@volter/teams 0.1.37 → 0.1.38

package/machine-core.mjs

@@ -8,7 +8,8 @@
 // It decides nothing on anyone's behalf. Every act is logged.
 import { createServer, connect as netConnect } from 'node:net';
 import { EventEmitter } from 'node:events';
-import { existsSync, mkdirSync, rmSync, chmodSync } from 'node:fs';
+import { existsSync, mkdirSync, readFileSync, renameSync, rmSync, chmodSync, statSync } from 'node:fs';
+import { dirname, join } from 'node:path';
 import { randomBytes } from 'node:crypto';
 import { WebSocket, createWebSocketStream } from 'ws';
 import { Channel, NODE_PROTOCOL } from './channel.mjs';
@@ -89,13 +90,22 @@ export class MachineCore extends EventEmitter {
     await clearStaleSocket(this.socketPath);
     await this.beforeListen();
     this.server = createServer((socket) => this.#accept(socket));
+    // A Unix socket is bound under a name of this daemon's own and then renamed into place: Node unlinks the name it
+    // bound when the server closes, and that name must never be the shared path, which a later daemon may serve from a
+    // file of its own (a daemon stopping later deleted the serving daemon's socket and cut it off).
+    const bindPath = isNamedPipe(this.socketPath) ? this.socketPath : join(dirname(this.socketPath), `.m${process.pid.toString(36)}`);
+    if (bindPath !== this.socketPath) rmSync(bindPath, { force: true });
     await new Promise((resolveListen, reject) => {
       this.server.once('error', reject);
-      this.server.listen(this.socketPath, () => { this.server.off('error', reject); resolveListen(); });
+      this.server.listen(bindPath, () => { this.server.off('error', reject); resolveListen(); });
     });
     // Owner-only: the socket is the local door, and whoever opens it is this OS user. A named pipe's default
     // access already admits only its owner (and SYSTEM and Administrators) to connect.
-    if (!isNamedPipe(this.socketPath)) chmodSync(this.socketPath, 0o600);
+    if (!isNamedPipe(this.socketPath)) {
+      chmodSync(bindPath, 0o600);
+      this.socketInode = statSync(bindPath).ino;
+      renameSync(bindPath, this.socketPath);
+    }
     this.address = this.socketPath;
     writeJson(this.p.machine, { pid: process.pid, id: this.id, socket: this.socketPath, startedAt: Date.now(), version: MACHINE_VERSION, protocol: NODE_PROTOCOL, floor: this.floor, server: this.link?.server ?? null });
     this.emit('listening', this.socketPath);
@@ -116,8 +126,11 @@ export class MachineCore extends EventEmitter {
     for (const { channel } of this.connections.values()) channel.close();
     this.server?.close();
     await this.afterStop();
-    if (!isNamedPipe(this.socketPath)) rmSync(this.socketPath, { force: true });
-    if (existsSync(this.p.machine)) rmSync(this.p.machine);
+    // Only this daemon's own socket and record: a daemon that has since taken the path over keeps them.
+    if (!isNamedPipe(this.socketPath) && this.socketInode !== undefined) {
+      try { if (statSync(this.socketPath).ino === this.socketInode) rmSync(this.socketPath, { force: true }); } catch { /* already gone */ }
+    }
+    try { if (JSON.parse(readFileSync(this.p.machine, 'utf8')).pid === process.pid) rmSync(this.p.machine); } catch { /* absent or unreadable */ }
   }
 
   /** Before the connections close: a product finishes or abandons what is in flight. */

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@volter/teams",
-  "version": "0.1.37",
+  "version": "0.1.38",
   "type": "module",
   "description": "Volter Teams, the neutral team plane: machine identity and daemon core, the local door and server link, admission from machine grants, product doors, and the Teams server's neutral routes (company RFC 0008).",
   "license": "MIT",