@tinycloud/operations 0.2.1-beta.0 → 0.3.0-beta.0

package/dist/{contract-OnWT3OXa.d.cts → contract-xMIIMtpF.d.cts}

@@ -90,6 +90,12 @@ type OperationResult<O> = OperationOkResult<O> | OperationAuthorityRequiredResul
 interface InvocationTarget {
     readonly profile?: string;
     readonly host?: string;
+    /**
+     * Absolute home directory used for this invocation's TinyCloud profile
+     * state. Hosted projections set this per authenticated principal so
+     * concurrent tenants never share process-global TC_HOME state.
+     */
+    readonly stateRoot?: string;
     readonly allowOwnerProfile?: boolean;
     readonly privateKey?: string;
 }

package/dist/{contract-OnWT3OXa.d.ts → contract-xMIIMtpF.d.ts}

@@ -90,6 +90,12 @@ type OperationResult<O> = OperationOkResult<O> | OperationAuthorityRequiredResul
 interface InvocationTarget {
     readonly profile?: string;
     readonly host?: string;
+    /**
+     * Absolute home directory used for this invocation's TinyCloud profile
+     * state. Hosted projections set this per authenticated principal so
+     * concurrent tenants never share process-global TC_HOME state.
+     */
+    readonly stateRoot?: string;
     readonly allowOwnerProfile?: boolean;
     readonly privateKey?: string;
 }

package/dist/index.cjs

@@ -6754,9 +6754,16 @@ var init_authority = __esm({
 
 // src/state.ts
 function tinycloudHomePath() {
-  const home = process.env.TC_HOME ?? process.env.HOME ?? process.env.USERPROFILE ?? (0, import_node_os.homedir)();
+  const home = invocationStateRoot.getStore() ?? process.env.TC_HOME ?? process.env.HOME ?? process.env.USERPROFILE ?? (0, import_node_os.homedir)();
   return (0, import_node_path.join)(home, ".tinycloud");
 }
+function withTinyCloudStateRoot(stateRoot, action) {
+  if (stateRoot === void 0) return action();
+  if (!(0, import_node_path.isAbsolute)(stateRoot) || stateRoot.includes("\0")) {
+    throw new TypeError("The TinyCloud state root must be an absolute path.");
+  }
+  return invocationStateRoot.run((0, import_node_path.resolve)(stateRoot), action);
+}
 function tinycloudConfigPath() {
   return (0, import_node_path.join)(tinycloudHomePath(), "config.json");
 }
@@ -7008,11 +7015,12 @@ function isErrno(error, code) {
 function sleep(milliseconds) {
   return new Promise((resolve2) => setTimeout(resolve2, milliseconds));
 }
-var import_node_crypto, import_promises, import_node_os, import_node_path, DEFAULT_PROFILE, DEFAULT_LOCK_TIMEOUT_MS, DEFAULT_LOCK_RETRY_MS, DEFAULT_STALE_LOCK_MS, TEST_LOCK_CONTENTION_SIGNAL_PATH, TEST_LOCK_RECOVERY_BARRIER_DIR, ProfileLockTimeoutError;
+var import_node_crypto, import_node_async_hooks, import_promises, import_node_os, import_node_path, DEFAULT_PROFILE, DEFAULT_LOCK_TIMEOUT_MS, DEFAULT_LOCK_RETRY_MS, DEFAULT_STALE_LOCK_MS, TEST_LOCK_CONTENTION_SIGNAL_PATH, TEST_LOCK_RECOVERY_BARRIER_DIR, invocationStateRoot, ProfileLockTimeoutError;
 var init_state = __esm({
   "src/state.ts"() {
     "use strict";
     import_node_crypto = require("crypto");
+    import_node_async_hooks = require("async_hooks");
     import_promises = require("fs/promises");
     import_node_os = require("os");
     import_node_path = require("path");
@@ -7022,6 +7030,7 @@ var init_state = __esm({
     DEFAULT_STALE_LOCK_MS = 3e4;
     TEST_LOCK_CONTENTION_SIGNAL_PATH = "TC_TEST_PROFILE_LOCK_CONTENTION_SIGNAL_PATH";
     TEST_LOCK_RECOVERY_BARRIER_DIR = "TC_TEST_PROFILE_LOCK_RECOVERY_BARRIER_DIR";
+    invocationStateRoot = new import_node_async_hooks.AsyncLocalStorage();
     ProfileLockTimeoutError = class extends Error {
       constructor(profile, timeoutMs) {
         super(`Timed out waiting for the profile lock for "${profile}" after ${timeoutMs}ms.`);
@@ -9908,6 +9917,7 @@ module.exports = __toCommonJS(index_exports);
 
 // src/invoke.ts
 var import_node_crypto3 = require("crypto");
+var import_node_path2 = require("path");
 var import_node_sdk2 = require("@tinycloud/node-sdk");
 
 // ../sdk-core/src/policy/errors.ts
@@ -10247,16 +10257,27 @@ function isRecord(value) {
 }
 
 // src/invoke.ts
+init_state();
 init_secrets();
 async function invokeOperation(operationId, operationVersion, invocationTarget, unknownInput) {
-  const prepared = await prepareInvocation(
-    operationId,
-    operationVersion,
-    invocationTarget,
-    unknownInput
-  );
-  if (isPreparedError(prepared)) return prepared.result;
-  return executePreparedInvocation(prepared);
+  const target = normalizeInvocationTarget(invocationTarget);
+  if (target === void 0) {
+    return errorResult(
+      { operationId, operationVersion },
+      unresolvedContextSummary(),
+      operationError("INPUT_INVALID", "The invocation target is invalid.")
+    );
+  }
+  return withTinyCloudStateRoot(target.stateRoot, async () => {
+    const prepared = await prepareInvocation(
+      operationId,
+      operationVersion,
+      target,
+      unknownInput
+    );
+    if (isPreparedError(prepared)) return prepared.result;
+    return executePreparedInvocation(prepared);
+  });
 }
 function isPreparedError(prepared) {
   return "status" in prepared;
@@ -10599,14 +10620,16 @@ function normalizeInvocationTarget(target) {
     const candidate = target;
     const profile = candidate.profile;
     const host = candidate.host;
+    const stateRoot = candidate.stateRoot;
     const allowOwnerProfile = candidate.allowOwnerProfile;
     const privateKey = candidate.privateKey;
-    if (profile !== void 0 && typeof profile !== "string" || host !== void 0 && typeof host !== "string" || allowOwnerProfile !== void 0 && typeof allowOwnerProfile !== "boolean" || privateKey !== void 0 && typeof privateKey !== "string") {
+    if (profile !== void 0 && typeof profile !== "string" || host !== void 0 && typeof host !== "string" || stateRoot !== void 0 && (typeof stateRoot !== "string" || !(0, import_node_path2.isAbsolute)(stateRoot)) || allowOwnerProfile !== void 0 && typeof allowOwnerProfile !== "boolean" || privateKey !== void 0 && typeof privateKey !== "string") {
       return void 0;
     }
     return {
       ...profile === void 0 ? {} : { profile },
       ...host === void 0 ? {} : { host },
+      ...stateRoot === void 0 ? {} : { stateRoot },
       ...allowOwnerProfile === true ? { allowOwnerProfile: true } : {},
       ...privateKey === void 0 ? {} : { privateKey }
     };