service-bridge 2.0.0-alpha.4 → 2.0.0-alpha.6

package/README.md

@@ -41,6 +41,7 @@ You declare what your service handles and what it calls. ServiceBridge does the
 
 - [Install](#install)
 - [AI coding skill](#ai-coding-skill)
+- [CLI](#cli)
 - [Why ServiceBridge](#why-servicebridge)
 - [Use cases](#use-cases)
 - [Quick start](#quick-start)
@@ -110,6 +111,18 @@ Restart the agent so it loads the skill. Source and contents: [`node/skill/`](ht
 
 ---
 
+## CLI
+
+The runtime ships with `sb`, a command-line client for managing services, traces, events, jobs, workflows, alerts and settings. It comes with the runtime image — there is no separate install — so a running runtime already has it at `/usr/local/bin/sb`. Use `docker exec <container> sb …` or the host binary, and pass `-o json` to get machine-readable output for AI agents. Check it with:
+
+```sh
+sb version
+```
+
+Full command reference: **[servicebridge.dev/#docs/cli](https://servicebridge.dev/#docs/cli)**.
+
+---
+
 ## Why ServiceBridge
 
 Microservices rarely fail because of business logic. They fail in the gaps *between* services — the broker that dropped a message, the workflow engine nobody fully understands, the trace that stops at a service boundary, the mesh config that takes a week to debug. Each gap is another system to run, secure and correlate.

package/dist/http/express/index.d.ts

@@ -1,5 +1,5 @@
 import { Express } from 'express';
-import { p as ServiceBridge } from '../../service-bridge-Bgt4ciRB.js';
+import { p as ServiceBridge } from '../../service-bridge-DGZXGuhl.js';
 import '@grpc/grpc-js';
 import '@bufbuild/protobuf/wire';
 

package/dist/http/fastify/index.d.ts

@@ -1,5 +1,5 @@
 import { FastifyPluginAsync } from 'fastify';
-import { v as OpHandle, p as ServiceBridge } from '../../service-bridge-Bgt4ciRB.js';
+import { v as OpHandle, p as ServiceBridge } from '../../service-bridge-DGZXGuhl.js';
 import '@grpc/grpc-js';
 import '@bufbuild/protobuf/wire';
 

package/dist/http/hono/index.d.ts

@@ -1,5 +1,5 @@
 import { Hono } from 'hono';
-import { p as ServiceBridge } from '../../service-bridge-Bgt4ciRB.js';
+import { p as ServiceBridge } from '../../service-bridge-DGZXGuhl.js';
 import '@grpc/grpc-js';
 import '@bufbuild/protobuf/wire';
 

package/dist/index.d.ts

@@ -1,4 +1,4 @@
-export { A as AdvertiseConfig, C as CallOpts, a as CatchupPolicy, b as ConnectedEvent, c as CronTrigger, D as DeclaredDep, d as DelayedTrigger, e as DisconnectedEvent, E as EventDomain, I as Identity, f as IntervalTrigger, J as JobDomain, g as JobHandler, h as JobHandlerCtx, i as JobOpts, M as MethodDescriptor, j as MethodType, O as OverlapPolicy, P as PolicyViolationEvent, k as PublishOpts, R as ReconnectingEvent, l as RetryOpts, m as RetryPolicy, n as RpcDomain, o as RpcHandlerOpts, S as SchemaSpec, p as ServiceBridge, q as ServiceBridgeError, r as ServiceBridgeOptions, s as ServiceDeps, T as Trigger, t as TypedClient, W as WorkflowDomain, u as WorkflowHandlerOpts } from './service-bridge-Bgt4ciRB.js';
+export { A as AdvertiseConfig, C as CallOpts, a as CatchupPolicy, b as ConnectedEvent, c as CronTrigger, D as DeclaredDep, d as DelayedTrigger, e as DisconnectedEvent, E as EventDomain, I as Identity, f as IntervalTrigger, J as JobDomain, g as JobHandler, h as JobHandlerCtx, i as JobOpts, M as MethodDescriptor, j as MethodType, O as OverlapPolicy, P as PolicyViolationEvent, k as PublishOpts, R as ReconnectingEvent, l as RetryOpts, m as RetryPolicy, n as RpcDomain, o as RpcHandlerOpts, S as SchemaSpec, p as ServiceBridge, q as ServiceBridgeError, r as ServiceBridgeOptions, s as ServiceDeps, T as Trigger, t as TypedClient, W as WorkflowDomain, u as WorkflowHandlerOpts } from './service-bridge-DGZXGuhl.js';
 import '@grpc/grpc-js';
 import '@bufbuild/protobuf/wire';
 

package/dist/index.js

@@ -14599,8 +14599,7 @@ var ServiceBridge = class {
   async connect(attempt) {
     if (this.stopped) return;
     try {
-      const key = parseBootstrapKey(this.rawKey);
-      const result = await this.opts.provisionFn(this.url, key);
+      const result = this.reusableProvision() ?? await this.opts.provisionFn(this.url, parseBootstrapKey(this.rawKey));
       await this.openSession(result, attempt);
     } catch (err) {
       const sbErr = new ServiceBridgeError("provision", err);
@@ -14612,6 +14611,21 @@ var ServiceBridge = class {
       this.scheduleReconnect(attempt + 1, sbErr.message);
     }
   }
+  /**
+   * Returns the cached provision when its leaf cert is still comfortably valid
+   * (more than certRefreshLeadMs remaining), so a reconnect reuses the existing
+   * identity instead of re-running the Bootstrap argon2 handshake. Returns null
+   * on the first connect or when the cert is near expiry — the caller then does
+   * a fresh Provision.
+   */
+  reusableProvision() {
+    const prov = this.lastProvision;
+    if (!prov) return null;
+    const now = BigInt(Math.floor(Date.now() / 1e3));
+    const remainingMs = Number(prov.notAfterUnix - now) * 1e3;
+    if (remainingMs <= this.opts.certRefreshLeadMs) return null;
+    return prov;
+  }
   async openSession(prov, attempt) {
     const creds = this.buildMTLSCredentials(prov);
     const client = this.opts.clientFactory(this.url, creds);