@elie-laloum/outpost 2.0.0 → 4.0.0

package/dist/application/recovery-restorability.js

@@ -0,0 +1,137 @@
+import { copyFile, lstat, mkdir, mkdtemp, realpath, rm, } from "node:fs/promises";
+import { tmpdir } from "node:os";
+import { join } from "node:path";
+import { directory, safeDestination } from "../infrastructure/files.js";
+import { verificationGit as git } from "../infrastructure/git/verification-command.js";
+import { hashInspectionEntry } from "../infrastructure/inspection-hash.js";
+import { recoveryTransferPatches } from "./recovery-verification.constants.js";
+export async function verifyRecoveryRestorability(root, state, repository) {
+    const temporary = await realpath(await mkdtemp(join(tmpdir(), "outpost-restore-check-")));
+    const checks = [];
+    let stage = "REPOSITORY_OBJECTS";
+    try {
+        const source = await directory(repository);
+        stage = "SOURCE_UNSUPPORTED";
+        const common = (await git(source, [
+            "rev-parse",
+            "--path-format=absolute",
+            "--git-common-dir",
+        ])).trim();
+        const configuration = await git(source, [
+            "config",
+            "--local",
+            "--null",
+            "--list",
+        ]);
+        if (/(?:extensions\.partialclone|remote\.[^\n\0]+\.(?:promisor|partialclonefilter))\n/i.test(configuration))
+            throw new Error("Partial repositories are unsupported");
+        for (const name of [
+            "shallow",
+            "objects/info/alternates",
+            "objects/info/http-alternates",
+        ]) {
+            const exists = await lstat(join(common, name)).then(() => true, (error) => {
+                if (error &&
+                    typeof error === "object" &&
+                    "code" in error &&
+                    error.code === "ENOENT")
+                    return false;
+                throw error;
+            });
+            if (exists)
+                throw new Error("Repository depends on external or shallow objects");
+        }
+        const checkout = join(temporary, "checkout");
+        const snapshot = join(temporary, "transfer");
+        await mkdir(snapshot);
+        for (const name of [
+            ...recoveryTransferPatches,
+            ...(state.previous !== state.next ? ["commits.bundle"] : []),
+        ]) {
+            stage = "TRANSFER_SNAPSHOT";
+            const path = await safeDestination(root, name);
+            const before = await hashInspectionEntry(path);
+            if (before.kind !== "file")
+                throw new Error("Expected a regular transfer file");
+            await copyFile(path, join(snapshot, name));
+            const copied = await hashInspectionEntry(join(snapshot, name));
+            if (before.sha256 !== copied.sha256 || before.bytes !== copied.bytes)
+                throw new Error("Transfer changed while copying");
+        }
+        stage = "REPOSITORY_OBJECTS";
+        await git(temporary, [
+            "clone",
+            "--local",
+            "--no-hardlinks",
+            "--no-checkout",
+            "--",
+            source,
+            checkout,
+        ]);
+        if (state.previous !== state.next) {
+            stage = "BUNDLE_OBJECTS";
+            await git(checkout, [
+                "bundle",
+                "verify",
+                join(snapshot, "commits.bundle"),
+            ]);
+            await git(checkout, [
+                "bundle",
+                "unbundle",
+                join(snapshot, "commits.bundle"),
+            ]);
+            checks.push({
+                path: join(root, "commits.bundle"),
+                status: "pass",
+                code: "BUNDLE_OBJECTS_VALID",
+            });
+        }
+        stage = "COMMIT_OBJECTS";
+        await git(checkout, ["cat-file", "-e", `${state.previous}^{commit}`]);
+        await git(checkout, ["cat-file", "-e", `${state.next}^{commit}`]);
+        await git(checkout, [
+            "fsck",
+            "--strict",
+            "--no-reflogs",
+            state.previous,
+            state.next,
+        ]);
+        checks.push({ path: root, status: "pass", code: "COMMIT_OBJECTS_VALID" });
+        for (const [name, commit, cached] of [
+            ["previous.patch", state.previous, false],
+            ["previous-index.patch", state.previous, true],
+            ["remote.patch", state.next, false],
+        ]) {
+            stage = `PATCH_${name.toUpperCase().replaceAll(/[.-]/g, "_")}`;
+            await git(checkout, ["reset", "--hard", commit]);
+            const patch = join(snapshot, name);
+            if ((await lstat(patch)).size) {
+                const args = [
+                    "apply",
+                    "--binary",
+                    ...(cached ? ["--cached"] : []),
+                    patch,
+                ];
+                await git(checkout, [...args.slice(0, -1), "--check", patch]);
+                await git(checkout, args);
+            }
+            checks.push({
+                path: join(root, name),
+                status: "pass",
+                code: "PATCH_APPLIES",
+            });
+        }
+    }
+    catch {
+        checks.push({
+            path: root,
+            status: "fail",
+            code: stage === "SOURCE_UNSUPPORTED" ? stage : `${stage}_FAILED`,
+        });
+    }
+    finally {
+        await rm(temporary, { recursive: true, force: true, maxRetries: 3 });
+    }
+    return checks;
+}
+//# sourceMappingURL=recovery-restorability.js.map

package/dist/application/recovery-restorability.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"recovery-restorability.js","sourceRoot":"","sources":["../../src/application/recovery-restorability.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,QAAQ,EACR,KAAK,EACL,KAAK,EACL,OAAO,EACP,QAAQ,EACR,EAAE,GACH,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,SAAS,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAC;AACxE,OAAO,EAAE,eAAe,IAAI,GAAG,EAAE,MAAM,+CAA+C,CAAC;AACvF,OAAO,EAAE,mBAAmB,EAAE,MAAM,sCAAsC,CAAC;AAC3E,OAAO,EAAE,uBAAuB,EAAE,MAAM,sCAAsC,CAAC;AAM/E,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAC/C,IAAY,EACZ,KAA4B,EAC5B,UAAkB;IAElB,MAAM,SAAS,GAAG,MAAM,QAAQ,CAC9B,MAAM,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,wBAAwB,CAAC,CAAC,CACxD,CAAC;IACF,MAAM,MAAM,GAA6B,EAAE,CAAC;IAC5C,IAAI,KAAK,GAAG,oBAAoB,CAAC;IACjC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,UAAU,CAAC,CAAC;QAC3C,KAAK,GAAG,oBAAoB,CAAC;QAC7B,MAAM,MAAM,GAAG,CACb,MAAM,GAAG,CAAC,MAAM,EAAE;YAChB,WAAW;YACX,wBAAwB;YACxB,kBAAkB;SACnB,CAAC,CACH,CAAC,IAAI,EAAE,CAAC;QACT,MAAM,aAAa,GAAG,MAAM,GAAG,CAAC,MAAM,EAAE;YACtC,QAAQ;YACR,SAAS;YACT,QAAQ;YACR,QAAQ;SACT,CAAC,CAAC;QACH,IACE,mFAAmF,CAAC,IAAI,CACtF,aAAa,CACd;YAED,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;QAC1D,KAAK,MAAM,IAAI,IAAI;YACjB,SAAS;YACT,yBAAyB;YACzB,8BAA8B;SAC/B,EAAE,CAAC;YACF,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,CACjD,GAAG,EAAE,CAAC,IAAI,EACV,CAAC,KAAc,EAAE,EAAE;gBACjB,IACE,KAAK;oBACL,OAAO,KAAK,KAAK,QAAQ;oBACzB,MAAM,IAAI,KAAK;oBACf,KAAK,CAAC,IAAI,KAAK,QAAQ;oBAEvB,OAAO,KAAK,CAAC;gBACf,MAAM,KAAK,CAAC;YACd,CAAC,CACF,CAAC;YACF,IAAI,MAAM;gBACR,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;QACzE,CAAC;QACD,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC;QAC7C,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC;QAC7C,MAAM,KAAK,CAAC,QAAQ,CAAC,CAAC;QACtB,KAAK,MAAM,IAAI,IAAI;YACjB,GAAG,uBAAuB;YAC1B,GAAG,CAAC,KAAK,CAAC,QAAQ,KAAK,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;SAC7D,EAAE,CAAC;YACF,KAAK,GAAG,mBAAmB,CAAC;YAC5B,MAAM,IAAI,GAAG,MAAM,eAAe,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;YAC/C,MAAM,MAAM,GAAG,MAAM,mBAAmB,CAAC,IAAI,CAAC,CAAC;YAC/C,IAAI,MAAM,CAAC,IAAI,KAAK,MAAM;gBACxB,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;YACtD,MAAM,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC;YAC3C,MAAM,MAAM,GAAG,MAAM,mBAAmB,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC;YAC/D,IAAI,MAAM,CAAC,MAAM,KAAK,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC,KAAK,KAAK,MAAM,CAAC,KAAK;gBAClE,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;QACtD,CAAC;QACD,KAAK,GAAG,oBAAoB,CAAC;QAC7B,MAAM,GAAG,CAAC,SAAS,EAAE;YACnB,OAAO;YACP,SAAS;YACT,gBAAgB;YAChB,eAAe;YACf,IAAI;YACJ,MAAM;YACN,QAAQ;SACT,CAAC,CAAC;QACH,IAAI,KAAK,CAAC,QAAQ,KAAK,KAAK,CAAC,IAAI,EAAE,CAAC;YAClC,KAAK,GAAG,gBAAgB,CAAC;YACzB,MAAM,GAAG,CAAC,QAAQ,EAAE;gBAClB,QAAQ;gBACR,QAAQ;gBACR,IAAI,CAAC,QAAQ,EAAE,gBAAgB,CAAC;aACjC,CAAC,CAAC;YACH,MAAM,GAAG,CAAC,QAAQ,EAAE;gBAClB,QAAQ;gBACR,UAAU;gBACV,IAAI,CAAC,QAAQ,EAAE,gBAAgB,CAAC;aACjC,CAAC,CAAC;YACH,MAAM,CAAC,IAAI,CAAC;gBACV,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,gBAAgB,CAAC;gBAClC,MAAM,EAAE,MAAM;gBACd,IAAI,EAAE,sBAAsB;aAC7B,CAAC,CAAC;QACL,CAAC;QACD,KAAK,GAAG,gBAAgB,CAAC;QACzB,MAAM,GAAG,CAAC,QAAQ,EAAE,CAAC,UAAU,EAAE,IAAI,EAAE,GAAG,KAAK,CAAC,QAAQ,WAAW,CAAC,CAAC,CAAC;QACtE,MAAM,GAAG,CAAC,QAAQ,EAAE,CAAC,UAAU,EAAE,IAAI,EAAE,GAAG,KAAK,CAAC,IAAI,WAAW,CAAC,CAAC,CAAC;QAClE,MAAM,GAAG,CAAC,QAAQ,EAAE;YAClB,MAAM;YACN,UAAU;YACV,cAAc;YACd,KAAK,CAAC,QAAQ;YACd,KAAK,CAAC,IAAI;SACX,CAAC,CAAC;QACH,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,sBAAsB,EAAE,CAAC,CAAC;QAC1E,KAAK,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,IAAI;YACnC,CAAC,gBAAgB,EAAE,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC;YACzC,CAAC,sBAAsB,EAAE,KAAK,CAAC,QAAQ,EAAE,IAAI,CAAC;YAC9C,CAAC,cAAc,EAAE,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC;SAC3B,EAAE,CAAC;YACX,KAAK,GAAG,SAAS,IAAI,CAAC,WAAW,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,GAAG,CAAC,EAAE,CAAC;YAC/D,MAAM,GAAG,CAAC,QAAQ,EAAE,CAAC,OAAO,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC;YACjD,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;YACnC,IAAI,CAAC,MAAM,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;gBAC9B,MAAM,IAAI,GAAG;oBACX,OAAO;oBACP,UAAU;oBACV,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;oBAC/B,KAAK;iBACN,CAAC;gBACF,MAAM,GAAG,CAAC,QAAQ,EAAE,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC,CAAC;gBAC9D,MAAM,GAAG,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;YAC5B,CAAC;YACD,MAAM,CAAC,IAAI,CAAC;gBACV,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC;gBACtB,MAAM,EAAE,MAAM;gBACd,IAAI,EAAE,eAAe;aACtB,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,CAAC,IAAI,CAAC;YACV,IAAI,EAAE,IAAI;YACV,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,KAAK,KAAK,oBAAoB,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,KAAK,SAAS;SACjE,CAAC,CAAC;IACL,CAAC;YAAS,CAAC;QACT,MAAM,EAAE,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,EAAE,CAAC,CAAC;IACvE,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC","sourcesContent":["import {\n  copyFile,\n  lstat,\n  mkdir,\n  mkdtemp,\n  realpath,\n  rm,\n} from \"node:fs/promises\";\nimport { tmpdir } from \"node:os\";\nimport { join } from \"node:path\";\nimport { directory, safeDestination } from \"../infrastructure/files.ts\";\nimport { verificationGit as git } from \"../infrastructure/git/verification-command.ts\";\nimport { hashInspectionEntry } from \"../infrastructure/inspection-hash.ts\";\nimport { recoveryTransferPatches } from \"./recovery-verification.constants.ts\";\nimport type {\n  RecoveryStructureCheck,\n  RecoveryTransferState,\n} from \"./recovery-verification.types.ts\";\n\nexport async function verifyRecoveryRestorability(\n  root: string,\n  state: RecoveryTransferState,\n  repository: string,\n): Promise<readonly RecoveryStructureCheck[]> {\n  const temporary = await realpath(\n    await mkdtemp(join(tmpdir(), \"outpost-restore-check-\")),\n  );\n  const checks: RecoveryStructureCheck[] = [];\n  let stage = \"REPOSITORY_OBJECTS\";\n  try {\n    const source = await directory(repository);\n    stage = \"SOURCE_UNSUPPORTED\";\n    const common = (\n      await git(source, [\n        \"rev-parse\",\n        \"--path-format=absolute\",\n        \"--git-common-dir\",\n      ])\n    ).trim();\n    const configuration = await git(source, [\n      \"config\",\n      \"--local\",\n      \"--null\",\n      \"--list\",\n    ]);\n    if (\n      /(?:extensions\\.partialclone|remote\\.[^\\n\\0]+\\.(?:promisor|partialclonefilter))\\n/i.test(\n        configuration,\n      )\n    )\n      throw new Error(\"Partial repositories are unsupported\");\n    for (const name of [\n      \"shallow\",\n      \"objects/info/alternates\",\n      \"objects/info/http-alternates\",\n    ]) {\n      const exists = await lstat(join(common, name)).then(\n        () => true,\n        (error: unknown) => {\n          if (\n            error &&\n            typeof error === \"object\" &&\n            \"code\" in error &&\n            error.code === \"ENOENT\"\n          )\n            return false;\n          throw error;\n        },\n      );\n      if (exists)\n        throw new Error(\"Repository depends on external or shallow objects\");\n    }\n    const checkout = join(temporary, \"checkout\");\n    const snapshot = join(temporary, \"transfer\");\n    await mkdir(snapshot);\n    for (const name of [\n      ...recoveryTransferPatches,\n      ...(state.previous !== state.next ? [\"commits.bundle\"] : []),\n    ]) {\n      stage = \"TRANSFER_SNAPSHOT\";\n      const path = await safeDestination(root, name);\n      const before = await hashInspectionEntry(path);\n      if (before.kind !== \"file\")\n        throw new Error(\"Expected a regular transfer file\");\n      await copyFile(path, join(snapshot, name));\n      const copied = await hashInspectionEntry(join(snapshot, name));\n      if (before.sha256 !== copied.sha256 || before.bytes !== copied.bytes)\n        throw new Error(\"Transfer changed while copying\");\n    }\n    stage = \"REPOSITORY_OBJECTS\";\n    await git(temporary, [\n      \"clone\",\n      \"--local\",\n      \"--no-hardlinks\",\n      \"--no-checkout\",\n      \"--\",\n      source,\n      checkout,\n    ]);\n    if (state.previous !== state.next) {\n      stage = \"BUNDLE_OBJECTS\";\n      await git(checkout, [\n        \"bundle\",\n        \"verify\",\n        join(snapshot, \"commits.bundle\"),\n      ]);\n      await git(checkout, [\n        \"bundle\",\n        \"unbundle\",\n        join(snapshot, \"commits.bundle\"),\n      ]);\n      checks.push({\n        path: join(root, \"commits.bundle\"),\n        status: \"pass\",\n        code: \"BUNDLE_OBJECTS_VALID\",\n      });\n    }\n    stage = \"COMMIT_OBJECTS\";\n    await git(checkout, [\"cat-file\", \"-e\", `${state.previous}^{commit}`]);\n    await git(checkout, [\"cat-file\", \"-e\", `${state.next}^{commit}`]);\n    await git(checkout, [\n      \"fsck\",\n      \"--strict\",\n      \"--no-reflogs\",\n      state.previous,\n      state.next,\n    ]);\n    checks.push({ path: root, status: \"pass\", code: \"COMMIT_OBJECTS_VALID\" });\n    for (const [name, commit, cached] of [\n      [\"previous.patch\", state.previous, false],\n      [\"previous-index.patch\", state.previous, true],\n      [\"remote.patch\", state.next, false],\n    ] as const) {\n      stage = `PATCH_${name.toUpperCase().replaceAll(/[.-]/g, \"_\")}`;\n      await git(checkout, [\"reset\", \"--hard\", commit]);\n      const patch = join(snapshot, name);\n      if ((await lstat(patch)).size) {\n        const args = [\n          \"apply\",\n          \"--binary\",\n          ...(cached ? [\"--cached\"] : []),\n          patch,\n        ];\n        await git(checkout, [...args.slice(0, -1), \"--check\", patch]);\n        await git(checkout, args);\n      }\n      checks.push({\n        path: join(root, name),\n        status: \"pass\",\n        code: \"PATCH_APPLIES\",\n      });\n    }\n  } catch {\n    checks.push({\n      path: root,\n      status: \"fail\",\n      code: stage === \"SOURCE_UNSUPPORTED\" ? stage : `${stage}_FAILED`,\n    });\n  } finally {\n    await rm(temporary, { recursive: true, force: true, maxRetries: 3 });\n  }\n  return checks;\n}\n"]}

package/dist/application/recovery-restore-snapshot.d.ts

@@ -0,0 +1,2 @@
+import type { RecoveryRestoreSnapshot } from "./recovery-restore.types.ts";
+export declare function snapshotRecoveryTransfer(path: string, maxBytes?: number): Promise<RecoveryRestoreSnapshot>;

package/dist/application/recovery-restore-snapshot.js

@@ -0,0 +1,57 @@
+import { createHash } from "node:crypto";
+import { cp, lstat, mkdir, mkdtemp, realpath, rm, writeFile, } from "node:fs/promises";
+import { tmpdir } from "node:os";
+import { dirname, join } from "node:path";
+import { invariant, positive } from "../domain/errors.js";
+import { directory, safeDestination } from "../infrastructure/files.js";
+import { readInspectionFile } from "../infrastructure/inspection-file.js";
+import { recoveryChecksumPaths } from "./recovery-checksum-paths.js";
+import { recoveryChecksumDefaults } from "./recovery-checksums.constants.js";
+import { recoveryVerificationDefaults } from "./recovery-verification.constants.js";
+import { transferState, verifyRecoveryTransfer, } from "./recovery-verification.js";
+export async function snapshotRecoveryTransfer(path, maxBytes = recoveryChecksumDefaults.maxBytes) {
+    positive(maxBytes, "maxBytes");
+    const source = await directory(path);
+    const stateBytes = await readInspectionFile(join(source, "state.json"), recoveryVerificationDefaults.maxStateBytes);
+    const state = JSON.parse(stateBytes.toString("utf8"));
+    invariant(transferState(state), "Invalid recovery transfer state");
+    const manifest = await readInspectionFile(join(source, recoveryChecksumDefaults.filename), recoveryChecksumDefaults.maxManifestBytes);
+    const snapshot = await realpath(await mkdtemp(join(tmpdir(), "outpost-restore-")));
+    const dispose = () => rm(snapshot, { recursive: true, force: true, maxRetries: 3 });
+    try {
+        await writeFile(join(snapshot, "state.json"), stateBytes, { mode: 0o600 });
+        await writeFile(join(snapshot, recoveryChecksumDefaults.filename), manifest, { mode: 0o600 });
+        let bytes = stateBytes.length;
+        for (const entry of recoveryChecksumPaths(state).filter((name) => name !== "state.json")) {
+            const from = await safeDestination(source, entry);
+            const info = await lstat(from);
+            invariant(info.isFile() || info.isSymbolicLink(), "Unsupported recovery payload type");
+            bytes += info.size;
+            invariant(bytes <= maxBytes, "Recovery snapshot byte limit exceeded");
+            const to = await safeDestination(snapshot, entry);
+            await mkdir(dirname(to), { recursive: true, mode: 0o700 });
+            await cp(from, to, {
+                dereference: false,
+                verbatimSymlinks: true,
+                force: false,
+                errorOnExist: true,
+            });
+        }
+        const verified = await verifyRecoveryTransfer(snapshot, {
+            checksums: true,
+            maxBytes,
+        });
+        invariant(verified.complete && verified.integrity === "checksums-match", "Recovery snapshot integrity verification failed");
+        return {
+            directory: snapshot,
+            state,
+            manifestSha256: createHash("sha256").update(manifest).digest("hex"),
+            dispose,
+        };
+    }
+    catch (error) {
+        await dispose();
+        throw error;
+    }
+}
+//# sourceMappingURL=recovery-restore-snapshot.js.map

package/dist/application/recovery-restore-snapshot.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"recovery-restore-snapshot.js","sourceRoot":"","sources":["../../src/application/recovery-restore-snapshot.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EACL,EAAE,EACF,KAAK,EACL,KAAK,EACL,OAAO,EACP,QAAQ,EACR,EAAE,EACF,SAAS,GACV,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AAC1D,OAAO,EAAE,SAAS,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAC;AACxE,OAAO,EAAE,kBAAkB,EAAE,MAAM,sCAAsC,CAAC;AAC1E,OAAO,EAAE,qBAAqB,EAAE,MAAM,8BAA8B,CAAC;AACrE,OAAO,EAAE,wBAAwB,EAAE,MAAM,mCAAmC,CAAC;AAC7E,OAAO,EAAE,4BAA4B,EAAE,MAAM,sCAAsC,CAAC;AACpF,OAAO,EACL,aAAa,EACb,sBAAsB,GACvB,MAAM,4BAA4B,CAAC;AAGpC,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAC5C,IAAY,EACZ,WAAmB,wBAAwB,CAAC,QAAQ;IAEpD,QAAQ,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;IAC/B,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,IAAI,CAAC,CAAC;IACrC,MAAM,UAAU,GAAG,MAAM,kBAAkB,CACzC,IAAI,CAAC,MAAM,EAAE,YAAY,CAAC,EAC1B,4BAA4B,CAAC,aAAa,CAC3C,CAAC;IACF,MAAM,KAAK,GAAY,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;IAC/D,SAAS,CAAC,aAAa,CAAC,KAAK,CAAC,EAAE,iCAAiC,CAAC,CAAC;IACnE,MAAM,QAAQ,GAAG,MAAM,kBAAkB,CACvC,IAAI,CAAC,MAAM,EAAE,wBAAwB,CAAC,QAAQ,CAAC,EAC/C,wBAAwB,CAAC,gBAAgB,CAC1C,CAAC;IACF,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAC7B,MAAM,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,kBAAkB,CAAC,CAAC,CAClD,CAAC;IACF,MAAM,OAAO,GAAG,GAAG,EAAE,CACnB,EAAE,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,EAAE,CAAC,CAAC;IAChE,IAAI,CAAC;QACH,MAAM,SAAS,CAAC,IAAI,CAAC,QAAQ,EAAE,YAAY,CAAC,EAAE,UAAU,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAC3E,MAAM,SAAS,CACb,IAAI,CAAC,QAAQ,EAAE,wBAAwB,CAAC,QAAQ,CAAC,EACjD,QAAQ,EACR,EAAE,IAAI,EAAE,KAAK,EAAE,CAChB,CAAC;QACF,IAAI,KAAK,GAAG,UAAU,CAAC,MAAM,CAAC;QAC9B,KAAK,MAAM,KAAK,IAAI,qBAAqB,CAAC,KAAK,CAAC,CAAC,MAAM,CACrD,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,KAAK,YAAY,CAChC,EAAE,CAAC;YACF,MAAM,IAAI,GAAG,MAAM,eAAe,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;YAClD,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC;YAC/B,SAAS,CACP,IAAI,CAAC,MAAM,EAAE,IAAI,IAAI,CAAC,cAAc,EAAE,EACtC,mCAAmC,CACpC,CAAC;YACF,KAAK,IAAI,IAAI,CAAC,IAAI,CAAC;YACnB,SAAS,CAAC,KAAK,IAAI,QAAQ,EAAE,uCAAuC,CAAC,CAAC;YACtE,MAAM,EAAE,GAAG,MAAM,eAAe,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;YAClD,MAAM,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;YAC3D,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,EAAE;gBACjB,WAAW,EAAE,KAAK;gBAClB,gBAAgB,EAAE,IAAI;gBACtB,KAAK,EAAE,KAAK;gBACZ,YAAY,EAAE,IAAI;aACnB,CAAC,CAAC;QACL,CAAC;QACD,MAAM,QAAQ,GAAG,MAAM,sBAAsB,CAAC,QAAQ,EAAE;YACtD,SAAS,EAAE,IAAI;YACf,QAAQ;SACT,CAAC,CAAC;QACH,SAAS,CACP,QAAQ,CAAC,QAAQ,IAAI,QAAQ,CAAC,SAAS,KAAK,iBAAiB,EAC7D,iDAAiD,CAClD,CAAC;QACF,OAAO;YACL,SAAS,EAAE,QAAQ;YACnB,KAAK;YACL,cAAc,EAAE,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;YACnE,OAAO;SACR,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,OAAO,EAAE,CAAC;QAChB,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC","sourcesContent":["import { createHash } from \"node:crypto\";\nimport {\n  cp,\n  lstat,\n  mkdir,\n  mkdtemp,\n  realpath,\n  rm,\n  writeFile,\n} from \"node:fs/promises\";\nimport { tmpdir } from \"node:os\";\nimport { dirname, join } from \"node:path\";\nimport { invariant, positive } from \"../domain/errors.ts\";\nimport { directory, safeDestination } from \"../infrastructure/files.ts\";\nimport { readInspectionFile } from \"../infrastructure/inspection-file.ts\";\nimport { recoveryChecksumPaths } from \"./recovery-checksum-paths.ts\";\nimport { recoveryChecksumDefaults } from \"./recovery-checksums.constants.ts\";\nimport { recoveryVerificationDefaults } from \"./recovery-verification.constants.ts\";\nimport {\n  transferState,\n  verifyRecoveryTransfer,\n} from \"./recovery-verification.ts\";\nimport type { RecoveryRestoreSnapshot } from \"./recovery-restore.types.ts\";\n\nexport async function snapshotRecoveryTransfer(\n  path: string,\n  maxBytes: number = recoveryChecksumDefaults.maxBytes,\n): Promise<RecoveryRestoreSnapshot> {\n  positive(maxBytes, \"maxBytes\");\n  const source = await directory(path);\n  const stateBytes = await readInspectionFile(\n    join(source, \"state.json\"),\n    recoveryVerificationDefaults.maxStateBytes,\n  );\n  const state: unknown = JSON.parse(stateBytes.toString(\"utf8\"));\n  invariant(transferState(state), \"Invalid recovery transfer state\");\n  const manifest = await readInspectionFile(\n    join(source, recoveryChecksumDefaults.filename),\n    recoveryChecksumDefaults.maxManifestBytes,\n  );\n  const snapshot = await realpath(\n    await mkdtemp(join(tmpdir(), \"outpost-restore-\")),\n  );\n  const dispose = () =>\n    rm(snapshot, { recursive: true, force: true, maxRetries: 3 });\n  try {\n    await writeFile(join(snapshot, \"state.json\"), stateBytes, { mode: 0o600 });\n    await writeFile(\n      join(snapshot, recoveryChecksumDefaults.filename),\n      manifest,\n      { mode: 0o600 },\n    );\n    let bytes = stateBytes.length;\n    for (const entry of recoveryChecksumPaths(state).filter(\n      (name) => name !== \"state.json\",\n    )) {\n      const from = await safeDestination(source, entry);\n      const info = await lstat(from);\n      invariant(\n        info.isFile() || info.isSymbolicLink(),\n        \"Unsupported recovery payload type\",\n      );\n      bytes += info.size;\n      invariant(bytes <= maxBytes, \"Recovery snapshot byte limit exceeded\");\n      const to = await safeDestination(snapshot, entry);\n      await mkdir(dirname(to), { recursive: true, mode: 0o700 });\n      await cp(from, to, {\n        dereference: false,\n        verbatimSymlinks: true,\n        force: false,\n        errorOnExist: true,\n      });\n    }\n    const verified = await verifyRecoveryTransfer(snapshot, {\n      checksums: true,\n      maxBytes,\n    });\n    invariant(\n      verified.complete && verified.integrity === \"checksums-match\",\n      \"Recovery snapshot integrity verification failed\",\n    );\n    return {\n      directory: snapshot,\n      state,\n      manifestSha256: createHash(\"sha256\").update(manifest).digest(\"hex\"),\n      dispose,\n    };\n  } catch (error) {\n    await dispose();\n    throw error;\n  }\n}\n"]}

package/dist/application/recovery-restore.d.ts

@@ -0,0 +1,3 @@
+import type { RecoveryRestoreOptions, RecoveryRestorePlan, RecoveryRestoreResult } from "./recovery-restore.types.ts";
+export declare function planRecoveryRestore(options: RecoveryRestoreOptions): Promise<RecoveryRestorePlan>;
+export declare function restoreRecoveryTransfer(plan: RecoveryRestorePlan): Promise<RecoveryRestoreResult>;

package/dist/application/recovery-restore.js

@@ -0,0 +1,161 @@
+import { createHash } from "node:crypto";
+import { cp, lstat, mkdir } from "node:fs/promises";
+import { basename, dirname, join, resolve } from "node:path";
+import { invariant, OutpostError } from "../domain/errors.js";
+import { directory, inside, safeDestination } from "../infrastructure/files.js";
+import { verificationGit as git } from "../infrastructure/git/verification-command.js";
+import { verifyRecoveryRestorability } from "./recovery-restorability.js";
+import { snapshotRecoveryTransfer } from "./recovery-restore-snapshot.js";
+function planFingerprint(plan) {
+    return createHash("sha256")
+        .update(JSON.stringify([
+        plan.directory,
+        plan.repository,
+        plan.destination,
+        plan.side,
+        plan.maxBytes ?? null,
+        plan.manifestSha256,
+        plan.commit,
+        plan.payloads,
+        plan.staging,
+    ]))
+        .digest("hex");
+}
+async function absent(path) {
+    const present = await lstat(path).then(() => true, (error) => {
+        if (error &&
+            typeof error === "object" &&
+            "code" in error &&
+            error.code === "ENOENT")
+            return false;
+        throw error;
+    });
+    invariant(!present, "Recovery destination already exists");
+}
+async function locations(options) {
+    invariant(options.side === "previous" || options.side === "incoming", "Recovery side must be previous or incoming");
+    const repository = await directory(options.repository);
+    const transfer = await directory(options.directory);
+    const destination = join(await directory(dirname(resolve(options.destination))), basename(resolve(options.destination)));
+    const common = await directory((await git(repository, [
+        "rev-parse",
+        "--path-format=absolute",
+        "--git-common-dir",
+    ])).trim());
+    invariant(!inside(repository, destination) &&
+        !inside(transfer, destination) &&
+        !inside(common, destination), "Recovery destination must be outside the source repository, Git metadata and transfer");
+    await absent(destination);
+    return { repository, directory: transfer, destination };
+}
+export async function planRecoveryRestore(options) {
+    const paths = await locations(options);
+    const snapshot = await snapshotRecoveryTransfer(paths.directory, options.maxBytes);
+    try {
+        const checks = await verifyRecoveryRestorability(snapshot.directory, snapshot.state, paths.repository);
+        invariant(checks.every((check) => check.status === "pass"), "Recovery Git restorability verification failed");
+        const plan = {
+            ...options,
+            ...paths,
+            manifestSha256: snapshot.manifestSha256,
+            commit: options.side === "previous"
+                ? snapshot.state.previous
+                : snapshot.state.next,
+            payloads: options.side === "previous"
+                ? snapshot.state.previousExtras
+                : snapshot.state.incoming,
+            staging: options.side === "previous"
+                ? "preserved"
+                : "unavailable",
+        };
+        return { ...plan, fingerprint: planFingerprint(plan) };
+    }
+    finally {
+        await snapshot.dispose();
+    }
+}
+async function applyPatch(checkout, patch, cached = false) {
+    if (!(await lstat(patch)).size)
+        return;
+    await git(checkout, [
+        "apply",
+        "--binary",
+        ...(cached ? ["--cached"] : []),
+        patch,
+    ]);
+}
+export async function restoreRecoveryTransfer(plan) {
+    invariant(plan.fingerprint === planFingerprint(plan), "Recovery plan changed after planning");
+    const paths = await locations(plan);
+    invariant(paths.repository === plan.repository &&
+        paths.directory === plan.directory &&
+        paths.destination === plan.destination, "Recovery plan paths changed after planning");
+    const snapshot = await snapshotRecoveryTransfer(paths.directory, plan.maxBytes);
+    let owned = false;
+    try {
+        invariant(snapshot.manifestSha256 === plan.manifestSha256, "Recovery transfer changed since planning");
+        const commit = plan.side === "previous" ? snapshot.state.previous : snapshot.state.next;
+        invariant(commit === plan.commit, "Recovery plan commit changed");
+        const checks = await verifyRecoveryRestorability(snapshot.directory, snapshot.state, paths.repository);
+        invariant(checks.every((check) => check.status === "pass"), "Recovery Git restorability verification failed");
+        await mkdir(paths.destination, { mode: 0o700 });
+        owned = true;
+        await git(dirname(paths.destination), [
+            "clone",
+            "--local",
+            "--no-hardlinks",
+            "--no-checkout",
+            "--",
+            paths.repository,
+            paths.destination,
+        ]);
+        await git(paths.destination, ["remote", "remove", "origin"]);
+        if (snapshot.state.previous !== snapshot.state.next) {
+            await git(paths.destination, [
+                "bundle",
+                "verify",
+                join(snapshot.directory, "commits.bundle"),
+            ]);
+            await git(paths.destination, [
+                "bundle",
+                "unbundle",
+                join(snapshot.directory, "commits.bundle"),
+            ]);
+        }
+        await git(paths.destination, ["checkout", "--detach", commit]);
+        await applyPatch(paths.destination, join(snapshot.directory, plan.side === "previous" ? "previous.patch" : "remote.patch"));
+        if (plan.side === "previous")
+            await applyPatch(paths.destination, join(snapshot.directory, "previous-index.patch"), true);
+        const entries = plan.side === "previous"
+            ? snapshot.state.previousExtras
+            : snapshot.state.incoming;
+        const prefix = plan.side === "previous" ? "previous-files" : "incoming";
+        for (const entry of entries) {
+            const to = await safeDestination(paths.destination, entry);
+            await absent(to);
+            await mkdir(dirname(to), { recursive: true, mode: 0o700 });
+            await cp(await safeDestination(snapshot.directory, `${prefix}/${entry}`), to, {
+                dereference: false,
+                verbatimSymlinks: true,
+                force: false,
+                errorOnExist: true,
+            });
+        }
+        return {
+            directory: paths.destination,
+            commit,
+            side: plan.side,
+            staging: plan.side === "previous" ? "preserved" : "unavailable",
+            sourceRetained: true,
+        };
+    }
+    catch (cause) {
+        if (!owned)
+            throw cause;
+        throw new OutpostError("workspace", "Recovery restoration failed; source and partial destination retained", { destination: paths.destination, transfer: paths.directory }, cause);
+    }
+    finally {
+        await snapshot.dispose();
+    }
+}
+//# sourceMappingURL=recovery-restore.js.map

package/dist/application/recovery-restore.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"recovery-restore.js","sourceRoot":"","sources":["../../src/application/recovery-restore.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAC;AACpD,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC7D,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAC9D,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAC;AAChF,OAAO,EAAE,eAAe,IAAI,GAAG,EAAE,MAAM,+CAA+C,CAAC;AACvF,OAAO,EAAE,2BAA2B,EAAE,MAAM,6BAA6B,CAAC;AAC1E,OAAO,EAAE,wBAAwB,EAAE,MAAM,gCAAgC,CAAC;AAO1E,SAAS,eAAe,CACtB,IAA8C;IAE9C,OAAO,UAAU,CAAC,QAAQ,CAAC;SACxB,MAAM,CACL,IAAI,CAAC,SAAS,CAAC;QACb,IAAI,CAAC,SAAS;QACd,IAAI,CAAC,UAAU;QACf,IAAI,CAAC,WAAW;QAChB,IAAI,CAAC,IAAI;QACT,IAAI,CAAC,QAAQ,IAAI,IAAI;QACrB,IAAI,CAAC,cAAc;QACnB,IAAI,CAAC,MAAM;QACX,IAAI,CAAC,QAAQ;QACb,IAAI,CAAC,OAAO;KACb,CAAC,CACH;SACA,MAAM,CAAC,KAAK,CAAC,CAAC;AACnB,CAAC;AAED,KAAK,UAAU,MAAM,CAAC,IAAY;IAChC,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CACpC,GAAG,EAAE,CAAC,IAAI,EACV,CAAC,KAAc,EAAE,EAAE;QACjB,IACE,KAAK;YACL,OAAO,KAAK,KAAK,QAAQ;YACzB,MAAM,IAAI,KAAK;YACf,KAAK,CAAC,IAAI,KAAK,QAAQ;YAEvB,OAAO,KAAK,CAAC;QACf,MAAM,KAAK,CAAC;IACd,CAAC,CACF,CAAC;IACF,SAAS,CAAC,CAAC,OAAO,EAAE,qCAAqC,CAAC,CAAC;AAC7D,CAAC;AAED,KAAK,UAAU,SAAS,CAAC,OAA+B;IACtD,SAAS,CACP,OAAO,CAAC,IAAI,KAAK,UAAU,IAAI,OAAO,CAAC,IAAI,KAAK,UAAU,EAC1D,4CAA4C,CAC7C,CAAC;IACF,MAAM,UAAU,GAAG,MAAM,SAAS,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IACvD,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IACpD,MAAM,WAAW,GAAG,IAAI,CACtB,MAAM,SAAS,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,EACtD,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,CACvC,CAAC;IACF,MAAM,MAAM,GAAG,MAAM,SAAS,CAC5B,CACE,MAAM,GAAG,CAAC,UAAU,EAAE;QACpB,WAAW;QACX,wBAAwB;QACxB,kBAAkB;KACnB,CAAC,CACH,CAAC,IAAI,EAAE,CACT,CAAC;IACF,SAAS,CACP,CAAC,MAAM,CAAC,UAAU,EAAE,WAAW,CAAC;QAC9B,CAAC,MAAM,CAAC,QAAQ,EAAE,WAAW,CAAC;QAC9B,CAAC,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,EAC9B,uFAAuF,CACxF,CAAC;IACF,MAAM,MAAM,CAAC,WAAW,CAAC,CAAC;IAC1B,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,QAAQ,EAAE,WAAW,EAAE,CAAC;AAC1D,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,OAA+B;IAE/B,MAAM,KAAK,GAAG,MAAM,SAAS,CAAC,OAAO,CAAC,CAAC;IACvC,MAAM,QAAQ,GAAG,MAAM,wBAAwB,CAC7C,KAAK,CAAC,SAAS,EACf,OAAO,CAAC,QAAQ,CACjB,CAAC;IACF,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,2BAA2B,CAC9C,QAAQ,CAAC,SAAS,EAClB,QAAQ,CAAC,KAAK,EACd,KAAK,CAAC,UAAU,CACjB,CAAC;QACF,SAAS,CACP,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,KAAK,MAAM,CAAC,EAChD,gDAAgD,CACjD,CAAC;QACF,MAAM,IAAI,GAAG;YACX,GAAG,OAAO;YACV,GAAG,KAAK;YACR,cAAc,EAAE,QAAQ,CAAC,cAAc;YACvC,MAAM,EACJ,OAAO,CAAC,IAAI,KAAK,UAAU;gBACzB,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,QAAQ;gBACzB,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI;YACzB,QAAQ,EACN,OAAO,CAAC,IAAI,KAAK,UAAU;gBACzB,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,cAAc;gBAC/B,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,QAAQ;YAC7B,OAAO,EACL,OAAO,CAAC,IAAI,KAAK,UAAU;gBACzB,CAAC,CAAE,WAAqB;gBACxB,CAAC,CAAE,aAAuB;SAC/B,CAAC;QACF,OAAO,EAAE,GAAG,IAAI,EAAE,WAAW,EAAE,eAAe,CAAC,IAAI,CAAC,EAAE,CAAC;IACzD,CAAC;YAAS,CAAC;QACT,MAAM,QAAQ,CAAC,OAAO,EAAE,CAAC;IAC3B,CAAC;AACH,CAAC;AAED,KAAK,UAAU,UAAU,CACvB,QAAgB,EAChB,KAAa,EACb,MAAM,GAAG,KAAK;IAEd,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI;QAAE,OAAO;IACvC,MAAM,GAAG,CAAC,QAAQ,EAAE;QAClB,OAAO;QACP,UAAU;QACV,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/B,KAAK;KACN,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,IAAyB;IAEzB,SAAS,CACP,IAAI,CAAC,WAAW,KAAK,eAAe,CAAC,IAAI,CAAC,EAC1C,sCAAsC,CACvC,CAAC;IACF,MAAM,KAAK,GAAG,MAAM,SAAS,CAAC,IAAI,CAAC,CAAC;IACpC,SAAS,CACP,KAAK,CAAC,UAAU,KAAK,IAAI,CAAC,UAAU;QAClC,KAAK,CAAC,SAAS,KAAK,IAAI,CAAC,SAAS;QAClC,KAAK,CAAC,WAAW,KAAK,IAAI,CAAC,WAAW,EACxC,4CAA4C,CAC7C,CAAC;IACF,MAAM,QAAQ,GAAG,MAAM,wBAAwB,CAC7C,KAAK,CAAC,SAAS,EACf,IAAI,CAAC,QAAQ,CACd,CAAC;IACF,IAAI,KAAK,GAAG,KAAK,CAAC;IAClB,IAAI,CAAC;QACH,SAAS,CACP,QAAQ,CAAC,cAAc,KAAK,IAAI,CAAC,cAAc,EAC/C,0CAA0C,CAC3C,CAAC;QACF,MAAM,MAAM,GACV,IAAI,CAAC,IAAI,KAAK,UAAU,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC;QAC3E,SAAS,CAAC,MAAM,KAAK,IAAI,CAAC,MAAM,EAAE,8BAA8B,CAAC,CAAC;QAClE,MAAM,MAAM,GAAG,MAAM,2BAA2B,CAC9C,QAAQ,CAAC,SAAS,EAClB,QAAQ,CAAC,KAAK,EACd,KAAK,CAAC,UAAU,CACjB,CAAC;QACF,SAAS,CACP,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,KAAK,MAAM,CAAC,EAChD,gDAAgD,CACjD,CAAC;QACF,MAAM,KAAK,CAAC,KAAK,CAAC,WAAW,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAChD,KAAK,GAAG,IAAI,CAAC;QACb,MAAM,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC,EAAE;YACpC,OAAO;YACP,SAAS;YACT,gBAAgB;YAChB,eAAe;YACf,IAAI;YACJ,KAAK,CAAC,UAAU;YAChB,KAAK,CAAC,WAAW;SAClB,CAAC,CAAC;QACH,MAAM,GAAG,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC;QAC7D,IAAI,QAAQ,CAAC,KAAK,CAAC,QAAQ,KAAK,QAAQ,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;YACpD,MAAM,GAAG,CAAC,KAAK,CAAC,WAAW,EAAE;gBAC3B,QAAQ;gBACR,QAAQ;gBACR,IAAI,CAAC,QAAQ,CAAC,SAAS,EAAE,gBAAgB,CAAC;aAC3C,CAAC,CAAC;YACH,MAAM,GAAG,CAAC,KAAK,CAAC,WAAW,EAAE;gBAC3B,QAAQ;gBACR,UAAU;gBACV,IAAI,CAAC,QAAQ,CAAC,SAAS,EAAE,gBAAgB,CAAC;aAC3C,CAAC,CAAC;QACL,CAAC;QACD,MAAM,GAAG,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,UAAU,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC,CAAC;QAC/D,MAAM,UAAU,CACd,KAAK,CAAC,WAAW,EACjB,IAAI,CACF,QAAQ,CAAC,SAAS,EAClB,IAAI,CAAC,IAAI,KAAK,UAAU,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,cAAc,CAC7D,CACF,CAAC;QACF,IAAI,IAAI,CAAC,IAAI,KAAK,UAAU;YAC1B,MAAM,UAAU,CACd,KAAK,CAAC,WAAW,EACjB,IAAI,CAAC,QAAQ,CAAC,SAAS,EAAE,sBAAsB,CAAC,EAChD,IAAI,CACL,CAAC;QACJ,MAAM,OAAO,GACX,IAAI,CAAC,IAAI,KAAK,UAAU;YACtB,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,cAAc;YAC/B,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC;QAC9B,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,KAAK,UAAU,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,UAAU,CAAC;QACxE,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;YAC5B,MAAM,EAAE,GAAG,MAAM,eAAe,CAAC,KAAK,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC;YAC3D,MAAM,MAAM,CAAC,EAAE,CAAC,CAAC;YACjB,MAAM,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;YAC3D,MAAM,EAAE,CACN,MAAM,eAAe,CAAC,QAAQ,CAAC,SAAS,EAAE,GAAG,MAAM,IAAI,KAAK,EAAE,CAAC,EAC/D,EAAE,EACF;gBACE,WAAW,EAAE,KAAK;gBAClB,gBAAgB,EAAE,IAAI;gBACtB,KAAK,EAAE,KAAK;gBACZ,YAAY,EAAE,IAAI;aACnB,CACF,CAAC;QACJ,CAAC;QACD,OAAO;YACL,SAAS,EAAE,KAAK,CAAC,WAAW;YAC5B,MAAM;YACN,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,OAAO,EAAE,IAAI,CAAC,IAAI,KAAK,UAAU,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,aAAa;YAC/D,cAAc,EAAE,IAAI;SACrB,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,CAAC,KAAK;YAAE,MAAM,KAAK,CAAC;QACxB,MAAM,IAAI,YAAY,CACpB,WAAW,EACX,sEAAsE,EACtE,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,QAAQ,EAAE,KAAK,CAAC,SAAS,EAAE,EAC7D,KAAK,CACN,CAAC;IACJ,CAAC;YAAS,CAAC;QACT,MAAM,QAAQ,CAAC,OAAO,EAAE,CAAC;IAC3B,CAAC;AACH,CAAC","sourcesContent":["import { createHash } from \"node:crypto\";\nimport { cp, lstat, mkdir } from \"node:fs/promises\";\nimport { basename, dirname, join, resolve } from \"node:path\";\nimport { invariant, OutpostError } from \"../domain/errors.ts\";\nimport { directory, inside, safeDestination } from \"../infrastructure/files.ts\";\nimport { verificationGit as git } from \"../infrastructure/git/verification-command.ts\";\nimport { verifyRecoveryRestorability } from \"./recovery-restorability.ts\";\nimport { snapshotRecoveryTransfer } from \"./recovery-restore-snapshot.ts\";\nimport type {\n  RecoveryRestoreOptions,\n  RecoveryRestorePlan,\n  RecoveryRestoreResult,\n} from \"./recovery-restore.types.ts\";\n\nfunction planFingerprint(\n  plan: Omit<RecoveryRestorePlan, \"fingerprint\">,\n): string {\n  return createHash(\"sha256\")\n    .update(\n      JSON.stringify([\n        plan.directory,\n        plan.repository,\n        plan.destination,\n        plan.side,\n        plan.maxBytes ?? null,\n        plan.manifestSha256,\n        plan.commit,\n        plan.payloads,\n        plan.staging,\n      ]),\n    )\n    .digest(\"hex\");\n}\n\nasync function absent(path: string): Promise<void> {\n  const present = await lstat(path).then(\n    () => true,\n    (error: unknown) => {\n      if (\n        error &&\n        typeof error === \"object\" &&\n        \"code\" in error &&\n        error.code === \"ENOENT\"\n      )\n        return false;\n      throw error;\n    },\n  );\n  invariant(!present, \"Recovery destination already exists\");\n}\n\nasync function locations(options: RecoveryRestoreOptions) {\n  invariant(\n    options.side === \"previous\" || options.side === \"incoming\",\n    \"Recovery side must be previous or incoming\",\n  );\n  const repository = await directory(options.repository);\n  const transfer = await directory(options.directory);\n  const destination = join(\n    await directory(dirname(resolve(options.destination))),\n    basename(resolve(options.destination)),\n  );\n  const common = await directory(\n    (\n      await git(repository, [\n        \"rev-parse\",\n        \"--path-format=absolute\",\n        \"--git-common-dir\",\n      ])\n    ).trim(),\n  );\n  invariant(\n    !inside(repository, destination) &&\n      !inside(transfer, destination) &&\n      !inside(common, destination),\n    \"Recovery destination must be outside the source repository, Git metadata and transfer\",\n  );\n  await absent(destination);\n  return { repository, directory: transfer, destination };\n}\n\nexport async function planRecoveryRestore(\n  options: RecoveryRestoreOptions,\n): Promise<RecoveryRestorePlan> {\n  const paths = await locations(options);\n  const snapshot = await snapshotRecoveryTransfer(\n    paths.directory,\n    options.maxBytes,\n  );\n  try {\n    const checks = await verifyRecoveryRestorability(\n      snapshot.directory,\n      snapshot.state,\n      paths.repository,\n    );\n    invariant(\n      checks.every((check) => check.status === \"pass\"),\n      \"Recovery Git restorability verification failed\",\n    );\n    const plan = {\n      ...options,\n      ...paths,\n      manifestSha256: snapshot.manifestSha256,\n      commit:\n        options.side === \"previous\"\n          ? snapshot.state.previous\n          : snapshot.state.next,\n      payloads:\n        options.side === \"previous\"\n          ? snapshot.state.previousExtras\n          : snapshot.state.incoming,\n      staging:\n        options.side === \"previous\"\n          ? (\"preserved\" as const)\n          : (\"unavailable\" as const),\n    };\n    return { ...plan, fingerprint: planFingerprint(plan) };\n  } finally {\n    await snapshot.dispose();\n  }\n}\n\nasync function applyPatch(\n  checkout: string,\n  patch: string,\n  cached = false,\n): Promise<void> {\n  if (!(await lstat(patch)).size) return;\n  await git(checkout, [\n    \"apply\",\n    \"--binary\",\n    ...(cached ? [\"--cached\"] : []),\n    patch,\n  ]);\n}\n\nexport async function restoreRecoveryTransfer(\n  plan: RecoveryRestorePlan,\n): Promise<RecoveryRestoreResult> {\n  invariant(\n    plan.fingerprint === planFingerprint(plan),\n    \"Recovery plan changed after planning\",\n  );\n  const paths = await locations(plan);\n  invariant(\n    paths.repository === plan.repository &&\n      paths.directory === plan.directory &&\n      paths.destination === plan.destination,\n    \"Recovery plan paths changed after planning\",\n  );\n  const snapshot = await snapshotRecoveryTransfer(\n    paths.directory,\n    plan.maxBytes,\n  );\n  let owned = false;\n  try {\n    invariant(\n      snapshot.manifestSha256 === plan.manifestSha256,\n      \"Recovery transfer changed since planning\",\n    );\n    const commit =\n      plan.side === \"previous\" ? snapshot.state.previous : snapshot.state.next;\n    invariant(commit === plan.commit, \"Recovery plan commit changed\");\n    const checks = await verifyRecoveryRestorability(\n      snapshot.directory,\n      snapshot.state,\n      paths.repository,\n    );\n    invariant(\n      checks.every((check) => check.status === \"pass\"),\n      \"Recovery Git restorability verification failed\",\n    );\n    await mkdir(paths.destination, { mode: 0o700 });\n    owned = true;\n    await git(dirname(paths.destination), [\n      \"clone\",\n      \"--local\",\n      \"--no-hardlinks\",\n      \"--no-checkout\",\n      \"--\",\n      paths.repository,\n      paths.destination,\n    ]);\n    await git(paths.destination, [\"remote\", \"remove\", \"origin\"]);\n    if (snapshot.state.previous !== snapshot.state.next) {\n      await git(paths.destination, [\n        \"bundle\",\n        \"verify\",\n        join(snapshot.directory, \"commits.bundle\"),\n      ]);\n      await git(paths.destination, [\n        \"bundle\",\n        \"unbundle\",\n        join(snapshot.directory, \"commits.bundle\"),\n      ]);\n    }\n    await git(paths.destination, [\"checkout\", \"--detach\", commit]);\n    await applyPatch(\n      paths.destination,\n      join(\n        snapshot.directory,\n        plan.side === \"previous\" ? \"previous.patch\" : \"remote.patch\",\n      ),\n    );\n    if (plan.side === \"previous\")\n      await applyPatch(\n        paths.destination,\n        join(snapshot.directory, \"previous-index.patch\"),\n        true,\n      );\n    const entries =\n      plan.side === \"previous\"\n        ? snapshot.state.previousExtras\n        : snapshot.state.incoming;\n    const prefix = plan.side === \"previous\" ? \"previous-files\" : \"incoming\";\n    for (const entry of entries) {\n      const to = await safeDestination(paths.destination, entry);\n      await absent(to);\n      await mkdir(dirname(to), { recursive: true, mode: 0o700 });\n      await cp(\n        await safeDestination(snapshot.directory, `${prefix}/${entry}`),\n        to,\n        {\n          dereference: false,\n          verbatimSymlinks: true,\n          force: false,\n          errorOnExist: true,\n        },\n      );\n    }\n    return {\n      directory: paths.destination,\n      commit,\n      side: plan.side,\n      staging: plan.side === \"previous\" ? \"preserved\" : \"unavailable\",\n      sourceRetained: true,\n    };\n  } catch (cause) {\n    if (!owned) throw cause;\n    throw new OutpostError(\n      \"workspace\",\n      \"Recovery restoration failed; source and partial destination retained\",\n      { destination: paths.destination, transfer: paths.directory },\n      cause,\n    );\n  } finally {\n    await snapshot.dispose();\n  }\n}\n"]}

package/dist/application/recovery-restore.types.d.ts

@@ -0,0 +1,28 @@
+import type { RecoveryTransferState } from "./recovery-verification.types.ts";
+export interface RecoveryRestoreOptions {
+    readonly directory: string;
+    readonly repository: string;
+    readonly destination: string;
+    readonly side: "previous" | "incoming";
+    readonly maxBytes?: number;
+}
+export interface RecoveryRestorePlan extends RecoveryRestoreOptions {
+    readonly fingerprint: string;
+    readonly manifestSha256: string;
+    readonly commit: string;
+    readonly payloads: readonly string[];
+    readonly staging: "preserved" | "unavailable";
+}
+export interface RecoveryRestoreResult {
+    readonly directory: string;
+    readonly commit: string;
+    readonly side: "previous" | "incoming";
+    readonly staging: "preserved" | "unavailable";
+    readonly sourceRetained: true;
+}
+export interface RecoveryRestoreSnapshot {
+    readonly directory: string;
+    readonly state: RecoveryTransferState;
+    readonly manifestSha256: string;
+    dispose(): Promise<void>;
+}

package/dist/application/recovery-restore.types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=recovery-restore.types.js.map

package/dist/application/recovery-restore.types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"recovery-restore.types.js","sourceRoot":"","sources":["../../src/application/recovery-restore.types.ts"],"names":[],"mappings":"","sourcesContent":["import type { RecoveryTransferState } from \"./recovery-verification.types.ts\";\n\nexport interface RecoveryRestoreOptions {\n  readonly directory: string;\n  readonly repository: string;\n  readonly destination: string;\n  readonly side: \"previous\" | \"incoming\";\n  readonly maxBytes?: number;\n}\n\nexport interface RecoveryRestorePlan extends RecoveryRestoreOptions {\n  readonly fingerprint: string;\n  readonly manifestSha256: string;\n  readonly commit: string;\n  readonly payloads: readonly string[];\n  readonly staging: \"preserved\" | \"unavailable\";\n}\n\nexport interface RecoveryRestoreResult {\n  readonly directory: string;\n  readonly commit: string;\n  readonly side: \"previous\" | \"incoming\";\n  readonly staging: \"preserved\" | \"unavailable\";\n  readonly sourceRetained: true;\n}\n\nexport interface RecoveryRestoreSnapshot {\n  readonly directory: string;\n  readonly state: RecoveryTransferState;\n  readonly manifestSha256: string;\n  dispose(): Promise<void>;\n}\n"]}

package/dist/application/recovery-retention-policy.d.ts

@@ -0,0 +1,2 @@
+import type { RecoveryRetentionPolicy } from "./recovery-retention.types.ts";
+export declare function retentionPolicy(value: unknown): asserts value is RecoveryRetentionPolicy;

package/dist/application/recovery-retention-policy.js

@@ -0,0 +1,21 @@
+import { invariant } from "../domain/errors.js";
+export function retentionPolicy(value) {
+    invariant(!!value && typeof value === "object", "Retention policy must be an object");
+    invariant("version" in value && value.version === 1, "Retention policy version must be 1");
+    invariant("scopes" in value &&
+        Array.isArray(value.scopes) &&
+        value.scopes.length > 0 &&
+        value.scopes.every((scope) => scope === "clean-workspaces" || scope === "closed-logs"), "Retention scopes must contain clean-workspaces or closed-logs");
+    invariant("minAgeMs" in value &&
+        typeof value.minAgeMs === "number" &&
+        Number.isSafeInteger(value.minAgeMs) &&
+        value.minAgeMs >= 0, "minAgeMs must be a nonnegative integer");
+    for (const key of ["maxBytes", "maxWorkspaces"]) {
+        if (!(key in value))
+            continue;
+        const limit = Object.getOwnPropertyDescriptor(value, key)?.value;
+        invariant(typeof limit === "number" && Number.isSafeInteger(limit) && limit >= 0, `${key} must be a nonnegative integer`);
+    }
+    invariant(Object.keys(value).every((key) => ["version", "scopes", "minAgeMs", "maxBytes", "maxWorkspaces"].includes(key)), "Unsupported retention policy field");
+}
+//# sourceMappingURL=recovery-retention-policy.js.map

package/dist/application/recovery-retention-policy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"recovery-retention-policy.js","sourceRoot":"","sources":["../../src/application/recovery-retention-policy.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAGhD,MAAM,UAAU,eAAe,CAC7B,KAAc;IAEd,SAAS,CACP,CAAC,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EACpC,oCAAoC,CACrC,CAAC;IACF,SAAS,CACP,SAAS,IAAI,KAAK,IAAI,KAAK,CAAC,OAAO,KAAK,CAAC,EACzC,oCAAoC,CACrC,CAAC;IACF,SAAS,CACP,QAAQ,IAAI,KAAK;QACf,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC;QAC3B,KAAK,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC;QACvB,KAAK,CAAC,MAAM,CAAC,KAAK,CAChB,CAAC,KAAc,EAAE,EAAE,CACjB,KAAK,KAAK,kBAAkB,IAAI,KAAK,KAAK,aAAa,CAC1D,EACH,+DAA+D,CAChE,CAAC;IACF,SAAS,CACP,UAAU,IAAI,KAAK;QACjB,OAAO,KAAK,CAAC,QAAQ,KAAK,QAAQ;QAClC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,QAAQ,CAAC;QACpC,KAAK,CAAC,QAAQ,IAAI,CAAC,EACrB,wCAAwC,CACzC,CAAC;IACF,KAAK,MAAM,GAAG,IAAI,CAAC,UAAU,EAAE,eAAe,CAAU,EAAE,CAAC;QACzD,IAAI,CAAC,CAAC,GAAG,IAAI,KAAK,CAAC;YAAE,SAAS;QAC9B,MAAM,KAAK,GAAY,MAAM,CAAC,wBAAwB,CAAC,KAAK,EAAE,GAAG,CAAC,EAAE,KAAK,CAAC;QAC1E,SAAS,CACP,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,EACtE,GAAG,GAAG,gCAAgC,CACvC,CAAC;IACJ,CAAC;IACD,SAAS,CACP,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CAC/B,CAAC,SAAS,EAAE,QAAQ,EAAE,UAAU,EAAE,UAAU,EAAE,eAAe,CAAC,CAAC,QAAQ,CACrE,GAAG,CACJ,CACF,EACD,oCAAoC,CACrC,CAAC;AACJ,CAAC","sourcesContent":["import { invariant } from \"../domain/errors.ts\";\nimport type { RecoveryRetentionPolicy } from \"./recovery-retention.types.ts\";\n\nexport function retentionPolicy(\n  value: unknown,\n): asserts value is RecoveryRetentionPolicy {\n  invariant(\n    !!value && typeof value === \"object\",\n    \"Retention policy must be an object\",\n  );\n  invariant(\n    \"version\" in value && value.version === 1,\n    \"Retention policy version must be 1\",\n  );\n  invariant(\n    \"scopes\" in value &&\n      Array.isArray(value.scopes) &&\n      value.scopes.length > 0 &&\n      value.scopes.every(\n        (scope: unknown) =>\n          scope === \"clean-workspaces\" || scope === \"closed-logs\",\n      ),\n    \"Retention scopes must contain clean-workspaces or closed-logs\",\n  );\n  invariant(\n    \"minAgeMs\" in value &&\n      typeof value.minAgeMs === \"number\" &&\n      Number.isSafeInteger(value.minAgeMs) &&\n      value.minAgeMs >= 0,\n    \"minAgeMs must be a nonnegative integer\",\n  );\n  for (const key of [\"maxBytes\", \"maxWorkspaces\"] as const) {\n    if (!(key in value)) continue;\n    const limit: unknown = Object.getOwnPropertyDescriptor(value, key)?.value;\n    invariant(\n      typeof limit === \"number\" && Number.isSafeInteger(limit) && limit >= 0,\n      `${key} must be a nonnegative integer`,\n    );\n  }\n  invariant(\n    Object.keys(value).every((key) =>\n      [\"version\", \"scopes\", \"minAgeMs\", \"maxBytes\", \"maxWorkspaces\"].includes(\n        key,\n      ),\n    ),\n    \"Unsupported retention policy field\",\n  );\n}\n"]}

package/dist/application/recovery-retention.constants.d.ts

@@ -0,0 +1,3 @@
+export declare const recoveryRetentionLimits: {
+    readonly maxPolicyBytes: 65536;
+};

package/dist/application/recovery-retention.constants.js

@@ -0,0 +1,2 @@
+export const recoveryRetentionLimits = { maxPolicyBytes: 65_536 };
+//# sourceMappingURL=recovery-retention.constants.js.map

package/dist/application/recovery-retention.constants.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"recovery-retention.constants.js","sourceRoot":"","sources":["../../src/application/recovery-retention.constants.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,uBAAuB,GAAG,EAAE,cAAc,EAAE,MAAM,EAAW,CAAC","sourcesContent":["export const recoveryRetentionLimits = { maxPolicyBytes: 65_536 } as const;\n"]}

package/dist/application/recovery-retention.d.ts

@@ -0,0 +1,4 @@
+import type { RecoveryPruneResult, RecoveryQuotaOptions, RecoveryRetentionOptions, RecoveryRetentionPlan } from "./recovery-retention.types.ts";
+export declare function planRecoveryRetention(options: RecoveryRetentionOptions): Promise<RecoveryRetentionPlan>;
+export declare function pruneRecoveryRetention(plan: RecoveryRetentionPlan): Promise<RecoveryPruneResult>;
+export declare function assertRecoveryQuota(options: RecoveryQuotaOptions): Promise<void>;