@omnitron-dev/omnitron 0.2.0 → 0.3.1

package/dist/cluster/leader-election.js

@@ -38,7 +38,22 @@ export class LeaderElection extends EventEmitter {
     config;
     startedAt = Date.now();
     running = false;
-    constructor(nodeId, fleetService, logger, config) {
+    constructor(
+    /**
+     * What this node is called until `start()` — when it becomes this
+     * daemon's row in the fleet table, which is the only name its peers can
+     * find it by. See `start()`.
+     */
+    nodeId, fleetService, 
+    /**
+     * The daemon passes a full `ILogger`; this shape used to name only
+     * `info`, `warn` and `debug`. The omission was not a decision — it left
+     * the component that decides cluster leadership unable to report an
+     * error at the level an error deserves, so anything genuinely wrong here
+     * had to be filed as a warning or dropped. `error` is what the caller
+     * has always provided.
+     */
+    logger, config) {
         super();
         this.nodeId = nodeId;
         this.fleetService = fleetService;
@@ -58,6 +73,22 @@ export class LeaderElection extends EventEmitter {
     async start() {
         if (this.running)
             return;
+        // Peers know this node by its row in the fleet table: `isFleetMember`
+        // looks a candidate or a leader up there by id, and the rows' ids are
+        // uuids. The daemon constructed this election as `${hostname}-${port}`,
+        // which no row is called — so every vote this node asked for and every
+        // heartbeat it sent as leader would have been refused as coming from a
+        // stranger, its own `heartbeat`/`setRole` failed on the uuid column, and
+        // it counted itself among its peers. A cluster of more than one master
+        // could never have elected anyone. The row exists by now: the daemon
+        // registers itself (`registerSelf`) before it starts the election.
+        const row = this.fleetService.selfNodeId;
+        if (row) {
+            this.nodeId = row;
+        }
+        else {
+            this.logger.error({ nodeId: this.nodeId }, 'Leader election is starting without a row in the fleet table — peers will refuse its votes and heartbeats');
+        }
         this.running = true;
         this.state = 'follower';
         this.term = 0;
@@ -117,6 +148,10 @@ export class LeaderElection extends EventEmitter {
     async onHeartbeat(data) {
         if (!this.running)
             return;
+        if (!(await this.isFleetMember(data.leaderId))) {
+            this.logger.warn({ nodeId: this.nodeId, leaderId: data.leaderId }, 'Ignored heartbeat from a node that is not in the fleet registry');
+            return;
+        }
         if (data.term >= this.term) {
             const previousState = this.state;
             if (data.term > this.term) {
@@ -145,6 +180,10 @@ export class LeaderElection extends EventEmitter {
         if (!this.running) {
             return { granted: false, term: this.term };
         }
+        if (!(await this.isFleetMember(request.candidateId))) {
+            this.logger.warn({ nodeId: this.nodeId, candidateId: request.candidateId }, 'Rejected vote request from a node that is not in the fleet registry');
+            return { granted: false, term: this.term };
+        }
         // If candidate has higher term, step down and update term
         if (request.term > this.term) {
             this.term = request.term;
@@ -167,6 +206,26 @@ export class LeaderElection extends EventEmitter {
     // ===========================================================================
     // Election Protocol — Outgoing (Election Cycle)
     // ===========================================================================
+    /**
+     * The port a peer answers `/netron/invoke` on.
+     *
+     * `FleetNode.port` is the daemon's Netron TCP port (9700 by default) and
+     * this call is HTTP, so addressing it there reaches a socket that does not
+     * speak the protocol — `fetch` fails to connect and the `catch` below turns
+     * that into "peer unreachable". Every vote request and every heartbeat in a
+     * multi-node cluster failed that way, silently and identically to a genuinely
+     * dead peer: no node could reach a majority, and followers re-elected
+     * forever. Measured against a running daemon: POST to :9700 returns no HTTP
+     * response at all, the same request to the daemon's HTTP port answers.
+     *
+     * The daemon records its HTTP RPC port at registration; a peer without one
+     * predates that and cannot be called, which is a configuration fact worth
+     * saying rather than a delivery failure to swallow.
+     */
+    rpcPortOf(peer) {
+        const port = peer.metadata?.['rpcPort'];
+        return typeof port === 'number' && port > 0 ? port : null;
+    }
     /**
      * Call a remote peer's RPC method via HTTP Netron invoke.
      * Used for vote requests and leader heartbeats.
@@ -191,6 +250,18 @@ export class LeaderElection extends EventEmitter {
             return null; // Peer unreachable
         }
     }
+    /**
+     * Run an election now instead of waiting for the timeout.
+     *
+     * Exists so tests can exercise the election itself rather than the
+     * scheduler around it: the interesting behaviour — what an unreadable
+     * registry means, what an empty one means — is decided inside
+     * `startElection`, while reaching it otherwise costs a 5-15s randomised
+     * wait. Not called in production; the timer is the only trigger there.
+     */
+    async forceElection() {
+        await this.startElection();
+    }
     /**
      * Start an election. Transition to candidate, increment term,
      * vote for self, and request votes from all peers.
@@ -211,12 +282,29 @@ export class LeaderElection extends EventEmitter {
             peers = await this.fleetService.listNodes();
             peers = peers.filter((n) => n.id !== this.nodeId && n.status === 'online');
         }
-        catch {
-            // Can't reach fleet registry — become leader by default (single node)
-            this.becomeLeader();
+        catch (err) {
+            // An unreadable registry is not a one-node cluster. This used to call
+            // `becomeLeader()` under the comment "become leader by default (single
+            // node)" — a conclusion, not an observation: the registry says nothing
+            // about how many nodes exist when it cannot be read at all. Three nodes
+            // losing Postgres together each concluded they were alone and each
+            // became leader, which is the exact split-brain the election exists to
+            // prevent, arrived at by the election itself.
+            //
+            // Not knowing the membership is a reason to stand down, not to take
+            // charge. The node returns to follower and tries again on the next
+            // election timeout; if the registry comes back and it really is alone,
+            // the empty-peers branch below elects it then. Leadership deferred
+            // costs an interval of master-only work; leadership duplicated costs
+            // two nodes writing as leader at once.
+            this.logger.warn({ nodeId: this.nodeId, term: this.term, error: err.message }, 'Fleet registry unreachable — standing down rather than assuming a single-node cluster');
+            this.setState('follower');
+            this.resetElectionTimer();
             return;
         }
-        // Single-node cluster — win immediately
+        // Genuinely alone: the registry answered, and it holds no other online
+        // node. Distinct from the catch above — an answer of "nobody" is a
+        // measurement, a failure to answer is not.
         if (peers.length === 0) {
             this.becomeLeader();
             return;
@@ -224,10 +312,17 @@ export class LeaderElection extends EventEmitter {
         // Count votes (start with 1 — self vote)
         const majority = Math.floor((peers.length + 1) / 2) + 1;
         // Request votes from all peers concurrently via HTTP Netron RPC
-        const votePromises = peers.map((peer) => this.callPeerRpc(peer.address, peer.port, 'requestVote', {
-            candidateId: this.nodeId,
-            term: this.term,
-        }));
+        const votePromises = peers.map((peer) => {
+            const rpcPort = this.rpcPortOf(peer);
+            if (rpcPort === null) {
+                this.logger.warn({ peer: peer.id, address: peer.address }, 'Peer registered no HTTP RPC port — cannot request its vote');
+                return Promise.resolve(null);
+            }
+            return this.callPeerRpc(peer.address, rpcPort, 'requestVote', {
+                candidateId: this.nodeId,
+                term: this.term,
+            });
+        });
         const responses = await Promise.allSettled(votePromises);
         // Tally votes — abort if we're no longer a candidate (state changed during RPC)
         if (!this.running || this.state !== 'candidate')
@@ -267,9 +362,14 @@ export class LeaderElection extends EventEmitter {
         this.clearElectionTimer();
         this.logger.info({ nodeId: this.nodeId, term: this.term }, 'Became leader');
         this.emit('leader:elected', this.nodeId, this.term);
-        // Update fleet registry with leader role
-        this.updateFleetRole('leader').catch(() => {
-            // Non-critical — fleet registry may be temporarily unavailable
+        // Update fleet registry with leader role. Reported but not fatal: this
+        // node IS the leader whatever the registry says, and the heartbeats it
+        // is about to send are what the cluster actually follows. The registry
+        // is how an operator sees the topology, so a stale one is a reporting
+        // fault rather than a correctness one — the opposite of the step-down
+        // case, where the registry outlives the fact.
+        this.updateFleetRole('leader').catch((err) => {
+            this.logger.warn({ nodeId: this.nodeId, term: this.term, err }, 'Became leader but could not record it in the fleet registry');
         });
         // Start sending heartbeats
         this.startHeartbeating();
@@ -307,8 +407,14 @@ export class LeaderElection extends EventEmitter {
         this.clearHeartbeatTimer();
         this.setState('follower');
         this.leaderId = null;
-        // Update fleet registry
-        await this.updateFleetRole('follower').catch(() => { });
+        // Update fleet registry. A failure here leaves the registry saying this
+        // node is still the leader while it has stepped down — the disagreement
+        // that every other node reads as "there is a leader" and acts on. It
+        // cannot be retried here (the step-down has already happened and must
+        // not be undone), but it must not be silent.
+        await this.updateFleetRole('follower').catch((err) => {
+            this.logger.error({ nodeId: this.nodeId, term: this.term, err }, 'Stepped down but could not update the fleet registry — it still lists this node as leader');
+        });
         // Start election timer so a new leader can be elected
         this.resetElectionTimer();
     }
@@ -382,13 +488,57 @@ export class LeaderElection extends EventEmitter {
             term: this.term,
         };
         for (const peer of peers.filter((p) => p.id !== this.nodeId)) {
-            // Fire-and-forget — don't block on individual peer responses
-            this.callPeerRpc(peer.address, peer.port, 'leaderHeartbeat', heartbeatData).catch(() => { });
+            const rpcPort = this.rpcPortOf(peer);
+            if (rpcPort === null) {
+                this.logger.warn({ peer: peer.id, address: peer.address }, 'Peer registered no HTTP RPC port — cannot send it a heartbeat');
+                continue;
+            }
+            // Fire-and-forget, and silent on purpose — unlike the swallows above
+            // it, this one is right. A peer that does not answer a heartbeat is
+            // the ordinary case (it is down, restarting, or partitioned), the
+            // consequence is already handled by that peer's own election timer,
+            // and logging at heartbeat frequency would bury everything else in
+            // the file. Absence of an answer is data the cluster acts on, not an
+            // error to report.
+            this.callPeerRpc(peer.address, rpcPort, 'leaderHeartbeat', heartbeatData).catch(() => { });
         }
     }
     // ===========================================================================
     // Internal Helpers
     // ===========================================================================
+    /**
+     * Is this node id one the fleet registry knows about?
+     *
+     * `requestVote` and `leaderHeartbeat` are `allowAnonymous` because peers
+     * call them with no credentials, so before this check ANY caller who could
+     * reach the port could send `leaderHeartbeat({ leaderId: 'x', term: 1e9 })`
+     * and every node would step down, adopt that term and treat the caller as
+     * leader — each further heartbeat resetting the election timer, so the real
+     * cluster never recovers on its own. Master-only work (alert evaluation,
+     * fleet heartbeat, telemetry relay) stops with it.
+     *
+     * Membership is not authentication: the ids are readable from
+     * `getClusterState`, and nothing stops a caller from claiming one. It is
+     * the strongest check available without inventing a credential scheme, and
+     * it costs an attacker a step they did not previously need. The real fix is
+     * a fleet credential on these two calls; see the note in
+     * cluster.rpc-service.ts.
+     *
+     * A registry that cannot be read is treated as "unknown", not "trusted" —
+     * an election is worth losing over an unavailable registry, and the node
+     * that cannot read it cannot be a useful leader anyway.
+     */
+    async isFleetMember(nodeId) {
+        if (!nodeId || nodeId === this.nodeId)
+            return false;
+        try {
+            const nodes = await this.fleetService.listNodes();
+            return nodes.some((n) => n.id === nodeId);
+        }
+        catch {
+            return false;
+        }
+    }
     setState(newState) {
         const previousState = this.state;
         if (previousState === newState)
@@ -396,13 +546,17 @@ export class LeaderElection extends EventEmitter {
         this.state = newState;
         this.emit('state:changed', newState, previousState);
     }
+    /**
+     * Write this node's role to the fleet registry.
+     *
+     * Throws. It used to swallow — which meant the `.catch()` at both call
+     * sites could never fire, including one added specifically to report the
+     * failure. Two layers each deciding the error is "best-effort" is one
+     * layer too many: the caller knows what the failure means and this does
+     * not.
+     */
     async updateFleetRole(role) {
-        try {
-            await this.fleetService.setRole(this.nodeId, role);
-        }
-        catch {
-            // Best-effort — fleet registry may not be available
-        }
+        await this.fleetService.setRole(this.nodeId, role);
     }
 }
 //# sourceMappingURL=leader-election.js.map

package/dist/cluster/leader-election.js.map

@@ -1 +1 @@
-{"version":3,"file":"leader-election.js","sourceRoot":"","sources":["../../src/cluster/leader-election.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC3C,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAqDxC,gFAAgF;AAChF,iBAAiB;AACjB,gFAAgF;AAEhF,MAAM,cAAc,GAAmB;IACrC,eAAe,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE;IAC5C,iBAAiB,EAAE,KAAK;CACzB,CAAC;AAEF,gFAAgF;AAChF,kBAAkB;AAClB,gFAAgF;AAEhF,MAAM,OAAO,cAAe,SAAQ,YAAY;IAY3B;IACA;IACA;IAbX,KAAK,GAAkB,UAAU,CAAC;IAClC,IAAI,GAAG,CAAC,CAAC;IACT,QAAQ,GAAkB,IAAI,CAAC;IAC/B,QAAQ,GAAkB,IAAI,CAAC;IAC/B,aAAa,GAA0B,IAAI,CAAC;IAC5C,cAAc,GAA0B,IAAI,CAAC;IACpC,MAAM,CAAiB;IACvB,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAChC,OAAO,GAAG,KAAK,CAAC;IAExB,YACmB,MAAc,EACd,YAA0B,EAC1B,MAA2G,EAC5H,MAAgC;QAEhC,KAAK,EAAE,CAAC;QALS,WAAM,GAAN,MAAM,CAAQ;QACd,iBAAY,GAAZ,YAAY,CAAc;QAC1B,WAAM,GAAN,MAAM,CAAqG;QAI5H,IAAI,CAAC,MAAM,GAAG,EAAE,GAAG,cAAc,EAAE,GAAG,MAAM,EAAE,CAAC;QAC/C,IAAI,MAAM,EAAE,eAAe,EAAE,CAAC;YAC5B,IAAI,CAAC,MAAM,CAAC,eAAe,GAAG,EAAE,GAAG,cAAc,CAAC,eAAe,EAAE,GAAG,MAAM,CAAC,eAAe,EAAE,CAAC;QACjG,CAAC;IACH,CAAC;IAED,8EAA8E;IAC9E,YAAY;IACZ,8EAA8E;IAE9E;;;OAGG;IACH,KAAK,CAAC,KAAK;QACT,IAAI,IAAI,CAAC,OAAO;YAAE,OAAO;QACzB,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;QACpB,IAAI,CAAC,KAAK,GAAG,UAAU,CAAC;QACxB,IAAI,CAAC,IAAI,GAAG,CAAC,CAAC;QACd,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC;QACrB,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC;QACrB,IAAI,CAAC,kBAAkB,EAAE,CAAC;QAC1B,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,EAAE,yBAAyB,CAAC,CAAC;IACvE,CAAC;IAED;;OAEG;IACH,IAAI;QACF,IAAI,CAAC,OAAO,GAAG,KAAK,CAAC;QACrB,IAAI,CAAC,kBAAkB,EAAE,CAAC;QAC1B,IAAI,CAAC,mBAAmB,EAAE,CAAC;QAC3B,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,EAAE,yBAAyB,CAAC,CAAC;IAC1F,CAAC;IAED,8EAA8E;IAC9E,gBAAgB;IAChB,8EAA8E;IAE9E,IAAI,QAAQ;QACV,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ,CAAC;IACjC,CAAC;IAED,IAAI,UAAU;QACZ,OAAO,IAAI,CAAC,KAAK,KAAK,UAAU,CAAC;IACnC,CAAC;IAED,IAAI,WAAW;QACb,OAAO,IAAI,CAAC,KAAK,KAAK,WAAW,CAAC;IACpC,CAAC;IAED,IAAI,YAAY;QACd,OAAO,IAAI,CAAC,KAAK,CAAC;IACpB,CAAC;IAED,IAAI,WAAW;QACb,OAAO,IAAI,CAAC,IAAI,CAAC;IACnB,CAAC;IAED,IAAI,eAAe;QACjB,OAAO,IAAI,CAAC,QAAQ,CAAC;IACvB,CAAC;IAED,eAAe;QACb,OAAO;YACL,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,KAAK,EAAE,CAAC,EAAE,wCAAwC;YAClD,MAAM,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,SAAS;SACpC,CAAC;IACJ,CAAC;IAED,8EAA8E;IAC9E,wCAAwC;IACxC,8EAA8E;IAE9E;;;OAGG;IACH,KAAK,CAAC,WAAW,CAAC,IAAyB;QACzC,IAAI,CAAC,IAAI,CAAC,OAAO;YAAE,OAAO;QAE1B,IAAI,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;YAC3B,MAAM,aAAa,GAAG,IAAI,CAAC,KAAK,CAAC;YACjC,IAAI,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;gBAC1B,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;gBACtB,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC;gBACrB,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;YACvC,CAAC;YAED,IAAI,IAAI,CAAC,KAAK,KAAK,UAAU,EAAE,CAAC;gBAC9B,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;YAC5B,CAAC;YAED,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC;YAC9B,IAAI,CAAC,kBAAkB,EAAE,CAAC;YAE1B,IAAI,aAAa,KAAK,QAAQ,EAAE,CAAC;gBAC/B,IAAI,CAAC,mBAAmB,EAAE,CAAC;gBAC3B,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;YACxC,CAAC;QACH,CAAC;IACH,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,aAAa,CAAC,OAAoB;QACtC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;YAClB,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC;QAC7C,CAAC;QAED,0DAA0D;QAC1D,IAAI,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;YAC7B,IAAI,CAAC,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;YACzB,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC;YACrB,IAAI,IAAI,CAAC,KAAK,KAAK,UAAU,EAAE,CAAC;gBAC9B,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;gBAC1B,IAAI,CAAC,mBAAmB,EAAE,CAAC;YAC7B,CAAC;YACD,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;QACvC,CAAC;QAED,mFAAmF;QACnF,IAAI,OAAO,CAAC,IAAI,KAAK,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,QAAQ,KAAK,IAAI,IAAI,IAAI,CAAC,QAAQ,KAAK,OAAO,CAAC,WAAW,CAAC,EAAE,CAAC;YACpG,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC,WAAW,CAAC;YACpC,IAAI,CAAC,kBAAkB,EAAE,CAAC,CAAC,oDAAoD;YAC/E,IAAI,CAAC,MAAM,CAAC,KAAK,CACf,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,QAAQ,EAAE,OAAO,CAAC,WAAW,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,EACvE,cAAc,CACf,CAAC;YACF,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC;QAC5C,CAAC;QAED,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC;IAC7C,CAAC;IAED,8EAA8E;IAC9E,gDAAgD;IAChD,8EAA8E;IAE9E;;;OAGG;IACK,KAAK,CAAC,WAAW,CAAC,IAAY,EAAE,IAAY,EAAE,MAAc,EAAE,IAAa;QACjF,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,UAAU,IAAI,IAAI,IAAI,gBAAgB,EAAE;gBACnE,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;gBAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;oBACnB,OAAO,EAAE,iBAAiB;oBAC1B,MAAM;oBACN,KAAK,EAAE,CAAC,IAAI,CAAC;oBACb,EAAE,EAAE,MAAM,CAAC,UAAU,EAAE;iBACxB,CAAC;gBACF,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC;aAClC,CAAC,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,IAAI,EAA6B,CAAC;YAChE,OAAO,MAAM,EAAE,CAAC,MAAM,CAAC,CAAC;QAC1B,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC,CAAC,mBAAmB;QAClC,CAAC;IACH,CAAC;IAED;;;OAGG;IACK,KAAK,CAAC,aAAa;QACzB,IAAI,CAAC,IAAI,CAAC,OAAO;YAAE,OAAO;QAE1B,0BAA0B;QAC1B,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;QAC3B,IAAI,CAAC,IAAI,EAAE,CAAC;QACZ,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC;QAC5B,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC;QAErB,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;QACrC,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,EACxC,mBAAmB,CACpB,CAAC;QAEF,2CAA2C;QAC3C,IAAI,KAAkB,CAAC;QACvB,IAAI,CAAC;YACH,KAAK,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,SAAS,EAAE,CAAC;YAC5C,KAAK,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,IAAI,CAAC,MAAM,IAAI,CAAC,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC;QAC7E,CAAC;QAAC,MAAM,CAAC;YACP,sEAAsE;YACtE,IAAI,CAAC,YAAY,EAAE,CAAC;YACpB,OAAO;QACT,CAAC;QAED,wCAAwC;QACxC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACvB,IAAI,CAAC,YAAY,EAAE,CAAC;YACpB,OAAO;QACT,CAAC;QAED,yCAAyC;QACzC,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC;QAExD,gEAAgE;QAChE,MAAM,YAAY,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CACtC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,IAAI,EAAE,aAAa,EAAE;YACvD,WAAW,EAAE,IAAI,CAAC,MAAM;YACxB,IAAI,EAAE,IAAI,CAAC,IAAI;SAChB,CAAC,CACH,CAAC;QACF,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC;QAEzD,gFAAgF;QAChF,IAAI,CAAC,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,KAAK,KAAK,WAAW;YAAE,OAAO;QAExD,IAAI,aAAa,GAAG,CAAC,CAAC,CAAC,YAAY;QACnC,KAAK,MAAM,CAAC,IAAI,SAAS,EAAE,CAAC;YAC1B,IAAI,CAAC,CAAC,MAAM,KAAK,WAAW,IAAI,CAAC,CAAC,KAAK,EAAE,OAAO,EAAE,CAAC;gBACjD,aAAa,EAAE,CAAC;YAClB,CAAC;YACD,2CAA2C;YAC3C,IAAI,CAAC,CAAC,MAAM,KAAK,WAAW,IAAI,CAAC,CAAC,KAAK,EAAE,IAAI,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;gBAC1D,IAAI,CAAC,IAAI,GAAG,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC;gBACzB,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC;gBACrB,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;gBAC1B,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;gBACrC,IAAI,CAAC,kBAAkB,EAAE,CAAC;gBAC1B,OAAO;YACT,CAAC;QACH,CAAC;QAED,4BAA4B;QAC5B,IAAI,aAAa,IAAI,QAAQ,EAAE,CAAC;YAC9B,IAAI,CAAC,YAAY,EAAE,CAAC;QACtB,CAAC;aAAM,CAAC;YACN,yDAAyD;YACzD,IAAI,CAAC,kBAAkB,EAAE,CAAC;QAC5B,CAAC;IACH,CAAC;IAED;;OAEG;IACK,YAAY;QAClB,IAAI,IAAI,CAAC,KAAK,KAAK,QAAQ;YAAE,OAAO;QAEpC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QACxB,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC;QAC5B,IAAI,CAAC,kBAAkB,EAAE,CAAC;QAE1B,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,EACxC,eAAe,CAChB,CAAC;QAEF,IAAI,CAAC,IAAI,CAAC,gBAAgB,EAAE,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;QAEpD,yCAAyC;QACzC,IAAI,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE;YACxC,+DAA+D;QACjE,CAAC,CAAC,CAAC;QAEH,2BAA2B;QAC3B,IAAI,CAAC,iBAAiB,EAAE,CAAC;IAC3B,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,WAAW,CAAC,UAAkB,EAAE,QAAsB;QAC1D,IAAI,CAAC,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,KAAK,KAAK,WAAW;YAAE,OAAO;QAExD,IAAI,QAAQ,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;YAC9B,mCAAmC;YACnC,IAAI,CAAC,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC;YAC1B,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC;YACrB,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;YAC1B,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;YACrC,OAAO;QACT,CAAC;QAED,IAAI,QAAQ,CAAC,OAAO,IAAI,QAAQ,CAAC,IAAI,KAAK,IAAI,CAAC,IAAI,EAAE,CAAC;YACpD,IAAI,CAAC,MAAM,CAAC,KAAK,CACf,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,EAC1D,eAAe,CAChB,CAAC;YAEF,8DAA8D;YAC9D,+CAA+C;YAC/C,gDAAgD;QAClD,CAAC;IACH,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,QAAQ;QACZ,IAAI,IAAI,CAAC,KAAK,KAAK,QAAQ;YAAE,OAAO;QAEpC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,EAAE,2BAA2B,CAAC,CAAC;QACxF,IAAI,CAAC,mBAAmB,EAAE,CAAC;QAC3B,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;QAC1B,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC;QAErB,wBAAwB;QACxB,MAAM,IAAI,CAAC,eAAe,CAAC,UAAU,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QAEvD,sDAAsD;QACtD,IAAI,CAAC,kBAAkB,EAAE,CAAC;IAC5B,CAAC;IAED,8EAA8E;IAC9E,SAAS;IACT,8EAA8E;IAE9E;;;OAGG;IACK,kBAAkB;QACxB,IAAI,CAAC,kBAAkB,EAAE,CAAC;QAC1B,MAAM,OAAO,GAAG,SAAS,CACvB,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,GAAG,EAC/B,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,GAAG,GAAG,CAAC,CACpC,CAAC;QACF,IAAI,CAAC,aAAa,GAAG,UAAU,CAAC,GAAG,EAAE;YACnC,IAAI,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;gBAC5C,IAAI,CAAC,aAAa,EAAE,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;oBACjC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,KAAK,EAAG,GAAa,CAAC,OAAO,EAAE,EAAE,iBAAiB,CAAC,CAAC;gBACzE,CAAC,CAAC,CAAC;YACL,CAAC;QACH,CAAC,EAAE,OAAO,CAAC,CAAC;QACZ,IAAI,CAAC,aAAa,CAAC,KAAK,EAAE,CAAC;IAC7B,CAAC;IAEO,kBAAkB;QACxB,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC;YACvB,YAAY,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;YACjC,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC;QAC5B,CAAC;IACH,CAAC;IAED;;OAEG;IACK,iBAAiB;QACvB,IAAI,CAAC,mBAAmB,EAAE,CAAC;QAC3B,IAAI,CAAC,cAAc,GAAG,WAAW,CAAC,GAAG,EAAE;YACrC,IAAI,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;gBAC5C,IAAI,CAAC,cAAc,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE;oBAC/B,sDAAsD;gBACxD,CAAC,CAAC,CAAC;YACL,CAAC;QACH,CAAC,EAAE,IAAI,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC;QAClC,IAAI,CAAC,cAAc,CAAC,KAAK,EAAE,CAAC;IAC9B,CAAC;IAEO,mBAAmB;QACzB,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;YACxB,aAAa,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;YACnC,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC;QAC7B,CAAC;IACH,CAAC;IAED;;;OAGG;IACK,KAAK,CAAC,cAAc;QAC1B,yCAAyC;QACzC,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,YAAY,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACjD,CAAC;QAAC,MAAM,CAAC;YACP,eAAe;QACjB,CAAC;QAED,2CAA2C;QAC3C,IAAI,KAAkB,CAAC;QACvB,IAAI,CAAC;YACH,KAAK,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,SAAS,EAAE,CAAC;QAC9C,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,CAAC,6BAA6B;QACvC,CAAC;QAED,MAAM,aAAa,GAAwB;YACzC,QAAQ,EAAE,IAAI,CAAC,MAAM;YACrB,IAAI,EAAE,IAAI,CAAC,IAAI;SAChB,CAAC;QAEF,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;YAC7D,6DAA6D;YAC7D,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,IAAI,EAAE,iBAAiB,EAAE,aAAa,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QAC9F,CAAC;IACH,CAAC;IAED,8EAA8E;IAC9E,mBAAmB;IACnB,8EAA8E;IAEtE,QAAQ,CAAC,QAAuB;QACtC,MAAM,aAAa,GAAG,IAAI,CAAC,KAAK,CAAC;QACjC,IAAI,aAAa,KAAK,QAAQ;YAAE,OAAO;QACvC,IAAI,CAAC,KAAK,GAAG,QAAQ,CAAC;QACtB,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,QAAQ,EAAE,aAAa,CAAC,CAAC;IACtD,CAAC;IAEO,KAAK,CAAC,eAAe,CAAC,IAA2B;QACvD,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QACrD,CAAC;QAAC,MAAM,CAAC;YACP,oDAAoD;QACtD,CAAC;IACH,CAAC;CACF"}
+{"version":3,"file":"leader-election.js","sourceRoot":"","sources":["../../src/cluster/leader-election.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC3C,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAqDxC,gFAAgF;AAChF,iBAAiB;AACjB,gFAAgF;AAEhF,MAAM,cAAc,GAAmB;IACrC,eAAe,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE;IAC5C,iBAAiB,EAAE,KAAK;CACzB,CAAC;AAEF,gFAAgF;AAChF,kBAAkB;AAClB,gFAAgF;AAEhF,MAAM,OAAO,cAAe,SAAQ,YAAY;IAiBpC,MAAM;IACG,YAAY;IASZ,MAAM;IA1BjB,KAAK,GAAkB,UAAU,CAAC;IAClC,IAAI,GAAG,CAAC,CAAC;IACT,QAAQ,GAAkB,IAAI,CAAC;IAC/B,QAAQ,GAAkB,IAAI,CAAC;IAC/B,aAAa,GAA0B,IAAI,CAAC;IAC5C,cAAc,GAA0B,IAAI,CAAC;IACpC,MAAM,CAAiB;IACvB,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAChC,OAAO,GAAG,KAAK,CAAC;IAExB;IACE;;;;OAIG;IACK,MAAc,EACL,YAA0B;IAC3C;;;;;;;OAOG;IACc,MAKhB,EACD,MAAgC;QAEhC,KAAK,EAAE,CAAC;sBAlBA,MAAM;4BACG,YAAY;sBASZ,MAAM;QASvB,IAAI,CAAC,MAAM,GAAG,EAAE,GAAG,cAAc,EAAE,GAAG,MAAM,EAAE,CAAC;QAC/C,IAAI,MAAM,EAAE,eAAe,EAAE,CAAC;YAC5B,IAAI,CAAC,MAAM,CAAC,eAAe,GAAG,EAAE,GAAG,cAAc,CAAC,eAAe,EAAE,GAAG,MAAM,CAAC,eAAe,EAAE,CAAC;QACjG,CAAC;IACH,CAAC;IAED,8EAA8E;IAC9E,YAAY;IACZ,8EAA8E;IAE9E;;;OAGG;IACH,KAAK,CAAC,KAAK;QACT,IAAI,IAAI,CAAC,OAAO;YAAE,OAAO;QAEzB,sEAAsE;QACtE,sEAAsE;QACtE,wEAAwE;QACxE,uEAAuE;QACvE,uEAAuE;QACvE,yEAAyE;QACzE,uEAAuE;QACvE,qEAAqE;QACrE,mEAAmE;QACnE,MAAM,GAAG,GAAG,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC;QACzC,IAAI,GAAG,EAAE,CAAC;YACR,IAAI,CAAC,MAAM,GAAG,GAAG,CAAC;QACpB,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,MAAM,CAAC,KAAK,CACf,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,EACvB,2GAA2G,CAC5G,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;QACpB,IAAI,CAAC,KAAK,GAAG,UAAU,CAAC;QACxB,IAAI,CAAC,IAAI,GAAG,CAAC,CAAC;QACd,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC;QACrB,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC;QACrB,IAAI,CAAC,kBAAkB,EAAE,CAAC;QAC1B,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,EAAE,yBAAyB,CAAC,CAAC;IACvE,CAAC;IAED;;OAEG;IACH,IAAI;QACF,IAAI,CAAC,OAAO,GAAG,KAAK,CAAC;QACrB,IAAI,CAAC,kBAAkB,EAAE,CAAC;QAC1B,IAAI,CAAC,mBAAmB,EAAE,CAAC;QAC3B,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,EAAE,yBAAyB,CAAC,CAAC;IAC1F,CAAC;IAED,8EAA8E;IAC9E,gBAAgB;IAChB,8EAA8E;IAE9E,IAAI,QAAQ;QACV,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ,CAAC;IACjC,CAAC;IAED,IAAI,UAAU;QACZ,OAAO,IAAI,CAAC,KAAK,KAAK,UAAU,CAAC;IACnC,CAAC;IAED,IAAI,WAAW;QACb,OAAO,IAAI,CAAC,KAAK,KAAK,WAAW,CAAC;IACpC,CAAC;IAED,IAAI,YAAY;QACd,OAAO,IAAI,CAAC,KAAK,CAAC;IACpB,CAAC;IAED,IAAI,WAAW;QACb,OAAO,IAAI,CAAC,IAAI,CAAC;IACnB,CAAC;IAED,IAAI,eAAe;QACjB,OAAO,IAAI,CAAC,QAAQ,CAAC;IACvB,CAAC;IAED,eAAe;QACb,OAAO;YACL,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,KAAK,EAAE,CAAC,EAAE,wCAAwC;YAClD,MAAM,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,SAAS;SACpC,CAAC;IACJ,CAAC;IAED,8EAA8E;IAC9E,wCAAwC;IACxC,8EAA8E;IAE9E;;;OAGG;IACH,KAAK,CAAC,WAAW,CAAC,IAAyB;QACzC,IAAI,CAAC,IAAI,CAAC,OAAO;YAAE,OAAO;QAE1B,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC;YAC/C,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,EAChD,iEAAiE,CAClE,CAAC;YACF,OAAO;QACT,CAAC;QAED,IAAI,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;YAC3B,MAAM,aAAa,GAAG,IAAI,CAAC,KAAK,CAAC;YACjC,IAAI,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;gBAC1B,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;gBACtB,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC;gBACrB,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;YACvC,CAAC;YAED,IAAI,IAAI,CAAC,KAAK,KAAK,UAAU,EAAE,CAAC;gBAC9B,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;YAC5B,CAAC;YAED,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC;YAC9B,IAAI,CAAC,kBAAkB,EAAE,CAAC;YAE1B,IAAI,aAAa,KAAK,QAAQ,EAAE,CAAC;gBAC/B,IAAI,CAAC,mBAAmB,EAAE,CAAC;gBAC3B,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;YACxC,CAAC;QACH,CAAC;IACH,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,aAAa,CAAC,OAAoB;QACtC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;YAClB,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC;QAC7C,CAAC;QAED,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,EAAE,CAAC;YACrD,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,WAAW,EAAE,OAAO,CAAC,WAAW,EAAE,EACzD,qEAAqE,CACtE,CAAC;YACF,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC;QAC7C,CAAC;QAED,0DAA0D;QAC1D,IAAI,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;YAC7B,IAAI,CAAC,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;YACzB,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC;YACrB,IAAI,IAAI,CAAC,KAAK,KAAK,UAAU,EAAE,CAAC;gBAC9B,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;gBAC1B,IAAI,CAAC,mBAAmB,EAAE,CAAC;YAC7B,CAAC;YACD,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;QACvC,CAAC;QAED,mFAAmF;QACnF,IAAI,OAAO,CAAC,IAAI,KAAK,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,QAAQ,KAAK,IAAI,IAAI,IAAI,CAAC,QAAQ,KAAK,OAAO,CAAC,WAAW,CAAC,EAAE,CAAC;YACpG,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC,WAAW,CAAC;YACpC,IAAI,CAAC,kBAAkB,EAAE,CAAC,CAAC,oDAAoD;YAC/E,IAAI,CAAC,MAAM,CAAC,KAAK,CACf,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,QAAQ,EAAE,OAAO,CAAC,WAAW,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,EACvE,cAAc,CACf,CAAC;YACF,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC;QAC5C,CAAC;QAED,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC;IAC7C,CAAC;IAED,8EAA8E;IAC9E,gDAAgD;IAChD,8EAA8E;IAE9E;;;;;;;;;;;;;;;OAeG;IACK,SAAS,CAAC,IAAe;QAC/B,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC,SAAS,CAAC,CAAC;QACxC,OAAO,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;IAC5D,CAAC;IAED;;;OAGG;IACK,KAAK,CAAC,WAAW,CAAC,IAAY,EAAE,IAAY,EAAE,MAAc,EAAE,IAAa;QACjF,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,UAAU,IAAI,IAAI,IAAI,gBAAgB,EAAE;gBACnE,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;gBAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;oBACnB,OAAO,EAAE,iBAAiB;oBAC1B,MAAM;oBACN,KAAK,EAAE,CAAC,IAAI,CAAC;oBACb,EAAE,EAAE,MAAM,CAAC,UAAU,EAAE;iBACxB,CAAC;gBACF,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC;aAClC,CAAC,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,IAAI,EAA6B,CAAC;YAChE,OAAO,MAAM,EAAE,CAAC,MAAM,CAAC,CAAC;QAC1B,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC,CAAC,mBAAmB;QAClC,CAAC;IACH,CAAC;IAED;;;;;;;;OAQG;IACH,KAAK,CAAC,aAAa;QACjB,MAAM,IAAI,CAAC,aAAa,EAAE,CAAC;IAC7B,CAAC;IAED;;;OAGG;IACK,KAAK,CAAC,aAAa;QACzB,IAAI,CAAC,IAAI,CAAC,OAAO;YAAE,OAAO;QAE1B,0BAA0B;QAC1B,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;QAC3B,IAAI,CAAC,IAAI,EAAE,CAAC;QACZ,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC;QAC5B,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC;QAErB,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;QACrC,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,EACxC,mBAAmB,CACpB,CAAC;QAEF,2CAA2C;QAC3C,IAAI,KAAkB,CAAC;QACvB,IAAI,CAAC;YACH,KAAK,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,SAAS,EAAE,CAAC;YAC5C,KAAK,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,IAAI,CAAC,MAAM,IAAI,CAAC,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC;QAC7E,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,sEAAsE;YACtE,uEAAuE;YACvE,uEAAuE;YACvE,wEAAwE;YACxE,mEAAmE;YACnE,uEAAuE;YACvE,8CAA8C;YAC9C,EAAE;YACF,oEAAoE;YACpE,mEAAmE;YACnE,uEAAuE;YACvE,mEAAmE;YACnE,qEAAqE;YACrE,uCAAuC;YACvC,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,KAAK,EAAG,GAAa,CAAC,OAAO,EAAE,EACvE,uFAAuF,CACxF,CAAC;YACF,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;YAC1B,IAAI,CAAC,kBAAkB,EAAE,CAAC;YAC1B,OAAO;QACT,CAAC;QAED,uEAAuE;QACvE,mEAAmE;QACnE,2CAA2C;QAC3C,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACvB,IAAI,CAAC,YAAY,EAAE,CAAC;YACpB,OAAO;QACT,CAAC;QAED,yCAAyC;QACzC,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC;QAExD,gEAAgE;QAChE,MAAM,YAAY,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;YACtC,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;YACrC,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;gBACrB,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,EACxC,4DAA4D,CAC7D,CAAC;gBACF,OAAO,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;YAC/B,CAAC;YACD,OAAO,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,EAAE,aAAa,EAAE;gBAC5D,WAAW,EAAE,IAAI,CAAC,MAAM;gBACxB,IAAI,EAAE,IAAI,CAAC,IAAI;aAChB,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QACH,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC;QAEzD,gFAAgF;QAChF,IAAI,CAAC,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,KAAK,KAAK,WAAW;YAAE,OAAO;QAExD,IAAI,aAAa,GAAG,CAAC,CAAC,CAAC,YAAY;QACnC,KAAK,MAAM,CAAC,IAAI,SAAS,EAAE,CAAC;YAC1B,IAAI,CAAC,CAAC,MAAM,KAAK,WAAW,IAAI,CAAC,CAAC,KAAK,EAAE,OAAO,EAAE,CAAC;gBACjD,aAAa,EAAE,CAAC;YAClB,CAAC;YACD,2CAA2C;YAC3C,IAAI,CAAC,CAAC,MAAM,KAAK,WAAW,IAAI,CAAC,CAAC,KAAK,EAAE,IAAI,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;gBAC1D,IAAI,CAAC,IAAI,GAAG,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC;gBACzB,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC;gBACrB,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;gBAC1B,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;gBACrC,IAAI,CAAC,kBAAkB,EAAE,CAAC;gBAC1B,OAAO;YACT,CAAC;QACH,CAAC;QAED,4BAA4B;QAC5B,IAAI,aAAa,IAAI,QAAQ,EAAE,CAAC;YAC9B,IAAI,CAAC,YAAY,EAAE,CAAC;QACtB,CAAC;aAAM,CAAC;YACN,yDAAyD;YACzD,IAAI,CAAC,kBAAkB,EAAE,CAAC;QAC5B,CAAC;IACH,CAAC;IAED;;OAEG;IACK,YAAY;QAClB,IAAI,IAAI,CAAC,KAAK,KAAK,QAAQ;YAAE,OAAO;QAEpC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QACxB,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC;QAC5B,IAAI,CAAC,kBAAkB,EAAE,CAAC;QAE1B,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,EACxC,eAAe,CAChB,CAAC;QAEF,IAAI,CAAC,IAAI,CAAC,gBAAgB,EAAE,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;QAEpD,uEAAuE;QACvE,uEAAuE;QACvE,uEAAuE;QACvE,sEAAsE;QACtE,sEAAsE;QACtE,8CAA8C;QAC9C,IAAI,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;YAC3C,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,GAAG,EAAE,EAC7C,6DAA6D,CAC9D,CAAC;QACJ,CAAC,CAAC,CAAC;QAEH,2BAA2B;QAC3B,IAAI,CAAC,iBAAiB,EAAE,CAAC;IAC3B,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,WAAW,CAAC,UAAkB,EAAE,QAAsB;QAC1D,IAAI,CAAC,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,KAAK,KAAK,WAAW;YAAE,OAAO;QAExD,IAAI,QAAQ,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;YAC9B,mCAAmC;YACnC,IAAI,CAAC,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC;YAC1B,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC;YACrB,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;YAC1B,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;YACrC,OAAO;QACT,CAAC;QAED,IAAI,QAAQ,CAAC,OAAO,IAAI,QAAQ,CAAC,IAAI,KAAK,IAAI,CAAC,IAAI,EAAE,CAAC;YACpD,IAAI,CAAC,MAAM,CAAC,KAAK,CACf,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,EAC1D,eAAe,CAChB,CAAC;YAEF,8DAA8D;YAC9D,+CAA+C;YAC/C,gDAAgD;QAClD,CAAC;IACH,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,QAAQ;QACZ,IAAI,IAAI,CAAC,KAAK,KAAK,QAAQ;YAAE,OAAO;QAEpC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,EAAE,2BAA2B,CAAC,CAAC;QACxF,IAAI,CAAC,mBAAmB,EAAE,CAAC;QAC3B,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;QAC1B,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC;QAErB,wEAAwE;QACxE,wEAAwE;QACxE,qEAAqE;QACrE,sEAAsE;QACtE,6CAA6C;QAC7C,MAAM,IAAI,CAAC,eAAe,CAAC,UAAU,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;YACnD,IAAI,CAAC,MAAM,CAAC,KAAK,CACf,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,GAAG,EAAE,EAC7C,2FAA2F,CAC5F,CAAC;QACJ,CAAC,CAAC,CAAC;QAEH,sDAAsD;QACtD,IAAI,CAAC,kBAAkB,EAAE,CAAC;IAC5B,CAAC;IAED,8EAA8E;IAC9E,SAAS;IACT,8EAA8E;IAE9E;;;OAGG;IACK,kBAAkB;QACxB,IAAI,CAAC,kBAAkB,EAAE,CAAC;QAC1B,MAAM,OAAO,GAAG,SAAS,CACvB,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,GAAG,EAC/B,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,GAAG,GAAG,CAAC,CACpC,CAAC;QACF,IAAI,CAAC,aAAa,GAAG,UAAU,CAAC,GAAG,EAAE;YACnC,IAAI,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;gBAC5C,IAAI,CAAC,aAAa,EAAE,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;oBACjC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,KAAK,EAAG,GAAa,CAAC,OAAO,EAAE,EAAE,iBAAiB,CAAC,CAAC;gBACzE,CAAC,CAAC,CAAC;YACL,CAAC;QACH,CAAC,EAAE,OAAO,CAAC,CAAC;QACZ,IAAI,CAAC,aAAa,CAAC,KAAK,EAAE,CAAC;IAC7B,CAAC;IAEO,kBAAkB;QACxB,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC;YACvB,YAAY,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;YACjC,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC;QAC5B,CAAC;IACH,CAAC;IAED;;OAEG;IACK,iBAAiB;QACvB,IAAI,CAAC,mBAAmB,EAAE,CAAC;QAC3B,IAAI,CAAC,cAAc,GAAG,WAAW,CAAC,GAAG,EAAE;YACrC,IAAI,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;gBAC5C,IAAI,CAAC,cAAc,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE;oBAC/B,sDAAsD;gBACxD,CAAC,CAAC,CAAC;YACL,CAAC;QACH,CAAC,EAAE,IAAI,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC;QAClC,IAAI,CAAC,cAAc,CAAC,KAAK,EAAE,CAAC;IAC9B,CAAC;IAEO,mBAAmB;QACzB,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;YACxB,aAAa,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;YACnC,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC;QAC7B,CAAC;IACH,CAAC;IAED;;;OAGG;IACK,KAAK,CAAC,cAAc;QAC1B,yCAAyC;QACzC,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,YAAY,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACjD,CAAC;QAAC,MAAM,CAAC;YACP,eAAe;QACjB,CAAC;QAED,2CAA2C;QAC3C,IAAI,KAAkB,CAAC;QACvB,IAAI,CAAC;YACH,KAAK,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,SAAS,EAAE,CAAC;QAC9C,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,CAAC,6BAA6B;QACvC,CAAC;QAED,MAAM,aAAa,GAAwB;YACzC,QAAQ,EAAE,IAAI,CAAC,MAAM;YACrB,IAAI,EAAE,IAAI,CAAC,IAAI;SAChB,CAAC;QAEF,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;YAC7D,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;YACrC,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;gBACrB,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,EACxC,+DAA+D,CAChE,CAAC;gBACF,SAAS;YACX,CAAC;YACD,qEAAqE;YACrE,oEAAoE;YACpE,kEAAkE;YAClE,oEAAoE;YACpE,mEAAmE;YACnE,qEAAqE;YACrE,mBAAmB;YACnB,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,EAAE,iBAAiB,EAAE,aAAa,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QAC5F,CAAC;IACH,CAAC;IAED,8EAA8E;IAC9E,mBAAmB;IACnB,8EAA8E;IAE9E;;;;;;;;;;;;;;;;;;;;;OAqBG;IACK,KAAK,CAAC,aAAa,CAAC,MAA0B;QACpD,IAAI,CAAC,MAAM,IAAI,MAAM,KAAK,IAAI,CAAC,MAAM;YAAE,OAAO,KAAK,CAAC;QACpD,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,SAAS,EAAE,CAAC;YAClD,OAAO,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,MAAM,CAAC,CAAC;QAC5C,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAEO,QAAQ,CAAC,QAAuB;QACtC,MAAM,aAAa,GAAG,IAAI,CAAC,KAAK,CAAC;QACjC,IAAI,aAAa,KAAK,QAAQ;YAAE,OAAO;QACvC,IAAI,CAAC,KAAK,GAAG,QAAQ,CAAC;QACtB,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,QAAQ,EAAE,aAAa,CAAC,CAAC;IACtD,CAAC;IAED;;;;;;;;OAQG;IACK,KAAK,CAAC,eAAe,CAAC,IAA2B;QACvD,MAAM,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IACrD,CAAC;CACF"}

package/dist/cluster/mesh-link.d.ts

@@ -0,0 +1,136 @@
+/**
+ * How a master reaches a node's daemon, and what it presents when it gets
+ * there.
+ *
+ * Both halves were missing, and each hid the other.
+ *
+ * TRANSPORT. `SlaveConnector` dials `tcp://<host>:<port>` directly. A node on
+ * the public internet normally permits SSH and little else — the first one
+ * provisioned by this code allows 22/tcp and three ports from one private
+ * address — so the daemon port is unreachable and the connection times out.
+ * Nothing above reads that as "the mesh cannot form": the node answers SSH,
+ * deploys, reports healthy, and replicates nothing.
+ *
+ * CREDENTIAL. Past the transport, `OmnitronSync.drainBuffer` answers
+ * `Authentication required`. It is declared for `admin | operator |
+ * service_role`, and the master had no token any node would accept. The
+ * comment on that endpoint has said so since it was written: "`service_role`
+ * cannot be presented today … this is one end of an unfinished cross-daemon
+ * path". This is the other end.
+ *
+ * A daemon persists its own `auth.jwtSecret` in `~/.omnitron/config.json` and
+ * verifies HS256 tokens issued `omnitron` against it. The master already
+ * holds root SSH for every node it provisioned — that is how it put the
+ * daemon there — so it can read that secret and mint a short-lived
+ * `service_role` token. This grants the master nothing it did not already
+ * have: whoever can run `omnitron up` on a machine can read the file.
+ *
+ * Measured against the live node, in this order:
+ *
+ *     direct tcp://37.27.130.185:9700        → connection timeout
+ *     through the tunnel, OmnitronDaemon.ping → v0.2.0+local.de0ccff6b022…
+ *     OmnitronSync.drainBuffer, no token      → Authentication required
+ *     OmnitronSync.drainBuffer, service_role  → 2 entries
+ */
+import type { ILogger } from '@omnitron-dev/titan/module/logger';
+import type { ExecutionService, SSHTarget } from '../execution/execution.service.js';
+/** One way in to one node, and how to give it back. */
+export interface MeshLink {
+    /** The address to hand netron. */
+    url: string;
+    /** Presented with `runTask('authenticate')`, when the node needs one. */
+    token?: string | undefined;
+    /** How the master got there, for the operator reading a node card. */
+    via: 'direct' | 'ssh-tunnel';
+    /**
+     * Called when the node refuses this credential.
+     *
+     * A daemon's signing secret is read once and kept, because it does not
+     * change — until the node is reinstalled, which writes a new one. The
+     * master would then present the old secret on every reconnect, for as
+     * long as it runs, and the node would refuse every time. Nothing in the
+     * retry loop can notice that: a rejected credential and an unreachable
+     * node fail at the same place.
+     *
+     * Given the failure, the cache can be dropped and the next attempt reads
+     * the node's current secret.
+     */
+    onRejected?: ((reason?: string) => void) | undefined;
+    /** Releases whatever was opened to make `url` work. */
+    close?: (() => Promise<void>) | undefined;
+}
+export interface MeshTarget {
+    host: string;
+    /** The daemon's TCP port on the node. */
+    port: number;
+}
+export type MeshDialer = (target: MeshTarget) => Promise<MeshLink>;
+/** The transport that needs nothing arranged. */
+export declare const directLink: (target: MeshTarget) => Promise<MeshLink>;
+/**
+ * Can a TCP connection be made, within a budget?
+ *
+ * Its own probe rather than "try netron and see": a netron connect that
+ * fails has already built a Netron, registered a transport and started a
+ * handshake, and the failure surfaces as a protocol timeout that reads like
+ * a broken daemon. A refused or timed-out socket is the plain fact, and it
+ * is what decides between the two transports.
+ */
+export declare function probeTcp(host: string, port: number, timeoutMs: number): Promise<boolean>;
+/**
+ * The command that reads a daemon's own signing secret off a node.
+ *
+ * Node's own JSON parse rather than a shell tool, because `jq` is not
+ * something a freshly provisioned machine has, and the runtime omnitron
+ * installed certainly is. Written to stdout with no newline so the caller
+ * can trim nothing and still be right.
+ */
+export declare const READ_DAEMON_SECRET: string;
+/**
+ * Mint a token in the shape a daemon verifies.
+ *
+ * Deliberately short-lived and without a `sid`. A master daemon validates
+ * `sid` against its session table; a slave has no session store and skips
+ * that check — so a token carrying a session id that exists nowhere would
+ * work on a slave and be refused by a master, which is the wrong way for a
+ * credential to behave. Carrying none is true on both.
+ */
+export declare function mintServiceToken(secret: string, subject: string, ttl?: string): Promise<string>;
+export interface MeshDialerOptions {
+    logger: ILogger;
+    execution: ExecutionService;
+    /** SSH credentials for a node, or null when the master has none. */
+    sshTargetFor: (target: MeshTarget) => Promise<SSHTarget | null>;
+    /** Names the master in the `sub` claim, so a node's log says who called. */
+    subject: string;
+    /** How long to wait on a direct connection before reaching for SSH. */
+    directProbeTimeoutMs?: number;
+}
+/**
+ * Build the dialer the connector uses: direct where direct works, SSH where
+ * it does not.
+ *
+ * Direct is tried first on every connect rather than remembered, because
+ * which one works is a property of the network at this moment — a firewall
+ * rule changes, a node moves onto the cluster's private side — and a cached
+ * answer to that question is a node that stays on the slow path forever, or
+ * one that stops connecting at all.
+ *
+ * A node the master has no SSH credentials for still gets a direct link:
+ * that is the cluster case, where nodes share a private network and the
+ * console never held a password. Failing instead would be refusing to do
+ * the thing that had always worked.
+ */
+export declare function createMeshDialer(options: MeshDialerOptions): MeshDialer;
+/**
+ * RFC 4122 name-based uuid, version 5.
+ *
+ * Exported with the namespace as a parameter so a test can run it against
+ * the published vector — `v5("www.example.com", DNS)` is
+ * `2ed6657d-e927-568b-95e1-2665a8aea6a2` — rather than against a second copy
+ * of the same arithmetic written in the test, which would agree with itself
+ * whatever either of them did.
+ */
+export declare function uuidV5(namespace: string, name: string): string;
+export declare function stableNodeUuid(host: string, port: number): string;
+//# sourceMappingURL=mesh-link.d.ts.map

package/dist/cluster/mesh-link.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mesh-link.d.ts","sourceRoot":"","sources":["../../src/cluster/mesh-link.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AAIH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,mCAAmC,CAAC;AACjE,OAAO,KAAK,EAAE,gBAAgB,EAAE,SAAS,EAAE,MAAM,mCAAmC,CAAC;AAErF,uDAAuD;AACvD,MAAM,WAAW,QAAQ;IACvB,kCAAkC;IAClC,GAAG,EAAE,MAAM,CAAC;IACZ,yEAAyE;IACzE,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC3B,sEAAsE;IACtE,GAAG,EAAE,QAAQ,GAAG,YAAY,CAAC;IAC7B;;;;;;;;;;;;OAYG;IACH,UAAU,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,MAAM,KAAK,IAAI,CAAC,GAAG,SAAS,CAAC;IACrD,uDAAuD;IACvD,KAAK,CAAC,EAAE,CAAC,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,GAAG,SAAS,CAAC;CAC3C;AAED,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,yCAAyC;IACzC,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,MAAM,UAAU,GAAG,CAAC,MAAM,EAAE,UAAU,KAAK,OAAO,CAAC,QAAQ,CAAC,CAAC;AAEnE,iDAAiD;AACjD,eAAO,MAAM,UAAU,WAAkB,UAAU,KAAG,OAAO,CAAC,QAAQ,CAGpE,CAAC;AAEH;;;;;;;;GAQG;AACH,wBAAgB,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAgBxF;AAED;;;;;;;GAOG;AACH,eAAO,MAAM,kBAAkB,QAE0B,CAAC;AAE1D;;;;;;;;GAQG;AACH,wBAAsB,gBAAgB,CACpC,MAAM,EAAE,MAAM,EACd,OAAO,EAAE,MAAM,EACf,GAAG,SAAO,GACT,OAAO,CAAC,MAAM,CAAC,CASjB;AAED,MAAM,WAAW,iBAAiB;IAChC,MAAM,EAAE,OAAO,CAAC;IAChB,SAAS,EAAE,gBAAgB,CAAC;IAC5B,oEAAoE;IACpE,YAAY,EAAE,CAAC,MAAM,EAAE,UAAU,KAAK,OAAO,CAAC,SAAS,GAAG,IAAI,CAAC,CAAC;IAChE,4EAA4E;IAC5E,OAAO,EAAE,MAAM,CAAC;IAChB,uEAAuE;IACvE,oBAAoB,CAAC,EAAE,MAAM,CAAC;CAC/B;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,iBAAiB,GAAG,UAAU,CAsEvE;AA4BD;;;;;;;;GAQG;AACH,wBAAgB,MAAM,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAU9D;AAED,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAEjE"}