapabilityId: capability.capabilityId } : {}),
+        executionRoot: canonicalRoot,
+        envPolicyVersion: 1,
+        ...(snapshot
+            ? {
+                reasoningEffort: snapshot.reasoningEffort,
+                mode: snapshot.mode,
+                toolPolicy: snapshot.effectiveToolPolicy,
+                ...(snapshot.defaultsRevision === undefined ? {} : { defaultsRevision: snapshot.defaultsRevision }),
+            }
+            : {}),
+    });
+}
+export function createSanitizedWorkerEnv(input) {
+    if (!input.sessionId ||
+        !input.tmpDir ||
+        !input.tmpDir.startsWith('/') ||
+        ['/tmp', '/var/tmp'].includes(input.tmpDir.replace(/\/+$/, '')))
+        throw new WorkerBoundaryError('unsafe_environment');
+    const env = {
+        PATH: input.path ?? '/usr/bin:/bin',
+        LANG: input.locale ?? 'C.UTF-8',
+        LC_ALL: input.locale ?? 'C.UTF-8',
+        TMPDIR: input.tmpDir,
+        TERM2_SESSION_ID: input.sessionId,
+    };
+    for (const [key, value] of Object.entries(env)) {
+        if (!SAFE_ENV_KEYS.has(key) || SECRET_ENV_PATTERN.test(key) || value.includes('\u0000')) {
+            throw new WorkerBoundaryError('unsafe_environment');
+        }
+    }
+    return Object.freeze(env);
+}
+export function assertExplicitSanitizedEnv(env) {
+    for (const [key, value] of Object.entries(env)) {
+        if (!SAFE_ENV_KEYS.has(key) || SECRET_ENV_PATTERN.test(key) || value.includes('\u0000')) {
+            throw new WorkerBoundaryError('unsafe_environment');
+        }
+    }
+    if (!env.TMPDIR ||
+        ['/tmp', '/var/tmp'].includes(env.TMPDIR.replace(/\/+$/, '')) ||
+        env.SSH_AUTH_SOCK ||
+        Object.keys(env).some((key) => SECRET_ENV_PATTERN.test(key))) {
+        throw new WorkerBoundaryError('unsafe_environment');
+    }
+}
+/** Composes the session-owned capabilities without changing process cwd or env. */
+export function composeGatewaySession(options) {
+    if (options.sandboxAvailable !== true)
+        throw new WorkerBoundaryError('sandbox_unavailable');
+    const providerBroker = options.providerBroker
+        ? createSessionScopedProviderBroker(assertProviderBrokerReady(options.providerBroker, options.providerProbe), options.binding.sessionId, { maxRequestsPerTurn: options.maxProviderRequestsPerTurn })
+        : undefined;
+    const settings = createSecretFreeWorkerSettings(providerBroker, options.binding.canonicalRoot, options.settingsSnapshot);
+    const env = options.env ?? createSanitizedWorkerEnv({ sessionId: options.binding.sessionId, tmpDir: options.tmpDir });
+    assertExplicitSanitizedEnv(env);
+    const executionContext = ExecutionContext.pin(options.binding.canonicalRoot);
+    const runtime = options.createRuntime?.({ executionContext, settings, env, providerBroker });
+    let disposed = false;
+    return {
+        sessionId: options.binding.sessionId,
+        binding: options.binding,
+        executionContext,
+        settings,
+        providerBroker,
+        ...(options.settingsSnapshot ? { sessionSettingsSnapshot: options.settingsSnapshot } : {}),
+        env,
+        spawnOptions: { cwd: options.binding.canonicalRoot, env, gatewayMode: true },
+        runtime,
+        dispose() {
+            if (disposed)
+                return;
+            disposed = true;
+            runtime?.dispose();
+            providerBroker?.revoke?.();
+        },
+    };
+}
+//# sourceMappingURL=worker-boundary.js.map

package/dist/gateway/worker-boundary.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"worker-boundary.js","sourceRoot":"","sources":["../../source/gateway/worker-boundary.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,gBAAgB,EAAE,MAAM,kCAAkC,CAAC;AASpE,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,kBAAkB,CAAC,CAAC,CAAC;AAC5G,MAAM,kBAAkB,GAAG,yDAAyD,CAAC;AAErF,MAAM,OAAO,mBAAoB,SAAQ,KAAK;IACnC,IAAI,CAA2F;IACxG,YAAY,IAAiC;QAC3C,KAAK,CAAC,kCAAkC,CAAC,CAAC;QAC1C,IAAI,CAAC,IAAI,GAAG,qBAAqB,CAAC;QAClC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;IACnB,CAAC;CACF;AAOD,MAAM,UAAU,yBAAyB,CACvC,UAAgD,EAChD,KAAsC;IAEtC,IAAI,CAAC,UAAU,IAAI,CAAC,UAAU,CAAC,YAAY,IAAI,CAAC,UAAU,CAAC,UAAU,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,CAAC;QAC7F,MAAM,IAAI,mBAAmB,CAAC,sBAAsB,CAAC,CAAC;IACxD,CAAC;IACD,IAAI,OAAO,UAAU,CAAC,OAAO,KAAK,UAAU,IAAI,OAAO,UAAU,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;QACxF,MAAM,IAAI,mBAAmB,CAAC,gBAAgB,CAAC,CAAC;IAClD,CAAC;IACD,IAAI,CAAC,KAAK,EAAE,SAAS,IAAI,CAAC,KAAK,CAAC,UAAU;QAAE,MAAM,IAAI,mBAAmB,CAAC,sBAAsB,CAAC,CAAC;IAClG,IAAI,SAAS,IAAI,UAAU,IAAI,OAAO,IAAI,UAAU;QAAE,MAAM,IAAI,mBAAmB,CAAC,gBAAgB,CAAC,CAAC;IACtG,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,MAAM,UAAU,iCAAiC,CAC/C,IAA8B,EAC9B,SAAiB,EACjB,OAAO,GAAoC,EAAE;IAE7C,MAAM,YAAY,GAAG,UAAU,EAAE,CAAC;IAClC,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,IAAI,YAAY,GAAG,CAAC,CAAC;IACrB,MAAM,kBAAkB,GAAG,OAAO,CAAC,kBAAkB,CAAC;IACtD,MAAM,cAAc,GAAG,GAAS,EAAE;QAChC,IAAI,kBAAkB,KAAK,SAAS,IAAI,EAAE,YAAY,GAAG,kBAAkB,EAAE,CAAC;YAC5E,MAAM,IAAI,mBAAmB,CAAC,sBAAsB,CAAC,CAAC;QACxD,CAAC;IACH,CAAC,CAAC;IACF,MAAM,eAAe,GAAG,CAAC,KAAc,EAAQ,EAAE;QAC/C,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;YAAE,MAAM,IAAI,mBAAmB,CAAC,gBAAgB,CAAC,CAAC;QACzF,MAAM,SAAS,GAAG,KAAgC,CAAC;QACnD,IACE,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,QAAQ,CAAC;YAClC,SAAS,CAAC,QAAQ,CAAC,MAAM,GAAG,MAAM;YAClC,SAAS,IAAI,SAAS;YACtB,KAAK,IAAI,SAAS;YAClB,QAAQ,IAAI,SAAS,EACrB,CAAC;YACD,MAAM,IAAI,mBAAmB,CAAC,gBAAgB,CAAC,CAAC;QAClD,CAAC;IACH,CAAC,CAAC;IACF,MAAM,MAAM,GAA8E;QACxF,YAAY;QACZ,UAAU,EAAE,IAAI,CAAC,UAAU;QAC3B,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE;YACvB,IAAI,CAAC,SAAS,IAAI,OAAO;gBAAE,MAAM,IAAI,mBAAmB,CAAC,gBAAgB,CAAC,CAAC;YAC3E,eAAe,CAAC,KAAK,CAAC,CAAC;YACvB,cAAc,EAAE,CAAC;YACjB,OAAO,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QAC7B,CAAC;QACD,MAAM,EAAE,KAAK,SAAS,CAAC,EAAE,KAAK;YAC5B,IAAI,CAAC,SAAS,IAAI,OAAO;gBAAE,MAAM,IAAI,mBAAmB,CAAC,gBAAgB,CAAC,CAAC;YAC3E,eAAe,CAAC,KAAK,CAAC,CAAC;YACvB,cAAc,EAAE,CAAC;YACjB,KAAK,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAC5B,CAAC;QACD,kBAAkB,EAAE,GAAG,EAAE;YACvB,YAAY,GAAG,CAAC,CAAC;QACnB,CAAC;QACD,MAAM,EAAE,GAAG,EAAE;YACX,OAAO,GAAG,IAAI,CAAC;QACjB,CAAC;KACF,CAAC;IACF,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,8BAA8B,CAC5C,UAAgD,EAChD,aAAqB,EACrB,QAAkC;IAElC,IAAI,CAAC,UAAU,IAAI,CAAC,QAAQ;QAAE,MAAM,IAAI,mBAAmB,CAAC,sBAAsB,CAAC,CAAC;IACpF,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,UAAU,EAAE,QAAQ,EAAE,UAAU,IAAI,UAAW,CAAC,UAAU;QAC1D,OAAO,EAAE,QAAQ,EAAE,OAAO,IAAI,UAAW,CAAC,OAAO;QACjD,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,kBAAkB,EAAE,UAAU,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACtE,aAAa,EAAE,aAAa;QAC5B,gBAAgB,EAAE,CAAC;QACnB,GAAG,CAAC,QAAQ;YACV,CAAC,CAAC;gBACE,eAAe,EAAE,QAAQ,CAAC,eAAe;gBACzC,IAAI,EAAE,QAAQ,CAAC,IAAI;gBACnB,UAAU,EAAE,QAAQ,CAAC,mBAAmB;gBACxC,GAAG,CAAC,QAAQ,CAAC,gBAAgB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,QAAQ,CAAC,gBAAgB,EAAE,CAAC;aACpG;YACH,CAAC,CAAC,EAAE,CAAC;KACR,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,wBAAwB,CAAC,KAKxC;IACC,IACE,CAAC,KAAK,CAAC,SAAS;QAChB,CAAC,KAAK,CAAC,MAAM;QACb,CAAC,KAAK,CAAC,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC;QAC7B,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QAE/D,MAAM,IAAI,mBAAmB,CAAC,oBAAoB,CAAC,CAAC;IACtD,MAAM,GAAG,GAA2B;QAClC,IAAI,EAAE,KAAK,CAAC,IAAI,IAAI,eAAe;QACnC,IAAI,EAAE,KAAK,CAAC,MAAM,IAAI,SAAS;QAC/B,MAAM,EAAE,KAAK,CAAC,MAAM,IAAI,SAAS;QACjC,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,gBAAgB,EAAE,KAAK,CAAC,SAAS;KAClC,CAAC;IACF,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QAC/C,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,kBAAkB,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;YACxF,MAAM,IAAI,mBAAmB,CAAC,oBAAoB,CAAC,CAAC;QACtD,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;AAC5B,CAAC;AAED,MAAM,UAAU,0BAA0B,CAAC,GAAqC;IAC9E,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QAC/C,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,kBAAkB,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;YACxF,MAAM,IAAI,mBAAmB,CAAC,oBAAoB,CAAC,CAAC;QACtD,CAAC;IACH,CAAC;IACD,IACE,CAAC,GAAG,CAAC,MAAM;QACX,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QAC7D,GAAG,CAAC,aAAa;QACjB,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,kBAAkB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAC5D,CAAC;QACD,MAAM,IAAI,mBAAmB,CAAC,oBAAoB,CAAC,CAAC;IACtD,CAAC;AACH,CAAC;AAmBD,mFAAmF;AACnF,MAAM,UAAU,qBAAqB,CAAC,OAAyC;IAC7E,IAAI,OAAO,CAAC,gBAAgB,KAAK,IAAI;QAAE,MAAM,IAAI,mBAAmB,CAAC,qBAAqB,CAAC,CAAC;IAC5F,MAAM,cAAc,GAAG,OAAO,CAAC,cAAc;QAC3C,CAAC,CAAC,iCAAiC,CAC/B,yBAAyB,CAAC,OAAO,CAAC,cAAc,EAAE,OAAO,CAAC,aAAa,CAAC,EACxE,OAAO,CAAC,OAAO,CAAC,SAAS,EACzB,EAAE,kBAAkB,EAAE,OAAO,CAAC,0BAA0B,EAAE,CAC3D;QACH,CAAC,CAAC,SAAS,CAAC;IACd,MAAM,QAAQ,GAAG,8BAA8B,CAC7C,cAAc,EACd,OAAO,CAAC,OAAO,CAAC,aAAa,EAC7B,OAAO,CAAC,gBAAgB,CACzB,CAAC;IACF,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,wBAAwB,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,OAAO,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IACtH,0BAA0B,CAAC,GAAG,CAAC,CAAC;IAChC,MAAM,gBAAgB,GAAG,gBAAgB,CAAC,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;IAC7E,MAAM,OAAO,GAAG,OAAO,CAAC,aAAa,EAAE,CAAC,EAAE,gBAAgB,EAAE,QAAQ,EAAE,GAAG,EAAE,cAAc,EAAE,CAAC,CAAC;IAC7F,IAAI,QAAQ,GAAG,KAAK,CAAC;IACrB,OAAO;QACL,SAAS,EAAE,OAAO,CAAC,OAAO,CAAC,SAAS;QACpC,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,gBAAgB;QAChB,QAAQ;QACR,cAAc;QACd,GAAG,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC,CAAC,EAAE,uBAAuB,EAAE,OAAO,CAAC,gBAAgB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC1F,GAAG;QACH,YAAY,EAAE,EAAE,GAAG,EAAE,OAAO,CAAC,OAAO,CAAC,aAAa,EAAE,GAAG,EAAE,WAAW,EAAE,IAAI,EAAE;QAC5E,OAAO;QACP,OAAO;YACL,IAAI,QAAQ;gBAAE,OAAO;YACrB,QAAQ,GAAG,IAAI,CAAC;YAChB,OAAO,EAAE,OAAO,EAAE,CAAC;YAClB,cAAmF,EAAE,MAAM,EAAE,EAAE,CAAC;QACnG,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/gateway/workspace-admission.d.ts

@@ -0,0 +1,48 @@
+import type { GatewayAssertionClaims, GatewayManifest, SessionBinding, WorkspaceAlias, WorkspaceGrant } from './contracts.js';
+export declare class WorkspaceAdmissionError extends Error {
+    readonly code: 'manifest_invalid' | 'manifest_version_mismatch' | 'workspace_not_found' | 'workspace_owner_mismatch' | 'workspace_disabled' | 'ssh_disabled' | 'workspace_root_unavailable' | 'workspace_root_not_canonical' | 'workspace_path_escape' | 'session_not_found' | 'session_owner_mismatch' | 'session_retarget_forbidden' | 'workspace_session_exists' | 'write_not_allowed' | 'workspace_boundary_unverified';
+    constructor(code: WorkspaceAdmissionError['code']);
+}
+export declare function validateGatewayManifest(value: unknown): GatewayManifest;
+export declare function loadGatewayManifest(filename: string, expectedSha256?: string): GatewayManifest;
+export type WorkspaceBoundaryEvidence = {
+    mountedRoot: string;
+    writable: boolean;
+    policy?: 'read_only_launcher';
+};
+export type WorkspaceBoundaryProbe = (canonicalRoot: string, access: WorkspaceGrant['access']) => WorkspaceBoundaryEvidence | false;
+export type WorkspaceAdmissionOptions = {
+    allowSsh?: boolean;
+    allowWrite?: boolean;
+    boundaryProbe?: WorkspaceBoundaryProbe;
+    /** Dynamic (browser-selected) grants to restore after a restart. */
+    initialDynamicGrants?: readonly WorkspaceGrant[];
+    /** Durable sink invoked on every dynamic-grant mutation (register/remove). */
+    onDynamicGrantChange?: (grants: readonly WorkspaceGrant[]) => void;
+};
+export declare class WorkspaceAdmission {
+    #private;
+    constructor(manifest: GatewayManifest, options?: WorkspaceAdmissionOptions | boolean);
+    get manifestVersion(): number;
+    replaceManifest(manifest: GatewayManifest): void;
+    listAliases(ownerUserId: string): WorkspaceAlias[];
+    /** Add a server-validated local root without weakening manifest admission. */
+    registerDynamicLocalGrant(grant: WorkspaceGrant): number;
+    removeDynamicLocalGrant(workspaceId: string): void;
+    admit(claims: GatewayAssertionClaims, requestedManifestVersion?: number): SessionBinding;
+    /** Validate and construct a binding without reserving an active session. */
+    prepare(claims: GatewayAssertionClaims, requestedManifestVersion?: number): SessionBinding;
+    /**
+     * Reconstruct an immutable binding from the gateway-owned session index after
+     * a daemon restart. The index supplies only opaque identity/version fields;
+     * the manifest and boundary probe remain the authority for the root.
+     */
+    restore(sessionId: string, ownerUserId: string, workspaceId: string, grantVersion: number): SessionBinding;
+    getSession(sessionId: string, ownerUserId: string): SessionBinding;
+    assertSessionWorkspace(sessionId: string, ownerUserId: string, workspaceId: string): SessionBinding;
+    retarget(): never;
+    remove(sessionId: string): void;
+    static assertPath(binding: SessionBinding, requestedPath: string): string;
+}
+export declare function validateDynamicGrant(value: unknown): value is WorkspaceGrant;
+//# sourceMappingURL=workspace-admission.d.ts.map

package/dist/gateway/workspace-admission.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"workspace-admission.d.ts","sourceRoot":"","sources":["../../source/gateway/workspace-admission.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EACV,sBAAsB,EACtB,eAAe,EACf,cAAc,EACd,cAAc,EACd,cAAc,EACf,MAAM,gBAAgB,CAAC;AAExB,qBAAa,uBAAwB,SAAQ,KAAK;IAChD,QAAQ,CAAC,IAAI,EACT,kBAAkB,GAClB,2BAA2B,GAC3B,qBAAqB,GACrB,0BAA0B,GAC1B,oBAAoB,GACpB,cAAc,GACd,4BAA4B,GAC5B,8BAA8B,GAC9B,uBAAuB,GACvB,mBAAmB,GACnB,wBAAwB,GACxB,4BAA4B,GAC5B,0BAA0B,GAC1B,mBAAmB,GACnB,+BAA+B,CAAC;IAEpC,YAAY,IAAI,EAAE,uBAAuB,CAAC,MAAM,CAAC,EAIhD;CACF;AAED,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,OAAO,GAAG,eAAe,CAoBvE;AAED,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,MAAM,EAAE,cAAc,CAAC,EAAE,MAAM,GAAG,eAAe,CAW9F;AAkED,MAAM,MAAM,yBAAyB,GAAG;IACtC,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,OAAO,CAAC;IAClB,MAAM,CAAC,EAAE,oBAAoB,CAAC;CAC/B,CAAC;AAEF,MAAM,MAAM,sBAAsB,GAAG,CACnC,aAAa,EAAE,MAAM,EACrB,MAAM,EAAE,cAAc,CAAC,QAAQ,CAAC,KAC7B,yBAAyB,GAAG,KAAK,CAAC;AAEvC,MAAM,MAAM,yBAAyB,GAAG;IACtC,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,aAAa,CAAC,EAAE,sBAAsB,CAAC;IACvC,oEAAoE;IACpE,oBAAoB,CAAC,EAAE,SAAS,cAAc,EAAE,CAAC;IACjD,8EAA8E;IAC9E,oBAAoB,CAAC,EAAE,CAAC,MAAM,EAAE,SAAS,cAAc,EAAE,KAAK,IAAI,CAAC;CACpE,CAAC;AAEF,qBAAa,kBAAkB;;IAa7B,YAAY,QAAQ,EAAE,eAAe,EAAE,OAAO,GAAE,yBAAyB,GAAG,OAAY,EAqBvF;IAED,IAAI,eAAe,IAAI,MAAM,CAE5B;IAED,eAAe,CAAC,QAAQ,EAAE,eAAe,GAAG,IAAI,CAI/C;IAED,WAAW,CAAC,WAAW,EAAE,MAAM,GAAG,cAAc,EAAE,CAIjD;IAED,8EAA8E;IAC9E,yBAAyB,CAAC,KAAK,EAAE,cAAc,GAAG,MAAM,CAoBvD;IAED,uBAAuB,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI,CAKjD;IAMD,KAAK,CAAC,MAAM,EAAE,sBAAsB,EAAE,wBAAwB,SAAuB,GAAG,cAAc,CAOrG;IAED,4EAA4E;IAC5E,OAAO,CAAC,MAAM,EAAE,sBAAsB,EAAE,wBAAwB,SAAuB,GAAG,cAAc,CAkCvG;IAED;;;;OAIG;IACH,OAAO,CAAC,SAAS,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,cAAc,CAiCzG;IAED,UAAU,CAAC,SAAS,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,cAAc,CAKjE;IAED,sBAAsB,CAAC,SAAS,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,cAAc,CAIlG;IAED,QAAQ,IAAI,KAAK,CAEhB;IAED,MAAM,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAG9B;IASD,MAAM,CAAC,UAAU,CAAC,OAAO,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,GAAG,MAAM,CAexE;CACF;AAED,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,cAAc,CAe5E"}