@elie-laloum/outpost 2.0.0 → 4.0.0

package/dist/domain/workflow.js.map

@@ -1 +1 @@
-{"version":3,"file":"workflow.js","sourceRoot":"","sources":["../../src/domain/workflow.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,QAAQ,EAAE,MAAM,0BAA0B,CAAC;AACpD,OAAO,EAAE,QAAQ,EAAE,MAAM,kCAAkC,CAAC;AAc5D,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AACxD,OAAO,EAAE,IAAI,EAAE,MAAM,oBAAoB,CAAC;AAE1C,MAAM,UAAU,QAAQ,CAAC,IAAY,EAAE,KAAsB;IAC3D,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;IACnE,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC;IACxC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAChB,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,IAAI;QACJ,KAAK,EAAE,KAAK;QACZ,KAAK,EAAE,CAAC,UAA2B,EAAE,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,KAAK,EAAE,OAAO,CAAC;QACxE,OAAO;YACL,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC;YACrE,OAAO;gBACL,cAAc;gBACd,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;oBACzB,KAAK,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC,GAAG,IAAI;oBACnC,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CACf,CAAC,UAAU,EAAE,EAAE,CAAC,KAAK,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,QAAQ,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAChE;iBACF,CAAC;aACH,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACf,CAAC;KACF,CAAC,CAAC;AACL,CAAC","sourcesContent":["import type { Task, Workflow, WorkflowOptions } from \"./workflow.types.ts\";\nimport { validate } from \"./workflow/validation.ts\";\nimport { schedule } from \"./workflow/workflow-scheduler.ts\";\n\nexport type {\n  Retry,\n  Task,\n  TaskContext,\n  TaskOptions,\n  TaskRecord,\n  TaskStatus,\n  Workflow,\n  WorkflowEvent,\n  WorkflowOptions,\n  WorkflowResult,\n} from \"./workflow.types.ts\";\nexport { WorkflowFailure } from \"./workflow/failure.ts\";\nexport { task } from \"./workflow/task.ts\";\n\nexport function workflow(name: string, tasks: readonly Task[]): Workflow {\n  if (!name.trim()) throw new Error(\"Workflow name cannot be empty\");\n  const graph = Object.freeze([...tasks]);\n  validate(graph);\n  return Object.freeze({\n    name,\n    tasks: graph,\n    start: (options: WorkflowOptions = {}) => schedule(name, graph, options),\n    diagram() {\n      const ids = new Map(graph.map((item, index) => [item, `n${index}`]));\n      return [\n        \"flowchart LR\",\n        ...graph.flatMap((item) => [\n          `  ${ids.get(item)}[\"${item.key}\"]`,\n          ...item.after.map(\n            (dependency) => `  ${ids.get(dependency)} --> ${ids.get(item)}`,\n          ),\n        ]),\n      ].join(\"\\n\");\n    },\n  });\n}\n"]}
+{"version":3,"file":"workflow.js","sourceRoot":"","sources":["../../src/domain/workflow.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,QAAQ,EAAE,MAAM,0BAA0B,CAAC;AACpD,OAAO,EAAE,QAAQ,EAAE,MAAM,kCAAkC,CAAC;AAc5D,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AACxD,OAAO,EAAE,IAAI,EAAE,MAAM,oBAAoB,CAAC;AAE1C,MAAM,UAAU,QAAQ,CAAC,IAAY,EAAE,KAAsB;IAC3D,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;IACnE,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC;IACxC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAChB,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,IAAI;QACJ,KAAK,EAAE,KAAK;QACZ,KAAK,EAAE,CAAC,UAA2B,EAAE,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,KAAK,EAAE,OAAO,CAAC;QACxE,OAAO;YACL,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC;YACrE,OAAO;gBACL,cAAc;gBACd,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;oBACzB,KAAK,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC,GAAG,IAAI;oBACnC,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CACf,CAAC,UAAU,EAAE,EAAE,CAAC,KAAK,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,QAAQ,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAChE;iBACF,CAAC;aACH,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACf,CAAC;KACF,CAAC,CAAC;AACL,CAAC;AAED,OAAO,EAAE,sBAAsB,EAAE,MAAM,sBAAsB,CAAC","sourcesContent":["import type { Task, Workflow, WorkflowOptions } from \"./workflow.types.ts\";\nimport { validate } from \"./workflow/validation.ts\";\nimport { schedule } from \"./workflow/workflow-scheduler.ts\";\n\nexport type {\n  Retry,\n  Task,\n  TaskContext,\n  TaskOptions,\n  TaskRecord,\n  TaskStatus,\n  Workflow,\n  WorkflowEvent,\n  WorkflowOptions,\n  WorkflowResult,\n} from \"./workflow.types.ts\";\nexport { WorkflowFailure } from \"./workflow/failure.ts\";\nexport { task } from \"./workflow/task.ts\";\n\nexport function workflow(name: string, tasks: readonly Task[]): Workflow {\n  if (!name.trim()) throw new Error(\"Workflow name cannot be empty\");\n  const graph = Object.freeze([...tasks]);\n  validate(graph);\n  return Object.freeze({\n    name,\n    tasks: graph,\n    start: (options: WorkflowOptions = {}) => schedule(name, graph, options),\n    diagram() {\n      const ids = new Map(graph.map((item, index) => [item, `n${index}`]));\n      return [\n        \"flowchart LR\",\n        ...graph.flatMap((item) => [\n          `  ${ids.get(item)}[\"${item.key}\"]`,\n          ...item.after.map(\n            (dependency) => `  ${ids.get(dependency)} --> ${ids.get(item)}`,\n          ),\n        ]),\n      ].join(\"\\n\");\n    },\n  });\n}\n\nexport { WorkflowBudgetExceeded } from \"./workflow/budget.ts\";\nexport type { WorkflowBudget, WorkflowUsage } from \"./workflow/budget.types.ts\";\n"]}

package/dist/domain/workflow.types.d.ts

@@ -1,7 +1,14 @@
+import type { WorkflowDecision, WorkflowDecisionRecord, WorkflowGate, WorkflowPauseRequest } from "./workflow/gates.types.ts";
+import type { WorkflowCheckpointOptions } from "./workflow/checkpoint.types.ts";
+import type { Usage } from "./agent.types.ts";
+import type { WorkflowAccounting, WorkflowBudget, WorkflowUsage } from "./workflow/budget.types.ts";
 export interface TaskContext {
     readonly signal: AbortSignal;
     readonly attempt: number;
     readonly executionId: string;
+    reportUsage(usage: Usage): void;
+    reportUsageOnce?(receipt: string, usage: Usage): void;
+    checkpoint?(): Promise<void>;
     value<T>(dependency: Task<T>): T;
 }
 export interface Retry {
@@ -11,6 +18,7 @@ export interface Retry {
 }
 export interface Task<T = unknown> {
     readonly key: string;
+    readonly gate?: WorkflowGate;
     readonly after: readonly Task[];
     readonly perform: (context: TaskContext) => T | Promise<T>;
     readonly condition?: (context: TaskContext) => boolean | Promise<boolean>;
@@ -20,8 +28,11 @@ export interface Task<T = unknown> {
 export type TaskOptions<T> = Omit<Task<T>, "after"> & {
     readonly after?: readonly Task[];
 };
-export type TaskStatus = "waiting" | "active" | "done" | "failed" | "skipped" | "cancelled";
+export type TaskStatus = "waiting" | "active" | "done" | "failed" | "skipped" | "cancelled" | "paused" | "rejected";
 export interface TaskRecord {
+    usageReceipts?: readonly string[];
+    pause?: WorkflowPauseRequest;
+    decision?: WorkflowDecisionRecord;
     readonly key: string;
     status: TaskStatus;
     attempts: number;
@@ -33,24 +44,30 @@ export interface WorkflowEvent {
     readonly executionId: string;
     readonly workflow: string;
     readonly timestamp: string;
-    readonly type: "start" | "task" | "retry" | "finish";
+    readonly type: "start" | "task" | "attempt" | "retry" | "usage" | "finish";
     readonly key?: string;
     readonly status?: TaskStatus;
     readonly attempt?: number;
+    readonly usage?: Usage;
+    readonly durationMs?: number;
 }
 export interface WorkflowOptions {
+    readonly decisions?: readonly WorkflowDecision[];
+    readonly checkpoint?: WorkflowCheckpointOptions;
     readonly signal?: AbortSignal;
     readonly concurrency?: number;
+    readonly budget?: WorkflowBudget;
     readonly stopOnError?: boolean;
     readonly observe?: (event: WorkflowEvent) => void;
 }
 export interface WorkflowResult {
     readonly executionId: string;
     readonly name: string;
-    readonly status: "done" | "failed" | "cancelled";
+    readonly status: "done" | "failed" | "cancelled" | "paused";
     readonly tasks: readonly Readonly<TaskRecord>[];
     readonly errors: readonly unknown[];
     readonly observerErrors: readonly unknown[];
+    readonly usage: WorkflowUsage;
     value<T>(task: Task<T>): T;
     unwrap(): void;
 }
@@ -70,6 +87,9 @@ export interface WorkflowExecutionState {
     readonly errors: unknown[];
     readonly observerErrors: unknown[];
     readonly options: WorkflowOptions;
+    readonly accounting: WorkflowAccounting;
+    persist(): Promise<void>;
+    closeAttempt(task: Task): void;
     record(task: Task): TaskRecord;
     emit(event: WorkflowNotification): void;
     finish(task: Task, status: TaskStatus): void;

package/dist/domain/workflow.types.js.map

@@ -1 +1 @@
-{"version":3,"file":"workflow.types.js","sourceRoot":"","sources":["../../src/domain/workflow.types.ts"],"names":[],"mappings":"","sourcesContent":["export interface TaskContext {\n  readonly signal: AbortSignal;\n  readonly attempt: number;\n  readonly executionId: string;\n  value<T>(dependency: Task<T>): T;\n}\n\nexport interface Retry {\n  readonly attempts: number;\n  readonly delayMs?: number;\n  readonly accepts?: (error: unknown, attempt: number) => boolean;\n}\n\nexport interface Task<T = unknown> {\n  readonly key: string;\n  readonly after: readonly Task[];\n  readonly perform: (context: TaskContext) => T | Promise<T>;\n  readonly condition?: (context: TaskContext) => boolean | Promise<boolean>;\n  readonly retry?: Retry;\n  readonly timeoutMs?: number;\n}\n\nexport type TaskOptions<T> = Omit<Task<T>, \"after\"> & {\n  readonly after?: readonly Task[];\n};\n\nexport type TaskStatus =\n  \"waiting\" | \"active\" | \"done\" | \"failed\" | \"skipped\" | \"cancelled\";\n\nexport interface TaskRecord {\n  readonly key: string;\n  status: TaskStatus;\n  attempts: number;\n  startedAt?: string;\n  finishedAt?: string;\n  error?: string;\n}\n\nexport interface WorkflowEvent {\n  readonly executionId: string;\n  readonly workflow: string;\n  readonly timestamp: string;\n  readonly type: \"start\" | \"task\" | \"retry\" | \"finish\";\n  readonly key?: string;\n  readonly status?: TaskStatus;\n  readonly attempt?: number;\n}\n\nexport interface WorkflowOptions {\n  readonly signal?: AbortSignal;\n  readonly concurrency?: number;\n  readonly stopOnError?: boolean;\n  readonly observe?: (event: WorkflowEvent) => void;\n}\n\nexport interface WorkflowResult {\n  readonly executionId: string;\n  readonly name: string;\n  readonly status: \"done\" | \"failed\" | \"cancelled\";\n  readonly tasks: readonly Readonly<TaskRecord>[];\n  readonly errors: readonly unknown[];\n  readonly observerErrors: readonly unknown[];\n  value<T>(task: Task<T>): T;\n  unwrap(): void;\n}\n\nexport interface Workflow {\n  readonly name: string;\n  readonly tasks: readonly Task[];\n  start(options?: WorkflowOptions): Promise<WorkflowResult>;\n  diagram(): string;\n}\n\nexport type WorkflowNotification = Omit<\n  WorkflowEvent,\n  \"executionId\" | \"workflow\" | \"timestamp\"\n>;\nexport interface WorkflowExecutionState {\n  readonly executionId: string;\n  readonly stop: AbortController;\n  readonly signal: AbortSignal;\n  readonly values: Map<Task, unknown>;\n  readonly records: Map<Task, TaskRecord>;\n  readonly errors: unknown[];\n  readonly observerErrors: unknown[];\n  readonly options: WorkflowOptions;\n  record(task: Task): TaskRecord;\n  emit(event: WorkflowNotification): void;\n  finish(task: Task, status: TaskStatus): void;\n  context(task: Task, attempt: number, signal: AbortSignal): TaskContext;\n}\n"]}
+{"version":3,"file":"workflow.types.js","sourceRoot":"","sources":["../../src/domain/workflow.types.ts"],"names":[],"mappings":"","sourcesContent":["import type {\n  WorkflowDecision,\n  WorkflowDecisionRecord,\n  WorkflowGate,\n  WorkflowPauseRequest,\n} from \"./workflow/gates.types.ts\";\nimport type { WorkflowCheckpointOptions } from \"./workflow/checkpoint.types.ts\";\nimport type { Usage } from \"./agent.types.ts\";\nimport type {\n  WorkflowAccounting,\n  WorkflowBudget,\n  WorkflowUsage,\n} from \"./workflow/budget.types.ts\";\n\nexport interface TaskContext {\n  readonly signal: AbortSignal;\n  readonly attempt: number;\n  readonly executionId: string;\n  reportUsage(usage: Usage): void;\n  reportUsageOnce?(receipt: string, usage: Usage): void;\n  checkpoint?(): Promise<void>;\n  value<T>(dependency: Task<T>): T;\n}\n\nexport interface Retry {\n  readonly attempts: number;\n  readonly delayMs?: number;\n  readonly accepts?: (error: unknown, attempt: number) => boolean;\n}\n\nexport interface Task<T = unknown> {\n  readonly key: string;\n  readonly gate?: WorkflowGate;\n  readonly after: readonly Task[];\n  readonly perform: (context: TaskContext) => T | Promise<T>;\n  readonly condition?: (context: TaskContext) => boolean | Promise<boolean>;\n  readonly retry?: Retry;\n  readonly timeoutMs?: number;\n}\n\nexport type TaskOptions<T> = Omit<Task<T>, \"after\"> & {\n  readonly after?: readonly Task[];\n};\n\nexport type TaskStatus =\n  | \"waiting\"\n  | \"active\"\n  | \"done\"\n  | \"failed\"\n  | \"skipped\"\n  | \"cancelled\"\n  | \"paused\"\n  | \"rejected\";\n\nexport interface TaskRecord {\n  usageReceipts?: readonly string[];\n  pause?: WorkflowPauseRequest;\n  decision?: WorkflowDecisionRecord;\n  readonly key: string;\n  status: TaskStatus;\n  attempts: number;\n  startedAt?: string;\n  finishedAt?: string;\n  error?: string;\n}\n\nexport interface WorkflowEvent {\n  readonly executionId: string;\n  readonly workflow: string;\n  readonly timestamp: string;\n  readonly type: \"start\" | \"task\" | \"attempt\" | \"retry\" | \"usage\" | \"finish\";\n  readonly key?: string;\n  readonly status?: TaskStatus;\n  readonly attempt?: number;\n  readonly usage?: Usage;\n  readonly durationMs?: number;\n}\n\nexport interface WorkflowOptions {\n  readonly decisions?: readonly WorkflowDecision[];\n  readonly checkpoint?: WorkflowCheckpointOptions;\n  readonly signal?: AbortSignal;\n  readonly concurrency?: number;\n  readonly budget?: WorkflowBudget;\n  readonly stopOnError?: boolean;\n  readonly observe?: (event: WorkflowEvent) => void;\n}\n\nexport interface WorkflowResult {\n  readonly executionId: string;\n  readonly name: string;\n  readonly status: \"done\" | \"failed\" | \"cancelled\" | \"paused\";\n  readonly tasks: readonly Readonly<TaskRecord>[];\n  readonly errors: readonly unknown[];\n  readonly observerErrors: readonly unknown[];\n  readonly usage: WorkflowUsage;\n  value<T>(task: Task<T>): T;\n  unwrap(): void;\n}\n\nexport interface Workflow {\n  readonly name: string;\n  readonly tasks: readonly Task[];\n  start(options?: WorkflowOptions): Promise<WorkflowResult>;\n  diagram(): string;\n}\n\nexport type WorkflowNotification = Omit<\n  WorkflowEvent,\n  \"executionId\" | \"workflow\" | \"timestamp\"\n>;\nexport interface WorkflowExecutionState {\n  readonly executionId: string;\n  readonly stop: AbortController;\n  readonly signal: AbortSignal;\n  readonly values: Map<Task, unknown>;\n  readonly records: Map<Task, TaskRecord>;\n  readonly errors: unknown[];\n  readonly observerErrors: unknown[];\n  readonly options: WorkflowOptions;\n  readonly accounting: WorkflowAccounting;\n  persist(): Promise<void>;\n  closeAttempt(task: Task): void;\n  record(task: Task): TaskRecord;\n  emit(event: WorkflowNotification): void;\n  finish(task: Task, status: TaskStatus): void;\n  context(task: Task, attempt: number, signal: AbortSignal): TaskContext;\n}\n"]}

package/dist/index.d.ts

@@ -1,22 +1,61 @@
 export { attach, createSandbox, dispatch, openWorkspace, } from "./application/outpost.ts";
 export type { AttachOptions, AttachResult, ContinuationOptions, DispatchResult, Sandbox, SandboxOptions, WarmDispatchResult, Workspace, WorkspaceOptions, } from "./application/outpost.ts";
 export type { DispatchOptions, Execution, Turn, } from "./application/execution.ts";
-export { WorkflowFailure, task, workflow } from "./domain/workflow.ts";
-export type { Retry, Task, TaskContext, TaskOptions, TaskRecord, TaskStatus, Workflow, WorkflowEvent, WorkflowOptions, WorkflowResult, } from "./domain/workflow.ts";
+export { WorkflowFailure, WorkflowBudgetExceeded, task, workflow, } from "./domain/workflow.ts";
+export type { Retry, Task, TaskContext, TaskOptions, TaskRecord, TaskStatus, Workflow, WorkflowEvent, WorkflowOptions, WorkflowBudget, WorkflowUsage, WorkflowResult, } from "./domain/workflow.ts";
 export { agentTask, commandTask, isolatedTask } from "./application/tasks.ts";
-export { claude, codex } from "./providers/agents.ts";
+export { claude, codex, gemini } from "./providers/agents.ts";
 export { agentVersions } from "./providers/versions.ts";
 export { conversations } from "./infrastructure/conversations.ts";
 export type { ConversationFormat, ConversationLocation, } from "./infrastructure/conversations.ts";
-export type { ClaudeSettings, CodexSettings } from "./providers/agents.ts";
+export type { ClaudeSettings, CodexSettings, GeminiSettings, } from "./providers/agents.ts";
 export { mountedProvider, remoteProvider } from "./providers/factories.ts";
 export { ResponseError, response } from "./domain/response.ts";
 export type { ResponseSpec, StandardValidator } from "./domain/response.ts";
 export { OutpostError, recoveryDetails } from "./domain/errors.ts";
 export type { FaultCode } from "./domain/errors.ts";
-export type { AgentAdapter, AgentEvent, AgentInput, AgentObservation, BranchPolicy, Channel, Command, CommandResult, Commit, ConversationContext, ConversationRecord, ConversationStore, Disposal, LifecycleHooks, SandboxContext, SandboxLease, SandboxProvider, StageLimits, TransferOptions, Usage, Variables, Volume, WorkspaceRecord, } from "./domain/ports.ts";
+export type { AgentAdapter, AgentEvent, AgentInput, AgentObservation, BranchPolicy, Channel, Command, CommandResult, Commit, ConversationContext, ConversationRecord, ConversationStore, Disposal, LifecycleHooks, FileManifestEntry, FileTransfers, SandboxContext, SandboxLease, SandboxProvider, StageLimits, TransferOptions, Usage, Variables, Volume, WorkspaceRecord, } from "./domain/ports.ts";
 export type { Brief, PromptVariables } from "./domain/prompts.ts";
 export type { Logging } from "./infrastructure/journal.ts";
 export { reporter } from "./infrastructure/reporter.ts";
 export type { ReporterOptions } from "./infrastructure/reporter.ts";
 export type { VariableQuestion } from "./application/interactive-brief.ts";
+export { planRecoveryRetention, pruneRecoveryRetention, assertRecoveryQuota, } from "./application/recovery-retention.ts";
+export type { RecoveryRetentionPolicy, RecoveryRetentionOptions, RecoveryRetentionPlan, RecoveryRetentionEntry, RecoveryPruneResult, RecoveryQuotaOptions, } from "./application/recovery-retention.types.ts";
+export { verifyRecoveryTransfer } from "./application/recovery-verification.ts";
+export type { RecoveryVerification, RecoveryVerificationOptions, } from "./application/recovery-verification.types.ts";
+export { diagnoseSandbox } from "./application/doctor-sandbox.ts";
+export type { SandboxDiagnosticOptions, SandboxDiagnosticReport, DiagnosticCapability, } from "./application/doctor-sandbox.types.ts";
+export type { DiagnosticCheck, DiagnosticStatus, DoctorAgent, } from "./application/doctor.types.ts";
+export { diagnoseAgentProtocol } from "./application/doctor-protocol.ts";
+export type { AgentProtocolReport } from "./application/doctor-protocol.types.ts";
+export { reserveRecoveryStorage } from "./application/storage-reservation.ts";
+export type { RecoveryStorageReservationOptions } from "./application/storage-reservation.types.ts";
+export type { StorageReservation, StorageReservationOptions, } from "./infrastructure/storage-reservations.types.ts";
+export { planRecoveryRestore, restoreRecoveryTransfer, } from "./application/recovery-restore.ts";
+export type { RecoveryRestoreOptions, RecoveryRestorePlan, RecoveryRestoreResult, } from "./application/recovery-restore.types.ts";
+export { fileWorkflowCheckpointStore } from "./infrastructure/workflow-checkpoint.ts";
+export type { FileWorkflowCheckpointOptions } from "./infrastructure/workflow-checkpoint.types.ts";
+export type { WorkflowCheckpoint, WorkflowCheckpointOptions, WorkflowCheckpointStore, WorkflowCheckpointLease, WorkflowCheckpointValue, WorkflowJson, } from "./domain/workflow/checkpoint.types.ts";
+export { approvalTask, pauseTask } from "./domain/workflow/gates.ts";
+export type { WorkflowGate, WorkflowGateOptions, WorkflowPauseRequest, WorkflowDecision, WorkflowDecisionRecord, } from "./domain/workflow/gates.types.ts";
+export { inspectRecovery } from "./application/recovery-inspection.ts";
+export type { RecoveryInspection, RecoveryInspectionOptions, } from "./application/recovery-inspection.types.ts";
+export type { ResourceActivityRecord, ResourceInspection, ResourceInspectionEntry, ResourceOperation, ResourceOperationKind, ResourceOperationResult, ResourcePhase, } from "./infrastructure/resource-activity.types.ts";
+export { artifact, publishArtifact, readStoredArtifact, } from "./domain/artifact.ts";
+export { artifactTask, readArtifact } from "./application/artifact-tasks.ts";
+export { fileArtifactStore } from "./infrastructure/artifact-store.ts";
+export type { ArtifactContract, ArtifactContractOptions, ArtifactIdentity, ArtifactProducer, ArtifactReference, ArtifactStore, JsonArtifactOptions, PublishArtifactOptions, ReadArtifactOptions, } from "./domain/artifact.types.ts";
+export type { ArtifactTaskOptions } from "./application/artifact-tasks.types.ts";
+export type { FileArtifactStoreOptions } from "./infrastructure/artifact-store.types.ts";
+export { sqliteTaskQueue } from "./infrastructure/task-queue.ts";
+export { serveTaskQueue, httpTaskQueue, } from "./infrastructure/task-queue-http.ts";
+export { runQueueWorker } from "./application/queue-worker.ts";
+export { queuedTask } from "./application/queued-task.ts";
+export type { QueueRequest, QueueResult, QueueJob, QueueClaim, QueueLease, TaskQueue, DurableTaskQueue, } from "./domain/task-queue.types.ts";
+export type { QueueServerOptions, QueueServer, QueueClientOptions, } from "./infrastructure/task-queue-http.types.ts";
+export type { QueueHandlerContext, QueueHandler, QueueWorkerOptions, } from "./application/queue-worker.types.ts";
+export type { QueuedTaskOptions } from "./application/queued-task.types.ts";
+export type { EgressPolicy } from "./domain/egress.types.ts";
+export { speculate } from "./application/speculation.ts";
+export type { SpeculationOptions, SpeculationResult, SpeculativeCandidate, SpeculativeCandidateResult, SpeculativeOutput, SpeculativeHostSnapshot, SpeculativeValidation, } from "./application/speculation.types.ts";

package/dist/index.js

@@ -1,11 +1,28 @@
 export { attach, createSandbox, dispatch, openWorkspace, } from "./application/outpost.js";
-export { WorkflowFailure, task, workflow } from "./domain/workflow.js";
+export { WorkflowFailure, WorkflowBudgetExceeded, task, workflow, } from "./domain/workflow.js";
 export { agentTask, commandTask, isolatedTask } from "./application/tasks.js";
-export { claude, codex } from "./providers/agents.js";
+export { claude, codex, gemini } from "./providers/agents.js";
 export { agentVersions } from "./providers/versions.js";
 export { conversations } from "./infrastructure/conversations.js";
 export { mountedProvider, remoteProvider } from "./providers/factories.js";
 export { ResponseError, response } from "./domain/response.js";
 export { OutpostError, recoveryDetails } from "./domain/errors.js";
 export { reporter } from "./infrastructure/reporter.js";
+export { planRecoveryRetention, pruneRecoveryRetention, assertRecoveryQuota, } from "./application/recovery-retention.js";
+export { verifyRecoveryTransfer } from "./application/recovery-verification.js";
+export { diagnoseSandbox } from "./application/doctor-sandbox.js";
+export { diagnoseAgentProtocol } from "./application/doctor-protocol.js";
+export { reserveRecoveryStorage } from "./application/storage-reservation.js";
+export { planRecoveryRestore, restoreRecoveryTransfer, } from "./application/recovery-restore.js";
+export { fileWorkflowCheckpointStore } from "./infrastructure/workflow-checkpoint.js";
+export { approvalTask, pauseTask } from "./domain/workflow/gates.js";
+export { inspectRecovery } from "./application/recovery-inspection.js";
+export { artifact, publishArtifact, readStoredArtifact, } from "./domain/artifact.js";
+export { artifactTask, readArtifact } from "./application/artifact-tasks.js";
+export { fileArtifactStore } from "./infrastructure/artifact-store.js";
+export { sqliteTaskQueue } from "./infrastructure/task-queue.js";
+export { serveTaskQueue, httpTaskQueue, } from "./infrastructure/task-queue-http.js";
+export { runQueueWorker } from "./application/queue-worker.js";
+export { queuedTask } from "./application/queued-task.js";
+export { speculate } from "./application/speculation.js";
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,MAAM,EACN,aAAa,EACb,QAAQ,EACR,aAAa,GACd,MAAM,0BAA0B,CAAC;AAoBlC,OAAO,EAAE,eAAe,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAevE,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AAE9E,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,uBAAuB,CAAC;AAEtD,OAAO,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAC;AAExD,OAAO,EAAE,aAAa,EAAE,MAAM,mCAAmC,CAAC;AASlE,OAAO,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAE3E,OAAO,EAAE,aAAa,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAI/D,OAAO,EAAE,YAAY,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AAkCnE,OAAO,EAAE,QAAQ,EAAE,MAAM,8BAA8B,CAAC","sourcesContent":["export {\n  attach,\n  createSandbox,\n  dispatch,\n  openWorkspace,\n} from \"./application/outpost.ts\";\n\nexport type {\n  AttachOptions,\n  AttachResult,\n  ContinuationOptions,\n  DispatchResult,\n  Sandbox,\n  SandboxOptions,\n  WarmDispatchResult,\n  Workspace,\n  WorkspaceOptions,\n} from \"./application/outpost.ts\";\n\nexport type {\n  DispatchOptions,\n  Execution,\n  Turn,\n} from \"./application/execution.ts\";\n\nexport { WorkflowFailure, task, workflow } from \"./domain/workflow.ts\";\n\nexport type {\n  Retry,\n  Task,\n  TaskContext,\n  TaskOptions,\n  TaskRecord,\n  TaskStatus,\n  Workflow,\n  WorkflowEvent,\n  WorkflowOptions,\n  WorkflowResult,\n} from \"./domain/workflow.ts\";\n\nexport { agentTask, commandTask, isolatedTask } from \"./application/tasks.ts\";\n\nexport { claude, codex } from \"./providers/agents.ts\";\n\nexport { agentVersions } from \"./providers/versions.ts\";\n\nexport { conversations } from \"./infrastructure/conversations.ts\";\n\nexport type {\n  ConversationFormat,\n  ConversationLocation,\n} from \"./infrastructure/conversations.ts\";\n\nexport type { ClaudeSettings, CodexSettings } from \"./providers/agents.ts\";\n\nexport { mountedProvider, remoteProvider } from \"./providers/factories.ts\";\n\nexport { ResponseError, response } from \"./domain/response.ts\";\n\nexport type { ResponseSpec, StandardValidator } from \"./domain/response.ts\";\n\nexport { OutpostError, recoveryDetails } from \"./domain/errors.ts\";\n\nexport type { FaultCode } from \"./domain/errors.ts\";\n\nexport type {\n  AgentAdapter,\n  AgentEvent,\n  AgentInput,\n  AgentObservation,\n  BranchPolicy,\n  Channel,\n  Command,\n  CommandResult,\n  Commit,\n  ConversationContext,\n  ConversationRecord,\n  ConversationStore,\n  Disposal,\n  LifecycleHooks,\n  SandboxContext,\n  SandboxLease,\n  SandboxProvider,\n  StageLimits,\n  TransferOptions,\n  Usage,\n  Variables,\n  Volume,\n  WorkspaceRecord,\n} from \"./domain/ports.ts\";\n\nexport type { Brief, PromptVariables } from \"./domain/prompts.ts\";\n\nexport type { Logging } from \"./infrastructure/journal.ts\";\n\nexport { reporter } from \"./infrastructure/reporter.ts\";\n\nexport type { ReporterOptions } from \"./infrastructure/reporter.ts\";\n\nexport type { VariableQuestion } from \"./application/interactive-brief.ts\";\n"]}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,MAAM,EACN,aAAa,EACb,QAAQ,EACR,aAAa,GACd,MAAM,0BAA0B,CAAC;AAoBlC,OAAO,EACL,eAAe,EACf,sBAAsB,EACtB,IAAI,EACJ,QAAQ,GACT,MAAM,sBAAsB,CAAC;AAiB9B,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AAE9E,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,uBAAuB,CAAC;AAE9D,OAAO,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAC;AAExD,OAAO,EAAE,aAAa,EAAE,MAAM,mCAAmC,CAAC;AAalE,OAAO,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAE3E,OAAO,EAAE,aAAa,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAI/D,OAAO,EAAE,YAAY,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AAoCnE,OAAO,EAAE,QAAQ,EAAE,MAAM,8BAA8B,CAAC;AAMxD,OAAO,EACL,qBAAqB,EACrB,sBAAsB,EACtB,mBAAmB,GACpB,MAAM,qCAAqC,CAAC;AAS7C,OAAO,EAAE,sBAAsB,EAAE,MAAM,wCAAwC,CAAC;AAMhF,OAAO,EAAE,eAAe,EAAE,MAAM,iCAAiC,CAAC;AAWlE,OAAO,EAAE,qBAAqB,EAAE,MAAM,kCAAkC,CAAC;AAGzE,OAAO,EAAE,sBAAsB,EAAE,MAAM,sCAAsC,CAAC;AAO9E,OAAO,EACL,mBAAmB,EACnB,uBAAuB,GACxB,MAAM,mCAAmC,CAAC;AAO3C,OAAO,EAAE,2BAA2B,EAAE,MAAM,yCAAyC,CAAC;AAWtF,OAAO,EAAE,YAAY,EAAE,SAAS,EAAE,MAAM,4BAA4B,CAAC;AASrE,OAAO,EAAE,eAAe,EAAE,MAAM,sCAAsC,CAAC;AAevE,OAAO,EACL,QAAQ,EACR,eAAe,EACf,kBAAkB,GACnB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,iCAAiC,CAAC;AAC7E,OAAO,EAAE,iBAAiB,EAAE,MAAM,oCAAoC,CAAC;AAevE,OAAO,EAAE,eAAe,EAAE,MAAM,gCAAgC,CAAC;AACjE,OAAO,EACL,cAAc,EACd,aAAa,GACd,MAAM,qCAAqC,CAAC;AAC7C,OAAO,EAAE,cAAc,EAAE,MAAM,+BAA+B,CAAC;AAC/D,OAAO,EAAE,UAAU,EAAE,MAAM,8BAA8B,CAAC;AAwB1D,OAAO,EAAE,SAAS,EAAE,MAAM,8BAA8B,CAAC","sourcesContent":["export {\n  attach,\n  createSandbox,\n  dispatch,\n  openWorkspace,\n} from \"./application/outpost.ts\";\n\nexport type {\n  AttachOptions,\n  AttachResult,\n  ContinuationOptions,\n  DispatchResult,\n  Sandbox,\n  SandboxOptions,\n  WarmDispatchResult,\n  Workspace,\n  WorkspaceOptions,\n} from \"./application/outpost.ts\";\n\nexport type {\n  DispatchOptions,\n  Execution,\n  Turn,\n} from \"./application/execution.ts\";\n\nexport {\n  WorkflowFailure,\n  WorkflowBudgetExceeded,\n  task,\n  workflow,\n} from \"./domain/workflow.ts\";\n\nexport type {\n  Retry,\n  Task,\n  TaskContext,\n  TaskOptions,\n  TaskRecord,\n  TaskStatus,\n  Workflow,\n  WorkflowEvent,\n  WorkflowOptions,\n  WorkflowBudget,\n  WorkflowUsage,\n  WorkflowResult,\n} from \"./domain/workflow.ts\";\n\nexport { agentTask, commandTask, isolatedTask } from \"./application/tasks.ts\";\n\nexport { claude, codex, gemini } from \"./providers/agents.ts\";\n\nexport { agentVersions } from \"./providers/versions.ts\";\n\nexport { conversations } from \"./infrastructure/conversations.ts\";\n\nexport type {\n  ConversationFormat,\n  ConversationLocation,\n} from \"./infrastructure/conversations.ts\";\n\nexport type {\n  ClaudeSettings,\n  CodexSettings,\n  GeminiSettings,\n} from \"./providers/agents.ts\";\n\nexport { mountedProvider, remoteProvider } from \"./providers/factories.ts\";\n\nexport { ResponseError, response } from \"./domain/response.ts\";\n\nexport type { ResponseSpec, StandardValidator } from \"./domain/response.ts\";\n\nexport { OutpostError, recoveryDetails } from \"./domain/errors.ts\";\n\nexport type { FaultCode } from \"./domain/errors.ts\";\n\nexport type {\n  AgentAdapter,\n  AgentEvent,\n  AgentInput,\n  AgentObservation,\n  BranchPolicy,\n  Channel,\n  Command,\n  CommandResult,\n  Commit,\n  ConversationContext,\n  ConversationRecord,\n  ConversationStore,\n  Disposal,\n  LifecycleHooks,\n  FileManifestEntry,\n  FileTransfers,\n  SandboxContext,\n  SandboxLease,\n  SandboxProvider,\n  StageLimits,\n  TransferOptions,\n  Usage,\n  Variables,\n  Volume,\n  WorkspaceRecord,\n} from \"./domain/ports.ts\";\n\nexport type { Brief, PromptVariables } from \"./domain/prompts.ts\";\n\nexport type { Logging } from \"./infrastructure/journal.ts\";\n\nexport { reporter } from \"./infrastructure/reporter.ts\";\n\nexport type { ReporterOptions } from \"./infrastructure/reporter.ts\";\n\nexport type { VariableQuestion } from \"./application/interactive-brief.ts\";\n\nexport {\n  planRecoveryRetention,\n  pruneRecoveryRetention,\n  assertRecoveryQuota,\n} from \"./application/recovery-retention.ts\";\nexport type {\n  RecoveryRetentionPolicy,\n  RecoveryRetentionOptions,\n  RecoveryRetentionPlan,\n  RecoveryRetentionEntry,\n  RecoveryPruneResult,\n  RecoveryQuotaOptions,\n} from \"./application/recovery-retention.types.ts\";\nexport { verifyRecoveryTransfer } from \"./application/recovery-verification.ts\";\nexport type {\n  RecoveryVerification,\n  RecoveryVerificationOptions,\n} from \"./application/recovery-verification.types.ts\";\n\nexport { diagnoseSandbox } from \"./application/doctor-sandbox.ts\";\nexport type {\n  SandboxDiagnosticOptions,\n  SandboxDiagnosticReport,\n  DiagnosticCapability,\n} from \"./application/doctor-sandbox.types.ts\";\nexport type {\n  DiagnosticCheck,\n  DiagnosticStatus,\n  DoctorAgent,\n} from \"./application/doctor.types.ts\";\nexport { diagnoseAgentProtocol } from \"./application/doctor-protocol.ts\";\nexport type { AgentProtocolReport } from \"./application/doctor-protocol.types.ts\";\n\nexport { reserveRecoveryStorage } from \"./application/storage-reservation.ts\";\nexport type { RecoveryStorageReservationOptions } from \"./application/storage-reservation.types.ts\";\nexport type {\n  StorageReservation,\n  StorageReservationOptions,\n} from \"./infrastructure/storage-reservations.types.ts\";\n\nexport {\n  planRecoveryRestore,\n  restoreRecoveryTransfer,\n} from \"./application/recovery-restore.ts\";\nexport type {\n  RecoveryRestoreOptions,\n  RecoveryRestorePlan,\n  RecoveryRestoreResult,\n} from \"./application/recovery-restore.types.ts\";\n\nexport { fileWorkflowCheckpointStore } from \"./infrastructure/workflow-checkpoint.ts\";\nexport type { FileWorkflowCheckpointOptions } from \"./infrastructure/workflow-checkpoint.types.ts\";\nexport type {\n  WorkflowCheckpoint,\n  WorkflowCheckpointOptions,\n  WorkflowCheckpointStore,\n  WorkflowCheckpointLease,\n  WorkflowCheckpointValue,\n  WorkflowJson,\n} from \"./domain/workflow/checkpoint.types.ts\";\n\nexport { approvalTask, pauseTask } from \"./domain/workflow/gates.ts\";\nexport type {\n  WorkflowGate,\n  WorkflowGateOptions,\n  WorkflowPauseRequest,\n  WorkflowDecision,\n  WorkflowDecisionRecord,\n} from \"./domain/workflow/gates.types.ts\";\n\nexport { inspectRecovery } from \"./application/recovery-inspection.ts\";\nexport type {\n  RecoveryInspection,\n  RecoveryInspectionOptions,\n} from \"./application/recovery-inspection.types.ts\";\nexport type {\n  ResourceActivityRecord,\n  ResourceInspection,\n  ResourceInspectionEntry,\n  ResourceOperation,\n  ResourceOperationKind,\n  ResourceOperationResult,\n  ResourcePhase,\n} from \"./infrastructure/resource-activity.types.ts\";\n\nexport {\n  artifact,\n  publishArtifact,\n  readStoredArtifact,\n} from \"./domain/artifact.ts\";\nexport { artifactTask, readArtifact } from \"./application/artifact-tasks.ts\";\nexport { fileArtifactStore } from \"./infrastructure/artifact-store.ts\";\nexport type {\n  ArtifactContract,\n  ArtifactContractOptions,\n  ArtifactIdentity,\n  ArtifactProducer,\n  ArtifactReference,\n  ArtifactStore,\n  JsonArtifactOptions,\n  PublishArtifactOptions,\n  ReadArtifactOptions,\n} from \"./domain/artifact.types.ts\";\nexport type { ArtifactTaskOptions } from \"./application/artifact-tasks.types.ts\";\nexport type { FileArtifactStoreOptions } from \"./infrastructure/artifact-store.types.ts\";\n\nexport { sqliteTaskQueue } from \"./infrastructure/task-queue.ts\";\nexport {\n  serveTaskQueue,\n  httpTaskQueue,\n} from \"./infrastructure/task-queue-http.ts\";\nexport { runQueueWorker } from \"./application/queue-worker.ts\";\nexport { queuedTask } from \"./application/queued-task.ts\";\nexport type {\n  QueueRequest,\n  QueueResult,\n  QueueJob,\n  QueueClaim,\n  QueueLease,\n  TaskQueue,\n  DurableTaskQueue,\n} from \"./domain/task-queue.types.ts\";\nexport type {\n  QueueServerOptions,\n  QueueServer,\n  QueueClientOptions,\n} from \"./infrastructure/task-queue-http.types.ts\";\nexport type {\n  QueueHandlerContext,\n  QueueHandler,\n  QueueWorkerOptions,\n} from \"./application/queue-worker.types.ts\";\nexport type { QueuedTaskOptions } from \"./application/queued-task.types.ts\";\n\nexport type { EgressPolicy } from \"./domain/egress.types.ts\";\n\nexport { speculate } from \"./application/speculation.ts\";\nexport type {\n  SpeculationOptions,\n  SpeculationResult,\n  SpeculativeCandidate,\n  SpeculativeCandidateResult,\n  SpeculativeOutput,\n  SpeculativeHostSnapshot,\n  SpeculativeValidation,\n} from \"./application/speculation.types.ts\";\n"]}

package/dist/infrastructure/artifact-store.constants.d.ts

@@ -0,0 +1 @@
+export declare const artifactMaxBytes: number;

package/dist/infrastructure/artifact-store.constants.js

@@ -0,0 +1,2 @@
+export const artifactMaxBytes = 16 * 1024 * 1024;
+//# sourceMappingURL=artifact-store.constants.js.map

package/dist/infrastructure/artifact-store.constants.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"artifact-store.constants.js","sourceRoot":"","sources":["../../src/infrastructure/artifact-store.constants.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,gBAAgB,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC","sourcesContent":["export const artifactMaxBytes = 16 * 1024 * 1024;\n"]}

package/dist/infrastructure/artifact-store.d.ts

@@ -0,0 +1,3 @@
+import type { ArtifactStore } from "../domain/artifact.types.ts";
+import type { FileArtifactStoreOptions } from "./artifact-store.types.ts";
+export declare function fileArtifactStore(options: FileArtifactStoreOptions): ArtifactStore;

package/dist/infrastructure/artifact-store.js

@@ -0,0 +1,100 @@
+import { artifactDigestPattern } from "../domain/artifact.constants.js";
+import { randomUUID } from "node:crypto";
+import { link, lstat, mkdir, open, rm } from "node:fs/promises";
+import { dirname, join, resolve } from "node:path";
+import { readInspectionFile } from "./inspection-file.js";
+import { artifactMaxBytes } from "./artifact-store.constants.js";
+async function directory(path) {
+    const parent = dirname(path);
+    if (parent !== path) {
+        await directory(parent);
+        try {
+            await mkdir(path, { mode: 0o700 });
+        }
+        catch (error) {
+            if (!code(error, "EEXIST"))
+                throw error;
+        }
+    }
+    if (!(await lstat(path)).isDirectory())
+        throw new Error("Artifact directory must not contain symlinks");
+}
+function code(error, expected) {
+    return (!!error &&
+        typeof error === "object" &&
+        "code" in error &&
+        error.code === expected);
+}
+async function readArtifactFile(path, maxBytes) {
+    try {
+        return await readInspectionFile(path, maxBytes);
+    }
+    catch (error) {
+        if (!(error instanceof Error) ||
+            error.message !== "Inspection file changed")
+            throw error;
+        // Removing the staging hard link can change ctime once after publication.
+        return readInspectionFile(path, maxBytes);
+    }
+}
+export function fileArtifactStore(options) {
+    const root = resolve(options.directory), maxBytes = options.maxBytes ?? artifactMaxBytes;
+    if (!Number.isSafeInteger(maxBytes) || maxBytes < 1)
+        throw new Error("Artifact maxBytes must be a positive safe integer");
+    const path = (id) => {
+        if (!artifactDigestPattern.test(id))
+            throw new Error("Invalid artifact storage ID");
+        return join(root, `${id}.blob`);
+    };
+    return {
+        async put(id, input, signal) {
+            signal?.throwIfAborted();
+            const target = path(id);
+            if (input.byteLength > maxBytes)
+                throw new Error("Artifact exceeds maxBytes");
+            const bytes = Buffer.from(input);
+            await directory(root);
+            const temporary = join(root, `.${randomUUID()}.tmp`);
+            try {
+                const file = await open(temporary, "wx", 0o600);
+                try {
+                    await file.writeFile(bytes, signal ? { signal } : {});
+                    await file.sync();
+                }
+                finally {
+                    await file.close();
+                }
+                signal?.throwIfAborted();
+                try {
+                    await link(temporary, target);
+                }
+                catch (error) {
+                    if (!code(error, "EEXIST"))
+                        throw error;
+                    if (!bytes.equals(await readArtifactFile(target, maxBytes)))
+                        throw new Error("Existing artifact content integrity mismatch");
+                }
+                if (process.platform !== "win32") {
+                    const parent = await open(root, "r");
+                    try {
+                        await parent.sync();
+                    }
+                    finally {
+                        await parent.close();
+                    }
+                }
+            }
+            finally {
+                await rm(temporary, { force: true });
+            }
+        },
+        async get(id, signal) {
+            signal?.throwIfAborted();
+            const target = path(id);
+            const bytes = await readArtifactFile(target, maxBytes);
+            signal?.throwIfAborted();
+            return bytes;
+        },
+    };
+}
+//# sourceMappingURL=artifact-store.js.map

package/dist/infrastructure/artifact-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"artifact-store.js","sourceRoot":"","sources":["../../src/infrastructure/artifact-store.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,qBAAqB,EAAE,MAAM,iCAAiC,CAAC;AACxE,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,EAAE,MAAM,kBAAkB,CAAC;AAChE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEnD,OAAO,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAC1D,OAAO,EAAE,gBAAgB,EAAE,MAAM,+BAA+B,CAAC;AAGjE,KAAK,UAAU,SAAS,CAAC,IAAY;IACnC,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC7B,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;QACpB,MAAM,SAAS,CAAC,MAAM,CAAC,CAAC;QACxB,IAAI,CAAC;YACH,MAAM,KAAK,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACrC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,QAAQ,CAAC;gBAAE,MAAM,KAAK,CAAC;QAC1C,CAAC;IACH,CAAC;IACD,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,WAAW,EAAE;QACpC,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;AACpE,CAAC;AAED,SAAS,IAAI,CAAC,KAAc,EAAE,QAAgB;IAC5C,OAAO,CACL,CAAC,CAAC,KAAK;QACP,OAAO,KAAK,KAAK,QAAQ;QACzB,MAAM,IAAI,KAAK;QACf,KAAK,CAAC,IAAI,KAAK,QAAQ,CACxB,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,gBAAgB,CAC7B,IAAY,EACZ,QAAgB;IAEhB,IAAI,CAAC;QACH,OAAO,MAAM,kBAAkB,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IAClD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IACE,CAAC,CAAC,KAAK,YAAY,KAAK,CAAC;YACzB,KAAK,CAAC,OAAO,KAAK,yBAAyB;YAE3C,MAAM,KAAK,CAAC;QACd,0EAA0E;QAC1E,OAAO,kBAAkB,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IAC5C,CAAC;AACH,CAAC;AAED,MAAM,UAAU,iBAAiB,CAC/B,OAAiC;IAEjC,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,EACrC,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,gBAAgB,CAAC;IAClD,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,QAAQ,CAAC,IAAI,QAAQ,GAAG,CAAC;QACjD,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;IACvE,MAAM,IAAI,GAAG,CAAC,EAAU,EAAE,EAAE;QAC1B,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,EAAE,CAAC;YACjC,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;QACjD,OAAO,IAAI,CAAC,IAAI,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC;IAClC,CAAC,CAAC;IACF,OAAO;QACL,KAAK,CAAC,GAAG,CAAC,EAAE,EAAE,KAAK,EAAE,MAAM;YACzB,MAAM,EAAE,cAAc,EAAE,CAAC;YACzB,MAAM,MAAM,GAAG,IAAI,CAAC,EAAE,CAAC,CAAC;YACxB,IAAI,KAAK,CAAC,UAAU,GAAG,QAAQ;gBAC7B,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;YAC/C,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACjC,MAAM,SAAS,CAAC,IAAI,CAAC,CAAC;YACtB,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,EAAE,IAAI,UAAU,EAAE,MAAM,CAAC,CAAC;YACrD,IAAI,CAAC;gBACH,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,SAAS,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;gBAChD,IAAI,CAAC;oBACH,MAAM,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;oBACtD,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;gBACpB,CAAC;wBAAS,CAAC;oBACT,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC;gBACrB,CAAC;gBACD,MAAM,EAAE,cAAc,EAAE,CAAC;gBACzB,IAAI,CAAC;oBACH,MAAM,IAAI,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;gBAChC,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,QAAQ,CAAC;wBAAE,MAAM,KAAK,CAAC;oBACxC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,gBAAgB,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;wBACzD,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;gBACpE,CAAC;gBACD,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;oBACjC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;oBACrC,IAAI,CAAC;wBACH,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;oBACtB,CAAC;4BAAS,CAAC;wBACT,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;oBACvB,CAAC;gBACH,CAAC;YACH,CAAC;oBAAS,CAAC;gBACT,MAAM,EAAE,CAAC,SAAS,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YACvC,CAAC;QACH,CAAC;QACD,KAAK,CAAC,GAAG,CAAC,EAAE,EAAE,MAAM;YAClB,MAAM,EAAE,cAAc,EAAE,CAAC;YACzB,MAAM,MAAM,GAAG,IAAI,CAAC,EAAE,CAAC,CAAC;YACxB,MAAM,KAAK,GAAG,MAAM,gBAAgB,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;YACvD,MAAM,EAAE,cAAc,EAAE,CAAC;YACzB,OAAO,KAAK,CAAC;QACf,CAAC;KACF,CAAC;AACJ,CAAC","sourcesContent":["import { artifactDigestPattern } from \"../domain/artifact.constants.ts\";\nimport { randomUUID } from \"node:crypto\";\nimport { link, lstat, mkdir, open, rm } from \"node:fs/promises\";\nimport { dirname, join, resolve } from \"node:path\";\nimport type { ArtifactStore } from \"../domain/artifact.types.ts\";\nimport { readInspectionFile } from \"./inspection-file.ts\";\nimport { artifactMaxBytes } from \"./artifact-store.constants.ts\";\nimport type { FileArtifactStoreOptions } from \"./artifact-store.types.ts\";\n\nasync function directory(path: string): Promise<void> {\n  const parent = dirname(path);\n  if (parent !== path) {\n    await directory(parent);\n    try {\n      await mkdir(path, { mode: 0o700 });\n    } catch (error) {\n      if (!code(error, \"EEXIST\")) throw error;\n    }\n  }\n  if (!(await lstat(path)).isDirectory())\n    throw new Error(\"Artifact directory must not contain symlinks\");\n}\n\nfunction code(error: unknown, expected: string): boolean {\n  return (\n    !!error &&\n    typeof error === \"object\" &&\n    \"code\" in error &&\n    error.code === expected\n  );\n}\n\nasync function readArtifactFile(\n  path: string,\n  maxBytes: number,\n): Promise<Buffer> {\n  try {\n    return await readInspectionFile(path, maxBytes);\n  } catch (error) {\n    if (\n      !(error instanceof Error) ||\n      error.message !== \"Inspection file changed\"\n    )\n      throw error;\n    // Removing the staging hard link can change ctime once after publication.\n    return readInspectionFile(path, maxBytes);\n  }\n}\n\nexport function fileArtifactStore(\n  options: FileArtifactStoreOptions,\n): ArtifactStore {\n  const root = resolve(options.directory),\n    maxBytes = options.maxBytes ?? artifactMaxBytes;\n  if (!Number.isSafeInteger(maxBytes) || maxBytes < 1)\n    throw new Error(\"Artifact maxBytes must be a positive safe integer\");\n  const path = (id: string) => {\n    if (!artifactDigestPattern.test(id))\n      throw new Error(\"Invalid artifact storage ID\");\n    return join(root, `${id}.blob`);\n  };\n  return {\n    async put(id, input, signal) {\n      signal?.throwIfAborted();\n      const target = path(id);\n      if (input.byteLength > maxBytes)\n        throw new Error(\"Artifact exceeds maxBytes\");\n      const bytes = Buffer.from(input);\n      await directory(root);\n      const temporary = join(root, `.${randomUUID()}.tmp`);\n      try {\n        const file = await open(temporary, \"wx\", 0o600);\n        try {\n          await file.writeFile(bytes, signal ? { signal } : {});\n          await file.sync();\n        } finally {\n          await file.close();\n        }\n        signal?.throwIfAborted();\n        try {\n          await link(temporary, target);\n        } catch (error) {\n          if (!code(error, \"EEXIST\")) throw error;\n          if (!bytes.equals(await readArtifactFile(target, maxBytes)))\n            throw new Error(\"Existing artifact content integrity mismatch\");\n        }\n        if (process.platform !== \"win32\") {\n          const parent = await open(root, \"r\");\n          try {\n            await parent.sync();\n          } finally {\n            await parent.close();\n          }\n        }\n      } finally {\n        await rm(temporary, { force: true });\n      }\n    },\n    async get(id, signal) {\n      signal?.throwIfAborted();\n      const target = path(id);\n      const bytes = await readArtifactFile(target, maxBytes);\n      signal?.throwIfAborted();\n      return bytes;\n    },\n  };\n}\n"]}

package/dist/infrastructure/artifact-store.types.d.ts

@@ -0,0 +1,4 @@
+export interface FileArtifactStoreOptions {
+    readonly directory: string;
+    readonly maxBytes?: number;
+}

package/dist/infrastructure/artifact-store.types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=artifact-store.types.js.map

package/dist/infrastructure/artifact-store.types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"artifact-store.types.js","sourceRoot":"","sources":["../../src/infrastructure/artifact-store.types.ts"],"names":[],"mappings":"","sourcesContent":["export interface FileArtifactStoreOptions {\n  readonly directory: string;\n  readonly maxBytes?: number;\n}\n"]}

package/dist/infrastructure/file-manifest.d.ts

@@ -0,0 +1,6 @@
+import type { FileManifestEntry } from "../domain/sandbox.types.ts";
+export declare function fileManifest(root: string, path: string, signal?: AbortSignal): Promise<FileManifestEntry>;
+export declare function sameFile(left: FileManifestEntry, right: FileManifestEntry): boolean;
+export declare function sameLocalFile(remote: FileManifestEntry, local: FileManifestEntry): boolean;
+export declare function validateFilePaths(paths: readonly string[]): void;
+export declare function parseManifest(value: unknown, paths: readonly string[]): FileManifestEntry[];

package/dist/infrastructure/file-manifest.js

@@ -0,0 +1,92 @@
+import { createHash } from "node:crypto";
+import { createReadStream } from "node:fs";
+import { lstat, readlink } from "node:fs/promises";
+import { OutpostError } from "../domain/errors.js";
+import { safeDestination } from "./files.js";
+export async function fileManifest(root, path, signal) {
+    signal?.throwIfAborted();
+    const target = await safeDestination(root, path);
+    const info = await lstat(target);
+    if (!info.isFile() && !info.isSymbolicLink())
+        throw new OutpostError("provider", "Unsupported manifest file type", {
+            path,
+        });
+    const hash = createHash("sha256");
+    let size = info.size;
+    if (info.isSymbolicLink()) {
+        const value = Buffer.from(await readlink(target));
+        size = value.length;
+        hash.update(value);
+    }
+    else {
+        for await (const chunk of createReadStream(target, { signal }))
+            hash.update(chunk);
+    }
+    return {
+        path,
+        kind: info.isSymbolicLink() ? "link" : "file",
+        mode: info.mode & 0o777,
+        size,
+        sha256: hash.digest("hex"),
+    };
+}
+export function sameFile(left, right) {
+    return (left.path === right.path &&
+        left.kind === right.kind &&
+        left.mode === right.mode &&
+        left.size === right.size &&
+        left.sha256 === right.sha256);
+}
+export function sameLocalFile(remote, local) {
+    if (process.platform !== "win32")
+        return sameFile(remote, local);
+    return sameFile({ ...remote, mode: remote.mode & 0o200 }, { ...local, mode: local.mode & 0o200 });
+}
+export function validateFilePaths(paths) {
+    if (new Set(paths).size !== paths.length ||
+        paths.some((path) => !path ||
+            path.includes("\\") ||
+            path.includes("\0") ||
+            path
+                .split("/")
+                .some((part) => !part ||
+                part === "." ||
+                part === ".." ||
+                part.toLowerCase() === ".git")))
+        throw new OutpostError("provider", "Unsafe or duplicate manifest path");
+}
+export function parseManifest(value, paths) {
+    validateFilePaths(paths);
+    if (!Array.isArray(value) || value.length !== paths.length)
+        throw new OutpostError("provider", "Invalid file manifest");
+    return value.map((entry, index) => {
+        if (!entry ||
+            typeof entry !== "object" ||
+            !("path" in entry) ||
+            typeof entry.path !== "string" ||
+            entry.path !== paths[index] ||
+            !("kind" in entry) ||
+            (entry.kind !== "file" && entry.kind !== "link") ||
+            !("mode" in entry) ||
+            typeof entry.mode !== "number" ||
+            !Number.isInteger(entry.mode) ||
+            entry.mode < 0 ||
+            entry.mode > 0o777 ||
+            !("size" in entry) ||
+            typeof entry.size !== "number" ||
+            !Number.isSafeInteger(entry.size) ||
+            entry.size < 0 ||
+            !("sha256" in entry) ||
+            typeof entry.sha256 !== "string" ||
+            !/^[a-f0-9]{64}$/.test(entry.sha256))
+            throw new OutpostError("provider", "Invalid file manifest entry");
+        return {
+            path: entry.path,
+            kind: entry.kind,
+            mode: entry.mode,
+            size: entry.size,
+            sha256: entry.sha256,
+        };
+    });
+}
+//# sourceMappingURL=file-manifest.js.map

package/dist/infrastructure/file-manifest.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"file-manifest.js","sourceRoot":"","sources":["../../src/infrastructure/file-manifest.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,gBAAgB,EAAE,MAAM,SAAS,CAAC;AAC3C,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AACnD,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAEnD,OAAO,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAE7C,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,IAAY,EACZ,IAAY,EACZ,MAAoB;IAEpB,MAAM,EAAE,cAAc,EAAE,CAAC;IACzB,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACjD,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC,CAAC;IACjC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE;QAC1C,MAAM,IAAI,YAAY,CAAC,UAAU,EAAE,gCAAgC,EAAE;YACnE,IAAI;SACL,CAAC,CAAC;IACL,MAAM,IAAI,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC;IAClC,IAAI,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;IACrB,IAAI,IAAI,CAAC,cAAc,EAAE,EAAE,CAAC;QAC1B,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;QAClD,IAAI,GAAG,KAAK,CAAC,MAAM,CAAC;QACpB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACrB,CAAC;SAAM,CAAC;QACN,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,gBAAgB,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,CAAC;YAC5D,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACvB,CAAC;IACD,OAAO;QACL,IAAI;QACJ,IAAI,EAAE,IAAI,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM;QAC7C,IAAI,EAAE,IAAI,CAAC,IAAI,GAAG,KAAK;QACvB,IAAI;QACJ,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC;KAC3B,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,QAAQ,CACtB,IAAuB,EACvB,KAAwB;IAExB,OAAO,CACL,IAAI,CAAC,IAAI,KAAK,KAAK,CAAC,IAAI;QACxB,IAAI,CAAC,IAAI,KAAK,KAAK,CAAC,IAAI;QACxB,IAAI,CAAC,IAAI,KAAK,KAAK,CAAC,IAAI;QACxB,IAAI,CAAC,IAAI,KAAK,KAAK,CAAC,IAAI;QACxB,IAAI,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM,CAC7B,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,aAAa,CAC3B,MAAyB,EACzB,KAAwB;IAExB,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO;QAAE,OAAO,QAAQ,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IACjE,OAAO,QAAQ,CACb,EAAE,GAAG,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,GAAG,KAAK,EAAE,EACxC,EAAE,GAAG,KAAK,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,GAAG,KAAK,EAAE,CACvC,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,KAAwB;IACxD,IACE,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,KAAK,KAAK,CAAC,MAAM;QACpC,KAAK,CAAC,IAAI,CACR,CAAC,IAAI,EAAE,EAAE,CACP,CAAC,IAAI;YACL,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;YACnB,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;YACnB,IAAI;iBACD,KAAK,CAAC,GAAG,CAAC;iBACV,IAAI,CACH,CAAC,IAAI,EAAE,EAAE,CACP,CAAC,IAAI;gBACL,IAAI,KAAK,GAAG;gBACZ,IAAI,KAAK,IAAI;gBACb,IAAI,CAAC,WAAW,EAAE,KAAK,MAAM,CAChC,CACN;QAED,MAAM,IAAI,YAAY,CAAC,UAAU,EAAE,mCAAmC,CAAC,CAAC;AAC5E,CAAC;AAED,MAAM,UAAU,aAAa,CAC3B,KAAc,EACd,KAAwB;IAExB,iBAAiB,CAAC,KAAK,CAAC,CAAC;IACzB,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM;QACxD,MAAM,IAAI,YAAY,CAAC,UAAU,EAAE,uBAAuB,CAAC,CAAC;IAC9D,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,KAAc,EAAE,KAAK,EAAE,EAAE;QACzC,IACE,CAAC,KAAK;YACN,OAAO,KAAK,KAAK,QAAQ;YACzB,CAAC,CAAC,MAAM,IAAI,KAAK,CAAC;YAClB,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ;YAC9B,KAAK,CAAC,IAAI,KAAK,KAAK,CAAC,KAAK,CAAC;YAC3B,CAAC,CAAC,MAAM,IAAI,KAAK,CAAC;YAClB,CAAC,KAAK,CAAC,IAAI,KAAK,MAAM,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM,CAAC;YAChD,CAAC,CAAC,MAAM,IAAI,KAAK,CAAC;YAClB,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ;YAC9B,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC;YAC7B,KAAK,CAAC,IAAI,GAAG,CAAC;YACd,KAAK,CAAC,IAAI,GAAG,KAAK;YAClB,CAAC,CAAC,MAAM,IAAI,KAAK,CAAC;YAClB,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ;YAC9B,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC;YACjC,KAAK,CAAC,IAAI,GAAG,CAAC;YACd,CAAC,CAAC,QAAQ,IAAI,KAAK,CAAC;YACpB,OAAO,KAAK,CAAC,MAAM,KAAK,QAAQ;YAChC,CAAC,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC;YAEpC,MAAM,IAAI,YAAY,CAAC,UAAU,EAAE,6BAA6B,CAAC,CAAC;QACpE,OAAO;YACL,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,MAAM,EAAE,KAAK,CAAC,MAAM;SACrB,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC","sourcesContent":["import { createHash } from \"node:crypto\";\nimport { createReadStream } from \"node:fs\";\nimport { lstat, readlink } from \"node:fs/promises\";\nimport { OutpostError } from \"../domain/errors.ts\";\nimport type { FileManifestEntry } from \"../domain/sandbox.types.ts\";\nimport { safeDestination } from \"./files.ts\";\n\nexport async function fileManifest(\n  root: string,\n  path: string,\n  signal?: AbortSignal,\n): Promise<FileManifestEntry> {\n  signal?.throwIfAborted();\n  const target = await safeDestination(root, path);\n  const info = await lstat(target);\n  if (!info.isFile() && !info.isSymbolicLink())\n    throw new OutpostError(\"provider\", \"Unsupported manifest file type\", {\n      path,\n    });\n  const hash = createHash(\"sha256\");\n  let size = info.size;\n  if (info.isSymbolicLink()) {\n    const value = Buffer.from(await readlink(target));\n    size = value.length;\n    hash.update(value);\n  } else {\n    for await (const chunk of createReadStream(target, { signal }))\n      hash.update(chunk);\n  }\n  return {\n    path,\n    kind: info.isSymbolicLink() ? \"link\" : \"file\",\n    mode: info.mode & 0o777,\n    size,\n    sha256: hash.digest(\"hex\"),\n  };\n}\n\nexport function sameFile(\n  left: FileManifestEntry,\n  right: FileManifestEntry,\n): boolean {\n  return (\n    left.path === right.path &&\n    left.kind === right.kind &&\n    left.mode === right.mode &&\n    left.size === right.size &&\n    left.sha256 === right.sha256\n  );\n}\n\nexport function sameLocalFile(\n  remote: FileManifestEntry,\n  local: FileManifestEntry,\n): boolean {\n  if (process.platform !== \"win32\") return sameFile(remote, local);\n  return sameFile(\n    { ...remote, mode: remote.mode & 0o200 },\n    { ...local, mode: local.mode & 0o200 },\n  );\n}\n\nexport function validateFilePaths(paths: readonly string[]): void {\n  if (\n    new Set(paths).size !== paths.length ||\n    paths.some(\n      (path) =>\n        !path ||\n        path.includes(\"\\\\\") ||\n        path.includes(\"\\0\") ||\n        path\n          .split(\"/\")\n          .some(\n            (part) =>\n              !part ||\n              part === \".\" ||\n              part === \"..\" ||\n              part.toLowerCase() === \".git\",\n          ),\n    )\n  )\n    throw new OutpostError(\"provider\", \"Unsafe or duplicate manifest path\");\n}\n\nexport function parseManifest(\n  value: unknown,\n  paths: readonly string[],\n): FileManifestEntry[] {\n  validateFilePaths(paths);\n  if (!Array.isArray(value) || value.length !== paths.length)\n    throw new OutpostError(\"provider\", \"Invalid file manifest\");\n  return value.map((entry: unknown, index) => {\n    if (\n      !entry ||\n      typeof entry !== \"object\" ||\n      !(\"path\" in entry) ||\n      typeof entry.path !== \"string\" ||\n      entry.path !== paths[index] ||\n      !(\"kind\" in entry) ||\n      (entry.kind !== \"file\" && entry.kind !== \"link\") ||\n      !(\"mode\" in entry) ||\n      typeof entry.mode !== \"number\" ||\n      !Number.isInteger(entry.mode) ||\n      entry.mode < 0 ||\n      entry.mode > 0o777 ||\n      !(\"size\" in entry) ||\n      typeof entry.size !== \"number\" ||\n      !Number.isSafeInteger(entry.size) ||\n      entry.size < 0 ||\n      !(\"sha256\" in entry) ||\n      typeof entry.sha256 !== \"string\" ||\n      !/^[a-f0-9]{64}$/.test(entry.sha256)\n    )\n      throw new OutpostError(\"provider\", \"Invalid file manifest entry\");\n    return {\n      path: entry.path,\n      kind: entry.kind,\n      mode: entry.mode,\n      size: entry.size,\n      sha256: entry.sha256,\n    };\n  });\n}\n"]}

package/dist/infrastructure/git/lock-inspection.constants.d.ts

@@ -0,0 +1,4 @@
+export declare const lockInspectionDefaults: {
+    readonly maxBytes: 4096;
+    readonly maxPid: 2147483647;
+};

package/dist/infrastructure/git/lock-inspection.constants.js

@@ -0,0 +1,5 @@
+export const lockInspectionDefaults = {
+    maxBytes: 4096,
+    maxPid: 2_147_483_647,
+};
+//# sourceMappingURL=lock-inspection.constants.js.map

package/dist/infrastructure/git/lock-inspection.constants.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"lock-inspection.constants.js","sourceRoot":"","sources":["../../../src/infrastructure/git/lock-inspection.constants.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,sBAAsB,GAAG;IACpC,QAAQ,EAAE,IAAI;IACd,MAAM,EAAE,aAAa;CACb,CAAC","sourcesContent":["export const lockInspectionDefaults = {\n  maxBytes: 4096,\n  maxPid: 2_147_483_647,\n} as const;\n"]}

package/dist/infrastructure/git/lock-inspection.d.ts

@@ -0,0 +1,3 @@
+import type { StorageEntry } from "../storage-inventory.types.ts";
+import type { LockInspection, LockPidProbe } from "./lock-inspection.types.ts";
+export declare function inspectLocks(entries: readonly StorageEntry[], probe?: LockPidProbe): Promise<LockInspection>;

package/dist/infrastructure/git/lock-inspection.js

@@ -0,0 +1,64 @@
+import { observeOwnership } from "./process-identity.js";
+import { readInspectionFile } from "../inspection-file.js";
+import { lockInspectionDefaults } from "./lock-inspection.constants.js";
+async function readPid(path) {
+    const record = JSON.parse((await readInspectionFile(path, lockInspectionDefaults.maxBytes)).toString("utf8"));
+    if (!record || typeof record !== "object" || !("pid" in record))
+        return undefined;
+    const pid = record.pid;
+    if (typeof pid !== "number" ||
+        !Number.isInteger(pid) ||
+        pid <= 0 ||
+        pid > lockInspectionDefaults.maxPid)
+        return undefined;
+    return {
+        pid,
+        ...("identity" in record ? { identity: record.identity } : {}),
+    };
+}
+async function inspectEntry(entry, probe) {
+    if (entry.kind !== "file")
+        return { state: "skipped", reason: "NOT_FILE" };
+    let record;
+    try {
+        record = await readPid(entry.path);
+    }
+    catch {
+        return { state: "unknown", reason: "LOCK_READ_FAILED" };
+    }
+    if (record === undefined)
+        return { state: "unknown", reason: "INVALID_PID" };
+    const { pid, identity } = record;
+    const ownership = await observeOwnership(pid, identity);
+    try {
+        probe(pid);
+        return { state: "present", pid, ownership };
+    }
+    catch (error) {
+        if (error &&
+            typeof error === "object" &&
+            "code" in error &&
+            error.code === "ESRCH")
+            return { state: "absent", pid, ownership };
+        return { state: "unknown", pid, reason: "PID_PROBE_FAILED", ownership };
+    }
+}
+export async function inspectLocks(entries, probe = (pid) => {
+    process.kill(pid, 0);
+}) {
+    const locks = [];
+    const issues = [];
+    for (const entry of entries) {
+        const state = await inspectEntry(entry, probe);
+        locks.push({ name: entry.name, path: entry.path, ...state });
+        if (state.state === "unknown")
+            issues.push({ path: entry.path, code: state.reason });
+    }
+    return {
+        scope: "local-pid",
+        complete: issues.length === 0,
+        entries: locks,
+        issues,
+    };
+}
+//# sourceMappingURL=lock-inspection.js.map

package/dist/infrastructure/git/lock-inspection.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"lock-inspection.js","sourceRoot":"","sources":["../../../src/infrastructure/git/lock-inspection.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AACzD,OAAO,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAE3D,OAAO,EAAE,sBAAsB,EAAE,MAAM,gCAAgC,CAAC;AASxE,KAAK,UAAU,OAAO,CAAC,IAAY;IACjC,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAChC,CAAC,MAAM,kBAAkB,CAAC,IAAI,EAAE,sBAAsB,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CACxE,MAAM,CACP,CACF,CAAC;IACF,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,CAAC,CAAC,KAAK,IAAI,MAAM,CAAC;QAC7D,OAAO,SAAS,CAAC;IACnB,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC;IACvB,IACE,OAAO,GAAG,KAAK,QAAQ;QACvB,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC;QACtB,GAAG,IAAI,CAAC;QACR,GAAG,GAAG,sBAAsB,CAAC,MAAM;QAEnC,OAAO,SAAS,CAAC;IACnB,OAAO;QACL,GAAG;QACH,GAAG,CAAC,UAAU,IAAI,MAAM,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC/D,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,YAAY,CACzB,KAAmB,EACnB,KAAmB;IAEnB,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM;QAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;IAC3E,IAAI,MAAsC,CAAC;IAC3C,IAAI,CAAC;QACH,MAAM,GAAG,MAAM,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACrC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,kBAAkB,EAAE,CAAC;IAC1D,CAAC;IACD,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC;IAC7E,MAAM,EAAE,GAAG,EAAE,QAAQ,EAAE,GAAG,MAAM,CAAC;IACjC,MAAM,SAAS,GAAG,MAAM,gBAAgB,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;IACxD,IAAI,CAAC;QACH,KAAK,CAAC,GAAG,CAAC,CAAC;QACX,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,EAAE,SAAS,EAAE,CAAC;IAC9C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IACE,KAAK;YACL,OAAO,KAAK,KAAK,QAAQ;YACzB,MAAM,IAAI,KAAK;YACf,KAAK,CAAC,IAAI,KAAK,OAAO;YAEtB,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,GAAG,EAAE,SAAS,EAAE,CAAC;QAC7C,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,EAAE,MAAM,EAAE,kBAAkB,EAAE,SAAS,EAAE,CAAC;IAC1E,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,OAAgC,EAChC,QAAsB,CAAC,GAAG,EAAE,EAAE;IAC5B,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;AACvB,CAAC;IAED,MAAM,KAAK,GAA0B,EAAE,CAAC;IACxC,MAAM,MAAM,GAAmB,EAAE,CAAC;IAClC,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,MAAM,KAAK,GAAG,MAAM,YAAY,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;QAC/C,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,GAAG,KAAK,EAAE,CAAC,CAAC;QAC7D,IAAI,KAAK,CAAC,KAAK,KAAK,SAAS;YAC3B,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;IAC1D,CAAC;IACD,OAAO;QACL,KAAK,EAAE,WAAW;QAClB,QAAQ,EAAE,MAAM,CAAC,MAAM,KAAK,CAAC;QAC7B,OAAO,EAAE,KAAK;QACd,MAAM;KACP,CAAC;AACJ,CAAC","sourcesContent":["import { observeOwnership } from \"./process-identity.ts\";\nimport { readInspectionFile } from \"../inspection-file.ts\";\nimport type { StorageEntry, StorageIssue } from \"../storage-inventory.types.ts\";\nimport { lockInspectionDefaults } from \"./lock-inspection.constants.ts\";\nimport type {\n  LockIdentityRecord,\n  LockInspection,\n  LockInspectionEntry,\n  LockInspectionState,\n  LockPidProbe,\n} from \"./lock-inspection.types.ts\";\n\nasync function readPid(path: string): Promise<LockIdentityRecord | undefined> {\n  const record: unknown = JSON.parse(\n    (await readInspectionFile(path, lockInspectionDefaults.maxBytes)).toString(\n      \"utf8\",\n    ),\n  );\n  if (!record || typeof record !== \"object\" || !(\"pid\" in record))\n    return undefined;\n  const pid = record.pid;\n  if (\n    typeof pid !== \"number\" ||\n    !Number.isInteger(pid) ||\n    pid <= 0 ||\n    pid > lockInspectionDefaults.maxPid\n  )\n    return undefined;\n  return {\n    pid,\n    ...(\"identity\" in record ? { identity: record.identity } : {}),\n  };\n}\n\nasync function inspectEntry(\n  entry: StorageEntry,\n  probe: LockPidProbe,\n): Promise<LockInspectionState> {\n  if (entry.kind !== \"file\") return { state: \"skipped\", reason: \"NOT_FILE\" };\n  let record: LockIdentityRecord | undefined;\n  try {\n    record = await readPid(entry.path);\n  } catch {\n    return { state: \"unknown\", reason: \"LOCK_READ_FAILED\" };\n  }\n  if (record === undefined) return { state: \"unknown\", reason: \"INVALID_PID\" };\n  const { pid, identity } = record;\n  const ownership = await observeOwnership(pid, identity);\n  try {\n    probe(pid);\n    return { state: \"present\", pid, ownership };\n  } catch (error) {\n    if (\n      error &&\n      typeof error === \"object\" &&\n      \"code\" in error &&\n      error.code === \"ESRCH\"\n    )\n      return { state: \"absent\", pid, ownership };\n    return { state: \"unknown\", pid, reason: \"PID_PROBE_FAILED\", ownership };\n  }\n}\n\nexport async function inspectLocks(\n  entries: readonly StorageEntry[],\n  probe: LockPidProbe = (pid) => {\n    process.kill(pid, 0);\n  },\n): Promise<LockInspection> {\n  const locks: LockInspectionEntry[] = [];\n  const issues: StorageIssue[] = [];\n  for (const entry of entries) {\n    const state = await inspectEntry(entry, probe);\n    locks.push({ name: entry.name, path: entry.path, ...state });\n    if (state.state === \"unknown\")\n      issues.push({ path: entry.path, code: state.reason });\n  }\n  return {\n    scope: \"local-pid\",\n    complete: issues.length === 0,\n    entries: locks,\n    issues,\n  };\n}\n"]}