ghcr-cleanup-manager 1.1.0

package/dist/db/planner/_planner-plan-artifacts-blocked-roots-sql.js

@@ -0,0 +1,110 @@
+export const _LIST_BLOCKED_ROOTS_SQL = `
+  WITH selected_root_graphs AS (
+    SELECT
+      dtr.root_version_id,
+      dtr.root_digest,
+      dtr.root_manifest_kind,
+      manifest_graphs.graph_id
+    FROM temp_direct_target_roots dtr
+    CROSS JOIN manifest_graphs
+    WHERE manifest_graphs.scan_id = ?
+      AND manifest_graphs.digest = dtr.root_digest
+  ),
+  selected_graphs AS (
+    SELECT DISTINCT
+      selected_root_graphs.graph_id
+    FROM selected_root_graphs
+  ),
+  retained_tagged_manifests AS (
+    SELECT DISTINCT
+      manifest_graphs.graph_id,
+      m.version_id AS tagged_version_id,
+      m.digest AS tagged_digest
+    FROM selected_graphs
+    CROSS JOIN manifest_graphs
+    CROSS JOIN manifests m
+    JOIN tags t
+      ON t.scan_id = m.scan_id
+     AND t.version_id = m.version_id
+     AND t.is_digest_tag = 0
+    WHERE manifest_graphs.scan_id = m.scan_id
+      AND selected_graphs.graph_id = manifest_graphs.graph_id
+      AND manifest_graphs.digest = m.digest
+      AND m.scan_id = ?
+      AND NOT EXISTS (
+        SELECT 1
+        FROM temp_direct_target_roots dtr
+        WHERE dtr.root_digest = m.digest
+      )
+  ),
+  protected_manifests AS (
+    SELECT
+      retained.graph_id,
+      retained.tagged_version_id AS blocking_version_id,
+      retained.tagged_digest AS blocking_digest,
+      retained.tagged_digest AS digest,
+      0 AS min_distance
+    FROM retained_tagged_manifests retained
+
+    UNION
+
+    SELECT
+      retained.graph_id,
+      retained.tagged_version_id AS blocking_version_id,
+      retained.tagged_digest AS blocking_digest,
+      retained_overlap.descendant_digest AS digest,
+      retained_overlap.min_distance
+    FROM retained_tagged_manifests retained
+    JOIN manifest_reachability retained_overlap
+      ON retained_overlap.scan_id = ?
+     AND retained_overlap.ancestor_digest = retained.tagged_digest
+     AND retained_overlap.min_distance > 0
+  ),
+  ranked_blocks AS (
+    SELECT
+      root_graph.root_version_id AS blocked_version_id,
+      root_graph.root_digest AS blocked_digest,
+      retained.tagged_version_id AS blocking_version_id,
+      retained.tagged_digest AS blocking_digest,
+      COALESCE(retained_overlap.descendant_digest, helper_overlap.digest) AS overlap_digest,
+      root_graph.root_manifest_kind AS overlap_manifest_kind,
+      'overlap-with-retained-root' AS block_reason,
+      ROW_NUMBER() OVER (
+        PARTITION BY root_graph.root_digest, retained.tagged_digest
+        ORDER BY
+          COALESCE(retained_overlap.min_distance, helper_overlap.min_distance),
+          COALESCE(retained_overlap.descendant_digest, helper_overlap.digest),
+          root_graph.root_digest
+      ) AS rn
+    FROM selected_root_graphs root_graph
+    JOIN retained_tagged_manifests retained
+      ON retained.graph_id = root_graph.graph_id
+     AND retained.tagged_digest <> root_graph.root_digest
+    LEFT JOIN manifest_reachability retained_overlap
+      ON retained_overlap.scan_id = ?
+     AND retained_overlap.ancestor_digest = retained.tagged_digest
+     AND retained_overlap.descendant_digest = root_graph.root_digest
+     AND retained_overlap.min_distance > 0
+    LEFT JOIN manifest_edges helper_edge INDEXED BY idx_manifest_edges_scan_parent
+      ON helper_edge.scan_id = ?
+     AND helper_edge.parent_digest = root_graph.root_digest
+     AND helper_edge.edge_kind = 'digest-tag-referrer'
+    LEFT JOIN protected_manifests helper_overlap
+      ON helper_overlap.graph_id = root_graph.graph_id
+     AND helper_overlap.blocking_digest = retained.tagged_digest
+     AND helper_overlap.digest = helper_edge.child_digest
+    WHERE retained_overlap.descendant_digest IS NOT NULL
+       OR helper_overlap.digest IS NOT NULL
+  )
+  SELECT
+    blocked_version_id,
+    blocked_digest,
+    blocking_version_id,
+    blocking_digest,
+    overlap_digest,
+    overlap_manifest_kind,
+    block_reason
+  FROM ranked_blocks
+  WHERE rn = 1
+  ORDER BY blocked_digest, blocking_digest, overlap_digest
+`;

package/dist/db/planner/_planner-plan-artifacts-closure-sql.d.ts

@@ -0,0 +1 @@
+export declare const _LIST_CLOSURE_MANIFESTS_SQL = "\n  WITH selected_graphs AS (\n    SELECT DISTINCT\n      manifest_graphs.graph_id\n    FROM temp_direct_target_roots dtr\n    CROSS JOIN manifest_graphs\n    WHERE manifest_graphs.scan_id = ?\n      AND manifest_graphs.digest = dtr.root_digest\n  ),\n  retained_tagged_manifests AS (\n    SELECT DISTINCT\n      m.digest\n    FROM selected_graphs\n    CROSS JOIN manifest_graphs\n    CROSS JOIN manifests m\n    JOIN tags t\n      ON t.scan_id = m.scan_id\n     AND t.version_id = m.version_id\n     AND t.is_digest_tag = 0\n    WHERE manifest_graphs.scan_id = m.scan_id\n      AND selected_graphs.graph_id = manifest_graphs.graph_id\n      AND manifest_graphs.digest = m.digest\n      AND m.scan_id = ?\n      AND NOT EXISTS (\n        SELECT 1\n        FROM temp_direct_target_roots dtr\n        WHERE dtr.root_digest = m.digest\n      )\n  ),\n  retained_manifests AS (\n    SELECT\n      retained.digest\n    FROM retained_tagged_manifests retained\n\n    UNION\n\n    SELECT\n      mr.descendant_digest AS digest\n    FROM retained_tagged_manifests retained\n    CROSS JOIN manifest_reachability mr\n    WHERE mr.scan_id = ?\n      AND mr.ancestor_digest = retained.digest\n      AND mr.min_distance > 0\n  ),\n  direct_target_closure AS (\n    SELECT\n      dtr.root_digest AS source_digest,\n      dtr.root_digest AS member_digest,\n      0 AS hops_from_root\n    FROM temp_direct_target_roots dtr\n\n    UNION ALL\n\n    SELECT\n      dtr.root_digest AS source_digest,\n      mr.descendant_digest AS member_digest,\n      mr.min_distance AS hops_from_root\n    FROM temp_direct_target_roots dtr\n    CROSS JOIN manifest_reachability mr\n    WHERE mr.scan_id = ?\n      AND mr.ancestor_digest = dtr.root_digest\n      AND mr.min_distance > 0\n  ),\n  closure_seed AS (\n    SELECT\n      dtc.source_digest,\n      dtc.member_digest,\n      dtc.hops_from_root\n    FROM direct_target_closure dtc\n    WHERE dtc.hops_from_root = 0\n       OR NOT EXISTS (\n         SELECT 1\n         FROM retained_manifests retained\n         WHERE retained.digest = dtc.member_digest\n       )\n  ),\n  undirected_edges AS (\n    SELECT\n      me.parent_digest AS source_digest,\n      me.child_digest AS target_digest\n    FROM selected_graphs\n    CROSS JOIN manifest_graphs parent_graph\n    CROSS JOIN manifest_edges me INDEXED BY idx_manifest_edges_scan_parent\n    WHERE parent_graph.scan_id = me.scan_id\n      AND selected_graphs.graph_id = parent_graph.graph_id\n      AND parent_graph.digest = me.parent_digest\n      AND me.scan_id = ?\n      AND NOT EXISTS (\n        SELECT 1\n        FROM retained_manifests retained\n        WHERE retained.digest = me.parent_digest\n           OR retained.digest = me.child_digest\n      )\n\n    UNION\n\n    SELECT\n      me.child_digest AS source_digest,\n      me.parent_digest AS target_digest\n    FROM selected_graphs\n    CROSS JOIN manifest_graphs child_graph\n    CROSS JOIN manifest_edges me INDEXED BY idx_manifest_edges_scan_child\n    WHERE child_graph.scan_id = me.scan_id\n      AND selected_graphs.graph_id = child_graph.graph_id\n      AND child_graph.digest = me.child_digest\n      AND me.scan_id = ?\n      AND NOT EXISTS (\n        SELECT 1\n        FROM retained_manifests retained\n        WHERE retained.digest = me.parent_digest\n           OR retained.digest = me.child_digest\n      )\n  ),\n  delete_component_members AS (\n    SELECT\n      seed.source_digest,\n      seed.member_digest\n    FROM closure_seed seed\n\n    UNION\n\n    SELECT\n      walk.source_digest,\n      edge.target_digest AS member_digest\n    FROM delete_component_members walk\n    JOIN undirected_edges edge\n      ON edge.source_digest = walk.member_digest\n    WHERE NOT EXISTS (\n        SELECT 1\n        FROM retained_manifests retained\n        WHERE retained.digest = edge.target_digest\n      )\n  ),\n  source_seed_hops AS (\n    SELECT\n      seed.source_digest,\n      MAX(seed.hops_from_root) AS max_seed_hops\n    FROM closure_seed seed\n    GROUP BY seed.source_digest\n  ),\n  descendant_hops AS (\n    SELECT\n      dtc.source_digest,\n      dtc.member_digest,\n      MIN(dtc.hops_from_root) AS min_hops_from_root\n    FROM direct_target_closure dtc\n    WHERE dtc.hops_from_root > 0\n    GROUP BY dtc.source_digest, dtc.member_digest\n  )\n  SELECT\n    dtr.root_version_id AS source_version_id,\n    walk.source_digest,\n    MIN(member_manifest.version_id) AS member_version_id,\n    walk.member_digest,\n    MIN(member_manifest.manifest_kind) AS member_manifest_kind,\n    CASE\n      WHEN walk.member_digest = walk.source_digest\n        THEN 0\n      WHEN descendant_hops.min_hops_from_root IS NOT NULL\n        THEN descendant_hops.min_hops_from_root\n      ELSE source_seed_hops.max_seed_hops + 1\n    END AS hops_from_root,\n    CASE\n      WHEN walk.member_digest = walk.source_digest\n        THEN 'root'\n      WHEN descendant_hops.min_hops_from_root IS NOT NULL\n        THEN 'descendant'\n      ELSE 'connected'\n    END AS member_role\n  FROM delete_component_members walk\n  JOIN temp_direct_target_roots dtr\n    ON dtr.root_digest = walk.source_digest\n  JOIN manifests member_manifest\n    ON member_manifest.scan_id = ?\n   AND member_manifest.digest = walk.member_digest\n  JOIN source_seed_hops\n    ON source_seed_hops.source_digest = walk.source_digest\n  LEFT JOIN descendant_hops\n    ON descendant_hops.source_digest = walk.source_digest\n   AND descendant_hops.member_digest = walk.member_digest\n  GROUP BY\n    dtr.root_version_id,\n    walk.source_digest,\n    walk.member_digest,\n    descendant_hops.min_hops_from_root,\n    source_seed_hops.max_seed_hops\n  ORDER BY walk.source_digest, hops_from_root, walk.member_digest\n";

package/dist/db/planner/_planner-plan-artifacts-closure-sql.js

@@ -0,0 +1,188 @@
+export const _LIST_CLOSURE_MANIFESTS_SQL = `
+  WITH selected_graphs AS (
+    SELECT DISTINCT
+      manifest_graphs.graph_id
+    FROM temp_direct_target_roots dtr
+    CROSS JOIN manifest_graphs
+    WHERE manifest_graphs.scan_id = ?
+      AND manifest_graphs.digest = dtr.root_digest
+  ),
+  retained_tagged_manifests AS (
+    SELECT DISTINCT
+      m.digest
+    FROM selected_graphs
+    CROSS JOIN manifest_graphs
+    CROSS JOIN manifests m
+    JOIN tags t
+      ON t.scan_id = m.scan_id
+     AND t.version_id = m.version_id
+     AND t.is_digest_tag = 0
+    WHERE manifest_graphs.scan_id = m.scan_id
+      AND selected_graphs.graph_id = manifest_graphs.graph_id
+      AND manifest_graphs.digest = m.digest
+      AND m.scan_id = ?
+      AND NOT EXISTS (
+        SELECT 1
+        FROM temp_direct_target_roots dtr
+        WHERE dtr.root_digest = m.digest
+      )
+  ),
+  retained_manifests AS (
+    SELECT
+      retained.digest
+    FROM retained_tagged_manifests retained
+
+    UNION
+
+    SELECT
+      mr.descendant_digest AS digest
+    FROM retained_tagged_manifests retained
+    CROSS JOIN manifest_reachability mr
+    WHERE mr.scan_id = ?
+      AND mr.ancestor_digest = retained.digest
+      AND mr.min_distance > 0
+  ),
+  direct_target_closure AS (
+    SELECT
+      dtr.root_digest AS source_digest,
+      dtr.root_digest AS member_digest,
+      0 AS hops_from_root
+    FROM temp_direct_target_roots dtr
+
+    UNION ALL
+
+    SELECT
+      dtr.root_digest AS source_digest,
+      mr.descendant_digest AS member_digest,
+      mr.min_distance AS hops_from_root
+    FROM temp_direct_target_roots dtr
+    CROSS JOIN manifest_reachability mr
+    WHERE mr.scan_id = ?
+      AND mr.ancestor_digest = dtr.root_digest
+      AND mr.min_distance > 0
+  ),
+  closure_seed AS (
+    SELECT
+      dtc.source_digest,
+      dtc.member_digest,
+      dtc.hops_from_root
+    FROM direct_target_closure dtc
+    WHERE dtc.hops_from_root = 0
+       OR NOT EXISTS (
+         SELECT 1
+         FROM retained_manifests retained
+         WHERE retained.digest = dtc.member_digest
+       )
+  ),
+  undirected_edges AS (
+    SELECT
+      me.parent_digest AS source_digest,
+      me.child_digest AS target_digest
+    FROM selected_graphs
+    CROSS JOIN manifest_graphs parent_graph
+    CROSS JOIN manifest_edges me INDEXED BY idx_manifest_edges_scan_parent
+    WHERE parent_graph.scan_id = me.scan_id
+      AND selected_graphs.graph_id = parent_graph.graph_id
+      AND parent_graph.digest = me.parent_digest
+      AND me.scan_id = ?
+      AND NOT EXISTS (
+        SELECT 1
+        FROM retained_manifests retained
+        WHERE retained.digest = me.parent_digest
+           OR retained.digest = me.child_digest
+      )
+
+    UNION
+
+    SELECT
+      me.child_digest AS source_digest,
+      me.parent_digest AS target_digest
+    FROM selected_graphs
+    CROSS JOIN manifest_graphs child_graph
+    CROSS JOIN manifest_edges me INDEXED BY idx_manifest_edges_scan_child
+    WHERE child_graph.scan_id = me.scan_id
+      AND selected_graphs.graph_id = child_graph.graph_id
+      AND child_graph.digest = me.child_digest
+      AND me.scan_id = ?
+      AND NOT EXISTS (
+        SELECT 1
+        FROM retained_manifests retained
+        WHERE retained.digest = me.parent_digest
+           OR retained.digest = me.child_digest
+      )
+  ),
+  delete_component_members AS (
+    SELECT
+      seed.source_digest,
+      seed.member_digest
+    FROM closure_seed seed
+
+    UNION
+
+    SELECT
+      walk.source_digest,
+      edge.target_digest AS member_digest
+    FROM delete_component_members walk
+    JOIN undirected_edges edge
+      ON edge.source_digest = walk.member_digest
+    WHERE NOT EXISTS (
+        SELECT 1
+        FROM retained_manifests retained
+        WHERE retained.digest = edge.target_digest
+      )
+  ),
+  source_seed_hops AS (
+    SELECT
+      seed.source_digest,
+      MAX(seed.hops_from_root) AS max_seed_hops
+    FROM closure_seed seed
+    GROUP BY seed.source_digest
+  ),
+  descendant_hops AS (
+    SELECT
+      dtc.source_digest,
+      dtc.member_digest,
+      MIN(dtc.hops_from_root) AS min_hops_from_root
+    FROM direct_target_closure dtc
+    WHERE dtc.hops_from_root > 0
+    GROUP BY dtc.source_digest, dtc.member_digest
+  )
+  SELECT
+    dtr.root_version_id AS source_version_id,
+    walk.source_digest,
+    MIN(member_manifest.version_id) AS member_version_id,
+    walk.member_digest,
+    MIN(member_manifest.manifest_kind) AS member_manifest_kind,
+    CASE
+      WHEN walk.member_digest = walk.source_digest
+        THEN 0
+      WHEN descendant_hops.min_hops_from_root IS NOT NULL
+        THEN descendant_hops.min_hops_from_root
+      ELSE source_seed_hops.max_seed_hops + 1
+    END AS hops_from_root,
+    CASE
+      WHEN walk.member_digest = walk.source_digest
+        THEN 'root'
+      WHEN descendant_hops.min_hops_from_root IS NOT NULL
+        THEN 'descendant'
+      ELSE 'connected'
+    END AS member_role
+  FROM delete_component_members walk
+  JOIN temp_direct_target_roots dtr
+    ON dtr.root_digest = walk.source_digest
+  JOIN manifests member_manifest
+    ON member_manifest.scan_id = ?
+   AND member_manifest.digest = walk.member_digest
+  JOIN source_seed_hops
+    ON source_seed_hops.source_digest = walk.source_digest
+  LEFT JOIN descendant_hops
+    ON descendant_hops.source_digest = walk.source_digest
+   AND descendant_hops.member_digest = walk.member_digest
+  GROUP BY
+    dtr.root_version_id,
+    walk.source_digest,
+    walk.member_digest,
+    descendant_hops.min_hops_from_root,
+    source_seed_hops.max_seed_hops
+  ORDER BY walk.source_digest, hops_from_root, walk.member_digest
+`;

package/dist/db/planner/_planner-plan-artifacts-supported-untag-only-sql.d.ts

@@ -0,0 +1 @@
+export declare const _LIST_SUPPORTED_UNTAG_ONLY_ROOT_DIGESTS_SQL = "\n  WITH selected_graphs AS (\n    SELECT DISTINCT\n      manifest_graphs.graph_id\n    FROM temp_direct_target_roots dtr\n    CROSS JOIN manifest_graphs\n    WHERE manifest_graphs.scan_id = ?\n      AND manifest_graphs.digest = dtr.root_digest\n  ),\n  retained_tagged_manifests AS (\n    SELECT DISTINCT\n      m.digest\n    FROM selected_graphs\n    CROSS JOIN manifest_graphs\n    CROSS JOIN manifests m\n    JOIN tags t\n      ON t.scan_id = m.scan_id\n     AND t.version_id = m.version_id\n     AND t.is_digest_tag = 0\n    WHERE manifest_graphs.scan_id = m.scan_id\n      AND selected_graphs.graph_id = manifest_graphs.graph_id\n      AND manifest_graphs.digest = m.digest\n      AND m.scan_id = ?\n      AND NOT EXISTS (\n        SELECT 1\n        FROM temp_direct_target_roots dtr\n        WHERE dtr.root_digest = m.digest\n      )\n  ),\n  retained_manifests AS (\n    SELECT\n      retained.digest\n    FROM retained_tagged_manifests retained\n\n    UNION\n\n    SELECT\n      mr.descendant_digest AS digest\n    FROM retained_tagged_manifests retained\n    CROSS JOIN manifest_reachability mr\n    WHERE mr.scan_id = ?\n      AND mr.ancestor_digest = retained.digest\n      AND mr.min_distance > 0\n  )\n  SELECT DISTINCT\n    dtr.root_digest\n  FROM temp_direct_target_roots dtr\n  WHERE dtr.root_manifest_kind = 'index_manifest'\n    AND EXISTS (\n      SELECT 1\n      FROM manifest_edges me\n      JOIN manifests child\n        ON child.scan_id = ?\n       AND child.digest = me.child_digest\n      WHERE me.scan_id = ?\n        AND me.parent_digest = dtr.root_digest\n        AND me.edge_kind = 'referrer'\n        AND child.manifest_kind = 'signature_manifest'\n    )\n    AND EXISTS (\n      SELECT 1\n      FROM manifest_edges me\n      JOIN manifests child\n        ON child.scan_id = ?\n       AND child.digest = me.child_digest\n      WHERE me.scan_id = ?\n        AND me.parent_digest = dtr.root_digest\n        AND me.edge_kind = 'image-child'\n        AND child.manifest_kind <> 'signature_manifest'\n    )\n    AND NOT EXISTS (\n      SELECT 1\n      FROM manifest_edges me\n      JOIN manifests child\n        ON child.scan_id = ?\n       AND child.digest = me.child_digest\n      WHERE me.scan_id = ?\n        AND me.parent_digest = dtr.root_digest\n        AND me.edge_kind = 'image-child'\n        AND child.manifest_kind <> 'signature_manifest'\n        AND child.digest NOT IN (\n          SELECT digest\n          FROM retained_manifests\n        )\n    )\n";

package/dist/db/planner/_planner-plan-artifacts-supported-untag-only-sql.js

@@ -0,0 +1,86 @@
+export const _LIST_SUPPORTED_UNTAG_ONLY_ROOT_DIGESTS_SQL = `
+  WITH selected_graphs AS (
+    SELECT DISTINCT
+      manifest_graphs.graph_id
+    FROM temp_direct_target_roots dtr
+    CROSS JOIN manifest_graphs
+    WHERE manifest_graphs.scan_id = ?
+      AND manifest_graphs.digest = dtr.root_digest
+  ),
+  retained_tagged_manifests AS (
+    SELECT DISTINCT
+      m.digest
+    FROM selected_graphs
+    CROSS JOIN manifest_graphs
+    CROSS JOIN manifests m
+    JOIN tags t
+      ON t.scan_id = m.scan_id
+     AND t.version_id = m.version_id
+     AND t.is_digest_tag = 0
+    WHERE manifest_graphs.scan_id = m.scan_id
+      AND selected_graphs.graph_id = manifest_graphs.graph_id
+      AND manifest_graphs.digest = m.digest
+      AND m.scan_id = ?
+      AND NOT EXISTS (
+        SELECT 1
+        FROM temp_direct_target_roots dtr
+        WHERE dtr.root_digest = m.digest
+      )
+  ),
+  retained_manifests AS (
+    SELECT
+      retained.digest
+    FROM retained_tagged_manifests retained
+
+    UNION
+
+    SELECT
+      mr.descendant_digest AS digest
+    FROM retained_tagged_manifests retained
+    CROSS JOIN manifest_reachability mr
+    WHERE mr.scan_id = ?
+      AND mr.ancestor_digest = retained.digest
+      AND mr.min_distance > 0
+  )
+  SELECT DISTINCT
+    dtr.root_digest
+  FROM temp_direct_target_roots dtr
+  WHERE dtr.root_manifest_kind = 'index_manifest'
+    AND EXISTS (
+      SELECT 1
+      FROM manifest_edges me
+      JOIN manifests child
+        ON child.scan_id = ?
+       AND child.digest = me.child_digest
+      WHERE me.scan_id = ?
+        AND me.parent_digest = dtr.root_digest
+        AND me.edge_kind = 'referrer'
+        AND child.manifest_kind = 'signature_manifest'
+    )
+    AND EXISTS (
+      SELECT 1
+      FROM manifest_edges me
+      JOIN manifests child
+        ON child.scan_id = ?
+       AND child.digest = me.child_digest
+      WHERE me.scan_id = ?
+        AND me.parent_digest = dtr.root_digest
+        AND me.edge_kind = 'image-child'
+        AND child.manifest_kind <> 'signature_manifest'
+    )
+    AND NOT EXISTS (
+      SELECT 1
+      FROM manifest_edges me
+      JOIN manifests child
+        ON child.scan_id = ?
+       AND child.digest = me.child_digest
+      WHERE me.scan_id = ?
+        AND me.parent_digest = dtr.root_digest
+        AND me.edge_kind = 'image-child'
+        AND child.manifest_kind <> 'signature_manifest'
+        AND child.digest NOT IN (
+          SELECT digest
+          FROM retained_manifests
+        )
+    )
+`;

package/dist/db/planner/_planner-plan-artifacts.d.ts

@@ -0,0 +1,7 @@
+import { PlannerSql } from "./_planner-sql.js";
+import { type DeletePlanRoot, type PlanArtifacts } from "./_planner-types.js";
+export declare class PlannerPlanArtifacts {
+    #private;
+    constructor(sql: PlannerSql);
+    build(scanId: number, directTargetRoots: DeletePlanRoot[]): PlanArtifacts;
+}

package/dist/db/planner/_planner-plan-artifacts.js

@@ -0,0 +1,109 @@
+import { mapBlockedRootRow, mapClosureManifestRow } from "./_planner-types.js";
+import { _LIST_BLOCKED_ROOTS_SQL } from "./_planner-plan-artifacts-blocked-roots-sql.js";
+import { _LIST_CLOSURE_MANIFESTS_SQL } from "./_planner-plan-artifacts-closure-sql.js";
+import { _LIST_SUPPORTED_UNTAG_ONLY_ROOT_DIGESTS_SQL } from "./_planner-plan-artifacts-supported-untag-only-sql.js";
+export class PlannerPlanArtifacts {
+    #sql;
+    constructor(sql) {
+        this.#sql = sql;
+    }
+    build(scanId, directTargetRoots) {
+        const deleteRootCandidates = directTargetRoots.filter((root) => root.selectionMode === "delete-root");
+        if (deleteRootCandidates.length === 0) {
+            return {
+                closureManifests: [],
+                blockedRoots: [],
+                fullyDeletableRoots: [],
+                supportedUntagOnlyRootDigests: new Set()
+            };
+        }
+        return this.#withDirectTargetRootsTempTable(deleteRootCandidates, () => {
+            const closureManifests = this.#listClosureManifests(scanId);
+            const blockedRoots = this.#listBlockedRoots(scanId);
+            const blockedVersionIds = new Set(blockedRoots.map((root) => root.blockedVersionId));
+            const fullyDeletableRoots = deleteRootCandidates.filter((root) => !blockedVersionIds.has(root.versionId));
+            const supportedUntagOnlyRootDigests = this.#listSupportedUntagOnlyRootDigests(scanId);
+            return {
+                closureManifests,
+                blockedRoots,
+                fullyDeletableRoots,
+                supportedUntagOnlyRootDigests
+            };
+        });
+    }
+    #listSupportedUntagOnlyRootDigests(scanId) {
+        const rows = this.#sql.all(_LIST_SUPPORTED_UNTAG_ONLY_ROOT_DIGESTS_SQL, [
+            scanId,
+            scanId,
+            scanId,
+            scanId,
+            scanId,
+            scanId,
+            scanId,
+            scanId,
+            scanId
+        ]);
+        return new Set(rows.map((row) => row.root_digest));
+    }
+    #listClosureManifests(scanId) {
+        return this.#sql
+            .all(_LIST_CLOSURE_MANIFESTS_SQL, [scanId, scanId, scanId, scanId, scanId, scanId, scanId])
+            .map(mapClosureManifestRow);
+    }
+    #listBlockedRoots(scanId) {
+        return this.#sql
+            .all(_LIST_BLOCKED_ROOTS_SQL, [scanId, scanId, scanId, scanId, scanId])
+            .map(mapBlockedRootRow);
+    }
+    #withDirectTargetRootsTempTable(directTargetRoots, callback) {
+        this.#sql.exec(`
+      CREATE TEMP TABLE IF NOT EXISTS temp_direct_target_roots (
+        root_version_id INTEGER NOT NULL,
+        root_digest TEXT NOT NULL,
+        root_manifest_kind TEXT,
+        direct_target_reason TEXT NOT NULL,
+        selection_mode TEXT NOT NULL
+      )
+    `);
+        this.#sql.exec(`
+      CREATE INDEX IF NOT EXISTS idx_temp_direct_target_roots_digest
+        ON temp_direct_target_roots(root_digest)
+    `);
+        this.#sql.exec(`
+      CREATE INDEX IF NOT EXISTS idx_temp_direct_target_roots_version_digest
+        ON temp_direct_target_roots(root_version_id, root_digest)
+    `);
+        this.#sql.exec("DELETE FROM temp_direct_target_roots");
+        this.#insertDirectTargetRoots(directTargetRoots);
+        try {
+            return callback();
+        }
+        finally {
+            this.#sql.exec("DELETE FROM temp_direct_target_roots");
+        }
+    }
+    #insertDirectTargetRoots(directTargetRoots) {
+        const insertSql = `
+      INSERT INTO temp_direct_target_roots (
+        root_version_id,
+        root_digest,
+        root_manifest_kind,
+        direct_target_reason,
+        selection_mode
+      ) VALUES (?, ?, ?, ?, ?)
+    `;
+        this.#sql.traceSql(insertSql, ["<chunked rows omitted>"]);
+        const insert = this.#sql.database.prepare(insertSql);
+        const insertMany = this.#sql.database.transaction((roots) => {
+            for (const root of roots) {
+                insert.run(root.versionId, root.digest, root.manifestKind ?? null, root.reason, root.selectionMode);
+            }
+        });
+        const chunkSize = 1000;
+        for (let index = 0; index < directTargetRoots.length; index += chunkSize) {
+            const chunk = directTargetRoots.slice(index, index + chunkSize);
+            insertMany(chunk);
+            this.#sql.logger.debug(`Inserted ${chunk.length} direct target root row(s) into temp_direct_target_roots`);
+        }
+    }
+}

package/dist/db/planner/_planner-repository.d.ts

@@ -0,0 +1,44 @@
+import type Database from "better-sqlite3";
+import type { DeletePlan, PlannerLogger } from "./_planner-types.js";
+export type { DeletePlan, DeletePlanBlockReasonCode, DeletePlanBlockedRoot, DeletePlanClosureManifest, DeletePlanProtectedRoot, DeletePlanRoot, DeletePlanRootDecision, DeletePlanSelectionMode, DeletePlanSelectionReason, DeletePlanValidationReasonCode, DeletePlanValidationStatus } from "./_planner-types.js";
+export { DeletePlanValidationReasonCodes, DeletePlanValidationStatuses } from "./_planner-types.js";
+export declare class PlannerRepository {
+    #private;
+    constructor(database: Database.Database, logger?: PlannerLogger);
+    getDeleteUntaggedPlan(owner: string, packageName: string): DeletePlan;
+    getLatestCompletedScanId(owner: string, packageName: string): number;
+    getKeepNUntaggedPlan(owner: string, packageName: string, keepCount: number): DeletePlan;
+    getDeleteUntaggedPlanWithCutoff(owner: string, packageName: string, options?: {
+        olderThan?: string;
+        cutoffTimestamp?: string;
+    }): DeletePlan;
+    getKeepNUntaggedPlanWithCutoff(owner: string, packageName: string, keepCount: number, options?: {
+        olderThan?: string;
+        cutoffTimestamp?: string;
+    }): DeletePlan;
+    getDeleteTagsPlan(owner: string, packageName: string, deleteTags: string[], excludeTags: string[]): DeletePlan;
+    getDeleteTagsPlanWithCutoff(owner: string, packageName: string, deleteTags: string[], excludeTags: string[], options?: {
+        deleteTagsRequested?: boolean;
+        deleteGhostImages?: boolean;
+        deletePartialImages?: boolean;
+        deleteOrphanedImages?: boolean;
+        keepNTagged?: number;
+        useRegex?: boolean;
+        olderThan?: string;
+        cutoffTimestamp?: string;
+    }): DeletePlan;
+    getCleanupPlanWithCutoff(owner: string, packageName: string, options?: {
+        deleteUntagged?: boolean;
+        deleteGhostImages?: boolean;
+        deletePartialImages?: boolean;
+        deleteOrphanedImages?: boolean;
+        deleteTags?: string[];
+        deleteTagsRequested?: boolean;
+        excludeTags?: string[];
+        keepNTagged?: number;
+        keepNUntagged?: number;
+        useRegex?: boolean;
+        olderThan?: string;
+        cutoffTimestamp?: string;
+    }): DeletePlan;
+}

package/dist/db/planner/_planner-repository.js

@@ -0,0 +1,105 @@
+import { PlannerDirectTargetRoots } from "./_planner-direct-target-roots.js";
+import { PlannerDirectTargetTags } from "./_planner-direct-target-tags.js";
+import { PlannerLatestScan } from "./_planner-latest-scan.js";
+import { buildPlanOutputs } from "./_planner-output.js";
+import { PlannerPlanArtifacts } from "./_planner-plan-artifacts.js";
+import { PlannerSql } from "./_planner-sql.js";
+export { DeletePlanValidationReasonCodes, DeletePlanValidationStatuses } from "./_planner-types.js";
+export class PlannerRepository {
+    #latestScan;
+    #directTargetTags;
+    #directTargetRoots;
+    #planArtifacts;
+    constructor(database, logger) {
+        const sql = new PlannerSql(database, logger);
+        this.#latestScan = new PlannerLatestScan(sql);
+        this.#directTargetTags = new PlannerDirectTargetTags(sql);
+        this.#directTargetRoots = new PlannerDirectTargetRoots(sql);
+        this.#planArtifacts = new PlannerPlanArtifacts(sql);
+    }
+    getDeleteUntaggedPlan(owner, packageName) {
+        return this.getDeleteUntaggedPlanWithCutoff(owner, packageName);
+    }
+    getLatestCompletedScanId(owner, packageName) {
+        return this.#latestScan.get(owner, packageName).scan_id;
+    }
+    getKeepNUntaggedPlan(owner, packageName, keepCount) {
+        return this.getKeepNUntaggedPlanWithCutoff(owner, packageName, keepCount);
+    }
+    getDeleteUntaggedPlanWithCutoff(owner, packageName, options) {
+        return this.getCleanupPlanWithCutoff(owner, packageName, {
+            deleteUntagged: true,
+            olderThan: options?.olderThan,
+            cutoffTimestamp: options?.cutoffTimestamp
+        });
+    }
+    getKeepNUntaggedPlanWithCutoff(owner, packageName, keepCount, options) {
+        return this.getCleanupPlanWithCutoff(owner, packageName, {
+            keepNUntagged: keepCount,
+            olderThan: options?.olderThan,
+            cutoffTimestamp: options?.cutoffTimestamp
+        });
+    }
+    getDeleteTagsPlan(owner, packageName, deleteTags, excludeTags) {
+        return this.getDeleteTagsPlanWithCutoff(owner, packageName, deleteTags, excludeTags);
+    }
+    getDeleteTagsPlanWithCutoff(owner, packageName, deleteTags, excludeTags, options) {
+        return this.getCleanupPlanWithCutoff(owner, packageName, {
+            deleteTags,
+            excludeTags,
+            deleteGhostImages: options?.deleteGhostImages,
+            deletePartialImages: options?.deletePartialImages,
+            deleteOrphanedImages: options?.deleteOrphanedImages,
+            deleteTagsRequested: options?.deleteTagsRequested ?? true,
+            keepNTagged: options?.keepNTagged,
+            useRegex: options?.useRegex,
+            olderThan: options?.olderThan,
+            cutoffTimestamp: options?.cutoffTimestamp
+        });
+    }
+    getCleanupPlanWithCutoff(owner, packageName, options) {
+        const scan = this.#latestScan.get(owner, packageName);
+        const deleteTags = options?.deleteTags ?? [];
+        const excludeTags = options?.excludeTags ?? [];
+        const directTargetTags = this.#directTargetTags.listDeleteTagDirectTargetTags(scan.scan_id, deleteTags, excludeTags, options?.useRegex ?? false, options?.deleteOrphanedImages ?? false, options?.cutoffTimestamp);
+        const directTargetRoots = this.#directTargetRoots.list(scan.scan_id, {
+            deleteTags,
+            deleteTagsRequested: options?.deleteTagsRequested ?? false,
+            deleteOrphanedImages: options?.deleteOrphanedImages ?? false,
+            excludeTags,
+            deleteUntagged: options?.deleteUntagged ?? false,
+            keepNTagged: options?.keepNTagged,
+            keepNUntagged: options?.keepNUntagged,
+            useRegex: options?.useRegex ?? false,
+            cutoffTimestamp: options?.cutoffTimestamp
+        });
+        const planArtifacts = this.#planArtifacts.build(scan.scan_id, directTargetRoots);
+        return {
+            owner: scan.owner,
+            packageName: scan.package_name,
+            scanCompletedAt: scan.scan_completed_at,
+            plannerInputs: _buildPlannerInputs({
+                deleteGhostImages: options?.deleteGhostImages || undefined,
+                deletePartialImages: options?.deletePartialImages || undefined,
+                deleteOrphanedImages: options?.deleteOrphanedImages || undefined,
+                deleteTags,
+                deleteUntagged: options?.deleteUntagged || undefined,
+                excludeTags,
+                keepNTagged: options?.keepNTagged,
+                keepNUntagged: options?.keepNUntagged,
+                useRegex: options?.useRegex || undefined,
+                olderThan: options?.olderThan,
+                cutoffTimestamp: options?.cutoffTimestamp
+            }),
+            ...buildPlanOutputs(directTargetTags, directTargetRoots, planArtifacts)
+        };
+    }
+}
+function _buildPlannerInputs(inputs) {
+    return Object.fromEntries(Object.entries(inputs).filter(([, value]) => {
+        if (value === undefined) {
+            return false;
+        }
+        return !(Array.isArray(value) && value.length === 0);
+    }));
+}

package/dist/db/planner/_planner-sql.d.ts

@@ -0,0 +1,12 @@
+import type Database from "better-sqlite3";
+import { type PlannerLogger } from "./_planner-types.js";
+export declare class PlannerSql {
+    #private;
+    constructor(database: Database.Database, logger?: PlannerLogger);
+    get database(): Database.Database;
+    get logger(): PlannerLogger;
+    exec(sql: string, params?: Array<number | string | null>): void;
+    get<T>(sql: string, params: Array<number | string>): T | undefined;
+    all<T>(sql: string, params: Array<number | string>): T[];
+    traceSql(sql: string, params: Array<number | string | null>): void;
+}