@evomap/evolver-proxy 2.0.0-beta.2 → 2.0.0-beta.22

package/dist/bin/evolver-proxy.d.ts

@@ -1,12 +1,84 @@
 #!/usr/bin/env node
 import { mailbox } from '@evomap/evolver-core';
+import { PrivateNodeCredentialStore } from '../private/nodeCredentialStore.js';
+import { loadEnvFileFromEnv } from './envFile.js';
+import { type DegradedStartupBootstrapResult } from '../selfUpdate/bootstrap.js';
 import { type SelfUpdatePolicy } from '../selfUpdate/policy.js';
 import { type ReleaseBinaryOptions } from '../selfUpdate/releaseBinary.js';
+import { rollbackDurableSelfUpdate, type SelfUpdateRecoveryOptions, type SelfUpdateRecoveryResult, type StagedBinaryProbe } from '../selfUpdate/transaction.js';
+import { maybeRunWindowsUpdaterWorkerFromArgv } from '../selfUpdate/windowsUpdater.js';
+import { maybeRunUnixRecoveryController } from '../selfUpdate/unixController.js';
+import { maybeRunWindowsRecoveryController } from '../selfUpdate/windowsController.js';
+import { consumeRecoveryChildStartGate } from '../selfUpdate/recoveryChildStartGate.js';
 import type { AtpProxyClient, ProxyDaemonDeps, ProxyTickReport } from '../daemon/proxyDaemon.js';
 import type { HelloLifecycleMode, HelloResult, HeartbeatOptions, HeartbeatResult } from '../lifecycle/manager.js';
 import type { InboundResult } from '../sync/engine.js';
-export declare function proxyUsage(): string;
-export declare function runProxyCli(): void;
+/** evolver-proxy 系统级 daemon 入口(M6-7). EVOMAP_HUB_MODE/URL/NODE_SECRET 选址. */
+export interface RunProxyMainOptions {
+    environmentPrepared?: boolean;
+    recoveryPrepared?: SelfUpdateRecoveryResult;
+    requireLifecycleBootstrapState?: boolean;
+    /** Test-only transport seam. Production always resolves the configured hub runtime. */
+    connectRuntime?: typeof connectHubRuntime;
+    /** Test-only bounded loop seam. Production always runs the managed proxy loop. */
+    runLoop?: Parameters<typeof runManagedProxyLoop>[0]['runLoop'];
+}
+export declare function writeBootstrapStartupResult(result: DegradedStartupBootstrapResult, writers?: {
+    stdout?: (text: string) => void;
+    stderr?: (text: string) => void;
+}): 0 | 1 | undefined;
+export declare function runProxyMain(options?: RunProxyMainOptions): Promise<void>;
+export declare function recoverBoundDurableSelfUpdate(options: Omit<SelfUpdateRecoveryOptions, 'beforeJournalMutation'>): Promise<SelfUpdateRecoveryResult>;
+export declare function loadProxyEnvFile(env: NodeJS.ProcessEnv): ReturnType<typeof loadEnvFileFromEnv>;
+interface StartupClosableStore {
+    close(): void;
+}
+interface StartupStoppableDaemon {
+    stop(): Promise<void>;
+}
+interface RollbackPendingStartupOptions {
+    storePath?: string;
+    store?: StartupClosableStore;
+    daemon?: StartupStoppableDaemon;
+    startupError: unknown;
+    env?: NodeJS.ProcessEnv;
+    rollback?: typeof rollbackDurableSelfUpdate;
+    openTelemetryStore?: (storePath: string) => StartupClosableStore;
+    persistTelemetry?: (store: StartupClosableStore, recovery: SelfUpdateRecoveryResult) => void;
+    logger?: {
+        write(chunk: string): unknown;
+    };
+    processExecPath?: string;
+}
+export declare function rollbackPendingStartup(options: RollbackPendingStartupOptions): Promise<SelfUpdateRecoveryResult>;
+export declare function startupRollbackExitCode(rollback: SelfUpdateRecoveryResult): 78;
+export declare function proxyUsage(command?: string): string;
+export interface RunProxyCliOptions {
+    argv?: readonly string[];
+    env?: NodeJS.ProcessEnv;
+    platform?: NodeJS.Platform;
+    processExecPath?: string;
+    runMain?: (options?: RunProxyMainOptions) => Promise<void>;
+    recoverStartup?: typeof recoverBoundDurableSelfUpdate;
+    runUnixRecoveryController?: typeof maybeRunUnixRecoveryController;
+    runWindowsRecoveryController?: typeof maybeRunWindowsRecoveryController;
+    runWindowsUpdaterWorker?: typeof maybeRunWindowsUpdaterWorkerFromArgv;
+    consumeChildStartGate?: typeof consumeRecoveryChildStartGate;
+}
+export interface ProxyCliPathOptions {
+    home?: string;
+    evomapHome?: string;
+    store?: string;
+    settings?: string;
+    envFile?: string;
+    help: boolean;
+}
+export declare function parseProxyCliPathOptions(argv: readonly string[]): ProxyCliPathOptions;
+export declare function prepareProxyCliEnvironment(argv: readonly string[], env: NodeJS.ProcessEnv): {
+    options: ProxyCliPathOptions;
+    envFile: ReturnType<typeof loadEnvFileFromEnv>;
+};
+export declare function runProxyCli(options?: RunProxyCliOptions): Promise<number>;
 type PrivateAdapterImporter = (specifier: string) => Promise<unknown>;
 export interface RuntimeDeps {
     mode: 'public' | 'private';
@@ -16,14 +88,22 @@ export interface RuntimeDeps {
     env?: Record<string, string | undefined>;
     now?: () => number;
     privateImporter?: PrivateAdapterImporter;
+    privateNodeCredentialStore?: Pick<PrivateNodeCredentialStore, 'read' | 'write'>;
 }
 export type PublicNodeSecretSource = 'env' | 'store' | 'hub_rotate' | 'legacy_file';
 export interface PublicNodeSecretSelection {
     nodeSecret: string | undefined;
+    nodeId?: string;
     nodeSecretVersion?: number;
     source: PublicNodeSecretSource;
     storeSecret?: string;
 }
+export interface VerifiedPublicSender {
+    senderId: () => string | undefined;
+    adopt: (nodeId: string) => void;
+}
+export declare function createVerifiedPublicSender(initialNodeId?: string): VerifiedPublicSender;
+export declare function adoptVerifiedPublicNodeId(store: mailbox.MailboxStore, selection: PublicNodeSecretSelection, sender: VerifiedPublicSender, nodeId: string): void;
 export interface HubRuntime {
     hub: ProxyDaemonDeps['hub'];
     hello: (opts: {
@@ -39,6 +119,7 @@ interface ProxyLoopDaemon {
     nextDelay: (last: InboundResult) => number;
     sleep?: (delayMs: number) => Promise<void>;
     setWakeHandler?: (wake: (() => void) | undefined) => void;
+    setExpectedNextTick?: (delayMs: number | undefined) => void;
 }
 interface ProxyLoopLogger {
     write: (chunk: string) => unknown;
@@ -53,22 +134,38 @@ export interface ProxyLoopOptions {
     maxConsecutiveTickFailures?: number;
 }
 export declare function runProxyLoop(daemon: ProxyLoopDaemon, options?: ProxyLoopOptions): Promise<void>;
+export declare function runManagedProxyLoop(options: {
+    daemon: ProxyLoopDaemon & StartupStoppableDaemon;
+    store: StartupClosableStore;
+    notifier: {
+        readyOrThrow(): Promise<void>;
+        stop(): void;
+    };
+    runLoop?: (daemon: ProxyLoopDaemon, options?: ProxyLoopOptions) => Promise<void>;
+    logger?: ProxyLoopLogger;
+}): Promise<void>;
 interface CreateProxyDaemonDepsOptions {
     runtime: HubRuntime;
     store: mailbox.MailboxStore;
+    hubMode?: 'public' | 'private';
     ipcToken: string;
     ipcPort?: number;
     evolverVersion: string;
     selfUpdatePolicy: SelfUpdatePolicy;
     env?: NodeJS.ProcessEnv;
-    selfUpdateOverrides?: ReleaseBinaryOptions & {
-        restart?: () => void;
+    selfUpdateOverrides?: SelfUpdateRuntimeOverrides;
+}
+interface SelfUpdateRuntimeOverrides extends ReleaseBinaryOptions {
+    restart?: () => void;
+    stagedBinaryProbe?: StagedBinaryProbe;
+    /** Test-only attestation seam. Production callers must use the real process executable. */
+    supervisorAttested?: {
+        processExecPath: string;
     };
 }
 export declare function createProxyDaemonDeps(options: CreateProxyDaemonDepsOptions): ProxyDaemonDeps;
-export declare function createSelfUpdateDeps(policy: SelfUpdatePolicy, currentVersion: string, env?: NodeJS.ProcessEnv, overrides?: ReleaseBinaryOptions & {
-    restart?: () => void;
-}): ProxyDaemonDeps['selfUpdate'];
+export declare function createSelfUpdateDeps(policy: SelfUpdatePolicy, currentVersion: string, env?: NodeJS.ProcessEnv, overrides?: SelfUpdateRuntimeOverrides): ProxyDaemonDeps['selfUpdate'];
+export declare function assertSelfUpdateProcessTargetBound(options: ReleaseBinaryOptions, allowUnresolvedTarget?: boolean): void;
 export declare function resolvePublicNodeSecret(deps: RuntimeDeps): PublicNodeSecretSelection;
 /**
  * Hub rejected the cached node_secret as diverged (v1 a2aProtocol.js L1983-2017). Clear every
@@ -77,6 +174,7 @@ export declare function resolvePublicNodeSecret(deps: RuntimeDeps): PublicNodeSe
  */
 export declare function clearDivergedPublicNodeSecret(store: mailbox.MailboxStore, env?: NodeJS.ProcessEnv): void;
 export declare function persistSelectedPublicNodeSecret(store: mailbox.MailboxStore, selection: PublicNodeSecretSelection): void;
+export declare function persistRotatedPublicNodeCredentials(store: mailbox.MailboxStore, selection: PublicNodeSecretSelection, secret: string, version: number | undefined): void;
 export declare function persistPublicNodeSecretVersion(store: mailbox.MailboxStore, selection: PublicNodeSecretSelection, version: number | undefined): void;
 export declare function connectHubRuntime(deps: RuntimeDeps): Promise<HubRuntime>;
 export declare function resolveLegacyNodeSecret(envNodeSecret: string | undefined, storedNodeSecret: string | undefined, storedSource: string | undefined): string | undefined;