@vibesdotdev/infra-core 0.0.2 → 1.0.0-rc.5

package/dist/kinds/select-compute-source.js

@@ -0,0 +1,170 @@
+/**
+ * Selection policy for `infra/compute-source`.
+ *
+ * A pure policy over descriptors, mirroring `selectCiExecutorDescriptor`:
+ * no runtime instance, only the `CapabilityError` taxonomy for its refusals
+ * (consumers read them structurally, `isCapabilityError`, so a nested copy of
+ * `@vibesdotdev/kernel` still classifies them).
+ *
+ * Every filter fails LOUD, typed `NOT_FOUND compute-source-<filter>`, with the
+ * candidates it rejected in the refusal's details. A source that
+ * silently substitutes a different machine class is how a `runsOn: windows`
+ * job quietly runs on linux, and how a fork PR quietly lands on a persistent
+ * host somebody else will reuse.
+ *
+ * Order is capability, then trust, then ownership, then cost — and that order
+ * is the design. Neither Cloudflare nor DigitalOcean sells a Windows kernel at
+ * any price, so cost ranking must never run before capability filtering or the
+ * cheapest source would win a job it cannot serve.
+ */
+import { CapabilityError } from '@vibesdotdev/kernel';
+/** The candidates a filter rejected, as details: ids and capabilities, never anything the caller sent. */
+function candidates(sources) {
+    return sources.map((s) => ({
+        id: s.id,
+        os: [...s.provides.os],
+        arch: [...s.provides.arch],
+        ephemeral: s.ephemeral === true,
+        ownerScope: s.ownerScope,
+        usdPerSecond: s.cost.usdPerSecond
+    }));
+}
+/** One filter's typed refusal: `NOT_FOUND compute-source-<filter>`, fixed message, the rejected candidates in details. */
+function noSource(reason, message, rejected) {
+    return new CapabilityError(message, 'NOT_FOUND', { reason, retryable: false, details: { candidates: candidates(rejected) } });
+}
+function sameOwner(a, b) {
+    return a !== undefined && b !== undefined && a.type === b.type && a.id === b.id;
+}
+/**
+ * What a lease of this length would cost us, in the provider's own terms.
+ *
+ * Conservative on purpose. `usdPerSecondCpuActive` is only charged while the
+ * vCPUs are busy, and we do not measure CPU-seconds in CI, so ranking assumes
+ * they are busy the whole time. Assuming idle would rank a CPU-metered source
+ * as cheap and then hand us the bill — the failure the caller cannot see. A
+ * job that really does idle costs less than this says, never more.
+ *
+ * `minimumUsd` is applied as a floor rather than added, because that is how a
+ * provider minimum actually works: a 10-second droplet costs the minimum, not
+ * the minimum plus 10 seconds.
+ *
+ * When the caller states no duration there is nothing to multiply, so the
+ * comparison falls back to the fixed costs — which still orders a free
+ * bring-your-own machine below a paid one.
+ */
+export function expectedCostUsd(source, maxDurationSeconds) {
+    const setup = source.cost.initialUsd ?? 0;
+    const floor = source.cost.minimumUsd ?? 0;
+    if (maxDurationSeconds === undefined)
+        return Math.max(floor, setup);
+    const perSecond = source.cost.usdPerSecond + (source.cost.usdPerSecondCpuActive ?? 0);
+    return Math.max(floor, setup + perSecond * maxDurationSeconds);
+}
+/**
+ * Which registered compute source should serve this demand.
+ *
+ * Throws rather than returning undefined: a caller that cannot get the machine
+ * class it asked for must stop, not proceed on something else.
+ */
+export function selectComputeSource(sources, demand) {
+    const enabled = sources.filter((s) => s.enabled !== false);
+    if (enabled.length === 0) {
+        throw noSource('compute-source-none', 'No compute source is registered.', []);
+    }
+    const byOs = demand.os === undefined ? enabled : enabled.filter((s) => s.provides.os.includes(demand.os));
+    if (byOs.length === 0) {
+        throw noSource('compute-source-os-unavailable', 'No compute source provides the demanded operating system.', enabled);
+    }
+    const byArch = demand.arch === undefined
+        ? byOs
+        : byOs.filter((s) => s.provides.arch.includes(demand.arch));
+    if (byArch.length === 0) {
+        throw noSource('compute-source-arch-unavailable', 'No compute source provides the demanded architecture.', byOs);
+    }
+    const demanded = demand.labels ?? [];
+    const byLabels = demanded.length === 0
+        ? byArch
+        : byArch.filter((s) => demanded.every((label) => s.provides.labels.includes(label)));
+    if (byLabels.length === 0) {
+        throw noSource('compute-source-labels-unavailable', 'No compute source provides every required label.', byArch);
+    }
+    // Untrusted code only ever runs somewhere that is destroyed afterwards.
+    // This is the filter that keeps a fork PR off a warm host the next job
+    // would reuse, and off a machine a user brought themselves.
+    const byTrust = demand.trust === 'untrusted' ? byLabels.filter((s) => s.ephemeral === true) : byLabels;
+    if (byTrust.length === 0) {
+        throw noSource('compute-source-untrusted-needs-ephemeral', 'An untrusted ref may only use an ephemeral compute source, and none of the matching sources is ephemeral.', byLabels);
+    }
+    // A bring-your-own source belongs to exactly one scope and is invisible to
+    // every other one. Ours are available to all.
+    const byOwnership = byTrust.filter((s) => s.ownerScope !== 'byo' || sameOwner(s.owner, demand.owner));
+    if (byOwnership.length === 0) {
+        throw noSource('compute-source-owned-elsewhere', 'The only matching compute sources are bring-your-own and belong to another scope.', byTrust);
+    }
+    const byDuration = demand.maxDurationSeconds === undefined
+        ? byOwnership
+        : byOwnership.filter((s) => s.maxLeaseSeconds >= demand.maxDurationSeconds);
+    if (byDuration.length === 0) {
+        throw noSource('compute-source-lease-too-short', 'No compute source grants a lease long enough for the demanded duration.', byOwnership);
+    }
+    // Only now does cost matter. Bring-your-own first — it is the user's own
+    // hardware, so it costs them no credits regardless of what it would cost
+    // us — then genuinely cheapest for THIS job, then the descriptor's own
+    // priority as a stable tiebreak.
+    //
+    // Ranking on real money rather than a hand-assigned tier means a source
+    // with a setup cost can still win a long job, and lose a short one, which
+    // is the truth an integer tier cannot express.
+    return [...byDuration].sort((a, b) => {
+        const aByo = a.ownerScope === 'byo' ? 0 : 1;
+        const bByo = b.ownerScope === 'byo' ? 0 : 1;
+        if (aByo !== bByo)
+            return aByo - bByo;
+        const aCost = expectedCostUsd(a, demand.maxDurationSeconds);
+        const bCost = expectedCostUsd(b, demand.maxDurationSeconds);
+        if (aCost !== bCost)
+            return aCost - bCost;
+        const aRate = a.cost.usdPerSecond + (a.cost.usdPerSecondCpuActive ?? 0);
+        const bRate = b.cost.usdPerSecond + (b.cost.usdPerSecondCpuActive ?? 0);
+        if (aRate !== bRate)
+            return aRate - bRate;
+        return (b.priority ?? 100) - (a.priority ?? 100);
+    })[0];
+}
+/**
+ * The cost basis to bill a lease from, in the billing layer's own vocabulary.
+ *
+ * The rating engine takes `CostBasis[]` and, when given none, falls back to
+ * `unknownCostHeuristic` — a $0.0001/compute-second floor doubled by a safety
+ * multiplier, or $0.72/hour. Every source we own is cheaper than that: a
+ * Cloudflare `standard-4` at full CPU is $0.40/hour and a DigitalOcean
+ * `s-2vcpu-4gb` is $0.036/hour. Handing the engine the real number is
+ * therefore not a tightening — it stops CI from being billed at up to twenty
+ * times what it costs us.
+ *
+ * Deliberately uses the SAME rate `expectedCostUsd` ranks on, including the
+ * assumption that metered CPU is fully active. If selection and the invoice
+ * disagreed about what a source costs, one of them would be lying, and the
+ * cheaper-looking source would win work it could not afford. The assumption
+ * only ever errs toward billing our real exposure rather than under-recovering
+ * it, and it still lands well under the heuristic it replaces.
+ *
+ * `minimumUsd` is NOT expressed here. A provider floor applies to a lease, not
+ * to a second, and there is no way to say "per-unit, but never less than X" in
+ * a per-unit basis. Folding it into the rate would inflate every long lease.
+ * The floor belongs to whatever holds the lease, and this returns only what is
+ * true per second.
+ */
+export function computeSourceCostBasis(source) {
+    return [
+        {
+            units: 'compute_second',
+            usdPerUnit: source.cost.usdPerSecond + (source.cost.usdPerSecondCpuActive ?? 0),
+            source: source.cost.source,
+            confidence: source.cost.confidence,
+            effectiveAt: source.cost.effectiveAt
+        }
+    ];
+}
+//# sourceMappingURL=select-compute-source.js.map

package/dist/kinds/select-compute-source.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"select-compute-source.js","sourceRoot":"","sources":["../../src/kinds/select-compute-source.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AACH,OAAO,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAqBtD,0GAA0G;AAC1G,SAAS,UAAU,CAAC,OAA2C;IAC9D,OAAO,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAC1B,EAAE,EAAE,CAAC,CAAC,EAAE;QACR,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC;QACtB,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC;QAC1B,SAAS,EAAE,CAAC,CAAC,SAAS,KAAK,IAAI;QAC/B,UAAU,EAAE,CAAC,CAAC,UAAU;QACxB,YAAY,EAAE,CAAC,CAAC,IAAI,CAAC,YAAY;KACjC,CAAC,CAAC,CAAC;AACL,CAAC;AAED,0HAA0H;AAC1H,SAAS,QAAQ,CAAC,MAAc,EAAE,OAAe,EAAE,QAA4C;IAC9F,OAAO,IAAI,eAAe,CAAC,OAAO,EAAE,WAAW,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,UAAU,EAAE,UAAU,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC,CAAC;AAC/H,CAAC;AAED,SAAS,SAAS,CACjB,CAA2C,EAC3C,CAA2C;IAE3C,OAAO,CAAC,KAAK,SAAS,IAAI,CAAC,KAAK,SAAS,IAAI,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,EAAE,CAAC;AACjF,CAAC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,UAAU,eAAe,CAC9B,MAA+B,EAC/B,kBAAsC;IAEtC,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,UAAU,IAAI,CAAC,CAAC;IAC1C,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,UAAU,IAAI,CAAC,CAAC;IAC1C,IAAI,kBAAkB,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IACpE,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,YAAY,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,qBAAqB,IAAI,CAAC,CAAC,CAAC;IACtF,OAAO,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK,GAAG,SAAS,GAAG,kBAAkB,CAAC,CAAC;AAChE,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,mBAAmB,CAClC,OAA2C,EAC3C,MAAqB;IAErB,MAAM,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,KAAK,CAAC,CAAC;IAC3D,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1B,MAAM,QAAQ,CAAC,qBAAqB,EAAE,kCAAkC,EAAE,EAAE,CAAC,CAAC;IAC/E,CAAC;IAED,MAAM,IAAI,GACT,MAAM,CAAC,EAAE,KAAK,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAG,CAAC,CAAC,CAAC;IAC/F,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,MAAM,QAAQ,CAAC,+BAA+B,EAAE,2DAA2D,EAAE,OAAO,CAAC,CAAC;IACvH,CAAC;IAED,MAAM,MAAM,GACX,MAAM,CAAC,IAAI,KAAK,SAAS;QACxB,CAAC,CAAC,IAAI;QACN,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAK,CAAC,CAAC,CAAC;IAC/D,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,MAAM,QAAQ,CAAC,iCAAiC,EAAE,uDAAuD,EAAE,IAAI,CAAC,CAAC;IAClH,CAAC;IAED,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC;IACrC,MAAM,QAAQ,GACb,QAAQ,CAAC,MAAM,KAAK,CAAC;QACpB,CAAC,CAAC,MAAM;QACR,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACvF,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC3B,MAAM,QAAQ,CAAC,mCAAmC,EAAE,kDAAkD,EAAE,MAAM,CAAC,CAAC;IACjH,CAAC;IAED,wEAAwE;IACxE,uEAAuE;IACvE,4DAA4D;IAC5D,MAAM,OAAO,GACZ,MAAM,CAAC,KAAK,KAAK,WAAW,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;IACxF,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1B,MAAM,QAAQ,CACb,0CAA0C,EAC1C,2GAA2G,EAC3G,QAAQ,CACR,CAAC;IACH,CAAC;IAED,2EAA2E;IAC3E,8CAA8C;IAC9C,MAAM,WAAW,GAAG,OAAO,CAAC,MAAM,CACjC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,KAAK,KAAK,IAAI,SAAS,CAAC,CAAC,CAAC,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,CACjE,CAAC;IACF,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC9B,MAAM,QAAQ,CAAC,gCAAgC,EAAE,mFAAmF,EAAE,OAAO,CAAC,CAAC;IAChJ,CAAC;IAED,MAAM,UAAU,GACf,MAAM,CAAC,kBAAkB,KAAK,SAAS;QACtC,CAAC,CAAC,WAAW;QACb,CAAC,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,eAAe,IAAI,MAAM,CAAC,kBAAmB,CAAC,CAAC;IAC/E,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC7B,MAAM,QAAQ,CAAC,gCAAgC,EAAE,yEAAyE,EAAE,WAAW,CAAC,CAAC;IAC1I,CAAC;IAED,yEAAyE;IACzE,yEAAyE;IACzE,uEAAuE;IACvE,iCAAiC;IACjC,EAAE;IACF,wEAAwE;IACxE,0EAA0E;IAC1E,+CAA+C;IAC/C,OAAO,CAAC,GAAG,UAAU,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;QACpC,MAAM,IAAI,GAAG,CAAC,CAAC,UAAU,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC5C,MAAM,IAAI,GAAG,CAAC,CAAC,UAAU,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC5C,IAAI,IAAI,KAAK,IAAI;YAAE,OAAO,IAAI,GAAG,IAAI,CAAC;QACtC,MAAM,KAAK,GAAG,eAAe,CAAC,CAAC,EAAE,MAAM,CAAC,kBAAkB,CAAC,CAAC;QAC5D,MAAM,KAAK,GAAG,eAAe,CAAC,CAAC,EAAE,MAAM,CAAC,kBAAkB,CAAC,CAAC;QAC5D,IAAI,KAAK,KAAK,KAAK;YAAE,OAAO,KAAK,GAAG,KAAK,CAAC;QAC1C,MAAM,KAAK,GAAG,CAAC,CAAC,IAAI,CAAC,YAAY,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,qBAAqB,IAAI,CAAC,CAAC,CAAC;QACxE,MAAM,KAAK,GAAG,CAAC,CAAC,IAAI,CAAC,YAAY,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,qBAAqB,IAAI,CAAC,CAAC,CAAC;QACxE,IAAI,KAAK,KAAK,KAAK;YAAE,OAAO,KAAK,GAAG,KAAK,CAAC;QAC1C,OAAO,CAAC,CAAC,CAAC,QAAQ,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,IAAI,GAAG,CAAC,CAAC;IAClD,CAAC,CAAC,CAAC,CAAC,CAAE,CAAC;AACR,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,MAAM,UAAU,sBAAsB,CAAC,MAA+B;IACrE,OAAO;QACN;YACC,KAAK,EAAE,gBAAgB;YACvB,UAAU,EAAE,MAAM,CAAC,IAAI,CAAC,YAAY,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,qBAAqB,IAAI,CAAC,CAAC;YAC/E,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM;YAC1B,UAAU,EAAE,MAAM,CAAC,IAAI,CAAC,UAAU;YAClC,WAAW,EAAE,MAAM,CAAC,IAAI,CAAC,WAAW;SACpC;KACD,CAAC;AACH,CAAC"}