@uns-kit/core 3.0.32 → 3.0.34

package/MIGRATIONS.md

@@ -9,6 +9,47 @@ Agents must inspect the application's existing ownership and shutdown flow
 before editing it. The examples below describe the intended behavior, not a
 mechanical search-and-replace operation.
 
+## 3.0.34 - Optional paired-input retirement to one direct process
+
+When crossing `<3.0.34` to `>=3.0.34`, ordinary applications require no change.
+Packages opting into `unsDatahub.processGroupDirectRuntime` use shared declaration,
+resource review and startup/readiness helpers under `runtime/process-group-direct-*`.
+The authenticated host must stop receiver first, drain the same input journal,
+prove both original exits and persist one launch intent before starting one direct
+successor. Preserve business profiles, paths, units, journal UUID and original policy.
+
+Schema5 retirement evidence fences old journal owners and original profiles.
+Open recovery pins exact direct configuration/artifact/placement/launch; explicit
+closure releases ordinary direct management but retains the old journal and fences.
+Unknown outcomes stay blocked in the same operation. Never remove policy/journal
+files, rename an owner or force a second launch to bypass review.
+
+`UnsMqttProxy.getInputReadiness()` exposes current SUBACK evidence. Register normal
+signal/drain handlers and confirm output before declaring direct readiness; perform
+confirmation asynchronously when the configured queue must accept during outages.
+No Controller heartbeat is required for normal application cleanup.
+
+Backup snapshots with retirement evidence use internal manifest2 and include exact
+retirement/original-policy bytes. Update the transport helper from the same SDK
+asset before activation; older transports fail closed. Restore remains offline
+review only. See [declaration, API example and limits](https://github.com/uns-openhub/uns-kit/blob/master/docs/process-group-direct-retirement.md).
+
+## 3.0.33 - Explicit queue disablement and generic clean MQTT migration
+
+When crossing `<3.0.33` to `>=3.0.33`, existing applications require no change.
+An existing `publishQueue` remains enabled unless explicitly configured otherwise.
+Use `enabled: false` only for an initial RAM-only deployment or a verified empty
+old queue: pending state, another identity or a live owner blocks disabling.
+
+Applications opting into ordinary clean MQTT migration declare `unsDatahub.mqttDrain`
+protocol1 and call `UnsProxyProcess.enableMigrationDrain()` after preparation.
+Provide `handoverShutdown` hooks that stop background admission and await all
+accepted application work; report publication failures instead of silently losing
+them. Hosts must wait for the bound SDK drain receipt and clean original exit;
+PM2 online/stopped alone is insufficient. Unknown results block the successor.
+Keep standalone shutdown functional. This does not retire paired input journals
+or imply automatic queue transfer. See [the capability and example](https://github.com/uns-openhub/uns-kit/blob/master/docs/mqtt-migration-drain.md).
+
 ## 3.0.32 - Reviewed process-group MQTT output enablement
 
 When crossing `<3.0.32` to `>=3.0.32`, ordinary services, input journals and

package/dist/config/app-config.d.ts

@@ -114,6 +114,7 @@ export interface ProjectAppConfig {
         servername?: string | undefined;
         /** Opt-in MQTT output persistence; does not persist input subscriptions. */
         publishQueue?: {
+            enabled?: boolean;
             mode: "buffered" | "durable";
             storage?: "local" | "runtime";
             directory: string;

package/dist/config/app-config.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"app-config.d.ts","sourceRoot":"","sources":["../../src/config/app-config.ts"],"names":[],"mappings":"AACA,MAAM,WAAW,gBAAgB;IAC7B,GAAG,EAAE;QACD,OAAO,EAAE,MAAM,CAAC;QAChB,IAAI,EAAE,MAAM,CAAC;QACb,2EAA2E;QAC3E,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QAC3B,8EAA8E;QAC9E,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QAC3B,0DAA0D;QAC1D,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QAC9B,YAAY,CAAC,EAAE,MAAM,GAAG,OAAO,GAAG,UAAU,CAAC;QAC7C,iDAAiD;QACjD,WAAW,EAAE,MAAM,CAAC;QACpB,QAAQ,CAAC,EAAE,OAAO,CAAC;QACnB,2DAA2D;QAC3D,gBAAgB,CAAC,EAAE,eAAe,GAAG,SAAS,CAAC;QAC/C,+EAA+E;QAC/E,UAAU,CAAC,EAAE;YACT,uEAAuE;YACvE,OAAO,CAAC,EAAE,OAAO,CAAC;YAClB,8DAA8D;YAC9D,aAAa,CAAC,EAAE,OAAO,CAAC;YACxB,sDAAsD;YACtD,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;YACjC,2GAA2G;YAC3G,kBAAkB,CAAC,EAAE,OAAO,CAAC;YAC7B,6FAA6F;YAC7F,gBAAgB,CAAC,EAAE,MAAM,CAAC;YAC1B,qFAAqF;YACrF,iBAAiB,CAAC,EAAE,MAAM,CAAC;SAC9B,GAAG,SAAS,CAAC;QACd,gBAAgB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QACtC,eAAe,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QACrC,GAAG,CAAC,EAAE,KAAK,GAAG,SAAS,GAAG,MAAM,GAAG,MAAM,CAAC;KAC7C,CAAC;IACF,OAAO,CAAC,EAAE;QACN,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,IAAI,EAAE,MAAM,CAAC;QACb,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,KAAK,CAAC,EAAE,OAAO,GAAG,MAAM,GAAG,MAAM,GAAG,MAAM,GAAG,SAAS,GAAG,OAAO,GAAG,OAAO,CAAC;KAC9E,GAAG,SAAS,CAAC;IACd,KAAK,CAAC,EAAE;QACJ,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QAC1B,KAAK,CAAC,EAAE,MAAM,EAAE,GAAG,SAAS,CAAC;QAC7B,OAAO,CAAC,EAAE;YACN,IAAI,EAAE,MAAM,CAAC;YACb,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;YAC1B,QAAQ,CAAC,EAAE,CAAC,MAAM,GAAG,OAAO,GAAG,IAAI,GAAG,KAAK,GAAG,KAAK,GAAG,KAAK,CAAC,GAAG,SAAS,CAAC;SAC5E,EAAE,GAAG,SAAS,CAAC;QAChB,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QAC1B,QAAQ,CAAC,EAAE,CAAC,MAAM,GAAG,OAAO,GAAG,IAAI,GAAG,KAAK,GAAG,KAAK,GAAG,KAAK,CAAC,GAAG,SAAS,CAAC;QACzE,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QAC9B,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QAC9B,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QAC9B,KAAK,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;QAC5B,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QAC/B,cAAc,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QACpC,eAAe,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QACrC,uBAAuB,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;QAC9C,WAAW,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;QAClC,YAAY,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;QACnC,kBAAkB,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;QACzC,UAAU,CAAC,EAAE;YACT,qBAAqB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;YAC3C,cAAc,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;YACpC,iBAAiB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;YACvC,iBAAiB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;YACvC,0BAA0B,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;YACjD,yBAAyB,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;YAChD,cAAc,CAAC,EAAE;gBACb,CAAC,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;aACvB,GAAG,SAAS,CAAC;SACjB,GAAG,SAAS,CAAC;QACd,EAAE,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QACxB,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QAC1B,GAAG,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QACzB,UAAU,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;KACnC,GAAG,SAAS,CAAC;IACd,MAAM,CAAC,EAAE;QACL,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QAC1B,KAAK,CAAC,EAAE,MAAM,EAAE,GAAG,SAAS,CAAC;QAC7B,OAAO,CAAC,EAAE;YACN,IAAI,EAAE,MAAM,CAAC;YACb,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;YAC1B,QAAQ,CAAC,EAAE,CAAC,MAAM,GAAG,OAAO,GAAG,IAAI,GAAG,KAAK,GAAG,KAAK,GAAG,KAAK,CAAC,GAAG,SAAS,CAAC;SAC5E,EAAE,GAAG,SAAS,CAAC;QAChB,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QAC1B,QAAQ,CAAC,EAAE,CAAC,MAAM,GAAG,OAAO,GAAG,IAAI,GAAG,KAAK,GAAG,KAAK,GAAG,KAAK,CAAC,GAAG,SAAS,CAAC;QACzE,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QAC9B,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QAC9B,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QAC9B,KAAK,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;QAC5B,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QAC/B,cAAc,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QACpC,eAAe,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QACrC,uBAAuB,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;QAC9C,WAAW,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;QAClC,YAAY,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;QACnC,kBAAkB,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;QACzC,UAAU,CAAC,EAAE;YACT,qBAAqB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;YAC3C,cAAc,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;YACpC,iBAAiB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;YACvC,iBAAiB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;YACvC,0BAA0B,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;YACjD,yBAAyB,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;YAChD,cAAc,CAAC,EAAE;gBACb,CAAC,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;aACvB,GAAG,SAAS,CAAC;SACjB,GAAG,SAAS,CAAC;QACd,EAAE,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QACxB,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QAC1B,GAAG,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QACzB,UAAU,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QAChC,4EAA4E;QAC5E,YAAY,CAAC,EAAE;YACX,IAAI,EAAE,UAAU,GAAG,SAAS,CAAC;YAC7B,OAAO,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;YAC9B,SAAS,EAAE,MAAM,CAAC;YAClB,UAAU,CAAC,EAAE,MAAM,CAAC;YACpB,QAAQ,CAAC,EAAE,MAAM,CAAC;YAClB,aAAa,CAAC,EAAE,MAAM,CAAC;YACvB,WAAW,CAAC,EAAE,MAAM,CAAC;YACrB,eAAe,CAAC,EAAE,MAAM,CAAC;YACzB,YAAY,CAAC,EAAE,MAAM,CAAC;YACtB,YAAY,CAAC,EAAE,MAAM,CAAC;YACtB,eAAe,CAAC,EAAE,MAAM,CAAC;YACzB,gBAAgB,CAAC,EAAE,MAAM,CAAC;SAC7B,GAAG,SAAS,CAAC;KACjB,GAAG,SAAS,CAAC;IACd,KAAK,EAAE;QACH,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QAC1B,KAAK,CAAC,EAAE,MAAM,EAAE,GAAG,SAAS,CAAC;QAC7B,OAAO,CAAC,EAAE;YACN,IAAI,EAAE,MAAM,CAAC;YACb,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;YAC1B,QAAQ,CAAC,EAAE,CAAC,MAAM,GAAG,OAAO,GAAG,IAAI,GAAG,KAAK,GAAG,KAAK,GAAG,KAAK,CAAC,GAAG,SAAS,CAAC;SAC5E,EAAE,GAAG,SAAS,CAAC;QAChB,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QAC1B,QAAQ,CAAC,EAAE,CAAC,MAAM,GAAG,OAAO,GAAG,IAAI,GAAG,KAAK,GAAG,KAAK,GAAG,KAAK,CAAC,GAAG,SAAS,CAAC;QACzE,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QAC9B,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QAC9B,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QAC9B,KAAK,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;QAC5B,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QAC/B,cAAc,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QACpC,eAAe,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QACrC,uBAAuB,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;QAC9C,WAAW,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;QAClC,YAAY,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;QACnC,kBAAkB,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;QACzC,UAAU,CAAC,EAAE;YACT,qBAAqB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;YAC3C,cAAc,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;YACpC,iBAAiB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;YACvC,iBAAiB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;YACvC,0BAA0B,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;YACjD,yBAAyB,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;YAChD,cAAc,CAAC,EAAE;gBACb,CAAC,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;aACvB,GAAG,SAAS,CAAC;SACjB,GAAG,SAAS,CAAC;QACd,EAAE,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QACxB,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QAC1B,GAAG,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QACzB,UAAU,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;KACnC,CAAC;IACF,MAAM,CAAC,EAAE;QACL,QAAQ,CAAC,EAAE,cAAc,CAAC;QAC1B,YAAY,EAAE,MAAM,CAAC;QACrB,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;KAChC,GAAG,SAAS,CAAC;CACjB;AAED,MAAM,WAAW,SAAU,SAAQ,gBAAgB;CAAG"}
+{"version":3,"file":"app-config.d.ts","sourceRoot":"","sources":["../../src/config/app-config.ts"],"names":[],"mappings":"AACA,MAAM,WAAW,gBAAgB;IAC7B,GAAG,EAAE;QACD,OAAO,EAAE,MAAM,CAAC;QAChB,IAAI,EAAE,MAAM,CAAC;QACb,2EAA2E;QAC3E,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QAC3B,8EAA8E;QAC9E,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QAC3B,0DAA0D;QAC1D,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QAC9B,YAAY,CAAC,EAAE,MAAM,GAAG,OAAO,GAAG,UAAU,CAAC;QAC7C,iDAAiD;QACjD,WAAW,EAAE,MAAM,CAAC;QACpB,QAAQ,CAAC,EAAE,OAAO,CAAC;QACnB,2DAA2D;QAC3D,gBAAgB,CAAC,EAAE,eAAe,GAAG,SAAS,CAAC;QAC/C,+EAA+E;QAC/E,UAAU,CAAC,EAAE;YACT,uEAAuE;YACvE,OAAO,CAAC,EAAE,OAAO,CAAC;YAClB,8DAA8D;YAC9D,aAAa,CAAC,EAAE,OAAO,CAAC;YACxB,sDAAsD;YACtD,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;YACjC,2GAA2G;YAC3G,kBAAkB,CAAC,EAAE,OAAO,CAAC;YAC7B,6FAA6F;YAC7F,gBAAgB,CAAC,EAAE,MAAM,CAAC;YAC1B,qFAAqF;YACrF,iBAAiB,CAAC,EAAE,MAAM,CAAC;SAC9B,GAAG,SAAS,CAAC;QACd,gBAAgB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QACtC,eAAe,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QACrC,GAAG,CAAC,EAAE,KAAK,GAAG,SAAS,GAAG,MAAM,GAAG,MAAM,CAAC;KAC7C,CAAC;IACF,OAAO,CAAC,EAAE;QACN,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,IAAI,EAAE,MAAM,CAAC;QACb,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,KAAK,CAAC,EAAE,OAAO,GAAG,MAAM,GAAG,MAAM,GAAG,MAAM,GAAG,SAAS,GAAG,OAAO,GAAG,OAAO,CAAC;KAC9E,GAAG,SAAS,CAAC;IACd,KAAK,CAAC,EAAE;QACJ,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QAC1B,KAAK,CAAC,EAAE,MAAM,EAAE,GAAG,SAAS,CAAC;QAC7B,OAAO,CAAC,EAAE;YACN,IAAI,EAAE,MAAM,CAAC;YACb,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;YAC1B,QAAQ,CAAC,EAAE,CAAC,MAAM,GAAG,OAAO,GAAG,IAAI,GAAG,KAAK,GAAG,KAAK,GAAG,KAAK,CAAC,GAAG,SAAS,CAAC;SAC5E,EAAE,GAAG,SAAS,CAAC;QAChB,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QAC1B,QAAQ,CAAC,EAAE,CAAC,MAAM,GAAG,OAAO,GAAG,IAAI,GAAG,KAAK,GAAG,KAAK,GAAG,KAAK,CAAC,GAAG,SAAS,CAAC;QACzE,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QAC9B,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QAC9B,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QAC9B,KAAK,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;QAC5B,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QAC/B,cAAc,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QACpC,eAAe,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QACrC,uBAAuB,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;QAC9C,WAAW,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;QAClC,YAAY,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;QACnC,kBAAkB,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;QACzC,UAAU,CAAC,EAAE;YACT,qBAAqB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;YAC3C,cAAc,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;YACpC,iBAAiB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;YACvC,iBAAiB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;YACvC,0BAA0B,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;YACjD,yBAAyB,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;YAChD,cAAc,CAAC,EAAE;gBACb,CAAC,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;aACvB,GAAG,SAAS,CAAC;SACjB,GAAG,SAAS,CAAC;QACd,EAAE,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QACxB,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QAC1B,GAAG,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QACzB,UAAU,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;KACnC,GAAG,SAAS,CAAC;IACd,MAAM,CAAC,EAAE;QACL,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QAC1B,KAAK,CAAC,EAAE,MAAM,EAAE,GAAG,SAAS,CAAC;QAC7B,OAAO,CAAC,EAAE;YACN,IAAI,EAAE,MAAM,CAAC;YACb,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;YAC1B,QAAQ,CAAC,EAAE,CAAC,MAAM,GAAG,OAAO,GAAG,IAAI,GAAG,KAAK,GAAG,KAAK,GAAG,KAAK,CAAC,GAAG,SAAS,CAAC;SAC5E,EAAE,GAAG,SAAS,CAAC;QAChB,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QAC1B,QAAQ,CAAC,EAAE,CAAC,MAAM,GAAG,OAAO,GAAG,IAAI,GAAG,KAAK,GAAG,KAAK,GAAG,KAAK,CAAC,GAAG,SAAS,CAAC;QACzE,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QAC9B,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QAC9B,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QAC9B,KAAK,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;QAC5B,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QAC/B,cAAc,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QACpC,eAAe,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QACrC,uBAAuB,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;QAC9C,WAAW,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;QAClC,YAAY,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;QACnC,kBAAkB,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;QACzC,UAAU,CAAC,EAAE;YACT,qBAAqB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;YAC3C,cAAc,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;YACpC,iBAAiB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;YACvC,iBAAiB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;YACvC,0BAA0B,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;YACjD,yBAAyB,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;YAChD,cAAc,CAAC,EAAE;gBACb,CAAC,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;aACvB,GAAG,SAAS,CAAC;SACjB,GAAG,SAAS,CAAC;QACd,EAAE,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QACxB,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QAC1B,GAAG,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QACzB,UAAU,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QAChC,4EAA4E;QAC5E,YAAY,CAAC,EAAE;YACX,OAAO,CAAC,EAAE,OAAO,CAAC;YAClB,IAAI,EAAE,UAAU,GAAG,SAAS,CAAC;YAC7B,OAAO,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;YAC9B,SAAS,EAAE,MAAM,CAAC;YAClB,UAAU,CAAC,EAAE,MAAM,CAAC;YACpB,QAAQ,CAAC,EAAE,MAAM,CAAC;YAClB,aAAa,CAAC,EAAE,MAAM,CAAC;YACvB,WAAW,CAAC,EAAE,MAAM,CAAC;YACrB,eAAe,CAAC,EAAE,MAAM,CAAC;YACzB,YAAY,CAAC,EAAE,MAAM,CAAC;YACtB,YAAY,CAAC,EAAE,MAAM,CAAC;YACtB,eAAe,CAAC,EAAE,MAAM,CAAC;YACzB,gBAAgB,CAAC,EAAE,MAAM,CAAC;SAC7B,GAAG,SAAS,CAAC;KACjB,GAAG,SAAS,CAAC;IACd,KAAK,EAAE;QACH,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QAC1B,KAAK,CAAC,EAAE,MAAM,EAAE,GAAG,SAAS,CAAC;QAC7B,OAAO,CAAC,EAAE;YACN,IAAI,EAAE,MAAM,CAAC;YACb,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;YAC1B,QAAQ,CAAC,EAAE,CAAC,MAAM,GAAG,OAAO,GAAG,IAAI,GAAG,KAAK,GAAG,KAAK,GAAG,KAAK,CAAC,GAAG,SAAS,CAAC;SAC5E,EAAE,GAAG,SAAS,CAAC;QAChB,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QAC1B,QAAQ,CAAC,EAAE,CAAC,MAAM,GAAG,OAAO,GAAG,IAAI,GAAG,KAAK,GAAG,KAAK,GAAG,KAAK,CAAC,GAAG,SAAS,CAAC;QACzE,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QAC9B,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QAC9B,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QAC9B,KAAK,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;QAC5B,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QAC/B,cAAc,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QACpC,eAAe,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QACrC,uBAAuB,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;QAC9C,WAAW,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;QAClC,YAAY,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;QACnC,kBAAkB,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;QACzC,UAAU,CAAC,EAAE;YACT,qBAAqB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;YAC3C,cAAc,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;YACpC,iBAAiB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;YACvC,iBAAiB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;YACvC,0BAA0B,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;YACjD,yBAAyB,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;YAChD,cAAc,CAAC,EAAE;gBACb,CAAC,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;aACvB,GAAG,SAAS,CAAC;SACjB,GAAG,SAAS,CAAC;QACd,EAAE,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QACxB,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QAC1B,GAAG,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QACzB,UAAU,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;KACnC,CAAC;IACF,MAAM,CAAC,EAAE;QACL,QAAQ,CAAC,EAAE,cAAc,CAAC;QAC1B,YAAY,EAAE,MAAM,CAAC;QACrB,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;KAChC,GAAG,SAAS,CAAC;CACjB;AAED,MAAM,WAAW,SAAU,SAAQ,gBAAgB;CAAG"}

package/dist/config/app-config.js.map

@@ -1 +1 @@
-{"version":3,"file":"app-config.js","sourceRoot":"","sources":["../../src/config/app-config.ts"],"names":[],"mappings":"","sourcesContent":["/* Auto-generated. Do not edit by hand. */\nexport interface ProjectAppConfig {\n    uns: {\n        graphql: string;\n        rest: string;\n        /** Bearer token used for service-to-service access to the UNS instance. */\n        token?: string | undefined;\n        /** Email used when authenticating to graphql endpoint of the UNS instance. */\n        email?: string | undefined;\n        /** Password or secret value paired with the UNS email. */\n        password?: string | undefined;\n        instanceMode?: \"wait\" | \"force\" | \"handover\";\n        /** Process name used in MQTT topics and logs. */\n        processName: string;\n        handover?: boolean;\n        /** Opt-in controller-correlated MQTT handover protocol. */\n        handoverProtocol?: \"correlated-v1\" | undefined;\n        /** Optional PM2/controller supervisor guard settings for this RTT instance. */\n        supervisor?: {\n            /** Enable controller/PM2 supervisor handling for this RTT instance. */\n            enabled?: boolean;\n            /** Let PM2 restart the process when it exits unexpectedly. */\n            restartOnExit?: boolean;\n            /** Optional PM2 memory restart limit in megabytes. */\n            maxMemoryMb?: number | undefined;\n            /** Let the controller auto-start this instance when required system-service runtime signals are absent. */\n            restartOnUnhealthy?: boolean;\n            /** How long runtime signals must stay unhealthy before the controller supervisor can act. */\n            unhealthyAfterMs?: number;\n            /** Minimum time between controller supervisor restart attempts for this instance. */\n            restartCooldownMs?: number;\n        } | undefined;\n        jwksWellKnownUrl?: string | undefined;\n        kidWellKnownUrl?: string | undefined;\n        env?: \"dev\" | \"staging\" | \"test\" | \"prod\";\n    };\n    logging?: {\n        adapter?: string;\n        host: string;\n        port?: number;\n        level?: \"error\" | \"warn\" | \"info\" | \"http\" | \"verbose\" | \"debug\" | \"silly\";\n    } | undefined;\n    input?: {\n        host?: string | undefined;\n        hosts?: string[] | undefined;\n        servers?: {\n            host: string;\n            port?: number | undefined;\n            protocol?: (\"mqtt\" | \"mqtts\" | \"ws\" | \"wss\" | \"tcp\" | \"ssl\") | undefined;\n        }[] | undefined;\n        port?: number | undefined;\n        protocol?: (\"mqtt\" | \"mqtts\" | \"ws\" | \"wss\" | \"tcp\" | \"ssl\") | undefined;\n        username?: string | undefined;\n        password?: string | undefined;\n        clientId?: string | undefined;\n        clean?: boolean | undefined;\n        keepalive?: number | undefined;\n        connectTimeout?: number | undefined;\n        reconnectPeriod?: number | undefined;\n        reconnectOnConnackError?: boolean | undefined;\n        resubscribe?: boolean | undefined;\n        queueQoSZero?: boolean | undefined;\n        rejectUnauthorized?: boolean | undefined;\n        properties?: {\n            sessionExpiryInterval?: number | undefined;\n            receiveMaximum?: number | undefined;\n            maximumPacketSize?: number | undefined;\n            topicAliasMaximum?: number | undefined;\n            requestResponseInformation?: boolean | undefined;\n            requestProblemInformation?: boolean | undefined;\n            userProperties?: {\n                [x: string]: string;\n            } | undefined;\n        } | undefined;\n        ca?: string | undefined;\n        cert?: string | undefined;\n        key?: string | undefined;\n        servername?: string | undefined;\n    } | undefined;\n    output?: {\n        host?: string | undefined;\n        hosts?: string[] | undefined;\n        servers?: {\n            host: string;\n            port?: number | undefined;\n            protocol?: (\"mqtt\" | \"mqtts\" | \"ws\" | \"wss\" | \"tcp\" | \"ssl\") | undefined;\n        }[] | undefined;\n        port?: number | undefined;\n        protocol?: (\"mqtt\" | \"mqtts\" | \"ws\" | \"wss\" | \"tcp\" | \"ssl\") | undefined;\n        username?: string | undefined;\n        password?: string | undefined;\n        clientId?: string | undefined;\n        clean?: boolean | undefined;\n        keepalive?: number | undefined;\n        connectTimeout?: number | undefined;\n        reconnectPeriod?: number | undefined;\n        reconnectOnConnackError?: boolean | undefined;\n        resubscribe?: boolean | undefined;\n        queueQoSZero?: boolean | undefined;\n        rejectUnauthorized?: boolean | undefined;\n        properties?: {\n            sessionExpiryInterval?: number | undefined;\n            receiveMaximum?: number | undefined;\n            maximumPacketSize?: number | undefined;\n            topicAliasMaximum?: number | undefined;\n            requestResponseInformation?: boolean | undefined;\n            requestProblemInformation?: boolean | undefined;\n            userProperties?: {\n                [x: string]: string;\n            } | undefined;\n        } | undefined;\n        ca?: string | undefined;\n        cert?: string | undefined;\n        key?: string | undefined;\n        servername?: string | undefined;\n        /** Opt-in MQTT output persistence; does not persist input subscriptions. */\n        publishQueue?: {\n            mode: \"buffered\" | \"durable\";\n            storage?: \"local\" | \"runtime\";\n            directory: string;\n            maxRecords?: number;\n            maxBytes?: number;\n            memoryRecords?: number;\n            memoryBytes?: number;\n            maxMessageBytes?: number;\n            maxDiskBytes?: number;\n            minFreeBytes?: number;\n            retryIntervalMs?: number;\n            publishTimeoutMs?: number;\n        } | undefined;\n    } | undefined;\n    infra: {\n        host?: string | undefined;\n        hosts?: string[] | undefined;\n        servers?: {\n            host: string;\n            port?: number | undefined;\n            protocol?: (\"mqtt\" | \"mqtts\" | \"ws\" | \"wss\" | \"tcp\" | \"ssl\") | undefined;\n        }[] | undefined;\n        port?: number | undefined;\n        protocol?: (\"mqtt\" | \"mqtts\" | \"ws\" | \"wss\" | \"tcp\" | \"ssl\") | undefined;\n        username?: string | undefined;\n        password?: string | undefined;\n        clientId?: string | undefined;\n        clean?: boolean | undefined;\n        keepalive?: number | undefined;\n        connectTimeout?: number | undefined;\n        reconnectPeriod?: number | undefined;\n        reconnectOnConnackError?: boolean | undefined;\n        resubscribe?: boolean | undefined;\n        queueQoSZero?: boolean | undefined;\n        rejectUnauthorized?: boolean | undefined;\n        properties?: {\n            sessionExpiryInterval?: number | undefined;\n            receiveMaximum?: number | undefined;\n            maximumPacketSize?: number | undefined;\n            topicAliasMaximum?: number | undefined;\n            requestResponseInformation?: boolean | undefined;\n            requestProblemInformation?: boolean | undefined;\n            userProperties?: {\n                [x: string]: string;\n            } | undefined;\n        } | undefined;\n        ca?: string | undefined;\n        cert?: string | undefined;\n        key?: string | undefined;\n        servername?: string | undefined;\n    };\n    devops?: {\n        provider?: \"azure-devops\";\n        organization: string;\n        project?: string | undefined;\n    } | undefined;\n}\n\nexport interface AppConfig extends ProjectAppConfig {}\n"]}
+{"version":3,"file":"app-config.js","sourceRoot":"","sources":["../../src/config/app-config.ts"],"names":[],"mappings":"","sourcesContent":["/* Auto-generated. Do not edit by hand. */\nexport interface ProjectAppConfig {\n    uns: {\n        graphql: string;\n        rest: string;\n        /** Bearer token used for service-to-service access to the UNS instance. */\n        token?: string | undefined;\n        /** Email used when authenticating to graphql endpoint of the UNS instance. */\n        email?: string | undefined;\n        /** Password or secret value paired with the UNS email. */\n        password?: string | undefined;\n        instanceMode?: \"wait\" | \"force\" | \"handover\";\n        /** Process name used in MQTT topics and logs. */\n        processName: string;\n        handover?: boolean;\n        /** Opt-in controller-correlated MQTT handover protocol. */\n        handoverProtocol?: \"correlated-v1\" | undefined;\n        /** Optional PM2/controller supervisor guard settings for this RTT instance. */\n        supervisor?: {\n            /** Enable controller/PM2 supervisor handling for this RTT instance. */\n            enabled?: boolean;\n            /** Let PM2 restart the process when it exits unexpectedly. */\n            restartOnExit?: boolean;\n            /** Optional PM2 memory restart limit in megabytes. */\n            maxMemoryMb?: number | undefined;\n            /** Let the controller auto-start this instance when required system-service runtime signals are absent. */\n            restartOnUnhealthy?: boolean;\n            /** How long runtime signals must stay unhealthy before the controller supervisor can act. */\n            unhealthyAfterMs?: number;\n            /** Minimum time between controller supervisor restart attempts for this instance. */\n            restartCooldownMs?: number;\n        } | undefined;\n        jwksWellKnownUrl?: string | undefined;\n        kidWellKnownUrl?: string | undefined;\n        env?: \"dev\" | \"staging\" | \"test\" | \"prod\";\n    };\n    logging?: {\n        adapter?: string;\n        host: string;\n        port?: number;\n        level?: \"error\" | \"warn\" | \"info\" | \"http\" | \"verbose\" | \"debug\" | \"silly\";\n    } | undefined;\n    input?: {\n        host?: string | undefined;\n        hosts?: string[] | undefined;\n        servers?: {\n            host: string;\n            port?: number | undefined;\n            protocol?: (\"mqtt\" | \"mqtts\" | \"ws\" | \"wss\" | \"tcp\" | \"ssl\") | undefined;\n        }[] | undefined;\n        port?: number | undefined;\n        protocol?: (\"mqtt\" | \"mqtts\" | \"ws\" | \"wss\" | \"tcp\" | \"ssl\") | undefined;\n        username?: string | undefined;\n        password?: string | undefined;\n        clientId?: string | undefined;\n        clean?: boolean | undefined;\n        keepalive?: number | undefined;\n        connectTimeout?: number | undefined;\n        reconnectPeriod?: number | undefined;\n        reconnectOnConnackError?: boolean | undefined;\n        resubscribe?: boolean | undefined;\n        queueQoSZero?: boolean | undefined;\n        rejectUnauthorized?: boolean | undefined;\n        properties?: {\n            sessionExpiryInterval?: number | undefined;\n            receiveMaximum?: number | undefined;\n            maximumPacketSize?: number | undefined;\n            topicAliasMaximum?: number | undefined;\n            requestResponseInformation?: boolean | undefined;\n            requestProblemInformation?: boolean | undefined;\n            userProperties?: {\n                [x: string]: string;\n            } | undefined;\n        } | undefined;\n        ca?: string | undefined;\n        cert?: string | undefined;\n        key?: string | undefined;\n        servername?: string | undefined;\n    } | undefined;\n    output?: {\n        host?: string | undefined;\n        hosts?: string[] | undefined;\n        servers?: {\n            host: string;\n            port?: number | undefined;\n            protocol?: (\"mqtt\" | \"mqtts\" | \"ws\" | \"wss\" | \"tcp\" | \"ssl\") | undefined;\n        }[] | undefined;\n        port?: number | undefined;\n        protocol?: (\"mqtt\" | \"mqtts\" | \"ws\" | \"wss\" | \"tcp\" | \"ssl\") | undefined;\n        username?: string | undefined;\n        password?: string | undefined;\n        clientId?: string | undefined;\n        clean?: boolean | undefined;\n        keepalive?: number | undefined;\n        connectTimeout?: number | undefined;\n        reconnectPeriod?: number | undefined;\n        reconnectOnConnackError?: boolean | undefined;\n        resubscribe?: boolean | undefined;\n        queueQoSZero?: boolean | undefined;\n        rejectUnauthorized?: boolean | undefined;\n        properties?: {\n            sessionExpiryInterval?: number | undefined;\n            receiveMaximum?: number | undefined;\n            maximumPacketSize?: number | undefined;\n            topicAliasMaximum?: number | undefined;\n            requestResponseInformation?: boolean | undefined;\n            requestProblemInformation?: boolean | undefined;\n            userProperties?: {\n                [x: string]: string;\n            } | undefined;\n        } | undefined;\n        ca?: string | undefined;\n        cert?: string | undefined;\n        key?: string | undefined;\n        servername?: string | undefined;\n        /** Opt-in MQTT output persistence; does not persist input subscriptions. */\n        publishQueue?: {\n            enabled?: boolean;\n            mode: \"buffered\" | \"durable\";\n            storage?: \"local\" | \"runtime\";\n            directory: string;\n            maxRecords?: number;\n            maxBytes?: number;\n            memoryRecords?: number;\n            memoryBytes?: number;\n            maxMessageBytes?: number;\n            maxDiskBytes?: number;\n            minFreeBytes?: number;\n            retryIntervalMs?: number;\n            publishTimeoutMs?: number;\n        } | undefined;\n    } | undefined;\n    infra: {\n        host?: string | undefined;\n        hosts?: string[] | undefined;\n        servers?: {\n            host: string;\n            port?: number | undefined;\n            protocol?: (\"mqtt\" | \"mqtts\" | \"ws\" | \"wss\" | \"tcp\" | \"ssl\") | undefined;\n        }[] | undefined;\n        port?: number | undefined;\n        protocol?: (\"mqtt\" | \"mqtts\" | \"ws\" | \"wss\" | \"tcp\" | \"ssl\") | undefined;\n        username?: string | undefined;\n        password?: string | undefined;\n        clientId?: string | undefined;\n        clean?: boolean | undefined;\n        keepalive?: number | undefined;\n        connectTimeout?: number | undefined;\n        reconnectPeriod?: number | undefined;\n        reconnectOnConnackError?: boolean | undefined;\n        resubscribe?: boolean | undefined;\n        queueQoSZero?: boolean | undefined;\n        rejectUnauthorized?: boolean | undefined;\n        properties?: {\n            sessionExpiryInterval?: number | undefined;\n            receiveMaximum?: number | undefined;\n            maximumPacketSize?: number | undefined;\n            topicAliasMaximum?: number | undefined;\n            requestResponseInformation?: boolean | undefined;\n            requestProblemInformation?: boolean | undefined;\n            userProperties?: {\n                [x: string]: string;\n            } | undefined;\n        } | undefined;\n        ca?: string | undefined;\n        cert?: string | undefined;\n        key?: string | undefined;\n        servername?: string | undefined;\n    };\n    devops?: {\n        provider?: \"azure-devops\";\n        organization: string;\n        project?: string | undefined;\n    } | undefined;\n}\n\nexport interface AppConfig extends ProjectAppConfig {}\n"]}

package/dist/runtime/mqtt-drain.d.ts

@@ -0,0 +1,29 @@
+import { z } from "zod";
+import type { MqttPublishQueueStatus } from "../uns-mqtt/publish-queue-contract.js";
+/** Generic process-local handshake. The host supplies identity and durable receipts. */
+export declare const MQTT_DRAIN_HANDLER: unique symbol;
+export declare const MQTT_DRAIN_READY_EVENT = "uns-kit:mqtt-drain-ready";
+export declare const mqttDrainReceiptSchema: z.ZodObject<{
+    protocol: z.ZodLiteral<1>;
+    state: z.ZodLiteral<"drained">;
+    pendingRecords: z.ZodLiteral<0>;
+    outputs: z.ZodNumber;
+}, z.core.$strict>;
+export type MqttDrainReceipt = z.infer<typeof mqttDrainReceiptSchema>;
+export declare const mqttDrainCapabilitySchema: z.ZodObject<{
+    protocolVersion: z.ZodLiteral<1>;
+}, z.core.$strict>;
+export declare function readMqttDrainCapability(packageRoot: string): 1 | undefined;
+export interface MqttDrainOutput {
+    flush(timeoutMs: number): Promise<void>;
+    sealPublishes(): void;
+    getPublishQueueStatus(): MqttPublishQueueStatus | undefined;
+}
+/** Quiesce before flushing. A timeout is a blocked attempt, never a clean exit. */
+export declare function drainMqttForMigration(options: {
+    quiesce(): Promise<void>;
+    finishAccepted(): Promise<void>;
+    outputs: readonly MqttDrainOutput[];
+    timeoutMs?: number;
+}): Promise<MqttDrainReceipt>;
+//# sourceMappingURL=mqtt-drain.d.ts.map

package/dist/runtime/mqtt-drain.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mqtt-drain.d.ts","sourceRoot":"","sources":["../../src/runtime/mqtt-drain.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,uCAAuC,CAAC;AAEpF,wFAAwF;AACxF,eAAO,MAAM,kBAAkB,eAAsC,CAAC;AACtE,eAAO,MAAM,sBAAsB,6BAA6B,CAAC;AACjE,eAAO,MAAM,sBAAsB;;;;;kBAKjC,CAAC;AACH,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC;AACtE,eAAO,MAAM,yBAAyB;;kBAAoD,CAAC;AAC3F,wBAAgB,uBAAuB,CAAC,WAAW,EAAE,MAAM,GAAG,CAAC,GAAG,SAAS,CAa1E;AACD,MAAM,WAAW,eAAe;IAC9B,KAAK,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACxC,aAAa,IAAI,IAAI,CAAC;IACtB,qBAAqB,IAAI,sBAAsB,GAAG,SAAS,CAAC;CAC7D;AAED,mFAAmF;AACnF,wBAAsB,qBAAqB,CAAC,OAAO,EAAE;IACnD,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IACzB,cAAc,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IAChC,OAAO,EAAE,SAAS,eAAe,EAAE,CAAC;IACpC,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB,GAAG,OAAO,CAAC,gBAAgB,CAAC,CA8B5B"}

package/dist/runtime/mqtt-drain.js

@@ -0,0 +1,70 @@
+import { z } from "zod";
+import fs from "node:fs";
+import path from "node:path";
+/** Generic process-local handshake. The host supplies identity and durable receipts. */
+export const MQTT_DRAIN_HANDLER = Symbol.for("uns-kit.mqtt-drain.v1");
+export const MQTT_DRAIN_READY_EVENT = "uns-kit:mqtt-drain-ready";
+export const mqttDrainReceiptSchema = z.strictObject({
+    protocol: z.literal(1),
+    state: z.literal("drained"),
+    pendingRecords: z.literal(0),
+    outputs: z.number().int().min(0).max(64),
+});
+export const mqttDrainCapabilitySchema = z.strictObject({ protocolVersion: z.literal(1) });
+export function readMqttDrainCapability(packageRoot) {
+    const file = path.join(packageRoot, "package.json");
+    let stat;
+    try {
+        stat = fs.lstatSync(file);
+    }
+    catch (error) {
+        if (error.code === "ENOENT")
+            return undefined;
+        throw error;
+    }
+    if (!stat.isFile() || stat.isSymbolicLink() || stat.size > 1048576)
+        throw Error("Unsafe installed MQTT drain descriptor");
+    const value = JSON.parse(fs.readFileSync(file, "utf8"))?.unsDatahub?.mqttDrain;
+    if (value === undefined)
+        return undefined;
+    mqttDrainCapabilitySchema.parse(value);
+    return 1;
+}
+/** Quiesce before flushing. A timeout is a blocked attempt, never a clean exit. */
+export async function drainMqttForMigration(options) {
+    const timeoutMs = options.timeoutMs ?? 30_000;
+    if (!Number.isInteger(timeoutMs) || timeoutMs < 1 || timeoutMs > 300_000 || options.outputs.length > 64)
+        throw Error("Invalid bounded MQTT migration drain");
+    let timer;
+    const deadline = Date.now() + timeoutMs;
+    let expired = false;
+    const work = (async () => {
+        await options.quiesce();
+        await options.finishAccepted();
+        const remaining = deadline - Date.now();
+        if (remaining <= 0)
+            throw Error("MQTT migration drain timed out; retain the original owner");
+        await Promise.all(options.outputs.map(output => output.flush(remaining)));
+        for (const output of options.outputs) {
+            const status = output.getPublishQueueStatus();
+            if (status && (status.pendingRecords !== 0 || status.memoryRecords !== 0 || status.diskRecords !== 0 || status.inFlight || status.state === "blocked"))
+                throw Error("MQTT output is not confirmed empty; migration remains blocked");
+        }
+        if (expired || Date.now() > deadline)
+            throw Error("MQTT migration drain expired; outcome must be reconciled");
+        // No await between the final checks and admission fences.
+        for (const output of options.outputs)
+            output.sealPublishes();
+        return mqttDrainReceiptSchema.parse({ protocol: 1, state: "drained", pendingRecords: 0, outputs: options.outputs.length });
+    })();
+    try {
+        return await Promise.race([work, new Promise((_, reject) => {
+                timer = setTimeout(() => { expired = true; reject(Error("MQTT migration drain timed out; pending work retained")); }, timeoutMs);
+            })]);
+    }
+    finally {
+        if (timer)
+            clearTimeout(timer);
+    }
+}
+//# sourceMappingURL=mqtt-drain.js.map

package/dist/runtime/mqtt-drain.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mqtt-drain.js","sourceRoot":"","sources":["../../src/runtime/mqtt-drain.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAG7B,wFAAwF;AACxF,MAAM,CAAC,MAAM,kBAAkB,GAAG,MAAM,CAAC,GAAG,CAAC,uBAAuB,CAAC,CAAC;AACtE,MAAM,CAAC,MAAM,sBAAsB,GAAG,0BAA0B,CAAC;AACjE,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAC,YAAY,CAAC;IACnD,QAAQ,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IACtB,KAAK,EAAE,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC;IAC3B,cAAc,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IAC5B,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;CACzC,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAC,YAAY,CAAC,EAAE,eAAe,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;AAC3F,MAAM,UAAU,uBAAuB,CAAC,WAAmB;IACzD,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,cAAc,CAAC,CAAC;IACpD,IAAI,IAAc,CAAC;IACnB,IAAI,CAAC;QAAC,IAAI,GAAG,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;IAAC,CAAC;IAClC,OAAO,KAAK,EAAE,CAAC;QACb,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,SAAS,CAAC;QACzE,MAAM,KAAK,CAAC;IACd,CAAC;IACD,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,IAAI,CAAC,cAAc,EAAE,IAAI,IAAI,CAAC,IAAI,GAAG,OAAO;QAAE,MAAM,KAAK,CAAC,wCAAwC,CAAC,CAAC;IAC1H,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,EAAE,UAAU,EAAE,SAAS,CAAC;IAC/E,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC1C,yBAAyB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACvC,OAAO,CAAC,CAAC;AACX,CAAC;AAOD,mFAAmF;AACnF,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,OAK3C;IACC,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,MAAM,CAAC;IAC9C,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,SAAS,CAAC,IAAI,SAAS,GAAG,CAAC,IAAI,SAAS,GAAG,OAAO,IAAI,OAAO,CAAC,OAAO,CAAC,MAAM,GAAG,EAAE;QACrG,MAAM,KAAK,CAAC,sCAAsC,CAAC,CAAC;IACtD,IAAI,KAAgD,CAAC;IACrD,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;IACxC,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,MAAM,IAAI,GAAG,CAAC,KAAK,IAAI,EAAE;QACvB,MAAM,OAAO,CAAC,OAAO,EAAE,CAAC;QACxB,MAAM,OAAO,CAAC,cAAc,EAAE,CAAC;QAC/B,MAAM,SAAS,GAAG,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACxC,IAAI,SAAS,IAAI,CAAC;YAAE,MAAM,KAAK,CAAC,2DAA2D,CAAC,CAAC;QAC7F,MAAM,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;QAC1E,KAAK,MAAM,MAAM,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;YACrC,MAAM,MAAM,GAAG,MAAM,CAAC,qBAAqB,EAAE,CAAC;YAC9C,IAAI,MAAM,IAAI,CAAC,MAAM,CAAC,cAAc,KAAK,CAAC,IAAI,MAAM,CAAC,aAAa,KAAK,CAAC,IAAI,MAAM,CAAC,WAAW,KAAK,CAAC,IAAI,MAAM,CAAC,QAAQ,IAAI,MAAM,CAAC,KAAK,KAAK,SAAS,CAAC;gBACpJ,MAAM,KAAK,CAAC,+DAA+D,CAAC,CAAC;QACjF,CAAC;QACD,IAAI,OAAO,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ;YAAE,MAAM,KAAK,CAAC,0DAA0D,CAAC,CAAC;QAC9G,0DAA0D;QAC1D,KAAK,MAAM,MAAM,IAAI,OAAO,CAAC,OAAO;YAAE,MAAM,CAAC,aAAa,EAAE,CAAC;QAC7D,OAAO,sBAAsB,CAAC,KAAK,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,cAAc,EAAE,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IAC7H,CAAC,CAAC,EAAE,CAAC;IACL,IAAI,CAAC;QACH,OAAO,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,IAAI,OAAO,CAAQ,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE;gBAChE,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,GAAG,OAAO,GAAG,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,uDAAuD,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;YACnI,CAAC,CAAC,CAAC,CAAC,CAAC;IACP,CAAC;YAAS,CAAC;QACT,IAAI,KAAK;YAAE,YAAY,CAAC,KAAK,CAAC,CAAC;IACjC,CAAC;AACH,CAAC","sourcesContent":["import { z } from \"zod\";\nimport fs from \"node:fs\";\nimport path from \"node:path\";\nimport type { MqttPublishQueueStatus } from \"../uns-mqtt/publish-queue-contract.js\";\n\n/** Generic process-local handshake. The host supplies identity and durable receipts. */\nexport const MQTT_DRAIN_HANDLER = Symbol.for(\"uns-kit.mqtt-drain.v1\");\nexport const MQTT_DRAIN_READY_EVENT = \"uns-kit:mqtt-drain-ready\";\nexport const mqttDrainReceiptSchema = z.strictObject({\n  protocol: z.literal(1),\n  state: z.literal(\"drained\"),\n  pendingRecords: z.literal(0),\n  outputs: z.number().int().min(0).max(64),\n});\nexport type MqttDrainReceipt = z.infer<typeof mqttDrainReceiptSchema>;\nexport const mqttDrainCapabilitySchema = z.strictObject({ protocolVersion: z.literal(1) });\nexport function readMqttDrainCapability(packageRoot: string): 1 | undefined {\n  const file = path.join(packageRoot, \"package.json\");\n  let stat: fs.Stats;\n  try { stat = fs.lstatSync(file); }\n  catch (error) {\n    if ((error as NodeJS.ErrnoException).code === \"ENOENT\") return undefined;\n    throw error;\n  }\n  if (!stat.isFile() || stat.isSymbolicLink() || stat.size > 1048576) throw Error(\"Unsafe installed MQTT drain descriptor\");\n  const value = JSON.parse(fs.readFileSync(file, \"utf8\"))?.unsDatahub?.mqttDrain;\n  if (value === undefined) return undefined;\n  mqttDrainCapabilitySchema.parse(value);\n  return 1;\n}\nexport interface MqttDrainOutput {\n  flush(timeoutMs: number): Promise<void>;\n  sealPublishes(): void;\n  getPublishQueueStatus(): MqttPublishQueueStatus | undefined;\n}\n\n/** Quiesce before flushing. A timeout is a blocked attempt, never a clean exit. */\nexport async function drainMqttForMigration(options: {\n  quiesce(): Promise<void>;\n  finishAccepted(): Promise<void>;\n  outputs: readonly MqttDrainOutput[];\n  timeoutMs?: number;\n}): Promise<MqttDrainReceipt> {\n  const timeoutMs = options.timeoutMs ?? 30_000;\n  if (!Number.isInteger(timeoutMs) || timeoutMs < 1 || timeoutMs > 300_000 || options.outputs.length > 64)\n    throw Error(\"Invalid bounded MQTT migration drain\");\n  let timer: ReturnType<typeof setTimeout> | undefined;\n  const deadline = Date.now() + timeoutMs;\n  let expired = false;\n  const work = (async () => {\n    await options.quiesce();\n    await options.finishAccepted();\n    const remaining = deadline - Date.now();\n    if (remaining <= 0) throw Error(\"MQTT migration drain timed out; retain the original owner\");\n    await Promise.all(options.outputs.map(output => output.flush(remaining)));\n    for (const output of options.outputs) {\n      const status = output.getPublishQueueStatus();\n      if (status && (status.pendingRecords !== 0 || status.memoryRecords !== 0 || status.diskRecords !== 0 || status.inFlight || status.state === \"blocked\"))\n        throw Error(\"MQTT output is not confirmed empty; migration remains blocked\");\n    }\n    if (expired || Date.now() > deadline) throw Error(\"MQTT migration drain expired; outcome must be reconciled\");\n    // No await between the final checks and admission fences.\n    for (const output of options.outputs) output.sealPublishes();\n    return mqttDrainReceiptSchema.parse({ protocol: 1, state: \"drained\", pendingRecords: 0, outputs: options.outputs.length });\n  })();\n  try {\n    return await Promise.race([work, new Promise<never>((_, reject) => {\n      timer = setTimeout(() => { expired = true; reject(Error(\"MQTT migration drain timed out; pending work retained\")); }, timeoutMs);\n    })]);\n  } finally {\n    if (timer) clearTimeout(timer);\n  }\n}\n"]}

package/dist/runtime/mqtt-output-state-contract.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"mqtt-output-state-contract.d.ts","sourceRoot":"","sources":["../../src/runtime/mqtt-output-state-contract.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAOxB,eAAO,MAAM,qBAAqB;;;;;;;EAA2B,CAAC;AAC9D,eAAO,MAAM,2BAA2B;;;;;;;;;;;kBAcqD,CAAC;AAE9F,qFAAqF;AACrF,wBAAgB,wBAAwB,CAAC,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,GAAG,SAAS,GAAG;IAAE,SAAS,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,GAAG,SAAS,CAOvI"}
+{"version":3,"file":"mqtt-output-state-contract.d.ts","sourceRoot":"","sources":["../../src/runtime/mqtt-output-state-contract.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAOxB,eAAO,MAAM,qBAAqB;;;;;;;EAA2B,CAAC;AAC9D,eAAO,MAAM,2BAA2B;;;;;;;;;;;kBAcqD,CAAC;AAE9F,qFAAqF;AACrF,wBAAgB,wBAAwB,CAAC,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,GAAG,SAAS,GAAG;IAAE,SAAS,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,GAAG,SAAS,CAQvI"}

package/dist/runtime/mqtt-output-state-contract.js

@@ -25,6 +25,8 @@ export function managedMqttOutputBinding(config, root) {
     if (value?.output?.publishQueue === undefined)
         return undefined;
     const queue = mqttPublishQueueSchema.parse(value.output.publishQueue);
+    if (queue.enabled === false)
+        return undefined;
     if (queue.storage !== "runtime" || !root)
         throw Error("Controller-managed MQTT output requires storage=runtime and a reviewed persistent Runtime mount");
     return { directory: queue.directory, relative: outputStateRelative(root, queue.directory) };

package/dist/runtime/mqtt-output-state-contract.js.map

@@ -1 +1 @@
-{"version":3,"file":"mqtt-output-state-contract.js","sourceRoot":"","sources":["../../src/runtime/mqtt-output-state-contract.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,sBAAsB,EAAE,MAAM,uCAAuC,CAAC;AAC/E,OAAO,KAAK,MAAM,mCAAmC,CAAC,OAAO,IAAI,EAAE,MAAM,EAAE,CAAC;AAC5E,OAAO,EAAE,iBAAiB,EAAE,MAAM,iCAAiC,CAAC;AACpE,OAAO,EAAE,mBAAmB,EAAE,MAAM,iCAAiC,CAAC;AAEtE,MAAM,CAAC,MAAM,qBAAqB,GAAG,iBAAiB,CAAC,KAAK,CAAC,CAAC;AAC9D,MAAM,CAAC,MAAM,2BAA2B,GAAG,CAAC;KACzC,YAAY,CAAC;IACZ,aAAa,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IAC3B,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;IACpC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,gBAAgB,CAAC;IAC9C,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,qBAAqB,CAAC,aAAa,CAAC;IACxE,OAAO,EAAE,CAAC;SACP,MAAM,EAAE;SACR,GAAG,EAAE;SACL,GAAG,CAAC,CAAC,CAAC;SACN,GAAG,CAAC,qBAAqB,CAAC,aAAa,GAAG,qBAAqB,CAAC,sBAAsB,CAAC;IAC1F,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,GAAG,CAAC,qBAAqB,CAAC,mBAAmB,CAAC;IACjF,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,gBAAgB,CAAC;CAC3C,CAAC;KACD,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,KAAK,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC;AAE9F,qFAAqF;AACrF,MAAM,UAAU,wBAAwB,CAAC,MAAe,EAAE,IAAwB;IAChF,MAAM,KAAK,GAAG,MAAiD,CAAC;IAChE,IAAI,KAAK,EAAE,MAAM,EAAE,YAAY,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAChE,MAAM,KAAK,GAAG,sBAAsB,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;IACtE,IAAI,KAAK,CAAC,OAAO,KAAK,SAAS,IAAI,CAAC,IAAI;QACtC,MAAM,KAAK,CAAC,iGAAiG,CAAC,CAAC;IACjH,OAAO,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,QAAQ,EAAE,mBAAmB,CAAC,IAAI,EAAE,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC;AAC9F,CAAC","sourcesContent":["import { z } from \"zod\";\n\nimport { mqttPublishQueueSchema } from \"../uns-mqtt/publish-queue-contract.js\";\nimport fixed from \"./mqtt-output-state-contract.json\" with { type: \"json\" };\nimport { outputStateLimits } from \"./mqtt-output-state-program.mjs\";\nimport { outputStateRelative } from \"./mqtt-output-state-program.mjs\";\n\nexport const mqttOutputStateLimits = outputStateLimits(fixed);\nexport const mqttOutputStateBackupSchema = z\n  .strictObject({\n    schemaVersion: z.literal(1),\n    state: z.enum([\"included\", \"empty\"]),\n    rootSha256: z.string().regex(/^[a-f0-9]{64}$/),\n    queues: z.number().int().min(0).max(mqttOutputStateLimits.maximumQueues),\n    records: z\n      .number()\n      .int()\n      .min(0)\n      .max(mqttOutputStateLimits.maximumQueues * mqttOutputStateLimits.maximumRecordsPerQueue),\n    bytes: z.number().int().positive().max(mqttOutputStateLimits.maximumCapsuleBytes),\n    sha256: z.string().regex(/^[a-f0-9]{64}$/),\n  })\n  .refine((v) => (v.state === \"included\" ? v.queues > 0 : v.queues === 0 && v.records === 0));\n\n/** Controller inspection of standard SDK configuration, without application code. */\nexport function managedMqttOutputBinding(config: unknown, root: string | undefined): { directory: string; relative: string } | undefined {\n  const value = config as { output?: { publishQueue?: unknown } };\n  if (value?.output?.publishQueue === undefined) return undefined;\n  const queue = mqttPublishQueueSchema.parse(value.output.publishQueue);\n  if (queue.storage !== \"runtime\" || !root)\n    throw Error(\"Controller-managed MQTT output requires storage=runtime and a reviewed persistent Runtime mount\");\n  return { directory: queue.directory, relative: outputStateRelative(root, queue.directory) };\n}\n"]}
+{"version":3,"file":"mqtt-output-state-contract.js","sourceRoot":"","sources":["../../src/runtime/mqtt-output-state-contract.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,sBAAsB,EAAE,MAAM,uCAAuC,CAAC;AAC/E,OAAO,KAAK,MAAM,mCAAmC,CAAC,OAAO,IAAI,EAAE,MAAM,EAAE,CAAC;AAC5E,OAAO,EAAE,iBAAiB,EAAE,MAAM,iCAAiC,CAAC;AACpE,OAAO,EAAE,mBAAmB,EAAE,MAAM,iCAAiC,CAAC;AAEtE,MAAM,CAAC,MAAM,qBAAqB,GAAG,iBAAiB,CAAC,KAAK,CAAC,CAAC;AAC9D,MAAM,CAAC,MAAM,2BAA2B,GAAG,CAAC;KACzC,YAAY,CAAC;IACZ,aAAa,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IAC3B,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;IACpC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,gBAAgB,CAAC;IAC9C,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,qBAAqB,CAAC,aAAa,CAAC;IACxE,OAAO,EAAE,CAAC;SACP,MAAM,EAAE;SACR,GAAG,EAAE;SACL,GAAG,CAAC,CAAC,CAAC;SACN,GAAG,CAAC,qBAAqB,CAAC,aAAa,GAAG,qBAAqB,CAAC,sBAAsB,CAAC;IAC1F,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,GAAG,CAAC,qBAAqB,CAAC,mBAAmB,CAAC;IACjF,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,gBAAgB,CAAC;CAC3C,CAAC;KACD,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,KAAK,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC;AAE9F,qFAAqF;AACrF,MAAM,UAAU,wBAAwB,CAAC,MAAe,EAAE,IAAwB;IAChF,MAAM,KAAK,GAAG,MAAiD,CAAC;IAChE,IAAI,KAAK,EAAE,MAAM,EAAE,YAAY,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAChE,MAAM,KAAK,GAAG,sBAAsB,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;IACtE,IAAI,KAAK,CAAC,OAAO,KAAK,KAAK;QAAE,OAAO,SAAS,CAAC;IAC9C,IAAI,KAAK,CAAC,OAAO,KAAK,SAAS,IAAI,CAAC,IAAI;QACtC,MAAM,KAAK,CAAC,iGAAiG,CAAC,CAAC;IACjH,OAAO,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,QAAQ,EAAE,mBAAmB,CAAC,IAAI,EAAE,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC;AAC9F,CAAC","sourcesContent":["import { z } from \"zod\";\n\nimport { mqttPublishQueueSchema } from \"../uns-mqtt/publish-queue-contract.js\";\nimport fixed from \"./mqtt-output-state-contract.json\" with { type: \"json\" };\nimport { outputStateLimits } from \"./mqtt-output-state-program.mjs\";\nimport { outputStateRelative } from \"./mqtt-output-state-program.mjs\";\n\nexport const mqttOutputStateLimits = outputStateLimits(fixed);\nexport const mqttOutputStateBackupSchema = z\n  .strictObject({\n    schemaVersion: z.literal(1),\n    state: z.enum([\"included\", \"empty\"]),\n    rootSha256: z.string().regex(/^[a-f0-9]{64}$/),\n    queues: z.number().int().min(0).max(mqttOutputStateLimits.maximumQueues),\n    records: z\n      .number()\n      .int()\n      .min(0)\n      .max(mqttOutputStateLimits.maximumQueues * mqttOutputStateLimits.maximumRecordsPerQueue),\n    bytes: z.number().int().positive().max(mqttOutputStateLimits.maximumCapsuleBytes),\n    sha256: z.string().regex(/^[a-f0-9]{64}$/),\n  })\n  .refine((v) => (v.state === \"included\" ? v.queues > 0 : v.queues === 0 && v.records === 0));\n\n/** Controller inspection of standard SDK configuration, without application code. */\nexport function managedMqttOutputBinding(config: unknown, root: string | undefined): { directory: string; relative: string } | undefined {\n  const value = config as { output?: { publishQueue?: unknown } };\n  if (value?.output?.publishQueue === undefined) return undefined;\n  const queue = mqttPublishQueueSchema.parse(value.output.publishQueue);\n  if (queue.enabled === false) return undefined;\n  if (queue.storage !== \"runtime\" || !root)\n    throw Error(\"Controller-managed MQTT output requires storage=runtime and a reviewed persistent Runtime mount\");\n  return { directory: queue.directory, relative: outputStateRelative(root, queue.directory) };\n}\n"]}

package/dist/runtime/process-group-authorization.d.ts

@@ -83,6 +83,78 @@ export declare const hvAuthorizationSchema: z.ZodObject<{
     }, z.core.$strict>>;
 }, z.core.$strict>;
 export declare const productionGroupIds: readonly ["hv", "vv", "jek"];
+/** A retirement keeps the original journal/policy bound; older readers fail closed on schema5. */
+export declare function parseProcessGroupRetirementPolicy(value: unknown): {
+    schemaVersion: 5;
+    kind: "uns-process-group-direct-retirement";
+    protocolVersion: 1;
+    operationId: string;
+    packageName: string;
+    namespace: string;
+    groupId: string;
+    controllerName: string;
+    stateRoot: string;
+    recovery: "closed" | "open";
+    journal: {
+        directory: string;
+        journalId: string;
+        journalContractSha256: string;
+        generationId: string;
+        maxRecords: number;
+        maxBytes: number;
+        minFreeBytes: number;
+        profiles: {
+            processName: string;
+            mappingSha256: string;
+            dataGroup: string;
+        }[];
+        groupSha256?: string;
+        contractVersion?: 1 | 2;
+    };
+    sourcePolicyJson: string;
+    sourcePolicySha256: string;
+    source: {
+        publisher: {
+            placement: {
+                controller: string;
+                rttNode: string;
+                version: string;
+                instanceId: string;
+            };
+            processName: string;
+            configurationSha256: string;
+            artifactSha256: string;
+            policyConfigurationSha256: string;
+        };
+        receiver: {
+            placement: {
+                controller: string;
+                rttNode: string;
+                version: string;
+                instanceId: string;
+            };
+            processName: string;
+            configurationSha256: string;
+            artifactSha256: string;
+            policyConfigurationSha256: string;
+        };
+    };
+    target: {
+        placement: {
+            controller: string;
+            rttNode: string;
+            version: string;
+            instanceId: string;
+        };
+        processName: string;
+        configurationSha256: string;
+        artifactSha256: string;
+        packageRoot: string;
+        descriptorSha256: string;
+        resourceSha256: string;
+        channelsSha256: string;
+    };
+};
 /** Bounded private registry enumeration; retained state without its policy fails closed.
  * New groups are operator-owned data and never a release-time enum in the Controller.
  */

package/dist/runtime/process-group-authorization.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"process-group-authorization.d.ts","sourceRoot":"","sources":["../../src/runtime/process-group-authorization.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,KAAK,MAAM,MAAM,+CAA+C,CAAC;AAiBxE,OAAO,EAAE,8BAA8B,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,MAAM,8BAA8B,CAAC;AAEpH,eAAO,MAAM,4BAA4B,4CAAsC,CAAC;AAahF,eAAO,MAAM,+BAA+B;;;;;;;;;;;;;;;;;;;;;;;;;;kBAiB1C,CAAC;AACH,MAAM,MAAM,+BAA+B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,+BAA+B,CAAC,CAAC;AAC9F,eAAO,MAAM,0BAA0B;;;;;;;;;;;;kBAarC,CAAC;AACH,UAAU,oBAAoB;IAC5B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IAClC,QAAQ,CAAC,IAAI,EAAE,QAAQ,GAAG,QAAQ,GAAG,UAAU,CAAC;IAChD,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,wBAAwB,CAAC,EAAE,MAAM,CAAC;CAC5C;AACD,MAAM,MAAM,yBAAyB,GAAG,MAAM,CAAC,eAAe,GAAG,oBAAoB,CAAC;AACtF,MAAM,MAAM,eAAe,GAAG,yBAAyB,CAAC;AACxD,MAAM,MAAM,qBAAqB,GAAG,MAAM,CAAC,qBAAqB,CAAC;AACjE,eAAO,MAAM,qBAAqB;;;;;;;;;;;;;;;;;;;;;;;kBAA+B,CAAC;AAClE,eAAO,MAAM,kBAAkB,8BAA4B,CAAC;AAiD5D;;GAEG;AACH,wBAAgB,2BAA2B,IAAI,GAAG,CAAC,MAAM,CAAC,CAiFzD;AACD,MAAM,WAAW,gCAAgC;IAC/C,WAAW,EAAE,MAAM,CAAC;IACpB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,gBAAgB,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC1C,QAAQ,EAAE,OAAO,EAAE,CAAC;IACpB,cAAc,EAAE,MAAM,CAAC;IACvB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,OAAO,CAAC;CACtB;AA4GD,6EAA6E;AAC7E,wBAAgB,4BAA4B,CAAC,OAAO,EAAE,gCAAgC,GAAG,yBAAyB,CAEjH;AACD,oFAAoF;AACpF,wBAAgB,mCAAmC,CAAC,OAAO,EAAE,gCAAgC,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI,CAElH;AACD,wBAAgB,6BAA6B,CAAC,OAAO,EAAE,gCAAgC,GAAG,MAAM,CAI/F;AACD,eAAO,MAAM,kBAAkB,qCAA+B,CAAC;AAC/D,wBAAgB,sCAAsC,CACpD,GAAG,EAAE,MAAM,EACX,GAAG,EAAE,MAAM,EACX,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC5B,cAAc,EAAE,MAAM,EACtB,UAAU,UAAQ,6BAUnB;AACD,wBAAgB,sCAAsC,CACpD,KAAK,EAAE,yBAAyB,GAAG,SAAS,EAC5C,SAAS,EAAE,MAAM,EACjB,SAAS,EAAE,MAAM,GAAG,SAAS,GAC5B,IAAI,CAON;AACD,eAAO,MAAM,4BAA4B,+CAAyC,CAAC;AACnF,wBAAgB,4BAA4B,CAAC,KAAK,EAAE,yBAAyB,EAAE,IAAI,EAAE,MAAM,GAAG,IAAI,CAgBjG;AACD,eAAO,MAAM,kBAAkB,qCAA+B,CAAC;AAC/D,wBAAgB,8BAA8B,CAC5C,KAAK,EAAE,yBAAyB,EAChC,GAAG,EAAE,MAAM,EACX,WAAW,EAAE,MAAM,GAAG,SAAS,EAC/B,QAAQ,EAAE,MAAM,GAAG,SAAS,GAC3B,IAAI,CAwBN;AACD,eAAO,MAAM,oBAAoB,uCAAiC,CAAC"}
+{"version":3,"file":"process-group-authorization.d.ts","sourceRoot":"","sources":["../../src/runtime/process-group-authorization.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,KAAK,MAAM,MAAM,+CAA+C,CAAC;AAkBxE,OAAO,EAAE,8BAA8B,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,MAAM,8BAA8B,CAAC;AAEpH,eAAO,MAAM,4BAA4B,4CAAsC,CAAC;AAahF,eAAO,MAAM,+BAA+B;;;;;;;;;;;;;;;;;;;;;;;;;;kBAiB1C,CAAC;AACH,MAAM,MAAM,+BAA+B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,+BAA+B,CAAC,CAAC;AAC9F,eAAO,MAAM,0BAA0B;;;;;;;;;;;;kBAarC,CAAC;AACH,UAAU,oBAAoB;IAC5B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IAClC,QAAQ,CAAC,IAAI,EAAE,QAAQ,GAAG,QAAQ,GAAG,UAAU,CAAC;IAChD,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,wBAAwB,CAAC,EAAE,MAAM,CAAC;CAC5C;AACD,MAAM,MAAM,yBAAyB,GAAG,MAAM,CAAC,eAAe,GAAG,oBAAoB,CAAC;AACtF,MAAM,MAAM,eAAe,GAAG,yBAAyB,CAAC;AACxD,MAAM,MAAM,qBAAqB,GAAG,MAAM,CAAC,qBAAqB,CAAC;AACjE,eAAO,MAAM,qBAAqB;;;;;;;;;;;;;;;;;;;;;;;kBAA+B,CAAC;AAClE,eAAO,MAAM,kBAAkB,8BAA4B,CAAC;AAG5D,kGAAkG;AAClG,wBAAgB,iCAAiC,CAAC,KAAK,EAAC,OAAO;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAiB9D;AA+CD;;GAEG;AACH,wBAAgB,2BAA2B,IAAI,GAAG,CAAC,MAAM,CAAC,CAwFzD;AACD,MAAM,WAAW,gCAAgC;IAC/C,WAAW,EAAE,MAAM,CAAC;IACpB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,gBAAgB,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC1C,QAAQ,EAAE,OAAO,EAAE,CAAC;IACpB,cAAc,EAAE,MAAM,CAAC;IACvB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,OAAO,CAAC;CACtB;AA4GD,6EAA6E;AAC7E,wBAAgB,4BAA4B,CAAC,OAAO,EAAE,gCAAgC,GAAG,yBAAyB,CAEjH;AACD,oFAAoF;AACpF,wBAAgB,mCAAmC,CAAC,OAAO,EAAE,gCAAgC,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI,CAElH;AACD,wBAAgB,6BAA6B,CAAC,OAAO,EAAE,gCAAgC,GAAG,MAAM,CAI/F;AACD,eAAO,MAAM,kBAAkB,qCAA+B,CAAC;AAC/D,wBAAgB,sCAAsC,CACpD,GAAG,EAAE,MAAM,EACX,GAAG,EAAE,MAAM,EACX,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC5B,cAAc,EAAE,MAAM,EACtB,UAAU,UAAQ,6BAUnB;AACD,wBAAgB,sCAAsC,CACpD,KAAK,EAAE,yBAAyB,GAAG,SAAS,EAC5C,SAAS,EAAE,MAAM,EACjB,SAAS,EAAE,MAAM,GAAG,SAAS,GAC5B,IAAI,CAON;AACD,eAAO,MAAM,4BAA4B,+CAAyC,CAAC;AACnF,wBAAgB,4BAA4B,CAAC,KAAK,EAAE,yBAAyB,EAAE,IAAI,EAAE,MAAM,GAAG,IAAI,CAgBjG;AACD,eAAO,MAAM,kBAAkB,qCAA+B,CAAC;AAC/D,wBAAgB,8BAA8B,CAC5C,KAAK,EAAE,yBAAyB,EAChC,GAAG,EAAE,MAAM,EACX,WAAW,EAAE,MAAM,GAAG,SAAS,EAC/B,QAAQ,EAAE,MAAM,GAAG,SAAS,GAC3B,IAAI,CAwBN;AACD,eAAO,MAAM,oBAAoB,uCAAiC,CAAC"}

package/dist/runtime/process-group-authorization.js

@@ -3,6 +3,7 @@ import path from "node:path";
 import { z } from "zod";
 import * as legacy from "./compatibility/energenti-authorization-v1.js";
 import { configurationGroupAuthorizationSchema, configurationGroupPolicyIdentity, verifyConfigurationGroupPolicy } from "./configuration-group-authorization.js";
+import { processGroupRetirementPolicySchema } from "./process-group-direct-contract.js";
 import { normalizeProcessGroupConfiguration, processGroupDescriptor, resolvedProcessGroupChannels, } from "./process-group-contract.js";
 import { configurationAuthorizationHash, groupArtifactHash, groupChannelsHash, readProcessGroupResource as read, sha256 as sha, assertPrivateProcessGroupDirectory, } from "./process-group-resources.js";
 export { configurationAuthorizationHash, groupArtifactHash, groupChannelsHash } from "./process-group-resources.js";
@@ -54,6 +55,26 @@ export const hvAuthorizationSchema = legacy.hvAuthorizationSchema;
 export const productionGroupIds = legacy.productionGroupIds;
 const issued = new WeakSet();
 const privateDirectory = assertPrivateProcessGroupDirectory;
+/** A retirement keeps the original journal/policy bound; older readers fail closed on schema5. */
+export function parseProcessGroupRetirementPolicy(value) {
+    const p = processGroupRetirementPolicySchema.parse(value);
+    if (sha(p.sourcePolicyJson) !== p.sourcePolicySha256)
+        throw Error("Original retirement policy bytes changed");
+    const raw = JSON.parse(p.sourcePolicyJson), original = raw.schemaVersion === 4 ? configurationGroupAuthorizationSchema.parse(raw) : processGroupAuthorizationSchema.parse(raw);
+    const policyId = original.schemaVersion === 4 ? original.generationId : original.groupId;
+    if (original.packageName !== p.packageName || original.namespace !== p.namespace || original.groupId !== p.groupId || original.controllerName !== p.controllerName || original.stateRoot !== p.stateRoot || original.directory !== p.journal.directory || original.journalId !== p.journal.journalId || policyId !== p.journal.generationId || original.directory !== path.join(p.stateRoot, p.namespace, "admission", policyId) || original.channelsSha256 !== p.target.channelsSha256)
+        throw Error("Retirement journal or authority differs from original policy");
+    if ((original.schemaVersion === 4 ? original.groupSha256 : original.groupManifestSha256) !== p.target.resourceSha256)
+        throw Error("Retirement resource differs from original policy");
+    for (const role of ["publisher", "receiver"]) {
+        const m = p.source[role], before = original.placements.find(x => x.role === (role === "publisher" ? "target" : "receiver"));
+        if (!before || before.instanceId !== m.placement.instanceId || before.processName !== m.processName || before.configurationSha256 !== m.policyConfigurationSha256 || original.artifactSha256 !== m.artifactSha256 || m.placement.rttNode !== p.packageName)
+            throw Error("Retirement source placement differs from original policy");
+    }
+    if (p.target.placement.rttNode !== p.packageName || p.journal.profiles.some(x => !original.placements.some(y => y.role === "source" && y.processName === x.processName)))
+        throw Error("Retirement profile ownership differs");
+    return p;
+}
 function registryRoot(root, dir) {
     if (!path.isAbsolute(root) || path.resolve(root) !== root || path.resolve(dir) !== dir)
         throw Error("Invalid policy registry");
@@ -187,6 +208,16 @@ export function configuredGroupProcessNames() {
         const result = new Set();
         for (const file of files) {
             const raw = JSON.parse(read(file, true).toString());
+            if (raw.schemaVersion === 5) {
+                const p = parseProcessGroupRetirementPolicy(raw);
+                if (p.stateRoot !== root || file !== path.join(root, p.namespace, "authorizations", p.journal.generationId + ".json"))
+                    throw Error("Retirement registry binding differs");
+                privateDirectory(root);
+                privateDirectory(path.dirname(file));
+                for (const member of [...p.journal.profiles, p.source.publisher, p.source.receiver])
+                    result.add(member.processName);
+                continue;
+            }
             const p = raw.schemaVersion === 4 ? configurationGroupAuthorizationSchema.parse(raw) : raw.schemaVersion === 3
                 ? processGroupAuthorizationSchema.parse(raw)
                 : z.union([legacy.hvAuthorizationSchema, legacy.processGroupAuthorizationSchema]).parse(raw);