@claxedo/workspace-relay 0.1.0 → 0.5.0

package/dist/main.d.ts

@@ -1,7 +1,8 @@
 import { type WorkspaceRelayBunDrainController } from "./bun";
 import { type WorkspaceRelayDirectory } from "./directory";
-import type { RelayHostPublicKey, RuntimeAccessTokenActiveResult } from "./server";
+import { type RelayHostPublicKey, type RevocationLookup, type WorkspaceRelayTarget } from "./server";
 import type { RelayKey } from "./auth";
+export { createCachedRevocationClient, createCachedTargetClient } from "./server";
 /**
  * Production fail-closed gate for the relay → claxedo-server resolver channel.
  *
@@ -102,24 +103,27 @@ export type ParseMetricsTokenEnv = {
     CLAXEDO_RELAY_METRICS_TOKEN?: string | undefined;
 };
 export declare function parseMetricsToken(env: ParseMetricsTokenEnv): string | undefined;
-export type RevocationLookupArgs = {
-    jti: string;
-    workspaceId: string;
-    hostId: string;
-};
-export type RevocationLookup = (args: RevocationLookupArgs) => Promise<RuntimeAccessTokenActiveResult>;
-export type CachedRevocationOptions = {
-    /** TTL in milliseconds for cached revocation responses. Defaults to 10_000. */
-    ttlMs?: number;
-    /** Clock injection for tests. Defaults to `Date.now`. */
-    now?: () => number;
+export type RuntimeAccessTokenCacheEnv = {
+    CLAXEDO_RELAY_RUNTIME_ACCESS_TOKEN_CACHE_TTL_MS?: string | undefined;
+};
+export declare function runtimeAccessTokenCacheTtlMsFromEnv(env: RuntimeAccessTokenCacheEnv): number;
+export type DirectHttpConcurrencyEnv = {
+    CLAXEDO_RELAY_DIRECT_HTTP_CONCURRENCY?: string | undefined;
+};
+export declare function directHttpConcurrencyFromEnv(env: DirectHttpConcurrencyEnv): number | undefined;
+export type ResolverClientCacheOptions = {
+    targetCacheTtlMs?: number;
+    revocationCacheTtlMs?: number;
+};
+export type ResolverClientCacheEnv = {
+    CLAXEDO_RELAY_TARGET_CACHE_TTL_MS?: string | undefined;
+    CLAXEDO_RELAY_REVOCATION_CACHE_TTL_MS?: string | undefined;
+};
+export declare function resolverClientCacheOptionsFromEnv(env: ResolverClientCacheEnv): ResolverClientCacheOptions;
+export declare function createResolverClient(baseUrl: string, token: string | undefined, options?: ResolverClientCacheOptions): {
+    target: (workspaceId: string, hostId: string) => Promise<WorkspaceRelayTarget | undefined>;
+    revocation: RevocationLookup;
 };
-/**
- * Wraps a revocation lookup with a small in-memory cache keyed by `jti`.
- * Both positive and negative results are cached for the full TTL — this is
- * safe because RAT revocation lag is bounded by the same TTL by design.
- */
-export declare function createCachedRevocationClient(inner: RevocationLookup, options?: CachedRevocationOptions): RevocationLookup;
 /**
  * T9: graceful SIGTERM drain wiring.
  *
@@ -158,3 +162,16 @@ export type ShutdownDrainHandle = {
     isShuttingDown(): boolean;
 };
 export declare function installShutdownDrainHandler(options: ShutdownDrainHandlerOptions): ShutdownDrainHandle;
+export type FatalProcessHandlerOptions = {
+    drain: WorkspaceRelayBunDrainController;
+    directory: Pick<WorkspaceRelayDirectory, "dispose">;
+    exit?: (code?: number) => void;
+    log?: (message: string) => void;
+    register?: boolean;
+    stopServer?: () => Promise<void> | void;
+};
+export type FatalProcessHandle = {
+    trigger(error: unknown, source: "uncaughtException" | "unhandledRejection"): Promise<void>;
+    isFatal(): boolean;
+};
+export declare function installFatalProcessHandlers(options: FatalProcessHandlerOptions): FatalProcessHandle;