niceeval 0.14.3-canary.53 → 0.14.3
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
|
@@ -249,7 +249,40 @@ async function reconcileDomain(repository, control, scope) {
|
|
|
249
249
|
for (const volume of reconciledVolumes) {
|
|
250
250
|
if (volume.config[control_ts_1.INCUS_METADATA.executionDomainId] !== scope.executionDomainId)
|
|
251
251
|
continue;
|
|
252
|
-
|
|
252
|
+
let owned = next.some((intent) => isActiveIntent(intent)
|
|
253
|
+
&& intent.executionDomainId === scope.executionDomainId
|
|
254
|
+
&& intent.project === scope.project
|
|
255
|
+
&& volumeMetadataMatchesIntent(volume, intent));
|
|
256
|
+
if (!owned) {
|
|
257
|
+
for (const observed of next) {
|
|
258
|
+
if (observed.executionDomainId !== scope.executionDomainId || observed.project !== scope.project
|
|
259
|
+
|| (observed.state !== "reserved" && observed.state !== "creating"))
|
|
260
|
+
continue;
|
|
261
|
+
// Inventory requests are separate snapshots: a copy can appear after
|
|
262
|
+
// listInstances, and its disk keeps source metadata until PATCH.
|
|
263
|
+
// Re-read the exact allocation and object instead of treating that
|
|
264
|
+
// acceptance window as an unregistered resource.
|
|
265
|
+
const current = await readAllocationIntent(repository, observed.allocationId);
|
|
266
|
+
if (current === undefined || current.generation !== observed.generation
|
|
267
|
+
|| current.executionDomainId !== scope.executionDomainId || current.project !== scope.project
|
|
268
|
+
|| current.storagePool !== scope.storagePool
|
|
269
|
+
|| current.dockerDataVolume !== volume.name || current.providerLocator === undefined)
|
|
270
|
+
continue;
|
|
271
|
+
if (current.state === "creating") {
|
|
272
|
+
const instance = await control.getInstance(scope.project, current.providerLocator);
|
|
273
|
+
owned = instance !== undefined && instance.name === current.providerLocator
|
|
274
|
+
&& volumeIsDependentOnExactInstance(instance, volume, current);
|
|
275
|
+
}
|
|
276
|
+
else if (isActiveIntent(current)) {
|
|
277
|
+
// A completed PATCH may also have overtaken the volume snapshot.
|
|
278
|
+
// Stable allocations must still present their own exact metadata.
|
|
279
|
+
const refreshed = await control.getVolume(scope.project, scope.storagePool, volume.name);
|
|
280
|
+
owned = refreshed !== undefined && volumeMetadataMatchesIntent(refreshed, current);
|
|
281
|
+
}
|
|
282
|
+
if (owned)
|
|
283
|
+
break;
|
|
284
|
+
}
|
|
285
|
+
}
|
|
253
286
|
if (owned)
|
|
254
287
|
continue;
|
|
255
288
|
throw (0, errors_ts_1.incusError)("sandbox-allocation-lost", `Incus volume ${JSON.stringify(volume.name)} claims execution domain ${JSON.stringify(scope.executionDomainId)} but has no exact IncusRepository allocation intent.`, ["Keep the volume in place and restore or explicitly maintain the durable registry; never infer ownership from a name or delete an unregistered object."]);
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"ledger.js","sourceRoot":"","sources":["ledger.ts"],"names":[],"mappings":";;;AAkBA,0DAEC;AACD,gEAEC;AACD,oDAEC;AACD,sDAEC;AACD,0CAGC;AACD,sCAGC;AACD,wCAEC;AACD,oCAMC;AACD,gCAsCC;AACD,sDAQC;AAID,4DA+BC;AACD,wDAKC;AACD,kEAaC;AAmBD,0CA0FC;AACD,8CAkEC;AACD,wCAEC;AACD,wCAEC;AAMD,gEAiCC;AACD,kDAEC;AAtXD,qCAAmC;AACnC,wDAAyD;AACzD,6CAAuG;AACvG,2CAAkE;AAElE,iDAAoD;AAA3C,kHAAA,iBAAiB,OAAA;AAE1B,MAAM,eAAe,GAAG,IAAI,GAAG,CAAkB,CAAC,WAAW,CAAC,CAAC,CAAC;AAChE,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAkB;IAC9C,UAAU;IACV,UAAU;IACV,OAAO;IACP,YAAY;IACZ,mBAAmB;IACnB,MAAM;CACT,CAAC,CAAC;AACH,MAAM,YAAY,GAAG,KAAK,CAAC;AAC3B,MAAM,aAAa,GAAG,EAAE,CAAC;AACzB,SAAgB,uBAAuB,CAAC,UAA2B,EAAE,MAAwB;IACzF,OAAO,UAAU,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAC;AAChD,CAAC;AACD,SAAgB,0BAA0B,CAAC,UAA2B,EAAE,OAAyB,EAAE,IAAsB;IACrH,OAAO,UAAU,CAAC,oBAAoB,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;AAC1D,CAAC;AACD,SAAgB,oBAAoB,CAAC,UAA2B,EAAE,YAAoB;IAClF,OAAO,UAAU,CAAC,aAAa,CAAC,YAAY,CAAC,CAAC;AAClD,CAAC;AACD,SAAgB,qBAAqB,CAAC,UAA2B;IAC7D,OAAO,UAAU,CAAC,eAAe,EAAE,CAAC;AACxC,CAAC;AACD,SAAgB,eAAe,CAAC,YAAoB;IAChD,MAAM,OAAO,GAAG,YAAY,CAAC,UAAU,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;IAC/D,OAAO,MAAM,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;AACxC,CAAC;AACD,SAAgB,aAAa,CAAC,YAAoB;IAC9C,MAAM,OAAO,GAAG,YAAY,CAAC,UAAU,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;IAC/D,OAAO,MAAM,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC;AAC3C,CAAC;AACD,SAAgB,cAAc,CAAC,YAAoB;IAC/C,OAAO,QAAQ,YAAY,EAAE,CAAC;AAClC,CAAC;AACD,SAAgB,YAAY;IACxB,OAAO,MAAM,CAAC,MAAM,CAAC;QACjB,IAAI,EAAE,IAAA,kBAAQ,GAAE;QAChB,GAAG,EAAE,OAAO,CAAC,GAAG;QAChB,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KACtC,CAAC,CAAC;AACP,CAAC;AACD,SAAgB,UAAU,CAAC,QAAuB;IAW9C,MAAM,aAAa,GAAG,QAAQ,CAAC,MAAM,CAAC,2BAAc,CAAC,UAAU,CAAC,CAAC;IACjE,MAAM,UAAU,GAAG,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;IACnF,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC,2BAAc,CAAC,GAAG,CAAC,CAAC;IACnD,MAAM,GAAG,GAAG,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC9D,OAAO;QACH,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,2BAAc,CAAC,YAAY,CAAC,KAAK,SAAS;YAC1D,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC,EAAE,YAAY,EAAE,QAAQ,CAAC,MAAM,CAAC,2BAAc,CAAC,YAAY,CAAC,EAAE,CAAC;QACrE,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,2BAAc,CAAC,WAAW,CAAC,KAAK,SAAS;YACzD,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC,EAAE,WAAW,EAAE,QAAQ,CAAC,MAAM,CAAC,2BAAc,CAAC,WAAW,CAAC,EAAE,CAAC;QACnE,GAAG,CAAC,UAAU,KAAK,SAAS,IAAI,MAAM,CAAC,aAAa,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACvF,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,2BAAc,CAAC,cAAc,CAAC,KAAK,SAAS;YAC5D,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC,EAAE,cAAc,EAAE,QAAQ,CAAC,MAAM,CAAC,2BAAc,CAAC,cAAc,CAAC,EAAE,CAAC;QACzE,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,2BAAc,CAAC,iBAAiB,CAAC,KAAK,SAAS;YAC/D,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC,EAAE,iBAAiB,EAAE,QAAQ,CAAC,MAAM,CAAC,2BAAc,CAAC,iBAAiB,CAAC,EAAE,CAAC;QAC/E,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,2BAAc,CAAC,cAAc,CAAC,KAAK,SAAS;YAC5D,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC,EAAE,cAAc,EAAE,QAAQ,CAAC,MAAM,CAAC,2BAAc,CAAC,cAAc,CAAC,EAAE,CAAC;QACzE,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,2BAAc,CAAC,IAAI,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,CAAC,MAAM,CAAC,2BAAc,CAAC,IAAI,CAAC,EAAE,CAAC;QAC7G,GAAG,CAAC,GAAG,KAAK,SAAS,IAAI,MAAM,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAClE,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,2BAAc,CAAC,SAAS,CAAC,KAAK,SAAS;YACvD,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC,EAAE,SAAS,EAAE,QAAQ,CAAC,MAAM,CAAC,2BAAc,CAAC,SAAS,CAAC,EAAE,CAAC;KAClE,CAAC;AACN,CAAC;AACD,SAAgB,qBAAqB,CAAC,QAAuB,EAAE,MAAwB;IACnF,MAAM,IAAI,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC;IAClC,OAAO,IAAI,CAAC,YAAY,KAAK,MAAM,CAAC,YAAY;WACzC,IAAI,CAAC,UAAU,KAAK,MAAM,CAAC,UAAU;WACrC,IAAI,CAAC,iBAAiB,KAAK,MAAM,CAAC,iBAAiB;WACnD,IAAI,CAAC,cAAc,KAAK,MAAM,CAAC,cAAc;WAC7C,IAAI,CAAC,cAAc,KAAK,MAAM,CAAC,cAAc;WAC7C,IAAI,CAAC,WAAW,KAAK,MAAM,CAAC,WAAW,CAAC;AACnD,CAAC;AACD,SAAS,eAAe,CAAC,KAAsB;IAC3C,OAAO,IAAA,qCAAmB,EAAC,KAAK,CAAC,KAAK,QAAQ,CAAC;AACnD,CAAC;AACD,SAAgB,wBAAwB,CAAC,OAAoC,EAAE,SAAmC,EAAE,KAGnH,EAAE,UAAkC,EAAE;IACnC,MAAM,GAAG,GAAG,IAAI,GAAG,EAAU,CAAC;IAC9B,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC3B,IAAI,gBAAgB,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC;eAC/B,MAAM,CAAC,iBAAiB,KAAK,KAAK,CAAC,iBAAiB;eACpD,MAAM,CAAC,OAAO,KAAK,KAAK,CAAC,OAAO,EAAE,CAAC;YACtC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;QACjC,CAAC;IACL,CAAC;IACD,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;QAC/B,MAAM,IAAI,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC;QAClC,IAAI,IAAI,CAAC,YAAY,KAAK,SAAS;eAC5B,IAAI,CAAC,UAAU,KAAK,SAAS;eAC7B,IAAI,CAAC,iBAAiB,KAAK,KAAK,CAAC,iBAAiB;eAClD,IAAI,CAAC,cAAc,KAAK,SAAS;eACjC,IAAI,CAAC,cAAc,KAAK,SAAS;eACjC,IAAI,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;YACpC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QAC/B,CAAC;IACL,CAAC;IACD,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC3B,MAAM,YAAY,GAAG,MAAM,CAAC,MAAM,CAAC,2BAAc,CAAC,YAAY,CAAC,CAAC;QAChE,MAAM,iBAAiB,GAAG,MAAM,CAAC,MAAM,CAAC,2BAAc,CAAC,iBAAiB,CAAC,CAAC;QAC1E,IAAI,YAAY,KAAK,SAAS,IAAI,iBAAiB,KAAK,KAAK,CAAC,iBAAiB,EAAE,CAAC;YAC9E,GAAG,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;QAC1B,CAAC;IACL,CAAC;IACD,OAAO,GAAG,CAAC;AACf,CAAC;AACD,SAAgB,sBAAsB,CAAC,OAAoC,EAAE,SAAmC,EAAE,iBAAyB,EAAE,OAAe,EAAE,UAAkC,EAAE;IAC9L,OAAO,wBAAwB,CAAC,OAAO,EAAE,SAAS,EAAE;QAChD,iBAAiB;QACjB,OAAO;KACV,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC;AACrB,CAAC;AACD,SAAgB,2BAA2B,CAAC,MAAmB,EAAE,MAAwB;IACrF,MAAM,YAAY,GAAG,MAAM,CAAC,MAAM,CAAC,2BAAc,CAAC,YAAY,CAAC,CAAC;IAChE,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,CAAC,2BAAc,CAAC,UAAU,CAAC,CAAC;IAC5D,MAAM,iBAAiB,GAAG,MAAM,CAAC,MAAM,CAAC,2BAAc,CAAC,iBAAiB,CAAC,CAAC;IAC1E,MAAM,cAAc,GAAG,MAAM,CAAC,MAAM,CAAC,2BAAc,CAAC,cAAc,CAAC,CAAC;IACpE,MAAM,cAAc,GAAG,MAAM,CAAC,MAAM,CAAC,2BAAc,CAAC,cAAc,CAAC,CAAC;IACpE,MAAM,WAAW,GAAG,MAAM,CAAC,MAAM,CAAC,2BAAc,CAAC,WAAW,CAAC,CAAC;IAC9D,OAAO,YAAY,KAAK,MAAM,CAAC,YAAY;WACpC,UAAU,KAAK,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC;WACxC,iBAAiB,KAAK,MAAM,CAAC,iBAAiB;WAC9C,cAAc,KAAK,MAAM,CAAC,cAAc;WACxC,cAAc,KAAK,MAAM,CAAC,cAAc;WACxC,WAAW,KAAK,MAAM,CAAC,WAAW,CAAC;AAC9C,CAAC;AACD;;;;;;GAMG;AACH,SAAS,gCAAgC,CAAC,QAAuB,EAAE,MAAmB,EAAE,MAAwB;IAC5G,IAAI,CAAC,qBAAqB,CAAC,QAAQ,EAAE,MAAM,CAAC;QACxC,OAAO,KAAK,CAAC;IACjB,MAAM,UAAU,GAAG,QAAQ,CAAC,eAAe,EAAE,UAAU,CAAC;IACxD,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ;WACxB,MAAM,CAAC,WAAW,KAAK,OAAO;WAC9B,UAAU,EAAE,IAAI,KAAK,MAAM;WAC3B,UAAU,CAAC,IAAI,KAAK,MAAM,CAAC,WAAW;WACtC,UAAU,CAAC,MAAM,KAAK,MAAM,CAAC,IAAI;WACjC,UAAU,CAAC,SAAS,KAAK,MAAM,CAAC;AAC3C,CAAC;AACM,KAAK,UAAU,eAAe,CAAC,UAA2B,EAAE,OAAqB,EAAE,KAIzF;IAIG,MAAM,OAAO,GAAG,MAAM,qBAAqB,CAAC,UAAU,CAAC,CAAC;IACxD,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,aAAa,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAC7D,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,WAAW,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,WAAW,CAAC,CAAC;IAC5E,MAAM,IAAI,GAAuB,EAAE,CAAC;IACpC,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC3B,IAAI,MAAM,CAAC,iBAAiB,KAAK,KAAK,CAAC,iBAAiB,IAAI,MAAM,CAAC,OAAO,KAAK,KAAK,CAAC,OAAO,EAAE,CAAC;YAC3F,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YAClB,SAAS;QACb,CAAC;QACD,IAAI,eAAe,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;YACpC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YAClB,SAAS;QACb,CAAC;QACD,MAAM,QAAQ,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,qBAAqB,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC;QACzF,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,2BAA2B,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC;QAC3F,MAAM,UAAU,GAAG,CAAC,eAAe,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAClD,IAAI,QAAQ,KAAK,SAAS,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACjD,IAAI,MAAM,CAAC,WAAW,KAAK,IAAI,EAAE,CAAC;gBAC9B,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;gBAClB,SAAS;YACb,CAAC;YACD,IAAI,UAAU,IAAI,CAAC,MAAM,CAAC,KAAK,KAAK,UAAU,IAAI,MAAM,CAAC,KAAK,KAAK,UAAU,CAAC,EAAE,CAAC;gBAC7E,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;gBAClB,SAAS;YACb,CAAC;YACD,IAAI,UAAU,EAAE,CAAC;gBACb,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;gBAClB,SAAS;YACb,CAAC;YACD,+DAA+D;YAC/D,uEAAuE;YACvE,sEAAsE;YACtE,uEAAuE;YACvE,yCAAyC;YACzC,IAAI,CAAC,IAAI,CAAC,MAAM,iBAAiB,CAAC,UAAU,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;YAC/E,SAAS;QACb,CAAC;QACD,IAAI,MAAM,CAAC,KAAK,KAAK,mBAAmB,EAAE,CAAC;YACvC,MAAM,aAAa,GAAG,MAAM,CAAC,iBAAiB,KAAK,eAAe,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC;YACvF,IAAI,MAAM,CAAC,WAAW,KAAK,IAAI,IAAI,aAAa,KAAK,SAAS,EAAE,CAAC;gBAC7D,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;gBAClB,SAAS;YACb,CAAC;YACD,IAAI,CAAC,IAAI,CAAC,MAAM,iBAAiB,CAAC,UAAU,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;YAC/E,SAAS;QACb,CAAC;QACD,IAAI,eAAe,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;YAChC,IAAI,CAAC,IAAI,CAAC,MAAM,iBAAiB,CAAC,UAAU,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;YAC/E,SAAS;QACb,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACtB,CAAC;IACD,uEAAuE;IACvE,wEAAwE;IACxE,wEAAwE;IACxE,2EAA2E;IAC3E,MAAM,mBAAmB,GAAG,MAAM,OAAO,CAAC,aAAa,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACvE,MAAM,iBAAiB,GAAG,MAAM,OAAO,CAAC,WAAW,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,WAAW,CAAC,CAAC;IACtF,KAAK,MAAM,QAAQ,IAAI,mBAAmB,EAAE,CAAC;QACzC,MAAM,IAAI,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC;QAClC,IAAI,IAAI,CAAC,iBAAiB,KAAK,KAAK,CAAC,iBAAiB;YAClD,SAAS;QACb,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,cAAc,CAAC,MAAM,CAAC;eACnD,MAAM,CAAC,iBAAiB,KAAK,KAAK,CAAC,iBAAiB;eACpD,MAAM,CAAC,OAAO,KAAK,KAAK,CAAC,OAAO;eAChC,qBAAqB,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC;QAChD,IAAI,KAAK;YACL,SAAS;QACb,MAAM,IAAA,sBAAU,EAAC,yBAAyB,EAAE,kBAAkB,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,4BAA4B,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,iBAAiB,CAAC,sDAAsD,EAAE,CAAC,yJAAyJ,CAAC,CAAC,CAAC;IACvX,CAAC;IACD,KAAK,MAAM,MAAM,IAAI,iBAAiB,EAAE,CAAC;QACrC,IAAI,MAAM,CAAC,MAAM,CAAC,2BAAc,CAAC,iBAAiB,CAAC,KAAK,KAAK,CAAC,iBAAiB;YAC3E,SAAS;QACb,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,cAAc,CAAC,MAAM,CAAC,IAAI,2BAA2B,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;QAC3G,IAAI,KAAK;YACL,SAAS;QACb,MAAM,IAAA,sBAAU,EAAC,yBAAyB,EAAE,gBAAgB,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,4BAA4B,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,iBAAiB,CAAC,sDAAsD,EAAE,CAAC,uJAAuJ,CAAC,CAAC,CAAC;IACjX,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC;QACjB,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC;QAC5B,SAAS,EAAE,mBAAmB;KACjC,CAAC,CAAC;AACP,CAAC;AACM,KAAK,UAAU,iBAAiB,CAAC,UAA2B,EAAE,OAAqB,EAAE,MAAwB,EAAE,OAAe;IACjI,MAAM,OAAO,GAAG,MAAM,oBAAoB,CAAC,UAAU,EAAE,MAAM,CAAC,YAAY,CAAC,CAAC;IAC5E,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;QACxB,MAAM,IAAA,sBAAU,EAAC,yBAAyB,EAAE,sBAAsB,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,YAAY,CAAC,8CAA8C,EAAE,CAAC,+CAA+C,CAAC,CAAC,CAAC;IAC5M,CAAC;IACD,IAAI,OAAO,CAAC,UAAU,KAAK,MAAM,CAAC,UAAU,EAAE,CAAC;QAC3C,MAAM,IAAA,sBAAU,EAAC,4BAA4B,EAAE,qCAAqC,OAAO,CAAC,UAAU,qCAAqC,MAAM,CAAC,UAAU,GAAG,EAAE,CAAC,iDAAiD,CAAC,CAAC,CAAC;IAC1N,CAAC;IACD,IAAI,OAAO,CAAC,iBAAiB,KAAK,MAAM,CAAC,iBAAiB,IAAI,OAAO,CAAC,OAAO,KAAK,OAAO,EAAE,CAAC;QACxF,MAAM,IAAA,sBAAU,EAAC,4BAA4B,EAAE,wEAAwE,EAAE,CAAC,4DAA4D,CAAC,CAAC,CAAC;IAC7L,CAAC;IACD,MAAM,SAAS,GAAG,OAAO,CAAC,KAAK,KAAK,mBAAmB;QACnD,CAAC,CAAC,OAAO;QACT,CAAC,CAAC,MAAM,0BAA0B,CAAC,UAAU,EAAE,OAAO,EAAE,EAAE,GAAG,OAAO,EAAE,KAAK,EAAE,mBAAmB,EAAE,CAAC,CAAC;IACxG,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC;IACvD,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,WAAW,CAAC,OAAO,EAAE,SAAS,CAAC,WAAW,CAAC,CAAC;IAC1E,MAAM,gBAAgB,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,qBAAqB,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC,CAAC;IACpG,MAAM,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,2BAA2B,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC,CAAC;IACtG,MAAM,YAAY,GAAG,gBAAgB,EAAE,IAAI,IAAI,SAAS,CAAC,eAAe,IAAI,eAAe,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC;IACpH,MAAM,UAAU,GAAG,cAAc,EAAE,IAAI,IAAI,SAAS,CAAC,gBAAgB,IAAI,aAAa,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC;IAC/G,MAAM,aAAa,GAAG,gBAAgB,IAAI,SAAS,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,KAAK,YAAY,CAAC,CAAC;IACzG,MAAM,WAAW,GAAG,cAAc,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,KAAK,UAAU,CAAC,CAAC;IACjG,IAAI,aAAa,KAAK,SAAS,IAAI,CAAC,qBAAqB,CAAC,aAAa,EAAE,SAAS,CAAC,EAAE,CAAC;QAClF,MAAM,IAAA,sBAAU,EAAC,4BAA4B,EAAE,sCAAsC,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,uCAAuC,EAAE,CAAC,gGAAgG,CAAC,CAAC,CAAC;IAClQ,CAAC;IACD,MAAM,oBAAoB,GAAG,aAAa,KAAK,SAAS;WACjD,WAAW,KAAK,SAAS;WACzB,gCAAgC,CAAC,aAAa,EAAE,WAAW,EAAE,SAAS,CAAC,CAAC;IAC/E,IAAI,WAAW,KAAK,SAAS;WACtB,CAAC,2BAA2B,CAAC,WAAW,EAAE,SAAS,CAAC;WACpD,CAAC,oBAAoB,EAAE,CAAC;QAC3B,MAAM,IAAA,sBAAU,EAAC,4BAA4B,EAAE,oCAAoC,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,uCAAuC,EAAE,CAAC,8FAA8F,CAAC,CAAC,CAAC;IAC5P,CAAC;IACD,IAAI,SAAS,CAAC,WAAW,KAAK,IAAI,EAAE,CAAC;QACjC,MAAM,aAAa,GAAG,SAAS,CAAC,iBAAiB,KAAK,eAAe,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,aAAa,CAAC;QACpG,IAAI,aAAa,KAAK,SAAS,EAAE,CAAC;YAC9B,MAAM,IAAA,sBAAU,EAAC,4BAA4B,EAAE,oBAAoB,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,YAAY,CAAC,oDAAoD,EAAE,CAAC,iHAAiH,CAAC,CAAC,CAAC;QACxR,CAAC;IACL,CAAC;IACD,IAAI,CAAC;QACD,IAAI,aAAa,KAAK,SAAS;YAC3B,MAAM,OAAO,CAAC,cAAc,CAAC,OAAO,EAAE,aAAa,CAAC,IAAI,CAAC,CAAC;QAC9D,IAAI,WAAW,KAAK,SAAS;YACzB,MAAM,OAAO,CAAC,YAAY,CAAC,OAAO,EAAE,SAAS,CAAC,WAAW,EAAE,WAAW,CAAC,IAAI,CAAC,CAAC;QACjF,MAAM,OAAO,CAAC,UAAU,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;QAChD,MAAM,OAAO,CAAC,gBAAgB,CAAC,OAAO,EAAE,SAAS,CAAC,WAAW,EAAE,UAAU,CAAC,CAAC;QAC3E,MAAM,aAAa,GAAG,KAAK,IAAmB,EAAE;YAC5C,MAAM,gBAAgB,GAAG,MAAM,OAAO,CAAC,WAAW,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;YAC1E,MAAM,cAAc,GAAG,MAAM,OAAO,CAAC,SAAS,CAAC,OAAO,EAAE,SAAS,CAAC,WAAW,EAAE,UAAU,CAAC,CAAC;YAC3F,IAAI,gBAAgB,KAAK,SAAS,IAAI,cAAc,KAAK,SAAS,EAAE,CAAC;gBACjE,MAAM,IAAA,sBAAU,EAAC,4BAA4B,EAAE,oBAAoB,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,YAAY,CAAC,mCAAmC,EAAE,CAAC,0FAA0F,CAAC,CAAC,CAAC;YAChP,CAAC;QACL,CAAC,CAAC;QACF,MAAM,aAAa,EAAE,CAAC;IAC1B,CAAC;IACD,OAAO,KAAK,EAAE,CAAC;QACX,MAAM,IAAA,sBAAU,EAAC,4BAA4B,EAAE,oCAAoC,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,YAAY,CAAC,aAAa,EAAE,CAAC,4IAA4I,CAAC,EAAE,KAAK,CAAC,CAAC;IACnS,CAAC;IACD,OAAO,0BAA0B,CAAC,UAAU,EAAE,SAAS,EAAE;QACrD,GAAG,SAAS;QACZ,KAAK,EAAE,WAAW;QAClB,eAAe,EAAE,SAAS;QAC1B,gBAAgB,EAAE,SAAS;QAC3B,WAAW,EAAE,SAAS;QACtB,iBAAiB,EAAE,SAAS;KAC/B,CAAC,CAAC;AACP,CAAC;AACD,SAAgB,cAAc,CAAC,QAAsC;IACjE,OAAO,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,UAAU,GAAG,CAAC,CAAC;AAChE,CAAC;AACD,SAAgB,cAAc,CAAC,MAAwB;IACnD,OAAO,gBAAgB,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC9C,CAAC;AAMM,KAAK,UAAU,0BAA0B,CAAC,UAA2B,EAAE,iBAAyB,EAAE,UAErG,EAAE;IACF,MAAM,KAAK,GAAG,YAAY,EAAE,CAAC;IAC7B,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,YAAY,CAAC;IAC9C,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,MAAM,GAAG,CAAC,EAAE,CAAC;QACzC,MAAM,IAAI,SAAS,CAAC,mEAAmE,CAAC,CAAC;IAC7F,CAAC;IACD,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC;IACrC,IAAI,QAAyC,CAAC;IAC9C,SAAS,CAAC;QACN,MAAM,QAAQ,GAAG,MAAM,UAAU,CAAC,gBAAgB,CAAC,iBAAiB,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC;QACvF,IAAI,QAAQ,CAAC,QAAQ,EAAE,CAAC;YACpB,IAAI,QAAQ,GAAG,KAAK,CAAC;YACrB,OAAO;gBACH,iBAAiB;gBACjB,YAAY,EAAE,QAAQ,CAAC,KAAK,CAAC,YAAY;gBACzC,OAAO,EAAE,KAAK,IAAI,EAAE;oBAChB,IAAI,QAAQ;wBACR,OAAO;oBACX,QAAQ,GAAG,IAAI,CAAC;oBAChB,IAAI,CAAC,CAAC,MAAM,UAAU,CAAC,gBAAgB,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;wBACvD,MAAM,IAAA,sBAAU,EAAC,8BAA8B,EAAE,wBAAwB,IAAI,CAAC,SAAS,CAAC,iBAAiB,CAAC,yCAAyC,EAAE,CAAC,2EAA2E,CAAC,CAAC,CAAC;oBACxO,CAAC;gBACL,CAAC;aACJ,CAAC;QACN,CAAC;QACD,QAAQ,GAAG,eAAe,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;QAC9E,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,QAAQ,EAAE,CAAC;YACzB,MAAM,IAAA,sBAAU,EAAC,8BAA8B,EAAE,6DAA6D,IAAI,CAAC,SAAS,CAAC,iBAAiB,CAAC,GAAG,EAAE,CAAC,mFAAmF,CAAC,CAAC,CAAC;QAC/O,CAAC;QACD,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC,CAAC;IACvE,CAAC;AACL,CAAC;AACD,SAAgB,mBAAmB,CAAC,YAAoB;IACpD,OAAO,IAAA,sBAAU,EAAC,yBAAyB,EAAE,sBAAsB,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,qDAAqD,EAAE,CAAC,6FAA6F,CAAC,CAAC,CAAC;AAC3P,CAAC","sourcesContent":["import { hostname } from \"node:os\";\nimport { classifyRunIdentity } from \"../run-identity.ts\";\nimport { INCUS_METADATA, type IncusControl, type IncusInstance, type IncusVolume } from \"./control.ts\";\nimport { incusError, type IncusProviderError } from \"./errors.ts\";\nimport { type AllocationIntent, type AllocationOwner, type AllocationState, type IncusAdmissionLease, type IncusRepository, } from \"./repository.ts\";\nexport { ALLOCATION_STATES } from \"./repository.ts\";\nexport type { AllocationIntent, AllocationOwner, AllocationState } from \"./repository.ts\";\nconst RELEASED_STATES = new Set<AllocationState>([\"destroyed\"]);\nconst OCCUPYING_STATES = new Set<AllocationState>([\n \"reserved\",\n \"creating\",\n \"ready\",\n \"handed-off\",\n \"destroy-requested\",\n \"lost\",\n]);\nconst LOCK_WAIT_MS = 15000;\nconst LOCK_RETRY_MS = 50;\nexport function reserveAllocationIntent(repository: IncusRepository, intent: AllocationIntent): Promise<AllocationIntent> {\n return repository.reserveAllocation(intent);\n}\nexport function transitionAllocationIntent(repository: IncusRepository, current: AllocationIntent, next: AllocationIntent): Promise<AllocationIntent> {\n return repository.transitionAllocation(current, next);\n}\nexport function readAllocationIntent(repository: IncusRepository, allocationId: string): Promise<AllocationIntent | undefined> {\n return repository.getAllocation(allocationId);\n}\nexport function listAllocationIntents(repository: IncusRepository): Promise<readonly AllocationIntent[]> {\n return repository.listAllocations();\n}\nexport function instanceNameFor(allocationId: string): string {\n const compact = allocationId.replaceAll(\"-\", \"\").toLowerCase();\n return `ne-${compact.slice(0, 20)}`;\n}\nexport function volumeNameFor(allocationId: string): string {\n const compact = allocationId.replaceAll(\"-\", \"\").toLowerCase();\n return `ne-${compact.slice(0, 18)}-dd`;\n}\nexport function executionIdFor(allocationId: string): string {\n return `exec-${allocationId}`;\n}\nexport function currentOwner(): AllocationOwner {\n return Object.freeze({\n host: hostname(),\n pid: process.pid,\n startedAt: new Date().toISOString(),\n });\n}\nexport function metadataOf(instance: IncusInstance): {\n readonly allocationId?: string;\n readonly executionId?: string;\n readonly generation?: number;\n readonly artifactDigest?: string;\n readonly executionDomainId?: string;\n readonly provisionToken?: string;\n readonly host?: string;\n readonly pid?: number;\n readonly startedAt?: string;\n} {\n const generationRaw = instance.config[INCUS_METADATA.generation];\n const generation = generationRaw === undefined ? undefined : Number(generationRaw);\n const pidRaw = instance.config[INCUS_METADATA.pid];\n const pid = pidRaw === undefined ? undefined : Number(pidRaw);\n return {\n ...(instance.config[INCUS_METADATA.allocationId] === undefined\n ? {}\n : { allocationId: instance.config[INCUS_METADATA.allocationId] }),\n ...(instance.config[INCUS_METADATA.executionId] === undefined\n ? {}\n : { executionId: instance.config[INCUS_METADATA.executionId] }),\n ...(generation !== undefined && Number.isSafeInteger(generation) ? { generation } : {}),\n ...(instance.config[INCUS_METADATA.artifactDigest] === undefined\n ? {}\n : { artifactDigest: instance.config[INCUS_METADATA.artifactDigest] }),\n ...(instance.config[INCUS_METADATA.executionDomainId] === undefined\n ? {}\n : { executionDomainId: instance.config[INCUS_METADATA.executionDomainId] }),\n ...(instance.config[INCUS_METADATA.provisionToken] === undefined\n ? {}\n : { provisionToken: instance.config[INCUS_METADATA.provisionToken] }),\n ...(instance.config[INCUS_METADATA.host] === undefined ? {} : { host: instance.config[INCUS_METADATA.host] }),\n ...(pid !== undefined && Number.isSafeInteger(pid) ? { pid } : {}),\n ...(instance.config[INCUS_METADATA.startedAt] === undefined\n ? {}\n : { startedAt: instance.config[INCUS_METADATA.startedAt] }),\n };\n}\nexport function metadataMatchesIntent(instance: IncusInstance, intent: AllocationIntent): boolean {\n const meta = metadataOf(instance);\n return meta.allocationId === intent.allocationId\n && meta.generation === intent.generation\n && meta.executionDomainId === intent.executionDomainId\n && meta.artifactDigest === intent.artifactDigest\n && meta.provisionToken === intent.provisionToken\n && meta.executionId === intent.executionId;\n}\nfunction ownerProvenDead(owner: AllocationOwner): boolean {\n return classifyRunIdentity(owner) === \"orphan\";\n}\nexport function unionActiveAllocationIds(intents: readonly AllocationIntent[], instances: readonly IncusInstance[], scope: {\n readonly executionDomainId: string;\n readonly project: string;\n}, volumes: readonly IncusVolume[] = []): ReadonlySet<string> {\n const ids = new Set<string>();\n for (const intent of intents) {\n if (OCCUPYING_STATES.has(intent.state)\n && intent.executionDomainId === scope.executionDomainId\n && intent.project === scope.project) {\n ids.add(intent.allocationId);\n }\n }\n for (const instance of instances) {\n const meta = metadataOf(instance);\n if (meta.allocationId !== undefined\n && meta.generation !== undefined\n && meta.executionDomainId === scope.executionDomainId\n && meta.artifactDigest !== undefined\n && meta.provisionToken !== undefined\n && meta.executionId !== undefined) {\n ids.add(meta.allocationId);\n }\n }\n for (const volume of volumes) {\n const allocationId = volume.config[INCUS_METADATA.allocationId];\n const executionDomainId = volume.config[INCUS_METADATA.executionDomainId];\n if (allocationId !== undefined && executionDomainId === scope.executionDomainId) {\n ids.add(allocationId);\n }\n }\n return ids;\n}\nexport function countActiveAllocations(intents: readonly AllocationIntent[], instances: readonly IncusInstance[], executionDomainId: string, project: string, volumes: readonly IncusVolume[] = []): number {\n return unionActiveAllocationIds(intents, instances, {\n executionDomainId,\n project,\n }, volumes).size;\n}\nexport function volumeMetadataMatchesIntent(volume: IncusVolume, intent: AllocationIntent): boolean {\n const allocationId = volume.config[INCUS_METADATA.allocationId];\n const generation = volume.config[INCUS_METADATA.generation];\n const executionDomainId = volume.config[INCUS_METADATA.executionDomainId];\n const artifactDigest = volume.config[INCUS_METADATA.artifactDigest];\n const provisionToken = volume.config[INCUS_METADATA.provisionToken];\n const executionId = volume.config[INCUS_METADATA.executionId];\n return allocationId === intent.allocationId\n && generation === String(intent.generation)\n && executionDomainId === intent.executionDomainId\n && artifactDigest === intent.artifactDigest\n && provisionToken === intent.provisionToken\n && executionId === intent.executionId;\n}\n/**\n * Incus creates a cross-project copy's dependent volume atomically with its\n * VM. There is a narrow acceptance window before the follow-up volume PATCH\n * can replace the source artifact metadata. During that window, the VM is\n * still the durable allocation's exact object, and its expanded `dockerdata`\n * device is the only evidence that permits deleting the copied volume.\n */\nfunction volumeIsDependentOnExactInstance(instance: IncusInstance, volume: IncusVolume, intent: AllocationIntent): boolean {\n if (!metadataMatchesIntent(instance, intent))\n return false;\n const dockerData = instance.expandedDevices?.dockerdata;\n return volume.type === \"custom\"\n && volume.contentType === \"block\"\n && dockerData?.type === \"disk\"\n && dockerData.pool === intent.storagePool\n && dockerData.source === volume.name\n && dockerData.dependent === \"true\";\n}\nexport async function reconcileDomain(repository: IncusRepository, control: IncusControl, scope: {\n readonly executionDomainId: string;\n readonly project: string;\n readonly storagePool: string;\n}): Promise<{\n readonly intents: readonly AllocationIntent[];\n readonly instances: readonly IncusInstance[];\n}> {\n const intents = await listAllocationIntents(repository);\n const instances = await control.listInstances(scope.project);\n const volumes = await control.listVolumes(scope.project, scope.storagePool);\n const next: AllocationIntent[] = [];\n for (const intent of intents) {\n if (intent.executionDomainId !== scope.executionDomainId || intent.project !== scope.project) {\n next.push(intent);\n continue;\n }\n if (RELEASED_STATES.has(intent.state)) {\n next.push(intent);\n continue;\n }\n const instance = instances.find((candidate) => metadataMatchesIntent(candidate, intent));\n const volume = volumes.find((candidate) => volumeMetadataMatchesIntent(candidate, intent));\n const ownerAlive = !ownerProvenDead(intent.owner);\n if (instance === undefined && volume === undefined) {\n if (intent.quarantined === true) {\n next.push(intent);\n continue;\n }\n if (ownerAlive && (intent.state === \"reserved\" || intent.state === \"creating\")) {\n next.push(intent);\n continue;\n }\n if (ownerAlive) {\n next.push(intent);\n continue;\n }\n // Even an absent allocation must cross the repository's fenced\n // destroy-requested state. In particular, a process can die after the\n // allocation became ready while an operator independently removes the\n // exact VM and volume; skipping the destroy protocol would attempt the\n // invalid ready -> destroyed transition.\n next.push(await destroyAllocation(repository, control, intent, scope.project));\n continue;\n }\n if (intent.state === \"destroy-requested\") {\n const awaitedObject = intent.acceptanceUnknown === \"volume-create\" ? volume : instance;\n if (intent.quarantined === true && awaitedObject === undefined) {\n next.push(intent);\n continue;\n }\n next.push(await destroyAllocation(repository, control, intent, scope.project));\n continue;\n }\n if (ownerProvenDead(intent.owner)) {\n next.push(await destroyAllocation(repository, control, intent, scope.project));\n continue;\n }\n next.push(intent);\n }\n // Re-read after detached destroy. The initial inventory can contain an\n // accepted clone whose dependent volume still has the source artifact's\n // metadata; classifying that already-destroyed snapshot as unregistered\n // would turn successful reconciliation into a false lost-allocation error.\n const reconciledInstances = await control.listInstances(scope.project);\n const reconciledVolumes = await control.listVolumes(scope.project, scope.storagePool);\n for (const instance of reconciledInstances) {\n const meta = metadataOf(instance);\n if (meta.executionDomainId !== scope.executionDomainId)\n continue;\n const owned = next.some((intent) => isActiveIntent(intent)\n && intent.executionDomainId === scope.executionDomainId\n && intent.project === scope.project\n && metadataMatchesIntent(instance, intent));\n if (owned)\n continue;\n throw incusError(\"sandbox-allocation-lost\", `Incus instance ${JSON.stringify(instance.name)} claims execution domain ${JSON.stringify(scope.executionDomainId)} but has no exact IncusRepository allocation intent.`, [\"Keep the instance in place and restore or explicitly maintain the durable registry; never infer ownership from a name or delete an unregistered object.\"]);\n }\n for (const volume of reconciledVolumes) {\n if (volume.config[INCUS_METADATA.executionDomainId] !== scope.executionDomainId)\n continue;\n const owned = next.some((intent) => isActiveIntent(intent) && volumeMetadataMatchesIntent(volume, intent));\n if (owned)\n continue;\n throw incusError(\"sandbox-allocation-lost\", `Incus volume ${JSON.stringify(volume.name)} claims execution domain ${JSON.stringify(scope.executionDomainId)} but has no exact IncusRepository allocation intent.`, [\"Keep the volume in place and restore or explicitly maintain the durable registry; never infer ownership from a name or delete an unregistered object.\"]);\n }\n return Object.freeze({\n intents: Object.freeze(next),\n instances: reconciledInstances,\n });\n}\nexport async function destroyAllocation(repository: IncusRepository, control: IncusControl, intent: AllocationIntent, project: string): Promise<AllocationIntent> {\n const current = await readAllocationIntent(repository, intent.allocationId);\n if (current === undefined) {\n throw incusError(\"sandbox-allocation-lost\", `Sandbox allocation ${JSON.stringify(intent.allocationId)} disappeared from the ledger before destroy.`, [\"Reconcile the ledger against Incus inventory.\"]);\n }\n if (current.generation !== intent.generation) {\n throw incusError(\"sandbox-destroy-incomplete\", `Destroy fenced: ledger generation ${current.generation} does not match caller generation ${intent.generation}.`, [\"Retry destroy from the current generation only.\"]);\n }\n if (current.executionDomainId !== intent.executionDomainId || current.project !== project) {\n throw incusError(\"sandbox-destroy-incomplete\", \"Destroy fenced: execution domain or project does not match the caller.\", [\"Destroy only from the owning execution domain and project.\"]);\n }\n const requested = current.state === \"destroy-requested\"\n ? current\n : await transitionAllocationIntent(repository, current, { ...current, state: \"destroy-requested\" });\n const instances = await control.listInstances(project);\n const volumes = await control.listVolumes(project, requested.storagePool);\n const matchingInstance = instances.find((candidate) => metadataMatchesIntent(candidate, requested));\n const matchingVolume = volumes.find((candidate) => volumeMetadataMatchesIntent(candidate, requested));\n const instanceName = matchingInstance?.name ?? requested.providerLocator ?? instanceNameFor(requested.allocationId);\n const volumeName = matchingVolume?.name ?? requested.dockerDataVolume ?? volumeNameFor(requested.allocationId);\n const namedInstance = matchingInstance ?? instances.find((candidate) => candidate.name === instanceName);\n const namedVolume = matchingVolume ?? volumes.find((candidate) => candidate.name === volumeName);\n if (namedInstance !== undefined && !metadataMatchesIntent(namedInstance, requested)) {\n throw incusError(\"sandbox-destroy-incomplete\", `Refusing to destroy Incus instance ${JSON.stringify(instanceName)} with mismatched allocation metadata.`, [\"Inspect the instance identity; NiceEval only destroys the exact allocation generation it owns.\"]);\n }\n const inheritedCloneVolume = namedInstance !== undefined\n && namedVolume !== undefined\n && volumeIsDependentOnExactInstance(namedInstance, namedVolume, requested);\n if (namedVolume !== undefined\n && !volumeMetadataMatchesIntent(namedVolume, requested)\n && !inheritedCloneVolume) {\n throw incusError(\"sandbox-destroy-incomplete\", `Refusing to destroy Incus volume ${JSON.stringify(volumeName)} with mismatched allocation metadata.`, [\"Inspect the volume identity; NiceEval only destroys the exact allocation generation it owns.\"]);\n }\n if (requested.quarantined === true) {\n const awaitedObject = requested.acceptanceUnknown === \"volume-create\" ? namedVolume : namedInstance;\n if (awaitedObject === undefined) {\n throw incusError(\"sandbox-destroy-incomplete\", `Incus allocation ${JSON.stringify(requested.allocationId)} still has an acceptance-unknown create operation.`, [\"Keep the allocation quarantined until the expected Incus object appears and can be destroyed by exact metadata.\"]);\n }\n }\n try {\n if (namedInstance !== undefined)\n await control.deleteInstance(project, namedInstance.name);\n if (namedVolume !== undefined)\n await control.deleteVolume(project, requested.storagePool, namedVolume.name);\n await control.waitAbsent(project, instanceName);\n await control.waitVolumeAbsent(project, requested.storagePool, volumeName);\n const confirmAbsent = async (): Promise<void> => {\n const leftoverInstance = await control.getInstance(project, instanceName);\n const leftoverVolume = await control.getVolume(project, requested.storagePool, volumeName);\n if (leftoverInstance !== undefined || leftoverVolume !== undefined) {\n throw incusError(\"sandbox-destroy-incomplete\", `Incus allocation ${JSON.stringify(requested.allocationId)} still has a VM or custom volume.`, [\"Retry destroy; do not mark destroyed without absent receipts for both the VM and volume.\"]);\n }\n };\n await confirmAbsent();\n }\n catch (cause) {\n throw incusError(\"sandbox-destroy-incomplete\", `Failed to prove Incus allocation ${JSON.stringify(requested.allocationId)} is absent.`, [\"Retry destroy from the Incus control plane; NiceEval will not mark the allocation destroyed without absent receipts for the VM and volume.\"], cause);\n }\n return transitionAllocationIntent(repository, requested, {\n ...requested,\n state: \"destroyed\",\n providerLocator: undefined,\n dockerDataVolume: undefined,\n quarantined: undefined,\n acceptanceUnknown: undefined,\n });\n}\nexport function nextGeneration(existing: AllocationIntent | undefined): number {\n return existing === undefined ? 1 : existing.generation + 1;\n}\nexport function isActiveIntent(intent: AllocationIntent): boolean {\n return OCCUPYING_STATES.has(intent.state);\n}\nexport interface AdmissionLock {\n readonly executionDomainId: string;\n readonly fencingToken: number;\n release(): Promise<void>;\n}\nexport async function acquireDomainAdmissionLock(repository: IncusRepository, executionDomainId: string, options: {\n readonly waitMs?: number;\n} = {}): Promise<AdmissionLock> {\n const owner = currentOwner();\n const waitMs = options.waitMs ?? LOCK_WAIT_MS;\n if (!Number.isFinite(waitMs) || waitMs < 0) {\n throw new TypeError(\"Incus admission lock waitMs must be a finite non-negative number.\");\n }\n const deadline = Date.now() + waitMs;\n let expected: IncusAdmissionLease | undefined;\n for (;;) {\n const acquired = await repository.acquireAdmission(executionDomainId, owner, expected);\n if (acquired.acquired) {\n let released = false;\n return {\n executionDomainId,\n fencingToken: acquired.lease.fencingToken,\n release: async () => {\n if (released)\n return;\n released = true;\n if (!(await repository.releaseAdmission(acquired.lease))) {\n throw incusError(\"sandbox-capacity-unavailable\", `Incus admission lock ${JSON.stringify(executionDomainId)} lost its fencing token before release.`, [\"Stop new admission and reconcile the current IncusRepository lease owner.\"]);\n }\n },\n };\n }\n expected = ownerProvenDead(acquired.lease.owner) ? acquired.lease : undefined;\n if (Date.now() >= deadline) {\n throw incusError(\"sandbox-capacity-unavailable\", `Timed out waiting for the Incus admission lock for domain ${JSON.stringify(executionDomainId)}.`, [\"Retry after the owning control process exits; do not break a live admission lock.\"]);\n }\n await new Promise((resolve) => setTimeout(resolve, LOCK_RETRY_MS));\n }\n}\nexport function lostAllocationError(allocationId: string): IncusProviderError {\n return incusError(\"sandbox-allocation-lost\", `Sandbox allocation ${JSON.stringify(allocationId)} is active in the ledger but has no Incus instance.`, [\"Reconcile again after Incus inventory is available; do not recreate from a guessed locator.\"]);\n}\n"]}
|
|
1
|
+
{"version":3,"file":"ledger.js","sourceRoot":"","sources":["ledger.ts"],"names":[],"mappings":";;;AAkBA,0DAEC;AACD,gEAEC;AACD,oDAEC;AACD,sDAEC;AACD,0CAGC;AACD,sCAGC;AACD,wCAEC;AACD,oCAMC;AACD,gCAsCC;AACD,sDAQC;AAID,4DA+BC;AACD,wDAKC;AACD,kEAaC;AAmBD,0CA2HC;AACD,8CAkEC;AACD,wCAEC;AACD,wCAEC;AAMD,gEAiCC;AACD,kDAEC;AAvZD,qCAAmC;AACnC,wDAAyD;AACzD,6CAAuG;AACvG,2CAAkE;AAElE,iDAAoD;AAA3C,kHAAA,iBAAiB,OAAA;AAE1B,MAAM,eAAe,GAAG,IAAI,GAAG,CAAkB,CAAC,WAAW,CAAC,CAAC,CAAC;AAChE,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAkB;IAC9C,UAAU;IACV,UAAU;IACV,OAAO;IACP,YAAY;IACZ,mBAAmB;IACnB,MAAM;CACT,CAAC,CAAC;AACH,MAAM,YAAY,GAAG,KAAK,CAAC;AAC3B,MAAM,aAAa,GAAG,EAAE,CAAC;AACzB,SAAgB,uBAAuB,CAAC,UAA2B,EAAE,MAAwB;IACzF,OAAO,UAAU,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAC;AAChD,CAAC;AACD,SAAgB,0BAA0B,CAAC,UAA2B,EAAE,OAAyB,EAAE,IAAsB;IACrH,OAAO,UAAU,CAAC,oBAAoB,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;AAC1D,CAAC;AACD,SAAgB,oBAAoB,CAAC,UAA2B,EAAE,YAAoB;IAClF,OAAO,UAAU,CAAC,aAAa,CAAC,YAAY,CAAC,CAAC;AAClD,CAAC;AACD,SAAgB,qBAAqB,CAAC,UAA2B;IAC7D,OAAO,UAAU,CAAC,eAAe,EAAE,CAAC;AACxC,CAAC;AACD,SAAgB,eAAe,CAAC,YAAoB;IAChD,MAAM,OAAO,GAAG,YAAY,CAAC,UAAU,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;IAC/D,OAAO,MAAM,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;AACxC,CAAC;AACD,SAAgB,aAAa,CAAC,YAAoB;IAC9C,MAAM,OAAO,GAAG,YAAY,CAAC,UAAU,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;IAC/D,OAAO,MAAM,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC;AAC3C,CAAC;AACD,SAAgB,cAAc,CAAC,YAAoB;IAC/C,OAAO,QAAQ,YAAY,EAAE,CAAC;AAClC,CAAC;AACD,SAAgB,YAAY;IACxB,OAAO,MAAM,CAAC,MAAM,CAAC;QACjB,IAAI,EAAE,IAAA,kBAAQ,GAAE;QAChB,GAAG,EAAE,OAAO,CAAC,GAAG;QAChB,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KACtC,CAAC,CAAC;AACP,CAAC;AACD,SAAgB,UAAU,CAAC,QAAuB;IAW9C,MAAM,aAAa,GAAG,QAAQ,CAAC,MAAM,CAAC,2BAAc,CAAC,UAAU,CAAC,CAAC;IACjE,MAAM,UAAU,GAAG,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;IACnF,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC,2BAAc,CAAC,GAAG,CAAC,CAAC;IACnD,MAAM,GAAG,GAAG,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC9D,OAAO;QACH,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,2BAAc,CAAC,YAAY,CAAC,KAAK,SAAS;YAC1D,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC,EAAE,YAAY,EAAE,QAAQ,CAAC,MAAM,CAAC,2BAAc,CAAC,YAAY,CAAC,EAAE,CAAC;QACrE,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,2BAAc,CAAC,WAAW,CAAC,KAAK,SAAS;YACzD,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC,EAAE,WAAW,EAAE,QAAQ,CAAC,MAAM,CAAC,2BAAc,CAAC,WAAW,CAAC,EAAE,CAAC;QACnE,GAAG,CAAC,UAAU,KAAK,SAAS,IAAI,MAAM,CAAC,aAAa,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACvF,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,2BAAc,CAAC,cAAc,CAAC,KAAK,SAAS;YAC5D,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC,EAAE,cAAc,EAAE,QAAQ,CAAC,MAAM,CAAC,2BAAc,CAAC,cAAc,CAAC,EAAE,CAAC;QACzE,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,2BAAc,CAAC,iBAAiB,CAAC,KAAK,SAAS;YAC/D,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC,EAAE,iBAAiB,EAAE,QAAQ,CAAC,MAAM,CAAC,2BAAc,CAAC,iBAAiB,CAAC,EAAE,CAAC;QAC/E,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,2BAAc,CAAC,cAAc,CAAC,KAAK,SAAS;YAC5D,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC,EAAE,cAAc,EAAE,QAAQ,CAAC,MAAM,CAAC,2BAAc,CAAC,cAAc,CAAC,EAAE,CAAC;QACzE,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,2BAAc,CAAC,IAAI,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,CAAC,MAAM,CAAC,2BAAc,CAAC,IAAI,CAAC,EAAE,CAAC;QAC7G,GAAG,CAAC,GAAG,KAAK,SAAS,IAAI,MAAM,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAClE,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,2BAAc,CAAC,SAAS,CAAC,KAAK,SAAS;YACvD,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC,EAAE,SAAS,EAAE,QAAQ,CAAC,MAAM,CAAC,2BAAc,CAAC,SAAS,CAAC,EAAE,CAAC;KAClE,CAAC;AACN,CAAC;AACD,SAAgB,qBAAqB,CAAC,QAAuB,EAAE,MAAwB;IACnF,MAAM,IAAI,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC;IAClC,OAAO,IAAI,CAAC,YAAY,KAAK,MAAM,CAAC,YAAY;WACzC,IAAI,CAAC,UAAU,KAAK,MAAM,CAAC,UAAU;WACrC,IAAI,CAAC,iBAAiB,KAAK,MAAM,CAAC,iBAAiB;WACnD,IAAI,CAAC,cAAc,KAAK,MAAM,CAAC,cAAc;WAC7C,IAAI,CAAC,cAAc,KAAK,MAAM,CAAC,cAAc;WAC7C,IAAI,CAAC,WAAW,KAAK,MAAM,CAAC,WAAW,CAAC;AACnD,CAAC;AACD,SAAS,eAAe,CAAC,KAAsB;IAC3C,OAAO,IAAA,qCAAmB,EAAC,KAAK,CAAC,KAAK,QAAQ,CAAC;AACnD,CAAC;AACD,SAAgB,wBAAwB,CAAC,OAAoC,EAAE,SAAmC,EAAE,KAGnH,EAAE,UAAkC,EAAE;IACnC,MAAM,GAAG,GAAG,IAAI,GAAG,EAAU,CAAC;IAC9B,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC3B,IAAI,gBAAgB,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC;eAC/B,MAAM,CAAC,iBAAiB,KAAK,KAAK,CAAC,iBAAiB;eACpD,MAAM,CAAC,OAAO,KAAK,KAAK,CAAC,OAAO,EAAE,CAAC;YACtC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;QACjC,CAAC;IACL,CAAC;IACD,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;QAC/B,MAAM,IAAI,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC;QAClC,IAAI,IAAI,CAAC,YAAY,KAAK,SAAS;eAC5B,IAAI,CAAC,UAAU,KAAK,SAAS;eAC7B,IAAI,CAAC,iBAAiB,KAAK,KAAK,CAAC,iBAAiB;eAClD,IAAI,CAAC,cAAc,KAAK,SAAS;eACjC,IAAI,CAAC,cAAc,KAAK,SAAS;eACjC,IAAI,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;YACpC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QAC/B,CAAC;IACL,CAAC;IACD,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC3B,MAAM,YAAY,GAAG,MAAM,CAAC,MAAM,CAAC,2BAAc,CAAC,YAAY,CAAC,CAAC;QAChE,MAAM,iBAAiB,GAAG,MAAM,CAAC,MAAM,CAAC,2BAAc,CAAC,iBAAiB,CAAC,CAAC;QAC1E,IAAI,YAAY,KAAK,SAAS,IAAI,iBAAiB,KAAK,KAAK,CAAC,iBAAiB,EAAE,CAAC;YAC9E,GAAG,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;QAC1B,CAAC;IACL,CAAC;IACD,OAAO,GAAG,CAAC;AACf,CAAC;AACD,SAAgB,sBAAsB,CAAC,OAAoC,EAAE,SAAmC,EAAE,iBAAyB,EAAE,OAAe,EAAE,UAAkC,EAAE;IAC9L,OAAO,wBAAwB,CAAC,OAAO,EAAE,SAAS,EAAE;QAChD,iBAAiB;QACjB,OAAO;KACV,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC;AACrB,CAAC;AACD,SAAgB,2BAA2B,CAAC,MAAmB,EAAE,MAAwB;IACrF,MAAM,YAAY,GAAG,MAAM,CAAC,MAAM,CAAC,2BAAc,CAAC,YAAY,CAAC,CAAC;IAChE,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,CAAC,2BAAc,CAAC,UAAU,CAAC,CAAC;IAC5D,MAAM,iBAAiB,GAAG,MAAM,CAAC,MAAM,CAAC,2BAAc,CAAC,iBAAiB,CAAC,CAAC;IAC1E,MAAM,cAAc,GAAG,MAAM,CAAC,MAAM,CAAC,2BAAc,CAAC,cAAc,CAAC,CAAC;IACpE,MAAM,cAAc,GAAG,MAAM,CAAC,MAAM,CAAC,2BAAc,CAAC,cAAc,CAAC,CAAC;IACpE,MAAM,WAAW,GAAG,MAAM,CAAC,MAAM,CAAC,2BAAc,CAAC,WAAW,CAAC,CAAC;IAC9D,OAAO,YAAY,KAAK,MAAM,CAAC,YAAY;WACpC,UAAU,KAAK,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC;WACxC,iBAAiB,KAAK,MAAM,CAAC,iBAAiB;WAC9C,cAAc,KAAK,MAAM,CAAC,cAAc;WACxC,cAAc,KAAK,MAAM,CAAC,cAAc;WACxC,WAAW,KAAK,MAAM,CAAC,WAAW,CAAC;AAC9C,CAAC;AACD;;;;;;GAMG;AACH,SAAS,gCAAgC,CAAC,QAAuB,EAAE,MAAmB,EAAE,MAAwB;IAC5G,IAAI,CAAC,qBAAqB,CAAC,QAAQ,EAAE,MAAM,CAAC;QACxC,OAAO,KAAK,CAAC;IACjB,MAAM,UAAU,GAAG,QAAQ,CAAC,eAAe,EAAE,UAAU,CAAC;IACxD,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ;WACxB,MAAM,CAAC,WAAW,KAAK,OAAO;WAC9B,UAAU,EAAE,IAAI,KAAK,MAAM;WAC3B,UAAU,CAAC,IAAI,KAAK,MAAM,CAAC,WAAW;WACtC,UAAU,CAAC,MAAM,KAAK,MAAM,CAAC,IAAI;WACjC,UAAU,CAAC,SAAS,KAAK,MAAM,CAAC;AAC3C,CAAC;AACM,KAAK,UAAU,eAAe,CAAC,UAA2B,EAAE,OAAqB,EAAE,KAIzF;IAIG,MAAM,OAAO,GAAG,MAAM,qBAAqB,CAAC,UAAU,CAAC,CAAC;IACxD,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,aAAa,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAC7D,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,WAAW,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,WAAW,CAAC,CAAC;IAC5E,MAAM,IAAI,GAAuB,EAAE,CAAC;IACpC,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC3B,IAAI,MAAM,CAAC,iBAAiB,KAAK,KAAK,CAAC,iBAAiB,IAAI,MAAM,CAAC,OAAO,KAAK,KAAK,CAAC,OAAO,EAAE,CAAC;YAC3F,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YAClB,SAAS;QACb,CAAC;QACD,IAAI,eAAe,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;YACpC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YAClB,SAAS;QACb,CAAC;QACD,MAAM,QAAQ,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,qBAAqB,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC;QACzF,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,2BAA2B,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC;QAC3F,MAAM,UAAU,GAAG,CAAC,eAAe,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAClD,IAAI,QAAQ,KAAK,SAAS,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACjD,IAAI,MAAM,CAAC,WAAW,KAAK,IAAI,EAAE,CAAC;gBAC9B,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;gBAClB,SAAS;YACb,CAAC;YACD,IAAI,UAAU,IAAI,CAAC,MAAM,CAAC,KAAK,KAAK,UAAU,IAAI,MAAM,CAAC,KAAK,KAAK,UAAU,CAAC,EAAE,CAAC;gBAC7E,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;gBAClB,SAAS;YACb,CAAC;YACD,IAAI,UAAU,EAAE,CAAC;gBACb,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;gBAClB,SAAS;YACb,CAAC;YACD,+DAA+D;YAC/D,uEAAuE;YACvE,sEAAsE;YACtE,uEAAuE;YACvE,yCAAyC;YACzC,IAAI,CAAC,IAAI,CAAC,MAAM,iBAAiB,CAAC,UAAU,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;YAC/E,SAAS;QACb,CAAC;QACD,IAAI,MAAM,CAAC,KAAK,KAAK,mBAAmB,EAAE,CAAC;YACvC,MAAM,aAAa,GAAG,MAAM,CAAC,iBAAiB,KAAK,eAAe,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC;YACvF,IAAI,MAAM,CAAC,WAAW,KAAK,IAAI,IAAI,aAAa,KAAK,SAAS,EAAE,CAAC;gBAC7D,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;gBAClB,SAAS;YACb,CAAC;YACD,IAAI,CAAC,IAAI,CAAC,MAAM,iBAAiB,CAAC,UAAU,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;YAC/E,SAAS;QACb,CAAC;QACD,IAAI,eAAe,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;YAChC,IAAI,CAAC,IAAI,CAAC,MAAM,iBAAiB,CAAC,UAAU,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;YAC/E,SAAS;QACb,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACtB,CAAC;IACD,uEAAuE;IACvE,wEAAwE;IACxE,wEAAwE;IACxE,2EAA2E;IAC3E,MAAM,mBAAmB,GAAG,MAAM,OAAO,CAAC,aAAa,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACvE,MAAM,iBAAiB,GAAG,MAAM,OAAO,CAAC,WAAW,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,WAAW,CAAC,CAAC;IACtF,KAAK,MAAM,QAAQ,IAAI,mBAAmB,EAAE,CAAC;QACzC,MAAM,IAAI,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC;QAClC,IAAI,IAAI,CAAC,iBAAiB,KAAK,KAAK,CAAC,iBAAiB;YAClD,SAAS;QACb,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,cAAc,CAAC,MAAM,CAAC;eACnD,MAAM,CAAC,iBAAiB,KAAK,KAAK,CAAC,iBAAiB;eACpD,MAAM,CAAC,OAAO,KAAK,KAAK,CAAC,OAAO;eAChC,qBAAqB,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC;QAChD,IAAI,KAAK;YACL,SAAS;QACb,MAAM,IAAA,sBAAU,EAAC,yBAAyB,EAAE,kBAAkB,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,4BAA4B,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,iBAAiB,CAAC,sDAAsD,EAAE,CAAC,yJAAyJ,CAAC,CAAC,CAAC;IACvX,CAAC;IACD,KAAK,MAAM,MAAM,IAAI,iBAAiB,EAAE,CAAC;QACrC,IAAI,MAAM,CAAC,MAAM,CAAC,2BAAc,CAAC,iBAAiB,CAAC,KAAK,KAAK,CAAC,iBAAiB;YAC3E,SAAS;QACb,IAAI,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,cAAc,CAAC,MAAM,CAAC;eACjD,MAAM,CAAC,iBAAiB,KAAK,KAAK,CAAC,iBAAiB;eACpD,MAAM,CAAC,OAAO,KAAK,KAAK,CAAC,OAAO;eAChC,2BAA2B,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;QACpD,IAAI,CAAC,KAAK,EAAE,CAAC;YACT,KAAK,MAAM,QAAQ,IAAI,IAAI,EAAE,CAAC;gBAC1B,IAAI,QAAQ,CAAC,iBAAiB,KAAK,KAAK,CAAC,iBAAiB,IAAI,QAAQ,CAAC,OAAO,KAAK,KAAK,CAAC,OAAO;uBACzF,CAAC,QAAQ,CAAC,KAAK,KAAK,UAAU,IAAI,QAAQ,CAAC,KAAK,KAAK,UAAU,CAAC;oBACnE,SAAS;gBACb,qEAAqE;gBACrE,iEAAiE;gBACjE,mEAAmE;gBACnE,iDAAiD;gBACjD,MAAM,OAAO,GAAG,MAAM,oBAAoB,CAAC,UAAU,EAAE,QAAQ,CAAC,YAAY,CAAC,CAAC;gBAC9E,IAAI,OAAO,KAAK,SAAS,IAAI,OAAO,CAAC,UAAU,KAAK,QAAQ,CAAC,UAAU;uBAChE,OAAO,CAAC,iBAAiB,KAAK,KAAK,CAAC,iBAAiB,IAAI,OAAO,CAAC,OAAO,KAAK,KAAK,CAAC,OAAO;uBAC1F,OAAO,CAAC,WAAW,KAAK,KAAK,CAAC,WAAW;uBACzC,OAAO,CAAC,gBAAgB,KAAK,MAAM,CAAC,IAAI,IAAI,OAAO,CAAC,eAAe,KAAK,SAAS;oBACpF,SAAS;gBACb,IAAI,OAAO,CAAC,KAAK,KAAK,UAAU,EAAE,CAAC;oBAC/B,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,WAAW,CAAC,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC,eAAe,CAAC,CAAC;oBACnF,KAAK,GAAG,QAAQ,KAAK,SAAS,IAAI,QAAQ,CAAC,IAAI,KAAK,OAAO,CAAC,eAAe;2BACpE,gCAAgC,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;gBACvE,CAAC;qBACI,IAAI,cAAc,CAAC,OAAO,CAAC,EAAE,CAAC;oBAC/B,iEAAiE;oBACjE,kEAAkE;oBAClE,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,SAAS,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,WAAW,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;oBACzF,KAAK,GAAG,SAAS,KAAK,SAAS,IAAI,2BAA2B,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;gBACvF,CAAC;gBACD,IAAI,KAAK;oBACL,MAAM;YACd,CAAC;QACL,CAAC;QACD,IAAI,KAAK;YACL,SAAS;QACb,MAAM,IAAA,sBAAU,EAAC,yBAAyB,EAAE,gBAAgB,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,4BAA4B,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,iBAAiB,CAAC,sDAAsD,EAAE,CAAC,uJAAuJ,CAAC,CAAC,CAAC;IACjX,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC;QACjB,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC;QAC5B,SAAS,EAAE,mBAAmB;KACjC,CAAC,CAAC;AACP,CAAC;AACM,KAAK,UAAU,iBAAiB,CAAC,UAA2B,EAAE,OAAqB,EAAE,MAAwB,EAAE,OAAe;IACjI,MAAM,OAAO,GAAG,MAAM,oBAAoB,CAAC,UAAU,EAAE,MAAM,CAAC,YAAY,CAAC,CAAC;IAC5E,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;QACxB,MAAM,IAAA,sBAAU,EAAC,yBAAyB,EAAE,sBAAsB,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,YAAY,CAAC,8CAA8C,EAAE,CAAC,+CAA+C,CAAC,CAAC,CAAC;IAC5M,CAAC;IACD,IAAI,OAAO,CAAC,UAAU,KAAK,MAAM,CAAC,UAAU,EAAE,CAAC;QAC3C,MAAM,IAAA,sBAAU,EAAC,4BAA4B,EAAE,qCAAqC,OAAO,CAAC,UAAU,qCAAqC,MAAM,CAAC,UAAU,GAAG,EAAE,CAAC,iDAAiD,CAAC,CAAC,CAAC;IAC1N,CAAC;IACD,IAAI,OAAO,CAAC,iBAAiB,KAAK,MAAM,CAAC,iBAAiB,IAAI,OAAO,CAAC,OAAO,KAAK,OAAO,EAAE,CAAC;QACxF,MAAM,IAAA,sBAAU,EAAC,4BAA4B,EAAE,wEAAwE,EAAE,CAAC,4DAA4D,CAAC,CAAC,CAAC;IAC7L,CAAC;IACD,MAAM,SAAS,GAAG,OAAO,CAAC,KAAK,KAAK,mBAAmB;QACnD,CAAC,CAAC,OAAO;QACT,CAAC,CAAC,MAAM,0BAA0B,CAAC,UAAU,EAAE,OAAO,EAAE,EAAE,GAAG,OAAO,EAAE,KAAK,EAAE,mBAAmB,EAAE,CAAC,CAAC;IACxG,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC;IACvD,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,WAAW,CAAC,OAAO,EAAE,SAAS,CAAC,WAAW,CAAC,CAAC;IAC1E,MAAM,gBAAgB,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,qBAAqB,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC,CAAC;IACpG,MAAM,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,2BAA2B,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC,CAAC;IACtG,MAAM,YAAY,GAAG,gBAAgB,EAAE,IAAI,IAAI,SAAS,CAAC,eAAe,IAAI,eAAe,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC;IACpH,MAAM,UAAU,GAAG,cAAc,EAAE,IAAI,IAAI,SAAS,CAAC,gBAAgB,IAAI,aAAa,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC;IAC/G,MAAM,aAAa,GAAG,gBAAgB,IAAI,SAAS,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,KAAK,YAAY,CAAC,CAAC;IACzG,MAAM,WAAW,GAAG,cAAc,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,KAAK,UAAU,CAAC,CAAC;IACjG,IAAI,aAAa,KAAK,SAAS,IAAI,CAAC,qBAAqB,CAAC,aAAa,EAAE,SAAS,CAAC,EAAE,CAAC;QAClF,MAAM,IAAA,sBAAU,EAAC,4BAA4B,EAAE,sCAAsC,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,uCAAuC,EAAE,CAAC,gGAAgG,CAAC,CAAC,CAAC;IAClQ,CAAC;IACD,MAAM,oBAAoB,GAAG,aAAa,KAAK,SAAS;WACjD,WAAW,KAAK,SAAS;WACzB,gCAAgC,CAAC,aAAa,EAAE,WAAW,EAAE,SAAS,CAAC,CAAC;IAC/E,IAAI,WAAW,KAAK,SAAS;WACtB,CAAC,2BAA2B,CAAC,WAAW,EAAE,SAAS,CAAC;WACpD,CAAC,oBAAoB,EAAE,CAAC;QAC3B,MAAM,IAAA,sBAAU,EAAC,4BAA4B,EAAE,oCAAoC,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,uCAAuC,EAAE,CAAC,8FAA8F,CAAC,CAAC,CAAC;IAC5P,CAAC;IACD,IAAI,SAAS,CAAC,WAAW,KAAK,IAAI,EAAE,CAAC;QACjC,MAAM,aAAa,GAAG,SAAS,CAAC,iBAAiB,KAAK,eAAe,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,aAAa,CAAC;QACpG,IAAI,aAAa,KAAK,SAAS,EAAE,CAAC;YAC9B,MAAM,IAAA,sBAAU,EAAC,4BAA4B,EAAE,oBAAoB,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,YAAY,CAAC,oDAAoD,EAAE,CAAC,iHAAiH,CAAC,CAAC,CAAC;QACxR,CAAC;IACL,CAAC;IACD,IAAI,CAAC;QACD,IAAI,aAAa,KAAK,SAAS;YAC3B,MAAM,OAAO,CAAC,cAAc,CAAC,OAAO,EAAE,aAAa,CAAC,IAAI,CAAC,CAAC;QAC9D,IAAI,WAAW,KAAK,SAAS;YACzB,MAAM,OAAO,CAAC,YAAY,CAAC,OAAO,EAAE,SAAS,CAAC,WAAW,EAAE,WAAW,CAAC,IAAI,CAAC,CAAC;QACjF,MAAM,OAAO,CAAC,UAAU,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;QAChD,MAAM,OAAO,CAAC,gBAAgB,CAAC,OAAO,EAAE,SAAS,CAAC,WAAW,EAAE,UAAU,CAAC,CAAC;QAC3E,MAAM,aAAa,GAAG,KAAK,IAAmB,EAAE;YAC5C,MAAM,gBAAgB,GAAG,MAAM,OAAO,CAAC,WAAW,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;YAC1E,MAAM,cAAc,GAAG,MAAM,OAAO,CAAC,SAAS,CAAC,OAAO,EAAE,SAAS,CAAC,WAAW,EAAE,UAAU,CAAC,CAAC;YAC3F,IAAI,gBAAgB,KAAK,SAAS,IAAI,cAAc,KAAK,SAAS,EAAE,CAAC;gBACjE,MAAM,IAAA,sBAAU,EAAC,4BAA4B,EAAE,oBAAoB,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,YAAY,CAAC,mCAAmC,EAAE,CAAC,0FAA0F,CAAC,CAAC,CAAC;YAChP,CAAC;QACL,CAAC,CAAC;QACF,MAAM,aAAa,EAAE,CAAC;IAC1B,CAAC;IACD,OAAO,KAAK,EAAE,CAAC;QACX,MAAM,IAAA,sBAAU,EAAC,4BAA4B,EAAE,oCAAoC,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,YAAY,CAAC,aAAa,EAAE,CAAC,4IAA4I,CAAC,EAAE,KAAK,CAAC,CAAC;IACnS,CAAC;IACD,OAAO,0BAA0B,CAAC,UAAU,EAAE,SAAS,EAAE;QACrD,GAAG,SAAS;QACZ,KAAK,EAAE,WAAW;QAClB,eAAe,EAAE,SAAS;QAC1B,gBAAgB,EAAE,SAAS;QAC3B,WAAW,EAAE,SAAS;QACtB,iBAAiB,EAAE,SAAS;KAC/B,CAAC,CAAC;AACP,CAAC;AACD,SAAgB,cAAc,CAAC,QAAsC;IACjE,OAAO,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,UAAU,GAAG,CAAC,CAAC;AAChE,CAAC;AACD,SAAgB,cAAc,CAAC,MAAwB;IACnD,OAAO,gBAAgB,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC9C,CAAC;AAMM,KAAK,UAAU,0BAA0B,CAAC,UAA2B,EAAE,iBAAyB,EAAE,UAErG,EAAE;IACF,MAAM,KAAK,GAAG,YAAY,EAAE,CAAC;IAC7B,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,YAAY,CAAC;IAC9C,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,MAAM,GAAG,CAAC,EAAE,CAAC;QACzC,MAAM,IAAI,SAAS,CAAC,mEAAmE,CAAC,CAAC;IAC7F,CAAC;IACD,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC;IACrC,IAAI,QAAyC,CAAC;IAC9C,SAAS,CAAC;QACN,MAAM,QAAQ,GAAG,MAAM,UAAU,CAAC,gBAAgB,CAAC,iBAAiB,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC;QACvF,IAAI,QAAQ,CAAC,QAAQ,EAAE,CAAC;YACpB,IAAI,QAAQ,GAAG,KAAK,CAAC;YACrB,OAAO;gBACH,iBAAiB;gBACjB,YAAY,EAAE,QAAQ,CAAC,KAAK,CAAC,YAAY;gBACzC,OAAO,EAAE,KAAK,IAAI,EAAE;oBAChB,IAAI,QAAQ;wBACR,OAAO;oBACX,QAAQ,GAAG,IAAI,CAAC;oBAChB,IAAI,CAAC,CAAC,MAAM,UAAU,CAAC,gBAAgB,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;wBACvD,MAAM,IAAA,sBAAU,EAAC,8BAA8B,EAAE,wBAAwB,IAAI,CAAC,SAAS,CAAC,iBAAiB,CAAC,yCAAyC,EAAE,CAAC,2EAA2E,CAAC,CAAC,CAAC;oBACxO,CAAC;gBACL,CAAC;aACJ,CAAC;QACN,CAAC;QACD,QAAQ,GAAG,eAAe,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;QAC9E,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,QAAQ,EAAE,CAAC;YACzB,MAAM,IAAA,sBAAU,EAAC,8BAA8B,EAAE,6DAA6D,IAAI,CAAC,SAAS,CAAC,iBAAiB,CAAC,GAAG,EAAE,CAAC,mFAAmF,CAAC,CAAC,CAAC;QAC/O,CAAC;QACD,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC,CAAC;IACvE,CAAC;AACL,CAAC;AACD,SAAgB,mBAAmB,CAAC,YAAoB;IACpD,OAAO,IAAA,sBAAU,EAAC,yBAAyB,EAAE,sBAAsB,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,qDAAqD,EAAE,CAAC,6FAA6F,CAAC,CAAC,CAAC;AAC3P,CAAC","sourcesContent":["import { hostname } from \"node:os\";\nimport { classifyRunIdentity } from \"../run-identity.ts\";\nimport { INCUS_METADATA, type IncusControl, type IncusInstance, type IncusVolume } from \"./control.ts\";\nimport { incusError, type IncusProviderError } from \"./errors.ts\";\nimport { type AllocationIntent, type AllocationOwner, type AllocationState, type IncusAdmissionLease, type IncusRepository, } from \"./repository.ts\";\nexport { ALLOCATION_STATES } from \"./repository.ts\";\nexport type { AllocationIntent, AllocationOwner, AllocationState } from \"./repository.ts\";\nconst RELEASED_STATES = new Set<AllocationState>([\"destroyed\"]);\nconst OCCUPYING_STATES = new Set<AllocationState>([\n \"reserved\",\n \"creating\",\n \"ready\",\n \"handed-off\",\n \"destroy-requested\",\n \"lost\",\n]);\nconst LOCK_WAIT_MS = 15000;\nconst LOCK_RETRY_MS = 50;\nexport function reserveAllocationIntent(repository: IncusRepository, intent: AllocationIntent): Promise<AllocationIntent> {\n return repository.reserveAllocation(intent);\n}\nexport function transitionAllocationIntent(repository: IncusRepository, current: AllocationIntent, next: AllocationIntent): Promise<AllocationIntent> {\n return repository.transitionAllocation(current, next);\n}\nexport function readAllocationIntent(repository: IncusRepository, allocationId: string): Promise<AllocationIntent | undefined> {\n return repository.getAllocation(allocationId);\n}\nexport function listAllocationIntents(repository: IncusRepository): Promise<readonly AllocationIntent[]> {\n return repository.listAllocations();\n}\nexport function instanceNameFor(allocationId: string): string {\n const compact = allocationId.replaceAll(\"-\", \"\").toLowerCase();\n return `ne-${compact.slice(0, 20)}`;\n}\nexport function volumeNameFor(allocationId: string): string {\n const compact = allocationId.replaceAll(\"-\", \"\").toLowerCase();\n return `ne-${compact.slice(0, 18)}-dd`;\n}\nexport function executionIdFor(allocationId: string): string {\n return `exec-${allocationId}`;\n}\nexport function currentOwner(): AllocationOwner {\n return Object.freeze({\n host: hostname(),\n pid: process.pid,\n startedAt: new Date().toISOString(),\n });\n}\nexport function metadataOf(instance: IncusInstance): {\n readonly allocationId?: string;\n readonly executionId?: string;\n readonly generation?: number;\n readonly artifactDigest?: string;\n readonly executionDomainId?: string;\n readonly provisionToken?: string;\n readonly host?: string;\n readonly pid?: number;\n readonly startedAt?: string;\n} {\n const generationRaw = instance.config[INCUS_METADATA.generation];\n const generation = generationRaw === undefined ? undefined : Number(generationRaw);\n const pidRaw = instance.config[INCUS_METADATA.pid];\n const pid = pidRaw === undefined ? undefined : Number(pidRaw);\n return {\n ...(instance.config[INCUS_METADATA.allocationId] === undefined\n ? {}\n : { allocationId: instance.config[INCUS_METADATA.allocationId] }),\n ...(instance.config[INCUS_METADATA.executionId] === undefined\n ? {}\n : { executionId: instance.config[INCUS_METADATA.executionId] }),\n ...(generation !== undefined && Number.isSafeInteger(generation) ? { generation } : {}),\n ...(instance.config[INCUS_METADATA.artifactDigest] === undefined\n ? {}\n : { artifactDigest: instance.config[INCUS_METADATA.artifactDigest] }),\n ...(instance.config[INCUS_METADATA.executionDomainId] === undefined\n ? {}\n : { executionDomainId: instance.config[INCUS_METADATA.executionDomainId] }),\n ...(instance.config[INCUS_METADATA.provisionToken] === undefined\n ? {}\n : { provisionToken: instance.config[INCUS_METADATA.provisionToken] }),\n ...(instance.config[INCUS_METADATA.host] === undefined ? {} : { host: instance.config[INCUS_METADATA.host] }),\n ...(pid !== undefined && Number.isSafeInteger(pid) ? { pid } : {}),\n ...(instance.config[INCUS_METADATA.startedAt] === undefined\n ? {}\n : { startedAt: instance.config[INCUS_METADATA.startedAt] }),\n };\n}\nexport function metadataMatchesIntent(instance: IncusInstance, intent: AllocationIntent): boolean {\n const meta = metadataOf(instance);\n return meta.allocationId === intent.allocationId\n && meta.generation === intent.generation\n && meta.executionDomainId === intent.executionDomainId\n && meta.artifactDigest === intent.artifactDigest\n && meta.provisionToken === intent.provisionToken\n && meta.executionId === intent.executionId;\n}\nfunction ownerProvenDead(owner: AllocationOwner): boolean {\n return classifyRunIdentity(owner) === \"orphan\";\n}\nexport function unionActiveAllocationIds(intents: readonly AllocationIntent[], instances: readonly IncusInstance[], scope: {\n readonly executionDomainId: string;\n readonly project: string;\n}, volumes: readonly IncusVolume[] = []): ReadonlySet<string> {\n const ids = new Set<string>();\n for (const intent of intents) {\n if (OCCUPYING_STATES.has(intent.state)\n && intent.executionDomainId === scope.executionDomainId\n && intent.project === scope.project) {\n ids.add(intent.allocationId);\n }\n }\n for (const instance of instances) {\n const meta = metadataOf(instance);\n if (meta.allocationId !== undefined\n && meta.generation !== undefined\n && meta.executionDomainId === scope.executionDomainId\n && meta.artifactDigest !== undefined\n && meta.provisionToken !== undefined\n && meta.executionId !== undefined) {\n ids.add(meta.allocationId);\n }\n }\n for (const volume of volumes) {\n const allocationId = volume.config[INCUS_METADATA.allocationId];\n const executionDomainId = volume.config[INCUS_METADATA.executionDomainId];\n if (allocationId !== undefined && executionDomainId === scope.executionDomainId) {\n ids.add(allocationId);\n }\n }\n return ids;\n}\nexport function countActiveAllocations(intents: readonly AllocationIntent[], instances: readonly IncusInstance[], executionDomainId: string, project: string, volumes: readonly IncusVolume[] = []): number {\n return unionActiveAllocationIds(intents, instances, {\n executionDomainId,\n project,\n }, volumes).size;\n}\nexport function volumeMetadataMatchesIntent(volume: IncusVolume, intent: AllocationIntent): boolean {\n const allocationId = volume.config[INCUS_METADATA.allocationId];\n const generation = volume.config[INCUS_METADATA.generation];\n const executionDomainId = volume.config[INCUS_METADATA.executionDomainId];\n const artifactDigest = volume.config[INCUS_METADATA.artifactDigest];\n const provisionToken = volume.config[INCUS_METADATA.provisionToken];\n const executionId = volume.config[INCUS_METADATA.executionId];\n return allocationId === intent.allocationId\n && generation === String(intent.generation)\n && executionDomainId === intent.executionDomainId\n && artifactDigest === intent.artifactDigest\n && provisionToken === intent.provisionToken\n && executionId === intent.executionId;\n}\n/**\n * Incus creates a cross-project copy's dependent volume atomically with its\n * VM. There is a narrow acceptance window before the follow-up volume PATCH\n * can replace the source artifact metadata. During that window, the VM is\n * still the durable allocation's exact object, and its expanded `dockerdata`\n * device is the only evidence that permits deleting the copied volume.\n */\nfunction volumeIsDependentOnExactInstance(instance: IncusInstance, volume: IncusVolume, intent: AllocationIntent): boolean {\n if (!metadataMatchesIntent(instance, intent))\n return false;\n const dockerData = instance.expandedDevices?.dockerdata;\n return volume.type === \"custom\"\n && volume.contentType === \"block\"\n && dockerData?.type === \"disk\"\n && dockerData.pool === intent.storagePool\n && dockerData.source === volume.name\n && dockerData.dependent === \"true\";\n}\nexport async function reconcileDomain(repository: IncusRepository, control: IncusControl, scope: {\n readonly executionDomainId: string;\n readonly project: string;\n readonly storagePool: string;\n}): Promise<{\n readonly intents: readonly AllocationIntent[];\n readonly instances: readonly IncusInstance[];\n}> {\n const intents = await listAllocationIntents(repository);\n const instances = await control.listInstances(scope.project);\n const volumes = await control.listVolumes(scope.project, scope.storagePool);\n const next: AllocationIntent[] = [];\n for (const intent of intents) {\n if (intent.executionDomainId !== scope.executionDomainId || intent.project !== scope.project) {\n next.push(intent);\n continue;\n }\n if (RELEASED_STATES.has(intent.state)) {\n next.push(intent);\n continue;\n }\n const instance = instances.find((candidate) => metadataMatchesIntent(candidate, intent));\n const volume = volumes.find((candidate) => volumeMetadataMatchesIntent(candidate, intent));\n const ownerAlive = !ownerProvenDead(intent.owner);\n if (instance === undefined && volume === undefined) {\n if (intent.quarantined === true) {\n next.push(intent);\n continue;\n }\n if (ownerAlive && (intent.state === \"reserved\" || intent.state === \"creating\")) {\n next.push(intent);\n continue;\n }\n if (ownerAlive) {\n next.push(intent);\n continue;\n }\n // Even an absent allocation must cross the repository's fenced\n // destroy-requested state. In particular, a process can die after the\n // allocation became ready while an operator independently removes the\n // exact VM and volume; skipping the destroy protocol would attempt the\n // invalid ready -> destroyed transition.\n next.push(await destroyAllocation(repository, control, intent, scope.project));\n continue;\n }\n if (intent.state === \"destroy-requested\") {\n const awaitedObject = intent.acceptanceUnknown === \"volume-create\" ? volume : instance;\n if (intent.quarantined === true && awaitedObject === undefined) {\n next.push(intent);\n continue;\n }\n next.push(await destroyAllocation(repository, control, intent, scope.project));\n continue;\n }\n if (ownerProvenDead(intent.owner)) {\n next.push(await destroyAllocation(repository, control, intent, scope.project));\n continue;\n }\n next.push(intent);\n }\n // Re-read after detached destroy. The initial inventory can contain an\n // accepted clone whose dependent volume still has the source artifact's\n // metadata; classifying that already-destroyed snapshot as unregistered\n // would turn successful reconciliation into a false lost-allocation error.\n const reconciledInstances = await control.listInstances(scope.project);\n const reconciledVolumes = await control.listVolumes(scope.project, scope.storagePool);\n for (const instance of reconciledInstances) {\n const meta = metadataOf(instance);\n if (meta.executionDomainId !== scope.executionDomainId)\n continue;\n const owned = next.some((intent) => isActiveIntent(intent)\n && intent.executionDomainId === scope.executionDomainId\n && intent.project === scope.project\n && metadataMatchesIntent(instance, intent));\n if (owned)\n continue;\n throw incusError(\"sandbox-allocation-lost\", `Incus instance ${JSON.stringify(instance.name)} claims execution domain ${JSON.stringify(scope.executionDomainId)} but has no exact IncusRepository allocation intent.`, [\"Keep the instance in place and restore or explicitly maintain the durable registry; never infer ownership from a name or delete an unregistered object.\"]);\n }\n for (const volume of reconciledVolumes) {\n if (volume.config[INCUS_METADATA.executionDomainId] !== scope.executionDomainId)\n continue;\n let owned = next.some((intent) => isActiveIntent(intent)\n && intent.executionDomainId === scope.executionDomainId\n && intent.project === scope.project\n && volumeMetadataMatchesIntent(volume, intent));\n if (!owned) {\n for (const observed of next) {\n if (observed.executionDomainId !== scope.executionDomainId || observed.project !== scope.project\n || (observed.state !== \"reserved\" && observed.state !== \"creating\"))\n continue;\n // Inventory requests are separate snapshots: a copy can appear after\n // listInstances, and its disk keeps source metadata until PATCH.\n // Re-read the exact allocation and object instead of treating that\n // acceptance window as an unregistered resource.\n const current = await readAllocationIntent(repository, observed.allocationId);\n if (current === undefined || current.generation !== observed.generation\n || current.executionDomainId !== scope.executionDomainId || current.project !== scope.project\n || current.storagePool !== scope.storagePool\n || current.dockerDataVolume !== volume.name || current.providerLocator === undefined)\n continue;\n if (current.state === \"creating\") {\n const instance = await control.getInstance(scope.project, current.providerLocator);\n owned = instance !== undefined && instance.name === current.providerLocator\n && volumeIsDependentOnExactInstance(instance, volume, current);\n }\n else if (isActiveIntent(current)) {\n // A completed PATCH may also have overtaken the volume snapshot.\n // Stable allocations must still present their own exact metadata.\n const refreshed = await control.getVolume(scope.project, scope.storagePool, volume.name);\n owned = refreshed !== undefined && volumeMetadataMatchesIntent(refreshed, current);\n }\n if (owned)\n break;\n }\n }\n if (owned)\n continue;\n throw incusError(\"sandbox-allocation-lost\", `Incus volume ${JSON.stringify(volume.name)} claims execution domain ${JSON.stringify(scope.executionDomainId)} but has no exact IncusRepository allocation intent.`, [\"Keep the volume in place and restore or explicitly maintain the durable registry; never infer ownership from a name or delete an unregistered object.\"]);\n }\n return Object.freeze({\n intents: Object.freeze(next),\n instances: reconciledInstances,\n });\n}\nexport async function destroyAllocation(repository: IncusRepository, control: IncusControl, intent: AllocationIntent, project: string): Promise<AllocationIntent> {\n const current = await readAllocationIntent(repository, intent.allocationId);\n if (current === undefined) {\n throw incusError(\"sandbox-allocation-lost\", `Sandbox allocation ${JSON.stringify(intent.allocationId)} disappeared from the ledger before destroy.`, [\"Reconcile the ledger against Incus inventory.\"]);\n }\n if (current.generation !== intent.generation) {\n throw incusError(\"sandbox-destroy-incomplete\", `Destroy fenced: ledger generation ${current.generation} does not match caller generation ${intent.generation}.`, [\"Retry destroy from the current generation only.\"]);\n }\n if (current.executionDomainId !== intent.executionDomainId || current.project !== project) {\n throw incusError(\"sandbox-destroy-incomplete\", \"Destroy fenced: execution domain or project does not match the caller.\", [\"Destroy only from the owning execution domain and project.\"]);\n }\n const requested = current.state === \"destroy-requested\"\n ? current\n : await transitionAllocationIntent(repository, current, { ...current, state: \"destroy-requested\" });\n const instances = await control.listInstances(project);\n const volumes = await control.listVolumes(project, requested.storagePool);\n const matchingInstance = instances.find((candidate) => metadataMatchesIntent(candidate, requested));\n const matchingVolume = volumes.find((candidate) => volumeMetadataMatchesIntent(candidate, requested));\n const instanceName = matchingInstance?.name ?? requested.providerLocator ?? instanceNameFor(requested.allocationId);\n const volumeName = matchingVolume?.name ?? requested.dockerDataVolume ?? volumeNameFor(requested.allocationId);\n const namedInstance = matchingInstance ?? instances.find((candidate) => candidate.name === instanceName);\n const namedVolume = matchingVolume ?? volumes.find((candidate) => candidate.name === volumeName);\n if (namedInstance !== undefined && !metadataMatchesIntent(namedInstance, requested)) {\n throw incusError(\"sandbox-destroy-incomplete\", `Refusing to destroy Incus instance ${JSON.stringify(instanceName)} with mismatched allocation metadata.`, [\"Inspect the instance identity; NiceEval only destroys the exact allocation generation it owns.\"]);\n }\n const inheritedCloneVolume = namedInstance !== undefined\n && namedVolume !== undefined\n && volumeIsDependentOnExactInstance(namedInstance, namedVolume, requested);\n if (namedVolume !== undefined\n && !volumeMetadataMatchesIntent(namedVolume, requested)\n && !inheritedCloneVolume) {\n throw incusError(\"sandbox-destroy-incomplete\", `Refusing to destroy Incus volume ${JSON.stringify(volumeName)} with mismatched allocation metadata.`, [\"Inspect the volume identity; NiceEval only destroys the exact allocation generation it owns.\"]);\n }\n if (requested.quarantined === true) {\n const awaitedObject = requested.acceptanceUnknown === \"volume-create\" ? namedVolume : namedInstance;\n if (awaitedObject === undefined) {\n throw incusError(\"sandbox-destroy-incomplete\", `Incus allocation ${JSON.stringify(requested.allocationId)} still has an acceptance-unknown create operation.`, [\"Keep the allocation quarantined until the expected Incus object appears and can be destroyed by exact metadata.\"]);\n }\n }\n try {\n if (namedInstance !== undefined)\n await control.deleteInstance(project, namedInstance.name);\n if (namedVolume !== undefined)\n await control.deleteVolume(project, requested.storagePool, namedVolume.name);\n await control.waitAbsent(project, instanceName);\n await control.waitVolumeAbsent(project, requested.storagePool, volumeName);\n const confirmAbsent = async (): Promise<void> => {\n const leftoverInstance = await control.getInstance(project, instanceName);\n const leftoverVolume = await control.getVolume(project, requested.storagePool, volumeName);\n if (leftoverInstance !== undefined || leftoverVolume !== undefined) {\n throw incusError(\"sandbox-destroy-incomplete\", `Incus allocation ${JSON.stringify(requested.allocationId)} still has a VM or custom volume.`, [\"Retry destroy; do not mark destroyed without absent receipts for both the VM and volume.\"]);\n }\n };\n await confirmAbsent();\n }\n catch (cause) {\n throw incusError(\"sandbox-destroy-incomplete\", `Failed to prove Incus allocation ${JSON.stringify(requested.allocationId)} is absent.`, [\"Retry destroy from the Incus control plane; NiceEval will not mark the allocation destroyed without absent receipts for the VM and volume.\"], cause);\n }\n return transitionAllocationIntent(repository, requested, {\n ...requested,\n state: \"destroyed\",\n providerLocator: undefined,\n dockerDataVolume: undefined,\n quarantined: undefined,\n acceptanceUnknown: undefined,\n });\n}\nexport function nextGeneration(existing: AllocationIntent | undefined): number {\n return existing === undefined ? 1 : existing.generation + 1;\n}\nexport function isActiveIntent(intent: AllocationIntent): boolean {\n return OCCUPYING_STATES.has(intent.state);\n}\nexport interface AdmissionLock {\n readonly executionDomainId: string;\n readonly fencingToken: number;\n release(): Promise<void>;\n}\nexport async function acquireDomainAdmissionLock(repository: IncusRepository, executionDomainId: string, options: {\n readonly waitMs?: number;\n} = {}): Promise<AdmissionLock> {\n const owner = currentOwner();\n const waitMs = options.waitMs ?? LOCK_WAIT_MS;\n if (!Number.isFinite(waitMs) || waitMs < 0) {\n throw new TypeError(\"Incus admission lock waitMs must be a finite non-negative number.\");\n }\n const deadline = Date.now() + waitMs;\n let expected: IncusAdmissionLease | undefined;\n for (;;) {\n const acquired = await repository.acquireAdmission(executionDomainId, owner, expected);\n if (acquired.acquired) {\n let released = false;\n return {\n executionDomainId,\n fencingToken: acquired.lease.fencingToken,\n release: async () => {\n if (released)\n return;\n released = true;\n if (!(await repository.releaseAdmission(acquired.lease))) {\n throw incusError(\"sandbox-capacity-unavailable\", `Incus admission lock ${JSON.stringify(executionDomainId)} lost its fencing token before release.`, [\"Stop new admission and reconcile the current IncusRepository lease owner.\"]);\n }\n },\n };\n }\n expected = ownerProvenDead(acquired.lease.owner) ? acquired.lease : undefined;\n if (Date.now() >= deadline) {\n throw incusError(\"sandbox-capacity-unavailable\", `Timed out waiting for the Incus admission lock for domain ${JSON.stringify(executionDomainId)}.`, [\"Retry after the owning control process exits; do not break a live admission lock.\"]);\n }\n await new Promise((resolve) => setTimeout(resolve, LOCK_RETRY_MS));\n }\n}\nexport function lostAllocationError(allocationId: string): IncusProviderError {\n return incusError(\"sandbox-allocation-lost\", `Sandbox allocation ${JSON.stringify(allocationId)} is active in the ledger but has no Incus instance.`, [\"Reconcile again after Incus inventory is available; do not recreate from a guessed locator.\"]);\n}\n"]}
|