@elie-laloum/outpost 3.0.0 → 4.1.0

package/dist/infrastructure/artifact-store.js

@@ -0,0 +1,100 @@
+import { artifactDigestPattern } from "../domain/artifact.constants.js";
+import { randomUUID } from "node:crypto";
+import { link, lstat, mkdir, open, rm } from "node:fs/promises";
+import { dirname, join, resolve } from "node:path";
+import { readInspectionFile } from "./inspection-file.js";
+import { artifactMaxBytes } from "./artifact-store.constants.js";
+async function directory(path) {
+    const parent = dirname(path);
+    if (parent !== path) {
+        await directory(parent);
+        try {
+            await mkdir(path, { mode: 0o700 });
+        }
+        catch (error) {
+            if (!code(error, "EEXIST"))
+                throw error;
+        }
+    }
+    if (!(await lstat(path)).isDirectory())
+        throw new Error("Artifact directory must not contain symlinks");
+}
+function code(error, expected) {
+    return (!!error &&
+        typeof error === "object" &&
+        "code" in error &&
+        error.code === expected);
+}
+async function readArtifactFile(path, maxBytes) {
+    try {
+        return await readInspectionFile(path, maxBytes);
+    }
+    catch (error) {
+        if (!(error instanceof Error) ||
+            error.message !== "Inspection file changed")
+            throw error;
+        // Removing the staging hard link can change ctime once after publication.
+        return readInspectionFile(path, maxBytes);
+    }
+}
+export function fileArtifactStore(options) {
+    const root = resolve(options.directory), maxBytes = options.maxBytes ?? artifactMaxBytes;
+    if (!Number.isSafeInteger(maxBytes) || maxBytes < 1)
+        throw new Error("Artifact maxBytes must be a positive safe integer");
+    const path = (id) => {
+        if (!artifactDigestPattern.test(id))
+            throw new Error("Invalid artifact storage ID");
+        return join(root, `${id}.blob`);
+    };
+    return {
+        async put(id, input, signal) {
+            signal?.throwIfAborted();
+            const target = path(id);
+            if (input.byteLength > maxBytes)
+                throw new Error("Artifact exceeds maxBytes");
+            const bytes = Buffer.from(input);
+            await directory(root);
+            const temporary = join(root, `.${randomUUID()}.tmp`);
+            try {
+                const file = await open(temporary, "wx", 0o600);
+                try {
+                    await file.writeFile(bytes, signal ? { signal } : {});
+                    await file.sync();
+                }
+                finally {
+                    await file.close();
+                }
+                signal?.throwIfAborted();
+                try {
+                    await link(temporary, target);
+                }
+                catch (error) {
+                    if (!code(error, "EEXIST"))
+                        throw error;
+                    if (!bytes.equals(await readArtifactFile(target, maxBytes)))
+                        throw new Error("Existing artifact content integrity mismatch");
+                }
+                if (process.platform !== "win32") {
+                    const parent = await open(root, "r");
+                    try {
+                        await parent.sync();
+                    }
+                    finally {
+                        await parent.close();
+                    }
+                }
+            }
+            finally {
+                await rm(temporary, { force: true });
+            }
+        },
+        async get(id, signal) {
+            signal?.throwIfAborted();
+            const target = path(id);
+            const bytes = await readArtifactFile(target, maxBytes);
+            signal?.throwIfAborted();
+            return bytes;
+        },
+    };
+}
+//# sourceMappingURL=artifact-store.js.map

package/dist/infrastructure/artifact-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"artifact-store.js","sourceRoot":"","sources":["../../src/infrastructure/artifact-store.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,qBAAqB,EAAE,MAAM,iCAAiC,CAAC;AACxE,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,EAAE,MAAM,kBAAkB,CAAC;AAChE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEnD,OAAO,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAC1D,OAAO,EAAE,gBAAgB,EAAE,MAAM,+BAA+B,CAAC;AAGjE,KAAK,UAAU,SAAS,CAAC,IAAY;IACnC,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC7B,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;QACpB,MAAM,SAAS,CAAC,MAAM,CAAC,CAAC;QACxB,IAAI,CAAC;YACH,MAAM,KAAK,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACrC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,QAAQ,CAAC;gBAAE,MAAM,KAAK,CAAC;QAC1C,CAAC;IACH,CAAC;IACD,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,WAAW,EAAE;QACpC,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;AACpE,CAAC;AAED,SAAS,IAAI,CAAC,KAAc,EAAE,QAAgB;IAC5C,OAAO,CACL,CAAC,CAAC,KAAK;QACP,OAAO,KAAK,KAAK,QAAQ;QACzB,MAAM,IAAI,KAAK;QACf,KAAK,CAAC,IAAI,KAAK,QAAQ,CACxB,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,gBAAgB,CAC7B,IAAY,EACZ,QAAgB;IAEhB,IAAI,CAAC;QACH,OAAO,MAAM,kBAAkB,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IAClD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IACE,CAAC,CAAC,KAAK,YAAY,KAAK,CAAC;YACzB,KAAK,CAAC,OAAO,KAAK,yBAAyB;YAE3C,MAAM,KAAK,CAAC;QACd,0EAA0E;QAC1E,OAAO,kBAAkB,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IAC5C,CAAC;AACH,CAAC;AAED,MAAM,UAAU,iBAAiB,CAC/B,OAAiC;IAEjC,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,EACrC,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,gBAAgB,CAAC;IAClD,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,QAAQ,CAAC,IAAI,QAAQ,GAAG,CAAC;QACjD,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;IACvE,MAAM,IAAI,GAAG,CAAC,EAAU,EAAE,EAAE;QAC1B,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,EAAE,CAAC;YACjC,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;QACjD,OAAO,IAAI,CAAC,IAAI,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC;IAClC,CAAC,CAAC;IACF,OAAO;QACL,KAAK,CAAC,GAAG,CAAC,EAAE,EAAE,KAAK,EAAE,MAAM;YACzB,MAAM,EAAE,cAAc,EAAE,CAAC;YACzB,MAAM,MAAM,GAAG,IAAI,CAAC,EAAE,CAAC,CAAC;YACxB,IAAI,KAAK,CAAC,UAAU,GAAG,QAAQ;gBAC7B,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;YAC/C,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACjC,MAAM,SAAS,CAAC,IAAI,CAAC,CAAC;YACtB,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,EAAE,IAAI,UAAU,EAAE,MAAM,CAAC,CAAC;YACrD,IAAI,CAAC;gBACH,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,SAAS,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;gBAChD,IAAI,CAAC;oBACH,MAAM,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;oBACtD,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;gBACpB,CAAC;wBAAS,CAAC;oBACT,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC;gBACrB,CAAC;gBACD,MAAM,EAAE,cAAc,EAAE,CAAC;gBACzB,IAAI,CAAC;oBACH,MAAM,IAAI,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;gBAChC,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,QAAQ,CAAC;wBAAE,MAAM,KAAK,CAAC;oBACxC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,gBAAgB,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;wBACzD,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;gBACpE,CAAC;gBACD,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;oBACjC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;oBACrC,IAAI,CAAC;wBACH,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;oBACtB,CAAC;4BAAS,CAAC;wBACT,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;oBACvB,CAAC;gBACH,CAAC;YACH,CAAC;oBAAS,CAAC;gBACT,MAAM,EAAE,CAAC,SAAS,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YACvC,CAAC;QACH,CAAC;QACD,KAAK,CAAC,GAAG,CAAC,EAAE,EAAE,MAAM;YAClB,MAAM,EAAE,cAAc,EAAE,CAAC;YACzB,MAAM,MAAM,GAAG,IAAI,CAAC,EAAE,CAAC,CAAC;YACxB,MAAM,KAAK,GAAG,MAAM,gBAAgB,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;YACvD,MAAM,EAAE,cAAc,EAAE,CAAC;YACzB,OAAO,KAAK,CAAC;QACf,CAAC;KACF,CAAC;AACJ,CAAC","sourcesContent":["import { artifactDigestPattern } from \"../domain/artifact.constants.ts\";\nimport { randomUUID } from \"node:crypto\";\nimport { link, lstat, mkdir, open, rm } from \"node:fs/promises\";\nimport { dirname, join, resolve } from \"node:path\";\nimport type { ArtifactStore } from \"../domain/artifact.types.ts\";\nimport { readInspectionFile } from \"./inspection-file.ts\";\nimport { artifactMaxBytes } from \"./artifact-store.constants.ts\";\nimport type { FileArtifactStoreOptions } from \"./artifact-store.types.ts\";\n\nasync function directory(path: string): Promise<void> {\n  const parent = dirname(path);\n  if (parent !== path) {\n    await directory(parent);\n    try {\n      await mkdir(path, { mode: 0o700 });\n    } catch (error) {\n      if (!code(error, \"EEXIST\")) throw error;\n    }\n  }\n  if (!(await lstat(path)).isDirectory())\n    throw new Error(\"Artifact directory must not contain symlinks\");\n}\n\nfunction code(error: unknown, expected: string): boolean {\n  return (\n    !!error &&\n    typeof error === \"object\" &&\n    \"code\" in error &&\n    error.code === expected\n  );\n}\n\nasync function readArtifactFile(\n  path: string,\n  maxBytes: number,\n): Promise<Buffer> {\n  try {\n    return await readInspectionFile(path, maxBytes);\n  } catch (error) {\n    if (\n      !(error instanceof Error) ||\n      error.message !== \"Inspection file changed\"\n    )\n      throw error;\n    // Removing the staging hard link can change ctime once after publication.\n    return readInspectionFile(path, maxBytes);\n  }\n}\n\nexport function fileArtifactStore(\n  options: FileArtifactStoreOptions,\n): ArtifactStore {\n  const root = resolve(options.directory),\n    maxBytes = options.maxBytes ?? artifactMaxBytes;\n  if (!Number.isSafeInteger(maxBytes) || maxBytes < 1)\n    throw new Error(\"Artifact maxBytes must be a positive safe integer\");\n  const path = (id: string) => {\n    if (!artifactDigestPattern.test(id))\n      throw new Error(\"Invalid artifact storage ID\");\n    return join(root, `${id}.blob`);\n  };\n  return {\n    async put(id, input, signal) {\n      signal?.throwIfAborted();\n      const target = path(id);\n      if (input.byteLength > maxBytes)\n        throw new Error(\"Artifact exceeds maxBytes\");\n      const bytes = Buffer.from(input);\n      await directory(root);\n      const temporary = join(root, `.${randomUUID()}.tmp`);\n      try {\n        const file = await open(temporary, \"wx\", 0o600);\n        try {\n          await file.writeFile(bytes, signal ? { signal } : {});\n          await file.sync();\n        } finally {\n          await file.close();\n        }\n        signal?.throwIfAborted();\n        try {\n          await link(temporary, target);\n        } catch (error) {\n          if (!code(error, \"EEXIST\")) throw error;\n          if (!bytes.equals(await readArtifactFile(target, maxBytes)))\n            throw new Error(\"Existing artifact content integrity mismatch\");\n        }\n        if (process.platform !== \"win32\") {\n          const parent = await open(root, \"r\");\n          try {\n            await parent.sync();\n          } finally {\n            await parent.close();\n          }\n        }\n      } finally {\n        await rm(temporary, { force: true });\n      }\n    },\n    async get(id, signal) {\n      signal?.throwIfAborted();\n      const target = path(id);\n      const bytes = await readArtifactFile(target, maxBytes);\n      signal?.throwIfAborted();\n      return bytes;\n    },\n  };\n}\n"]}

package/dist/infrastructure/artifact-store.types.d.ts

@@ -0,0 +1,4 @@
+export interface FileArtifactStoreOptions {
+    readonly directory: string;
+    readonly maxBytes?: number;
+}

package/dist/infrastructure/artifact-store.types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=artifact-store.types.js.map

package/dist/infrastructure/artifact-store.types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"artifact-store.types.js","sourceRoot":"","sources":["../../src/infrastructure/artifact-store.types.ts"],"names":[],"mappings":"","sourcesContent":["export interface FileArtifactStoreOptions {\n  readonly directory: string;\n  readonly maxBytes?: number;\n}\n"]}

package/dist/infrastructure/file-manifest.d.ts

@@ -1,5 +1,5 @@
 import type { FileManifestEntry } from "../domain/sandbox.types.ts";
-export declare function fileManifest(root: string, path: string): Promise<FileManifestEntry>;
+export declare function fileManifest(root: string, path: string, signal?: AbortSignal): Promise<FileManifestEntry>;
 export declare function sameFile(left: FileManifestEntry, right: FileManifestEntry): boolean;
 export declare function sameLocalFile(remote: FileManifestEntry, local: FileManifestEntry): boolean;
 export declare function validateFilePaths(paths: readonly string[]): void;

package/dist/infrastructure/file-manifest.js

@@ -3,7 +3,8 @@ import { createReadStream } from "node:fs";
 import { lstat, readlink } from "node:fs/promises";
 import { OutpostError } from "../domain/errors.js";
 import { safeDestination } from "./files.js";
-export async function fileManifest(root, path) {
+export async function fileManifest(root, path, signal) {
+    signal?.throwIfAborted();
     const target = await safeDestination(root, path);
     const info = await lstat(target);
     if (!info.isFile() && !info.isSymbolicLink())
@@ -18,7 +19,7 @@ export async function fileManifest(root, path) {
         hash.update(value);
     }
     else {
-        for await (const chunk of createReadStream(target))
+        for await (const chunk of createReadStream(target, { signal }))
             hash.update(chunk);
     }
     return {

package/dist/infrastructure/file-manifest.js.map

@@ -1 +1 @@
-{"version":3,"file":"file-manifest.js","sourceRoot":"","sources":["../../src/infrastructure/file-manifest.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,gBAAgB,EAAE,MAAM,SAAS,CAAC;AAC3C,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AACnD,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAEnD,OAAO,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAE7C,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,IAAY,EACZ,IAAY;IAEZ,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACjD,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC,CAAC;IACjC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE;QAC1C,MAAM,IAAI,YAAY,CAAC,UAAU,EAAE,gCAAgC,EAAE;YACnE,IAAI;SACL,CAAC,CAAC;IACL,MAAM,IAAI,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC;IAClC,IAAI,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;IACrB,IAAI,IAAI,CAAC,cAAc,EAAE,EAAE,CAAC;QAC1B,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;QAClD,IAAI,GAAG,KAAK,CAAC,MAAM,CAAC;QACpB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACrB,CAAC;SAAM,CAAC;QACN,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,gBAAgB,CAAC,MAAM,CAAC;YAAE,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACzE,CAAC;IACD,OAAO;QACL,IAAI;QACJ,IAAI,EAAE,IAAI,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM;QAC7C,IAAI,EAAE,IAAI,CAAC,IAAI,GAAG,KAAK;QACvB,IAAI;QACJ,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC;KAC3B,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,QAAQ,CACtB,IAAuB,EACvB,KAAwB;IAExB,OAAO,CACL,IAAI,CAAC,IAAI,KAAK,KAAK,CAAC,IAAI;QACxB,IAAI,CAAC,IAAI,KAAK,KAAK,CAAC,IAAI;QACxB,IAAI,CAAC,IAAI,KAAK,KAAK,CAAC,IAAI;QACxB,IAAI,CAAC,IAAI,KAAK,KAAK,CAAC,IAAI;QACxB,IAAI,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM,CAC7B,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,aAAa,CAC3B,MAAyB,EACzB,KAAwB;IAExB,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO;QAAE,OAAO,QAAQ,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IACjE,OAAO,QAAQ,CACb,EAAE,GAAG,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,GAAG,KAAK,EAAE,EACxC,EAAE,GAAG,KAAK,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,GAAG,KAAK,EAAE,CACvC,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,KAAwB;IACxD,IACE,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,KAAK,KAAK,CAAC,MAAM;QACpC,KAAK,CAAC,IAAI,CACR,CAAC,IAAI,EAAE,EAAE,CACP,CAAC,IAAI;YACL,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;YACnB,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;YACnB,IAAI;iBACD,KAAK,CAAC,GAAG,CAAC;iBACV,IAAI,CACH,CAAC,IAAI,EAAE,EAAE,CACP,CAAC,IAAI;gBACL,IAAI,KAAK,GAAG;gBACZ,IAAI,KAAK,IAAI;gBACb,IAAI,CAAC,WAAW,EAAE,KAAK,MAAM,CAChC,CACN;QAED,MAAM,IAAI,YAAY,CAAC,UAAU,EAAE,mCAAmC,CAAC,CAAC;AAC5E,CAAC;AAED,MAAM,UAAU,aAAa,CAC3B,KAAc,EACd,KAAwB;IAExB,iBAAiB,CAAC,KAAK,CAAC,CAAC;IACzB,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM;QACxD,MAAM,IAAI,YAAY,CAAC,UAAU,EAAE,uBAAuB,CAAC,CAAC;IAC9D,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,KAAc,EAAE,KAAK,EAAE,EAAE;QACzC,IACE,CAAC,KAAK;YACN,OAAO,KAAK,KAAK,QAAQ;YACzB,CAAC,CAAC,MAAM,IAAI,KAAK,CAAC;YAClB,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ;YAC9B,KAAK,CAAC,IAAI,KAAK,KAAK,CAAC,KAAK,CAAC;YAC3B,CAAC,CAAC,MAAM,IAAI,KAAK,CAAC;YAClB,CAAC,KAAK,CAAC,IAAI,KAAK,MAAM,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM,CAAC;YAChD,CAAC,CAAC,MAAM,IAAI,KAAK,CAAC;YAClB,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ;YAC9B,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC;YAC7B,KAAK,CAAC,IAAI,GAAG,CAAC;YACd,KAAK,CAAC,IAAI,GAAG,KAAK;YAClB,CAAC,CAAC,MAAM,IAAI,KAAK,CAAC;YAClB,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ;YAC9B,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC;YACjC,KAAK,CAAC,IAAI,GAAG,CAAC;YACd,CAAC,CAAC,QAAQ,IAAI,KAAK,CAAC;YACpB,OAAO,KAAK,CAAC,MAAM,KAAK,QAAQ;YAChC,CAAC,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC;YAEpC,MAAM,IAAI,YAAY,CAAC,UAAU,EAAE,6BAA6B,CAAC,CAAC;QACpE,OAAO;YACL,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,MAAM,EAAE,KAAK,CAAC,MAAM;SACrB,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC","sourcesContent":["import { createHash } from \"node:crypto\";\nimport { createReadStream } from \"node:fs\";\nimport { lstat, readlink } from \"node:fs/promises\";\nimport { OutpostError } from \"../domain/errors.ts\";\nimport type { FileManifestEntry } from \"../domain/sandbox.types.ts\";\nimport { safeDestination } from \"./files.ts\";\n\nexport async function fileManifest(\n  root: string,\n  path: string,\n): Promise<FileManifestEntry> {\n  const target = await safeDestination(root, path);\n  const info = await lstat(target);\n  if (!info.isFile() && !info.isSymbolicLink())\n    throw new OutpostError(\"provider\", \"Unsupported manifest file type\", {\n      path,\n    });\n  const hash = createHash(\"sha256\");\n  let size = info.size;\n  if (info.isSymbolicLink()) {\n    const value = Buffer.from(await readlink(target));\n    size = value.length;\n    hash.update(value);\n  } else {\n    for await (const chunk of createReadStream(target)) hash.update(chunk);\n  }\n  return {\n    path,\n    kind: info.isSymbolicLink() ? \"link\" : \"file\",\n    mode: info.mode & 0o777,\n    size,\n    sha256: hash.digest(\"hex\"),\n  };\n}\n\nexport function sameFile(\n  left: FileManifestEntry,\n  right: FileManifestEntry,\n): boolean {\n  return (\n    left.path === right.path &&\n    left.kind === right.kind &&\n    left.mode === right.mode &&\n    left.size === right.size &&\n    left.sha256 === right.sha256\n  );\n}\n\nexport function sameLocalFile(\n  remote: FileManifestEntry,\n  local: FileManifestEntry,\n): boolean {\n  if (process.platform !== \"win32\") return sameFile(remote, local);\n  return sameFile(\n    { ...remote, mode: remote.mode & 0o200 },\n    { ...local, mode: local.mode & 0o200 },\n  );\n}\n\nexport function validateFilePaths(paths: readonly string[]): void {\n  if (\n    new Set(paths).size !== paths.length ||\n    paths.some(\n      (path) =>\n        !path ||\n        path.includes(\"\\\\\") ||\n        path.includes(\"\\0\") ||\n        path\n          .split(\"/\")\n          .some(\n            (part) =>\n              !part ||\n              part === \".\" ||\n              part === \"..\" ||\n              part.toLowerCase() === \".git\",\n          ),\n    )\n  )\n    throw new OutpostError(\"provider\", \"Unsafe or duplicate manifest path\");\n}\n\nexport function parseManifest(\n  value: unknown,\n  paths: readonly string[],\n): FileManifestEntry[] {\n  validateFilePaths(paths);\n  if (!Array.isArray(value) || value.length !== paths.length)\n    throw new OutpostError(\"provider\", \"Invalid file manifest\");\n  return value.map((entry: unknown, index) => {\n    if (\n      !entry ||\n      typeof entry !== \"object\" ||\n      !(\"path\" in entry) ||\n      typeof entry.path !== \"string\" ||\n      entry.path !== paths[index] ||\n      !(\"kind\" in entry) ||\n      (entry.kind !== \"file\" && entry.kind !== \"link\") ||\n      !(\"mode\" in entry) ||\n      typeof entry.mode !== \"number\" ||\n      !Number.isInteger(entry.mode) ||\n      entry.mode < 0 ||\n      entry.mode > 0o777 ||\n      !(\"size\" in entry) ||\n      typeof entry.size !== \"number\" ||\n      !Number.isSafeInteger(entry.size) ||\n      entry.size < 0 ||\n      !(\"sha256\" in entry) ||\n      typeof entry.sha256 !== \"string\" ||\n      !/^[a-f0-9]{64}$/.test(entry.sha256)\n    )\n      throw new OutpostError(\"provider\", \"Invalid file manifest entry\");\n    return {\n      path: entry.path,\n      kind: entry.kind,\n      mode: entry.mode,\n      size: entry.size,\n      sha256: entry.sha256,\n    };\n  });\n}\n"]}
+{"version":3,"file":"file-manifest.js","sourceRoot":"","sources":["../../src/infrastructure/file-manifest.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,gBAAgB,EAAE,MAAM,SAAS,CAAC;AAC3C,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AACnD,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAEnD,OAAO,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAE7C,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,IAAY,EACZ,IAAY,EACZ,MAAoB;IAEpB,MAAM,EAAE,cAAc,EAAE,CAAC;IACzB,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACjD,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC,CAAC;IACjC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE;QAC1C,MAAM,IAAI,YAAY,CAAC,UAAU,EAAE,gCAAgC,EAAE;YACnE,IAAI;SACL,CAAC,CAAC;IACL,MAAM,IAAI,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC;IAClC,IAAI,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;IACrB,IAAI,IAAI,CAAC,cAAc,EAAE,EAAE,CAAC;QAC1B,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;QAClD,IAAI,GAAG,KAAK,CAAC,MAAM,CAAC;QACpB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACrB,CAAC;SAAM,CAAC;QACN,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,gBAAgB,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,CAAC;YAC5D,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACvB,CAAC;IACD,OAAO;QACL,IAAI;QACJ,IAAI,EAAE,IAAI,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM;QAC7C,IAAI,EAAE,IAAI,CAAC,IAAI,GAAG,KAAK;QACvB,IAAI;QACJ,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC;KAC3B,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,QAAQ,CACtB,IAAuB,EACvB,KAAwB;IAExB,OAAO,CACL,IAAI,CAAC,IAAI,KAAK,KAAK,CAAC,IAAI;QACxB,IAAI,CAAC,IAAI,KAAK,KAAK,CAAC,IAAI;QACxB,IAAI,CAAC,IAAI,KAAK,KAAK,CAAC,IAAI;QACxB,IAAI,CAAC,IAAI,KAAK,KAAK,CAAC,IAAI;QACxB,IAAI,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM,CAC7B,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,aAAa,CAC3B,MAAyB,EACzB,KAAwB;IAExB,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO;QAAE,OAAO,QAAQ,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IACjE,OAAO,QAAQ,CACb,EAAE,GAAG,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,GAAG,KAAK,EAAE,EACxC,EAAE,GAAG,KAAK,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,GAAG,KAAK,EAAE,CACvC,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,KAAwB;IACxD,IACE,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,KAAK,KAAK,CAAC,MAAM;QACpC,KAAK,CAAC,IAAI,CACR,CAAC,IAAI,EAAE,EAAE,CACP,CAAC,IAAI;YACL,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;YACnB,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;YACnB,IAAI;iBACD,KAAK,CAAC,GAAG,CAAC;iBACV,IAAI,CACH,CAAC,IAAI,EAAE,EAAE,CACP,CAAC,IAAI;gBACL,IAAI,KAAK,GAAG;gBACZ,IAAI,KAAK,IAAI;gBACb,IAAI,CAAC,WAAW,EAAE,KAAK,MAAM,CAChC,CACN;QAED,MAAM,IAAI,YAAY,CAAC,UAAU,EAAE,mCAAmC,CAAC,CAAC;AAC5E,CAAC;AAED,MAAM,UAAU,aAAa,CAC3B,KAAc,EACd,KAAwB;IAExB,iBAAiB,CAAC,KAAK,CAAC,CAAC;IACzB,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM;QACxD,MAAM,IAAI,YAAY,CAAC,UAAU,EAAE,uBAAuB,CAAC,CAAC;IAC9D,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,KAAc,EAAE,KAAK,EAAE,EAAE;QACzC,IACE,CAAC,KAAK;YACN,OAAO,KAAK,KAAK,QAAQ;YACzB,CAAC,CAAC,MAAM,IAAI,KAAK,CAAC;YAClB,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ;YAC9B,KAAK,CAAC,IAAI,KAAK,KAAK,CAAC,KAAK,CAAC;YAC3B,CAAC,CAAC,MAAM,IAAI,KAAK,CAAC;YAClB,CAAC,KAAK,CAAC,IAAI,KAAK,MAAM,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM,CAAC;YAChD,CAAC,CAAC,MAAM,IAAI,KAAK,CAAC;YAClB,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ;YAC9B,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC;YAC7B,KAAK,CAAC,IAAI,GAAG,CAAC;YACd,KAAK,CAAC,IAAI,GAAG,KAAK;YAClB,CAAC,CAAC,MAAM,IAAI,KAAK,CAAC;YAClB,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ;YAC9B,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC;YACjC,KAAK,CAAC,IAAI,GAAG,CAAC;YACd,CAAC,CAAC,QAAQ,IAAI,KAAK,CAAC;YACpB,OAAO,KAAK,CAAC,MAAM,KAAK,QAAQ;YAChC,CAAC,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC;YAEpC,MAAM,IAAI,YAAY,CAAC,UAAU,EAAE,6BAA6B,CAAC,CAAC;QACpE,OAAO;YACL,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,MAAM,EAAE,KAAK,CAAC,MAAM;SACrB,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC","sourcesContent":["import { createHash } from \"node:crypto\";\nimport { createReadStream } from \"node:fs\";\nimport { lstat, readlink } from \"node:fs/promises\";\nimport { OutpostError } from \"../domain/errors.ts\";\nimport type { FileManifestEntry } from \"../domain/sandbox.types.ts\";\nimport { safeDestination } from \"./files.ts\";\n\nexport async function fileManifest(\n  root: string,\n  path: string,\n  signal?: AbortSignal,\n): Promise<FileManifestEntry> {\n  signal?.throwIfAborted();\n  const target = await safeDestination(root, path);\n  const info = await lstat(target);\n  if (!info.isFile() && !info.isSymbolicLink())\n    throw new OutpostError(\"provider\", \"Unsupported manifest file type\", {\n      path,\n    });\n  const hash = createHash(\"sha256\");\n  let size = info.size;\n  if (info.isSymbolicLink()) {\n    const value = Buffer.from(await readlink(target));\n    size = value.length;\n    hash.update(value);\n  } else {\n    for await (const chunk of createReadStream(target, { signal }))\n      hash.update(chunk);\n  }\n  return {\n    path,\n    kind: info.isSymbolicLink() ? \"link\" : \"file\",\n    mode: info.mode & 0o777,\n    size,\n    sha256: hash.digest(\"hex\"),\n  };\n}\n\nexport function sameFile(\n  left: FileManifestEntry,\n  right: FileManifestEntry,\n): boolean {\n  return (\n    left.path === right.path &&\n    left.kind === right.kind &&\n    left.mode === right.mode &&\n    left.size === right.size &&\n    left.sha256 === right.sha256\n  );\n}\n\nexport function sameLocalFile(\n  remote: FileManifestEntry,\n  local: FileManifestEntry,\n): boolean {\n  if (process.platform !== \"win32\") return sameFile(remote, local);\n  return sameFile(\n    { ...remote, mode: remote.mode & 0o200 },\n    { ...local, mode: local.mode & 0o200 },\n  );\n}\n\nexport function validateFilePaths(paths: readonly string[]): void {\n  if (\n    new Set(paths).size !== paths.length ||\n    paths.some(\n      (path) =>\n        !path ||\n        path.includes(\"\\\\\") ||\n        path.includes(\"\\0\") ||\n        path\n          .split(\"/\")\n          .some(\n            (part) =>\n              !part ||\n              part === \".\" ||\n              part === \"..\" ||\n              part.toLowerCase() === \".git\",\n          ),\n    )\n  )\n    throw new OutpostError(\"provider\", \"Unsafe or duplicate manifest path\");\n}\n\nexport function parseManifest(\n  value: unknown,\n  paths: readonly string[],\n): FileManifestEntry[] {\n  validateFilePaths(paths);\n  if (!Array.isArray(value) || value.length !== paths.length)\n    throw new OutpostError(\"provider\", \"Invalid file manifest\");\n  return value.map((entry: unknown, index) => {\n    if (\n      !entry ||\n      typeof entry !== \"object\" ||\n      !(\"path\" in entry) ||\n      typeof entry.path !== \"string\" ||\n      entry.path !== paths[index] ||\n      !(\"kind\" in entry) ||\n      (entry.kind !== \"file\" && entry.kind !== \"link\") ||\n      !(\"mode\" in entry) ||\n      typeof entry.mode !== \"number\" ||\n      !Number.isInteger(entry.mode) ||\n      entry.mode < 0 ||\n      entry.mode > 0o777 ||\n      !(\"size\" in entry) ||\n      typeof entry.size !== \"number\" ||\n      !Number.isSafeInteger(entry.size) ||\n      entry.size < 0 ||\n      !(\"sha256\" in entry) ||\n      typeof entry.sha256 !== \"string\" ||\n      !/^[a-f0-9]{64}$/.test(entry.sha256)\n    )\n      throw new OutpostError(\"provider\", \"Invalid file manifest entry\");\n    return {\n      path: entry.path,\n      kind: entry.kind,\n      mode: entry.mode,\n      size: entry.size,\n      sha256: entry.sha256,\n    };\n  });\n}\n"]}

package/dist/infrastructure/git/verification-command.d.ts

@@ -1 +1 @@
-export declare function verificationGit(directory: string, args: readonly string[]): Promise<string>;
+export declare function verificationGit(directory: string, args: readonly string[], deadlineMs?: number, signal?: AbortSignal): Promise<string>;

package/dist/infrastructure/git/verification-command.js

@@ -1,7 +1,7 @@
 import { execFile } from "node:child_process";
 import { promisify } from "node:util";
 import { gitDefaults } from "./git.constants.js";
-export async function verificationGit(directory, args) {
+export async function verificationGit(directory, args, deadlineMs = gitDefaults.deadlineMs, signal) {
     const environment = Object.fromEntries(Object.entries(process.env).filter(([key]) => !key.toUpperCase().startsWith("GIT_")));
     const result = await promisify(execFile)("git", [
         "-c",
@@ -26,7 +26,8 @@ export async function verificationGit(directory, args) {
             GIT_OPTIONAL_LOCKS: "0",
             LC_ALL: "C",
         },
-        timeout: gitDefaults.deadlineMs,
+        timeout: deadlineMs,
+        ...(signal ? { signal } : {}),
         maxBuffer: gitDefaults.retainBytes,
         encoding: "utf8",
         windowsHide: true,

package/dist/infrastructure/git/verification-command.js.map

@@ -1 +1 @@
-{"version":3,"file":"verification-command.js","sourceRoot":"","sources":["../../../src/infrastructure/git/verification-command.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AACtC,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAEjD,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,SAAiB,EACjB,IAAuB;IAEvB,MAAM,WAAW,GAAG,MAAM,CAAC,WAAW,CACpC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,CAChC,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC,CACjD,CACF,CAAC;IACF,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,QAAQ,CAAC,CACtC,KAAK,EACL;QACE,IAAI;QACJ,kBAAkB,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,WAAW,EAAE;QACtE,IAAI;QACJ,sBAAsB;QACtB,IAAI;QACJ,wBAAwB;QACxB,IAAI;QACJ,WAAW;QACX,GAAG,IAAI;KACR,EACD;QACE,GAAG,EAAE,SAAS;QACd,GAAG,EAAE;YACH,GAAG,WAAW;YACd,mBAAmB,EAAE,GAAG;YACxB,iBAAiB,EAAE,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,WAAW;YACrE,iBAAiB,EAAE,GAAG;YACtB,iBAAiB,EAAE,GAAG;YACtB,kBAAkB,EAAE,MAAM;YAC1B,mBAAmB,EAAE,GAAG;YACxB,kBAAkB,EAAE,GAAG;YACvB,MAAM,EAAE,GAAG;SACZ;QACD,OAAO,EAAE,WAAW,CAAC,UAAU;QAC/B,SAAS,EAAE,WAAW,CAAC,WAAW;QAClC,QAAQ,EAAE,MAAM;QAChB,WAAW,EAAE,IAAI;KAClB,CACF,CAAC;IACF,OAAO,MAAM,CAAC,MAAM,CAAC;AACvB,CAAC","sourcesContent":["import { execFile } from \"node:child_process\";\nimport { promisify } from \"node:util\";\nimport { gitDefaults } from \"./git.constants.ts\";\n\nexport async function verificationGit(\n  directory: string,\n  args: readonly string[],\n): Promise<string> {\n  const environment = Object.fromEntries(\n    Object.entries(process.env).filter(\n      ([key]) => !key.toUpperCase().startsWith(\"GIT_\"),\n    ),\n  );\n  const result = await promisify(execFile)(\n    \"git\",\n    [\n      \"-c\",\n      `core.hooksPath=${process.platform === \"win32\" ? \"NUL\" : \"/dev/null\"}`,\n      \"-c\",\n      \"core.fsmonitor=false\",\n      \"-c\",\n      \"maintenance.auto=false\",\n      \"-c\",\n      \"gc.auto=0\",\n      ...args,\n    ],\n    {\n      cwd: directory,\n      env: {\n        ...environment,\n        GIT_CONFIG_NOSYSTEM: \"1\",\n        GIT_CONFIG_GLOBAL: process.platform === \"win32\" ? \"NUL\" : \"/dev/null\",\n        GIT_ATTR_NOSYSTEM: \"1\",\n        GIT_NO_LAZY_FETCH: \"1\",\n        GIT_ALLOW_PROTOCOL: \"file\",\n        GIT_TERMINAL_PROMPT: \"0\",\n        GIT_OPTIONAL_LOCKS: \"0\",\n        LC_ALL: \"C\",\n      },\n      timeout: gitDefaults.deadlineMs,\n      maxBuffer: gitDefaults.retainBytes,\n      encoding: \"utf8\",\n      windowsHide: true,\n    },\n  );\n  return result.stdout;\n}\n"]}
+{"version":3,"file":"verification-command.js","sourceRoot":"","sources":["../../../src/infrastructure/git/verification-command.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AACtC,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAEjD,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,SAAiB,EACjB,IAAuB,EACvB,aAAqB,WAAW,CAAC,UAAU,EAC3C,MAAoB;IAEpB,MAAM,WAAW,GAAG,MAAM,CAAC,WAAW,CACpC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,CAChC,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC,CACjD,CACF,CAAC;IACF,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,QAAQ,CAAC,CACtC,KAAK,EACL;QACE,IAAI;QACJ,kBAAkB,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,WAAW,EAAE;QACtE,IAAI;QACJ,sBAAsB;QACtB,IAAI;QACJ,wBAAwB;QACxB,IAAI;QACJ,WAAW;QACX,GAAG,IAAI;KACR,EACD;QACE,GAAG,EAAE,SAAS;QACd,GAAG,EAAE;YACH,GAAG,WAAW;YACd,mBAAmB,EAAE,GAAG;YACxB,iBAAiB,EAAE,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,WAAW;YACrE,iBAAiB,EAAE,GAAG;YACtB,iBAAiB,EAAE,GAAG;YACtB,kBAAkB,EAAE,MAAM;YAC1B,mBAAmB,EAAE,GAAG;YACxB,kBAAkB,EAAE,GAAG;YACvB,MAAM,EAAE,GAAG;SACZ;QACD,OAAO,EAAE,UAAU;QACnB,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7B,SAAS,EAAE,WAAW,CAAC,WAAW;QAClC,QAAQ,EAAE,MAAM;QAChB,WAAW,EAAE,IAAI;KAClB,CACF,CAAC;IACF,OAAO,MAAM,CAAC,MAAM,CAAC;AACvB,CAAC","sourcesContent":["import { execFile } from \"node:child_process\";\nimport { promisify } from \"node:util\";\nimport { gitDefaults } from \"./git.constants.ts\";\n\nexport async function verificationGit(\n  directory: string,\n  args: readonly string[],\n  deadlineMs: number = gitDefaults.deadlineMs,\n  signal?: AbortSignal,\n): Promise<string> {\n  const environment = Object.fromEntries(\n    Object.entries(process.env).filter(\n      ([key]) => !key.toUpperCase().startsWith(\"GIT_\"),\n    ),\n  );\n  const result = await promisify(execFile)(\n    \"git\",\n    [\n      \"-c\",\n      `core.hooksPath=${process.platform === \"win32\" ? \"NUL\" : \"/dev/null\"}`,\n      \"-c\",\n      \"core.fsmonitor=false\",\n      \"-c\",\n      \"maintenance.auto=false\",\n      \"-c\",\n      \"gc.auto=0\",\n      ...args,\n    ],\n    {\n      cwd: directory,\n      env: {\n        ...environment,\n        GIT_CONFIG_NOSYSTEM: \"1\",\n        GIT_CONFIG_GLOBAL: process.platform === \"win32\" ? \"NUL\" : \"/dev/null\",\n        GIT_ATTR_NOSYSTEM: \"1\",\n        GIT_NO_LAZY_FETCH: \"1\",\n        GIT_ALLOW_PROTOCOL: \"file\",\n        GIT_TERMINAL_PROMPT: \"0\",\n        GIT_OPTIONAL_LOCKS: \"0\",\n        LC_ALL: \"C\",\n      },\n      timeout: deadlineMs,\n      ...(signal ? { signal } : {}),\n      maxBuffer: gitDefaults.retainBytes,\n      encoding: \"utf8\",\n      windowsHide: true,\n    },\n  );\n  return result.stdout;\n}\n"]}

package/dist/infrastructure/opentelemetry.js

@@ -44,7 +44,7 @@ export function openTelemetry(options) {
             return;
         const attributes = { "outpost.status": status };
         safe(() => operation.span?.setAttributes(attributes));
-        if (status !== "skipped")
+        if (status !== "skipped" && status !== "paused")
             safe(() => operation.span?.setStatus({
                 code: status === "done" ? SpanStatusCode.OK : SpanStatusCode.ERROR,
             }));

package/dist/infrastructure/opentelemetry.js.map

@@ -1 +1 @@
-{"version":3,"file":"opentelemetry.js","sourceRoot":"","sources":["../../src/infrastructure/opentelemetry.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AAGpE,OAAO,EAAE,eAAe,EAAE,MAAM,wCAAwC,CAAC;AACzE,OAAO,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AAa9D,MAAM,UAAU,aAAa,CAC3B,OAA6B;IAE7B,SAAS,IAAI,CAAI,MAAe;QAC9B,IAAI,CAAC;YACH,OAAO,MAAM,EAAE,CAAC;QAClB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC;gBACH,OAAO,CAAC,OAAO,EAAE,CAAC,KAAK,CAAC,CAAC;YAC3B,CAAC;YAAC,MAAM,CAAC,CAAA,CAAC;QACZ,CAAC;IACH,CAAC;IACD,MAAM,QAAQ,GAAG;QACf,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,CACnB,OAAO,CAAC,KAAK,CAAC,aAAa,CAAC,cAAc,CAAC,SAAS,CAAC,CACtD;QACD,KAAK,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,aAAa,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;QACpE,QAAQ,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,aAAa,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC;QAC1E,OAAO,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,aAAa,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC;QACxE,KAAK,EAAE,IAAI,CAAC,GAAG,EAAE,CACf,OAAO,CAAC,KAAK,CAAC,aAAa,CAAC,cAAc,CAAC,KAAK,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CACvE;KACF,CAAC;IACF,MAAM,SAAS,GAAG;QAChB,QAAQ,EAAE,IAAI,CAAC,GAAG,EAAE,CAClB,OAAO,CAAC,KAAK,CAAC,eAAe,CAAC,cAAc,CAAC,gBAAgB,EAAE;YAC7D,IAAI,EAAE,GAAG;SACV,CAAC,CACH;QACD,IAAI,EAAE,IAAI,CAAC,GAAG,EAAE,CACd,OAAO,CAAC,KAAK,CAAC,eAAe,CAAC,cAAc,CAAC,YAAY,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,CAC1E;QACD,OAAO,EAAE,IAAI,CAAC,GAAG,EAAE,CACjB,OAAO,CAAC,KAAK,CAAC,eAAe,CAAC,cAAc,CAAC,eAAe,EAAE;YAC5D,IAAI,EAAE,GAAG;SACV,CAAC,CACH;KACF,CAAC;IACF,MAAM,UAAU,GAAG,IAAI,GAAG,EAA8B,CAAC;IACzD,IAAI,MAAM,GAAG,KAAK,CAAC;IACnB,SAAS,KAAK,CACZ,IAAY,EACZ,MAAe,EACf,EAAU;QAEV,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,CACrB,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,EAAE,MAAM,CAAC,CAC1D,CAAC;QACF,OAAO;YACL,IAAI;YACJ,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM;YACpD,OAAO,EAAE,EAAE;SACZ,CAAC;IACJ,CAAC;IACD,SAAS,MAAM,CACb,SAAyC,EACzC,MAAc,EACd,EAAU,EACV,QAA+B;QAE/B,IAAI,CAAC,SAAS;YAAE,OAAO;QACvB,MAAM,UAAU,GAAG,EAAE,gBAAgB,EAAE,MAAM,EAAE,CAAC;QAChD,IAAI,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,IAAI,EAAE,aAAa,CAAC,UAAU,CAAC,CAAC,CAAC;QACtD,IAAI,MAAM,KAAK,SAAS;YACtB,IAAI,CAAC,GAAG,EAAE,CACR,SAAS,CAAC,IAAI,EAAE,SAAS,CAAC;gBACxB,IAAI,EAAE,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,cAAc,CAAC,EAAE,CAAC,CAAC,CAAC,cAAc,CAAC,KAAK;aACnE,CAAC,CACH,CAAC;QACJ,IAAI,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;QACpC,IAAI,CAAC,GAAG,EAAE,CACR,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,GAAG,SAAS,CAAC,OAAO,CAAC,GAAG,IAAI,EAAE,UAAU,CAAC,CACzE,CAAC;IACJ,CAAC;IACD,SAAS,QAAQ,CACf,SAA6B,EAC7B,MAAc,EACd,EAAU;QAEV,KAAK,MAAM,OAAO,IAAI,SAAS,CAAC,QAAQ,CAAC,MAAM,EAAE;YAC/C,MAAM,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,SAAS,CAAC,OAAO,CAAC,CAAC;QACjD,KAAK,MAAM,IAAI,IAAI,SAAS,CAAC,KAAK,CAAC,MAAM,EAAE;YACzC,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,SAAS,CAAC,IAAI,CAAC,CAAC;QAC3C,MAAM,CAAC,SAAS,CAAC,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,SAAS,CAAC,QAAQ,CAAC,CAAC;QAC3D,IAAI,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC,EAAE,EAAE,gBAAgB,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC;IACvE,CAAC;IACD,OAAO;QACL,OAAO,CAAC,KAAoB;YAC1B,IAAI,MAAM;gBAAE,OAAO;YACnB,MAAM,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;YACvC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAAE,OAAO;YACjC,IAAI,KAAK,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;gBAC3B,IAAI,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC;oBAAE,OAAO;gBAC9C,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,WAAW,EAAE;oBAChC,QAAQ,EAAE,KAAK,CAAC,kBAAkB,EAAE,OAAO,CAAC,MAAM,EAAE,EAAE,EAAE,CAAC;oBACzD,KAAK,EAAE,IAAI,GAAG,EAAE;oBAChB,QAAQ,EAAE,IAAI,GAAG,EAAE;iBACpB,CAAC,CAAC;gBACH,OAAO;YACT,CAAC;YACD,MAAM,SAAS,GAAG,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;YACpD,IAAI,CAAC,SAAS;gBAAE,OAAO;YACvB,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;gBAC5B,UAAU,CAAC,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;gBACrC,QAAQ,CAAC,SAAS,EAAE,KAAK,CAAC,MAAM,IAAI,MAAM,EAAE,EAAE,CAAC,CAAC;gBAChD,OAAO;YACT,CAAC;YACD,IAAI,KAAK,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;gBAC3B,KAAK,MAAM,SAAS,IAAI,eAAe,EAAE,CAAC;oBACxC,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,EAAE,CAAC,SAAS,CAAC,CAAC;oBACvC,IAAI,KAAK,KAAK,SAAS,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC;wBAC5D,IAAI,CAAC,GAAG,EAAE,CACR,QAAQ,CAAC,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,EAAE,oBAAoB,EAAE,SAAS,EAAE,CAAC,CAChE,CAAC;gBACN,CAAC;gBACD,OAAO;YACT,CAAC;YACD,IAAI,KAAK,CAAC,GAAG,KAAK,SAAS;gBAAE,OAAO;YACpC,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;gBAC7B,SAAS,CAAC,QAAQ,CAAC,GAAG,CACpB,KAAK,CAAC,GAAG,EACT,KAAK,CACH,sBAAsB,EACtB,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,OAAO;oBACrC,SAAS,CAAC,QAAQ,CAAC,OAAO,EAC5B,EAAE,CACH,CACF,CAAC;gBACF,IAAI,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;gBACtC,OAAO;YACT,CAAC;YACD,IAAI,KAAK,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;gBAC3B,MAAM,CACJ,SAAS,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,EACjC,QAAQ,EACR,EAAE,EACF,SAAS,CAAC,OAAO,CAClB,CAAC;gBACF,SAAS,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;gBACrC,IAAI,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;gBACrC,OAAO;YACT,CAAC;YACD,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM,IAAI,KAAK,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;gBACvD,SAAS,CAAC,KAAK,CAAC,GAAG,CACjB,KAAK,CAAC,GAAG,EACT,KAAK,CAAC,cAAc,EAAE,SAAS,CAAC,QAAQ,CAAC,OAAO,EAAE,EAAE,CAAC,CACtD,CAAC;gBACF,OAAO;YACT,CAAC;YACD,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;gBAC1C,MAAM,CACJ,SAAS,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,EACjC,KAAK,CAAC,MAAM,EACZ,EAAE,EACF,SAAS,CAAC,OAAO,CAClB,CAAC;gBACF,MAAM,CACJ,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,EAC9B,KAAK,CAAC,MAAM,EACZ,EAAE,EACF,SAAS,CAAC,IAAI,CACf,CAAC;gBACF,SAAS,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;gBACrC,SAAS,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;gBAClC,IAAI,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,EAAE,EAAE,gBAAgB,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;YACzE,CAAC;QACH,CAAC;QACD,KAAK;YACH,IAAI,MAAM;gBAAE,OAAO;YACnB,MAAM,GAAG,IAAI,CAAC;YACd,KAAK,MAAM,SAAS,IAAI,UAAU,CAAC,MAAM,EAAE;gBACzC,QAAQ,CAAC,SAAS,EAAE,WAAW,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;YAC/C,UAAU,CAAC,KAAK,EAAE,CAAC;QACrB,CAAC;KACF,CAAC;AACJ,CAAC","sourcesContent":["import { context, trace, SpanStatusCode } from \"@opentelemetry/api\";\nimport type { Context, Histogram } from \"@opentelemetry/api\";\nimport type { WorkflowEvent } from \"../domain/workflow.types.ts\";\nimport { usageDimensions } from \"../domain/workflow/budget.constants.ts\";\nimport { telemetryNames } from \"./opentelemetry.constants.ts\";\nimport type {\n  OpenTelemetryObserver,\n  OpenTelemetryOptions,\n  TelemetryExecution,\n  TelemetryOperation,\n} from \"./opentelemetry.types.ts\";\n\nexport type {\n  OpenTelemetryObserver,\n  OpenTelemetryOptions,\n} from \"./opentelemetry.types.ts\";\n\nexport function openTelemetry(\n  options: OpenTelemetryOptions,\n): OpenTelemetryObserver {\n  function safe<T>(action: () => T): T | undefined {\n    try {\n      return action();\n    } catch (error) {\n      try {\n        options.onError?.(error);\n      } catch {}\n    }\n  }\n  const counters = {\n    workflows: safe(() =>\n      options.meter.createCounter(telemetryNames.workflows),\n    ),\n    tasks: safe(() => options.meter.createCounter(telemetryNames.tasks)),\n    attempts: safe(() => options.meter.createCounter(telemetryNames.attempts)),\n    retries: safe(() => options.meter.createCounter(telemetryNames.retries)),\n    usage: safe(() =>\n      options.meter.createCounter(telemetryNames.usage, { unit: \"{token}\" }),\n    ),\n  };\n  const durations = {\n    workflow: safe(() =>\n      options.meter.createHistogram(telemetryNames.workflowDuration, {\n        unit: \"s\",\n      }),\n    ),\n    task: safe(() =>\n      options.meter.createHistogram(telemetryNames.taskDuration, { unit: \"s\" }),\n    ),\n    attempt: safe(() =>\n      options.meter.createHistogram(telemetryNames.attemptDuration, {\n        unit: \"s\",\n      }),\n    ),\n  };\n  const executions = new Map<string, TelemetryExecution>();\n  let closed = false;\n  function start(\n    name: string,\n    parent: Context,\n    at: number,\n  ): TelemetryOperation {\n    const span = safe(() =>\n      options.tracer.startSpan(name, { startTime: at }, parent),\n    );\n    return {\n      span,\n      context: span ? trace.setSpan(parent, span) : parent,\n      started: at,\n    };\n  }\n  function finish(\n    operation: TelemetryOperation | undefined,\n    status: string,\n    at: number,\n    duration: Histogram | undefined,\n  ): void {\n    if (!operation) return;\n    const attributes = { \"outpost.status\": status };\n    safe(() => operation.span?.setAttributes(attributes));\n    if (status !== \"skipped\")\n      safe(() =>\n        operation.span?.setStatus({\n          code: status === \"done\" ? SpanStatusCode.OK : SpanStatusCode.ERROR,\n        }),\n      );\n    safe(() => operation.span?.end(at));\n    safe(() =>\n      duration?.record(Math.max(0, at - operation.started) / 1000, attributes),\n    );\n  }\n  function complete(\n    execution: TelemetryExecution,\n    status: string,\n    at: number,\n  ): void {\n    for (const attempt of execution.attempts.values())\n      finish(attempt, status, at, durations.attempt);\n    for (const task of execution.tasks.values())\n      finish(task, status, at, durations.task);\n    finish(execution.workflow, status, at, durations.workflow);\n    safe(() => counters.workflows?.add(1, { \"outpost.status\": status }));\n  }\n  return {\n    observe(event: WorkflowEvent) {\n      if (closed) return;\n      const at = Date.parse(event.timestamp);\n      if (!Number.isFinite(at)) return;\n      if (event.type === \"start\") {\n        if (executions.has(event.executionId)) return;\n        executions.set(event.executionId, {\n          workflow: start(\"outpost.workflow\", context.active(), at),\n          tasks: new Map(),\n          attempts: new Map(),\n        });\n        return;\n      }\n      const execution = executions.get(event.executionId);\n      if (!execution) return;\n      if (event.type === \"finish\") {\n        executions.delete(event.executionId);\n        complete(execution, event.status ?? \"done\", at);\n        return;\n      }\n      if (event.type === \"usage\") {\n        for (const dimension of usageDimensions) {\n          const value = event.usage?.[dimension];\n          if (value !== undefined && Number.isFinite(value) && value > 0)\n            safe(() =>\n              counters.usage?.add(value, { \"outpost.token.type\": dimension }),\n            );\n        }\n        return;\n      }\n      if (event.key === undefined) return;\n      if (event.type === \"attempt\") {\n        execution.attempts.set(\n          event.key,\n          start(\n            \"outpost.task.attempt\",\n            execution.tasks.get(event.key)?.context ??\n              execution.workflow.context,\n            at,\n          ),\n        );\n        safe(() => counters.attempts?.add(1));\n        return;\n      }\n      if (event.type === \"retry\") {\n        finish(\n          execution.attempts.get(event.key),\n          \"failed\",\n          at,\n          durations.attempt,\n        );\n        execution.attempts.delete(event.key);\n        safe(() => counters.retries?.add(1));\n        return;\n      }\n      if (event.type === \"task\" && event.status === \"active\") {\n        execution.tasks.set(\n          event.key,\n          start(\"outpost.task\", execution.workflow.context, at),\n        );\n        return;\n      }\n      if (event.type === \"task\" && event.status) {\n        finish(\n          execution.attempts.get(event.key),\n          event.status,\n          at,\n          durations.attempt,\n        );\n        finish(\n          execution.tasks.get(event.key),\n          event.status,\n          at,\n          durations.task,\n        );\n        execution.attempts.delete(event.key);\n        execution.tasks.delete(event.key);\n        safe(() => counters.tasks?.add(1, { \"outpost.status\": event.status }));\n      }\n    },\n    close() {\n      if (closed) return;\n      closed = true;\n      for (const execution of executions.values())\n        complete(execution, \"cancelled\", Date.now());\n      executions.clear();\n    },\n  };\n}\n"]}
+{"version":3,"file":"opentelemetry.js","sourceRoot":"","sources":["../../src/infrastructure/opentelemetry.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AAGpE,OAAO,EAAE,eAAe,EAAE,MAAM,wCAAwC,CAAC;AACzE,OAAO,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AAa9D,MAAM,UAAU,aAAa,CAC3B,OAA6B;IAE7B,SAAS,IAAI,CAAI,MAAe;QAC9B,IAAI,CAAC;YACH,OAAO,MAAM,EAAE,CAAC;QAClB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC;gBACH,OAAO,CAAC,OAAO,EAAE,CAAC,KAAK,CAAC,CAAC;YAC3B,CAAC;YAAC,MAAM,CAAC,CAAA,CAAC;QACZ,CAAC;IACH,CAAC;IACD,MAAM,QAAQ,GAAG;QACf,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,CACnB,OAAO,CAAC,KAAK,CAAC,aAAa,CAAC,cAAc,CAAC,SAAS,CAAC,CACtD;QACD,KAAK,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,aAAa,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;QACpE,QAAQ,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,aAAa,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC;QAC1E,OAAO,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,aAAa,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC;QACxE,KAAK,EAAE,IAAI,CAAC,GAAG,EAAE,CACf,OAAO,CAAC,KAAK,CAAC,aAAa,CAAC,cAAc,CAAC,KAAK,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CACvE;KACF,CAAC;IACF,MAAM,SAAS,GAAG;QAChB,QAAQ,EAAE,IAAI,CAAC,GAAG,EAAE,CAClB,OAAO,CAAC,KAAK,CAAC,eAAe,CAAC,cAAc,CAAC,gBAAgB,EAAE;YAC7D,IAAI,EAAE,GAAG;SACV,CAAC,CACH;QACD,IAAI,EAAE,IAAI,CAAC,GAAG,EAAE,CACd,OAAO,CAAC,KAAK,CAAC,eAAe,CAAC,cAAc,CAAC,YAAY,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,CAC1E;QACD,OAAO,EAAE,IAAI,CAAC,GAAG,EAAE,CACjB,OAAO,CAAC,KAAK,CAAC,eAAe,CAAC,cAAc,CAAC,eAAe,EAAE;YAC5D,IAAI,EAAE,GAAG;SACV,CAAC,CACH;KACF,CAAC;IACF,MAAM,UAAU,GAAG,IAAI,GAAG,EAA8B,CAAC;IACzD,IAAI,MAAM,GAAG,KAAK,CAAC;IACnB,SAAS,KAAK,CACZ,IAAY,EACZ,MAAe,EACf,EAAU;QAEV,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,CACrB,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,EAAE,MAAM,CAAC,CAC1D,CAAC;QACF,OAAO;YACL,IAAI;YACJ,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM;YACpD,OAAO,EAAE,EAAE;SACZ,CAAC;IACJ,CAAC;IACD,SAAS,MAAM,CACb,SAAyC,EACzC,MAAc,EACd,EAAU,EACV,QAA+B;QAE/B,IAAI,CAAC,SAAS;YAAE,OAAO;QACvB,MAAM,UAAU,GAAG,EAAE,gBAAgB,EAAE,MAAM,EAAE,CAAC;QAChD,IAAI,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,IAAI,EAAE,aAAa,CAAC,UAAU,CAAC,CAAC,CAAC;QACtD,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,KAAK,QAAQ;YAC7C,IAAI,CAAC,GAAG,EAAE,CACR,SAAS,CAAC,IAAI,EAAE,SAAS,CAAC;gBACxB,IAAI,EAAE,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,cAAc,CAAC,EAAE,CAAC,CAAC,CAAC,cAAc,CAAC,KAAK;aACnE,CAAC,CACH,CAAC;QACJ,IAAI,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;QACpC,IAAI,CAAC,GAAG,EAAE,CACR,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,GAAG,SAAS,CAAC,OAAO,CAAC,GAAG,IAAI,EAAE,UAAU,CAAC,CACzE,CAAC;IACJ,CAAC;IACD,SAAS,QAAQ,CACf,SAA6B,EAC7B,MAAc,EACd,EAAU;QAEV,KAAK,MAAM,OAAO,IAAI,SAAS,CAAC,QAAQ,CAAC,MAAM,EAAE;YAC/C,MAAM,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,SAAS,CAAC,OAAO,CAAC,CAAC;QACjD,KAAK,MAAM,IAAI,IAAI,SAAS,CAAC,KAAK,CAAC,MAAM,EAAE;YACzC,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,SAAS,CAAC,IAAI,CAAC,CAAC;QAC3C,MAAM,CAAC,SAAS,CAAC,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,SAAS,CAAC,QAAQ,CAAC,CAAC;QAC3D,IAAI,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC,EAAE,EAAE,gBAAgB,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC;IACvE,CAAC;IACD,OAAO;QACL,OAAO,CAAC,KAAoB;YAC1B,IAAI,MAAM;gBAAE,OAAO;YACnB,MAAM,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;YACvC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAAE,OAAO;YACjC,IAAI,KAAK,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;gBAC3B,IAAI,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC;oBAAE,OAAO;gBAC9C,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,WAAW,EAAE;oBAChC,QAAQ,EAAE,KAAK,CAAC,kBAAkB,EAAE,OAAO,CAAC,MAAM,EAAE,EAAE,EAAE,CAAC;oBACzD,KAAK,EAAE,IAAI,GAAG,EAAE;oBAChB,QAAQ,EAAE,IAAI,GAAG,EAAE;iBACpB,CAAC,CAAC;gBACH,OAAO;YACT,CAAC;YACD,MAAM,SAAS,GAAG,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;YACpD,IAAI,CAAC,SAAS;gBAAE,OAAO;YACvB,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;gBAC5B,UAAU,CAAC,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;gBACrC,QAAQ,CAAC,SAAS,EAAE,KAAK,CAAC,MAAM,IAAI,MAAM,EAAE,EAAE,CAAC,CAAC;gBAChD,OAAO;YACT,CAAC;YACD,IAAI,KAAK,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;gBAC3B,KAAK,MAAM,SAAS,IAAI,eAAe,EAAE,CAAC;oBACxC,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,EAAE,CAAC,SAAS,CAAC,CAAC;oBACvC,IAAI,KAAK,KAAK,SAAS,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC;wBAC5D,IAAI,CAAC,GAAG,EAAE,CACR,QAAQ,CAAC,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,EAAE,oBAAoB,EAAE,SAAS,EAAE,CAAC,CAChE,CAAC;gBACN,CAAC;gBACD,OAAO;YACT,CAAC;YACD,IAAI,KAAK,CAAC,GAAG,KAAK,SAAS;gBAAE,OAAO;YACpC,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;gBAC7B,SAAS,CAAC,QAAQ,CAAC,GAAG,CACpB,KAAK,CAAC,GAAG,EACT,KAAK,CACH,sBAAsB,EACtB,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,OAAO;oBACrC,SAAS,CAAC,QAAQ,CAAC,OAAO,EAC5B,EAAE,CACH,CACF,CAAC;gBACF,IAAI,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;gBACtC,OAAO;YACT,CAAC;YACD,IAAI,KAAK,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;gBAC3B,MAAM,CACJ,SAAS,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,EACjC,QAAQ,EACR,EAAE,EACF,SAAS,CAAC,OAAO,CAClB,CAAC;gBACF,SAAS,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;gBACrC,IAAI,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;gBACrC,OAAO;YACT,CAAC;YACD,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM,IAAI,KAAK,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;gBACvD,SAAS,CAAC,KAAK,CAAC,GAAG,CACjB,KAAK,CAAC,GAAG,EACT,KAAK,CAAC,cAAc,EAAE,SAAS,CAAC,QAAQ,CAAC,OAAO,EAAE,EAAE,CAAC,CACtD,CAAC;gBACF,OAAO;YACT,CAAC;YACD,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;gBAC1C,MAAM,CACJ,SAAS,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,EACjC,KAAK,CAAC,MAAM,EACZ,EAAE,EACF,SAAS,CAAC,OAAO,CAClB,CAAC;gBACF,MAAM,CACJ,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,EAC9B,KAAK,CAAC,MAAM,EACZ,EAAE,EACF,SAAS,CAAC,IAAI,CACf,CAAC;gBACF,SAAS,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;gBACrC,SAAS,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;gBAClC,IAAI,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,EAAE,EAAE,gBAAgB,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;YACzE,CAAC;QACH,CAAC;QACD,KAAK;YACH,IAAI,MAAM;gBAAE,OAAO;YACnB,MAAM,GAAG,IAAI,CAAC;YACd,KAAK,MAAM,SAAS,IAAI,UAAU,CAAC,MAAM,EAAE;gBACzC,QAAQ,CAAC,SAAS,EAAE,WAAW,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;YAC/C,UAAU,CAAC,KAAK,EAAE,CAAC;QACrB,CAAC;KACF,CAAC;AACJ,CAAC","sourcesContent":["import { context, trace, SpanStatusCode } from \"@opentelemetry/api\";\nimport type { Context, Histogram } from \"@opentelemetry/api\";\nimport type { WorkflowEvent } from \"../domain/workflow.types.ts\";\nimport { usageDimensions } from \"../domain/workflow/budget.constants.ts\";\nimport { telemetryNames } from \"./opentelemetry.constants.ts\";\nimport type {\n  OpenTelemetryObserver,\n  OpenTelemetryOptions,\n  TelemetryExecution,\n  TelemetryOperation,\n} from \"./opentelemetry.types.ts\";\n\nexport type {\n  OpenTelemetryObserver,\n  OpenTelemetryOptions,\n} from \"./opentelemetry.types.ts\";\n\nexport function openTelemetry(\n  options: OpenTelemetryOptions,\n): OpenTelemetryObserver {\n  function safe<T>(action: () => T): T | undefined {\n    try {\n      return action();\n    } catch (error) {\n      try {\n        options.onError?.(error);\n      } catch {}\n    }\n  }\n  const counters = {\n    workflows: safe(() =>\n      options.meter.createCounter(telemetryNames.workflows),\n    ),\n    tasks: safe(() => options.meter.createCounter(telemetryNames.tasks)),\n    attempts: safe(() => options.meter.createCounter(telemetryNames.attempts)),\n    retries: safe(() => options.meter.createCounter(telemetryNames.retries)),\n    usage: safe(() =>\n      options.meter.createCounter(telemetryNames.usage, { unit: \"{token}\" }),\n    ),\n  };\n  const durations = {\n    workflow: safe(() =>\n      options.meter.createHistogram(telemetryNames.workflowDuration, {\n        unit: \"s\",\n      }),\n    ),\n    task: safe(() =>\n      options.meter.createHistogram(telemetryNames.taskDuration, { unit: \"s\" }),\n    ),\n    attempt: safe(() =>\n      options.meter.createHistogram(telemetryNames.attemptDuration, {\n        unit: \"s\",\n      }),\n    ),\n  };\n  const executions = new Map<string, TelemetryExecution>();\n  let closed = false;\n  function start(\n    name: string,\n    parent: Context,\n    at: number,\n  ): TelemetryOperation {\n    const span = safe(() =>\n      options.tracer.startSpan(name, { startTime: at }, parent),\n    );\n    return {\n      span,\n      context: span ? trace.setSpan(parent, span) : parent,\n      started: at,\n    };\n  }\n  function finish(\n    operation: TelemetryOperation | undefined,\n    status: string,\n    at: number,\n    duration: Histogram | undefined,\n  ): void {\n    if (!operation) return;\n    const attributes = { \"outpost.status\": status };\n    safe(() => operation.span?.setAttributes(attributes));\n    if (status !== \"skipped\" && status !== \"paused\")\n      safe(() =>\n        operation.span?.setStatus({\n          code: status === \"done\" ? SpanStatusCode.OK : SpanStatusCode.ERROR,\n        }),\n      );\n    safe(() => operation.span?.end(at));\n    safe(() =>\n      duration?.record(Math.max(0, at - operation.started) / 1000, attributes),\n    );\n  }\n  function complete(\n    execution: TelemetryExecution,\n    status: string,\n    at: number,\n  ): void {\n    for (const attempt of execution.attempts.values())\n      finish(attempt, status, at, durations.attempt);\n    for (const task of execution.tasks.values())\n      finish(task, status, at, durations.task);\n    finish(execution.workflow, status, at, durations.workflow);\n    safe(() => counters.workflows?.add(1, { \"outpost.status\": status }));\n  }\n  return {\n    observe(event: WorkflowEvent) {\n      if (closed) return;\n      const at = Date.parse(event.timestamp);\n      if (!Number.isFinite(at)) return;\n      if (event.type === \"start\") {\n        if (executions.has(event.executionId)) return;\n        executions.set(event.executionId, {\n          workflow: start(\"outpost.workflow\", context.active(), at),\n          tasks: new Map(),\n          attempts: new Map(),\n        });\n        return;\n      }\n      const execution = executions.get(event.executionId);\n      if (!execution) return;\n      if (event.type === \"finish\") {\n        executions.delete(event.executionId);\n        complete(execution, event.status ?? \"done\", at);\n        return;\n      }\n      if (event.type === \"usage\") {\n        for (const dimension of usageDimensions) {\n          const value = event.usage?.[dimension];\n          if (value !== undefined && Number.isFinite(value) && value > 0)\n            safe(() =>\n              counters.usage?.add(value, { \"outpost.token.type\": dimension }),\n            );\n        }\n        return;\n      }\n      if (event.key === undefined) return;\n      if (event.type === \"attempt\") {\n        execution.attempts.set(\n          event.key,\n          start(\n            \"outpost.task.attempt\",\n            execution.tasks.get(event.key)?.context ??\n              execution.workflow.context,\n            at,\n          ),\n        );\n        safe(() => counters.attempts?.add(1));\n        return;\n      }\n      if (event.type === \"retry\") {\n        finish(\n          execution.attempts.get(event.key),\n          \"failed\",\n          at,\n          durations.attempt,\n        );\n        execution.attempts.delete(event.key);\n        safe(() => counters.retries?.add(1));\n        return;\n      }\n      if (event.type === \"task\" && event.status === \"active\") {\n        execution.tasks.set(\n          event.key,\n          start(\"outpost.task\", execution.workflow.context, at),\n        );\n        return;\n      }\n      if (event.type === \"task\" && event.status) {\n        finish(\n          execution.attempts.get(event.key),\n          event.status,\n          at,\n          durations.attempt,\n        );\n        finish(\n          execution.tasks.get(event.key),\n          event.status,\n          at,\n          durations.task,\n        );\n        execution.attempts.delete(event.key);\n        execution.tasks.delete(event.key);\n        safe(() => counters.tasks?.add(1, { \"outpost.status\": event.status }));\n      }\n    },\n    close() {\n      if (closed) return;\n      closed = true;\n      for (const execution of executions.values())\n        complete(execution, \"cancelled\", Date.now());\n      executions.clear();\n    },\n  };\n}\n"]}

package/dist/infrastructure/resource-activity-inspection.d.ts

@@ -0,0 +1,2 @@
+import type { ResourceInspection } from "./resource-activity.types.ts";
+export declare function inspectResourceActivity(repository: string, maxEntries?: number): Promise<ResourceInspection>;

package/dist/infrastructure/resource-activity-inspection.js

@@ -0,0 +1,152 @@
+import { lstat, opendir, realpath } from "node:fs/promises";
+import { join } from "node:path";
+import { invariant, positive } from "../domain/errors.js";
+import { observeOwnership } from "./git/process-identity.js";
+import { readInspectionFile } from "./inspection-file.js";
+import { resourceActivityDefaults as defaults, resourceOperationKinds, resourcePhases, } from "./resource-activity.constants.js";
+function object(value) {
+    invariant(!!value && typeof value === "object" && !Array.isArray(value), "Invalid activity object");
+}
+function text(value) {
+    invariant(typeof value === "string" &&
+        value.length > 0 &&
+        value.length <= defaults.maxText, "Invalid activity text");
+}
+function date(value) {
+    text(value);
+    invariant(Number.isFinite(Date.parse(value)), "Invalid activity time");
+}
+function operation(value) {
+    object(value);
+    invariant(typeof value.count === "number" &&
+        Number.isSafeInteger(value.count) &&
+        value.count > 0, "Invalid activity count");
+    date(value.startedAt);
+    const kind = resourceOperationKinds.find((kind) => kind === value.kind);
+    invariant(kind, "Invalid activity operation");
+    return { count: value.count, startedAt: value.startedAt, kind };
+}
+function result(value) {
+    const base = operation(value);
+    object(value);
+    text(value.id);
+    date(value.finishedAt);
+    invariant(value.outcome === "completed" || value.outcome === "failed", "Invalid activity outcome");
+    return {
+        ...base,
+        id: value.id,
+        finishedAt: value.finishedAt,
+        outcome: value.outcome,
+    };
+}
+function identity(value) {
+    if (value === undefined)
+        return undefined;
+    object(value);
+    text(value.host);
+    text(value.boot);
+    text(value.namespace);
+    text(value.started);
+    return {
+        host: value.host,
+        boot: value.boot,
+        namespace: value.namespace,
+        started: value.started,
+    };
+}
+function record(value) {
+    object(value);
+    invariant(value.version === 1, "Unknown activity version");
+    text(value.id);
+    text(value.provider);
+    text(value.workspace);
+    date(value.createdAt);
+    date(value.updatedAt);
+    invariant(typeof value.pid === "number" &&
+        Number.isSafeInteger(value.pid) &&
+        value.pid > 0 &&
+        value.pid <= 2_147_483_647, "Invalid activity owner");
+    invariant(value.placement === "host" ||
+        value.placement === "mounted" ||
+        value.placement === "remote", "Invalid activity placement");
+    const phase = resourcePhases.find((phase) => phase === value.phase);
+    invariant(phase, "Invalid activity phase");
+    invariant(Array.isArray(value.operations) &&
+        value.operations.length <= resourceOperationKinds.length, "Invalid activity operations");
+    const owner = identity(value.identity);
+    return {
+        version: 1,
+        id: value.id,
+        pid: value.pid,
+        ...(owner ? { identity: owner } : {}),
+        provider: value.provider,
+        placement: value.placement,
+        workspace: value.workspace,
+        createdAt: value.createdAt,
+        updatedAt: value.updatedAt,
+        phase,
+        operations: value.operations.map(operation),
+        ...(value.lastOperation === undefined
+            ? {}
+            : { lastOperation: result(value.lastOperation) }),
+        ...(value.lastFailure === undefined
+            ? {}
+            : { lastFailure: result(value.lastFailure) }),
+    };
+}
+export async function inspectResourceActivity(repository, maxEntries = defaults.maxRecords) {
+    positive(maxEntries, "maxEntries");
+    const entries = [];
+    const issues = [];
+    let path = repository;
+    try {
+        for (const part of [".outpost", "locks", defaults.directory]) {
+            path = join(path, part);
+            const info = await lstat(path);
+            invariant(info.isDirectory() &&
+                !info.isSymbolicLink() &&
+                (await realpath(path)) === path, "Unsafe activity directory");
+        }
+        for await (const entry of await opendir(path)) {
+            const file = join(path, entry.name);
+            if (entries.length >= Math.min(maxEntries, defaults.maxRecords)) {
+                issues.push({ path, code: "RESOURCE_ENTRY_LIMIT" });
+                break;
+            }
+            try {
+                const value = record(JSON.parse((await readInspectionFile(file, defaults.maxRecordBytes)).toString("utf8")));
+                invariant(entry.name === `${value.id}.json`, "Activity identity mismatch");
+                entries.push({
+                    path: file,
+                    record: value,
+                    ownership: await observeOwnership(value.pid, value.identity),
+                });
+            }
+            catch {
+                entries.push({
+                    path: file,
+                    ownership: {
+                        status: "unknown",
+                        reason: "RESOURCE_RECORD_UNREADABLE",
+                    },
+                });
+                issues.push({ path: file, code: "RESOURCE_RECORD_UNREADABLE" });
+            }
+        }
+    }
+    catch (cause) {
+        if (!(cause &&
+            typeof cause === "object" &&
+            "code" in cause &&
+            cause.code === "ENOENT"))
+            issues.push({ path, code: "RESOURCE_DIRECTORY_UNAVAILABLE" });
+    }
+    entries.sort((left, right) => left.path.localeCompare(right.path));
+    return {
+        scope: "recorded-sandboxes",
+        complete: issues.length === 0,
+        entries,
+        issues,
+    };
+}
+//# sourceMappingURL=resource-activity-inspection.js.map

package/dist/infrastructure/resource-activity-inspection.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"resource-activity-inspection.js","sourceRoot":"","sources":["../../src/infrastructure/resource-activity-inspection.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5D,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AAC1D,OAAO,EAAE,gBAAgB,EAAE,MAAM,2BAA2B,CAAC;AAE7D,OAAO,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAC1D,OAAO,EACL,wBAAwB,IAAI,QAAQ,EACpC,sBAAsB,EACtB,cAAc,GACf,MAAM,kCAAkC,CAAC;AAU1C,SAAS,MAAM,CAAC,KAAc;IAC5B,SAAS,CACP,CAAC,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAC7D,yBAAyB,CAC1B,CAAC;AACJ,CAAC;AACD,SAAS,IAAI,CAAC,KAAc;IAC1B,SAAS,CACP,OAAO,KAAK,KAAK,QAAQ;QACvB,KAAK,CAAC,MAAM,GAAG,CAAC;QAChB,KAAK,CAAC,MAAM,IAAI,QAAQ,CAAC,OAAO,EAClC,uBAAuB,CACxB,CAAC;AACJ,CAAC;AACD,SAAS,IAAI,CAAC,KAAc;IAC1B,IAAI,CAAC,KAAK,CAAC,CAAC;IACZ,SAAS,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,uBAAuB,CAAC,CAAC;AACzE,CAAC;AACD,SAAS,SAAS,CAAC,KAAc;IAC/B,MAAM,CAAC,KAAK,CAAC,CAAC;IACd,SAAS,CACP,OAAO,KAAK,CAAC,KAAK,KAAK,QAAQ;QAC7B,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,KAAK,CAAC;QACjC,KAAK,CAAC,KAAK,GAAG,CAAC,EACjB,wBAAwB,CACzB,CAAC;IACF,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IACtB,MAAM,IAAI,GAAG,sBAAsB,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,KAAK,KAAK,CAAC,IAAI,CAAC,CAAC;IACxE,SAAS,CAAC,IAAI,EAAE,4BAA4B,CAAC,CAAC;IAC9C,OAAO,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,IAAI,EAAE,CAAC;AAClE,CAAC;AACD,SAAS,MAAM,CAAC,KAAc;IAC5B,MAAM,IAAI,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC;IAC9B,MAAM,CAAC,KAAK,CAAC,CAAC;IACd,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IACf,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IACvB,SAAS,CACP,KAAK,CAAC,OAAO,KAAK,WAAW,IAAI,KAAK,CAAC,OAAO,KAAK,QAAQ,EAC3D,0BAA0B,CAC3B,CAAC;IACF,OAAO;QACL,GAAG,IAAI;QACP,EAAE,EAAE,KAAK,CAAC,EAAE;QACZ,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,OAAO,EAAE,KAAK,CAAC,OAAO;KACvB,CAAC;AACJ,CAAC;AACD,SAAS,QAAQ,CAAC,KAAc;IAC9B,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC1C,MAAM,CAAC,KAAK,CAAC,CAAC;IACd,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACjB,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACjB,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IACtB,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACpB,OAAO;QACL,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,OAAO,EAAE,KAAK,CAAC,OAAO;KACvB,CAAC;AACJ,CAAC;AACD,SAAS,MAAM,CAAC,KAAc;IAC5B,MAAM,CAAC,KAAK,CAAC,CAAC;IACd,SAAS,CAAC,KAAK,CAAC,OAAO,KAAK,CAAC,EAAE,0BAA0B,CAAC,CAAC;IAC3D,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IACf,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IACrB,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IACtB,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IACtB,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IACtB,SAAS,CACP,OAAO,KAAK,CAAC,GAAG,KAAK,QAAQ;QAC3B,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,GAAG,CAAC;QAC/B,KAAK,CAAC,GAAG,GAAG,CAAC;QACb,KAAK,CAAC,GAAG,IAAI,aAAa,EAC5B,wBAAwB,CACzB,CAAC;IACF,SAAS,CACP,KAAK,CAAC,SAAS,KAAK,MAAM;QACxB,KAAK,CAAC,SAAS,KAAK,SAAS;QAC7B,KAAK,CAAC,SAAS,KAAK,QAAQ,EAC9B,4BAA4B,CAC7B,CAAC;IACF,MAAM,KAAK,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,KAAK,KAAK,CAAC,KAAK,CAAC,CAAC;IACpE,SAAS,CAAC,KAAK,EAAE,wBAAwB,CAAC,CAAC;IAC3C,SAAS,CACP,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,UAAU,CAAC;QAC7B,KAAK,CAAC,UAAU,CAAC,MAAM,IAAI,sBAAsB,CAAC,MAAM,EAC1D,6BAA6B,CAC9B,CAAC;IACF,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IACvC,OAAO;QACL,OAAO,EAAE,CAAC;QACV,EAAE,EAAE,KAAK,CAAC,EAAE;QACZ,GAAG,EAAE,KAAK,CAAC,GAAG;QACd,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACrC,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,KAAK;QACL,UAAU,EAAE,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,SAAS,CAAC;QAC3C,GAAG,CAAC,KAAK,CAAC,aAAa,KAAK,SAAS;YACnC,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC,EAAE,aAAa,EAAE,MAAM,CAAC,KAAK,CAAC,aAAa,CAAC,EAAE,CAAC;QACnD,GAAG,CAAC,KAAK,CAAC,WAAW,KAAK,SAAS;YACjC,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC,EAAE,WAAW,EAAE,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,EAAE,CAAC;KAChD,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,UAAkB,EAClB,aAAqB,QAAQ,CAAC,UAAU;IAExC,QAAQ,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC;IACnC,MAAM,OAAO,GAA8B,EAAE,CAAC;IAC9C,MAAM,MAAM,GAAmB,EAAE,CAAC;IAClC,IAAI,IAAI,GAAG,UAAU,CAAC;IACtB,IAAI,CAAC;QACH,KAAK,MAAM,IAAI,IAAI,CAAC,UAAU,EAAE,OAAO,EAAE,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;YAC7D,IAAI,GAAG,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;YACxB,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC;YAC/B,SAAS,CACP,IAAI,CAAC,WAAW,EAAE;gBAChB,CAAC,IAAI,CAAC,cAAc,EAAE;gBACtB,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,CAAC,KAAK,IAAI,EACjC,2BAA2B,CAC5B,CAAC;QACJ,CAAC;QACD,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,MAAM,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;YAC9C,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;YACpC,IAAI,OAAO,CAAC,MAAM,IAAI,IAAI,CAAC,GAAG,CAAC,UAAU,EAAE,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;gBAChE,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,sBAAsB,EAAE,CAAC,CAAC;gBACpD,MAAM;YACR,CAAC;YACD,IAAI,CAAC;gBACH,MAAM,KAAK,GAAG,MAAM,CAClB,IAAI,CAAC,KAAK,CACR,CAAC,MAAM,kBAAkB,CAAC,IAAI,EAAE,QAAQ,CAAC,cAAc,CAAC,CAAC,CAAC,QAAQ,CAChE,MAAM,CACP,CACF,CACF,CAAC;gBACF,SAAS,CACP,KAAK,CAAC,IAAI,KAAK,GAAG,KAAK,CAAC,EAAE,OAAO,EACjC,4BAA4B,CAC7B,CAAC;gBACF,OAAO,CAAC,IAAI,CAAC;oBACX,IAAI,EAAE,IAAI;oBACV,MAAM,EAAE,KAAK;oBACb,SAAS,EAAE,MAAM,gBAAgB,CAAC,KAAK,CAAC,GAAG,EAAE,KAAK,CAAC,QAAQ,CAAC;iBAC7D,CAAC,CAAC;YACL,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,CAAC,IAAI,CAAC;oBACX,IAAI,EAAE,IAAI;oBACV,SAAS,EAAE;wBACT,MAAM,EAAE,SAAS;wBACjB,MAAM,EAAE,4BAA4B;qBACrC;iBACF,CAAC,CAAC;gBACH,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,4BAA4B,EAAE,CAAC,CAAC;YAClE,CAAC;QACH,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,CAAC,CACH,KAAK;YACL,OAAO,KAAK,KAAK,QAAQ;YACzB,MAAM,IAAI,KAAK;YACf,KAAK,CAAC,IAAI,KAAK,QAAQ,CACxB;YACC,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,gCAAgC,EAAE,CAAC,CAAC;IAClE,CAAC;IACD,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;IACnE,OAAO;QACL,KAAK,EAAE,oBAAoB;QAC3B,QAAQ,EAAE,MAAM,CAAC,MAAM,KAAK,CAAC;QAC7B,OAAO;QACP,MAAM;KACP,CAAC;AACJ,CAAC","sourcesContent":["import { lstat, opendir, realpath } from \"node:fs/promises\";\nimport { join } from \"node:path\";\nimport { invariant, positive } from \"../domain/errors.ts\";\nimport { observeOwnership } from \"./git/process-identity.ts\";\nimport type { LocalProcessIdentity } from \"./git/process-identity.types.ts\";\nimport { readInspectionFile } from \"./inspection-file.ts\";\nimport {\n  resourceActivityDefaults as defaults,\n  resourceOperationKinds,\n  resourcePhases,\n} from \"./resource-activity.constants.ts\";\nimport type {\n  ResourceActivityRecord,\n  ResourceInspection,\n  ResourceInspectionEntry,\n  ResourceOperation,\n  ResourceOperationResult,\n} from \"./resource-activity.types.ts\";\nimport type { StorageIssue } from \"./storage-inventory.types.ts\";\n\nfunction object(value: unknown): asserts value is Record<string, unknown> {\n  invariant(\n    !!value && typeof value === \"object\" && !Array.isArray(value),\n    \"Invalid activity object\",\n  );\n}\nfunction text(value: unknown): asserts value is string {\n  invariant(\n    typeof value === \"string\" &&\n      value.length > 0 &&\n      value.length <= defaults.maxText,\n    \"Invalid activity text\",\n  );\n}\nfunction date(value: unknown): asserts value is string {\n  text(value);\n  invariant(Number.isFinite(Date.parse(value)), \"Invalid activity time\");\n}\nfunction operation(value: unknown): ResourceOperation {\n  object(value);\n  invariant(\n    typeof value.count === \"number\" &&\n      Number.isSafeInteger(value.count) &&\n      value.count > 0,\n    \"Invalid activity count\",\n  );\n  date(value.startedAt);\n  const kind = resourceOperationKinds.find((kind) => kind === value.kind);\n  invariant(kind, \"Invalid activity operation\");\n  return { count: value.count, startedAt: value.startedAt, kind };\n}\nfunction result(value: unknown): ResourceOperationResult {\n  const base = operation(value);\n  object(value);\n  text(value.id);\n  date(value.finishedAt);\n  invariant(\n    value.outcome === \"completed\" || value.outcome === \"failed\",\n    \"Invalid activity outcome\",\n  );\n  return {\n    ...base,\n    id: value.id,\n    finishedAt: value.finishedAt,\n    outcome: value.outcome,\n  };\n}\nfunction identity(value: unknown): LocalProcessIdentity | undefined {\n  if (value === undefined) return undefined;\n  object(value);\n  text(value.host);\n  text(value.boot);\n  text(value.namespace);\n  text(value.started);\n  return {\n    host: value.host,\n    boot: value.boot,\n    namespace: value.namespace,\n    started: value.started,\n  };\n}\nfunction record(value: unknown): ResourceActivityRecord {\n  object(value);\n  invariant(value.version === 1, \"Unknown activity version\");\n  text(value.id);\n  text(value.provider);\n  text(value.workspace);\n  date(value.createdAt);\n  date(value.updatedAt);\n  invariant(\n    typeof value.pid === \"number\" &&\n      Number.isSafeInteger(value.pid) &&\n      value.pid > 0 &&\n      value.pid <= 2_147_483_647,\n    \"Invalid activity owner\",\n  );\n  invariant(\n    value.placement === \"host\" ||\n      value.placement === \"mounted\" ||\n      value.placement === \"remote\",\n    \"Invalid activity placement\",\n  );\n  const phase = resourcePhases.find((phase) => phase === value.phase);\n  invariant(phase, \"Invalid activity phase\");\n  invariant(\n    Array.isArray(value.operations) &&\n      value.operations.length <= resourceOperationKinds.length,\n    \"Invalid activity operations\",\n  );\n  const owner = identity(value.identity);\n  return {\n    version: 1,\n    id: value.id,\n    pid: value.pid,\n    ...(owner ? { identity: owner } : {}),\n    provider: value.provider,\n    placement: value.placement,\n    workspace: value.workspace,\n    createdAt: value.createdAt,\n    updatedAt: value.updatedAt,\n    phase,\n    operations: value.operations.map(operation),\n    ...(value.lastOperation === undefined\n      ? {}\n      : { lastOperation: result(value.lastOperation) }),\n    ...(value.lastFailure === undefined\n      ? {}\n      : { lastFailure: result(value.lastFailure) }),\n  };\n}\n\nexport async function inspectResourceActivity(\n  repository: string,\n  maxEntries: number = defaults.maxRecords,\n): Promise<ResourceInspection> {\n  positive(maxEntries, \"maxEntries\");\n  const entries: ResourceInspectionEntry[] = [];\n  const issues: StorageIssue[] = [];\n  let path = repository;\n  try {\n    for (const part of [\".outpost\", \"locks\", defaults.directory]) {\n      path = join(path, part);\n      const info = await lstat(path);\n      invariant(\n        info.isDirectory() &&\n          !info.isSymbolicLink() &&\n          (await realpath(path)) === path,\n        \"Unsafe activity directory\",\n      );\n    }\n    for await (const entry of await opendir(path)) {\n      const file = join(path, entry.name);\n      if (entries.length >= Math.min(maxEntries, defaults.maxRecords)) {\n        issues.push({ path, code: \"RESOURCE_ENTRY_LIMIT\" });\n        break;\n      }\n      try {\n        const value = record(\n          JSON.parse(\n            (await readInspectionFile(file, defaults.maxRecordBytes)).toString(\n              \"utf8\",\n            ),\n          ),\n        );\n        invariant(\n          entry.name === `${value.id}.json`,\n          \"Activity identity mismatch\",\n        );\n        entries.push({\n          path: file,\n          record: value,\n          ownership: await observeOwnership(value.pid, value.identity),\n        });\n      } catch {\n        entries.push({\n          path: file,\n          ownership: {\n            status: \"unknown\",\n            reason: \"RESOURCE_RECORD_UNREADABLE\",\n          },\n        });\n        issues.push({ path: file, code: \"RESOURCE_RECORD_UNREADABLE\" });\n      }\n    }\n  } catch (cause) {\n    if (!(\n      cause &&\n      typeof cause === \"object\" &&\n      \"code\" in cause &&\n      cause.code === \"ENOENT\"\n    ))\n      issues.push({ path, code: \"RESOURCE_DIRECTORY_UNAVAILABLE\" });\n  }\n  entries.sort((left, right) => left.path.localeCompare(right.path));\n  return {\n    scope: \"recorded-sandboxes\",\n    complete: issues.length === 0,\n    entries,\n    issues,\n  };\n}\n"]}

package/dist/infrastructure/resource-activity.constants.d.ts

@@ -0,0 +1,8 @@
+export declare const resourceActivityDefaults: {
+    readonly directory: "resource-activity";
+    readonly maxRecords: 10000;
+    readonly maxRecordBytes: 65536;
+    readonly maxText: 4096;
+};
+export declare const resourcePhases: readonly ["allocating", "ready", "closing", "cleanup-failed", "allocation-uncertain"];
+export declare const resourceOperationKinds: readonly ["dispatch", "attach", "diagnose", "command", "invoke", "upload", "download", "manifest", "download-batch", "upload-batch"];

package/dist/infrastructure/resource-activity.constants.js

@@ -0,0 +1,26 @@
+export const resourceActivityDefaults = {
+    directory: "resource-activity",
+    maxRecords: 10_000,
+    maxRecordBytes: 65_536,
+    maxText: 4_096,
+};
+export const resourcePhases = [
+    "allocating",
+    "ready",
+    "closing",
+    "cleanup-failed",
+    "allocation-uncertain",
+];
+export const resourceOperationKinds = [
+    "dispatch",
+    "attach",
+    "diagnose",
+    "command",
+    "invoke",
+    "upload",
+    "download",
+    "manifest",
+    "download-batch",
+    "upload-batch",
+];
+//# sourceMappingURL=resource-activity.constants.js.map

package/dist/infrastructure/resource-activity.constants.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"resource-activity.constants.js","sourceRoot":"","sources":["../../src/infrastructure/resource-activity.constants.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,wBAAwB,GAAG;IACtC,SAAS,EAAE,mBAAmB;IAC9B,UAAU,EAAE,MAAM;IAClB,cAAc,EAAE,MAAM;IACtB,OAAO,EAAE,KAAK;CACN,CAAC;AAEX,MAAM,CAAC,MAAM,cAAc,GAAG;IAC5B,YAAY;IACZ,OAAO;IACP,SAAS;IACT,gBAAgB;IAChB,sBAAsB;CACd,CAAC;AACX,MAAM,CAAC,MAAM,sBAAsB,GAAG;IACpC,UAAU;IACV,QAAQ;IACR,UAAU;IACV,SAAS;IACT,QAAQ;IACR,QAAQ;IACR,UAAU;IACV,UAAU;IACV,gBAAgB;IAChB,cAAc;CACN,CAAC","sourcesContent":["export const resourceActivityDefaults = {\n  directory: \"resource-activity\",\n  maxRecords: 10_000,\n  maxRecordBytes: 65_536,\n  maxText: 4_096,\n} as const;\n\nexport const resourcePhases = [\n  \"allocating\",\n  \"ready\",\n  \"closing\",\n  \"cleanup-failed\",\n  \"allocation-uncertain\",\n] as const;\nexport const resourceOperationKinds = [\n  \"dispatch\",\n  \"attach\",\n  \"diagnose\",\n  \"command\",\n  \"invoke\",\n  \"upload\",\n  \"download\",\n  \"manifest\",\n  \"download-batch\",\n  \"upload-batch\",\n] as const;\n"]}

package/dist/infrastructure/resource-activity.d.ts

@@ -0,0 +1,2 @@
+import type { ResourceActivity, ResourceActivityOptions } from "./resource-activity.types.ts";
+export declare function registerResourceActivity(options: ResourceActivityOptions): Promise<ResourceActivity>;