@fnndsc/porter 0.2.0

package/dist/cube/auth.d.ts

@@ -0,0 +1,37 @@
+/**
+ * @file The one thing the door does with a password: trade it for a token.
+ *
+ * CUBE is the identity provider. The porter posts the operator's password to
+ * `auth-token/` once, keeps the token it gets back for the session it
+ * starts, and holds no password anywhere — not in memory past this call,
+ * not on disk, not on a child's argv.
+ *
+ * @module
+ */
+/** What CUBE said to a login. */
+export interface TokenMint {
+    /** The token, when CUBE issued one. */
+    token: string | null;
+    /** Why not, when it did not: CUBE's status, or the network's word. */
+    reason?: string;
+}
+/** The shape of `fetch` this module needs, so a test can stand one in. */
+export type FetchLike = (url: string, init: {
+    method: string;
+    headers: Record<string, string>;
+    body: string;
+}) => Promise<{
+    ok: boolean;
+    status: number;
+    json(): Promise<unknown>;
+}>;
+/**
+ * Trades a password for a CUBE token.
+ *
+ * @param cubeUrl - The CUBE API base, trailing slash included.
+ * @param username - The operator's CUBE username.
+ * @param password - The operator's password; used here and nowhere else.
+ * @param fetchLike - The HTTP client; the global `fetch` by default.
+ * @returns The token, or the reason there is none.
+ */
+export declare function cubeToken_mint(cubeUrl: string, username: string, password: string, fetchLike?: FetchLike): Promise<TokenMint>;

package/dist/cube/auth.js

@@ -0,0 +1,42 @@
+/**
+ * @file The one thing the door does with a password: trade it for a token.
+ *
+ * CUBE is the identity provider. The porter posts the operator's password to
+ * `auth-token/` once, keeps the token it gets back for the session it
+ * starts, and holds no password anywhere — not in memory past this call,
+ * not on disk, not on a child's argv.
+ *
+ * @module
+ */
+/**
+ * Trades a password for a CUBE token.
+ *
+ * @param cubeUrl - The CUBE API base, trailing slash included.
+ * @param username - The operator's CUBE username.
+ * @param password - The operator's password; used here and nowhere else.
+ * @param fetchLike - The HTTP client; the global `fetch` by default.
+ * @returns The token, or the reason there is none.
+ */
+export async function cubeToken_mint(cubeUrl, username, password, fetchLike = fetch) {
+    let response;
+    try {
+        response = await fetchLike(`${cubeUrl}auth-token/`, {
+            method: 'POST',
+            headers: { 'Content-Type': 'application/json' },
+            body: JSON.stringify({ username, password }),
+        });
+    }
+    catch (error) {
+        return { token: null, reason: `CUBE unreachable: ${error instanceof Error ? error.message : String(error)}` };
+    }
+    if (!response.ok) {
+        return { token: null, reason: response.status === 400 || response.status === 401 ? 'CUBE refused the login' : `CUBE answered ${response.status}` };
+    }
+    const body = await response.json();
+    const token = typeof body === 'object' && body !== null ? body.token : undefined;
+    if (typeof token !== 'string' || token.length === 0) {
+        return { token: null, reason: 'CUBE answered without a token' };
+    }
+    return { token };
+}
+//# sourceMappingURL=auth.js.map

package/dist/cube/auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.js","sourceRoot":"","sources":["../../src/cube/auth.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAaH;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,OAAe,EACf,QAAgB,EAChB,QAAgB,EAChB,YAAuB,KAA6B;IAEpD,IAAI,QAAmE,CAAC;IACxE,IAAI,CAAC;QACH,QAAQ,GAAG,MAAM,SAAS,CAAC,GAAG,OAAO,aAAa,EAAE;YAClD,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;YAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC;SAC7C,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,KAAc,EAAE,CAAC;QACxB,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,qBAAqB,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC;IAChH,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,KAAK,GAAG,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,wBAAwB,CAAC,CAAC,CAAC,iBAAiB,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC;IACrJ,CAAC;IACD,MAAM,IAAI,GAAY,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;IAC5C,MAAM,KAAK,GAAY,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,IAAI,CAAC,CAAC,CAAE,IAA4B,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;IACnH,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACpD,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,+BAA+B,EAAE,CAAC;IAClE,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,CAAC;AACnB,CAAC"}

package/dist/door.d.ts

@@ -0,0 +1,29 @@
+/**
+ * @file The door's cookie.
+ *
+ * The cookie names the session the browser was let into, signed so the
+ * browser cannot name another. HttpOnly, so a script in the page cannot read
+ * it; SameSite=Lax, so a link from elsewhere carries it but a form from
+ * elsewhere does not; Secure when the page came over TLS.
+ *
+ * @module
+ */
+/** The cookie the door sets. */
+export declare const DOOR_COOKIE: string;
+/** The cookie's attributes for one deployment. */
+export interface DoorCookieOptions {
+    path: string;
+    httpOnly: true;
+    sameSite: 'lax';
+    secure: boolean;
+    signed: true;
+    maxAge: number;
+}
+/**
+ * The attributes the door's cookie is set with.
+ *
+ * @param hours - How long the browser stays let in.
+ * @param secure - Whether the page came over TLS.
+ * @returns The cookie options.
+ */
+export declare function doorCookie_options(hours: number, secure: boolean): DoorCookieOptions;

package/dist/door.js

@@ -0,0 +1,23 @@
+/**
+ * @file The door's cookie.
+ *
+ * The cookie names the session the browser was let into, signed so the
+ * browser cannot name another. HttpOnly, so a script in the page cannot read
+ * it; SameSite=Lax, so a link from elsewhere carries it but a form from
+ * elsewhere does not; Secure when the page came over TLS.
+ *
+ * @module
+ */
+/** The cookie the door sets. */
+export const DOOR_COOKIE = 'porter_session';
+/**
+ * The attributes the door's cookie is set with.
+ *
+ * @param hours - How long the browser stays let in.
+ * @param secure - Whether the page came over TLS.
+ * @returns The cookie options.
+ */
+export function doorCookie_options(hours, secure) {
+    return { path: '/', httpOnly: true, sameSite: 'lax', secure, signed: true, maxAge: Math.round(hours * 3600) };
+}
+//# sourceMappingURL=door.js.map

package/dist/door.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"door.js","sourceRoot":"","sources":["../src/door.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,gCAAgC;AAChC,MAAM,CAAC,MAAM,WAAW,GAAW,gBAAgB,CAAC;AAYpD;;;;;;GAMG;AACH,MAAM,UAAU,kBAAkB,CAAC,KAAa,EAAE,MAAe;IAC/D,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,IAAI,CAAC,EAAE,CAAC;AAChH,CAAC"}

package/dist/greeter.d.ts

@@ -0,0 +1,45 @@
+/**
+ * @file The greeter: the door's face, before and during a boot.
+ *
+ * The face says ChRIS. An operator is logging in to ChRIS and could not
+ * care less what the program at the door is called; "porter" is this
+ * repository's word for it and appears nowhere a user reads.
+ *
+ * One shell, two acts. At the door the brain rests at its end state beside
+ * a name and a password. Once the password is taken the browser is sent to
+ * the greet, where the brain wakes — the same frames a terminal boot draws,
+ * paced by the page — and the daemon's boot rows arrive beneath it as
+ * server-sent events, ANSI and all, rendered the way the console renders a
+ * transcript. `ready` hands the browser to the session; `failed` says why
+ * and offers the door again.
+ *
+ * The page's two scripts are the wire package's own modules, served by the
+ * porter from where they are installed: the brain and the ANSI renderer.
+ * Nothing is bundled and nothing is copied, so the greeter and the console
+ * draw from one source.
+ *
+ * @module
+ */
+/**
+ * Escapes text for an HTML attribute or body.
+ *
+ * @param text - The text.
+ * @returns The text with `& < > "` escaped.
+ */
+export declare function attribute_escape(text: string): string;
+/**
+ * The door: the brain at rest, a name and a password.
+ *
+ * @param cubeUrl - The CUBE this door serves, shown so the operator knows where the password goes.
+ * @param reason - Why the last try was refused, when it was.
+ * @returns The page.
+ */
+export declare function loginPage_render(cubeUrl: string, reason: string | null): string;
+/**
+ * The greet: the brain awake, the boot rows arriving, the hand-off.
+ *
+ * @param cubeUrl - The CUBE the session is booting against.
+ * @param key - The session's key: where its boot streams from and where it will be mounted.
+ * @returns The page.
+ */
+export declare function greetPage_render(cubeUrl: string, key: string): string;

package/dist/greeter.js

@@ -0,0 +1,148 @@
+/**
+ * @file The greeter: the door's face, before and during a boot.
+ *
+ * The face says ChRIS. An operator is logging in to ChRIS and could not
+ * care less what the program at the door is called; "porter" is this
+ * repository's word for it and appears nowhere a user reads.
+ *
+ * One shell, two acts. At the door the brain rests at its end state beside
+ * a name and a password. Once the password is taken the browser is sent to
+ * the greet, where the brain wakes — the same frames a terminal boot draws,
+ * paced by the page — and the daemon's boot rows arrive beneath it as
+ * server-sent events, ANSI and all, rendered the way the console renders a
+ * transcript. `ready` hands the browser to the session; `failed` says why
+ * and offers the door again.
+ *
+ * The page's two scripts are the wire package's own modules, served by the
+ * porter from where they are installed: the brain and the ANSI renderer.
+ * Nothing is bundled and nothing is copied, so the greeter and the console
+ * draw from one source.
+ *
+ * @module
+ */
+/**
+ * Escapes text for an HTML attribute or body.
+ *
+ * @param text - The text.
+ * @returns The text with `& < > "` escaped.
+ */
+export function attribute_escape(text) {
+    return text.replace(/&/g, '&amp;').replace(/</g, '&lt;').replace(/>/g, '&gt;').replace(/"/g, '&quot;');
+}
+/** The shell around either face: the brain, the frame, the two modules. */
+function shell_render(shell) {
+    return `<!doctype html>
+<html lang="en">
+<head>
+<meta charset="utf-8" />
+<meta name="viewport" content="width=device-width, initial-scale=1" />
+<title>${attribute_escape(shell.title)}</title>
+<link rel="preconnect" href="https://fonts.googleapis.com" />
+<link rel="preconnect" href="https://fonts.gstatic.com" crossorigin />
+<link href="https://fonts.googleapis.com/css2?family=Share+Tech+Mono&display=swap" rel="stylesheet" />
+<style>
+  :root { color-scheme: dark; --frame: #1d7bb9; --lit: #66ccff; --dim: #5a8ca8; --ink: #dff; --bad: #ff9c9c; }
+  body { margin: 0; min-height: 100vh; display: grid; place-items: center; background: #000; color: var(--ink); font-family: "Share Tech Mono", ui-monospace, monospace; }
+  main { display: grid; gap: 1rem; width: min(64rem, 94vw); padding: 1.4rem 1.6rem 1.6rem; border-left: 0.6rem solid var(--frame); border-radius: 0 1.6rem 1.6rem 0; background: #05121c; }
+  header { display: flex; align-items: baseline; gap: 1rem; }
+  h1 { margin: 0; font-size: 1.1rem; letter-spacing: 0.12em; color: var(--lit); }
+  .cube { font-size: 0.75rem; color: var(--dim); overflow-wrap: anywhere; }
+  #brain { margin: 0; font-size: 0.62rem; line-height: 1.05; white-space: pre; overflow-x: auto; color: #9cf; }
+  form { display: grid; gap: 0.8rem; width: min(22rem, 100%); }
+  label { display: grid; gap: 0.25rem; font-size: 0.75rem; letter-spacing: 0.1em; text-transform: uppercase; color: var(--dim); }
+  input { padding: 0.5rem 0.7rem; border: 1px solid var(--frame); border-radius: 0.6rem; background: #000; color: var(--ink); font: inherit; }
+  button, a.pill { padding: 0.45rem 1.2rem; border: 0; border-radius: 1rem; background: var(--lit); color: #000; font: inherit; font-weight: bold; letter-spacing: 0.1em; cursor: pointer; justify-self: start; text-decoration: none; }
+  button:hover, a.pill:hover { filter: brightness(1.2); }
+  .reason { margin: 0; padding: 0.4rem 0.7rem; border-radius: 0.6rem; background: #3a0a0a; color: var(--bad); font-size: 0.85rem; }
+  #rows { margin: 0; font-size: 0.8rem; line-height: 1.35; white-space: pre-wrap; min-height: 6rem; max-height: 40vh; overflow-y: auto; }
+  #state { font-size: 0.75rem; letter-spacing: 0.15em; text-transform: uppercase; color: var(--dim); }
+  #state.ready { color: #33cc66; }
+  #state.failed { color: var(--bad); }
+</style>
+</head>
+<body>
+<main>
+  <header><h1>ChRIS</h1><div class="cube" id="cube"></div></header>
+  <pre id="brain" aria-hidden="true"></pre>
+  ${shell.body}
+</main>
+<script type="module">
+import { logo_frameRender } from '${shell.root}greeter/brain.js';
+import { ansi_toHtml } from '${shell.root}greeter/ansi.js';
+const brain = document.getElementById('brain');
+const brain_draw = (frame, resting) => { brain.innerHTML = ansi_toHtml(logo_frameRender(frame, resting).join('\\n')); };
+${shell.script}
+</script>
+</body>
+</html>
+`;
+}
+/**
+ * The door: the brain at rest, a name and a password.
+ *
+ * @param cubeUrl - The CUBE this door serves, shown so the operator knows where the password goes.
+ * @param reason - Why the last try was refused, when it was.
+ * @returns The page.
+ */
+export function loginPage_render(cubeUrl, reason) {
+    const notice = reason === null ? '' : `<p class="reason" role="alert">${attribute_escape(reason)}</p>`;
+    return shell_render({
+        title: 'ChRIS · login',
+        root: './',
+        body: `<form method="post" action="login">
+    ${notice}
+    <label>Username <input name="username" autocomplete="username" required autofocus /></label>
+    <label>Password <input name="password" type="password" autocomplete="current-password" required /></label>
+    <button type="submit">LOG IN</button>
+  </form>`,
+        script: `document.getElementById('cube').textContent = ${JSON.stringify(cubeUrl)};
+brain_draw(0, true);`,
+    });
+}
+/**
+ * The greet: the brain awake, the boot rows arriving, the hand-off.
+ *
+ * @param cubeUrl - The CUBE the session is booting against.
+ * @param key - The session's key: where its boot streams from and where it will be mounted.
+ * @returns The page.
+ */
+export function greetPage_render(cubeUrl, key) {
+    return shell_render({
+        title: 'ChRIS · starting your session',
+        root: '../',
+        body: `<div id="state">starting your session</div>
+  <pre id="rows"></pre>
+  <a class="pill" id="again" href="../login" hidden>BACK TO THE DOOR</a>`,
+        script: `document.getElementById('cube').textContent = ${JSON.stringify(cubeUrl)};
+const rows = document.getElementById('rows');
+const state = document.getElementById('state');
+const again = document.getElementById('again');
+let frame = 0;
+let awake = true;
+const pulse = setInterval(() => { if (awake) brain_draw(frame++, false); }, 120);
+brain_draw(0, false);
+const feed = new EventSource(${JSON.stringify(`../boot/${key}`)});
+feed.addEventListener('line', (event) => {
+  const line = JSON.parse(event.data);
+  rows.insertAdjacentHTML('beforeend', ansi_toHtml(line.text) + '\\n');
+  rows.scrollTop = rows.scrollHeight;
+});
+const settle = (name, reason) => {
+  feed.close();
+  awake = false;
+  clearInterval(pulse);
+  brain_draw(0, true);
+  state.textContent = name === 'ready' ? 'your session is ready' : ('your session did not start' + (reason ? ' — ' + reason : ''));
+  state.className = name;
+  if (name === 'ready') {
+    setTimeout(() => { window.location.assign(${JSON.stringify(`../s/${key}/?door`)}); }, 700);
+  } else {
+    again.hidden = false;
+  }
+};
+feed.addEventListener('ready', () => settle('ready', null));
+feed.addEventListener('failed', (event) => settle('failed', JSON.parse(event.data).reason));
+feed.onerror = () => { if (state.className === '') settle('failed', 'the boot stream closed'); };`,
+    });
+}
+//# sourceMappingURL=greeter.js.map

package/dist/greeter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"greeter.js","sourceRoot":"","sources":["../src/greeter.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAkBH;;;;;GAKG;AACH,MAAM,UAAU,gBAAgB,CAAC,IAAY;IAC3C,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;AACzG,CAAC;AAED,2EAA2E;AAC3E,SAAS,YAAY,CAAC,KAAmB;IACvC,OAAO;;;;;SAKA,gBAAgB,CAAC,KAAK,CAAC,KAAK,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;IA4BlC,KAAK,CAAC,IAAI;;;oCAGsB,KAAK,CAAC,IAAI;+BACf,KAAK,CAAC,IAAI;;;EAGvC,KAAK,CAAC,MAAM;;;;CAIb,CAAC;AACF,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,gBAAgB,CAAC,OAAe,EAAE,MAAqB;IACrE,MAAM,MAAM,GAAW,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,kCAAkC,gBAAgB,CAAC,MAAM,CAAC,MAAM,CAAC;IAC/G,OAAO,YAAY,CAAC;QAClB,KAAK,EAAE,eAAe;QACtB,IAAI,EAAE,IAAI;QACV,IAAI,EAAE;MACJ,MAAM;;;;UAIF;QACN,MAAM,EAAE,iDAAiD,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC;qBAC/D;KAClB,CAAC,CAAC;AACL,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,gBAAgB,CAAC,OAAe,EAAE,GAAW;IAC3D,OAAO,YAAY,CAAC;QAClB,KAAK,EAAE,+BAA+B;QACtC,IAAI,EAAE,KAAK;QACX,IAAI,EAAE;;yEAE+D;QACrE,MAAM,EAAE,iDAAiD,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC;;;;;;;;+BAQrD,IAAI,CAAC,SAAS,CAAC,WAAW,GAAG,EAAE,CAAC;;;;;;;;;;;;;;gDAcf,IAAI,CAAC,SAAS,CAAC,QAAQ,GAAG,QAAQ,CAAC;;;;;;;kGAOe;KAC/F,CAAC,CAAC;AACL,CAAC"}

package/dist/host/processHost.d.ts

@@ -0,0 +1,86 @@
+import type { Berth, BootListener, BootReport, SessionHost, SessionSighting } from './sessionHost.js';
+/** How many boot lines a session keeps for late followers. */
+export declare const BOOT_LINES_KEPT: number;
+/** The four directories a session owns. */
+export interface SessionDirs {
+    config: string;
+    runtime: string;
+    cache: string;
+    tmp: string;
+}
+/** What the host needs of a child it started. */
+export interface SpawnedSession {
+    pid: number | undefined;
+    stdout: NodeJS.ReadableStream | null;
+    stderr: NodeJS.ReadableStream | null;
+    stdin: NodeJS.WritableStream | null;
+    exitCode: number | null;
+    kill(signal?: NodeJS.Signals): boolean;
+    once(event: 'exit', listener: (code: number | null) => void): unknown;
+}
+/** A process spawner with the shape of `child_process.spawn`. */
+export type SessionSpawn = (command: string, args: string[], options: {
+    env: NodeJS.ProcessEnv;
+    stdio: ['pipe', 'pipe', 'pipe'];
+}) => SpawnedSession;
+/** Whether a berth's daemon answers on the wire. */
+export type LivenessProbe = (url: string) => Promise<boolean>;
+/** What the process host is built from. */
+export interface ProcessHostOptions {
+    /** Where each identity's subtree goes. */
+    stateDir: string;
+    /** The chell entry to run. */
+    chellEntry: string;
+    /** The spawner; `child_process.spawn` by default. */
+    spawn?: SessionSpawn;
+    /** The liveness probe; a TCP connect to the berth by default. */
+    alive?: LivenessProbe;
+    /** How long a boot may take before it is called failed, in ms. */
+    bootTimeoutMs?: number;
+    /** How often to look for the berth while booting, in ms. */
+    pollMs?: number;
+    /** How to signal a process this host did not start; `process.kill` by default. */
+    kill?: (pid: number, signal: NodeJS.Signals) => void;
+}
+/** Sessions as child processes on this host. */
+export declare class ProcessHost implements SessionHost {
+    private readonly stateDir;
+    private readonly chellEntry;
+    private readonly spawner;
+    private readonly alive;
+    private readonly bootTimeoutMs;
+    private readonly pollMs;
+    private readonly kill;
+    private readonly sessions;
+    constructor(options: ProcessHostOptions);
+    /**
+     * The four directories an identity's session owns, under the state dir.
+     *
+     * @param identity - The normalised identity.
+     * @returns The directories; not necessarily existing yet.
+     */
+    dirs_of(identity: string): SessionDirs;
+    /** Reads a berth file, if well formed. */
+    private berthFile_read;
+    /** Reads an identity's berth from its own runtime directory, if written. */
+    private berth_read;
+    /** @inheritdoc */
+    sessions_adopt(): Promise<SessionSighting[]>;
+    /** @inheritdoc */
+    find(identity: string): Promise<Berth | null>;
+    /** @inheritdoc */
+    spawn(identity: string, user: string, cubeUrl: string, token: string): Promise<Berth>;
+    /** @inheritdoc */
+    spawn_begin(identity: string, user: string, cubeUrl: string, token: string): void;
+    /** Starts the child and waits for its berth to answer. */
+    private boot_run;
+    /** Settles a boot and tells everyone following it. */
+    private boot_end;
+    /** @inheritdoc */
+    boot_follow(identity: string, listener: BootListener): {
+        report: BootReport;
+        release: () => void;
+    } | null;
+    /** @inheritdoc */
+    evict(identity: string): Promise<boolean>;
+}