@elie-laloum/outpost 2.0.0 → 4.0.0

package/dist/infrastructure/opentelemetry.types.d.ts

@@ -0,0 +1,21 @@
+import type { Context, Meter, Span, Tracer } from "@opentelemetry/api";
+import type { WorkflowEvent } from "../domain/workflow.types.ts";
+export interface OpenTelemetryOptions {
+    readonly tracer: Tracer;
+    readonly meter: Meter;
+    readonly onError?: (error: unknown) => void;
+}
+export interface OpenTelemetryObserver {
+    observe(event: WorkflowEvent): void;
+    close(): void;
+}
+export interface TelemetryOperation {
+    readonly span: Span | undefined;
+    readonly context: Context;
+    readonly started: number;
+}
+export interface TelemetryExecution {
+    readonly workflow: TelemetryOperation;
+    readonly tasks: Map<string, TelemetryOperation>;
+    readonly attempts: Map<string, TelemetryOperation>;
+}

package/dist/infrastructure/opentelemetry.types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=opentelemetry.types.js.map

package/dist/infrastructure/opentelemetry.types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"opentelemetry.types.js","sourceRoot":"","sources":["../../src/infrastructure/opentelemetry.types.ts"],"names":[],"mappings":"","sourcesContent":["import type { Context, Meter, Span, Tracer } from \"@opentelemetry/api\";\nimport type { WorkflowEvent } from \"../domain/workflow.types.ts\";\n\nexport interface OpenTelemetryOptions {\n  readonly tracer: Tracer;\n  readonly meter: Meter;\n  readonly onError?: (error: unknown) => void;\n}\n\nexport interface OpenTelemetryObserver {\n  observe(event: WorkflowEvent): void;\n  close(): void;\n}\n\nexport interface TelemetryOperation {\n  readonly span: Span | undefined;\n  readonly context: Context;\n  readonly started: number;\n}\n\nexport interface TelemetryExecution {\n  readonly workflow: TelemetryOperation;\n  readonly tasks: Map<string, TelemetryOperation>;\n  readonly attempts: Map<string, TelemetryOperation>;\n}\n"]}

package/dist/infrastructure/resource-activity-inspection.d.ts

@@ -0,0 +1,2 @@
+import type { ResourceInspection } from "./resource-activity.types.ts";
+export declare function inspectResourceActivity(repository: string, maxEntries?: number): Promise<ResourceInspection>;

package/dist/infrastructure/resource-activity-inspection.js

@@ -0,0 +1,152 @@
+import { lstat, opendir, realpath } from "node:fs/promises";
+import { join } from "node:path";
+import { invariant, positive } from "../domain/errors.js";
+import { observeOwnership } from "./git/process-identity.js";
+import { readInspectionFile } from "./inspection-file.js";
+import { resourceActivityDefaults as defaults, resourceOperationKinds, resourcePhases, } from "./resource-activity.constants.js";
+function object(value) {
+    invariant(!!value && typeof value === "object" && !Array.isArray(value), "Invalid activity object");
+}
+function text(value) {
+    invariant(typeof value === "string" &&
+        value.length > 0 &&
+        value.length <= defaults.maxText, "Invalid activity text");
+}
+function date(value) {
+    text(value);
+    invariant(Number.isFinite(Date.parse(value)), "Invalid activity time");
+}
+function operation(value) {
+    object(value);
+    invariant(typeof value.count === "number" &&
+        Number.isSafeInteger(value.count) &&
+        value.count > 0, "Invalid activity count");
+    date(value.startedAt);
+    const kind = resourceOperationKinds.find((kind) => kind === value.kind);
+    invariant(kind, "Invalid activity operation");
+    return { count: value.count, startedAt: value.startedAt, kind };
+}
+function result(value) {
+    const base = operation(value);
+    object(value);
+    text(value.id);
+    date(value.finishedAt);
+    invariant(value.outcome === "completed" || value.outcome === "failed", "Invalid activity outcome");
+    return {
+        ...base,
+        id: value.id,
+        finishedAt: value.finishedAt,
+        outcome: value.outcome,
+    };
+}
+function identity(value) {
+    if (value === undefined)
+        return undefined;
+    object(value);
+    text(value.host);
+    text(value.boot);
+    text(value.namespace);
+    text(value.started);
+    return {
+        host: value.host,
+        boot: value.boot,
+        namespace: value.namespace,
+        started: value.started,
+    };
+}
+function record(value) {
+    object(value);
+    invariant(value.version === 1, "Unknown activity version");
+    text(value.id);
+    text(value.provider);
+    text(value.workspace);
+    date(value.createdAt);
+    date(value.updatedAt);
+    invariant(typeof value.pid === "number" &&
+        Number.isSafeInteger(value.pid) &&
+        value.pid > 0 &&
+        value.pid <= 2_147_483_647, "Invalid activity owner");
+    invariant(value.placement === "host" ||
+        value.placement === "mounted" ||
+        value.placement === "remote", "Invalid activity placement");
+    const phase = resourcePhases.find((phase) => phase === value.phase);
+    invariant(phase, "Invalid activity phase");
+    invariant(Array.isArray(value.operations) &&
+        value.operations.length <= resourceOperationKinds.length, "Invalid activity operations");
+    const owner = identity(value.identity);
+    return {
+        version: 1,
+        id: value.id,
+        pid: value.pid,
+        ...(owner ? { identity: owner } : {}),
+        provider: value.provider,
+        placement: value.placement,
+        workspace: value.workspace,
+        createdAt: value.createdAt,
+        updatedAt: value.updatedAt,
+        phase,
+        operations: value.operations.map(operation),
+        ...(value.lastOperation === undefined
+            ? {}
+            : { lastOperation: result(value.lastOperation) }),
+        ...(value.lastFailure === undefined
+            ? {}
+            : { lastFailure: result(value.lastFailure) }),
+    };
+}
+export async function inspectResourceActivity(repository, maxEntries = defaults.maxRecords) {
+    positive(maxEntries, "maxEntries");
+    const entries = [];
+    const issues = [];
+    let path = repository;
+    try {
+        for (const part of [".outpost", "locks", defaults.directory]) {
+            path = join(path, part);
+            const info = await lstat(path);
+            invariant(info.isDirectory() &&
+                !info.isSymbolicLink() &&
+                (await realpath(path)) === path, "Unsafe activity directory");
+        }
+        for await (const entry of await opendir(path)) {
+            const file = join(path, entry.name);
+            if (entries.length >= Math.min(maxEntries, defaults.maxRecords)) {
+                issues.push({ path, code: "RESOURCE_ENTRY_LIMIT" });
+                break;
+            }
+            try {
+                const value = record(JSON.parse((await readInspectionFile(file, defaults.maxRecordBytes)).toString("utf8")));
+                invariant(entry.name === `${value.id}.json`, "Activity identity mismatch");
+                entries.push({
+                    path: file,
+                    record: value,
+                    ownership: await observeOwnership(value.pid, value.identity),
+                });
+            }
+            catch {
+                entries.push({
+                    path: file,
+                    ownership: {
+                        status: "unknown",
+                        reason: "RESOURCE_RECORD_UNREADABLE",
+                    },
+                });
+                issues.push({ path: file, code: "RESOURCE_RECORD_UNREADABLE" });
+            }
+        }
+    }
+    catch (cause) {
+        if (!(cause &&
+            typeof cause === "object" &&
+            "code" in cause &&
+            cause.code === "ENOENT"))
+            issues.push({ path, code: "RESOURCE_DIRECTORY_UNAVAILABLE" });
+    }
+    entries.sort((left, right) => left.path.localeCompare(right.path));
+    return {
+        scope: "recorded-sandboxes",
+        complete: issues.length === 0,
+        entries,
+        issues,
+    };
+}
+//# sourceMappingURL=resource-activity-inspection.js.map

package/dist/infrastructure/resource-activity-inspection.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"resource-activity-inspection.js","sourceRoot":"","sources":["../../src/infrastructure/resource-activity-inspection.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5D,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AAC1D,OAAO,EAAE,gBAAgB,EAAE,MAAM,2BAA2B,CAAC;AAE7D,OAAO,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAC1D,OAAO,EACL,wBAAwB,IAAI,QAAQ,EACpC,sBAAsB,EACtB,cAAc,GACf,MAAM,kCAAkC,CAAC;AAU1C,SAAS,MAAM,CAAC,KAAc;IAC5B,SAAS,CACP,CAAC,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAC7D,yBAAyB,CAC1B,CAAC;AACJ,CAAC;AACD,SAAS,IAAI,CAAC,KAAc;IAC1B,SAAS,CACP,OAAO,KAAK,KAAK,QAAQ;QACvB,KAAK,CAAC,MAAM,GAAG,CAAC;QAChB,KAAK,CAAC,MAAM,IAAI,QAAQ,CAAC,OAAO,EAClC,uBAAuB,CACxB,CAAC;AACJ,CAAC;AACD,SAAS,IAAI,CAAC,KAAc;IAC1B,IAAI,CAAC,KAAK,CAAC,CAAC;IACZ,SAAS,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,uBAAuB,CAAC,CAAC;AACzE,CAAC;AACD,SAAS,SAAS,CAAC,KAAc;IAC/B,MAAM,CAAC,KAAK,CAAC,CAAC;IACd,SAAS,CACP,OAAO,KAAK,CAAC,KAAK,KAAK,QAAQ;QAC7B,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,KAAK,CAAC;QACjC,KAAK,CAAC,KAAK,GAAG,CAAC,EACjB,wBAAwB,CACzB,CAAC;IACF,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IACtB,MAAM,IAAI,GAAG,sBAAsB,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,KAAK,KAAK,CAAC,IAAI,CAAC,CAAC;IACxE,SAAS,CAAC,IAAI,EAAE,4BAA4B,CAAC,CAAC;IAC9C,OAAO,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,IAAI,EAAE,CAAC;AAClE,CAAC;AACD,SAAS,MAAM,CAAC,KAAc;IAC5B,MAAM,IAAI,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC;IAC9B,MAAM,CAAC,KAAK,CAAC,CAAC;IACd,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IACf,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IACvB,SAAS,CACP,KAAK,CAAC,OAAO,KAAK,WAAW,IAAI,KAAK,CAAC,OAAO,KAAK,QAAQ,EAC3D,0BAA0B,CAC3B,CAAC;IACF,OAAO;QACL,GAAG,IAAI;QACP,EAAE,EAAE,KAAK,CAAC,EAAE;QACZ,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,OAAO,EAAE,KAAK,CAAC,OAAO;KACvB,CAAC;AACJ,CAAC;AACD,SAAS,QAAQ,CAAC,KAAc;IAC9B,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC1C,MAAM,CAAC,KAAK,CAAC,CAAC;IACd,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACjB,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACjB,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IACtB,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACpB,OAAO;QACL,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,OAAO,EAAE,KAAK,CAAC,OAAO;KACvB,CAAC;AACJ,CAAC;AACD,SAAS,MAAM,CAAC,KAAc;IAC5B,MAAM,CAAC,KAAK,CAAC,CAAC;IACd,SAAS,CAAC,KAAK,CAAC,OAAO,KAAK,CAAC,EAAE,0BAA0B,CAAC,CAAC;IAC3D,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IACf,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IACrB,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IACtB,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IACtB,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IACtB,SAAS,CACP,OAAO,KAAK,CAAC,GAAG,KAAK,QAAQ;QAC3B,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,GAAG,CAAC;QAC/B,KAAK,CAAC,GAAG,GAAG,CAAC;QACb,KAAK,CAAC,GAAG,IAAI,aAAa,EAC5B,wBAAwB,CACzB,CAAC;IACF,SAAS,CACP,KAAK,CAAC,SAAS,KAAK,MAAM;QACxB,KAAK,CAAC,SAAS,KAAK,SAAS;QAC7B,KAAK,CAAC,SAAS,KAAK,QAAQ,EAC9B,4BAA4B,CAC7B,CAAC;IACF,MAAM,KAAK,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,KAAK,KAAK,CAAC,KAAK,CAAC,CAAC;IACpE,SAAS,CAAC,KAAK,EAAE,wBAAwB,CAAC,CAAC;IAC3C,SAAS,CACP,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,UAAU,CAAC;QAC7B,KAAK,CAAC,UAAU,CAAC,MAAM,IAAI,sBAAsB,CAAC,MAAM,EAC1D,6BAA6B,CAC9B,CAAC;IACF,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IACvC,OAAO;QACL,OAAO,EAAE,CAAC;QACV,EAAE,EAAE,KAAK,CAAC,EAAE;QACZ,GAAG,EAAE,KAAK,CAAC,GAAG;QACd,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACrC,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,KAAK;QACL,UAAU,EAAE,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,SAAS,CAAC;QAC3C,GAAG,CAAC,KAAK,CAAC,aAAa,KAAK,SAAS;YACnC,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC,EAAE,aAAa,EAAE,MAAM,CAAC,KAAK,CAAC,aAAa,CAAC,EAAE,CAAC;QACnD,GAAG,CAAC,KAAK,CAAC,WAAW,KAAK,SAAS;YACjC,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC,EAAE,WAAW,EAAE,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,EAAE,CAAC;KAChD,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,UAAkB,EAClB,aAAqB,QAAQ,CAAC,UAAU;IAExC,QAAQ,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC;IACnC,MAAM,OAAO,GAA8B,EAAE,CAAC;IAC9C,MAAM,MAAM,GAAmB,EAAE,CAAC;IAClC,IAAI,IAAI,GAAG,UAAU,CAAC;IACtB,IAAI,CAAC;QACH,KAAK,MAAM,IAAI,IAAI,CAAC,UAAU,EAAE,OAAO,EAAE,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;YAC7D,IAAI,GAAG,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;YACxB,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC;YAC/B,SAAS,CACP,IAAI,CAAC,WAAW,EAAE;gBAChB,CAAC,IAAI,CAAC,cAAc,EAAE;gBACtB,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,CAAC,KAAK,IAAI,EACjC,2BAA2B,CAC5B,CAAC;QACJ,CAAC;QACD,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,MAAM,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;YAC9C,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;YACpC,IAAI,OAAO,CAAC,MAAM,IAAI,IAAI,CAAC,GAAG,CAAC,UAAU,EAAE,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;gBAChE,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,sBAAsB,EAAE,CAAC,CAAC;gBACpD,MAAM;YACR,CAAC;YACD,IAAI,CAAC;gBACH,MAAM,KAAK,GAAG,MAAM,CAClB,IAAI,CAAC,KAAK,CACR,CAAC,MAAM,kBAAkB,CAAC,IAAI,EAAE,QAAQ,CAAC,cAAc,CAAC,CAAC,CAAC,QAAQ,CAChE,MAAM,CACP,CACF,CACF,CAAC;gBACF,SAAS,CACP,KAAK,CAAC,IAAI,KAAK,GAAG,KAAK,CAAC,EAAE,OAAO,EACjC,4BAA4B,CAC7B,CAAC;gBACF,OAAO,CAAC,IAAI,CAAC;oBACX,IAAI,EAAE,IAAI;oBACV,MAAM,EAAE,KAAK;oBACb,SAAS,EAAE,MAAM,gBAAgB,CAAC,KAAK,CAAC,GAAG,EAAE,KAAK,CAAC,QAAQ,CAAC;iBAC7D,CAAC,CAAC;YACL,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,CAAC,IAAI,CAAC;oBACX,IAAI,EAAE,IAAI;oBACV,SAAS,EAAE;wBACT,MAAM,EAAE,SAAS;wBACjB,MAAM,EAAE,4BAA4B;qBACrC;iBACF,CAAC,CAAC;gBACH,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,4BAA4B,EAAE,CAAC,CAAC;YAClE,CAAC;QACH,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,CAAC,CACH,KAAK;YACL,OAAO,KAAK,KAAK,QAAQ;YACzB,MAAM,IAAI,KAAK;YACf,KAAK,CAAC,IAAI,KAAK,QAAQ,CACxB;YACC,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,gCAAgC,EAAE,CAAC,CAAC;IAClE,CAAC;IACD,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;IACnE,OAAO;QACL,KAAK,EAAE,oBAAoB;QAC3B,QAAQ,EAAE,MAAM,CAAC,MAAM,KAAK,CAAC;QAC7B,OAAO;QACP,MAAM;KACP,CAAC;AACJ,CAAC","sourcesContent":["import { lstat, opendir, realpath } from \"node:fs/promises\";\nimport { join } from \"node:path\";\nimport { invariant, positive } from \"../domain/errors.ts\";\nimport { observeOwnership } from \"./git/process-identity.ts\";\nimport type { LocalProcessIdentity } from \"./git/process-identity.types.ts\";\nimport { readInspectionFile } from \"./inspection-file.ts\";\nimport {\n  resourceActivityDefaults as defaults,\n  resourceOperationKinds,\n  resourcePhases,\n} from \"./resource-activity.constants.ts\";\nimport type {\n  ResourceActivityRecord,\n  ResourceInspection,\n  ResourceInspectionEntry,\n  ResourceOperation,\n  ResourceOperationResult,\n} from \"./resource-activity.types.ts\";\nimport type { StorageIssue } from \"./storage-inventory.types.ts\";\n\nfunction object(value: unknown): asserts value is Record<string, unknown> {\n  invariant(\n    !!value && typeof value === \"object\" && !Array.isArray(value),\n    \"Invalid activity object\",\n  );\n}\nfunction text(value: unknown): asserts value is string {\n  invariant(\n    typeof value === \"string\" &&\n      value.length > 0 &&\n      value.length <= defaults.maxText,\n    \"Invalid activity text\",\n  );\n}\nfunction date(value: unknown): asserts value is string {\n  text(value);\n  invariant(Number.isFinite(Date.parse(value)), \"Invalid activity time\");\n}\nfunction operation(value: unknown): ResourceOperation {\n  object(value);\n  invariant(\n    typeof value.count === \"number\" &&\n      Number.isSafeInteger(value.count) &&\n      value.count > 0,\n    \"Invalid activity count\",\n  );\n  date(value.startedAt);\n  const kind = resourceOperationKinds.find((kind) => kind === value.kind);\n  invariant(kind, \"Invalid activity operation\");\n  return { count: value.count, startedAt: value.startedAt, kind };\n}\nfunction result(value: unknown): ResourceOperationResult {\n  const base = operation(value);\n  object(value);\n  text(value.id);\n  date(value.finishedAt);\n  invariant(\n    value.outcome === \"completed\" || value.outcome === \"failed\",\n    \"Invalid activity outcome\",\n  );\n  return {\n    ...base,\n    id: value.id,\n    finishedAt: value.finishedAt,\n    outcome: value.outcome,\n  };\n}\nfunction identity(value: unknown): LocalProcessIdentity | undefined {\n  if (value === undefined) return undefined;\n  object(value);\n  text(value.host);\n  text(value.boot);\n  text(value.namespace);\n  text(value.started);\n  return {\n    host: value.host,\n    boot: value.boot,\n    namespace: value.namespace,\n    started: value.started,\n  };\n}\nfunction record(value: unknown): ResourceActivityRecord {\n  object(value);\n  invariant(value.version === 1, \"Unknown activity version\");\n  text(value.id);\n  text(value.provider);\n  text(value.workspace);\n  date(value.createdAt);\n  date(value.updatedAt);\n  invariant(\n    typeof value.pid === \"number\" &&\n      Number.isSafeInteger(value.pid) &&\n      value.pid > 0 &&\n      value.pid <= 2_147_483_647,\n    \"Invalid activity owner\",\n  );\n  invariant(\n    value.placement === \"host\" ||\n      value.placement === \"mounted\" ||\n      value.placement === \"remote\",\n    \"Invalid activity placement\",\n  );\n  const phase = resourcePhases.find((phase) => phase === value.phase);\n  invariant(phase, \"Invalid activity phase\");\n  invariant(\n    Array.isArray(value.operations) &&\n      value.operations.length <= resourceOperationKinds.length,\n    \"Invalid activity operations\",\n  );\n  const owner = identity(value.identity);\n  return {\n    version: 1,\n    id: value.id,\n    pid: value.pid,\n    ...(owner ? { identity: owner } : {}),\n    provider: value.provider,\n    placement: value.placement,\n    workspace: value.workspace,\n    createdAt: value.createdAt,\n    updatedAt: value.updatedAt,\n    phase,\n    operations: value.operations.map(operation),\n    ...(value.lastOperation === undefined\n      ? {}\n      : { lastOperation: result(value.lastOperation) }),\n    ...(value.lastFailure === undefined\n      ? {}\n      : { lastFailure: result(value.lastFailure) }),\n  };\n}\n\nexport async function inspectResourceActivity(\n  repository: string,\n  maxEntries: number = defaults.maxRecords,\n): Promise<ResourceInspection> {\n  positive(maxEntries, \"maxEntries\");\n  const entries: ResourceInspectionEntry[] = [];\n  const issues: StorageIssue[] = [];\n  let path = repository;\n  try {\n    for (const part of [\".outpost\", \"locks\", defaults.directory]) {\n      path = join(path, part);\n      const info = await lstat(path);\n      invariant(\n        info.isDirectory() &&\n          !info.isSymbolicLink() &&\n          (await realpath(path)) === path,\n        \"Unsafe activity directory\",\n      );\n    }\n    for await (const entry of await opendir(path)) {\n      const file = join(path, entry.name);\n      if (entries.length >= Math.min(maxEntries, defaults.maxRecords)) {\n        issues.push({ path, code: \"RESOURCE_ENTRY_LIMIT\" });\n        break;\n      }\n      try {\n        const value = record(\n          JSON.parse(\n            (await readInspectionFile(file, defaults.maxRecordBytes)).toString(\n              \"utf8\",\n            ),\n          ),\n        );\n        invariant(\n          entry.name === `${value.id}.json`,\n          \"Activity identity mismatch\",\n        );\n        entries.push({\n          path: file,\n          record: value,\n          ownership: await observeOwnership(value.pid, value.identity),\n        });\n      } catch {\n        entries.push({\n          path: file,\n          ownership: {\n            status: \"unknown\",\n            reason: \"RESOURCE_RECORD_UNREADABLE\",\n          },\n        });\n        issues.push({ path: file, code: \"RESOURCE_RECORD_UNREADABLE\" });\n      }\n    }\n  } catch (cause) {\n    if (!(\n      cause &&\n      typeof cause === \"object\" &&\n      \"code\" in cause &&\n      cause.code === \"ENOENT\"\n    ))\n      issues.push({ path, code: \"RESOURCE_DIRECTORY_UNAVAILABLE\" });\n  }\n  entries.sort((left, right) => left.path.localeCompare(right.path));\n  return {\n    scope: \"recorded-sandboxes\",\n    complete: issues.length === 0,\n    entries,\n    issues,\n  };\n}\n"]}

package/dist/infrastructure/resource-activity.constants.d.ts

@@ -0,0 +1,8 @@
+export declare const resourceActivityDefaults: {
+    readonly directory: "resource-activity";
+    readonly maxRecords: 10000;
+    readonly maxRecordBytes: 65536;
+    readonly maxText: 4096;
+};
+export declare const resourcePhases: readonly ["allocating", "ready", "closing", "cleanup-failed", "allocation-uncertain"];
+export declare const resourceOperationKinds: readonly ["dispatch", "attach", "diagnose", "command", "invoke", "upload", "download", "manifest", "download-batch", "upload-batch"];

package/dist/infrastructure/resource-activity.constants.js

@@ -0,0 +1,26 @@
+export const resourceActivityDefaults = {
+    directory: "resource-activity",
+    maxRecords: 10_000,
+    maxRecordBytes: 65_536,
+    maxText: 4_096,
+};
+export const resourcePhases = [
+    "allocating",
+    "ready",
+    "closing",
+    "cleanup-failed",
+    "allocation-uncertain",
+];
+export const resourceOperationKinds = [
+    "dispatch",
+    "attach",
+    "diagnose",
+    "command",
+    "invoke",
+    "upload",
+    "download",
+    "manifest",
+    "download-batch",
+    "upload-batch",
+];
+//# sourceMappingURL=resource-activity.constants.js.map

package/dist/infrastructure/resource-activity.constants.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"resource-activity.constants.js","sourceRoot":"","sources":["../../src/infrastructure/resource-activity.constants.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,wBAAwB,GAAG;IACtC,SAAS,EAAE,mBAAmB;IAC9B,UAAU,EAAE,MAAM;IAClB,cAAc,EAAE,MAAM;IACtB,OAAO,EAAE,KAAK;CACN,CAAC;AAEX,MAAM,CAAC,MAAM,cAAc,GAAG;IAC5B,YAAY;IACZ,OAAO;IACP,SAAS;IACT,gBAAgB;IAChB,sBAAsB;CACd,CAAC;AACX,MAAM,CAAC,MAAM,sBAAsB,GAAG;IACpC,UAAU;IACV,QAAQ;IACR,UAAU;IACV,SAAS;IACT,QAAQ;IACR,QAAQ;IACR,UAAU;IACV,UAAU;IACV,gBAAgB;IAChB,cAAc;CACN,CAAC","sourcesContent":["export const resourceActivityDefaults = {\n  directory: \"resource-activity\",\n  maxRecords: 10_000,\n  maxRecordBytes: 65_536,\n  maxText: 4_096,\n} as const;\n\nexport const resourcePhases = [\n  \"allocating\",\n  \"ready\",\n  \"closing\",\n  \"cleanup-failed\",\n  \"allocation-uncertain\",\n] as const;\nexport const resourceOperationKinds = [\n  \"dispatch\",\n  \"attach\",\n  \"diagnose\",\n  \"command\",\n  \"invoke\",\n  \"upload\",\n  \"download\",\n  \"manifest\",\n  \"download-batch\",\n  \"upload-batch\",\n] as const;\n"]}

package/dist/infrastructure/resource-activity.d.ts

@@ -0,0 +1,2 @@
+import type { ResourceActivity, ResourceActivityOptions } from "./resource-activity.types.ts";
+export declare function registerResourceActivity(options: ResourceActivityOptions): Promise<ResourceActivity>;

package/dist/infrastructure/resource-activity.js

@@ -0,0 +1,166 @@
+import { randomUUID } from "node:crypto";
+import { mkdir, open, realpath, rename, rm, opendir } from "node:fs/promises";
+import { join } from "node:path";
+import { invariant } from "../domain/errors.js";
+import { localProcessIdentity } from "./git/process-identity.js";
+import { readInspectionFile } from "./inspection-file.js";
+import { lockStorageMutation } from "./storage-mutation-lock.js";
+import { resourceActivityDefaults as defaults } from "./resource-activity.constants.js";
+async function activityDirectory(repository) {
+    let path = repository;
+    for (const part of [".outpost", "locks", defaults.directory]) {
+        path = join(path, part);
+        await mkdir(path, { recursive: true, mode: 0o700 });
+        invariant((await realpath(path)) === path, "Resource activity directory must not use symlinks");
+    }
+    return path;
+}
+export async function registerResourceActivity(options) {
+    for (const text of [options.workspace, options.provider])
+        invariant(text.length > 0 && text.length <= defaults.maxText, "Resource activity metadata exceeds its size limit");
+    const directory = await activityDirectory(options.repository);
+    const id = randomUUID();
+    const path = join(directory, `${id}.json`);
+    const createdAt = new Date().toISOString();
+    const identity = await localProcessIdentity();
+    let record = {
+        version: 1,
+        id,
+        pid: process.pid,
+        ...(identity ? { identity } : {}),
+        provider: options.provider,
+        placement: options.placement,
+        workspace: options.workspace,
+        createdAt,
+        updatedAt: createdAt,
+        phase: "allocating",
+        operations: [],
+    };
+    const unlock = await lockStorageMutation(options.repository);
+    try {
+        let count = 0;
+        for await (const _entry of await opendir(directory))
+            invariant(++count < defaults.maxRecords, "Too many resource activity records; inspect retained ownership before continuing");
+        const file = await open(path, "wx", 0o600);
+        try {
+            await file.writeFile(JSON.stringify(record));
+            await file.sync();
+        }
+        finally {
+            await file.close();
+        }
+    }
+    finally {
+        await unlock();
+    }
+    let pending = Promise.resolve();
+    let removed = false;
+    function serialize(action) {
+        const next = pending.then(action);
+        pending = next.catch(() => undefined);
+        return next;
+    }
+    async function verify() {
+        invariant((await realpath(directory)) === directory, "Resource activity directory changed");
+        invariant(!removed, "Resource activity is closed");
+        const current = (await readInspectionFile(path, defaults.maxRecordBytes)).toString("utf8");
+        invariant(current === JSON.stringify(record), "Resource activity identity changed; refusing mutation");
+    }
+    function update(next) {
+        return serialize(async () => {
+            await verify();
+            const value = { ...next(), updatedAt: new Date().toISOString() };
+            const data = JSON.stringify(value);
+            invariant(Buffer.byteLength(data) <= defaults.maxRecordBytes, "Resource activity record exceeds its size limit");
+            const temporary = `${path}.${randomUUID()}.tmp`;
+            const file = await open(temporary, "wx", 0o600);
+            try {
+                await file.writeFile(data);
+                await file.sync();
+                await file.close();
+                await rename(temporary, path);
+                record = value;
+            }
+            finally {
+                await file.close();
+                await rm(temporary, { force: true });
+            }
+        });
+    }
+    return {
+        async idle() {
+            await pending;
+            return record.operations.length === 0;
+        },
+        phase: (phase) => update(() => ({ ...record, phase })),
+        async run(kind, action) {
+            const operation = {
+                id: randomUUID(),
+                kind,
+                startedAt: new Date().toISOString(),
+            };
+            await update(() => {
+                const active = record.operations.find((value) => value.kind === kind);
+                const operations = record.operations.filter((value) => value.kind !== kind);
+                operations.push({
+                    kind,
+                    startedAt: active?.startedAt ?? operation.startedAt,
+                    count: (active?.count ?? 0) + 1,
+                });
+                return { ...record, operations };
+            });
+            let outcome = "completed";
+            try {
+                return await action();
+            }
+            catch (cause) {
+                outcome = "failed";
+                throw cause;
+            }
+            finally {
+                const result = {
+                    ...operation,
+                    outcome,
+                    count: 1,
+                    finishedAt: new Date().toISOString(),
+                };
+                try {
+                    await update(() => ({
+                        ...record,
+                        operations: record.operations.flatMap((value) => {
+                            if (value.kind !== kind)
+                                return [value];
+                            if (value.count === 1)
+                                return [];
+                            return [{ ...value, count: value.count - 1 }];
+                        }),
+                        lastOperation: result,
+                        ...(outcome === "failed" ? { lastFailure: result } : {}),
+                    }));
+                }
+                catch (cause) {
+                    if (outcome !== "failed")
+                        throw cause;
+                }
+            }
+        },
+        remove: () => serialize(async () => {
+            if (removed)
+                return;
+            invariant(record.operations.length === 0, "Resource operations remain unsettled; activity record retained");
+            try {
+                await verify();
+                await rm(path);
+            }
+            catch (cause) {
+                if (!(cause &&
+                    typeof cause === "object" &&
+                    "code" in cause &&
+                    cause.code === "ENOENT"))
+                    throw cause;
+            }
+            removed = true;
+        }),
+    };
+}
+//# sourceMappingURL=resource-activity.js.map

package/dist/infrastructure/resource-activity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"resource-activity.js","sourceRoot":"","sources":["../../src/infrastructure/resource-activity.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAC9E,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAChD,OAAO,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAC;AACjE,OAAO,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAC1D,OAAO,EAAE,mBAAmB,EAAE,MAAM,4BAA4B,CAAC;AACjE,OAAO,EAAE,wBAAwB,IAAI,QAAQ,EAAE,MAAM,kCAAkC,CAAC;AAQxF,KAAK,UAAU,iBAAiB,CAAC,UAAkB;IACjD,IAAI,IAAI,GAAG,UAAU,CAAC;IACtB,KAAK,MAAM,IAAI,IAAI,CAAC,UAAU,EAAE,OAAO,EAAE,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;QAC7D,IAAI,GAAG,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QACxB,MAAM,KAAK,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACpD,SAAS,CACP,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,CAAC,KAAK,IAAI,EAC/B,mDAAmD,CACpD,CAAC;IACJ,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAC5C,OAAgC;IAEhC,KAAK,MAAM,IAAI,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,OAAO,CAAC,QAAQ,CAAC;QACtD,SAAS,CACP,IAAI,CAAC,MAAM,GAAG,CAAC,IAAI,IAAI,CAAC,MAAM,IAAI,QAAQ,CAAC,OAAO,EAClD,mDAAmD,CACpD,CAAC;IACJ,MAAM,SAAS,GAAG,MAAM,iBAAiB,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IAC9D,MAAM,EAAE,GAAG,UAAU,EAAE,CAAC;IACxB,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC;IAC3C,MAAM,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC3C,MAAM,QAAQ,GAAG,MAAM,oBAAoB,EAAE,CAAC;IAC9C,IAAI,MAAM,GAA2B;QACnC,OAAO,EAAE,CAAC;QACV,EAAE;QACF,GAAG,EAAE,OAAO,CAAC,GAAG;QAChB,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACjC,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,SAAS;QACT,SAAS,EAAE,SAAS;QACpB,KAAK,EAAE,YAAY;QACnB,UAAU,EAAE,EAAE;KACf,CAAC;IACF,MAAM,MAAM,GAAG,MAAM,mBAAmB,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IAC7D,IAAI,CAAC;QACH,IAAI,KAAK,GAAG,CAAC,CAAC;QACd,IAAI,KAAK,EAAE,MAAM,MAAM,IAAI,MAAM,OAAO,CAAC,SAAS,CAAC;YACjD,SAAS,CACP,EAAE,KAAK,GAAG,QAAQ,CAAC,UAAU,EAC7B,kFAAkF,CACnF,CAAC;QACJ,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;QAC3C,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;YAC7C,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;QACpB,CAAC;gBAAS,CAAC;YACT,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC;QACrB,CAAC;IACH,CAAC;YAAS,CAAC;QACT,MAAM,MAAM,EAAE,CAAC;IACjB,CAAC;IACD,IAAI,OAAO,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC;IAChC,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,SAAS,SAAS,CAAC,MAA2B;QAC5C,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAClC,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QACtC,OAAO,IAAI,CAAC;IACd,CAAC;IACD,KAAK,UAAU,MAAM;QACnB,SAAS,CACP,CAAC,MAAM,QAAQ,CAAC,SAAS,CAAC,CAAC,KAAK,SAAS,EACzC,qCAAqC,CACtC,CAAC;QACF,SAAS,CAAC,CAAC,OAAO,EAAE,6BAA6B,CAAC,CAAC;QACnD,MAAM,OAAO,GAAG,CACd,MAAM,kBAAkB,CAAC,IAAI,EAAE,QAAQ,CAAC,cAAc,CAAC,CACxD,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QACnB,SAAS,CACP,OAAO,KAAK,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAClC,uDAAuD,CACxD,CAAC;IACJ,CAAC;IACD,SAAS,MAAM,CAAC,IAAkC;QAChD,OAAO,SAAS,CAAC,KAAK,IAAI,EAAE;YAC1B,MAAM,MAAM,EAAE,CAAC;YACf,MAAM,KAAK,GAAG,EAAE,GAAG,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC;YACjE,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;YACnC,SAAS,CACP,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,QAAQ,CAAC,cAAc,EAClD,iDAAiD,CAClD,CAAC;YACF,MAAM,SAAS,GAAG,GAAG,IAAI,IAAI,UAAU,EAAE,MAAM,CAAC;YAChD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,SAAS,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;YAChD,IAAI,CAAC;gBACH,MAAM,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;gBAC3B,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;gBAClB,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC;gBACnB,MAAM,MAAM,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;gBAC9B,MAAM,GAAG,KAAK,CAAC;YACjB,CAAC;oBAAS,CAAC;gBACT,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC;gBACnB,MAAM,EAAE,CAAC,SAAS,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YACvC,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC;IACD,OAAO;QACL,KAAK,CAAC,IAAI;YACR,MAAM,OAAO,CAAC;YACd,OAAO,MAAM,CAAC,UAAU,CAAC,MAAM,KAAK,CAAC,CAAC;QACxC,CAAC;QACD,KAAK,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,GAAG,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;QACtD,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,MAAM;YACpB,MAAM,SAAS,GAAG;gBAChB,EAAE,EAAE,UAAU,EAAE;gBAChB,IAAI;gBACJ,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;aACpC,CAAC;YACF,MAAM,MAAM,CAAC,GAAG,EAAE;gBAChB,MAAM,MAAM,GAAG,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;gBACtE,MAAM,UAAU,GAAG,MAAM,CAAC,UAAU,CAAC,MAAM,CACzC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,CAC/B,CAAC;gBACF,UAAU,CAAC,IAAI,CAAC;oBACd,IAAI;oBACJ,SAAS,EAAE,MAAM,EAAE,SAAS,IAAI,SAAS,CAAC,SAAS;oBACnD,KAAK,EAAE,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC,CAAC,GAAG,CAAC;iBAChC,CAAC,CAAC;gBACH,OAAO,EAAE,GAAG,MAAM,EAAE,UAAU,EAAE,CAAC;YACnC,CAAC,CAAC,CAAC;YACH,IAAI,OAAO,GAAuC,WAAW,CAAC;YAC9D,IAAI,CAAC;gBACH,OAAO,MAAM,MAAM,EAAE,CAAC;YACxB,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,OAAO,GAAG,QAAQ,CAAC;gBACnB,MAAM,KAAK,CAAC;YACd,CAAC;oBAAS,CAAC;gBACT,MAAM,MAAM,GAAG;oBACb,GAAG,SAAS;oBACZ,OAAO;oBACP,KAAK,EAAE,CAAC;oBACR,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;iBACrC,CAAC;gBACF,IAAI,CAAC;oBACH,MAAM,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC;wBAClB,GAAG,MAAM;wBACT,UAAU,EAAE,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE;4BAC9C,IAAI,KAAK,CAAC,IAAI,KAAK,IAAI;gCAAE,OAAO,CAAC,KAAK,CAAC,CAAC;4BACxC,IAAI,KAAK,CAAC,KAAK,KAAK,CAAC;gCAAE,OAAO,EAAE,CAAC;4BACjC,OAAO,CAAC,EAAE,GAAG,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,GAAG,CAAC,EAAE,CAAC,CAAC;wBAChD,CAAC,CAAC;wBACF,aAAa,EAAE,MAAM;wBACrB,GAAG,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;qBACzD,CAAC,CAAC,CAAC;gBACN,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,IAAI,OAAO,KAAK,QAAQ;wBAAE,MAAM,KAAK,CAAC;gBACxC,CAAC;YACH,CAAC;QACH,CAAC;QACD,MAAM,EAAE,GAAG,EAAE,CACX,SAAS,CAAC,KAAK,IAAI,EAAE;YACnB,IAAI,OAAO;gBAAE,OAAO;YACpB,SAAS,CACP,MAAM,CAAC,UAAU,CAAC,MAAM,KAAK,CAAC,EAC9B,gEAAgE,CACjE,CAAC;YACF,IAAI,CAAC;gBACH,MAAM,MAAM,EAAE,CAAC;gBACf,MAAM,EAAE,CAAC,IAAI,CAAC,CAAC;YACjB,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,CAAC,CACH,KAAK;oBACL,OAAO,KAAK,KAAK,QAAQ;oBACzB,MAAM,IAAI,KAAK;oBACf,KAAK,CAAC,IAAI,KAAK,QAAQ,CACxB;oBACC,MAAM,KAAK,CAAC;YAChB,CAAC;YACD,OAAO,GAAG,IAAI,CAAC;QACjB,CAAC,CAAC;KACL,CAAC;AACJ,CAAC","sourcesContent":["import { randomUUID } from \"node:crypto\";\nimport { mkdir, open, realpath, rename, rm, opendir } from \"node:fs/promises\";\nimport { join } from \"node:path\";\nimport { invariant } from \"../domain/errors.ts\";\nimport { localProcessIdentity } from \"./git/process-identity.ts\";\nimport { readInspectionFile } from \"./inspection-file.ts\";\nimport { lockStorageMutation } from \"./storage-mutation-lock.ts\";\nimport { resourceActivityDefaults as defaults } from \"./resource-activity.constants.ts\";\nimport type {\n  ResourceActivity,\n  ResourceActivityOptions,\n  ResourceActivityRecord,\n  ResourceOperationResult,\n} from \"./resource-activity.types.ts\";\n\nasync function activityDirectory(repository: string): Promise<string> {\n  let path = repository;\n  for (const part of [\".outpost\", \"locks\", defaults.directory]) {\n    path = join(path, part);\n    await mkdir(path, { recursive: true, mode: 0o700 });\n    invariant(\n      (await realpath(path)) === path,\n      \"Resource activity directory must not use symlinks\",\n    );\n  }\n  return path;\n}\n\nexport async function registerResourceActivity(\n  options: ResourceActivityOptions,\n): Promise<ResourceActivity> {\n  for (const text of [options.workspace, options.provider])\n    invariant(\n      text.length > 0 && text.length <= defaults.maxText,\n      \"Resource activity metadata exceeds its size limit\",\n    );\n  const directory = await activityDirectory(options.repository);\n  const id = randomUUID();\n  const path = join(directory, `${id}.json`);\n  const createdAt = new Date().toISOString();\n  const identity = await localProcessIdentity();\n  let record: ResourceActivityRecord = {\n    version: 1,\n    id,\n    pid: process.pid,\n    ...(identity ? { identity } : {}),\n    provider: options.provider,\n    placement: options.placement,\n    workspace: options.workspace,\n    createdAt,\n    updatedAt: createdAt,\n    phase: \"allocating\",\n    operations: [],\n  };\n  const unlock = await lockStorageMutation(options.repository);\n  try {\n    let count = 0;\n    for await (const _entry of await opendir(directory))\n      invariant(\n        ++count < defaults.maxRecords,\n        \"Too many resource activity records; inspect retained ownership before continuing\",\n      );\n    const file = await open(path, \"wx\", 0o600);\n    try {\n      await file.writeFile(JSON.stringify(record));\n      await file.sync();\n    } finally {\n      await file.close();\n    }\n  } finally {\n    await unlock();\n  }\n  let pending = Promise.resolve();\n  let removed = false;\n  function serialize(action: () => Promise<void>): Promise<void> {\n    const next = pending.then(action);\n    pending = next.catch(() => undefined);\n    return next;\n  }\n  async function verify(): Promise<void> {\n    invariant(\n      (await realpath(directory)) === directory,\n      \"Resource activity directory changed\",\n    );\n    invariant(!removed, \"Resource activity is closed\");\n    const current = (\n      await readInspectionFile(path, defaults.maxRecordBytes)\n    ).toString(\"utf8\");\n    invariant(\n      current === JSON.stringify(record),\n      \"Resource activity identity changed; refusing mutation\",\n    );\n  }\n  function update(next: () => ResourceActivityRecord): Promise<void> {\n    return serialize(async () => {\n      await verify();\n      const value = { ...next(), updatedAt: new Date().toISOString() };\n      const data = JSON.stringify(value);\n      invariant(\n        Buffer.byteLength(data) <= defaults.maxRecordBytes,\n        \"Resource activity record exceeds its size limit\",\n      );\n      const temporary = `${path}.${randomUUID()}.tmp`;\n      const file = await open(temporary, \"wx\", 0o600);\n      try {\n        await file.writeFile(data);\n        await file.sync();\n        await file.close();\n        await rename(temporary, path);\n        record = value;\n      } finally {\n        await file.close();\n        await rm(temporary, { force: true });\n      }\n    });\n  }\n  return {\n    async idle() {\n      await pending;\n      return record.operations.length === 0;\n    },\n    phase: (phase) => update(() => ({ ...record, phase })),\n    async run(kind, action) {\n      const operation = {\n        id: randomUUID(),\n        kind,\n        startedAt: new Date().toISOString(),\n      };\n      await update(() => {\n        const active = record.operations.find((value) => value.kind === kind);\n        const operations = record.operations.filter(\n          (value) => value.kind !== kind,\n        );\n        operations.push({\n          kind,\n          startedAt: active?.startedAt ?? operation.startedAt,\n          count: (active?.count ?? 0) + 1,\n        });\n        return { ...record, operations };\n      });\n      let outcome: ResourceOperationResult[\"outcome\"] = \"completed\";\n      try {\n        return await action();\n      } catch (cause) {\n        outcome = \"failed\";\n        throw cause;\n      } finally {\n        const result = {\n          ...operation,\n          outcome,\n          count: 1,\n          finishedAt: new Date().toISOString(),\n        };\n        try {\n          await update(() => ({\n            ...record,\n            operations: record.operations.flatMap((value) => {\n              if (value.kind !== kind) return [value];\n              if (value.count === 1) return [];\n              return [{ ...value, count: value.count - 1 }];\n            }),\n            lastOperation: result,\n            ...(outcome === \"failed\" ? { lastFailure: result } : {}),\n          }));\n        } catch (cause) {\n          if (outcome !== \"failed\") throw cause;\n        }\n      }\n    },\n    remove: () =>\n      serialize(async () => {\n        if (removed) return;\n        invariant(\n          record.operations.length === 0,\n          \"Resource operations remain unsettled; activity record retained\",\n        );\n        try {\n          await verify();\n          await rm(path);\n        } catch (cause) {\n          if (!(\n            cause &&\n            typeof cause === \"object\" &&\n            \"code\" in cause &&\n            cause.code === \"ENOENT\"\n          ))\n            throw cause;\n        }\n        removed = true;\n      }),\n  };\n}\n"]}

package/dist/infrastructure/resource-activity.types.d.ts

@@ -0,0 +1,53 @@
+import type { LocalProcessIdentity, LockOwnership } from "./git/process-identity.types.ts";
+import type { StorageIssue } from "./storage-inventory.types.ts";
+import type { resourceOperationKinds, resourcePhases } from "./resource-activity.constants.ts";
+export type ResourcePhase = (typeof resourcePhases)[number];
+export type ResourceOperationKind = (typeof resourceOperationKinds)[number];
+export interface ResourceOperation {
+    readonly count: number;
+    readonly kind: ResourceOperationKind;
+    readonly startedAt: string;
+}
+export interface ResourceOperationResult extends ResourceOperation {
+    readonly id: string;
+    readonly finishedAt: string;
+    readonly outcome: "completed" | "failed";
+}
+export interface ResourceActivityRecord {
+    readonly version: 1;
+    readonly id: string;
+    readonly pid: number;
+    readonly identity?: LocalProcessIdentity;
+    readonly provider: string;
+    readonly placement: "mounted" | "remote" | "host";
+    readonly workspace: string;
+    readonly createdAt: string;
+    readonly updatedAt: string;
+    readonly phase: ResourcePhase;
+    readonly operations: readonly ResourceOperation[];
+    readonly lastOperation?: ResourceOperationResult;
+    readonly lastFailure?: ResourceOperationResult;
+}
+export interface ResourceActivity {
+    idle(): Promise<boolean>;
+    phase(phase: ResourcePhase): Promise<void>;
+    run<T>(kind: ResourceOperationKind, action: () => Promise<T>): Promise<T>;
+    remove(): Promise<void>;
+}
+export interface ResourceActivityOptions {
+    readonly repository: string;
+    readonly workspace: string;
+    readonly provider: string;
+    readonly placement: ResourceActivityRecord["placement"];
+}
+export interface ResourceInspectionEntry {
+    readonly path: string;
+    readonly record?: ResourceActivityRecord;
+    readonly ownership: LockOwnership;
+}
+export interface ResourceInspection {
+    readonly scope: "recorded-sandboxes";
+    readonly complete: boolean;
+    readonly entries: readonly ResourceInspectionEntry[];
+    readonly issues: readonly StorageIssue[];
+}

package/dist/infrastructure/resource-activity.types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=resource-activity.types.js.map

package/dist/infrastructure/resource-activity.types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"resource-activity.types.js","sourceRoot":"","sources":["../../src/infrastructure/resource-activity.types.ts"],"names":[],"mappings":"","sourcesContent":["import type {\n  LocalProcessIdentity,\n  LockOwnership,\n} from \"./git/process-identity.types.ts\";\nimport type { StorageIssue } from \"./storage-inventory.types.ts\";\nimport type {\n  resourceOperationKinds,\n  resourcePhases,\n} from \"./resource-activity.constants.ts\";\n\nexport type ResourcePhase = (typeof resourcePhases)[number];\nexport type ResourceOperationKind = (typeof resourceOperationKinds)[number];\nexport interface ResourceOperation {\n  readonly count: number;\n  readonly kind: ResourceOperationKind;\n  readonly startedAt: string;\n}\nexport interface ResourceOperationResult extends ResourceOperation {\n  readonly id: string;\n  readonly finishedAt: string;\n  readonly outcome: \"completed\" | \"failed\";\n}\nexport interface ResourceActivityRecord {\n  readonly version: 1;\n  readonly id: string;\n  readonly pid: number;\n  readonly identity?: LocalProcessIdentity;\n  readonly provider: string;\n  readonly placement: \"mounted\" | \"remote\" | \"host\";\n  readonly workspace: string;\n  readonly createdAt: string;\n  readonly updatedAt: string;\n  readonly phase: ResourcePhase;\n  readonly operations: readonly ResourceOperation[];\n  readonly lastOperation?: ResourceOperationResult;\n  readonly lastFailure?: ResourceOperationResult;\n}\nexport interface ResourceActivity {\n  idle(): Promise<boolean>;\n  phase(phase: ResourcePhase): Promise<void>;\n  run<T>(kind: ResourceOperationKind, action: () => Promise<T>): Promise<T>;\n  remove(): Promise<void>;\n}\nexport interface ResourceActivityOptions {\n  readonly repository: string;\n  readonly workspace: string;\n  readonly provider: string;\n  readonly placement: ResourceActivityRecord[\"placement\"];\n}\nexport interface ResourceInspectionEntry {\n  readonly path: string;\n  readonly record?: ResourceActivityRecord;\n  readonly ownership: LockOwnership;\n}\nexport interface ResourceInspection {\n  readonly scope: \"recorded-sandboxes\";\n  readonly complete: boolean;\n  readonly entries: readonly ResourceInspectionEntry[];\n  readonly issues: readonly StorageIssue[];\n}\n"]}

package/dist/infrastructure/storage-inventory.constants.d.ts

@@ -0,0 +1,6 @@
+import type { StorageCategoryName } from "./storage-inventory.types.ts";
+export declare const storageCategories: readonly StorageCategoryName[];
+export declare const storageInventoryDefaults: Readonly<{
+    maxEntries: 100000;
+    maxDepth: 64;
+}>;

package/dist/infrastructure/storage-inventory.constants.js

@@ -0,0 +1,11 @@
+export const storageCategories = [
+    "recovery",
+    "logs",
+    "locks",
+    "workspaces",
+];
+export const storageInventoryDefaults = Object.freeze({
+    maxEntries: 100_000,
+    maxDepth: 64,
+});
+//# sourceMappingURL=storage-inventory.constants.js.map

package/dist/infrastructure/storage-inventory.constants.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"storage-inventory.constants.js","sourceRoot":"","sources":["../../src/infrastructure/storage-inventory.constants.ts"],"names":[],"mappings":"AAEA,MAAM,CAAC,MAAM,iBAAiB,GAAmC;IAC/D,UAAU;IACV,MAAM;IACN,OAAO;IACP,YAAY;CACb,CAAC;AACF,MAAM,CAAC,MAAM,wBAAwB,GAAG,MAAM,CAAC,MAAM,CAAC;IACpD,UAAU,EAAE,OAAO;IACnB,QAAQ,EAAE,EAAE;CACb,CAAC,CAAC","sourcesContent":["import type { StorageCategoryName } from \"./storage-inventory.types.ts\";\n\nexport const storageCategories: readonly StorageCategoryName[] = [\n  \"recovery\",\n  \"logs\",\n  \"locks\",\n  \"workspaces\",\n];\nexport const storageInventoryDefaults = Object.freeze({\n  maxEntries: 100_000,\n  maxDepth: 64,\n});\n"]}

package/dist/infrastructure/storage-inventory.d.ts

@@ -0,0 +1,2 @@
+import type { StorageInventory } from "./storage-inventory.types.ts";
+export declare function storageInventory(root: string, maxEntries?: number): Promise<StorageInventory>;