devchain-cli 0.23.4 → 0.24.0

package/dist/server/modules/remotes/docker/docker-plan-policy.js

@@ -0,0 +1,234 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DATA_BLOCKER_CODES = void 0;
+exports.blocksMode = blocksMode;
+exports.applyDockerPolicy = applyDockerPolicy;
+exports.dockerReconnect = dockerReconnect;
+exports.applyDockerDataPolicy = applyDockerDataPolicy;
+const error_types_1 = require("../../../common/errors/error-types");
+const host_docker_dto_1 = require("../host/host-docker.dto");
+const docker_plan_fit_1 = require("./docker-plan-fit");
+const docker_plan_files_1 = require("./docker-plan-files");
+const docker_plan_dto_1 = require("./docker-plan.dto");
+exports.DATA_BLOCKER_CODES = [
+    'non-local-volume',
+    'external-writable-bind',
+    'bind-destination',
+];
+function blocksMode(mode, code) {
+    if (mode === 'without-data')
+        return !exports.DATA_BLOCKER_CODES.includes(code);
+    return mode !== 'data-only' || code !== 'runtime-bound';
+}
+function applyDockerPolicy(items, request, target, projectId, targetHome, targetUid, homeUid) {
+    const selections = new Map();
+    for (const selection of request.items ?? []) {
+        if (selections.has(selection.id) || !items.some((i) => i.id === selection.id))
+            throw new error_types_1.ValidationError('Docker selection has duplicate or unknown item ids');
+        selections.set(selection.id, selection.mode);
+    }
+    for (const item of items) {
+        for (const mount of item.mounts) {
+            if (item.temporary && mount.kind !== 'named-volume')
+                continue;
+            if ((0, docker_plan_dto_1.isVolumeMount)(mount.kind) && mount.driver !== 'local')
+                item.blockers.push({
+                    code: 'non-local-volume',
+                    message: `Volume ${mount.source} does not use the local driver.`,
+                });
+            if (mount.kind === 'external-bind')
+                item.blockers.push({
+                    code: 'external-writable-bind',
+                    message: `Data cannot move: ${mount.source} is outside the home folder.`,
+                });
+            if (!(0, docker_plan_dto_1.isVolumeMount)(mount.kind) &&
+                docker_plan_dto_1.COPYABLE_MOUNT_KINDS.includes(mount.kind) &&
+                (!targetHome || !(0, docker_plan_files_1.within)(targetHome, mount.source)))
+                item.blockers.push({
+                    code: 'bind-destination',
+                    message: `Data cannot move: ${mount.source} is outside the VM home folder.`,
+                });
+            if (mount.kind === 'readonly-external-bind') {
+                const found = target.paths.find((path) => path.path === mount.source);
+                if (!found || !('exists' in found) || !found.exists)
+                    item.blockers.push({
+                        code: 'readonly-path-missing',
+                        message: `Read-only path ${mount.source} is missing or could not be verified on the VM.`,
+                    });
+            }
+        }
+        if (!item.temporary &&
+            item.images.some((image) => normalizeArchitecture(image.architecture) !== normalizeArchitecture(target.architecture)))
+            item.blockers.push({
+                code: 'architecture-mismatch',
+                message: 'Image architecture differs from the VM.',
+            });
+        item.warnings = item.warnings.filter((warning) => warning.code !== 'home-uid' ||
+            (targetUid !== null && homeUid !== null && targetUid !== homeUid));
+        for (const warning of item.warnings)
+            if (warning.code === 'home-uid')
+                warning.message = `Container runs as home uid ${homeUid}; VM uid is ${targetUid}. File permissions may differ.`;
+        const runtimeBound = item.blockers.some((b) => b.code === 'runtime-bound');
+        const dataBlocked = item.blockers.some((b) => exports.DATA_BLOCKER_CODES.includes(b.code));
+        const containerBlocked = item.blockers.some((b) => ['runtime-bound', 'architecture-mismatch', 'readonly-path-missing'].includes(b.code));
+        if (item.temporary || item.kind === 'compose-project')
+            item.choices =
+                dataBlocked ||
+                    item.blockers.some((b) => b.code === 'architecture-mismatch' || b.code === 'compose-unreadable')
+                    ? []
+                    : ['data-only'];
+        else {
+            if (!containerBlocked && !dataBlocked)
+                item.choices.push('container-and-data');
+            if (!containerBlocked)
+                item.choices.push('without-data');
+            if (runtimeBound && !dataBlocked && item.blockers.every((b) => b.code === 'runtime-bound'))
+                item.choices.push('data-only');
+        }
+        item.defaultSelected =
+            item.linkedReasons.length > 0 && !item.temporary && item.blockers.length === 0;
+        item.selectedMode =
+            request.items === undefined
+                ? item.defaultSelected
+                    ? (item.choices[0] ?? null)
+                    : null
+                : (selections.get(item.id) ?? null);
+        if (item.selectedMode && !item.choices.includes(item.selectedMode))
+            throw new error_types_1.ValidationError(`Unavailable Docker selection mode for item ${item.id}`);
+        const existing = target.containers.find((c) => c.name.replace(/^\//, '') === item.name);
+        if (existing &&
+            item.kind === 'container' &&
+            !item.temporary &&
+            item.selectedMode !== 'data-only') {
+            const composeProject = existing.labels[host_docker_dto_1.COMPOSE_PROJECT_LABEL];
+            const imported = composeProject &&
+                target.volumes.some((v) => v.labels[host_docker_dto_1.DOCKER_PROJECT_LABEL] === projectId &&
+                    v.labels[host_docker_dto_1.COMPOSE_PROJECT_LABEL] === composeProject);
+            const holdsImported = composeProject &&
+                existing.mounts.some((m) => m.type === 'volume' &&
+                    target.volumes.some((v) => v.name === m.name &&
+                        v.labels[host_docker_dto_1.DOCKER_PROJECT_LABEL] === projectId &&
+                        v.labels[host_docker_dto_1.COMPOSE_PROJECT_LABEL] === composeProject));
+            if (existing.labels[host_docker_dto_1.DOCKER_PROJECT_LABEL] === projectId || holdsImported)
+                item.targetAction = 'replace';
+            else if (imported &&
+                !existing.mounts.some((m) => m.type === 'volume' &&
+                    target.volumes.some((v) => v.name === m.name && Boolean(v.labels[host_docker_dto_1.DOCKER_PROJECT_LABEL])))) {
+                item.targetAction = 'leave-as-is';
+                item.notes.push('already on the VM (managed by Compose), left as is');
+            }
+            else {
+                item.targetAction = 'conflict';
+                item.blockers.push({
+                    code: 'container-conflict',
+                    message: `The VM container ${item.name} is not owned by this project; skip it or resolve the conflict manually.`,
+                });
+            }
+        }
+        if (item.temporary || item.selectedMode === 'data-only')
+            item.targetAction = 'data-only';
+        for (const mount of (0, docker_plan_fit_1.copiedMounts)(item)) {
+            if (!(0, docker_plan_dto_1.isVolumeMount)(mount.kind))
+                continue;
+            const volume = target.volumes.find((v) => v.name === mount.source);
+            if (!volume)
+                continue;
+            if (volume.labels[host_docker_dto_1.DOCKER_PROJECT_LABEL] !== projectId)
+                item.blockers.push({
+                    code: 'volume-conflict',
+                    message: `VM volume ${mount.source} is not owned by this project; it cannot be replaced.`,
+                });
+            for (const holder of target.containers.filter((c) => c.mounts.some((m) => m.type === 'volume' && m.name === mount.source))) {
+                const managed = holder.labels[host_docker_dto_1.DOCKER_PROJECT_LABEL] === projectId ||
+                    (Boolean(holder.labels[host_docker_dto_1.COMPOSE_PROJECT_LABEL]) &&
+                        holder.labels[host_docker_dto_1.COMPOSE_PROJECT_LABEL] === volume.labels[host_docker_dto_1.COMPOSE_PROJECT_LABEL] &&
+                        volume.labels[host_docker_dto_1.DOCKER_PROJECT_LABEL] === projectId);
+                if (!managed)
+                    item.blockers.push({
+                        code: 'unrelated-holder',
+                        message: `VM container ${holder.name} holds volume ${mount.source} and blocks replacement.`,
+                    });
+            }
+        }
+    }
+}
+function dockerReconnect(items, inventory, projectRoot) {
+    if (!inventory)
+        return null;
+    const selected = items.filter((i) => i.selectedMode &&
+        i.selectedMode !== 'without-data' &&
+        i.dataAction !== 'keep-vm' &&
+        i.dataState !== 'no-record' &&
+        i.targetAction !== 'leave-as-is' &&
+        (!i.dataChoiceRequired || i.dataChoice));
+    const mounts = selected.flatMap((item) => (0, docker_plan_fit_1.copiedDataMounts)(item, projectRoot));
+    const bindPaths = new Set(mounts
+        .filter((m) => m.kind === 'project-bind')
+        .map((m) => (0, docker_plan_files_1.projectAnchoredPath)(projectRoot, m.source)));
+    const replacing = inventory.items
+        .filter((prior) => selected.some((i) => i.name === prior.name) ||
+        prior.volumes.some((v) => mounts.some((m) => m.source === v.name)) ||
+        prior.bindPaths.some((p) => bindPaths.has(p)))
+        .map((i) => i.name);
+    if (!replacing.length)
+        return null;
+    return {
+        importedAt: inventory.importedAt,
+        replacing,
+        lossNotice: 'Fresh home data replaces the VM copies DevChain created. VM changes not copied back are lost; Cancel cannot recover a VM copy already replaced.',
+    };
+}
+function normalizeArchitecture(value) {
+    return { x86_64: 'amd64', aarch64: 'arm64' }[value] ?? value;
+}
+function applyDockerDataPolicy(items, groups, request, target) {
+    const selections = new Map((request.items ?? []).map((i) => [i.id, i]));
+    for (const group of groups) {
+        const members = items.filter((i) => group.itemIds.includes(i.id));
+        const selected = members.filter((i) => i.selectedMode);
+        const choices = new Set(selected.flatMap((i) => selections.get(i.id)?.dataChoice ?? []));
+        if (choices.size > 1)
+            throw new error_types_1.ValidationError('Docker items sharing data must use the same data choice');
+        const choice = [...choices][0];
+        const missing = {
+            volumes: group.volumes.filter((v) => !target.volumes.some((existing) => existing.name === v)),
+            bindPaths: group.bindPaths.filter((p) => target.paths.some((entry) => entry.path === p && 'exists' in entry && !entry.exists)),
+        };
+        const partial = missing.volumes.length > 0 || missing.bindPaths.length > 0;
+        const requiresChoice = group.state === 'both-changed' ||
+            group.state === 'unknown' ||
+            (partial && group.state === 'home-newer');
+        const action = connectDataAction(group.state, choice, requiresChoice);
+        if (action === 'replace-home' &&
+            selected.some((i) => i.selectedMode === 'without-data') &&
+            selected.some((i) => i.selectedMode !== 'without-data'))
+            throw new error_types_1.ValidationError('Docker items sharing data cannot mix replacement and without-data choices');
+        for (const item of members) {
+            item.dataGroup = group.itemIds;
+            item.dataState = group.state;
+            item.dataChoice = choice;
+            item.dataAction = action;
+            item.dataChoiceRequired = requiresChoice;
+            item.missingData = missing;
+            if (requiresChoice && !choice)
+                item.blockers.push({
+                    code: 'data-choice-required',
+                    message: 'Choose Keep VM copy or Replace with home data for this shared data group.',
+                });
+            if (action === 'keep-vm' && item.targetAction === 'replace')
+                item.targetAction = 'leave-as-is';
+        }
+    }
+}
+function connectDataAction(state, choice, requiresChoice) {
+    if (state === 'no-record')
+        return 'replace-home';
+    if (choice !== undefined)
+        return choice;
+    if (state === 'in-sync' || state === 'vm-newer')
+        return 'keep-vm';
+    if (requiresChoice)
+        return undefined;
+    return 'replace-home';
+}
+//# sourceMappingURL=docker-plan-policy.js.map

package/dist/server/modules/remotes/docker/docker-plan-policy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"docker-plan-policy.js","sourceRoot":"","sources":["../../../../src/modules/remotes/docker/docker-plan-policy.ts"],"names":[],"mappings":";;;AA6BA,gCAGC;AAED,8CA0KC;AACD,0CAoCC;AAMD,sDAqDC;AA5SD,oEAAqE;AACrE,6DAIiC;AAEjC,uDAAmE;AACnE,2DAAkE;AAClE,uDAW2B;AAGd,QAAA,kBAAkB,GAAsB;IACnD,kBAAkB;IAClB,wBAAwB;IACxB,kBAAkB;CACnB,CAAC;AAEF,SAAgB,UAAU,CAAC,IAAyB,EAAE,IAAY;IAChE,IAAI,IAAI,KAAK,cAAc;QAAE,OAAO,CAAC,0BAAkB,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IACvE,OAAO,IAAI,KAAK,WAAW,IAAI,IAAI,KAAK,eAAe,CAAC;AAC1D,CAAC;AAED,SAAgB,iBAAiB,CAC/B,KAAuB,EACvB,OAA0B,EAC1B,MAAwB,EACxB,SAAiB,EACjB,UAAyB,EACzB,SAAwB,EACxB,OAAsB;IAEtB,MAAM,UAAU,GAAG,IAAI,GAAG,EAA+B,CAAC;IAC1D,KAAK,MAAM,SAAS,IAAI,OAAO,CAAC,KAAK,IAAI,EAAE,EAAE,CAAC;QAC5C,IAAI,UAAU,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,SAAS,CAAC,EAAE,CAAC;YAC3E,MAAM,IAAI,6BAAe,CAAC,oDAAoD,CAAC,CAAC;QAClF,UAAU,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,EAAE,SAAS,CAAC,IAAI,CAAC,CAAC;IAC/C,CAAC;IACD,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YAChC,IAAI,IAAI,CAAC,SAAS,IAAI,KAAK,CAAC,IAAI,KAAK,cAAc;gBAAE,SAAS;YAC9D,IAAI,IAAA,+BAAa,EAAC,KAAK,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,MAAM,KAAK,OAAO;gBACvD,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;oBACjB,IAAI,EAAE,kBAAkB;oBACxB,OAAO,EAAE,UAAU,KAAK,CAAC,MAAM,iCAAiC;iBACjE,CAAC,CAAC;YACL,IAAI,KAAK,CAAC,IAAI,KAAK,eAAe;gBAChC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;oBACjB,IAAI,EAAE,wBAAwB;oBAC9B,OAAO,EAAE,qBAAqB,KAAK,CAAC,MAAM,8BAA8B;iBACzE,CAAC,CAAC;YACL,IACE,CAAC,IAAA,+BAAa,EAAC,KAAK,CAAC,IAAI,CAAC;gBAC1B,sCAAoB,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC;gBACzC,CAAC,CAAC,UAAU,IAAI,CAAC,IAAA,0BAAM,EAAC,UAAU,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;gBAElD,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;oBACjB,IAAI,EAAE,kBAAkB;oBACxB,OAAO,EAAE,qBAAqB,KAAK,CAAC,MAAM,iCAAiC;iBAC5E,CAAC,CAAC;YACL,IAAI,KAAK,CAAC,IAAI,KAAK,wBAAwB,EAAE,CAAC;gBAC5C,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,KAAK,CAAC,MAAM,CAAC,CAAC;gBACtE,IAAI,CAAC,KAAK,IAAI,CAAC,CAAC,QAAQ,IAAI,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM;oBACjD,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;wBACjB,IAAI,EAAE,uBAAuB;wBAC7B,OAAO,EAAE,kBAAkB,KAAK,CAAC,MAAM,iDAAiD;qBACzF,CAAC,CAAC;YACP,CAAC;QACH,CAAC;QACD,IACE,CAAC,IAAI,CAAC,SAAS;YACf,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,CAAC,KAAK,EAAE,EAAE,CACR,qBAAqB,CAAC,KAAK,CAAC,YAAY,CAAC,KAAK,qBAAqB,CAAC,MAAM,CAAC,YAAY,CAAC,CAC3F;YAED,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;gBACjB,IAAI,EAAE,uBAAuB;gBAC7B,OAAO,EAAE,yCAAyC;aACnD,CAAC,CAAC;QACL,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,CAClC,CAAC,OAAO,EAAE,EAAE,CACV,OAAO,CAAC,IAAI,KAAK,UAAU;YAC3B,CAAC,SAAS,KAAK,IAAI,IAAI,OAAO,KAAK,IAAI,IAAI,SAAS,KAAK,OAAO,CAAC,CACpE,CAAC;QACF,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,QAAQ;YACjC,IAAI,OAAO,CAAC,IAAI,KAAK,UAAU;gBAC7B,OAAO,CAAC,OAAO,GAAG,8BAA8B,OAAO,eAAe,SAAS,gCAAgC,CAAC;QACpH,MAAM,YAAY,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,eAAe,CAAC,CAAC;QAC3E,MAAM,WAAW,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,0BAAkB,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;QACnF,MAAM,gBAAgB,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAChD,CAAC,eAAe,EAAE,uBAAuB,EAAE,uBAAuB,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CACrF,CAAC;QACF,IAAI,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,IAAI,KAAK,iBAAiB;YACnD,IAAI,CAAC,OAAO;gBACV,WAAW;oBACX,IAAI,CAAC,QAAQ,CAAC,IAAI,CAChB,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,uBAAuB,IAAI,CAAC,CAAC,IAAI,KAAK,oBAAoB,CAC7E;oBACC,CAAC,CAAC,EAAE;oBACJ,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC;aACjB,CAAC;YACJ,IAAI,CAAC,gBAAgB,IAAI,CAAC,WAAW;gBAAE,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;YAC/E,IAAI,CAAC,gBAAgB;gBAAE,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;YACzD,IAAI,YAAY,IAAI,CAAC,WAAW,IAAI,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,eAAe,CAAC;gBACxF,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QACnC,CAAC;QACD,IAAI,CAAC,eAAe;YAClB,IAAI,CAAC,aAAa,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,CAAC;QACjF,IAAI,CAAC,YAAY;YACf,OAAO,CAAC,KAAK,KAAK,SAAS;gBACzB,CAAC,CAAC,IAAI,CAAC,eAAe;oBACpB,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC;oBAC3B,CAAC,CAAC,IAAI;gBACR,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,IAAI,CAAC,CAAC;QACxC,IAAI,IAAI,CAAC,YAAY,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,YAAY,CAAC;YAChE,MAAM,IAAI,6BAAe,CAAC,8CAA8C,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC;QAErF,MAAM,QAAQ,GAAG,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,IAAI,CAAC,IAAI,CAAC,CAAC;QACxF,IACE,QAAQ;YACR,IAAI,CAAC,IAAI,KAAK,WAAW;YACzB,CAAC,IAAI,CAAC,SAAS;YACf,IAAI,CAAC,YAAY,KAAK,WAAW,EACjC,CAAC;YACD,MAAM,cAAc,GAAG,QAAQ,CAAC,MAAM,CAAC,uCAAqB,CAAC,CAAC;YAC9D,MAAM,QAAQ,GACZ,cAAc;gBACd,MAAM,CAAC,OAAO,CAAC,IAAI,CACjB,CAAC,CAAC,EAAE,EAAE,CACJ,CAAC,CAAC,MAAM,CAAC,sCAAoB,CAAC,KAAK,SAAS;oBAC5C,CAAC,CAAC,MAAM,CAAC,uCAAqB,CAAC,KAAK,cAAc,CACrD,CAAC;YACJ,MAAM,aAAa,GACjB,cAAc;gBACd,QAAQ,CAAC,MAAM,CAAC,IAAI,CAClB,CAAC,CAAC,EAAE,EAAE,CACJ,CAAC,CAAC,IAAI,KAAK,QAAQ;oBACnB,MAAM,CAAC,OAAO,CAAC,IAAI,CACjB,CAAC,CAAC,EAAE,EAAE,CACJ,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,IAAI;wBACjB,CAAC,CAAC,MAAM,CAAC,sCAAoB,CAAC,KAAK,SAAS;wBAC5C,CAAC,CAAC,MAAM,CAAC,uCAAqB,CAAC,KAAK,cAAc,CACrD,CACJ,CAAC;YACJ,IAAI,QAAQ,CAAC,MAAM,CAAC,sCAAoB,CAAC,KAAK,SAAS,IAAI,aAAa;gBACtE,IAAI,CAAC,YAAY,GAAG,SAAS,CAAC;iBAC3B,IACH,QAAQ;gBACR,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CACnB,CAAC,CAAC,EAAE,EAAE,CACJ,CAAC,CAAC,IAAI,KAAK,QAAQ;oBACnB,MAAM,CAAC,OAAO,CAAC,IAAI,CACjB,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,IAAI,IAAI,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,sCAAoB,CAAC,CAAC,CACpE,CACJ,EACD,CAAC;gBACD,IAAI,CAAC,YAAY,GAAG,aAAa,CAAC;gBAClC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,oDAAoD,CAAC,CAAC;YACxE,CAAC;iBAAM,CAAC;gBACN,IAAI,CAAC,YAAY,GAAG,UAAU,CAAC;gBAC/B,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;oBACjB,IAAI,EAAE,oBAAoB;oBAC1B,OAAO,EAAE,oBAAoB,IAAI,CAAC,IAAI,0EAA0E;iBACjH,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QACD,IAAI,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,YAAY,KAAK,WAAW;YAAE,IAAI,CAAC,YAAY,GAAG,WAAW,CAAC;QACzF,KAAK,MAAM,KAAK,IAAI,IAAA,8BAAY,EAAC,IAAI,CAAC,EAAE,CAAC;YACvC,IAAI,CAAC,IAAA,+BAAa,EAAC,KAAK,CAAC,IAAI,CAAC;gBAAE,SAAS;YACzC,MAAM,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,KAAK,CAAC,MAAM,CAAC,CAAC;YACnE,IAAI,CAAC,MAAM;gBAAE,SAAS;YACtB,IAAI,MAAM,CAAC,MAAM,CAAC,sCAAoB,CAAC,KAAK,SAAS;gBACnD,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;oBACjB,IAAI,EAAE,iBAAiB;oBACvB,OAAO,EAAE,aAAa,KAAK,CAAC,MAAM,uDAAuD;iBAC1F,CAAC,CAAC;YACL,KAAK,MAAM,MAAM,IAAI,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAClD,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,CAAC,IAAI,KAAK,KAAK,CAAC,MAAM,CAAC,CACrE,EAAE,CAAC;gBACF,MAAM,OAAO,GACX,MAAM,CAAC,MAAM,CAAC,sCAAoB,CAAC,KAAK,SAAS;oBACjD,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,uCAAqB,CAAC,CAAC;wBAC5C,MAAM,CAAC,MAAM,CAAC,uCAAqB,CAAC,KAAK,MAAM,CAAC,MAAM,CAAC,uCAAqB,CAAC;wBAC7E,MAAM,CAAC,MAAM,CAAC,sCAAoB,CAAC,KAAK,SAAS,CAAC,CAAC;gBACvD,IAAI,CAAC,OAAO;oBACV,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;wBACjB,IAAI,EAAE,kBAAkB;wBACxB,OAAO,EAAE,gBAAgB,MAAM,CAAC,IAAI,iBAAiB,KAAK,CAAC,MAAM,0BAA0B;qBAC5F,CAAC,CAAC;YACP,CAAC;QACH,CAAC;IACH,CAAC;AACH,CAAC;AACD,SAAgB,eAAe,CAC7B,KAAuB,EACvB,SAAuC,EACvC,WAAmB;IAEnB,IAAI,CAAC,SAAS;QAAE,OAAO,IAAI,CAAC;IAC5B,MAAM,QAAQ,GAAG,KAAK,CAAC,MAAM,CAC3B,CAAC,CAAC,EAAE,EAAE,CACJ,CAAC,CAAC,YAAY;QACd,CAAC,CAAC,YAAY,KAAK,cAAc;QACjC,CAAC,CAAC,UAAU,KAAK,SAAS;QAC1B,CAAC,CAAC,SAAS,KAAK,WAAW;QAC3B,CAAC,CAAC,YAAY,KAAK,aAAa;QAChC,CAAC,CAAC,CAAC,CAAC,kBAAkB,IAAI,CAAC,CAAC,UAAU,CAAC,CAC1C,CAAC;IACF,MAAM,MAAM,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAA,kCAAgB,EAAC,IAAI,EAAE,WAAW,CAAC,CAAC,CAAC;IAC/E,MAAM,SAAS,GAAG,IAAI,GAAG,CACvB,MAAM;SACH,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,cAAc,CAAC;SACxC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAA,uCAAmB,EAAC,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAC1D,CAAC;IACF,MAAM,SAAS,GAAG,SAAS,CAAC,KAAK;SAC9B,MAAM,CACL,CAAC,KAAK,EAAE,EAAE,CACR,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,KAAK,CAAC,IAAI,CAAC;QAC3C,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC;QAClE,KAAK,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAChD;SACA,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IACtB,IAAI,CAAC,SAAS,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IACnC,OAAO;QACL,UAAU,EAAE,SAAS,CAAC,UAAU;QAChC,SAAS;QACT,UAAU,EACR,iJAAiJ;KACpJ,CAAC;AACJ,CAAC;AACD,SAAS,qBAAqB,CAAC,KAAa;IAC1C,OAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAA6B,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC;AAC3F,CAAC;AAGD,SAAgB,qBAAqB,CACnC,KAAuB,EACvB,MAA8B,EAC9B,OAA0B,EAC1B,MAAwB;IAExB,MAAM,UAAU,GAAG,IAAI,GAAG,CACxB,CAAC,OAAO,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAC5C,CAAC;IACF,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,MAAM,OAAO,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QAClE,MAAM,QAAQ,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC;QACvD,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,UAAU,IAAI,EAAE,CAAC,CAAC,CAAC;QACzF,IAAI,OAAO,CAAC,IAAI,GAAG,CAAC;YAClB,MAAM,IAAI,6BAAe,CAAC,yDAAyD,CAAC,CAAC;QACvF,MAAM,MAAM,GAAG,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;QAC/B,MAAM,OAAO,GAAG;YACd,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC;YAC7F,SAAS,EAAE,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CACtC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,IAAI,QAAQ,IAAI,KAAK,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CACrF;SACF,CAAC;QACF,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,OAAO,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC;QAC3E,MAAM,cAAc,GAClB,KAAK,CAAC,KAAK,KAAK,cAAc;YAC9B,KAAK,CAAC,KAAK,KAAK,SAAS;YACzB,CAAC,OAAO,IAAI,KAAK,CAAC,KAAK,KAAK,YAAY,CAAC,CAAC;QAC5C,MAAM,MAAM,GAAG,iBAAiB,CAAC,KAAK,CAAC,KAAK,EAAE,MAAM,EAAE,cAAc,CAAC,CAAC;QAEtE,IACE,MAAM,KAAK,cAAc;YACzB,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,YAAY,KAAK,cAAc,CAAC;YACvD,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,YAAY,KAAK,cAAc,CAAC;YAEvD,MAAM,IAAI,6BAAe,CACvB,2EAA2E,CAC5E,CAAC;QACJ,KAAK,MAAM,IAAI,IAAI,OAAO,EAAE,CAAC;YAC3B,IAAI,CAAC,SAAS,GAAG,KAAK,CAAC,OAAO,CAAC;YAC/B,IAAI,CAAC,SAAS,GAAG,KAAK,CAAC,KAAK,CAAC;YAC7B,IAAI,CAAC,UAAU,GAAG,MAAM,CAAC;YACzB,IAAI,CAAC,UAAU,GAAG,MAAM,CAAC;YACzB,IAAI,CAAC,kBAAkB,GAAG,cAAc,CAAC;YACzC,IAAI,CAAC,WAAW,GAAG,OAAO,CAAC;YAC3B,IAAI,cAAc,IAAI,CAAC,MAAM;gBAC3B,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;oBACjB,IAAI,EAAE,sBAAsB;oBAC5B,OAAO,EAAE,2EAA2E;iBACrF,CAAC,CAAC;YACL,IAAI,MAAM,KAAK,SAAS,IAAI,IAAI,CAAC,YAAY,KAAK,SAAS;gBACzD,IAAI,CAAC,YAAY,GAAG,aAAa,CAAC;QACtC,CAAC;IACH,CAAC;AACH,CAAC;AAGD,SAAS,iBAAiB,CACxB,KAAsB,EACtB,MAAoC,EACpC,cAAuB;IAEvB,IAAI,KAAK,KAAK,WAAW;QAAE,OAAO,cAAc,CAAC;IACjD,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,MAAM,CAAC;IACxC,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,UAAU;QAAE,OAAO,SAAS,CAAC;IAClE,IAAI,cAAc;QAAE,OAAO,SAAS,CAAC;IACrC,OAAO,cAAc,CAAC;AACxB,CAAC"}

package/dist/server/modules/remotes/docker/docker-plan-source.service.d.ts

@@ -0,0 +1,37 @@
+import { DockerEngineClient, DockerEngineError } from '../../core/controllers/docker-engine.client';
+import type { DockerDataHolder } from './docker-data-groups';
+import { type DockerPlanItem, type DockerPlanSize } from './docker-plan.dto';
+interface ComposeConfig {
+    name: string;
+    services?: Record<string, {
+        image?: string;
+        build?: unknown;
+    }>;
+    volumes?: Record<string, {
+        name?: string;
+        external?: boolean;
+    }>;
+}
+export interface DockerSourceScan {
+    holders: DockerDataHolder[];
+    items: DockerPlanItem[];
+    homePath: string;
+    uid: number | null;
+}
+export declare class DockerPlanSourceService {
+    connect(signal?: AbortSignal): Promise<DockerEngineClient>;
+    socket(): Promise<string>;
+    homePath(): string;
+    uid(): number | null;
+    measure(path: string, signal?: AbortSignal): Promise<DockerPlanSize>;
+    compose(root: string): Promise<ComposeConfig | null>;
+    scan(client: DockerEngineClient, root: string, signal?: AbortSignal): Promise<DockerSourceScan>;
+    private bindKind;
+    exportRate(client: DockerEngineClient, imageId: string, signal?: AbortSignal): Promise<number | null>;
+}
+export type DockerAvailabilityReason = 'remote-docker-host' | 'unsupported-endpoint' | 'no-socket' | 'no-socket-access' | 'rootless' | 'docker-desktop' | 'unavailable';
+export declare class DockerAvailabilityError extends DockerEngineError {
+    readonly reason: DockerAvailabilityReason;
+    constructor(reason: DockerAvailabilityReason, message: string);
+}
+export {};

package/dist/server/modules/remotes/docker/docker-plan-source.service.js

@@ -0,0 +1,352 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DockerAvailabilityError = exports.DockerPlanSourceService = void 0;
+const common_1 = require("@nestjs/common");
+const node_child_process_1 = require("node:child_process");
+const promises_1 = require("node:fs/promises");
+const node_os_1 = require("node:os");
+const node_path_1 = require("node:path");
+const docker_engine_client_1 = require("../../core/controllers/docker-engine.client");
+const docker_settings_1 = require("../../core/controllers/docker-settings");
+const host_docker_dto_1 = require("../host/host-docker.dto");
+const docker_plan_files_1 = require("./docker-plan-files");
+const docker_plan_dto_1 = require("./docker-plan.dto");
+const unknownSize = () => ({ bytes: 0, unknown: true });
+const size = (value) => typeof value === 'number' && value >= 0 && Number.isFinite(value)
+    ? { bytes: value, unknown: false }
+    : unknownSize();
+let DockerPlanSourceService = class DockerPlanSourceService {
+    async connect(signal) {
+        let socket;
+        try {
+            socket = await this.socket();
+        }
+        catch (error) {
+            throw availability(error, error instanceof docker_engine_client_1.DockerEngineError && error.message.includes('tcp://')
+                ? 'remote-docker-host'
+                : 'unsupported-endpoint');
+        }
+        const client = new docker_engine_client_1.DockerEngineClient(socket);
+        let info;
+        try {
+            info = await client.json('GET', '/info', undefined, { signal });
+        }
+        catch (error) {
+            if (signal?.aborted)
+                throw error;
+            throw await socketAvailability(socket, error);
+        }
+        try {
+            (0, docker_engine_client_1.assertSupportedDocker)(info);
+        }
+        catch (error) {
+            throw availability(error, info.OperatingSystem?.includes('Docker Desktop') ? 'docker-desktop' : 'rootless');
+        }
+        return client;
+    }
+    socket() {
+        return (0, docker_engine_client_1.resolveDockerSocket)();
+    }
+    homePath() {
+        return (0, node_os_1.homedir)();
+    }
+    uid() {
+        return process.getuid?.() ?? null;
+    }
+    measure(path, signal) {
+        return (0, docker_plan_files_1.measureDockerBind)(path, undefined, signal);
+    }
+    async compose(root) {
+        let file;
+        for (const name of [
+            'compose.yaml',
+            'compose.yml',
+            'docker-compose.yml',
+            'docker-compose.yaml',
+        ]) {
+            if (await (0, promises_1.access)((0, node_path_1.join)(root, name)).then(() => true, () => false)) {
+                file = name;
+                break;
+            }
+        }
+        if (!file)
+            return null;
+        return new Promise((resolveConfig, reject) => {
+            (0, node_child_process_1.execFile)('docker', ['compose', '--project-directory', root, 'config', '--format', 'json'], { cwd: root, timeout: 30_000, maxBuffer: 16 * 1024 * 1024 }, (error, stdout) => {
+                if (error)
+                    return reject(new docker_engine_client_1.DockerEngineError('unavailable', 'Cannot read project Docker Compose configuration'));
+                try {
+                    const config = JSON.parse(stdout);
+                    if (!config || typeof config.name !== 'string')
+                        throw new Error();
+                    resolveConfig(config);
+                }
+                catch {
+                    reject(new docker_engine_client_1.DockerEngineError('invalid-response', 'Invalid Docker Compose configuration'));
+                }
+            });
+        });
+    }
+    async scan(client, root, signal) {
+        const [listed, usage, volumes, composeAttempt] = await Promise.all([
+            client.json('GET', '/containers/json?all=true', undefined, { signal }),
+            client.diskUsage(signal),
+            client.json('GET', '/volumes', undefined, { signal }),
+            this.compose(root).catch((error) => (error instanceof Error ? error : new Error(String(error)))),
+        ]);
+        const items = [];
+        const imageCache = new Map();
+        const bindCache = new Map();
+        const image = async (ref) => {
+            let result = imageCache.get(ref);
+            if (!result) {
+                const info = await client.json('GET', `/images/${encodeURIComponent(ref)}/json`, undefined, { signal });
+                if (!info?.Id || !info.Architecture)
+                    throw new docker_engine_client_1.DockerEngineError('invalid-response', 'Invalid Docker image metadata');
+                result = {
+                    id: info.Id,
+                    architecture: info.Architecture,
+                    size: size(usage.Images?.find((entry) => entry.Id === info.Id)?.Size),
+                };
+                imageCache.set(ref, result);
+            }
+            return result;
+        };
+        const volumeMount = (name, destination, named, readOnly) => ({
+            kind: named ? 'named-volume' : 'anonymous-volume',
+            source: name,
+            destination,
+            readOnly,
+            driver: volumes.Volumes?.find((v) => v.Name === name)?.Driver ?? 'unknown',
+            size: size(usage.Volumes?.find((v) => v.Name === name)?.UsageData?.Size),
+        });
+        const inspects = await Promise.all(listed.map((entry) => client.json('GET', `/containers/${encodeURIComponent(entry.Id)}/json`, undefined, { signal })));
+        for (const inspect of inspects) {
+            const item = baseItem(inspect.Id, inspect.Name.replace(/^\//, ''), 'container');
+            const labels = (inspect.Config.Labels ?? {});
+            item.composeProject = labels[host_docker_dto_1.COMPOSE_PROJECT_LABEL] ?? null;
+            item.temporary = inspect.HostConfig.AutoRemove === true;
+            if (item.temporary)
+                item.notes.push(docker_plan_dto_1.DOCKER_TEMPORARY_NOTE);
+            item.notes.push(docker_plan_dto_1.DOCKER_WRITABLE_LAYER_NOTE);
+            for (const key of [
+                `${host_docker_dto_1.COMPOSE_PROJECT_LABEL}.working_dir`,
+                `${host_docker_dto_1.COMPOSE_PROJECT_LABEL}.config_files`,
+            ]) {
+                if (labels[key]?.split(',').some((path) => path.startsWith('/') && (0, docker_plan_files_1.within)(root, path)))
+                    item.linkedReasons.push(key);
+            }
+            try {
+                (0, docker_settings_1.projectDockerCreate)(inspect, client.socketPath);
+            }
+            catch (error) {
+                if (!(error instanceof docker_engine_client_1.DockerEngineError))
+                    throw error;
+                if (error.code === 'cannot-move') {
+                    if (!item.temporary || !error.message.includes('AutoRemove'))
+                        item.blockers.push({ code: 'runtime-bound', message: error.message });
+                }
+                else if (error.code === 'unsupported') {
+                    item.blockers.push({ code: 'runtime-bound', message: `${item.name}: ${error.message}` });
+                }
+                else {
+                    throw error;
+                }
+            }
+            item.images = [await image(inspect.Image)];
+            item.writableLayer = size(usage.Containers?.find((c) => c.Id === inspect.Id)?.SizeRw);
+            const user = String(inspect.Config.User ?? '').split(':')[0];
+            if (this.uid() !== null && user === String(this.uid()))
+                item.warnings.push({ code: 'home-uid', message: 'Container runs as the home user uid.' });
+            for (const mount of inspect.Mounts ?? []) {
+                if (mount.Type === 'volume') {
+                    const named = explicitlyNamed(inspect, mount) ||
+                        Boolean(volumes.Volumes?.find((v) => v.Name === mount.Name)?.Labels?.['com.docker.compose.volume']);
+                    item.mounts.push(volumeMount(mount.Name ?? mount.Source, mount.Destination, named, !mount.RW));
+                }
+                else if (mount.Type === 'bind') {
+                    const source = (0, node_path_1.resolve)(mount.Source);
+                    const kind = this.bindKind(root, source, !mount.RW);
+                    if (kind === 'project-bind')
+                        item.linkedReasons.push(`bind:${source}`);
+                    const copyable = docker_plan_dto_1.COPYABLE_MOUNT_KINDS.includes(kind);
+                    if (copyable && !bindCache.has(source))
+                        bindCache.set(source, await this.measure(source, signal));
+                    item.mounts.push({
+                        kind,
+                        source,
+                        destination: mount.Destination,
+                        readOnly: !mount.RW,
+                        size: copyable ? (bindCache.get(source) ?? unknownSize()) : unknownSize(),
+                    });
+                }
+            }
+            items.push(item);
+        }
+        if (composeAttempt instanceof Error) {
+            const name = (0, node_path_1.basename)(root);
+            const item = baseItem(`compose:${name}`, name, 'compose-project');
+            item.composeProject = name;
+            item.linkedReasons.push('compose-file-at-project-root');
+            item.blockers.push({
+                code: 'compose-unreadable',
+                message: `${name}: ${composeAttempt.message}`,
+            });
+            items.push(item);
+        }
+        else if (composeAttempt &&
+            !items.some((item) => item.composeProject === composeAttempt.name)) {
+            const compose = composeAttempt;
+            const item = baseItem(`compose:${compose.name}`, compose.name, 'compose-project');
+            item.composeProject = compose.name;
+            item.linkedReasons.push('compose-file-at-project-root');
+            item.notes.push('compose up recreates the containers on the VM. Only existing volumes and present images are copied.');
+            for (const [service, config] of Object.entries(compose.services ?? {})) {
+                try {
+                    item.images.push(await image(config.image ?? `${compose.name}-${service}`));
+                }
+                catch (error) {
+                    if (!(0, docker_engine_client_1.isDockerNotFound)(error))
+                        throw error;
+                    item.notes.push(config.build
+                        ? `${service}: the agent builds them on the VM`
+                        : `${service}: image is not present locally; compose up must pull it on the VM`);
+                }
+            }
+            for (const [key, config] of Object.entries(compose.volumes ?? {})) {
+                const name = config.name ?? (config.external ? key : `${compose.name}_${key}`);
+                if (volumes.Volumes?.some((v) => v.Name === name))
+                    item.mounts.push(volumeMount(name, '', true, false));
+            }
+            items.push(item);
+        }
+        for (const item of items) {
+            const group = [item];
+            for (const member of group)
+                for (const candidate of items)
+                    if (!group.includes(candidate) && sharesData(member, candidate))
+                        group.push(candidate);
+            item.writerGroup = group.map((member) => member.id).sort();
+        }
+        return {
+            items,
+            homePath: this.homePath(),
+            uid: this.uid(),
+            holders: inspects.map((c) => ({
+                volumes: (c.Mounts ?? []).filter((m) => m.Type === 'volume').map((m) => m.Name ?? m.Source),
+                bindPaths: (c.Mounts ?? []).filter((m) => m.Type === 'bind').map((m) => m.Source),
+                metadata: { created: c.Created, startedAt: c.State?.StartedAt, running: c.State?.Running },
+            })),
+        };
+    }
+    bindKind(root, source, readOnly) {
+        if ((0, docker_plan_files_1.within)(root, source))
+            return 'project-bind';
+        if ((0, docker_plan_files_1.within)(this.homePath(), source))
+            return 'home-bind';
+        return readOnly ? 'readonly-external-bind' : 'external-bind';
+    }
+    async exportRate(client, imageId, signal) {
+        const started = performance.now();
+        const stream = await client.stream('GET', `/images/${encodeURIComponent(imageId)}/get`, {
+            signal,
+        });
+        let bytes = 0;
+        try {
+            for await (const chunk of stream) {
+                bytes += chunk.length;
+                if (bytes >= 16 * 1024 * 1024)
+                    break;
+            }
+        }
+        finally {
+            stream.destroy();
+        }
+        return bytes > 0 ? bytes / Math.max(0.001, (performance.now() - started) / 1000) : null;
+    }
+};
+exports.DockerPlanSourceService = DockerPlanSourceService;
+exports.DockerPlanSourceService = DockerPlanSourceService = __decorate([
+    (0, common_1.Injectable)()
+], DockerPlanSourceService);
+class DockerAvailabilityError extends docker_engine_client_1.DockerEngineError {
+    reason;
+    constructor(reason, message) {
+        super('unavailable', message);
+        this.reason = reason;
+    }
+}
+exports.DockerAvailabilityError = DockerAvailabilityError;
+function availability(error, reason) {
+    return new DockerAvailabilityError(reason, error instanceof docker_engine_client_1.DockerEngineError ? error.message : 'Home Docker is unavailable.');
+}
+async function socketAvailability(socket, error) {
+    if (!(error instanceof docker_engine_client_1.DockerEngineError) || error.code !== 'unavailable')
+        return availability(error, 'unavailable');
+    try {
+        await (0, promises_1.access)(socket, promises_1.constants.R_OK | promises_1.constants.W_OK);
+        return availability(error, 'unavailable');
+    }
+    catch (accessError) {
+        const code = accessError.code;
+        if (code === 'EACCES' || code === 'EPERM')
+            return new DockerAvailabilityError('no-socket-access', `This user cannot access the Docker socket ${socket}.`);
+        if (code === 'ENOENT')
+            return new DockerAvailabilityError('no-socket', `No Docker socket at ${socket}.`);
+        return availability(error, 'unavailable');
+    }
+}
+function baseItem(id, name, kind) {
+    return {
+        id,
+        name,
+        kind,
+        composeProject: null,
+        linkedReasons: [],
+        defaultSelected: false,
+        selectedMode: null,
+        choices: [],
+        temporary: false,
+        images: [],
+        mounts: [],
+        writerGroup: [],
+        alsoStops: [],
+        blockers: [],
+        warnings: [],
+        notes: [],
+        writableLayer: { bytes: 0, unknown: false },
+        targetAction: kind === 'compose-project' ? 'data-only' : 'create',
+    };
+}
+function explicitlyNamed(inspect, mount) {
+    const binds = inspect.HostConfig.Binds;
+    if (Array.isArray(binds) &&
+        binds.some((bind) => typeof bind === 'string' && bind.split(':')[0] === mount.Name && bind.includes(':')))
+        return true;
+    const mounts = inspect.HostConfig.Mounts;
+    return (Array.isArray(mounts) &&
+        mounts.some((value) => value &&
+            typeof value === 'object' &&
+            value.Type === 'volume' &&
+            value.Source === mount.Name));
+}
+function sharesData(a, b) {
+    const copied = (mount) => docker_plan_dto_1.COPYABLE_MOUNT_KINDS.includes(mount.kind);
+    return a.mounts.some((x) => copied(x) &&
+        b.mounts.some((y) => {
+            if (!copied(y) || (x.readOnly && y.readOnly))
+                return false;
+            const xv = (0, docker_plan_dto_1.isVolumeMount)(x.kind);
+            const yv = (0, docker_plan_dto_1.isVolumeMount)(y.kind);
+            return xv && yv
+                ? x.source === y.source
+                : !xv && !yv && ((0, docker_plan_files_1.within)(x.source, y.source) || (0, docker_plan_files_1.within)(y.source, x.source));
+        }));
+}
+//# sourceMappingURL=docker-plan-source.service.js.map