@harperfast/harper 5.2.13 → 5.3.0-beta.1

package/dist/utility/logging/logRotator.js

@@ -38,10 +38,6 @@ var __importDefault = (this && this.__importDefault) || function (mod) {
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.logRotator = logRotator;
 const fs_1 = require("fs");
-const zlib_1 = require("zlib");
-const util_1 = require("util");
-const stream_1 = require("stream");
-const pipe = (0, util_1.promisify)(stream_1.pipeline);
 const path = __importStar(require("path"));
 const envMgr = __importStar(require("../environment/environmentManager.js"));
 envMgr.initSync();
@@ -49,8 +45,11 @@ const harper_logger_ts_1 = __importDefault(require("./harper_logger.js"));
 const hdbTerms_ts_1 = require("../hdbTerms.js");
 const common_utils_ts_1 = require("../common_utils.js");
 const storageReclamation_ts_1 = require("../../server/storageReclamation.js");
+const logGenerationCoordinator_ts_1 = require("./logGenerationCoordinator.js");
+const logRotation_ts_1 = require("./logRotation.js");
 // Interval in ms to check log file and decide if it should be rotated.
 const LOG_AUDIT_INTERVAL = 60000;
+const RELEASE_PROOF_REPORT_INTERVAL = 5 * 60 * 1000;
 const INT_SIZE_UNDEFINED_MSG = "'interval' and 'maxSize' are both undefined, to enable logging rotation at least one of these values must be defined in harperdb-config.yaml";
 /**
  * Rotates hdb.log using an interval and/or maxSize param to determine if log should be rotated.
@@ -58,7 +57,7 @@ const INT_SIZE_UNDEFINED_MSG = "'interval' and 'maxSize' are both undefined, to
  * If log file is within the values set in config, log file will be renamed/moved and a new empty hdb.log created.
  * @returns LogRotator
  */
-function logRotator({ logger, maxSize, interval, retention, enabled, path: rotatedLogDir, auditInterval }) {
+function logRotator({ logger, maxSize, interval, retention, enabled, compress, path: rotatedLogDir, auditInterval, }) {
     if (enabled === false)
         return;
     let reclamationPriority = 0;
@@ -68,126 +67,234 @@ function logRotator({ logger, maxSize, interval, retention, enabled, path: rotat
     if (!maxSize && !interval) {
         throw new Error(INT_SIZE_UNDEFINED_MSG);
     }
-    if (!rotatedLogDir) {
-        rotatedLogDir = path.join(path.dirname(logger.path), 'rotated');
-    }
+    rotatedLogDir = (0, logRotation_ts_1.resolveRotatedLogDir)(logger.path, rotatedLogDir);
     (0, fs_1.mkdirSync)(rotatedLogDir, { recursive: true });
-    // Convert maxSize param to bytes.
-    let maxBytes;
-    if (maxSize) {
-        const unit = maxSize.slice(-1);
-        const size = maxSize.slice(0, -1);
-        if (unit === 'G')
-            maxBytes = size * 1000000000;
-        else if (unit === 'M')
-            maxBytes = size * 1000000;
-        else
-            maxBytes = size * 1000;
+    const maxBytes = (0, logRotation_ts_1.parseMaxSize)(maxSize);
+    if (maxSize && !maxBytes) {
+        harper_logger_ts_1.default.error(`Ignoring logging.rotation.maxSize '${maxSize}': ${logRotation_ts_1.INVALID_MAX_SIZE_MSG}`);
     }
+    // The rotation block first, because that is all the write-path guard can read — environmentManager
+    // imports harper_logger — and two sources would mean two destruction policies for one log.
+    const compressArchives = compress ?? envMgr.get(hdbTerms_ts_1.CONFIG_PARAMS.LOGGING_ROTATION_COMPRESS);
     // Convert interval param to ms.
     let maxInterval;
     if (interval) {
         maxInterval = (0, common_utils_ts_1.convertToMS)(interval);
     }
     let lastRotatedLogPath;
-    // convert date.now to minutes
     let lastRotationTime = Date.now();
+    let observedGeneration;
+    try {
+        const active = (0, fs_1.statSync)(logger.path);
+        observedGeneration = generationIdentity(active);
+        if (active.birthtimeMs > 0)
+            lastRotationTime = Math.min(lastRotationTime, active.birthtimeMs);
+    }
+    catch { }
     harper_logger_ts_1.default.trace('Log rotate enabled, maxSize:', maxSize, 'interval:', interval);
+    let tickInFlight = false;
+    let ended = false;
+    let releaseProofStalled = false;
+    let nextReleaseProofReport = 0;
+    let retentionCursor = 0;
+    const auditIntervalMs = auditInterval ?? LOG_AUDIT_INTERVAL;
+    const compressionBudgetMs = Math.max(1, Math.floor(auditIntervalMs / 4));
+    /**
+     * rename() reports ENOENT for a missing destination directory as well as a missing source, and
+     * only the second is the benign lost race. The directory is created once at rotator start, so a
+     * rotation target removed under a running instance otherwise stops rotation permanently and
+     * silently — and with `interval` and no `maxSize` there is no write-path guard to recreate it.
+     */
+    function recoverRotationTarget(err) {
+        if (err.code !== 'ENOENT' || (0, fs_1.existsSync)(rotatedLogDir))
+            return;
+        try {
+            (0, fs_1.mkdirSync)(rotatedLogDir, { recursive: true });
+            harper_logger_ts_1.default.warn(`The log rotation directory ${rotatedLogDir} was missing and has been recreated`);
+        }
+        catch (mkdirErr) {
+            harper_logger_ts_1.default.error('Could not recreate the log rotation directory', rotatedLogDir, mkdirErr);
+        }
+    }
     const setIntervalId = setInterval(async () => {
-        // A missing/relocated active log file only invalidates the rotation checks below — retention cleanup
-        // must still run. So skip the individual check on ENOENT rather than returning from the whole tick.
-        if (maxBytes) {
-            let fileStats;
-            try {
-                fileStats = await fs_1.promises.stat(logger.path);
-            }
-            catch (err) {
-                // If the log file doesn't exist, skip the size-based rotation check
-                if (err.code !== 'ENOENT')
-                    throw err;
-            }
-            if (fileStats && fileStats.size >= maxBytes) {
+        // setInterval does not await the callback, and one pass can now wait on peers; overlapping
+        // passes would work the same archive twice and double-compress it.
+        if (tickInFlight || ended)
+            return;
+        tickInFlight = true;
+        const tickDeadline = Date.now() + auditIntervalMs;
+        // The tick is async but setInterval doesn't await it, so any error that escapes this callback
+        // becomes an unhandled rejection rather than surfacing anywhere useful — and since it isn't
+        // caught, it also skips the retention cleanup below. Contain everything here and report via
+        // the logger instead, so one bad tick (e.g. an unexpected fs error) never kills rotation for
+        // the rest of the process's life.
+        try {
+            if (maxBytes) {
                 try {
-                    lastRotatedLogPath = await moveLogFile(logger.path, rotatedLogDir, logger);
+                    // statSync, and the rename in the same turn: an await here lets a writing thread rotate
+                    // the generation this tick measured and start a fresh one, which the tick would then
+                    // archive near-empty.
+                    const active = (0, fs_1.statSync)(logger.path);
+                    if (active.size >= maxBytes) {
+                        lastRotatedLogPath = await moveLogFile(logger.path, rotatedLogDir, logger, compressArchives, active);
+                        // The interval clock counts from the last rotation of any kind. Without this an
+                        // instance whose uptime has passed `interval` archives a freshly-created log every
+                        // interval on top of the size rotations already doing the work.
+                        lastRotationTime = Date.now();
+                    }
                 }
                 catch (err) {
-                    // If the log file doesn't exist, skip rotation
+                    // A missing or already-rotated active log only invalidates this check; retention below
+                    // must still run, so skip the check rather than leaving the whole tick.
+                    recoverRotationTarget(err);
                     if (err.code !== 'ENOENT')
                         throw err;
                 }
             }
-        }
-        if (maxInterval) {
-            const minSinceLastRotate = Date.now() - lastRotationTime;
-            if (minSinceLastRotate >= maxInterval) {
+            if (maxInterval) {
                 try {
-                    lastRotatedLogPath = await moveLogFile(logger.path, rotatedLogDir, logger);
-                    lastRotationTime = Date.now();
+                    const activeGeneration = generationIdentity((0, fs_1.statSync)(logger.path));
+                    if (activeGeneration && activeGeneration !== observedGeneration) {
+                        observedGeneration = activeGeneration;
+                        lastRotationTime = Date.now();
+                    }
                 }
                 catch (err) {
-                    // If the log file doesn't exist, skip rotation
                     if (err.code !== 'ENOENT')
                         throw err;
                 }
+                if (Date.now() - lastRotationTime >= maxInterval) {
+                    try {
+                        lastRotatedLogPath = await moveLogFile(logger.path, rotatedLogDir, logger, compressArchives);
+                        lastRotationTime = Date.now();
+                    }
+                    catch (err) {
+                        // If the log file doesn't exist, skip rotation
+                        recoverRotationTarget(err);
+                        if (err.code !== 'ENOENT')
+                            throw err;
+                    }
+                }
             }
-        }
-        if (retention || reclamationPriority) {
-            // remove old logs after retention time
-            // adjust retention time if there is a reclamation priority in place
-            const retentionMs = (0, common_utils_ts_1.convertToMS)(retention ?? '1M') / (1 + reclamationPriority);
-            reclamationPriority = 0; // reset it after use
-            let files;
-            try {
-                files = await fs_1.promises.readdir(rotatedLogDir);
-            }
-            catch (err) {
-                // The rotated log dir may not exist yet (nothing rotated so far); nothing to clean up
-                if (err.code !== 'ENOENT')
-                    harper_logger_ts_1.default.error('Error reading rotated log directory', rotatedLogDir, err);
-                files = [];
-            }
-            for (const file of files) {
+            // The compression sweep and retention both destroy archives this thread did not rotate, so
+            // both need the same proof: every peer releases any descriptor that is not on the live
+            // generation, and reports the log paths it is writing. One round trip per tick serves both,
+            // and it is not gated on retention being configured — retention is unset by default, and a
+            // worker's uncompressed archive still needs finishing.
+            if (compressArchives || retention || reclamationPriority) {
+                // Enumerated BEFORE the proof, and only these are destroyed: an archive created after the
+                // proof was never covered by it, and a peer blocked mid-rotation may still be writing to it.
+                let candidates;
                 try {
-                    const fileStats = await fs_1.promises.stat(path.join(rotatedLogDir, file));
-                    if (Date.now() - fileStats.mtimeMs > retentionMs) {
-                        await fs_1.promises.unlink(path.join(rotatedLogDir, file));
-                    }
+                    candidates = await fs_1.promises.readdir(rotatedLogDir);
                 }
                 catch (err) {
-                    harper_logger_ts_1.default.error('Error trying to remove log', file, err);
+                    if (err.code !== 'ENOENT')
+                        harper_logger_ts_1.default.error('Error reading rotated log directory', rotatedLogDir, err);
+                    candidates = [];
+                }
+                const { released, liveLogPaths } = await (0, logGenerationCoordinator_ts_1.requestStaleDescriptorRelease)(tickDeadline);
+                // A peer whose event loop is blocked never answers, and the whole pass then destroys
+                // nothing — correct, but it is also the only thing bounding the rotated directory, so an
+                // operator who configured retention has to be able to see that it has stopped. Repeat at
+                // a low rate so a permanent stall does not disappear after one warning.
+                if (!released && Date.now() >= nextReleaseProofReport) {
+                    nextReleaseProofReport = Date.now() + RELEASE_PROOF_REPORT_INTERVAL;
+                    releaseProofStalled = true;
+                    harper_logger_ts_1.default.warn(`Log rotation could not prove every thread released its archived log descriptors; compression and retention are paused for ${rotatedLogDir}`);
+                }
+                else if (released && releaseProofStalled) {
+                    releaseProofStalled = false;
+                    nextReleaseProofReport = 0;
+                    harper_logger_ts_1.default.notify(`Log rotation descriptor release recovered; retention resumed for ${rotatedLogDir}`);
+                }
+                const liveLogs = new Set([...liveLogPaths, logger.path].map((p) => path.resolve(p)));
+                if (released && (retention || reclamationPriority)) {
+                    // remove old logs after retention time
+                    // adjust retention time if there is a reclamation priority in place
+                    const retentionMs = (0, common_utils_ts_1.convertToMS)(retention ?? '1M') / (1 + reclamationPriority);
+                    let retentionCompleted = true;
+                    let examined = 0;
+                    for (; examined < candidates.length; examined++) {
+                        if (ended || Date.now() >= tickDeadline) {
+                            retentionCompleted = false;
+                            break;
+                        }
+                        const file = candidates[(retentionCursor + examined) % candidates.length];
+                        try {
+                            const archivePath = path.join(rotatedLogDir, file);
+                            // An explicitly configured rotation path may contain live component logs too.
+                            if (liveLogs.has(path.resolve(archivePath)))
+                                continue;
+                            // Unlinking an inode a stalled writer still holds loses whatever it writes next
+                            // just as surely as compressing over it would.
+                            if ((0, logRotation_ts_1.isArchivePendingQuiescence)(archivePath))
+                                continue;
+                            const fileStats = await fs_1.promises.stat(archivePath);
+                            if (Date.now() - fileStats.mtimeMs > retentionMs) {
+                                await fs_1.promises.unlink(archivePath);
+                            }
+                        }
+                        catch (err) {
+                            if (err.code !== 'ENOENT')
+                                harper_logger_ts_1.default.error('Error trying to remove log', file, err);
+                        }
+                    }
+                    if (retentionCompleted) {
+                        retentionCursor = 0;
+                        reclamationPriority = 0;
+                    }
+                    else if (candidates.length) {
+                        retentionCursor = (retentionCursor + examined) % candidates.length;
+                    }
+                }
+                if (released && compressArchives && !ended) {
+                    const compressionFailure = await (0, logRotation_ts_1.compressPendingArchives)(rotatedLogDir, candidates, liveLogs, {
+                        deadline: Math.min(tickDeadline, Date.now() + compressionBudgetMs),
+                        shouldStop: () => ended,
+                    });
+                    if (compressionFailure)
+                        harper_logger_ts_1.default.error('Error compressing rotated log', compressionFailure.file, compressionFailure.error);
                 }
             }
         }
-    }, auditInterval ?? LOG_AUDIT_INTERVAL).unref();
+        catch (err) {
+            harper_logger_ts_1.default.error('Error during log rotation audit tick for', logger.path, err);
+        }
+        finally {
+            try {
+                await (0, logRotation_ts_1.retryPendingGenerations)({ deadline: tickDeadline, shouldStop: () => ended });
+            }
+            catch (err) {
+                harper_logger_ts_1.default.error('Error retrying pending log generations for', logger.path, err);
+            }
+            tickInFlight = false;
+        }
+    }, auditIntervalMs).unref();
     return {
         end() {
+            ended = true;
             clearInterval(setIntervalId);
         },
         getLastRotatedLogPath() {
             return lastRotatedLogPath;
         },
     };
-}
-async function moveLogFile(logPath, rotatedLogPath, logger) {
-    const compress = envMgr.get(hdbTerms_ts_1.CONFIG_PARAMS.LOGGING_ROTATION_COMPRESS);
-    let fullRotateLogPath = path.join(rotatedLogPath, `HDB-${new Date(Date.now()).toISOString().replaceAll(':', '-')}.log`);
-    // Move log file to rotated log path first (if we crash
-    // during compression, we don't want to restart the compression with a new file)
-    await fs_1.promises.rename(logPath, fullRotateLogPath);
-    // Close the rotating logger's own file descriptor now that the file has moved. This must be the
-    // logger's own closeLogFile (which resets its internal logFD), not the module-global one — otherwise
-    // the descriptor stays open on the moved (and, when compressing, subsequently unlinked) inode until the
-    // logger's safety timeout fires, pinning disk space and sending any writes in that window into the
-    // rotated/deleted file. Closing it here makes the next write reopen a fresh log file immediately.
-    (logger?.closeLogFile ?? harper_logger_ts_1.default.closeLogFile)();
-    if (compress) {
-        logPath = fullRotateLogPath;
-        fullRotateLogPath += '.gz';
-        await pipe((0, fs_1.createReadStream)(logPath), (0, zlib_1.createGzip)(), (0, fs_1.createWriteStream)(fullRotateLogPath));
-        await fs_1.promises.unlink(logPath);
+    function generationIdentity(stats) {
+        return stats.ino ? `${stats.dev}:${stats.ino}` : undefined;
     }
+}
+async function moveLogFile(logPath, rotatedLogPath, logger, compress, activeStats) {
+    // The rename and the descriptor close must not be separated by an await: the descriptor would
+    // otherwise keep feeding the archived inode while the event loop runs. Closing the rotating
+    // logger's own descriptor (not the module-global one) is what makes the next write reopen a
+    // fresh log file rather than append to the moved — and, when compressing, unlinked — inode.
+    // `activeStats` is the caller's own stat of the live generation, when it has one: the size check
+    // must rename the generation it measured, and a second stat here could pick up a newer one.
+    const generation = (0, logRotation_ts_1.rotateLogFileSync)(logPath, rotatedLogPath, logger?.closeLogFile ?? harper_logger_ts_1.default.closeLogFile, activeStats);
+    const publishedPath = await (0, logRotation_ts_1.publishArchivedGeneration)(generation, compress ?? envMgr.get(hdbTerms_ts_1.CONFIG_PARAMS.LOGGING_ROTATION_COMPRESS), (error) => harper_logger_ts_1.default.error('Error compressing rotated log', generation.archivePath, error));
     // This notify log will create a new log file after the previous one has been rotated. It's important to keep this log as notify
-    harper_logger_ts_1.default.notify(`hdb.log rotated, old log moved to ${fullRotateLogPath}`);
-    return fullRotateLogPath;
+    harper_logger_ts_1.default.notify(`hdb.log rotated, old log moved to ${publishedPath}`);
+    return publishedPath;
 }
 //# sourceMappingURL=logRotator.js.map

package/dist/utility/logging/logRotator.js.map

@@ -1 +1 @@
-{"version":3,"file":"logRotator.js","sourceRoot":"","sources":["../../../utility/logging/logRotator.ts"],"names":[],"mappings":"AAAA,YAAY,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAoBJ,gCAAU;AAlBnB,2BAAwF;AACxF,+BAAkC;AAClC,+BAAiC;AACjC,mCAAkC;AAClC,MAAM,IAAI,GAAG,IAAA,gBAAS,EAAC,iBAAQ,CAAC,CAAC;AACjC,2CAA6B;AAC7B,6EAA+D;AAC/D,MAAM,CAAC,QAAQ,EAAE,CAAC;AAClB,0EAA2C;AAC3C,gDAA+C;AAC/C,wDAAiD;AACjD,8EAA0E;AAE1E,uEAAuE;AACvE,MAAM,kBAAkB,GAAG,KAAK,CAAC;AACjC,MAAM,sBAAsB,GAC3B,8IAA8I,CAAC;AAIhJ;;;;;GAKG;AACH,SAAS,UAAU,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,aAAa,EAAO;IAC7G,IAAI,OAAO,KAAK,KAAK;QAAE,OAAO;IAC9B,IAAI,mBAAmB,GAAG,CAAC,CAAC;IAC5B,IAAA,4CAAoB,EACnB,MAAM,CAAC,IAAI,EACX,CAAC,QAAQ,EAAE,EAAE;QACZ,mBAAmB,GAAG,QAAQ,CAAC;IAChC,CAAC,EACD,IAAI,CACJ,CAAC;IAEF,IAAI,CAAC,OAAO,IAAI,CAAC,QAAQ,EAAE,CAAC;QAC3B,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;IACzC,CAAC;IAED,IAAI,CAAC,aAAa,EAAE,CAAC;QACpB,aAAa,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,SAAS,CAAC,CAAC;IACjE,CAAC;IACD,IAAA,cAAS,EAAC,aAAa,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAE9C,kCAAkC;IAClC,IAAI,QAAQ,CAAC;IACb,IAAI,OAAO,EAAE,CAAC;QACb,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QAC/B,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QAClC,IAAI,IAAI,KAAK,GAAG;YAAE,QAAQ,GAAG,IAAI,GAAG,UAAU,CAAC;aAC1C,IAAI,IAAI,KAAK,GAAG;YAAE,QAAQ,GAAG,IAAI,GAAG,OAAO,CAAC;;YAC5C,QAAQ,GAAG,IAAI,GAAG,IAAI,CAAC;IAC7B,CAAC;IAED,gCAAgC;IAChC,IAAI,WAAW,CAAC;IAChB,IAAI,QAAQ,EAAE,CAAC;QACd,WAAW,GAAG,IAAA,6BAAW,EAAC,QAAQ,CAAC,CAAC;IACrC,CAAC;IAED,IAAI,kBAAkB,CAAC;IACvB,8BAA8B;IAC9B,IAAI,gBAAgB,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAClC,0BAAS,CAAC,KAAK,CAAC,8BAA8B,EAAE,OAAO,EAAE,WAAW,EAAE,QAAQ,CAAC,CAAC;IAChF,MAAM,aAAa,GAAG,WAAW,CAAC,KAAK,IAAI,EAAE;QAC5C,qGAAqG;QACrG,oGAAoG;QACpG,IAAI,QAAQ,EAAE,CAAC;YACd,IAAI,SAAS,CAAC;YACd,IAAI,CAAC;gBACJ,SAAS,GAAG,MAAM,aAAM,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YAC5C,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACd,oEAAoE;gBACpE,IAAI,GAAG,CAAC,IAAI,KAAK,QAAQ;oBAAE,MAAM,GAAG,CAAC;YACtC,CAAC;YAED,IAAI,SAAS,IAAI,SAAS,CAAC,IAAI,IAAI,QAAQ,EAAE,CAAC;gBAC7C,IAAI,CAAC;oBACJ,kBAAkB,GAAG,MAAM,WAAW,CAAC,MAAM,CAAC,IAAI,EAAE,aAAa,EAAE,MAAM,CAAC,CAAC;gBAC5E,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACd,+CAA+C;oBAC/C,IAAI,GAAG,CAAC,IAAI,KAAK,QAAQ;wBAAE,MAAM,GAAG,CAAC;gBACtC,CAAC;YACF,CAAC;QACF,CAAC;QAED,IAAI,WAAW,EAAE,CAAC;YACjB,MAAM,kBAAkB,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,gBAAgB,CAAC;YACzD,IAAI,kBAAkB,IAAI,WAAW,EAAE,CAAC;gBACvC,IAAI,CAAC;oBACJ,kBAAkB,GAAG,MAAM,WAAW,CAAC,MAAM,CAAC,IAAI,EAAE,aAAa,EAAE,MAAM,CAAC,CAAC;oBAC3E,gBAAgB,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;gBAC/B,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACd,+CAA+C;oBAC/C,IAAI,GAAG,CAAC,IAAI,KAAK,QAAQ;wBAAE,MAAM,GAAG,CAAC;gBACtC,CAAC;YACF,CAAC;QACF,CAAC;QACD,IAAI,SAAS,IAAI,mBAAmB,EAAE,CAAC;YACtC,uCAAuC;YACvC,oEAAoE;YACpE,MAAM,WAAW,GAAG,IAAA,6BAAW,EAAC,SAAS,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,mBAAmB,CAAC,CAAC;YAC/E,mBAAmB,GAAG,CAAC,CAAC,CAAC,qBAAqB;YAC9C,IAAI,KAAK,CAAC;YACV,IAAI,CAAC;gBACJ,KAAK,GAAG,MAAM,aAAM,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;YAC7C,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACd,sFAAsF;gBACtF,IAAI,GAAG,CAAC,IAAI,KAAK,QAAQ;oBAAE,0BAAS,CAAC,KAAK,CAAC,qCAAqC,EAAE,aAAa,EAAE,GAAG,CAAC,CAAC;gBACtG,KAAK,GAAG,EAAE,CAAC;YACZ,CAAC;YACD,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;gBAC1B,IAAI,CAAC;oBACJ,MAAM,SAAS,GAAG,MAAM,aAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,IAAI,CAAC,CAAC,CAAC;oBACpE,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC,OAAO,GAAG,WAAW,EAAE,CAAC;wBAClD,MAAM,aAAM,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,IAAI,CAAC,CAAC,CAAC;oBACrD,CAAC;gBACF,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACd,0BAAS,CAAC,KAAK,CAAC,4BAA4B,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;gBAC1D,CAAC;YACF,CAAC;QACF,CAAC;IACF,CAAC,EAAE,aAAa,IAAI,kBAAkB,CAAC,CAAC,KAAK,EAAE,CAAC;IAChD,OAAO;QACN,GAAG;YACF,aAAa,CAAC,aAAa,CAAC,CAAC;QAC9B,CAAC;QACD,qBAAqB;YACpB,OAAO,kBAAkB,CAAC;QAC3B,CAAC;KACD,CAAC;AACH,CAAC;AAED,KAAK,UAAU,WAAW,CAAC,OAAe,EAAE,cAAsB,EAAE,MAAY;IAC/E,MAAM,QAAQ,GAAG,MAAM,CAAC,GAAG,CAAC,2BAAa,CAAC,yBAAyB,CAAC,CAAC;IACrE,IAAI,iBAAiB,GAAG,IAAI,CAAC,IAAI,CAChC,cAAc,EACd,OAAO,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,UAAU,CAAC,GAAG,EAAE,GAAG,CAAC,MAAM,CACpE,CAAC;IACF,uDAAuD;IACvD,gFAAgF;IAChF,MAAM,aAAM,CAAC,MAAM,CAAC,OAAO,EAAE,iBAAiB,CAAC,CAAC;IAChD,gGAAgG;IAChG,qGAAqG;IACrG,wGAAwG;IACxG,mGAAmG;IACnG,kGAAkG;IAClG,CAAC,MAAM,EAAE,YAAY,IAAI,0BAAS,CAAC,YAAY,CAAC,EAAE,CAAC;IACnD,IAAI,QAAQ,EAAE,CAAC;QACd,OAAO,GAAG,iBAAiB,CAAC;QAC5B,iBAAiB,IAAI,KAAK,CAAC;QAC3B,MAAM,IAAI,CAAC,IAAA,qBAAgB,EAAC,OAAO,CAAC,EAAE,IAAA,iBAAU,GAAE,EAAE,IAAA,sBAAiB,EAAC,iBAAiB,CAAC,CAAC,CAAC;QAC1F,MAAM,aAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAC9B,CAAC;IAED,gIAAgI;IAChI,0BAAS,CAAC,MAAM,CAAC,qCAAqC,iBAAiB,EAAE,CAAC,CAAC;IAC3E,OAAO,iBAAiB,CAAC;AAC1B,CAAC"}
+{"version":3,"file":"logRotator.js","sourceRoot":"","sources":["../../../utility/logging/logRotator.ts"],"names":[],"mappings":"AAAA,YAAY,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA4BJ,gCAAU;AA1BnB,2BAAyE;AACzE,2CAA6B;AAC7B,6EAA+D;AAC/D,MAAM,CAAC,QAAQ,EAAE,CAAC;AAClB,0EAA2C;AAC3C,gDAA+C;AAC/C,wDAAiD;AACjD,8EAA0E;AAC1E,+EAA8E;AAC9E,qDAS0B;AAE1B,uEAAuE;AACvE,MAAM,kBAAkB,GAAG,KAAK,CAAC;AACjC,MAAM,6BAA6B,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;AACpD,MAAM,sBAAsB,GAC3B,8IAA8I,CAAC;AAIhJ;;;;;GAKG;AACH,SAAS,UAAU,CAAC,EACnB,MAAM,EACN,OAAO,EACP,QAAQ,EACR,SAAS,EACT,OAAO,EACP,QAAQ,EACR,IAAI,EAAE,aAAa,EACnB,aAAa,GACR;IACL,IAAI,OAAO,KAAK,KAAK;QAAE,OAAO;IAC9B,IAAI,mBAAmB,GAAG,CAAC,CAAC;IAC5B,IAAA,4CAAoB,EACnB,MAAM,CAAC,IAAI,EACX,CAAC,QAAQ,EAAE,EAAE;QACZ,mBAAmB,GAAG,QAAQ,CAAC;IAChC,CAAC,EACD,IAAI,CACJ,CAAC;IAEF,IAAI,CAAC,OAAO,IAAI,CAAC,QAAQ,EAAE,CAAC;QAC3B,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;IACzC,CAAC;IAED,aAAa,GAAG,IAAA,qCAAoB,EAAC,MAAM,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC;IACjE,IAAA,cAAS,EAAC,aAAa,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAE9C,MAAM,QAAQ,GAAG,IAAA,6BAAY,EAAC,OAAO,CAAC,CAAC;IACvC,IAAI,OAAO,IAAI,CAAC,QAAQ,EAAE,CAAC;QAC1B,0BAAS,CAAC,KAAK,CAAC,sCAAsC,OAAO,MAAM,qCAAoB,EAAE,CAAC,CAAC;IAC5F,CAAC;IAED,mGAAmG;IACnG,2FAA2F;IAC3F,MAAM,gBAAgB,GAAG,QAAQ,IAAI,MAAM,CAAC,GAAG,CAAC,2BAAa,CAAC,yBAAyB,CAAC,CAAC;IAEzF,gCAAgC;IAChC,IAAI,WAAW,CAAC;IAChB,IAAI,QAAQ,EAAE,CAAC;QACd,WAAW,GAAG,IAAA,6BAAW,EAAC,QAAQ,CAAC,CAAC;IACrC,CAAC;IAED,IAAI,kBAAkB,CAAC;IACvB,IAAI,gBAAgB,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAClC,IAAI,kBAAkB,CAAC;IACvB,IAAI,CAAC;QACJ,MAAM,MAAM,GAAG,IAAA,aAAQ,EAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACrC,kBAAkB,GAAG,kBAAkB,CAAC,MAAM,CAAC,CAAC;QAChD,IAAI,MAAM,CAAC,WAAW,GAAG,CAAC;YAAE,gBAAgB,GAAG,IAAI,CAAC,GAAG,CAAC,gBAAgB,EAAE,MAAM,CAAC,WAAW,CAAC,CAAC;IAC/F,CAAC;IAAC,MAAM,CAAC,CAAA,CAAC;IACV,0BAAS,CAAC,KAAK,CAAC,8BAA8B,EAAE,OAAO,EAAE,WAAW,EAAE,QAAQ,CAAC,CAAC;IAChF,IAAI,YAAY,GAAG,KAAK,CAAC;IACzB,IAAI,KAAK,GAAG,KAAK,CAAC;IAClB,IAAI,mBAAmB,GAAG,KAAK,CAAC;IAChC,IAAI,sBAAsB,GAAG,CAAC,CAAC;IAC/B,IAAI,eAAe,GAAG,CAAC,CAAC;IACxB,MAAM,eAAe,GAAG,aAAa,IAAI,kBAAkB,CAAC;IAC5D,MAAM,mBAAmB,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,eAAe,GAAG,CAAC,CAAC,CAAC,CAAC;IACzE;;;;;OAKG;IACH,SAAS,qBAAqB,CAAC,GAAQ;QACtC,IAAI,GAAG,CAAC,IAAI,KAAK,QAAQ,IAAI,IAAA,eAAU,EAAC,aAAa,CAAC;YAAE,OAAO;QAC/D,IAAI,CAAC;YACJ,IAAA,cAAS,EAAC,aAAa,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YAC9C,0BAAS,CAAC,IAAI,CAAC,8BAA8B,aAAa,qCAAqC,CAAC,CAAC;QAClG,CAAC;QAAC,OAAO,QAAQ,EAAE,CAAC;YACnB,0BAAS,CAAC,KAAK,CAAC,+CAA+C,EAAE,aAAa,EAAE,QAAQ,CAAC,CAAC;QAC3F,CAAC;IACF,CAAC;IACD,MAAM,aAAa,GAAG,WAAW,CAAC,KAAK,IAAI,EAAE;QAC5C,2FAA2F;QAC3F,mEAAmE;QACnE,IAAI,YAAY,IAAI,KAAK;YAAE,OAAO;QAClC,YAAY,GAAG,IAAI,CAAC;QACpB,MAAM,YAAY,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,eAAe,CAAC;QAClD,8FAA8F;QAC9F,4FAA4F;QAC5F,4FAA4F;QAC5F,6FAA6F;QAC7F,kCAAkC;QAClC,IAAI,CAAC;YACJ,IAAI,QAAQ,EAAE,CAAC;gBACd,IAAI,CAAC;oBACJ,wFAAwF;oBACxF,qFAAqF;oBACrF,sBAAsB;oBACtB,MAAM,MAAM,GAAG,IAAA,aAAQ,EAAC,MAAM,CAAC,IAAI,CAAC,CAAC;oBACrC,IAAI,MAAM,CAAC,IAAI,IAAI,QAAQ,EAAE,CAAC;wBAC7B,kBAAkB,GAAG,MAAM,WAAW,CAAC,MAAM,CAAC,IAAI,EAAE,aAAa,EAAE,MAAM,EAAE,gBAAgB,EAAE,MAAM,CAAC,CAAC;wBACrG,gFAAgF;wBAChF,mFAAmF;wBACnF,gEAAgE;wBAChE,gBAAgB,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;oBAC/B,CAAC;gBACF,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACd,uFAAuF;oBACvF,wEAAwE;oBACxE,qBAAqB,CAAC,GAAG,CAAC,CAAC;oBAC3B,IAAI,GAAG,CAAC,IAAI,KAAK,QAAQ;wBAAE,MAAM,GAAG,CAAC;gBACtC,CAAC;YACF,CAAC;YAED,IAAI,WAAW,EAAE,CAAC;gBACjB,IAAI,CAAC;oBACJ,MAAM,gBAAgB,GAAG,kBAAkB,CAAC,IAAA,aAAQ,EAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;oBACnE,IAAI,gBAAgB,IAAI,gBAAgB,KAAK,kBAAkB,EAAE,CAAC;wBACjE,kBAAkB,GAAG,gBAAgB,CAAC;wBACtC,gBAAgB,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;oBAC/B,CAAC;gBACF,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACd,IAAI,GAAG,CAAC,IAAI,KAAK,QAAQ;wBAAE,MAAM,GAAG,CAAC;gBACtC,CAAC;gBACD,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,gBAAgB,IAAI,WAAW,EAAE,CAAC;oBAClD,IAAI,CAAC;wBACJ,kBAAkB,GAAG,MAAM,WAAW,CAAC,MAAM,CAAC,IAAI,EAAE,aAAa,EAAE,MAAM,EAAE,gBAAgB,CAAC,CAAC;wBAC7F,gBAAgB,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;oBAC/B,CAAC;oBAAC,OAAO,GAAG,EAAE,CAAC;wBACd,+CAA+C;wBAC/C,qBAAqB,CAAC,GAAG,CAAC,CAAC;wBAC3B,IAAI,GAAG,CAAC,IAAI,KAAK,QAAQ;4BAAE,MAAM,GAAG,CAAC;oBACtC,CAAC;gBACF,CAAC;YACF,CAAC;YACD,2FAA2F;YAC3F,uFAAuF;YACvF,4FAA4F;YAC5F,2FAA2F;YAC3F,uDAAuD;YACvD,IAAI,gBAAgB,IAAI,SAAS,IAAI,mBAAmB,EAAE,CAAC;gBAC1D,0FAA0F;gBAC1F,6FAA6F;gBAC7F,IAAI,UAAU,CAAC;gBACf,IAAI,CAAC;oBACJ,UAAU,GAAG,MAAM,aAAM,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;gBAClD,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACd,IAAI,GAAG,CAAC,IAAI,KAAK,QAAQ;wBAAE,0BAAS,CAAC,KAAK,CAAC,qCAAqC,EAAE,aAAa,EAAE,GAAG,CAAC,CAAC;oBACtG,UAAU,GAAG,EAAE,CAAC;gBACjB,CAAC;gBACD,MAAM,EAAE,QAAQ,EAAE,YAAY,EAAE,GAAG,MAAM,IAAA,2DAA6B,EAAC,YAAY,CAAC,CAAC;gBACrF,qFAAqF;gBACrF,yFAAyF;gBACzF,yFAAyF;gBACzF,wEAAwE;gBACxE,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,sBAAsB,EAAE,CAAC;oBACvD,sBAAsB,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,6BAA6B,CAAC;oBACpE,mBAAmB,GAAG,IAAI,CAAC;oBAC3B,0BAAS,CAAC,IAAI,CACb,6HAA6H,aAAa,EAAE,CAC5I,CAAC;gBACH,CAAC;qBAAM,IAAI,QAAQ,IAAI,mBAAmB,EAAE,CAAC;oBAC5C,mBAAmB,GAAG,KAAK,CAAC;oBAC5B,sBAAsB,GAAG,CAAC,CAAC;oBAC3B,0BAAS,CAAC,MAAM,CAAC,oEAAoE,aAAa,EAAE,CAAC,CAAC;gBACvG,CAAC;gBACD,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,YAAY,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;gBAErF,IAAI,QAAQ,IAAI,CAAC,SAAS,IAAI,mBAAmB,CAAC,EAAE,CAAC;oBACpD,uCAAuC;oBACvC,oEAAoE;oBACpE,MAAM,WAAW,GAAG,IAAA,6BAAW,EAAC,SAAS,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,mBAAmB,CAAC,CAAC;oBAC/E,IAAI,kBAAkB,GAAG,IAAI,CAAC;oBAC9B,IAAI,QAAQ,GAAG,CAAC,CAAC;oBACjB,OAAO,QAAQ,GAAG,UAAU,CAAC,MAAM,EAAE,QAAQ,EAAE,EAAE,CAAC;wBACjD,IAAI,KAAK,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,YAAY,EAAE,CAAC;4BACzC,kBAAkB,GAAG,KAAK,CAAC;4BAC3B,MAAM;wBACP,CAAC;wBACD,MAAM,IAAI,GAAG,UAAU,CAAC,CAAC,eAAe,GAAG,QAAQ,CAAC,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC;wBAC1E,IAAI,CAAC;4BACJ,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,IAAI,CAAC,CAAC;4BACnD,8EAA8E;4BAC9E,IAAI,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;gCAAE,SAAS;4BACtD,gFAAgF;4BAChF,+CAA+C;4BAC/C,IAAI,IAAA,2CAA0B,EAAC,WAAW,CAAC;gCAAE,SAAS;4BACtD,MAAM,SAAS,GAAG,MAAM,aAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;4BACjD,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC,OAAO,GAAG,WAAW,EAAE,CAAC;gCAClD,MAAM,aAAM,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;4BAClC,CAAC;wBACF,CAAC;wBAAC,OAAO,GAAG,EAAE,CAAC;4BACd,IAAI,GAAG,CAAC,IAAI,KAAK,QAAQ;gCAAE,0BAAS,CAAC,KAAK,CAAC,4BAA4B,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;wBACrF,CAAC;oBACF,CAAC;oBACD,IAAI,kBAAkB,EAAE,CAAC;wBACxB,eAAe,GAAG,CAAC,CAAC;wBACpB,mBAAmB,GAAG,CAAC,CAAC;oBACzB,CAAC;yBAAM,IAAI,UAAU,CAAC,MAAM,EAAE,CAAC;wBAC9B,eAAe,GAAG,CAAC,eAAe,GAAG,QAAQ,CAAC,GAAG,UAAU,CAAC,MAAM,CAAC;oBACpE,CAAC;gBACF,CAAC;gBAED,IAAI,QAAQ,IAAI,gBAAgB,IAAI,CAAC,KAAK,EAAE,CAAC;oBAC5C,MAAM,kBAAkB,GAAG,MAAM,IAAA,wCAAuB,EAAC,aAAa,EAAE,UAAU,EAAE,QAAQ,EAAE;wBAC7F,QAAQ,EAAE,IAAI,CAAC,GAAG,CAAC,YAAY,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,mBAAmB,CAAC;wBAClE,UAAU,EAAE,GAAG,EAAE,CAAC,KAAK;qBACvB,CAAC,CAAC;oBACH,IAAI,kBAAkB;wBACrB,0BAAS,CAAC,KAAK,CAAC,+BAA+B,EAAE,kBAAkB,CAAC,IAAI,EAAE,kBAAkB,CAAC,KAAK,CAAC,CAAC;gBACtG,CAAC;YACF,CAAC;QACF,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACd,0BAAS,CAAC,KAAK,CAAC,0CAA0C,EAAE,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QAC/E,CAAC;gBAAS,CAAC;YACV,IAAI,CAAC;gBACJ,MAAM,IAAA,wCAAuB,EAAC,EAAE,QAAQ,EAAE,YAAY,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC,KAAK,EAAE,CAAC,CAAC;YACpF,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACd,0BAAS,CAAC,KAAK,CAAC,4CAA4C,EAAE,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;YACjF,CAAC;YACD,YAAY,GAAG,KAAK,CAAC;QACtB,CAAC;IACF,CAAC,EAAE,eAAe,CAAC,CAAC,KAAK,EAAE,CAAC;IAC5B,OAAO;QACN,GAAG;YACF,KAAK,GAAG,IAAI,CAAC;YACb,aAAa,CAAC,aAAa,CAAC,CAAC;QAC9B,CAAC;QACD,qBAAqB;YACpB,OAAO,kBAAkB,CAAC;QAC3B,CAAC;KACD,CAAC;IAEF,SAAS,kBAAkB,CAAC,KAAU;QACrC,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,GAAG,IAAI,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;IAC5D,CAAC;AACF,CAAC;AAED,KAAK,UAAU,WAAW,CACzB,OAAe,EACf,cAAsB,EACtB,MAAY,EACZ,QAAkB,EAClB,WAAiB;IAEjB,8FAA8F;IAC9F,4FAA4F;IAC5F,4FAA4F;IAC5F,4FAA4F;IAC5F,iGAAiG;IACjG,4FAA4F;IAC5F,MAAM,UAAU,GAAG,IAAA,kCAAiB,EACnC,OAAO,EACP,cAAc,EACd,MAAM,EAAE,YAAY,IAAI,0BAAS,CAAC,YAAY,EAC9C,WAAW,CACX,CAAC;IACF,MAAM,aAAa,GAAG,MAAM,IAAA,0CAAyB,EACpD,UAAU,EACV,QAAQ,IAAI,MAAM,CAAC,GAAG,CAAC,2BAAa,CAAC,yBAAyB,CAAC,EAC/D,CAAC,KAAK,EAAE,EAAE,CAAC,0BAAS,CAAC,KAAK,CAAC,+BAA+B,EAAE,UAAU,CAAC,WAAW,EAAE,KAAK,CAAC,CAC1F,CAAC;IAEF,gIAAgI;IAChI,0BAAS,CAAC,MAAM,CAAC,qCAAqC,aAAa,EAAE,CAAC,CAAC;IACvE,OAAO,aAAa,CAAC;AACtB,CAAC"}

package/dist/utility/nodeIdentity.d.ts

@@ -0,0 +1,9 @@
+/**
+ * A node's identity — node.hostname, and the replication.hostname / certificate it falls back to —
+ * must be a bare hostname or IP literal, not a URL: it becomes the certificate common name and the
+ * host replication advertises and dials, so a scheme/port/path/non-string corrupts both (harper#2218,
+ * where "ws://http://host:9926:9925" resolves to host "http"). Returns a reason clause when `value`
+ * is not a bare host, else undefined. An empty string is "unset" (a caller's cue to fall back), not a
+ * violation.
+ */
+export declare function bareHostViolation(value: unknown): string | undefined;

package/dist/utility/nodeIdentity.js

@@ -0,0 +1,58 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.bareHostViolation = bareHostViolation;
+const node_net_1 = require("node:net");
+/**
+ * A node's identity — node.hostname, and the replication.hostname / certificate it falls back to —
+ * must be a bare hostname or IP literal, not a URL: it becomes the certificate common name and the
+ * host replication advertises and dials, so a scheme/port/path/non-string corrupts both (harper#2218,
+ * where "ws://http://host:9926:9925" resolves to host "http"). Returns a reason clause when `value`
+ * is not a bare host, else undefined. An empty string is "unset" (a caller's cue to fall back), not a
+ * violation.
+ */
+function bareHostViolation(value) {
+    if (typeof value !== 'string')
+        return `must be a string, but is a ${value === null ? 'null' : typeof value}`;
+    if (value === '')
+        return undefined;
+    // The identity is stored unbracketed (bracketing belongs to URL construction). Reject a bracketed
+    // form so it is never cached — otherwise net.isIP fails on it and the certificate SAN is mistyped
+    // as DNS rather than IP, and the same node's identity string would differ by source.
+    if (value.includes('[') || value.includes(']'))
+        return 'must be an unbracketed IPv6 literal (e.g. "::1", not "[::1]")';
+    // A zone id ("fe80::1%eth0") passes net.isIP but has no valid URL authority, so exclude it here.
+    if ((0, node_net_1.isIP)(value) && !value.includes('%'))
+        return undefined; // a bare IPv4/IPv6 literal is a valid identity
+    if (value.includes('://'))
+        return 'must not include a URL scheme';
+    let url;
+    try {
+        // Parse under a special scheme so the host grammar matches the ws:// replication URLs that
+        // consume this value — a host this accepts is one the consumer accepts (a non-special scheme is
+        // more lenient and would pass e.g. "node%20" or "0x7f.1"). A port or path makes url.hostname
+        // differ from the input and is caught by the round-trip check below.
+        url = new URL(`https://${value}`);
+    }
+    catch {
+        return 'is not a valid hostname';
+    }
+    // Report the port before the round-trip check: the parser strips a default port for the scheme it
+    // was given (":443" under https), which would otherwise surface as a vaguer "is not a bare hostname".
+    if (url.port || (url.hostname && value.slice(url.hostname.length).startsWith(':'))) {
+        return 'must not include a port';
+    }
+    if (url.username || url.password)
+        return 'must not include credentials';
+    if (url.search)
+        return 'must not include a query string';
+    if (url.hash)
+        return 'must not include a fragment';
+    if (url.pathname && url.pathname !== '/')
+        return 'must not include a path';
+    // The host must survive parsing unchanged (compared case-insensitively, since URL lowercases it);
+    // anything that does not round-trip carried extra syntax and is not a bare host.
+    if (url.hostname.toLowerCase() !== value.toLowerCase())
+        return 'is not a bare hostname';
+    return undefined;
+}
+//# sourceMappingURL=nodeIdentity.js.map

package/dist/utility/nodeIdentity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"nodeIdentity.js","sourceRoot":"","sources":["../../utility/nodeIdentity.ts"],"names":[],"mappings":";;AAUA,8CAkCC;AA5CD,uCAAgC;AAEhC;;;;;;;GAOG;AACH,SAAgB,iBAAiB,CAAC,KAAc;IAC/C,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,8BAA8B,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,KAAK,EAAE,CAAC;IAC7G,IAAI,KAAK,KAAK,EAAE;QAAE,OAAO,SAAS,CAAC;IACnC,kGAAkG;IAClG,kGAAkG;IAClG,qFAAqF;IACrF,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC;QAC7C,OAAO,+DAA+D,CAAC;IACxE,iGAAiG;IACjG,IAAI,IAAA,eAAI,EAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,OAAO,SAAS,CAAC,CAAC,+CAA+C;IAC1G,IAAI,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,+BAA+B,CAAC;IAClE,IAAI,GAAG,CAAC;IACR,IAAI,CAAC;QACJ,2FAA2F;QAC3F,gGAAgG;QAChG,6FAA6F;QAC7F,qEAAqE;QACrE,GAAG,GAAG,IAAI,GAAG,CAAC,WAAW,KAAK,EAAE,CAAC,CAAC;IACnC,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,yBAAyB,CAAC;IAClC,CAAC;IACD,kGAAkG;IAClG,sGAAsG;IACtG,IAAI,GAAG,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,QAAQ,IAAI,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;QACpF,OAAO,yBAAyB,CAAC;IAClC,CAAC;IACD,IAAI,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,QAAQ;QAAE,OAAO,8BAA8B,CAAC;IACxE,IAAI,GAAG,CAAC,MAAM;QAAE,OAAO,iCAAiC,CAAC;IACzD,IAAI,GAAG,CAAC,IAAI;QAAE,OAAO,6BAA6B,CAAC;IACnD,IAAI,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,QAAQ,KAAK,GAAG;QAAE,OAAO,yBAAyB,CAAC;IAC3E,kGAAkG;IAClG,iFAAiF;IACjF,IAAI,GAAG,CAAC,QAAQ,CAAC,WAAW,EAAE,KAAK,KAAK,CAAC,WAAW,EAAE;QAAE,OAAO,wBAAwB,CAAC;IACxF,OAAO,SAAS,CAAC;AAClB,CAAC"}

package/dist/utility/npmUtilities.js

@@ -57,14 +57,14 @@ async function installModules(req) {
     const deprecationWarning = 'install_node_modules is deprecated. Dependencies are automatically installed on' +
         ' deploy, and install_node_modules can lead to inconsistent behavior';
     harper_logger_ts_1.default.warn(deprecationWarning, req.projects);
-    const validation = modulesValidator(req);
+    const { error: validation, value: validatedRequest } = modulesValidator(req);
     if (validation) {
         throw (0, hdbError_ts_1.handleHDBError)(validation, validation.message, HTTP_STATUS_CODES.BAD_REQUEST);
     }
-    let { projects, dryRun } = req;
+    const { projects, dry_run: dryRun, allowInstallScripts } = validatedRequest;
     const componentsRootDirPath = (0, configUtils_ts_1.getConfigPath)(hdbTerms_ts_1.CONFIG_PARAMS.COMPONENTSROOT);
     const responseObject = {};
-    const args = ['install', '--force', '--omit=dev', '--json'];
+    const args = [...(0, Application_ts_1.packageManagerInstallArguments)('npm', allowInstallScripts, true), '--json'];
     if (dryRun)
         args.push('--dry-run');
     for (const project of projects) {
@@ -114,15 +114,19 @@ function parseNPMStdErr(stderr) {
     }
 }
 /**
- * Validator for both installModules & auditModules
+ * Validator for installModules
  * @param {Object} req
- * @returns {*}
  */
 function modulesValidator(req) {
+    // `dryRun` was the only spelling that worked before dry_run was honored; keep it accepted, but
+    // reject a request that carries both rather than picking a winner
     const funcSchema = joi_1.default.object({
         projects: joi_1.default.array().min(1).items(joi_1.default.string()).required(),
         dry_run: joi_1.default.boolean().default(false),
-    });
-    return validator.validateBySchema(req, funcSchema);
+        allowInstallScripts: joi_1.default.boolean().default(true),
+    })
+        .rename('dryRun', 'dry_run', { ignoreUndefined: true })
+        .rename('install_allow_scripts', 'allowInstallScripts', { ignoreUndefined: true });
+    return validator.validateAndConvertBySchema(req, funcSchema);
 }
 //# sourceMappingURL=npmUtilities.js.map

package/dist/utility/npmUtilities.js.map

@@ -1 +1 @@
-{"version":3,"file":"npmUtilities.js","sourceRoot":"","sources":["../../utility/npmUtilities.ts"],"names":[],"mappings":"AAAA,YAAY,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAuBb,wCAuDC;AA5ED,8CAAsB;AACtB,2CAA6B;AAE7B,sDAAiE;AAEjE,MAAM,EAAE,iBAAiB,EAAE,GAAG,uBAAS,CAAC;AAExC,8EAAgE;AAChE,kFAAsD;AAEtD,+CAA8C;AAC9C,6DAAyD;AACzD,iEAAmE;AACnE,2FAAyF;AACzF,yEAAqE;AAErE;;;;GAIG;AACI,KAAK,UAAU,cAAc,CAAC,GAAQ;IAC5C,MAAM,kBAAkB,GACvB,iFAAiF;QACjF,qEAAqE,CAAC;IACvE,0BAAY,CAAC,IAAI,CAAC,kBAAkB,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC;IACpD,MAAM,UAAU,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC;IACzC,IAAI,UAAU,EAAE,CAAC;QAChB,MAAM,IAAA,4BAAc,EAAC,UAAU,EAAE,UAAU,CAAC,OAAO,EAAE,iBAAiB,CAAC,WAAW,CAAC,CAAC;IACrF,CAAC;IAED,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,GAAG,CAAC;IAE/B,MAAM,qBAAqB,GAAG,IAAA,8BAAa,EAAC,2BAAa,CAAC,cAAc,CAAC,CAAC;IAE1E,MAAM,cAAc,GAAQ,EAAE,CAAC;IAE/B,MAAM,IAAI,GAAG,CAAC,SAAS,EAAE,SAAS,EAAE,YAAY,EAAE,QAAQ,CAAC,CAAC;IAC5D,IAAI,MAAM;QAAE,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IAEnC,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAChC,cAAc,CAAC,OAAO,CAAC,GAAG,EAAE,UAAU,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;QAChE,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,qBAAqB,EAAE,OAAO,CAAC,CAAC;QAC9D,IAAI,CAAC;YACJ,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,IAAA,0DAA4B,EAC1D,WAAW,EACX,GAAG,EAAE,CAAC,IAAA,oCAAmB,EAAC,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,WAAW,CAAC,EAC5D,EAAE,YAAY,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,KAAK,OAAO,CAAC,GAAG,IAAI,IAAA,kCAAe,EAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CACzF,CAAC;YACF,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;YAClD,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;YAElD,IAAI,CAAC;gBACJ,cAAc,CAAC,OAAO,CAAC,CAAC,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;YACzD,CAAC;YAAC,MAAM,CAAC;gBACR,cAAc,CAAC,OAAO,CAAC,CAAC,UAAU,GAAG,MAAM,CAAC;YAC7C,CAAC;YAED,IAAI,CAAC;gBACJ,cAAc,CAAC,OAAO,CAAC,CAAC,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;YACxD,CAAC;YAAC,MAAM,CAAC;gBACR,cAAc,CAAC,OAAO,CAAC,CAAC,SAAS,GAAG,MAAM,CAAC;YAC5C,CAAC;QACF,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;gBAClB,cAAc,CAAC,OAAO,CAAC,CAAC,SAAS,GAAG,cAAc,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;YAClE,CAAC;iBAAM,CAAC;gBACP,cAAc,CAAC,OAAO,CAAC,CAAC,SAAS,GAAG,KAAK,CAAC,OAAO,CAAC;YACnD,CAAC;YACD,SAAS;QACV,CAAC;IACF,CAAC;IAED,0BAAY,CAAC,IAAI,CAAC,yCAAyC,cAAc,EAAE,CAAC,CAAC;IAC7E,cAAc,CAAC,OAAO,GAAG,kBAAkB,CAAC;IAC5C,OAAO,cAAc,CAAC;AACvB,CAAC;AAED,SAAS,cAAc,CAAC,MAAc;IACrC,qHAAqH;IACrH,IAAI,iBAAiB,GAAG,YAAY,CAAC;IACrC,IAAI,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;IACzC,IAAI,GAAG,GAAG,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IAChC,IAAI,KAAK,GAAG,CAAC,CAAC,IAAI,GAAG,GAAG,CAAC,CAAC,EAAE,CAAC;QAC5B,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,GAAG,iBAAiB,CAAC,MAAM,GAAG,CAAC,EAAE,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC;IACpF,CAAC;SAAM,CAAC;QACP,OAAO,MAAM,CAAC;IACf,CAAC;AACF,CAAC;AAED;;;;GAIG;AACH,SAAS,gBAAgB,CAAC,GAAQ;IACjC,MAAM,UAAU,GAAG,aAAG,CAAC,MAAM,CAAC;QAC7B,QAAQ,EAAE,aAAG,CAAC,KAAK,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,aAAG,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;QAC3D,OAAO,EAAE,aAAG,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;KACrC,CAAC,CAAC;IAEH,OAAO,SAAS,CAAC,gBAAgB,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC;AACpD,CAAC"}
+{"version":3,"file":"npmUtilities.js","sourceRoot":"","sources":["../../utility/npmUtilities.ts"],"names":[],"mappings":"AAAA,YAAY,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAuBb,wCAuDC;AA5ED,8CAAsB;AACtB,2CAA6B;AAE7B,sDAAiE;AAEjE,MAAM,EAAE,iBAAiB,EAAE,GAAG,uBAAS,CAAC;AAExC,8EAAgE;AAChE,kFAAsD;AAEtD,+CAA8C;AAC9C,6DAAyD;AACzD,iEAAmG;AACnG,2FAAyF;AACzF,yEAAqE;AAErE;;;;GAIG;AACI,KAAK,UAAU,cAAc,CAAC,GAAQ;IAC5C,MAAM,kBAAkB,GACvB,iFAAiF;QACjF,qEAAqE,CAAC;IACvE,0BAAY,CAAC,IAAI,CAAC,kBAAkB,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC;IACpD,MAAM,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,gBAAgB,EAAE,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC;IAC7E,IAAI,UAAU,EAAE,CAAC;QAChB,MAAM,IAAA,4BAAc,EAAC,UAAU,EAAE,UAAU,CAAC,OAAO,EAAE,iBAAiB,CAAC,WAAW,CAAC,CAAC;IACrF,CAAC;IAED,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,mBAAmB,EAAE,GAAG,gBAAgB,CAAC;IAE5E,MAAM,qBAAqB,GAAG,IAAA,8BAAa,EAAC,2BAAa,CAAC,cAAc,CAAC,CAAC;IAE1E,MAAM,cAAc,GAAQ,EAAE,CAAC;IAE/B,MAAM,IAAI,GAAG,CAAC,GAAG,IAAA,+CAA8B,EAAC,KAAK,EAAE,mBAAmB,EAAE,IAAI,CAAC,EAAE,QAAQ,CAAC,CAAC;IAC7F,IAAI,MAAM;QAAE,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IAEnC,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAChC,cAAc,CAAC,OAAO,CAAC,GAAG,EAAE,UAAU,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;QAChE,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,qBAAqB,EAAE,OAAO,CAAC,CAAC;QAC9D,IAAI,CAAC;YACJ,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,IAAA,0DAA4B,EAC1D,WAAW,EACX,GAAG,EAAE,CAAC,IAAA,oCAAmB,EAAC,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,WAAW,CAAC,EAC5D,EAAE,YAAY,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,KAAK,OAAO,CAAC,GAAG,IAAI,IAAA,kCAAe,EAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CACzF,CAAC;YACF,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;YAClD,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;YAElD,IAAI,CAAC;gBACJ,cAAc,CAAC,OAAO,CAAC,CAAC,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;YACzD,CAAC;YAAC,MAAM,CAAC;gBACR,cAAc,CAAC,OAAO,CAAC,CAAC,UAAU,GAAG,MAAM,CAAC;YAC7C,CAAC;YAED,IAAI,CAAC;gBACJ,cAAc,CAAC,OAAO,CAAC,CAAC,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;YACxD,CAAC;YAAC,MAAM,CAAC;gBACR,cAAc,CAAC,OAAO,CAAC,CAAC,SAAS,GAAG,MAAM,CAAC;YAC5C,CAAC;QACF,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;gBAClB,cAAc,CAAC,OAAO,CAAC,CAAC,SAAS,GAAG,cAAc,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;YAClE,CAAC;iBAAM,CAAC;gBACP,cAAc,CAAC,OAAO,CAAC,CAAC,SAAS,GAAG,KAAK,CAAC,OAAO,CAAC;YACnD,CAAC;YACD,SAAS;QACV,CAAC;IACF,CAAC;IAED,0BAAY,CAAC,IAAI,CAAC,yCAAyC,cAAc,EAAE,CAAC,CAAC;IAC7E,cAAc,CAAC,OAAO,GAAG,kBAAkB,CAAC;IAC5C,OAAO,cAAc,CAAC;AACvB,CAAC;AAED,SAAS,cAAc,CAAC,MAAc;IACrC,qHAAqH;IACrH,IAAI,iBAAiB,GAAG,YAAY,CAAC;IACrC,IAAI,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;IACzC,IAAI,GAAG,GAAG,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IAChC,IAAI,KAAK,GAAG,CAAC,CAAC,IAAI,GAAG,GAAG,CAAC,CAAC,EAAE,CAAC;QAC5B,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,GAAG,iBAAiB,CAAC,MAAM,GAAG,CAAC,EAAE,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC;IACpF,CAAC;SAAM,CAAC;QACP,OAAO,MAAM,CAAC;IACf,CAAC;AACF,CAAC;AAED;;;GAGG;AACH,SAAS,gBAAgB,CAAC,GAAQ;IACjC,+FAA+F;IAC/F,kEAAkE;IAClE,MAAM,UAAU,GAAG,aAAG,CAAC,MAAM,CAAC;QAC7B,QAAQ,EAAE,aAAG,CAAC,KAAK,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,aAAG,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;QAC3D,OAAO,EAAE,aAAG,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;QACrC,mBAAmB,EAAE,aAAG,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;KAChD,CAAC;SACA,MAAM,CAAC,QAAQ,EAAE,SAAS,EAAE,EAAE,eAAe,EAAE,IAAI,EAAE,CAAC;SACtD,MAAM,CAAC,uBAAuB,EAAE,qBAAqB,EAAE,EAAE,eAAe,EAAE,IAAI,EAAE,CAAC,CAAC;IAEpF,OAAO,SAAS,CAAC,0BAA0B,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC;AAC9D,CAAC"}

package/dist/utility/operationPermissions.d.ts

@@ -22,7 +22,7 @@ export declare const OPERATION_PERMISSION_GROUPS: {
      * and bulk load. Does NOT include schema DDL (create_attribute), user/role management,
      * or admin reads (get_configuration, logs). Add those explicitly when needed.
      */
-    readonly standard_user: readonly ["search", "search_by_conditions", "search_by_hash", "search_by_id", "search_by_value", "sql", "describe_all", "describe_schema", "describe_database", "describe_table", "user_info", "get_job", "get_analytics", "list_metrics", "describe_metric", "insert", "update", "upsert", "delete", "csv_data_load", "csv_file_load", "csv_url_load", "import_from_s3"];
+    readonly standard_user: readonly ["search", "search_by_conditions", "search_by_hash", "search_by_id", "search_by_value", "sql", "describe_all", "describe_schema", "describe_database", "describe_table", "user_info", "get_job", "get_analytics", "list_metrics", "describe_metric", "insert", "update", "upsert", "put", "delete", "csv_data_load", "csv_file_load", "csv_url_load", "import_from_s3"];
     /**
      * Drive the built-in agent (#626): send prompts, read/list sessions, and approve/cancel
      * runs. Grants a scoped, non-super_user "delegation" role access to the agent without full
@@ -42,6 +42,8 @@ export declare function registerGrantableOperation(name: string): void;
  * primarily for tests that register throwaway ops and must not leak them into the global set.
  */
 export declare function unregisterGrantableOperation(name: string): void;
+export declare function registerWorkerGrantableOperation(name: string): void;
+export declare function unregisterWorkerGrantableOperation(name: string): void;
 /**
  * Validates that every entry in an operations array is a known operation name or group name.
  * Returns the first invalid entry, or null if all entries are valid.

package/dist/utility/operationPermissions.js

@@ -3,6 +3,8 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.OPERATION_PERMISSION_GROUPS = void 0;
 exports.registerGrantableOperation = registerGrantableOperation;
 exports.unregisterGrantableOperation = unregisterGrantableOperation;
+exports.registerWorkerGrantableOperation = registerWorkerGrantableOperation;
+exports.unregisterWorkerGrantableOperation = unregisterWorkerGrantableOperation;
 exports.validateOperations = validateOperations;
 exports.expandOperationsPerms = expandOperationsPerms;
 const hdbTerms_ts_1 = require("./hdbTerms.js");
@@ -75,6 +77,7 @@ exports.OPERATION_PERMISSION_GROUPS = {
         hdbTerms_ts_1.OPERATIONS_ENUM.INSERT,
         hdbTerms_ts_1.OPERATIONS_ENUM.UPDATE,
         hdbTerms_ts_1.OPERATIONS_ENUM.UPSERT,
+        hdbTerms_ts_1.OPERATIONS_ENUM.PUT,
         hdbTerms_ts_1.OPERATIONS_ENUM.DELETE,
         // Bulk load
         hdbTerms_ts_1.OPERATIONS_ENUM.CSV_DATA_LOAD,
@@ -102,6 +105,11 @@ const validGroups = new Set(Object.keys(exports.OPERATION_PERMISSION_GROUPS));
 // permission) whose names may fall outside OPERATIONS_ENUM. Tracked so they're grantable in a
 // role's `operations` allowlist (add_role/alter_role/impersonation validate against this set too).
 const dynamicallyRegisteredOps = new Set();
+// The same, for ops registered on a WORKER and mirrored here by the OPERATION_REGISTERED bridge.
+// Deliberately a separate set: the two threads can register the same name independently (a hot
+// deploy can add a `startOnMainThread` component while the worker offering that name is retiring),
+// so worker-lifecycle cleanup must not be able to revoke a mark this thread made itself.
+const workerRegisteredOps = new Set();
 /**
  * Mark a dynamically-registered operation name as a valid target for role `operations` grants.
  * Called by registerOperationPermission so a component op declaring a permission can actually be
@@ -117,13 +125,20 @@ function registerGrantableOperation(name) {
 function unregisterGrantableOperation(name) {
     dynamicallyRegisteredOps.delete(name);
 }
+function registerWorkerGrantableOperation(name) {
+    workerRegisteredOps.add(name);
+}
+function unregisterWorkerGrantableOperation(name) {
+    workerRegisteredOps.delete(name);
+}
 /**
  * Validates that every entry in an operations array is a known operation name or group name.
  * Returns the first invalid entry, or null if all entries are valid.
  */
 function validateOperations(operations) {
     for (const op of operations) {
-        if (typeof op !== 'string' || (!validOps.has(op) && !validGroups.has(op) && !dynamicallyRegisteredOps.has(op))) {
+        if (typeof op !== 'string' ||
+            (!validOps.has(op) && !validGroups.has(op) && !dynamicallyRegisteredOps.has(op) && !workerRegisteredOps.has(op))) {
             return String(op);
         }
     }

package/dist/utility/operationPermissions.js.map

@@ -1 +1 @@
-{"version":3,"file":"operationPermissions.js","sourceRoot":"","sources":["../../utility/operationPermissions.ts"],"names":[],"mappings":";;;AAyGA,gEAEC;AAMD,oEAEC;AAMD,gDAOC;AAMD,sDAWC;AAjJD,+CAAgD;AAEhD;;;GAGG;AACU,QAAA,2BAA2B,GAAG;IAC1C;;;;;OAKG;IACH,SAAS,EAAE;QACV,6BAAe,CAAC,MAAM;QACtB,6BAAe,CAAC,oBAAoB;QACpC,6BAAe,CAAC,cAAc;QAC9B,6BAAe,CAAC,YAAY;QAC5B,6BAAe,CAAC,eAAe;QAC/B,6BAAe,CAAC,GAAG;QACnB,6BAAe,CAAC,YAAY;QAC5B,6BAAe,CAAC,eAAe;QAC/B,6BAAe,CAAC,iBAAiB;QACjC,6BAAe,CAAC,cAAc;QAC9B,6BAAe,CAAC,SAAS;QACzB,6BAAe,CAAC,OAAO;QACvB,6BAAe,CAAC,aAAa;QAC7B,6BAAe,CAAC,YAAY;QAC5B,6BAAe,CAAC,eAAe;KAC/B;IACD;;;;;OAKG;IACH,UAAU,EAAE;QACX,6BAAe,CAAC,iBAAiB;QACjC,6BAAe,CAAC,QAAQ;QACxB,6BAAe,CAAC,cAAc;QAC9B,6BAAe,CAAC,oBAAoB;QACpC,6BAAe,CAAC,mBAAmB;QACnC,6BAAe,CAAC,cAAc;QAC9B,6BAAe,CAAC,kBAAkB;KAClC;IACD;;;;OAIG;IACH,aAAa,EAAE;QACd,oBAAoB;QACpB,6BAAe,CAAC,MAAM;QACtB,6BAAe,CAAC,oBAAoB;QACpC,6BAAe,CAAC,cAAc;QAC9B,6BAAe,CAAC,YAAY;QAC5B,6BAAe,CAAC,eAAe;QAC/B,6BAAe,CAAC,GAAG;QACnB,6BAAe,CAAC,YAAY;QAC5B,6BAAe,CAAC,eAAe;QAC/B,6BAAe,CAAC,iBAAiB;QACjC,6BAAe,CAAC,cAAc;QAC9B,6BAAe,CAAC,SAAS;QACzB,6BAAe,CAAC,OAAO;QACvB,6BAAe,CAAC,aAAa;QAC7B,6BAAe,CAAC,YAAY;QAC5B,6BAAe,CAAC,eAAe;QAC/B,oBAAoB;QACpB,6BAAe,CAAC,MAAM;QACtB,6BAAe,CAAC,MAAM;QACtB,6BAAe,CAAC,MAAM;QACtB,6BAAe,CAAC,MAAM;QACtB,YAAY;QACZ,6BAAe,CAAC,aAAa;QAC7B,6BAAe,CAAC,aAAa;QAC7B,6BAAe,CAAC,YAAY;QAC5B,6BAAe,CAAC,cAAc;KAC9B;IACD;;;;;OAKG;IACH,KAAK,EAAE;QACN,6BAAe,CAAC,YAAY;QAC5B,6BAAe,CAAC,iBAAiB;QACjC,6BAAe,CAAC,mBAAmB;QACnC,6BAAe,CAAC,gBAAgB;QAChC,6BAAe,CAAC,oBAAoB;KACpC;CACQ,CAAC;AAEX,MAAM,QAAQ,GAAgB,IAAI,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,6BAAe,CAAC,CAAC,CAAC;AACtE,MAAM,WAAW,GAAgB,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,mCAA2B,CAAC,CAAC,CAAC;AACnF,yFAAyF;AACzF,8FAA8F;AAC9F,mGAAmG;AACnG,MAAM,wBAAwB,GAAgB,IAAI,GAAG,EAAE,CAAC;AAExD;;;;GAIG;AACH,SAAgB,0BAA0B,CAAC,IAAY;IACtD,wBAAwB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;AACpC,CAAC;AAED;;;GAGG;AACH,SAAgB,4BAA4B,CAAC,IAAY;IACxD,wBAAwB,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;AACvC,CAAC;AAED;;;GAGG;AACH,SAAgB,kBAAkB,CAAC,UAA8B;IAChE,KAAK,MAAM,EAAE,IAAI,UAAU,EAAE,CAAC;QAC7B,IAAI,OAAO,EAAE,KAAK,QAAQ,IAAI,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,wBAAwB,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;YAChH,OAAO,MAAM,CAAC,EAAE,CAAC,CAAC;QACnB,CAAC;IACF,CAAC;IACD,OAAO,IAAI,CAAC;AACb,CAAC;AAED;;;GAGG;AACH,SAAgB,qBAAqB,CAAC,UAA6B;IAClE,MAAM,UAAU,GAAG,IAAI,GAAG,EAAU,CAAC;IACrC,KAAK,MAAM,IAAI,IAAI,UAAU,EAAE,CAAC;QAC/B,MAAM,KAAK,GAAG,mCAA2B,CAAC,IAAgD,CAAC,CAAC;QAC5F,IAAI,KAAK,EAAE,CAAC;YACX,KAAK,MAAM,EAAE,IAAI,KAAK;gBAAE,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC5C,CAAC;aAAM,CAAC;YACP,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACtB,CAAC;IACF,CAAC;IACD,OAAO,UAAU,CAAC;AACnB,CAAC"}
+{"version":3,"file":"operationPermissions.js","sourceRoot":"","sources":["../../utility/operationPermissions.ts"],"names":[],"mappings":";;;AA+GA,gEAEC;AAMD,oEAEC;AAED,4EAEC;AAED,gFAEC;AAMD,gDAUC;AAMD,sDAWC;AAlKD,+CAAgD;AAEhD;;;GAGG;AACU,QAAA,2BAA2B,GAAG;IAC1C;;;;;OAKG;IACH,SAAS,EAAE;QACV,6BAAe,CAAC,MAAM;QACtB,6BAAe,CAAC,oBAAoB;QACpC,6BAAe,CAAC,cAAc;QAC9B,6BAAe,CAAC,YAAY;QAC5B,6BAAe,CAAC,eAAe;QAC/B,6BAAe,CAAC,GAAG;QACnB,6BAAe,CAAC,YAAY;QAC5B,6BAAe,CAAC,eAAe;QAC/B,6BAAe,CAAC,iBAAiB;QACjC,6BAAe,CAAC,cAAc;QAC9B,6BAAe,CAAC,SAAS;QACzB,6BAAe,CAAC,OAAO;QACvB,6BAAe,CAAC,aAAa;QAC7B,6BAAe,CAAC,YAAY;QAC5B,6BAAe,CAAC,eAAe;KAC/B;IACD;;;;;OAKG;IACH,UAAU,EAAE;QACX,6BAAe,CAAC,iBAAiB;QACjC,6BAAe,CAAC,QAAQ;QACxB,6BAAe,CAAC,cAAc;QAC9B,6BAAe,CAAC,oBAAoB;QACpC,6BAAe,CAAC,mBAAmB;QACnC,6BAAe,CAAC,cAAc;QAC9B,6BAAe,CAAC,kBAAkB;KAClC;IACD;;;;OAIG;IACH,aAAa,EAAE;QACd,oBAAoB;QACpB,6BAAe,CAAC,MAAM;QACtB,6BAAe,CAAC,oBAAoB;QACpC,6BAAe,CAAC,cAAc;QAC9B,6BAAe,CAAC,YAAY;QAC5B,6BAAe,CAAC,eAAe;QAC/B,6BAAe,CAAC,GAAG;QACnB,6BAAe,CAAC,YAAY;QAC5B,6BAAe,CAAC,eAAe;QAC/B,6BAAe,CAAC,iBAAiB;QACjC,6BAAe,CAAC,cAAc;QAC9B,6BAAe,CAAC,SAAS;QACzB,6BAAe,CAAC,OAAO;QACvB,6BAAe,CAAC,aAAa;QAC7B,6BAAe,CAAC,YAAY;QAC5B,6BAAe,CAAC,eAAe;QAC/B,oBAAoB;QACpB,6BAAe,CAAC,MAAM;QACtB,6BAAe,CAAC,MAAM;QACtB,6BAAe,CAAC,MAAM;QACtB,6BAAe,CAAC,GAAG;QACnB,6BAAe,CAAC,MAAM;QACtB,YAAY;QACZ,6BAAe,CAAC,aAAa;QAC7B,6BAAe,CAAC,aAAa;QAC7B,6BAAe,CAAC,YAAY;QAC5B,6BAAe,CAAC,cAAc;KAC9B;IACD;;;;;OAKG;IACH,KAAK,EAAE;QACN,6BAAe,CAAC,YAAY;QAC5B,6BAAe,CAAC,iBAAiB;QACjC,6BAAe,CAAC,mBAAmB;QACnC,6BAAe,CAAC,gBAAgB;QAChC,6BAAe,CAAC,oBAAoB;KACpC;CACQ,CAAC;AAEX,MAAM,QAAQ,GAAgB,IAAI,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,6BAAe,CAAC,CAAC,CAAC;AACtE,MAAM,WAAW,GAAgB,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,mCAA2B,CAAC,CAAC,CAAC;AACnF,yFAAyF;AACzF,8FAA8F;AAC9F,mGAAmG;AACnG,MAAM,wBAAwB,GAAgB,IAAI,GAAG,EAAE,CAAC;AACxD,iGAAiG;AACjG,+FAA+F;AAC/F,mGAAmG;AACnG,yFAAyF;AACzF,MAAM,mBAAmB,GAAgB,IAAI,GAAG,EAAE,CAAC;AAEnD;;;;GAIG;AACH,SAAgB,0BAA0B,CAAC,IAAY;IACtD,wBAAwB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;AACpC,CAAC;AAED;;;GAGG;AACH,SAAgB,4BAA4B,CAAC,IAAY;IACxD,wBAAwB,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;AACvC,CAAC;AAED,SAAgB,gCAAgC,CAAC,IAAY;IAC5D,mBAAmB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;AAC/B,CAAC;AAED,SAAgB,kCAAkC,CAAC,IAAY;IAC9D,mBAAmB,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;AAClC,CAAC;AAED;;;GAGG;AACH,SAAgB,kBAAkB,CAAC,UAA8B;IAChE,KAAK,MAAM,EAAE,IAAI,UAAU,EAAE,CAAC;QAC7B,IACC,OAAO,EAAE,KAAK,QAAQ;YACtB,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,wBAAwB,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,mBAAmB,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,EAC/G,CAAC;YACF,OAAO,MAAM,CAAC,EAAE,CAAC,CAAC;QACnB,CAAC;IACF,CAAC;IACD,OAAO,IAAI,CAAC;AACb,CAAC;AAED;;;GAGG;AACH,SAAgB,qBAAqB,CAAC,UAA6B;IAClE,MAAM,UAAU,GAAG,IAAI,GAAG,EAAU,CAAC;IACrC,KAAK,MAAM,IAAI,IAAI,UAAU,EAAE,CAAC;QAC/B,MAAM,KAAK,GAAG,mCAA2B,CAAC,IAAgD,CAAC,CAAC;QAC5F,IAAI,KAAK,EAAE,CAAC;YACX,KAAK,MAAM,EAAE,IAAI,KAAK;gBAAE,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC5C,CAAC;aAAM,CAAC;YACP,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACtB,CAAC;IACF,CAAC;IACD,OAAO,UAAU,CAAC;AACnB,CAAC"}