@serve.zone/cli 33.10.0 → 33.11.0

package/dist_ts_cliclient/classes.cliclient.d.ts

@@ -14,5 +14,12 @@ export declare class CliClient {
      * the cluster, the generation, the size, the SHA-256 and the audit receipt, never the bearer.
      */
     exportRelayAuthorization(requestArg: plugins.servezoneInterfaces.data.IClusterRelayAuthorizationExportRequest, outputPathArg: string): Promise<void>;
+    /**
+     * Stores the Corestore control token while it is still exactly at `expectedArg` and prints the
+     * state and the receipt the set produced, never the token. The token is the caller's to wipe.
+     */
+    setCorestoreControlToken(expectedArg: plugins.servezoneInterfaces.data.TCorestoreControlTokenState, tokenArg: Uint8Array): Promise<void>;
+    /** Prints whether Cloudly holds the Corestore control token, its revision and its receipts. */
+    getCorestoreControlTokenState(): Promise<void>;
     getGatewayStatus(): Promise<void>;
 }

package/dist_ts_cliclient/classes.cliclient.js

@@ -1,6 +1,7 @@
 import * as plugins from './plugins.js';
 import { CloudlyApiClient } from '@serve.zone/api';
 import { exportRelayAuthorizationToFile } from './relayauthorization.js';
+import { getCorestoreControlTokenState, setCorestoreControlToken } from './corestorecontroltoken.js';
 export class CliClient {
     constructor(cloudlyApiClientArg) {
         this.cloudlyApiClient = cloudlyApiClientArg;
@@ -28,9 +29,21 @@ export class CliClient {
         const output = await exportRelayAuthorizationToFile(this.cloudlyApiClient, requestArg, outputPathArg);
         console.log(JSON.stringify({ ok: true, command: 'relay export-authorization', ...output }));
     }
+    /**
+     * Stores the Corestore control token while it is still exactly at `expectedArg` and prints the
+     * state and the receipt the set produced, never the token. The token is the caller's to wipe.
+     */
+    async setCorestoreControlToken(expectedArg, tokenArg) {
+        const output = await setCorestoreControlToken(this.cloudlyApiClient, expectedArg, tokenArg);
+        console.log(JSON.stringify(output));
+    }
+    /** Prints whether Cloudly holds the Corestore control token, its revision and its receipts. */
+    async getCorestoreControlTokenState() {
+        console.log(JSON.stringify(await getCorestoreControlTokenState(this.cloudlyApiClient)));
+    }
     async getGatewayStatus() {
         const { state } = await this.cloudlyApiClient.settings.getExternalGatewayEnrollmentState();
         console.log(JSON.stringify(state, null, 2));
     }
 }
-//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiY2xhc3Nlcy5jbGljbGllbnQuanMiLCJzb3VyY2VSb290IjoiIiwic291cmNlcyI6WyIuLi90c19jbGljbGllbnQvY2xhc3Nlcy5jbGljbGllbnQudHMiXSwibmFtZXMiOltdLCJtYXBwaW5ncyI6IkFBQUEsT0FBTyxLQUFLLE9BQU8sTUFBTSxjQUFjLENBQUM7QUFDeEMsT0FBTyxFQUFFLGdCQUFnQixFQUFFLE1BQU0saUJBQWlCLENBQUM7QUFDbkQsT0FBTyxFQUFFLDhCQUE4QixFQUFFLE1BQU0seUJBQXlCLENBQUM7QUFFekUsTUFBTSxPQUFPLFNBQVM7SUFHcEIsWUFBWSxtQkFBcUM7UUFDL0MsSUFBSSxDQUFDLGdCQUFnQixHQUFHLG1CQUFtQixDQUFDO0lBQzlDLENBQUM7SUFFTSxLQUFLLENBQUMsV0FBVztRQUN0QixNQUFNLFFBQVEsR0FBRyxNQUFNLElBQUksQ0FBQyxnQkFBZ0IsQ0FBQyxPQUFPLENBQUMsV0FBVyxFQUFFLENBQUM7UUFDbkUsT0FBTyxDQUFDLEdBQUcsQ0FBQyxRQUFRLENBQUMsQ0FBQztJQUN4QixDQUFDO0lBRUQ7OztPQUdHO0lBQ0ksS0FBSyxDQUFDLGdCQUFnQixDQUMzQixTQUErRCxFQUMvRCxpQkFBNkI7UUFFN0IsTUFBTSxFQUFFLEtBQUssRUFBRSxHQUFHLE1BQU0sSUFBSSxDQUFDLGdCQUFnQixDQUFDLFFBQVEsQ0FBQyxrQ0FBa0MsQ0FBQztZQUN4RixNQUFNLEVBQUUsU0FBUztZQUNqQixjQUFjLEVBQUUsaUJBQWlCO1NBQ2xDLENBQUMsQ0FBQztRQUNILE9BQU8sQ0FBQyxHQUFHLENBQUMsSUFBSSxDQUFDLFNBQVMsQ0FBQyxLQUFLLEVBQUUsSUFBSSxFQUFFLENBQUMsQ0FBQyxDQUFDLENBQUM7SUFDOUMsQ0FBQztJQUVEOzs7T0FHRztJQUNJLEtBQUssQ0FBQyx3QkFBd0IsQ0FDbkMsVUFBb0YsRUFDcEYsYUFBcUI7UUFFckIsTUFBTSxNQUFNLEdBQUcsTUFBTSw4QkFBOEIsQ0FDakQsSUFBSSxDQUFDLGdCQUFnQixFQUFFLFVBQVUsRUFBRSxhQUFhLENBQUMsQ0FBQztRQUNwRCxPQUFPLENBQUMsR0FBRyxDQUFDLElBQUksQ0FBQyxTQUFTLENBQUMsRUFBRSxFQUFFLEVBQUUsSUFBSSxFQUFFLE9BQU8sRUFBRSw0QkFBNEIsRUFBRSxHQUFHLE1BQU0sRUFBRSxDQUFDLENBQUMsQ0FBQztJQUM5RixDQUFDO0lBRU0sS0FBSyxDQUFDLGdCQUFnQjtRQUMzQixNQUFNLEVBQUUsS0FBSyxFQUFFLEdBQUcsTUFBTSxJQUFJLENBQUMsZ0JBQWdCLENBQUMsUUFBUSxDQUFDLGlDQUFpQyxFQUFFLENBQUM7UUFDM0YsT0FBTyxDQUFDLEdBQUcsQ0FBQyxJQUFJLENBQUMsU0FBUyxDQUFDLEtBQUssRUFBRSxJQUFJLEVBQUUsQ0FBQyxDQUFDLENBQUMsQ0FBQztJQUM5QyxDQUFDO0NBQ0YifQ==
+//# sourceMappingURL=data:application/json;base64,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

package/dist_ts_cliclient/commands.d.ts

@@ -14,6 +14,12 @@ export type TCliCommand =
     request: plugins.servezoneInterfaces.data.IClusterRelayAuthorizationExportRequest;
     /** A normalized absolute path in a private directory; the file must not exist yet. */
     outputPath: string;
+} | {
+    kind: 'corestore-set-control-token';
+    /** Exactly the state the administrator last read; never a minimum. */
+    expected: plugins.servezoneInterfaces.data.TCorestoreControlTokenState;
+} | {
+    kind: 'corestore-control-token-state';
 };
 export declare const cliUsage: string;
 /**

package/dist_ts_cliclient/commands.js

@@ -7,6 +7,9 @@ export const cliUsage = [
     '    The dcrouter admin token is read from stdin, never from arguments or the environment.',
     '  servezone relay export-authorization --cluster-id <id> --expected-generation <n> --output <absolute path>',
     '    Writes the relay bearer to a new 0600 file in a directory only you can write; never to stdout.',
+    '  servezone corestore set-control-token --stdin --expect absent|<revision>',
+    '    The Corestore control token is read from stdin, never from arguments or the environment.',
+    '  servezone corestore control-token-state',
 ].join('\n');
 /**
  * An invocation the CLI does not run. It never quotes what it was given, because an argument may
@@ -42,6 +45,8 @@ export const parseCliCommand = (argsArg) => {
     const [group, action, ...rest] = argsArg;
     if (group === 'relay')
         return parseRelayCommand(action, rest);
+    if (group === 'corestore')
+        return parseCorestoreCommand(action, rest);
     requireUsage(group === 'gateway');
     if (action === 'status') {
         requireUsage(rest.length === 0);
@@ -54,19 +59,49 @@ export const parseCliCommand = (argsArg) => {
         target: { gatewayUrl: options['--gateway-url'], gatewayClientId: options['--client-id'] },
     };
 };
+/** A positive integer without leading zeros, as a generation or a revision is named. */
+const parseCounter = (valueArg) => {
+    requireUsage(/^[1-9][0-9]{0,15}$/.test(valueArg) && Number.isSafeInteger(Number(valueArg)));
+    return Number(valueArg);
+};
 /** `relay export-authorization`: the cluster, the exact generation and a normalized absolute output. */
 const parseRelayCommand = (actionArg, restArg) => {
     requireUsage(actionArg === 'export-authorization');
     const options = parseOptions(restArg, ['--cluster-id', '--expected-generation', '--output']);
-    const generation = options['--expected-generation'];
-    requireUsage(/^[1-9][0-9]{0,15}$/.test(generation) && Number.isSafeInteger(Number(generation)));
+    const generation = parseCounter(options['--expected-generation']);
     const outputPath = options['--output'];
     requireUsage(plugins.path.isAbsolute(outputPath) && plugins.path.normalize(outputPath) === outputPath
         && !outputPath.endsWith(plugins.path.sep));
     return {
         kind: 'relay-export-authorization',
-        request: { clusterId: options['--cluster-id'], expectedGeneration: Number(generation) },
+        request: { clusterId: options['--cluster-id'], expectedGeneration: generation },
         outputPath,
     };
 };
-//# sourceMappingURL=data:application/json;base64,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
+/**
+ * `corestore set-control-token --stdin --expect absent|<revision>` and
+ * `corestore control-token-state`.
+ *
+ * `--stdin` names where the token comes from, so no invocation reads it from anywhere else, and
+ * `--expect` is the state `control-token-state` answered: `absent`, or the stored revision.
+ */
+const parseCorestoreCommand = (actionArg, restArg) => {
+    if (actionArg === 'control-token-state') {
+        requireUsage(restArg.length === 0);
+        return { kind: 'corestore-control-token-state' };
+    }
+    requireUsage(actionArg === 'set-control-token');
+    // `--stdin` is a flag in an option's place, either before or after `--expect <value>`.
+    requireUsage(restArg.length === 3);
+    const stdinIndex = restArg[0] === '--stdin' ? 0 : 2;
+    requireUsage(restArg[stdinIndex] === '--stdin');
+    const options = parseOptions(restArg.filter((_argArg, indexArg) => indexArg !== stdinIndex), ['--expect']);
+    const expected = options['--expect'];
+    return {
+        kind: 'corestore-set-control-token',
+        expected: expected === 'absent'
+            ? { state: 'absent' }
+            : { state: 'present', revision: parseCounter(expected) },
+    };
+};
+//# sourceMappingURL=data:application/json;base64,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

package/dist_ts_cliclient/corestorecontroltoken.d.ts

@@ -0,0 +1,33 @@
+import * as plugins from './plugins.js';
+type TCorestoreControlTokenSetRefusal = plugins.servezoneInterfaces.data.TCorestoreControlTokenSetRefusal;
+/** Cloudly did not store the token, for one of the contract's refusals, which it names. */
+export declare class CorestoreControlTokenSetRefusedError extends Error {
+    readonly refusal: TCorestoreControlTokenSetRefusal;
+    constructor(refusal: TCorestoreControlTokenSetRefusal);
+}
+/**
+ * The contract refusal an error is, or `undefined` for every other error.
+ *
+ * Cloudly answers a refusal by its name and nothing else, so the name is the whole of the error's
+ * message; any other message, Cloudly's one denial text included, is not a refusal.
+ */
+export declare const nameCorestoreControlTokenSetRefusal: (errorArg: unknown) => TCorestoreControlTokenSetRefusal | undefined;
+/** What the CLI prints about a stored token: the state it produced and its receipt, never the token. */
+export interface ICorestoreControlTokenSetOutput extends plugins.servezoneInterfaces.data.ICorestoreControlTokenSetResult {
+    ok: true;
+    command: 'corestore set-control-token';
+}
+/** What the CLI prints about the token's state: the state and its value-free receipts. */
+export interface ICorestoreControlTokenStateOutput extends plugins.servezoneInterfaces.data.ICorestoreControlTokenStateRead {
+    ok: true;
+    command: 'corestore control-token-state';
+}
+/**
+ * Stores the token through the API client while it is still exactly at `expected`, answering only
+ * the state and the receipt. The token bytes are the caller's to wipe; the text the request needs
+ * is decoded from them here and never printed, logged or put into an error.
+ */
+export declare const setCorestoreControlToken: (apiClientArg: plugins.servezoneApi.CloudlyApiClient, expectedArg: plugins.servezoneInterfaces.data.TCorestoreControlTokenState, tokenArg: Uint8Array) => Promise<ICorestoreControlTokenSetOutput>;
+/** Whether Cloudly holds the token, at which revision, and its receipts, oldest first. */
+export declare const getCorestoreControlTokenState: (apiClientArg: plugins.servezoneApi.CloudlyApiClient) => Promise<ICorestoreControlTokenStateOutput>;
+export {};

package/dist_ts_cliclient/corestorecontroltoken.js

@@ -0,0 +1,48 @@
+import * as plugins from './plugins.js';
+import { decodeCorestoreControlToken } from './tokeninput.js';
+/** Cloudly did not store the token, for one of the contract's refusals, which it names. */
+export class CorestoreControlTokenSetRefusedError extends Error {
+    constructor(refusal) {
+        super(`The Corestore control token was not stored: ${refusal}.`);
+        this.refusal = refusal;
+        this.name = 'CorestoreControlTokenSetRefusedError';
+    }
+}
+/**
+ * The contract refusal an error is, or `undefined` for every other error.
+ *
+ * Cloudly answers a refusal by its name and nothing else, so the name is the whole of the error's
+ * message; any other message, Cloudly's one denial text included, is not a refusal.
+ */
+export const nameCorestoreControlTokenSetRefusal = (errorArg) => {
+    if (!(errorArg instanceof Error))
+        return undefined;
+    return plugins.servezoneInterfaces.data.corestoreControlTokenSetRefusals
+        .find((refusalArg) => refusalArg === errorArg.message);
+};
+/**
+ * Stores the token through the API client while it is still exactly at `expected`, answering only
+ * the state and the receipt. The token bytes are the caller's to wipe; the text the request needs
+ * is decoded from them here and never printed, logged or put into an error.
+ */
+export const setCorestoreControlToken = async (apiClientArg, expectedArg, tokenArg) => {
+    try {
+        const { state, receipt } = await apiClientArg.platform.setCorestoreControlToken({
+            token: decodeCorestoreControlToken(tokenArg),
+            expected: expectedArg,
+        });
+        return { ok: true, command: 'corestore set-control-token', state, receipt };
+    }
+    catch (error) {
+        const refusal = nameCorestoreControlTokenSetRefusal(error);
+        if (refusal !== undefined)
+            throw new CorestoreControlTokenSetRefusedError(refusal);
+        throw error;
+    }
+};
+/** Whether Cloudly holds the token, at which revision, and its receipts, oldest first. */
+export const getCorestoreControlTokenState = async (apiClientArg) => {
+    const { state, receipts } = await apiClientArg.platform.getCorestoreControlTokenState();
+    return { ok: true, command: 'corestore control-token-state', state, receipts };
+};
+//# sourceMappingURL=data:application/json;base64,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

package/dist_ts_cliclient/index.d.ts

@@ -1,4 +1,5 @@
 export { CliUsageError, parseCliCommand, type TCliCommand } from './commands.js';
 export { RelayAuthorizationOutputError, exportRelayAuthorizationToFile, requirePrivateOutputDirectory, writeRelayAuthorization, type IRelayAuthorizationOutput, type TRelayAuthorizationOutputRefusal, } from './relayauthorization.js';
-export { BootstrapTokenInputError, readBootstrapTokenInput, type TBootstrapTokenInputRefusal, } from './tokeninput.js';
+export { BootstrapTokenInputError, CorestoreControlTokenInputError, TokenInputError, readBootstrapTokenInput, readCorestoreControlTokenInput, type TBootstrapTokenInputRefusal, type TTokenInputRefusal, } from './tokeninput.js';
+export { CorestoreControlTokenSetRefusedError, getCorestoreControlTokenState, nameCorestoreControlTokenSetRefusal, setCorestoreControlToken, type ICorestoreControlTokenSetOutput, type ICorestoreControlTokenStateOutput, } from './corestorecontroltoken.js';
 export declare const runCli: () => Promise<void>;

package/dist_ts_cliclient/index.js

@@ -1,20 +1,28 @@
 import * as plugins from './plugins.js';
 import { CliClient } from './classes.cliclient.js';
 import { parseCliCommand } from './commands.js';
-import { readBootstrapTokenInput } from './tokeninput.js';
+import { readBootstrapTokenInput, readCorestoreControlTokenInput } from './tokeninput.js';
 import { requirePrivateOutputDirectory } from './relayauthorization.js';
 export { CliUsageError, parseCliCommand } from './commands.js';
 export { RelayAuthorizationOutputError, exportRelayAuthorizationToFile, requirePrivateOutputDirectory, writeRelayAuthorization, } from './relayauthorization.js';
-export { BootstrapTokenInputError, readBootstrapTokenInput, } from './tokeninput.js';
+export { BootstrapTokenInputError, CorestoreControlTokenInputError, TokenInputError, readBootstrapTokenInput, readCorestoreControlTokenInput, } from './tokeninput.js';
+export { CorestoreControlTokenSetRefusedError, getCorestoreControlTokenState, nameCorestoreControlTokenSetRefusal, setCorestoreControlToken, } from './corestorecontroltoken.js';
+/** Reads the token the command needs from stdin, before anything connects. */
+const readInvocation = async (commandArg) => {
+    if (commandArg.kind === 'gateway-bootstrap') {
+        return { ...commandArg, bootstrapToken: await readBootstrapTokenInput(process.stdin) };
+    }
+    if (commandArg.kind === 'corestore-set-control-token') {
+        return { ...commandArg, controlToken: await readCorestoreControlTokenInput(process.stdin) };
+    }
+    return commandArg;
+};
 export const runCli = async () => {
     // The command and the token are settled before anything connects, so a wrong invocation or a
     // token that could never be one fails without reaching Cloudly.
     let command;
     try {
-        const parsed = parseCliCommand(process.argv.slice(2));
-        command = parsed.kind === 'gateway-bootstrap'
-            ? { ...parsed, bootstrapToken: await readBootstrapTokenInput(process.stdin) }
-            : parsed;
+        command = await readInvocation(parseCliCommand(process.argv.slice(2)));
         // An output the bearer could not be written to fetches no bearer and records no export.
         if (command.kind === 'relay-export-authorization') {
             await requirePrivateOutputDirectory(command.outputPath);
@@ -40,6 +48,12 @@ export const runCli = async () => {
             else if (command.kind === 'relay-export-authorization') {
                 await cliClient.exportRelayAuthorization(command.request, command.outputPath);
             }
+            else if (command.kind === 'corestore-set-control-token') {
+                await cliClient.setCorestoreControlToken(command.expected, command.controlToken);
+            }
+            else if (command.kind === 'corestore-control-token-state') {
+                await cliClient.getCorestoreControlTokenState();
+            }
             else {
                 await cliClient.getGatewayStatus();
             }
@@ -56,6 +70,8 @@ export const runCli = async () => {
     finally {
         if (command.kind === 'gateway-bootstrap')
             command.bootstrapToken.fill(0);
+        if (command.kind === 'corestore-set-control-token')
+            command.controlToken.fill(0);
     }
 };
 /** The API client, started and signed in the way every command of this CLI signs in. */
@@ -91,4 +107,4 @@ const connect = async () => {
     }
     return apiClient;
 };
-//# sourceMappingURL=data:application/json;base64,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
+//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiaW5kZXguanMiLCJzb3VyY2VSb290IjoiIiwic291cmNlcyI6WyIuLi90c19jbGljbGllbnQvaW5kZXgudHMiXSwibmFtZXMiOltdLCJtYXBwaW5ncyI6IkFBQUEsT0FBTyxLQUFLLE9BQU8sTUFBTSxjQUFjLENBQUM7QUFDeEMsT0FBTyxFQUFFLFNBQVMsRUFBRSxNQUFNLHdCQUF3QixDQUFDO0FBQ25ELE9BQU8sRUFBRSxlQUFlLEVBQW9CLE1BQU0sZUFBZSxDQUFDO0FBQ2xFLE9BQU8sRUFBRSx1QkFBdUIsRUFBRSw4QkFBOEIsRUFBRSxNQUFNLGlCQUFpQixDQUFDO0FBQzFGLE9BQU8sRUFBRSw2QkFBNkIsRUFBRSxNQUFNLHlCQUF5QixDQUFDO0FBRXhFLE9BQU8sRUFBRSxhQUFhLEVBQUUsZUFBZSxFQUFvQixNQUFNLGVBQWUsQ0FBQztBQUNqRixPQUFPLEVBQ0wsNkJBQTZCLEVBQzdCLDhCQUE4QixFQUM5Qiw2QkFBNkIsRUFDN0IsdUJBQXVCLEdBR3hCLE1BQU0seUJBQXlCLENBQUM7QUFDakMsT0FBTyxFQUNMLHdCQUF3QixFQUN4QiwrQkFBK0IsRUFDL0IsZUFBZSxFQUNmLHVCQUF1QixFQUN2Qiw4QkFBOEIsR0FHL0IsTUFBTSxpQkFBaUIsQ0FBQztBQUN6QixPQUFPLEVBQ0wsb0NBQW9DLEVBQ3BDLDZCQUE2QixFQUM3QixtQ0FBbUMsRUFDbkMsd0JBQXdCLEdBR3pCLE1BQU0sNEJBQTRCLENBQUM7QUFXcEMsOEVBQThFO0FBQzlFLE1BQU0sY0FBYyxHQUFHLEtBQUssRUFBRSxVQUF1QixFQUEyQixFQUFFO0lBQ2hGLElBQUksVUFBVSxDQUFDLElBQUksS0FBSyxtQkFBbUIsRUFBRSxDQUFDO1FBQzVDLE9BQU8sRUFBRSxHQUFHLFVBQVUsRUFBRSxjQUFjLEVBQUUsTUFBTSx1QkFBdUIsQ0FBQyxPQUFPLENBQUMsS0FBSyxDQUFDLEVBQUUsQ0FBQztJQUN6RixDQUFDO0lBQ0QsSUFBSSxVQUFVLENBQUMsSUFBSSxLQUFLLDZCQUE2QixFQUFFLENBQUM7UUFDdEQsT0FBTyxFQUFFLEdBQUcsVUFBVSxFQUFFLFlBQVksRUFBRSxNQUFNLDhCQUE4QixDQUFDLE9BQU8sQ0FBQyxLQUFLLENBQUMsRUFBRSxDQUFDO0lBQzlGLENBQUM7SUFDRCxPQUFPLFVBQVUsQ0FBQztBQUNwQixDQUFDLENBQUM7QUFFRixNQUFNLENBQUMsTUFBTSxNQUFNLEdBQUcsS0FBSyxJQUFJLEVBQUU7SUFDL0IsNkZBQTZGO0lBQzdGLGdFQUFnRTtJQUNoRSxJQUFJLE9BQXVCLENBQUM7SUFDNUIsSUFBSSxDQUFDO1FBQ0gsT0FBTyxHQUFHLE1BQU0sY0FBYyxDQUFDLGVBQWUsQ0FBQyxPQUFPLENBQUMsSUFBSSxDQUFDLEtBQUssQ0FBQyxDQUFDLENBQUMsQ0FBQyxDQUFDLENBQUM7UUFDdkUsd0ZBQXdGO1FBQ3hGLElBQUksT0FBTyxDQUFDLElBQUksS0FBSyw0QkFBNEIsRUFBRSxDQUFDO1lBQ2xELE1BQU0sNkJBQTZCLENBQUMsT0FBTyxDQUFDLFVBQVUsQ0FBQyxDQUFDO1FBQzFELENBQUM7SUFDSCxDQUFDO0lBQUMsT0FBTyxLQUFLLEVBQUUsQ0FBQztRQUNmLE9BQU8sQ0FBQyxLQUFLLENBQUUsS0FBZSxDQUFDLE9BQU8sQ0FBQyxDQUFDO1FBQ3hDLE9BQU8sQ0FBQyxRQUFRLEdBQUcsQ0FBQyxDQUFDO1FBQ3JCLE9BQU87SUFDVCxDQUFDO0lBRUQsSUFBSSxDQUFDO1FBQ0gsTUFBTSxTQUFTLEdBQUcsTUFBTSxPQUFPLEVBQUUsQ0FBQztRQUNsQyxNQUFNLFNBQVMsR0FBRyxJQUFJLFNBQVMsQ0FBQyxTQUFTLENBQUMsQ0FBQztRQUMzQyxJQUFJLE9BQU8sQ0FBQyxJQUFJLEtBQUssVUFBVSxFQUFFLENBQUM7WUFDaEMseUVBQXlFO1lBQ3pFLE1BQU0sU0FBUyxDQUFDLFdBQVcsRUFBRSxDQUFDO1lBQzlCLE9BQU87UUFDVCxDQUFDO1FBQ0QsSUFBSSxDQUFDO1lBQ0gsSUFBSSxPQUFPLENBQUMsSUFBSSxLQUFLLG1CQUFtQixFQUFFLENBQUM7Z0JBQ3pDLE1BQU0sU0FBUyxDQUFDLGdCQUFnQixDQUFDLE9BQU8sQ0FBQyxNQUFNLEVBQUUsT0FBTyxDQUFDLGNBQWMsQ0FBQyxDQUFDO1lBQzNFLENBQUM7aUJBQU0sSUFBSSxPQUFPLENBQUMsSUFBSSxLQUFLLDRCQUE0QixFQUFFLENBQUM7Z0JBQ3pELE1BQU0sU0FBUyxDQUFDLHdCQUF3QixDQUFDLE9BQU8sQ0FBQyxPQUFPLEVBQUUsT0FBTyxDQUFDLFVBQVUsQ0FBQyxDQUFDO1lBQ2hGLENBQUM7aUJBQU0sSUFBSSxPQUFPLENBQUMsSUFBSSxLQUFLLDZCQUE2QixFQUFFLENBQUM7Z0JBQzFELE1BQU0sU0FBUyxDQUFDLHdCQUF3QixDQUFDLE9BQU8sQ0FBQyxRQUFRLEVBQUUsT0FBTyxDQUFDLFlBQVksQ0FBQyxDQUFDO1lBQ25GLENBQUM7aUJBQU0sSUFBSSxPQUFPLENBQUMsSUFBSSxLQUFLLCtCQUErQixFQUFFLENBQUM7Z0JBQzVELE1BQU0sU0FBUyxDQUFDLDZCQUE2QixFQUFFLENBQUM7WUFDbEQsQ0FBQztpQkFBTSxDQUFDO2dCQUNOLE1BQU0sU0FBUyxDQUFDLGdCQUFnQixFQUFFLENBQUM7WUFDckMsQ0FBQztRQUNILENBQUM7UUFBQyxPQUFPLEtBQUssRUFBRSxDQUFDO1lBQ2YsMkVBQTJFO1lBQzNFLE9BQU8sQ0FBQyxLQUFLLENBQUUsS0FBZSxDQUFDLE9BQU8sQ0FBQyxDQUFDO1lBQ3hDLE9BQU8sQ0FBQyxRQUFRLEdBQUcsQ0FBQyxDQUFDO1FBQ3ZCLENBQUM7Z0JBQVMsQ0FBQztZQUNULE1BQU0sU0FBUyxDQUFDLElBQUksRUFBRSxDQUFDO1FBQ3pCLENBQUM7SUFDSCxDQUFDO1lBQVMsQ0FBQztRQUNULElBQUksT0FBTyxDQUFDLElBQUksS0FBSyxtQkFBbUI7WUFBRSxPQUFPLENBQUMsY0FBYyxDQUFDLElBQUksQ0FBQyxDQUFDLENBQUMsQ0FBQztRQUN6RSxJQUFJLE9BQU8sQ0FBQyxJQUFJLEtBQUssNkJBQTZCO1lBQUUsT0FBTyxDQUFDLFlBQVksQ0FBQyxJQUFJLENBQUMsQ0FBQyxDQUFDLENBQUM7SUFDbkYsQ0FBQztBQUNILENBQUMsQ0FBQztBQUVGLHdGQUF3RjtBQUN4RixNQUFNLE9BQU8sR0FBRyxLQUFLLElBQW9ELEVBQUU7SUFDekUsNkZBQTZGO0lBQzdGLDhGQUE4RjtJQUM5RixnR0FBZ0c7SUFDaEcsMEZBQTBGO0lBQzFGLE1BQU0sT0FBTyxHQUFHLElBQUksT0FBTyxDQUFDLElBQUksQ0FBQyxJQUFJLENBQUMsT0FBTyxDQUFDLEdBQUcsRUFBRSxFQUFFLFNBQVMsRUFBRSxLQUFLLENBQUMsQ0FBQztJQUN2RSxNQUFNLFVBQVUsR0FBRyxNQUFNLE9BQU8sQ0FBQyxpQkFBaUIsQ0FBQyxhQUFhLENBQUMsQ0FBQztJQUNsRSxNQUFNLEtBQUssR0FBRyxPQUFPLENBQUMsR0FBRyxDQUFDLGFBQWEsQ0FBQztJQUN4QyxNQUFNLFFBQVEsR0FBRyxPQUFPLENBQUMsR0FBRyxDQUFDLGdCQUFnQixDQUFDO0lBQzlDLE1BQU0sUUFBUSxHQUFHLE9BQU8sQ0FBQyxHQUFHLENBQUMsZ0JBQWdCLENBQUM7SUFFOUMsTUFBTSxTQUFTLEdBQUcsSUFBSSxPQUFPLENBQUMsWUFBWSxDQUFDLGdCQUFnQixDQUFDO1FBQzFELFVBQVUsRUFBRSxLQUFLO1FBQ2pCLFVBQVU7S0FDWCxDQUFDLENBQUM7SUFDSCxNQUFNLFNBQVMsQ0FBQyxLQUFLLEVBQUUsQ0FBQztJQUV4QixJQUFJLENBQUM7UUFDSCxJQUFJLEtBQUssRUFBRSxDQUFDO1lBQ1YsTUFBTSxTQUFTLENBQUMsa0JBQWtCLENBQUMsS0FBSyxFQUFFLEVBQUUsYUFBYSxFQUFFLElBQUksRUFBRSxpQkFBaUIsRUFBRSxJQUFJLEVBQUUsQ0FBQyxDQUFDO1FBQzlGLENBQUM7YUFBTSxJQUFJLFFBQVEsSUFBSSxRQUFRLEVBQUUsQ0FBQztZQUNoQyxNQUFNLFNBQVMsQ0FBQyw0QkFBNEIsQ0FBQyxRQUFRLEVBQUUsUUFBUSxDQUFDLENBQUM7UUFDbkUsQ0FBQzthQUFNLENBQUM7WUFDTixPQUFPLENBQUMsR0FBRyxDQUFDLGtGQUFrRixDQUFDLENBQUM7UUFDbEcsQ0FBQztJQUNILENBQUM7SUFBQyxPQUFPLEtBQUssRUFBRSxDQUFDO1FBQ2YsTUFBTSxTQUFTLENBQUMsSUFBSSxFQUFFLENBQUM7UUFDdkIsTUFBTSxLQUFLLENBQUM7SUFDZCxDQUFDO0lBQ0QsT0FBTyxTQUFTLENBQUM7QUFDbkIsQ0FBQyxDQUFDIn0=

package/dist_ts_cliclient/plugins.d.ts

@@ -4,7 +4,8 @@ import * as path from 'node:path';
 export { crypto, fs, path, };
 import * as servezoneApi from '@serve.zone/api';
 import * as servezoneInterfaces from '@serve.zone/interfaces';
-export { servezoneApi, servezoneInterfaces };
+import * as servezoneInterfacesRuntime from '@serve.zone/interfaces/runtime';
+export { servezoneApi, servezoneInterfaces, servezoneInterfacesRuntime, };
 import * as projectinfo from '@push.rocks/projectinfo';
 import * as qenv from '@push.rocks/qenv';
 import * as smartfs from '@push.rocks/smartfs';

package/dist_ts_cliclient/plugins.js

@@ -6,10 +6,11 @@ export { crypto, fs, path, };
 // @serve.zone scope
 import * as servezoneApi from '@serve.zone/api';
 import * as servezoneInterfaces from '@serve.zone/interfaces';
-export { servezoneApi, servezoneInterfaces };
+import * as servezoneInterfacesRuntime from '@serve.zone/interfaces/runtime';
+export { servezoneApi, servezoneInterfaces, servezoneInterfacesRuntime, };
 // @push.rocks scope
 import * as projectinfo from '@push.rocks/projectinfo';
 import * as qenv from '@push.rocks/qenv';
 import * as smartfs from '@push.rocks/smartfs';
 export { projectinfo, qenv, smartfs, };
-//# sourceMappingURL=data:application/json;base64,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
+//# sourceMappingURL=data:application/json;base64,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

package/dist_ts_cliclient/tokeninput.d.ts

@@ -1,25 +1,42 @@
-/** Why the admin token piped in was not taken, named without quoting any of it. */
-export type TBootstrapTokenInputRefusal = 
+/** Why a token piped in was not taken, named without quoting any of it. */
+export type TTokenInputRefusal = 
 /** stdin is a terminal, which would echo a token typed into it; pipe the token in instead. */
 'token-input-terminal'
 /** stdin carried more bytes than a token and one line break. */
  | 'token-input-oversized'
-/** What stdin carried is not a token: empty, or a byte outside visible ASCII, a space included. */
+/** What stdin carried is not a token by the token's own rule: empty, or a byte the rule refuses. */
  | 'token-input-invalid';
-export declare class BootstrapTokenInputError extends Error {
-    readonly refusal: TBootstrapTokenInputRefusal;
-    constructor(refusal: TBootstrapTokenInputRefusal);
+/** Why the dcrouter admin token piped into `gateway bootstrap` was not taken. */
+export type TBootstrapTokenInputRefusal = TTokenInputRefusal;
+/** A refused token input: which token, and why, never a byte of what was read. */
+export declare class TokenInputError extends Error {
+    readonly refusal: TTokenInputRefusal;
+    constructor(refusal: TTokenInputRefusal, subjectArg: string);
 }
-/** What the token is read from: the command's stdin, or a stream a test hands in. */
-export type TBootstrapTokenInput = AsyncIterable<Uint8Array> & {
+export declare class BootstrapTokenInputError extends TokenInputError {
+    constructor(refusalArg: TTokenInputRefusal);
+}
+export declare class CorestoreControlTokenInputError extends TokenInputError {
+    constructor(refusalArg: TTokenInputRefusal);
+}
+/** What a token is read from: the command's stdin, or a stream a test hands in. */
+export type TTokenInput = AsyncIterable<Uint8Array> & {
     isTTY?: boolean;
 };
+export type TBootstrapTokenInput = TTokenInput;
+/**
+ * The dcrouter admin token piped into `gateway bootstrap`: at most the bootstrap contract's
+ * `maximumTokenBytes` of visible ASCII.
+ */
+export declare const readBootstrapTokenInput: (inputArg: TTokenInput) => Promise<Uint8Array>;
+/**
+ * The token as text, exactly as its bytes say: invalid UTF-8 throws, and a leading byte order mark
+ * is kept, so the contract judges and Cloudly receives every character that was piped in.
+ */
+export declare const decodeCorestoreControlToken: (tokenArg: Uint8Array) => string;
 /**
- * The dcrouter admin token piped into `gateway bootstrap`, as bytes the caller wipes.
- *
- * stdin is the only source: an argument would sit in the process list and the shell history, and
- * the environment leaks into child processes. One trailing line break, `\n` or `\r\n`, is what
- * `echo` or a file adds and is not part of the token; everything else must pass the contract's
- * token rule. Every byte read is wiped before this answers, whatever it answers.
+ * The Corestore control token piped into `corestore set-control-token`: what the contract's
+ * `isCorestoreControlToken` accepts, so at most `corestoreCredentialRuntimeLimits
+ * .maximumControlTokenBytes` of UTF-8 without whitespace.
  */
-export declare const readBootstrapTokenInput: (inputArg: TBootstrapTokenInput) => Promise<Uint8Array>;
+export declare const readCorestoreControlTokenInput: (inputArg: TTokenInput) => Promise<Uint8Array>;

package/dist_ts_cliclient/tokeninput.js

@@ -1,26 +1,37 @@
 import * as plugins from './plugins.js';
-export class BootstrapTokenInputError extends Error {
-    constructor(refusal) {
-        super(`The dcrouter admin token on stdin was refused: ${refusal}.`);
+/** A refused token input: which token, and why, never a byte of what was read. */
+export class TokenInputError extends Error {
+    constructor(refusal, subjectArg) {
+        super(`${subjectArg} on stdin was refused: ${refusal}.`);
         this.refusal = refusal;
+        this.name = 'TokenInputError';
+    }
+}
+export class BootstrapTokenInputError extends TokenInputError {
+    constructor(refusalArg) {
+        super(refusalArg, 'The dcrouter admin token');
         this.name = 'BootstrapTokenInputError';
     }
 }
-function refuseUnless(conditionArg, refusalArg) {
-    if (!conditionArg)
-        throw new BootstrapTokenInputError(refusalArg);
+export class CorestoreControlTokenInputError extends TokenInputError {
+    constructor(refusalArg) {
+        super(refusalArg, 'The Corestore control token');
+        this.name = 'CorestoreControlTokenInputError';
+    }
 }
 /**
- * The dcrouter admin token piped into `gateway bootstrap`, as bytes the caller wipes.
+ * A token piped into a command, as bytes the caller wipes.
  *
  * stdin is the only source: an argument would sit in the process list and the shell history, and
  * the environment leaks into child processes. One trailing line break, `\n` or `\r\n`, is what
- * `echo` or a file adds and is not part of the token; everything else must pass the contract's
- * token rule. Every byte read is wiped before this answers, whatever it answers.
+ * `echo` or a file adds and is not part of the token; everything else must pass the token's rule.
+ * Reading stops as soon as stdin carries more than the rule's bound and one line break. Every byte
+ * read is wiped before this answers, whatever it answers.
  */
-export const readBootstrapTokenInput = async (inputArg) => {
-    refuseUnless(inputArg.isTTY !== true, 'token-input-terminal');
-    const maximumBytes = plugins.servezoneInterfaces.data.externalGatewayBootstrapContract.maximumTokenBytes + 2;
+const readTokenInput = async (inputArg, ruleArg) => {
+    if (inputArg.isTTY === true)
+        throw ruleArg.refuse('token-input-terminal');
+    const maximumBytes = ruleArg.maximumTokenBytes + 2;
     const chunks = [];
     let input;
     try {
@@ -28,7 +39,8 @@ export const readBootstrapTokenInput = async (inputArg) => {
         for await (const chunk of inputArg) {
             chunks.push(chunk);
             byteLength += chunk.byteLength;
-            refuseUnless(byteLength <= maximumBytes, 'token-input-oversized');
+            if (byteLength > maximumBytes)
+                throw ruleArg.refuse('token-input-oversized');
         }
         input = Buffer.concat(chunks, byteLength);
         let end = input.byteLength;
@@ -38,7 +50,8 @@ export const readBootstrapTokenInput = async (inputArg) => {
                 end -= 1;
         }
         const token = input.subarray(0, end);
-        refuseUnless(plugins.servezoneInterfaces.data.isExternalGatewayBootstrapToken(token), 'token-input-invalid');
+        if (!ruleArg.isToken(token))
+            throw ruleArg.refuse('token-input-invalid');
         // A copy, because the input and every view of it are wiped below.
         return new Uint8Array(token);
     }
@@ -48,4 +61,37 @@ export const readBootstrapTokenInput = async (inputArg) => {
             chunk.fill(0);
     }
 };
-//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoidG9rZW5pbnB1dC5qcyIsInNvdXJjZVJvb3QiOiIiLCJzb3VyY2VzIjpbIi4uL3RzX2NsaWNsaWVudC90b2tlbmlucHV0LnRzIl0sIm5hbWVzIjpbXSwibWFwcGluZ3MiOiJBQUFBLE9BQU8sS0FBSyxPQUFPLE1BQU0sY0FBYyxDQUFDO0FBV3hDLE1BQU0sT0FBTyx3QkFBeUIsU0FBUSxLQUFLO0lBQ2pELFlBQTRCLE9BQW9DO1FBQzlELEtBQUssQ0FBQyxrREFBa0QsT0FBTyxHQUFHLENBQUMsQ0FBQztRQUQxQyxZQUFPLEdBQVAsT0FBTyxDQUE2QjtRQUU5RCxJQUFJLENBQUMsSUFBSSxHQUFHLDBCQUEwQixDQUFDO0lBQ3pDLENBQUM7Q0FDRjtBQUVELFNBQVMsWUFBWSxDQUFDLFlBQXFCLEVBQUUsVUFBdUM7SUFDbEYsSUFBSSxDQUFDLFlBQVk7UUFBRSxNQUFNLElBQUksd0JBQXdCLENBQUMsVUFBVSxDQUFDLENBQUM7QUFDcEUsQ0FBQztBQUtEOzs7Ozs7O0dBT0c7QUFDSCxNQUFNLENBQUMsTUFBTSx1QkFBdUIsR0FBRyxLQUFLLEVBQUUsUUFBOEIsRUFBdUIsRUFBRTtJQUNuRyxZQUFZLENBQUMsUUFBUSxDQUFDLEtBQUssS0FBSyxJQUFJLEVBQUUsc0JBQXNCLENBQUMsQ0FBQztJQUM5RCxNQUFNLFlBQVksR0FBRyxPQUFPLENBQUMsbUJBQW1CLENBQUMsSUFBSSxDQUFDLGdDQUFnQyxDQUFDLGlCQUFpQixHQUFHLENBQUMsQ0FBQztJQUM3RyxNQUFNLE1BQU0sR0FBaUIsRUFBRSxDQUFDO0lBQ2hDLElBQUksS0FBNkIsQ0FBQztJQUNsQyxJQUFJLENBQUM7UUFDSCxJQUFJLFVBQVUsR0FBRyxDQUFDLENBQUM7UUFDbkIsSUFBSSxLQUFLLEVBQUUsTUFBTSxLQUFLLElBQUksUUFBUSxFQUFFLENBQUM7WUFDbkMsTUFBTSxDQUFDLElBQUksQ0FBQyxLQUFLLENBQUMsQ0FBQztZQUNuQixVQUFVLElBQUksS0FBSyxDQUFDLFVBQVUsQ0FBQztZQUMvQixZQUFZLENBQUMsVUFBVSxJQUFJLFlBQVksRUFBRSx1QkFBdUIsQ0FBQyxDQUFDO1FBQ3BFLENBQUM7UUFDRCxLQUFLLEdBQUcsTUFBTSxDQUFDLE1BQU0sQ0FBQyxNQUFNLEVBQUUsVUFBVSxDQUFDLENBQUM7UUFDMUMsSUFBSSxHQUFHLEdBQUcsS0FBSyxDQUFDLFVBQVUsQ0FBQztRQUMzQixJQUFJLEdBQUcsR0FBRyxDQUFDLElBQUksS0FBSyxDQUFDLEdBQUcsR0FBRyxDQUFDLENBQUMsS0FBSyxJQUFJLEVBQUUsQ0FBQztZQUN2QyxHQUFHLElBQUksQ0FBQyxDQUFDO1lBQ1QsSUFBSSxHQUFHLEdBQUcsQ0FBQyxJQUFJLEtBQUssQ0FBQyxHQUFHLEdBQUcsQ0FBQyxDQUFDLEtBQUssSUFBSTtnQkFBRSxHQUFHLElBQUksQ0FBQyxDQUFDO1FBQ25ELENBQUM7UUFDRCxNQUFNLEtBQUssR0FBRyxLQUFLLENBQUMsUUFBUSxDQUFDLENBQUMsRUFBRSxHQUFHLENBQUMsQ0FBQztRQUNyQyxZQUFZLENBQUMsT0FBTyxDQUFDLG1CQUFtQixDQUFDLElBQUksQ0FBQywrQkFBK0IsQ0FBQyxLQUFLLENBQUMsRUFBRSxxQkFBcUIsQ0FBQyxDQUFDO1FBQzdHLGtFQUFrRTtRQUNsRSxPQUFPLElBQUksVUFBVSxDQUFDLEtBQUssQ0FBQyxDQUFDO0lBQy9CLENBQUM7WUFBUyxDQUFDO1FBQ1QsS0FBSyxFQUFFLElBQUksQ0FBQyxDQUFDLENBQUMsQ0FBQztRQUNmLEtBQUssTUFBTSxLQUFLLElBQUksTUFBTTtZQUFFLEtBQUssQ0FBQyxJQUFJLENBQUMsQ0FBQyxDQUFDLENBQUM7SUFDNUMsQ0FBQztBQUNILENBQUMsQ0FBQyJ9
+/**
+ * The dcrouter admin token piped into `gateway bootstrap`: at most the bootstrap contract's
+ * `maximumTokenBytes` of visible ASCII.
+ */
+export const readBootstrapTokenInput = async (inputArg) => await readTokenInput(inputArg, {
+    maximumTokenBytes: plugins.servezoneInterfaces.data.externalGatewayBootstrapContract.maximumTokenBytes,
+    isToken: (tokenArg) => plugins.servezoneInterfaces.data.isExternalGatewayBootstrapToken(tokenArg),
+    refuse: (refusalArg) => new BootstrapTokenInputError(refusalArg),
+});
+/**
+ * The token as text, exactly as its bytes say: invalid UTF-8 throws, and a leading byte order mark
+ * is kept, so the contract judges and Cloudly receives every character that was piped in.
+ */
+export const decodeCorestoreControlToken = (tokenArg) => new TextDecoder('utf-8', { fatal: true, ignoreBOM: true }).decode(tokenArg);
+/**
+ * The Corestore control token piped into `corestore set-control-token`: what the contract's
+ * `isCorestoreControlToken` accepts, so at most `corestoreCredentialRuntimeLimits
+ * .maximumControlTokenBytes` of UTF-8 without whitespace.
+ */
+export const readCorestoreControlTokenInput = async (inputArg) => await readTokenInput(inputArg, {
+    maximumTokenBytes: plugins.servezoneInterfacesRuntime.corestoreCredentialRuntimeLimits.maximumControlTokenBytes,
+    isToken: (tokenArg) => {
+        let token;
+        try {
+            token = decodeCorestoreControlToken(tokenArg);
+        }
+        catch {
+            return false;
+        }
+        return plugins.servezoneInterfacesRuntime.isCorestoreControlToken(token);
+    },
+    refuse: (refusalArg) => new CorestoreControlTokenInputError(refusalArg),
+});
+//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoidG9rZW5pbnB1dC5qcyIsInNvdXJjZVJvb3QiOiIiLCJzb3VyY2VzIjpbIi4uL3RzX2NsaWNsaWVudC90b2tlbmlucHV0LnRzIl0sIm5hbWVzIjpbXSwibWFwcGluZ3MiOiJBQUFBLE9BQU8sS0FBSyxPQUFPLE1BQU0sY0FBYyxDQUFDO0FBY3hDLGtGQUFrRjtBQUNsRixNQUFNLE9BQU8sZUFBZ0IsU0FBUSxLQUFLO0lBQ3hDLFlBQTRCLE9BQTJCLEVBQUUsVUFBa0I7UUFDekUsS0FBSyxDQUFDLEdBQUcsVUFBVSwwQkFBMEIsT0FBTyxHQUFHLENBQUMsQ0FBQztRQUQvQixZQUFPLEdBQVAsT0FBTyxDQUFvQjtRQUVyRCxJQUFJLENBQUMsSUFBSSxHQUFHLGlCQUFpQixDQUFDO0lBQ2hDLENBQUM7Q0FDRjtBQUVELE1BQU0sT0FBTyx3QkFBeUIsU0FBUSxlQUFlO0lBQzNELFlBQVksVUFBOEI7UUFDeEMsS0FBSyxDQUFDLFVBQVUsRUFBRSwwQkFBMEIsQ0FBQyxDQUFDO1FBQzlDLElBQUksQ0FBQyxJQUFJLEdBQUcsMEJBQTBCLENBQUM7SUFDekMsQ0FBQztDQUNGO0FBRUQsTUFBTSxPQUFPLCtCQUFnQyxTQUFRLGVBQWU7SUFDbEUsWUFBWSxVQUE4QjtRQUN4QyxLQUFLLENBQUMsVUFBVSxFQUFFLDZCQUE2QixDQUFDLENBQUM7UUFDakQsSUFBSSxDQUFDLElBQUksR0FBRyxpQ0FBaUMsQ0FBQztJQUNoRCxDQUFDO0NBQ0Y7QUFlRDs7Ozs7Ozs7R0FRRztBQUNILE1BQU0sY0FBYyxHQUFHLEtBQUssRUFBRSxRQUFxQixFQUFFLE9BQXdCLEVBQXVCLEVBQUU7SUFDcEcsSUFBSSxRQUFRLENBQUMsS0FBSyxLQUFLLElBQUk7UUFBRSxNQUFNLE9BQU8sQ0FBQyxNQUFNLENBQUMsc0JBQXNCLENBQUMsQ0FBQztJQUMxRSxNQUFNLFlBQVksR0FBRyxPQUFPLENBQUMsaUJBQWlCLEdBQUcsQ0FBQyxDQUFDO0lBQ25ELE1BQU0sTUFBTSxHQUFpQixFQUFFLENBQUM7SUFDaEMsSUFBSSxLQUE2QixDQUFDO0lBQ2xDLElBQUksQ0FBQztRQUNILElBQUksVUFBVSxHQUFHLENBQUMsQ0FBQztRQUNuQixJQUFJLEtBQUssRUFBRSxNQUFNLEtBQUssSUFBSSxRQUFRLEVBQUUsQ0FBQztZQUNuQyxNQUFNLENBQUMsSUFBSSxDQUFDLEtBQUssQ0FBQyxDQUFDO1lBQ25CLFVBQVUsSUFBSSxLQUFLLENBQUMsVUFBVSxDQUFDO1lBQy9CLElBQUksVUFBVSxHQUFHLFlBQVk7Z0JBQUUsTUFBTSxPQUFPLENBQUMsTUFBTSxDQUFDLHVCQUF1QixDQUFDLENBQUM7UUFDL0UsQ0FBQztRQUNELEtBQUssR0FBRyxNQUFNLENBQUMsTUFBTSxDQUFDLE1BQU0sRUFBRSxVQUFVLENBQUMsQ0FBQztRQUMxQyxJQUFJLEdBQUcsR0FBRyxLQUFLLENBQUMsVUFBVSxDQUFDO1FBQzNCLElBQUksR0FBRyxHQUFHLENBQUMsSUFBSSxLQUFLLENBQUMsR0FBRyxHQUFHLENBQUMsQ0FBQyxLQUFLLElBQUksRUFBRSxDQUFDO1lBQ3ZDLEdBQUcsSUFBSSxDQUFDLENBQUM7WUFDVCxJQUFJLEdBQUcsR0FBRyxDQUFDLElBQUksS0FBSyxDQUFDLEdBQUcsR0FBRyxDQUFDLENBQUMsS0FBSyxJQUFJO2dCQUFFLEdBQUcsSUFBSSxDQUFDLENBQUM7UUFDbkQsQ0FBQztRQUNELE1BQU0sS0FBSyxHQUFHLEtBQUssQ0FBQyxRQUFRLENBQUMsQ0FBQyxFQUFFLEdBQUcsQ0FBQyxDQUFDO1FBQ3JDLElBQUksQ0FBQyxPQUFPLENBQUMsT0FBTyxDQUFDLEtBQUssQ0FBQztZQUFFLE1BQU0sT0FBTyxDQUFDLE1BQU0sQ0FBQyxxQkFBcUIsQ0FBQyxDQUFDO1FBQ3pFLGtFQUFrRTtRQUNsRSxPQUFPLElBQUksVUFBVSxDQUFDLEtBQUssQ0FBQyxDQUFDO0lBQy9CLENBQUM7WUFBUyxDQUFDO1FBQ1QsS0FBSyxFQUFFLElBQUksQ0FBQyxDQUFDLENBQUMsQ0FBQztRQUNmLEtBQUssTUFBTSxLQUFLLElBQUksTUFBTTtZQUFFLEtBQUssQ0FBQyxJQUFJLENBQUMsQ0FBQyxDQUFDLENBQUM7SUFDNUMsQ0FBQztBQUNILENBQUMsQ0FBQztBQUVGOzs7R0FHRztBQUNILE1BQU0sQ0FBQyxNQUFNLHVCQUF1QixHQUFHLEtBQUssRUFBRSxRQUFxQixFQUF1QixFQUFFLENBQzFGLE1BQU0sY0FBYyxDQUFDLFFBQVEsRUFBRTtJQUM3QixpQkFBaUIsRUFBRSxPQUFPLENBQUMsbUJBQW1CLENBQUMsSUFBSSxDQUFDLGdDQUFnQyxDQUFDLGlCQUFpQjtJQUN0RyxPQUFPLEVBQUUsQ0FBQyxRQUFRLEVBQUUsRUFBRSxDQUFDLE9BQU8sQ0FBQyxtQkFBbUIsQ0FBQyxJQUFJLENBQUMsK0JBQStCLENBQUMsUUFBUSxDQUFDO0lBQ2pHLE1BQU0sRUFBRSxDQUFDLFVBQVUsRUFBRSxFQUFFLENBQUMsSUFBSSx3QkFBd0IsQ0FBQyxVQUFVLENBQUM7Q0FDakUsQ0FBQyxDQUFDO0FBRUw7OztHQUdHO0FBQ0gsTUFBTSxDQUFDLE1BQU0sMkJBQTJCLEdBQUcsQ0FBQyxRQUFvQixFQUFVLEVBQUUsQ0FDMUUsSUFBSSxXQUFXLENBQUMsT0FBTyxFQUFFLEVBQUUsS0FBSyxFQUFFLElBQUksRUFBRSxTQUFTLEVBQUUsSUFBSSxFQUFFLENBQUMsQ0FBQyxNQUFNLENBQUMsUUFBUSxDQUFDLENBQUM7QUFFOUU7Ozs7R0FJRztBQUNILE1BQU0sQ0FBQyxNQUFNLDhCQUE4QixHQUFHLEtBQUssRUFBRSxRQUFxQixFQUF1QixFQUFFLENBQ2pHLE1BQU0sY0FBYyxDQUFDLFFBQVEsRUFBRTtJQUM3QixpQkFBaUIsRUFBRSxPQUFPLENBQUMsMEJBQTBCLENBQUMsZ0NBQWdDLENBQUMsd0JBQXdCO0lBQy9HLE9BQU8sRUFBRSxDQUFDLFFBQVEsRUFBRSxFQUFFO1FBQ3BCLElBQUksS0FBYSxDQUFDO1FBQ2xCLElBQUksQ0FBQztZQUNILEtBQUssR0FBRywyQkFBMkIsQ0FBQyxRQUFRLENBQUMsQ0FBQztRQUNoRCxDQUFDO1FBQUMsTUFBTSxDQUFDO1lBQ1AsT0FBTyxLQUFLLENBQUM7UUFDZixDQUFDO1FBQ0QsT0FBTyxPQUFPLENBQUMsMEJBQTBCLENBQUMsdUJBQXVCLENBQUMsS0FBSyxDQUFDLENBQUM7SUFDM0UsQ0FBQztJQUNELE1BQU0sRUFBRSxDQUFDLFVBQVUsRUFBRSxFQUFFLENBQUMsSUFBSSwrQkFBK0IsQ0FBQyxVQUFVLENBQUM7Q0FDeEUsQ0FBQyxDQUFDIn0=

package/package.json

@@ -38,7 +38,7 @@
     "security"
   ],
   "name": "@serve.zone/cli",
-  "version": "33.10.0",
+  "version": "33.11.0",
   "type": "module",
   "description": "A comprehensive tool for managing containerized applications across multiple cloud providers using Docker Swarmkit, featuring web, CLI, and API interfaces.",
   "main": "./dist_ts_cliclient/index.js",
@@ -50,8 +50,8 @@
     }
   },
   "dependencies": {
-    "@serve.zone/api": "32.4.0",
-    "@serve.zone/interfaces": "32.41.0",
+    "@serve.zone/api": "32.5.0",
+    "@serve.zone/interfaces": "32.42.0",
     "@push.rocks/projectinfo": "^5.1.0",
     "@push.rocks/qenv": "^8.1.0",
     "@push.rocks/smartfs": "^1.8.0",

package/readme.md

@@ -17,6 +17,7 @@ This submodule is intentionally small in the current codebase:
 - Without arguments, calls `CliClient.getClusters()` and prints the result.
 - Runs `servezone gateway bootstrap` and `servezone gateway status` for Cloudly's dcrouter gateway enrollment.
 - Runs `servezone relay export-authorization` to write a cluster relay's bearer to a private file.
+- Runs `servezone corestore set-control-token` and `servezone corestore control-token-state` for the Corestore control token the cluster relays use.
 
 It is not currently a full command tree for services, secrets, deployments, logs, profiles, or shell completion. Those flows should be implemented against `@serve.zone/api` before documenting them as CLI commands.
 
@@ -91,6 +92,26 @@ servezone relay export-authorization --cluster-id <clusterId> --expected-generat
 - The bearer is fetched with `@serve.zone/api` (`cluster.exportClusterRelayAuthorization`, which checks the answer against the request) and written with `@push.rocks/smartfs` as a new file, mode `0600` whatever the umask, exclusive and atomic: the whole bearer or no file, never over an existing entry and never through a symbolic link at the path.
 - It is never written to stdout. stdout carries one JSON line of metadata: `clusterId`, `generation`, `outputPath`, `byteLength`, `sha256` (what `sha256sum` prints for the file) and `receiptId`, the audit receipt Cloudly recorded. A refusal is printed to stderr with exit code 1 and never carries the bearer.
 
+## Corestore Control Token
+
+Every cluster relay calls its nodes' Corestore control API with one control token, which Cloudly stores for both Corestore provider configs. These commands set and read it over the API, without any access to Cloudly's process. Both sign in exactly as the default action does; the set needs an administrator who signed in within the last five minutes.
+
+```sh
+CLOUDLY_URL=https://cloudly.example.com \
+CLOUDLY_USERNAME=admin CLOUDLY_PASSWORD=change-me \
+servezone corestore control-token-state
+
+# Pipe the token in, naming the state the read answered:
+servezone corestore set-control-token --stdin --expect absent < control-token.txt
+servezone corestore set-control-token --stdin --expect 3 < control-token.txt
+```
+
+- `control-token-state` prints one JSON line: `{"ok":true,"command":"corestore control-token-state","state":…,"receipts":[…]}`. `state` is `{"state":"absent"}` or `{"state":"present","revision":<n>}`; `receipts` are the value-free audit receipts (`id`, `revision`, `via`, `actorId`, `setAt`), oldest first.
+- `set-control-token --stdin --expect absent|<revision>` stores the token only while it is still exactly at the state `--expect` names: `absent`, or the revision `control-token-state` answered (a positive integer without leading zeros). It is never a minimum, so a set that committed in between is refused rather than overwritten.
+- The token is read from stdin and from nowhere else: `--stdin` names that, and an argument, `--token`, or any other extra argument is refused as usage without echoing it; the environment is never read for it. stdin must not be a terminal. One trailing line break (`\n` or `\r\n`) is stripped; what remains must pass the contract's `isCorestoreControlToken` (32 to 4096 bytes of UTF-8 without whitespace). A refused stdin is named (`token-input-terminal`, `token-input-oversized`, `token-input-invalid`) before anything connects, and every byte read is wiped.
+- The token is sent once with `@serve.zone/api` (`platform.setCorestoreControlToken`, past every TypedRequest hook), and the answer is checked against the request. stdout carries one JSON line with the state the set produced and its receipt, never the token: `{"ok":true,"command":"corestore set-control-token","state":{"state":"present","revision":<n>},"receipt":{…}}`.
+- A refusal is printed to stderr with exit code 1 as `The Corestore control token was not stored: <refusal>.`, naming one of the contract's `corestoreControlTokenSetRefusals`: `token-present` (`--expect absent`, and a token is stored), `token-absent` (a revision was expected, and none is stored), `token-revision-mismatch` (the stored token is at another revision), `token-invalid` or `provider-unavailable` (a Corestore provider config is missing or disabled). Every other failure, an unauthorized or stale administrator included, is Cloudly's one denial text, `Corestore control token request denied.`, with exit code 1.
+
 ## Programmatic Use
 
 The published submodule exports the `runCli()` entry point. For automation, most callers should use `@serve.zone/api` directly; the internal `CliClient` currently wraps `CloudlyApiClient` only to run the default cluster-list action:
@@ -116,9 +137,10 @@ await cli.getClusters();
 | Path | Purpose |
 | --- | --- |
 | `index.ts` | Runtime entry point for the published CLI. |
-| `classes.cliclient.ts` | Minimal client wrapper: `getClusters()`, `bootstrapGateway()`, `getGatewayStatus()` and `exportRelayAuthorization()`. |
+| `classes.cliclient.ts` | Minimal client wrapper: `getClusters()`, `bootstrapGateway()`, `getGatewayStatus()`, `exportRelayAuthorization()`, `setCorestoreControlToken()` and `getCorestoreControlTokenState()`. |
 | `commands.ts` | Parses the argument vector into one command, refusing anything else as usage. |
-| `tokeninput.ts` | Reads the dcrouter admin token from stdin. |
+| `tokeninput.ts` | Reads the dcrouter admin token and the Corestore control token from stdin, each bounded and checked by its contract. |
+| `corestorecontroltoken.ts` | Sets and reads the Corestore control token through the API client and names the contract's refusals. |
 | `relayauthorization.ts` | Checks the private output directory and writes a cluster relay's bearer as a new 0600 file. |
 | `plugins.ts` | Centralized imports for the submodule. |
 | `tspublish.json` | Published package name, dependencies, `servezone` bin metadata, and `useBase`, which takes the registries from the release's npm target. |

package/ts_cliclient/classes.cliclient.ts

@@ -1,6 +1,7 @@
 import * as plugins from './plugins.js';
 import { CloudlyApiClient } from '@serve.zone/api';
 import { exportRelayAuthorizationToFile } from './relayauthorization.js';
+import { getCorestoreControlTokenState, setCorestoreControlToken } from './corestorecontroltoken.js';
 
 export class CliClient {
   public cloudlyApiClient: CloudlyApiClient;
@@ -42,6 +43,23 @@ export class CliClient {
     console.log(JSON.stringify({ ok: true, command: 'relay export-authorization', ...output }));
   }
 
+  /**
+   * Stores the Corestore control token while it is still exactly at `expectedArg` and prints the
+   * state and the receipt the set produced, never the token. The token is the caller's to wipe.
+   */
+  public async setCorestoreControlToken(
+    expectedArg: plugins.servezoneInterfaces.data.TCorestoreControlTokenState,
+    tokenArg: Uint8Array,
+  ) {
+    const output = await setCorestoreControlToken(this.cloudlyApiClient, expectedArg, tokenArg);
+    console.log(JSON.stringify(output));
+  }
+
+  /** Prints whether Cloudly holds the Corestore control token, its revision and its receipts. */
+  public async getCorestoreControlTokenState() {
+    console.log(JSON.stringify(await getCorestoreControlTokenState(this.cloudlyApiClient)));
+  }
+
   public async getGatewayStatus() {
     const { state } = await this.cloudlyApiClient.settings.getExternalGatewayEnrollmentState();
     console.log(JSON.stringify(state, null, 2));

package/ts_cliclient/commands.ts

@@ -11,7 +11,13 @@ export type TCliCommand =
     request: plugins.servezoneInterfaces.data.IClusterRelayAuthorizationExportRequest;
     /** A normalized absolute path in a private directory; the file must not exist yet. */
     outputPath: string;
-  };
+  }
+  | {
+    kind: 'corestore-set-control-token';
+    /** Exactly the state the administrator last read; never a minimum. */
+    expected: plugins.servezoneInterfaces.data.TCorestoreControlTokenState;
+  }
+  | { kind: 'corestore-control-token-state' };
 
 export const cliUsage = [
   'Usage:',
@@ -21,6 +27,9 @@ export const cliUsage = [
   '    The dcrouter admin token is read from stdin, never from arguments or the environment.',
   '  servezone relay export-authorization --cluster-id <id> --expected-generation <n> --output <absolute path>',
   '    Writes the relay bearer to a new 0600 file in a directory only you can write; never to stdout.',
+  '  servezone corestore set-control-token --stdin --expect absent|<revision>',
+  '    The Corestore control token is read from stdin, never from arguments or the environment.',
+  '  servezone corestore control-token-state',
 ].join('\n');
 
 /**
@@ -60,6 +69,7 @@ export const parseCliCommand = (argsArg: readonly string[]): TCliCommand => {
   if (argsArg.length === 0) return { kind: 'clusters' };
   const [group, action, ...rest] = argsArg;
   if (group === 'relay') return parseRelayCommand(action, rest);
+  if (group === 'corestore') return parseCorestoreCommand(action, rest);
   requireUsage(group === 'gateway');
   if (action === 'status') {
     requireUsage(rest.length === 0);
@@ -73,18 +83,50 @@ export const parseCliCommand = (argsArg: readonly string[]): TCliCommand => {
   };
 };
 
+/** A positive integer without leading zeros, as a generation or a revision is named. */
+const parseCounter = (valueArg: string): number => {
+  requireUsage(/^[1-9][0-9]{0,15}$/.test(valueArg) && Number.isSafeInteger(Number(valueArg)));
+  return Number(valueArg);
+};
+
 /** `relay export-authorization`: the cluster, the exact generation and a normalized absolute output. */
 const parseRelayCommand = (actionArg: string | undefined, restArg: readonly string[]): TCliCommand => {
   requireUsage(actionArg === 'export-authorization');
   const options = parseOptions(restArg, ['--cluster-id', '--expected-generation', '--output']);
-  const generation = options['--expected-generation'];
-  requireUsage(/^[1-9][0-9]{0,15}$/.test(generation) && Number.isSafeInteger(Number(generation)));
+  const generation = parseCounter(options['--expected-generation']);
   const outputPath = options['--output'];
   requireUsage(plugins.path.isAbsolute(outputPath) && plugins.path.normalize(outputPath) === outputPath
     && !outputPath.endsWith(plugins.path.sep));
   return {
     kind: 'relay-export-authorization',
-    request: { clusterId: options['--cluster-id'], expectedGeneration: Number(generation) },
+    request: { clusterId: options['--cluster-id'], expectedGeneration: generation },
     outputPath,
   };
 };
+
+/**
+ * `corestore set-control-token --stdin --expect absent|<revision>` and
+ * `corestore control-token-state`.
+ *
+ * `--stdin` names where the token comes from, so no invocation reads it from anywhere else, and
+ * `--expect` is the state `control-token-state` answered: `absent`, or the stored revision.
+ */
+const parseCorestoreCommand = (actionArg: string | undefined, restArg: readonly string[]): TCliCommand => {
+  if (actionArg === 'control-token-state') {
+    requireUsage(restArg.length === 0);
+    return { kind: 'corestore-control-token-state' };
+  }
+  requireUsage(actionArg === 'set-control-token');
+  // `--stdin` is a flag in an option's place, either before or after `--expect <value>`.
+  requireUsage(restArg.length === 3);
+  const stdinIndex = restArg[0] === '--stdin' ? 0 : 2;
+  requireUsage(restArg[stdinIndex] === '--stdin');
+  const options = parseOptions(restArg.filter((_argArg, indexArg) => indexArg !== stdinIndex), ['--expect']);
+  const expected = options['--expect'];
+  return {
+    kind: 'corestore-set-control-token',
+    expected: expected === 'absent'
+      ? { state: 'absent' }
+      : { state: 'present', revision: parseCounter(expected) },
+  };
+};

package/ts_cliclient/corestorecontroltoken.ts

@@ -0,0 +1,71 @@
+import * as plugins from './plugins.js';
+import { decodeCorestoreControlToken } from './tokeninput.js';
+
+type TCorestoreControlTokenSetRefusal = plugins.servezoneInterfaces.data.TCorestoreControlTokenSetRefusal;
+
+/** Cloudly did not store the token, for one of the contract's refusals, which it names. */
+export class CorestoreControlTokenSetRefusedError extends Error {
+  constructor(public readonly refusal: TCorestoreControlTokenSetRefusal) {
+    super(`The Corestore control token was not stored: ${refusal}.`);
+    this.name = 'CorestoreControlTokenSetRefusedError';
+  }
+}
+
+/**
+ * The contract refusal an error is, or `undefined` for every other error.
+ *
+ * Cloudly answers a refusal by its name and nothing else, so the name is the whole of the error's
+ * message; any other message, Cloudly's one denial text included, is not a refusal.
+ */
+export const nameCorestoreControlTokenSetRefusal = (
+  errorArg: unknown,
+): TCorestoreControlTokenSetRefusal | undefined => {
+  if (!(errorArg instanceof Error)) return undefined;
+  return plugins.servezoneInterfaces.data.corestoreControlTokenSetRefusals
+    .find((refusalArg) => refusalArg === errorArg.message);
+};
+
+/** What the CLI prints about a stored token: the state it produced and its receipt, never the token. */
+export interface ICorestoreControlTokenSetOutput
+  extends plugins.servezoneInterfaces.data.ICorestoreControlTokenSetResult {
+  ok: true;
+  command: 'corestore set-control-token';
+}
+
+/** What the CLI prints about the token's state: the state and its value-free receipts. */
+export interface ICorestoreControlTokenStateOutput
+  extends plugins.servezoneInterfaces.data.ICorestoreControlTokenStateRead {
+  ok: true;
+  command: 'corestore control-token-state';
+}
+
+/**
+ * Stores the token through the API client while it is still exactly at `expected`, answering only
+ * the state and the receipt. The token bytes are the caller's to wipe; the text the request needs
+ * is decoded from them here and never printed, logged or put into an error.
+ */
+export const setCorestoreControlToken = async (
+  apiClientArg: plugins.servezoneApi.CloudlyApiClient,
+  expectedArg: plugins.servezoneInterfaces.data.TCorestoreControlTokenState,
+  tokenArg: Uint8Array,
+): Promise<ICorestoreControlTokenSetOutput> => {
+  try {
+    const { state, receipt } = await apiClientArg.platform.setCorestoreControlToken({
+      token: decodeCorestoreControlToken(tokenArg),
+      expected: expectedArg,
+    });
+    return { ok: true, command: 'corestore set-control-token', state, receipt };
+  } catch (error) {
+    const refusal = nameCorestoreControlTokenSetRefusal(error);
+    if (refusal !== undefined) throw new CorestoreControlTokenSetRefusedError(refusal);
+    throw error;
+  }
+};
+
+/** Whether Cloudly holds the token, at which revision, and its receipts, oldest first. */
+export const getCorestoreControlTokenState = async (
+  apiClientArg: plugins.servezoneApi.CloudlyApiClient,
+): Promise<ICorestoreControlTokenStateOutput> => {
+  const { state, receipts } = await apiClientArg.platform.getCorestoreControlTokenState();
+  return { ok: true, command: 'corestore control-token-state', state, receipts };
+};

package/ts_cliclient/index.ts

@@ -1,7 +1,7 @@
 import * as plugins from './plugins.js';
 import { CliClient } from './classes.cliclient.js';
 import { parseCliCommand, type TCliCommand } from './commands.js';
-import { readBootstrapTokenInput } from './tokeninput.js';
+import { readBootstrapTokenInput, readCorestoreControlTokenInput } from './tokeninput.js';
 import { requirePrivateOutputDirectory } from './relayauthorization.js';
 
 export { CliUsageError, parseCliCommand, type TCliCommand } from './commands.js';
@@ -15,24 +15,48 @@ export {
 } from './relayauthorization.js';
 export {
   BootstrapTokenInputError,
+  CorestoreControlTokenInputError,
+  TokenInputError,
   readBootstrapTokenInput,
+  readCorestoreControlTokenInput,
   type TBootstrapTokenInputRefusal,
+  type TTokenInputRefusal,
 } from './tokeninput.js';
+export {
+  CorestoreControlTokenSetRefusedError,
+  getCorestoreControlTokenState,
+  nameCorestoreControlTokenSetRefusal,
+  setCorestoreControlToken,
+  type ICorestoreControlTokenSetOutput,
+  type ICorestoreControlTokenStateOutput,
+} from './corestorecontroltoken.js';
 
-/** A parsed command with everything it reads locally; a bootstrap carries the token from stdin. */
+/**
+ * A parsed command with everything it reads locally: a bootstrap carries the admin token from
+ * stdin, a control token set the Corestore control token.
+ */
 type TCliInvocation =
-  | Exclude<TCliCommand, { kind: 'gateway-bootstrap' }>
-  | (Extract<TCliCommand, { kind: 'gateway-bootstrap' }> & { bootstrapToken: Uint8Array });
+  | Exclude<TCliCommand, { kind: 'gateway-bootstrap' | 'corestore-set-control-token' }>
+  | (Extract<TCliCommand, { kind: 'gateway-bootstrap' }> & { bootstrapToken: Uint8Array })
+  | (Extract<TCliCommand, { kind: 'corestore-set-control-token' }> & { controlToken: Uint8Array });
+
+/** Reads the token the command needs from stdin, before anything connects. */
+const readInvocation = async (commandArg: TCliCommand): Promise<TCliInvocation> => {
+  if (commandArg.kind === 'gateway-bootstrap') {
+    return { ...commandArg, bootstrapToken: await readBootstrapTokenInput(process.stdin) };
+  }
+  if (commandArg.kind === 'corestore-set-control-token') {
+    return { ...commandArg, controlToken: await readCorestoreControlTokenInput(process.stdin) };
+  }
+  return commandArg;
+};
 
 export const runCli = async () => {
   // The command and the token are settled before anything connects, so a wrong invocation or a
   // token that could never be one fails without reaching Cloudly.
   let command: TCliInvocation;
   try {
-    const parsed = parseCliCommand(process.argv.slice(2));
-    command = parsed.kind === 'gateway-bootstrap'
-      ? { ...parsed, bootstrapToken: await readBootstrapTokenInput(process.stdin) }
-      : parsed;
+    command = await readInvocation(parseCliCommand(process.argv.slice(2)));
     // An output the bearer could not be written to fetches no bearer and records no export.
     if (command.kind === 'relay-export-authorization') {
       await requirePrivateOutputDirectory(command.outputPath);
@@ -56,6 +80,10 @@ export const runCli = async () => {
         await cliClient.bootstrapGateway(command.target, command.bootstrapToken);
       } else if (command.kind === 'relay-export-authorization') {
         await cliClient.exportRelayAuthorization(command.request, command.outputPath);
+      } else if (command.kind === 'corestore-set-control-token') {
+        await cliClient.setCorestoreControlToken(command.expected, command.controlToken);
+      } else if (command.kind === 'corestore-control-token-state') {
+        await cliClient.getCorestoreControlTokenState();
       } else {
         await cliClient.getGatewayStatus();
       }
@@ -68,6 +96,7 @@ export const runCli = async () => {
     }
   } finally {
     if (command.kind === 'gateway-bootstrap') command.bootstrapToken.fill(0);
+    if (command.kind === 'corestore-set-control-token') command.controlToken.fill(0);
   }
 };
 

package/ts_cliclient/plugins.ts

@@ -12,10 +12,12 @@ export {
 // @serve.zone scope
 import * as servezoneApi from '@serve.zone/api';  
 import * as servezoneInterfaces from '@serve.zone/interfaces';
+import * as servezoneInterfacesRuntime from '@serve.zone/interfaces/runtime';
 
 export {
   servezoneApi,
-  servezoneInterfaces
+  servezoneInterfaces,
+  servezoneInterfacesRuntime,
 }
 
 // @push.rocks scope

package/ts_cliclient/readme.md

@@ -17,6 +17,7 @@ This submodule is intentionally small in the current codebase:
 - Without arguments, calls `CliClient.getClusters()` and prints the result.
 - Runs `servezone gateway bootstrap` and `servezone gateway status` for Cloudly's dcrouter gateway enrollment.
 - Runs `servezone relay export-authorization` to write a cluster relay's bearer to a private file.
+- Runs `servezone corestore set-control-token` and `servezone corestore control-token-state` for the Corestore control token the cluster relays use.
 
 It is not currently a full command tree for services, secrets, deployments, logs, profiles, or shell completion. Those flows should be implemented against `@serve.zone/api` before documenting them as CLI commands.
 
@@ -91,6 +92,26 @@ servezone relay export-authorization --cluster-id <clusterId> --expected-generat
 - The bearer is fetched with `@serve.zone/api` (`cluster.exportClusterRelayAuthorization`, which checks the answer against the request) and written with `@push.rocks/smartfs` as a new file, mode `0600` whatever the umask, exclusive and atomic: the whole bearer or no file, never over an existing entry and never through a symbolic link at the path.
 - It is never written to stdout. stdout carries one JSON line of metadata: `clusterId`, `generation`, `outputPath`, `byteLength`, `sha256` (what `sha256sum` prints for the file) and `receiptId`, the audit receipt Cloudly recorded. A refusal is printed to stderr with exit code 1 and never carries the bearer.
 
+## Corestore Control Token
+
+Every cluster relay calls its nodes' Corestore control API with one control token, which Cloudly stores for both Corestore provider configs. These commands set and read it over the API, without any access to Cloudly's process. Both sign in exactly as the default action does; the set needs an administrator who signed in within the last five minutes.
+
+```sh
+CLOUDLY_URL=https://cloudly.example.com \
+CLOUDLY_USERNAME=admin CLOUDLY_PASSWORD=change-me \
+servezone corestore control-token-state
+
+# Pipe the token in, naming the state the read answered:
+servezone corestore set-control-token --stdin --expect absent < control-token.txt
+servezone corestore set-control-token --stdin --expect 3 < control-token.txt
+```
+
+- `control-token-state` prints one JSON line: `{"ok":true,"command":"corestore control-token-state","state":…,"receipts":[…]}`. `state` is `{"state":"absent"}` or `{"state":"present","revision":<n>}`; `receipts` are the value-free audit receipts (`id`, `revision`, `via`, `actorId`, `setAt`), oldest first.
+- `set-control-token --stdin --expect absent|<revision>` stores the token only while it is still exactly at the state `--expect` names: `absent`, or the revision `control-token-state` answered (a positive integer without leading zeros). It is never a minimum, so a set that committed in between is refused rather than overwritten.
+- The token is read from stdin and from nowhere else: `--stdin` names that, and an argument, `--token`, or any other extra argument is refused as usage without echoing it; the environment is never read for it. stdin must not be a terminal. One trailing line break (`\n` or `\r\n`) is stripped; what remains must pass the contract's `isCorestoreControlToken` (32 to 4096 bytes of UTF-8 without whitespace). A refused stdin is named (`token-input-terminal`, `token-input-oversized`, `token-input-invalid`) before anything connects, and every byte read is wiped.
+- The token is sent once with `@serve.zone/api` (`platform.setCorestoreControlToken`, past every TypedRequest hook), and the answer is checked against the request. stdout carries one JSON line with the state the set produced and its receipt, never the token: `{"ok":true,"command":"corestore set-control-token","state":{"state":"present","revision":<n>},"receipt":{…}}`.
+- A refusal is printed to stderr with exit code 1 as `The Corestore control token was not stored: <refusal>.`, naming one of the contract's `corestoreControlTokenSetRefusals`: `token-present` (`--expect absent`, and a token is stored), `token-absent` (a revision was expected, and none is stored), `token-revision-mismatch` (the stored token is at another revision), `token-invalid` or `provider-unavailable` (a Corestore provider config is missing or disabled). Every other failure, an unauthorized or stale administrator included, is Cloudly's one denial text, `Corestore control token request denied.`, with exit code 1.
+
 ## Programmatic Use
 
 The published submodule exports the `runCli()` entry point. For automation, most callers should use `@serve.zone/api` directly; the internal `CliClient` currently wraps `CloudlyApiClient` only to run the default cluster-list action:
@@ -116,9 +137,10 @@ await cli.getClusters();
 | Path | Purpose |
 | --- | --- |
 | `index.ts` | Runtime entry point for the published CLI. |
-| `classes.cliclient.ts` | Minimal client wrapper: `getClusters()`, `bootstrapGateway()`, `getGatewayStatus()` and `exportRelayAuthorization()`. |
+| `classes.cliclient.ts` | Minimal client wrapper: `getClusters()`, `bootstrapGateway()`, `getGatewayStatus()`, `exportRelayAuthorization()`, `setCorestoreControlToken()` and `getCorestoreControlTokenState()`. |
 | `commands.ts` | Parses the argument vector into one command, refusing anything else as usage. |
-| `tokeninput.ts` | Reads the dcrouter admin token from stdin. |
+| `tokeninput.ts` | Reads the dcrouter admin token and the Corestore control token from stdin, each bounded and checked by its contract. |
+| `corestorecontroltoken.ts` | Sets and reads the Corestore control token through the API client and names the contract's refusals. |
 | `relayauthorization.ts` | Checks the private output directory and writes a cluster relay's bearer as a new 0600 file. |
 | `plugins.ts` | Centralized imports for the submodule. |
 | `tspublish.json` | Published package name, dependencies, `servezone` bin metadata, and `useBase`, which takes the registries from the release's npm target. |

package/ts_cliclient/tokeninput.ts

@@ -1,39 +1,64 @@
 import * as plugins from './plugins.js';
 
-/** Why the admin token piped in was not taken, named without quoting any of it. */
-export type TBootstrapTokenInputRefusal =
+/** Why a token piped in was not taken, named without quoting any of it. */
+export type TTokenInputRefusal =
   /** stdin is a terminal, which would echo a token typed into it; pipe the token in instead. */
   | 'token-input-terminal'
   /** stdin carried more bytes than a token and one line break. */
   | 'token-input-oversized'
-  /** What stdin carried is not a token: empty, or a byte outside visible ASCII, a space included. */
+  /** What stdin carried is not a token by the token's own rule: empty, or a byte the rule refuses. */
   | 'token-input-invalid';
 
-export class BootstrapTokenInputError extends Error {
-  constructor(public readonly refusal: TBootstrapTokenInputRefusal) {
-    super(`The dcrouter admin token on stdin was refused: ${refusal}.`);
+/** Why the dcrouter admin token piped into `gateway bootstrap` was not taken. */
+export type TBootstrapTokenInputRefusal = TTokenInputRefusal;
+
+/** A refused token input: which token, and why, never a byte of what was read. */
+export class TokenInputError extends Error {
+  constructor(public readonly refusal: TTokenInputRefusal, subjectArg: string) {
+    super(`${subjectArg} on stdin was refused: ${refusal}.`);
+    this.name = 'TokenInputError';
+  }
+}
+
+export class BootstrapTokenInputError extends TokenInputError {
+  constructor(refusalArg: TTokenInputRefusal) {
+    super(refusalArg, 'The dcrouter admin token');
     this.name = 'BootstrapTokenInputError';
   }
 }
 
-function refuseUnless(conditionArg: unknown, refusalArg: TBootstrapTokenInputRefusal): asserts conditionArg {
-  if (!conditionArg) throw new BootstrapTokenInputError(refusalArg);
+export class CorestoreControlTokenInputError extends TokenInputError {
+  constructor(refusalArg: TTokenInputRefusal) {
+    super(refusalArg, 'The Corestore control token');
+    this.name = 'CorestoreControlTokenInputError';
+  }
 }
 
-/** What the token is read from: the command's stdin, or a stream a test hands in. */
-export type TBootstrapTokenInput = AsyncIterable<Uint8Array> & { isTTY?: boolean };
+/** What a token is read from: the command's stdin, or a stream a test hands in. */
+export type TTokenInput = AsyncIterable<Uint8Array> & { isTTY?: boolean };
+export type TBootstrapTokenInput = TTokenInput;
+
+/** One token's rule: its contract's bound and check, and the error its refusals are named with. */
+interface ITokenInputRule {
+  /** The most bytes the token itself may have; one line break more is read and stripped. */
+  maximumTokenBytes: number;
+  /** The contract's check of the token's bytes, line break stripped. */
+  isToken: (tokenArg: Uint8Array) => boolean;
+  refuse: (refusalArg: TTokenInputRefusal) => TokenInputError;
+}
 
 /**
- * The dcrouter admin token piped into `gateway bootstrap`, as bytes the caller wipes.
+ * A token piped into a command, as bytes the caller wipes.
  *
  * stdin is the only source: an argument would sit in the process list and the shell history, and
  * the environment leaks into child processes. One trailing line break, `\n` or `\r\n`, is what
- * `echo` or a file adds and is not part of the token; everything else must pass the contract's
- * token rule. Every byte read is wiped before this answers, whatever it answers.
+ * `echo` or a file adds and is not part of the token; everything else must pass the token's rule.
+ * Reading stops as soon as stdin carries more than the rule's bound and one line break. Every byte
+ * read is wiped before this answers, whatever it answers.
  */
-export const readBootstrapTokenInput = async (inputArg: TBootstrapTokenInput): Promise<Uint8Array> => {
-  refuseUnless(inputArg.isTTY !== true, 'token-input-terminal');
-  const maximumBytes = plugins.servezoneInterfaces.data.externalGatewayBootstrapContract.maximumTokenBytes + 2;
+const readTokenInput = async (inputArg: TTokenInput, ruleArg: ITokenInputRule): Promise<Uint8Array> => {
+  if (inputArg.isTTY === true) throw ruleArg.refuse('token-input-terminal');
+  const maximumBytes = ruleArg.maximumTokenBytes + 2;
   const chunks: Uint8Array[] = [];
   let input: Uint8Array | undefined;
   try {
@@ -41,7 +66,7 @@ export const readBootstrapTokenInput = async (inputArg: TBootstrapTokenInput): P
     for await (const chunk of inputArg) {
       chunks.push(chunk);
       byteLength += chunk.byteLength;
-      refuseUnless(byteLength <= maximumBytes, 'token-input-oversized');
+      if (byteLength > maximumBytes) throw ruleArg.refuse('token-input-oversized');
     }
     input = Buffer.concat(chunks, byteLength);
     let end = input.byteLength;
@@ -50,7 +75,7 @@ export const readBootstrapTokenInput = async (inputArg: TBootstrapTokenInput): P
       if (end > 0 && input[end - 1] === 0x0d) end -= 1;
     }
     const token = input.subarray(0, end);
-    refuseUnless(plugins.servezoneInterfaces.data.isExternalGatewayBootstrapToken(token), 'token-input-invalid');
+    if (!ruleArg.isToken(token)) throw ruleArg.refuse('token-input-invalid');
     // A copy, because the input and every view of it are wiped below.
     return new Uint8Array(token);
   } finally {
@@ -58,3 +83,41 @@ export const readBootstrapTokenInput = async (inputArg: TBootstrapTokenInput): P
     for (const chunk of chunks) chunk.fill(0);
   }
 };
+
+/**
+ * The dcrouter admin token piped into `gateway bootstrap`: at most the bootstrap contract's
+ * `maximumTokenBytes` of visible ASCII.
+ */
+export const readBootstrapTokenInput = async (inputArg: TTokenInput): Promise<Uint8Array> =>
+  await readTokenInput(inputArg, {
+    maximumTokenBytes: plugins.servezoneInterfaces.data.externalGatewayBootstrapContract.maximumTokenBytes,
+    isToken: (tokenArg) => plugins.servezoneInterfaces.data.isExternalGatewayBootstrapToken(tokenArg),
+    refuse: (refusalArg) => new BootstrapTokenInputError(refusalArg),
+  });
+
+/**
+ * The token as text, exactly as its bytes say: invalid UTF-8 throws, and a leading byte order mark
+ * is kept, so the contract judges and Cloudly receives every character that was piped in.
+ */
+export const decodeCorestoreControlToken = (tokenArg: Uint8Array): string =>
+  new TextDecoder('utf-8', { fatal: true, ignoreBOM: true }).decode(tokenArg);
+
+/**
+ * The Corestore control token piped into `corestore set-control-token`: what the contract's
+ * `isCorestoreControlToken` accepts, so at most `corestoreCredentialRuntimeLimits
+ * .maximumControlTokenBytes` of UTF-8 without whitespace.
+ */
+export const readCorestoreControlTokenInput = async (inputArg: TTokenInput): Promise<Uint8Array> =>
+  await readTokenInput(inputArg, {
+    maximumTokenBytes: plugins.servezoneInterfacesRuntime.corestoreCredentialRuntimeLimits.maximumControlTokenBytes,
+    isToken: (tokenArg) => {
+      let token: string;
+      try {
+        token = decodeCorestoreControlToken(tokenArg);
+      } catch {
+        return false;
+      }
+      return plugins.servezoneInterfacesRuntime.isCorestoreControlToken(token);
+    },
+    refuse: (refusalArg) => new CorestoreControlTokenInputError(refusalArg),
+  });