@zaalipro/dsh-workflows 0.1.0-rc.12

package/lib/types/supervisor/storage/index.js

@@ -0,0 +1,100 @@
+import { openWorkflowStorageAnchor, acquireWorkflowStorageLease } from './lease.js';
+import { closeWorkflowStorageLayout, initializePrivateLayout } from './private-root.js';
+import { FileWorkflowRunStore } from './manifest-store.js';
+import { recoverWorkflowStorage } from './recovery.js';
+export * from './lease.js';
+export * from './private-root.js';
+export * from './bounded-file.js';
+export * from './manifest-types.js';
+export * from './manifest-codec.js';
+export * from './details-codec.js';
+export * from './manifest-store.js';
+export * from './run-files.js';
+export * from './recovery.js';
+/** Bootstrap the leased storage root and eagerly recover retained state. */
+export async function openWorkflowStorage(config, hostFileSystem) {
+    const anchor = await openWorkflowStorageAnchor({ runsRoot: config.runsRoot });
+    let lease;
+    let layout;
+    let store;
+    try {
+        lease = await acquireWorkflowStorageLease(anchor);
+        layout = await initializePrivateLayout(anchor, lease, hostFileSystem);
+        store = new FileWorkflowRunStore({
+            // The anchor canonicalizes harmless OS alias components (notably
+            // macOS /var and /tmp).  Every later store operation must use that same
+            // pinned spelling rather than returning to the caller's lexical path.
+            runsRoot: anchor.root,
+            maxManifestBytes: config.maxManifestBytes,
+            maxRunDetailsBytes: config.maxRunDetailsBytes,
+            maxRunStoreBytes: config.maxRunStoreBytes,
+            maxRetainedRunsPerSession: config.maxRetainedRunsPerSession,
+            maxWorkflowNamesPerSession: config.maxWorkflowNamesPerSession,
+            maxMembersPerRun: config.maxMembersPerRun,
+            maxRecoveryEntries: config.maxRecoveryEntries,
+            maxTerminalResultBytes: config.maxTerminalResultBytes,
+            memberOutcomeMaxBytes: config.memberOutcomeMaxBytes,
+            maxLogLines: config.maxLogLines,
+            maxLogLineBytes: config.maxLogLineBytes,
+        }, lease, layout);
+        // Recovery receives the retained descriptor layout, not the lexical root
+        // string.  In Host mode this is the security boundary: inventory and all
+        // subsequent reconciliation stay relative to the capabilities opened
+        // after the lifetime lease was acquired.  The recovered Interrupted
+        // heads must remain available to the supervisor: a later store.initialize()
+        // is idempotent and must not report an empty rewrite.
+        const recovered = await recoverWorkflowStorage(layout, store, { maxRecoveryEntries: config.maxRecoveryEntries });
+        let disposed = false;
+        let disposePromise;
+        return {
+            anchor,
+            lease,
+            layout,
+            store,
+            recovered: recovered.runs,
+            dispose() {
+                disposePromise ??= (async () => {
+                    if (disposed)
+                        return;
+                    disposed = true;
+                    let first;
+                    try {
+                        await store.dispose();
+                    }
+                    catch (error) {
+                        first = error;
+                    }
+                    try {
+                        await closeWorkflowStorageLayout(layout);
+                    }
+                    catch (error) {
+                        first ??= error;
+                    }
+                    try {
+                        await lease.release();
+                    }
+                    catch (error) {
+                        first ??= error;
+                    }
+                    if (first !== undefined)
+                        throw first;
+                })();
+                return disposePromise;
+            },
+        };
+    }
+    catch (error) {
+        // Bootstrap can fail after any of the four layout descriptors or the
+        // store has been created.  Close each layer before releasing the lease;
+        // never leave a partial layout holding descriptors into the next boot.
+        await store?.dispose().catch(() => undefined);
+        if (layout !== undefined)
+            await closeWorkflowStorageLayout(layout).catch(() => undefined);
+        if (lease !== undefined)
+            await lease.release().catch(() => undefined);
+        else
+            await anchor.close().catch(() => undefined);
+        throw error;
+    }
+}
+//# sourceMappingURL=index.js.map

package/lib/types/supervisor/storage/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/supervisor/storage/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,yBAAyB,EAAE,2BAA2B,EAAyD,MAAM,YAAY,CAAA;AAC1I,OAAO,EAAE,0BAA0B,EAAE,uBAAuB,EAAiE,MAAM,mBAAmB,CAAA;AACtJ,OAAO,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAA;AAE1D,OAAO,EAAE,sBAAsB,EAAE,MAAM,eAAe,CAAA;AACtD,cAAc,YAAY,CAAC;AAAC,cAAc,mBAAmB,CAAC;AAAC,cAAc,mBAAmB,CAAC;AAAC,cAAc,qBAAqB,CAAC;AAAC,cAAc,qBAAqB,CAAC;AAAC,cAAc,oBAAoB,CAAC;AAAC,cAAc,qBAAqB,CAAC;AAAC,cAAc,gBAAgB,CAAC;AAAC,cAAc,eAAe,CAAA;AAUlT,4EAA4E;AAC5E,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,MAAqC,EAAE,cAAwB;IACvG,MAAM,MAAM,GAAG,MAAM,yBAAyB,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAA;IAC7E,IAAI,KAAuC,CAAA;IAC3C,IAAI,MAAyC,CAAA;IAC7C,IAAI,KAAuC,CAAA;IAC3C,IAAI,CAAC;QACH,KAAK,GAAG,MAAM,2BAA2B,CAAC,MAAM,CAAC,CAAA;QACjD,MAAM,GAAG,MAAM,uBAAuB,CAAC,MAAM,EAAE,KAAK,EAAE,cAA0D,CAAC,CAAA;QACjH,KAAK,GAAG,IAAI,oBAAoB,CAAC;YAC/B,iEAAiE;YACjE,wEAAwE;YACxE,sEAAsE;YACtE,QAAQ,EAAE,MAAM,CAAC,IAAI;YACrB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;YACzC,kBAAkB,EAAE,MAAM,CAAC,kBAAkB;YAC7C,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;YACzC,yBAAyB,EAAE,MAAM,CAAC,yBAAyB;YAC3D,0BAA0B,EAAE,MAAM,CAAC,0BAA0B;YAC7D,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;YACzC,kBAAkB,EAAE,MAAM,CAAC,kBAAkB;YAC7C,sBAAsB,EAAE,MAAM,CAAC,sBAAsB;YACrD,qBAAqB,EAAE,MAAM,CAAC,qBAAqB;YACnD,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,eAAe,EAAE,MAAM,CAAC,eAAe;SACxC,EAAE,KAAK,EAAE,MAAM,CAAC,CAAA;QACjB,yEAAyE;QACzE,yEAAyE;QACzE,qEAAqE;QACrE,oEAAoE;QACpE,4EAA4E;QAC5E,sDAAsD;QACtD,MAAM,SAAS,GAAG,MAAM,sBAAsB,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,kBAAkB,EAAE,MAAM,CAAC,kBAAkB,EAAE,CAAC,CAAA;QAChH,IAAI,QAAQ,GAAG,KAAK,CAAA;QACpB,IAAI,cAAyC,CAAA;QAC7C,OAAO;YACL,MAAM;YACN,KAAK;YACL,MAAM;YACN,KAAK;YACL,SAAS,EAAE,SAAS,CAAC,IAAI;YACzB,OAAO;gBACL,cAAc,KAAK,CAAC,KAAK,IAAI,EAAE;oBAC7B,IAAI,QAAQ;wBAAE,OAAM;oBACpB,QAAQ,GAAG,IAAI,CAAA;oBACf,IAAI,KAAc,CAAA;oBAClB,IAAI,CAAC;wBAAC,MAAM,KAAM,CAAC,OAAO,EAAE,CAAA;oBAAC,CAAC;oBAAC,OAAO,KAAK,EAAE,CAAC;wBAAC,KAAK,GAAG,KAAK,CAAA;oBAAC,CAAC;oBAC9D,IAAI,CAAC;wBAAC,MAAM,0BAA0B,CAAC,MAAO,CAAC,CAAA;oBAAC,CAAC;oBAAC,OAAO,KAAK,EAAE,CAAC;wBAAC,KAAK,KAAK,KAAK,CAAA;oBAAC,CAAC;oBACnF,IAAI,CAAC;wBAAC,MAAM,KAAM,CAAC,OAAO,EAAE,CAAA;oBAAC,CAAC;oBAAC,OAAO,KAAK,EAAE,CAAC;wBAAC,KAAK,KAAK,KAAK,CAAA;oBAAC,CAAC;oBAChE,IAAI,KAAK,KAAK,SAAS;wBAAE,MAAM,KAAK,CAAA;gBACtC,CAAC,CAAC,EAAE,CAAA;gBACJ,OAAO,cAAc,CAAA;YACvB,CAAC;SACF,CAAA;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,qEAAqE;QACrE,wEAAwE;QACxE,uEAAuE;QACvE,MAAM,KAAK,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAA;QAC7C,IAAI,MAAM,KAAK,SAAS;YAAE,MAAM,0BAA0B,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAA;QACzF,IAAI,KAAK,KAAK,SAAS;YAAE,MAAM,KAAK,CAAC,OAAO,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAA;;YAChE,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAA;QAChD,MAAM,KAAK,CAAA;IACb,CAAC;AACH,CAAC"}

package/lib/types/supervisor/storage/lease.d.ts

@@ -0,0 +1,34 @@
+import type { FileHandle } from 'node:fs/promises';
+export interface WorkflowStorageAnchor {
+    readonly root: string;
+    readonly anchorPath: string;
+    readonly file: FileHandle;
+    readonly rootFile: FileHandle;
+    readonly rootIdentity: {
+        readonly dev: number;
+        readonly ino: number;
+    };
+    readonly identity: {
+        readonly dev: number;
+        readonly ino: number;
+    };
+    assertCurrent(signal?: AbortSignal): Promise<void>;
+    close(): Promise<void>;
+}
+export interface WorkflowStorageLease {
+    readonly anchor: WorkflowStorageAnchor;
+    assertCurrent(signal?: AbortSignal): Promise<void>;
+    release(): Promise<void>;
+}
+export interface WorkflowStorageLockAdapter {
+    readonly tryLock: (fd: number) => boolean;
+    readonly unlock: (fd: number) => void;
+}
+/** Open and identity-pin the owner-only runs root and permanent lock anchor. */
+export declare function openWorkflowStorageAnchor(options: {
+    readonly runsRoot: string;
+    readonly signal?: AbortSignal;
+}): Promise<WorkflowStorageAnchor>;
+/** Acquire the native cooperating-process lifetime lease. */
+export declare function acquireWorkflowStorageLease(anchor: WorkflowStorageAnchor, signal?: AbortSignal, adapter?: WorkflowStorageLockAdapter): Promise<WorkflowStorageLease>;
+//# sourceMappingURL=lease.d.ts.map

package/lib/types/supervisor/storage/lease.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"lease.d.ts","sourceRoot":"","sources":["../../../../src/supervisor/storage/lease.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAA;AAIlD,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAA;IACzB,QAAQ,CAAC,QAAQ,EAAE,UAAU,CAAA;IAC7B,QAAQ,CAAC,YAAY,EAAE;QAAE,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;KAAE,CAAA;IACrE,QAAQ,CAAC,QAAQ,EAAE;QAAE,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;KAAE,CAAA;IACjE,aAAa,CAAC,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAClD,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAA;CACvB;AAED,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,MAAM,EAAE,qBAAqB,CAAA;IACtC,aAAa,CAAC,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAClD,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC,CAAA;CACzB;AAwBD,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,OAAO,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAA;IACzC,QAAQ,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,IAAI,CAAA;CACtC;AAmED,gFAAgF;AAChF,wBAAsB,yBAAyB,CAAC,OAAO,EAAE;IAAE,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAA;CAAE,GAAG,OAAO,CAAC,qBAAqB,CAAC,CA0FrJ;AAgBD,6DAA6D;AAC7D,wBAAsB,2BAA2B,CAC/C,MAAM,EAAE,qBAAqB,EAC7B,MAAM,CAAC,EAAE,WAAW,EACpB,OAAO,CAAC,EAAE,0BAA0B,GACnC,OAAO,CAAC,oBAAoB,CAAC,CAoD/B"}

package/lib/types/supervisor/storage/lease.js

@@ -0,0 +1,289 @@
+import { constants } from 'node:fs';
+import { lstat, mkdir, open, realpath } from 'node:fs/promises';
+import { dirname, isAbsolute, join, parse, sep } from 'node:path';
+import { BoundedFileError } from './bounded-file.js';
+const O_DIRECTORY = constants.O_DIRECTORY ?? 0;
+const O_NOFOLLOW = constants.O_NOFOLLOW;
+function unsupported() {
+    return new BoundedFileError(`safe workflow storage is unavailable on ${process.platform}`, 'WORKFLOW_STORAGE_UNSUPPORTED');
+}
+const UNSUPPORTED_LOCK_ERRNOS = new Set(['ENOSYS', 'ENOTSUP', 'EOPNOTSUPP', 'ENOLCK']);
+function errorErrno(error) {
+    if (typeof error !== 'object' || error === null || !('code' in error))
+        return undefined;
+    const code = error.code;
+    return typeof code === 'string' ? code : undefined;
+}
+/** Missing addon/platform lock primitives stay UNSUPPORTED. Unexpected I/O
+ * during tryLock is a compromised root, not another live owner. */
+function isUnsupportedLockError(error) {
+    const code = errorErrno(error);
+    return code !== undefined && UNSUPPORTED_LOCK_ERRNOS.has(code);
+}
+function unsafe(root, detail, cause) {
+    return new BoundedFileError(`workflow storage path "${root}" is unsafe: ${detail}`, 'WORKFLOW_STORAGE_UNSAFE', cause === undefined ? undefined : { cause });
+}
+function sameIdentity(a, b) {
+    return Number(a.dev) === Number(b.dev) && Number(a.ino) === Number(b.ino);
+}
+function ownerOk(info) {
+    return typeof process.getuid !== 'function' || info.uid === process.getuid();
+}
+function assertRootInfo(info, root) {
+    if (!info.isDirectory() || !ownerOk(info) || (info.mode & 0o777) !== 0o700)
+        throw unsafe(root, 'runs root must be an owner-only 0700 directory');
+}
+function assertAnchorInfo(info, root) {
+    if (!info.isFile() || info.nlink !== 1 || !ownerOk(info) || (info.mode & 0o777) !== 0o600)
+        throw unsafe(root, 'lock anchor must be an owner-only 0600 regular file');
+}
+/** Resolve ordinary system alias links (for example macOS /var ->
+ * /private/var) while rejecting a link at the runs-root component itself.
+ * The returned path is the spelling whose ancestors can be opened one
+ * component at a time and identity-pinned. */
+async function canonicalStoragePath(path, root) {
+    if (!isAbsolute(path))
+        throw unsafe(root, 'runs root must be absolute');
+    const parsed = parse(path);
+    // macOS exposes a small set of documented system aliases.  They are not a
+    // caller-controlled workspace boundary; arbitrary symlink ancestors remain
+    // unsafe and are rejected before realpath is allowed to follow them.
+    const allowedAliases = process.platform === 'darwin' ? new Set(['/var', '/tmp', '/etc']) : new Set();
+    let lexical = parsed.root;
+    for (const part of path.slice(parsed.root.length).split(sep).filter(Boolean)) {
+        lexical = join(lexical, part);
+        try {
+            const entry = await lstat(lexical);
+            if (entry.isSymbolicLink() && !allowedAliases.has(lexical))
+                throw unsafe(root, `ancestor "${lexical}" is a symbolic link`);
+        }
+        catch (error) {
+            if (error.code === 'ENOENT')
+                break;
+            throw error;
+        }
+    }
+    let current = path;
+    const missing = [];
+    while (true) {
+        try {
+            const info = await lstat(current);
+            if (info.isSymbolicLink() && missing.length === 0)
+                throw unsafe(root, 'runs root is a symbolic link');
+            if (!info.isDirectory() && !info.isSymbolicLink() && missing.length > 0)
+                throw unsafe(root, `ancestor "${current}" is not a directory`);
+            const resolved = await realpath(current);
+            return missing.length === 0 ? resolved : [resolved, ...missing].join(sep);
+        }
+        catch (error) {
+            if (error.code !== 'ENOENT')
+                throw error;
+            const parent = dirname(current);
+            if (parent === current || current === parsed.root)
+                throw unsafe(root, 'runs root has no accessible ancestor', error);
+            missing.unshift(current.slice(parent.length + (parent.endsWith(sep) ? 0 : 1)));
+            current = parent;
+        }
+    }
+}
+/** Open and identity-pin the owner-only runs root and permanent lock anchor. */
+export async function openWorkflowStorageAnchor(options) {
+    const requestedRoot = options.runsRoot;
+    options.signal?.throwIfAborted();
+    if (process.platform === 'win32' || O_NOFOLLOW === undefined || O_NOFOLLOW === 0 || O_DIRECTORY === 0)
+        throw unsupported();
+    let rootFile;
+    let anchorFile;
+    try {
+        const root = await canonicalStoragePath(requestedRoot, requestedRoot);
+        let rootInfo;
+        try {
+            rootInfo = await lstat(root);
+            if (rootInfo.isSymbolicLink())
+                throw unsafe(root, 'runs root is a symbolic link');
+            assertRootInfo(rootInfo, root);
+        }
+        catch (error) {
+            if (error.code !== 'ENOENT')
+                throw error;
+            // The caller resolves/creates dshHome before storage bootstrap.  Creating
+            // only this final component avoids an implicit path walk through missing
+            // ancestors after they were checked above.
+            try {
+                await mkdir(root, { mode: 0o700 });
+            }
+            catch (mkdirError) {
+                if (mkdirError.code !== 'EEXIST')
+                    throw mkdirError;
+            }
+            rootInfo = await lstat(root);
+            assertRootInfo(rootInfo, root);
+        }
+        rootFile = await open(root, constants.O_RDONLY | O_DIRECTORY | O_NOFOLLOW);
+        const retainedRoot = await rootFile.stat();
+        assertRootInfo(retainedRoot, root);
+        if (!sameIdentity(retainedRoot, rootInfo))
+            throw unsafe(root, 'runs root identity changed while opening');
+        options.signal?.throwIfAborted();
+        const anchorPath = `${root}${root.endsWith(sep) ? '' : sep}.workflow-storage.lock`;
+        anchorFile = await open(anchorPath, constants.O_CREAT | constants.O_RDWR | O_NOFOLLOW, 0o600);
+        const anchorInfo = await anchorFile.stat();
+        assertAnchorInfo(anchorInfo, root);
+        const currentAnchor = await lstat(anchorPath);
+        if (!sameIdentity(anchorInfo, currentAnchor))
+            throw unsafe(root, 'lock anchor identity changed while opening');
+        const rootIdentity = { dev: Number(retainedRoot.dev), ino: Number(retainedRoot.ino) };
+        const anchorIdentity = { dev: Number(anchorInfo.dev), ino: Number(anchorInfo.ino) };
+        const assertCurrent = async (signal) => {
+            signal?.throwIfAborted();
+            try {
+                const [retained, currentRoot, retainedAnchor, currentAnchorNow] = await Promise.all([
+                    rootFile.stat(),
+                    lstat(root),
+                    anchorFile.stat(),
+                    lstat(anchorPath),
+                ]);
+                signal?.throwIfAborted();
+                assertRootInfo(retained, root);
+                assertRootInfo(currentRoot, root);
+                assertAnchorInfo(retainedAnchor, root);
+                assertAnchorInfo(currentAnchorNow, root);
+                if (!sameIdentity(retained, currentRoot)
+                    || Number(retained.dev) !== rootIdentity.dev
+                    || Number(retained.ino) !== rootIdentity.ino
+                    || !sameIdentity(retainedAnchor, currentAnchorNow)
+                    || Number(retainedAnchor.dev) !== anchorIdentity.dev
+                    || Number(retainedAnchor.ino) !== anchorIdentity.ino) {
+                    throw unsafe(root, 'root or lock anchor identity changed');
+                }
+            }
+            catch (error) {
+                if (error instanceof BoundedFileError || signal?.aborted)
+                    throw error;
+                throw unsafe(root, 'root or lock anchor could not be revalidated', error);
+            }
+        };
+        let closePromise;
+        return {
+            root,
+            anchorPath,
+            file: anchorFile,
+            rootFile,
+            rootIdentity,
+            identity: anchorIdentity,
+            assertCurrent,
+            close() {
+                closePromise ??= (async () => {
+                    let first;
+                    try {
+                        await rootFile.close();
+                    }
+                    catch (error) {
+                        first = error;
+                    }
+                    try {
+                        await anchorFile.close();
+                    }
+                    catch (error) {
+                        first ??= error;
+                    }
+                    if (first !== undefined)
+                        throw first;
+                })();
+                return closePromise;
+            },
+        };
+    }
+    catch (error) {
+        await anchorFile?.close().catch(() => undefined);
+        await rootFile?.close().catch(() => undefined);
+        if (error instanceof BoundedFileError)
+            throw error;
+        throw unsafe(requestedRoot, error instanceof Error ? error.message : String(error), error);
+    }
+}
+async function lockFunctions() {
+    try {
+        const module = await import('fs-native-extensions');
+        // The addon exposes named exports and a CommonJS-compatible default object.
+        const candidate = module;
+        return {
+            tryLock: module.tryLock ?? candidate.default?.tryLock,
+            unlock: module.unlock ?? candidate.default?.unlock,
+        };
+    }
+    catch {
+        return {};
+    }
+}
+/** Acquire the native cooperating-process lifetime lease. */
+export async function acquireWorkflowStorageLease(anchor, signal, adapter) {
+    signal?.throwIfAborted();
+    await anchor.assertCurrent(signal);
+    const locks = adapter ?? await lockFunctions();
+    const tryLock = locks.tryLock;
+    const unlock = locks.unlock;
+    if (tryLock === undefined || unlock === undefined) {
+        await anchor.close().catch(() => undefined);
+        throw unsupported();
+    }
+    let locked = false;
+    try {
+        locked = tryLock(anchor.file.fd);
+    }
+    catch (error) {
+        await anchor.close().catch(() => undefined);
+        if (isUnsupportedLockError(error)) {
+            throw new BoundedFileError(`safe workflow storage is unavailable on ${process.platform}`, 'WORKFLOW_STORAGE_UNSUPPORTED', { cause: error });
+        }
+        throw unsafe(anchor.root, error instanceof Error ? error.message : String(error), error);
+    }
+    if (!locked) {
+        await anchor.close().catch(() => undefined);
+        throw new BoundedFileError('workflow storage root is already owned by another live process', 'WORKFLOW_STORAGE_OWNED');
+    }
+    try {
+        signal?.throwIfAborted();
+    }
+    catch (error) {
+        try {
+            unlock(anchor.file.fd);
+        }
+        catch { /* closing the handle also drops the lock */ }
+        await anchor.close().catch(() => undefined);
+        throw error;
+    }
+    let releaseStarted = false;
+    let releasePromise;
+    return {
+        anchor,
+        assertCurrent(signal) {
+            if (releaseStarted) {
+                return Promise.reject(new BoundedFileError('workflow storage lease is released', 'WORKFLOW_STORAGE_UNSAFE'));
+            }
+            return anchor.assertCurrent(signal);
+        },
+        release() {
+            releasePromise ??= (async () => {
+                releaseStarted = true;
+                let first;
+                try {
+                    unlock(anchor.file.fd);
+                }
+                catch (error) {
+                    first = error;
+                }
+                try {
+                    await anchor.close();
+                }
+                catch (error) {
+                    first ??= error;
+                }
+                if (first !== undefined)
+                    throw first;
+            })();
+            return releasePromise;
+        },
+    };
+}
+//# sourceMappingURL=lease.js.map

package/lib/types/supervisor/storage/lease.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"lease.js","sourceRoot":"","sources":["../../../../src/supervisor/storage/lease.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAA;AAEnC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAA;AAE/D,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,WAAW,CAAA;AACjE,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAA;AAmBpD,MAAM,WAAW,GAAI,SAAoC,CAAC,WAAW,IAAI,CAAC,CAAA;AAC1E,MAAM,UAAU,GAAI,SAAoC,CAAC,UAAU,CAAA;AAEnE,SAAS,WAAW;IAClB,OAAO,IAAI,gBAAgB,CAAC,2CAA2C,OAAO,CAAC,QAAQ,EAAE,EAAE,8BAA8B,CAAC,CAAA;AAC5H,CAAC;AAED,MAAM,uBAAuB,GAAG,IAAI,GAAG,CAAC,CAAC,QAAQ,EAAE,SAAS,EAAE,YAAY,EAAE,QAAQ,CAAC,CAAC,CAAA;AAEtF,SAAS,UAAU,CAAC,KAAc;IAChC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,CAAC,MAAM,IAAI,KAAK,CAAC;QAAE,OAAO,SAAS,CAAA;IACvF,MAAM,IAAI,GAAI,KAAqC,CAAC,IAAI,CAAA;IACxD,OAAO,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAA;AACpD,CAAC;AAED;mEACmE;AACnE,SAAS,sBAAsB,CAAC,KAAc;IAC5C,MAAM,IAAI,GAAG,UAAU,CAAC,KAAK,CAAC,CAAA;IAC9B,OAAO,IAAI,KAAK,SAAS,IAAI,uBAAuB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;AAChE,CAAC;AAOD,SAAS,MAAM,CAAC,IAAY,EAAE,MAAc,EAAE,KAAe;IAC3D,OAAO,IAAI,gBAAgB,CACzB,0BAA0B,IAAI,gBAAgB,MAAM,EAAE,EACtD,yBAAyB,EACzB,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAC5C,CAAA;AACH,CAAC;AAED,SAAS,YAAY,CAAC,CAAQ,EAAE,CAAQ;IACtC,OAAO,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAA;AAC3E,CAAC;AAED,SAAS,OAAO,CAAC,IAAW;IAC1B,OAAO,OAAO,OAAO,CAAC,MAAM,KAAK,UAAU,IAAI,IAAI,CAAC,GAAG,KAAK,OAAO,CAAC,MAAM,EAAE,CAAA;AAC9E,CAAC;AAED,SAAS,cAAc,CAAC,IAAW,EAAE,IAAY;IAC/C,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,KAAK;QAAE,MAAM,MAAM,CAAC,IAAI,EAAE,gDAAgD,CAAC,CAAA;AAClJ,CAAC;AAED,SAAS,gBAAgB,CAAC,IAAW,EAAE,IAAY;IACjD,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,IAAI,CAAC,KAAK,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,KAAK;QAAE,MAAM,MAAM,CAAC,IAAI,EAAE,qDAAqD,CAAC,CAAA;AACtK,CAAC;AAED;;;8CAG8C;AAC9C,KAAK,UAAU,oBAAoB,CAAC,IAAY,EAAE,IAAY;IAC5D,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,MAAM,MAAM,CAAC,IAAI,EAAE,4BAA4B,CAAC,CAAA;IACvE,MAAM,MAAM,GAAG,KAAK,CAAC,IAAI,CAAC,CAAA;IAC1B,0EAA0E;IAC1E,2EAA2E;IAC3E,qEAAqE;IACrE,MAAM,cAAc,GAAG,OAAO,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,EAAU,CAAA;IAC5G,IAAI,OAAO,GAAG,MAAM,CAAC,IAAI,CAAA;IACzB,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;QAC7E,OAAO,GAAG,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,CAAA;QAC7B,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,KAAK,CAAC,OAAO,CAAC,CAAA;YAClC,IAAI,KAAK,CAAC,cAAc,EAAE,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,OAAO,CAAC;gBAAE,MAAM,MAAM,CAAC,IAAI,EAAE,aAAa,OAAO,sBAAsB,CAAC,CAAA;QAC5H,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;gBAAE,MAAK;YAC7D,MAAM,KAAK,CAAA;QACb,CAAC;IACH,CAAC;IACD,IAAI,OAAO,GAAG,IAAI,CAAA;IAClB,MAAM,OAAO,GAAa,EAAE,CAAA;IAC5B,OAAO,IAAI,EAAE,CAAC;QACZ,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,OAAO,CAAC,CAAA;YACjC,IAAI,IAAI,CAAC,cAAc,EAAE,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;gBAAE,MAAM,MAAM,CAAC,IAAI,EAAE,8BAA8B,CAAC,CAAA;YACrG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC;gBAAE,MAAM,MAAM,CAAC,IAAI,EAAE,aAAa,OAAO,sBAAsB,CAAC,CAAA;YACvI,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,CAAA;YACxC,OAAO,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,GAAG,OAAO,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;QAC3E,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;gBAAE,MAAM,KAAK,CAAA;YACnE,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;YAC/B,IAAI,MAAM,KAAK,OAAO,IAAI,OAAO,KAAK,MAAM,CAAC,IAAI;gBAAE,MAAM,MAAM,CAAC,IAAI,EAAE,sCAAsC,EAAE,KAAK,CAAC,CAAA;YACpH,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;YAC9E,OAAO,GAAG,MAAM,CAAA;QAClB,CAAC;IACH,CAAC;AACH,CAAC;AAED,gFAAgF;AAChF,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAAC,OAAqE;IACnH,MAAM,aAAa,GAAG,OAAO,CAAC,QAAQ,CAAA;IACtC,OAAO,CAAC,MAAM,EAAE,cAAc,EAAE,CAAA;IAChC,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,IAAI,UAAU,KAAK,SAAS,IAAI,UAAU,KAAK,CAAC,IAAI,WAAW,KAAK,CAAC;QAAE,MAAM,WAAW,EAAE,CAAA;IAC1H,IAAI,QAAgC,CAAA;IACpC,IAAI,UAAkC,CAAA;IACtC,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,oBAAoB,CAAC,aAAa,EAAE,aAAa,CAAC,CAAA;QACrE,IAAI,QAAe,CAAA;QACnB,IAAI,CAAC;YACH,QAAQ,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,CAAA;YAC5B,IAAI,QAAQ,CAAC,cAAc,EAAE;gBAAE,MAAM,MAAM,CAAC,IAAI,EAAE,8BAA8B,CAAC,CAAA;YACjF,cAAc,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAA;QAChC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;gBAAE,MAAM,KAAK,CAAA;YACnE,0EAA0E;YAC1E,yEAAyE;YACzE,2CAA2C;YAC3C,IAAI,CAAC;gBAAC,MAAM,KAAK,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAA;YAAC,CAAC;YAC1C,OAAO,UAAU,EAAE,CAAC;gBAClB,IAAK,UAAoC,CAAC,IAAI,KAAK,QAAQ;oBAAE,MAAM,UAAU,CAAA;YAC/E,CAAC;YACD,QAAQ,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,CAAA;YAC5B,cAAc,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAA;QAChC,CAAC;QACD,QAAQ,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,QAAQ,GAAG,WAAW,GAAG,UAAU,CAAC,CAAA;QAC1E,MAAM,YAAY,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAA;QAC1C,cAAc,CAAC,YAAY,EAAE,IAAI,CAAC,CAAA;QAClC,IAAI,CAAC,YAAY,CAAC,YAAY,EAAE,QAAQ,CAAC;YAAE,MAAM,MAAM,CAAC,IAAI,EAAE,0CAA0C,CAAC,CAAA;QACzG,OAAO,CAAC,MAAM,EAAE,cAAc,EAAE,CAAA;QAChC,MAAM,UAAU,GAAG,GAAG,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,wBAAwB,CAAA;QAClF,UAAU,GAAG,MAAM,IAAI,CAAC,UAAU,EAAE,SAAS,CAAC,OAAO,GAAG,SAAS,CAAC,MAAM,GAAG,UAAU,EAAE,KAAK,CAAC,CAAA;QAC7F,MAAM,UAAU,GAAG,MAAM,UAAU,CAAC,IAAI,EAAE,CAAA;QAC1C,gBAAgB,CAAC,UAAU,EAAE,IAAI,CAAC,CAAA;QAClC,MAAM,aAAa,GAAG,MAAM,KAAK,CAAC,UAAU,CAAC,CAAA;QAC7C,IAAI,CAAC,YAAY,CAAC,UAAU,EAAE,aAAa,CAAC;YAAE,MAAM,MAAM,CAAC,IAAI,EAAE,4CAA4C,CAAC,CAAA;QAC9G,MAAM,YAAY,GAAG,EAAE,GAAG,EAAE,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,EAAE,CAAA;QACrF,MAAM,cAAc,GAAG,EAAE,GAAG,EAAE,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAA;QACnF,MAAM,aAAa,GAAG,KAAK,EAAE,MAAoB,EAAiB,EAAE;YAClE,MAAM,EAAE,cAAc,EAAE,CAAA;YACxB,IAAI,CAAC;gBACH,MAAM,CAAC,QAAQ,EAAE,WAAW,EAAE,cAAc,EAAE,gBAAgB,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;oBAClF,QAAS,CAAC,IAAI,EAAE;oBAChB,KAAK,CAAC,IAAI,CAAC;oBACX,UAAW,CAAC,IAAI,EAAE;oBAClB,KAAK,CAAC,UAAU,CAAC;iBAClB,CAAC,CAAA;gBACF,MAAM,EAAE,cAAc,EAAE,CAAA;gBACxB,cAAc,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAA;gBAC9B,cAAc,CAAC,WAAW,EAAE,IAAI,CAAC,CAAA;gBACjC,gBAAgB,CAAC,cAAc,EAAE,IAAI,CAAC,CAAA;gBACtC,gBAAgB,CAAC,gBAAgB,EAAE,IAAI,CAAC,CAAA;gBACxC,IAAI,CAAC,YAAY,CAAC,QAAQ,EAAE,WAAW,CAAC;uBACnC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,YAAY,CAAC,GAAG;uBACzC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,YAAY,CAAC,GAAG;uBACzC,CAAC,YAAY,CAAC,cAAc,EAAE,gBAAgB,CAAC;uBAC/C,MAAM,CAAC,cAAc,CAAC,GAAG,CAAC,KAAK,cAAc,CAAC,GAAG;uBACjD,MAAM,CAAC,cAAc,CAAC,GAAG,CAAC,KAAK,cAAc,CAAC,GAAG,EAAE,CAAC;oBACvD,MAAM,MAAM,CAAC,IAAI,EAAE,sCAAsC,CAAC,CAAA;gBAC5D,CAAC;YACH,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,KAAK,YAAY,gBAAgB,IAAI,MAAM,EAAE,OAAO;oBAAE,MAAM,KAAK,CAAA;gBACrE,MAAM,MAAM,CAAC,IAAI,EAAE,8CAA8C,EAAE,KAAK,CAAC,CAAA;YAC3E,CAAC;QACH,CAAC,CAAA;QACD,IAAI,YAAuC,CAAA;QAC3C,OAAO;YACL,IAAI;YACJ,UAAU;YACV,IAAI,EAAE,UAAU;YAChB,QAAQ;YACR,YAAY;YACZ,QAAQ,EAAE,cAAc;YACxB,aAAa;YACb,KAAK;gBACH,YAAY,KAAK,CAAC,KAAK,IAAI,EAAE;oBAC3B,IAAI,KAAc,CAAA;oBAClB,IAAI,CAAC;wBAAC,MAAM,QAAS,CAAC,KAAK,EAAE,CAAA;oBAAC,CAAC;oBAAC,OAAO,KAAK,EAAE,CAAC;wBAAC,KAAK,GAAG,KAAK,CAAA;oBAAC,CAAC;oBAC/D,IAAI,CAAC;wBAAC,MAAM,UAAW,CAAC,KAAK,EAAE,CAAA;oBAAC,CAAC;oBAAC,OAAO,KAAK,EAAE,CAAC;wBAAC,KAAK,KAAK,KAAK,CAAA;oBAAC,CAAC;oBACnE,IAAI,KAAK,KAAK,SAAS;wBAAE,MAAM,KAAK,CAAA;gBACtC,CAAC,CAAC,EAAE,CAAA;gBACJ,OAAO,YAAY,CAAA;YACrB,CAAC;SACF,CAAA;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,UAAU,EAAE,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAA;QAChD,MAAM,QAAQ,EAAE,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAA;QAC9C,IAAI,KAAK,YAAY,gBAAgB;YAAE,MAAM,KAAK,CAAA;QAClD,MAAM,MAAM,CAAC,aAAa,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,KAAK,CAAC,CAAA;IAC5F,CAAC;AACH,CAAC;AAED,KAAK,UAAU,aAAa;IAC1B,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,sBAAsB,CAA0C,CAAA;QAC5F,4EAA4E;QAC5E,MAAM,SAAS,GAAG,MAA8D,CAAA;QAChF,OAAO;YACL,OAAO,EAAE,MAAM,CAAC,OAAO,IAAI,SAAS,CAAC,OAAO,EAAE,OAAO;YACrD,MAAM,EAAE,MAAM,CAAC,MAAM,IAAI,SAAS,CAAC,OAAO,EAAE,MAAM;SACnD,CAAA;IACH,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAA;IACX,CAAC;AACH,CAAC;AAED,6DAA6D;AAC7D,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAC/C,MAA6B,EAC7B,MAAoB,EACpB,OAAoC;IAEpC,MAAM,EAAE,cAAc,EAAE,CAAA;IACxB,MAAM,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,CAAA;IAClC,MAAM,KAAK,GAAG,OAAO,IAAI,MAAM,aAAa,EAAE,CAAA;IAC9C,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAA;IAC7B,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAA;IAC3B,IAAI,OAAO,KAAK,SAAS,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QAClD,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAA;QAC3C,MAAM,WAAW,EAAE,CAAA;IACrB,CAAC;IACD,IAAI,MAAM,GAAG,KAAK,CAAA;IAClB,IAAI,CAAC;QACH,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;IAClC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAA;QAC3C,IAAI,sBAAsB,CAAC,KAAK,CAAC,EAAE,CAAC;YAClC,MAAM,IAAI,gBAAgB,CAAC,2CAA2C,OAAO,CAAC,QAAQ,EAAE,EAAE,8BAA8B,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAA;QAC7I,CAAC;QACD,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,KAAK,CAAC,CAAA;IAC1F,CAAC;IACD,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAA;QAC3C,MAAM,IAAI,gBAAgB,CAAC,gEAAgE,EAAE,wBAAwB,CAAC,CAAA;IACxH,CAAC;IACD,IAAI,CAAC;QACH,MAAM,EAAE,cAAc,EAAE,CAAA;IAC1B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,CAAC;YAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,4CAA4C,CAAC,CAAC;QACrF,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAA;QAC3C,MAAM,KAAK,CAAA;IACb,CAAC;IACD,IAAI,cAAc,GAAG,KAAK,CAAA;IAC1B,IAAI,cAAyC,CAAA;IAC7C,OAAO;QACL,MAAM;QACN,aAAa,CAAC,MAAoB;YAChC,IAAI,cAAc,EAAE,CAAC;gBACnB,OAAO,OAAO,CAAC,MAAM,CAAC,IAAI,gBAAgB,CAAC,oCAAoC,EAAE,yBAAyB,CAAC,CAAC,CAAA;YAC9G,CAAC;YACD,OAAO,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,CAAA;QACrC,CAAC;QACD,OAAO;YACL,cAAc,KAAK,CAAC,KAAK,IAAI,EAAE;gBAC7B,cAAc,GAAG,IAAI,CAAA;gBACrB,IAAI,KAAc,CAAA;gBAClB,IAAI,CAAC;oBAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;gBAAC,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBAAC,KAAK,GAAG,KAAK,CAAA;gBAAC,CAAC;gBAC9D,IAAI,CAAC;oBAAC,MAAM,MAAM,CAAC,KAAK,EAAE,CAAA;gBAAC,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBAAC,KAAK,KAAK,KAAK,CAAA;gBAAC,CAAC;gBAC9D,IAAI,KAAK,KAAK,SAAS;oBAAE,MAAM,KAAK,CAAA;YACtC,CAAC,CAAC,EAAE,CAAA;YACJ,OAAO,cAAc,CAAA;QACvB,CAAC;KACF,CAAA;AACH,CAAC"}

package/lib/types/supervisor/storage/manifest-codec.d.ts

@@ -0,0 +1,10 @@
+import type { WorkflowSessionManifest } from './manifest-types.js';
+/** Parse a display handle back to its session-local launch ordinal.
+ * The unnumbered first handle is `name` itself (ordinal 1), including kebab
+ * names that already end in digits such as `gpt-4` or `review-2`. */
+export declare function displayOrdinal(name: string, displayName: string): number;
+/** Decode a bounded canonical version-2 Session manifest. */
+export declare function decodeWorkflowSessionManifest(input: Uint8Array | string, file: string, maxBytes: number): WorkflowSessionManifest;
+/** Encode a canonical version-2 Session manifest. */
+export declare function encodeWorkflowSessionManifest(value: WorkflowSessionManifest, maxBytes: number): Uint8Array;
+//# sourceMappingURL=manifest-codec.d.ts.map

package/lib/types/supervisor/storage/manifest-codec.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"manifest-codec.d.ts","sourceRoot":"","sources":["../../../../src/supervisor/storage/manifest-codec.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAIV,uBAAuB,EACxB,MAAM,qBAAqB,CAAA;AAsB5B;;qEAEqE;AACrE,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,MAAM,CAexE;AAwND,6DAA6D;AAC7D,wBAAgB,6BAA6B,CAAC,KAAK,EAAE,UAAU,GAAG,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,uBAAuB,CAYjI;AAQD,qDAAqD;AACrD,wBAAgB,6BAA6B,CAAC,KAAK,EAAE,uBAAuB,EAAE,QAAQ,EAAE,MAAM,GAAG,UAAU,CAM1G"}