@nosana/api 2.12.0 → 2.13.2

package/dist/routes/node/actions/terminal/session.js

@@ -0,0 +1,133 @@
+import { tryParseJson } from '../../../../utils/json.js';
+const WEB_SOCKET_OPEN = 1;
+const DEFAULT_CONNECTION_TIMEOUT_MS = 10000;
+const UNREACHABLE = 'Could not reach the node terminal.';
+const encoder = new TextEncoder();
+/**
+ * Drives one terminal WebSocket: sends the signed handshake once the socket
+ * opens, relays frames in both directions, and reports each status change once.
+ */
+export function openTerminalSession(socket, job, authorization, options) {
+    let phase = 'connecting';
+    const report = (status, detail) => options.onStatus?.(status, detail);
+    const timeout = setTimeout(() => end('error', 'The node terminal did not respond in time.'), options.timeoutMs ?? DEFAULT_CONNECTION_TIMEOUT_MS);
+    /** Ends the session once; later calls are ignored. */
+    function end(status, detail) {
+        if (phase === 'closed')
+            return;
+        phase = 'closed';
+        clearTimeout(timeout);
+        options.signal?.removeEventListener('abort', close);
+        socket.onopen = socket.onmessage = socket.onclose = socket.onerror = null;
+        closeQuietly(socket);
+        report(status, detail);
+    }
+    function close() {
+        end('closed');
+    }
+    function connected() {
+        if (phase !== 'connecting')
+            return;
+        phase = 'connected';
+        clearTimeout(timeout);
+        report('connected');
+    }
+    function send(frame) {
+        if (socket.readyState === WEB_SOCKET_OPEN)
+            socket.send(JSON.stringify(frame));
+    }
+    /** Terminal output; the first frame of any kind means the node accepted the session. */
+    function deliver(bytes) {
+        if (phase === 'closed')
+            return;
+        connected();
+        options.onData(bytes);
+    }
+    function receive(frame) {
+        if (frame.kind === 'error') {
+            end('error', frame.message);
+            return;
+        }
+        if (frame.kind === 'data') {
+            deliver(frame.bytes);
+            return;
+        }
+        connected();
+        if (frame.kind === 'exit')
+            options.onExit?.(frame.code);
+    }
+    socket.binaryType = 'arraybuffer';
+    socket.onopen = () => socket.send(JSON.stringify({
+        path: '/terminal',
+        body: {
+            jobAddress: job,
+            message: authorization.message,
+            signature: authorization.signature,
+            op: options.op,
+            cols: options.cols,
+            rows: options.rows,
+        },
+    }));
+    socket.onmessage = (event) => {
+        if (typeof event.data === 'string') {
+            receive(parseTextFrame(event.data));
+        }
+        else if (typeof Blob !== 'undefined' && event.data instanceof Blob) {
+            void event.data.arrayBuffer().then((buffer) => deliver(new Uint8Array(buffer)));
+        }
+        else {
+            const bytes = viewBytes(event.data);
+            if (bytes)
+                deliver(bytes);
+        }
+    };
+    socket.onclose = (event) => {
+        const abnormal = event.code >= 3000 || event.code === 1006 || event.code === 1011;
+        end(abnormal ? 'error' : 'closed', event.reason || (abnormal ? UNREACHABLE : undefined));
+    };
+    socket.onerror = () => end('error', UNREACHABLE);
+    options.signal?.addEventListener('abort', close, { once: true });
+    report('connecting');
+    return {
+        authorization,
+        socket,
+        sendInput: (data) => send({ type: 'stdin', data }),
+        resize: (cols, rows) => send({ type: 'resize', cols, rows }),
+        close,
+    };
+}
+/** Text frames are JSON control messages; anything that is not JSON is terminal output. */
+function parseTextFrame(text) {
+    const payload = tryParseJson(text);
+    if (payload === undefined)
+        return { kind: 'data', bytes: encoder.encode(text) };
+    if (typeof payload !== 'object' || payload === null || Array.isArray(payload)) {
+        return { kind: 'control' };
+    }
+    const frame = payload;
+    if (frame.type === 'error') {
+        const message = typeof frame.message === 'string' ? frame.message : undefined;
+        return { kind: 'error', message: message ?? 'Terminal connection failed.' };
+    }
+    if (frame.type === 'exit') {
+        return { kind: 'exit', code: typeof frame.code === 'number' ? frame.code : null };
+    }
+    return { kind: 'control' };
+}
+function viewBytes(data) {
+    if (data instanceof ArrayBuffer)
+        return new Uint8Array(data);
+    if (ArrayBuffer.isView(data)) {
+        return new Uint8Array(data.buffer, data.byteOffset, data.byteLength);
+    }
+    return undefined;
+}
+function closeQuietly(socket) {
+    try {
+        socket.close();
+    }
+    catch {
+        // Already closing or closed.
+    }
+}
+//# sourceMappingURL=session.js.map

package/dist/routes/node/actions/terminal/session.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"session.js","sourceRoot":"","sources":["../../../../../src/routes/node/actions/terminal/session.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAC;AASzD,MAAM,eAAe,GAAG,CAAC,CAAC;AAC1B,MAAM,6BAA6B,GAAG,KAAM,CAAC;AAC7C,MAAM,WAAW,GAAG,oCAAoC,CAAC;AAEzD,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAC;AAUlC;;;GAGG;AACH,MAAM,UAAU,mBAAmB,CACjC,MAAiB,EACjB,GAAW,EACX,aAAyC,EACzC,OAA4B;IAE5B,IAAI,KAAK,GAAU,YAAY,CAAC;IAChC,MAAM,MAAM,GAAG,CAAC,MAAsB,EAAE,MAAe,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAE/F,MAAM,OAAO,GAAG,UAAU,CACxB,GAAG,EAAE,CAAC,GAAG,CAAC,OAAO,EAAE,4CAA4C,CAAC,EAChE,OAAO,CAAC,SAAS,IAAI,6BAA6B,CACnD,CAAC;IAEF,sDAAsD;IACtD,SAAS,GAAG,CAAC,MAA0B,EAAE,MAAe;QACtD,IAAI,KAAK,KAAK,QAAQ;YAAE,OAAO;QAC/B,KAAK,GAAG,QAAQ,CAAC;QACjB,YAAY,CAAC,OAAO,CAAC,CAAC;QACtB,OAAO,CAAC,MAAM,EAAE,mBAAmB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QACpD,MAAM,CAAC,MAAM,GAAG,MAAM,CAAC,SAAS,GAAG,MAAM,CAAC,OAAO,GAAG,MAAM,CAAC,OAAO,GAAG,IAAI,CAAC;QAC1E,YAAY,CAAC,MAAM,CAAC,CAAC;QACrB,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACzB,CAAC;IAED,SAAS,KAAK;QACZ,GAAG,CAAC,QAAQ,CAAC,CAAC;IAChB,CAAC;IAED,SAAS,SAAS;QAChB,IAAI,KAAK,KAAK,YAAY;YAAE,OAAO;QACnC,KAAK,GAAG,WAAW,CAAC;QACpB,YAAY,CAAC,OAAO,CAAC,CAAC;QACtB,MAAM,CAAC,WAAW,CAAC,CAAC;IACtB,CAAC;IAED,SAAS,IAAI,CAAC,KAA8B;QAC1C,IAAI,MAAM,CAAC,UAAU,KAAK,eAAe;YAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;IAChF,CAAC;IAED,wFAAwF;IACxF,SAAS,OAAO,CAAC,KAAiB;QAChC,IAAI,KAAK,KAAK,QAAQ;YAAE,OAAO;QAC/B,SAAS,EAAE,CAAC;QACZ,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACxB,CAAC;IAED,SAAS,OAAO,CAAC,KAAgB;QAC/B,IAAI,KAAK,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;YAC3B,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;YAC5B,OAAO;QACT,CAAC;QACD,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;YAC1B,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YACrB,OAAO;QACT,CAAC;QACD,SAAS,EAAE,CAAC;QACZ,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM;YAAE,OAAO,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC1D,CAAC;IAED,MAAM,CAAC,UAAU,GAAG,aAAa,CAAC;IAClC,MAAM,CAAC,MAAM,GAAG,GAAG,EAAE,CACnB,MAAM,CAAC,IAAI,CACT,IAAI,CAAC,SAAS,CAAC;QACb,IAAI,EAAE,WAAW;QACjB,IAAI,EAAE;YACJ,UAAU,EAAE,GAAG;YACf,OAAO,EAAE,aAAa,CAAC,OAAO;YAC9B,SAAS,EAAE,aAAa,CAAC,SAAS;YAClC,EAAE,EAAE,OAAO,CAAC,EAAE;YACd,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,IAAI,EAAE,OAAO,CAAC,IAAI;SACnB;KACF,CAAC,CACH,CAAC;IACJ,MAAM,CAAC,SAAS,GAAG,CAAC,KAAmB,EAAE,EAAE;QACzC,IAAI,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YACnC,OAAO,CAAC,cAAc,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;QACtC,CAAC;aAAM,IAAI,OAAO,IAAI,KAAK,WAAW,IAAI,KAAK,CAAC,IAAI,YAAY,IAAI,EAAE,CAAC;YACrE,KAAK,KAAK,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QAClF,CAAC;aAAM,CAAC;YACN,MAAM,KAAK,GAAG,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YACpC,IAAI,KAAK;gBAAE,OAAO,CAAC,KAAK,CAAC,CAAC;QAC5B,CAAC;IACH,CAAC,CAAC;IACF,MAAM,CAAC,OAAO,GAAG,CAAC,KAAiB,EAAE,EAAE;QACrC,MAAM,QAAQ,GAAG,KAAK,CAAC,IAAI,IAAI,IAAI,IAAI,KAAK,CAAC,IAAI,KAAK,IAAI,IAAI,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC;QAClF,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,EAAE,KAAK,CAAC,MAAM,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC;IAC3F,CAAC,CAAC;IACF,MAAM,CAAC,OAAO,GAAG,GAAG,EAAE,CAAC,GAAG,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;IACjD,OAAO,CAAC,MAAM,EAAE,gBAAgB,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IACjE,MAAM,CAAC,YAAY,CAAC,CAAC;IAErB,OAAO;QACL,aAAa;QACb,MAAM;QACN,SAAS,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QAClD,MAAM,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;QAC5D,KAAK;KACN,CAAC;AACJ,CAAC;AAED,2FAA2F;AAC3F,SAAS,cAAc,CAAC,IAAY;IAClC,MAAM,OAAO,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;IACnC,IAAI,OAAO,KAAK,SAAS;QAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;IAChF,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QAC9E,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;IAC7B,CAAC;IACD,MAAM,KAAK,GAAG,OAAgE,CAAC;IAC/E,IAAI,KAAK,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;QAC3B,MAAM,OAAO,GAAG,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;QAC9E,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,IAAI,6BAA6B,EAAE,CAAC;IAC9E,CAAC;IACD,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;QAC1B,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IACpF,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;AAC7B,CAAC;AAED,SAAS,SAAS,CAAC,IAAa;IAC9B,IAAI,IAAI,YAAY,WAAW;QAAE,OAAO,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC;IAC7D,IAAI,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;QAC7B,OAAO,IAAI,UAAU,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;IACvE,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,YAAY,CAAC,MAAiB;IACrC,IAAI,CAAC;QACH,MAAM,CAAC,KAAK,EAAE,CAAC;IACjB,CAAC;IAAC,MAAM,CAAC;QACP,6BAA6B;IAC/B,CAAC;AACH,CAAC"}

package/dist/routes/node/createNodeJob.d.ts

@@ -0,0 +1,3 @@
+import type { NodeJobApi, NodeJobContext } from './types.js';
+export declare function createNodeJob(context: NodeJobContext): NodeJobApi;
+//# sourceMappingURL=createNodeJob.d.ts.map

package/dist/routes/node/createNodeJob.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"createNodeJob.d.ts","sourceRoot":"","sources":["../../../src/routes/node/createNodeJob.ts"],"names":[],"mappings":"AAsBA,OAAO,KAAK,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAE7D,wBAAgB,aAAa,CAAC,OAAO,EAAE,cAAc,GAAG,UAAU,CAgCjE"}

package/dist/routes/node/createNodeJob.js

@@ -0,0 +1,39 @@
+import { createSshCommand } from '@nosana/ssh';
+import { nodeJobDefinition, nodeJobEndpoints, nodeJobGroup, nodeJobOperation, nodeJobOperations, nodeJobResults, nodeJobStats, restartNodeJobGroup, restartNodeJobOperation, setNodeJobDefinition, stopNodeJob, stopNodeJobGroup, stopNodeJobOperation, } from './actions/nodeJob/index.js';
+import { nodeJobSshAdd, nodeJobSshKeys, nodeJobSshRemove } from './actions/nodeJobSsh/index.js';
+import { nodeJobInfoStream, nodeJobStatsStream } from './actions/nodeJobStreams/index.js';
+import { nodeJobLogs, nodeJobStatus } from './actions/nodeSocket/index.js';
+import { openNodeJobTerminal } from './actions/terminal/openTerminal.js';
+export function createNodeJob(context) {
+    const { client, job, node } = context;
+    const target = { job, node, nodeDomain: context.domain };
+    return {
+        address: job,
+        node,
+        definition: () => nodeJobDefinition(client, job),
+        setDefinition: (definition) => setNodeJobDefinition(client, job, definition),
+        results: () => nodeJobResults(client, job),
+        operations: () => nodeJobOperations(client, job),
+        operation: (op) => nodeJobOperation(client, job, op),
+        group: (group) => nodeJobGroup(client, job, group),
+        restartGroup: (group) => restartNodeJobGroup(client, job, group),
+        restartOperation: (group, op) => restartNodeJobOperation(client, job, group, op),
+        stopGroup: (group) => stopNodeJobGroup(client, job, group),
+        stopOperation: (group, op) => stopNodeJobOperation(client, job, group, op),
+        stop: () => stopNodeJob(client, job),
+        endpoints: () => nodeJobEndpoints(client, job),
+        stats: (query) => nodeJobStats(client, job, query),
+        streamInfo: (handlers) => nodeJobInfoStream(client, job, handlers),
+        streamStats: (handlers, query) => nodeJobStatsStream(client, job, handlers, query),
+        logs: (handlers, filter, options) => nodeJobLogs(context, handlers, filter, options),
+        status: (handlers, options) => nodeJobStatus(context, handlers, options),
+        ssh: {
+            keys: (options) => nodeJobSshKeys(client, job, options),
+            add: (publicKey, options) => nodeJobSshAdd(client, job, publicKey, options),
+            remove: (publicKey, options) => nodeJobSshRemove(client, job, publicKey, options),
+            command: (options) => createSshCommand(target, options),
+        },
+        terminal: (options) => openNodeJobTerminal(context, options),
+    };
+}
+//# sourceMappingURL=createNodeJob.js.map

package/dist/routes/node/createNodeJob.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"createNodeJob.js","sourceRoot":"","sources":["../../../src/routes/node/createNodeJob.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAE/C,OAAO,EACL,iBAAiB,EACjB,gBAAgB,EAChB,YAAY,EACZ,gBAAgB,EAChB,iBAAiB,EACjB,cAAc,EACd,YAAY,EACZ,mBAAmB,EACnB,uBAAuB,EACvB,oBAAoB,EACpB,WAAW,EACX,gBAAgB,EAChB,oBAAoB,GACrB,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAAE,aAAa,EAAE,cAAc,EAAE,gBAAgB,EAAE,MAAM,+BAA+B,CAAC;AAChG,OAAO,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,MAAM,mCAAmC,CAAC;AAC1F,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,+BAA+B,CAAC;AAC3E,OAAO,EAAE,mBAAmB,EAAE,MAAM,oCAAoC,CAAC;AAIzE,MAAM,UAAU,aAAa,CAAC,OAAuB;IACnD,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,OAAO,CAAC;IACtC,MAAM,MAAM,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC;IAEzD,OAAO;QACL,OAAO,EAAE,GAAG;QACZ,IAAI;QACJ,UAAU,EAAE,GAAG,EAAE,CAAC,iBAAiB,CAAC,MAAM,EAAE,GAAG,CAAC;QAChD,aAAa,EAAE,CAAC,UAAU,EAAE,EAAE,CAAC,oBAAoB,CAAC,MAAM,EAAE,GAAG,EAAE,UAAU,CAAC;QAC5E,OAAO,EAAE,GAAG,EAAE,CAAC,cAAc,CAAC,MAAM,EAAE,GAAG,CAAC;QAC1C,UAAU,EAAE,GAAG,EAAE,CAAC,iBAAiB,CAAC,MAAM,EAAE,GAAG,CAAC;QAChD,SAAS,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,gBAAgB,CAAC,MAAM,EAAE,GAAG,EAAE,EAAE,CAAC;QACpD,KAAK,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,YAAY,CAAC,MAAM,EAAE,GAAG,EAAE,KAAK,CAAC;QAClD,YAAY,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,mBAAmB,CAAC,MAAM,EAAE,GAAG,EAAE,KAAK,CAAC;QAChE,gBAAgB,EAAE,CAAC,KAAK,EAAE,EAAE,EAAE,EAAE,CAAC,uBAAuB,CAAC,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE,CAAC;QAChF,SAAS,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,gBAAgB,CAAC,MAAM,EAAE,GAAG,EAAE,KAAK,CAAC;QAC1D,aAAa,EAAE,CAAC,KAAK,EAAE,EAAE,EAAE,EAAE,CAAC,oBAAoB,CAAC,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE,CAAC;QAC1E,IAAI,EAAE,GAAG,EAAE,CAAC,WAAW,CAAC,MAAM,EAAE,GAAG,CAAC;QACpC,SAAS,EAAE,GAAG,EAAE,CAAC,gBAAgB,CAAC,MAAM,EAAE,GAAG,CAAC;QAC9C,KAAK,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,YAAY,CAAC,MAAM,EAAE,GAAG,EAAE,KAAK,CAAC;QAClD,UAAU,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC,iBAAiB,CAAC,MAAM,EAAE,GAAG,EAAE,QAAQ,CAAC;QAClE,WAAW,EAAE,CAAC,QAAQ,EAAE,KAAK,EAAE,EAAE,CAAC,kBAAkB,CAAC,MAAM,EAAE,GAAG,EAAE,QAAQ,EAAE,KAAK,CAAC;QAClF,IAAI,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,CAAC,WAAW,CAAC,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,CAAC;QACpF,MAAM,EAAE,CAAC,QAAQ,EAAE,OAAO,EAAE,EAAE,CAAC,aAAa,CAAC,OAAO,EAAE,QAAQ,EAAE,OAAO,CAAC;QACxE,GAAG,EAAE;YACH,IAAI,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,cAAc,CAAC,MAAM,EAAE,GAAG,EAAE,OAAO,CAAC;YACvD,GAAG,EAAE,CAAC,SAAS,EAAE,OAAO,EAAE,EAAE,CAAC,aAAa,CAAC,MAAM,EAAE,GAAG,EAAE,SAAS,EAAE,OAAO,CAAC;YAC3E,MAAM,EAAE,CAAC,SAAS,EAAE,OAAO,EAAE,EAAE,CAAC,gBAAgB,CAAC,MAAM,EAAE,GAAG,EAAE,SAAS,EAAE,OAAO,CAAC;YACjF,OAAO,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,gBAAgB,CAAC,MAAM,EAAE,OAAO,CAAC;SACxD;QACD,QAAQ,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC;KAC7D,CAAC;AACJ,CAAC"}

package/dist/routes/node/index.d.ts

@@ -0,0 +1,8 @@
+import type { NodeRouteDeps, NosanaNodeApi } from './types.js';
+export type * from './types.js';
+/**
+ * Talks to nodes directly. Each node runs the same API on its own host, checks
+ * the job owner's wallet signature, and knows only about the jobs it runs.
+ */
+export declare function createNosanaNodeApi({ environment, authParams, options }: NodeRouteDeps): NosanaNodeApi;
+//# sourceMappingURL=index.d.ts.map

package/dist/routes/node/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/routes/node/index.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAW,aAAa,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAExE,mBAAmB,YAAY,CAAC;AAEhC;;;GAGG;AACH,wBAAgB,mBAAmB,CAAC,EAAE,WAAW,EAAE,UAAU,EAAE,OAAO,EAAE,EAAE,aAAa,GAAG,aAAa,CActG"}

package/dist/routes/node/index.js

@@ -0,0 +1,21 @@
+import { createNodeClient, nodeDomain } from '../../client/node/index.js';
+import { nodeInfo } from './actions/nodeInfo.js';
+import { createNodeJob } from './createNodeJob.js';
+/**
+ * Talks to nodes directly. Each node runs the same API on its own host, checks
+ * the job owner's wallet signature, and knows only about the jobs it runs.
+ */
+export function createNosanaNodeApi({ environment, authParams, options }) {
+    const domain = nodeDomain(environment, options);
+    const authorize = authParams?.generate;
+    return (address) => {
+        const client = createNodeClient(environment, address, authParams, options);
+        return {
+            address,
+            url: client.connection.baseUrl,
+            info: () => nodeInfo(client),
+            job: (job) => createNodeJob({ client, environment, domain, authorize, node: address, job }),
+        };
+    };
+}
+//# sourceMappingURL=index.js.map

package/dist/routes/node/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/routes/node/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,UAAU,EAAE,MAAM,4BAA4B,CAAC;AAC1E,OAAO,EAAE,QAAQ,EAAE,MAAM,uBAAuB,CAAC;AACjD,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAMnD;;;GAGG;AACH,MAAM,UAAU,mBAAmB,CAAC,EAAE,WAAW,EAAE,UAAU,EAAE,OAAO,EAAiB;IACrF,MAAM,MAAM,GAAG,UAAU,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;IAChD,MAAM,SAAS,GAAG,UAAU,EAAE,QAAQ,CAAC;IAEvC,OAAO,CAAC,OAAO,EAAW,EAAE;QAC1B,MAAM,MAAM,GAAG,gBAAgB,CAAC,WAAW,EAAE,OAAO,EAAE,UAAU,EAAE,OAAO,CAAC,CAAC;QAE3E,OAAO;YACL,OAAO;YACP,GAAG,EAAE,MAAM,CAAC,UAAU,CAAC,OAAO;YAC9B,IAAI,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC;YAC5B,GAAG,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,aAAa,CAAC,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC;SAC5F,CAAC;IACJ,CAAC,CAAC;AACJ,CAAC"}

package/dist/routes/node/types.d.ts

@@ -0,0 +1,148 @@
+import type { FlowState, JobDefinition, NodeApiSchema } from '@nosana/types';
+import type { SshCommandOptions, SshConnectionDescriptor } from '@nosana/ssh';
+import type { NodeClient } from '../../client/node/index.js';
+import type { CreateNosanaApiOptions, NosanaNetwork, SignedHeaderAuth, StreamLifecycleHandlers, StreamSubscription } from '../../types.js';
+type Schemas = NodeApiSchema.components['schemas'];
+export type NodeInfo = Schemas['NodeInfo'];
+export type NodeJobInfo = Schemas['JobInfo'];
+export type NodeOperationStatuses = Schemas['OperationStatuses'];
+export type NodeJobEndpoints = Schemas['JobEndpoints'];
+export type NodeTaskStat = Schemas['TaskStat'];
+/** One log line from the job's task manager, as streamed over `/flog`. */
+export type NodeTaskLog = Schemas['TaskLog'];
+export type NodeSshAuthorization = Schemas['SshAuthorization'];
+export type NodeSshAuthorizedKey = Schemas['SshAuthorizedKey'];
+export type NodeSshRevocation = Schemas['SshRevocation'];
+export interface NodeStatsQuery {
+    /** Seconds between samples. */
+    interval?: number;
+    /** Unix milliseconds. */
+    start?: number;
+    end?: number;
+}
+export interface NodeLogsFilter {
+    group?: string;
+    opId?: string;
+    type?: string;
+}
+export type NodeStreamSubscription = StreamSubscription;
+export interface NodeStreamHandlers<T> extends StreamLifecycleHandlers {
+    onData: (data: T) => void;
+}
+/**
+ * Signs a message the way the API's signer does, answering with the standard
+ * `message:base58-signature` authorization string. Lets a deployment's wallet
+ * sign for its jobs, through the deployment manager, instead of the client's.
+ */
+export type NodeAuthorizationProvider = SignedHeaderAuth['generate'];
+export interface NodeSshKeyOptions {
+    signal?: AbortSignal;
+}
+export interface NodeSshAddKeyOptions extends NodeSshKeyOptions {
+    /** Omit for access until the key is removed or the job ends. */
+    expiresAt?: Date;
+}
+/** SSH access to one job, mirroring `deployment.ssh`. */
+export interface NodeJobSsh {
+    /** The keys currently allowed to reach the job, with their expiry when temporary. */
+    keys(options?: NodeSshKeyOptions): Promise<NodeSshAuthorizedKey[]>;
+    add(publicKey: string, options?: NodeSshAddKeyOptions): Promise<NodeSshAuthorization>;
+    remove(publicKey: string, options?: NodeSshKeyOptions): Promise<NodeSshRevocation>;
+    /** The `ssh` command that reaches the job; `identityFile` picks the private key to connect with. */
+    command(options?: SshCommandOptions): SshConnectionDescriptor;
+}
+export type TerminalStatus = 'authorizing' | 'connecting' | 'connected' | 'closed' | 'error';
+/** A signed, short-lived permission the node checks before opening a terminal. */
+export interface TerminalAuthorizationGrant {
+    message: string;
+    /** Base64 of the raw 64-byte signature over `message`. */
+    signature: string;
+    expiresAt: string;
+}
+export interface TerminalSession {
+    readonly authorization: TerminalAuthorizationGrant;
+    readonly socket: WebSocket;
+    sendInput(data: string): void;
+    resize(cols: number, rows: number): void;
+    close(): void;
+}
+export interface NodeSocketOptions {
+    authorizationProvider?: NodeAuthorizationProvider;
+    webSocketFactory?: (url: string) => WebSocket;
+}
+export interface NodeTerminalOptions extends NodeSocketOptions {
+    cols: number;
+    rows: number;
+    /** Attach to one operation of the job instead of opening a shell. */
+    op?: string;
+    /** Lifetime of the signed grant; defaults to four minutes and is capped at five. */
+    ttlMs?: number;
+    /** How long to wait for the node's first frame; defaults to ten seconds. */
+    timeoutMs?: number;
+    signal?: AbortSignal;
+    onData: (data: Uint8Array) => void;
+    onStatus?: (status: TerminalStatus, detail?: string) => void;
+    onExit?: (code: number | null) => void;
+}
+/** Everything the node knows about one job it runs. */
+export interface NodeJobApi {
+    readonly address: string;
+    readonly node: string;
+    definition(): Promise<JobDefinition>;
+    /** Accepted only while the job waits for its definition. */
+    setDefinition(definition: JobDefinition): Promise<void>;
+    /** The finished flow; the node hands it over once and marks it collected. */
+    results(): Promise<FlowState>;
+    operations(): Promise<NodeOperationStatuses>;
+    operation(op: string): Promise<string>;
+    /** Status of one group's operations; the current group when none is named. */
+    group(group?: string): Promise<NodeOperationStatuses>;
+    restartGroup(group: string): Promise<void>;
+    restartOperation(group: string, op: string): Promise<void>;
+    stopGroup(group: string): Promise<void>;
+    stopOperation(group: string, op: string): Promise<void>;
+    stop(): Promise<void>;
+    endpoints(): Promise<NodeJobEndpoints>;
+    stats(query?: NodeStatsQuery): Promise<NodeTaskStat[]>;
+    /** Server-sent events: the flow and task status, whenever they change. */
+    streamInfo(handlers: NodeStreamHandlers<NodeJobInfo>): NodeStreamSubscription;
+    streamStats(handlers: NodeStreamHandlers<NodeTaskStat[]>, query?: Pick<NodeStatsQuery, 'interval'>): NodeStreamSubscription;
+    /** Task manager logs over WebSocket: history first, then live. */
+    logs(handlers: NodeStreamHandlers<NodeTaskLog>, filter?: NodeLogsFilter, options?: NodeSocketOptions): NodeStreamSubscription;
+    /** The node's state updates for this job over WebSocket. */
+    status(handlers: NodeStreamHandlers<unknown>, options?: NodeSocketOptions): NodeStreamSubscription;
+    ssh: NodeJobSsh;
+    /** Opens a web terminal into the job; progress arrives through `onStatus`. */
+    terminal(options: NodeTerminalOptions): Promise<TerminalSession>;
+}
+export interface NodeApi {
+    readonly address: string;
+    readonly url: string;
+    /** Public: what the node is, what it runs on and what it holds. */
+    info(): Promise<NodeInfo>;
+    job(address: string): NodeJobApi;
+}
+/** Addresses one node. Nothing is fetched until a method is called. */
+export type NosanaNodeApi = (address: string) => NodeApi;
+export interface NodeRouteDeps {
+    environment: NosanaNetwork;
+    /**
+     * Signs the `authorization` header a node verifies against the job owner. A
+     * wallet signs directly; an API-key caller uses a client-manager-backed signer.
+     */
+    authParams: SignedHeaderAuth | undefined;
+    options?: CreateNosanaApiOptions;
+}
+/** What every action on one job needs, resolved once when the node is addressed. */
+export interface NodeJobContext {
+    client: NodeClient;
+    environment: NosanaNetwork;
+    /** The domain the node answers under; also where its SSH proxy lives. */
+    domain: string;
+    /** Signs on behalf of the API's wallet; absent when none is configured. */
+    authorize: NodeAuthorizationProvider | undefined;
+    node: string;
+    job: string;
+}
+export {};
+//# sourceMappingURL=types.d.ts.map

package/dist/routes/node/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/routes/node/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAC7E,OAAO,KAAK,EAAE,iBAAiB,EAAE,uBAAuB,EAAE,MAAM,aAAa,CAAC;AAC9E,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,4BAA4B,CAAC;AAC7D,OAAO,KAAK,EACV,sBAAsB,EACtB,aAAa,EACb,gBAAgB,EAChB,uBAAuB,EACvB,kBAAkB,EACnB,MAAM,gBAAgB,CAAC;AAExB,KAAK,OAAO,GAAG,aAAa,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;AAEnD,MAAM,MAAM,QAAQ,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;AAC3C,MAAM,MAAM,WAAW,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC;AAC7C,MAAM,MAAM,qBAAqB,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAAC;AACjE,MAAM,MAAM,gBAAgB,GAAG,OAAO,CAAC,cAAc,CAAC,CAAC;AACvD,MAAM,MAAM,YAAY,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;AAC/C,0EAA0E;AAC1E,MAAM,MAAM,WAAW,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC;AAC7C,MAAM,MAAM,oBAAoB,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAAC;AAC/D,MAAM,MAAM,oBAAoB,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAAC;AAC/D,MAAM,MAAM,iBAAiB,GAAG,OAAO,CAAC,eAAe,CAAC,CAAC;AAEzD,MAAM,WAAW,cAAc;IAC7B,+BAA+B;IAC/B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,yBAAyB;IACzB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,cAAc;IAC7B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,MAAM,MAAM,sBAAsB,GAAG,kBAAkB,CAAC;AAExD,MAAM,WAAW,kBAAkB,CAAC,CAAC,CAAE,SAAQ,uBAAuB;IACpE,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,KAAK,IAAI,CAAC;CAC3B;AAED;;;;GAIG;AACH,MAAM,MAAM,yBAAyB,GAAG,gBAAgB,CAAC,UAAU,CAAC,CAAC;AAErE,MAAM,WAAW,iBAAiB;IAChC,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB;AAED,MAAM,WAAW,oBAAqB,SAAQ,iBAAiB;IAC7D,gEAAgE;IAChE,SAAS,CAAC,EAAE,IAAI,CAAC;CAClB;AAED,yDAAyD;AACzD,MAAM,WAAW,UAAU;IACzB,qFAAqF;IACrF,IAAI,CAAC,OAAO,CAAC,EAAE,iBAAiB,GAAG,OAAO,CAAC,oBAAoB,EAAE,CAAC,CAAC;IACnE,GAAG,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,oBAAoB,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAAC;IACtF,MAAM,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,iBAAiB,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAAC;IACnF,oGAAoG;IACpG,OAAO,CAAC,OAAO,CAAC,EAAE,iBAAiB,GAAG,uBAAuB,CAAC;CAC/D;AAED,MAAM,MAAM,cAAc,GAAG,aAAa,GAAG,YAAY,GAAG,WAAW,GAAG,QAAQ,GAAG,OAAO,CAAC;AAE7F,kFAAkF;AAClF,MAAM,WAAW,0BAA0B;IACzC,OAAO,EAAE,MAAM,CAAC;IAChB,0DAA0D;IAC1D,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,aAAa,EAAE,0BAA0B,CAAC;IACnD,QAAQ,CAAC,MAAM,EAAE,SAAS,CAAC;IAC3B,SAAS,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACzC,KAAK,IAAI,IAAI,CAAC;CACf;AAED,MAAM,WAAW,iBAAiB;IAChC,qBAAqB,CAAC,EAAE,yBAAyB,CAAC;IAClD,gBAAgB,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,SAAS,CAAC;CAC/C;AAED,MAAM,WAAW,mBAAoB,SAAQ,iBAAiB;IAC5D,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,qEAAqE;IACrE,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,oFAAoF;IACpF,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,4EAA4E;IAC5E,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,MAAM,EAAE,CAAC,IAAI,EAAE,UAAU,KAAK,IAAI,CAAC;IACnC,QAAQ,CAAC,EAAE,CAAC,MAAM,EAAE,cAAc,EAAE,MAAM,CAAC,EAAE,MAAM,KAAK,IAAI,CAAC;IAC7D,MAAM,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,KAAK,IAAI,CAAC;CACxC;AAED,uDAAuD;AACvD,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,UAAU,IAAI,OAAO,CAAC,aAAa,CAAC,CAAC;IACrC,4DAA4D;IAC5D,aAAa,CAAC,UAAU,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACxD,6EAA6E;IAC7E,OAAO,IAAI,OAAO,CAAC,SAAS,CAAC,CAAC;IAC9B,UAAU,IAAI,OAAO,CAAC,qBAAqB,CAAC,CAAC;IAC7C,SAAS,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IACvC,8EAA8E;IAC9E,KAAK,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,qBAAqB,CAAC,CAAC;IACtD,YAAY,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC3C,gBAAgB,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC3D,SAAS,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACxC,aAAa,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACxD,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IACtB,SAAS,IAAI,OAAO,CAAC,gBAAgB,CAAC,CAAC;IACvC,KAAK,CAAC,KAAK,CAAC,EAAE,cAAc,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC,CAAC;IACvD,0EAA0E;IAC1E,UAAU,CAAC,QAAQ,EAAE,kBAAkB,CAAC,WAAW,CAAC,GAAG,sBAAsB,CAAC;IAC9E,WAAW,CACT,QAAQ,EAAE,kBAAkB,CAAC,YAAY,EAAE,CAAC,EAC5C,KAAK,CAAC,EAAE,IAAI,CAAC,cAAc,EAAE,UAAU,CAAC,GACvC,sBAAsB,CAAC;IAC1B,kEAAkE;IAClE,IAAI,CACF,QAAQ,EAAE,kBAAkB,CAAC,WAAW,CAAC,EACzC,MAAM,CAAC,EAAE,cAAc,EACvB,OAAO,CAAC,EAAE,iBAAiB,GAC1B,sBAAsB,CAAC;IAC1B,4DAA4D;IAC5D,MAAM,CAAC,QAAQ,EAAE,kBAAkB,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC,EAAE,iBAAiB,GAAG,sBAAsB,CAAC;IACnG,GAAG,EAAE,UAAU,CAAC;IAChB,8EAA8E;IAC9E,QAAQ,CAAC,OAAO,EAAE,mBAAmB,GAAG,OAAO,CAAC,eAAe,CAAC,CAAC;CAClE;AAED,MAAM,WAAW,OAAO;IACtB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,mEAAmE;IACnE,IAAI,IAAI,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC1B,GAAG,CAAC,OAAO,EAAE,MAAM,GAAG,UAAU,CAAC;CAClC;AAED,uEAAuE;AACvE,MAAM,MAAM,aAAa,GAAG,CAAC,OAAO,EAAE,MAAM,KAAK,OAAO,CAAC;AAEzD,MAAM,WAAW,aAAa;IAC5B,WAAW,EAAE,aAAa,CAAC;IAC3B;;;OAGG;IACH,UAAU,EAAE,gBAAgB,GAAG,SAAS,CAAC;IACzC,OAAO,CAAC,EAAE,sBAAsB,CAAC;CAClC;AAED,oFAAoF;AACpF,MAAM,WAAW,cAAc;IAC7B,MAAM,EAAE,UAAU,CAAC;IACnB,WAAW,EAAE,aAAa,CAAC;IAC3B,yEAAyE;IACzE,MAAM,EAAE,MAAM,CAAC;IACf,2EAA2E;IAC3E,SAAS,EAAE,yBAAyB,GAAG,SAAS,CAAC;IACjD,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,EAAE,MAAM,CAAC;CACb"}

package/dist/routes/node/types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=types.js.map

package/dist/routes/node/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../src/routes/node/types.ts"],"names":[],"mappings":""}

package/dist/types.d.ts

@@ -2,8 +2,10 @@ import type { ClientManagerClient } from './client/client-manager/index.js';
 import type { BlockchainIndexerClient } from './client/blockchain-indexer/index.js';
 import type { HostManagerClient } from './client/host-manager/index.js';
 import type { DeploymentManagerClient } from './client/deployment-manager/index.js';
+import type { GenerateOptions } from '@nosana/authorization';
 import { TopupVaultOptions } from './routes/deployments/types.js';
-export { NosanaNetwork } from '@nosana/types';
+import { NosanaNetwork } from '@nosana/types';
+export { NosanaNetwork };
 export type { NosanaNetwork as NosanaNetworkType } from '@nosana/types';
 export interface SolanaConfig {
     network: string;
@@ -26,15 +28,28 @@ export type ExternalSolanaFunctions = {
 };
 export type SignerAuth = {
     identifier: string;
-    generate: (message: string) => Promise<string>;
+    generate: SignedHeaderAuth['generate'];
     solana: ExternalSolanaFunctions;
 };
+/**
+ * The minimal auth a node needs. A node verifies the signed `authorization`
+ * header against the job owner's key, so only a header generator is required;
+ * `x-user-id` is optional and unused by nodes. `SignerAuth` satisfies it, and
+ * an API-key caller supplies one backed by the client manager's signing service.
+ */
+export type SignedHeaderAuth = {
+    identifier?: string;
+    /** Terminal grants request fresh signing without touching the normal auth cache. */
+    generate: (message: string, options?: Pick<GenerateOptions, 'skipCache'>) => Promise<string>;
+};
 export type CreateNosanaApiOptions = Partial<{
     client_manager_url: string;
     host_manager_url: string;
     blockchain_indexer_url: string;
     /** Under API key auth this becomes the client manager proxy's forwarding target. */
     deployment_manager_url: string;
+    /** Domain under which every node's API answers, as `<address>.<domain>`. */
+    node_domain: string;
     include_credentials: boolean;
 }>;
 export interface Config {
@@ -42,6 +57,7 @@ export interface Config {
     host_manager_url: string;
     blockchain_indexer_url: string;
     deployment_manager_url: string;
+    node_domain: string;
     nos_address: string;
 }
 /**
@@ -53,8 +69,21 @@ export interface NosanaClients {
     blockchainIndexer: BlockchainIndexerClient;
     deploymentManager: DeploymentManagerClient;
 }
+/** An open stream, for as long as the caller wants it. */
+export type StreamSubscription = {
+    close: () => void;
+};
+/** What every stream reports besides its frames. */
+export interface StreamLifecycleHandlers {
+    /** The stream opened, or reopened after dropping: resynchronise from here. */
+    onOpen?: () => void;
+    onError?: (error: unknown) => void;
+}
 export interface DeploymentRouteClients {
     deploymentManager: DeploymentManagerClient;
+    /** Network and options a deployment needs to reach its jobs' nodes directly. */
+    environment: NosanaNetwork;
+    options?: CreateNosanaApiOptions;
 }
 export type DeploymentRouteClientsWithSigner = DeploymentRouteClients & {
     solana: ExternalSolanaFunctions;

package/dist/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,kCAAkC,CAAC;AAC5E,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,sCAAsC,CAAC;AACpF,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,gCAAgC,CAAC;AACxE,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,sCAAsC,CAAC;AACpF,OAAO,EAAE,iBAAiB,EAAE,MAAM,+BAA+B,CAAC;AAGlE,OAAO,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAC9C,YAAY,EAAE,aAAa,IAAI,iBAAiB,EAAE,MAAM,eAAe,CAAC;AAExE,MAAM,WAAW,YAAY;IAC3B,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,MAAM,UAAU,GAAG,MAAM,CAAA;AAE/B;;;GAGG;AACH,MAAM,MAAM,uBAAuB,GAAG;IACpC,iEAAiE;IACjE,UAAU,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,OAAO,CAAC;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAEvE,0EAA0E;IAC1E,yBAAyB,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,iBAAiB,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAE3F,oEAAoE;IACpE,wCAAwC,EAAE,CAAC,WAAW,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;CACpF,CAAA;AAED,MAAM,MAAM,UAAU,GAAG;IACvB,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IAC/C,MAAM,EAAE,uBAAuB,CAAC;CACjC,CAAA;AAED,MAAM,MAAM,sBAAsB,GAAG,OAAO,CAAC;IAC3C,kBAAkB,EAAE,MAAM,CAAC;IAC3B,gBAAgB,EAAE,MAAM,CAAC;IACzB,sBAAsB,EAAE,MAAM,CAAC;IAC/B,oFAAoF;IACpF,sBAAsB,EAAE,MAAM,CAAC;IAC/B,mBAAmB,EAAE,OAAO,CAAC;CAC9B,CAAC,CAAA;AAEF,MAAM,WAAW,MAAM;IACrB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,gBAAgB,EAAE,MAAM,CAAC;IACzB,sBAAsB,EAAE,MAAM,CAAC;IAC/B,sBAAsB,EAAE,MAAM,CAAC;IAC/B,WAAW,EAAE,MAAM,CAAC;CACrB;AAED;;GAEG;AACH,MAAM,WAAW,aAAa;IAC5B,aAAa,EAAE,mBAAmB,CAAC;IACnC,WAAW,EAAE,iBAAiB,CAAC;IAC/B,iBAAiB,EAAE,uBAAuB,CAAC;IAC3C,iBAAiB,EAAE,uBAAuB,CAAC;CAC5C;AAED,MAAM,WAAW,sBAAsB;IACrC,iBAAiB,EAAE,uBAAuB,CAAC;CAC5C;AAED,MAAM,MAAM,gCAAgC,GAAG,sBAAsB,GAAG;IACtE,MAAM,EAAE,uBAAuB,CAAC;CACjC,CAAA"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,kCAAkC,CAAC;AAC5E,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,sCAAsC,CAAC;AACpF,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,gCAAgC,CAAC;AACxE,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,sCAAsC,CAAC;AACpF,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAC7D,OAAO,EAAE,iBAAiB,EAAE,MAAM,+BAA+B,CAAC;AAGlE,OAAO,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAC9C,OAAO,EAAE,aAAa,EAAE,CAAC;AACzB,YAAY,EAAE,aAAa,IAAI,iBAAiB,EAAE,MAAM,eAAe,CAAC;AAExE,MAAM,WAAW,YAAY;IAC3B,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,MAAM,UAAU,GAAG,MAAM,CAAA;AAE/B;;;GAGG;AACH,MAAM,MAAM,uBAAuB,GAAG;IACpC,iEAAiE;IACjE,UAAU,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,OAAO,CAAC;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAEvE,0EAA0E;IAC1E,yBAAyB,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,iBAAiB,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAE3F,oEAAoE;IACpE,wCAAwC,EAAE,CAAC,WAAW,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;CACpF,CAAA;AAED,MAAM,MAAM,UAAU,GAAG;IACvB,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,gBAAgB,CAAC,UAAU,CAAC,CAAC;IACvC,MAAM,EAAE,uBAAuB,CAAC;CACjC,CAAA;AAED;;;;;GAKG;AACH,MAAM,MAAM,gBAAgB,GAAG;IAC7B,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,oFAAoF;IACpF,QAAQ,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,IAAI,CAAC,eAAe,EAAE,WAAW,CAAC,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;CAC9F,CAAA;AAED,MAAM,MAAM,sBAAsB,GAAG,OAAO,CAAC;IAC3C,kBAAkB,EAAE,MAAM,CAAC;IAC3B,gBAAgB,EAAE,MAAM,CAAC;IACzB,sBAAsB,EAAE,MAAM,CAAC;IAC/B,oFAAoF;IACpF,sBAAsB,EAAE,MAAM,CAAC;IAC/B,4EAA4E;IAC5E,WAAW,EAAE,MAAM,CAAC;IACpB,mBAAmB,EAAE,OAAO,CAAC;CAC9B,CAAC,CAAA;AAEF,MAAM,WAAW,MAAM;IACrB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,gBAAgB,EAAE,MAAM,CAAC;IACzB,sBAAsB,EAAE,MAAM,CAAC;IAC/B,sBAAsB,EAAE,MAAM,CAAC;IAC/B,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;CACrB;AAED;;GAEG;AACH,MAAM,WAAW,aAAa;IAC5B,aAAa,EAAE,mBAAmB,CAAC;IACnC,WAAW,EAAE,iBAAiB,CAAC;IAC/B,iBAAiB,EAAE,uBAAuB,CAAC;IAC3C,iBAAiB,EAAE,uBAAuB,CAAC;CAC5C;AAED,0DAA0D;AAC1D,MAAM,MAAM,kBAAkB,GAAG;IAAE,KAAK,EAAE,MAAM,IAAI,CAAA;CAAE,CAAC;AAEvD,oDAAoD;AACpD,MAAM,WAAW,uBAAuB;IACtC,8EAA8E;IAC9E,MAAM,CAAC,EAAE,MAAM,IAAI,CAAC;IACpB,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,IAAI,CAAC;CACpC;AAED,MAAM,WAAW,sBAAsB;IACrC,iBAAiB,EAAE,uBAAuB,CAAC;IAC3C,gFAAgF;IAChF,WAAW,EAAE,aAAa,CAAC;IAC3B,OAAO,CAAC,EAAE,sBAAsB,CAAC;CAClC;AAED,MAAM,MAAM,gCAAgC,GAAG,sBAAsB,GAAG;IACtE,MAAM,EAAE,uBAAuB,CAAC;CACjC,CAAA"}

package/dist/types.js

@@ -1,3 +1,4 @@
 // Re-export shared types from @nosana/types
-export { NosanaNetwork } from '@nosana/types';
+import { NosanaNetwork } from '@nosana/types';
+export { NosanaNetwork };
 //# sourceMappingURL=types.js.map

package/dist/types.js.map

@@ -1 +1 @@
-{"version":3,"file":"types.js","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAMA,4CAA4C;AAC5C,OAAO,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC"}
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAOA,4CAA4C;AAC5C,OAAO,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAC9C,OAAO,EAAE,aAAa,EAAE,CAAC"}

package/dist/utils/eventStream.d.ts

@@ -0,0 +1,15 @@
+import type { ClientConnection } from '../client/type.utils.js';
+import type { StreamLifecycleHandlers, StreamSubscription } from '../types.js';
+export interface EventStreamHandlers extends StreamLifecycleHandlers {
+    /** One parsed frame. Frames that are not JSON are dropped before this. */
+    onMessage: (frame: unknown) => void;
+}
+/**
+ * Opens a server-sent event stream addressed and authenticated exactly as an
+ * ordinary request on the same connection. `EventSource` reconnects by itself,
+ * so errors are reported rather than thrown and `onOpen` may fire more than
+ * once. A handler that throws is swallowed with the malformed frames, the
+ * price of never letting one bad frame end the stream.
+ */
+export declare function openEventStream(connection: ClientConnection, path: string, handlers: EventStreamHandlers): StreamSubscription;
+//# sourceMappingURL=eventStream.d.ts.map

package/dist/utils/eventStream.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"eventStream.d.ts","sourceRoot":"","sources":["../../src/utils/eventStream.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAChE,OAAO,KAAK,EAAE,uBAAuB,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AAE/E,MAAM,WAAW,mBAAoB,SAAQ,uBAAuB;IAClE,0EAA0E;IAC1E,SAAS,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,IAAI,CAAC;CACrC;AAED;;;;;;GAMG;AACH,wBAAgB,eAAe,CAC7B,UAAU,EAAE,gBAAgB,EAC5B,IAAI,EAAE,MAAM,EACZ,QAAQ,EAAE,mBAAmB,GAC5B,kBAAkB,CA0BpB"}

package/dist/utils/eventStream.js

@@ -0,0 +1,36 @@
+import { EventSource } from 'eventsource';
+import { tryParseJson } from './json.js';
+/**
+ * Opens a server-sent event stream addressed and authenticated exactly as an
+ * ordinary request on the same connection. `EventSource` reconnects by itself,
+ * so errors are reported rather than thrown and `onOpen` may fire more than
+ * once. A handler that throws is swallowed with the malformed frames, the
+ * price of never letting one bad frame end the stream.
+ */
+export function openEventStream(connection, path, handlers) {
+    const { baseUrl, headers, credentials } = connection;
+    const source = new EventSource(`${baseUrl}${path}`, {
+        fetch: async (input, init) => fetch(input, {
+            ...init,
+            // Under cookie auth there are no headers to copy, so the stream has to
+            // opt into sending the cookie or it authenticates as nobody.
+            ...(credentials ? { credentials } : {}),
+            headers: { ...init.headers, ...(await headers()) },
+        }),
+    });
+    source.onopen = () => handlers.onOpen?.();
+    source.onerror = (error) => handlers.onError?.(error);
+    source.onmessage = ({ data }) => {
+        const frame = tryParseJson(data);
+        if (frame === undefined)
+            return;
+        try {
+            handlers.onMessage(frame);
+        }
+        catch {
+            return;
+        }
+    };
+    return { close: () => source.close() };
+}
+//# sourceMappingURL=eventStream.js.map

package/dist/utils/eventStream.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"eventStream.js","sourceRoot":"","sources":["../../src/utils/eventStream.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAE1C,OAAO,EAAE,YAAY,EAAE,MAAM,WAAW,CAAC;AAUzC;;;;;;GAMG;AACH,MAAM,UAAU,eAAe,CAC7B,UAA4B,EAC5B,IAAY,EACZ,QAA6B;IAE7B,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,GAAG,UAAU,CAAC;IACrD,MAAM,MAAM,GAAG,IAAI,WAAW,CAAC,GAAG,OAAO,GAAG,IAAI,EAAE,EAAE;QAClD,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,CAC3B,KAAK,CAAC,KAAK,EAAE;YACX,GAAG,IAAI;YACP,uEAAuE;YACvE,6DAA6D;YAC7D,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACvC,OAAO,EAAE,EAAE,GAAG,IAAI,CAAC,OAAO,EAAE,GAAG,CAAC,MAAM,OAAO,EAAE,CAAC,EAAE;SACnD,CAAC;KACL,CAAC,CAAC;IAEH,MAAM,CAAC,MAAM,GAAG,GAAG,EAAE,CAAC,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC;IAC1C,MAAM,CAAC,OAAO,GAAG,CAAC,KAAK,EAAE,EAAE,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,KAAK,CAAC,CAAC;IACtD,MAAM,CAAC,SAAS,GAAG,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE;QAC9B,MAAM,KAAK,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;QACjC,IAAI,KAAK,KAAK,SAAS;YAAE,OAAO;QAChC,IAAI,CAAC;YACH,QAAQ,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QAC5B,CAAC;QAAC,MAAM,CAAC;YACP,OAAO;QACT,CAAC;IACH,CAAC,CAAC;IAEF,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,KAAK,EAAE,EAAE,CAAC;AACzC,CAAC"}

package/dist/utils/json.d.ts

@@ -0,0 +1,3 @@
+/** `JSON.parse` that answers `undefined` instead of throwing for text that is not JSON. */
+export declare function tryParseJson(text: string): unknown;
+//# sourceMappingURL=json.d.ts.map

package/dist/utils/json.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"json.d.ts","sourceRoot":"","sources":["../../src/utils/json.ts"],"names":[],"mappings":"AAAA,2FAA2F;AAC3F,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAMlD"}

package/dist/utils/json.js

@@ -0,0 +1,10 @@
+/** `JSON.parse` that answers `undefined` instead of throwing for text that is not JSON. */
+export function tryParseJson(text) {
+    try {
+        return JSON.parse(text);
+    }
+    catch {
+        return undefined;
+    }
+}
+//# sourceMappingURL=json.js.map

package/dist/utils/json.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"json.js","sourceRoot":"","sources":["../../src/utils/json.ts"],"names":[],"mappings":"AAAA,2FAA2F;AAC3F,MAAM,UAAU,YAAY,CAAC,IAAY;IACvC,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC1B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@nosana/api",
-  "version": "2.12.0",
+  "version": "2.13.2",
   "description": "Nosana API module",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
@@ -49,15 +49,19 @@
     "@typescript-eslint/eslint-plugin": "^8.38.0",
     "@typescript-eslint/parser": "^8.38.0",
     "@vitest/coverage-v8": "^4.0.3",
+    "bs58": "^6.0.0",
     "eslint": "^9.31.0",
     "eslint-plugin-import": "^2.32.0",
     "husky": "^9.1.7",
     "openapi-typescript": "^7.8.0",
+    "tweetnacl": "^1.0.3",
     "typescript": "^5.9.3",
     "vitest": "^4.0.3"
   },
   "dependencies": {
-    "@nosana/types": "2.12.0",
+    "@nosana/authorization": "2.13.0",
+    "@nosana/ssh": "2.13.1",
+    "@nosana/types": "2.13.0",
     "eventsource": "^4.1.0",
     "openapi-fetch": "^0.14.0"
   },
@@ -65,5 +69,5 @@
   "engines": {
     "node": ">=20.18.0"
   },
-  "gitHead": "f49551f97cf43aaea5e87ca7f9d6b286a1d45fbf"
+  "gitHead": "90aa04060245fd5f1b0f6bf4aea4b86776a9bfed"
 }