@elaraai/e3-rack 0.0.0-bootstrap.0 → 1.0.94

package/dist/src/hub/session-bridge.d.ts

@@ -0,0 +1,116 @@
+/**
+ * Copyright (c) 2025 Elara AI Pty Ltd
+ * Licensed under BSL 1.1. See LICENSE for details.
+ */
+import { AsyncLocalStorage } from 'node:async_hooks';
+import { Hono } from 'hono';
+import type { ExecutionOwner } from '@elaraai/e3-types';
+import { type LeaseCoordinator } from '../lease/coordinator.js';
+import type { RackLeaseStore } from '../lease/lease-store.js';
+import type { RackAttemptStore } from '../server/rack-routes.js';
+import type { RackPutTarget, RackStorageBridge } from '../server/storage-bridge.js';
+/** Identifies the session that currently owns repository I/O for a lease. */
+export interface SessionEndpoint {
+    /** Private socket; never sent to a rack. */
+    dataSocket: string;
+    /** Private session credential; never sent to a rack. */
+    dataToken: string;
+}
+interface LeaseContext {
+    repo: string;
+    leaseId: string;
+}
+/**
+ * Shares one lease fence and its context across the routes and dispatcher.
+ * Storage bridge signatures remain compatible with cloud backends; only the
+ * local proxy needs the calling lease to scope a URL to its current attempt.
+ */
+export declare class SessionLeaseCoordinator implements LeaseCoordinator {
+    private readonly serial;
+    private readonly context;
+    run<T>(repo: string, leaseId: string, operation: () => Promise<T>): Promise<T>;
+    /** Returns the calling transition's identity, refusing unfenced access. */
+    current(repo: string): LeaseContext;
+}
+/** Configures the hub's opaque pass-through to repository-owning sessions. */
+export interface SessionBridgeOptions {
+    /** Conditional lease state. */
+    leases: RackLeaseStore;
+    /** Shared route/dispatch fence. */
+    coordinator: SessionLeaseCoordinator;
+    /** Selects a live session of the lease's exact repository and e3 version. */
+    session: (repo: string, leaseId: string) => SessionEndpoint;
+    /** Returns every live subscriber for log tees; only session() persists. */
+    subscribers?: (repo: string, leaseId: string) => SessionEndpoint[];
+    /** Resolves the hub's process identity for execution liveness. */
+    owner: ExecutionOwner;
+    /**
+     * The origin racks reach the hub at, when configured: a relay's, a tunnel's
+     * or a TLS terminator's. Every data URL is built on it; without it, on the
+     * origin the rack's own request named.
+     */
+    advertiseOrigin: () => string | undefined;
+    /** Controls capability expiration in tests. */
+    now?: () => number;
+}
+/**
+ * Proxies objects and attempt records without opening a repository in the hub.
+ * Capability URLs bind to one lease attempt, expire in fifteen minutes and
+ * are aborted on reclaim or termination. PUT acknowledgments are repeatable
+ * until cleanup so a lost HTTP response cannot force another body write.
+ * @example
+ * const bridge = new SessionProxyStorageBridge(options);
+ * app.route('/', bridge.dataRoutes());
+ */
+export declare class SessionProxyStorageBridge implements RackStorageBridge {
+    private readonly options;
+    /** Carries the rack request's own origin, for data URLs when no origin is advertised. */
+    readonly origin: AsyncLocalStorage<string>;
+    /** Forwards execution records and buffered logs to the repository session. */
+    readonly attempts: RackAttemptStore;
+    private readonly capabilities;
+    private readonly logs;
+    private readonly now;
+    /** @param options - Stores, session selection, ownership and URL origin */
+    constructor(options: SessionBridgeOptions);
+    private post;
+    private flush;
+    private mint;
+    private url;
+    readDescriptor(repo: string, hash: string): Promise<{
+        kind: "url";
+        url: string;
+        data?: undefined;
+    } | {
+        kind: "inline";
+        data: Buffer<ArrayBuffer>;
+        url?: undefined;
+    }>;
+    writeTarget(repo: string, leaseId: string, hash: string, size: number): Promise<RackPutTarget | null>;
+    commitWrite(repo: string, leaseId: string, rackId: string, hash: string, size: number, version: string): Promise<boolean>;
+    stagedTarget(repo: string, _workspace: string, hash: string, size: bigint): Promise<{
+        url: string;
+        uploadId: string;
+    }>;
+    commitStaged(repo: string, hash: string, uploadId: string): Promise<boolean>;
+    writeInline(repo: string, data: Uint8Array): Promise<string>;
+    readEnvManifest(): Promise<null>;
+    presignEnvLayer(): Promise<string>;
+    /** Aborts old-attempt streams immediately, before another session takes ownership. */
+    revoke(repo: string, leaseId: string): void;
+    /** Stops streams to a departing session while retaining acknowledged receipts. */
+    interrupt(repo: string, leaseId: string): void;
+    discardWrites(repo: string, leaseId: string, _hashes: readonly string[]): Promise<number>;
+    private prune;
+    private valid;
+    /**
+     * Streams data URLs with backpressure and no rack bearer header. A transfer
+     * may take the rest of its capability's fifteen minutes, so a large object
+     * over a slow link is not cut short of the time its URL grants.
+     */
+    dataRoutes(): Hono;
+    /** Aborts outstanding transfers and clears unreferenced log timers on shutdown. */
+    close(): void;
+}
+export {};
+//# sourceMappingURL=session-bridge.d.ts.map

package/dist/src/hub/session-bridge.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-bridge.d.ts","sourceRoot":"","sources":["../../../src/hub/session-bridge.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAGrD,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAE5B,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AACxD,OAAO,EAA4B,KAAK,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAC1F,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAC;AAC9D,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AACjE,OAAO,KAAK,EAAE,aAAa,EAAE,iBAAiB,EAAE,MAAM,6BAA6B,CAAC;AAMpF,6EAA6E;AAC7E,MAAM,WAAW,eAAe;IAC9B,4CAA4C;IAC5C,UAAU,EAAE,MAAM,CAAC;IACnB,wDAAwD;IACxD,SAAS,EAAE,MAAM,CAAC;CACnB;AACD,UAAU,YAAY;IAAG,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE;AAExD;;;;GAIG;AACH,qBAAa,uBAAwB,YAAW,gBAAgB;IAC9D,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAkC;IACzD,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAyC;IACjE,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC;IAG9E,2EAA2E;IAC3E,OAAO,CAAC,IAAI,EAAE,MAAM,GAAG,YAAY;CAKpC;AAqBD,8EAA8E;AAC9E,MAAM,WAAW,oBAAoB;IACnC,+BAA+B;IAC/B,MAAM,EAAE,cAAc,CAAC;IACvB,mCAAmC;IACnC,WAAW,EAAE,uBAAuB,CAAC;IACrC,6EAA6E;IAC7E,OAAO,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,KAAK,eAAe,CAAC;IAC5D,2EAA2E;IAC3E,WAAW,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,KAAK,eAAe,EAAE,CAAC;IACnE,kEAAkE;IAClE,KAAK,EAAE,cAAc,CAAC;IACtB;;;;OAIG;IACH,eAAe,EAAE,MAAM,MAAM,GAAG,SAAS,CAAC;IAC1C,+CAA+C;IAC/C,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;CACpB;AAED;;;;;;;;GAQG;AACH,qBAAa,yBAA0B,YAAW,iBAAiB;IAUrD,OAAO,CAAC,QAAQ,CAAC,OAAO;IATpC,yFAAyF;IACzF,QAAQ,CAAC,MAAM,4BAAmC;IAClD,8EAA8E;IAC9E,QAAQ,CAAC,QAAQ,EAAE,gBAAgB,CAAC;IACpC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAiC;IAC9D,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAgC;IACrD,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAe;IAEnC,2EAA2E;gBAC9C,OAAO,EAAE,oBAAoB;IAsC1D,OAAO,CAAC,IAAI;YAKE,KAAK;YAmCL,IAAI;IAmBlB,OAAO,CAAC,GAAG;IAQL,cAAc,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM;;;;;;;;;IAqBzC,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC;IAOrG,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IASzH,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM;;;;IAMzE,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAO5E,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,GAAG,OAAO,CAAC,MAAM,CAAC;IAOlE,eAAe,IAAI,OAAO,CAAC,IAAI,CAAC;IAChC,eAAe,IAAI,OAAO,CAAC,MAAM,CAAC;IAElC,sFAAsF;IACtF,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,IAAI;IAI3C,kFAAkF;IAClF,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,IAAI;IAOxC,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,MAAM,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC;IAe/F,OAAO,CAAC,KAAK;YASC,KAAK;IAMnB;;;;OAIG;IACH,UAAU,IAAI,IAAI;IA4BlB,mFAAmF;IACnF,KAAK,IAAI,IAAI;CAMd"}

package/dist/src/hub/session-bridge.js

@@ -0,0 +1,336 @@
+/**
+ * Copyright (c) 2025 Elara AI Pty Ltd
+ * Licensed under BSL 1.1. See LICENSE for details.
+ */
+import { AsyncLocalStorage } from 'node:async_hooks';
+import { randomUUID } from 'node:crypto';
+import { Readable } from 'node:stream';
+import { Hono } from 'hono';
+import { ArrayType, BooleanType, StringType, variant } from '@elaraai/east';
+import { InMemoryLeaseCoordinator } from '../lease/coordinator.js';
+import { RackHubError, socketRequest, socketStream } from '../client/local-http.js';
+import { LeaseDataType, LeaseOutcomeType, LeaseRunningType, LeaseStoppedType, SessionLogsType, SessionUploadType, TouchObjectsType, VerifyOutputType } from '../protocol/session-data.js';
+/**
+ * Shares one lease fence and its context across the routes and dispatcher.
+ * Storage bridge signatures remain compatible with cloud backends; only the
+ * local proxy needs the calling lease to scope a URL to its current attempt.
+ */
+export class SessionLeaseCoordinator {
+    serial = new InMemoryLeaseCoordinator();
+    context = new AsyncLocalStorage();
+    run(repo, leaseId, operation) {
+        return this.serial.run(repo, leaseId, () => this.context.run({ repo, leaseId }, operation));
+    }
+    /** Returns the calling transition's identity, refusing unfenced access. */
+    current(repo) {
+        const context = this.context.getStore();
+        if (context === undefined || context.repo !== repo)
+            throw new Error('Rack storage requires a lease context');
+        return context;
+    }
+}
+/**
+ * Proxies objects and attempt records without opening a repository in the hub.
+ * Capability URLs bind to one lease attempt, expire in fifteen minutes and
+ * are aborted on reclaim or termination. PUT acknowledgments are repeatable
+ * until cleanup so a lost HTTP response cannot force another body write.
+ * @example
+ * const bridge = new SessionProxyStorageBridge(options);
+ * app.route('/', bridge.dataRoutes());
+ */
+export class SessionProxyStorageBridge {
+    options;
+    /** Carries the rack request's own origin, for data URLs when no origin is advertised. */
+    origin = new AsyncLocalStorage();
+    /** Forwards execution records and buffered logs to the repository session. */
+    attempts;
+    capabilities = new Map();
+    logs = new Map();
+    now;
+    /** @param options - Stores, session selection, ownership and URL origin */
+    constructor(options) {
+        this.options = options;
+        this.now = options.now ?? Date.now;
+        this.attempts = {
+            closure: (lease) => this.post(lease, '/v1/attempts/closure', LeaseDataType, { leaseJson: JSON.stringify(lease) }, ArrayType(StringType)),
+            running: async (lease) => { await this.post(lease, '/v1/attempts/running', LeaseRunningType, { leaseJson: JSON.stringify(lease), owner: options.owner }, BooleanType); },
+            stopped: async (lease, how, cause) => {
+                await this.flush(lease.repo, lease.attempt?.executionId);
+                await this.post(lease, '/v1/attempts/stopped', LeaseStoppedType, { leaseJson: JSON.stringify(lease), cancelled: how === 'cancelled', cause }, BooleanType);
+            },
+            outcome: async (lease, result) => {
+                await this.flush(lease.repo, lease.attempt?.executionId);
+                await this.post(lease, '/v1/attempts/outcome', LeaseOutcomeType, { leaseJson: JSON.stringify(lease), resultJson: JSON.stringify(result) }, BooleanType);
+            },
+            verifyOutput: (lease, hash) => this.post(lease, '/v1/verify', VerifyOutputType, { hash }, BooleanType),
+            logs: {
+                append: async (repo, taskHash, inputsHash, executionId, stream, data) => {
+                    const key = JSON.stringify([repo, executionId]);
+                    let buffer = this.logs.get(key);
+                    if (buffer === undefined) {
+                        buffer = { ...options.coordinator.current(repo), taskHash, inputsHash, executionId, chunks: [], bytes: 0 };
+                        this.logs.set(key, buffer);
+                    }
+                    buffer.chunks.push({ stream: variant(stream, null), data });
+                    buffer.bytes += Buffer.byteLength(data);
+                    if (buffer.bytes >= 32768)
+                        await this.flush(repo, executionId);
+                    else if (buffer.timer === undefined) {
+                        buffer.timer = setTimeout(() => {
+                            buffer.timer = undefined;
+                            void this.flush(repo, executionId).catch((err) => console.warn('rack log flush:', err));
+                        }, 250);
+                        buffer.timer.unref();
+                    }
+                },
+                flush: (repo, _task, _inputs, id) => this.flush(repo, id),
+            },
+        };
+    }
+    post(context, path, requestType, body, responseType) {
+        const session = this.options.session(context.repo, context.leaseId);
+        return socketRequest(session.dataSocket, 'POST', path, { bearer: session.dataToken, requestType, body, responseType });
+    }
+    async flush(repo, executionId) {
+        if (executionId === undefined)
+            return;
+        const key = JSON.stringify([repo, executionId]);
+        const buffer = this.logs.get(key);
+        if (buffer === undefined)
+            return;
+        if (buffer.timer !== undefined) {
+            clearTimeout(buffer.timer);
+            buffer.timer = undefined;
+        }
+        if (buffer.pending !== undefined)
+            await buffer.pending;
+        if (buffer.chunks.length === 0)
+            return;
+        const chunks = buffer.chunks.splice(0);
+        buffer.bytes = 0;
+        const body = {
+            taskHash: buffer.taskHash, inputsHash: buffer.inputsHash, executionId, chunks,
+        };
+        const owner = this.options.session(buffer.repo, buffer.leaseId);
+        const pending = socketRequest(owner.dataSocket, 'POST', '/v1/logs', {
+            bearer: owner.dataToken, requestType: SessionLogsType, body, responseType: BooleanType,
+        }).then(async () => {
+            // A subscriber's display is best effort; it cannot cause persisted logs
+            // to be retried, or prevent the owner from recording the outcome.
+            await Promise.allSettled((this.options.subscribers?.(buffer.repo, buffer.leaseId) ?? [])
+                .filter((session) => session.dataSocket !== owner.dataSocket)
+                .map((session) => socketRequest(session.dataSocket, 'POST', '/v1/logs/tee', {
+                bearer: session.dataToken, requestType: SessionLogsType, body, responseType: BooleanType, timeoutMs: 1000,
+            })));
+        });
+        // A batch whose flush fails is not kept: the rack is told its lines were
+        // not stored and posts them again, so keeping them too would write them
+        // twice once the session answers.
+        buffer.pending = pending;
+        try {
+            await pending;
+        }
+        finally {
+            if (buffer.pending === pending)
+                buffer.pending = undefined;
+            if (buffer.chunks.length === 0 && buffer.pending === undefined)
+                this.logs.delete(key);
+        }
+    }
+    async mint(context, hash, upload) {
+        this.prune();
+        const lease = await this.options.leases.get(context.repo, context.leaseId);
+        if (lease?.status !== 'claimed')
+            throw new RackHubError('lease_ended', 'Rack lease is no longer claimed');
+        for (const cap of this.capabilities.values()) {
+            if (cap.repo === context.repo && cap.leaseId === context.leaseId && cap.hash === hash &&
+                !cap.revoked && cap.executionId === lease.attempt?.executionId && (cap.upload === undefined) === (upload === undefined)) {
+                if (upload !== undefined && Number(cap.upload.size) !== Number(upload.size))
+                    throw new Error('Upload size changed');
+                if (cap.expires <= this.now()) {
+                    cap.expires = this.now() + 15 * 60_000;
+                    cap.abort = new AbortController();
+                }
+                return cap;
+            }
+        }
+        if (this.capabilities.size >= 65536)
+            throw new RackHubError('capacity', 'Rack data capability limit reached');
+        const cap = { ...context, id: randomUUID(), hash, executionId: lease.attempt?.executionId,
+            expires: this.now() + 15 * 60_000, revoked: false, abort: new AbortController(), ...(upload === undefined ? {} : { upload }) };
+        this.capabilities.set(cap.id, cap);
+        return cap;
+    }
+    url(cap) {
+        // Behind a relay or a TLS terminator the request's origin is the hub's
+        // own side of it, which the rack cannot reach (or reaches in clear).
+        const origin = this.options.advertiseOrigin() ?? this.origin.getStore();
+        if (origin === undefined)
+            throw new Error('Rack listener has no reachable origin');
+        return `${origin}/api/rack/data/${cap.id}`;
+    }
+    async readDescriptor(repo, hash) {
+        const context = this.options.coordinator.current(repo);
+        const session = this.options.session(repo, context.leaseId);
+        const head = await socketStream(session.dataSocket, 'HEAD', `/v1/objects/${hash}`, { bearer: session.dataToken });
+        head.resume();
+        if (head.statusCode !== 200)
+            throw new Error(`Rack input ${hash} is unavailable`);
+        const size = Number(head.headers['content-length']);
+        if (!Number.isSafeInteger(size) || size < 0)
+            throw new Error('Invalid input object length');
+        if (size > 4096)
+            return { kind: 'url', url: this.url(await this.mint(context, hash)) };
+        const response = await socketStream(session.dataSocket, 'GET', `/v1/objects/${hash}`, { bearer: session.dataToken });
+        const chunks = [];
+        let length = 0;
+        for await (const chunk of response) {
+            length += chunk.length;
+            if (length > 4096) {
+                response.destroy();
+                throw new Error('Inline input exceeds 4096 bytes');
+            }
+            chunks.push(chunk);
+        }
+        if (response.statusCode !== 200 || length !== size)
+            throw new Error('Input object read failed');
+        return { kind: 'inline', data: Buffer.concat(chunks) };
+    }
+    async writeTarget(repo, leaseId, hash, size) {
+        const context = { repo, leaseId };
+        if ((await this.post(context, '/v1/touch', TouchObjectsType, [hash], ArrayType(BooleanType)))[0])
+            return null;
+        const cap = await this.mint(context, hash, { leaseId, hash, size: BigInt(size), receipt: randomUUID() });
+        return { url: this.url(cap), headers: {} };
+    }
+    async commitWrite(repo, leaseId, rackId, hash, size, version) {
+        const lease = await this.options.leases.get(repo, leaseId);
+        if (lease?.status !== 'claimed' || lease.claimedBy !== rackId)
+            return false;
+        const cap = [...this.capabilities.values()].find((c) => c.repo === repo && c.leaseId === leaseId &&
+            c.hash === hash && c.executionId === lease.attempt?.executionId && c.upload?.receipt === version && Number(c.upload.size) === size);
+        if (cap?.upload === undefined || cap.revoked)
+            return false;
+        return this.post(cap, `/v1/uploads/${cap.id}/commit`, SessionUploadType, cap.upload, BooleanType);
+    }
+    async stagedTarget(repo, _workspace, hash, size) {
+        const context = this.options.coordinator.current(repo);
+        const cap = await this.mint(context, hash, { leaseId: context.leaseId, hash, size, receipt: randomUUID() });
+        return { url: this.url(cap), uploadId: cap.id };
+    }
+    async commitStaged(repo, hash, uploadId) {
+        const context = this.options.coordinator.current(repo);
+        const cap = this.capabilities.get(uploadId);
+        if (cap?.upload === undefined || cap.repo !== repo || cap.hash !== hash || cap.leaseId !== context.leaseId || !(await this.valid(cap)))
+            return false;
+        return this.post(cap, `/v1/uploads/${cap.id}/commit`, SessionUploadType, cap.upload, BooleanType);
+    }
+    async writeInline(repo, data) {
+        if (data.length > 4096)
+            throw new Error('Inline rack output exceeds 4096 bytes');
+        const context = this.options.coordinator.current(repo);
+        const session = this.options.session(repo, context.leaseId);
+        return socketRequest(session.dataSocket, 'POST', '/v1/objects', { bearer: session.dataToken, rawBody: data, responseType: StringType });
+    }
+    readEnvManifest() { return Promise.resolve(null); }
+    presignEnvLayer() { return Promise.reject(new Error('Environments are not supported by the local rack hub')); }
+    /** Aborts old-attempt streams immediately, before another session takes ownership. */
+    revoke(repo, leaseId) {
+        for (const cap of this.capabilities.values())
+            if (cap.repo === repo && cap.leaseId === leaseId) {
+                cap.revoked = true;
+                cap.abort.abort();
+            }
+    }
+    /** Stops streams to a departing session while retaining acknowledged receipts. */
+    interrupt(repo, leaseId) {
+        for (const cap of this.capabilities.values())
+            if (cap.repo === repo && cap.leaseId === leaseId) {
+                cap.abort.abort();
+                cap.abort = new AbortController();
+            }
+    }
+    async discardWrites(repo, leaseId, _hashes) {
+        this.revoke(repo, leaseId);
+        const caps = [...this.capabilities.values()].filter((cap) => cap.repo === repo && cap.leaseId === leaseId);
+        for (const cap of caps)
+            this.capabilities.delete(cap.id);
+        const results = await Promise.allSettled(caps.map(async (cap) => {
+            if (cap.upload !== undefined) {
+                const session = this.options.session(repo, leaseId);
+                await socketRequest(session.dataSocket, 'DELETE', `/v1/uploads/${cap.id}`, { bearer: session.dataToken, responseType: BooleanType });
+            }
+        }));
+        const failure = results.find((result) => result.status === 'rejected');
+        if (failure?.status === 'rejected')
+            throw failure.reason;
+        return caps.filter((cap) => cap.upload !== undefined).length;
+    }
+    prune() {
+        for (const cap of this.capabilities.values())
+            if (cap.expires <= this.now()) {
+                cap.abort.abort();
+                // Keep upload receipts until lease cleanup so acknowledged uploads can
+                // still be committed after their URL expires; deny any further PUT.
+                if (cap.upload === undefined)
+                    this.capabilities.delete(cap.id);
+            }
+    }
+    async valid(cap) {
+        if (cap.revoked || cap.abort.signal.aborted || cap.expires <= this.now())
+            return false;
+        const lease = await this.options.leases.get(cap.repo, cap.leaseId);
+        return lease?.status === 'claimed' && lease.attempt?.executionId === cap.executionId;
+    }
+    /**
+     * Streams data URLs with backpressure and no rack bearer header. A transfer
+     * may take the rest of its capability's fifteen minutes, so a large object
+     * over a slow link is not cut short of the time its URL grants.
+     */
+    dataRoutes() {
+        const app = new Hono();
+        app.on(['GET', 'PUT'], '/api/rack/data/:cap', async (c) => {
+            if (c.req.header('authorization') !== undefined)
+                return c.text('Capability URLs do not accept Authorization', 400);
+            const cap = this.capabilities.get(c.req.param('cap'));
+            if (cap === undefined || !await this.valid(cap) || (cap.upload === undefined ? 'GET' : 'PUT') !== c.req.method)
+                return c.notFound();
+            let session;
+            try {
+                session = this.options.session(cap.repo, cap.leaseId);
+            }
+            catch {
+                return c.text('No live repository session', 410);
+            }
+            const remaining = Math.max(1, cap.expires - this.now());
+            const signal = AbortSignal.any([cap.abort.signal, c.req.raw.signal, AbortSignal.timeout(remaining)]);
+            const upload = cap.upload;
+            const path = upload === undefined ? `/v1/objects/${cap.hash}` : `/v1/uploads/${cap.id}?${new URLSearchParams({
+                lease: cap.leaseId, hash: cap.hash, size: `${upload.size}`, receipt: upload.receipt,
+            })}`;
+            const response = await socketStream(session.dataSocket, c.req.method, path, {
+                bearer: session.dataToken, signal, timeoutMs: remaining,
+                ...(upload === undefined ? {} : { rawBody: c.req.raw.body === null ? new Uint8Array() : Readable.fromWeb(c.req.raw.body) }),
+            });
+            const headers = new Headers({ 'content-type': 'application/octet-stream' });
+            for (const name of ['content-length', 'x-amz-version-id']) {
+                const value = response.headers[name];
+                if (typeof value === 'string')
+                    headers.set(name, value);
+            }
+            return new Response(Readable.toWeb(response), { status: response.statusCode ?? 502, headers });
+        });
+        return app;
+    }
+    /** Aborts outstanding transfers and clears unreferenced log timers on shutdown. */
+    close() {
+        for (const cap of this.capabilities.values())
+            cap.abort.abort();
+        for (const buffer of this.logs.values())
+            if (buffer.timer !== undefined)
+                clearTimeout(buffer.timer);
+        this.capabilities.clear();
+        this.logs.clear();
+    }
+}
+//# sourceMappingURL=session-bridge.js.map

package/dist/src/hub/session-bridge.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-bridge.js","sourceRoot":"","sources":["../../../src/hub/session-bridge.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AACvC,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,UAAU,EAAE,OAAO,EAAmC,MAAM,eAAe,CAAC;AAE7G,OAAO,EAAE,wBAAwB,EAAyB,MAAM,yBAAyB,CAAC;AAI1F,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAC;AACpF,OAAO,EAAE,aAAa,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,eAAe,EAC3F,iBAAiB,EAAE,gBAAgB,EAAE,gBAAgB,EAAsB,MAAM,6BAA6B,CAAC;AAYjH;;;;GAIG;AACH,MAAM,OAAO,uBAAuB;IACjB,MAAM,GAAG,IAAI,wBAAwB,EAAE,CAAC;IACxC,OAAO,GAAG,IAAI,iBAAiB,EAAgB,CAAC;IACjE,GAAG,CAAI,IAAY,EAAE,OAAe,EAAE,SAA2B;QAC/D,OAAO,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,SAAS,CAAC,CAAC,CAAC;IAC9F,CAAC;IACD,2EAA2E;IAC3E,OAAO,CAAC,IAAY;QAClB,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC;QACxC,IAAI,OAAO,KAAK,SAAS,IAAI,OAAO,CAAC,IAAI,KAAK,IAAI;YAAE,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;QAC7G,OAAO,OAAO,CAAC;IACjB,CAAC;CACF;AA2CD;;;;;;;;GAQG;AACH,MAAM,OAAO,yBAAyB;IAUP;IAT7B,yFAAyF;IAChF,MAAM,GAAG,IAAI,iBAAiB,EAAU,CAAC;IAClD,8EAA8E;IACrE,QAAQ,CAAmB;IACnB,YAAY,GAAG,IAAI,GAAG,EAAsB,CAAC;IAC7C,IAAI,GAAG,IAAI,GAAG,EAAqB,CAAC;IACpC,GAAG,CAAe;IAEnC,2EAA2E;IAC3E,YAA6B,OAA6B;QAA7B,YAAO,GAAP,OAAO,CAAsB;QACxD,IAAI,CAAC,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC;QACnC,IAAI,CAAC,QAAQ,GAAG;YACd,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,sBAAsB,EAAE,aAAa,EAAE,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,EAAE,SAAS,CAAC,UAAU,CAAC,CAAC;YACxI,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,sBAAsB,EAAE,gBAAgB,EAAE,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,EAAE,WAAW,CAAC,CAAC,CAAC,CAAC;YACxK,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;gBACnC,MAAM,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;gBACzD,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,sBAAsB,EAAE,gBAAgB,EAAE,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,SAAS,EAAE,GAAG,KAAK,WAAW,EAAE,KAAK,EAAE,EAAE,WAAW,CAAC,CAAC;YAC7J,CAAC;YACD,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE;gBAC/B,MAAM,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;gBACzD,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,sBAAsB,EAAE,gBAAgB,EAAE,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,EAAE,WAAW,CAAC,CAAC;YAC1J,CAAC;YACD,YAAY,EAAE,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,YAAY,EAAE,gBAAgB,EAAE,EAAE,IAAI,EAAE,EAAE,WAAW,CAAC;YACtG,IAAI,EAAE;gBACJ,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE;oBACtE,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC,CAAC;oBAChD,IAAI,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;oBAChC,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;wBACzB,MAAM,GAAG,EAAE,GAAG,OAAO,CAAC,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;wBAC3G,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;oBAC7B,CAAC;oBACD,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC;oBAC5D,MAAM,CAAC,KAAK,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;oBACxC,IAAI,MAAM,CAAC,KAAK,IAAI,KAAK;wBAAE,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;yBAC1D,IAAI,MAAM,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;wBACpC,MAAM,CAAC,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;4BAC7B,MAAO,CAAC,KAAK,GAAG,SAAS,CAAC;4BAC1B,KAAK,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC,KAAK,CAAC,CAAC,GAAY,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,iBAAiB,EAAE,GAAG,CAAC,CAAC,CAAC;wBACnG,CAAC,EAAE,GAAG,CAAC,CAAC;wBACR,MAAM,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;oBACvB,CAAC;gBACH,CAAC;gBACD,KAAK,EAAE,CAAC,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,CAAC;aAC1D;SACF,CAAC;IACJ,CAAC;IAEO,IAAI,CAA6C,OAAqB,EAAE,IAAY,EAAE,WAAgB,EAAE,IAAsB,EAAE,YAAiB;QACvJ,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;QACpE,OAAO,aAAa,CAAC,OAAO,CAAC,UAAU,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,SAAS,EAAE,WAAW,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC,CAAC;IACzH,CAAC;IAEO,KAAK,CAAC,KAAK,CAAC,IAAY,EAAE,WAA+B;QAC/D,IAAI,WAAW,KAAK,SAAS;YAAE,OAAO;QACtC,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC,CAAC;QAChD,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAClC,IAAI,MAAM,KAAK,SAAS;YAAE,OAAO;QACjC,IAAI,MAAM,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;YAAC,YAAY,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAAC,MAAM,CAAC,KAAK,GAAG,SAAS,CAAC;QAAC,CAAC;QACzF,IAAI,MAAM,CAAC,OAAO,KAAK,SAAS;YAAE,MAAM,MAAM,CAAC,OAAO,CAAC;QACvD,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO;QACvC,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QACvC,MAAM,CAAC,KAAK,GAAG,CAAC,CAAC;QACjB,MAAM,IAAI,GAAG;YACX,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,WAAW,EAAE,MAAM;SAC9E,CAAC;QACF,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;QAChE,MAAM,OAAO,GAAG,aAAa,CAAC,KAAK,CAAC,UAAU,EAAE,MAAM,EAAE,UAAU,EAAE;YAClE,MAAM,EAAE,KAAK,CAAC,SAAS,EAAE,WAAW,EAAE,eAAe,EAAE,IAAI,EAAE,YAAY,EAAE,WAAW;SACvF,CAAC,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE;YACjB,wEAAwE;YACxE,kEAAkE;YAClE,MAAM,OAAO,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;iBACrF,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,UAAU,KAAK,KAAK,CAAC,UAAU,CAAC;iBAC5D,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,aAAa,CAAC,OAAO,CAAC,UAAU,EAAE,MAAM,EAAE,cAAc,EAAE;gBAC1E,MAAM,EAAE,OAAO,CAAC,SAAS,EAAE,WAAW,EAAE,eAAe,EAAE,IAAI,EAAE,YAAY,EAAE,WAAW,EAAE,SAAS,EAAE,IAAI;aAC1G,CAAC,CAAC,CAAC,CAAC;QACT,CAAC,CAAC,CAAC;QACH,yEAAyE;QACzE,wEAAwE;QACxE,kCAAkC;QAClC,MAAM,CAAC,OAAO,GAAG,OAAO,CAAC;QACzB,IAAI,CAAC;YAAC,MAAM,OAAO,CAAC;QAAC,CAAC;gBAAS,CAAC;YAC9B,IAAI,MAAM,CAAC,OAAO,KAAK,OAAO;gBAAE,MAAM,CAAC,OAAO,GAAG,SAAS,CAAC;YAC3D,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,KAAK,SAAS;gBAAE,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACxF,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,IAAI,CAAC,OAAqB,EAAE,IAAY,EAAE,MAAsB;QAC5E,IAAI,CAAC,KAAK,EAAE,CAAC;QACb,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;QAC3E,IAAI,KAAK,EAAE,MAAM,KAAK,SAAS;YAAE,MAAM,IAAI,YAAY,CAAC,aAAa,EAAE,iCAAiC,CAAC,CAAC;QAC1G,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,YAAY,CAAC,MAAM,EAAE,EAAE,CAAC;YAC7C,IAAI,GAAG,CAAC,IAAI,KAAK,OAAO,CAAC,IAAI,IAAI,GAAG,CAAC,OAAO,KAAK,OAAO,CAAC,OAAO,IAAI,GAAG,CAAC,IAAI,KAAK,IAAI;gBACnF,CAAC,GAAG,CAAC,OAAO,IAAI,GAAG,CAAC,WAAW,KAAK,KAAK,CAAC,OAAO,EAAE,WAAW,IAAI,CAAC,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,KAAK,CAAC,MAAM,KAAK,SAAS,CAAC,EAAE,CAAC;gBAC1H,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,CAAC,GAAG,CAAC,MAAO,CAAC,IAAI,CAAC,KAAK,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC;oBAAE,MAAM,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAC;gBACrH,IAAI,GAAG,CAAC,OAAO,IAAI,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;oBAAC,GAAG,CAAC,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,MAAM,CAAC;oBAAC,GAAG,CAAC,KAAK,GAAG,IAAI,eAAe,EAAE,CAAC;gBAAC,CAAC;gBAC7G,OAAO,GAAG,CAAC;YACb,CAAC;QACH,CAAC;QACD,IAAI,IAAI,CAAC,YAAY,CAAC,IAAI,IAAI,KAAK;YAAE,MAAM,IAAI,YAAY,CAAC,UAAU,EAAE,oCAAoC,CAAC,CAAC;QAC9G,MAAM,GAAG,GAAe,EAAE,GAAG,OAAO,EAAE,EAAE,EAAE,UAAU,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,KAAK,CAAC,OAAO,EAAE,WAAW;YACnG,OAAO,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,eAAe,EAAE,EAAE,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC;QACjI,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;QACnC,OAAO,GAAG,CAAC;IACb,CAAC;IAEO,GAAG,CAAC,GAAe;QACzB,uEAAuE;QACvE,qEAAqE;QACrE,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,eAAe,EAAE,IAAI,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC;QACxE,IAAI,MAAM,KAAK,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;QACnF,OAAO,GAAG,MAAM,kBAAkB,GAAG,CAAC,EAAE,EAAE,CAAC;IAC7C,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,IAAY,EAAE,IAAY;QAC7C,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QACvD,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;QAC5D,MAAM,IAAI,GAAG,MAAM,YAAY,CAAC,OAAO,CAAC,UAAU,EAAE,MAAM,EAAE,eAAe,IAAI,EAAE,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC;QAClH,IAAI,CAAC,MAAM,EAAE,CAAC;QACd,IAAI,IAAI,CAAC,UAAU,KAAK,GAAG;YAAE,MAAM,IAAI,KAAK,CAAC,cAAc,IAAI,iBAAiB,CAAC,CAAC;QAClF,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC,CAAC;QACpD,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,IAAI,GAAG,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;QAC5F,IAAI,IAAI,GAAG,IAAI;YAAE,OAAO,EAAE,IAAI,EAAE,KAAc,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,EAAE,CAAC;QAChG,MAAM,QAAQ,GAAG,MAAM,YAAY,CAAC,OAAO,CAAC,UAAU,EAAE,KAAK,EAAE,eAAe,IAAI,EAAE,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC;QACrH,MAAM,MAAM,GAAa,EAAE,CAAC;QAC5B,IAAI,MAAM,GAAG,CAAC,CAAC;QACf,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,QAAQ,EAAE,CAAC;YACnC,MAAM,IAAK,KAAgB,CAAC,MAAM,CAAC;YACnC,IAAI,MAAM,GAAG,IAAI,EAAE,CAAC;gBAAC,QAAQ,CAAC,OAAO,EAAE,CAAC;gBAAC,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;YAAC,CAAC;YAC9F,MAAM,CAAC,IAAI,CAAC,KAAe,CAAC,CAAC;QAC/B,CAAC;QACD,IAAI,QAAQ,CAAC,UAAU,KAAK,GAAG,IAAI,MAAM,KAAK,IAAI;YAAE,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;QAChG,OAAO,EAAE,IAAI,EAAE,QAAiB,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;IAClE,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,IAAY,EAAE,OAAe,EAAE,IAAY,EAAE,IAAY;QACzE,MAAM,OAAO,GAAG,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;QAClC,IAAI,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,WAAW,EAAE,gBAAgB,EAAE,CAAC,IAAI,CAAC,EAAE,SAAS,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YAAE,OAAO,IAAI,CAAC;QAC9G,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,UAAU,EAAE,EAAE,CAAC,CAAC;QACzG,OAAO,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;IAC7C,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,IAAY,EAAE,OAAe,EAAE,MAAc,EAAE,IAAY,EAAE,IAAY,EAAE,OAAe;QAC1G,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QAC3D,IAAI,KAAK,EAAE,MAAM,KAAK,SAAS,IAAI,KAAK,CAAC,SAAS,KAAK,MAAM;YAAE,OAAO,KAAK,CAAC;QAC5E,MAAM,GAAG,GAAG,CAAC,GAAG,IAAI,CAAC,YAAY,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,IAAI,CAAC,CAAC,OAAO,KAAK,OAAO;YAC9F,CAAC,CAAC,IAAI,KAAK,IAAI,IAAI,CAAC,CAAC,WAAW,KAAK,KAAK,CAAC,OAAO,EAAE,WAAW,IAAI,CAAC,CAAC,MAAM,EAAE,OAAO,KAAK,OAAO,IAAI,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC,CAAC;QACtI,IAAI,GAAG,EAAE,MAAM,KAAK,SAAS,IAAI,GAAG,CAAC,OAAO;YAAE,OAAO,KAAK,CAAC;QAC3D,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,eAAe,GAAG,CAAC,EAAE,SAAS,EAAE,iBAAiB,EAAE,GAAG,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;IACpG,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,IAAY,EAAE,UAAkB,EAAE,IAAY,EAAE,IAAY;QAC7E,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QACvD,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,EAAE,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,UAAU,EAAE,EAAE,CAAC,CAAC;QAC5G,OAAO,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,QAAQ,EAAE,GAAG,CAAC,EAAE,EAAE,CAAC;IAClD,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,IAAY,EAAE,IAAY,EAAE,QAAgB;QAC7D,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QACvD,MAAM,GAAG,GAAG,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC5C,IAAI,GAAG,EAAE,MAAM,KAAK,SAAS,IAAI,GAAG,CAAC,IAAI,KAAK,IAAI,IAAI,GAAG,CAAC,IAAI,KAAK,IAAI,IAAI,GAAG,CAAC,OAAO,KAAK,OAAO,CAAC,OAAO,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YAAE,OAAO,KAAK,CAAC;QACrJ,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,eAAe,GAAG,CAAC,EAAE,SAAS,EAAE,iBAAiB,EAAE,GAAG,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;IACpG,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,IAAY,EAAE,IAAgB;QAC9C,IAAI,IAAI,CAAC,MAAM,GAAG,IAAI;YAAE,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;QACjF,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QACvD,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;QAC5D,OAAO,aAAa,CAAC,OAAO,CAAC,UAAU,EAAE,MAAM,EAAE,aAAa,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,SAAS,EAAE,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,UAAU,EAAE,CAAC,CAAC;IAC1I,CAAC;IAED,eAAe,KAAoB,OAAO,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClE,eAAe,KAAsB,OAAO,OAAO,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC,CAAC,CAAC,CAAC;IAEhI,sFAAsF;IACtF,MAAM,CAAC,IAAY,EAAE,OAAe;QAClC,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,YAAY,CAAC,MAAM,EAAE;YAAE,IAAI,GAAG,CAAC,IAAI,KAAK,IAAI,IAAI,GAAG,CAAC,OAAO,KAAK,OAAO,EAAE,CAAC;gBAAC,GAAG,CAAC,OAAO,GAAG,IAAI,CAAC;gBAAC,GAAG,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;YAAC,CAAC;IAC5I,CAAC;IAED,kFAAkF;IAClF,SAAS,CAAC,IAAY,EAAE,OAAe;QACrC,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,YAAY,CAAC,MAAM,EAAE;YAAE,IAAI,GAAG,CAAC,IAAI,KAAK,IAAI,IAAI,GAAG,CAAC,OAAO,KAAK,OAAO,EAAE,CAAC;gBAC/F,GAAG,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;gBAClB,GAAG,CAAC,KAAK,GAAG,IAAI,eAAe,EAAE,CAAC;YACpC,CAAC;IACH,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,IAAY,EAAE,OAAe,EAAE,OAA0B;QAC3E,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QAC3B,MAAM,IAAI,GAAG,CAAC,GAAG,IAAI,CAAC,YAAY,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,KAAK,IAAI,IAAI,GAAG,CAAC,OAAO,KAAK,OAAO,CAAC,CAAC;QAC3G,KAAK,MAAM,GAAG,IAAI,IAAI;YAAE,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACzD,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;YAC9D,IAAI,GAAG,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;gBAC7B,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;gBACpD,MAAM,aAAa,CAAC,OAAO,CAAC,UAAU,EAAE,QAAQ,EAAE,eAAe,GAAG,CAAC,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,SAAS,EAAE,YAAY,EAAE,WAAW,EAAE,CAAC,CAAC;YACvI,CAAC;QACH,CAAC,CAAC,CAAC,CAAC;QACJ,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,KAAK,UAAU,CAAC,CAAC;QACvE,IAAI,OAAO,EAAE,MAAM,KAAK,UAAU;YAAE,MAAM,OAAO,CAAC,MAAM,CAAC;QACzD,OAAO,IAAI,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,MAAM,CAAC;IAC/D,CAAC;IAEO,KAAK;QACX,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,YAAY,CAAC,MAAM,EAAE;YAAE,IAAI,GAAG,CAAC,OAAO,IAAI,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;gBAC5E,GAAG,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;gBAClB,uEAAuE;gBACvE,oEAAoE;gBACpE,IAAI,GAAG,CAAC,MAAM,KAAK,SAAS;oBAAE,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YACjE,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,KAAK,CAAC,GAAe;QACjC,IAAI,GAAG,CAAC,OAAO,IAAI,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,IAAI,GAAG,CAAC,OAAO,IAAI,IAAI,CAAC,GAAG,EAAE;YAAE,OAAO,KAAK,CAAC;QACvF,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC;QACnE,OAAO,KAAK,EAAE,MAAM,KAAK,SAAS,IAAI,KAAK,CAAC,OAAO,EAAE,WAAW,KAAK,GAAG,CAAC,WAAW,CAAC;IACvF,CAAC;IAED;;;;OAIG;IACH,UAAU;QACR,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,GAAG,CAAC,EAAE,CAAC,CAAC,KAAK,EAAE,KAAK,CAAC,EAAE,qBAAqB,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;YACxD,IAAI,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,eAAe,CAAC,KAAK,SAAS;gBAAE,OAAO,CAAC,CAAC,IAAI,CAAC,6CAA6C,EAAE,GAAG,CAAC,CAAC;YACnH,MAAM,GAAG,GAAG,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC;YACtD,IAAI,GAAG,KAAK,SAAS,IAAI,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,MAAM;gBAAE,OAAO,CAAC,CAAC,QAAQ,EAAE,CAAC;YACpI,IAAI,OAAwB,CAAC;YAC7B,IAAI,CAAC;gBAAC,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC;gBAAC,OAAO,CAAC,CAAC,IAAI,CAAC,4BAA4B,EAAE,GAAG,CAAC,CAAC;YAAC,CAAC;YAC1H,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,CAAC,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;YACxD,MAAM,MAAM,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;YACrG,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC;YAC1B,MAAM,IAAI,GAAG,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,eAAe,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,eAAe,GAAG,CAAC,EAAE,IAAI,IAAI,eAAe,CAAC;gBAC3G,KAAK,EAAE,GAAG,CAAC,OAAO,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG,MAAM,CAAC,IAAI,EAAE,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO;aACpF,CAAC,EAAE,CAAC;YACL,MAAM,QAAQ,GAAG,MAAM,YAAY,CAAC,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,EAAE;gBAC1E,MAAM,EAAE,OAAO,CAAC,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS;gBACvD,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,UAAU,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;aAC5H,CAAC,CAAC;YACH,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,EAAE,cAAc,EAAE,0BAA0B,EAAE,CAAC,CAAC;YAC5E,KAAK,MAAM,IAAI,IAAI,CAAC,gBAAgB,EAAE,kBAAkB,CAAC,EAAE,CAAC;gBAC1D,MAAM,KAAK,GAAG,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;gBACrC,IAAI,OAAO,KAAK,KAAK,QAAQ;oBAAE,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;YAC1D,CAAC;YACD,OAAO,IAAI,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAA+B,EAAE,EAAE,MAAM,EAAE,QAAQ,CAAC,UAAU,IAAI,GAAG,EAAE,OAAO,EAAE,CAAC,CAAC;QAC/H,CAAC,CAAC,CAAC;QACH,OAAO,GAAG,CAAC;IACb,CAAC;IAED,mFAAmF;IACnF,KAAK;QACH,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,YAAY,CAAC,MAAM,EAAE;YAAE,GAAG,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;QAChE,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE;YAAE,IAAI,MAAM,CAAC,KAAK,KAAK,SAAS;gBAAE,YAAY,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACpG,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,CAAC;QAC1B,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;IACpB,CAAC;CACF"}

package/dist/src/identity/file-identity-store.d.ts

@@ -0,0 +1,18 @@
+/**
+ * Copyright (c) 2025 Elara AI Pty Ltd
+ * Licensed under BSL 1.1. See LICENSE for details.
+ */
+import { InMemoryMachineIdentityStore, type IdentityFile } from './in-memory-identity-store.js';
+/**
+ * Persists machine credentials atomically, with one writer under the hub lock.
+ * Failed writes leave memory unchanged; corrupt files fail closed.
+ * @example
+ * const identities = new FileMachineIdentityStore(rackHome());
+ */
+export declare class FileMachineIdentityStore extends InMemoryMachineIdentityStore {
+    private readonly file;
+    /** @param home - The private rack home owned by this hub */
+    constructor(home: string);
+    protected persist(state: IdentityFile): Promise<void>;
+}
+//# sourceMappingURL=file-identity-store.d.ts.map

package/dist/src/identity/file-identity-store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"file-identity-store.d.ts","sourceRoot":"","sources":["../../../src/identity/file-identity-store.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAMH,OAAO,EAAoB,4BAA4B,EAAE,KAAK,YAAY,EAAE,MAAM,+BAA+B,CAAC;AAElH;;;;;GAKG;AACH,qBAAa,wBAAyB,SAAQ,4BAA4B;IACxE,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAS;IAE9B,4DAA4D;gBAChD,IAAI,EAAE,MAAM;cAWL,OAAO,CAAC,KAAK,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC;CAG/D"}

package/dist/src/identity/file-identity-store.js

@@ -0,0 +1,34 @@
+/**
+ * Copyright (c) 2025 Elara AI Pty Ltd
+ * Licensed under BSL 1.1. See LICENSE for details.
+ */
+import { join } from 'node:path';
+import { decodeBeast2For, encodeBeast2For } from '@elaraai/east';
+import { ensureRackHome, IDENTITY_FILE } from '../paths.js';
+import { readStateFile, writeStateFile } from '../state-file.js';
+import { IdentityFileType, InMemoryMachineIdentityStore } from './in-memory-identity-store.js';
+/**
+ * Persists machine credentials atomically, with one writer under the hub lock.
+ * Failed writes leave memory unchanged; corrupt files fail closed.
+ * @example
+ * const identities = new FileMachineIdentityStore(rackHome());
+ */
+export class FileMachineIdentityStore extends InMemoryMachineIdentityStore {
+    file;
+    /** @param home - The private rack home owned by this hub */
+    constructor(home) {
+        super();
+        this.file = join(ensureRackHome(home), IDENTITY_FILE);
+        this.ready = readStateFile(this.file).then((bytes) => {
+            if (bytes !== null)
+                this.state = decodeBeast2For(IdentityFileType)(bytes);
+        });
+        // Loading starts at construction; the first operation still receives
+        // its failure, even if the caller has not made one yet.
+        void this.ready.catch(() => undefined);
+    }
+    persist(state) {
+        return writeStateFile(this.file, encodeBeast2For(IdentityFileType)(state));
+    }
+}
+//# sourceMappingURL=file-identity-store.js.map

package/dist/src/identity/file-identity-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"file-identity-store.js","sourceRoot":"","sources":["../../../src/identity/file-identity-store.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,eAAe,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AACjE,OAAO,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5D,OAAO,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AACjE,OAAO,EAAE,gBAAgB,EAAE,4BAA4B,EAAqB,MAAM,+BAA+B,CAAC;AAElH;;;;;GAKG;AACH,MAAM,OAAO,wBAAyB,SAAQ,4BAA4B;IACvD,IAAI,CAAS;IAE9B,4DAA4D;IAC5D,YAAY,IAAY;QACtB,KAAK,EAAE,CAAC;QACR,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,EAAE,aAAa,CAAC,CAAC;QACtD,IAAI,CAAC,KAAK,GAAG,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE;YACnD,IAAI,KAAK,KAAK,IAAI;gBAAE,IAAI,CAAC,KAAK,GAAG,eAAe,CAAC,gBAAgB,CAAC,CAAC,KAAK,CAAC,CAAC;QAC5E,CAAC,CAAC,CAAC;QACH,qEAAqE;QACrE,wDAAwD;QACxD,KAAK,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IACzC,CAAC;IAEkB,OAAO,CAAC,KAAmB;QAC5C,OAAO,cAAc,CAAC,IAAI,CAAC,IAAI,EAAE,eAAe,CAAC,gBAAgB,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;IAC7E,CAAC;CACF"}

package/dist/src/identity/file-identity-store.spec.d.ts

@@ -0,0 +1,6 @@
+/**
+ * Copyright (c) 2025 Elara AI Pty Ltd
+ * Licensed under BSL 1.1. See LICENSE for details.
+ */
+export {};
+//# sourceMappingURL=file-identity-store.spec.d.ts.map

package/dist/src/identity/file-identity-store.spec.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"file-identity-store.spec.d.ts","sourceRoot":"","sources":["../../../src/identity/file-identity-store.spec.ts"],"names":[],"mappings":"AAAA;;;GAGG"}

package/dist/src/identity/file-identity-store.spec.js

@@ -0,0 +1,59 @@
+/**
+ * Copyright (c) 2025 Elara AI Pty Ltd
+ * Licensed under BSL 1.1. See LICENSE for details.
+ */
+import { it } from 'node:test';
+import assert from 'node:assert/strict';
+import { mkdtemp, rm, stat, writeFile } from 'node:fs/promises';
+import { tmpdir } from 'node:os';
+import { join } from 'node:path';
+import { decodeBeast2For } from '@elaraai/east';
+import { FileMachineIdentityStore } from './file-identity-store.js';
+import { IdentityFileType } from './in-memory-identity-store.js';
+import { generateEnrollmentToken } from './machine-identity.js';
+import { readStateFile } from '../state-file.js';
+it('consumes an enrollment once across racing callers and reload, with private atomic state', async (t) => {
+    const home = await mkdtemp(join(tmpdir(), 'e3r-'));
+    t.after(() => rm(home, { recursive: true, force: true }));
+    const store = new FileMachineIdentityStore(home);
+    const { tokenHash } = generateEnrollmentToken();
+    await store.putEnrollmentToken(tokenHash, new Date(Date.now() + 60_000));
+    const results = await Promise.all(Array.from({ length: 12 }, () => store.consumeEnrollmentToken(tokenHash, new Date())));
+    assert.equal(results.filter(Boolean).length, 1);
+    assert.equal(await new FileMachineIdentityStore(home).consumeEnrollmentToken(tokenHash, new Date()), false);
+    const file = join(home, 'identity.beast2');
+    await writeFile(`${file}.crash.partial`, 'incomplete');
+    await store.putRackToken('one', 'rack', new Date(), 'current');
+    assert.equal((await new FileMachineIdentityStore(home).getRackToken('one'))?.rackId, 'rack');
+    if (process.platform !== 'win32') {
+        assert.equal((await stat(home)).mode & 0o777, 0o700);
+        assert.equal((await stat(file)).mode & 0o777, 0o600);
+    }
+});
+it('rejects and prunes expired enrollment tokens and retains rotation grace across reload', async (t) => {
+    const home = await mkdtemp(join(tmpdir(), 'e3r-'));
+    t.after(() => rm(home, { recursive: true, force: true }));
+    const store = new FileMachineIdentityStore(home);
+    await store.putEnrollmentToken('expired', new Date(0));
+    assert.equal(await store.consumeEnrollmentToken('expired', new Date()), false);
+    const bytes = await readStateFile(join(home, 'identity.beast2'));
+    assert.ok(bytes);
+    assert.equal(decodeBeast2For(IdentityFileType)(bytes).enrollmentTokens.size, 0);
+    await store.putRackToken('old', 'rack', new Date(), 'current');
+    await store.putRackToken('next', 'rack', new Date(), 'pending');
+    const cutoff = new Date(Date.now() + 60_000);
+    await store.promoteRackToken('rack', 'next', cutoff);
+    const reload = new FileMachineIdentityStore(home);
+    assert.equal((await reload.getRackToken('next'))?.status, 'current');
+    assert.deepEqual((await reload.getRackToken('old'))?.graceUntil, cutoff);
+    await reload.putRackToken('third', 'rack', new Date(), 'pending');
+    await reload.promoteRackToken('rack', 'third', new Date(cutoff.getTime() + 60_000));
+    assert.deepEqual((await reload.getRackToken('old'))?.graceUntil, cutoff, 'existing grace is never extended');
+});
+it('fails closed on a corrupt identity file', async (t) => {
+    const home = await mkdtemp(join(tmpdir(), 'e3r-'));
+    t.after(() => rm(home, { recursive: true, force: true }));
+    await writeFile(join(home, 'identity.beast2'), 'broken');
+    await assert.rejects(new FileMachineIdentityStore(home).getRackToken('anything'));
+});
+//# sourceMappingURL=file-identity-store.spec.js.map

package/dist/src/identity/file-identity-store.spec.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"file-identity-store.spec.js","sourceRoot":"","sources":["../../../src/identity/file-identity-store.spec.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,EAAE,EAAE,MAAM,WAAW,CAAC;AAC/B,OAAO,MAAM,MAAM,oBAAoB,CAAC;AACxC,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAChE,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAChD,OAAO,EAAE,wBAAwB,EAAE,MAAM,0BAA0B,CAAC;AACpE,OAAO,EAAE,gBAAgB,EAAE,MAAM,+BAA+B,CAAC;AACjE,OAAO,EAAE,uBAAuB,EAAE,MAAM,uBAAuB,CAAC;AAChE,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAEjD,EAAE,CAAC,yFAAyF,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;IACxG,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,MAAM,CAAC,CAAC,CAAC;IACnD,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IAC1D,MAAM,KAAK,GAAG,IAAI,wBAAwB,CAAC,IAAI,CAAC,CAAC;IACjD,MAAM,EAAE,SAAS,EAAE,GAAG,uBAAuB,EAAE,CAAC;IAChD,MAAM,KAAK,CAAC,kBAAkB,CAAC,SAAS,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,CAAC,CAAC;IACzE,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,sBAAsB,CAAC,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IACzH,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IAChD,MAAM,CAAC,KAAK,CAAC,MAAM,IAAI,wBAAwB,CAAC,IAAI,CAAC,CAAC,sBAAsB,CAAC,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,EAAE,KAAK,CAAC,CAAC;IAC5G,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,EAAE,iBAAiB,CAAC,CAAC;IAC3C,MAAM,SAAS,CAAC,GAAG,IAAI,gBAAgB,EAAE,YAAY,CAAC,CAAC;IACvD,MAAM,KAAK,CAAC,YAAY,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,IAAI,EAAE,EAAE,SAAS,CAAC,CAAC;IAC/D,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,IAAI,wBAAwB,CAAC,IAAI,CAAC,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;IAC7F,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;QACjC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,GAAG,KAAK,EAAE,KAAK,CAAC,CAAC;QACrD,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,GAAG,KAAK,EAAE,KAAK,CAAC,CAAC;IACvD,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,EAAE,CAAC,uFAAuF,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;IACtG,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,MAAM,CAAC,CAAC,CAAC;IACnD,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IAC1D,MAAM,KAAK,GAAG,IAAI,wBAAwB,CAAC,IAAI,CAAC,CAAC;IACjD,MAAM,KAAK,CAAC,kBAAkB,CAAC,SAAS,EAAE,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IACvD,MAAM,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,sBAAsB,CAAC,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,EAAE,KAAK,CAAC,CAAC;IAC/E,MAAM,KAAK,GAAG,MAAM,aAAa,CAAC,IAAI,CAAC,IAAI,EAAE,iBAAiB,CAAC,CAAC,CAAC;IACjE,MAAM,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC;IACjB,MAAM,CAAC,KAAK,CAAC,eAAe,CAAC,gBAAgB,CAAC,CAAC,KAAK,CAAC,CAAC,gBAAgB,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IAChF,MAAM,KAAK,CAAC,YAAY,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,IAAI,EAAE,EAAE,SAAS,CAAC,CAAC;IAC/D,MAAM,KAAK,CAAC,YAAY,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,IAAI,EAAE,EAAE,SAAS,CAAC,CAAC;IAChE,MAAM,MAAM,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,CAAC;IAC7C,MAAM,KAAK,CAAC,gBAAgB,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;IACrD,MAAM,MAAM,GAAG,IAAI,wBAAwB,CAAC,IAAI,CAAC,CAAC;IAClD,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,MAAM,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC;IACrE,MAAM,CAAC,SAAS,CAAC,CAAC,MAAM,MAAM,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC;IACzE,MAAM,MAAM,CAAC,YAAY,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,IAAI,EAAE,EAAE,SAAS,CAAC,CAAC;IAClE,MAAM,MAAM,CAAC,gBAAgB,CAAC,MAAM,EAAE,OAAO,EAAE,IAAI,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,GAAG,MAAM,CAAC,CAAC,CAAC;IACpF,MAAM,CAAC,SAAS,CAAC,CAAC,MAAM,MAAM,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,EAAE,UAAU,EAAE,MAAM,EAAE,kCAAkC,CAAC,CAAC;AAC/G,CAAC,CAAC,CAAC;AAEH,EAAE,CAAC,yCAAyC,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;IACxD,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,MAAM,CAAC,CAAC,CAAC;IACnD,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IAC1D,MAAM,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,iBAAiB,CAAC,EAAE,QAAQ,CAAC,CAAC;IACzD,MAAM,MAAM,CAAC,OAAO,CAAC,IAAI,wBAAwB,CAAC,IAAI,CAAC,CAAC,YAAY,CAAC,UAAU,CAAC,CAAC,CAAC;AACpF,CAAC,CAAC,CAAC"}