workspace

Environment variable prefix used to pass CLI config to the server subprocess.

Return bounded canonical JSON and its SHA-256 fingerprint.

Fingerprint value with the canonical workspace serialization.

Resolve a client-supplied cwd into a canonical workspace binding.

cwd is untrusted and is validated here. workspace_config is not: every caller passes server-resolved policy. A client claim is verified against server policy in offload_api.workspace and never reaches this function.

Name the project-scoped fields that drifted from their binding.

The refusal these feed is safe either way, but it is not diagnosable without the field names: the resolution reads the extension trust store on every call, so a transient read failure reports as a policy change. These values are paths and booleans, never secrets, so naming them is safe.

Atomically create or verify a thread workspace binding.

Read a thread's durable workspace binding.

Validate run context against the durable workspace binding.

JSON-safe workspace descriptor carried in LangGraph runtime context.

Server-authoritative workspace and resource policy for one thread.

A workspace claim or runtime conflicts with server resource policy.