@happyvertical/smrt-education 0.60.17 → 0.61.0

package/dist/ingestion-isolation.d.ts

@@ -1,8 +1,21 @@
+export interface IngestionMemoryLimitOptions {
+    /** Explicit opt-in for single-user desktop hosts (macOS, Windows) that have
+     * no cgroups. Ignored on Linux, where the cgroup-v2 check always applies.
+     * The resulting budget is advisory: no operating-system ceiling exists.
+     */
+    desktopBudget?: {
+        /** Defaults to min(maximumBytes, a quarter of total system memory). */
+        budgetBytes?: number;
+    };
+}
+export interface IngestionMemoryLimit {
+    memoryLimitBytes: number;
+    /** Present only for the desktop path; Linux results omit it. */
+    enforcement?: 'advisory-host-budget';
+}
 /** Verify a real Linux cgroup-v2 native-memory ceiling before enabling decoders.
  * The worker and its children must remain in this cgroup; deployments must deny
  * cgroup writes/escape and run without privileged container capabilities.
  */
-export declare function requireIngestionMemoryLimit(maximumBytes: number): Promise<{
-    memoryLimitBytes: number;
-}>;
+export declare function requireIngestionMemoryLimit(maximumBytes: number, options?: IngestionMemoryLimitOptions): Promise<IngestionMemoryLimit>;
 //# sourceMappingURL=ingestion-isolation.d.ts.map

package/dist/ingestion-isolation.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ingestion-isolation.d.ts","sourceRoot":"","sources":["../src/ingestion-isolation.ts"],"names":[],"mappings":"AAGA;;;GAGG;AACH,wBAAsB,2BAA2B,CAC/C,YAAY,EAAE,MAAM,GACnB,OAAO,CAAC;IAAE,gBAAgB,EAAE,MAAM,CAAA;CAAE,CAAC,CAmCvC"}
+{"version":3,"file":"ingestion-isolation.d.ts","sourceRoot":"","sources":["../src/ingestion-isolation.ts"],"names":[],"mappings":"AAIA,MAAM,WAAW,2BAA2B;IAC1C;;;OAGG;IACH,aAAa,CAAC,EAAE;QACd,uEAAuE;QACvE,WAAW,CAAC,EAAE,MAAM,CAAC;KACtB,CAAC;CACH;AAED,MAAM,WAAW,oBAAoB;IACnC,gBAAgB,EAAE,MAAM,CAAC;IACzB,gEAAgE;IAChE,WAAW,CAAC,EAAE,sBAAsB,CAAC;CACtC;AAED;;;GAGG;AACH,wBAAsB,2BAA2B,CAC/C,YAAY,EAAE,MAAM,EACpB,OAAO,GAAE,2BAAgC,GACxC,OAAO,CAAC,oBAAoB,CAAC,CAkD/B"}

package/dist/ingestion.js

@@ -4,6 +4,7 @@ import { withPrivateAssetAccess } from "@happyvertical/smrt-assets";
 import { registerPermissionDefinitions } from "@happyvertical/smrt-users";
 import { GenerationSnapshotStaleError, ProposalsNotConfiguredError, extractAnalysis, normalizeObservedImageRegions } from "@happyvertical/smrt-ingestion/server";
 import { readFile } from "node:fs/promises";
+import { totalmem } from "node:os";
 import { resolve } from "node:path";
 import { createHash } from "node:crypto";
 //#region src/intake-original-evidence.ts
@@ -31,9 +32,22 @@ function intakeOriginalEvidence(evidence) {
 }
 //#endregion
 //#region src/ingestion-isolation.ts
-async function requireIngestionMemoryLimit(maximumBytes) {
-	if (process.platform !== "linux") throw new Error("Extraction requires a Linux cgroup-v2 memory-limited worker");
+async function requireIngestionMemoryLimit(maximumBytes, options = {}) {
+	const desktop = options.desktopBudget;
+	const desktopHost = process.platform === "darwin" || process.platform === "win32";
+	if (process.platform !== "linux" && !(desktop && desktopHost)) throw new Error("Extraction requires a Linux cgroup-v2 memory-limited worker");
 	if (!Number.isSafeInteger(maximumBytes) || maximumBytes < 1) throw new Error("Invalid worker memory ceiling");
+	if (process.platform !== "linux" && desktop) {
+		const system = totalmem();
+		if (!Number.isSafeInteger(system) || system < 1) throw new Error("Host memory size is unavailable");
+		const budget = desktop.budgetBytes ?? Math.min(maximumBytes, Math.floor(system / 4));
+		if (!Number.isSafeInteger(budget) || budget < 1) throw new Error("Invalid desktop memory budget");
+		if (budget > maximumBytes || budget > system) throw new Error("Desktop memory budget exceeds policy or host memory");
+		return {
+			memoryLimitBytes: budget,
+			enforcement: "advisory-host-budget"
+		};
+	}
 	const entry = (await readFile("/proc/self/cgroup", "utf8")).split("\n").find((line) => line.startsWith("0::"));
 	if (!entry) throw new Error("No cgroup-v2 membership");
 	const relative = entry.slice(3);