@adaptive-ds/project-registry 0.2.3

package/dist/access-log/ProjectAccessLogRecord.d.ts

@@ -0,0 +1,8 @@
+type ProjectAccessLogJsonValue = null | boolean | number | string | readonly ProjectAccessLogJsonValue[] | {
+    readonly [key: string]: ProjectAccessLogJsonValue;
+};
+export type ProjectAccessLogRecord = {
+    readonly [key: string]: ProjectAccessLogJsonValue;
+};
+export {};
+//# sourceMappingURL=ProjectAccessLogRecord.d.ts.map

package/dist/access-log/ProjectAccessLogRecord.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ProjectAccessLogRecord.d.ts","sourceRoot":"","sources":["../../src/access-log/ProjectAccessLogRecord.ts"],"names":[],"mappings":"AAAA,KAAK,yBAAyB,GAC1B,IAAI,GACJ,OAAO,GACP,MAAM,GACN,MAAM,GACN,SAAS,yBAAyB,EAAE,GACpC;IAAE,QAAQ,EAAE,GAAG,EAAE,MAAM,GAAG,yBAAyB,CAAA;CAAE,CAAA;AAEzD,MAAM,MAAM,sBAAsB,GAAG;IAAE,QAAQ,EAAE,GAAG,EAAE,MAAM,GAAG,yBAAyB,CAAA;CAAE,CAAA"}

package/dist/access-log/ProjectAccessLogRecord.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=ProjectAccessLogRecord.js.map

package/dist/access-log/ProjectAccessLogRecord.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ProjectAccessLogRecord.js","sourceRoot":"","sources":["../../src/access-log/ProjectAccessLogRecord.ts"],"names":[],"mappings":""}

package/dist/access-log/ProjectAccessLogSource.d.ts

@@ -0,0 +1,22 @@
+import type { PromiseResult, ResultErr } from "#result";
+import type { ProjectKey } from "../project/projectKey.js";
+import type { ProjectAccessLogRecord } from "./ProjectAccessLogRecord.js";
+export type { ProjectAccessLogRecord } from "./ProjectAccessLogRecord.js";
+export type ProjectAccessLogReadOptions = {
+    limit?: number;
+    before?: string;
+};
+export type ProjectAccessLogPage = {
+    records: readonly ProjectAccessLogRecord[];
+    next?: string;
+    partial: boolean;
+    malformedLines: number;
+};
+export type ProjectAccessLogSourceErrorCode = "access-log.invalid-input" | "access-log.invalid-cursor" | "access-log.cursor-expired" | "access-log.rotation-race" | "access-log.storage-unavailable" | "access-log.resource-limit" | "access-log.symlink" | "access-log.non-regular-file";
+export type ProjectAccessLogSourceError = ResultErr & {
+    code: ProjectAccessLogSourceErrorCode;
+};
+export type ProjectAccessLogSource = {
+    read(project: ProjectKey, options?: ProjectAccessLogReadOptions): PromiseResult<ProjectAccessLogPage>;
+};
+//# sourceMappingURL=ProjectAccessLogSource.d.ts.map

package/dist/access-log/ProjectAccessLogSource.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ProjectAccessLogSource.d.ts","sourceRoot":"","sources":["../../src/access-log/ProjectAccessLogSource.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,SAAS,CAAA;AACvD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,0BAA0B,CAAA;AAC1D,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,6BAA6B,CAAA;AAEzE,YAAY,EAAE,sBAAsB,EAAE,MAAM,6BAA6B,CAAA;AAEzE,MAAM,MAAM,2BAA2B,GAAG;IACxC,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,MAAM,CAAC,EAAE,MAAM,CAAA;CAChB,CAAA;AAED,MAAM,MAAM,oBAAoB,GAAG;IACjC,OAAO,EAAE,SAAS,sBAAsB,EAAE,CAAA;IAC1C,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,OAAO,EAAE,OAAO,CAAA;IAChB,cAAc,EAAE,MAAM,CAAA;CACvB,CAAA;AAED,MAAM,MAAM,+BAA+B,GACvC,0BAA0B,GAC1B,2BAA2B,GAC3B,2BAA2B,GAC3B,0BAA0B,GAC1B,gCAAgC,GAChC,2BAA2B,GAC3B,oBAAoB,GACpB,6BAA6B,CAAA;AAEjC,MAAM,MAAM,2BAA2B,GAAG,SAAS,GAAG;IACpD,IAAI,EAAE,+BAA+B,CAAA;CACtC,CAAA;AAED,MAAM,MAAM,sBAAsB,GAAG;IACnC,IAAI,CAAC,OAAO,EAAE,UAAU,EAAE,OAAO,CAAC,EAAE,2BAA2B,GAAG,aAAa,CAAC,oBAAoB,CAAC,CAAA;CACtG,CAAA"}

package/dist/access-log/ProjectAccessLogSource.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=ProjectAccessLogSource.js.map

package/dist/access-log/ProjectAccessLogSource.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ProjectAccessLogSource.js","sourceRoot":"","sources":["../../src/access-log/ProjectAccessLogSource.ts"],"names":[],"mappings":""}

package/dist/access-log/projectAccessLogCaddyRetention.d.ts

@@ -0,0 +1,5 @@
+export declare const projectAccessLogCaddyRetention: {
+    readonly rollKeep: 8;
+    readonly rollKeepDays: 7;
+};
+//# sourceMappingURL=projectAccessLogCaddyRetention.d.ts.map

package/dist/access-log/projectAccessLogCaddyRetention.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"projectAccessLogCaddyRetention.d.ts","sourceRoot":"","sources":["../../src/access-log/projectAccessLogCaddyRetention.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,8BAA8B;;;CAGjC,CAAA"}

package/dist/access-log/projectAccessLogCaddyRetention.js

@@ -0,0 +1,5 @@
+export const projectAccessLogCaddyRetention = {
+    rollKeep: 8,
+    rollKeepDays: 7,
+};
+//# sourceMappingURL=projectAccessLogCaddyRetention.js.map

package/dist/access-log/projectAccessLogCaddyRetention.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"projectAccessLogCaddyRetention.js","sourceRoot":"","sources":["../../src/access-log/projectAccessLogCaddyRetention.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,8BAA8B,GAAG;IAC5C,QAAQ,EAAE,CAAC;IACX,YAAY,EAAE,CAAC;CACP,CAAA"}

package/dist/access-log/projectAccessLogCursor.d.ts

@@ -0,0 +1,22 @@
+import { type Result } from "#result";
+export type ProjectAccessLogCursorInput = {
+    anchorDigest?: string;
+    offset?: number;
+    projectId: string;
+    source: string;
+    sourceFingerprint: string;
+    line: number;
+};
+export type ProjectAccessLogCursorPayload = ProjectAccessLogCursorInput & {
+    version: 2;
+    expiresAt: number;
+};
+export type ProjectAccessLogCursorCodec = {
+    encode(input: ProjectAccessLogCursorInput): Result<string>;
+    decode(value: unknown): Result<ProjectAccessLogCursorPayload>;
+};
+export declare function projectAccessLogCursorCreate(options?: {
+    clock?: () => number;
+    lifetimeMs?: number;
+}): ProjectAccessLogCursorCodec;
+//# sourceMappingURL=projectAccessLogCursor.d.ts.map

package/dist/access-log/projectAccessLogCursor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"projectAccessLogCursor.d.ts","sourceRoot":"","sources":["../../src/access-log/projectAccessLogCursor.ts"],"names":[],"mappings":"AAAA,OAAO,EAAgB,KAAK,MAAM,EAAE,MAAM,SAAS,CAAA;AAOnD,MAAM,MAAM,2BAA2B,GAAG;IACxC,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,SAAS,EAAE,MAAM,CAAA;IACjB,MAAM,EAAE,MAAM,CAAA;IACd,iBAAiB,EAAE,MAAM,CAAA;IACzB,IAAI,EAAE,MAAM,CAAA;CACb,CAAA;AAED,MAAM,MAAM,6BAA6B,GAAG,2BAA2B,GAAG;IACxE,OAAO,EAAE,CAAC,CAAA;IACV,SAAS,EAAE,MAAM,CAAA;CAClB,CAAA;AAED,MAAM,MAAM,2BAA2B,GAAG;IACxC,MAAM,CAAC,KAAK,EAAE,2BAA2B,GAAG,MAAM,CAAC,MAAM,CAAC,CAAA;IAC1D,MAAM,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAAC,6BAA6B,CAAC,CAAA;CAC9D,CAAA;AAkFD,wBAAgB,4BAA4B,CAC1C,OAAO,GAAE;IAAE,KAAK,CAAC,EAAE,MAAM,MAAM,CAAC;IAAC,UAAU,CAAC,EAAE,MAAM,CAAA;CAAO,GAC1D,2BAA2B,CA4E7B"}

package/dist/access-log/projectAccessLogCursor.js

@@ -0,0 +1,148 @@
+import { createResult } from "#result";
+const cursorVersion = 2;
+const defaultLifetimeMs = 15 * 60 * 1000;
+const maximumLifetimeMs = 24 * 60 * 60 * 1000;
+const maximumCursorLength = 4096;
+function base64UrlEncode(value) {
+    return Buffer.from(value).toString("base64url");
+}
+function base64UrlDecode(value) {
+    if (!/^[A-Za-z0-9_-]+$/.test(value))
+        return undefined;
+    try {
+        return Buffer.from(value, "base64url");
+    }
+    catch {
+        return undefined;
+    }
+}
+function cursorError(code, message) {
+    return { success: false, op: "projectAccessLogCursor", code, errorMessage: message };
+}
+function inputIsValid(input) {
+    return (typeof input === "object" &&
+        input !== null &&
+        typeof input.projectId === "string" &&
+        typeof input.source === "string" &&
+        typeof input.sourceFingerprint === "string" &&
+        (input.anchorDigest === undefined || /^[a-f0-9]{64}$/.test(input.anchorDigest)) &&
+        (input.offset === undefined || (Number.isSafeInteger(input.offset) && input.offset >= 0)) &&
+        /^[a-f0-9]{64}$/.test(input.projectId) &&
+        /^(?:access\.jsonl|access-[A-Za-z0-9_.-]+\.jsonl(?:\.gz)?)$/.test(input.source) &&
+        /^[A-Za-z0-9:._-]+$/.test(input.sourceFingerprint) &&
+        input.sourceFingerprint.length > 0 &&
+        input.sourceFingerprint.length <= 256 &&
+        !input.sourceFingerprint.includes("\0") &&
+        Number.isSafeInteger(input.line) &&
+        input.line >= 0);
+}
+function bodyIsValid(value) {
+    if (typeof value !== "object" || value === null || Array.isArray(value))
+        return false;
+    const body = value;
+    const anchorIsValid = !Object.hasOwn(body, "a") || (typeof body.a === "string" && /^[a-f0-9]{64}$/.test(body.a));
+    const offsetIsValid = !Object.hasOwn(body, "o") || (typeof body.o === "number" && Number.isSafeInteger(body.o) && body.o >= 0);
+    const expectedKeyCount = 6 + (Object.hasOwn(body, "a") ? 1 : 0) + (Object.hasOwn(body, "o") ? 1 : 0);
+    return (body.v === cursorVersion &&
+        anchorIsValid &&
+        offsetIsValid &&
+        Number.isSafeInteger(body.e) &&
+        typeof body.e === "number" &&
+        body.e > 0 &&
+        typeof body.f === "string" &&
+        /^[A-Za-z0-9:._-]+$/.test(body.f) &&
+        body.f.length > 0 &&
+        body.f.length <= 256 &&
+        typeof body.l === "number" &&
+        Number.isSafeInteger(body.l) &&
+        body.l >= 0 &&
+        typeof body.p === "string" &&
+        /^[a-f0-9]{64}$/.test(body.p) &&
+        typeof body.s === "string" &&
+        /^(?:access\.jsonl|access-[A-Za-z0-9_.-]+\.jsonl(?:\.gz)?)$/.test(body.s) &&
+        Object.keys(body).length === expectedKeyCount);
+}
+export function projectAccessLogCursorCreate(options = {}) {
+    const clock = options.clock ?? Date.now;
+    const lifetimeMs = options.lifetimeMs ?? defaultLifetimeMs;
+    return {
+        encode(input) {
+            if (!inputIsValid(input))
+                return cursorError("access-log.invalid-input", "access log cursor input is invalid");
+            if (!Number.isSafeInteger(lifetimeMs) || lifetimeMs < 1 || lifetimeMs > maximumLifetimeMs) {
+                return cursorError("access-log.invalid-input", "access log cursor lifetime is invalid");
+            }
+            let now;
+            try {
+                now = clock();
+            }
+            catch {
+                return cursorError("access-log.invalid-input", "access log cursor clock is invalid");
+            }
+            if (!Number.isSafeInteger(now) || now < 0)
+                return cursorError("access-log.invalid-input", "access log cursor clock is invalid");
+            const expiresAt = now + lifetimeMs;
+            if (!Number.isSafeInteger(expiresAt))
+                return cursorError("access-log.invalid-input", "access log cursor clock is invalid");
+            const body = {
+                v: cursorVersion,
+                a: input.anchorDigest,
+                e: expiresAt,
+                p: input.projectId,
+                s: input.source,
+                f: input.sourceFingerprint,
+                l: input.line,
+                o: input.offset,
+            };
+            const encodedBody = base64UrlEncode(Buffer.from(JSON.stringify(body), "utf8"));
+            return createResult(`v${cursorVersion}.${encodedBody}`);
+        },
+        decode(value) {
+            if (typeof value !== "string" || value.length === 0 || value.length > maximumCursorLength) {
+                return cursorError("access-log.invalid-cursor", "access log cursor is invalid");
+            }
+            const parts = value.split(".");
+            if (parts.length !== 2 || parts[0] !== `v${cursorVersion}`) {
+                return cursorError("access-log.invalid-cursor", "access log cursor is invalid");
+            }
+            const bodyPart = parts[1];
+            if (bodyPart === undefined) {
+                return cursorError("access-log.invalid-cursor", "access log cursor is invalid");
+            }
+            const bodyBytes = base64UrlDecode(bodyPart);
+            if (bodyBytes === undefined)
+                return cursorError("access-log.invalid-cursor", "access log cursor is invalid");
+            let body;
+            try {
+                body = JSON.parse(bodyBytes.toString("utf8"));
+            }
+            catch {
+                return cursorError("access-log.invalid-cursor", "access log cursor is invalid");
+            }
+            if (!bodyIsValid(body))
+                return cursorError("access-log.invalid-cursor", "access log cursor is invalid");
+            let now;
+            try {
+                now = clock();
+            }
+            catch {
+                return cursorError("access-log.invalid-input", "access log cursor clock is invalid");
+            }
+            if (!Number.isSafeInteger(now) || now < 0)
+                return cursorError("access-log.invalid-input", "access log cursor clock is invalid");
+            if (now >= body.e)
+                return cursorError("access-log.cursor-expired", "access log cursor has expired");
+            return createResult({
+                version: cursorVersion,
+                expiresAt: body.e,
+                ...(body.a === undefined ? {} : { anchorDigest: body.a }),
+                ...(body.o === undefined ? {} : { offset: body.o }),
+                projectId: body.p,
+                source: body.s,
+                sourceFingerprint: body.f,
+                line: body.l,
+            });
+        },
+    };
+}
+//# sourceMappingURL=projectAccessLogCursor.js.map

package/dist/access-log/projectAccessLogCursor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"projectAccessLogCursor.js","sourceRoot":"","sources":["../../src/access-log/projectAccessLogCursor.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAe,MAAM,SAAS,CAAA;AAEnD,MAAM,aAAa,GAAG,CAAC,CAAA;AACvB,MAAM,iBAAiB,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAA;AACxC,MAAM,iBAAiB,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAA;AAC7C,MAAM,mBAAmB,GAAG,IAAI,CAAA;AAgChC,SAAS,eAAe,CAAC,KAAiB;IACxC,OAAO,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAA;AACjD,CAAC;AAED,SAAS,eAAe,CAAC,KAAa;IACpC,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,SAAS,CAAA;IACrD,IAAI,CAAC;QACH,OAAO,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,WAAW,CAAC,CAAA;IACxC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAA;IAClB,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAClB,IAA4F,EAC5F,OAAe;IAEf,OAAO,EAAE,OAAO,EAAE,KAAc,EAAE,EAAE,EAAE,wBAAwB,EAAE,IAAI,EAAE,YAAY,EAAE,OAAO,EAAE,CAAA;AAC/F,CAAC;AAED,SAAS,YAAY,CAAC,KAAkC;IACtD,OAAO,CACL,OAAO,KAAK,KAAK,QAAQ;QACzB,KAAK,KAAK,IAAI;QACd,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ;QACnC,OAAO,KAAK,CAAC,MAAM,KAAK,QAAQ;QAChC,OAAO,KAAK,CAAC,iBAAiB,KAAK,QAAQ;QAC3C,CAAC,KAAK,CAAC,YAAY,KAAK,SAAS,IAAI,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;QAC/E,CAAC,KAAK,CAAC,MAAM,KAAK,SAAS,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC;QACzF,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC;QACtC,4DAA4D,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC;QAC/E,oBAAoB,CAAC,IAAI,CAAC,KAAK,CAAC,iBAAiB,CAAC;QAClD,KAAK,CAAC,iBAAiB,CAAC,MAAM,GAAG,CAAC;QAClC,KAAK,CAAC,iBAAiB,CAAC,MAAM,IAAI,GAAG;QACrC,CAAC,KAAK,CAAC,iBAAiB,CAAC,QAAQ,CAAC,IAAI,CAAC;QACvC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC;QAChC,KAAK,CAAC,IAAI,IAAI,CAAC,CAChB,CAAA;AACH,CAAC;AAED,SAAS,WAAW,CAAC,KAAc;IACjC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAA;IACrF,MAAM,IAAI,GAAG,KAAgC,CAAA;IAC7C,MAAM,aAAa,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,CAAC,OAAO,IAAI,CAAC,CAAC,KAAK,QAAQ,IAAI,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAA;IAChH,MAAM,aAAa,GACjB,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,CAAC,OAAO,IAAI,CAAC,CAAC,KAAK,QAAQ,IAAI,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAA;IAC1G,MAAM,gBAAgB,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;IACpG,OAAO,CACL,IAAI,CAAC,CAAC,KAAK,aAAa;QACxB,aAAa;QACb,aAAa;QACb,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC;QAC5B,OAAO,IAAI,CAAC,CAAC,KAAK,QAAQ;QAC1B,IAAI,CAAC,CAAC,GAAG,CAAC;QACV,OAAO,IAAI,CAAC,CAAC,KAAK,QAAQ;QAC1B,oBAAoB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QACjC,IAAI,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC;QACjB,IAAI,CAAC,CAAC,CAAC,MAAM,IAAI,GAAG;QACpB,OAAO,IAAI,CAAC,CAAC,KAAK,QAAQ;QAC1B,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC;QAC5B,IAAI,CAAC,CAAC,IAAI,CAAC;QACX,OAAO,IAAI,CAAC,CAAC,KAAK,QAAQ;QAC1B,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QAC7B,OAAO,IAAI,CAAC,CAAC,KAAK,QAAQ;QAC1B,4DAA4D,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QACzE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,KAAK,gBAAgB,CAC9C,CAAA;AACH,CAAC;AAED,MAAM,UAAU,4BAA4B,CAC1C,UAAyD,EAAE;IAE3D,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,IAAI,CAAC,GAAG,CAAA;IACvC,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,iBAAiB,CAAA;IAE1D,OAAO;QACL,MAAM,CAAC,KAAK;YACV,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC;gBAAE,OAAO,WAAW,CAAC,0BAA0B,EAAE,oCAAoC,CAAC,CAAA;YAC9G,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,UAAU,CAAC,IAAI,UAAU,GAAG,CAAC,IAAI,UAAU,GAAG,iBAAiB,EAAE,CAAC;gBAC1F,OAAO,WAAW,CAAC,0BAA0B,EAAE,uCAAuC,CAAC,CAAA;YACzF,CAAC;YACD,IAAI,GAAW,CAAA;YACf,IAAI,CAAC;gBACH,GAAG,GAAG,KAAK,EAAE,CAAA;YACf,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,WAAW,CAAC,0BAA0B,EAAE,oCAAoC,CAAC,CAAA;YACtF,CAAC;YACD,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI,GAAG,GAAG,CAAC;gBACvC,OAAO,WAAW,CAAC,0BAA0B,EAAE,oCAAoC,CAAC,CAAA;YACtF,MAAM,SAAS,GAAG,GAAG,GAAG,UAAU,CAAA;YAClC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,SAAS,CAAC;gBAClC,OAAO,WAAW,CAAC,0BAA0B,EAAE,oCAAoC,CAAC,CAAA;YACtF,MAAM,IAAI,GAAe;gBACvB,CAAC,EAAE,aAAa;gBAChB,CAAC,EAAE,KAAK,CAAC,YAAY;gBACrB,CAAC,EAAE,SAAS;gBACZ,CAAC,EAAE,KAAK,CAAC,SAAS;gBAClB,CAAC,EAAE,KAAK,CAAC,MAAM;gBACf,CAAC,EAAE,KAAK,CAAC,iBAAiB;gBAC1B,CAAC,EAAE,KAAK,CAAC,IAAI;gBACb,CAAC,EAAE,KAAK,CAAC,MAAM;aAChB,CAAA;YACD,MAAM,WAAW,GAAG,eAAe,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,CAAC,CAAA;YAC9E,OAAO,YAAY,CAAC,IAAI,aAAa,IAAI,WAAW,EAAE,CAAC,CAAA;QACzD,CAAC;QACD,MAAM,CAAC,KAAK;YACV,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,mBAAmB,EAAE,CAAC;gBAC1F,OAAO,WAAW,CAAC,2BAA2B,EAAE,8BAA8B,CAAC,CAAA;YACjF,CAAC;YACD,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;YAC9B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,IAAI,aAAa,EAAE,EAAE,CAAC;gBAC3D,OAAO,WAAW,CAAC,2BAA2B,EAAE,8BAA8B,CAAC,CAAA;YACjF,CAAC;YACD,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,CAAC,CAAA;YACzB,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;gBAC3B,OAAO,WAAW,CAAC,2BAA2B,EAAE,8BAA8B,CAAC,CAAA;YACjF,CAAC;YACD,MAAM,SAAS,GAAG,eAAe,CAAC,QAAQ,CAAC,CAAA;YAC3C,IAAI,SAAS,KAAK,SAAS;gBAAE,OAAO,WAAW,CAAC,2BAA2B,EAAE,8BAA8B,CAAC,CAAA;YAC5G,IAAI,IAAa,CAAA;YACjB,IAAI,CAAC;gBACH,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAY,CAAA;YAC1D,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,WAAW,CAAC,2BAA2B,EAAE,8BAA8B,CAAC,CAAA;YACjF,CAAC;YACD,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC;gBAAE,OAAO,WAAW,CAAC,2BAA2B,EAAE,8BAA8B,CAAC,CAAA;YACvG,IAAI,GAAW,CAAA;YACf,IAAI,CAAC;gBACH,GAAG,GAAG,KAAK,EAAE,CAAA;YACf,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,WAAW,CAAC,0BAA0B,EAAE,oCAAoC,CAAC,CAAA;YACtF,CAAC;YACD,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI,GAAG,GAAG,CAAC;gBACvC,OAAO,WAAW,CAAC,0BAA0B,EAAE,oCAAoC,CAAC,CAAA;YACtF,IAAI,GAAG,IAAI,IAAI,CAAC,CAAC;gBAAE,OAAO,WAAW,CAAC,2BAA2B,EAAE,+BAA+B,CAAC,CAAA;YACnG,OAAO,YAAY,CAAC;gBAClB,OAAO,EAAE,aAAa;gBACtB,SAAS,EAAE,IAAI,CAAC,CAAC;gBACjB,GAAG,CAAC,IAAI,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,IAAI,CAAC,CAAC,EAAE,CAAC;gBACzD,GAAG,CAAC,IAAI,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC,EAAE,CAAC;gBACnD,SAAS,EAAE,IAAI,CAAC,CAAC;gBACjB,MAAM,EAAE,IAAI,CAAC,CAAC;gBACd,iBAAiB,EAAE,IAAI,CAAC,CAAC;gBACzB,IAAI,EAAE,IAAI,CAAC,CAAC;aACb,CAAC,CAAA;QACJ,CAAC;KACF,CAAA;AACH,CAAC"}

package/dist/access-log/projectAccessLogId.d.ts

@@ -0,0 +1,3 @@
+import type { ProjectKey } from "../project/projectKey.js";
+export declare function projectAccessLogId(project: ProjectKey): string;
+//# sourceMappingURL=projectAccessLogId.d.ts.map

package/dist/access-log/projectAccessLogId.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"projectAccessLogId.d.ts","sourceRoot":"","sources":["../../src/access-log/projectAccessLogId.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,0BAA0B,CAAA;AAG1D,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,UAAU,GAAG,MAAM,CAE9D"}

package/dist/access-log/projectAccessLogId.js

@@ -0,0 +1,6 @@
+import { createHash } from "node:crypto";
+import { projectKey } from "../project/projectKey.js";
+export function projectAccessLogId(project) {
+    return createHash("sha256").update(projectKey(project), "utf8").digest("hex");
+}
+//# sourceMappingURL=projectAccessLogId.js.map

package/dist/access-log/projectAccessLogId.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"projectAccessLogId.js","sourceRoot":"","sources":["../../src/access-log/projectAccessLogId.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AAExC,OAAO,EAAE,UAAU,EAAE,MAAM,0BAA0B,CAAA;AAErD,MAAM,UAAU,kBAAkB,CAAC,OAAmB;IACpD,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;AAC/E,CAAC"}

package/dist/access-log/projectAccessLogListUseCase.d.ts

@@ -0,0 +1,14 @@
+import { type PromiseResult } from "#result";
+import type { ProjectAccess } from "../access/ProjectAccess.js";
+import type { ProjectKey } from "../project/projectKey.js";
+import type { ProjectRepository } from "../project-store/ProjectRepository.js";
+import type { ProjectAccessLogPage, ProjectAccessLogReadOptions, ProjectAccessLogSource } from "./ProjectAccessLogSource.js";
+export type ProjectAccessLogListUseCaseOptions = {
+    repository: ProjectRepository;
+    access: ProjectAccess;
+    source?: ProjectAccessLogSource;
+};
+export type ProjectAccessLogListInput = ProjectAccessLogReadOptions;
+export type ProjectAccessLogListErrorCode = "access-log.not-found" | "access-log.unavailable" | "access-log.invalid-input" | "access-log.invalid-cursor" | "access-log.cursor-expired" | "access-log.rotation-race" | "access-log.storage-unavailable" | "access-log.resource-limit" | "access-log.symlink" | "access-log.non-regular-file";
+export declare function projectAccessLogListUseCase(options: ProjectAccessLogListUseCaseOptions, key: ProjectKey, input?: ProjectAccessLogListInput): PromiseResult<ProjectAccessLogPage>;
+//# sourceMappingURL=projectAccessLogListUseCase.d.ts.map

package/dist/access-log/projectAccessLogListUseCase.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"projectAccessLogListUseCase.d.ts","sourceRoot":"","sources":["../../src/access-log/projectAccessLogListUseCase.ts"],"names":[],"mappings":"AAAA,OAAO,EAAmC,KAAK,aAAa,EAA+B,MAAM,SAAS,CAAA;AAC1G,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAA;AAE/D,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,0BAA0B,CAAA;AAC1D,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,uCAAuC,CAAA;AAC9E,OAAO,KAAK,EACV,oBAAoB,EACpB,2BAA2B,EAC3B,sBAAsB,EAEvB,MAAM,6BAA6B,CAAA;AAMpC,MAAM,MAAM,kCAAkC,GAAG;IAC/C,UAAU,EAAE,iBAAiB,CAAA;IAC7B,MAAM,EAAE,aAAa,CAAA;IACrB,MAAM,CAAC,EAAE,sBAAsB,CAAA;CAChC,CAAA;AAED,MAAM,MAAM,yBAAyB,GAAG,2BAA2B,CAAA;AAEnE,MAAM,MAAM,6BAA6B,GACrC,sBAAsB,GACtB,wBAAwB,GACxB,0BAA0B,GAC1B,2BAA2B,GAC3B,2BAA2B,GAC3B,0BAA0B,GAC1B,gCAAgC,GAChC,2BAA2B,GAC3B,oBAAoB,GACpB,6BAA6B,CAAA;AA4DjC,wBAAsB,2BAA2B,CAC/C,OAAO,EAAE,kCAAkC,EAC3C,GAAG,EAAE,UAAU,EACf,KAAK,GAAE,yBAA8B,GACpC,aAAa,CAAC,oBAAoB,CAAC,CAwBrC"}

package/dist/access-log/projectAccessLogListUseCase.js

@@ -0,0 +1,74 @@
+import { createResult, createResultError } from "#result";
+import { projectGetUseCase } from "../project/projectGetUseCase.js";
+const defaultLimit = 100;
+const maximumLimit = 1_000;
+const maximumCursorLength = 4_096;
+function listError(code, message, errorData) {
+    return { ...createResultError("projectAccessLogListUseCase", message, errorData), code };
+}
+function inputValidate(input) {
+    if (input === undefined)
+        return createResult({ limit: defaultLimit });
+    if (typeof input !== "object" || input === null || Array.isArray(input)) {
+        return listError("access-log.invalid-input", "Access-log paging input is invalid.");
+    }
+    const value = input;
+    const limit = value.limit ?? defaultLimit;
+    if (!Number.isSafeInteger(limit) || limit < 1 || limit > maximumLimit) {
+        return listError("access-log.invalid-input", "Access-log limit must be a positive bounded integer.");
+    }
+    const before = value.before;
+    if (before !== undefined &&
+        (typeof before !== "string" || before.length === 0 || before.length > maximumCursorLength)) {
+        return listError("access-log.invalid-input", "Access-log cursor is invalid.");
+    }
+    return createResult({ limit: limit, ...(before === undefined ? {} : { before }) });
+}
+function projectFailureCode(errorMessage) {
+    if (/not found|not authorized|current role|actor|session|identity|owner|role|mapping/i.test(errorMessage)) {
+        return "access-log.not-found";
+    }
+    return "access-log.unavailable";
+}
+function sourceFailureCode(value) {
+    if (typeof value !== "object" || value === null || !("code" in value))
+        return "access-log.unavailable";
+    const code = value.code;
+    const sourceCodes = [
+        "access-log.invalid-input",
+        "access-log.invalid-cursor",
+        "access-log.cursor-expired",
+        "access-log.rotation-race",
+        "access-log.storage-unavailable",
+        "access-log.resource-limit",
+        "access-log.symlink",
+        "access-log.non-regular-file",
+    ];
+    return typeof code === "string" && sourceCodes.includes(code)
+        ? code
+        : "access-log.unavailable";
+}
+export async function projectAccessLogListUseCase(options, key, input = {}) {
+    const inputR = inputValidate(input);
+    if (!inputR.success)
+        return inputR;
+    const projectR = await projectGetUseCase(options, key);
+    if (!projectR.success)
+        return listError(projectFailureCode(projectR.errorMessage), "Project access logs are unavailable.");
+    const caddy = projectR.data.project.caddy;
+    if (caddy === undefined || caddy === null || caddy.disabled) {
+        return listError("access-log.unavailable", "Project access logging is unavailable.");
+    }
+    if (options.source === undefined) {
+        return listError("access-log.unavailable", "Project access logging is unavailable.");
+    }
+    const pageR = await options.source.read(key, inputR.data);
+    if (!pageR.success) {
+        return {
+            ...pageR,
+            code: sourceFailureCode(pageR),
+        };
+    }
+    return createResult(pageR.data);
+}
+//# sourceMappingURL=projectAccessLogListUseCase.js.map

package/dist/access-log/projectAccessLogListUseCase.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"projectAccessLogListUseCase.js","sourceRoot":"","sources":["../../src/access-log/projectAccessLogListUseCase.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,iBAAiB,EAAmD,MAAM,SAAS,CAAA;AAE1G,OAAO,EAAE,iBAAiB,EAAE,MAAM,iCAAiC,CAAA;AAUnE,MAAM,YAAY,GAAG,GAAG,CAAA;AACxB,MAAM,YAAY,GAAG,KAAK,CAAA;AAC1B,MAAM,mBAAmB,GAAG,KAAK,CAAA;AAwBjC,SAAS,SAAS,CAChB,IAAmC,EACnC,OAAe,EACf,SAAkB;IAElB,OAAO,EAAE,GAAG,iBAAiB,CAAC,6BAA6B,EAAE,OAAO,EAAE,SAAS,CAAC,EAAE,IAAI,EAAE,CAAA;AAC1F,CAAC;AAED,SAAS,aAAa,CAAC,KAAc;IACnC,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,YAAY,CAAC,EAAE,KAAK,EAAE,YAAY,EAAE,CAAC,CAAA;IACrE,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACxE,OAAO,SAAS,CAAC,0BAA0B,EAAE,qCAAqC,CAAC,CAAA;IACrF,CAAC;IAED,MAAM,KAAK,GAAG,KAAgC,CAAA;IAC9C,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,IAAI,YAAY,CAAA;IACzC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAK,KAAgB,GAAG,CAAC,IAAK,KAAgB,GAAG,YAAY,EAAE,CAAC;QAC9F,OAAO,SAAS,CAAC,0BAA0B,EAAE,sDAAsD,CAAC,CAAA;IACtG,CAAC;IAED,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAA;IAC3B,IACE,MAAM,KAAK,SAAS;QACpB,CAAC,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,MAAM,CAAC,MAAM,GAAG,mBAAmB,CAAC,EAC1F,CAAC;QACD,OAAO,SAAS,CAAC,0BAA0B,EAAE,+BAA+B,CAAC,CAAA;IAC/E,CAAC;IAED,OAAO,YAAY,CAAC,EAAE,KAAK,EAAE,KAAe,EAAE,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC,CAAA;AAC9F,CAAC;AAED,SAAS,kBAAkB,CAAC,YAAoB;IAC9C,IAAI,kFAAkF,CAAC,IAAI,CAAC,YAAY,CAAC,EAAE,CAAC;QAC1G,OAAO,sBAAsB,CAAA;IAC/B,CAAC;IACD,OAAO,wBAAwB,CAAA;AACjC,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAc;IACvC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,CAAC,MAAM,IAAI,KAAK,CAAC;QAAE,OAAO,wBAAwB,CAAA;IACtG,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAA;IACvB,MAAM,WAAW,GAA+C;QAC9D,0BAA0B;QAC1B,2BAA2B;QAC3B,2BAA2B;QAC3B,0BAA0B;QAC1B,gCAAgC;QAChC,2BAA2B;QAC3B,oBAAoB;QACpB,6BAA6B;KAC9B,CAAA;IACD,OAAO,OAAO,IAAI,KAAK,QAAQ,IAAI,WAAW,CAAC,QAAQ,CAAC,IAAuC,CAAC;QAC9F,CAAC,CAAE,IAAsC;QACzC,CAAC,CAAC,wBAAwB,CAAA;AAC9B,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAC/C,OAA2C,EAC3C,GAAe,EACf,QAAmC,EAAE;IAErC,MAAM,MAAM,GAAG,aAAa,CAAC,KAAK,CAAC,CAAA;IACnC,IAAI,CAAC,MAAM,CAAC,OAAO;QAAE,OAAO,MAAM,CAAA;IAElC,MAAM,QAAQ,GAAG,MAAM,iBAAiB,CAAC,OAAO,EAAE,GAAG,CAAC,CAAA;IACtD,IAAI,CAAC,QAAQ,CAAC,OAAO;QACnB,OAAO,SAAS,CAAC,kBAAkB,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,sCAAsC,CAAC,CAAA;IAErG,MAAM,KAAK,GAAG,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAA;IACzC,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;QAC5D,OAAO,SAAS,CAAC,wBAAwB,EAAE,wCAAwC,CAAC,CAAA;IACtF,CAAC;IACD,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QACjC,OAAO,SAAS,CAAC,wBAAwB,EAAE,wCAAwC,CAAC,CAAA;IACtF,CAAC;IAED,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,IAAI,CAAC,CAAA;IACzD,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;QACnB,OAAO;YACL,GAAG,KAAK;YACR,IAAI,EAAE,iBAAiB,CAAC,KAAK,CAAC;SAC/B,CAAA;IACH,CAAC;IACD,OAAO,YAAY,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;AACjC,CAAC"}

package/dist/access-log/projectAccessLogOpenat2.d.ts

@@ -0,0 +1,12 @@
+import { open } from "node:fs/promises";
+import { type PromiseResult } from "#result";
+export type ProjectAccessLogOpenat2Options = {
+    directoryFd: number;
+    name: string;
+    flags: number;
+    mode?: number;
+    path: string;
+    rootAnchor?: boolean;
+};
+export declare function projectAccessLogOpenat2(options: ProjectAccessLogOpenat2Options): PromiseResult<Awaited<ReturnType<typeof open>> | undefined>;
+//# sourceMappingURL=projectAccessLogOpenat2.d.ts.map

package/dist/access-log/projectAccessLogOpenat2.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"projectAccessLogOpenat2.d.ts","sourceRoot":"","sources":["../../src/access-log/projectAccessLogOpenat2.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAA;AACvC,OAAO,EAAmC,KAAK,aAAa,EAAE,MAAM,SAAS,CAAA;AAoD7E,MAAM,MAAM,8BAA8B,GAAG;IAC3C,WAAW,EAAE,MAAM,CAAA;IACnB,IAAI,EAAE,MAAM,CAAA;IACZ,KAAK,EAAE,MAAM,CAAA;IACb,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,IAAI,EAAE,MAAM,CAAA;IACZ,UAAU,CAAC,EAAE,OAAO,CAAA;CACrB,CAAA;AA6BD,wBAAsB,uBAAuB,CAC3C,OAAO,EAAE,8BAA8B,GACtC,aAAa,CAAC,OAAO,CAAC,UAAU,CAAC,OAAO,IAAI,CAAC,CAAC,GAAG,SAAS,CAAC,CAiD7D"}

package/dist/access-log/projectAccessLogOpenat2.js

@@ -0,0 +1,123 @@
+import { dlopen, FFIType, ptr, read } from "bun:ffi";
+import { constants } from "node:fs";
+import { open } from "node:fs/promises";
+import { createResult, createResultError } from "#result";
+// 437 is the x86-64 Linux openat2 syscall. Other runtimes fail closed rather than risking a wrong syscall number.
+const openat2SyscallNumber = process.platform === "linux" && process.arch === "x64" ? 437 : undefined;
+const resolveBeneath = 0x08;
+const resolveNoXdev = 0x01;
+const resolveNoSymlinks = 0x04;
+const resolveFlags = resolveBeneath | resolveNoXdev | resolveNoSymlinks;
+const rootResolveFlags = resolveBeneath | resolveNoSymlinks;
+const openHowByteLength = 24;
+const noFollowFlag = constants.O_NOFOLLOW ?? 0;
+const createFlag = constants.O_CREAT ?? 0;
+const exclusiveFlag = constants.O_EXCL ?? 0;
+const truncateFlag = constants.O_TRUNC ?? 0;
+const openat2Symbols = (() => {
+    if (openat2SyscallNumber === undefined)
+        return undefined;
+    try {
+        const libc = dlopen("libc.so.6", {
+            syscall: {
+                args: [FFIType.i64, FFIType.i32, FFIType.cstring, FFIType.ptr, FFIType.u64],
+                returns: FFIType.i32,
+            },
+            __errno_location: {
+                args: [],
+                returns: FFIType.ptr,
+            },
+            close: {
+                args: [FFIType.i32],
+                returns: FFIType.i32,
+            },
+        });
+        return {
+            openat2: libc.symbols.syscall,
+            errnoLocation: libc.symbols.__errno_location,
+            close: libc.symbols.close,
+        };
+    }
+    catch {
+        return undefined;
+    }
+})();
+function openat2Error(message, path) {
+    return createResultError("projectAccessLogOpenat2", message, path);
+}
+function openat2How(flags, mode, selectedResolveFlags) {
+    const how = new ArrayBuffer(openHowByteLength);
+    const view = new DataView(how);
+    view.setBigUint64(0, BigInt(flags), true);
+    view.setBigUint64(8, BigInt(mode), true);
+    // The root anchor is only used for components before the configured root; retention descendants always use all
+    // three resolution constraints.
+    view.setBigUint64(16, BigInt(selectedResolveFlags), true);
+    return how;
+}
+function openat2ErrnoMessage(errno) {
+    if (errno === 18)
+        return "openat2 rejected a mount boundary or path escape";
+    if (errno === 17)
+        return "openat2 found an existing entry";
+    if (errno === 40)
+        return "openat2 rejected a symbolic link";
+    if (errno === 22 || errno === 38)
+        return "openat2 is unavailable";
+    return "openat2 could not open the retention path";
+}
+function openat2DuplicateFlags(flags) {
+    return flags & ~(createFlag | exclusiveFlag | truncateFlag | noFollowFlag);
+}
+export async function projectAccessLogOpenat2(options) {
+    const op = "projectAccessLogOpenat2";
+    if (!Number.isSafeInteger(options.directoryFd) ||
+        options.directoryFd < 0 ||
+        typeof options.name !== "string" ||
+        options.name.length === 0 ||
+        options.name.includes("\u0000") ||
+        !Number.isSafeInteger(options.flags) ||
+        options.flags < 0 ||
+        (options.mode !== undefined &&
+            (!Number.isSafeInteger(options.mode) || options.mode < 0 || options.mode > 0o7777)) ||
+        (options.rootAnchor !== undefined && typeof options.rootAnchor !== "boolean")) {
+        return createResultError(op, "openat2 options are invalid", options.path);
+    }
+    if (openat2Symbols === undefined || openat2SyscallNumber === undefined) {
+        return openat2Error("openat2 is unavailable", options.path);
+    }
+    const { openat2, errnoLocation, close } = openat2Symbols;
+    const how = openat2How(options.flags, options.mode ?? 0, options.rootAnchor ? rootResolveFlags : resolveFlags);
+    let fileDescriptor = -1;
+    try {
+        fileDescriptor = openat2(openat2SyscallNumber, options.directoryFd, options.name, ptr(how), openHowByteLength);
+        if (fileDescriptor < 0) {
+            const errno = read.i32(errnoLocation());
+            if (errno === 2)
+                return createResult(undefined);
+            return openat2Error(openat2ErrnoMessage(errno), options.path);
+        }
+        try {
+            // The descriptor was opened by openat2. Opening its proc link only duplicates that already-resolved object;
+            // O_NOFOLLOW must be omitted here because the proc descriptor itself is a kernel magic link.
+            return createResult(await open(`/proc/self/fd/${fileDescriptor}`, openat2DuplicateFlags(options.flags)));
+        }
+        catch {
+            return openat2Error("openat2 descriptor could not be duplicated", options.path);
+        }
+    }
+    catch {
+        return openat2Error("openat2 could not be called", options.path);
+    }
+    finally {
+        if (fileDescriptor >= 0) {
+            try {
+                close(fileDescriptor);
+            }
+            catch {
+                // The opened Node descriptor owns the successful result; raw descriptor cleanup cannot change it.
+            }
+        }
+    }
+}
+//# sourceMappingURL=projectAccessLogOpenat2.js.map

package/dist/access-log/projectAccessLogOpenat2.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"projectAccessLogOpenat2.js","sourceRoot":"","sources":["../../src/access-log/projectAccessLogOpenat2.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,SAAS,CAAA;AACpD,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAA;AACnC,OAAO,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAA;AACvC,OAAO,EAAE,YAAY,EAAE,iBAAiB,EAAsB,MAAM,SAAS,CAAA;AAE7E,kHAAkH;AAClH,MAAM,oBAAoB,GAAG,OAAO,CAAC,QAAQ,KAAK,OAAO,IAAI,OAAO,CAAC,IAAI,KAAK,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAA;AACrG,MAAM,cAAc,GAAG,IAAI,CAAA;AAC3B,MAAM,aAAa,GAAG,IAAI,CAAA;AAC1B,MAAM,iBAAiB,GAAG,IAAI,CAAA;AAC9B,MAAM,YAAY,GAAG,cAAc,GAAG,aAAa,GAAG,iBAAiB,CAAA;AACvE,MAAM,gBAAgB,GAAG,cAAc,GAAG,iBAAiB,CAAA;AAC3D,MAAM,iBAAiB,GAAG,EAAE,CAAA;AAC5B,MAAM,YAAY,GAAG,SAAS,CAAC,UAAU,IAAI,CAAC,CAAA;AAC9C,MAAM,UAAU,GAAG,SAAS,CAAC,OAAO,IAAI,CAAC,CAAA;AACzC,MAAM,aAAa,GAAG,SAAS,CAAC,MAAM,IAAI,CAAC,CAAA;AAC3C,MAAM,YAAY,GAAG,SAAS,CAAC,OAAO,IAAI,CAAC,CAAA;AAY3C,MAAM,cAAc,GAA+B,CAAC,GAAG,EAAE;IACvD,IAAI,oBAAoB,KAAK,SAAS;QAAE,OAAO,SAAS,CAAA;IACxD,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,CAAC,WAAW,EAAE;YAC/B,OAAO,EAAE;gBACP,IAAI,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,GAAG,CAAC;gBAC3E,OAAO,EAAE,OAAO,CAAC,GAAG;aACrB;YACD,gBAAgB,EAAE;gBAChB,IAAI,EAAE,EAAE;gBACR,OAAO,EAAE,OAAO,CAAC,GAAG;aACrB;YACD,KAAK,EAAE;gBACL,IAAI,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC;gBACnB,OAAO,EAAE,OAAO,CAAC,GAAG;aACrB;SACF,CAAC,CAAA;QACF,OAAO;YACL,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,OAAoC;YAC1D,aAAa,EAAE,IAAI,CAAC,OAAO,CAAC,gBAA4C;YACxE,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,KAAyB;SAC9C,CAAA;IACH,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAA;IAClB,CAAC;AACH,CAAC,CAAC,EAAE,CAAA;AAWJ,SAAS,YAAY,CAAC,OAAe,EAAE,IAAY;IACjD,OAAO,iBAAiB,CAAC,yBAAyB,EAAE,OAAO,EAAE,IAAI,CAAC,CAAA;AACpE,CAAC;AAED,SAAS,UAAU,CAAC,KAAa,EAAE,IAAY,EAAE,oBAA4B;IAC3E,MAAM,GAAG,GAAG,IAAI,WAAW,CAAC,iBAAiB,CAAC,CAAA;IAC9C,MAAM,IAAI,GAAG,IAAI,QAAQ,CAAC,GAAG,CAAC,CAAA;IAC9B,IAAI,CAAC,YAAY,CAAC,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,IAAI,CAAC,CAAA;IACzC,IAAI,CAAC,YAAY,CAAC,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,CAAA;IACxC,+GAA+G;IAC/G,gCAAgC;IAChC,IAAI,CAAC,YAAY,CAAC,EAAE,EAAE,MAAM,CAAC,oBAAoB,CAAC,EAAE,IAAI,CAAC,CAAA;IACzD,OAAO,GAAG,CAAA;AACZ,CAAC;AAED,SAAS,mBAAmB,CAAC,KAAa;IACxC,IAAI,KAAK,KAAK,EAAE;QAAE,OAAO,kDAAkD,CAAA;IAC3E,IAAI,KAAK,KAAK,EAAE;QAAE,OAAO,iCAAiC,CAAA;IAC1D,IAAI,KAAK,KAAK,EAAE;QAAE,OAAO,kCAAkC,CAAA;IAC3D,IAAI,KAAK,KAAK,EAAE,IAAI,KAAK,KAAK,EAAE;QAAE,OAAO,wBAAwB,CAAA;IACjE,OAAO,2CAA2C,CAAA;AACpD,CAAC;AAED,SAAS,qBAAqB,CAAC,KAAa;IAC1C,OAAO,KAAK,GAAG,CAAC,CAAC,UAAU,GAAG,aAAa,GAAG,YAAY,GAAG,YAAY,CAAC,CAAA;AAC5E,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,OAAuC;IAEvC,MAAM,EAAE,GAAG,yBAAyB,CAAA;IACpC,IACE,CAAC,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,WAAW,CAAC;QAC1C,OAAO,CAAC,WAAW,GAAG,CAAC;QACvB,OAAO,OAAO,CAAC,IAAI,KAAK,QAAQ;QAChC,OAAO,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC;QACzB,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAC/B,CAAC,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,KAAK,CAAC;QACpC,OAAO,CAAC,KAAK,GAAG,CAAC;QACjB,CAAC,OAAO,CAAC,IAAI,KAAK,SAAS;YACzB,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,OAAO,CAAC,IAAI,GAAG,CAAC,IAAI,OAAO,CAAC,IAAI,GAAG,MAAM,CAAC,CAAC;QACrF,CAAC,OAAO,CAAC,UAAU,KAAK,SAAS,IAAI,OAAO,OAAO,CAAC,UAAU,KAAK,SAAS,CAAC,EAC7E,CAAC;QACD,OAAO,iBAAiB,CAAC,EAAE,EAAE,6BAA6B,EAAE,OAAO,CAAC,IAAI,CAAC,CAAA;IAC3E,CAAC;IACD,IAAI,cAAc,KAAK,SAAS,IAAI,oBAAoB,KAAK,SAAS,EAAE,CAAC;QACvE,OAAO,YAAY,CAAC,wBAAwB,EAAE,OAAO,CAAC,IAAI,CAAC,CAAA;IAC7D,CAAC;IAED,MAAM,EAAE,OAAO,EAAE,aAAa,EAAE,KAAK,EAAE,GAAG,cAAc,CAAA;IACxD,MAAM,GAAG,GAAG,UAAU,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,IAAI,IAAI,CAAC,EAAE,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,YAAY,CAAC,CAAA;IAC9G,IAAI,cAAc,GAAG,CAAC,CAAC,CAAA;IACvB,IAAI,CAAC;QACH,cAAc,GAAG,OAAO,CAAC,oBAAoB,EAAE,OAAO,CAAC,WAAW,EAAE,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,GAAG,CAAC,EAAE,iBAAiB,CAAC,CAAA;QAC9G,IAAI,cAAc,GAAG,CAAC,EAAE,CAAC;YACvB,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,aAAa,EAAE,CAAC,CAAA;YACvC,IAAI,KAAK,KAAK,CAAC;gBAAE,OAAO,YAAY,CAAC,SAAS,CAAC,CAAA;YAC/C,OAAO,YAAY,CAAC,mBAAmB,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC,IAAI,CAAC,CAAA;QAC/D,CAAC;QAED,IAAI,CAAC;YACH,4GAA4G;YAC5G,6FAA6F;YAC7F,OAAO,YAAY,CAAC,MAAM,IAAI,CAAC,iBAAiB,cAAc,EAAE,EAAE,qBAAqB,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAA;QAC1G,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,YAAY,CAAC,4CAA4C,EAAE,OAAO,CAAC,IAAI,CAAC,CAAA;QACjF,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,YAAY,CAAC,6BAA6B,EAAE,OAAO,CAAC,IAAI,CAAC,CAAA;IAClE,CAAC;YAAS,CAAC;QACT,IAAI,cAAc,IAAI,CAAC,EAAE,CAAC;YACxB,IAAI,CAAC;gBACH,KAAK,CAAC,cAAc,CAAC,CAAA;YACvB,CAAC;YAAC,MAAM,CAAC;gBACP,kGAAkG;YACpG,CAAC;QACH,CAAC;IACH,CAAC;AACH,CAAC"}

package/dist/access-log/projectAccessLogParser.d.ts

@@ -0,0 +1,4 @@
+import { type Result } from "#result";
+import type { ProjectAccessLogRecord } from "./ProjectAccessLogSource.js";
+export declare function projectAccessLogParser(input: unknown): Result<ProjectAccessLogRecord>;
+//# sourceMappingURL=projectAccessLogParser.d.ts.map

package/dist/access-log/projectAccessLogParser.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"projectAccessLogParser.d.ts","sourceRoot":"","sources":["../../src/access-log/projectAccessLogParser.ts"],"names":[],"mappings":"AAAA,OAAO,EAAmC,KAAK,MAAM,EAAE,MAAM,SAAS,CAAA;AACtE,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,6BAA6B,CAAA;AAyEzE,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAAC,sBAAsB,CAAC,CAQrF"}