@inquir/compute 0.2.0 → 0.4.0

package/dist/release-commands.js

@@ -0,0 +1,147 @@
+import { createHash } from 'node:crypto';
+import { ApiError, createClient, authHeaders, getMe, toApiError } from './transport.js';
+import { boundedSourceCommandFetch } from './source-command-http.js';
+export class ReleaseCommandObservationEndedError extends Error {
+    retained;
+    constructor(retained, options) {
+        super('Release command observation ended; resume this same request ID', options);
+        this.retained = retained;
+    }
+}
+const UUID = /^[a-f0-9]{8}-[a-f0-9]{4}-4[a-f0-9]{3}-[89ab][a-f0-9]{3}-[a-f0-9]{12}$/;
+function identifier(value) {
+    if (typeof value !== 'string' || !value || value.length > 256 || Array.from(value).some(c => c.charCodeAt(0) < 32 || c.charCodeAt(0) === 127))
+        throw new Error('Invalid release command scope');
+}
+function object(value) { if (!value || typeof value !== 'object' || Array.isArray(value))
+    throw new Error('Invalid release command protocol'); return value; }
+function exact(value, keys) { if (Object.keys(value).sort().join(',') !== keys)
+    throw new Error('Release command fields differ'); }
+function normalized(input) {
+    const value = structuredClone(input), env = value?.env ?? {}, timeoutMs = value?.timeoutMs ?? 60000;
+    const string = (v) => typeof v === 'string' && !v.includes('\0') && Buffer.from(v).toString('utf8') === v;
+    if (!value || Object.keys(value).some(k => !['command', 'timeoutMs', 'env'].includes(k)) || !string(value.command) || !value.command || value.command.length > 4000
+        || !Number.isSafeInteger(timeoutMs) || timeoutMs < 1000 || timeoutMs > 900000 || !env || typeof env !== 'object' || Array.isArray(env)
+        || !Object.entries(env).every(([key, item]) => /^[A-Za-z_][A-Za-z0-9_]*$/.test(key) && string(item)))
+        throw new Error('Invalid release command input');
+    return { command: value.command, timeoutMs, env };
+}
+function binding(client) {
+    const url = new URL(client.baseUrl);
+    if (!['http:', 'https:'].includes(url.protocol) || url.username || url.password || url.search || url.hash || !client.apiKey)
+        throw new Error('Release commands require a plain authenticated HTTP API');
+    return { apiUrl: url.toString().replace(/\/+$/, ''), credentialHash: createHash('sha256').update(client.apiKey).digest('hex') };
+}
+function operation(client, value) {
+    const retained = structuredClone(value), current = binding(client);
+    exact(object(retained), 'apiUrl,credentialHash,functionId,input,requestId,tenantId,version');
+    identifier(retained.tenantId);
+    identifier(retained.functionId);
+    if (retained.version !== 1 || !UUID.test(retained.requestId) || retained.apiUrl !== current.apiUrl || retained.credentialHash !== current.credentialHash
+        || client.workspaceId !== undefined && client.workspaceId !== retained.tenantId || JSON.stringify(normalized(retained.input)) !== JSON.stringify(retained.input))
+        throw new Error('Retained release command binding differs');
+    // The platform captures at most 1 MiB of logs; JSON escapes may expand each
+    // byte sixfold. This response bound preserves the entire validated capture.
+    const pinned = createClient({ ...client, baseUrl: retained.apiUrl, workspaceId: retained.tenantId, fetchImpl: boundedSourceCommandFetch(client.fetchImpl, { responseLimitBytes: 8 * 1024 * 1024 }) });
+    const base = `/functions/${encodeURIComponent(retained.functionId)}/release-commands/${retained.requestId}`;
+    async function request(mode, signal) {
+        signal?.throwIfAborted();
+        const response = await pinned.fetchImpl(pinned.baseUrl + base + (mode === 'submit' ? '' : `/${mode}`), { method: 'POST', redirect: 'error', signal,
+            headers: { ...authHeaders(pinned), 'Content-Type': 'application/json' }, body: JSON.stringify(mode === 'submit' ? retained.input : {}) });
+        const payload = await response.json();
+        if (!response.ok)
+            throw toApiError(response, payload);
+        const row = object(payload);
+        if (row.requestId !== retained.requestId || row.functionId !== retained.functionId || row.kind !== 'EXEC_RELEASE')
+            throw new Error('Release command response scope differs');
+        if (mode === 'cancel') {
+            exact(row, 'functionId,kind,requestId,state');
+            if (response.status !== 202 || row.state !== 'CANCEL_REQUESTED')
+                throw new Error('Invalid cancellation intent');
+            return row;
+        }
+        if (row.state === 'PENDING' || row.state === 'RECOVERY_HELD') {
+            exact(row, 'functionId,kind,requestId,resumeUrl,state');
+            if (response.status !== 202 || row.resumeUrl !== base + '/resume')
+                throw new Error('Untrusted release recovery URL');
+        }
+        else if (row.state === 'CANCELLED_BEFORE_ADMISSION' || row.state === 'CANCELLED_WITHOUT_CONTAINER') {
+            exact(row, 'functionId,kind,requestId,result,state');
+            if (response.status !== 200 || row.result !== null)
+                throw new Error('Invalid pre-admission cancellation');
+        }
+        else if (row.state === 'REMOVED') {
+            exact(row, 'functionId,kind,requestId,result,state');
+            const result = object(row.result);
+            exact(result, 'durationMs,exitCode,logFailure,stderr,stdout,termination,timedOut,truncated');
+            if (response.status !== 200 || !['EXITED', 'TIMEOUT', 'CANCELLED', 'HOST_REBOOT'].includes(String(result.termination))
+                || !(result.exitCode === null || Number.isSafeInteger(result.exitCode) && Number(result.exitCode) >= 0 && Number(result.exitCode) <= 255)
+                || result.termination === 'EXITED' && result.exitCode === null || typeof result.stdout !== 'string' || typeof result.stderr !== 'string'
+                || typeof result.durationMs !== 'number' || !Number.isFinite(result.durationMs) || result.durationMs < 0 || typeof result.truncated !== 'boolean'
+                || result.timedOut !== (result.termination === 'TIMEOUT'))
+                throw new Error('Invalid removed command result');
+            if (result.logFailure !== null) {
+                const failure = object(result.logFailure);
+                exact(failure, 'code');
+                if (!['LOG_LAYOUT_INVALID', 'LOG_RECORD_INVALID', 'LOG_RECORD_INCOMPLETE', 'LOG_LIMIT_EXCEEDED'].includes(String(failure.code)) || result.stdout !== '' || result.stderr !== '' || result.truncated !== true)
+                    throw new Error('Invalid log failure');
+            }
+        }
+        else
+            throw new Error('Unknown release command state');
+        return row;
+    }
+    return { record: () => structuredClone(retained), submit: async (signal) => await request('submit', signal),
+        resume: async (signal) => await request('resume', signal),
+        cancel: async (signal) => await request('cancel', signal),
+        async observe(options = {}) {
+            const timeout = options.timeoutMs ?? 900000, poll = options.pollIntervalMs ?? 100, signal = options.signal;
+            if (!Number.isSafeInteger(timeout) || timeout < 1 || timeout > 900000 || !Number.isSafeInteger(poll) || poll < 1 || poll > 10000)
+                throw new Error('Invalid command observation limits');
+            const control = new AbortController(), abort = () => control.abort(signal?.reason), timer = setTimeout(() => control.abort(), timeout);
+            signal?.addEventListener('abort', abort, { once: true });
+            if (signal?.aborted)
+                abort();
+            try {
+                for (;;) {
+                    control.signal.throwIfAborted();
+                    const result = await request('resume', control.signal);
+                    if (result.state === 'REMOVED' || result.state === 'CANCELLED_BEFORE_ADMISSION' || result.state === 'CANCELLED_WITHOUT_CONTAINER')
+                        return result;
+                    await new Promise((resolve, reject) => {
+                        const ended = () => { clearTimeout(wait); control.signal.removeEventListener('abort', ended); reject(control.signal.reason); }, wait = setTimeout(() => { control.signal.removeEventListener('abort', ended); resolve(); }, poll);
+                        control.signal.addEventListener('abort', ended, { once: true });
+                        if (control.signal.aborted)
+                            ended();
+                    });
+                }
+            }
+            catch (error) {
+                // 404 (unknown request) and 409 (changed command, lost before start) are
+                // definite outcomes: resuming the same request ID cannot change them.
+                if (error instanceof ApiError && (error.status === 404 || error.status === 409))
+                    throw error;
+                throw new ReleaseCommandObservationEndedError(structuredClone(retained), { cause: error });
+            }
+            finally {
+                clearTimeout(timer);
+                signal?.removeEventListener('abort', abort);
+            }
+        } };
+}
+/** The caller must persist the original UUID/request before the FIRST HTTP submission. */
+export async function prepareReleaseCommand(client, options) {
+    const frozen = structuredClone({ functionId: options.functionId, requestId: options.requestId, input: normalized(options.input) }), retain = options.retain;
+    identifier(frozen.functionId);
+    if (!UUID.test(frozen.requestId) || typeof retain !== 'function')
+        throw new Error('A durable original release command identity is required');
+    const snapshot = createClient({ ...client }), current = binding(snapshot), me = snapshot.workspaceId ? null : await getMe(snapshot), tenantId = snapshot.workspaceId ?? me?.activeWorkspace?.id;
+    identifier(tenantId);
+    const record = { version: 1, ...current, tenantId, functionId: frozen.functionId, requestId: frozen.requestId, input: frozen.input };
+    const prepared = operation(snapshot, record);
+    await retain(prepared.record());
+    return prepared;
+}
+/** Recovery performs NO discovery and NO submit, even after admission is withdrawn. */
+export function restoreReleaseCommand(client, record) { return operation(client, record); }
+//# sourceMappingURL=release-commands.js.map

package/dist/release-commands.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"release-commands.js","sourceRoot":"","sources":["../src/release-commands.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,WAAW,EAAE,KAAK,EAAE,UAAU,EAAwB,MAAM,gBAAgB,CAAC;AAC9G,OAAO,EAAE,yBAAyB,EAAE,MAAM,0BAA0B,CAAC;AAWrE,MAAM,OAAO,mCAAoC,SAAQ,KAAK;IACvC;IAArB,YAAqB,QAA6B,EAAC,OAAqB;QAAE,KAAK,CAAC,gEAAgE,EAAC,OAAO,CAAC,CAAC;QAArI,aAAQ,GAAR,QAAQ,CAAqB;IAAwG,CAAC;CAC5J;AASD,MAAM,IAAI,GAAC,uEAAuE,CAAC;AACnF,SAAS,UAAU,CAAC,KAAa;IAC/B,IAAG,OAAO,KAAK,KAAG,QAAQ,IAAE,CAAC,KAAK,IAAE,KAAK,CAAC,MAAM,GAAC,GAAG,IAAE,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAA,EAAE,CAAA,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,GAAC,EAAE,IAAE,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,KAAG,GAAG,CAAC;QAAC,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;AAC9K,CAAC;AACD,SAAS,MAAM,CAAC,KAAa,IAAyB,IAAG,CAAC,KAAK,IAAE,OAAO,KAAK,KAAG,QAAQ,IAAE,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;IAAC,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC,CAAA,OAAO,KAA+B,CAAC,CAAA,CAAC;AAC3M,SAAS,KAAK,CAAC,KAA4B,EAAC,IAAW,IAAE,IAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,KAAG,IAAI;IAAC,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC,CAAA,CAAC;AACzJ,SAAS,UAAU,CAAC,KAAyB;IAC3C,MAAM,KAAK,GAAC,eAAe,CAAC,KAAK,CAAC,EAAC,GAAG,GAAC,KAAK,EAAE,GAAG,IAAE,EAAE,EAAC,SAAS,GAAC,KAAK,EAAE,SAAS,IAAE,KAAK,CAAC;IACxF,MAAM,MAAM,GAAC,CAAC,CAAS,EAAC,EAAE,CAAA,OAAO,CAAC,KAAG,QAAQ,IAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAE,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAG,CAAC,CAAC;IACtG,IAAG,CAAC,KAAK,IAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAA,EAAE,CAAA,CAAC,CAAC,SAAS,EAAC,WAAW,EAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAE,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,IAAE,CAAC,KAAK,CAAC,OAAO,IAAE,KAAK,CAAC,OAAO,CAAC,MAAM,GAAC,IAAI;WAChJ,CAAC,MAAM,CAAC,aAAa,CAAC,SAAS,CAAC,IAAE,SAAS,GAAC,IAAI,IAAE,SAAS,GAAC,MAAM,IAAE,CAAC,GAAG,IAAE,OAAO,GAAG,KAAG,QAAQ,IAAE,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC;WACnH,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,EAAC,IAAI,CAAC,EAAC,EAAE,CAAA,0BAA0B,CAAC,IAAI,CAAC,GAAG,CAAC,IAAE,MAAM,CAAC,IAAI,CAAC,CAAC;QAAC,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;IAClJ,OAAO,EAAC,OAAO,EAAC,KAAK,CAAC,OAAO,EAAC,SAAS,EAAC,GAAG,EAAC,CAAC;AAC/C,CAAC;AACD,SAAS,OAAO,CAAC,MAAsB;IACrC,MAAM,GAAG,GAAC,IAAI,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAClC,IAAG,CAAC,CAAC,OAAO,EAAC,QAAQ,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAE,GAAG,CAAC,QAAQ,IAAE,GAAG,CAAC,QAAQ,IAAE,GAAG,CAAC,MAAM,IAAE,GAAG,CAAC,IAAI,IAAE,CAAC,MAAM,CAAC,MAAM;QAAC,MAAM,IAAI,KAAK,CAAC,yDAAyD,CAAC,CAAC;IAC3L,OAAO,EAAC,MAAM,EAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,MAAM,EAAC,EAAE,CAAC,EAAC,cAAc,EAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAC,CAAC;AAC5H,CAAC;AACD,SAAS,SAAS,CAAC,MAAsB,EAAC,KAA0B;IAClE,MAAM,QAAQ,GAAC,eAAe,CAAC,KAAK,CAAC,EAAC,OAAO,GAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IAC9D,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAC,mEAAmE,CAAC,CAAC;IAAA,UAAU,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAAA,UAAU,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;IAC1J,IAAG,QAAQ,CAAC,OAAO,KAAG,CAAC,IAAE,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAE,QAAQ,CAAC,MAAM,KAAG,OAAO,CAAC,MAAM,IAAE,QAAQ,CAAC,cAAc,KAAG,OAAO,CAAC,cAAc;WACvI,MAAM,CAAC,WAAW,KAAG,SAAS,IAAE,MAAM,CAAC,WAAW,KAAG,QAAQ,CAAC,QAAQ,IAAE,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,KAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAC,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;IACpN,4EAA4E;IAC5E,4EAA4E;IAC5E,MAAM,MAAM,GAAC,YAAY,CAAC,EAAC,GAAG,MAAM,EAAC,OAAO,EAAC,QAAQ,CAAC,MAAM,EAAC,WAAW,EAAC,QAAQ,CAAC,QAAQ,EAAC,SAAS,EAAC,yBAAyB,CAAC,MAAM,CAAC,SAAS,EAAC,EAAC,kBAAkB,EAAC,CAAC,GAAC,IAAI,GAAC,IAAI,EAAC,CAAC,EAAC,CAAC,CAAC;IACpL,MAAM,IAAI,GAAC,cAAc,kBAAkB,CAAC,QAAQ,CAAC,UAAU,CAAC,qBAAqB,QAAQ,CAAC,SAAS,EAAE,CAAC;IAC1G,KAAK,UAAU,OAAO,CAAC,IAA+B,EAAC,MAAmB;QACxE,MAAM,EAAE,cAAc,EAAE,CAAC;QACzB,MAAM,QAAQ,GAAC,MAAM,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,OAAO,GAAC,IAAI,GAAC,CAAC,IAAI,KAAG,QAAQ,CAAA,CAAC,CAAA,EAAE,CAAA,CAAC,CAAA,IAAI,IAAI,EAAE,CAAC,EAAC,EAAC,MAAM,EAAC,MAAM,EAAC,QAAQ,EAAC,OAAO,EAAC,MAAM;YAC9H,OAAO,EAAC,EAAC,GAAG,WAAW,CAAC,MAAM,CAAC,EAAC,cAAc,EAAC,kBAAkB,EAAC,EAAC,IAAI,EAAC,IAAI,CAAC,SAAS,CAAC,IAAI,KAAG,QAAQ,CAAA,CAAC,CAAA,QAAQ,CAAC,KAAK,CAAA,CAAC,CAAA,EAAE,CAAC,EAAC,CAAC,CAAC;QAC9H,MAAM,OAAO,GAAS,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;QAAA,IAAG,CAAC,QAAQ,CAAC,EAAE;YAAC,MAAM,UAAU,CAAC,QAAQ,EAAC,OAAO,CAAC,CAAC;QAC/F,MAAM,GAAG,GAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAC1B,IAAG,GAAG,CAAC,SAAS,KAAG,QAAQ,CAAC,SAAS,IAAE,GAAG,CAAC,UAAU,KAAG,QAAQ,CAAC,UAAU,IAAE,GAAG,CAAC,IAAI,KAAG,cAAc;YAAC,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;QACjK,IAAG,IAAI,KAAG,QAAQ,EAAC,CAAC;YAClB,KAAK,CAAC,GAAG,EAAC,iCAAiC,CAAC,CAAC;YAAA,IAAG,QAAQ,CAAC,MAAM,KAAG,GAAG,IAAE,GAAG,CAAC,KAAK,KAAG,kBAAkB;gBAAC,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;YAAA,OAAO,GAAG,CAAC;QAClK,CAAC;QACD,IAAG,GAAG,CAAC,KAAK,KAAG,SAAS,IAAE,GAAG,CAAC,KAAK,KAAG,eAAe,EAAC,CAAC;YACrD,KAAK,CAAC,GAAG,EAAC,2CAA2C,CAAC,CAAC;YAAA,IAAG,QAAQ,CAAC,MAAM,KAAG,GAAG,IAAE,GAAG,CAAC,SAAS,KAAG,IAAI,GAAC,SAAS;gBAAC,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;QACpK,CAAC;aAAK,IAAG,GAAG,CAAC,KAAK,KAAG,4BAA4B,IAAE,GAAG,CAAC,KAAK,KAAG,6BAA6B,EAAC,CAAC;YAC5F,KAAK,CAAC,GAAG,EAAC,wCAAwC,CAAC,CAAC;YAAA,IAAG,QAAQ,CAAC,MAAM,KAAG,GAAG,IAAE,GAAG,CAAC,MAAM,KAAG,IAAI;gBAAC,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;QACxJ,CAAC;aAAK,IAAG,GAAG,CAAC,KAAK,KAAG,SAAS,EAAC,CAAC;YAC9B,KAAK,CAAC,GAAG,EAAC,wCAAwC,CAAC,CAAC;YAAA,MAAM,MAAM,GAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YACpF,KAAK,CAAC,MAAM,EAAC,6EAA6E,CAAC,CAAC;YAC5F,IAAG,QAAQ,CAAC,MAAM,KAAG,GAAG,IAAE,CAAC,CAAC,QAAQ,EAAC,SAAS,EAAC,WAAW,EAAC,aAAa,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;mBAC1G,CAAC,CAAC,MAAM,CAAC,QAAQ,KAAG,IAAI,IAAE,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAE,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAE,CAAC,IAAE,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAE,GAAG,CAAC;mBAC1H,MAAM,CAAC,WAAW,KAAG,QAAQ,IAAE,MAAM,CAAC,QAAQ,KAAG,IAAI,IAAE,OAAO,MAAM,CAAC,MAAM,KAAG,QAAQ,IAAE,OAAO,MAAM,CAAC,MAAM,KAAG,QAAQ;mBACvH,OAAO,MAAM,CAAC,UAAU,KAAG,QAAQ,IAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,UAAU,CAAC,IAAE,MAAM,CAAC,UAAU,GAAC,CAAC,IAAE,OAAO,MAAM,CAAC,SAAS,KAAG,SAAS;mBAClI,MAAM,CAAC,QAAQ,KAAG,CAAC,MAAM,CAAC,WAAW,KAAG,SAAS,CAAC;gBAAC,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;YACzG,IAAG,MAAM,CAAC,UAAU,KAAG,IAAI,EAAC,CAAC;gBAAA,MAAM,OAAO,GAAC,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;gBAAA,KAAK,CAAC,OAAO,EAAC,MAAM,CAAC,CAAC;gBACzF,IAAG,CAAC,CAAC,oBAAoB,EAAC,oBAAoB,EAAC,uBAAuB,EAAC,oBAAoB,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,IAAE,MAAM,CAAC,MAAM,KAAG,EAAE,IAAE,MAAM,CAAC,MAAM,KAAG,EAAE,IAAE,MAAM,CAAC,SAAS,KAAG,IAAI;oBAAC,MAAM,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAC;YAAA,CAAC;QACzO,CAAC;;YAAK,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;QACvD,OAAO,GAAG,CAAC;IACb,CAAC;IACD,OAAO,EAAC,MAAM,EAAC,GAAE,EAAE,CAAA,eAAe,CAAC,QAAQ,CAAC,EAAC,MAAM,EAAC,KAAK,EAAC,MAAM,EAAA,EAAE,CAAA,MAAM,OAAO,CAAC,QAAQ,EAAC,MAAM,CAAqC;QAClI,MAAM,EAAC,KAAK,EAAC,MAAM,EAAA,EAAE,CAAA,MAAM,OAAO,CAAC,QAAQ,EAAC,MAAM,CAAqC;QACvF,MAAM,EAAC,KAAK,EAAC,MAAM,EAAA,EAAE,CAAA,MAAM,OAAO,CAAC,QAAQ,EAAC,MAAM,CAAsE;QACxH,KAAK,CAAC,OAAO,CAAC,OAAO,GAAC,EAAE;YACtB,MAAM,OAAO,GAAC,OAAO,CAAC,SAAS,IAAE,MAAM,EAAC,IAAI,GAAC,OAAO,CAAC,cAAc,IAAE,GAAG,EAAC,MAAM,GAAC,OAAO,CAAC,MAAM,CAAC;YAC/F,IAAG,CAAC,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,IAAE,OAAO,GAAC,CAAC,IAAE,OAAO,GAAC,MAAM,IAAE,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,IAAE,IAAI,GAAC,CAAC,IAAE,IAAI,GAAC,KAAK;gBAAC,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;YACpK,MAAM,OAAO,GAAC,IAAI,eAAe,EAAE,EAAC,KAAK,GAAC,GAAE,EAAE,CAAA,OAAO,CAAC,KAAK,CAAC,MAAM,EAAE,MAAM,CAAC,EAAC,KAAK,GAAC,UAAU,CAAC,GAAE,EAAE,CAAA,OAAO,CAAC,KAAK,EAAE,EAAC,OAAO,CAAC,CAAC;YAC1H,MAAM,EAAE,gBAAgB,CAAC,OAAO,EAAC,KAAK,EAAC,EAAC,IAAI,EAAC,IAAI,EAAC,CAAC,CAAC;YAAA,IAAG,MAAM,EAAE,OAAO;gBAAC,KAAK,EAAE,CAAC;YAC/E,IAAG,CAAC;gBACF,SAAO,CAAC;oBAAA,OAAO,CAAC,MAAM,CAAC,cAAc,EAAE,CAAC;oBAAA,MAAM,MAAM,GAAC,MAAM,OAAO,CAAC,QAAQ,EAAC,OAAO,CAAC,MAAM,CAAqC,CAAC;oBAC9H,IAAG,MAAM,CAAC,KAAK,KAAG,SAAS,IAAE,MAAM,CAAC,KAAK,KAAG,4BAA4B,IAAE,MAAM,CAAC,KAAK,KAAG,6BAA6B;wBAAC,OAAO,MAAM,CAAC;oBACrI,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAC,MAAM,EAAC,EAAE;wBAAC,MAAM,KAAK,GAAC,GAAE,EAAE,GAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAA,OAAO,CAAC,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAC,KAAK,CAAC,CAAC,CAAA,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAA,CAAC,EAC9J,IAAI,GAAC,UAAU,CAAC,GAAE,EAAE,GAAC,OAAO,CAAC,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAC,KAAK,CAAC,CAAC,CAAA,OAAO,EAAE,CAAC,CAAA,CAAC,EAAC,IAAI,CAAC,CAAC;wBAAA,OAAO,CAAC,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAC,KAAK,EAAC,EAAC,IAAI,EAAC,IAAI,EAAC,CAAC,CAAC;wBAAA,IAAG,OAAO,CAAC,MAAM,CAAC,OAAO;4BAAC,KAAK,EAAE,CAAC;oBAAA,CAAC,CAAC,CAAC;gBAAA,CAAC;YAChM,CAAC;YAAA,OAAM,KAAK,EAAC,CAAC;gBACZ,yEAAyE;gBACzE,sEAAsE;gBACtE,IAAG,KAAK,YAAY,QAAQ,IAAE,CAAC,KAAK,CAAC,MAAM,KAAG,GAAG,IAAE,KAAK,CAAC,MAAM,KAAG,GAAG,CAAC;oBAAC,MAAM,KAAK,CAAC;gBACnF,MAAM,IAAI,mCAAmC,CAAC,eAAe,CAAC,QAAQ,CAAC,EAAC,EAAC,KAAK,EAAC,KAAK,EAAC,CAAC,CAAC;YAAA,CAAC;oBACnF,CAAC;gBAAA,YAAY,CAAC,KAAK,CAAC,CAAC;gBAAA,MAAM,EAAE,mBAAmB,CAAC,OAAO,EAAC,KAAK,CAAC,CAAC;YAAA,CAAC;QAC1E,CAAC,EAAC,CAAC;AACP,CAAC;AACD,0FAA0F;AAC1F,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,MAAsB,EAAC,OAAwH;IACzL,MAAM,MAAM,GAAC,eAAe,CAAC,EAAC,UAAU,EAAC,OAAO,CAAC,UAAU,EAAC,SAAS,EAAC,OAAO,CAAC,SAAS,EAAC,KAAK,EAAC,UAAU,CAAC,OAAO,CAAC,KAAK,CAAC,EAAC,CAAC,EAAC,MAAM,GAAC,OAAO,CAAC,MAAM,CAAC;IAChJ,UAAU,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;IAAA,IAAG,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,IAAE,OAAO,MAAM,KAAG,UAAU;QAAC,MAAM,IAAI,KAAK,CAAC,yDAAyD,CAAC,CAAC;IACrK,MAAM,QAAQ,GAAC,YAAY,CAAC,EAAC,GAAG,MAAM,EAAC,CAAC,EAAC,OAAO,GAAC,OAAO,CAAC,QAAQ,CAAC,EAAC,EAAE,GAAC,QAAQ,CAAC,WAAW,CAAA,CAAC,CAAA,IAAI,CAAA,CAAC,CAAA,MAAM,KAAK,CAAC,QAAQ,CAAC,EAAC,QAAQ,GAAC,QAAQ,CAAC,WAAW,IAAE,EAAE,EAAE,eAAe,EAAE,EAAE,CAAC;IAAA,UAAU,CAAC,QAAQ,CAAC,CAAC;IAClM,MAAM,MAAM,GAAsB,EAAC,OAAO,EAAC,CAAC,EAAC,GAAG,OAAO,EAAC,QAAQ,EAAC,UAAU,EAAC,MAAM,CAAC,UAAU,EAAC,SAAS,EAAC,MAAM,CAAC,SAAS,EAAC,KAAK,EAAC,MAAM,CAAC,KAAK,EAAC,CAAC;IAC7I,MAAM,QAAQ,GAAC,SAAS,CAAC,QAAQ,EAAC,MAAM,CAAC,CAAC;IAAA,MAAM,MAAM,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;IAAA,OAAO,QAAQ,CAAC;AAC5F,CAAC;AACD,uFAAuF;AACvF,MAAM,UAAU,qBAAqB,CAAC,MAAsB,EAAC,MAA2B,IAA0B,OAAO,SAAS,CAAC,MAAM,EAAC,MAAM,CAAC,CAAC,CAAA,CAAC"}

package/dist/source-command-http.d.ts

@@ -0,0 +1,7 @@
+/** Binds every discovery/action request to a finite whole-body wait. Late replies
+ * are disposed without awaiting body cancellation or triggering another action.
+ */
+export declare function boundedSourceCommandFetch(fetchImpl: typeof fetch, options?: {
+    responseLimitBytes?: number;
+}): typeof fetch;
+//# sourceMappingURL=source-command-http.d.ts.map

package/dist/source-command-http.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"source-command-http.d.ts","sourceRoot":"","sources":["../src/source-command-http.ts"],"names":[],"mappings":"AAaA;;GAEG;AACH,wBAAgB,yBAAyB,CAAC,SAAS,EAAC,OAAO,KAAK,EAAC,OAAO,GAAC;IAAC,kBAAkB,CAAC,EAAC,MAAM,CAAA;CAAI,GAAE,OAAO,KAAK,CAoCrH"}

package/dist/source-command-http.js

@@ -0,0 +1,87 @@
+const FINITE_BYTES = 2 * 1024 * 1024, DISCOVERY_BYTES = 4 * 1024 * 1024;
+function dispose(body) {
+    try {
+        void body?.cancel().catch(() => undefined);
+    }
+    catch { /* Disposal cannot delay or reject observation. */ }
+}
+function abortable(pending, signal) {
+    if (signal.aborted) {
+        void pending.catch(() => undefined);
+        signal.throwIfAborted();
+    }
+    return new Promise((resolve, reject) => {
+        const abort = () => { signal.removeEventListener('abort', abort); reject(signal.reason); };
+        signal.addEventListener('abort', abort, { once: true });
+        pending.then(value => { signal.removeEventListener('abort', abort); resolve(value); }, error => { signal.removeEventListener('abort', abort); reject(error); });
+        if (signal.aborted)
+            abort();
+    });
+}
+/** Binds every discovery/action request to a finite whole-body wait. Late replies
+ * are disposed without awaiting body cancellation or triggering another action.
+ */
+export function boundedSourceCommandFetch(fetchImpl, options = {}) {
+    const responseLimitBytes = options.responseLimitBytes;
+    if (responseLimitBytes !== undefined && (!Number.isSafeInteger(responseLimitBytes) || responseLimitBytes < 1 || responseLimitBytes > 64 * 1024 * 1024))
+        throw new Error('Invalid response byte limit');
+    return async (input, init) => {
+        const inherited = init?.signal ?? (input instanceof Request ? input.signal : undefined);
+        const signal = AbortSignal.any([AbortSignal.timeout(60_000), ...(inherited ? [inherited] : [])]);
+        const pending = Promise.resolve().then(() => { signal.throwIfAborted(); return fetchImpl(input, { ...init, signal, redirect: 'error' }); });
+        void pending.then(response => { if (signal.aborted)
+            dispose(response.body); }, () => undefined);
+        const response = await abortable(pending, signal);
+        const pathname = new URL(input instanceof Request ? input.url : String(input)).pathname;
+        const limit = responseLimitBytes ?? (pathname.includes('/source-commands') ? FINITE_BYTES : DISCOVERY_BYTES);
+        const length = response.headers.get('content-length');
+        if (length && /^\d+$/.test(length) && Number(length) > limit) {
+            dispose(response.body);
+            throw new Error('Source command response exceeds byte limit');
+        }
+        const reader = response.body?.getReader(), chunks = [];
+        let bytes = 0, slab, used = 0;
+        try {
+            if (reader)
+                for (;;) {
+                    const chunk = await abortable(reader.read(), signal);
+                    if (chunk.done)
+                        break;
+                    bytes += chunk.value.byteLength;
+                    if (bytes > limit)
+                        throw new Error('Source command response exceeds byte limit');
+                    let offset = 0;
+                    while (offset < chunk.value.length) {
+                        slab ??= Buffer.allocUnsafe(16 * 1024);
+                        const count = Math.min(slab.length - used, chunk.value.length - offset);
+                        slab.set(chunk.value.subarray(offset, offset + count), used);
+                        used += count;
+                        offset += count;
+                        if (used === slab.length) {
+                            chunks.push(slab);
+                            slab = undefined;
+                            used = 0;
+                        }
+                    }
+                }
+            signal.throwIfAborted();
+            if (slab)
+                chunks.push(slab.subarray(0, used));
+            const data = Buffer.concat(chunks, bytes);
+            // Refuse malformed UTF8 rather than silently changing signed identities.
+            new TextDecoder('utf-8', { fatal: true }).decode(data);
+            return new Response([204, 205, 304].includes(response.status) ? null : data, { status: response.status, statusText: response.statusText, headers: response.headers });
+        }
+        catch (error) {
+            dispose(reader);
+            throw error;
+        }
+        finally {
+            try {
+                reader?.releaseLock();
+            }
+            catch { /* A pending aborted read owns completion. */ }
+        }
+    };
+}
+//# sourceMappingURL=source-command-http.js.map

package/dist/source-command-http.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"source-command-http.js","sourceRoot":"","sources":["../src/source-command-http.ts"],"names":[],"mappings":"AAAA,MAAM,YAAY,GAAC,CAAC,GAAC,IAAI,GAAC,IAAI,EAAC,eAAe,GAAC,CAAC,GAAC,IAAI,GAAC,IAAI,CAAC;AAC3D,SAAS,OAAO,CAAC,IAA+C;IAC9D,IAAI,CAAC;QAAA,KAAK,IAAI,EAAE,MAAM,EAAE,CAAC,KAAK,CAAC,GAAE,EAAE,CAAA,SAAS,CAAC,CAAC;IAAA,CAAC;IAAC,MAAM,CAAC,CAAA,kDAAkD,CAAA,CAAC;AAC5G,CAAC;AACD,SAAS,SAAS,CAAI,OAAkB,EAAC,MAAkB;IACzD,IAAG,MAAM,CAAC,OAAO,EAAE,CAAC;QAAA,KAAK,OAAO,CAAC,KAAK,CAAC,GAAE,EAAE,CAAA,SAAS,CAAC,CAAC;QAAA,MAAM,CAAC,cAAc,EAAE,CAAC;IAAA,CAAC;IAC/E,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAC,MAAM,EAAC,EAAE;QACnC,MAAM,KAAK,GAAC,GAAE,EAAE,GAAC,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAC,KAAK,CAAC,CAAC,CAAA,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAA,CAAC,CAAC;QACnF,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAC,KAAK,EAAC,EAAC,IAAI,EAAC,IAAI,EAAC,CAAC,CAAC;QACnD,OAAO,CAAC,IAAI,CAAC,KAAK,CAAA,EAAE,GAAC,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAC,KAAK,CAAC,CAAC,CAAA,OAAO,CAAC,KAAK,CAAC,CAAC,CAAA,CAAC,EAAC,KAAK,CAAA,EAAE,GAAC,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAC,KAAK,CAAC,CAAC,CAAA,MAAM,CAAC,KAAK,CAAC,CAAC,CAAA,CAAC,CAAC,CAAC;QACnJ,IAAG,MAAM,CAAC,OAAO;YAAE,KAAK,EAAE,CAAC;IAC7B,CAAC,CAAC,CAAC;AACL,CAAC;AACD;;GAEG;AACH,MAAM,UAAU,yBAAyB,CAAC,SAAsB,EAAC,UAAqC,EAAE;IACtG,MAAM,kBAAkB,GAAC,OAAO,CAAC,kBAAkB,CAAC;IACpD,IAAG,kBAAkB,KAAG,SAAS,IAAE,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,kBAAkB,CAAC,IAAE,kBAAkB,GAAC,CAAC,IAAE,kBAAkB,GAAC,EAAE,GAAC,IAAI,GAAC,IAAI,CAAC;QAAC,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;IACrL,OAAO,KAAK,EAAC,KAAK,EAAC,IAAI,EAAC,EAAE;QACxB,MAAM,SAAS,GAAC,IAAI,EAAE,MAAM,IAAI,CAAC,KAAK,YAAY,OAAO,CAAA,CAAC,CAAA,KAAK,CAAC,MAAM,CAAA,CAAC,CAAA,SAAS,CAAC,CAAC;QAClF,MAAM,MAAM,GAAC,WAAW,CAAC,GAAG,CAAC,CAAC,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC,EAAC,GAAG,CAAC,SAAS,CAAA,CAAC,CAAA,CAAC,SAAS,CAAC,CAAA,CAAC,CAAA,EAAE,CAAC,CAAC,CAAC,CAAC;QAC1F,MAAM,OAAO,GAAC,OAAO,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,GAAE,EAAE,GAAC,MAAM,CAAC,cAAc,EAAE,CAAC,CAAA,OAAO,SAAS,CAAC,KAAK,EAAC,EAAC,GAAG,IAAI,EAAC,MAAM,EAAC,QAAQ,EAAC,OAAO,EAAC,CAAC,CAAC,CAAA,CAAC,CAAC,CAAC;QAC/H,KAAK,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAA,EAAE,GAAC,IAAG,MAAM,CAAC,OAAO;YAAE,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAA,CAAC,EAAC,GAAE,EAAE,CAAA,SAAS,CAAC,CAAC;QACxF,MAAM,QAAQ,GAAC,MAAM,SAAS,CAAC,OAAO,EAAC,MAAM,CAAC,CAAC;QAC/C,MAAM,QAAQ,GAAC,IAAI,GAAG,CAAC,KAAK,YAAY,OAAO,CAAA,CAAC,CAAA,KAAK,CAAC,GAAG,CAAA,CAAC,CAAA,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC;QAClF,MAAM,KAAK,GAAC,kBAAkB,IAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,kBAAkB,CAAC,CAAA,CAAC,CAAA,YAAY,CAAA,CAAC,CAAA,eAAe,CAAC,CAAC;QACrG,MAAM,MAAM,GAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;QACpD,IAAG,MAAM,IAAI,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,GAAC,KAAK,EAAE,CAAC;YAC1D,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;YAAA,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;QACvF,CAAC;QACD,MAAM,MAAM,GAAC,QAAQ,CAAC,IAAI,EAAE,SAAS,EAAE,EAAC,MAAM,GAAU,EAAE,CAAC;QAAA,IAAI,KAAK,GAAC,CAAC,EAAC,IAAqB,EAAC,IAAI,GAAC,CAAC,CAAC;QACpG,IAAI,CAAC;YACH,IAAG,MAAM;gBAAE,SAAQ,CAAC;oBAClB,MAAM,KAAK,GAAC,MAAM,SAAS,CAAC,MAAM,CAAC,IAAI,EAAE,EAAC,MAAM,CAAC,CAAC;oBAAA,IAAG,KAAK,CAAC,IAAI;wBAAE,MAAM;oBACvE,KAAK,IAAE,KAAK,CAAC,KAAK,CAAC,UAAU,CAAC;oBAAA,IAAG,KAAK,GAAC,KAAK;wBAAE,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;oBAC5G,IAAI,MAAM,GAAC,CAAC,CAAC;oBACb,OAAM,MAAM,GAAC,KAAK,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;wBAChC,IAAI,KAAG,MAAM,CAAC,WAAW,CAAC,EAAE,GAAC,IAAI,CAAC,CAAC;wBACnC,MAAM,KAAK,GAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,GAAC,IAAI,EAAC,KAAK,CAAC,KAAK,CAAC,MAAM,GAAC,MAAM,CAAC,CAAC;wBACjE,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,EAAC,MAAM,GAAC,KAAK,CAAC,EAAC,IAAI,CAAC,CAAC;wBAAA,IAAI,IAAE,KAAK,CAAC;wBAAA,MAAM,IAAE,KAAK,CAAC;wBACnF,IAAG,IAAI,KAAG,IAAI,CAAC,MAAM,EAAE,CAAC;4BAAA,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;4BAAA,IAAI,GAAC,SAAS,CAAC;4BAAA,IAAI,GAAC,CAAC,CAAC;wBAAA,CAAC;oBACnE,CAAC;gBACH,CAAC;YACD,MAAM,CAAC,cAAc,EAAE,CAAC;YAAA,IAAG,IAAI;gBAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,EAAC,IAAI,CAAC,CAAC,CAAC;YACpE,MAAM,IAAI,GAAC,MAAM,CAAC,MAAM,CAAC,MAAM,EAAC,KAAK,CAAC,CAAC;YACvC,yEAAyE;YACzE,IAAI,WAAW,CAAC,OAAO,EAAC,EAAC,KAAK,EAAC,IAAI,EAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YACnD,OAAO,IAAI,QAAQ,CAAC,CAAC,GAAG,EAAC,GAAG,EAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAA,CAAC,CAAA,IAAI,CAAA,CAAC,CAAA,IAAI,EAAC,EAAC,MAAM,EAAC,QAAQ,CAAC,MAAM,EAAC,UAAU,EAAC,QAAQ,CAAC,UAAU,EAAC,OAAO,EAAC,QAAQ,CAAC,OAAO,EAAC,CAAC,CAAC;QAC1J,CAAC;QAAC,OAAM,KAAK,EAAE,CAAC;YAAA,OAAO,CAAC,MAAM,CAAC,CAAC;YAAA,MAAM,KAAK,CAAC;QAAA,CAAC;gBACrC,CAAC;YAAA,IAAI,CAAC;gBAAA,MAAM,EAAE,WAAW,EAAE,CAAC;YAAA,CAAC;YAAC,MAAM,CAAC,CAAA,6CAA6C,CAAA,CAAC;QAAA,CAAC;IAC9F,CAAC,CAAC;AACJ,CAAC"}

package/dist/source-command-protocol.d.ts

@@ -0,0 +1,137 @@
+export interface SourceCommandScope {
+    tenantId: string;
+    functionId: string;
+}
+export interface SourceCommandInput {
+    command: string;
+    timeoutMs?: number;
+    env?: Record<string, string>;
+}
+export interface SourceCommandRecord {
+    version: 1;
+    scope: SourceCommandScope;
+    requestId: string;
+    input: {
+        command: string;
+        timeoutMs: number;
+        env: Record<string, string>;
+    };
+    /** Observed server identity. Persist record() after acceptance to retain it across reloads. */
+    acceptedManifestDigest?: string;
+}
+export type SourceCommandState = 'PREPARING' | 'CANCEL_REQUESTED' | 'RESERVED' | 'CREATE_INTENT' | 'CREATED' | 'START_INTENT' | 'RUNNING' | 'EXITED' | 'CLEANUP_PENDING' | 'REMOVED';
+export interface SourceWorkspaceOutput {
+    baseSnapshotDigest: string;
+    snapshotDigest: string;
+    sizeBytes: number;
+}
+export interface SourceWorkspaceFailure {
+    baseSnapshotDigest: string;
+    code: 'UNSAFE_PATH' | 'UNSAFE_LINK' | 'UNSUPPORTED_ENTRY' | 'INVALID_METADATA' | 'TREE_LIMIT_EXCEEDED';
+}
+export interface SourceLogFailure {
+    code: 'LOG_LAYOUT_INVALID' | 'LOG_RECORD_INVALID' | 'LOG_RECORD_INCOMPLETE' | 'LOG_LIMIT_EXCEEDED';
+}
+export interface SourceCommandResult {
+    attemptId: string;
+    manifestDigest: string;
+    termination: 'EXITED' | 'TIMEOUT' | 'CANCELLED' | 'HOST_REBOOT';
+    exitCode: number | null;
+    durationMs: number;
+    stdoutBase64: string;
+    stderrBase64: string;
+    truncated: boolean;
+    outputSource: 'nerdctl-json-file';
+    workspaceOutput: SourceWorkspaceOutput | null;
+    workspaceFailure: SourceWorkspaceFailure | null;
+    /** Present only when terminal log capture failed; empty payloads are not captured output. */
+    logFailure?: SourceLogFailure;
+}
+export interface SourceCommandPublication {
+    id: string;
+    captureId: string;
+    status: 'APPLIED' | 'CONFLICT';
+    revision: string | null;
+    outputDigest: string;
+    baseSnapshotDigest: string;
+    sizeBytes: number;
+}
+export interface SourceCommandPublicationBinding {
+    /** The authenticated, scope-bound transport remains authority for these server journal values. */
+    tenantId: string;
+    functionId: string;
+    requestId: string;
+    manifestDigest: string;
+    baseSnapshotDigest: string;
+}
+export interface SourceCommandOutcome {
+    command: {
+        requestId: string;
+        functionId: string;
+        kind: 'EXEC_SOURCE';
+        state: SourceCommandState;
+        cancelled: boolean;
+    };
+    result: SourceCommandResult | null;
+    publication: SourceCommandPublication | null;
+    publicationBinding?: SourceCommandPublicationBinding | null;
+}
+export interface SourceCommandCancellation {
+    command: {
+        requestId: string;
+        functionId: string;
+        kind: 'EXEC_SOURCE';
+    };
+    state: 'CANCEL_REQUESTED' | 'PUBLICATION_COMMITTED';
+    publication: SourceCommandPublication | null;
+}
+/** The adapter must bind this scope to product auth/workspace headers, not a mutable current workspace. */
+export type SourceCommandTransport = (scope: SourceCommandScope, path: string, init: RequestInit) => Promise<unknown>;
+export declare class SourceCommandClientError extends Error {
+    readonly code: 'INVALID_RECORD' | 'PROTOCOL' | 'CONFLICT' | 'REJECTED' | 'UNCERTAIN' | 'WAIT_ENDED' | 'RETENTION';
+    readonly uncertain: boolean;
+    constructor(code: 'INVALID_RECORD' | 'PROTOCOL' | 'CONFLICT' | 'REJECTED' | 'UNCERTAIN' | 'WAIT_ENDED' | 'RETENTION', message: string, uncertain: boolean, cause?: unknown);
+}
+/** Execution and publication are separate: a nonzero exit alone does not describe source publication. */
+export declare function sourcePublicationState(value: SourceCommandOutcome): 'APPLIED' | 'CONFLICT' | 'CAPTURE_FAILED' | 'OUTPUT_FAILED' | 'NOT_PUBLISHED';
+export interface SourceCommandOperation {
+    record(): SourceCommandRecord;
+    /** Retry pending acceptance retention without making an HTTP request. */
+    persist(): Promise<void>;
+    submit(signal?: AbortSignal): Promise<{
+        command: {
+            requestId: string;
+            functionId: string;
+            kind: 'EXEC_SOURCE';
+            state: SourceCommandState;
+            cancelled: boolean;
+            attemptId: string;
+            manifestDigest: string;
+        };
+    }>;
+    status(signal?: AbortSignal): Promise<SourceCommandOutcome>;
+    reconcile(signal?: AbortSignal): Promise<SourceCommandOutcome>;
+    cancel(signal?: AbortSignal): Promise<SourceCommandCancellation>;
+    /** GET only. A wait deadline/abort stops observation, never execution or publication. */
+    poll(options?: {
+        signal?: AbortSignal;
+        maxWaitMs?: number;
+        intervalMs?: number;
+    }): Promise<SourceCommandOutcome>;
+}
+/** Retain must durably store the record (including secrets securely) before any HTTP call. */
+export declare function prepareSourceCommand(options: {
+    scope: SourceCommandScope;
+    input: SourceCommandInput;
+    requestId?: string;
+    retain(record: SourceCommandRecord): Promise<void>;
+    retainAcceptance?(record: SourceCommandRecord): Promise<void>;
+    transport: SourceCommandTransport;
+}): Promise<SourceCommandOperation>;
+/** Restoring an operation never submits it; callers explicitly choose observe/retry/reconcile/cancel. */
+export declare function restoreSourceCommand(value: unknown, options: {
+    scope: SourceCommandScope;
+    transport: SourceCommandTransport;
+    retainAcceptance?(record: SourceCommandRecord): Promise<void>;
+}): SourceCommandOperation;
+//# sourceMappingURL=source-command-protocol.d.ts.map

package/dist/source-command-protocol.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"source-command-protocol.d.ts","sourceRoot":"","sources":["../src/source-command-protocol.ts"],"names":[],"mappings":"AAEA,MAAM,WAAW,kBAAkB;IAAG,QAAQ,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAA;CAAE;AAC5E,MAAM,WAAW,kBAAkB;IAAG,OAAO,EAAE,MAAM,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAAC,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;CAAE;AACzG,MAAM,WAAW,mBAAmB;IAClC,OAAO,EAAE,CAAC,CAAC;IACX,KAAK,EAAE,kBAAkB,CAAC;IAC1B,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;KAAE,CAAC;IAC3E,+FAA+F;IAC/F,sBAAsB,CAAC,EAAE,MAAM,CAAC;CACjC;AACD,MAAM,MAAM,kBAAkB,GAAG,WAAW,GAAG,kBAAkB,GAAG,UAAU,GAAG,eAAe,GAAG,SAAS,GACxG,cAAc,GAAG,SAAS,GAAG,QAAQ,GAAG,iBAAiB,GAAG,SAAS,CAAC;AAC1E,MAAM,WAAW,qBAAqB;IAAG,kBAAkB,EAAE,MAAM,CAAC;IAAC,cAAc,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE;AAChH,MAAM,WAAW,sBAAsB;IACrC,kBAAkB,EAAE,MAAM,CAAC;IAC3B,IAAI,EAAE,aAAa,GAAG,aAAa,GAAG,mBAAmB,GAAG,kBAAkB,GAAG,qBAAqB,CAAC;CACxG;AACD,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,oBAAoB,GAAG,oBAAoB,GAAG,uBAAuB,GAAG,oBAAoB,CAAC;CACpG;AACD,MAAM,WAAW,mBAAmB;IAClC,SAAS,EAAE,MAAM,CAAC;IAAC,cAAc,EAAE,MAAM,CAAC;IAC1C,WAAW,EAAE,QAAQ,GAAG,SAAS,GAAG,WAAW,GAAG,aAAa,CAAC;IAChE,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;IAC5C,YAAY,EAAE,MAAM,CAAC;IAAC,YAAY,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,OAAO,CAAC;IAC/D,YAAY,EAAE,mBAAmB,CAAC;IAClC,eAAe,EAAE,qBAAqB,GAAG,IAAI,CAAC;IAC9C,gBAAgB,EAAE,sBAAsB,GAAG,IAAI,CAAC;IAChD,6FAA6F;IAC7F,UAAU,CAAC,EAAE,gBAAgB,CAAC;CAC/B;AACD,MAAM,WAAW,wBAAwB;IACvC,EAAE,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,SAAS,GAAG,UAAU,CAAC;IAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACvF,YAAY,EAAE,MAAM,CAAC;IAAC,kBAAkB,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;CACrE;AACD,MAAM,WAAW,+BAA+B;IAC9C,kGAAkG;IAClG,QAAQ,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,cAAc,EAAE,MAAM,CAAC;IAAC,kBAAkB,EAAE,MAAM,CAAC;CAC7G;AACD,MAAM,WAAW,oBAAoB;IACnC,OAAO,EAAE;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,aAAa,CAAC;QAAC,KAAK,EAAE,kBAAkB,CAAC;QAAC,SAAS,EAAE,OAAO,CAAA;KAAE,CAAC;IACvH,MAAM,EAAE,mBAAmB,GAAG,IAAI,CAAC;IACnC,WAAW,EAAE,wBAAwB,GAAG,IAAI,CAAC;IAC7C,kBAAkB,CAAC,EAAE,+BAA+B,GAAG,IAAI,CAAC;CAC7D;AACD,MAAM,WAAW,yBAAyB;IACxC,OAAO,EAAE;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,aAAa,CAAA;KAAE,CAAC;IACxE,KAAK,EAAE,kBAAkB,GAAG,uBAAuB,CAAC;IACpD,WAAW,EAAE,wBAAwB,GAAG,IAAI,CAAC;CAC9C;AACD,2GAA2G;AAC3G,MAAM,MAAM,sBAAsB,GAAG,CAAC,KAAK,EAAE,kBAAkB,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,WAAW,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;AACtH,qBAAa,wBAAyB,SAAQ,KAAK;aACrB,IAAI,EAAE,gBAAgB,GAAG,UAAU,GAAG,UAAU,GAAG,UAAU,GAAG,WAAW,GAAG,YAAY,GAAG,WAAW;aACjG,SAAS,EAAE,OAAO;gBADzB,IAAI,EAAE,gBAAgB,GAAG,UAAU,GAAG,UAAU,GAAG,UAAU,GAAG,WAAW,GAAG,YAAY,GAAG,WAAW,EAClI,OAAO,EAAE,MAAM,EAAkB,SAAS,EAAE,OAAO,EAAE,KAAK,CAAC,EAAE,OAAO;CAGvE;AA4HD,yGAAyG;AACzG,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,oBAAoB,GAAG,SAAS,GAAG,UAAU,GAAG,gBAAgB,GAAG,eAAe,GAAG,eAAe,CAEjJ;AACD,MAAM,WAAW,sBAAsB;IACrC,MAAM,IAAI,mBAAmB,CAAC;IAC9B,yEAAyE;IACzE,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IACzB,MAAM,CAAC,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC;QAAE,OAAO,EAAE;YAAE,SAAS,EAAE,MAAM,CAAC;YAAC,UAAU,EAAE,MAAM,CAAC;YAAC,IAAI,EAAE,aAAa,CAAC;YAAC,KAAK,EAAE,kBAAkB,CAAC;YAAC,SAAS,EAAE,OAAO,CAAC;YAAC,SAAS,EAAE,MAAM,CAAC;YAAC,cAAc,EAAE,MAAM,CAAA;SAAE,CAAA;KAAE,CAAC,CAAC;IAC7M,MAAM,CAAC,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAAC;IAC5D,SAAS,CAAC,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAAC;IAC/D,MAAM,CAAC,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,yBAAyB,CAAC,CAAC;IACjE,yFAAyF;IACzF,IAAI,CAAC,OAAO,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,WAAW,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAC;QAAC,UAAU,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAAC;CAClH;AAoGD,8FAA8F;AAC9F,wBAAsB,oBAAoB,CAAC,OAAO,EAAE;IAAE,KAAK,EAAE,kBAAkB,CAAC;IAAC,KAAK,EAAE,kBAAkB,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC7H,MAAM,CAAC,MAAM,EAAE,mBAAmB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAAC,gBAAgB,CAAC,CAAC,MAAM,EAAC,mBAAmB,GAAE,OAAO,CAAC,IAAI,CAAC,CAAC;IAAC,SAAS,EAAE,sBAAsB,CAAA;CAAE,GAAG,OAAO,CAAC,sBAAsB,CAAC,CAIvL;AACD,yGAAyG;AACzG,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE;IAAE,KAAK,EAAE,kBAAkB,CAAC;IAAC,SAAS,EAAE,sBAAsB,CAAC;IAAC,gBAAgB,CAAC,CAAC,MAAM,EAAC,mBAAmB,GAAE,OAAO,CAAC,IAAI,CAAC,CAAA;CAAE,GAAG,sBAAsB,CAMnN"}