@elaraai/e3-rack 0.0.0-bootstrap.0 → 1.0.94

package/dist/src/server/dispatch.d.ts

@@ -0,0 +1,137 @@
+/**
+ * Copyright (c) 2025 Elara AI Pty Ltd
+ * Licensed under BSL 1.1. See LICENSE for details.
+ */
+import { type RackHeartbeatRequest, type RackRegistration } from '../protocol/index.js';
+import type { RackDispatch, RackLease } from '../lease/rack-dispatch.js';
+import { type RackLeaseRecord, type RackLeaseStore } from '../lease/lease-store.js';
+import type { RackRegistry } from '../registry/rack-registry.js';
+import { type RackLeaseEvent } from '../protocol/task-envelope.js';
+import type { EnvIndexStore } from './env-publication.js';
+import type { RackStorageBridge } from './storage-bridge.js';
+import { type LeaseCoordinator } from '../lease/coordinator.js';
+/**
+ * Whether a registration's latest boot lacks approval (D12 start
+ * approval): the reported and approved boot ids differ. Both-none is NOT
+ * pending — a freshly enrolled rack adopts its first boot on first
+ * heartbeat. Enrollment is unhealthy until that heartbeat authorizes work.
+ * @param registration - The rack's registration
+ * @returns Whether its latest boot awaits approval
+ * @example
+ * const quarantined = policy.requireStartApproval && bootPendingApproval(rack);
+ */
+export declare function bootPendingApproval(registration: RackRegistration): boolean;
+/**
+ * What a lease that ends while a rack holds it leaves (#214): its attempt's
+ * record, and the uncatalogued versions of the keys it was issued.
+ */
+export interface RackLeaseEndings {
+    /** Where its attempt's record goes: `interrupted` or `cancelled` */
+    readonly stopped: (record: RackLeaseRecord, how: 'interrupted' | 'cancelled', cause: string) => Promise<void>;
+    /** Discards the versions it wrote and never committed */
+    readonly writes?: Pick<RackStorageBridge, 'discardWrites'>;
+}
+/** Runtime collaborators of the shared dispatcher. */
+export interface StoreRackDispatchOptions {
+    /** Shares the routes' fence for transitions and their repository effects. */
+    coordinator?: LeaseCoordinator;
+    /** Clock for health and visibility. */
+    now?: () => number;
+    /** How stale a heartbeat may be before a rack stops counting as healthy. */
+    healthyWindowMs?: number;
+    /** Visibility window granted on claim (and per extension). */
+    visibilityMs?: number;
+    /** Published-env index — env/custom delegation is disabled without it
+     *  (env tasks fall back to cloud). #94 Slice D. */
+    envIndex?: EnvIndexStore;
+    /** The deployment's e3 version (selects the published env build). */
+    e3Version?: string;
+    /** What a lease superseded or cancelled while claimed leaves (#214):
+     *  absent, nothing is recorded or discarded, as a function lease writes
+     *  nothing */
+    endings?: RackLeaseEndings;
+}
+/** Three missed heartbeats make a rack unavailable for new work. */
+export declare const DEFAULT_HEALTHY_WINDOW_MS = 45000;
+/** Visibility granted by a claim or extension. */
+export declare const DEFAULT_VISIBILITY_MS = 60000;
+/**
+ * Capacity advertised by a heartbeat: occupied plus free slots while ready,
+ * zero while fenced, draining or unhealthy. Busy workers remain available.
+ * @param heartbeat - Decoded machine heartbeat
+ * @returns Effective concurrent capacity, safe for the scheduler's number arithmetic
+ * @throws If slot counts are negative, unsafe, or contain duplicate lease references
+ * @example
+ * const capacity = heartbeatCapacity(heartbeat);
+ */
+export declare function heartbeatCapacity(heartbeat: RackHeartbeatRequest): bigint;
+export { LEASE_MIN_AGENT, agentVersionAtLeast } from '../protocol/index.js';
+/**
+ * Why an agent is refused leases, or null when it is leased work: an agent
+ * older than {@link LEASE_MIN_AGENT}.
+ *
+ * @param agentVersion - The agent build its registration reports
+ * @returns The refusal, naming the upgrade, or null
+ */
+export declare function leaseRefusal(agentVersion: string): string | null;
+/**
+ * Dispatches rack work through the shared registry and lease state machine.
+ * @example
+ * const dispatch = new StoreRackDispatch(leases, registry);
+ */
+export declare class StoreRackDispatch implements RackDispatch {
+    private readonly leases;
+    private readonly settings;
+    private readonly now;
+    private readonly healthyWindowMs;
+    private readonly visibilityMs;
+    private readonly envIndex?;
+    private readonly e3Version?;
+    private readonly endings?;
+    private readonly held;
+    private readonly coordinator;
+    /**
+     * @param leases - Lease persistence
+     * @param settings - Enrolled machines and security policy
+     * @param options - Clocks, visibility and callbacks for stopped attempts
+     */
+    constructor(leases: RackLeaseStore, settings: RackRegistry, options?: StoreRackDispatchOptions);
+    anyHealthyRackWithTier(tier: string): Promise<boolean>;
+    /**
+     * Lists healthy, approved, compatible racks matching an optional tier/floor.
+     * @param filter - Required tier and minimum bundled e3 release
+     * @returns Matching registrations
+     */
+    listHealthyRacks(filter?: {
+        tier?: string;
+        minBundledE3?: string;
+    }): Promise<RackRegistration[]>;
+    envBaseTier(envHash: string): Promise<string | null>;
+    findLease(repo: string, taskHash: string, inputsHash: string): Promise<RackLease | null>;
+    createLease(event: RackLeaseEvent, tier: string, computeSize?: string): Promise<RackLease>;
+    getLease(repo: string, leaseId: string): Promise<RackLease | null>;
+    supersede(repo: string, leaseId: string): Promise<RackLease | null>;
+    cancel(repo: string, leaseId: string): Promise<RackLease | null>;
+    leaseHeld(repo: string, leaseId: string): Promise<boolean>;
+    /**
+     * What a lease that ended while a rack held it leaves: its attempt recorded
+     * as it ended, when it recorded no outcome, and the versions it wrote and
+     * never committed discarded. Neither fails the transition, which stands.
+     */
+    private ended;
+    /**
+     * Map a stored record to the runner's seam view, deriving visibility
+     * expiry: expired-claimed reads as `pending` for one reclaim window,
+     * then as lost (`null`).
+     */
+    private toLease;
+}
+/**
+ * Reads the bundled e3 release from an agent's semver build metadata.
+ * @param agentVersion - An agent version such as 0.5.0+e3.1.0.85
+ * @returns Its e3 version, or null when absent/malformed
+ * @example
+ * bundledE3Version('0.5.0+e3.1.0.85'); // '1.0.85'
+ */
+export declare function bundledE3Version(agentVersion: string): string | null;
+//# sourceMappingURL=dispatch.d.ts.map

package/dist/src/server/dispatch.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"dispatch.d.ts","sourceRoot":"","sources":["../../../src/server/dispatch.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAwBH,OAAO,EAAwC,KAAK,oBAAoB,EAAE,KAAK,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AAC9H,OAAO,KAAK,EAAE,YAAY,EAAE,SAAS,EAAmB,MAAM,2BAA2B,CAAC;AAC1F,OAAO,EAGL,KAAK,eAAe,EACpB,KAAK,cAAc,EACpB,MAAM,yBAAyB,CAAC;AACjC,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,8BAA8B,CAAC;AACjE,OAAO,EAAwC,KAAK,cAAc,EAAE,MAAM,8BAA8B,CAAC;AACzG,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAC1D,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AAC7D,OAAO,EAA2B,KAAK,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAEzF;;;;;;;;;GASG;AACH,wBAAgB,mBAAmB,CAAC,YAAY,EAAE,gBAAgB,GAAG,OAAO,CAG3E;AAED;;;GAGG;AACH,MAAM,WAAW,gBAAgB;IAC/B,oEAAoE;IACpE,QAAQ,CAAC,OAAO,EAAE,CAAC,MAAM,EAAE,eAAe,EAAE,GAAG,EAAE,aAAa,GAAG,WAAW,EAAE,KAAK,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAC9G,yDAAyD;IACzD,QAAQ,CAAC,MAAM,CAAC,EAAE,IAAI,CAAC,iBAAiB,EAAE,eAAe,CAAC,CAAC;CAC5D;AAED,sDAAsD;AACtD,MAAM,WAAW,wBAAwB;IACvC,6EAA6E;IAC7E,WAAW,CAAC,EAAE,gBAAgB,CAAC;IAC/B,uCAAuC;IACvC,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;IACnB,4EAA4E;IAC5E,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,8DAA8D;IAC9D,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB;uDACmD;IACnD,QAAQ,CAAC,EAAE,aAAa,CAAC;IACzB,qEAAqE;IACrE,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;kBAEc;IACd,OAAO,CAAC,EAAE,gBAAgB,CAAC;CAC5B;AAED,oEAAoE;AACpE,eAAO,MAAM,yBAAyB,QAAS,CAAC;AAChD,kDAAkD;AAClD,eAAO,MAAM,qBAAqB,QAAS,CAAC;AAE5C;;;;;;;;GAQG;AACH,wBAAgB,iBAAiB,CAAC,SAAS,EAAE,oBAAoB,GAAG,MAAM,CAWzE;AAID,OAAO,EAAE,eAAe,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAE5E;;;;;;GAMG;AACH,wBAAgB,YAAY,CAAC,YAAY,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAKhE;AAED;;;;GAIG;AACH,qBAAa,iBAAkB,YAAW,YAAY;IAgBlD,OAAO,CAAC,QAAQ,CAAC,MAAM;IACvB,OAAO,CAAC,QAAQ,CAAC,QAAQ;IAhB3B,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAe;IACnC,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAS;IACzC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAS;IACtC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAgB;IAC1C,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAS;IACpC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAmB;IAC5C,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAsD;IAC3E,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAmB;IAE/C;;;;OAIG;gBAEgB,MAAM,EAAE,cAAc,EACtB,QAAQ,EAAE,YAAY,EACvC,OAAO,CAAC,EAAE,wBAAwB;IAY9B,sBAAsB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAI5D;;;;OAIG;IACG,gBAAgB,CAAC,MAAM,GAAE;QAAE,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,YAAY,CAAC,EAAE,MAAM,CAAA;KAAO,GAAG,OAAO,CAAC,gBAAgB,EAAE,CAAC;IAwBpG,WAAW,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IAMpD,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,GAAG,IAAI,CAAC;IAKxF,WAAW,CAAC,KAAK,EAAE,cAAc,EAAE,IAAI,EAAE,MAAM,EAAE,WAAW,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC;IAmB1F,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,GAAG,IAAI,CAAC;IAKlE,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,GAAG,IAAI,CAAC;IAUnE,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,GAAG,IAAI,CAAC;IAQtE,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAI1D;;;;OAIG;YACW,KAAK;IAenB;;;;OAIG;IACH,OAAO,CAAC,OAAO;CA2BhB;AAED;;;;;;GAMG;AACH,wBAAgB,gBAAgB,CAAC,YAAY,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAEpE"}

package/dist/src/server/dispatch.js

@@ -0,0 +1,267 @@
+/**
+ * Copyright (c) 2025 Elara AI Pty Ltd
+ * Licensed under BSL 1.1. See LICENSE for details.
+ */
+/**
+ * StoreRackDispatch (#73) — the real {@link RackDispatch} the
+ * DelegatingTaskRunner drives, layered on the lease store + rack registry.
+ *
+ * Status derivation for the runner's view:
+ * - a `claimed` lease past its visibility deadline is reported `pending`
+ *   for one reclaim window (another agent may retake it), then `null`
+ *   (lost) — which makes the runner supersede and fall back to cloud;
+ * - everything else passes through.
+ *
+ * Rack health for `anyHealthyRackWithTier` is heartbeat freshness: the
+ * stored `healthy` flag AND `lastSeenAt` within the healthy window (a rack
+ * that stops heartbeating fails safe — it just stops receiving work), and an
+ * agent that runs a v2 lease ({@link LEASE_MIN_AGENT}).
+ *
+ * A lease superseded or cancelled while a rack held it leaves its attempt
+ * recorded (`interrupted`, `cancelled`) and what it wrote and never committed
+ * discarded (#214), through {@link StoreRackDispatchOptions.endings}.
+ */
+import { inputsHash as computeInputsHash } from '@elaraai/e3-core';
+import { IntegerType, OptionType, StringType, compareFor, equalFor } from '@elaraai/east';
+import { LEASE_MIN_AGENT, agentVersionAtLeast } from '../protocol/index.js';
+import { makeLeaseId, rackLeaseHeld, } from '../lease/lease-store.js';
+import { leaseInputs, leaseRun, leaseTaskHash } from '../protocol/task-envelope.js';
+import { backendLeaseCoordinator } from '../lease/coordinator.js';
+/**
+ * Whether a registration's latest boot lacks approval (D12 start
+ * approval): the reported and approved boot ids differ. Both-none is NOT
+ * pending — a freshly enrolled rack adopts its first boot on first
+ * heartbeat. Enrollment is unhealthy until that heartbeat authorizes work.
+ * @param registration - The rack's registration
+ * @returns Whether its latest boot awaits approval
+ * @example
+ * const quarantined = policy.requireStartApproval && bootPendingApproval(rack);
+ */
+export function bootPendingApproval(registration) {
+    const { lastBootId, approvedBootId } = registration;
+    return !equalFor(OptionType(StringType))(lastBootId, approvedBootId);
+}
+/** Three missed heartbeats make a rack unavailable for new work. */
+export const DEFAULT_HEALTHY_WINDOW_MS = 45_000;
+/** Visibility granted by a claim or extension. */
+export const DEFAULT_VISIBILITY_MS = 60_000;
+/**
+ * Capacity advertised by a heartbeat: occupied plus free slots while ready,
+ * zero while fenced, draining or unhealthy. Busy workers remain available.
+ * @param heartbeat - Decoded machine heartbeat
+ * @returns Effective concurrent capacity, safe for the scheduler's number arithmetic
+ * @throws If slot counts are negative, unsafe, or contain duplicate lease references
+ * @example
+ * const capacity = heartbeatCapacity(heartbeat);
+ */
+export function heartbeatCapacity(heartbeat) {
+    const capacity = heartbeat.freeCapacity + BigInt(heartbeat.runningLeases.length);
+    if (heartbeat.freeCapacity < 0n || capacity > BigInt(Number.MAX_SAFE_INTEGER))
+        throw new Error('Invalid capacity');
+    const seen = new Map();
+    for (const { repo, leaseId } of heartbeat.runningLeases) {
+        const leases = seen.get(repo) ?? new Set();
+        if (leases.has(leaseId))
+            throw new Error('Duplicate running lease');
+        leases.add(leaseId);
+        seen.set(repo, leases);
+    }
+    return heartbeat.healthy ? capacity : 0n;
+}
+// The oldest agent the cloud leases work to (#214) is part of the rack
+// protocol: e3-cloud-types', where the agent and the suites read it too
+export { LEASE_MIN_AGENT, agentVersionAtLeast } from '../protocol/index.js';
+/**
+ * Why an agent is refused leases, or null when it is leased work: an agent
+ * older than {@link LEASE_MIN_AGENT}.
+ *
+ * @param agentVersion - The agent build its registration reports
+ * @returns The refusal, naming the upgrade, or null
+ */
+export function leaseRefusal(agentVersion) {
+    if (agentVersionAtLeast(agentVersion, LEASE_MIN_AGENT))
+        return null;
+    return `this rack's agent (${agentVersion}) is older than ${LEASE_MIN_AGENT}, the oldest this deployment leases work to: ` +
+        `its guest cannot run e3-core's own execution (elaraai/e3-cloud#214). Upgrade it to rack-v${LEASE_MIN_AGENT} or later ` +
+        '(download the release and re-run `e3-rack install --api-url …`); until then its work runs in the cloud';
+}
+/**
+ * Dispatches rack work through the shared registry and lease state machine.
+ * @example
+ * const dispatch = new StoreRackDispatch(leases, registry);
+ */
+export class StoreRackDispatch {
+    leases;
+    settings;
+    now;
+    healthyWindowMs;
+    visibilityMs;
+    envIndex;
+    e3Version;
+    endings;
+    held;
+    coordinator;
+    /**
+     * @param leases - Lease persistence
+     * @param settings - Enrolled machines and security policy
+     * @param options - Clocks, visibility and callbacks for stopped attempts
+     */
+    constructor(leases, settings, options) {
+        this.leases = leases;
+        this.settings = settings;
+        this.now = options?.now ?? Date.now;
+        this.healthyWindowMs = options?.healthyWindowMs ?? DEFAULT_HEALTHY_WINDOW_MS;
+        this.visibilityMs = options?.visibilityMs ?? DEFAULT_VISIBILITY_MS;
+        this.envIndex = options?.envIndex;
+        this.e3Version = options?.e3Version;
+        this.endings = options?.endings;
+        this.held = rackLeaseHeld(leases, this.now);
+        this.coordinator = options?.coordinator ?? backendLeaseCoordinator;
+    }
+    async anyHealthyRackWithTier(tier) {
+        return (await this.listHealthyRacks({ tier })).length > 0;
+    }
+    /**
+     * Lists healthy, approved, compatible racks matching an optional tier/floor.
+     * @param filter - Required tier and minimum bundled e3 release
+     * @returns Matching registrations
+     */
+    async listHealthyRacks(filter = {}) {
+        const cutoff = this.now() - this.healthyWindowMs;
+        const [racks, security] = await Promise.all([
+            this.settings.listRacks(),
+            this.settings.getRackSecurityPolicy(),
+        ]);
+        // Quarantined boots (D12 start approval) don't count as available —
+        // otherwise the runner would route work at a rack whose lease poll is
+        // answered 204, and every such task would ride the fallback timeout.
+        const requireApproval = security?.requireStartApproval === true;
+        return racks.filter((rack) => rack.healthy &&
+            compareFor(IntegerType)(rack.capacity, 0n) > 0 &&
+            rack.lastSeenAt.getTime() >= cutoff &&
+            (filter.tier === undefined || rack.tiers.includes(filter.tier)) &&
+            !(requireApproval && bootPendingApproval(rack)) &&
+            // #214: only an agent that runs a v2 lease is leased work
+            agentVersionAtLeast(rack.agentVersion, LEASE_MIN_AGENT) &&
+            (filter.minBundledE3 === undefined || (bundledE3Version(rack.agentVersion) !== null &&
+                agentVersionAtLeast(bundledE3Version(rack.agentVersion), filter.minBundledE3))));
+    }
+    async envBaseTier(envHash) {
+        if (this.envIndex === undefined || this.e3Version === undefined)
+            return null;
+        const record = await this.envIndex.get(envHash, this.e3Version);
+        return record?.baseTier ?? null;
+    }
+    async findLease(repo, taskHash, inputsHash) {
+        const record = await this.leases.findByTask(repo, taskHash, inputsHash);
+        return record === null ? null : this.toLease(record);
+    }
+    async createLease(event, tier, computeSize) {
+        const taskHash = leaseTaskHash(event);
+        const inputsHash = computeInputsHash(leaseInputs(event));
+        const record = {
+            leaseId: makeLeaseId(taskHash, inputsHash),
+            repo: event.runnerEvent.repo,
+            workspace: event.workspace,
+            taskHash,
+            inputsHash,
+            tier,
+            ...(computeSize !== undefined ? { computeSize } : {}),
+            status: 'pending',
+            event,
+            createdAtMs: this.now(),
+        };
+        await this.leases.put(record);
+        return this.toLease(record);
+    }
+    async getLease(repo, leaseId) {
+        const record = await this.leases.get(repo, leaseId);
+        return record === null ? null : this.toLease(record);
+    }
+    async supersede(repo, leaseId) {
+        return this.coordinator.run(repo, leaseId, async () => {
+            const record = await this.leases.supersede(repo, leaseId);
+            if (record?.status === 'superseded') {
+                await this.ended(record, 'interrupted', 'its rack lease was superseded before the rack recorded an outcome: the work falls back to its originating host');
+            }
+            return record === null ? null : this.toLease(record);
+        });
+    }
+    async cancel(repo, leaseId) {
+        return this.coordinator.run(repo, leaseId, async () => {
+            const record = await this.leases.cancel(repo, leaseId);
+            if (record?.status === 'cancelled')
+                await this.ended(record, 'cancelled', 'its run was cancelled, so its rack lease was cancelled');
+            return record === null ? null : this.toLease(record);
+        });
+    }
+    leaseHeld(repo, leaseId) {
+        return this.held(repo, leaseId);
+    }
+    /**
+     * What a lease that ended while a rack held it leaves: its attempt recorded
+     * as it ended, when it recorded no outcome, and the versions it wrote and
+     * never committed discarded. Neither fails the transition, which stands.
+     */
+    async ended(record, how, cause) {
+        const endings = this.endings;
+        if (endings === undefined)
+            return;
+        if (record.attempt !== undefined) {
+            await endings.stopped(record, how, cause).catch((err) => {
+                console.warn(`rack lease ${record.leaseId}: its attempt ${record.attempt.executionId} was not recorded ${how}: ${messageOf(err)}`);
+            });
+        }
+        if (endings.writes !== undefined && (record.targets?.length ?? 0) > 0) {
+            await endings.writes.discardWrites(record.repo, record.leaseId, record.targets).catch((err) => {
+                console.warn(`rack lease ${record.leaseId}: the versions it wrote were not discarded: ${messageOf(err)}`);
+            });
+        }
+    }
+    /**
+     * Map a stored record to the runner's seam view, deriving visibility
+     * expiry: expired-claimed reads as `pending` for one reclaim window,
+     * then as lost (`null`).
+     */
+    toLease(record) {
+        let status = record.status;
+        if (record.status === 'claimed' && record.visibilityDeadlineMs !== undefined) {
+            const now = this.now();
+            if (record.visibilityDeadlineMs + this.visibilityMs < now) {
+                return null; // claimant gone and nobody retook it — lost
+            }
+            if (record.visibilityDeadlineMs < now) {
+                status = 'pending'; // reclaim window: another agent may take it
+            }
+        }
+        const runId = leaseRun(record.event)?.id;
+        return {
+            leaseId: record.leaseId,
+            repo: record.repo,
+            workspace: record.workspace,
+            taskHash: record.taskHash,
+            inputsHash: record.inputsHash,
+            ...(runId !== undefined ? { runId } : {}),
+            tier: record.tier,
+            computeSize: record.computeSize ?? 'serverless',
+            status,
+            ...(record.claimedBy !== undefined ? { claimedBy: record.claimedBy } : {}),
+            ...(record.attempt !== undefined ? { attempt: record.attempt } : {}),
+            ...(record.result !== undefined ? { result: record.result } : {}),
+        };
+    }
+}
+/**
+ * Reads the bundled e3 release from an agent's semver build metadata.
+ * @param agentVersion - An agent version such as 0.5.0+e3.1.0.85
+ * @returns Its e3 version, or null when absent/malformed
+ * @example
+ * bundledE3Version('0.5.0+e3.1.0.85'); // '1.0.85'
+ */
+export function bundledE3Version(agentVersion) {
+    return /^\d+\.\d+\.\d+(?:-[0-9A-Za-z.-]+)?\+e3\.(\d+\.\d+\.\d+(?:-[0-9A-Za-z.-]+)?)$/.exec(agentVersion)?.[1] ?? null;
+}
+function messageOf(err) {
+    return err instanceof Error ? err.message : String(err);
+}
+//# sourceMappingURL=dispatch.js.map

package/dist/src/server/dispatch.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dispatch.js","sourceRoot":"","sources":["../../../src/server/dispatch.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,EAAE,UAAU,IAAI,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AACnE,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAC1F,OAAO,EAAE,eAAe,EAAE,mBAAmB,EAAoD,MAAM,sBAAsB,CAAC;AAE9H,OAAO,EACL,WAAW,EACX,aAAa,GAGd,MAAM,yBAAyB,CAAC;AAEjC,OAAO,EAAE,WAAW,EAAE,QAAQ,EAAE,aAAa,EAAuB,MAAM,8BAA8B,CAAC;AAGzG,OAAO,EAAE,uBAAuB,EAAyB,MAAM,yBAAyB,CAAC;AAEzF;;;;;;;;;GASG;AACH,MAAM,UAAU,mBAAmB,CAAC,YAA8B;IAChE,MAAM,EAAE,UAAU,EAAE,cAAc,EAAE,GAAG,YAAY,CAAC;IACpD,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,CAAC,UAAU,EAAE,cAAc,CAAC,CAAC;AACvE,CAAC;AAkCD,oEAAoE;AACpE,MAAM,CAAC,MAAM,yBAAyB,GAAG,MAAM,CAAC;AAChD,kDAAkD;AAClD,MAAM,CAAC,MAAM,qBAAqB,GAAG,MAAM,CAAC;AAE5C;;;;;;;;GAQG;AACH,MAAM,UAAU,iBAAiB,CAAC,SAA+B;IAC/D,MAAM,QAAQ,GAAG,SAAS,CAAC,YAAY,GAAG,MAAM,CAAC,SAAS,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC;IACjF,IAAI,SAAS,CAAC,YAAY,GAAG,EAAE,IAAI,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,gBAAgB,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,kBAAkB,CAAC,CAAC;IACnH,MAAM,IAAI,GAAG,IAAI,GAAG,EAAuB,CAAC;IAC5C,KAAK,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,SAAS,CAAC,aAAa,EAAE,CAAC;QACxD,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,IAAI,GAAG,EAAU,CAAC;QACnD,IAAI,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;QACpE,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACpB,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACzB,CAAC;IACD,OAAO,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;AAC3C,CAAC;AAED,uEAAuE;AACvE,wEAAwE;AACxE,OAAO,EAAE,eAAe,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAE5E;;;;;;GAMG;AACH,MAAM,UAAU,YAAY,CAAC,YAAoB;IAC/C,IAAI,mBAAmB,CAAC,YAAY,EAAE,eAAe,CAAC;QAAE,OAAO,IAAI,CAAC;IACpE,OAAO,sBAAsB,YAAY,mBAAmB,eAAe,+CAA+C;QACxH,4FAA4F,eAAe,YAAY;QACvH,wGAAwG,CAAC;AAC7G,CAAC;AAED;;;;GAIG;AACH,MAAM,OAAO,iBAAiB;IAgBT;IACA;IAhBF,GAAG,CAAe;IAClB,eAAe,CAAS;IACxB,YAAY,CAAS;IACrB,QAAQ,CAAiB;IACzB,SAAS,CAAU;IACnB,OAAO,CAAoB;IAC3B,IAAI,CAAsD;IAC1D,WAAW,CAAmB;IAE/C;;;;OAIG;IACH,YACmB,MAAsB,EACtB,QAAsB,EACvC,OAAkC;QAFjB,WAAM,GAAN,MAAM,CAAgB;QACtB,aAAQ,GAAR,QAAQ,CAAc;QAGvC,IAAI,CAAC,GAAG,GAAG,OAAO,EAAE,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC;QACpC,IAAI,CAAC,eAAe,GAAG,OAAO,EAAE,eAAe,IAAI,yBAAyB,CAAC;QAC7E,IAAI,CAAC,YAAY,GAAG,OAAO,EAAE,YAAY,IAAI,qBAAqB,CAAC;QACnE,IAAI,CAAC,QAAQ,GAAG,OAAO,EAAE,QAAQ,CAAC;QAClC,IAAI,CAAC,SAAS,GAAG,OAAO,EAAE,SAAS,CAAC;QACpC,IAAI,CAAC,OAAO,GAAG,OAAO,EAAE,OAAO,CAAC;QAChC,IAAI,CAAC,IAAI,GAAG,aAAa,CAAC,MAAM,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;QAC5C,IAAI,CAAC,WAAW,GAAG,OAAO,EAAE,WAAW,IAAI,uBAAuB,CAAC;IACrE,CAAC;IAED,KAAK,CAAC,sBAAsB,CAAC,IAAY;QACvC,OAAO,CAAC,MAAM,IAAI,CAAC,gBAAgB,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;IAC5D,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,gBAAgB,CAAC,SAAmD,EAAE;QAC1E,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,eAAe,CAAC;QACjD,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YAC1C,IAAI,CAAC,QAAQ,CAAC,SAAS,EAAE;YACzB,IAAI,CAAC,QAAQ,CAAC,qBAAqB,EAAE;SACtC,CAAC,CAAC;QACH,oEAAoE;QACpE,sEAAsE;QACtE,qEAAqE;QACrE,MAAM,eAAe,GAAG,QAAQ,EAAE,oBAAoB,KAAK,IAAI,CAAC;QAChE,OAAO,KAAK,CAAC,MAAM,CACjB,CAAC,IAAI,EAAE,EAAE,CACP,IAAI,CAAC,OAAO;YACZ,UAAU,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,QAAQ,EAAE,EAAE,CAAC,GAAG,CAAC;YAC9C,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,IAAI,MAAM;YACnC,CAAC,MAAM,CAAC,IAAI,KAAK,SAAS,IAAI,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YAC/D,CAAC,CAAC,eAAe,IAAI,mBAAmB,CAAC,IAAI,CAAC,CAAC;YAC/C,0DAA0D;YAC1D,mBAAmB,CAAC,IAAI,CAAC,YAAY,EAAE,eAAe,CAAC;YACvD,CAAC,MAAM,CAAC,YAAY,KAAK,SAAS,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,YAAY,CAAC,KAAK,IAAI;gBACjF,mBAAmB,CAAC,gBAAgB,CAAC,IAAI,CAAC,YAAY,CAAE,EAAE,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,CACrF,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,OAAe;QAC/B,IAAI,IAAI,CAAC,QAAQ,KAAK,SAAS,IAAI,IAAI,CAAC,SAAS,KAAK,SAAS;YAAE,OAAO,IAAI,CAAC;QAC7E,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;QAChE,OAAO,MAAM,EAAE,QAAQ,IAAI,IAAI,CAAC;IAClC,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,IAAY,EAAE,QAAgB,EAAE,UAAkB;QAChE,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,IAAI,EAAE,QAAQ,EAAE,UAAU,CAAC,CAAC;QACxE,OAAO,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IACvD,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,KAAqB,EAAE,IAAY,EAAE,WAAoB;QACzE,MAAM,QAAQ,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC;QACtC,MAAM,UAAU,GAAG,iBAAiB,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC;QACzD,MAAM,MAAM,GAAoB;YAC9B,OAAO,EAAE,WAAW,CAAC,QAAQ,EAAE,UAAU,CAAC;YAC1C,IAAI,EAAE,KAAK,CAAC,WAAW,CAAC,IAAI;YAC5B,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,QAAQ;YACR,UAAU;YACV,IAAI;YACJ,GAAG,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACrD,MAAM,EAAE,SAAS;YACjB,KAAK;YACL,WAAW,EAAE,IAAI,CAAC,GAAG,EAAE;SACxB,CAAC;QACF,MAAM,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAC9B,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,CAAE,CAAC;IAC/B,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,IAAY,EAAE,OAAe;QAC1C,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QACpD,OAAO,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IACvD,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,IAAY,EAAE,OAAe;QAC3C,OAAO,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,EAAE,OAAO,EAAE,KAAK,IAAI,EAAE;YACtD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;YAC1D,IAAI,MAAM,EAAE,MAAM,KAAK,YAAY,EAAE,CAAC;gBACpC,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,aAAa,EAAE,gHAAgH,CAAC,CAAC;YAC5J,CAAC;YACD,OAAO,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QACrD,CAAC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,IAAY,EAAE,OAAe;QACxC,OAAO,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,EAAE,OAAO,EAAE,KAAK,IAAI,EAAE;YACtD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;YACvD,IAAI,MAAM,EAAE,MAAM,KAAK,WAAW;gBAAE,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,WAAW,EAAE,wDAAwD,CAAC,CAAC;YACpI,OAAO,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QACrD,CAAC,CAAC,CAAC;IACL,CAAC;IAED,SAAS,CAAC,IAAY,EAAE,OAAe;QACrC,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IAClC,CAAC;IAED;;;;OAIG;IACK,KAAK,CAAC,KAAK,CAAC,MAAuB,EAAE,GAAgC,EAAE,KAAa;QAC1F,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC;QAC7B,IAAI,OAAO,KAAK,SAAS;YAAE,OAAO;QAClC,IAAI,MAAM,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;YACjC,MAAM,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,GAAY,EAAE,EAAE;gBAC/D,OAAO,CAAC,IAAI,CAAC,cAAc,MAAM,CAAC,OAAO,iBAAiB,MAAM,CAAC,OAAQ,CAAC,WAAW,qBAAqB,GAAG,KAAK,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YACtI,CAAC,CAAC,CAAC;QACL,CAAC;QACD,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,IAAI,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;YACtE,MAAM,OAAO,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,OAAQ,CAAC,CAAC,KAAK,CAAC,CAAC,GAAY,EAAE,EAAE;gBACtG,OAAO,CAAC,IAAI,CAAC,cAAc,MAAM,CAAC,OAAO,+CAA+C,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAC5G,CAAC,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED;;;;OAIG;IACK,OAAO,CAAC,MAAuB;QACrC,IAAI,MAAM,GAAoB,MAAM,CAAC,MAAM,CAAC;QAC5C,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS,IAAI,MAAM,CAAC,oBAAoB,KAAK,SAAS,EAAE,CAAC;YAC7E,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YACvB,IAAI,MAAM,CAAC,oBAAoB,GAAG,IAAI,CAAC,YAAY,GAAG,GAAG,EAAE,CAAC;gBAC1D,OAAO,IAAI,CAAC,CAAC,4CAA4C;YAC3D,CAAC;YACD,IAAI,MAAM,CAAC,oBAAoB,GAAG,GAAG,EAAE,CAAC;gBACtC,MAAM,GAAG,SAAS,CAAC,CAAC,4CAA4C;YAClE,CAAC;QACH,CAAC;QACD,MAAM,KAAK,GAAG,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC;QACzC,OAAO;YACL,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,UAAU,EAAE,MAAM,CAAC,UAAU;YAC7B,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACzC,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,WAAW,EAAE,MAAM,CAAC,WAAW,IAAI,YAAY;YAC/C,MAAM;YACN,GAAG,CAAC,MAAM,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC1E,GAAG,CAAC,MAAM,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACpE,GAAG,CAAC,MAAM,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAClE,CAAC;IACJ,CAAC;CACF;AAED;;;;;;GAMG;AACH,MAAM,UAAU,gBAAgB,CAAC,YAAoB;IACnD,OAAO,8EAA8E,CAAC,IAAI,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC;AACxH,CAAC;AAED,SAAS,SAAS,CAAC,GAAY;IAC7B,OAAO,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;AAC1D,CAAC"}

package/dist/src/server/env-publication.d.ts

@@ -0,0 +1,45 @@
+/**
+ * Copyright (c) 2025 Elara AI Pty Ltd
+ * Licensed under BSL 1.1. See LICENSE for details.
+ */
+/** One OCI layer of a published environment. */
+export interface EnvLayerDescriptor {
+    /** Registry digest (`sha256:…`) — the content address of the blob. */
+    digest: string;
+    sizeBytes: number;
+    mediaType: string;
+}
+/** The manifest published beside the layer blobs (JSON, small). */
+export interface EnvLayerManifest {
+    envHash: string;
+    e3Version: string;
+    /** The tier base image ref the env was built FROM. */
+    baseImage: string;
+    /** The rack tier vocabulary word derived from the base image. */
+    baseTier: string;
+    /** The env's OWN layers (delta above the base), in application order. */
+    layers: EnvLayerDescriptor[];
+}
+/** Cloud-side "this env is rack-fetchable" record (NEW row key — stored
+ *  structs cannot grow fields, so this is its own kind). */
+export interface EnvIndexRecord {
+    envHash: string;
+    e3Version: string;
+    baseImage: string;
+    baseTier: string;
+    /** Object key of the manifest in the data bucket. */
+    manifestKey: string;
+    layerCount: number;
+    publishedAtMs: number;
+}
+/** Finds environment publications compatible with a runtime release. */
+export interface EnvIndexStore {
+    /** Publishes the metadata for an available environment. */
+    put(record: EnvIndexRecord): Promise<void>;
+    /** Reads one environment publication for the requested release. */
+    get(envHash: string, e3Version: string): Promise<EnvIndexRecord | null>;
+}
+/** Data-bucket key of a published layer blob (content-addressed, shared
+ *  across envs — identical layers publish once). */
+export declare function envLayerBlobKey(digest: string): string;
+//# sourceMappingURL=env-publication.d.ts.map

package/dist/src/server/env-publication.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"env-publication.d.ts","sourceRoot":"","sources":["../../../src/server/env-publication.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,gDAAgD;AAChD,MAAM,WAAW,kBAAkB;IACjC,sEAAsE;IACtE,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,mEAAmE;AACnE,MAAM,WAAW,gBAAgB;IAC/B,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,sDAAsD;IACtD,SAAS,EAAE,MAAM,CAAC;IAClB,iEAAiE;IACjE,QAAQ,EAAE,MAAM,CAAC;IACjB,yEAAyE;IACzE,MAAM,EAAE,kBAAkB,EAAE,CAAC;CAC9B;AAED;4DAC4D;AAC5D,MAAM,WAAW,cAAc;IAC7B,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,qDAAqD;IACrD,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;IACnB,aAAa,EAAE,MAAM,CAAC;CACvB;AAED,wEAAwE;AACxE,MAAM,WAAW,aAAa;IAC5B,2DAA2D;IAC3D,GAAG,CAAC,MAAM,EAAE,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC3C,mEAAmE;IACnE,GAAG,CAAC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,GAAG,IAAI,CAAC,CAAC;CACzE;AAED;oDACoD;AACpD,wBAAgB,eAAe,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAEtD"}

package/dist/src/server/env-publication.js

@@ -0,0 +1,10 @@
+/**
+ * Copyright (c) 2025 Elara AI Pty Ltd
+ * Licensed under BSL 1.1. See LICENSE for details.
+ */
+/** Data-bucket key of a published layer blob (content-addressed, shared
+ *  across envs — identical layers publish once). */
+export function envLayerBlobKey(digest) {
+    return `env-layers/blobs/${digest.replace(':', '-')}`;
+}
+//# sourceMappingURL=env-publication.js.map

package/dist/src/server/env-publication.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"env-publication.js","sourceRoot":"","sources":["../../../src/server/env-publication.ts"],"names":[],"mappings":"AAAA;;;GAGG;AA2CH;oDACoD;AACpD,MAAM,UAAU,eAAe,CAAC,MAAc;IAC5C,OAAO,oBAAoB,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE,GAAG,CAAC,EAAE,CAAC;AACxD,CAAC"}

package/dist/src/server/index.d.ts

@@ -0,0 +1,16 @@
+/**
+ * Copyright (c) 2025 Elara AI Pty Ltd
+ * Licensed under BSL 1.1. See LICENSE for details.
+ */
+export * from '../lease/lease-store.js';
+export * from '../lease/rack-dispatch.js';
+export * from '../lease/coordinator.js';
+export * from '../lease/closure.js';
+export * from '../identity/machine-identity.js';
+export * from '../registry/rack-registry.js';
+export * from './dispatch.js';
+export * from './rack-routes.js';
+export * from './storage-bridge.js';
+export * from './env-publication.js';
+export * from './body-limit.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/src/server/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/server/index.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAGH,cAAc,yBAAyB,CAAC;AACxC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,yBAAyB,CAAC;AACxC,cAAc,qBAAqB,CAAC;AACpC,cAAc,iCAAiC,CAAC;AAChD,cAAc,8BAA8B,CAAC;AAC7C,cAAc,eAAe,CAAC;AAC9B,cAAc,kBAAkB,CAAC;AACjC,cAAc,qBAAqB,CAAC;AACpC,cAAc,sBAAsB,CAAC;AACrC,cAAc,iBAAiB,CAAC"}

package/dist/src/server/index.js

@@ -0,0 +1,17 @@
+/**
+ * Copyright (c) 2025 Elara AI Pty Ltd
+ * Licensed under BSL 1.1. See LICENSE for details.
+ */
+// Shared control-plane mechanisms without the local hub, files or task runner.
+export * from '../lease/lease-store.js';
+export * from '../lease/rack-dispatch.js';
+export * from '../lease/coordinator.js';
+export * from '../lease/closure.js';
+export * from '../identity/machine-identity.js';
+export * from '../registry/rack-registry.js';
+export * from './dispatch.js';
+export * from './rack-routes.js';
+export * from './storage-bridge.js';
+export * from './env-publication.js';
+export * from './body-limit.js';
+//# sourceMappingURL=index.js.map

package/dist/src/server/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/server/index.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,+EAA+E;AAC/E,cAAc,yBAAyB,CAAC;AACxC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,yBAAyB,CAAC;AACxC,cAAc,qBAAqB,CAAC;AACpC,cAAc,iCAAiC,CAAC;AAChD,cAAc,8BAA8B,CAAC;AAC7C,cAAc,eAAe,CAAC;AAC9B,cAAc,kBAAkB,CAAC;AACjC,cAAc,qBAAqB,CAAC;AACpC,cAAc,sBAAsB,CAAC;AACrC,cAAc,iBAAiB,CAAC"}

package/dist/src/server/protocol.spec.d.ts

@@ -0,0 +1,6 @@
+/**
+ * Copyright (c) 2025 Elara AI Pty Ltd
+ * Licensed under BSL 1.1. See LICENSE for details.
+ */
+export {};
+//# sourceMappingURL=protocol.spec.d.ts.map

package/dist/src/server/protocol.spec.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"protocol.spec.d.ts","sourceRoot":"","sources":["../../../src/server/protocol.spec.ts"],"names":[],"mappings":"AAAA;;;GAGG"}

package/dist/src/server/protocol.spec.js

@@ -0,0 +1,78 @@
+/**
+ * Copyright (c) 2025 Elara AI Pty Ltd
+ * Licensed under BSL 1.1. See LICENSE for details.
+ */
+import assert from 'node:assert/strict';
+import { mkdtemp, rm } from 'node:fs/promises';
+import { tmpdir } from 'node:os';
+import { join } from 'node:path';
+import { Server } from 'node:http';
+import { once } from 'node:events';
+import { createAdaptorServer } from '@hono/node-server';
+import { LocalStorage, processOwner, repoInit } from '@elaraai/e3-core';
+import { InMemoryMachineIdentityStore, generateEnrollmentToken, InMemoryRackRegistry, InMemoryRackLeaseStore, InMemoryLeaseCoordinator, StoreRackDispatch, createRackRoutes } from '@elaraai/e3-rack';
+import { InMemoryRackStorageBridge, RecordingLogStore, rackProtocolSuite } from '@elaraai/e3-rack/testing';
+import { sessionAttempts } from '../client/session-attempts.js';
+rackProtocolSuite('memory dispatch, real repository', async () => {
+    const repo = await mkdtemp(join(tmpdir(), 'e3-contract-'));
+    let server;
+    const teardown = async () => {
+        if (server?.listening)
+            await new Promise((resolve, reject) => {
+                server.close((error) => error ? reject(error) : resolve());
+                server.closeAllConnections();
+            });
+        await rm(repo, { recursive: true, force: true });
+    };
+    try {
+        assert(repoInit(repo).success);
+        let time = Date.now();
+        const now = () => time;
+        const storage = new LocalStorage();
+        const identities = new InMemoryMachineIdentityStore();
+        const registry = new InMemoryRackRegistry();
+        const leases = new InMemoryRackLeaseStore(now);
+        const bridge = new InMemoryRackStorageBridge(storage, leases);
+        const logs = new RecordingLogStore();
+        const owner = await processOwner();
+        const attempts = { ...sessionAttempts(storage, repo, () => owner), logs };
+        const coordinator = new InMemoryLeaseCoordinator();
+        const dispatch = new StoreRackDispatch(leases, registry, { now, coordinator, endings: { stopped: attempts.stopped, writes: bridge } });
+        const app = createRackRoutes(identities, registry, leases, bridge, attempts, { now, coordinator, leaseWindowMs: 20, pollIntervalMs: 5 });
+        const listener = createAdaptorServer({ fetch: app.fetch });
+        assert(listener instanceof Server);
+        server = listener;
+        server.listen(0, '127.0.0.1');
+        await once(server, 'listening');
+        const address = server.address();
+        assert(address && typeof address !== 'string');
+        const transport = async (input, init) => {
+            const url = input instanceof Request ? input.url : String(input);
+            if (!url.startsWith('mem://'))
+                return fetch(input, init);
+            const request = new Request(input, init);
+            if (request.method === 'PUT') {
+                const result = bridge.put(url, new Uint8Array(await request.arrayBuffer()), Object.fromEntries(request.headers));
+                return 'refused' in result ? new Response(result.refused, { status: 400 }) : new Response(null, { headers: { 'x-amz-version-id': result.version } });
+            }
+            const bytes = await bridge.fetch(url);
+            return bytes === null ? new Response(null, { status: 404 }) : new Response(bytes);
+        };
+        return { repo, baseUrl: `http://127.0.0.1:${address.port}`, fetch: transport, dispatch,
+            async mintEnrollmentToken() {
+                const token = generateEnrollmentToken();
+                await identities.putEnrollmentToken(token.tokenHash, new Date(time + 60000));
+                return token.token;
+            },
+            seedObject: (repo, bytes) => storage.objects.write(repo, bytes),
+            readObject: async (repo, hash) => await storage.objects.exists(repo, hash) ? storage.objects.read(repo, hash) : null,
+            readLog: async (repo, taskHash, inputsHash, executionId, stream) => logs.entries.filter((entry) => entry.repo === repo && entry.taskHash === taskHash && entry.inputsHash === inputsHash && entry.executionId === executionId && entry.stream === stream).map((entry) => entry.data).join(''),
+            advanceClock: (ms) => { time += ms; }, teardown,
+        };
+    }
+    catch (error) {
+        await teardown();
+        throw error;
+    }
+});
+//# sourceMappingURL=protocol.spec.js.map

package/dist/src/server/protocol.spec.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"protocol.spec.js","sourceRoot":"","sources":["../../../src/server/protocol.spec.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,MAAM,MAAM,oBAAoB,CAAC;AACxC,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,MAAM,kBAAkB,CAAC;AAC/C,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,MAAM,EAAE,MAAM,WAAW,CAAC;AACnC,OAAO,EAAE,IAAI,EAAE,MAAM,aAAa,CAAC;AACnC,OAAO,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AACxD,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AACxE,OAAO,EAAE,4BAA4B,EAAE,uBAAuB,EAAE,oBAAoB,EAClF,sBAAsB,EAAE,wBAAwB,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AAClH,OAAO,EAAE,yBAAyB,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAC3G,OAAO,EAAE,eAAe,EAAE,MAAM,+BAA+B,CAAC;AAEhE,iBAAiB,CAAC,kCAAkC,EAAE,KAAK,IAAI,EAAE;IAC/D,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,cAAc,CAAC,CAAC,CAAC;IAC3D,IAAI,MAA0B,CAAC;IAC/B,MAAM,QAAQ,GAAG,KAAK,IAAI,EAAE;QAC1B,IAAI,MAAM,EAAE,SAAS;YAAE,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;gBACjE,MAAO,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;gBAAC,MAAO,CAAC,mBAAmB,EAAE,CAAC;YAC7F,CAAC,CAAC,CAAC;QACH,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACnD,CAAC,CAAC;IACF,IAAI,CAAC;QACH,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC;QAC/B,IAAI,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAAC,MAAM,GAAG,GAAG,GAAG,EAAE,CAAC,IAAI,CAAC;QAC9C,MAAM,OAAO,GAAG,IAAI,YAAY,EAAE,CAAC;QAAC,MAAM,UAAU,GAAG,IAAI,4BAA4B,EAAE,CAAC;QAC1F,MAAM,QAAQ,GAAG,IAAI,oBAAoB,EAAE,CAAC;QAAC,MAAM,MAAM,GAAG,IAAI,sBAAsB,CAAC,GAAG,CAAC,CAAC;QAC5F,MAAM,MAAM,GAAG,IAAI,yBAAyB,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAAC,MAAM,IAAI,GAAG,IAAI,iBAAiB,EAAE,CAAC;QACpG,MAAM,KAAK,GAAG,MAAM,YAAY,EAAE,CAAC;QAAC,MAAM,QAAQ,GAAG,EAAE,GAAG,eAAe,CAAC,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,CAAC;QAC9G,MAAM,WAAW,GAAG,IAAI,wBAAwB,EAAE,CAAC;QACnD,MAAM,QAAQ,GAAG,IAAI,iBAAiB,CAAC,MAAM,EAAE,QAAQ,EAAE,EAAE,GAAG,EAAE,WAAW,EAAE,OAAO,EAAE,EAAE,OAAO,EAAE,QAAQ,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC;QACvI,MAAM,GAAG,GAAG,gBAAgB,CAAC,UAAU,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,EAAE,GAAG,EAAE,WAAW,EAAE,aAAa,EAAE,EAAE,EAAE,cAAc,EAAE,CAAC,EAAE,CAAC,CAAC;QACzI,MAAM,QAAQ,GAAG,mBAAmB,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC;QAAC,MAAM,CAAC,QAAQ,YAAY,MAAM,CAAC,CAAC;QAAC,MAAM,GAAG,QAAQ,CAAC;QAClH,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,WAAW,CAAC,CAAC;QAAC,MAAM,IAAI,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;QAC/D,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,EAAE,CAAC;QAAC,MAAM,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,CAAC,CAAC;QACjF,MAAM,SAAS,GAAiB,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;YACpD,MAAM,GAAG,GAAG,KAAK,YAAY,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACjE,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,QAAQ,CAAC;gBAAE,OAAO,KAAK,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;YACzD,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;YACzC,IAAI,OAAO,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC;gBAC7B,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,UAAU,CAAC,MAAM,OAAO,CAAC,WAAW,EAAE,CAAC,EAAE,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC;gBACjH,OAAO,SAAS,IAAI,MAAM,CAAC,CAAC,CAAC,IAAI,QAAQ,CAAC,MAAM,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,OAAO,EAAE,EAAE,kBAAkB,EAAE,MAAM,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;YACvJ,CAAC;YACD,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YACtC,OAAO,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,QAAQ,CAAC,KAAK,CAAC,CAAC;QACpF,CAAC,CAAC;QACF,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,oBAAoB,OAAO,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,QAAQ;YACpF,KAAK,CAAC,mBAAmB;gBACvB,MAAM,KAAK,GAAG,uBAAuB,EAAE,CAAC;gBAAC,MAAM,UAAU,CAAC,kBAAkB,CAAC,KAAK,CAAC,SAAS,EAAE,IAAI,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC;gBAAC,OAAO,KAAK,CAAC,KAAK,CAAC;YAC5I,CAAC;YACD,UAAU,EAAE,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC;YAC/D,UAAU,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC,MAAM,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI;YACpH,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAChG,KAAK,CAAC,IAAI,KAAK,IAAI,IAAI,KAAK,CAAC,QAAQ,KAAK,QAAQ,IAAI,KAAK,CAAC,UAAU,KAAK,UAAU,IAAI,KAAK,CAAC,WAAW,KAAK,WAAW,IAAI,KAAK,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;YAC5L,YAAY,EAAE,CAAC,EAAE,EAAE,EAAE,GAAG,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ;SAChD,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAAC,MAAM,QAAQ,EAAE,CAAC;QAAC,MAAM,KAAK,CAAC;IAAC,CAAC;AACpD,CAAC,CAAC,CAAC"}