@sema-agent/server 1.314.0 → 1.315.0

package/dist/plugins/pg-image-bake.js

@@ -1,421 +1,2 @@
-import { uuidv7 } from "@sema-agent/core";
-import { randomBytes } from "node:crypto";
-import { pgSanitizeText, pgSafeJsonStringify, pgHasUnstorable } from "./pg-safe-json.js";
-import { parseJsonOr as parseJson, toIso as iso } from "./sql-row-helpers.js";
-import { mapBakeRow as mapRow, BAKE_SELECT_COLS as SELECT_COLS } from "./store-contracts.js";
-export const PG_IMAGE_BAKE_SCHEMA = [
-    `CREATE TABLE IF NOT EXISTS image_bake (
-     bake_id          VARCHAR(64)  NOT NULL,
-     profile          VARCHAR(128) NOT NULL,
-     bands            JSONB        NULL,
-     base_ref         VARCHAR(255) NULL,
-     push             SMALLINT     NOT NULL DEFAULT 0,
-     dry_run          SMALLINT     NOT NULL DEFAULT 0,
-     logs             SMALLINT     NOT NULL DEFAULT 0,
-     argv             JSONB        NOT NULL,
-     status           VARCHAR(16)  NOT NULL,
-     state            VARCHAR(16)  NULL,
-     digest           VARCHAR(255) NULL,
-     repo             VARCHAR(255) NULL,
-     ref              VARCHAR(320) NULL,
-     index_id         VARCHAR(64)  NULL,
-     exit_code        INT          NULL,
-     error            TEXT         NULL,
-     error_code       VARCHAR(32)  NULL,
-     manifest_sha     VARCHAR(64)  NULL,
-     tag              VARCHAR(255) NULL,
-     idem_key         VARCHAR(255) NULL,
-     ingest_secret    VARCHAR(64)  NULL,
-     runner_id        VARCHAR(64)  NULL,
-     lease_until      TIMESTAMPTZ(3) NULL,
-     cancel_requested SMALLINT     NOT NULL DEFAULT 0,
-     requested_by     VARCHAR(128) NULL,
-     created_at       TIMESTAMPTZ(3) NOT NULL,
-     updated_at       TIMESTAMPTZ(3) NOT NULL,
-     PRIMARY KEY (bake_id),
-     CONSTRAINT uq_image_bake_idem UNIQUE (idem_key)
-   )`,
-    `CREATE INDEX IF NOT EXISTS idx_image_bake_status ON image_bake (status)`,
-    `CREATE INDEX IF NOT EXISTS idx_image_bake_created ON image_bake (created_at)`,
-    `CREATE TABLE IF NOT EXISTS image_bake_event (
-     bake_id  VARCHAR(64) NOT NULL,
-     seq      INT         NOT NULL,
-     line_ord INT         NULL,
-     kind     VARCHAR(24) NOT NULL,
-     level    VARCHAR(8)  NULL,
-     data     JSONB       NULL,
-     ts       TIMESTAMPTZ(3) NOT NULL,
-     PRIMARY KEY (bake_id, seq),
-     CONSTRAINT uq_image_bake_event_line UNIQUE (bake_id, line_ord)
-   )`,
-    `CREATE TABLE IF NOT EXISTS image_bake_lease (
-     pool        VARCHAR(32) NOT NULL DEFAULT 'standard',
-     bake_id     VARCHAR(64) NOT NULL,
-     acquired_at TIMESTAMPTZ(3) NOT NULL,
-     expires_at  TIMESTAMPTZ(3) NOT NULL,
-     PRIMARY KEY (pool)
-   )`,
-    `CREATE TABLE IF NOT EXISTS image_bake_admit (
-     pool VARCHAR(32) NOT NULL,
-     PRIMARY KEY (pool)
-   )`,
-];
-export async function ensureSchema(pool, poolName = "standard") {
-    for (const stmt of PG_IMAGE_BAKE_SCHEMA)
-        await pool.query(stmt);
-    await pool.query("INSERT INTO image_bake_admit (pool) VALUES ($1) ON CONFLICT (pool) DO NOTHING", [poolName]);
-}
-function isDupKey(err) {
-    return Boolean(err) && err.code === "23505";
-}
-function dupKeyName(err) {
-    const c = String(err?.constraint ?? "");
-    if (c === "uq_image_bake_event_line")
-        return "uq_line";
-    if (/pkey$/i.test(c))
-        return "primary";
-    return "other";
-}
-export class PgImageBake {
-    pool;
-    poolName;
-    constructor(pool, poolName = "standard") {
-        this.pool = pool;
-        this.poolName = poolName;
-    }
-    async createBake(input) {
-        const bakeId = uuidv7();
-        const now = new Date();
-        try {
-            await this.pool.query("INSERT INTO image_bake (bake_id, profile, bands, base_ref, push, dry_run, logs, argv, status, " +
-                "idem_key, cancel_requested, requested_by, created_at, updated_at) " +
-                "VALUES ($1,$2,$3::jsonb,$4,$5,$6,$7,$8::jsonb,'queued',$9,0,$10,$11,$12)", [
-                bakeId,
-                input.profile,
-                input.bands == null ? null : JSON.stringify(input.bands),
-                input.baseRef,
-                input.push ? 1 : 0,
-                input.dryRun ? 1 : 0,
-                input.logs ? 1 : 0,
-                JSON.stringify(input.argv),
-                input.idemKey,
-                input.requestedBy,
-                now,
-                now,
-            ]);
-        }
-        catch (err) {
-            if (isDupKey(err) && input.idemKey) {
-                const existing = await this.getBakeByIdem(input.idemKey);
-                if (existing)
-                    return { created: false, bake: existing };
-            }
-            throw err;
-        }
-        const bake = await this.getBake(bakeId);
-        if (!bake)
-            throw new Error("createBake: row vanished after insert");
-        return { created: true, bake };
-    }
-    async createBakeIfIdle(input) {
-        const bakeId = uuidv7();
-        const now = new Date();
-        const conn = await this.pool.connect();
-        try {
-            await conn.query("BEGIN");
-            await conn.query("INSERT INTO image_bake_admit (pool) VALUES ($1) ON CONFLICT (pool) DO NOTHING", [this.poolName]);
-            await conn.query("SELECT pool FROM image_bake_admit WHERE pool = $1 FOR UPDATE", [this.poolName]);
-            const res = await conn.query("INSERT INTO image_bake (bake_id, profile, bands, base_ref, push, dry_run, logs, argv, status, " +
-                "idem_key, cancel_requested, requested_by, created_at, updated_at) " +
-                "SELECT $1,$2,$3::jsonb,$4,$5,$6,$7,$8::jsonb,'queued',$9,0,$10,$11,$12 WHERE NOT EXISTS " +
-                "(SELECT 1 FROM image_bake WHERE status IN ('queued','running') AND dry_run = 0)", [
-                bakeId,
-                input.profile,
-                input.bands == null ? null : JSON.stringify(input.bands),
-                input.baseRef,
-                input.push ? 1 : 0,
-                input.dryRun ? 1 : 0,
-                input.logs ? 1 : 0,
-                JSON.stringify(input.argv),
-                input.idemKey,
-                input.requestedBy,
-                now,
-                now,
-            ]);
-            const inserted = (res.rowCount ?? 0) > 0;
-            await conn.query("COMMIT");
-            if (!inserted)
-                return { created: false, bake: null };
-        }
-        catch (err) {
-            try {
-                await conn.query("ROLLBACK");
-            }
-            catch {
-            }
-            throw err;
-        }
-        finally {
-            conn.release();
-        }
-        const bake = await this.getBake(bakeId);
-        if (!bake)
-            throw new Error("createBakeIfIdle: row vanished after insert");
-        return { created: true, bake };
-    }
-    async getBake(bakeId) {
-        const res = await this.pool.query(`SELECT ${SELECT_COLS} FROM image_bake WHERE bake_id = $1 LIMIT 1`, [bakeId]);
-        return res.rows[0] ? mapRow(res.rows[0]) : null;
-    }
-    async getBakeByIdem(idemKey) {
-        const res = await this.pool.query(`SELECT ${SELECT_COLS} FROM image_bake WHERE idem_key = $1 LIMIT 1`, [idemKey]);
-        return res.rows[0] ? mapRow(res.rows[0]) : null;
-    }
-    async findActiveByArgv(argv) {
-        const res = await this.pool.query(`SELECT ${SELECT_COLS} FROM image_bake WHERE status IN ('queued','running') AND argv = $1::jsonb ` +
-            "ORDER BY created_at DESC LIMIT 1", [JSON.stringify(argv)]);
-        return res.rows[0] ? mapRow(res.rows[0]) : null;
-    }
-    async findActiveAny() {
-        const res = await this.pool.query(`SELECT ${SELECT_COLS} FROM image_bake WHERE status IN ('queued','running') AND dry_run = 0 ` +
-            "ORDER BY created_at ASC LIMIT 1");
-        return res.rows[0] ? mapRow(res.rows[0]) : null;
-    }
-    async findNextQueuedId() {
-        const res = await this.pool.query("SELECT bake_id FROM image_bake WHERE status = 'queued' ORDER BY created_at ASC LIMIT 1");
-        return res.rows[0] ? String(res.rows[0].bake_id) : null;
-    }
-    async claimBake(bakeId, runnerId, leaseMs) {
-        const conn = await this.pool.connect();
-        try {
-            await conn.query("BEGIN");
-            const now = new Date();
-            const leaseUntil = new Date(now.getTime() + leaseMs);
-            const ingestSecret = randomBytes(24).toString("hex");
-            const bakeRes = await conn.query("UPDATE image_bake SET status='running', state='PENDING', runner_id=$1, ingest_secret=$2, " +
-                "lease_until=$3, updated_at=$4 WHERE bake_id=$5 AND status='queued'", [runnerId, ingestSecret, leaseUntil, now, bakeId]);
-            if ((bakeRes.rowCount ?? 0) !== 1) {
-                await conn.query("ROLLBACK");
-                return null;
-            }
-            const dryRes = await conn.query("SELECT dry_run FROM image_bake WHERE bake_id=$1", [bakeId]);
-            if (Boolean(dryRes.rows[0]?.dry_run)) {
-                await conn.query("COMMIT");
-                return (await this.getBake(bakeId)) ?? null;
-            }
-            const leaseSel = await conn.query("SELECT bake_id, expires_at FROM image_bake_lease WHERE pool=$1", [this.poolName]);
-            const cur = leaseSel.rows[0];
-            if (!cur) {
-                try {
-                    await conn.query("INSERT INTO image_bake_lease (pool, bake_id, acquired_at, expires_at) VALUES ($1,$2,$3,$4)", [this.poolName, bakeId, now, leaseUntil]);
-                }
-                catch (err) {
-                    if (isDupKey(err)) {
-                        await conn.query("ROLLBACK");
-                        return null;
-                    }
-                    throw err;
-                }
-            }
-            else {
-                if (new Date(cur.expires_at).getTime() >= now.getTime()) {
-                    await conn.query("ROLLBACK");
-                    return null;
-                }
-                const holderId = String(cur.bake_id ?? "");
-                const holderRes = await conn.query("SELECT status FROM image_bake WHERE bake_id=$1", [holderId]);
-                const holderStatus = String(holderRes.rows[0]?.status ?? "");
-                if (holderStatus === "queued" || holderStatus === "running") {
-                    await conn.query("ROLLBACK");
-                    return null;
-                }
-                const stealRes = await conn.query("UPDATE image_bake_lease SET bake_id=$1, acquired_at=$2, expires_at=$3 WHERE pool=$4 AND bake_id=$5 AND expires_at=$6", [bakeId, now, leaseUntil, this.poolName, holderId, cur.expires_at]);
-                if ((stealRes.rowCount ?? 0) === 0) {
-                    await conn.query("ROLLBACK");
-                    return null;
-                }
-            }
-            const check = await conn.query("SELECT bake_id FROM image_bake_lease WHERE pool=$1", [this.poolName]);
-            if (String(check.rows[0]?.bake_id ?? "") !== bakeId) {
-                await conn.query("ROLLBACK");
-                return null;
-            }
-            await conn.query("COMMIT");
-            return (await this.getBake(bakeId)) ?? null;
-        }
-        catch (err) {
-            try {
-                await conn.query("ROLLBACK");
-            }
-            catch {
-            }
-            throw err;
-        }
-        finally {
-            conn.release();
-        }
-    }
-    async appendEvent(bakeId, kind, data, opts = {}) {
-        const lineOrd = opts.lineOrd ?? null;
-        if (lineOrd !== null && (await this.lineOrdExists(bakeId, lineOrd)))
-            return null;
-        const payload = data == null ? null : pgSafeJsonStringify(data);
-        for (let attempt = 0; attempt < 50; attempt += 1) {
-            const seq = (await this.maxSeq(bakeId)) + 1;
-            try {
-                await this.pool.query("INSERT INTO image_bake_event (bake_id, seq, line_ord, kind, level, data, ts) VALUES ($1,$2,$3,$4,$5,$6::jsonb,$7)", [bakeId, seq, lineOrd, kind, opts.level ?? null, payload, new Date()]);
-                return seq;
-            }
-            catch (err) {
-                if (!isDupKey(err))
-                    throw err;
-                const which = dupKeyName(err);
-                if (which === "uq_line" && lineOrd !== null)
-                    return null;
-                await new Promise((r) => setTimeout(r, Math.floor(Math.random() * 5)));
-            }
-        }
-        throw new Error(`appendEvent: seq allocation lost the (bake_id,seq) race after retries (bakeId=${bakeId})`);
-    }
-    async lineOrdExists(bakeId, lineOrd) {
-        const res = await this.pool.query("SELECT 1 FROM image_bake_event WHERE bake_id = $1 AND line_ord = $2 LIMIT 1", [bakeId, lineOrd]);
-        return (res.rowCount ?? 0) > 0;
-    }
-    async maxSeq(bakeId) {
-        const res = await this.pool.query("SELECT MAX(seq) AS m FROM image_bake_event WHERE bake_id = $1", [bakeId]);
-        const m = res.rows[0]?.m;
-        return m == null ? 0 : Number(m);
-    }
-    async retainedFrom(bakeId) {
-        const res = await this.pool.query("SELECT MIN(seq) AS m FROM image_bake_event WHERE bake_id = $1", [bakeId]);
-        const m = res.rows[0]?.m;
-        return m == null ? 0 : Number(m);
-    }
-    async getEvents(bakeId, afterSeq) {
-        const res = await this.pool.query("SELECT seq, line_ord, kind, level, data, ts FROM image_bake_event WHERE bake_id = $1 AND seq > $2 ORDER BY seq ASC", [bakeId, afterSeq]);
-        return res.rows.map((r) => ({
-            seq: Number(r.seq),
-            lineOrd: r.line_ord === null ? null : Number(r.line_ord),
-            kind: String(r.kind),
-            level: r.level ?? null,
-            data: parseJson(r.data, null),
-            ts: iso(r.ts),
-        }));
-    }
-    async setStatus(bakeId, status) {
-        await this.pool.query("UPDATE image_bake SET status = $1, updated_at = $2 WHERE bake_id = $3", [
-            status,
-            new Date(),
-            bakeId,
-        ]);
-    }
-    async setState(bakeId, state) {
-        await this.pool.query("UPDATE image_bake SET state = $1, updated_at = $2 WHERE bake_id = $3", [
-            state,
-            new Date(),
-            bakeId,
-        ]);
-    }
-    async setTerminal(bakeId, t) {
-        let affectedRows = 0;
-        await this.tx(async (conn) => {
-            const invalidIdentity = (t.digest != null && pgHasUnstorable(t.digest)) ||
-                (t.manifestSha != null && pgHasUnstorable(t.manifestSha)) ||
-                (t.repo != null && pgHasUnstorable(t.repo)) ||
-                (t.ref != null && pgHasUnstorable(t.ref));
-            const res = await conn.query("UPDATE image_bake SET status=$1, state=$2, digest=$3, repo=$4, ref=$5, index_id=$6, exit_code=$7, error=$8, " +
-                "error_code=$9, manifest_sha=$10, tag=$11, ingest_secret=NULL, updated_at=$12 WHERE bake_id=$13 AND status IN ('queued','running')", [
-                invalidIdentity ? "failed" : t.status,
-                t.state,
-                invalidIdentity ? null : t.digest ?? null,
-                invalidIdentity ? null : t.repo ?? null,
-                invalidIdentity ? null : t.ref ?? null,
-                t.indexId ?? null,
-                t.exitCode ?? null,
-                t.error == null ? null : pgSanitizeText(t.error),
-                t.errorCode == null ? null : pgSanitizeText(t.errorCode),
-                invalidIdentity ? null : t.manifestSha ?? null,
-                t.tag == null ? null : pgSanitizeText(t.tag),
-                new Date(),
-                bakeId,
-            ]);
-            affectedRows = res.rowCount ?? 0;
-            await conn.query("DELETE FROM image_bake_lease WHERE pool = $1 AND bake_id = $2", [this.poolName, bakeId]);
-        });
-        return affectedRows;
-    }
-    async setIndexId(bakeId, indexId) {
-        const res = await this.pool.query("UPDATE image_bake SET index_id = $1, updated_at = $2 WHERE bake_id = $3 AND status IN ('queued','running')", [indexId, new Date(), bakeId]);
-        return (res.rowCount ?? 0) >= 1;
-    }
-    async heartbeatLease(bakeId, runnerId, leaseMs) {
-        const now = new Date();
-        const leaseUntil = new Date(now.getTime() + leaseMs);
-        const res = await this.pool.query("UPDATE image_bake SET lease_until = $1, updated_at = $2 WHERE bake_id = $3 AND runner_id = $4 AND status = 'running'", [leaseUntil, now, bakeId, runnerId]);
-        if ((res.rowCount ?? 0) < 1)
-            return false;
-        const dryRes = await this.pool.query("SELECT dry_run FROM image_bake WHERE bake_id = $1", [bakeId]);
-        if (Boolean(dryRes.rows[0]?.dry_run))
-            return true;
-        const leaseRes = await this.pool.query("UPDATE image_bake_lease SET expires_at = $1 WHERE pool = $2 AND bake_id = $3", [leaseUntil, this.poolName, bakeId]);
-        return (leaseRes.rowCount ?? 0) >= 1;
-    }
-    async requestCancel(bakeId) {
-        const res = await this.pool.query("UPDATE image_bake SET cancel_requested = 1, updated_at = $1 WHERE bake_id = $2 AND status IN ('queued','running')", [new Date(), bakeId]);
-        return (res.rowCount ?? 0) > 0;
-    }
-    async isCancelRequested(bakeId) {
-        const res = await this.pool.query("SELECT cancel_requested FROM image_bake WHERE bake_id = $1", [bakeId]);
-        return Boolean(res.rows[0]?.cancel_requested);
-    }
-    async reapStaleBakes(olderThanMs) {
-        const cutoff = new Date(Date.now() - olderThanMs);
-        const victimsRes = await this.pool.query("SELECT bake_id FROM image_bake WHERE status = 'running' AND " +
-            "(lease_until IS NULL OR lease_until < $1) AND updated_at < $2", [cutoff, cutoff]);
-        let reaped = 0;
-        for (const v of victimsRes.rows) {
-            const bakeId = String(v.bake_id);
-            const res = await this.pool.query("UPDATE image_bake SET status='failed', state='FAILED', error='bake-runner lost (lease expired)', " +
-                "ingest_secret=NULL, index_id=NULL, updated_at=$1 WHERE bake_id=$2 AND status='running'", [new Date(), bakeId]);
-            if ((res.rowCount ?? 0) === 1) {
-                reaped += 1;
-                try {
-                    await this.appendEvent(bakeId, "done", {
-                        status: "FAILED",
-                        digest: null,
-                        repo: null,
-                        ref: null,
-                        indexId: null,
-                        exitCode: null,
-                        error: "bake-runner lost (lease expired)",
-                        errorCode: null,
-                    });
-                }
-                catch {
-                }
-                await this.pool.query("DELETE FROM image_bake_lease WHERE pool = $1 AND bake_id = $2", [this.poolName, bakeId]);
-            }
-        }
-        return reaped;
-    }
-    async tx(fn) {
-        const conn = await this.pool.connect();
-        try {
-            await conn.query("BEGIN");
-            await fn(conn);
-            await conn.query("COMMIT");
-        }
-        catch (err) {
-            try {
-                await conn.query("ROLLBACK");
-            }
-            catch {
-            }
-            throw err;
-        }
-        finally {
-            conn.release();
-        }
-    }
-}
+export { PgImageBake, PG_IMAGE_BAKE_SCHEMA, ensurePgImageBakeSchema as ensureSchema } from "./image-bake-store-sql.js";
 //# sourceMappingURL=pg-image-bake.js.map

package/dist/plugins/pg-rate-limiter.d.ts

@@ -1,38 +1,8 @@
 import type { Pool, PoolClient } from "pg";
 import type { RateDecision, RateGate } from "../observability/rate-limit.js";
 import { type CounterDegradeHook } from "./write-behind-counter.js";
-export interface CounterTable {
-    table: string;
-    keyCol: string;
-    valCol: string;
-}
-export declare class PgWriteBehindCounter {
-    private readonly pool;
-    private readonly t;
-    private readonly windowMs;
-    private readonly now;
-    private readonly onDegraded?;
-    private readonly queryTimeoutMs;
-    private pendingDelta;
-    private fleetTotal;
-    private timer?;
-    private flushing;
-    private flushStartedAt;
-    private failStreak;
-    constructor(pool: Pool, t: CounterTable, windowMs: number, now?: () => number, onDegraded?: CounterDegradeHook | undefined, queryTimeoutMs?: number);
-    private bump;
-    bucket(): number;
-    private rk;
-    used(key: string): number;
-    addLocal(key: string, n: number): void;
-    retryAfterSec(): number;
-    flush(): Promise<void>;
-    private flushOnce;
-    refresh(): Promise<void>;
-    reap(): Promise<number>;
-    startRefresh(intervalMs?: number): this;
-    stop(): void;
-}
+export { PgWriteBehindCounter } from "./write-behind-counter.js";
+export type { CounterTable } from "./write-behind-counter.js";
 export declare class PgRateLimiter implements RateGate {
     private readonly limit;
     private readonly counter;

package/dist/plugins/pg-rate-limiter.js

@@ -1,155 +1,12 @@
-import { DEFAULT_COUNTER_QUERY_TIMEOUT_MS } from "./write-behind-counter.js";
-const SEP = "\u0000";
-export class PgWriteBehindCounter {
-    pool;
-    t;
-    windowMs;
-    now;
-    onDegraded;
-    queryTimeoutMs;
-    pendingDelta = new Map();
-    fleetTotal = new Map();
-    timer;
-    flushing = false;
-    flushStartedAt = 0;
-    failStreak = new Map();
-    constructor(pool, t, windowMs, now = () => Date.now(), onDegraded, queryTimeoutMs = DEFAULT_COUNTER_QUERY_TIMEOUT_MS) {
-        this.pool = pool;
-        this.t = t;
-        this.windowMs = windowMs;
-        this.now = now;
-        this.onDegraded = onDegraded;
-        this.queryTimeoutMs = queryTimeoutMs;
-    }
-    bump(kind, failed, error) {
-        if (!this.onDegraded)
-            return;
-        const prev = this.failStreak.get(kind) ?? 0;
-        if (!failed && prev === 0)
-            return;
-        const next = failed ? prev + 1 : 0;
-        this.failStreak.set(kind, next);
-        try {
-            this.onDegraded({ table: this.t.table, kind, streak: next, prevStreak: prev, ...(failed && error !== undefined ? { error: error instanceof Error ? error.message : String(error) } : {}) });
-        }
-        catch {
-        }
-    }
-    bucket() {
-        return Math.floor(this.now() / this.windowMs);
-    }
-    rk(key) {
-        return `${key}${SEP}${this.bucket()}`;
-    }
-    used(key) {
-        const rk = this.rk(key);
-        return (this.fleetTotal.get(rk) ?? 0) + (this.pendingDelta.get(rk) ?? 0);
-    }
-    addLocal(key, n) {
-        if (n <= 0)
-            return;
-        const rk = this.rk(key);
-        this.pendingDelta.set(rk, (this.pendingDelta.get(rk) ?? 0) + n);
-    }
-    retryAfterSec() {
-        return Math.ceil(((this.bucket() + 1) * this.windowMs - this.now()) / 1000);
-    }
-    async flush() {
-        if (this.flushing) {
-            if (this.now() - this.flushStartedAt > 60_000)
-                this.bump("stalled", true, "flush round stalled >60s (hung query?)");
-            return;
-        }
-        this.flushing = true;
-        this.flushStartedAt = this.now();
-        try {
-            await this.flushOnce();
-        }
-        finally {
-            this.flushing = false;
-            this.bump("stalled", false);
-        }
-    }
-    async flushOnce() {
-        const { table, keyCol, valCol } = this.t;
-        let attempted = false;
-        let failure;
-        let hadFailure = false;
-        for (const [rk, delta] of [...this.pendingDelta]) {
-            if (delta <= 0)
-                continue;
-            const sep = rk.lastIndexOf(SEP);
-            const key = rk.slice(0, sep);
-            const windowBucket = Number(rk.slice(sep + 1));
-            attempted = true;
-            try {
-                const q = {
-                    text: `INSERT INTO ${table} (${keyCol}, window_bucket, ${valCol}, updated_at) VALUES ($1,$2,$3,$4) ` +
-                        `ON CONFLICT (${keyCol}, window_bucket) DO UPDATE SET ${valCol} = ${table}.${valCol} + EXCLUDED.${valCol}, updated_at = EXCLUDED.updated_at`,
-                    values: [key, windowBucket, delta, new Date()],
-                    query_timeout: this.queryTimeoutMs,
-                };
-                await this.pool.query(q);
-                const remaining = (this.pendingDelta.get(rk) ?? 0) - delta;
-                if (remaining > 0)
-                    this.pendingDelta.set(rk, remaining);
-                else
-                    this.pendingDelta.delete(rk);
-            }
-            catch (err) {
-                hadFailure = true;
-                failure = err;
-            }
-        }
-        if (attempted)
-            this.bump("flush", hadFailure, failure);
-        await this.refresh();
-        await this.reap();
-    }
-    async refresh() {
-        const { table, keyCol, valCol } = this.t;
-        const b = this.bucket();
-        try {
-            const q = { text: `SELECT ${keyCol}, ${valCol} FROM ${table} WHERE window_bucket = $1`, values: [b], query_timeout: this.queryTimeoutMs };
-            const res = await this.pool.query(q);
-            const next = new Map();
-            for (const row of res.rows) {
-                next.set(`${String(row[keyCol])}${SEP}${b}`, Number(row[valCol]));
-            }
-            this.fleetTotal = next;
-            this.bump("refresh", false);
-        }
-        catch (err) {
-            this.bump("refresh", true, err);
-        }
-    }
-    async reap() {
-        try {
-            const q = { text: `DELETE FROM ${this.t.table} WHERE window_bucket < $1`, values: [this.bucket()], query_timeout: this.queryTimeoutMs };
-            const res = await this.pool.query(q);
-            return res.rowCount ?? 0;
-        }
-        catch {
-            return 0;
-        }
-    }
-    startRefresh(intervalMs = 5_000) {
-        this.timer ??= setInterval(() => void this.flush(), intervalMs);
-        this.timer.unref?.();
-        return this;
-    }
-    stop() {
-        if (this.timer)
-            clearInterval(this.timer);
-        this.timer = undefined;
-    }
-}
+import { PgWriteBehindCounter } from "./write-behind-counter.js";
+export { PgWriteBehindCounter } from "./write-behind-counter.js";
+const RATE_LIMIT_TABLE = { table: "rate_limit", keyCol: "limit_key", valCol: "n" };
 export class PgRateLimiter {
     limit;
     counter;
     constructor(pool, limit, windowMs = 60_000, now, onDegraded, queryTimeoutMs) {
         this.limit = limit;
-        this.counter = new PgWriteBehindCounter(pool, { table: "rate_limit", keyCol: "limit_key", valCol: "n" }, windowMs, now, onDegraded, queryTimeoutMs);
+        this.counter = new PgWriteBehindCounter(pool, RATE_LIMIT_TABLE, windowMs, now, onDegraded, queryTimeoutMs);
     }
     check(key) {
         if (this.limit <= 0)

package/dist/plugins/remote-env-k8s.d.ts

@@ -1,23 +1,7 @@
 import { FileError, ExecutionError, RemoteExecutionError, type ExecutionEnv, type RemoteExecutionEnv, type WorkspaceHandle, type FileInfo, type Result, type OutputChunk, type ExecStreamOptions, type RemoteConnectConfig, type SnapshotId, type SessionToken, type VmLifecycleOptions, type ExecutionEnvFactory, type BackgroundShellCapability, type BackgroundShellId, type BackgroundShellError, type BackgroundSpawnOptions, type BackgroundPoll } from "@sema-agent/core";
+import type { PodSpecPatch } from "./k8s-exec-protocol.js";
 type ExecOpts = Parameters<ExecutionEnv["exec"]>[1];
-export declare function buildBgRunnerScript(dir: string): string;
-export declare function buildBgLauncherScript(dir: string, cmdShB64: string, runnerShB64: string): string;
-export declare function buildBgPollScript(dir: string, stdoutCursor: number, stderrCursor: number, readCap: number): string;
-export declare function buildBgKillScript(dir: string): string;
-export declare function buildBgDisposeScript(dir: string): string;
-export declare function buildDetachCapableExec(dir: string, command: string): string;
-export interface ParsedBgPoll {
-    gone: boolean;
-    outTotal: number;
-    errTotal: number;
-    exitCode?: number;
-    alive: boolean;
-    stdout: string;
-    stdoutBytes: number;
-    stderr: string;
-    stderrBytes: number;
-}
-export declare function parseBgPollOutput(raw: string): ParsedBgPoll | undefined;
+export { buildBgRunnerScript, buildBgLauncherScript, buildBgPollScript, buildBgKillScript, buildBgDisposeScript, buildDetachCapableExec, parseBgPollOutput, type ParsedBgPoll, } from "./k8s-bg-scripts.js";
 export interface K8sEnvConfig {
     apiUrl?: string;
     token?: string;
@@ -51,19 +35,7 @@ export interface K8sEnvConfig {
     podSpecPatch?: PodSpecPatch;
     podEnv?: Record<string, string>;
 }
-export interface PodSpecPatch {
-    volumes?: unknown[];
-    volumeMounts?: unknown[];
-    podSecurityContext?: Record<string, unknown>;
-    containerSecurityContext?: Record<string, unknown>;
-    labels?: Record<string, string>;
-}
-export declare function applyPodSpecPatch(pod: {
-    metadata: {
-        labels?: Record<string, string>;
-    };
-    spec: Record<string, unknown>;
-}, patch: PodSpecPatch): void;
+export { type PodSpecPatch, applyPodSpecPatch } from "./k8s-exec-protocol.js";
 type ConnectResult = {
     ok: true;
     value: WorkspaceHandle;
@@ -87,13 +59,9 @@ export interface K8sEnvDeps {
     openExec?: (url: string, headers: Record<string, string>) => ExecSocket;
     connectOnce?: (signal?: AbortSignal) => Promise<ConnectResult>;
 }
-export declare function execSocketTlsOptions(ca: string | undefined, insecureTls: boolean): Record<string, unknown>;
+export { execSocketTlsOptions } from "./k8s-exec-protocol.js";
 export declare function errorMessageOf(e: unknown): string;
-export declare function exitCodeFromStatus(statusJson: string): {
-    exitCode: number;
-} | {
-    error: string;
-};
+export { exitCodeFromStatus } from "./k8s-exec-protocol.js";
 export declare class RemoteK8sExecutionEnv implements RemoteExecutionEnv, BackgroundShellCapability {
     readonly capabilities: {
         isolation: boolean;
@@ -207,5 +175,4 @@ export declare class RemoteK8sExecutionEnv implements RemoteExecutionEnv, Backgr
     private tempResult;
 }
 export declare function k8sExecutionEnvFactory(config: K8sEnvConfig): ExecutionEnvFactory;
-export {};
 //# sourceMappingURL=remote-env-k8s.d.ts.map