@optimystic/db-p2p 0.28.0 → 0.29.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/src/cluster/block-transfer-service.d.ts +0 -10
- package/dist/src/cluster/block-transfer-service.d.ts.map +1 -1
- package/dist/src/cluster/block-transfer-service.js +4 -2
- package/dist/src/cluster/block-transfer-service.js.map +1 -1
- package/dist/src/cluster/cluster-policy.d.ts +101 -18
- package/dist/src/cluster/cluster-policy.d.ts.map +1 -1
- package/dist/src/cluster/cluster-policy.js +153 -30
- package/dist/src/cluster/cluster-policy.js.map +1 -1
- package/dist/src/cluster/quorum-restore.d.ts +4 -2
- package/dist/src/cluster/quorum-restore.d.ts.map +1 -1
- package/dist/src/cluster/quorum-restore.js +4 -2
- package/dist/src/cluster/quorum-restore.js.map +1 -1
- package/dist/src/cluster/service.d.ts +12 -9
- package/dist/src/cluster/service.d.ts.map +1 -1
- package/dist/src/cluster/service.js +6 -6
- package/dist/src/cluster/service.js.map +1 -1
- package/dist/src/dispute/service.d.ts +1 -4
- package/dist/src/dispute/service.d.ts.map +1 -1
- package/dist/src/dispute/service.js +2 -1
- package/dist/src/dispute/service.js.map +1 -1
- package/dist/src/libp2p-key-network.d.ts +8 -2
- package/dist/src/libp2p-key-network.d.ts.map +1 -1
- package/dist/src/libp2p-key-network.js +8 -2
- package/dist/src/libp2p-key-network.js.map +1 -1
- package/dist/src/libp2p-node-base.d.ts.map +1 -1
- package/dist/src/libp2p-node-base.js +22 -19
- package/dist/src/libp2p-node-base.js.map +1 -1
- package/dist/src/logger.d.ts +28 -1
- package/dist/src/logger.d.ts.map +1 -1
- package/dist/src/logger.js +143 -1
- package/dist/src/logger.js.map +1 -1
- package/dist/src/network/network-manager-service.d.ts +1 -4
- package/dist/src/network/network-manager-service.d.ts.map +1 -1
- package/dist/src/network/network-manager-service.js +2 -1
- package/dist/src/network/network-manager-service.js.map +1 -1
- package/dist/src/repo/coordinator-repo.d.ts +183 -13
- package/dist/src/repo/coordinator-repo.d.ts.map +1 -1
- package/dist/src/repo/coordinator-repo.js +686 -107
- package/dist/src/repo/coordinator-repo.js.map +1 -1
- package/dist/src/repo/service.d.ts +9 -6
- package/dist/src/repo/service.d.ts.map +1 -1
- package/dist/src/repo/service.js +4 -5
- package/dist/src/repo/service.js.map +1 -1
- package/dist/src/sync/service.d.ts +1 -2
- package/dist/src/sync/service.d.ts.map +1 -1
- package/dist/src/sync/service.js +2 -1
- package/dist/src/sync/service.js.map +1 -1
- package/dist/src/testing/mesh-harness.d.ts +7 -1
- package/dist/src/testing/mesh-harness.d.ts.map +1 -1
- package/dist/src/testing/mesh-harness.js +2 -1
- package/dist/src/testing/mesh-harness.js.map +1 -1
- package/package.json +2 -2
- package/readme.md +19 -0
- package/src/cluster/block-transfer-service.ts +4 -8
- package/src/cluster/cluster-policy.ts +196 -36
- package/src/cluster/quorum-restore.ts +4 -2
- package/src/cluster/service.ts +14 -9
- package/src/dispute/service.ts +3 -3
- package/src/libp2p-key-network.ts +8 -2
- package/src/libp2p-node-base.ts +22 -19
- package/src/logger.ts +196 -2
- package/src/network/network-manager-service.ts +414 -414
- package/src/protocol-client.ts +196 -196
- package/src/repo/coordinator-repo.ts +833 -122
- package/src/repo/service.ts +12 -9
- package/src/sync/service.ts +3 -5
- package/src/testing/mesh-harness.ts +8 -1
|
@@ -164,16 +164,6 @@ export interface BlockTransferServiceComponents {
|
|
|
164
164
|
* its thresholds with.
|
|
165
165
|
*/
|
|
166
166
|
superMajorityThreshold: number;
|
|
167
|
-
/**
|
|
168
|
-
* Optional libp2p component logger. Supplied by the node factory so authorization denials
|
|
169
|
-
* land on the same `logger.forComponent(...).error` sink as the repo/cluster/sync services;
|
|
170
|
-
* without it they fall back to this module's `debug` logger.
|
|
171
|
-
*/
|
|
172
|
-
logger?: {
|
|
173
|
-
forComponent: (name: string) => {
|
|
174
|
-
error: (message: string, ...args: unknown[]) => void;
|
|
175
|
-
};
|
|
176
|
-
};
|
|
177
167
|
}
|
|
178
168
|
/**
|
|
179
169
|
* Libp2p service that handles incoming block transfer requests.
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"block-transfer-service.d.ts","sourceRoot":"","sources":["../../../src/cluster/block-transfer-service.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAc,SAAS,EAAU,MAAM,mBAAmB,CAAC;AACvE,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,YAAY,EAAE,QAAQ,EAAE,SAAS,EAAE,cAAc,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAC;AAK7H,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAGvD,OAAO,EAAqE,KAAK,8BAA8B,EAAE,MAAM,6BAA6B,CAAC;AAErJ,OAAO,KAAK,EAAE,gBAAgB,EAAmB,MAAM,mBAAmB,CAAC;AAC3E,OAAO,EAAiB,KAAK,kBAAkB,EAAE,MAAM,6BAA6B,CAAC;AASrF,eAAO,MAAM,0BAA0B,GAAI,iBAAgB,MAAW,KAAG,MACJ,CAAC;AAEtE,iCAAiC;AACjC,MAAM,WAAW,oBAAoB;IACpC,IAAI,EAAE,MAAM,GAAG,MAAM,CAAC;IACtB,kCAAkC;IAClC,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,0BAA0B;IAC1B,MAAM,EAAE,WAAW,GAAG,aAAa,GAAG,UAAU,CAAC;IACjD,uDAAuD;IACvD,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACnC;;;;;OAKG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,QAAQ,CAAA;KAAE,CAAC,CAAC;IAChE;;;;;;;;OAQG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC;CAC/C;AAED;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,wBAAgB,eAAe,CAC9B,OAAO,EAAE,OAAO,EAChB,MAAM,EAAE,IAAI,CAAC,cAAc,EAAE,OAAO,GAAG,cAAc,CAAC,GAAG,SAAS,GAChE,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,GAAG,SAAS,CAUvC;AAED;;;;;GAKG;AACH,MAAM,MAAM,iBAAiB,GAAG;IAC/B,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;IACtC,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC;CAC/C,CAAC;AAEF;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,wBAAsB,wBAAwB,CAC7C,IAAI,EAAE,kBAAkB,EACxB,OAAO,EAAE,OAAO,EAChB,MAAM,EAAE,IAAI,CAAC,cAAc,EAAE,OAAO,GAAG,cAAc,CAAC,GAAG,SAAS,GAChE,OAAO,CAAC,iBAAiB,CAAC,CAY5B;AAED,+BAA+B;AAC/B,MAAM,WAAW,qBAAqB;IACrC,qEAAqE;IACrE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC/B,mDAAmD;IACnD,OAAO,EAAE,MAAM,EAAE,CAAC;CAClB;AAID;;;;;GAKG;AACH,MAAM,WAAW,kBAAmB,SAAQ,KAAK;IAChD;;;;;;;;;;OAUG;IACH,mBAAmB,CAAC,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,SAAS,EAAE,aAAa,CAAC,EAAE,gBAAgB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC1H;AAED,MAAM,WAAW,wBAAyB,SAAQ,8BAA8B;IAC/E,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB;;;;;;;;;;;;;;;;;;OAkBG;IACH,sBAAsB,CAAC,EAAE,OAAO,CAAC;CACjC;AAED,MAAM,WAAW,8BAA8B;IAC9C,SAAS,EAAE;QAAE,MAAM,EAAE,CAAC,GAAG,IAAI,EAAE,GAAG,EAAE,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;QAAC,QAAQ,EAAE,CAAC,GAAG,IAAI,EAAE,GAAG,EAAE,KAAK,OAAO,CAAC,IAAI,CAAC,CAAA;KAAE,CAAC;IACtG,IAAI,EAAE,kBAAkB,CAAC;IACzB;;;;;;;;;;;;OAYG;IACH,sBAAsB,EAAE,MAAM,CAAC;
|
|
1
|
+
{"version":3,"file":"block-transfer-service.d.ts","sourceRoot":"","sources":["../../../src/cluster/block-transfer-service.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAc,SAAS,EAAU,MAAM,mBAAmB,CAAC;AACvE,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,YAAY,EAAE,QAAQ,EAAE,SAAS,EAAE,cAAc,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAC;AAK7H,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAGvD,OAAO,EAAqE,KAAK,8BAA8B,EAAE,MAAM,6BAA6B,CAAC;AAErJ,OAAO,KAAK,EAAE,gBAAgB,EAAmB,MAAM,mBAAmB,CAAC;AAC3E,OAAO,EAAiB,KAAK,kBAAkB,EAAE,MAAM,6BAA6B,CAAC;AASrF,eAAO,MAAM,0BAA0B,GAAI,iBAAgB,MAAW,KAAG,MACJ,CAAC;AAEtE,iCAAiC;AACjC,MAAM,WAAW,oBAAoB;IACpC,IAAI,EAAE,MAAM,GAAG,MAAM,CAAC;IACtB,kCAAkC;IAClC,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,0BAA0B;IAC1B,MAAM,EAAE,WAAW,GAAG,aAAa,GAAG,UAAU,CAAC;IACjD,uDAAuD;IACvD,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACnC;;;;;OAKG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,QAAQ,CAAA;KAAE,CAAC,CAAC;IAChE;;;;;;;;OAQG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC;CAC/C;AAED;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,wBAAgB,eAAe,CAC9B,OAAO,EAAE,OAAO,EAChB,MAAM,EAAE,IAAI,CAAC,cAAc,EAAE,OAAO,GAAG,cAAc,CAAC,GAAG,SAAS,GAChE,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,GAAG,SAAS,CAUvC;AAED;;;;;GAKG;AACH,MAAM,MAAM,iBAAiB,GAAG;IAC/B,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;IACtC,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC;CAC/C,CAAC;AAEF;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,wBAAsB,wBAAwB,CAC7C,IAAI,EAAE,kBAAkB,EACxB,OAAO,EAAE,OAAO,EAChB,MAAM,EAAE,IAAI,CAAC,cAAc,EAAE,OAAO,GAAG,cAAc,CAAC,GAAG,SAAS,GAChE,OAAO,CAAC,iBAAiB,CAAC,CAY5B;AAED,+BAA+B;AAC/B,MAAM,WAAW,qBAAqB;IACrC,qEAAqE;IACrE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC/B,mDAAmD;IACnD,OAAO,EAAE,MAAM,EAAE,CAAC;CAClB;AAID;;;;;GAKG;AACH,MAAM,WAAW,kBAAmB,SAAQ,KAAK;IAChD;;;;;;;;;;OAUG;IACH,mBAAmB,CAAC,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,SAAS,EAAE,aAAa,CAAC,EAAE,gBAAgB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC1H;AAED,MAAM,WAAW,wBAAyB,SAAQ,8BAA8B;IAC/E,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB;;;;;;;;;;;;;;;;;;OAkBG;IACH,sBAAsB,CAAC,EAAE,OAAO,CAAC;CACjC;AAED,MAAM,WAAW,8BAA8B;IAC9C,SAAS,EAAE;QAAE,MAAM,EAAE,CAAC,GAAG,IAAI,EAAE,GAAG,EAAE,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;QAAC,QAAQ,EAAE,CAAC,GAAG,IAAI,EAAE,GAAG,EAAE,KAAK,OAAO,CAAC,IAAI,CAAC,CAAA;KAAE,CAAC;IACtG,IAAI,EAAE,kBAAkB,CAAC;IACzB;;;;;;;;;;;;OAYG;IACH,sBAAsB,EAAE,MAAM,CAAC;CAC/B;AAED;;;;;GAKG;AACH,qBAAa,oBAAqB,YAAW,SAAS;IACrD,OAAO,CAAC,OAAO,CAAS;IACxB,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAS;IAClC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAqB;IAC1C,OAAO,CAAC,QAAQ,CAAC,SAAS,CAA8C;IACxE,2FAA2F;IAC3F,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAyC;IACvE,gIAAgI;IAChI,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAkB;IAClD,mEAAmE;IACnE,OAAO,CAAC,QAAQ,CAAC,sBAAsB,CAAU;gBAGhD,UAAU,EAAE,8BAA8B,EAC1C,IAAI,GAAE,wBAA6B;IAc9B,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAgBtB,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;YAOb,aAAa;YA8Cb,UAAU;IAkBxB;;;;;;;;;;;;;;;OAeG;YACW,UAAU;CAgGxB;AAED,sFAAsF;AACtF,eAAO,MAAM,oBAAoB,GAAI,OAAM,wBAA6B,MACtE,YAAY,8BAA8B,yBAA+C,CAAC;AAI5F;;GAEG;AACH,qBAAa,mBAAoB,SAAQ,cAAc;IACtD,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAS;gBAGjC,MAAM,EAAE,MAAM,EACd,WAAW,EAAE,YAAY,EACzB,cAAc,GAAE,MAAW;IAM5B;;;;;;;OAOG;IACG,UAAU,CACf,QAAQ,EAAE,MAAM,EAAE,EAClB,MAAM,GAAE,oBAAoB,CAAC,QAAQ,CAAe,EACpD,OAAO,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,WAAW,CAAC;QAAC,aAAa,CAAC,EAAE,MAAM,CAAC;QAAC,iBAAiB,CAAC,EAAE,MAAM,CAAA;KAAE,GACpF,OAAO,CAAC,qBAAqB,CAAC;IAKjC;;;;;;;;;;;;;;OAcG;IACG,UAAU,CACf,QAAQ,EAAE,MAAM,EAAE,EAClB,gBAAgB,EAAE,UAAU,EAAE,EAC9B,MAAM,GAAE,oBAAoB,CAAC,QAAQ,CAAe,EACpD,aAAa,CAAC,EAAE,iBAAiB,EACjC,OAAO,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,WAAW,CAAC;QAAC,aAAa,CAAC,EAAE,MAAM,CAAC;QAAC,iBAAiB,CAAC,EAAE,MAAM,CAAA;KAAE,GACpF,OAAO,CAAC,qBAAqB,CAAC;CAYjC"}
|
|
@@ -108,8 +108,10 @@ export class BlockTransferService {
|
|
|
108
108
|
this.registrar = components.registrar;
|
|
109
109
|
this.proofThresholds = proofThresholds(components.superMajorityThreshold);
|
|
110
110
|
this.requirePushCertificate = init.requirePushCertificate ?? true;
|
|
111
|
-
|
|
112
|
-
|
|
111
|
+
// Denials are errors, so they go to this module's own `:error` child channel rather than its
|
|
112
|
+
// main one — visible under `optimystic:db-p2p:block-transfer-service:*`, not under an exact
|
|
113
|
+
// match on `optimystic:db-p2p:block-transfer-service` alone.
|
|
114
|
+
this.authorization = createInboundStreamAuthorization(init, this.protocol, (msg, ...args) => log.error(msg, ...args));
|
|
113
115
|
}
|
|
114
116
|
async start() {
|
|
115
117
|
if (this.running)
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"block-transfer-service.js","sourceRoot":"","sources":["../../../src/cluster/block-transfer-service.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,IAAI,EAAE,MAAM,SAAS,CAAC;AAC/B,OAAO,KAAK,EAAE,MAAM,oBAAoB,CAAC;AACzC,OAAO,EAAE,UAAU,IAAI,YAAY,EAAE,MAAM,yBAAyB,CAAC;AACrE,OAAO,EAAE,QAAQ,IAAI,UAAU,EAAE,MAAM,uBAAuB,CAAC;AAC/D,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACvD,OAAO,EAAE,uBAAuB,EAAE,MAAM,uBAAuB,CAAC;AAChE,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAC5C,OAAO,EAAE,gCAAgC,EAAwE,MAAM,6BAA6B,CAAC;AACrJ,OAAO,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAExE,OAAO,EAAE,aAAa,EAA2B,MAAM,6BAA6B,CAAC;AACrF,OAAO,EAAE,uBAAuB,EAAE,MAAM,yCAAyC,CAAC;AAElF,MAAM,GAAG,GAAG,YAAY,CAAC,wBAAwB,CAAC,CAAC;AAEnD,oBAAoB;AACpB,MAAM,qBAAqB,GAAG,yBAAyB,CAAC;AACxD,MAAM,sBAAsB,GAAG,OAAO,CAAC;AAEvC,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC,iBAAyB,EAAE,EAAU,EAAE,CACjF,GAAG,cAAc,GAAG,qBAAqB,GAAG,sBAAsB,EAAE,CAAC;AA8BtE;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,MAAM,UAAU,eAAe,CAC9B,OAAgB,EAChB,MAAkE;IAElE,MAAM,MAAM,GAAG,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC;IACrC,IAAI,CAAC,MAAM;QAAE,OAAO,SAAS,CAAC;IAC9B,MAAM,YAAY,GAAG,MAAM,EAAE,YAAY,CAAC;IAC1C,IAAI,YAAY,KAAK,SAAS,IAAI,YAAY,CAAC,GAAG,KAAK,MAAM,CAAC,GAAG,EAAE,CAAC;QACnE,GAAG,CAAC,2FAA2F,EAC9F,OAAO,EAAE,YAAY,CAAC,GAAG,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC;QACxC,OAAO,SAAS,CAAC;IAClB,CAAC;IACD,OAAO,EAAE,CAAC,OAAO,CAAC,EAAE,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,EAAE,CAAC;AACtE,CAAC;AAaD;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAC7C,IAAwB,EACxB,OAAgB,EAChB,MAAkE;IAElE,MAAM,SAAS,GAAG,eAAe,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IACnD,IAAI,CAAC,SAAS,EAAE,CAAC;QAChB,OAAO,EAAE,CAAC;IACX,CAAC;IACD,MAAM,MAAM,GAAG,MAAO,CAAC,KAAM,CAAC,MAAO,CAAC;IACtC,MAAM,KAAK,GAAG,MAAM,aAAa,CAAC,IAAI,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;IACzD,IAAI,CAAC,KAAK,EAAE,CAAC;QACZ,GAAG,CAAC,2DAA2D,EAAE,OAAO,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC;QACtF,OAAO,EAAE,SAAS,EAAE,CAAC;IACtB,CAAC;IACD,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,EAAE,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,EAAE,CAAC;AACzD,CAAC;AAkFD;;;;;GAKG;AACH,MAAM,OAAO,oBAAoB;IACxB,OAAO,GAAG,KAAK,CAAC;IACP,QAAQ,CAAS;IACjB,IAAI,CAAqB;IACzB,SAAS,CAA8C;IACxE,2FAA2F;IAC1E,aAAa,CAAyC;IACvE,gIAAgI;IAC/G,eAAe,CAAkB;IAClD,mEAAmE;IAClD,sBAAsB,CAAU;IAEjD,YACC,UAA0C,EAC1C,OAAiC,EAAE;QAEnC,IAAI,CAAC,QAAQ,GAAG,0BAA0B,CAAC,IAAI,CAAC,cAAc,IAAI,EAAE,CAAC,CAAC;QACtE,IAAI,CAAC,IAAI,GAAG,UAAU,CAAC,IAAI,CAAC;QAC5B,IAAI,CAAC,SAAS,GAAG,UAAU,CAAC,SAAS,CAAC;QACtC,IAAI,CAAC,eAAe,GAAG,eAAe,CAAC,UAAU,CAAC,sBAAsB,CAAC,CAAC;QAC1E,IAAI,CAAC,sBAAsB,GAAG,IAAI,CAAC,sBAAsB,IAAI,IAAI,CAAC;QAClE,MAAM,YAAY,GAAG,UAAU,CAAC,MAAM,EAAE,YAAY,CAAC,uBAAuB,CAAC,CAAC;QAC9E,IAAI,CAAC,aAAa,GAAG,gCAAgC,CAAC,IAAI,EAAE,IAAI,CAAC,QAAQ,EACxE,YAAY,CAAC,CAAC,CAAC,CAAC,GAAG,EAAE,GAAG,IAAI,EAAE,EAAE,CAAC,YAAY,CAAC,KAAK,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,EAAE,GAAG,IAAI,EAAE,EAAE,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC;IAC3G,CAAC;IAED,KAAK,CAAC,KAAK;QACV,IAAI,IAAI,CAAC,OAAO;YAAE,OAAO;QACzB,MAAM,uBAAuB,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,QAAQ,EAAE,KAAK,EAAE,IAAS,EAAE,UAAuB,EAAE,EAAE;YACzG,qFAAqF;YACrF,wFAAwF;YACxF,0FAA0F;YAC1F,uFAAuF;YACvF,wFAAwF;YACxF,4EAA4E;YAC5E,MAAM,MAAM,GAAG,IAAI,EAAE,MAAM,IAAI,IAAI,CAAC;YACpC,MAAM,IAAI,CAAC,aAAa,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;QAC9C,CAAC,CAAC,CAAC;QACH,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;QACpB,GAAG,CAAC,eAAe,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;IACrC,CAAC;IAED,KAAK,CAAC,IAAI;QACT,IAAI,CAAC,IAAI,CAAC,OAAO;YAAE,OAAO;QAC1B,MAAM,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC7C,IAAI,CAAC,OAAO,GAAG,KAAK,CAAC;QACrB,GAAG,CAAC,SAAS,CAAC,CAAC;IAChB,CAAC;IAEO,KAAK,CAAC,aAAa,CAAC,MAAc,EAAE,UAAuB;QAClE,MAAM,IAAI,GAAG,IAAI,CAAC;QAClB,IAAI,CAAC;YACJ,iFAAiF;YACjF,8DAA8D;YAC9D,IAAI,IAAI,CAAC,aAAa,IAAI,MAAM,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,MAAM,EAAE,UAAU,EAAE,UAAU,EAAE,QAAQ,EAAE,CAAC;gBAAE,OAAO;YAC5G,gFAAgF;YAChF,mFAAmF;YACnF,qFAAqF;YACrF,mFAAmF;YACnF,iFAAiF;YACjF,sFAAsF;YACtF,yBAAyB;YACzB,MAAM,SAAS,GAAG,IAAI,CACrB,MAAM,EACN,CAAC,MAAM,EAAE,EAAE,CAAC,EAAE,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,aAAa,EAAE,uBAAuB,EAAE,CAAC,EACzE,KAAK,SAAS,CAAC,EAAE,MAAM;gBACtB,IAAI,KAAK,EAAE,MAAM,GAAG,IAAI,MAAM,EAAE,CAAC;oBAChC,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE,MAAM,CAAC,CAAyB,CAAC;oBACvF,GAAG,CAAC,qCAAqC,EAAE,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;oBAClG,IAAI,QAA+B,CAAC;oBACpC,IAAI,CAAC;wBACJ,QAAQ,GAAG,OAAO,CAAC,IAAI,KAAK,MAAM;4BACjC,CAAC,CAAC,MAAM,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC;4BAChC,CAAC,CAAC,MAAM,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;oBACnC,CAAC;oBAAC,OAAO,KAAK,EAAE,CAAC;wBAChB,GAAG,CAAC,WAAW,EAAG,KAAe,CAAC,OAAO,CAAC,CAAC;wBAC3C,QAAQ,GAAG,EAAE,MAAM,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;oBACxC,CAAC;oBACD,GAAG,CAAC,+BAA+B,EAAE,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;oBACnG,MAAM,YAAY,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,CAAC;oBACrD,OAAO,CAAC,wCAAwC;gBACjD,CAAC;YACF,CAAC,EACD,CAAC,MAAM,EAAE,EAAE,CAAC,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAC7B,CAAC;YACF,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,SAAS,EAAE,CAAC;gBACrC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACpB,CAAC;YACD,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;QACtB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACd,GAAG,CAAC,WAAW,EAAG,GAAa,CAAC,OAAO,CAAC,CAAC;YACzC,IAAI,CAAC;gBAAC,MAAM,CAAC,KAAK,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;QAClG,CAAC;IACF,CAAC;IAEO,KAAK,CAAC,UAAU,CAAC,OAA6B;QACrD,MAAM,MAAM,GAA2B,EAAE,CAAC;QAC1C,MAAM,OAAO,GAAa,EAAE,CAAC;QAE7B,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC;QAEnE,KAAK,MAAM,OAAO,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;YACxC,MAAM,WAAW,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC;YACpC,IAAI,WAAW,EAAE,KAAK,EAAE,CAAC;gBACxB,MAAM,CAAC,OAAO,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;YACrF,CAAC;iBAAM,CAAC;gBACP,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YACvB,CAAC;QACF,CAAC;QAED,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;IAC5B,CAAC;IAED;;;;;;;;;;;;;;;OAeG;IACK,KAAK,CAAC,UAAU,CAAC,OAA6B;QACrD,MAAM,MAAM,GAA2B,EAAE,CAAC;QAC1C,MAAM,OAAO,GAAa,EAAE,CAAC;QAE7B,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC;YACxB,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,OAAO,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC;QAClD,CAAC;QAED,KAAK,MAAM,OAAO,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;YACxC,MAAM,IAAI,GAAG,OAAO,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;YACxC,IAAI,CAAC,IAAI,EAAE,CAAC;gBACX,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;gBACtB,SAAS;YACV,CAAC;YAED,kDAAkD;YAClD,IAAI,KAAa,CAAC;YAClB,IAAI,CAAC;gBACJ,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAW,CAAC;YAC5E,CAAC;YAAC,MAAM,CAAC;gBACR,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;gBACtB,SAAS;YACV,CAAC;YAED,8EAA8E;YAC9E,gFAAgF;YAChF,iFAAiF;YACjF,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAK,KAAgB,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;gBAC3F,GAAG,CAAC,wDAAwD,EAAE,OAAO,CAAC,CAAC;gBACvE,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;gBACtB,SAAS;YACV,CAAC;YAED,uFAAuF;YACvF,yDAAyD;YACzD,MAAM,MAAM,GAAG,OAAO,CAAC,SAAS,EAAE,CAAC,OAAO,CAAC,CAAC;YAC5C,MAAM,KAAK,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,CAAC;YAC7C,IAAI,aAA2C,CAAC;YAChD,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;gBACzB,IAAI,CAAC,MAAM,EAAE,CAAC;oBACb,gFAAgF;oBAChF,0EAA0E;oBAC1E,GAAG,CAAC,4DAA4D,EAAE,OAAO,CAAC,CAAC;oBAC3E,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;oBACtB,SAAS;gBACV,CAAC;gBACD,iFAAiF;gBACjF,wFAAwF;gBACxF,8EAA8E;gBAC9E,iFAAiF;gBACjF,kEAAkE;gBAClE,EAAE;gBACF,mFAAmF;gBACnF,uFAAuF;gBACvF,6DAA6D;gBAC7D,qFAAqF;gBACrF,iFAAiF;gBACjF,iCAAiC;gBACjC,EAAE;gBACF,kFAAkF;gBAClF,sFAAsF;gBACtF,qFAAqF;gBACrF,+EAA+E;gBAC/E,qFAAqF;gBACrF,+EAA+E;gBAC/E,0EAA0E;gBAC1E,MAAM,OAAO,GAAG,MAAM,cAAc,CACnC,KAAK,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,eAAe,CAAC,CAAC;gBAC9F,IAAI,CAAC,OAAO,CAAC,gBAAgB,EAAE,CAAC;oBAC/B,GAAG,CAAC,mDAAmD,EAAE,OAAO,EAAE,MAAM,CAAC,GAAG,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;oBAC/F,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;oBACtB,SAAS;gBACV,CAAC;gBACD,aAAa,GAAG,KAAK,CAAC;YACvB,CAAC;iBAAM,IAAI,IAAI,CAAC,sBAAsB,EAAE,CAAC;gBACxC,oFAAoF;gBACpF,kDAAkD;gBAClD,GAAG,CAAC,yDAAyD,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC;gBACrF,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;gBACtB,SAAS;YACV,CAAC;iBAAM,CAAC;gBACP,GAAG,CAAC,2EAA2E,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC;YACxG,CAAC;YAED,6EAA6E;YAC7E,IAAI,CAAC;gBACJ,MAAM,IAAI,CAAC,IAAI,CAAC,mBAAmB,CAAC,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,aAAa,CAAC,CAAC;gBAC3E,MAAM,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC;YACxB,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBAChB,GAAG,CAAC,8BAA8B,EAAE,OAAO,EAAG,KAAe,CAAC,OAAO,CAAC,CAAC;gBACvE,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YACvB,CAAC;QACF,CAAC;QAED,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;IAC5B,CAAC;CACD;AAED,sFAAsF;AACtF,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,OAAiC,EAAE,EAAE,EAAE,CAC3E,CAAC,UAA0C,EAAE,EAAE,CAAC,IAAI,oBAAoB,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;AAE5F,iBAAiB;AAEjB;;GAEG;AACH,MAAM,OAAO,mBAAoB,SAAQ,cAAc;IACrC,QAAQ,CAAS;IAElC,YACC,MAAc,EACd,WAAyB,EACzB,iBAAyB,EAAE;QAE3B,KAAK,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;QAC3B,IAAI,CAAC,QAAQ,GAAG,0BAA0B,CAAC,cAAc,CAAC,CAAC;IAC5D,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,UAAU,CACf,QAAkB,EAClB,SAAyC,WAAW,EACpD,OAAsF;QAEtF,MAAM,OAAO,GAAyB,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC;QACzE,OAAO,MAAM,IAAI,CAAC,cAAc,CAAwB,OAAO,EAAE,IAAI,CAAC,QAAQ,EAAE,EAAE,GAAG,OAAO,EAAE,aAAa,EAAE,uBAAuB,EAAE,CAAC,CAAC;IACzI,CAAC;IAED;;;;;;;;;;;;;;OAcG;IACH,KAAK,CAAC,UAAU,CACf,QAAkB,EAClB,gBAA8B,EAC9B,SAAyC,WAAW,EACpD,aAAiC,EACjC,OAAsF;QAEtF,MAAM,SAAS,GAA2B,EAAE,CAAC;QAC7C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YAC1C,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAE,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAE,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QAChF,CAAC;QACD,MAAM,OAAO,GAAyB;YACrC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAS;YACzC,GAAG,CAAC,aAAa,EAAE,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,aAAa,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC3E,GAAG,CAAC,aAAa,EAAE,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,aAAa,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACjF,CAAC;QACF,OAAO,MAAM,IAAI,CAAC,cAAc,CAAwB,OAAO,EAAE,IAAI,CAAC,QAAQ,EAAE,EAAE,GAAG,OAAO,EAAE,aAAa,EAAE,uBAAuB,EAAE,CAAC,CAAC;IACzI,CAAC;CACD"}
|
|
1
|
+
{"version":3,"file":"block-transfer-service.js","sourceRoot":"","sources":["../../../src/cluster/block-transfer-service.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,IAAI,EAAE,MAAM,SAAS,CAAC;AAC/B,OAAO,KAAK,EAAE,MAAM,oBAAoB,CAAC;AACzC,OAAO,EAAE,UAAU,IAAI,YAAY,EAAE,MAAM,yBAAyB,CAAC;AACrE,OAAO,EAAE,QAAQ,IAAI,UAAU,EAAE,MAAM,uBAAuB,CAAC;AAC/D,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACvD,OAAO,EAAE,uBAAuB,EAAE,MAAM,uBAAuB,CAAC;AAChE,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAC5C,OAAO,EAAE,gCAAgC,EAAwE,MAAM,6BAA6B,CAAC;AACrJ,OAAO,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAExE,OAAO,EAAE,aAAa,EAA2B,MAAM,6BAA6B,CAAC;AACrF,OAAO,EAAE,uBAAuB,EAAE,MAAM,yCAAyC,CAAC;AAElF,MAAM,GAAG,GAAG,YAAY,CAAC,wBAAwB,CAAC,CAAC;AAEnD,oBAAoB;AACpB,MAAM,qBAAqB,GAAG,yBAAyB,CAAC;AACxD,MAAM,sBAAsB,GAAG,OAAO,CAAC;AAEvC,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC,iBAAyB,EAAE,EAAU,EAAE,CACjF,GAAG,cAAc,GAAG,qBAAqB,GAAG,sBAAsB,EAAE,CAAC;AA8BtE;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,MAAM,UAAU,eAAe,CAC9B,OAAgB,EAChB,MAAkE;IAElE,MAAM,MAAM,GAAG,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC;IACrC,IAAI,CAAC,MAAM;QAAE,OAAO,SAAS,CAAC;IAC9B,MAAM,YAAY,GAAG,MAAM,EAAE,YAAY,CAAC;IAC1C,IAAI,YAAY,KAAK,SAAS,IAAI,YAAY,CAAC,GAAG,KAAK,MAAM,CAAC,GAAG,EAAE,CAAC;QACnE,GAAG,CAAC,2FAA2F,EAC9F,OAAO,EAAE,YAAY,CAAC,GAAG,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC;QACxC,OAAO,SAAS,CAAC;IAClB,CAAC;IACD,OAAO,EAAE,CAAC,OAAO,CAAC,EAAE,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,EAAE,CAAC;AACtE,CAAC;AAaD;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAC7C,IAAwB,EACxB,OAAgB,EAChB,MAAkE;IAElE,MAAM,SAAS,GAAG,eAAe,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IACnD,IAAI,CAAC,SAAS,EAAE,CAAC;QAChB,OAAO,EAAE,CAAC;IACX,CAAC;IACD,MAAM,MAAM,GAAG,MAAO,CAAC,KAAM,CAAC,MAAO,CAAC;IACtC,MAAM,KAAK,GAAG,MAAM,aAAa,CAAC,IAAI,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;IACzD,IAAI,CAAC,KAAK,EAAE,CAAC;QACZ,GAAG,CAAC,2DAA2D,EAAE,OAAO,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC;QACtF,OAAO,EAAE,SAAS,EAAE,CAAC;IACtB,CAAC;IACD,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,EAAE,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,EAAE,CAAC;AACzD,CAAC;AA4ED;;;;;GAKG;AACH,MAAM,OAAO,oBAAoB;IACxB,OAAO,GAAG,KAAK,CAAC;IACP,QAAQ,CAAS;IACjB,IAAI,CAAqB;IACzB,SAAS,CAA8C;IACxE,2FAA2F;IAC1E,aAAa,CAAyC;IACvE,gIAAgI;IAC/G,eAAe,CAAkB;IAClD,mEAAmE;IAClD,sBAAsB,CAAU;IAEjD,YACC,UAA0C,EAC1C,OAAiC,EAAE;QAEnC,IAAI,CAAC,QAAQ,GAAG,0BAA0B,CAAC,IAAI,CAAC,cAAc,IAAI,EAAE,CAAC,CAAC;QACtE,IAAI,CAAC,IAAI,GAAG,UAAU,CAAC,IAAI,CAAC;QAC5B,IAAI,CAAC,SAAS,GAAG,UAAU,CAAC,SAAS,CAAC;QACtC,IAAI,CAAC,eAAe,GAAG,eAAe,CAAC,UAAU,CAAC,sBAAsB,CAAC,CAAC;QAC1E,IAAI,CAAC,sBAAsB,GAAG,IAAI,CAAC,sBAAsB,IAAI,IAAI,CAAC;QAClE,6FAA6F;QAC7F,4FAA4F;QAC5F,6DAA6D;QAC7D,IAAI,CAAC,aAAa,GAAG,gCAAgC,CAAC,IAAI,EAAE,IAAI,CAAC,QAAQ,EACxE,CAAC,GAAG,EAAE,GAAG,IAAI,EAAE,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC;IAC7C,CAAC;IAED,KAAK,CAAC,KAAK;QACV,IAAI,IAAI,CAAC,OAAO;YAAE,OAAO;QACzB,MAAM,uBAAuB,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,QAAQ,EAAE,KAAK,EAAE,IAAS,EAAE,UAAuB,EAAE,EAAE;YACzG,qFAAqF;YACrF,wFAAwF;YACxF,0FAA0F;YAC1F,uFAAuF;YACvF,wFAAwF;YACxF,4EAA4E;YAC5E,MAAM,MAAM,GAAG,IAAI,EAAE,MAAM,IAAI,IAAI,CAAC;YACpC,MAAM,IAAI,CAAC,aAAa,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;QAC9C,CAAC,CAAC,CAAC;QACH,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;QACpB,GAAG,CAAC,eAAe,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;IACrC,CAAC;IAED,KAAK,CAAC,IAAI;QACT,IAAI,CAAC,IAAI,CAAC,OAAO;YAAE,OAAO;QAC1B,MAAM,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC7C,IAAI,CAAC,OAAO,GAAG,KAAK,CAAC;QACrB,GAAG,CAAC,SAAS,CAAC,CAAC;IAChB,CAAC;IAEO,KAAK,CAAC,aAAa,CAAC,MAAc,EAAE,UAAuB;QAClE,MAAM,IAAI,GAAG,IAAI,CAAC;QAClB,IAAI,CAAC;YACJ,iFAAiF;YACjF,8DAA8D;YAC9D,IAAI,IAAI,CAAC,aAAa,IAAI,MAAM,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,MAAM,EAAE,UAAU,EAAE,UAAU,EAAE,QAAQ,EAAE,CAAC;gBAAE,OAAO;YAC5G,gFAAgF;YAChF,mFAAmF;YACnF,qFAAqF;YACrF,mFAAmF;YACnF,iFAAiF;YACjF,sFAAsF;YACtF,yBAAyB;YACzB,MAAM,SAAS,GAAG,IAAI,CACrB,MAAM,EACN,CAAC,MAAM,EAAE,EAAE,CAAC,EAAE,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,aAAa,EAAE,uBAAuB,EAAE,CAAC,EACzE,KAAK,SAAS,CAAC,EAAE,MAAM;gBACtB,IAAI,KAAK,EAAE,MAAM,GAAG,IAAI,MAAM,EAAE,CAAC;oBAChC,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE,MAAM,CAAC,CAAyB,CAAC;oBACvF,GAAG,CAAC,qCAAqC,EAAE,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;oBAClG,IAAI,QAA+B,CAAC;oBACpC,IAAI,CAAC;wBACJ,QAAQ,GAAG,OAAO,CAAC,IAAI,KAAK,MAAM;4BACjC,CAAC,CAAC,MAAM,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC;4BAChC,CAAC,CAAC,MAAM,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;oBACnC,CAAC;oBAAC,OAAO,KAAK,EAAE,CAAC;wBAChB,GAAG,CAAC,WAAW,EAAG,KAAe,CAAC,OAAO,CAAC,CAAC;wBAC3C,QAAQ,GAAG,EAAE,MAAM,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;oBACxC,CAAC;oBACD,GAAG,CAAC,+BAA+B,EAAE,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;oBACnG,MAAM,YAAY,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,CAAC;oBACrD,OAAO,CAAC,wCAAwC;gBACjD,CAAC;YACF,CAAC,EACD,CAAC,MAAM,EAAE,EAAE,CAAC,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAC7B,CAAC;YACF,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,SAAS,EAAE,CAAC;gBACrC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACpB,CAAC;YACD,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;QACtB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACd,GAAG,CAAC,WAAW,EAAG,GAAa,CAAC,OAAO,CAAC,CAAC;YACzC,IAAI,CAAC;gBAAC,MAAM,CAAC,KAAK,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;QAClG,CAAC;IACF,CAAC;IAEO,KAAK,CAAC,UAAU,CAAC,OAA6B;QACrD,MAAM,MAAM,GAA2B,EAAE,CAAC;QAC1C,MAAM,OAAO,GAAa,EAAE,CAAC;QAE7B,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC;QAEnE,KAAK,MAAM,OAAO,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;YACxC,MAAM,WAAW,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC;YACpC,IAAI,WAAW,EAAE,KAAK,EAAE,CAAC;gBACxB,MAAM,CAAC,OAAO,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;YACrF,CAAC;iBAAM,CAAC;gBACP,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YACvB,CAAC;QACF,CAAC;QAED,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;IAC5B,CAAC;IAED;;;;;;;;;;;;;;;OAeG;IACK,KAAK,CAAC,UAAU,CAAC,OAA6B;QACrD,MAAM,MAAM,GAA2B,EAAE,CAAC;QAC1C,MAAM,OAAO,GAAa,EAAE,CAAC;QAE7B,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC;YACxB,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,OAAO,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC;QAClD,CAAC;QAED,KAAK,MAAM,OAAO,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;YACxC,MAAM,IAAI,GAAG,OAAO,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;YACxC,IAAI,CAAC,IAAI,EAAE,CAAC;gBACX,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;gBACtB,SAAS;YACV,CAAC;YAED,kDAAkD;YAClD,IAAI,KAAa,CAAC;YAClB,IAAI,CAAC;gBACJ,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAW,CAAC;YAC5E,CAAC;YAAC,MAAM,CAAC;gBACR,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;gBACtB,SAAS;YACV,CAAC;YAED,8EAA8E;YAC9E,gFAAgF;YAChF,iFAAiF;YACjF,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAK,KAAgB,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;gBAC3F,GAAG,CAAC,wDAAwD,EAAE,OAAO,CAAC,CAAC;gBACvE,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;gBACtB,SAAS;YACV,CAAC;YAED,uFAAuF;YACvF,yDAAyD;YACzD,MAAM,MAAM,GAAG,OAAO,CAAC,SAAS,EAAE,CAAC,OAAO,CAAC,CAAC;YAC5C,MAAM,KAAK,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,CAAC;YAC7C,IAAI,aAA2C,CAAC;YAChD,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;gBACzB,IAAI,CAAC,MAAM,EAAE,CAAC;oBACb,gFAAgF;oBAChF,0EAA0E;oBAC1E,GAAG,CAAC,4DAA4D,EAAE,OAAO,CAAC,CAAC;oBAC3E,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;oBACtB,SAAS;gBACV,CAAC;gBACD,iFAAiF;gBACjF,wFAAwF;gBACxF,8EAA8E;gBAC9E,iFAAiF;gBACjF,kEAAkE;gBAClE,EAAE;gBACF,mFAAmF;gBACnF,uFAAuF;gBACvF,6DAA6D;gBAC7D,qFAAqF;gBACrF,iFAAiF;gBACjF,iCAAiC;gBACjC,EAAE;gBACF,kFAAkF;gBAClF,sFAAsF;gBACtF,qFAAqF;gBACrF,+EAA+E;gBAC/E,qFAAqF;gBACrF,+EAA+E;gBAC/E,0EAA0E;gBAC1E,MAAM,OAAO,GAAG,MAAM,cAAc,CACnC,KAAK,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,eAAe,CAAC,CAAC;gBAC9F,IAAI,CAAC,OAAO,CAAC,gBAAgB,EAAE,CAAC;oBAC/B,GAAG,CAAC,mDAAmD,EAAE,OAAO,EAAE,MAAM,CAAC,GAAG,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;oBAC/F,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;oBACtB,SAAS;gBACV,CAAC;gBACD,aAAa,GAAG,KAAK,CAAC;YACvB,CAAC;iBAAM,IAAI,IAAI,CAAC,sBAAsB,EAAE,CAAC;gBACxC,oFAAoF;gBACpF,kDAAkD;gBAClD,GAAG,CAAC,yDAAyD,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC;gBACrF,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;gBACtB,SAAS;YACV,CAAC;iBAAM,CAAC;gBACP,GAAG,CAAC,2EAA2E,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC;YACxG,CAAC;YAED,6EAA6E;YAC7E,IAAI,CAAC;gBACJ,MAAM,IAAI,CAAC,IAAI,CAAC,mBAAmB,CAAC,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,aAAa,CAAC,CAAC;gBAC3E,MAAM,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC;YACxB,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBAChB,GAAG,CAAC,8BAA8B,EAAE,OAAO,EAAG,KAAe,CAAC,OAAO,CAAC,CAAC;gBACvE,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YACvB,CAAC;QACF,CAAC;QAED,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;IAC5B,CAAC;CACD;AAED,sFAAsF;AACtF,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,OAAiC,EAAE,EAAE,EAAE,CAC3E,CAAC,UAA0C,EAAE,EAAE,CAAC,IAAI,oBAAoB,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;AAE5F,iBAAiB;AAEjB;;GAEG;AACH,MAAM,OAAO,mBAAoB,SAAQ,cAAc;IACrC,QAAQ,CAAS;IAElC,YACC,MAAc,EACd,WAAyB,EACzB,iBAAyB,EAAE;QAE3B,KAAK,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;QAC3B,IAAI,CAAC,QAAQ,GAAG,0BAA0B,CAAC,cAAc,CAAC,CAAC;IAC5D,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,UAAU,CACf,QAAkB,EAClB,SAAyC,WAAW,EACpD,OAAsF;QAEtF,MAAM,OAAO,GAAyB,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC;QACzE,OAAO,MAAM,IAAI,CAAC,cAAc,CAAwB,OAAO,EAAE,IAAI,CAAC,QAAQ,EAAE,EAAE,GAAG,OAAO,EAAE,aAAa,EAAE,uBAAuB,EAAE,CAAC,CAAC;IACzI,CAAC;IAED;;;;;;;;;;;;;;OAcG;IACH,KAAK,CAAC,UAAU,CACf,QAAkB,EAClB,gBAA8B,EAC9B,SAAyC,WAAW,EACpD,aAAiC,EACjC,OAAsF;QAEtF,MAAM,SAAS,GAA2B,EAAE,CAAC;QAC7C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YAC1C,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAE,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAE,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QAChF,CAAC;QACD,MAAM,OAAO,GAAyB;YACrC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAS;YACzC,GAAG,CAAC,aAAa,EAAE,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,aAAa,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC3E,GAAG,CAAC,aAAa,EAAE,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,aAAa,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACjF,CAAC;QACF,OAAO,MAAM,IAAI,CAAC,cAAc,CAAwB,OAAO,EAAE,IAAI,CAAC,QAAQ,EAAE,EAAE,GAAG,OAAO,EAAE,aAAa,EAAE,uBAAuB,EAAE,CAAC,CAAC;IACzI,CAAC;CACD"}
|
|
@@ -10,9 +10,9 @@ import { type ClusterConsensusConfig, type UnvalidatablePendPolicy } from "@opti
|
|
|
10
10
|
*
|
|
11
11
|
* ## Why two size yardsticks, not one
|
|
12
12
|
*
|
|
13
|
-
*
|
|
14
|
-
*
|
|
15
|
-
*
|
|
13
|
+
* `clusterPolicy.assumedClusterSize` — "the smallest cohort this deployment can genuinely field" —
|
|
14
|
+
* feeds two consumers whose failure modes point in opposite directions, so its *default* cannot
|
|
15
|
+
* serve both:
|
|
16
16
|
*
|
|
17
17
|
* - **Membership admission gate** (`cluster/cluster-repo.ts`, `admitMembership`) reads it only on its
|
|
18
18
|
* fallback path, when this node has no confident network-size estimate. Too small: a
|
|
@@ -21,17 +21,32 @@ import { type ClusterConsensusConfig, type UnvalidatablePendPolicy } from "@opti
|
|
|
21
21
|
* two-node mesh must still be able to transact. It gets {@link minAbsoluteClusterSize} (2).
|
|
22
22
|
* - **Repair corroboration floor** (`corroboratorCapacity` in `cluster/quorum-restore.ts`, called by
|
|
23
23
|
* `CoordinatorRepo.queryClusterForLatest` and `createReconcileBlock`) reads it on *every* repair,
|
|
24
|
-
* unconditionally. Too small: a shrunken — and always
|
|
25
|
-
* peer full trust. Too large: a block stays unrepaired,
|
|
26
|
-
* *strict* default. It gets
|
|
27
|
-
*
|
|
24
|
+
* unconditionally — as the *fallback* for its own field, below. Too small: a shrunken — and always
|
|
25
|
+
* unauthenticated — cohort view buys a lone peer full trust. Too large: a block stays unrepaired,
|
|
26
|
+
* degraded rather than dead. It wants a *strict* default. It gets
|
|
27
|
+
* {@link ResolvedClusterPolicy.repairCorroborationClusterSize}, which falls back in turn to
|
|
28
|
+
* `clusterSize` (the configured replication factor).
|
|
28
29
|
*
|
|
29
|
-
*
|
|
30
|
-
* real cohort size means it for both consumers. Only the unconfigured case diverges.
|
|
30
|
+
* ## The two operator fields
|
|
31
31
|
*
|
|
32
|
-
*
|
|
33
|
-
* `clusterPolicy.assumedClusterSize
|
|
34
|
-
*
|
|
32
|
+
* `clusterPolicy.repairCorroborationClusterSize` declares the **repair yardstick alone**, leaving the
|
|
33
|
+
* admission gate at its permissive default. `clusterPolicy.assumedClusterSize` remains the shared
|
|
34
|
+
* field and still sets BOTH — an operator declaring their real cohort size usually means it for both
|
|
35
|
+
* consumers — but it is now the *fallback* for the repair yardstick, not its only declared source.
|
|
36
|
+
* The repair yardstick is therefore fully declarable on its own.
|
|
37
|
+
*
|
|
38
|
+
* The split exists because the two directions cost different things. Raising the repair yardstick is
|
|
39
|
+
* a pure tightening: the worst outcome is a block that stays unrepaired. Raising the admission
|
|
40
|
+
* yardstick trades write availability — a node with no confident network-size estimate demands
|
|
41
|
+
* `ceil(membershipAdmissionFraction x assumedClusterSize)` declared peers and refuses writes below
|
|
42
|
+
* that. A host that knows its real machine count and wants only the strict yardstick raised (so a
|
|
43
|
+
* shrunken, unauthenticated cohort view cannot talk repair down to trusting one peer) declares
|
|
44
|
+
* `repairCorroborationClusterSize` and leaves `assumedClusterSize` alone.
|
|
45
|
+
*
|
|
46
|
+
* So a genuine two-node mesh needs exactly one setting to self-repair: any of
|
|
47
|
+
* `clusterPolicy.repairCorroborationClusterSize: 2`, `clusterPolicy.assumedClusterSize: 2` (neither
|
|
48
|
+
* of which lowers the replication factor), or an honest `clusterSize: 2`. Writes and voting still
|
|
49
|
+
* work with zero configuration.
|
|
35
50
|
*
|
|
36
51
|
* ## Future
|
|
37
52
|
*
|
|
@@ -65,10 +80,11 @@ export interface ClusterPolicyOptions {
|
|
|
65
80
|
* the coordinator aims for. NOT a statement about how many peers actually exist, so the
|
|
66
81
|
* membership admission gate is never measured against it (see `cluster/cluster-repo.ts`).
|
|
67
82
|
*
|
|
68
|
-
* The read-repair/reconcile corroboration floor DOES fall back to it
|
|
69
|
-
* `clusterPolicy.
|
|
70
|
-
*
|
|
71
|
-
* fewer peers than this should declare
|
|
83
|
+
* The read-repair/reconcile corroboration floor DOES fall back to it — last in the chain
|
|
84
|
+
* `clusterPolicy.repairCorroborationClusterSize` -> `clusterPolicy.assumedClusterSize` ->
|
|
85
|
+
* `clusterSize` — the strict direction, so an unconfigured node cannot have its floor talked down
|
|
86
|
+
* by a shrunken cohort view. A deployment that genuinely runs fewer peers than this should declare
|
|
87
|
+
* one of those two `clusterPolicy` fields.
|
|
72
88
|
*/
|
|
73
89
|
clusterSize?: number;
|
|
74
90
|
clusterPolicy?: {
|
|
@@ -97,6 +113,33 @@ export interface ClusterPolicyOptions {
|
|
|
97
113
|
* `clusterSize: 2`) to self-repair.
|
|
98
114
|
*/
|
|
99
115
|
assumedClusterSize?: number;
|
|
116
|
+
/**
|
|
117
|
+
* The cohort size the **repair corroboration floor alone** is measured against
|
|
118
|
+
* (`corroboratorCapacity` in `cluster/quorum-restore.ts`, read on every read-repair and every
|
|
119
|
+
* reconcile). Declaring it is a pure tightening: the worst cost of overstating it is a block
|
|
120
|
+
* that stays unrepaired — degraded, not dead.
|
|
121
|
+
*
|
|
122
|
+
* Deliberately does NOT touch {@link assumedClusterSize}, which is the membership admission
|
|
123
|
+
* gate's low-confidence write floor: raising that one can make a node refuse legitimate writes
|
|
124
|
+
* while its network-size estimate is unconfident. A host that derives its machine count from
|
|
125
|
+
* its own authenticated membership records and wants only the strict yardstick raised declares
|
|
126
|
+
* this field. It also does not touch {@link ClusterPolicyOptions.clusterSize} (the replication
|
|
127
|
+
* factor).
|
|
128
|
+
*
|
|
129
|
+
* Wins over `assumedClusterSize` for the repair yardstick when both are declared; when absent
|
|
130
|
+
* the chain falls through to `assumedClusterSize`, then to `clusterSize`. A value above
|
|
131
|
+
* `clusterSize` is accepted and never raises the corroboration requirement (capped at
|
|
132
|
+
* `CORROBORATION_FLOOR`), but it is not free: it is also the denominator
|
|
133
|
+
* `CoordinatorRepo.commitQuorumRulesOutRivals` measures a local commit against before arming
|
|
134
|
+
* the lazy read-repair freshness window, so a yardstick well above the cohort a commit
|
|
135
|
+
* actually reaches stops that window arming and costs one cohort consult per written block
|
|
136
|
+
* per window. Declare the machine count you run, not a safety margin.
|
|
137
|
+
*
|
|
138
|
+
* Applied at node construction only — there is deliberately no runtime setter. A host that
|
|
139
|
+
* learns a new machine count applies it by building a new node; see the accepted-tradeoff
|
|
140
|
+
* `NOTE:` in {@link resolveClusterPolicy}.
|
|
141
|
+
*/
|
|
142
|
+
repairCorroborationClusterSize?: number;
|
|
100
143
|
/**
|
|
101
144
|
* What a validator-configured member does with a pend that carries no `validation` payload
|
|
102
145
|
* (nothing to re-execute — the single-collection `Collection.sync` shape). Default 'accept';
|
|
@@ -114,11 +157,51 @@ export type ResolvedClusterPolicy = ClusterConsensusConfig & {
|
|
|
114
157
|
* cohort view against — see `corroboratorCapacity` in `cluster/quorum-restore.ts`.
|
|
115
158
|
*
|
|
116
159
|
* Deliberately distinct from {@link ClusterConsensusConfig.assumedClusterSize}, which the
|
|
117
|
-
* membership admission gate reads:
|
|
118
|
-
*
|
|
160
|
+
* membership admission gate reads: over- and under-stating the two cost opposite things, so they
|
|
161
|
+
* share neither a default nor — since `clusterPolicy.repairCorroborationClusterSize` — a required
|
|
162
|
+
* operator field. See the module doc.
|
|
119
163
|
*/
|
|
120
164
|
repairCorroborationClusterSize: number;
|
|
121
165
|
};
|
|
166
|
+
/**
|
|
167
|
+
* A declared cohort size, or `undefined` if the operator handed over something that is not one.
|
|
168
|
+
*
|
|
169
|
+
* `Number.isInteger` already rejects `NaN`, both infinities and every fractional value, so the extra
|
|
170
|
+
* check is only the sign. Used for both declared size fields in the repair yardstick's fall-through
|
|
171
|
+
* chain — see the `NOTE:` in {@link resolveRepairCorroborationClusterSize} for why a bad value falls
|
|
172
|
+
* through rather than being clamped.
|
|
173
|
+
*/
|
|
174
|
+
export declare function asDeclaredSize(value: number | undefined): number | undefined;
|
|
175
|
+
/**
|
|
176
|
+
* The repair corroboration floor's yardstick, from the two operator fields and the replication
|
|
177
|
+
* factor: `repairCorroborationClusterSize` -> `assumedClusterSize` -> `clusterSize`, floored at
|
|
178
|
+
* {@link minAbsoluteClusterSize}.
|
|
179
|
+
*
|
|
180
|
+
* Exported because there are TWO composition paths onto this number — {@link resolveClusterPolicy}
|
|
181
|
+
* (what `createLibp2pNodeBase` runs) and the `CoordinatorRepo` constructor (the readme's manual
|
|
182
|
+
* wiring, `repo/coordinator-repo.ts`) — and a node and a hand-wired coordinator given the same
|
|
183
|
+
* operator numbers must land on the same yardstick, or the two disagree about how much trust a lone
|
|
184
|
+
* peer gets. One function rather than two copies of the chain, so they cannot drift.
|
|
185
|
+
*
|
|
186
|
+
* NOTE: a declared size that is not a positive finite integer is treated as NOT DECLARED and falls
|
|
187
|
+
* through to the next term, rather than being clamped. Clamping to {@link minAbsoluteClusterSize}
|
|
188
|
+
* would be the UNSAFE direction: 2 is the one size whose corroboration floor relaxes to a single
|
|
189
|
+
* voter, so a NaN — which today makes every quorum comparison false, and therefore declines repair
|
|
190
|
+
* forever, dead but safe — would become "trust one peer". Falling through treats a nonsense
|
|
191
|
+
* declaration as no declaration and lands on the strict `clusterSize` default instead.
|
|
192
|
+
*
|
|
193
|
+
* NOTE: the result is deliberately NOT floored at {@link minAbsoluteClusterSize}. Such a floor looks
|
|
194
|
+
* free — it cannot change the corroboration requirement, since `quorumSize` takes
|
|
195
|
+
* `max(1, min(CORROBORATION_FLOOR, capacity))` and `corroboratorCapacity`'s own max against visible
|
|
196
|
+
* peers absorbs the difference at every peer count — but this number has a SECOND consumer:
|
|
197
|
+
* `CoordinatorRepo.commitQuorumRulesOutRivals` uses it as the full-cohort denominator a local commit
|
|
198
|
+
* must beat to arm the lazy read-repair freshness window. Flooring a genuine `clusterSize: 1` up to 2
|
|
199
|
+
* makes a solo node's own commit stop clearing that bar, so every written block pays a cohort consult
|
|
200
|
+
* per window — a real cost in a supported topology (one machine is an ordinary deployment size, see
|
|
201
|
+
* `docs/architecture.md`). Pinned by 'a solo commit on a genuine cohort of one DOES arm the window'
|
|
202
|
+
* in `test/coordinator-repo-commit-freshness.spec.ts`.
|
|
203
|
+
*/
|
|
204
|
+
export declare function resolveRepairCorroborationClusterSize(declaredRepairSize: number | undefined, declaredCohortSize: number | undefined, clusterSize: number): number;
|
|
122
205
|
/**
|
|
123
206
|
* Apply every cluster-policy default a node needs. Same options in, same numbers out, so the
|
|
124
207
|
* composition root's behavior is unit-testable (`test/cluster-policy.spec.ts`). Its one side effect
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"cluster-policy.d.ts","sourceRoot":"","sources":["../../../src/cluster/cluster-policy.ts"],"names":[],"mappings":"AAAA,OAAO,EAAoC,KAAK,sBAAsB,EAAE,KAAK,uBAAuB,EAAE,MAAM,qBAAqB,CAAC;AAMlI
|
|
1
|
+
{"version":3,"file":"cluster-policy.d.ts","sourceRoot":"","sources":["../../../src/cluster/cluster-policy.ts"],"names":[],"mappings":"AAAA,OAAO,EAAoC,KAAK,sBAAsB,EAAE,KAAK,uBAAuB,EAAE,MAAM,qBAAqB,CAAC;AAMlI;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAsDG;AAEH;;;;GAIG;AACH,eAAO,MAAM,sBAAsB,IAAI,CAAC;AAExC;;;;;;;GAOG;AACH,eAAO,MAAM,oBAAoB,KAAK,CAAC;AAEvC;;;;GAIG;AACH,MAAM,WAAW,oBAAoB;IACpC;;;;;;;;;;OAUG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,aAAa,CAAC,EAAE;QACf,aAAa,CAAC,EAAE,OAAO,CAAC;QACxB,0DAA0D;QAC1D,aAAa,CAAC,EAAE,MAAM,CAAC;QACvB,sGAAsG;QACtG,sBAAsB,CAAC,EAAE,MAAM,CAAC;QAChC;;;;;WAKG;QACH,4BAA4B,CAAC,EAAE,OAAO,CAAC;QACvC;;;;;;;;;;;WAWG;QACH,kBAAkB,CAAC,EAAE,MAAM,CAAC;QAC5B;;;;;;;;;;;;;;;;;;;;;;;;;WAyBG;QACH,8BAA8B,CAAC,EAAE,MAAM,CAAC;QACxC;;;;WAIG;QACH,uBAAuB,CAAC,EAAE,uBAAuB,CAAC;KAClD,CAAC;CACF;AAED,kGAAkG;AAClG,MAAM,MAAM,qBAAqB,GAAG,sBAAsB,GAAG;IAC5D,oFAAoF;IACpF,WAAW,EAAE,MAAM,CAAC;IACpB;;;;;;;;OAQG;IACH,8BAA8B,EAAE,MAAM,CAAC;CACvC,CAAC;AAEF;;;;;;;GAOG;AACH,wBAAgB,cAAc,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,GAAG,SAAS,CAE5E;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,wBAAgB,qCAAqC,CACpD,kBAAkB,EAAE,MAAM,GAAG,SAAS,EACtC,kBAAkB,EAAE,MAAM,GAAG,SAAS,EACtC,WAAW,EAAE,MAAM,GACjB,MAAM,CAER;AAED;;;;;GAKG;AACH,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,oBAAoB,GAAG,qBAAqB,CA+NzF"}
|
|
@@ -13,9 +13,9 @@ const log = createLogger('cluster-policy');
|
|
|
13
13
|
*
|
|
14
14
|
* ## Why two size yardsticks, not one
|
|
15
15
|
*
|
|
16
|
-
*
|
|
17
|
-
*
|
|
18
|
-
*
|
|
16
|
+
* `clusterPolicy.assumedClusterSize` — "the smallest cohort this deployment can genuinely field" —
|
|
17
|
+
* feeds two consumers whose failure modes point in opposite directions, so its *default* cannot
|
|
18
|
+
* serve both:
|
|
19
19
|
*
|
|
20
20
|
* - **Membership admission gate** (`cluster/cluster-repo.ts`, `admitMembership`) reads it only on its
|
|
21
21
|
* fallback path, when this node has no confident network-size estimate. Too small: a
|
|
@@ -24,17 +24,32 @@ const log = createLogger('cluster-policy');
|
|
|
24
24
|
* two-node mesh must still be able to transact. It gets {@link minAbsoluteClusterSize} (2).
|
|
25
25
|
* - **Repair corroboration floor** (`corroboratorCapacity` in `cluster/quorum-restore.ts`, called by
|
|
26
26
|
* `CoordinatorRepo.queryClusterForLatest` and `createReconcileBlock`) reads it on *every* repair,
|
|
27
|
-
* unconditionally. Too small: a shrunken — and always
|
|
28
|
-
* peer full trust. Too large: a block stays unrepaired,
|
|
29
|
-
* *strict* default. It gets
|
|
30
|
-
*
|
|
27
|
+
* unconditionally — as the *fallback* for its own field, below. Too small: a shrunken — and always
|
|
28
|
+
* unauthenticated — cohort view buys a lone peer full trust. Too large: a block stays unrepaired,
|
|
29
|
+
* degraded rather than dead. It wants a *strict* default. It gets
|
|
30
|
+
* {@link ResolvedClusterPolicy.repairCorroborationClusterSize}, which falls back in turn to
|
|
31
|
+
* `clusterSize` (the configured replication factor).
|
|
31
32
|
*
|
|
32
|
-
*
|
|
33
|
-
* real cohort size means it for both consumers. Only the unconfigured case diverges.
|
|
33
|
+
* ## The two operator fields
|
|
34
34
|
*
|
|
35
|
-
*
|
|
36
|
-
* `clusterPolicy.assumedClusterSize
|
|
37
|
-
*
|
|
35
|
+
* `clusterPolicy.repairCorroborationClusterSize` declares the **repair yardstick alone**, leaving the
|
|
36
|
+
* admission gate at its permissive default. `clusterPolicy.assumedClusterSize` remains the shared
|
|
37
|
+
* field and still sets BOTH — an operator declaring their real cohort size usually means it for both
|
|
38
|
+
* consumers — but it is now the *fallback* for the repair yardstick, not its only declared source.
|
|
39
|
+
* The repair yardstick is therefore fully declarable on its own.
|
|
40
|
+
*
|
|
41
|
+
* The split exists because the two directions cost different things. Raising the repair yardstick is
|
|
42
|
+
* a pure tightening: the worst outcome is a block that stays unrepaired. Raising the admission
|
|
43
|
+
* yardstick trades write availability — a node with no confident network-size estimate demands
|
|
44
|
+
* `ceil(membershipAdmissionFraction x assumedClusterSize)` declared peers and refuses writes below
|
|
45
|
+
* that. A host that knows its real machine count and wants only the strict yardstick raised (so a
|
|
46
|
+
* shrunken, unauthenticated cohort view cannot talk repair down to trusting one peer) declares
|
|
47
|
+
* `repairCorroborationClusterSize` and leaves `assumedClusterSize` alone.
|
|
48
|
+
*
|
|
49
|
+
* So a genuine two-node mesh needs exactly one setting to self-repair: any of
|
|
50
|
+
* `clusterPolicy.repairCorroborationClusterSize: 2`, `clusterPolicy.assumedClusterSize: 2` (neither
|
|
51
|
+
* of which lowers the replication factor), or an honest `clusterSize: 2`. Writes and voting still
|
|
52
|
+
* work with zero configuration.
|
|
38
53
|
*
|
|
39
54
|
* ## Future
|
|
40
55
|
*
|
|
@@ -57,6 +72,49 @@ export const minAbsoluteClusterSize = 2;
|
|
|
57
72
|
* here would have resolved to". Repeating the literal is how the two drifted last time.
|
|
58
73
|
*/
|
|
59
74
|
export const DEFAULT_CLUSTER_SIZE = 10;
|
|
75
|
+
/**
|
|
76
|
+
* A declared cohort size, or `undefined` if the operator handed over something that is not one.
|
|
77
|
+
*
|
|
78
|
+
* `Number.isInteger` already rejects `NaN`, both infinities and every fractional value, so the extra
|
|
79
|
+
* check is only the sign. Used for both declared size fields in the repair yardstick's fall-through
|
|
80
|
+
* chain — see the `NOTE:` in {@link resolveRepairCorroborationClusterSize} for why a bad value falls
|
|
81
|
+
* through rather than being clamped.
|
|
82
|
+
*/
|
|
83
|
+
export function asDeclaredSize(value) {
|
|
84
|
+
return Number.isInteger(value) && value > 0 ? value : undefined;
|
|
85
|
+
}
|
|
86
|
+
/**
|
|
87
|
+
* The repair corroboration floor's yardstick, from the two operator fields and the replication
|
|
88
|
+
* factor: `repairCorroborationClusterSize` -> `assumedClusterSize` -> `clusterSize`, floored at
|
|
89
|
+
* {@link minAbsoluteClusterSize}.
|
|
90
|
+
*
|
|
91
|
+
* Exported because there are TWO composition paths onto this number — {@link resolveClusterPolicy}
|
|
92
|
+
* (what `createLibp2pNodeBase` runs) and the `CoordinatorRepo` constructor (the readme's manual
|
|
93
|
+
* wiring, `repo/coordinator-repo.ts`) — and a node and a hand-wired coordinator given the same
|
|
94
|
+
* operator numbers must land on the same yardstick, or the two disagree about how much trust a lone
|
|
95
|
+
* peer gets. One function rather than two copies of the chain, so they cannot drift.
|
|
96
|
+
*
|
|
97
|
+
* NOTE: a declared size that is not a positive finite integer is treated as NOT DECLARED and falls
|
|
98
|
+
* through to the next term, rather than being clamped. Clamping to {@link minAbsoluteClusterSize}
|
|
99
|
+
* would be the UNSAFE direction: 2 is the one size whose corroboration floor relaxes to a single
|
|
100
|
+
* voter, so a NaN — which today makes every quorum comparison false, and therefore declines repair
|
|
101
|
+
* forever, dead but safe — would become "trust one peer". Falling through treats a nonsense
|
|
102
|
+
* declaration as no declaration and lands on the strict `clusterSize` default instead.
|
|
103
|
+
*
|
|
104
|
+
* NOTE: the result is deliberately NOT floored at {@link minAbsoluteClusterSize}. Such a floor looks
|
|
105
|
+
* free — it cannot change the corroboration requirement, since `quorumSize` takes
|
|
106
|
+
* `max(1, min(CORROBORATION_FLOOR, capacity))` and `corroboratorCapacity`'s own max against visible
|
|
107
|
+
* peers absorbs the difference at every peer count — but this number has a SECOND consumer:
|
|
108
|
+
* `CoordinatorRepo.commitQuorumRulesOutRivals` uses it as the full-cohort denominator a local commit
|
|
109
|
+
* must beat to arm the lazy read-repair freshness window. Flooring a genuine `clusterSize: 1` up to 2
|
|
110
|
+
* makes a solo node's own commit stop clearing that bar, so every written block pays a cohort consult
|
|
111
|
+
* per window — a real cost in a supported topology (one machine is an ordinary deployment size, see
|
|
112
|
+
* `docs/architecture.md`). Pinned by 'a solo commit on a genuine cohort of one DOES arm the window'
|
|
113
|
+
* in `test/coordinator-repo-commit-freshness.spec.ts`.
|
|
114
|
+
*/
|
|
115
|
+
export function resolveRepairCorroborationClusterSize(declaredRepairSize, declaredCohortSize, clusterSize) {
|
|
116
|
+
return asDeclaredSize(declaredRepairSize) ?? asDeclaredSize(declaredCohortSize) ?? clusterSize;
|
|
117
|
+
}
|
|
60
118
|
/**
|
|
61
119
|
* Apply every cluster-policy default a node needs. Same options in, same numbers out, so the
|
|
62
120
|
* composition root's behavior is unit-testable (`test/cluster-policy.spec.ts`). Its one side effect
|
|
@@ -64,18 +122,26 @@ export const DEFAULT_CLUSTER_SIZE = 10;
|
|
|
64
122
|
* that knows the resolution produced a combination with no repair margin — or none at all.
|
|
65
123
|
*/
|
|
66
124
|
export function resolveClusterPolicy(options) {
|
|
67
|
-
//
|
|
68
|
-
// yardsticks below diverge.
|
|
125
|
+
// Nothing usable on EITHER declared field means "the operator said nothing", which is the only
|
|
126
|
+
// case where the two yardsticks below diverge. Why a degenerate declaration counts as nothing
|
|
127
|
+
// rather than being clamped: see the `NOTE:` on `resolveRepairCorroborationClusterSize`.
|
|
69
128
|
//
|
|
70
|
-
//
|
|
71
|
-
//
|
|
72
|
-
//
|
|
73
|
-
//
|
|
74
|
-
//
|
|
75
|
-
//
|
|
129
|
+
// The ADMISSION-gate value below stays an unvalidated pass-through on purpose:
|
|
130
|
+
// `cluster-repo.admissionFloor` already floors a degenerate one itself (see its specs), and
|
|
131
|
+
// changing that here would alter documented behaviour with no bug behind it.
|
|
132
|
+
//
|
|
133
|
+
// NOTE: accepted tradeoff — resolved once, at node construction; there is deliberately no runtime
|
|
134
|
+
// mutation of either size yardstick. A host that learns a new machine count applies it by building
|
|
135
|
+
// a new node (which every embedder already does on restart and on wake from hibernation), not
|
|
136
|
+
// through a setter: a construction-time argument is what keeps the number un-reachable from the
|
|
137
|
+
// network, and every consumer holds it as an immutable snapshot. Weighed against a
|
|
138
|
+
// live-reconfiguration API and kept. Revisit only if a deployment appears where a rebuild is
|
|
139
|
+
// measurably disruptive — for example a server-profile node holding thousands of blocks whose
|
|
140
|
+
// post-rebuild cohort-consult burst shows up in profiles.
|
|
76
141
|
const declaredCohortSize = options.clusterPolicy?.assumedClusterSize;
|
|
142
|
+
const declaredRepairSize = options.clusterPolicy?.repairCorroborationClusterSize;
|
|
77
143
|
const clusterSize = options.clusterSize ?? DEFAULT_CLUSTER_SIZE;
|
|
78
|
-
const repairCorroborationClusterSize = declaredCohortSize
|
|
144
|
+
const repairCorroborationClusterSize = resolveRepairCorroborationClusterSize(declaredRepairSize, declaredCohortSize, clusterSize);
|
|
79
145
|
// ## What the advisory actually claims, and why the trigger is what it is
|
|
80
146
|
//
|
|
81
147
|
// The rule it states is measurable, not rhetorical: sweep `corroboratorCapacity` and `quorumSize`
|
|
@@ -126,13 +192,36 @@ export function resolveClusterPolicy(options) {
|
|
|
126
192
|
// can honestly get. If `feat-admission-floor-from-observed-cohort-high-water-mark` ever lands
|
|
127
193
|
// (deriving the yardstick from observation), that check becomes cheap and belongs here.
|
|
128
194
|
const minimumSelfHealingDeployment = CORROBORATION_FLOOR + 1;
|
|
129
|
-
|
|
195
|
+
// BOTH operator fields must be absent for this arm: declaring only
|
|
196
|
+
// `repairCorroborationClusterSize` is still a declaration, and `undeclaredAdvice` below would
|
|
197
|
+
// otherwise tell a reader who has already declared the repair yardstick directly to go and declare
|
|
198
|
+
// it — the wrong advice, pointed at the wrong field.
|
|
199
|
+
//
|
|
200
|
+
// "Absent" is the SANITIZED notion, the same one the resolution above uses: a declaration the
|
|
201
|
+
// resolution discarded as degenerate (0, NaN, 2.5, …) must not count as a declaration here
|
|
202
|
+
// either. It is the case that most needs the advice — the operator believes they declared a size,
|
|
203
|
+
// the resolution silently used `clusterSize` instead, and without this the advisory's
|
|
204
|
+
// no-margin arm cannot fire either (the strict fallback has margin), so a typo'd declaration
|
|
205
|
+
// would be QUIETER than declaring nothing at all. The raw values still reach the log payload
|
|
206
|
+
// below, so a reader can see what was rejected.
|
|
207
|
+
const cohortUndeclared = asDeclaredSize(declaredCohortSize) === undefined
|
|
208
|
+
&& asDeclaredSize(declaredRepairSize) === undefined
|
|
209
|
+
&& clusterSize > minAbsoluteClusterSize;
|
|
130
210
|
const noRepairMargin = repairCorroborationClusterSize <= minimumSelfHealingDeployment;
|
|
131
211
|
if (cohortUndeclared || noRepairMargin) {
|
|
132
212
|
// How many peers besides the reader must answer and agree, at the resolved size. Two once the
|
|
133
213
|
// cohort is three or larger; one for a cohort declared at two, which is the only size whose
|
|
134
214
|
// floor relaxes. Never below one — a claim nobody made is never accepted.
|
|
135
215
|
const requiredAnsweringPeers = Math.max(1, Math.min(CORROBORATION_FLOOR, repairCorroborationClusterSize - 1));
|
|
216
|
+
// NOTE: a genuine solo node (`clusterSize: 1`, nothing declared) reads "0 cohort peer(s) and
|
|
217
|
+
// needs 1" and is told to run four machines — honest arithmetic, but advice aimed at a
|
|
218
|
+
// deployment that wanted a cohort. A solo node has nothing to repair FROM and nothing to
|
|
219
|
+
// repair against, so the line is noise rather than wrong. Left as is because one machine is a
|
|
220
|
+
// transitional shape (the ordinary next step is adding a backup) and the advisory is one line
|
|
221
|
+
// per construction. If solo becomes a shape deployments sit in, give this a solo-cohort arm
|
|
222
|
+
// that says so — do NOT reach for a floor on `repairCorroborationClusterSize` instead, which
|
|
223
|
+
// would fix the wording and break the commit-freshness window (see
|
|
224
|
+
// `resolveRepairCorroborationClusterSize`).
|
|
136
225
|
const availablePeers = Math.max(0, repairCorroborationClusterSize - 1);
|
|
137
226
|
const rule = `Block repair (read-repair and reconcile) converges only when ${CORROBORATION_FLOOR} cohort peers ` +
|
|
138
227
|
`BESIDES the reader answer that reader and agree on the same (rev, actionId); that requirement drops ` +
|
|
@@ -164,13 +253,43 @@ export function resolveClusterPolicy(options) {
|
|
|
164
253
|
`COPY IT — so founding data can stay stranded however many machines you later run. That case is ` +
|
|
165
254
|
`reported once per affected block as cluster-fetch:repair-deadlock with reason=sole-holder, and its ` +
|
|
166
255
|
`remedy is another cohort peer holding it (commit a new revision of the block), never more machines.`;
|
|
256
|
+
// Names the discarded value when the operator DID pass something the resolution rejected —
|
|
257
|
+
// otherwise "no size declared" reads as a contradiction of their own config, and they have no
|
|
258
|
+
// way to tell that the number they computed never took effect.
|
|
259
|
+
const discardedDeclaration = cohortUndeclared && (declaredCohortSize !== undefined || declaredRepairSize !== undefined)
|
|
260
|
+
? ` (a declared value that is not a positive whole number is discarded and counts as no ` +
|
|
261
|
+
`declaration — this node discarded assumedClusterSize=${String(declaredCohortSize)}, ` +
|
|
262
|
+
`repairCorroborationClusterSize=${String(declaredRepairSize)})`
|
|
263
|
+
: '';
|
|
167
264
|
const undeclaredAdvice = cohortUndeclared
|
|
168
|
-
? ` No clusterPolicy.assumedClusterSize declared,
|
|
265
|
+
? ` No clusterPolicy.assumedClusterSize declared, and no clusterPolicy.repairCorroborationClusterSize ` +
|
|
266
|
+
`either${discardedDeclaration}, so the floor is measured against ` +
|
|
169
267
|
`repairCorroborationClusterSize=${repairCorroborationClusterSize} and never relaxes: if you actually ` +
|
|
170
|
-
`run fewer than ${minimumSelfHealingDeployment} machines, every repair declines,
|
|
171
|
-
`
|
|
172
|
-
`
|
|
268
|
+
`run fewer than ${minimumSelfHealingDeployment} machines, every proof-less repair declines, ` +
|
|
269
|
+
`permanently. Either field declares your real cohort size and fixes this: ` +
|
|
270
|
+
`clusterPolicy.repairCorroborationClusterSize moves ONLY this repair yardstick, while ` +
|
|
271
|
+
`clusterPolicy.assumedClusterSize moves it AND the membership admission gate's write floor (which ` +
|
|
272
|
+
`refuses writes below ceil(0.75 x the declared size) while this node has no confident network-size ` +
|
|
273
|
+
`estimate) — so declare the repair field alone unless you mean to raise the write floor too. ` +
|
|
274
|
+
`Neither lowers clusterSize=${clusterSize} (the replication factor). Larger deployments can ignore ` +
|
|
275
|
+
`this.`
|
|
173
276
|
: '';
|
|
277
|
+
// The rule and both advices above constrain proof-LESS claims only — without saying so the
|
|
278
|
+
// advisory overstates the emergency: an operator reading "every repair declines, permanently"
|
|
279
|
+
// would not guess that proof-carrying data is exempt, nor that the cohort-too-small decline is
|
|
280
|
+
// now quiet. It must not overshoot in the other direction either: `sole-holder` is equally
|
|
281
|
+
// permanent and deliberately stays loud, so name WHICH decline went quiet, and for which blocks.
|
|
282
|
+
const certifiedCaveat = ` Two softeners to all of the above. A claim carrying a VERIFIED cohort commit proof repairs at any ` +
|
|
283
|
+
`size with no second voter (the proof's signature set is its corroboration), so every permanent-` +
|
|
284
|
+
`decline warning here applies to PROOF-LESS data only — legacy blocks written before proofs ` +
|
|
285
|
+
`shipped, or a peer that lost its proof store. And the decline this advisory is about — ` +
|
|
286
|
+
`reason=cohort-too-small, a cohort that cannot reach the quorum at any answer rate — no longer ` +
|
|
287
|
+
`consults on every read: it arms the lazy read-repair window, so the steady-state cost is one ` +
|
|
288
|
+
`declined consult per readRepairWindowMs for each block this node HOLDS, with the permanence named ` +
|
|
289
|
+
`once per episode (cluster-fetch:repair-deadlock). Two shapes still consult on every read, by ` +
|
|
290
|
+
`design: reason=sole-holder, where the missing thing is a COPY a later commit or cohort-growth ` +
|
|
291
|
+
`push can deliver, so re-asking can genuinely learn; and a block this node does not hold at all, ` +
|
|
292
|
+
`whose read must attempt an acquisition and therefore bypasses the window.`;
|
|
174
293
|
const noMarginAdvice = noRepairMargin
|
|
175
294
|
? ` This node resolved repairCorroborationClusterSize=${repairCorroborationClusterSize}, which leaves ` +
|
|
176
295
|
`repair with NO fault tolerance: the reader has ${availablePeers} cohort peer(s) and needs ` +
|
|
@@ -182,11 +301,14 @@ export function resolveClusterPolicy(options) {
|
|
|
182
301
|
repairCorroborationClusterSize,
|
|
183
302
|
corroborationFloor: CORROBORATION_FLOOR,
|
|
184
303
|
declaredCohortSize,
|
|
304
|
+
// Beside declaredCohortSize so a reader can tell WHICH field produced the resolved number
|
|
305
|
+
// (the repair field wins when both are declared).
|
|
306
|
+
declaredRepairSize,
|
|
185
307
|
cohortUndeclared,
|
|
186
308
|
noRepairMargin,
|
|
187
309
|
requiredAnsweringPeers,
|
|
188
310
|
minimumSelfHealingDeployment,
|
|
189
|
-
message: rule + undeclaredAdvice + noMarginAdvice + holdersCaveat
|
|
311
|
+
message: rule + undeclaredAdvice + noMarginAdvice + certifiedCaveat + holdersCaveat
|
|
190
312
|
});
|
|
191
313
|
}
|
|
192
314
|
return {
|
|
@@ -210,9 +332,10 @@ export function resolveClusterPolicy(options) {
|
|
|
210
332
|
// permissive so a two- or three-node mesh transacts unconfigured; the cost of that default is
|
|
211
333
|
// bounded to the gate, since the repair floor no longer reads this field.
|
|
212
334
|
assumedClusterSize: declaredCohortSize ?? minAbsoluteClusterSize,
|
|
213
|
-
// Repair corroboration floor, every repair.
|
|
214
|
-
//
|
|
215
|
-
//
|
|
335
|
+
// Repair corroboration floor, every repair. Declared by `repairCorroborationClusterSize`, else
|
|
336
|
+
// `assumedClusterSize`, else strict — the replication factor — so an unconfigured node cannot
|
|
337
|
+
// have its floor talked down to a single voter by a shrunken cohort view. A genuinely small
|
|
338
|
+
// mesh declares its size (any of the three) to regain self-repair.
|
|
216
339
|
repairCorroborationClusterSize
|
|
217
340
|
};
|
|
218
341
|
}
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"cluster-policy.js","sourceRoot":"","sources":["../../../src/cluster/cluster-policy.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gCAAgC,EAA6D,MAAM,qBAAqB,CAAC;AAClI,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAC5C,OAAO,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAE1D,MAAM,GAAG,GAAG,YAAY,CAAC,gBAAgB,CAAC,CAAC;AAE3C
|
|
1
|
+
{"version":3,"file":"cluster-policy.js","sourceRoot":"","sources":["../../../src/cluster/cluster-policy.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gCAAgC,EAA6D,MAAM,qBAAqB,CAAC;AAClI,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAC5C,OAAO,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAE1D,MAAM,GAAG,GAAG,YAAY,CAAC,gBAAgB,CAAC,CAAC;AAE3C;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAsDG;AAEH;;;;GAIG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAC;AAExC;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,EAAE,CAAC;AAkGvC;;;;;;;GAOG;AACH,MAAM,UAAU,cAAc,CAAC,KAAyB;IACvD,OAAO,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,IAAK,KAAgB,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;AAC7E,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,MAAM,UAAU,qCAAqC,CACpD,kBAAsC,EACtC,kBAAsC,EACtC,WAAmB;IAEnB,OAAO,cAAc,CAAC,kBAAkB,CAAC,IAAI,cAAc,CAAC,kBAAkB,CAAC,IAAI,WAAW,CAAC;AAChG,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,oBAAoB,CAAC,OAA6B;IACjE,+FAA+F;IAC/F,8FAA8F;IAC9F,yFAAyF;IACzF,EAAE;IACF,+EAA+E;IAC/E,4FAA4F;IAC5F,6EAA6E;IAC7E,EAAE;IACF,kGAAkG;IAClG,mGAAmG;IACnG,8FAA8F;IAC9F,gGAAgG;IAChG,mFAAmF;IACnF,6FAA6F;IAC7F,8FAA8F;IAC9F,0DAA0D;IAC1D,MAAM,kBAAkB,GAAG,OAAO,CAAC,aAAa,EAAE,kBAAkB,CAAC;IACrE,MAAM,kBAAkB,GAAG,OAAO,CAAC,aAAa,EAAE,8BAA8B,CAAC;IACjF,MAAM,WAAW,GAAG,OAAO,CAAC,WAAW,IAAI,oBAAoB,CAAC;IAChE,MAAM,8BAA8B,GACnC,qCAAqC,CAAC,kBAAkB,EAAE,kBAAkB,EAAE,WAAW,CAAC,CAAC;IAE5F,0EAA0E;IAC1E,EAAE;IACF,kGAAkG;IAClG,kGAAkG;IAClG,mGAAmG;IACnG,6FAA6F;IAC7F,8DAA8D;IAC9D,EAAE;IACF,4FAA4F;IAC5F,iGAAiG;IACjG,+FAA+F;IAC/F,mGAAmG;IACnG,8FAA8F;IAC9F,gFAAgF;IAChF,EAAE;IACF,+FAA+F;IAC/F,kGAAkG;IAClG,iGAAiG;IACjG,kGAAkG;IAClG,mGAAmG;IACnG,oGAAoG;IACpG,+FAA+F;IAC/F,gFAAgF;IAChF,4FAA4F;IAC5F,uFAAuF;IACvF,EAAE;IACF,wDAAwD;IACxD,EAAE;IACF,4FAA4F;IAC5F,+FAA+F;IAC/F,mGAAmG;IACnG,yDAAyD;IACzD,wFAAwF;IACxF,mGAAmG;IACnG,2FAA2F;IAC3F,6FAA6F;IAC7F,kEAAkE;IAClE,EAAE;IACF,+FAA+F;IAC/F,4FAA4F;IAC5F,mGAAmG;IACnG,+FAA+F;IAC/F,0BAA0B;IAC1B,EAAE;IACF,mGAAmG;IACnG,6FAA6F;IAC7F,kGAAkG;IAClG,8FAA8F;IAC9F,wFAAwF;IACxF,MAAM,4BAA4B,GAAG,mBAAmB,GAAG,CAAC,CAAC;IAC7D,mEAAmE;IACnE,8FAA8F;IAC9F,mGAAmG;IACnG,qDAAqD;IACrD,EAAE;IACF,8FAA8F;IAC9F,2FAA2F;IAC3F,kGAAkG;IAClG,sFAAsF;IACtF,6FAA6F;IAC7F,6FAA6F;IAC7F,gDAAgD;IAChD,MAAM,gBAAgB,GAAG,cAAc,CAAC,kBAAkB,CAAC,KAAK,SAAS;WACrE,cAAc,CAAC,kBAAkB,CAAC,KAAK,SAAS;WAChD,WAAW,GAAG,sBAAsB,CAAC;IACzC,MAAM,cAAc,GAAG,8BAA8B,IAAI,4BAA4B,CAAC;IACtF,IAAI,gBAAgB,IAAI,cAAc,EAAE,CAAC;QACxC,8FAA8F;QAC9F,4FAA4F;QAC5F,0EAA0E;QAC1E,MAAM,sBAAsB,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,mBAAmB,EAAE,8BAA8B,GAAG,CAAC,CAAC,CAAC,CAAC;QAC9G,6FAA6F;QAC7F,uFAAuF;QACvF,yFAAyF;QACzF,8FAA8F;QAC9F,8FAA8F;QAC9F,4FAA4F;QAC5F,6FAA6F;QAC7F,mEAAmE;QACnE,4CAA4C;QAC5C,MAAM,cAAc,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,8BAA8B,GAAG,CAAC,CAAC,CAAC;QACvE,MAAM,IAAI,GACT,gEAAgE,mBAAmB,gBAAgB;YACnG,sGAAsG;YACtG,2DAA2D,4BAA4B,IAAI;YAC3F,GAAG,4BAA4B,wEAAwE;YACvG,qBAAqB,4BAA4B,mDAAmD;YACpG,oGAAoG;YACpG,kCAAkC,4BAA4B,GAAG,CAAC,mCAAmC;YACrG,aAAa,CAAC;QACf,gGAAgG;QAChG,gGAAgG;QAChG,gEAAgE;QAChE,EAAE;QACF,8FAA8F;QAC9F,6FAA6F;QAC7F,4FAA4F;QAC5F,0FAA0F;QAC1F,4FAA4F;QAC5F,0FAA0F;QAC1F,6FAA6F;QAC7F,4FAA4F;QAC5F,sCAAsC;QACtC,MAAM,aAAa,GAClB,kGAAkG;YAClG,iCAAiC,mBAAmB,8CAA8C;YAClG,mGAAmG;YACnG,uDAAuD,mBAAmB,uBAAuB;YACjG,iGAAiG;YACjG,kGAAkG;YAClG,iGAAiG;YACjG,qGAAqG;YACrG,qGAAqG,CAAC;QACvG,2FAA2F;QAC3F,8FAA8F;QAC9F,+DAA+D;QAC/D,MAAM,oBAAoB,GAAG,gBAAgB,IAAI,CAAC,kBAAkB,KAAK,SAAS,IAAI,kBAAkB,KAAK,SAAS,CAAC;YACtH,CAAC,CAAC,uFAAuF;gBACzF,wDAAwD,MAAM,CAAC,kBAAkB,CAAC,IAAI;gBACtF,kCAAkC,MAAM,CAAC,kBAAkB,CAAC,GAAG;YAC/D,CAAC,CAAC,EAAE,CAAC;QACN,MAAM,gBAAgB,GAAG,gBAAgB;YACxC,CAAC,CAAC,qGAAqG;gBACvG,SAAS,oBAAoB,qCAAqC;gBAClE,kCAAkC,8BAA8B,sCAAsC;gBACtG,kBAAkB,4BAA4B,+CAA+C;gBAC7F,2EAA2E;gBAC3E,uFAAuF;gBACvF,mGAAmG;gBACnG,oGAAoG;gBACpG,8FAA8F;gBAC9F,8BAA8B,WAAW,2DAA2D;gBACpG,OAAO;YACP,CAAC,CAAC,EAAE,CAAC;QACN,2FAA2F;QAC3F,8FAA8F;QAC9F,+FAA+F;QAC/F,2FAA2F;QAC3F,iGAAiG;QACjG,MAAM,eAAe,GACpB,qGAAqG;YACrG,iGAAiG;YACjG,6FAA6F;YAC7F,yFAAyF;YACzF,gGAAgG;YAChG,+FAA+F;YAC/F,oGAAoG;YACpG,+FAA+F;YAC/F,gGAAgG;YAChG,kGAAkG;YAClG,2EAA2E,CAAC;QAC7E,MAAM,cAAc,GAAG,cAAc;YACpC,CAAC,CAAC,sDAAsD,8BAA8B,iBAAiB;gBACvG,kDAAkD,cAAc,4BAA4B;gBAC5F,GAAG,sBAAsB,oEAAoE;gBAC7F,GAAG,4BAA4B,GAAG,CAAC,uDAAuD;YAC1F,CAAC,CAAC,EAAE,CAAC;QACN,GAAG,CAAC,wBAAwB,EAAE;YAC7B,WAAW;YACX,8BAA8B;YAC9B,kBAAkB,EAAE,mBAAmB;YACvC,kBAAkB;YAClB,0FAA0F;YAC1F,kDAAkD;YAClD,kBAAkB;YAClB,gBAAgB;YAChB,cAAc;YACd,sBAAsB;YACtB,4BAA4B;YAC5B,OAAO,EAAE,IAAI,GAAG,gBAAgB,GAAG,cAAc,GAAG,eAAe,GAAG,aAAa;SACnF,CAAC,CAAC;IACJ,CAAC;IAED,OAAO;QACN,sBAAsB,EAAE,OAAO,CAAC,aAAa,EAAE,sBAAsB,IAAI,gCAAgC;QACzG,uBAAuB,EAAE,IAAI;QAC7B,sBAAsB;QACtB,oBAAoB,EAAE,OAAO,CAAC,aAAa,EAAE,aAAa,IAAI,IAAI;QAClE,oBAAoB,EAAE,OAAO,CAAC,aAAa,EAAE,aAAa,IAAI,GAAG;QACjE,2FAA2F;QAC3F,oFAAoF;QACpF,4BAA4B,EAAE,OAAO,CAAC,aAAa,EAAE,4BAA4B,IAAI,KAAK;QAC1F,yFAAyF;QACzF,yCAAyC;QACzC,uBAAuB,EAAE,OAAO,CAAC,aAAa,EAAE,uBAAuB;QACvE,wBAAwB,EAAE,KAAK;QAC/B,8FAA8F;QAC9F,gGAAgG;QAChG,qFAAqF;QACrF,WAAW;QACX,+FAA+F;QAC/F,8FAA8F;QAC9F,0EAA0E;QAC1E,kBAAkB,EAAE,kBAAkB,IAAI,sBAAsB;QAChE,+FAA+F;QAC/F,8FAA8F;QAC9F,4FAA4F;QAC5F,mEAAmE;QACnE,8BAA8B;KAC9B,CAAC;AACH,CAAC"}
|
|
@@ -104,8 +104,10 @@ export declare function quorumSize(responderCount: number, simpleMajorityThresho
|
|
|
104
104
|
*
|
|
105
105
|
* An unconfigured node resolves this to its `clusterSize` (default 10), so the floor of two binds and
|
|
106
106
|
* a shrunken view gains nothing. The escape hatch for a real two-node deployment is one explicit
|
|
107
|
-
* operator declaration
|
|
108
|
-
*
|
|
107
|
+
* operator declaration, any of three: `clusterPolicy.repairCorroborationClusterSize: 2`, which moves
|
|
108
|
+
* only this yardstick; `clusterPolicy.assumedClusterSize: 2`, which also raises the membership
|
|
109
|
+
* admission gate's low-confidence write floor; or an honest `clusterSize: 2`. Only the last drops the
|
|
110
|
+
* replication factor.
|
|
109
111
|
*
|
|
110
112
|
* Shared by both restoration paths so the two can never drift apart on the rule that decides how
|
|
111
113
|
* much trust a lone peer gets.
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"quorum-restore.d.ts","sourceRoot":"","sources":["../../../src/cluster/quorum-restore.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,qBAAqB,CAAC;AAClD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAE1D;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAEH,iEAAiE;AACjE,MAAM,WAAW,QAAQ;IACxB,wFAAwF;IACxF,MAAM,EAAE,MAAM,CAAC;IACf,GAAG,EAAE,MAAM,CAAC;IACZ,QAAQ,EAAE,MAAM,CAAC;IACjB;;;;;;OAMG;IACH,KAAK,CAAC,EAAE,gBAAgB,CAAC;IACzB;;;;;OAKG;IACH,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB;;;;;;;;OAQG;IACH,oBAAoB,CAAC,EAAE,MAAM,CAAC;CAC9B;AAED,wFAAwF;AACxF,MAAM,WAAW,SAAS;IACzB,GAAG,EAAE,MAAM,CAAC;IACZ,QAAQ,EAAE,MAAM,CAAC;IACjB;;;;OAIG;IACH,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,yFAAyF;IACzF,SAAS,CAAC,EAAE,IAAI,CAAC;CACjB;AAED;;;;GAIG;AACH,eAAO,MAAM,mBAAmB,IAAI,CAAC;AAErC;;;;;;;;;;;;;GAaG;AACH,wBAAgB,UAAU,CACzB,cAAc,EAAE,MAAM,EACtB,uBAAuB,EAAE,MAAM,EAC/B,oBAAoB,GAAE,MAAiC,GACrD,MAAM,CAGR;AAED
|
|
1
|
+
{"version":3,"file":"quorum-restore.d.ts","sourceRoot":"","sources":["../../../src/cluster/quorum-restore.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,qBAAqB,CAAC;AAClD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAE1D;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAEH,iEAAiE;AACjE,MAAM,WAAW,QAAQ;IACxB,wFAAwF;IACxF,MAAM,EAAE,MAAM,CAAC;IACf,GAAG,EAAE,MAAM,CAAC;IACZ,QAAQ,EAAE,MAAM,CAAC;IACjB;;;;;;OAMG;IACH,KAAK,CAAC,EAAE,gBAAgB,CAAC;IACzB;;;;;OAKG;IACH,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB;;;;;;;;OAQG;IACH,oBAAoB,CAAC,EAAE,MAAM,CAAC;CAC9B;AAED,wFAAwF;AACxF,MAAM,WAAW,SAAS;IACzB,GAAG,EAAE,MAAM,CAAC;IACZ,QAAQ,EAAE,MAAM,CAAC;IACjB;;;;OAIG;IACH,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,yFAAyF;IACzF,SAAS,CAAC,EAAE,IAAI,CAAC;CACjB;AAED;;;;GAIG;AACH,eAAO,MAAM,mBAAmB,IAAI,CAAC;AAErC;;;;;;;;;;;;;GAaG;AACH,wBAAgB,UAAU,CACzB,cAAc,EAAE,MAAM,EACtB,uBAAuB,EAAE,MAAM,EAC/B,oBAAoB,GAAE,MAAiC,GACrD,MAAM,CAGR;AAED;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,wBAAgB,oBAAoB,CAAC,eAAe,EAAE,MAAM,EAAE,8BAA8B,EAAE,MAAM,GAAG,MAAM,CAE5G;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6CG;AACH,wBAAgB,eAAe,CAC9B,MAAM,EAAE,QAAQ,EAAE,EAClB,uBAAuB,EAAE,MAAM,EAC/B,oBAAoB,CAAC,EAAE,MAAM,GAC3B,SAAS,GAAG,SAAS,CA8DvB;AAiDD;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,QAAQ,EAAE,GAAG;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,EAAE,CAAA;CAAE,GAAG,SAAS,CAM1G;AAED;wDACwD;AACxD,MAAM,WAAW,kBAAkB;IAClC,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd;;;;OAIG;IACH,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB;;;;;OAKG;IACH,oBAAoB,CAAC,EAAE,MAAM,CAAC;CAC9B;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAsCG;AACH,wBAAgB,iBAAiB,CAChC,UAAU,EAAE,kBAAkB,EAAE,EAChC,uBAAuB,EAAE,MAAM,EAC/B,oBAAoB,CAAC,EAAE,MAAM,GAC3B;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAAG,SAAS,CAmD7C;AAmBD;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAgB,4BAA4B,CAAC,UAAU,EAAE,kBAAkB,EAAE,GAAG;IAAE,MAAM,EAAE,MAAM,EAAE,CAAA;CAAE,GAAG,SAAS,CAK/G"}
|
|
@@ -37,8 +37,10 @@ export function quorumSize(responderCount, simpleMajorityThreshold, corroborator
|
|
|
37
37
|
*
|
|
38
38
|
* An unconfigured node resolves this to its `clusterSize` (default 10), so the floor of two binds and
|
|
39
39
|
* a shrunken view gains nothing. The escape hatch for a real two-node deployment is one explicit
|
|
40
|
-
* operator declaration
|
|
41
|
-
*
|
|
40
|
+
* operator declaration, any of three: `clusterPolicy.repairCorroborationClusterSize: 2`, which moves
|
|
41
|
+
* only this yardstick; `clusterPolicy.assumedClusterSize: 2`, which also raises the membership
|
|
42
|
+
* admission gate's low-confidence write floor; or an honest `clusterSize: 2`. Only the last drops the
|
|
43
|
+
* replication factor.
|
|
42
44
|
*
|
|
43
45
|
* Shared by both restoration paths so the two can never drift apart on the rule that decides how
|
|
44
46
|
* much trust a lone peer gets.
|