querysub 0.659.0 → 0.661.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "querysub",
-  "version": "0.659.0",
+  "version": "0.661.0",
   "main": "index.js",
   "license": "MIT",
   "note1": "note on node-forge fork, see https://github.com/digitalbazaar/forge/issues/744 for details",
@@ -79,7 +79,7 @@
     "node-forge": "https://github.com/sliftist/forge#e618181b469b07bdc70b968b0391beb8ef5fecd6",
     "pako": "^2.1.0",
     "peggy": "^5.0.6",
-    "sliftutils": "^1.7.131",
+    "sliftutils": "^1.7.132",
     "socket-function": "^1.2.35",
     "terser": "^5.31.0",
     "typenode": "^6.6.1",

package/src/-a-archives/archives2.ts

@@ -94,7 +94,7 @@ const archivesBuilderCache = cacheJSONArgsEqual((domain: string, overrides: Part
     domain = domain.toLowerCase().replaceAll(/[^a-z0-9-]/g, "-");
     return archiveBuilder(domain, overrides);
 });
-function nestBucket(folder: string, archives: ReturnType<typeof createArchives>) {
+export function nestBucket(folder: string, archives: ReturnType<typeof createArchives>) {
     if (!folder) return archives;
     folder = folder.replaceAll("\\", "/");
     if (!folder.endsWith("/")) {
@@ -136,7 +136,7 @@ function nestBucket(folder: string, archives: ReturnType<typeof createArchives>)
     };
 }
 
-function getSafeDomain() {
+export function getSafeDomain() {
     return getDomain().toLowerCase().replaceAll(/[^a-z0-9-]/g, "-");
 }
 

package/src/-a-archives/archivesLowLevel.ts

@@ -0,0 +1,19 @@
+import { createArchives } from "sliftutils/storage/remoteStorage/createArchives";
+import { cache } from "socket-function/src/caching";
+import { getSafeDomain, nestBucket } from "./archives2";
+
+// The absolute-minimum archives: one private accessor, one backblaze source, no striping, no storage servers. For the values that have to be readable when none of our infrastructure is up (ex, the repo trust config machine deploy needs to bootstrap a machine).
+
+const lowLevelBase = cache((bucket: string) => createArchives({
+    version: 1,
+    sources: [{
+        type: "backblaze",
+        url: `https://f002.backblazeb2.com/file/${bucket}/storage/storagerouting.json`,
+        name: "backblaze",
+        validWindow: [0, Number.MAX_SAFE_INTEGER],
+    }],
+}));
+
+export function getArchivesLowLevel(folder: string) {
+    return nestBucket(folder, lowLevelBase(getSafeDomain() + "-low-level"));
+}

package/src/0-path-value-core/PathValueCommitter.ts

@@ -345,8 +345,6 @@ class PathValueCommitter {
                                 let valueWatchNode = remoteWatcher.getValueWatchRemoteNodeId(path);
                                 if (!valueWatchNode || !areNodeIdsEqual(valueWatchNode, batch.sourceNodeId)) {
                                     let candidates = PathRouter.getAllAuthorities(path);
-                                    require("debugbreak")(2);
-                                    debugger;
                                     remoteWatcher.getExistingWatchRemoteNodeId(path);
                                     console.warn(`Ignoring value from wrong authority. Should have been ${debugNodeId(watchingAuthorityId)}, but was received from ${debugNodeId(batch.sourceNodeId)}.`, {
                                         path,

package/src/storageSetup.ts

@@ -1,17 +1,10 @@
 process.env.PRODUCTION = "true";
-import { magenta } from "socket-function/src/formatting/logColors";
 import "./inject";
 process.argv.push("--nobreak");
 
-// The storage server entry point (see bin/storageserve.js): sets up the CLI args the sliftutils storage server expects, synchronizes our network trust list into its trust store, and runs its CLI.
+// The storage server entry point (see bin/storageserve.js): sets up the CLI args the sliftutils storage server expects and runs its CLI. Trust is no longer synchronized here - the storage server reads it from the signed authorized_keys repo (security/machines) itself.
 
 async function main() {
-    const { getTrustedMachineIds } = await import("./-d-trust/NetworkTrust2");
-    let trustedMachineIds = await getTrustedMachineIds();
-    let { setTrustedMachines } = await import("sliftutils/storage/remoteStorage/serverConfig");
-    await setTrustedMachines({ account: "root", machineIds: trustedMachineIds });
-    console.log(magenta(`Synchronized ${trustedMachineIds.length} trusted machines`));
-
     await import("sliftutils/storage/remoteStorage/storageServerCli");
 }