@sema-agent/server 1.313.0 → 1.315.0

package/dist/plugins/image-bake-store-sql.js

@@ -0,0 +1,463 @@
+import { uuidv7 } from "@sema-agent/core";
+import { randomBytes } from "node:crypto";
+import { pgSanitizeText, pgSafeJsonStringify, pgHasUnstorable } from "./pg-safe-json.js";
+import { parseJsonOr as parseJson, toIso as iso } from "./sql-row-helpers.js";
+import { mysqlDriver, pgDriver } from "./sql-driver.js";
+import { mapBakeRow as mapRow, BAKE_SELECT_COLS as SELECT_COLS, } from "./store-contracts.js";
+export const PG_IMAGE_BAKE_SCHEMA = [
+    `CREATE TABLE IF NOT EXISTS image_bake (
+     bake_id          VARCHAR(64)  NOT NULL,
+     profile          VARCHAR(128) NOT NULL,
+     bands            JSONB        NULL,
+     base_ref         VARCHAR(255) NULL,
+     push             SMALLINT     NOT NULL DEFAULT 0,
+     dry_run          SMALLINT     NOT NULL DEFAULT 0,
+     logs             SMALLINT     NOT NULL DEFAULT 0,
+     argv             JSONB        NOT NULL,
+     status           VARCHAR(16)  NOT NULL,
+     state            VARCHAR(16)  NULL,
+     digest           VARCHAR(255) NULL,
+     repo             VARCHAR(255) NULL,
+     ref              VARCHAR(320) NULL,
+     index_id         VARCHAR(64)  NULL,
+     exit_code        INT          NULL,
+     error            TEXT         NULL,
+     error_code       VARCHAR(32)  NULL,
+     manifest_sha     VARCHAR(64)  NULL,
+     tag              VARCHAR(255) NULL,
+     idem_key         VARCHAR(255) NULL,
+     ingest_secret    VARCHAR(64)  NULL,
+     runner_id        VARCHAR(64)  NULL,
+     lease_until      TIMESTAMPTZ(3) NULL,
+     cancel_requested SMALLINT     NOT NULL DEFAULT 0,
+     requested_by     VARCHAR(128) NULL,
+     created_at       TIMESTAMPTZ(3) NOT NULL,
+     updated_at       TIMESTAMPTZ(3) NOT NULL,
+     PRIMARY KEY (bake_id),
+     CONSTRAINT uq_image_bake_idem UNIQUE (idem_key)
+   )`,
+    `CREATE INDEX IF NOT EXISTS idx_image_bake_status ON image_bake (status)`,
+    `CREATE INDEX IF NOT EXISTS idx_image_bake_created ON image_bake (created_at)`,
+    `CREATE TABLE IF NOT EXISTS image_bake_event (
+     bake_id  VARCHAR(64) NOT NULL,
+     seq      INT         NOT NULL,
+     line_ord INT         NULL,
+     kind     VARCHAR(24) NOT NULL,
+     level    VARCHAR(8)  NULL,
+     data     JSONB       NULL,
+     ts       TIMESTAMPTZ(3) NOT NULL,
+     PRIMARY KEY (bake_id, seq),
+     CONSTRAINT uq_image_bake_event_line UNIQUE (bake_id, line_ord)
+   )`,
+    `CREATE TABLE IF NOT EXISTS image_bake_lease (
+     pool        VARCHAR(32) NOT NULL DEFAULT 'standard',
+     bake_id     VARCHAR(64) NOT NULL,
+     acquired_at TIMESTAMPTZ(3) NOT NULL,
+     expires_at  TIMESTAMPTZ(3) NOT NULL,
+     PRIMARY KEY (pool)
+   )`,
+    `CREATE TABLE IF NOT EXISTS image_bake_admit (
+     pool VARCHAR(32) NOT NULL,
+     PRIMARY KEY (pool)
+   )`,
+];
+export async function ensurePgImageBakeSchema(pool, poolName = "standard") {
+    for (const stmt of PG_IMAGE_BAKE_SCHEMA)
+        await pool.query(stmt);
+    await pool.query("INSERT INTO image_bake_admit (pool) VALUES ($1) ON CONFLICT (pool) DO NOTHING", [poolName]);
+}
+function isDupKey(dialect, err) {
+    const code = err?.code;
+    return Boolean(err) && code === (dialect === "tidb" ? "ER_DUP_ENTRY" : "23505");
+}
+function dupKeyName(dialect, err) {
+    if (dialect === "tidb") {
+        const msg = String(err?.sqlMessage ?? err?.message ?? "");
+        if (/uq_line/i.test(msg))
+            return "uq_line";
+        if (/PRIMARY/i.test(msg))
+            return "primary";
+        return "other";
+    }
+    const c = String(err?.constraint ?? "");
+    if (c === "uq_image_bake_event_line")
+        return "uq_line";
+    if (/pkey$/i.test(c))
+        return "primary";
+    return "other";
+}
+const INSERT_BAKE_COLS = "INSERT INTO image_bake (bake_id, profile, bands, base_ref, push, dry_run, logs, argv, status, " +
+    "idem_key, cancel_requested, requested_by, created_at, updated_at) ";
+export class SqlImageBake {
+    db;
+    poolName;
+    constructor(db, poolName = "standard") {
+        this.db = db;
+        this.poolName = poolName;
+    }
+    q(tidb, pg) {
+        return this.db.dialect === "tidb" ? tidb : pg;
+    }
+    insertParams(bakeId, input, now) {
+        return [
+            bakeId,
+            input.profile,
+            input.bands == null ? null : JSON.stringify(input.bands),
+            input.baseRef,
+            input.push ? 1 : 0,
+            input.dryRun ? 1 : 0,
+            input.logs ? 1 : 0,
+            JSON.stringify(input.argv),
+            input.idemKey,
+            input.requestedBy,
+            now,
+            now,
+        ];
+    }
+    async createBake(input) {
+        const bakeId = uuidv7();
+        const now = new Date();
+        try {
+            await this.db.query(this.q(INSERT_BAKE_COLS + "VALUES (?,?,?,?,?,?,?,?,'queued',?,0,?,?,?)", INSERT_BAKE_COLS + "VALUES ($1,$2,$3::jsonb,$4,$5,$6,$7,$8::jsonb,'queued',$9,0,$10,$11,$12)"), this.insertParams(bakeId, input, now));
+        }
+        catch (err) {
+            if (isDupKey(this.db.dialect, err) && input.idemKey) {
+                const existing = await this.getBakeByIdem(input.idemKey);
+                if (existing)
+                    return { created: false, bake: existing };
+            }
+            throw err;
+        }
+        const bake = await this.getBake(bakeId);
+        if (!bake)
+            throw new Error("createBake: row vanished after insert");
+        return { created: true, bake };
+    }
+    async createBakeIfIdle(input) {
+        const bakeId = uuidv7();
+        const now = new Date();
+        const params = this.insertParams(bakeId, input, now);
+        const conn = await this.db.connect();
+        let inserted = false;
+        try {
+            if (this.db.dialect === "tidb") {
+                await conn.beginPessimistic();
+                await conn.query("INSERT IGNORE INTO image_bake_admit (pool) VALUES (?)", [this.poolName]);
+                await conn.query("SELECT pool FROM image_bake_admit WHERE pool = ? FOR UPDATE", [this.poolName]);
+                const busy = await conn.query("SELECT 1 FROM image_bake WHERE status IN ('queued','running') AND dry_run = 0 LIMIT 1 FOR UPDATE");
+                if (busy.rows.length === 0) {
+                    await conn.query(INSERT_BAKE_COLS + "VALUES (?,?,?,?,?,?,?,?,'queued',?,0,?,?,?)", params);
+                    inserted = true;
+                }
+                await conn.commit();
+            }
+            else {
+                await conn.begin();
+                await conn.query("INSERT INTO image_bake_admit (pool) VALUES ($1) ON CONFLICT (pool) DO NOTHING", [this.poolName]);
+                await conn.query("SELECT pool FROM image_bake_admit WHERE pool = $1 FOR UPDATE", [this.poolName]);
+                const res = await conn.query(INSERT_BAKE_COLS +
+                    "SELECT $1,$2,$3::jsonb,$4,$5,$6,$7,$8::jsonb,'queued',$9,0,$10,$11,$12 WHERE NOT EXISTS " +
+                    "(SELECT 1 FROM image_bake WHERE status IN ('queued','running') AND dry_run = 0)", params);
+                inserted = res.affected > 0;
+                await conn.commit();
+            }
+        }
+        catch (err) {
+            try {
+                await conn.rollback();
+            }
+            catch {
+            }
+            throw err;
+        }
+        finally {
+            conn.release();
+        }
+        if (!inserted)
+            return { created: false, bake: null };
+        const bake = await this.getBake(bakeId);
+        if (!bake)
+            throw new Error("createBakeIfIdle: row vanished after insert");
+        return { created: true, bake };
+    }
+    async getBake(bakeId) {
+        const { rows } = await this.db.query(this.q(`SELECT ${SELECT_COLS} FROM image_bake WHERE bake_id = ? LIMIT 1`, `SELECT ${SELECT_COLS} FROM image_bake WHERE bake_id = $1 LIMIT 1`), [bakeId]);
+        return rows[0] ? mapRow(rows[0]) : null;
+    }
+    async getBakeByIdem(idemKey) {
+        const { rows } = await this.db.query(this.q(`SELECT ${SELECT_COLS} FROM image_bake WHERE idem_key = ? LIMIT 1`, `SELECT ${SELECT_COLS} FROM image_bake WHERE idem_key = $1 LIMIT 1`), [idemKey]);
+        return rows[0] ? mapRow(rows[0]) : null;
+    }
+    async findActiveByArgv(argv) {
+        const { rows } = await this.db.query(this.q(`SELECT ${SELECT_COLS} FROM image_bake WHERE status IN ('queued','running') AND argv = CAST(? AS JSON) ` +
+            "ORDER BY created_at DESC LIMIT 1", `SELECT ${SELECT_COLS} FROM image_bake WHERE status IN ('queued','running') AND argv = $1::jsonb ` +
+            "ORDER BY created_at DESC LIMIT 1"), [JSON.stringify(argv)]);
+        return rows[0] ? mapRow(rows[0]) : null;
+    }
+    async findActiveAny() {
+        const { rows } = await this.db.query(`SELECT ${SELECT_COLS} FROM image_bake WHERE status IN ('queued','running') AND dry_run = 0 ` +
+            "ORDER BY created_at ASC LIMIT 1", []);
+        return rows[0] ? mapRow(rows[0]) : null;
+    }
+    async findNextQueuedId() {
+        const { rows } = await this.db.query("SELECT bake_id FROM image_bake WHERE status = 'queued' ORDER BY created_at ASC LIMIT 1", []);
+        return rows[0] ? String(rows[0].bake_id) : null;
+    }
+    async claimBake(bakeId, runnerId, leaseMs) {
+        const conn = await this.db.connect();
+        try {
+            await conn.begin();
+            const now = new Date();
+            const leaseUntil = new Date(now.getTime() + leaseMs);
+            const ingestSecret = randomBytes(24).toString("hex");
+            const bakeRes = await conn.query(this.q("UPDATE image_bake SET status='running', state='PENDING', runner_id=?, ingest_secret=?, " +
+                "lease_until=?, updated_at=? WHERE bake_id=? AND status='queued'", "UPDATE image_bake SET status='running', state='PENDING', runner_id=$1, ingest_secret=$2, " +
+                "lease_until=$3, updated_at=$4 WHERE bake_id=$5 AND status='queued'"), [runnerId, ingestSecret, leaseUntil, now, bakeId]);
+            if (bakeRes.affected !== 1) {
+                await conn.rollback();
+                return null;
+            }
+            const dry = await conn.query(this.q("SELECT dry_run FROM image_bake WHERE bake_id=?", "SELECT dry_run FROM image_bake WHERE bake_id=$1"), [bakeId]);
+            if (Boolean(dry.rows[0]?.dry_run)) {
+                await conn.commit();
+                return (await this.getBake(bakeId)) ?? null;
+            }
+            const leaseSel = await conn.query(this.q("SELECT bake_id, expires_at FROM image_bake_lease WHERE pool=?", "SELECT bake_id, expires_at FROM image_bake_lease WHERE pool=$1"), [this.poolName]);
+            const cur = leaseSel.rows[0];
+            if (!cur) {
+                try {
+                    await conn.query(this.q("INSERT INTO image_bake_lease (pool, bake_id, acquired_at, expires_at) VALUES (?,?,?,?)", "INSERT INTO image_bake_lease (pool, bake_id, acquired_at, expires_at) VALUES ($1,$2,$3,$4)"), [this.poolName, bakeId, now, leaseUntil]);
+                }
+                catch (err) {
+                    if (isDupKey(this.db.dialect, err)) {
+                        await conn.rollback();
+                        return null;
+                    }
+                    throw err;
+                }
+            }
+            else {
+                if (new Date(cur.expires_at).getTime() >= now.getTime()) {
+                    await conn.rollback();
+                    return null;
+                }
+                const holderId = String(cur.bake_id ?? "");
+                const holder = await conn.query(this.q("SELECT status FROM image_bake WHERE bake_id=?", "SELECT status FROM image_bake WHERE bake_id=$1"), [holderId]);
+                const holderStatus = String(holder.rows[0]?.status ?? "");
+                if (holderStatus === "queued" || holderStatus === "running") {
+                    await conn.rollback();
+                    return null;
+                }
+                const stealRes = await conn.query(this.q("UPDATE image_bake_lease SET bake_id=?, acquired_at=?, expires_at=? WHERE pool=? AND bake_id=? AND expires_at=?", "UPDATE image_bake_lease SET bake_id=$1, acquired_at=$2, expires_at=$3 WHERE pool=$4 AND bake_id=$5 AND expires_at=$6"), [bakeId, now, leaseUntil, this.poolName, holderId, cur.expires_at]);
+                if (stealRes.affected === 0) {
+                    await conn.rollback();
+                    return null;
+                }
+            }
+            const check = await conn.query(this.q("SELECT bake_id FROM image_bake_lease WHERE pool=?", "SELECT bake_id FROM image_bake_lease WHERE pool=$1"), [this.poolName]);
+            if (String(check.rows[0]?.bake_id ?? "") !== bakeId) {
+                await conn.rollback();
+                return null;
+            }
+            await conn.commit();
+            return (await this.getBake(bakeId)) ?? null;
+        }
+        catch (err) {
+            try {
+                await conn.rollback();
+            }
+            catch {
+            }
+            throw err;
+        }
+        finally {
+            conn.release();
+        }
+    }
+    async appendEvent(bakeId, kind, data, opts = {}) {
+        const lineOrd = opts.lineOrd ?? null;
+        if (lineOrd !== null && (await this.lineOrdExists(bakeId, lineOrd)))
+            return null;
+        const payload = data == null ? null : this.db.dialect === "tidb" ? JSON.stringify(data) : pgSafeJsonStringify(data);
+        for (let attempt = 0; attempt < 50; attempt += 1) {
+            const seq = (await this.maxSeq(bakeId)) + 1;
+            try {
+                await this.db.query(this.q("INSERT INTO image_bake_event (bake_id, seq, line_ord, kind, level, data, ts) VALUES (?,?,?,?,?,?,?)", "INSERT INTO image_bake_event (bake_id, seq, line_ord, kind, level, data, ts) VALUES ($1,$2,$3,$4,$5,$6::jsonb,$7)"), [bakeId, seq, lineOrd, kind, opts.level ?? null, payload, new Date()]);
+                return seq;
+            }
+            catch (err) {
+                if (!isDupKey(this.db.dialect, err))
+                    throw err;
+                const which = dupKeyName(this.db.dialect, err);
+                if (which === "uq_line" && lineOrd !== null)
+                    return null;
+                await new Promise((r) => setTimeout(r, Math.floor(Math.random() * 5)));
+            }
+        }
+        throw new Error(`appendEvent: seq allocation lost the (bake_id,seq) race after retries (bakeId=${bakeId})`);
+    }
+    async lineOrdExists(bakeId, lineOrd) {
+        const { rows } = await this.db.query(this.q("SELECT 1 FROM image_bake_event WHERE bake_id = ? AND line_ord = ? LIMIT 1", "SELECT 1 FROM image_bake_event WHERE bake_id = $1 AND line_ord = $2 LIMIT 1"), [bakeId, lineOrd]);
+        return rows.length > 0;
+    }
+    async maxSeq(bakeId) {
+        const { rows } = await this.db.query(this.q("SELECT MAX(seq) AS m FROM image_bake_event WHERE bake_id = ?", "SELECT MAX(seq) AS m FROM image_bake_event WHERE bake_id = $1"), [bakeId]);
+        const m = rows[0]?.m;
+        return m == null ? 0 : Number(m);
+    }
+    async retainedFrom(bakeId) {
+        const { rows } = await this.db.query(this.q("SELECT MIN(seq) AS m FROM image_bake_event WHERE bake_id = ?", "SELECT MIN(seq) AS m FROM image_bake_event WHERE bake_id = $1"), [bakeId]);
+        const m = rows[0]?.m;
+        return m == null ? 0 : Number(m);
+    }
+    async getEvents(bakeId, afterSeq) {
+        const { rows } = await this.db.query(this.q("SELECT seq, line_ord, kind, level, data, ts FROM image_bake_event WHERE bake_id = ? AND seq > ? ORDER BY seq ASC", "SELECT seq, line_ord, kind, level, data, ts FROM image_bake_event WHERE bake_id = $1 AND seq > $2 ORDER BY seq ASC"), [bakeId, afterSeq]);
+        return rows.map((r) => ({
+            seq: Number(r.seq),
+            lineOrd: r.line_ord === null ? null : Number(r.line_ord),
+            kind: String(r.kind),
+            level: r.level ?? null,
+            data: parseJson(r.data, null),
+            ts: iso(r.ts),
+        }));
+    }
+    async setStatus(bakeId, status) {
+        await this.db.query(this.q("UPDATE image_bake SET status = ?, updated_at = ? WHERE bake_id = ?", "UPDATE image_bake SET status = $1, updated_at = $2 WHERE bake_id = $3"), [status, new Date(), bakeId]);
+    }
+    async setState(bakeId, state) {
+        await this.db.query(this.q("UPDATE image_bake SET state = ?, updated_at = ? WHERE bake_id = ?", "UPDATE image_bake SET state = $1, updated_at = $2 WHERE bake_id = $3"), [state, new Date(), bakeId]);
+    }
+    async setTerminal(bakeId, t) {
+        let affectedRows = 0;
+        await this.tx(async (conn) => {
+            const res = await conn.query(this.q("UPDATE image_bake SET status=?, state=?, digest=?, repo=?, ref=?, index_id=?, exit_code=?, error=?, " +
+                "error_code=?, manifest_sha=?, tag=?, ingest_secret=NULL, updated_at=? WHERE bake_id=? AND status IN ('queued','running')", "UPDATE image_bake SET status=$1, state=$2, digest=$3, repo=$4, ref=$5, index_id=$6, exit_code=$7, error=$8, " +
+                "error_code=$9, manifest_sha=$10, tag=$11, ingest_secret=NULL, updated_at=$12 WHERE bake_id=$13 AND status IN ('queued','running')"), this.db.dialect === "tidb" ? this.terminalParamsTidb(bakeId, t) : this.terminalParamsPg(bakeId, t));
+            affectedRows = res.affected;
+            await conn.query(this.q("DELETE FROM image_bake_lease WHERE pool = ? AND bake_id = ?", "DELETE FROM image_bake_lease WHERE pool = $1 AND bake_id = $2"), [this.poolName, bakeId]);
+        });
+        return affectedRows;
+    }
+    terminalParamsTidb(bakeId, t) {
+        return [
+            t.status,
+            t.state,
+            t.digest ?? null,
+            t.repo ?? null,
+            t.ref ?? null,
+            t.indexId ?? null,
+            t.exitCode ?? null,
+            t.error ?? null,
+            t.errorCode ?? null,
+            t.manifestSha ?? null,
+            t.tag ?? null,
+            new Date(),
+            bakeId,
+        ];
+    }
+    terminalParamsPg(bakeId, t) {
+        const invalidIdentity = (t.digest != null && pgHasUnstorable(t.digest)) ||
+            (t.manifestSha != null && pgHasUnstorable(t.manifestSha)) ||
+            (t.repo != null && pgHasUnstorable(t.repo)) ||
+            (t.ref != null && pgHasUnstorable(t.ref));
+        return [
+            invalidIdentity ? "failed" : t.status,
+            t.state,
+            invalidIdentity ? null : t.digest ?? null,
+            invalidIdentity ? null : t.repo ?? null,
+            invalidIdentity ? null : t.ref ?? null,
+            t.indexId ?? null,
+            t.exitCode ?? null,
+            t.error == null ? null : pgSanitizeText(t.error),
+            t.errorCode == null ? null : pgSanitizeText(t.errorCode),
+            invalidIdentity ? null : t.manifestSha ?? null,
+            t.tag == null ? null : pgSanitizeText(t.tag),
+            new Date(),
+            bakeId,
+        ];
+    }
+    async setIndexId(bakeId, indexId) {
+        const res = await this.db.query(this.q("UPDATE image_bake SET index_id = ?, updated_at = ? WHERE bake_id = ? AND status IN ('queued','running')", "UPDATE image_bake SET index_id = $1, updated_at = $2 WHERE bake_id = $3 AND status IN ('queued','running')"), [indexId, new Date(), bakeId]);
+        return res.affected >= 1;
+    }
+    async heartbeatLease(bakeId, runnerId, leaseMs) {
+        const now = new Date();
+        const leaseUntil = new Date(now.getTime() + leaseMs);
+        const res = await this.db.query(this.q("UPDATE image_bake SET lease_until = ?, updated_at = ? WHERE bake_id = ? AND runner_id = ? AND status = 'running'", "UPDATE image_bake SET lease_until = $1, updated_at = $2 WHERE bake_id = $3 AND runner_id = $4 AND status = 'running'"), [leaseUntil, now, bakeId, runnerId]);
+        if (res.affected < 1)
+            return false;
+        const dry = await this.db.query(this.q("SELECT dry_run FROM image_bake WHERE bake_id = ?", "SELECT dry_run FROM image_bake WHERE bake_id = $1"), [bakeId]);
+        if (Boolean(dry.rows[0]?.dry_run))
+            return true;
+        const leaseRes = await this.db.query(this.q("UPDATE image_bake_lease SET expires_at = ? WHERE pool = ? AND bake_id = ?", "UPDATE image_bake_lease SET expires_at = $1 WHERE pool = $2 AND bake_id = $3"), [leaseUntil, this.poolName, bakeId]);
+        return leaseRes.affected >= 1;
+    }
+    async requestCancel(bakeId) {
+        const res = await this.db.query(this.q("UPDATE image_bake SET cancel_requested = 1, updated_at = ? WHERE bake_id = ? AND status IN ('queued','running')", "UPDATE image_bake SET cancel_requested = 1, updated_at = $1 WHERE bake_id = $2 AND status IN ('queued','running')"), [new Date(), bakeId]);
+        return res.affected > 0;
+    }
+    async isCancelRequested(bakeId) {
+        const { rows } = await this.db.query(this.q("SELECT cancel_requested FROM image_bake WHERE bake_id = ?", "SELECT cancel_requested FROM image_bake WHERE bake_id = $1"), [bakeId]);
+        return Boolean(rows[0]?.cancel_requested);
+    }
+    async reapStaleBakes(olderThanMs) {
+        const cutoff = new Date(Date.now() - olderThanMs);
+        const victims = await this.db.query(this.q("SELECT bake_id FROM image_bake WHERE status = 'running' AND " + "(lease_until IS NULL OR lease_until < ?) AND updated_at < ?", "SELECT bake_id FROM image_bake WHERE status = 'running' AND " + "(lease_until IS NULL OR lease_until < $1) AND updated_at < $2"), [cutoff, cutoff]);
+        let reaped = 0;
+        for (const v of victims.rows) {
+            const bakeId = String(v.bake_id);
+            const res = await this.db.query(this.q("UPDATE image_bake SET status='failed', state='FAILED', error='bake-runner lost (lease expired)', " +
+                "ingest_secret=NULL, index_id=NULL, updated_at=? WHERE bake_id=? AND status='running'", "UPDATE image_bake SET status='failed', state='FAILED', error='bake-runner lost (lease expired)', " +
+                "ingest_secret=NULL, index_id=NULL, updated_at=$1 WHERE bake_id=$2 AND status='running'"), [new Date(), bakeId]);
+            if (res.affected === 1) {
+                reaped += 1;
+                try {
+                    await this.appendEvent(bakeId, "done", {
+                        status: "FAILED",
+                        digest: null,
+                        repo: null,
+                        ref: null,
+                        indexId: null,
+                        exitCode: null,
+                        error: "bake-runner lost (lease expired)",
+                        errorCode: null,
+                    });
+                }
+                catch {
+                }
+                await this.db.query(this.q("DELETE FROM image_bake_lease WHERE pool = ? AND bake_id = ?", "DELETE FROM image_bake_lease WHERE pool = $1 AND bake_id = $2"), [this.poolName, bakeId]);
+            }
+        }
+        return reaped;
+    }
+    async tx(fn) {
+        const conn = await this.db.connect();
+        try {
+            await conn.begin();
+            await fn(conn);
+            await conn.commit();
+        }
+        catch (err) {
+            try {
+                await conn.rollback();
+            }
+            catch {
+            }
+            throw err;
+        }
+        finally {
+            conn.release();
+        }
+    }
+}
+export class TiDBImageBake extends SqlImageBake {
+    constructor(pool, poolName = "standard") {
+        super(mysqlDriver(pool), poolName);
+    }
+}
+export class PgImageBake extends SqlImageBake {
+    constructor(pool, poolName = "standard") {
+        super(pgDriver(pool), poolName);
+    }
+}
+//# sourceMappingURL=image-bake-store-sql.js.map

package/dist/plugins/k8s-bg-scripts.d.ts

@@ -0,0 +1,19 @@
+export declare function buildBgRunnerScript(dir: string): string;
+export declare function buildBgLauncherScript(dir: string, cmdShB64: string, runnerShB64: string): string;
+export declare function buildBgPollScript(dir: string, stdoutCursor: number, stderrCursor: number, readCap: number): string;
+export declare function buildBgKillScript(dir: string): string;
+export declare function buildBgDisposeScript(dir: string): string;
+export declare function buildDetachCapableExec(dir: string, command: string): string;
+export interface ParsedBgPoll {
+    gone: boolean;
+    outTotal: number;
+    errTotal: number;
+    exitCode?: number;
+    alive: boolean;
+    stdout: string;
+    stdoutBytes: number;
+    stderr: string;
+    stderrBytes: number;
+}
+export declare function parseBgPollOutput(raw: string): ParsedBgPoll | undefined;
+//# sourceMappingURL=k8s-bg-scripts.d.ts.map

package/dist/plugins/k8s-bg-scripts.js

@@ -0,0 +1,129 @@
+import { shellQuote } from "./remote-shell.js";
+export function buildBgRunnerScript(dir) {
+    const q = (name) => shellQuote(`${dir}/${name}`);
+    return [
+        `echo $$ > ${q("pgid.tmp")} 2>/dev/null && mv ${q("pgid.tmp")} ${q("pgid")} 2>/dev/null`,
+        `sh ${q("cmd.sh")} > ${q("out")} 2> ${q("err")} < /dev/null`,
+        `__RC=$?`,
+        `echo $__RC > ${q("exit.tmp")} 2>/dev/null && mv ${q("exit.tmp")} ${q("exit")} 2>/dev/null`,
+    ].join("\n");
+}
+export function buildBgLauncherScript(dir, cmdShB64, runnerShB64) {
+    const d = shellQuote(dir);
+    const q = (name) => shellQuote(`${dir}/${name}`);
+    return [
+        `mkdir -p ${d} && chmod 700 ${d}`,
+        `printf %s '${cmdShB64}' | base64 -d > ${q("cmd.sh")}`,
+        `printf %s '${runnerShB64}' | base64 -d > ${q("runner.sh")}`,
+        `setsid sh ${q("runner.sh")} >/dev/null 2>&1 &`,
+        `__i=0; while [ ! -s ${q("pgid")} ] && [ $__i -lt 40 ]; do __i=$((__i+1)); sleep 0.05; done`,
+        `if [ -s ${q("pgid")} ]; then echo SEMABG_LAUNCHED; else echo SEMABG_NOPGID; fi`,
+    ].join("\n");
+}
+export function buildBgPollScript(dir, stdoutCursor, stderrCursor, readCap) {
+    const d = shellQuote(dir);
+    const slice = (file, cursor) => [
+        `__N=$((__T - ${cursor}))`,
+        `if [ "$__N" -gt 0 ]; then`,
+        `  if [ "$__N" -le ${readCap} ]; then tail -c +$(( ${cursor} + 1 )) ${d}/${file} 2>/dev/null | head -c "$__N" | base64;`,
+        `  else tail -c +$(( __T - ${readCap} + 1 )) ${d}/${file} 2>/dev/null | head -c ${readCap} | base64; fi`,
+        `fi`,
+    ].join("\n");
+    return [
+        `if [ ! -d ${d} ]; then echo SEMABG_GONE; exit 0; fi`,
+        `__OT=$(wc -c < ${d}/out 2>/dev/null); __OT=$(( \${__OT:-0} + 0 ))`,
+        `__ET=$(wc -c < ${d}/err 2>/dev/null); __ET=$(( \${__ET:-0} + 0 ))`,
+        `__EX=$( [ -f ${d}/exit ] && cat ${d}/exit 2>/dev/null || echo - )`,
+        `__PG=$(cat ${d}/pgid 2>/dev/null); __PG=\${__PG:--}`,
+        `if [ "$__PG" = "-" ]; then __AL=1; elif kill -0 -"$__PG" 2>/dev/null; then __AL=1; else __AL=0; fi`,
+        `echo "SEMABG_META o=$__OT e=$__ET x=$__EX a=$__AL"`,
+        `echo SEMABG_O`,
+        `__T=$__OT`,
+        slice("out", stdoutCursor),
+        `echo SEMABG_E`,
+        `__T=$__ET`,
+        slice("err", stderrCursor),
+        `echo SEMABG_X`,
+    ].join("\n");
+}
+export function buildBgKillScript(dir) {
+    const d = shellQuote(dir);
+    return [
+        `__i=0; while [ ! -s ${d}/pgid ] && [ $__i -lt 40 ]; do __i=$((__i+1)); sleep 0.05; done`,
+        `__PG=$(cat ${d}/pgid 2>/dev/null); __PG=\${__PG:--}`,
+        `if [ "$__PG" != "-" ]; then kill -TERM -"$__PG" 2>/dev/null || kill -TERM "$__PG" 2>/dev/null; sleep 1; kill -KILL -"$__PG" 2>/dev/null || kill -KILL "$__PG" 2>/dev/null; fi`,
+        `echo SEMABG_KILLED`,
+    ].join("\n");
+}
+export function buildBgDisposeScript(dir) {
+    const d = shellQuote(dir);
+    return [
+        `__PG=$(cat ${d}/pgid 2>/dev/null); __PG=\${__PG:--}`,
+        `if [ "$__PG" != "-" ]; then kill -KILL -"$__PG" 2>/dev/null || kill -KILL "$__PG" 2>/dev/null; fi`,
+        `rm -rf ${d} 2>/dev/null`,
+        `echo SEMABG_DISPOSED`,
+    ].join("\n");
+}
+export function buildDetachCapableExec(dir, command) {
+    const d = shellQuote(dir);
+    const q = (name) => shellQuote(`${dir}/${name}`);
+    const cmdB64 = Buffer.from(command, "utf8").toString("base64");
+    const writePgid = (val) => `printf %s ${val} > ${q("pgid.tmp")} 2>/dev/null && mv ${q("pgid.tmp")} ${q("pgid")} 2>/dev/null`;
+    return [
+        `__cmd=$(printf %s '${cmdB64}' | base64 -d)`,
+        `mkdir -p ${d} 2>/dev/null`,
+        `trap 'rm -rf ${d} 2>/dev/null' EXIT`,
+        `if command -v setsid >/dev/null 2>&1; then`,
+        `  setsid sh -c "$__cmd" &`,
+        `  __pg=$!`,
+        `  ${writePgid('"$__pg"')}`,
+        `  wait "$__pg"; __rc=$?`,
+        `else`,
+        `  ${writePgid('"$$"')}`,
+        `  sh -c "$__cmd"; __rc=$?`,
+        `fi`,
+        `exit $__rc`,
+    ].join("\n");
+}
+export function parseBgPollOutput(raw) {
+    if (raw.includes("SEMABG_GONE")) {
+        return { gone: true, outTotal: 0, errTotal: 0, alive: false, stdout: "", stdoutBytes: 0, stderr: "", stderrBytes: 0 };
+    }
+    const lines = raw.split("\n");
+    const metaIdx = lines.findIndex((l) => l.startsWith("SEMABG_META "));
+    if (metaIdx < 0)
+        return undefined;
+    const oIdx = lines.indexOf("SEMABG_O", metaIdx + 1);
+    const eIdx = oIdx >= 0 ? lines.indexOf("SEMABG_E", oIdx + 1) : -1;
+    const xIdx = eIdx >= 0 ? lines.indexOf("SEMABG_X", eIdx + 1) : -1;
+    if (oIdx < 0 || eIdx < 0 || xIdx < 0)
+        return undefined;
+    const m = /o=(\d+) e=(\d+) x=(\S+) a=([01])/.exec(lines[metaIdx].slice("SEMABG_META ".length));
+    if (!m)
+        return undefined;
+    const outTotal = parseInt(m[1], 10);
+    const errTotal = parseInt(m[2], 10);
+    const exTok = m[3];
+    const alive = m[4] === "1";
+    const exitParsed = exTok === "-" ? NaN : parseInt(exTok, 10);
+    const exitCode = Number.isFinite(exitParsed) ? exitParsed : undefined;
+    const decode = (from, to) => {
+        const b64 = lines.slice(from, to).join("").replace(/\s+/g, "");
+        const buf = Buffer.from(b64, "base64");
+        return { text: buf.toString("utf8"), bytes: buf.length };
+    };
+    const o = decode(oIdx + 1, eIdx);
+    const e = decode(eIdx + 1, xIdx);
+    return {
+        gone: false,
+        outTotal,
+        errTotal,
+        ...(exitCode !== undefined ? { exitCode } : {}),
+        alive,
+        stdout: o.text,
+        stdoutBytes: o.bytes,
+        stderr: e.text,
+        stderrBytes: e.bytes,
+    };
+}
+//# sourceMappingURL=k8s-bg-scripts.js.map

package/dist/plugins/k8s-exec-protocol.d.ts

@@ -0,0 +1,20 @@
+export interface PodSpecPatch {
+    volumes?: unknown[];
+    volumeMounts?: unknown[];
+    podSecurityContext?: Record<string, unknown>;
+    containerSecurityContext?: Record<string, unknown>;
+    labels?: Record<string, string>;
+}
+export declare function applyPodSpecPatch(pod: {
+    metadata: {
+        labels?: Record<string, string>;
+    };
+    spec: Record<string, unknown>;
+}, patch: PodSpecPatch): void;
+export declare function execSocketTlsOptions(ca: string | undefined, insecureTls: boolean): Record<string, unknown>;
+export declare function exitCodeFromStatus(statusJson: string): {
+    exitCode: number;
+} | {
+    error: string;
+};
+//# sourceMappingURL=k8s-exec-protocol.d.ts.map