@camstack/system 1.2.430 → 1.2.432

package/dist/file-host-worker.js

@@ -1,5 +1,5 @@
 require("./chunk-Cek0wNdY.js");
-const require_wal_maintenance = require("./wal-maintenance-BW1LIHi0.js");
+const require_wal_maintenance = require("./wal-maintenance-ChzCPUi2.js");
 let node_worker_threads = require("node:worker_threads");
 //#region src/builtins/sqlite-storage/file-host-worker.ts
 /**

package/dist/file-host-worker.mjs

@@ -1,4 +1,4 @@
-import { C as callControl, E as controlTargetOf, T as callVector, _ as collectTransferables, a as WalMaintenance, b as isFileHostWorkerData, c as SqliteSettingsBackend, h as serializeError, o as createVectorIndex, s as vectorProviderOf, w as callData, x as trustInput, y as isFileHostRequest } from "./wal-maintenance-vhPZLYuA.mjs";
+import { C as callControl, E as controlTargetOf, T as callVector, _ as collectTransferables, a as WalMaintenance, b as isFileHostWorkerData, c as SqliteSettingsBackend, h as serializeError, o as createVectorIndex, s as vectorProviderOf, w as callData, x as trustInput, y as isFileHostRequest } from "./wal-maintenance-uQGuStFW.mjs";
 import { parentPort, threadId, workerData } from "node:worker_threads";
 //#region src/builtins/sqlite-storage/file-host-worker.ts
 /**

package/dist/index.js

@@ -1,7 +1,7 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 const require_chunk = require("./chunk-Cek0wNdY.js");
-const require_dist = require("./dist-DxJdci75.js");
-const require_device_ca = require("./device-ca-CKiqh2Iu.js");
+const require_dist = require("./dist-BCKOeWu_.js");
+const require_device_ca = require("./device-ca-BCyAPmIj.js");
 const require_builtins_alerts_alerts_addon = require("./builtins/alerts/alerts.addon.js");
 require("./builtins/alerts/index.js");
 const require_builtins_calendars_calendars_addon = require("./builtins/calendars/calendars.addon.js");
@@ -22,13 +22,13 @@ require("./builtins/local-auth/index.js");
 const require_builtins_loki_logging_index = require("./builtins/loki-logging/index.js");
 const require_builtins_native_metrics_native_metrics_addon = require("./builtins/native-metrics/native-metrics.addon.js");
 const require_builtins_sqlite_storage_filesystem_storage_addon = require("./builtins/sqlite-storage/filesystem-storage.addon.js");
-const require_wal_maintenance = require("./wal-maintenance-BW1LIHi0.js");
+const require_wal_maintenance = require("./wal-maintenance-ChzCPUi2.js");
 const require_builtins_sqlite_storage_sqlite_settings_addon = require("./builtins/sqlite-storage/sqlite-settings.addon.js");
 const require_builtins_sqlite_storage_index = require("./builtins/sqlite-storage/index.js");
 const require_builtins_storage_orchestrator_storage_orchestrator_addon = require("./builtins/storage-orchestrator/storage-orchestrator.addon.js");
 require("./builtins/storage-orchestrator/index.js");
 const require_agent_https_names = require("./agent-https-names-CpUSuP4w.js");
-const require_constants = require("./constants-BcNaVkvI.js");
+const require_constants = require("./constants-DfP8V3eX.js");
 const require_builtins_system_config_system_config_addon = require("./builtins/system-config/system-config.addon.js");
 require("./builtins/system-config/index.js");
 const require_builtins_winston_logging_index = require("./builtins/winston-logging/index.js");
@@ -36,7 +36,7 @@ const require_custom_action_registry = require("./custom-action-registry-Bf_Ynag
 const require_tls = require("./tls-C5IYg3V5.js");
 const require_platform_key_source = require("./platform-key-source-Di7HrlGR.js");
 const require_resource_monitor = require("./resource-monitor-mio9dSCT.js");
-const require_restore_archive = require("./restore-archive-CQJNoqRK.js");
+const require_restore_archive = require("./restore-archive-DhHH7VQp.js");
 let zod = require("zod");
 let node_crypto = require("node:crypto");
 node_crypto = require_chunk.__toESM(node_crypto);
@@ -15054,7 +15054,7 @@ function resolveUseHostname() {
 	return process.env["CAMSTACK_MOLECULER_USE_HOSTNAME"] !== "false";
 }
 function createBroker(config) {
-	const { nodeID, mode, hubAddress, logLevel = "warn", tcpPort = DEFAULT_HUB_TCP_PORT } = config;
+	const { nodeID, mode, logLevel = "warn", tcpPort = DEFAULT_HUB_TCP_PORT } = config;
 	const useHostname = resolveUseHostname();
 	const infraLevel = "error";
 	const wildcardLevel = logLevel;
@@ -15101,56 +15101,11 @@ function createBroker(config) {
 		},
 		metrics: metricsConfig
 	});
-	const agentListenPort = config.agentListenPort ?? deriveAgentListenPort(nodeID);
-	const hasMeshTls = config.meshTls !== void 0;
-	const hubDialPort = hasMeshTls ? config.tlsPort ?? 6443 : tcpPort;
-	if (hasMeshTls) {
-		const urls = hubAddress !== void 0 ? normalizeHubUrl(hubAddress, hubDialPort) : void 0;
-		return new require_builtins_system_config_system_config_addon.ServiceBroker({
-			nodeID,
-			serializer: "MsgPack",
-			transporter: new require_builtins_system_config_system_config_addon.TlsTcpTransporter({
-				port: agentListenPort,
-				tlsPort: config.agentTlsListenPort ?? 6443,
-				peerTlsPort: hubDialPort,
-				hubOnlyPeers: true,
-				maxPacketSize: 10 * 1024 * 1024,
-				useHostname,
-				debug: false,
-				meshTls: config.meshTls,
-				udpDiscovery: false,
-				...urls !== void 0 ? { urls } : {}
-			}),
-			...config.middlewares !== void 0 ? { middlewares: [...config.middlewares] } : {},
-			logger: {
-				type: "Console",
-				options: { level: {
-					BROKER: infraLevel,
-					TRANSPORTER: infraLevel,
-					TRANSIT: infraLevel,
-					REGISTRY: infraLevel,
-					DISCOVERER: infraLevel,
-					"**": wildcardLevel
-				} }
-			},
-			metrics: metricsConfig
-		});
-	}
-	const tcpOptions = {
-		maxPacketSize: 10 * 1024 * 1024,
-		port: agentListenPort,
-		useHostname,
-		debug: false
-	};
-	tcpOptions.udpDiscovery = false;
-	if (hubAddress) tcpOptions.urls = normalizeHubUrl(hubAddress, tcpPort);
+	const transport = createAgentTransport(config);
 	return new require_builtins_system_config_system_config_addon.ServiceBroker({
 		nodeID,
 		serializer: "MsgPack",
-		transporter: {
-			type: "TCP",
-			options: tcpOptions
-		},
+		transporter: transport.kind === "tls" ? transport.transporter : transport.descriptor,
 		...config.middlewares !== void 0 ? { middlewares: [...config.middlewares] } : {},
 		logger: {
 			type: "Console",
@@ -15166,6 +15121,58 @@ function createBroker(config) {
 		metrics: metricsConfig
 	});
 }
+/**
+* The transport of an agent broker, from its config. An agent with no hub address dials nobody
+* and stays `unconfigured` until one is set (the agent UI lists the hubs found over mDNS, D839).
+* There is no UDP discovery to fall back on (D843).
+*
+* The reader binds a STABLE port derived from the nodeID (not an OS-ephemeral `port: 0`). See
+* `deriveAgentListenPort` - this is what makes a same-nodeID kill+restart reconnect cleanly:
+* Moleculer never refreshes a known node's address, so the agent must return at the same address
+* it left from.
+*
+* Shared by `createBroker` (the first transport) and the in-place reconnect
+* (`broker-transport-swap.ts`, the next one): one builder, so a reconnect cannot dial differently
+* from a boot.
+*/
+function createAgentTransport(config) {
+	const { nodeID, hubAddress, tcpPort = DEFAULT_HUB_TCP_PORT } = config;
+	const useHostname = resolveUseHostname();
+	const agentListenPort = config.agentListenPort ?? deriveAgentListenPort(nodeID);
+	const hubDialPort = config.meshTls !== void 0 ? config.tlsPort ?? 6443 : tcpPort;
+	if (config.meshTls !== void 0) {
+		const urls = hubAddress !== void 0 ? normalizeHubUrl(hubAddress, hubDialPort) : void 0;
+		return {
+			kind: "tls",
+			transporter: new require_builtins_system_config_system_config_addon.TlsTcpTransporter({
+				port: agentListenPort,
+				tlsPort: config.agentTlsListenPort ?? 6443,
+				peerTlsPort: hubDialPort,
+				hubOnlyPeers: true,
+				maxPacketSize: 10 * 1024 * 1024,
+				useHostname,
+				debug: false,
+				meshTls: config.meshTls,
+				udpDiscovery: false,
+				...urls !== void 0 ? { urls } : {}
+			})
+		};
+	}
+	return {
+		kind: "tcp",
+		descriptor: {
+			type: "TCP",
+			options: {
+				maxPacketSize: 10 * 1024 * 1024,
+				port: agentListenPort,
+				useHostname,
+				debug: false,
+				udpDiscovery: false,
+				...hubAddress ? { urls: normalizeHubUrl(hubAddress, tcpPort) } : {}
+			}
+		}
+	};
+}
 function normalizeHubUrl(raw, defaultPort) {
 	const atSplit = raw.includes("@") ? raw.split("@") : null;
 	const nodeIdFromAt = atSplit ? atSplit[0] : null;
@@ -15181,6 +15188,142 @@ function getBrokerTlsTransporter(broker) {
 	return tx instanceof require_builtins_system_config_system_config_addon.TlsTcpTransporter ? tx : null;
 }
 //#endregion
+//#region src/kernel/moleculer/broker-transport-swap.ts
+/**
+* Reconnecting a broker's TRANSPORT in place, without rebuilding the broker (D856 amendment).
+*
+* An agent changes how it dials the hub (a new hub address, a new cluster secret, a mesh leaf
+* swap or its rollback) by replacing its transporter. It used to stop the whole `ServiceBroker`
+* and build another. That threw away everything bound to the old one: the `$process` service
+* (whose `stopped()` SIGTERMs every runner - the "child gone" lines), `$agent-cap-fwd`,
+* `$agent`, the event bus, the addon services and every closure that captured the broker. The
+* node came back ONLINE and capless, and the hub's confirm step then failed with
+* "`$agent-cap-fwd.forward` is not found".
+*
+* The broker, its services, its registries and its child runners are all independent of the
+* wire. So only the wire is replaced: disconnect the transit, forget the remote nodes (their
+* connection is gone, and the next `$node.connected` is what re-runs the mesh join), install a
+* new transporter on the SAME transit and connect it. Children never notice; the join's settle
+* re-sends the full manifest (D3), which still carries every child.
+*/
+function isObject(value) {
+	return typeof value === "object" && value !== null;
+}
+function isFunction(value) {
+	return typeof value === "function";
+}
+/** Moleculer's d.ts hides the transit and the registry internals: check them at runtime instead. */
+function isWrappingBroker(value) {
+	return isObject(value) && isFunction(Reflect.get(value, "wrapMethod")) && hasNodeCatalog(Reflect.get(value, "registry")) && "transit" in value;
+}
+/** The node catalog the swap forgets remote nodes through (private Moleculer API, pinned by a spec). */
+function hasNodeCatalog(registry) {
+	if (!isObject(registry)) return false;
+	const nodes = Reflect.get(registry, "nodes");
+	return isObject(nodes) && isFunction(Reflect.get(nodes, "disconnected")) && isFunction(Reflect.get(nodes, "list"));
+}
+function isTransporterLike(value) {
+	return isObject(value) && isFunction(Reflect.get(value, "init")) && isFunction(Reflect.get(value, "connect")) && isFunction(Reflect.get(value, "disconnect"));
+}
+function wrapping(broker) {
+	if (!isWrappingBroker(broker)) throw new Error("not a Moleculer broker with a transport");
+	return broker;
+}
+function transitOf(broker) {
+	const transit = wrapping(broker).transit;
+	if (transit === null || transit === void 0) throw new Error("the broker has no transport to reconnect");
+	return transit;
+}
+/** The transporter currently installed on the broker (for identity checks). */
+function currentBrokerTransporter(broker) {
+	return { tx: transitOf(broker).tx };
+}
+/** Build the transporter an {@link AgentTransport} describes (nothing is bound or dialled yet). */
+function buildTransporter(transport) {
+	const tx = transport.kind === "tls" ? transport.transporter : require_builtins_system_config_system_config_addon.Transporters.resolve(transport.descriptor);
+	if (!isTransporterLike(tx)) throw new Error("the agent transport is not a Moleculer transporter");
+	return { tx };
+}
+/**
+* Whether `pending` is the transporter installed on the broker right now. A reconnect that was
+* abandoned at its deadline and resumes later must not tear down a newer run's transport.
+*/
+function isInstalledTransporter(broker, pending) {
+	return transitOf(broker).tx === pending.tx;
+}
+/**
+* Disconnect the installed transporter and forget every remote node. Forgetting is what makes the
+* hub's next INFO a NEW connection: `$node.connected` fires again, so the agent's mesh join re-runs
+* and its settle re-sends the manifest. Without it the hub would still be "available" in the local
+* registry and nothing would re-announce the node.
+*/
+async function disconnectBrokerTransport(broker) {
+	const b = wrapping(broker);
+	const transit = transitOf(broker);
+	const leaving = transit.tx;
+	retired.add(leaving);
+	try {
+		await transit.disconnect();
+	} finally {
+		detachListeners(leaving);
+		for (const node of b.registry.nodes.list({ onlyAvailable: true })) if (node.id !== b.nodeID) b.registry.nodes.disconnected(node.id, false);
+	}
+}
+/** Transporters that were disconnected or replaced: their `connect` is a no-op for good. */
+var retired = /* @__PURE__ */ new WeakSet();
+/**
+* The leaving transporter's writer must not keep reporting into the SHARED node catalog: a late
+* FIN on one of its sockets would call `nodes.disconnected` on the node the NEW transporter just
+* connected to.
+*/
+function detachListeners(tx) {
+	for (const emitter of [tx.writer, tx.reader]) if (isObject(emitter) && isFunction(Reflect.get(emitter, "removeAllListeners"))) Reflect.get(emitter, "removeAllListeners").call(emitter);
+}
+/**
+* One connect at a time per transporter, and none for a retired or replaced one. Moleculer's connect
+* retry re-runs `tx.connect()` on whatever `transit.tx` is when its timer fires; a second run of
+* `startTcpServer` overwrites the live reader and writer, leaks the gossip interval and leaves a
+* listening server behind. A connect that fails is cleaned up before the retry runs.
+*/
+function guardConnect(transit, tx) {
+	const original = tx.connect.bind(tx);
+	let inflight = null;
+	tx.connect = (...args) => {
+		if (retired.has(tx) || transit.tx !== tx) return Promise.resolve();
+		if (inflight !== null) return inflight;
+		if (tx.connected === true) return Promise.resolve();
+		const run = original(...args).catch(async (error) => {
+			await Promise.resolve(tx.disconnect()).catch(() => void 0);
+			throw error;
+		}).finally(() => {
+			if (inflight === run) inflight = null;
+		});
+		inflight = run;
+		return run;
+	};
+}
+/**
+* Install `pending` as the broker's transporter: the same wiring Moleculer's `Transit` constructor
+* does (init + the broker's send/receive middleware wrapping, which carries the mesh join gate).
+*/
+function installBrokerTransporter(broker, pending) {
+	const b = wrapping(broker);
+	const transit = transitOf(broker);
+	const tx = pending.tx;
+	retired.add(transit.tx);
+	guardConnect(transit, tx);
+	tx.init(transit, (cmd, packet) => transit.messageHandler(cmd, packet), transit.afterConnect.bind(transit));
+	const send = b.wrapMethod("transporterSend", tx.send, tx);
+	const receive = b.wrapMethod("transporterReceive", tx.receive, tx, { reverse: true });
+	tx.send = send;
+	tx.receive = receive;
+	transit.tx = tx;
+}
+/** Connect the installed transporter (the broker's own `start()` path, minus the services). */
+async function connectBrokerTransport(broker) {
+	await transitOf(broker).connect();
+}
+//#endregion
 //#region src/kernel/moleculer/addon-deploy-source.ts
 function isAddonDeploySource(v) {
 	if (!v || typeof v !== "object") return false;
@@ -27144,6 +27287,7 @@ exports.buildNativeCapProxy = buildNativeCapProxy;
 exports.buildNodeManifest = buildNodeManifest;
 exports.buildNpmChildEnv = buildNpmChildEnv;
 exports.buildStorageLocationRegistry = require_builtins_storage_orchestrator_storage_orchestrator_addon.buildStorageLocationRegistry;
+exports.buildTransporter = buildTransporter;
 exports.builderMountedCapNames = builderMountedCapNames;
 exports.caFingerprint = require_builtins_system_config_system_config_addon.caFingerprint;
 exports.caFingerprintCompact = require_builtins_system_config_system_config_addon.caFingerprintCompact;
@@ -27170,6 +27314,7 @@ exports.collectCertIdentity = require_tls.collectCertIdentity;
 exports.collectModelFiles = require_custom_action_registry.collectModelFiles;
 exports.computeHubJoinProof = computeHubJoinProof;
 exports.computeNodeJoinProof = computeNodeJoinProof;
+exports.connectBrokerTransport = connectBrokerTransport;
 exports.contentTypeFor = require_custom_action_registry.contentTypeFor;
 exports.copyDirRecursive = copyDirRecursive;
 exports.copyExtraFileDirs = copyExtraFileDirs;
@@ -27179,6 +27324,7 @@ exports.createAddonPeerBytesFacility = createAddonPeerBytesFacility;
 exports.createAddonService = createAddonService;
 exports.createAgentEventScope = createAgentEventScope;
 exports.createAgentHttpsRequest = require_tls.createAgentHttpsRequest;
+exports.createAgentTransport = createAgentTransport;
 exports.createArrayBufferCensusGate = createArrayBufferCensusGate;
 exports.createAuthenticatedFileServer = require_custom_action_registry.createAuthenticatedFileServer;
 exports.createBroker = createBroker;
@@ -27217,6 +27363,7 @@ exports.createUdsEventBus = createUdsEventBus;
 exports.createUdsLogger = createUdsLogger;
 exports.createUdsLoggerWithControl = createUdsLoggerWithControl;
 exports.createV8Reclaimer = createV8Reclaimer;
+exports.currentBrokerTransporter = currentBrokerTransporter;
 exports.decideMeshAutoEnforce = decideMeshAutoEnforce;
 exports.deleteModelFromDisk = require_custom_action_registry.deleteModelFromDisk;
 exports.deriveAgentListenPort = deriveAgentListenPort;
@@ -27230,6 +27377,7 @@ exports.deviceOfGetStatus = deviceOfGetStatus;
 exports.diffCapActionCensus = diffCapActionCensus;
 exports.diffEventPlane = diffEventPlane;
 exports.diffSocketPlane = diffSocketPlane;
+exports.disconnectBrokerTransport = disconnectBrokerTransport;
 Object.defineProperty(exports, "downloadBinary", {
 	enumerable: true,
 	get: function() {
@@ -27337,6 +27485,7 @@ exports.heapSpaceField = heapSpaceField;
 exports.hostNodeIdOf = hostNodeIdOf;
 exports.hubMainRssBudget = hubMainRssBudget;
 exports.installAgentHttps = require_tls.installAgentHttps;
+exports.installBrokerTransporter = installBrokerTransporter;
 exports.installManifestNativeDeps = installManifestNativeDeps;
 exports.installManifestPythonDeps = installManifestPythonDeps;
 exports.installManifestSystemDeps = installManifestSystemDeps;
@@ -27363,6 +27512,7 @@ exports.isCollectionArrayMethod = require_dist.isCollectionArrayMethod;
 exports.isContainerBridgeAddress = require_tls.isContainerBridgeAddress;
 exports.isCredentialKeyName = isCredentialKeyName;
 exports.isInfraCapability = isInfraCapability;
+exports.isInstalledTransporter = isInstalledTransporter;
 exports.isLocalOnlyHostname = require_tls.isLocalOnlyHostname;
 exports.isMeshAuthMode = require_builtins_system_config_system_config_addon.isMeshAuthMode;
 exports.isModelDownloaded = require_custom_action_registry.isModelDownloaded;