devchain-cli 0.23.4 → 0.24.0

package/dist/server/modules/core/controllers/build-info.js

@@ -0,0 +1,29 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.readBuildInfo = readBuildInfo;
+const node_fs_1 = require("node:fs");
+const node_path_1 = require("node:path");
+const BUILD_INFO_FILE = (0, node_path_1.join)(__dirname, '../../../../build-info.json');
+const COMMIT_PATTERN = /^[0-9a-f]{40}$/;
+function readBuildInfo(file = BUILD_INFO_FILE) {
+    try {
+        const parsed = JSON.parse((0, node_fs_1.readFileSync)(file, 'utf8'));
+        if (typeof parsed !== 'object' || parsed === null || Array.isArray(parsed))
+            return null;
+        const { commit, dirty, builtAt } = parsed;
+        if (commit !== null && (typeof commit !== 'string' || !COMMIT_PATTERN.test(commit))) {
+            return null;
+        }
+        if (dirty !== null && typeof dirty !== 'boolean')
+            return null;
+        if ((commit === null) !== (dirty === null))
+            return null;
+        if (typeof builtAt !== 'string' || new Date(builtAt).toISOString() !== builtAt)
+            return null;
+        return { commit, dirty, builtAt };
+    }
+    catch {
+        return null;
+    }
+}
+//# sourceMappingURL=build-info.js.map

package/dist/server/modules/core/controllers/build-info.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"build-info.js","sourceRoot":"","sources":["../../../../src/modules/core/controllers/build-info.ts"],"names":[],"mappings":";;AAiBA,sCAkBC;AAnCD,qCAAuC;AACvC,yCAAiC;AAQjC,MAAM,eAAe,GAAG,IAAA,gBAAI,EAAC,SAAS,EAAE,6BAA6B,CAAC,CAAC;AACvE,MAAM,cAAc,GAAG,gBAAgB,CAAC;AAOxC,SAAgB,aAAa,CAAC,IAAI,GAAG,eAAe;IAClD,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAA,sBAAY,EAAC,IAAI,EAAE,MAAM,CAAC,CAAY,CAAC;QACjE,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;YAAE,OAAO,IAAI,CAAC;QAExF,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,MAAiC,CAAC;QACrE,IAAI,MAAM,KAAK,IAAI,IAAI,CAAC,OAAO,MAAM,KAAK,QAAQ,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC;YACpF,OAAO,IAAI,CAAC;QACd,CAAC;QACD,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,SAAS;YAAE,OAAO,IAAI,CAAC;QAC9D,IAAI,CAAC,MAAM,KAAK,IAAI,CAAC,KAAK,CAAC,KAAK,KAAK,IAAI,CAAC;YAAE,OAAO,IAAI,CAAC;QAExD,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,IAAI,IAAI,CAAC,OAAO,CAAC,CAAC,WAAW,EAAE,KAAK,OAAO;YAAE,OAAO,IAAI,CAAC;QAE5F,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;IACpC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC"}

package/dist/server/modules/core/controllers/docker-archive-journal.d.ts

@@ -0,0 +1,26 @@
+import { DockerEngineClient } from './docker-engine.client';
+import { DockerArchiveHelper, DockerArchiveMount, DockerHelperCommand } from './docker-archive';
+export interface JournaledDockerHelper extends DockerArchiveHelper {
+    journalKey: string;
+}
+export declare class DockerArchiveJournal {
+    readonly directory: string;
+    constructor(dataDirectory?: string);
+    hasPending(): Promise<boolean>;
+    create(client: DockerEngineClient, image: string, mounts: DockerArchiveMount[], signal?: AbortSignal, command?: DockerHelperCommand): Promise<JournaledDockerHelper>;
+    cleanup(client: DockerEngineClient, helper: JournaledDockerHelper): Promise<void>;
+    clearBind(client: DockerEngineClient, image: string, source: string, signal?: AbortSignal, timeoutMs?: number): Promise<void>;
+    clear(client: DockerEngineClient, image: string, type: DockerArchiveMount['Type'], source: string, signal?: AbortSignal, timeoutMs?: number): Promise<void>;
+    reconcile(client: DockerEngineClient, signal?: AbortSignal): Promise<{
+        pending: number;
+    }>;
+    private clean;
+    private sameVolume;
+    private identities;
+    private engineId;
+    private entries;
+    private saver;
+    private write;
+    private drop;
+    private exclusive;
+}

package/dist/server/modules/core/controllers/docker-archive-journal.js

@@ -0,0 +1,293 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DockerArchiveJournal = void 0;
+const node_crypto_1 = require("node:crypto");
+const promises_1 = require("node:fs/promises");
+const node_os_1 = require("node:os");
+const node_path_1 = require("node:path");
+const docker_engine_client_1 = require("./docker-engine.client");
+const docker_archive_1 = require("./docker-archive");
+const active = new Map();
+const locks = new Map();
+const tokenPattern = /^[a-f0-9-]{36}$/;
+const engineIds = new WeakMap();
+const BIND_CLEAR_TIMEOUT_MS = 30 * 60_000;
+class DockerArchiveJournal {
+    directory;
+    constructor(dataDirectory = process.env.DB_PATH || (0, node_path_1.join)((0, node_os_1.homedir)(), '.devchain')) {
+        this.directory = (0, node_path_1.join)(dataDirectory, 'docker-helper-journal');
+    }
+    async hasPending() {
+        return (await this.entries()).length > 0;
+    }
+    async create(client, image, mounts, signal, command) {
+        await this.reconcile(client, signal);
+        const engineId = await this.engineId(client, signal);
+        const token = (0, node_crypto_1.randomUUID)();
+        const held = active.get(this.directory) ?? new Set();
+        active.set(this.directory, held);
+        held.add(token);
+        const entry = {
+            token,
+            engineId,
+            createdAt: new Date().toISOString(),
+            helper: { id: '', ownedVolumeIds: [] },
+            protectedVolumeIds: [],
+            volumes: {},
+        };
+        const save = this.saver(entry);
+        try {
+            const helper = await (0, docker_archive_1.createDockerArchiveHelper)(client, image, mounts, signal, {
+                name: `devchain-archive-${token}`,
+                token,
+                record: async (helper) => {
+                    entry.helper = structuredClone(helper);
+                    if (helper.pendingInventory)
+                        entry.protectedVolumeIds = [...helper.pendingInventory.protectedIds];
+                    await save();
+                    if (!helper.pendingInventory) {
+                        await this.identities(client, entry);
+                        await save();
+                    }
+                },
+            }, command);
+            return { ...helper, journalKey: token };
+        }
+        catch (error) {
+            held.delete(token);
+            if (error instanceof docker_engine_client_1.DockerEngineError &&
+                error.status &&
+                error.status >= 400 &&
+                error.status < 500 &&
+                entry.helper.id === `devchain-archive-${token}`) {
+                await this.drop(token);
+            }
+            throw new docker_engine_client_1.DockerEngineError(signal?.aborted ? 'cancelled' : 'unavailable', 'Docker archive helper failed; cleanup is retained locally');
+        }
+    }
+    async cleanup(client, helper) {
+        try {
+            await this.exclusive(async () => {
+                const entry = (await this.entries()).find((entry) => entry.token === helper.journalKey);
+                if (!entry)
+                    return;
+                if (entry.engineId !== (await this.engineId(client)))
+                    throw new docker_engine_client_1.DockerEngineError('unavailable', 'Docker helper belongs to a different engine');
+                await this.clean(client, entry);
+            });
+        }
+        finally {
+            active.get(this.directory)?.delete(helper.journalKey);
+        }
+    }
+    clearBind(client, image, source, signal, timeoutMs = BIND_CLEAR_TIMEOUT_MS) {
+        return this.clear(client, image, 'bind', source, signal, timeoutMs);
+    }
+    async clear(client, image, type, source, signal, timeoutMs = BIND_CLEAR_TIMEOUT_MS) {
+        const helper = await this.create(client, image, [{ Type: type, Source: source, Target: '/target' }], signal, docker_archive_1.DOCKER_BIND_CLEAR_COMMAND);
+        try {
+            const id = encodeURIComponent(helper.id);
+            await client.json('POST', `/containers/${id}/start`, undefined, { signal });
+            const bounded = AbortSignal.any([
+                ...(signal ? [signal] : []),
+                AbortSignal.timeout(timeoutMs),
+            ]);
+            const result = await client.json('POST', `/containers/${id}/wait?condition=not-running`, undefined, { signal: bounded });
+            if (result.StatusCode !== 0)
+                throw new docker_engine_client_1.DockerEngineError('engine-error', 'The bind clear helper did not finish cleanly');
+        }
+        finally {
+            await this.cleanup(client, helper);
+        }
+    }
+    async reconcile(client, signal) {
+        return this.exclusive(async () => {
+            const entries = await this.entries();
+            if (!entries.length)
+                return { pending: 0 };
+            const engineId = await this.engineId(client, signal);
+            for (const entry of entries) {
+                if (entry.engineId !== engineId || active.get(this.directory)?.has(entry.token))
+                    continue;
+                try {
+                    await this.clean(client, entry, signal);
+                }
+                catch {
+                }
+            }
+            return { pending: (await this.entries()).length };
+        });
+    }
+    async clean(client, entry, signal) {
+        let inspect = await (0, docker_engine_client_1.optionalDockerJson)(client, `/containers/${encodeURIComponent(entry.helper.id)}/json`, signal);
+        if (entry.helper.id === `devchain-archive-${entry.token}` &&
+            inspect?.Config.Labels?.[docker_archive_1.DOCKER_ARCHIVE_HELPER_LABEL] !== entry.token) {
+            const matches = await client.json('GET', `/containers/json?all=true&filters=${encodeURIComponent(JSON.stringify({ label: [`${docker_archive_1.DOCKER_ARCHIVE_HELPER_LABEL}=${entry.token}`] }))}`, undefined, { signal });
+            const verified = matches.filter((item) => item.Labels?.[docker_archive_1.DOCKER_ARCHIVE_HELPER_LABEL] === entry.token);
+            if (verified.length > 1)
+                return;
+            if (verified.length === 1)
+                inspect = await (0, docker_engine_client_1.optionalDockerJson)(client, `/containers/${encodeURIComponent(verified[0].Id)}/json`, signal);
+        }
+        if (inspect) {
+            if (inspect.Config.Labels?.[docker_archive_1.DOCKER_ARCHIVE_HELPER_LABEL] !== entry.token)
+                return;
+            const save = this.saver(entry, JSON.stringify(entry));
+            entry.helper.id = inspect.Id;
+            await save();
+            if (entry.helper.pendingInventory) {
+                await (0, docker_archive_1.inventoryDockerArchiveHelper)(client, entry.helper, signal);
+                await save();
+            }
+            await this.identities(client, entry, signal);
+            await save();
+            const force = inspect.State?.Running ? '?force=true' : '';
+            await client.json('DELETE', `/containers/${encodeURIComponent(inspect.Id)}${force}`, undefined, { signal });
+        }
+        else if (entry.helper.pendingInventory) {
+            if (entry.helper.id === `devchain-archive-${entry.token}` &&
+                Date.now() - Date.parse(entry.createdAt) >= 15 * 60_000) {
+                await this.drop(entry.token);
+                process.emitWarning(`Expired absent Docker helper intent ${entry.token}`, {
+                    code: 'DOCKER_HELPER_INTENT_EXPIRED',
+                });
+            }
+            return;
+        }
+        let remains = false;
+        for (const id of entry.helper.ownedVolumeIds) {
+            if (entry.protectedVolumeIds.includes(id)) {
+                remains = true;
+                continue;
+            }
+            const volume = await (0, docker_engine_client_1.optionalDockerJson)(client, `/volumes/${encodeURIComponent(id)}`, signal);
+            if (!volume)
+                continue;
+            const recorded = entry.volumes[id];
+            if (!recorded || !this.sameVolume(recorded, volume)) {
+                remains = true;
+                continue;
+            }
+            const holders = await client.json('GET', `/containers/json?all=true&filters=${encodeURIComponent(JSON.stringify({ volume: [id] }))}`, undefined, { signal });
+            if (holders.length) {
+                remains = true;
+                continue;
+            }
+            try {
+                await client.json('DELETE', `/volumes/${encodeURIComponent(id)}`, undefined, { signal });
+            }
+            catch (error) {
+                if (!(0, docker_engine_client_1.isDockerNotFound)(error))
+                    throw error;
+            }
+        }
+        if (!remains)
+            await this.drop(entry.token);
+    }
+    sameVolume(a, b) {
+        return (a.Name === b.Name &&
+            a.CreatedAt === b.CreatedAt &&
+            a.Driver === b.Driver &&
+            a.Mountpoint === b.Mountpoint);
+    }
+    async identities(client, entry, signal) {
+        for (const id of entry.helper.ownedVolumeIds) {
+            if (entry.volumes[id] || entry.protectedVolumeIds.includes(id))
+                continue;
+            const value = await client.json('GET', `/volumes/${encodeURIComponent(id)}`, undefined, { signal });
+            if (value.Name !== id || !value.CreatedAt || !value.Driver || !value.Mountpoint)
+                throw new docker_engine_client_1.DockerEngineError('invalid-response', 'Docker volume identity is incomplete');
+            entry.volumes[id] = {
+                Name: value.Name,
+                CreatedAt: value.CreatedAt,
+                Driver: value.Driver,
+                Mountpoint: value.Mountpoint,
+            };
+        }
+    }
+    async engineId(client, signal) {
+        const known = engineIds.get(client);
+        if (known)
+            return known;
+        const info = await client.info(signal);
+        if (!info.ID)
+            throw new docker_engine_client_1.DockerEngineError('invalid-response', 'Docker engine identity is missing');
+        engineIds.set(client, info.ID);
+        return info.ID;
+    }
+    async entries() {
+        try {
+            const files = await (0, promises_1.readdir)(this.directory);
+            const entries = [];
+            for (const file of files.filter((file) => tokenPattern.test(file.replace(/\.json$/, '')) && file.endsWith('.json'))) {
+                const entry = JSON.parse(await (0, promises_1.readFile)((0, node_path_1.join)(this.directory, file), 'utf8'));
+                if (entry.token !== file.slice(0, -5) ||
+                    !entry.engineId ||
+                    !entry.helper?.id ||
+                    !Array.isArray(entry.helper.ownedVolumeIds) ||
+                    !Array.isArray(entry.protectedVolumeIds) ||
+                    !entry.volumes)
+                    throw new Error();
+                entries.push(entry);
+            }
+            return entries;
+        }
+        catch (error) {
+            if (error.code === 'ENOENT')
+                return [];
+            throw new docker_engine_client_1.DockerEngineError('unavailable', 'Docker helper cleanup journal cannot be read');
+        }
+    }
+    saver(entry, saved) {
+        return async () => {
+            const serialized = JSON.stringify(entry);
+            if (serialized === saved)
+                return;
+            await this.write(entry);
+            saved = serialized;
+        };
+    }
+    async write(entry) {
+        await (0, promises_1.mkdir)(this.directory, { recursive: true, mode: 0o700 });
+        const temporary = (0, node_path_1.join)(this.directory, `${entry.token}.${(0, node_crypto_1.randomUUID)()}.tmp`);
+        const file = await (0, promises_1.open)(temporary, 'wx', 0o600);
+        try {
+            await file.writeFile(JSON.stringify(entry));
+            await file.sync();
+        }
+        finally {
+            await file.close();
+        }
+        await (0, promises_1.rename)(temporary, (0, node_path_1.join)(this.directory, `${entry.token}.json`));
+        const directory = await (0, promises_1.open)(this.directory, 'r');
+        try {
+            await directory.sync();
+        }
+        finally {
+            await directory.close();
+        }
+    }
+    async drop(token) {
+        try {
+            await (0, promises_1.unlink)((0, node_path_1.join)(this.directory, `${token}.json`));
+        }
+        catch (error) {
+            if (error.code !== 'ENOENT')
+                throw error;
+        }
+    }
+    async exclusive(action) {
+        const previous = locks.get(this.directory) ?? Promise.resolve();
+        const next = previous.catch(() => undefined).then(action);
+        locks.set(this.directory, next);
+        try {
+            return await next;
+        }
+        finally {
+            if (locks.get(this.directory) === next)
+                locks.delete(this.directory);
+        }
+    }
+}
+exports.DockerArchiveJournal = DockerArchiveJournal;
+//# sourceMappingURL=docker-archive-journal.js.map

package/dist/server/modules/core/controllers/docker-archive-journal.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"docker-archive-journal.js","sourceRoot":"","sources":["../../../../src/modules/core/controllers/docker-archive-journal.ts"],"names":[],"mappings":";;;AAAA,6CAAyC;AACzC,+CAAkF;AAClF,qCAAkC;AAClC,yCAAiC;AACjC,iEAKgC;AAChC,qDAQ0B;AAmB1B,MAAM,MAAM,GAAG,IAAI,GAAG,EAAuB,CAAC;AAC9C,MAAM,KAAK,GAAG,IAAI,GAAG,EAA4B,CAAC;AAClD,MAAM,YAAY,GAAG,iBAAiB,CAAC;AAEvC,MAAM,SAAS,GAAG,IAAI,OAAO,EAA8B,CAAC;AAC5D,MAAM,qBAAqB,GAAG,EAAE,GAAG,MAAM,CAAC;AAG1C,MAAa,oBAAoB;IACtB,SAAS,CAAS;IAC3B,YAAY,aAAa,GAAG,OAAO,CAAC,GAAG,CAAC,OAAO,IAAI,IAAA,gBAAI,EAAC,IAAA,iBAAO,GAAE,EAAE,WAAW,CAAC;QAC7E,IAAI,CAAC,SAAS,GAAG,IAAA,gBAAI,EAAC,aAAa,EAAE,uBAAuB,CAAC,CAAC;IAChE,CAAC;IAED,KAAK,CAAC,UAAU;QACd,OAAO,CAAC,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;IAC3C,CAAC;IAED,KAAK,CAAC,MAAM,CACV,MAA0B,EAC1B,KAAa,EACb,MAA4B,EAC5B,MAAoB,EACpB,OAA6B;QAE7B,MAAM,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QACrC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QACrD,MAAM,KAAK,GAAG,IAAA,wBAAU,GAAE,CAAC;QAC3B,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,IAAI,GAAG,EAAU,CAAC;QAC7D,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;QACjC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAChB,MAAM,KAAK,GAAiB;YAC1B,KAAK;YACL,QAAQ;YACR,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,MAAM,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,cAAc,EAAE,EAAE,EAAE;YACtC,kBAAkB,EAAE,EAAE;YACtB,OAAO,EAAE,EAAE;SACZ,CAAC;QACF,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAC/B,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,IAAA,0CAAyB,EAC5C,MAAM,EACN,KAAK,EACL,MAAM,EACN,MAAM,EACN;gBACE,IAAI,EAAE,oBAAoB,KAAK,EAAE;gBACjC,KAAK;gBACL,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE;oBACvB,KAAK,CAAC,MAAM,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC;oBACvC,IAAI,MAAM,CAAC,gBAAgB;wBACzB,KAAK,CAAC,kBAAkB,GAAG,CAAC,GAAG,MAAM,CAAC,gBAAgB,CAAC,YAAY,CAAC,CAAC;oBACvE,MAAM,IAAI,EAAE,CAAC;oBACb,IAAI,CAAC,MAAM,CAAC,gBAAgB,EAAE,CAAC;wBAC7B,MAAM,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;wBACrC,MAAM,IAAI,EAAE,CAAC;oBACf,CAAC;gBACH,CAAC;aACF,EACD,OAAO,CACR,CAAC;YACF,OAAO,EAAE,GAAG,MAAM,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC;QAC1C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAEnB,IACE,KAAK,YAAY,wCAAiB;gBAClC,KAAK,CAAC,MAAM;gBACZ,KAAK,CAAC,MAAM,IAAI,GAAG;gBACnB,KAAK,CAAC,MAAM,GAAG,GAAG;gBAClB,KAAK,CAAC,MAAM,CAAC,EAAE,KAAK,oBAAoB,KAAK,EAAE,EAC/C,CAAC;gBACD,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACzB,CAAC;YACD,MAAM,IAAI,wCAAiB,CACzB,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,aAAa,EAC7C,2DAA2D,CAC5D,CAAC;QACJ,CAAC;IACH,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,MAA0B,EAAE,MAA6B;QACrE,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,SAAS,CAAC,KAAK,IAAI,EAAE;gBAC9B,MAAM,KAAK,GAAG,CAAC,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,KAAK,MAAM,CAAC,UAAU,CAAC,CAAC;gBACxF,IAAI,CAAC,KAAK;oBAAE,OAAO;gBACnB,IAAI,KAAK,CAAC,QAAQ,KAAK,CAAC,MAAM,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;oBAClD,MAAM,IAAI,wCAAiB,CAAC,aAAa,EAAE,6CAA6C,CAAC,CAAC;gBAC5F,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;YAClC,CAAC,CAAC,CAAC;QACL,CAAC;gBAAS,CAAC;YACT,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;QACxD,CAAC;IACH,CAAC;IAMD,SAAS,CACP,MAA0B,EAC1B,KAAa,EACb,MAAc,EACd,MAAoB,EACpB,SAAS,GAAG,qBAAqB;QAEjC,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC;IACtE,CAAC;IAGD,KAAK,CAAC,KAAK,CACT,MAA0B,EAC1B,KAAa,EACb,IAAgC,EAChC,MAAc,EACd,MAAoB,EACpB,SAAS,GAAG,qBAAqB;QAEjC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAC9B,MAAM,EACN,KAAK,EACL,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,EACnD,MAAM,EACN,0CAAyB,CAC1B,CAAC;QACF,IAAI,CAAC;YACH,MAAM,EAAE,GAAG,kBAAkB,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YACzC,MAAM,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,eAAe,EAAE,QAAQ,EAAE,SAAS,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;YAC5E,MAAM,OAAO,GAAG,WAAW,CAAC,GAAG,CAAC;gBAC9B,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC3B,WAAW,CAAC,OAAO,CAAC,SAAS,CAAC;aAC/B,CAAC,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,IAAI,CAC9B,MAAM,EACN,eAAe,EAAE,6BAA6B,EAC9C,SAAS,EACT,EAAE,MAAM,EAAE,OAAO,EAAE,CACpB,CAAC;YACF,IAAI,MAAM,CAAC,UAAU,KAAK,CAAC;gBACzB,MAAM,IAAI,wCAAiB,CAAC,cAAc,EAAE,8CAA8C,CAAC,CAAC;QAChG,CAAC;gBAAS,CAAC;YACT,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QACrC,CAAC;IACH,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,MAA0B,EAAE,MAAoB;QAC9D,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,IAAI,EAAE;YAC/B,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC;YACrC,IAAI,CAAC,OAAO,CAAC,MAAM;gBAAE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC;YAC3C,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;YACrD,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;gBAC5B,IAAI,KAAK,CAAC,QAAQ,KAAK,QAAQ,IAAI,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC;oBAAE,SAAS;gBAC1F,IAAI,CAAC;oBACH,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;gBAC1C,CAAC;gBAAC,MAAM,CAAC;gBAET,CAAC;YACH,CAAC;YACD,OAAO,EAAE,OAAO,EAAE,CAAC,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;QACpD,CAAC,CAAC,CAAC;IACL,CAAC;IAEO,KAAK,CAAC,KAAK,CACjB,MAA0B,EAC1B,KAAmB,EACnB,MAAoB;QAEpB,IAAI,OAAO,GAAG,MAAM,IAAA,yCAAkB,EAInC,MAAM,EAAE,eAAe,kBAAkB,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC9E,IACE,KAAK,CAAC,MAAM,CAAC,EAAE,KAAK,oBAAoB,KAAK,CAAC,KAAK,EAAE;YACrD,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,4CAA2B,CAAC,KAAK,KAAK,CAAC,KAAK,EACrE,CAAC;YACD,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,IAAI,CAC/B,KAAK,EACL,qCAAqC,kBAAkB,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,CAAC,GAAG,4CAA2B,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC,EAAE,EACvI,SAAS,EACT,EAAE,MAAM,EAAE,CACX,CAAC;YACF,MAAM,QAAQ,GAAG,OAAO,CAAC,MAAM,CAC7B,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,4CAA2B,CAAC,KAAK,KAAK,CAAC,KAAK,CACrE,CAAC;YACF,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC;gBAAE,OAAO;YAChC,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;gBACvB,OAAO,GAAG,MAAM,IAAA,yCAAkB,EAChC,MAAM,EACN,eAAe,kBAAkB,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,OAAO,EACxD,MAAM,CACP,CAAC;QACN,CAAC;QACD,IAAI,OAAO,EAAE,CAAC;YACZ,IAAI,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,4CAA2B,CAAC,KAAK,KAAK,CAAC,KAAK;gBAAE,OAAO;YAEjF,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;YACtD,KAAK,CAAC,MAAM,CAAC,EAAE,GAAG,OAAO,CAAC,EAAE,CAAC;YAC7B,MAAM,IAAI,EAAE,CAAC;YACb,IAAI,KAAK,CAAC,MAAM,CAAC,gBAAgB,EAAE,CAAC;gBAClC,MAAM,IAAA,6CAA4B,EAAC,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;gBACjE,MAAM,IAAI,EAAE,CAAC;YACf,CAAC;YACD,MAAM,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;YAC7C,MAAM,IAAI,EAAE,CAAC;YAEb,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,CAAC;YAC1D,MAAM,MAAM,CAAC,IAAI,CACf,QAAQ,EACR,eAAe,kBAAkB,CAAC,OAAO,CAAC,EAAE,CAAC,GAAG,KAAK,EAAE,EACvD,SAAS,EACT,EAAE,MAAM,EAAE,CACX,CAAC;QACJ,CAAC;aAAM,IAAI,KAAK,CAAC,MAAM,CAAC,gBAAgB,EAAE,CAAC;YAEzC,IACE,KAAK,CAAC,MAAM,CAAC,EAAE,KAAK,oBAAoB,KAAK,CAAC,KAAK,EAAE;gBACrD,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,EAAE,GAAG,MAAM,EACvD,CAAC;gBACD,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;gBAC7B,OAAO,CAAC,WAAW,CAAC,uCAAuC,KAAK,CAAC,KAAK,EAAE,EAAE;oBACxE,IAAI,EAAE,8BAA8B;iBACrC,CAAC,CAAC;YACL,CAAC;YACD,OAAO;QACT,CAAC;QACD,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,KAAK,MAAM,EAAE,IAAI,KAAK,CAAC,MAAM,CAAC,cAAc,EAAE,CAAC;YAC7C,IAAI,KAAK,CAAC,kBAAkB,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,CAAC;gBAC1C,OAAO,GAAG,IAAI,CAAC;gBACf,SAAS;YACX,CAAC;YACD,MAAM,MAAM,GAAG,MAAM,IAAA,yCAAkB,EACrC,MAAM,EACN,YAAY,kBAAkB,CAAC,EAAE,CAAC,EAAE,EACpC,MAAM,CACP,CAAC;YACF,IAAI,CAAC,MAAM;gBAAE,SAAS;YACtB,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;YACnC,IAAI,CAAC,QAAQ,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,MAAM,CAAC,EAAE,CAAC;gBACpD,OAAO,GAAG,IAAI,CAAC;gBACf,SAAS;YACX,CAAC;YACD,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,IAAI,CAC/B,KAAK,EACL,qCAAqC,kBAAkB,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,EAAE,EAC3F,SAAS,EACT,EAAE,MAAM,EAAE,CACX,CAAC;YACF,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;gBACnB,OAAO,GAAG,IAAI,CAAC;gBACf,SAAS;YACX,CAAC;YACD,IAAI,CAAC;gBACH,MAAM,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,YAAY,kBAAkB,CAAC,EAAE,CAAC,EAAE,EAAE,SAAS,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;YAC3F,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,CAAC,IAAA,uCAAgB,EAAC,KAAK,CAAC;oBAAE,MAAM,KAAK,CAAC;YAC5C,CAAC;QACH,CAAC;QACD,IAAI,CAAC,OAAO;YAAE,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAC7C,CAAC;IACO,UAAU,CAAC,CAAiB,EAAE,CAAiB;QACrD,OAAO,CACL,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,IAAI;YACjB,CAAC,CAAC,SAAS,KAAK,CAAC,CAAC,SAAS;YAC3B,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM;YACrB,CAAC,CAAC,UAAU,KAAK,CAAC,CAAC,UAAU,CAC9B,CAAC;IACJ,CAAC;IACO,KAAK,CAAC,UAAU,CACtB,MAA0B,EAC1B,KAAmB,EACnB,MAAoB;QAEpB,KAAK,MAAM,EAAE,IAAI,KAAK,CAAC,MAAM,CAAC,cAAc,EAAE,CAAC;YAC7C,IAAI,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,IAAI,KAAK,CAAC,kBAAkB,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAAE,SAAS;YACzE,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,IAAI,CAC7B,KAAK,EACL,YAAY,kBAAkB,CAAC,EAAE,CAAC,EAAE,EACpC,SAAS,EACT,EAAE,MAAM,EAAE,CACX,CAAC;YACF,IAAI,KAAK,CAAC,IAAI,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,SAAS,IAAI,CAAC,KAAK,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,UAAU;gBAC7E,MAAM,IAAI,wCAAiB,CAAC,kBAAkB,EAAE,sCAAsC,CAAC,CAAC;YAC1F,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,GAAG;gBAClB,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,SAAS,EAAE,KAAK,CAAC,SAAS;gBAC1B,MAAM,EAAE,KAAK,CAAC,MAAM;gBACpB,UAAU,EAAE,KAAK,CAAC,UAAU;aAC7B,CAAC;QACJ,CAAC;IACH,CAAC;IACO,KAAK,CAAC,QAAQ,CAAC,MAA0B,EAAE,MAAoB;QACrE,MAAM,KAAK,GAAG,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACpC,IAAI,KAAK;YAAE,OAAO,KAAK,CAAC;QACxB,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACvC,IAAI,CAAC,IAAI,CAAC,EAAE;YACV,MAAM,IAAI,wCAAiB,CAAC,kBAAkB,EAAE,mCAAmC,CAAC,CAAC;QACvF,SAAS,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;QAC/B,OAAO,IAAI,CAAC,EAAE,CAAC;IACjB,CAAC;IACO,KAAK,CAAC,OAAO;QACnB,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,IAAA,kBAAO,EAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YAC5C,MAAM,OAAO,GAAmB,EAAE,CAAC;YACnC,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,MAAM,CAC7B,CAAC,IAAI,EAAE,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CACnF,EAAE,CAAC;gBACF,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CACtB,MAAM,IAAA,mBAAQ,EAAC,IAAA,gBAAI,EAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,CACnC,CAAC;gBAClB,IACE,KAAK,CAAC,KAAK,KAAK,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;oBACjC,CAAC,KAAK,CAAC,QAAQ;oBACf,CAAC,KAAK,CAAC,MAAM,EAAE,EAAE;oBACjB,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,cAAc,CAAC;oBAC3C,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,kBAAkB,CAAC;oBACxC,CAAC,KAAK,CAAC,OAAO;oBAEd,MAAM,IAAI,KAAK,EAAE,CAAC;gBACpB,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACtB,CAAC;YACD,OAAO,OAAO,CAAC;QACjB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;gBAAE,OAAO,EAAE,CAAC;YAClE,MAAM,IAAI,wCAAiB,CAAC,aAAa,EAAE,8CAA8C,CAAC,CAAC;QAC7F,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,KAAmB,EAAE,KAAc;QAC/C,OAAO,KAAK,IAAI,EAAE;YAChB,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;YACzC,IAAI,UAAU,KAAK,KAAK;gBAAE,OAAO;YACjC,MAAM,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YACxB,KAAK,GAAG,UAAU,CAAC;QACrB,CAAC,CAAC;IACJ,CAAC;IACO,KAAK,CAAC,KAAK,CAAC,KAAmB;QACrC,MAAM,IAAA,gBAAK,EAAC,IAAI,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAC9D,MAAM,SAAS,GAAG,IAAA,gBAAI,EAAC,IAAI,CAAC,SAAS,EAAE,GAAG,KAAK,CAAC,KAAK,IAAI,IAAA,wBAAU,GAAE,MAAM,CAAC,CAAC;QAC7E,MAAM,IAAI,GAAG,MAAM,IAAA,eAAI,EAAC,SAAS,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;QAChD,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;YAC5C,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;QACpB,CAAC;gBAAS,CAAC;YACT,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC;QACrB,CAAC;QACD,MAAM,IAAA,iBAAM,EAAC,SAAS,EAAE,IAAA,gBAAI,EAAC,IAAI,CAAC,SAAS,EAAE,GAAG,KAAK,CAAC,KAAK,OAAO,CAAC,CAAC,CAAC;QACrE,MAAM,SAAS,GAAG,MAAM,IAAA,eAAI,EAAC,IAAI,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;QAClD,IAAI,CAAC;YACH,MAAM,SAAS,CAAC,IAAI,EAAE,CAAC;QACzB,CAAC;gBAAS,CAAC;YACT,MAAM,SAAS,CAAC,KAAK,EAAE,CAAC;QAC1B,CAAC;IACH,CAAC;IACO,KAAK,CAAC,IAAI,CAAC,KAAa;QAC9B,IAAI,CAAC;YACH,MAAM,IAAA,iBAAM,EAAC,IAAA,gBAAI,EAAC,IAAI,CAAC,SAAS,EAAE,GAAG,KAAK,OAAO,CAAC,CAAC,CAAC;QACtD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;gBAAE,MAAM,KAAK,CAAC;QACtE,CAAC;IACH,CAAC;IACO,KAAK,CAAC,SAAS,CAAI,MAAwB;QACjD,MAAM,QAAQ,GAAG,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;QAChE,MAAM,IAAI,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC1D,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;QAChC,IAAI,CAAC;YACH,OAAO,MAAM,IAAI,CAAC;QACpB,CAAC;gBAAS,CAAC;YACT,IAAI,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,IAAI;gBAAE,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACvE,CAAC;IACH,CAAC;CACF;AA7WD,oDA6WC"}

package/dist/server/modules/core/controllers/docker-archive.d.ts

@@ -0,0 +1,41 @@
+import { Readable } from 'node:stream';
+import { DockerEngineClient, DockerEngineError } from './docker-engine.client';
+export declare const DOCKER_ARCHIVE_HELPER_LABEL = "dev.devchain.archive-helper";
+export interface DockerArchiveMount {
+    Type: 'bind' | 'volume';
+    Source: string;
+    Target: string;
+    ReadOnly?: boolean;
+}
+export interface DockerHelperMount {
+    Type: string;
+    Name?: string;
+    Destination: string;
+}
+export declare const DOCKER_BIND_CLEAR_COMMAND: {
+    readonly Entrypoint: readonly ["find"];
+    readonly Cmd: readonly ["/target", "-mindepth", "1", "-delete"];
+    readonly User: "0:0";
+};
+export type DockerHelperCommand = typeof DOCKER_BIND_CLEAR_COMMAND;
+export interface DockerArchiveHelper {
+    id: string;
+    ownedVolumeIds: string[];
+    pendingInventory?: {
+        protectedIds: string[];
+        explicitTargets: string[];
+    };
+}
+export declare class DockerArchiveHelperError extends DockerEngineError {
+    readonly helper: DockerArchiveHelper;
+    constructor(helper: DockerArchiveHelper);
+}
+export declare function inventoryDockerArchiveHelper(client: DockerEngineClient, helper: DockerArchiveHelper, signal?: AbortSignal): Promise<void>;
+export declare function createDockerArchiveHelper(client: DockerEngineClient, image: string, mounts: DockerArchiveMount[], signal?: AbortSignal, lifecycle?: {
+    name: string;
+    token: string;
+    record: (helper: DockerArchiveHelper) => Promise<void>;
+}, command?: DockerHelperCommand): Promise<DockerArchiveHelper>;
+export declare function cleanupDockerArchiveHelper(client: DockerEngineClient, helper: DockerArchiveHelper): Promise<void>;
+export declare function readDockerArchive(client: DockerEngineClient, helperId: string, signal?: AbortSignal): Promise<Readable>;
+export declare function writeDockerArchive(client: DockerEngineClient, helperId: string, archive: Readable, signal?: AbortSignal): Promise<void>;

package/dist/server/modules/core/controllers/docker-archive.js

@@ -0,0 +1,128 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DockerArchiveHelperError = exports.DOCKER_BIND_CLEAR_COMMAND = exports.DOCKER_ARCHIVE_HELPER_LABEL = void 0;
+exports.inventoryDockerArchiveHelper = inventoryDockerArchiveHelper;
+exports.createDockerArchiveHelper = createDockerArchiveHelper;
+exports.cleanupDockerArchiveHelper = cleanupDockerArchiveHelper;
+exports.readDockerArchive = readDockerArchive;
+exports.writeDockerArchive = writeDockerArchive;
+const docker_engine_client_1 = require("./docker-engine.client");
+exports.DOCKER_ARCHIVE_HELPER_LABEL = 'dev.devchain.archive-helper';
+exports.DOCKER_BIND_CLEAR_COMMAND = {
+    Entrypoint: ['find'],
+    Cmd: ['/target', '-mindepth', '1', '-delete'],
+    User: '0:0',
+};
+class DockerArchiveHelperError extends docker_engine_client_1.DockerEngineError {
+    helper;
+    constructor(helper) {
+        super('unavailable', 'Archive helper cleanup is pending; retain its ownership record and retry cleanup');
+        this.helper = helper;
+        this.name = 'DockerArchiveHelperError';
+    }
+}
+exports.DockerArchiveHelperError = DockerArchiveHelperError;
+async function inventoryDockerArchiveHelper(client, helper, signal) {
+    const pending = helper.pendingInventory;
+    if (!pending)
+        return;
+    const inspect = await client.json('GET', `/containers/${encodeURIComponent(helper.id)}/json`, undefined, { signal });
+    helper.ownedVolumeIds = [
+        ...new Set(inspect.Mounts.filter((mount) => mount.Type === 'volume' &&
+            mount.Name &&
+            !pending.protectedIds.includes(mount.Name) &&
+            !pending.explicitTargets.includes(mount.Destination)).map((mount) => mount.Name)),
+    ];
+    delete helper.pendingInventory;
+}
+async function createDockerArchiveHelper(client, image, mounts, signal, lifecycle, command) {
+    if (!mounts.length ||
+        mounts.some((mount) => !mount.Source || !mount.Target.startsWith('/')) ||
+        new Set(mounts.map((mount) => mount.Target)).size !== mounts.length) {
+        throw new docker_engine_client_1.DockerEngineError('unsupported', 'Archive helper mounts must have explicit sources and unique absolute targets');
+    }
+    const before = await client.json('GET', '/volumes', undefined, { signal });
+    const protectedIds = new Set([
+        ...(before.Volumes ?? []).map((volume) => volume.Name),
+        ...mounts.filter((mount) => mount.Type === 'volume').map((mount) => mount.Source),
+    ]);
+    const existing = new Set((before.Volumes ?? []).map((volume) => volume.Name));
+    if (mounts.some((mount) => mount.Type === 'volume' && !existing.has(mount.Source))) {
+        throw new docker_engine_client_1.DockerEngineError('not-found', 'Archive helper source volume does not exist');
+    }
+    if (signal?.aborted)
+        throw new docker_engine_client_1.DockerEngineError('cancelled', 'Docker request cancelled');
+    const helper = {
+        id: lifecycle?.name ?? '',
+        ownedVolumeIds: [],
+        pendingInventory: {
+            protectedIds: [...protectedIds],
+            explicitTargets: mounts.map((mount) => mount.Target),
+        },
+    };
+    await lifecycle?.record(helper);
+    const created = await client.json('POST', `/containers/create${lifecycle ? `?name=${encodeURIComponent(lifecycle.name)}` : ''}`, {
+        Image: image,
+        Cmd: command ? [...command.Cmd] : ['devchain-archive-helper'],
+        Entrypoint: command ? [...command.Entrypoint] : [],
+        ...(command ? { User: command.User } : {}),
+        ...(lifecycle ? { Labels: { [exports.DOCKER_ARCHIVE_HELPER_LABEL]: lifecycle.token } } : {}),
+        HostConfig: {
+            Mounts: mounts.map((mount) => mount.Type === 'volume' ? { ...mount, VolumeOptions: { NoCopy: true } } : mount),
+            NetworkMode: 'none',
+            AutoRemove: false,
+            ...(command ? { ReadonlyRootfs: true } : {}),
+        },
+    });
+    helper.id = created.Id;
+    await lifecycle?.record(helper);
+    try {
+        await inventoryDockerArchiveHelper(client, helper);
+        await lifecycle?.record(helper);
+        if (signal?.aborted)
+            throw new docker_engine_client_1.DockerEngineError('cancelled', 'Docker request cancelled');
+        return helper;
+    }
+    catch (error) {
+        if (lifecycle || helper.pendingInventory)
+            throw new DockerArchiveHelperError(helper);
+        try {
+            await cleanupDockerArchiveHelper(client, helper);
+        }
+        catch {
+            throw new DockerArchiveHelperError(helper);
+        }
+        throw error;
+    }
+}
+async function cleanupDockerArchiveHelper(client, helper) {
+    await inventoryDockerArchiveHelper(client, helper);
+    const remove = async (path) => {
+        try {
+            await client.json('DELETE', path);
+        }
+        catch (error) {
+            if (!(0, docker_engine_client_1.isDockerNotFound)(error))
+                throw error;
+        }
+    };
+    await remove(`/containers/${encodeURIComponent(helper.id)}`);
+    for (const id of helper.ownedVolumeIds)
+        await remove(`/volumes/${encodeURIComponent(id)}`);
+}
+function readDockerArchive(client, helperId, signal) {
+    return client.stream('GET', `/containers/${encodeURIComponent(helperId)}/archive?path=/data`, {
+        signal,
+    });
+}
+async function writeDockerArchive(client, helperId, archive, signal) {
+    const response = await client.stream('PUT', `/containers/${encodeURIComponent(helperId)}/archive?copyUIDGID=true&path=/`, {
+        body: archive,
+        headers: { 'Content-Type': 'application/x-tar' },
+        signal,
+    });
+    for await (const chunk of response) {
+        void chunk;
+    }
+}
+//# sourceMappingURL=docker-archive.js.map

package/dist/server/modules/core/controllers/docker-archive.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"docker-archive.js","sourceRoot":"","sources":["../../../../src/modules/core/controllers/docker-archive.ts"],"names":[],"mappings":";;;AAwCA,oEAyBC;AAGD,8DAqFC;AAED,gEAcC;AAED,8CAQC;AACD,gDAkBC;AArMD,iEAAiG;AAGpF,QAAA,2BAA2B,GAAG,6BAA6B,CAAC;AAc5D,QAAA,yBAAyB,GAAG;IACvC,UAAU,EAAE,CAAC,MAAM,CAAC;IACpB,GAAG,EAAE,CAAC,SAAS,EAAE,WAAW,EAAE,GAAG,EAAE,SAAS,CAAC;IAC7C,IAAI,EAAE,KAAK;CACH,CAAC;AAQX,MAAa,wBAAyB,SAAQ,wCAAiB;IACxC;IAArB,YAAqB,MAA2B;QAC9C,KAAK,CACH,aAAa,EACb,kFAAkF,CACnF,CAAC;QAJiB,WAAM,GAAN,MAAM,CAAqB;QAK9C,IAAI,CAAC,IAAI,GAAG,0BAA0B,CAAC;IACzC,CAAC;CACF;AARD,4DAQC;AAEM,KAAK,UAAU,4BAA4B,CAChD,MAA0B,EAC1B,MAA2B,EAC3B,MAAoB;IAEpB,MAAM,OAAO,GAAG,MAAM,CAAC,gBAAgB,CAAC;IACxC,IAAI,CAAC,OAAO;QAAE,OAAO;IACrB,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,IAAI,CAC/B,KAAK,EACL,eAAe,kBAAkB,CAAC,MAAM,CAAC,EAAE,CAAC,OAAO,EACnD,SAAS,EACT,EAAE,MAAM,EAAE,CACX,CAAC;IACF,MAAM,CAAC,cAAc,GAAG;QACtB,GAAG,IAAI,GAAG,CACR,OAAO,CAAC,MAAM,CAAC,MAAM,CACnB,CAAC,KAAK,EAAE,EAAE,CACR,KAAK,CAAC,IAAI,KAAK,QAAQ;YACvB,KAAK,CAAC,IAAI;YACV,CAAC,OAAO,CAAC,YAAY,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC;YAC1C,CAAC,OAAO,CAAC,eAAe,CAAC,QAAQ,CAAC,KAAK,CAAC,WAAW,CAAC,CACvD,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAK,CAAC,CAC9B;KACF,CAAC;IACF,OAAO,MAAM,CAAC,gBAAgB,CAAC;AACjC,CAAC;AAGM,KAAK,UAAU,yBAAyB,CAC7C,MAA0B,EAC1B,KAAa,EACb,MAA4B,EAC5B,MAAoB,EACpB,SAIC,EACD,OAA6B;IAE7B,IACE,CAAC,MAAM,CAAC,MAAM;QACd,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;QACtE,IAAI,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,MAAM,EACnE,CAAC;QACD,MAAM,IAAI,wCAAiB,CACzB,aAAa,EACb,8EAA8E,CAC/E,CAAC;IACJ,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,IAAI,CAC9B,KAAK,EACL,UAAU,EACV,SAAS,EACT,EAAE,MAAM,EAAE,CACX,CAAC;IACF,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC;QAC3B,GAAG,CAAC,MAAM,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC;QACtD,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC;KAClF,CAAC,CAAC;IAEH,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;IAC9E,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC;QACnF,MAAM,IAAI,wCAAiB,CAAC,WAAW,EAAE,6CAA6C,CAAC,CAAC;IAC1F,CAAC;IACD,IAAI,MAAM,EAAE,OAAO;QAAE,MAAM,IAAI,wCAAiB,CAAC,WAAW,EAAE,0BAA0B,CAAC,CAAC;IAC1F,MAAM,MAAM,GAAwB;QAClC,EAAE,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE;QACzB,cAAc,EAAE,EAAE;QAClB,gBAAgB,EAAE;YAChB,YAAY,EAAE,CAAC,GAAG,YAAY,CAAC;YAC/B,eAAe,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC;SACrD;KACF,CAAC;IACF,MAAM,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;IAEhC,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,IAAI,CAC/B,MAAM,EACN,qBAAqB,SAAS,CAAC,CAAC,CAAC,SAAS,kBAAkB,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,EACrF;QACE,KAAK,EAAE,KAAK;QACZ,GAAG,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,yBAAyB,CAAC;QAC7D,UAAU,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,EAAE;QAClD,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC1C,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,CAAC,mCAA2B,CAAC,EAAE,SAAS,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACpF,UAAU,EAAE;YAEV,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAC3B,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,GAAG,KAAK,EAAE,aAAa,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAChF;YACD,WAAW,EAAE,MAAM;YACnB,UAAU,EAAE,KAAK;YACjB,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC7C;KACF,CACF,CAAC;IACF,MAAM,CAAC,EAAE,GAAG,OAAO,CAAC,EAAE,CAAC;IACvB,MAAM,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;IAChC,IAAI,CAAC;QAEH,MAAM,4BAA4B,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QACnD,MAAM,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;QAChC,IAAI,MAAM,EAAE,OAAO;YAAE,MAAM,IAAI,wCAAiB,CAAC,WAAW,EAAE,0BAA0B,CAAC,CAAC;QAC1F,OAAO,MAAM,CAAC;IAChB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,SAAS,IAAI,MAAM,CAAC,gBAAgB;YAAE,MAAM,IAAI,wBAAwB,CAAC,MAAM,CAAC,CAAC;QACrF,IAAI,CAAC;YACH,MAAM,0BAA0B,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QACnD,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,wBAAwB,CAAC,MAAM,CAAC,CAAC;QAC7C,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAEM,KAAK,UAAU,0BAA0B,CAC9C,MAA0B,EAC1B,MAA2B;IAE3B,MAAM,4BAA4B,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACnD,MAAM,MAAM,GAAG,KAAK,EAAE,IAAY,EAAE,EAAE;QACpC,IAAI,CAAC;YACH,MAAM,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;QACpC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,IAAA,uCAAgB,EAAC,KAAK,CAAC;gBAAE,MAAM,KAAK,CAAC;QAC5C,CAAC;IACH,CAAC,CAAC;IACF,MAAM,MAAM,CAAC,eAAe,kBAAkB,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;IAC7D,KAAK,MAAM,EAAE,IAAI,MAAM,CAAC,cAAc;QAAE,MAAM,MAAM,CAAC,YAAY,kBAAkB,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;AAC7F,CAAC;AAED,SAAgB,iBAAiB,CAC/B,MAA0B,EAC1B,QAAgB,EAChB,MAAoB;IAEpB,OAAO,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,eAAe,kBAAkB,CAAC,QAAQ,CAAC,qBAAqB,EAAE;QAC5F,MAAM;KACP,CAAC,CAAC;AACL,CAAC;AACM,KAAK,UAAU,kBAAkB,CACtC,MAA0B,EAC1B,QAAgB,EAChB,OAAiB,EACjB,MAAoB;IAEpB,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,MAAM,CAClC,KAAK,EACL,eAAe,kBAAkB,CAAC,QAAQ,CAAC,iCAAiC,EAC5E;QACE,IAAI,EAAE,OAAO;QACb,OAAO,EAAE,EAAE,cAAc,EAAE,mBAAmB,EAAE;QAChD,MAAM;KACP,CACF,CAAC;IACF,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,QAAQ,EAAE,CAAC;QACnC,KAAK,KAAK,CAAC;IACb,CAAC;AACH,CAAC"}

package/dist/server/modules/core/controllers/docker-engine.client.d.ts

@@ -0,0 +1,82 @@
+import type { PinnedTlsOptions } from '../../remotes/transport/remote-tls';
+import { Readable } from 'node:stream';
+export type DockerErrorCode = 'cannot-move' | 'unsupported' | 'incompatible-api' | 'unavailable' | 'cancelled' | 'not-found' | 'conflict' | 'engine-error' | 'invalid-response';
+export declare class DockerEngineError extends Error {
+    readonly code: DockerErrorCode;
+    readonly status?: number | undefined;
+    constructor(code: DockerErrorCode, message: string, status?: number | undefined);
+}
+export declare function isDockerNotFound(error: unknown): boolean;
+export declare function dockerErrorCode(code: DockerErrorCode): string;
+export interface DockerInfo {
+    Architecture?: string;
+    ID?: string;
+    Driver: string;
+    DriverStatus?: string[][];
+    DockerRootDir: string;
+    SecurityOptions?: string[];
+    OperatingSystem?: string;
+}
+export interface DockerVersion {
+    ApiVersion: string;
+    MinAPIVersion: string;
+}
+export interface DockerDiskUsage {
+    Volumes?: Array<{
+        Name: string;
+        UsageData?: {
+            Size: number;
+            RefCount: number;
+        };
+    }>;
+    Images?: Array<{
+        Id: string;
+        Size: number;
+        SharedSize: number;
+        Containers?: number;
+    }>;
+    Containers?: Array<{
+        Id: string;
+        SizeRw: number;
+        SizeRootFs?: number;
+    }>;
+    LayersSize?: number;
+    BuildCache?: Array<{
+        ID: string;
+        Size: number;
+        Shared?: boolean;
+    }>;
+}
+export declare function resolveDockerSocket(options?: {
+    env?: NodeJS.ProcessEnv;
+    inspectContext?: () => Promise<string | undefined>;
+}): Promise<string>;
+export declare function assertSupportedDocker(info: DockerInfo): void;
+export declare function resolveDockerImageStore(info: DockerInfo, readConfig?: () => Promise<string>): Promise<string>;
+export declare function negotiateDockerApi(a: DockerEngineClient, b: DockerEngineClient, signal?: AbortSignal): Promise<string>;
+export declare function selectDockerApiVersion(av: DockerVersion, bv: DockerVersion): string;
+export interface DockerRequestOptions {
+    body?: Readable | Buffer | string;
+    headers?: Record<string, string>;
+    signal?: AbortSignal;
+    unversioned?: boolean;
+    onTrailers?: (trailers: NodeJS.Dict<string>) => void;
+}
+export declare class DockerEngineClient {
+    readonly socketPath: string;
+    private readonly baseUrl?;
+    private readonly defaultHeaders;
+    private readonly tls?;
+    apiVersion?: string;
+    connectedInfo?: DockerInfo;
+    constructor(socketPath: string, baseUrl?: string | undefined, defaultHeaders?: Record<string, string>, tls?: PinnedTlsOptions | undefined);
+    static forHttp(baseUrl: string, tls: PinnedTlsOptions, headers?: Record<string, string>): DockerEngineClient;
+    static connect(signal?: AbortSignal): Promise<DockerEngineClient>;
+    stream(method: string, path: string, options?: DockerRequestOptions): Promise<Readable>;
+    json<T>(method: string, path: string, body?: unknown, options?: Omit<DockerRequestOptions, 'body'>): Promise<T>;
+    version(signal?: AbortSignal): Promise<DockerVersion>;
+    info(signal?: AbortSignal): Promise<DockerInfo>;
+    diskUsage(signal?: AbortSignal): Promise<DockerDiskUsage>;
+}
+export declare function optionalDockerJson<T>(client: DockerEngineClient, path: string, signal?: AbortSignal): Promise<T | undefined>;
+export declare function changeDockerContainerState(client: DockerEngineClient, id: string, action: 'start' | 'stop', signal?: AbortSignal): Promise<void>;