@git.zone/cli 3.2.0 → 4.0.0

package/dist_ts/mod_services/classes.dockercontainer.d.ts

@@ -1,3 +1,4 @@
+import { type TServiceName } from './classes.servicedatamarker.js';
 export type ContainerStatus = 'running' | 'stopped' | 'not_exists';
 export interface IDockerUlimit {
     soft: number;
@@ -27,6 +28,8 @@ export interface IDockerRunOptions {
 export interface IDockerCreateArgvOptions extends Omit<IDockerRunOptions, 'command'> {
     /** Container command passed as exact argv entries. */
     command?: readonly string[];
+    user?: string;
+    entrypoint?: string;
 }
 export interface IDockerExecArgvOptions {
     /** Hard per-process wall-clock bound. */
@@ -42,6 +45,27 @@ export interface IDockerArgvExecutionErrorOptions {
     exitCode?: number;
     signal?: NodeJS.Signals;
 }
+export interface IFencedBindOperationOptions {
+    image: string;
+    hostPath: string;
+    containerPath: string;
+    entrypoint: string;
+    command: readonly string[];
+    labels: Record<string, string>;
+    executionOptions: () => IDockerExecArgvOptions;
+    rollbackTimeoutMs?: number;
+}
+export declare const fencedBindOperationSpecLabel = "git.zone.operation-spec";
+export declare const fencedBindOperationInvocationLabel = "git.zone.operation-invocation";
+export declare const fencedBindOperationSpec = "1";
+export declare const fencedBindOperationStaleAfterMs = 60000;
+/** One Docker-reserved lock name for every canonical host bind target. */
+export declare const getFencedBindOperationName: (hostPathArg: string) => string;
+export interface IRemoveDataDirectoryOptions {
+    projectPath: string;
+    service: TServiceName;
+    preDeleteCheck?: () => Promise<void>;
+}
 /** Sanitised failure from the shell-free Docker execution path. */
 export declare class DockerArgvExecutionError extends Error {
     readonly exitCode?: number;
@@ -75,8 +99,9 @@ export declare class DockerContainer {
      * @git.zone/tsdocker.
      */
     private queryTimeoutSeconds;
-    /** Longer bound for privileged cleanup, which may delete a large tree. */
+    /** Longer bound for root-helper cleanup, which may delete a large tree. */
     private cleanupTimeoutSeconds;
+    private bindOperationDelay;
     constructor();
     /** `docker` prefixed with a hard wall-clock bound. */
     private bounded;
@@ -93,6 +118,17 @@ export declare class DockerContainer {
      * command errors. The returned stdout contains Docker's immutable id.
      */
     createArgv(optionsArg: IDockerCreateArgvOptions, executionOptionsArg: IDockerExecArgvOptions): Promise<IDockerExecArgvResult>;
+    private assertFencedBindInspection;
+    private assertRecoverableFencedBindInspection;
+    private readFencedBindInspection;
+    private inspectFencedBindOperation;
+    private discoverFencedBindOperationId;
+    private reclaimStaleFencedBindOperation;
+    /**
+     * Run one root bind-mount operation with a stopped-create and immutable-ID fence.
+     * Every ambiguous or failed path proves ownership again before forced removal.
+     */
+    runFencedBindOperation(optionsArg: IFencedBindOperationOptions): Promise<void>;
     /**
      * Check if Docker is installed and available
      */
@@ -134,11 +170,18 @@ export declare class DockerContainer {
      * True when an image is already present locally.
      */
     imageExists(imageArg: string): Promise<boolean>;
+    /** Exact persisted quarantine path for an interrupted deletion, if present. */
+    getPendingDataDeletionPath(projectPathArg: string, serviceArg: TServiceName): Promise<string | undefined>;
+    private getDataCleanupOperation;
+    private writeServiceDataDeletionIntent;
+    private assertRegularDeletionDirectory;
+    private renameDataDirectory;
+    private deleteDataDirectory;
     /**
      * Remove a service data directory, escalating to a root one-off container
      * when the invoking user cannot delete the contents.
      *
-     * Service containers write as their own uid (mongod as 999, MinIO as root)
+     * Service containers write as their own uid
      * with restrictive modes, so a plain recursive delete only removes part of the
      * tree. For MongoDB that left a half-deleted, corrupt WiredTiger dataset that
      * crash-looped on the next start — so a partial delete is worse than none.
@@ -147,7 +190,8 @@ export declare class DockerContainer {
      * The one-off container mounts only the target directory, so `rm -rf` inside
      * it cannot reach anything else on the host.
      */
-    removeDataDirectory(hostPathArg: string, imageArg: string): Promise<void>;
+    removeDataDirectory(hostPathArg: string, imageArg: string, optionsArg: IRemoveDataDirectoryOptions): Promise<boolean>;
+    private removeDataDirectoryLocked;
     /**
      * Execute a command in a running container
      */
@@ -209,4 +253,7 @@ export declare class DockerContainer {
      * mounted by anything running is never a deletion candidate.
      */
     listRunningMountSources(): Promise<string[]>;
+    /** Resolved host bind paths configured on running and stopped containers. */
+    listAllMountSources(): Promise<string[]>;
+    private listMountSources;
 }