@vercel/factory 0.0.14 → 0.0.16

package/dist/workspace-diff.d.mts

@@ -0,0 +1,90 @@
+import { z } from "zod";
+//#region src/workspace-diff.d.ts
+/** Validates one changed file in a bounded workspace comparison. */
+declare const workspaceDiffFileSchema: z.ZodObject<{
+  path: z.ZodString;
+  previousPath: z.ZodOptional<z.ZodString>;
+  status: z.ZodEnum<{
+    added: "added";
+    deleted: "deleted";
+    modified: "modified";
+    renamed: "renamed";
+  }>;
+  oldMode: z.ZodNullable<z.ZodString>;
+  newMode: z.ZodNullable<z.ZodString>;
+  additions: z.ZodNullable<z.ZodNumber>;
+  deletions: z.ZodNullable<z.ZodNumber>;
+  patch: z.ZodString;
+  binary: z.ZodBoolean;
+  omitted: z.ZodBoolean;
+}, z.core.$strict>;
+/** One changed file in a bounded workspace comparison. */
+type WorkspaceDiffFile = Readonly<z.infer<typeof workspaceDiffFileSchema>>;
+/** Validates either a ready comparison with pinned commits or an unavailable response with a reason. */
+declare const workspaceDiffSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
+  state: z.ZodLiteral<"ready">;
+  executionId: z.ZodString;
+  reason: z.ZodOptional<z.ZodNever>;
+  base: z.ZodObject<{
+    sha: z.ZodString;
+  }, z.core.$strict>;
+  head: z.ZodObject<{
+    sha: z.ZodString;
+  }, z.core.$strict>;
+  truncated: z.ZodBoolean;
+  files: z.ZodReadonly<z.ZodArray<z.ZodObject<{
+    path: z.ZodString;
+    previousPath: z.ZodOptional<z.ZodString>;
+    status: z.ZodEnum<{
+      added: "added";
+      deleted: "deleted";
+      modified: "modified";
+      renamed: "renamed";
+    }>;
+    oldMode: z.ZodNullable<z.ZodString>;
+    newMode: z.ZodNullable<z.ZodString>;
+    additions: z.ZodNullable<z.ZodNumber>;
+    deletions: z.ZodNullable<z.ZodNumber>;
+    patch: z.ZodString;
+    binary: z.ZodBoolean;
+    omitted: z.ZodBoolean;
+  }, z.core.$strict>>>;
+  capturedAt: z.ZodISODateTime;
+}, z.core.$strict>, z.ZodObject<{
+  state: z.ZodLiteral<"unavailable">;
+  executionId: z.ZodNullable<z.ZodString>;
+  reason: z.ZodString;
+  base: z.ZodNull;
+  head: z.ZodNull;
+  truncated: z.ZodLiteral<false>;
+  files: z.ZodReadonly<z.ZodArray<z.ZodObject<{
+    path: z.ZodString;
+    previousPath: z.ZodOptional<z.ZodString>;
+    status: z.ZodEnum<{
+      added: "added";
+      deleted: "deleted";
+      modified: "modified";
+      renamed: "renamed";
+    }>;
+    oldMode: z.ZodNullable<z.ZodString>;
+    newMode: z.ZodNullable<z.ZodString>;
+    additions: z.ZodNullable<z.ZodNumber>;
+    deletions: z.ZodNullable<z.ZodNumber>;
+    patch: z.ZodString;
+    binary: z.ZodBoolean;
+    omitted: z.ZodBoolean;
+  }, z.core.$strict>>>;
+  capturedAt: z.ZodISODateTime;
+}, z.core.$strict>], "state">;
+/** A ready workspace comparison or an unavailable response carrying its reason. */
+type WorkspaceDiff = Readonly<z.infer<typeof workspaceDiffSchema>>;
+/** Identifies an execution and the reason its workspace comparison is unavailable. */
+interface UnavailableWorkspaceDiffInput {
+  readonly executionId: string | null;
+  readonly reason: string;
+}
+/** Creates an unavailable workspace-diff response with a stable empty projection. */
+declare function unavailableWorkspaceDiff(input: UnavailableWorkspaceDiffInput): WorkspaceDiff;
+//#endregion
+export { UnavailableWorkspaceDiffInput, WorkspaceDiff, WorkspaceDiffFile, unavailableWorkspaceDiff, workspaceDiffFileSchema, workspaceDiffSchema };
+//# sourceMappingURL=workspace-diff.d.mts.map

package/dist/workspace-diff.mjs

@@ -0,0 +1,61 @@
+import { z } from "zod";
+//#region src/workspace-diff.ts
+const gitCommitSchema = z.strictObject({ sha: z.string().regex(/^[a-f0-9]{40,64}$/u).describe("Pinned commit used for every file in this response.") });
+/** Validates one changed file in a bounded workspace comparison. */
+const workspaceDiffFileSchema = z.strictObject({
+	path: z.string().describe("Repository-relative current path, or deleted path."),
+	previousPath: z.string().optional().describe("Original path of an exact-content rename."),
+	status: z.enum([
+		"added",
+		"deleted",
+		"modified",
+		"renamed"
+	]).describe("Change between the pinned base and current branch HEAD."),
+	oldMode: z.string().nullable().describe("Git file mode at the base, or null for additions."),
+	newMode: z.string().nullable().describe("Git file mode at HEAD, or null for deletions."),
+	additions: z.number().int().nonnegative().nullable().describe("Added lines; null when content is omitted."),
+	deletions: z.number().int().nonnegative().nullable().describe("Deleted lines; null when content is omitted."),
+	patch: z.string().max(1e5).describe("Unified patch; empty for binary, oversized, or mode-only changes."),
+	binary: z.boolean().describe("Content is binary or not valid UTF-8."),
+	omitted: z.boolean().describe("Content could not be displayed within inspection limits.")
+});
+const workspaceDiffCommon = { capturedAt: z.iso.datetime().describe("Time the branch inspection began; all returned commit SHAs are pinned.") };
+const readyWorkspaceDiffSchema = z.strictObject({
+	...workspaceDiffCommon,
+	state: z.literal("ready").describe("The workspace comparison completed."),
+	executionId: z.string().min(1).describe("Execution whose current branch was inspected."),
+	reason: z.never().optional().describe("Ready comparisons have no unavailability reason."),
+	base: gitCommitSchema.describe("Pinned comparison base."),
+	head: gitCommitSchema.describe("Pinned current branch HEAD."),
+	truncated: z.boolean().describe("Some files or patches were omitted because of response limits."),
+	files: z.array(workspaceDiffFileSchema).max(200).describe("Bounded changed-file list; untracked files are excluded.").readonly()
+});
+const unavailableWorkspaceDiffSchema = z.strictObject({
+	...workspaceDiffCommon,
+	state: z.literal("unavailable").describe("The workspace comparison could not be produced."),
+	executionId: z.string().min(1).nullable().describe("Execution that could not be inspected, or null when no execution exists."),
+	reason: z.string().min(1).describe("Why the workspace comparison could not be read."),
+	base: z.null().describe("No comparison base is available."),
+	head: z.null().describe("No workspace HEAD is available."),
+	truncated: z.literal(false).describe("Unavailable comparisons never contain partial results."),
+	files: z.array(workspaceDiffFileSchema).max(0).describe("Unavailable comparisons contain no changed files.").readonly()
+});
+/** Validates either a ready comparison with pinned commits or an unavailable response with a reason. */
+const workspaceDiffSchema = z.discriminatedUnion("state", [readyWorkspaceDiffSchema, unavailableWorkspaceDiffSchema]);
+/** Creates an unavailable workspace-diff response with a stable empty projection. */
+function unavailableWorkspaceDiff(input) {
+	return {
+		executionId: input.executionId,
+		state: "unavailable",
+		reason: input.reason,
+		base: null,
+		head: null,
+		capturedAt: (/* @__PURE__ */ new Date()).toISOString(),
+		truncated: false,
+		files: []
+	};
+}
+//#endregion
+export { unavailableWorkspaceDiff, workspaceDiffFileSchema, workspaceDiffSchema };
+
+//# sourceMappingURL=workspace-diff.mjs.map

package/dist/workspace-diff.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"workspace-diff.mjs","names":[],"sources":["../src/workspace-diff.ts"],"sourcesContent":["import { z } from \"zod\";\n\nconst gitCommitSchema = z.strictObject({\n  sha: z\n    .string()\n    .regex(/^[a-f0-9]{40,64}$/u)\n    .describe(\"Pinned commit used for every file in this response.\"),\n});\n\n/** Validates one changed file in a bounded workspace comparison. */\nexport const workspaceDiffFileSchema = z.strictObject({\n  path: z.string().describe(\"Repository-relative current path, or deleted path.\"),\n  previousPath: z.string().optional().describe(\"Original path of an exact-content rename.\"),\n  status: z\n    .enum([\"added\", \"deleted\", \"modified\", \"renamed\"])\n    .describe(\"Change between the pinned base and current branch HEAD.\"),\n  oldMode: z.string().nullable().describe(\"Git file mode at the base, or null for additions.\"),\n  newMode: z.string().nullable().describe(\"Git file mode at HEAD, or null for deletions.\"),\n  additions: z\n    .number()\n    .int()\n    .nonnegative()\n    .nullable()\n    .describe(\"Added lines; null when content is omitted.\"),\n  deletions: z\n    .number()\n    .int()\n    .nonnegative()\n    .nullable()\n    .describe(\"Deleted lines; null when content is omitted.\"),\n  patch: z\n    .string()\n    .max(100_000)\n    .describe(\"Unified patch; empty for binary, oversized, or mode-only changes.\"),\n  binary: z.boolean().describe(\"Content is binary or not valid UTF-8.\"),\n  omitted: z.boolean().describe(\"Content could not be displayed within inspection limits.\"),\n});\n\n/** One changed file in a bounded workspace comparison. */\nexport type WorkspaceDiffFile = Readonly<z.infer<typeof workspaceDiffFileSchema>>;\n\nconst workspaceDiffCommon = {\n  capturedAt: z.iso\n    .datetime()\n    .describe(\"Time the branch inspection began; all returned commit SHAs are pinned.\"),\n};\n\nconst readyWorkspaceDiffSchema = z.strictObject({\n  ...workspaceDiffCommon,\n  state: z.literal(\"ready\").describe(\"The workspace comparison completed.\"),\n  executionId: z.string().min(1).describe(\"Execution whose current branch was inspected.\"),\n  reason: z.never().optional().describe(\"Ready comparisons have no unavailability reason.\"),\n  base: gitCommitSchema.describe(\"Pinned comparison base.\"),\n  head: gitCommitSchema.describe(\"Pinned current branch HEAD.\"),\n  truncated: z.boolean().describe(\"Some files or patches were omitted because of response limits.\"),\n  files: z\n    .array(workspaceDiffFileSchema)\n    .max(200)\n    .describe(\"Bounded changed-file list; untracked files are excluded.\")\n    .readonly(),\n});\n\nconst unavailableWorkspaceDiffSchema = z.strictObject({\n  ...workspaceDiffCommon,\n  state: z.literal(\"unavailable\").describe(\"The workspace comparison could not be produced.\"),\n  executionId: z\n    .string()\n    .min(1)\n    .nullable()\n    .describe(\"Execution that could not be inspected, or null when no execution exists.\"),\n  reason: z.string().min(1).describe(\"Why the workspace comparison could not be read.\"),\n  base: z.null().describe(\"No comparison base is available.\"),\n  head: z.null().describe(\"No workspace HEAD is available.\"),\n  truncated: z.literal(false).describe(\"Unavailable comparisons never contain partial results.\"),\n  files: z\n    .array(workspaceDiffFileSchema)\n    .max(0)\n    .describe(\"Unavailable comparisons contain no changed files.\")\n    .readonly(),\n});\n\n/** Validates either a ready comparison with pinned commits or an unavailable response with a reason. */\nexport const workspaceDiffSchema = z.discriminatedUnion(\"state\", [\n  readyWorkspaceDiffSchema,\n  unavailableWorkspaceDiffSchema,\n]);\n\n/** A ready workspace comparison or an unavailable response carrying its reason. */\nexport type WorkspaceDiff = Readonly<z.infer<typeof workspaceDiffSchema>>;\n\n/** Identifies an execution and the reason its workspace comparison is unavailable. */\nexport interface UnavailableWorkspaceDiffInput {\n  readonly executionId: string | null;\n  readonly reason: string;\n}\n\n/** Creates an unavailable workspace-diff response with a stable empty projection. */\nexport function unavailableWorkspaceDiff(input: UnavailableWorkspaceDiffInput): WorkspaceDiff {\n  return {\n    executionId: input.executionId,\n    state: \"unavailable\",\n    reason: input.reason,\n    base: null,\n    head: null,\n    capturedAt: new Date().toISOString(),\n    truncated: false,\n    files: [],\n  };\n}\n"],"mappings":";;AAEA,MAAM,kBAAkB,EAAE,aAAa,EACrC,KAAK,EACF,OAAO,CAAC,CACR,MAAM,oBAAoB,CAAC,CAC3B,SAAS,qDAAqD,EACnE,CAAC;;AAGD,MAAa,0BAA0B,EAAE,aAAa;CACpD,MAAM,EAAE,OAAO,CAAC,CAAC,SAAS,oDAAoD;CAC9E,cAAc,EAAE,OAAO,CAAC,CAAC,SAAS,CAAC,CAAC,SAAS,2CAA2C;CACxF,QAAQ,EACL,KAAK;EAAC;EAAS;EAAW;EAAY;CAAS,CAAC,CAAC,CACjD,SAAS,yDAAyD;CACrE,SAAS,EAAE,OAAO,CAAC,CAAC,SAAS,CAAC,CAAC,SAAS,mDAAmD;CAC3F,SAAS,EAAE,OAAO,CAAC,CAAC,SAAS,CAAC,CAAC,SAAS,+CAA+C;CACvF,WAAW,EACR,OAAO,CAAC,CACR,IAAI,CAAC,CACL,YAAY,CAAC,CACb,SAAS,CAAC,CACV,SAAS,4CAA4C;CACxD,WAAW,EACR,OAAO,CAAC,CACR,IAAI,CAAC,CACL,YAAY,CAAC,CACb,SAAS,CAAC,CACV,SAAS,8CAA8C;CAC1D,OAAO,EACJ,OAAO,CAAC,CACR,IAAI,GAAO,CAAC,CACZ,SAAS,mEAAmE;CAC/E,QAAQ,EAAE,QAAQ,CAAC,CAAC,SAAS,uCAAuC;CACpE,SAAS,EAAE,QAAQ,CAAC,CAAC,SAAS,0DAA0D;AAC1F,CAAC;AAKD,MAAM,sBAAsB,EAC1B,YAAY,EAAE,IACX,SAAS,CAAC,CACV,SAAS,wEAAwE,EACtF;AAEA,MAAM,2BAA2B,EAAE,aAAa;CAC9C,GAAG;CACH,OAAO,EAAE,QAAQ,OAAO,CAAC,CAAC,SAAS,qCAAqC;CACxE,aAAa,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,+CAA+C;CACvF,QAAQ,EAAE,MAAM,CAAC,CAAC,SAAS,CAAC,CAAC,SAAS,kDAAkD;CACxF,MAAM,gBAAgB,SAAS,yBAAyB;CACxD,MAAM,gBAAgB,SAAS,6BAA6B;CAC5D,WAAW,EAAE,QAAQ,CAAC,CAAC,SAAS,gEAAgE;CAChG,OAAO,EACJ,MAAM,uBAAuB,CAAC,CAC9B,IAAI,GAAG,CAAC,CACR,SAAS,0DAA0D,CAAC,CACpE,SAAS;AACd,CAAC;AAED,MAAM,iCAAiC,EAAE,aAAa;CACpD,GAAG;CACH,OAAO,EAAE,QAAQ,aAAa,CAAC,CAAC,SAAS,iDAAiD;CAC1F,aAAa,EACV,OAAO,CAAC,CACR,IAAI,CAAC,CAAC,CACN,SAAS,CAAC,CACV,SAAS,0EAA0E;CACtF,QAAQ,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,iDAAiD;CACpF,MAAM,EAAE,KAAK,CAAC,CAAC,SAAS,kCAAkC;CAC1D,MAAM,EAAE,KAAK,CAAC,CAAC,SAAS,iCAAiC;CACzD,WAAW,EAAE,QAAQ,KAAK,CAAC,CAAC,SAAS,wDAAwD;CAC7F,OAAO,EACJ,MAAM,uBAAuB,CAAC,CAC9B,IAAI,CAAC,CAAC,CACN,SAAS,mDAAmD,CAAC,CAC7D,SAAS;AACd,CAAC;;AAGD,MAAa,sBAAsB,EAAE,mBAAmB,SAAS,CAC/D,0BACA,8BACF,CAAC;;AAYD,SAAgB,yBAAyB,OAAqD;CAC5F,OAAO;EACL,aAAa,MAAM;EACnB,OAAO;EACP,QAAQ,MAAM;EACd,MAAM;EACN,MAAM;EACN,6BAAY,IAAI,KAAK,EAAA,CAAE,YAAY;EACnC,WAAW;EACX,OAAO,CAAC;CACV;AACF"}

package/dist/workspace-files-git.d.mts

@@ -0,0 +1,15 @@
+//#region src/workspace-files-git.d.ts
+/** Configurable bounds for the supplied committed-Git file reader; custom adapters own their limits. */
+interface WorkspaceGitFilesOptions {
+  readonly maxFileBytes?: number;
+  readonly maxDirectoryEntries?: number;
+}
+/**
+ * Reads committed directories or files using Node.js and Git, without changing the checkout.
+ * Pass a JSON file containing root, path, optional revision, maxFileBytes, and maxDirectoryEntries.
+ * The caller adds its authorized executionId and validates the resulting WorkspaceFiles response.
+ */
+declare const workspaceGitFilesScript: string;
+//#endregion
+export { WorkspaceGitFilesOptions, workspaceGitFilesScript };
+//# sourceMappingURL=workspace-files-git.d.mts.map

package/dist/workspace-files-git.mjs

@@ -0,0 +1,61 @@
+//#region src/workspace-files-git.ts
+/**
+* Reads committed directories or files using Node.js and Git, without changing the checkout.
+* Pass a JSON file containing root, path, optional revision, maxFileBytes, and maxDirectoryEntries.
+* The caller adds its authorized executionId and validates the resulting WorkspaceFiles response.
+*/
+const workspaceGitFilesScript = String.raw`
+const fs = require('node:fs');
+const { execFileSync } = require('node:child_process');
+const input = JSON.parse(fs.readFileSync(process.argv[1], 'utf8'));
+const root = fs.realpathSync(input.root);
+const maxBytes = input.maxFileBytes ?? 2000000;
+const maxEntries = input.maxDirectoryEntries ?? 2000;
+const git = (args, encoding = 'utf8') => execFileSync('git', ['--no-optional-locks', '--literal-pathspecs', '-c', 'core.fsmonitor=false', ...args], { cwd: root, encoding, timeout: 10000, maxBuffer: Math.max(16000000, maxBytes + 1024), env: { ...process.env, GIT_OPTIONAL_LOCKS: '0' } });
+const safe = (p) => p === '' || (!p.includes('\\') && !p.includes('\0') && p.split('/').every(v => v && v !== '.' && v !== '..' && v.toLowerCase() !== '.git'));
+const unavailable = (reason) => ({ state: 'unavailable', path: input.path, reason });
+const entryType = (mode, type) => mode === '120000' ? 'symlink' : type === 'tree' ? 'directory' : type === 'commit' ? 'submodule' : 'file';
+function entries(ref, selected) {
+  return git(['ls-tree', '-z', '-l', ref, ...(selected ? ['--', selected] : [])]).split('\0').filter(Boolean).map(line => {
+    const m = /^(\d+) (\w+) ([a-f0-9]+)\s+(-|\d+)\t([\s\S]+)$/u.exec(line);
+    if (!m) throw new Error('Invalid tree entry');
+    return { path: m[5], type: entryType(m[1], m[2]), sha: m[3], size: m[4] === '-' ? null : Number(m[4]) };
+  });
+}
+function inspect() {
+  if (!safe(input.path) || !Number.isSafeInteger(maxBytes) || maxBytes < 1 || !Number.isSafeInteger(maxEntries) || maxEntries < 1) return unavailable('Invalid file inspection options.');
+  if (fs.realpathSync(git(['rev-parse', '--show-toplevel']).trim()) !== root) return unavailable('The workspace checkout is unavailable.');
+  const head = git(['rev-parse', '--verify', 'HEAD']).trim();
+  const revision = input.revision ?? head;
+  if (!/^[a-f0-9]{40,64}$/u.test(revision)) return unavailable('Select an immutable commit from this workspace.');
+  try { git(['merge-base', '--is-ancestor', revision, head]); }
+  catch { return unavailable('This revision is no longer part of the workspace history. Refresh files.'); }
+  const entry = input.path ? entries(revision, input.path).find(e => e.path === input.path) : null;
+  if (input.path && !entry) return unavailable('This path does not exist at the selected revision.');
+  if (!entry || entry.type === 'directory') {
+    const all = entries(entry ? entry.sha : revision);
+    const children = all.slice(0, maxEntries).map(e => ({ name: e.path, path: input.path ? input.path + '/' + e.path : e.path, type: e.type, size: e.size }));
+    if (children.some(e => !safe(e.path))) return unavailable('The directory contains an unsupported path.');
+    return { state: 'directory', path: input.path, revision, entries: children, truncated: all.length > maxEntries };
+  }
+  const metadata = { name: input.path.split('/').at(-1), path: input.path, type: entry.type, size: entry.size };
+  const result = content => ({ state: 'file', path: input.path, revision, entry: metadata, content });
+  if (entry.type === 'submodule') return result({ kind: 'unavailable', reason: 'Submodule contents belong to a separate repository.' });
+  if (entry.size === null || entry.size > maxBytes) return result({ kind: 'unavailable', reason: 'This file exceeds the configured ' + maxBytes.toLocaleString('en-US') + '-byte preview limit.' });
+  const bytes = git(['cat-file', 'blob', entry.sha], null);
+  if (bytes.length > maxBytes) return result({ kind: 'unavailable', reason: 'This file exceeds the configured preview limit.' });
+  const ext = input.path.split('.').at(-1).toLowerCase();
+  const mediaType = { png: 'image/png', jpg: 'image/jpeg', jpeg: 'image/jpeg', gif: 'image/gif', webp: 'image/webp', avif: 'image/avif', svg: 'image/svg+xml' }[ext];
+  if (mediaType && entry.type === 'file') return result({ kind: 'image', mediaType, base64: bytes.toString('base64') });
+  try {
+    if (bytes.includes(0)) throw new Error('Binary');
+    return result({ kind: 'text', text: new TextDecoder('utf-8', { fatal: true }).decode(bytes) });
+  } catch { return result({ kind: 'unavailable', reason: 'This binary format cannot be previewed.' }); }
+}
+try { process.stdout.write(JSON.stringify(inspect())); }
+catch { process.stdout.write(JSON.stringify(unavailable('The committed file could not be read. Refresh files after the current Git operation finishes.'))); }
+`;
+//#endregion
+export { workspaceGitFilesScript };
+
+//# sourceMappingURL=workspace-files-git.mjs.map

package/dist/workspace-files-git.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"workspace-files-git.mjs","names":[],"sources":["../src/workspace-files-git.ts"],"sourcesContent":["/** Configurable bounds for the supplied committed-Git file reader; custom adapters own their limits. */\nexport interface WorkspaceGitFilesOptions {\n  readonly maxFileBytes?: number;\n  readonly maxDirectoryEntries?: number;\n}\n\n/**\n * Reads committed directories or files using Node.js and Git, without changing the checkout.\n * Pass a JSON file containing root, path, optional revision, maxFileBytes, and maxDirectoryEntries.\n * The caller adds its authorized executionId and validates the resulting WorkspaceFiles response.\n */\nexport const workspaceGitFilesScript = String.raw`\nconst fs = require('node:fs');\nconst { execFileSync } = require('node:child_process');\nconst input = JSON.parse(fs.readFileSync(process.argv[1], 'utf8'));\nconst root = fs.realpathSync(input.root);\nconst maxBytes = input.maxFileBytes ?? 2000000;\nconst maxEntries = input.maxDirectoryEntries ?? 2000;\nconst git = (args, encoding = 'utf8') => execFileSync('git', ['--no-optional-locks', '--literal-pathspecs', '-c', 'core.fsmonitor=false', ...args], { cwd: root, encoding, timeout: 10000, maxBuffer: Math.max(16000000, maxBytes + 1024), env: { ...process.env, GIT_OPTIONAL_LOCKS: '0' } });\nconst safe = (p) => p === '' || (!p.includes('\\\\') && !p.includes('\\0') && p.split('/').every(v => v && v !== '.' && v !== '..' && v.toLowerCase() !== '.git'));\nconst unavailable = (reason) => ({ state: 'unavailable', path: input.path, reason });\nconst entryType = (mode, type) => mode === '120000' ? 'symlink' : type === 'tree' ? 'directory' : type === 'commit' ? 'submodule' : 'file';\nfunction entries(ref, selected) {\n  return git(['ls-tree', '-z', '-l', ref, ...(selected ? ['--', selected] : [])]).split('\\0').filter(Boolean).map(line => {\n    const m = /^(\\d+) (\\w+) ([a-f0-9]+)\\s+(-|\\d+)\\t([\\s\\S]+)$/u.exec(line);\n    if (!m) throw new Error('Invalid tree entry');\n    return { path: m[5], type: entryType(m[1], m[2]), sha: m[3], size: m[4] === '-' ? null : Number(m[4]) };\n  });\n}\nfunction inspect() {\n  if (!safe(input.path) || !Number.isSafeInteger(maxBytes) || maxBytes < 1 || !Number.isSafeInteger(maxEntries) || maxEntries < 1) return unavailable('Invalid file inspection options.');\n  if (fs.realpathSync(git(['rev-parse', '--show-toplevel']).trim()) !== root) return unavailable('The workspace checkout is unavailable.');\n  const head = git(['rev-parse', '--verify', 'HEAD']).trim();\n  const revision = input.revision ?? head;\n  if (!/^[a-f0-9]{40,64}$/u.test(revision)) return unavailable('Select an immutable commit from this workspace.');\n  try { git(['merge-base', '--is-ancestor', revision, head]); }\n  catch { return unavailable('This revision is no longer part of the workspace history. Refresh files.'); }\n  const entry = input.path ? entries(revision, input.path).find(e => e.path === input.path) : null;\n  if (input.path && !entry) return unavailable('This path does not exist at the selected revision.');\n  if (!entry || entry.type === 'directory') {\n    const all = entries(entry ? entry.sha : revision);\n    const children = all.slice(0, maxEntries).map(e => ({ name: e.path, path: input.path ? input.path + '/' + e.path : e.path, type: e.type, size: e.size }));\n    if (children.some(e => !safe(e.path))) return unavailable('The directory contains an unsupported path.');\n    return { state: 'directory', path: input.path, revision, entries: children, truncated: all.length > maxEntries };\n  }\n  const metadata = { name: input.path.split('/').at(-1), path: input.path, type: entry.type, size: entry.size };\n  const result = content => ({ state: 'file', path: input.path, revision, entry: metadata, content });\n  if (entry.type === 'submodule') return result({ kind: 'unavailable', reason: 'Submodule contents belong to a separate repository.' });\n  if (entry.size === null || entry.size > maxBytes) return result({ kind: 'unavailable', reason: 'This file exceeds the configured ' + maxBytes.toLocaleString('en-US') + '-byte preview limit.' });\n  const bytes = git(['cat-file', 'blob', entry.sha], null);\n  if (bytes.length > maxBytes) return result({ kind: 'unavailable', reason: 'This file exceeds the configured preview limit.' });\n  const ext = input.path.split('.').at(-1).toLowerCase();\n  const mediaType = { png: 'image/png', jpg: 'image/jpeg', jpeg: 'image/jpeg', gif: 'image/gif', webp: 'image/webp', avif: 'image/avif', svg: 'image/svg+xml' }[ext];\n  if (mediaType && entry.type === 'file') return result({ kind: 'image', mediaType, base64: bytes.toString('base64') });\n  try {\n    if (bytes.includes(0)) throw new Error('Binary');\n    return result({ kind: 'text', text: new TextDecoder('utf-8', { fatal: true }).decode(bytes) });\n  } catch { return result({ kind: 'unavailable', reason: 'This binary format cannot be previewed.' }); }\n}\ntry { process.stdout.write(JSON.stringify(inspect())); }\ncatch { process.stdout.write(JSON.stringify(unavailable('The committed file could not be read. Refresh files after the current Git operation finishes.'))); }\n`;\n"],"mappings":";;;;;;AAWA,MAAa,0BAA0B,OAAO,GAAG"}

package/dist/workspace-files.d.mts

@@ -0,0 +1,107 @@
+import { z } from "zod";
+//#region src/workspace-files.d.ts
+/** Validates a workspace-relative path, with the empty string identifying the root. */
+declare const workspacePathSchema: z.ZodString;
+/** Validates a directory or file inspection at an optional provider-owned immutable revision. */
+declare const workspaceFilesRequestSchema: z.ZodObject<{
+  path: z.ZodDefault<z.ZodString>;
+  revision: z.ZodOptional<z.ZodString>;
+}, z.core.$strict>;
+/** A directory or file inspection at an optional provider-owned immutable revision. */
+type WorkspaceFilesRequest = Readonly<z.input<typeof workspaceFilesRequestSchema>>;
+/** Validates an immediate child of a workspace directory. */
+declare const workspaceFileEntrySchema: z.ZodObject<{
+  name: z.ZodString;
+  path: z.ZodString;
+  type: z.ZodEnum<{
+    file: "file";
+    directory: "directory";
+    symlink: "symlink";
+    submodule: "submodule";
+  }>;
+  size: z.ZodNullable<z.ZodNumber>;
+}, z.core.$strict>;
+/** An immediate child of a workspace directory. */
+type WorkspaceFileEntry = Readonly<z.infer<typeof workspaceFileEntrySchema>>;
+/** Validates text, an image, or an explicit explanation for an undisplayable file. */
+declare const workspaceFileContentSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
+  kind: z.ZodLiteral<"text">;
+  text: z.ZodString;
+}, z.core.$strict>, z.ZodObject<{
+  kind: z.ZodLiteral<"image">;
+  mediaType: z.ZodEnum<{
+    "image/png": "image/png";
+    "image/jpeg": "image/jpeg";
+    "image/webp": "image/webp";
+    "image/gif": "image/gif";
+    "image/avif": "image/avif";
+    "image/svg+xml": "image/svg+xml";
+  }>;
+  base64: z.ZodString;
+}, z.core.$strict>, z.ZodObject<{
+  kind: z.ZodLiteral<"unavailable">;
+  reason: z.ZodString;
+}, z.core.$strict>], "kind">;
+/** Validates a pinned directory listing, a complete file, or an unavailable workspace response. */
+declare const workspaceFilesSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
+  state: z.ZodLiteral<"directory">;
+  revision: z.ZodString;
+  entries: z.ZodReadonly<z.ZodArray<z.ZodObject<{
+    name: z.ZodString;
+    path: z.ZodString;
+    type: z.ZodEnum<{
+      file: "file";
+      directory: "directory";
+      symlink: "symlink";
+      submodule: "submodule";
+    }>;
+    size: z.ZodNullable<z.ZodNumber>;
+  }, z.core.$strict>>>;
+  truncated: z.ZodBoolean;
+  executionId: z.ZodNullable<z.ZodString>;
+  path: z.ZodString;
+}, z.core.$strict>, z.ZodObject<{
+  state: z.ZodLiteral<"file">;
+  revision: z.ZodString;
+  entry: z.ZodObject<{
+    name: z.ZodString;
+    path: z.ZodString;
+    type: z.ZodEnum<{
+      file: "file";
+      directory: "directory";
+      symlink: "symlink";
+      submodule: "submodule";
+    }>;
+    size: z.ZodNullable<z.ZodNumber>;
+  }, z.core.$strict>;
+  content: z.ZodDiscriminatedUnion<[z.ZodObject<{
+    kind: z.ZodLiteral<"text">;
+    text: z.ZodString;
+  }, z.core.$strict>, z.ZodObject<{
+    kind: z.ZodLiteral<"image">;
+    mediaType: z.ZodEnum<{
+      "image/png": "image/png";
+      "image/jpeg": "image/jpeg";
+      "image/webp": "image/webp";
+      "image/gif": "image/gif";
+      "image/avif": "image/avif";
+      "image/svg+xml": "image/svg+xml";
+    }>;
+    base64: z.ZodString;
+  }, z.core.$strict>, z.ZodObject<{
+    kind: z.ZodLiteral<"unavailable">;
+    reason: z.ZodString;
+  }, z.core.$strict>], "kind">;
+  executionId: z.ZodNullable<z.ZodString>;
+  path: z.ZodString;
+}, z.core.$strict>, z.ZodObject<{
+  state: z.ZodLiteral<"unavailable">;
+  reason: z.ZodString;
+  executionId: z.ZodNullable<z.ZodString>;
+  path: z.ZodString;
+}, z.core.$strict>], "state">;
+/** A pinned directory listing, complete file, or unavailable workspace response. */
+type WorkspaceFiles = Readonly<z.infer<typeof workspaceFilesSchema>>;
+//#endregion
+export { WorkspaceFileEntry, WorkspaceFiles, WorkspaceFilesRequest, workspaceFileContentSchema, workspaceFileEntrySchema, workspaceFilesRequestSchema, workspaceFilesSchema, workspacePathSchema };
+//# sourceMappingURL=workspace-files.d.mts.map

package/dist/workspace-files.mjs

@@ -0,0 +1,74 @@
+import { z } from "zod";
+//#region src/workspace-files.ts
+/** Validates a workspace-relative path, with the empty string identifying the root. */
+const workspacePathSchema = z.string().refine((path) => path === "" || !path.includes("\\") && !path.includes("\0") && path.split("/").every((part) => part !== "" && part !== "." && part !== ".." && part.toLowerCase() !== ".git"), "Use a workspace-relative path without traversal or Git metadata");
+/** Validates a directory or file inspection at an optional provider-owned immutable revision. */
+const workspaceFilesRequestSchema = z.strictObject({
+	path: workspacePathSchema.default("").describe("Workspace-relative file or directory; empty for root."),
+	revision: z.string().min(1).optional().describe("Opaque immutable revision; absent selects the current revision.")
+});
+/** Validates an immediate child of a workspace directory. */
+const workspaceFileEntrySchema = z.strictObject({
+	name: z.string().min(1).describe("Display name within its parent directory."),
+	path: workspacePathSchema.describe("Workspace-relative entry path."),
+	type: z.enum([
+		"file",
+		"directory",
+		"symlink",
+		"submodule"
+	]).describe("Entry kind; links are never followed."),
+	size: z.number().int().nonnegative().nullable().describe("Byte length when known; null for directories or unknown sizes.")
+});
+/** Validates text, an image, or an explicit explanation for an undisplayable file. */
+const workspaceFileContentSchema = z.discriminatedUnion("kind", [
+	z.strictObject({
+		kind: z.literal("text").describe("Complete UTF-8 text, including an empty file."),
+		text: z.string().describe("Complete file contents; never a silently truncated prefix.")
+	}),
+	z.strictObject({
+		kind: z.literal("image").describe("Image bytes rendered in an image element, never as HTML."),
+		mediaType: z.enum([
+			"image/png",
+			"image/jpeg",
+			"image/gif",
+			"image/webp",
+			"image/avif",
+			"image/svg+xml"
+		]).describe("Image media type."),
+		base64: z.string().regex(/^(?:[A-Za-z0-9+/]{4})*(?:[A-Za-z0-9+/]{2}==|[A-Za-z0-9+/]{3}=)?$/u).describe("Base64-encoded image bytes.")
+	}),
+	z.strictObject({
+		kind: z.literal("unavailable").describe("File exists but its content cannot be displayed."),
+		reason: z.string().min(1).describe("Why content is unavailable, such as a size limit or binary format.")
+	})
+]);
+const common = {
+	executionId: z.string().min(1).nullable().describe("Authorized execution whose workspace is being inspected."),
+	path: workspacePathSchema.describe("Requested workspace-relative path.")
+};
+/** Validates a pinned directory listing, a complete file, or an unavailable workspace response. */
+const workspaceFilesSchema = z.discriminatedUnion("state", [
+	z.strictObject({
+		...common,
+		state: z.literal("directory").describe("A directory listing at the returned revision."),
+		revision: z.string().min(1).describe("Immutable provider-owned revision for subsequent reads."),
+		entries: z.array(workspaceFileEntrySchema).readonly().describe("Immediate directory children."),
+		truncated: z.boolean().describe("The provider's configured directory limit omitted entries.")
+	}),
+	z.strictObject({
+		...common,
+		state: z.literal("file").describe("A file at the returned revision."),
+		revision: z.string().min(1).describe("Immutable provider-owned revision for subsequent reads."),
+		entry: workspaceFileEntrySchema.describe("Metadata for the requested file."),
+		content: workspaceFileContentSchema.describe("Complete contents or an explicit unavailability reason.")
+	}),
+	z.strictObject({
+		...common,
+		state: z.literal("unavailable").describe("The requested workspace, revision, or path cannot be read."),
+		reason: z.string().min(1).describe("Why the requested inspection is unavailable.")
+	})
+]);
+//#endregion
+export { workspaceFileContentSchema, workspaceFileEntrySchema, workspaceFilesRequestSchema, workspaceFilesSchema, workspacePathSchema };
+
+//# sourceMappingURL=workspace-files.mjs.map

package/dist/workspace-files.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"workspace-files.mjs","names":[],"sources":["../src/workspace-files.ts"],"sourcesContent":["import { z } from \"zod\";\n\n/** Validates a workspace-relative path, with the empty string identifying the root. */\nexport const workspacePathSchema = z\n  .string()\n  .refine(\n    (path) =>\n      path === \"\" ||\n      (!path.includes(\"\\\\\") &&\n        !path.includes(\"\\0\") &&\n        path\n          .split(\"/\")\n          .every(\n            (part) => part !== \"\" && part !== \".\" && part !== \"..\" && part.toLowerCase() !== \".git\",\n          )),\n    \"Use a workspace-relative path without traversal or Git metadata\",\n  );\n\n/** Validates a directory or file inspection at an optional provider-owned immutable revision. */\nexport const workspaceFilesRequestSchema = z.strictObject({\n  path: workspacePathSchema\n    .default(\"\")\n    .describe(\"Workspace-relative file or directory; empty for root.\"),\n  revision: z\n    .string()\n    .min(1)\n    .optional()\n    .describe(\"Opaque immutable revision; absent selects the current revision.\"),\n});\n\n/** A directory or file inspection at an optional provider-owned immutable revision. */\nexport type WorkspaceFilesRequest = Readonly<z.input<typeof workspaceFilesRequestSchema>>;\n\n/** Validates an immediate child of a workspace directory. */\nexport const workspaceFileEntrySchema = z.strictObject({\n  name: z.string().min(1).describe(\"Display name within its parent directory.\"),\n  path: workspacePathSchema.describe(\"Workspace-relative entry path.\"),\n  type: z\n    .enum([\"file\", \"directory\", \"symlink\", \"submodule\"])\n    .describe(\"Entry kind; links are never followed.\"),\n  size: z\n    .number()\n    .int()\n    .nonnegative()\n    .nullable()\n    .describe(\"Byte length when known; null for directories or unknown sizes.\"),\n});\n\n/** An immediate child of a workspace directory. */\nexport type WorkspaceFileEntry = Readonly<z.infer<typeof workspaceFileEntrySchema>>;\n\n/** Validates text, an image, or an explicit explanation for an undisplayable file. */\nexport const workspaceFileContentSchema = z.discriminatedUnion(\"kind\", [\n  z.strictObject({\n    kind: z.literal(\"text\").describe(\"Complete UTF-8 text, including an empty file.\"),\n    text: z.string().describe(\"Complete file contents; never a silently truncated prefix.\"),\n  }),\n  z.strictObject({\n    kind: z.literal(\"image\").describe(\"Image bytes rendered in an image element, never as HTML.\"),\n    mediaType: z\n      .enum([\"image/png\", \"image/jpeg\", \"image/gif\", \"image/webp\", \"image/avif\", \"image/svg+xml\"])\n      .describe(\"Image media type.\"),\n    base64: z\n      .string()\n      .regex(/^(?:[A-Za-z0-9+/]{4})*(?:[A-Za-z0-9+/]{2}==|[A-Za-z0-9+/]{3}=)?$/u)\n      .describe(\"Base64-encoded image bytes.\"),\n  }),\n  z.strictObject({\n    kind: z.literal(\"unavailable\").describe(\"File exists but its content cannot be displayed.\"),\n    reason: z\n      .string()\n      .min(1)\n      .describe(\"Why content is unavailable, such as a size limit or binary format.\"),\n  }),\n]);\n\nconst common = {\n  executionId: z\n    .string()\n    .min(1)\n    .nullable()\n    .describe(\"Authorized execution whose workspace is being inspected.\"),\n  path: workspacePathSchema.describe(\"Requested workspace-relative path.\"),\n};\n\n/** Validates a pinned directory listing, a complete file, or an unavailable workspace response. */\nexport const workspaceFilesSchema = z.discriminatedUnion(\"state\", [\n  z.strictObject({\n    ...common,\n    state: z.literal(\"directory\").describe(\"A directory listing at the returned revision.\"),\n    revision: z.string().min(1).describe(\"Immutable provider-owned revision for subsequent reads.\"),\n    entries: z.array(workspaceFileEntrySchema).readonly().describe(\"Immediate directory children.\"),\n    truncated: z.boolean().describe(\"The provider's configured directory limit omitted entries.\"),\n  }),\n  z.strictObject({\n    ...common,\n    state: z.literal(\"file\").describe(\"A file at the returned revision.\"),\n    revision: z.string().min(1).describe(\"Immutable provider-owned revision for subsequent reads.\"),\n    entry: workspaceFileEntrySchema.describe(\"Metadata for the requested file.\"),\n    content: workspaceFileContentSchema.describe(\n      \"Complete contents or an explicit unavailability reason.\",\n    ),\n  }),\n  z.strictObject({\n    ...common,\n    state: z\n      .literal(\"unavailable\")\n      .describe(\"The requested workspace, revision, or path cannot be read.\"),\n    reason: z.string().min(1).describe(\"Why the requested inspection is unavailable.\"),\n  }),\n]);\n\n/** A pinned directory listing, complete file, or unavailable workspace response. */\nexport type WorkspaceFiles = Readonly<z.infer<typeof workspaceFilesSchema>>;\n"],"mappings":";;;AAGA,MAAa,sBAAsB,EAChC,OAAO,CAAC,CACR,QACE,SACC,SAAS,MACR,CAAC,KAAK,SAAS,IAAI,KAClB,CAAC,KAAK,SAAS,IAAI,KACnB,KACG,MAAM,GAAG,CAAC,CACV,OACE,SAAS,SAAS,MAAM,SAAS,OAAO,SAAS,QAAQ,KAAK,YAAY,MAAM,MACnF,GACN,iEACF;;AAGF,MAAa,8BAA8B,EAAE,aAAa;CACxD,MAAM,oBACH,QAAQ,EAAE,CAAC,CACX,SAAS,uDAAuD;CACnE,UAAU,EACP,OAAO,CAAC,CACR,IAAI,CAAC,CAAC,CACN,SAAS,CAAC,CACV,SAAS,iEAAiE;AAC/E,CAAC;;AAMD,MAAa,2BAA2B,EAAE,aAAa;CACrD,MAAM,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,2CAA2C;CAC5E,MAAM,oBAAoB,SAAS,gCAAgC;CACnE,MAAM,EACH,KAAK;EAAC;EAAQ;EAAa;EAAW;CAAW,CAAC,CAAC,CACnD,SAAS,uCAAuC;CACnD,MAAM,EACH,OAAO,CAAC,CACR,IAAI,CAAC,CACL,YAAY,CAAC,CACb,SAAS,CAAC,CACV,SAAS,gEAAgE;AAC9E,CAAC;;AAMD,MAAa,6BAA6B,EAAE,mBAAmB,QAAQ;CACrE,EAAE,aAAa;EACb,MAAM,EAAE,QAAQ,MAAM,CAAC,CAAC,SAAS,+CAA+C;EAChF,MAAM,EAAE,OAAO,CAAC,CAAC,SAAS,4DAA4D;CACxF,CAAC;CACD,EAAE,aAAa;EACb,MAAM,EAAE,QAAQ,OAAO,CAAC,CAAC,SAAS,0DAA0D;EAC5F,WAAW,EACR,KAAK;GAAC;GAAa;GAAc;GAAa;GAAc;GAAc;EAAe,CAAC,CAAC,CAC3F,SAAS,mBAAmB;EAC/B,QAAQ,EACL,OAAO,CAAC,CACR,MAAM,mEAAmE,CAAC,CAC1E,SAAS,6BAA6B;CAC3C,CAAC;CACD,EAAE,aAAa;EACb,MAAM,EAAE,QAAQ,aAAa,CAAC,CAAC,SAAS,kDAAkD;EAC1F,QAAQ,EACL,OAAO,CAAC,CACR,IAAI,CAAC,CAAC,CACN,SAAS,oEAAoE;CAClF,CAAC;AACH,CAAC;AAED,MAAM,SAAS;CACb,aAAa,EACV,OAAO,CAAC,CACR,IAAI,CAAC,CAAC,CACN,SAAS,CAAC,CACV,SAAS,0DAA0D;CACtE,MAAM,oBAAoB,SAAS,oCAAoC;AACzE;;AAGA,MAAa,uBAAuB,EAAE,mBAAmB,SAAS;CAChE,EAAE,aAAa;EACb,GAAG;EACH,OAAO,EAAE,QAAQ,WAAW,CAAC,CAAC,SAAS,+CAA+C;EACtF,UAAU,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,yDAAyD;EAC9F,SAAS,EAAE,MAAM,wBAAwB,CAAC,CAAC,SAAS,CAAC,CAAC,SAAS,+BAA+B;EAC9F,WAAW,EAAE,QAAQ,CAAC,CAAC,SAAS,4DAA4D;CAC9F,CAAC;CACD,EAAE,aAAa;EACb,GAAG;EACH,OAAO,EAAE,QAAQ,MAAM,CAAC,CAAC,SAAS,kCAAkC;EACpE,UAAU,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,yDAAyD;EAC9F,OAAO,yBAAyB,SAAS,kCAAkC;EAC3E,SAAS,2BAA2B,SAClC,yDACF;CACF,CAAC;CACD,EAAE,aAAa;EACb,GAAG;EACH,OAAO,EACJ,QAAQ,aAAa,CAAC,CACtB,SAAS,4DAA4D;EACxE,QAAQ,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,8CAA8C;CACnF,CAAC;AACH,CAAC"}

package/dist/workspace-snapshot.d.mts

@@ -0,0 +1,26 @@
+import { z } from "zod";
+//#region src/workspace-snapshot.d.ts
+/** Validates the bounded committed-tree snapshot captured inside an execution workspace. */
+declare const workspaceSnapshotSchema: z.ZodObject<{
+  truncated: z.ZodBoolean;
+  files: z.ZodReadonly<z.ZodArray<z.ZodObject<{
+    path: z.ZodString;
+    oldMode: z.ZodNullable<z.ZodString>;
+    newMode: z.ZodNullable<z.ZodString>;
+    oldSha: z.ZodNullable<z.ZodString>;
+    newSha: z.ZodNullable<z.ZodString>;
+    content: z.ZodNullable<z.ZodString>;
+    binary: z.ZodBoolean;
+    omitted: z.ZodBoolean;
+  }, z.core.$strip>>>;
+}, z.core.$strip>;
+/** A bounded committed-tree snapshot captured inside an execution workspace. */
+type WorkspaceSnapshot = z.infer<typeof workspaceSnapshotSchema>;
+/**
+ * Captures a bounded committed-tree snapshot using only sandbox Node.js built-ins without
+ * writing the checkout or Git index.
+ */
+declare const workspaceSnapshotScript: string;
+//#endregion
+export { WorkspaceSnapshot, workspaceSnapshotSchema, workspaceSnapshotScript };
+//# sourceMappingURL=workspace-snapshot.d.mts.map

package/dist/workspace-snapshot.mjs

@@ -0,0 +1,80 @@
+import { z } from "zod";
+//#region src/workspace-snapshot.ts
+/** Validates the bounded committed-tree snapshot captured inside an execution workspace. */
+const workspaceSnapshotSchema = z.object({
+	truncated: z.boolean(),
+	files: z.array(z.object({
+		path: z.string(),
+		oldMode: z.string().nullable(),
+		newMode: z.string().nullable(),
+		oldSha: z.string().nullable(),
+		newSha: z.string().nullable(),
+		content: z.string().max(2e5).nullable(),
+		binary: z.boolean(),
+		omitted: z.boolean()
+	})).max(200).readonly()
+});
+/**
+* Captures a bounded committed-tree snapshot using only sandbox Node.js built-ins without
+* writing the checkout or Git index.
+*/
+const workspaceSnapshotScript = String.raw`
+const fs = require('node:fs');
+const path = require('node:path');
+const { execFileSync } = require('node:child_process');
+const input = JSON.parse(fs.readFileSync(process.argv[1], 'utf8'));
+const root = input.root;
+const started = Date.now();
+const runGit = (args, encoding) => execFileSync('git', ['--no-optional-locks', '-c', 'core.fsmonitor=false', ...args], { cwd: root, timeout: 10000, maxBuffer: 16000000, encoding, env: { ...process.env, GIT_OPTIONAL_LOCKS: '0' } });
+const git = (args) => runGit(args, 'utf8');
+const safe = (p) => p && !path.isAbsolute(p) && !p.split('/').some((v) => v === '..' || v === '.' || v.toLowerCase() === '.git' || !v);
+function tree(ref) {
+  const entries = new Map();
+  for (const line of git(['ls-tree', '-rz', '-r', '--long', '--full-tree', ref]).split('\0').filter(Boolean)) {
+    const match = /^(\d+) (\w+) ([a-f0-9]+)\s+(-|\d+)\t([\s\S]+)$/u.exec(line);
+    if (!match || !safe(match[5])) throw new Error('Invalid repository tree');
+    entries.set(match[5], { mode: match[1], type: match[2], sha: match[3], size: match[4] === '-' ? null : Number(match[4]) });
+  }
+  return entries;
+}
+function entryBytes(entry) {
+  if (!entry) return Buffer.alloc(0);
+  if (entry.type !== 'blob' || entry.size === null || entry.size > 200000) return null;
+  return runGit(['cat-file', 'blob', entry.sha], null);
+}
+function text(data) {
+  if (data === null) return { content: null, binary: false };
+  if (data.includes(0)) return { content: null, binary: true };
+  try { return { content: new TextDecoder('utf-8', { fatal: true }).decode(data), binary: false }; }
+  catch { return { content: null, binary: true }; }
+}
+try {
+  if (fs.realpathSync(root) !== root || !fs.lstatSync(path.join(root, '.git')).isDirectory()) throw new Error('Workspace checkout unavailable');
+  if (!/^[a-f0-9]{40,64}$/u.test(input.headSha) || git(['rev-parse', '--verify', input.headSha + '^{commit}']).trim() !== input.headSha) throw new Error('Invalid branch head');
+  const base = new Map(input.tree.map((file) => [file.path, file]));
+  const head = tree(input.headSha);
+  const paths = [...new Set([...base.keys(), ...head.keys()])].sort();
+  const files = [];
+  let truncated = false, bytes = 0;
+  for (const p of paths) {
+    if (!safe(p)) throw new Error('Invalid repository path');
+    if (Date.now() - started > 15000 || files.length >= 200) { truncated = true; break; }
+    const before = base.get(p);
+    const after = head.get(p);
+    if (before && after && before.sha === after.sha && before.mode === after.mode) continue;
+    const decoded = text(entryBytes(after));
+    if (decoded.content !== null) bytes += Buffer.byteLength(decoded.content);
+    const omitted = Boolean(after && decoded.content === null && !decoded.binary) || bytes > 2000000 || before?.mode === '160000' || after?.mode === '160000';
+    files.push({ path: p, oldMode: before?.mode ?? null, newMode: after?.mode ?? null, oldSha: before?.sha ?? null, newSha: after?.sha ?? null, content: omitted ? null : decoded.content, binary: decoded.binary, omitted });
+    if (bytes > 2000000) truncated = true;
+  }
+  process.stdout.write(JSON.stringify({ files, truncated }));
+} catch (error) {
+  process.stderr.write('Workspace inspection failed\n');
+  process.exitCode = 1;
+}
+`;
+//#endregion
+export { workspaceSnapshotSchema, workspaceSnapshotScript };
+
+//# sourceMappingURL=workspace-snapshot.mjs.map

package/dist/workspace-snapshot.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"workspace-snapshot.mjs","names":[],"sources":["../src/workspace-snapshot.ts"],"sourcesContent":["import { z } from \"zod\";\n\n/** Validates the bounded committed-tree snapshot captured inside an execution workspace. */\nexport const workspaceSnapshotSchema = z.object({\n  truncated: z.boolean(),\n  files: z\n    .array(\n      z.object({\n        path: z.string(),\n        oldMode: z.string().nullable(),\n        newMode: z.string().nullable(),\n        oldSha: z.string().nullable(),\n        newSha: z.string().nullable(),\n        content: z.string().max(200_000).nullable(),\n        binary: z.boolean(),\n        omitted: z.boolean(),\n      }),\n    )\n    .max(200)\n    .readonly(),\n});\n\n/** A bounded committed-tree snapshot captured inside an execution workspace. */\nexport type WorkspaceSnapshot = z.infer<typeof workspaceSnapshotSchema>;\n\n/**\n * Captures a bounded committed-tree snapshot using only sandbox Node.js built-ins without\n * writing the checkout or Git index.\n */\nexport const workspaceSnapshotScript = String.raw`\nconst fs = require('node:fs');\nconst path = require('node:path');\nconst { execFileSync } = require('node:child_process');\nconst input = JSON.parse(fs.readFileSync(process.argv[1], 'utf8'));\nconst root = input.root;\nconst started = Date.now();\nconst runGit = (args, encoding) => execFileSync('git', ['--no-optional-locks', '-c', 'core.fsmonitor=false', ...args], { cwd: root, timeout: 10000, maxBuffer: 16000000, encoding, env: { ...process.env, GIT_OPTIONAL_LOCKS: '0' } });\nconst git = (args) => runGit(args, 'utf8');\nconst safe = (p) => p && !path.isAbsolute(p) && !p.split('/').some((v) => v === '..' || v === '.' || v.toLowerCase() === '.git' || !v);\nfunction tree(ref) {\n  const entries = new Map();\n  for (const line of git(['ls-tree', '-rz', '-r', '--long', '--full-tree', ref]).split('\\0').filter(Boolean)) {\n    const match = /^(\\d+) (\\w+) ([a-f0-9]+)\\s+(-|\\d+)\\t([\\s\\S]+)$/u.exec(line);\n    if (!match || !safe(match[5])) throw new Error('Invalid repository tree');\n    entries.set(match[5], { mode: match[1], type: match[2], sha: match[3], size: match[4] === '-' ? null : Number(match[4]) });\n  }\n  return entries;\n}\nfunction entryBytes(entry) {\n  if (!entry) return Buffer.alloc(0);\n  if (entry.type !== 'blob' || entry.size === null || entry.size > 200000) return null;\n  return runGit(['cat-file', 'blob', entry.sha], null);\n}\nfunction text(data) {\n  if (data === null) return { content: null, binary: false };\n  if (data.includes(0)) return { content: null, binary: true };\n  try { return { content: new TextDecoder('utf-8', { fatal: true }).decode(data), binary: false }; }\n  catch { return { content: null, binary: true }; }\n}\ntry {\n  if (fs.realpathSync(root) !== root || !fs.lstatSync(path.join(root, '.git')).isDirectory()) throw new Error('Workspace checkout unavailable');\n  if (!/^[a-f0-9]{40,64}$/u.test(input.headSha) || git(['rev-parse', '--verify', input.headSha + '^{commit}']).trim() !== input.headSha) throw new Error('Invalid branch head');\n  const base = new Map(input.tree.map((file) => [file.path, file]));\n  const head = tree(input.headSha);\n  const paths = [...new Set([...base.keys(), ...head.keys()])].sort();\n  const files = [];\n  let truncated = false, bytes = 0;\n  for (const p of paths) {\n    if (!safe(p)) throw new Error('Invalid repository path');\n    if (Date.now() - started > 15000 || files.length >= 200) { truncated = true; break; }\n    const before = base.get(p);\n    const after = head.get(p);\n    if (before && after && before.sha === after.sha && before.mode === after.mode) continue;\n    const decoded = text(entryBytes(after));\n    if (decoded.content !== null) bytes += Buffer.byteLength(decoded.content);\n    const omitted = Boolean(after && decoded.content === null && !decoded.binary) || bytes > 2000000 || before?.mode === '160000' || after?.mode === '160000';\n    files.push({ path: p, oldMode: before?.mode ?? null, newMode: after?.mode ?? null, oldSha: before?.sha ?? null, newSha: after?.sha ?? null, content: omitted ? null : decoded.content, binary: decoded.binary, omitted });\n    if (bytes > 2000000) truncated = true;\n  }\n  process.stdout.write(JSON.stringify({ files, truncated }));\n} catch (error) {\n  process.stderr.write('Workspace inspection failed\\n');\n  process.exitCode = 1;\n}\n`;\n"],"mappings":";;;AAGA,MAAa,0BAA0B,EAAE,OAAO;CAC9C,WAAW,EAAE,QAAQ;CACrB,OAAO,EACJ,MACC,EAAE,OAAO;EACP,MAAM,EAAE,OAAO;EACf,SAAS,EAAE,OAAO,CAAC,CAAC,SAAS;EAC7B,SAAS,EAAE,OAAO,CAAC,CAAC,SAAS;EAC7B,QAAQ,EAAE,OAAO,CAAC,CAAC,SAAS;EAC5B,QAAQ,EAAE,OAAO,CAAC,CAAC,SAAS;EAC5B,SAAS,EAAE,OAAO,CAAC,CAAC,IAAI,GAAO,CAAC,CAAC,SAAS;EAC1C,QAAQ,EAAE,QAAQ;EAClB,SAAS,EAAE,QAAQ;CACrB,CAAC,CACH,CAAC,CACA,IAAI,GAAG,CAAC,CACR,SAAS;AACd,CAAC;;;;;AASD,MAAa,0BAA0B,OAAO,GAAG"}