@omnitron-dev/omnitron 0.3.1 → 0.3.2

package/dist/shared/log-levels.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"log-levels.js","sourceRoot":"","sources":["../../src/shared/log-levels.ts"],"names":[],"mappings":"AAAA,qFAAqF;AACrF,MAAM,CAAC,MAAM,UAAU,GAAG;IACxB,KAAK,EAAE,EAAE;IACT,KAAK,EAAE,EAAE;IACT,IAAI,EAAE,EAAE;IACR,IAAI,EAAE,EAAE;IACR,KAAK,EAAE,EAAE;IACT,KAAK,EAAE,EAAE;CACD,CAAC;AAGX,MAAM,CAAC,MAAM,iBAAiB,GAA0B,MAAM,CAAC,IAAI,CAAC,UAAU,CAAiB,CAAC;AAEhG,6DAA6D;AAC7D,MAAM,CAAC,MAAM,aAAa,GAAG,SAAS,CAAC;AAEvC,kFAAkF;AAClF,MAAM,UAAU,SAAS,CAAC,KAAa;IACrC,OAAO,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,KAAmB,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AAC/G,CAAC;AAED,mFAAmF;AACnF,MAAM,CAAC,MAAM,gBAAgB,GAAG,EAAE,CAAC;AAEnC,MAAM,UAAU,eAAe,CAAC,KAAc;IAC5C,4CAA4C;IAC5C,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,IAAI,GAAG,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AACvH,CAAC"}

package/dist/shared/metrics-storage-reading.d.ts

@@ -0,0 +1,8 @@
+import type { MetricsStorageStatus } from './dto/metrics.js';
+/** One reading for CLI, Console and daemon health. Missing evidence is not success. */
+export declare function metricsStorageReading(status: MetricsStorageStatus | null | undefined, now?: number): {
+    severity: "info" | "success" | "warning";
+    summary: string;
+    detail: string;
+};
+//# sourceMappingURL=metrics-storage-reading.d.ts.map

package/dist/shared/metrics-storage-reading.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"metrics-storage-reading.d.ts","sourceRoot":"","sources":["../../src/shared/metrics-storage-reading.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,kBAAkB,CAAC;AAE7D,uFAAuF;AACvF,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,oBAAoB,GAAG,IAAI,GAAG,SAAS,EAAE,GAAG,SAAa;;;;EAiBtG"}

package/dist/shared/metrics-storage-reading.js

@@ -0,0 +1,27 @@
+/** One reading for CLI, Console and daemon health. Missing evidence is not success. */
+export function metricsStorageReading(status, now = Date.now()) {
+    if (!status)
+        return { severity: 'warning', summary: 'Metrics persistence is not reported', detail: 'This daemon cannot report database write confirmation.' };
+    const issues = [];
+    if (status.durability !== 'persistent')
+        issues.push(status.durability === 'volatile' ? 'History is volatile and will be lost on restart' : 'Storage durability is unknown');
+    if (status.lastError)
+        issues.push(`Write failed: ${status.lastError}`);
+    if (status.cleanupError)
+        issues.push(`Retention failed: ${status.cleanupError}`);
+    if (status.syncError)
+        issues.push(`Post-write callback failed: ${status.syncError}`);
+    if (status.droppedSamples > 0)
+        issues.push(`${status.droppedSamples} samples lost before persistence in this process`);
+    const oldest = status.oldestPendingAt ? Date.parse(status.oldestPendingAt) : NaN;
+    if (status.pendingSamples > 0 && Number.isFinite(oldest) && now - oldest >= 60_000)
+        issues.push('Database write queue is more than 60s behind');
+    const commit = status.lastWriteAt ? `Last completed write ${status.lastWriteAt}` : 'No completed write in this process yet';
+    return {
+        severity: issues.length ? 'warning' : status.lastWriteAt ? 'success' : 'info',
+        summary: issues.length ? `Metrics storage needs attention · ${status.type}` : `${status.type} · ${status.lastWriteAt ? 'database writes confirmed' : 'awaiting first write'}`,
+        detail: [...issues, `${status.pendingSamples}/${status.capacity} samples awaiting write`, commit,
+            'Acknowledgements cover database commit, not backup or replica availability'].join('. '),
+    };
+}
+//# sourceMappingURL=metrics-storage-reading.js.map

package/dist/shared/metrics-storage-reading.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"metrics-storage-reading.js","sourceRoot":"","sources":["../../src/shared/metrics-storage-reading.ts"],"names":[],"mappings":"AAEA,uFAAuF;AACvF,MAAM,UAAU,qBAAqB,CAAC,MAA+C,EAAE,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE;IACrG,IAAI,CAAC,MAAM;QAAE,OAAO,EAAE,QAAQ,EAAE,SAAkB,EAAE,OAAO,EAAE,qCAAqC,EAAE,MAAM,EAAE,wDAAwD,EAAE,CAAC;IACvK,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,IAAI,MAAM,CAAC,UAAU,KAAK,YAAY;QAAE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,KAAK,UAAU,CAAC,CAAC,CAAC,iDAAiD,CAAC,CAAC,CAAC,+BAA+B,CAAC,CAAC;IAC5K,IAAI,MAAM,CAAC,SAAS;QAAE,MAAM,CAAC,IAAI,CAAC,iBAAiB,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC;IACvE,IAAI,MAAM,CAAC,YAAY;QAAE,MAAM,CAAC,IAAI,CAAC,qBAAqB,MAAM,CAAC,YAAY,EAAE,CAAC,CAAC;IACjF,IAAI,MAAM,CAAC,SAAS;QAAE,MAAM,CAAC,IAAI,CAAC,+BAA+B,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC;IACrF,IAAI,MAAM,CAAC,cAAc,GAAG,CAAC;QAAE,MAAM,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,cAAc,kDAAkD,CAAC,CAAC;IACvH,MAAM,MAAM,GAAG,MAAM,CAAC,eAAe,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;IACjF,IAAI,MAAM,CAAC,cAAc,GAAG,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,GAAG,GAAG,MAAM,IAAI,MAAM;QAAE,MAAM,CAAC,IAAI,CAAC,8CAA8C,CAAC,CAAC;IAChJ,MAAM,MAAM,GAAG,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,wBAAwB,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,wCAAwC,CAAC;IAC5H,OAAO;QACL,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,SAAkB,CAAC,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,SAAkB,CAAC,CAAC,CAAC,MAAe;QACxG,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,qCAAqC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,IAAI,MAAM,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,2BAA2B,CAAC,CAAC,CAAC,sBAAsB,EAAE;QAC7K,MAAM,EAAE,CAAC,GAAG,MAAM,EAAE,GAAG,MAAM,CAAC,cAAc,IAAI,MAAM,CAAC,QAAQ,yBAAyB,EAAE,MAAM;YAC9F,4EAA4E,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;KAC3F,CAAC;AACJ,CAAC"}

package/dist/shared/pnpm.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"pnpm.d.ts","sourceRoot":"","sources":["../../src/shared/pnpm.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAMH,wBAAgB,WAAW,IAAI,MAAM,CAuBpC;AAED,yEAAyE;AACzE,wBAAgB,mBAAmB,IAAI,MAAM,CAG5C"}
+{"version":3,"file":"pnpm.d.ts","sourceRoot":"","sources":["../../src/shared/pnpm.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAOH,wBAAgB,WAAW,IAAI,MAAM,CA4BpC;AAED,yEAAyE;AACzE,wBAAgB,mBAAmB,IAAI,MAAM,CAG5C"}

package/dist/shared/pnpm.js

@@ -24,14 +24,19 @@
  * naming the command rather than a path this invented.
  */
 import fs from 'node:fs';
+import path from 'node:path';
 let pnpmPath = null;
 export function resolvePnpm() {
     if (pnpmPath)
         return pnpmPath;
     const home = process.env['HOME'] ?? '';
+    const active = process.env['npm_execpath'];
     const candidates = [
+        // Reuse the package manager that launched this build, including Corepack.
+        active && /^pnpm(?:\.(?:exe|cjs|mjs))?$/.test(path.basename(active)) ? active : null,
         // The two pnpm installs itself into, in the order it prefers.
         process.env['PNPM_HOME'] ? `${process.env['PNPM_HOME']}/pnpm` : null,
+        ...(process.env['PATH'] ?? '').split(path.delimiter).filter(Boolean).map(dir => path.join(dir, process.platform === 'win32' ? 'pnpm.exe' : 'pnpm')),
         home ? `${home}/Library/pnpm/pnpm` : null,
         home ? `${home}/.local/share/pnpm/pnpm` : null,
         '/opt/homebrew/bin/pnpm',
@@ -40,6 +45,8 @@ export function resolvePnpm() {
     for (const candidate of candidates) {
         try {
             fs.accessSync(candidate, fs.constants.X_OK);
+            if (!fs.statSync(candidate).isFile())
+                continue;
             pnpmPath = candidate;
             return candidate;
         }

package/dist/shared/pnpm.js.map

@@ -1 +1 @@
-{"version":3,"file":"pnpm.js","sourceRoot":"","sources":["../../src/shared/pnpm.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAEH,OAAO,EAAE,MAAM,SAAS,CAAC;AAEzB,IAAI,QAAQ,GAAkB,IAAI,CAAC;AAEnC,MAAM,UAAU,WAAW;IACzB,IAAI,QAAQ;QAAE,OAAO,QAAQ,CAAC;IAE9B,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;IACvC,MAAM,UAAU,GAAG;QACjB,8DAA8D;QAC9D,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI;QACpE,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,oBAAoB,CAAC,CAAC,CAAC,IAAI;QACzC,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,yBAAyB,CAAC,CAAC,CAAC,IAAI;QAC9C,wBAAwB;QACxB,qBAAqB;KACtB,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC;IAEzC,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;QACnC,IAAI,CAAC;YACH,EAAE,CAAC,UAAU,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;YAC5C,QAAQ,GAAG,SAAS,CAAC;YACrB,OAAO,SAAS,CAAC;QACnB,CAAC;QAAC,MAAM,CAAC;YACP,0BAA0B;QAC5B,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,yEAAyE;AACzE,MAAM,UAAU,mBAAmB;IACjC,QAAQ,GAAG,IAAI,CAAC;IAChB,OAAO,WAAW,EAAE,CAAC;AACvB,CAAC"}
+{"version":3,"file":"pnpm.js","sourceRoot":"","sources":["../../src/shared/pnpm.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAEH,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,IAAI,QAAQ,GAAkB,IAAI,CAAC;AAEnC,MAAM,UAAU,WAAW;IACzB,IAAI,QAAQ;QAAE,OAAO,QAAQ,CAAC;IAE9B,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;IACvC,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;IAC3C,MAAM,UAAU,GAAG;QACjB,0EAA0E;QAC1E,MAAM,IAAI,8BAA8B,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI;QACpF,8DAA8D;QAC9D,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI;QACpE,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;QACnJ,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,oBAAoB,CAAC,CAAC,CAAC,IAAI;QACzC,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,yBAAyB,CAAC,CAAC,CAAC,IAAI;QAC9C,wBAAwB;QACxB,qBAAqB;KACtB,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC;IAEzC,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;QACnC,IAAI,CAAC;YACH,EAAE,CAAC,UAAU,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;YAC5C,IAAI,CAAC,EAAE,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,MAAM,EAAE;gBAAE,SAAS;YAC/C,QAAQ,GAAG,SAAS,CAAC;YACrB,OAAO,SAAS,CAAC;QACnB,CAAC;QAAC,MAAM,CAAC;YACP,0BAA0B;QAC5B,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,yEAAyE;AACzE,MAAM,UAAU,mBAAmB;IACjC,QAAQ,GAAG,IAAI,CAAC;IAChB,OAAO,WAAW,EAAE,CAAC;AACvB,CAAC"}

package/dist/shared/pool-scale.d.ts

@@ -0,0 +1,10 @@
+import type { ProcessInfoDto } from '../config/types.js';
+/** Runtime resize addresses one declared pool; it never rewrites source policy. */
+export interface PoolScaleRequest {
+    name: string;
+    process: string;
+    instances: number;
+}
+export declare function parsePoolScaleRequest(value: unknown): PoolScaleRequest;
+export declare function assertPoolScaleTarget(app: ProcessInfoDto | null, request: PoolScaleRequest): void;
+//# sourceMappingURL=pool-scale.d.ts.map

package/dist/shared/pool-scale.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pool-scale.d.ts","sourceRoot":"","sources":["../../src/shared/pool-scale.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AAEzD,mFAAmF;AACnF,MAAM,WAAW,gBAAgB;IAAG,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE;AACtF,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,OAAO,GAAG,gBAAgB,CAUtE;AACD,wBAAgB,qBAAqB,CAAC,GAAG,EAAE,cAAc,GAAG,IAAI,EAAE,OAAO,EAAE,gBAAgB,GAAG,IAAI,CAKjG"}

package/dist/shared/pool-scale.js

@@ -0,0 +1,25 @@
+import { Errors } from '@omnitron-dev/titan/errors';
+export function parsePoolScaleRequest(value) {
+    if (!value || typeof value !== 'object' || Array.isArray(value))
+        throw Errors.badRequest('Invalid pool resize request');
+    const input = value;
+    const identifier = (text, max) => typeof text === 'string' &&
+        text.length > 0 && text.length <= max && text.trim() === text && ![...text].some(char => char.charCodeAt(0) < 32 || char.charCodeAt(0) === 127);
+    if (!identifier(input['name'], 1024))
+        throw Errors.badRequest('An application name is required');
+    if (!identifier(input['process'], 255))
+        throw Errors.badRequest('Select a declared process pool with --process <name>');
+    if (!Number.isSafeInteger(input['instances']) || input['instances'] < 1)
+        throw Errors.badRequest('Instance count must be a positive safe integer');
+    return Object.freeze({ name: input['name'], process: input['process'], instances: input['instances'] });
+}
+export function assertPoolScaleTarget(app, request) {
+    if (!app)
+        throw Errors.notFound('App', request.name);
+    if (app.mode !== 'bootstrap')
+        throw Errors.badRequest('Classic applications cannot be resized');
+    const process = app.processes?.find(item => item.name === request.process);
+    if (!process || !Number.isSafeInteger(process.declaredInstances) || process.declaredInstances < 2)
+        throw Errors.badRequest('Select an existing declared process pool; singleton processes cannot be replicated');
+}
+//# sourceMappingURL=pool-scale.js.map

package/dist/shared/pool-scale.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pool-scale.js","sourceRoot":"","sources":["../../src/shared/pool-scale.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,4BAA4B,CAAC;AAKpD,MAAM,UAAU,qBAAqB,CAAC,KAAc;IAClD,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,MAAM,MAAM,CAAC,UAAU,CAAC,6BAA6B,CAAC,CAAC;IACxH,MAAM,KAAK,GAAG,KAAgC,CAAC;IAC/C,MAAM,UAAU,GAAG,CAAC,IAAa,EAAE,GAAW,EAAkB,EAAE,CAAC,OAAO,IAAI,KAAK,QAAQ;QACzF,IAAI,CAAC,MAAM,GAAG,CAAC,IAAI,IAAI,CAAC,MAAM,IAAI,GAAG,IAAI,IAAI,CAAC,IAAI,EAAE,KAAK,IAAI,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,EAAE,IAAI,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC;IAClJ,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,IAAI,CAAC;QAAE,MAAM,MAAM,CAAC,UAAU,CAAC,iCAAiC,CAAC,CAAC;IACjG,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,GAAG,CAAC;QAAE,MAAM,MAAM,CAAC,UAAU,CAAC,sDAAsD,CAAC,CAAC;IACxH,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,IAAK,KAAK,CAAC,WAAW,CAAY,GAAG,CAAC;QACjF,MAAM,MAAM,CAAC,UAAU,CAAC,gDAAgD,CAAC,CAAC;IAC5E,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,SAAS,CAAC,EAAE,SAAS,EAAE,KAAK,CAAC,WAAW,CAAW,EAAE,CAAC,CAAC;AACpH,CAAC;AACD,MAAM,UAAU,qBAAqB,CAAC,GAA0B,EAAE,OAAyB;IACzF,IAAI,CAAC,GAAG;QAAE,MAAM,MAAM,CAAC,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;IACrD,IAAI,GAAG,CAAC,IAAI,KAAK,WAAW;QAAE,MAAM,MAAM,CAAC,UAAU,CAAC,wCAAwC,CAAC,CAAC;IAChG,MAAM,OAAO,GAAG,GAAG,CAAC,SAAS,EAAE,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IAC3E,IAAI,CAAC,OAAO,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,iBAAiB,CAAC,IAAI,OAAO,CAAC,iBAAiB,GAAG,CAAC;QAAE,MAAM,MAAM,CAAC,UAAU,CAAC,oFAAoF,CAAC,CAAC;AACnN,CAAC"}

package/dist/shared/private-files.d.ts

@@ -1,29 +1,17 @@
-/** `rwx------` — the owner, and nobody else. */
 export declare const PRIVATE_DIR_MODE = 448;
-/** `rw-------`. */
 export declare const PRIVATE_FILE_MODE = 384;
-/**
- * Create `dir` if missing, and make sure it is 0700 either way.
- *
- * `mkdirSync(dir, { mode })` applies the mode only to directories it actually
- * creates, so on every host where the directory already exists — which is
- * every host that has run the daemon before — passing a mode alone changes
- * nothing. That is why the chmod is unconditional.
- */
 export declare function ensurePrivateDir(dir: string): void;
-/**
- * Make one file owner-only, along with any SQLite sidecar beside it.
- *
- * Best-effort: a backup that exists and is readable by its owner beats one
- * that threw on the way to being tightened.
- */
+/** Seal closed files and their sidecars. Open SQLite databases must use sealSqliteFiles. */
 export declare function sealFile(filepath: string): void;
+/** Repair existing regular files. Report failures instead of declaring unsafe files sealed. */
+export declare function sealDirContents(dir: string): number;
 /**
- * Tighten everything already in `dir`, and report how much was loose.
- *
- * The fix has to reach backwards: files written before it landed are the ones
- * that have been sitting there longest. Returns the number of entries whose
- * mode this actually changed, so a boot can say so once and then stay quiet.
+ * SQLite owns its descriptors and POSIX locks. Closing ANY other descriptor for
+ * the same inode in this process drops those locks, even when opened for chmod.
+ * Inspect metadata without opening the files. If repair is needed, use a short
+ * isolated process for the existing no-follow seal; its close cannot cancel our
+ * SQLite locks. Already-private stores take no subprocess or extra descriptors.
+ * https://sqlite.org/howtocorrupt.html#_posix_advisory_locks_canceled_by_a_separate_thread_doing_close_
  */
-export declare function sealDirContents(dir: string): number;
+export declare function sealSqliteFiles(filename: string): void;
 //# sourceMappingURL=private-files.d.ts.map

package/dist/shared/private-files.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"private-files.d.ts","sourceRoot":"","sources":["../../src/shared/private-files.ts"],"names":[],"mappings":"AA4BA,gDAAgD;AAChD,eAAO,MAAM,gBAAgB,MAAQ,CAAC;AAEtC,mBAAmB;AACnB,eAAO,MAAM,iBAAiB,MAAQ,CAAC;AAQvC;;;;;;;GAOG;AACH,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAQlD;AAED;;;;;GAKG;AACH,wBAAgB,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAS/C;AAED;;;;;;GAMG;AACH,wBAAgB,eAAe,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAuBnD"}
+{"version":3,"file":"private-files.d.ts","sourceRoot":"","sources":["../../src/shared/private-files.ts"],"names":[],"mappings":"AAKA,eAAO,MAAM,gBAAgB,MAAQ,CAAC;AACtC,eAAO,MAAM,iBAAiB,MAAQ,CAAC;AAiCvC,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAGlD;AAED,4FAA4F;AAC5F,wBAAgB,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAI/C;AAED,+FAA+F;AAC/F,wBAAgB,eAAe,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAYnD;AAED;;;;;;;GAOG;AACH,wBAAgB,eAAe,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAuBtD"}

package/dist/shared/private-files.js

@@ -1,109 +1,122 @@
-/**
- * Files only the daemon's own user may read.
- *
- * Measured on a working host, 2026-09-12: `~/.omnitron/backups` was 0755 and
- * every one of its 493 files was 0644 — world-readable. Among them 40
- * `tor-keys` archives (the hidden service's ed25519 secret key: whoever holds
- * one can BE the .onion), 48 `main` dumps (every user row, password hash,
- * TOTP secret and PGP key), 48 `payments` dumps, and the live
- * `~/.omnitron/data/daemon-state.db`. Anyone with a shell account on that
- * machine could read all of it.
- *
- * The rule was already in the codebase a directory away: `config.json` is
- * written 0600 and `daemon.sock` is bound 0600. What was missing was applying
- * it to the files that matter most, and the reason is ordinary — those two are
- * written by `fs.writeFileSync`, which takes a mode, while a backup is
- * produced by `pg_dump > file`, `tar czf` or `sqlite3 .backup`, where the mode
- * comes from the process umask and nobody chose it.
- *
- * So the mode is applied AFTER creation, at the one place each kind of file is
- * finished, rather than hoped for from a umask the daemon does not control.
- *
- * Not encryption. A backup on this disk is still plaintext, and that is a
- * separate decision with a key-management question attached. This only stops
- * the other accounts on the host from reading it.
- */
+/** POSIX owner-only storage for backups, state and logs. Permission failures are fatal to the operation. */
 import fs from 'node:fs';
 import path from 'node:path';
-/** `rwx------` — the owner, and nobody else. */
+import { execFileSync } from 'node:child_process';
 export const PRIVATE_DIR_MODE = 0o700;
-/** `rw-------`. */
 export const PRIVATE_FILE_MODE = 0o600;
-/** SQLite leaves these beside the database it opens; they hold the same data. */
 const SIDECAR_SUFFIXES = ['-shm', '-wal', '-journal'];
-/** POSIX modes mean nothing on Windows, and `chmod` there is a partial lie. */
+// Windows deployments need equivalent OS ACLs; POSIX chmod cannot establish them.
 const CAN_CHMOD = process.platform !== 'win32';
-/**
- * Create `dir` if missing, and make sure it is 0700 either way.
- *
- * `mkdirSync(dir, { mode })` applies the mode only to directories it actually
- * creates, so on every host where the directory already exists — which is
- * every host that has run the daemon before — passing a mode alone changes
- * nothing. That is why the chmod is unconditional.
- */
-export function ensurePrivateDir(dir) {
-    fs.mkdirSync(dir, { recursive: true, mode: PRIVATE_DIR_MODE });
-    if (!CAN_CHMOD)
-        return;
+function missing(error) {
+    return error?.code === 'ENOENT';
+}
+/** Validate and chmod the same opened inode, without following a substituted leaf link. */
+function sealPath(filename, directory, optional = false) {
+    let fd;
     try {
-        fs.chmodSync(dir, PRIVATE_DIR_MODE);
+        fd = fs.openSync(filename, fs.constants.O_RDONLY | fs.constants.O_NOFOLLOW | fs.constants.O_NONBLOCK |
+            (directory ? fs.constants.O_DIRECTORY : 0));
     }
-    catch {
-        /* not ours to chmod — the caller still gets a usable directory */
+    catch (error) {
+        if (optional && missing(error))
+            return false;
+        throw error;
+    }
+    try {
+        const stat = fs.fstatSync(fd);
+        if (!(directory ? stat.isDirectory() : stat.isFile()) || stat.uid !== process.getuid?.())
+            throw new Error(`Private storage must be ${directory ? 'a directory' : 'a regular file'} owned by the daemon user: ${filename}`);
+        // Tightening one hard link changes every alias. Such a file is not isolated storage.
+        if (!directory && stat.nlink !== 1)
+            throw new Error(`Private storage cannot have additional hard links: ${filename}`);
+        const mode = directory ? PRIVATE_DIR_MODE : PRIVATE_FILE_MODE;
+        const changed = (stat.mode & 0o777) !== mode;
+        if (changed)
+            fs.fchmodSync(fd, mode);
+        if ((fs.fstatSync(fd).mode & 0o777) !== mode)
+            throw new Error(`Private permissions could not be established: ${filename}`);
+        return changed;
+    }
+    finally {
+        fs.closeSync(fd);
     }
 }
-/**
- * Make one file owner-only, along with any SQLite sidecar beside it.
- *
- * Best-effort: a backup that exists and is readable by its owner beats one
- * that threw on the way to being tightened.
- */
+export function ensurePrivateDir(dir) {
+    fs.mkdirSync(dir, { recursive: true, mode: PRIVATE_DIR_MODE });
+    if (CAN_CHMOD)
+        sealPath(dir, true);
+}
+/** Seal closed files and their sidecars. Open SQLite databases must use sealSqliteFiles. */
 export function sealFile(filepath) {
     if (!CAN_CHMOD)
         return;
-    for (const suffix of ['', ...SIDECAR_SUFFIXES]) {
-        try {
-            fs.chmodSync(filepath + suffix, PRIVATE_FILE_MODE);
-        }
-        catch {
-            /* missing sidecar, or not ours */
-        }
-    }
+    sealPath(filepath, false);
+    for (const suffix of SIDECAR_SUFFIXES)
+        sealPath(filepath + suffix, false, true);
 }
-/**
- * Tighten everything already in `dir`, and report how much was loose.
- *
- * The fix has to reach backwards: files written before it landed are the ones
- * that have been sitting there longest. Returns the number of entries whose
- * mode this actually changed, so a boot can say so once and then stay quiet.
- */
+/** Repair existing regular files. Report failures instead of declaring unsafe files sealed. */
 export function sealDirContents(dir) {
     if (!CAN_CHMOD)
         return 0;
-    let tightened = 0;
     let entries;
     try {
-        entries = fs.readdirSync(dir);
+        entries = fs.readdirSync(dir, { withFileTypes: true });
     }
-    catch {
-        return 0;
+    catch (error) {
+        if (missing(error))
+            return 0;
+        throw error;
     }
+    let tightened = 0;
     for (const entry of entries) {
-        const full = path.join(dir, entry);
-        try {
-            const stat = fs.lstatSync(full);
-            if (!stat.isFile())
-                continue;
-            // Only the group/other bits matter here; leave the owner's alone.
-            if ((stat.mode & 0o077) === 0)
-                continue;
-            fs.chmodSync(full, PRIVATE_FILE_MODE);
+        if (entry.isSymbolicLink())
+            throw new Error(`Private storage contains a symbolic link: ${path.join(dir, entry.name)}`);
+        if (!entry.isFile())
+            continue;
+        if (sealPath(path.join(dir, entry.name), false, true))
             tightened++;
-        }
-        catch {
-            /* raced with a delete, or not ours */
-        }
     }
     return tightened;
 }
+/**
+ * SQLite owns its descriptors and POSIX locks. Closing ANY other descriptor for
+ * the same inode in this process drops those locks, even when opened for chmod.
+ * Inspect metadata without opening the files. If repair is needed, use a short
+ * isolated process for the existing no-follow seal; its close cannot cancel our
+ * SQLite locks. Already-private stores take no subprocess or extra descriptors.
+ * https://sqlite.org/howtocorrupt.html#_posix_advisory_locks_canceled_by_a_separate_thread_doing_close_
+ */
+export function sealSqliteFiles(filename) {
+    if (!CAN_CHMOD || filename === ':memory:')
+        return;
+    const inspect = () => {
+        let privateMode = true;
+        for (const suffix of ['', ...SIDECAR_SUFFIXES]) {
+            let stat;
+            try {
+                stat = fs.lstatSync(filename + suffix);
+            }
+            catch (error) {
+                if (suffix && missing(error))
+                    continue;
+                throw error;
+            }
+            if (!stat.isFile() || stat.uid !== process.getuid?.() || stat.nlink !== 1) {
+                throw new Error(`SQLite storage must be a private regular file without aliases: ${filename + suffix}`);
+            }
+            privateMode &&= (stat.mode & 0o777) === PRIVATE_FILE_MODE;
+        }
+        return privateMode;
+    };
+    if (inspect())
+        return;
+    const environment = { ...process.env };
+    // A permission-only helper must not execute application preload hooks.
+    delete environment['NODE_OPTIONS'];
+    execFileSync(process.execPath, ['--input-type=module', '--eval',
+        'const { sealFile } = await import(process.argv[1]); sealFile(process.argv[2]);',
+        import.meta.url, filename], { env: environment, timeout: 10_000, maxBuffer: 64 * 1024, stdio: 'pipe' });
+    if (!inspect())
+        throw new Error(`Private SQLite permissions could not be established: ${filename}`);
+}
 //# sourceMappingURL=private-files.js.map

package/dist/shared/private-files.js.map

@@ -1 +1 @@
-{"version":3,"file":"private-files.js","sourceRoot":"","sources":["../../src/shared/private-files.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,gDAAgD;AAChD,MAAM,CAAC,MAAM,gBAAgB,GAAG,KAAK,CAAC;AAEtC,mBAAmB;AACnB,MAAM,CAAC,MAAM,iBAAiB,GAAG,KAAK,CAAC;AAEvC,iFAAiF;AACjF,MAAM,gBAAgB,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,UAAU,CAAC,CAAC;AAEtD,+EAA+E;AAC/E,MAAM,SAAS,GAAG,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC;AAE/C;;;;;;;GAOG;AACH,MAAM,UAAU,gBAAgB,CAAC,GAAW;IAC1C,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,gBAAgB,EAAE,CAAC,CAAC;IAC/D,IAAI,CAAC,SAAS;QAAE,OAAO;IACvB,IAAI,CAAC;QACH,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,gBAAgB,CAAC,CAAC;IACtC,CAAC;IAAC,MAAM,CAAC;QACP,kEAAkE;IACpE,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,QAAQ,CAAC,QAAgB;IACvC,IAAI,CAAC,SAAS;QAAE,OAAO;IACvB,KAAK,MAAM,MAAM,IAAI,CAAC,EAAE,EAAE,GAAG,gBAAgB,CAAC,EAAE,CAAC;QAC/C,IAAI,CAAC;YACH,EAAE,CAAC,SAAS,CAAC,QAAQ,GAAG,MAAM,EAAE,iBAAiB,CAAC,CAAC;QACrD,CAAC;QAAC,MAAM,CAAC;YACP,kCAAkC;QACpC,CAAC;IACH,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,eAAe,CAAC,GAAW;IACzC,IAAI,CAAC,SAAS;QAAE,OAAO,CAAC,CAAC;IACzB,IAAI,SAAS,GAAG,CAAC,CAAC;IAClB,IAAI,OAAiB,CAAC;IACtB,IAAI,CAAC;QACH,OAAO,GAAG,EAAE,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IAChC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,CAAC;IACX,CAAC;IACD,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QACnC,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;YAChC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE;gBAAE,SAAS;YAC7B,kEAAkE;YAClE,IAAI,CAAC,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC;gBAAE,SAAS;YACxC,EAAE,CAAC,SAAS,CAAC,IAAI,EAAE,iBAAiB,CAAC,CAAC;YACtC,SAAS,EAAE,CAAC;QACd,CAAC;QAAC,MAAM,CAAC;YACP,sCAAsC;QACxC,CAAC;IACH,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC"}
+{"version":3,"file":"private-files.js","sourceRoot":"","sources":["../../src/shared/private-files.ts"],"names":[],"mappings":"AAAA,4GAA4G;AAC5G,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAElD,MAAM,CAAC,MAAM,gBAAgB,GAAG,KAAK,CAAC;AACtC,MAAM,CAAC,MAAM,iBAAiB,GAAG,KAAK,CAAC;AACvC,MAAM,gBAAgB,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,UAAU,CAAC,CAAC;AACtD,kFAAkF;AAClF,MAAM,SAAS,GAAG,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC;AAE/C,SAAS,OAAO,CAAC,KAAc;IAC7B,OAAQ,KAA+B,EAAE,IAAI,KAAK,QAAQ,CAAC;AAC7D,CAAC;AAED,2FAA2F;AAC3F,SAAS,QAAQ,CAAC,QAAgB,EAAE,SAAkB,EAAE,QAAQ,GAAG,KAAK;IACtE,IAAI,EAAU,CAAC;IACf,IAAI,CAAC;QACH,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,QAAQ,EAAE,EAAE,CAAC,SAAS,CAAC,QAAQ,GAAG,EAAE,CAAC,SAAS,CAAC,UAAU,GAAG,EAAE,CAAC,SAAS,CAAC,UAAU;YAClG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAChD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,QAAQ,IAAI,OAAO,CAAC,KAAK,CAAC;YAAE,OAAO,KAAK,CAAC;QAC7C,MAAM,KAAK,CAAC;IACd,CAAC;IACD,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;QAC9B,IAAI,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,IAAI,IAAI,CAAC,GAAG,KAAK,OAAO,CAAC,MAAM,EAAE,EAAE;YACtF,MAAM,IAAI,KAAK,CAAC,2BAA2B,SAAS,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,gBAAgB,8BAA8B,QAAQ,EAAE,CAAC,CAAC;QACnI,qFAAqF;QACrF,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,KAAK,KAAK,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,sDAAsD,QAAQ,EAAE,CAAC,CAAC;QACtH,MAAM,IAAI,GAAG,SAAS,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,iBAAiB,CAAC;QAC9D,MAAM,OAAO,GAAG,CAAC,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,IAAI,CAAC;QAC7C,IAAI,OAAO;YAAE,EAAE,CAAC,UAAU,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;QACrC,IAAI,CAAC,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,IAAI;YAAE,MAAM,IAAI,KAAK,CAAC,iDAAiD,QAAQ,EAAE,CAAC,CAAC;QAC3H,OAAO,OAAO,CAAC;IACjB,CAAC;YAAS,CAAC;QAAC,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;IAAC,CAAC;AACjC,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,GAAW;IAC1C,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,gBAAgB,EAAE,CAAC,CAAC;IAC/D,IAAI,SAAS;QAAE,QAAQ,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;AACrC,CAAC;AAED,4FAA4F;AAC5F,MAAM,UAAU,QAAQ,CAAC,QAAgB;IACvC,IAAI,CAAC,SAAS;QAAE,OAAO;IACvB,QAAQ,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;IAC1B,KAAK,MAAM,MAAM,IAAI,gBAAgB;QAAE,QAAQ,CAAC,QAAQ,GAAG,MAAM,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;AAClF,CAAC;AAED,+FAA+F;AAC/F,MAAM,UAAU,eAAe,CAAC,GAAW;IACzC,IAAI,CAAC,SAAS;QAAE,OAAO,CAAC,CAAC;IACzB,IAAI,OAAoB,CAAC;IACzB,IAAI,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;IAAC,CAAC;IAC/D,OAAO,KAAK,EAAE,CAAC;QAAC,IAAI,OAAO,CAAC,KAAK,CAAC;YAAE,OAAO,CAAC,CAAC;QAAC,MAAM,KAAK,CAAC;IAAC,CAAC;IAC5D,IAAI,SAAS,GAAG,CAAC,CAAC;IAClB,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,IAAI,KAAK,CAAC,cAAc,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,6CAA6C,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACvH,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE;YAAE,SAAS;QAC9B,IAAI,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC;YAAE,SAAS,EAAE,CAAC;IACrE,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,eAAe,CAAC,QAAgB;IAC9C,IAAI,CAAC,SAAS,IAAI,QAAQ,KAAK,UAAU;QAAE,OAAO;IAClD,MAAM,OAAO,GAAG,GAAY,EAAE;QAC5B,IAAI,WAAW,GAAG,IAAI,CAAC;QACvB,KAAK,MAAM,MAAM,IAAI,CAAC,EAAE,EAAE,GAAG,gBAAgB,CAAC,EAAE,CAAC;YAC/C,IAAI,IAAc,CAAC;YACnB,IAAI,CAAC;gBAAC,IAAI,GAAG,EAAE,CAAC,SAAS,CAAC,QAAQ,GAAG,MAAM,CAAC,CAAC;YAAC,CAAC;YAC/C,OAAO,KAAK,EAAE,CAAC;gBAAC,IAAI,MAAM,IAAI,OAAO,CAAC,KAAK,CAAC;oBAAE,SAAS;gBAAC,MAAM,KAAK,CAAC;YAAC,CAAC;YACtE,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,IAAI,CAAC,GAAG,KAAK,OAAO,CAAC,MAAM,EAAE,EAAE,IAAI,IAAI,CAAC,KAAK,KAAK,CAAC,EAAE,CAAC;gBAC1E,MAAM,IAAI,KAAK,CAAC,kEAAkE,QAAQ,GAAG,MAAM,EAAE,CAAC,CAAC;YACzG,CAAC;YACD,WAAW,KAAK,CAAC,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,iBAAiB,CAAC;QAC5D,CAAC;QACD,OAAO,WAAW,CAAC;IACrB,CAAC,CAAC;IACF,IAAI,OAAO,EAAE;QAAE,OAAO;IACtB,MAAM,WAAW,GAAG,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;IACvC,uEAAuE;IACvE,OAAO,WAAW,CAAC,cAAc,CAAC,CAAC;IACnC,YAAY,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,qBAAqB,EAAE,QAAQ;QAC7D,gFAAgF;QAChF,OAAO,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC,EAAE,EAAE,GAAG,EAAE,WAAW,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,EAAE,GAAG,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;IAC1G,IAAI,CAAC,OAAO,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,wDAAwD,QAAQ,EAAE,CAAC,CAAC;AACtG,CAAC"}

package/dist/shared/relay-reading.d.ts

@@ -0,0 +1,19 @@
+import type { INodeRelayStats } from './dto/nodes.js';
+/** One interpretation for CLI and Console; absence is never a zero loss counter. */
+export declare function relayReading(data: INodeRelayStats): {
+    state: 'unknown';
+    label: string;
+    detail: string;
+    dropped?: never;
+} | {
+    state: 'neutral';
+    label: string;
+    detail: string;
+    dropped?: never;
+} | {
+    state: "degraded" | "healthy";
+    label: string;
+    detail: string;
+    dropped: number;
+};
+//# sourceMappingURL=relay-reading.d.ts.map

package/dist/shared/relay-reading.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"relay-reading.d.ts","sourceRoot":"","sources":["../../src/shared/relay-reading.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AAEtD,oFAAoF;AACpF,wBAAgB,YAAY,CAAC,IAAI,EAAE,eAAe;WAED,SAAS;;;;;WAEF,SAAS;;;;;;;;;EAYhE"}

package/dist/shared/relay-reading.js

@@ -0,0 +1,22 @@
+/** One interpretation for CLI and Console; absence is never a zero loss counter. */
+export function relayReading(data) {
+    const relay = data.relay;
+    if (!data.reachable || !relay)
+        return { state: 'unknown', label: 'unavailable',
+            detail: data.error ?? 'No relay measurement was returned; check node connectivity and access.' };
+    if (relay.state === 'not-applicable')
+        return { state: 'neutral', label: 'not applicable',
+            detail: 'Worker logs and metrics use the durable replication outbox. Delivery evidence is reported under Replication.' };
+    const s = relay.stats;
+    if (!s || typeof s.started !== 'boolean' || !s.destination)
+        return { state: 'unknown',
+            label: 'unavailable', detail: 'The node did not report relay lifecycle and destination; update its backend.' };
+    const failed = s.buffer.totalDropped > 0 || Boolean(s.lastError);
+    const available = s.started && (s.destination === 'aggregator' || (s.destination === 'transport' && s.transportConnected));
+    return { state: available && !failed ? 'healthy' : 'degraded',
+        label: !s.started ? 'stopped' : s.destination === 'aggregator' ? 'local database' :
+            s.destination === 'transport' ? s.transportConnected ? 'transport up' : 'transport down' : 'no destination',
+        detail: `${s.buffer.size} buffered · ${s.totalSent} sent · ${s.totalFailed} failed${s.lastError ? ` · ${s.lastError}` : ''}`,
+        dropped: s.buffer.totalDropped };
+}
+//# sourceMappingURL=relay-reading.js.map

package/dist/shared/relay-reading.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"relay-reading.js","sourceRoot":"","sources":["../../src/shared/relay-reading.ts"],"names":[],"mappings":"AAEA,oFAAoF;AACpF,MAAM,UAAU,YAAY,CAAC,IAAqB;IAChD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;IACzB,IAAI,CAAC,IAAI,CAAC,SAAS,IAAI,CAAC,KAAK;QAAE,OAAO,EAAE,KAAK,EAAE,SAAkB,EAAE,KAAK,EAAE,aAAa;YACrF,MAAM,EAAE,IAAI,CAAC,KAAK,IAAI,wEAAwE,EAAE,CAAC;IACnG,IAAI,KAAK,CAAC,KAAK,KAAK,gBAAgB;QAAE,OAAO,EAAE,KAAK,EAAE,SAAkB,EAAE,KAAK,EAAE,gBAAgB;YAC/F,MAAM,EAAE,8GAA8G,EAAE,CAAC;IAC3H,MAAM,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC;IACtB,IAAI,CAAC,CAAC,IAAI,OAAO,CAAC,CAAC,OAAO,KAAK,SAAS,IAAI,CAAC,CAAC,CAAC,WAAW;QAAE,OAAO,EAAE,KAAK,EAAE,SAAkB;YAC5F,KAAK,EAAE,aAAa,EAAE,MAAM,EAAE,8EAA8E,EAAE,CAAC;IACjH,MAAM,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC,YAAY,GAAG,CAAC,IAAI,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IACjE,MAAM,SAAS,GAAG,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,CAAC,WAAW,KAAK,YAAY,IAAI,CAAC,CAAC,CAAC,WAAW,KAAK,WAAW,IAAI,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC;IAC3H,OAAO,EAAE,KAAK,EAAE,SAAS,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,SAAkB,CAAC,CAAC,CAAC,UAAmB;QAC7E,KAAK,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,KAAK,YAAY,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC;YACjF,CAAC,CAAC,WAAW,KAAK,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,gBAAgB;QAC7G,MAAM,EAAE,GAAG,CAAC,CAAC,MAAM,CAAC,IAAI,eAAe,CAAC,CAAC,SAAS,WAAW,CAAC,CAAC,WAAW,UAAU,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE;QAC5H,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,YAAY,EAAE,CAAC;AACrC,CAAC"}