@xenosystem/agent-interface-contract 0.1.25 → 0.1.27

package/dist/workspaceFile.js

@@ -0,0 +1,42 @@
+import { isAgentHostClientIdentity } from './index.js';
+/** Shared executable wire validation. This does not grant filesystem authority. */
+export const WORKSPACE_FILE_TEXT_MAX_BYTES = 1024 * 1024;
+const record = (value) => !!value && typeof value === 'object' && !Array.isArray(value);
+const boundedText = (value, max) => typeof value === 'string' && value.trim().length > 0 && value.length <= max && !/[\x00-\x1f\x7f]/.test(value);
+const allowedFields = new Set(['client', 'allowedDirectories', 'conversationId', 'workspaceId', 'teamId', 'agentId', 'path', 'content', 'expectedContent']);
+/** Empty text is valid; missing/falsy non-string content is never an empty-file request. */
+export function isBoundedWorkspaceFileText(value) {
+    if (typeof value !== 'string' || value.length > WORKSPACE_FILE_TEXT_MAX_BYTES)
+        return false;
+    // UTF-8 cannot faithfully encode unpaired UTF-16 surrogates. Do not silently
+    // replace user bytes with U+FFFD while reporting a successful file save.
+    for (let index = 0; index < value.length; index += 1) {
+        const code = value.charCodeAt(index);
+        if (code >= 0xd800 && code <= 0xdbff) {
+            const low = value.charCodeAt(++index);
+            if (!(low >= 0xdc00 && low <= 0xdfff))
+                return false;
+        }
+        else if (code >= 0xdc00 && code <= 0xdfff)
+            return false;
+    }
+    return new TextEncoder().encode(value).byteLength <= WORKSPACE_FILE_TEXT_MAX_BYTES;
+}
+export function isAgentWorkspaceFileWriteRequest(value) {
+    if (!record(value) || Object.keys(value).some(key => !allowedFields.has(key)))
+        return false;
+    const client = value.client;
+    if (!isAgentHostClientIdentity(client) || !record(client)
+        || Object.keys(client).some(key => !['clientId', 'clientVersion', 'instanceId', 'surface'].includes(key))
+        || !['clientId', 'clientVersion', 'instanceId'].every(key => boundedText(client[key], 256)))
+        return false;
+    if (!boundedText(value.path, 32767) || !isBoundedWorkspaceFileText(value.content))
+        return false;
+    if (value.expectedContent !== undefined && value.expectedContent !== null && !isBoundedWorkspaceFileText(value.expectedContent))
+        return false;
+    if (!Array.isArray(value.allowedDirectories) || value.allowedDirectories.length > 256
+        || !value.allowedDirectories.every(path => boundedText(path, 32767)))
+        return false;
+    return ['conversationId', 'workspaceId', 'teamId', 'agentId'].every(key => value[key] === undefined || boundedText(value[key], 256));
+}
+//# sourceMappingURL=workspaceFile.js.map

package/dist/workspaceFile.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"workspaceFile.js","sourceRoot":"","sources":["../src/workspaceFile.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,yBAAyB,EAAuC,MAAM,YAAY,CAAA;AAE3F,mFAAmF;AACnF,MAAM,CAAC,MAAM,6BAA6B,GAAG,IAAI,GAAG,IAAI,CAAA;AACxD,MAAM,MAAM,GAAG,CAAC,KAAc,EAAoC,EAAE,CAAC,CAAC,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAA;AAClI,MAAM,WAAW,GAAG,CAAC,KAAc,EAAE,GAAW,EAAmB,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,IAAI,KAAK,CAAC,MAAM,IAAI,GAAG,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;AACnL,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,CAAC,QAAQ,EAAE,oBAAoB,EAAE,gBAAgB,EAAE,aAAa,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,iBAAiB,CAAC,CAAC,CAAA;AAE3J,4FAA4F;AAC5F,MAAM,UAAU,0BAA0B,CAAC,KAAc;IACvD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,6BAA6B;QAAE,OAAO,KAAK,CAAA;IAC3F,6EAA6E;IAC7E,yEAAyE;IACzE,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,KAAK,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QACrD,MAAM,IAAI,GAAG,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,CAAA;QACpC,IAAI,IAAI,IAAI,MAAM,IAAI,IAAI,IAAI,MAAM,EAAE,CAAC;YACrC,MAAM,GAAG,GAAG,KAAK,CAAC,UAAU,CAAC,EAAE,KAAK,CAAC,CAAA;YACrC,IAAI,CAAC,CAAC,GAAG,IAAI,MAAM,IAAI,GAAG,IAAI,MAAM,CAAC;gBAAE,OAAO,KAAK,CAAA;QACrD,CAAC;aAAM,IAAI,IAAI,IAAI,MAAM,IAAI,IAAI,IAAI,MAAM;YAAE,OAAO,KAAK,CAAA;IAC3D,CAAC;IACD,OAAO,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,UAAU,IAAI,6BAA6B,CAAA;AACpF,CAAC;AAED,MAAM,UAAU,gCAAgC,CAAC,KAAc;IAC7D,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,aAAa,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAAE,OAAO,KAAK,CAAA;IAC3F,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAA;IAC3B,IAAI,CAAC,yBAAyB,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC;WACpD,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,UAAU,EAAE,eAAe,EAAE,YAAY,EAAE,SAAS,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;WACtG,CAAC,CAAC,UAAU,EAAE,eAAe,EAAE,YAAY,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,WAAW,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC;QAAE,OAAO,KAAK,CAAA;IAC3G,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,0BAA0B,CAAC,KAAK,CAAC,OAAO,CAAC;QAAE,OAAO,KAAK,CAAA;IAC/F,IAAI,KAAK,CAAC,eAAe,KAAK,SAAS,IAAI,KAAK,CAAC,eAAe,KAAK,IAAI,IAAI,CAAC,0BAA0B,CAAC,KAAK,CAAC,eAAe,CAAC;QAAE,OAAO,KAAK,CAAA;IAC7I,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,kBAAkB,CAAC,IAAI,KAAK,CAAC,kBAAkB,CAAC,MAAM,GAAG,GAAG;WAChF,CAAC,KAAK,CAAC,kBAAkB,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,WAAW,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QAAE,OAAO,KAAK,CAAA;IACpF,OAAO,CAAC,gBAAgB,EAAE,aAAa,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,SAAS,IAAI,WAAW,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC,CAAA;AACtI,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@xenosystem/agent-interface-contract",
-  "version": "0.1.25",
+  "version": "0.1.27",
   "license": "UNLICENSED",
   "type": "module",
   "main": "./dist/index.js",