@omnitron-dev/omnitron 0.3.1 → 0.3.3

package/dist/services/migration-target.d.ts

@@ -0,0 +1,57 @@
+import type { IEcosystemAppEntry } from '../config/types.js';
+import type { IServiceRequirement } from '../infrastructure/types.js';
+/** Compatibility entries; explicit bindings name their own config modules. */
+export declare const COMPILED_MIGRATION_ENTRY = "dist/database/migrate.js";
+export interface MigrationRequest {
+    service: string;
+    database: string;
+    app: string;
+    mode: 'script' | 'config';
+    source: string;
+    release: string;
+}
+export type MigrationRequiredFiles = Readonly<Record<string, readonly string[]>>;
+export type VerifyMigrationEntries = (apps: readonly string[], files: MigrationRequiredFiles) => Promise<IEcosystemAppEntry[]>;
+export declare function migrationEntryPath(value: unknown, field: string): string;
+/** false is also a declaration: it must not fall through to script discovery. */
+export declare function hasMigrationDeclarations(services: Readonly<Record<string, IServiceRequirement>>): boolean;
+/** One opt-in policy for diagnosis, source launch, installed releases and remote deployments.
+ * Keep database/service identity independent of the application's alias and package path. */
+export declare function requestedMigrations(services: Readonly<Record<string, IServiceRequirement>>): MigrationRequest[];
+/** Validate every owner before executing any part of the migration plan. */
+export declare function validateMigrationOwners(requests: readonly MigrationRequest[], entries: readonly IEcosystemAppEntry[]): void;
+/** Existing deployments activate one node at a time. An explicit shared-database
+ * owner must therefore have one placement, visited before its consumers. Multiple
+ * owning nodes need a global migration barrier; refuse rather than choosing a replica. */
+export declare function orderMigrationPlacements<T extends {
+    apps: readonly IEcosystemAppEntry[];
+}>(requests: readonly MigrationRequest[], placements: readonly T[]): T[];
+export declare function requiredMigrationFiles(requests: readonly MigrationRequest[]): MigrationRequiredFiles;
+/** Legacy scripts consume app-prefixed connection fields and cannot preserve URL options.
+ * Config modules receive the complete resolved URL; validation never rewrites their connection. */
+export declare function migrationDatabaseEnvironment(app: string, connectionString: string, expectedDatabase?: string, mode?: 'script' | 'config'): {
+    host: string;
+    port: number;
+    database: string;
+    user: string;
+    password: string;
+    connectionString: string;
+    env: Record<string, string>;
+};
+/** Two named infrastructure services must not silently assign different owners
+ * to the same resolved database. Several registries under one owner are valid. */
+export declare function validateMigrationDestinations(targets: readonly {
+    app: string;
+    database: ReturnType<typeof migrationDatabaseEnvironment>;
+}[]): void;
+export interface LocalMigrationTarget extends MigrationRequest {
+    environmentApp: string;
+    script: string;
+    cwd: string;
+    sealed: boolean;
+    nodeOptions: string;
+}
+/** Admission is delegated to the same manifest/closure/owner verifier as app launch.
+ * A receipt alone is never authority to execute a selected release. No DB or child is touched. */
+export declare function localMigrationTargets(requests: readonly MigrationRequest[], entries: readonly IEcosystemAppEntry[], projectPath: string, verify?: VerifyMigrationEntries): Promise<LocalMigrationTarget[]>;
+//# sourceMappingURL=migration-target.d.ts.map

package/dist/services/migration-target.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"migration-target.d.ts","sourceRoot":"","sources":["../../src/services/migration-target.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AAE7D,OAAO,KAAK,EAAE,mBAAmB,EAAoB,MAAM,4BAA4B,CAAC;AAIxF,8EAA8E;AAC9E,eAAO,MAAM,wBAAwB,6BAA6B,CAAC;AACnE,MAAM,WAAW,gBAAgB;IAC/B,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,QAAQ,GAAG,QAAQ,CAAC;IAC1B,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;CACjB;AACD,MAAM,MAAM,sBAAsB,GAAG,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,CAAC,CAAC,CAAC;AACjF,MAAM,MAAM,sBAAsB,GAAG,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,EAAE,KAAK,EAAE,sBAAsB,KAAK,OAAO,CAAC,kBAAkB,EAAE,CAAC,CAAC;AAE/H,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,CAKxE;AAMD,iFAAiF;AACjF,wBAAgB,wBAAwB,CAAC,QAAQ,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,mBAAmB,CAAC,CAAC,GAAG,OAAO,CAYzG;AAED;6FAC6F;AAC7F,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,mBAAmB,CAAC,CAAC,GAAG,gBAAgB,EAAE,CAmC/G;AAED,4EAA4E;AAC5E,wBAAgB,uBAAuB,CAAC,QAAQ,EAAE,SAAS,gBAAgB,EAAE,EAAE,OAAO,EAAE,SAAS,kBAAkB,EAAE,GAAG,IAAI,CAU3H;AAED;;0FAE0F;AAC1F,wBAAgB,wBAAwB,CAAC,CAAC,SAAS;IAAE,IAAI,EAAE,SAAS,kBAAkB,EAAE,CAAA;CAAE,EAAE,QAAQ,EAAE,SAAS,gBAAgB,EAAE,EAAE,UAAU,EAAE,SAAS,CAAC,EAAE,GAAG,CAAC,EAAE,CAUhK;AAED,wBAAgB,sBAAsB,CAAC,QAAQ,EAAE,SAAS,gBAAgB,EAAE,GAAG,sBAAsB,CAIpG;AAED;mGACmG;AACnG,wBAAgB,4BAA4B,CAAC,GAAG,EAAE,MAAM,EAAE,gBAAgB,EAAE,MAAM,EAAE,gBAAgB,CAAC,EAAE,MAAM,EAAE,IAAI,GAAE,QAAQ,GAAG,QAAmB;;;;;;;;EAuBlJ;AAED;kFACkF;AAClF,wBAAgB,6BAA6B,CAAC,OAAO,EAAE,SAAS;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,UAAU,CAAC,OAAO,4BAA4B,CAAC,CAAA;CAAE,EAAE,GAAG,IAAI,CAQlJ;AAED,MAAM,WAAW,oBAAqB,SAAQ,gBAAgB;IAC5D,cAAc,EAAE,MAAM,CAAC;IACvB,MAAM,EAAE,MAAM,CAAC;IACf,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,OAAO,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;CACrB;AAOD;kGACkG;AAClG,wBAAsB,qBAAqB,CAAC,QAAQ,EAAE,SAAS,gBAAgB,EAAE,EAAE,OAAO,EAAE,SAAS,kBAAkB,EAAE,EACvH,WAAW,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,sBAAsB,GAAG,OAAO,CAAC,oBAAoB,EAAE,CAAC,CAoCvF"}

package/dist/services/migration-target.js

@@ -0,0 +1,221 @@
+import fs from 'node:fs/promises';
+import path from 'node:path';
+import { resolveAppPath } from '../config/app-path.js';
+import { readInstalledReleaseReceipt } from '../release/installed-origin.js';
+import { releaseOptionsForEnv } from '../release/target-runtime.js';
+/** Compatibility entries; explicit bindings name their own config modules. */
+export const COMPILED_MIGRATION_ENTRY = 'dist/database/migrate.js';
+export function migrationEntryPath(value, field) {
+    if (typeof value !== 'string' || !value || value.length > 4096 || /[\\:\0]/.test(value) ||
+        path.posix.isAbsolute(value) || value.split('/').some(part => !part || part === '.' || part === '..'))
+        throw Error(`Migration ${field} must be a package-relative physical file`);
+    return value;
+}
+function legacy(database, service = 'postgres') {
+    return { service, database, app: database, mode: 'script', source: 'src/database/migrate.ts', release: COMPILED_MIGRATION_ENTRY };
+}
+/** false is also a declaration: it must not fall through to script discovery. */
+export function hasMigrationDeclarations(services) {
+    for (const service of Object.values(services)) {
+        if (service._preset !== 'postgres')
+            continue;
+        const databases = service._presetConfig?.['databases'];
+        if (databases === undefined)
+            continue;
+        if (!databases || typeof databases !== 'object' || Array.isArray(databases))
+            throw Error('Invalid PostgreSQL database declarations');
+        for (const config of Object.values(databases)) {
+            if (!config || typeof config !== 'object' || Array.isArray(config))
+                throw Error('Invalid PostgreSQL database declaration');
+            if (Object.hasOwn(config, 'migrate') || Object.hasOwn(config, 'migrationDir'))
+                return true;
+        }
+    }
+    return false;
+}
+/** One opt-in policy for diagnosis, source launch, installed releases and remote deployments.
+ * Keep database/service identity independent of the application's alias and package path. */
+export function requestedMigrations(services) {
+    const requests = [];
+    const programs = new Map();
+    for (const [service, requirement] of Object.entries(services)) {
+        if (requirement._preset !== 'postgres')
+            continue;
+        const databases = requirement._presetConfig?.['databases'];
+        if (databases === undefined)
+            continue;
+        if (!databases || typeof databases !== 'object' || Array.isArray(databases))
+            throw Error(`Invalid PostgreSQL databases for ${service}`);
+        for (const [database, config] of Object.entries(databases)) {
+            if (!config || typeof config !== 'object' || Array.isArray(config))
+                throw Error(`Invalid migration declaration for ${service}/${database}`);
+            if (Object.hasOwn(config, 'migrationDir'))
+                throw Error(`migrationDir is not an executable migration binding for ${service}/${database}; declare migrate.config and migrate.releaseConfig`);
+            const value = config.migrate;
+            if (value === undefined || value === false)
+                continue;
+            const identity = `${service}/${database}`;
+            const bindings = value === true ? [legacy(database, service)] : (Array.isArray(value) ? value : [value]).map(input => {
+                if (!input || typeof input !== 'object' || Array.isArray(input) ||
+                    Object.keys(input).some(key => !['app', 'config', 'releaseConfig'].includes(key)))
+                    throw Error(`Invalid migration binding for ${identity}`);
+                const binding = input;
+                if (typeof binding.app !== 'string' || !/^[A-Za-z0-9][A-Za-z0-9_-]*$/.test(binding.app))
+                    throw Error(`Invalid migration owner for ${identity}`);
+                const source = migrationEntryPath(binding.config, 'config'), release = migrationEntryPath(binding.releaseConfig, 'releaseConfig');
+                if (!/\.[cm]?js$/.test(release))
+                    throw Error(`Migration releaseConfig for ${identity} must name a compiled JavaScript module`);
+                return { service, database, app: binding.app, mode: 'config', source, release };
+            });
+            if (!bindings.length)
+                throw Error(`Migration binding list is empty for ${identity}`);
+            if (new Set(bindings.map(binding => binding.app)).size !== 1)
+                throw Error(`Database ${identity} must have one migration owner`);
+            for (const binding of bindings) {
+                const key = JSON.stringify([binding.app, binding.source, binding.release]);
+                const previous = programs.get(key);
+                if (previous)
+                    throw Error(`Migration program for ${binding.app} is declared more than once (${previous}, ${identity})`);
+                programs.set(key, identity);
+                requests.push(binding);
+            }
+        }
+    }
+    return requests;
+}
+/** Validate every owner before executing any part of the migration plan. */
+export function validateMigrationOwners(requests, entries) {
+    for (const request of requests) {
+        if (!request || !['script', 'config'].includes(request.mode) || typeof request.database !== 'string' || !request.database ||
+            typeof request.service !== 'string' || !request.service)
+            throw Error('Invalid normalized migration request');
+        migrationEntryPath(request.source, 'source');
+        migrationEntryPath(request.release, 'release');
+        if (!/\.[cm]?js$/.test(request.release))
+            throw Error('A released migration must name a compiled JavaScript module');
+        const owners = entries.filter(entry => entry.name === request.app);
+        if (owners.length !== 1 || owners[0].enabled === false)
+            throw Error(`Migration requested for ${request.service}/${request.database}, but this stack has no unique application ${request.app}`);
+    }
+}
+/** Existing deployments activate one node at a time. An explicit shared-database
+ * owner must therefore have one placement, visited before its consumers. Multiple
+ * owning nodes need a global migration barrier; refuse rather than choosing a replica. */
+export function orderMigrationPlacements(requests, placements) {
+    const owners = new Set();
+    for (const request of requests.filter(candidate => candidate.mode === 'config')) {
+        const matches = placements.flatMap((placement, index) => placement.apps.some(app => app.name === request.app) ? [index] : []);
+        if (matches.length !== 1)
+            throw Error(`Migration owner ${request.app} requires exactly one node placement; configure an unambiguous owner before deployment`);
+        owners.add(matches[0]);
+    }
+    if (owners.size > 1)
+        throw Error('Migration owners on different nodes require a global migration barrier; place the explicit owners on one node before deployment');
+    const first = [...owners][0];
+    return first === undefined ? [...placements] : [placements[first], ...placements.filter((_, index) => index !== first)];
+}
+export function requiredMigrationFiles(requests) {
+    const result = Object.create(null);
+    for (const request of requests)
+        (result[request.app] ??= []).push(request.release);
+    return result;
+}
+/** Legacy scripts consume app-prefixed connection fields and cannot preserve URL options.
+ * Config modules receive the complete resolved URL; validation never rewrites their connection. */
+export function migrationDatabaseEnvironment(app, connectionString, expectedDatabase, mode = 'script') {
+    let url, database, user, password;
+    try {
+        url = new URL(connectionString);
+        database = decodeURIComponent(url.pathname.slice(1));
+        if (!['postgres:', 'postgresql:'].includes(url.protocol) || !url.hostname || !database ||
+            (expectedDatabase !== undefined && database !== expectedDatabase) || !/^[A-Za-z0-9][A-Za-z0-9_-]*$/.test(app))
+            throw Error();
+        user = decodeURIComponent(url.username);
+        password = decodeURIComponent(url.password);
+    }
+    catch {
+        throw Error(`Migration for ${app} requires its resolved PostgreSQL DATABASE_URL${expectedDatabase ? ' targeting ' + expectedDatabase : ''}`);
+    }
+    if (url.hash || (mode === 'script' && url.search))
+        throw Error(`Migration for ${app} refuses DATABASE_URL options: the standard migration contract cannot guarantee their application. No migration was executed.`);
+    if (mode === 'config' && [...url.searchParams.keys()].some(key => ['host', 'hostaddr', 'port', 'database', 'dbname', 'user', 'password'].includes(key.toLowerCase())))
+        throw Error(`Migration for ${app} refuses connection destination overrides in DATABASE_URL options; declare the destination in the URL authority and path`);
+    const host = url.hostname.replace(/^\[|\]$/g, ''), port = url.port || '5432';
+    const prefix = app.toUpperCase().replace(/-/g, '_');
+    const env = { DATABASE_URL: connectionString };
+    if (mode === 'script')
+        Object.assign(env, {
+            [`${prefix}__DATABASE__HOST`]: host,
+            [`${prefix}__DATABASE__PORT`]: port,
+            [`${prefix}__DATABASE__DATABASE`]: database,
+            [`${prefix}__DATABASE__USER`]: user,
+            [`${prefix}__DATABASE__PASSWORD`]: password,
+        });
+    return { host, port: Number(port), database, user, password, connectionString, env };
+}
+/** Two named infrastructure services must not silently assign different owners
+ * to the same resolved database. Several registries under one owner are valid. */
+export function validateMigrationDestinations(targets) {
+    const owners = new Map();
+    for (const { app, database } of targets) {
+        const identity = JSON.stringify([database.host, database.port, database.database]);
+        const owner = owners.get(identity);
+        if (owner && owner !== app)
+            throw Error(`Resolved migration database ${database.database} has conflicting owners ${owner} and ${app}`);
+        owners.set(identity, app);
+    }
+}
+function contained(root, file) {
+    const relative = path.relative(root, file);
+    return relative !== '' && relative !== '..' && !relative.startsWith('..' + path.sep) && !path.isAbsolute(relative);
+}
+/** Admission is delegated to the same manifest/closure/owner verifier as app launch.
+ * A receipt alone is never authority to execute a selected release. No DB or child is touched. */
+export async function localMigrationTargets(requests, entries, projectPath, verify) {
+    const plan = requests;
+    validateMigrationOwners(plan, entries);
+    const sealed = plan.filter(request => entries.find(entry => entry.name === request.app)?.releaseRoot);
+    if (sealed.length && !verify)
+        throw Error('Requested release migrations require canonical installation verification');
+    const verified = sealed.length ? await verify([...new Set(sealed.map(request => request.app))], requiredMigrationFiles(sealed)) : [];
+    const targets = [];
+    for (const request of plan) {
+        const app = request.app, entry = entries.find(candidate => candidate.name === app);
+        let cwd, script, environmentApp = app, nodeOptions = '';
+        if (entry.releaseRoot) {
+            const checked = verified.find(candidate => candidate.name === app);
+            if (!checked || checked.releaseRoot !== entry.releaseRoot || checked.bootstrap !== entry.bootstrap || checked.script !== entry.script)
+                throw Error(`Migration installation changed for ${app}`);
+            cwd = entry.releaseRoot;
+            script = path.join(cwd, request.release);
+            const receipt = await readInstalledReleaseReceipt(cwd);
+            environmentApp = receipt.origin.runtimeOrigin?.producerApp ?? app;
+            nodeOptions = releaseOptionsForEnv(checked.env);
+        }
+        else {
+            cwd = resolveAppPath(projectPath, entry);
+            // true historically names apps/<database>; the config loader stamps an omitted cwd
+            // to the project root. Preserve that spelling, without a missing-file fallback.
+            if (request.mode === 'script' && cwd === path.resolve(projectPath))
+                cwd = path.join(projectPath, 'apps', app);
+            script = path.join(cwd, request.source);
+        }
+        try {
+            const physicalCwd = await fs.realpath(cwd), physicalScript = await fs.realpath(script);
+            if (!contained(physicalCwd, physicalScript))
+                throw Error();
+            if (entry.releaseRoot && (physicalCwd !== cwd || physicalScript !== script))
+                throw Error();
+            if (!(await fs.lstat(script)).isFile())
+                throw Error();
+            cwd = physicalCwd;
+            script = physicalScript;
+        }
+        catch {
+            throw Error(`Migration requested for ${app}, but its migration script is unavailable or not a physical file within its package`);
+        }
+        targets.push({ ...request, environmentApp, script, cwd, sealed: !!entry.releaseRoot, nodeOptions });
+    }
+    return targets;
+}
+//# sourceMappingURL=migration-target.js.map

package/dist/services/migration-target.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"migration-target.js","sourceRoot":"","sources":["../../src/services/migration-target.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAClC,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAEvD,OAAO,EAAE,2BAA2B,EAAE,MAAM,gCAAgC,CAAC;AAC7E,OAAO,EAAE,oBAAoB,EAAE,MAAM,8BAA8B,CAAC;AAEpE,8EAA8E;AAC9E,MAAM,CAAC,MAAM,wBAAwB,GAAG,0BAA0B,CAAC;AAYnE,MAAM,UAAU,kBAAkB,CAAC,KAAc,EAAE,KAAa;IAC9D,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,MAAM,GAAG,IAAI,IAAI,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC;QACnF,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,IAAI,IAAI,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,IAAI,CAAC;QACvG,MAAM,KAAK,CAAC,aAAa,KAAK,2CAA2C,CAAC,CAAC;IAC7E,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,MAAM,CAAC,QAAgB,EAAE,OAAO,GAAG,UAAU;IACpD,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,yBAAyB,EAAE,OAAO,EAAE,wBAAwB,EAAE,CAAC;AACpI,CAAC;AAED,iFAAiF;AACjF,MAAM,UAAU,wBAAwB,CAAC,QAAuD;IAC9F,KAAK,MAAM,OAAO,IAAI,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC9C,IAAI,OAAO,CAAC,OAAO,KAAK,UAAU;YAAE,SAAS;QAC7C,MAAM,SAAS,GAAG,OAAO,CAAC,aAAa,EAAE,CAAC,WAAW,CAAC,CAAC;QACvD,IAAI,SAAS,KAAK,SAAS;YAAE,SAAS;QACtC,IAAI,CAAC,SAAS,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC;YAAE,MAAM,KAAK,CAAC,0CAA0C,CAAC,CAAC;QACrI,KAAK,MAAM,MAAM,IAAI,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC;YAC9C,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;gBAAE,MAAM,KAAK,CAAC,yCAAyC,CAAC,CAAC;YAC3H,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,cAAc,CAAC;gBAAE,OAAO,IAAI,CAAC;QAC7F,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;6FAC6F;AAC7F,MAAM,UAAU,mBAAmB,CAAC,QAAuD;IACzF,MAAM,QAAQ,GAAuB,EAAE,CAAC;IACxC,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC3C,KAAK,MAAM,CAAC,OAAO,EAAE,WAAW,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC9D,IAAI,WAAW,CAAC,OAAO,KAAK,UAAU;YAAE,SAAS;QACjD,MAAM,SAAS,GAAG,WAAW,CAAC,aAAa,EAAE,CAAC,WAAW,CAAC,CAAC;QAC3D,IAAI,SAAS,KAAK,SAAS;YAAE,SAAS;QACtC,IAAI,CAAC,SAAS,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC;YAAE,MAAM,KAAK,CAAC,oCAAoC,OAAO,EAAE,CAAC,CAAC;QACxI,KAAK,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;YAC3D,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;gBAAE,MAAM,KAAK,CAAC,qCAAqC,OAAO,IAAI,QAAQ,EAAE,CAAC,CAAC;YAC5I,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,cAAc,CAAC;gBAAE,MAAM,KAAK,CAAC,2DAA2D,OAAO,IAAI,QAAQ,oDAAoD,CAAC,CAAC;YAC3L,MAAM,KAAK,GAAI,MAAgC,CAAC,OAAO,CAAC;YACxD,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,KAAK;gBAAE,SAAS;YACrD,MAAM,QAAQ,GAAG,GAAG,OAAO,IAAI,QAAQ,EAAE,CAAC;YAC1C,MAAM,QAAQ,GAAG,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE;gBACnH,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;oBAC3D,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,EAAE,QAAQ,EAAE,eAAe,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;oBAAE,MAAM,KAAK,CAAC,iCAAiC,QAAQ,EAAE,CAAC,CAAC;gBAChJ,MAAM,OAAO,GAAG,KAAyB,CAAC;gBAC1C,IAAI,OAAO,OAAO,CAAC,GAAG,KAAK,QAAQ,IAAI,CAAC,6BAA6B,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC;oBAAE,MAAM,KAAK,CAAC,+BAA+B,QAAQ,EAAE,CAAC,CAAC;gBAChJ,MAAM,MAAM,GAAG,kBAAkB,CAAC,OAAO,CAAC,MAAM,EAAE,QAAQ,CAAC,EAAE,OAAO,GAAG,kBAAkB,CAAC,OAAO,CAAC,aAAa,EAAE,eAAe,CAAC,CAAC;gBAClI,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC;oBAAE,MAAM,KAAK,CAAC,+BAA+B,QAAQ,yCAAyC,CAAC,CAAC;gBAC/H,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,IAAI,EAAE,QAAiB,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;YAC3F,CAAC,CAAC,CAAC;YACH,IAAI,CAAC,QAAQ,CAAC,MAAM;gBAAE,MAAM,KAAK,CAAC,uCAAuC,QAAQ,EAAE,CAAC,CAAC;YACrF,IAAI,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC;gBAAE,MAAM,KAAK,CAAC,YAAY,QAAQ,gCAAgC,CAAC,CAAC;YAChI,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;gBAC/B,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC;gBAC3E,MAAM,QAAQ,GAAG,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;gBACnC,IAAI,QAAQ;oBAAE,MAAM,KAAK,CAAC,yBAAyB,OAAO,CAAC,GAAG,gCAAgC,QAAQ,KAAK,QAAQ,GAAG,CAAC,CAAC;gBACxH,QAAQ,CAAC,GAAG,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;gBAC5B,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YACzB,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,4EAA4E;AAC5E,MAAM,UAAU,uBAAuB,CAAC,QAAqC,EAAE,OAAsC;IACnH,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,IAAI,CAAC,OAAO,IAAI,CAAC,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,OAAO,OAAO,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,OAAO,CAAC,QAAQ;YACrH,OAAO,OAAO,CAAC,OAAO,KAAK,QAAQ,IAAI,CAAC,OAAO,CAAC,OAAO;YAAE,MAAM,KAAK,CAAC,sCAAsC,CAAC,CAAC;QACjH,kBAAkB,CAAC,OAAO,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;QAAC,kBAAkB,CAAC,OAAO,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;QAC7F,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC;YAAE,MAAM,KAAK,CAAC,6DAA6D,CAAC,CAAC;QACpH,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,OAAO,CAAC,GAAG,CAAC,CAAC;QACnE,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,MAAM,CAAC,CAAC,CAAE,CAAC,OAAO,KAAK,KAAK;YACrD,MAAM,KAAK,CAAC,2BAA2B,OAAO,CAAC,OAAO,IAAI,OAAO,CAAC,QAAQ,8CAA8C,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;IAC3I,CAAC;AACH,CAAC;AAED;;0FAE0F;AAC1F,MAAM,UAAU,wBAAwB,CAAoD,QAAqC,EAAE,UAAwB;IACzJ,MAAM,MAAM,GAAG,IAAI,GAAG,EAAU,CAAC;IACjC,KAAK,MAAM,OAAO,IAAI,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC,SAAS,CAAC,IAAI,KAAK,QAAQ,CAAC,EAAE,CAAC;QAChF,MAAM,OAAO,GAAG,UAAU,CAAC,OAAO,CAAC,CAAC,SAAS,EAAE,KAAK,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,IAAI,KAAK,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAC9H,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;YAAE,MAAM,KAAK,CAAC,mBAAmB,OAAO,CAAC,GAAG,wFAAwF,CAAC,CAAC;QAC9J,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAE,CAAC,CAAC;IAC1B,CAAC;IACD,IAAI,MAAM,CAAC,IAAI,GAAG,CAAC;QAAE,MAAM,KAAK,CAAC,iIAAiI,CAAC,CAAC;IACpK,MAAM,KAAK,GAAG,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;IAC7B,OAAO,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,KAAK,CAAE,EAAE,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,KAAK,KAAK,CAAC,CAAC,CAAC;AAC3H,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,QAAqC;IAC1E,MAAM,MAAM,GAA6B,MAAM,CAAC,MAAM,CAAC,IAAI,CAA6B,CAAC;IACzF,KAAK,MAAM,OAAO,IAAI,QAAQ;QAAE,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IACnF,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;mGACmG;AACnG,MAAM,UAAU,4BAA4B,CAAC,GAAW,EAAE,gBAAwB,EAAE,gBAAyB,EAAE,IAAI,GAAwB,QAAQ;IACjJ,IAAI,GAAQ,EAAE,QAAgB,EAAE,IAAY,EAAE,QAAgB,CAAC;IAC/D,IAAI,CAAC;QACH,GAAG,GAAG,IAAI,GAAG,CAAC,gBAAgB,CAAC,CAAC;QAChC,QAAQ,GAAG,kBAAkB,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QACrD,IAAI,CAAC,CAAC,WAAW,EAAE,aAAa,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,IAAI,CAAC,QAAQ;YAClF,CAAC,gBAAgB,KAAK,SAAS,IAAI,QAAQ,KAAK,gBAAgB,CAAC,IAAI,CAAC,6BAA6B,CAAC,IAAI,CAAC,GAAG,CAAC;YAAE,MAAM,KAAK,EAAE,CAAC;QACjI,IAAI,GAAG,kBAAkB,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAAC,QAAQ,GAAG,kBAAkB,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IACvF,CAAC;IAAC,MAAM,CAAC;QAAC,MAAM,KAAK,CAAC,iBAAiB,GAAG,iDAAiD,gBAAgB,CAAC,CAAC,CAAC,aAAa,GAAG,gBAAgB,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAAC,CAAC;IACzJ,IAAI,GAAG,CAAC,IAAI,IAAI,CAAC,IAAI,KAAK,QAAQ,IAAI,GAAG,CAAC,MAAM,CAAC;QAAE,MAAM,KAAK,CAAC,iBAAiB,GAAG,+HAA+H,CAAC,CAAC;IACpN,IAAI,IAAI,KAAK,QAAQ,IAAI,CAAC,GAAG,GAAG,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,EAAE,UAAU,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,CAAC;QACnK,MAAM,KAAK,CAAC,iBAAiB,GAAG,0HAA0H,CAAC,CAAC;IAC9J,MAAM,IAAI,GAAG,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,EAAE,IAAI,GAAG,GAAG,CAAC,IAAI,IAAI,MAAM,CAAC;IAC7E,MAAM,MAAM,GAAG,GAAG,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IACpD,MAAM,GAAG,GAA2B,EAAE,YAAY,EAAE,gBAAgB,EAAE,CAAC;IACvE,IAAI,IAAI,KAAK,QAAQ;QAAE,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE;YACxC,CAAC,GAAG,MAAM,kBAAkB,CAAC,EAAE,IAAI;YACnC,CAAC,GAAG,MAAM,kBAAkB,CAAC,EAAE,IAAI;YACnC,CAAC,GAAG,MAAM,sBAAsB,CAAC,EAAE,QAAQ;YAC3C,CAAC,GAAG,MAAM,kBAAkB,CAAC,EAAE,IAAI;YACnC,CAAC,GAAG,MAAM,sBAAsB,CAAC,EAAE,QAAQ;SAC5C,CAAC,CAAC;IACH,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,gBAAgB,EAAE,GAAG,EAAE,CAAC;AACvF,CAAC;AAED;kFACkF;AAClF,MAAM,UAAU,6BAA6B,CAAC,OAA8F;IAC1I,MAAM,MAAM,GAAG,IAAI,GAAG,EAAkB,CAAC;IACzC,KAAK,MAAM,EAAE,GAAG,EAAE,QAAQ,EAAE,IAAI,OAAO,EAAE,CAAC;QACxC,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC;QACnF,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACnC,IAAI,KAAK,IAAI,KAAK,KAAK,GAAG;YAAE,MAAM,KAAK,CAAC,+BAA+B,QAAQ,CAAC,QAAQ,2BAA2B,KAAK,QAAQ,GAAG,EAAE,CAAC,CAAC;QACvI,MAAM,CAAC,GAAG,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;IAC5B,CAAC;AACH,CAAC;AAUD,SAAS,SAAS,CAAC,IAAY,EAAE,IAAY;IAC3C,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAC3C,OAAO,QAAQ,KAAK,EAAE,IAAI,QAAQ,KAAK,IAAI,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;AACrH,CAAC;AAED;kGACkG;AAClG,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,QAAqC,EAAE,OAAsC,EACvH,WAAmB,EAAE,MAA+B;IACpD,MAAM,IAAI,GAAG,QAAQ,CAAC;IACtB,uBAAuB,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IACvC,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,OAAO,CAAC,GAAG,CAAC,EAAE,WAAW,CAAC,CAAC;IACtG,IAAI,MAAM,CAAC,MAAM,IAAI,CAAC,MAAM;QAAE,MAAM,KAAK,CAAC,0EAA0E,CAAC,CAAC;IACtH,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,MAAO,CAAC,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,sBAAsB,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACtI,MAAM,OAAO,GAA2B,EAAE,CAAC;IAC3C,KAAK,MAAM,OAAO,IAAI,IAAI,EAAE,CAAC;QAC3B,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,SAAS,CAAC,IAAI,KAAK,GAAG,CAAE,CAAC;QACpF,IAAI,GAAW,EAAE,MAAc,EAAE,cAAc,GAAG,GAAG,EAAE,WAAW,GAAG,EAAE,CAAC;QACxE,IAAI,KAAK,CAAC,WAAW,EAAE,CAAC;YACtB,MAAM,OAAO,GAAG,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,SAAS,CAAC,IAAI,KAAK,GAAG,CAAC,CAAC;YACnE,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,WAAW,KAAK,KAAK,CAAC,WAAW,IAAI,OAAO,CAAC,SAAS,KAAK,KAAK,CAAC,SAAS,IAAI,OAAO,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM;gBACnI,MAAM,KAAK,CAAC,sCAAsC,GAAG,EAAE,CAAC,CAAC;YAC3D,GAAG,GAAG,KAAK,CAAC,WAAW,CAAC;YACxB,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;YACzC,MAAM,OAAO,GAAG,MAAM,2BAA2B,CAAC,GAAG,CAAC,CAAC;YACvD,cAAc,GAAG,OAAO,CAAC,MAAM,CAAC,aAAa,EAAE,WAAW,IAAI,GAAG,CAAC;YAClE,WAAW,GAAG,oBAAoB,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAClD,CAAC;aAAM,CAAC;YACN,GAAG,GAAG,cAAc,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC;YACzC,mFAAmF;YACnF,gFAAgF;YAChF,IAAI,OAAO,CAAC,IAAI,KAAK,QAAQ,IAAI,GAAG,KAAK,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC;gBAAE,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC;YAC9G,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;QAC1C,CAAC;QACD,IAAI,CAAC;YACH,MAAM,WAAW,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,cAAc,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;YACvF,IAAI,CAAC,SAAS,CAAC,WAAW,EAAE,cAAc,CAAC;gBAAE,MAAM,KAAK,EAAE,CAAC;YAC3D,IAAI,KAAK,CAAC,WAAW,IAAI,CAAC,WAAW,KAAK,GAAG,IAAI,cAAc,KAAK,MAAM,CAAC;gBAAE,MAAM,KAAK,EAAE,CAAC;YAC3F,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE;gBAAE,MAAM,KAAK,EAAE,CAAC;YACtD,GAAG,GAAG,WAAW,CAAC;YAAC,MAAM,GAAG,cAAc,CAAC;QAC7C,CAAC;QAAC,MAAM,CAAC;YAAC,MAAM,KAAK,CAAC,2BAA2B,GAAG,qFAAqF,CAAC,CAAC;QAAC,CAAC;QAC7I,OAAO,CAAC,IAAI,CAAC,EAAE,GAAG,OAAO,EAAE,cAAc,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,WAAW,EAAE,WAAW,EAAE,CAAC,CAAC;IACtG,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/dist/services/node-health.repository.d.ts

@@ -6,65 +6,8 @@
  */
 import { type Kysely } from 'kysely';
 import type { OmnitronDatabase } from '../database/schema.js';
-export interface HealthCheckRow {
-    nodeId: string;
-    checkedAt: string;
-    checkDurationMs: number;
-    pingReachable: boolean;
-    pingLatencyMs: number | null;
-    pingError: string | null;
-    sshConnected: boolean;
-    sshLatencyMs: number | null;
-    sshError: string | null;
-    /** `null` when the check measured nothing about omnitron — see migration 009. */
-    omnitronConnected: boolean | null;
-    omnitronVersion: string | null;
-    omnitronPid: number | null;
-    omnitronUptime: number | null;
-    omnitronRole: string | null;
-    omnitronError: string | null;
-    os: {
-        platform: string;
-        arch: string;
-        hostname: string;
-        release: string;
-    } | null;
-}
-/**
- * Uptime bar bucket — aggregated over `intervalMs`.
- *
- * `uptimePct`: 0.0 = fully down, 1.0 = fully up during this bucket.
- * Frontend maps this to a green→red color gradient.
- */
-export interface UptimeBucket {
-    /** Bucket start (ISO) */
-    t: string;
-    /** PING uptime 0.0–1.0 */
-    ping: number;
-    /**
-     * OMNITRON uptime over the checks that could measure it, or -1 when none
-     * could.
-     *
-     * Not every check is a measurement. One that found no omnitron installed is
-     * not evidence of downtime — there is nothing there to be down — one whose
-     * SSH was refused did not get far enough to look, and one that looked and
-     * could not read the answer (a timeout, output that was not JSON) learnt
-     * nothing either. Both used to sit in
-     * the denominator, where they pulled the figure towards zero in proportion
-     * to how many of them there were, and the console painted the result red.
-     * Observed: a node with 60 "not installed" checks and 13 SSH failures in one
-     * day, summarised as "OMNITRON 0%" — which reads as an outage, of software
-     * that was never installed.
-     */
-    omnitron: number;
-    /** Total checks in this bucket, measurements or not. */
-    checks: number;
-    /**
-     * When `omnitron` is -1 and checks ran, what those checks actually found:
-     * no omnitron installed, no way in, or a way in and nothing read.
-     */
-    omnitronUnmeasured?: 'absent' | 'unreachable' | 'unread';
-}
+import type { HealthCheckRow, UptimeBucket } from '../shared/dto/health.js';
+export type { HealthCheckRow, UptimeBucket } from '../shared/dto/health.js';
 /** One row of the per-bucket aggregate. Postgres returns counts as strings. */
 export interface UptimeAggregateRow {
     idx: number | string;

package/dist/services/node-health.repository.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"node-health.repository.d.ts","sourceRoot":"","sources":["../../src/services/node-health.repository.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAO,KAAK,MAAM,EAAE,MAAM,QAAQ,CAAC;AAC1C,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AAG9D,MAAM,WAAW,cAAc;IAC7B,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,eAAe,EAAE,MAAM,CAAC;IACxB,aAAa,EAAE,OAAO,CAAC;IACvB,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,YAAY,EAAE,OAAO,CAAC;IACtB,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,iFAAiF;IACjF,iBAAiB,EAAE,OAAO,GAAG,IAAI,CAAC;IAClC,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,EAAE,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;CAClF;AAED;;;;;GAKG;AACH,MAAM,WAAW,YAAY;IAC3B,yBAAyB;IACzB,CAAC,EAAE,MAAM,CAAC;IACV,0BAA0B;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb;;;;;;;;;;;;;;OAcG;IACH,QAAQ,EAAE,MAAM,CAAC;IACjB,wDAAwD;IACxD,MAAM,EAAE,MAAM,CAAC;IACf;;;OAGG;IACH,kBAAkB,CAAC,EAAE,QAAQ,GAAG,aAAa,GAAG,QAAQ,CAAC;CAC1D;AAOD,+EAA+E;AAC/E,MAAM,WAAW,kBAAkB;IACjC,GAAG,EAAE,MAAM,GAAG,MAAM,CAAC;IACrB,MAAM,EAAE,MAAM,GAAG,MAAM,CAAC;IACxB,OAAO,EAAE,MAAM,GAAG,MAAM,CAAC;IACzB,OAAO,EAAE,MAAM,GAAG,MAAM,CAAC;IACzB,aAAa,EAAE,MAAM,GAAG,MAAM,CAAC;IAC/B,WAAW,EAAE,MAAM,GAAG,MAAM,CAAC;IAC7B,qDAAqD;IACrD,gBAAgB,EAAE,MAAM,GAAG,MAAM,CAAC;IAClC,kEAAkE;IAClE,WAAW,EAAE,MAAM,GAAG,MAAM,CAAC;CAC9B;AAED,wBAAgB,mBAAmB,CAAC,EAAE,EAAE,MAAM,GAAG,MAAM,CAGtD;AAED,qBAAa,oBAAoB;IACnB,OAAO,CAAC,QAAQ,CAAC,EAAE;IAA/B,YAA6B,EAAE,EAAE,MAAM,CAAC,gBAAgB,CAAC,EAAI;IAE7D,yDAAyD;IACnD,UAAU,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,SAAK,GAAG,OAAO,CAAC,cAAc,EAAE,CAAC,CAUtE;IAED;;;;;;;;;;;;;;;;OAgBG;IACG,YAAY,CAAC,MAAM,EAAE,MAAM,EAAE,WAAW,SAAK,EAAE,UAAU,SAAkB,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC,CA0C1G;IAED;;;;;;;OAOG;IACG,aAAa,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAMnD;CACF;AAED;;;;;;;GAOG;AACH,wBAAgB,eAAe,CAC7B,IAAI,EAAE,SAAS,kBAAkB,EAAE,EACnC,WAAW,EAAE,MAAM,EACnB,QAAQ,EAAE,MAAM,EAChB,KAAK,EAAE,MAAM,GACZ,YAAY,EAAE,CAuChB"}
+{"version":3,"file":"node-health.repository.d.ts","sourceRoot":"","sources":["../../src/services/node-health.repository.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAO,KAAK,MAAM,EAAE,MAAM,QAAQ,CAAC;AAC1C,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AAG9D,OAAO,KAAK,EAAE,cAAc,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAC;AAC5E,YAAY,EAAE,cAAc,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAC;AAO5E,+EAA+E;AAC/E,MAAM,WAAW,kBAAkB;IACjC,GAAG,EAAE,MAAM,GAAG,MAAM,CAAC;IACrB,MAAM,EAAE,MAAM,GAAG,MAAM,CAAC;IACxB,OAAO,EAAE,MAAM,GAAG,MAAM,CAAC;IACzB,OAAO,EAAE,MAAM,GAAG,MAAM,CAAC;IACzB,aAAa,EAAE,MAAM,GAAG,MAAM,CAAC;IAC/B,WAAW,EAAE,MAAM,GAAG,MAAM,CAAC;IAC7B,qDAAqD;IACrD,gBAAgB,EAAE,MAAM,GAAG,MAAM,CAAC;IAClC,kEAAkE;IAClE,WAAW,EAAE,MAAM,GAAG,MAAM,CAAC;CAC9B;AAED,wBAAgB,mBAAmB,CAAC,EAAE,EAAE,MAAM,GAAG,MAAM,CAGtD;AAED,qBAAa,oBAAoB;IACnB,OAAO,CAAC,QAAQ,CAAC,EAAE;IAA/B,YAA6B,EAAE,EAAE,MAAM,CAAC,gBAAgB,CAAC,EAAI;IAE7D,yDAAyD;IACnD,UAAU,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,SAAK,GAAG,OAAO,CAAC,cAAc,EAAE,CAAC,CAUtE;IAED;;;;;;;;;;;;;;;;OAgBG;IACG,YAAY,CAAC,MAAM,EAAE,MAAM,EAAE,WAAW,SAAK,EAAE,UAAU,SAAkB,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC,CA0C1G;IAED;;;;;;;OAOG;IACG,aAAa,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAMnD;CACF;AAED;;;;;;;GAOG;AACH,wBAAgB,eAAe,CAC7B,IAAI,EAAE,SAAS,kBAAkB,EAAE,EACnC,WAAW,EAAE,MAAM,EACnB,QAAQ,EAAE,MAAM,EAChB,KAAK,EAAE,MAAM,GACZ,YAAY,EAAE,CAuChB"}

package/dist/services/node-health.repository.js.map

@@ -1 +1 @@
-{"version":3,"file":"node-health.repository.js","sourceRoot":"","sources":["../../src/services/node-health.repository.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,GAAG,EAAe,MAAM,QAAQ,CAAC;AAE1C,OAAO,EAAE,aAAa,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AA0DrE,kDAAkD;AAClD,MAAM,eAAe,GAAG,CAAC,GAAG,MAAM,CAAC;AACnC,MAAM,eAAe,GAAG,EAAE,GAAG,EAAE,GAAG,MAAM,CAAC;AACzC,MAAM,OAAO,GAAG,CAAC,GAAG,MAAM,CAAC;AAgB3B,MAAM,UAAU,mBAAmB,CAAC,EAAU;IAC5C,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,eAAe,EAAE,IAAI,CAAC,GAAG,CAAC,eAAe,EAAE,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC;IACjH,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,GAAG,OAAO,CAAC,GAAG,OAAO,CAAC;AACjD,CAAC;AAED,MAAM,OAAO,oBAAoB;IACF,EAAE;IAA/B,YAA6B,EAA4B;kBAA5B,EAAE;IAA6B,CAAC;IAE7D,yDAAyD;IACzD,KAAK,CAAC,UAAU,CAAC,MAAc,EAAE,KAAK,GAAG,EAAE;QACzC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,EAAE;aACvB,UAAU,CAAC,oBAAoB,CAAC;aAChC,SAAS,EAAE;aACX,KAAK,CAAC,QAAQ,EAAE,GAAG,EAAE,MAAM,CAAC;aAC5B,OAAO,CAAC,WAAW,EAAE,MAAM,CAAC;aAC5B,KAAK,CAAC,KAAK,CAAC;aACZ,OAAO,EAAE,CAAC;QAEb,OAAO,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IAC1B,CAAC;IAED;;;;;;;;;;;;;;;;OAgBG;IACH,KAAK,CAAC,YAAY,CAAC,MAAc,EAAE,WAAW,GAAG,EAAE,EAAE,UAAU,GAAG,eAAe;QAC/E,MAAM,QAAQ,GAAG,mBAAmB,CAAC,UAAU,CAAC,CAAC;QACjD,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC;QACnD,MAAM,WAAW,GAAG,KAAK,GAAG,QAAQ,CAAC;QACrC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,WAAW,GAAG,GAAG,GAAG,WAAW,CAAC;QACtC,MAAM,MAAM,GAAG,IAAI,IAAI,CAAC,WAAW,CAAC,CAAC,WAAW,EAAE,CAAC;QAEnD,wEAAwE;QACxE,uEAAuE;QACvE,uEAAuE;QACvE,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,GAAG,CAAoB;;;;;;;;;;;;;wDAaM,WAAW,OAAO,QAAQ;;;;;8DAKpB,aAAa;;sEAEL,WAAW;;;;2BAItD,MAAM;+BACF,MAAM;;;KAGhC,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAEnB,OAAO,eAAe,CAAC,IAAI,EAAE,WAAW,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC;IAC7D,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,aAAa,CAAC,MAAc;QAChC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,EAAE;aACzB,UAAU,CAAC,oBAAoB,CAAC;aAChC,KAAK,CAAC,QAAQ,EAAE,GAAG,EAAE,MAAM,CAAC;aAC5B,gBAAgB,EAAE,CAAC;QACtB,OAAO,MAAM,CAAC,MAAM,CAAC,cAAc,IAAI,CAAC,CAAC,CAAC;IAC5C,CAAC;CACF;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,eAAe,CAC7B,IAAmC,EACnC,WAAmB,EACnB,QAAgB,EAChB,KAAa;IAEb,MAAM,OAAO,GAAmB,EAAE,CAAC;IACnC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,EAAE,CAAC,EAAE,EAAE,CAAC;QAC/B,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,IAAI,IAAI,CAAC,WAAW,GAAG,CAAC,GAAG,QAAQ,CAAC,CAAC,WAAW,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC,CAAC;IAC7G,CAAC;IAED,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC5B,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,GAAG,GAAG,CAAC,IAAI,GAAG,IAAI,KAAK;YAAE,SAAS;QAChE,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAClC,IAAI,MAAM,IAAI,CAAC;YAAE,SAAS;QAE1B,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAE,CAAC;QAC7B,MAAM,CAAC,MAAM,GAAG,MAAM,CAAC;QACvB,MAAM,CAAC,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,MAAM,CAAC;QAE3C,uEAAuE;QACvE,qEAAqE;QACrE,uEAAuE;QACvE,yEAAyE;QACzE,aAAa;QACb,MAAM,QAAQ,GAAG,MAAM,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;QAC3C,MAAM,CAAC,QAAQ,GAAG,QAAQ,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACrE,IAAI,QAAQ,KAAK,CAAC,EAAE,CAAC;YACnB,+DAA+D;YAC/D,uEAAuE;YACvE,oBAAoB;YACpB,qEAAqE;YACrE,oDAAoD;YACpD,MAAM,CAAC,kBAAkB;gBACvB,MAAM,CAAC,GAAG,CAAC,WAAW,CAAC,GAAG,CAAC;oBACzB,CAAC,CAAC,QAAQ;oBACV,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,WAAW,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,gBAAgB,CAAC;wBACtD,CAAC,CAAC,QAAQ;wBACV,CAAC,CAAC,aAAa,CAAC;QACxB,CAAC;IACH,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,MAAM,CAAC,GAAQ;IACtB,OAAO;QACL,MAAM,EAAE,GAAG,CAAC,MAAM;QAClB,SAAS,EAAE,IAAI,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,WAAW,EAAE;QAChD,eAAe,EAAE,MAAM,CAAC,GAAG,CAAC,eAAe,CAAC;QAC5C,aAAa,EAAE,CAAC,CAAC,GAAG,CAAC,aAAa;QAClC,aAAa,EAAE,GAAG,CAAC,aAAa,IAAI,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,IAAI;QAC3E,SAAS,EAAE,GAAG,CAAC,SAAS,IAAI,IAAI;QAChC,YAAY,EAAE,CAAC,CAAC,GAAG,CAAC,YAAY;QAChC,YAAY,EAAE,GAAG,CAAC,YAAY,IAAI,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,IAAI;QACxE,QAAQ,EAAE,GAAG,CAAC,QAAQ,IAAI,IAAI;QAC9B,iBAAiB,EAAE,GAAG,CAAC,iBAAiB,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,iBAAiB;QACjF,eAAe,EAAE,GAAG,CAAC,eAAe,IAAI,IAAI;QAC5C,WAAW,EAAE,GAAG,CAAC,WAAW,IAAI,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,IAAI;QACrE,cAAc,EAAE,GAAG,CAAC,cAAc,IAAI,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,IAAI;QAC9E,YAAY,EAAE,GAAG,CAAC,YAAY,IAAI,IAAI;QACtC,aAAa,EAAE,GAAG,CAAC,aAAa,IAAI,IAAI;QACxC,EAAE,EAAE,OAAO,GAAG,CAAC,EAAE,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,IAAI,IAAI;KACrE,CAAC;AACJ,CAAC"}
+{"version":3,"file":"node-health.repository.js","sourceRoot":"","sources":["../../src/services/node-health.repository.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,GAAG,EAAe,MAAM,QAAQ,CAAC;AAE1C,OAAO,EAAE,aAAa,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AAKrE,kDAAkD;AAClD,MAAM,eAAe,GAAG,CAAC,GAAG,MAAM,CAAC;AACnC,MAAM,eAAe,GAAG,EAAE,GAAG,EAAE,GAAG,MAAM,CAAC;AACzC,MAAM,OAAO,GAAG,CAAC,GAAG,MAAM,CAAC;AAgB3B,MAAM,UAAU,mBAAmB,CAAC,EAAU;IAC5C,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,eAAe,EAAE,IAAI,CAAC,GAAG,CAAC,eAAe,EAAE,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC;IACjH,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,GAAG,OAAO,CAAC,GAAG,OAAO,CAAC;AACjD,CAAC;AAED,MAAM,OAAO,oBAAoB;IACF,EAAE;IAA/B,YAA6B,EAA4B;kBAA5B,EAAE;IAA6B,CAAC;IAE7D,yDAAyD;IACzD,KAAK,CAAC,UAAU,CAAC,MAAc,EAAE,KAAK,GAAG,EAAE;QACzC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,EAAE;aACvB,UAAU,CAAC,oBAAoB,CAAC;aAChC,SAAS,EAAE;aACX,KAAK,CAAC,QAAQ,EAAE,GAAG,EAAE,MAAM,CAAC;aAC5B,OAAO,CAAC,WAAW,EAAE,MAAM,CAAC;aAC5B,KAAK,CAAC,KAAK,CAAC;aACZ,OAAO,EAAE,CAAC;QAEb,OAAO,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IAC1B,CAAC;IAED;;;;;;;;;;;;;;;;OAgBG;IACH,KAAK,CAAC,YAAY,CAAC,MAAc,EAAE,WAAW,GAAG,EAAE,EAAE,UAAU,GAAG,eAAe;QAC/E,MAAM,QAAQ,GAAG,mBAAmB,CAAC,UAAU,CAAC,CAAC;QACjD,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC;QACnD,MAAM,WAAW,GAAG,KAAK,GAAG,QAAQ,CAAC;QACrC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,WAAW,GAAG,GAAG,GAAG,WAAW,CAAC;QACtC,MAAM,MAAM,GAAG,IAAI,IAAI,CAAC,WAAW,CAAC,CAAC,WAAW,EAAE,CAAC;QAEnD,wEAAwE;QACxE,uEAAuE;QACvE,uEAAuE;QACvE,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,GAAG,CAAoB;;;;;;;;;;;;;wDAaM,WAAW,OAAO,QAAQ;;;;;8DAKpB,aAAa;;sEAEL,WAAW;;;;2BAItD,MAAM;+BACF,MAAM;;;KAGhC,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAEnB,OAAO,eAAe,CAAC,IAAI,EAAE,WAAW,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC;IAC7D,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,aAAa,CAAC,MAAc;QAChC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,EAAE;aACzB,UAAU,CAAC,oBAAoB,CAAC;aAChC,KAAK,CAAC,QAAQ,EAAE,GAAG,EAAE,MAAM,CAAC;aAC5B,gBAAgB,EAAE,CAAC;QACtB,OAAO,MAAM,CAAC,MAAM,CAAC,cAAc,IAAI,CAAC,CAAC,CAAC;IAC5C,CAAC;CACF;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,eAAe,CAC7B,IAAmC,EACnC,WAAmB,EACnB,QAAgB,EAChB,KAAa;IAEb,MAAM,OAAO,GAAmB,EAAE,CAAC;IACnC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,EAAE,CAAC,EAAE,EAAE,CAAC;QAC/B,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,IAAI,IAAI,CAAC,WAAW,GAAG,CAAC,GAAG,QAAQ,CAAC,CAAC,WAAW,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC,CAAC;IAC7G,CAAC;IAED,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC5B,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,GAAG,GAAG,CAAC,IAAI,GAAG,IAAI,KAAK;YAAE,SAAS;QAChE,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAClC,IAAI,MAAM,IAAI,CAAC;YAAE,SAAS;QAE1B,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAE,CAAC;QAC7B,MAAM,CAAC,MAAM,GAAG,MAAM,CAAC;QACvB,MAAM,CAAC,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,MAAM,CAAC;QAE3C,uEAAuE;QACvE,qEAAqE;QACrE,uEAAuE;QACvE,yEAAyE;QACzE,aAAa;QACb,MAAM,QAAQ,GAAG,MAAM,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;QAC3C,MAAM,CAAC,QAAQ,GAAG,QAAQ,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACrE,IAAI,QAAQ,KAAK,CAAC,EAAE,CAAC;YACnB,+DAA+D;YAC/D,uEAAuE;YACvE,oBAAoB;YACpB,qEAAqE;YACrE,oDAAoD;YACpD,MAAM,CAAC,kBAAkB;gBACvB,MAAM,CAAC,GAAG,CAAC,WAAW,CAAC,GAAG,CAAC;oBACzB,CAAC,CAAC,QAAQ;oBACV,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,WAAW,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,gBAAgB,CAAC;wBACtD,CAAC,CAAC,QAAQ;wBACV,CAAC,CAAC,aAAa,CAAC;QACxB,CAAC;IACH,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,MAAM,CAAC,GAAQ;IACtB,OAAO;QACL,MAAM,EAAE,GAAG,CAAC,MAAM;QAClB,SAAS,EAAE,IAAI,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,WAAW,EAAE;QAChD,eAAe,EAAE,MAAM,CAAC,GAAG,CAAC,eAAe,CAAC;QAC5C,aAAa,EAAE,CAAC,CAAC,GAAG,CAAC,aAAa;QAClC,aAAa,EAAE,GAAG,CAAC,aAAa,IAAI,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,IAAI;QAC3E,SAAS,EAAE,GAAG,CAAC,SAAS,IAAI,IAAI;QAChC,YAAY,EAAE,CAAC,CAAC,GAAG,CAAC,YAAY;QAChC,YAAY,EAAE,GAAG,CAAC,YAAY,IAAI,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,IAAI;QACxE,QAAQ,EAAE,GAAG,CAAC,QAAQ,IAAI,IAAI;QAC9B,iBAAiB,EAAE,GAAG,CAAC,iBAAiB,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,iBAAiB;QACjF,eAAe,EAAE,GAAG,CAAC,eAAe,IAAI,IAAI;QAC5C,WAAW,EAAE,GAAG,CAAC,WAAW,IAAI,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,IAAI;QACrE,cAAc,EAAE,GAAG,CAAC,cAAc,IAAI,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,IAAI;QAC9E,YAAY,EAAE,GAAG,CAAC,YAAY,IAAI,IAAI;QACtC,aAAa,EAAE,GAAG,CAAC,aAAa,IAAI,IAAI;QACxC,EAAE,EAAE,OAAO,GAAG,CAAC,EAAE,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,IAAI,IAAI;KACrE,CAAC;AACJ,CAAC"}

package/dist/services/node-host-key.d.ts

@@ -0,0 +1,9 @@
+import type { DaemonStateStore } from '../daemon/daemon-state-store.service.js';
+import type { INode } from '../shared/dto/nodes.js';
+type SshNode = Pick<INode, 'id' | 'host' | 'sshPort' | 'sshUser'>;
+export declare function nodeSshIdentity(node: Omit<SshNode, 'id'>): string;
+export declare const isSshHostFingerprint: (value: unknown) => value is string;
+export declare function nodeHostPinKey(id: string): string;
+export declare function nodeHostFingerprint(store: Pick<DaemonStateStore, 'kvGetSync'>, node: SshNode): string | null;
+export {};
+//# sourceMappingURL=node-host-key.d.ts.map

package/dist/services/node-host-key.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"node-host-key.d.ts","sourceRoot":"","sources":["../../src/services/node-host-key.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,yCAAyC,CAAC;AAChF,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,wBAAwB,CAAC;AAEpD,KAAK,OAAO,GAAG,IAAI,CAAC,KAAK,EAAE,IAAI,GAAG,MAAM,GAAG,SAAS,GAAG,SAAS,CAAC,CAAC;AAGlE,wBAAgB,eAAe,CAAC,IAAI,EAAE,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,GAAG,MAAM,CAEjE;AAED,eAAO,MAAM,oBAAoB,UAAW,OAAO,KAAG,KAAK,IAAI,MACQ,CAAC;AAGxE,wBAAgB,cAAc,CAAC,EAAE,EAAE,MAAM,GAAG,MAAM,CAEjD;AAED,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,IAAI,CAAC,gBAAgB,EAAE,WAAW,CAAC,EAAE,IAAI,EAAE,OAAO,GAAG,MAAM,GAAG,IAAI,CAM5G"}

package/dist/services/node-host-key.js

@@ -0,0 +1,17 @@
+export function nodeSshIdentity(node) {
+    return JSON.stringify([node.host, node.sshPort, node.sshUser]);
+}
+export const isSshHostFingerprint = (value) => typeof value === 'string' && /^SHA256:[A-Za-z0-9+/]{43}$/.test(value);
+// Keep the existing KV namespace so previous approvals apply to the exact same endpoint.
+export function nodeHostPinKey(id) {
+    return `terminal:host-key:${id}`;
+}
+export function nodeHostFingerprint(store, node) {
+    const pin = store.kvGetSync(nodeHostPinKey(node.id), { strict: true });
+    if (pin == null)
+        return null;
+    if (typeof pin.target !== 'string' || !isSshHostFingerprint(pin.fingerprint))
+        throw new Error('Invalid stored SSH host key approval');
+    return pin.target === nodeSshIdentity(node) ? pin.fingerprint : null;
+}
+//# sourceMappingURL=node-host-key.js.map

package/dist/services/node-host-key.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"node-host-key.js","sourceRoot":"","sources":["../../src/services/node-host-key.ts"],"names":[],"mappings":"AAMA,MAAM,UAAU,eAAe,CAAC,IAAyB;IACvD,OAAO,IAAI,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;AACjE,CAAC;AAED,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,KAAc,EAAmB,EAAE,CACtE,OAAO,KAAK,KAAK,QAAQ,IAAI,4BAA4B,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AAExE,yFAAyF;AACzF,MAAM,UAAU,cAAc,CAAC,EAAU;IACvC,OAAO,qBAAqB,EAAE,EAAE,CAAC;AACnC,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,KAA0C,EAAE,IAAa;IAC3F,MAAM,GAAG,GAAG,KAAK,CAAC,SAAS,CAAU,cAAc,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;IAChF,IAAI,GAAG,IAAI,IAAI;QAAE,OAAO,IAAI,CAAC;IAC7B,IAAI,OAAO,GAAG,CAAC,MAAM,KAAK,QAAQ,IAAI,CAAC,oBAAoB,CAAC,GAAG,CAAC,WAAW,CAAC;QAC1E,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;IAC1D,OAAO,GAAG,CAAC,MAAM,KAAK,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC;AACvE,CAAC"}

package/dist/services/node-manager.rpc-service.d.ts

@@ -19,10 +19,14 @@
  * costs is that call, and no more — see `callWorker`.
  */
 import type { NodeManagerService, AddNodeInput, UpdateNodeInput, INodeWithStatus, INodeStatus, SshKeyInfo } from './node-manager.service.js';
+import type { KernelRolloutService } from './kernel-rollout.service.js';
+import type { KernelRollout } from '../shared/dto/nodes.js';
+import type { AuthService } from './auth.service.js';
 import type { NodeCheckConfig } from './remote-ops.service.js';
 import type { FleetHistoryConfig, IMeshNodeStatus, INodeIndicators, INodeSyncStatus, INodeRelayStats, INodeClusterState, INodeDaemonAnswer, INodeUpgradePlan, INodeRolloutStart } from '../shared/dto/nodes.js';
+import type { SystemSnapshot } from '../shared/dto/system-info.js';
 import type { DaemonStatusDto, AggregatedHealthDto, AggregatedMetricsDto } from '../config/types.js';
-import type { ISyncStatus } from '../shared/dto/project.js';
+import type { INodeReconciliationRequest, INodeReconciliationResult } from '../shared/dto/nodes.js';
 import type { INodeHealthSummary } from '../workers/types.js';
 import type { NodeHealthRepository, HealthCheckRow, UptimeBucket } from './node-health.repository.js';
 /** Interface for the health worker proxy methods we call */
@@ -35,18 +39,22 @@ export declare class NodeManagerRpcService implements IOmnitronNodesService {
     private readonly nodeManager;
     /** The audit trail, when this daemon has one — see `ProjectRpcService`. */
     private readonly audit?;
+    private readonly hostSnapshot?;
+    private readonly auth?;
     private healthWorkerProxy;
     private healthRepo;
     private remoteDeployer;
+    private kernelRollouts?;
     private upgrades;
     private slaveConnector;
     private titanHealth;
     private syncService;
     private telemetryRelay;
-    private leaderElection;
+    private clusterReader;
+    private localDaemon;
     constructor(nodeManager: NodeManagerService, 
     /** The audit trail, when this daemon has one — see `ProjectRpcService`. */
-    audit?: import('./audit.service.js').AuditService | undefined);
+    audit?: import('./audit.service.js').AuditService | undefined, hostSnapshot?: (() => Promise<SystemSnapshot>) | undefined, auth?: Pick<AuthService, 'validateSession'> | undefined);
     /** Set the health worker proxy after the worker is spawned */
     setHealthWorkerProxy(proxy: IHealthWorkerProxy | null): void;
     /** Whether fleet checks are currently being served by the worker. */
@@ -193,6 +201,26 @@ export declare class NodeManagerRpcService implements IOmnitronNodesService {
         because: string;
     }>;
     /** Wired by the daemon at startup, on a master. */
+    setKernelRolloutService(service: KernelRolloutService): void;
+    private kernel;
+    private revalidateKernelPrincipal;
+    private authorizeKernel;
+    listKernelBuilds(): Promise<import('../shared/dto/kernel-catalog.js').KernelCatalogEntry[]>;
+    planKernelRollout(data: {
+        commit: string;
+        nodeIds?: string[];
+        requestId?: string;
+        stage?: boolean;
+    }): Promise<KernelRollout>;
+    startKernelRollout(data: {
+        id: string;
+    }): Promise<KernelRollout>;
+    getKernelRollout(data?: {
+        id?: string;
+    }): Promise<KernelRollout | null>;
+    reconcileKernelRollout(data: {
+        id: string;
+    }): Promise<KernelRollout>;
     setUpgradeService(service: import('./node-upgrade.service.js').NodeUpgradeService | null): void;
     /**
      * The deployer, made once and kept.
@@ -227,18 +255,14 @@ export declare class NodeManagerRpcService implements IOmnitronNodesService {
             indicators: Record<string, unknown>;
         }>;
     } | null): void;
+    /** Use the same daemon readers locally as the mesh exposes remotely. */
+    setLocalDaemon(service: typeof this.localDaemon): void;
     /** This daemon's own replication state, for the local node. */
-    setSyncService(service: {
-        getStatus(): Promise<ISyncStatus>;
-    } | null): void;
+    setSyncService(service: NonNullable<NodeManagerRpcService['syncService']> | null): void;
     /** This daemon's own telemetry relay, for the local node. */
-    setTelemetryRelay(relay: {
-        stats(): unknown;
-    } | null): void;
+    setTelemetryRelay(relay: NonNullable<NodeManagerRpcService['telemetryRelay']> | null): void;
     /** This daemon's own election state, for the local node. */
-    setLeaderElection(election: {
-        getClusterState(): unknown;
-    } | null): void;
+    setClusterReader(reader: NonNullable<NodeManagerRpcService['clusterReader']>): void;
     /**
        * Ask a service ON the node, wherever the node is.
        *
@@ -277,6 +301,10 @@ export declare class NodeManagerRpcService implements IOmnitronNodesService {
     getNodeIndicators(data: {
         nodeId: string;
     }): Promise<INodeIndicators>;
+    /** Fixed read-only mesh operation. A failed remote read must retain its target. */
+    getNodeSystemSnapshot(data: {
+        nodeId: string;
+    }): Promise<SystemSnapshot>;
     /**
      * What the node's own daemon reports, asked over the mesh.
      *
@@ -322,34 +350,11 @@ export declare class NodeManagerRpcService implements IOmnitronNodesService {
     getNodeSyncStatus(data: {
         nodeId: string;
     }): Promise<INodeSyncStatus>;
-    /**
-       * The node's telemetry relay: what it buffered, sent, failed and DROPPED.
-       *
-       * `getNodeSyncStatus` answers whether the log/metric replication is moving.
-       * This answers the other pipe — the telemetry relay — and it carries the one
-       * counter in the fleet that reports LOSS. `totalDropped` is what the buffer
-       * threw away because it was full, and a number that only ever goes up while
-       * nobody looks is how a gap in the metrics is discovered months later from
-       * the chart rather than from the daemon that made it.
-       *
-       * `OmnitronTelemetry.getRelayStats` has answered this since it was written —
-       * the file's own header says "Webapp → Leader telemetry stats (relay
-       * health)" — and the console has never called it.
-       */
+    /** Read relay configuration and measurements; fleet receipts are reported by Sync. */
     getNodeRelayStats(data: {
         nodeId: string;
     }): Promise<INodeRelayStats>;
-    /**
-       * Which node each node thinks is the leader.
-       *
-       * The fourth reader through `askNode`, and the one that is only meaningful
-       * ACROSS nodes: a single node's answer is unremarkable, and two nodes naming
-       * different leaders, or sitting in different terms, is a split brain — the
-       * state in which every node is individually healthy and the fleet is not.
-       * Nothing in the console could see it, because `OmnitronCluster` is one of
-       * the services its client does not know, and `getClusterState`'s own
-       * docblock says it is "used by CLI and webapp dashboard".
-       */
+    /** Read the same participation report locally and over the mesh. */
     getNodeClusterState(data: {
         nodeId: string;
     }): Promise<INodeClusterState>;
@@ -368,6 +373,8 @@ export declare class NodeManagerRpcService implements IOmnitronNodesService {
      * master and is worth knowing before someone debugs the latency.
      */
     getMeshStatus(): Promise<IMeshNodeStatus[]>;
+    /** Inspection is the default; restore and source acknowledgement require an administrator. */
+    reconcileNodeMetrics(data: INodeReconciliationRequest): Promise<INodeReconciliationResult>;
     listSshKeys(): SshKeyInfo[];
     getCheckConfig(): NodeCheckConfig;
     /** How much history exists, and how wide one uptime-bar segment is. */