@prismshadow/penguin-server 0.2.11 → 0.2.13

package/dist/initial-password.js

@@ -3,6 +3,7 @@ import {
   initialAdminPasswordPath,
   renderFirstLoginNotice
 } from "./chunk-K4ZSUT72.js";
+import "./chunk-B5IP37ZQ.js";
 export {
   clearInitialAdminPassword,
   initialAdminPasswordPath,

package/dist/lock.js

@@ -7,6 +7,7 @@ import {
   releaseServerLock,
   serverLockPath
 } from "./chunk-GOO5VUAB.js";
+import "./chunk-B5IP37ZQ.js";
 export {
   acquireServerLock,
   isServerLockAlive,

package/dist/machine-status.js

@@ -6,7 +6,8 @@ import {
 } from "./chunk-GOO5VUAB.js";
 import {
   openDatabaseReadOnly
-} from "./chunk-ADZJYDNC.js";
+} from "./chunk-A3QANMU5.js";
+import "./chunk-B5IP37ZQ.js";
 
 // src/machine-status.ts
 import fs from "fs";

package/dist/machine-status.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/machine-status.ts"],"sourcesContent":["/**\n * \"Is a server running on this data root, and which machine is this?\" — answered from the\n * root itself, by whoever can read it, with no server needed and safely while one runs (the\n * same terms as `penguin auth token`, which writes to this database live).\n *\n * Exported as `@prismshadow/penguin-server/machine-status` for `penguin server status`, which\n * is how a CONTROLLER asks: it runs that one command over ssh and reads back JSON. The\n * question used to be asked in shell — `cat` the lock, `sed` the pid out of it, `kill -0`,\n * `cat` a second file for the id — which meant a parser on this side for a format with no\n * definition, and no answer at all from a Windows remote, `kill -0` having no cmd.exe\n * equivalent. Asking the machine's own CLI moves both problems to the side that has Node.\n *\n * Liveness is the local lock's own test (pid alive AND the port accepting), which the shell\n * version could not do: it only had `kill -0`, and a recycled pid reads as a live server.\n */\nimport fs from \"node:fs\";\nimport path from \"node:path\";\nimport { openDatabaseReadOnly } from \"./db/database.js\";\nimport { MachinesRepo } from \"./db/repos/machines.js\";\nimport { liveServerLock } from \"./lock.js\";\n\n/** What `penguin server status` prints, as one line of JSON. */\nexport interface MachineStatus {\n  /** A server owns this root right now: its pid is alive and its port answers. */\n  running: boolean;\n  /** The live server's port and pid; null when nothing is running. */\n  port: number | null;\n  pid: number | null;\n  /**\n   * This machine's own id, or null when it has none yet — the id is minted the first time a\n   * server boots here, so an installed-but-never-run machine legitimately has none, and\n   * saying null is better than minting one to answer a question.\n   */\n  machineId: string | null;\n}\n\n/** `dbPath` may be elsewhere (PENGUIN_WEB_DB), as everywhere else that reads this database. */\nexport async function readMachineStatus(\n  root: string,\n  dbPath: string = path.join(root, \"web.db\"),\n): Promise<MachineStatus> {\n  const lock = await liveServerLock(root);\n  return {\n    running: lock !== null,\n    port: lock?.port ?? null,\n    pid: lock?.pid ?? null,\n    machineId: readMachineId(dbPath),\n  };\n}\n\n/**\n * Reads the id and changes nothing — and cannot: the connection is read-only.\n *\n * `openDatabaseReadOnly`, never `openDatabase`: the latter is the SCHEMA path — CREATE TABLE,\n * the ensureColumn list, an ALTER with a backfill, and the migrations. A controller asking a\n * machine what it is would then reshape that machine's database under the prepared statements\n * of the server running there, on a build that may be older than this question. A read-only\n * open makes that impossible rather than merely not done.\n *\n * Existence-checked first, because opening would create the file (and its directory) on a\n * root no server has ever used — a probe must not leave a data root behind it. A machine\n * whose database predates the `machine` table answers with no id rather than an error: it is\n * one that has never run a build that mints one, which is the truth about it.\n */\nfunction readMachineId(dbPath: string): string | null {\n  if (!fs.existsSync(dbPath)) return null;\n  const db = openDatabaseReadOnly(dbPath);\n  try {\n    return new MachinesRepo(db).peekOwnId();\n  } catch {\n    return null;\n  } finally {\n    db.close();\n  }\n}\n"],"mappings":";;;;;;;;;;;AAeA,OAAO,QAAQ;AACf,OAAO,UAAU;AAqBjB,eAAsB,kBACpB,MACA,SAAiB,KAAK,KAAK,MAAM,QAAQ,GACjB;AACxB,QAAM,OAAO,MAAM,eAAe,IAAI;AACtC,SAAO;AAAA,IACL,SAAS,SAAS;AAAA,IAClB,MAAM,MAAM,QAAQ;AAAA,IACpB,KAAK,MAAM,OAAO;AAAA,IAClB,WAAW,cAAc,MAAM;AAAA,EACjC;AACF;AAgBA,SAAS,cAAc,QAA+B;AACpD,MAAI,CAAC,GAAG,WAAW,MAAM,EAAG,QAAO;AACnC,QAAM,KAAK,qBAAqB,MAAM;AACtC,MAAI;AACF,WAAO,IAAI,aAAa,EAAE,EAAE,UAAU;AAAA,EACxC,QAAQ;AACN,WAAO;AAAA,EACT,UAAE;AACA,OAAG,MAAM;AAAA,EACX;AACF;","names":[]}
+{"version":3,"sources":["../src/machine-status.ts"],"sourcesContent":["/**\n * \"Is a server running on this data root, and which machine is this?\" — answered from the\n * root itself, by whoever can read it, with no server needed and safely while one runs (the\n * same terms as `penguin auth token`, which writes to this database live).\n *\n * Exported as `@prismshadow/penguin-server/machine-status` for `penguin server status`, which\n * is how a CONTROLLER asks: it runs that one command over ssh and reads back JSON. The\n * question used to be asked in shell — `cat` the lock, `sed` the pid out of it, `kill -0`,\n * `cat` a second file for the id — which meant a parser on this side for a format with no\n * definition, and no answer at all from a Windows remote, `kill -0` having no cmd.exe\n * equivalent. Asking the machine's own CLI moves both problems to the side that has Node.\n *\n * Liveness is the local lock's own test (pid alive AND the port accepting), which the shell\n * version could not do: it only had `kill -0`, and a recycled pid reads as a live server.\n */\nimport fs from \"node:fs\";\nimport path from \"node:path\";\nimport { openDatabaseReadOnly } from \"./db/database.js\";\nimport { MachinesRepo } from \"./db/repos/machines.js\";\nimport { liveServerLock } from \"./lock.js\";\n\n/** What `penguin server status` prints, as one line of JSON. */\nexport interface MachineStatus {\n  /** A server owns this root right now: its pid is alive and its port answers. */\n  running: boolean;\n  /** The live server's port and pid; null when nothing is running. */\n  port: number | null;\n  pid: number | null;\n  /**\n   * This machine's own id, or null when it has none yet — the id is minted the first time a\n   * server boots here, so an installed-but-never-run machine legitimately has none, and\n   * saying null is better than minting one to answer a question.\n   */\n  machineId: string | null;\n}\n\n/** `dbPath` may be elsewhere (PENGUIN_WEB_DB), as everywhere else that reads this database. */\nexport async function readMachineStatus(\n  root: string,\n  dbPath: string = path.join(root, \"web.db\"),\n): Promise<MachineStatus> {\n  const lock = await liveServerLock(root);\n  return {\n    running: lock !== null,\n    port: lock?.port ?? null,\n    pid: lock?.pid ?? null,\n    machineId: readMachineId(dbPath),\n  };\n}\n\n/**\n * Reads the id and changes nothing — and cannot: the connection is read-only.\n *\n * `openDatabaseReadOnly`, never `openDatabase`: the latter is the SCHEMA path — CREATE TABLE,\n * the ensureColumn list, an ALTER with a backfill, and the migrations. A controller asking a\n * machine what it is would then reshape that machine's database under the prepared statements\n * of the server running there, on a build that may be older than this question. A read-only\n * open makes that impossible rather than merely not done.\n *\n * Existence-checked first, because opening would create the file (and its directory) on a\n * root no server has ever used — a probe must not leave a data root behind it. A machine\n * whose database predates the `machine` table answers with no id rather than an error: it is\n * one that has never run a build that mints one, which is the truth about it.\n */\nfunction readMachineId(dbPath: string): string | null {\n  if (!fs.existsSync(dbPath)) return null;\n  const db = openDatabaseReadOnly(dbPath);\n  try {\n    return new MachinesRepo(db).peekOwnId();\n  } catch {\n    return null;\n  } finally {\n    db.close();\n  }\n}\n"],"mappings":";;;;;;;;;;;;AAeA,OAAO,QAAQ;AACf,OAAO,UAAU;AAqBjB,eAAsB,kBACpB,MACA,SAAiB,KAAK,KAAK,MAAM,QAAQ,GACjB;AACxB,QAAM,OAAO,MAAM,eAAe,IAAI;AACtC,SAAO;AAAA,IACL,SAAS,SAAS;AAAA,IAClB,MAAM,MAAM,QAAQ;AAAA,IACpB,KAAK,MAAM,OAAO;AAAA,IAClB,WAAW,cAAc,MAAM;AAAA,EACjC;AACF;AAgBA,SAAS,cAAc,QAA+B;AACpD,MAAI,CAAC,GAAG,WAAW,MAAM,EAAG,QAAO;AACnC,QAAM,KAAK,qBAAqB,MAAM;AACtC,MAAI;AACF,WAAO,IAAI,aAAa,EAAE,EAAE,UAAU;AAAA,EACxC,QAAQ;AACN,WAAO;AAAA,EACT,UAAE;AACA,OAAG,MAAM;AAAA,EACX;AACF;","names":[]}