@elie-laloum/outpost 3.0.0 → 4.1.0

package/dist/infrastructure/resource-activity.js

@@ -0,0 +1,166 @@
+import { randomUUID } from "node:crypto";
+import { mkdir, open, realpath, rename, rm, opendir } from "node:fs/promises";
+import { join } from "node:path";
+import { invariant } from "../domain/errors.js";
+import { localProcessIdentity } from "./git/process-identity.js";
+import { readInspectionFile } from "./inspection-file.js";
+import { lockStorageMutation } from "./storage-mutation-lock.js";
+import { resourceActivityDefaults as defaults } from "./resource-activity.constants.js";
+async function activityDirectory(repository) {
+    let path = repository;
+    for (const part of [".outpost", "locks", defaults.directory]) {
+        path = join(path, part);
+        await mkdir(path, { recursive: true, mode: 0o700 });
+        invariant((await realpath(path)) === path, "Resource activity directory must not use symlinks");
+    }
+    return path;
+}
+export async function registerResourceActivity(options) {
+    for (const text of [options.workspace, options.provider])
+        invariant(text.length > 0 && text.length <= defaults.maxText, "Resource activity metadata exceeds its size limit");
+    const directory = await activityDirectory(options.repository);
+    const id = randomUUID();
+    const path = join(directory, `${id}.json`);
+    const createdAt = new Date().toISOString();
+    const identity = await localProcessIdentity();
+    let record = {
+        version: 1,
+        id,
+        pid: process.pid,
+        ...(identity ? { identity } : {}),
+        provider: options.provider,
+        placement: options.placement,
+        workspace: options.workspace,
+        createdAt,
+        updatedAt: createdAt,
+        phase: "allocating",
+        operations: [],
+    };
+    const unlock = await lockStorageMutation(options.repository);
+    try {
+        let count = 0;
+        for await (const _entry of await opendir(directory))
+            invariant(++count < defaults.maxRecords, "Too many resource activity records; inspect retained ownership before continuing");
+        const file = await open(path, "wx", 0o600);
+        try {
+            await file.writeFile(JSON.stringify(record));
+            await file.sync();
+        }
+        finally {
+            await file.close();
+        }
+    }
+    finally {
+        await unlock();
+    }
+    let pending = Promise.resolve();
+    let removed = false;
+    function serialize(action) {
+        const next = pending.then(action);
+        pending = next.catch(() => undefined);
+        return next;
+    }
+    async function verify() {
+        invariant((await realpath(directory)) === directory, "Resource activity directory changed");
+        invariant(!removed, "Resource activity is closed");
+        const current = (await readInspectionFile(path, defaults.maxRecordBytes)).toString("utf8");
+        invariant(current === JSON.stringify(record), "Resource activity identity changed; refusing mutation");
+    }
+    function update(next) {
+        return serialize(async () => {
+            await verify();
+            const value = { ...next(), updatedAt: new Date().toISOString() };
+            const data = JSON.stringify(value);
+            invariant(Buffer.byteLength(data) <= defaults.maxRecordBytes, "Resource activity record exceeds its size limit");
+            const temporary = `${path}.${randomUUID()}.tmp`;
+            const file = await open(temporary, "wx", 0o600);
+            try {
+                await file.writeFile(data);
+                await file.sync();
+                await file.close();
+                await rename(temporary, path);
+                record = value;
+            }
+            finally {
+                await file.close();
+                await rm(temporary, { force: true });
+            }
+        });
+    }
+    return {
+        async idle() {
+            await pending;
+            return record.operations.length === 0;
+        },
+        phase: (phase) => update(() => ({ ...record, phase })),
+        async run(kind, action) {
+            const operation = {
+                id: randomUUID(),
+                kind,
+                startedAt: new Date().toISOString(),
+            };
+            await update(() => {
+                const active = record.operations.find((value) => value.kind === kind);
+                const operations = record.operations.filter((value) => value.kind !== kind);
+                operations.push({
+                    kind,
+                    startedAt: active?.startedAt ?? operation.startedAt,
+                    count: (active?.count ?? 0) + 1,
+                });
+                return { ...record, operations };
+            });
+            let outcome = "completed";
+            try {
+                return await action();
+            }
+            catch (cause) {
+                outcome = "failed";
+                throw cause;
+            }
+            finally {
+                const result = {
+                    ...operation,
+                    outcome,
+                    count: 1,
+                    finishedAt: new Date().toISOString(),
+                };
+                try {
+                    await update(() => ({
+                        ...record,
+                        operations: record.operations.flatMap((value) => {
+                            if (value.kind !== kind)
+                                return [value];
+                            if (value.count === 1)
+                                return [];
+                            return [{ ...value, count: value.count - 1 }];
+                        }),
+                        lastOperation: result,
+                        ...(outcome === "failed" ? { lastFailure: result } : {}),
+                    }));
+                }
+                catch (cause) {
+                    if (outcome !== "failed")
+                        throw cause;
+                }
+            }
+        },
+        remove: () => serialize(async () => {
+            if (removed)
+                return;
+            invariant(record.operations.length === 0, "Resource operations remain unsettled; activity record retained");
+            try {
+                await verify();
+                await rm(path);
+            }
+            catch (cause) {
+                if (!(cause &&
+                    typeof cause === "object" &&
+                    "code" in cause &&
+                    cause.code === "ENOENT"))
+                    throw cause;
+            }
+            removed = true;
+        }),
+    };
+}
+//# sourceMappingURL=resource-activity.js.map

package/dist/infrastructure/resource-activity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"resource-activity.js","sourceRoot":"","sources":["../../src/infrastructure/resource-activity.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAC9E,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAChD,OAAO,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAC;AACjE,OAAO,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAC1D,OAAO,EAAE,mBAAmB,EAAE,MAAM,4BAA4B,CAAC;AACjE,OAAO,EAAE,wBAAwB,IAAI,QAAQ,EAAE,MAAM,kCAAkC,CAAC;AAQxF,KAAK,UAAU,iBAAiB,CAAC,UAAkB;IACjD,IAAI,IAAI,GAAG,UAAU,CAAC;IACtB,KAAK,MAAM,IAAI,IAAI,CAAC,UAAU,EAAE,OAAO,EAAE,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;QAC7D,IAAI,GAAG,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QACxB,MAAM,KAAK,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACpD,SAAS,CACP,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,CAAC,KAAK,IAAI,EAC/B,mDAAmD,CACpD,CAAC;IACJ,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAC5C,OAAgC;IAEhC,KAAK,MAAM,IAAI,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,OAAO,CAAC,QAAQ,CAAC;QACtD,SAAS,CACP,IAAI,CAAC,MAAM,GAAG,CAAC,IAAI,IAAI,CAAC,MAAM,IAAI,QAAQ,CAAC,OAAO,EAClD,mDAAmD,CACpD,CAAC;IACJ,MAAM,SAAS,GAAG,MAAM,iBAAiB,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IAC9D,MAAM,EAAE,GAAG,UAAU,EAAE,CAAC;IACxB,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC;IAC3C,MAAM,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC3C,MAAM,QAAQ,GAAG,MAAM,oBAAoB,EAAE,CAAC;IAC9C,IAAI,MAAM,GAA2B;QACnC,OAAO,EAAE,CAAC;QACV,EAAE;QACF,GAAG,EAAE,OAAO,CAAC,GAAG;QAChB,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACjC,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,SAAS;QACT,SAAS,EAAE,SAAS;QACpB,KAAK,EAAE,YAAY;QACnB,UAAU,EAAE,EAAE;KACf,CAAC;IACF,MAAM,MAAM,GAAG,MAAM,mBAAmB,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IAC7D,IAAI,CAAC;QACH,IAAI,KAAK,GAAG,CAAC,CAAC;QACd,IAAI,KAAK,EAAE,MAAM,MAAM,IAAI,MAAM,OAAO,CAAC,SAAS,CAAC;YACjD,SAAS,CACP,EAAE,KAAK,GAAG,QAAQ,CAAC,UAAU,EAC7B,kFAAkF,CACnF,CAAC;QACJ,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;QAC3C,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;YAC7C,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;QACpB,CAAC;gBAAS,CAAC;YACT,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC;QACrB,CAAC;IACH,CAAC;YAAS,CAAC;QACT,MAAM,MAAM,EAAE,CAAC;IACjB,CAAC;IACD,IAAI,OAAO,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC;IAChC,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,SAAS,SAAS,CAAC,MAA2B;QAC5C,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAClC,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QACtC,OAAO,IAAI,CAAC;IACd,CAAC;IACD,KAAK,UAAU,MAAM;QACnB,SAAS,CACP,CAAC,MAAM,QAAQ,CAAC,SAAS,CAAC,CAAC,KAAK,SAAS,EACzC,qCAAqC,CACtC,CAAC;QACF,SAAS,CAAC,CAAC,OAAO,EAAE,6BAA6B,CAAC,CAAC;QACnD,MAAM,OAAO,GAAG,CACd,MAAM,kBAAkB,CAAC,IAAI,EAAE,QAAQ,CAAC,cAAc,CAAC,CACxD,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QACnB,SAAS,CACP,OAAO,KAAK,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAClC,uDAAuD,CACxD,CAAC;IACJ,CAAC;IACD,SAAS,MAAM,CAAC,IAAkC;QAChD,OAAO,SAAS,CAAC,KAAK,IAAI,EAAE;YAC1B,MAAM,MAAM,EAAE,CAAC;YACf,MAAM,KAAK,GAAG,EAAE,GAAG,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC;YACjE,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;YACnC,SAAS,CACP,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,QAAQ,CAAC,cAAc,EAClD,iDAAiD,CAClD,CAAC;YACF,MAAM,SAAS,GAAG,GAAG,IAAI,IAAI,UAAU,EAAE,MAAM,CAAC;YAChD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,SAAS,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;YAChD,IAAI,CAAC;gBACH,MAAM,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;gBAC3B,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;gBAClB,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC;gBACnB,MAAM,MAAM,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;gBAC9B,MAAM,GAAG,KAAK,CAAC;YACjB,CAAC;oBAAS,CAAC;gBACT,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC;gBACnB,MAAM,EAAE,CAAC,SAAS,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YACvC,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC;IACD,OAAO;QACL,KAAK,CAAC,IAAI;YACR,MAAM,OAAO,CAAC;YACd,OAAO,MAAM,CAAC,UAAU,CAAC,MAAM,KAAK,CAAC,CAAC;QACxC,CAAC;QACD,KAAK,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,GAAG,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;QACtD,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,MAAM;YACpB,MAAM,SAAS,GAAG;gBAChB,EAAE,EAAE,UAAU,EAAE;gBAChB,IAAI;gBACJ,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;aACpC,CAAC;YACF,MAAM,MAAM,CAAC,GAAG,EAAE;gBAChB,MAAM,MAAM,GAAG,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;gBACtE,MAAM,UAAU,GAAG,MAAM,CAAC,UAAU,CAAC,MAAM,CACzC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,CAC/B,CAAC;gBACF,UAAU,CAAC,IAAI,CAAC;oBACd,IAAI;oBACJ,SAAS,EAAE,MAAM,EAAE,SAAS,IAAI,SAAS,CAAC,SAAS;oBACnD,KAAK,EAAE,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC,CAAC,GAAG,CAAC;iBAChC,CAAC,CAAC;gBACH,OAAO,EAAE,GAAG,MAAM,EAAE,UAAU,EAAE,CAAC;YACnC,CAAC,CAAC,CAAC;YACH,IAAI,OAAO,GAAuC,WAAW,CAAC;YAC9D,IAAI,CAAC;gBACH,OAAO,MAAM,MAAM,EAAE,CAAC;YACxB,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,OAAO,GAAG,QAAQ,CAAC;gBACnB,MAAM,KAAK,CAAC;YACd,CAAC;oBAAS,CAAC;gBACT,MAAM,MAAM,GAAG;oBACb,GAAG,SAAS;oBACZ,OAAO;oBACP,KAAK,EAAE,CAAC;oBACR,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;iBACrC,CAAC;gBACF,IAAI,CAAC;oBACH,MAAM,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC;wBAClB,GAAG,MAAM;wBACT,UAAU,EAAE,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE;4BAC9C,IAAI,KAAK,CAAC,IAAI,KAAK,IAAI;gCAAE,OAAO,CAAC,KAAK,CAAC,CAAC;4BACxC,IAAI,KAAK,CAAC,KAAK,KAAK,CAAC;gCAAE,OAAO,EAAE,CAAC;4BACjC,OAAO,CAAC,EAAE,GAAG,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,GAAG,CAAC,EAAE,CAAC,CAAC;wBAChD,CAAC,CAAC;wBACF,aAAa,EAAE,MAAM;wBACrB,GAAG,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;qBACzD,CAAC,CAAC,CAAC;gBACN,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,IAAI,OAAO,KAAK,QAAQ;wBAAE,MAAM,KAAK,CAAC;gBACxC,CAAC;YACH,CAAC;QACH,CAAC;QACD,MAAM,EAAE,GAAG,EAAE,CACX,SAAS,CAAC,KAAK,IAAI,EAAE;YACnB,IAAI,OAAO;gBAAE,OAAO;YACpB,SAAS,CACP,MAAM,CAAC,UAAU,CAAC,MAAM,KAAK,CAAC,EAC9B,gEAAgE,CACjE,CAAC;YACF,IAAI,CAAC;gBACH,MAAM,MAAM,EAAE,CAAC;gBACf,MAAM,EAAE,CAAC,IAAI,CAAC,CAAC;YACjB,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,CAAC,CACH,KAAK;oBACL,OAAO,KAAK,KAAK,QAAQ;oBACzB,MAAM,IAAI,KAAK;oBACf,KAAK,CAAC,IAAI,KAAK,QAAQ,CACxB;oBACC,MAAM,KAAK,CAAC;YAChB,CAAC;YACD,OAAO,GAAG,IAAI,CAAC;QACjB,CAAC,CAAC;KACL,CAAC;AACJ,CAAC","sourcesContent":["import { randomUUID } from \"node:crypto\";\nimport { mkdir, open, realpath, rename, rm, opendir } from \"node:fs/promises\";\nimport { join } from \"node:path\";\nimport { invariant } from \"../domain/errors.ts\";\nimport { localProcessIdentity } from \"./git/process-identity.ts\";\nimport { readInspectionFile } from \"./inspection-file.ts\";\nimport { lockStorageMutation } from \"./storage-mutation-lock.ts\";\nimport { resourceActivityDefaults as defaults } from \"./resource-activity.constants.ts\";\nimport type {\n  ResourceActivity,\n  ResourceActivityOptions,\n  ResourceActivityRecord,\n  ResourceOperationResult,\n} from \"./resource-activity.types.ts\";\n\nasync function activityDirectory(repository: string): Promise<string> {\n  let path = repository;\n  for (const part of [\".outpost\", \"locks\", defaults.directory]) {\n    path = join(path, part);\n    await mkdir(path, { recursive: true, mode: 0o700 });\n    invariant(\n      (await realpath(path)) === path,\n      \"Resource activity directory must not use symlinks\",\n    );\n  }\n  return path;\n}\n\nexport async function registerResourceActivity(\n  options: ResourceActivityOptions,\n): Promise<ResourceActivity> {\n  for (const text of [options.workspace, options.provider])\n    invariant(\n      text.length > 0 && text.length <= defaults.maxText,\n      \"Resource activity metadata exceeds its size limit\",\n    );\n  const directory = await activityDirectory(options.repository);\n  const id = randomUUID();\n  const path = join(directory, `${id}.json`);\n  const createdAt = new Date().toISOString();\n  const identity = await localProcessIdentity();\n  let record: ResourceActivityRecord = {\n    version: 1,\n    id,\n    pid: process.pid,\n    ...(identity ? { identity } : {}),\n    provider: options.provider,\n    placement: options.placement,\n    workspace: options.workspace,\n    createdAt,\n    updatedAt: createdAt,\n    phase: \"allocating\",\n    operations: [],\n  };\n  const unlock = await lockStorageMutation(options.repository);\n  try {\n    let count = 0;\n    for await (const _entry of await opendir(directory))\n      invariant(\n        ++count < defaults.maxRecords,\n        \"Too many resource activity records; inspect retained ownership before continuing\",\n      );\n    const file = await open(path, \"wx\", 0o600);\n    try {\n      await file.writeFile(JSON.stringify(record));\n      await file.sync();\n    } finally {\n      await file.close();\n    }\n  } finally {\n    await unlock();\n  }\n  let pending = Promise.resolve();\n  let removed = false;\n  function serialize(action: () => Promise<void>): Promise<void> {\n    const next = pending.then(action);\n    pending = next.catch(() => undefined);\n    return next;\n  }\n  async function verify(): Promise<void> {\n    invariant(\n      (await realpath(directory)) === directory,\n      \"Resource activity directory changed\",\n    );\n    invariant(!removed, \"Resource activity is closed\");\n    const current = (\n      await readInspectionFile(path, defaults.maxRecordBytes)\n    ).toString(\"utf8\");\n    invariant(\n      current === JSON.stringify(record),\n      \"Resource activity identity changed; refusing mutation\",\n    );\n  }\n  function update(next: () => ResourceActivityRecord): Promise<void> {\n    return serialize(async () => {\n      await verify();\n      const value = { ...next(), updatedAt: new Date().toISOString() };\n      const data = JSON.stringify(value);\n      invariant(\n        Buffer.byteLength(data) <= defaults.maxRecordBytes,\n        \"Resource activity record exceeds its size limit\",\n      );\n      const temporary = `${path}.${randomUUID()}.tmp`;\n      const file = await open(temporary, \"wx\", 0o600);\n      try {\n        await file.writeFile(data);\n        await file.sync();\n        await file.close();\n        await rename(temporary, path);\n        record = value;\n      } finally {\n        await file.close();\n        await rm(temporary, { force: true });\n      }\n    });\n  }\n  return {\n    async idle() {\n      await pending;\n      return record.operations.length === 0;\n    },\n    phase: (phase) => update(() => ({ ...record, phase })),\n    async run(kind, action) {\n      const operation = {\n        id: randomUUID(),\n        kind,\n        startedAt: new Date().toISOString(),\n      };\n      await update(() => {\n        const active = record.operations.find((value) => value.kind === kind);\n        const operations = record.operations.filter(\n          (value) => value.kind !== kind,\n        );\n        operations.push({\n          kind,\n          startedAt: active?.startedAt ?? operation.startedAt,\n          count: (active?.count ?? 0) + 1,\n        });\n        return { ...record, operations };\n      });\n      let outcome: ResourceOperationResult[\"outcome\"] = \"completed\";\n      try {\n        return await action();\n      } catch (cause) {\n        outcome = \"failed\";\n        throw cause;\n      } finally {\n        const result = {\n          ...operation,\n          outcome,\n          count: 1,\n          finishedAt: new Date().toISOString(),\n        };\n        try {\n          await update(() => ({\n            ...record,\n            operations: record.operations.flatMap((value) => {\n              if (value.kind !== kind) return [value];\n              if (value.count === 1) return [];\n              return [{ ...value, count: value.count - 1 }];\n            }),\n            lastOperation: result,\n            ...(outcome === \"failed\" ? { lastFailure: result } : {}),\n          }));\n        } catch (cause) {\n          if (outcome !== \"failed\") throw cause;\n        }\n      }\n    },\n    remove: () =>\n      serialize(async () => {\n        if (removed) return;\n        invariant(\n          record.operations.length === 0,\n          \"Resource operations remain unsettled; activity record retained\",\n        );\n        try {\n          await verify();\n          await rm(path);\n        } catch (cause) {\n          if (!(\n            cause &&\n            typeof cause === \"object\" &&\n            \"code\" in cause &&\n            cause.code === \"ENOENT\"\n          ))\n            throw cause;\n        }\n        removed = true;\n      }),\n  };\n}\n"]}

package/dist/infrastructure/resource-activity.types.d.ts

@@ -0,0 +1,53 @@
+import type { LocalProcessIdentity, LockOwnership } from "./git/process-identity.types.ts";
+import type { StorageIssue } from "./storage-inventory.types.ts";
+import type { resourceOperationKinds, resourcePhases } from "./resource-activity.constants.ts";
+export type ResourcePhase = (typeof resourcePhases)[number];
+export type ResourceOperationKind = (typeof resourceOperationKinds)[number];
+export interface ResourceOperation {
+    readonly count: number;
+    readonly kind: ResourceOperationKind;
+    readonly startedAt: string;
+}
+export interface ResourceOperationResult extends ResourceOperation {
+    readonly id: string;
+    readonly finishedAt: string;
+    readonly outcome: "completed" | "failed";
+}
+export interface ResourceActivityRecord {
+    readonly version: 1;
+    readonly id: string;
+    readonly pid: number;
+    readonly identity?: LocalProcessIdentity;
+    readonly provider: string;
+    readonly placement: "mounted" | "remote" | "host";
+    readonly workspace: string;
+    readonly createdAt: string;
+    readonly updatedAt: string;
+    readonly phase: ResourcePhase;
+    readonly operations: readonly ResourceOperation[];
+    readonly lastOperation?: ResourceOperationResult;
+    readonly lastFailure?: ResourceOperationResult;
+}
+export interface ResourceActivity {
+    idle(): Promise<boolean>;
+    phase(phase: ResourcePhase): Promise<void>;
+    run<T>(kind: ResourceOperationKind, action: () => Promise<T>): Promise<T>;
+    remove(): Promise<void>;
+}
+export interface ResourceActivityOptions {
+    readonly repository: string;
+    readonly workspace: string;
+    readonly provider: string;
+    readonly placement: ResourceActivityRecord["placement"];
+}
+export interface ResourceInspectionEntry {
+    readonly path: string;
+    readonly record?: ResourceActivityRecord;
+    readonly ownership: LockOwnership;
+}
+export interface ResourceInspection {
+    readonly scope: "recorded-sandboxes";
+    readonly complete: boolean;
+    readonly entries: readonly ResourceInspectionEntry[];
+    readonly issues: readonly StorageIssue[];
+}

package/dist/infrastructure/resource-activity.types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=resource-activity.types.js.map

package/dist/infrastructure/resource-activity.types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"resource-activity.types.js","sourceRoot":"","sources":["../../src/infrastructure/resource-activity.types.ts"],"names":[],"mappings":"","sourcesContent":["import type {\n  LocalProcessIdentity,\n  LockOwnership,\n} from \"./git/process-identity.types.ts\";\nimport type { StorageIssue } from \"./storage-inventory.types.ts\";\nimport type {\n  resourceOperationKinds,\n  resourcePhases,\n} from \"./resource-activity.constants.ts\";\n\nexport type ResourcePhase = (typeof resourcePhases)[number];\nexport type ResourceOperationKind = (typeof resourceOperationKinds)[number];\nexport interface ResourceOperation {\n  readonly count: number;\n  readonly kind: ResourceOperationKind;\n  readonly startedAt: string;\n}\nexport interface ResourceOperationResult extends ResourceOperation {\n  readonly id: string;\n  readonly finishedAt: string;\n  readonly outcome: \"completed\" | \"failed\";\n}\nexport interface ResourceActivityRecord {\n  readonly version: 1;\n  readonly id: string;\n  readonly pid: number;\n  readonly identity?: LocalProcessIdentity;\n  readonly provider: string;\n  readonly placement: \"mounted\" | \"remote\" | \"host\";\n  readonly workspace: string;\n  readonly createdAt: string;\n  readonly updatedAt: string;\n  readonly phase: ResourcePhase;\n  readonly operations: readonly ResourceOperation[];\n  readonly lastOperation?: ResourceOperationResult;\n  readonly lastFailure?: ResourceOperationResult;\n}\nexport interface ResourceActivity {\n  idle(): Promise<boolean>;\n  phase(phase: ResourcePhase): Promise<void>;\n  run<T>(kind: ResourceOperationKind, action: () => Promise<T>): Promise<T>;\n  remove(): Promise<void>;\n}\nexport interface ResourceActivityOptions {\n  readonly repository: string;\n  readonly workspace: string;\n  readonly provider: string;\n  readonly placement: ResourceActivityRecord[\"placement\"];\n}\nexport interface ResourceInspectionEntry {\n  readonly path: string;\n  readonly record?: ResourceActivityRecord;\n  readonly ownership: LockOwnership;\n}\nexport interface ResourceInspection {\n  readonly scope: \"recorded-sandboxes\";\n  readonly complete: boolean;\n  readonly entries: readonly ResourceInspectionEntry[];\n  readonly issues: readonly StorageIssue[];\n}\n"]}

package/dist/infrastructure/storage-mutation-lock.constants.d.ts

@@ -0,0 +1,5 @@
+export declare const storageMutationLockDefaults: {
+    readonly lockKey: "storage-reservations:v1";
+    readonly lockWaitMs: 5000;
+    readonly lockPollMs: 20;
+};

package/dist/infrastructure/storage-mutation-lock.constants.js

@@ -0,0 +1,6 @@
+export const storageMutationLockDefaults = {
+    lockKey: "storage-reservations:v1",
+    lockWaitMs: 5_000,
+    lockPollMs: 20,
+};
+//# sourceMappingURL=storage-mutation-lock.constants.js.map

package/dist/infrastructure/storage-mutation-lock.constants.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"storage-mutation-lock.constants.js","sourceRoot":"","sources":["../../src/infrastructure/storage-mutation-lock.constants.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,2BAA2B,GAAG;IACzC,OAAO,EAAE,yBAAyB;IAClC,UAAU,EAAE,KAAK;IACjB,UAAU,EAAE,EAAE;CACN,CAAC","sourcesContent":["export const storageMutationLockDefaults = {\n  lockKey: \"storage-reservations:v1\",\n  lockWaitMs: 5_000,\n  lockPollMs: 20,\n} as const;\n"]}

package/dist/infrastructure/storage-mutation-lock.d.ts

@@ -0,0 +1 @@
+export declare function lockStorageMutation(root: string, signal?: AbortSignal): Promise<() => Promise<void>>;

package/dist/infrastructure/storage-mutation-lock.js

@@ -0,0 +1,21 @@
+import { setTimeout } from "node:timers/promises";
+import { OutpostError } from "../domain/errors.js";
+import { lock } from "./git/lock.js";
+import { storageMutationLockDefaults as defaults } from "./storage-mutation-lock.constants.js";
+export async function lockStorageMutation(root, signal) {
+    const deadline = Date.now() + defaults.lockWaitMs;
+    while (true) {
+        signal?.throwIfAborted();
+        try {
+            return await lock(root, defaults.lockKey);
+        }
+        catch (error) {
+            if (!(error instanceof OutpostError) ||
+                error.code !== "conflict" ||
+                Date.now() >= deadline)
+                throw error;
+            await setTimeout(defaults.lockPollMs, undefined, { signal });
+        }
+    }
+}
+//# sourceMappingURL=storage-mutation-lock.js.map

package/dist/infrastructure/storage-mutation-lock.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"storage-mutation-lock.js","sourceRoot":"","sources":["../../src/infrastructure/storage-mutation-lock.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AAClD,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAAE,IAAI,EAAE,MAAM,eAAe,CAAC;AACrC,OAAO,EAAE,2BAA2B,IAAI,QAAQ,EAAE,MAAM,sCAAsC,CAAC;AAE/F,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,IAAY,EAAE,MAAoB;IAC1E,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,CAAC,UAAU,CAAC;IAClD,OAAO,IAAI,EAAE,CAAC;QACZ,MAAM,EAAE,cAAc,EAAE,CAAC;QACzB,IAAI,CAAC;YACH,OAAO,MAAM,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,OAAO,CAAC,CAAC;QAC5C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IACE,CAAC,CAAC,KAAK,YAAY,YAAY,CAAC;gBAChC,KAAK,CAAC,IAAI,KAAK,UAAU;gBACzB,IAAI,CAAC,GAAG,EAAE,IAAI,QAAQ;gBAEtB,MAAM,KAAK,CAAC;YACd,MAAM,UAAU,CAAC,QAAQ,CAAC,UAAU,EAAE,SAAS,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;QAC/D,CAAC;IACH,CAAC;AACH,CAAC","sourcesContent":["import { setTimeout } from \"node:timers/promises\";\nimport { OutpostError } from \"../domain/errors.ts\";\nimport { lock } from \"./git/lock.ts\";\nimport { storageMutationLockDefaults as defaults } from \"./storage-mutation-lock.constants.ts\";\n\nexport async function lockStorageMutation(root: string, signal?: AbortSignal) {\n  const deadline = Date.now() + defaults.lockWaitMs;\n  while (true) {\n    signal?.throwIfAborted();\n    try {\n      return await lock(root, defaults.lockKey);\n    } catch (error) {\n      if (\n        !(error instanceof OutpostError) ||\n        error.code !== \"conflict\" ||\n        Date.now() >= deadline\n      )\n        throw error;\n      await setTimeout(defaults.lockPollMs, undefined, { signal });\n    }\n  }\n}\n"]}

package/dist/infrastructure/storage-reservations.constants.d.ts

@@ -0,0 +1,4 @@
+export declare const storageReservationDefaults: {
+    readonly maxRecordBytes: 4096;
+    readonly maxRecords: 10000;
+};

package/dist/infrastructure/storage-reservations.constants.js

@@ -0,0 +1,5 @@
+export const storageReservationDefaults = {
+    maxRecordBytes: 4_096,
+    maxRecords: 10_000,
+};
+//# sourceMappingURL=storage-reservations.constants.js.map

package/dist/infrastructure/storage-reservations.constants.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"storage-reservations.constants.js","sourceRoot":"","sources":["../../src/infrastructure/storage-reservations.constants.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,0BAA0B,GAAG;IACxC,cAAc,EAAE,KAAK;IACrB,UAAU,EAAE,MAAM;CACV,CAAC","sourcesContent":["export const storageReservationDefaults = {\n  maxRecordBytes: 4_096,\n  maxRecords: 10_000,\n} as const;\n"]}

package/dist/infrastructure/storage-reservations.d.ts

@@ -0,0 +1,2 @@
+import type { StorageReservation, StorageReservationOptions } from "./storage-reservations.types.ts";
+export declare function reserveStorage(repository: string, options: StorageReservationOptions): Promise<StorageReservation>;

package/dist/infrastructure/storage-reservations.js

@@ -0,0 +1,150 @@
+import { randomUUID } from "node:crypto";
+import { mkdir, open, readdir, realpath, rm } from "node:fs/promises";
+import { join } from "node:path";
+import { invariant, OutpostError } from "../domain/errors.js";
+import { lockStorageMutation } from "./storage-mutation-lock.js";
+import { localProcessIdentity, observeOwnership, } from "./git/process-identity.js";
+import { readInspectionFile } from "./inspection-file.js";
+import { storageInventory } from "./storage-inventory.js";
+import { storageReservationDefaults as defaults } from "./storage-reservations.constants.js";
+async function reservationDirectory(root) {
+    const paths = [
+        join(root, ".outpost"),
+        join(root, ".outpost", "locks"),
+        join(root, ".outpost", "locks", "storage-reservations"),
+    ];
+    for (const path of paths) {
+        await mkdir(path, { recursive: true, mode: 0o700 });
+        invariant((await realpath(path)) === path, "Storage reservation directory must not use symlinks");
+    }
+    return paths[2];
+}
+function validRecord(value) {
+    if (!value || typeof value !== "object")
+        return false;
+    return ("version" in value &&
+        value.version === 1 &&
+        "id" in value &&
+        typeof value.id === "string" &&
+        "pid" in value &&
+        typeof value.pid === "number" &&
+        Number.isSafeInteger(value.pid) &&
+        value.pid > 0 &&
+        value.pid <= 2_147_483_647 &&
+        "reserveBytes" in value &&
+        typeof value.reserveBytes === "number" &&
+        Number.isSafeInteger(value.reserveBytes) &&
+        value.reserveBytes >= 0 &&
+        "createdAt" in value &&
+        typeof value.createdAt === "string" &&
+        Number.isFinite(Date.parse(value.createdAt)));
+}
+async function readRecord(path) {
+    try {
+        const value = JSON.parse((await readInspectionFile(path, defaults.maxRecordBytes)).toString("utf8"));
+        if (validRecord(value))
+            return value;
+    }
+    catch (cause) {
+        throw new OutpostError("workspace", "Storage reservation record is unreadable; admission refused", { path }, cause);
+    }
+    throw new OutpostError("workspace", "Storage reservation record is invalid; admission refused", { path });
+}
+async function reservedBytes(directory) {
+    const names = await readdir(directory);
+    invariant(names.length <= defaults.maxRecords, "Too many storage reservation records");
+    let reserved = 0;
+    for (const name of names) {
+        const path = join(directory, name);
+        const record = await readRecord(path);
+        invariant(name === `${record.id}.json`, "Storage reservation identity mismatch");
+        const owner = await observeOwnership(record.pid, record.identity);
+        if (owner.status === "inactive") {
+            await rm(path);
+            continue;
+        }
+        reserved += record.reserveBytes;
+        invariant(Number.isSafeInteger(reserved), "Storage reservation total exceeds safe integer range");
+    }
+    return reserved;
+}
+async function releaseRecord(root, path, id) {
+    await reservationDirectory(root);
+    const unlock = await lockStorageMutation(root);
+    try {
+        const names = await readdir(join(root, ".outpost", "locks", "storage-reservations"));
+        if (!names.includes(`${id}.json`))
+            return;
+        const record = await readRecord(path);
+        invariant(record.id === id, "Storage reservation identity changed; refusing release");
+        await rm(path);
+    }
+    finally {
+        await unlock();
+    }
+}
+export async function reserveStorage(repository, options) {
+    invariant(Number.isSafeInteger(options.maxBytes) && options.maxBytes >= 0, "maxBytes must be a nonnegative integer");
+    invariant(Number.isSafeInteger(options.reserveBytes) && options.reserveBytes >= 0, "reserveBytes must be a nonnegative integer");
+    options.signal?.throwIfAborted();
+    const directory = await reservationDirectory(repository);
+    const unlock = await lockStorageMutation(repository, options.signal);
+    const id = randomUUID();
+    const path = join(directory, `${id}.json`);
+    try {
+        const reserved = await reservedBytes(directory);
+        const inventory = await storageInventory(join(repository, ".outpost"), options.maxEntries);
+        const record = {
+            version: 1,
+            id,
+            pid: process.pid,
+            identity: await localProcessIdentity(),
+            reserveBytes: options.reserveBytes,
+            createdAt: new Date().toISOString(),
+        };
+        const data = JSON.stringify(record);
+        if (!inventory.complete ||
+            inventory.usage.bytes +
+                reserved +
+                options.reserveBytes +
+                Buffer.byteLength(data) >
+                options.maxBytes)
+            throw new OutpostError("workspace", "Outpost storage reservation admission refused", {
+                usageBytes: inventory.usage.bytes,
+                reservedBytes: reserved,
+                reserveBytes: options.reserveBytes,
+                maxBytes: options.maxBytes,
+                complete: inventory.complete,
+            });
+        options.signal?.throwIfAborted();
+        const file = await open(path, "wx", 0o600);
+        try {
+            await file.writeFile(data);
+            await file.sync();
+        }
+        catch (error) {
+            await file.close();
+            await rm(path, { force: true });
+            throw error;
+        }
+        await file.close();
+    }
+    finally {
+        await unlock();
+    }
+    let released = false;
+    const release = async () => {
+        if (released)
+            return;
+        await releaseRecord(repository, path, id);
+        released = true;
+    };
+    return {
+        id,
+        repository,
+        reserveBytes: options.reserveBytes,
+        release,
+        [Symbol.asyncDispose]: release,
+    };
+}
+//# sourceMappingURL=storage-reservations.js.map

package/dist/infrastructure/storage-reservations.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"storage-reservations.js","sourceRoot":"","sources":["../../src/infrastructure/storage-reservations.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,kBAAkB,CAAC;AACtE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAC9D,OAAO,EAAE,mBAAmB,EAAE,MAAM,4BAA4B,CAAC;AACjE,OAAO,EACL,oBAAoB,EACpB,gBAAgB,GACjB,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAC1D,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAC1D,OAAO,EAAE,0BAA0B,IAAI,QAAQ,EAAE,MAAM,qCAAqC,CAAC;AAO7F,KAAK,UAAU,oBAAoB,CAAC,IAAY;IAC9C,MAAM,KAAK,GAAG;QACZ,IAAI,CAAC,IAAI,EAAE,UAAU,CAAC;QACtB,IAAI,CAAC,IAAI,EAAE,UAAU,EAAE,OAAO,CAAC;QAC/B,IAAI,CAAC,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,sBAAsB,CAAC;KACxD,CAAC;IACF,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,KAAK,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACpD,SAAS,CACP,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,CAAC,KAAK,IAAI,EAC/B,qDAAqD,CACtD,CAAC;IACJ,CAAC;IACD,OAAO,KAAK,CAAC,CAAC,CAAE,CAAC;AACnB,CAAC;AAED,SAAS,WAAW,CAAC,KAAc;IACjC,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IACtD,OAAO,CACL,SAAS,IAAI,KAAK;QAClB,KAAK,CAAC,OAAO,KAAK,CAAC;QACnB,IAAI,IAAI,KAAK;QACb,OAAO,KAAK,CAAC,EAAE,KAAK,QAAQ;QAC5B,KAAK,IAAI,KAAK;QACd,OAAO,KAAK,CAAC,GAAG,KAAK,QAAQ;QAC7B,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,GAAG,CAAC;QAC/B,KAAK,CAAC,GAAG,GAAG,CAAC;QACb,KAAK,CAAC,GAAG,IAAI,aAAa;QAC1B,cAAc,IAAI,KAAK;QACvB,OAAO,KAAK,CAAC,YAAY,KAAK,QAAQ;QACtC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,YAAY,CAAC;QACxC,KAAK,CAAC,YAAY,IAAI,CAAC;QACvB,WAAW,IAAI,KAAK;QACpB,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ;QACnC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAC7C,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,UAAU,CAAC,IAAY;IACpC,IAAI,CAAC;QACH,MAAM,KAAK,GAAY,IAAI,CAAC,KAAK,CAC/B,CAAC,MAAM,kBAAkB,CAAC,IAAI,EAAE,QAAQ,CAAC,cAAc,CAAC,CAAC,CAAC,QAAQ,CAChE,MAAM,CACP,CACF,CAAC;QACF,IAAI,WAAW,CAAC,KAAK,CAAC;YAAE,OAAO,KAAK,CAAC;IACvC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,YAAY,CACpB,WAAW,EACX,6DAA6D,EAC7D,EAAE,IAAI,EAAE,EACR,KAAK,CACN,CAAC;IACJ,CAAC;IACD,MAAM,IAAI,YAAY,CACpB,WAAW,EACX,0DAA0D,EAC1D,EAAE,IAAI,EAAE,CACT,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,aAAa,CAAC,SAAiB;IAC5C,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,SAAS,CAAC,CAAC;IACvC,SAAS,CACP,KAAK,CAAC,MAAM,IAAI,QAAQ,CAAC,UAAU,EACnC,sCAAsC,CACvC,CAAC;IACF,IAAI,QAAQ,GAAG,CAAC,CAAC;IACjB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;QACnC,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,IAAI,CAAC,CAAC;QACtC,SAAS,CACP,IAAI,KAAK,GAAG,MAAM,CAAC,EAAE,OAAO,EAC5B,uCAAuC,CACxC,CAAC;QACF,MAAM,KAAK,GAAG,MAAM,gBAAgB,CAAC,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC;QAClE,IAAI,KAAK,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;YAChC,MAAM,EAAE,CAAC,IAAI,CAAC,CAAC;YACf,SAAS;QACX,CAAC;QACD,QAAQ,IAAI,MAAM,CAAC,YAAY,CAAC;QAChC,SAAS,CACP,MAAM,CAAC,aAAa,CAAC,QAAQ,CAAC,EAC9B,sDAAsD,CACvD,CAAC;IACJ,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,KAAK,UAAU,aAAa,CAC1B,IAAY,EACZ,IAAY,EACZ,EAAU;IAEV,MAAM,oBAAoB,CAAC,IAAI,CAAC,CAAC;IACjC,MAAM,MAAM,GAAG,MAAM,mBAAmB,CAAC,IAAI,CAAC,CAAC;IAC/C,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,MAAM,OAAO,CACzB,IAAI,CAAC,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,sBAAsB,CAAC,CACxD,CAAC;QACF,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,EAAE,OAAO,CAAC;YAAE,OAAO;QAC1C,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,IAAI,CAAC,CAAC;QACtC,SAAS,CACP,MAAM,CAAC,EAAE,KAAK,EAAE,EAChB,wDAAwD,CACzD,CAAC;QACF,MAAM,EAAE,CAAC,IAAI,CAAC,CAAC;IACjB,CAAC;YAAS,CAAC;QACT,MAAM,MAAM,EAAE,CAAC;IACjB,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,UAAkB,EAClB,OAAkC;IAElC,SAAS,CACP,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,OAAO,CAAC,QAAQ,IAAI,CAAC,EAC/D,wCAAwC,CACzC,CAAC;IACF,SAAS,CACP,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,YAAY,CAAC,IAAI,OAAO,CAAC,YAAY,IAAI,CAAC,EACvE,4CAA4C,CAC7C,CAAC;IACF,OAAO,CAAC,MAAM,EAAE,cAAc,EAAE,CAAC;IACjC,MAAM,SAAS,GAAG,MAAM,oBAAoB,CAAC,UAAU,CAAC,CAAC;IACzD,MAAM,MAAM,GAAG,MAAM,mBAAmB,CAAC,UAAU,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;IACrE,MAAM,EAAE,GAAG,UAAU,EAAE,CAAC;IACxB,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC;IAC3C,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,aAAa,CAAC,SAAS,CAAC,CAAC;QAChD,MAAM,SAAS,GAAG,MAAM,gBAAgB,CACtC,IAAI,CAAC,UAAU,EAAE,UAAU,CAAC,EAC5B,OAAO,CAAC,UAAU,CACnB,CAAC;QACF,MAAM,MAAM,GAA6B;YACvC,OAAO,EAAE,CAAC;YACV,EAAE;YACF,GAAG,EAAE,OAAO,CAAC,GAAG;YAChB,QAAQ,EAAE,MAAM,oBAAoB,EAAE;YACtC,YAAY,EAAE,OAAO,CAAC,YAAY;YAClC,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SACpC,CAAC;QACF,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QACpC,IACE,CAAC,SAAS,CAAC,QAAQ;YACnB,SAAS,CAAC,KAAK,CAAC,KAAK;gBACnB,QAAQ;gBACR,OAAO,CAAC,YAAY;gBACpB,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC;gBACvB,OAAO,CAAC,QAAQ;YAElB,MAAM,IAAI,YAAY,CACpB,WAAW,EACX,+CAA+C,EAC/C;gBACE,UAAU,EAAE,SAAS,CAAC,KAAK,CAAC,KAAK;gBACjC,aAAa,EAAE,QAAQ;gBACvB,YAAY,EAAE,OAAO,CAAC,YAAY;gBAClC,QAAQ,EAAE,OAAO,CAAC,QAAQ;gBAC1B,QAAQ,EAAE,SAAS,CAAC,QAAQ;aAC7B,CACF,CAAC;QACJ,OAAO,CAAC,MAAM,EAAE,cAAc,EAAE,CAAC;QACjC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;QAC3C,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;YAC3B,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;QACpB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC;YACnB,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YAChC,MAAM,KAAK,CAAC;QACd,CAAC;QACD,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC;IACrB,CAAC;YAAS,CAAC;QACT,MAAM,MAAM,EAAE,CAAC;IACjB,CAAC;IACD,IAAI,QAAQ,GAAG,KAAK,CAAC;IACrB,MAAM,OAAO,GAAG,KAAK,IAAI,EAAE;QACzB,IAAI,QAAQ;YAAE,OAAO;QACrB,MAAM,aAAa,CAAC,UAAU,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;QAC1C,QAAQ,GAAG,IAAI,CAAC;IAClB,CAAC,CAAC;IACF,OAAO;QACL,EAAE;QACF,UAAU;QACV,YAAY,EAAE,OAAO,CAAC,YAAY;QAClC,OAAO;QACP,CAAC,MAAM,CAAC,YAAY,CAAC,EAAE,OAAO;KAC/B,CAAC;AACJ,CAAC","sourcesContent":["import { randomUUID } from \"node:crypto\";\nimport { mkdir, open, readdir, realpath, rm } from \"node:fs/promises\";\nimport { join } from \"node:path\";\nimport { invariant, OutpostError } from \"../domain/errors.ts\";\nimport { lockStorageMutation } from \"./storage-mutation-lock.ts\";\nimport {\n  localProcessIdentity,\n  observeOwnership,\n} from \"./git/process-identity.ts\";\nimport { readInspectionFile } from \"./inspection-file.ts\";\nimport { storageInventory } from \"./storage-inventory.ts\";\nimport { storageReservationDefaults as defaults } from \"./storage-reservations.constants.ts\";\nimport type {\n  StorageReservation,\n  StorageReservationOptions,\n  StorageReservationRecord,\n} from \"./storage-reservations.types.ts\";\n\nasync function reservationDirectory(root: string): Promise<string> {\n  const paths = [\n    join(root, \".outpost\"),\n    join(root, \".outpost\", \"locks\"),\n    join(root, \".outpost\", \"locks\", \"storage-reservations\"),\n  ];\n  for (const path of paths) {\n    await mkdir(path, { recursive: true, mode: 0o700 });\n    invariant(\n      (await realpath(path)) === path,\n      \"Storage reservation directory must not use symlinks\",\n    );\n  }\n  return paths[2]!;\n}\n\nfunction validRecord(value: unknown): value is StorageReservationRecord {\n  if (!value || typeof value !== \"object\") return false;\n  return (\n    \"version\" in value &&\n    value.version === 1 &&\n    \"id\" in value &&\n    typeof value.id === \"string\" &&\n    \"pid\" in value &&\n    typeof value.pid === \"number\" &&\n    Number.isSafeInteger(value.pid) &&\n    value.pid > 0 &&\n    value.pid <= 2_147_483_647 &&\n    \"reserveBytes\" in value &&\n    typeof value.reserveBytes === \"number\" &&\n    Number.isSafeInteger(value.reserveBytes) &&\n    value.reserveBytes >= 0 &&\n    \"createdAt\" in value &&\n    typeof value.createdAt === \"string\" &&\n    Number.isFinite(Date.parse(value.createdAt))\n  );\n}\n\nasync function readRecord(path: string): Promise<StorageReservationRecord> {\n  try {\n    const value: unknown = JSON.parse(\n      (await readInspectionFile(path, defaults.maxRecordBytes)).toString(\n        \"utf8\",\n      ),\n    );\n    if (validRecord(value)) return value;\n  } catch (cause) {\n    throw new OutpostError(\n      \"workspace\",\n      \"Storage reservation record is unreadable; admission refused\",\n      { path },\n      cause,\n    );\n  }\n  throw new OutpostError(\n    \"workspace\",\n    \"Storage reservation record is invalid; admission refused\",\n    { path },\n  );\n}\n\nasync function reservedBytes(directory: string): Promise<number> {\n  const names = await readdir(directory);\n  invariant(\n    names.length <= defaults.maxRecords,\n    \"Too many storage reservation records\",\n  );\n  let reserved = 0;\n  for (const name of names) {\n    const path = join(directory, name);\n    const record = await readRecord(path);\n    invariant(\n      name === `${record.id}.json`,\n      \"Storage reservation identity mismatch\",\n    );\n    const owner = await observeOwnership(record.pid, record.identity);\n    if (owner.status === \"inactive\") {\n      await rm(path);\n      continue;\n    }\n    reserved += record.reserveBytes;\n    invariant(\n      Number.isSafeInteger(reserved),\n      \"Storage reservation total exceeds safe integer range\",\n    );\n  }\n  return reserved;\n}\n\nasync function releaseRecord(\n  root: string,\n  path: string,\n  id: string,\n): Promise<void> {\n  await reservationDirectory(root);\n  const unlock = await lockStorageMutation(root);\n  try {\n    const names = await readdir(\n      join(root, \".outpost\", \"locks\", \"storage-reservations\"),\n    );\n    if (!names.includes(`${id}.json`)) return;\n    const record = await readRecord(path);\n    invariant(\n      record.id === id,\n      \"Storage reservation identity changed; refusing release\",\n    );\n    await rm(path);\n  } finally {\n    await unlock();\n  }\n}\n\nexport async function reserveStorage(\n  repository: string,\n  options: StorageReservationOptions,\n): Promise<StorageReservation> {\n  invariant(\n    Number.isSafeInteger(options.maxBytes) && options.maxBytes >= 0,\n    \"maxBytes must be a nonnegative integer\",\n  );\n  invariant(\n    Number.isSafeInteger(options.reserveBytes) && options.reserveBytes >= 0,\n    \"reserveBytes must be a nonnegative integer\",\n  );\n  options.signal?.throwIfAborted();\n  const directory = await reservationDirectory(repository);\n  const unlock = await lockStorageMutation(repository, options.signal);\n  const id = randomUUID();\n  const path = join(directory, `${id}.json`);\n  try {\n    const reserved = await reservedBytes(directory);\n    const inventory = await storageInventory(\n      join(repository, \".outpost\"),\n      options.maxEntries,\n    );\n    const record: StorageReservationRecord = {\n      version: 1,\n      id,\n      pid: process.pid,\n      identity: await localProcessIdentity(),\n      reserveBytes: options.reserveBytes,\n      createdAt: new Date().toISOString(),\n    };\n    const data = JSON.stringify(record);\n    if (\n      !inventory.complete ||\n      inventory.usage.bytes +\n        reserved +\n        options.reserveBytes +\n        Buffer.byteLength(data) >\n        options.maxBytes\n    )\n      throw new OutpostError(\n        \"workspace\",\n        \"Outpost storage reservation admission refused\",\n        {\n          usageBytes: inventory.usage.bytes,\n          reservedBytes: reserved,\n          reserveBytes: options.reserveBytes,\n          maxBytes: options.maxBytes,\n          complete: inventory.complete,\n        },\n      );\n    options.signal?.throwIfAborted();\n    const file = await open(path, \"wx\", 0o600);\n    try {\n      await file.writeFile(data);\n      await file.sync();\n    } catch (error) {\n      await file.close();\n      await rm(path, { force: true });\n      throw error;\n    }\n    await file.close();\n  } finally {\n    await unlock();\n  }\n  let released = false;\n  const release = async () => {\n    if (released) return;\n    await releaseRecord(repository, path, id);\n    released = true;\n  };\n  return {\n    id,\n    repository,\n    reserveBytes: options.reserveBytes,\n    release,\n    [Symbol.asyncDispose]: release,\n  };\n}\n"]}

package/dist/infrastructure/storage-reservations.types.d.ts

@@ -0,0 +1,21 @@
+export interface StorageReservationOptions {
+    readonly maxBytes: number;
+    readonly reserveBytes: number;
+    readonly maxEntries?: number;
+    readonly signal?: AbortSignal;
+}
+export interface StorageReservation {
+    readonly id: string;
+    readonly repository: string;
+    readonly reserveBytes: number;
+    release(): Promise<void>;
+    [Symbol.asyncDispose](): Promise<void>;
+}
+export interface StorageReservationRecord {
+    readonly version: 1;
+    readonly id: string;
+    readonly pid: number;
+    readonly identity?: unknown;
+    readonly reserveBytes: number;
+    readonly createdAt: string;
+}

package/dist/infrastructure/storage-reservations.types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=storage-reservations.types.js.map

package/dist/infrastructure/storage-reservations.types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"storage-reservations.types.js","sourceRoot":"","sources":["../../src/infrastructure/storage-reservations.types.ts"],"names":[],"mappings":"","sourcesContent":["export interface StorageReservationOptions {\n  readonly maxBytes: number;\n  readonly reserveBytes: number;\n  readonly maxEntries?: number;\n  readonly signal?: AbortSignal;\n}\n\nexport interface StorageReservation {\n  readonly id: string;\n  readonly repository: string;\n  readonly reserveBytes: number;\n  release(): Promise<void>;\n  [Symbol.asyncDispose](): Promise<void>;\n}\n\nexport interface StorageReservationRecord {\n  readonly version: 1;\n  readonly id: string;\n  readonly pid: number;\n  readonly identity?: unknown;\n  readonly reserveBytes: number;\n  readonly createdAt: string;\n}\n"]}

package/dist/infrastructure/task-queue-http.constants.d.ts

@@ -0,0 +1,2 @@
+export declare const queueHttpTimeoutMs = 10000;
+export declare const queueHttpMaxHeaderBytes = 8192;

package/dist/infrastructure/task-queue-http.constants.js

@@ -0,0 +1,3 @@
+export const queueHttpTimeoutMs = 10_000;
+export const queueHttpMaxHeaderBytes = 8192;
+//# sourceMappingURL=task-queue-http.constants.js.map

package/dist/infrastructure/task-queue-http.constants.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"task-queue-http.constants.js","sourceRoot":"","sources":["../../src/infrastructure/task-queue-http.constants.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,kBAAkB,GAAG,MAAM,CAAC;AACzC,MAAM,CAAC,MAAM,uBAAuB,GAAG,IAAI,CAAC","sourcesContent":["export const queueHttpTimeoutMs = 10_000;\nexport const queueHttpMaxHeaderBytes = 8192;\n"]}

package/dist/infrastructure/task-queue-http.d.ts

@@ -0,0 +1,4 @@
+import type { TaskQueue } from "../domain/task-queue.types.ts";
+import type { QueueClientOptions, QueueServer, QueueServerOptions } from "./task-queue-http.types.ts";
+export declare function serveTaskQueue(options: QueueServerOptions): Promise<QueueServer>;
+export declare function httpTaskQueue(options: QueueClientOptions): TaskQueue;