@rudderhq/server 0.7.11 → 0.7.12

package/dist/services/workspace-manifest-native.js

@@ -0,0 +1,219 @@
+import { resolveNativeCommand } from "@rudderhq/agent-runtime-utils";
+import { resolveRudderNativeCapability, resolveRudderNativeTarget } from "@rudderhq/shared";
+import { spawn } from "node:child_process";
+import { createHash } from "node:crypto";
+import { existsSync } from "node:fs";
+import fs from "node:fs/promises";
+import path from "node:path";
+import readline from "node:readline";
+import { fileURLToPath } from "node:url";
+import { resolveRudderInstanceRoot } from "../home-paths.js";
+const PROTOCOL_VERSION = 1;
+const MAX_ENTRIES = 1_000_000;
+const MAX_PATH_BYTES = 128 * 1024 * 1024;
+const MAX_MANIFEST_BYTES = 256 * 1024 * 1024;
+const DEBOUNCE_MS = 100;
+const REQUIRED_READY_TIMEOUT_MS = 5_000;
+const sessions = new Map();
+class NativeWorkspaceManifestError extends Error {
+    diagnostic;
+    constructor(session, code, detail) {
+        super(detail);
+        this.name = "NativeWorkspaceManifestError";
+        this.diagnostic = {
+            capability: "workspace-manifest",
+            target: session.target,
+            binaryVersion: session.binaryVersion,
+            protocolVersion: String(PROTOCOL_VERSION),
+            effectiveEngine: "rust",
+            fallbackCode: code,
+        };
+    }
+}
+function nativeTarget() {
+    return resolveRudderNativeTarget();
+}
+export function resolveNativeWorkspaceManifestBinary() {
+    const configured = process.env.RUDDER_NATIVE_WORKSPACE_MANIFEST_PATH?.trim()
+        || process.env.RUDDER_NATIVE_PATH?.trim();
+    if (configured)
+        return path.resolve(configured);
+    const binaryName = process.platform === "win32" ? "rudder-native.exe" : "rudder-native";
+    const moduleDir = path.dirname(fileURLToPath(import.meta.url));
+    const target = nativeTarget();
+    const resourcesPath = process.env.RUDDER_DESKTOP_RESOURCES_PATH?.trim()
+        || (typeof process.resourcesPath === "string"
+            ? process.resourcesPath
+            : "");
+    const candidates = [
+        path.resolve(moduleDir, "../../../native/target/debug", binaryName),
+        path.resolve(moduleDir, "../../../../native/target/debug", binaryName),
+        path.resolve(moduleDir, "../../../native", target ?? "unsupported", binaryName),
+        resourcesPath && target ? path.resolve(resourcesPath, "native", target, binaryName) : "",
+    ].filter(Boolean);
+    return candidates.find((candidate) => existsSync(candidate)) ?? candidates[0];
+}
+function manifestPathForRoot(rootPath) {
+    const key = createHash("sha256").update(path.resolve(rootPath)).digest("hex").slice(0, 24);
+    return path.resolve(resolveRudderInstanceRoot(), "data", "native-workspace-manifests", `${key}.json`);
+}
+function watchState(value) {
+    return ["building", "ready", "dirty", "overflow", "unavailable", "stopped"].includes(String(value))
+        ? value
+        : null;
+}
+async function startSession(rootPath) {
+    const manifestPath = manifestPathForRoot(rootPath);
+    await fs.mkdir(path.dirname(manifestPath), { recursive: true });
+    const command = resolveNativeCommand(resolveNativeWorkspaceManifestBinary(), [
+        "workspace", "watch", path.resolve(rootPath), manifestPath,
+        String(MAX_ENTRIES), String(MAX_PATH_BYTES), String(DEBOUNCE_MS),
+    ]);
+    const child = spawn(command.command, command.args, { stdio: ["pipe", "pipe", "pipe"], windowsHide: true });
+    const session = {
+        child, manifestPath, state: "building", exited: false,
+        target: nativeTarget() ?? "unsupported", binaryVersion: "unavailable",
+    };
+    const lines = readline.createInterface({ input: child.stdout });
+    lines.on("line", (line) => {
+        try {
+            const envelope = JSON.parse(line);
+            const state = watchState(envelope.state);
+            if (envelope.ok !== true || envelope.capability !== "workspace.watch"
+                || envelope.protocolVersion !== PROTOCOL_VERSION || !state) {
+                session.state = "unavailable";
+                return;
+            }
+            if (typeof envelope.target === "string")
+                session.target = envelope.target;
+            if (typeof envelope.binaryVersion === "string")
+                session.binaryVersion = envelope.binaryVersion;
+            session.state = state;
+        }
+        catch {
+            session.state = "unavailable";
+        }
+    });
+    child.once("error", () => {
+        session.state = "unavailable";
+        session.exited = true;
+    });
+    child.once("exit", () => {
+        if (session.state !== "stopped")
+            session.state = "unavailable";
+        session.exited = true;
+    });
+    child.stderr.resume();
+    return session;
+}
+async function ensureSession(rootPath) {
+    const key = path.resolve(rootPath);
+    const existing = sessions.get(key);
+    if (existing && !existing.exited)
+        return existing;
+    const session = await startSession(key);
+    sessions.set(key, session);
+    return session;
+}
+async function waitForRequiredReady(session) {
+    const deadline = Date.now() + REQUIRED_READY_TIMEOUT_MS;
+    while (session.state !== "ready") {
+        if (session.state === "unavailable" || session.exited) {
+            throw new NativeWorkspaceManifestError(session, "watch_unavailable", "Native workspace manifest watcher is unavailable");
+        }
+        if (Date.now() >= deadline) {
+            throw new NativeWorkspaceManifestError(session, "ready_timeout", `Native workspace manifest watcher did not become ready within ${REQUIRED_READY_TIMEOUT_MS}ms`);
+        }
+        await new Promise((resolve) => setTimeout(resolve, 10));
+    }
+}
+function parseManifest(value, rootPath) {
+    if (!value || typeof value !== "object" || Array.isArray(value))
+        return null;
+    const manifest = value;
+    if (manifest.protocolVersion !== PROTOCOL_VERSION || manifest.state !== "ready"
+        || path.resolve(String(manifest.rootPath ?? "")) !== path.resolve(rootPath)
+        || !Array.isArray(manifest.entries) || manifest.entries.length > MAX_ENTRIES)
+        return null;
+    const entries = [];
+    let pathBytes = 0;
+    for (const value of manifest.entries) {
+        if (!value || typeof value !== "object" || Array.isArray(value))
+            return null;
+        const entry = value;
+        const entryPath = typeof entry.path === "string" ? entry.path : "";
+        const kind = entry.kind;
+        if (!entryPath || entryPath.includes("\\") || entryPath.startsWith("/")
+            || entryPath.split("/").some((part) => !part || part === "." || part === "..")
+            || !["file", "directory", "symlink"].includes(String(kind))
+            || !Number.isSafeInteger(entry.byteSize) || Number(entry.byteSize) < 0
+            || !Number.isSafeInteger(entry.modifiedMillis) || Number(entry.modifiedMillis) < 0)
+            return null;
+        pathBytes += Buffer.byteLength(entryPath);
+        if (pathBytes > MAX_PATH_BYTES)
+            return null;
+        entries.push({
+            path: entryPath,
+            kind: kind,
+            byteSize: Number(entry.byteSize),
+            modifiedMillis: Number(entry.modifiedMillis),
+        });
+    }
+    return entries;
+}
+export async function readNativeWorkspaceManifest(rootPath) {
+    const policy = resolveRudderNativeCapability({ capability: "workspace-manifest", env: process.env });
+    if (!policy.enabled)
+        return null;
+    let session;
+    try {
+        session = await ensureSession(rootPath);
+    }
+    catch (error) {
+        if (policy.required)
+            throw error;
+        return null;
+    }
+    if (policy.required)
+        await waitForRequiredReady(session);
+    if (session.state !== "ready") {
+        return null;
+    }
+    try {
+        const stat = await fs.stat(session.manifestPath);
+        if (!stat.isFile() || stat.size > MAX_MANIFEST_BYTES)
+            throw new Error("Native workspace manifest exceeds its read boundary");
+        const entries = parseManifest(JSON.parse(await fs.readFile(session.manifestPath, "utf8")), rootPath);
+        if (!entries)
+            throw new Error("Native workspace manifest is invalid");
+        return entries;
+    }
+    catch (error) {
+        await fs.rm(session.manifestPath, { force: true }).catch(() => undefined);
+        session.state = "dirty";
+        if (policy.required) {
+            throw new NativeWorkspaceManifestError(session, "invalid_manifest", error instanceof Error ? error.message : "Native workspace manifest is invalid");
+        }
+        return null;
+    }
+}
+export async function stopNativeWorkspaceManifestWatchersForTests() {
+    const active = [...sessions.values()];
+    sessions.clear();
+    await Promise.all(active.map(async (session) => {
+        if (session.exited)
+            return;
+        session.child.stdin.end();
+        await new Promise((resolve) => {
+            const timer = setTimeout(() => {
+                session.child.kill();
+                resolve();
+            }, 1_000);
+            session.child.once("exit", () => {
+                clearTimeout(timer);
+                resolve();
+            });
+        });
+    }));
+}
+//# sourceMappingURL=workspace-manifest-native.js.map

package/dist/services/workspace-manifest-native.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"workspace-manifest-native.js","sourceRoot":"","sources":["../../src/services/workspace-manifest-native.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAE,MAAM,+BAA+B,CAAC;AACrE,OAAO,EAAE,6BAA6B,EAAE,yBAAyB,EAA+B,MAAM,kBAAkB,CAAC;AACzH,OAAO,EAAE,KAAK,EAAuC,MAAM,oBAAoB,CAAC;AAChF,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAClC,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,QAAQ,MAAM,eAAe,CAAC;AACrC,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,yBAAyB,EAAE,MAAM,kBAAkB,CAAC;AAE7D,MAAM,gBAAgB,GAAG,CAAC,CAAC;AAC3B,MAAM,WAAW,GAAG,SAAS,CAAC;AAC9B,MAAM,cAAc,GAAG,GAAG,GAAG,IAAI,GAAG,IAAI,CAAC;AACzC,MAAM,kBAAkB,GAAG,GAAG,GAAG,IAAI,GAAG,IAAI,CAAC;AAC7C,MAAM,WAAW,GAAG,GAAG,CAAC;AACxB,MAAM,yBAAyB,GAAG,KAAK,CAAC;AAmBxC,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAwB,CAAC;AAEjD,MAAM,4BAA6B,SAAQ,KAAK;IACrC,UAAU,CAAyB;IAE5C,YAAY,OAAqB,EAAE,IAAY,EAAE,MAAc;QAC7D,KAAK,CAAC,MAAM,CAAC,CAAC;QACd,IAAI,CAAC,IAAI,GAAG,8BAA8B,CAAC;QAC3C,IAAI,CAAC,UAAU,GAAG;YAChB,UAAU,EAAE,oBAAoB;YAChC,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,aAAa,EAAE,OAAO,CAAC,aAAa;YACpC,eAAe,EAAE,MAAM,CAAC,gBAAgB,CAAC;YACzC,eAAe,EAAE,MAAM;YACvB,YAAY,EAAE,IAAI;SACnB,CAAC;IACJ,CAAC;CACF;AAED,SAAS,YAAY;IACnB,OAAO,yBAAyB,EAAE,CAAC;AACrC,CAAC;AAED,MAAM,UAAU,oCAAoC;IAClD,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,qCAAqC,EAAE,IAAI,EAAE;WACvE,OAAO,CAAC,GAAG,CAAC,kBAAkB,EAAE,IAAI,EAAE,CAAC;IAC5C,IAAI,UAAU;QAAE,OAAO,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IAChD,MAAM,UAAU,GAAG,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,eAAe,CAAC;IACxF,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IAC/D,MAAM,MAAM,GAAG,YAAY,EAAE,CAAC;IAC9B,MAAM,aAAa,GAAG,OAAO,CAAC,GAAG,CAAC,6BAA6B,EAAE,IAAI,EAAE;WAClE,CAAC,OAAQ,OAAwD,CAAC,aAAa,KAAK,QAAQ;YAC7F,CAAC,CAAE,OAAsD,CAAC,aAAa;YACvE,CAAC,CAAC,EAAE,CAAC,CAAC;IACV,MAAM,UAAU,GAAG;QACjB,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,8BAA8B,EAAE,UAAU,CAAC;QACnE,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,iCAAiC,EAAE,UAAU,CAAC;QACtE,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,iBAAiB,EAAE,MAAM,IAAI,aAAa,EAAE,UAAU,CAAC;QAC/E,aAAa,IAAI,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,aAAa,EAAE,QAAQ,EAAE,MAAM,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC,EAAE;KACzF,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAClB,OAAO,UAAU,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,IAAI,UAAU,CAAC,CAAC,CAAE,CAAC;AACjF,CAAC;AAED,SAAS,mBAAmB,CAAC,QAAgB;IAC3C,MAAM,GAAG,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAC3F,OAAO,IAAI,CAAC,OAAO,CAAC,yBAAyB,EAAE,EAAE,MAAM,EAAE,4BAA4B,EAAE,GAAG,GAAG,OAAO,CAAC,CAAC;AACxG,CAAC;AAED,SAAS,UAAU,CAAC,KAAc;IAChC,OAAO,CAAC,UAAU,EAAE,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,aAAa,EAAE,SAAS,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACjG,CAAC,CAAC,KAAmB;QACrB,CAAC,CAAC,IAAI,CAAC;AACX,CAAC;AAED,KAAK,UAAU,YAAY,CAAC,QAAgB;IAC1C,MAAM,YAAY,GAAG,mBAAmB,CAAC,QAAQ,CAAC,CAAC;IACnD,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAChE,MAAM,OAAO,GAAG,oBAAoB,CAAC,oCAAoC,EAAE,EAAE;QAC3E,WAAW,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,YAAY;QAC1D,MAAM,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC,WAAW,CAAC;KACjE,CAAC,CAAC;IACH,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC;IAC3G,MAAM,OAAO,GAAiB;QAC5B,KAAK,EAAE,YAAY,EAAE,KAAK,EAAE,UAAU,EAAE,MAAM,EAAE,KAAK;QACrD,MAAM,EAAE,YAAY,EAAE,IAAI,aAAa,EAAE,aAAa,EAAE,aAAa;KACtE,CAAC;IACF,MAAM,KAAK,GAAG,QAAQ,CAAC,eAAe,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;IAChE,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE;QACxB,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAA4B,CAAC;YAC7D,MAAM,KAAK,GAAG,UAAU,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;YACzC,IAAI,QAAQ,CAAC,EAAE,KAAK,IAAI,IAAI,QAAQ,CAAC,UAAU,KAAK,iBAAiB;mBAChE,QAAQ,CAAC,eAAe,KAAK,gBAAgB,IAAI,CAAC,KAAK,EAAE,CAAC;gBAC7D,OAAO,CAAC,KAAK,GAAG,aAAa,CAAC;gBAC9B,OAAO;YACT,CAAC;YACD,IAAI,OAAO,QAAQ,CAAC,MAAM,KAAK,QAAQ;gBAAE,OAAO,CAAC,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC;YAC1E,IAAI,OAAO,QAAQ,CAAC,aAAa,KAAK,QAAQ;gBAAE,OAAO,CAAC,aAAa,GAAG,QAAQ,CAAC,aAAa,CAAC;YAC/F,OAAO,CAAC,KAAK,GAAG,KAAK,CAAC;QACxB,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,CAAC,KAAK,GAAG,aAAa,CAAC;QAChC,CAAC;IACH,CAAC,CAAC,CAAC;IACH,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE;QACvB,OAAO,CAAC,KAAK,GAAG,aAAa,CAAC;QAC9B,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IACxB,CAAC,CAAC,CAAC;IACH,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE;QACtB,IAAI,OAAO,CAAC,KAAK,KAAK,SAAS;YAAE,OAAO,CAAC,KAAK,GAAG,aAAa,CAAC;QAC/D,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IACxB,CAAC,CAAC,CAAC;IACH,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;IACtB,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,KAAK,UAAU,aAAa,CAAC,QAAgB;IAC3C,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IACnC,MAAM,QAAQ,GAAG,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACnC,IAAI,QAAQ,IAAI,CAAC,QAAQ,CAAC,MAAM;QAAE,OAAO,QAAQ,CAAC;IAClD,MAAM,OAAO,GAAG,MAAM,YAAY,CAAC,GAAG,CAAC,CAAC;IACxC,QAAQ,CAAC,GAAG,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;IAC3B,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,KAAK,UAAU,oBAAoB,CAAC,OAAqB;IACvD,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,yBAAyB,CAAC;IACxD,OAAO,OAAO,CAAC,KAAK,KAAK,OAAO,EAAE,CAAC;QACjC,IAAI,OAAO,CAAC,KAAK,KAAK,aAAa,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;YACtD,MAAM,IAAI,4BAA4B,CAAC,OAAO,EAAE,mBAAmB,EAAE,kDAAkD,CAAC,CAAC;QAC3H,CAAC;QACD,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,QAAQ,EAAE,CAAC;YAC3B,MAAM,IAAI,4BAA4B,CAAC,OAAO,EAAE,eAAe,EAAE,iEAAiE,yBAAyB,IAAI,CAAC,CAAC;QACnK,CAAC;QACD,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;IAC1D,CAAC;AACH,CAAC;AAED,SAAS,aAAa,CAAC,KAAc,EAAE,QAAgB;IACrD,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAC7E,MAAM,QAAQ,GAAG,KAAgC,CAAC;IAClD,IAAI,QAAQ,CAAC,eAAe,KAAK,gBAAgB,IAAI,QAAQ,CAAC,KAAK,KAAK,OAAO;WAC1E,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,KAAK,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC;WACxE,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,QAAQ,CAAC,OAAO,CAAC,MAAM,GAAG,WAAW;QAAE,OAAO,IAAI,CAAC;IAC5F,MAAM,OAAO,GAAmC,EAAE,CAAC;IACnD,IAAI,SAAS,GAAG,CAAC,CAAC;IAClB,KAAK,MAAM,KAAK,IAAI,QAAQ,CAAC,OAAO,EAAE,CAAC;QACrC,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QAC7E,MAAM,KAAK,GAAG,KAAgC,CAAC;QAC/C,MAAM,SAAS,GAAG,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;QACnE,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC;QACxB,IAAI,CAAC,SAAS,IAAI,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,SAAS,CAAC,UAAU,CAAC,GAAG,CAAC;eAClE,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,IAAI,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,IAAI,CAAC;eAC3E,CAAC,CAAC,MAAM,EAAE,WAAW,EAAE,SAAS,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;eACxD,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC;eACnE,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,cAAc,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,cAAc,CAAC,GAAG,CAAC;YAAE,OAAO,IAAI,CAAC;QAClG,SAAS,IAAI,MAAM,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;QAC1C,IAAI,SAAS,GAAG,cAAc;YAAE,OAAO,IAAI,CAAC;QAC5C,OAAO,CAAC,IAAI,CAAC;YACX,IAAI,EAAE,SAAS;YACf,IAAI,EAAE,IAA4C;YAClD,QAAQ,EAAE,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC;YAChC,cAAc,EAAE,MAAM,CAAC,KAAK,CAAC,cAAc,CAAC;SAC7C,CAAC,CAAC;IACL,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAAC,QAAgB;IAChE,MAAM,MAAM,GAAG,6BAA6B,CAAC,EAAE,UAAU,EAAE,oBAAoB,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;IACrG,IAAI,CAAC,MAAM,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IACjC,IAAI,OAAqB,CAAC;IAC1B,IAAI,CAAC;QACH,OAAO,GAAG,MAAM,aAAa,CAAC,QAAQ,CAAC,CAAC;IAC1C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,MAAM,CAAC,QAAQ;YAAE,MAAM,KAAK,CAAC;QACjC,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,MAAM,CAAC,QAAQ;QAAE,MAAM,oBAAoB,CAAC,OAAO,CAAC,CAAC;IACzD,IAAI,OAAO,CAAC,KAAK,KAAK,OAAO,EAAE,CAAC;QAC9B,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;QACjD,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,IAAI,CAAC,IAAI,GAAG,kBAAkB;YAAE,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;QAC7H,MAAM,OAAO,GAAG,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC;QACrG,IAAI,CAAC,OAAO;YAAE,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;QACtE,OAAO,OAAO,CAAC;IACjB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,EAAE,CAAC,EAAE,CAAC,OAAO,CAAC,YAAY,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAC1E,OAAO,CAAC,KAAK,GAAG,OAAO,CAAC;QACxB,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;YACpB,MAAM,IAAI,4BAA4B,CACpC,OAAO,EACP,kBAAkB,EAClB,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,sCAAsC,CAChF,CAAC;QACJ,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,2CAA2C;IAC/D,MAAM,MAAM,GAAG,CAAC,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;IACtC,QAAQ,CAAC,KAAK,EAAE,CAAC;IACjB,MAAM,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE;QAC7C,IAAI,OAAO,CAAC,MAAM;YAAE,OAAO;QAC3B,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC;QAC1B,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;YAClC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;gBAC5B,OAAO,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;gBACrB,OAAO,EAAE,CAAC;YACZ,CAAC,EAAE,KAAK,CAAC,CAAC;YACV,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE;gBAC9B,YAAY,CAAC,KAAK,CAAC,CAAC;gBACpB,OAAO,EAAE,CAAC;YACZ,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC,CAAC;AACN,CAAC"}

package/dist/services/workspace-restore-reconciliation.d.ts

@@ -0,0 +1,11 @@
+import { type Db } from "@rudderhq/db";
+/** Reconcile only validated receipts and their exact operation-owned roots. */
+export declare function reconcileWorkspaceRestoreReceipts(db?: Db): Promise<{
+    recovered: string[];
+    blocked: Array<{
+        receiptPath: string;
+        operationId: string;
+        error: string;
+    }>;
+}>;
+//# sourceMappingURL=workspace-restore-reconciliation.d.ts.map

package/dist/services/workspace-restore-reconciliation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"workspace-restore-reconciliation.d.ts","sourceRoot":"","sources":["../../src/services/workspace-restore-reconciliation.ts"],"names":[],"mappings":"AAAA,OAAO,EAAoB,KAAK,EAAE,EAAE,MAAM,cAAc,CAAC;AAgDzD,+EAA+E;AAC/E,wBAAsB,iCAAiC,CAAC,EAAE,CAAC,EAAE,EAAE,GAAG,OAAO,CAAC;IACxE,SAAS,EAAE,MAAM,EAAE,CAAC;IACpB,OAAO,EAAE,KAAK,CAAC;QAAE,WAAW,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CAC7E,CAAC,CA+ED"}

package/dist/services/workspace-restore-reconciliation.js

@@ -0,0 +1,165 @@
+import { workspaceBackups } from "@rudderhq/db";
+import { and, eq } from "drizzle-orm";
+import fs from "node:fs/promises";
+import path from "node:path";
+import { resolveDefaultBackupDir, resolveOrganizationWorkspaceRoot } from "../home-paths.js";
+import { walkWorkspaceBackupV2 } from "./workspace-backup-v2.js";
+async function pathExists(targetPath) {
+    return fs.lstat(targetPath).catch((error) => {
+        if (error.code === "ENOENT")
+            return null;
+        throw error;
+    });
+}
+async function syncDirectory(directoryPath) {
+    const handle = await fs.open(directoryPath, "r");
+    try {
+        if (process.platform !== "win32")
+            await handle.sync();
+    }
+    finally {
+        await handle.close();
+    }
+}
+async function workspaceTreeSha256(rootPath) {
+    return (await walkWorkspaceBackupV2(rootPath)).treeSha256;
+}
+async function readRestoreReceipt(filePath) {
+    try {
+        const value = JSON.parse(await fs.readFile(filePath, "utf8"));
+        if (value.version !== 1 || typeof value.operationId !== "string" || typeof value.orgId !== "string"
+            || typeof value.backupId !== "string"
+            || !["prepared", "live_moved", "committed", "rolled_back", "recovery_required"].includes(value.phase ?? "")
+            || typeof value.workspaceRoot !== "string" || typeof value.stagingRoot !== "string"
+            || typeof value.rollbackRoot !== "string"
+            || (value.liveTreeSha256 !== null && typeof value.liveTreeSha256 !== "string")
+            || typeof value.stagingTreeSha256 !== "string"
+            || (value.expectedTreeSha256 !== null && typeof value.expectedTreeSha256 !== "string")
+            || typeof value.preRestoreBackupId !== "string")
+            return null;
+        return value;
+    }
+    catch (error) {
+        if (error.code === "ENOENT")
+            return null;
+        throw error;
+    }
+}
+function isOwnedRestoreRoot(root, workspaceRoot, operationId, kind) {
+    return path.resolve(root) !== path.resolve(workspaceRoot)
+        && path.resolve(root) === path.resolve(path.dirname(workspaceRoot), `.rudder-workspace-restore-${kind}-${operationId}`);
+}
+/** Reconcile only validated receipts and their exact operation-owned roots. */
+export async function reconcileWorkspaceRestoreReceipts(db) {
+    const receiptRoot = path.resolve(resolveDefaultBackupDir(), "workspace-restore-receipts");
+    const recovered = [];
+    const blocked = [];
+    let names;
+    try {
+        names = await fs.readdir(receiptRoot);
+    }
+    catch (error) {
+        if (error.code === "ENOENT")
+            return { recovered, blocked };
+        throw error;
+    }
+    for (const name of names.filter((entry) => entry.endsWith(".json"))) {
+        const receiptPath = path.join(receiptRoot, name);
+        let receipt = null;
+        try {
+            receipt = await readRestoreReceipt(receiptPath);
+        }
+        catch (error) {
+            blocked.push({ receiptPath, operationId: "unknown", error: error instanceof Error ? error.message : String(error) });
+            continue;
+        }
+        let canonicalWorkspaceRoot = null;
+        try {
+            if (receipt?.orgId)
+                canonicalWorkspaceRoot = path.resolve(resolveOrganizationWorkspaceRoot(receipt.orgId));
+        }
+        catch {
+            canonicalWorkspaceRoot = null;
+        }
+        if (!receipt || !canonicalWorkspaceRoot
+            || !/^[0-9a-f]{8}-[0-9a-f]{4}-4[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/.test(receipt.operationId)
+            || path.resolve(receipt.workspaceRoot) !== canonicalWorkspaceRoot
+            || !isOwnedRestoreRoot(receipt.stagingRoot, receipt.workspaceRoot, receipt.operationId, "staging")
+            || !isOwnedRestoreRoot(receipt.rollbackRoot, receipt.workspaceRoot, receipt.operationId, "rollback")) {
+            blocked.push({ receiptPath, operationId: receipt?.operationId ?? "unknown", error: "invalid_or_unowned_receipt" });
+            continue;
+        }
+        try {
+            const workspace = await pathExists(receipt.workspaceRoot);
+            const rollback = await pathExists(receipt.rollbackRoot);
+            const expectedPublishedTree = receipt.expectedTreeSha256 ?? receipt.stagingTreeSha256;
+            let publishedRestore = false;
+            if (receipt.phase === "prepared") {
+                if (workspace && rollback)
+                    throw new Error("prepared receipt has conflicting live and rollback roots");
+                if (!workspace && rollback) {
+                    if (!receipt.liveTreeSha256 || await workspaceTreeSha256(receipt.rollbackRoot) !== receipt.liveTreeSha256)
+                        throw new Error("prepared rollback tree does not match recorded live tree");
+                    await fs.rename(receipt.rollbackRoot, receipt.workspaceRoot);
+                    await syncDirectory(path.dirname(receipt.workspaceRoot));
+                }
+            }
+            else if (receipt.phase === "committed") {
+                if (!workspace)
+                    throw new Error("committed receipt workspace is missing");
+                if (await workspaceTreeSha256(receipt.workspaceRoot) !== expectedPublishedTree) {
+                    throw new Error("committed workspace tree does not match receipt");
+                }
+                publishedRestore = true;
+            }
+            else if (receipt.phase === "rolled_back") {
+                if (!workspace)
+                    throw new Error("rolled_back receipt workspace is missing");
+                if (receipt.liveTreeSha256 && await workspaceTreeSha256(receipt.workspaceRoot) !== receipt.liveTreeSha256)
+                    throw new Error("rolled_back workspace tree does not match recorded live tree");
+            }
+            else if (receipt.phase === "live_moved" || receipt.phase === "recovery_required") {
+                if (!workspace && rollback) {
+                    if (!receipt.liveTreeSha256 || await workspaceTreeSha256(receipt.rollbackRoot) !== receipt.liveTreeSha256)
+                        throw new Error("rollback tree does not match recorded live tree");
+                    await fs.rename(receipt.rollbackRoot, receipt.workspaceRoot);
+                    await syncDirectory(path.dirname(receipt.workspaceRoot));
+                }
+                else if (workspace && !rollback) {
+                    if (await workspaceTreeSha256(receipt.workspaceRoot) !== expectedPublishedTree)
+                        throw new Error("published workspace tree does not match receipt");
+                    publishedRestore = true;
+                }
+                else if (workspace && rollback) {
+                    if (await workspaceTreeSha256(receipt.workspaceRoot) === expectedPublishedTree)
+                        publishedRestore = true;
+                    else if (receipt.liveTreeSha256 && await workspaceTreeSha256(receipt.rollbackRoot) === receipt.liveTreeSha256) {
+                        await fs.rm(receipt.workspaceRoot, { recursive: true, force: true });
+                        await fs.rename(receipt.rollbackRoot, receipt.workspaceRoot);
+                        await syncDirectory(path.dirname(receipt.workspaceRoot));
+                    }
+                    else
+                        throw new Error("workspace and rollback roots match neither recorded tree");
+                }
+                else
+                    throw new Error("workspace and rollback roots are both missing");
+            }
+            if (publishedRestore && db) {
+                const [updated] = await db.update(workspaceBackups).set({ status: "restored", updatedAt: new Date() })
+                    .where(and(eq(workspaceBackups.id, receipt.backupId), eq(workspaceBackups.orgId, receipt.orgId))).returning({ id: workspaceBackups.id });
+                if (!updated)
+                    throw new Error("restore receipt backup row is missing");
+            }
+            await fs.rm(receipt.stagingRoot, { recursive: true, force: true });
+            await fs.rm(receipt.rollbackRoot, { recursive: true, force: true });
+            await fs.rm(receiptPath, { force: true });
+            await syncDirectory(receiptRoot);
+            recovered.push(receipt.operationId);
+        }
+        catch (error) {
+            blocked.push({ receiptPath, operationId: receipt.operationId, error: error instanceof Error ? error.message : String(error) });
+        }
+    }
+    return { recovered, blocked };
+}
+//# sourceMappingURL=workspace-restore-reconciliation.js.map

package/dist/services/workspace-restore-reconciliation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"workspace-restore-reconciliation.js","sourceRoot":"","sources":["../../src/services/workspace-restore-reconciliation.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAW,MAAM,cAAc,CAAC;AACzD,OAAO,EAAE,GAAG,EAAE,EAAE,EAAE,MAAM,aAAa,CAAC;AACtC,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAClC,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,uBAAuB,EAAE,gCAAgC,EAAE,MAAM,kBAAkB,CAAC;AAC7F,OAAO,EAAE,qBAAqB,EAAE,MAAM,0BAA0B,CAAC;AAGjE,KAAK,UAAU,UAAU,CAAC,UAAkB;IAC1C,OAAO,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,KAAK,CAAC,CAAC,KAA4B,EAAE,EAAE;QACjE,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC;QACzC,MAAM,KAAK,CAAC;IACd,CAAC,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,aAAa,CAAC,aAAqB;IAChD,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,aAAa,EAAE,GAAG,CAAC,CAAC;IACjD,IAAI,CAAC;QAAC,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO;YAAE,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;IAAC,CAAC;YAAS,CAAC;QAAC,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;IAAC,CAAC;AAClG,CAAC;AAED,KAAK,UAAU,mBAAmB,CAAC,QAAgB;IACjD,OAAO,CAAC,MAAM,qBAAqB,CAAC,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC;AAC5D,CAAC;AAED,KAAK,UAAU,kBAAkB,CAAC,QAAgB;IAChD,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAqC,CAAC;QAClG,IAAI,KAAK,CAAC,OAAO,KAAK,CAAC,IAAI,OAAO,KAAK,CAAC,WAAW,KAAK,QAAQ,IAAI,OAAO,KAAK,CAAC,KAAK,KAAK,QAAQ;eAC9F,OAAO,KAAK,CAAC,QAAQ,KAAK,QAAQ;eAClC,CAAC,CAAC,UAAU,EAAE,YAAY,EAAE,WAAW,EAAE,aAAa,EAAE,mBAAmB,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,IAAI,EAAE,CAAC;eACxG,OAAO,KAAK,CAAC,aAAa,KAAK,QAAQ,IAAI,OAAO,KAAK,CAAC,WAAW,KAAK,QAAQ;eAChF,OAAO,KAAK,CAAC,YAAY,KAAK,QAAQ;eACtC,CAAC,KAAK,CAAC,cAAc,KAAK,IAAI,IAAI,OAAO,KAAK,CAAC,cAAc,KAAK,QAAQ,CAAC;eAC3E,OAAO,KAAK,CAAC,iBAAiB,KAAK,QAAQ;eAC3C,CAAC,KAAK,CAAC,kBAAkB,KAAK,IAAI,IAAI,OAAO,KAAK,CAAC,kBAAkB,KAAK,QAAQ,CAAC;eACnF,OAAO,KAAK,CAAC,kBAAkB,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC;QAC/D,OAAO,KAAgC,CAAC;IAC1C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC;QACpE,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,kBAAkB,CAAC,IAAY,EAAE,aAAqB,EAAE,WAAmB,EAAE,IAA4B;IAChH,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC;WACpD,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,6BAA6B,IAAI,IAAI,WAAW,EAAE,CAAC,CAAC;AAC5H,CAAC;AAED,+EAA+E;AAC/E,MAAM,CAAC,KAAK,UAAU,iCAAiC,CAAC,EAAO;IAI7D,MAAM,WAAW,GAAG,IAAI,CAAC,OAAO,CAAC,uBAAuB,EAAE,EAAE,4BAA4B,CAAC,CAAC;IAC1F,MAAM,SAAS,GAAa,EAAE,CAAC;IAC/B,MAAM,OAAO,GAAuE,EAAE,CAAC;IACvF,IAAI,KAAe,CAAC;IACpB,IAAI,CAAC;QAAC,KAAK,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;IAAC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAC5D,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC;QACtF,MAAM,KAAK,CAAC;IACd,CAAC;IACD,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC;QACpE,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;QACjD,IAAI,OAAO,GAAmC,IAAI,CAAC;QACnD,IAAI,CAAC;YAAC,OAAO,GAAG,MAAM,kBAAkB,CAAC,WAAW,CAAC,CAAC;QAAC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACtE,OAAO,CAAC,IAAI,CAAC,EAAE,WAAW,EAAE,WAAW,EAAE,SAAS,EAAE,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YACrH,SAAS;QACX,CAAC;QACD,IAAI,sBAAsB,GAAkB,IAAI,CAAC;QACjD,IAAI,CAAC;YAAC,IAAI,OAAO,EAAE,KAAK;gBAAE,sBAAsB,GAAG,IAAI,CAAC,OAAO,CAAC,gCAAgC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC;YAAC,sBAAsB,GAAG,IAAI,CAAC;QAAC,CAAC;QAC5J,IAAI,CAAC,OAAO,IAAI,CAAC,sBAAsB;eAClC,CAAC,uEAAuE,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC;eAClG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,aAAa,CAAC,KAAK,sBAAsB;eAC9D,CAAC,kBAAkB,CAAC,OAAO,CAAC,WAAW,EAAE,OAAO,CAAC,aAAa,EAAE,OAAO,CAAC,WAAW,EAAE,SAAS,CAAC;eAC/F,CAAC,kBAAkB,CAAC,OAAO,CAAC,YAAY,EAAE,OAAO,CAAC,aAAa,EAAE,OAAO,CAAC,WAAW,EAAE,UAAU,CAAC,EAAE,CAAC;YACvG,OAAO,CAAC,IAAI,CAAC,EAAE,WAAW,EAAE,WAAW,EAAE,OAAO,EAAE,WAAW,IAAI,SAAS,EAAE,KAAK,EAAE,4BAA4B,EAAE,CAAC,CAAC;YACnH,SAAS;QACX,CAAC;QACD,IAAI,CAAC;YACH,MAAM,SAAS,GAAG,MAAM,UAAU,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;YAC1D,MAAM,QAAQ,GAAG,MAAM,UAAU,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;YACxD,MAAM,qBAAqB,GAAG,OAAO,CAAC,kBAAkB,IAAI,OAAO,CAAC,iBAAiB,CAAC;YACtF,IAAI,gBAAgB,GAAG,KAAK,CAAC;YAC7B,IAAI,OAAO,CAAC,KAAK,KAAK,UAAU,EAAE,CAAC;gBACjC,IAAI,SAAS,IAAI,QAAQ;oBAAE,MAAM,IAAI,KAAK,CAAC,0DAA0D,CAAC,CAAC;gBACvG,IAAI,CAAC,SAAS,IAAI,QAAQ,EAAE,CAAC;oBAC3B,IAAI,CAAC,OAAO,CAAC,cAAc,IAAI,MAAM,mBAAmB,CAAC,OAAO,CAAC,YAAY,CAAC,KAAK,OAAO,CAAC,cAAc;wBAAE,MAAM,IAAI,KAAK,CAAC,0DAA0D,CAAC,CAAC;oBACvL,MAAM,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,YAAY,EAAE,OAAO,CAAC,aAAa,CAAC,CAAC;oBAC7D,MAAM,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC;gBAC3D,CAAC;YACH,CAAC;iBAAM,IAAI,OAAO,CAAC,KAAK,KAAK,WAAW,EAAE,CAAC;gBACzC,IAAI,CAAC,SAAS;oBAAE,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;gBAC1E,IAAI,MAAM,mBAAmB,CAAC,OAAO,CAAC,aAAa,CAAC,KAAK,qBAAqB,EAAE,CAAC;oBAC/E,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;gBACrE,CAAC;gBACD,gBAAgB,GAAG,IAAI,CAAC;YAC1B,CAAC;iBAAM,IAAI,OAAO,CAAC,KAAK,KAAK,aAAa,EAAE,CAAC;gBAC3C,IAAI,CAAC,SAAS;oBAAE,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;gBAC5E,IAAI,OAAO,CAAC,cAAc,IAAI,MAAM,mBAAmB,CAAC,OAAO,CAAC,aAAa,CAAC,KAAK,OAAO,CAAC,cAAc;oBAAE,MAAM,IAAI,KAAK,CAAC,8DAA8D,CAAC,CAAC;YAC7L,CAAC;iBAAM,IAAI,OAAO,CAAC,KAAK,KAAK,YAAY,IAAI,OAAO,CAAC,KAAK,KAAK,mBAAmB,EAAE,CAAC;gBACnF,IAAI,CAAC,SAAS,IAAI,QAAQ,EAAE,CAAC;oBAC3B,IAAI,CAAC,OAAO,CAAC,cAAc,IAAI,MAAM,mBAAmB,CAAC,OAAO,CAAC,YAAY,CAAC,KAAK,OAAO,CAAC,cAAc;wBAAE,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;oBAC9K,MAAM,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,YAAY,EAAE,OAAO,CAAC,aAAa,CAAC,CAAC;oBAC7D,MAAM,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC;gBAC3D,CAAC;qBAAM,IAAI,SAAS,IAAI,CAAC,QAAQ,EAAE,CAAC;oBAClC,IAAI,MAAM,mBAAmB,CAAC,OAAO,CAAC,aAAa,CAAC,KAAK,qBAAqB;wBAAE,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;oBACnJ,gBAAgB,GAAG,IAAI,CAAC;gBAC1B,CAAC;qBAAM,IAAI,SAAS,IAAI,QAAQ,EAAE,CAAC;oBACjC,IAAI,MAAM,mBAAmB,CAAC,OAAO,CAAC,aAAa,CAAC,KAAK,qBAAqB;wBAAE,gBAAgB,GAAG,IAAI,CAAC;yBACnG,IAAI,OAAO,CAAC,cAAc,IAAI,MAAM,mBAAmB,CAAC,OAAO,CAAC,YAAY,CAAC,KAAK,OAAO,CAAC,cAAc,EAAE,CAAC;wBAC9G,MAAM,EAAE,CAAC,EAAE,CAAC,OAAO,CAAC,aAAa,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;wBACrE,MAAM,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,YAAY,EAAE,OAAO,CAAC,aAAa,CAAC,CAAC;wBAC7D,MAAM,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC;oBAC3D,CAAC;;wBAAM,MAAM,IAAI,KAAK,CAAC,0DAA0D,CAAC,CAAC;gBACrF,CAAC;;oBAAM,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;YAC1E,CAAC;YACD,IAAI,gBAAgB,IAAI,EAAE,EAAE,CAAC;gBAC3B,MAAM,CAAC,OAAO,CAAC,GAAG,MAAM,EAAE,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC,GAAG,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,EAAE,CAAC;qBACnG,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,gBAAgB,CAAC,EAAE,EAAE,OAAO,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC,gBAAgB,CAAC,KAAK,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,gBAAgB,CAAC,EAAE,EAAE,CAAC,CAAC;gBAC3I,IAAI,CAAC,OAAO;oBAAE,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;YACzE,CAAC;YACD,MAAM,EAAE,CAAC,EAAE,CAAC,OAAO,CAAC,WAAW,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YACnE,MAAM,EAAE,CAAC,EAAE,CAAC,OAAO,CAAC,YAAY,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YACpE,MAAM,EAAE,CAAC,EAAE,CAAC,WAAW,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YAC1C,MAAM,aAAa,CAAC,WAAW,CAAC,CAAC;YACjC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;QACtC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,IAAI,CAAC,EAAE,WAAW,EAAE,WAAW,EAAE,OAAO,CAAC,WAAW,EAAE,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QACjI,CAAC;IACH,CAAC;IACD,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC;AAChC,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@rudderhq/server",
-  "version": "0.7.11",
+  "version": "0.7.12",
   "license": "SEE LICENSE IN LICENSE",
   "homepage": "https://github.com/Undertone0809/rudder",
   "bugs": {
@@ -55,19 +55,19 @@
     "@aws-sdk/client-s3": "^3.1015.0",
     "@larksuiteoapi/node-sdk": "1.67.0",
     "@modelcontextprotocol/client": "2.0.0",
-    "@rudderhq/agent-runtime-claude-local": "0.7.11",
-    "@rudderhq/agent-runtime-codex-local": "0.7.11",
-    "@rudderhq/agent-runtime-cursor-local": "0.7.11",
-    "@rudderhq/agent-runtime-gemini-local": "0.7.11",
-    "@rudderhq/agent-runtime-hermes-gateway": "0.7.11",
-    "@rudderhq/agent-runtime-openclaw-gateway": "0.7.11",
-    "@rudderhq/agent-runtime-opencode-local": "0.7.11",
-    "@rudderhq/agent-runtime-pi-local": "0.7.11",
-    "@rudderhq/agent-runtime-utils": "0.7.11",
-    "@rudderhq/db": "0.7.11",
-    "@rudderhq/identity-core": "0.7.11",
-    "@rudderhq/run-intelligence-core": "0.7.11",
-    "@rudderhq/shared": "0.7.11",
+    "@rudderhq/agent-runtime-claude-local": "0.7.12",
+    "@rudderhq/agent-runtime-codex-local": "0.7.12",
+    "@rudderhq/agent-runtime-cursor-local": "0.7.12",
+    "@rudderhq/agent-runtime-gemini-local": "0.7.12",
+    "@rudderhq/agent-runtime-hermes-gateway": "0.7.12",
+    "@rudderhq/agent-runtime-openclaw-gateway": "0.7.12",
+    "@rudderhq/agent-runtime-opencode-local": "0.7.12",
+    "@rudderhq/agent-runtime-pi-local": "0.7.12",
+    "@rudderhq/agent-runtime-utils": "0.7.12",
+    "@rudderhq/db": "0.7.12",
+    "@rudderhq/identity-core": "0.7.12",
+    "@rudderhq/run-intelligence-core": "0.7.12",
+    "@rudderhq/shared": "0.7.12",
     "ajv": "^8.18.0",
     "ajv-formats": "^3.0.1",
     "better-auth": "1.6.23",

package/resources/bundled-skills/rudder-docs/references/api-reference.md

@@ -138,6 +138,8 @@ Use the incremental `after` form when you already know the thread.
 - `GET /api/orgs/:orgId/issues`
 - `POST /api/orgs/:orgId/issues`
 - `GET /api/orgs/:orgId/agents`
+- `GET /api/orgs/:orgId/members/directory`
+  - Returns `total/items/nextCursor/hasMore` with `Name`, `Type`, `Role`, and `Ref`; use `fullIds=true` only for explicit UUID debugging.
 - `POST /api/orgs/:orgId/agent-hires`
 - `GET /api/orgs/:orgId/dashboard`
 - `GET /api/orgs/:orgId/projects`
@@ -158,6 +160,12 @@ in `pending_approval` plus the approval record when organization policy requires
 review. Normal runtime work should follow [Agent creation](agent-creation.md)
 and the installed CLI instead of calling this route directly.
 
+The member directory is a read-only, organization-scoped view for Agent
+context. It returns only active visible members with `name`, `type`, `role`,
+and typed short `ref` fields. Agent keys may read their own organization;
+cross-organization requests are rejected. Use `query`, `type`, `limit`, and
+`cursor` for bounded pagination.
+
 ### Resources
 
 - `GET /api/orgs/:orgId/resources`

package/resources/bundled-skills/rudder-docs/references/cli-reference.md

@@ -32,14 +32,14 @@ operating-practices guide for operating behavior:
 
 - First-party MCP tools use the stable `rudder_<capability_id>` naming convention, for example `rudder_issue_checkout` for `issue.checkout`.
 - All commands support `--json`.
-- CLI output renders IDs as short IDs by default; `rudder runs ...` commands accept short run IDs. Add `--full-ids` only when a debugging or compatibility workflow needs raw UUIDs.
+- CLI output renders IDs as typed short IDs by default (`agt_`, `cht_`, `run_`, `msg_`, `cmt_`, and related refs); `rudder runs ...` commands accept typed refs, legacy bare short run IDs, or full UUIDs. Add `--full-ids` only when a debugging or compatibility workflow needs raw UUIDs.
 - `--org-id` defaults to `RUDDER_ORG_ID` when relevant.
 - `--run-id` defaults to `RUDDER_RUN_ID` and is attached to mutating requests when available.
 - `issue checkout` defaults `--agent-id` from `RUDDER_AGENT_ID`.
 
 ## JSON Output Contract
 
-`rudder ... --json` commands must write valid JSON to stdout on success. ID fields in CLI JSON use short display IDs by default; pass `--full-ids` to preserve raw UUIDs. Short run IDs returned by CLI output can be passed back into `rudder runs get`, `events`, `log`, `transcript`, `errors`, `cancel`, and `retry`. If a command cannot produce the requested JSON, it must exit nonzero and write a diagnostic error to stderr. An exit-0 command with empty stdout is a CLI/runtime defect, not a valid empty result.
+`rudder ... --json` commands must write valid JSON to stdout on success. ID fields in CLI JSON use typed short display IDs by default; pass `--full-ids` to preserve raw UUIDs. Typed or legacy short run IDs returned by CLI output can be passed back into `rudder runs get`, `events`, `log`, `transcript`, `errors`, `cancel`, and `retry`. If a command cannot produce the requested JSON, it must exit nonzero and write a diagnostic error to stderr. An exit-0 command with empty stdout is a CLI/runtime defect, not a valid empty result.
 
 ## Agent V1 Commands
 
@@ -47,6 +47,7 @@ operating-practices guide for operating behavior:
 | --- | --- | --- | --- | --- | --- | --- |
 | `rudder_agent_me` | `rudder agent me` | Show the authenticated agent identity and budget. | no | no | no | no |
 | `rudder_agent_inbox` | `rudder agent inbox` | List the compact assignee and reviewer work inbox for the authenticated agent. | no | no | no | no |
+| `rudder_organization_members_list` | `rudder org members --org-id <id> [--query <text>] [--type <human|agent|all>] [--limit <n>] [--cursor <cursor>]` | List active visible human and agent members in the authenticated organization. | no | required | no | no |
 | `rudder_agent_capabilities` | `rudder agent capabilities` | List the stable Rudder agent command contract. | no | no | no | no |
 | `rudder_agent_update` | `rudder agent update [agent-id] [--title <title>] [--description <text>]` | Update an agent's identity fields; defaults to the authenticated agent. | yes | no | no | attached when available |
 | `rudder_agent_skills_create` | `rudder agent skills create [agent-id] --name <name> [--enable]` | Create an agent-private skill package under AGENT_HOME/skills. | yes | no | no | attached when available |
@@ -161,6 +162,8 @@ Issue comment responses include `shortRef` when available. `rudder issue comment
 
 Chat conversation responses include `shortRef` when available. Chat read and mutation commands accept the organization-scoped `cht_<uuid-prefix>` value or the full conversation UUID. Human-readable `chat list` and `chat search` output prefers `shortRef`; `--json` retains both `id` and `shortRef`, and `--full-ids` preserves the durable UUID value in `id`. Use the full UUID when a short ref is ambiguous.
 
+Agent run and message responses include typed `shortRef` values when available. Agent-facing output prefers `run_<uuid-prefix>` and `msg_<uuid-prefix>` while preserving the durable UUID in `id`; `--full-ids` restores the UUID values. Run routes accept `run_` refs, legacy bare hex prefixes, and full UUIDs within the authorized organization scope. Ambiguous prefixes return `409` with typed candidates.
+
 `--image` may be repeated. The CLI uploads each local PNG/JPEG/WebP/GIF as an issue attachment and appends Markdown image links to the comment text before sending it.
 
 ## Renderable Library CLI Output

package/skills/rudder-docs/references/api-reference.md

@@ -138,6 +138,8 @@ Use the incremental `after` form when you already know the thread.
 - `GET /api/orgs/:orgId/issues`
 - `POST /api/orgs/:orgId/issues`
 - `GET /api/orgs/:orgId/agents`
+- `GET /api/orgs/:orgId/members/directory`
+  - Returns `total/items/nextCursor/hasMore` with `Name`, `Type`, `Role`, and `Ref`; use `fullIds=true` only for explicit UUID debugging.
 - `POST /api/orgs/:orgId/agent-hires`
 - `GET /api/orgs/:orgId/dashboard`
 - `GET /api/orgs/:orgId/projects`
@@ -158,6 +160,12 @@ in `pending_approval` plus the approval record when organization policy requires
 review. Normal runtime work should follow [Agent creation](agent-creation.md)
 and the installed CLI instead of calling this route directly.
 
+The member directory is a read-only, organization-scoped view for Agent
+context. It returns only active visible members with `name`, `type`, `role`,
+and typed short `ref` fields. Agent keys may read their own organization;
+cross-organization requests are rejected. Use `query`, `type`, `limit`, and
+`cursor` for bounded pagination.
+
 ### Resources
 
 - `GET /api/orgs/:orgId/resources`

package/skills/rudder-docs/references/cli-reference.md

@@ -32,14 +32,14 @@ operating-practices guide for operating behavior:
 
 - First-party MCP tools use the stable `rudder_<capability_id>` naming convention, for example `rudder_issue_checkout` for `issue.checkout`.
 - All commands support `--json`.
-- CLI output renders IDs as short IDs by default; `rudder runs ...` commands accept short run IDs. Add `--full-ids` only when a debugging or compatibility workflow needs raw UUIDs.
+- CLI output renders IDs as typed short IDs by default (`agt_`, `cht_`, `run_`, `msg_`, `cmt_`, and related refs); `rudder runs ...` commands accept typed refs, legacy bare short run IDs, or full UUIDs. Add `--full-ids` only when a debugging or compatibility workflow needs raw UUIDs.
 - `--org-id` defaults to `RUDDER_ORG_ID` when relevant.
 - `--run-id` defaults to `RUDDER_RUN_ID` and is attached to mutating requests when available.
 - `issue checkout` defaults `--agent-id` from `RUDDER_AGENT_ID`.
 
 ## JSON Output Contract
 
-`rudder ... --json` commands must write valid JSON to stdout on success. ID fields in CLI JSON use short display IDs by default; pass `--full-ids` to preserve raw UUIDs. Short run IDs returned by CLI output can be passed back into `rudder runs get`, `events`, `log`, `transcript`, `errors`, `cancel`, and `retry`. If a command cannot produce the requested JSON, it must exit nonzero and write a diagnostic error to stderr. An exit-0 command with empty stdout is a CLI/runtime defect, not a valid empty result.
+`rudder ... --json` commands must write valid JSON to stdout on success. ID fields in CLI JSON use typed short display IDs by default; pass `--full-ids` to preserve raw UUIDs. Typed or legacy short run IDs returned by CLI output can be passed back into `rudder runs get`, `events`, `log`, `transcript`, `errors`, `cancel`, and `retry`. If a command cannot produce the requested JSON, it must exit nonzero and write a diagnostic error to stderr. An exit-0 command with empty stdout is a CLI/runtime defect, not a valid empty result.
 
 ## Agent V1 Commands
 
@@ -47,6 +47,7 @@ operating-practices guide for operating behavior:
 | --- | --- | --- | --- | --- | --- | --- |
 | `rudder_agent_me` | `rudder agent me` | Show the authenticated agent identity and budget. | no | no | no | no |
 | `rudder_agent_inbox` | `rudder agent inbox` | List the compact assignee and reviewer work inbox for the authenticated agent. | no | no | no | no |
+| `rudder_organization_members_list` | `rudder org members --org-id <id> [--query <text>] [--type <human|agent|all>] [--limit <n>] [--cursor <cursor>]` | List active visible human and agent members in the authenticated organization. | no | required | no | no |
 | `rudder_agent_capabilities` | `rudder agent capabilities` | List the stable Rudder agent command contract. | no | no | no | no |
 | `rudder_agent_update` | `rudder agent update [agent-id] [--title <title>] [--description <text>]` | Update an agent's identity fields; defaults to the authenticated agent. | yes | no | no | attached when available |
 | `rudder_agent_skills_create` | `rudder agent skills create [agent-id] --name <name> [--enable]` | Create an agent-private skill package under AGENT_HOME/skills. | yes | no | no | attached when available |
@@ -161,6 +162,8 @@ Issue comment responses include `shortRef` when available. `rudder issue comment
 
 Chat conversation responses include `shortRef` when available. Chat read and mutation commands accept the organization-scoped `cht_<uuid-prefix>` value or the full conversation UUID. Human-readable `chat list` and `chat search` output prefers `shortRef`; `--json` retains both `id` and `shortRef`, and `--full-ids` preserves the durable UUID value in `id`. Use the full UUID when a short ref is ambiguous.
 
+Agent run and message responses include typed `shortRef` values when available. Agent-facing output prefers `run_<uuid-prefix>` and `msg_<uuid-prefix>` while preserving the durable UUID in `id`; `--full-ids` restores the UUID values. Run routes accept `run_` refs, legacy bare hex prefixes, and full UUIDs within the authorized organization scope. Ambiguous prefixes return `409` with typed candidates.
+
 `--image` may be repeated. The CLI uploads each local PNG/JPEG/WebP/GIF as an issue attachment and appends Markdown image links to the comment text before sending it.
 
 ## Renderable Library CLI Output

package/ui-dist/assets/LibraryLiveSurface-tCWxJKp5.js

@@ -0,0 +1 @@
+import{u as ee,a as re,b as te,r as l,c as Q,q as T,i as I,d as A,w as ne,j as e,W as ae,T as se,F as G,e as oe,M as ie,f as le,g as ce,C as z,h as ue,k as de,l as fe,m as me,n as he,o as xe,s as q,p as U,t as D,v as ye,x as J,y as be,z as pe,A as X,B as ve,R as we,D as ke}from"./index-BuIyK71w.js";const V="This file changed while you were editing it.";function ge(b){return b.split("/").filter(Boolean).at(-1)??b}function je(b){return!(b.truncated||b.previewKind!=="text"||b.content===null)}function Fe(b){return/\.(?:md|markdown|mdown|mdx)$/i.test(b.filePath)}function Ce({annotationConversationId:b,file:L,organizationId:n,sourceToolbar:K}){const a=he(),s=L.filePath,w=L.content??"",F=l.useRef(xe(n,s,w)).current,c=l.useRef(!0),f=l.useRef(F.baseContent),C=l.useRef(w),u=l.useRef(F.content),g=l.useRef(null),_=l.useRef(!1),i=l.useRef(F.conflicted),y=l.useRef(0),[m,j]=l.useState(F.content),[P,p]=l.useState(F.conflicted?"error":F.content===w?"saved":"saving"),[R,h]=l.useState(F.conflicted?V:null),v=l.useRef(null),[S,N]=l.useState(null),t=Fe(L);u.current=m,C.current=w,l.useEffect(()=>(c.current=!0,()=>{c.current=!1,q(n,s,f.current,u.current)}),[s,n]),l.useEffect(()=>{if(w!==f.current){if(w===u.current){f.current=w,i.current=!1,p("saved"),h(null),U(n,s);return}if(u.current===f.current){f.current=w,u.current=w,j(w),i.current=!1,p("saved"),h(null),U(n,s);return}g.current=null,y.current+=1,i.current=!0,p("error"),h(V),q(n,s,f.current,u.current)}},[s,n,w]);const M=l.useCallback((o,k)=>{const r=o.content??k;f.current=r,C.current=r,i.current=!1,a.setQueryData(T.organizations.workspaceFile(n,s),o),q(n,s,r,u.current),u.current!==r&&(g.current=u.current),c.current&&(h(null),p(u.current===r?"saved":"saving"))},[s,n,a]),E=l.useCallback(async()=>{if(!_.current){_.current=!0;try{for(;g.current!==null;){const o=g.current,k=y.current;if(g.current=null,i.current)return;if(o!==f.current){c.current&&(p("saving"),h(null));try{const r=await D.updateWorkspaceFile(n,s,{content:o,expectedContent:f.current});if(k!==y.current)continue;M(r,o)}catch(r){if(k!==y.current)continue;let d=null;try{d=await D.readWorkspaceFile(n,s)}catch{}if(k!==y.current)continue;if(d&&(C.current=d.content??"",a.setQueryData(T.organizations.workspaceFile(n,s),d)),(d==null?void 0:d.content)===o){M(d,o);continue}d&&d.content!==f.current&&(g.current=null,i.current=!0,q(n,s,f.current,u.current)),c.current&&(p("error"),h(i.current?V:r instanceof Error?r.message:"Could not save this file."));return}}}c.current&&p(u.current===f.current?"saved":"saving")}finally{_.current=!1,g.current!==null&&!i.current&&E()}}},[M,s,n,a]),W=l.useCallback(o=>{g.current=o,E()},[E]);l.useEffect(()=>{if(q(n,s,f.current,m),i.current)return;if(m===f.current){p(_.current||g.current!==null?"saving":"saved");return}const o=window.setTimeout(()=>W(m),700);return()=>window.clearTimeout(o)},[m,W,s,n]);const $=()=>{const o=C.current;y.current+=1,f.current=o,u.current=o,g.current=null,i.current=!1,j(o),p("saved"),h(null),U(n,s)},O=()=>{y.current+=1,f.current=C.current,i.current=!1,p("saving"),h(null),W(u.current)},x=t?ye(m):{frontmatter:null,separator:"",body:m};return e.jsxs("div",{className:"relative flex h-full min-h-0 min-w-0 w-full flex-col overflow-hidden","data-testid":t?"library-live-surface-markdown-editor":"library-live-surface-text-editor",children:[K,e.jsx("div",{ref:v,className:X("min-h-0 flex-1",t?"scrollbar-auto-hide overflow-y-auto px-6 py-6":"overflow-hidden"),children:t?e.jsxs(e.Fragment,{children:[x.frontmatter!==null?e.jsxs("details",{className:"group mb-6 rounded-md border border-[color:var(--border-soft)] bg-[color:var(--surface-page)]","data-chat-annotation-ignore":!0,"data-testid":"library-live-surface-frontmatter-editor",children:[e.jsxs("summary",{className:"flex cursor-pointer list-none items-center justify-between gap-3 px-3 py-2 text-xs font-medium text-muted-foreground outline-none transition-colors hover:text-foreground [&::-webkit-details-marker]:hidden",children:[e.jsx("span",{children:"Frontmatter"}),e.jsx(z,{className:"h-3.5 w-3.5 transition-transform group-open:rotate-90"})]}),e.jsx("textarea",{value:x.frontmatter,onChange:o=>{const k=J(o.currentTarget.value,x.separator,x.body);u.current=k,j(k),p(i.current?"error":"saving"),i.current||h(null)},spellCheck:!1,className:"block min-h-28 w-full resize-y border-t border-[color:var(--border-soft)] bg-transparent px-3 py-2 font-mono text-xs leading-5 text-foreground outline-none","aria-label":"Frontmatter"})]}):null,e.jsx(be,{engine:"codemirror",documentIdentity:`library-file:${s}`,value:x.body,onChange:o=>{const k=J(x.frontmatter,x.separator,o);u.current=k,j(k),p(i.current?"error":"saving"),i.current||h(null)},bordered:!1,placeholder:"Write in Markdown...",contentClassName:"rudder-library-document-editor rudder-readable-document mx-auto min-h-[420px] w-full max-w-[880px] text-[15px] leading-7 text-foreground"},s)]}):e.jsx(pe,{"data-testid":"library-live-surface-text-source-editor",annotationSource:{surface:"workspace_file",sourceFilePath:s},ariaLabel:`${s} source editor`,filePath:s,value:m,onChange:o=>{u.current=o,j(o),p(i.current?"error":"saving"),i.current||h(null)},onSelectionChange:N})}),e.jsx(ve,{containerRef:v,conversationId:b,explicitSelection:t?void 0:S,saved:P==="saved"&&!i.current&&m===f.current,source:m,sourceIdentity:{surface:"workspace_file",sourceFilePath:s,sourceLibraryEntryId:L.libraryEntryId},sourceRenderMode:t?"markdown":"text",renderedSource:t?x.body:m,renderedSourceOffset:t?m.length-x.body.length:0}),e.jsxs("div",{className:X("flex min-h-10 shrink-0 items-center gap-2 border-t border-border/70 px-4 text-xs",P==="error"?"text-destructive":"text-muted-foreground"),role:P==="error"?"alert":"status",children:[e.jsx("span",{children:P==="saved"?"Saved":P==="saving"?"Saving…":R??"Save failed"}),i.current?e.jsxs(e.Fragment,{children:[e.jsx("button",{type:"button",className:"font-medium text-foreground underline underline-offset-2",onClick:O,children:"Keep mine"}),e.jsx("button",{type:"button",className:"font-medium text-foreground underline underline-offset-2",onClick:$,children:"Use latest"})]}):P==="error"?e.jsxs("button",{type:"button",className:"inline-flex items-center gap-1 font-medium text-foreground underline underline-offset-2",onClick:()=>W(u.current),children:[e.jsx(we,{className:"h-3 w-3","aria-hidden":!0}),"Retry"]}):null]})]})}function Z(b){return e.jsx("div",{className:"m-auto max-w-sm px-6 py-10 text-center text-sm leading-6 text-muted-foreground","data-testid":"library-live-surface-unavailable",role:"status",children:b})}function Ne({active:b,annotationConversationId:L=null,organizationId:n,surface:K,target:a,onOpenTarget:s}){var o,k;const{pushToast:w}=ee(),Y=re(),F=te(),c=me(),[f,C]=l.useState([]),[u,g]=l.useState(null),[_,i]=l.useState("preview"),y=a.kind==="library_entry"?a:null,m=a.kind==="library_document"?a:null,j=a.kind==="library_directory"?a:null,P=(j==null?void 0:j.directoryPath)??"",p=a.kind==="library_file"?a.filePath:(y==null?void 0:y.path)??null,R=Q({queryKey:T.organizations.libraryEntry(n,(y==null?void 0:y.entryId)??"__none__"),queryFn:()=>D.getLibraryEntry(n,y.entryId),enabled:!!y,refetchOnWindowFocus:!1}),h=p??(((o=R.data)==null?void 0:o.status)==="active"?R.data.currentPath:null),v=Q({queryKey:T.organizations.workspaceFile(n,h??""),queryFn:()=>D.readWorkspaceFile(n,h),enabled:(a.kind==="library_file"||a.kind==="library_entry")&&!!h,refetchOnWindowFocus:!1}),S=Q({queryKey:T.organizations.libraryDocument(n,(m==null?void 0:m.documentId)??"__none__"),queryFn:()=>D.getLibraryDocument(n,m.documentId),enabled:!!m,refetchOnWindowFocus:!1}),N=Q({queryKey:T.organizations.workspaceFiles(n,P),queryFn:()=>D.listWorkspaceFiles(n,P),enabled:!!j,refetchOnWindowFocus:!1}),t=v.data,M=t?I(t)||A(t):!1;l.useEffect(()=>{i("preview")},[h]);const E=ne(f,{canOpenFile:!!(t!=null&&t.rootPath&&typeof(c==null?void 0:c.openWorkspaceFileInIde)=="function"),canOpenLocation:!!(t!=null&&t.rootPath&&typeof(c==null?void 0:c.openWorkspaceFileLocation)=="function")});l.useEffect(()=>{let r=!1;if(!(t!=null&&t.rootPath)||typeof(c==null?void 0:c.listWorkspaceLaunchTargets)!="function"){C([]);return}return c.listWorkspaceLaunchTargets().then(d=>{r||C(d)}).catch(()=>{r||C([])}),()=>{r=!0}},[c,t==null?void 0:t.rootPath]);const W=async r=>{var d;if(!(!(t!=null&&t.rootPath)||!c)){g(r.id);try{ke(r)?await c.openWorkspaceFileInIde(t.rootPath,t.filePath,r.id):await((d=c.openWorkspaceFileLocation)==null?void 0:d.call(c,t.rootPath,t.filePath,r.id)),w({title:`Opened in ${r.label}`,tone:"success"})}catch(B){w({title:`Could not open in ${r.label}`,body:B instanceof Error?B.message:"Try another app.",tone:"error"})}finally{g(null)}}},$=!!(a.kind==="library_entry"&&R.isPending||(a.kind==="library_file"||a.kind==="library_entry")&&h&&v.isPending||a.kind==="library_document"&&S.isPending||a.kind==="library_directory"&&N.isPending),O=a.kind==="library_entry"?R.error??v.error:a.kind==="library_file"?v.error:a.kind==="library_document"?S.error:N.error;let x;return $?x=e.jsx("div",{className:"m-auto text-sm text-muted-foreground","data-testid":"library-live-surface-loading",children:"Loading Library item…"}):O?x=e.jsx("div",{className:"m-auto max-w-sm px-6 py-10 text-center text-sm leading-6 text-destructive","data-testid":"library-live-surface-error",role:"alert",children:O instanceof Error?O.message:"Could not open this Library item."}):a.kind==="library_entry"&&!h?x=Z(((k=R.data)==null?void 0:k.status)==="deleted"?"This Library entry was deleted.":"This Library entry is unavailable on its original path."):(a.kind==="library_file"||a.kind==="library_entry")&&v.data?x=je(v.data)&&(!M||_==="source")?e.jsx(Ce,{annotationConversationId:L,file:v.data,organizationId:n,sourceToolbar:I(v.data)?e.jsx(ae,{viewMode:"source",onViewModeChange:i,testIdPrefix:"library-live-surface"}):A(v.data)?e.jsx("div",{className:"flex h-10 shrink-0 items-center justify-end border-b border-border px-3",children:e.jsxs("button",{type:"button",className:"inline-flex items-center gap-1.5 rounded-md px-2 py-1 text-xs font-medium text-muted-foreground hover:bg-muted hover:text-foreground",onClick:()=>i("preview"),"aria-label":"Show table",children:[e.jsx(se,{className:"h-3.5 w-3.5","aria-hidden":!0}),"Show table"]})}):void 0},v.data.filePath):e.jsxs("div",{className:"flex min-h-0 flex-1 flex-col overflow-hidden","data-testid":"library-live-surface-file-preview",children:[A(v.data)?e.jsx("div",{className:"flex h-10 shrink-0 items-center justify-end border-b border-border px-3",children:e.jsxs("button",{type:"button",className:"inline-flex items-center gap-1.5 rounded-md px-2 py-1 text-xs font-medium text-muted-foreground hover:bg-muted hover:text-foreground",onClick:()=>i("source"),"aria-label":"Show source",children:[e.jsx(G,{className:"h-3.5 w-3.5","aria-hidden":!0}),"Show source"]})}):null,e.jsx(oe,{file:v.data,organizationId:n,mode:_,onModeChange:i,testIdPrefix:"library-live-surface"})]}):a.kind==="library_document"&&S.data?x=e.jsx("article",{className:"scrollbar-auto-hide min-h-0 flex-1 overflow-y-auto px-8 py-8","data-testid":"library-live-surface-document",children:e.jsx(ie,{className:"rudder-library-document-editor rudder-readable-document mx-auto w-full max-w-[880px] text-[15px] leading-7 text-foreground",children:S.data.body})}):a.kind==="library_directory"&&N.data?x=e.jsxs("div",{className:"scrollbar-auto-hide min-h-0 flex-1 overflow-y-auto p-3","data-testid":"library-live-surface-directory",children:[e.jsxs("div",{className:"mb-3 px-2",children:[e.jsx("div",{className:"truncate text-sm font-medium text-foreground",children:N.data.directoryPath||"Library root"}),e.jsxs("div",{className:"mt-1 text-xs text-muted-foreground",children:[N.data.entries.length," item",N.data.entries.length===1?"":"s"]})]}),e.jsx("ul",{className:"space-y-0.5 border-t border-border/70 pt-2",children:N.data.entries.map(r=>{var H;const d=((H=r.displayLabel)==null?void 0:H.trim())||r.name,B=r.isDirectory?le:/\.(?:md|markdown|mdx|txt)$/i.test(r.path)?ce:G;return e.jsx("li",{children:e.jsxs("button",{type:"button",className:"flex w-full items-center gap-2 rounded-md px-2 py-1.5 text-left text-sm text-muted-foreground hover:bg-[color:var(--surface-active)] hover:text-foreground",onClick:()=>s(r.isDirectory?{kind:"library_directory",directoryPath:r.path,label:d}:r.libraryEntryId?{kind:"library_entry",entryId:r.libraryEntryId,label:d,path:r.path}:{kind:"library_file",filePath:r.path,label:d||ge(r.path)}),children:[e.jsx(B,{className:"h-4 w-4 shrink-0","aria-hidden":!0}),e.jsx("span",{className:"min-w-0 flex-1 truncate",children:d}),r.isDirectory?e.jsx(z,{className:"h-3.5 w-3.5 shrink-0","aria-hidden":!0}):null]})},r.path)})})]}):x=Z("This Library item is unavailable."),e.jsxs("section",{"aria-hidden":!b,className:"flex h-full min-h-0 min-w-0 w-full flex-col overflow-hidden bg-[color:var(--surface-panel)]","data-active":b?"true":"false","data-surface":K,"data-target-kind":a.kind,"data-testid":"library-live-surface",children:[t&&E.length>0?e.jsxs("div",{className:"flex h-11 shrink-0 items-center gap-3 border-b border-border/70 px-4","data-testid":"library-live-surface-file-toolbar",children:[e.jsx("span",{className:"min-w-0 flex-1 truncate text-xs text-muted-foreground",children:t.filePath}),e.jsx("div",{"data-testid":"library-live-surface-file-open-selector",children:e.jsx(ue,{targets:E,openingTargetId:u,onOpenTarget:r=>void W(r),onOpenInLibrary:()=>F(de(`/library?path=${encodeURIComponent(t.filePath)}`,fe(Y.pathname))),testId:"library-live-surface-file-open-menu"})})]}):null,x]})}export{Ne as LibraryLiveSurface};