Function isSafeRelativePath

src/http.ts:499–507

(path: unknown)

    .bind(status, new Date().toISOString(), JSON.stringify(result).slice(0, 200_000), changes.snapshotKey ?? null, changes.forkedFrom ?? null, id)
    .run();
}

async function storeSnapshot(bucket: R2Bucket | undefined, runId: string, bytes: string): Promise<string> {
  if (!bucket) throw new Error("ARTIFACTS binding is required for live run snapshots");
  const key = `snapshots/${runId}/${crypto.randomUUID()}.tar.gz`;
  await bucket.put(key, Uint8Array.from(atob(bytes), (character) => character.charCodeAt(0)), {
    httpMetadata: { contentType: "application/gzip" },
    customMetadata: { runId, createdAt: new Date().toISOString() },
  });
  return key;
}