@quantiya/codevibe-core 2.0.6 → 2.0.8

package/dist/local-executor/workspace-authority.d.ts

@@ -0,0 +1,45 @@
+/**
+ * Durable identity of the exact user workspace instance that granted an
+ * operation authority.  The canonical path alone is not authority: another
+ * directory can later occupy it with byte-identical content.
+ */
+export interface WorkspaceRootAuthority {
+    version: 1;
+    canonicalPath: string;
+    dev: string;
+    ino: string;
+    /** Native directory creation timestamp, retained as an inode-reuse fence. */
+    birthtimeNs: string;
+}
+export interface WorkspaceAuthorityCaptureOptions {
+    /** @internal lower deterministic helper deadline for tests. */
+    helperTimeoutMs?: number;
+    /** @internal deterministic target-filesystem stall seam. */
+    testHangStage?: 'realpath' | 'lstat' | 'open' | 'stat' | 'close';
+}
+export interface WorkspaceRootLease {
+    /** Linux procfs magic-link backed by the helper's open cwd reference. */
+    readonly procfsPath: string;
+    release(): Promise<void>;
+}
+/**
+ * Acquire an original-handle lease for a native-Linux bind mount. The helper's
+ * cwd is the authenticated inode; `/proc/<pid>/cwd` therefore remains bound to
+ * that inode even when its public pathname is renamed or replaced.
+ */
+export declare function acquireWorkspaceRootLease(authority: WorkspaceRootAuthority, opts?: {
+    helperTimeoutMs?: number;
+}): Promise<WorkspaceRootLease>;
+export declare function captureWorkspaceRootAuthority(workingDir: string, opts?: WorkspaceAuthorityCaptureOptions): Promise<WorkspaceRootAuthority>;
+export declare function assertWorkspaceRootAuthoritySchema(value: unknown): asserts value is WorkspaceRootAuthority;
+export declare function sameWorkspaceRootAuthority(left: WorkspaceRootAuthority, right: WorkspaceRootAuthority): boolean;
+/**
+ * Carry an already-authenticated directory incarnation across an atomic rename.
+ *
+ * `observed` is used only to prove that the directory now visible at
+ * `canonicalPath` is still the original inode incarnation. Its creation time is
+ * never adopted as fresh authority: a device/inode reuse with a different
+ * birth time fails closed.
+ */
+export declare function relocateWorkspaceRootAuthority(original: WorkspaceRootAuthority, canonicalPath: string, observed: WorkspaceRootAuthority): WorkspaceRootAuthority;
+export declare function assertWorkspaceRootAuthority(workingDir: string, expected: WorkspaceRootAuthority, boundary: string, opts?: WorkspaceAuthorityCaptureOptions): Promise<void>;

package/dist/local-executor/workspace-materializer.d.ts

@@ -0,0 +1,27 @@
+import { type WorkspaceRootAuthority } from './workspace-authority.js';
+export type MaterializationHangStage = 'realpath' | 'lstat' | 'open' | 'stat' | 'clone' | 'read' | 'close';
+export interface WorkspaceMaterializerSession {
+    copyFile(source: string, destination: string): Promise<void>;
+    copyRelativeSymlink(source: string, destination: string): Promise<void>;
+    close(): Promise<void>;
+}
+export interface WorkspaceMaterializerOptions {
+    sourceRoot: WorkspaceRootAuthority;
+    destinationRoot: WorkspaceRootAuthority;
+    priorPhysicalCopyBytes?: number;
+    maxFileBytes: number;
+    maxTotalBytes: number;
+    helperTimeoutMs?: number;
+    forcePhysicalCopy?: boolean;
+    testHangStage?: (source: string) => MaterializationHangStage | undefined;
+    reservePhysicalBytes?: (bytes: number) => Promise<void> | void;
+    releasePhysicalBytes?: (bytes: number) => Promise<void> | void;
+    beforePhysicalCopy?: (source: string) => Promise<void>;
+    onPhysicalCopyBytes?: (totalBytes: number) => Promise<void>;
+}
+/**
+ * One bounded helper owns all live-workspace clone/read waits for a snapshot.
+ * The desktop retains quota/durability authority and explicitly authorizes a
+ * physical fallback only after the helper reports the exact stable file size.
+ */
+export declare function createWorkspaceMaterializerSession(opts: WorkspaceMaterializerOptions): WorkspaceMaterializerSession;