@omnitron-dev/omnitron 0.1.3 → 0.3.0

package/dist/services/secrets.service.js.map

@@ -1 +1 @@
-{"version":3,"file":"secrets.service.js","sourceRoot":"","sources":["../../src/services/secrets.service.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EACL,cAAc,EACd,gBAAgB,EAChB,WAAW,EACX,MAAM,GACP,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AACtC,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAC;AAC9D,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,MAAM,WAAW,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC;AAuBtC,gFAAgF;AAChF,YAAY;AACZ,gFAAgF;AAEhF,MAAM,SAAS,GAAG,aAAa,CAAC;AAChC,MAAM,UAAU,GAAG,EAAE,CAAC,CAAC,WAAW;AAClC,MAAM,WAAW,GAAG,EAAE,CAAC;AACvB,MAAM,SAAS,GAAG,EAAE,CAAC;AACrB,2EAA2E;AAC3E,sEAAsE;AACtE,6DAA6D;AAE7D,gFAAgF;AAChF,UAAU;AACV,gFAAgF;AAEhF,MAAM,OAAO,cAAc;IAIN;IACT;IAJF,KAAK,GAAsB,IAAI,CAAC;IAExC,YACmB,QAAgB,EACzB,UAAkB;QADT,aAAQ,GAAR,QAAQ,CAAQ;QACzB,eAAU,GAAV,UAAU,CAAQ;IACzB,CAAC;IAEJ,8EAA8E;IAC9E,aAAa;IACb,8EAA8E;IAE9E;;;OAGG;IACH,KAAK,CAAC,GAAG,CAAC,GAAW;QACnB,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;QAClC,OAAO,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC;IAC9B,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,GAAG,CAAC,GAAW,EAAE,KAAa;QAClC,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;QAClC,OAAO,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;QACrB,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC3B,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,MAAM,CAAC,GAAW;QACtB,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;QAClC,IAAI,CAAC,CAAC,GAAG,IAAI,OAAO,CAAC;YAAE,OAAO,KAAK,CAAC;QACpC,OAAO,OAAO,CAAC,GAAG,CAAC,CAAC;QACpB,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACzB,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,IAAI;QACR,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;QAClC,OAAO,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC9B,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,MAAM,CAAC,aAAqB,EAAE,aAAqB;QACvD,8BAA8B;QAC9B,MAAM,UAAU,GAAG,IAAI,cAAc,CAAC,IAAI,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC;QACpE,MAAM,OAAO,GAAG,MAAM,UAAU,CAAC,IAAI,EAAE,CAAC;QAExC,iCAAiC;QACjC,MAAM,UAAU,GAAG,IAAI,cAAc,CAAC,IAAI,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC;QACpE,MAAM,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAE/B,sCAAsC;QACtC,IAAI,CAAC,UAAU,GAAG,aAAa,CAAC;QAChC,IAAI,CAAC,KAAK,GAAG,OAAO,CAAC;IACvB,CAAC;IAED;;OAEG;IACH,MAAM;QACJ,OAAO,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACnC,CAAC;IAED,8EAA8E;IAC9E,0BAA0B;IAC1B,8EAA8E;IAEtE,KAAK,CAAC,SAAS,CAAC,IAAY;QAClC,4DAA4D;QAC5D,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,YAAY,EAAE,CAAC;QAC5C,MAAM,QAAQ,GAAG,GAAG,IAAI,CAAC,UAAU,IAAI,SAAS,EAAE,CAAC;QACnD,OAAO,WAAW,CAAC,QAAQ,EAAE,IAAI,EAAE,UAAU,CAAoB,CAAC;IACpE,CAAC;IAEO,KAAK,CAAC,OAAO,CAAC,IAAgB;QACpC,MAAM,IAAI,GAAG,WAAW,CAAC,WAAW,CAAC,CAAC;QACtC,MAAM,EAAE,GAAG,WAAW,CAAC,SAAS,CAAC,CAAC;QAClC,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QAEvC,MAAM,MAAM,GAAG,cAAc,CAAC,SAAS,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC;QAClD,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QAEvC,IAAI,UAAU,GAAG,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC;QACzD,UAAU,IAAI,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAClC,MAAM,GAAG,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC;QAEhC,OAAO;YACL,OAAO,EAAE,CAAC;YACV,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;YAC1B,EAAE,EAAE,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC;YACtB,UAAU;YACV,GAAG,EAAE,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC;SACzB,CAAC;IACJ,CAAC;IAEO,KAAK,CAAC,OAAO,CAAC,QAAyB;QAC7C,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QAC/C,MAAM,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;QAC3C,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QAC7C,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QAEvC,MAAM,QAAQ,GAAG,gBAAgB,CAAC,SAAS,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC;QACtD,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;QAEzB,IAAI,SAAS,GAAG,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,UAAU,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;QACpE,SAAS,IAAI,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAEpC,OAAO,IAAI,CAAC,KAAK,CAAC,SAAS,CAAe,CAAC;IAC7C,CAAC;IAED,8EAA8E;IAC9E,cAAc;IACd,8EAA8E;IAEtE,KAAK,CAAC,IAAI;QAChB,IAAI,IAAI,CAAC,KAAK;YAAE,OAAO,IAAI,CAAC,KAAK,CAAC;QAElC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC/B,IAAI,CAAC,KAAK,GAAG,EAAE,CAAC;YAChB,OAAO,IAAI,CAAC,KAAK,CAAC;QACpB,CAAC;QAED,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;YAClD,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAoB,CAAC;YAEpD,IAAI,QAAQ,CAAC,OAAO,KAAK,CAAC,EAAE,CAAC;gBAC3B,MAAM,IAAI,KAAK,CAAC,yCAAyC,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC;YAC/E,CAAC;YAED,IAAI,CAAC,KAAK,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;YAC1C,OAAO,IAAI,CAAC,KAAK,CAAC;QACpB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAK,GAAa,CAAC,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAC;gBAAE,MAAM,GAAG,CAAC;YAC9D,MAAM,IAAI,KAAK,CAAC,mCAAoC,GAAa,CAAC,OAAO,qBAAqB,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC;QAClH,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,IAAI,CAAC,OAAmB;QACpC,0BAA0B;QAC1B,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACxC,MAAM,KAAK,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAEtC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QAC7C,MAAM,SAAS,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE;YAChE,IAAI,EAAE,KAAK,EAAE,wBAAwB;SACtC,CAAC,CAAC;QAEH,IAAI,CAAC,KAAK,GAAG,OAAO,CAAC;IACvB,CAAC;IAED,8EAA8E;IAC9E,aAAa;IACb,8EAA8E;IAE9E;;;OAGG;IACK,KAAK,CAAC,YAAY;QACxB,IAAI,CAAC;YACH,yBAAyB;YACzB,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,MAAM,MAAM,CAAC,kBAAkB,CAAC,CAAC;YAC9D,IAAI,CAAC;gBACH,MAAM,EAAE,GAAG,MAAM,MAAM,CAAC,iBAAiB,EAAE,MAAM,CAAC,CAAC;gBACnD,IAAI,EAAE,CAAC,IAAI,EAAE;oBAAE,OAAO,EAAE,CAAC,IAAI,EAAE,CAAC;YAClC,CAAC;YAAC,MAAM,CAAC;gBACP,YAAY;YACd,CAAC;YAED,4CAA4C;YAC5C,IAAI,CAAC;gBACH,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,MAAM,CAAC,oBAAoB,CAAC,CAAC;gBACxD,MAAM,MAAM,GAAG,QAAQ,CACrB,4DAA4D,EAC5D,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,CACpC,CAAC;gBACF,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,kCAAkC,CAAC,CAAC;gBAC/D,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC;oBAAE,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC;YAClC,CAAC;YAAC,MAAM,CAAC;gBACP,8BAA8B;YAChC,CAAC;YAED,qBAAqB;YACrB,MAAM,EAAE,GAAG,MAAM,MAAM,CAAC,SAAS,CAAC,CAAC;YACnC,OAAO,EAAE,CAAC,QAAQ,EAAE,CAAC;QACvB,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,6BAA6B,CAAC;QACvC,CAAC;IACH,CAAC;CACF"}
+{"version":3,"file":"secrets.service.js","sourceRoot":"","sources":["../../src/services/secrets.service.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;;;;;;;;;;;;;;AAEH,OAAO,EACL,cAAc,EACd,gBAAgB,EAChB,WAAW,EACX,MAAM,GACP,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AACtC,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AACpD,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AACnC,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,gCAAgC,CAAC;AAC9E,OAAO,EACL,wBAAwB,EACxB,wBAAwB,EACxB,yBAAyB,GAC1B,MAAM,qBAAqB,CAAC;AAE7B,OAAO,EAAE,0BAA0B,EAAE,MAAM,uBAAuB,CAAC;AAEnE,MAAM,WAAW,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC;AAEtC;;;;GAIG;AACH,MAAM,sBAAsB,GAAG,6BAA6B,CAAC;AAuB7D,gFAAgF;AAChF,YAAY;AACZ,gFAAgF;AAEhF,MAAM,SAAS,GAAG,aAAa,CAAC;AAChC,MAAM,UAAU,GAAG,EAAE,CAAC,CAAC,WAAW;AAClC,MAAM,WAAW,GAAG,EAAE,CAAC;AACvB,MAAM,SAAS,GAAG,EAAE,CAAC;AACrB,2EAA2E;AAC3E,sEAAsE;AACtE,6DAA6D;AAE7D,gFAAgF;AAChF,UAAU;AACV,gFAAgF;AAEhF,uDAAuD;AACvD,MAAM,cAAc,GAAG,kBAAkB,CAAC;AAE1C;;;;;;;;GAQG;AACH,MAAM,iBAAiB,GAAG,oBAAoB,CAAC;AAE/C,sDAAsD;AACtD,MAAM,mBAAmB,GAAG,6BAA6B,CAAC;AAGnD,IAAM,cAAc,sBAApB,MAAM,cAAc;IAqB4B,KAAK;IACd,UAAU;IACY,cAAc;IAtBxE,KAAK,GAAsB,IAAI,CAAC;IACxC,4DAA4D;IACpD,SAAS,GAAkB,IAAI,CAAC;IAExC;;;;;;;;;;;;;;OAcG;IACH,YACqD,KAAuB,EAChC,UAAkB,EACI,cAA8B;qBAF3C,KAAK;0BACd,UAAU;8BACY,cAAc;IAC7E,CAAC;IAEJ,8EAA8E;IAC9E,aAAa;IACb,8EAA8E;IAE9E;;;OAGG;IACH,KAAK,CAAC,GAAG,CAAC,GAAW;QACnB,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;QAClC,OAAO,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC;IAC9B,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,GAAG,CAAC,GAAW,EAAE,KAAa;QAClC,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;QAClC,OAAO,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;QACrB,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC3B,CAAC;IAED;;;;;;;;;OASG;IACH,KAAK,CAAC,IAAI,CAAC,IAAY,EAAE,EAAU;QACjC,IAAI,CAAC,IAAI,IAAI,CAAC,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;QACtF,IAAI,IAAI,KAAK,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,IAAI,IAAI,gCAAgC,CAAC,CAAC;QAC3E,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;QAClC,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;QAC5B,IAAI,KAAK,KAAK,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,qBAAqB,IAAI,wBAAwB,CAAC,CAAC;QAC5F,IAAI,EAAE,IAAI,OAAO,EAAE,CAAC;YAClB,MAAM,IAAI,KAAK,CAAC,4BAA4B,EAAE,uEAAuE,CAAC,CAAC;QACzH,CAAC;QACD,OAAO,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC;QACpB,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC3B,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,MAAM,CAAC,GAAW;QACtB,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;QAClC,IAAI,CAAC,CAAC,GAAG,IAAI,OAAO,CAAC;YAAE,OAAO,KAAK,CAAC;QACpC,OAAO,OAAO,CAAC,GAAG,CAAC,CAAC;QACpB,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACzB,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,IAAI;QACR,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;QAClC,OAAO,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC9B,CAAC;IAED;;;OAGG;IACG,AAAN,KAAK,CAAC,MAAM,CAAC,aAAqB,EAAE,aAAqB;QACvD,+DAA+D;QAC/D,gEAAgE;QAChE,2DAA2D;QAC3D,MAAM,UAAU,GAAG,qBAAmB,IAAI,CAAC,KAAK,EAAE,aAAa,EAAE,IAAI,CAAC,cAAc,IAAI,IAAI,CAAC,CAAC;QAC9F,MAAM,OAAO,GAAG,MAAM,UAAU,CAAC,IAAI,EAAE,CAAC;QAExC,0DAA0D;QAC1D,4DAA4D;QAC5D,gDAAgD;QAChD,IAAI,CAAC,UAAU,GAAG,aAAa,CAAC;QAChC,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;QAClB,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC3B,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,MAAM;QACV,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,KAAK,CAAkB,cAAc,CAAC,CAAC;QACzE,IAAI,QAAQ;YAAE,OAAO,IAAI,CAAC;QAC1B,IAAI,IAAI,CAAC,cAAc,IAAI,UAAU,CAAC,IAAI,CAAC,cAAc,CAAC;YAAE,OAAO,IAAI,CAAC;QACxE,OAAO,KAAK,CAAC;IACf,CAAC;IAED,8EAA8E;IAC9E,0BAA0B;IAC1B,8EAA8E;IAEtE,KAAK,CAAC,SAAS,CAAC,IAAY,EAAE,SAAkB;QACtD,4DAA4D;QAC5D,MAAM,EAAE,GAAG,SAAS,IAAI,CAAC,MAAM,IAAI,CAAC,gBAAgB,EAAE,CAAC,CAAC;QACxD,MAAM,QAAQ,GAAG,GAAG,IAAI,CAAC,UAAU,IAAI,EAAE,EAAE,CAAC;QAC5C,OAAO,WAAW,CAAC,QAAQ,EAAE,IAAI,EAAE,UAAU,CAAoB,CAAC;IACpE,CAAC;IAED;;;;;;;;;;;;;;;;;;;;;;;OAuBG;IACK,KAAK,CAAC,gBAAgB;QAC5B,IAAI,IAAI,CAAC,SAAS;YAAE,OAAO,IAAI,CAAC,SAAS,CAAC;QAE1C,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,KAAK,CAAS,iBAAiB,CAAC,CAAC;QACjE,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACpD,IAAI,CAAC,SAAS,GAAG,MAAM,CAAC;YACxB,OAAO,MAAM,CAAC;QAChB,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,cAAc,EAAE,CAAC;QAC3C,MAAM,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,iBAAiB,EAAE,MAAM,CAAC,CAAC;QAClD,IAAI,CAAC,SAAS,GAAG,MAAM,CAAC;QACxB,OAAO,MAAM,CAAC;IAChB,CAAC;IAED;;;;;;OAMG;IACK,KAAK,CAAC,mBAAmB;QAC/B,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;QAC/B,MAAM,IAAI,GAAG,CAAC,CAA4B,EAAE,EAAE;YAC5C,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;gBAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QACrC,CAAC,CAAC;QACF,IAAI,CAAC,MAAM,IAAI,CAAC,gBAAgB,EAAE,CAAC,CAAC;QACpC,IAAI,CAAC,MAAM,IAAI,CAAC,cAAc,EAAE,CAAC,CAAC;QAClC,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC;QACjB,IAAI,CAAC,mBAAmB,CAAC,CAAC;QAC1B,OAAO,CAAC,GAAG,IAAI,CAAC,CAAC;IACnB,CAAC;IAEO,KAAK,CAAC,OAAO,CAAC,IAAgB;QACpC,MAAM,IAAI,GAAG,WAAW,CAAC,WAAW,CAAC,CAAC;QACtC,MAAM,EAAE,GAAG,WAAW,CAAC,SAAS,CAAC,CAAC;QAClC,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QAEvC,MAAM,MAAM,GAAG,cAAc,CAAC,SAAS,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC;QAClD,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QAEvC,IAAI,UAAU,GAAG,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC;QACzD,UAAU,IAAI,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAClC,MAAM,GAAG,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC;QAEhC,OAAO;YACL,OAAO,EAAE,CAAC;YACV,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;YAC1B,EAAE,EAAE,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC;YACtB,UAAU;YACV,GAAG,EAAE,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC;SACzB,CAAC;IACJ,CAAC;IAEO,KAAK,CAAC,OAAO,CAAC,QAAyB,EAAE,SAAkB;QACjE,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QAC/C,MAAM,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;QAC3C,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QAC7C,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;QAElD,MAAM,QAAQ,GAAG,gBAAgB,CAAC,SAAS,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC;QACtD,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;QAEzB,IAAI,SAAS,GAAG,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,UAAU,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;QACpE,SAAS,IAAI,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAEpC,OAAO,IAAI,CAAC,KAAK,CAAC,SAAS,CAAe,CAAC;IAC7C,CAAC;IAED,8EAA8E;IAC9E,cAAc;IACd,8EAA8E;IAEtE,KAAK,CAAC,IAAI;QAChB,IAAI,IAAI,CAAC,KAAK;YAAE,OAAO,IAAI,CAAC,KAAK,CAAC;QAElC,yDAAyD;QACzD,iEAAiE;QACjE,0DAA0D;QAC1D,qCAAqC;QACrC,IAAI,QAAQ,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,KAAK,CAAkB,cAAc,CAAC,CAAC;QAEvE,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,cAAc,IAAI,UAAU,CAAC,IAAI,CAAC,cAAc,CAAC,EAAE,CAAC;YACxE,IAAI,CAAC;gBACH,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,cAAc,EAAE,MAAM,CAAC,CAAC;gBACxD,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAoB,CAAC;gBAC9C,2DAA2D;gBAC3D,wDAAwD;gBACxD,eAAe;gBACf,MAAM,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,cAAc,EAAE,QAAQ,CAAC,CAAC;gBACjD,IAAI,CAAC;oBAAC,MAAM,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;gBAAC,CAAC;gBAAC,MAAM,CAAC,CAAC,iBAAiB,CAAC,CAAC;YACxE,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,2DAA2D;gBAC3D,wDAAwD;gBACxD,uDAAuD;gBACvD,4CAA4C;gBAC5C,MAAM,IAAI,KAAK,CACb,yCAAyC,IAAI,CAAC,cAAc,MAAO,GAAa,CAAC,OAAO,EAAE,EAC1F,EAAE,KAAK,EAAE,GAAG,EAAE,CACf,CAAC;YACJ,CAAC;QACH,CAAC;QAED,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,IAAI,CAAC,KAAK,GAAG,EAAE,CAAC;YAChB,OAAO,IAAI,CAAC,KAAK,CAAC;QACpB,CAAC;QAED,IAAI,QAAQ,CAAC,OAAO,KAAK,CAAC,EAAE,CAAC;YAC3B,MAAM,IAAI,KAAK,CAAC,yCAAyC,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC;QAC/E,CAAC;QAED,IAAI,CAAC;YACH,IAAI,CAAC,KAAK,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;YAC1C,OAAO,IAAI,CAAC,KAAK,CAAC;QACpB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,4DAA4D;YAC5D,uEAAuE;YACvE,6DAA6D;YAC7D,oEAAoE;YACpE,iEAAiE;YACjE,gEAAgE;YAChE,wCAAwC;YACxC,EAAE;YACF,oEAAoE;YACpE,sEAAsE;YACtE,mEAAmE;YACnE,MAAM,SAAS,GACb,CAAC,MAAM,IAAI,CAAC,kBAAkB,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,MAAM,IAAI,CAAC,oBAAoB,CAAC,QAAQ,CAAC,CAAC,CAAC;YAC3F,IAAI,SAAS,EAAE,CAAC;gBACd,IAAI,CAAC,KAAK,GAAG,SAAS,CAAC;gBACvB,MAAM,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;gBAC3B,OAAO,IAAI,CAAC,KAAK,CAAC;YACpB,CAAC;YACD,MAAM,IAAI,KAAK,CAAC,8BAA+B,GAAa,CAAC,OAAO,qBAAqB,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC;QAC7G,CAAC;IACH,CAAC;IAED;;;;;;OAMG;IACK,KAAK,CAAC,oBAAoB,CAAC,QAAyB;QAC1D,IAAI,IAAI,CAAC,UAAU,KAAK,0BAA0B;YAAE,OAAO,IAAI,CAAC;QAEhE,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,CAAC;QAChC,IAAI,CAAC,UAAU,GAAG,sBAAsB,CAAC;QACzC,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;YAC7C,OAAO,OAAO,CAAC;QACjB,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;gBAAS,CAAC;YACT,qEAAqE;YACrE,oEAAoE;YACpE,IAAI,CAAC,UAAU,GAAG,OAAO,CAAC;QAC5B,CAAC;IACH,CAAC;IAED;;;;;;;;;;;;OAYG;IACK,KAAK,CAAC,kBAAkB,CAAC,QAAyB;QACxD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,gBAAgB,EAAE,CAAC;QAC9C,KAAK,MAAM,SAAS,IAAI,MAAM,IAAI,CAAC,mBAAmB,EAAE,EAAE,CAAC;YACzD,IAAI,SAAS,KAAK,OAAO;gBAAE,SAAS;YACpC,IAAI,CAAC;gBACH,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;gBACxD,MAAM,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,iBAAiB,EAAE,SAAS,CAAC,CAAC;gBACrD,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;gBAC3B,OAAO,OAAO,CAAC;YACjB,CAAC;YAAC,MAAM,CAAC;gBACP,kDAAkD;YACpD,CAAC;QACH,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAEO,KAAK,CAAC,IAAI,CAAC,OAAmB;QACpC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QAC7C,yDAAyD;QACzD,qDAAqD;QACrD,0DAA0D;QAC1D,kBAAkB;QAClB,MAAM,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,cAAc,EAAE,QAAQ,CAAC,CAAC;QACjD,IAAI,CAAC,KAAK,GAAG,OAAO,CAAC;IACvB,CAAC;IAED,8EAA8E;IAC9E,aAAa;IACb,8EAA8E;IAE9E;;;;;;;OAOG;IACK,KAAK,CAAC,cAAc;QAC1B,IAAI,CAAC;YACH,yBAAyB;YACzB,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,MAAM,MAAM,CAAC,kBAAkB,CAAC,CAAC;YAC9D,IAAI,CAAC;gBACH,MAAM,EAAE,GAAG,MAAM,MAAM,CAAC,iBAAiB,EAAE,MAAM,CAAC,CAAC;gBACnD,IAAI,EAAE,CAAC,IAAI,EAAE;oBAAE,OAAO,EAAE,CAAC,IAAI,EAAE,CAAC;YAClC,CAAC;YAAC,MAAM,CAAC;gBACP,YAAY;YACd,CAAC;YAED,yBAAyB;YACzB,EAAE;YACF,uEAAuE;YACvE,qEAAqE;YACrE,kEAAkE;YAClE,wEAAwE;YACxE,IAAI,CAAC;gBACH,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,MAAM,CAAC,oBAAoB,CAAC,CAAC;gBACxD,MAAM,MAAM,GAAG,MAAM,IAAI,OAAO,CAAS,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;oBAC3D,QAAQ,CACN,OAAO,EACP,CAAC,MAAM,EAAE,IAAI,EAAE,wBAAwB,CAAC,EACxC,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,GAAG,IAAI,EAAE,EAC3D,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAC7D,CAAC;gBACJ,CAAC,CAAC,CAAC;gBACH,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,kCAAkC,CAAC,CAAC;gBAC/D,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC;oBAAE,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC;YAClC,CAAC;YAAC,MAAM,CAAC;gBACP,8BAA8B;YAChC,CAAC;YAED,qBAAqB;YACrB,OAAO,QAAQ,EAAE,CAAC;QACpB,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,mBAAmB,CAAC;QAC7B,CAAC;IACH,CAAC;CACF,CAAA;AA3ZY,cAAc;IAD1B,UAAU,EAAE;IAsBR,WAAA,MAAM,CAAC,wBAAwB,CAAC,CAAA;IAChC,WAAA,MAAM,CAAC,wBAAwB,CAAC,CAAA;IAChC,WAAA,QAAQ,EAAE,CAAA;IAAE,WAAA,MAAM,CAAC,yBAAyB,CAAC,CAAA;;GAvBrC,cAAc,CA2Z1B"}

package/dist/services/slave-storage.service.d.ts

@@ -19,6 +19,36 @@
  */
 import { Kysely } from 'kysely';
 import type { ILogger } from '@omnitron-dev/titan/module/logger';
+/** The alert rules a node seeds: the master's critical defaults (see `createAlertTables`). */
+export declare const NODE_ALERT_RULES: ({
+    readonly name: 'App crashed';
+    readonly expression: 'app.*.status == crashed';
+    readonly type: 'health';
+    readonly severity: 'critical';
+    readonly forDuration: null;
+    readonly summary: 'An app crashed';
+} | {
+    readonly name: 'App erroring';
+    readonly expression: 'app.*.status == errored';
+    readonly type: 'health';
+    readonly severity: 'critical';
+    readonly forDuration: 60;
+    readonly summary: 'An app has been in the errored state for a minute';
+} | {
+    readonly name: 'Container unhealthy';
+    readonly expression: 'infra.*.health == unhealthy';
+    readonly type: 'health';
+    readonly severity: 'critical';
+    readonly forDuration: 60;
+    readonly summary: 'A container has been unhealthy for a minute';
+} | {
+    readonly name: 'Disk space below 50 GiB';
+    readonly expression: "host.disk.free < 53687091200";
+    readonly type: 'metric';
+    readonly severity: 'critical';
+    readonly forDuration: 60;
+    readonly summary: "Less than 50 GiB free on this host's disk for a minute — the container engine stops near full";
+})[];
 export interface SlaveDatabase {
     metrics_raw: {
         id: number;
@@ -48,6 +78,38 @@ export interface SlaveDatabase {
         spanId: string | null;
         metadata: string | null;
     };
+    /**
+     * The node's own alerts — the master's `alert_rules` / `alert_events`
+     * (migrations 001, 013), in SQLite: booleans as 0/1, times and JSON as text.
+     */
+    alert_rules: {
+        id: string;
+        name: string;
+        expression: string;
+        type: string;
+        severity: string;
+        forDuration: number | null;
+        annotations: string | null;
+        labels: string | null;
+        enabled: number;
+        lastEvaluatedAt: string | null;
+        createdAt: string;
+        updatedAt: string;
+    };
+    alert_events: {
+        id: string;
+        ruleId: string;
+        status: string;
+        value: string | null;
+        annotations: string | null;
+        firedAt: string;
+        resolvedAt: string | null;
+        acknowledgedAt: string | null;
+        acknowledgedBy: string | null;
+        deliveredAt: string | null;
+        resolveDeliveredAt: string | null;
+        deliveryError: string | null;
+    };
 }
 export declare class SlaveStorageService {
     private readonly logger;
@@ -65,5 +127,50 @@ export declare class SlaveStorageService {
      */
     dispose(): Promise<void>;
     private createTables;
+    /**
+     * What the replication buffer holds — its payload bytes, rows and rows
+     * already delivered — kept in one row by the buffer's own triggers.
+     *
+     * The buffer's bound (`SyncService.enforceBufferBounds`) needs those three
+     * figures every thirty seconds, and asked for them with a pass over the
+     * whole table: `sum(octet_length(payload))` across every row, delivered
+     * ones included, which the buffer keeps for a day. On the test node,
+     * 2026-09-22, that was 4 019 288 rows and 395–399 ms per pass — on the
+     * daemon's event loop, since better-sqlite3 is synchronous, so every RPC
+     * the node answered could wait behind it, twice a minute, for as long as
+     * the node ran. The cost grows with the table, and the table is largest
+     * exactly when the node has been cut off from its master.
+     *
+     * Triggers, rather than figures kept in the process: the table is written
+     * by more than one statement shape — inserts, the ack's update, the
+     * routine delete and the eviction's subquery — and a count kept beside
+     * the writer is right only for the writers somebody remembered. A trigger
+     * sees every one of them, including a DELETE nobody has written yet.
+     *
+     * Recounted once whenever storage opens, in the same transaction that
+     * (re)creates the triggers: the row is then exact from where the triggers
+     * take over, whatever wrote the table before them — an older daemon
+     * without them, a restore, a hand. That is one full pass per daemon start
+     * instead of one per thirty seconds.
+     */
+    private createBufferStats;
+    /**
+     * The node's own alerts, kept where its metrics are.
+     *
+     * A node daemon runs without Postgres, and the alert engine lived only on
+     * the master (`daemon.module.ts`: "master only — requires PG"), so the test
+     * stack's alerts were evaluated by nobody: its log said `alert-evaluation —
+     * no alert service` at every start (omni-3f, 2026-09-30). The owner chose
+     * that a node counts its own alarms, here, independent of the Mac and of
+     * the stack's own Postgres — an alarm stored in the Postgres it is about
+     * would be lost exactly when that Postgres goes.
+     *
+     * The rules are the four CRITICAL defaults the master seeds (migrations 011,
+     * 012 — the same constants, not a copy): an app crashed, an app erroring, a
+     * container unhealthy, this host's disk under 50 GiB. Only critical alerts
+     * are delivered; a warning the node cannot show anyone is not kept.
+     * Seeded by name, so an operator's change to one survives a restart.
+     */
+    private createAlertTables;
 }
 //# sourceMappingURL=slave-storage.service.d.ts.map

package/dist/services/slave-storage.service.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"slave-storage.service.d.ts","sourceRoot":"","sources":["../../src/services/slave-storage.service.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAIH,OAAO,EAAE,MAAM,EAAsB,MAAM,QAAQ,CAAC;AACpD,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,mCAAmC,CAAC;AAUjE,MAAM,WAAW,aAAa;IAC5B,WAAW,EAAE;QACX,EAAE,EAAE,MAAM,CAAC;QACX,SAAS,EAAE,MAAM,CAAC;QAClB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;QACtB,GAAG,EAAE,MAAM,CAAC;QACZ,IAAI,EAAE,MAAM,CAAC;QACb,KAAK,EAAE,MAAM,CAAC;QACd,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;KACvB,CAAC;IACF,WAAW,EAAE;QACX,EAAE,EAAE,MAAM,CAAC;QACX,QAAQ,EAAE,MAAM,CAAC;QACjB,OAAO,EAAE,MAAM,CAAC;QAChB,SAAS,EAAE,MAAM,CAAC;QAClB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;KACzB,CAAC;IACF,IAAI,EAAE;QACJ,EAAE,EAAE,MAAM,CAAC;QACX,SAAS,EAAE,MAAM,CAAC;QAClB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;QACtB,GAAG,EAAE,MAAM,CAAC;QACZ,KAAK,EAAE,MAAM,CAAC;QACd,OAAO,EAAE,MAAM,CAAC;QAChB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;QACtB,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;QACvB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;QACtB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;KACzB,CAAC;CACH;AAMD,qBAAa,mBAAmB;IAK5B,OAAO,CAAC,QAAQ,CAAC,MAAM;IACvB,OAAO,CAAC,QAAQ,CAAC,MAAM;IALzB,OAAO,CAAC,EAAE,CAAsC;IAChD,OAAO,CAAC,WAAW,CAAS;gBAGT,MAAM,EAAE,OAAO,EACf,MAAM,GAAE,MAAwB;IAGnD;;;OAGG;IACG,KAAK,IAAI,OAAO,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;IA4B7C;;OAEG;IACG,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC;YAWhB,YAAY;CA2D3B"}
+{"version":3,"file":"slave-storage.service.d.ts","sourceRoot":"","sources":["../../src/services/slave-storage.service.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAIH,OAAO,EAAE,MAAM,EAAsB,MAAM,QAAQ,CAAC;AAIpD,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,mCAAmC,CAAC;AAMjE,8FAA8F;AAC9F,eAAO,MAAM,gBAAgB;;;;;;;;;;;;;;;;;;;;;;;;;;;;IAG5B,CAAC;AAMF,MAAM,WAAW,aAAa;IAC5B,WAAW,EAAE;QACX,EAAE,EAAE,MAAM,CAAC;QACX,SAAS,EAAE,MAAM,CAAC;QAClB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;QACtB,GAAG,EAAE,MAAM,CAAC;QACZ,IAAI,EAAE,MAAM,CAAC;QACb,KAAK,EAAE,MAAM,CAAC;QACd,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;KACvB,CAAC;IACF,WAAW,EAAE;QACX,EAAE,EAAE,MAAM,CAAC;QACX,QAAQ,EAAE,MAAM,CAAC;QACjB,OAAO,EAAE,MAAM,CAAC;QAChB,SAAS,EAAE,MAAM,CAAC;QAClB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;KACzB,CAAC;IACF,IAAI,EAAE;QACJ,EAAE,EAAE,MAAM,CAAC;QACX,SAAS,EAAE,MAAM,CAAC;QAClB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;QACtB,GAAG,EAAE,MAAM,CAAC;QACZ,KAAK,EAAE,MAAM,CAAC;QACd,OAAO,EAAE,MAAM,CAAC;QAChB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;QACtB,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;QACvB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;QACtB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;KACzB,CAAC;IACF;;;OAGG;IACH,WAAW,EAAE;QACX,EAAE,EAAE,MAAM,CAAC;QACX,IAAI,EAAE,MAAM,CAAC;QACb,UAAU,EAAE,MAAM,CAAC;QACnB,IAAI,EAAE,MAAM,CAAC;QACb,QAAQ,EAAE,MAAM,CAAC;QACjB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;QAC3B,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;QAC3B,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;QACtB,OAAO,EAAE,MAAM,CAAC;QAChB,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;QAC/B,SAAS,EAAE,MAAM,CAAC;QAClB,SAAS,EAAE,MAAM,CAAC;KACnB,CAAC;IACF,YAAY,EAAE;QACZ,EAAE,EAAE,MAAM,CAAC;QACX,MAAM,EAAE,MAAM,CAAC;QACf,MAAM,EAAE,MAAM,CAAC;QACf,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;QACrB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;QAC3B,OAAO,EAAE,MAAM,CAAC;QAChB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;QAC1B,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;QAC9B,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;QAC9B,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;QAC3B,kBAAkB,EAAE,MAAM,GAAG,IAAI,CAAC;QAClC,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;KAC9B,CAAC;CACH;AAMD,qBAAa,mBAAmB;IAK5B,OAAO,CAAC,QAAQ,CAAC,MAAM;IACvB,OAAO,CAAC,QAAQ,CAAC,MAAM;IALzB,OAAO,CAAC,EAAE,CAAsC;IAChD,OAAO,CAAC,WAAW,CAAS;IAE5B,YACmB,MAAM,EAAE,OAAO,EACf,MAAM,GAAE,MAAwB,EAC/C;IAEJ;;;OAGG;IACG,KAAK,IAAI,OAAO,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAmC5C;IAED;;OAEG;IACG,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC,CAK7B;YAMa,YAAY;IA2E1B;;;;;;;;;;;;;;;;;;;;;;;;;OAyBG;YACW,iBAAiB;IAoD/B;;;;;;;;;;;;;;;;OAgBG;YACW,iBAAiB;CAgDhC"}

package/dist/services/slave-storage.service.js

@@ -20,9 +20,17 @@
 import fs from 'node:fs';
 import path from 'node:path';
 import { Kysely, SqliteDialect, sql } from 'kysely';
+import { withDateBinding } from '../database/sqlite-date-binding.js';
+import { DEFAULT_ALERT_RULES } from '../database/migrations/011_alerts_nobody_had_to_write.js';
+import { DISK_ALERT_RULE } from '../database/migrations/012_a_disk_nobody_watched.js';
 const OMNITRON_HOME = path.join(process.env['HOME'] ?? '/tmp', '.omnitron');
 const DATA_DIR = path.join(OMNITRON_HOME, 'data');
 const DEFAULT_DB_PATH = path.join(DATA_DIR, 'slave.db');
+/** The alert rules a node seeds: the master's critical defaults (see `createAlertTables`). */
+export const NODE_ALERT_RULES = [
+    ...DEFAULT_ALERT_RULES.filter((rule) => rule.severity === 'critical'),
+    DISK_ALERT_RULE,
+];
 // =============================================================================
 // Service
 // =============================================================================
@@ -51,7 +59,16 @@ export class SlaveStorageService {
         database.pragma('journal_mode = WAL');
         database.pragma('busy_timeout = 5000');
         database.pragma('synchronous = NORMAL');
-        const dialect = new SqliteDialect({ database });
+        // An alert rule's events go with it (`alert_events.ruleId … ON DELETE
+        // CASCADE`). SQLite enforces a foreign key only when asked, per
+        // connection; better-sqlite3 13 is built asking by default, and this keeps
+        // it so under a build that is not. No other table here declares one.
+        database.pragma('foreign_keys = ON');
+        // Every `Date` bound to this database becomes an ISO string on the way
+        // in. The daemon runs the same services against Postgres and SQLite, and
+        // only one of the two drivers accepts a Date — see
+        // `database/sqlite-date-binding.ts` for what that cost before this.
+        const dialect = new SqliteDialect({ database: withDateBinding(database) });
         this.db = new Kysely({ dialect });
         // Auto-create tables
         if (!this.initialized) {
@@ -98,7 +115,19 @@ export class SlaveStorageService {
         id INTEGER PRIMARY KEY AUTOINCREMENT,
         category TEXT NOT NULL,
         payload TEXT NOT NULL,
-        createdAt TEXT NOT NULL DEFAULT (datetime('now')),
+        -- ISO-8601 UTC, not datetime('now').
+        --
+        -- datetime('now') writes "2026-09-15 06:01:37": UTC, stating so
+        -- nowhere. This column is replicated to the master and inserted into
+        -- a timestamptz, where Postgres resolves an offset-less timestamp
+        -- in the session's TimeZone — so the value only survives while that
+        -- happens to be UTC. It also disagreed with syncedAt in the same
+        -- row, which a bound Date writes in ISO form.
+        --
+        -- CREATE TABLE IF NOT EXISTS leaves an existing table's default
+        -- alone, so this fixes new slaves only; toIsoUtc at the wire
+        -- boundary is what repairs the ones already running.
+        createdAt TEXT NOT NULL DEFAULT (strftime('%Y-%m-%dT%H:%M:%fZ', 'now')),
         syncedAt TEXT
       )
     `.execute(this.db);
@@ -106,6 +135,8 @@ export class SlaveStorageService {
       CREATE INDEX IF NOT EXISTS idx_sync_pending
       ON sync_buffer (syncedAt, createdAt)
     `.execute(this.db);
+        await this.createBufferStats();
+        await this.createAlertTables();
         // logs — column names match OmnitronDatabase.LogsTable (camelCase)
         // id is TEXT (UUID) to match PG schema — allows LogCollectorService to work unchanged
         await sql `
@@ -127,5 +158,143 @@ export class SlaveStorageService {
       ON logs (timestamp, app, level)
     `.execute(this.db);
     }
+    /**
+     * What the replication buffer holds — its payload bytes, rows and rows
+     * already delivered — kept in one row by the buffer's own triggers.
+     *
+     * The buffer's bound (`SyncService.enforceBufferBounds`) needs those three
+     * figures every thirty seconds, and asked for them with a pass over the
+     * whole table: `sum(octet_length(payload))` across every row, delivered
+     * ones included, which the buffer keeps for a day. On the test node,
+     * 2026-09-22, that was 4 019 288 rows and 395–399 ms per pass — on the
+     * daemon's event loop, since better-sqlite3 is synchronous, so every RPC
+     * the node answered could wait behind it, twice a minute, for as long as
+     * the node ran. The cost grows with the table, and the table is largest
+     * exactly when the node has been cut off from its master.
+     *
+     * Triggers, rather than figures kept in the process: the table is written
+     * by more than one statement shape — inserts, the ack's update, the
+     * routine delete and the eviction's subquery — and a count kept beside
+     * the writer is right only for the writers somebody remembered. A trigger
+     * sees every one of them, including a DELETE nobody has written yet.
+     *
+     * Recounted once whenever storage opens, in the same transaction that
+     * (re)creates the triggers: the row is then exact from where the triggers
+     * take over, whatever wrote the table before them — an older daemon
+     * without them, a restore, a hand. That is one full pass per daemon start
+     * instead of one per thirty seconds.
+     */
+    async createBufferStats() {
+        if (!this.db)
+            return;
+        await this.db.transaction().execute(async (trx) => {
+            await sql `
+        CREATE TABLE IF NOT EXISTS sync_buffer_stats (
+          id INTEGER PRIMARY KEY CHECK (id = 1),
+          totalBytes INTEGER NOT NULL,
+          totalRows INTEGER NOT NULL,
+          syncedRows INTEGER NOT NULL
+        )
+      `.execute(trx);
+            await sql `
+        CREATE TRIGGER IF NOT EXISTS sync_buffer_stats_insert AFTER INSERT ON sync_buffer
+        BEGIN
+          UPDATE sync_buffer_stats SET
+            totalBytes = totalBytes + octet_length(NEW.payload),
+            totalRows = totalRows + 1,
+            syncedRows = syncedRows + (NEW.syncedAt IS NOT NULL)
+          WHERE id = 1;
+        END
+      `.execute(trx);
+            await sql `
+        CREATE TRIGGER IF NOT EXISTS sync_buffer_stats_delete AFTER DELETE ON sync_buffer
+        BEGIN
+          UPDATE sync_buffer_stats SET
+            totalBytes = totalBytes - octet_length(OLD.payload),
+            totalRows = totalRows - 1,
+            syncedRows = syncedRows - (OLD.syncedAt IS NOT NULL)
+          WHERE id = 1;
+        END
+      `.execute(trx);
+            await sql `
+        CREATE TRIGGER IF NOT EXISTS sync_buffer_stats_update AFTER UPDATE OF payload, syncedAt ON sync_buffer
+        BEGIN
+          UPDATE sync_buffer_stats SET
+            totalBytes = totalBytes - octet_length(OLD.payload) + octet_length(NEW.payload),
+            syncedRows = syncedRows - (OLD.syncedAt IS NOT NULL) + (NEW.syncedAt IS NOT NULL)
+          WHERE id = 1;
+        END
+      `.execute(trx);
+            await sql `
+        INSERT OR REPLACE INTO sync_buffer_stats (id, totalBytes, totalRows, syncedRows)
+        SELECT 1, coalesce(sum(octet_length(payload)), 0), count(*), count(syncedAt) FROM sync_buffer
+      `.execute(trx);
+        });
+    }
+    /**
+     * The node's own alerts, kept where its metrics are.
+     *
+     * A node daemon runs without Postgres, and the alert engine lived only on
+     * the master (`daemon.module.ts`: "master only — requires PG"), so the test
+     * stack's alerts were evaluated by nobody: its log said `alert-evaluation —
+     * no alert service` at every start (omni-3f, 2026-09-30). The owner chose
+     * that a node counts its own alarms, here, independent of the Mac and of
+     * the stack's own Postgres — an alarm stored in the Postgres it is about
+     * would be lost exactly when that Postgres goes.
+     *
+     * The rules are the four CRITICAL defaults the master seeds (migrations 011,
+     * 012 — the same constants, not a copy): an app crashed, an app erroring, a
+     * container unhealthy, this host's disk under 50 GiB. Only critical alerts
+     * are delivered; a warning the node cannot show anyone is not kept.
+     * Seeded by name, so an operator's change to one survives a restart.
+     */
+    async createAlertTables() {
+        if (!this.db)
+            return;
+        const iso = sql.raw(`(strftime('%Y-%m-%dT%H:%M:%fZ', 'now'))`);
+        await sql `
+      CREATE TABLE IF NOT EXISTS alert_rules (
+        id TEXT PRIMARY KEY DEFAULT (lower(hex(randomblob(16)))),
+        name TEXT NOT NULL UNIQUE,
+        expression TEXT NOT NULL,
+        type TEXT NOT NULL,
+        severity TEXT NOT NULL,
+        forDuration INTEGER,
+        annotations TEXT,
+        labels TEXT,
+        enabled INTEGER NOT NULL DEFAULT 1,
+        lastEvaluatedAt TEXT,
+        createdAt TEXT NOT NULL DEFAULT ${iso},
+        updatedAt TEXT NOT NULL DEFAULT ${iso}
+      )
+    `.execute(this.db);
+        await sql `
+      CREATE TABLE IF NOT EXISTS alert_events (
+        id TEXT PRIMARY KEY DEFAULT (lower(hex(randomblob(16)))),
+        ruleId TEXT NOT NULL REFERENCES alert_rules(id) ON DELETE CASCADE,
+        status TEXT NOT NULL,
+        value TEXT,
+        annotations TEXT,
+        firedAt TEXT NOT NULL DEFAULT ${iso},
+        resolvedAt TEXT,
+        acknowledgedAt TEXT,
+        acknowledgedBy TEXT,
+        deliveredAt TEXT,
+        resolveDeliveredAt TEXT,
+        deliveryError TEXT
+      )
+    `.execute(this.db);
+        await sql `
+      CREATE INDEX IF NOT EXISTS idx_alert_events_rule_status
+      ON alert_events (ruleId, status)
+    `.execute(this.db);
+        for (const rule of NODE_ALERT_RULES) {
+            await sql `
+        INSERT OR IGNORE INTO alert_rules (name, expression, type, severity, forDuration, annotations, enabled)
+        VALUES (${rule.name}, ${rule.expression}, ${rule.type}, ${rule.severity}, ${rule.forDuration},
+                ${JSON.stringify({ summary: rule.summary })}, 1)
+      `.execute(this.db);
+        }
+    }
 }
 //# sourceMappingURL=slave-storage.service.js.map

package/dist/services/slave-storage.service.js.map

@@ -1 +1 @@
-{"version":3,"file":"slave-storage.service.js","sourceRoot":"","sources":["../../src/services/slave-storage.service.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,GAAG,EAAE,MAAM,QAAQ,CAAC;AAGpD,MAAM,aAAa,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,MAAM,EAAE,WAAW,CAAC,CAAC;AAC5E,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,MAAM,CAAC,CAAC;AAClD,MAAM,eAAe,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;AAqCxD,gFAAgF;AAChF,UAAU;AACV,gFAAgF;AAEhF,MAAM,OAAO,mBAAmB;IAKX;IACA;IALX,EAAE,GAAiC,IAAI,CAAC;IACxC,WAAW,GAAG,KAAK,CAAC;IAE5B,YACmB,MAAe,EACf,SAAiB,eAAe;QADhC,WAAM,GAAN,MAAM,CAAS;QACf,WAAM,GAAN,MAAM,CAA0B;IAChD,CAAC;IAEJ;;;OAGG;IACH,KAAK,CAAC,KAAK;QACT,IAAI,IAAI,CAAC,EAAE;YAAE,OAAO,IAAI,CAAC,EAAE,CAAC;QAE5B,0BAA0B;QAC1B,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAE7D,kDAAkD;QAClD,MAAM,aAAa,GAAG,CAAC,MAAM,MAAM,CAAC,gBAAgB,CAAC,CAAC,CAAC,OAAO,CAAC;QAC/D,MAAM,QAAQ,GAAG,IAAI,aAAa,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAEhD,wCAAwC;QACxC,QAAQ,CAAC,MAAM,CAAC,oBAAoB,CAAC,CAAC;QACtC,QAAQ,CAAC,MAAM,CAAC,qBAAqB,CAAC,CAAC;QACvC,QAAQ,CAAC,MAAM,CAAC,sBAAsB,CAAC,CAAC;QAExC,MAAM,OAAO,GAAG,IAAI,aAAa,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC;QAChD,IAAI,CAAC,EAAE,GAAG,IAAI,MAAM,CAAgB,EAAE,OAAO,EAAE,CAAC,CAAC;QAEjD,qBAAqB;QACrB,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;YACtB,MAAM,IAAI,CAAC,YAAY,EAAE,CAAC;YAC1B,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC;YACxB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,MAAM,EAAE,EAAE,kCAAkC,CAAC,CAAC;QAC9E,CAAC;QAED,OAAO,IAAI,CAAC,EAAE,CAAC;IACjB,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,OAAO;QACX,IAAI,IAAI,CAAC,EAAE,EAAE,CAAC;YACZ,MAAM,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC;YACxB,IAAI,CAAC,EAAE,GAAG,IAAI,CAAC;QACjB,CAAC;IACH,CAAC;IAED,8EAA8E;IAC9E,4BAA4B;IAC5B,8EAA8E;IAEtE,KAAK,CAAC,YAAY;QACxB,IAAI,CAAC,IAAI,CAAC,EAAE;YAAE,OAAO;QAErB,wEAAwE;QACxE,MAAM,GAAG,CAAA;;;;;;;;;;KAUR,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAEnB,MAAM,GAAG,CAAA;;;KAGR,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAEnB,sFAAsF;QACtF,MAAM,GAAG,CAAA;;;;;;;;KAQR,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAEnB,MAAM,GAAG,CAAA;;;KAGR,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAEnB,mEAAmE;QACnE,sFAAsF;QACtF,MAAM,GAAG,CAAA;;;;;;;;;;;;;KAaR,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAEnB,MAAM,GAAG,CAAA;;;KAGR,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACrB,CAAC;CACF"}
+{"version":3,"file":"slave-storage.service.js","sourceRoot":"","sources":["../../src/services/slave-storage.service.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,GAAG,EAAE,MAAM,QAAQ,CAAC;AACpD,OAAO,EAAE,eAAe,EAAE,MAAM,oCAAoC,CAAC;AACrE,OAAO,EAAE,mBAAmB,EAAE,MAAM,0DAA0D,CAAC;AAC/F,OAAO,EAAE,eAAe,EAAE,MAAM,qDAAqD,CAAC;AAGtF,MAAM,aAAa,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,MAAM,EAAE,WAAW,CAAC,CAAC;AAC5E,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,MAAM,CAAC,CAAC;AAClD,MAAM,eAAe,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;AAExD,8FAA8F;AAC9F,MAAM,CAAC,MAAM,gBAAgB,GAAG;IAC9B,GAAG,mBAAmB,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,KAAK,UAAU,CAAC;IACrE,eAAe;CAChB,CAAC;AAqEF,gFAAgF;AAChF,UAAU;AACV,gFAAgF;AAEhF,MAAM,OAAO,mBAAmB;IAKX,MAAM;IACN,MAAM;IALjB,EAAE,GAAiC,IAAI,CAAC;IACxC,WAAW,GAAG,KAAK,CAAC;IAE5B,YACmB,MAAe,EACf,MAAM,GAAW,eAAe;sBADhC,MAAM;sBACN,MAAM;IACtB,CAAC;IAEJ;;;OAGG;IACH,KAAK,CAAC,KAAK;QACT,IAAI,IAAI,CAAC,EAAE;YAAE,OAAO,IAAI,CAAC,EAAE,CAAC;QAE5B,0BAA0B;QAC1B,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAE7D,kDAAkD;QAClD,MAAM,aAAa,GAAG,CAAC,MAAM,MAAM,CAAC,gBAAgB,CAAC,CAAC,CAAC,OAAO,CAAC;QAC/D,MAAM,QAAQ,GAAG,IAAI,aAAa,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAEhD,wCAAwC;QACxC,QAAQ,CAAC,MAAM,CAAC,oBAAoB,CAAC,CAAC;QACtC,QAAQ,CAAC,MAAM,CAAC,qBAAqB,CAAC,CAAC;QACvC,QAAQ,CAAC,MAAM,CAAC,sBAAsB,CAAC,CAAC;QACxC,sEAAsE;QACtE,gEAAgE;QAChE,2EAA2E;QAC3E,qEAAqE;QACrE,QAAQ,CAAC,MAAM,CAAC,mBAAmB,CAAC,CAAC;QAErC,uEAAuE;QACvE,yEAAyE;QACzE,mDAAmD;QACnD,oEAAoE;QACpE,MAAM,OAAO,GAAG,IAAI,aAAa,CAAC,EAAE,QAAQ,EAAE,eAAe,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;QAC3E,IAAI,CAAC,EAAE,GAAG,IAAI,MAAM,CAAgB,EAAE,OAAO,EAAE,CAAC,CAAC;QAEjD,qBAAqB;QACrB,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;YACtB,MAAM,IAAI,CAAC,YAAY,EAAE,CAAC;YAC1B,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC;YACxB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,MAAM,EAAE,EAAE,kCAAkC,CAAC,CAAC;QAC9E,CAAC;QAED,OAAO,IAAI,CAAC,EAAE,CAAC;IACjB,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,OAAO;QACX,IAAI,IAAI,CAAC,EAAE,EAAE,CAAC;YACZ,MAAM,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC;YACxB,IAAI,CAAC,EAAE,GAAG,IAAI,CAAC;QACjB,CAAC;IACH,CAAC;IAED,8EAA8E;IAC9E,4BAA4B;IAC5B,8EAA8E;IAEtE,KAAK,CAAC,YAAY;QACxB,IAAI,CAAC,IAAI,CAAC,EAAE;YAAE,OAAO;QAErB,wEAAwE;QACxE,MAAM,GAAG,CAAA;;;;;;;;;;KAUR,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAEnB,MAAM,GAAG,CAAA;;;KAGR,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAEnB,sFAAsF;QACtF,MAAM,GAAG,CAAA;;;;;;;;;;;;;;;;;;;;KAoBR,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAEnB,MAAM,GAAG,CAAA;;;KAGR,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAEnB,MAAM,IAAI,CAAC,iBAAiB,EAAE,CAAC;QAC/B,MAAM,IAAI,CAAC,iBAAiB,EAAE,CAAC;QAE/B,mEAAmE;QACnE,sFAAsF;QACtF,MAAM,GAAG,CAAA;;;;;;;;;;;;;KAaR,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAEnB,MAAM,GAAG,CAAA;;;KAGR,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACrB,CAAC;IAED;;;;;;;;;;;;;;;;;;;;;;;;;OAyBG;IACK,KAAK,CAAC,iBAAiB;QAC7B,IAAI,CAAC,IAAI,CAAC,EAAE;YAAE,OAAO;QAErB,MAAM,IAAI,CAAC,EAAE,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;YAChD,MAAM,GAAG,CAAA;;;;;;;OAOR,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YAEf,MAAM,GAAG,CAAA;;;;;;;;;OASR,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YAEf,MAAM,GAAG,CAAA;;;;;;;;;OASR,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YAEf,MAAM,GAAG,CAAA;;;;;;;;OAQR,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YAEf,MAAM,GAAG,CAAA;;;OAGR,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACjB,CAAC,CAAC,CAAC;IACL,CAAC;IAED;;;;;;;;;;;;;;;;OAgBG;IACK,KAAK,CAAC,iBAAiB;QAC7B,IAAI,CAAC,IAAI,CAAC,EAAE;YAAE,OAAO;QACrB,MAAM,GAAG,GAAG,GAAG,CAAC,GAAG,CAAC,yCAAyC,CAAC,CAAC;QAC/D,MAAM,GAAG,CAAA;;;;;;;;;;;;0CAY6B,GAAG;0CACH,GAAG;;KAExC,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACnB,MAAM,GAAG,CAAA;;;;;;;wCAO2B,GAAG;;;;;;;;KAQtC,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACnB,MAAM,GAAG,CAAA;;;KAGR,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAEnB,KAAK,MAAM,IAAI,IAAI,gBAAgB,EAAE,CAAC;YACpC,MAAM,GAAG,CAAA;;kBAEG,IAAI,CAAC,IAAI,KAAK,IAAI,CAAC,UAAU,KAAK,IAAI,CAAC,IAAI,KAAK,IAAI,CAAC,QAAQ,KAAK,IAAI,CAAC,WAAW;kBAClF,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC;OACpD,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACrB,CAAC;IACH,CAAC;CACF"}

package/dist/services/static-carry-forward.d.ts

@@ -0,0 +1,85 @@
+/**
+ * A chunk the last deployment took away.
+ *
+ * A page opened before a deployment keeps the build it loaded: its
+ * `index.html` and entry name every lazy chunk by its content hash. The
+ * deployment then points the gateway at a NEW build directory, and the next
+ * lazy route that tab opens asks for a chunk that directory does not have.
+ * Measured on daos/test on 2026-09-29, after release d531ab26: the owner's
+ * /admin/config answered «error loading dynamically imported module:
+ * …/assets/config-CUEyrA2c.js», which was 404 — while the current build was
+ * whole (243 files referenced by its index and entry, all 200) and the chunk
+ * sat, intact, in the previous build's directory on the same disk
+ * (`/opt/omnitron/stack-static/gateway/0d98bee79c410715/assets/`). Testers
+ * met it «everywhere»: every tab older than the deployment, on every route it
+ * had not opened yet. The gateway logs none of it — `/assets/` has
+ * `access_log off`.
+ *
+ * So a new build carries the assets of the build the gateway is serving now,
+ * hard-linked into its `assets/` (content-hashed names never collide, and a
+ * link costs no space): a tab from before the deployment keeps working until
+ * its reader reloads. One generation, from each build's OWN list
+ * (`<dir>.own-assets`, written here beside the directory, never served) —
+ * carrying what was carried would grow every build by every build before it.
+ *
+ * And the builds nobody serves are removed: 122 directories, 3.9 GB, had
+ * accumulated on the test node since 2026-09-10. Kept: the newest `keep`,
+ * the new one, and every directory ANY gateway container names — running or
+ * stopped, because a stopped stack's gateway comes back with the mount it
+ * has.
+ */
+/**
+ * The script run on the node once a build is unpacked into `fresh`, before
+ * its `.delivered` marker is written. `serving` are the build directories the
+ * RUNNING gateways mount now (what open tabs loaded); `mounted` are those ANY
+ * gateway container mounts (never removed). Prints one line:
+ * `carried <n> from <k> build(s); pruned <m> build(s)`.
+ */
+export declare function carryForwardScript(options: {
+    root: string;
+    fresh: string;
+    serving: readonly string[];
+    mounted: readonly string[];
+    keep: number;
+    /** Count and name what would be carried and removed; link and remove nothing. */
+    dryRun?: boolean;
+}): string;
+/**
+ * What a stack's `current` link is called, inside the static root.
+ *
+ * `current-<project>-<stack>`, because `/opt/omnitron/stack-static/gateway` is
+ * shared by every stack on the NODE — the literal is passed to
+ * `uploadStaticBundle` with no project and no stack in it — and several stacks
+ * do run on one node. A bare `current` would make one deployment repoint
+ * another stack's portal.
+ *
+ * Both sides spell it from here: the master when it swaps the link, and the
+ * shell below when it reads a container's back. `CONTAINER_PREFIX` is the same
+ * `<project>-<stack>`, which is why the container is `<project>-<stack>-gateway`.
+ */
+export declare function gatewayStaticLinkName(project: string, stack: string): string;
+/**
+ * The build directories gateway containers on the node serve: running ones
+ * (what open tabs loaded) and all of them (what must stay).
+ *
+ * It used to read the mount SOURCE, which was the build directory itself. Once
+ * the gateway mounts the static ROOT and serves through `current-<stack>`, the
+ * source is the same constant for every gateway on the node — so the source
+ * answers «which build» with nothing, and both halves of the script below fail
+ * silently: the carry-forward finds no `assets/` under a root and copies
+ * nothing (printing `carried 0 from 0 build(s)`, a line that looks fine), and
+ * the prune stops holding any build, leaving only «newest 5 by mtime» — which
+ * is exactly the wrong rule on a ROLLBACK, where the wanted build is old.
+ *
+ * So it resolves the link instead. `readlink -f`, not `readlink`: the link is
+ * relative (it must be — it is resolved inside the container), and the reader
+ * below wants an absolute path. A gateway with no link yet — the first
+ * deployment — prints nothing, and there is nothing to carry.
+ */
+export declare const GATEWAY_MOUNTS_COMMAND: string;
+/** `true /opt/…/abc` lines → the running and the mounted sources. */
+export declare function readGatewayMounts(output: string): {
+    serving: string[];
+    mounted: string[];
+};
+//# sourceMappingURL=static-carry-forward.d.ts.map

package/dist/services/static-carry-forward.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"static-carry-forward.d.ts","sourceRoot":"","sources":["../../src/services/static-carry-forward.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AAOH;;;;;;GAMG;AACH,wBAAgB,kBAAkB,CAAC,OAAO,EAAE;IAC1C,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,SAAS,MAAM,EAAE,CAAC;IAC3B,OAAO,EAAE,SAAS,MAAM,EAAE,CAAC;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,iFAAiF;IACjF,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB,GAAG,MAAM,CAiDT;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,CAE5E;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,eAAO,MAAM,sBAAsB,QAmBvB,CAAC;AAEb,qEAAqE;AACrE,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,MAAM,GAAG;IAAE,OAAO,EAAE,MAAM,EAAE,CAAC;IAAC,OAAO,EAAE,MAAM,EAAE,CAAA;CAAE,CAU1F"}

package/dist/services/static-carry-forward.js

@@ -0,0 +1,159 @@
+/**
+ * A chunk the last deployment took away.
+ *
+ * A page opened before a deployment keeps the build it loaded: its
+ * `index.html` and entry name every lazy chunk by its content hash. The
+ * deployment then points the gateway at a NEW build directory, and the next
+ * lazy route that tab opens asks for a chunk that directory does not have.
+ * Measured on daos/test on 2026-09-29, after release d531ab26: the owner's
+ * /admin/config answered «error loading dynamically imported module:
+ * …/assets/config-CUEyrA2c.js», which was 404 — while the current build was
+ * whole (243 files referenced by its index and entry, all 200) and the chunk
+ * sat, intact, in the previous build's directory on the same disk
+ * (`/opt/omnitron/stack-static/gateway/0d98bee79c410715/assets/`). Testers
+ * met it «everywhere»: every tab older than the deployment, on every route it
+ * had not opened yet. The gateway logs none of it — `/assets/` has
+ * `access_log off`.
+ *
+ * So a new build carries the assets of the build the gateway is serving now,
+ * hard-linked into its `assets/` (content-hashed names never collide, and a
+ * link costs no space): a tab from before the deployment keeps working until
+ * its reader reloads. One generation, from each build's OWN list
+ * (`<dir>.own-assets`, written here beside the directory, never served) —
+ * carrying what was carried would grow every build by every build before it.
+ *
+ * And the builds nobody serves are removed: 122 directories, 3.9 GB, had
+ * accumulated on the test node since 2026-09-10. Kept: the newest `keep`,
+ * the new one, and every directory ANY gateway container names — running or
+ * stopped, because a stopped stack's gateway comes back with the mount it
+ * has.
+ */
+import { shellEscape } from '../shared/shell-escape.js';
+/** Directory names are the first 16 hex of the archive's sha256 (`uploadStaticBundle`). */
+const BUILD_DIR = '[0-9a-f]{16}';
+/**
+ * The script run on the node once a build is unpacked into `fresh`, before
+ * its `.delivered` marker is written. `serving` are the build directories the
+ * RUNNING gateways mount now (what open tabs loaded); `mounted` are those ANY
+ * gateway container mounts (never removed). Prints one line:
+ * `carried <n> from <k> build(s); pruned <m> build(s)`.
+ */
+export function carryForwardScript(options) {
+    const { root, fresh, serving, mounted, keep, dryRun = false } = options;
+    const q = shellEscape;
+    const servingList = serving.map(q).join(' ');
+    const keepList = [fresh, ...mounted].map(q).join(' ');
+    return [
+        'set -u',
+        `ROOT=${q(root)}; FRESH=${q(fresh)}; KEEP=${Math.max(1, Math.floor(keep))}`,
+        // The new build's own assets, beside it (a directory's contents are served).
+        //
+        // Written ONCE, and never again for the same directory. A rollback runs
+        // this for a build that is already on the node and has already been
+        // carried into — its `assets/` now holds another build's chunks as hard
+        // links. Rewriting the list there would record those as its own, and the
+        // next deployment carrying from it would carry a second generation, which
+        // is the growth this file exists to stop.
+        dryRun ? ':' : '[ -s "$FRESH.own-assets" ] || ls -1 "$FRESH/assets" 2>/dev/null > "$FRESH.own-assets"',
+        'carried=0; from=0',
+        `for S in ${servingList}; do`,
+        '  case "$S" in "$ROOT"/*) ;; *) continue ;; esac',
+        '  [ "$S" = "$FRESH" ] && continue',
+        '  [ -d "$S/assets" ] || continue',
+        '  from=$((from + 1))',
+        '  if [ -s "$S.own-assets" ]; then LIST="$S.own-assets"; else LIST=$(mktemp); ls -1 "$S/assets" > "$LIST"; fi',
+        '  while IFS= read -r f; do',
+        '    case "$f" in ""|*/*|.*) continue ;; esac',
+        '    [ -e "$FRESH/assets/$f" ] && continue',
+        '    [ -f "$S/assets/$f" ] || continue',
+        dryRun
+            ? '    :'
+            : '    ln "$S/assets/$f" "$FRESH/assets/$f" 2>/dev/null || cp -p "$S/assets/$f" "$FRESH/assets/$f" || continue',
+        '    carried=$((carried + 1))',
+        '  done < "$LIST"',
+        'done',
+        // Prune: the build directories, newest first; keep the newest KEEP and every named one.
+        'pruned=0; n=0',
+        `for D in $(ls -1dt "$ROOT"/* 2>/dev/null | grep -E "/${BUILD_DIR}$"); do`,
+        '  [ -d "$D" ] || continue',
+        '  n=$((n + 1))',
+        '  [ "$n" -le "$KEEP" ] && continue',
+        '  held=0',
+        `  for K in ${keepList}; do [ "$D" = "$K" ] && held=1; done`,
+        '  [ "$held" = 1 ] && continue',
+        dryRun
+            ? '  echo "would remove $D"; pruned=$((pruned + 1))'
+            : '  rm -rf "$D" "$D.delivered" "$D.own-assets" "$D.tar.gz" && pruned=$((pruned + 1))',
+        'done',
+        `echo "${dryRun ? 'would carry' : 'carried'} $carried from $from build(s); ${dryRun ? 'would prune' : 'pruned'} $pruned build(s)"`,
+    ].join('\n');
+}
+/**
+ * What a stack's `current` link is called, inside the static root.
+ *
+ * `current-<project>-<stack>`, because `/opt/omnitron/stack-static/gateway` is
+ * shared by every stack on the NODE — the literal is passed to
+ * `uploadStaticBundle` with no project and no stack in it — and several stacks
+ * do run on one node. A bare `current` would make one deployment repoint
+ * another stack's portal.
+ *
+ * Both sides spell it from here: the master when it swaps the link, and the
+ * shell below when it reads a container's back. `CONTAINER_PREFIX` is the same
+ * `<project>-<stack>`, which is why the container is `<project>-<stack>-gateway`.
+ */
+export function gatewayStaticLinkName(project, stack) {
+    return `current-${project}-${stack}`;
+}
+/**
+ * The build directories gateway containers on the node serve: running ones
+ * (what open tabs loaded) and all of them (what must stay).
+ *
+ * It used to read the mount SOURCE, which was the build directory itself. Once
+ * the gateway mounts the static ROOT and serves through `current-<stack>`, the
+ * source is the same constant for every gateway on the node — so the source
+ * answers «which build» with nothing, and both halves of the script below fail
+ * silently: the carry-forward finds no `assets/` under a root and copies
+ * nothing (printing `carried 0 from 0 build(s)`, a line that looks fine), and
+ * the prune stops holding any build, leaving only «newest 5 by mtime» — which
+ * is exactly the wrong rule on a ROLLBACK, where the wanted build is old.
+ *
+ * So it resolves the link instead. `readlink -f`, not `readlink`: the link is
+ * relative (it must be — it is resolved inside the container), and the reader
+ * below wants an absolute path. A gateway with no link yet — the first
+ * deployment — prints nothing, and there is nothing to carry.
+ */
+export const GATEWAY_MOUNTS_COMMAND = [
+    'for c in $(docker ps -aq --filter label=omnitron.service=gateway 2>/dev/null); do',
+    '  src=$(docker inspect -f \'{{range .Mounts}}{{if eq .Destination "/var/www/portal"}}{{.Source}}{{end}}{{end}}\' "$c" 2>/dev/null)',
+    '  state=$(docker inspect -f \'{{.State.Running}}\' "$c" 2>/dev/null)',
+    '  [ -n "$src" ] || continue',
+    // The mount is either the build directory (before this change, and on a
+    // master serving a project-relative `staticDir`) or the root that holds
+    // `current-<project>-<stack>`. Ask the labels which stack, resolve the
+    // link, and fall back to the source itself when there is no link.
+    '  proj=$(docker inspect -f \'{{index .Config.Labels "omnitron.project"}}\' "$c" 2>/dev/null)',
+    '  stk=$(docker inspect -f \'{{index .Config.Labels "omnitron.stack"}}\' "$c" 2>/dev/null)',
+    '  tgt=""',
+    // The link's name comes from `gatewayStaticLinkName` even here: given the
+    // shell's own variables it yields the shell's own string, so there is one
+    // spelling and not two that drift.
+    `  [ -n "$proj" ] && [ -n "$stk" ] && tgt=$(readlink -f "$src/${gatewayStaticLinkName('$proj', '$stk')}" 2>/dev/null)`,
+    '  [ -n "$tgt" ] || tgt="$src"',
+    '  echo "$state $tgt"',
+    'done',
+].join('\n');
+/** `true /opt/…/abc` lines → the running and the mounted sources. */
+export function readGatewayMounts(output) {
+    const serving = [];
+    const mounted = [];
+    for (const line of output.split('\n')) {
+        const m = /^(true|false)\s+(\/\S+)$/.exec(line.trim());
+        if (!m)
+            continue;
+        mounted.push(m[2]);
+        if (m[1] === 'true')
+            serving.push(m[2]);
+    }
+    return { serving: [...new Set(serving)], mounted: [...new Set(mounted)] };
+}
+//# sourceMappingURL=static-carry-forward.js.map