@elie-laloum/outpost 2.0.0 → 3.0.0

package/dist/infrastructure/git/lock.js

@@ -1,36 +1,77 @@
 import { createHash, randomUUID } from "node:crypto";
-import { mkdir, open, readFile, rm } from "node:fs/promises";
+import { mkdir, open, rm } from "node:fs/promises";
 import { join } from "node:path";
 import { OutpostError } from "../../domain/errors.js";
-export async function lock(root, key) {
-    const folder = join(root, ".outpost", "locks");
-    await mkdir(folder, { recursive: true });
-    const path = join(folder, `${createHash("sha256").update(key).digest("hex").slice(0, 20)}.json`);
-    for (let attempt = 0; attempt < 2; attempt++) {
-        try {
-            const file = await open(path, "wx", 0o600);
-            await file.writeFile(JSON.stringify({ pid: process.pid, nonce: randomUUID() }));
-            await file.close();
-            return () => rm(path, { force: true });
-        }
-        catch (cause) {
-            if (cause.code !== "EEXIST")
-                throw cause;
-            const owner = JSON.parse(await readFile(path, "utf8"));
-            let alive = true;
-            try {
-                if (!owner.pid)
-                    throw new Error();
-                process.kill(owner.pid, 0);
-            }
-            catch (error) {
-                alive = error.code === "EPERM";
-            }
-            if (alive)
-                throw new OutpostError("conflict", `Workspace is already in use: ${key}`, { lock: path, pid: owner.pid });
+import { localProcessIdentity, observeOwnership } from "./process-identity.js";
+import { readInspectionFile } from "../inspection-file.js";
+import { lockInspectionDefaults } from "./lock-inspection.constants.js";
+export function lockPath(root, key) {
+    return join(root, ".outpost", "locks", `${createHash("sha256").update(key).digest("hex").slice(0, 20)}.json`);
+}
+async function readOwner(path) {
+    return JSON.parse((await readInspectionFile(path, lockInspectionDefaults.maxBytes)).toString("utf8"));
+}
+async function createLock(path) {
+    const file = await open(path, "wx", 0o600);
+    const nonce = randomUUID();
+    try {
+        await file.writeFile(JSON.stringify({
+            pid: process.pid,
+            nonce,
+            identity: await localProcessIdentity(),
+        }));
+    }
+    finally {
+        await file.close();
+    }
+    return async () => {
+        const current = await readOwner(path).catch(() => null);
+        if (current &&
+            typeof current === "object" &&
+            "nonce" in current &&
+            current.nonce === nonce)
             await rm(path, { force: true });
-        }
+    };
+}
+export async function lock(root, key) {
+    await mkdir(join(root, ".outpost", "locks"), { recursive: true });
+    const path = lockPath(root, key);
+    try {
+        return await createLock(path);
+    }
+    catch (cause) {
+        if (!(cause &&
+            typeof cause === "object" &&
+            "code" in cause &&
+            cause.code === "EEXIST"))
+            throw cause;
+    }
+    const conflict = () => new OutpostError("conflict", `Workspace is already in use or ownership is unknown: ${key}`, { lock: path });
+    // Serialize stale reclamation so another contender cannot unlink a new owner.
+    const releaseGuard = await createLock(`${path}.reclaim`).catch(() => {
+        throw conflict();
+    });
+    try {
+        const owner = await readOwner(path).catch(() => null);
+        const pid = owner && typeof owner === "object" && "pid" in owner
+            ? owner.pid
+            : undefined;
+        const identity = owner && typeof owner === "object" && "identity" in owner
+            ? owner.identity
+            : undefined;
+        const ownership = typeof pid === "number" &&
+            Number.isSafeInteger(pid) &&
+            pid > 0 &&
+            pid <= lockInspectionDefaults.maxPid
+            ? await observeOwnership(pid, identity)
+            : undefined;
+        if (ownership?.status !== "inactive")
+            throw conflict();
+        await rm(path, { force: true });
+        return await createLock(path);
+    }
+    finally {
+        await releaseGuard();
     }
-    throw new OutpostError("conflict", "Unable to acquire workspace lock");
 }
 //# sourceMappingURL=lock.js.map

package/dist/infrastructure/git/lock.js.map

@@ -1 +1 @@
-{"version":3,"file":"lock.js","sourceRoot":"","sources":["../../../src/infrastructure/git/lock.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACrD,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,kBAAkB,CAAC;AAC7D,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AAGtD,MAAM,CAAC,KAAK,UAAU,IAAI,CACxB,IAAY,EACZ,GAAW;IAEX,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,EAAE,UAAU,EAAE,OAAO,CAAC,CAAC;IAC/C,MAAM,KAAK,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACzC,MAAM,IAAI,GAAG,IAAI,CACf,MAAM,EACN,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CACtE,CAAC;IACF,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,CAAC,EAAE,OAAO,EAAE,EAAE,CAAC;QAC7C,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;YAC3C,MAAM,IAAI,CAAC,SAAS,CAClB,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,KAAK,EAAE,UAAU,EAAE,EAAE,CAAC,CAC1D,CAAC;YACF,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC;YACnB,OAAO,GAAG,EAAE,CAAC,EAAE,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACzC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;gBAAE,MAAM,KAAK,CAAC;YACpE,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAc,CAAC;YACpE,IAAI,KAAK,GAAG,IAAI,CAAC;YACjB,IAAI,CAAC;gBACH,IAAI,CAAC,KAAK,CAAC,GAAG;oBAAE,MAAM,IAAI,KAAK,EAAE,CAAC;gBAClC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;YAC7B,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,KAAK,GAAI,KAA+B,CAAC,IAAI,KAAK,OAAO,CAAC;YAC5D,CAAC;YACD,IAAI,KAAK;gBACP,MAAM,IAAI,YAAY,CACpB,UAAU,EACV,gCAAgC,GAAG,EAAE,EACrC,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,CAC/B,CAAC;YACJ,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAClC,CAAC;IACH,CAAC;IACD,MAAM,IAAI,YAAY,CAAC,UAAU,EAAE,kCAAkC,CAAC,CAAC;AACzE,CAAC","sourcesContent":["import { createHash, randomUUID } from \"node:crypto\";\nimport { mkdir, open, readFile, rm } from \"node:fs/promises\";\nimport { join } from \"node:path\";\nimport { OutpostError } from \"../../domain/errors.ts\";\nimport type { LockOwner } from \"./lock.types.ts\";\n\nexport async function lock(\n  root: string,\n  key: string,\n): Promise<() => Promise<void>> {\n  const folder = join(root, \".outpost\", \"locks\");\n  await mkdir(folder, { recursive: true });\n  const path = join(\n    folder,\n    `${createHash(\"sha256\").update(key).digest(\"hex\").slice(0, 20)}.json`,\n  );\n  for (let attempt = 0; attempt < 2; attempt++) {\n    try {\n      const file = await open(path, \"wx\", 0o600);\n      await file.writeFile(\n        JSON.stringify({ pid: process.pid, nonce: randomUUID() }),\n      );\n      await file.close();\n      return () => rm(path, { force: true });\n    } catch (cause) {\n      if ((cause as NodeJS.ErrnoException).code !== \"EEXIST\") throw cause;\n      const owner = JSON.parse(await readFile(path, \"utf8\")) as LockOwner;\n      let alive = true;\n      try {\n        if (!owner.pid) throw new Error();\n        process.kill(owner.pid, 0);\n      } catch (error) {\n        alive = (error as NodeJS.ErrnoException).code === \"EPERM\";\n      }\n      if (alive)\n        throw new OutpostError(\n          \"conflict\",\n          `Workspace is already in use: ${key}`,\n          { lock: path, pid: owner.pid },\n        );\n      await rm(path, { force: true });\n    }\n  }\n  throw new OutpostError(\"conflict\", \"Unable to acquire workspace lock\");\n}\n"]}
+{"version":3,"file":"lock.js","sourceRoot":"","sources":["../../../src/infrastructure/git/lock.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACrD,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,EAAE,MAAM,kBAAkB,CAAC;AACnD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AACtD,OAAO,EAAE,oBAAoB,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AAC/E,OAAO,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAC3D,OAAO,EAAE,sBAAsB,EAAE,MAAM,gCAAgC,CAAC;AAExE,MAAM,UAAU,QAAQ,CAAC,IAAY,EAAE,GAAW;IAChD,OAAO,IAAI,CACT,IAAI,EACJ,UAAU,EACV,OAAO,EACP,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CACtE,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,SAAS,CAAC,IAAY;IACnC,OAAO,IAAI,CAAC,KAAK,CACf,CAAC,MAAM,kBAAkB,CAAC,IAAI,EAAE,sBAAsB,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CACxE,MAAM,CACP,CACF,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,UAAU,CAAC,IAAY;IACpC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;IAC3C,MAAM,KAAK,GAAG,UAAU,EAAE,CAAC;IAC3B,IAAI,CAAC;QACH,MAAM,IAAI,CAAC,SAAS,CAClB,IAAI,CAAC,SAAS,CAAC;YACb,GAAG,EAAE,OAAO,CAAC,GAAG;YAChB,KAAK;YACL,QAAQ,EAAE,MAAM,oBAAoB,EAAE;SACvC,CAAC,CACH,CAAC;IACJ,CAAC;YAAS,CAAC;QACT,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC;IACrB,CAAC;IACD,OAAO,KAAK,IAAI,EAAE;QAChB,MAAM,OAAO,GAAG,MAAM,SAAS,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;QACxD,IACE,OAAO;YACP,OAAO,OAAO,KAAK,QAAQ;YAC3B,OAAO,IAAI,OAAO;YAClB,OAAO,CAAC,KAAK,KAAK,KAAK;YAEvB,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACpC,CAAC,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,IAAI,CACxB,IAAY,EACZ,GAAW;IAEX,MAAM,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,UAAU,EAAE,OAAO,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAClE,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IACjC,IAAI,CAAC;QACH,OAAO,MAAM,UAAU,CAAC,IAAI,CAAC,CAAC;IAChC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,CAAC,CACH,KAAK;YACL,OAAO,KAAK,KAAK,QAAQ;YACzB,MAAM,IAAI,KAAK;YACf,KAAK,CAAC,IAAI,KAAK,QAAQ,CACxB;YACC,MAAM,KAAK,CAAC;IAChB,CAAC;IACD,MAAM,QAAQ,GAAG,GAAG,EAAE,CACpB,IAAI,YAAY,CACd,UAAU,EACV,wDAAwD,GAAG,EAAE,EAC7D,EAAE,IAAI,EAAE,IAAI,EAAE,CACf,CAAC;IACJ,8EAA8E;IAC9E,MAAM,YAAY,GAAG,MAAM,UAAU,CAAC,GAAG,IAAI,UAAU,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE;QAClE,MAAM,QAAQ,EAAE,CAAC;IACnB,CAAC,CAAC,CAAC;IACH,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,MAAM,SAAS,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;QACtD,MAAM,GAAG,GACP,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,IAAI,KAAK;YAClD,CAAC,CAAC,KAAK,CAAC,GAAG;YACX,CAAC,CAAC,SAAS,CAAC;QAChB,MAAM,QAAQ,GACZ,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,UAAU,IAAI,KAAK;YACvD,CAAC,CAAC,KAAK,CAAC,QAAQ;YAChB,CAAC,CAAC,SAAS,CAAC;QAChB,MAAM,SAAS,GACb,OAAO,GAAG,KAAK,QAAQ;YACvB,MAAM,CAAC,aAAa,CAAC,GAAG,CAAC;YACzB,GAAG,GAAG,CAAC;YACP,GAAG,IAAI,sBAAsB,CAAC,MAAM;YAClC,CAAC,CAAC,MAAM,gBAAgB,CAAC,GAAG,EAAE,QAAQ,CAAC;YACvC,CAAC,CAAC,SAAS,CAAC;QAChB,IAAI,SAAS,EAAE,MAAM,KAAK,UAAU;YAAE,MAAM,QAAQ,EAAE,CAAC;QACvD,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAChC,OAAO,MAAM,UAAU,CAAC,IAAI,CAAC,CAAC;IAChC,CAAC;YAAS,CAAC;QACT,MAAM,YAAY,EAAE,CAAC;IACvB,CAAC;AACH,CAAC","sourcesContent":["import { createHash, randomUUID } from \"node:crypto\";\nimport { mkdir, open, rm } from \"node:fs/promises\";\nimport { join } from \"node:path\";\nimport { OutpostError } from \"../../domain/errors.ts\";\nimport { localProcessIdentity, observeOwnership } from \"./process-identity.ts\";\nimport { readInspectionFile } from \"../inspection-file.ts\";\nimport { lockInspectionDefaults } from \"./lock-inspection.constants.ts\";\n\nexport function lockPath(root: string, key: string): string {\n  return join(\n    root,\n    \".outpost\",\n    \"locks\",\n    `${createHash(\"sha256\").update(key).digest(\"hex\").slice(0, 20)}.json`,\n  );\n}\n\nasync function readOwner(path: string): Promise<unknown> {\n  return JSON.parse(\n    (await readInspectionFile(path, lockInspectionDefaults.maxBytes)).toString(\n      \"utf8\",\n    ),\n  );\n}\n\nasync function createLock(path: string): Promise<() => Promise<void>> {\n  const file = await open(path, \"wx\", 0o600);\n  const nonce = randomUUID();\n  try {\n    await file.writeFile(\n      JSON.stringify({\n        pid: process.pid,\n        nonce,\n        identity: await localProcessIdentity(),\n      }),\n    );\n  } finally {\n    await file.close();\n  }\n  return async () => {\n    const current = await readOwner(path).catch(() => null);\n    if (\n      current &&\n      typeof current === \"object\" &&\n      \"nonce\" in current &&\n      current.nonce === nonce\n    )\n      await rm(path, { force: true });\n  };\n}\n\nexport async function lock(\n  root: string,\n  key: string,\n): Promise<() => Promise<void>> {\n  await mkdir(join(root, \".outpost\", \"locks\"), { recursive: true });\n  const path = lockPath(root, key);\n  try {\n    return await createLock(path);\n  } catch (cause) {\n    if (!(\n      cause &&\n      typeof cause === \"object\" &&\n      \"code\" in cause &&\n      cause.code === \"EEXIST\"\n    ))\n      throw cause;\n  }\n  const conflict = () =>\n    new OutpostError(\n      \"conflict\",\n      `Workspace is already in use or ownership is unknown: ${key}`,\n      { lock: path },\n    );\n  // Serialize stale reclamation so another contender cannot unlink a new owner.\n  const releaseGuard = await createLock(`${path}.reclaim`).catch(() => {\n    throw conflict();\n  });\n  try {\n    const owner = await readOwner(path).catch(() => null);\n    const pid =\n      owner && typeof owner === \"object\" && \"pid\" in owner\n        ? owner.pid\n        : undefined;\n    const identity =\n      owner && typeof owner === \"object\" && \"identity\" in owner\n        ? owner.identity\n        : undefined;\n    const ownership =\n      typeof pid === \"number\" &&\n      Number.isSafeInteger(pid) &&\n      pid > 0 &&\n      pid <= lockInspectionDefaults.maxPid\n        ? await observeOwnership(pid, identity)\n        : undefined;\n    if (ownership?.status !== \"inactive\") throw conflict();\n    await rm(path, { force: true });\n    return await createLock(path);\n  } finally {\n    await releaseGuard();\n  }\n}\n"]}

package/dist/infrastructure/git/process-identity.d.ts

@@ -0,0 +1,3 @@
+import type { LocalProcessIdentity, LockOwnership } from "./process-identity.types.ts";
+export declare function localProcessIdentity(pid?: number): Promise<LocalProcessIdentity | undefined>;
+export declare function observeOwnership(pid: number, identity: unknown): Promise<LockOwnership>;

package/dist/infrastructure/git/process-identity.js

@@ -0,0 +1,73 @@
+import { createHash } from "node:crypto";
+import { readFile, readlink } from "node:fs/promises";
+export async function localProcessIdentity(pid = process.pid) {
+    if (process.platform !== "linux")
+        return undefined;
+    try {
+        const [machine, boot, namespace, stat] = await Promise.all([
+            readFile("/etc/machine-id", "utf8"),
+            readFile("/proc/sys/kernel/random/boot_id", "utf8"),
+            readlink(`/proc/${pid}/ns/pid`),
+            readFile(`/proc/${pid}/stat`, "utf8"),
+        ]);
+        const started = stat.slice(stat.lastIndexOf(")") + 2).split(" ")[19];
+        if (!machine.trim() || !boot.trim() || !started || !/^\d+$/.test(started))
+            return undefined;
+        return {
+            host: createHash("sha256").update(machine.trim()).digest("hex"),
+            boot: boot.trim(),
+            namespace,
+            started,
+        };
+    }
+    catch {
+        return undefined;
+    }
+}
+function validIdentity(value) {
+    if (!value || typeof value !== "object")
+        return false;
+    return ("host" in value &&
+        typeof value.host === "string" &&
+        value.host.length > 0 &&
+        "boot" in value &&
+        typeof value.boot === "string" &&
+        value.boot.length > 0 &&
+        "namespace" in value &&
+        typeof value.namespace === "string" &&
+        value.namespace.length > 0 &&
+        "started" in value &&
+        typeof value.started === "string" &&
+        /^\d+$/.test(value.started));
+}
+export async function observeOwnership(pid, identity) {
+    if (!validIdentity(identity))
+        return { status: "unknown", reason: "LEGACY_OR_INVALID_IDENTITY" };
+    const local = await localProcessIdentity();
+    if (!local)
+        return { status: "unknown", reason: "LOCAL_IDENTITY_UNAVAILABLE" };
+    if (identity.host !== local.host)
+        return { status: "unknown", reason: "OTHER_HOST" };
+    if (identity.boot !== local.boot)
+        return { status: "unknown", reason: "OTHER_BOOT" };
+    if (identity.namespace !== local.namespace)
+        return { status: "unknown", reason: "OTHER_PID_NAMESPACE" };
+    try {
+        process.kill(pid, 0);
+    }
+    catch (error) {
+        if (error &&
+            typeof error === "object" &&
+            "code" in error &&
+            error.code === "ESRCH")
+            return { status: "inactive", reason: "PROCESS_EXITED" };
+        return { status: "unknown", reason: "PROCESS_INACCESSIBLE" };
+    }
+    const current = await localProcessIdentity(pid);
+    if (!current)
+        return { status: "unknown", reason: "PROCESS_IDENTITY_UNAVAILABLE" };
+    if (current.started !== identity.started)
+        return { status: "unknown", reason: "PID_REUSED" };
+    return { status: "active", reason: "LOCAL_IDENTITY_MATCH" };
+}
+//# sourceMappingURL=process-identity.js.map

package/dist/infrastructure/git/process-identity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"process-identity.js","sourceRoot":"","sources":["../../../src/infrastructure/git/process-identity.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAMtD,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,GAAG,GAAG,OAAO,CAAC,GAAG;IAEjB,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO;QAAE,OAAO,SAAS,CAAC;IACnD,IAAI,CAAC;QACH,MAAM,CAAC,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YACzD,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC;YACnC,QAAQ,CAAC,iCAAiC,EAAE,MAAM,CAAC;YACnD,QAAQ,CAAC,SAAS,GAAG,SAAS,CAAC;YAC/B,QAAQ,CAAC,SAAS,GAAG,OAAO,EAAE,MAAM,CAAC;SACtC,CAAC,CAAC;QACH,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC;QACrE,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC;YACvE,OAAO,SAAS,CAAC;QACnB,OAAO;YACL,IAAI,EAAE,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;YAC/D,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE;YACjB,SAAS;YACT,OAAO;SACR,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,SAAS,aAAa,CAAC,KAAc;IACnC,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IACtD,OAAO,CACL,MAAM,IAAI,KAAK;QACf,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ;QAC9B,KAAK,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC;QACrB,MAAM,IAAI,KAAK;QACf,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ;QAC9B,KAAK,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC;QACrB,WAAW,IAAI,KAAK;QACpB,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ;QACnC,KAAK,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC;QAC1B,SAAS,IAAI,KAAK;QAClB,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ;QACjC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAC5B,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,GAAW,EACX,QAAiB;IAEjB,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC;QAC1B,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,4BAA4B,EAAE,CAAC;IACrE,MAAM,KAAK,GAAG,MAAM,oBAAoB,EAAE,CAAC;IAC3C,IAAI,CAAC,KAAK;QACR,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,4BAA4B,EAAE,CAAC;IACrE,IAAI,QAAQ,CAAC,IAAI,KAAK,KAAK,CAAC,IAAI;QAC9B,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC;IACrD,IAAI,QAAQ,CAAC,IAAI,KAAK,KAAK,CAAC,IAAI;QAC9B,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC;IACrD,IAAI,QAAQ,CAAC,SAAS,KAAK,KAAK,CAAC,SAAS;QACxC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,qBAAqB,EAAE,CAAC;IAC9D,IAAI,CAAC;QACH,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;IACvB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IACE,KAAK;YACL,OAAO,KAAK,KAAK,QAAQ;YACzB,MAAM,IAAI,KAAK;YACf,KAAK,CAAC,IAAI,KAAK,OAAO;YAEtB,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,gBAAgB,EAAE,CAAC;QAC1D,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,sBAAsB,EAAE,CAAC;IAC/D,CAAC;IACD,MAAM,OAAO,GAAG,MAAM,oBAAoB,CAAC,GAAG,CAAC,CAAC;IAChD,IAAI,CAAC,OAAO;QACV,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,8BAA8B,EAAE,CAAC;IACvE,IAAI,OAAO,CAAC,OAAO,KAAK,QAAQ,CAAC,OAAO;QACtC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC;IACrD,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,sBAAsB,EAAE,CAAC;AAC9D,CAAC","sourcesContent":["import { createHash } from \"node:crypto\";\nimport { readFile, readlink } from \"node:fs/promises\";\nimport type {\n  LocalProcessIdentity,\n  LockOwnership,\n} from \"./process-identity.types.ts\";\n\nexport async function localProcessIdentity(\n  pid = process.pid,\n): Promise<LocalProcessIdentity | undefined> {\n  if (process.platform !== \"linux\") return undefined;\n  try {\n    const [machine, boot, namespace, stat] = await Promise.all([\n      readFile(\"/etc/machine-id\", \"utf8\"),\n      readFile(\"/proc/sys/kernel/random/boot_id\", \"utf8\"),\n      readlink(`/proc/${pid}/ns/pid`),\n      readFile(`/proc/${pid}/stat`, \"utf8\"),\n    ]);\n    const started = stat.slice(stat.lastIndexOf(\")\") + 2).split(\" \")[19];\n    if (!machine.trim() || !boot.trim() || !started || !/^\\d+$/.test(started))\n      return undefined;\n    return {\n      host: createHash(\"sha256\").update(machine.trim()).digest(\"hex\"),\n      boot: boot.trim(),\n      namespace,\n      started,\n    };\n  } catch {\n    return undefined;\n  }\n}\n\nfunction validIdentity(value: unknown): value is LocalProcessIdentity {\n  if (!value || typeof value !== \"object\") return false;\n  return (\n    \"host\" in value &&\n    typeof value.host === \"string\" &&\n    value.host.length > 0 &&\n    \"boot\" in value &&\n    typeof value.boot === \"string\" &&\n    value.boot.length > 0 &&\n    \"namespace\" in value &&\n    typeof value.namespace === \"string\" &&\n    value.namespace.length > 0 &&\n    \"started\" in value &&\n    typeof value.started === \"string\" &&\n    /^\\d+$/.test(value.started)\n  );\n}\n\nexport async function observeOwnership(\n  pid: number,\n  identity: unknown,\n): Promise<LockOwnership> {\n  if (!validIdentity(identity))\n    return { status: \"unknown\", reason: \"LEGACY_OR_INVALID_IDENTITY\" };\n  const local = await localProcessIdentity();\n  if (!local)\n    return { status: \"unknown\", reason: \"LOCAL_IDENTITY_UNAVAILABLE\" };\n  if (identity.host !== local.host)\n    return { status: \"unknown\", reason: \"OTHER_HOST\" };\n  if (identity.boot !== local.boot)\n    return { status: \"unknown\", reason: \"OTHER_BOOT\" };\n  if (identity.namespace !== local.namespace)\n    return { status: \"unknown\", reason: \"OTHER_PID_NAMESPACE\" };\n  try {\n    process.kill(pid, 0);\n  } catch (error) {\n    if (\n      error &&\n      typeof error === \"object\" &&\n      \"code\" in error &&\n      error.code === \"ESRCH\"\n    )\n      return { status: \"inactive\", reason: \"PROCESS_EXITED\" };\n    return { status: \"unknown\", reason: \"PROCESS_INACCESSIBLE\" };\n  }\n  const current = await localProcessIdentity(pid);\n  if (!current)\n    return { status: \"unknown\", reason: \"PROCESS_IDENTITY_UNAVAILABLE\" };\n  if (current.started !== identity.started)\n    return { status: \"unknown\", reason: \"PID_REUSED\" };\n  return { status: \"active\", reason: \"LOCAL_IDENTITY_MATCH\" };\n}\n"]}

package/dist/infrastructure/git/process-identity.types.d.ts

@@ -0,0 +1,10 @@
+export interface LocalProcessIdentity {
+    readonly host: string;
+    readonly boot: string;
+    readonly namespace: string;
+    readonly started: string;
+}
+export interface LockOwnership {
+    readonly status: "active" | "inactive" | "unknown";
+    readonly reason: string;
+}

package/dist/infrastructure/git/process-identity.types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=process-identity.types.js.map

package/dist/infrastructure/git/process-identity.types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"process-identity.types.js","sourceRoot":"","sources":["../../../src/infrastructure/git/process-identity.types.ts"],"names":[],"mappings":"","sourcesContent":["export interface LocalProcessIdentity {\n  readonly host: string;\n  readonly boot: string;\n  readonly namespace: string;\n  readonly started: string;\n}\nexport interface LockOwnership {\n  readonly status: \"active\" | \"inactive\" | \"unknown\";\n  readonly reason: string;\n}\n"]}

package/dist/infrastructure/git/verification-command.d.ts

@@ -0,0 +1 @@
+export declare function verificationGit(directory: string, args: readonly string[]): Promise<string>;

package/dist/infrastructure/git/verification-command.js

@@ -0,0 +1,36 @@
+import { execFile } from "node:child_process";
+import { promisify } from "node:util";
+import { gitDefaults } from "./git.constants.js";
+export async function verificationGit(directory, args) {
+    const environment = Object.fromEntries(Object.entries(process.env).filter(([key]) => !key.toUpperCase().startsWith("GIT_")));
+    const result = await promisify(execFile)("git", [
+        "-c",
+        `core.hooksPath=${process.platform === "win32" ? "NUL" : "/dev/null"}`,
+        "-c",
+        "core.fsmonitor=false",
+        "-c",
+        "maintenance.auto=false",
+        "-c",
+        "gc.auto=0",
+        ...args,
+    ], {
+        cwd: directory,
+        env: {
+            ...environment,
+            GIT_CONFIG_NOSYSTEM: "1",
+            GIT_CONFIG_GLOBAL: process.platform === "win32" ? "NUL" : "/dev/null",
+            GIT_ATTR_NOSYSTEM: "1",
+            GIT_NO_LAZY_FETCH: "1",
+            GIT_ALLOW_PROTOCOL: "file",
+            GIT_TERMINAL_PROMPT: "0",
+            GIT_OPTIONAL_LOCKS: "0",
+            LC_ALL: "C",
+        },
+        timeout: gitDefaults.deadlineMs,
+        maxBuffer: gitDefaults.retainBytes,
+        encoding: "utf8",
+        windowsHide: true,
+    });
+    return result.stdout;
+}
+//# sourceMappingURL=verification-command.js.map

package/dist/infrastructure/git/verification-command.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"verification-command.js","sourceRoot":"","sources":["../../../src/infrastructure/git/verification-command.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AACtC,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAEjD,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,SAAiB,EACjB,IAAuB;IAEvB,MAAM,WAAW,GAAG,MAAM,CAAC,WAAW,CACpC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,CAChC,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC,CACjD,CACF,CAAC;IACF,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,QAAQ,CAAC,CACtC,KAAK,EACL;QACE,IAAI;QACJ,kBAAkB,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,WAAW,EAAE;QACtE,IAAI;QACJ,sBAAsB;QACtB,IAAI;QACJ,wBAAwB;QACxB,IAAI;QACJ,WAAW;QACX,GAAG,IAAI;KACR,EACD;QACE,GAAG,EAAE,SAAS;QACd,GAAG,EAAE;YACH,GAAG,WAAW;YACd,mBAAmB,EAAE,GAAG;YACxB,iBAAiB,EAAE,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,WAAW;YACrE,iBAAiB,EAAE,GAAG;YACtB,iBAAiB,EAAE,GAAG;YACtB,kBAAkB,EAAE,MAAM;YAC1B,mBAAmB,EAAE,GAAG;YACxB,kBAAkB,EAAE,GAAG;YACvB,MAAM,EAAE,GAAG;SACZ;QACD,OAAO,EAAE,WAAW,CAAC,UAAU;QAC/B,SAAS,EAAE,WAAW,CAAC,WAAW;QAClC,QAAQ,EAAE,MAAM;QAChB,WAAW,EAAE,IAAI;KAClB,CACF,CAAC;IACF,OAAO,MAAM,CAAC,MAAM,CAAC;AACvB,CAAC","sourcesContent":["import { execFile } from \"node:child_process\";\nimport { promisify } from \"node:util\";\nimport { gitDefaults } from \"./git.constants.ts\";\n\nexport async function verificationGit(\n  directory: string,\n  args: readonly string[],\n): Promise<string> {\n  const environment = Object.fromEntries(\n    Object.entries(process.env).filter(\n      ([key]) => !key.toUpperCase().startsWith(\"GIT_\"),\n    ),\n  );\n  const result = await promisify(execFile)(\n    \"git\",\n    [\n      \"-c\",\n      `core.hooksPath=${process.platform === \"win32\" ? \"NUL\" : \"/dev/null\"}`,\n      \"-c\",\n      \"core.fsmonitor=false\",\n      \"-c\",\n      \"maintenance.auto=false\",\n      \"-c\",\n      \"gc.auto=0\",\n      ...args,\n    ],\n    {\n      cwd: directory,\n      env: {\n        ...environment,\n        GIT_CONFIG_NOSYSTEM: \"1\",\n        GIT_CONFIG_GLOBAL: process.platform === \"win32\" ? \"NUL\" : \"/dev/null\",\n        GIT_ATTR_NOSYSTEM: \"1\",\n        GIT_NO_LAZY_FETCH: \"1\",\n        GIT_ALLOW_PROTOCOL: \"file\",\n        GIT_TERMINAL_PROMPT: \"0\",\n        GIT_OPTIONAL_LOCKS: \"0\",\n        LC_ALL: \"C\",\n      },\n      timeout: gitDefaults.deadlineMs,\n      maxBuffer: gitDefaults.retainBytes,\n      encoding: \"utf8\",\n      windowsHide: true,\n    },\n  );\n  return result.stdout;\n}\n"]}

package/dist/infrastructure/git/workspace-lease.js

@@ -45,6 +45,7 @@ export function workspaceLease(record, options, unlock) {
                         "status",
                         "--porcelain",
                         "--untracked-files=normal",
+                        "--ignored",
                     ]);
                     if (dirty.trim())
                         return { retainedDirectory: workdir };

package/dist/infrastructure/git/workspace-lease.js.map

@@ -1 +1 @@
-{"version":3,"file":"workspace-lease.js","sourceRoot":"","sources":["../../../src/infrastructure/git/workspace-lease.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AAKtD,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AACrC,OAAO,EAAE,GAAG,EAAE,MAAM,cAAc,CAAC;AACnC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAMjC,MAAM,UAAU,cAAc,CAC5B,MAAuB,EACvB,OAAgC,EAChC,MAA2B;IAE3B,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,GAAG,MAAM,CAAC;IAC9E,IAAI,QAAuC,CAAC;IAC5C,OAAO;QACL,GAAG,MAAM;QACT,KAAK,CAAC,SAAS;YACb,IAAI,MAAM,CAAC,IAAI,KAAK,WAAW;gBAAE,OAAO;YACxC,MAAM,OAAO,GAAG,CACd,MAAM,GAAG,CAAC,UAAU,EAAE,CAAC,cAAc,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC,CAC3D,CAAC,IAAI,EAAE,CAAC;YACT,IAAI,OAAO,KAAK,UAAU;gBACxB,MAAM,IAAI,YAAY,CACpB,UAAU,EACV,oCAAoC,EACpC,EAAE,QAAQ,EAAE,UAAU,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,CACtD,CAAC;YACJ,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,UAAU,EAAE,SAAS,UAAU,EAAE,CAAC,CAAC;YACnE,IAAI,CAAC;gBACH,MAAM,GAAG,CACP,UAAU,EACV,CAAC,OAAO,EAAE,WAAW,EAAE,MAAM,CAAC,EAC9B,OAAO,CAAC,MAAM,EAAE,OAAO,CACxB,CAAC;YACJ,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,IAAI,YAAY,CACpB,UAAU,EACV,kDAAkD,EAClD,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,EAAE,EAC9B,KAAK,CACN,CAAC;YACJ,CAAC;oBAAS,CAAC;gBACT,MAAM,YAAY,EAAE,CAAC;YACvB,CAAC;QACH,CAAC;QACD,OAAO,CAAC,QAAQ,GAAG,KAAK;YACtB,IAAI,QAAQ;gBAAE,OAAO,QAAQ,CAAC;YAC9B,QAAQ,GAAG,CAAC,KAAK,IAAI,EAAE;gBACrB,IAAI,CAAC;oBACH,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS;wBAAE,OAAO,EAAE,CAAC;oBACzC,IAAI,QAAQ;wBAAE,OAAO,EAAE,iBAAiB,EAAE,OAAO,EAAE,CAAC;oBACpD,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,OAAO,EAAE;wBAClC,cAAc;wBACd,SAAS;wBACT,MAAM;qBACP,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;oBACnB,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE;wBAAE,OAAO,EAAE,iBAAiB,EAAE,OAAO,EAAE,CAAC;oBAC5D,MAAM,KAAK,GAAG,MAAM,GAAG,CAAC,OAAO,EAAE;wBAC/B,QAAQ;wBACR,aAAa;wBACb,0BAA0B;qBAC3B,CAAC,CAAC;oBACH,IAAI,KAAK,CAAC,IAAI,EAAE;wBAAE,OAAO,EAAE,iBAAiB,EAAE,OAAO,EAAE,CAAC;oBACxD,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,EAAE,UAAU,EAAE,YAAY,CAAC,EAAE,OAAO,CAAC;wBAC9D,MAAM,IAAI,YAAY,CACpB,WAAW,EACX,2CAA2C,CAC5C,CAAC;oBACJ,MAAM,GAAG,CAAC,UAAU,EAAE,CAAC,UAAU,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC;oBACvD,IAAI,MAAM,CAAC,IAAI,KAAK,WAAW;wBAC7B,MAAM,GAAG,CAAC,UAAU,EAAE,CAAC,QAAQ,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,KAAK,CACnD,GAAG,EAAE,CAAC,SAAS,CAChB,CAAC;oBACJ,OAAO,EAAE,CAAC;gBACZ,CAAC;wBAAS,CAAC;oBACT,MAAM,MAAM,EAAE,CAAC;gBACjB,CAAC;YACH,CAAC,CAAC,EAAE,CAAC;YACL,OAAO,QAAQ,CAAC;QAClB,CAAC;KACF,CAAC;AACJ,CAAC","sourcesContent":["import { join } from \"node:path\";\nimport { OutpostError } from \"../../domain/errors.ts\";\nimport type {\n  Disposal,\n  WorkspaceRecord,\n} from \"../../domain/workspace.types.ts\";\nimport { inside } from \"../files.ts\";\nimport { git } from \"./command.ts\";\nimport { lock } from \"./lock.ts\";\nimport type {\n  AcquireWorkspaceOptions,\n  WorkspaceLease,\n} from \"./workspace.types.ts\";\n\nexport function workspaceLease(\n  record: WorkspaceRecord,\n  options: AcquireWorkspaceOptions,\n  unlock: () => Promise<void>,\n): WorkspaceLease {\n  const { policy, repository, baseBranch, branch, directory: workdir } = record;\n  let disposal: Promise<Disposal> | undefined;\n  return {\n    ...record,\n    async integrate() {\n      if (policy.mode !== \"integrate\") return;\n      const current = (\n        await git(repository, [\"symbolic-ref\", \"--short\", \"HEAD\"])\n      ).trim();\n      if (current !== baseBranch)\n        throw new OutpostError(\n          \"conflict\",\n          \"Host branch changed during the job\",\n          { expected: baseBranch, current, directory: workdir },\n        );\n      const releaseMerge = await lock(repository, `merge:${baseBranch}`);\n      try {\n        await git(\n          repository,\n          [\"merge\", \"--no-edit\", branch],\n          options.limits?.mergeMs,\n        );\n      } catch (cause) {\n        throw new OutpostError(\n          \"conflict\",\n          \"Automatic integration failed; workspace retained\",\n          { directory: workdir, branch },\n          cause,\n        );\n      } finally {\n        await releaseMerge();\n      }\n    },\n    dispose(preserve = false) {\n      if (disposal) return disposal;\n      disposal = (async () => {\n        try {\n          if (policy.mode === \"current\") return {};\n          if (preserve) return { retainedDirectory: workdir };\n          const attached = await git(workdir, [\n            \"symbolic-ref\",\n            \"--quiet\",\n            \"HEAD\",\n          ]).catch(() => \"\");\n          if (!attached.trim()) return { retainedDirectory: workdir };\n          const dirty = await git(workdir, [\n            \"status\",\n            \"--porcelain\",\n            \"--untracked-files=normal\",\n          ]);\n          if (dirty.trim()) return { retainedDirectory: workdir };\n          if (!inside(join(repository, \".outpost\", \"workspaces\"), workdir))\n            throw new OutpostError(\n              \"workspace\",\n              \"Refusing to remove an unmanaged workspace\",\n            );\n          await git(repository, [\"worktree\", \"remove\", workdir]);\n          if (policy.mode === \"integrate\")\n            await git(repository, [\"branch\", \"-d\", branch]).catch(\n              () => undefined,\n            );\n          return {};\n        } finally {\n          await unlock();\n        }\n      })();\n      return disposal;\n    },\n  };\n}\n"]}
+{"version":3,"file":"workspace-lease.js","sourceRoot":"","sources":["../../../src/infrastructure/git/workspace-lease.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AAKtD,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AACrC,OAAO,EAAE,GAAG,EAAE,MAAM,cAAc,CAAC;AACnC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAMjC,MAAM,UAAU,cAAc,CAC5B,MAAuB,EACvB,OAAgC,EAChC,MAA2B;IAE3B,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,GAAG,MAAM,CAAC;IAC9E,IAAI,QAAuC,CAAC;IAC5C,OAAO;QACL,GAAG,MAAM;QACT,KAAK,CAAC,SAAS;YACb,IAAI,MAAM,CAAC,IAAI,KAAK,WAAW;gBAAE,OAAO;YACxC,MAAM,OAAO,GAAG,CACd,MAAM,GAAG,CAAC,UAAU,EAAE,CAAC,cAAc,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC,CAC3D,CAAC,IAAI,EAAE,CAAC;YACT,IAAI,OAAO,KAAK,UAAU;gBACxB,MAAM,IAAI,YAAY,CACpB,UAAU,EACV,oCAAoC,EACpC,EAAE,QAAQ,EAAE,UAAU,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,CACtD,CAAC;YACJ,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,UAAU,EAAE,SAAS,UAAU,EAAE,CAAC,CAAC;YACnE,IAAI,CAAC;gBACH,MAAM,GAAG,CACP,UAAU,EACV,CAAC,OAAO,EAAE,WAAW,EAAE,MAAM,CAAC,EAC9B,OAAO,CAAC,MAAM,EAAE,OAAO,CACxB,CAAC;YACJ,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,IAAI,YAAY,CACpB,UAAU,EACV,kDAAkD,EAClD,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,EAAE,EAC9B,KAAK,CACN,CAAC;YACJ,CAAC;oBAAS,CAAC;gBACT,MAAM,YAAY,EAAE,CAAC;YACvB,CAAC;QACH,CAAC;QACD,OAAO,CAAC,QAAQ,GAAG,KAAK;YACtB,IAAI,QAAQ;gBAAE,OAAO,QAAQ,CAAC;YAC9B,QAAQ,GAAG,CAAC,KAAK,IAAI,EAAE;gBACrB,IAAI,CAAC;oBACH,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS;wBAAE,OAAO,EAAE,CAAC;oBACzC,IAAI,QAAQ;wBAAE,OAAO,EAAE,iBAAiB,EAAE,OAAO,EAAE,CAAC;oBACpD,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,OAAO,EAAE;wBAClC,cAAc;wBACd,SAAS;wBACT,MAAM;qBACP,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;oBACnB,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE;wBAAE,OAAO,EAAE,iBAAiB,EAAE,OAAO,EAAE,CAAC;oBAC5D,MAAM,KAAK,GAAG,MAAM,GAAG,CAAC,OAAO,EAAE;wBAC/B,QAAQ;wBACR,aAAa;wBACb,0BAA0B;wBAC1B,WAAW;qBACZ,CAAC,CAAC;oBACH,IAAI,KAAK,CAAC,IAAI,EAAE;wBAAE,OAAO,EAAE,iBAAiB,EAAE,OAAO,EAAE,CAAC;oBACxD,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,EAAE,UAAU,EAAE,YAAY,CAAC,EAAE,OAAO,CAAC;wBAC9D,MAAM,IAAI,YAAY,CACpB,WAAW,EACX,2CAA2C,CAC5C,CAAC;oBACJ,MAAM,GAAG,CAAC,UAAU,EAAE,CAAC,UAAU,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC;oBACvD,IAAI,MAAM,CAAC,IAAI,KAAK,WAAW;wBAC7B,MAAM,GAAG,CAAC,UAAU,EAAE,CAAC,QAAQ,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,KAAK,CACnD,GAAG,EAAE,CAAC,SAAS,CAChB,CAAC;oBACJ,OAAO,EAAE,CAAC;gBACZ,CAAC;wBAAS,CAAC;oBACT,MAAM,MAAM,EAAE,CAAC;gBACjB,CAAC;YACH,CAAC,CAAC,EAAE,CAAC;YACL,OAAO,QAAQ,CAAC;QAClB,CAAC;KACF,CAAC;AACJ,CAAC","sourcesContent":["import { join } from \"node:path\";\nimport { OutpostError } from \"../../domain/errors.ts\";\nimport type {\n  Disposal,\n  WorkspaceRecord,\n} from \"../../domain/workspace.types.ts\";\nimport { inside } from \"../files.ts\";\nimport { git } from \"./command.ts\";\nimport { lock } from \"./lock.ts\";\nimport type {\n  AcquireWorkspaceOptions,\n  WorkspaceLease,\n} from \"./workspace.types.ts\";\n\nexport function workspaceLease(\n  record: WorkspaceRecord,\n  options: AcquireWorkspaceOptions,\n  unlock: () => Promise<void>,\n): WorkspaceLease {\n  const { policy, repository, baseBranch, branch, directory: workdir } = record;\n  let disposal: Promise<Disposal> | undefined;\n  return {\n    ...record,\n    async integrate() {\n      if (policy.mode !== \"integrate\") return;\n      const current = (\n        await git(repository, [\"symbolic-ref\", \"--short\", \"HEAD\"])\n      ).trim();\n      if (current !== baseBranch)\n        throw new OutpostError(\n          \"conflict\",\n          \"Host branch changed during the job\",\n          { expected: baseBranch, current, directory: workdir },\n        );\n      const releaseMerge = await lock(repository, `merge:${baseBranch}`);\n      try {\n        await git(\n          repository,\n          [\"merge\", \"--no-edit\", branch],\n          options.limits?.mergeMs,\n        );\n      } catch (cause) {\n        throw new OutpostError(\n          \"conflict\",\n          \"Automatic integration failed; workspace retained\",\n          { directory: workdir, branch },\n          cause,\n        );\n      } finally {\n        await releaseMerge();\n      }\n    },\n    dispose(preserve = false) {\n      if (disposal) return disposal;\n      disposal = (async () => {\n        try {\n          if (policy.mode === \"current\") return {};\n          if (preserve) return { retainedDirectory: workdir };\n          const attached = await git(workdir, [\n            \"symbolic-ref\",\n            \"--quiet\",\n            \"HEAD\",\n          ]).catch(() => \"\");\n          if (!attached.trim()) return { retainedDirectory: workdir };\n          const dirty = await git(workdir, [\n            \"status\",\n            \"--porcelain\",\n            \"--untracked-files=normal\",\n            \"--ignored\",\n          ]);\n          if (dirty.trim()) return { retainedDirectory: workdir };\n          if (!inside(join(repository, \".outpost\", \"workspaces\"), workdir))\n            throw new OutpostError(\n              \"workspace\",\n              \"Refusing to remove an unmanaged workspace\",\n            );\n          await git(repository, [\"worktree\", \"remove\", workdir]);\n          if (policy.mode === \"integrate\")\n            await git(repository, [\"branch\", \"-d\", branch]).catch(\n              () => undefined,\n            );\n          return {};\n        } finally {\n          await unlock();\n        }\n      })();\n      return disposal;\n    },\n  };\n}\n"]}

package/dist/infrastructure/git/workspace.js

@@ -59,7 +59,11 @@ export async function acquireWorkspace(options) {
     }
     catch (error) {
         if (created) {
-            const clean = await git(workdir, ["status", "--porcelain"]).then((output) => !output.trim(), () => false);
+            const clean = await git(workdir, [
+                "status",
+                "--porcelain",
+                "--ignored",
+            ]).then((output) => !output.trim(), () => false);
             if (clean && inside(join(repository, ".outpost", "workspaces"), workdir))
                 await git(repository, ["worktree", "remove", workdir]).catch(() => undefined);
             else

package/dist/infrastructure/git/workspace.js.map

@@ -1 +1 @@
-{"version":3,"file":"workspace.js","sourceRoot":"","sources":["../../../src/infrastructure/git/workspace.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AACtE,OAAO,EAAE,YAAY,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AACnD,OAAO,EAAE,GAAG,EAAE,MAAM,cAAc,CAAC;AACnC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AACxD,OAAO,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AACpD,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAMtD,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,OAAgC;IAEhC,MAAM,UAAU,GAAG,MAAM,iBAAiB,CAAC,OAAO,CAAC,CAAC;IACpD,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;IACrD,MAAM,UAAU,GAAG,CACjB,MAAM,GAAG,CAAC,UAAU,EAAE,CAAC,cAAc,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC,KAAK,CACzE,GAAG,EAAE,CAAC,EAAE,CACT,CACF,CAAC,IAAI,EAAE,CAAC;IACT,IAAI,MAAM,CAAC,IAAI,KAAK,WAAW,IAAI,CAAC,UAAU;QAC5C,MAAM,IAAI,YAAY,CACpB,WAAW,EACX,wDAAwD,CACzD,CAAC;IACJ,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS,IAAI,OAAO,CAAC,MAAM,EAAE,MAAM;QACrD,MAAM,IAAI,YAAY,CACpB,eAAe,EACf,4CAA4C,CAC7C,CAAC;IACJ,MAAM,MAAM,GACV,MAAM,CAAC,IAAI,KAAK,SAAS;QACvB,CAAC,CAAC,UAAU,IAAI,MAAM;QACtB,CAAC,CAAC,MAAM,CAAC,IAAI,KAAK,OAAO;YACvB,CAAC,CAAC,MAAM,CAAC,IAAI;YACb,CAAC,CAAC,WACE,OAAO,CAAC,KAAK;gBACX,CAAC,CAAC,OAAO,CAAC,KAAK;qBACV,WAAW,EAAE;qBACb,OAAO,CAAC,aAAa,EAAE,GAAG,CAAC;qBAC3B,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG;gBACvB,CAAC,CAAC,MACN,GAAG,UAAU,EAAE,EAAE,CAAC;IAC1B,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS;QAC3B,MAAM,GAAG,CAAC,UAAU,EAAE,CAAC,kBAAkB,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC,CAAC;IAClE,MAAM,MAAM,GAAG,MAAM,IAAI,CACvB,UAAU,EACV,MAAM,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,MAAM,CAChD,CAAC;IACF,IAAI,OAAO,GAAG,UAAU,CAAC;IACzB,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,IAAI,CAAC;QACH,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YAC9B,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,MAAM,eAAe,CAAC;gBAC5C,UAAU;gBACV,MAAM;gBACN,MAAM;gBACN,OAAO;aACR,CAAC,CAAC,CAAC;QACN,CAAC;QACD,MAAM,YAAY,CAChB,UAAU,EACV,OAAO,EACP,OAAO,CAAC,MAAM,IAAI,EAAE,EACpB,OAAO,CAAC,MAAM,EAAE,MAAM,CACvB,CAAC;QACF,MAAM,QAAQ,GAAG,CAAC,MAAM,GAAG,CAAC,OAAO,EAAE,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QACpE,MAAM,MAAM,GAAG,CACb,MAAM,GAAG,CAAC,OAAO,EAAE,CAAC,WAAW,EAAE,oBAAoB,CAAC,CAAC,CACxD,CAAC,IAAI,EAAE,CAAC;QACT,MAAM,MAAM,GAAG,CACb,MAAM,GAAG,CAAC,OAAO,EAAE;YACjB,WAAW;YACX,wBAAwB;YACxB,kBAAkB;SACnB,CAAC,CACH,CAAC,IAAI,EAAE,CAAC;QACT,OAAO,cAAc,CACnB;YACE,UAAU;YACV,SAAS,EAAE,OAAO;YAClB,MAAM;YACN,UAAU;YACV,QAAQ;YACR,MAAM;YACN,cAAc,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;SAC/C,EACD,OAAO,EACP,MAAM,CACP,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,OAAO,EAAE,CAAC;YACZ,MAAM,KAAK,GAAG,MAAM,GAAG,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC,CAAC,IAAI,CAC9D,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,EAC1B,GAAG,EAAE,CAAC,KAAK,CACZ,CAAC;YACF,IAAI,KAAK,IAAI,MAAM,CAAC,IAAI,CAAC,UAAU,EAAE,UAAU,EAAE,YAAY,CAAC,EAAE,OAAO,CAAC;gBACtE,MAAM,GAAG,CAAC,UAAU,EAAE,CAAC,UAAU,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC,KAAK,CAC1D,GAAG,EAAE,CAAC,SAAS,CAChB,CAAC;;gBACC,cAAc,CAAC,KAAK,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,CAAC;QAC7D,CAAC;QACD,MAAM,MAAM,EAAE,CAAC;QACf,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC","sourcesContent":["import { randomUUID } from \"node:crypto\";\nimport { join } from \"node:path\";\nimport { OutpostError, recordRecovery } from \"../../domain/errors.ts\";\nimport { copySelected, inside } from \"../files.ts\";\nimport { git } from \"./command.ts\";\nimport { lock } from \"./lock.ts\";\nimport { managedWorktree } from \"./managed-worktree.ts\";\nimport { prepareRepository } from \"./repository.ts\";\nimport { workspaceLease } from \"./workspace-lease.ts\";\nimport type {\n  AcquireWorkspaceOptions,\n  WorkspaceLease,\n} from \"./workspace.types.ts\";\n\nexport async function acquireWorkspace(\n  options: AcquireWorkspaceOptions,\n): Promise<WorkspaceLease> {\n  const repository = await prepareRepository(options);\n  const policy = options.branch ?? { mode: \"current\" };\n  const baseBranch = (\n    await git(repository, [\"symbolic-ref\", \"--quiet\", \"--short\", \"HEAD\"]).catch(\n      () => \"\",\n    )\n  ).trim();\n  if (policy.mode === \"integrate\" && !baseBranch)\n    throw new OutpostError(\n      \"workspace\",\n      \"Automatic integration requires an attached host branch\",\n    );\n  if (policy.mode === \"current\" && options.copies?.length)\n    throw new OutpostError(\n      \"configuration\",\n      \"Copied inputs require a separate workspace\",\n    );\n  const branch =\n    policy.mode === \"current\"\n      ? baseBranch || \"HEAD\"\n      : policy.mode === \"named\"\n        ? policy.name\n        : `outpost/${\n            options.label\n              ? options.label\n                  .toLowerCase()\n                  .replace(/[^a-z0-9]+/g, \"-\")\n                  .slice(0, 48) + \"-\"\n              : \"job-\"\n          }${randomUUID()}`;\n  if (policy.mode !== \"current\")\n    await git(repository, [\"check-ref-format\", \"--branch\", branch]);\n  const unlock = await lock(\n    repository,\n    policy.mode === \"current\" ? repository : branch,\n  );\n  let workdir = repository;\n  let created = false;\n  try {\n    if (policy.mode !== \"current\") {\n      ({ workdir, created } = await managedWorktree({\n        repository,\n        policy,\n        branch,\n        options,\n      }));\n    }\n    await copySelected(\n      repository,\n      workdir,\n      options.copies ?? [],\n      options.limits?.copyMs,\n    );\n    const baseline = (await git(workdir, [\"rev-parse\", \"HEAD\"])).trim();\n    const gitDir = (\n      await git(workdir, [\"rev-parse\", \"--absolute-git-dir\"])\n    ).trim();\n    const common = (\n      await git(workdir, [\n        \"rev-parse\",\n        \"--path-format=absolute\",\n        \"--git-common-dir\",\n      ])\n    ).trim();\n    return workspaceLease(\n      {\n        repository,\n        directory: workdir,\n        branch,\n        baseBranch,\n        baseline,\n        policy,\n        gitDirectories: [...new Set([gitDir, common])],\n      },\n      options,\n      unlock,\n    );\n  } catch (error) {\n    if (created) {\n      const clean = await git(workdir, [\"status\", \"--porcelain\"]).then(\n        (output) => !output.trim(),\n        () => false,\n      );\n      if (clean && inside(join(repository, \".outpost\", \"workspaces\"), workdir))\n        await git(repository, [\"worktree\", \"remove\", workdir]).catch(\n          () => undefined,\n        );\n      else recordRecovery(error, { branch, directory: workdir });\n    }\n    await unlock();\n    throw error;\n  }\n}\n"]}
+{"version":3,"file":"workspace.js","sourceRoot":"","sources":["../../../src/infrastructure/git/workspace.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AACtE,OAAO,EAAE,YAAY,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AACnD,OAAO,EAAE,GAAG,EAAE,MAAM,cAAc,CAAC;AACnC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AACxD,OAAO,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AACpD,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAMtD,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,OAAgC;IAEhC,MAAM,UAAU,GAAG,MAAM,iBAAiB,CAAC,OAAO,CAAC,CAAC;IACpD,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;IACrD,MAAM,UAAU,GAAG,CACjB,MAAM,GAAG,CAAC,UAAU,EAAE,CAAC,cAAc,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC,KAAK,CACzE,GAAG,EAAE,CAAC,EAAE,CACT,CACF,CAAC,IAAI,EAAE,CAAC;IACT,IAAI,MAAM,CAAC,IAAI,KAAK,WAAW,IAAI,CAAC,UAAU;QAC5C,MAAM,IAAI,YAAY,CACpB,WAAW,EACX,wDAAwD,CACzD,CAAC;IACJ,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS,IAAI,OAAO,CAAC,MAAM,EAAE,MAAM;QACrD,MAAM,IAAI,YAAY,CACpB,eAAe,EACf,4CAA4C,CAC7C,CAAC;IACJ,MAAM,MAAM,GACV,MAAM,CAAC,IAAI,KAAK,SAAS;QACvB,CAAC,CAAC,UAAU,IAAI,MAAM;QACtB,CAAC,CAAC,MAAM,CAAC,IAAI,KAAK,OAAO;YACvB,CAAC,CAAC,MAAM,CAAC,IAAI;YACb,CAAC,CAAC,WACE,OAAO,CAAC,KAAK;gBACX,CAAC,CAAC,OAAO,CAAC,KAAK;qBACV,WAAW,EAAE;qBACb,OAAO,CAAC,aAAa,EAAE,GAAG,CAAC;qBAC3B,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG;gBACvB,CAAC,CAAC,MACN,GAAG,UAAU,EAAE,EAAE,CAAC;IAC1B,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS;QAC3B,MAAM,GAAG,CAAC,UAAU,EAAE,CAAC,kBAAkB,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC,CAAC;IAClE,MAAM,MAAM,GAAG,MAAM,IAAI,CACvB,UAAU,EACV,MAAM,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,MAAM,CAChD,CAAC;IACF,IAAI,OAAO,GAAG,UAAU,CAAC;IACzB,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,IAAI,CAAC;QACH,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YAC9B,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,MAAM,eAAe,CAAC;gBAC5C,UAAU;gBACV,MAAM;gBACN,MAAM;gBACN,OAAO;aACR,CAAC,CAAC,CAAC;QACN,CAAC;QACD,MAAM,YAAY,CAChB,UAAU,EACV,OAAO,EACP,OAAO,CAAC,MAAM,IAAI,EAAE,EACpB,OAAO,CAAC,MAAM,EAAE,MAAM,CACvB,CAAC;QACF,MAAM,QAAQ,GAAG,CAAC,MAAM,GAAG,CAAC,OAAO,EAAE,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QACpE,MAAM,MAAM,GAAG,CACb,MAAM,GAAG,CAAC,OAAO,EAAE,CAAC,WAAW,EAAE,oBAAoB,CAAC,CAAC,CACxD,CAAC,IAAI,EAAE,CAAC;QACT,MAAM,MAAM,GAAG,CACb,MAAM,GAAG,CAAC,OAAO,EAAE;YACjB,WAAW;YACX,wBAAwB;YACxB,kBAAkB;SACnB,CAAC,CACH,CAAC,IAAI,EAAE,CAAC;QACT,OAAO,cAAc,CACnB;YACE,UAAU;YACV,SAAS,EAAE,OAAO;YAClB,MAAM;YACN,UAAU;YACV,QAAQ;YACR,MAAM;YACN,cAAc,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;SAC/C,EACD,OAAO,EACP,MAAM,CACP,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,OAAO,EAAE,CAAC;YACZ,MAAM,KAAK,GAAG,MAAM,GAAG,CAAC,OAAO,EAAE;gBAC/B,QAAQ;gBACR,aAAa;gBACb,WAAW;aACZ,CAAC,CAAC,IAAI,CACL,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,EAC1B,GAAG,EAAE,CAAC,KAAK,CACZ,CAAC;YACF,IAAI,KAAK,IAAI,MAAM,CAAC,IAAI,CAAC,UAAU,EAAE,UAAU,EAAE,YAAY,CAAC,EAAE,OAAO,CAAC;gBACtE,MAAM,GAAG,CAAC,UAAU,EAAE,CAAC,UAAU,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC,KAAK,CAC1D,GAAG,EAAE,CAAC,SAAS,CAChB,CAAC;;gBACC,cAAc,CAAC,KAAK,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,CAAC;QAC7D,CAAC;QACD,MAAM,MAAM,EAAE,CAAC;QACf,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC","sourcesContent":["import { randomUUID } from \"node:crypto\";\nimport { join } from \"node:path\";\nimport { OutpostError, recordRecovery } from \"../../domain/errors.ts\";\nimport { copySelected, inside } from \"../files.ts\";\nimport { git } from \"./command.ts\";\nimport { lock } from \"./lock.ts\";\nimport { managedWorktree } from \"./managed-worktree.ts\";\nimport { prepareRepository } from \"./repository.ts\";\nimport { workspaceLease } from \"./workspace-lease.ts\";\nimport type {\n  AcquireWorkspaceOptions,\n  WorkspaceLease,\n} from \"./workspace.types.ts\";\n\nexport async function acquireWorkspace(\n  options: AcquireWorkspaceOptions,\n): Promise<WorkspaceLease> {\n  const repository = await prepareRepository(options);\n  const policy = options.branch ?? { mode: \"current\" };\n  const baseBranch = (\n    await git(repository, [\"symbolic-ref\", \"--quiet\", \"--short\", \"HEAD\"]).catch(\n      () => \"\",\n    )\n  ).trim();\n  if (policy.mode === \"integrate\" && !baseBranch)\n    throw new OutpostError(\n      \"workspace\",\n      \"Automatic integration requires an attached host branch\",\n    );\n  if (policy.mode === \"current\" && options.copies?.length)\n    throw new OutpostError(\n      \"configuration\",\n      \"Copied inputs require a separate workspace\",\n    );\n  const branch =\n    policy.mode === \"current\"\n      ? baseBranch || \"HEAD\"\n      : policy.mode === \"named\"\n        ? policy.name\n        : `outpost/${\n            options.label\n              ? options.label\n                  .toLowerCase()\n                  .replace(/[^a-z0-9]+/g, \"-\")\n                  .slice(0, 48) + \"-\"\n              : \"job-\"\n          }${randomUUID()}`;\n  if (policy.mode !== \"current\")\n    await git(repository, [\"check-ref-format\", \"--branch\", branch]);\n  const unlock = await lock(\n    repository,\n    policy.mode === \"current\" ? repository : branch,\n  );\n  let workdir = repository;\n  let created = false;\n  try {\n    if (policy.mode !== \"current\") {\n      ({ workdir, created } = await managedWorktree({\n        repository,\n        policy,\n        branch,\n        options,\n      }));\n    }\n    await copySelected(\n      repository,\n      workdir,\n      options.copies ?? [],\n      options.limits?.copyMs,\n    );\n    const baseline = (await git(workdir, [\"rev-parse\", \"HEAD\"])).trim();\n    const gitDir = (\n      await git(workdir, [\"rev-parse\", \"--absolute-git-dir\"])\n    ).trim();\n    const common = (\n      await git(workdir, [\n        \"rev-parse\",\n        \"--path-format=absolute\",\n        \"--git-common-dir\",\n      ])\n    ).trim();\n    return workspaceLease(\n      {\n        repository,\n        directory: workdir,\n        branch,\n        baseBranch,\n        baseline,\n        policy,\n        gitDirectories: [...new Set([gitDir, common])],\n      },\n      options,\n      unlock,\n    );\n  } catch (error) {\n    if (created) {\n      const clean = await git(workdir, [\n        \"status\",\n        \"--porcelain\",\n        \"--ignored\",\n      ]).then(\n        (output) => !output.trim(),\n        () => false,\n      );\n      if (clean && inside(join(repository, \".outpost\", \"workspaces\"), workdir))\n        await git(repository, [\"worktree\", \"remove\", workdir]).catch(\n          () => undefined,\n        );\n      else recordRecovery(error, { branch, directory: workdir });\n    }\n    await unlock();\n    throw error;\n  }\n}\n"]}

package/dist/infrastructure/git/worktree-inspection.constants.d.ts

@@ -0,0 +1,5 @@
+export declare const worktreeInspectionDefaults: {
+    readonly deadlineMs: 10000;
+    readonly retainBytes: 1048576;
+};
+export declare const worktreeInspectionArguments: readonly ["--no-optional-locks", "-c", "core.fsmonitor=false", "-c", string, "-c", "maintenance.auto=false", "-c", "gc.auto=0"];

package/dist/infrastructure/git/worktree-inspection.constants.js

@@ -0,0 +1,16 @@
+export const worktreeInspectionDefaults = {
+    deadlineMs: 10_000,
+    retainBytes: 1_048_576,
+};
+export const worktreeInspectionArguments = [
+    "--no-optional-locks",
+    "-c",
+    "core.fsmonitor=false",
+    "-c",
+    "core.hooksPath=" + (process.platform === "win32" ? "NUL" : "/dev/null"),
+    "-c",
+    "maintenance.auto=false",
+    "-c",
+    "gc.auto=0",
+];
+//# sourceMappingURL=worktree-inspection.constants.js.map

package/dist/infrastructure/git/worktree-inspection.constants.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"worktree-inspection.constants.js","sourceRoot":"","sources":["../../../src/infrastructure/git/worktree-inspection.constants.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,0BAA0B,GAAG;IACxC,UAAU,EAAE,MAAM;IAClB,WAAW,EAAE,SAAS;CACd,CAAC;AAEX,MAAM,CAAC,MAAM,2BAA2B,GAAG;IACzC,qBAAqB;IACrB,IAAI;IACJ,sBAAsB;IACtB,IAAI;IACJ,iBAAiB,GAAG,CAAC,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,WAAW,CAAC;IACxE,IAAI;IACJ,wBAAwB;IACxB,IAAI;IACJ,WAAW;CACH,CAAC","sourcesContent":["export const worktreeInspectionDefaults = {\n  deadlineMs: 10_000,\n  retainBytes: 1_048_576,\n} as const;\n\nexport const worktreeInspectionArguments = [\n  \"--no-optional-locks\",\n  \"-c\",\n  \"core.fsmonitor=false\",\n  \"-c\",\n  \"core.hooksPath=\" + (process.platform === \"win32\" ? \"NUL\" : \"/dev/null\"),\n  \"-c\",\n  \"maintenance.auto=false\",\n  \"-c\",\n  \"gc.auto=0\",\n] as const;\n"]}

package/dist/infrastructure/git/worktree-inspection.d.ts

@@ -0,0 +1,3 @@
+import type { StorageEntry } from "../storage-inventory.types.ts";
+import type { WorkspaceGitInspection } from "./worktree-inspection.types.ts";
+export declare function inspectWorktreeGit(repository: string, entries: readonly StorageEntry[]): Promise<WorkspaceGitInspection>;

package/dist/infrastructure/git/worktree-inspection.js

@@ -0,0 +1,120 @@
+import { lstat, realpath } from "node:fs/promises";
+import { resolve, join } from "node:path";
+import { OutpostError } from "../../domain/errors.js";
+import { requireSuccess } from "../process.js";
+import { worktreeInspectionArguments, worktreeInspectionDefaults, } from "./worktree-inspection.constants.js";
+async function inspectGit(path, args) {
+    let length = 0;
+    const result = await requireSuccess({
+        executable: "git",
+        arguments: [...worktreeInspectionArguments, ...args],
+        directory: path,
+        variables: { LC_ALL: "C", GIT_TERMINAL_PROMPT: "0" },
+        deadlineMs: worktreeInspectionDefaults.deadlineMs,
+        retain: worktreeInspectionDefaults.retainBytes,
+        observe(channel, text) {
+            if (channel !== "stdout")
+                return;
+            length += Buffer.byteLength(text);
+            if (length > worktreeInspectionDefaults.retainBytes)
+                throw new OutpostError("workspace", "Git inspection output limit exceeded");
+        },
+    });
+    return result.stdout;
+}
+async function inspectEntry(entry, records, commonDirectory) {
+    if (entry.kind !== "directory")
+        return { state: "skipped", reason: "NOT_DIRECTORY" };
+    const fields = records.find((record) => {
+        const path = record
+            .find((field) => field.startsWith("worktree "))
+            ?.slice(9);
+        return path !== undefined && resolve(path) === resolve(entry.path);
+    });
+    if (!fields)
+        return { state: "unregistered" };
+    const head = fields.find((field) => field.startsWith("HEAD "))?.slice(5);
+    if (!head)
+        return { state: "unavailable", reason: "INVALID_REGISTRATION" };
+    // A listed worktree may have been replaced since registration or inventory.
+    if (!(await lstat(entry.path)).isDirectory() ||
+        (await realpath(entry.path)) !== resolve(entry.path))
+        return { state: "unavailable", reason: "WORKSPACE_CHANGED" };
+    const marker = await lstat(join(entry.path, ".git"));
+    if (!marker.isFile())
+        return { state: "unavailable", reason: "INVALID_GIT_MARKER" };
+    const top = (await inspectGit(entry.path, ["rev-parse", "--show-toplevel"])).trim();
+    if (resolve(top) !== resolve(entry.path))
+        return { state: "unavailable", reason: "WORKSPACE_CHANGED" };
+    const common = (await inspectGit(entry.path, [
+        "rev-parse",
+        "--path-format=absolute",
+        "--git-common-dir",
+    ])).trim();
+    if ((await realpath(common)) !== commonDirectory)
+        return { state: "unavailable", reason: "REGISTRATION_MISMATCH" };
+    const status = await inspectGit(entry.path, [
+        "status",
+        "--porcelain=v1",
+        "-z",
+        "--untracked-files=normal",
+        "--ignore-submodules=none",
+    ]);
+    return {
+        state: "registered",
+        head,
+        branch: fields
+            .find((field) => field.startsWith("branch refs/heads/"))
+            ?.slice(18) ?? null,
+        dirty: status.length > 0,
+        locked: fields.some((field) => field === "locked" || field.startsWith("locked ")),
+    };
+}
+export async function inspectWorktreeGit(repository, entries) {
+    const workspaces = [];
+    const issues = [];
+    if (!entries.length)
+        return { complete: true, workspaces, issues };
+    let records;
+    let commonDirectory;
+    try {
+        commonDirectory = await realpath((await inspectGit(repository, [
+            "rev-parse",
+            "--path-format=absolute",
+            "--git-common-dir",
+        ])).trim());
+        const list = await inspectGit(repository, [
+            "worktree",
+            "list",
+            "--porcelain",
+            "-z",
+        ]);
+        records = list
+            .split("\0\0")
+            .filter(Boolean)
+            .map((record) => record.split("\0"));
+    }
+    catch {
+        return {
+            complete: false,
+            workspaces: entries.map(({ name, path }) => ({
+                name,
+                path,
+                state: "unavailable",
+                reason: "GIT_LIST_FAILED",
+            })),
+            issues: [{ path: repository, code: "GIT_LIST_FAILED" }],
+        };
+    }
+    for (const entry of entries) {
+        const state = await inspectEntry(entry, records, commonDirectory).catch(() => ({
+            state: "unavailable",
+            reason: "GIT_INSPECTION_FAILED",
+        }));
+        workspaces.push({ name: entry.name, path: entry.path, ...state });
+        if (state.state === "unavailable")
+            issues.push({ path: entry.path, code: state.reason });
+    }
+    return { complete: issues.length === 0, workspaces, issues };
+}
+//# sourceMappingURL=worktree-inspection.js.map

package/dist/infrastructure/git/worktree-inspection.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"worktree-inspection.js","sourceRoot":"","sources":["../../../src/infrastructure/git/worktree-inspection.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AACnD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AACtD,OAAO,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAE/C,OAAO,EACL,2BAA2B,EAC3B,0BAA0B,GAC3B,MAAM,oCAAoC,CAAC;AAO5C,KAAK,UAAU,UAAU,CACvB,IAAY,EACZ,IAAuB;IAEvB,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC;QAClC,UAAU,EAAE,KAAK;QACjB,SAAS,EAAE,CAAC,GAAG,2BAA2B,EAAE,GAAG,IAAI,CAAC;QACpD,SAAS,EAAE,IAAI;QACf,SAAS,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,mBAAmB,EAAE,GAAG,EAAE;QACpD,UAAU,EAAE,0BAA0B,CAAC,UAAU;QACjD,MAAM,EAAE,0BAA0B,CAAC,WAAW;QAC9C,OAAO,CAAC,OAAO,EAAE,IAAI;YACnB,IAAI,OAAO,KAAK,QAAQ;gBAAE,OAAO;YACjC,MAAM,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;YAClC,IAAI,MAAM,GAAG,0BAA0B,CAAC,WAAW;gBACjD,MAAM,IAAI,YAAY,CACpB,WAAW,EACX,sCAAsC,CACvC,CAAC;QACN,CAAC;KACF,CAAC,CAAC;IACH,OAAO,MAAM,CAAC,MAAM,CAAC;AACvB,CAAC;AAED,KAAK,UAAU,YAAY,CACzB,KAAmB,EACnB,OAAuC,EACvC,eAAuB;IAEvB,IAAI,KAAK,CAAC,IAAI,KAAK,WAAW;QAC5B,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC;IACvD,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE;QACrC,MAAM,IAAI,GAAG,MAAM;aAChB,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC;YAC/C,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC;QACb,OAAO,IAAI,KAAK,SAAS,IAAI,OAAO,CAAC,IAAI,CAAC,KAAK,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACrE,CAAC,CAAC,CAAC;IACH,IAAI,CAAC,MAAM;QAAE,OAAO,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC;IAC9C,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC;IACzE,IAAI,CAAC,IAAI;QAAE,OAAO,EAAE,KAAK,EAAE,aAAa,EAAE,MAAM,EAAE,sBAAsB,EAAE,CAAC;IAC3E,4EAA4E;IAC5E,IACE,CAAC,CAAC,MAAM,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,WAAW,EAAE;QACxC,CAAC,MAAM,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC;QAEpD,OAAO,EAAE,KAAK,EAAE,aAAa,EAAE,MAAM,EAAE,mBAAmB,EAAE,CAAC;IAC/D,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;IACrD,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE;QAClB,OAAO,EAAE,KAAK,EAAE,aAAa,EAAE,MAAM,EAAE,oBAAoB,EAAE,CAAC;IAChE,MAAM,GAAG,GAAG,CACV,MAAM,UAAU,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,iBAAiB,CAAC,CAAC,CAC/D,CAAC,IAAI,EAAE,CAAC;IACT,IAAI,OAAO,CAAC,GAAG,CAAC,KAAK,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC;QACtC,OAAO,EAAE,KAAK,EAAE,aAAa,EAAE,MAAM,EAAE,mBAAmB,EAAE,CAAC;IAC/D,MAAM,MAAM,GAAG,CACb,MAAM,UAAU,CAAC,KAAK,CAAC,IAAI,EAAE;QAC3B,WAAW;QACX,wBAAwB;QACxB,kBAAkB;KACnB,CAAC,CACH,CAAC,IAAI,EAAE,CAAC;IACT,IAAI,CAAC,MAAM,QAAQ,CAAC,MAAM,CAAC,CAAC,KAAK,eAAe;QAC9C,OAAO,EAAE,KAAK,EAAE,aAAa,EAAE,MAAM,EAAE,uBAAuB,EAAE,CAAC;IACnE,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,KAAK,CAAC,IAAI,EAAE;QAC1C,QAAQ;QACR,gBAAgB;QAChB,IAAI;QACJ,0BAA0B;QAC1B,0BAA0B;KAC3B,CAAC,CAAC;IACH,OAAO;QACL,KAAK,EAAE,YAAY;QACnB,IAAI;QACJ,MAAM,EACJ,MAAM;aACH,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC,oBAAoB,CAAC,CAAC;YACxD,EAAE,KAAK,CAAC,EAAE,CAAC,IAAI,IAAI;QACvB,KAAK,EAAE,MAAM,CAAC,MAAM,GAAG,CAAC;QACxB,MAAM,EAAE,MAAM,CAAC,IAAI,CACjB,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,UAAU,CAAC,SAAS,CAAC,CAC7D;KACF,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,UAAkB,EAClB,OAAgC;IAEhC,MAAM,UAAU,GAAwB,EAAE,CAAC;IAC3C,MAAM,MAAM,GAAmB,EAAE,CAAC;IAClC,IAAI,CAAC,OAAO,CAAC,MAAM;QAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,CAAC;IACnE,IAAI,OAAmB,CAAC;IACxB,IAAI,eAAuB,CAAC;IAC5B,IAAI,CAAC;QACH,eAAe,GAAG,MAAM,QAAQ,CAC9B,CACE,MAAM,UAAU,CAAC,UAAU,EAAE;YAC3B,WAAW;YACX,wBAAwB;YACxB,kBAAkB;SACnB,CAAC,CACH,CAAC,IAAI,EAAE,CACT,CAAC;QACF,MAAM,IAAI,GAAG,MAAM,UAAU,CAAC,UAAU,EAAE;YACxC,UAAU;YACV,MAAM;YACN,aAAa;YACb,IAAI;SACL,CAAC,CAAC;QACH,OAAO,GAAG,IAAI;aACX,KAAK,CAAC,MAAM,CAAC;aACb,MAAM,CAAC,OAAO,CAAC;aACf,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;IACzC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO;YACL,QAAQ,EAAE,KAAK;YACf,UAAU,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;gBAC3C,IAAI;gBACJ,IAAI;gBACJ,KAAK,EAAE,aAAa;gBACpB,MAAM,EAAE,iBAAiB;aAC1B,CAAC,CAAC;YACH,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,iBAAiB,EAAE,CAAC;SACxD,CAAC;IACJ,CAAC;IACD,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,MAAM,KAAK,GAAG,MAAM,YAAY,CAAC,KAAK,EAAE,OAAO,EAAE,eAAe,CAAC,CAAC,KAAK,CACrE,GAAsB,EAAE,CAAC,CAAC;YACxB,KAAK,EAAE,aAAa;YACpB,MAAM,EAAE,uBAAuB;SAChC,CAAC,CACH,CAAC;QACF,UAAU,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,GAAG,KAAK,EAAE,CAAC,CAAC;QAClE,IAAI,KAAK,CAAC,KAAK,KAAK,aAAa;YAC/B,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;IAC1D,CAAC;IACD,OAAO,EAAE,QAAQ,EAAE,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,UAAU,EAAE,MAAM,EAAE,CAAC;AAC/D,CAAC","sourcesContent":["import { lstat, realpath } from \"node:fs/promises\";\nimport { resolve, join } from \"node:path\";\nimport { OutpostError } from \"../../domain/errors.ts\";\nimport { requireSuccess } from \"../process.ts\";\nimport type { StorageEntry, StorageIssue } from \"../storage-inventory.types.ts\";\nimport {\n  worktreeInspectionArguments,\n  worktreeInspectionDefaults,\n} from \"./worktree-inspection.constants.ts\";\nimport type {\n  WorkspaceGitEntry,\n  WorkspaceGitInspection,\n  WorkspaceGitState,\n} from \"./worktree-inspection.types.ts\";\n\nasync function inspectGit(\n  path: string,\n  args: readonly string[],\n): Promise<string> {\n  let length = 0;\n  const result = await requireSuccess({\n    executable: \"git\",\n    arguments: [...worktreeInspectionArguments, ...args],\n    directory: path,\n    variables: { LC_ALL: \"C\", GIT_TERMINAL_PROMPT: \"0\" },\n    deadlineMs: worktreeInspectionDefaults.deadlineMs,\n    retain: worktreeInspectionDefaults.retainBytes,\n    observe(channel, text) {\n      if (channel !== \"stdout\") return;\n      length += Buffer.byteLength(text);\n      if (length > worktreeInspectionDefaults.retainBytes)\n        throw new OutpostError(\n          \"workspace\",\n          \"Git inspection output limit exceeded\",\n        );\n    },\n  });\n  return result.stdout;\n}\n\nasync function inspectEntry(\n  entry: StorageEntry,\n  records: readonly (readonly string[])[],\n  commonDirectory: string,\n): Promise<WorkspaceGitState> {\n  if (entry.kind !== \"directory\")\n    return { state: \"skipped\", reason: \"NOT_DIRECTORY\" };\n  const fields = records.find((record) => {\n    const path = record\n      .find((field) => field.startsWith(\"worktree \"))\n      ?.slice(9);\n    return path !== undefined && resolve(path) === resolve(entry.path);\n  });\n  if (!fields) return { state: \"unregistered\" };\n  const head = fields.find((field) => field.startsWith(\"HEAD \"))?.slice(5);\n  if (!head) return { state: \"unavailable\", reason: \"INVALID_REGISTRATION\" };\n  // A listed worktree may have been replaced since registration or inventory.\n  if (\n    !(await lstat(entry.path)).isDirectory() ||\n    (await realpath(entry.path)) !== resolve(entry.path)\n  )\n    return { state: \"unavailable\", reason: \"WORKSPACE_CHANGED\" };\n  const marker = await lstat(join(entry.path, \".git\"));\n  if (!marker.isFile())\n    return { state: \"unavailable\", reason: \"INVALID_GIT_MARKER\" };\n  const top = (\n    await inspectGit(entry.path, [\"rev-parse\", \"--show-toplevel\"])\n  ).trim();\n  if (resolve(top) !== resolve(entry.path))\n    return { state: \"unavailable\", reason: \"WORKSPACE_CHANGED\" };\n  const common = (\n    await inspectGit(entry.path, [\n      \"rev-parse\",\n      \"--path-format=absolute\",\n      \"--git-common-dir\",\n    ])\n  ).trim();\n  if ((await realpath(common)) !== commonDirectory)\n    return { state: \"unavailable\", reason: \"REGISTRATION_MISMATCH\" };\n  const status = await inspectGit(entry.path, [\n    \"status\",\n    \"--porcelain=v1\",\n    \"-z\",\n    \"--untracked-files=normal\",\n    \"--ignore-submodules=none\",\n  ]);\n  return {\n    state: \"registered\",\n    head,\n    branch:\n      fields\n        .find((field) => field.startsWith(\"branch refs/heads/\"))\n        ?.slice(18) ?? null,\n    dirty: status.length > 0,\n    locked: fields.some(\n      (field) => field === \"locked\" || field.startsWith(\"locked \"),\n    ),\n  };\n}\n\nexport async function inspectWorktreeGit(\n  repository: string,\n  entries: readonly StorageEntry[],\n): Promise<WorkspaceGitInspection> {\n  const workspaces: WorkspaceGitEntry[] = [];\n  const issues: StorageIssue[] = [];\n  if (!entries.length) return { complete: true, workspaces, issues };\n  let records: string[][];\n  let commonDirectory: string;\n  try {\n    commonDirectory = await realpath(\n      (\n        await inspectGit(repository, [\n          \"rev-parse\",\n          \"--path-format=absolute\",\n          \"--git-common-dir\",\n        ])\n      ).trim(),\n    );\n    const list = await inspectGit(repository, [\n      \"worktree\",\n      \"list\",\n      \"--porcelain\",\n      \"-z\",\n    ]);\n    records = list\n      .split(\"\\0\\0\")\n      .filter(Boolean)\n      .map((record) => record.split(\"\\0\"));\n  } catch {\n    return {\n      complete: false,\n      workspaces: entries.map(({ name, path }) => ({\n        name,\n        path,\n        state: \"unavailable\",\n        reason: \"GIT_LIST_FAILED\",\n      })),\n      issues: [{ path: repository, code: \"GIT_LIST_FAILED\" }],\n    };\n  }\n  for (const entry of entries) {\n    const state = await inspectEntry(entry, records, commonDirectory).catch(\n      (): WorkspaceGitState => ({\n        state: \"unavailable\",\n        reason: \"GIT_INSPECTION_FAILED\",\n      }),\n    );\n    workspaces.push({ name: entry.name, path: entry.path, ...state });\n    if (state.state === \"unavailable\")\n      issues.push({ path: entry.path, code: state.reason });\n  }\n  return { complete: issues.length === 0, workspaces, issues };\n}\n"]}

package/dist/infrastructure/git/worktree-inspection.types.d.ts

@@ -0,0 +1,19 @@
+import type { StorageEntry, StorageIssue } from "../storage-inventory.types.ts";
+export type WorkspaceGitState = {
+    readonly state: "registered";
+    readonly head: string;
+    readonly branch: string | null;
+    readonly dirty: boolean;
+    readonly locked: boolean;
+} | {
+    readonly state: "unregistered";
+} | {
+    readonly state: "skipped" | "unavailable";
+    readonly reason: string;
+};
+export type WorkspaceGitEntry = Pick<StorageEntry, "name" | "path"> & WorkspaceGitState;
+export interface WorkspaceGitInspection {
+    readonly complete: boolean;
+    readonly workspaces: readonly WorkspaceGitEntry[];
+    readonly issues: readonly StorageIssue[];
+}

package/dist/infrastructure/git/worktree-inspection.types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=worktree-inspection.types.js.map

package/dist/infrastructure/git/worktree-inspection.types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"worktree-inspection.types.js","sourceRoot":"","sources":["../../../src/infrastructure/git/worktree-inspection.types.ts"],"names":[],"mappings":"","sourcesContent":["import type { StorageEntry, StorageIssue } from \"../storage-inventory.types.ts\";\n\nexport type WorkspaceGitState =\n  | {\n      readonly state: \"registered\";\n      readonly head: string;\n      readonly branch: string | null;\n      readonly dirty: boolean;\n      readonly locked: boolean;\n    }\n  | { readonly state: \"unregistered\" }\n  | { readonly state: \"skipped\" | \"unavailable\"; readonly reason: string };\n\nexport type WorkspaceGitEntry = Pick<StorageEntry, \"name\" | \"path\"> &\n  WorkspaceGitState;\n\nexport interface WorkspaceGitInspection {\n  readonly complete: boolean;\n  readonly workspaces: readonly WorkspaceGitEntry[];\n  readonly issues: readonly StorageIssue[];\n}\n"]}

package/dist/infrastructure/inspection-file.constants.d.ts

@@ -0,0 +1 @@
+export declare const inspectionFileFlags: number;

package/dist/infrastructure/inspection-file.constants.js

@@ -0,0 +1,5 @@
+import { constants } from "node:fs";
+export const inspectionFileFlags = constants.O_RDONLY |
+    (constants.O_NOFOLLOW ?? 0) |
+    (constants.O_NONBLOCK ?? 0);
+//# sourceMappingURL=inspection-file.constants.js.map