@elie-laloum/outpost 4.0.0 → 4.2.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/CHANGELOG.md +25 -0
- package/README.md +10 -6
- package/SECURITY.md +2 -0
- package/dist/adapters/agents/codex-adapter.js +2 -0
- package/dist/adapters/agents/codex-adapter.js.map +1 -1
- package/dist/adapters/agents/codex-provider.d.ts +2 -0
- package/dist/adapters/agents/codex-provider.js +32 -0
- package/dist/adapters/agents/codex-provider.js.map +1 -0
- package/dist/adapters/agents/codex-request.js +2 -1
- package/dist/adapters/agents/codex-request.js.map +1 -1
- package/dist/adapters/agents/gemini-request.js +2 -0
- package/dist/adapters/agents/gemini-request.js.map +1 -1
- package/dist/adapters/agents/settings.types.d.ts +5 -0
- package/dist/adapters/agents/settings.types.js.map +1 -1
- package/dist/adapters/models/openai-compatible.constants.d.ts +4 -0
- package/dist/adapters/models/openai-compatible.constants.js +10 -0
- package/dist/adapters/models/openai-compatible.constants.js.map +1 -0
- package/dist/adapters/models/openai-compatible.d.ts +3 -0
- package/dist/adapters/models/openai-compatible.js +78 -0
- package/dist/adapters/models/openai-compatible.js.map +1 -0
- package/dist/adapters/models/openai-compatible.types.d.ts +14 -0
- package/dist/adapters/models/openai-compatible.types.js +2 -0
- package/dist/adapters/models/openai-compatible.types.js.map +1 -0
- package/dist/adapters/models/openai-http.d.ts +1 -0
- package/dist/adapters/models/openai-http.js +30 -0
- package/dist/adapters/models/openai-http.js.map +1 -0
- package/dist/adapters/models/openai-request.d.ts +4 -0
- package/dist/adapters/models/openai-request.js +46 -0
- package/dist/adapters/models/openai-request.js.map +1 -0
- package/dist/adapters/models/openai-response.d.ts +3 -0
- package/dist/adapters/models/openai-response.js +65 -0
- package/dist/adapters/models/openai-response.js.map +1 -0
- package/dist/application/execution.types.d.ts +2 -0
- package/dist/application/execution.types.js.map +1 -1
- package/dist/application/outpost.types.d.ts +5 -0
- package/dist/application/outpost.types.js.map +1 -1
- package/dist/application/recovery-archive.d.ts +4 -0
- package/dist/application/recovery-archive.js +29 -0
- package/dist/application/recovery-archive.js.map +1 -0
- package/dist/application/recovery-archive.types.d.ts +10 -0
- package/dist/application/recovery-archive.types.js +2 -0
- package/dist/application/recovery-archive.types.js.map +1 -0
- package/dist/application/recovery-inspection.js +3 -0
- package/dist/application/recovery-inspection.js.map +1 -1
- package/dist/application/recovery-inspection.types.d.ts +2 -0
- package/dist/application/recovery-inspection.types.js.map +1 -1
- package/dist/application/recovery-retention.d.ts +2 -1
- package/dist/application/recovery-retention.js +9 -1
- package/dist/application/recovery-retention.js.map +1 -1
- package/dist/application/recovery-retention.types.d.ts +6 -0
- package/dist/application/recovery-retention.types.js.map +1 -1
- package/dist/application/remote-backup.js +8 -0
- package/dist/application/remote-backup.js.map +1 -1
- package/dist/application/remote-workspace.types.d.ts +2 -0
- package/dist/application/remote-workspace.types.js.map +1 -1
- package/dist/application/sandbox-agents.js +2 -1
- package/dist/application/sandbox-agents.js.map +1 -1
- package/dist/application/sandbox-dispatch.js +9 -0
- package/dist/application/sandbox-dispatch.js.map +1 -1
- package/dist/application/sandbox-provision.js +6 -0
- package/dist/application/sandbox-provision.js.map +1 -1
- package/dist/application/storage-reservation.js +3 -0
- package/dist/application/storage-reservation.js.map +1 -1
- package/dist/application/transport-inspection.constants.d.ts +2 -0
- package/dist/application/transport-inspection.constants.js +10 -0
- package/dist/application/transport-inspection.constants.js.map +1 -0
- package/dist/application/transport-inspection.d.ts +2 -0
- package/dist/application/transport-inspection.js +103 -0
- package/dist/application/transport-inspection.js.map +1 -0
- package/dist/application/transport-retention.d.ts +4 -0
- package/dist/application/transport-retention.js +153 -0
- package/dist/application/transport-retention.js.map +1 -0
- package/dist/cli/commands.js +55 -18
- package/dist/cli/commands.js.map +1 -1
- package/dist/cli/init-authentication.constants.d.ts +13 -0
- package/dist/cli/init-authentication.constants.js +10 -0
- package/dist/cli/init-authentication.constants.js.map +1 -0
- package/dist/cli/init-authentication.d.ts +4 -0
- package/dist/cli/init-authentication.js +43 -0
- package/dist/cli/init-authentication.js.map +1 -0
- package/dist/cli/init-command.js +74 -15
- package/dist/cli/init-command.js.map +1 -1
- package/dist/cli/main.constants.d.ts +102 -2
- package/dist/cli/main.constants.js +148 -46
- package/dist/cli/main.constants.js.map +1 -1
- package/dist/cli/scaffold-files.js +4 -3
- package/dist/cli/scaffold-files.js.map +1 -1
- package/dist/cli/scaffold-validation.js +19 -0
- package/dist/cli/scaffold-validation.js.map +1 -1
- package/dist/cli/scaffold.constants.d.ts +0 -5
- package/dist/cli/scaffold.constants.js +0 -5
- package/dist/cli/scaffold.constants.js.map +1 -1
- package/dist/cli/scaffold.js +13 -0
- package/dist/cli/scaffold.js.map +1 -1
- package/dist/cli/scaffold.types.d.ts +3 -0
- package/dist/cli/scaffold.types.js.map +1 -1
- package/dist/cli/starters.js +9 -2
- package/dist/cli/starters.js.map +1 -1
- package/dist/domain/conversation.types.d.ts +2 -0
- package/dist/domain/conversation.types.js.map +1 -1
- package/dist/domain/model.types.d.ts +15 -0
- package/dist/domain/model.types.js +2 -0
- package/dist/domain/model.types.js.map +1 -0
- package/dist/domain/transport.constants.d.ts +2 -0
- package/dist/domain/transport.constants.js +3 -0
- package/dist/domain/transport.constants.js.map +1 -0
- package/dist/domain/transport.d.ts +6 -0
- package/dist/domain/transport.js +21 -0
- package/dist/domain/transport.js.map +1 -0
- package/dist/domain/transport.types.d.ts +31 -0
- package/dist/domain/transport.types.js +2 -0
- package/dist/domain/transport.types.js.map +1 -0
- package/dist/index.d.ts +18 -1
- package/dist/index.js +8 -0
- package/dist/index.js.map +1 -1
- package/dist/infrastructure/artifact-store.js +10 -0
- package/dist/infrastructure/artifact-store.js.map +1 -1
- package/dist/infrastructure/artifact-store.types.d.ts +3 -1
- package/dist/infrastructure/artifact-store.types.js.map +1 -1
- package/dist/infrastructure/conversations/capture.js +1 -1
- package/dist/infrastructure/conversations/capture.js.map +1 -1
- package/dist/infrastructure/conversations.d.ts +2 -0
- package/dist/infrastructure/conversations.js +2 -0
- package/dist/infrastructure/conversations.js.map +1 -1
- package/dist/infrastructure/inspection-file.js +3 -3
- package/dist/infrastructure/inspection-file.js.map +1 -1
- package/dist/infrastructure/inspection-hash.js +4 -3
- package/dist/infrastructure/inspection-hash.js.map +1 -1
- package/dist/infrastructure/inspection-path.d.ts +1 -0
- package/dist/infrastructure/inspection-path.js +18 -0
- package/dist/infrastructure/inspection-path.js.map +1 -0
- package/dist/infrastructure/journal.js +6 -0
- package/dist/infrastructure/journal.js.map +1 -1
- package/dist/infrastructure/journal.types.d.ts +3 -0
- package/dist/infrastructure/journal.types.js.map +1 -1
- package/dist/infrastructure/local-transport.d.ts +3 -0
- package/dist/infrastructure/local-transport.js +146 -0
- package/dist/infrastructure/local-transport.js.map +1 -0
- package/dist/infrastructure/local-transport.types.d.ts +3 -0
- package/dist/infrastructure/local-transport.types.js +2 -0
- package/dist/infrastructure/local-transport.types.js.map +1 -0
- package/dist/infrastructure/resource-activity-inspection.d.ts +2 -1
- package/dist/infrastructure/resource-activity-inspection.js +2 -2
- package/dist/infrastructure/resource-activity-inspection.js.map +1 -1
- package/dist/infrastructure/resource-activity.js +42 -14
- package/dist/infrastructure/resource-activity.js.map +1 -1
- package/dist/infrastructure/resource-activity.types.d.ts +2 -0
- package/dist/infrastructure/resource-activity.types.js.map +1 -1
- package/dist/infrastructure/s3-transport.d.ts +4 -0
- package/dist/infrastructure/s3-transport.js +144 -0
- package/dist/infrastructure/s3-transport.js.map +1 -0
- package/dist/infrastructure/s3-transport.types.d.ts +6 -0
- package/dist/infrastructure/s3-transport.types.js +2 -0
- package/dist/infrastructure/s3-transport.types.js.map +1 -0
- package/dist/infrastructure/storage-inventory.types.d.ts +2 -1
- package/dist/infrastructure/storage-inventory.types.js.map +1 -1
- package/dist/infrastructure/storage-reservations.types.d.ts +2 -0
- package/dist/infrastructure/storage-reservations.types.js.map +1 -1
- package/dist/infrastructure/task-queue-bullmq-resources.d.ts +13 -0
- package/dist/infrastructure/task-queue-bullmq-resources.js +118 -0
- package/dist/infrastructure/task-queue-bullmq-resources.js.map +1 -0
- package/dist/infrastructure/task-queue-bullmq-state.d.ts +5 -0
- package/dist/infrastructure/task-queue-bullmq-state.js +26 -0
- package/dist/infrastructure/task-queue-bullmq-state.js.map +1 -0
- package/dist/infrastructure/task-queue-bullmq.constants.d.ts +7 -0
- package/dist/infrastructure/task-queue-bullmq.constants.js +79 -0
- package/dist/infrastructure/task-queue-bullmq.constants.js.map +1 -0
- package/dist/infrastructure/task-queue-bullmq.d.ts +3 -0
- package/dist/infrastructure/task-queue-bullmq.js +124 -0
- package/dist/infrastructure/task-queue-bullmq.js.map +1 -0
- package/dist/infrastructure/task-queue-bullmq.types.d.ts +17 -0
- package/dist/infrastructure/task-queue-bullmq.types.js +2 -0
- package/dist/infrastructure/task-queue-bullmq.types.js.map +1 -0
- package/dist/infrastructure/transport-archive.constants.d.ts +6 -0
- package/dist/infrastructure/transport-archive.constants.js +7 -0
- package/dist/infrastructure/transport-archive.constants.js.map +1 -0
- package/dist/infrastructure/transport-archive.d.ts +5 -0
- package/dist/infrastructure/transport-archive.js +157 -0
- package/dist/infrastructure/transport-archive.js.map +1 -0
- package/dist/infrastructure/transport-archive.types.d.ts +17 -0
- package/dist/infrastructure/transport-archive.types.js +2 -0
- package/dist/infrastructure/transport-archive.types.js.map +1 -0
- package/dist/infrastructure/transport-artifact-store.d.ts +3 -0
- package/dist/infrastructure/transport-artifact-store.js +31 -0
- package/dist/infrastructure/transport-artifact-store.js.map +1 -0
- package/dist/infrastructure/transport-artifact-store.types.d.ts +4 -0
- package/dist/infrastructure/transport-artifact-store.types.js +2 -0
- package/dist/infrastructure/transport-artifact-store.types.js.map +1 -0
- package/dist/infrastructure/transport-checkpoint.d.ts +5 -0
- package/dist/infrastructure/transport-checkpoint.js +105 -0
- package/dist/infrastructure/transport-checkpoint.js.map +1 -0
- package/dist/infrastructure/transport-checkpoint.types.d.ts +9 -0
- package/dist/infrastructure/transport-checkpoint.types.js +2 -0
- package/dist/infrastructure/transport-checkpoint.types.js.map +1 -0
- package/dist/infrastructure/transport-conversations.d.ts +4 -0
- package/dist/infrastructure/transport-conversations.js +69 -0
- package/dist/infrastructure/transport-conversations.js.map +1 -0
- package/dist/infrastructure/transport-conversations.types.d.ts +4 -0
- package/dist/infrastructure/transport-conversations.types.js +2 -0
- package/dist/infrastructure/transport-conversations.types.js.map +1 -0
- package/dist/infrastructure/transport-envelope.d.ts +7 -0
- package/dist/infrastructure/transport-envelope.js +47 -0
- package/dist/infrastructure/transport-envelope.js.map +1 -0
- package/dist/infrastructure/transport-journal.d.ts +6 -0
- package/dist/infrastructure/transport-journal.js +93 -0
- package/dist/infrastructure/transport-journal.js.map +1 -0
- package/dist/infrastructure/transport-journal.types.d.ts +10 -0
- package/dist/infrastructure/transport-journal.types.js +2 -0
- package/dist/infrastructure/transport-journal.types.js.map +1 -0
- package/dist/infrastructure/transport-json.d.ts +6 -0
- package/dist/infrastructure/transport-json.js +46 -0
- package/dist/infrastructure/transport-json.js.map +1 -0
- package/dist/infrastructure/transport-reservations.d.ts +5 -0
- package/dist/infrastructure/transport-reservations.js +89 -0
- package/dist/infrastructure/transport-reservations.js.map +1 -0
- package/dist/infrastructure/transport-reservations.types.d.ts +4 -0
- package/dist/infrastructure/transport-reservations.types.js +2 -0
- package/dist/infrastructure/transport-reservations.types.js.map +1 -0
- package/dist/infrastructure/transport.constants.d.ts +8 -0
- package/dist/infrastructure/transport.constants.js +9 -0
- package/dist/infrastructure/transport.constants.js.map +1 -0
- package/dist/infrastructure/workflow-checkpoint.js +7 -0
- package/dist/infrastructure/workflow-checkpoint.js.map +1 -1
- package/dist/infrastructure/workflow-checkpoint.types.d.ts +3 -1
- package/dist/infrastructure/workflow-checkpoint.types.js.map +1 -1
- package/dist/providers/agents.d.ts +1 -1
- package/dist/providers/agents.js.map +1 -1
- package/dist/providers/daytona-command.constants.d.ts +2 -0
- package/dist/providers/daytona-command.constants.js +13 -0
- package/dist/providers/daytona-command.constants.js.map +1 -0
- package/dist/providers/daytona-command.js +9 -3
- package/dist/providers/daytona-command.js.map +1 -1
- package/dist/providers/daytona-output.d.ts +4 -0
- package/dist/providers/daytona-output.js +37 -0
- package/dist/providers/daytona-output.js.map +1 -0
- package/dist/providers/daytona-terminal.js +3 -1
- package/dist/providers/daytona-terminal.js.map +1 -1
- package/dist/providers/vercel-command.js +2 -2
- package/dist/providers/vercel-command.js.map +1 -1
- package/package.json +31 -6
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"sandbox-provision.js","sourceRoot":"","sources":["../../src/application/sandbox-provision.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAC;AACzC,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,WAAW,CAAC;AAExC,OAAO,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAEhD,OAAO,EAAE,GAAG,EAAE,MAAM,kCAAkC,CAAC;AACvD,OAAO,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AAC9D,OAAO,EAAE,gBAAgB,EAAE,MAAM,+BAA+B,CAAC;AACjE,OAAO,EAAE,wBAAwB,EAAE,MAAM,wCAAwC,CAAC;AAElF,OAAO,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAC5D,OAAO,EAAE,gBAAgB,EAAE,MAAM,+BAA+B,CAAC;AACjE,OAAO,EAAE,MAAM,EAAE,MAAM,wBAAwB,CAAC;AAChD,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACtD,OAAO,EAAE,KAAK,EAAE,MAAM,sBAAsB,CAAC;AAE7C,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AAGnD,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACvD,OAAO,EAAE,UAAU,EAAE,MAAM,yBAAyB,CAAC;AACrD,OAAO,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAE/C,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,OAAuB;IAEvB,OAAO,CAAC,MAAM,EAAE,cAAc,EAAE,CAAC;IACjC,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,MAAM,EAAE,CAAC;IAC9C,IAAI,QAAQ,CAAC,SAAS,KAAK,QAAQ,IAAI,CAAC,OAAO,CAAC,SAAS,IAAI,CAAC,OAAO,CAAC,MAAM;QAC1E,OAAO,GAAG,EAAE,GAAG,OAAO,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,EAAE,CAAC;IAC1D,SAAS,CACP,CAAC,OAAO,CAAC,SAAS;QAChB,CAAC,CAAC,OAAO,CAAC,UAAU;YAClB,CAAC,OAAO,CAAC,MAAM;YACf,CAAC,OAAO,CAAC,MAAM;YACf,CAAC,OAAO,CAAC,YAAY,CAAC,EAC1B,mFAAmF,CACpF,CAAC;IACF,MAAM,KAAK,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC;IACjC,SAAS,CACP,QAAQ,CAAC,SAAS,KAAK,QAAQ;QAC7B,CAAC,CAAC,OAAO,CAAC,SAAS,EAAE,MAAM,IAAI,OAAO,CAAC,MAAM,CAAC,EAAE,IAAI,KAAK,SAAS;YAChE,CAAC,OAAO,CAAC,SAAS,IAAI,OAAO,CAAC,MAAM,CAAC,CAAC,EAC1C,2DAA2D,CAC5D,CAAC;IACF,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,CAAC,MAAM,aAAa,CAAC,OAAO,CAAC,CAAC,CAAC;IACtE,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IACxC,SAAS,CACP,KAAK,IAAI,CAAC,KAAK,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,EACvC,6DAA6D,CAC9D,CAAC;IACF,KAAK,CAAC,MAAM,GAAG,IAAI,CAAC;IACpB,MAAM,SAAS,GAAG,OAAO,CAAC,KAAK,IAAI,KAAK,CAAC,KAAK,CAAC;IAC/C,MAAM,IAAI,GAAG,IAAI,eAAe,EAAE,CAAC;IACnC,MAAM,WAAW,GAAG,OAAO,CAAC,MAAM;QAChC,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;QAChD,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC;IAChB,IAAI,KAA+B,EAAE,IAA4B,CAAC;IAClE,IAAI,QAAsC,CAAC;IAC3C,IAAI,kBAAkB,GAAG,KAAK,CAAC;IAC/B,MAAM,QAAQ,GAAG,IAAI,GAAG,EAA8B,CAAC;IACvD,MAAM,OAAO,GAAG,IAAI,CAClB,SAAS,CAAC,UAAU,EACpB,UAAU,EACV,UAAU,EACV,eAAe,CAChB,CAAC;IACF,IAAI,CAAC;QACH,QAAQ,GAAG,MAAM,wBAAwB,CAAC;YACxC,UAAU,EAAE,SAAS,CAAC,UAAU;YAChC,SAAS,EAAE,SAAS,CAAC,SAAS;YAC9B,QAAQ,EAAE,QAAQ,CAAC,IAAI;YACvB,SAAS,EAAE,QAAQ,CAAC,SAAS;SAC9B,CAAC,CAAC;QACH,MAAM,UAAU,GAAG,MAAM,gBAAgB,CACvC,SAAS,CAAC,UAAU,EACpB,EAAE,EACF,QAAQ,CAAC,SAAS,CACnB,CAAC;QACF,MAAM,IAAI,GAAG,CACX,MAAM,GAAG,CAAC,SAAS,CAAC,UAAU,EAAE,CAAC,QAAQ,EAAE,OAAO,EAAE,WAAW,CAAC,CAAC,CAAC,KAAK,CACrE,GAAG,EAAE,CAAC,SAAS,CAChB,CACF,CAAC,IAAI,EAAE,CAAC;QACT,MAAM,KAAK,GAAG,CACZ,MAAM,GAAG,CAAC,SAAS,CAAC,UAAU,EAAE,CAAC,QAAQ,EAAE,OAAO,EAAE,YAAY,CAAC,CAAC,CAAC,KAAK,CACtE,GAAG,EAAE,CAAC,mBAAmB,CAC1B,CACF,CAAC,IAAI,EAAE,CAAC;QACT,MAAM,SAAS,GAAG;YAChB,eAAe,EAAE,IAAI;YACrB,kBAAkB,EAAE,IAAI;YACxB,gBAAgB,EAAE,KAAK;YACvB,mBAAmB,EAAE,KAAK;YAC1B,GAAG,UAAU;SACd,CAAC;QACF,kBAAkB,GAAG,IAAI,CAAC;QAC1B,KAAK,GAAG,gBAAgB,CACtB,mBAAmB,CACjB,MAAM,QAAQ,CAAC,OAAO,CAAC;YACrB,UAAU,EAAE,SAAS,CAAC,UAAU;YAChC,SAAS,EAAE,SAAS,CAAC,SAAS;YAC9B,cAAc,EAAE,SAAS,CAAC,cAAc;YACxC,SAAS;YACT,MAAM,EAAE,WAAW;SACpB,CAAC,EACF,QAAQ,CACT,EACD;YACE,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,MAAM;gBACxB,CAAC,CAAC,EAAE,UAAU,EAAE,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE;gBACvC,CAAC,CAAC,EAAE,CAAC;SACR,CACF,CAAC;QACF,IAAI,QAAQ,CAAC,SAAS,KAAK,QAAQ,EAAE,CAAC;YACpC,IAAI,GAAG,MAAM,UAAU,CAAC,SAAS,EAAE,KAAK,EAAE;gBACxC,GAAG,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAC,CAAC,EAAE,kBAAkB,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACnE,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACrD,MAAM,EAAE,WAAW;aACpB,CAAC,CAAC;YACH,MAAM,WAAW,GAAa,EAAE,CAAC;YACjC,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,MAAM,IAAI,EAAE,EAAE,CAAC;gBACxC,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC,CAAC,KAAK,CAC7D,CAAC,KAAK,EAAE,EAAE;oBACR,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;wBACpD,OAAO,SAAS,CAAC;oBACnB,MAAM,KAAK,CAAC;gBACd,CAAC,CACF,CAAC;gBACF,IAAI,CAAC,IAAI;oBAAE,SAAS;gBACpB,IAAI,IAAI,CAAC,MAAM,EAAE,IAAI,IAAI,CAAC,cAAc,EAAE,EAAE,CAAC;oBAC3C,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC;oBAC7C,SAAS;gBACX,CAAC;gBACD,MAAM,KAAK,CAAC,MAAM,CAChB,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE,IAAI,CAAC,EAC/B,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,EAClD,EAAE,MAAM,EAAE,WAAW,EAAE,CACxB,CAAC;YACJ,CAAC;YACD,MAAM,WAAW,CAAC,KAAK,EAAE,SAAS,CAAC,SAAS,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,WAAW,CAAC,CAAC,EAAE;gBACvE,MAAM,EAAE,WAAW;aACpB,CAAC,CAAC;YACH,IAAI,OAAO,CAAC,SAAS,KAAK,KAAK,IAAI,OAAO,CAAC,KAAK;gBAC9C,QAAQ,CAAC,GAAG,CACV,OAAO,CAAC,KAAK,EACb,MAAM,cAAc,CAAC,OAAO,CAAC,KAAK,EAAE,KAAK,EAAE,WAAW,CAAC,CACxD,CAAC;QACN,CAAC;QACD,MAAM,WAAW,GAAG,MAAM,OAAO,CAAC,UAAU,CAC1C;YACE,KAAK,CACH,SAAS,EAAE,SAAS,IAAI,EAAE,EAC1B,SAAS,CAAC,SAAS,EACnB,cAAc,EACd,WAAW,CACZ;YACD,KAAK,CACH,SAAS,EAAE,YAAY,IAAI,EAAE,EAC7B,KAAK,CAAC,IAAI,EACV,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,EACxB,WAAW,EACX,IAAI,CACL;SACF,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAChB,OAAO,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;YACtB,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YAClB,MAAM,KAAK,CAAC;QACd,CAAC,CAAC,CACH,CACF,CAAC;QACF,MAAM,OAAO,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,KAAK,UAAU,CAAC,CAAC;QACvE,IAAI,OAAO,EAAE,MAAM,KAAK,UAAU;YAAE,MAAM,OAAO,CAAC,MAAM,CAAC;QACzD,MAAM,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAChC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,cAAc,CAAC,SAAS,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;QAChD,MAAM,mBAAmB,GAAG,kBAAkB,IAAI,CAAC,KAAK,CAAC;QACzD,IAAI,aAAa,GAAG,mBAAmB,CAAC;QACxC,MAAM,QAAQ,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE;YAC1C,aAAa,GAAG,IAAI,CAAC;QACvB,CAAC,CAAC,CAAC;QACH,MAAM,KAAK,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE;YAChC,aAAa,GAAG,IAAI,CAAC;QACvB,CAAC,CAAC,CAAC;QACH,IAAI,QAAQ,IAAI,CAAC,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;YAAE,aAAa,GAAG,IAAI,CAAC;QAC/D,KAAK,CAAC,MAAM,GAAG,KAAK,CAAC;QACrB,IAAI,KAAK;YACP,MAAM,SAAS,CAAC,KAAK,CAAC,EAAE,QAAQ,EAAE,aAAa,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE;gBAC5D,aAAa,GAAG,IAAI,CAAC;YACvB,CAAC,CAAC,CAAC;QACL,IAAI,aAAa;YACf,MAAM,QAAQ;gBACZ,EAAE,KAAK,CAAC,mBAAmB,CAAC,CAAC,CAAC,sBAAsB,CAAC,CAAC,CAAC,gBAAgB,CAAC;iBACvE,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAC5B,IAAI,CAAC,aAAa;YAAE,MAAM,QAAQ,EAAE,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QACpE,MAAM,KAAK,CAAC;IACd,CAAC;IAED,OAAO;QACL,OAAO;QACP,QAAQ;QACR,SAAS;QACT,KAAK;QACL,KAAK;QACL,IAAI;QACJ,OAAO,EAAE,KAAK;QACd,QAAQ;QACR,IAAI;QACJ,QAAQ;QACR,OAAO;KACR,CAAC;AACJ,CAAC","sourcesContent":["import { lstat } from \"node:fs/promises\";\nimport { join, posix } from \"node:path\";\nimport type { AgentAdapter } from \"../domain/agent.types.ts\";\nimport { invariant } from \"../domain/errors.ts\";\nimport type { SandboxLease } from \"../domain/sandbox.types.ts\";\nimport { git } from \"../infrastructure/git/command.ts\";\nimport { executeProcess } from \"../infrastructure/process.ts\";\nimport { resolveVariables } from \"../infrastructure/settings.ts\";\nimport { registerResourceActivity } from \"../infrastructure/resource-activity.ts\";\nimport type { ResourceActivity } from \"../infrastructure/resource-activity.types.ts\";\nimport { trackedSandboxLease } from \"./sandbox-activity.ts\";\nimport { boundedTransfers } from \"../infrastructure/transfer.ts\";\nimport { docker } from \"../providers/docker.ts\";\nimport { prepareAdapter } from \"./agent-bootstrap.ts\";\nimport { hooks } from \"./lifecycle-hooks.ts\";\nimport type { SandboxOptions } from \"./outpost.types.ts\";\nimport { uploadFiles } from \"./remote-upload.ts\";\nimport { seedRemote } from \"./remote-workspace.ts\";\nimport type { RemoteSync } from \"./remote-workspace.types.ts\";\nimport type { ProvisionedSandbox } from \"./sandbox-session.types.ts\";\nimport { startupFailure } from \"./startup-recovery.ts\";\nimport { workspaces } from \"./workspace-registry.ts\";\nimport { openWorkspace } from \"./workspace.ts\";\n\nexport async function provisionSandbox(\n options: SandboxOptions,\n): Promise<ProvisionedSandbox> {\n options.signal?.throwIfAborted();\n const provider = options.provider ?? docker();\n if (provider.placement === \"remote\" && !options.workspace && !options.branch)\n options = { ...options, branch: { mode: \"integrate\" } };\n invariant(\n !options.workspace ||\n (!options.repository &&\n !options.branch &&\n !options.copies &&\n !options.storageQuota),\n \"A supplied workspace owns its repository, branch, copied inputs and storage quota\",\n );\n const owned = !options.workspace;\n invariant(\n provider.placement !== \"remote\" ||\n ((options.workspace?.policy ?? options.branch)?.mode !== \"current\" &&\n (options.workspace || options.branch)),\n \"Remote providers require a named or integration workspace\",\n );\n const workspace = options.workspace ?? (await openWorkspace(options));\n const state = workspaces.get(workspace);\n invariant(\n state && !state.closed && !state.active,\n \"Workspace must be open and cannot belong to another sandbox\",\n );\n state.active = true;\n const lifecycle = options.hooks ?? state.hooks;\n const stop = new AbortController();\n const setupSignal = options.signal\n ? AbortSignal.any([options.signal, stop.signal])\n : stop.signal;\n let lease: SandboxLease | undefined, sync: RemoteSync | undefined;\n let activity: ResourceActivity | undefined;\n let acquisitionStarted = false;\n const prepared = new Map<AgentAdapter, AgentAdapter>();\n const staging = join(\n workspace.repository,\n \".outpost\",\n \"recovery\",\n \"conversations\",\n );\n try {\n activity = await registerResourceActivity({\n repository: workspace.repository,\n workspace: workspace.directory,\n provider: provider.name,\n placement: provider.placement,\n });\n const configured = await resolveVariables(\n workspace.repository,\n {},\n provider.variables,\n );\n const name = (\n await git(workspace.repository, [\"config\", \"--get\", \"user.name\"]).catch(\n () => \"Outpost\",\n )\n ).trim();\n const email = (\n await git(workspace.repository, [\"config\", \"--get\", \"user.email\"]).catch(\n () => \"outpost@localhost\",\n )\n ).trim();\n const variables = {\n GIT_AUTHOR_NAME: name,\n GIT_COMMITTER_NAME: name,\n GIT_AUTHOR_EMAIL: email,\n GIT_COMMITTER_EMAIL: email,\n ...configured,\n };\n acquisitionStarted = true;\n lease = boundedTransfers(\n trackedSandboxLease(\n await provider.acquire({\n repository: workspace.repository,\n directory: workspace.directory,\n gitDirectories: workspace.gitDirectories,\n variables,\n signal: setupSignal,\n }),\n activity,\n ),\n {\n ...(options.limits?.copyMs\n ? { deadlineMs: options.limits.copyMs }\n : {}),\n },\n );\n if (provider.placement === \"remote\") {\n sync = await seedRemote(workspace, lease, {\n ...(options.includeUncommitted ? { includeUncommitted: true } : {}),\n ...(options.limits ? { limits: options.limits } : {}),\n signal: setupSignal,\n });\n const copiedFiles: string[] = [];\n for (const path of options.copies ?? []) {\n const info = await lstat(join(workspace.directory, path)).catch(\n (error) => {\n if ((error as NodeJS.ErrnoException).code === \"ENOENT\")\n return undefined;\n throw error;\n },\n );\n if (!info) continue;\n if (info.isFile() || info.isSymbolicLink()) {\n copiedFiles.push(path.replaceAll(\"\\\\\", \"/\"));\n continue;\n }\n await lease.upload(\n join(workspace.directory, path),\n posix.join(lease.root, path.replaceAll(\"\\\\\", \"/\")),\n { signal: setupSignal },\n );\n }\n await uploadFiles(lease, workspace.directory, [...new Set(copiedFiles)], {\n signal: setupSignal,\n });\n if (options.bootstrap !== false && options.agent)\n prepared.set(\n options.agent,\n await prepareAdapter(options.agent, lease, setupSignal),\n );\n }\n const initialized = await Promise.allSettled(\n [\n hooks(\n lifecycle?.hostReady ?? [],\n workspace.directory,\n executeProcess,\n setupSignal,\n ),\n hooks(\n lifecycle?.sandboxReady ?? [],\n lease.root,\n lease.invoke.bind(lease),\n setupSignal,\n true,\n ),\n ].map((pending) =>\n pending.catch((cause) => {\n stop.abort(cause);\n throw cause;\n }),\n ),\n );\n const failure = initialized.find((item) => item.status === \"rejected\");\n if (failure?.status === \"rejected\") throw failure.reason;\n await activity.phase(\"ready\");\n } catch (cause) {\n await startupFailure(workspace, cause, options);\n const allocationUncertain = acquisitionStarted && !lease;\n let cleanupFailed = allocationUncertain;\n await activity?.phase(\"closing\").catch(() => {\n cleanupFailed = true;\n });\n await lease?.release().catch(() => {\n cleanupFailed = true;\n });\n if (activity && !(await activity.idle())) cleanupFailed = true;\n state.active = false;\n if (owned)\n await workspace.close({ preserve: cleanupFailed }).catch(() => {\n cleanupFailed = true;\n });\n if (cleanupFailed)\n await activity\n ?.phase(allocationUncertain ? \"allocation-uncertain\" : \"cleanup-failed\")\n .catch(() => undefined);\n if (!cleanupFailed) await activity?.remove().catch(() => undefined);\n throw cause;\n }\n\n return {\n options,\n provider,\n workspace,\n state,\n owned,\n stop,\n runtime: lease,\n activity,\n sync,\n prepared,\n staging,\n };\n}\n"]}
|
|
1
|
+
{"version":3,"file":"sandbox-provision.js","sourceRoot":"","sources":["../../src/application/sandbox-provision.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAC;AACzC,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,WAAW,CAAC;AAExC,OAAO,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAEhD,OAAO,EAAE,GAAG,EAAE,MAAM,kCAAkC,CAAC;AACvD,OAAO,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AAC9D,OAAO,EAAE,gBAAgB,EAAE,MAAM,+BAA+B,CAAC;AACjE,OAAO,EAAE,wBAAwB,EAAE,MAAM,wCAAwC,CAAC;AAElF,OAAO,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAC5D,OAAO,EAAE,gBAAgB,EAAE,MAAM,+BAA+B,CAAC;AACjE,OAAO,EAAE,MAAM,EAAE,MAAM,wBAAwB,CAAC;AAChD,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACtD,OAAO,EAAE,KAAK,EAAE,MAAM,sBAAsB,CAAC;AAE7C,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AAGnD,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACvD,OAAO,EAAE,UAAU,EAAE,MAAM,yBAAyB,CAAC;AACrD,OAAO,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAE/C,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,OAAuB;IAEvB,OAAO,CAAC,MAAM,EAAE,cAAc,EAAE,CAAC;IACjC,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,MAAM,EAAE,CAAC;IAC9C,IAAI,QAAQ,CAAC,SAAS,KAAK,QAAQ,IAAI,CAAC,OAAO,CAAC,SAAS,IAAI,CAAC,OAAO,CAAC,MAAM;QAC1E,OAAO,GAAG,EAAE,GAAG,OAAO,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,EAAE,CAAC;IAC1D,SAAS,CACP,CAAC,OAAO,CAAC,SAAS;QAChB,CAAC,CAAC,OAAO,CAAC,UAAU;YAClB,CAAC,OAAO,CAAC,MAAM;YACf,CAAC,OAAO,CAAC,MAAM;YACf,CAAC,OAAO,CAAC,YAAY,CAAC,EAC1B,mFAAmF,CACpF,CAAC;IACF,MAAM,KAAK,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC;IACjC,SAAS,CACP,QAAQ,CAAC,SAAS,KAAK,QAAQ;QAC7B,CAAC,CAAC,OAAO,CAAC,SAAS,EAAE,MAAM,IAAI,OAAO,CAAC,MAAM,CAAC,EAAE,IAAI,KAAK,SAAS;YAChE,CAAC,OAAO,CAAC,SAAS,IAAI,OAAO,CAAC,MAAM,CAAC,CAAC,EAC1C,2DAA2D,CAC5D,CAAC;IACF,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,CAAC,MAAM,aAAa,CAAC,OAAO,CAAC,CAAC,CAAC;IACtE,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IACxC,SAAS,CACP,KAAK,IAAI,CAAC,KAAK,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,EACvC,6DAA6D,CAC9D,CAAC;IACF,KAAK,CAAC,MAAM,GAAG,IAAI,CAAC;IACpB,MAAM,SAAS,GAAG,OAAO,CAAC,KAAK,IAAI,KAAK,CAAC,KAAK,CAAC;IAC/C,MAAM,IAAI,GAAG,IAAI,eAAe,EAAE,CAAC;IACnC,MAAM,WAAW,GAAG,OAAO,CAAC,MAAM;QAChC,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;QAChD,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC;IAChB,IAAI,KAA+B,EAAE,IAA4B,CAAC;IAClE,IAAI,QAAsC,CAAC;IAC3C,IAAI,kBAAkB,GAAG,KAAK,CAAC;IAC/B,MAAM,QAAQ,GAAG,IAAI,GAAG,EAA8B,CAAC;IACvD,MAAM,OAAO,GAAG,IAAI,CAClB,SAAS,CAAC,UAAU,EACpB,UAAU,EACV,UAAU,EACV,eAAe,CAChB,CAAC;IACF,IAAI,CAAC;QACH,QAAQ,GAAG,MAAM,wBAAwB,CAAC;YACxC,UAAU,EAAE,SAAS,CAAC,UAAU;YAChC,GAAG,CAAC,OAAO,CAAC,iBAAiB;gBAC3B,CAAC,CAAC,EAAE,WAAW,EAAE,OAAO,CAAC,iBAAiB,EAAE;gBAC5C,CAAC,CAAC,EAAE,CAAC;YACP,SAAS,EAAE,SAAS,CAAC,SAAS;YAC9B,QAAQ,EAAE,QAAQ,CAAC,IAAI;YACvB,SAAS,EAAE,QAAQ,CAAC,SAAS;SAC9B,CAAC,CAAC;QACH,MAAM,UAAU,GAAG,MAAM,gBAAgB,CACvC,SAAS,CAAC,UAAU,EACpB,EAAE,EACF,QAAQ,CAAC,SAAS,CACnB,CAAC;QACF,MAAM,IAAI,GAAG,CACX,MAAM,GAAG,CAAC,SAAS,CAAC,UAAU,EAAE,CAAC,QAAQ,EAAE,OAAO,EAAE,WAAW,CAAC,CAAC,CAAC,KAAK,CACrE,GAAG,EAAE,CAAC,SAAS,CAChB,CACF,CAAC,IAAI,EAAE,CAAC;QACT,MAAM,KAAK,GAAG,CACZ,MAAM,GAAG,CAAC,SAAS,CAAC,UAAU,EAAE,CAAC,QAAQ,EAAE,OAAO,EAAE,YAAY,CAAC,CAAC,CAAC,KAAK,CACtE,GAAG,EAAE,CAAC,mBAAmB,CAC1B,CACF,CAAC,IAAI,EAAE,CAAC;QACT,MAAM,SAAS,GAAG;YAChB,eAAe,EAAE,IAAI;YACrB,kBAAkB,EAAE,IAAI;YACxB,gBAAgB,EAAE,KAAK;YACvB,mBAAmB,EAAE,KAAK;YAC1B,GAAG,UAAU;SACd,CAAC;QACF,kBAAkB,GAAG,IAAI,CAAC;QAC1B,KAAK,GAAG,gBAAgB,CACtB,mBAAmB,CACjB,MAAM,QAAQ,CAAC,OAAO,CAAC;YACrB,UAAU,EAAE,SAAS,CAAC,UAAU;YAChC,SAAS,EAAE,SAAS,CAAC,SAAS;YAC9B,cAAc,EAAE,SAAS,CAAC,cAAc;YACxC,SAAS;YACT,MAAM,EAAE,WAAW;SACpB,CAAC,EACF,QAAQ,CACT,EACD;YACE,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,MAAM;gBACxB,CAAC,CAAC,EAAE,UAAU,EAAE,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE;gBACvC,CAAC,CAAC,EAAE,CAAC;SACR,CACF,CAAC;QACF,IAAI,QAAQ,CAAC,SAAS,KAAK,QAAQ,EAAE,CAAC;YACpC,IAAI,GAAG,MAAM,UAAU,CAAC,SAAS,EAAE,KAAK,EAAE;gBACxC,GAAG,CAAC,OAAO,CAAC,iBAAiB;oBAC3B,CAAC,CAAC,EAAE,iBAAiB,EAAE,OAAO,CAAC,iBAAiB,EAAE;oBAClD,CAAC,CAAC,EAAE,CAAC;gBACP,GAAG,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAC,CAAC,EAAE,kBAAkB,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACnE,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACrD,MAAM,EAAE,WAAW;aACpB,CAAC,CAAC;YACH,MAAM,WAAW,GAAa,EAAE,CAAC;YACjC,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,MAAM,IAAI,EAAE,EAAE,CAAC;gBACxC,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC,CAAC,KAAK,CAC7D,CAAC,KAAK,EAAE,EAAE;oBACR,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;wBACpD,OAAO,SAAS,CAAC;oBACnB,MAAM,KAAK,CAAC;gBACd,CAAC,CACF,CAAC;gBACF,IAAI,CAAC,IAAI;oBAAE,SAAS;gBACpB,IAAI,IAAI,CAAC,MAAM,EAAE,IAAI,IAAI,CAAC,cAAc,EAAE,EAAE,CAAC;oBAC3C,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC;oBAC7C,SAAS;gBACX,CAAC;gBACD,MAAM,KAAK,CAAC,MAAM,CAChB,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE,IAAI,CAAC,EAC/B,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,EAClD,EAAE,MAAM,EAAE,WAAW,EAAE,CACxB,CAAC;YACJ,CAAC;YACD,MAAM,WAAW,CAAC,KAAK,EAAE,SAAS,CAAC,SAAS,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,WAAW,CAAC,CAAC,EAAE;gBACvE,MAAM,EAAE,WAAW;aACpB,CAAC,CAAC;YACH,IAAI,OAAO,CAAC,SAAS,KAAK,KAAK,IAAI,OAAO,CAAC,KAAK;gBAC9C,QAAQ,CAAC,GAAG,CACV,OAAO,CAAC,KAAK,EACb,MAAM,cAAc,CAAC,OAAO,CAAC,KAAK,EAAE,KAAK,EAAE,WAAW,CAAC,CACxD,CAAC;QACN,CAAC;QACD,MAAM,WAAW,GAAG,MAAM,OAAO,CAAC,UAAU,CAC1C;YACE,KAAK,CACH,SAAS,EAAE,SAAS,IAAI,EAAE,EAC1B,SAAS,CAAC,SAAS,EACnB,cAAc,EACd,WAAW,CACZ;YACD,KAAK,CACH,SAAS,EAAE,YAAY,IAAI,EAAE,EAC7B,KAAK,CAAC,IAAI,EACV,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,EACxB,WAAW,EACX,IAAI,CACL;SACF,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAChB,OAAO,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;YACtB,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YAClB,MAAM,KAAK,CAAC;QACd,CAAC,CAAC,CACH,CACF,CAAC;QACF,MAAM,OAAO,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,KAAK,UAAU,CAAC,CAAC;QACvE,IAAI,OAAO,EAAE,MAAM,KAAK,UAAU;YAAE,MAAM,OAAO,CAAC,MAAM,CAAC;QACzD,MAAM,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAChC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,cAAc,CAAC,SAAS,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;QAChD,MAAM,mBAAmB,GAAG,kBAAkB,IAAI,CAAC,KAAK,CAAC;QACzD,IAAI,aAAa,GAAG,mBAAmB,CAAC;QACxC,MAAM,QAAQ,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE;YAC1C,aAAa,GAAG,IAAI,CAAC;QACvB,CAAC,CAAC,CAAC;QACH,MAAM,KAAK,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE;YAChC,aAAa,GAAG,IAAI,CAAC;QACvB,CAAC,CAAC,CAAC;QACH,IAAI,QAAQ,IAAI,CAAC,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;YAAE,aAAa,GAAG,IAAI,CAAC;QAC/D,KAAK,CAAC,MAAM,GAAG,KAAK,CAAC;QACrB,IAAI,KAAK;YACP,MAAM,SAAS,CAAC,KAAK,CAAC,EAAE,QAAQ,EAAE,aAAa,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE;gBAC5D,aAAa,GAAG,IAAI,CAAC;YACvB,CAAC,CAAC,CAAC;QACL,IAAI,aAAa;YACf,MAAM,QAAQ;gBACZ,EAAE,KAAK,CAAC,mBAAmB,CAAC,CAAC,CAAC,sBAAsB,CAAC,CAAC,CAAC,gBAAgB,CAAC;iBACvE,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAC5B,IAAI,CAAC,aAAa;YAAE,MAAM,QAAQ,EAAE,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QACpE,MAAM,KAAK,CAAC;IACd,CAAC;IAED,OAAO;QACL,OAAO;QACP,QAAQ;QACR,SAAS;QACT,KAAK;QACL,KAAK;QACL,IAAI;QACJ,OAAO,EAAE,KAAK;QACd,QAAQ;QACR,IAAI;QACJ,QAAQ;QACR,OAAO;KACR,CAAC;AACJ,CAAC","sourcesContent":["import { lstat } from \"node:fs/promises\";\nimport { join, posix } from \"node:path\";\nimport type { AgentAdapter } from \"../domain/agent.types.ts\";\nimport { invariant } from \"../domain/errors.ts\";\nimport type { SandboxLease } from \"../domain/sandbox.types.ts\";\nimport { git } from \"../infrastructure/git/command.ts\";\nimport { executeProcess } from \"../infrastructure/process.ts\";\nimport { resolveVariables } from \"../infrastructure/settings.ts\";\nimport { registerResourceActivity } from \"../infrastructure/resource-activity.ts\";\nimport type { ResourceActivity } from \"../infrastructure/resource-activity.types.ts\";\nimport { trackedSandboxLease } from \"./sandbox-activity.ts\";\nimport { boundedTransfers } from \"../infrastructure/transfer.ts\";\nimport { docker } from \"../providers/docker.ts\";\nimport { prepareAdapter } from \"./agent-bootstrap.ts\";\nimport { hooks } from \"./lifecycle-hooks.ts\";\nimport type { SandboxOptions } from \"./outpost.types.ts\";\nimport { uploadFiles } from \"./remote-upload.ts\";\nimport { seedRemote } from \"./remote-workspace.ts\";\nimport type { RemoteSync } from \"./remote-workspace.types.ts\";\nimport type { ProvisionedSandbox } from \"./sandbox-session.types.ts\";\nimport { startupFailure } from \"./startup-recovery.ts\";\nimport { workspaces } from \"./workspace-registry.ts\";\nimport { openWorkspace } from \"./workspace.ts\";\n\nexport async function provisionSandbox(\n options: SandboxOptions,\n): Promise<ProvisionedSandbox> {\n options.signal?.throwIfAborted();\n const provider = options.provider ?? docker();\n if (provider.placement === \"remote\" && !options.workspace && !options.branch)\n options = { ...options, branch: { mode: \"integrate\" } };\n invariant(\n !options.workspace ||\n (!options.repository &&\n !options.branch &&\n !options.copies &&\n !options.storageQuota),\n \"A supplied workspace owns its repository, branch, copied inputs and storage quota\",\n );\n const owned = !options.workspace;\n invariant(\n provider.placement !== \"remote\" ||\n ((options.workspace?.policy ?? options.branch)?.mode !== \"current\" &&\n (options.workspace || options.branch)),\n \"Remote providers require a named or integration workspace\",\n );\n const workspace = options.workspace ?? (await openWorkspace(options));\n const state = workspaces.get(workspace);\n invariant(\n state && !state.closed && !state.active,\n \"Workspace must be open and cannot belong to another sandbox\",\n );\n state.active = true;\n const lifecycle = options.hooks ?? state.hooks;\n const stop = new AbortController();\n const setupSignal = options.signal\n ? AbortSignal.any([options.signal, stop.signal])\n : stop.signal;\n let lease: SandboxLease | undefined, sync: RemoteSync | undefined;\n let activity: ResourceActivity | undefined;\n let acquisitionStarted = false;\n const prepared = new Map<AgentAdapter, AgentAdapter>();\n const staging = join(\n workspace.repository,\n \".outpost\",\n \"recovery\",\n \"conversations\",\n );\n try {\n activity = await registerResourceActivity({\n repository: workspace.repository,\n ...(options.activityTransport\n ? { transporter: options.activityTransport }\n : {}),\n workspace: workspace.directory,\n provider: provider.name,\n placement: provider.placement,\n });\n const configured = await resolveVariables(\n workspace.repository,\n {},\n provider.variables,\n );\n const name = (\n await git(workspace.repository, [\"config\", \"--get\", \"user.name\"]).catch(\n () => \"Outpost\",\n )\n ).trim();\n const email = (\n await git(workspace.repository, [\"config\", \"--get\", \"user.email\"]).catch(\n () => \"outpost@localhost\",\n )\n ).trim();\n const variables = {\n GIT_AUTHOR_NAME: name,\n GIT_COMMITTER_NAME: name,\n GIT_AUTHOR_EMAIL: email,\n GIT_COMMITTER_EMAIL: email,\n ...configured,\n };\n acquisitionStarted = true;\n lease = boundedTransfers(\n trackedSandboxLease(\n await provider.acquire({\n repository: workspace.repository,\n directory: workspace.directory,\n gitDirectories: workspace.gitDirectories,\n variables,\n signal: setupSignal,\n }),\n activity,\n ),\n {\n ...(options.limits?.copyMs\n ? { deadlineMs: options.limits.copyMs }\n : {}),\n },\n );\n if (provider.placement === \"remote\") {\n sync = await seedRemote(workspace, lease, {\n ...(options.recoveryTransport\n ? { recoveryTransport: options.recoveryTransport }\n : {}),\n ...(options.includeUncommitted ? { includeUncommitted: true } : {}),\n ...(options.limits ? { limits: options.limits } : {}),\n signal: setupSignal,\n });\n const copiedFiles: string[] = [];\n for (const path of options.copies ?? []) {\n const info = await lstat(join(workspace.directory, path)).catch(\n (error) => {\n if ((error as NodeJS.ErrnoException).code === \"ENOENT\")\n return undefined;\n throw error;\n },\n );\n if (!info) continue;\n if (info.isFile() || info.isSymbolicLink()) {\n copiedFiles.push(path.replaceAll(\"\\\\\", \"/\"));\n continue;\n }\n await lease.upload(\n join(workspace.directory, path),\n posix.join(lease.root, path.replaceAll(\"\\\\\", \"/\")),\n { signal: setupSignal },\n );\n }\n await uploadFiles(lease, workspace.directory, [...new Set(copiedFiles)], {\n signal: setupSignal,\n });\n if (options.bootstrap !== false && options.agent)\n prepared.set(\n options.agent,\n await prepareAdapter(options.agent, lease, setupSignal),\n );\n }\n const initialized = await Promise.allSettled(\n [\n hooks(\n lifecycle?.hostReady ?? [],\n workspace.directory,\n executeProcess,\n setupSignal,\n ),\n hooks(\n lifecycle?.sandboxReady ?? [],\n lease.root,\n lease.invoke.bind(lease),\n setupSignal,\n true,\n ),\n ].map((pending) =>\n pending.catch((cause) => {\n stop.abort(cause);\n throw cause;\n }),\n ),\n );\n const failure = initialized.find((item) => item.status === \"rejected\");\n if (failure?.status === \"rejected\") throw failure.reason;\n await activity.phase(\"ready\");\n } catch (cause) {\n await startupFailure(workspace, cause, options);\n const allocationUncertain = acquisitionStarted && !lease;\n let cleanupFailed = allocationUncertain;\n await activity?.phase(\"closing\").catch(() => {\n cleanupFailed = true;\n });\n await lease?.release().catch(() => {\n cleanupFailed = true;\n });\n if (activity && !(await activity.idle())) cleanupFailed = true;\n state.active = false;\n if (owned)\n await workspace.close({ preserve: cleanupFailed }).catch(() => {\n cleanupFailed = true;\n });\n if (cleanupFailed)\n await activity\n ?.phase(allocationUncertain ? \"allocation-uncertain\" : \"cleanup-failed\")\n .catch(() => undefined);\n if (!cleanupFailed) await activity?.remove().catch(() => undefined);\n throw cause;\n }\n\n return {\n options,\n provider,\n workspace,\n state,\n owned,\n stop,\n runtime: lease,\n activity,\n sync,\n prepared,\n staging,\n };\n}\n"]}
|
|
@@ -1,3 +1,4 @@
|
|
|
1
|
+
import { reserveTransportStorage } from "../infrastructure/transport-reservations.js";
|
|
1
2
|
import { directory } from "../infrastructure/files.js";
|
|
2
3
|
import { git } from "../infrastructure/git/command.js";
|
|
3
4
|
import { reserveStorage } from "../infrastructure/storage-reservations.js";
|
|
@@ -5,6 +6,8 @@ export async function reserveRecoveryStorage(options) {
|
|
|
5
6
|
options.signal?.throwIfAborted();
|
|
6
7
|
const requested = await directory(options.repository);
|
|
7
8
|
const root = await directory((await git(requested, ["rev-parse", "--show-toplevel"])).trim());
|
|
9
|
+
if (options.transporter)
|
|
10
|
+
return reserveTransportStorage(options.transporter, root, options);
|
|
8
11
|
return reserveStorage(root, options);
|
|
9
12
|
}
|
|
10
13
|
//# sourceMappingURL=storage-reservation.js.map
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"storage-reservation.js","sourceRoot":"","sources":["../../src/application/storage-reservation.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,4BAA4B,CAAC;AACvD,OAAO,EAAE,GAAG,EAAE,MAAM,kCAAkC,CAAC;AACvD,OAAO,EAAE,cAAc,EAAE,MAAM,2CAA2C,CAAC;AAI3E,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,OAA0C;IAE1C,OAAO,CAAC,MAAM,EAAE,cAAc,EAAE,CAAC;IACjC,MAAM,SAAS,GAAG,MAAM,SAAS,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IACtD,MAAM,IAAI,GAAG,MAAM,SAAS,CAC1B,CAAC,MAAM,GAAG,CAAC,SAAS,EAAE,CAAC,WAAW,EAAE,iBAAiB,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAChE,CAAC;IACF,OAAO,cAAc,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;AACvC,CAAC","sourcesContent":["import { directory } from \"../infrastructure/files.ts\";\nimport { git } from \"../infrastructure/git/command.ts\";\nimport { reserveStorage } from \"../infrastructure/storage-reservations.ts\";\nimport type { StorageReservation } from \"../infrastructure/storage-reservations.types.ts\";\nimport type { RecoveryStorageReservationOptions } from \"./storage-reservation.types.ts\";\n\nexport async function reserveRecoveryStorage(\n options: RecoveryStorageReservationOptions,\n): Promise<StorageReservation> {\n options.signal?.throwIfAborted();\n const requested = await directory(options.repository);\n const root = await directory(\n (await git(requested, [\"rev-parse\", \"--show-toplevel\"])).trim(),\n );\n return reserveStorage(root, options);\n}\n"]}
|
|
1
|
+
{"version":3,"file":"storage-reservation.js","sourceRoot":"","sources":["../../src/application/storage-reservation.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,uBAAuB,EAAE,MAAM,6CAA6C,CAAC;AACtF,OAAO,EAAE,SAAS,EAAE,MAAM,4BAA4B,CAAC;AACvD,OAAO,EAAE,GAAG,EAAE,MAAM,kCAAkC,CAAC;AACvD,OAAO,EAAE,cAAc,EAAE,MAAM,2CAA2C,CAAC;AAI3E,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,OAA0C;IAE1C,OAAO,CAAC,MAAM,EAAE,cAAc,EAAE,CAAC;IACjC,MAAM,SAAS,GAAG,MAAM,SAAS,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IACtD,MAAM,IAAI,GAAG,MAAM,SAAS,CAC1B,CAAC,MAAM,GAAG,CAAC,SAAS,EAAE,CAAC,WAAW,EAAE,iBAAiB,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAChE,CAAC;IACF,IAAI,OAAO,CAAC,WAAW;QACrB,OAAO,uBAAuB,CAAC,OAAO,CAAC,WAAW,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;IACrE,OAAO,cAAc,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;AACvC,CAAC","sourcesContent":["import { reserveTransportStorage } from \"../infrastructure/transport-reservations.ts\";\nimport { directory } from \"../infrastructure/files.ts\";\nimport { git } from \"../infrastructure/git/command.ts\";\nimport { reserveStorage } from \"../infrastructure/storage-reservations.ts\";\nimport type { StorageReservation } from \"../infrastructure/storage-reservations.types.ts\";\nimport type { RecoveryStorageReservationOptions } from \"./storage-reservation.types.ts\";\n\nexport async function reserveRecoveryStorage(\n options: RecoveryStorageReservationOptions,\n): Promise<StorageReservation> {\n options.signal?.throwIfAborted();\n const requested = await directory(options.repository);\n const root = await directory(\n (await git(requested, [\"rev-parse\", \"--show-toplevel\"])).trim(),\n );\n if (options.transporter)\n return reserveTransportStorage(options.transporter, root, options);\n return reserveStorage(root, options);\n}\n"]}
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"transport-inspection.constants.js","sourceRoot":"","sources":["../../src/application/transport-inspection.constants.ts"],"names":[],"mappings":"AACA,MAAM,CAAC,MAAM,mBAAmB,GAAmC;IACjE,WAAW;IACX,aAAa;IACb,eAAe;IACf,UAAU;IACV,MAAM;IACN,cAAc;IACd,WAAW;CACZ,CAAC","sourcesContent":["import type { StorageCategoryName } from \"../infrastructure/storage-inventory.types.ts\";\nexport const transportCategories: readonly StorageCategoryName[] = [\n \"artifacts\",\n \"checkpoints\",\n \"conversations\",\n \"recovery\",\n \"logs\",\n \"reservations\",\n \"resources\",\n];\n"]}
|
|
@@ -0,0 +1,103 @@
|
|
|
1
|
+
import { transportDefaults } from "../infrastructure/transport.constants.js";
|
|
2
|
+
import { resourceRecord } from "../infrastructure/resource-activity-inspection.js";
|
|
3
|
+
import { jsonObject } from "../infrastructure/transport-json.js";
|
|
4
|
+
import { invariant, positive } from "../domain/errors.js";
|
|
5
|
+
import { transportCategories } from "./transport-inspection.constants.js";
|
|
6
|
+
export async function inspectTransportRecovery(options) {
|
|
7
|
+
const transporter = options.transporter;
|
|
8
|
+
invariant(transporter, "Transport is required");
|
|
9
|
+
invariant(!options.git && !options.locks, "Transport inspection cannot verify host Git or process locks");
|
|
10
|
+
const maxEntries = positive(options.maxEntries ?? transportDefaults.maxEntries, "maxEntries");
|
|
11
|
+
const buckets = transportCategories.map((name) => ({
|
|
12
|
+
name,
|
|
13
|
+
path: name,
|
|
14
|
+
entries: [],
|
|
15
|
+
}));
|
|
16
|
+
const categories = buckets;
|
|
17
|
+
const usage = {
|
|
18
|
+
bytes: 0,
|
|
19
|
+
files: 0,
|
|
20
|
+
directories: 0,
|
|
21
|
+
symlinks: 0,
|
|
22
|
+
other: 0,
|
|
23
|
+
};
|
|
24
|
+
const issues = [];
|
|
25
|
+
const resources = [];
|
|
26
|
+
let scannedEntries = 0, complete = true;
|
|
27
|
+
for await (const entry of transporter.list()) {
|
|
28
|
+
if (scannedEntries >= maxEntries) {
|
|
29
|
+
complete = false;
|
|
30
|
+
issues.push({ path: "", code: "ENTRY_LIMIT" });
|
|
31
|
+
break;
|
|
32
|
+
}
|
|
33
|
+
scannedEntries++;
|
|
34
|
+
const name = entry.key.split("/")[0];
|
|
35
|
+
const category = buckets.find((category) => category.name === name);
|
|
36
|
+
if (!category) {
|
|
37
|
+
complete = false;
|
|
38
|
+
issues.push({ path: entry.key, code: "UNKNOWN_TRANSPORT_CATEGORY" });
|
|
39
|
+
continue;
|
|
40
|
+
}
|
|
41
|
+
const stored = {
|
|
42
|
+
name: entry.key,
|
|
43
|
+
path: entry.key,
|
|
44
|
+
kind: "file",
|
|
45
|
+
modifiedAt: entry.modifiedAt,
|
|
46
|
+
complete: true,
|
|
47
|
+
bytes: entry.size,
|
|
48
|
+
files: 1,
|
|
49
|
+
directories: 0,
|
|
50
|
+
symlinks: 0,
|
|
51
|
+
other: 0,
|
|
52
|
+
revision: entry.revision,
|
|
53
|
+
};
|
|
54
|
+
category.entries.push(stored);
|
|
55
|
+
usage.bytes += entry.size;
|
|
56
|
+
usage.files++;
|
|
57
|
+
if (options.resources && name === "resources") {
|
|
58
|
+
try {
|
|
59
|
+
const object = await transporter.read(entry.key);
|
|
60
|
+
invariant(object?.revision === entry.revision, "Resource changed during inspection");
|
|
61
|
+
const record = resourceRecord(jsonObject(object));
|
|
62
|
+
resources.push({
|
|
63
|
+
path: entry.key,
|
|
64
|
+
record,
|
|
65
|
+
ownership: { status: "unknown", reason: "REMOTE_OWNER_UNVERIFIED" },
|
|
66
|
+
});
|
|
67
|
+
}
|
|
68
|
+
catch {
|
|
69
|
+
issues.push({ path: entry.key, code: "RESOURCE_RECORD_UNREADABLE" });
|
|
70
|
+
complete = false;
|
|
71
|
+
resources.push({
|
|
72
|
+
path: entry.key,
|
|
73
|
+
ownership: {
|
|
74
|
+
status: "unknown",
|
|
75
|
+
reason: "RESOURCE_RECORD_UNREADABLE",
|
|
76
|
+
},
|
|
77
|
+
});
|
|
78
|
+
}
|
|
79
|
+
}
|
|
80
|
+
}
|
|
81
|
+
return {
|
|
82
|
+
repository: options.repository ?? "",
|
|
83
|
+
root: "transport",
|
|
84
|
+
activity: "unverified",
|
|
85
|
+
categories,
|
|
86
|
+
usage,
|
|
87
|
+
issues,
|
|
88
|
+
complete,
|
|
89
|
+
scannedEntries,
|
|
90
|
+
maxEntries,
|
|
91
|
+
...(options.resources
|
|
92
|
+
? {
|
|
93
|
+
resources: {
|
|
94
|
+
scope: "recorded-sandboxes",
|
|
95
|
+
complete,
|
|
96
|
+
entries: resources,
|
|
97
|
+
issues,
|
|
98
|
+
},
|
|
99
|
+
}
|
|
100
|
+
: {}),
|
|
101
|
+
};
|
|
102
|
+
}
|
|
103
|
+
//# sourceMappingURL=transport-inspection.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"transport-inspection.js","sourceRoot":"","sources":["../../src/application/transport-inspection.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,0CAA0C,CAAC;AAW7E,OAAO,EAAE,cAAc,EAAE,MAAM,mDAAmD,CAAC;AACnF,OAAO,EAAE,UAAU,EAAE,MAAM,qCAAqC,CAAC;AACjE,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AAC1D,OAAO,EAAE,mBAAmB,EAAE,MAAM,qCAAqC,CAAC;AAE1E,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAC5C,OAAkC;IAElC,MAAM,WAAW,GAAG,OAAO,CAAC,WAAW,CAAC;IACxC,SAAS,CAAC,WAAW,EAAE,uBAAuB,CAAC,CAAC;IAChD,SAAS,CACP,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,EAC9B,8DAA8D,CAC/D,CAAC;IACF,MAAM,UAAU,GAAG,QAAQ,CACzB,OAAO,CAAC,UAAU,IAAI,iBAAiB,CAAC,UAAU,EAClD,YAAY,CACb,CAAC;IACF,MAAM,OAAO,GAAG,mBAAmB,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QACjD,IAAI;QACJ,IAAI,EAAE,IAAI;QACV,OAAO,EAAE,EAAoB;KAC9B,CAAC,CAAC,CAAC;IACJ,MAAM,UAAU,GAAsB,OAAO,CAAC;IAC9C,MAAM,KAAK,GAAiB;QAC1B,KAAK,EAAE,CAAC;QACR,KAAK,EAAE,CAAC;QACR,WAAW,EAAE,CAAC;QACd,QAAQ,EAAE,CAAC;QACX,KAAK,EAAE,CAAC;KACT,CAAC;IACF,MAAM,MAAM,GAAG,EAAE,CAAC;IAClB,MAAM,SAAS,GAA8B,EAAE,CAAC;IAChD,IAAI,cAAc,GAAG,CAAC,EACpB,QAAQ,GAAG,IAAI,CAAC;IAClB,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,WAAW,CAAC,IAAI,EAAE,EAAE,CAAC;QAC7C,IAAI,cAAc,IAAI,UAAU,EAAE,CAAC;YACjC,QAAQ,GAAG,KAAK,CAAC;YACjB,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC,CAAC;YAC/C,MAAM;QACR,CAAC;QACD,cAAc,EAAE,CAAC;QACjB,MAAM,IAAI,GAAG,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QACrC,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;QACpE,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,QAAQ,GAAG,KAAK,CAAC;YACjB,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,GAAG,EAAE,IAAI,EAAE,4BAA4B,EAAE,CAAC,CAAC;YACrE,SAAS;QACX,CAAC;QACD,MAAM,MAAM,GAAG;YACb,IAAI,EAAE,KAAK,CAAC,GAAG;YACf,IAAI,EAAE,KAAK,CAAC,GAAG;YACf,IAAI,EAAE,MAAe;YACrB,UAAU,EAAE,KAAK,CAAC,UAAU;YAC5B,QAAQ,EAAE,IAAI;YACd,KAAK,EAAE,KAAK,CAAC,IAAI;YACjB,KAAK,EAAE,CAAC;YACR,WAAW,EAAE,CAAC;YACd,QAAQ,EAAE,CAAC;YACX,KAAK,EAAE,CAAC;YACR,QAAQ,EAAE,KAAK,CAAC,QAAQ;SACzB,CAAC;QACF,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC9B,KAAK,CAAC,KAAK,IAAI,KAAK,CAAC,IAAI,CAAC;QAC1B,KAAK,CAAC,KAAK,EAAE,CAAC;QACd,IAAI,OAAO,CAAC,SAAS,IAAI,IAAI,KAAK,WAAW,EAAE,CAAC;YAC9C,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;gBACjD,SAAS,CACP,MAAM,EAAE,QAAQ,KAAK,KAAK,CAAC,QAAQ,EACnC,oCAAoC,CACrC,CAAC;gBACF,MAAM,MAAM,GAAG,cAAc,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC;gBAClD,SAAS,CAAC,IAAI,CAAC;oBACb,IAAI,EAAE,KAAK,CAAC,GAAG;oBACf,MAAM;oBACN,SAAS,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,yBAAyB,EAAE;iBACpE,CAAC,CAAC;YACL,CAAC;YAAC,MAAM,CAAC;gBACP,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,GAAG,EAAE,IAAI,EAAE,4BAA4B,EAAE,CAAC,CAAC;gBACrE,QAAQ,GAAG,KAAK,CAAC;gBACjB,SAAS,CAAC,IAAI,CAAC;oBACb,IAAI,EAAE,KAAK,CAAC,GAAG;oBACf,SAAS,EAAE;wBACT,MAAM,EAAE,SAAS;wBACjB,MAAM,EAAE,4BAA4B;qBACrC;iBACF,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO;QACL,UAAU,EAAE,OAAO,CAAC,UAAU,IAAI,EAAE;QACpC,IAAI,EAAE,WAAW;QACjB,QAAQ,EAAE,YAAY;QACtB,UAAU;QACV,KAAK;QACL,MAAM;QACN,QAAQ;QACR,cAAc;QACd,UAAU;QACV,GAAG,CAAC,OAAO,CAAC,SAAS;YACnB,CAAC,CAAC;gBACE,SAAS,EAAE;oBACT,KAAK,EAAE,oBAAoB;oBAC3B,QAAQ;oBACR,OAAO,EAAE,SAAS;oBAClB,MAAM;iBACP;aACF;YACH,CAAC,CAAC,EAAE,CAAC;KACR,CAAC;AACJ,CAAC","sourcesContent":["import { transportDefaults } from \"../infrastructure/transport.constants.ts\";\nimport type {\n RecoveryInspection,\n RecoveryInspectionOptions,\n} from \"./recovery-inspection.types.ts\";\nimport type {\n StorageCategory,\n StorageEntry,\n StorageUsage,\n} from \"../infrastructure/storage-inventory.types.ts\";\nimport type { ResourceInspectionEntry } from \"../infrastructure/resource-activity.types.ts\";\nimport { resourceRecord } from \"../infrastructure/resource-activity-inspection.ts\";\nimport { jsonObject } from \"../infrastructure/transport-json.ts\";\nimport { invariant, positive } from \"../domain/errors.ts\";\nimport { transportCategories } from \"./transport-inspection.constants.ts\";\n\nexport async function inspectTransportRecovery(\n options: RecoveryInspectionOptions,\n): Promise<RecoveryInspection> {\n const transporter = options.transporter;\n invariant(transporter, \"Transport is required\");\n invariant(\n !options.git && !options.locks,\n \"Transport inspection cannot verify host Git or process locks\",\n );\n const maxEntries = positive(\n options.maxEntries ?? transportDefaults.maxEntries,\n \"maxEntries\",\n );\n const buckets = transportCategories.map((name) => ({\n name,\n path: name,\n entries: [] as StorageEntry[],\n }));\n const categories: StorageCategory[] = buckets;\n const usage: StorageUsage = {\n bytes: 0,\n files: 0,\n directories: 0,\n symlinks: 0,\n other: 0,\n };\n const issues = [];\n const resources: ResourceInspectionEntry[] = [];\n let scannedEntries = 0,\n complete = true;\n for await (const entry of transporter.list()) {\n if (scannedEntries >= maxEntries) {\n complete = false;\n issues.push({ path: \"\", code: \"ENTRY_LIMIT\" });\n break;\n }\n scannedEntries++;\n const name = entry.key.split(\"/\")[0];\n const category = buckets.find((category) => category.name === name);\n if (!category) {\n complete = false;\n issues.push({ path: entry.key, code: \"UNKNOWN_TRANSPORT_CATEGORY\" });\n continue;\n }\n const stored = {\n name: entry.key,\n path: entry.key,\n kind: \"file\" as const,\n modifiedAt: entry.modifiedAt,\n complete: true,\n bytes: entry.size,\n files: 1,\n directories: 0,\n symlinks: 0,\n other: 0,\n revision: entry.revision,\n };\n category.entries.push(stored);\n usage.bytes += entry.size;\n usage.files++;\n if (options.resources && name === \"resources\") {\n try {\n const object = await transporter.read(entry.key);\n invariant(\n object?.revision === entry.revision,\n \"Resource changed during inspection\",\n );\n const record = resourceRecord(jsonObject(object));\n resources.push({\n path: entry.key,\n record,\n ownership: { status: \"unknown\", reason: \"REMOTE_OWNER_UNVERIFIED\" },\n });\n } catch {\n issues.push({ path: entry.key, code: \"RESOURCE_RECORD_UNREADABLE\" });\n complete = false;\n resources.push({\n path: entry.key,\n ownership: {\n status: \"unknown\",\n reason: \"RESOURCE_RECORD_UNREADABLE\",\n },\n });\n }\n }\n }\n return {\n repository: options.repository ?? \"\",\n root: \"transport\",\n activity: \"unverified\",\n categories,\n usage,\n issues,\n complete,\n scannedEntries,\n maxEntries,\n ...(options.resources\n ? {\n resources: {\n scope: \"recorded-sandboxes\",\n complete,\n entries: resources,\n issues,\n },\n }\n : {}),\n };\n}\n"]}
|
|
@@ -0,0 +1,4 @@
|
|
|
1
|
+
import type { TransportStoreOptions } from "../domain/transport.types.ts";
|
|
2
|
+
import type { RecoveryRetentionOptions, RecoveryRetentionPlan, RecoveryPruneResult } from "./recovery-retention.types.ts";
|
|
3
|
+
export declare function planTransportRetention(options: RecoveryRetentionOptions): Promise<RecoveryRetentionPlan>;
|
|
4
|
+
export declare function pruneTransportRetention(plan: RecoveryRetentionPlan, options: TransportStoreOptions): Promise<RecoveryPruneResult>;
|
|
@@ -0,0 +1,153 @@
|
|
|
1
|
+
import { invariant } from "../domain/errors.js";
|
|
2
|
+
import { inspectTransportRecovery } from "./transport-inspection.js";
|
|
3
|
+
import { journalSnapshot } from "../infrastructure/transport-journal.js";
|
|
4
|
+
import { jsonObject } from "../infrastructure/transport-json.js";
|
|
5
|
+
import { retentionPolicy } from "./recovery-retention-policy.js";
|
|
6
|
+
export async function planTransportRetention(options) {
|
|
7
|
+
const transporter = options.transporter;
|
|
8
|
+
invariant(transporter, "Transport is required");
|
|
9
|
+
retentionPolicy(options.policy);
|
|
10
|
+
invariant(!options.policy.scopes.includes("clean-workspaces") &&
|
|
11
|
+
options.policy.maxWorkspaces === undefined, "Transport retention cannot inspect local workspaces");
|
|
12
|
+
const inspection = await inspectTransportRecovery(options);
|
|
13
|
+
const inspectedAt = new Date().toISOString();
|
|
14
|
+
const entries = [];
|
|
15
|
+
const handled = new Set();
|
|
16
|
+
for (const category of inspection.categories) {
|
|
17
|
+
for (const entry of category.entries) {
|
|
18
|
+
if (handled.has(entry.path))
|
|
19
|
+
continue;
|
|
20
|
+
let eligible = false, reason = "RECOVERY_DATA_PROTECTED";
|
|
21
|
+
let objects = [];
|
|
22
|
+
if (category.name === "logs") {
|
|
23
|
+
const prefix = entry.path.slice(0, entry.path.lastIndexOf("/") + 1);
|
|
24
|
+
const group = category.entries.filter((value) => value.path.startsWith(prefix));
|
|
25
|
+
objects = group.map((value) => {
|
|
26
|
+
invariant(value.revision && value.modifiedAt, "Missing transport entry version");
|
|
27
|
+
return {
|
|
28
|
+
key: value.path,
|
|
29
|
+
revision: value.revision,
|
|
30
|
+
size: value.bytes,
|
|
31
|
+
modifiedAt: value.modifiedAt,
|
|
32
|
+
};
|
|
33
|
+
});
|
|
34
|
+
for (const object of objects)
|
|
35
|
+
handled.add(object.key);
|
|
36
|
+
const index = group.find((value) => value.path === prefix + "index");
|
|
37
|
+
reason = "LOG_ACTIVITY_OR_CONTENT_UNKNOWN";
|
|
38
|
+
if (index && options.policy.scopes.includes("closed-logs")) {
|
|
39
|
+
try {
|
|
40
|
+
const current = await transporter.read(index.path);
|
|
41
|
+
if (current?.revision === index.revision &&
|
|
42
|
+
journalSnapshot(jsonObject(current)).closed) {
|
|
43
|
+
eligible =
|
|
44
|
+
inspection.complete &&
|
|
45
|
+
objects.every((value) => Date.parse(inspectedAt) - Date.parse(value.modifiedAt) >=
|
|
46
|
+
options.policy.minAgeMs);
|
|
47
|
+
reason = eligible
|
|
48
|
+
? "ELIGIBLE"
|
|
49
|
+
: "RETENTION_AGE_OR_INCOMPLETE_INVENTORY";
|
|
50
|
+
}
|
|
51
|
+
}
|
|
52
|
+
catch {
|
|
53
|
+
reason = "LOG_ACTIVITY_OR_CONTENT_UNKNOWN";
|
|
54
|
+
}
|
|
55
|
+
}
|
|
56
|
+
const indexObject = objects.find((value) => value.key === prefix + "index");
|
|
57
|
+
entries.push({
|
|
58
|
+
path: prefix + "index",
|
|
59
|
+
category: category.name,
|
|
60
|
+
bytes: objects.reduce((sum, value) => sum + value.size, 0),
|
|
61
|
+
eligible,
|
|
62
|
+
reason,
|
|
63
|
+
objects,
|
|
64
|
+
...(indexObject
|
|
65
|
+
? {
|
|
66
|
+
revision: indexObject.revision,
|
|
67
|
+
modifiedAt: indexObject.modifiedAt,
|
|
68
|
+
}
|
|
69
|
+
: {}),
|
|
70
|
+
});
|
|
71
|
+
continue;
|
|
72
|
+
}
|
|
73
|
+
entries.push({
|
|
74
|
+
path: entry.path,
|
|
75
|
+
category: category.name,
|
|
76
|
+
bytes: entry.bytes,
|
|
77
|
+
eligible,
|
|
78
|
+
reason,
|
|
79
|
+
...(entry.revision ? { revision: entry.revision } : {}),
|
|
80
|
+
...(entry.modifiedAt ? { modifiedAt: entry.modifiedAt } : {}),
|
|
81
|
+
});
|
|
82
|
+
}
|
|
83
|
+
}
|
|
84
|
+
const projectedBytes = inspection.usage.bytes -
|
|
85
|
+
entries
|
|
86
|
+
.filter((entry) => entry.eligible)
|
|
87
|
+
.reduce((sum, entry) => sum + entry.bytes, 0);
|
|
88
|
+
return {
|
|
89
|
+
repository: inspection.repository,
|
|
90
|
+
source: "transport",
|
|
91
|
+
policy: structuredClone(options.policy),
|
|
92
|
+
inspectedAt,
|
|
93
|
+
inspection,
|
|
94
|
+
entries,
|
|
95
|
+
complete: inspection.complete,
|
|
96
|
+
usageBytes: inspection.usage.bytes,
|
|
97
|
+
projectedBytes,
|
|
98
|
+
quota: !inspection.complete
|
|
99
|
+
? "unknown"
|
|
100
|
+
: options.policy.maxBytes !== undefined &&
|
|
101
|
+
projectedBytes > options.policy.maxBytes
|
|
102
|
+
? "exceeded"
|
|
103
|
+
: "within",
|
|
104
|
+
};
|
|
105
|
+
}
|
|
106
|
+
export async function pruneTransportRetention(plan, options) {
|
|
107
|
+
invariant(plan.complete, "Cannot prune an incomplete retention plan");
|
|
108
|
+
retentionPolicy(plan.policy);
|
|
109
|
+
const removed = [], retained = [];
|
|
110
|
+
for (const candidate of plan.entries.filter((entry) => entry.eligible)) {
|
|
111
|
+
const fresh = await planTransportRetention({
|
|
112
|
+
transporter: options.transporter,
|
|
113
|
+
policy: plan.policy,
|
|
114
|
+
repository: plan.repository,
|
|
115
|
+
});
|
|
116
|
+
const entry = fresh.entries.find((entry) => entry.path === candidate.path);
|
|
117
|
+
if (!entry?.eligible ||
|
|
118
|
+
entry.revision !== candidate.revision ||
|
|
119
|
+
JSON.stringify(entry.objects) !== JSON.stringify(candidate.objects)) {
|
|
120
|
+
retained.push({ path: candidate.path, reason: "PLAN_CHANGED" });
|
|
121
|
+
continue;
|
|
122
|
+
}
|
|
123
|
+
try {
|
|
124
|
+
invariant(entry.revision && entry.objects, "Missing log revisions");
|
|
125
|
+
await options.transporter.remove(entry.path, {
|
|
126
|
+
ifRevision: entry.revision,
|
|
127
|
+
});
|
|
128
|
+
for (const object of entry.objects) {
|
|
129
|
+
if (object.key !== entry.path)
|
|
130
|
+
await options.transporter.remove(object.key, {
|
|
131
|
+
ifRevision: object.revision,
|
|
132
|
+
});
|
|
133
|
+
}
|
|
134
|
+
removed.push(entry.path);
|
|
135
|
+
}
|
|
136
|
+
catch {
|
|
137
|
+
retained.push({
|
|
138
|
+
path: entry.path,
|
|
139
|
+
reason: "REVALIDATION_OR_REMOVAL_FAILED",
|
|
140
|
+
});
|
|
141
|
+
}
|
|
142
|
+
}
|
|
143
|
+
return {
|
|
144
|
+
removed,
|
|
145
|
+
retained,
|
|
146
|
+
after: await planTransportRetention({
|
|
147
|
+
transporter: options.transporter,
|
|
148
|
+
policy: plan.policy,
|
|
149
|
+
repository: plan.repository,
|
|
150
|
+
}),
|
|
151
|
+
};
|
|
152
|
+
}
|
|
153
|
+
//# sourceMappingURL=transport-retention.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"transport-retention.js","sourceRoot":"","sources":["../../src/application/transport-retention.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAWhD,OAAO,EAAE,wBAAwB,EAAE,MAAM,2BAA2B,CAAC;AACrE,OAAO,EAAE,eAAe,EAAE,MAAM,wCAAwC,CAAC;AACzE,OAAO,EAAE,UAAU,EAAE,MAAM,qCAAqC,CAAC;AACjE,OAAO,EAAE,eAAe,EAAE,MAAM,gCAAgC,CAAC;AAEjE,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,OAAiC;IAEjC,MAAM,WAAW,GAAG,OAAO,CAAC,WAAW,CAAC;IACxC,SAAS,CAAC,WAAW,EAAE,uBAAuB,CAAC,CAAC;IAChD,eAAe,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IAChC,SAAS,CACP,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,kBAAkB,CAAC;QACjD,OAAO,CAAC,MAAM,CAAC,aAAa,KAAK,SAAS,EAC5C,qDAAqD,CACtD,CAAC;IACF,MAAM,UAAU,GAAG,MAAM,wBAAwB,CAAC,OAAO,CAAC,CAAC;IAC3D,MAAM,WAAW,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC7C,MAAM,OAAO,GAA6B,EAAE,CAAC;IAC7C,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;IAClC,KAAK,MAAM,QAAQ,IAAI,UAAU,CAAC,UAAU,EAAE,CAAC;QAC7C,KAAK,MAAM,KAAK,IAAI,QAAQ,CAAC,OAAO,EAAE,CAAC;YACrC,IAAI,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC;gBAAE,SAAS;YACtC,IAAI,QAAQ,GAAG,KAAK,EAClB,MAAM,GAAG,yBAAyB,CAAC;YACrC,IAAI,OAAO,GAAqB,EAAE,CAAC;YACnC,IAAI,QAAQ,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;gBAC7B,MAAM,MAAM,GAAG,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;gBACpE,MAAM,KAAK,GAAG,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAC9C,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAC9B,CAAC;gBACF,OAAO,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;oBAC5B,SAAS,CACP,KAAK,CAAC,QAAQ,IAAI,KAAK,CAAC,UAAU,EAClC,iCAAiC,CAClC,CAAC;oBACF,OAAO;wBACL,GAAG,EAAE,KAAK,CAAC,IAAI;wBACf,QAAQ,EAAE,KAAK,CAAC,QAAQ;wBACxB,IAAI,EAAE,KAAK,CAAC,KAAK;wBACjB,UAAU,EAAE,KAAK,CAAC,UAAU;qBAC7B,CAAC;gBACJ,CAAC,CAAC,CAAC;gBACH,KAAK,MAAM,MAAM,IAAI,OAAO;oBAAE,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;gBACtD,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,MAAM,GAAG,OAAO,CAAC,CAAC;gBACrE,MAAM,GAAG,iCAAiC,CAAC;gBAC3C,IAAI,KAAK,IAAI,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,aAAa,CAAC,EAAE,CAAC;oBAC3D,IAAI,CAAC;wBACH,MAAM,OAAO,GAAG,MAAM,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;wBACnD,IACE,OAAO,EAAE,QAAQ,KAAK,KAAK,CAAC,QAAQ;4BACpC,eAAe,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,EAC3C,CAAC;4BACD,QAAQ;gCACN,UAAU,CAAC,QAAQ;oCACnB,OAAO,CAAC,KAAK,CACX,CAAC,KAAK,EAAE,EAAE,CACR,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,UAAU,CAAC;wCACtD,OAAO,CAAC,MAAM,CAAC,QAAQ,CAC1B,CAAC;4BACJ,MAAM,GAAG,QAAQ;gCACf,CAAC,CAAC,UAAU;gCACZ,CAAC,CAAC,uCAAuC,CAAC;wBAC9C,CAAC;oBACH,CAAC;oBAAC,MAAM,CAAC;wBACP,MAAM,GAAG,iCAAiC,CAAC;oBAC7C,CAAC;gBACH,CAAC;gBACD,MAAM,WAAW,GAAG,OAAO,CAAC,IAAI,CAC9B,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,KAAK,MAAM,GAAG,OAAO,CAC1C,CAAC;gBACF,OAAO,CAAC,IAAI,CAAC;oBACX,IAAI,EAAE,MAAM,GAAG,OAAO;oBACtB,QAAQ,EAAE,QAAQ,CAAC,IAAI;oBACvB,KAAK,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE,CAAC,GAAG,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;oBAC1D,QAAQ;oBACR,MAAM;oBACN,OAAO;oBACP,GAAG,CAAC,WAAW;wBACb,CAAC,CAAC;4BACE,QAAQ,EAAE,WAAW,CAAC,QAAQ;4BAC9B,UAAU,EAAE,WAAW,CAAC,UAAU;yBACnC;wBACH,CAAC,CAAC,EAAE,CAAC;iBACR,CAAC,CAAC;gBACH,SAAS;YACX,CAAC;YACD,OAAO,CAAC,IAAI,CAAC;gBACX,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,QAAQ,EAAE,QAAQ,CAAC,IAAI;gBACvB,KAAK,EAAE,KAAK,CAAC,KAAK;gBAClB,QAAQ;gBACR,MAAM;gBACN,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACvD,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAC9D,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,MAAM,cAAc,GAClB,UAAU,CAAC,KAAK,CAAC,KAAK;QACtB,OAAO;aACJ,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC;aACjC,MAAM,CAAC,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE,CAAC,GAAG,GAAG,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;IAClD,OAAO;QACL,UAAU,EAAE,UAAU,CAAC,UAAU;QACjC,MAAM,EAAE,WAAW;QACnB,MAAM,EAAE,eAAe,CAAC,OAAO,CAAC,MAAM,CAAC;QACvC,WAAW;QACX,UAAU;QACV,OAAO;QACP,QAAQ,EAAE,UAAU,CAAC,QAAQ;QAC7B,UAAU,EAAE,UAAU,CAAC,KAAK,CAAC,KAAK;QAClC,cAAc;QACd,KAAK,EAAE,CAAC,UAAU,CAAC,QAAQ;YACzB,CAAC,CAAC,SAAS;YACX,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,KAAK,SAAS;gBACnC,cAAc,GAAG,OAAO,CAAC,MAAM,CAAC,QAAQ;gBAC1C,CAAC,CAAC,UAAU;gBACZ,CAAC,CAAC,QAAQ;KACf,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,IAA2B,EAC3B,OAA8B;IAE9B,SAAS,CAAC,IAAI,CAAC,QAAQ,EAAE,2CAA2C,CAAC,CAAC;IACtE,eAAe,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC7B,MAAM,OAAO,GAAa,EAAE,EAC1B,QAAQ,GAAG,EAAE,CAAC;IAChB,KAAK,MAAM,SAAS,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC;QACvE,MAAM,KAAK,GAAG,MAAM,sBAAsB,CAAC;YACzC,WAAW,EAAE,OAAO,CAAC,WAAW;YAChC,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,UAAU,EAAE,IAAI,CAAC,UAAU;SAC5B,CAAC,CAAC;QACH,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,SAAS,CAAC,IAAI,CAAC,CAAC;QAC3E,IACE,CAAC,KAAK,EAAE,QAAQ;YAChB,KAAK,CAAC,QAAQ,KAAK,SAAS,CAAC,QAAQ;YACrC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,OAAO,CAAC,EACnE,CAAC;YACD,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC,CAAC;YAChE,SAAS;QACX,CAAC;QACD,IAAI,CAAC;YACH,SAAS,CAAC,KAAK,CAAC,QAAQ,IAAI,KAAK,CAAC,OAAO,EAAE,uBAAuB,CAAC,CAAC;YACpE,MAAM,OAAO,CAAC,WAAW,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE;gBAC3C,UAAU,EAAE,KAAK,CAAC,QAAQ;aAC3B,CAAC,CAAC;YACH,KAAK,MAAM,MAAM,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;gBACnC,IAAI,MAAM,CAAC,GAAG,KAAK,KAAK,CAAC,IAAI;oBAC3B,MAAM,OAAO,CAAC,WAAW,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE;wBAC3C,UAAU,EAAE,MAAM,CAAC,QAAQ;qBAC5B,CAAC,CAAC;YACP,CAAC;YACD,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC3B,CAAC;QAAC,MAAM,CAAC;YACP,QAAQ,CAAC,IAAI,CAAC;gBACZ,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,MAAM,EAAE,gCAAgC;aACzC,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,OAAO;QACL,OAAO;QACP,QAAQ;QACR,KAAK,EAAE,MAAM,sBAAsB,CAAC;YAClC,WAAW,EAAE,OAAO,CAAC,WAAW;YAChC,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,UAAU,EAAE,IAAI,CAAC,UAAU;SAC5B,CAAC;KACH,CAAC;AACJ,CAAC","sourcesContent":["import { invariant } from \"../domain/errors.ts\";\nimport type {\n TransportStoreOptions,\n TransportEntry,\n} from \"../domain/transport.types.ts\";\nimport type {\n RecoveryRetentionOptions,\n RecoveryRetentionPlan,\n RecoveryRetentionEntry,\n RecoveryPruneResult,\n} from \"./recovery-retention.types.ts\";\nimport { inspectTransportRecovery } from \"./transport-inspection.ts\";\nimport { journalSnapshot } from \"../infrastructure/transport-journal.ts\";\nimport { jsonObject } from \"../infrastructure/transport-json.ts\";\nimport { retentionPolicy } from \"./recovery-retention-policy.ts\";\n\nexport async function planTransportRetention(\n options: RecoveryRetentionOptions,\n): Promise<RecoveryRetentionPlan> {\n const transporter = options.transporter;\n invariant(transporter, \"Transport is required\");\n retentionPolicy(options.policy);\n invariant(\n !options.policy.scopes.includes(\"clean-workspaces\") &&\n options.policy.maxWorkspaces === undefined,\n \"Transport retention cannot inspect local workspaces\",\n );\n const inspection = await inspectTransportRecovery(options);\n const inspectedAt = new Date().toISOString();\n const entries: RecoveryRetentionEntry[] = [];\n const handled = new Set<string>();\n for (const category of inspection.categories) {\n for (const entry of category.entries) {\n if (handled.has(entry.path)) continue;\n let eligible = false,\n reason = \"RECOVERY_DATA_PROTECTED\";\n let objects: TransportEntry[] = [];\n if (category.name === \"logs\") {\n const prefix = entry.path.slice(0, entry.path.lastIndexOf(\"/\") + 1);\n const group = category.entries.filter((value) =>\n value.path.startsWith(prefix),\n );\n objects = group.map((value) => {\n invariant(\n value.revision && value.modifiedAt,\n \"Missing transport entry version\",\n );\n return {\n key: value.path,\n revision: value.revision,\n size: value.bytes,\n modifiedAt: value.modifiedAt,\n };\n });\n for (const object of objects) handled.add(object.key);\n const index = group.find((value) => value.path === prefix + \"index\");\n reason = \"LOG_ACTIVITY_OR_CONTENT_UNKNOWN\";\n if (index && options.policy.scopes.includes(\"closed-logs\")) {\n try {\n const current = await transporter.read(index.path);\n if (\n current?.revision === index.revision &&\n journalSnapshot(jsonObject(current)).closed\n ) {\n eligible =\n inspection.complete &&\n objects.every(\n (value) =>\n Date.parse(inspectedAt) - Date.parse(value.modifiedAt) >=\n options.policy.minAgeMs,\n );\n reason = eligible\n ? \"ELIGIBLE\"\n : \"RETENTION_AGE_OR_INCOMPLETE_INVENTORY\";\n }\n } catch {\n reason = \"LOG_ACTIVITY_OR_CONTENT_UNKNOWN\";\n }\n }\n const indexObject = objects.find(\n (value) => value.key === prefix + \"index\",\n );\n entries.push({\n path: prefix + \"index\",\n category: category.name,\n bytes: objects.reduce((sum, value) => sum + value.size, 0),\n eligible,\n reason,\n objects,\n ...(indexObject\n ? {\n revision: indexObject.revision,\n modifiedAt: indexObject.modifiedAt,\n }\n : {}),\n });\n continue;\n }\n entries.push({\n path: entry.path,\n category: category.name,\n bytes: entry.bytes,\n eligible,\n reason,\n ...(entry.revision ? { revision: entry.revision } : {}),\n ...(entry.modifiedAt ? { modifiedAt: entry.modifiedAt } : {}),\n });\n }\n }\n const projectedBytes =\n inspection.usage.bytes -\n entries\n .filter((entry) => entry.eligible)\n .reduce((sum, entry) => sum + entry.bytes, 0);\n return {\n repository: inspection.repository,\n source: \"transport\",\n policy: structuredClone(options.policy),\n inspectedAt,\n inspection,\n entries,\n complete: inspection.complete,\n usageBytes: inspection.usage.bytes,\n projectedBytes,\n quota: !inspection.complete\n ? \"unknown\"\n : options.policy.maxBytes !== undefined &&\n projectedBytes > options.policy.maxBytes\n ? \"exceeded\"\n : \"within\",\n };\n}\n\nexport async function pruneTransportRetention(\n plan: RecoveryRetentionPlan,\n options: TransportStoreOptions,\n): Promise<RecoveryPruneResult> {\n invariant(plan.complete, \"Cannot prune an incomplete retention plan\");\n retentionPolicy(plan.policy);\n const removed: string[] = [],\n retained = [];\n for (const candidate of plan.entries.filter((entry) => entry.eligible)) {\n const fresh = await planTransportRetention({\n transporter: options.transporter,\n policy: plan.policy,\n repository: plan.repository,\n });\n const entry = fresh.entries.find((entry) => entry.path === candidate.path);\n if (\n !entry?.eligible ||\n entry.revision !== candidate.revision ||\n JSON.stringify(entry.objects) !== JSON.stringify(candidate.objects)\n ) {\n retained.push({ path: candidate.path, reason: \"PLAN_CHANGED\" });\n continue;\n }\n try {\n invariant(entry.revision && entry.objects, \"Missing log revisions\");\n await options.transporter.remove(entry.path, {\n ifRevision: entry.revision,\n });\n for (const object of entry.objects) {\n if (object.key !== entry.path)\n await options.transporter.remove(object.key, {\n ifRevision: object.revision,\n });\n }\n removed.push(entry.path);\n } catch {\n retained.push({\n path: entry.path,\n reason: \"REVALIDATION_OR_REMOVAL_FAILED\",\n });\n }\n }\n return {\n removed,\n retained,\n after: await planTransportRetention({\n transporter: options.transporter,\n policy: plan.policy,\n repository: plan.repository,\n }),\n };\n}\n"]}
|
package/dist/cli/commands.js
CHANGED
|
@@ -1,28 +1,65 @@
|
|
|
1
|
-
import {
|
|
1
|
+
import { Command, CommanderError, Option } from "commander";
|
|
2
2
|
import { recoveryCommand } from "./recovery-command.js";
|
|
3
3
|
import { doctorCommand } from "./doctor-command.js";
|
|
4
4
|
import { imageCommand } from "./image-command.js";
|
|
5
5
|
import { initializeCommand } from "./init-command.js";
|
|
6
|
-
import { cliOptions,
|
|
6
|
+
import { cliOptions, commandOptions } from "./main.constants.js";
|
|
7
7
|
export async function runCli(args = process.argv.slice(2)) {
|
|
8
|
-
const
|
|
9
|
-
|
|
10
|
-
|
|
11
|
-
|
|
12
|
-
|
|
13
|
-
|
|
14
|
-
process.stdout.write(help);
|
|
15
|
-
return;
|
|
16
|
-
}
|
|
17
|
-
const commands = {
|
|
18
|
-
doctor: doctorCommand,
|
|
19
|
-
recovery: recoveryCommand,
|
|
8
|
+
const program = new Command()
|
|
9
|
+
.name("outpost")
|
|
10
|
+
.description("Outpost — sandboxed coding agents and workflows")
|
|
11
|
+
.exitOverride()
|
|
12
|
+
.configureOutput({ writeErr: () => { } });
|
|
13
|
+
const handlers = {
|
|
20
14
|
init: initializeCommand,
|
|
15
|
+
doctor: doctorCommand,
|
|
21
16
|
image: imageCommand,
|
|
17
|
+
recovery: recoveryCommand,
|
|
22
18
|
};
|
|
23
|
-
const name
|
|
24
|
-
|
|
25
|
-
|
|
26
|
-
|
|
19
|
+
for (const [name, definition] of Object.entries(commandOptions)) {
|
|
20
|
+
const path = name.split(" ");
|
|
21
|
+
let command = program;
|
|
22
|
+
for (const part of path) {
|
|
23
|
+
command =
|
|
24
|
+
command.commands.find((item) => item.name() === part) ??
|
|
25
|
+
command.command(part);
|
|
26
|
+
}
|
|
27
|
+
command.description(definition.description);
|
|
28
|
+
for (const key of definition.options) {
|
|
29
|
+
const configuration = cliOptions[key];
|
|
30
|
+
const short = "short" in configuration ? `-${configuration.short}, ` : "";
|
|
31
|
+
command.addOption(new Option(`${short}--${key}${configuration.type === "string" ? " <value>" : ""}`, configuration.description));
|
|
32
|
+
}
|
|
33
|
+
if (name === "init")
|
|
34
|
+
command.addOption(new Option("--no-build", "Skip automatic container image build").default(undefined));
|
|
35
|
+
command.action(async () => {
|
|
36
|
+
const values = {};
|
|
37
|
+
const parsed = command.opts();
|
|
38
|
+
for (const option of command.options) {
|
|
39
|
+
const value = parsed[option.attributeName()];
|
|
40
|
+
if (typeof value === "string" || typeof value === "boolean")
|
|
41
|
+
values[option.long.replace(/^--(?:no-)?/, "")] = value;
|
|
42
|
+
}
|
|
43
|
+
await handlers[path[0]]({
|
|
44
|
+
values: values,
|
|
45
|
+
positionals: path,
|
|
46
|
+
});
|
|
47
|
+
});
|
|
48
|
+
}
|
|
49
|
+
for (const command of program.commands.filter((item) => item.commands.length)) {
|
|
50
|
+
command.allowExcessArguments().action(() => {
|
|
51
|
+
throw new Error(`Unknown command. Run outpost ${command.name()} --help.`);
|
|
52
|
+
});
|
|
53
|
+
}
|
|
54
|
+
try {
|
|
55
|
+
await program.parseAsync(args.length ? [...args] : ["--help"], {
|
|
56
|
+
from: "user",
|
|
57
|
+
});
|
|
58
|
+
}
|
|
59
|
+
catch (error) {
|
|
60
|
+
if (error instanceof CommanderError && error.exitCode === 0)
|
|
61
|
+
return;
|
|
62
|
+
throw error;
|
|
63
|
+
}
|
|
27
64
|
}
|
|
28
65
|
//# sourceMappingURL=commands.js.map
|
package/dist/cli/commands.js.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"commands.js","sourceRoot":"","sources":["../../src/cli/commands.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,
|
|
1
|
+
{"version":3,"file":"commands.js","sourceRoot":"","sources":["../../src/cli/commands.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,cAAc,EAAE,MAAM,EAAE,MAAM,WAAW,CAAC;AAC5D,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AACxD,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AACtD,OAAO,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAGjE,MAAM,CAAC,KAAK,UAAU,MAAM,CAC1B,OAA0B,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;IAE/C,MAAM,OAAO,GAAG,IAAI,OAAO,EAAE;SAC1B,IAAI,CAAC,SAAS,CAAC;SACf,WAAW,CAAC,iDAAiD,CAAC;SAC9D,YAAY,EAAE;SACd,eAAe,CAAC,EAAE,QAAQ,EAAE,GAAG,EAAE,GAAE,CAAC,EAAE,CAAC,CAAC;IAC3C,MAAM,QAAQ,GAAyC;QACrD,IAAI,EAAE,iBAAiB;QACvB,MAAM,EAAE,aAAa;QACrB,KAAK,EAAE,YAAY;QACnB,QAAQ,EAAE,eAAe;KAC1B,CAAC;IACF,KAAK,MAAM,CAAC,IAAI,EAAE,UAAU,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,cAAc,CAAC,EAAE,CAAC;QAChE,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC7B,IAAI,OAAO,GAAG,OAAO,CAAC;QACtB,KAAK,MAAM,IAAI,IAAI,IAAI,EAAE,CAAC;YACxB,OAAO;gBACL,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,IAAI,CAAC;oBACrD,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAC1B,CAAC;QACD,OAAO,CAAC,WAAW,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC;QAC5C,KAAK,MAAM,GAAG,IAAI,UAAU,CAAC,OAAO,EAAE,CAAC;YACrC,MAAM,aAAa,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC;YACtC,MAAM,KAAK,GAAG,OAAO,IAAI,aAAa,CAAC,CAAC,CAAC,IAAI,aAAa,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;YAC1E,OAAO,CAAC,SAAS,CACf,IAAI,MAAM,CACR,GAAG,KAAK,KAAK,GAAG,GAAG,aAAa,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,EAAE,EACtE,aAAa,CAAC,WAAW,CAC1B,CACF,CAAC;QACJ,CAAC;QACD,IAAI,IAAI,KAAK,MAAM;YACjB,OAAO,CAAC,SAAS,CACf,IAAI,MAAM,CACR,YAAY,EACZ,sCAAsC,CACvC,CAAC,OAAO,CAAC,SAAS,CAAC,CACrB,CAAC;QACJ,OAAO,CAAC,MAAM,CAAC,KAAK,IAAI,EAAE;YACxB,MAAM,MAAM,GAAqC,EAAE,CAAC;YACpD,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,EAA2B,CAAC;YACvD,KAAK,MAAM,MAAM,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;gBACrC,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,aAAa,EAAE,CAAC,CAAC;gBAC7C,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,KAAK,KAAK,SAAS;oBACzD,MAAM,CAAC,MAAM,CAAC,IAAK,CAAC,OAAO,CAAC,aAAa,EAAE,EAAE,CAAC,CAAC,GAAG,KAAK,CAAC;YAC5D,CAAC;YACD,MAAM,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAE,CAAE,CAAC;gBACxB,MAAM,EAAE,MAAmB;gBAC3B,WAAW,EAAE,IAAI;aAClB,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC;IACD,KAAK,MAAM,OAAO,IAAI,OAAO,CAAC,QAAQ,CAAC,MAAM,CAC3C,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAC/B,EAAE,CAAC;QACF,OAAO,CAAC,oBAAoB,EAAE,CAAC,MAAM,CAAC,GAAG,EAAE;YACzC,MAAM,IAAI,KAAK,CAAC,gCAAgC,OAAO,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;QAC5E,CAAC,CAAC,CAAC;IACL,CAAC;IACD,IAAI,CAAC;QACH,MAAM,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE;YAC7D,IAAI,EAAE,MAAM;SACb,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,cAAc,IAAI,KAAK,CAAC,QAAQ,KAAK,CAAC;YAAE,OAAO;QACpE,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC","sourcesContent":["import { Command, CommanderError, Option } from \"commander\";\nimport { recoveryCommand } from \"./recovery-command.ts\";\nimport { doctorCommand } from \"./doctor-command.ts\";\nimport { imageCommand } from \"./image-command.ts\";\nimport { initializeCommand } from \"./init-command.ts\";\nimport { cliOptions, commandOptions } from \"./main.constants.ts\";\nimport type { CliCommand, CliValues } from \"./main.types.ts\";\n\nexport async function runCli(\n args: readonly string[] = process.argv.slice(2),\n): Promise<void> {\n const program = new Command()\n .name(\"outpost\")\n .description(\"Outpost — sandboxed coding agents and workflows\")\n .exitOverride()\n .configureOutput({ writeErr: () => {} });\n const handlers: Readonly<Record<string, CliCommand>> = {\n init: initializeCommand,\n doctor: doctorCommand,\n image: imageCommand,\n recovery: recoveryCommand,\n };\n for (const [name, definition] of Object.entries(commandOptions)) {\n const path = name.split(\" \");\n let command = program;\n for (const part of path) {\n command =\n command.commands.find((item) => item.name() === part) ??\n command.command(part);\n }\n command.description(definition.description);\n for (const key of definition.options) {\n const configuration = cliOptions[key];\n const short = \"short\" in configuration ? `-${configuration.short}, ` : \"\";\n command.addOption(\n new Option(\n `${short}--${key}${configuration.type === \"string\" ? \" <value>\" : \"\"}`,\n configuration.description,\n ),\n );\n }\n if (name === \"init\")\n command.addOption(\n new Option(\n \"--no-build\",\n \"Skip automatic container image build\",\n ).default(undefined),\n );\n command.action(async () => {\n const values: Record<string, string | boolean> = {};\n const parsed = command.opts<Record<string, unknown>>();\n for (const option of command.options) {\n const value = parsed[option.attributeName()];\n if (typeof value === \"string\" || typeof value === \"boolean\")\n values[option.long!.replace(/^--(?:no-)?/, \"\")] = value;\n }\n await handlers[path[0]!]!({\n values: values as CliValues,\n positionals: path,\n });\n });\n }\n for (const command of program.commands.filter(\n (item) => item.commands.length,\n )) {\n command.allowExcessArguments().action(() => {\n throw new Error(`Unknown command. Run outpost ${command.name()} --help.`);\n });\n }\n try {\n await program.parseAsync(args.length ? [...args] : [\"--help\"], {\n from: \"user\",\n });\n } catch (error) {\n if (error instanceof CommanderError && error.exitCode === 0) return;\n throw error;\n }\n}\n"]}
|
|
@@ -0,0 +1,13 @@
|
|
|
1
|
+
export declare const authenticationRecipes: {
|
|
2
|
+
readonly codex: {
|
|
3
|
+
readonly environment: "OPENAI_API_KEY=\n";
|
|
4
|
+
readonly login: "const {spawnSync}=require(\"node:child_process\"); const {existsSync}=require(\"node:fs\"); const {join}=require(\"node:path\"); const {homedir}=require(\"node:os\"); const installed=join(homedir(),\".outpost-tools\",\"bin\",\"codex\"); const result=spawnSync(existsSync(installed)?installed:\"codex\",[\"login\",\"--with-api-key\"],{stdio:\"inherit\",shell:process.platform===\"win32\"}); process.exit(result.status ?? 1);";
|
|
5
|
+
readonly seed: "const {mkdirSync,writeFileSync,readFileSync,chmodSync}=require(\"node:fs\"); const {join}=require(\"node:path\"); const {homedir}=require(\"node:os\"); const directory=join(homedir(),\".codex\"); mkdirSync(directory,{recursive:true,mode:0o700}); const target=join(directory,\"auth.json\"); writeFileSync(target,readFileSync(0),{mode:0o600}); chmodSync(target,0o600);";
|
|
6
|
+
};
|
|
7
|
+
readonly claude: {
|
|
8
|
+
readonly environment: "ANTHROPIC_API_KEY=\n";
|
|
9
|
+
};
|
|
10
|
+
readonly gemini: {
|
|
11
|
+
readonly environment: "GEMINI_API_KEY=\n";
|
|
12
|
+
};
|
|
13
|
+
};
|
|
@@ -0,0 +1,10 @@
|
|
|
1
|
+
export const authenticationRecipes = {
|
|
2
|
+
codex: {
|
|
3
|
+
environment: "OPENAI_API_KEY=\n",
|
|
4
|
+
login: 'const {spawnSync}=require("node:child_process"); const {existsSync}=require("node:fs"); const {join}=require("node:path"); const {homedir}=require("node:os"); const installed=join(homedir(),".outpost-tools","bin","codex"); const result=spawnSync(existsSync(installed)?installed:"codex",["login","--with-api-key"],{stdio:"inherit",shell:process.platform==="win32"}); process.exit(result.status ?? 1);',
|
|
5
|
+
seed: 'const {mkdirSync,writeFileSync,readFileSync,chmodSync}=require("node:fs"); const {join}=require("node:path"); const {homedir}=require("node:os"); const directory=join(homedir(),".codex"); mkdirSync(directory,{recursive:true,mode:0o700}); const target=join(directory,"auth.json"); writeFileSync(target,readFileSync(0),{mode:0o600}); chmodSync(target,0o600);',
|
|
6
|
+
},
|
|
7
|
+
claude: { environment: "ANTHROPIC_API_KEY=\n" },
|
|
8
|
+
gemini: { environment: "GEMINI_API_KEY=\n" },
|
|
9
|
+
};
|
|
10
|
+
//# sourceMappingURL=init-authentication.constants.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"init-authentication.constants.js","sourceRoot":"","sources":["../../src/cli/init-authentication.constants.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,qBAAqB,GAAG;IACnC,KAAK,EAAE;QACL,WAAW,EAAE,mBAAmB;QAChC,KAAK,EACH,iZAAiZ;QACnZ,IAAI,EAAE,sWAAsW;KAC7W;IACD,MAAM,EAAE,EAAE,WAAW,EAAE,sBAAsB,EAAE;IAC/C,MAAM,EAAE,EAAE,WAAW,EAAE,mBAAmB,EAAE;CACpC,CAAC","sourcesContent":["export const authenticationRecipes = {\n codex: {\n environment: \"OPENAI_API_KEY=\\n\",\n login:\n 'const {spawnSync}=require(\"node:child_process\"); const {existsSync}=require(\"node:fs\"); const {join}=require(\"node:path\"); const {homedir}=require(\"node:os\"); const installed=join(homedir(),\".outpost-tools\",\"bin\",\"codex\"); const result=spawnSync(existsSync(installed)?installed:\"codex\",[\"login\",\"--with-api-key\"],{stdio:\"inherit\",shell:process.platform===\"win32\"}); process.exit(result.status ?? 1);',\n seed: 'const {mkdirSync,writeFileSync,readFileSync,chmodSync}=require(\"node:fs\"); const {join}=require(\"node:path\"); const {homedir}=require(\"node:os\"); const directory=join(homedir(),\".codex\"); mkdirSync(directory,{recursive:true,mode:0o700}); const target=join(directory,\"auth.json\"); writeFileSync(target,readFileSync(0),{mode:0o600}); chmodSync(target,0o600);',\n },\n claude: { environment: \"ANTHROPIC_API_KEY=\\n\" },\n gemini: { environment: \"GEMINI_API_KEY=\\n\" },\n} as const;\n"]}
|
|
@@ -0,0 +1,4 @@
|
|
|
1
|
+
import type { InitOptions } from "./scaffold.types.ts";
|
|
2
|
+
export declare function authenticationEnvironment(options: InitOptions): string;
|
|
3
|
+
export declare function authenticationInstructions(options: InitOptions): string;
|
|
4
|
+
export declare function authenticationSource(options: InitOptions): string;
|
|
@@ -0,0 +1,43 @@
|
|
|
1
|
+
import { authenticationRecipes } from "./init-authentication.constants.js";
|
|
2
|
+
export function authenticationEnvironment(options) {
|
|
3
|
+
if (options.baseUrl)
|
|
4
|
+
return `${options.apiKeyEnvironment ?? "OPENAI_API_KEY"}=\n`;
|
|
5
|
+
if (options.authentication === "login")
|
|
6
|
+
return "";
|
|
7
|
+
if (options.authentication === "oauth-token")
|
|
8
|
+
return "CLAUDE_CODE_OAUTH_TOKEN=\n";
|
|
9
|
+
return authenticationRecipes[options.agent ?? "codex"].environment;
|
|
10
|
+
}
|
|
11
|
+
export function authenticationInstructions(options) {
|
|
12
|
+
if (options.authentication === "login")
|
|
13
|
+
return "Run codex login on the host. For isolated providers, use file credential storage; the generated script copies auth.json into the private sandbox home.";
|
|
14
|
+
if (options.authentication === "oauth-token")
|
|
15
|
+
return "Run claude setup-token on the host, then set CLAUDE_CODE_OAUTH_TOKEN in the workflow .env or parent environment. This uses your Claude subscription.";
|
|
16
|
+
return ("Set " +
|
|
17
|
+
authenticationEnvironment(options).trim().replace("=", "") +
|
|
18
|
+
" in the workflow .env or parent environment. API usage is billed separately from subscriptions.");
|
|
19
|
+
}
|
|
20
|
+
export function authenticationSource(options) {
|
|
21
|
+
const agent = options.agent ?? "codex";
|
|
22
|
+
if (options.authentication === "login") {
|
|
23
|
+
if (options.provider === "local")
|
|
24
|
+
return "const authentication = {};";
|
|
25
|
+
return `const seed = await readFile(resolve(process.env.CODEX_HOME || resolve(homedir(), ".codex"), "auth.json"), "utf8");
|
|
26
|
+
try { JSON.parse(seed); } catch { throw new Error("Invalid Codex authentication file. Run codex login again with file credential storage."); }
|
|
27
|
+
const authentication = { sandboxReady: [{ executable: "node", arguments: ["-e", ${JSON.stringify(authenticationRecipes.codex.seed)}], stdin: seed }] };`;
|
|
28
|
+
}
|
|
29
|
+
const key = authenticationEnvironment(options).trim().replace("=", "");
|
|
30
|
+
const conflict = agent === "claude"
|
|
31
|
+
? key === "ANTHROPIC_API_KEY"
|
|
32
|
+
? "CLAUDE_CODE_OAUTH_TOKEN"
|
|
33
|
+
: "ANTHROPIC_API_KEY"
|
|
34
|
+
: undefined;
|
|
35
|
+
const check = `if (!variables[${JSON.stringify(key)}]) throw new Error(${JSON.stringify(`Missing ${key}. Configure the workflow .env or parent environment before starting a sandbox.`)});`;
|
|
36
|
+
const guard = conflict
|
|
37
|
+
? `\nif (variables[${JSON.stringify(conflict)}]) throw new Error("Conflicting Claude authentication methods. Keep only the selected credential in the workflow environment.");`
|
|
38
|
+
: "";
|
|
39
|
+
if (agent !== "codex" || options.baseUrl)
|
|
40
|
+
return `${check}${guard}\nconst authentication = {};`;
|
|
41
|
+
return `${check}\nconst authentication = { sandboxReady: [{ executable: "node", arguments: ["-e", ${JSON.stringify(authenticationRecipes.codex.login)}], stdin: variables.OPENAI_API_KEY }] };`;
|
|
42
|
+
}
|
|
43
|
+
//# sourceMappingURL=init-authentication.js.map
|