deepdebug-local-agent 1.2.0 → 1.4.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (123) hide show
  1. package/.github/workflows/deploy-gcp.yml +58 -26
  2. package/CHANGELOG.md +13 -0
  3. package/docs/la-protocol-v2.md +68 -0
  4. package/docs/ws-metadata-only.md +44 -0
  5. package/env.example +7 -0
  6. package/package.json +2 -1
  7. package/scripts/sync-la-protocol-v2-contract.mjs +58 -0
  8. package/src/la-protocol-v2/chunks.js +45 -0
  9. package/src/la-protocol-v2/config.js +27 -0
  10. package/src/la-protocol-v2/content.js +57 -0
  11. package/src/la-protocol-v2/contract/CONTRACT_SOURCE.json +81 -0
  12. package/src/la-protocol-v2/contract/README.md +103 -0
  13. package/src/la-protocol-v2/contract/ack.schema.json +51 -0
  14. package/src/la-protocol-v2/contract/alert.schema.json +62 -0
  15. package/src/la-protocol-v2/contract/approval.decision.schema.json +57 -0
  16. package/src/la-protocol-v2/contract/audit.event.schema.json +86 -0
  17. package/src/la-protocol-v2/contract/config.update.schema.json +73 -0
  18. package/src/la-protocol-v2/contract/content.request.schema.json +110 -0
  19. package/src/la-protocol-v2/contract/content.response.schema.json +90 -0
  20. package/src/la-protocol-v2/contract/defs.schema.json +191 -0
  21. package/src/la-protocol-v2/contract/envelope.schema.json +89 -0
  22. package/src/la-protocol-v2/contract/error.schema.json +59 -0
  23. package/src/la-protocol-v2/contract/heartbeat.schema.json +100 -0
  24. package/src/la-protocol-v2/contract/hello.schema.json +111 -0
  25. package/src/la-protocol-v2/contract/incident.candidate.schema.json +102 -0
  26. package/src/la-protocol-v2/contract/index.json +166 -0
  27. package/src/la-protocol-v2/contract/job.assign.schema.json +212 -0
  28. package/src/la-protocol-v2/contract/job.cancel.schema.json +52 -0
  29. package/src/la-protocol-v2/contract/job.event.schema.json +115 -0
  30. package/src/la-protocol-v2/contract/job.result.schema.json +100 -0
  31. package/src/la-protocol-v2/contract/log.stats.schema.json +79 -0
  32. package/src/la-protocol-v2/contract/ready.schema.json +106 -0
  33. package/src/la-protocol-v2/contract/register.schema.json +92 -0
  34. package/src/la-protocol-v2/contract/scan.upload.schema.json +59 -0
  35. package/src/la-protocol-v2/contract/scan.uploaded.schema.json +51 -0
  36. package/src/la-protocol-v2/contract/webhook.forward.schema.json +69 -0
  37. package/src/la-protocol-v2/contract.js +90 -0
  38. package/src/la-protocol-v2/errors.js +34 -0
  39. package/src/la-protocol-v2/index.js +8 -0
  40. package/src/la-protocol-v2/link.js +93 -0
  41. package/src/la-protocol-v2/runtime.js +72 -0
  42. package/src/la-protocol-v2/session.js +650 -0
  43. package/src/la-protocol-v2/strict-json.js +47 -0
  44. package/src/mcp-http-server.js +5 -3
  45. package/src/server.js +70 -9
  46. package/src/utils/exec-policy.js +8 -1
  47. package/src/ws-channel/allowlist.js +143 -0
  48. package/src/ws-channel/config.js +22 -0
  49. package/src/ws-channel/connection-state.js +18 -0
  50. package/src/ws-channel/index.js +6 -0
  51. package/src/ws-channel/metadata-guard.js +78 -0
  52. package/src/ws-channel/policy-offline.js +40 -0
  53. package/src/ws-channel/transit-guard.js +55 -0
  54. package/test/contract/la-protocol-v2/vectors/ack.vectors.json +149 -0
  55. package/test/contract/la-protocol-v2/vectors/alert.vectors.json +101 -0
  56. package/test/contract/la-protocol-v2/vectors/approval.decision.vectors.json +165 -0
  57. package/test/contract/la-protocol-v2/vectors/audit.event.vectors.json +156 -0
  58. package/test/contract/la-protocol-v2/vectors/config.update.vectors.json +189 -0
  59. package/test/contract/la-protocol-v2/vectors/content.request.vectors.json +325 -0
  60. package/test/contract/la-protocol-v2/vectors/content.response.vectors.json +413 -0
  61. package/test/contract/la-protocol-v2/vectors/cross-type.vectors.json +260 -0
  62. package/test/contract/la-protocol-v2/vectors/error.vectors.json +179 -0
  63. package/test/contract/la-protocol-v2/vectors/heartbeat.vectors.json +109 -0
  64. package/test/contract/la-protocol-v2/vectors/hello.vectors.json +224 -0
  65. package/test/contract/la-protocol-v2/vectors/incident.candidate.vectors.json +186 -0
  66. package/test/contract/la-protocol-v2/vectors/job.assign.vectors.json +631 -0
  67. package/test/contract/la-protocol-v2/vectors/job.cancel.vectors.json +133 -0
  68. package/test/contract/la-protocol-v2/vectors/job.event.vectors.json +233 -0
  69. package/test/contract/la-protocol-v2/vectors/job.result.vectors.json +137 -0
  70. package/test/contract/la-protocol-v2/vectors/log.stats.vectors.json +137 -0
  71. package/test/contract/la-protocol-v2/vectors/ready.vectors.json +177 -0
  72. package/test/contract/la-protocol-v2/vectors/register.vectors.json +399 -0
  73. package/test/contract/la-protocol-v2/vectors/scan.upload.vectors.json +137 -0
  74. package/test/contract/la-protocol-v2/vectors/scan.uploaded.vectors.json +101 -0
  75. package/test/contract/la-protocol-v2/vectors/traces/invalid-agent-mismatch.json +140 -0
  76. package/test/contract/la-protocol-v2/vectors/traces/invalid-chunk-after-last.json +200 -0
  77. package/test/contract/la-protocol-v2/vectors/traces/invalid-chunk-byte-length-mismatch.json +174 -0
  78. package/test/contract/la-protocol-v2/vectors/traces/invalid-chunk-last-flag.json +200 -0
  79. package/test/contract/la-protocol-v2/vectors/traces/invalid-chunk-out-of-order.json +200 -0
  80. package/test/contract/la-protocol-v2/vectors/traces/invalid-chunk-total-changes.json +200 -0
  81. package/test/contract/la-protocol-v2/vectors/traces/invalid-clock-skew.json +46 -0
  82. package/test/contract/la-protocol-v2/vectors/traces/invalid-event-before-ready.json +72 -0
  83. package/test/contract/la-protocol-v2/vectors/traces/invalid-first-frame-not-register.json +48 -0
  84. package/test/contract/la-protocol-v2/vectors/traces/invalid-frame-over-48kib.json +141 -0
  85. package/test/contract/la-protocol-v2/vectors/traces/invalid-la-sends-job-assign.json +173 -0
  86. package/test/contract/la-protocol-v2/vectors/traces/invalid-params-raw-differs-from-payload.json +172 -0
  87. package/test/contract/la-protocol-v2/vectors/traces/invalid-payload-above-limit.json +174 -0
  88. package/test/contract/la-protocol-v2/vectors/traces/invalid-resume-restarts-seq.json +144 -0
  89. package/test/contract/la-protocol-v2/vectors/traces/invalid-seq-gap.json +166 -0
  90. package/test/contract/la-protocol-v2/vectors/traces/invalid-seq-repeated.json +166 -0
  91. package/test/contract/la-protocol-v2/vectors/traces/invalid-sig-tenant-mismatch.json +172 -0
  92. package/test/contract/la-protocol-v2/vectors/traces/invalid-signature-warn-with-enforce-required.json +77 -0
  93. package/test/contract/la-protocol-v2/vectors/traces/invalid-tenant-mismatch.json +140 -0
  94. package/test/contract/la-protocol-v2/vectors/traces/invalid-type-outside-allowlist.json +140 -0
  95. package/test/contract/la-protocol-v2/vectors/traces/valid-content-chunks-in-order.json +224 -0
  96. package/test/contract/la-protocol-v2/vectors/traces/valid-handshake-and-job.json +266 -0
  97. package/test/contract/la-protocol-v2/vectors/traces/valid-resume-continues-seq.json +168 -0
  98. package/test/contract/la-protocol-v2/vectors/traces/valid-retransmit-is-idempotent.json +193 -0
  99. package/test/contract/la-protocol-v2/vectors/webhook.forward.vectors.json +170 -0
  100. package/test/la-protocol-v2/contract.test.js +131 -0
  101. package/test/la-protocol-v2/helpers/la-rig.js +83 -0
  102. package/test/la-protocol-v2/helpers/reference-cp.js +349 -0
  103. package/test/la-protocol-v2/helpers/spawn-agent.js +35 -0
  104. package/test/la-protocol-v2/link.test.js +141 -0
  105. package/test/la-protocol-v2/session-inbound.test.js +279 -0
  106. package/test/la-protocol-v2/session-outbound.test.js +382 -0
  107. package/test/la-protocol-v2/traces.test.js +270 -0
  108. package/test/la-protocol-v2/tunnel-e2e.test.js +124 -0
  109. package/test/ws-channel/allowlist.test.js +67 -0
  110. package/test/ws-channel/metadata-guard.test.js +104 -0
  111. package/test/ws-channel/policy-offline.test.js +99 -0
  112. package/test/ws-channel/tunnel-e2e.test.js +88 -0
  113. package/tools/graphify-validation/extras/README.md +19 -0
  114. package/tools/graphify-validation/extras/bymethod.py +35 -0
  115. package/tools/graphify-validation/extras/docker/Dockerfile +16 -0
  116. package/tools/graphify-validation/extras/docker/inner.sh +7 -0
  117. package/tools/graphify-validation/extras/g10.py +59 -0
  118. package/tools/graphify-validation/extras/g3aug.py +49 -0
  119. package/tools/graphify-validation/extras/hybrid.py +34 -0
  120. package/tools/graphify-validation/extras/truth2.py +44 -0
  121. package/tools/interop/LaV2NodeInteropTest.java +266 -0
  122. package/tools/interop/README.md +21 -0
  123. package/tools/interop/la-interop-client.mjs +97 -0
@@ -0,0 +1,189 @@
1
+ {
2
+ "type": "config.update",
3
+ "schema": "config.update.schema.json",
4
+ "vectors": [
5
+ {
6
+ "name": "minimal-valid",
7
+ "expect": {
8
+ "valid": true
9
+ },
10
+ "message": {
11
+ "schemaVersion": 2,
12
+ "type": "config.update",
13
+ "msgId": "00000000-0000-4000-8000-000000000001",
14
+ "seq": 1,
15
+ "tenantId": "3f2b8c1e-5a4d-4e7b-9c21-0a1b2c3d4e5f",
16
+ "workspaceId": "ws-1",
17
+ "ts": "2026-10-29T10:00:00Z",
18
+ "paramsRaw": "{\"flags\":[{\"name\":\"content.relay\",\"enabled\":true}],\"dlpRulesetSha256\":\"abababababababababababababababababababababababababababababababab\",\"minLaVersion\":\"2.3.0\",\"retentionDays\":90,\"dataPlaneMode\":\"hybrid\"}",
19
+ "sig": {
20
+ "keyId": "vh-cp-2026-10",
21
+ "timestamp": "1793268000",
22
+ "nonce": "Zm9vYmFyYmF6cXV4MTIzNDU2",
23
+ "tenantId": "3f2b8c1e-5a4d-4e7b-9c21-0a1b2c3d4e5f",
24
+ "workspaceId": "ws-1",
25
+ "signature": "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="
26
+ },
27
+ "payload": {
28
+ "flags": [
29
+ {
30
+ "name": "content.relay",
31
+ "enabled": true
32
+ }
33
+ ],
34
+ "dlpRulesetSha256": "abababababababababababababababababababababababababababababababab",
35
+ "minLaVersion": "2.3.0",
36
+ "retentionDays": 90,
37
+ "dataPlaneMode": "hybrid"
38
+ }
39
+ }
40
+ },
41
+ {
42
+ "name": "extra-top-level-field",
43
+ "why": "envelope is closed (additionalProperties:false)",
44
+ "expect": {
45
+ "valid": false,
46
+ "code": "schema_violation",
47
+ "keyword": "additionalProperties"
48
+ },
49
+ "message": {
50
+ "schemaVersion": 2,
51
+ "type": "config.update",
52
+ "msgId": "00000000-0000-4000-8000-000000000001",
53
+ "seq": 1,
54
+ "tenantId": "3f2b8c1e-5a4d-4e7b-9c21-0a1b2c3d4e5f",
55
+ "workspaceId": "ws-1",
56
+ "ts": "2026-10-29T10:00:00Z",
57
+ "paramsRaw": "{\"flags\":[{\"name\":\"content.relay\",\"enabled\":true}],\"dlpRulesetSha256\":\"abababababababababababababababababababababababababababababababab\",\"minLaVersion\":\"2.3.0\",\"retentionDays\":90,\"dataPlaneMode\":\"hybrid\"}",
58
+ "sig": {
59
+ "keyId": "vh-cp-2026-10",
60
+ "timestamp": "1793268000",
61
+ "nonce": "Zm9vYmFyYmF6cXV4MTIzNDU2",
62
+ "tenantId": "3f2b8c1e-5a4d-4e7b-9c21-0a1b2c3d4e5f",
63
+ "workspaceId": "ws-1",
64
+ "signature": "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="
65
+ },
66
+ "payload": {
67
+ "flags": [
68
+ {
69
+ "name": "content.relay",
70
+ "enabled": true
71
+ }
72
+ ],
73
+ "dlpRulesetSha256": "abababababababababababababababababababababababababababababababab",
74
+ "minLaVersion": "2.3.0",
75
+ "retentionDays": 90,
76
+ "dataPlaneMode": "hybrid"
77
+ },
78
+ "extra": "x"
79
+ }
80
+ },
81
+ {
82
+ "name": "extra-payload-field",
83
+ "why": "payload is closed: no free-form fields",
84
+ "expect": {
85
+ "valid": false,
86
+ "code": "schema_violation",
87
+ "keyword": "additionalProperties"
88
+ },
89
+ "message": {
90
+ "schemaVersion": 2,
91
+ "type": "config.update",
92
+ "msgId": "00000000-0000-4000-8000-000000000001",
93
+ "seq": 1,
94
+ "tenantId": "3f2b8c1e-5a4d-4e7b-9c21-0a1b2c3d4e5f",
95
+ "workspaceId": "ws-1",
96
+ "ts": "2026-10-29T10:00:00Z",
97
+ "paramsRaw": "{\"flags\":[{\"name\":\"content.relay\",\"enabled\":true}],\"dlpRulesetSha256\":\"abababababababababababababababababababababababababababababababab\",\"minLaVersion\":\"2.3.0\",\"retentionDays\":90,\"dataPlaneMode\":\"hybrid\"}",
98
+ "sig": {
99
+ "keyId": "vh-cp-2026-10",
100
+ "timestamp": "1793268000",
101
+ "nonce": "Zm9vYmFyYmF6cXV4MTIzNDU2",
102
+ "tenantId": "3f2b8c1e-5a4d-4e7b-9c21-0a1b2c3d4e5f",
103
+ "workspaceId": "ws-1",
104
+ "signature": "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="
105
+ },
106
+ "payload": {
107
+ "flags": [
108
+ {
109
+ "name": "content.relay",
110
+ "enabled": true
111
+ }
112
+ ],
113
+ "dlpRulesetSha256": "abababababababababababababababababababababababababababababababab",
114
+ "minLaVersion": "2.3.0",
115
+ "retentionDays": 90,
116
+ "dataPlaneMode": "hybrid",
117
+ "freeText": "client text"
118
+ }
119
+ }
120
+ },
121
+ {
122
+ "name": "tenant-id-not-uuid",
123
+ "why": "tenantId must be a UUID",
124
+ "expect": {
125
+ "valid": false,
126
+ "code": "schema_violation",
127
+ "keyword": "pattern"
128
+ },
129
+ "message": {
130
+ "schemaVersion": 2,
131
+ "type": "config.update",
132
+ "msgId": "00000000-0000-4000-8000-000000000001",
133
+ "seq": 1,
134
+ "tenantId": "tenant-1",
135
+ "workspaceId": "ws-1",
136
+ "ts": "2026-10-29T10:00:00Z",
137
+ "paramsRaw": "{\"flags\":[{\"name\":\"content.relay\",\"enabled\":true}],\"dlpRulesetSha256\":\"abababababababababababababababababababababababababababababababab\",\"minLaVersion\":\"2.3.0\",\"retentionDays\":90,\"dataPlaneMode\":\"hybrid\"}",
138
+ "sig": {
139
+ "keyId": "vh-cp-2026-10",
140
+ "timestamp": "1793268000",
141
+ "nonce": "Zm9vYmFyYmF6cXV4MTIzNDU2",
142
+ "tenantId": "3f2b8c1e-5a4d-4e7b-9c21-0a1b2c3d4e5f",
143
+ "workspaceId": "ws-1",
144
+ "signature": "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="
145
+ },
146
+ "payload": {
147
+ "flags": [
148
+ {
149
+ "name": "content.relay",
150
+ "enabled": true
151
+ }
152
+ ],
153
+ "dlpRulesetSha256": "abababababababababababababababababababababababababababababababab",
154
+ "minLaVersion": "2.3.0",
155
+ "retentionDays": 90,
156
+ "dataPlaneMode": "hybrid"
157
+ }
158
+ }
159
+ },
160
+ {
161
+ "name": "empty-config",
162
+ "why": "at least one field",
163
+ "expect": {
164
+ "valid": false,
165
+ "code": "schema_violation",
166
+ "keyword": "minProperties"
167
+ },
168
+ "message": {
169
+ "schemaVersion": 2,
170
+ "type": "config.update",
171
+ "msgId": "00000000-0000-4000-8000-000000000001",
172
+ "seq": 1,
173
+ "tenantId": "3f2b8c1e-5a4d-4e7b-9c21-0a1b2c3d4e5f",
174
+ "workspaceId": "ws-1",
175
+ "ts": "2026-10-29T10:00:00Z",
176
+ "paramsRaw": "{}",
177
+ "sig": {
178
+ "keyId": "vh-cp-2026-10",
179
+ "timestamp": "1793268000",
180
+ "nonce": "Zm9vYmFyYmF6cXV4MTIzNDU2",
181
+ "tenantId": "3f2b8c1e-5a4d-4e7b-9c21-0a1b2c3d4e5f",
182
+ "workspaceId": "ws-1",
183
+ "signature": "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="
184
+ },
185
+ "payload": {}
186
+ }
187
+ }
188
+ ]
189
+ }
@@ -0,0 +1,325 @@
1
+ {
2
+ "type": "content.request",
3
+ "schema": "content.request.schema.json",
4
+ "vectors": [
5
+ {
6
+ "name": "minimal-valid",
7
+ "expect": {
8
+ "valid": true
9
+ },
10
+ "message": {
11
+ "schemaVersion": 2,
12
+ "type": "content.request",
13
+ "msgId": "00000000-0000-4000-8000-000000000001",
14
+ "seq": 1,
15
+ "tenantId": "3f2b8c1e-5a4d-4e7b-9c21-0a1b2c3d4e5f",
16
+ "workspaceId": "ws-1",
17
+ "ts": "2026-10-29T10:00:00Z",
18
+ "paramsRaw": "{\"kind\":\"file\",\"ref\":\"src/main/java/acme/PaymentService.java\",\"range\":{\"offset\":0,\"length\":65536},\"actor\":{\"userId\":\"usr-42\",\"role\":\"member\"}}",
19
+ "sig": {
20
+ "keyId": "vh-cp-2026-10",
21
+ "timestamp": "1793268000",
22
+ "nonce": "Zm9vYmFyYmF6cXV4MTIzNDU2",
23
+ "tenantId": "3f2b8c1e-5a4d-4e7b-9c21-0a1b2c3d4e5f",
24
+ "workspaceId": "ws-1",
25
+ "signature": "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="
26
+ },
27
+ "requestId": "d4e5f6a7-b8c9-4d0e-9f1a-3b4c5d6e7f80",
28
+ "payload": {
29
+ "kind": "file",
30
+ "ref": "src/main/java/acme/PaymentService.java",
31
+ "range": {
32
+ "offset": 0,
33
+ "length": 65536
34
+ },
35
+ "actor": {
36
+ "userId": "usr-42",
37
+ "role": "member"
38
+ }
39
+ }
40
+ }
41
+ },
42
+ {
43
+ "name": "extra-top-level-field",
44
+ "why": "envelope is closed (additionalProperties:false)",
45
+ "expect": {
46
+ "valid": false,
47
+ "code": "schema_violation",
48
+ "keyword": "additionalProperties"
49
+ },
50
+ "message": {
51
+ "schemaVersion": 2,
52
+ "type": "content.request",
53
+ "msgId": "00000000-0000-4000-8000-000000000001",
54
+ "seq": 1,
55
+ "tenantId": "3f2b8c1e-5a4d-4e7b-9c21-0a1b2c3d4e5f",
56
+ "workspaceId": "ws-1",
57
+ "ts": "2026-10-29T10:00:00Z",
58
+ "paramsRaw": "{\"kind\":\"file\",\"ref\":\"src/main/java/acme/PaymentService.java\",\"range\":{\"offset\":0,\"length\":65536},\"actor\":{\"userId\":\"usr-42\",\"role\":\"member\"}}",
59
+ "sig": {
60
+ "keyId": "vh-cp-2026-10",
61
+ "timestamp": "1793268000",
62
+ "nonce": "Zm9vYmFyYmF6cXV4MTIzNDU2",
63
+ "tenantId": "3f2b8c1e-5a4d-4e7b-9c21-0a1b2c3d4e5f",
64
+ "workspaceId": "ws-1",
65
+ "signature": "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="
66
+ },
67
+ "requestId": "d4e5f6a7-b8c9-4d0e-9f1a-3b4c5d6e7f80",
68
+ "payload": {
69
+ "kind": "file",
70
+ "ref": "src/main/java/acme/PaymentService.java",
71
+ "range": {
72
+ "offset": 0,
73
+ "length": 65536
74
+ },
75
+ "actor": {
76
+ "userId": "usr-42",
77
+ "role": "member"
78
+ }
79
+ },
80
+ "extra": "x"
81
+ }
82
+ },
83
+ {
84
+ "name": "extra-payload-field",
85
+ "why": "payload is closed: no free-form fields",
86
+ "expect": {
87
+ "valid": false,
88
+ "code": "schema_violation",
89
+ "keyword": "additionalProperties"
90
+ },
91
+ "message": {
92
+ "schemaVersion": 2,
93
+ "type": "content.request",
94
+ "msgId": "00000000-0000-4000-8000-000000000001",
95
+ "seq": 1,
96
+ "tenantId": "3f2b8c1e-5a4d-4e7b-9c21-0a1b2c3d4e5f",
97
+ "workspaceId": "ws-1",
98
+ "ts": "2026-10-29T10:00:00Z",
99
+ "paramsRaw": "{\"kind\":\"file\",\"ref\":\"src/main/java/acme/PaymentService.java\",\"range\":{\"offset\":0,\"length\":65536},\"actor\":{\"userId\":\"usr-42\",\"role\":\"member\"}}",
100
+ "sig": {
101
+ "keyId": "vh-cp-2026-10",
102
+ "timestamp": "1793268000",
103
+ "nonce": "Zm9vYmFyYmF6cXV4MTIzNDU2",
104
+ "tenantId": "3f2b8c1e-5a4d-4e7b-9c21-0a1b2c3d4e5f",
105
+ "workspaceId": "ws-1",
106
+ "signature": "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="
107
+ },
108
+ "requestId": "d4e5f6a7-b8c9-4d0e-9f1a-3b4c5d6e7f80",
109
+ "payload": {
110
+ "kind": "file",
111
+ "ref": "src/main/java/acme/PaymentService.java",
112
+ "range": {
113
+ "offset": 0,
114
+ "length": 65536
115
+ },
116
+ "actor": {
117
+ "userId": "usr-42",
118
+ "role": "member"
119
+ },
120
+ "freeText": "client text"
121
+ }
122
+ }
123
+ },
124
+ {
125
+ "name": "tenant-id-not-uuid",
126
+ "why": "tenantId must be a UUID",
127
+ "expect": {
128
+ "valid": false,
129
+ "code": "schema_violation",
130
+ "keyword": "pattern"
131
+ },
132
+ "message": {
133
+ "schemaVersion": 2,
134
+ "type": "content.request",
135
+ "msgId": "00000000-0000-4000-8000-000000000001",
136
+ "seq": 1,
137
+ "tenantId": "tenant-1",
138
+ "workspaceId": "ws-1",
139
+ "ts": "2026-10-29T10:00:00Z",
140
+ "paramsRaw": "{\"kind\":\"file\",\"ref\":\"src/main/java/acme/PaymentService.java\",\"range\":{\"offset\":0,\"length\":65536},\"actor\":{\"userId\":\"usr-42\",\"role\":\"member\"}}",
141
+ "sig": {
142
+ "keyId": "vh-cp-2026-10",
143
+ "timestamp": "1793268000",
144
+ "nonce": "Zm9vYmFyYmF6cXV4MTIzNDU2",
145
+ "tenantId": "3f2b8c1e-5a4d-4e7b-9c21-0a1b2c3d4e5f",
146
+ "workspaceId": "ws-1",
147
+ "signature": "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="
148
+ },
149
+ "requestId": "d4e5f6a7-b8c9-4d0e-9f1a-3b4c5d6e7f80",
150
+ "payload": {
151
+ "kind": "file",
152
+ "ref": "src/main/java/acme/PaymentService.java",
153
+ "range": {
154
+ "offset": 0,
155
+ "length": 65536
156
+ },
157
+ "actor": {
158
+ "userId": "usr-42",
159
+ "role": "member"
160
+ }
161
+ }
162
+ }
163
+ },
164
+ {
165
+ "name": "kind-outside-allowlist",
166
+ "why": "kind is one of the 12 content kinds",
167
+ "expect": {
168
+ "valid": false,
169
+ "code": "schema_violation",
170
+ "keyword": "enum"
171
+ },
172
+ "message": {
173
+ "schemaVersion": 2,
174
+ "type": "content.request",
175
+ "msgId": "00000000-0000-4000-8000-000000000001",
176
+ "seq": 1,
177
+ "tenantId": "3f2b8c1e-5a4d-4e7b-9c21-0a1b2c3d4e5f",
178
+ "workspaceId": "ws-1",
179
+ "ts": "2026-10-29T10:00:00Z",
180
+ "paramsRaw": "{\"kind\":\"file\",\"ref\":\"src/main/java/acme/PaymentService.java\",\"range\":{\"offset\":0,\"length\":65536},\"actor\":{\"userId\":\"usr-42\",\"role\":\"member\"}}",
181
+ "sig": {
182
+ "keyId": "vh-cp-2026-10",
183
+ "timestamp": "1793268000",
184
+ "nonce": "Zm9vYmFyYmF6cXV4MTIzNDU2",
185
+ "tenantId": "3f2b8c1e-5a4d-4e7b-9c21-0a1b2c3d4e5f",
186
+ "workspaceId": "ws-1",
187
+ "signature": "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="
188
+ },
189
+ "requestId": "d4e5f6a7-b8c9-4d0e-9f1a-3b4c5d6e7f80",
190
+ "payload": {
191
+ "kind": "shell",
192
+ "ref": "src/main/java/acme/PaymentService.java",
193
+ "range": {
194
+ "offset": 0,
195
+ "length": 65536
196
+ },
197
+ "actor": {
198
+ "userId": "usr-42",
199
+ "role": "member"
200
+ }
201
+ }
202
+ }
203
+ },
204
+ {
205
+ "name": "ref-control-char",
206
+ "why": "no control characters in ref",
207
+ "expect": {
208
+ "valid": false,
209
+ "code": "schema_violation",
210
+ "keyword": "pattern"
211
+ },
212
+ "message": {
213
+ "schemaVersion": 2,
214
+ "type": "content.request",
215
+ "msgId": "00000000-0000-4000-8000-000000000001",
216
+ "seq": 1,
217
+ "tenantId": "3f2b8c1e-5a4d-4e7b-9c21-0a1b2c3d4e5f",
218
+ "workspaceId": "ws-1",
219
+ "ts": "2026-10-29T10:00:00Z",
220
+ "paramsRaw": "{\"kind\":\"file\",\"ref\":\"src/main/java/acme/PaymentService.java\",\"range\":{\"offset\":0,\"length\":65536},\"actor\":{\"userId\":\"usr-42\",\"role\":\"member\"}}",
221
+ "sig": {
222
+ "keyId": "vh-cp-2026-10",
223
+ "timestamp": "1793268000",
224
+ "nonce": "Zm9vYmFyYmF6cXV4MTIzNDU2",
225
+ "tenantId": "3f2b8c1e-5a4d-4e7b-9c21-0a1b2c3d4e5f",
226
+ "workspaceId": "ws-1",
227
+ "signature": "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="
228
+ },
229
+ "requestId": "d4e5f6a7-b8c9-4d0e-9f1a-3b4c5d6e7f80",
230
+ "payload": {
231
+ "kind": "file",
232
+ "ref": "a\nb",
233
+ "range": {
234
+ "offset": 0,
235
+ "length": 65536
236
+ },
237
+ "actor": {
238
+ "userId": "usr-42",
239
+ "role": "member"
240
+ }
241
+ }
242
+ }
243
+ },
244
+ {
245
+ "name": "actor-role-unknown",
246
+ "why": "role enum",
247
+ "expect": {
248
+ "valid": false,
249
+ "code": "schema_violation",
250
+ "keyword": "enum"
251
+ },
252
+ "message": {
253
+ "schemaVersion": 2,
254
+ "type": "content.request",
255
+ "msgId": "00000000-0000-4000-8000-000000000001",
256
+ "seq": 1,
257
+ "tenantId": "3f2b8c1e-5a4d-4e7b-9c21-0a1b2c3d4e5f",
258
+ "workspaceId": "ws-1",
259
+ "ts": "2026-10-29T10:00:00Z",
260
+ "paramsRaw": "{\"kind\":\"file\",\"ref\":\"src/main/java/acme/PaymentService.java\",\"range\":{\"offset\":0,\"length\":65536},\"actor\":{\"userId\":\"usr-42\",\"role\":\"member\"}}",
261
+ "sig": {
262
+ "keyId": "vh-cp-2026-10",
263
+ "timestamp": "1793268000",
264
+ "nonce": "Zm9vYmFyYmF6cXV4MTIzNDU2",
265
+ "tenantId": "3f2b8c1e-5a4d-4e7b-9c21-0a1b2c3d4e5f",
266
+ "workspaceId": "ws-1",
267
+ "signature": "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="
268
+ },
269
+ "requestId": "d4e5f6a7-b8c9-4d0e-9f1a-3b4c5d6e7f80",
270
+ "payload": {
271
+ "kind": "file",
272
+ "ref": "src/main/java/acme/PaymentService.java",
273
+ "range": {
274
+ "offset": 0,
275
+ "length": 65536
276
+ },
277
+ "actor": {
278
+ "userId": "usr-42",
279
+ "role": "owner"
280
+ }
281
+ }
282
+ }
283
+ },
284
+ {
285
+ "name": "range-above-2mib",
286
+ "why": "relay cap 2 MiB",
287
+ "expect": {
288
+ "valid": false,
289
+ "code": "schema_violation",
290
+ "keyword": "maximum"
291
+ },
292
+ "message": {
293
+ "schemaVersion": 2,
294
+ "type": "content.request",
295
+ "msgId": "00000000-0000-4000-8000-000000000001",
296
+ "seq": 1,
297
+ "tenantId": "3f2b8c1e-5a4d-4e7b-9c21-0a1b2c3d4e5f",
298
+ "workspaceId": "ws-1",
299
+ "ts": "2026-10-29T10:00:00Z",
300
+ "paramsRaw": "{\"kind\":\"file\",\"ref\":\"src/main/java/acme/PaymentService.java\",\"range\":{\"offset\":0,\"length\":65536},\"actor\":{\"userId\":\"usr-42\",\"role\":\"member\"}}",
301
+ "sig": {
302
+ "keyId": "vh-cp-2026-10",
303
+ "timestamp": "1793268000",
304
+ "nonce": "Zm9vYmFyYmF6cXV4MTIzNDU2",
305
+ "tenantId": "3f2b8c1e-5a4d-4e7b-9c21-0a1b2c3d4e5f",
306
+ "workspaceId": "ws-1",
307
+ "signature": "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="
308
+ },
309
+ "requestId": "d4e5f6a7-b8c9-4d0e-9f1a-3b4c5d6e7f80",
310
+ "payload": {
311
+ "kind": "file",
312
+ "ref": "src/main/java/acme/PaymentService.java",
313
+ "range": {
314
+ "offset": 0,
315
+ "length": 3000000
316
+ },
317
+ "actor": {
318
+ "userId": "usr-42",
319
+ "role": "member"
320
+ }
321
+ }
322
+ }
323
+ }
324
+ ]
325
+ }