@git.zone/cli 3.2.1 → 5.0.0

package/dist_ts/mod_services/classes.globalregistrystore.js

@@ -0,0 +1,156 @@
+import * as plugins from '../plugins.js';
+import { InterProcessLock } from './classes.interprocesslock.js';
+const isPlainObject = (valueArg) => {
+    return typeof valueArg === 'object' && valueArg !== null && !Array.isArray(valueArg);
+};
+const assertAllowedKeys = (valueArg, allowedKeysArg, contextArg) => {
+    if (Object.keys(valueArg).some((keyArg) => !allowedKeysArg.includes(keyArg))) {
+        throw new Error(`Global services registry ${contextArg} contains unsupported fields.`);
+    }
+};
+const assertOptionalStrings = (valueArg, keysArg, contextArg) => {
+    for (const key of keysArg) {
+        if (valueArg[key] !== undefined && (typeof valueArg[key] !== 'string' || !valueArg[key])) {
+            throw new Error(`Global services registry ${contextArg}.${key} must be a non-empty string.`);
+        }
+    }
+};
+const assertOptionalNumbers = (valueArg, keysArg, contextArg) => {
+    for (const key of keysArg) {
+        const value = valueArg[key];
+        if (value !== undefined && (typeof value !== 'number' || !Number.isFinite(value))) {
+            throw new Error(`Global services registry ${contextArg}.${key} must be a finite number.`);
+        }
+    }
+};
+/** Validate the canonical runtime schema after startup migrations have completed. */
+export const assertCanonicalGlobalRegistryData = (dataArg) => {
+    if (!isPlainObject(dataArg)) {
+        throw new Error('Global services registry root must be a JSON object.');
+    }
+    assertAllowedKeys(dataArg, ['schemaVersion', 'projects'], 'root');
+    if (dataArg.schemaVersion !== 2 || !isPlainObject(dataArg.projects)) {
+        throw new Error('Global services registry requires canonical schema version 2.');
+    }
+    for (const [projectPath, rawProject] of Object.entries(dataArg.projects)) {
+        if (!isPlainObject(rawProject)) {
+            throw new Error(`Global services registry project ${projectPath} must be a JSON object.`);
+        }
+        assertAllowedKeys(rawProject, [
+            'projectPath',
+            'projectName',
+            'containers',
+            'ports',
+            'legacy',
+            'enabledServices',
+            'lastActive',
+        ], `project ${projectPath}`);
+        if (typeof rawProject.projectPath !== 'string' ||
+            !rawProject.projectPath ||
+            plugins.path.resolve(rawProject.projectPath) !== plugins.path.resolve(projectPath)) {
+            throw new Error(`Global services registry project ${projectPath} has an invalid or inconsistent path.`);
+        }
+        if (typeof rawProject.projectName !== 'string' || !rawProject.projectName) {
+            throw new Error(`Global services registry project ${projectPath} has an invalid name.`);
+        }
+        if (!isPlainObject(rawProject.containers) || !isPlainObject(rawProject.ports)) {
+            throw new Error(`Global services registry project ${projectPath} requires container and port objects.`);
+        }
+        if (!Array.isArray(rawProject.enabledServices)) {
+            throw new Error(`Global services registry project ${projectPath} has invalid enabled services.`);
+        }
+        const canonicalServices = ['mongodb', 'objectstorage', 'elasticsearch'];
+        if (!rawProject.enabledServices.every((serviceArg) => typeof serviceArg === 'string' && canonicalServices.includes(serviceArg)) ||
+            new Set(rawProject.enabledServices).size !== rawProject.enabledServices.length) {
+            throw new Error(`Global services registry project ${projectPath} has noncanonical enabled services.`);
+        }
+        if (typeof rawProject.lastActive !== 'number' || !Number.isFinite(rawProject.lastActive)) {
+            throw new Error(`Global services registry project ${projectPath} has an invalid lastActive value.`);
+        }
+        const rawContainers = rawProject.containers;
+        const rawPorts = rawProject.ports;
+        assertAllowedKeys(rawContainers, ['mongo', 'objectstorage', 'elasticsearch'], `project ${projectPath} containers`);
+        assertOptionalStrings(rawContainers, ['mongo', 'objectstorage', 'elasticsearch'], `project ${projectPath}.containers`);
+        assertAllowedKeys(rawPorts, ['mongo', 's3', 's3Ui', 'elasticsearch'], `project ${projectPath} ports`);
+        assertOptionalNumbers(rawPorts, ['mongo', 's3', 's3Ui', 'elasticsearch'], `project ${projectPath}.ports`);
+        if (rawProject.legacy !== undefined) {
+            if (!isPlainObject(rawProject.legacy)) {
+                throw new Error(`Global services registry project ${projectPath} has invalid legacy evidence.`);
+            }
+            assertAllowedKeys(rawProject.legacy, ['minioContainer'], `project ${projectPath} legacy`);
+            assertOptionalStrings(rawProject.legacy, ['minioContainer'], `project ${projectPath}.legacy`);
+            if (!rawProject.legacy.minioContainer) {
+                throw new Error(`Global services registry project ${projectPath} has empty legacy evidence.`);
+            }
+        }
+    }
+    return dataArg;
+};
+/** Raw, atomically replaced registry storage shared by runtime and migrations. */
+export class GlobalRegistryStore {
+    filePath;
+    lock;
+    constructor(optionsArg = {}) {
+        this.filePath = plugins.path.resolve(optionsArg.filePath ||
+            plugins.path.join(plugins.smartpath.get.home(), '.smartconfig', 'kv', 'gitzone-services.json'));
+        this.lock = new InterProcessLock({
+            lockPath: `${this.filePath}.lock`,
+            description: 'Global services registry',
+            timeoutMs: optionsArg.lockTimeoutMs,
+            pollMs: optionsArg.lockPollMs,
+        });
+    }
+    async readRaw() {
+        let content;
+        try {
+            content = await plugins.fs.readFile(this.filePath, 'utf8');
+        }
+        catch (error) {
+            if (error.code === 'ENOENT') {
+                return {};
+            }
+            throw new Error('Global services registry could not be read.', { cause: error });
+        }
+        try {
+            return JSON.parse(content);
+        }
+        catch (error) {
+            throw new Error('Global services registry contains invalid JSON.', { cause: error });
+        }
+    }
+    async readCanonical() {
+        return assertCanonicalGlobalRegistryData(await this.readRaw());
+    }
+    async transact(operationArg) {
+        return this.lock.runExclusive(async () => {
+            const transaction = await operationArg(await this.readRaw());
+            if (transaction.writeData) {
+                await this.writeAtomic(assertCanonicalGlobalRegistryData(transaction.writeData));
+            }
+            return transaction.result;
+        });
+    }
+    async writeAtomic(dataArg) {
+        await plugins.fs.mkdir(plugins.path.dirname(this.filePath), { recursive: true });
+        const tempPath = `${this.filePath}.tmp-${process.pid}-${plugins.crypto
+            .randomBytes(12)
+            .toString('hex')}`;
+        let handle;
+        try {
+            handle = await plugins.fs.open(tempPath, 'wx', 0o600);
+            await handle.writeFile(`${JSON.stringify(dataArg, null, 2)}\n`, 'utf8');
+            await handle.sync();
+            await handle.close();
+            handle = undefined;
+            await plugins.fs.rename(tempPath, this.filePath);
+        }
+        catch (error) {
+            await handle?.close().catch(() => { });
+            await plugins.fs.rm(tempPath, { force: true }).catch(() => { });
+            throw new Error('Global services registry could not be written atomically.', {
+                cause: error,
+            });
+        }
+    }
+}
+//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiY2xhc3Nlcy5nbG9iYWxyZWdpc3RyeXN0b3JlLmpzIiwic291cmNlUm9vdCI6IiIsInNvdXJjZXMiOlsiLi4vLi4vLi4vdHMvbW9kX3NlcnZpY2VzL2NsYXNzZXMuZ2xvYmFscmVnaXN0cnlzdG9yZS50cyJdLCJuYW1lcyI6W10sIm1hcHBpbmdzIjoiQUFBQSxPQUFPLEtBQUssT0FBTyxNQUFNLGVBQWUsQ0FBQztBQUN6QyxPQUFPLEVBQUUsZ0JBQWdCLEVBQUUsTUFBTSwrQkFBK0IsQ0FBQztBQTZCakUsTUFBTSxhQUFhLEdBQUcsQ0FBQyxRQUFpQixFQUF1QyxFQUFFO0lBQy9FLE9BQU8sT0FBTyxRQUFRLEtBQUssUUFBUSxJQUFJLFFBQVEsS0FBSyxJQUFJLElBQUksQ0FBQyxLQUFLLENBQUMsT0FBTyxDQUFDLFFBQVEsQ0FBQyxDQUFDO0FBQ3ZGLENBQUMsQ0FBQztBQUVGLE1BQU0saUJBQWlCLEdBQUcsQ0FDeEIsUUFBaUMsRUFDakMsY0FBaUMsRUFDakMsVUFBa0IsRUFDWixFQUFFO0lBQ1IsSUFBSSxNQUFNLENBQUMsSUFBSSxDQUFDLFFBQVEsQ0FBQyxDQUFDLElBQUksQ0FBQyxDQUFDLE1BQU0sRUFBRSxFQUFFLENBQUMsQ0FBQyxjQUFjLENBQUMsUUFBUSxDQUFDLE1BQU0sQ0FBQyxDQUFDLEVBQUUsQ0FBQztRQUM3RSxNQUFNLElBQUksS0FBSyxDQUFDLDRCQUE0QixVQUFVLCtCQUErQixDQUFDLENBQUM7SUFDekYsQ0FBQztBQUNILENBQUMsQ0FBQztBQUVGLE1BQU0scUJBQXFCLEdBQUcsQ0FDNUIsUUFBaUMsRUFDakMsT0FBMEIsRUFDMUIsVUFBa0IsRUFDWixFQUFFO0lBQ1IsS0FBSyxNQUFNLEdBQUcsSUFBSSxPQUFPLEVBQUUsQ0FBQztRQUMxQixJQUFJLFFBQVEsQ0FBQyxHQUFHLENBQUMsS0FBSyxTQUFTLElBQUksQ0FBQyxPQUFPLFFBQVEsQ0FBQyxHQUFHLENBQUMsS0FBSyxRQUFRLElBQUksQ0FBQyxRQUFRLENBQUMsR0FBRyxDQUFDLENBQUMsRUFBRSxDQUFDO1lBQ3pGLE1BQU0sSUFBSSxLQUFLLENBQ2IsNEJBQTRCLFVBQVUsSUFBSSxHQUFHLDhCQUE4QixDQUM1RSxDQUFDO1FBQ0osQ0FBQztJQUNILENBQUM7QUFDSCxDQUFDLENBQUM7QUFFRixNQUFNLHFCQUFxQixHQUFHLENBQzVCLFFBQWlDLEVBQ2pDLE9BQTBCLEVBQzFCLFVBQWtCLEVBQ1osRUFBRTtJQUNSLEtBQUssTUFBTSxHQUFHLElBQUksT0FBTyxFQUFFLENBQUM7UUFDMUIsTUFBTSxLQUFLLEdBQUcsUUFBUSxDQUFDLEdBQUcsQ0FBQyxDQUFDO1FBQzVCLElBQUksS0FBSyxLQUFLLFNBQVMsSUFBSSxDQUFDLE9BQU8sS0FBSyxLQUFLLFFBQVEsSUFBSSxDQUFDLE1BQU0sQ0FBQyxRQUFRLENBQUMsS0FBSyxDQUFDLENBQUMsRUFBRSxDQUFDO1lBQ2xGLE1BQU0sSUFBSSxLQUFLLENBQ2IsNEJBQTRCLFVBQVUsSUFBSSxHQUFHLDJCQUEyQixDQUN6RSxDQUFDO1FBQ0osQ0FBQztJQUNILENBQUM7QUFDSCxDQUFDLENBQUM7QUFFRixxRkFBcUY7QUFDckYsTUFBTSxDQUFDLE1BQU0saUNBQWlDLEdBQUcsQ0FDL0MsT0FBZ0IsRUFDSyxFQUFFO0lBQ3ZCLElBQUksQ0FBQyxhQUFhLENBQUMsT0FBTyxDQUFDLEVBQUUsQ0FBQztRQUM1QixNQUFNLElBQUksS0FBSyxDQUFDLHNEQUFzRCxDQUFDLENBQUM7SUFDMUUsQ0FBQztJQUNELGlCQUFpQixDQUFDLE9BQU8sRUFBRSxDQUFDLGVBQWUsRUFBRSxVQUFVLENBQUMsRUFBRSxNQUFNLENBQUMsQ0FBQztJQUNsRSxJQUFJLE9BQU8sQ0FBQyxhQUFhLEtBQUssQ0FBQyxJQUFJLENBQUMsYUFBYSxDQUFDLE9BQU8sQ0FBQyxRQUFRLENBQUMsRUFBRSxDQUFDO1FBQ3BFLE1BQU0sSUFBSSxLQUFLLENBQUMsK0RBQStELENBQUMsQ0FBQztJQUNuRixDQUFDO0lBQ0QsS0FBSyxNQUFNLENBQUMsV0FBVyxFQUFFLFVBQVUsQ0FBQyxJQUFJLE1BQU0sQ0FBQyxPQUFPLENBQUMsT0FBTyxDQUFDLFFBQVEsQ0FBQyxFQUFFLENBQUM7UUFDekUsSUFBSSxDQUFDLGFBQWEsQ0FBQyxVQUFVLENBQUMsRUFBRSxDQUFDO1lBQy9CLE1BQU0sSUFBSSxLQUFLLENBQ2Isb0NBQW9DLFdBQVcseUJBQXlCLENBQ3pFLENBQUM7UUFDSixDQUFDO1FBQ0QsaUJBQWlCLENBQ2YsVUFBVSxFQUNWO1lBQ0UsYUFBYTtZQUNiLGFBQWE7WUFDYixZQUFZO1lBQ1osT0FBTztZQUNQLFFBQVE7WUFDUixpQkFBaUI7WUFDakIsWUFBWTtTQUNiLEVBQ0QsV0FBVyxXQUFXLEVBQUUsQ0FDekIsQ0FBQztRQUNGLElBQ0UsT0FBTyxVQUFVLENBQUMsV0FBVyxLQUFLLFFBQVE7WUFDMUMsQ0FBQyxVQUFVLENBQUMsV0FBVztZQUN2QixPQUFPLENBQUMsSUFBSSxDQUFDLE9BQU8sQ0FBQyxVQUFVLENBQUMsV0FBVyxDQUFDLEtBQUssT0FBTyxDQUFDLElBQUksQ0FBQyxPQUFPLENBQUMsV0FBVyxDQUFDLEVBQ2xGLENBQUM7WUFDRCxNQUFNLElBQUksS0FBSyxDQUNiLG9DQUFvQyxXQUFXLHVDQUF1QyxDQUN2RixDQUFDO1FBQ0osQ0FBQztRQUNELElBQUksT0FBTyxVQUFVLENBQUMsV0FBVyxLQUFLLFFBQVEsSUFBSSxDQUFDLFVBQVUsQ0FBQyxXQUFXLEVBQUUsQ0FBQztZQUMxRSxNQUFNLElBQUksS0FBSyxDQUNiLG9DQUFvQyxXQUFXLHVCQUF1QixDQUN2RSxDQUFDO1FBQ0osQ0FBQztRQUNELElBQUksQ0FBQyxhQUFhLENBQUMsVUFBVSxDQUFDLFVBQVUsQ0FBQyxJQUFJLENBQUMsYUFBYSxDQUFDLFVBQVUsQ0FBQyxLQUFLLENBQUMsRUFBRSxDQUFDO1lBQzlFLE1BQU0sSUFBSSxLQUFLLENBQ2Isb0NBQW9DLFdBQVcsdUNBQXVDLENBQ3ZGLENBQUM7UUFDSixDQUFDO1FBQ0QsSUFBSSxDQUFDLEtBQUssQ0FBQyxPQUFPLENBQUMsVUFBVSxDQUFDLGVBQWUsQ0FBQyxFQUFFLENBQUM7WUFDL0MsTUFBTSxJQUFJLEtBQUssQ0FDYixvQ0FBb0MsV0FBVyxnQ0FBZ0MsQ0FDaEYsQ0FBQztRQUNKLENBQUM7UUFDRCxNQUFNLGlCQUFpQixHQUFHLENBQUMsU0FBUyxFQUFFLGVBQWUsRUFBRSxlQUFlLENBQUMsQ0FBQztRQUN4RSxJQUNFLENBQUMsVUFBVSxDQUFDLGVBQWUsQ0FBQyxLQUFLLENBQy9CLENBQUMsVUFBVSxFQUFFLEVBQUUsQ0FDYixPQUFPLFVBQVUsS0FBSyxRQUFRLElBQUksaUJBQWlCLENBQUMsUUFBUSxDQUFDLFVBQVUsQ0FBQyxDQUMzRTtZQUNELElBQUksR0FBRyxDQUFDLFVBQVUsQ0FBQyxlQUFlLENBQUMsQ0FBQyxJQUFJLEtBQUssVUFBVSxDQUFDLGVBQWUsQ0FBQyxNQUFNLEVBQzlFLENBQUM7WUFDRCxNQUFNLElBQUksS0FBSyxDQUNiLG9DQUFvQyxXQUFXLHFDQUFxQyxDQUNyRixDQUFDO1FBQ0osQ0FBQztRQUNELElBQUksT0FBTyxVQUFVLENBQUMsVUFBVSxLQUFLLFFBQVEsSUFBSSxDQUFDLE1BQU0sQ0FBQyxRQUFRLENBQUMsVUFBVSxDQUFDLFVBQVUsQ0FBQyxFQUFFLENBQUM7WUFDekYsTUFBTSxJQUFJLEtBQUssQ0FDYixvQ0FBb0MsV0FBVyxtQ0FBbUMsQ0FDbkYsQ0FBQztRQUNKLENBQUM7UUFDRCxNQUFNLGFBQWEsR0FBRyxVQUFVLENBQUMsVUFBVSxDQUFDO1FBQzVDLE1BQU0sUUFBUSxHQUFHLFVBQVUsQ0FBQyxLQUFLLENBQUM7UUFDbEMsaUJBQWlCLENBQ2YsYUFBYSxFQUNiLENBQUMsT0FBTyxFQUFFLGVBQWUsRUFBRSxlQUFlLENBQUMsRUFDM0MsV0FBVyxXQUFXLGFBQWEsQ0FDcEMsQ0FBQztRQUNGLHFCQUFxQixDQUNuQixhQUFhLEVBQ2IsQ0FBQyxPQUFPLEVBQUUsZUFBZSxFQUFFLGVBQWUsQ0FBQyxFQUMzQyxXQUFXLFdBQVcsYUFBYSxDQUNwQyxDQUFDO1FBQ0YsaUJBQWlCLENBQ2YsUUFBUSxFQUNSLENBQUMsT0FBTyxFQUFFLElBQUksRUFBRSxNQUFNLEVBQUUsZUFBZSxDQUFDLEVBQ3hDLFdBQVcsV0FBVyxRQUFRLENBQy9CLENBQUM7UUFDRixxQkFBcUIsQ0FDbkIsUUFBUSxFQUNSLENBQUMsT0FBTyxFQUFFLElBQUksRUFBRSxNQUFNLEVBQUUsZUFBZSxDQUFDLEVBQ3hDLFdBQVcsV0FBVyxRQUFRLENBQy9CLENBQUM7UUFDRixJQUFJLFVBQVUsQ0FBQyxNQUFNLEtBQUssU0FBUyxFQUFFLENBQUM7WUFDcEMsSUFBSSxDQUFDLGFBQWEsQ0FBQyxVQUFVLENBQUMsTUFBTSxDQUFDLEVBQUUsQ0FBQztnQkFDdEMsTUFBTSxJQUFJLEtBQUssQ0FDYixvQ0FBb0MsV0FBVywrQkFBK0IsQ0FDL0UsQ0FBQztZQUNKLENBQUM7WUFDRCxpQkFBaUIsQ0FBQyxVQUFVLENBQUMsTUFBTSxFQUFFLENBQUMsZ0JBQWdCLENBQUMsRUFBRSxXQUFXLFdBQVcsU0FBUyxDQUFDLENBQUM7WUFDMUYscUJBQXFCLENBQ25CLFVBQVUsQ0FBQyxNQUFNLEVBQ2pCLENBQUMsZ0JBQWdCLENBQUMsRUFDbEIsV0FBVyxXQUFXLFNBQVMsQ0FDaEMsQ0FBQztZQUNGLElBQUksQ0FBQyxVQUFVLENBQUMsTUFBTSxDQUFDLGNBQWMsRUFBRSxDQUFDO2dCQUN0QyxNQUFNLElBQUksS0FBSyxDQUNiLG9DQUFvQyxXQUFXLDZCQUE2QixDQUM3RSxDQUFDO1lBQ0osQ0FBQztRQUNILENBQUM7SUFDSCxDQUFDO0lBQ0QsT0FBTyxPQUF5QyxDQUFDO0FBQ25ELENBQUMsQ0FBQztBQWFGLGtGQUFrRjtBQUNsRixNQUFNLE9BQU8sbUJBQW1CO0lBQ2QsUUFBUSxDQUFTO0lBQ2hCLElBQUksQ0FBbUI7SUFFeEMsWUFBWSxhQUEwQyxFQUFFO1FBQ3RELElBQUksQ0FBQyxRQUFRLEdBQUcsT0FBTyxDQUFDLElBQUksQ0FBQyxPQUFPLENBQ2xDLFVBQVUsQ0FBQyxRQUFRO1lBQ2pCLE9BQU8sQ0FBQyxJQUFJLENBQUMsSUFBSSxDQUNmLE9BQU8sQ0FBQyxTQUFTLENBQUMsR0FBRyxDQUFDLElBQUksRUFBRSxFQUM1QixjQUFjLEVBQ2QsSUFBSSxFQUNKLHVCQUF1QixDQUN4QixDQUNKLENBQUM7UUFDRixJQUFJLENBQUMsSUFBSSxHQUFHLElBQUksZ0JBQWdCLENBQUM7WUFDL0IsUUFBUSxFQUFFLEdBQUcsSUFBSSxDQUFDLFFBQVEsT0FBTztZQUNqQyxXQUFXLEVBQUUsMEJBQTBCO1lBQ3ZDLFNBQVMsRUFBRSxVQUFVLENBQUMsYUFBYTtZQUNuQyxNQUFNLEVBQUUsVUFBVSxDQUFDLFVBQVU7U0FDOUIsQ0FBQyxDQUFDO0lBQ0wsQ0FBQztJQUVNLEtBQUssQ0FBQyxPQUFPO1FBQ2xCLElBQUksT0FBZSxDQUFDO1FBQ3BCLElBQUksQ0FBQztZQUNILE9BQU8sR0FBRyxNQUFNLE9BQU8sQ0FBQyxFQUFFLENBQUMsUUFBUSxDQUFDLElBQUksQ0FBQyxRQUFRLEVBQUUsTUFBTSxDQUFDLENBQUM7UUFDN0QsQ0FBQztRQUFDLE9BQU8sS0FBSyxFQUFFLENBQUM7WUFDZixJQUFLLEtBQStCLENBQUMsSUFBSSxLQUFLLFFBQVEsRUFBRSxDQUFDO2dCQUN2RCxPQUFPLEVBQUUsQ0FBQztZQUNaLENBQUM7WUFDRCxNQUFNLElBQUksS0FBSyxDQUFDLDZDQUE2QyxFQUFFLEVBQUUsS0FBSyxFQUFFLEtBQUssRUFBRSxDQUFDLENBQUM7UUFDbkYsQ0FBQztRQUNELElBQUksQ0FBQztZQUNILE9BQU8sSUFBSSxDQUFDLEtBQUssQ0FBQyxPQUFPLENBQUMsQ0FBQztRQUM3QixDQUFDO1FBQUMsT0FBTyxLQUFLLEVBQUUsQ0FBQztZQUNmLE1BQU0sSUFBSSxLQUFLLENBQUMsaURBQWlELEVBQUUsRUFBRSxLQUFLLEVBQUUsS0FBSyxFQUFFLENBQUMsQ0FBQztRQUN2RixDQUFDO0lBQ0gsQ0FBQztJQUVNLEtBQUssQ0FBQyxhQUFhO1FBQ3hCLE9BQU8saUNBQWlDLENBQUMsTUFBTSxJQUFJLENBQUMsT0FBTyxFQUFFLENBQUMsQ0FBQztJQUNqRSxDQUFDO0lBRU0sS0FBSyxDQUFDLFFBQVEsQ0FDbkIsWUFFdUY7UUFFdkYsT0FBTyxJQUFJLENBQUMsSUFBSSxDQUFDLFlBQVksQ0FBQyxLQUFLLElBQUksRUFBRTtZQUN2QyxNQUFNLFdBQVcsR0FBRyxNQUFNLFlBQVksQ0FBQyxNQUFNLElBQUksQ0FBQyxPQUFPLEVBQUUsQ0FBQyxDQUFDO1lBQzdELElBQUksV0FBVyxDQUFDLFNBQVMsRUFBRSxDQUFDO2dCQUMxQixNQUFNLElBQUksQ0FBQyxXQUFXLENBQUMsaUNBQWlDLENBQUMsV0FBVyxDQUFDLFNBQVMsQ0FBQyxDQUFDLENBQUM7WUFDbkYsQ0FBQztZQUNELE9BQU8sV0FBVyxDQUFDLE1BQU0sQ0FBQztRQUM1QixDQUFDLENBQUMsQ0FBQztJQUNMLENBQUM7SUFFTyxLQUFLLENBQUMsV0FBVyxDQUFDLE9BQTRCO1FBQ3BELE1BQU0sT0FBTyxDQUFDLEVBQUUsQ0FBQyxLQUFLLENBQUMsT0FBTyxDQUFDLElBQUksQ0FBQyxPQUFPLENBQUMsSUFBSSxDQUFDLFFBQVEsQ0FBQyxFQUFFLEVBQUUsU0FBUyxFQUFFLElBQUksRUFBRSxDQUFDLENBQUM7UUFDakYsTUFBTSxRQUFRLEdBQUcsR0FBRyxJQUFJLENBQUMsUUFBUSxRQUFRLE9BQU8sQ0FBQyxHQUFHLElBQUksT0FBTyxDQUFDLE1BQU07YUFDbkUsV0FBVyxDQUFDLEVBQUUsQ0FBQzthQUNmLFFBQVEsQ0FBQyxLQUFLLENBQUMsRUFBRSxDQUFDO1FBQ3JCLElBQUksTUFBK0QsQ0FBQztRQUNwRSxJQUFJLENBQUM7WUFDSCxNQUFNLEdBQUcsTUFBTSxPQUFPLENBQUMsRUFBRSxDQUFDLElBQUksQ0FBQyxRQUFRLEVBQUUsSUFBSSxFQUFFLEtBQUssQ0FBQyxDQUFDO1lBQ3RELE1BQU0sTUFBTSxDQUFDLFNBQVMsQ0FBQyxHQUFHLElBQUksQ0FBQyxTQUFTLENBQUMsT0FBTyxFQUFFLElBQUksRUFBRSxDQUFDLENBQUMsSUFBSSxFQUFFLE1BQU0sQ0FBQyxDQUFDO1lBQ3hFLE1BQU0sTUFBTSxDQUFDLElBQUksRUFBRSxDQUFDO1lBQ3BCLE1BQU0sTUFBTSxDQUFDLEtBQUssRUFBRSxDQUFDO1lBQ3JCLE1BQU0sR0FBRyxTQUFTLENBQUM7WUFDbkIsTUFBTSxPQUFPLENBQUMsRUFBRSxDQUFDLE1BQU0sQ0FBQyxRQUFRLEVBQUUsSUFBSSxDQUFDLFFBQVEsQ0FBQyxDQUFDO1FBQ25ELENBQUM7UUFBQyxPQUFPLEtBQUssRUFBRSxDQUFDO1lBQ2YsTUFBTSxNQUFNLEVBQUUsS0FBSyxFQUFFLENBQUMsS0FBSyxDQUFDLEdBQUcsRUFBRSxHQUFFLENBQUMsQ0FBQyxDQUFDO1lBQ3RDLE1BQU0sT0FBTyxDQUFDLEVBQUUsQ0FBQyxFQUFFLENBQUMsUUFBUSxFQUFFLEVBQUUsS0FBSyxFQUFFLElBQUksRUFBRSxDQUFDLENBQUMsS0FBSyxDQUFDLEdBQUcsRUFBRSxHQUFFLENBQUMsQ0FBQyxDQUFDO1lBQy9ELE1BQU0sSUFBSSxLQUFLLENBQUMsMkRBQTJELEVBQUU7Z0JBQzNFLEtBQUssRUFBRSxLQUFLO2FBQ2IsQ0FBQyxDQUFDO1FBQ0wsQ0FBQztJQUNILENBQUM7Q0FDRiJ9

package/dist_ts/mod_services/classes.interprocesslock.d.ts

@@ -0,0 +1,21 @@
+import type { TServiceName } from './classes.servicedatamarker.js';
+export interface IInterProcessLockOptions {
+    lockPath: string;
+    description: string;
+    timeoutMs?: number;
+    pollMs?: number;
+}
+/** Atomic-mkdir lock with bounded waiting and manual-only stale-lock recovery. */
+export declare class InterProcessLock {
+    readonly lockPath: string;
+    private readonly description;
+    private readonly timeoutMs;
+    private readonly pollMs;
+    constructor(optionsArg: IInterProcessLockOptions);
+    runExclusive<T>(operationArg: () => Promise<T>): Promise<T>;
+    private acquire;
+    private release;
+}
+export declare const withInterProcessLock: <T>(optionsArg: IInterProcessLockOptions, operationArg: () => Promise<T>) => Promise<T>;
+export declare const getServiceDataOperationLockPath: (projectPathArg: string, serviceArg: TServiceName) => string;
+export declare const withServiceDataOperationLock: <T>(projectPathArg: string, serviceArg: TServiceName, operationArg: () => Promise<T>) => Promise<T>;

package/dist_ts/mod_services/classes.interprocesslock.js

@@ -0,0 +1,141 @@
+import * as plugins from '../plugins.js';
+const isPlainObject = (valueArg) => {
+    return typeof valueArg === 'object' && valueArg !== null && !Array.isArray(valueArg);
+};
+/** Atomic-mkdir lock with bounded waiting and manual-only stale-lock recovery. */
+export class InterProcessLock {
+    lockPath;
+    description;
+    timeoutMs;
+    pollMs;
+    constructor(optionsArg) {
+        this.lockPath = plugins.path.resolve(optionsArg.lockPath);
+        this.description = optionsArg.description;
+        this.timeoutMs = optionsArg.timeoutMs ?? 5_000;
+        this.pollMs = optionsArg.pollMs ?? 25;
+        if (!this.description) {
+            throw new Error('Interprocess lock description must not be empty.');
+        }
+        if (!Number.isSafeInteger(this.timeoutMs) || this.timeoutMs <= 0) {
+            throw new Error('Interprocess lock timeout must be a positive safe integer.');
+        }
+        if (!Number.isSafeInteger(this.pollMs) || this.pollMs <= 0) {
+            throw new Error('Interprocess lock poll interval must be a positive safe integer.');
+        }
+    }
+    async runExclusive(operationArg) {
+        const release = await this.acquire();
+        let result;
+        let primaryError;
+        try {
+            result = await operationArg();
+        }
+        catch (error) {
+            primaryError = error;
+        }
+        let releaseError;
+        try {
+            await release();
+        }
+        catch (error) {
+            releaseError = error;
+        }
+        if (primaryError && releaseError) {
+            throw new AggregateError([primaryError, releaseError], `${this.description} failed and its lock could not be released.`);
+        }
+        if (primaryError) {
+            throw primaryError;
+        }
+        if (releaseError) {
+            throw releaseError;
+        }
+        return result;
+    }
+    async acquire() {
+        await plugins.fs.mkdir(plugins.path.dirname(this.lockPath), { recursive: true });
+        const owner = {
+            token: plugins.crypto.randomBytes(16).toString('hex'),
+            pid: process.pid,
+            createdAt: new Date().toISOString(),
+        };
+        const ownerPath = plugins.path.join(this.lockPath, 'owner.json');
+        const deadlineAt = Date.now() + this.timeoutMs;
+        while (true) {
+            try {
+                await plugins.fs.mkdir(this.lockPath);
+                try {
+                    await plugins.fs.writeFile(ownerPath, `${JSON.stringify(owner)}\n`, {
+                        encoding: 'utf8',
+                        flag: 'wx',
+                        mode: 0o600,
+                    });
+                }
+                catch (error) {
+                    await this.release(owner.token, false).catch(() => { });
+                    throw error;
+                }
+                return async () => this.release(owner.token, true);
+            }
+            catch (error) {
+                if (error.code !== 'EEXIST') {
+                    throw new Error(`${this.description} lock could not be acquired.`, { cause: error });
+                }
+                const remaining = deadlineAt - Date.now();
+                if (remaining <= 0) {
+                    let ownerDescription = 'owner metadata unavailable';
+                    try {
+                        const existingOwner = JSON.parse(await plugins.fs.readFile(ownerPath, 'utf8'));
+                        if (typeof existingOwner.pid === 'number' &&
+                            typeof existingOwner.createdAt === 'string') {
+                            ownerDescription = `pid ${existingOwner.pid}, created ${existingOwner.createdAt}`;
+                        }
+                    }
+                    catch {
+                        // Incomplete stale locks remain fail-closed and require operator review.
+                    }
+                    throw new Error(`${this.description} is locked (${ownerDescription}). ` +
+                        `If that process no longer exists, inspect and remove ${this.lockPath}.`);
+                }
+                await plugins.smartdelay.delayFor(Math.min(this.pollMs, remaining));
+            }
+        }
+    }
+    async release(tokenArg, requireOwnerArg) {
+        const ownerPath = plugins.path.join(this.lockPath, 'owner.json');
+        if (requireOwnerArg) {
+            let owner;
+            try {
+                owner = JSON.parse(await plugins.fs.readFile(ownerPath, 'utf8'));
+            }
+            catch (error) {
+                throw new Error(`${this.description} lock ownership could not be verified.`, {
+                    cause: error,
+                });
+            }
+            if (!isPlainObject(owner) || owner.token !== tokenArg) {
+                throw new Error(`${this.description} lock ownership changed before release.`);
+            }
+        }
+        const tombstonePath = `${this.lockPath}.release-${tokenArg}`;
+        await plugins.fs.rename(this.lockPath, tombstonePath);
+        await plugins.fs.rm(tombstonePath, { recursive: true, force: false });
+    }
+}
+export const withInterProcessLock = async (optionsArg, operationArg) => {
+    return new InterProcessLock(optionsArg).runExclusive(operationArg);
+};
+export const getServiceDataOperationLockPath = (projectPathArg, serviceArg) => {
+    const projectHash = plugins.crypto
+        .createHash('sha256')
+        .update(plugins.path.resolve(projectPathArg))
+        .digest('hex')
+        .slice(0, 32);
+    return plugins.path.join(plugins.smartpath.get.home(), '.smartconfig', 'kv', 'gitzone-services-locks', `${projectHash}-${serviceArg}.lock`);
+};
+export const withServiceDataOperationLock = async (projectPathArg, serviceArg, operationArg) => {
+    return withInterProcessLock({
+        lockPath: getServiceDataOperationLockPath(projectPathArg, serviceArg),
+        description: `${serviceArg} service data operation`,
+    }, operationArg);
+};
+//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiY2xhc3Nlcy5pbnRlcnByb2Nlc3Nsb2NrLmpzIiwic291cmNlUm9vdCI6IiIsInNvdXJjZXMiOlsiLi4vLi4vLi4vdHMvbW9kX3NlcnZpY2VzL2NsYXNzZXMuaW50ZXJwcm9jZXNzbG9jay50cyJdLCJuYW1lcyI6W10sIm1hcHBpbmdzIjoiQUFBQSxPQUFPLEtBQUssT0FBTyxNQUFNLGVBQWUsQ0FBQztBQWdCekMsTUFBTSxhQUFhLEdBQUcsQ0FBQyxRQUFpQixFQUF1QyxFQUFFO0lBQy9FLE9BQU8sT0FBTyxRQUFRLEtBQUssUUFBUSxJQUFJLFFBQVEsS0FBSyxJQUFJLElBQUksQ0FBQyxLQUFLLENBQUMsT0FBTyxDQUFDLFFBQVEsQ0FBQyxDQUFDO0FBQ3ZGLENBQUMsQ0FBQztBQUVGLGtGQUFrRjtBQUNsRixNQUFNLE9BQU8sZ0JBQWdCO0lBQ1gsUUFBUSxDQUFTO0lBQ2hCLFdBQVcsQ0FBUztJQUNwQixTQUFTLENBQVM7SUFDbEIsTUFBTSxDQUFTO0lBRWhDLFlBQVksVUFBb0M7UUFDOUMsSUFBSSxDQUFDLFFBQVEsR0FBRyxPQUFPLENBQUMsSUFBSSxDQUFDLE9BQU8sQ0FBQyxVQUFVLENBQUMsUUFBUSxDQUFDLENBQUM7UUFDMUQsSUFBSSxDQUFDLFdBQVcsR0FBRyxVQUFVLENBQUMsV0FBVyxDQUFDO1FBQzFDLElBQUksQ0FBQyxTQUFTLEdBQUcsVUFBVSxDQUFDLFNBQVMsSUFBSSxLQUFLLENBQUM7UUFDL0MsSUFBSSxDQUFDLE1BQU0sR0FBRyxVQUFVLENBQUMsTUFBTSxJQUFJLEVBQUUsQ0FBQztRQUN0QyxJQUFJLENBQUMsSUFBSSxDQUFDLFdBQVcsRUFBRSxDQUFDO1lBQ3RCLE1BQU0sSUFBSSxLQUFLLENBQUMsa0RBQWtELENBQUMsQ0FBQztRQUN0RSxDQUFDO1FBQ0QsSUFBSSxDQUFDLE1BQU0sQ0FBQyxhQUFhLENBQUMsSUFBSSxDQUFDLFNBQVMsQ0FBQyxJQUFJLElBQUksQ0FBQyxTQUFTLElBQUksQ0FBQyxFQUFFLENBQUM7WUFDakUsTUFBTSxJQUFJLEtBQUssQ0FBQyw0REFBNEQsQ0FBQyxDQUFDO1FBQ2hGLENBQUM7UUFDRCxJQUFJLENBQUMsTUFBTSxDQUFDLGFBQWEsQ0FBQyxJQUFJLENBQUMsTUFBTSxDQUFDLElBQUksSUFBSSxDQUFDLE1BQU0sSUFBSSxDQUFDLEVBQUUsQ0FBQztZQUMzRCxNQUFNLElBQUksS0FBSyxDQUFDLGtFQUFrRSxDQUFDLENBQUM7UUFDdEYsQ0FBQztJQUNILENBQUM7SUFFTSxLQUFLLENBQUMsWUFBWSxDQUFJLFlBQThCO1FBQ3pELE1BQU0sT0FBTyxHQUFHLE1BQU0sSUFBSSxDQUFDLE9BQU8sRUFBRSxDQUFDO1FBQ3JDLElBQUksTUFBcUIsQ0FBQztRQUMxQixJQUFJLFlBQXFCLENBQUM7UUFDMUIsSUFBSSxDQUFDO1lBQ0gsTUFBTSxHQUFHLE1BQU0sWUFBWSxFQUFFLENBQUM7UUFDaEMsQ0FBQztRQUFDLE9BQU8sS0FBSyxFQUFFLENBQUM7WUFDZixZQUFZLEdBQUcsS0FBSyxDQUFDO1FBQ3ZCLENBQUM7UUFFRCxJQUFJLFlBQXFCLENBQUM7UUFDMUIsSUFBSSxDQUFDO1lBQ0gsTUFBTSxPQUFPLEVBQUUsQ0FBQztRQUNsQixDQUFDO1FBQUMsT0FBTyxLQUFLLEVBQUUsQ0FBQztZQUNmLFlBQVksR0FBRyxLQUFLLENBQUM7UUFDdkIsQ0FBQztRQUNELElBQUksWUFBWSxJQUFJLFlBQVksRUFBRSxDQUFDO1lBQ2pDLE1BQU0sSUFBSSxjQUFjLENBQ3RCLENBQUMsWUFBWSxFQUFFLFlBQVksQ0FBQyxFQUM1QixHQUFHLElBQUksQ0FBQyxXQUFXLDZDQUE2QyxDQUNqRSxDQUFDO1FBQ0osQ0FBQztRQUNELElBQUksWUFBWSxFQUFFLENBQUM7WUFDakIsTUFBTSxZQUFZLENBQUM7UUFDckIsQ0FBQztRQUNELElBQUksWUFBWSxFQUFFLENBQUM7WUFDakIsTUFBTSxZQUFZLENBQUM7UUFDckIsQ0FBQztRQUNELE9BQU8sTUFBVyxDQUFDO0lBQ3JCLENBQUM7SUFFTyxLQUFLLENBQUMsT0FBTztRQUNuQixNQUFNLE9BQU8sQ0FBQyxFQUFFLENBQUMsS0FBSyxDQUFDLE9BQU8sQ0FBQyxJQUFJLENBQUMsT0FBTyxDQUFDLElBQUksQ0FBQyxRQUFRLENBQUMsRUFBRSxFQUFFLFNBQVMsRUFBRSxJQUFJLEVBQUUsQ0FBQyxDQUFDO1FBQ2pGLE1BQU0sS0FBSyxHQUFlO1lBQ3hCLEtBQUssRUFBRSxPQUFPLENBQUMsTUFBTSxDQUFDLFdBQVcsQ0FBQyxFQUFFLENBQUMsQ0FBQyxRQUFRLENBQUMsS0FBSyxDQUFDO1lBQ3JELEdBQUcsRUFBRSxPQUFPLENBQUMsR0FBRztZQUNoQixTQUFTLEVBQUUsSUFBSSxJQUFJLEVBQUUsQ0FBQyxXQUFXLEVBQUU7U0FDcEMsQ0FBQztRQUNGLE1BQU0sU0FBUyxHQUFHLE9BQU8sQ0FBQyxJQUFJLENBQUMsSUFBSSxDQUFDLElBQUksQ0FBQyxRQUFRLEVBQUUsWUFBWSxDQUFDLENBQUM7UUFDakUsTUFBTSxVQUFVLEdBQUcsSUFBSSxDQUFDLEdBQUcsRUFBRSxHQUFHLElBQUksQ0FBQyxTQUFTLENBQUM7UUFFL0MsT0FBTyxJQUFJLEVBQUUsQ0FBQztZQUNaLElBQUksQ0FBQztnQkFDSCxNQUFNLE9BQU8sQ0FBQyxFQUFFLENBQUMsS0FBSyxDQUFDLElBQUksQ0FBQyxRQUFRLENBQUMsQ0FBQztnQkFDdEMsSUFBSSxDQUFDO29CQUNILE1BQU0sT0FBTyxDQUFDLEVBQUUsQ0FBQyxTQUFTLENBQUMsU0FBUyxFQUFFLEdBQUcsSUFBSSxDQUFDLFNBQVMsQ0FBQyxLQUFLLENBQUMsSUFBSSxFQUFFO3dCQUNsRSxRQUFRLEVBQUUsTUFBTTt3QkFDaEIsSUFBSSxFQUFFLElBQUk7d0JBQ1YsSUFBSSxFQUFFLEtBQUs7cUJBQ1osQ0FBQyxDQUFDO2dCQUNMLENBQUM7Z0JBQUMsT0FBTyxLQUFLLEVBQUUsQ0FBQztvQkFDZixNQUFNLElBQUksQ0FBQyxPQUFPLENBQUMsS0FBSyxDQUFDLEtBQUssRUFBRSxLQUFLLENBQUMsQ0FBQyxLQUFLLENBQUMsR0FBRyxFQUFFLEdBQUUsQ0FBQyxDQUFDLENBQUM7b0JBQ3ZELE1BQU0sS0FBSyxDQUFDO2dCQUNkLENBQUM7Z0JBQ0QsT0FBTyxLQUFLLElBQUksRUFBRSxDQUFDLElBQUksQ0FBQyxPQUFPLENBQUMsS0FBSyxDQUFDLEtBQUssRUFBRSxJQUFJLENBQUMsQ0FBQztZQUNyRCxDQUFDO1lBQUMsT0FBTyxLQUFLLEVBQUUsQ0FBQztnQkFDZixJQUFLLEtBQStCLENBQUMsSUFBSSxLQUFLLFFBQVEsRUFBRSxDQUFDO29CQUN2RCxNQUFNLElBQUksS0FBSyxDQUFDLEdBQUcsSUFBSSxDQUFDLFdBQVcsOEJBQThCLEVBQUUsRUFBRSxLQUFLLEVBQUUsS0FBSyxFQUFFLENBQUMsQ0FBQztnQkFDdkYsQ0FBQztnQkFDRCxNQUFNLFNBQVMsR0FBRyxVQUFVLEdBQUcsSUFBSSxDQUFDLEdBQUcsRUFBRSxDQUFDO2dCQUMxQyxJQUFJLFNBQVMsSUFBSSxDQUFDLEVBQUUsQ0FBQztvQkFDbkIsSUFBSSxnQkFBZ0IsR0FBRyw0QkFBNEIsQ0FBQztvQkFDcEQsSUFBSSxDQUFDO3dCQUNILE1BQU0sYUFBYSxHQUFHLElBQUksQ0FBQyxLQUFLLENBQUMsTUFBTSxPQUFPLENBQUMsRUFBRSxDQUFDLFFBQVEsQ0FBQyxTQUFTLEVBQUUsTUFBTSxDQUFDLENBRzVFLENBQUM7d0JBQ0YsSUFDRSxPQUFPLGFBQWEsQ0FBQyxHQUFHLEtBQUssUUFBUTs0QkFDckMsT0FBTyxhQUFhLENBQUMsU0FBUyxLQUFLLFFBQVEsRUFDM0MsQ0FBQzs0QkFDRCxnQkFBZ0IsR0FBRyxPQUFPLGFBQWEsQ0FBQyxHQUFHLGFBQWEsYUFBYSxDQUFDLFNBQVMsRUFBRSxDQUFDO3dCQUNwRixDQUFDO29CQUNILENBQUM7b0JBQUMsTUFBTSxDQUFDO3dCQUNQLHlFQUF5RTtvQkFDM0UsQ0FBQztvQkFDRCxNQUFNLElBQUksS0FBSyxDQUNiLEdBQUcsSUFBSSxDQUFDLFdBQVcsZUFBZSxnQkFBZ0IsS0FBSzt3QkFDckQsd0RBQXdELElBQUksQ0FBQyxRQUFRLEdBQUcsQ0FDM0UsQ0FBQztnQkFDSixDQUFDO2dCQUNELE1BQU0sT0FBTyxDQUFDLFVBQVUsQ0FBQyxRQUFRLENBQUMsSUFBSSxDQUFDLEdBQUcsQ0FBQyxJQUFJLENBQUMsTUFBTSxFQUFFLFNBQVMsQ0FBQyxDQUFDLENBQUM7WUFDdEUsQ0FBQztRQUNILENBQUM7SUFDSCxDQUFDO0lBRU8sS0FBSyxDQUFDLE9BQU8sQ0FBQyxRQUFnQixFQUFFLGVBQXdCO1FBQzlELE1BQU0sU0FBUyxHQUFHLE9BQU8sQ0FBQyxJQUFJLENBQUMsSUFBSSxDQUFDLElBQUksQ0FBQyxRQUFRLEVBQUUsWUFBWSxDQUFDLENBQUM7UUFDakUsSUFBSSxlQUFlLEVBQUUsQ0FBQztZQUNwQixJQUFJLEtBQWMsQ0FBQztZQUNuQixJQUFJLENBQUM7Z0JBQ0gsS0FBSyxHQUFHLElBQUksQ0FBQyxLQUFLLENBQUMsTUFBTSxPQUFPLENBQUMsRUFBRSxDQUFDLFFBQVEsQ0FBQyxTQUFTLEVBQUUsTUFBTSxDQUFDLENBQUMsQ0FBQztZQUNuRSxDQUFDO1lBQUMsT0FBTyxLQUFLLEVBQUUsQ0FBQztnQkFDZixNQUFNLElBQUksS0FBSyxDQUFDLEdBQUcsSUFBSSxDQUFDLFdBQVcsd0NBQXdDLEVBQUU7b0JBQzNFLEtBQUssRUFBRSxLQUFLO2lCQUNiLENBQUMsQ0FBQztZQUNMLENBQUM7WUFDRCxJQUFJLENBQUMsYUFBYSxDQUFDLEtBQUssQ0FBQyxJQUFJLEtBQUssQ0FBQyxLQUFLLEtBQUssUUFBUSxFQUFFLENBQUM7Z0JBQ3RELE1BQU0sSUFBSSxLQUFLLENBQUMsR0FBRyxJQUFJLENBQUMsV0FBVyx5Q0FBeUMsQ0FBQyxDQUFDO1lBQ2hGLENBQUM7UUFDSCxDQUFDO1FBRUQsTUFBTSxhQUFhLEdBQUcsR0FBRyxJQUFJLENBQUMsUUFBUSxZQUFZLFFBQVEsRUFBRSxDQUFDO1FBQzdELE1BQU0sT0FBTyxDQUFDLEVBQUUsQ0FBQyxNQUFNLENBQUMsSUFBSSxDQUFDLFFBQVEsRUFBRSxhQUFhLENBQUMsQ0FBQztRQUN0RCxNQUFNLE9BQU8sQ0FBQyxFQUFFLENBQUMsRUFBRSxDQUFDLGFBQWEsRUFBRSxFQUFFLFNBQVMsRUFBRSxJQUFJLEVBQUUsS0FBSyxFQUFFLEtBQUssRUFBRSxDQUFDLENBQUM7SUFDeEUsQ0FBQztDQUNGO0FBRUQsTUFBTSxDQUFDLE1BQU0sb0JBQW9CLEdBQUcsS0FBSyxFQUN2QyxVQUFvQyxFQUNwQyxZQUE4QixFQUNsQixFQUFFO0lBQ2QsT0FBTyxJQUFJLGdCQUFnQixDQUFDLFVBQVUsQ0FBQyxDQUFDLFlBQVksQ0FBQyxZQUFZLENBQUMsQ0FBQztBQUNyRSxDQUFDLENBQUM7QUFFRixNQUFNLENBQUMsTUFBTSwrQkFBK0IsR0FBRyxDQUM3QyxjQUFzQixFQUN0QixVQUF3QixFQUNoQixFQUFFO0lBQ1YsTUFBTSxXQUFXLEdBQUcsT0FBTyxDQUFDLE1BQU07U0FDL0IsVUFBVSxDQUFDLFFBQVEsQ0FBQztTQUNwQixNQUFNLENBQUMsT0FBTyxDQUFDLElBQUksQ0FBQyxPQUFPLENBQUMsY0FBYyxDQUFDLENBQUM7U0FDNUMsTUFBTSxDQUFDLEtBQUssQ0FBQztTQUNiLEtBQUssQ0FBQyxDQUFDLEVBQUUsRUFBRSxDQUFDLENBQUM7SUFDaEIsT0FBTyxPQUFPLENBQUMsSUFBSSxDQUFDLElBQUksQ0FDdEIsT0FBTyxDQUFDLFNBQVMsQ0FBQyxHQUFHLENBQUMsSUFBSSxFQUFFLEVBQzVCLGNBQWMsRUFDZCxJQUFJLEVBQ0osd0JBQXdCLEVBQ3hCLEdBQUcsV0FBVyxJQUFJLFVBQVUsT0FBTyxDQUNwQyxDQUFDO0FBQ0osQ0FBQyxDQUFDO0FBRUYsTUFBTSxDQUFDLE1BQU0sNEJBQTRCLEdBQUcsS0FBSyxFQUMvQyxjQUFzQixFQUN0QixVQUF3QixFQUN4QixZQUE4QixFQUNsQixFQUFFO0lBQ2QsT0FBTyxvQkFBb0IsQ0FDekI7UUFDRSxRQUFRLEVBQUUsK0JBQStCLENBQUMsY0FBYyxFQUFFLFVBQVUsQ0FBQztRQUNyRSxXQUFXLEVBQUUsR0FBRyxVQUFVLHlCQUF5QjtLQUNwRCxFQUNELFlBQVksQ0FDYixDQUFDO0FBQ0osQ0FBQyxDQUFDIn0=

package/dist_ts/mod_services/classes.serviceconfiguration.d.ts

@@ -8,15 +8,6 @@ export declare const isValidS3BucketName: (bucketArg: unknown) => bucketArg is s
  * alphabet than custom S3 names. Long names retain a stable hash suffix.
  */
 export declare const deriveS3BucketName: (projectNameArg: string) => string;
-export type TLegacyS3BucketRepair = {
-    bucket: unknown;
-    repaired: false;
-} | {
-    bucket: string;
-    repaired: true;
-};
-/** Repair only the exact invalid value emitted by older GitZone releases. */
-export declare const repairLegacyGeneratedS3Bucket: (projectNameArg: string, bucketArg: unknown) => TLegacyS3BucketRepair;
 export interface IServiceConfig {
     PROJECT_NAME: string;
     MONGODB_HOST: string;
@@ -33,9 +24,11 @@ export interface IServiceConfig {
     MONGODB_AUTH_ENABLED: boolean;
     S3_HOST: string;
     S3_PORT: string;
-    S3_CONSOLE_PORT: string;
+    S3_UI_PORT: string;
     S3_ACCESSKEY: string;
     S3_SECRETKEY: string;
+    S3_ADMIN_PASSWORD: string;
+    S3_REGION: string;
     S3_BUCKET: string;
     S3_ENDPOINT: string;
     S3_USESSL: boolean;
@@ -45,9 +38,12 @@ export interface IServiceConfig {
     ELASTICSEARCH_PASS: string;
     ELASTICSEARCH_URL: string;
 }
+/** Validate the complete canonical env.json shape before runtime use or persistence. */
+export declare const assertCanonicalServiceRuntimeConfig: (configArg: unknown) => asserts configArg is IServiceConfig;
 export declare class ServiceConfiguration {
     private configPath;
     private config;
+    private persistedConfigSnapshot?;
     private docker;
     /** Where the effective MongoDB auth mode came from. */
     private mongoAuthSource;
@@ -56,6 +52,8 @@ export declare class ServiceConfiguration {
      * Load or create the configuration
      */
     loadOrCreate(): Promise<IServiceConfig>;
+    /** Reload and validate persisted runtime state without deriving or writing fields. */
+    reloadFromDisk(): Promise<IServiceConfig>;
     /**
      * Fold `@git.zone/cli.serviceOptions` into the runtime configuration.
      */
@@ -90,6 +88,8 @@ export declare class ServiceConfiguration {
      * closed on the combination.
      */
     assertMongoExposureIsSafe(): void;
+    /** Reject ObjectStorage's prohibited defaults and credential reuse before Docker mutation. */
+    assertObjectStorageCredentialsAreSafe(): void;
     /**
      * Persist the MongoDB auth mode.
      *
@@ -131,7 +131,8 @@ export declare class ServiceConfiguration {
      */
     getContainerNames(): {
         mongo: string;
-        minio: string;
+        objectstorage: string;
+        legacyMinio: string;
         elasticsearch: string;
     };
     /**
@@ -142,7 +143,7 @@ export declare class ServiceConfiguration {
      */
     getDataDirectories(): {
         mongo: string;
-        minio: string;
+        objectstorage: string;
         elasticsearch: string;
     };
     /**
@@ -153,6 +154,8 @@ export declare class ServiceConfiguration {
      * Validate and update ports if they're not available
      */
     validateAndUpdatePorts(): Promise<boolean>;
+    /** Validate ObjectStorage host ports only after legacy/conflict checks pass. */
+    validateObjectStoragePorts(): Promise<boolean>;
     /**
      * Force reconfigure all ports with new available ones
      */