@marinoscar/platform-api 0.0.0-stage → 0.1.0-next.11

package/dist/nodes/handlers/node-fleet-prune.handler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"node-fleet-prune.handler.js","sourceRoot":"","sources":["../../../src/nodes/handlers/node-fleet-prune.handler.ts"],"names":[],"mappings":";AAAA,gFAAgF;AAChF,sFAAsF;AACtF,gFAAgF;AAChF,EAAE;AACF,gFAAgF;AAChF,iFAAiF;AACjF,8EAA8E;AAC9E,8EAA8E;AAC9E,4EAA4E;AAC5E,yCAAyC;AACzC,EAAE;AACF,gFAAgF;AAChF,yDAAyD;AACzD,4EAA4E;AAC5E,8EAA8E;AAC9E,8EAA8E;AAC9E,gFAAgF;AAChF,6EAA6E;AAC7E,QAAQ;AACR,EAAE;AACF,gFAAgF;AAChF,wEAAwE;AACxE,oCAAoC;AACpC,gFAAgF;AAChF,EAAE;AACF,iFAAiF;AACjF,gFAAgF;AAChF,iFAAiF;AACjF,iFAAiF;AACjF,kDAAkD;AAClD,EAAE;AACF,6EAA6E;AAC7E,gFAAgF;AAChF,+EAA+E;AAC/E,6EAA6E;AAC7E,2EAA2E;AAC3E,6EAA6E;AAC7E,WAAW;AACX,EAAE;AACF,iFAAiF;AACjF,+EAA+E;AAC/E,gFAAgF;AAChF,iFAAiF;AACjF,yEAAyE;AACzE,4CAA4C;AAC5C,EAAE;AACF,gFAAgF;AAChF,wDAAwD;AACxD,gFAAgF;AAChF,EAAE;AACF,iFAAiF;AACjF,8EAA8E;AAC9E,8EAA8E;AAC9E,gFAAgF;AAChF,gFAAgF;AAChF,kFAAkF;AAClF,0EAA0E;AAC1E,EAAE;AACF,yEAAyE;AACzE,6EAA6E;AAC7E,6EAA6E;AAC7E,0EAA0E;AAC1E,8EAA8E;AAC9E,sEAAsE;AACtE,EAAE;AACF,iFAAiF;AACjF,8EAA8E;AAC9E,0EAA0E;AAC1E,0EAA0E;AAC1E,2EAA2E;AAC3E,wCAAwC;AACxC,EAAE;AACF,iFAAiF;AACjF,+EAA+E;AAC/E,8EAA8E;AAC9E,QAAQ;AACR,EAAE;AACF,gFAAgF;AAChF,gEAAgE;AAChE,gFAAgF;AAChF,EAAE;AACF,+EAA+E;AAC/E,4EAA4E;AAC5E,4EAA4E;AAC5E,gFAAgF;AAChF,8EAA8E;AAC9E,+EAA+E;AAC/E,6EAA6E;AAC7E,yEAAyE;AACzE,EAAE;AACF,iFAAiF;AACjF,gFAAgF;AAChF,0EAA0E;AAC1E,gFAAgF;;;;;;;;;;;;;;;;AA6ChF,4DAQC;AAnDD,2CAA0E;AAE1E,4CAAmD;AAGnD,4CAAsD;AACtD,sEAAiE;AAEjE;;;;;;GAMG;AACU,QAAA,qBAAqB,GAAG,mBAAmB,CAAC;AAezD;;;;;;;;;;;;GAYG;AACH,SAAgB,wBAAwB,CAAC,MAAY;IACnD,OAAO;QACL,MAAM,EAAE,SAAS;QACjB,EAAE,EAAE;YACF,EAAE,eAAe,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE;YACnC,EAAE,eAAe,EAAE,IAAI,EAAE,YAAY,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE;SACxD;KACF,CAAC;AACJ,CAAC;AAED,iFAAiF;AACjF,SAAS,SAAS,CAAC,KAAoB;IACrC,OAAO,KAAK,KAAK,IAAI,CAAC;AACxB,CAAC;AAED;;;;GAIG;AAEI,IAAM,qBAAqB,6BAA3B,MAAM,qBAAqB;IAQb;IACyB;IACzB;IATF,MAAM,GAAG,IAAI,eAAM,CAAC,uBAAqB,CAAC,IAAI,CAAC,CAAC;IAExD,IAAI,GAAG,6BAAqB,CAAC;IAE7B,KAAK,GAAG,aAAa,CAAC;IAE/B,YACmB,QAA4B,EACH,MAAkB,EAC3C,SAA+B;QAF/B,aAAQ,GAAR,QAAQ,CAAoB;QACH,WAAM,GAAN,MAAM,CAAY;QAC3C,cAAS,GAAT,SAAS,CAAsB;IAC/C,CAAC;IAEJ,2DAA2D;IAC3D,YAAY;QACV,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IAC/B,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,OAAO,CAAC,GAAQ;QACpB,MAAM,EAAE,OAAO,EAAE,WAAW,EAAE,GAAG,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC;QAEpD,IAAI,OAAO,GAAG,CAAC,IAAI,WAAW,GAAG,CAAC,EAAE,CAAC;YACnC,IAAI,CAAC,MAAM,CAAC,GAAG,CACb,eAAe,GAAG,CAAC,EAAE,KAAK,OAAO,qCAAqC;gBACpE,GAAG,WAAW,6CAA6C,CAC9D,CAAC;QACJ,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,eAAe,GAAG,CAAC,EAAE,yCAAyC,CAAC,CAAC;QACpF,CAAC;IACH,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,KAAK;QACT,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE,CAAC;QAEhD,gEAAgE;QAChE,iDAAiD;QACjD,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,eAAe,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;QAC3D,MAAM,KAAK,GAAG,wBAAwB,CAAC,MAAM,CAAC,CAAC;QAE/C,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC;YACvD,KAAK;YACL,mEAAmE;YACnE,qBAAqB;YACrB,MAAM,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE;SACrB,CAAC,CAAC;QAEH,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC5B,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,WAAW,EAAE,CAAC,EAAE,CAAC;QACxC,CAAC;QAED,MAAM,YAAY,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAEvD,sEAAsE;QACtE,2EAA2E;QAC3E,uDAAuD;QACvD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;YAC1C,KAAK,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,eAAe,EAAE,EAAE,EAAE,EAAE,YAAY,EAAE,EAAE;YACnE,MAAM,EAAE,EAAE,eAAe,EAAE,IAAI,EAAE;YACjC,QAAQ,EAAE,CAAC,iBAAiB,CAAC;SAC9B,CAAC,CAAC;QAEH,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC;QAClF,MAAM,SAAS,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;QAEhE,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC3B,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,WAAW,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC;QACnD,CAAC;QAED,uEAAuE;QACvE,2EAA2E;QAC3E,gEAAgE;QAChE,uEAAuE;QACvE,0EAA0E;QAC1E,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,UAAU,CAAC;YACxD,KAAK,EAAE,EAAE,GAAG,KAAK,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE;SAC3C,CAAC,CAAC;QAEH,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC;IACvD,CAAC;CACF,CAAA;AA7FY,sDAAqB;gCAArB,qBAAqB;IADjC,IAAA,mBAAU,GAAE;IAUR,WAAA,IAAA,eAAM,EAAC,uBAAe,CAAC,CAAA;qCADG,0BAAkB,UAEjB,6CAAoB;GAVvC,qBAAqB,CA6FjC"}

package/dist/nodes/handlers/node-fleet-sweep.handler.d.ts

@@ -0,0 +1,79 @@
+import { OnModuleInit } from '@nestjs/common';
+import { EventEmitter2 } from '@nestjs/event-emitter';
+import { type Job, type JobsPrisma } from '../../jobs/index';
+import { JobHandler } from '../../jobs/index';
+import { JobHandlerRegistry } from '../../jobs/index';
+import { NodeLifecycleService } from '../node-lifecycle.service';
+/**
+ * The handler key, and therefore the `Job.type` every fleet-sweep row carries.
+ * PERMANENT — rows outlive handlers. Exported so `NodeStaleOfflineTask` asks
+ * about the same string it queues.
+  *
+  * @stability experimental
+ */
+export declare const NODE_FLEET_SWEEP_TYPE = "nodes.fleet.sweep";
+/**
+ * The `nodes.fleet.sweep` handler: marks silent nodes offline in one statement, then emits `nodes.node.offline` per node. Server-only.
+ *
+ * @stability experimental
+ */
+export declare class NodeFleetSweepHandler implements JobHandler, OnModuleInit {
+    private readonly registry;
+    private readonly prisma;
+    private readonly lifecycle;
+    private readonly events;
+    private readonly logger;
+    readonly type = "nodes.fleet.sweep";
+    readonly label = "Fleet sweep";
+    constructor(registry: JobHandlerRegistry, prisma: JobsPrisma, lifecycle: NodeLifecycleService, events: EventEmitter2);
+    /** Self-registration — the only wiring a handler needs. */
+    onModuleInit(): void;
+    /**
+     * Runs the sweep.
+     *
+     * THROWS TO FAIL — the cron this replaced swallowed its errors because a
+     * throw out of a `@Cron` handler is an unhandled rejection; a handler has a
+     * worker above it whose whole job is to turn a rejection into `lastError`
+     * plus a retry, so swallowing here would report a sweep that did not happen
+     * as a `succeeded` row.
+     */
+    process(job: Job): Promise<void>;
+    /**
+     * Marks every node that has gone silent past the threshold `offline`, and
+     * returns how many rows changed.
+     *
+     * The `OR` has two arms and BOTH are necessary:
+     *
+     *   1. `lastHeartbeatAt < cutoff` — the ordinary case. A node that was
+     *      healthy and stopped.
+     *
+     *   2. `lastHeartbeatAt IS NULL AND registeredAt < cutoff` — THE NODE THAT
+     *      NEVER HEARTBEATED. It registered (so it has a row, and it shows up on
+     *      the fleet page as `online`) and never got as far as its first
+     *      heartbeat: a bad credential, a firewall, a crash during startup. Arm
+     *      1 cannot see it, because `NULL < cutoff` is NULL and never true in
+     *      SQL, so without this arm such a row is stuck at `online` FOREVER —
+     *      and, per the header, permanently invisible to retention. `registeredAt`
+     *      is the substitute age and is always present.
+     *
+     * Exposed as its own method purely so a test can drive the statement
+     * directly, without going through `process`.
+     */
+    sweep(): Promise<number>;
+    /**
+     * Emit `nodes.node.offline` once per node this tick actually flipped; the
+     * app's listener raises the `nodes.node_offline` notification.
+     *
+     * NEVER THROWS, and never delays the sweep. The listener dispatches through
+     * the notifier's DETACHED entry point: it schedules the audience query and
+     * every send and returns, so a mail server having a bad day cannot slow a
+     * ten-minute cron or hold a database connection while it does.
+     *
+     * ONE MESSAGE PER NODE, not one summarising the batch. The reader's next
+     * action is per node ("is that one meant to be up?"), and a digest that says
+     * "3 nodes went offline" makes them go and look up which three — which is the
+     * work the notification was supposed to save.
+     */
+    private announceOffline;
+}
+//# sourceMappingURL=node-fleet-sweep.handler.d.ts.map

package/dist/nodes/handlers/node-fleet-sweep.handler.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"node-fleet-sweep.handler.d.ts","sourceRoot":"","sources":["../../../src/nodes/handlers/node-fleet-sweep.handler.ts"],"names":[],"mappings":"AA6GA,OAAO,EAAsB,YAAY,EAAU,MAAM,gBAAgB,CAAC;AAC1E,OAAO,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AACtD,OAAO,EAAE,KAAK,GAAG,EAAE,KAAK,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAG7D,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC9C,OAAO,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AAEtD,OAAO,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAC;AAEjE;;;;;;GAMG;AACH,eAAO,MAAM,qBAAqB,sBAAsB,CAAC;AAEzD;;;;GAIG;AACH,qBACa,qBAAsB,YAAW,UAAU,EAAE,YAAY;IAQlE,OAAO,CAAC,QAAQ,CAAC,QAAQ;IACA,OAAO,CAAC,QAAQ,CAAC,MAAM;IAChD,OAAO,CAAC,QAAQ,CAAC,SAAS;IAK1B,OAAO,CAAC,QAAQ,CAAC,MAAM;IAdzB,OAAO,CAAC,QAAQ,CAAC,MAAM,CAA0C;IAEjE,QAAQ,CAAC,IAAI,uBAAyB;IAEtC,QAAQ,CAAC,KAAK,iBAAiB;gBAGZ,QAAQ,EAAE,kBAAkB,EACH,MAAM,EAAE,UAAU,EAC3C,SAAS,EAAE,oBAAoB,EAK/B,MAAM,EAAE,aAAa;IAGxC,2DAA2D;IAC3D,YAAY,IAAI,IAAI;IAIpB;;;;;;;;OAQG;IACG,OAAO,CAAC,GAAG,EAAE,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC;IAgBtC;;;;;;;;;;;;;;;;;;;;OAoBG;IACG,KAAK,IAAI,OAAO,CAAC,MAAM,CAAC;IAoD9B;;;;;;;;;;;;;OAaG;IACH,OAAO,CAAC,eAAe;CA6BxB"}

package/dist/nodes/handlers/node-fleet-sweep.handler.js

@@ -0,0 +1,300 @@
+"use strict";
+// =============================================================================
+// `nodes.fleet.sweep` — the stale-node sweep as a queue job (issue #353, epic #345)
+// =============================================================================
+//
+// THE BUG THIS HANDLER EXISTS TO PREVENT, stated as plainly as it can be: a
+// node that crashes never says goodbye. `POST /nodes/:id/deregister` is a
+// GRACEFUL shutdown — a cooperative process telling the control plane it is
+// going away — and it is not how workers usually stop. An OOM kill, a segfault
+// in a native dependency, a reclaimed spot instance, a closed laptop lid and a
+// network partition all end the same way: the last thing the row ever hears is
+// a heartbeat, and its `status` stays `online` forever.
+//
+// Two things go wrong when that happens, and the second is much worse than the
+// first:
+//
+//   1. THE FLEET PAGE LIES. A green "online" chip sits above a three-week-old
+//      heartbeat. An operator shown no data goes and looks; an operator shown a
+//      confident green chip does not.
+//
+//   2. RETENTION IS SILENTLY VOIDED. `NodeFleetPruneHandler` selects
+//      `status = \'offline\'`, so a row stuck at `online` can NEVER be reached by
+//      it — `nodes.offlineRetentionDays` does nothing for exactly the failure
+//      mode it exists for. Crashed nodes are the ones that accumulate;
+//      gracefully deregistered ones are the ones that get cleaned up. Without
+//      this sweep the prune is dead code, which is why the two are ordered and
+//      why that ordering has a test of its own.
+//
+// -----------------------------------------------------------------------------
+// WHAT #353 CHANGED, AND WHAT IT DELIBERATELY DID NOT
+// -----------------------------------------------------------------------------
+//
+// The statement below is `NodeStaleOfflineTask.sweep`\'s, moved verbatim. WHAT
+// CHANGED IS THE EXECUTOR: the ten-minute cron now only enqueues, and this
+// handler runs on a worker slot, so a sweep that failed is a `jobs` row with a
+// `lastError` and a retry rather than one log line on whichever process held
+// the timer. Epic #345 decision 1 — every long-running activity is a job —
+// applied to the last of the fleet\'s own housekeeping.
+//
+// The kill switch did NOT move. `NODE_STALE_OFFLINE_ENABLED` is a statement
+// about whether THIS PROCESS maintains fleet liveness, so it is asked where the
+// scheduling decision is made (`NodeStaleOfflineTask`) and not here: a sweep row
+// that reached a worker was queued by a process that had already decided to
+// sweep, and re-asking would let a fleet-sweep job queued by one replica be
+// silently dropped by another.
+//
+// -----------------------------------------------------------------------------
+// THE THRESHOLD IS A MULTIPLE OF THE STALE WINDOW, NOT A DURATION OF ITS OWN
+// -----------------------------------------------------------------------------
+//
+// `cutoff = now - staleHeartbeatSeconds x offlineStaleMultiplier`.
+//
+// REJECTED: an independent `offlineAfterMinutes` setting. It reads like the
+// simpler design — one number, one meaning, no arithmetic — and it creates TWO
+// UNRELATED NOTIONS OF LIVENESS in a system that has to have exactly one. The
+// UI\'s "stale" pill is `staleHeartbeatSeconds`; the database\'s `offline` status
+// would be `offlineAfterMinutes`; nothing links them, and an administrator
+// raising the heartbeat interval from 90s to 10 minutes (a perfectly reasonable
+// thing to do for a fleet of laptops) would leave the offline threshold at
+// whatever it was, silently marking every healthy node in the fleet offline.
+// Expressed as a MULTIPLIER, "offline" is by construction some whole number of
+// stale windows later than "stale", in the same units, and the two cannot be
+// configured into contradicting each other.
+//
+// -----------------------------------------------------------------------------
+// WHAT THE SWEEP MUST NOT TOUCH
+// -----------------------------------------------------------------------------
+//
+// `disabled` IS NEVER AUTO-TRANSITIONED. It is an administrator\'s explicit
+// intent — "this node may not claim, whatever it says about itself" — and it
+// must survive the sweep. REJECTED: including it in the `in` list on the
+// grounds that a disabled node that stopped heartbeating is also gone. The cost
+// of being wrong is asymmetric and permanent: `offline` is a state a
+// re-registering node CLEARS (see `NodesService.reattach`), so a disabled node
+// swept to `offline` and then restarted comes back ONLINE AND ENABLED — the
+// kill switch an operator threw would have been quietly undone by a timer.
+// Nothing in the row records that it was ever disabled, so nobody would ever
+// find out.
+//
+// `offline` is already terminal here, so it is not in the `in` list either:
+// re-stamping a status a row already carries is a write that changes nothing
+// and an update count that overstates what happened.
+//
+// -----------------------------------------------------------------------------
+// ONE SET-BASED STATEMENT, AND NO OVERLAP GUARD
+// -----------------------------------------------------------------------------
+//
+// The sweep is a single `updateManyAndReturn` whose `where` re-asserts
+// everything it cares about, so it is idempotent and safe to run concurrently:
+// two workers claiming two sweep rows at the same moment produce one winner and
+// one empty array. That is why there is no advisory lock, no `isRunning` flag
+// and no leader election here — the same reasoning `JobStuckResetTask` records
+// for the lease reaper, and the reason this type needs no execution profile:
+// re-running it is free.
+//
+// REJECTED: reading the candidate rows and updating them one at a time so each
+// log line could name a node. A fleet is small enough that it would work, and
+// it would replace an atomic statement with a read-then-write race for the sake
+// of log prose. The names of the nodes that flipped are one query away on the
+// fleet page, which is where somebody investigating is already looking.
+//
+// SERVER-ONLY BY DERIVATION: neither `nodeResultSchema` nor `persistNodeResult`
+// (`job-handler.interface.ts`), which is also the only correct answer — the job
+// IS an `UPDATE` against this application\'s own database, and there is nothing
+// for a machine with no database access to compute. There is a second, sharper
+// reason here: this is the sweep that decides a NODE is dead, so handing it to
+// the fleet it polices would mean a fleet-wide outage is the one condition under
+// which nothing notices a fleet-wide outage.
+// =============================================================================
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+var NodeFleetSweepHandler_1;
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.NodeFleetSweepHandler = exports.NODE_FLEET_SWEEP_TYPE = void 0;
+const common_1 = require("@nestjs/common");
+const event_emitter_1 = require("@nestjs/event-emitter");
+const index_1 = require("../../core/index");
+const index_2 = require("../../jobs/index");
+const node_offline_event_1 = require("../events/node-offline.event");
+const node_lifecycle_service_1 = require("../node-lifecycle.service");
+/**
+ * The handler key, and therefore the `Job.type` every fleet-sweep row carries.
+ * PERMANENT — rows outlive handlers. Exported so `NodeStaleOfflineTask` asks
+ * about the same string it queues.
+  *
+  * @stability experimental
+ */
+exports.NODE_FLEET_SWEEP_TYPE = 'nodes.fleet.sweep';
+/**
+ * The `nodes.fleet.sweep` handler: marks silent nodes offline in one statement, then emits `nodes.node.offline` per node. Server-only.
+ *
+ * @stability experimental
+ */
+let NodeFleetSweepHandler = NodeFleetSweepHandler_1 = class NodeFleetSweepHandler {
+    registry;
+    prisma;
+    lifecycle;
+    events;
+    logger = new common_1.Logger(NodeFleetSweepHandler_1.name);
+    type = exports.NODE_FLEET_SWEEP_TYPE;
+    label = 'Fleet sweep';
+    constructor(registry, prisma, lifecycle, 
+    // #288 (epic #254); #734: the sweep announces each node it flipped as a
+    // `nodes.node.offline` event and the app's listener dispatches the
+    // notification, so this slice imports nothing from notifications.
+    // `EventEmitter2` is global (`EventEmitterModule.forRoot()` in the app).
+    events) {
+        this.registry = registry;
+        this.prisma = prisma;
+        this.lifecycle = lifecycle;
+        this.events = events;
+    }
+    /** Self-registration — the only wiring a handler needs. */
+    onModuleInit() {
+        this.registry.register(this);
+    }
+    /**
+     * Runs the sweep.
+     *
+     * THROWS TO FAIL — the cron this replaced swallowed its errors because a
+     * throw out of a `@Cron` handler is an unhandled rejection; a handler has a
+     * worker above it whose whole job is to turn a rejection into `lastError`
+     * plus a retry, so swallowing here would report a sweep that did not happen
+     * as a `succeeded` row.
+     */
+    async process(job) {
+        const transitioned = await this.sweep();
+        // Only say something when something happened. A healthy fleet queues this
+        // 144 times a day, and 144 lines of "0 nodes" is how a log stops being read
+        // — the `jobs` row is the durable record either way.
+        if (transitioned > 0) {
+            this.logger.warn(`Fleet sweep ${job.id}: ${transitioned} worker node(s) stopped heartbeating ` +
+                'and were marked offline');
+        }
+        else {
+            this.logger.debug(`Fleet sweep ${job.id}: every node is still heartbeating`);
+        }
+    }
+    /**
+     * Marks every node that has gone silent past the threshold `offline`, and
+     * returns how many rows changed.
+     *
+     * The `OR` has two arms and BOTH are necessary:
+     *
+     *   1. `lastHeartbeatAt < cutoff` — the ordinary case. A node that was
+     *      healthy and stopped.
+     *
+     *   2. `lastHeartbeatAt IS NULL AND registeredAt < cutoff` — THE NODE THAT
+     *      NEVER HEARTBEATED. It registered (so it has a row, and it shows up on
+     *      the fleet page as `online`) and never got as far as its first
+     *      heartbeat: a bad credential, a firewall, a crash during startup. Arm
+     *      1 cannot see it, because `NULL < cutoff` is NULL and never true in
+     *      SQL, so without this arm such a row is stuck at `online` FOREVER —
+     *      and, per the header, permanently invisible to retention. `registeredAt`
+     *      is the substitute age and is always present.
+     *
+     * Exposed as its own method purely so a test can drive the statement
+     * directly, without going through `process`.
+     */
+    async sweep() {
+        const policy = await this.lifecycle.getPolicy();
+        // ONE `now` for the whole sweep, passed in rather than read inside the
+        // cutoff helper, so every row in one tick is judged against the same
+        // instant and a test can pin it.
+        const now = new Date();
+        const cutoff = this.lifecycle.staleCutoff(policy, now);
+        // ⚠ `updateManyAndReturn`, NOT `updateMany` — AND IT IS STILL ONE STATEMENT.
+        //
+        // #288 needs to raise `nodes.node_offline` once per node that ACTUALLY
+        // FLIPPED, naming it and saying when it was last heard from, and neither
+        // the name nor "did this tick flip it?" is derivable from an `updateMany`
+        // count. The header above rejects reading the candidates first and updating
+        // them one at a time, and that rejection stands: it would replace an atomic
+        // statement with a read-then-write race between replicas, and both replicas
+        // would then have to guess which rows were theirs.
+        //
+        // `UPDATE ... RETURNING` has neither problem. The `where` still re-asserts
+        // everything the sweep cares about, so it is still idempotent and still
+        // safe to run concurrently — two replicas ticking together produce one
+        // winner and one EMPTY ARRAY, rather than one winner and one no-op count.
+        // That is exactly the "which rows did I change?" answer the notification
+        // needs, and it is the reason the transition can stay a single statement.
+        const transitioned = await this.prisma.workerNode.updateManyAndReturn({
+            where: {
+                // `disabled` and `offline` are deliberately absent — see the header.
+                status: { in: ['online', 'draining'] },
+                OR: [
+                    { lastHeartbeatAt: { lt: cutoff } },
+                    { lastHeartbeatAt: null, registeredAt: { lt: cutoff } },
+                ],
+            },
+            data: { status: 'offline' },
+            // Only what the message renders. A sweep is not a page.
+            select: { id: true, name: true, lastHeartbeatAt: true },
+        });
+        // ⚠ AFTER THE WRITE HAS COMMITTED, AND OUTSIDE ANY TRANSACTION.
+        //
+        // The statement above is the sweep. Everything below is reporting, it is
+        // fire-and-forget, and it must not be able to affect either — which is why
+        // each event is emitted behind a `try` of its own. A listener that threw
+        // here would otherwise abort `sweep()` AFTER the rows had already been
+        // flipped, and the caller would log "fleet sweep failed" about a sweep
+        // that succeeded.
+        this.announceOffline(transitioned, policy.staleHeartbeatSeconds * policy.offlineStaleMultiplier);
+        return transitioned.length;
+    }
+    /**
+     * Emit `nodes.node.offline` once per node this tick actually flipped; the
+     * app's listener raises the `nodes.node_offline` notification.
+     *
+     * NEVER THROWS, and never delays the sweep. The listener dispatches through
+     * the notifier's DETACHED entry point: it schedules the audience query and
+     * every send and returns, so a mail server having a bad day cannot slow a
+     * ten-minute cron or hold a database connection while it does.
+     *
+     * ONE MESSAGE PER NODE, not one summarising the batch. The reader's next
+     * action is per node ("is that one meant to be up?"), and a digest that says
+     * "3 nodes went offline" makes them go and look up which three — which is the
+     * work the notification was supposed to save.
+     */
+    announceOffline(nodes, staleAfterSeconds) {
+        if (nodes.length === 0)
+            return;
+        const markedOfflineAt = new Date();
+        const staleAfterMinutes = Math.max(1, Math.round(staleAfterSeconds / 60));
+        // ONE EVENT PER NODE (#734). The slice no longer dispatches the
+        // `nodes.node_offline` notification itself: the notifications slice sits
+        // above it, so the app's listener does (`NODE_OFFLINE_EVENT`). Each emit
+        // is guarded on its own: a listener that throws must not stop the others
+        // from hearing about the remaining nodes, and must not abort a sweep that
+        // already succeeded.
+        for (const node of nodes) {
+            try {
+                this.events.emit(node_offline_event_1.NODE_OFFLINE_EVENT, new node_offline_event_1.NodeOfflineEvent(node.id, node.name, node.lastHeartbeatAt, markedOfflineAt, staleAfterMinutes));
+            }
+            catch (error) {
+                this.logger.error(`A '${node_offline_event_1.NODE_OFFLINE_EVENT}' listener threw for node ${node.id}; the node is ` +
+                    `still marked offline: ${error instanceof Error ? error.message : String(error)}`);
+            }
+        }
+    }
+};
+exports.NodeFleetSweepHandler = NodeFleetSweepHandler;
+exports.NodeFleetSweepHandler = NodeFleetSweepHandler = NodeFleetSweepHandler_1 = __decorate([
+    (0, common_1.Injectable)(),
+    __param(1, (0, common_1.Inject)(index_1.PLATFORM_PRISMA)),
+    __metadata("design:paramtypes", [index_2.JobHandlerRegistry, Object, node_lifecycle_service_1.NodeLifecycleService,
+        event_emitter_1.EventEmitter2])
+], NodeFleetSweepHandler);
+//# sourceMappingURL=node-fleet-sweep.handler.js.map

package/dist/nodes/handlers/node-fleet-sweep.handler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"node-fleet-sweep.handler.js","sourceRoot":"","sources":["../../../src/nodes/handlers/node-fleet-sweep.handler.ts"],"names":[],"mappings":";AAAA,gFAAgF;AAChF,oFAAoF;AACpF,gFAAgF;AAChF,EAAE;AACF,4EAA4E;AAC5E,0EAA0E;AAC1E,4EAA4E;AAC5E,+EAA+E;AAC/E,+EAA+E;AAC/E,+EAA+E;AAC/E,wDAAwD;AACxD,EAAE;AACF,+EAA+E;AAC/E,SAAS;AACT,EAAE;AACF,8EAA8E;AAC9E,gFAAgF;AAChF,sCAAsC;AACtC,EAAE;AACF,qEAAqE;AACrE,kFAAkF;AAClF,8EAA8E;AAC9E,uEAAuE;AACvE,8EAA8E;AAC9E,+EAA+E;AAC/E,gDAAgD;AAChD,EAAE;AACF,gFAAgF;AAChF,sDAAsD;AACtD,gFAAgF;AAChF,EAAE;AACF,+EAA+E;AAC/E,2EAA2E;AAC3E,+EAA+E;AAC/E,6EAA6E;AAC7E,2EAA2E;AAC3E,wDAAwD;AACxD,EAAE;AACF,4EAA4E;AAC5E,gFAAgF;AAChF,iFAAiF;AACjF,4EAA4E;AAC5E,4EAA4E;AAC5E,+BAA+B;AAC/B,EAAE;AACF,gFAAgF;AAChF,6EAA6E;AAC7E,gFAAgF;AAChF,EAAE;AACF,mEAAmE;AACnE,EAAE;AACF,4EAA4E;AAC5E,+EAA+E;AAC/E,8EAA8E;AAC9E,kFAAkF;AAClF,2EAA2E;AAC3E,gFAAgF;AAChF,2EAA2E;AAC3E,6EAA6E;AAC7E,+EAA+E;AAC/E,6EAA6E;AAC7E,4CAA4C;AAC5C,EAAE;AACF,gFAAgF;AAChF,gCAAgC;AAChC,gFAAgF;AAChF,EAAE;AACF,4EAA4E;AAC5E,6EAA6E;AAC7E,yEAAyE;AACzE,gFAAgF;AAChF,qEAAqE;AACrE,+EAA+E;AAC/E,4EAA4E;AAC5E,2EAA2E;AAC3E,6EAA6E;AAC7E,YAAY;AACZ,EAAE;AACF,4EAA4E;AAC5E,6EAA6E;AAC7E,qDAAqD;AACrD,EAAE;AACF,gFAAgF;AAChF,gDAAgD;AAChD,gFAAgF;AAChF,EAAE;AACF,uEAAuE;AACvE,+EAA+E;AAC/E,gFAAgF;AAChF,8EAA8E;AAC9E,+EAA+E;AAC/E,6EAA6E;AAC7E,yBAAyB;AACzB,EAAE;AACF,+EAA+E;AAC/E,8EAA8E;AAC9E,gFAAgF;AAChF,8EAA8E;AAC9E,wEAAwE;AACxE,EAAE;AACF,gFAAgF;AAChF,gFAAgF;AAChF,gFAAgF;AAChF,+EAA+E;AAC/E,+EAA+E;AAC/E,iFAAiF;AACjF,6CAA6C;AAC7C,gFAAgF;;;;;;;;;;;;;;;;AAEhF,2CAA0E;AAC1E,yDAAsD;AAEtD,4CAAmD;AAGnD,4CAAsD;AACtD,qEAAoF;AACpF,sEAAiE;AAEjE;;;;;;GAMG;AACU,QAAA,qBAAqB,GAAG,mBAAmB,CAAC;AAEzD;;;;GAIG;AAEI,IAAM,qBAAqB,6BAA3B,MAAM,qBAAqB;IAQb;IACyB;IACzB;IAKA;IAdF,MAAM,GAAG,IAAI,eAAM,CAAC,uBAAqB,CAAC,IAAI,CAAC,CAAC;IAExD,IAAI,GAAG,6BAAqB,CAAC;IAE7B,KAAK,GAAG,aAAa,CAAC;IAE/B,YACmB,QAA4B,EACH,MAAkB,EAC3C,SAA+B;IAChD,wEAAwE;IACxE,mEAAmE;IACnE,kEAAkE;IAClE,yEAAyE;IACxD,MAAqB;QAPrB,aAAQ,GAAR,QAAQ,CAAoB;QACH,WAAM,GAAN,MAAM,CAAY;QAC3C,cAAS,GAAT,SAAS,CAAsB;QAK/B,WAAM,GAAN,MAAM,CAAe;IACrC,CAAC;IAEJ,2DAA2D;IAC3D,YAAY;QACV,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IAC/B,CAAC;IAED;;;;;;;;OAQG;IACH,KAAK,CAAC,OAAO,CAAC,GAAQ;QACpB,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC;QAExC,0EAA0E;QAC1E,4EAA4E;QAC5E,qDAAqD;QACrD,IAAI,YAAY,GAAG,CAAC,EAAE,CAAC;YACrB,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,eAAe,GAAG,CAAC,EAAE,KAAK,YAAY,uCAAuC;gBAC3E,yBAAyB,CAC5B,CAAC;QACJ,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,eAAe,GAAG,CAAC,EAAE,oCAAoC,CAAC,CAAC;QAC/E,CAAC;IACH,CAAC;IAED;;;;;;;;;;;;;;;;;;;;OAoBG;IACH,KAAK,CAAC,KAAK;QACT,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE,CAAC;QAEhD,uEAAuE;QACvE,qEAAqE;QACrE,iCAAiC;QACjC,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;QAEvD,6EAA6E;QAC7E,EAAE;QACF,uEAAuE;QACvE,yEAAyE;QACzE,0EAA0E;QAC1E,4EAA4E;QAC5E,4EAA4E;QAC5E,4EAA4E;QAC5E,mDAAmD;QACnD,EAAE;QACF,2EAA2E;QAC3E,wEAAwE;QACxE,uEAAuE;QACvE,0EAA0E;QAC1E,yEAAyE;QACzE,0EAA0E;QAC1E,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,mBAAmB,CAAC;YACpE,KAAK,EAAE;gBACL,qEAAqE;gBACrE,MAAM,EAAE,EAAE,EAAE,EAAE,CAAC,QAAQ,EAAE,UAAU,CAAC,EAAE;gBACtC,EAAE,EAAE;oBACF,EAAE,eAAe,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE;oBACnC,EAAE,eAAe,EAAE,IAAI,EAAE,YAAY,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE;iBACxD;aACF;YACD,IAAI,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE;YAC3B,wDAAwD;YACxD,MAAM,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,eAAe,EAAE,IAAI,EAAE;SACxD,CAAC,CAAC;QAEH,gEAAgE;QAChE,EAAE;QACF,yEAAyE;QACzE,2EAA2E;QAC3E,yEAAyE;QACzE,uEAAuE;QACvE,uEAAuE;QACvE,kBAAkB;QAClB,IAAI,CAAC,eAAe,CAAC,YAAY,EAAE,MAAM,CAAC,qBAAqB,GAAG,MAAM,CAAC,sBAAsB,CAAC,CAAC;QAEjG,OAAO,YAAY,CAAC,MAAM,CAAC;IAC7B,CAAC;IAED;;;;;;;;;;;;;OAaG;IACK,eAAe,CACrB,KAAgF,EAChF,iBAAyB;QAEzB,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO;QAE/B,MAAM,eAAe,GAAG,IAAI,IAAI,EAAE,CAAC;QACnC,MAAM,iBAAiB,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,iBAAiB,GAAG,EAAE,CAAC,CAAC,CAAC;QAE1E,gEAAgE;QAChE,yEAAyE;QACzE,yEAAyE;QACzE,yEAAyE;QACzE,0EAA0E;QAC1E,qBAAqB;QACrB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,IAAI,CAAC;gBACH,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,uCAAkB,EAClB,IAAI,qCAAgB,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,eAAe,EAAE,eAAe,EAAE,iBAAiB,CAAC,CACnG,CAAC;YACJ,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,CAAC,MAAM,CAAC,KAAK,CACf,MAAM,uCAAkB,6BAA6B,IAAI,CAAC,EAAE,gBAAgB;oBAC1E,yBAAyB,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CACpF,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;CACF,CAAA;AApKY,sDAAqB;gCAArB,qBAAqB;IADjC,IAAA,mBAAU,GAAE;IAUR,WAAA,IAAA,eAAM,EAAC,uBAAe,CAAC,CAAA;qCADG,0BAAkB,UAEjB,6CAAoB;QAKvB,6BAAa;GAf7B,qBAAqB,CAoKjC"}

package/dist/nodes/index.d.ts

@@ -0,0 +1,38 @@
+export { NodesModule } from './nodes.module';
+export { NODES_OPTIONS, resolveNodesModuleOptions } from './nodes.options';
+export type { NodesModuleOptions, ResolvedNodesModuleOptions } from './nodes.options';
+export { NODES_SYSTEM_SETTINGS, mergeNodesSettings } from './nodes.system-settings';
+export { NodeCredentialModule } from './node-credential.module';
+export { NODE_JOB_INPUTS, NODE_OBJECT_STORE, NodeJobInputError } from './ports';
+export type { NodeJobInputFailureReason, NodeJobInputObject, NodeJobInputs, NodeObjectStore, SignedPutUrlOptions, SignedUrlOptions, } from './ports';
+export { BUILTIN_NODE_SPAN_ATTRIBUTES, DEFAULT_NODE_SPAN_ATTRIBUTE_STRING_LENGTH, MAX_NODE_SPAN_ATTRIBUTES, MAX_NODE_SPAN_ATTRIBUTE_STRING_LENGTH, NODE_SPAN_ATTRIBUTE_KEY_PATTERN, NODE_SPAN_ATTRIBUTE_STRING_PATTERN, nodeSpanAttributeRegistry, registerNodeSpanAttribute, resolveRelayedAttribute, } from './node-span-attribute.registry';
+export type { BuiltinNodeSpanAttribute, NodeSpanAttributeDefinition, RelayedAttribute } from './node-span-attribute.registry';
+export type { BuiltinNodeSpanName, NodeSpanName } from './dto/node-telemetry.dto';
+export { NODE_OFFLINE_EVENT, NodeOfflineEvent } from './events/node-offline.event';
+export { CREDENTIAL_OWNER_SELECT, NODE_TOKEN_PREFIX, NodeCredentialService } from './node-credential.service';
+export { NodesService } from './nodes.service';
+export { NodeLifecycleService } from './node-lifecycle.service';
+export { NODE_OUTPUT_KEY_PREFIX, NodeDataPlaneService } from './node-data-plane.service';
+export { NodeSecretBrokerService, SECRET_CLOCK_SKEW_ALLOWANCE_MS } from './node-secret-broker.service';
+export { NodesAdminService, OWNER_SELECT } from './nodes-admin.service';
+export { NODE_FLEET_PRUNE_TYPE, NodeFleetPruneHandler } from './handlers/node-fleet-prune.handler';
+export { NODE_FLEET_SWEEP_TYPE, NodeFleetSweepHandler } from './handlers/node-fleet-sweep.handler';
+export { ClaimJobsDto, NodeJobResultDto } from './dto/node-control-plane.dto';
+export { NodeDownloadUrlDto, NodeUploadUrlDto } from './dto/node-data-plane.dto';
+export type { AdminNodeCredentialRow, NodeCredentialCreated, NodeCredentialListRow } from './node-credential.service';
+export type { NodeEligibleJobType, NodeJobSettlement, NodeRegistration } from './nodes.service';
+export type { NodeSecretSweepResult } from './node-secret-broker.service';
+export type { PruneOfflineNodesResult } from './handlers/node-fleet-prune.handler';
+export type { NodeSettlementLedger } from './node-settlement-ledger';
+export type { CreateNodeCredentialDto } from './dto/create-node-credential.dto';
+export type { HeartbeatNodeDto, NodeJobFailureDto, RegisterNodeDto, RenewLeaseDto } from './dto/node-control-plane.dto';
+export type { NodeDownloadUrlResponseDto, NodeJobTypeDto, NodeJobTypesResponseDto, NodeUploadUrlResponseDto, } from './dto/node-data-plane.dto';
+export type { NodeJobSecretRequestDto, NodeJobSecretResponseDto } from './dto/node-job-secret.dto';
+export type { AdminNodeCredentialDto, AdminNodeDto, NodeJobCountsDto, NodeOwnerDto, NodeVitalsCountersDto, NodeVitalsDto, } from './dto/node-admin.dto';
+export type { ClaimJobsResponseDto, JobSettlementResponseDto, NodeJobAssignmentDto, NodeJobDto, RegisterNodeResponseDto, RenewLeaseResponseDto, WorkerNodeDto, } from './dto/node-response.dto';
+export type { NodeCredentialCreatedResponseDto, NodeCredentialListItemDto } from './dto/node-credential-response.dto';
+export { NODES_APP_METRICS, NODE_HEALTH_VALUES, NODE_STATUS_VALUES } from './nodes.metrics';
+export type { NodesAppMetricDef } from './nodes.metrics';
+export { NODES_PERMISSIONS } from './nodes.permissions';
+export type { NodesPermissionDeclaration } from './nodes.permissions';
+//# sourceMappingURL=index.d.ts.map

package/dist/nodes/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/nodes/index.ts"],"names":[],"mappings":"AAOA,OAAO,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAC7C,OAAO,EAAE,aAAa,EAAE,yBAAyB,EAAE,MAAM,iBAAiB,CAAC;AAC3E,YAAY,EAAE,kBAAkB,EAAE,0BAA0B,EAAE,MAAM,iBAAiB,CAAC;AACtF,OAAO,EAAE,qBAAqB,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AACpF,OAAO,EAAE,oBAAoB,EAAE,MAAM,0BAA0B,CAAC;AAGhE,OAAO,EAAE,eAAe,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,MAAM,SAAS,CAAC;AAChF,YAAY,EACV,yBAAyB,EACzB,kBAAkB,EAClB,aAAa,EACb,eAAe,EACf,mBAAmB,EACnB,gBAAgB,GACjB,MAAM,SAAS,CAAC;AAGjB,OAAO,EACL,4BAA4B,EAC5B,yCAAyC,EACzC,wBAAwB,EACxB,qCAAqC,EACrC,+BAA+B,EAC/B,kCAAkC,EAClC,yBAAyB,EACzB,yBAAyB,EACzB,uBAAuB,GACxB,MAAM,gCAAgC,CAAC;AACxC,YAAY,EAAE,wBAAwB,EAAE,2BAA2B,EAAE,gBAAgB,EAAE,MAAM,gCAAgC,CAAC;AAC9H,YAAY,EAAE,mBAAmB,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAC;AAGlF,OAAO,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,MAAM,6BAA6B,CAAC;AAGnF,OAAO,EAAE,uBAAuB,EAAE,iBAAiB,EAAE,qBAAqB,EAAE,MAAM,2BAA2B,CAAC;AAC9G,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAC/C,OAAO,EAAE,oBAAoB,EAAE,MAAM,0BAA0B,CAAC;AAChE,OAAO,EAAE,sBAAsB,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAC;AACzF,OAAO,EAAE,uBAAuB,EAAE,8BAA8B,EAAE,MAAM,8BAA8B,CAAC;AACvG,OAAO,EAAE,iBAAiB,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AACxE,OAAO,EAAE,qBAAqB,EAAE,qBAAqB,EAAE,MAAM,qCAAqC,CAAC;AACnG,OAAO,EAAE,qBAAqB,EAAE,qBAAqB,EAAE,MAAM,qCAAqC,CAAC;AAGnG,OAAO,EAAE,YAAY,EAAE,gBAAgB,EAAE,MAAM,8BAA8B,CAAC;AAC9E,OAAO,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,MAAM,2BAA2B,CAAC;AAGjF,YAAY,EAAE,sBAAsB,EAAE,qBAAqB,EAAE,qBAAqB,EAAE,MAAM,2BAA2B,CAAC;AACtH,YAAY,EAAE,mBAAmB,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AAChG,YAAY,EAAE,qBAAqB,EAAE,MAAM,8BAA8B,CAAC;AAC1E,YAAY,EAAE,uBAAuB,EAAE,MAAM,qCAAqC,CAAC;AACnF,YAAY,EAAE,oBAAoB,EAAE,MAAM,0BAA0B,CAAC;AACrE,YAAY,EAAE,uBAAuB,EAAE,MAAM,kCAAkC,CAAC;AAChF,YAAY,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,eAAe,EAAE,aAAa,EAAE,MAAM,8BAA8B,CAAC;AACxH,YAAY,EACV,0BAA0B,EAC1B,cAAc,EACd,uBAAuB,EACvB,wBAAwB,GACzB,MAAM,2BAA2B,CAAC;AACnC,YAAY,EAAE,uBAAuB,EAAE,wBAAwB,EAAE,MAAM,2BAA2B,CAAC;AACnG,YAAY,EACV,sBAAsB,EACtB,YAAY,EACZ,gBAAgB,EAChB,YAAY,EACZ,qBAAqB,EACrB,aAAa,GACd,MAAM,sBAAsB,CAAC;AAC9B,YAAY,EACV,oBAAoB,EACpB,wBAAwB,EACxB,oBAAoB,EACpB,UAAU,EACV,uBAAuB,EACvB,qBAAqB,EACrB,aAAa,GACd,MAAM,yBAAyB,CAAC;AACjC,YAAY,EAAE,gCAAgC,EAAE,yBAAyB,EAAE,MAAM,oCAAoC,CAAC;AAGtH,OAAO,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,MAAM,iBAAiB,CAAC;AAC5F,YAAY,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AACzD,OAAO,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AACxD,YAAY,EAAE,0BAA0B,EAAE,MAAM,qBAAqB,CAAC"}

package/dist/nodes/index.js

@@ -0,0 +1,78 @@
+"use strict";
+// `@marinoscar/platform-api/nodes`: the nodes slice (issue #734, PP-8.2). The
+// worker-node fleet: the `nod_` credential family, the control plane
+// (`/api/nodes`), the data plane (signed URLs), the brokered job secret, the
+// fleet admin routes, sweeps and gauges. Needs `@marinoscar/platform-api/jobs`.
+// Documented in ./README.md. Explicit named exports only.
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.NODES_PERMISSIONS = exports.NODE_STATUS_VALUES = exports.NODE_HEALTH_VALUES = exports.NODES_APP_METRICS = exports.NodeUploadUrlDto = exports.NodeDownloadUrlDto = exports.NodeJobResultDto = exports.ClaimJobsDto = exports.NodeFleetSweepHandler = exports.NODE_FLEET_SWEEP_TYPE = exports.NodeFleetPruneHandler = exports.NODE_FLEET_PRUNE_TYPE = exports.OWNER_SELECT = exports.NodesAdminService = exports.SECRET_CLOCK_SKEW_ALLOWANCE_MS = exports.NodeSecretBrokerService = exports.NodeDataPlaneService = exports.NODE_OUTPUT_KEY_PREFIX = exports.NodeLifecycleService = exports.NodesService = exports.NodeCredentialService = exports.NODE_TOKEN_PREFIX = exports.CREDENTIAL_OWNER_SELECT = exports.NodeOfflineEvent = exports.NODE_OFFLINE_EVENT = exports.resolveRelayedAttribute = exports.registerNodeSpanAttribute = exports.nodeSpanAttributeRegistry = exports.NODE_SPAN_ATTRIBUTE_STRING_PATTERN = exports.NODE_SPAN_ATTRIBUTE_KEY_PATTERN = exports.MAX_NODE_SPAN_ATTRIBUTE_STRING_LENGTH = exports.MAX_NODE_SPAN_ATTRIBUTES = exports.DEFAULT_NODE_SPAN_ATTRIBUTE_STRING_LENGTH = exports.BUILTIN_NODE_SPAN_ATTRIBUTES = exports.NodeJobInputError = exports.NODE_OBJECT_STORE = exports.NODE_JOB_INPUTS = exports.NodeCredentialModule = exports.mergeNodesSettings = exports.NODES_SYSTEM_SETTINGS = exports.resolveNodesModuleOptions = exports.NODES_OPTIONS = exports.NodesModule = void 0;
+// ---- the modules and options (rung 1) --------------------------------------------------
+var nodes_module_1 = require("./nodes.module");
+Object.defineProperty(exports, "NodesModule", { enumerable: true, get: function () { return nodes_module_1.NodesModule; } });
+var nodes_options_1 = require("./nodes.options");
+Object.defineProperty(exports, "NODES_OPTIONS", { enumerable: true, get: function () { return nodes_options_1.NODES_OPTIONS; } });
+Object.defineProperty(exports, "resolveNodesModuleOptions", { enumerable: true, get: function () { return nodes_options_1.resolveNodesModuleOptions; } });
+var nodes_system_settings_1 = require("./nodes.system-settings");
+Object.defineProperty(exports, "NODES_SYSTEM_SETTINGS", { enumerable: true, get: function () { return nodes_system_settings_1.NODES_SYSTEM_SETTINGS; } });
+Object.defineProperty(exports, "mergeNodesSettings", { enumerable: true, get: function () { return nodes_system_settings_1.mergeNodesSettings; } });
+var node_credential_module_1 = require("./node-credential.module");
+Object.defineProperty(exports, "NodeCredentialModule", { enumerable: true, get: function () { return node_credential_module_1.NodeCredentialModule; } });
+// ---- the host ports (rung 3) -------------------------------------------------------------
+var ports_1 = require("./ports");
+Object.defineProperty(exports, "NODE_JOB_INPUTS", { enumerable: true, get: function () { return ports_1.NODE_JOB_INPUTS; } });
+Object.defineProperty(exports, "NODE_OBJECT_STORE", { enumerable: true, get: function () { return ports_1.NODE_OBJECT_STORE; } });
+Object.defineProperty(exports, "NodeJobInputError", { enumerable: true, get: function () { return ports_1.NodeJobInputError; } });
+// ---- relayed span attributes (rung 2) -----------------------------------------------------
+var node_span_attribute_registry_1 = require("./node-span-attribute.registry");
+Object.defineProperty(exports, "BUILTIN_NODE_SPAN_ATTRIBUTES", { enumerable: true, get: function () { return node_span_attribute_registry_1.BUILTIN_NODE_SPAN_ATTRIBUTES; } });
+Object.defineProperty(exports, "DEFAULT_NODE_SPAN_ATTRIBUTE_STRING_LENGTH", { enumerable: true, get: function () { return node_span_attribute_registry_1.DEFAULT_NODE_SPAN_ATTRIBUTE_STRING_LENGTH; } });
+Object.defineProperty(exports, "MAX_NODE_SPAN_ATTRIBUTES", { enumerable: true, get: function () { return node_span_attribute_registry_1.MAX_NODE_SPAN_ATTRIBUTES; } });
+Object.defineProperty(exports, "MAX_NODE_SPAN_ATTRIBUTE_STRING_LENGTH", { enumerable: true, get: function () { return node_span_attribute_registry_1.MAX_NODE_SPAN_ATTRIBUTE_STRING_LENGTH; } });
+Object.defineProperty(exports, "NODE_SPAN_ATTRIBUTE_KEY_PATTERN", { enumerable: true, get: function () { return node_span_attribute_registry_1.NODE_SPAN_ATTRIBUTE_KEY_PATTERN; } });
+Object.defineProperty(exports, "NODE_SPAN_ATTRIBUTE_STRING_PATTERN", { enumerable: true, get: function () { return node_span_attribute_registry_1.NODE_SPAN_ATTRIBUTE_STRING_PATTERN; } });
+Object.defineProperty(exports, "nodeSpanAttributeRegistry", { enumerable: true, get: function () { return node_span_attribute_registry_1.nodeSpanAttributeRegistry; } });
+Object.defineProperty(exports, "registerNodeSpanAttribute", { enumerable: true, get: function () { return node_span_attribute_registry_1.registerNodeSpanAttribute; } });
+Object.defineProperty(exports, "resolveRelayedAttribute", { enumerable: true, get: function () { return node_span_attribute_registry_1.resolveRelayedAttribute; } });
+// ---- events (rung 4) -------------------------------------------------------------------------
+var node_offline_event_1 = require("./events/node-offline.event");
+Object.defineProperty(exports, "NODE_OFFLINE_EVENT", { enumerable: true, get: function () { return node_offline_event_1.NODE_OFFLINE_EVENT; } });
+Object.defineProperty(exports, "NodeOfflineEvent", { enumerable: true, get: function () { return node_offline_event_1.NodeOfflineEvent; } });
+// ---- services ----------------------------------------------------------------------------------
+var node_credential_service_1 = require("./node-credential.service");
+Object.defineProperty(exports, "CREDENTIAL_OWNER_SELECT", { enumerable: true, get: function () { return node_credential_service_1.CREDENTIAL_OWNER_SELECT; } });
+Object.defineProperty(exports, "NODE_TOKEN_PREFIX", { enumerable: true, get: function () { return node_credential_service_1.NODE_TOKEN_PREFIX; } });
+Object.defineProperty(exports, "NodeCredentialService", { enumerable: true, get: function () { return node_credential_service_1.NodeCredentialService; } });
+var nodes_service_1 = require("./nodes.service");
+Object.defineProperty(exports, "NodesService", { enumerable: true, get: function () { return nodes_service_1.NodesService; } });
+var node_lifecycle_service_1 = require("./node-lifecycle.service");
+Object.defineProperty(exports, "NodeLifecycleService", { enumerable: true, get: function () { return node_lifecycle_service_1.NodeLifecycleService; } });
+var node_data_plane_service_1 = require("./node-data-plane.service");
+Object.defineProperty(exports, "NODE_OUTPUT_KEY_PREFIX", { enumerable: true, get: function () { return node_data_plane_service_1.NODE_OUTPUT_KEY_PREFIX; } });
+Object.defineProperty(exports, "NodeDataPlaneService", { enumerable: true, get: function () { return node_data_plane_service_1.NodeDataPlaneService; } });
+var node_secret_broker_service_1 = require("./node-secret-broker.service");
+Object.defineProperty(exports, "NodeSecretBrokerService", { enumerable: true, get: function () { return node_secret_broker_service_1.NodeSecretBrokerService; } });
+Object.defineProperty(exports, "SECRET_CLOCK_SKEW_ALLOWANCE_MS", { enumerable: true, get: function () { return node_secret_broker_service_1.SECRET_CLOCK_SKEW_ALLOWANCE_MS; } });
+var nodes_admin_service_1 = require("./nodes-admin.service");
+Object.defineProperty(exports, "NodesAdminService", { enumerable: true, get: function () { return nodes_admin_service_1.NodesAdminService; } });
+Object.defineProperty(exports, "OWNER_SELECT", { enumerable: true, get: function () { return nodes_admin_service_1.OWNER_SELECT; } });
+var node_fleet_prune_handler_1 = require("./handlers/node-fleet-prune.handler");
+Object.defineProperty(exports, "NODE_FLEET_PRUNE_TYPE", { enumerable: true, get: function () { return node_fleet_prune_handler_1.NODE_FLEET_PRUNE_TYPE; } });
+Object.defineProperty(exports, "NodeFleetPruneHandler", { enumerable: true, get: function () { return node_fleet_prune_handler_1.NodeFleetPruneHandler; } });
+var node_fleet_sweep_handler_1 = require("./handlers/node-fleet-sweep.handler");
+Object.defineProperty(exports, "NODE_FLEET_SWEEP_TYPE", { enumerable: true, get: function () { return node_fleet_sweep_handler_1.NODE_FLEET_SWEEP_TYPE; } });
+Object.defineProperty(exports, "NodeFleetSweepHandler", { enumerable: true, get: function () { return node_fleet_sweep_handler_1.NodeFleetSweepHandler; } });
+// ---- the wire DTOs (Nest classes over the zod schemas) ------------------------------------------
+var node_control_plane_dto_1 = require("./dto/node-control-plane.dto");
+Object.defineProperty(exports, "ClaimJobsDto", { enumerable: true, get: function () { return node_control_plane_dto_1.ClaimJobsDto; } });
+Object.defineProperty(exports, "NodeJobResultDto", { enumerable: true, get: function () { return node_control_plane_dto_1.NodeJobResultDto; } });
+var node_data_plane_dto_1 = require("./dto/node-data-plane.dto");
+Object.defineProperty(exports, "NodeDownloadUrlDto", { enumerable: true, get: function () { return node_data_plane_dto_1.NodeDownloadUrlDto; } });
+Object.defineProperty(exports, "NodeUploadUrlDto", { enumerable: true, get: function () { return node_data_plane_dto_1.NodeUploadUrlDto; } });
+// ---- metrics, permissions ----------------------------------------------------------------------
+var nodes_metrics_1 = require("./nodes.metrics");
+Object.defineProperty(exports, "NODES_APP_METRICS", { enumerable: true, get: function () { return nodes_metrics_1.NODES_APP_METRICS; } });
+Object.defineProperty(exports, "NODE_HEALTH_VALUES", { enumerable: true, get: function () { return nodes_metrics_1.NODE_HEALTH_VALUES; } });
+Object.defineProperty(exports, "NODE_STATUS_VALUES", { enumerable: true, get: function () { return nodes_metrics_1.NODE_STATUS_VALUES; } });
+var nodes_permissions_1 = require("./nodes.permissions");
+Object.defineProperty(exports, "NODES_PERMISSIONS", { enumerable: true, get: function () { return nodes_permissions_1.NODES_PERMISSIONS; } });
+//# sourceMappingURL=index.js.map

package/dist/nodes/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/nodes/index.ts"],"names":[],"mappings":";AAAA,8EAA8E;AAC9E,qEAAqE;AACrE,6EAA6E;AAC7E,gFAAgF;AAChF,0DAA0D;;;AAE1D,2FAA2F;AAC3F,+CAA6C;AAApC,2GAAA,WAAW,OAAA;AACpB,iDAA2E;AAAlE,8GAAA,aAAa,OAAA;AAAE,0HAAA,yBAAyB,OAAA;AAEjD,iEAAoF;AAA3E,8HAAA,qBAAqB,OAAA;AAAE,2HAAA,kBAAkB,OAAA;AAClD,mEAAgE;AAAvD,8HAAA,oBAAoB,OAAA;AAE7B,6FAA6F;AAC7F,iCAAgF;AAAvE,wGAAA,eAAe,OAAA;AAAE,0GAAA,iBAAiB,OAAA;AAAE,0GAAA,iBAAiB,OAAA;AAU9D,8FAA8F;AAC9F,+EAUwC;AATtC,4IAAA,4BAA4B,OAAA;AAC5B,yJAAA,yCAAyC,OAAA;AACzC,wIAAA,wBAAwB,OAAA;AACxB,qJAAA,qCAAqC,OAAA;AACrC,+IAAA,+BAA+B,OAAA;AAC/B,kJAAA,kCAAkC,OAAA;AAClC,yIAAA,yBAAyB,OAAA;AACzB,yIAAA,yBAAyB,OAAA;AACzB,uIAAA,uBAAuB,OAAA;AAKzB,iGAAiG;AACjG,kEAAmF;AAA1E,wHAAA,kBAAkB,OAAA;AAAE,sHAAA,gBAAgB,OAAA;AAE7C,mGAAmG;AACnG,qEAA8G;AAArG,kIAAA,uBAAuB,OAAA;AAAE,4HAAA,iBAAiB,OAAA;AAAE,gIAAA,qBAAqB,OAAA;AAC1E,iDAA+C;AAAtC,6GAAA,YAAY,OAAA;AACrB,mEAAgE;AAAvD,8HAAA,oBAAoB,OAAA;AAC7B,qEAAyF;AAAhF,iIAAA,sBAAsB,OAAA;AAAE,+HAAA,oBAAoB,OAAA;AACrD,2EAAuG;AAA9F,qIAAA,uBAAuB,OAAA;AAAE,4IAAA,8BAA8B,OAAA;AAChE,6DAAwE;AAA/D,wHAAA,iBAAiB,OAAA;AAAE,mHAAA,YAAY,OAAA;AACxC,gFAAmG;AAA1F,iIAAA,qBAAqB,OAAA;AAAE,iIAAA,qBAAqB,OAAA;AACrD,gFAAmG;AAA1F,iIAAA,qBAAqB,OAAA;AAAE,iIAAA,qBAAqB,OAAA;AAErD,oGAAoG;AACpG,uEAA8E;AAArE,sHAAA,YAAY,OAAA;AAAE,0HAAA,gBAAgB,OAAA;AACvC,iEAAiF;AAAxE,yHAAA,kBAAkB,OAAA;AAAE,uHAAA,gBAAgB,OAAA;AAoC7C,mGAAmG;AACnG,iDAA4F;AAAnF,kHAAA,iBAAiB,OAAA;AAAE,mHAAA,kBAAkB,OAAA;AAAE,mHAAA,kBAAkB,OAAA;AAElE,yDAAwD;AAA/C,sHAAA,iBAAiB,OAAA"}

package/dist/nodes/node-credential.controller.d.ts

@@ -0,0 +1,11 @@
+import { CreateNodeCredentialDto } from './dto/create-node-credential.dto';
+import { NodeCredentialCreatedResponseDto, NodeCredentialListItemDto } from './dto/node-credential-response.dto';
+import { NodeCredentialService } from './node-credential.service';
+export declare class NodeCredentialController {
+    private readonly credentials;
+    constructor(credentials: NodeCredentialService);
+    createCredential(dto: CreateNodeCredentialDto, userId: string): Promise<NodeCredentialCreatedResponseDto>;
+    listCredentials(userId: string): Promise<NodeCredentialListItemDto[]>;
+    revokeCredential(id: string, userId: string): Promise<void>;
+}
+//# sourceMappingURL=node-credential.controller.d.ts.map

package/dist/nodes/node-credential.controller.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"node-credential.controller.d.ts","sourceRoot":"","sources":["../../src/nodes/node-credential.controller.ts"],"names":[],"mappings":"AAyEA,OAAO,EAAE,uBAAuB,EAAE,MAAM,kCAAkC,CAAC;AAC3E,OAAO,EACL,gCAAgC,EAChC,yBAAyB,EAC1B,MAAM,oCAAoC,CAAC;AAC5C,OAAO,EAAE,qBAAqB,EAAE,MAAM,2BAA2B,CAAC;AAElE,qBAEa,wBAAwB;IACvB,OAAO,CAAC,QAAQ,CAAC,WAAW;gBAAX,WAAW,EAAE,qBAAqB;IAqBzD,gBAAgB,CACZ,GAAG,EAAE,uBAAuB,EACjB,MAAM,EAAE,MAAM,GAChC,OAAO,CAAC,gCAAgC,CAAC;IAoBtC,eAAe,CACA,MAAM,EAAE,MAAM,GAChC,OAAO,CAAC,yBAAyB,EAAE,CAAC;IAmCjC,gBAAgB,CACQ,EAAE,EAAE,MAAM,EACnB,MAAM,EAAE,MAAM,GAChC,OAAO,CAAC,IAAI,CAAC;CAGjB"}