@lensmcp/cluster 1.18.4 → 1.18.6

package/executors/gateway/providers-prod.js

@@ -1,232 +1 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.staticManifestProvider = staticManifestProvider;
-exports.fileManifestProvider = fileManifestProvider;
-exports.rolloutPodProvider = rolloutPodProvider;
-exports.endpointsPodProvider = endpointsPodProvider;
-/**
- * Production providers — the environment-specific halves of the gateway that
- * the dev side fills with workspace-scan + unix-socket pools. Here:
- *
- *   - manifest source: a JSON file (or a static array), watched + atomically
- *     swapped. A registry-backed provider (Redis key-space / k8s ConfigMaps)
- *     plugs in behind the same `ManifestProvider` interface later.
- *   - pod resolution: `endpointsPodProvider` round-robins per-service upstream
- *     URLs (gateway-side LB). When a manifest carries its own `upstream` (a
- *     k8s Service URL that load-balances pods itself), the core uses that
- *     directly and no PodProvider is needed.
- *
- * Bad input never takes the gateway down: an unparseable manifest file is
- * rejected and the last-good table keeps serving (versioned swap).
- */
-const node_fs_1 = require("node:fs");
-const manifest_1 = require("./manifest");
-const toSpec = (v) => Array.isArray(v) ? { rules: [], cohorts: v } : { rules: v.rules ?? [], cohorts: v.cohorts ?? [] };
-/** A fixed set of manifests (tests, single-shot config). */
-function staticManifestProvider(manifests) {
-    return { list: () => manifests };
-}
-function parseManifests(raw) {
-    let data;
-    try {
-        data = JSON.parse(raw);
-    }
-    catch {
-        return undefined;
-    }
-    // Accept either a bare array or `{ manifests: [...] }`.
-    const arr = Array.isArray(data) ? data : data?.manifests;
-    if (!Array.isArray(arr))
-        return undefined;
-    const ok = arr.filter((m) => !!m && typeof m === 'object' && typeof m.service === 'string' && Array.isArray(m.mounts));
-    // A file that parsed but yielded ZERO valid manifests is treated as bad
-    // (likely a truncated/half-written deploy) — keep last-good rather than
-    // black-hole all traffic.
-    return ok.length > 0 ? ok : undefined;
-}
-/**
- * Watch a manifests JSON file; atomically swap the in-memory set on a valid
- * change, reject and keep last-good on a bad one. `watch` notifies subscribers
- * with the new set. Poll fallback covers editors/atomic-rename + platforms
- * where fs.watch is unreliable.
- */
-function fileManifestProvider(filePath, opts = {}) {
-    const onError = opts.onError ?? (() => undefined);
-    let current = [];
-    let lastMtimeMs = -1;
-    const subs = new Set();
-    const reload = () => {
-        if (!(0, node_fs_1.existsSync)(filePath))
-            return;
-        let mtime;
-        try {
-            mtime = (0, node_fs_1.statSync)(filePath).mtimeMs;
-        }
-        catch {
-            return;
-        }
-        if (mtime === lastMtimeMs)
-            return;
-        let raw;
-        try {
-            raw = (0, node_fs_1.readFileSync)(filePath, 'utf8');
-        }
-        catch (e) {
-            onError(e);
-            return;
-        }
-        const parsed = parseManifests(raw);
-        if (!parsed) {
-            onError(new Error(`[gateway] rejecting invalid manifest file ${filePath} — keeping last-good`));
-            return;
-        }
-        lastMtimeMs = mtime;
-        current = parsed;
-        for (const cb of subs) {
-            try {
-                cb(current);
-            }
-            catch (e) {
-                onError(e);
-            }
-        }
-    };
-    reload(); // initial load (best-effort; empty until the file appears)
-    let watcher;
-    try {
-        watcher = (0, node_fs_1.watch)(filePath, { persistent: false }, () => reload());
-    }
-    catch { /* dir may not exist yet — poll covers it */ }
-    const timer = setInterval(reload, opts.pollMs ?? 1000);
-    timer.unref?.();
-    return {
-        list: () => current,
-        watch: (cb) => { subs.add(cb); return () => subs.delete(cb); },
-        stop: () => { try {
-            watcher?.close();
-        }
-        catch { /* ignore */ } clearInterval(timer); },
-    };
-}
-/**
- * Rollout-aware pod provider: each service is a set of VERSION COHORTS, and
- * `pick` splits traffic across them by weight (smooth weighted round-robin —
- * a 90/10 canary interleaves, never bursts) and round-robins endpoints WITHIN
- * the chosen cohort. `pick(svc, {version})` pins a cohort (sticky canary /
- * debugging). `update` swaps weights/cohorts live — a rollout ramps
- * (10→25→50→100) or rolls back without redeploying the gateway. The returned
- * Upstream carries `version` so the gateway can surface which cohort served.
- */
-function rolloutPodProvider(table) {
-    const svc = new Map();
-    const build = (spec) => ({
-        cohorts: spec.cohorts.map((c) => ({ ...c, urls: c.urls.slice() })),
-        select: (0, manifest_1.smoothWeightedSelector)(spec.cohorts.map((c) => c.weight)),
-        rr: spec.cohorts.map(() => -1),
-        rules: spec.rules ?? [],
-    });
-    const load = (t) => {
-        for (const [s, v] of Object.entries(t))
-            svc.set(s, build(toSpec(v)));
-        for (const s of [...svc.keys()])
-            if (!t[s])
-                svc.delete(s);
-    };
-    load(table);
-    const firstNonEmpty = (st) => st.cohorts.findIndex((c) => c.urls.length > 0);
-    return {
-        pick(service, opts) {
-            const st = svc.get(service);
-            if (!st || st.cohorts.length === 0)
-                return undefined;
-            const isHealthy = opts?.isHealthy;
-            // round-robin the chosen cohort, preferring healthy endpoints; undefined if none pass.
-            const pickUrl = (ci, gate) => {
-                const cohort = st.cohorts[ci];
-                if (!cohort || cohort.urls.length === 0)
-                    return undefined;
-                const n = cohort.urls.length;
-                for (let i = 0; i < n; i++) {
-                    st.rr[ci] = (st.rr[ci] + 1) % n;
-                    const u = cohort.urls[st.rr[ci]];
-                    if (!gate || gate(u))
-                        return u;
-                }
-                return undefined;
-            };
-            const pinnedCi = opts?.version ? st.cohorts.findIndex((c) => c.version === opts.version && c.urls.length > 0) : -1;
-            if (pinnedCi >= 0) {
-                const url = pickUrl(pinnedCi, isHealthy) ?? pickUrl(pinnedCi); // fail-open WITHIN the pinned cohort
-                return url !== undefined ? { url, version: st.cohorts[pinnedCi].version } : undefined;
-            }
-            // not pinned (or unknown version) → weighted selection (unchanged contract)
-            let ci = st.select();
-            if (!st.cohorts[ci] || st.cohorts[ci].urls.length === 0)
-                ci = firstNonEmpty(st);
-            let url = pickUrl(ci, isHealthy);
-            // chosen cohort has no healthy endpoint → try any cohort that does
-            if (url === undefined && isHealthy) {
-                for (let i = 0; i < st.cohorts.length; i++) {
-                    const u = pickUrl(i, isHealthy);
-                    if (u !== undefined) {
-                        ci = i;
-                        url = u;
-                        break;
-                    }
-                }
-            }
-            if (url === undefined)
-                url = pickUrl(ci); // fail-open: everything looks down → still route
-            return url !== undefined ? { url, version: st.cohorts[ci].version } : undefined;
-        },
-        endpoints() {
-            const urls = new Set();
-            for (const st of svc.values())
-                for (const c of st.cohorts)
-                    for (const u of c.urls)
-                        urls.add(u);
-            return [...urls];
-        },
-        // first targeting rule that matches the request's attributes (sticky-by-attribute)
-        resolveVersion(service, attrs) {
-            const st = svc.get(service);
-            return st && st.rules.length ? (0, manifest_1.pickTargetedVersion)(st.rules, attrs) : undefined;
-        },
-        // consistent-hash a stable key to a cohort version (sticky weighted split)
-        bucket(service, key) {
-            const st = svc.get(service);
-            if (!st || st.cohorts.length === 0)
-                return undefined;
-            const cohort = st.cohorts[(0, manifest_1.bucketByWeight)(`${key}:${service}`, st.cohorts.map((c) => c.weight))];
-            return cohort ? { version: cohort.version } : undefined;
-        },
-        ensureUp: async () => true, // prod services are always-on (k8s keeps them up)
-        drop(service, upstream) {
-            const st = svc.get(service);
-            if (st && 'url' in upstream)
-                for (const c of st.cohorts)
-                    c.urls = c.urls.filter((u) => u !== upstream.url);
-        },
-        update: load,
-    };
-}
-/**
- * Flat single-version load balancing — the common case (no rollout in
- * progress). A thin wrapper over `rolloutPodProvider` with one synthetic
- * cohort per service, so the rollout path is the only code path. The synthetic
- * version is STRIPPED from the result: flat LB carries no `version`, so a
- * response only gets `x-lensmcp-version` (and a `rollout` trace step) when a
- * genuine multi-cohort rollout served it.
- */
-function endpointsPodProvider(endpoints) {
-    const toCohorts = (eps) => Object.fromEntries(Object.entries(eps).map(([s, urls]) => [s, [{ version: '_flat', weight: 1, urls }]]));
-    const inner = rolloutPodProvider(toCohorts(endpoints));
-    const unversion = (u) => u && 'url' in u ? { url: u.url } : u;
-    return {
-        ...inner,
-        pick: (service, opts) => unversion(inner.pick(service, opts)),
-        resolveVersion: () => undefined, // flat LB: no targeting rules
-        bucket: () => undefined, // flat LB: single version, nothing to stick to
-        update: (next) => inner.update(toCohorts(next)),
-    };
-}
+"use strict";var b=Object.defineProperty;var p=(s,o)=>b(s,"name",{value:o,configurable:!0});var w=Object.defineProperty,n=p((s,o)=>w(s,"name",{value:o,configurable:!0}),"n");Object.defineProperty(exports,"__esModule",{value:!0}),exports.staticManifestProvider=staticManifestProvider,exports.fileManifestProvider=fileManifestProvider,exports.rolloutPodProvider=rolloutPodProvider,exports.endpointsPodProvider=endpointsPodProvider;const node_fs_1=require("node:fs"),manifest_1=require("./manifest"),toSpec=n(s=>Array.isArray(s)?{rules:[],cohorts:s}:{rules:s.rules??[],cohorts:s.cohorts??[]},"toSpec");function staticManifestProvider(s){return{list:n(()=>s,"list")}}p(staticManifestProvider,"staticManifestProvider"),n(staticManifestProvider,"staticManifestProvider");function parseManifests(s){let o;try{o=JSON.parse(s)}catch{return}const a=Array.isArray(o)?o:o?.manifests;if(!Array.isArray(a))return;const f=a.filter(i=>!!i&&typeof i=="object"&&typeof i.service=="string"&&Array.isArray(i.mounts));return f.length>0?f:void 0}p(parseManifests,"parseManifests"),n(parseManifests,"parseManifests");function fileManifestProvider(s,o={}){const a=o.onError??(()=>{});let f=[],i=-1;const t=new Set,e=n(()=>{if(!(0,node_fs_1.existsSync)(s))return;let l;try{l=(0,node_fs_1.statSync)(s).mtimeMs}catch{return}if(l===i)return;let v;try{v=(0,node_fs_1.readFileSync)(s,"utf8")}catch(h){a(h);return}const d=parseManifests(v);if(!d){a(new Error(`[gateway] rejecting invalid manifest file ${s} \u2014 keeping last-good`));return}i=l,f=d;for(const h of t)try{h(f)}catch(c){a(c)}},"reload");e();let r;try{r=(0,node_fs_1.watch)(s,{persistent:!1},()=>e())}catch{}const u=setInterval(e,o.pollMs??1e3);return u.unref?.(),{list:n(()=>f,"list"),watch:n(l=>(t.add(l),()=>t.delete(l)),"watch"),stop:n(()=>{try{r?.close()}catch{}clearInterval(u)},"stop")}}p(fileManifestProvider,"fileManifestProvider"),n(fileManifestProvider,"fileManifestProvider");function rolloutPodProvider(s){const o=new Map,a=n(t=>({cohorts:t.cohorts.map(e=>({...e,urls:e.urls.slice()})),select:(0,manifest_1.smoothWeightedSelector)(t.cohorts.map(e=>e.weight)),rr:t.cohorts.map(()=>-1),rules:t.rules??[]}),"build"),f=n(t=>{for(const[e,r]of Object.entries(t))o.set(e,a(toSpec(r)));for(const e of[...o.keys()])t[e]||o.delete(e)},"load");f(s);const i=n(t=>t.cohorts.findIndex(e=>e.urls.length>0),"firstNonEmpty");return{pick(t,e){const r=o.get(t);if(!r||r.cohorts.length===0)return;const u=e?.isHealthy,l=n((c,g)=>{const y=r.cohorts[c];if(!y||y.urls.length===0)return;const P=y.urls.length;for(let m=0;m<P;m++){r.rr[c]=(r.rr[c]+1)%P;const k=y.urls[r.rr[c]];if(!g||g(k))return k}},"pickUrl"),v=e?.version?r.cohorts.findIndex(c=>c.version===e.version&&c.urls.length>0):-1;if(v>=0){const c=l(v,u)??l(v);return c!==void 0?{url:c,version:r.cohorts[v].version}:void 0}let d=r.select();(!r.cohorts[d]||r.cohorts[d].urls.length===0)&&(d=i(r));let h=l(d,u);if(h===void 0&&u)for(let c=0;c<r.cohorts.length;c++){const g=l(c,u);if(g!==void 0){d=c,h=g;break}}return h===void 0&&(h=l(d)),h!==void 0?{url:h,version:r.cohorts[d].version}:void 0},endpoints(){const t=new Set;for(const e of o.values())for(const r of e.cohorts)for(const u of r.urls)t.add(u);return[...t]},resolveVersion(t,e){const r=o.get(t);return r&&r.rules.length?(0,manifest_1.pickTargetedVersion)(r.rules,e):void 0},bucket(t,e){const r=o.get(t);if(!r||r.cohorts.length===0)return;const u=r.cohorts[(0,manifest_1.bucketByWeight)(`${e}:${t}`,r.cohorts.map(l=>l.weight))];return u?{version:u.version}:void 0},ensureUp:n(async()=>!0,"ensureUp"),drop(t,e){const r=o.get(t);if(r&&"url"in e)for(const u of r.cohorts)u.urls=u.urls.filter(l=>l!==e.url)},update:f}}p(rolloutPodProvider,"rolloutPodProvider"),n(rolloutPodProvider,"rolloutPodProvider");function endpointsPodProvider(s){const o=n(i=>Object.fromEntries(Object.entries(i).map(([t,e])=>[t,[{version:"_flat",weight:1,urls:e}]])),"toCohorts"),a=rolloutPodProvider(o(s)),f=n(i=>i&&"url"in i?{url:i.url}:i,"unversion");return{...a,pick:n((i,t)=>f(a.pick(i,t)),"pick"),resolveVersion:n(()=>{},"resolveVersion"),bucket:n(()=>{},"bucket"),update:n(i=>a.update(o(i)),"update")}}p(endpointsPodProvider,"endpointsPodProvider"),n(endpointsPodProvider,"endpointsPodProvider");

package/executors/gateway/rate-limit.js

@@ -1,45 +1,4 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.createRateLimiter = createRateLimiter;
-exports.createRedisRateLimiter = createRedisRateLimiter;
-function createRateLimiter(opts) {
-    const limit = Math.max(1, opts.limit);
-    const windowMs = Math.max(1, opts.windowMs);
-    const now = opts.now ?? Date.now;
-    const refillPerMs = limit / windowMs;
-    const buckets = new Map();
-    const refilled = (b, t) => Math.min(limit, b.tokens + (t - b.last) * refillPerMs);
-    // Evict buckets that have refilled to full (idle) so the map stays bounded.
-    const sweep = setInterval(() => {
-        const t = now();
-        for (const [k, b] of buckets)
-            if (refilled(b, t) >= limit)
-                buckets.delete(k);
-    }, windowMs);
-    sweep.unref?.();
-    return {
-        check(key) {
-            const t = now();
-            let b = buckets.get(key);
-            if (!b) {
-                b = { tokens: limit, last: t };
-                buckets.set(key, b);
-            }
-            b.tokens = refilled(b, t);
-            b.last = t;
-            if (b.tokens >= 1) {
-                b.tokens -= 1;
-                return { allowed: true, remaining: Math.floor(b.tokens), retryAfterMs: 0 };
-            }
-            return { allowed: false, remaining: 0, retryAfterMs: Math.ceil((1 - b.tokens) / refillPerMs) };
-        },
-        stop() { clearInterval(sweep); },
-    };
-}
-// Atomic token bucket in one round-trip. Stores fractional tokens (Redis keeps the
-// string form) so refill is exact across calls; only the returned remaining/retry
-// are integer-coerced by the Lua→RESP boundary, which is fine.
-const BUCKET_LUA = `
+"use strict";var A=Object.defineProperty;var u=(r,e)=>A(r,"name",{value:e,configurable:!0});var R=Object.defineProperty,a=u((r,e)=>R(r,"name",{value:e,configurable:!0}),"a");Object.defineProperty(exports,"__esModule",{value:!0}),exports.createRateLimiter=createRateLimiter,exports.createRedisRateLimiter=createRedisRateLimiter;function createRateLimiter(r){const e=Math.max(1,r.limit),i=Math.max(1,r.windowMs),n=r.now??Date.now,c=e/i,s=new Map,m=a((l,o)=>Math.min(e,l.tokens+(o-l.last)*c),"refilled"),f=setInterval(()=>{const l=n();for(const[o,t]of s)m(t,l)>=e&&s.delete(o)},i);return f.unref?.(),{check(l){const o=n();let t=s.get(l);return t||(t={tokens:e,last:o},s.set(l,t)),t.tokens=m(t,o),t.last=o,t.tokens>=1?(t.tokens-=1,{allowed:!0,remaining:Math.floor(t.tokens),retryAfterMs:0}):{allowed:!1,remaining:0,retryAfterMs:Math.ceil((1-t.tokens)/c)}},stop(){clearInterval(f)}}}u(createRateLimiter,"createRateLimiter"),a(createRateLimiter,"createRateLimiter");const BUCKET_LUA=`
 local b = redis.call('HMGET', KEYS[1], 't', 's')
 local cap = tonumber(ARGV[1])
 local refill = tonumber(ARGV[2])
@@ -56,36 +15,4 @@ redis.call('HSET', KEYS[1], 't', tokens, 's', now)
 redis.call('PEXPIRE', KEYS[1], ttl)
 local retry = 0
 if ok == 0 then retry = math.ceil((1 - tokens) / refill) end
-return {ok, math.floor(tokens), retry}`;
-const RL_TIMEOUT = Symbol('rl-timeout');
-const RL_FAIL = Symbol('rl-fail');
-function createRedisRateLimiter(client, opts) {
-    const limit = Math.max(1, opts.limit);
-    const windowMs = Math.max(1, opts.windowMs);
-    const prefix = opts.prefix ?? 'lensmcp:gw:rl:';
-    const timeoutMs = Math.max(1, opts.timeoutMs ?? 100);
-    const failOpen = opts.failOpen !== false;
-    const refillPerMs = limit / windowMs;
-    const ttlMs = Math.ceil(windowMs) + 1000; // evict idle buckets shortly after a full refill
-    const onFail = () => failOpen
-        ? { allowed: true, remaining: limit, retryAfterMs: 0 }
-        : { allowed: false, remaining: 0, retryAfterMs: windowMs };
-    return {
-        async check(key) {
-            let timer;
-            // The eval branch is mapped so it can never reject (→ RL_FAIL) — that keeps a
-            // late rejection (after a timeout already won the race) from going unhandled.
-            const evalP = Promise.resolve(client.eval(BUCKET_LUA, 1, `${prefix}${key}`, limit, refillPerMs, ttlMs)).then((v) => v, () => RL_FAIL);
-            const timeoutP = new Promise((res) => { timer = setTimeout(() => res(RL_TIMEOUT), timeoutMs); });
-            const res = await Promise.race([evalP, timeoutP]);
-            clearTimeout(timer);
-            if (res === RL_TIMEOUT || res === RL_FAIL)
-                return onFail();
-            const [ok, remaining, retry] = res;
-            return ok === 1
-                ? { allowed: true, remaining: Number(remaining) || 0, retryAfterMs: 0 }
-                : { allowed: false, remaining: 0, retryAfterMs: Number(retry) || windowMs };
-        },
-        stop() { },
-    };
-}
+return {ok, math.floor(tokens), retry}`,RL_TIMEOUT=Symbol("rl-timeout"),RL_FAIL=Symbol("rl-fail");function createRedisRateLimiter(r,e){const i=Math.max(1,e.limit),n=Math.max(1,e.windowMs),c=e.prefix??"lensmcp:gw:rl:",s=Math.max(1,e.timeoutMs??100),m=e.failOpen!==!1,f=i/n,l=Math.ceil(n)+1e3,o=a(()=>m?{allowed:!0,remaining:i,retryAfterMs:0}:{allowed:!1,remaining:0,retryAfterMs:n},"onFail");return{async check(t){let M;const w=Promise.resolve(r.eval(BUCKET_LUA,1,`${c}${t}`,i,f,l)).then(d=>d,()=>RL_FAIL),h=new Promise(d=>{M=setTimeout(()=>d(RL_TIMEOUT),s)}),k=await Promise.race([w,h]);if(clearTimeout(M),k===RL_TIMEOUT||k===RL_FAIL)return o();const[b,y,p]=k;return b===1?{allowed:!0,remaining:Number(y)||0,retryAfterMs:0}:{allowed:!1,remaining:0,retryAfterMs:Number(p)||n}},stop(){}}}u(createRedisRateLimiter,"createRedisRateLimiter"),a(createRedisRateLimiter,"createRedisRateLimiter");

package/executors/gateway/registry-source.js

@@ -1,131 +1 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.changeChannel = exports.rolloutKey = exports.manifestKey = exports.DEFAULT_REGISTRY_PREFIX = void 0;
-exports.redisRegistrySource = redisRegistrySource;
-exports.createRegistryProviders = createRegistryProviders;
-/**
- * Registry-backed gateway config — true zero-touch discovery. Instead of a
- * mounted file, the manifests + rollout cohorts live in a shared registry
- * (Redis here; k8s ConfigMap/Endpoints can drop in behind `RegistrySource`).
- * A service deploy / the `lensmcp rollout --redis` CD helper writes its keys and
- * publishes a change; the gateway re-reads and live-swaps its route table +
- * cohorts in ~instant — no gateway redeploy, no file mounts.
- *
- * The cluster lib stays dependency-light: `redisRegistrySource` works against a
- * minimal injected `RedisLike` (ioredis satisfies it; the prod entry wires the
- * real client, tests pass a fake). See docs/design/targeted-rollout.md and
- * docs/design/prod-gateway.md (§Distribution).
- */
-const providers_prod_1 = require("./providers-prod");
-exports.DEFAULT_REGISTRY_PREFIX = 'lensmcp:gw';
-const manifestKey = (prefix, service) => `${prefix}:manifest:${service}`;
-exports.manifestKey = manifestKey;
-const rolloutKey = (prefix, service) => `${prefix}:rollout:${service}`;
-exports.rolloutKey = rolloutKey;
-const changeChannel = (prefix) => `${prefix}:changed`;
-exports.changeChannel = changeChannel;
-function parseManifest(s) {
-    try {
-        const m = JSON.parse(s);
-        return m && typeof m.service === 'string' && Array.isArray(m.mounts) ? m : undefined;
-    }
-    catch {
-        return undefined;
-    }
-}
-/**
- * Redis-backed source. Per-service keys (so a deploy touches only its own key,
- * no read-modify-write races): `<prefix>:manifest:<svc>` (a RouteManifest) and
- * `<prefix>:rollout:<svc>` (a VersionCohort[] | RolloutSpec). Writers publish
- * `<prefix>:changed` after a SET; the gateway re-reads on the message.
- */
-function redisRegistrySource(client, opts = {}) {
-    const prefix = opts.prefix ?? exports.DEFAULT_REGISTRY_PREFIX;
-    let sub;
-    const rolloutPrefix = `${prefix}:rollout:`;
-    return {
-        async read() {
-            const mKeys = await client.keys(`${prefix}:manifest:*`);
-            const manifests = mKeys.length
-                ? (await client.mget(...mKeys)).filter((v) => !!v).map(parseManifest).filter((m) => !!m)
-                : [];
-            const rKeys = await client.keys(`${rolloutPrefix}*`);
-            const endpoints = {};
-            if (rKeys.length) {
-                const vals = await client.mget(...rKeys);
-                rKeys.forEach((k, i) => {
-                    const v = vals[i];
-                    if (v)
-                        try {
-                            endpoints[k.slice(rolloutPrefix.length)] = JSON.parse(v);
-                        }
-                        catch { /* skip a bad entry, keep the rest */ }
-                });
-            }
-            return { manifests, endpoints };
-        },
-        async watch(onChange) {
-            sub = client.duplicate();
-            await sub.subscribe((0, exports.changeChannel)(prefix));
-            sub.on('message', () => onChange());
-            return async () => { try {
-                await sub?.quit();
-            }
-            catch { /* ignore */ } };
-        },
-        stop() { void sub?.quit().catch(() => undefined); },
-    };
-}
-/**
- * Compose a ManifestProvider + PodProvider over a RegistrySource. Both refresh
- * together on every change (source.watch) and on a poll fallback. Call
- * `start()` (awaits the first read so the route table is warm) before handing
- * the providers to `startProdGateway`.
- */
-function createRegistryProviders(source, opts = {}) {
-    const onError = opts.onError ?? (() => undefined);
-    let current = [];
-    const subs = new Set();
-    const inner = (0, providers_prod_1.rolloutPodProvider)({});
-    let unwatch;
-    let timer;
-    const refresh = async () => {
-        let snap;
-        try {
-            snap = await source.read();
-        }
-        catch (e) {
-            onError(e);
-            return;
-        } // keep last-good on a transient error
-        current = snap.manifests;
-        inner.update(snap.endpoints);
-        for (const cb of subs) {
-            try {
-                cb(current);
-            }
-            catch (e) {
-                onError(e);
-            }
-        }
-    };
-    return {
-        manifests: { list: () => current, watch: (cb) => { subs.add(cb); return () => subs.delete(cb); } },
-        pods: inner,
-        async start() {
-            await refresh();
-            if (source.watch) {
-                try {
-                    unwatch = await source.watch(() => void refresh());
-                }
-                catch (e) {
-                    onError(e);
-                }
-            }
-            timer = setInterval(() => void refresh(), opts.pollMs ?? 5000);
-            timer.unref?.();
-        },
-        stop() { unwatch?.(); if (timer)
-            clearInterval(timer); source.stop?.(); },
-    };
-}
+"use strict";var g=Object.defineProperty;var u=(e,t)=>g(e,"name",{value:t,configurable:!0});var y=Object.defineProperty,s=u((e,t)=>y(e,"name",{value:t,configurable:!0}),"s");Object.defineProperty(exports,"__esModule",{value:!0}),exports.changeChannel=exports.rolloutKey=exports.manifestKey=exports.DEFAULT_REGISTRY_PREFIX=void 0,exports.redisRegistrySource=redisRegistrySource,exports.createRegistryProviders=createRegistryProviders;const providers_prod_1=require("./providers-prod");exports.DEFAULT_REGISTRY_PREFIX="lensmcp:gw";const manifestKey=s((e,t)=>`${e}:manifest:${t}`,"manifestKey");exports.manifestKey=manifestKey;const rolloutKey=s((e,t)=>`${e}:rollout:${t}`,"rolloutKey");exports.rolloutKey=rolloutKey;const changeChannel=s(e=>`${e}:changed`,"changeChannel");exports.changeChannel=changeChannel;function parseManifest(e){try{const t=JSON.parse(e);return t&&typeof t.service=="string"&&Array.isArray(t.mounts)?t:void 0}catch{return}}u(parseManifest,"parseManifest"),s(parseManifest,"parseManifest");function redisRegistrySource(e,t={}){const o=t.prefix??exports.DEFAULT_REGISTRY_PREFIX;let a;const i=`${o}:rollout:`;return{async read(){const c=await e.keys(`${o}:manifest:*`),d=c.length?(await e.mget(...c)).filter(r=>!!r).map(parseManifest).filter(r=>!!r):[],n=await e.keys(`${i}*`),l={};if(n.length){const r=await e.mget(...n);n.forEach((p,f)=>{const h=r[f];if(h)try{l[p.slice(i.length)]=JSON.parse(h)}catch{}})}return{manifests:d,endpoints:l}},async watch(c){return a=e.duplicate(),await a.subscribe((0,exports.changeChannel)(o)),a.on("message",()=>c()),async()=>{try{await a?.quit()}catch{}}},stop(){a?.quit().catch(()=>{})}}}u(redisRegistrySource,"redisRegistrySource"),s(redisRegistrySource,"redisRegistrySource");function createRegistryProviders(e,t={}){const o=t.onError??(()=>{});let a=[];const i=new Set,c=(0,providers_prod_1.rolloutPodProvider)({});let d,n;const l=s(async()=>{let r;try{r=await e.read()}catch(p){o(p);return}a=r.manifests,c.update(r.endpoints);for(const p of i)try{p(a)}catch(f){o(f)}},"refresh");return{manifests:{list:s(()=>a,"list"),watch:s(r=>(i.add(r),()=>i.delete(r)),"watch")},pods:c,async start(){if(await l(),e.watch)try{d=await e.watch(()=>{l()})}catch(r){o(r)}n=setInterval(()=>{l()},t.pollMs??5e3),n.unref?.()},stop(){d?.(),n&&clearInterval(n),e.stop?.()}}}u(createRegistryProviders,"createRegistryProviders"),s(createRegistryProviders,"createRegistryProviders");

package/executors/gateway/rollout-ops.js

@@ -1,167 +1,2 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.applyRolloutOp = applyRolloutOp;
-exports.summarizeRollout = summarizeRollout;
-exports.parseRolloutCommand = parseRolloutCommand;
-const RULE_OPS = new Set(['eq', 'ne', 'in', 'nin', 'prefix', 'suffix', 'contains', 'regex', 'exists', 'gt', 'lt', 'cidr']);
-const clone = (v) => JSON.parse(JSON.stringify(v));
-/** Normalize a service entry to a `{rules,cohorts}` spec; reject a flat url list. */
-function asSpec(service, v) {
-    if (v === undefined)
-        return { rules: [], cohorts: [] };
-    if (Array.isArray(v)) {
-        if (v.length && typeof v[0] === 'string')
-            throw new Error(`service "${service}" is a flat endpoint list; convert it to cohorts first (e.g. add-cohort)`);
-        return { rules: [], cohorts: v };
-    }
-    return { rules: v.rules ?? [], cohorts: v.cohorts ?? [] };
-}
-const findCohort = (spec, version) => spec.cohorts.find((c) => c.version === version);
-function reqWeight(w) {
-    if (!Number.isFinite(w) || w < 0)
-        throw new Error(`weight must be a number ≥ 0 (got ${w})`);
-    return w;
-}
-/** Apply one operation to the rollout table; returns a NEW table. Throws on invalid input. */
-function applyRolloutOp(config, op) {
-    const next = clone(config);
-    const spec = asSpec(op.service, next[op.service]);
-    switch (op.kind) {
-        case 'add-cohort': {
-            if (findCohort(spec, op.version))
-                throw new Error(`cohort "${op.version}" already exists on "${op.service}" — use set-weight`);
-            if (!op.urls.length)
-                throw new Error('add-cohort needs at least one upstream url');
-            spec.cohorts.push({ version: op.version, weight: reqWeight(op.weight), urls: op.urls.slice() });
-            break;
-        }
-        case 'set-weight': {
-            const c = findCohort(spec, op.version);
-            if (!c)
-                throw new Error(`no cohort "${op.version}" on "${op.service}"`);
-            c.weight = reqWeight(op.weight);
-            break;
-        }
-        case 'remove-cohort': {
-            if (!findCohort(spec, op.version))
-                throw new Error(`no cohort "${op.version}" on "${op.service}"`);
-            spec.cohorts = spec.cohorts.filter((c) => c.version !== op.version);
-            break;
-        }
-        case 'promote': {
-            if (!findCohort(spec, op.version))
-                throw new Error(`no cohort "${op.version}" on "${op.service}"`);
-            for (const c of spec.cohorts)
-                c.weight = c.version === op.version ? 100 : 0;
-            break;
-        }
-        case 'abort': {
-            const c = findCohort(spec, op.version);
-            if (!c)
-                throw new Error(`no cohort "${op.version}" on "${op.service}"`);
-            c.weight = 0;
-            break;
-        }
-        case 'add-rule': {
-            validateRule(op.rule);
-            spec.rules = [...(spec.rules ?? []).filter((r) => !op.rule.name || r.name !== op.rule.name), op.rule]; // replace-by-name (idempotent)
-            break;
-        }
-        case 'remove-rule': {
-            const before = (spec.rules ?? []).length;
-            spec.rules = (spec.rules ?? []).filter((r) => r.name !== op.name);
-            if (spec.rules.length === before)
-                throw new Error(`no rule named "${op.name}" on "${op.service}"`);
-            break;
-        }
-    }
-    next[op.service] = spec.rules && spec.rules.length ? { rules: spec.rules, cohorts: spec.cohorts } : spec.cohorts;
-    return next;
-}
-function validateRule(rule) {
-    if (!rule || typeof rule.version !== 'string' || !rule.version)
-        throw new Error('rule needs a non-empty version');
-    if (!rule.when || typeof rule.when !== 'object')
-        throw new Error('rule needs a `when` condition');
-    const walk = (n) => {
-        const node = n;
-        if ('all' in node || 'any' in node || 'not' in node) {
-            for (const k of ['all', 'any'])
-                if (Array.isArray(node[k]))
-                    node[k].forEach(walk);
-            if (node.not)
-                walk(node.not);
-            return;
-        }
-        if (typeof node.attr !== 'string' || !RULE_OPS.has(node.op))
-            throw new Error(`invalid rule condition (attr/op): ${JSON.stringify(node)}`);
-    };
-    walk(rule.when);
-}
-/** Human-readable status for one service (or all). Read-only. */
-function summarizeRollout(config, service) {
-    const names = service ? [service] : Object.keys(config);
-    if (!names.length)
-        return '(no services in rollout config)';
-    const lines = [];
-    for (const s of names) {
-        const entry = config[s];
-        if (entry === undefined) {
-            lines.push(`${s}: (not present)`);
-            continue;
-        }
-        if (Array.isArray(entry) && entry.length && typeof entry[0] === 'string') {
-            lines.push(`${s}: flat LB → ${entry.join(', ')}`);
-            continue;
-        }
-        const spec = asSpec(s, entry);
-        const total = spec.cohorts.reduce((a, c) => a + Math.max(0, c.weight), 0) || 1;
-        lines.push(`${s}:`);
-        for (const c of spec.cohorts)
-            lines.push(`  • ${c.version.padEnd(16)} weight ${String(c.weight).padStart(3)} (${(Math.max(0, c.weight) / total * 100).toFixed(0)}%)  ${c.urls.length} url(s)`);
-        for (const r of spec.rules ?? [])
-            lines.push(`  ▸ rule ${(r.name ?? '(unnamed)').padEnd(16)} → ${r.version}   ${ruleSummary(r.when)}`);
-    }
-    return lines.join('\n');
-}
-function ruleSummary(n) {
-    const node = n;
-    if ('all' in node)
-        return '(' + node.all.map(ruleSummary).join(' AND ') + ')';
-    if ('any' in node)
-        return '(' + node.any.map(ruleSummary).join(' OR ') + ')';
-    if ('not' in node)
-        return 'NOT ' + ruleSummary(node.not);
-    return `${node.attr} ${node.op}${node.value !== undefined ? ' ' + JSON.stringify(node.value) : ''}`;
-}
-/** Parse CLI argv (after the config-file path) into an op, a status request, or throw a usage error. */
-function parseRolloutCommand(argv) {
-    const [cmd, ...a] = argv;
-    const need = (n, usage) => { if (a.length < n)
-        throw new Error(`usage: ${cmd} ${usage}`); };
-    switch (cmd) {
-        case 'status': return { status: a[0] };
-        case 'add-cohort':
-            need(4, '<service> <version> <weight> <url> [url...]');
-            return { op: { kind: 'add-cohort', service: a[0], version: a[1], weight: Number(a[2]), urls: a.slice(3) } };
-        case 'set-weight':
-            need(3, '<service> <version> <weight>');
-            return { op: { kind: 'set-weight', service: a[0], version: a[1], weight: Number(a[2]) } };
-        case 'remove-cohort':
-            need(2, '<service> <version>');
-            return { op: { kind: 'remove-cohort', service: a[0], version: a[1] } };
-        case 'promote':
-            need(2, '<service> <version>');
-            return { op: { kind: 'promote', service: a[0], version: a[1] } };
-        case 'abort':
-            need(2, '<service> <version>');
-            return { op: { kind: 'abort', service: a[0], version: a[1] } };
-        case 'add-rule':
-            need(6, '<service> <name> <attr> <op> <value> <version>');
-            return { op: { kind: 'add-rule', service: a[0], rule: { name: a[1], when: { attr: a[2], op: a[3], value: a[4] }, version: a[5] } } };
-        case 'remove-rule':
-            need(2, '<service> <name>');
-            return { op: { kind: 'remove-rule', service: a[0], name: a[1] } };
-        default: throw new Error(`unknown command "${cmd ?? ''}". commands: status, add-cohort, set-weight, remove-cohort, promote, abort, add-rule, remove-rule`);
-    }
-}
+"use strict";var d=Object.defineProperty;var u=(t,r)=>d(t,"name",{value:r,configurable:!0});var h=Object.defineProperty,s=u((t,r)=>h(t,"name",{value:r,configurable:!0}),"s");Object.defineProperty(exports,"__esModule",{value:!0}),exports.applyRolloutOp=applyRolloutOp,exports.summarizeRollout=summarizeRollout,exports.parseRolloutCommand=parseRolloutCommand;const RULE_OPS=new Set(["eq","ne","in","nin","prefix","suffix","contains","regex","exists","gt","lt","cidr"]),clone=s(t=>JSON.parse(JSON.stringify(t)),"clone");function asSpec(t,r){if(r===void 0)return{rules:[],cohorts:[]};if(Array.isArray(r)){if(r.length&&typeof r[0]=="string")throw new Error(`service "${t}" is a flat endpoint list; convert it to cohorts first (e.g. add-cohort)`);return{rules:[],cohorts:r}}return{rules:r.rules??[],cohorts:r.cohorts??[]}}u(asSpec,"asSpec"),s(asSpec,"asSpec");const findCohort=s((t,r)=>t.cohorts.find(o=>o.version===r),"findCohort");function reqWeight(t){if(!Number.isFinite(t)||t<0)throw new Error(`weight must be a number \u2265 0 (got ${t})`);return t}u(reqWeight,"reqWeight"),s(reqWeight,"reqWeight");function applyRolloutOp(t,r){const o=clone(t),e=asSpec(r.service,o[r.service]);switch(r.kind){case"add-cohort":{if(findCohort(e,r.version))throw new Error(`cohort "${r.version}" already exists on "${r.service}" \u2014 use set-weight`);if(!r.urls.length)throw new Error("add-cohort needs at least one upstream url");e.cohorts.push({version:r.version,weight:reqWeight(r.weight),urls:r.urls.slice()});break}case"set-weight":{const n=findCohort(e,r.version);if(!n)throw new Error(`no cohort "${r.version}" on "${r.service}"`);n.weight=reqWeight(r.weight);break}case"remove-cohort":{if(!findCohort(e,r.version))throw new Error(`no cohort "${r.version}" on "${r.service}"`);e.cohorts=e.cohorts.filter(n=>n.version!==r.version);break}case"promote":{if(!findCohort(e,r.version))throw new Error(`no cohort "${r.version}" on "${r.service}"`);for(const n of e.cohorts)n.weight=n.version===r.version?100:0;break}case"abort":{const n=findCohort(e,r.version);if(!n)throw new Error(`no cohort "${r.version}" on "${r.service}"`);n.weight=0;break}case"add-rule":{validateRule(r.rule),e.rules=[...(e.rules??[]).filter(n=>!r.rule.name||n.name!==r.rule.name),r.rule];break}case"remove-rule":{const n=(e.rules??[]).length;if(e.rules=(e.rules??[]).filter(i=>i.name!==r.name),e.rules.length===n)throw new Error(`no rule named "${r.name}" on "${r.service}"`);break}}return o[r.service]=e.rules&&e.rules.length?{rules:e.rules,cohorts:e.cohorts}:e.cohorts,o}u(applyRolloutOp,"applyRolloutOp"),s(applyRolloutOp,"applyRolloutOp");function validateRule(t){if(!t||typeof t.version!="string"||!t.version)throw new Error("rule needs a non-empty version");if(!t.when||typeof t.when!="object")throw new Error("rule needs a `when` condition");const r=s(o=>{const e=o;if("all"in e||"any"in e||"not"in e){for(const n of["all","any"])Array.isArray(e[n])&&e[n].forEach(r);e.not&&r(e.not);return}if(typeof e.attr!="string"||!RULE_OPS.has(e.op))throw new Error(`invalid rule condition (attr/op): ${JSON.stringify(e)}`)},"walk");r(t.when)}u(validateRule,"validateRule"),s(validateRule,"validateRule");function summarizeRollout(t,r){const o=r?[r]:Object.keys(t);if(!o.length)return"(no services in rollout config)";const e=[];for(const n of o){const i=t[n];if(i===void 0){e.push(`${n}: (not present)`);continue}if(Array.isArray(i)&&i.length&&typeof i[0]=="string"){e.push(`${n}: flat LB \u2192 ${i.join(", ")}`);continue}const c=asSpec(n,i),l=c.cohorts.reduce((a,v)=>a+Math.max(0,v.weight),0)||1;e.push(`${n}:`);for(const a of c.cohorts)e.push(`  \u2022 ${a.version.padEnd(16)} weight ${String(a.weight).padStart(3)} (${(Math.max(0,a.weight)/l*100).toFixed(0)}%)  ${a.urls.length} url(s)`);for(const a of c.rules??[])e.push(`  \u25B8 rule ${(a.name??"(unnamed)").padEnd(16)} \u2192 ${a.version}   ${ruleSummary(a.when)}`)}return e.join(`
+`)}u(summarizeRollout,"summarizeRollout"),s(summarizeRollout,"summarizeRollout");function ruleSummary(t){const r=t;return"all"in r?"("+r.all.map(ruleSummary).join(" AND ")+")":"any"in r?"("+r.any.map(ruleSummary).join(" OR ")+")":"not"in r?"NOT "+ruleSummary(r.not):`${r.attr} ${r.op}${r.value!==void 0?" "+JSON.stringify(r.value):""}`}u(ruleSummary,"ruleSummary"),s(ruleSummary,"ruleSummary");function parseRolloutCommand(t){const[r,...o]=t,e=s((n,i)=>{if(o.length<n)throw new Error(`usage: ${r} ${i}`)},"need");switch(r){case"status":return{status:o[0]};case"add-cohort":return e(4,"<service> <version> <weight> <url> [url...]"),{op:{kind:"add-cohort",service:o[0],version:o[1],weight:Number(o[2]),urls:o.slice(3)}};case"set-weight":return e(3,"<service> <version> <weight>"),{op:{kind:"set-weight",service:o[0],version:o[1],weight:Number(o[2])}};case"remove-cohort":return e(2,"<service> <version>"),{op:{kind:"remove-cohort",service:o[0],version:o[1]}};case"promote":return e(2,"<service> <version>"),{op:{kind:"promote",service:o[0],version:o[1]}};case"abort":return e(2,"<service> <version>"),{op:{kind:"abort",service:o[0],version:o[1]}};case"add-rule":return e(6,"<service> <name> <attr> <op> <value> <version>"),{op:{kind:"add-rule",service:o[0],rule:{name:o[1],when:{attr:o[2],op:o[3],value:o[4]},version:o[5]}}};case"remove-rule":return e(2,"<service> <name>"),{op:{kind:"remove-rule",service:o[0],name:o[1]}};default:throw new Error(`unknown command "${r??""}". commands: status, add-cohort, set-weight, remove-cohort, promote, abort, add-rule, remove-rule`)}}u(parseRolloutCommand,"parseRolloutCommand"),s(parseRolloutCommand,"parseRolloutCommand");