@omnitron-dev/omnitron 0.2.0 → 0.3.1

package/dist/services/local-bundle.js

@@ -0,0 +1,242 @@
+/**
+ * Shipping the omnitron in this working tree to a node, instead of the one on
+ * npm.
+ *
+ * The registry channel installs `@omnitron-dev/omnitron` and whatever it
+ * depends on. That is the right default and it has one property an operator
+ * cannot change: it ships what was published. Measured 2026-09-14, the
+ * published version was five months and 224 commits behind the working tree
+ * and carried the same version number, so a node built from it reported
+ * `v0.2.0` — indistinguishable from a node built from today's code.
+ *
+ * This is the other channel: build here, ship that.
+ *
+ * ## Why it is not `npm pack`
+ *
+ * `apps/omnitron` declares ten workspace dependencies, and they declare four
+ * more between them — fourteen packages that resolve inside this repository
+ * and nowhere else. A tarball of the app alone carries `workspace:*` ranges
+ * that npm on the far side cannot resolve at all.
+ *
+ * ## Why it is not `pnpm deploy`
+ *
+ * It exists, it produces a self-contained tree with `node_modules`, and
+ * shipping that tree is wrong in a way that only shows up on the target.
+ * Measured on a tree deployed from this machine:
+ *
+ *     node_modules/.pnpm/@esbuild+darwin-arm64@0.28.2
+ *     node_modules/.pnpm/@typescript+typescript-darwin-arm64@7.0.2
+ *     node_modules/.pnpm/fsevents@2.3.3
+ *
+ * Every one of those is for the machine that built it. `@esbuild/linux-x64`
+ * is not in the tree, because this machine never needed it. Unpacked on a
+ * Linux node the daemon starts and its build path does not, and the reason is
+ * three directories deep in a tarball nobody opens.
+ *
+ * ## What this does instead
+ *
+ * Pack each workspace package with `pnpm pack`, and let `npm install` run ON
+ * THE TARGET. The platform-specific packages are then resolved for the
+ * platform that will run them, which is the only place that knows what it is.
+ *
+ * The redirection is npm's own `overrides`, not a rewrite of our own.
+ * `pnpm pack` already turns `workspace:*` into the exact version — but that
+ * is a REGISTRY reference, so an install would fetch the published
+ * `@omnitron-dev/common@0.2.0`, which is the copy this channel exists to
+ * avoid. An `overrides` entry replaces the resolution of a package everywhere
+ * in the tree, transitively, which is exactly the shape of the problem.
+ *
+ * Measured before building on it: six packages, one of them reached only
+ * through another, all six resolved `file:vendor/…` in the lockfile, and
+ * `import('@omnitron-dev/titan')` returned its 33 exports.
+ */
+/** `workspace:*`, `workspace:^`, `workspace:1.2.3` — all of them. */
+export function isWorkspaceRange(range) {
+    return typeof range === 'string' && range.startsWith('workspace:');
+}
+/**
+ * `link:../packages/titan`, `link:/abs/path/to/titan`.
+ *
+ * pnpm's `link:` means "symlink this directory, do not copy it and do not
+ * install its dependencies". That is the right answer while the directory is
+ * on the same machine, and the only possible answer while it is not is that
+ * nothing resolves.
+ */
+export function isLinkRange(range) {
+    return typeof range === 'string' && range.startsWith('link:');
+}
+/**
+ * A dependency that has to travel as a tarball, because no registry has it.
+ *
+ * Both spellings name a directory on the developer's machine, and both
+ * produce a symlink in an installed tree. The difference — a `workspace:`
+ * range names a package of THIS repository, a `link:` range names a path,
+ * usually a sibling checkout — matters to pnpm and not at all here: a
+ * directory cannot be shipped by reference to a machine that does not have it.
+ *
+ * Measured, and the reason this predicate exists: an artifact built for the
+ * test node carried twenty-three symlinks of the form
+ *
+ *     node_modules/@omnitron-dev/titan
+ *       -> ../../../../../../../../../../Users/taaliman/projects/.../packages/titan
+ *
+ * — ten `..` segments, which climb past `/` and land in a home directory that
+ * exists on exactly one computer. `ls` showed every entry present; `ls
+ * <entry>/` answered `No such file or directory`. Every app on the node failed
+ * at its first import, and the builder's own check — `existsSync(node_modules)`
+ * — could not see it, because a dangling symlink is an entry that exists.
+ */
+export function isVendorableRange(range) {
+    return isWorkspaceRange(range) || isLinkRange(range);
+}
+/** A tarball name that is a safe file name and identifies the package. */
+export function tarballNameFor(name, version) {
+    // `@omnitron-dev/titan-pm` → `omnitron-dev-titan-pm-0.2.0.tgz`, which is
+    // what `npm pack` produces, minus the leading `@`.
+    return `${name.replace(/^@/, '').replace(/\//g, '-')}-${version}.tgz`;
+}
+/**
+ * Work out what has to be packed, and what each manifest becomes.
+ *
+ * Pure: the workspace is passed in. The caller reads it from disk, which is
+ * the part that cannot be tested without one.
+ */
+export function planBundle(rootName, workspace) {
+    const root = workspace.get(rootName);
+    if (!root) {
+        // The refusal names the PLACE, not only the package. Run from another
+        // project's repository — `cd ~/projects/examples/sample && omnitron fleet
+        // upgrade` — the old sentence was «@omnitron-dev/omnitron is not a
+        // package in this workspace», which is true of that workspace and reads
+        // as a broken omnitron checkout. `commands/fleet.ts` guards the
+        // neighbouring case, a cwd with NO workspace above it, and its comment
+        // describes this exact trap; a cwd with somebody ELSE'S workspace above
+        // it walks past that guard and arrives here, in the same words.
+        const names = [...workspace.keys()];
+        const found = names.length === 0
+            ? 'that workspace declares no packages at all'
+            : `that workspace holds ${names.length} package${names.length === 1 ? '' : 's'}, ` +
+                `including ${names.slice(0, 2).join(', ')}`;
+        return {
+            root: { name: rootName, version: '0.0.0' },
+            vendored: [],
+            overrides: {},
+            refusal: `${rootName} is not a package in this workspace — ${found}.`,
+        };
+    }
+    // Breadth-first over workspace ranges, so the closure is complete and the
+    // order is stable. A `dependencies` map is iterated in insertion order and
+    // the queue preserves it, which keeps a bundle byte-identical between runs
+    // that change nothing — an identity a fleet upgrade can compare.
+    const closure = [];
+    const seen = new Set([rootName]);
+    const queue = [...workspaceDepsOf(root)];
+    const missing = [];
+    while (queue.length > 0) {
+        const name = queue.shift();
+        if (seen.has(name))
+            continue;
+        seen.add(name);
+        const manifest = workspace.get(name);
+        if (!manifest) {
+            // A `workspace:*` range naming a package the workspace does not have.
+            // Packing what is left would produce a bundle that installs and then
+            // fails at the first import — reported instead.
+            missing.push(name);
+            continue;
+        }
+        closure.push(name);
+        for (const dep of workspaceDepsOf(manifest)) {
+            if (!seen.has(dep))
+                queue.push(dep);
+        }
+    }
+    if (missing.length > 0) {
+        return {
+            root,
+            vendored: [],
+            overrides: {},
+            refusal: `These packages are required through a workspace range and are not in this workspace: ` +
+                `${missing.join(', ')}.`,
+        };
+    }
+    const vendored = closure.map((name) => {
+        const m = workspace.get(name);
+        return { name, version: m.version, tarball: tarballNameFor(name, m.version) };
+    });
+    // One entry per vendored package. npm resolves an override anywhere the
+    // package appears, so a dependency three levels down inside a tarball is
+    // redirected by the same line as a direct one.
+    const overrides = {};
+    for (const v of vendored)
+        overrides[v.name] = `file:./${VENDOR_DIR}/${v.tarball}`;
+    return { root, vendored, overrides };
+}
+/** Where the tarballs sit inside a bundle. */
+export const VENDOR_DIR = 'vendor';
+/**
+ * The root `package.json` a bundle installs from.
+ *
+ * Its own function so the file that decides what the target installs can be
+ * read in a test. The root's direct workspace dependencies are given as
+ * `file:` too: an `overrides` entry redirects a resolution, and a
+ * `workspace:*` range has no resolution to redirect — npm rejects it before
+ * overrides are consulted. The same is true of `link:`, which npm reads as a
+ * path it is supposed to symlink; on the target that path is not there.
+ */
+export function bundleRootManifest(plan, version) {
+    const dependencies = {};
+    for (const [name, range] of Object.entries(plan.root.dependencies ?? {})) {
+        dependencies[name] = isVendorableRange(range) ? (plan.overrides[name] ?? range) : range;
+    }
+    return {
+        name: plan.root.name,
+        version,
+        private: true,
+        type: plan.root.type ?? 'module',
+        // A deployed daemon can also be imported by its managed applications.
+        // Preserve its public module boundary instead of publishing only dependencies.
+        ...(plan.root.main ? { main: plan.root.main } : {}),
+        ...(plan.root.module ? { module: plan.root.module } : {}),
+        ...((plan.root.publishConfig?.exports ?? plan.root.exports) !== undefined
+            ? { exports: plan.root.publishConfig?.exports ?? plan.root.exports }
+            : {}),
+        ...(plan.root.imports ? { imports: plan.root.imports } : {}),
+        ...(plan.root.bin ? { bin: plan.root.bin } : {}),
+        dependencies,
+        overrides: plan.overrides,
+    };
+}
+function workspaceDepsOf(manifest) {
+    const out = [];
+    for (const group of [manifest.dependencies, manifest.optionalDependencies]) {
+        for (const [name, range] of Object.entries(group ?? {})) {
+            if (isVendorableRange(range))
+                out.push(name);
+        }
+    }
+    return out;
+}
+/**
+ * The identity of a locally built bundle.
+ *
+ * `0.2.0` on npm and `0.2.0` in this tree are two different programs. A node
+ * running either reports the same string, so "which of my nodes are behind"
+ * has no answer and `fleet upgrade` cannot know whom to upgrade.
+ *
+ * Build metadata (`+local.<sha>.<stamp>`) is the semver-legal way to say
+ * this: comparison ignores everything after `+`, so nothing that reasons
+ * about versions is confused by it, while two builds are still visibly
+ * different strings.
+ */
+export function localVersion(baseVersion, commit, at) {
+    const stamp = at.getUTCFullYear().toString() +
+        String(at.getUTCMonth() + 1).padStart(2, '0') +
+        String(at.getUTCDate()).padStart(2, '0') +
+        String(at.getUTCHours()).padStart(2, '0') +
+        String(at.getUTCMinutes()).padStart(2, '0');
+    // Build metadata may hold only alphanumerics, dots and dashes.
+    const sha = commit.replace(/[^0-9a-zA-Z]/g, '').slice(0, 12) || 'nocommit';
+    return `${baseVersion}+local.${sha}.${stamp}`;
+}
+//# sourceMappingURL=local-bundle.js.map

package/dist/services/local-bundle.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"local-bundle.js","sourceRoot":"","sources":["../../src/services/local-bundle.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmDG;AA2CH,qEAAqE;AACrE,MAAM,UAAU,gBAAgB,CAAC,KAAa;IAC5C,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC;AACrE,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,WAAW,CAAC,KAAa;IACvC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;AAChE,CAAC;AAED;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,UAAU,iBAAiB,CAAC,KAAa;IAC7C,OAAO,gBAAgB,CAAC,KAAK,CAAC,IAAI,WAAW,CAAC,KAAK,CAAC,CAAC;AACvD,CAAC;AAED,0EAA0E;AAC1E,MAAM,UAAU,cAAc,CAAC,IAAY,EAAE,OAAe;IAC1D,yEAAyE;IACzE,mDAAmD;IACnD,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,IAAI,OAAO,MAAM,CAAC;AACxE,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,UAAU,CAAC,QAAgB,EAAE,SAAoB;IAC/D,MAAM,IAAI,GAAG,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IACrC,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,sEAAsE;QACtE,0EAA0E;QAC1E,mEAAmE;QACnE,wEAAwE;QACxE,gEAAgE;QAChE,uEAAuE;QACvE,wEAAwE;QACxE,gEAAgE;QAChE,MAAM,KAAK,GAAG,CAAC,GAAG,SAAS,CAAC,IAAI,EAAE,CAAC,CAAC;QACpC,MAAM,KAAK,GACT,KAAK,CAAC,MAAM,KAAK,CAAC;YAChB,CAAC,CAAC,4CAA4C;YAC9C,CAAC,CAAC,wBAAwB,KAAK,CAAC,MAAM,WAAW,KAAK,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,IAAI;gBAChF,aAAa,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QAClD,OAAO;YACL,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE;YAC1C,QAAQ,EAAE,EAAE;YACZ,SAAS,EAAE,EAAE;YACb,OAAO,EAAE,GAAG,QAAQ,yCAAyC,KAAK,GAAG;SACtE,CAAC;IACJ,CAAC;IAED,0EAA0E;IAC1E,2EAA2E;IAC3E,2EAA2E;IAC3E,iEAAiE;IACjE,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,MAAM,IAAI,GAAG,IAAI,GAAG,CAAS,CAAC,QAAQ,CAAC,CAAC,CAAC;IACzC,MAAM,KAAK,GAAa,CAAC,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC;IACnD,MAAM,OAAO,GAAa,EAAE,CAAC;IAE7B,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxB,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,EAAG,CAAC;QAC5B,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,SAAS;QAC7B,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAEf,MAAM,QAAQ,GAAG,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACrC,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,sEAAsE;YACtE,qEAAqE;YACrE,gDAAgD;YAChD,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACnB,SAAS;QACX,CAAC;QACD,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACnB,KAAK,MAAM,GAAG,IAAI,eAAe,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC5C,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;gBAAE,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACtC,CAAC;IACH,CAAC;IAED,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvB,OAAO;YACL,IAAI;YACJ,QAAQ,EAAE,EAAE;YACZ,SAAS,EAAE,EAAE;YACb,OAAO,EACL,uFAAuF;gBACvF,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG;SAC3B,CAAC;IACJ,CAAC;IAED,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;QACpC,MAAM,CAAC,GAAG,SAAS,CAAC,GAAG,CAAC,IAAI,CAAE,CAAC;QAC/B,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,OAAO,EAAE,cAAc,CAAC,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IAChF,CAAC,CAAC,CAAC;IAEH,wEAAwE;IACxE,yEAAyE;IACzE,+CAA+C;IAC/C,MAAM,SAAS,GAA2B,EAAE,CAAC;IAC7C,KAAK,MAAM,CAAC,IAAI,QAAQ;QAAE,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,UAAU,UAAU,IAAI,CAAC,CAAC,OAAO,EAAE,CAAC;IAElF,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC;AACvC,CAAC;AAED,8CAA8C;AAC9C,MAAM,CAAC,MAAM,UAAU,GAAG,QAAQ,CAAC;AAEnC;;;;;;;;;GASG;AACH,MAAM,UAAU,kBAAkB,CAAC,IAAgB,EAAE,OAAe;IAClE,MAAM,YAAY,GAA2B,EAAE,CAAC;IAChD,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,IAAI,EAAE,CAAC,EAAE,CAAC;QACzE,YAAY,CAAC,IAAI,CAAC,GAAG,iBAAiB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;IAC1F,CAAC;IAED,OAAO;QACL,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI;QACpB,OAAO;QACP,OAAO,EAAE,IAAI;QACb,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,QAAQ;QAChC,sEAAsE;QACtE,+EAA+E;QAC/E,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACnD,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACzD,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,OAAO,IAAI,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,SAAS;YACvE,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,OAAO,IAAI,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE;YACpE,CAAC,CAAC,EAAE,CAAC;QACP,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC5D,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAChD,YAAY;QACZ,SAAS,EAAE,IAAI,CAAC,SAAS;KAC1B,CAAC;AACJ,CAAC;AAED,SAAS,eAAe,CAAC,QAAyB;IAChD,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,KAAK,MAAM,KAAK,IAAI,CAAC,QAAQ,CAAC,YAAY,EAAE,QAAQ,CAAC,oBAAoB,CAAC,EAAE,CAAC;QAC3E,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,IAAI,EAAE,CAAC,EAAE,CAAC;YACxD,IAAI,iBAAiB,CAAC,KAAK,CAAC;gBAAE,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC/C,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,YAAY,CAAC,WAAmB,EAAE,MAAc,EAAE,EAAQ;IACxE,MAAM,KAAK,GACT,EAAE,CAAC,cAAc,EAAE,CAAC,QAAQ,EAAE;QAC9B,MAAM,CAAC,EAAE,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC;QAC7C,MAAM,CAAC,EAAE,CAAC,UAAU,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC;QACxC,MAAM,CAAC,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC;QACzC,MAAM,CAAC,EAAE,CAAC,aAAa,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IAC9C,+DAA+D;IAC/D,MAAM,GAAG,GAAG,MAAM,CAAC,OAAO,CAAC,eAAe,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,UAAU,CAAC;IAC3E,OAAO,GAAG,WAAW,UAAU,GAAG,IAAI,KAAK,EAAE,CAAC;AAChD,CAAC"}

package/dist/services/lockout.d.ts

@@ -0,0 +1,28 @@
+/**
+ * How long an account stays locked after a run of failed sign-ins.
+ *
+ * A function of its own so the schedule can be tested. The daemon's auth
+ * service had 469 lines and no tests at all, and the part worth pinning is
+ * this one: it decides when an operator is shut out of the control plane, and
+ * every mistake in it is either a lockout that never engages or one that
+ * never lets go.
+ *
+ * The state it drives is persisted rather than held in memory, because a
+ * daemon restart — which an attacker may be able to provoke — must not hand
+ * back a clean slate.
+ */
+/** Consecutive failures tolerated before the account locks. */
+export declare const MAX_FAILED_ATTEMPTS = 5;
+/** First lockout duration; doubles with each further failure. */
+export declare const LOCKOUT_BASE_MS = 60000;
+/** Ceiling for the exponential lockout. */
+export declare const LOCKOUT_MAX_MS: number;
+/**
+ * The lockout expiry after `attempts` consecutive failures.
+ *
+ * @param attempts the failure count INCLUDING the one just recorded
+ * @param now injected for tests
+ * @returns when the lock expires, or null while under the threshold
+ */
+export declare function computeLockout(attempts: number, now?: number): Date | null;
+//# sourceMappingURL=lockout.d.ts.map

package/dist/services/lockout.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"lockout.d.ts","sourceRoot":"","sources":["../../src/services/lockout.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,+DAA+D;AAC/D,eAAO,MAAM,mBAAmB,IAAI,CAAC;AAErC,iEAAiE;AACjE,eAAO,MAAM,eAAe,QAAS,CAAC;AAEtC,2CAA2C;AAC3C,eAAO,MAAM,cAAc,QAAc,CAAC;AAE1C;;;;;;GAMG;AACH,wBAAgB,cAAc,CAAC,QAAQ,EAAE,MAAM,EAAE,GAAG,GAAE,MAAmB,GAAG,IAAI,GAAG,IAAI,CAatF"}

package/dist/services/lockout.js

@@ -0,0 +1,41 @@
+/**
+ * How long an account stays locked after a run of failed sign-ins.
+ *
+ * A function of its own so the schedule can be tested. The daemon's auth
+ * service had 469 lines and no tests at all, and the part worth pinning is
+ * this one: it decides when an operator is shut out of the control plane, and
+ * every mistake in it is either a lockout that never engages or one that
+ * never lets go.
+ *
+ * The state it drives is persisted rather than held in memory, because a
+ * daemon restart — which an attacker may be able to provoke — must not hand
+ * back a clean slate.
+ */
+/** Consecutive failures tolerated before the account locks. */
+export const MAX_FAILED_ATTEMPTS = 5;
+/** First lockout duration; doubles with each further failure. */
+export const LOCKOUT_BASE_MS = 60_000;
+/** Ceiling for the exponential lockout. */
+export const LOCKOUT_MAX_MS = 30 * 60_000;
+/**
+ * The lockout expiry after `attempts` consecutive failures.
+ *
+ * @param attempts the failure count INCLUDING the one just recorded
+ * @param now injected for tests
+ * @returns when the lock expires, or null while under the threshold
+ */
+export function computeLockout(attempts, now = Date.now()) {
+    // A non-finite or negative count is not a smaller number of failures, it is
+    // a broken one — and reading it as "under the threshold" would disable the
+    // lockout entirely for whoever produced it.
+    if (!Number.isFinite(attempts))
+        return new Date(now + LOCKOUT_BASE_MS);
+    const overThreshold = Math.floor(attempts) - MAX_FAILED_ATTEMPTS;
+    if (overThreshold < 0)
+        return null;
+    // 2 ** overThreshold overflows to Infinity around 1024 attempts; the min
+    // against the cap handles that, but only because Infinity compares larger.
+    const duration = Math.min(LOCKOUT_BASE_MS * 2 ** overThreshold, LOCKOUT_MAX_MS);
+    return new Date(now + duration);
+}
+//# sourceMappingURL=lockout.js.map

package/dist/services/lockout.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"lockout.js","sourceRoot":"","sources":["../../src/services/lockout.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,+DAA+D;AAC/D,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC;AAErC,iEAAiE;AACjE,MAAM,CAAC,MAAM,eAAe,GAAG,MAAM,CAAC;AAEtC,2CAA2C;AAC3C,MAAM,CAAC,MAAM,cAAc,GAAG,EAAE,GAAG,MAAM,CAAC;AAE1C;;;;;;GAMG;AACH,MAAM,UAAU,cAAc,CAAC,QAAgB,EAAE,GAAG,GAAW,IAAI,CAAC,GAAG,EAAE;IACvE,4EAA4E;IAC5E,2EAA2E;IAC3E,4CAA4C;IAC5C,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAAE,OAAO,IAAI,IAAI,CAAC,GAAG,GAAG,eAAe,CAAC,CAAC;IAEvE,MAAM,aAAa,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,mBAAmB,CAAC;IACjE,IAAI,aAAa,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IAEnC,yEAAyE;IACzE,2EAA2E;IAC3E,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,eAAe,GAAG,CAAC,IAAI,aAAa,EAAE,cAAc,CAAC,CAAC;IAChF,OAAO,IAAI,IAAI,CAAC,GAAG,GAAG,QAAQ,CAAC,CAAC;AAClC,CAAC"}

package/dist/services/log-collector.rpc-service.d.ts

@@ -20,6 +20,18 @@ export declare class LogsRpcService {
         offset?: number;
     }): Promise<LogQueryResult>;
     getLogStats(): Promise<LogStats>;
+    /**
+     * In-memory ingestion counters — no database work, safe to poll.
+     *
+     * `getLogStats` above runs three `count(*)` over the whole table (22.5
+     * million rows on this host), so it is not an answer to "how fast are logs
+     * arriving". This is.
+     */
+    getIngestionStats(): Promise<{
+        ingestedTotal: number;
+        droppedTotal: number;
+        bufferSize: number;
+    }>;
     /**
      * Stream logs — returns recent entries matching the filter.
      * The webapp can poll this endpoint for near-real-time tailing,
@@ -31,6 +43,10 @@ export declare class LogsRpcService {
         app?: string;
         level?: string | string[];
         search?: string;
+        /** One cluster node, as on `queryLogs`. */
+        nodeId?: string;
+        /** jsonb containment, as on `queryLogs`. */
+        labels?: Record<string, string>;
         tail?: number;
         since?: string;
     }): Promise<LogEntryRow[]>;

package/dist/services/log-collector.rpc-service.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"log-collector.rpc-service.d.ts","sourceRoot":"","sources":["../../src/services/log-collector.rpc-service.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAIH,OAAO,KAAK,EACV,mBAAmB,EAEnB,cAAc,EACd,QAAQ,EACR,WAAW,EACZ,MAAM,4BAA4B,CAAC;AAEpC,qBACa,cAAc;IACb,OAAO,CAAC,QAAQ,CAAC,YAAY;gBAAZ,YAAY,EAAE,mBAAmB;IAOxD,SAAS,CAAC,IAAI,EAAE;QACpB,GAAG,CAAC,EAAE,MAAM,CAAC;QACb,KAAK,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;QAC1B,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAChC,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,EAAE,CAAC,EAAE,MAAM,CAAC;QACZ,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,MAAM,CAAC,EAAE,MAAM,CAAC;KACjB,GAAG,OAAO,CAAC,cAAc,CAAC;IAKrB,WAAW,IAAI,OAAO,CAAC,QAAQ,CAAC;IAQtC;;;;;;OAMG;IAEG,UAAU,CAAC,IAAI,EAAE;QACrB,GAAG,CAAC,EAAE,MAAM,CAAC;QACb,KAAK,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;QAC1B,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,KAAK,CAAC,EAAE,MAAM,CAAC;KAChB,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC;CAU3B"}
+{"version":3,"file":"log-collector.rpc-service.d.ts","sourceRoot":"","sources":["../../src/services/log-collector.rpc-service.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAIH,OAAO,KAAK,EACV,mBAAmB,EAEnB,cAAc,EACd,QAAQ,EACR,WAAW,EACZ,MAAM,4BAA4B,CAAC;AAEpC,qBACa,cAAc;IACb,OAAO,CAAC,QAAQ,CAAC,YAAY;IAAzC,YAA6B,YAAY,EAAE,mBAAmB,EAAI;IAO5D,SAAS,CAAC,IAAI,EAAE;QACpB,GAAG,CAAC,EAAE,MAAM,CAAC;QACb,KAAK,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;QAC1B,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAChC,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,EAAE,CAAC,EAAE,MAAM,CAAC;QACZ,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,MAAM,CAAC,EAAE,MAAM,CAAC;KACjB,GAAG,OAAO,CAAC,cAAc,CAAC,CAE1B;IAGK,WAAW,IAAI,OAAO,CAAC,QAAQ,CAAC,CAErC;IAED;;;;;;OAMG;IAEG,iBAAiB,IAAI,OAAO,CAAC;QAAE,aAAa,EAAE,MAAM,CAAC;QAAC,YAAY,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAA;KAAE,CAAC,CAEtG;IAMD;;;;;;OAMG;IAEG,UAAU,CAAC,IAAI,EAAE;QACrB,GAAG,CAAC,EAAE,MAAM,CAAC;QACb,KAAK,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;QAC1B,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,2CAA2C;QAC3C,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,4CAA4C;QAC5C,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAChC,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,KAAK,CAAC,EAAE,MAAM,CAAC;KAChB,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC,CASzB;CACF"}

package/dist/services/log-collector.rpc-service.js

@@ -29,6 +29,16 @@ let LogsRpcService = class LogsRpcService {
     async getLogStats() {
         return this.logCollector.getLogStats();
     }
+    /**
+     * In-memory ingestion counters — no database work, safe to poll.
+     *
+     * `getLogStats` above runs three `count(*)` over the whole table (22.5
+     * million rows on this host), so it is not an answer to "how fast are logs
+     * arriving". This is.
+     */
+    async getIngestionStats() {
+        return this.logCollector.getIngestionStats();
+    }
     // ===========================================================================
     // Real-time tailing
     // ===========================================================================
@@ -60,6 +70,12 @@ __decorate([
     __metadata("design:paramtypes", []),
     __metadata("design:returntype", Promise)
 ], LogsRpcService.prototype, "getLogStats", null);
+__decorate([
+    Public({ auth: { roles: VIEWER_ROLES } }),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", []),
+    __metadata("design:returntype", Promise)
+], LogsRpcService.prototype, "getIngestionStats", null);
 __decorate([
     Public({ auth: { roles: VIEWER_ROLES } }),
     __metadata("design:type", Function),

package/dist/services/log-collector.rpc-service.js.map

@@ -1 +1 @@
-{"version":3,"file":"log-collector.rpc-service.js","sourceRoot":"","sources":["../../src/services/log-collector.rpc-service.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;;;;;;;;;;AAEH,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,gCAAgC,CAAC;AACjE,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAU3C,IAAM,cAAc,GAApB,MAAM,cAAc;IACI;IAA7B,YAA6B,YAAiC;QAAjC,iBAAY,GAAZ,YAAY,CAAqB;IAAG,CAAC;IAElE,8EAA8E;IAC9E,kBAAkB;IAClB,8EAA8E;IAGxE,AAAN,KAAK,CAAC,SAAS,CAAC,IAUf;QACC,OAAO,IAAI,CAAC,YAAY,CAAC,SAAS,CAAC,IAAsB,CAAC,CAAC;IAC7D,CAAC;IAGK,AAAN,KAAK,CAAC,WAAW;QACf,OAAO,IAAI,CAAC,YAAY,CAAC,WAAW,EAAE,CAAC;IACzC,CAAC;IAED,8EAA8E;IAC9E,oBAAoB;IACpB,8EAA8E;IAE9E;;;;;;OAMG;IAEG,AAAN,KAAK,CAAC,UAAU,CAAC,IAMhB;QACC,MAAM,MAAM,GAAG,EAAE,GAAG,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,IAAI,GAAG,EAAwC,CAAC;QAEzF,iEAAiE;QACjE,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC;QAC3B,CAAC;QAED,OAAO,IAAI,CAAC,YAAY,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC;IACjD,CAAC;CACF,CAAA;AA/CO;IADL,MAAM,CAAC,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,YAAY,EAAE,EAAE,CAAC;;;;+CAazC;AAGK;IADL,MAAM,CAAC,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,YAAY,EAAE,EAAE,CAAC;;;;iDAGzC;AAcK;IADL,MAAM,CAAC,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,YAAY,EAAE,EAAE,CAAC;;;;gDAgBzC;AAtDU,cAAc;IAD1B,OAAO,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC;;GACrB,cAAc,CAuD1B"}
+{"version":3,"file":"log-collector.rpc-service.js","sourceRoot":"","sources":["../../src/services/log-collector.rpc-service.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;;;;;;;;;;AAEH,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,gCAAgC,CAAC;AACjE,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAU3C,IAAM,cAAc,GAApB,MAAM,cAAc;IACI,YAAY;IAAzC,YAA6B,YAAiC;4BAAjC,YAAY;IAAwB,CAAC;IAElE,8EAA8E;IAC9E,kBAAkB;IAClB,8EAA8E;IAGxE,AAAN,KAAK,CAAC,SAAS,CAAC,IAUf;QACC,OAAO,IAAI,CAAC,YAAY,CAAC,SAAS,CAAC,IAAsB,CAAC,CAAC;IAC7D,CAAC;IAGK,AAAN,KAAK,CAAC,WAAW;QACf,OAAO,IAAI,CAAC,YAAY,CAAC,WAAW,EAAE,CAAC;IACzC,CAAC;IAED;;;;;;OAMG;IAEG,AAAN,KAAK,CAAC,iBAAiB;QACrB,OAAO,IAAI,CAAC,YAAY,CAAC,iBAAiB,EAAE,CAAC;IAC/C,CAAC;IAED,8EAA8E;IAC9E,oBAAoB;IACpB,8EAA8E;IAE9E;;;;;;OAMG;IAEG,AAAN,KAAK,CAAC,UAAU,CAAC,IAUhB;QACC,MAAM,MAAM,GAAG,EAAE,GAAG,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,IAAI,GAAG,EAAwC,CAAC;QAEzF,iEAAiE;QACjE,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC;QAC3B,CAAC;QAED,OAAO,IAAI,CAAC,YAAY,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC;IACjD,CAAC;CACF,CAAA;AA/DO;IADL,MAAM,CAAC,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,YAAY,EAAE,EAAE,CAAC;;;;+CAazC;AAGK;IADL,MAAM,CAAC,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,YAAY,EAAE,EAAE,CAAC;;;;iDAGzC;AAUK;IADL,MAAM,CAAC,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,YAAY,EAAE,EAAE,CAAC;;;;uDAGzC;AAcK;IADL,MAAM,CAAC,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,YAAY,EAAE,EAAE,CAAC;;;;gDAoBzC;AAtEU,cAAc;IAD1B,OAAO,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC;;GACrB,cAAc,CAuE1B"}