@elie-laloum/outpost 1.1.0

package/dist/infrastructure/git.js

@@ -0,0 +1,304 @@
+import { createHash, randomUUID } from "node:crypto";
+import { appendFile, mkdir, open, readFile, rm, stat, rename, } from "node:fs/promises";
+import { basename, dirname, join, resolve } from "node:path";
+import { OutpostError, recordRecovery } from "../domain/errors.js";
+import { copySelected, directory, inside } from "./files.js";
+import { executeProcess, requireSuccess } from "./process.js";
+export async function git(cwd, args, deadlineMs = 30_000, stdin) {
+    const result = await requireSuccess({
+        executable: "git",
+        arguments: [
+            "-c",
+            "core.hooksPath=" + (process.platform === "win32" ? "NUL" : "/dev/null"),
+            ...args,
+        ],
+        directory: cwd,
+        variables: { LC_ALL: "C", GIT_TERMINAL_PROMPT: "0" },
+        deadlineMs,
+        retain: 16_777_216,
+        ...(stdin === undefined ? {} : { stdin }),
+    });
+    return result.stdout;
+}
+export async function commits(cwd, baseline, deadlineMs) {
+    const lines = await git(cwd, ["log", "--format=%H%x00%s", `${baseline}..HEAD`], deadlineMs);
+    return lines
+        .trim()
+        .split("\n")
+        .filter(Boolean)
+        .map((line) => {
+        const [oid = "", subject = ""] = line.split("\0");
+        return { oid, subject };
+    });
+}
+async function lock(root, key) {
+    const folder = join(root, ".outpost", "locks");
+    await mkdir(folder, { recursive: true });
+    const path = join(folder, `${createHash("sha256").update(key).digest("hex").slice(0, 20)}.json`);
+    for (let attempt = 0; attempt < 2; attempt++) {
+        try {
+            const file = await open(path, "wx", 0o600);
+            await file.writeFile(JSON.stringify({ pid: process.pid, nonce: randomUUID() }));
+            await file.close();
+            return () => rm(path, { force: true });
+        }
+        catch (cause) {
+            if (cause.code !== "EEXIST")
+                throw cause;
+            const owner = JSON.parse(await readFile(path, "utf8"));
+            let alive = true;
+            try {
+                if (!owner.pid)
+                    throw new Error();
+                process.kill(owner.pid, 0);
+            }
+            catch (error) {
+                alive = error.code === "EPERM";
+            }
+            if (alive)
+                throw new OutpostError("conflict", `Workspace is already in use: ${key}`, { lock: path, pid: owner.pid });
+            await rm(path, { force: true });
+        }
+    }
+    throw new OutpostError("conflict", "Unable to acquire workspace lock");
+}
+export async function acquireWorkspace(options) {
+    const requested = await directory(options.repository);
+    const root = (await git(requested, ["rev-parse", "--show-toplevel"], options.limits?.gitMs)).trim();
+    const repository = await directory(root);
+    const exclude = (await git(repository, [
+        "rev-parse",
+        "--path-format=absolute",
+        "--git-path",
+        "info/exclude",
+    ])).trim();
+    const exclusions = await readFile(exclude, "utf8").catch(() => "");
+    const patterns = [
+        "/.outpost/workspaces/",
+        "/.outpost/locks/",
+        "/.outpost/recovery/",
+        "/.outpost/logs/",
+    ];
+    const missing = patterns.filter((pattern) => !exclusions.split(/\r?\n/).includes(pattern));
+    if (missing.length) {
+        await mkdir(dirname(exclude), { recursive: true });
+        await appendFile(exclude, `\n${missing.join("\n")}\n`);
+    }
+    const policy = options.branch ?? { mode: "current" };
+    const baseBranch = (await git(repository, ["symbolic-ref", "--quiet", "--short", "HEAD"]).catch(() => "")).trim();
+    if (policy.mode === "integrate" && !baseBranch)
+        throw new OutpostError("workspace", "Automatic integration requires an attached host branch");
+    if (policy.mode === "current" && options.copies?.length)
+        throw new OutpostError("configuration", "Copied inputs require a separate workspace");
+    const branch = policy.mode === "current"
+        ? baseBranch || "HEAD"
+        : policy.mode === "named"
+            ? policy.name
+            : `outpost/${options.label
+                ? options.label
+                    .toLowerCase()
+                    .replace(/[^a-z0-9]+/g, "-")
+                    .slice(0, 48) + "-"
+                : "job-"}${randomUUID()}`;
+    if (policy.mode !== "current")
+        await git(repository, ["check-ref-format", "--branch", branch]);
+    const unlock = await lock(repository, policy.mode === "current" ? repository : branch);
+    let workdir = repository;
+    let created = false;
+    let disposal;
+    try {
+        if (policy.mode !== "current") {
+            const hash = createHash("sha256")
+                .update(branch)
+                .digest("hex")
+                .slice(0, 12);
+            const label = options.label
+                ?.toLowerCase()
+                .replace(/[^a-z0-9]+/g, "-")
+                .slice(0, 48);
+            const managed = join(repository, ".outpost", "workspaces");
+            const expected = join(managed, `${label ? label + "-" : ""}${hash}`);
+            await git(repository, ["worktree", "prune", "--expire", "now"]);
+            const list = await git(repository, [
+                "worktree",
+                "list",
+                "--porcelain",
+                "-z",
+            ]);
+            const entries = list.split("\0\0").map((item) => item.split("\0"));
+            const existing = entries.find((fields) => fields.includes(`branch refs/heads/${branch}`) ||
+                (fields.includes("detached") &&
+                    fields.some((field) => field.startsWith("worktree ") &&
+                        inside(managed, field.slice(9)) &&
+                        (basename(field.slice(9)) === hash ||
+                            basename(field.slice(9)).endsWith("-" + hash)))));
+            if (existing) {
+                workdir = existing
+                    .find((field) => field.startsWith("worktree "))
+                    .slice(9);
+                if (!inside(managed, workdir) || resolve(workdir) === resolve(managed))
+                    throw new OutpostError("conflict", `Branch ${branch} is checked out elsewhere`, { path: workdir });
+                workdir = await directory(workdir);
+                const attached = (await git(workdir, [
+                    "symbolic-ref",
+                    "--quiet",
+                    "--short",
+                    "HEAD",
+                ]).catch(() => "")).trim();
+                const dirty = (await git(workdir, ["status", "--porcelain"])).trim();
+                if (attached === branch && !dirty) {
+                    const remote = (await git(repository, ["remote"]))
+                        .split(/\s+/)
+                        .includes("origin");
+                    if (remote) {
+                        const fetched = await git(repository, [
+                            "fetch",
+                            "origin",
+                            `refs/heads/${branch}:refs/remotes/origin/${branch}`,
+                        ], options.limits?.gitMs).then(() => true, () => false);
+                        if (fetched) {
+                            const head = (await git(workdir, ["rev-parse", "HEAD"])).trim();
+                            const target = `refs/remotes/origin/${branch}`;
+                            const forward = await git(repository, [
+                                "merge-base",
+                                "--is-ancestor",
+                                head,
+                                target,
+                            ]).then(() => true, () => false);
+                            if (forward)
+                                await git(workdir, ["merge", "--ff-only", target], options.limits?.gitMs);
+                        }
+                    }
+                }
+            }
+            else {
+                if (await stat(expected).catch((error) => {
+                    if (error.code === "ENOENT")
+                        return undefined;
+                    throw error;
+                })) {
+                    const managed = join(repository, ".outpost", "workspaces");
+                    if (!inside(managed, expected) ||
+                        resolve(expected) === resolve(managed))
+                        throw new OutpostError("workspace", "Refusing to relocate an unmanaged directory");
+                    const recovery = join(repository, ".outpost", "recovery", `orphan-${hash}-${randomUUID()}`);
+                    await mkdir(dirname(recovery), { recursive: true });
+                    await rename(expected, recovery);
+                }
+                await mkdir(join(repository, ".outpost", "workspaces"), {
+                    recursive: true,
+                });
+                const branchExists = await executeProcess({
+                    executable: "git",
+                    arguments: [
+                        "show-ref",
+                        "--verify",
+                        "--quiet",
+                        `refs/heads/${branch}`,
+                    ],
+                    directory: repository,
+                });
+                const from = policy.from ?? "HEAD";
+                const oid = (await git(repository, [
+                    "rev-parse",
+                    "--verify",
+                    "--end-of-options",
+                    `${from}^{commit}`,
+                ])).trim();
+                await git(repository, [
+                    "-c",
+                    "branch.autoSetupMerge=false",
+                    "worktree",
+                    "add",
+                    ...(branchExists.status === 0 ? [] : ["-b", branch]),
+                    expected,
+                    branchExists.status === 0 ? branch : oid,
+                ], options.limits?.gitMs);
+                workdir = expected;
+                created = true;
+            }
+        }
+        await copySelected(repository, workdir, options.copies ?? [], options.limits?.copyMs);
+        const baseline = (await git(workdir, ["rev-parse", "HEAD"])).trim();
+        const gitDir = (await git(workdir, ["rev-parse", "--absolute-git-dir"])).trim();
+        const common = (await git(workdir, [
+            "rev-parse",
+            "--path-format=absolute",
+            "--git-common-dir",
+        ])).trim();
+        return {
+            repository,
+            directory: workdir,
+            branch,
+            baseBranch,
+            baseline,
+            policy,
+            gitDirectories: [...new Set([gitDir, common])],
+            async integrate() {
+                if (policy.mode !== "integrate")
+                    return;
+                const current = (await git(repository, ["symbolic-ref", "--short", "HEAD"])).trim();
+                if (current !== baseBranch)
+                    throw new OutpostError("conflict", "Host branch changed during the job", { expected: baseBranch, current, directory: workdir });
+                const releaseMerge = await lock(repository, `merge:${baseBranch}`);
+                try {
+                    await git(repository, ["merge", "--no-edit", branch], options.limits?.mergeMs);
+                }
+                catch (cause) {
+                    throw new OutpostError("conflict", "Automatic integration failed; workspace retained", { directory: workdir, branch }, cause);
+                }
+                finally {
+                    await releaseMerge();
+                }
+            },
+            dispose(preserve = false) {
+                if (disposal)
+                    return disposal;
+                disposal = (async () => {
+                    try {
+                        if (policy.mode === "current")
+                            return {};
+                        if (preserve)
+                            return { retainedDirectory: workdir };
+                        const attached = await git(workdir, [
+                            "symbolic-ref",
+                            "--quiet",
+                            "HEAD",
+                        ]).catch(() => "");
+                        if (!attached.trim())
+                            return { retainedDirectory: workdir };
+                        const dirty = await git(workdir, [
+                            "status",
+                            "--porcelain",
+                            "--untracked-files=normal",
+                        ]);
+                        if (dirty.trim())
+                            return { retainedDirectory: workdir };
+                        if (!inside(join(repository, ".outpost", "workspaces"), workdir))
+                            throw new OutpostError("workspace", "Refusing to remove an unmanaged workspace");
+                        await git(repository, ["worktree", "remove", workdir]);
+                        if (policy.mode === "integrate")
+                            await git(repository, ["branch", "-d", branch]).catch(() => undefined);
+                        return {};
+                    }
+                    finally {
+                        await unlock();
+                    }
+                })();
+                return disposal;
+            },
+        };
+    }
+    catch (error) {
+        if (created) {
+            const clean = await git(workdir, ["status", "--porcelain"]).then((output) => !output.trim(), () => false);
+            if (clean && inside(join(repository, ".outpost", "workspaces"), workdir))
+                await git(repository, ["worktree", "remove", workdir]).catch(() => undefined);
+            else
+                recordRecovery(error, { branch, directory: workdir });
+        }
+        await unlock();
+        throw error;
+    }
+}
+//# sourceMappingURL=git.js.map

package/dist/infrastructure/git.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"git.js","sourceRoot":"","sources":["../../src/infrastructure/git.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACrD,OAAO,EACL,UAAU,EACV,KAAK,EACL,IAAI,EACJ,QAAQ,EACR,EAAE,EACF,IAAI,EACJ,MAAM,GACP,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC7D,OAAO,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAQnE,OAAO,EAAE,YAAY,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,YAAY,CAAC;AAC7D,OAAO,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAE9D,MAAM,CAAC,KAAK,UAAU,GAAG,CACvB,GAAW,EACX,IAAuB,EACvB,UAAU,GAAG,MAAM,EACnB,KAAc;IAEd,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC;QAClC,UAAU,EAAE,KAAK;QACjB,SAAS,EAAE;YACT,IAAI;YACJ,iBAAiB,GAAG,CAAC,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,WAAW,CAAC;YACxE,GAAG,IAAI;SACR;QACD,SAAS,EAAE,GAAG;QACd,SAAS,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,mBAAmB,EAAE,GAAG,EAAE;QACpD,UAAU;QACV,MAAM,EAAE,UAAU;QAClB,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC;KAC1C,CAAC,CAAC;IACH,OAAO,MAAM,CAAC,MAAM,CAAC;AACvB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,OAAO,CAC3B,GAAW,EACX,QAAgB,EAChB,UAAmB;IAEnB,MAAM,KAAK,GAAG,MAAM,GAAG,CACrB,GAAG,EACH,CAAC,KAAK,EAAE,mBAAmB,EAAE,GAAG,QAAQ,QAAQ,CAAC,EACjD,UAAU,CACX,CAAC;IACF,OAAO,KAAK;SACT,IAAI,EAAE;SACN,KAAK,CAAC,IAAI,CAAC;SACX,MAAM,CAAC,OAAO,CAAC;SACf,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;QACZ,MAAM,CAAC,GAAG,GAAG,EAAE,EAAE,OAAO,GAAG,EAAE,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAClD,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC;IAC1B,CAAC,CAAC,CAAC;AACP,CAAC;AAED,KAAK,UAAU,IAAI,CAAC,IAAY,EAAE,GAAW;IAC3C,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,EAAE,UAAU,EAAE,OAAO,CAAC,CAAC;IAC/C,MAAM,KAAK,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACzC,MAAM,IAAI,GAAG,IAAI,CACf,MAAM,EACN,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CACtE,CAAC;IACF,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,CAAC,EAAE,OAAO,EAAE,EAAE,CAAC;QAC7C,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;YAC3C,MAAM,IAAI,CAAC,SAAS,CAClB,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,KAAK,EAAE,UAAU,EAAE,EAAE,CAAC,CAC1D,CAAC;YACF,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC;YACnB,OAAO,GAAG,EAAE,CAAC,EAAE,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACzC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;gBAAE,MAAM,KAAK,CAAC;YACpE,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAEpD,CAAC;YACF,IAAI,KAAK,GAAG,IAAI,CAAC;YACjB,IAAI,CAAC;gBACH,IAAI,CAAC,KAAK,CAAC,GAAG;oBAAE,MAAM,IAAI,KAAK,EAAE,CAAC;gBAClC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;YAC7B,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,KAAK,GAAI,KAA+B,CAAC,IAAI,KAAK,OAAO,CAAC;YAC5D,CAAC;YACD,IAAI,KAAK;gBACP,MAAM,IAAI,YAAY,CACpB,UAAU,EACV,gCAAgC,GAAG,EAAE,EACrC,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,CAC/B,CAAC;YACJ,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAClC,CAAC;IACH,CAAC;IACD,MAAM,IAAI,YAAY,CAAC,UAAU,EAAE,kCAAkC,CAAC,CAAC;AACzE,CAAC;AAOD,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,OAMtC;IACC,MAAM,SAAS,GAAG,MAAM,SAAS,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IACtD,MAAM,IAAI,GAAG,CACX,MAAM,GAAG,CACP,SAAS,EACT,CAAC,WAAW,EAAE,iBAAiB,CAAC,EAChC,OAAO,CAAC,MAAM,EAAE,KAAK,CACtB,CACF,CAAC,IAAI,EAAE,CAAC;IACT,MAAM,UAAU,GAAG,MAAM,SAAS,CAAC,IAAI,CAAC,CAAC;IACzC,MAAM,OAAO,GAAG,CACd,MAAM,GAAG,CAAC,UAAU,EAAE;QACpB,WAAW;QACX,wBAAwB;QACxB,YAAY;QACZ,cAAc;KACf,CAAC,CACH,CAAC,IAAI,EAAE,CAAC;IACT,MAAM,UAAU,GAAG,MAAM,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;IACnE,MAAM,QAAQ,GAAG;QACf,uBAAuB;QACvB,kBAAkB;QAClB,qBAAqB;QACrB,iBAAiB;KAClB,CAAC;IACF,MAAM,OAAO,GAAG,QAAQ,CAAC,MAAM,CAC7B,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAC1D,CAAC;IACF,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;QACnB,MAAM,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACnD,MAAM,UAAU,CAAC,OAAO,EAAE,KAAK,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACzD,CAAC;IACD,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;IACrD,MAAM,UAAU,GAAG,CACjB,MAAM,GAAG,CAAC,UAAU,EAAE,CAAC,cAAc,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC,KAAK,CACzE,GAAG,EAAE,CAAC,EAAE,CACT,CACF,CAAC,IAAI,EAAE,CAAC;IACT,IAAI,MAAM,CAAC,IAAI,KAAK,WAAW,IAAI,CAAC,UAAU;QAC5C,MAAM,IAAI,YAAY,CACpB,WAAW,EACX,wDAAwD,CACzD,CAAC;IACJ,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS,IAAI,OAAO,CAAC,MAAM,EAAE,MAAM;QACrD,MAAM,IAAI,YAAY,CACpB,eAAe,EACf,4CAA4C,CAC7C,CAAC;IACJ,MAAM,MAAM,GACV,MAAM,CAAC,IAAI,KAAK,SAAS;QACvB,CAAC,CAAC,UAAU,IAAI,MAAM;QACtB,CAAC,CAAC,MAAM,CAAC,IAAI,KAAK,OAAO;YACvB,CAAC,CAAC,MAAM,CAAC,IAAI;YACb,CAAC,CAAC,WACE,OAAO,CAAC,KAAK;gBACX,CAAC,CAAC,OAAO,CAAC,KAAK;qBACV,WAAW,EAAE;qBACb,OAAO,CAAC,aAAa,EAAE,GAAG,CAAC;qBAC3B,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG;gBACvB,CAAC,CAAC,MACN,GAAG,UAAU,EAAE,EAAE,CAAC;IAC1B,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS;QAC3B,MAAM,GAAG,CAAC,UAAU,EAAE,CAAC,kBAAkB,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC,CAAC;IAClE,MAAM,MAAM,GAAG,MAAM,IAAI,CACvB,UAAU,EACV,MAAM,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,MAAM,CAChD,CAAC;IACF,IAAI,OAAO,GAAG,UAAU,CAAC;IACzB,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,IAAI,QAAuC,CAAC;IAC5C,IAAI,CAAC;QACH,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YAC9B,MAAM,IAAI,GAAG,UAAU,CAAC,QAAQ,CAAC;iBAC9B,MAAM,CAAC,MAAM,CAAC;iBACd,MAAM,CAAC,KAAK,CAAC;iBACb,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAChB,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK;gBACzB,EAAE,WAAW,EAAE;iBACd,OAAO,CAAC,aAAa,EAAE,GAAG,CAAC;iBAC3B,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAChB,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,EAAE,UAAU,EAAE,YAAY,CAAC,CAAC;YAC3D,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,EAAE,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,GAAG,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,IAAI,EAAE,CAAC,CAAC;YACrE,MAAM,GAAG,CAAC,UAAU,EAAE,CAAC,UAAU,EAAE,OAAO,EAAE,UAAU,EAAE,KAAK,CAAC,CAAC,CAAC;YAChE,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,UAAU,EAAE;gBACjC,UAAU;gBACV,MAAM;gBACN,aAAa;gBACb,IAAI;aACL,CAAC,CAAC;YACH,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;YACnE,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,CAC3B,CAAC,MAAM,EAAE,EAAE,CACT,MAAM,CAAC,QAAQ,CAAC,qBAAqB,MAAM,EAAE,CAAC;gBAC9C,CAAC,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC;oBAC1B,MAAM,CAAC,IAAI,CACT,CAAC,KAAK,EAAE,EAAE,CACR,KAAK,CAAC,UAAU,CAAC,WAAW,CAAC;wBAC7B,MAAM,CAAC,OAAO,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;wBAC/B,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,IAAI;4BAChC,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,GAAG,IAAI,CAAC,CAAC,CACnD,CAAC,CACP,CAAC;YACF,IAAI,QAAQ,EAAE,CAAC;gBACb,OAAO,GAAG,QAAQ;qBACf,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC,WAAW,CAAC,CAAE;qBAC/C,KAAK,CAAC,CAAC,CAAC,CAAC;gBACZ,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,IAAI,OAAO,CAAC,OAAO,CAAC,KAAK,OAAO,CAAC,OAAO,CAAC;oBACpE,MAAM,IAAI,YAAY,CACpB,UAAU,EACV,UAAU,MAAM,2BAA2B,EAC3C,EAAE,IAAI,EAAE,OAAO,EAAE,CAClB,CAAC;gBACJ,OAAO,GAAG,MAAM,SAAS,CAAC,OAAO,CAAC,CAAC;gBACnC,MAAM,QAAQ,GAAG,CACf,MAAM,GAAG,CAAC,OAAO,EAAE;oBACjB,cAAc;oBACd,SAAS;oBACT,SAAS;oBACT,MAAM;iBACP,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CACnB,CAAC,IAAI,EAAE,CAAC;gBACT,MAAM,KAAK,GAAG,CAAC,MAAM,GAAG,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;gBACrE,IAAI,QAAQ,KAAK,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC;oBAClC,MAAM,MAAM,GAAG,CAAC,MAAM,GAAG,CAAC,UAAU,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC;yBAC/C,KAAK,CAAC,KAAK,CAAC;yBACZ,QAAQ,CAAC,QAAQ,CAAC,CAAC;oBACtB,IAAI,MAAM,EAAE,CAAC;wBACX,MAAM,OAAO,GAAG,MAAM,GAAG,CACvB,UAAU,EACV;4BACE,OAAO;4BACP,QAAQ;4BACR,cAAc,MAAM,wBAAwB,MAAM,EAAE;yBACrD,EACD,OAAO,CAAC,MAAM,EAAE,KAAK,CACtB,CAAC,IAAI,CACJ,GAAG,EAAE,CAAC,IAAI,EACV,GAAG,EAAE,CAAC,KAAK,CACZ,CAAC;wBACF,IAAI,OAAO,EAAE,CAAC;4BACZ,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,OAAO,EAAE,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;4BAChE,MAAM,MAAM,GAAG,uBAAuB,MAAM,EAAE,CAAC;4BAC/C,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,UAAU,EAAE;gCACpC,YAAY;gCACZ,eAAe;gCACf,IAAI;gCACJ,MAAM;6BACP,CAAC,CAAC,IAAI,CACL,GAAG,EAAE,CAAC,IAAI,EACV,GAAG,EAAE,CAAC,KAAK,CACZ,CAAC;4BACF,IAAI,OAAO;gCACT,MAAM,GAAG,CACP,OAAO,EACP,CAAC,OAAO,EAAE,WAAW,EAAE,MAAM,CAAC,EAC9B,OAAO,CAAC,MAAM,EAAE,KAAK,CACtB,CAAC;wBACN,CAAC;oBACH,CAAC;gBACH,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,IACE,MAAM,IAAI,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;oBACnC,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;wBACpD,OAAO,SAAS,CAAC;oBACnB,MAAM,KAAK,CAAC;gBACd,CAAC,CAAC,EACF,CAAC;oBACD,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,EAAE,UAAU,EAAE,YAAY,CAAC,CAAC;oBAC3D,IACE,CAAC,MAAM,CAAC,OAAO,EAAE,QAAQ,CAAC;wBAC1B,OAAO,CAAC,QAAQ,CAAC,KAAK,OAAO,CAAC,OAAO,CAAC;wBAEtC,MAAM,IAAI,YAAY,CACpB,WAAW,EACX,6CAA6C,CAC9C,CAAC;oBACJ,MAAM,QAAQ,GAAG,IAAI,CACnB,UAAU,EACV,UAAU,EACV,UAAU,EACV,UAAU,IAAI,IAAI,UAAU,EAAE,EAAE,CACjC,CAAC;oBACF,MAAM,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;oBACpD,MAAM,MAAM,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;gBACnC,CAAC;gBACD,MAAM,KAAK,CAAC,IAAI,CAAC,UAAU,EAAE,UAAU,EAAE,YAAY,CAAC,EAAE;oBACtD,SAAS,EAAE,IAAI;iBAChB,CAAC,CAAC;gBACH,MAAM,YAAY,GAAG,MAAM,cAAc,CAAC;oBACxC,UAAU,EAAE,KAAK;oBACjB,SAAS,EAAE;wBACT,UAAU;wBACV,UAAU;wBACV,SAAS;wBACT,cAAc,MAAM,EAAE;qBACvB;oBACD,SAAS,EAAE,UAAU;iBACtB,CAAC,CAAC;gBACH,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC;gBACnC,MAAM,GAAG,GAAG,CACV,MAAM,GAAG,CAAC,UAAU,EAAE;oBACpB,WAAW;oBACX,UAAU;oBACV,kBAAkB;oBAClB,GAAG,IAAI,WAAW;iBACnB,CAAC,CACH,CAAC,IAAI,EAAE,CAAC;gBACT,MAAM,GAAG,CACP,UAAU,EACV;oBACE,IAAI;oBACJ,6BAA6B;oBAC7B,UAAU;oBACV,KAAK;oBACL,GAAG,CAAC,YAAY,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;oBACpD,QAAQ;oBACR,YAAY,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG;iBACzC,EACD,OAAO,CAAC,MAAM,EAAE,KAAK,CACtB,CAAC;gBACF,OAAO,GAAG,QAAQ,CAAC;gBACnB,OAAO,GAAG,IAAI,CAAC;YACjB,CAAC;QACH,CAAC;QACD,MAAM,YAAY,CAChB,UAAU,EACV,OAAO,EACP,OAAO,CAAC,MAAM,IAAI,EAAE,EACpB,OAAO,CAAC,MAAM,EAAE,MAAM,CACvB,CAAC;QACF,MAAM,QAAQ,GAAG,CAAC,MAAM,GAAG,CAAC,OAAO,EAAE,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QACpE,MAAM,MAAM,GAAG,CACb,MAAM,GAAG,CAAC,OAAO,EAAE,CAAC,WAAW,EAAE,oBAAoB,CAAC,CAAC,CACxD,CAAC,IAAI,EAAE,CAAC;QACT,MAAM,MAAM,GAAG,CACb,MAAM,GAAG,CAAC,OAAO,EAAE;YACjB,WAAW;YACX,wBAAwB;YACxB,kBAAkB;SACnB,CAAC,CACH,CAAC,IAAI,EAAE,CAAC;QACT,OAAO;YACL,UAAU;YACV,SAAS,EAAE,OAAO;YAClB,MAAM;YACN,UAAU;YACV,QAAQ;YACR,MAAM;YACN,cAAc,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;YAC9C,KAAK,CAAC,SAAS;gBACb,IAAI,MAAM,CAAC,IAAI,KAAK,WAAW;oBAAE,OAAO;gBACxC,MAAM,OAAO,GAAG,CACd,MAAM,GAAG,CAAC,UAAU,EAAE,CAAC,cAAc,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC,CAC3D,CAAC,IAAI,EAAE,CAAC;gBACT,IAAI,OAAO,KAAK,UAAU;oBACxB,MAAM,IAAI,YAAY,CACpB,UAAU,EACV,oCAAoC,EACpC,EAAE,QAAQ,EAAE,UAAU,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,CACtD,CAAC;gBACJ,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,UAAU,EAAE,SAAS,UAAU,EAAE,CAAC,CAAC;gBACnE,IAAI,CAAC;oBACH,MAAM,GAAG,CACP,UAAU,EACV,CAAC,OAAO,EAAE,WAAW,EAAE,MAAM,CAAC,EAC9B,OAAO,CAAC,MAAM,EAAE,OAAO,CACxB,CAAC;gBACJ,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,MAAM,IAAI,YAAY,CACpB,UAAU,EACV,kDAAkD,EAClD,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,EAAE,EAC9B,KAAK,CACN,CAAC;gBACJ,CAAC;wBAAS,CAAC;oBACT,MAAM,YAAY,EAAE,CAAC;gBACvB,CAAC;YACH,CAAC;YACD,OAAO,CAAC,QAAQ,GAAG,KAAK;gBACtB,IAAI,QAAQ;oBAAE,OAAO,QAAQ,CAAC;gBAC9B,QAAQ,GAAG,CAAC,KAAK,IAAI,EAAE;oBACrB,IAAI,CAAC;wBACH,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS;4BAAE,OAAO,EAAE,CAAC;wBACzC,IAAI,QAAQ;4BAAE,OAAO,EAAE,iBAAiB,EAAE,OAAO,EAAE,CAAC;wBACpD,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,OAAO,EAAE;4BAClC,cAAc;4BACd,SAAS;4BACT,MAAM;yBACP,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;wBACnB,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE;4BAAE,OAAO,EAAE,iBAAiB,EAAE,OAAO,EAAE,CAAC;wBAC5D,MAAM,KAAK,GAAG,MAAM,GAAG,CAAC,OAAO,EAAE;4BAC/B,QAAQ;4BACR,aAAa;4BACb,0BAA0B;yBAC3B,CAAC,CAAC;wBACH,IAAI,KAAK,CAAC,IAAI,EAAE;4BAAE,OAAO,EAAE,iBAAiB,EAAE,OAAO,EAAE,CAAC;wBACxD,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,EAAE,UAAU,EAAE,YAAY,CAAC,EAAE,OAAO,CAAC;4BAC9D,MAAM,IAAI,YAAY,CACpB,WAAW,EACX,2CAA2C,CAC5C,CAAC;wBACJ,MAAM,GAAG,CAAC,UAAU,EAAE,CAAC,UAAU,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC;wBACvD,IAAI,MAAM,CAAC,IAAI,KAAK,WAAW;4BAC7B,MAAM,GAAG,CAAC,UAAU,EAAE,CAAC,QAAQ,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,KAAK,CACnD,GAAG,EAAE,CAAC,SAAS,CAChB,CAAC;wBACJ,OAAO,EAAE,CAAC;oBACZ,CAAC;4BAAS,CAAC;wBACT,MAAM,MAAM,EAAE,CAAC;oBACjB,CAAC;gBACH,CAAC,CAAC,EAAE,CAAC;gBACL,OAAO,QAAQ,CAAC;YAClB,CAAC;SACF,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,OAAO,EAAE,CAAC;YACZ,MAAM,KAAK,GAAG,MAAM,GAAG,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC,CAAC,IAAI,CAC9D,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,EAC1B,GAAG,EAAE,CAAC,KAAK,CACZ,CAAC;YACF,IAAI,KAAK,IAAI,MAAM,CAAC,IAAI,CAAC,UAAU,EAAE,UAAU,EAAE,YAAY,CAAC,EAAE,OAAO,CAAC;gBACtE,MAAM,GAAG,CAAC,UAAU,EAAE,CAAC,UAAU,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC,KAAK,CAC1D,GAAG,EAAE,CAAC,SAAS,CAChB,CAAC;;gBACC,cAAc,CAAC,KAAK,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,CAAC;QAC7D,CAAC;QACD,MAAM,MAAM,EAAE,CAAC;QACf,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC","sourcesContent":["import { createHash, randomUUID } from \"node:crypto\";\nimport {\n  appendFile,\n  mkdir,\n  open,\n  readFile,\n  rm,\n  stat,\n  rename,\n} from \"node:fs/promises\";\nimport { basename, dirname, join, resolve } from \"node:path\";\nimport { OutpostError, recordRecovery } from \"../domain/errors.ts\";\nimport type {\n  BranchPolicy,\n  Commit,\n  Disposal,\n  StageLimits,\n  WorkspaceRecord,\n} from \"../domain/ports.ts\";\nimport { copySelected, directory, inside } from \"./files.ts\";\nimport { executeProcess, requireSuccess } from \"./process.ts\";\n\nexport async function git(\n  cwd: string,\n  args: readonly string[],\n  deadlineMs = 30_000,\n  stdin?: string,\n): Promise<string> {\n  const result = await requireSuccess({\n    executable: \"git\",\n    arguments: [\n      \"-c\",\n      \"core.hooksPath=\" + (process.platform === \"win32\" ? \"NUL\" : \"/dev/null\"),\n      ...args,\n    ],\n    directory: cwd,\n    variables: { LC_ALL: \"C\", GIT_TERMINAL_PROMPT: \"0\" },\n    deadlineMs,\n    retain: 16_777_216,\n    ...(stdin === undefined ? {} : { stdin }),\n  });\n  return result.stdout;\n}\n\nexport async function commits(\n  cwd: string,\n  baseline: string,\n  deadlineMs?: number,\n): Promise<Commit[]> {\n  const lines = await git(\n    cwd,\n    [\"log\", \"--format=%H%x00%s\", `${baseline}..HEAD`],\n    deadlineMs,\n  );\n  return lines\n    .trim()\n    .split(\"\\n\")\n    .filter(Boolean)\n    .map((line) => {\n      const [oid = \"\", subject = \"\"] = line.split(\"\\0\");\n      return { oid, subject };\n    });\n}\n\nasync function lock(root: string, key: string): Promise<() => Promise<void>> {\n  const folder = join(root, \".outpost\", \"locks\");\n  await mkdir(folder, { recursive: true });\n  const path = join(\n    folder,\n    `${createHash(\"sha256\").update(key).digest(\"hex\").slice(0, 20)}.json`,\n  );\n  for (let attempt = 0; attempt < 2; attempt++) {\n    try {\n      const file = await open(path, \"wx\", 0o600);\n      await file.writeFile(\n        JSON.stringify({ pid: process.pid, nonce: randomUUID() }),\n      );\n      await file.close();\n      return () => rm(path, { force: true });\n    } catch (cause) {\n      if ((cause as NodeJS.ErrnoException).code !== \"EEXIST\") throw cause;\n      const owner = JSON.parse(await readFile(path, \"utf8\")) as {\n        pid?: number;\n      };\n      let alive = true;\n      try {\n        if (!owner.pid) throw new Error();\n        process.kill(owner.pid, 0);\n      } catch (error) {\n        alive = (error as NodeJS.ErrnoException).code === \"EPERM\";\n      }\n      if (alive)\n        throw new OutpostError(\n          \"conflict\",\n          `Workspace is already in use: ${key}`,\n          { lock: path, pid: owner.pid },\n        );\n      await rm(path, { force: true });\n    }\n  }\n  throw new OutpostError(\"conflict\", \"Unable to acquire workspace lock\");\n}\n\nexport interface WorkspaceLease extends WorkspaceRecord {\n  integrate(): Promise<void>;\n  dispose(preserve?: boolean): Promise<Disposal>;\n}\n\nexport async function acquireWorkspace(options: {\n  repository?: string;\n  branch?: BranchPolicy;\n  copies?: readonly string[];\n  limits?: StageLimits;\n  label?: string;\n}): Promise<WorkspaceLease> {\n  const requested = await directory(options.repository);\n  const root = (\n    await git(\n      requested,\n      [\"rev-parse\", \"--show-toplevel\"],\n      options.limits?.gitMs,\n    )\n  ).trim();\n  const repository = await directory(root);\n  const exclude = (\n    await git(repository, [\n      \"rev-parse\",\n      \"--path-format=absolute\",\n      \"--git-path\",\n      \"info/exclude\",\n    ])\n  ).trim();\n  const exclusions = await readFile(exclude, \"utf8\").catch(() => \"\");\n  const patterns = [\n    \"/.outpost/workspaces/\",\n    \"/.outpost/locks/\",\n    \"/.outpost/recovery/\",\n    \"/.outpost/logs/\",\n  ];\n  const missing = patterns.filter(\n    (pattern) => !exclusions.split(/\\r?\\n/).includes(pattern),\n  );\n  if (missing.length) {\n    await mkdir(dirname(exclude), { recursive: true });\n    await appendFile(exclude, `\\n${missing.join(\"\\n\")}\\n`);\n  }\n  const policy = options.branch ?? { mode: \"current\" };\n  const baseBranch = (\n    await git(repository, [\"symbolic-ref\", \"--quiet\", \"--short\", \"HEAD\"]).catch(\n      () => \"\",\n    )\n  ).trim();\n  if (policy.mode === \"integrate\" && !baseBranch)\n    throw new OutpostError(\n      \"workspace\",\n      \"Automatic integration requires an attached host branch\",\n    );\n  if (policy.mode === \"current\" && options.copies?.length)\n    throw new OutpostError(\n      \"configuration\",\n      \"Copied inputs require a separate workspace\",\n    );\n  const branch =\n    policy.mode === \"current\"\n      ? baseBranch || \"HEAD\"\n      : policy.mode === \"named\"\n        ? policy.name\n        : `outpost/${\n            options.label\n              ? options.label\n                  .toLowerCase()\n                  .replace(/[^a-z0-9]+/g, \"-\")\n                  .slice(0, 48) + \"-\"\n              : \"job-\"\n          }${randomUUID()}`;\n  if (policy.mode !== \"current\")\n    await git(repository, [\"check-ref-format\", \"--branch\", branch]);\n  const unlock = await lock(\n    repository,\n    policy.mode === \"current\" ? repository : branch,\n  );\n  let workdir = repository;\n  let created = false;\n  let disposal: Promise<Disposal> | undefined;\n  try {\n    if (policy.mode !== \"current\") {\n      const hash = createHash(\"sha256\")\n        .update(branch)\n        .digest(\"hex\")\n        .slice(0, 12);\n      const label = options.label\n        ?.toLowerCase()\n        .replace(/[^a-z0-9]+/g, \"-\")\n        .slice(0, 48);\n      const managed = join(repository, \".outpost\", \"workspaces\");\n      const expected = join(managed, `${label ? label + \"-\" : \"\"}${hash}`);\n      await git(repository, [\"worktree\", \"prune\", \"--expire\", \"now\"]);\n      const list = await git(repository, [\n        \"worktree\",\n        \"list\",\n        \"--porcelain\",\n        \"-z\",\n      ]);\n      const entries = list.split(\"\\0\\0\").map((item) => item.split(\"\\0\"));\n      const existing = entries.find(\n        (fields) =>\n          fields.includes(`branch refs/heads/${branch}`) ||\n          (fields.includes(\"detached\") &&\n            fields.some(\n              (field) =>\n                field.startsWith(\"worktree \") &&\n                inside(managed, field.slice(9)) &&\n                (basename(field.slice(9)) === hash ||\n                  basename(field.slice(9)).endsWith(\"-\" + hash)),\n            )),\n      );\n      if (existing) {\n        workdir = existing\n          .find((field) => field.startsWith(\"worktree \"))!\n          .slice(9);\n        if (!inside(managed, workdir) || resolve(workdir) === resolve(managed))\n          throw new OutpostError(\n            \"conflict\",\n            `Branch ${branch} is checked out elsewhere`,\n            { path: workdir },\n          );\n        workdir = await directory(workdir);\n        const attached = (\n          await git(workdir, [\n            \"symbolic-ref\",\n            \"--quiet\",\n            \"--short\",\n            \"HEAD\",\n          ]).catch(() => \"\")\n        ).trim();\n        const dirty = (await git(workdir, [\"status\", \"--porcelain\"])).trim();\n        if (attached === branch && !dirty) {\n          const remote = (await git(repository, [\"remote\"]))\n            .split(/\\s+/)\n            .includes(\"origin\");\n          if (remote) {\n            const fetched = await git(\n              repository,\n              [\n                \"fetch\",\n                \"origin\",\n                `refs/heads/${branch}:refs/remotes/origin/${branch}`,\n              ],\n              options.limits?.gitMs,\n            ).then(\n              () => true,\n              () => false,\n            );\n            if (fetched) {\n              const head = (await git(workdir, [\"rev-parse\", \"HEAD\"])).trim();\n              const target = `refs/remotes/origin/${branch}`;\n              const forward = await git(repository, [\n                \"merge-base\",\n                \"--is-ancestor\",\n                head,\n                target,\n              ]).then(\n                () => true,\n                () => false,\n              );\n              if (forward)\n                await git(\n                  workdir,\n                  [\"merge\", \"--ff-only\", target],\n                  options.limits?.gitMs,\n                );\n            }\n          }\n        }\n      } else {\n        if (\n          await stat(expected).catch((error) => {\n            if ((error as NodeJS.ErrnoException).code === \"ENOENT\")\n              return undefined;\n            throw error;\n          })\n        ) {\n          const managed = join(repository, \".outpost\", \"workspaces\");\n          if (\n            !inside(managed, expected) ||\n            resolve(expected) === resolve(managed)\n          )\n            throw new OutpostError(\n              \"workspace\",\n              \"Refusing to relocate an unmanaged directory\",\n            );\n          const recovery = join(\n            repository,\n            \".outpost\",\n            \"recovery\",\n            `orphan-${hash}-${randomUUID()}`,\n          );\n          await mkdir(dirname(recovery), { recursive: true });\n          await rename(expected, recovery);\n        }\n        await mkdir(join(repository, \".outpost\", \"workspaces\"), {\n          recursive: true,\n        });\n        const branchExists = await executeProcess({\n          executable: \"git\",\n          arguments: [\n            \"show-ref\",\n            \"--verify\",\n            \"--quiet\",\n            `refs/heads/${branch}`,\n          ],\n          directory: repository,\n        });\n        const from = policy.from ?? \"HEAD\";\n        const oid = (\n          await git(repository, [\n            \"rev-parse\",\n            \"--verify\",\n            \"--end-of-options\",\n            `${from}^{commit}`,\n          ])\n        ).trim();\n        await git(\n          repository,\n          [\n            \"-c\",\n            \"branch.autoSetupMerge=false\",\n            \"worktree\",\n            \"add\",\n            ...(branchExists.status === 0 ? [] : [\"-b\", branch]),\n            expected,\n            branchExists.status === 0 ? branch : oid,\n          ],\n          options.limits?.gitMs,\n        );\n        workdir = expected;\n        created = true;\n      }\n    }\n    await copySelected(\n      repository,\n      workdir,\n      options.copies ?? [],\n      options.limits?.copyMs,\n    );\n    const baseline = (await git(workdir, [\"rev-parse\", \"HEAD\"])).trim();\n    const gitDir = (\n      await git(workdir, [\"rev-parse\", \"--absolute-git-dir\"])\n    ).trim();\n    const common = (\n      await git(workdir, [\n        \"rev-parse\",\n        \"--path-format=absolute\",\n        \"--git-common-dir\",\n      ])\n    ).trim();\n    return {\n      repository,\n      directory: workdir,\n      branch,\n      baseBranch,\n      baseline,\n      policy,\n      gitDirectories: [...new Set([gitDir, common])],\n      async integrate() {\n        if (policy.mode !== \"integrate\") return;\n        const current = (\n          await git(repository, [\"symbolic-ref\", \"--short\", \"HEAD\"])\n        ).trim();\n        if (current !== baseBranch)\n          throw new OutpostError(\n            \"conflict\",\n            \"Host branch changed during the job\",\n            { expected: baseBranch, current, directory: workdir },\n          );\n        const releaseMerge = await lock(repository, `merge:${baseBranch}`);\n        try {\n          await git(\n            repository,\n            [\"merge\", \"--no-edit\", branch],\n            options.limits?.mergeMs,\n          );\n        } catch (cause) {\n          throw new OutpostError(\n            \"conflict\",\n            \"Automatic integration failed; workspace retained\",\n            { directory: workdir, branch },\n            cause,\n          );\n        } finally {\n          await releaseMerge();\n        }\n      },\n      dispose(preserve = false) {\n        if (disposal) return disposal;\n        disposal = (async () => {\n          try {\n            if (policy.mode === \"current\") return {};\n            if (preserve) return { retainedDirectory: workdir };\n            const attached = await git(workdir, [\n              \"symbolic-ref\",\n              \"--quiet\",\n              \"HEAD\",\n            ]).catch(() => \"\");\n            if (!attached.trim()) return { retainedDirectory: workdir };\n            const dirty = await git(workdir, [\n              \"status\",\n              \"--porcelain\",\n              \"--untracked-files=normal\",\n            ]);\n            if (dirty.trim()) return { retainedDirectory: workdir };\n            if (!inside(join(repository, \".outpost\", \"workspaces\"), workdir))\n              throw new OutpostError(\n                \"workspace\",\n                \"Refusing to remove an unmanaged workspace\",\n              );\n            await git(repository, [\"worktree\", \"remove\", workdir]);\n            if (policy.mode === \"integrate\")\n              await git(repository, [\"branch\", \"-d\", branch]).catch(\n                () => undefined,\n              );\n            return {};\n          } finally {\n            await unlock();\n          }\n        })();\n        return disposal;\n      },\n    };\n  } catch (error) {\n    if (created) {\n      const clean = await git(workdir, [\"status\", \"--porcelain\"]).then(\n        (output) => !output.trim(),\n        () => false,\n      );\n      if (clean && inside(join(repository, \".outpost\", \"workspaces\"), workdir))\n        await git(repository, [\"worktree\", \"remove\", workdir]).catch(\n          () => undefined,\n        );\n      else recordRecovery(error, { branch, directory: workdir });\n    }\n    await unlock();\n    throw error;\n  }\n}\n"]}

package/dist/infrastructure/journal.d.ts

@@ -0,0 +1,10 @@
+import type { AgentEvent } from "../domain/ports.ts";
+export type Logging = false | "stdout" | {
+    readonly file?: string;
+    readonly verbose?: boolean;
+};
+export declare function journal(repository: string, logging?: Logging, label?: string): Promise<{
+    file?: string;
+    record(event: AgentEvent): void;
+    close(): Promise<void>;
+}>;

package/dist/infrastructure/journal.js

@@ -0,0 +1,53 @@
+import { mkdir, open } from "node:fs/promises";
+import { dirname, join, resolve } from "node:path";
+import { randomUUID } from "node:crypto";
+import { reporter } from "./reporter.js";
+export async function journal(repository, logging = {}, label) {
+    const file = logging && logging !== "stdout"
+        ? resolve(repository, logging.file ??
+            join(".outpost", "logs", `${label ? label.replace(/[^A-Za-z0-9_-]/g, "-").slice(0, 64) + "-" : ""}${new Date().toISOString().replaceAll(":", "-")}-${randomUUID()}.jsonl`))
+        : undefined;
+    let handle, pending = Promise.resolve();
+    let failure;
+    const display = reporter({ ...(label ? { label } : {}) });
+    if (file) {
+        await mkdir(dirname(file), { recursive: true });
+        handle = await open(file, "a", 0o600);
+        await handle.write(JSON.stringify({
+            kind: "dispatch-start",
+            at: new Date().toISOString(),
+            label,
+        }) + "\n");
+    }
+    return {
+        ...(file ? { file } : {}),
+        record(event) {
+            if (!logging)
+                return;
+            if (event.kind === "raw" && logging !== "stdout" && !logging.verbose)
+                return;
+            const line = JSON.stringify({
+                at: new Date().toISOString(),
+                ...(label ? { label } : {}),
+                ...event,
+            }) + "\n";
+            if (logging === "stdout")
+                display(event);
+            else
+                pending = pending
+                    .then(async () => {
+                    await handle?.write(line);
+                })
+                    .catch((error) => {
+                    failure = error;
+                });
+        },
+        async close() {
+            await pending;
+            await handle?.close();
+            if (failure)
+                throw failure;
+        },
+    };
+}
+//# sourceMappingURL=journal.js.map

package/dist/infrastructure/journal.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"journal.js","sourceRoot":"","sources":["../../src/infrastructure/journal.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,IAAI,EAAmB,MAAM,kBAAkB,CAAC;AAChE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACnD,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAKzC,MAAM,CAAC,KAAK,UAAU,OAAO,CAC3B,UAAkB,EAClB,UAAmB,EAAE,EACrB,KAAc;IAMd,MAAM,IAAI,GACR,OAAO,IAAI,OAAO,KAAK,QAAQ;QAC7B,CAAC,CAAC,OAAO,CACL,UAAU,EACV,OAAO,CAAC,IAAI;YACV,IAAI,CACF,UAAU,EACV,MAAM,EACN,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,iBAAiB,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,UAAU,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,UAAU,EAAE,QAAQ,CACjJ,CACJ;QACH,CAAC,CAAC,SAAS,CAAC;IAChB,IAAI,MAA8B,EAChC,OAAO,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC;IAC9B,IAAI,OAAgB,CAAC;IACrB,MAAM,OAAO,GAAG,QAAQ,CAAC,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;IAC1D,IAAI,IAAI,EAAE,CAAC;QACT,MAAM,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAChD,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC;QACtC,MAAM,MAAM,CAAC,KAAK,CAChB,IAAI,CAAC,SAAS,CAAC;YACb,IAAI,EAAE,gBAAgB;YACtB,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YAC5B,KAAK;SACN,CAAC,GAAG,IAAI,CACV,CAAC;IACJ,CAAC;IACD,OAAO;QACL,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACzB,MAAM,CAAC,KAAK;YACV,IAAI,CAAC,OAAO;gBAAE,OAAO;YACrB,IAAI,KAAK,CAAC,IAAI,KAAK,KAAK,IAAI,OAAO,KAAK,QAAQ,IAAI,CAAC,OAAO,CAAC,OAAO;gBAClE,OAAO;YACT,MAAM,IAAI,GACR,IAAI,CAAC,SAAS,CAAC;gBACb,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;gBAC5B,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC3B,GAAG,KAAK;aACT,CAAC,GAAG,IAAI,CAAC;YACZ,IAAI,OAAO,KAAK,QAAQ;gBAAE,OAAO,CAAC,KAAK,CAAC,CAAC;;gBAEvC,OAAO,GAAG,OAAO;qBACd,IAAI,CAAC,KAAK,IAAI,EAAE;oBACf,MAAM,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;gBAC5B,CAAC,CAAC;qBACD,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;oBACf,OAAO,GAAG,KAAK,CAAC;gBAClB,CAAC,CAAC,CAAC;QACT,CAAC;QACD,KAAK,CAAC,KAAK;YACT,MAAM,OAAO,CAAC;YACd,MAAM,MAAM,EAAE,KAAK,EAAE,CAAC;YACtB,IAAI,OAAO;gBAAE,MAAM,OAAO,CAAC;QAC7B,CAAC;KACF,CAAC;AACJ,CAAC","sourcesContent":["import { mkdir, open, type FileHandle } from \"node:fs/promises\";\nimport { dirname, join, resolve } from \"node:path\";\nimport { randomUUID } from \"node:crypto\";\nimport type { AgentEvent } from \"../domain/ports.ts\";\nimport { reporter } from \"./reporter.ts\";\n\nexport type Logging =\n  false | \"stdout\" | { readonly file?: string; readonly verbose?: boolean };\n\nexport async function journal(\n  repository: string,\n  logging: Logging = {},\n  label?: string,\n): Promise<{\n  file?: string;\n  record(event: AgentEvent): void;\n  close(): Promise<void>;\n}> {\n  const file =\n    logging && logging !== \"stdout\"\n      ? resolve(\n          repository,\n          logging.file ??\n            join(\n              \".outpost\",\n              \"logs\",\n              `${label ? label.replace(/[^A-Za-z0-9_-]/g, \"-\").slice(0, 64) + \"-\" : \"\"}${new Date().toISOString().replaceAll(\":\", \"-\")}-${randomUUID()}.jsonl`,\n            ),\n        )\n      : undefined;\n  let handle: FileHandle | undefined,\n    pending = Promise.resolve();\n  let failure: unknown;\n  const display = reporter({ ...(label ? { label } : {}) });\n  if (file) {\n    await mkdir(dirname(file), { recursive: true });\n    handle = await open(file, \"a\", 0o600);\n    await handle.write(\n      JSON.stringify({\n        kind: \"dispatch-start\",\n        at: new Date().toISOString(),\n        label,\n      }) + \"\\n\",\n    );\n  }\n  return {\n    ...(file ? { file } : {}),\n    record(event) {\n      if (!logging) return;\n      if (event.kind === \"raw\" && logging !== \"stdout\" && !logging.verbose)\n        return;\n      const line =\n        JSON.stringify({\n          at: new Date().toISOString(),\n          ...(label ? { label } : {}),\n          ...event,\n        }) + \"\\n\";\n      if (logging === \"stdout\") display(event);\n      else\n        pending = pending\n          .then(async () => {\n            await handle?.write(line);\n          })\n          .catch((error) => {\n            failure = error;\n          });\n    },\n    async close() {\n      await pending;\n      await handle?.close();\n      if (failure) throw failure;\n    },\n  };\n}\n"]}

package/dist/infrastructure/process.d.ts

@@ -0,0 +1,6 @@
+import type { Command, CommandResult } from "../domain/ports.ts";
+export type Executor = (command: Command) => Promise<CommandResult>;
+export declare const executeProcess: Executor;
+export declare function requireSuccess(command: Command, executor?: Executor): Promise<CommandResult>;
+export declare function shell(script: string): Pick<Command, "executable" | "arguments">;
+export declare function quote(value: string): string;

package/dist/infrastructure/process.js

@@ -0,0 +1,133 @@
+import { spawn } from "node:child_process";
+import { StringDecoder } from "node:string_decoder";
+import { OutpostError, positive } from "../domain/errors.js";
+import { restoreTerminal } from "./terminal.js";
+export const executeProcess = (command) => {
+    command.signal?.throwIfAborted();
+    const deadline = command.deadlineMs ?? 600_000;
+    positive(deadline, "deadlineMs");
+    const limit = command.retain ?? 65_536;
+    positive(limit, "retain");
+    return new Promise((resolve, reject) => {
+        const interactive = command.interactive === true;
+        const child = spawn(command.executable, [...(command.arguments ?? [])], {
+            cwd: command.directory,
+            env: { ...process.env, ...command.variables },
+            shell: false,
+            windowsHide: true,
+            detached: !interactive && process.platform !== "win32",
+            stdio: interactive && !command.terminal ? "inherit" : ["pipe", "pipe", "pipe"],
+        });
+        const decoder = {
+            stdout: new StringDecoder("utf8"),
+            stderr: new StringDecoder("utf8"),
+        };
+        const output = { stdout: "", stderr: "" };
+        let failed = false, reason, escalation;
+        function kill(hard) {
+            if (!child.pid)
+                return;
+            if (process.platform === "win32") {
+                const killer = spawn("taskkill", ["/PID", String(child.pid), "/T", "/F"], { windowsHide: true, stdio: "ignore" });
+                killer.on("error", () => {
+                    child.kill();
+                });
+                killer.on("exit", (status) => {
+                    if (status !== 0)
+                        child.kill();
+                });
+                if (hard)
+                    child.kill();
+            }
+            else {
+                try {
+                    process.kill(interactive ? child.pid : -child.pid, hard ? "SIGKILL" : "SIGTERM");
+                }
+                catch {
+                    child.kill(hard ? "SIGKILL" : "SIGTERM");
+                }
+            }
+        }
+        function interrupt(error) {
+            if (failed)
+                return;
+            failed = true;
+            reason = error;
+            kill(false);
+            escalation = setTimeout(() => kill(true), 500);
+        }
+        const abort = () => interrupt(command.signal?.reason ??
+            new OutpostError("aborted", "Command cancelled"));
+        const timer = setTimeout(() => interrupt(new OutpostError("timeout", `Command exceeded ${deadline} ms`, {
+            deadlineMs: deadline,
+        })), deadline);
+        const consume = (channel, text) => {
+            output[channel] = (output[channel] + text).slice(-limit);
+            try {
+                command.observe?.(channel, text);
+            }
+            catch (error) {
+                interrupt(error);
+            }
+        };
+        child.stdout?.on("data", (data) => consume("stdout", decoder.stdout.write(data)));
+        child.stderr?.on("data", (data) => consume("stderr", decoder.stderr.write(data)));
+        child.stdin?.on("error", (error) => {
+            if (error.code !== "EPIPE")
+                interrupt(error);
+        });
+        child.on("error", (error) => {
+            failed = true;
+            reason = error;
+        });
+        command.signal?.addEventListener("abort", abort, { once: true });
+        if (command.signal?.aborted)
+            abort();
+        child.on("close", (status) => {
+            if (interactive)
+                restoreTerminal();
+            if (child.stdin)
+                command.terminal?.input?.unpipe(child.stdin);
+            clearTimeout(timer);
+            clearTimeout(escalation);
+            command.signal?.removeEventListener("abort", abort);
+            for (const channel of ["stdout", "stderr"]) {
+                const tail = decoder[channel].end();
+                if (tail)
+                    consume(channel, tail);
+            }
+            if (failed)
+                reject(reason);
+            else
+                resolve({ status: status ?? 1, ...output });
+        });
+        if (child.stdin && command.terminal?.input)
+            command.terminal.input.pipe(child.stdin);
+        else
+            child.stdin?.end(command.stdin);
+        if (child.stdout && command.terminal?.output)
+            child.stdout.pipe(command.terminal.output, { end: false });
+        if (child.stderr && command.terminal?.error)
+            child.stderr.pipe(command.terminal.error, { end: false });
+    });
+};
+export async function requireSuccess(command, executor = executeProcess) {
+    const result = await executor(command);
+    if (result.status !== 0)
+        throw new OutpostError("process", `${command.executable} exited with status ${result.status}`, { ...result });
+    return result;
+}
+export function shell(script) {
+    return process.platform === "win32"
+        ? {
+            executable: "powershell.exe",
+            arguments: ["-NoProfile", "-NonInteractive", "-Command", script],
+        }
+        : { executable: "sh", arguments: ["-c", script] };
+}
+export function quote(value) {
+    if (value.includes("\0"))
+        throw new OutpostError("configuration", "A command argument cannot contain NUL");
+    return `'${value.replaceAll("'", `'"'"'`)}'`;
+}
+//# sourceMappingURL=process.js.map

package/dist/infrastructure/process.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"process.js","sourceRoot":"","sources":["../../src/infrastructure/process.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAC3C,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AAE7D,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAIhD,MAAM,CAAC,MAAM,cAAc,GAAa,CAAC,OAAO,EAAE,EAAE;IAClD,OAAO,CAAC,MAAM,EAAE,cAAc,EAAE,CAAC;IACjC,MAAM,QAAQ,GAAG,OAAO,CAAC,UAAU,IAAI,OAAO,CAAC;IAC/C,QAAQ,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC;IACjC,MAAM,KAAK,GAAG,OAAO,CAAC,MAAM,IAAI,MAAM,CAAC;IACvC,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;IAC1B,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,WAAW,GAAG,OAAO,CAAC,WAAW,KAAK,IAAI,CAAC;QACjD,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,UAAU,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,EAAE;YACtE,GAAG,EAAE,OAAO,CAAC,SAAS;YACtB,GAAG,EAAE,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC,SAAS,EAAE;YAC7C,KAAK,EAAE,KAAK;YACZ,WAAW,EAAE,IAAI;YACjB,QAAQ,EAAE,CAAC,WAAW,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO;YACtD,KAAK,EACH,WAAW,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC;SAC1E,CAAC,CAAC;QACH,MAAM,OAAO,GAAG;YACd,MAAM,EAAE,IAAI,aAAa,CAAC,MAAM,CAAC;YACjC,MAAM,EAAE,IAAI,aAAa,CAAC,MAAM,CAAC;SAClC,CAAC;QACF,MAAM,MAAM,GAAG,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;QAC1C,IAAI,MAAM,GAAG,KAAK,EAChB,MAAe,EACf,UAAqD,CAAC;QACxD,SAAS,IAAI,CAAC,IAAa;YACzB,IAAI,CAAC,KAAK,CAAC,GAAG;gBAAE,OAAO;YACvB,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;gBACjC,MAAM,MAAM,GAAG,KAAK,CAClB,UAAU,EACV,CAAC,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,EACvC,EAAE,WAAW,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,CACvC,CAAC;gBACF,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;oBACtB,KAAK,CAAC,IAAI,EAAE,CAAC;gBACf,CAAC,CAAC,CAAC;gBACH,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,MAAM,EAAE,EAAE;oBAC3B,IAAI,MAAM,KAAK,CAAC;wBAAE,KAAK,CAAC,IAAI,EAAE,CAAC;gBACjC,CAAC,CAAC,CAAC;gBACH,IAAI,IAAI;oBAAE,KAAK,CAAC,IAAI,EAAE,CAAC;YACzB,CAAC;iBAAM,CAAC;gBACN,IAAI,CAAC;oBACH,OAAO,CAAC,IAAI,CACV,WAAW,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,EACpC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAC7B,CAAC;gBACJ,CAAC;gBAAC,MAAM,CAAC;oBACP,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;gBAC3C,CAAC;YACH,CAAC;QACH,CAAC;QACD,SAAS,SAAS,CAAC,KAAc;YAC/B,IAAI,MAAM;gBAAE,OAAO;YACnB,MAAM,GAAG,IAAI,CAAC;YACd,MAAM,GAAG,KAAK,CAAC;YACf,IAAI,CAAC,KAAK,CAAC,CAAC;YACZ,UAAU,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,GAAG,CAAC,CAAC;QACjD,CAAC;QACD,MAAM,KAAK,GAAG,GAAG,EAAE,CACjB,SAAS,CACP,OAAO,CAAC,MAAM,EAAE,MAAM;YACpB,IAAI,YAAY,CAAC,SAAS,EAAE,mBAAmB,CAAC,CACnD,CAAC;QACJ,MAAM,KAAK,GAAG,UAAU,CACtB,GAAG,EAAE,CACH,SAAS,CACP,IAAI,YAAY,CAAC,SAAS,EAAE,oBAAoB,QAAQ,KAAK,EAAE;YAC7D,UAAU,EAAE,QAAQ;SACrB,CAAC,CACH,EACH,QAAQ,CACT,CAAC;QACF,MAAM,OAAO,GAAG,CAAC,OAAgB,EAAE,IAAY,EAAE,EAAE;YACjD,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC;YACzD,IAAI,CAAC;gBACH,OAAO,CAAC,OAAO,EAAE,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;YACnC,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,SAAS,CAAC,KAAK,CAAC,CAAC;YACnB,CAAC;QACH,CAAC,CAAC;QACF,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,IAAY,EAAE,EAAE,CACxC,OAAO,CAAC,QAAQ,EAAE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAC9C,CAAC;QACF,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,IAAY,EAAE,EAAE,CACxC,OAAO,CAAC,QAAQ,EAAE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAC9C,CAAC;QACF,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE;YACjC,IAAK,KAA+B,CAAC,IAAI,KAAK,OAAO;gBAAE,SAAS,CAAC,KAAK,CAAC,CAAC;QAC1E,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE;YAC1B,MAAM,GAAG,IAAI,CAAC;YACd,MAAM,GAAG,KAAK,CAAC;QACjB,CAAC,CAAC,CAAC;QACH,OAAO,CAAC,MAAM,EAAE,gBAAgB,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QACjE,IAAI,OAAO,CAAC,MAAM,EAAE,OAAO;YAAE,KAAK,EAAE,CAAC;QACrC,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,MAAM,EAAE,EAAE;YAC3B,IAAI,WAAW;gBAAE,eAAe,EAAE,CAAC;YACnC,IAAI,KAAK,CAAC,KAAK;gBAAE,OAAO,CAAC,QAAQ,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YAC9D,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,YAAY,CAAC,UAAU,CAAC,CAAC;YACzB,OAAO,CAAC,MAAM,EAAE,mBAAmB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;YACpD,KAAK,MAAM,OAAO,IAAI,CAAC,QAAQ,EAAE,QAAQ,CAAU,EAAE,CAAC;gBACpD,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,CAAC;gBACpC,IAAI,IAAI;oBAAE,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;YACnC,CAAC;YACD,IAAI,MAAM;gBAAE,MAAM,CAAC,MAAM,CAAC,CAAC;;gBACtB,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,IAAI,CAAC,EAAE,GAAG,MAAM,EAAE,CAAC,CAAC;QACnD,CAAC,CAAC,CAAC;QACH,IAAI,KAAK,CAAC,KAAK,IAAI,OAAO,CAAC,QAAQ,EAAE,KAAK;YACxC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;;YACtC,KAAK,CAAC,KAAK,EAAE,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QACrC,IAAI,KAAK,CAAC,MAAM,IAAI,OAAO,CAAC,QAAQ,EAAE,MAAM;YAC1C,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,CAAC;QAC7D,IAAI,KAAK,CAAC,MAAM,IAAI,OAAO,CAAC,QAAQ,EAAE,KAAK;YACzC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,CAAC;IAC9D,CAAC,CAAC,CAAC;AACL,CAAC,CAAC;AAEF,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,OAAgB,EAChB,QAAQ,GAAG,cAAc;IAEzB,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,CAAC;IACvC,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QACrB,MAAM,IAAI,YAAY,CACpB,SAAS,EACT,GAAG,OAAO,CAAC,UAAU,uBAAuB,MAAM,CAAC,MAAM,EAAE,EAC3D,EAAE,GAAG,MAAM,EAAE,CACd,CAAC;IACJ,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,KAAK,CACnB,MAAc;IAEd,OAAO,OAAO,CAAC,QAAQ,KAAK,OAAO;QACjC,CAAC,CAAC;YACE,UAAU,EAAE,gBAAgB;YAC5B,SAAS,EAAE,CAAC,YAAY,EAAE,iBAAiB,EAAE,UAAU,EAAE,MAAM,CAAC;SACjE;QACH,CAAC,CAAC,EAAE,UAAU,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC;AACtD,CAAC;AAED,MAAM,UAAU,KAAK,CAAC,KAAa;IACjC,IAAI,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC;QACtB,MAAM,IAAI,YAAY,CACpB,eAAe,EACf,uCAAuC,CACxC,CAAC;IACJ,OAAO,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,EAAE,OAAO,CAAC,GAAG,CAAC;AAC/C,CAAC","sourcesContent":["import { spawn } from \"node:child_process\";\nimport { StringDecoder } from \"node:string_decoder\";\nimport { OutpostError, positive } from \"../domain/errors.ts\";\nimport type { Channel, Command, CommandResult } from \"../domain/ports.ts\";\nimport { restoreTerminal } from \"./terminal.ts\";\n\nexport type Executor = (command: Command) => Promise<CommandResult>;\n\nexport const executeProcess: Executor = (command) => {\n  command.signal?.throwIfAborted();\n  const deadline = command.deadlineMs ?? 600_000;\n  positive(deadline, \"deadlineMs\");\n  const limit = command.retain ?? 65_536;\n  positive(limit, \"retain\");\n  return new Promise((resolve, reject) => {\n    const interactive = command.interactive === true;\n    const child = spawn(command.executable, [...(command.arguments ?? [])], {\n      cwd: command.directory,\n      env: { ...process.env, ...command.variables },\n      shell: false,\n      windowsHide: true,\n      detached: !interactive && process.platform !== \"win32\",\n      stdio:\n        interactive && !command.terminal ? \"inherit\" : [\"pipe\", \"pipe\", \"pipe\"],\n    });\n    const decoder = {\n      stdout: new StringDecoder(\"utf8\"),\n      stderr: new StringDecoder(\"utf8\"),\n    };\n    const output = { stdout: \"\", stderr: \"\" };\n    let failed = false,\n      reason: unknown,\n      escalation: ReturnType<typeof setTimeout> | undefined;\n    function kill(hard: boolean): void {\n      if (!child.pid) return;\n      if (process.platform === \"win32\") {\n        const killer = spawn(\n          \"taskkill\",\n          [\"/PID\", String(child.pid), \"/T\", \"/F\"],\n          { windowsHide: true, stdio: \"ignore\" },\n        );\n        killer.on(\"error\", () => {\n          child.kill();\n        });\n        killer.on(\"exit\", (status) => {\n          if (status !== 0) child.kill();\n        });\n        if (hard) child.kill();\n      } else {\n        try {\n          process.kill(\n            interactive ? child.pid : -child.pid,\n            hard ? \"SIGKILL\" : \"SIGTERM\",\n          );\n        } catch {\n          child.kill(hard ? \"SIGKILL\" : \"SIGTERM\");\n        }\n      }\n    }\n    function interrupt(error: unknown): void {\n      if (failed) return;\n      failed = true;\n      reason = error;\n      kill(false);\n      escalation = setTimeout(() => kill(true), 500);\n    }\n    const abort = () =>\n      interrupt(\n        command.signal?.reason ??\n          new OutpostError(\"aborted\", \"Command cancelled\"),\n      );\n    const timer = setTimeout(\n      () =>\n        interrupt(\n          new OutpostError(\"timeout\", `Command exceeded ${deadline} ms`, {\n            deadlineMs: deadline,\n          }),\n        ),\n      deadline,\n    );\n    const consume = (channel: Channel, text: string) => {\n      output[channel] = (output[channel] + text).slice(-limit);\n      try {\n        command.observe?.(channel, text);\n      } catch (error) {\n        interrupt(error);\n      }\n    };\n    child.stdout?.on(\"data\", (data: Buffer) =>\n      consume(\"stdout\", decoder.stdout.write(data)),\n    );\n    child.stderr?.on(\"data\", (data: Buffer) =>\n      consume(\"stderr\", decoder.stderr.write(data)),\n    );\n    child.stdin?.on(\"error\", (error) => {\n      if ((error as NodeJS.ErrnoException).code !== \"EPIPE\") interrupt(error);\n    });\n    child.on(\"error\", (error) => {\n      failed = true;\n      reason = error;\n    });\n    command.signal?.addEventListener(\"abort\", abort, { once: true });\n    if (command.signal?.aborted) abort();\n    child.on(\"close\", (status) => {\n      if (interactive) restoreTerminal();\n      if (child.stdin) command.terminal?.input?.unpipe(child.stdin);\n      clearTimeout(timer);\n      clearTimeout(escalation);\n      command.signal?.removeEventListener(\"abort\", abort);\n      for (const channel of [\"stdout\", \"stderr\"] as const) {\n        const tail = decoder[channel].end();\n        if (tail) consume(channel, tail);\n      }\n      if (failed) reject(reason);\n      else resolve({ status: status ?? 1, ...output });\n    });\n    if (child.stdin && command.terminal?.input)\n      command.terminal.input.pipe(child.stdin);\n    else child.stdin?.end(command.stdin);\n    if (child.stdout && command.terminal?.output)\n      child.stdout.pipe(command.terminal.output, { end: false });\n    if (child.stderr && command.terminal?.error)\n      child.stderr.pipe(command.terminal.error, { end: false });\n  });\n};\n\nexport async function requireSuccess(\n  command: Command,\n  executor = executeProcess,\n): Promise<CommandResult> {\n  const result = await executor(command);\n  if (result.status !== 0)\n    throw new OutpostError(\n      \"process\",\n      `${command.executable} exited with status ${result.status}`,\n      { ...result },\n    );\n  return result;\n}\n\nexport function shell(\n  script: string,\n): Pick<Command, \"executable\" | \"arguments\"> {\n  return process.platform === \"win32\"\n    ? {\n        executable: \"powershell.exe\",\n        arguments: [\"-NoProfile\", \"-NonInteractive\", \"-Command\", script],\n      }\n    : { executable: \"sh\", arguments: [\"-c\", script] };\n}\n\nexport function quote(value: string): string {\n  if (value.includes(\"\\0\"))\n    throw new OutpostError(\n      \"configuration\",\n      \"A command argument cannot contain NUL\",\n    );\n  return `'${value.replaceAll(\"'\", `'\"'\"'`)}'`;\n}\n"]}

package/dist/infrastructure/reporter.d.ts

@@ -0,0 +1,10 @@
+import type { AgentEvent } from "../domain/ports.ts";
+export interface ReporterOptions {
+    readonly label?: string;
+    readonly verbose?: boolean;
+    readonly quiet?: boolean;
+    readonly write?: (text: string) => void;
+}
+export declare function reporter(options?: ReporterOptions): (event: AgentEvent & {
+    readonly pass?: number;
+}) => void;