@omnitron-dev/omnitron 0.3.1 → 0.3.2

package/dist/services/telemetry.service.js

@@ -1,136 +1,30 @@
-/**
- * Omnitron Telemetry Service — Wires TelemetryRelay into the daemon
- *
- * In single-node (dev) mode: role='both' — records and stores locally.
- * In cluster mode: leader=aggregator, followers=producers via Netron TCP.
- *
- * Aggregator stores telemetry in omnitron-pg via LogCollectorService (logs).
- * Metrics go to titan-metrics' store, which the console reads; the master's
- * `metrics_raw` table this once promised was never read and is dropped
- * (migration 010).
- */
-import { TelemetryRelayService, } from '@omnitron-dev/titan-telemetry-relay';
-// =============================================================================
-// PG Aggregator — stores telemetry in omnitron-pg
-// =============================================================================
-class PgTelemetryAggregator {
-    logCollector;
-    logger;
-    constructor(logCollector, logger) {
-        this.logCollector = logCollector;
-        this.logger = logger;
-    }
-    async ingest(nodeId, entries) {
-        let ingested = 0;
-        // Batch by type for efficient storage
-        const logs = [];
-        const metricEntries = [];
-        const healthEntries = [];
-        for (const entry of entries) {
-            switch (entry.type) {
-                case 'log':
-                    logs.push(entry);
-                    break;
-                case 'metric':
-                    metricEntries.push(entry);
-                    break;
-                case 'health':
-                    healthEntries.push(entry);
-                    break;
-                default:
-                    // event, alert — store as log with type label
-                    logs.push(entry);
-                    break;
-            }
-        }
-        // Ingest logs
-        if (logs.length > 0) {
-            try {
-                await this.logCollector.ingestBatch(logs.map((e) => ({
-                    app: e.app ?? 'unknown',
-                    level: e.data['level'] ?? 'info',
-                    message: e.data['message'] ?? JSON.stringify(e.data),
-                    labels: { ...e.labels, nodeId, type: e.type },
-                    traceId: e.data['traceId'] ?? null,
-                    spanId: e.data['spanId'] ?? null,
-                })));
-                ingested += logs.length;
-            }
-            catch (err) {
-                this.logger.warn({ error: err.message, count: logs.length }, 'Failed to ingest telemetry logs');
-            }
-        }
-        // Metrics are now handled by TitanMetricsModule — telemetry relay just counts them
-        ingested += metricEntries.length;
-        // Process health entries (update node health state)
-        for (const _entry of healthEntries) {
-            // Future: update nodes table with health status
-            ingested++;
-        }
-        return ingested;
-    }
-    async query() {
-        // Query delegates to LogCollectorService for now
-        return [];
-    }
-}
-/**
- * Create and configure the TelemetryRelayService for the daemon.
- */
-export function createTelemetryRelay(deps) {
-    const role = deps.isLeader !== false ? 'both' : 'producer';
-    const relay = new TelemetryRelayService({
-        nodeId: deps.nodeId ?? `omnitron-${process.pid}`,
-        role,
-        buffer: {
-            maxBufferSize: 5_000,
-            flushIntervalMs: 5_000, // 5s flush for telemetry
-            maxBatchSize: 1_000,
+import { TelemetryRelayService } from '@omnitron-dev/titan-telemetry-relay';
+/** Local application relay. Fleet log/metric replication uses the receipt-backed Sync service. */
+export function createTelemetryRelay(logCollector) {
+    const relay = new TelemetryRelayService({ nodeId: 'local', role: 'both', wal: false,
+        buffer: { maxBufferSize: 5_000, flushIntervalMs: 5_000, maxBatchSize: 1_000 } });
+    relay.setAggregator({
+        async ingest(nodeId, entries) {
+            if (nodeId !== relay.nodeId)
+                throw new Error('Local relay source identity mismatch');
+            const batch = entries.map(entry => {
+                if (entry.type !== 'log' && entry.type !== 'event' && entry.type !== 'alert') {
+                    throw new Error(`The local log sink cannot persist telemetry type '${entry.type}'`);
+                }
+                return {
+                    ...(entry.id && { id: entry.id }), app: entry.app ?? 'unknown', timestamp: entry.timestamp,
+                    level: typeof entry.data['level'] === 'string' ? entry.data['level'] : 'info',
+                    message: typeof entry.data['message'] === 'string' ? entry.data['message'] : JSON.stringify(entry.data),
+                    labels: { ...entry.labels, nodeId, type: entry.type }, metadata: { telemetry: entry.data },
+                    ...(typeof entry.data['traceId'] === 'string' && { traceId: entry.data['traceId'] }),
+                    ...(typeof entry.data['spanId'] === 'string' && { spanId: entry.data['spanId'] }),
+                };
+            });
+            await logCollector.persistCaptured(batch);
+            return batch.length;
         },
-        wal: role === 'producer' ? { maxSizeBytes: 50 * 1024 * 1024, maxSegments: 10 } : false,
+        async query() { throw new Error('Read stored application logs through OmnitronLogs'); },
     });
-    // Set up aggregator (for 'both' role — leader stores telemetry locally)
-    if (role === 'both') {
-        const aggregator = new PgTelemetryAggregator(deps.logCollector, deps.logger);
-        relay.setAggregator(aggregator);
-    }
     return relay;
 }
-/**
- * Wire the relay into the orchestrator's log pipeline.
- * Every app log line goes through the relay for unified telemetry.
- */
-export function wireTelemetryToOrchestrator(relay, onAppLog) {
-    onAppLog((appName, line) => {
-        // Parse pino JSON line
-        let level = 'info';
-        let message = line;
-        try {
-            const parsed = JSON.parse(line);
-            level = pinoLevelToString(parsed.level ?? 30);
-            message = parsed.msg ?? parsed.message ?? line;
-        }
-        catch {
-            // Plain text — use as-is
-        }
-        relay.record({
-            type: 'log',
-            app: appName,
-            data: { level, message },
-        });
-    });
-}
-function pinoLevelToString(level) {
-    if (level <= 10)
-        return 'trace';
-    if (level <= 20)
-        return 'debug';
-    if (level <= 30)
-        return 'info';
-    if (level <= 40)
-        return 'warn';
-    if (level <= 50)
-        return 'error';
-    return 'fatal';
-}
 //# sourceMappingURL=telemetry.service.js.map

package/dist/services/telemetry.service.js.map

@@ -1 +1 @@
-{"version":3,"file":"telemetry.service.js","sourceRoot":"","sources":["../../src/services/telemetry.service.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAIH,OAAO,EACL,qBAAqB,GAGtB,MAAM,qCAAqC,CAAC;AAI7C,gFAAgF;AAChF,kDAAkD;AAClD,gFAAgF;AAEhF,MAAM,qBAAqB;IAEN,YAAY;IACZ,MAAM;IAFzB,YACmB,YAAiC,EACjC,MAAe;4BADf,YAAY;sBACZ,MAAM;IACtB,CAAC;IAEJ,KAAK,CAAC,MAAM,CAAC,MAAc,EAAE,OAAyB;QACpD,IAAI,QAAQ,GAAG,CAAC,CAAC;QAEjB,sCAAsC;QACtC,MAAM,IAAI,GAAqB,EAAE,CAAC;QAClC,MAAM,aAAa,GAAqB,EAAE,CAAC;QAC3C,MAAM,aAAa,GAAqB,EAAE,CAAC;QAE3C,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;YAC5B,QAAQ,KAAK,CAAC,IAAI,EAAE,CAAC;gBACnB,KAAK,KAAK;oBACR,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;oBACjB,MAAM;gBACR,KAAK,QAAQ;oBACX,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;oBAC1B,MAAM;gBACR,KAAK,QAAQ;oBACX,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;oBAC1B,MAAM;gBACR;oBACE,8CAA8C;oBAC9C,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;oBACjB,MAAM;YACV,CAAC;QACH,CAAC;QAED,cAAc;QACd,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACpB,IAAI,CAAC;gBACH,MAAM,IAAI,CAAC,YAAY,CAAC,WAAW,CACjC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;oBACf,GAAG,EAAE,CAAC,CAAC,GAAG,IAAI,SAAS;oBACvB,KAAK,EAAG,CAAC,CAAC,IAAI,CAAC,OAAO,CAAY,IAAI,MAAM;oBAC5C,OAAO,EAAG,CAAC,CAAC,IAAI,CAAC,SAAS,CAAY,IAAI,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC;oBAChE,MAAM,EAAE,EAAE,GAAG,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE;oBAC7C,OAAO,EAAG,CAAC,CAAC,IAAI,CAAC,SAAS,CAAY,IAAI,IAAI;oBAC9C,MAAM,EAAG,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAY,IAAI,IAAI;iBAC7C,CAAC,CAAC,CACJ,CAAC;gBACF,QAAQ,IAAI,IAAI,CAAC,MAAM,CAAC;YAC1B,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,KAAK,EAAG,GAAa,CAAC,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,MAAM,EAAE,EAAE,iCAAiC,CAAC,CAAC;YAC7G,CAAC;QACH,CAAC;QAED,mFAAmF;QACnF,QAAQ,IAAI,aAAa,CAAC,MAAM,CAAC;QAEjC,oDAAoD;QACpD,KAAK,MAAM,MAAM,IAAI,aAAa,EAAE,CAAC;YACnC,gDAAgD;YAChD,QAAQ,EAAE,CAAC;QACb,CAAC;QAED,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,KAAK,CAAC,KAAK;QACT,iDAAiD;QACjD,OAAO,EAAE,CAAC;IACZ,CAAC;CACF;AAcD;;GAEG;AACH,MAAM,UAAU,oBAAoB,CAAC,IAA0B;IAC7D,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,KAAK,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC;IAE3D,MAAM,KAAK,GAAG,IAAI,qBAAqB,CAAC;QACtC,MAAM,EAAE,IAAI,CAAC,MAAM,IAAI,YAAY,OAAO,CAAC,GAAG,EAAE;QAChD,IAAI;QACJ,MAAM,EAAE;YACN,aAAa,EAAE,KAAK;YACpB,eAAe,EAAE,KAAK,EAAE,yBAAyB;YACjD,YAAY,EAAE,KAAK;SACpB;QACD,GAAG,EAAE,IAAI,KAAK,UAAU,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,EAAE,GAAG,IAAI,GAAG,IAAI,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK;KACvF,CAAC,CAAC;IAEH,wEAAwE;IACxE,IAAI,IAAI,KAAK,MAAM,EAAE,CAAC;QACpB,MAAM,UAAU,GAAG,IAAI,qBAAqB,CAAC,IAAI,CAAC,YAAY,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;QAC7E,KAAK,CAAC,aAAa,CAAC,UAAU,CAAC,CAAC;IAClC,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,2BAA2B,CACzC,KAA4B,EAC5B,QAAoE;IAEpE,QAAQ,CAAC,CAAC,OAAO,EAAE,IAAI,EAAE,EAAE;QACzB,uBAAuB;QACvB,IAAI,KAAK,GAAG,MAAM,CAAC;QACnB,IAAI,OAAO,GAAG,IAAI,CAAC;QACnB,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAChC,KAAK,GAAG,iBAAiB,CAAC,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;YAC9C,OAAO,GAAG,MAAM,CAAC,GAAG,IAAI,MAAM,CAAC,OAAO,IAAI,IAAI,CAAC;QACjD,CAAC;QAAC,MAAM,CAAC;YACP,yBAAyB;QAC3B,CAAC;QAED,KAAK,CAAC,MAAM,CAAC;YACX,IAAI,EAAE,KAAK;YACX,GAAG,EAAE,OAAO;YACZ,IAAI,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE;SACzB,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAa;IACtC,IAAI,KAAK,IAAI,EAAE;QAAE,OAAO,OAAO,CAAC;IAChC,IAAI,KAAK,IAAI,EAAE;QAAE,OAAO,OAAO,CAAC;IAChC,IAAI,KAAK,IAAI,EAAE;QAAE,OAAO,MAAM,CAAC;IAC/B,IAAI,KAAK,IAAI,EAAE;QAAE,OAAO,MAAM,CAAC;IAC/B,IAAI,KAAK,IAAI,EAAE;QAAE,OAAO,OAAO,CAAC;IAChC,OAAO,OAAO,CAAC;AACjB,CAAC"}
+{"version":3,"file":"telemetry.service.js","sourceRoot":"","sources":["../../src/services/telemetry.service.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,qBAAqB,EAAE,MAAM,qCAAqC,CAAC;AAG5E,kGAAkG;AAClG,MAAM,UAAU,oBAAoB,CAAC,YAA0D;IAC7F,MAAM,KAAK,GAAG,IAAI,qBAAqB,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK;QACjF,MAAM,EAAE,EAAE,aAAa,EAAE,KAAK,EAAE,eAAe,EAAE,KAAK,EAAE,YAAY,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC;IACnF,KAAK,CAAC,aAAa,CAAC;QAClB,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO;YAC1B,IAAI,MAAM,KAAK,KAAK,CAAC,MAAM;gBAAE,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;YACrF,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE;gBAChC,IAAI,KAAK,CAAC,IAAI,KAAK,KAAK,IAAI,KAAK,CAAC,IAAI,KAAK,OAAO,IAAI,KAAK,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;oBAC7E,MAAM,IAAI,KAAK,CAAC,qDAAqD,KAAK,CAAC,IAAI,GAAG,CAAC,CAAC;gBACtF,CAAC;gBACD,OAAO;oBACL,GAAG,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,IAAI,SAAS,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS;oBAC1F,KAAK,EAAE,OAAO,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM;oBAC7E,OAAO,EAAE,OAAO,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC;oBACvG,MAAM,EAAE,EAAE,GAAG,KAAK,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,EAAE,QAAQ,EAAE,EAAE,SAAS,EAAE,KAAK,CAAC,IAAI,EAAE;oBAC1F,GAAG,CAAC,OAAO,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,QAAQ,IAAI,EAAE,OAAO,EAAE,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;oBACpF,GAAG,CAAC,OAAO,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,QAAQ,IAAI,EAAE,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;iBAClF,CAAC;YACJ,CAAC,CAAC,CAAC;YACH,MAAM,YAAY,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;YAC1C,OAAO,KAAK,CAAC,MAAM,CAAC;QACtB,CAAC;QACD,KAAK,CAAC,KAAK,KAAK,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC,CAAC,CAAC;KACxF,CAAC,CAAC;IACH,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/services/terminal-ssh.d.ts

@@ -0,0 +1,16 @@
+import type { SSHTarget } from '../execution/execution.service.js';
+export interface TerminalPty {
+    write(data: Buffer): Promise<void>;
+    resize(cols: number, rows: number): void;
+    close(): void;
+}
+export interface TerminalDriver {
+    probe(target: Pick<SSHTarget, 'host' | 'port'>): Promise<string>;
+    connect(target: SSHTarget, fingerprint: string, cols: number, rows: number, onData: (data: Buffer) => void, onClose: (reason: string, exitCode?: number) => void, signal: AbortSignal): Promise<TerminalPty>;
+}
+/** A policy boundary around Xec's existing NodeSSH; no independent SSH transport. */
+export declare class XecTerminalDriver implements TerminalDriver {
+    probe(target: Pick<SSHTarget, 'host' | 'port'>): Promise<string>;
+    connect(target: SSHTarget, fingerprint: string, cols: number, rows: number, onData: (data: Buffer) => void, onClose: (reason: string, exitCode?: number) => void, signal: AbortSignal): Promise<TerminalPty>;
+}
+//# sourceMappingURL=terminal-ssh.d.ts.map

package/dist/services/terminal-ssh.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"terminal-ssh.d.ts","sourceRoot":"","sources":["../../src/services/terminal-ssh.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,mCAAmC,CAAC;AAEnE,MAAM,WAAW,WAAW;IAC1B,KAAK,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACnC,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACzC,KAAK,IAAI,IAAI,CAAC;CACf;AACD,MAAM,WAAW,cAAc;IAC7B,KAAK,CAAC,MAAM,EAAE,IAAI,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IACjE,OAAO,CACL,MAAM,EAAE,SAAS,EACjB,WAAW,EAAE,MAAM,EACnB,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,EAC9B,OAAO,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,MAAM,KAAK,IAAI,EACpD,MAAM,EAAE,WAAW,GAClB,OAAO,CAAC,WAAW,CAAC,CAAC;CACzB;AAED,qFAAqF;AACrF,qBAAa,iBAAkB,YAAW,cAAc;IAChD,KAAK,CAAC,MAAM,EAAE,IAAI,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC,CAOrE;IAEK,OAAO,CACX,MAAM,EAAE,SAAS,EACjB,WAAW,EAAE,MAAM,EACnB,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,EAC9B,OAAO,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,MAAM,KAAK,IAAI,EACpD,MAAM,EAAE,WAAW,GAClB,OAAO,CAAC,WAAW,CAAC,CAmFtB;CACF"}

package/dist/services/terminal-ssh.js

@@ -0,0 +1,101 @@
+/** A policy boundary around Xec's existing NodeSSH; no independent SSH transport. */
+export class XecTerminalDriver {
+    async probe(target) {
+        const { NodeSSH } = await import('@xec-sh/core/ssh');
+        try {
+            return await NodeSSH.probeHostKey({ host: target.host, port: target.port ?? 22 });
+        }
+        catch {
+            throw new Error('SSH host key inspection failed');
+        }
+    }
+    async connect(target, fingerprint, cols, rows, onData, onClose, signal) {
+        const { NodeSSH } = await import('@xec-sh/core/ssh');
+        const ssh = new NodeSSH();
+        let channel;
+        let done = false, exitCode;
+        const pendingWrites = new Set();
+        const finish = (reason) => {
+            if (done)
+                return;
+            done = true;
+            signal.removeEventListener('abort', abort);
+            for (const fail of pendingWrites)
+                fail(new Error('SSH input interrupted'));
+            channel?.destroy();
+            ssh.dispose(true);
+            onClose(reason, exitCode);
+        };
+        const abort = () => finish('closed_by_operator');
+        if (signal.aborted)
+            throw new Error('SSH session cancelled');
+        signal.addEventListener('abort', abort, { once: true });
+        try {
+            await ssh.connect({
+                ...target,
+                username: target.username ?? 'root',
+                expectedHostFingerprint: fingerprint,
+                signal,
+                readyTimeout: 15_000,
+                keepaliveInterval: 10_000,
+                keepaliveCountMax: 3,
+            });
+            if (done)
+                throw new Error('SSH session cancelled');
+            ssh.connection?.once('error', () => finish('ssh_connection_failed'));
+            ssh.connection?.once('close', () => finish('ssh_connection_closed'));
+            channel = await ssh.requestShell({ term: 'xterm-256color', cols, rows, width: 0, height: 0 }, { signal, timeoutMs: 15_000 });
+            if (done) {
+                channel.destroy();
+                throw new Error('SSH session cancelled');
+            }
+            channel.on('data', onData);
+            channel.stderr.on('data', onData);
+            channel.once('exit', (code) => {
+                if (typeof code === 'number')
+                    exitCode = code;
+            });
+            channel.once('close', () => finish('shell_exited'));
+            channel.once('error', () => finish('ssh_channel_failed'));
+            const shell = channel;
+            return {
+                write: (data) => new Promise((resolve, reject) => {
+                    if (done) {
+                        reject(new Error('SSH session is closed'));
+                        return;
+                    }
+                    const finishWrite = (error) => {
+                        clearTimeout(timer);
+                        pendingWrites.delete(finishWrite);
+                        if (error)
+                            reject(new Error('SSH input failed'));
+                        else
+                            resolve();
+                    };
+                    const timer = setTimeout(() => {
+                        finishWrite(new Error('Input timed out'));
+                        finish('input_timeout');
+                    }, 10_000);
+                    pendingWrites.add(finishWrite);
+                    try {
+                        shell.write(data, finishWrite);
+                    }
+                    catch {
+                        finishWrite(new Error('SSH input failed'));
+                    }
+                }),
+                resize: (c, r) => {
+                    if (!done)
+                        shell.setWindow(r, c, 0, 0);
+                },
+                close: () => finish('closed_by_operator'),
+            };
+        }
+        catch (error) {
+            const reason = error.code === 'EHOSTKEY' ? 'ssh_host_key_mismatch' : 'ssh_connection_failed';
+            finish(reason);
+            throw new Error(reason, { cause: error });
+        }
+    }
+}
+//# sourceMappingURL=terminal-ssh.js.map

package/dist/services/terminal-ssh.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"terminal-ssh.js","sourceRoot":"","sources":["../../src/services/terminal-ssh.ts"],"names":[],"mappings":"AAoBA,qFAAqF;AACrF,MAAM,OAAO,iBAAiB;IAC5B,KAAK,CAAC,KAAK,CAAC,MAAwC;QAClD,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,MAAM,CAAC,kBAAkB,CAAC,CAAC;QACrD,IAAI,CAAC;YACH,OAAO,MAAM,OAAO,CAAC,YAAY,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,IAAI,EAAE,EAAE,CAAC,CAAC;QACpF,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;QACpD,CAAC;IACH,CAAC;IAED,KAAK,CAAC,OAAO,CACX,MAAiB,EACjB,WAAmB,EACnB,IAAY,EACZ,IAAY,EACZ,MAA8B,EAC9B,OAAoD,EACpD,MAAmB;QAEnB,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,MAAM,CAAC,kBAAkB,CAAC,CAAC;QACrD,MAAM,GAAG,GAAG,IAAI,OAAO,EAAE,CAAC;QAC1B,IAAI,OAAiE,CAAC;QACtE,IAAI,IAAI,GAAG,KAAK,EACd,QAA4B,CAAC;QAC/B,MAAM,aAAa,GAAG,IAAI,GAAG,EAA0B,CAAC;QACxD,MAAM,MAAM,GAAG,CAAC,MAAc,EAAE,EAAE;YAChC,IAAI,IAAI;gBAAE,OAAO;YACjB,IAAI,GAAG,IAAI,CAAC;YACZ,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;YAC3C,KAAK,MAAM,IAAI,IAAI,aAAa;gBAAE,IAAI,CAAC,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC,CAAC;YAC3E,OAAO,EAAE,OAAO,EAAE,CAAC;YACnB,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;YAClB,OAAO,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;QAC5B,CAAC,CAAC;QACF,MAAM,KAAK,GAAG,GAAG,EAAE,CAAC,MAAM,CAAC,oBAAoB,CAAC,CAAC;QACjD,IAAI,MAAM,CAAC,OAAO;YAAE,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;QAC7D,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QACxD,IAAI,CAAC;YACH,MAAM,GAAG,CAAC,OAAO,CAAC;gBAChB,GAAG,MAAM;gBACT,QAAQ,EAAE,MAAM,CAAC,QAAQ,IAAI,MAAM;gBACnC,uBAAuB,EAAE,WAAW;gBACpC,MAAM;gBACN,YAAY,EAAE,MAAM;gBACpB,iBAAiB,EAAE,MAAM;gBACzB,iBAAiB,EAAE,CAAC;aACrB,CAAC,CAAC;YACH,IAAI,IAAI;gBAAE,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;YACnD,GAAG,CAAC,UAAU,EAAE,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,uBAAuB,CAAC,CAAC,CAAC;YACrE,GAAG,CAAC,UAAU,EAAE,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,uBAAuB,CAAC,CAAC,CAAC;YACrE,OAAO,GAAG,MAAM,GAAG,CAAC,YAAY,CAC9B,EAAE,IAAI,EAAE,gBAAgB,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,EAC3D,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,CAC9B,CAAC;YACF,IAAI,IAAI,EAAE,CAAC;gBACT,OAAO,CAAC,OAAO,EAAE,CAAC;gBAClB,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;YAC3C,CAAC;YACD,OAAO,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;YAC3B,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;YAClC,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,IAAY,EAAE,EAAE;gBACpC,IAAI,OAAO,IAAI,KAAK,QAAQ;oBAAE,QAAQ,GAAG,IAAI,CAAC;YAChD,CAAC,CAAC,CAAC;YACH,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,CAAC;YACpD,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,oBAAoB,CAAC,CAAC,CAAC;YAC1D,MAAM,KAAK,GAAG,OAAO,CAAC;YACtB,OAAO;gBACL,KAAK,EAAE,CAAC,IAAI,EAAE,EAAE,CACd,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;oBACpC,IAAI,IAAI,EAAE,CAAC;wBACT,MAAM,CAAC,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC,CAAC;wBAC3C,OAAO;oBACT,CAAC;oBACD,MAAM,WAAW,GAAG,CAAC,KAAoB,EAAE,EAAE;wBAC3C,YAAY,CAAC,KAAK,CAAC,CAAC;wBACpB,aAAa,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;wBAClC,IAAI,KAAK;4BAAE,MAAM,CAAC,IAAI,KAAK,CAAC,kBAAkB,CAAC,CAAC,CAAC;;4BAC5C,OAAO,EAAE,CAAC;oBACjB,CAAC,CAAC;oBACF,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;wBAC5B,WAAW,CAAC,IAAI,KAAK,CAAC,iBAAiB,CAAC,CAAC,CAAC;wBAC1C,MAAM,CAAC,eAAe,CAAC,CAAC;oBAC1B,CAAC,EAAE,MAAM,CAAC,CAAC;oBACX,aAAa,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;oBAC/B,IAAI,CAAC;wBACH,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;oBACjC,CAAC;oBAAC,MAAM,CAAC;wBACP,WAAW,CAAC,IAAI,KAAK,CAAC,kBAAkB,CAAC,CAAC,CAAC;oBAC7C,CAAC;gBACH,CAAC,CAAC;gBACJ,MAAM,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;oBACf,IAAI,CAAC,IAAI;wBAAE,KAAK,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;gBACzC,CAAC;gBACD,KAAK,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,oBAAoB,CAAC;aAC1C,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,MAAM,GACT,KAA2B,CAAC,IAAI,KAAK,UAAU,CAAC,CAAC,CAAC,uBAAuB,CAAC,CAAC,CAAC,uBAAuB,CAAC;YACvG,MAAM,CAAC,MAAM,CAAC,CAAC;YACf,MAAM,IAAI,KAAK,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;QAC5C,CAAC;IACH,CAAC;CACF"}

package/dist/services/terminal.rpc-service.d.ts

@@ -0,0 +1,84 @@
+import type { IOmnitronTerminalService } from '../shared/dto/services.js';
+import type { TerminalPolicy, TerminalRead, TerminalSession } from '../shared/dto/terminal.js';
+import type { NodeManagerService } from './node-manager.service.js';
+import type { AuthService } from './auth.service.js';
+import type { AuditService } from './audit.service.js';
+import type { DaemonStateStore } from '../daemon/daemon-state-store.service.js';
+import { type TerminalDriver } from './terminal-ssh.js';
+export declare const TERMINAL_LIMITS: {
+    readonly outputBytes: number;
+    readonly readBytes: number;
+    readonly inputBytes: 8192;
+    readonly readWaitMs: 5000;
+};
+export declare const DEFAULT_TERMINAL_POLICY: TerminalPolicy;
+/** Limits are server policy, never values supplied by a browser. */
+export declare function terminalPolicy(input?: Partial<TerminalPolicy>): TerminalPolicy;
+/** One owner per shell. No public attach token, raw command logs, or persisted transcript. */
+export declare class TerminalRpcService implements IOmnitronTerminalService {
+    private readonly nodes;
+    private readonly auth;
+    private readonly store;
+    private readonly audit;
+    private readonly driver;
+    private readonly now;
+    activeSessionCount(): number;
+    private readonly sessions;
+    private readonly probing;
+    private readonly policy;
+    private readonly timer;
+    private sweeping;
+    private stopped;
+    constructor(nodes: Pick<NodeManagerService, 'getNode' | 'nodeToSshTarget' | 'emit'>, auth: Pick<AuthService, 'validateSession'>, store: Pick<DaemonStateStore, 'kvGetSync' | 'kvSetSync'>, audit: Pick<AuditService, 'record'>, options?: Partial<TerminalPolicy>, driver?: TerminalDriver, now?: () => number);
+    private owner;
+    private valid;
+    private node;
+    private pin;
+    capabilities(): Promise<TerminalPolicy>;
+    inspectHost(data: {
+        nodeId: string;
+    }): Promise<{
+        nodeId: string;
+        host: string;
+        port: number;
+        observed: string;
+        trusted: string | null;
+    }>;
+    trustHost(data: {
+        nodeId: string;
+        fingerprint: string;
+        previous: string | null;
+    }): Promise<void>;
+    open(data: {
+        nodeId: string;
+        cols: number;
+        rows: number;
+    }): Promise<TerminalSession>;
+    list(): Promise<TerminalSession[]>;
+    private owned;
+    read(data: {
+        id: string;
+        cursor: number;
+        wait?: boolean;
+    }): Promise<TerminalRead>;
+    write(data: {
+        id: string;
+        sequence: number;
+        data: string;
+    }): Promise<{
+        nextSequence: number;
+    }>;
+    resize(data: {
+        id: string;
+        cols: number;
+        rows: number;
+    }): Promise<void>;
+    close(data: {
+        id: string;
+    }): Promise<void>;
+    private append;
+    private finish;
+    sweep(): Promise<void>;
+    dispose(): void;
+}
+//# sourceMappingURL=terminal.rpc-service.d.ts.map

package/dist/services/terminal.rpc-service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"terminal.rpc-service.d.ts","sourceRoot":"","sources":["../../src/services/terminal.rpc-service.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,2BAA2B,CAAC;AAC1E,OAAO,KAAK,EAAE,cAAc,EAAE,YAAY,EAAE,eAAe,EAAE,MAAM,2BAA2B,CAAC;AAE/F,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AACpE,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AACrD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AACvD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,yCAAyC,CAAC;AAEhF,OAAO,EAAqB,KAAK,cAAc,EAAoB,MAAM,mBAAmB,CAAC;AAE7F,eAAO,MAAM,eAAe;aAC1B,WAAW;aACX,SAAS;aACT,UAAU,EAAE,IAAI;aAChB,UAAU,EAAE,IAAI;CACR,CAAC;AACX,eAAO,MAAM,uBAAuB,EAAE,cAOrC,CAAC;AA0BF,oEAAoE;AACpE,wBAAgB,cAAc,CAAC,KAAK,GAAE,OAAO,CAAC,cAAc,CAAM,GAAG,cAAc,CAgBlF;AAaD,8FAA8F;AAC9F,qBACa,kBAAmB,YAAW,wBAAwB;IAU/D,OAAO,CAAC,QAAQ,CAAC,KAAK;IACtB,OAAO,CAAC,QAAQ,CAAC,IAAI;IACrB,OAAO,CAAC,QAAQ,CAAC,KAAK;IACtB,OAAO,CAAC,QAAQ,CAAC,KAAK;IAEtB,OAAO,CAAC,QAAQ,CAAC,MAAM;IACvB,OAAO,CAAC,QAAQ,CAAC,GAAG;IAftB,kBAAkB,IAAI,MAAM,CAAiG;IAC7H,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAA8B;IACvD,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAqB;IAC7C,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAiB;IACxC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAiC;IACvD,OAAO,CAAC,QAAQ,CAAS;IACzB,OAAO,CAAC,OAAO,CAAS;IAExB,YACmB,KAAK,EAAE,IAAI,CAAC,kBAAkB,EAAE,SAAS,GAAG,iBAAiB,GAAG,MAAM,CAAC,EACvE,IAAI,EAAE,IAAI,CAAC,WAAW,EAAE,iBAAiB,CAAC,EAC1C,KAAK,EAAE,IAAI,CAAC,gBAAgB,EAAE,WAAW,GAAG,WAAW,CAAC,EACxD,KAAK,EAAE,IAAI,CAAC,YAAY,EAAE,QAAQ,CAAC,EACpD,OAAO,GAAE,OAAO,CAAC,cAAc,CAAM,EACpB,MAAM,GAAE,cAAwC,EAChD,GAAG,GAAE,MAAM,MAAiB,EAS9C;YAEa,KAAK;YAgBL,KAAK;IAOnB,OAAO,CAAC,IAAI;IAMZ,OAAO,CAAC,GAAG;IAKL,YAAY,IAAI,OAAO,CAAC,cAAc,CAAC,CAG5C;IAGK,WAAW,CAAC,IAAI,EAAE;QAAE,MAAM,EAAE,MAAM,CAAA;KAAE;;;;;;OAYzC;IAGK,SAAS,CAAC,IAAI,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAoCrG;IAIK,IAAI,CAAC,IAAI,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,eAAe,CAAC,CA0FzF;IAGK,IAAI,IAAI,OAAO,CAAC,eAAe,EAAE,CAAC,CAGvC;YAEa,KAAK;IAab,IAAI,CAAC,IAAI,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,OAAO,CAAA;KAAE,GAAG,OAAO,CAAC,YAAY,CAAC,CAsCtF;IAGK,KAAK,CAAC,IAAI,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC;QAAE,YAAY,EAAE,MAAM,CAAA;KAAE,CAAC,CAiCnG;IAGK,MAAM,CAAC,IAAI,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAQ5E;IAGK,KAAK,CAAC,IAAI,EAAE;QAAE,EAAE,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAO/C;IAED,OAAO,CAAC,MAAM;IASd,OAAO,CAAC,MAAM;IA0BR,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CA6B3B;IAED,OAAO,IAAI,IAAI,CAKd;CACF"}