@synap-core/cli 1.12.2 → 1.13.0

package/dist/lib/box/evidence.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"evidence.js","sourceRoot":"","sources":["../../../src/lib/box/evidence.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAKH,+CAA+C;AAC/C,MAAM,CAAC,MAAM,cAAc,GAAG,EAAE,GAAG,IAAI,CAAC;AACxC,MAAM,CAAC,MAAM,cAAc,GAAG,EAAE,GAAG,IAAI,CAAC;AAExC,kFAAkF;AAClF,MAAM,OAAO,UAAU;IAQF;IACA;IARX,IAAI,GAAa,EAAE,CAAC;IACpB,OAAO,GAAG,CAAC,CAAC;IACZ,IAAI,GAAa,EAAE,CAAC;IACpB,OAAO,GAAG,CAAC,CAAC;IACpB,UAAU,GAAG,CAAC,CAAC;IAEf,YACmB,UAAU,cAAc,EACxB,UAAU,cAAc;QADxB,YAAO,GAAP,OAAO,CAAiB;QACxB,YAAO,GAAP,OAAO,CAAiB;IACxC,CAAC;IAEJ,MAAM,CAAC,KAAsB;QAC3B,IAAI,GAAG,GAAG,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;QACjE,IAAI,CAAC,UAAU,IAAI,GAAG,CAAC,MAAM,CAAC;QAC9B,IAAI,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC;YAChC,MAAM,IAAI,GAAG,GAAG,CAAC,QAAQ,CAAC,CAAC,EAAE,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC;YAC1D,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACrB,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,MAAM,CAAC;YAC5B,GAAG,GAAG,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAClC,CAAC;QACD,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO;QAC7B,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACpB,IAAI,CAAC,OAAO,IAAI,GAAG,CAAC,MAAM,CAAC;QAC3B,OAAO,IAAI,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,IAAI,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YAClF,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,IAAI,CAAC,KAAK,EAAG,CAAC,MAAM,CAAC;QAC5C,CAAC;IACH,CAAC;IAED,QAAQ;QACN,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QACvD,IAAI,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACvC,IAAI,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,OAAO;YAAE,OAAO,GAAG,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC;QAC7F,MAAM,SAAS,GAAG,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC;QAClE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,SAAS,EAAE,CAAC;IAC1F,CAAC;CACF;AA2BD;;;;GAIG;AACH,MAAM,UAAU,YAAY,CAAC,CAAa;IACxC,IAAI,CAAC,CAAC,OAAO;QAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;IAC5C,IAAI,CAAC,CAAC,QAAQ;QAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;IAC7C,IAAI,CAAC,CAAC,WAAW;QAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;IAC1E,IAAI,CAAC,CAAC,QAAQ,KAAK,IAAI;QAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,WAAW,EAAE,8CAA8C,EAAE,CAAC;IACjH,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC,QAAQ,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;AAC1D,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,MAAM,IAAI,GAAG;IAClB,UAAU,EAAE,GAAG;IACf,WAAW,EAAE,GAAG;IAChB,SAAS,EAAE,GAAG;IACd,WAAW,EAAE,GAAG;IAChB,gBAAgB,EAAE,IAAI;IACtB,SAAS,EAAE,GAAG;IACd,UAAU,EAAE,GAAG;IACf,gBAAgB,EAAE,GAAG;IACrB,mBAAmB,EAAE,EAAE;CACf,CAAC;AAEX,MAAM,GAAG,GAAG,CAAC,CAAS,EAAE,CAAS,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAEnF,MAAM,UAAU,cAAc,CAAC,KAS9B;IACC,MAAM,CAAC,GAAG,YAAY,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACtC,MAAM,OAAO,GAAG,KAAK,CAAC,aAAa,CAAC;IACpC,IAAI,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,UAAU,EAAE,CAAC;QACrC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,iBAAiB,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,UAAU,+CAA+C,IAAI,CAAC,UAAU,UAAU,CAAC,CAAC;IAC9I,CAAC;IACD,MAAM,QAAQ,GAAG,KAAK,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC;IAC5E,IAAI,QAAQ,CAAC,MAAM,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;QACvC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,iBAAiB,QAAQ,CAAC,MAAM,GAAG,IAAI,CAAC,WAAW,uCAAuC,CAAC,CAAC;IAC/G,CAAC;IACD,OAAO;QACL,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,MAAM,EAAE,CAAC,CAAC,MAAM;QAChB,QAAQ,EAAE,KAAK,CAAC,OAAO,CAAC,QAAQ;QAChC,UAAU,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,UAAU,GAAG,KAAK,CAAC,SAAS,CAAC,CAAC;QACvE,GAAG,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,GAAG,CAAC,CAAC,CAAC,WAAW,EAAE,IAAI,CAAC,gBAAgB,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACpF,GAAG,EAAE,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE;QACzB,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAC7B,GAAG,CAAC;YACJ,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;YACjC,GAAG,CAAC,CAAC,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC,KAAK,EAAE,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC3E,CAAC,CAAC;QACH,aAAa,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAC3D,GAAG,CAAC;YACJ,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;YACjC,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC,MAAM,EAAE,IAAI,CAAC,WAAW,CAAC;SACxC,CAAC,CAAC;QACH,iBAAiB,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YACjE,GAAG,CAAC;YACJ,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,gBAAgB,CAAC;YACxC,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC,OAAO,EAAE,IAAI,CAAC,mBAAmB,CAAC;SAClD,CAAC,CAAC;KACJ,CAAC;AACJ,CAAC"}

package/dist/lib/box/job-server.d.ts

@@ -0,0 +1,72 @@
+/**
+ * What the box talks to: a small HTTP server on the provisioner's bridge
+ * address. The box holds no token: its identity IS its address on the isolated
+ * bridge (the provisioner assigned it), so a request is answered only for the
+ * run that address was given to.
+ *
+ *   GET  /job          the script, its packages, parameters and wall clock
+ *   POST /phase        {"phase":"run"}: packages are in, egress narrows to the
+ *                      declared hosts (one way: never back to setup)
+ *   POST /log          a chunk of the run's stdout+stderr
+ *   PUT  /out/<path>   one /out file, streamed to staging under the caps
+ *   POST /done         {"exitCode", "installedPackages"}
+ */
+import http from "node:http";
+import type { BlockedEgress, BoxPhase, EgressPolicy } from "./egress.js";
+import { LogCapture, type InstalledPackage } from "./evidence.js";
+import type { LeasedRun } from "./wire.js";
+/** BOX-CONTRACT v1: at most 20 files per run. */
+export declare const MAX_OUT_FILES = 20;
+export interface StagedFile {
+    path: string;
+    size: number;
+    sha256: string;
+}
+export interface BoxReport {
+    /** null when the runner sent no integer exit code (the runner's fault, read as INFRA). */
+    exitCode: number | null;
+    installedPackages: InstalledPackage[];
+}
+export interface ActiveBox {
+    run: LeasedRun;
+    phase: BoxPhase;
+    log: LogCapture;
+    blocked: BlockedEgress[];
+    outDir: string;
+    outBytes: number;
+    outFiles: StagedFile[];
+    /** The runner asked for its job (the box booted and reached the provisioner). */
+    jobFetched: boolean;
+    /** Resolves when the runner reports done. */
+    done: Promise<BoxReport>;
+}
+/**
+ * A safe relative path for an /out file, or null. Each segment is decoded
+ * once; no empty, `.`, `..`, NUL or separator inside a segment.
+ */
+export declare function safeOutPath(urlPath: string): string | null;
+/** The job document the box runner reads. */
+export declare function jobFor(run: LeasedRun): Record<string, unknown>;
+type Entry = ActiveBox & {
+    finish: (r: BoxReport) => void;
+};
+/** `job`: the box booted and asked for its job; `run`: its packages are in, the script starts. */
+export type BoxEvent = "job" | "run";
+export declare class BoxRegistry {
+    private readonly stagingRoot;
+    private boxes;
+    /** Called once per box and event (the provisioner sets it per run: its clocks hang on it). */
+    onEvent: (run: LeasedRun, event: BoxEvent) => void;
+    constructor(stagingRoot: string);
+    register(ip: string, run: LeasedRun): ActiveBox;
+    /** Forget the box and drop its staged files. */
+    unregister(ip: string): void;
+    get(ip: string): Entry | undefined;
+    policyFor(ip: string): EgressPolicy | null;
+    recordBlock(ip: string, block: BlockedEgress): void;
+    markJobFetched(ip: string): void;
+    enterRunPhase(ip: string): void;
+}
+export declare function parseReport(raw: unknown): BoxReport;
+export declare function createJobServer(registry: BoxRegistry): http.Server;
+export {};

package/dist/lib/box/job-server.js

@@ -0,0 +1,246 @@
+/**
+ * What the box talks to: a small HTTP server on the provisioner's bridge
+ * address. The box holds no token: its identity IS its address on the isolated
+ * bridge (the provisioner assigned it), so a request is answered only for the
+ * run that address was given to.
+ *
+ *   GET  /job          the script, its packages, parameters and wall clock
+ *   POST /phase        {"phase":"run"}: packages are in, egress narrows to the
+ *                      declared hosts (one way: never back to setup)
+ *   POST /log          a chunk of the run's stdout+stderr
+ *   PUT  /out/<path>   one /out file, streamed to staging under the caps
+ *   POST /done         {"exitCode", "installedPackages"}
+ */
+import { createHash } from "node:crypto";
+import fs from "node:fs";
+import http from "node:http";
+import path from "node:path";
+import { LogCapture } from "./evidence.js";
+/** BOX-CONTRACT v1: at most 20 files per run. */
+export const MAX_OUT_FILES = 20;
+const MAX_BODY_BYTES = 1024 * 1024;
+/**
+ * A safe relative path for an /out file, or null. Each segment is decoded
+ * once; no empty, `.`, `..`, NUL or separator inside a segment.
+ */
+export function safeOutPath(urlPath) {
+    const raw = urlPath.replace(/^\/out\//, "");
+    // 500 = the pod's finish `files[].path` limit.
+    if (!raw || raw.length > 500)
+        return null;
+    const segments = [];
+    for (const enc of raw.split("/")) {
+        let seg;
+        try {
+            seg = decodeURIComponent(enc);
+        }
+        catch {
+            return null;
+        }
+        if (!seg || seg === "." || seg === ".." || /[\0/\\]/.test(seg) || seg.length > 255)
+            return null;
+        segments.push(seg);
+    }
+    return segments.length <= 16 ? segments.join("/") : null;
+}
+/** The job document the box runner reads. */
+export function jobFor(run) {
+    const s = run.script;
+    return {
+        runId: run.id,
+        language: s.language,
+        entrypoint: s.entrypoint,
+        code: s.code,
+        packages: s.packages,
+        parameters: run.parameters ?? null,
+        wallSeconds: s.limits.wallSeconds,
+    };
+}
+export class BoxRegistry {
+    stagingRoot;
+    boxes = new Map();
+    /** Called once per box and event (the provisioner sets it per run: its clocks hang on it). */
+    onEvent = () => { };
+    constructor(stagingRoot) {
+        this.stagingRoot = stagingRoot;
+    }
+    register(ip, run) {
+        let finish;
+        const done = new Promise((r) => (finish = r));
+        const outDir = path.join(this.stagingRoot, run.id);
+        fs.rmSync(outDir, { recursive: true, force: true });
+        fs.mkdirSync(outDir, { recursive: true, mode: 0o700 });
+        const box = {
+            run,
+            phase: "setup",
+            log: new LogCapture(),
+            blocked: [],
+            outDir,
+            outBytes: 0,
+            outFiles: [],
+            jobFetched: false,
+            done,
+            finish,
+        };
+        this.boxes.set(ip, box);
+        return box;
+    }
+    /** Forget the box and drop its staged files. */
+    unregister(ip) {
+        const box = this.boxes.get(ip);
+        this.boxes.delete(ip);
+        if (box)
+            fs.rmSync(box.outDir, { recursive: true, force: true });
+    }
+    get(ip) {
+        return this.boxes.get(ip);
+    }
+    policyFor(ip) {
+        const b = this.boxes.get(ip);
+        return b ? { phase: b.phase, runHosts: b.run.script.hosts } : null;
+    }
+    recordBlock(ip, block) {
+        this.boxes.get(ip)?.blocked.push(block);
+    }
+    markJobFetched(ip) {
+        const b = this.boxes.get(ip);
+        if (!b || b.jobFetched)
+            return;
+        b.jobFetched = true;
+        this.onEvent(b.run, "job");
+    }
+    enterRunPhase(ip) {
+        const b = this.boxes.get(ip);
+        if (!b || b.phase === "run")
+            return;
+        b.phase = "run";
+        this.onEvent(b.run, "run");
+    }
+}
+function readBody(req, cap = MAX_BODY_BYTES) {
+    return new Promise((resolve, reject) => {
+        const chunks = [];
+        let n = 0;
+        req.on("data", (c) => {
+            n += c.length;
+            if (n > cap) {
+                reject(new Error("body too large"));
+                req.destroy();
+                return;
+            }
+            chunks.push(c);
+        });
+        req.on("end", () => resolve(Buffer.concat(chunks)));
+        req.on("error", reject);
+    });
+}
+function json(res, status, body) {
+    if (status === 204) {
+        res.writeHead(204).end();
+        return;
+    }
+    res.writeHead(status, { "content-type": "application/json" }).end(JSON.stringify(body));
+}
+export function parseReport(raw) {
+    const body = (raw && typeof raw === "object" ? raw : {});
+    const exitCode = typeof body.exitCode === "number" && Number.isInteger(body.exitCode) ? body.exitCode : null;
+    const installedPackages = Array.isArray(body.installedPackages)
+        ? body.installedPackages
+            .filter((p) => p && typeof p.name === "string" && typeof p.version === "string" && p.name && p.version)
+            .slice(0, 2000)
+            .map((p) => ({
+            name: p.name,
+            version: p.version,
+            manager: p.manager === "npm" ? "npm" : "pip",
+        }))
+        : [];
+    return { exitCode, installedPackages };
+}
+export function createJobServer(registry) {
+    return http.createServer(async (req, res) => {
+        const ip = (req.socket.remoteAddress ?? "").replace(/^::ffff:/, "");
+        const box = registry.get(ip);
+        if (!box)
+            return json(res, 403, { error: "not a running box" });
+        const url = new URL(req.url ?? "/", "http://box");
+        try {
+            if (req.method === "GET" && url.pathname === "/job") {
+                registry.markJobFetched(ip);
+                return json(res, 200, jobFor(box.run));
+            }
+            if (req.method === "POST" && url.pathname === "/phase") {
+                const body = JSON.parse((await readBody(req)).toString("utf8") || "{}");
+                if (body.phase !== "run")
+                    return json(res, 400, { error: "the only move is to the run phase" });
+                registry.enterRunPhase(ip);
+                return json(res, 200, { phase: "run" });
+            }
+            if (req.method === "POST" && url.pathname === "/log") {
+                req.on("data", (c) => box.log.append(c));
+                req.on("end", () => json(res, 204));
+                return;
+            }
+            if (req.method === "PUT" && url.pathname.startsWith("/out/")) {
+                const rel = safeOutPath(url.pathname);
+                if (!rel)
+                    return json(res, 400, { error: "bad out path" });
+                if (box.outFiles.length >= MAX_OUT_FILES)
+                    return json(res, 413, { error: `more than ${MAX_OUT_FILES} files` });
+                const cap = box.run.script.limits.outMb * 1024 * 1024;
+                const dest = path.join(box.outDir, rel);
+                fs.mkdirSync(path.dirname(dest), { recursive: true });
+                const hash = createHash("sha256");
+                const file = fs.createWriteStream(dest, { mode: 0o600 });
+                let size = 0;
+                let over = false;
+                // Over the cap or cut off mid-upload: no partial file is kept, and the
+                // answer goes out only once it is gone.
+                const abort = (status, error) => {
+                    if (over)
+                        return;
+                    over = true;
+                    file.destroy();
+                    file.once("close", () => {
+                        fs.rmSync(dest, { force: true });
+                        if (!res.headersSent)
+                            json(res, status, { error });
+                        req.destroy();
+                    });
+                };
+                req.on("data", (c) => {
+                    if (over)
+                        return;
+                    size += c.length;
+                    if (box.outBytes + size > cap)
+                        return abort(413, `/out exceeds ${box.run.script.limits.outMb} MB`);
+                    hash.update(c);
+                    file.write(c);
+                });
+                req.on("end", () => {
+                    if (over)
+                        return;
+                    file.end(() => {
+                        box.outBytes += size;
+                        box.outFiles.push({ path: rel, size, sha256: hash.digest("hex") });
+                        json(res, 201, { path: rel, size });
+                    });
+                });
+                req.on("close", () => {
+                    if (!req.complete)
+                        abort(400, "upload cut off");
+                });
+                return;
+            }
+            if (req.method === "POST" && url.pathname === "/done") {
+                box.finish(parseReport(JSON.parse((await readBody(req)).toString("utf8"))));
+                return json(res, 200, { ok: true });
+            }
+            return json(res, 404, { error: "no such door" });
+        }
+        catch (err) {
+            if (!res.headersSent)
+                json(res, 400, { error: err.message });
+        }
+    });
+}
+//# sourceMappingURL=job-server.js.map

package/dist/lib/box/job-server.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"job-server.js","sourceRoot":"","sources":["../../../src/lib/box/job-server.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,UAAU,EAAyB,MAAM,eAAe,CAAC;AAGlE,iDAAiD;AACjD,MAAM,CAAC,MAAM,aAAa,GAAG,EAAE,CAAC;AAChC,MAAM,cAAc,GAAG,IAAI,GAAG,IAAI,CAAC;AA4BnC;;;GAGG;AACH,MAAM,UAAU,WAAW,CAAC,OAAe;IACzC,MAAM,GAAG,GAAG,OAAO,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;IAC5C,+CAA+C;IAC/C,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,GAAG,GAAG;QAAE,OAAO,IAAI,CAAC;IAC1C,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,KAAK,MAAM,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;QACjC,IAAI,GAAW,CAAC;QAChB,IAAI,CAAC;YACH,GAAG,GAAG,kBAAkB,CAAC,GAAG,CAAC,CAAC;QAChC,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;QACD,IAAI,CAAC,GAAG,IAAI,GAAG,KAAK,GAAG,IAAI,GAAG,KAAK,IAAI,IAAI,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,MAAM,GAAG,GAAG;YAAE,OAAO,IAAI,CAAC;QAChG,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACrB,CAAC;IACD,OAAO,QAAQ,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AAC3D,CAAC;AAED,6CAA6C;AAC7C,MAAM,UAAU,MAAM,CAAC,GAAc;IACnC,MAAM,CAAC,GAAG,GAAG,CAAC,MAAM,CAAC;IACrB,OAAO;QACL,KAAK,EAAE,GAAG,CAAC,EAAE;QACb,QAAQ,EAAE,CAAC,CAAC,QAAQ;QACpB,UAAU,EAAE,CAAC,CAAC,UAAU;QACxB,IAAI,EAAE,CAAC,CAAC,IAAI;QACZ,QAAQ,EAAE,CAAC,CAAC,QAAQ;QACpB,UAAU,EAAE,GAAG,CAAC,UAAU,IAAI,IAAI;QAClC,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC,WAAW;KAClC,CAAC;AACJ,CAAC;AAOD,MAAM,OAAO,WAAW;IAMO;IALrB,KAAK,GAAG,IAAI,GAAG,EAAiB,CAAC;IAEzC,8FAA8F;IAC9F,OAAO,GAA8C,GAAG,EAAE,GAAE,CAAC,CAAC;IAE9D,YAA6B,WAAmB;QAAnB,gBAAW,GAAX,WAAW,CAAQ;IAAG,CAAC;IAEpD,QAAQ,CAAC,EAAU,EAAE,GAAc;QACjC,IAAI,MAA+B,CAAC;QACpC,MAAM,IAAI,GAAG,IAAI,OAAO,CAAY,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC;QACzD,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;QACnD,EAAE,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACpD,EAAE,CAAC,SAAS,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACvD,MAAM,GAAG,GAAU;YACjB,GAAG;YACH,KAAK,EAAE,OAAO;YACd,GAAG,EAAE,IAAI,UAAU,EAAE;YACrB,OAAO,EAAE,EAAE;YACX,MAAM;YACN,QAAQ,EAAE,CAAC;YACX,QAAQ,EAAE,EAAE;YACZ,UAAU,EAAE,KAAK;YACjB,IAAI;YACJ,MAAM;SACP,CAAC;QACF,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;QACxB,OAAO,GAAG,CAAC;IACb,CAAC;IAED,gDAAgD;IAChD,UAAU,CAAC,EAAU;QACnB,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC/B,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QACtB,IAAI,GAAG;YAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACnE,CAAC;IAED,GAAG,CAAC,EAAU;QACZ,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAC5B,CAAC;IAED,SAAS,CAAC,EAAU;QAClB,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC7B,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;IACrE,CAAC;IAED,WAAW,CAAC,EAAU,EAAE,KAAoB;QAC1C,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC1C,CAAC;IAED,cAAc,CAAC,EAAU;QACvB,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC7B,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU;YAAE,OAAO;QAC/B,CAAC,CAAC,UAAU,GAAG,IAAI,CAAC;QACpB,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IAC7B,CAAC;IAED,aAAa,CAAC,EAAU;QACtB,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC7B,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,KAAK,KAAK;YAAE,OAAO;QACpC,CAAC,CAAC,KAAK,GAAG,KAAK,CAAC;QAChB,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IAC7B,CAAC;CACF;AAED,SAAS,QAAQ,CAAC,GAAyB,EAAE,GAAG,GAAG,cAAc;IAC/D,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,MAAM,GAAa,EAAE,CAAC;QAC5B,IAAI,CAAC,GAAG,CAAC,CAAC;QACV,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,CAAS,EAAE,EAAE;YAC3B,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC;YACd,IAAI,CAAC,GAAG,GAAG,EAAE,CAAC;gBACZ,MAAM,CAAC,IAAI,KAAK,CAAC,gBAAgB,CAAC,CAAC,CAAC;gBACpC,GAAG,CAAC,OAAO,EAAE,CAAC;gBACd,OAAO;YACT,CAAC;YACD,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACjB,CAAC,CAAC,CAAC;QACH,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QACpD,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAC1B,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,IAAI,CAAC,GAAwB,EAAE,MAAc,EAAE,IAAc;IACpE,IAAI,MAAM,KAAK,GAAG,EAAE,CAAC;QACnB,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC;QACzB,OAAO;IACT,CAAC;IACD,GAAG,CAAC,SAAS,CAAC,MAAM,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;AAC1F,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,GAAY;IACtC,MAAM,IAAI,GAAG,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAwD,CAAC;IAChH,MAAM,QAAQ,GAAG,OAAO,IAAI,CAAC,QAAQ,KAAK,QAAQ,IAAI,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC;IAC7G,MAAM,iBAAiB,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,iBAAiB,CAAC;QAC7D,CAAC,CAAE,IAAI,CAAC,iBAAsD;aACzD,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ,IAAI,OAAO,CAAC,CAAC,OAAO,KAAK,QAAQ,IAAI,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,OAAO,CAAC;aACtG,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC;aACd,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YACX,IAAI,EAAE,CAAC,CAAC,IAAK;YACb,OAAO,EAAE,CAAC,CAAC,OAAQ;YACnB,OAAO,EAAE,CAAC,CAAC,OAAO,KAAK,KAAK,CAAC,CAAC,CAAE,KAAe,CAAC,CAAC,CAAE,KAAe;SACnE,CAAC,CAAC;QACP,CAAC,CAAC,EAAE,CAAC;IACP,OAAO,EAAE,QAAQ,EAAE,iBAAiB,EAAE,CAAC;AACzC,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,QAAqB;IACnD,OAAO,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QAC1C,MAAM,EAAE,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,aAAa,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;QACpE,MAAM,GAAG,GAAG,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC7B,IAAI,CAAC,GAAG;YAAE,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,mBAAmB,EAAE,CAAC,CAAC;QAChE,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,GAAG,EAAE,YAAY,CAAC,CAAC;QAClD,IAAI,CAAC;YACH,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK,IAAI,GAAG,CAAC,QAAQ,KAAK,MAAM,EAAE,CAAC;gBACpD,QAAQ,CAAC,cAAc,CAAC,EAAE,CAAC,CAAC;gBAC5B,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;YACzC,CAAC;YAED,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;gBACvD,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,IAAI,CAAuB,CAAC;gBAC9F,IAAI,IAAI,CAAC,KAAK,KAAK,KAAK;oBAAE,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,mCAAmC,EAAE,CAAC,CAAC;gBAChG,QAAQ,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC;gBAC3B,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;YAC1C,CAAC;YAED,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,IAAI,GAAG,CAAC,QAAQ,KAAK,MAAM,EAAE,CAAC;gBACrD,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,CAAS,EAAE,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;gBACjD,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC;gBACpC,OAAO;YACT,CAAC;YAED,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK,IAAI,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC7D,MAAM,GAAG,GAAG,WAAW,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;gBACtC,IAAI,CAAC,GAAG;oBAAE,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,CAAC;gBAC3D,IAAI,GAAG,CAAC,QAAQ,CAAC,MAAM,IAAI,aAAa;oBAAE,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,aAAa,aAAa,QAAQ,EAAE,CAAC,CAAC;gBAC/G,MAAM,GAAG,GAAG,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,GAAG,IAAI,GAAG,IAAI,CAAC;gBACtD,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;gBACxC,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;gBACtD,MAAM,IAAI,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC;gBAClC,MAAM,IAAI,GAAG,EAAE,CAAC,iBAAiB,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;gBACzD,IAAI,IAAI,GAAG,CAAC,CAAC;gBACb,IAAI,IAAI,GAAG,KAAK,CAAC;gBACjB,uEAAuE;gBACvE,wCAAwC;gBACxC,MAAM,KAAK,GAAG,CAAC,MAAc,EAAE,KAAa,EAAE,EAAE;oBAC9C,IAAI,IAAI;wBAAE,OAAO;oBACjB,IAAI,GAAG,IAAI,CAAC;oBACZ,IAAI,CAAC,OAAO,EAAE,CAAC;oBACf,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE;wBACtB,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;wBACjC,IAAI,CAAC,GAAG,CAAC,WAAW;4BAAE,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;wBACnD,GAAG,CAAC,OAAO,EAAE,CAAC;oBAChB,CAAC,CAAC,CAAC;gBACL,CAAC,CAAC;gBACF,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,CAAS,EAAE,EAAE;oBAC3B,IAAI,IAAI;wBAAE,OAAO;oBACjB,IAAI,IAAI,CAAC,CAAC,MAAM,CAAC;oBACjB,IAAI,GAAG,CAAC,QAAQ,GAAG,IAAI,GAAG,GAAG;wBAAE,OAAO,KAAK,CAAC,GAAG,EAAE,gBAAgB,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,KAAK,CAAC,CAAC;oBACnG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;oBACf,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;gBAChB,CAAC,CAAC,CAAC;gBACH,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE;oBACjB,IAAI,IAAI;wBAAE,OAAO;oBACjB,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE;wBACZ,GAAG,CAAC,QAAQ,IAAI,IAAI,CAAC;wBACrB,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;wBACnE,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC;oBACtC,CAAC,CAAC,CAAC;gBACL,CAAC,CAAC,CAAC;gBACH,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;oBACnB,IAAI,CAAC,GAAG,CAAC,QAAQ;wBAAE,KAAK,CAAC,GAAG,EAAE,gBAAgB,CAAC,CAAC;gBAClD,CAAC,CAAC,CAAC;gBACH,OAAO;YACT,CAAC;YAED,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,IAAI,GAAG,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;gBACtD,GAAG,CAAC,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;gBAC5E,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;YACtC,CAAC;YAED,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,CAAC;QACnD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,GAAG,CAAC,WAAW;gBAAE,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAG,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;QAC1E,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/lib/box/provisioner.d.ts

@@ -0,0 +1,83 @@
+/**
+ * The provisioner's loop: one box per run, one run at a time (phase 0).
+ *
+ *   guards ok? ─no─▶ wait (the run keeps its turn: nothing is leased)
+ *   lease ─▶ clone + start a box ─▶ the box fetches its job, installs, runs
+ *        ─▶ done | a clock ran out | Stop | lease lost | provisioner stopping
+ *   destroy the box, ALWAYS ─▶ upload /out ─▶ finish with the evidence
+ *
+ * Three clocks, one after the other: BOOT (the box must ask for its job, else
+ * INFRA: it never started), SETUP (the declared packages must install, else
+ * timeout), and the script's own wall clock from the moment it starts.
+ *
+ * A lost lease (404/409) ends the work without a finish: the pod already gave
+ * the run up. A reaper destroys every tagged box no run holds, at start and
+ * after every run, so a crash never leaves a box behind for long.
+ */
+import type { BoxRegistry } from "./job-server.js";
+import type { BoxBackend, HostReading } from "./proxmox.js";
+import { type BoxHub, type BoxLimits, type FinishBody, type LeasedRun } from "./wire.js";
+export interface HostGuards {
+    /** Wait unless the host has at least this much MemAvailable. */
+    minMemAvailableMb: number;
+    /** Wait while the box storage (thin pool data) is fuller than this. */
+    maxStorageUsedPct: number;
+    /** Wait while the thin pool's metadata is fuller than this. */
+    maxMetaUsedPct: number;
+}
+/** Phase 0 on the founder's host: swap is full, so the margin is RAM only. */
+export declare const DEFAULT_GUARDS: HostGuards;
+/**
+ * BOX-CONTRACT "Phase 0 caps". The pod enforces them when a run is queued; the
+ * provisioner re-applies them because the host is the person's, not the pod's.
+ */
+export declare const PHASE0_CAPS: BoxLimits;
+/** A box that has not asked for its job by then did not start: INFRA, not the script's verdict. */
+export declare const BOOT_SECONDS = 180;
+/** The declared packages must be installed by then; past it the run timed out in setup. */
+export declare const SETUP_SECONDS = 900;
+/** Limits cut to the phase 0 caps, and the names of the ones that were cut. */
+export declare function clampLimits(l: BoxLimits): {
+    limits: BoxLimits;
+    clamped: string[];
+};
+export declare function checkGuards(r: HostReading, g: HostGuards): {
+    ok: true;
+} | {
+    ok: false;
+    reason: string;
+};
+export interface ProvisionerDeps {
+    hub: BoxHub;
+    backend: BoxBackend;
+    registry: BoxRegistry;
+    log: (line: string) => void;
+    now?: () => number;
+    /** Destroy attempts before leaving a box to the reaper. */
+    destroyAttempts?: number;
+    /** The provisioner is stopping: end the current run (box destroyed, finish INFRA). */
+    signal?: AbortSignal;
+    /** Clock overrides (tests). */
+    bootMs?: number;
+    setupMs?: number;
+}
+export declare function mimeOf(file: string): string;
+/** Destroy every tagged box no run holds. Returns the VMIDs destroyed. */
+export declare function reap(backend: BoxBackend, held: ReadonlySet<number>, log: (l: string) => void): Promise<number[]>;
+/**
+ * Work one leased run to its end (BOX-CONTRACT v2). Returns the finish body sent, or null when
+ * the lease was lost (no finish is sent then).
+ */
+export declare function runOne(leasedRun: LeasedRun, deps: ProvisionerDeps): Promise<FinishBody | null>;
+export interface ServeOptions {
+    guards: HostGuards;
+    /** Wait between empty leases. */
+    idleMs: number;
+    /** Wait between guard readings while the host is short. */
+    guardWaitMs: number;
+    once?: boolean;
+    signal?: AbortSignal;
+    sleep?: (ms: number) => Promise<void>;
+}
+/** Lease and work runs until the signal aborts (or one pass with `once`). */
+export declare function serve(deps: ProvisionerDeps, opts: ServeOptions): Promise<void>;