veryfront 0.1.246 → 0.1.247

package/esm/deno.js

@@ -1,6 +1,6 @@
 export default {
     "name": "veryfront",
-    "version": "0.1.246",
+    "version": "0.1.247",
     "license": "Apache-2.0",
     "nodeModulesDir": "auto",
     "workspace": [

package/esm/src/agent/durable.d.ts

@@ -80,6 +80,7 @@ export type TerminalConversationRunStatus = Extract<ConversationRunProjection["s
 export type ConversationRunAppendCursorResyncResult = "advanced" | "non_appendable" | "unchanged";
 export type ConversationRunAppendRecoveryOutcome = "resumed" | "stopped" | "bubbled";
 export type ConversationRunAppendFailureOutcome = "resumed" | "stopped" | "retry_scheduled";
+export type ConversationRunAppendExecutionOutcome = "resumed" | "stopped" | "retry_scheduled";
 export declare const CreateConversationRunAcceptedSchema: z.ZodPipe<z.ZodObject<{
     run: z.ZodObject<{
         runId: z.ZodOptional<z.ZodString>;
@@ -250,6 +251,39 @@ export declare function recoverConversationRunAppendFailure(input: {
     errorMessage?: string;
     run?: ConversationRunProjection;
 }>;
+export declare function recoverConversationRunAppendExecution(input: {
+    error: unknown;
+    authToken: string;
+    apiUrl: string;
+    conversationId: string;
+    runId: string;
+    latestEventId: number;
+    latestExternalEventSequence: number;
+    remainingEvents: unknown[];
+    pendingEvents: unknown[];
+    cursorResyncsThisFlush: number;
+    consecutiveFailures: number;
+    maxCursorResyncsPerFlush: number;
+    abortSignal?: AbortSignal;
+}): Promise<{
+    outcome: "resumed";
+    latestEventId: number;
+    latestExternalEventSequence: number;
+    pendingEvents: unknown[];
+    consecutiveFailures: number;
+} | {
+    outcome: "stopped";
+    latestEventId: number;
+    latestExternalEventSequence: number;
+    disableReason?: "cursor_resyncs_exhausted" | "non_appendable" | "ignorable_append_rejection";
+} | {
+    outcome: "retry_scheduled";
+    latestEventId: number;
+    latestExternalEventSequence: number;
+    pendingEvents: unknown[];
+    consecutiveFailures: number;
+    errorMessage: string;
+}>;
 export declare function getConversationRun(input: {
     authToken: string;
     apiUrl: string;

package/esm/src/agent/durable.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"durable.d.ts","sourceRoot":"","sources":["../../../src/src/agent/durable.ts"],"names":[],"mappings":"AAAA,OAAO,yBAAyB,CAAC;AAEjC,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAgCxB,eAAO,MAAM,4BAA4B;;;;;;;;;;iBAIvC,CAAC;AAEH,MAAM,MAAM,sBAAsB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,4BAA4B,CAAC,CAAC;AAElF,wBAAgB,6BAA6B,CAAC,KAAK,EAAE;IACnD,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC1B,GAAG,sBAAsB,CAoBzB;AAED,eAAO,MAAM,2BAA2B;;;;;;;EAOtC,CAAC;AAEH,eAAO,MAAM,+BAA+B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6CxC,CAAC;AAEL,MAAM,MAAM,yBAAyB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,+BAA+B,CAAC,CAAC;AACxF,MAAM,MAAM,2BAA2B,GAAG,OAAO,CAC/C,yBAAyB,CAAC,QAAQ,CAAC,EACnC,SAAS,GAAG,SAAS,GAAG,kBAAkB,CAC3C,CAAC;AACF,MAAM,MAAM,6BAA6B,GAAG,OAAO,CACjD,yBAAyB,CAAC,QAAQ,CAAC,EACnC,WAAW,GAAG,QAAQ,GAAG,WAAW,CACrC,CAAC;AACF,MAAM,MAAM,uCAAuC,GAC/C,UAAU,GACV,gBAAgB,GAChB,WAAW,CAAC;AAChB,MAAM,MAAM,oCAAoC,GAC5C,SAAS,GACT,SAAS,GACT,SAAS,CAAC;AACd,MAAM,MAAM,mCAAmC,GAC3C,SAAS,GACT,SAAS,GACT,iBAAiB,CAAC;AAEtB,eAAO,MAAM,mCAAmC;;;;;;;;;;;;;;GAiB5C,CAAC;AAEL,eAAO,MAAM,qCAAqC;;;;;;;;;;;;;;iBAWlC,CAAC;AAoBjB,eAAO,MAAM,yCAAyC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;KAwBpD,CAAC;AAEH,MAAM,MAAM,mCAAmC,GAAG,CAAC,CAAC,KAAK,CACvD,OAAO,yCAAyC,CACjD,CAAC;AAOF,MAAM,WAAW,yBAAyB;IACxC,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,+BAA+B;IAC9C,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,cAAc,EAAE,MAAM,CAAC;IACvB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC1B;AAED,MAAM,WAAW,iCAAiC;IAChD,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,cAAc,EAAE,MAAM,CAAC;IACvB,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,WAAW,GAAG,QAAQ,GAAG,WAAW,CAAC;IAC7C,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,yBAAyB,CAAC;IAClC,iBAAiB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAClC,oBAAoB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACtC;AAED,qBAAa,iCAAkC,SAAQ,KAAK;IAC1D,QAAQ,CAAC,MAAM,EAAE,6BAA6B,CAAC;IAC/C,QAAQ,CAAC,GAAG,EAAE,yBAAyB,CAAC;gBAE5B,GAAG,EAAE,yBAAyB,EAAE,MAAM,EAAE,6BAA6B;CAMlF;AAED,qBAAa,gCAAiC,SAAQ,KAAK;IACzD,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;gBAEnB,KAAK,EAAE;QACjB,MAAM,EAAE,MAAM,CAAC;QACf,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QACvB,UAAU,CAAC,EAAE,MAAM,CAAC;KACrB;CAOF;AAED,wBAAgB,yCAAyC,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAezF;AAED,wBAAgB,qCAAqC,CACnD,KAAK,EAAE,OAAO,GACb,KAAK,IAAI,gCAAgC,CAiB3C;AAED,wBAAgB,0CAA0C,CACxD,KAAK,EAAE,OAAO,GACb,KAAK,IAAI,gCAAgC,CAM3C;AAED,wBAAgB,6BAA6B,CAC3C,MAAM,EAAE,yBAAyB,CAAC,QAAQ,CAAC,GAC1C,MAAM,IAAI,2BAA2B,CAEvC;AAED,wBAAgB,qCAAqC,CAAC,GAAG,EAAE,yBAAyB,GAAG,OAAO,CAS7F;AAED,wBAAsB,iCAAiC,CAAC,KAAK,EAAE;IAC7D,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,cAAc,EAAE,MAAM,CAAC;IACvB,KAAK,EAAE,MAAM,CAAC;IACd,mCAAmC,EAAE,MAAM,CAAC;IAC5C,WAAW,CAAC,EAAE,WAAW,CAAC;CAC3B,GAAG,OAAO,CAAC;IACV,MAAM,EAAE,uCAAuC,CAAC;IAChD,GAAG,EAAE,yBAAyB,CAAC;CAChC,CAAC,CA2BD;AAED,wBAAsB,oCAAoC,CAAC,KAAK,EAAE;IAChE,KAAK,EAAE,OAAO,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,cAAc,EAAE,MAAM,CAAC;IACvB,KAAK,EAAE,MAAM,CAAC;IACd,aAAa,EAAE,MAAM,CAAC;IACtB,2BAA2B,EAAE,MAAM,CAAC;IACpC,sBAAsB,EAAE,MAAM,CAAC;IAC/B,wBAAwB,EAAE,MAAM,CAAC;IACjC,WAAW,CAAC,EAAE,WAAW,CAAC;CAC3B,GAAG,OAAO,CAAC;IACV,OAAO,EAAE,oCAAoC,CAAC;IAC9C,aAAa,EAAE,MAAM,CAAC;IACtB,2BAA2B,EAAE,MAAM,CAAC;IACpC,aAAa,CAAC,EAAE,0BAA0B,GAAG,gBAAgB,CAAC;IAC9D,GAAG,CAAC,EAAE,yBAAyB,CAAC;CACjC,CAAC,CAoDD;AAED,wBAAsB,mCAAmC,CAAC,KAAK,EAAE;IAC/D,KAAK,EAAE,OAAO,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,cAAc,EAAE,MAAM,CAAC;IACvB,KAAK,EAAE,MAAM,CAAC;IACd,aAAa,EAAE,MAAM,CAAC;IACtB,2BAA2B,EAAE,MAAM,CAAC;IACpC,sBAAsB,EAAE,MAAM,CAAC;IAC/B,wBAAwB,EAAE,MAAM,CAAC;IACjC,WAAW,CAAC,EAAE,WAAW,CAAC;CAC3B,GAAG,OAAO,CAAC;IACV,OAAO,EAAE,mCAAmC,CAAC;IAC7C,aAAa,EAAE,MAAM,CAAC;IACtB,2BAA2B,EAAE,MAAM,CAAC;IACpC,aAAa,CAAC,EAAE,0BAA0B,GAAG,gBAAgB,GAAG,4BAA4B,CAAC;IAC7F,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,GAAG,CAAC,EAAE,yBAAyB,CAAC;CACjC,CAAC,CAkDD;AA2ED,wBAAsB,kBAAkB,CAAC,KAAK,EAAE;IAC9C,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,cAAc,EAAE,MAAM,CAAC;IACvB,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,CAAC,EAAE,WAAW,CAAC;CAC3B,GAAG,OAAO,CAAC,yBAAyB,CAAC,CAQrC;AAED,wBAAsB,4BAA4B,CAAC,KAAK,EAAE;IACxD,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,cAAc,EAAE,MAAM,CAAC;IACvB,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,CAAC,EAAE,WAAW,CAAC;IAC1B,cAAc,EAAE,MAAM,CAAC;IACvB,UAAU,EAAE,CAAC,KAAK,EAAE,iCAAiC,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC/E,WAAW,CAAC,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACxD,GAAG,OAAO,CAAC,IAAI,CAAC,CA0ChB;AAED,wBAAsB,2BAA2B,CAAC,KAAK,EAAE;IACvD,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,cAAc,EAAE,MAAM,CAAC;IACvB,KAAK,EAAE,MAAM,CAAC;IACd,uBAAuB,CAAC,EAAE,MAAM,CAAC;IACjC,qCAAqC,CAAC,EAAE,MAAM,CAAC;IAC/C,MAAM,EAAE,OAAO,EAAE,CAAC;IAClB,WAAW,CAAC,EAAE,WAAW,CAAC;CAC3B,GAAG,OAAO,CAAC,mCAAmC,CAAC,CAyD/C;AAED,wBAAsB,0BAA0B,CAC9C,KAAK,EAAE,+BAA+B,GACrC,OAAO,CAAC,yBAAyB,CAAC,CA0CpC;AAED,wBAAsB,4BAA4B,CAChD,KAAK,EAAE,iCAAiC,GACvC,OAAO,CAAC,IAAI,CAAC,CAwBf"}
+{"version":3,"file":"durable.d.ts","sourceRoot":"","sources":["../../../src/src/agent/durable.ts"],"names":[],"mappings":"AAAA,OAAO,yBAAyB,CAAC;AAEjC,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAgCxB,eAAO,MAAM,4BAA4B;;;;;;;;;;iBAIvC,CAAC;AAEH,MAAM,MAAM,sBAAsB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,4BAA4B,CAAC,CAAC;AAElF,wBAAgB,6BAA6B,CAAC,KAAK,EAAE;IACnD,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC1B,GAAG,sBAAsB,CAoBzB;AAED,eAAO,MAAM,2BAA2B;;;;;;;EAOtC,CAAC;AAEH,eAAO,MAAM,+BAA+B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6CxC,CAAC;AAEL,MAAM,MAAM,yBAAyB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,+BAA+B,CAAC,CAAC;AACxF,MAAM,MAAM,2BAA2B,GAAG,OAAO,CAC/C,yBAAyB,CAAC,QAAQ,CAAC,EACnC,SAAS,GAAG,SAAS,GAAG,kBAAkB,CAC3C,CAAC;AACF,MAAM,MAAM,6BAA6B,GAAG,OAAO,CACjD,yBAAyB,CAAC,QAAQ,CAAC,EACnC,WAAW,GAAG,QAAQ,GAAG,WAAW,CACrC,CAAC;AACF,MAAM,MAAM,uCAAuC,GAC/C,UAAU,GACV,gBAAgB,GAChB,WAAW,CAAC;AAChB,MAAM,MAAM,oCAAoC,GAC5C,SAAS,GACT,SAAS,GACT,SAAS,CAAC;AACd,MAAM,MAAM,mCAAmC,GAC3C,SAAS,GACT,SAAS,GACT,iBAAiB,CAAC;AACtB,MAAM,MAAM,qCAAqC,GAC7C,SAAS,GACT,SAAS,GACT,iBAAiB,CAAC;AAEtB,eAAO,MAAM,mCAAmC;;;;;;;;;;;;;;GAiB5C,CAAC;AAEL,eAAO,MAAM,qCAAqC;;;;;;;;;;;;;;iBAWlC,CAAC;AAoBjB,eAAO,MAAM,yCAAyC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;KAwBpD,CAAC;AAEH,MAAM,MAAM,mCAAmC,GAAG,CAAC,CAAC,KAAK,CACvD,OAAO,yCAAyC,CACjD,CAAC;AAOF,MAAM,WAAW,yBAAyB;IACxC,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,+BAA+B;IAC9C,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,cAAc,EAAE,MAAM,CAAC;IACvB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC1B;AAED,MAAM,WAAW,iCAAiC;IAChD,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,cAAc,EAAE,MAAM,CAAC;IACvB,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,WAAW,GAAG,QAAQ,GAAG,WAAW,CAAC;IAC7C,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,yBAAyB,CAAC;IAClC,iBAAiB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAClC,oBAAoB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACtC;AAED,qBAAa,iCAAkC,SAAQ,KAAK;IAC1D,QAAQ,CAAC,MAAM,EAAE,6BAA6B,CAAC;IAC/C,QAAQ,CAAC,GAAG,EAAE,yBAAyB,CAAC;gBAE5B,GAAG,EAAE,yBAAyB,EAAE,MAAM,EAAE,6BAA6B;CAMlF;AAED,qBAAa,gCAAiC,SAAQ,KAAK;IACzD,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;gBAEnB,KAAK,EAAE;QACjB,MAAM,EAAE,MAAM,CAAC;QACf,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QACvB,UAAU,CAAC,EAAE,MAAM,CAAC;KACrB;CAOF;AAED,wBAAgB,yCAAyC,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAezF;AAED,wBAAgB,qCAAqC,CACnD,KAAK,EAAE,OAAO,GACb,KAAK,IAAI,gCAAgC,CAiB3C;AAED,wBAAgB,0CAA0C,CACxD,KAAK,EAAE,OAAO,GACb,KAAK,IAAI,gCAAgC,CAM3C;AAED,wBAAgB,6BAA6B,CAC3C,MAAM,EAAE,yBAAyB,CAAC,QAAQ,CAAC,GAC1C,MAAM,IAAI,2BAA2B,CAEvC;AAED,wBAAgB,qCAAqC,CAAC,GAAG,EAAE,yBAAyB,GAAG,OAAO,CAS7F;AAED,wBAAsB,iCAAiC,CAAC,KAAK,EAAE;IAC7D,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,cAAc,EAAE,MAAM,CAAC;IACvB,KAAK,EAAE,MAAM,CAAC;IACd,mCAAmC,EAAE,MAAM,CAAC;IAC5C,WAAW,CAAC,EAAE,WAAW,CAAC;CAC3B,GAAG,OAAO,CAAC;IACV,MAAM,EAAE,uCAAuC,CAAC;IAChD,GAAG,EAAE,yBAAyB,CAAC;CAChC,CAAC,CA2BD;AAED,wBAAsB,oCAAoC,CAAC,KAAK,EAAE;IAChE,KAAK,EAAE,OAAO,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,cAAc,EAAE,MAAM,CAAC;IACvB,KAAK,EAAE,MAAM,CAAC;IACd,aAAa,EAAE,MAAM,CAAC;IACtB,2BAA2B,EAAE,MAAM,CAAC;IACpC,sBAAsB,EAAE,MAAM,CAAC;IAC/B,wBAAwB,EAAE,MAAM,CAAC;IACjC,WAAW,CAAC,EAAE,WAAW,CAAC;CAC3B,GAAG,OAAO,CAAC;IACV,OAAO,EAAE,oCAAoC,CAAC;IAC9C,aAAa,EAAE,MAAM,CAAC;IACtB,2BAA2B,EAAE,MAAM,CAAC;IACpC,aAAa,CAAC,EAAE,0BAA0B,GAAG,gBAAgB,CAAC;IAC9D,GAAG,CAAC,EAAE,yBAAyB,CAAC;CACjC,CAAC,CAoDD;AAED,wBAAsB,mCAAmC,CAAC,KAAK,EAAE;IAC/D,KAAK,EAAE,OAAO,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,cAAc,EAAE,MAAM,CAAC;IACvB,KAAK,EAAE,MAAM,CAAC;IACd,aAAa,EAAE,MAAM,CAAC;IACtB,2BAA2B,EAAE,MAAM,CAAC;IACpC,sBAAsB,EAAE,MAAM,CAAC;IAC/B,wBAAwB,EAAE,MAAM,CAAC;IACjC,WAAW,CAAC,EAAE,WAAW,CAAC;CAC3B,GAAG,OAAO,CAAC;IACV,OAAO,EAAE,mCAAmC,CAAC;IAC7C,aAAa,EAAE,MAAM,CAAC;IACtB,2BAA2B,EAAE,MAAM,CAAC;IACpC,aAAa,CAAC,EAAE,0BAA0B,GAAG,gBAAgB,GAAG,4BAA4B,CAAC;IAC7F,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,GAAG,CAAC,EAAE,yBAAyB,CAAC;CACjC,CAAC,CAkDD;AAED,wBAAsB,qCAAqC,CAAC,KAAK,EAAE;IACjE,KAAK,EAAE,OAAO,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,cAAc,EAAE,MAAM,CAAC;IACvB,KAAK,EAAE,MAAM,CAAC;IACd,aAAa,EAAE,MAAM,CAAC;IACtB,2BAA2B,EAAE,MAAM,CAAC;IACpC,eAAe,EAAE,OAAO,EAAE,CAAC;IAC3B,aAAa,EAAE,OAAO,EAAE,CAAC;IACzB,sBAAsB,EAAE,MAAM,CAAC;IAC/B,mBAAmB,EAAE,MAAM,CAAC;IAC5B,wBAAwB,EAAE,MAAM,CAAC;IACjC,WAAW,CAAC,EAAE,WAAW,CAAC;CAC3B,GAAG,OAAO,CACP;IACA,OAAO,EAAE,SAAS,CAAC;IACnB,aAAa,EAAE,MAAM,CAAC;IACtB,2BAA2B,EAAE,MAAM,CAAC;IACpC,aAAa,EAAE,OAAO,EAAE,CAAC;IACzB,mBAAmB,EAAE,MAAM,CAAC;CAC7B,GACC;IACA,OAAO,EAAE,SAAS,CAAC;IACnB,aAAa,EAAE,MAAM,CAAC;IACtB,2BAA2B,EAAE,MAAM,CAAC;IACpC,aAAa,CAAC,EAAE,0BAA0B,GAAG,gBAAgB,GAAG,4BAA4B,CAAC;CAC9F,GACC;IACA,OAAO,EAAE,iBAAiB,CAAC;IAC3B,aAAa,EAAE,MAAM,CAAC;IACtB,2BAA2B,EAAE,MAAM,CAAC;IACpC,aAAa,EAAE,OAAO,EAAE,CAAC;IACzB,mBAAmB,EAAE,MAAM,CAAC;IAC5B,YAAY,EAAE,MAAM,CAAC;CACtB,CACF,CAyCA;AA2ED,wBAAsB,kBAAkB,CAAC,KAAK,EAAE;IAC9C,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,cAAc,EAAE,MAAM,CAAC;IACvB,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,CAAC,EAAE,WAAW,CAAC;CAC3B,GAAG,OAAO,CAAC,yBAAyB,CAAC,CAQrC;AAED,wBAAsB,4BAA4B,CAAC,KAAK,EAAE;IACxD,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,cAAc,EAAE,MAAM,CAAC;IACvB,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,CAAC,EAAE,WAAW,CAAC;IAC1B,cAAc,EAAE,MAAM,CAAC;IACvB,UAAU,EAAE,CAAC,KAAK,EAAE,iCAAiC,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC/E,WAAW,CAAC,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACxD,GAAG,OAAO,CAAC,IAAI,CAAC,CA0ChB;AAED,wBAAsB,2BAA2B,CAAC,KAAK,EAAE;IACvD,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,cAAc,EAAE,MAAM,CAAC;IACvB,KAAK,EAAE,MAAM,CAAC;IACd,uBAAuB,CAAC,EAAE,MAAM,CAAC;IACjC,qCAAqC,CAAC,EAAE,MAAM,CAAC;IAC/C,MAAM,EAAE,OAAO,EAAE,CAAC;IAClB,WAAW,CAAC,EAAE,WAAW,CAAC;CAC3B,GAAG,OAAO,CAAC,mCAAmC,CAAC,CAyD/C;AAED,wBAAsB,0BAA0B,CAC9C,KAAK,EAAE,+BAA+B,GACrC,OAAO,CAAC,yBAAyB,CAAC,CA0CpC;AAED,wBAAsB,4BAA4B,CAChD,KAAK,EAAE,iCAAiC,GACvC,OAAO,CAAC,IAAI,CAAC,CAwBf"}

package/esm/src/agent/durable.js

@@ -361,6 +361,45 @@ export async function recoverConversationRunAppendFailure(input) {
         ...(cursorRecovery.run ? { run: cursorRecovery.run } : {}),
     };
 }
+export async function recoverConversationRunAppendExecution(input) {
+    const recovered = await recoverConversationRunAppendFailure({
+        error: input.error,
+        authToken: input.authToken,
+        apiUrl: input.apiUrl,
+        conversationId: input.conversationId,
+        runId: input.runId,
+        latestEventId: input.latestEventId,
+        latestExternalEventSequence: input.latestExternalEventSequence,
+        cursorResyncsThisFlush: input.cursorResyncsThisFlush,
+        maxCursorResyncsPerFlush: input.maxCursorResyncsPerFlush,
+        abortSignal: input.abortSignal,
+    });
+    if (recovered.outcome === "resumed") {
+        return {
+            outcome: "resumed",
+            latestEventId: recovered.latestEventId,
+            latestExternalEventSequence: recovered.latestExternalEventSequence,
+            pendingEvents: [...input.remainingEvents, ...input.pendingEvents],
+            consecutiveFailures: 0,
+        };
+    }
+    if (recovered.outcome === "stopped") {
+        return {
+            outcome: "stopped",
+            latestEventId: recovered.latestEventId,
+            latestExternalEventSequence: recovered.latestExternalEventSequence,
+            ...(recovered.disableReason ? { disableReason: recovered.disableReason } : {}),
+        };
+    }
+    return {
+        outcome: "retry_scheduled",
+        latestEventId: recovered.latestEventId,
+        latestExternalEventSequence: recovered.latestExternalEventSequence,
+        pendingEvents: [...input.remainingEvents, ...input.pendingEvents],
+        consecutiveFailures: input.consecutiveFailures + 1,
+        errorMessage: recovered.errorMessage ?? "Conversation run append failed",
+    };
+}
 async function waitForConversationRunPoll(ms, abortSignal) {
     if (ms <= 0 || abortSignal?.aborted) {
         return;

package/esm/src/agent/index.d.ts

@@ -93,7 +93,7 @@ export { type ConversationRunContext, createConversationRunContext, } from "./co
 export { type ConversationRootRunContext, type ConversationRootRunDescriptor, createConversationRootRunContext, createConversationRootRunStartAdapter, prepareConversationRootRunContext, startConversationRootRun, } from "./conversation-root-run-context.js";
 export { bootstrapConversationAgentRun, type BootstrapConversationAgentRunResult, type ConversationMessageRecord, ConversationMessageRecordSchema, type ConversationRecord, ConversationRecordSchema, createConversationMessage, createConversationRecord, ensureConversationProjectLink, fetchConversationRecord, } from "./conversation-bootstrap.js";
 export { type ConversationChildLifecycleContext, type ConversationHostedLifecycleFinalizeInput, createConversationChildLifecycleAdapter, createConversationHostedLifecycleAdapter, type CreateConversationHostedLifecycleAdapterOptions, } from "./conversation-hosted-lifecycle.js";
-export { type ActiveConversationRunStatus, appendConversationRunEvents, AppendConversationRunEventsError, type AppendConversationRunEventsResponse, AppendConversationRunEventsResponseSchema, CompleteConversationRunResponseSchema, type ConversationAgentRunUsage, type ConversationRunAppendCursorResyncResult, type ConversationRunAppendFailureOutcome, type ConversationRunAppendRecoveryOutcome, type ConversationRunProjection, ConversationRunProjectionSchema, ConversationRunStatusSchema, type ConversationRunTargets, ConversationRunTargetsSchema, ConversationRunTerminalStateError, createConversationAgentRun, finalizeConversationAgentRun, getConversationRun, isActiveConversationRunStatus, isAppendableConversationRunProjection, isCursorMismatchConversationRunAppendError, isIgnorableConversationRunAppendError, monitorConversationRunStatus, parseAppendConversationRunEventsErrorBody, recoverConversationRunAppendFailure, recoverConversationRunCursorMismatch, resolveConversationRunTargets, resyncConversationRunAppendCursor, type TerminalConversationRunStatus, } from "./durable.js";
+export { type ActiveConversationRunStatus, appendConversationRunEvents, AppendConversationRunEventsError, type AppendConversationRunEventsResponse, AppendConversationRunEventsResponseSchema, CompleteConversationRunResponseSchema, type ConversationAgentRunUsage, type ConversationRunAppendCursorResyncResult, type ConversationRunAppendExecutionOutcome, type ConversationRunAppendFailureOutcome, type ConversationRunAppendRecoveryOutcome, type ConversationRunProjection, ConversationRunProjectionSchema, ConversationRunStatusSchema, type ConversationRunTargets, ConversationRunTargetsSchema, ConversationRunTerminalStateError, createConversationAgentRun, finalizeConversationAgentRun, getConversationRun, isActiveConversationRunStatus, isAppendableConversationRunProjection, isCursorMismatchConversationRunAppendError, isIgnorableConversationRunAppendError, monitorConversationRunStatus, parseAppendConversationRunEventsErrorBody, recoverConversationRunAppendExecution, recoverConversationRunAppendFailure, recoverConversationRunCursorMismatch, resolveConversationRunTargets, resyncConversationRunAppendCursor, type TerminalConversationRunStatus, } from "./durable.js";
 export { buildInvokeAgentChildRunLifecycleCustomEvent, buildInvokeAgentChildRunProgressEvents, buildInvokeAgentChildRunStateDelta, type InvokeAgentChildRunLifecycleCustomEvent, InvokeAgentChildRunLifecycleCustomEventSchema, type InvokeAgentChildRunLifecycleValue, InvokeAgentChildRunLifecycleValueSchema, type InvokeAgentChildRunProgressEvent, type InvokeAgentChildRunProgressInput, type InvokeAgentChildRunStateDelta, InvokeAgentChildRunStateDeltaSchema, publishInvokeAgentChildRunProgress, } from "./invoke-agent-child-runs.js";
 export { type HostedChildLifecycleAdapter, type HostedChildLifecycleRunnerOptions, type HostedChildLifecycleRunResult, type HostedChildLifecycleTerminalState, runHostedChildLifecycle, } from "./hosted-child-lifecycle.js";
 export { type HostedLifecycleAdapter, type HostedLifecycleExecution, type HostedLifecycleRunnerOptions, type HostedLifecycleRunResult, type HostedLifecycleTerminalState, runHostedLifecycle, } from "./hosted-lifecycle.js";

package/esm/src/agent/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/src/agent/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+EG;AACH,OAAO,yBAAyB,CAAC;AAGjC,YAAY,EACV,KAAK,EACL,WAAW,EACX,YAAY,EACZ,eAAe,EACf,aAAa,EACb,WAAW,EACX,iBAAiB,EACjB,eAAe,EACf,gBAAgB,EAChB,UAAU,EACV,YAAY,EACZ,OAAO,IAAI,YAAY,EACvB,WAAW,EACX,aAAa,EACb,WAAW,EACX,qBAAqB,EACrB,sBAAsB,EACtB,mBAAmB,EACnB,sBAAsB,EACtB,oBAAoB,EACpB,mBAAmB,EACnB,oBAAoB,EACpB,cAAc,EACd,QAAQ,EACR,YAAY,EACZ,oBAAoB,EACpB,qBAAqB,EACrB,cAAc,GACf,MAAM,YAAY,CAAC;AAEpB,OAAO,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AAEnF,OAAO,EACL,YAAY,EACZ,kBAAkB,EAClB,YAAY,EACZ,iBAAiB,EACjB,KAAK,MAAM,EACX,KAAK,iBAAiB,EACtB,KAAK,WAAW,EAChB,KAAK,WAAW,EAChB,WAAW,EACX,KAAK,iBAAiB,EACtB,aAAa,GACd,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EACL,WAAW,EACX,cAAc,EACd,QAAQ,EACR,gBAAgB,EAChB,cAAc,EACd,aAAa,EACb,KAAK,cAAc,EACnB,KAAK,cAAc,EACnB,KAAK,YAAY,GAClB,MAAM,wBAAwB,CAAC;AAEhC,OAAO,EAAE,KAAK,EAAE,MAAM,cAAc,CAAC;AACrC,OAAO,EACL,KAAK,wBAAwB,EAC7B,KAAK,iCAAiC,EACtC,KAAK,yBAAyB,EAC9B,KAAK,8BAA8B,EACnC,KAAK,yBAAyB,EAC9B,KAAK,2BAA2B,EAChC,wBAAwB,GACzB,MAAM,4BAA4B,CAAC;AACpC,OAAO,EACL,KAAK,sBAAsB,EAC3B,4BAA4B,EAC5B,KAAK,uBAAuB,EAC5B,6BAA6B,EAC7B,KAAK,kBAAkB,EACvB,wBAAwB,EACxB,KAAK,kBAAkB,EACvB,wBAAwB,EACxB,uBAAuB,EACvB,8BAA8B,GAC/B,MAAM,6BAA6B,CAAC;AACrC,OAAO,EAAE,4BAA4B,EAAE,MAAM,4BAA4B,CAAC;AAC1E,OAAO,EACL,KAAK,uBAAuB,EAC5B,KAAK,uBAAuB,EAC5B,KAAK,8BAA8B,EACnC,KAAK,sBAAsB,EAC3B,gCAAgC,EAChC,6BAA6B,EAC7B,yBAAyB,EACzB,wCAAwC,GACzC,MAAM,4BAA4B,CAAC;AACpC,OAAO,EACL,KAAK,0BAA0B,EAC/B,KAAK,4BAA4B,EACjC,KAAK,+BAA+B,EACpC,+BAA+B,EAC/B,KAAK,oCAAoC,GAC1C,MAAM,oCAAoC,CAAC;AAC5C,OAAO,EACL,KAAK,sBAAsB,EAC3B,4BAA4B,GAC7B,MAAM,+BAA+B,CAAC;AACvC,OAAO,EACL,KAAK,0BAA0B,EAC/B,KAAK,6BAA6B,EAClC,gCAAgC,EAChC,qCAAqC,EACrC,iCAAiC,EACjC,wBAAwB,GACzB,MAAM,oCAAoC,CAAC;AAC5C,OAAO,EACL,6BAA6B,EAC7B,KAAK,mCAAmC,EACxC,KAAK,yBAAyB,EAC9B,+BAA+B,EAC/B,KAAK,kBAAkB,EACvB,wBAAwB,EACxB,yBAAyB,EACzB,wBAAwB,EACxB,6BAA6B,EAC7B,uBAAuB,GACxB,MAAM,6BAA6B,CAAC;AACrC,OAAO,EACL,KAAK,iCAAiC,EACtC,KAAK,wCAAwC,EAC7C,uCAAuC,EACvC,wCAAwC,EACxC,KAAK,+CAA+C,GACrD,MAAM,oCAAoC,CAAC;AAC5C,OAAO,EACL,KAAK,2BAA2B,EAChC,2BAA2B,EAC3B,gCAAgC,EAChC,KAAK,mCAAmC,EACxC,yCAAyC,EACzC,qCAAqC,EACrC,KAAK,yBAAyB,EAC9B,KAAK,uCAAuC,EAC5C,KAAK,mCAAmC,EACxC,KAAK,oCAAoC,EACzC,KAAK,yBAAyB,EAC9B,+BAA+B,EAC/B,2BAA2B,EAC3B,KAAK,sBAAsB,EAC3B,4BAA4B,EAC5B,iCAAiC,EACjC,0BAA0B,EAC1B,4BAA4B,EAC5B,kBAAkB,EAClB,6BAA6B,EAC7B,qCAAqC,EACrC,0CAA0C,EAC1C,qCAAqC,EACrC,4BAA4B,EAC5B,yCAAyC,EACzC,mCAAmC,EACnC,oCAAoC,EACpC,6BAA6B,EAC7B,iCAAiC,EACjC,KAAK,6BAA6B,GACnC,MAAM,cAAc,CAAC;AACtB,OAAO,EACL,4CAA4C,EAC5C,sCAAsC,EACtC,kCAAkC,EAClC,KAAK,uCAAuC,EAC5C,6CAA6C,EAC7C,KAAK,iCAAiC,EACtC,uCAAuC,EACvC,KAAK,gCAAgC,EACrC,KAAK,gCAAgC,EACrC,KAAK,6BAA6B,EAClC,mCAAmC,EACnC,kCAAkC,GACnC,MAAM,8BAA8B,CAAC;AACtC,OAAO,EACL,KAAK,2BAA2B,EAChC,KAAK,iCAAiC,EACtC,KAAK,6BAA6B,EAClC,KAAK,iCAAiC,EACtC,uBAAuB,GACxB,MAAM,6BAA6B,CAAC;AACrC,OAAO,EACL,KAAK,sBAAsB,EAC3B,KAAK,wBAAwB,EAC7B,KAAK,4BAA4B,EACjC,KAAK,wBAAwB,EAC7B,KAAK,4BAA4B,EACjC,kBAAkB,GACnB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,kBAAkB,EAClB,mBAAmB,EACnB,wBAAwB,EACxB,oBAAoB,EACpB,sBAAsB,EACtB,kCAAkC,GACnC,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EACL,4BAA4B,EAC5B,0BAA0B,EAC1B,KAAK,kCAAkC,GACxC,MAAM,qCAAqC,CAAC;AAC7C,OAAO,EACL,KAAK,yBAAyB,EAC9B,+BAA+B,EAC/B,KAAK,+BAA+B,EACpC,KAAK,wBAAwB,EAC7B,8BAA8B,EAC9B,8BAA8B,EAC9B,wBAAwB,EACxB,KAAK,6BAA6B,GACnC,MAAM,2BAA2B,CAAC;AACnC,OAAO,EACL,KAAK,wBAAwB,EAC7B,KAAK,wBAAwB,EAC7B,KAAK,gBAAgB,EACrB,sBAAsB,EACtB,uBAAuB,EACvB,uBAAuB,GACxB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACL,KAAK,YAAY,EACjB,uBAAuB,EACvB,0BAA0B,EAC1B,qBAAqB,EACrB,gBAAgB,EAChB,uBAAuB,GACxB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EACL,KAAK,eAAe,EACpB,KAAK,0BAA0B,EAC/B,KAAK,kBAAkB,EACvB,KAAK,gBAAgB,EACrB,KAAK,WAAW,EAChB,iBAAiB,EACjB,iBAAiB,GAClB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,KAAK,eAAe,EACpB,KAAK,oBAAoB,EACzB,qBAAqB,EACrB,KAAK,gBAAgB,EACrB,sBAAsB,EACtB,KAAK,wBAAwB,EAC7B,8BAA8B,EAC9B,KAAK,iBAAiB,EACtB,KAAK,sBAAsB,EAC3B,uBAAuB,EACvB,KAAK,gBAAgB,EACrB,sBAAsB,EACtB,qBAAqB,EACrB,4BAA4B,EAC5B,iBAAiB,EACjB,KAAK,wBAAwB,GAC9B,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EACL,KAAK,uBAAuB,EAC5B,KAAK,8BAA8B,EACnC,KAAK,6BAA6B,EAClC,KAAK,0BAA0B,EAC/B,KAAK,uBAAuB,EAC5B,KAAK,kBAAkB,EACvB,iBAAiB,GAClB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,YAAY,EACZ,qBAAqB,EACrB,iBAAiB,EACjB,iBAAiB,EACjB,uBAAuB,EACvB,KAAK,8BAA8B,EACnC,KAAK,gBAAgB,EACrB,KAAK,wBAAwB,EAC7B,iBAAiB,EACjB,mBAAmB,GACpB,MAAM,oBAAoB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/src/agent/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+EG;AACH,OAAO,yBAAyB,CAAC;AAGjC,YAAY,EACV,KAAK,EACL,WAAW,EACX,YAAY,EACZ,eAAe,EACf,aAAa,EACb,WAAW,EACX,iBAAiB,EACjB,eAAe,EACf,gBAAgB,EAChB,UAAU,EACV,YAAY,EACZ,OAAO,IAAI,YAAY,EACvB,WAAW,EACX,aAAa,EACb,WAAW,EACX,qBAAqB,EACrB,sBAAsB,EACtB,mBAAmB,EACnB,sBAAsB,EACtB,oBAAoB,EACpB,mBAAmB,EACnB,oBAAoB,EACpB,cAAc,EACd,QAAQ,EACR,YAAY,EACZ,oBAAoB,EACpB,qBAAqB,EACrB,cAAc,GACf,MAAM,YAAY,CAAC;AAEpB,OAAO,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AAEnF,OAAO,EACL,YAAY,EACZ,kBAAkB,EAClB,YAAY,EACZ,iBAAiB,EACjB,KAAK,MAAM,EACX,KAAK,iBAAiB,EACtB,KAAK,WAAW,EAChB,KAAK,WAAW,EAChB,WAAW,EACX,KAAK,iBAAiB,EACtB,aAAa,GACd,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EACL,WAAW,EACX,cAAc,EACd,QAAQ,EACR,gBAAgB,EAChB,cAAc,EACd,aAAa,EACb,KAAK,cAAc,EACnB,KAAK,cAAc,EACnB,KAAK,YAAY,GAClB,MAAM,wBAAwB,CAAC;AAEhC,OAAO,EAAE,KAAK,EAAE,MAAM,cAAc,CAAC;AACrC,OAAO,EACL,KAAK,wBAAwB,EAC7B,KAAK,iCAAiC,EACtC,KAAK,yBAAyB,EAC9B,KAAK,8BAA8B,EACnC,KAAK,yBAAyB,EAC9B,KAAK,2BAA2B,EAChC,wBAAwB,GACzB,MAAM,4BAA4B,CAAC;AACpC,OAAO,EACL,KAAK,sBAAsB,EAC3B,4BAA4B,EAC5B,KAAK,uBAAuB,EAC5B,6BAA6B,EAC7B,KAAK,kBAAkB,EACvB,wBAAwB,EACxB,KAAK,kBAAkB,EACvB,wBAAwB,EACxB,uBAAuB,EACvB,8BAA8B,GAC/B,MAAM,6BAA6B,CAAC;AACrC,OAAO,EAAE,4BAA4B,EAAE,MAAM,4BAA4B,CAAC;AAC1E,OAAO,EACL,KAAK,uBAAuB,EAC5B,KAAK,uBAAuB,EAC5B,KAAK,8BAA8B,EACnC,KAAK,sBAAsB,EAC3B,gCAAgC,EAChC,6BAA6B,EAC7B,yBAAyB,EACzB,wCAAwC,GACzC,MAAM,4BAA4B,CAAC;AACpC,OAAO,EACL,KAAK,0BAA0B,EAC/B,KAAK,4BAA4B,EACjC,KAAK,+BAA+B,EACpC,+BAA+B,EAC/B,KAAK,oCAAoC,GAC1C,MAAM,oCAAoC,CAAC;AAC5C,OAAO,EACL,KAAK,sBAAsB,EAC3B,4BAA4B,GAC7B,MAAM,+BAA+B,CAAC;AACvC,OAAO,EACL,KAAK,0BAA0B,EAC/B,KAAK,6BAA6B,EAClC,gCAAgC,EAChC,qCAAqC,EACrC,iCAAiC,EACjC,wBAAwB,GACzB,MAAM,oCAAoC,CAAC;AAC5C,OAAO,EACL,6BAA6B,EAC7B,KAAK,mCAAmC,EACxC,KAAK,yBAAyB,EAC9B,+BAA+B,EAC/B,KAAK,kBAAkB,EACvB,wBAAwB,EACxB,yBAAyB,EACzB,wBAAwB,EACxB,6BAA6B,EAC7B,uBAAuB,GACxB,MAAM,6BAA6B,CAAC;AACrC,OAAO,EACL,KAAK,iCAAiC,EACtC,KAAK,wCAAwC,EAC7C,uCAAuC,EACvC,wCAAwC,EACxC,KAAK,+CAA+C,GACrD,MAAM,oCAAoC,CAAC;AAC5C,OAAO,EACL,KAAK,2BAA2B,EAChC,2BAA2B,EAC3B,gCAAgC,EAChC,KAAK,mCAAmC,EACxC,yCAAyC,EACzC,qCAAqC,EACrC,KAAK,yBAAyB,EAC9B,KAAK,uCAAuC,EAC5C,KAAK,qCAAqC,EAC1C,KAAK,mCAAmC,EACxC,KAAK,oCAAoC,EACzC,KAAK,yBAAyB,EAC9B,+BAA+B,EAC/B,2BAA2B,EAC3B,KAAK,sBAAsB,EAC3B,4BAA4B,EAC5B,iCAAiC,EACjC,0BAA0B,EAC1B,4BAA4B,EAC5B,kBAAkB,EAClB,6BAA6B,EAC7B,qCAAqC,EACrC,0CAA0C,EAC1C,qCAAqC,EACrC,4BAA4B,EAC5B,yCAAyC,EACzC,qCAAqC,EACrC,mCAAmC,EACnC,oCAAoC,EACpC,6BAA6B,EAC7B,iCAAiC,EACjC,KAAK,6BAA6B,GACnC,MAAM,cAAc,CAAC;AACtB,OAAO,EACL,4CAA4C,EAC5C,sCAAsC,EACtC,kCAAkC,EAClC,KAAK,uCAAuC,EAC5C,6CAA6C,EAC7C,KAAK,iCAAiC,EACtC,uCAAuC,EACvC,KAAK,gCAAgC,EACrC,KAAK,gCAAgC,EACrC,KAAK,6BAA6B,EAClC,mCAAmC,EACnC,kCAAkC,GACnC,MAAM,8BAA8B,CAAC;AACtC,OAAO,EACL,KAAK,2BAA2B,EAChC,KAAK,iCAAiC,EACtC,KAAK,6BAA6B,EAClC,KAAK,iCAAiC,EACtC,uBAAuB,GACxB,MAAM,6BAA6B,CAAC;AACrC,OAAO,EACL,KAAK,sBAAsB,EAC3B,KAAK,wBAAwB,EAC7B,KAAK,4BAA4B,EACjC,KAAK,wBAAwB,EAC7B,KAAK,4BAA4B,EACjC,kBAAkB,GACnB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,kBAAkB,EAClB,mBAAmB,EACnB,wBAAwB,EACxB,oBAAoB,EACpB,sBAAsB,EACtB,kCAAkC,GACnC,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EACL,4BAA4B,EAC5B,0BAA0B,EAC1B,KAAK,kCAAkC,GACxC,MAAM,qCAAqC,CAAC;AAC7C,OAAO,EACL,KAAK,yBAAyB,EAC9B,+BAA+B,EAC/B,KAAK,+BAA+B,EACpC,KAAK,wBAAwB,EAC7B,8BAA8B,EAC9B,8BAA8B,EAC9B,wBAAwB,EACxB,KAAK,6BAA6B,GACnC,MAAM,2BAA2B,CAAC;AACnC,OAAO,EACL,KAAK,wBAAwB,EAC7B,KAAK,wBAAwB,EAC7B,KAAK,gBAAgB,EACrB,sBAAsB,EACtB,uBAAuB,EACvB,uBAAuB,GACxB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACL,KAAK,YAAY,EACjB,uBAAuB,EACvB,0BAA0B,EAC1B,qBAAqB,EACrB,gBAAgB,EAChB,uBAAuB,GACxB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EACL,KAAK,eAAe,EACpB,KAAK,0BAA0B,EAC/B,KAAK,kBAAkB,EACvB,KAAK,gBAAgB,EACrB,KAAK,WAAW,EAChB,iBAAiB,EACjB,iBAAiB,GAClB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,KAAK,eAAe,EACpB,KAAK,oBAAoB,EACzB,qBAAqB,EACrB,KAAK,gBAAgB,EACrB,sBAAsB,EACtB,KAAK,wBAAwB,EAC7B,8BAA8B,EAC9B,KAAK,iBAAiB,EACtB,KAAK,sBAAsB,EAC3B,uBAAuB,EACvB,KAAK,gBAAgB,EACrB,sBAAsB,EACtB,qBAAqB,EACrB,4BAA4B,EAC5B,iBAAiB,EACjB,KAAK,wBAAwB,GAC9B,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EACL,KAAK,uBAAuB,EAC5B,KAAK,8BAA8B,EACnC,KAAK,6BAA6B,EAClC,KAAK,0BAA0B,EAC/B,KAAK,uBAAuB,EAC5B,KAAK,kBAAkB,EACvB,iBAAiB,GAClB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,YAAY,EACZ,qBAAqB,EACrB,iBAAiB,EACjB,iBAAiB,EACjB,uBAAuB,EACvB,KAAK,8BAA8B,EACnC,KAAK,gBAAgB,EACrB,KAAK,wBAAwB,EAC7B,iBAAiB,EACjB,mBAAmB,GACpB,MAAM,oBAAoB,CAAC"}

package/esm/src/agent/index.js

@@ -92,7 +92,7 @@ export { createConversationRunContext, } from "./conversation-run-context.js";
 export { createConversationRootRunContext, createConversationRootRunStartAdapter, prepareConversationRootRunContext, startConversationRootRun, } from "./conversation-root-run-context.js";
 export { bootstrapConversationAgentRun, ConversationMessageRecordSchema, ConversationRecordSchema, createConversationMessage, createConversationRecord, ensureConversationProjectLink, fetchConversationRecord, } from "./conversation-bootstrap.js";
 export { createConversationChildLifecycleAdapter, createConversationHostedLifecycleAdapter, } from "./conversation-hosted-lifecycle.js";
-export { appendConversationRunEvents, AppendConversationRunEventsError, AppendConversationRunEventsResponseSchema, CompleteConversationRunResponseSchema, ConversationRunProjectionSchema, ConversationRunStatusSchema, ConversationRunTargetsSchema, ConversationRunTerminalStateError, createConversationAgentRun, finalizeConversationAgentRun, getConversationRun, isActiveConversationRunStatus, isAppendableConversationRunProjection, isCursorMismatchConversationRunAppendError, isIgnorableConversationRunAppendError, monitorConversationRunStatus, parseAppendConversationRunEventsErrorBody, recoverConversationRunAppendFailure, recoverConversationRunCursorMismatch, resolveConversationRunTargets, resyncConversationRunAppendCursor, } from "./durable.js";
+export { appendConversationRunEvents, AppendConversationRunEventsError, AppendConversationRunEventsResponseSchema, CompleteConversationRunResponseSchema, ConversationRunProjectionSchema, ConversationRunStatusSchema, ConversationRunTargetsSchema, ConversationRunTerminalStateError, createConversationAgentRun, finalizeConversationAgentRun, getConversationRun, isActiveConversationRunStatus, isAppendableConversationRunProjection, isCursorMismatchConversationRunAppendError, isIgnorableConversationRunAppendError, monitorConversationRunStatus, parseAppendConversationRunEventsErrorBody, recoverConversationRunAppendExecution, recoverConversationRunAppendFailure, recoverConversationRunCursorMismatch, resolveConversationRunTargets, resyncConversationRunAppendCursor, } from "./durable.js";
 export { buildInvokeAgentChildRunLifecycleCustomEvent, buildInvokeAgentChildRunProgressEvents, buildInvokeAgentChildRunStateDelta, InvokeAgentChildRunLifecycleCustomEventSchema, InvokeAgentChildRunLifecycleValueSchema, InvokeAgentChildRunStateDeltaSchema, publishInvokeAgentChildRunProgress, } from "./invoke-agent-child-runs.js";
 export { runHostedChildLifecycle, } from "./hosted-child-lifecycle.js";
 export { runHostedLifecycle, } from "./hosted-lifecycle.js";

package/esm/src/integrations/schema.d.ts

@@ -70,9 +70,9 @@ export declare const OAuthFieldSchema: z.ZodObject<{
 }, z.core.$strip>;
 export declare const OAuthConfigSchema: z.ZodObject<{
     type: z.ZodEnum<{
-        "api-key": "api-key";
         oauth2: "oauth2";
         oauth1: "oauth1";
+        "api-key": "api-key";
     }>;
     provider: z.ZodOptional<z.ZodString>;
     authorizationUrl: z.ZodOptional<z.ZodString>;
@@ -310,9 +310,9 @@ export declare const IntegrationConfigSchema: z.ZodObject<{
     description: z.ZodString;
     auth: z.ZodObject<{
         type: z.ZodEnum<{
-            "api-key": "api-key";
             oauth2: "oauth2";
             oauth1: "oauth1";
+            "api-key": "api-key";
         }>;
         provider: z.ZodOptional<z.ZodString>;
         authorizationUrl: z.ZodOptional<z.ZodString>;

package/esm/src/mcp/index.d.ts

@@ -17,8 +17,13 @@
  *   execute: async ({ query }) => ({ results: [] }),
  * });
  *
- * // Start MCP server — registered tools are exposed automatically
- * const server = createMCPServer();
+ * // Start MCP server — registered tools are exposed automatically.
+ * // `auth` is required: use bearer for production, or the explicit
+ * // `{ type: "none", allowUnauthenticated: true }` opt-in for local dev only.
+ * const server = createMCPServer({
+ *   enabled: true,
+ *   auth: { type: "none", allowUnauthenticated: true },
+ * });
  * ```
  */
 import "../../_dnt.polyfills.js";

package/esm/src/mcp/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/src/mcp/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,OAAO,yBAAyB,CAAC;AAGjC,YAAY,EACV,eAAe,EACf,QAAQ,EACR,OAAO,EACP,eAAe,EACf,aAAa,GACd,MAAM,YAAY,CAAC;AAEpB,OAAO,EACL,gBAAgB,EAChB,cAAc,EACd,WAAW,EACX,cAAc,EACd,gBAAgB,EAChB,YAAY,GACb,MAAM,eAAe,CAAC;AAEvB,OAAO,EAAE,eAAe,EAAE,KAAK,uBAAuB,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAEvF,OAAO,EACL,oBAAoB,EACpB,mBAAmB,EACnB,KAAK,kBAAkB,EACvB,KAAK,sBAAsB,EAC3B,KAAK,qBAAqB,GAC3B,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,cAAc,EAAE,qBAAqB,EAAE,cAAc,EAAE,MAAM,UAAU,CAAC;AACjF,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAC9C,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAC5C,YAAY,EAAE,IAAI,EAAE,MAAM,iBAAiB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/src/mcp/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AACH,OAAO,yBAAyB,CAAC;AAGjC,YAAY,EACV,eAAe,EACf,QAAQ,EACR,OAAO,EACP,eAAe,EACf,aAAa,GACd,MAAM,YAAY,CAAC;AAEpB,OAAO,EACL,gBAAgB,EAChB,cAAc,EACd,WAAW,EACX,cAAc,EACd,gBAAgB,EAChB,YAAY,GACb,MAAM,eAAe,CAAC;AAEvB,OAAO,EAAE,eAAe,EAAE,KAAK,uBAAuB,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAEvF,OAAO,EACL,oBAAoB,EACpB,mBAAmB,EACnB,KAAK,kBAAkB,EACvB,KAAK,sBAAsB,EAC3B,KAAK,qBAAqB,GAC3B,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,cAAc,EAAE,qBAAqB,EAAE,cAAc,EAAE,MAAM,UAAU,CAAC;AACjF,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAC9C,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAC5C,YAAY,EAAE,IAAI,EAAE,MAAM,iBAAiB,CAAC"}

package/esm/src/mcp/index.js

@@ -17,8 +17,13 @@
  *   execute: async ({ query }) => ({ results: [] }),
  * });
  *
- * // Start MCP server — registered tools are exposed automatically
- * const server = createMCPServer();
+ * // Start MCP server — registered tools are exposed automatically.
+ * // `auth` is required: use bearer for production, or the explicit
+ * // `{ type: "none", allowUnauthenticated: true }` opt-in for local dev only.
+ * const server = createMCPServer({
+ *   enabled: true,
+ *   auth: { type: "none", allowUnauthenticated: true },
+ * });
  * ```
  */
 import "../../_dnt.polyfills.js";

package/esm/src/mcp/schemas/index.d.ts

@@ -3,5 +3,5 @@
  *
  * @module mcp/schemas
  */
-export { type MCPServerConfig, MCPServerConfigSchema, type MCPStats, MCPStatsSchema, } from "./mcp.schema.js";
+export { MCPAuthConfigSchema, type MCPServerConfig, MCPServerConfigSchema, type MCPStats, MCPStatsSchema, } from "./mcp.schema.js";
 //# sourceMappingURL=index.d.ts.map

package/esm/src/mcp/schemas/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/src/mcp/schemas/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EACL,KAAK,eAAe,EACpB,qBAAqB,EACrB,KAAK,QAAQ,EACb,cAAc,GACf,MAAM,iBAAiB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/src/mcp/schemas/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EACL,mBAAmB,EACnB,KAAK,eAAe,EACpB,qBAAqB,EACrB,KAAK,QAAQ,EACb,cAAc,GACf,MAAM,iBAAiB,CAAC"}

package/esm/src/mcp/schemas/index.js

@@ -3,4 +3,4 @@
  *
  * @module mcp/schemas
  */
-export { MCPServerConfigSchema, MCPStatsSchema, } from "./mcp.schema.js";
+export { MCPAuthConfigSchema, MCPServerConfigSchema, MCPStatsSchema, } from "./mcp.schema.js";

package/esm/src/mcp/schemas/mcp.schema.d.ts

@@ -1,15 +1,21 @@
 import { z } from "zod";
+export declare const MCPAuthConfigSchema: z.ZodUnion<readonly [z.ZodObject<{
+    type: z.ZodLiteral<"bearer">;
+    validate: z.ZodOptional<z.ZodFunction<z.core.$ZodFunctionArgs, z.core.$ZodFunctionOut>>;
+}, z.core.$strip>, z.ZodObject<{
+    type: z.ZodLiteral<"none">;
+    allowUnauthenticated: z.ZodLiteral<true>;
+}, z.core.$strip>]>;
 export declare const MCPServerConfigSchema: z.ZodObject<{
     enabled: z.ZodBoolean;
     port: z.ZodOptional<z.ZodNumber>;
-    auth: z.ZodOptional<z.ZodObject<{
-        type: z.ZodEnum<{
-            bearer: "bearer";
-            none: "none";
-            "api-key": "api-key";
-        }>;
+    auth: z.ZodUnion<readonly [z.ZodObject<{
+        type: z.ZodLiteral<"bearer">;
         validate: z.ZodOptional<z.ZodFunction<z.core.$ZodFunctionArgs, z.core.$ZodFunctionOut>>;
-    }, z.core.$strip>>;
+    }, z.core.$strip>, z.ZodObject<{
+        type: z.ZodLiteral<"none">;
+        allowUnauthenticated: z.ZodLiteral<true>;
+    }, z.core.$strip>]>;
     cors: z.ZodOptional<z.ZodObject<{
         enabled: z.ZodBoolean;
         origins: z.ZodOptional<z.ZodArray<z.ZodString>>;

package/esm/src/mcp/schemas/mcp.schema.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"mcp.schema.d.ts","sourceRoot":"","sources":["../../../../src/src/mcp/schemas/mcp.schema.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,eAAO,MAAM,qBAAqB;;;;;;;;;;;;;;;iBAgBhC,CAAC;AAEH,eAAO,MAAM,cAAc;;;;;iBAKzB,CAAC;AAGH,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AACpE,MAAM,MAAM,QAAQ,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,CAAC"}
+{"version":3,"file":"mcp.schema.d.ts","sourceRoot":"","sources":["../../../../src/src/mcp/schemas/mcp.schema.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAmBxB,eAAO,MAAM,mBAAmB;;;;;;mBAAiD,CAAC;AAElF,eAAO,MAAM,qBAAqB;;;;;;;;;;;;;;iBAUhC,CAAC;AAEH,eAAO,MAAM,cAAc;;;;;iBAKzB,CAAC;AAGH,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AACpE,MAAM,MAAM,QAAQ,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,CAAC"}

package/esm/src/mcp/schemas/mcp.schema.js

@@ -1,14 +1,24 @@
 import { z } from "zod";
+/**
+ * MCP auth configuration. One of:
+ * - `{ type: "bearer", validate?: (token) => Promise<boolean> }` — bearer-token auth.
+ * - `{ type: "none", allowUnauthenticated: true }` — explicit opt-in to an
+ *   unauthenticated server. Required for local dev/testing; prevents accidental
+ *   exposure of the JSON-RPC surface in production (VULN-SRV-5).
+ */
+const AuthValidatedSchema = z.object({
+    type: z.literal("bearer"),
+    validate: z.function().optional(),
+});
+const AuthNoneSchema = z.object({
+    type: z.literal("none"),
+    allowUnauthenticated: z.literal(true),
+});
+export const MCPAuthConfigSchema = z.union([AuthValidatedSchema, AuthNoneSchema]);
 export const MCPServerConfigSchema = z.object({
     enabled: z.boolean(),
     port: z.number().int().positive().optional(),
-    auth: z
-        .object({
-        type: z.enum(["bearer", "api-key", "none"]),
-        validate: z.function()
-            .optional(),
-    })
-        .optional(),
+    auth: MCPAuthConfigSchema,
     cors: z
         .object({
         enabled: z.boolean(),

package/esm/src/mcp/server.d.ts

@@ -41,6 +41,19 @@ export declare class MCPServer {
         params?: unknown;
     }) => void;
     constructor(config: MCPServerConfig);
+    /**
+     * Fail-closed validation of the auth configuration (VULN-SRV-5).
+     *
+     * Historically, an unset `auth` field — or `{ type: "none" }` — silently
+     * accepted every request with only a warning log. That meant an operator who
+     * forgot to configure auth shipped an unauthenticated JSON-RPC surface.
+     *
+     * The new contract: `auth` is required, and the only way to accept
+     * unauthenticated traffic is to explicitly set
+     * `{ type: "none", allowUnauthenticated: true }`. Any other shape is
+     * rejected at construction time.
+     */
+    private static validateAuthConfig;
     notifyToolsChanged(): void;
     notifyResourcesChanged(): void;
     notifyPromptsChanged(): void;

package/esm/src/mcp/server.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../../../src/src/mcp/server.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,kBAAkB,CAAC;AAI7D,OAAO,KAAK,EAAE,eAAe,EAAiB,MAAM,YAAY,CAAC;AAIjE,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,0BAA0B,CAAC;AAWzE,KAAK,aAAa,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,EAAE,CAAC;AA2CzD,UAAU,cAAc;IACtB,OAAO,EAAE,KAAK,CAAC;IACf,EAAE,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IACrB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,aAAa,CAAC;CACxB;AAED,UAAU,eAAe;IACvB,OAAO,EAAE,KAAK,CAAC;IACf,EAAE,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IACrB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,KAAK,CAAC,EAAE;QACN,IAAI,EAAE,MAAM,CAAC;QACb,OAAO,EAAE,MAAM,CAAC;QAChB,IAAI,CAAC,EAAE,OAAO,CAAC;KAChB,CAAC;CACH;AAED,MAAM,WAAW,uBAAuB;IACtC,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,wBAAwB,GAAG,SAAS,CAAC,CAAC;IACnE,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAID,qBAAa,SAAS;IACpB,OAAO,CAAC,MAAM,CAAC,UAAU,CASd;IACX,OAAO,CAAC,QAAQ,CAAkD;IAClE,OAAO,CAAC,MAAM,CAAkB;IAChC,OAAO,CAAC,iBAAiB,CAAC,CAA0B;IACpD,OAAO,CAAC,kBAAkB,CAAS;IACnC,OAAO,CAAC,cAAc,CAAwB;IAC9C,OAAO,CAAC,SAAS,CAAmB;IACpC,OAAO,CAAC,YAAY,CAAoC;IACxD,OAAO,CAAC,kBAAkB,CAA+B;IACzD,OAAO,CAAC,mBAAmB,CAA8C;IAEzE,2EAA2E;IAC3E,cAAc,CAAC,EAAE,CAAC,YAAY,EAAE;QAAE,OAAO,EAAE,KAAK,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,OAAO,CAAA;KAAE,KAAK,IAAI,CAAC;gBAElF,MAAM,EAAE,eAAe;IAQnC,kBAAkB,IAAI,IAAI;IAI1B,sBAAsB,IAAI,IAAI;IAI9B,oBAAoB,IAAI,IAAI;IAI5B;;;;;;OAMG;IACH,oBAAoB,CAAC,MAAM,EAAE,uBAAuB,GAAG,IAAI;IAK3D,yBAAyB,CAAC,IAAI,EAAE,MAAM,GAAG,KAAK,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG,OAAO;IAY5E,aAAa,CAAC,OAAO,EAAE,cAAc,EAAE,OAAO,CAAC,EAAE,oBAAoB,GAAG,OAAO,CAAC,eAAe,CAAC;IAmBhG,OAAO,CAAC,QAAQ;IAiDhB,OAAO,CAAC,UAAU;YAgCJ,SAAS;IA6BvB,OAAO,CAAC,QAAQ;IAkGhB,OAAO,CAAC,qBAAqB;IAuB7B,OAAO,CAAC,aAAa;IAoBrB,OAAO,CAAC,YAAY;IA6CpB,OAAO,CAAC,WAAW;IAgBnB,OAAO,CAAC,SAAS;IAuCjB,OAAO,CAAC,QAAQ;IAUhB,OAAO,CAAC,WAAW;IAmBnB,OAAO,CAAC,OAAO;IAYf,OAAO,CAAC,aAAa;IAgBrB,OAAO,CAAC,UAAU;IAalB,OAAO,CAAC,SAAS;IAIjB,0EAA0E;IAC1E,mBAAmB,IAAI,OAAO,CAAC,IAAI,CAAC;IAIpC,iBAAiB,IAAI,CAAC,OAAO,EAAE,OAAO,KAAK,OAAO,CAAC,QAAQ,CAAC;IAiB5D,OAAO,CAAC,qBAAqB;YAgBf,YAAY;IAsB1B,OAAO,CAAC,cAAc;YAsBR,0BAA0B;CA0BzC;AAED,wBAAgB,eAAe,CAAC,MAAM,EAAE,eAAe,GAAG,SAAS,CAElE"}
+{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../../../src/src/mcp/server.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,kBAAkB,CAAC;AAI7D,OAAO,KAAK,EAAE,eAAe,EAAiB,MAAM,YAAY,CAAC;AAIjE,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,0BAA0B,CAAC;AAWzE,KAAK,aAAa,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,EAAE,CAAC;AA2CzD,UAAU,cAAc;IACtB,OAAO,EAAE,KAAK,CAAC;IACf,EAAE,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IACrB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,aAAa,CAAC;CACxB;AAED,UAAU,eAAe;IACvB,OAAO,EAAE,KAAK,CAAC;IACf,EAAE,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IACrB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,KAAK,CAAC,EAAE;QACN,IAAI,EAAE,MAAM,CAAC;QACb,OAAO,EAAE,MAAM,CAAC;QAChB,IAAI,CAAC,EAAE,OAAO,CAAC;KAChB,CAAC;CACH;AAED,MAAM,WAAW,uBAAuB;IACtC,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,wBAAwB,GAAG,SAAS,CAAC,CAAC;IACnE,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAID,qBAAa,SAAS;IACpB,OAAO,CAAC,MAAM,CAAC,UAAU,CASd;IACX,OAAO,CAAC,QAAQ,CAAkD;IAClE,OAAO,CAAC,MAAM,CAAkB;IAChC,OAAO,CAAC,iBAAiB,CAAC,CAA0B;IACpD,OAAO,CAAC,kBAAkB,CAAS;IACnC,OAAO,CAAC,cAAc,CAAwB;IAC9C,OAAO,CAAC,SAAS,CAAmB;IACpC,OAAO,CAAC,YAAY,CAAoC;IACxD,OAAO,CAAC,kBAAkB,CAA+B;IACzD,OAAO,CAAC,mBAAmB,CAA8C;IAEzE,2EAA2E;IAC3E,cAAc,CAAC,EAAE,CAAC,YAAY,EAAE;QAAE,OAAO,EAAE,KAAK,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,OAAO,CAAA;KAAE,KAAK,IAAI,CAAC;gBAElF,MAAM,EAAE,eAAe;IAWnC;;;;;;;;;;;OAWG;IACH,OAAO,CAAC,MAAM,CAAC,kBAAkB;IAyCjC,kBAAkB,IAAI,IAAI;IAI1B,sBAAsB,IAAI,IAAI;IAI9B,oBAAoB,IAAI,IAAI;IAI5B;;;;;;OAMG;IACH,oBAAoB,CAAC,MAAM,EAAE,uBAAuB,GAAG,IAAI;IAK3D,yBAAyB,CAAC,IAAI,EAAE,MAAM,GAAG,KAAK,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG,OAAO;IAY5E,aAAa,CAAC,OAAO,EAAE,cAAc,EAAE,OAAO,CAAC,EAAE,oBAAoB,GAAG,OAAO,CAAC,eAAe,CAAC;IAmBhG,OAAO,CAAC,QAAQ;IAiDhB,OAAO,CAAC,UAAU;YAgCJ,SAAS;IA6BvB,OAAO,CAAC,QAAQ;IAkGhB,OAAO,CAAC,qBAAqB;IAuB7B,OAAO,CAAC,aAAa;IAoBrB,OAAO,CAAC,YAAY;IA6CpB,OAAO,CAAC,WAAW;IAgBnB,OAAO,CAAC,SAAS;IAuCjB,OAAO,CAAC,QAAQ;IAUhB,OAAO,CAAC,WAAW;IAmBnB,OAAO,CAAC,OAAO;IAYf,OAAO,CAAC,aAAa;IAgBrB,OAAO,CAAC,UAAU;IAalB,OAAO,CAAC,SAAS;IAIjB,0EAA0E;IAC1E,mBAAmB,IAAI,OAAO,CAAC,IAAI,CAAC;IAIpC,iBAAiB,IAAI,CAAC,OAAO,EAAE,OAAO,KAAK,OAAO,CAAC,QAAQ,CAAC;IAiB5D,OAAO,CAAC,qBAAqB;YAgBf,YAAY;IAoB1B,OAAO,CAAC,cAAc;YAsBR,0BAA0B;CA0BzC;AAED,wBAAgB,eAAe,CAAC,MAAM,EAAE,eAAe,GAAG,SAAS,CAElE"}

package/esm/src/mcp/server.js

@@ -73,11 +73,50 @@ export class MCPServer {
     /** Callback for server-initiated notifications. Set by transport layer. */
     onNotification;
     constructor(config) {
+        MCPServer.validateAuthConfig(config);
         this.config = config;
-        if (!config.auth || config.auth.type === "none") {
-            logger.warn("MCP server has no authentication configured — all requests will be accepted");
+        if (config.auth.type === "none") {
+            logger.warn("MCP server started with auth.type='none' (allowUnauthenticated) — all requests will be accepted");
         }
     }
+    /**
+     * Fail-closed validation of the auth configuration (VULN-SRV-5).
+     *
+     * Historically, an unset `auth` field — or `{ type: "none" }` — silently
+     * accepted every request with only a warning log. That meant an operator who
+     * forgot to configure auth shipped an unauthenticated JSON-RPC surface.
+     *
+     * The new contract: `auth` is required, and the only way to accept
+     * unauthenticated traffic is to explicitly set
+     * `{ type: "none", allowUnauthenticated: true }`. Any other shape is
+     * rejected at construction time.
+     */
+    static validateAuthConfig(config) {
+        const auth = config.auth;
+        if (auth === undefined || auth === null) {
+            throw new Error("MCP auth must be configured. For local dev, pass " +
+                "{ auth: { type: 'none', allowUnauthenticated: true } } explicitly.");
+        }
+        if (typeof auth !== "object") {
+            throw new Error("MCP auth must be an object. For local dev, pass " +
+                "{ auth: { type: 'none', allowUnauthenticated: true } } explicitly.");
+        }
+        const type = auth.type;
+        if (type === "none") {
+            const allow = auth.allowUnauthenticated;
+            if (allow !== true) {
+                throw new Error("MCP auth type 'none' requires allowUnauthenticated: true to acknowledge " +
+                    "the server will accept all requests.");
+            }
+            return;
+        }
+        if (type === "bearer") {
+            return;
+        }
+        throw new Error(`MCP auth type '${String(type)}' is not supported. Use 'bearer' ` +
+            "or { type: 'none', allowUnauthenticated: true } for explicit opt-in to " +
+            "unauthenticated traffic.");
+    }
     notifyToolsChanged() {
         this.onNotification?.({ jsonrpc: "2.0", method: "notifications/tools/list_changed" });
     }
@@ -470,7 +509,7 @@ export class MCPServer {
     }
     createHTTPHandler() {
         return createMCPHTTPHandler({
-            authEnabled: Boolean(this.config.auth?.type && this.config.auth.type !== "none"),
+            authEnabled: this.config.auth.type !== "none",
             getCORSHeaders: (requestOrigin) => this.getCORSHeaders(requestOrigin),
             validateAuth: (request) => this.validateAuth(request),
             handleRequest: (request, context) => this.handleRequest(request, context),
@@ -497,13 +536,11 @@ export class MCPServer {
     }
     async validateAuth(request) {
         const auth = this.config.auth;
-        if (!auth || auth.type === "none")
+        if (auth.type === "none")
             return true;
         const authHeader = request.headers.get("Authorization");
         if (!authHeader)
             return false;
-        if (auth.type !== "bearer")
-            return false;
         const token = authHeader.replace("Bearer ", "");
         // When bearer auth is configured without a validate function, reject all requests
         if (!auth.validate) {

package/esm/src/utils/version-constant.d.ts

@@ -1,2 +1,2 @@
-export declare const VERSION = "0.1.246";
+export declare const VERSION = "0.1.247";
 //# sourceMappingURL=version-constant.d.ts.map

package/esm/src/utils/version-constant.js

@@ -1,3 +1,3 @@
 // Keep in sync with deno.json version.
 // scripts/release.ts updates this constant during releases.
-export const VERSION = "0.1.246";
+export const VERSION = "0.1.247";

package/esm/src/workflow/claude-code/workspace-sync.d.ts

@@ -77,7 +77,11 @@ export declare class WorkspaceSync {
      */
     detectChanges(): Promise<FileChange[]>;
     /**
-     * Recursively walk directory and detect changes
+     * Recursively walk directory and detect changes.
+     *
+     * SECURITY: Uses lstat (not stat) and skips any symlink it finds, so a
+     * symlink planted inside the workspace cannot cause us to descend into —
+     * or read the contents of — files outside the workspace (VULN-FS-4).
      */
     private walkAndDetect;
     /**
@@ -91,7 +95,18 @@ export declare class WorkspaceSync {
         onUpload?: (path: string, content: string, type: FileChange["type"]) => Promise<void>;
     }): Promise<UploadResult>;
     /**
-     * Safely resolve a path within the workspace, preventing path traversal attacks
+     * Safely resolve a path within the workspace, preventing path traversal
+     * and symlink-based escapes (VULN-FS-4).
+     *
+     * - Rejects NUL bytes outright.
+     * - Rejects any intermediate path segment that is a symlink.
+     * - Re-checks containment by realpath-ing the parent directory after the
+     *   segment walk, so a symlink that resolves through a non-symlink directory
+     *   chain still cannot escape the workspace.
+     *
+     * Note: this deliberately rejects ALL symlinks inside the workspace — even
+     * those whose targets remain within it — because the race window between
+     * resolution and use is not worth the complexity for our use-case.
      */
     private resolveSafePath;
     /**

package/esm/src/workflow/claude-code/workspace-sync.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"workspace-sync.d.ts","sourceRoot":"","sources":["../../../../src/src/workflow/claude-code/workspace-sync.ts"],"names":[],"mappings":"AAgBA,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAC;AASzD;;GAEG;AACH,MAAM,WAAW,eAAe;IAC9B,yEAAyE;IACzE,OAAO,CAAC,EAAE,MAAM,CAAC;IAEjB,4CAA4C;IAC5C,KAAK,EAAE,MAAM,CAAC;IAEd,oCAAoC;IACpC,MAAM,EAAE,qBAAqB,CAAC;IAE9B,yDAAyD;IACzD,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IAEnB,2CAA2C;IAC3C,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IAEnB,uDAAuD;IACvD,WAAW,CAAC,EAAE,MAAM,CAAC;IAErB,2BAA2B;IAC3B,KAAK,CAAC,EAAE,OAAO,CAAC;CACjB;AAED;;GAEG;AACH,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,SAAS,GAAG,UAAU,GAAG,SAAS,CAAC;IACzC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED;;GAEG;AACH,MAAM,WAAW,mBAAmB;IAClC,gCAAgC;IAChC,YAAY,EAAE,MAAM,CAAC;IAErB,iCAAiC;IACjC,eAAe,EAAE,MAAM,CAAC;IAExB,6BAA6B;IAC7B,eAAe,EAAE,MAAM,CAAC;IAExB,oDAAoD;IACpD,YAAY,EAAE,MAAM,EAAE,CAAC;IAEvB,qBAAqB;IACrB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED;;GAEG;AACH,MAAM,WAAW,YAAY;IAC3B,+BAA+B;IAC/B,QAAQ,EAAE,UAAU,EAAE,CAAC;IAEvB,kCAAkC;IAClC,MAAM,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAE/C,qBAAqB;IACrB,QAAQ,EAAE,MAAM,CAAC;CAClB;AA8CD;;GAEG;AACH,qBAAa,aAAa;IACxB,OAAO,CAAC,MAAM,CAGZ;IACF,OAAO,CAAC,aAAa,CAA6B;IAClD,OAAO,CAAC,WAAW,CAAS;gBAEhB,MAAM,EAAE,eAAe;IAgBnC;;OAEG;IACH,IAAI,YAAY,IAAI,MAAM,CAEzB;IAED;;OAEG;IACG,UAAU,IAAI,OAAO,CAAC,mBAAmB,CAAC;IAiGhD;;OAEG;IACG,aAAa,IAAI,OAAO,CAAC,UAAU,EAAE,CAAC;IAwC5C;;OAEG;YACW,aAAa;IAyC3B;;;;;OAKG;IACG,aAAa,CACjB,OAAO,EAAE,UAAU,EAAE,EACrB,OAAO,GAAE;QACP,8CAA8C;QAC9C,QAAQ,CAAC,EAAE,CACT,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,UAAU,CAAC,MAAM,CAAC,KACrB,OAAO,CAAC,IAAI,CAAC,CAAC;KACf,GACL,OAAO,CAAC,YAAY,CAAC;IA6CxB;;OAEG;IACH,OAAO,CAAC,eAAe;IAgBvB;;OAEG;IACG,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAK7C;;OAEG;IACG,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAU7D;;OAEG;IACG,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAK7C;;OAEG;IACG,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAWhD;;OAEG;IACG,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC;CAgB/B;AAED;;GAEG;AACH,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,eAAe,GAAG,aAAa,CAE1E;AAED;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,wBAAsB,aAAa,CAAC,CAAC,EACnC,MAAM,EAAE,eAAe,EACvB,EAAE,EAAE,CAAC,SAAS,EAAE,aAAa,KAAK,OAAO,CAAC,CAAC,CAAC,GAC3C,OAAO,CAAC;IACT,MAAM,EAAE,CAAC,CAAC;IACV,OAAO,EAAE,UAAU,EAAE,CAAC;IACtB,UAAU,EAAE,mBAAmB,CAAC;CACjC,CAAC,CAkBD"}
+{"version":3,"file":"workspace-sync.d.ts","sourceRoot":"","sources":["../../../../src/src/workflow/claude-code/workspace-sync.ts"],"names":[],"mappings":"AAgBA,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAC;AAUzD;;GAEG;AACH,MAAM,WAAW,eAAe;IAC9B,yEAAyE;IACzE,OAAO,CAAC,EAAE,MAAM,CAAC;IAEjB,4CAA4C;IAC5C,KAAK,EAAE,MAAM,CAAC;IAEd,oCAAoC;IACpC,MAAM,EAAE,qBAAqB,CAAC;IAE9B,yDAAyD;IACzD,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IAEnB,2CAA2C;IAC3C,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IAEnB,uDAAuD;IACvD,WAAW,CAAC,EAAE,MAAM,CAAC;IAErB,2BAA2B;IAC3B,KAAK,CAAC,EAAE,OAAO,CAAC;CACjB;AAED;;GAEG;AACH,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,SAAS,GAAG,UAAU,GAAG,SAAS,CAAC;IACzC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED;;GAEG;AACH,MAAM,WAAW,mBAAmB;IAClC,gCAAgC;IAChC,YAAY,EAAE,MAAM,CAAC;IAErB,iCAAiC;IACjC,eAAe,EAAE,MAAM,CAAC;IAExB,6BAA6B;IAC7B,eAAe,EAAE,MAAM,CAAC;IAExB,oDAAoD;IACpD,YAAY,EAAE,MAAM,EAAE,CAAC;IAEvB,qBAAqB;IACrB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED;;GAEG;AACH,MAAM,WAAW,YAAY;IAC3B,+BAA+B;IAC/B,QAAQ,EAAE,UAAU,EAAE,CAAC;IAEvB,kCAAkC;IAClC,MAAM,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAE/C,qBAAqB;IACrB,QAAQ,EAAE,MAAM,CAAC;CAClB;AA8CD;;GAEG;AACH,qBAAa,aAAa;IACxB,OAAO,CAAC,MAAM,CAGZ;IACF,OAAO,CAAC,aAAa,CAA6B;IAClD,OAAO,CAAC,WAAW,CAAS;gBAEhB,MAAM,EAAE,eAAe;IAgBnC;;OAEG;IACH,IAAI,YAAY,IAAI,MAAM,CAEzB;IAED;;OAEG;IACG,UAAU,IAAI,OAAO,CAAC,mBAAmB,CAAC;IAiGhD;;OAEG;IACG,aAAa,IAAI,OAAO,CAAC,UAAU,EAAE,CAAC;IAwC5C;;;;;;OAMG;YACW,aAAa;IAiD3B;;;;;OAKG;IACG,aAAa,CACjB,OAAO,EAAE,UAAU,EAAE,EACrB,OAAO,GAAE;QACP,8CAA8C;QAC9C,QAAQ,CAAC,EAAE,CACT,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,UAAU,CAAC,MAAM,CAAC,KACrB,OAAO,CAAC,IAAI,CAAC,CAAC;KACf,GACL,OAAO,CAAC,YAAY,CAAC;IA6CxB;;;;;;;;;;;;;OAaG;YACW,eAAe;IAiF7B;;OAEG;IACG,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAK7C;;OAEG;IACG,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAU7D;;OAEG;IACG,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAK7C;;OAEG;IACG,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAWhD;;OAEG;IACG,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC;CAgB/B;AAED;;GAEG;AACH,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,eAAe,GAAG,aAAa,CAE1E;AAED;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,wBAAsB,aAAa,CAAC,CAAC,EACnC,MAAM,EAAE,eAAe,EACvB,EAAE,EAAE,CAAC,SAAS,EAAE,aAAa,KAAK,OAAO,CAAC,CAAC,CAAC,GAC3C,OAAO,CAAC;IACT,MAAM,EAAE,CAAC,CAAC;IACV,OAAO,EAAE,UAAU,EAAE,CAAC;IACtB,UAAU,EAAE,mBAAmB,CAAC;CACjC,CAAC,CAkBD"}

package/esm/src/workflow/claude-code/workspace-sync.js

@@ -12,8 +12,9 @@
 import * as dntShim from "../../../_dnt.shims.js";
 import { logger as baseLogger } from "../../utils/index.js";
 import { api } from "../api.js";
-import { join, relative, resolve } from "../../../deps/jsr.io/@std/path/1.1.4/mod.js";
+import { dirname, join, relative, resolve } from "../../../deps/jsr.io/@std/path/1.1.4/mod.js";
 import { INITIALIZATION_ERROR, INVALID_ARGUMENT, SECURITY_VIOLATION } from "../../errors/index.js";
+import { isWithinDirectory } from "../../utils/path-utils.js";
 const logger = baseLogger.component("workspace-sync");
 /** Maximum file size for workspace sync (10 MB) */
 const MAX_WORKSPACE_FILE_SIZE = 10 * 1024 * 1024;
@@ -136,8 +137,8 @@ export class WorkspaceSync {
                 const hash = await checksum(content);
                 this.fileChecksums.set(path, hash);
                 // Write to local filesystem (use safe path resolution)
-                const localPath = this.resolveSafePath(path);
-                const dir = localPath.substring(0, localPath.lastIndexOf("/"));
+                const localPath = await this.resolveSafePath(path);
+                const dir = dirname(localPath);
                 await dntShim.Deno.mkdir(dir, { recursive: true });
                 await dntShim.Deno.writeTextFile(localPath, content);
                 filesDownloaded++;
@@ -188,7 +189,7 @@ export class WorkspaceSync {
         // Check for deleted files
         for (const [path, originalHash] of this.fileChecksums) {
             try {
-                const localPath = this.resolveSafePath(path);
+                const localPath = await this.resolveSafePath(path);
                 await dntShim.Deno.stat(localPath);
             }
             catch (_) {
@@ -206,17 +207,28 @@ export class WorkspaceSync {
         return changes;
     }
     /**
-     * Recursively walk directory and detect changes
+     * Recursively walk directory and detect changes.
+     *
+     * SECURITY: Uses lstat (not stat) and skips any symlink it finds, so a
+     * symlink planted inside the workspace cannot cause us to descend into —
+     * or read the contents of — files outside the workspace (VULN-FS-4).
      */
     async walkAndDetect(localPath, relativePath, changes) {
-        const stat = await dntShim.Deno.stat(localPath);
+        const stat = await dntShim.Deno.lstat(localPath);
+        // Ignore symlinks outright — we never treat them as real files here.
+        if (stat.isSymlink) {
+            if (this.config.debug) {
+                logger.info("Skipping symlink during change detection", { localPath });
+            }
+            return;
+        }
         if (stat.isDirectory) {
             for await (const entry of dntShim.Deno.readDir(localPath)) {
                 await this.walkAndDetect(`${localPath}/${entry.name}`, `${relativePath}/${entry.name}`, changes);
             }
             return;
         }
-        // It's a file - check for changes
+        // It's a regular file - check for changes
         const content = await dntShim.Deno.readTextFile(localPath);
         const newHash = await checksum(content);
         const originalHash = this.fileChecksums.get(relativePath);
@@ -258,7 +270,7 @@ export class WorkspaceSync {
                 continue;
             }
             try {
-                const localPath = this.resolveSafePath(change.path);
+                const localPath = await this.resolveSafePath(change.path);
                 const content = await dntShim.Deno.readTextFile(localPath);
                 if (options.onUpload) {
                     await options.onUpload(change.path, content, change.type);
@@ -287,34 +299,109 @@ export class WorkspaceSync {
         };
     }
     /**
-     * Safely resolve a path within the workspace, preventing path traversal attacks
+     * Safely resolve a path within the workspace, preventing path traversal
+     * and symlink-based escapes (VULN-FS-4).
+     *
+     * - Rejects NUL bytes outright.
+     * - Rejects any intermediate path segment that is a symlink.
+     * - Re-checks containment by realpath-ing the parent directory after the
+     *   segment walk, so a symlink that resolves through a non-symlink directory
+     *   chain still cannot escape the workspace.
+     *
+     * Note: this deliberately rejects ALL symlinks inside the workspace — even
+     * those whose targets remain within it — because the race window between
+     * resolution and use is not worth the complexity for our use-case.
      */
-    resolveSafePath(path) {
-        // Normalize the input path
+    async resolveSafePath(path) {
+        // Reject NUL bytes — they confuse filesystem APIs and are never legitimate.
+        if (path.includes("\0")) {
+            throw SECURITY_VIOLATION.create({ detail: `NUL byte in path` });
+        }
+        // Workspace-relative paths only. A single leading "/" is the canonical
+        // API form for "the project root" (e.g. "/src/foo.ts") and is accepted;
+        // anything that syntactically looks like a system-absolute path beyond
+        // that one-slash convention is rejected.
+        //
+        // - Windows drive letters (C:\...) — rejected.
+        // - UNC paths (//host/share) — rejected.
+        // - Unix absolute paths with a leading slash are treated as
+        //   workspace-relative, but any component that tries to escape the
+        //   workspace is still caught by the traversal / realpath checks below.
+        if (/^[A-Za-z]:[\\/]/.test(path)) {
+            throw SECURITY_VIOLATION.create({ detail: `Absolute path not allowed: ${path}` });
+        }
+        if (path.startsWith("//")) {
+            throw SECURITY_VIOLATION.create({ detail: `Absolute path not allowed: ${path}` });
+        }
+        // Normalize the input path (treat leading "/" as workspace-relative).
         const normalizedPath = path.startsWith("/") ? path.slice(1) : path;
-        // Resolve the full path
+        // Empty path resolves to the workspace dir itself — writing to it would
+        // clobber the workspace as a regular file. Reject explicitly.
+        if (normalizedPath === "") {
+            throw SECURITY_VIOLATION.create({ detail: `Empty path not allowed` });
+        }
+        // Resolve the full path lexically first (catches literal "..").
         const fullPath = resolve(join(this.workspaceDir, normalizedPath));
-        // Verify the resolved path is within the workspace
         const relativePath = relative(this.workspaceDir, fullPath);
-        if (relativePath.startsWith("..") || !relativePath || relativePath === "..") {
+        if (!relativePath || relativePath.startsWith("..") || relativePath === "..") {
             throw SECURITY_VIOLATION.create({ detail: `Path traversal detected: ${path}` });
         }
+        // Walk each segment and reject any existing symlink along the way.
+        // A segment that does not yet exist is fine — it will be created later.
+        const relSegments = relativePath === "" ? [] : relativePath.split(/[\\/]/).filter(Boolean);
+        let cursor = this.workspaceDir;
+        for (const seg of relSegments) {
+            cursor = join(cursor, seg);
+            try {
+                const info = await dntShim.Deno.lstat(cursor);
+                if (info.isSymlink) {
+                    throw SECURITY_VIOLATION.create({
+                        detail: `Refusing to traverse symlink: ${cursor}`,
+                    });
+                }
+            }
+            catch (e) {
+                if (e instanceof dntShim.Deno.errors.NotFound) {
+                    // Segment doesn't exist yet — the rest of the chain will be
+                    // created under a verified-non-symlink parent, so stop walking.
+                    break;
+                }
+                throw e;
+            }
+        }
+        // Final containment check against the realpath of the parent directory,
+        // to defeat any symlink-in-parent we might have missed (e.g. one that
+        // appeared mid-walk). If the parent doesn't exist yet, that's fine —
+        // the segment walk above already proved every existing ancestor is real.
+        try {
+            const parentReal = await dntShim.Deno.realPath(dirname(fullPath));
+            const workspaceReal = await dntShim.Deno.realPath(this.workspaceDir);
+            if (!isWithinDirectory(workspaceReal, parentReal)) {
+                throw SECURITY_VIOLATION.create({
+                    detail: `Resolved parent outside workspace: ${parentReal}`,
+                });
+            }
+        }
+        catch (e) {
+            if (!(e instanceof dntShim.Deno.errors.NotFound))
+                throw e;
+        }
         return fullPath;
     }
     /**
      * Read a file from the workspace
      */
     async readFile(path) {
-        const localPath = this.resolveSafePath(path);
+        const localPath = await this.resolveSafePath(path);
         return await dntShim.Deno.readTextFile(localPath);
     }
     /**
      * Write a file to the workspace
      */
     async writeFile(path, content) {
-        const localPath = this.resolveSafePath(path);
+        const localPath = await this.resolveSafePath(path);
         // Ensure directory exists
-        const dir = localPath.substring(0, localPath.lastIndexOf("/"));
+        const dir = dirname(localPath);
         await dntShim.Deno.mkdir(dir, { recursive: true });
         await dntShim.Deno.writeTextFile(localPath, content);
     }
@@ -322,7 +409,7 @@ export class WorkspaceSync {
      * Delete a file from the workspace
      */
     async deleteFile(path) {
-        const localPath = this.resolveSafePath(path);
+        const localPath = await this.resolveSafePath(path);
         await dntShim.Deno.remove(localPath);
     }
     /**
@@ -330,7 +417,7 @@ export class WorkspaceSync {
      */
     async fileExists(path) {
         try {
-            const localPath = this.resolveSafePath(path);
+            const localPath = await this.resolveSafePath(path);
             await dntShim.Deno.stat(localPath);
             return true;
         }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "veryfront",
-  "version": "0.1.246",
+  "version": "0.1.247",
   "description": "The simplest way to build AI-powered apps",
   "keywords": [
     "react",

package/src/deno.js

@@ -1,6 +1,6 @@
 export default {
   "name": "veryfront",
-  "version": "0.1.246",
+  "version": "0.1.247",
   "license": "Apache-2.0",
   "nodeModulesDir": "auto",
   "workspace": [

package/src/src/agent/durable.ts

@@ -142,6 +142,10 @@ export type ConversationRunAppendFailureOutcome =
   | "resumed"
   | "stopped"
   | "retry_scheduled";
+export type ConversationRunAppendExecutionOutcome =
+  | "resumed"
+  | "stopped"
+  | "retry_scheduled";
 
 export const CreateConversationRunAcceptedSchema = z
   .object({
@@ -531,6 +535,85 @@ export async function recoverConversationRunAppendFailure(input: {
   };
 }
 
+export async function recoverConversationRunAppendExecution(input: {
+  error: unknown;
+  authToken: string;
+  apiUrl: string;
+  conversationId: string;
+  runId: string;
+  latestEventId: number;
+  latestExternalEventSequence: number;
+  remainingEvents: unknown[];
+  pendingEvents: unknown[];
+  cursorResyncsThisFlush: number;
+  consecutiveFailures: number;
+  maxCursorResyncsPerFlush: number;
+  abortSignal?: AbortSignal;
+}): Promise<
+  | {
+    outcome: "resumed";
+    latestEventId: number;
+    latestExternalEventSequence: number;
+    pendingEvents: unknown[];
+    consecutiveFailures: number;
+  }
+  | {
+    outcome: "stopped";
+    latestEventId: number;
+    latestExternalEventSequence: number;
+    disableReason?: "cursor_resyncs_exhausted" | "non_appendable" | "ignorable_append_rejection";
+  }
+  | {
+    outcome: "retry_scheduled";
+    latestEventId: number;
+    latestExternalEventSequence: number;
+    pendingEvents: unknown[];
+    consecutiveFailures: number;
+    errorMessage: string;
+  }
+> {
+  const recovered = await recoverConversationRunAppendFailure({
+    error: input.error,
+    authToken: input.authToken,
+    apiUrl: input.apiUrl,
+    conversationId: input.conversationId,
+    runId: input.runId,
+    latestEventId: input.latestEventId,
+    latestExternalEventSequence: input.latestExternalEventSequence,
+    cursorResyncsThisFlush: input.cursorResyncsThisFlush,
+    maxCursorResyncsPerFlush: input.maxCursorResyncsPerFlush,
+    abortSignal: input.abortSignal,
+  });
+
+  if (recovered.outcome === "resumed") {
+    return {
+      outcome: "resumed",
+      latestEventId: recovered.latestEventId,
+      latestExternalEventSequence: recovered.latestExternalEventSequence,
+      pendingEvents: [...input.remainingEvents, ...input.pendingEvents],
+      consecutiveFailures: 0,
+    };
+  }
+
+  if (recovered.outcome === "stopped") {
+    return {
+      outcome: "stopped",
+      latestEventId: recovered.latestEventId,
+      latestExternalEventSequence: recovered.latestExternalEventSequence,
+      ...(recovered.disableReason ? { disableReason: recovered.disableReason } : {}),
+    };
+  }
+
+  return {
+    outcome: "retry_scheduled",
+    latestEventId: recovered.latestEventId,
+    latestExternalEventSequence: recovered.latestExternalEventSequence,
+    pendingEvents: [...input.remainingEvents, ...input.pendingEvents],
+    consecutiveFailures: input.consecutiveFailures + 1,
+    errorMessage: recovered.errorMessage ?? "Conversation run append failed",
+  };
+}
+
 async function waitForConversationRunPoll(
   ms: number,
   abortSignal?: AbortSignal,

package/src/src/agent/index.ts

@@ -220,6 +220,7 @@ export {
   CompleteConversationRunResponseSchema,
   type ConversationAgentRunUsage,
   type ConversationRunAppendCursorResyncResult,
+  type ConversationRunAppendExecutionOutcome,
   type ConversationRunAppendFailureOutcome,
   type ConversationRunAppendRecoveryOutcome,
   type ConversationRunProjection,
@@ -237,6 +238,7 @@ export {
   isIgnorableConversationRunAppendError,
   monitorConversationRunStatus,
   parseAppendConversationRunEventsErrorBody,
+  recoverConversationRunAppendExecution,
   recoverConversationRunAppendFailure,
   recoverConversationRunCursorMismatch,
   resolveConversationRunTargets,

package/src/src/mcp/index.ts

@@ -17,8 +17,13 @@
  *   execute: async ({ query }) => ({ results: [] }),
  * });
  *
- * // Start MCP server — registered tools are exposed automatically
- * const server = createMCPServer();
+ * // Start MCP server — registered tools are exposed automatically.
+ * // `auth` is required: use bearer for production, or the explicit
+ * // `{ type: "none", allowUnauthenticated: true }` opt-in for local dev only.
+ * const server = createMCPServer({
+ *   enabled: true,
+ *   auth: { type: "none", allowUnauthenticated: true },
+ * });
  * ```
  */
 import "../../_dnt.polyfills.js";

package/src/src/mcp/schemas/index.ts

@@ -5,6 +5,7 @@
  */
 
 export {
+  MCPAuthConfigSchema,
   type MCPServerConfig,
   MCPServerConfigSchema,
   type MCPStats,

package/src/src/mcp/schemas/mcp.schema.ts

@@ -1,15 +1,28 @@
 import { z } from "zod";
 
+/**
+ * MCP auth configuration. One of:
+ * - `{ type: "bearer", validate?: (token) => Promise<boolean> }` — bearer-token auth.
+ * - `{ type: "none", allowUnauthenticated: true }` — explicit opt-in to an
+ *   unauthenticated server. Required for local dev/testing; prevents accidental
+ *   exposure of the JSON-RPC surface in production (VULN-SRV-5).
+ */
+const AuthValidatedSchema = z.object({
+  type: z.literal("bearer"),
+  validate: z.function().optional(),
+});
+
+const AuthNoneSchema = z.object({
+  type: z.literal("none"),
+  allowUnauthenticated: z.literal(true),
+});
+
+export const MCPAuthConfigSchema = z.union([AuthValidatedSchema, AuthNoneSchema]);
+
 export const MCPServerConfigSchema = z.object({
   enabled: z.boolean(),
   port: z.number().int().positive().optional(),
-  auth: z
-    .object({
-      type: z.enum(["bearer", "api-key", "none"]),
-      validate: z.function()
-        .optional(),
-    })
-    .optional(),
+  auth: MCPAuthConfigSchema,
   cors: z
     .object({
       enabled: z.boolean(),

package/src/src/mcp/server.ts

@@ -113,13 +113,69 @@ export class MCPServer {
   onNotification?: (notification: { jsonrpc: "2.0"; method: string; params?: unknown }) => void;
 
   constructor(config: MCPServerConfig) {
+    MCPServer.validateAuthConfig(config);
     this.config = config;
 
-    if (!config.auth || config.auth.type === "none") {
-      logger.warn("MCP server has no authentication configured — all requests will be accepted");
+    if (config.auth.type === "none") {
+      logger.warn(
+        "MCP server started with auth.type='none' (allowUnauthenticated) — all requests will be accepted",
+      );
     }
   }
 
+  /**
+   * Fail-closed validation of the auth configuration (VULN-SRV-5).
+   *
+   * Historically, an unset `auth` field — or `{ type: "none" }` — silently
+   * accepted every request with only a warning log. That meant an operator who
+   * forgot to configure auth shipped an unauthenticated JSON-RPC surface.
+   *
+   * The new contract: `auth` is required, and the only way to accept
+   * unauthenticated traffic is to explicitly set
+   * `{ type: "none", allowUnauthenticated: true }`. Any other shape is
+   * rejected at construction time.
+   */
+  private static validateAuthConfig(config: MCPServerConfig): void {
+    const auth = (config as { auth?: unknown }).auth;
+
+    if (auth === undefined || auth === null) {
+      throw new Error(
+        "MCP auth must be configured. For local dev, pass " +
+          "{ auth: { type: 'none', allowUnauthenticated: true } } explicitly.",
+      );
+    }
+
+    if (typeof auth !== "object") {
+      throw new Error(
+        "MCP auth must be an object. For local dev, pass " +
+          "{ auth: { type: 'none', allowUnauthenticated: true } } explicitly.",
+      );
+    }
+
+    const type = (auth as { type?: unknown }).type;
+
+    if (type === "none") {
+      const allow = (auth as { allowUnauthenticated?: unknown }).allowUnauthenticated;
+      if (allow !== true) {
+        throw new Error(
+          "MCP auth type 'none' requires allowUnauthenticated: true to acknowledge " +
+            "the server will accept all requests.",
+        );
+      }
+      return;
+    }
+
+    if (type === "bearer") {
+      return;
+    }
+
+    throw new Error(
+      `MCP auth type '${String(type)}' is not supported. Use 'bearer' ` +
+        "or { type: 'none', allowUnauthenticated: true } for explicit opt-in to " +
+        "unauthenticated traffic.",
+    );
+  }
+
   notifyToolsChanged(): void {
     this.onNotification?.({ jsonrpc: "2.0", method: "notifications/tools/list_changed" });
   }
@@ -607,7 +663,7 @@ export class MCPServer {
 
   createHTTPHandler(): (request: Request) => Promise<Response> {
     return createMCPHTTPHandler({
-      authEnabled: Boolean(this.config.auth?.type && this.config.auth.type !== "none"),
+      authEnabled: this.config.auth.type !== "none",
       getCORSHeaders: (requestOrigin) => this.getCORSHeaders(requestOrigin),
       validateAuth: (request) => this.validateAuth(request),
       handleRequest: (request, context) => this.handleRequest(request, context),
@@ -640,13 +696,11 @@ export class MCPServer {
 
   private async validateAuth(request: Request): Promise<boolean> {
     const auth = this.config.auth;
-    if (!auth || auth.type === "none") return true;
+    if (auth.type === "none") return true;
 
     const authHeader = request.headers.get("Authorization");
     if (!authHeader) return false;
 
-    if (auth.type !== "bearer") return false;
-
     const token = authHeader.replace("Bearer ", "");
 
     // When bearer auth is configured without a validate function, reject all requests

package/src/src/utils/version-constant.ts

@@ -1,3 +1,3 @@
 // Keep in sync with deno.json version.
 // scripts/release.ts updates this constant during releases.
-export const VERSION = "0.1.246";
+export const VERSION = "0.1.247";

package/src/src/workflow/claude-code/workspace-sync.ts

@@ -15,8 +15,9 @@ import * as dntShim from "../../../_dnt.shims.js";
 import { logger as baseLogger } from "../../utils/index.js";
 import { api } from "../api.js";
 import type { CapturedTenantContext } from "../types.js";
-import { join, relative, resolve } from "../../../deps/jsr.io/@std/path/1.1.4/mod.js";
+import { dirname, join, relative, resolve } from "../../../deps/jsr.io/@std/path/1.1.4/mod.js";
 import { INITIALIZATION_ERROR, INVALID_ARGUMENT, SECURITY_VIOLATION } from "../../errors/index.js";
+import { isWithinDirectory } from "../../utils/path-utils.js";
 
 const logger = baseLogger.component("workspace-sync");
 
@@ -230,8 +231,8 @@ export class WorkspaceSync {
         this.fileChecksums.set(path, hash);
 
         // Write to local filesystem (use safe path resolution)
-        const localPath = this.resolveSafePath(path);
-        const dir = localPath.substring(0, localPath.lastIndexOf("/"));
+        const localPath = await this.resolveSafePath(path);
+        const dir = dirname(localPath);
         await dntShim.Deno.mkdir(dir, { recursive: true });
         await dntShim.Deno.writeTextFile(localPath, content);
 
@@ -295,7 +296,7 @@ export class WorkspaceSync {
     // Check for deleted files
     for (const [path, originalHash] of this.fileChecksums) {
       try {
-        const localPath = this.resolveSafePath(path);
+        const localPath = await this.resolveSafePath(path);
         await dntShim.Deno.stat(localPath);
       } catch (_) {
         // File was deleted
@@ -315,14 +316,26 @@ export class WorkspaceSync {
   }
 
   /**
-   * Recursively walk directory and detect changes
+   * Recursively walk directory and detect changes.
+   *
+   * SECURITY: Uses lstat (not stat) and skips any symlink it finds, so a
+   * symlink planted inside the workspace cannot cause us to descend into —
+   * or read the contents of — files outside the workspace (VULN-FS-4).
    */
   private async walkAndDetect(
     localPath: string,
     relativePath: string,
     changes: FileChange[],
   ): Promise<void> {
-    const stat = await dntShim.Deno.stat(localPath);
+    const stat = await dntShim.Deno.lstat(localPath);
+
+    // Ignore symlinks outright — we never treat them as real files here.
+    if (stat.isSymlink) {
+      if (this.config.debug) {
+        logger.info("Skipping symlink during change detection", { localPath });
+      }
+      return;
+    }
 
     if (stat.isDirectory) {
       for await (const entry of dntShim.Deno.readDir(localPath)) {
@@ -335,7 +348,7 @@ export class WorkspaceSync {
       return;
     }
 
-    // It's a file - check for changes
+    // It's a regular file - check for changes
     const content = await dntShim.Deno.readTextFile(localPath);
     const newHash = await checksum(content);
     const originalHash = this.fileChecksums.get(relativePath);
@@ -390,7 +403,7 @@ export class WorkspaceSync {
       }
 
       try {
-        const localPath = this.resolveSafePath(change.path);
+        const localPath = await this.resolveSafePath(change.path);
         const content = await dntShim.Deno.readTextFile(localPath);
 
         if (options.onUpload) {
@@ -420,21 +433,97 @@ export class WorkspaceSync {
   }
 
   /**
-   * Safely resolve a path within the workspace, preventing path traversal attacks
+   * Safely resolve a path within the workspace, preventing path traversal
+   * and symlink-based escapes (VULN-FS-4).
+   *
+   * - Rejects NUL bytes outright.
+   * - Rejects any intermediate path segment that is a symlink.
+   * - Re-checks containment by realpath-ing the parent directory after the
+   *   segment walk, so a symlink that resolves through a non-symlink directory
+   *   chain still cannot escape the workspace.
+   *
+   * Note: this deliberately rejects ALL symlinks inside the workspace — even
+   * those whose targets remain within it — because the race window between
+   * resolution and use is not worth the complexity for our use-case.
    */
-  private resolveSafePath(path: string): string {
-    // Normalize the input path
+  private async resolveSafePath(path: string): Promise<string> {
+    // Reject NUL bytes — they confuse filesystem APIs and are never legitimate.
+    if (path.includes("\0")) {
+      throw SECURITY_VIOLATION.create({ detail: `NUL byte in path` });
+    }
+
+    // Workspace-relative paths only. A single leading "/" is the canonical
+    // API form for "the project root" (e.g. "/src/foo.ts") and is accepted;
+    // anything that syntactically looks like a system-absolute path beyond
+    // that one-slash convention is rejected.
+    //
+    // - Windows drive letters (C:\...) — rejected.
+    // - UNC paths (//host/share) — rejected.
+    // - Unix absolute paths with a leading slash are treated as
+    //   workspace-relative, but any component that tries to escape the
+    //   workspace is still caught by the traversal / realpath checks below.
+    if (/^[A-Za-z]:[\\/]/.test(path)) {
+      throw SECURITY_VIOLATION.create({ detail: `Absolute path not allowed: ${path}` });
+    }
+    if (path.startsWith("//")) {
+      throw SECURITY_VIOLATION.create({ detail: `Absolute path not allowed: ${path}` });
+    }
+
+    // Normalize the input path (treat leading "/" as workspace-relative).
     const normalizedPath = path.startsWith("/") ? path.slice(1) : path;
 
-    // Resolve the full path
-    const fullPath = resolve(join(this.workspaceDir, normalizedPath));
+    // Empty path resolves to the workspace dir itself — writing to it would
+    // clobber the workspace as a regular file. Reject explicitly.
+    if (normalizedPath === "") {
+      throw SECURITY_VIOLATION.create({ detail: `Empty path not allowed` });
+    }
 
-    // Verify the resolved path is within the workspace
+    // Resolve the full path lexically first (catches literal "..").
+    const fullPath = resolve(join(this.workspaceDir, normalizedPath));
     const relativePath = relative(this.workspaceDir, fullPath);
-    if (relativePath.startsWith("..") || !relativePath || relativePath === "..") {
+    if (!relativePath || relativePath.startsWith("..") || relativePath === "..") {
       throw SECURITY_VIOLATION.create({ detail: `Path traversal detected: ${path}` });
     }
 
+    // Walk each segment and reject any existing symlink along the way.
+    // A segment that does not yet exist is fine — it will be created later.
+    const relSegments = relativePath === "" ? [] : relativePath.split(/[\\/]/).filter(Boolean);
+    let cursor = this.workspaceDir;
+    for (const seg of relSegments) {
+      cursor = join(cursor, seg);
+      try {
+        const info = await dntShim.Deno.lstat(cursor);
+        if (info.isSymlink) {
+          throw SECURITY_VIOLATION.create({
+            detail: `Refusing to traverse symlink: ${cursor}`,
+          });
+        }
+      } catch (e) {
+        if (e instanceof dntShim.Deno.errors.NotFound) {
+          // Segment doesn't exist yet — the rest of the chain will be
+          // created under a verified-non-symlink parent, so stop walking.
+          break;
+        }
+        throw e;
+      }
+    }
+
+    // Final containment check against the realpath of the parent directory,
+    // to defeat any symlink-in-parent we might have missed (e.g. one that
+    // appeared mid-walk). If the parent doesn't exist yet, that's fine —
+    // the segment walk above already proved every existing ancestor is real.
+    try {
+      const parentReal = await dntShim.Deno.realPath(dirname(fullPath));
+      const workspaceReal = await dntShim.Deno.realPath(this.workspaceDir);
+      if (!isWithinDirectory(workspaceReal, parentReal)) {
+        throw SECURITY_VIOLATION.create({
+          detail: `Resolved parent outside workspace: ${parentReal}`,
+        });
+      }
+    } catch (e) {
+      if (!(e instanceof dntShim.Deno.errors.NotFound)) throw e;
+    }
+
     return fullPath;
   }
 
@@ -442,7 +531,7 @@ export class WorkspaceSync {
    * Read a file from the workspace
    */
   async readFile(path: string): Promise<string> {
-    const localPath = this.resolveSafePath(path);
+    const localPath = await this.resolveSafePath(path);
     return await dntShim.Deno.readTextFile(localPath);
   }
 
@@ -450,10 +539,10 @@ export class WorkspaceSync {
    * Write a file to the workspace
    */
   async writeFile(path: string, content: string): Promise<void> {
-    const localPath = this.resolveSafePath(path);
+    const localPath = await this.resolveSafePath(path);
 
     // Ensure directory exists
-    const dir = localPath.substring(0, localPath.lastIndexOf("/"));
+    const dir = dirname(localPath);
     await dntShim.Deno.mkdir(dir, { recursive: true });
 
     await dntShim.Deno.writeTextFile(localPath, content);
@@ -463,7 +552,7 @@ export class WorkspaceSync {
    * Delete a file from the workspace
    */
   async deleteFile(path: string): Promise<void> {
-    const localPath = this.resolveSafePath(path);
+    const localPath = await this.resolveSafePath(path);
     await dntShim.Deno.remove(localPath);
   }
 
@@ -472,7 +561,7 @@ export class WorkspaceSync {
    */
   async fileExists(path: string): Promise<boolean> {
     try {
-      const localPath = this.resolveSafePath(path);
+      const localPath = await this.resolveSafePath(path);
       await dntShim.Deno.stat(localPath);
       return true;
     } catch (_) {