@elie-laloum/outpost 11.1.2 → 11.2.0

package/dist/infrastructure/transport-envelope.d.ts

@@ -4,4 +4,5 @@ export declare function encodeObject(key: string, bytes: Uint8Array): {
     data: Buffer<ArrayBuffer>;
 };
 export declare function decodeObject(data: Uint8Array, key: string, maxBytes: number): TransportObject;
+export declare function decodeObjectEntry(data: Uint8Array, key: string, fileSize: number, maxBytes: number): TransportEntry;
 export declare function readLimit(maxBytes?: number): number;

package/dist/infrastructure/transport-envelope.js

@@ -15,8 +15,27 @@ export function encodeObject(key, bytes) {
 }
 export function decodeObject(data, key, maxBytes) {
     const buffer = Buffer.from(data);
-    const value = JSON.parse(buffer.subarray(0, transportDefaults.headerBytes).toString());
     const bytes = buffer.subarray(transportDefaults.headerBytes);
+    return {
+        ...decodeObjectEntry(buffer, key, data.byteLength, maxBytes),
+        bytes,
+    };
+}
+export function decodeObjectEntry(data, key, fileSize, maxBytes) {
+    const size = fileSize - transportDefaults.headerBytes;
+    if (!Number.isSafeInteger(size) ||
+        size < 0 ||
+        size > maxBytes ||
+        data.byteLength < transportDefaults.headerBytes)
+        throw new Error("Invalid or oversized transport object");
+    const value = JSON.parse(Buffer.from(data.subarray(0, transportDefaults.headerBytes)).toString());
+    if (value &&
+        typeof value === "object" &&
+        "key" in value &&
+        typeof value.key === "string" &&
+        value.key !== key &&
+        value.key.toLowerCase() === key.toLowerCase())
+        throw new Error("Transport key casing conflicts with the stored key");
     if (!value ||
         typeof value !== "object" ||
         !("key" in value) ||
@@ -25,8 +44,7 @@ export function decodeObject(data, key, maxBytes) {
         typeof value.revision !== "string" ||
         !value.revision ||
         !("size" in value) ||
-        value.size !== bytes.length ||
-        bytes.length > maxBytes ||
+        value.size !== size ||
         !("modifiedAt" in value) ||
         typeof value.modifiedAt !== "string" ||
         !Number.isFinite(Date.parse(value.modifiedAt)))
@@ -34,9 +52,8 @@ export function decodeObject(data, key, maxBytes) {
     return {
         key,
         revision: value.revision,
-        size: bytes.length,
+        size,
         modifiedAt: value.modifiedAt,
-        bytes,
     };
 }
 export function readLimit(maxBytes = transportDefaults.maxBytes) {

package/dist/infrastructure/transport-envelope.js.map

@@ -1 +1 @@
-{"version":3,"file":"transport-envelope.js","sourceRoot":"","sources":["../../src/infrastructure/transport-envelope.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAKzC,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAE7D,MAAM,UAAU,YAAY,CAAC,GAAW,EAAE,KAAiB;IACzD,IAAI,KAAK,CAAC,UAAU,GAAG,iBAAiB,CAAC,QAAQ;QAC/C,MAAM,IAAI,KAAK,CACb,mEAAmE,CACpE,CAAC;IACJ,MAAM,KAAK,GAAmB;QAC5B,GAAG;QACH,QAAQ,EAAE,UAAU,EAAE;QACtB,IAAI,EAAE,KAAK,CAAC,UAAU;QACtB,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KACrC,CAAC;IACF,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,iBAAiB,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC;IAChE,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;IACpC,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,EAAE,CAAC;AACzD,CAAC;AAED,MAAM,UAAU,YAAY,CAC1B,IAAgB,EAChB,GAAW,EACX,QAAgB;IAEhB,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACjC,MAAM,KAAK,GAAY,IAAI,CAAC,KAAK,CAC/B,MAAM,CAAC,QAAQ,CAAC,CAAC,EAAE,iBAAiB,CAAC,WAAW,CAAC,CAAC,QAAQ,EAAE,CAC7D,CAAC;IACF,MAAM,KAAK,GAAG,MAAM,CAAC,QAAQ,CAAC,iBAAiB,CAAC,WAAW,CAAC,CAAC;IAC7D,IACE,CAAC,KAAK;QACN,OAAO,KAAK,KAAK,QAAQ;QACzB,CAAC,CAAC,KAAK,IAAI,KAAK,CAAC;QACjB,KAAK,CAAC,GAAG,KAAK,GAAG;QACjB,CAAC,CAAC,UAAU,IAAI,KAAK,CAAC;QACtB,OAAO,KAAK,CAAC,QAAQ,KAAK,QAAQ;QAClC,CAAC,KAAK,CAAC,QAAQ;QACf,CAAC,CAAC,MAAM,IAAI,KAAK,CAAC;QAClB,KAAK,CAAC,IAAI,KAAK,KAAK,CAAC,MAAM;QAC3B,KAAK,CAAC,MAAM,GAAG,QAAQ;QACvB,CAAC,CAAC,YAAY,IAAI,KAAK,CAAC;QACxB,OAAO,KAAK,CAAC,UAAU,KAAK,QAAQ;QACpC,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QAE9C,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;IAC3D,OAAO;QACL,GAAG;QACH,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,IAAI,EAAE,KAAK,CAAC,MAAM;QAClB,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,KAAK;KACN,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,QAAQ,GAAG,iBAAiB,CAAC,QAAQ;IAC7D,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,QAAQ,CAAC,IAAI,QAAQ,GAAG,CAAC;QACjD,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;IAClD,OAAO,QAAQ,CAAC;AAClB,CAAC","sourcesContent":["import { randomUUID } from \"node:crypto\";\nimport type {\n  TransportEntry,\n  TransportObject,\n} from \"../domain/transport.types.ts\";\nimport { transportDefaults } from \"./transport.constants.ts\";\n\nexport function encodeObject(key: string, bytes: Uint8Array) {\n  if (bytes.byteLength > transportDefaults.maxBytes)\n    throw new Error(\n      \"Transport object exceeds 64 MiB; split large payloads into chunks\",\n    );\n  const entry: TransportEntry = {\n    key,\n    revision: randomUUID(),\n    size: bytes.byteLength,\n    modifiedAt: new Date().toISOString(),\n  };\n  const header = Buffer.alloc(transportDefaults.headerBytes, \" \");\n  header.write(JSON.stringify(entry));\n  return { entry, data: Buffer.concat([header, bytes]) };\n}\n\nexport function decodeObject(\n  data: Uint8Array,\n  key: string,\n  maxBytes: number,\n): TransportObject {\n  const buffer = Buffer.from(data);\n  const value: unknown = JSON.parse(\n    buffer.subarray(0, transportDefaults.headerBytes).toString(),\n  );\n  const bytes = buffer.subarray(transportDefaults.headerBytes);\n  if (\n    !value ||\n    typeof value !== \"object\" ||\n    !(\"key\" in value) ||\n    value.key !== key ||\n    !(\"revision\" in value) ||\n    typeof value.revision !== \"string\" ||\n    !value.revision ||\n    !(\"size\" in value) ||\n    value.size !== bytes.length ||\n    bytes.length > maxBytes ||\n    !(\"modifiedAt\" in value) ||\n    typeof value.modifiedAt !== \"string\" ||\n    !Number.isFinite(Date.parse(value.modifiedAt))\n  )\n    throw new Error(\"Invalid or oversized transport object\");\n  return {\n    key,\n    revision: value.revision,\n    size: bytes.length,\n    modifiedAt: value.modifiedAt,\n    bytes,\n  };\n}\n\nexport function readLimit(maxBytes = transportDefaults.maxBytes): number {\n  if (!Number.isSafeInteger(maxBytes) || maxBytes < 0)\n    throw new Error(\"Invalid transport byte limit\");\n  return maxBytes;\n}\n"]}
+{"version":3,"file":"transport-envelope.js","sourceRoot":"","sources":["../../src/infrastructure/transport-envelope.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAKzC,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAE7D,MAAM,UAAU,YAAY,CAAC,GAAW,EAAE,KAAiB;IACzD,IAAI,KAAK,CAAC,UAAU,GAAG,iBAAiB,CAAC,QAAQ;QAC/C,MAAM,IAAI,KAAK,CACb,mEAAmE,CACpE,CAAC;IACJ,MAAM,KAAK,GAAmB;QAC5B,GAAG;QACH,QAAQ,EAAE,UAAU,EAAE;QACtB,IAAI,EAAE,KAAK,CAAC,UAAU;QACtB,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KACrC,CAAC;IACF,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,iBAAiB,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC;IAChE,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;IACpC,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,EAAE,CAAC;AACzD,CAAC;AAED,MAAM,UAAU,YAAY,CAC1B,IAAgB,EAChB,GAAW,EACX,QAAgB;IAEhB,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACjC,MAAM,KAAK,GAAG,MAAM,CAAC,QAAQ,CAAC,iBAAiB,CAAC,WAAW,CAAC,CAAC;IAC7D,OAAO;QACL,GAAG,iBAAiB,CAAC,MAAM,EAAE,GAAG,EAAE,IAAI,CAAC,UAAU,EAAE,QAAQ,CAAC;QAC5D,KAAK;KACN,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,iBAAiB,CAC/B,IAAgB,EAChB,GAAW,EACX,QAAgB,EAChB,QAAgB;IAEhB,MAAM,IAAI,GAAG,QAAQ,GAAG,iBAAiB,CAAC,WAAW,CAAC;IACtD,IACE,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC;QAC3B,IAAI,GAAG,CAAC;QACR,IAAI,GAAG,QAAQ;QACf,IAAI,CAAC,UAAU,GAAG,iBAAiB,CAAC,WAAW;QAE/C,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;IAC3D,MAAM,KAAK,GAAY,IAAI,CAAC,KAAK,CAC/B,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,EAAE,iBAAiB,CAAC,WAAW,CAAC,CAAC,CAAC,QAAQ,EAAE,CACxE,CAAC;IACF,IACE,KAAK;QACL,OAAO,KAAK,KAAK,QAAQ;QACzB,KAAK,IAAI,KAAK;QACd,OAAO,KAAK,CAAC,GAAG,KAAK,QAAQ;QAC7B,KAAK,CAAC,GAAG,KAAK,GAAG;QACjB,KAAK,CAAC,GAAG,CAAC,WAAW,EAAE,KAAK,GAAG,CAAC,WAAW,EAAE;QAE7C,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;IACxE,IACE,CAAC,KAAK;QACN,OAAO,KAAK,KAAK,QAAQ;QACzB,CAAC,CAAC,KAAK,IAAI,KAAK,CAAC;QACjB,KAAK,CAAC,GAAG,KAAK,GAAG;QACjB,CAAC,CAAC,UAAU,IAAI,KAAK,CAAC;QACtB,OAAO,KAAK,CAAC,QAAQ,KAAK,QAAQ;QAClC,CAAC,KAAK,CAAC,QAAQ;QACf,CAAC,CAAC,MAAM,IAAI,KAAK,CAAC;QAClB,KAAK,CAAC,IAAI,KAAK,IAAI;QACnB,CAAC,CAAC,YAAY,IAAI,KAAK,CAAC;QACxB,OAAO,KAAK,CAAC,UAAU,KAAK,QAAQ;QACpC,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QAE9C,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;IAC3D,OAAO;QACL,GAAG;QACH,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,IAAI;QACJ,UAAU,EAAE,KAAK,CAAC,UAAU;KAC7B,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,QAAQ,GAAG,iBAAiB,CAAC,QAAQ;IAC7D,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,QAAQ,CAAC,IAAI,QAAQ,GAAG,CAAC;QACjD,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;IAClD,OAAO,QAAQ,CAAC;AAClB,CAAC","sourcesContent":["import { randomUUID } from \"node:crypto\";\nimport type {\n  TransportEntry,\n  TransportObject,\n} from \"../domain/transport.types.ts\";\nimport { transportDefaults } from \"./transport.constants.ts\";\n\nexport function encodeObject(key: string, bytes: Uint8Array) {\n  if (bytes.byteLength > transportDefaults.maxBytes)\n    throw new Error(\n      \"Transport object exceeds 64 MiB; split large payloads into chunks\",\n    );\n  const entry: TransportEntry = {\n    key,\n    revision: randomUUID(),\n    size: bytes.byteLength,\n    modifiedAt: new Date().toISOString(),\n  };\n  const header = Buffer.alloc(transportDefaults.headerBytes, \" \");\n  header.write(JSON.stringify(entry));\n  return { entry, data: Buffer.concat([header, bytes]) };\n}\n\nexport function decodeObject(\n  data: Uint8Array,\n  key: string,\n  maxBytes: number,\n): TransportObject {\n  const buffer = Buffer.from(data);\n  const bytes = buffer.subarray(transportDefaults.headerBytes);\n  return {\n    ...decodeObjectEntry(buffer, key, data.byteLength, maxBytes),\n    bytes,\n  };\n}\n\nexport function decodeObjectEntry(\n  data: Uint8Array,\n  key: string,\n  fileSize: number,\n  maxBytes: number,\n): TransportEntry {\n  const size = fileSize - transportDefaults.headerBytes;\n  if (\n    !Number.isSafeInteger(size) ||\n    size < 0 ||\n    size > maxBytes ||\n    data.byteLength < transportDefaults.headerBytes\n  )\n    throw new Error(\"Invalid or oversized transport object\");\n  const value: unknown = JSON.parse(\n    Buffer.from(data.subarray(0, transportDefaults.headerBytes)).toString(),\n  );\n  if (\n    value &&\n    typeof value === \"object\" &&\n    \"key\" in value &&\n    typeof value.key === \"string\" &&\n    value.key !== key &&\n    value.key.toLowerCase() === key.toLowerCase()\n  )\n    throw new Error(\"Transport key casing conflicts with the stored key\");\n  if (\n    !value ||\n    typeof value !== \"object\" ||\n    !(\"key\" in value) ||\n    value.key !== key ||\n    !(\"revision\" in value) ||\n    typeof value.revision !== \"string\" ||\n    !value.revision ||\n    !(\"size\" in value) ||\n    value.size !== size ||\n    !(\"modifiedAt\" in value) ||\n    typeof value.modifiedAt !== \"string\" ||\n    !Number.isFinite(Date.parse(value.modifiedAt))\n  )\n    throw new Error(\"Invalid or oversized transport object\");\n  return {\n    key,\n    revision: value.revision,\n    size,\n    modifiedAt: value.modifiedAt,\n  };\n}\n\nexport function readLimit(maxBytes = transportDefaults.maxBytes): number {\n  if (!Number.isSafeInteger(maxBytes) || maxBytes < 0)\n    throw new Error(\"Invalid transport byte limit\");\n  return maxBytes;\n}\n"]}

package/dist/infrastructure/transport-reservations.constants.d.ts

@@ -0,0 +1,2 @@
+export declare const reservationLedgerKey = "reservations/ledger";
+export declare const reservationIdPattern: RegExp;

package/dist/infrastructure/transport-reservations.constants.js

@@ -0,0 +1,3 @@
+export const reservationLedgerKey = "reservations/ledger";
+export const reservationIdPattern = /^[a-f0-9]{8}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{12}$/;
+//# sourceMappingURL=transport-reservations.constants.js.map

package/dist/infrastructure/transport-reservations.constants.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"transport-reservations.constants.js","sourceRoot":"","sources":["../../src/infrastructure/transport-reservations.constants.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,oBAAoB,GAAG,qBAAqB,CAAC;AAC1D,MAAM,CAAC,MAAM,oBAAoB,GAC/B,gEAAgE,CAAC","sourcesContent":["export const reservationLedgerKey = \"reservations/ledger\";\nexport const reservationIdPattern =\n  /^[a-f0-9]{8}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{12}$/;\n"]}

package/dist/infrastructure/transport-reservations.d.ts

@@ -1,5 +1,4 @@
 import type { Transport } from "../domain/transport.types.ts";
 import type { StorageReservation, StorageReservationOptions } from "./storage-reservations.types.ts";
-import type { ReservationLedger } from "./transport-reservations.types.ts";
-export declare function reservationLedger(value: unknown): ReservationLedger;
+export { reservationLedger } from "./reservation-ledger.ts";
 export declare function reserveTransportStorage(transporter: Transport, repository: string, options: StorageReservationOptions, measureUsage?: () => Promise<number>): Promise<StorageReservation>;

package/dist/infrastructure/transport-reservations.js

@@ -3,25 +3,12 @@ import { randomUUID } from "node:crypto";
 import { TransportConflict } from "../domain/transport.js";
 import { invariant, recordRecovery } from "../domain/errors.js";
 import { jsonBytes, jsonObject } from "./transport-json.js";
-const key = "reservations/ledger";
-export function reservationLedger(value) {
-    if (value === undefined)
-        return { format: 1, reservations: {} };
-    invariant(value &&
-        typeof value === "object" &&
-        "format" in value &&
-        value.format === 1 &&
-        "reservations" in value &&
-        value.reservations &&
-        typeof value.reservations === "object" &&
-        !Array.isArray(value.reservations), "Invalid reservation ledger");
-    const entries = Object.entries(value.reservations);
-    invariant(entries.every(([id, bytes]) => /^[a-f0-9-]{36}$/.test(id) &&
-        typeof bytes === "number" &&
-        Number.isSafeInteger(bytes) &&
-        bytes >= 0), "Invalid reservation entry");
-    return { format: 1, reservations: Object.fromEntries(entries) };
-}
+import { reservationLedger } from "./reservation-ledger.js";
+import { reservationLedgerKey as key } from "./transport-reservations.constants.js";
+import { localProcessIdentity } from "./git/process-identity.js";
+import { hostname } from "node:os";
+export { reservationLedger } from "./reservation-ledger.js";
+const ownerId = randomUUID();
 async function payloadUsage(transporter, maxEntries, signal) {
     let usage = 0, count = 0;
     for await (const entry of transporter.list("", signal ? { signal } : {})) {
@@ -37,6 +24,15 @@ export async function reserveTransportStorage(transporter, repository, options,
         Number.isSafeInteger(options.reserveBytes) &&
         options.reserveBytes >= 0, "Invalid reservation byte limit");
     const id = randomUUID();
+    const identity = await localProcessIdentity();
+    const owner = {
+        id: ownerId,
+        host: hostname(),
+        pid: process.pid,
+        createdAt: new Date().toISOString(),
+        repository,
+        ...(identity ? { identity } : {}),
+    };
     const maxEntries = options.maxEntries ?? transportDefaults.maxEntries;
     invariant(Number.isSafeInteger(maxEntries) && maxEntries > 0, "Invalid reservation entry limit");
     async function update(release) {
@@ -52,12 +48,12 @@ export async function reserveTransportStorage(transporter, repository, options,
                 const usage = measureUsage
                     ? await measureUsage()
                     : await payloadUsage(transporter, maxEntries, options.signal);
-                const reserved = Object.values(reservations).reduce((sum, value) => sum + value, 0);
+                const reserved = Object.values(reservations).reduce((sum, value) => sum + value.bytes, 0);
                 invariant(usage + reserved + options.reserveBytes <= options.maxBytes, "Outpost storage reservation admission refused");
-                reservations[id] = options.reserveBytes;
+                reservations[id] = { bytes: options.reserveBytes, owner };
             }
             try {
-                await transporter.write(key, jsonBytes({ format: 1, reservations }), {
+                await transporter.write(key, jsonBytes({ format: 2, reservations }), {
                     ifRevision: current?.revision ?? null,
                     ...(!release && options.signal ? { signal: options.signal } : {}),
                 });

package/dist/infrastructure/transport-reservations.js.map

@@ -1 +1 @@
-{"version":3,"file":"transport-reservations.js","sourceRoot":"","sources":["../../src/infrastructure/transport-reservations.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAC7D,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,OAAO,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAC3D,OAAO,EAAE,SAAS,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAChE,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AAO5D,MAAM,GAAG,GAAG,qBAAqB,CAAC;AAElC,MAAM,UAAU,iBAAiB,CAAC,KAAc;IAC9C,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,EAAE,MAAM,EAAE,CAAC,EAAE,YAAY,EAAE,EAAE,EAAE,CAAC;IAChE,SAAS,CACP,KAAK;QACH,OAAO,KAAK,KAAK,QAAQ;QACzB,QAAQ,IAAI,KAAK;QACjB,KAAK,CAAC,MAAM,KAAK,CAAC;QAClB,cAAc,IAAI,KAAK;QACvB,KAAK,CAAC,YAAY;QAClB,OAAO,KAAK,CAAC,YAAY,KAAK,QAAQ;QACtC,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,YAAY,CAAC,EACpC,4BAA4B,CAC7B,CAAC;IACF,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;IACnD,SAAS,CACP,OAAO,CAAC,KAAK,CACX,CAAC,CAAC,EAAE,EAAE,KAAK,CAAC,EAAE,EAAE,CACd,iBAAiB,CAAC,IAAI,CAAC,EAAE,CAAC;QAC1B,OAAO,KAAK,KAAK,QAAQ;QACzB,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC;QAC3B,KAAK,IAAI,CAAC,CACb,EACD,2BAA2B,CAC5B,CAAC;IACF,OAAO,EAAE,MAAM,EAAE,CAAC,EAAE,YAAY,EAAE,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,EAAE,CAAC;AAClE,CAAC;AAED,KAAK,UAAU,YAAY,CACzB,WAAsB,EACtB,UAAkB,EAClB,MAAoB;IAEpB,IAAI,KAAK,GAAG,CAAC,EACX,KAAK,GAAG,CAAC,CAAC;IACZ,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,WAAW,CAAC,IAAI,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;QACzE,SAAS,CAAC,EAAE,KAAK,IAAI,UAAU,EAAE,qCAAqC,CAAC,CAAC;QACxE,IAAI,KAAK,CAAC,GAAG,KAAK,GAAG;YAAE,KAAK,IAAI,KAAK,CAAC,IAAI,CAAC;IAC7C,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,WAAsB,EACtB,UAAkB,EAClB,OAAkC,EAClC,YAAoC;IAEpC,SAAS,CACP,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,QAAQ,CAAC;QACpC,OAAO,CAAC,QAAQ,IAAI,CAAC;QACrB,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,YAAY,CAAC;QAC1C,OAAO,CAAC,YAAY,IAAI,CAAC,EAC3B,gCAAgC,CACjC,CAAC;IACF,MAAM,EAAE,GAAG,UAAU,EAAE,CAAC;IACxB,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,iBAAiB,CAAC,UAAU,CAAC;IACtE,SAAS,CACP,MAAM,CAAC,aAAa,CAAC,UAAU,CAAC,IAAI,UAAU,GAAG,CAAC,EAClD,iCAAiC,CAClC,CAAC;IACF,KAAK,UAAU,MAAM,CAAC,OAAgB;QACpC,KACE,IAAI,OAAO,GAAG,CAAC,EACf,OAAO,GAAG,iBAAiB,CAAC,gBAAgB,EAC5C,OAAO,EAAE,EACT,CAAC;YACD,IAAI,CAAC,OAAO;gBAAE,OAAO,CAAC,MAAM,EAAE,cAAc,EAAE,CAAC;YAC/C,MAAM,OAAO,GAAG,MAAM,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAC5C,MAAM,MAAM,GAAG,iBAAiB,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC;YACtD,MAAM,YAAY,GAAG,EAAE,GAAG,MAAM,CAAC,YAAY,EAAE,CAAC;YAChD,IAAI,OAAO;gBAAE,OAAO,YAAY,CAAC,EAAE,CAAC,CAAC;YACrC,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,MAAM,KAAK,GAAG,YAAY;oBACxB,CAAC,CAAC,MAAM,YAAY,EAAE;oBACtB,CAAC,CAAC,MAAM,YAAY,CAAC,WAAW,EAAE,UAAU,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;gBAChE,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,MAAM,CACjD,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE,CAAC,GAAG,GAAG,KAAK,EAC3B,CAAC,CACF,CAAC;gBACF,SAAS,CACP,KAAK,GAAG,QAAQ,GAAG,OAAO,CAAC,YAAY,IAAI,OAAO,CAAC,QAAQ,EAC3D,+CAA+C,CAChD,CAAC;gBACF,YAAY,CAAC,EAAE,CAAC,GAAG,OAAO,CAAC,YAAY,CAAC;YAC1C,CAAC;YACD,IAAI,CAAC;gBACH,MAAM,WAAW,CAAC,KAAK,CAAC,GAAG,EAAE,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,YAAY,EAAE,CAAC,EAAE;oBACnE,UAAU,EAAE,OAAO,EAAE,QAAQ,IAAI,IAAI;oBACrC,GAAG,CAAC,CAAC,OAAO,IAAI,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBAClE,CAAC,CAAC;gBACH,OAAO;YACT,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,CAAC,CAAC,KAAK,YAAY,iBAAiB,CAAC;oBAAE,MAAM,KAAK,CAAC;YACzD,CAAC;QACH,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;IACnE,CAAC;IACD,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,KAAK,CAAC,CAAC;IACtB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,cAAc,CAAC,KAAK,EAAE,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC,CAAC;QAC3C,MAAM,KAAK,CAAC;IACd,CAAC;IACD,IAAI,QAAQ,GAAG,KAAK,CAAC;IACrB,MAAM,OAAO,GAAG,KAAK,IAAI,EAAE;QACzB,IAAI,QAAQ;YAAE,OAAO;QACrB,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC;QACnB,QAAQ,GAAG,IAAI,CAAC;IAClB,CAAC,CAAC;IACF,OAAO;QACL,EAAE;QACF,UAAU;QACV,YAAY,EAAE,OAAO,CAAC,YAAY;QAClC,OAAO;QACP,CAAC,MAAM,CAAC,YAAY,CAAC,EAAE,OAAO;KAC/B,CAAC;AACJ,CAAC","sourcesContent":["import { transportDefaults } from \"./transport.constants.ts\";\nimport { randomUUID } from \"node:crypto\";\nimport type { Transport } from \"../domain/transport.types.ts\";\nimport { TransportConflict } from \"../domain/transport.ts\";\nimport { invariant, recordRecovery } from \"../domain/errors.ts\";\nimport { jsonBytes, jsonObject } from \"./transport-json.ts\";\nimport type {\n  StorageReservation,\n  StorageReservationOptions,\n} from \"./storage-reservations.types.ts\";\nimport type { ReservationLedger } from \"./transport-reservations.types.ts\";\n\nconst key = \"reservations/ledger\";\n\nexport function reservationLedger(value: unknown): ReservationLedger {\n  if (value === undefined) return { format: 1, reservations: {} };\n  invariant(\n    value &&\n      typeof value === \"object\" &&\n      \"format\" in value &&\n      value.format === 1 &&\n      \"reservations\" in value &&\n      value.reservations &&\n      typeof value.reservations === \"object\" &&\n      !Array.isArray(value.reservations),\n    \"Invalid reservation ledger\",\n  );\n  const entries = Object.entries(value.reservations);\n  invariant(\n    entries.every(\n      ([id, bytes]) =>\n        /^[a-f0-9-]{36}$/.test(id) &&\n        typeof bytes === \"number\" &&\n        Number.isSafeInteger(bytes) &&\n        bytes >= 0,\n    ),\n    \"Invalid reservation entry\",\n  );\n  return { format: 1, reservations: Object.fromEntries(entries) };\n}\n\nasync function payloadUsage(\n  transporter: Transport,\n  maxEntries: number,\n  signal?: AbortSignal,\n): Promise<number> {\n  let usage = 0,\n    count = 0;\n  for await (const entry of transporter.list(\"\", signal ? { signal } : {})) {\n    invariant(++count <= maxEntries, \"Reservation inventory is incomplete\");\n    if (entry.key !== key) usage += entry.size;\n  }\n  return usage;\n}\n\nexport async function reserveTransportStorage(\n  transporter: Transport,\n  repository: string,\n  options: StorageReservationOptions,\n  measureUsage?: () => Promise<number>,\n): Promise<StorageReservation> {\n  invariant(\n    Number.isSafeInteger(options.maxBytes) &&\n      options.maxBytes >= 0 &&\n      Number.isSafeInteger(options.reserveBytes) &&\n      options.reserveBytes >= 0,\n    \"Invalid reservation byte limit\",\n  );\n  const id = randomUUID();\n  const maxEntries = options.maxEntries ?? transportDefaults.maxEntries;\n  invariant(\n    Number.isSafeInteger(maxEntries) && maxEntries > 0,\n    \"Invalid reservation entry limit\",\n  );\n  async function update(release: boolean): Promise<void> {\n    for (\n      let attempt = 0;\n      attempt < transportDefaults.mutationAttempts;\n      attempt++\n    ) {\n      if (!release) options.signal?.throwIfAborted();\n      const current = await transporter.read(key);\n      const ledger = reservationLedger(jsonObject(current));\n      const reservations = { ...ledger.reservations };\n      if (release) delete reservations[id];\n      if (!release) {\n        const usage = measureUsage\n          ? await measureUsage()\n          : await payloadUsage(transporter, maxEntries, options.signal);\n        const reserved = Object.values(reservations).reduce(\n          (sum, value) => sum + value,\n          0,\n        );\n        invariant(\n          usage + reserved + options.reserveBytes <= options.maxBytes,\n          \"Outpost storage reservation admission refused\",\n        );\n        reservations[id] = options.reserveBytes;\n      }\n      try {\n        await transporter.write(key, jsonBytes({ format: 1, reservations }), {\n          ifRevision: current?.revision ?? null,\n          ...(!release && options.signal ? { signal: options.signal } : {}),\n        });\n        return;\n      } catch (error) {\n        if (!(error instanceof TransportConflict)) throw error;\n      }\n    }\n    throw new Error(\"Storage reservation contention limit exceeded\");\n  }\n  try {\n    await update(false);\n  } catch (error) {\n    recordRecovery(error, { reservation: id });\n    throw error;\n  }\n  let released = false;\n  const release = async () => {\n    if (released) return;\n    await update(true);\n    released = true;\n  };\n  return {\n    id,\n    repository,\n    reserveBytes: options.reserveBytes,\n    release,\n    [Symbol.asyncDispose]: release,\n  };\n}\n"]}
+{"version":3,"file":"transport-reservations.js","sourceRoot":"","sources":["../../src/infrastructure/transport-reservations.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAC7D,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,OAAO,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAC3D,OAAO,EAAE,SAAS,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAChE,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AAK5D,OAAO,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAC5D,OAAO,EAAE,oBAAoB,IAAI,GAAG,EAAE,MAAM,uCAAuC,CAAC;AACpF,OAAO,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAC;AACjE,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AACnC,OAAO,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAE5D,MAAM,OAAO,GAAG,UAAU,EAAE,CAAC;AAE7B,KAAK,UAAU,YAAY,CACzB,WAAsB,EACtB,UAAkB,EAClB,MAAoB;IAEpB,IAAI,KAAK,GAAG,CAAC,EACX,KAAK,GAAG,CAAC,CAAC;IACZ,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,WAAW,CAAC,IAAI,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;QACzE,SAAS,CAAC,EAAE,KAAK,IAAI,UAAU,EAAE,qCAAqC,CAAC,CAAC;QACxE,IAAI,KAAK,CAAC,GAAG,KAAK,GAAG;YAAE,KAAK,IAAI,KAAK,CAAC,IAAI,CAAC;IAC7C,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,WAAsB,EACtB,UAAkB,EAClB,OAAkC,EAClC,YAAoC;IAEpC,SAAS,CACP,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,QAAQ,CAAC;QACpC,OAAO,CAAC,QAAQ,IAAI,CAAC;QACrB,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,YAAY,CAAC;QAC1C,OAAO,CAAC,YAAY,IAAI,CAAC,EAC3B,gCAAgC,CACjC,CAAC;IACF,MAAM,EAAE,GAAG,UAAU,EAAE,CAAC;IACxB,MAAM,QAAQ,GAAG,MAAM,oBAAoB,EAAE,CAAC;IAC9C,MAAM,KAAK,GAAG;QACZ,EAAE,EAAE,OAAO;QACX,IAAI,EAAE,QAAQ,EAAE;QAChB,GAAG,EAAE,OAAO,CAAC,GAAG;QAChB,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACnC,UAAU;QACV,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAClC,CAAC;IACF,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,iBAAiB,CAAC,UAAU,CAAC;IACtE,SAAS,CACP,MAAM,CAAC,aAAa,CAAC,UAAU,CAAC,IAAI,UAAU,GAAG,CAAC,EAClD,iCAAiC,CAClC,CAAC;IACF,KAAK,UAAU,MAAM,CAAC,OAAgB;QACpC,KACE,IAAI,OAAO,GAAG,CAAC,EACf,OAAO,GAAG,iBAAiB,CAAC,gBAAgB,EAC5C,OAAO,EAAE,EACT,CAAC;YACD,IAAI,CAAC,OAAO;gBAAE,OAAO,CAAC,MAAM,EAAE,cAAc,EAAE,CAAC;YAC/C,MAAM,OAAO,GAAG,MAAM,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAC5C,MAAM,MAAM,GAAG,iBAAiB,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC;YACtD,MAAM,YAAY,GAAG,EAAE,GAAG,MAAM,CAAC,YAAY,EAAE,CAAC;YAChD,IAAI,OAAO;gBAAE,OAAO,YAAY,CAAC,EAAE,CAAC,CAAC;YACrC,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,MAAM,KAAK,GAAG,YAAY;oBACxB,CAAC,CAAC,MAAM,YAAY,EAAE;oBACtB,CAAC,CAAC,MAAM,YAAY,CAAC,WAAW,EAAE,UAAU,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;gBAChE,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,MAAM,CACjD,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE,CAAC,GAAG,GAAG,KAAK,CAAC,KAAK,EACjC,CAAC,CACF,CAAC;gBACF,SAAS,CACP,KAAK,GAAG,QAAQ,GAAG,OAAO,CAAC,YAAY,IAAI,OAAO,CAAC,QAAQ,EAC3D,+CAA+C,CAChD,CAAC;gBACF,YAAY,CAAC,EAAE,CAAC,GAAG,EAAE,KAAK,EAAE,OAAO,CAAC,YAAY,EAAE,KAAK,EAAE,CAAC;YAC5D,CAAC;YACD,IAAI,CAAC;gBACH,MAAM,WAAW,CAAC,KAAK,CAAC,GAAG,EAAE,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,YAAY,EAAE,CAAC,EAAE;oBACnE,UAAU,EAAE,OAAO,EAAE,QAAQ,IAAI,IAAI;oBACrC,GAAG,CAAC,CAAC,OAAO,IAAI,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBAClE,CAAC,CAAC;gBACH,OAAO;YACT,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,CAAC,CAAC,KAAK,YAAY,iBAAiB,CAAC;oBAAE,MAAM,KAAK,CAAC;YACzD,CAAC;QACH,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;IACnE,CAAC;IACD,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,KAAK,CAAC,CAAC;IACtB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,cAAc,CAAC,KAAK,EAAE,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC,CAAC;QAC3C,MAAM,KAAK,CAAC;IACd,CAAC;IACD,IAAI,QAAQ,GAAG,KAAK,CAAC;IACrB,MAAM,OAAO,GAAG,KAAK,IAAI,EAAE;QACzB,IAAI,QAAQ;YAAE,OAAO;QACrB,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC;QACnB,QAAQ,GAAG,IAAI,CAAC;IAClB,CAAC,CAAC;IACF,OAAO;QACL,EAAE;QACF,UAAU;QACV,YAAY,EAAE,OAAO,CAAC,YAAY;QAClC,OAAO;QACP,CAAC,MAAM,CAAC,YAAY,CAAC,EAAE,OAAO;KAC/B,CAAC;AACJ,CAAC","sourcesContent":["import { transportDefaults } from \"./transport.constants.ts\";\nimport { randomUUID } from \"node:crypto\";\nimport type { Transport } from \"../domain/transport.types.ts\";\nimport { TransportConflict } from \"../domain/transport.ts\";\nimport { invariant, recordRecovery } from \"../domain/errors.ts\";\nimport { jsonBytes, jsonObject } from \"./transport-json.ts\";\nimport type {\n  StorageReservation,\n  StorageReservationOptions,\n} from \"./storage-reservations.types.ts\";\nimport { reservationLedger } from \"./reservation-ledger.ts\";\nimport { reservationLedgerKey as key } from \"./transport-reservations.constants.ts\";\nimport { localProcessIdentity } from \"./git/process-identity.ts\";\nimport { hostname } from \"node:os\";\nexport { reservationLedger } from \"./reservation-ledger.ts\";\n\nconst ownerId = randomUUID();\n\nasync function payloadUsage(\n  transporter: Transport,\n  maxEntries: number,\n  signal?: AbortSignal,\n): Promise<number> {\n  let usage = 0,\n    count = 0;\n  for await (const entry of transporter.list(\"\", signal ? { signal } : {})) {\n    invariant(++count <= maxEntries, \"Reservation inventory is incomplete\");\n    if (entry.key !== key) usage += entry.size;\n  }\n  return usage;\n}\n\nexport async function reserveTransportStorage(\n  transporter: Transport,\n  repository: string,\n  options: StorageReservationOptions,\n  measureUsage?: () => Promise<number>,\n): Promise<StorageReservation> {\n  invariant(\n    Number.isSafeInteger(options.maxBytes) &&\n      options.maxBytes >= 0 &&\n      Number.isSafeInteger(options.reserveBytes) &&\n      options.reserveBytes >= 0,\n    \"Invalid reservation byte limit\",\n  );\n  const id = randomUUID();\n  const identity = await localProcessIdentity();\n  const owner = {\n    id: ownerId,\n    host: hostname(),\n    pid: process.pid,\n    createdAt: new Date().toISOString(),\n    repository,\n    ...(identity ? { identity } : {}),\n  };\n  const maxEntries = options.maxEntries ?? transportDefaults.maxEntries;\n  invariant(\n    Number.isSafeInteger(maxEntries) && maxEntries > 0,\n    \"Invalid reservation entry limit\",\n  );\n  async function update(release: boolean): Promise<void> {\n    for (\n      let attempt = 0;\n      attempt < transportDefaults.mutationAttempts;\n      attempt++\n    ) {\n      if (!release) options.signal?.throwIfAborted();\n      const current = await transporter.read(key);\n      const ledger = reservationLedger(jsonObject(current));\n      const reservations = { ...ledger.reservations };\n      if (release) delete reservations[id];\n      if (!release) {\n        const usage = measureUsage\n          ? await measureUsage()\n          : await payloadUsage(transporter, maxEntries, options.signal);\n        const reserved = Object.values(reservations).reduce(\n          (sum, value) => sum + value.bytes,\n          0,\n        );\n        invariant(\n          usage + reserved + options.reserveBytes <= options.maxBytes,\n          \"Outpost storage reservation admission refused\",\n        );\n        reservations[id] = { bytes: options.reserveBytes, owner };\n      }\n      try {\n        await transporter.write(key, jsonBytes({ format: 2, reservations }), {\n          ifRevision: current?.revision ?? null,\n          ...(!release && options.signal ? { signal: options.signal } : {}),\n        });\n        return;\n      } catch (error) {\n        if (!(error instanceof TransportConflict)) throw error;\n      }\n    }\n    throw new Error(\"Storage reservation contention limit exceeded\");\n  }\n  try {\n    await update(false);\n  } catch (error) {\n    recordRecovery(error, { reservation: id });\n    throw error;\n  }\n  let released = false;\n  const release = async () => {\n    if (released) return;\n    await update(true);\n    released = true;\n  };\n  return {\n    id,\n    repository,\n    reserveBytes: options.reserveBytes,\n    release,\n    [Symbol.asyncDispose]: release,\n  };\n}\n"]}

package/dist/infrastructure/transport-reservations.types.d.ts

@@ -1,4 +1,25 @@
+import type { LocalProcessIdentity } from "./git/process-identity.types.ts";
+export interface StorageReservationRecord {
+    readonly bytes: number;
+    readonly owner?: {
+        readonly id: string;
+        readonly host: string;
+        readonly pid: number;
+        readonly createdAt: string;
+        readonly repository: string;
+        readonly identity?: LocalProcessIdentity;
+    };
+}
 export interface ReservationLedger {
-    readonly format: 1;
-    readonly reservations: Readonly<Record<string, number>>;
+    readonly format: 2;
+    readonly reservations: Readonly<Record<string, StorageReservationRecord>>;
+}
+export interface StorageReservationInspection {
+    readonly revision?: string;
+    readonly reservations: Readonly<Record<string, StorageReservationRecord>>;
+}
+export interface StorageReservationRecoveryOptions {
+    readonly id: string;
+    readonly revision: string;
+    readonly processesStopped: true;
 }

package/dist/infrastructure/transport-reservations.types.js.map

@@ -1 +1 @@
-{"version":3,"file":"transport-reservations.types.js","sourceRoot":"","sources":["../../src/infrastructure/transport-reservations.types.ts"],"names":[],"mappings":"","sourcesContent":["export interface ReservationLedger {\n  readonly format: 1;\n  readonly reservations: Readonly<Record<string, number>>;\n}\n"]}
+{"version":3,"file":"transport-reservations.types.js","sourceRoot":"","sources":["../../src/infrastructure/transport-reservations.types.ts"],"names":[],"mappings":"","sourcesContent":["import type { LocalProcessIdentity } from \"./git/process-identity.types.ts\";\n\nexport interface StorageReservationRecord {\n  readonly bytes: number;\n  readonly owner?: {\n    readonly id: string;\n    readonly host: string;\n    readonly pid: number;\n    readonly createdAt: string;\n    readonly repository: string;\n    readonly identity?: LocalProcessIdentity;\n  };\n}\n\nexport interface ReservationLedger {\n  readonly format: 2;\n  readonly reservations: Readonly<Record<string, StorageReservationRecord>>;\n}\n\nexport interface StorageReservationInspection {\n  readonly revision?: string;\n  readonly reservations: Readonly<Record<string, StorageReservationRecord>>;\n}\n\nexport interface StorageReservationRecoveryOptions {\n  readonly id: string;\n  readonly revision: string;\n  readonly processesStopped: true;\n}\n"]}

package/dist/infrastructure/trigger-server.js

@@ -1,3 +1,4 @@
+import { TriggerPayloadError } from "../domain/trigger-payload.js";
 import { createServer } from "node:http";
 import { triggerQueueRequest } from "../domain/trigger-job.js";
 import { triggerDefaultMaxBytes, triggerMaxBytes, triggerPathPattern, } from "../domain/trigger.constants.js";
@@ -80,8 +81,9 @@ export async function serveTriggers(options) {
             event = await route.source.verify(request, Date.now());
         }
         catch (error) {
-            report(error, { path: route.path, stage: "verify" });
-            return { status: 401 };
+            const payload = error instanceof TriggerPayloadError;
+            report(error, { path: route.path, stage: payload ? "decode" : "verify" });
+            return { status: payload ? 400 : 401 };
         }
         const failure = { path: route.path, delivery: event.delivery };
         const reply = (outcome, job) => route.source.reply?.(outcome, job) ?? defaultReply(outcome, job);
@@ -110,14 +112,14 @@ export async function serveTriggers(options) {
         headersTimeout: triggerHttpTimeoutMs,
         maxHeaderSize: triggerHttpMaxHeaderBytes,
     }, async (request, response) => {
-        const path = new URL(request.url ?? "/", "http://trigger").pathname;
-        const route = routes.get(path);
-        if (!route || request.method !== "POST") {
-            request.resume();
-            send(response, { status: route ? 405 : 404 });
-            return;
-        }
         try {
+            const path = new URL(request.url ?? "/", "http://trigger").pathname;
+            const route = routes.get(path);
+            if (!route || request.method !== "POST") {
+                request.resume();
+                send(response, { status: route ? 405 : 404 });
+                return;
+            }
             const content = await body(request, limit);
             send(response, await handle(route, {
                 method: request.method,
@@ -127,6 +129,7 @@ export async function serveTriggers(options) {
             }));
         }
         catch (error) {
+            request.resume();
             response.setHeader("connection", "close");
             send(response, {
                 status: error instanceof RequestTooLarge ? 413 : 400,

package/dist/infrastructure/trigger-server.js.map

@@ -1 +1 @@
-{"version":3,"file":"trigger-server.js","sourceRoot":"","sources":["../../src/infrastructure/trigger-server.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,WAAW,CAAC;AAEzC,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAC/D,OAAO,EACL,sBAAsB,EACtB,eAAe,EACf,kBAAkB,GACnB,MAAM,gCAAgC,CAAC;AAOxC,OAAO,EACL,yBAAyB,EACzB,oBAAoB,GACrB,MAAM,+BAA+B,CAAC;AAQvC,MAAM,eAAgB,SAAQ,KAAK;CAAG;AAEtC,SAAS,UAAU,CAAC,MAA+B;IACjD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM;QAC1C,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;IACjE,MAAM,KAAK,GAAG,IAAI,GAAG,EAAwB,CAAC;IAC9C,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC;YAC/D,MAAM,IAAI,KAAK,CAAC,sCAAsC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;QACtE,IACE,OAAO,KAAK,CAAC,MAAM,EAAE,MAAM,KAAK,UAAU;YAC1C,OAAO,KAAK,CAAC,EAAE,KAAK,UAAU;YAE9B,MAAM,IAAI,KAAK,CAAC,iBAAiB,KAAK,CAAC,IAAI,6BAA6B,CAAC,CAAC;QAC5E,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IAC/B,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,SAAS,CAAC,KAAyB;IAC1C,MAAM,KAAK,GAAG,KAAK,IAAI,sBAAsB,CAAC;IAC9C,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,IAAI,KAAK,GAAG,eAAe;QACvE,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC;IAC1E,OAAO,KAAK,CAAC;AACf,CAAC;AAED,KAAK,UAAU,IAAI,CAAC,OAAwB,EAAE,KAAa;IACzD,MAAM,QAAQ,GAAG,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC;IAChE,IAAI,QAAQ,GAAG,KAAK;QAAE,MAAM,IAAI,eAAe,EAAE,CAAC;IAClD,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,IAAI,IAAI,GAAG,CAAC,CAAC;IACb,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAClC,MAAM,KAAK,GAAW,KAAK,CAAC;QAC5B,IAAI,IAAI,KAAK,CAAC,UAAU,CAAC;QACzB,IAAI,IAAI,GAAG,KAAK;YAAE,MAAM,IAAI,eAAe,EAAE,CAAC;QAC9C,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACrB,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;AAC/B,CAAC;AAED,SAAS,OAAO,CAAC,OAAwB;IACvC,OAAO,MAAM,CAAC,WAAW,CACvB,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC;QACrD,IAAI;QACJ,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK;KAChD,CAAC,CACH,CAAC;AACJ,CAAC;AAED,SAAS,IAAI,CAAC,QAAwB,EAAE,KAAmB;IACzD,QAAQ;SACL,SAAS,CAAC,KAAK,CAAC,MAAM,EAAE;QACvB,eAAe,EAAE,UAAU;QAC3B,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACpE,CAAC;SACD,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;AACrB,CAAC;AAED,SAAS,YAAY,CAAC,OAAuB,EAAE,GAAY;IACzD,IAAI,OAAO,KAAK,SAAS;QAAE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;IAClD,OAAO;QACL,MAAM,EAAE,GAAG;QACX,WAAW,EAAE,kBAAkB;QAC/B,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,CAAC;KAC9B,CAAC;AACJ,CAAC;AAED,wEAAwE;AACxE,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,OAA6B;IAE7B,MAAM,MAAM,GAAG,UAAU,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IAC1C,MAAM,KAAK,GAAG,SAAS,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC1C,SAAS,MAAM,CAAC,KAAc,EAAE,OAAuB;QACrD,IAAI,CAAC;YACH,OAAO,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;QACpC,CAAC;QAAC,MAAM,CAAC;YACP,kDAAkD;QACpD,CAAC;IACH,CAAC;IACD,KAAK,UAAU,MAAM,CACnB,KAAmB,EACnB,OAA2B;QAE3B,IAAI,KAAmB,CAAC;QACxB,IAAI,CAAC;YACH,KAAK,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;QACzD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,KAAK,EAAE,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;YACrD,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;QACzB,CAAC;QACD,MAAM,OAAO,GAAG,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAC;QAC/D,MAAM,KAAK,GAAG,CAAC,OAAuB,EAAE,GAAY,EAAE,EAAE,CACtD,KAAK,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,OAAO,EAAE,GAAG,CAAC,IAAI,YAAY,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;QACnE,IAAI,MAAM,CAAC;QACX,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC;YAClC,IAAI,GAAG,KAAK,SAAS;gBAAE,OAAO,KAAK,CAAC,SAAS,CAAC,CAAC;YAC/C,MAAM,GAAG,mBAAmB,CAC1B,WAAW,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,QAAQ,EAAE,EACzC,GAAG,CACJ,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,KAAK,EAAE,EAAE,GAAG,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;YAC9C,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;QACzB,CAAC;QACD,IAAI,CAAC;YACH,MAAM,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QACtC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,KAAK,EAAE,EAAE,GAAG,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC;YAChD,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;QACzB,CAAC;QACD,OAAO,KAAK,CAAC,UAAU,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC;IACtC,CAAC;IACD,MAAM,MAAM,GAAG,YAAY,CACzB;QACE,cAAc,EAAE,oBAAoB;QACpC,cAAc,EAAE,oBAAoB;QACpC,aAAa,EAAE,yBAAyB;KACzC,EACD,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE;QAC1B,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,IAAI,GAAG,EAAE,gBAAgB,CAAC,CAAC,QAAQ,CAAC;QACpE,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC/B,IAAI,CAAC,KAAK,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;YACxC,OAAO,CAAC,MAAM,EAAE,CAAC;YACjB,IAAI,CAAC,QAAQ,EAAE,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC;YAC9C,OAAO;QACT,CAAC;QACD,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;YAC3C,IAAI,CACF,QAAQ,EACR,MAAM,MAAM,CAAC,KAAK,EAAE;gBAClB,MAAM,EAAE,OAAO,CAAC,MAAM;gBACtB,IAAI;gBACJ,OAAO,EAAE,OAAO,CAAC,OAAO,CAAC;gBACzB,IAAI,EAAE,OAAO;aACd,CAAC,CACH,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,QAAQ,CAAC,SAAS,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC;YAC1C,IAAI,CAAC,QAAQ,EAAE;gBACb,MAAM,EAAE,KAAK,YAAY,eAAe,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG;aACrD,CAAC,CAAC;QACL,CAAC;IACH,CAAC,CACF,CAAC;IACF,MAAM,CAAC,UAAU,CAAC,oBAAoB,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC;IACtE,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QAC1C,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC7B,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC,EAAE,OAAO,CAAC,IAAI,IAAI,WAAW,EAAE,OAAO,CAAC,CAAC;IACzE,CAAC,CAAC,CAAC;IACH,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,EAAE,CAAC;IACjC,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ;QACzC,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;IACxD,MAAM,IAAI,GACR,OAAO,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC;IACvE,OAAO;QACL,GAAG,EAAE,UAAU,IAAI,IAAI,OAAO,CAAC,IAAI,EAAE;QACrC,KAAK,EAAE,GAAG,EAAE,CACV,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACpC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;YAC7D,MAAM,CAAC,oBAAoB,EAAE,CAAC;QAChC,CAAC,CAAC;KACL,CAAC;AACJ,CAAC","sourcesContent":["import { createServer } from \"node:http\";\nimport type { IncomingMessage, ServerResponse } from \"node:http\";\nimport { triggerQueueRequest } from \"../domain/trigger-job.ts\";\nimport {\n  triggerDefaultMaxBytes,\n  triggerMaxBytes,\n  triggerPathPattern,\n} from \"../domain/trigger.constants.ts\";\nimport type {\n  TriggerEvent,\n  TriggerHttpRequest,\n  TriggerOutcome,\n  TriggerReply,\n} from \"../domain/trigger.types.ts\";\nimport {\n  triggerHttpMaxHeaderBytes,\n  triggerHttpTimeoutMs,\n} from \"./trigger-server.constants.ts\";\nimport type {\n  TriggerFailure,\n  TriggerRoute,\n  TriggerServer,\n  TriggerServerOptions,\n} from \"./trigger-server.types.ts\";\n\nclass RequestTooLarge extends Error {}\n\nfunction routeTable(routes: readonly TriggerRoute[]) {\n  if (!Array.isArray(routes) || !routes.length)\n    throw new Error(\"serveTriggers() requires at least one route\");\n  const table = new Map<string, TriggerRoute>();\n  for (const route of routes) {\n    if (!triggerPathPattern.test(route.path) || table.has(route.path))\n      throw new Error(`Invalid or duplicate trigger path: ${route.path}`);\n    if (\n      typeof route.source?.verify !== \"function\" ||\n      typeof route.on !== \"function\"\n    )\n      throw new Error(`Trigger route ${route.path} requires a source and on()`);\n    table.set(route.path, route);\n  }\n  return table;\n}\n\nfunction bodyLimit(value: number | undefined): number {\n  const limit = value ?? triggerDefaultMaxBytes;\n  if (!Number.isSafeInteger(limit) || limit <= 0 || limit > triggerMaxBytes)\n    throw new Error(\"Trigger body limit must be between 1 byte and 25 MiB\");\n  return limit;\n}\n\nasync function body(request: IncomingMessage, limit: number) {\n  const declared = Number(request.headers[\"content-length\"] ?? 0);\n  if (declared > limit) throw new RequestTooLarge();\n  const chunks: Buffer[] = [];\n  let size = 0;\n  for await (const chunk of request) {\n    const bytes: Buffer = chunk;\n    size += bytes.byteLength;\n    if (size > limit) throw new RequestTooLarge();\n    chunks.push(bytes);\n  }\n  return Buffer.concat(chunks);\n}\n\nfunction headers(request: IncomingMessage) {\n  return Object.fromEntries(\n    Object.entries(request.headers).map(([name, value]) => [\n      name,\n      Array.isArray(value) ? value.join(\", \") : value,\n    ]),\n  );\n}\n\nfunction send(response: ServerResponse, reply: TriggerReply) {\n  response\n    .writeHead(reply.status, {\n      \"cache-control\": \"no-store\",\n      ...(reply.contentType ? { \"content-type\": reply.contentType } : {}),\n    })\n    .end(reply.body);\n}\n\nfunction defaultReply(outcome: TriggerOutcome, job?: string): TriggerReply {\n  if (outcome === \"ignored\") return { status: 204 };\n  return {\n    status: 202,\n    contentType: \"application/json\",\n    body: JSON.stringify({ job }),\n  };\n}\n\n/** Serve verified webhooks and publish the jobs their routes select. */\nexport async function serveTriggers(\n  options: TriggerServerOptions,\n): Promise<TriggerServer> {\n  const routes = routeTable(options.routes);\n  const limit = bodyLimit(options.maxBytes);\n  function report(error: unknown, failure: TriggerFailure) {\n    try {\n      options.onError?.(error, failure);\n    } catch {\n      /* Observer failures must not change responses. */\n    }\n  }\n  async function handle(\n    route: TriggerRoute,\n    request: TriggerHttpRequest,\n  ): Promise<TriggerReply> {\n    let event: TriggerEvent;\n    try {\n      event = await route.source.verify(request, Date.now());\n    } catch (error) {\n      report(error, { path: route.path, stage: \"verify\" });\n      return { status: 401 };\n    }\n    const failure = { path: route.path, delivery: event.delivery };\n    const reply = (outcome: TriggerOutcome, job?: string) =>\n      route.source.reply?.(outcome, job) ?? defaultReply(outcome, job);\n    let queued;\n    try {\n      const job = await route.on(event);\n      if (job === undefined) return reply(\"ignored\");\n      queued = triggerQueueRequest(\n        `trigger:${route.path}:${event.delivery}`,\n        job,\n      );\n    } catch (error) {\n      report(error, { ...failure, stage: \"route\" });\n      return { status: 500 };\n    }\n    try {\n      await options.queue.enqueue(queued);\n    } catch (error) {\n      report(error, { ...failure, stage: \"enqueue\" });\n      return { status: 503 };\n    }\n    return reply(\"accepted\", queued.id);\n  }\n  const server = createServer(\n    {\n      requestTimeout: triggerHttpTimeoutMs,\n      headersTimeout: triggerHttpTimeoutMs,\n      maxHeaderSize: triggerHttpMaxHeaderBytes,\n    },\n    async (request, response) => {\n      const path = new URL(request.url ?? \"/\", \"http://trigger\").pathname;\n      const route = routes.get(path);\n      if (!route || request.method !== \"POST\") {\n        request.resume();\n        send(response, { status: route ? 405 : 404 });\n        return;\n      }\n      try {\n        const content = await body(request, limit);\n        send(\n          response,\n          await handle(route, {\n            method: request.method,\n            path,\n            headers: headers(request),\n            body: content,\n          }),\n        );\n      } catch (error) {\n        response.setHeader(\"connection\", \"close\");\n        send(response, {\n          status: error instanceof RequestTooLarge ? 413 : 400,\n        });\n      }\n    },\n  );\n  server.setTimeout(triggerHttpTimeoutMs, (socket) => socket.destroy());\n  await new Promise<void>((resolve, reject) => {\n    server.once(\"error\", reject);\n    server.listen(options.port ?? 0, options.host ?? \"127.0.0.1\", resolve);\n  });\n  const address = server.address();\n  if (!address || typeof address === \"string\")\n    throw new Error(\"Trigger server address unavailable\");\n  const host =\n    address.family === \"IPv6\" ? `[${address.address}]` : address.address;\n  return {\n    url: `http://${host}:${address.port}`,\n    close: () =>\n      new Promise<void>((resolve, reject) => {\n        server.close((error) => (error ? reject(error) : resolve()));\n        server.closeIdleConnections();\n      }),\n  };\n}\n"]}
+{"version":3,"file":"trigger-server.js","sourceRoot":"","sources":["../../src/infrastructure/trigger-server.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,MAAM,8BAA8B,CAAC;AACnE,OAAO,EAAE,YAAY,EAAE,MAAM,WAAW,CAAC;AAEzC,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAC/D,OAAO,EACL,sBAAsB,EACtB,eAAe,EACf,kBAAkB,GACnB,MAAM,gCAAgC,CAAC;AAOxC,OAAO,EACL,yBAAyB,EACzB,oBAAoB,GACrB,MAAM,+BAA+B,CAAC;AAQvC,MAAM,eAAgB,SAAQ,KAAK;CAAG;AAEtC,SAAS,UAAU,CAAC,MAA+B;IACjD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM;QAC1C,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;IACjE,MAAM,KAAK,GAAG,IAAI,GAAG,EAAwB,CAAC;IAC9C,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC;YAC/D,MAAM,IAAI,KAAK,CAAC,sCAAsC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;QACtE,IACE,OAAO,KAAK,CAAC,MAAM,EAAE,MAAM,KAAK,UAAU;YAC1C,OAAO,KAAK,CAAC,EAAE,KAAK,UAAU;YAE9B,MAAM,IAAI,KAAK,CAAC,iBAAiB,KAAK,CAAC,IAAI,6BAA6B,CAAC,CAAC;QAC5E,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IAC/B,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,SAAS,CAAC,KAAyB;IAC1C,MAAM,KAAK,GAAG,KAAK,IAAI,sBAAsB,CAAC;IAC9C,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,IAAI,KAAK,GAAG,eAAe;QACvE,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC;IAC1E,OAAO,KAAK,CAAC;AACf,CAAC;AAED,KAAK,UAAU,IAAI,CAAC,OAAwB,EAAE,KAAa;IACzD,MAAM,QAAQ,GAAG,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC;IAChE,IAAI,QAAQ,GAAG,KAAK;QAAE,MAAM,IAAI,eAAe,EAAE,CAAC;IAClD,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,IAAI,IAAI,GAAG,CAAC,CAAC;IACb,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAClC,MAAM,KAAK,GAAW,KAAK,CAAC;QAC5B,IAAI,IAAI,KAAK,CAAC,UAAU,CAAC;QACzB,IAAI,IAAI,GAAG,KAAK;YAAE,MAAM,IAAI,eAAe,EAAE,CAAC;QAC9C,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACrB,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;AAC/B,CAAC;AAED,SAAS,OAAO,CAAC,OAAwB;IACvC,OAAO,MAAM,CAAC,WAAW,CACvB,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC;QACrD,IAAI;QACJ,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK;KAChD,CAAC,CACH,CAAC;AACJ,CAAC;AAED,SAAS,IAAI,CAAC,QAAwB,EAAE,KAAmB;IACzD,QAAQ;SACL,SAAS,CAAC,KAAK,CAAC,MAAM,EAAE;QACvB,eAAe,EAAE,UAAU;QAC3B,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACpE,CAAC;SACD,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;AACrB,CAAC;AAED,SAAS,YAAY,CAAC,OAAuB,EAAE,GAAY;IACzD,IAAI,OAAO,KAAK,SAAS;QAAE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;IAClD,OAAO;QACL,MAAM,EAAE,GAAG;QACX,WAAW,EAAE,kBAAkB;QAC/B,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,CAAC;KAC9B,CAAC;AACJ,CAAC;AAED,wEAAwE;AACxE,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,OAA6B;IAE7B,MAAM,MAAM,GAAG,UAAU,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IAC1C,MAAM,KAAK,GAAG,SAAS,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC1C,SAAS,MAAM,CAAC,KAAc,EAAE,OAAuB;QACrD,IAAI,CAAC;YACH,OAAO,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;QACpC,CAAC;QAAC,MAAM,CAAC;YACP,kDAAkD;QACpD,CAAC;IACH,CAAC;IACD,KAAK,UAAU,MAAM,CACnB,KAAmB,EACnB,OAA2B;QAE3B,IAAI,KAAmB,CAAC;QACxB,IAAI,CAAC;YACH,KAAK,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;QACzD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,OAAO,GAAG,KAAK,YAAY,mBAAmB,CAAC;YACrD,MAAM,CAAC,KAAK,EAAE,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC;YAC1E,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC;QACzC,CAAC;QACD,MAAM,OAAO,GAAG,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAC;QAC/D,MAAM,KAAK,GAAG,CAAC,OAAuB,EAAE,GAAY,EAAE,EAAE,CACtD,KAAK,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,OAAO,EAAE,GAAG,CAAC,IAAI,YAAY,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;QACnE,IAAI,MAAM,CAAC;QACX,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC;YAClC,IAAI,GAAG,KAAK,SAAS;gBAAE,OAAO,KAAK,CAAC,SAAS,CAAC,CAAC;YAC/C,MAAM,GAAG,mBAAmB,CAC1B,WAAW,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,QAAQ,EAAE,EACzC,GAAG,CACJ,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,KAAK,EAAE,EAAE,GAAG,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;YAC9C,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;QACzB,CAAC;QACD,IAAI,CAAC;YACH,MAAM,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QACtC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,KAAK,EAAE,EAAE,GAAG,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC;YAChD,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;QACzB,CAAC;QACD,OAAO,KAAK,CAAC,UAAU,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC;IACtC,CAAC;IACD,MAAM,MAAM,GAAG,YAAY,CACzB;QACE,cAAc,EAAE,oBAAoB;QACpC,cAAc,EAAE,oBAAoB;QACpC,aAAa,EAAE,yBAAyB;KACzC,EACD,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE;QAC1B,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,IAAI,GAAG,EAAE,gBAAgB,CAAC,CAAC,QAAQ,CAAC;YACpE,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YAC/B,IAAI,CAAC,KAAK,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;gBACxC,OAAO,CAAC,MAAM,EAAE,CAAC;gBACjB,IAAI,CAAC,QAAQ,EAAE,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC;gBAC9C,OAAO;YACT,CAAC;YACD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;YAC3C,IAAI,CACF,QAAQ,EACR,MAAM,MAAM,CAAC,KAAK,EAAE;gBAClB,MAAM,EAAE,OAAO,CAAC,MAAM;gBACtB,IAAI;gBACJ,OAAO,EAAE,OAAO,CAAC,OAAO,CAAC;gBACzB,IAAI,EAAE,OAAO;aACd,CAAC,CACH,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,MAAM,EAAE,CAAC;YACjB,QAAQ,CAAC,SAAS,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC;YAC1C,IAAI,CAAC,QAAQ,EAAE;gBACb,MAAM,EAAE,KAAK,YAAY,eAAe,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG;aACrD,CAAC,CAAC;QACL,CAAC;IACH,CAAC,CACF,CAAC;IACF,MAAM,CAAC,UAAU,CAAC,oBAAoB,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC;IACtE,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QAC1C,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC7B,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC,EAAE,OAAO,CAAC,IAAI,IAAI,WAAW,EAAE,OAAO,CAAC,CAAC;IACzE,CAAC,CAAC,CAAC;IACH,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,EAAE,CAAC;IACjC,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ;QACzC,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;IACxD,MAAM,IAAI,GACR,OAAO,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC;IACvE,OAAO;QACL,GAAG,EAAE,UAAU,IAAI,IAAI,OAAO,CAAC,IAAI,EAAE;QACrC,KAAK,EAAE,GAAG,EAAE,CACV,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACpC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;YAC7D,MAAM,CAAC,oBAAoB,EAAE,CAAC;QAChC,CAAC,CAAC;KACL,CAAC;AACJ,CAAC","sourcesContent":["import { TriggerPayloadError } from \"../domain/trigger-payload.ts\";\nimport { createServer } from \"node:http\";\nimport type { IncomingMessage, ServerResponse } from \"node:http\";\nimport { triggerQueueRequest } from \"../domain/trigger-job.ts\";\nimport {\n  triggerDefaultMaxBytes,\n  triggerMaxBytes,\n  triggerPathPattern,\n} from \"../domain/trigger.constants.ts\";\nimport type {\n  TriggerEvent,\n  TriggerHttpRequest,\n  TriggerOutcome,\n  TriggerReply,\n} from \"../domain/trigger.types.ts\";\nimport {\n  triggerHttpMaxHeaderBytes,\n  triggerHttpTimeoutMs,\n} from \"./trigger-server.constants.ts\";\nimport type {\n  TriggerFailure,\n  TriggerRoute,\n  TriggerServer,\n  TriggerServerOptions,\n} from \"./trigger-server.types.ts\";\n\nclass RequestTooLarge extends Error {}\n\nfunction routeTable(routes: readonly TriggerRoute[]) {\n  if (!Array.isArray(routes) || !routes.length)\n    throw new Error(\"serveTriggers() requires at least one route\");\n  const table = new Map<string, TriggerRoute>();\n  for (const route of routes) {\n    if (!triggerPathPattern.test(route.path) || table.has(route.path))\n      throw new Error(`Invalid or duplicate trigger path: ${route.path}`);\n    if (\n      typeof route.source?.verify !== \"function\" ||\n      typeof route.on !== \"function\"\n    )\n      throw new Error(`Trigger route ${route.path} requires a source and on()`);\n    table.set(route.path, route);\n  }\n  return table;\n}\n\nfunction bodyLimit(value: number | undefined): number {\n  const limit = value ?? triggerDefaultMaxBytes;\n  if (!Number.isSafeInteger(limit) || limit <= 0 || limit > triggerMaxBytes)\n    throw new Error(\"Trigger body limit must be between 1 byte and 25 MiB\");\n  return limit;\n}\n\nasync function body(request: IncomingMessage, limit: number) {\n  const declared = Number(request.headers[\"content-length\"] ?? 0);\n  if (declared > limit) throw new RequestTooLarge();\n  const chunks: Buffer[] = [];\n  let size = 0;\n  for await (const chunk of request) {\n    const bytes: Buffer = chunk;\n    size += bytes.byteLength;\n    if (size > limit) throw new RequestTooLarge();\n    chunks.push(bytes);\n  }\n  return Buffer.concat(chunks);\n}\n\nfunction headers(request: IncomingMessage) {\n  return Object.fromEntries(\n    Object.entries(request.headers).map(([name, value]) => [\n      name,\n      Array.isArray(value) ? value.join(\", \") : value,\n    ]),\n  );\n}\n\nfunction send(response: ServerResponse, reply: TriggerReply) {\n  response\n    .writeHead(reply.status, {\n      \"cache-control\": \"no-store\",\n      ...(reply.contentType ? { \"content-type\": reply.contentType } : {}),\n    })\n    .end(reply.body);\n}\n\nfunction defaultReply(outcome: TriggerOutcome, job?: string): TriggerReply {\n  if (outcome === \"ignored\") return { status: 204 };\n  return {\n    status: 202,\n    contentType: \"application/json\",\n    body: JSON.stringify({ job }),\n  };\n}\n\n/** Serve verified webhooks and publish the jobs their routes select. */\nexport async function serveTriggers(\n  options: TriggerServerOptions,\n): Promise<TriggerServer> {\n  const routes = routeTable(options.routes);\n  const limit = bodyLimit(options.maxBytes);\n  function report(error: unknown, failure: TriggerFailure) {\n    try {\n      options.onError?.(error, failure);\n    } catch {\n      /* Observer failures must not change responses. */\n    }\n  }\n  async function handle(\n    route: TriggerRoute,\n    request: TriggerHttpRequest,\n  ): Promise<TriggerReply> {\n    let event: TriggerEvent;\n    try {\n      event = await route.source.verify(request, Date.now());\n    } catch (error) {\n      const payload = error instanceof TriggerPayloadError;\n      report(error, { path: route.path, stage: payload ? \"decode\" : \"verify\" });\n      return { status: payload ? 400 : 401 };\n    }\n    const failure = { path: route.path, delivery: event.delivery };\n    const reply = (outcome: TriggerOutcome, job?: string) =>\n      route.source.reply?.(outcome, job) ?? defaultReply(outcome, job);\n    let queued;\n    try {\n      const job = await route.on(event);\n      if (job === undefined) return reply(\"ignored\");\n      queued = triggerQueueRequest(\n        `trigger:${route.path}:${event.delivery}`,\n        job,\n      );\n    } catch (error) {\n      report(error, { ...failure, stage: \"route\" });\n      return { status: 500 };\n    }\n    try {\n      await options.queue.enqueue(queued);\n    } catch (error) {\n      report(error, { ...failure, stage: \"enqueue\" });\n      return { status: 503 };\n    }\n    return reply(\"accepted\", queued.id);\n  }\n  const server = createServer(\n    {\n      requestTimeout: triggerHttpTimeoutMs,\n      headersTimeout: triggerHttpTimeoutMs,\n      maxHeaderSize: triggerHttpMaxHeaderBytes,\n    },\n    async (request, response) => {\n      try {\n        const path = new URL(request.url ?? \"/\", \"http://trigger\").pathname;\n        const route = routes.get(path);\n        if (!route || request.method !== \"POST\") {\n          request.resume();\n          send(response, { status: route ? 405 : 404 });\n          return;\n        }\n        const content = await body(request, limit);\n        send(\n          response,\n          await handle(route, {\n            method: request.method,\n            path,\n            headers: headers(request),\n            body: content,\n          }),\n        );\n      } catch (error) {\n        request.resume();\n        response.setHeader(\"connection\", \"close\");\n        send(response, {\n          status: error instanceof RequestTooLarge ? 413 : 400,\n        });\n      }\n    },\n  );\n  server.setTimeout(triggerHttpTimeoutMs, (socket) => socket.destroy());\n  await new Promise<void>((resolve, reject) => {\n    server.once(\"error\", reject);\n    server.listen(options.port ?? 0, options.host ?? \"127.0.0.1\", resolve);\n  });\n  const address = server.address();\n  if (!address || typeof address === \"string\")\n    throw new Error(\"Trigger server address unavailable\");\n  const host =\n    address.family === \"IPv6\" ? `[${address.address}]` : address.address;\n  return {\n    url: `http://${host}:${address.port}`,\n    close: () =>\n      new Promise<void>((resolve, reject) => {\n        server.close((error) => (error ? reject(error) : resolve()));\n        server.closeIdleConnections();\n      }),\n  };\n}\n"]}

package/dist/infrastructure/trigger-server.types.d.ts

@@ -10,7 +10,7 @@ export interface TriggerRoute {
 }
 export interface TriggerFailure {
     readonly path: string;
-    readonly stage: "verify" | "route" | "enqueue";
+    readonly stage: "verify" | "decode" | "route" | "enqueue";
     readonly delivery?: string;
 }
 export interface TriggerServerOptions {

package/dist/infrastructure/trigger-server.types.js.map

@@ -1 +1 @@
-{"version":3,"file":"trigger-server.types.js","sourceRoot":"","sources":["../../src/infrastructure/trigger-server.types.ts"],"names":[],"mappings":"","sourcesContent":["import type { TaskQueue } from \"../domain/task-queue.types.ts\";\nimport type { TriggerJob } from \"../domain/trigger-job.types.ts\";\nimport type { TriggerEvent, TriggerSource } from \"../domain/trigger.types.ts\";\n\nexport interface TriggerRoute {\n  /** Exact request path, such as `/github`; part of each job identifier. */\n  readonly path: string;\n  readonly source: TriggerSource;\n  /** Maps a verified event to a job, or `undefined` to ignore it; must return promptly. */\n  on(\n    event: TriggerEvent,\n  ): TriggerJob | undefined | Promise<TriggerJob | undefined>;\n}\n\nexport interface TriggerFailure {\n  readonly path: string;\n  readonly stage: \"verify\" | \"route\" | \"enqueue\";\n  readonly delivery?: string;\n}\n\nexport interface TriggerServerOptions {\n  readonly queue: TaskQueue;\n  readonly routes: readonly TriggerRoute[];\n  /** Defaults to 127.0.0.1; expose through a TLS-terminating proxy. */\n  readonly host?: string;\n  readonly port?: number;\n  /** Request body limit; defaults to 1 MiB, at most 25 MiB. */\n  readonly maxBytes?: number;\n  /** Observes rejected or failed requests; never receives secrets. */\n  readonly onError?: (error: unknown, failure: TriggerFailure) => void;\n}\n\nexport interface TriggerServer {\n  readonly url: string;\n  close(): Promise<void>;\n}\n"]}
+{"version":3,"file":"trigger-server.types.js","sourceRoot":"","sources":["../../src/infrastructure/trigger-server.types.ts"],"names":[],"mappings":"","sourcesContent":["import type { TaskQueue } from \"../domain/task-queue.types.ts\";\nimport type { TriggerJob } from \"../domain/trigger-job.types.ts\";\nimport type { TriggerEvent, TriggerSource } from \"../domain/trigger.types.ts\";\n\nexport interface TriggerRoute {\n  /** Exact request path, such as `/github`; part of each job identifier. */\n  readonly path: string;\n  readonly source: TriggerSource;\n  /** Maps a verified event to a job, or `undefined` to ignore it; must return promptly. */\n  on(\n    event: TriggerEvent,\n  ): TriggerJob | undefined | Promise<TriggerJob | undefined>;\n}\n\nexport interface TriggerFailure {\n  readonly path: string;\n  readonly stage: \"verify\" | \"decode\" | \"route\" | \"enqueue\";\n  readonly delivery?: string;\n}\n\nexport interface TriggerServerOptions {\n  readonly queue: TaskQueue;\n  readonly routes: readonly TriggerRoute[];\n  /** Defaults to 127.0.0.1; expose through a TLS-terminating proxy. */\n  readonly host?: string;\n  readonly port?: number;\n  /** Request body limit; defaults to 1 MiB, at most 25 MiB. */\n  readonly maxBytes?: number;\n  /** Observes rejected or failed requests; never receives secrets. */\n  readonly onError?: (error: unknown, failure: TriggerFailure) => void;\n}\n\nexport interface TriggerServer {\n  readonly url: string;\n  close(): Promise<void>;\n}\n"]}

package/dist/infrastructure/workflow-checkpoint.constants.d.ts

@@ -1 +1,2 @@
 export declare const workflowCheckpointMaxBytes: number;
+export declare const workflowCheckpointReleaseAttempts = 2;

package/dist/infrastructure/workflow-checkpoint.constants.js

@@ -1,2 +1,3 @@
 export const workflowCheckpointMaxBytes = 16 * 1024 * 1024;
+export const workflowCheckpointReleaseAttempts = 2;
 //# sourceMappingURL=workflow-checkpoint.constants.js.map

package/dist/infrastructure/workflow-checkpoint.constants.js.map

@@ -1 +1 @@
-{"version":3,"file":"workflow-checkpoint.constants.js","sourceRoot":"","sources":["../../src/infrastructure/workflow-checkpoint.constants.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,0BAA0B,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC","sourcesContent":["export const workflowCheckpointMaxBytes = 16 * 1024 * 1024;\n"]}
+{"version":3,"file":"workflow-checkpoint.constants.js","sourceRoot":"","sources":["../../src/infrastructure/workflow-checkpoint.constants.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,0BAA0B,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;AAC3D,MAAM,CAAC,MAAM,iCAAiC,GAAG,CAAC,CAAC","sourcesContent":["export const workflowCheckpointMaxBytes = 16 * 1024 * 1024;\nexport const workflowCheckpointReleaseAttempts = 2;\n"]}

package/dist/infrastructure/workspace-lock.constants.d.ts

@@ -1,2 +1,3 @@
 export declare const workspaceLocksDirectory: string;
-export declare const workspaceLockAttempts = 100;
+export declare const workspaceRegistryStaleMs = 10000;
+export declare const workspaceRegistryPendingDeleteAttempts = 50;

package/dist/infrastructure/workspace-lock.constants.js

@@ -2,5 +2,6 @@ import { homedir, tmpdir, userInfo } from "node:os";
 import { createHash } from "node:crypto";
 import { join } from "node:path";
 export const workspaceLocksDirectory = join(tmpdir(), `outpost-path-locks-${createHash("sha256").update(`${userInfo().username}:${homedir()}`).digest("hex").slice(0, 24)}`);
-export const workspaceLockAttempts = 100;
+export const workspaceRegistryStaleMs = 10_000;
+export const workspaceRegistryPendingDeleteAttempts = 50;
 //# sourceMappingURL=workspace-lock.constants.js.map

package/dist/infrastructure/workspace-lock.constants.js.map

@@ -1 +1 @@
-{"version":3,"file":"workspace-lock.constants.js","sourceRoot":"","sources":["../../src/infrastructure/workspace-lock.constants.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AACpD,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,MAAM,CAAC,MAAM,uBAAuB,GAAG,IAAI,CACzC,MAAM,EAAE,EACR,sBAAsB,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,GAAG,QAAQ,EAAE,CAAC,QAAQ,IAAI,OAAO,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CACtH,CAAC;AACF,MAAM,CAAC,MAAM,qBAAqB,GAAG,GAAG,CAAC","sourcesContent":["import { homedir, tmpdir, userInfo } from \"node:os\";\nimport { createHash } from \"node:crypto\";\nimport { join } from \"node:path\";\n\nexport const workspaceLocksDirectory = join(\n  tmpdir(),\n  `outpost-path-locks-${createHash(\"sha256\").update(`${userInfo().username}:${homedir()}`).digest(\"hex\").slice(0, 24)}`,\n);\nexport const workspaceLockAttempts = 100;\n"]}
+{"version":3,"file":"workspace-lock.constants.js","sourceRoot":"","sources":["../../src/infrastructure/workspace-lock.constants.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AACpD,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,MAAM,CAAC,MAAM,uBAAuB,GAAG,IAAI,CACzC,MAAM,EAAE,EACR,sBAAsB,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,GAAG,QAAQ,EAAE,CAAC,QAAQ,IAAI,OAAO,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CACtH,CAAC;AACF,MAAM,CAAC,MAAM,wBAAwB,GAAG,MAAM,CAAC;AAC/C,MAAM,CAAC,MAAM,sCAAsC,GAAG,EAAE,CAAC","sourcesContent":["import { homedir, tmpdir, userInfo } from \"node:os\";\nimport { createHash } from \"node:crypto\";\nimport { join } from \"node:path\";\n\nexport const workspaceLocksDirectory = join(\n  tmpdir(),\n  `outpost-path-locks-${createHash(\"sha256\").update(`${userInfo().username}:${homedir()}`).digest(\"hex\").slice(0, 24)}`,\n);\nexport const workspaceRegistryStaleMs = 10_000;\nexport const workspaceRegistryPendingDeleteAttempts = 50;\n"]}

package/dist/infrastructure/workspace-lock.js

@@ -4,7 +4,7 @@ import { dirname, join, resolve } from "node:path";
 import { setTimeout } from "node:timers/promises";
 import { invariant } from "../domain/errors.js";
 import { inside } from "./files.js";
-import { workspaceLockAttempts, workspaceLocksDirectory, } from "./workspace-lock.constants.js";
+import { workspaceLocksDirectory, workspaceRegistryPendingDeleteAttempts, workspaceRegistryStaleMs, } from "./workspace-lock.constants.js";
 import { readInspectionFile } from "./inspection-file.js";
 export async function canonicalWorkspacePath(value) {
     const path = resolve(value);
@@ -25,26 +25,57 @@ async function withRegistry(action) {
         !info.isSymbolicLink() &&
         (process.getuid === undefined || info.uid === process.getuid()), "Unsafe workspace lock registry");
     const gate = join(workspaceLocksDirectory, "gate");
-    for (let attempt = 0; attempt < workspaceLockAttempts; attempt++) {
+    let observed;
+    let since = Date.now();
+    let pendingDeletes = 0;
+    for (;;) {
         try {
             await mkdir(gate, { mode: 0o700 });
         }
         catch (error) {
+            if (pendingDeletion(error) &&
+                ++pendingDeletes < workspaceRegistryPendingDeleteAttempts) {
+                await setTimeout(10);
+                continue;
+            }
             if (!(error instanceof Error &&
                 "code" in error &&
                 error.code === "EEXIST"))
                 throw error;
-            await setTimeout(10);
+            pendingDeletes = 0;
+            // A gate that keeps changing belongs to live holders; only an unchanged one is reported.
+            const current = await gateInstance(gate);
+            if (current !== observed)
+                since = Date.now();
+            observed = current;
+            if (current && Date.now() - since >= workspaceRegistryStaleMs)
+                throw new Error("Workspace lock registry is busy; inspect abandoned ownership before recovery");
+            await setTimeout(5 + Math.random() * 20);
             continue;
         }
         try {
             return await action();
         }
         finally {
-            await rm(gate, { recursive: true });
+            await rm(gate, { recursive: true, maxRetries: 5 });
         }
     }
-    throw new Error("Workspace lock registry is busy; inspect abandoned ownership before recovery");
+}
+async function gateInstance(gate) {
+    const info = await lstat(gate, { bigint: true }).catch((error) => {
+        if ((error instanceof Error && "code" in error && error.code === "ENOENT") ||
+            pendingDeletion(error))
+            return undefined;
+        throw error;
+    });
+    return info && `${info.dev}:${info.ino}:${info.birthtimeNs}:${info.ctimeNs}`;
+}
+// Windows reports EPERM while a just-released gate is pending deletion.
+function pendingDeletion(error) {
+    return (process.platform === "win32" &&
+        error instanceof Error &&
+        "code" in error &&
+        error.code === "EPERM");
 }
 function parseLock(value) {
     invariant(value &&
@@ -144,11 +175,18 @@ async function acquireWorkspacePath(value, writable, excludedDirectories = []) {
             if (existing.excludedDirectories?.some((excluded) => inside(excluded, directory)) ||
                 excludedDirectories.some((excluded) => inside(excluded, existing.directory)))
                 continue;
-            invariant(!(writable || existing.writable) ||
-                !(inside(directory, existing.directory) ||
-                    inside(existing.directory, directory) ||
-                    containsIdentity(identities.ancestors, existing.identity) ||
-                    containsIdentity(existing.ancestors, identities.identity)), "Workspace path overlaps an active writer");
+            if (!(writable || existing.writable))
+                continue;
+            // Recorded inodes count only while the locked path still resolves to them; deleted ones get reused.
+            const current = await pathIdentities(existing.directory);
+            const identity = containsIdentity(current.identity ? [current.identity] : [], existing.identity)
+                ? existing.identity
+                : undefined;
+            const ancestors = existing.ancestors?.filter((entry) => containsIdentity(current.ancestors, entry));
+            invariant(!(inside(directory, existing.directory) ||
+                inside(existing.directory, directory) ||
+                containsIdentity(identities.ancestors, identity) ||
+                containsIdentity(ancestors, identities.identity)), "Workspace path overlaps an active writer");
         }
         await writeFile(path, JSON.stringify({
             id,