@superblocksteam/workspace-sync 2.0.178-next.3 → 2.0.179-next.1

package/README.md

@@ -19,9 +19,16 @@ host binds one, messages go to the console.
   `<root>/../.superblocks-native-drafts/<sha256(root)>.json`. This is the
   live-edit layout.
 - `SessionDraftJournalStore` writes a small pointer record to a session state
-  directory and keeps file contents as DBFS blobs referenced by content hash.
-  A fresh process over the same directory can still reconcile, accept or
-  discard a killed session's drafts.
+  directory and keeps file contents in a `DraftJournalBlobStore` referenced by
+  content hash. A fresh process over the same directory can still reconcile,
+  accept or discard a killed session's drafts.
+- `createFileDraftJournalBlobStore` is the blob store the AgentCore microVM
+  uses: one file per `hashFileContents` hash in
+  `<stateDir>/journal-blobs/`. Blobs stay on local disk, not in DBFS,
+  because they hold pre-turn originals that are not in the branch's tree, and
+  the server refuses `applications:sync` token reads of hashes outside that
+  tree. Reads verify each blob against its hash. When the pointer is replaced
+  or cleared, blobs it no longer references are deleted.
 
 ## Sync engine
 
@@ -32,9 +39,17 @@ session state directory is a cache, so the engine survives a kill at any step.
 - `interimFlush()` uploads blobs only and never moves the branch hash.
   `createFlushScheduler` runs it on the live-edit cadence (10s trailing, 30s
   cap).
-- `commit(source)` reconciles the draft journal, snapshots the tree, uploads
-  what DBFS lacks, asks the `BranchWriteGuard`, moves the branch hash, then
-  writes the state store, retires the journal and reports draft state.
+- `commit(source)` reconciles the draft journal, reports a drafted tree
+  (after asking the `BranchWriteGuard` and before the hash, so the server
+  files the turn as a draft), snapshots the tree, uploads what DBFS lacks,
+  asks the guard again, moves the branch hash, then writes the state store and
+  retires the journal. Only a `checkpoint` commit (accept or reject) clears
+  the server's draft flag, and only after its hash moves, so a failed accept
+  or reject leaves the server in draft. Every draft-state report asks the
+  guard first. An accept, reject or clear passes its marker step as
+  `settle`, which runs inside the commit queue after the draft journal is
+  dropped, so no other commit interleaves. Draft checks fail closed: only a
+  missing `.superblocks/drafts` directory counts as no drafts.
 - `rehydrate()` compares the server hash, the stored hash and the local tree
   on boot and returns `fresh`, `resumed`, `replayed` or `reloaded`. A
   `reloaded` tree keeps the local diff under `<stateDir>/orphaned/`.

package/dist/atomic-write.d.ts

@@ -3,5 +3,8 @@
  * never a torn write: write a temporary sibling, fsync it, rename it over the
  * target, then fsync the directory so the rename survives a crash.
  */
-export declare function writeFileAtomic(file: string, contents: string | Buffer, mode?: number): Promise<void>;
+export declare function writeFileAtomic(file: string, contents: string | Buffer, options?: {
+    mode?: number;
+    preserveMode?: number;
+}): Promise<void>;
 //# sourceMappingURL=atomic-write.d.ts.map

package/dist/atomic-write.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"atomic-write.d.ts","sourceRoot":"","sources":["../src/atomic-write.ts"],"names":[],"mappings":"AAIA;;;;GAIG;AACH,wBAAsB,eAAe,CACnC,IAAI,EAAE,MAAM,EACZ,QAAQ,EAAE,MAAM,GAAG,MAAM,EACzB,IAAI,SAAQ,GACX,OAAO,CAAC,IAAI,CAAC,CAoBf"}
+{"version":3,"file":"atomic-write.d.ts","sourceRoot":"","sources":["../src/atomic-write.ts"],"names":[],"mappings":"AAIA;;;;GAIG;AACH,wBAAsB,eAAe,CACnC,IAAI,EAAE,MAAM,EACZ,QAAQ,EAAE,MAAM,GAAG,MAAM,EACzB,OAAO,GAAE;IAAE,IAAI,CAAC,EAAE,MAAM,CAAC;IAAC,YAAY,CAAC,EAAE,MAAM,CAAA;CAAO,GACrD,OAAO,CAAC,IAAI,CAAC,CA0Bf"}

package/dist/atomic-write.js

@@ -6,17 +6,19 @@ import path from "node:path";
  * never a torn write: write a temporary sibling, fsync it, rename it over the
  * target, then fsync the directory so the rename survives a crash.
  */
-export async function writeFileAtomic(file, contents, mode = 0o600) {
-    const temporary = `${file}.${randomUUID()}.tmp`;
-    const handle = await fs.open(temporary, "wx", mode);
-    try {
-        await handle.writeFile(contents);
-        await handle.sync();
-    }
-    finally {
-        await handle.close();
-    }
+export async function writeFileAtomic(file, contents, options = {}) {
+    const temporary = path.join(path.dirname(file), `.${randomUUID()}.tmp`);
+    const handle = await fs.open(temporary, "wx", options.preserveMode ?? options.mode ?? 0o600);
     try {
+        try {
+            await handle.writeFile(contents);
+            if (options.preserveMode !== undefined)
+                await handle.chmod(options.preserveMode);
+            await handle.sync();
+        }
+        finally {
+            await handle.close();
+        }
         await fs.rename(temporary, file);
         const directory = await fs.open(path.dirname(file), "r");
         try {

package/dist/atomic-write.js.map

@@ -1 +1 @@
-{"version":3,"file":"atomic-write.js","sourceRoot":"","sources":["../src/atomic-write.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,KAAK,EAAE,MAAM,kBAAkB,CAAC;AACvC,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,IAAY,EACZ,QAAyB,EACzB,IAAI,GAAG,KAAK;IAEZ,MAAM,SAAS,GAAG,GAAG,IAAI,IAAI,UAAU,EAAE,MAAM,CAAC;IAChD,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;IACpD,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;QACjC,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;IACtB,CAAC;YAAS,CAAC;QACT,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;IACvB,CAAC;IACD,IAAI,CAAC;QACH,MAAM,EAAE,CAAC,MAAM,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;QACjC,MAAM,SAAS,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,GAAG,CAAC,CAAC;QACzD,IAAI,CAAC;YACH,MAAM,SAAS,CAAC,IAAI,EAAE,CAAC;QACzB,CAAC;gBAAS,CAAC;YACT,MAAM,SAAS,CAAC,KAAK,EAAE,CAAC;QAC1B,CAAC;IACH,CAAC;YAAS,CAAC;QACT,MAAM,EAAE,CAAC,EAAE,CAAC,SAAS,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAC1C,CAAC;AACH,CAAC"}
+{"version":3,"file":"atomic-write.js","sourceRoot":"","sources":["../src/atomic-write.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,KAAK,EAAE,MAAM,kBAAkB,CAAC;AACvC,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,IAAY,EACZ,QAAyB,EACzB,OAAO,GAA6C,EAAE;IAEtD,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,UAAU,EAAE,MAAM,CAAC,CAAC;IACxE,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,IAAI,CAC1B,SAAS,EACT,IAAI,EACJ,OAAO,CAAC,YAAY,IAAI,OAAO,CAAC,IAAI,IAAI,KAAK,CAC9C,CAAC;IACF,IAAI,CAAC;QACH,IAAI,CAAC;YACH,MAAM,MAAM,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;YACjC,IAAI,OAAO,CAAC,YAAY,KAAK,SAAS;gBACpC,MAAM,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;YAC3C,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;QACtB,CAAC;gBAAS,CAAC;YACT,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;QACvB,CAAC;QACD,MAAM,EAAE,CAAC,MAAM,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;QACjC,MAAM,SAAS,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,GAAG,CAAC,CAAC;QACzD,IAAI,CAAC;YACH,MAAM,SAAS,CAAC,IAAI,EAAE,CAAC;QACzB,CAAC;gBAAS,CAAC;YACT,MAAM,SAAS,CAAC,KAAK,EAAE,CAAC;QAC1B,CAAC;IACH,CAAC;YAAS,CAAC;QACT,MAAM,EAAE,CAAC,EAAE,CAAC,SAAS,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAC1C,CAAC;AACH,CAAC"}

package/dist/control.d.ts

@@ -16,8 +16,6 @@ export declare const WORKSPACE_STATE_PATH = "/_sb_workspace/state";
 export declare const WORKSPACE_COMMIT_PATH = "/_sb_workspace/commit";
 /** Edge, AI service → edge: the VM's current session endpoint. */
 export declare const WORKSPACE_ENDPOINT_PATH = "/_sb_workspace/endpoint";
-/** Edge, VM → edge: read-only package registry proxy (prefix). */
-export declare const WORKSPACE_REGISTRY_PATH = "/_sb_workspace/registry/";
 /**
  * Carries the workspace token on every request between the parties. Not
  * `Authorization`: SigV4 owns that header on the edge → VM hop.
@@ -56,6 +54,13 @@ export declare function deriveWorkspaceEndpointToken(secret: string, sessionKey:
  * `runtime.bedrock-agentcore.<region>.on.aws`.
  */
 export declare function isAgentCoreSessionEndpoint(url: string, region: string): boolean;
+/**
+ * The URL that reaches `port` in the VM. AgentCore returns the session
+ * endpoint without a port, and that bare host answers AccessDenied; each
+ * allowed port is addressed as `<port>--<host>`. A URL that already names a
+ * port is kept as it is.
+ */
+export declare function sessionEndpointForPort(sessionEndpointUrl: string, port: number): string;
 /**
  * Constant-time string comparison. Both sides are hashed first so inputs of
  * different lengths compare in constant time too.
@@ -186,8 +191,12 @@ export type WorkspaceCommitResult = z.infer<typeof workspaceCommitResultSchema>;
  * (`PUT` {@link WORKSPACE_ENDPOINT_PATH}). Each `workspace.open` that returns
  * a new URL sends a new one; the edge then pushes its state there.
  *
- * - `sigv4`: an AgentCore session endpoint. The edge signs each request and
- *   WebSocket handshake for `bedrock-agentcore` in `region`.
+ * - `sigv4`: an AgentCore session endpoint. Each request and WebSocket
+ *   handshake needs a SigV4 signature for `bedrock-agentcore` in `region`,
+ *   which only the Superblocks server can make: the edge asks `signer.url`
+ *   ({@link BUILDER_RUNTIME_SIGN_PATH}) for each one, presenting
+ *   `signer.grant`. The AI service sends the endpoint again with a fresh
+ *   grant before the old one expires.
  * - `none`: a local builder runtime reached directly, for development.
  */
 export declare const workspaceEndpointSchema: z.ZodDiscriminatedUnion<"auth", [z.ZodObject<{
@@ -195,16 +204,34 @@ export declare const workspaceEndpointSchema: z.ZodDiscriminatedUnion<"auth", [z
     url: z.ZodEffects<z.ZodString, string, string>;
     region: z.ZodString;
     sessionKey: z.ZodString;
+    signer: z.ZodObject<{
+        url: z.ZodString;
+        grant: z.ZodString;
+    }, "strip", z.ZodTypeAny, {
+        url: string;
+        grant: string;
+    }, {
+        url: string;
+        grant: string;
+    }>;
 }, "strip", z.ZodTypeAny, {
     auth: "sigv4";
     url: string;
     region: string;
     sessionKey: string;
+    signer: {
+        url: string;
+        grant: string;
+    };
 }, {
     auth: "sigv4";
     url: string;
     region: string;
     sessionKey: string;
+    signer: {
+        url: string;
+        grant: string;
+    };
 }>, z.ZodObject<{
     auth: z.ZodLiteral<"none">;
     url: z.ZodEffects<z.ZodString, string, string>;
@@ -219,6 +246,125 @@ export declare const workspaceEndpointSchema: z.ZodDiscriminatedUnion<"auth", [z
     sessionKey: string;
 }>]>;
 export type WorkspaceEndpoint = z.infer<typeof workspaceEndpointSchema>;
+/**
+ * The server is the only caller of the AgentCore builder runtime. The AI
+ * service trades the user's token for a builder-runtime token
+ * ({@link BUILDER_RUNTIME_TOKEN_PATH}), which names the app, branch and chat
+ * the server checked, and sends invocation payloads to
+ * {@link BUILDER_RUNTIME_INVOCATIONS_PATH}. The server picks the runtime and
+ * the runtime session itself; the response is the runtime's event stream.
+ */
+export declare const BUILDER_RUNTIME_TOKEN_PATH = "/api/v1/token/builder-runtime";
+export declare const BUILDER_RUNTIME_INVOCATIONS_PATH = "/api/v1/ai/builder-runtime/invocations";
+/**
+ * On an invocation request: which of the token's runtime sessions it runs in.
+ * `workspace` is the branch's workspace session (opens, and turns whose tools
+ * run in the VM); `chat` is the chat's own session. The server maps either to
+ * a session it derived, so the pod cannot name any other.
+ */
+export declare const BUILDER_RUNTIME_SESSION_HEADER = "x-sb-builder-runtime-session";
+export declare const builderRuntimeSessionSchema: z.ZodEnum<["workspace", "chat"]>;
+export type BuilderRuntimeSession = z.infer<typeof builderRuntimeSessionSchema>;
+/**
+ * Signs one request to a session endpoint (`POST`, body
+ * {@link workspaceSignRequestSchema}, `Authorization: Bearer <grant>`). The
+ * grant names the one session endpoint origin it may sign for.
+ */
+export declare const BUILDER_RUNTIME_SIGN_PATH = "/api/v1/ai/builder-runtime/sign";
+/**
+ * Renews a sign grant (`POST`, body {@link builderRuntimeSignGrantSchema},
+ * builder-runtime token as bearer) for the same session endpoint.
+ */
+export declare const BUILDER_RUNTIME_SIGN_GRANT_PATH = "/api/v1/ai/builder-runtime/sign-grant";
+/**
+ * On a `workspace.open` response: where the VM ingress is reachable, as JSON
+ * {@link builderRuntimeEndpointHeaderSchema}. Absent when AgentCore returned no
+ * session endpoint.
+ */
+export declare const BUILDER_RUNTIME_ENDPOINT_HEADER = "x-sb-workspace-endpoint";
+/** On a `workspace.open` response: the sign grant for that endpoint. */
+export declare const BUILDER_RUNTIME_SIGN_GRANT_HEADER = "x-sb-workspace-sign-grant";
+export declare const builderRuntimeEndpointHeaderSchema: z.ZodObject<{
+    url: z.ZodEffects<z.ZodString, string, string>;
+    region: z.ZodString;
+}, "strip", z.ZodTypeAny, {
+    url: string;
+    region: string;
+}, {
+    url: string;
+    region: string;
+}>;
+export type BuilderRuntimeEndpointHeader = z.infer<typeof builderRuntimeEndpointHeaderSchema>;
+/** A sign grant, as sent to and returned by the renew route. */
+export declare const builderRuntimeSignGrantSchema: z.ZodObject<{
+    grant: z.ZodString;
+}, "strip", z.ZodTypeAny, {
+    grant: string;
+}, {
+    grant: string;
+}>;
+/**
+ * One request the edge wants signed. `headers` are the lowercased headers the
+ * signer covers (`host` and `x-amz-*`); the body is never sent because the
+ * signature uses an unsigned payload. The server signs only a URL on the
+ * grant's session endpoint, so the schema bounds sizes and leaves the rest to
+ * that check.
+ */
+export declare const workspaceSignRequestSchema: z.ZodObject<{
+    method: z.ZodEnum<["DELETE", "GET", "HEAD", "OPTIONS", "PATCH", "POST", "PUT"]>;
+    url: z.ZodString;
+    headers: z.ZodRecord<z.ZodString, z.ZodString>;
+}, "strip", z.ZodTypeAny, {
+    method: "DELETE" | "GET" | "HEAD" | "OPTIONS" | "PATCH" | "POST" | "PUT";
+    url: string;
+    headers: Record<string, string>;
+}, {
+    method: "DELETE" | "GET" | "HEAD" | "OPTIONS" | "PATCH" | "POST" | "PUT";
+    url: string;
+    headers: Record<string, string>;
+}>;
+export type WorkspaceSignRequest = z.infer<typeof workspaceSignRequestSchema>;
+/** The signed header set: the request's headers plus the SigV4 headers. */
+export declare const workspaceSignResponseSchema: z.ZodObject<{
+    headers: z.ZodRecord<z.ZodString, z.ZodString>;
+}, "strip", z.ZodTypeAny, {
+    headers: Record<string, string>;
+}, {
+    headers: Record<string, string>;
+}>;
+export type WorkspaceSignResponse = z.infer<typeof workspaceSignResponseSchema>;
+/**
+ * The audience of the statement the server signs for each invocation. The VM
+ * runs an invocation only when the statement verifies against the server's
+ * keys, names the runtime session AgentCore delivered it on, and hashes to
+ * the payload it carries.
+ */
+export declare const BUILDER_RUNTIME_INVOCATION_AUDIENCE = "https://superblocks-builder-runtime-invocation";
+/** The body the server sends to AgentCore: the statement and the payload. */
+export declare const builderRuntimeInvocationEnvelopeSchema: z.ZodObject<{
+    authorization: z.ZodString;
+    payload: z.ZodString;
+}, "strict", z.ZodTypeAny, {
+    authorization: string;
+    payload: string;
+}, {
+    authorization: string;
+    payload: string;
+}>;
+export type BuilderRuntimeInvocationEnvelope = z.infer<typeof builderRuntimeInvocationEnvelopeSchema>;
+/** The statement's own claims, beside the standard `iss`, `aud` and `exp`. */
+export declare const builderRuntimeInvocationClaimsSchema: z.ZodObject<{
+    rsid: z.ZodString;
+    payload_sha256: z.ZodString;
+}, "strip", z.ZodTypeAny, {
+    rsid: string;
+    payload_sha256: string;
+}, {
+    rsid: string;
+    payload_sha256: string;
+}>;
+/** The hex SHA-256 of an invocation payload, as the statement names it. */
+export declare function invocationPayloadDigest(payload: string): string;
 /**
  * The edge's view of the VM, reported in its health response as
  * `workspace.ingress`. The AI service reopens the workspace when it stays

package/dist/control.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"control.d.ts","sourceRoot":"","sources":["../src/control.ts"],"names":[],"mappings":"AAmBA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAMxB;;;GAGG;AACH,eAAO,MAAM,sBAAsB,OAAO,CAAC;AAE3C;;;;GAIG;AACH,eAAO,MAAM,wBAAwB,oBAAoB,CAAC;AAE1D,wEAAwE;AACxE,eAAO,MAAM,oBAAoB,yBAAyB,CAAC;AAC3D,gFAAgF;AAChF,eAAO,MAAM,qBAAqB,0BAA0B,CAAC;AAC7D,kEAAkE;AAClE,eAAO,MAAM,uBAAuB,4BAA4B,CAAC;AACjE,kEAAkE;AAClE,eAAO,MAAM,uBAAuB,6BAA6B,CAAC;AAElE;;;GAGG;AACH,eAAO,MAAM,sBAAsB,yBAAyB,CAAC;AAE7D;;;;GAIG;AACH,eAAO,MAAM,8BAA8B,uBAAuB,CAAC;AAEnE;;;;GAIG;AACH,eAAO,MAAM,uCAAuC,gCACrB,CAAC;AAEhC,yEAAyE;AACzE,wBAAgB,sBAAsB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAEhE;AAMD;;;;GAIG;AACH,wBAAgB,oBAAoB,CAClC,MAAM,EAAE,MAAM,EACd,UAAU,EAAE,MAAM,GACjB,MAAM,CAKR;AAED;;;;;GAKG;AACH,wBAAgB,4BAA4B,CAC1C,MAAM,EAAE,MAAM,EACd,UAAU,EAAE,MAAM,GACjB,MAAM,CAQR;AAED;;;;GAIG;AACH,wBAAgB,0BAA0B,CACxC,GAAG,EAAE,MAAM,EACX,MAAM,EAAE,MAAM,GACb,OAAO,CAeT;AAED;;;GAGG;AACH,wBAAgB,WAAW,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,GAAG,OAAO,CAKzD;AAED;;;GAGG;AACH,wBAAgB,iBAAiB,CAC/B,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,SAAS,CAAC,EACtD,QAAQ,EAAE,MAAM,GACf,OAAO,CAIT;AAMD,eAAO,MAAM,6BAA6B;;IAExC,mEAAmE;;;;;;;;EAEnE,CAAC;AACH,MAAM,MAAM,uBAAuB,GAAG,CAAC,CAAC,KAAK,CAC3C,OAAO,6BAA6B,CACrC,CAAC;AAEF;;;;;;GAMG;AACH,eAAO,MAAM,oBAAoB;IAC/B,yEAAyE;;IAEzE,6EAA6E;;IAE7E,0EAA0E;;IAE1E;;;OAGG;;;QAxBH,mEAAmE;;;;;;;;;;;;;;;;;;;;;;;;;EA0BnE,CAAC;AACH,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAElE;;;GAGG;AACH,eAAO,MAAM,qBAAqB;;;IAGhC,+CAA+C;;;;;;;;;;;;;EAG/C,CAAC;AACH,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAMpE;;;;GAIG;AACH,eAAO,MAAM,2BAA2B;;;;;;;;;;;;;;;;;;;;;;;;;;;IAatC,CAAC;AACH,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,2BAA2B,CAAC,CAAC;AAWhF;;;;;;;;GAQG;AACH,eAAO,MAAM,uBAAuB;;;;;;;;;;;;;;;;;;;;;;;;;;;IAYlC,CAAC;AACH,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC;AAMxE;;;;;;;;;;;;GAYG;AACH,eAAO,MAAM,2BAA2B,8DAKtC,CAAC;AACH,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,2BAA2B,CAAC,CAAC"}
+{"version":3,"file":"control.d.ts","sourceRoot":"","sources":["../src/control.ts"],"names":[],"mappings":"AAsBA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAMxB;;;GAGG;AACH,eAAO,MAAM,sBAAsB,OAAO,CAAC;AAE3C;;;;GAIG;AACH,eAAO,MAAM,wBAAwB,oBAAoB,CAAC;AAE1D,wEAAwE;AACxE,eAAO,MAAM,oBAAoB,yBAAyB,CAAC;AAC3D,gFAAgF;AAChF,eAAO,MAAM,qBAAqB,0BAA0B,CAAC;AAC7D,kEAAkE;AAClE,eAAO,MAAM,uBAAuB,4BAA4B,CAAC;AAEjE;;;GAGG;AACH,eAAO,MAAM,sBAAsB,yBAAyB,CAAC;AAE7D;;;;GAIG;AACH,eAAO,MAAM,8BAA8B,uBAAuB,CAAC;AAEnE;;;;GAIG;AACH,eAAO,MAAM,uCAAuC,gCACrB,CAAC;AAEhC,yEAAyE;AACzE,wBAAgB,sBAAsB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAEhE;AAMD;;;;GAIG;AACH,wBAAgB,oBAAoB,CAClC,MAAM,EAAE,MAAM,EACd,UAAU,EAAE,MAAM,GACjB,MAAM,CAKR;AAED;;;;;GAKG;AACH,wBAAgB,4BAA4B,CAC1C,MAAM,EAAE,MAAM,EACd,UAAU,EAAE,MAAM,GACjB,MAAM,CAQR;AAED;;;;GAIG;AACH,wBAAgB,0BAA0B,CACxC,GAAG,EAAE,MAAM,EACX,MAAM,EAAE,MAAM,GACb,OAAO,CAeT;AAED;;;;;GAKG;AACH,wBAAgB,sBAAsB,CACpC,kBAAkB,EAAE,MAAM,EAC1B,IAAI,EAAE,MAAM,GACX,MAAM,CAIR;AAED;;;GAGG;AACH,wBAAgB,WAAW,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,GAAG,OAAO,CAKzD;AAED;;;GAGG;AACH,wBAAgB,iBAAiB,CAC/B,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,SAAS,CAAC,EACtD,QAAQ,EAAE,MAAM,GACf,OAAO,CAIT;AAMD,eAAO,MAAM,6BAA6B;;IAExC,mEAAmE;;;;;;;;EAEnE,CAAC;AACH,MAAM,MAAM,uBAAuB,GAAG,CAAC,CAAC,KAAK,CAC3C,OAAO,6BAA6B,CACrC,CAAC;AAEF;;;;;;GAMG;AACH,eAAO,MAAM,oBAAoB;IAC/B,yEAAyE;;IAEzE,6EAA6E;;IAE7E,0EAA0E;;IAE1E;;;OAGG;;;QAxBH,mEAAmE;;;;;;;;;;;;;;;;;;;;;;;;;EA0BnE,CAAC;AACH,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAElE;;;GAGG;AACH,eAAO,MAAM,qBAAqB;;;IAGhC,+CAA+C;;;;;;;;;;;;;EAG/C,CAAC;AACH,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAMpE;;;;GAIG;AACH,eAAO,MAAM,2BAA2B;;;;;;;;;;;;;;;;;;;;;;;;;;;IAatC,CAAC;AACH,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,2BAA2B,CAAC,CAAC;AAWhF;;;;;;;;;;;;GAYG;AACH,eAAO,MAAM,uBAAuB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;IAgBlC,CAAC;AACH,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC;AAMxE;;;;;;;GAOG;AACH,eAAO,MAAM,0BAA0B,kCAAkC,CAAC;AAC1E,eAAO,MAAM,gCAAgC,2CACH,CAAC;AAE3C;;;;;GAKG;AACH,eAAO,MAAM,8BAA8B,iCAAiC,CAAC;AAC7E,eAAO,MAAM,2BAA2B,kCAAgC,CAAC;AACzE,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,2BAA2B,CAAC,CAAC;AAEhF;;;;GAIG;AACH,eAAO,MAAM,yBAAyB,oCAAoC,CAAC;AAE3E;;;GAGG;AACH,eAAO,MAAM,+BAA+B,0CACH,CAAC;AAE1C;;;;GAIG;AACH,eAAO,MAAM,+BAA+B,4BAA4B,CAAC;AAEzE,wEAAwE;AACxE,eAAO,MAAM,iCAAiC,8BAA8B,CAAC;AAE7E,eAAO,MAAM,kCAAkC;;;;;;;;;EAG7C,CAAC;AACH,MAAM,MAAM,4BAA4B,GAAG,CAAC,CAAC,KAAK,CAChD,OAAO,kCAAkC,CAC1C,CAAC;AAEF,gEAAgE;AAChE,eAAO,MAAM,6BAA6B;;;;;;EAExC,CAAC;AAEH;;;;;;GAMG;AACH,eAAO,MAAM,0BAA0B;;;;;;;;;;;;EAKrC,CAAC;AACH,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,0BAA0B,CAAC,CAAC;AAE9E,2EAA2E;AAC3E,eAAO,MAAM,2BAA2B;;;;;;EAEtC,CAAC;AACH,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,2BAA2B,CAAC,CAAC;AAMhF;;;;;GAKG;AACH,eAAO,MAAM,mCAAmC,mDACE,CAAC;AAEnD,6EAA6E;AAC7E,eAAO,MAAM,sCAAsC;;;;;;;;;EAKxC,CAAC;AACZ,MAAM,MAAM,gCAAgC,GAAG,CAAC,CAAC,KAAK,CACpD,OAAO,sCAAsC,CAC9C,CAAC;AAEF,8EAA8E;AAC9E,eAAO,MAAM,oCAAoC;;;;;;;;;EAG/C,CAAC;AAEH,2EAA2E;AAC3E,wBAAgB,uBAAuB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAE/D;AAMD;;;;;;;;;;;;GAYG;AACH,eAAO,MAAM,2BAA2B,8DAKtC,CAAC;AACH,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,2BAA2B,CAAC,CAAC"}

package/dist/control.js

@@ -1,10 +1,13 @@
 /**
- * The contract between the three parties of an AgentCore workspace:
+ * The contract between the parties of an AgentCore workspace:
  *
- * - the AI service, which opens the VM and learns its session endpoint URL;
+ * - the Superblocks server, the only holder of AWS credentials, which calls
+ *   the builder runtime and signs requests to session endpoints;
+ * - the AI service, which opens the VM through the server and learns its
+ *   session endpoint URL;
  * - the workspace edge in the live-edit pod, the browser's front door, which
- *   signs and forwards traffic to that URL and owns lock, activity and the
- *   sync credential;
+ *   forwards traffic to that URL with the server's signatures and owns lock,
+ *   activity and the sync credential;
  * - the workspace ingress in the VM, the one listener the session endpoint
  *   reaches.
  *
@@ -37,8 +40,6 @@ export const WORKSPACE_STATE_PATH = "/_sb_workspace/state";
 export const WORKSPACE_COMMIT_PATH = "/_sb_workspace/commit";
 /** Edge, AI service → edge: the VM's current session endpoint. */
 export const WORKSPACE_ENDPOINT_PATH = "/_sb_workspace/endpoint";
-/** Edge, VM → edge: read-only package registry proxy (prefix). */
-export const WORKSPACE_REGISTRY_PATH = "/_sb_workspace/registry/";
 /**
  * Carries the workspace token on every request between the parties. Not
  * `Authorization`: SigV4 owns that header on the edge → VM hop.
@@ -110,6 +111,18 @@ export function isAgentCoreSessionEndpoint(url, region) {
         parsed.password === "" &&
         parsed.hostname.endsWith(`.runtime.bedrock-agentcore.${region}.on.aws`));
 }
+/**
+ * The URL that reaches `port` in the VM. AgentCore returns the session
+ * endpoint without a port, and that bare host answers AccessDenied; each
+ * allowed port is addressed as `<port>--<host>`. A URL that already names a
+ * port is kept as it is.
+ */
+export function sessionEndpointForPort(sessionEndpointUrl, port) {
+    const url = new URL(sessionEndpointUrl);
+    if (!/^\d+--/.test(url.hostname))
+        url.hostname = `${port}--${url.hostname}`;
+    return url.origin;
+}
 /**
  * Constant-time string comparison. Both sides are hashed first so inputs of
  * different lengths compare in constant time too.
@@ -200,8 +213,12 @@ const endpointUrl = z
  * (`PUT` {@link WORKSPACE_ENDPOINT_PATH}). Each `workspace.open` that returns
  * a new URL sends a new one; the edge then pushes its state there.
  *
- * - `sigv4`: an AgentCore session endpoint. The edge signs each request and
- *   WebSocket handshake for `bedrock-agentcore` in `region`.
+ * - `sigv4`: an AgentCore session endpoint. Each request and WebSocket
+ *   handshake needs a SigV4 signature for `bedrock-agentcore` in `region`,
+ *   which only the Superblocks server can make: the edge asks `signer.url`
+ *   ({@link BUILDER_RUNTIME_SIGN_PATH}) for each one, presenting
+ *   `signer.grant`. The AI service sends the endpoint again with a fresh
+ *   grant before the old one expires.
  * - `none`: a local builder runtime reached directly, for development.
  */
 export const workspaceEndpointSchema = z.discriminatedUnion("auth", [
@@ -210,6 +227,10 @@ export const workspaceEndpointSchema = z.discriminatedUnion("auth", [
         url: endpointUrl,
         region: z.string().min(1).max(64),
         sessionKey: z.string().min(1).max(1024),
+        signer: z.object({
+            url: z.string().url().max(2048),
+            grant: z.string().min(1).max(8192),
+        }),
     }),
     z.object({
         auth: z.literal("none"),
@@ -218,6 +239,97 @@ export const workspaceEndpointSchema = z.discriminatedUnion("auth", [
     }),
 ]);
 // ---------------------------------------------------------------------------
+// Live-edit pod → Superblocks server: the builder runtime gateway
+// ---------------------------------------------------------------------------
+/**
+ * The server is the only caller of the AgentCore builder runtime. The AI
+ * service trades the user's token for a builder-runtime token
+ * ({@link BUILDER_RUNTIME_TOKEN_PATH}), which names the app, branch and chat
+ * the server checked, and sends invocation payloads to
+ * {@link BUILDER_RUNTIME_INVOCATIONS_PATH}. The server picks the runtime and
+ * the runtime session itself; the response is the runtime's event stream.
+ */
+export const BUILDER_RUNTIME_TOKEN_PATH = "/api/v1/token/builder-runtime";
+export const BUILDER_RUNTIME_INVOCATIONS_PATH = "/api/v1/ai/builder-runtime/invocations";
+/**
+ * On an invocation request: which of the token's runtime sessions it runs in.
+ * `workspace` is the branch's workspace session (opens, and turns whose tools
+ * run in the VM); `chat` is the chat's own session. The server maps either to
+ * a session it derived, so the pod cannot name any other.
+ */
+export const BUILDER_RUNTIME_SESSION_HEADER = "x-sb-builder-runtime-session";
+export const builderRuntimeSessionSchema = z.enum(["workspace", "chat"]);
+/**
+ * Signs one request to a session endpoint (`POST`, body
+ * {@link workspaceSignRequestSchema}, `Authorization: Bearer <grant>`). The
+ * grant names the one session endpoint origin it may sign for.
+ */
+export const BUILDER_RUNTIME_SIGN_PATH = "/api/v1/ai/builder-runtime/sign";
+/**
+ * Renews a sign grant (`POST`, body {@link builderRuntimeSignGrantSchema},
+ * builder-runtime token as bearer) for the same session endpoint.
+ */
+export const BUILDER_RUNTIME_SIGN_GRANT_PATH = "/api/v1/ai/builder-runtime/sign-grant";
+/**
+ * On a `workspace.open` response: where the VM ingress is reachable, as JSON
+ * {@link builderRuntimeEndpointHeaderSchema}. Absent when AgentCore returned no
+ * session endpoint.
+ */
+export const BUILDER_RUNTIME_ENDPOINT_HEADER = "x-sb-workspace-endpoint";
+/** On a `workspace.open` response: the sign grant for that endpoint. */
+export const BUILDER_RUNTIME_SIGN_GRANT_HEADER = "x-sb-workspace-sign-grant";
+export const builderRuntimeEndpointHeaderSchema = z.object({
+    url: endpointUrl,
+    region: z.string().min(1).max(64),
+});
+/** A sign grant, as sent to and returned by the renew route. */
+export const builderRuntimeSignGrantSchema = z.object({
+    grant: z.string().min(1).max(8192),
+});
+/**
+ * One request the edge wants signed. `headers` are the lowercased headers the
+ * signer covers (`host` and `x-amz-*`); the body is never sent because the
+ * signature uses an unsigned payload. The server signs only a URL on the
+ * grant's session endpoint, so the schema bounds sizes and leaves the rest to
+ * that check.
+ */
+export const workspaceSignRequestSchema = z.object({
+    method: z.enum(["DELETE", "GET", "HEAD", "OPTIONS", "PATCH", "POST", "PUT"]),
+    // Node's default limit for a whole request head.
+    url: z.string().url().max(16_384),
+    headers: z.record(z.string().max(256), z.string().max(8192)),
+});
+/** The signed header set: the request's headers plus the SigV4 headers. */
+export const workspaceSignResponseSchema = z.object({
+    headers: z.record(z.string(), z.string()),
+});
+// ---------------------------------------------------------------------------
+// Superblocks server → VM: the signed invocation
+// ---------------------------------------------------------------------------
+/**
+ * The audience of the statement the server signs for each invocation. The VM
+ * runs an invocation only when the statement verifies against the server's
+ * keys, names the runtime session AgentCore delivered it on, and hashes to
+ * the payload it carries.
+ */
+export const BUILDER_RUNTIME_INVOCATION_AUDIENCE = "https://superblocks-builder-runtime-invocation";
+/** The body the server sends to AgentCore: the statement and the payload. */
+export const builderRuntimeInvocationEnvelopeSchema = z
+    .object({
+    authorization: z.string().min(1).max(8192),
+    payload: z.string().min(2),
+})
+    .strict();
+/** The statement's own claims, beside the standard `iss`, `aud` and `exp`. */
+export const builderRuntimeInvocationClaimsSchema = z.object({
+    rsid: z.string().min(1).max(256),
+    payload_sha256: z.string().regex(/^[a-f0-9]{64}$/),
+});
+/** The hex SHA-256 of an invocation payload, as the statement names it. */
+export function invocationPayloadDigest(payload) {
+    return createHash("sha256").update(payload, "utf8").digest("hex");
+}
+// ---------------------------------------------------------------------------
 // Edge health, read by the AI service
 // ---------------------------------------------------------------------------
 /**

package/dist/control.js.map

@@ -1 +1 @@
-{"version":3,"file":"control.js","sourceRoot":"","sources":["../src/control.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AACH,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAEtE,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,8EAA8E;AAC9E,2BAA2B;AAC3B,8EAA8E;AAE9E;;;GAGG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,IAAI,CAAC;AAE3C;;;;GAIG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG,iBAAiB,CAAC;AAE1D,wEAAwE;AACxE,MAAM,CAAC,MAAM,oBAAoB,GAAG,sBAAsB,CAAC;AAC3D,gFAAgF;AAChF,MAAM,CAAC,MAAM,qBAAqB,GAAG,uBAAuB,CAAC;AAC7D,kEAAkE;AAClE,MAAM,CAAC,MAAM,uBAAuB,GAAG,yBAAyB,CAAC;AACjE,kEAAkE;AAClE,MAAM,CAAC,MAAM,uBAAuB,GAAG,0BAA0B,CAAC;AAElE;;;GAGG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,sBAAsB,CAAC;AAE7D;;;;GAIG;AACH,MAAM,CAAC,MAAM,8BAA8B,GAAG,oBAAoB,CAAC;AAEnE;;;;GAIG;AACH,MAAM,CAAC,MAAM,uCAAuC,GAClD,6BAA6B,CAAC;AAEhC,yEAAyE;AACzE,MAAM,UAAU,sBAAsB,CAAC,QAAgB;IACrD,OAAO,QAAQ,CAAC,UAAU,CAAC,wBAAwB,CAAC,CAAC;AACvD,CAAC;AAED,8EAA8E;AAC9E,QAAQ;AACR,8EAA8E;AAE9E;;;;GAIG;AACH,MAAM,UAAU,oBAAoB,CAClC,MAAc,EACd,UAAkB;IAElB,IAAI,CAAC,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;IACvE,IAAI,CAAC,UAAU;QACb,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;IAChE,OAAO,UAAU,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACvE,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,4BAA4B,CAC1C,MAAc,EACd,UAAkB;IAElB,IAAI,CAAC,MAAM;QACT,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;IACpE,IAAI,CAAC,UAAU;QACb,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;IACxE,OAAO,UAAU,CAAC,QAAQ,EAAE,MAAM,CAAC;SAChC,MAAM,CAAC,uBAAuB,UAAU,EAAE,CAAC;SAC3C,MAAM,CAAC,KAAK,CAAC,CAAC;AACnB,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,0BAA0B,CACxC,GAAW,EACX,MAAc;IAEd,IAAI,MAAW,CAAC;IAChB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;IACxB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,CACL,0BAA0B,CAAC,IAAI,CAAC,MAAM,CAAC;QACvC,MAAM,CAAC,QAAQ,KAAK,QAAQ;QAC5B,MAAM,CAAC,IAAI,KAAK,EAAE;QAClB,MAAM,CAAC,QAAQ,KAAK,EAAE;QACtB,MAAM,CAAC,QAAQ,KAAK,EAAE;QACtB,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,8BAA8B,MAAM,SAAS,CAAC,CACxE,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,WAAW,CAAC,CAAS,EAAE,CAAS;IAC9C,OAAO,eAAe,CACpB,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,EACvC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,CACxC,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,iBAAiB,CAC/B,OAAsD,EACtD,QAAgB;IAEhB,MAAM,KAAK,GAAG,OAAO,CAAC,sBAAsB,CAAC,CAAC;IAC9C,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI,CAAC,QAAQ;QAAE,OAAO,KAAK,CAAC;IACnE,OAAO,WAAW,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;AACtC,CAAC;AAED,8EAA8E;AAC9E,4BAA4B;AAC5B,8EAA8E;AAE9E,MAAM,CAAC,MAAM,6BAA6B,GAAG,CAAC,CAAC,MAAM,CAAC;IACpD,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC;IAClC,mEAAmE;IACnE,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;CACvC,CAAC,CAAC;AAKH;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3C,yEAAyE;IACzE,QAAQ,EAAE,CAAC,CAAC,OAAO,EAAE;IACrB,6EAA6E;IAC7E,UAAU,EAAE,CAAC,CAAC,OAAO,EAAE;IACvB,0EAA0E;IAC1E,QAAQ,EAAE,CAAC,CAAC,OAAO,EAAE;IACrB;;;OAGG;IACH,UAAU,EAAE,6BAA6B,CAAC,QAAQ,EAAE;CACrD,CAAC,CAAC;AAGH;;;GAGG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC5C,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACzB,SAAS,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC;IACjD,+CAA+C;IAC/C,QAAQ,EAAE,CAAC,CAAC,OAAO,EAAE;IACrB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAChC,CAAC,CAAC;AAGH,8EAA8E;AAC9E,oBAAoB;AACpB,8EAA8E;AAE9E;;;;GAIG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAG,CAAC,CAAC,kBAAkB,CAAC,SAAS,EAAE;IACzE,CAAC,CAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC;QAC/B,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;KAChC,CAAC;IACF,CAAC,CAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC;QAC/B,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC;KAC5B,CAAC;IACF,CAAC,CAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC;QAC3B,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC;KAC3B,CAAC;CACH,CAAC,CAAC;AAGH,8EAA8E;AAC9E,sCAAsC;AACtC,8EAA8E;AAE9E,MAAM,WAAW,GAAG,CAAC;KAClB,MAAM,EAAE;KACR,GAAG,EAAE;KACL,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,iBAAiB,CAAC,CAAC;AAEpE;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,CAAC,kBAAkB,CAAC,MAAM,EAAE;IAClE,CAAC,CAAC,MAAM,CAAC;QACP,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC;QACxB,GAAG,EAAE,WAAW;QAChB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;QACjC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC;KACxC,CAAC;IACF,CAAC,CAAC,MAAM,CAAC;QACP,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC;QACvB,GAAG,EAAE,WAAW;QAChB,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC;KACxC,CAAC;CACH,CAAC,CAAC;AAGH,8EAA8E;AAC9E,sCAAsC;AACtC,8EAA8E;AAE9E;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAG,CAAC,CAAC,IAAI,CAAC;IAChD,SAAS;IACT,WAAW;IACX,aAAa;IACb,QAAQ;CACT,CAAC,CAAC"}
+{"version":3,"file":"control.js","sourceRoot":"","sources":["../src/control.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AACH,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAEtE,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,8EAA8E;AAC9E,2BAA2B;AAC3B,8EAA8E;AAE9E;;;GAGG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,IAAI,CAAC;AAE3C;;;;GAIG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG,iBAAiB,CAAC;AAE1D,wEAAwE;AACxE,MAAM,CAAC,MAAM,oBAAoB,GAAG,sBAAsB,CAAC;AAC3D,gFAAgF;AAChF,MAAM,CAAC,MAAM,qBAAqB,GAAG,uBAAuB,CAAC;AAC7D,kEAAkE;AAClE,MAAM,CAAC,MAAM,uBAAuB,GAAG,yBAAyB,CAAC;AAEjE;;;GAGG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,sBAAsB,CAAC;AAE7D;;;;GAIG;AACH,MAAM,CAAC,MAAM,8BAA8B,GAAG,oBAAoB,CAAC;AAEnE;;;;GAIG;AACH,MAAM,CAAC,MAAM,uCAAuC,GAClD,6BAA6B,CAAC;AAEhC,yEAAyE;AACzE,MAAM,UAAU,sBAAsB,CAAC,QAAgB;IACrD,OAAO,QAAQ,CAAC,UAAU,CAAC,wBAAwB,CAAC,CAAC;AACvD,CAAC;AAED,8EAA8E;AAC9E,QAAQ;AACR,8EAA8E;AAE9E;;;;GAIG;AACH,MAAM,UAAU,oBAAoB,CAClC,MAAc,EACd,UAAkB;IAElB,IAAI,CAAC,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;IACvE,IAAI,CAAC,UAAU;QACb,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;IAChE,OAAO,UAAU,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACvE,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,4BAA4B,CAC1C,MAAc,EACd,UAAkB;IAElB,IAAI,CAAC,MAAM;QACT,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;IACpE,IAAI,CAAC,UAAU;QACb,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;IACxE,OAAO,UAAU,CAAC,QAAQ,EAAE,MAAM,CAAC;SAChC,MAAM,CAAC,uBAAuB,UAAU,EAAE,CAAC;SAC3C,MAAM,CAAC,KAAK,CAAC,CAAC;AACnB,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,0BAA0B,CACxC,GAAW,EACX,MAAc;IAEd,IAAI,MAAW,CAAC;IAChB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;IACxB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,CACL,0BAA0B,CAAC,IAAI,CAAC,MAAM,CAAC;QACvC,MAAM,CAAC,QAAQ,KAAK,QAAQ;QAC5B,MAAM,CAAC,IAAI,KAAK,EAAE;QAClB,MAAM,CAAC,QAAQ,KAAK,EAAE;QACtB,MAAM,CAAC,QAAQ,KAAK,EAAE;QACtB,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,8BAA8B,MAAM,SAAS,CAAC,CACxE,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,sBAAsB,CACpC,kBAA0B,EAC1B,IAAY;IAEZ,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,kBAAkB,CAAC,CAAC;IACxC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC;QAAE,GAAG,CAAC,QAAQ,GAAG,GAAG,IAAI,KAAK,GAAG,CAAC,QAAQ,EAAE,CAAC;IAC5E,OAAO,GAAG,CAAC,MAAM,CAAC;AACpB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,WAAW,CAAC,CAAS,EAAE,CAAS;IAC9C,OAAO,eAAe,CACpB,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,EACvC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,CACxC,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,iBAAiB,CAC/B,OAAsD,EACtD,QAAgB;IAEhB,MAAM,KAAK,GAAG,OAAO,CAAC,sBAAsB,CAAC,CAAC;IAC9C,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI,CAAC,QAAQ;QAAE,OAAO,KAAK,CAAC;IACnE,OAAO,WAAW,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;AACtC,CAAC;AAED,8EAA8E;AAC9E,4BAA4B;AAC5B,8EAA8E;AAE9E,MAAM,CAAC,MAAM,6BAA6B,GAAG,CAAC,CAAC,MAAM,CAAC;IACpD,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC;IAClC,mEAAmE;IACnE,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;CACvC,CAAC,CAAC;AAKH;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3C,yEAAyE;IACzE,QAAQ,EAAE,CAAC,CAAC,OAAO,EAAE;IACrB,6EAA6E;IAC7E,UAAU,EAAE,CAAC,CAAC,OAAO,EAAE;IACvB,0EAA0E;IAC1E,QAAQ,EAAE,CAAC,CAAC,OAAO,EAAE;IACrB;;;OAGG;IACH,UAAU,EAAE,6BAA6B,CAAC,QAAQ,EAAE;CACrD,CAAC,CAAC;AAGH;;;GAGG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC5C,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACzB,SAAS,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC;IACjD,+CAA+C;IAC/C,QAAQ,EAAE,CAAC,CAAC,OAAO,EAAE;IACrB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAChC,CAAC,CAAC;AAGH,8EAA8E;AAC9E,oBAAoB;AACpB,8EAA8E;AAE9E;;;;GAIG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAG,CAAC,CAAC,kBAAkB,CAAC,SAAS,EAAE;IACzE,CAAC,CAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC;QAC/B,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;KAChC,CAAC;IACF,CAAC,CAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC;QAC/B,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC;KAC5B,CAAC;IACF,CAAC,CAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC;QAC3B,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC;KAC3B,CAAC;CACH,CAAC,CAAC;AAGH,8EAA8E;AAC9E,sCAAsC;AACtC,8EAA8E;AAE9E,MAAM,WAAW,GAAG,CAAC;KAClB,MAAM,EAAE;KACR,GAAG,EAAE;KACL,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,iBAAiB,CAAC,CAAC;AAEpE;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,CAAC,kBAAkB,CAAC,MAAM,EAAE;IAClE,CAAC,CAAC,MAAM,CAAC;QACP,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC;QACxB,GAAG,EAAE,WAAW;QAChB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;QACjC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC;QACvC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC;YACf,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC;YAC/B,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC;SACnC,CAAC;KACH,CAAC;IACF,CAAC,CAAC,MAAM,CAAC;QACP,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC;QACvB,GAAG,EAAE,WAAW;QAChB,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC;KACxC,CAAC;CACH,CAAC,CAAC;AAGH,8EAA8E;AAC9E,kEAAkE;AAClE,8EAA8E;AAE9E;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAG,+BAA+B,CAAC;AAC1E,MAAM,CAAC,MAAM,gCAAgC,GAC3C,wCAAwC,CAAC;AAE3C;;;;;GAKG;AACH,MAAM,CAAC,MAAM,8BAA8B,GAAG,8BAA8B,CAAC;AAC7E,MAAM,CAAC,MAAM,2BAA2B,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC,CAAC;AAGzE;;;;GAIG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAG,iCAAiC,CAAC;AAE3E;;;GAGG;AACH,MAAM,CAAC,MAAM,+BAA+B,GAC1C,uCAAuC,CAAC;AAE1C;;;;GAIG;AACH,MAAM,CAAC,MAAM,+BAA+B,GAAG,yBAAyB,CAAC;AAEzE,wEAAwE;AACxE,MAAM,CAAC,MAAM,iCAAiC,GAAG,2BAA2B,CAAC;AAE7E,MAAM,CAAC,MAAM,kCAAkC,GAAG,CAAC,CAAC,MAAM,CAAC;IACzD,GAAG,EAAE,WAAW;IAChB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;CAClC,CAAC,CAAC;AAKH,gEAAgE;AAChE,MAAM,CAAC,MAAM,6BAA6B,GAAG,CAAC,CAAC,MAAM,CAAC;IACpD,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC;CACnC,CAAC,CAAC;AAEH;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC,CAAC,MAAM,CAAC;IACjD,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC;IAC5E,iDAAiD;IACjD,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC;IACjC,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;CAC7D,CAAC,CAAC;AAGH,2EAA2E;AAC3E,MAAM,CAAC,MAAM,2BAA2B,GAAG,CAAC,CAAC,MAAM,CAAC;IAClD,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;CAC1C,CAAC,CAAC;AAGH,8EAA8E;AAC9E,iDAAiD;AACjD,8EAA8E;AAE9E;;;;;GAKG;AACH,MAAM,CAAC,MAAM,mCAAmC,GAC9C,gDAAgD,CAAC;AAEnD,6EAA6E;AAC7E,MAAM,CAAC,MAAM,sCAAsC,GAAG,CAAC;KACpD,MAAM,CAAC;IACN,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC;IAC1C,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;CAC3B,CAAC;KACD,MAAM,EAAE,CAAC;AAKZ,8EAA8E;AAC9E,MAAM,CAAC,MAAM,oCAAoC,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3D,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IAChC,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,gBAAgB,CAAC;CACnD,CAAC,CAAC;AAEH,2EAA2E;AAC3E,MAAM,UAAU,uBAAuB,CAAC,OAAe;IACrD,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACpE,CAAC;AAED,8EAA8E;AAC9E,sCAAsC;AACtC,8EAA8E;AAE9E;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAG,CAAC,CAAC,IAAI,CAAC;IAChD,SAAS;IACT,WAAW;IACX,aAAa;IACb,QAAQ;CACT,CAAC,CAAC"}

package/dist/dbfs-transport.d.ts

@@ -1,5 +1,4 @@
-import type { ApplicationHashChangeSource, DirectoryEntry } from "@superblocksteam/shared";
-import type { DraftJournalBlobStore } from "./session-draft-journal-store.js";
+import type { ApplicationHashChangeSource, CheckpointSkipReason, DirectoryEntry } from "@superblocksteam/shared";
 import type { PutManyItems } from "./snapshot/upload-snapshot.js";
 export interface SetHashRequest {
     hash: string;
@@ -13,6 +12,13 @@ export interface SetHashRequest {
 export interface SetHashResult {
     hash: string;
     commitId?: string;
+    /** Why the server made no checkpoint, when it skipped one by design. */
+    checkpointSkipped?: CheckpointSkipReason;
+    /**
+     * Protected paths whose changes the server holds for a user's approval.
+     * `hash` is then the tree the server stored, without those changes.
+     */
+    heldPaths?: string[];
 }
 /** A file to read out of a stored tree. */
 export interface DbfsFileRef {
@@ -35,8 +41,6 @@ export interface DbfsTransport {
     getDirectory(hash: string): Promise<DirectoryEntry[]>;
     /** File contents by path inside the tree `rootHash`, in request order. */
     getContents(rootHash: string, files: DbfsFileRef[]): Promise<Buffer[]>;
-    /** One blob by content hash. */
-    getBlob(hash: string): Promise<Buffer>;
     /** The branch's current working-copy hash. */
     getServerHash(): Promise<string>;
     /** Moves the branch's working-copy hash. */
@@ -44,9 +48,4 @@ export interface DbfsTransport {
     /** Reports whether the workspace has unaccepted drafts. */
     setDraftState(hasDraft: boolean): Promise<void>;
 }
-/**
- * Stores native draft journal contents as DBFS blobs through a transport, for
- * `SessionDraftJournalStore`.
- */
-export declare function journalBlobStoreFromTransport(transport: Pick<DbfsTransport, "putMany" | "getBlob">): DraftJournalBlobStore;
 //# sourceMappingURL=dbfs-transport.d.ts.map

package/dist/dbfs-transport.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"dbfs-transport.d.ts","sourceRoot":"","sources":["../src/dbfs-transport.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,2BAA2B,EAC3B,cAAc,EACf,MAAM,yBAAyB,CAAC;AAEjC,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,kCAAkC,CAAC;AAC9E,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,+BAA+B,CAAC;AAElE,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb;;;OAGG;IACH,QAAQ,EAAE,MAAM,GAAG,SAAS,CAAC;IAC7B,MAAM,EAAE,2BAA2B,CAAC;CACrC;AAED,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,2CAA2C;AAC3C,MAAM,WAAW,WAAW;IAC1B,+CAA+C;IAC/C,IAAI,EAAE,MAAM,CAAC;IACb,qDAAqD;IACrD,IAAI,EAAE,MAAM,CAAC;CACd;AAED;;;;GAIG;AACH,MAAM,WAAW,aAAa;IAC5B,4EAA4E;IAC5E,YAAY,CAAC,KAAK,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACjD,wEAAwE;IACxE,OAAO,CAAC,KAAK,EAAE,YAAY,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IAChD,qCAAqC;IACrC,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,EAAE,CAAC,CAAC;IACtD,0EAA0E;IAC1E,WAAW,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,WAAW,EAAE,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IACvE,gCAAgC;IAChC,OAAO,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IACvC,8CAA8C;IAC9C,aAAa,IAAI,OAAO,CAAC,MAAM,CAAC,CAAC;IACjC,4CAA4C;IAC5C,OAAO,CAAC,OAAO,EAAE,cAAc,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC;IACzD,2DAA2D;IAC3D,aAAa,CAAC,QAAQ,EAAE,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACjD;AAID;;;GAGG;AACH,wBAAgB,6BAA6B,CAC3C,SAAS,EAAE,IAAI,CAAC,aAAa,EAAE,SAAS,GAAG,SAAS,CAAC,GACpD,qBAAqB,CAkBvB"}
+{"version":3,"file":"dbfs-transport.d.ts","sourceRoot":"","sources":["../src/dbfs-transport.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,2BAA2B,EAC3B,oBAAoB,EACpB,cAAc,EACf,MAAM,yBAAyB,CAAC;AAEjC,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,+BAA+B,CAAC;AAElE,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb;;;OAGG;IACH,QAAQ,EAAE,MAAM,GAAG,SAAS,CAAC;IAC7B,MAAM,EAAE,2BAA2B,CAAC;CACrC;AAED,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,wEAAwE;IACxE,iBAAiB,CAAC,EAAE,oBAAoB,CAAC;IACzC;;;OAGG;IACH,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC;CACtB;AAED,2CAA2C;AAC3C,MAAM,WAAW,WAAW;IAC1B,+CAA+C;IAC/C,IAAI,EAAE,MAAM,CAAC;IACb,qDAAqD;IACrD,IAAI,EAAE,MAAM,CAAC;CACd;AAED;;;;GAIG;AACH,MAAM,WAAW,aAAa;IAC5B,4EAA4E;IAC5E,YAAY,CAAC,KAAK,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACjD,wEAAwE;IACxE,OAAO,CAAC,KAAK,EAAE,YAAY,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IAChD,qCAAqC;IACrC,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,EAAE,CAAC,CAAC;IACtD,0EAA0E;IAC1E,WAAW,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,WAAW,EAAE,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IACvE,8CAA8C;IAC9C,aAAa,IAAI,OAAO,CAAC,MAAM,CAAC,CAAC;IACjC,4CAA4C;IAC5C,OAAO,CAAC,OAAO,EAAE,cAAc,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC;IACzD,2DAA2D;IAC3D,aAAa,CAAC,QAAQ,EAAE,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACjD"}

package/dist/dbfs-transport.js

@@ -1,21 +1,2 @@
-const BLOB_BATCH = 64;
-/**
- * Stores native draft journal contents as DBFS blobs through a transport, for
- * `SessionDraftJournalStore`.
- */
-export function journalBlobStoreFromTransport(transport) {
-    return {
-        async put(contents) {
-            const hashes = [];
-            for (let idx = 0; idx < contents.length; idx += BLOB_BATCH) {
-                hashes.push(...(await transport.putMany(contents.slice(idx, idx + BLOB_BATCH).map((bytes) => ({
-                    type: "fileContents",
-                    contents: bytes.toString("base64"),
-                })))));
-            }
-            return hashes;
-        },
-        get: (hash) => transport.getBlob(hash),
-    };
-}
+export {};
 //# sourceMappingURL=dbfs-transport.js.map

package/dist/dbfs-transport.js.map

@@ -1 +1 @@
-{"version":3,"file":"dbfs-transport.js","sourceRoot":"","sources":["../src/dbfs-transport.ts"],"names":[],"mappings":"AAuDA,MAAM,UAAU,GAAG,EAAE,CAAC;AAEtB;;;GAGG;AACH,MAAM,UAAU,6BAA6B,CAC3C,SAAqD;IAErD,OAAO;QACL,KAAK,CAAC,GAAG,CAAC,QAAQ;YAChB,MAAM,MAAM,GAAa,EAAE,CAAC;YAC5B,KAAK,IAAI,GAAG,GAAG,CAAC,EAAE,GAAG,GAAG,QAAQ,CAAC,MAAM,EAAE,GAAG,IAAI,UAAU,EAAE,CAAC;gBAC3D,MAAM,CAAC,IAAI,CACT,GAAG,CAAC,MAAM,SAAS,CAAC,OAAO,CACzB,QAAQ,CAAC,KAAK,CAAC,GAAG,EAAE,GAAG,GAAG,UAAU,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;oBACpD,IAAI,EAAE,cAAuB;oBAC7B,QAAQ,EAAE,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC;iBACnC,CAAC,CAAC,CACJ,CAAC,CACH,CAAC;YACJ,CAAC;YACD,OAAO,MAAM,CAAC;QAChB,CAAC;QACD,GAAG,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC;KACvC,CAAC;AACJ,CAAC"}
+{"version":3,"file":"dbfs-transport.js","sourceRoot":"","sources":["../src/dbfs-transport.ts"],"names":[],"mappings":""}

package/dist/draft-helpers.d.ts

@@ -73,6 +73,19 @@ export declare function createDraftDelete(filePath: string, appRootDirPath: stri
  * @returns A promise that resolves to true if any draft files are found, false otherwise.
  */
 export declare function hasSwapFiles(appRootDirPath: string): Promise<boolean>;
+/**
+ * {@link hasSwapFiles} for decisions that clear the server's draft flag: only
+ * a missing drafts directory means no drafts. A directory or entry that
+ * cannot be read counts as a draft, so an unreadable tree never reads as
+ * reviewed.
+ */
+export declare function hasDraftsFailClosed(appRootDirPath: string): Promise<boolean>;
+/**
+ * Throws unless the drafts directory is gone. Accept, reject and clear all
+ * end by removing it, and their helpers swallow removal and read errors, so
+ * this is the check that they finished.
+ */
+export declare function assertDraftsSettled(appRootDirPath: string, action: string): Promise<void>;
 /**
  * Discards all draft changes by removing draft additions, then restoring the
  * originals of edits and deletions. Each marker is retired once its step

package/dist/draft-helpers.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"draft-helpers.d.ts","sourceRoot":"","sources":["../src/draft-helpers.ts"],"names":[],"mappings":"AAUA,QAAA,MAAM,UAAU;aACd,GAAG;aACH,MAAM;aACN,IAAI;CACI,CAAC;AAoFX;;;;;GAKG;AACH,wBAAsB,qBAAqB,CACzC,QAAQ,EAAE,MAAM,EAChB,cAAc,EAAE,MAAM,iBAwCvB;AAED;;;;;;;;GAQG;AACH,wBAAsB,WAAW,CAC/B,QAAQ,EAAE,MAAM,EAChB,YAAY,EAAE,MAAM,GAAG,MAAM,EAC7B,cAAc,EAAE,MAAM,GACrB,OAAO,CAAC,MAAM,GAAG,KAAK,CAAC,CAyDzB;AAED;;;;;;;;;GASG;AACH,wBAAsB,eAAe,CACnC,QAAQ,EAAE,MAAM,EAChB,YAAY,EAAE,MAAM,GAAG,MAAM,EAC7B,cAAc,EAAE,MAAM,GACrB,OAAO,CAAC,IAAI,CAAC,CAKf;AAsFD;;;;;;;;;GASG;AACH,wBAAsB,cAAc,CAClC,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,MAAM,GAAG,MAAM,EACxB,cAAc,EAAE,MAAM,GACrB,OAAO,CAAC,IAAI,CAAC,CA8Cf;AAED;;;GAGG;AACH,wBAAsB,gBAAgB,CACpC,YAAY,EAAE,MAAM,EACpB,cAAc,EAAE,MAAM,EACtB,IAAI,EAAE,MAAM,OAAO,UAAU,EAC7B,QAAQ,GAAE,MAAwB,GACjC,OAAO,CAAC,IAAI,CAAC,CAQf;AAED,qBAAa,YAAY;IACX,OAAO,CAAC,QAAQ,CAAC,IAAI;IAAjC,YAA6B,IAAI,EAAE,MAAM,EAAI;IAEvC,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC,CAG7B;IAEK,SAAS,CACb,OAAO,EAAE,MAAM,EAAE,EACjB,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,EAC3B,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAgC9B;YAEa,cAAc;YAmCd,WAAW;IAqDnB,SAAS,CACb,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,MAAM,GAAG,SAAS,EAC5B,OAAO,EAAE,MAAM,GAAG,SAAS,GAC1B,OAAO,CAAC,IAAI,CAAC,CAkBf;IAED,OAAO,CAAC,aAAa;CAMtB;AAED;;;;;;GAMG;AACH,wBAAsB,iBAAiB,CACrC,QAAQ,EAAE,MAAM,EAChB,cAAc,EAAE,MAAM,GACrB,OAAO,CAAC,IAAI,CAAC,CAkCf;AAED;;;;;;GAMG;AACH,wBAAsB,YAAY,CAAC,cAAc,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAW3E;AAkED;;;;;;;GAOG;AACH,wBAAsB,gBAAgB,CAAC,cAAc,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAmB5E;AAgED,wBAAsB,sBAAsB,CAC1C,cAAc,EAAE,MAAM,GACrB,OAAO,CAAC,IAAI,CAAC,CAOf;AAED;;;;;;GAMG;AACH,wBAAsB,eAAe,CAAC,cAAc,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAgB3E;AAED;;;;;GAKG;AACH,wBAAsB,YAAY,CAAC,cAAc,EAAE,MAAM,GAAG,OAAO,CAAC;IAClE,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,SAAS,EAAE,MAAM,EAAE,CAAC;IACpB,SAAS,EAAE,MAAM,EAAE,CAAC;CACrB,CAAC,CAyDD;AAED;;;;;;GAMG;AACH,wBAAsB,iBAAiB,CACrC,cAAc,EAAE,MAAM,EACtB,aAAa,GAAE,MAAM,EAAO,GAC3B,OAAO,CAAC,MAAM,CAAC,CAmGjB"}
+{"version":3,"file":"draft-helpers.d.ts","sourceRoot":"","sources":["../src/draft-helpers.ts"],"names":[],"mappings":"AAWA,QAAA,MAAM,UAAU;aACd,GAAG;aACH,MAAM;aACN,IAAI;CACI,CAAC;AAoFX;;;;;GAKG;AACH,wBAAsB,qBAAqB,CACzC,QAAQ,EAAE,MAAM,EAChB,cAAc,EAAE,MAAM,iBAwCvB;AAED;;;;;;;;GAQG;AACH,wBAAsB,WAAW,CAC/B,QAAQ,EAAE,MAAM,EAChB,YAAY,EAAE,MAAM,GAAG,MAAM,EAC7B,cAAc,EAAE,MAAM,GACrB,OAAO,CAAC,MAAM,GAAG,KAAK,CAAC,CAyDzB;AAED;;;;;;;;;GASG;AACH,wBAAsB,eAAe,CACnC,QAAQ,EAAE,MAAM,EAChB,YAAY,EAAE,MAAM,GAAG,MAAM,EAC7B,cAAc,EAAE,MAAM,GACrB,OAAO,CAAC,IAAI,CAAC,CAKf;AAsFD;;;;;;;;;GASG;AACH,wBAAsB,cAAc,CAClC,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,MAAM,GAAG,MAAM,EACxB,cAAc,EAAE,MAAM,GACrB,OAAO,CAAC,IAAI,CAAC,CA8Cf;AAED;;;GAGG;AACH,wBAAsB,gBAAgB,CACpC,YAAY,EAAE,MAAM,EACpB,cAAc,EAAE,MAAM,EACtB,IAAI,EAAE,MAAM,OAAO,UAAU,EAC7B,QAAQ,GAAE,MAAwB,GACjC,OAAO,CAAC,IAAI,CAAC,CAkBf;AA+CD,qBAAa,YAAY;IACX,OAAO,CAAC,QAAQ,CAAC,IAAI;IAAjC,YAA6B,IAAI,EAAE,MAAM,EAAI;IAEvC,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC,CAG7B;IAEK,SAAS,CACb,OAAO,EAAE,MAAM,EAAE,EACjB,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,EAC3B,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAgC9B;YAEa,cAAc;YAmCd,WAAW;IAqDnB,SAAS,CACb,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,MAAM,GAAG,SAAS,EAC5B,OAAO,EAAE,MAAM,GAAG,SAAS,GAC1B,OAAO,CAAC,IAAI,CAAC,CAkBf;IAED,OAAO,CAAC,aAAa;CAMtB;AAED;;;;;;GAMG;AACH,wBAAsB,iBAAiB,CACrC,QAAQ,EAAE,MAAM,EAChB,cAAc,EAAE,MAAM,GACrB,OAAO,CAAC,IAAI,CAAC,CAkCf;AAED;;;;;;GAMG;AACH,wBAAsB,YAAY,CAAC,cAAc,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAW3E;AAED;;;;;GAKG;AACH,wBAAsB,mBAAmB,CACvC,cAAc,EAAE,MAAM,GACrB,OAAO,CAAC,OAAO,CAAC,CAQlB;AAED;;;;GAIG;AACH,wBAAsB,mBAAmB,CACvC,cAAc,EAAE,MAAM,EACtB,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,IAAI,CAAC,CAOf;AA0ED;;;;;;;GAOG;AACH,wBAAsB,gBAAgB,CAAC,cAAc,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAmB5E;AAgED,wBAAsB,sBAAsB,CAC1C,cAAc,EAAE,MAAM,GACrB,OAAO,CAAC,IAAI,CAAC,CAOf;AAED;;;;;;GAMG;AACH,wBAAsB,eAAe,CAAC,cAAc,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAgB3E;AAED;;;;;GAKG;AACH,wBAAsB,YAAY,CAAC,cAAc,EAAE,MAAM,GAAG,OAAO,CAAC;IAClE,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,SAAS,EAAE,MAAM,EAAE,CAAC;IACpB,SAAS,EAAE,MAAM,EAAE,CAAC;CACrB,CAAC,CAyDD;AAED;;;;;;GAMG;AACH,wBAAsB,iBAAiB,CACrC,cAAc,EAAE,MAAM,EACtB,aAAa,GAAE,MAAM,EAAO,GAC3B,OAAO,CAAC,MAAM,CAAC,CAmGjB"}