@superblocksteam/workspace-sync 0.0.0-stage → 2.0.178-next.1

package/dist/control.js

@@ -0,0 +1,242 @@
+/**
+ * The contract between the three parties of an AgentCore workspace:
+ *
+ * - the AI service, which opens the VM and learns its session endpoint URL;
+ * - the workspace edge in the live-edit pod, the browser's front door, which
+ *   signs and forwards traffic to that URL and owns lock, activity and the
+ *   sync credential;
+ * - the workspace ingress in the VM, the one listener the session endpoint
+ *   reaches.
+ *
+ * Constants, the shared bearer token and message schemas only: no IO, so any
+ * party can be replaced as long as it speaks this file. Import it as
+ * `@superblocksteam/workspace-sync/control`.
+ *
+ * The edge and the VM image ship separately, so the schemas strip unknown
+ * fields instead of rejecting them: either side may add a field first.
+ */
+import { createHash, createHmac, timingSafeEqual } from "node:crypto";
+import { z } from "zod";
+// ---------------------------------------------------------------------------
+// Ports, paths and headers
+// ---------------------------------------------------------------------------
+/**
+ * The port the VM's ingress listens on. The builder runtime's `allowedPorts`
+ * must include it (AgentCore allows 8000-12000).
+ */
+export const WORKSPACE_INGRESS_PORT = 8090;
+/**
+ * Every control path on either side lives under this prefix. The edge never
+ * forwards a browser request under it to the VM: forwarded requests carry the
+ * workspace token, so a forwarded control path would be authorized.
+ */
+export const WORKSPACE_CONTROL_PREFIX = "/_sb_workspace/";
+/** VM ingress, edge → VM: replace the VM's copy of the edge's state. */
+export const WORKSPACE_STATE_PATH = "/_sb_workspace/state";
+/** VM ingress, edge → VM: commit the tree to DBFS now and report the result. */
+export const WORKSPACE_COMMIT_PATH = "/_sb_workspace/commit";
+/** Edge, AI service → edge: the VM's current session endpoint. */
+export const WORKSPACE_ENDPOINT_PATH = "/_sb_workspace/endpoint";
+/** Edge, VM → edge: read-only package registry proxy (prefix). */
+export const WORKSPACE_REGISTRY_PATH = "/_sb_workspace/registry/";
+/**
+ * Carries the workspace token on every request between the parties. Not
+ * `Authorization`: SigV4 owns that header on the edge → VM hop.
+ */
+export const WORKSPACE_TOKEN_HEADER = "x-sb-workspace-token";
+/**
+ * The browser's Host. The edge → VM hop must send the session endpoint's own
+ * Host (it is signed), so the edge moves the original here and the VM ingress
+ * restores it before Vite sees the request.
+ */
+export const WORKSPACE_ORIGINAL_HOST_HEADER = "x-sb-original-host";
+/**
+ * The browser's `Authorization`. SigV4 owns `Authorization` on the edge → VM
+ * hop, so the edge moves the browser's value here (dropping any inbound copy)
+ * and the VM ingress restores it before the workspace host checks it.
+ */
+export const WORKSPACE_ORIGINAL_AUTHORIZATION_HEADER = "x-sb-original-authorization";
+/** True when `pathname` is a control path that must not be forwarded. */
+export function isWorkspaceControlPath(pathname) {
+    return pathname.startsWith(WORKSPACE_CONTROL_PREFIX);
+}
+// ---------------------------------------------------------------------------
+// Token
+// ---------------------------------------------------------------------------
+/**
+ * The bearer token for one workspace session: the hex HMAC-SHA256 of
+ * `sessionKey` keyed by `secret`. Every party that holds the secret derives
+ * the same token, and a token derived for one session opens no other.
+ */
+export function deriveWorkspaceToken(secret, sessionKey) {
+    if (!secret)
+        throw new Error("deriveWorkspaceToken requires a secret");
+    if (!sessionKey)
+        throw new Error("deriveWorkspaceToken requires a sessionKey");
+    return createHmac("sha256", secret).update(sessionKey).digest("hex");
+}
+/**
+ * The token that authorizes endpoint reports (`PUT`
+ * {@link WORKSPACE_ENDPOINT_PATH}) for one session. Only parties outside the
+ * VM derive it: the VM holds the {@link deriveWorkspaceToken workspace
+ * token}, and that token must not be able to retarget the edge.
+ */
+export function deriveWorkspaceEndpointToken(secret, sessionKey) {
+    if (!secret)
+        throw new Error("deriveWorkspaceEndpointToken requires a secret");
+    if (!sessionKey)
+        throw new Error("deriveWorkspaceEndpointToken requires a sessionKey");
+    return createHmac("sha256", secret)
+        .update(`workspace-endpoint\n${sessionKey}`)
+        .digest("hex");
+}
+/**
+ * True when `url` is an AgentCore session endpoint in `region`: https on the
+ * default port, no credentials, and a host under
+ * `runtime.bedrock-agentcore.<region>.on.aws`.
+ */
+export function isAgentCoreSessionEndpoint(url, region) {
+    let parsed;
+    try {
+        parsed = new URL(url);
+    }
+    catch {
+        return false;
+    }
+    return (/^[a-z]{2}(-[a-z]+)+-\d+$/.test(region) &&
+        parsed.protocol === "https:" &&
+        parsed.port === "" &&
+        parsed.username === "" &&
+        parsed.password === "" &&
+        parsed.hostname.endsWith(`.runtime.bedrock-agentcore.${region}.on.aws`));
+}
+/**
+ * Constant-time string comparison. Both sides are hashed first so inputs of
+ * different lengths compare in constant time too.
+ */
+export function tokensEqual(a, b) {
+    return timingSafeEqual(createHash("sha256").update(a).digest(), createHash("sha256").update(b).digest());
+}
+/**
+ * Whether `headers` carry exactly `expected` in {@link WORKSPACE_TOKEN_HEADER}.
+ * A missing, repeated or empty header is rejected.
+ */
+export function hasWorkspaceToken(headers, expected) {
+    const value = headers[WORKSPACE_TOKEN_HEADER];
+    if (typeof value !== "string" || !value || !expected)
+        return false;
+    return tokensEqual(value, expected);
+}
+// ---------------------------------------------------------------------------
+// Edge → VM: state snapshot
+// ---------------------------------------------------------------------------
+export const workspaceSyncCredentialSchema = z.object({
+    token: z.string().min(1).max(8192),
+    /** Epoch milliseconds after which the server rejects the token. */
+    expiresAt: z.number().int().positive(),
+});
+/**
+ * Everything the VM needs from the edge, sent whole every time
+ * (`PUT` {@link WORKSPACE_STATE_PATH}). The edge sends it on every change and
+ * on a timer, so a VM that restarted inside the same session is back in sync
+ * within one interval without the edge noticing the restart. The VM replaces
+ * its copy; it never merges.
+ */
+export const workspaceStateSchema = z.object({
+    /** The edge holds the branch lock; without it the VM must not commit. */
+    lockHeld: z.boolean(),
+    /** A user was recently active in the editor (feeds the VM's busy policy). */
+    userActive: z.boolean(),
+    /** The edge is shutting down; going quiet after this is not a failure. */
+    draining: z.boolean(),
+    /**
+     * Absent until the edge has minted one. A snapshot without one leaves the
+     * VM's last credential in place; the server enforces its expiry.
+     */
+    credential: workspaceSyncCredentialSchema.optional(),
+});
+/**
+ * The VM's answer to a state snapshot. `bootId` is random per VM process, for
+ * logs and metrics; the edge does not branch on it.
+ */
+export const workspaceStatusSchema = z.object({
+    bootId: z.string().min(1),
+    devServer: z.enum(["booting", "ready", "failed"]),
+    /** Local changes not yet committed to DBFS. */
+    unsynced: z.boolean(),
+    dbfsHash: z.string().optional(),
+});
+// ---------------------------------------------------------------------------
+// Edge → VM: commit
+// ---------------------------------------------------------------------------
+/**
+ * The response body of `POST` {@link WORKSPACE_COMMIT_PATH}, always with
+ * status 200 so the edge reads one shape. `not_ready` means the workspace is
+ * not open or has no state snapshot yet; the edge reports it like an error.
+ */
+export const workspaceCommitResultSchema = z.discriminatedUnion("outcome", [
+    z.object({
+        outcome: z.literal("committed"),
+        dbfsHash: z.string().optional(),
+    }),
+    z.object({
+        outcome: z.literal("not_ready"),
+        reason: z.string().max(512),
+    }),
+    z.object({
+        outcome: z.literal("error"),
+        error: z.string().max(512),
+    }),
+]);
+// ---------------------------------------------------------------------------
+// AI service → edge: session endpoint
+// ---------------------------------------------------------------------------
+const endpointUrl = z
+    .string()
+    .url()
+    .refine((value) => /^https?:\/\//.test(value), "must be http(s)");
+/**
+ * Where the VM's ingress is reachable and how the edge authenticates to it
+ * (`PUT` {@link WORKSPACE_ENDPOINT_PATH}). Each `workspace.open` that returns
+ * a new URL sends a new one; the edge then pushes its state there.
+ *
+ * - `sigv4`: an AgentCore session endpoint. The edge signs each request and
+ *   WebSocket handshake for `bedrock-agentcore` in `region`.
+ * - `none`: a local builder runtime reached directly, for development.
+ */
+export const workspaceEndpointSchema = z.discriminatedUnion("auth", [
+    z.object({
+        auth: z.literal("sigv4"),
+        url: endpointUrl,
+        region: z.string().min(1).max(64),
+        sessionKey: z.string().min(1).max(1024),
+    }),
+    z.object({
+        auth: z.literal("none"),
+        url: endpointUrl,
+        sessionKey: z.string().min(1).max(1024),
+    }),
+]);
+// ---------------------------------------------------------------------------
+// Edge health, read by the AI service
+// ---------------------------------------------------------------------------
+/**
+ * The edge's view of the VM, reported in its health response as
+ * `workspace.ingress`. The AI service reopens the workspace when it stays
+ * `unreachable`.
+ *
+ * - `waiting`: no endpoint yet.
+ * - `reachable`: the last state push succeeded and the VM reports a booting
+ *   or ready workspace host.
+ * - `unreachable`: pushes to the current endpoint are failing, or the VM
+ *   answers them but reports its workspace host `failed` (it cannot serve
+ *   until the workspace is reopened).
+ * - `closed`: the edge is shutting down.
+ */
+export const workspaceIngressStateSchema = z.enum([
+    "waiting",
+    "reachable",
+    "unreachable",
+    "closed",
+]);
+//# sourceMappingURL=control.js.map

package/dist/control.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"control.js","sourceRoot":"","sources":["../src/control.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AACH,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAEtE,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,8EAA8E;AAC9E,2BAA2B;AAC3B,8EAA8E;AAE9E;;;GAGG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,IAAI,CAAC;AAE3C;;;;GAIG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG,iBAAiB,CAAC;AAE1D,wEAAwE;AACxE,MAAM,CAAC,MAAM,oBAAoB,GAAG,sBAAsB,CAAC;AAC3D,gFAAgF;AAChF,MAAM,CAAC,MAAM,qBAAqB,GAAG,uBAAuB,CAAC;AAC7D,kEAAkE;AAClE,MAAM,CAAC,MAAM,uBAAuB,GAAG,yBAAyB,CAAC;AACjE,kEAAkE;AAClE,MAAM,CAAC,MAAM,uBAAuB,GAAG,0BAA0B,CAAC;AAElE;;;GAGG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,sBAAsB,CAAC;AAE7D;;;;GAIG;AACH,MAAM,CAAC,MAAM,8BAA8B,GAAG,oBAAoB,CAAC;AAEnE;;;;GAIG;AACH,MAAM,CAAC,MAAM,uCAAuC,GAClD,6BAA6B,CAAC;AAEhC,yEAAyE;AACzE,MAAM,UAAU,sBAAsB,CAAC,QAAgB;IACrD,OAAO,QAAQ,CAAC,UAAU,CAAC,wBAAwB,CAAC,CAAC;AACvD,CAAC;AAED,8EAA8E;AAC9E,QAAQ;AACR,8EAA8E;AAE9E;;;;GAIG;AACH,MAAM,UAAU,oBAAoB,CAClC,MAAc,EACd,UAAkB;IAElB,IAAI,CAAC,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;IACvE,IAAI,CAAC,UAAU;QACb,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;IAChE,OAAO,UAAU,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACvE,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,4BAA4B,CAC1C,MAAc,EACd,UAAkB;IAElB,IAAI,CAAC,MAAM;QACT,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;IACpE,IAAI,CAAC,UAAU;QACb,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;IACxE,OAAO,UAAU,CAAC,QAAQ,EAAE,MAAM,CAAC;SAChC,MAAM,CAAC,uBAAuB,UAAU,EAAE,CAAC;SAC3C,MAAM,CAAC,KAAK,CAAC,CAAC;AACnB,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,0BAA0B,CACxC,GAAW,EACX,MAAc;IAEd,IAAI,MAAW,CAAC;IAChB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;IACxB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,CACL,0BAA0B,CAAC,IAAI,CAAC,MAAM,CAAC;QACvC,MAAM,CAAC,QAAQ,KAAK,QAAQ;QAC5B,MAAM,CAAC,IAAI,KAAK,EAAE;QAClB,MAAM,CAAC,QAAQ,KAAK,EAAE;QACtB,MAAM,CAAC,QAAQ,KAAK,EAAE;QACtB,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,8BAA8B,MAAM,SAAS,CAAC,CACxE,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,WAAW,CAAC,CAAS,EAAE,CAAS;IAC9C,OAAO,eAAe,CACpB,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,EACvC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,CACxC,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,iBAAiB,CAC/B,OAAsD,EACtD,QAAgB;IAEhB,MAAM,KAAK,GAAG,OAAO,CAAC,sBAAsB,CAAC,CAAC;IAC9C,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI,CAAC,QAAQ;QAAE,OAAO,KAAK,CAAC;IACnE,OAAO,WAAW,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;AACtC,CAAC;AAED,8EAA8E;AAC9E,4BAA4B;AAC5B,8EAA8E;AAE9E,MAAM,CAAC,MAAM,6BAA6B,GAAG,CAAC,CAAC,MAAM,CAAC;IACpD,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC;IAClC,mEAAmE;IACnE,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;CACvC,CAAC,CAAC;AAKH;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3C,yEAAyE;IACzE,QAAQ,EAAE,CAAC,CAAC,OAAO,EAAE;IACrB,6EAA6E;IAC7E,UAAU,EAAE,CAAC,CAAC,OAAO,EAAE;IACvB,0EAA0E;IAC1E,QAAQ,EAAE,CAAC,CAAC,OAAO,EAAE;IACrB;;;OAGG;IACH,UAAU,EAAE,6BAA6B,CAAC,QAAQ,EAAE;CACrD,CAAC,CAAC;AAGH;;;GAGG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC5C,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACzB,SAAS,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC;IACjD,+CAA+C;IAC/C,QAAQ,EAAE,CAAC,CAAC,OAAO,EAAE;IACrB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAChC,CAAC,CAAC;AAGH,8EAA8E;AAC9E,oBAAoB;AACpB,8EAA8E;AAE9E;;;;GAIG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAG,CAAC,CAAC,kBAAkB,CAAC,SAAS,EAAE;IACzE,CAAC,CAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC;QAC/B,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;KAChC,CAAC;IACF,CAAC,CAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC;QAC/B,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC;KAC5B,CAAC;IACF,CAAC,CAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC;QAC3B,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC;KAC3B,CAAC;CACH,CAAC,CAAC;AAGH,8EAA8E;AAC9E,sCAAsC;AACtC,8EAA8E;AAE9E,MAAM,WAAW,GAAG,CAAC;KAClB,MAAM,EAAE;KACR,GAAG,EAAE;KACL,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,iBAAiB,CAAC,CAAC;AAEpE;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,CAAC,kBAAkB,CAAC,MAAM,EAAE;IAClE,CAAC,CAAC,MAAM,CAAC;QACP,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC;QACxB,GAAG,EAAE,WAAW;QAChB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;QACjC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC;KACxC,CAAC;IACF,CAAC,CAAC,MAAM,CAAC;QACP,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC;QACvB,GAAG,EAAE,WAAW;QAChB,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC;KACxC,CAAC;CACH,CAAC,CAAC;AAGH,8EAA8E;AAC9E,sCAAsC;AACtC,8EAA8E;AAE9E;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAG,CAAC,CAAC,IAAI,CAAC;IAChD,SAAS;IACT,WAAW;IACX,aAAa;IACb,QAAQ;CACT,CAAC,CAAC"}

package/dist/dbfs-transport.d.ts

@@ -0,0 +1,52 @@
+import type { ApplicationHashChangeSource, DirectoryEntry } from "@superblocksteam/shared";
+import type { DraftJournalBlobStore } from "./session-draft-journal-store.js";
+import type { PutManyItems } from "./snapshot/upload-snapshot.js";
+export interface SetHashRequest {
+    hash: string;
+    /**
+     * The hash this commit was made on top of: the last hash this workspace
+     * committed or loaded. Undefined when the workspace has no stored hash.
+     */
+    baseHash: string | undefined;
+    source: ApplicationHashChangeSource;
+}
+export interface SetHashResult {
+    hash: string;
+    commitId?: string;
+}
+/** A file to read out of a stored tree. */
+export interface DbfsFileRef {
+    /** Slash-separated path from the tree root. */
+    path: string;
+    /** Content hash, checked against what comes back. */
+    hash: string;
+}
+/**
+ * Everything the sync engine needs from DBFS and the application's hash
+ * pointer, for one application branch. The transport is the only part of the
+ * engine that talks to the server, so tests swap it for `FakeDbfs`.
+ */
+export interface DbfsTransport {
+    /** Rejects when the server would refuse any of these directory listings. */
+    validateMany(items: PutManyItems): Promise<void>;
+    /** Stores blobs and listings; returns their hashes in request order. */
+    putMany(items: PutManyItems): Promise<string[]>;
+    /** One directory listing by hash. */
+    getDirectory(hash: string): Promise<DirectoryEntry[]>;
+    /** File contents by path inside the tree `rootHash`, in request order. */
+    getContents(rootHash: string, files: DbfsFileRef[]): Promise<Buffer[]>;
+    /** One blob by content hash. */
+    getBlob(hash: string): Promise<Buffer>;
+    /** The branch's current working-copy hash. */
+    getServerHash(): Promise<string>;
+    /** Moves the branch's working-copy hash. */
+    setHash(request: SetHashRequest): Promise<SetHashResult>;
+    /** Reports whether the workspace has unaccepted drafts. */
+    setDraftState(hasDraft: boolean): Promise<void>;
+}
+/**
+ * Stores native draft journal contents as DBFS blobs through a transport, for
+ * `SessionDraftJournalStore`.
+ */
+export declare function journalBlobStoreFromTransport(transport: Pick<DbfsTransport, "putMany" | "getBlob">): DraftJournalBlobStore;
+//# sourceMappingURL=dbfs-transport.d.ts.map

package/dist/dbfs-transport.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"dbfs-transport.d.ts","sourceRoot":"","sources":["../src/dbfs-transport.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,2BAA2B,EAC3B,cAAc,EACf,MAAM,yBAAyB,CAAC;AAEjC,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,kCAAkC,CAAC;AAC9E,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,+BAA+B,CAAC;AAElE,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb;;;OAGG;IACH,QAAQ,EAAE,MAAM,GAAG,SAAS,CAAC;IAC7B,MAAM,EAAE,2BAA2B,CAAC;CACrC;AAED,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,2CAA2C;AAC3C,MAAM,WAAW,WAAW;IAC1B,+CAA+C;IAC/C,IAAI,EAAE,MAAM,CAAC;IACb,qDAAqD;IACrD,IAAI,EAAE,MAAM,CAAC;CACd;AAED;;;;GAIG;AACH,MAAM,WAAW,aAAa;IAC5B,4EAA4E;IAC5E,YAAY,CAAC,KAAK,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACjD,wEAAwE;IACxE,OAAO,CAAC,KAAK,EAAE,YAAY,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IAChD,qCAAqC;IACrC,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,EAAE,CAAC,CAAC;IACtD,0EAA0E;IAC1E,WAAW,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,WAAW,EAAE,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IACvE,gCAAgC;IAChC,OAAO,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IACvC,8CAA8C;IAC9C,aAAa,IAAI,OAAO,CAAC,MAAM,CAAC,CAAC;IACjC,4CAA4C;IAC5C,OAAO,CAAC,OAAO,EAAE,cAAc,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC;IACzD,2DAA2D;IAC3D,aAAa,CAAC,QAAQ,EAAE,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACjD;AAID;;;GAGG;AACH,wBAAgB,6BAA6B,CAC3C,SAAS,EAAE,IAAI,CAAC,aAAa,EAAE,SAAS,GAAG,SAAS,CAAC,GACpD,qBAAqB,CAkBvB"}

package/dist/dbfs-transport.js

@@ -0,0 +1,21 @@
+const BLOB_BATCH = 64;
+/**
+ * Stores native draft journal contents as DBFS blobs through a transport, for
+ * `SessionDraftJournalStore`.
+ */
+export function journalBlobStoreFromTransport(transport) {
+    return {
+        async put(contents) {
+            const hashes = [];
+            for (let idx = 0; idx < contents.length; idx += BLOB_BATCH) {
+                hashes.push(...(await transport.putMany(contents.slice(idx, idx + BLOB_BATCH).map((bytes) => ({
+                    type: "fileContents",
+                    contents: bytes.toString("base64"),
+                })))));
+            }
+            return hashes;
+        },
+        get: (hash) => transport.getBlob(hash),
+    };
+}
+//# sourceMappingURL=dbfs-transport.js.map

package/dist/dbfs-transport.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dbfs-transport.js","sourceRoot":"","sources":["../src/dbfs-transport.ts"],"names":[],"mappings":"AAuDA,MAAM,UAAU,GAAG,EAAE,CAAC;AAEtB;;;GAGG;AACH,MAAM,UAAU,6BAA6B,CAC3C,SAAqD;IAErD,OAAO;QACL,KAAK,CAAC,GAAG,CAAC,QAAQ;YAChB,MAAM,MAAM,GAAa,EAAE,CAAC;YAC5B,KAAK,IAAI,GAAG,GAAG,CAAC,EAAE,GAAG,GAAG,QAAQ,CAAC,MAAM,EAAE,GAAG,IAAI,UAAU,EAAE,CAAC;gBAC3D,MAAM,CAAC,IAAI,CACT,GAAG,CAAC,MAAM,SAAS,CAAC,OAAO,CACzB,QAAQ,CAAC,KAAK,CAAC,GAAG,EAAE,GAAG,GAAG,UAAU,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;oBACpD,IAAI,EAAE,cAAuB;oBAC7B,QAAQ,EAAE,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC;iBACnC,CAAC,CAAC,CACJ,CAAC,CACH,CAAC;YACJ,CAAC;YACD,OAAO,MAAM,CAAC;QAChB,CAAC;QACD,GAAG,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC;KACvC,CAAC;AACJ,CAAC"}

package/dist/download.d.ts

@@ -0,0 +1,54 @@
+import type { DraftRestoreOutcome, DraftRestorePhase } from "./draft-state-report-metrics.js";
+import type { HashCache } from "./hash-cache.js";
+import type { StdISocketRPCClient } from "./rpc-client.js";
+import type { DirectoryState } from "./snapshot/types.js";
+type DirectoryHashResult = {
+    hash: string;
+    latestNonDraftCommitId?: string;
+};
+export declare function downloadApplicationDirectory({ rpcClient, applicationId, branch, localDirectoryPath, hashCache, }: {
+    rpcClient: StdISocketRPCClient;
+    applicationId: string;
+    branch: string | undefined;
+    localDirectoryPath: string;
+    hashCache: HashCache;
+}): Promise<{
+    directoryHash: string;
+    latestNonDraftCommitId?: string;
+}>;
+/**
+ * Incrementally download the directory contents, skipping any files that are already
+ * present locally, based on the old local directory state.
+ * Returns the new local directory state.
+ *
+ * @param rpcClient - The RPC client to use to get the directory contents from the server.
+ * @param directoryHash - The hash of the directory to download.
+ * @param oldLocalDirState - The old local directory state.
+ * @param localDirectoryPath - The path to the local directory.
+ * @returns The new local directory state.
+ */
+export declare function doDownloadApplicationDirectory(rpcClient: StdISocketRPCClient, directoryHash: string, oldLocalDirState: DirectoryState | undefined, localDirectoryPath: string): Promise<DirectoryState>;
+export type DraftRestoreResult = {
+    outcome: Exclude<DraftRestoreOutcome, "error">;
+    edits: number;
+    additions: number;
+    deletions: number;
+};
+export declare class DraftRestoreError extends Error {
+    readonly phase: DraftRestorePhase;
+    constructor(phase: DraftRestorePhase, cause: unknown);
+}
+/**
+ * Rebuilds the `.sbswap` markers that a replaced pod lost: every file that
+ * differs from the last checkpoint becomes a draft, so Accept and Reject work.
+ * The markers do not change the upload hash, because snapshots skip them.
+ */
+export declare function restoreDraftMarkersFromCheckpoint({ rpcClient, applicationId, branch, appRootDirPath, }: {
+    rpcClient: StdISocketRPCClient;
+    applicationId: string;
+    branch: string | undefined;
+    appRootDirPath: string;
+}): Promise<DraftRestoreResult>;
+export declare function getDraftOrLiveDirectoryHash(rpcClient: StdISocketRPCClient, applicationId: string, branch: string | undefined): Promise<DirectoryHashResult>;
+export {};
+//# sourceMappingURL=download.d.ts.map

package/dist/download.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"download.d.ts","sourceRoot":"","sources":["../src/download.ts"],"names":[],"mappings":"AAkBA,OAAO,KAAK,EACV,mBAAmB,EACnB,iBAAiB,EAClB,MAAM,iCAAiC,CAAC;AACzC,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAGjD,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAC;AAC3D,OAAO,KAAK,EAGV,cAAc,EACf,MAAM,qBAAqB,CAAC;AAK7B,KAAK,mBAAmB,GAAG;IACzB,IAAI,EAAE,MAAM,CAAC;IAGb,sBAAsB,CAAC,EAAE,MAAM,CAAC;CACjC,CAAC;AA0BF,wBAAsB,4BAA4B,CAAC,EACjD,SAAS,EACT,aAAa,EACb,MAAM,EACN,kBAAkB,EAClB,SAAS,GACV,EAAE;IACD,SAAS,EAAE,mBAAmB,CAAC;IAC/B,aAAa,EAAE,MAAM,CAAC;IACtB,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC;IAC3B,kBAAkB,EAAE,MAAM,CAAC;IAC3B,SAAS,EAAE,SAAS,CAAC;CACtB,GAAG,OAAO,CAAC;IAAE,aAAa,EAAE,MAAM,CAAC;IAAC,sBAAsB,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,CAqBtE;AAED;;;;;;;;;;GAUG;AACH,wBAAsB,8BAA8B,CAClD,SAAS,EAAE,mBAAmB,EAC9B,aAAa,EAAE,MAAM,EACrB,gBAAgB,EAAE,cAAc,GAAG,SAAS,EAC5C,kBAAkB,EAAE,MAAM,GACzB,OAAO,CAAC,cAAc,CAAC,CAoMzB;AAQD,MAAM,MAAM,kBAAkB,GAAG;IAC/B,OAAO,EAAE,OAAO,CAAC,mBAAmB,EAAE,OAAO,CAAC,CAAC;IAC/C,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACnB,CAAC;AAEF,qBAAa,iBAAkB,SAAQ,KAAK;IAExC,QAAQ,CAAC,KAAK,EAAE,iBAAiB;IADnC,YACW,KAAK,EAAE,iBAAiB,EACjC,KAAK,EAAE,OAAO,EAGf;CACF;AAaD;;;;GAIG;AACH,wBAAsB,iCAAiC,CAAC,EACtD,SAAS,EACT,aAAa,EACb,MAAM,EACN,cAAc,GACf,EAAE;IACD,SAAS,EAAE,mBAAmB,CAAC;IAC/B,aAAa,EAAE,MAAM,CAAC;IACtB,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC;IAC3B,cAAc,EAAE,MAAM,CAAC;CACxB,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAoG9B;AAgND,wBAAsB,2BAA2B,CAC/C,SAAS,EAAE,mBAAmB,EAC9B,aAAa,EAAE,MAAM,EACrB,MAAM,EAAE,MAAM,GAAG,SAAS,GACzB,OAAO,CAAC,mBAAmB,CAAC,CAqC9B"}