@serve.zone/pallet-bundle 35.3.0

package/dist_ts_bundle/classes.controlprocess.d.ts

@@ -0,0 +1,71 @@
+import { type TPalletControlLifetimeMode, type TPalletControlOneshotMode } from './protocol.js';
+/** Why a supervised `pallet-control` process did not complete. */
+export type TPalletControlProcessFailure = 'invalid_input' | 'already_started'
+/** The executable is not the trusted one: unsafe path, other digest, or it could not start. */
+ | 'artifact_rejected' | 'cancelled' | 'startup_timeout' | 'operation_timeout' | 'owner_failed'
+/** Pallet refused the `DENO_TLS_CA_STORE` it was started with. */
+ | 'invalid_ca_store'
+/** Pallet's packet engine refused the running kernel. */
+ | 'unsupported_kernel' | 'protocol_invalid' | 'shutdown_failed';
+/** The operator's remedy for `unsupported_kernel`, from Pallet's host kernel requirements. */
+export declare const palletUnsupportedKernelRemedy: string;
+export declare class PalletControlProcessError extends Error {
+    readonly code: TPalletControlProcessFailure;
+    constructor(code: TPalletControlProcessFailure);
+}
+/**
+ * The failure a `failed` line's reason names, or `undefined` for a reason outside the protocol. A
+ * reason whose remedy lies on this host is named apart; every other reason is Pallet's own failure.
+ */
+export declare const palletControlFailure: (reasonArg: unknown) => "unsupported_kernel" | "invalid_ca_store" | "owner_failed" | undefined;
+export interface IPalletControlProcessOptions {
+    /** Trusted installed bundle identity (`IPalletControlBundle.executables.control`), never read from CLI or environment. */
+    binaryPath: string;
+    binarySha256: string;
+    /** Owning-code qualification only; production supervises as root. */
+    expectedUid?: number;
+    /** Where the child's standard-error lines go, bounded; defaults to this process's standard error. */
+    stderr?: (lineArg: string) => void;
+}
+export interface IPalletControlOneshotOptions extends IPalletControlProcessOptions {
+    operationTimeoutMs?: number;
+    shutdownTimeoutMs?: number;
+    terminationGraceMs?: number;
+}
+/**
+ * One null-stdin oneshot: `guard-recover`, `guard-commission`, `network-acquire`,
+ * `network-acquire-local` or `store-provision`. Success requires the complete protocol (`ready`,
+ * then `stopped`), drained pipes and a successful exit. Cancellation and the operation deadline
+ * signal the child and still wait for its actual exit.
+ */
+export declare class PalletControlOneshot {
+    private readonly options;
+    private used;
+    constructor(optionsArg: IPalletControlOneshotOptions);
+    run(modeArg: TPalletControlOneshotMode, signalArg: AbortSignal): Promise<void>;
+    private runOnce;
+}
+export interface IPalletControlLifetimeOptions extends IPalletControlProcessOptions {
+    mode: TPalletControlLifetimeMode;
+    startupTimeoutMs?: number;
+    /** How long a stop may take after stdin closes before the child is signalled. */
+    shutdownTimeoutMs?: number;
+    terminationGraceMs?: number;
+}
+/**
+ * One supervised child lifetime: `enrollment-serve`, `enrollment-provision` or `runtime-serve`. The
+ * child holds its stdin pipe for the lifetime; closing it is the graceful stop, and only a missed
+ * shutdown deadline signals. The operation runs while the child reports `ready`, and the lifetime
+ * never restarts a child.
+ */
+export declare class PalletControlLifetime {
+    private readonly options;
+    private readonly mode;
+    private used;
+    private available;
+    constructor(optionsArg: IPalletControlLifetimeOptions);
+    get running(): boolean;
+    /** The operation must drain its admitted work after cancellation; references must not escape. */
+    run<TResult>(signalArg: AbortSignal, operationArg: (signalArg: AbortSignal) => Promise<TResult>): Promise<TResult>;
+    private runOnce;
+}

package/dist_ts_bundle/classes.controlprocess.js

@@ -0,0 +1,441 @@
+import * as plugins from './plugins.js';
+import { canonicalPath, verifyExecutable } from './paths.js';
+import { PalletControlStderr } from './classes.controlstderr.js';
+import { palletControlLifetimeModes, palletControlLinePrefix, palletControlOneshotModes, } from './protocol.js';
+/** The operator's remedy for `unsupported_kernel`, from Pallet's host kernel requirements. */
+export const palletUnsupportedKernelRemedy = "Pallet's packet engine refused this host's kernel: boot Linux 6.9 or newer with the nftables filter and NAT " +
+    'modules (nf_tables, nft_nat, nft_chain_nat, nf_nat and the reject modules) available; see Pallet\'s readme, ' +
+    '"Host kernel requirements".';
+export class PalletControlProcessError extends Error {
+    code;
+    constructor(code) {
+        super(`Pallet control process failed: ${code}.${code === 'unsupported_kernel' ? ` ${palletUnsupportedKernelRemedy}` : ''}`);
+        this.code = code;
+        this.name = 'PalletControlProcessError';
+    }
+}
+const failures = new Map([
+    ['invalid_arguments', 'owner_failed'],
+    ['invalid_ca_store', 'invalid_ca_store'],
+    ['invalid_stdin', 'owner_failed'],
+    ['owner_failed', 'owner_failed'],
+    ['unsupported_kernel', 'unsupported_kernel'],
+]);
+/**
+ * The failure a `failed` line's reason names, or `undefined` for a reason outside the protocol. A
+ * reason whose remedy lies on this host is named apart; every other reason is Pallet's own failure.
+ */
+export const palletControlFailure = (reasonArg) => typeof reasonArg === 'string' ? failures.get(reasonArg) : undefined;
+/**
+ * Starts the verified executable in one mode with a clean environment and reads its protocol.
+ * `onLine` receives each complete stdout line and throws on a protocol violation; `onInvalid` is
+ * told once when either pipe violates the protocol or its bounds.
+ */
+function spawnControl(optionsArg) {
+    const child = plugins.childProcess.spawn(optionsArg.binaryPath, [optionsArg.mode], {
+        cwd: '/', env: { PATH: '/usr/bin:/bin' }, stdio: [optionsArg.stdin, 'pipe', 'pipe'],
+    });
+    let exited = false;
+    let outputDone = false;
+    let outputBytes = 0;
+    child.stdin?.on('error', () => undefined);
+    const exit = new Promise((resolve) => {
+        child.once('exit', (code, signal) => { exited = true; resolve({ code, signal, spawned: true }); });
+        child.on('error', () => {
+            if (child.pid === undefined) {
+                exited = true;
+                resolve({ code: null, signal: null, spawned: false });
+            }
+        });
+    });
+    const read = async (streamArg, stdoutArg) => {
+        const decoder = new TextDecoder('utf-8', { fatal: true });
+        const diagnostics = stdoutArg ? undefined : new PalletControlStderr(optionsArg.mode, optionsArg.stderr);
+        let pending = '';
+        try {
+            for await (const chunk of streamArg) {
+                // No encoding is set on the pipes, so every chunk is bytes.
+                if (typeof chunk === 'string')
+                    throw new Error('Unexpected text chunk.');
+                if (chunk.length > 1024 * 1024)
+                    throw new Error('Oversized chunk.');
+                outputBytes += chunk.length;
+                if (optionsArg.maximumOutputBytes !== null && outputBytes > optionsArg.maximumOutputBytes) {
+                    throw new Error('Output exceeds its bound.');
+                }
+                if (diagnostics) {
+                    diagnostics.accept(chunk);
+                    continue;
+                }
+                pending += decoder.decode(chunk, { stream: true });
+                for (let index; (index = pending.indexOf('\n')) !== -1;) {
+                    const line = pending.slice(0, index);
+                    pending = pending.slice(index + 1);
+                    if (line.length > 4096)
+                        throw new Error('Oversized line.');
+                    optionsArg.onLine(line);
+                }
+                if (pending.length > 4096)
+                    throw new Error('Oversized line.');
+            }
+            if (stdoutArg && (decoder.decode().length !== 0 || pending.length !== 0))
+                throw new Error('Unterminated line.');
+        }
+        catch {
+            optionsArg.onInvalid();
+            streamArg.destroy();
+        }
+        finally {
+            diagnostics?.close();
+        }
+    };
+    const output = Promise.all([read(child.stdout, true), read(child.stderr, false)]).then(() => { outputDone = true; });
+    // Safety net only: a descendant holding the pipes must not keep this lifetime open.
+    void exit.then(() => {
+        const timer = setTimeout(() => {
+            if (outputDone)
+                return;
+            optionsArg.onDrainExpired();
+            child.stdout?.destroy();
+            child.stderr?.destroy();
+        }, optionsArg.terminationGraceMs);
+        void output.then(() => clearTimeout(timer));
+    });
+    return {
+        process: child, exit, output, exited: () => exited,
+        send: (signalArg) => !exited && child.kill(signalArg),
+    };
+}
+const validated = (optionsArg, allowedArg, timeoutsArg) => {
+    try {
+        const allowed = ['binaryPath', 'binarySha256', 'expectedUid', 'stderr', ...allowedArg, ...timeoutsArg.map(([key]) => key)];
+        if (!optionsArg || typeof optionsArg !== 'object' || plugins.nodeUtil.types.isProxy(optionsArg) ||
+            Object.getPrototypeOf(optionsArg) !== Object.prototype || Object.keys(optionsArg).some((key) => !allowed.includes(key))) {
+            throw new Error();
+        }
+        const options = optionsArg;
+        const expectedUid = options.expectedUid ?? 0;
+        if (typeof options.binarySha256 !== 'string' || !/^[0-9a-f]{64}$/.test(options.binarySha256) ||
+            !Number.isSafeInteger(expectedUid) || expectedUid < 0 || process.platform !== 'linux' || process.getuid?.() !== expectedUid ||
+            (options.stderr !== undefined && typeof options.stderr !== 'function'))
+            throw new Error();
+        const timeouts = {};
+        for (const [key, fallback, maximum] of timeoutsArg) {
+            const value = options[key] ?? fallback;
+            if (typeof value !== 'number' || !Number.isSafeInteger(value) || value < 1 || value > maximum)
+                throw new Error();
+            timeouts[key] = value;
+        }
+        return {
+            binaryPath: canonicalPath(options.binaryPath), binarySha256: options.binarySha256, expectedUid,
+            stderr: options.stderr ?? ((lineArg) => console.error(lineArg)), timeouts,
+        };
+    }
+    catch {
+        throw new PalletControlProcessError('invalid_input');
+    }
+};
+/**
+ * One null-stdin oneshot: `guard-recover`, `guard-commission`, `network-acquire`,
+ * `network-acquire-local` or `store-provision`. Success requires the complete protocol (`ready`,
+ * then `stopped`), drained pipes and a successful exit. Cancellation and the operation deadline
+ * signal the child and still wait for its actual exit.
+ */
+export class PalletControlOneshot {
+    options;
+    used = false;
+    constructor(optionsArg) {
+        this.options = validated(optionsArg, [], [
+            ['operationTimeoutMs', 360_000, 600_000], ['shutdownTimeoutMs', 330_000, 600_000], ['terminationGraceMs', 1_000, 60_000],
+        ]);
+    }
+    run(modeArg, signalArg) {
+        if (!(signalArg instanceof AbortSignal) || !Object.hasOwn(palletControlOneshotModes, modeArg)) {
+            return Promise.reject(new PalletControlProcessError('invalid_input'));
+        }
+        if (this.used)
+            return Promise.reject(new PalletControlProcessError('already_started'));
+        this.used = true;
+        return this.runOnce(modeArg, signalArg);
+    }
+    async runOnce(modeArg, signalArg) {
+        const protocol = palletControlOneshotModes[modeArg];
+        const { timeouts } = this.options;
+        const abort = new AbortController();
+        let child;
+        // Classification is decided only once the exit and both drained pipes are joined: the child's
+        // own protocol evidence is read after its exit whenever the scheduler says so.
+        let evidence;
+        let failure;
+        let shutdownFailed = false;
+        let drainExpired = false;
+        let stopping = false;
+        // Written by the protocol reader, read after the child and its pipes are joined.
+        const progress = { phase: 'initial' };
+        let killTimer;
+        let status;
+        const stop = (reasonArg) => {
+            if (reasonArg && (!failure || failure === 'cancelled'))
+                failure = reasonArg;
+            abort.abort();
+            if (stopping)
+                return;
+            stopping = true;
+            if (child && !child.exited()) {
+                // Null stdin is normal for this protocol. Signals request joined Pallet cleanup.
+                child.send('SIGTERM');
+                killTimer = setTimeout(() => { if (child.send('SIGKILL'))
+                    shutdownFailed = true; }, timeouts.shutdownTimeoutMs);
+            }
+        };
+        const reject = (reasonArg) => {
+            // Reads cut short by the drain deadline carry no evidence about the child.
+            if (!drainExpired)
+                evidence ??= reasonArg;
+            stop();
+        };
+        const onAbort = () => stop('cancelled');
+        signalArg.addEventListener('abort', onAbort, { once: true });
+        const timer = setTimeout(() => stop('operation_timeout'), timeouts.operationTimeoutMs);
+        const line = (lineArg) => {
+            if (!lineArg.startsWith(palletControlLinePrefix))
+                return;
+            const value = JSON.parse(lineArg.slice(palletControlLinePrefix.length));
+            if (!value || typeof value !== 'object' || Array.isArray(value) || value.protocol !== protocol ||
+                progress.phase === 'stopped' || progress.phase === 'failed')
+                throw new Error('Unexpected protocol line.');
+            const keys = Object.keys(value).sort().join(',');
+            const named = palletControlFailure(value.reason);
+            if (value.event === 'ready' && keys === 'event,protocol' && progress.phase === 'initial')
+                progress.phase = 'ready';
+            else if (value.event === 'stopped' && keys === 'event,protocol' && progress.phase === 'ready')
+                progress.phase = 'stopped';
+            else if (value.event === 'failed' && keys === 'event,protocol,reason' && named !== undefined) {
+                progress.phase = 'failed';
+                reject(named);
+            }
+            else
+                throw new Error('Unexpected protocol event.');
+        };
+        try {
+            if (signalArg.aborted)
+                onAbort();
+            await verifyExecutable(this.options.binaryPath, this.options.binarySha256, this.options.expectedUid, abort.signal);
+            abort.signal.throwIfAborted();
+            child = spawnControl({
+                binaryPath: this.options.binaryPath, mode: modeArg, stdin: 'ignore', stderr: this.options.stderr,
+                maximumOutputBytes: 1024 * 1024, terminationGraceMs: timeouts.terminationGraceMs, onLine: line,
+                onInvalid: () => reject('protocol_invalid'),
+                onDrainExpired: () => { drainExpired = true; shutdownFailed = true; },
+            });
+            status = await child.exit;
+            await child.output;
+        }
+        catch {
+            stop(failure ?? (child ? 'owner_failed' : 'artifact_rejected'));
+        }
+        finally {
+            // Never release this lifetime on a timeout alone: wait for the actual child and pipes.
+            if (child) {
+                status = await child.exit;
+                await child.output;
+            }
+            signalArg.removeEventListener('abort', onAbort);
+            clearTimeout(timer);
+            clearTimeout(killTimer);
+        }
+        const code = evidence ?? (shutdownFailed ? 'shutdown_failed' : failure) ??
+            (status && !status.spawned ? 'artifact_rejected' : undefined) ??
+            (status && status.code !== 0 ? 'owner_failed' : undefined) ??
+            (progress.phase !== 'stopped' ? 'protocol_invalid' : undefined);
+        if (code)
+            throw new PalletControlProcessError(code);
+    }
+}
+/**
+ * One supervised child lifetime: `enrollment-serve`, `enrollment-provision` or `runtime-serve`. The
+ * child holds its stdin pipe for the lifetime; closing it is the graceful stop, and only a missed
+ * shutdown deadline signals. The operation runs while the child reports `ready`, and the lifetime
+ * never restarts a child.
+ */
+export class PalletControlLifetime {
+    options;
+    mode;
+    used = false;
+    available = false;
+    constructor(optionsArg) {
+        const mode = optionsArg?.mode;
+        if (typeof mode !== 'string' || !Object.hasOwn(palletControlLifetimeModes, mode)) {
+            throw new PalletControlProcessError('invalid_input');
+        }
+        const runtime = mode === 'runtime-serve';
+        this.mode = mode;
+        // The runtime may join a five-minute native operation, then database cleanup.
+        this.options = validated(optionsArg, ['mode'], [
+            ['startupTimeoutMs', 15_000, 60_000], ['shutdownTimeoutMs', runtime ? 330_000 : 15_000, runtime ? 600_000 : 60_000],
+            ['terminationGraceMs', 1_000, 60_000],
+        ]);
+    }
+    get running() {
+        return this.available;
+    }
+    /** The operation must drain its admitted work after cancellation; references must not escape. */
+    run(signalArg, operationArg) {
+        if (!(signalArg instanceof AbortSignal) || typeof operationArg !== 'function') {
+            return Promise.reject(new PalletControlProcessError('invalid_input'));
+        }
+        if (this.used)
+            return Promise.reject(new PalletControlProcessError('already_started'));
+        this.used = true;
+        return this.runOnce(signalArg, operationArg);
+    }
+    async runOnce(signalArg, operationArg) {
+        const protocol = palletControlLifetimeModes[this.mode];
+        const { timeouts } = this.options;
+        const abort = new AbortController();
+        let child;
+        let evidence;
+        let failure;
+        let shutdownFailed = false;
+        let drainExpired = false;
+        let exitFailed = false;
+        let stopping = false;
+        let readySeen = false;
+        let stoppedSeen = false;
+        let terminalSeen = false;
+        let termTimer;
+        let killTimer;
+        let resolveReady;
+        let rejectReady;
+        const ready = new Promise((resolve, reject) => { resolveReady = resolve; rejectReady = reject; });
+        void ready.catch(() => undefined);
+        const send = (signalArg) => {
+            // Only a missed shutdown deadline signals: a delivered signal proves forced cleanup.
+            if (child?.send(signalArg))
+                shutdownFailed = true;
+        };
+        const stop = (reasonArg) => {
+            // Cancellation is only graceful if the child subsequently proves clean shutdown.
+            if (reasonArg && (!failure || failure === 'cancelled'))
+                failure = reasonArg;
+            this.available = false;
+            abort.abort();
+            rejectReady(new PalletControlProcessError(failure ?? 'cancelled'));
+            if (stopping)
+                return;
+            stopping = true;
+            if (child && !child.exited()) {
+                // EOF is the graceful parent-lifetime signal. No configuration or bearer is written.
+                child.process.stdin?.end();
+                termTimer = setTimeout(() => {
+                    send('SIGTERM');
+                    killTimer = setTimeout(() => send('SIGKILL'), timeouts.terminationGraceMs);
+                }, timeouts.shutdownTimeoutMs);
+            }
+        };
+        const reject = (reasonArg) => {
+            if (!drainExpired)
+                evidence ??= reasonArg;
+            stop();
+        };
+        const onAbort = () => stop('cancelled');
+        signalArg.addEventListener('abort', onAbort, { once: true });
+        const startupTimer = setTimeout(() => stop('startup_timeout'), timeouts.startupTimeoutMs);
+        const line = (lineArg) => {
+            if (!lineArg.startsWith(palletControlLinePrefix))
+                return;
+            const value = JSON.parse(lineArg.slice(palletControlLinePrefix.length));
+            if (!value || typeof value !== 'object' || Array.isArray(value) || terminalSeen || value.protocol !== protocol) {
+                throw new Error('Unexpected protocol line.');
+            }
+            const keys = Object.keys(value).sort().join(',');
+            const named = palletControlFailure(value.reason);
+            if (value.event === 'ready' && keys === 'event,protocol' && !readySeen) {
+                readySeen = true;
+                if (!stopping && !child?.exited()) {
+                    this.available = true;
+                    resolveReady();
+                }
+            }
+            else if (value.event === 'stopped' && keys === 'event,protocol') {
+                stoppedSeen = true;
+                terminalSeen = true;
+                if (!stopping)
+                    reject('owner_failed');
+            }
+            else if (value.event === 'failed' && keys === 'event,protocol,reason' && named !== undefined) {
+                terminalSeen = true;
+                reject(named);
+            }
+            else
+                throw new Error('Unexpected protocol event.');
+        };
+        let outcome;
+        let operationFailed = false;
+        let operationError;
+        try {
+            if (signalArg.aborted)
+                onAbort();
+            await verifyExecutable(this.options.binaryPath, this.options.binarySha256, this.options.expectedUid, abort.signal);
+            abort.signal.throwIfAborted();
+            child = spawnControl({
+                binaryPath: this.options.binaryPath, mode: this.mode, stdin: 'pipe', stderr: this.options.stderr,
+                // The runtime reports for its whole lifetime; only the enrollment owner's output is bounded in total.
+                maximumOutputBytes: this.mode === 'runtime-serve' ? null : 1024 * 1024,
+                terminationGraceMs: timeouts.terminationGraceMs, onLine: line, onInvalid: () => reject('protocol_invalid'),
+                onDrainExpired: () => { drainExpired = true; shutdownFailed = true; },
+            });
+            void child.exit.then((status) => {
+                this.available = false;
+                // An exit nobody requested, or an unsuccessful one, is a Pallet failure.
+                if (!status.spawned)
+                    failure ??= 'artifact_rejected';
+                else if (!stopping || status.code !== 0)
+                    exitFailed = true;
+                stop();
+            });
+            await ready;
+            clearTimeout(startupTimer);
+            if (abort.signal.aborted || !this.available)
+                throw new PalletControlProcessError(failure ?? 'owner_failed');
+            try {
+                outcome = { value: await operationArg(abort.signal) };
+            }
+            catch (error) {
+                operationFailed = true;
+                operationError = error;
+            }
+        }
+        catch (error) {
+            // Own rejections only report that the lifetime ended; the joined facts below classify it.
+            if (!(error instanceof PalletControlProcessError))
+                failure ??= 'artifact_rejected';
+        }
+        finally {
+            clearTimeout(startupTimer);
+            stop();
+            // Escalation is bounded; an unconfirmed OS exit keeps this owner and its promise alive.
+            if (child) {
+                await child.exit;
+                await child.output;
+            }
+            signalArg.removeEventListener('abort', onAbort);
+            clearTimeout(termTimer);
+            clearTimeout(killTimer);
+        }
+        const spawned = child !== undefined && (await child.exit).spawned;
+        const code = evidence ?? (shutdownFailed ? 'shutdown_failed' : undefined) ??
+            (failure !== 'cancelled' ? failure : undefined) ?? (exitFailed ? 'owner_failed' : undefined) ??
+            // Cancellation is only graceful if the child confirmed its stop.
+            (spawned && !stoppedSeen ? 'shutdown_failed' : failure);
+        if (code)
+            throw new PalletControlProcessError(code);
+        if (operationFailed)
+            throw operationError;
+        // Unreachable: a lifetime that never ran its operation always names a failure above.
+        if (!outcome)
+            throw new PalletControlProcessError('owner_failed');
+        return outcome.value;
+    }
+}
+//# sourceMappingURL=data:application/json;base64,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

package/dist_ts_bundle/classes.controlstderr.d.ts

@@ -0,0 +1,36 @@
+/** The longest forwarded line, in characters after escaping; the rest of the line is cut. */
+export declare const palletControlStderrLineLength = 512;
+/** The most lines forwarded per window; the lines beyond it are counted, not written. */
+export declare const palletControlStderrWindowLines = 64;
+/** The length of one forwarding window. */
+export declare const palletControlStderrWindowMs = 60000;
+/**
+ * Forwards a `pallet-control` child's standard error, one line per line as
+ * `Pallet <mode> stderr: <line>`.
+ *
+ * Pallet writes no diagnostics of its own there except the one line naming the owner behind an
+ * `owner_failed` failure; its native owners' output stays inside Pallet and its errors are
+ * value-free codes. What else reaches this stream is the Deno runtime's report of an error Pallet
+ * did not handle. Every line is bounded: control characters are escaped, a line is cut at
+ * {@link palletControlStderrLineLength} characters, and at most {@link palletControlStderrWindowLines}
+ * lines are written per window; a later line or the end of the stream states how many were not.
+ */
+export declare class PalletControlStderr {
+    private readonly mode;
+    private readonly write;
+    private readonly now;
+    private readonly decoder;
+    private pending;
+    private cut;
+    private windowStart;
+    private windowLines;
+    private suppressed;
+    private closed;
+    constructor(mode: string, write?: (lineArg: string) => void, now?: () => number);
+    /** Accepts one chunk as read from the pipe. */
+    accept(chunkArg: Uint8Array): void;
+    /** Ends the stream: writes an unterminated last line and the count of lines not written. */
+    close(): void;
+    private line;
+    private flushSuppressed;
+}