fix: enforce repository access and cache boundaries

2026-08-26 14:39:37 +09:00
parent 3a3c89e0b4
commit ffb2a34ae5
8 changed files with 533 additions and 70 deletions
@@ -129,6 +129,7 @@ pub struct RepositorySshMaterializationAccess {
    pub host_trust_id: String,
    pub host_trust_revision: u64,
    pub access: workspace_api::RepositoryAccessMode,
+    pub expires_at_epoch_seconds: u64,
    pub private_key: SensitiveString,
    pub known_hosts_entry: SensitiveString,
 }
@@ -146,6 +147,12 @@ pub struct RepositoryMaterializationContext {
    pub ssh: Option<RepositorySshMaterializationAccess>,
 }

+#[derive(Clone, Debug, PartialEq, Eq, Serialize, Deserialize)]
+pub struct WorkingDirectoryRepositoryAccessRequest {
+    pub working_directory_id: String,
+    pub materialization: RepositoryMaterializationContext,
+}
+
 #[derive(Clone, Debug, PartialEq, Eq, Serialize, Deserialize)]
 pub struct WorkingDirectoryRequest {
    pub repository: WorkingDirectoryRepository,