alasio 8.0.0 → 10.0.0

package/dist/src/binder/tokens.js

@@ -0,0 +1,71 @@
+/**
+ * The binder's tokens, which say what they are for and are checked by the key that signed
+ * them alone, so whatever checks one holds no store of them, as the binder holds no state:
+ * `<claims>.<signature>`, the claims base64url JSON, the signature their HMAC-SHA256 under the
+ * key, base64url, compared in constant time.
+ *
+ * A caller's token names the key it may reach, when it stops, and what its key is bound with:
+ * what the binder's callers present, which the binder checks and never forwards; or, held to a
+ * binding of another key (`held`), as a harness elsewhere is given its workspace's, no time it
+ * stops, but good only for as long as that binding is held. A binding's
+ * token names the key, the binding, its Lease's uid, so one minted for a binding is no
+ * other's, even of the same key, and the namespace its Lease is in: what the bound pod is
+ * given, to take its calls, and its telemetry, by (bindingToken).
+ */
+import { createHmac, timingSafeEqual } from "node:crypto";
+import { Option, Schema } from "effect";
+/**
+ * What a token says: the key it is for; the binding, and its Lease's namespace, for a
+ * binding's; and, for a caller's, the time it stops, in ms, or the binding it is held to in its
+ * place (HeldTo) and when it was minted, in ms, and what its key is bound with where it is not
+ * bound yet, which the binder's gateway reads (as a session's environment and internet).
+ */
+export const TokenClaims = Schema.Struct({
+    key: Schema.String,
+    binding: Schema.optional(Schema.String),
+    namespace: Schema.optional(Schema.String),
+    expires: Schema.optional(Schema.Number),
+    held: Schema.optional(Schema.Struct({ key: Schema.String, binding: Schema.String, namespace: Schema.String })),
+    issued: Schema.optional(Schema.Number),
+    options: Schema.optional(Schema.Record(Schema.String, Schema.String)),
+});
+const decodeClaims = Schema.decodeUnknownOption(Schema.fromJsonString(TokenClaims));
+const signatureOf = (secret, claims) => createHmac("sha256", secret).update(claims).digest();
+/**
+ * What `token` says, its signature unchecked: of a token its holder was given where it trusts
+ * it to come from, as a pod reads its own binding's token from beside it (../harness/program.ts);
+ * null where it says nothing a token does. Never of a token a caller presents (verifyToken).
+ */
+export function claimsOf(token) {
+    const dot = token.indexOf(".");
+    return dot < 0 ? null : Option.getOrNull(decodeClaims(Buffer.from(token.slice(0, dot), "base64url").toString("utf8")));
+}
+/** A token of `claims`, signed with `secret`. */
+export function mintToken(secret, claims) {
+    const encoded = Buffer.from(JSON.stringify(claims)).toString("base64url");
+    return `${encoded}.${signatureOf(secret, encoded).toString("base64url")}`;
+}
+/** The token of the binding `binding` of `key`, its Lease in `namespace`: the same text wherever it is minted, as its pod compares it whole. */
+export const bindingToken = (secret, { key, binding, namespace }) => mintToken(secret, { key, binding, namespace });
+/**
+ * What `token` says, where the key `secret` names of what it says signed it, as a key the
+ * claims choose (./names.ts environmentKey's), and it has not stopped by `now`; else null. Its claims
+ * are trusted only once its signature is checked by the key they named.
+ */
+export function verifyToken(secret, token, now) {
+    const dot = token.indexOf(".");
+    if (dot < 0)
+        return null;
+    const [encoded, signature] = [token.slice(0, dot), Buffer.from(token.slice(dot + 1), "base64url")];
+    const claims = decodeClaims(Buffer.from(encoded, "base64url").toString("utf8"));
+    if (Option.isNone(claims))
+        return null;
+    const key = typeof secret === "function" ? secret(claims.value) : secret;
+    if (key === null)
+        return null;
+    const expected = signatureOf(key, encoded);
+    if (signature.length !== expected.length || !timingSafeEqual(signature, expected))
+        return null;
+    return claims.value.expires !== undefined && claims.value.expires <= now ? null : claims.value;
+}
+//# sourceMappingURL=tokens.js.map

package/dist/src/binder/tokens.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tokens.js","sourceRoot":"","sources":["../../../../src/binder/tokens.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AACH,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAE1D,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAExC;;;;;GAKG;AACH,MAAM,CAAC,MAAM,WAAW,GAAG,MAAM,CAAC,MAAM,CAAC;IACvC,GAAG,EAAE,MAAM,CAAC,MAAM;IAClB,OAAO,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC;IACvC,SAAS,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC;IACzC,OAAO,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC;IACvC,IAAI,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;IAC9G,MAAM,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC;IACtC,OAAO,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;CACtE,CAAC,CAAC;AAKH,MAAM,YAAY,GAAG,MAAM,CAAC,mBAAmB,CAAC,MAAM,CAAC,cAAc,CAAC,WAAW,CAAC,CAAC,CAAC;AAEpF,MAAM,WAAW,GAAG,CAAC,MAAc,EAAE,MAAc,EAAU,EAAE,CAAC,UAAU,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,CAAC;AAErH;;;;GAIG;AACH,MAAM,UAAU,QAAQ,CAAC,KAAa;IACpC,MAAM,GAAG,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAC/B,OAAO,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,YAAY,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;AACzH,CAAC;AAED,iDAAiD;AACjD,MAAM,UAAU,SAAS,CAAC,MAAc,EAAE,MAAmB;IAC3D,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IAC1E,OAAO,GAAG,OAAO,IAAI,WAAW,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;AAC5E,CAAC;AAED,gJAAgJ;AAChJ,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,MAAc,EAAE,EAAE,GAAG,EAAE,OAAO,EAAE,SAAS,EAAkF,EAAU,EAAE,CAClK,SAAS,CAAC,MAAM,EAAE,EAAE,GAAG,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC,CAAC;AAEjD;;;;GAIG;AACH,MAAM,UAAU,WAAW,CAAC,MAAyD,EAAE,KAAa,EAAE,GAAW;IAC/G,MAAM,GAAG,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAC/B,IAAI,GAAG,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IACzB,MAAM,CAAC,OAAO,EAAE,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC,EAAE,WAAW,CAAC,CAAC,CAAC;IACnG,MAAM,MAAM,GAAG,YAAY,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;IAChF,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC;QAAE,OAAO,IAAI,CAAC;IACvC,MAAM,GAAG,GAAG,OAAO,MAAM,KAAK,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;IACzE,IAAI,GAAG,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAC9B,MAAM,QAAQ,GAAG,WAAW,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;IAC3C,IAAI,SAAS,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM,IAAI,CAAC,eAAe,CAAC,SAAS,EAAE,QAAQ,CAAC;QAAE,OAAO,IAAI,CAAC;IAC/F,OAAO,MAAM,CAAC,KAAK,CAAC,OAAO,KAAK,SAAS,IAAI,MAAM,CAAC,KAAK,CAAC,OAAO,IAAI,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;AACjG,CAAC"}

package/dist/src/branch/names.js

@@ -1,16 +1,30 @@
 /**
  * What a branch environment is called, and what it is known by, as alasio and its command
- * line both say it: its namespaces, the port its parent forks its sessions on, and its
- * token to ask with (./fork.ts). Free of anything but Node's own, so the command line
- * takes it without the server.
+ * line both say it: its namespaces and the label they and its objects carry, the topic and
+ * group its parent is asked to fork its sessions on, and its token to ask with (./fork.ts).
+ * Free of anything but Node's own, so the command line takes it without the server.
  */
 import { createHmac } from "node:crypto";
-/** The port an alasio forks its sessions for its branch environments on. */
-export const BRANCH_FORK_PORT = 4319;
+/** The label of a branch environment's objects and namespaces, whose value is its name. */
+export const BRANCH_LABEL = "alasio.dev/branch";
+/**
+ * The label of a branch environment's sessions' namespace whose value is the environment it
+ * was branched from, its parent's, main's: the one the sandbox gateway forks sessions into it
+ * for (src/gateway/sessions.ts).
+ */
+export const BRANCH_PARENT_LABEL = "alasio.dev/branch-parent";
+/** The name of main's environment, as its sessions are told apart from a branch's. */
+export const MAIN_ENVIRONMENT_NAME = "main";
+/** The topic of the log the environment `environment`'s branches ask it on to fork its sessions for them: a branch writes it, its alasio reads it. */
+export const forksTopic = (environment) => `forks.${environment}`;
+/** The consumer group the environment `environment`'s alasio reads its branches' fork requests in. */
+export const forksGroup = (environment) => `alasio-forks.${environment}`;
 /** The namespace of the branch environment `branch`: its alasio, its compute and its lake, and their Secrets. */
 export const branchNamespace = (branch) => `alasio-branch-${branch}`;
+/** What ends the name of a branch environment's sessions' namespace, after its own's. */
+export const SESSIONS_SUFFIX = "-sessions";
 /** The namespace of the branch environment `branch`'s sessions. */
-export const branchSessionsNamespace = (branch) => `${branchNamespace(branch)}-sessions`;
+export const branchSessionsNamespace = (branch) => `${branchNamespace(branch)}${SESSIONS_SUFFIX}`;
 /** The token the branch `branch` forks its parent's sessions with: `key`'s HMAC of its name. */
 export function forkToken(key, branch) {
     return createHmac("sha256", key).update(`alasio-branch-fork:${branch}`).digest("base64url");

package/dist/src/branch/names.js.map

@@ -1 +1 @@
-{"version":3,"file":"names.js","sourceRoot":"","sources":["../../../../src/branch/names.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,4EAA4E;AAC5E,MAAM,CAAC,MAAM,gBAAgB,GAAG,IAAI,CAAC;AAErC,iHAAiH;AACjH,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,MAAc,EAAU,EAAE,CAAC,iBAAiB,MAAM,EAAE,CAAC;AAErF,mEAAmE;AACnE,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,MAAc,EAAU,EAAE,CAAC,GAAG,eAAe,CAAC,MAAM,CAAC,WAAW,CAAC;AAEzG,gGAAgG;AAChG,MAAM,UAAU,SAAS,CAAC,GAAW,EAAE,MAAc;IACnD,OAAO,UAAU,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,MAAM,CAAC,sBAAsB,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;AAC9F,CAAC"}
+{"version":3,"file":"names.js","sourceRoot":"","sources":["../../../../src/branch/names.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,2FAA2F;AAC3F,MAAM,CAAC,MAAM,YAAY,GAAG,mBAAmB,CAAC;AAEhD;;;;GAIG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,0BAA0B,CAAC;AAE9D,sFAAsF;AACtF,MAAM,CAAC,MAAM,qBAAqB,GAAG,MAAM,CAAC;AAE5C,sJAAsJ;AACtJ,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,WAAmB,EAAU,EAAE,CAAC,SAAS,WAAW,EAAE,CAAC;AAElF,sGAAsG;AACtG,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,WAAmB,EAAU,EAAE,CAAC,gBAAgB,WAAW,EAAE,CAAC;AAEzF,iHAAiH;AACjH,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,MAAc,EAAU,EAAE,CAAC,iBAAiB,MAAM,EAAE,CAAC;AAErF,yFAAyF;AACzF,MAAM,CAAC,MAAM,eAAe,GAAG,WAAW,CAAC;AAE3C,mEAAmE;AACnE,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,MAAc,EAAU,EAAE,CAAC,GAAG,eAAe,CAAC,MAAM,CAAC,GAAG,eAAe,EAAE,CAAC;AAElH,gGAAgG;AAChG,MAAM,UAAU,SAAS,CAAC,GAAW,EAAE,MAAc;IACnD,OAAO,UAAU,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,MAAM,CAAC,sBAAsB,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;AAC9F,CAAC"}

package/dist/src/events/names.js

@@ -0,0 +1,28 @@
+/**
+ * What an environment's events (./events.ts) are known by: their topic in the log, the group
+ * its alasio reads it in, and the variables that say where a program tells of them. Free of
+ * anything but itself, so the command line, which makes the topic and its principal's access,
+ * takes it without the events.
+ */
+/** What every environment's events topic is named with first. */
+export const EVENTS_TOPIC_PREFIX = "events.";
+/** The events topic of the environment `environment`: main's, or its branch's. */
+export const eventsTopic = (environment) => `${EVENTS_TOPIC_PREFIX}${environment}`;
+/** The consumer group the environment `environment`'s alasio reads its events topic in, apart from its Telegram updates' group, so neither holds the other back. */
+export const eventsGroup = (environment) => `alasio-events.${environment}`;
+/** How long an environment's events topic keeps what it is told: a week, past any wait of its alasio's to read it. */
+export const EVENTS_RETENTION_MS = 7 * 86_400_000;
+/**
+ * How long an alasio keeps the record of each event it handled (../persistence/store.ts
+ * withEventHandled): a day past what its topic keeps, as the log deletes a segment, closed at
+ * the hour, only once all of it is older than the topic's retention. A group the log forgot
+ * the offsets of, idle as long, reads its topic again from where it reads one told of none (a
+ * branch's from its first record kept, ./consume.ts), and finds each event it handled still
+ * recorded, so handles none again.
+ */
+export const EVENTS_HANDLED_KEPT_MS = EVENTS_RETENTION_MS + 86_400_000;
+/** The variables of where a program tells of events (./events.ts Events.fromEnvironment): the log's brokers, its principal's name, and the file of its password. */
+export const EVENTS_BROKERS_VARIABLE = "EVENTS_BROKERS";
+export const EVENTS_USERNAME_VARIABLE = "EVENTS_USERNAME";
+export const EVENTS_PASSWORD_FILE_VARIABLE = "EVENTS_PASSWORD_FILE";
+//# sourceMappingURL=names.js.map

package/dist/src/events/names.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"names.js","sourceRoot":"","sources":["../../../../src/events/names.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,iEAAiE;AACjE,MAAM,CAAC,MAAM,mBAAmB,GAAG,SAAS,CAAC;AAE7C,kFAAkF;AAClF,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,WAAmB,EAAU,EAAE,CAAC,GAAG,mBAAmB,GAAG,WAAW,EAAE,CAAC;AAEnG,oKAAoK;AACpK,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,WAAmB,EAAU,EAAE,CAAC,iBAAiB,WAAW,EAAE,CAAC;AAE3F,sHAAsH;AACtH,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,GAAG,UAAU,CAAC;AAElD;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,mBAAmB,GAAG,UAAU,CAAC;AAEvE,oKAAoK;AACpK,MAAM,CAAC,MAAM,uBAAuB,GAAG,gBAAgB,CAAC;AACxD,MAAM,CAAC,MAAM,wBAAwB,GAAG,iBAAiB,CAAC;AAC1D,MAAM,CAAC,MAAM,6BAA6B,GAAG,sBAAsB,CAAC"}

package/dist/src/gateway/names.js

@@ -0,0 +1,240 @@
+/**
+ * What the sandbox gateway (./gateway.ts) and the session telemetry receiver
+ * (../receiver/receiver.ts) are configured by: their variables, and the gateway's
+ * configuration file. Free of anything but Effect's Schema and Node's own, so the command
+ * line, which renders them, takes it without either.
+ */
+import { createHash } from "node:crypto";
+import { posix } from "node:path";
+import { Schema } from "effect";
+import { keyHash } from "../binder/names.js";
+import { HARNESS_NAMES } from "../harness/names.js";
+import { sanitizePathToken } from "../kube/sandbox-shape.js";
+import { ATTACH_ROOT } from "../node-agent/names.js";
+import { volumeIdOfKey } from "../sandbox/names.js";
+export { RESTORE_POD } from "../node-agent/names.js";
+/** The variable of the path of the gateway's configuration, a GatewayConfig as JSON. */
+export const GATEWAY_CONFIG_VARIABLE = "ALASIO_GATEWAY_CONFIG";
+/** The variables of the keys callers' tokens, and bindings', are signed with: the keys' text, as the stack's setup makes them. */
+export const CALLER_KEY_VARIABLE = "CALLER_KEY";
+export const BINDING_KEY_VARIABLE = "BINDING_KEY";
+/**
+ * The variables alasio reaches its environment's sessions through the gateway by: the gateway's
+ * address, its environment's name, as its callers' tokens name it, and its environment's own key
+ * of the gateway's caller key, which signs them (../binder/names.ts environmentKey).
+ */
+export const ALASIO_GATEWAY_URL_VARIABLE = "ALASIO_GATEWAY_URL";
+export const ALASIO_GATEWAY_ENVIRONMENT_VARIABLE = "ALASIO_GATEWAY_ENVIRONMENT";
+export const ALASIO_GATEWAY_CALLER_KEY_VARIABLE = "ALASIO_GATEWAY_CALLER_KEY";
+/** The variable that says the gateway serves alasio's folder workspaces' instances too: "1" where it does. */
+export const ALASIO_GATEWAY_FOLDERS_VARIABLE = "ALASIO_GATEWAY_FOLDERS";
+/** The variables of the receiver's port, and of main's sessions' namespace, beside which it takes branch environments' bindings. */
+export const RECEIVER_PORT_VARIABLE = "RECEIVER_PORT";
+export const SESSIONS_NAMESPACE_VARIABLE = "SESSIONS_NAMESPACE";
+/** The variable of the folder namespace, whose folder conversations' instances' bindings the receiver takes too; empty where there are none. */
+export const FOLDERS_NAMESPACE_VARIABLE = "FOLDERS_NAMESPACE";
+/** The hash of `template`, of its JSON with every object's keys in order, as a pool's template records its own (cli/src/manifests/sandbox-gateway.ts poolTemplate). */
+export function templateHash(template) {
+    const sorted = (_key, value) => typeof value === "object" && value !== null && !Array.isArray(value) ? Object.fromEntries(Object.entries(value).sort(([a], [b]) => (a < b ? -1 : a > b ? 1 : 0))) : value;
+    return createHash("sha256").update(JSON.stringify(template, sorted)).digest("hex");
+}
+/** The name of a restore's pod of the pool `pool`, by its random part, `suffix`, seven of base 36's digits, as RESTORE_POD matches it. */
+export const restorePodName = (pool, suffix) => `${pool}-restore-${suffix}`;
+/** The volume of a pool's pod's own directory on its node, which its workspace is attached under (cli/src/manifests/sandbox-gateway.ts poolTemplate). */
+export const ATTACH_VOLUME = "attach";
+/**
+ * The spec `spec`, a pool's template's, of a restore's pod named `name` in `namespace`: its own
+ * directory on its node named by its volume's path, not by a subpath of the directory of every
+ * pod's. A subpath is
+ * bound into its container alone, without what is mounted beneath it, as kubelet binds one; a
+ * volume's path is bound with it, so the workspace attached there before the pod is made is
+ * there as its restore reopens the files it held open.
+ */
+export function ownDirectory(spec, namespace, name) {
+    const unsubpathed = (container) => ({
+        ...container,
+        ...(container.volumeMounts
+            ? {
+                volumeMounts: container.volumeMounts.map((mount) => {
+                    if (mount.name !== ATTACH_VOLUME)
+                        return mount;
+                    const { subPathExpr: _subPath, ...own } = mount;
+                    return own;
+                }),
+            }
+            : {}),
+    });
+    return {
+        ...spec,
+        containers: spec.containers.map(unsubpathed),
+        ...(spec.initContainers ? { initContainers: spec.initContainers.map(unsubpathed) } : {}),
+        // One there already, as its node's agent made it, its workspace attached; kubelet makes none, so the pod starts not where it is not there.
+        ...(spec.volumes ? { volumes: spec.volumes.map((volume) => (volume.name === ATTACH_VOLUME ? { name: ATTACH_VOLUME, hostPath: { path: `${ATTACH_ROOT}/${namespace}/${name}`, type: "Directory" } } : volume)) } : {}),
+    };
+}
+/** The pool of folder instances, by its name, in the folder namespace: its Leases' and its pods' label (./folders.ts). */
+export const FOLDER_POOL = "folder";
+/** What a folder instance's key begins with: `folder:<harness>:<conversation>` (./folders.ts). */
+export const FOLDER_KEY_PREFIX = "folder:";
+/** A harness's name, as a folder instance's key carries it. */
+const HARNESS = /^[a-z][a-z0-9-]{0,30}$/u;
+/** The key of the folder instance of the conversation `conversation` under the harness `harness`. */
+export const folderKey = (harness, conversation) => `${FOLDER_KEY_PREFIX}${harness}:${conversation}`;
+/** The harness and conversation of the folder instance `key` is of; null where it is no folder instance's. */
+export function folderOfKey(key) {
+    if (!key.startsWith(FOLDER_KEY_PREFIX))
+        return null;
+    const rest = key.slice(FOLDER_KEY_PREFIX.length);
+    const at = rest.indexOf(":");
+    const [harness, conversation] = [rest.slice(0, Math.max(at, 0)), rest.slice(at + 1)];
+    return at > 0 && HARNESS.test(harness) && conversation.length > 0 && conversation.length <= 512 ? { harness, conversation } : null;
+}
+/**
+ * Where the folder instance of `conversation` under `harness` keeps its state, under
+ * `stateRoot`: bayma leases its state directory to a single server, and a Codex thread keeps
+ * its server alive after the conversation switches to Claude, so the directory is keyed by
+ * harness as well as conversation.
+ */
+export const folderStateDir = (stateRoot, harness, conversation) => posix.join(stateRoot, sanitizePathToken(harness), sanitizePathToken(conversation));
+/** The name of a folder instance's pod of `key`, by its random part, `suffix`, five of base 36's digits, as FOLDER_POD matches it. */
+export const folderPodName = (key, suffix) => `bayma-${keyHash(key).slice(0, 16)}-${suffix}`;
+export const FOLDER_POD = /^bayma-[0-9a-f]{16}-[0-9a-z]{5}$/u;
+/** The Secret of a folder instance's pod `pod`'s binding's token, which its bayma takes requests with, mounted where FOLDER_TOKEN_FILE is. */
+export const folderTokenSecret = (pod) => `${pod}-bayma-token`;
+const FOLDER_TOKEN_VOLUME = "alasio-bayma-token";
+const FOLDER_TOKEN_DIRECTORY = "/run/alasio/bayma";
+export const FOLDER_TOKEN_FILE = `${FOLDER_TOKEN_DIRECTORY}/token`;
+/**
+ * How long a folder instance's pod is given to stop: its bayma's CRIU dumps of its idle REPL
+ * sessions, one at a time, each within bayma's own 120 s; a state of the box's size is dumped
+ * in well under a minute.
+ */
+export const FOLDER_STOP_SECONDS = 600;
+/** How long a folder instance's release, or its next bind, waits for its pod to be gone, past its stop. */
+export const FOLDER_GONE_MS = (FOLDER_STOP_SECONDS + 60) * 1000;
+/** How long a folder instance's bind gives its pod to run, and its bayma, once it runs, to answer. */
+export const FOLDER_START_MS = 120_000;
+/** How long it gives its pod to run while its image is still being pulled, as a node that has never run it pulls it first. */
+export const FOLDER_PULL_MS = 8 * 60_000;
+/**
+ * How long a folder instance's bind may take in all, given `pullMs` and `startMs`: a release
+ * of it under way, or its pod before, gone first; then its pod run, its image pulled; then its
+ * bayma answering. A bind of the key meanwhile waits as long for it.
+ */
+export const folderBindMs = (pullMs = FOLDER_PULL_MS, startMs = FOLDER_START_MS) => FOLDER_GONE_MS + pullMs + startMs;
+/**
+ * The spec of a folder instance's pod, `pod`, of the folder template's `spec`: its bayma
+ * given its binding's token, from its Secret, and its state directory, `stateDir`; stopped
+ * within FOLDER_STOP_SECONDS; and never started again, as a bayma that ended is a binding to
+ * release, not a container to start. Pure, as the gateway makes it and the folder pods' policy
+ * pins it (cli/src/manifests/admission.ts folderPodPolicy).
+ */
+export function folderPodSpec(spec, pod, stateDir) {
+    return {
+        ...spec,
+        terminationGracePeriodSeconds: FOLDER_STOP_SECONDS,
+        restartPolicy: "Never",
+        containers: spec.containers.map((container) => container.name !== "bayma" ? container : {
+            ...container,
+            args: [...(container.args ?? []), "--token-file", FOLDER_TOKEN_FILE, "--state-dir", stateDir],
+            volumeMounts: [...(container.volumeMounts ?? []), { name: FOLDER_TOKEN_VOLUME, mountPath: FOLDER_TOKEN_DIRECTORY, readOnly: true }],
+        }),
+        volumes: [...(spec.volumes ?? []), { name: FOLDER_TOKEN_VOLUME, secret: { secretName: folderTokenSecret(pod), defaultMode: 0o440 } }],
+    };
+}
+/** The container of a harness pool's pod that runs its host, `alasio harness` (cli/src/manifests/harness-pools.ts). */
+export const HARNESS_CONTAINER = "harness";
+/** What a conversation's harness's key begins with: `harness:<conversation>` (./harnesses.ts). */
+const HARNESS_KEY_PREFIX = "harness:";
+/** The key of the harness of the conversation `conversation`, which its caller's token says the harness and workspace of. */
+export const harnessKey = (conversation) => `${HARNESS_KEY_PREFIX}${conversation}`;
+/** The conversation whose harness `key` is; null where it is no harness's. */
+export function conversationOfHarnessKey(key) {
+    const conversation = key.startsWith(HARNESS_KEY_PREFIX) ? key.slice(HARNESS_KEY_PREFIX.length) : "";
+    return conversation.length > 0 && conversation.length <= 512 ? conversation : null;
+}
+/**
+ * Whether a caller's token of `key` may be held to the binding of `heldKey` in place of a time
+ * it stops (../binder/server.ts grants): a workspace's held to its conversation's harness's, as
+ * alasio gives a harness bound in a pool its workspace's bayma: a session's, or the
+ * conversation's own folder instance's, and no other key's.
+ */
+export function heldToHarness(key, heldKey) {
+    const conversation = conversationOfHarnessKey(heldKey);
+    if (conversation === null)
+        return false;
+    return volumeIdOfKey(key) !== null || folderOfKey(key)?.conversation === conversation;
+}
+/** A pod template, as the gateway's configuration holds one: an object, as the API server takes it. */
+const Template = Schema.Record(Schema.String, Schema.Unknown);
+/**
+ * How main's sessions are snapshotted (./snapshots.ts), as alasio's own were: how often one whose
+ * execs run is saved live, the gVisor releases a snapshot is restored under, each by its
+ * RuntimeClass, the current one first, and each pool's template, by its sessions' internet, as
+ * `alasio up` renders it now and as it rendered it before it last changed, which a snapshot taken
+ * on it still restores onto, and nothing older.
+ */
+export const GatewaySnapshots = Schema.Struct({
+    liveEverySeconds: Schema.Number,
+    /** Each kept release, its RuntimeClass, and the checkpoint gofer a restore of a snapshot it took asks for, if any (../node-agent/names.ts goferOf). */
+    releases: Schema.Array(Schema.Struct({
+        release: Schema.String,
+        runtimeClassName: Schema.String,
+        gofer: Schema.NullOr(Schema.Struct({ transport: Schema.Literals(["socket", "tcp"]), pagesRetry: Schema.Boolean })),
+    })),
+    templates: Schema.Struct({
+        none: Schema.Struct({ current: Template, previous: Schema.NullOr(Template) }),
+        full: Schema.Struct({ current: Template, previous: Schema.NullOr(Template) }),
+    }),
+});
+/** The user and group a pod runs as, as the node agents write its binding (../node-agent/workspaces.ts PodOwner). */
+const PodOwner = Schema.Struct({ uid: Schema.Number, gid: Schema.Number });
+/** The sandbox pods' policy, which holds every pod of a sessions' namespace to its pools' templates (cli/src/manifests/admission.ts sandboxPodPolicy). */
+export const SANDBOX_POD_POLICY = "alasio-sandbox-pods";
+/** The gateway's configuration, as `alasio up` renders it (cli/src/manifests/sandbox-gateway.ts). */
+export const GatewayConfig = Schema.Struct({
+    /** The port it serves on, and the host its replicas' headless Service resolves to, each at that port. */
+    port: Schema.Number,
+    peers: Schema.String,
+    /** The port pool pods' bayma serves on. */
+    podPort: Schema.Number,
+    /** How long a bind waits for a free pod, and an idle pod is kept. */
+    waitSeconds: Schema.Number,
+    releaseAfterSeconds: Schema.Number,
+    /** main's environment of sessions, by its name, and the namespace its pools are in; branch environments' are found (./environments.ts). */
+    environment: Schema.Struct({ name: Schema.String, namespace: Schema.String }),
+    /** The quota of a workspace the gateway makes, in bytes. */
+    quotaBytes: Schema.Number,
+    /** How main's sessions are snapshotted; none where they are not. */
+    snapshots: Schema.NullOr(GatewaySnapshots),
+    /** Each pool's name, by its sessions' internet. */
+    pools: Schema.Struct({ none: Schema.String, full: Schema.String }),
+    /** Where the node agents are. */
+    nodeAgents: Schema.Struct({ namespace: Schema.String, selector: Schema.String, port: Schema.Number }),
+    /** Where bound pods' bayma exports its telemetry, the session telemetry receiver's Service, by its name and port; none where none runs. */
+    receiver: Schema.NullOr(Schema.Struct({ host: Schema.String, port: Schema.Number })),
+    /**
+     * Folder conversations' instances (./folders.ts): the namespace they run in, the template of
+     * their pods, as `alasio up` renders it of the host profile, the directory under which each
+     * keeps its state, and how long an idle one is kept; none where the installation has no
+     * folder workspaces.
+     */
+    folders: Schema.NullOr(Schema.Struct({ namespace: Schema.String, template: Template, stateRoot: Schema.String, releaseAfterSeconds: Schema.Number })),
+    /**
+     * Conversations' harnesses' pools (./harnesses.ts): each harness's pool's name, in each
+     * environment's own namespace, main's `namespace`, a branch's its own; the port and user
+     * their pods' hosts run on; how long an idle one is kept, and how long its host is given to
+     * drain as it is let go of; and, main's alone, each harness's pool of folder conversations,
+     * in main's namespace too, and their pods' user, the host profile's.
+     */
+    harnesses: Schema.Struct({
+        namespace: Schema.String,
+        pools: Schema.Record(Schema.Literals(HARNESS_NAMES), Schema.String),
+        podPort: Schema.Number,
+        owner: PodOwner,
+        releaseAfterSeconds: Schema.Number,
+        drainSeconds: Schema.Number,
+        folders: Schema.NullOr(Schema.Struct({ pools: Schema.Record(Schema.Literals(HARNESS_NAMES), Schema.String), owner: PodOwner })),
+    }),
+});
+//# sourceMappingURL=names.js.map

package/dist/src/gateway/names.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"names.js","sourceRoot":"","sources":["../../../../src/gateway/names.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,KAAK,EAAE,MAAM,WAAW,CAAC;AAGlC,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAEhC,OAAO,EAAE,OAAO,EAAE,MAAM,oBAAoB,CAAC;AAC7C,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAC7D,OAAO,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AACrD,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAEpD,OAAO,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AAErD,wFAAwF;AACxF,MAAM,CAAC,MAAM,uBAAuB,GAAG,uBAAuB,CAAC;AAC/D,kIAAkI;AAClI,MAAM,CAAC,MAAM,mBAAmB,GAAG,YAAY,CAAC;AAChD,MAAM,CAAC,MAAM,oBAAoB,GAAG,aAAa,CAAC;AAElD;;;;GAIG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAG,oBAAoB,CAAC;AAChE,MAAM,CAAC,MAAM,mCAAmC,GAAG,4BAA4B,CAAC;AAChF,MAAM,CAAC,MAAM,kCAAkC,GAAG,2BAA2B,CAAC;AAC9E,8GAA8G;AAC9G,MAAM,CAAC,MAAM,+BAA+B,GAAG,wBAAwB,CAAC;AAExE,oIAAoI;AACpI,MAAM,CAAC,MAAM,sBAAsB,GAAG,eAAe,CAAC;AACtD,MAAM,CAAC,MAAM,2BAA2B,GAAG,oBAAoB,CAAC;AAChE,gJAAgJ;AAChJ,MAAM,CAAC,MAAM,0BAA0B,GAAG,mBAAmB,CAAC;AAE9D,uKAAuK;AACvK,MAAM,UAAU,YAAY,CAAC,QAAgB;IAC3C,MAAM,MAAM,GAAG,CAAC,IAAY,EAAE,KAAc,EAAW,EAAE,CACvD,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;IAC5K,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACrF,CAAC;AAED,0IAA0I;AAC1I,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,IAAY,EAAE,MAAc,EAAU,EAAE,CAAC,GAAG,IAAI,YAAY,MAAM,EAAE,CAAC;AAEpG,yJAAyJ;AACzJ,MAAM,CAAC,MAAM,aAAa,GAAG,QAAQ,CAAC;AAEtC;;;;;;;GAOG;AACH,MAAM,UAAU,YAAY,CAAC,IAAe,EAAE,SAAiB,EAAE,IAAY;IAC3E,MAAM,WAAW,GAAG,CAAC,SAAsB,EAAe,EAAE,CAAC,CAAC;QAC5D,GAAG,SAAS;QACZ,GAAG,CAAC,SAAS,CAAC,YAAY;YACxB,CAAC,CAAC;gBACA,YAAY,EAAE,SAAS,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;oBACjD,IAAI,KAAK,CAAC,IAAI,KAAK,aAAa;wBAAE,OAAO,KAAK,CAAC;oBAC/C,MAAM,EAAE,WAAW,EAAE,QAAQ,EAAE,GAAG,GAAG,EAAE,GAAG,KAAK,CAAC;oBAChD,OAAO,GAAG,CAAC;gBACb,CAAC,CAAC;aACH;YACD,CAAC,CAAC,EAAE,CAAC;KACR,CAAC,CAAC;IACH,OAAO;QACL,GAAG,IAAI;QACP,UAAU,EAAE,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,WAAW,CAAC;QAC5C,GAAG,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACxF,2IAA2I;QAC3I,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,IAAI,KAAK,aAAa,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,GAAG,WAAW,IAAI,SAAS,IAAI,IAAI,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACrN,CAAC;AACJ,CAAC;AAED,0HAA0H;AAC1H,MAAM,CAAC,MAAM,WAAW,GAAG,QAAQ,CAAC;AAEpC,kGAAkG;AAClG,MAAM,CAAC,MAAM,iBAAiB,GAAG,SAAS,CAAC;AAE3C,+DAA+D;AAC/D,MAAM,OAAO,GAAG,yBAAyB,CAAC;AAE1C,qGAAqG;AACrG,MAAM,CAAC,MAAM,SAAS,GAAG,CAAC,OAAe,EAAE,YAAoB,EAAU,EAAE,CAAC,GAAG,iBAAiB,GAAG,OAAO,IAAI,YAAY,EAAE,CAAC;AAE7H,8GAA8G;AAC9G,MAAM,UAAU,WAAW,CAAC,GAAW;IACrC,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,iBAAiB,CAAC;QAAE,OAAO,IAAI,CAAC;IACpD,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAC;IACjD,MAAM,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAC7B,MAAM,CAAC,OAAO,EAAE,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC;IACrF,OAAO,EAAE,GAAG,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,IAAI,YAAY,CAAC,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AACrI,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,SAAiB,EAAE,OAAe,EAAE,YAAoB,EAAU,EAAE,CACjG,KAAK,CAAC,IAAI,CAAC,SAAS,EAAE,iBAAiB,CAAC,OAAO,CAAC,EAAE,iBAAiB,CAAC,YAAY,CAAC,CAAC,CAAC;AAErF,sIAAsI;AACtI,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,GAAW,EAAE,MAAc,EAAU,EAAE,CAAC,SAAS,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,MAAM,EAAE,CAAC;AACrH,MAAM,CAAC,MAAM,UAAU,GAAG,mCAAmC,CAAC;AAE9D,8IAA8I;AAC9I,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,GAAW,EAAU,EAAE,CAAC,GAAG,GAAG,cAAc,CAAC;AAC/E,MAAM,mBAAmB,GAAG,oBAAoB,CAAC;AACjD,MAAM,sBAAsB,GAAG,mBAAmB,CAAC;AACnD,MAAM,CAAC,MAAM,iBAAiB,GAAG,GAAG,sBAAsB,QAAQ,CAAC;AAEnE;;;;GAIG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,GAAG,CAAC;AAEvC,2GAA2G;AAC3G,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,mBAAmB,GAAG,EAAE,CAAC,GAAG,IAAI,CAAC;AAChE,sGAAsG;AACtG,MAAM,CAAC,MAAM,eAAe,GAAG,OAAO,CAAC;AACvC,8HAA8H;AAC9H,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,GAAG,MAAM,CAAC;AACzC;;;;GAIG;AACH,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,MAAM,GAAG,cAAc,EAAE,OAAO,GAAG,eAAe,EAAU,EAAE,CAAC,cAAc,GAAG,MAAM,GAAG,OAAO,CAAC;AAE9H;;;;;;GAMG;AACH,MAAM,UAAU,aAAa,CAAC,IAAe,EAAE,GAAW,EAAE,QAAgB;IAC1E,OAAO;QACL,GAAG,IAAI;QACP,6BAA6B,EAAE,mBAAmB;QAClD,aAAa,EAAE,OAAO;QACtB,UAAU,EAAE,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAC5C,SAAS,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC;YACvC,GAAG,SAAS;YACZ,IAAI,EAAE,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,IAAI,EAAE,CAAC,EAAE,cAAc,EAAE,iBAAiB,EAAE,aAAa,EAAE,QAAQ,CAAC;YAC7F,YAAY,EAAE,CAAC,GAAG,CAAC,SAAS,CAAC,YAAY,IAAI,EAAE,CAAC,EAAE,EAAE,IAAI,EAAE,mBAAmB,EAAE,SAAS,EAAE,sBAAsB,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;SACpI,CACF;QACD,OAAO,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC,EAAE,EAAE,IAAI,EAAE,mBAAmB,EAAE,MAAM,EAAE,EAAE,UAAU,EAAE,iBAAiB,CAAC,GAAG,CAAC,EAAE,WAAW,EAAE,KAAK,EAAE,EAAE,CAAC;KACtI,CAAC;AACJ,CAAC;AAED,uHAAuH;AACvH,MAAM,CAAC,MAAM,iBAAiB,GAAG,SAAS,CAAC;AAE3C,kGAAkG;AAClG,MAAM,kBAAkB,GAAG,UAAU,CAAC;AAEtC,6HAA6H;AAC7H,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,YAAoB,EAAU,EAAE,CAAC,GAAG,kBAAkB,GAAG,YAAY,EAAE,CAAC;AAEnG,8EAA8E;AAC9E,MAAM,UAAU,wBAAwB,CAAC,GAAW;IAClD,MAAM,YAAY,GAAG,GAAG,CAAC,UAAU,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACpG,OAAO,YAAY,CAAC,MAAM,GAAG,CAAC,IAAI,YAAY,CAAC,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC;AACrF,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,aAAa,CAAC,GAAW,EAAE,OAAe;IACxD,MAAM,YAAY,GAAG,wBAAwB,CAAC,OAAO,CAAC,CAAC;IACvD,IAAI,YAAY,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IACxC,OAAO,aAAa,CAAC,GAAG,CAAC,KAAK,IAAI,IAAI,WAAW,CAAC,GAAG,CAAC,EAAE,YAAY,KAAK,YAAY,CAAC;AACxF,CAAC;AAED,uGAAuG;AACvG,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;AAE9D;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,MAAM,CAAC,MAAM,CAAC;IAC5C,gBAAgB,EAAE,MAAM,CAAC,MAAM;IAC/B,uJAAuJ;IACvJ,QAAQ,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC;QACnC,OAAO,EAAE,MAAM,CAAC,MAAM;QACtB,gBAAgB,EAAE,MAAM,CAAC,MAAM;QAC/B,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC,EAAE,UAAU,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC;KACnH,CAAC,CAAC;IACH,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC;QACvB,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC7E,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;KAC9E,CAAC;CACH,CAAC,CAAC;AAGH,qHAAqH;AACrH,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;AAE3E,0JAA0J;AAC1J,MAAM,CAAC,MAAM,kBAAkB,GAAG,qBAAqB,CAAC;AAExD,qGAAqG;AACrG,MAAM,CAAC,MAAM,aAAa,GAAG,MAAM,CAAC,MAAM,CAAC;IACzC,yGAAyG;IACzG,IAAI,EAAE,MAAM,CAAC,MAAM;IACnB,KAAK,EAAE,MAAM,CAAC,MAAM;IACpB,2CAA2C;IAC3C,OAAO,EAAE,MAAM,CAAC,MAAM;IACtB,qEAAqE;IACrE,WAAW,EAAE,MAAM,CAAC,MAAM;IAC1B,mBAAmB,EAAE,MAAM,CAAC,MAAM;IAClC,2IAA2I;IAC3I,WAAW,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC;IAC7E,4DAA4D;IAC5D,UAAU,EAAE,MAAM,CAAC,MAAM;IACzB,oEAAoE;IACpE,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,gBAAgB,CAAC;IAC1C,mDAAmD;IACnD,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC;IAClE,iCAAiC;IACjC,UAAU,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC;IACrG,2IAA2I;IAC3I,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;IACpF;;;;;OAKG;IACH,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,mBAAmB,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;IACrJ;;;;;;OAMG;IACH,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC;QACvB,SAAS,EAAE,MAAM,CAAC,MAAM;QACxB,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC,MAAM,CAAC;QACnE,OAAO,EAAE,MAAM,CAAC,MAAM;QACtB,KAAK,EAAE,QAAQ;QACf,mBAAmB,EAAE,MAAM,CAAC,MAAM;QAClC,YAAY,EAAE,MAAM,CAAC,MAAM;QAC3B,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;KAChI,CAAC;CACH,CAAC,CAAC"}

package/dist/src/harness/names.js

@@ -0,0 +1,67 @@
+/**
+ * Harness identifiers shared by persistence, operator controls, and runtime selection.
+ *
+ * A harness is the agent runtime alasio drives for a Telegram conversation. Each
+ * conversation has at most one active harness at a time; the other harness keeps
+ * its own parked session pointer so switching never mounts a foreign session.
+ *
+ * A conversation starts with no harness mounted. Until the operator chooses one
+ * through /service, alasio only ever answers with the service picker. The
+ * `null` harness is therefore a real state, not a fallback, and callers must
+ * not coerce it to a default.
+ */
+import { createHmac } from "node:crypto";
+export const CODEX_HARNESS = "codex";
+export const CLAUDE_HARNESS = "claude";
+export const HARNESS_NAMES = Object.freeze([CODEX_HARNESS, CLAUDE_HARNESS]);
+/** The port alasio relays its Codex login to its harness pools' pods on (../codex/login-relay.ts). */
+export const CODEX_LOGIN_PORT = 4320;
+/**
+ * How long the relay of the Codex login, told to stop, lets the requests it passes on run to
+ * their end, a model's answer streaming as long as it does, before it cuts those left
+ * (../codex/login-relay.ts): its pod is given this and a little more to stop in.
+ */
+export const CODEX_LOGIN_DRAIN_SECONDS = 120;
+/** The variable the relay of the Codex login is given the key it checks the turns' tokens by in, in hexadecimal (poolLoginKey). */
+export const CODEX_LOGIN_KEY_VARIABLE = "ALASIO_CODEX_LOGIN_KEY";
+/**
+ * The key alasio's pool login tokens, which the relay of the Codex login checks
+ * (../codex/login-relay.ts), are signed with: its environment's own key of the gateway's caller
+ * key's, made apart, so a token of one is never the other, and the relay, holding it alone, signs
+ * none of the environment's sessions' tokens.
+ */
+export const poolLoginKey = (environmentKey) => createHmac("sha256", environmentKey).update("codex-login").digest();
+const DISPLAY_NAMES = Object.freeze({
+    [CODEX_HARNESS]: "Codex",
+    [CLAUDE_HARNESS]: "Claude",
+});
+export function isHarnessName(candidate) {
+    const names = HARNESS_NAMES;
+    return typeof candidate === "string" && names.includes(candidate);
+}
+export function normalizeHarnessName(candidate, fallback = CODEX_HARNESS) {
+    if (typeof candidate !== "string") {
+        return fallback;
+    }
+    const lowered = candidate.trim().toLowerCase();
+    if (lowered === "claude" || lowered === "claude-code" || lowered === "claude_code" || lowered === "claudecode" || lowered === "claude code") {
+        return CLAUDE_HARNESS;
+    }
+    if (lowered === "codex") {
+        return CODEX_HARNESS;
+    }
+    return fallback;
+}
+export function harnessDisplayName(harness) {
+    return (harness && DISPLAY_NAMES[harness]) ?? DISPLAY_NAMES[CODEX_HARNESS];
+}
+/**
+ * Harness pre-mounted on newly created conversations.
+ *
+ * Neutral by default: returns null unless ALASIO_DEFAULT_HARNESS opts into a
+ * harness, in which case new conversations skip the picker.
+ */
+export function getDefaultHarness(env = process.env) {
+    return normalizeHarnessName(env["ALASIO_DEFAULT_HARNESS"], null);
+}
+//# sourceMappingURL=names.js.map

package/dist/src/harness/names.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"names.js","sourceRoot":"","sources":["../../../../src/harness/names.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AACH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,MAAM,CAAC,MAAM,aAAa,GAAG,OAAO,CAAC;AACrC,MAAM,CAAC,MAAM,cAAc,GAAG,QAAQ,CAAC;AACvC,MAAM,CAAC,MAAM,aAAa,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,aAAa,EAAE,cAAc,CAAU,CAAC,CAAC;AAErF,sGAAsG;AACtG,MAAM,CAAC,MAAM,gBAAgB,GAAG,IAAI,CAAC;AAErC;;;;GAIG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAG,GAAG,CAAC;AAE7C,mIAAmI;AACnI,MAAM,CAAC,MAAM,wBAAwB,GAAG,wBAAwB,CAAC;AAEjE;;;;;GAKG;AACH,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,cAAsB,EAAU,EAAE,CAAC,UAAU,CAAC,QAAQ,EAAE,cAAc,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,MAAM,EAAE,CAAC;AAKpI,MAAM,aAAa,GAA0C,MAAM,CAAC,MAAM,CAAC;IACzE,CAAC,aAAa,CAAC,EAAE,OAAO;IACxB,CAAC,cAAc,CAAC,EAAE,QAAQ;CAC3B,CAAC,CAAC;AAEH,MAAM,UAAU,aAAa,CAAC,SAAkB;IAC9C,MAAM,KAAK,GAAsB,aAAa,CAAC;IAC/C,OAAO,OAAO,SAAS,KAAK,QAAQ,IAAI,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;AACpE,CAAC;AAID,MAAM,UAAU,oBAAoB,CAAC,SAAkB,EAAE,QAAQ,GAAuB,aAAa;IACnG,IAAI,OAAO,SAAS,KAAK,QAAQ,EAAE,CAAC;QAClC,OAAO,QAAQ,CAAC;IAClB,CAAC;IACD,MAAM,OAAO,GAAG,SAAS,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC/C,IAAI,OAAO,KAAK,QAAQ,IAAI,OAAO,KAAK,aAAa,IAAI,OAAO,KAAK,aAAa,IAAI,OAAO,KAAK,YAAY,IAAI,OAAO,KAAK,aAAa,EAAE,CAAC;QAC5I,OAAO,cAAc,CAAC;IACxB,CAAC;IACD,IAAI,OAAO,KAAK,OAAO,EAAE,CAAC;QACxB,OAAO,aAAa,CAAC;IACvB,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,OAA2B;IAC5D,OAAO,CAAC,OAAO,IAAI,aAAa,CAAC,OAAO,CAAC,CAAC,IAAI,aAAa,CAAC,aAAa,CAAC,CAAC;AAC7E,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,iBAAiB,CAAC,GAAG,GAAsB,OAAO,CAAC,GAAG;IACpE,OAAO,oBAAoB,CAAC,GAAG,CAAC,wBAAwB,CAAC,EAAE,IAAI,CAAC,CAAC;AACnE,CAAC"}