ysk-server-core 1.0.0 → 1.1.9

package/dist/hosting/validators/software-catalog.js

@@ -0,0 +1,125 @@
+/**
+ * Pinned validator client images — catalog + local presence.
+ * Pull is allowlisted to registry pins only (not a general Docker Hub).
+ */
+import { tl, } from 'ysk-server-shared';
+import { listDockerImages, probeDockerEngine } from '../docker/manager.js';
+import { dockerPull } from '../docker/manager.js';
+import { listValidatorChains } from './registry.js';
+import { listValidatorInstances } from './store.js';
+export function validatorImageRef(image, tag) {
+    return `${String(image).trim()}:${String(tag).trim()}`;
+}
+export function parseValidatorImageRef(raw) {
+    const s = String(raw ?? '').trim();
+    const i = s.lastIndexOf(':');
+    if (i <= 0 || i === s.length - 1)
+        return null;
+    const image = s.slice(0, i).trim();
+    const tag = s.slice(i + 1).trim();
+    if (!image || !tag || /\s/.test(image) || /\s/.test(tag))
+        return null;
+    return { image, tag };
+}
+export function pinnedValidatorImageRefs() {
+    const out = new Set();
+    for (const chain of listValidatorChains()) {
+        for (const client of chain.clients) {
+            out.add(validatorImageRef(client.image, client.tag));
+        }
+    }
+    return out;
+}
+export function isPinnedValidatorImage(ref) {
+    const parsed = parseValidatorImageRef(ref);
+    if (!parsed)
+        return false;
+    return pinnedValidatorImageRefs().has(validatorImageRef(parsed.image, parsed.tag));
+}
+export function listPinnedValidatorImages() {
+    return listValidatorChains().flatMap((chain) => chain.clients.map((client) => {
+        const ref = validatorImageRef(client.image, client.tag);
+        return {
+            chain: chain.id,
+            clientId: client.id,
+            role: client.role,
+            image: client.image,
+            tag: client.tag,
+            ref,
+            present: null,
+            size: null,
+            usedBy: [],
+        };
+    }));
+}
+export async function collectValidatorSoftware(input) {
+    const probe = await probeDockerEngine(input.host);
+    const pins = listPinnedValidatorImages();
+    const instances = listValidatorInstances(input.dataDir);
+    const usedBy = new Map();
+    for (const inst of instances) {
+        for (const client of Object.values(inst.clients ?? {})) {
+            const ref = validatorImageRef(client.image, client.tag);
+            const list = usedBy.get(ref) ?? [];
+            if (!list.includes(inst.id))
+                list.push(inst.id);
+            usedBy.set(ref, list);
+        }
+    }
+    let local = new Map();
+    if (probe.installed && probe.daemonActive) {
+        try {
+            const images = await listDockerImages(input.host);
+            local = new Map(images
+                .filter((row) => row.repository && row.tag && row.tag !== '<none>')
+                .map((row) => [validatorImageRef(row.repository, row.tag), { size: row.size }]));
+        }
+        catch {
+            local = new Map();
+        }
+    }
+    const dockerKnown = probe.installed && probe.daemonActive;
+    const images = pins.map((pin) => {
+        const hit = local.get(pin.ref);
+        return {
+            ...pin,
+            present: dockerKnown ? Boolean(hit) : null,
+            size: hit?.size ?? null,
+            usedBy: usedBy.get(pin.ref) ?? [],
+        };
+    });
+    return {
+        dockerInstalled: probe.installed,
+        dockerRunning: probe.daemonActive,
+        composeAvailable: probe.composeAvailable,
+        dockerVersion: probe.version,
+        composeVersion: probe.composeVersion,
+        images,
+        executeEnabled: input.host.executeEnabled(),
+        isRoot: input.host.isRoot(),
+    };
+}
+export async function pullPinnedValidatorImage(input) {
+    const raw = input.tag
+        ? validatorImageRef(input.image, input.tag)
+        : String(input.image ?? '').trim();
+    if (!isPinnedValidatorImage(raw)) {
+        return {
+            ok: false,
+            blocked: true,
+            blockMessage: tl('docker.errors.badImage'),
+            notes: [tl('docker.errors.badImage')],
+        };
+    }
+    const parsed = parseValidatorImageRef(raw);
+    if (!parsed) {
+        return {
+            ok: false,
+            blocked: true,
+            blockMessage: tl('docker.errors.badImage'),
+            notes: [tl('docker.errors.badImage')],
+        };
+    }
+    return dockerPull({ ...input, image: validatorImageRef(parsed.image, parsed.tag) });
+}
+//# sourceMappingURL=software-catalog.js.map

package/dist/hosting/validators/software-catalog.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"software-catalog.js","sourceRoot":"","sources":["../../../src/hosting/validators/software-catalog.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,EACL,EAAE,GAGH,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AAC3E,OAAO,EAAE,UAAU,EAAkB,MAAM,sBAAsB,CAAC;AAClE,OAAO,EAAE,mBAAmB,EAAE,MAAM,eAAe,CAAC;AACpD,OAAO,EAAE,sBAAsB,EAAE,MAAM,YAAY,CAAC;AAEpD,MAAM,UAAU,iBAAiB,CAAC,KAAa,EAAE,GAAW;IAC1D,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,IAAI,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;AACzD,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,GAAW;IAChD,MAAM,CAAC,GAAG,MAAM,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IACnC,MAAM,CAAC,GAAG,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IAC7B,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IAC9C,MAAM,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IACnC,MAAM,GAAG,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAClC,IAAI,CAAC,KAAK,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IACtE,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC;AACxB,CAAC;AAED,MAAM,UAAU,wBAAwB;IACtC,MAAM,GAAG,GAAG,IAAI,GAAG,EAAU,CAAC;IAC9B,KAAK,MAAM,KAAK,IAAI,mBAAmB,EAAE,EAAE,CAAC;QAC1C,KAAK,MAAM,MAAM,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;YACnC,GAAG,CAAC,GAAG,CAAC,iBAAiB,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;QACvD,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,GAAW;IAChD,MAAM,MAAM,GAAG,sBAAsB,CAAC,GAAG,CAAC,CAAC;IAC3C,IAAI,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IAC1B,OAAO,wBAAwB,EAAE,CAAC,GAAG,CAAC,iBAAiB,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;AACrF,CAAC;AAED,MAAM,UAAU,yBAAyB;IACvC,OAAO,mBAAmB,EAAE,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE,CAC7C,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE;QAC3B,MAAM,GAAG,GAAG,iBAAiB,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC;QACxD,OAAO;YACL,KAAK,EAAE,KAAK,CAAC,EAAE;YACf,QAAQ,EAAE,MAAM,CAAC,EAAE;YACnB,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,GAAG,EAAE,MAAM,CAAC,GAAG;YACf,GAAG;YACH,OAAO,EAAE,IAAI;YACb,IAAI,EAAE,IAAI;YACV,MAAM,EAAE,EAAE;SACX,CAAC;IACJ,CAAC,CAAC,CACH,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAAC,KAG9C;IACC,MAAM,KAAK,GAAG,MAAM,iBAAiB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAClD,MAAM,IAAI,GAAG,yBAAyB,EAAE,CAAC;IACzC,MAAM,SAAS,GAAG,sBAAsB,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACxD,MAAM,MAAM,GAAG,IAAI,GAAG,EAAoB,CAAC;IAC3C,KAAK,MAAM,IAAI,IAAI,SAAS,EAAE,CAAC;QAC7B,KAAK,MAAM,MAAM,IAAI,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC,EAAE,CAAC;YACvD,MAAM,GAAG,GAAG,iBAAiB,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC;YACxD,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;YACnC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;gBAAE,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YAChD,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QACxB,CAAC;IACH,CAAC;IAED,IAAI,KAAK,GAAG,IAAI,GAAG,EAA6B,CAAC;IACjD,IAAI,KAAK,CAAC,SAAS,IAAI,KAAK,CAAC,YAAY,EAAE,CAAC;QAC1C,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAClD,KAAK,GAAG,IAAI,GAAG,CACb,MAAM;iBACH,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,UAAU,IAAI,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,GAAG,KAAK,QAAQ,CAAC;iBAClE,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,iBAAiB,CAAC,GAAG,CAAC,UAAU,EAAE,GAAG,CAAC,GAAG,CAAC,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,CAClF,CAAC;QACJ,CAAC;QAAC,MAAM,CAAC;YACP,KAAK,GAAG,IAAI,GAAG,EAAE,CAAC;QACpB,CAAC;IACH,CAAC;IAED,MAAM,WAAW,GAAG,KAAK,CAAC,SAAS,IAAI,KAAK,CAAC,YAAY,CAAC;IAC1D,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE;QAC9B,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC/B,OAAO;YACL,GAAG,GAAG;YACN,OAAO,EAAE,WAAW,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI;YAC1C,IAAI,EAAE,GAAG,EAAE,IAAI,IAAI,IAAI;YACvB,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE;SAClC,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,OAAO;QACL,eAAe,EAAE,KAAK,CAAC,SAAS;QAChC,aAAa,EAAE,KAAK,CAAC,YAAY;QACjC,gBAAgB,EAAE,KAAK,CAAC,gBAAgB;QACxC,aAAa,EAAE,KAAK,CAAC,OAAO;QAC5B,cAAc,EAAE,KAAK,CAAC,cAAc;QACpC,MAAM;QACN,cAAc,EAAE,KAAK,CAAC,IAAI,CAAC,cAAc,EAAE;QAC3C,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE;KAC5B,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAC5C,KAAkD;IAElD,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG;QACnB,CAAC,CAAC,iBAAiB,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC;QAC3C,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IACrC,IAAI,CAAC,sBAAsB,CAAC,GAAG,CAAC,EAAE,CAAC;QACjC,OAAO;YACL,EAAE,EAAE,KAAK;YACT,OAAO,EAAE,IAAI;YACb,YAAY,EAAE,EAAE,CAAC,wBAAwB,CAAC;YAC1C,KAAK,EAAE,CAAC,EAAE,CAAC,wBAAwB,CAAC,CAAC;SACtC,CAAC;IACJ,CAAC;IACD,MAAM,MAAM,GAAG,sBAAsB,CAAC,GAAG,CAAC,CAAC;IAC3C,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO;YACL,EAAE,EAAE,KAAK;YACT,OAAO,EAAE,IAAI;YACb,YAAY,EAAE,EAAE,CAAC,wBAAwB,CAAC;YAC1C,KAAK,EAAE,CAAC,EAAE,CAAC,wBAAwB,CAAC,CAAC;SACtC,CAAC;IACJ,CAAC;IACD,OAAO,UAAU,CAAC,EAAE,GAAG,KAAK,EAAE,KAAK,EAAE,iBAAiB,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;AACtF,CAAC"}

package/dist/hosting/validators/store.d.ts

@@ -0,0 +1,29 @@
+import { type ValidatorChainId, type ValidatorInstanceDto, type ValidatorProfileId, type ValidatorUpgradePolicy } from 'ysk-server-shared';
+export type ValidatorStoreFile = {
+    version: 1;
+    instances: ValidatorInstanceDto[];
+};
+export declare function validatorsRoot(dataDir: string): string;
+export declare function instanceDir(dataDir: string, id: string): string;
+export declare function defaultInstanceDataPath(dataDir: string, id: string): string;
+export declare function loadValidatorStore(dataDir: string): ValidatorStoreFile;
+export declare function saveValidatorStore(dataDir: string, store: ValidatorStoreFile): void;
+export declare function listValidatorInstances(dataDir: string): ValidatorInstanceDto[];
+export declare function getValidatorInstance(dataDir: string, id: string): ValidatorInstanceDto | undefined;
+export declare function upsertValidatorInstance(dataDir: string, instance: ValidatorInstanceDto): ValidatorInstanceDto;
+export declare function deleteValidatorInstance(dataDir: string, id: string): boolean;
+export declare function nextValidatorInstanceId(dataDir: string, chain: ValidatorChainId, network: string): string;
+export declare function buildValidatorInstance(input: {
+    dataDir: string;
+    chain: ValidatorChainId;
+    network: string;
+    profile: ValidatorProfileId;
+    slug?: string;
+    upgradePolicy?: ValidatorUpgradePolicy;
+    rpcHost?: string;
+    clients?: ValidatorInstanceDto['clients'];
+    ports?: Record<string, number>;
+    dataPath?: string;
+    limits?: ValidatorInstanceDto['limits'];
+}): ValidatorInstanceDto;
+//# sourceMappingURL=store.d.ts.map

package/dist/hosting/validators/store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"store.d.ts","sourceRoot":"","sources":["../../../src/hosting/validators/store.ts"],"names":[],"mappings":"AAKA,OAAO,EAML,KAAK,gBAAgB,EACrB,KAAK,oBAAoB,EACzB,KAAK,kBAAkB,EACvB,KAAK,sBAAsB,EAC5B,MAAM,mBAAmB,CAAC;AAG3B,MAAM,MAAM,kBAAkB,GAAG;IAC/B,OAAO,EAAE,CAAC,CAAC;IACX,SAAS,EAAE,oBAAoB,EAAE,CAAC;CACnC,CAAC;AAUF,wBAAgB,cAAc,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAEtD;AAED,wBAAgB,WAAW,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,MAAM,CAE/D;AAED,wBAAgB,uBAAuB,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,MAAM,CAE3E;AAED,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,MAAM,GAAG,kBAAkB,CAYtE;AAED,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,kBAAkB,GAAG,IAAI,CAOnF;AAED,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,MAAM,GAAG,oBAAoB,EAAE,CAE9E;AAED,wBAAgB,oBAAoB,CAClC,OAAO,EAAE,MAAM,EACf,EAAE,EAAE,MAAM,GACT,oBAAoB,GAAG,SAAS,CAElC;AAED,wBAAgB,uBAAuB,CACrC,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,oBAAoB,GAC7B,oBAAoB,CAiBtB;AAED,wBAAgB,uBAAuB,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAM5E;AAED,wBAAgB,uBAAuB,CACrC,OAAO,EAAE,MAAM,EACf,KAAK,EAAE,gBAAgB,EACvB,OAAO,EAAE,MAAM,GACd,MAAM,CAMR;AAED,wBAAgB,sBAAsB,CAAC,KAAK,EAAE;IAC5C,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,gBAAgB,CAAC;IACxB,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,kBAAkB,CAAC;IAC5B,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,aAAa,CAAC,EAAE,sBAAsB,CAAC;IACvC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,oBAAoB,CAAC,SAAS,CAAC,CAAC;IAC1C,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC/B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,oBAAoB,CAAC,QAAQ,CAAC,CAAC;CACzC,GAAG,oBAAoB,CA4BvB"}

package/dist/hosting/validators/store.js

@@ -0,0 +1,186 @@
+/**
+ * Persist validator instances under dataDir (JSON file, same pattern as BT tracker).
+ */
+import { existsSync, mkdirSync, readFileSync, writeFileSync } from 'node:fs';
+import { join } from 'node:path';
+import { defaultUpgradePolicyForNetworkKind, isValidatorChainId, isValidatorInstanceId, isValidatorProfileId, isValidatorUpgradePolicy, } from 'ysk-server-shared';
+import { getValidatorNetwork } from './registry.js';
+function storeDir(dataDir) {
+    return join(dataDir, 'validators');
+}
+function storePath(dataDir) {
+    return join(storeDir(dataDir), 'instances.json');
+}
+export function validatorsRoot(dataDir) {
+    return storeDir(dataDir);
+}
+export function instanceDir(dataDir, id) {
+    return join(storeDir(dataDir), id);
+}
+export function defaultInstanceDataPath(dataDir, id) {
+    return join(instanceDir(dataDir, id), 'data');
+}
+export function loadValidatorStore(dataDir) {
+    const p = storePath(dataDir);
+    if (!existsSync(p))
+        return { version: 1, instances: [] };
+    try {
+        const raw = JSON.parse(readFileSync(p, 'utf8'));
+        const instances = Array.isArray(raw.instances)
+            ? raw.instances.map(normalizeInstance).filter((x) => x != null)
+            : [];
+        return { version: 1, instances };
+    }
+    catch {
+        return { version: 1, instances: [] };
+    }
+}
+export function saveValidatorStore(dataDir, store) {
+    mkdirSync(storeDir(dataDir), { recursive: true });
+    const next = {
+        version: 1,
+        instances: store.instances.map((i) => normalizeInstance(i)).filter((x) => x != null),
+    };
+    writeFileSync(storePath(dataDir), `${JSON.stringify(next, null, 2)}\n`, 'utf8');
+}
+export function listValidatorInstances(dataDir) {
+    return loadValidatorStore(dataDir).instances;
+}
+export function getValidatorInstance(dataDir, id) {
+    return listValidatorInstances(dataDir).find((i) => i.id === id);
+}
+export function upsertValidatorInstance(dataDir, instance) {
+    const norm = normalizeInstance(instance);
+    if (!norm) {
+        throw new Error('invalid validator instance');
+    }
+    const store = loadValidatorStore(dataDir);
+    const idx = store.instances.findIndex((i) => i.id === norm.id);
+    const now = new Date().toISOString();
+    const next = {
+        ...norm,
+        updatedAt: now,
+        createdAt: idx >= 0 ? store.instances[idx].createdAt : norm.createdAt || now,
+    };
+    if (idx >= 0)
+        store.instances[idx] = next;
+    else
+        store.instances.push(next);
+    saveValidatorStore(dataDir, store);
+    return next;
+}
+export function deleteValidatorInstance(dataDir, id) {
+    const store = loadValidatorStore(dataDir);
+    const next = store.instances.filter((i) => i.id !== id);
+    if (next.length === store.instances.length)
+        return false;
+    saveValidatorStore(dataDir, { version: 1, instances: next });
+    return true;
+}
+export function nextValidatorInstanceId(dataDir, chain, network) {
+    const prefix = `${chain}-${network}-`;
+    const used = new Set(listValidatorInstances(dataDir).map((i) => i.id));
+    let n = 1;
+    while (used.has(`${prefix}${n}`))
+        n += 1;
+    return `${prefix}${n}`;
+}
+export function buildValidatorInstance(input) {
+    const id = input.slug
+        ? `${input.chain}-${input.network}-${input.slug}`
+        : nextValidatorInstanceId(input.dataDir, input.chain, input.network);
+    if (!isValidatorInstanceId(id)) {
+        throw new Error('invalid validator instance id');
+    }
+    const now = new Date().toISOString();
+    const net = getValidatorNetwork(input.chain, input.network);
+    const policy = input.upgradePolicy ??
+        defaultUpgradePolicyForNetworkKind(net?.kind === 'mainnet' ? 'mainnet' : 'testnet');
+    return {
+        id,
+        chain: input.chain,
+        network: input.network,
+        profile: input.profile,
+        slug: input.slug ?? id.slice(`${input.chain}-${input.network}-`.length),
+        dataPath: input.dataPath?.trim() || defaultInstanceDataPath(input.dataDir, id),
+        rpcHost: (input.rpcHost ?? '127.0.0.1').trim() || '127.0.0.1',
+        upgradePolicy: policy,
+        desiredState: 'stopped',
+        createdAt: now,
+        updatedAt: now,
+        clients: input.clients ?? {},
+        ports: input.ports ?? {},
+        limits: input.limits,
+    };
+}
+function normalizeInstance(raw) {
+    if (!raw || typeof raw !== 'object')
+        return null;
+    const o = raw;
+    const id = String(o.id ?? '').trim();
+    const chain = String(o.chain ?? '').trim();
+    const network = String(o.network ?? '').trim();
+    const profile = String(o.profile ?? '').trim();
+    if (!isValidatorInstanceId(id))
+        return null;
+    if (!isValidatorChainId(chain))
+        return null;
+    if (!network)
+        return null;
+    if (!isValidatorProfileId(profile))
+        return null;
+    const policyRaw = String(o.upgradePolicy ?? 'manual');
+    const upgradePolicy = isValidatorUpgradePolicy(policyRaw) ? policyRaw : 'manual';
+    const desiredState = o.desiredState === 'running' ? 'running' : 'stopped';
+    const clients = {};
+    if (o.clients && typeof o.clients === 'object') {
+        for (const [k, v] of Object.entries(o.clients)) {
+            if (!v || typeof v !== 'object')
+                continue;
+            const c = v;
+            const cid = String(c.id ?? k).trim();
+            const image = String(c.image ?? '').trim();
+            const tag = String(c.tag ?? '').trim();
+            if (!cid || !image)
+                continue;
+            clients[k] = { id: cid, image, tag: tag || 'latest' };
+        }
+    }
+    const ports = {};
+    if (o.ports && typeof o.ports === 'object') {
+        for (const [k, v] of Object.entries(o.ports)) {
+            const n = Number(v);
+            if (Number.isInteger(n) && n > 0 && n <= 65535)
+                ports[k] = n;
+        }
+    }
+    const now = new Date().toISOString();
+    return {
+        id,
+        chain,
+        network,
+        profile,
+        slug: String(o.slug ?? '').trim() || id,
+        dataPath: String(o.dataPath ?? '').trim() || defaultInstanceDataPath('.', id),
+        rpcHost: String(o.rpcHost ?? '127.0.0.1').trim() || '127.0.0.1',
+        upgradePolicy,
+        desiredState,
+        createdAt: String(o.createdAt ?? now),
+        updatedAt: String(o.updatedAt ?? now),
+        clients,
+        ports,
+        lastUpgrade: o.lastUpgrade && typeof o.lastUpgrade === 'object'
+            ? o.lastUpgrade
+            : undefined,
+        lastMithril: o.lastMithril && typeof o.lastMithril === 'object'
+            ? o.lastMithril
+            : undefined,
+        limits: o.limits && typeof o.limits === 'object'
+            ? o.limits
+            : undefined,
+        lastStatus: o.lastStatus && typeof o.lastStatus === 'object'
+            ? o.lastStatus
+            : undefined,
+    };
+}
+//# sourceMappingURL=store.js.map

package/dist/hosting/validators/store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"store.js","sourceRoot":"","sources":["../../../src/hosting/validators/store.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAC7E,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EACL,kCAAkC,EAClC,kBAAkB,EAClB,qBAAqB,EACrB,oBAAoB,EACpB,wBAAwB,GAKzB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,mBAAmB,EAAE,MAAM,eAAe,CAAC;AAOpD,SAAS,QAAQ,CAAC,OAAe;IAC/B,OAAO,IAAI,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;AACrC,CAAC;AAED,SAAS,SAAS,CAAC,OAAe;IAChC,OAAO,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,gBAAgB,CAAC,CAAC;AACnD,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,OAAe;IAC5C,OAAO,QAAQ,CAAC,OAAO,CAAC,CAAC;AAC3B,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,OAAe,EAAE,EAAU;IACrD,OAAO,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC,CAAC;AACrC,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,OAAe,EAAE,EAAU;IACjE,OAAO,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,EAAE,CAAC,EAAE,MAAM,CAAC,CAAC;AAChD,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,OAAe;IAChD,MAAM,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC;IAC7B,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC;QAAE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC;IACzD,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,EAAE,MAAM,CAAC,CAAgC,CAAC;QAC/E,MAAM,SAAS,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC;YAC5C,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAA6B,EAAE,CAAC,CAAC,IAAI,IAAI,CAAC;YAC1F,CAAC,CAAC,EAAE,CAAC;QACP,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC;IACnC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC;IACvC,CAAC;AACH,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,OAAe,EAAE,KAAyB;IAC3E,SAAS,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAClD,MAAM,IAAI,GAAuB;QAC/B,OAAO,EAAE,CAAC;QACV,SAAS,EAAE,KAAK,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAA6B,EAAE,CAAC,CAAC,IAAI,IAAI,CAAC;KAChH,CAAC;IACF,aAAa,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;AAClF,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,OAAe;IACpD,OAAO,kBAAkB,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC;AAC/C,CAAC;AAED,MAAM,UAAU,oBAAoB,CAClC,OAAe,EACf,EAAU;IAEV,OAAO,sBAAsB,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;AAClE,CAAC;AAED,MAAM,UAAU,uBAAuB,CACrC,OAAe,EACf,QAA8B;IAE9B,MAAM,IAAI,GAAG,iBAAiB,CAAC,QAAQ,CAAC,CAAC;IACzC,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;IAChD,CAAC;IACD,MAAM,KAAK,GAAG,kBAAkB,CAAC,OAAO,CAAC,CAAC;IAC1C,MAAM,GAAG,GAAG,KAAK,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC,CAAC;IAC/D,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACrC,MAAM,IAAI,GAAyB;QACjC,GAAG,IAAI;QACP,SAAS,EAAE,GAAG;QACd,SAAS,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,GAAG,CAAE,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,IAAI,GAAG;KAC9E,CAAC;IACF,IAAI,GAAG,IAAI,CAAC;QAAE,KAAK,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC;;QACrC,KAAK,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAChC,kBAAkB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IACnC,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,OAAe,EAAE,EAAU;IACjE,MAAM,KAAK,GAAG,kBAAkB,CAAC,OAAO,CAAC,CAAC;IAC1C,MAAM,IAAI,GAAG,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;IACxD,IAAI,IAAI,CAAC,MAAM,KAAK,KAAK,CAAC,SAAS,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IACzD,kBAAkB,CAAC,OAAO,EAAE,EAAE,OAAO,EAAE,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC7D,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,uBAAuB,CACrC,OAAe,EACf,KAAuB,EACvB,OAAe;IAEf,MAAM,MAAM,GAAG,GAAG,KAAK,IAAI,OAAO,GAAG,CAAC;IACtC,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,sBAAsB,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IACvE,IAAI,CAAC,GAAG,CAAC,CAAC;IACV,OAAO,IAAI,CAAC,GAAG,CAAC,GAAG,MAAM,GAAG,CAAC,EAAE,CAAC;QAAE,CAAC,IAAI,CAAC,CAAC;IACzC,OAAO,GAAG,MAAM,GAAG,CAAC,EAAE,CAAC;AACzB,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,KAYtC;IACC,MAAM,EAAE,GAAG,KAAK,CAAC,IAAI;QACnB,CAAC,CAAC,GAAG,KAAK,CAAC,KAAK,IAAI,KAAK,CAAC,OAAO,IAAI,KAAK,CAAC,IAAI,EAAE;QACjD,CAAC,CAAC,uBAAuB,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;IACvE,IAAI,CAAC,qBAAqB,CAAC,EAAE,CAAC,EAAE,CAAC;QAC/B,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;IACnD,CAAC;IACD,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACrC,MAAM,GAAG,GAAG,mBAAmB,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;IAC5D,MAAM,MAAM,GACV,KAAK,CAAC,aAAa;QACnB,kCAAkC,CAAC,GAAG,EAAE,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IACtF,OAAO;QACL,EAAE;QACF,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,IAAI,EAAE,KAAK,CAAC,IAAI,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,KAAK,CAAC,KAAK,IAAI,KAAK,CAAC,OAAO,GAAG,CAAC,MAAM,CAAC;QACvE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,IAAI,EAAE,IAAI,uBAAuB,CAAC,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC;QAC9E,OAAO,EAAE,CAAC,KAAK,CAAC,OAAO,IAAI,WAAW,CAAC,CAAC,IAAI,EAAE,IAAI,WAAW;QAC7D,aAAa,EAAE,MAAM;QACrB,YAAY,EAAE,SAAS;QACvB,SAAS,EAAE,GAAG;QACd,SAAS,EAAE,GAAG;QACd,OAAO,EAAE,KAAK,CAAC,OAAO,IAAI,EAAE;QAC5B,KAAK,EAAE,KAAK,CAAC,KAAK,IAAI,EAAE;QACxB,MAAM,EAAE,KAAK,CAAC,MAAM;KACrB,CAAC;AACJ,CAAC;AAED,SAAS,iBAAiB,CAAC,GAAY;IACrC,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IACjD,MAAM,CAAC,GAAG,GAA8B,CAAC;IACzC,MAAM,EAAE,GAAG,MAAM,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IACrC,MAAM,KAAK,GAAG,MAAM,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IAC3C,MAAM,OAAO,GAAG,MAAM,CAAC,CAAC,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IAC/C,MAAM,OAAO,GAAG,MAAM,CAAC,CAAC,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IAC/C,IAAI,CAAC,qBAAqB,CAAC,EAAE,CAAC;QAAE,OAAO,IAAI,CAAC;IAC5C,IAAI,CAAC,kBAAkB,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAC5C,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IAC1B,IAAI,CAAC,oBAAoB,CAAC,OAAO,CAAC;QAAE,OAAO,IAAI,CAAC;IAChD,MAAM,SAAS,GAAG,MAAM,CAAC,CAAC,CAAC,aAAa,IAAI,QAAQ,CAAC,CAAC;IACtD,MAAM,aAAa,GAAG,wBAAwB,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC;IACjF,MAAM,YAAY,GAAG,CAAC,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;IAC1E,MAAM,OAAO,GAAoC,EAAE,CAAC;IACpD,IAAI,CAAC,CAAC,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;QAC/C,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,OAAkC,CAAC,EAAE,CAAC;YAC1E,IAAI,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ;gBAAE,SAAS;YAC1C,MAAM,CAAC,GAAG,CAA4B,CAAC;YACvC,MAAM,GAAG,GAAG,MAAM,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;YACrC,MAAM,KAAK,GAAG,MAAM,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;YAC3C,MAAM,GAAG,GAAG,MAAM,CAAC,CAAC,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;YACvC,IAAI,CAAC,GAAG,IAAI,CAAC,KAAK;gBAAE,SAAS;YAC7B,OAAO,CAAC,CAAC,CAAC,GAAG,EAAE,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,IAAI,QAAQ,EAAE,CAAC;QACxD,CAAC;IACH,CAAC;IACD,MAAM,KAAK,GAA2B,EAAE,CAAC;IACzC,IAAI,CAAC,CAAC,KAAK,IAAI,OAAO,CAAC,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC3C,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,KAAgC,CAAC,EAAE,CAAC;YACxE,MAAM,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;YACpB,IAAI,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,KAAK;gBAAE,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;QAC/D,CAAC;IACH,CAAC;IACD,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACrC,OAAO;QACL,EAAE;QACF,KAAK;QACL,OAAO;QACP,OAAO;QACP,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE;QACvC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,uBAAuB,CAAC,GAAG,EAAE,EAAE,CAAC;QAC7E,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,OAAO,IAAI,WAAW,CAAC,CAAC,IAAI,EAAE,IAAI,WAAW;QAC/D,aAAa;QACb,YAAY;QACZ,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC,SAAS,IAAI,GAAG,CAAC;QACrC,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC,SAAS,IAAI,GAAG,CAAC;QACrC,OAAO;QACP,KAAK;QACL,WAAW,EACT,CAAC,CAAC,WAAW,IAAI,OAAO,CAAC,CAAC,WAAW,KAAK,QAAQ;YAChD,CAAC,CAAE,CAAC,CAAC,WAAmD;YACxD,CAAC,CAAC,SAAS;QACf,WAAW,EACT,CAAC,CAAC,WAAW,IAAI,OAAO,CAAC,CAAC,WAAW,KAAK,QAAQ;YAChD,CAAC,CAAE,CAAC,CAAC,WAAmD;YACxD,CAAC,CAAC,SAAS;QACf,MAAM,EACJ,CAAC,CAAC,MAAM,IAAI,OAAO,CAAC,CAAC,MAAM,KAAK,QAAQ;YACtC,CAAC,CAAE,CAAC,CAAC,MAAyC;YAC9C,CAAC,CAAC,SAAS;QACf,UAAU,EACR,CAAC,CAAC,UAAU,IAAI,OAAO,CAAC,CAAC,UAAU,KAAK,QAAQ;YAC9C,CAAC,CAAE,CAAC,CAAC,UAAiD;YACtD,CAAC,CAAC,SAAS;KAChB,CAAC;AACJ,CAAC"}

package/dist/hosting/validators/upgrade.d.ts

@@ -0,0 +1,35 @@
+import type { ValidatorInstanceDto, ValidatorUpgradePolicy } from 'ysk-server-shared';
+import type { HostExecutor } from '../../host/executor.js';
+import type { ValidatorUpgradeOffer } from './adapters/base.js';
+import type { OpsLogFn } from '../ops-log.js';
+export { parseVersionParts, tagIsBreaking, tagIsNewer } from './versions.js';
+export type StoredUpgradeOffer = ValidatorUpgradeOffer & {
+    instanceId: string;
+};
+export declare function detectUpgradeForInstance(spec: ValidatorInstanceDto, remoteTags?: Record<string, string>): ValidatorUpgradeOffer | null;
+export declare function scanValidatorUpgrades(dataDir: string, remoteTags?: Record<string, string>): StoredUpgradeOffer[];
+export declare function saveUpgradeScan(dataDir: string, offers: StoredUpgradeOffer[]): void;
+export declare function loadUpgradeScan(dataDir: string): StoredUpgradeOffer[];
+export declare function shouldAutoApply(policy: ValidatorUpgradePolicy, offer: ValidatorUpgradeOffer, networkKind: 'testnet' | 'mainnet'): boolean;
+export declare function applyValidatorUpgrade(input: {
+    dataDir: string;
+    host: HostExecutor;
+    spec: ValidatorInstanceDto;
+    execute: boolean;
+    health?: (spec: ValidatorInstanceDto) => Promise<boolean>;
+    healthTimeoutMs?: number;
+    sleep?: (ms: number) => Promise<void>;
+    onLog?: OpsLogFn;
+    signal?: AbortSignal;
+}): Promise<{
+    ok: boolean;
+    rolledBack: boolean;
+    notes: string[];
+    spec: ValidatorInstanceDto;
+}>;
+export declare function runValidatorUpgradeScan(input: {
+    dataDir: string;
+    host: HostExecutor;
+}): Promise<StoredUpgradeOffer[]>;
+export declare function networkKindFor(spec: ValidatorInstanceDto): 'testnet' | 'mainnet';
+//# sourceMappingURL=upgrade.d.ts.map

package/dist/hosting/validators/upgrade.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"upgrade.d.ts","sourceRoot":"","sources":["../../../src/hosting/validators/upgrade.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,oBAAoB,EAAE,sBAAsB,EAAE,MAAM,mBAAmB,CAAC;AAWtF,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AAC3D,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,oBAAoB,CAAC;AAQhE,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAE9C,OAAO,EAAE,iBAAiB,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAE7E,MAAM,MAAM,kBAAkB,GAAG,qBAAqB,GAAG;IAAE,UAAU,EAAE,MAAM,CAAA;CAAE,CAAC;AAEhF,wBAAgB,wBAAwB,CACtC,IAAI,EAAE,oBAAoB,EAC1B,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAClC,qBAAqB,GAAG,IAAI,CAuB9B;AAED,wBAAgB,qBAAqB,CACnC,OAAO,EAAE,MAAM,EACf,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAClC,kBAAkB,EAAE,CAQtB;AAED,wBAAgB,eAAe,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,kBAAkB,EAAE,GAAG,IAAI,CAMnF;AAED,wBAAgB,eAAe,CAAC,OAAO,EAAE,MAAM,GAAG,kBAAkB,EAAE,CASrE;AAED,wBAAgB,eAAe,CAC7B,MAAM,EAAE,sBAAsB,EAC9B,KAAK,EAAE,qBAAqB,EAC5B,WAAW,EAAE,SAAS,GAAG,SAAS,GACjC,OAAO,CAKT;AAED,wBAAsB,qBAAqB,CAAC,KAAK,EAAE;IACjD,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,YAAY,CAAC;IACnB,IAAI,EAAE,oBAAoB,CAAC;IAC3B,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,CAAC,EAAE,CAAC,IAAI,EAAE,oBAAoB,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IAC1D,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,KAAK,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACtC,KAAK,CAAC,EAAE,QAAQ,CAAC;IACjB,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB,GAAG,OAAO,CAAC;IACV,EAAE,EAAE,OAAO,CAAC;IACZ,UAAU,EAAE,OAAO,CAAC;IACpB,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,IAAI,EAAE,oBAAoB,CAAC;CAC5B,CAAC,CAkGD;AA2DD,wBAAsB,uBAAuB,CAAC,KAAK,EAAE;IACnD,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,YAAY,CAAC;CACpB,GAAG,OAAO,CAAC,kBAAkB,EAAE,CAAC,CAyBhC;AAED,wBAAgB,cAAc,CAAC,IAAI,EAAE,oBAAoB,GAAG,SAAS,GAAG,SAAS,CAEhF"}

package/dist/hosting/validators/upgrade.js

@@ -0,0 +1,251 @@
+/**
+ * Detect / apply client tag upgrades from the pinned registry.
+ */
+import { copyFileSync, existsSync, mkdirSync, readFileSync, writeFileSync } from 'node:fs';
+import { join } from 'node:path';
+import { getValidatorNetwork, v1ValidatorClients } from './registry.js';
+import { listValidatorInstances, upsertValidatorInstance, instanceDir } from './store.js';
+import { planInstallFor } from './adapters/index.js';
+import { composeFilePath, composeProjectName, composePull, composeUp, writeComposeFile, } from './compose-runner.js';
+import { changelogForClient, loadRemoteClientTags, pickAllowedNextTag, refreshRemoteClientTags, } from './releases.js';
+import { tagIsBreaking, tagIsNewer } from './versions.js';
+export { parseVersionParts, tagIsBreaking, tagIsNewer } from './versions.js';
+export function detectUpgradeForInstance(spec, remoteTags) {
+    const pinned = v1ValidatorClients(spec.chain);
+    const remotes = remoteTags;
+    for (const pin of pinned) {
+        const have = Object.values(spec.clients).find((c) => c.id === pin.id);
+        if (!have)
+            continue;
+        const current = have.tag || pin.tag;
+        const picked = pickAllowedNextTag({
+            current,
+            pin: pin.tag,
+            remote: remotes?.[pin.id],
+        });
+        if (tagIsNewer(current, picked.next)) {
+            return {
+                currentTag: current,
+                nextTag: picked.next,
+                clientId: pin.id,
+                breaking: tagIsBreaking(current, picked.next),
+                changelogUrl: changelogForClient(pin.id),
+            };
+        }
+    }
+    return null;
+}
+export function scanValidatorUpgrades(dataDir, remoteTags) {
+    const remotes = remoteTags ?? loadRemoteClientTags(dataDir);
+    const out = [];
+    for (const inst of listValidatorInstances(dataDir)) {
+        const offer = detectUpgradeForInstance(inst, remotes);
+        if (offer)
+            out.push({ ...offer, instanceId: inst.id });
+    }
+    return out;
+}
+export function saveUpgradeScan(dataDir, offers) {
+    mkdirSync(join(dataDir, 'validators'), { recursive: true });
+    writeFileSync(join(dataDir, 'validators', 'upgrade-offers.json'), `${JSON.stringify({ at: new Date().toISOString(), offers }, null, 2)}\n`);
+}
+export function loadUpgradeScan(dataDir) {
+    const p = join(dataDir, 'validators', 'upgrade-offers.json');
+    if (!existsSync(p))
+        return [];
+    try {
+        const raw = JSON.parse(readFileSync(p, 'utf8'));
+        return Array.isArray(raw.offers) ? raw.offers : [];
+    }
+    catch {
+        return [];
+    }
+}
+export function shouldAutoApply(policy, offer, networkKind) {
+    if (networkKind === 'mainnet')
+        return false;
+    if (policy === 'auto-all')
+        return true;
+    if (policy === 'auto-safe')
+        return !offer.breaking;
+    return false;
+}
+export async function applyValidatorUpgrade(input) {
+    const offer = detectUpgradeForInstance(input.spec, loadRemoteClientTags(input.dataDir));
+    if (!offer)
+        return { ok: true, rolledBack: false, notes: ['no upgrade'], spec: input.spec };
+    const prev = input.spec;
+    const nextClients = { ...input.spec.clients };
+    for (const [k, c] of Object.entries(nextClients)) {
+        if (c.id === offer.clientId)
+            nextClients[k] = { ...c, tag: offer.nextTag };
+    }
+    const next = {
+        ...input.spec,
+        clients: nextClients,
+        updatedAt: new Date().toISOString(),
+    };
+    const dir = instanceDir(input.dataDir, next.id);
+    const composePath = composeFilePath(dir);
+    let backupPath = null;
+    if (existsSync(composePath)) {
+        mkdirSync(join(dir, 'backups'), { recursive: true });
+        backupPath = join(dir, 'backups', `compose-${Date.now()}.yml`);
+        copyFileSync(composePath, backupPath);
+    }
+    const prevYaml = existsSync(composePath) && backupPath ? readFileSync(backupPath, 'utf8') : null;
+    const plan = planInstallFor(next);
+    writeComposeFile(composePath, plan.composeYaml, next.id);
+    upsertValidatorInstance(input.dataDir, next);
+    if (!input.execute) {
+        return { ok: true, rolledBack: false, notes: ['wrote compose; not applied'], spec: next };
+    }
+    await composePull({
+        host: input.host,
+        file: composePath,
+        project: composeProjectName(next.id),
+        execute: true,
+        onLog: input.onLog,
+        signal: input.signal,
+    });
+    const up = await composeUp({
+        host: input.host,
+        file: composePath,
+        project: composeProjectName(next.id),
+        execute: true,
+        onLog: input.onLog,
+        signal: input.signal,
+    });
+    if (!up.ok) {
+        const rb = await rollbackUpgrade({
+            dataDir: input.dataDir,
+            host: input.host,
+            prev,
+            composePath,
+            prevYaml,
+            offer,
+            reason: up.stderr || 'compose up failed',
+        });
+        return rb;
+    }
+    const { defaultHealthProbe, waitValidatorHealthy } = await import('./health.js');
+    const probe = input.health ??
+        ((spec) => defaultHealthProbe(spec, { dataDir: input.dataDir, host: input.host }));
+    const healthy = await waitValidatorHealthy({
+        spec: next,
+        probe,
+        timeoutMs: input.healthTimeoutMs ?? 90_000,
+        sleep: input.sleep,
+    });
+    if (healthy) {
+        const done = {
+            ...next,
+            lastUpgrade: {
+                at: new Date().toISOString(),
+                clientId: offer.clientId,
+                fromTag: offer.currentTag,
+                toTag: offer.nextTag,
+                result: 'applied',
+            },
+        };
+        upsertValidatorInstance(input.dataDir, done);
+        return {
+            ok: true,
+            rolledBack: false,
+            notes: [`upgraded ${offer.clientId} ${offer.currentTag} -> ${offer.nextTag}`],
+            spec: done,
+        };
+    }
+    return rollbackUpgrade({
+        dataDir: input.dataDir,
+        host: input.host,
+        prev,
+        composePath,
+        prevYaml,
+        offer,
+        reason: 'health check failed',
+    });
+}
+async function rollbackUpgrade(input) {
+    if (input.prevYaml)
+        writeComposeFile(input.composePath, input.prevYaml, input.prev.id);
+    else {
+        const plan = planInstallFor(input.prev);
+        writeComposeFile(input.composePath, plan.composeYaml, input.prev.id);
+    }
+    const restored = {
+        ...input.prev,
+        lastUpgrade: {
+            at: new Date().toISOString(),
+            clientId: input.offer.clientId,
+            fromTag: input.offer.currentTag,
+            toTag: input.offer.nextTag,
+            result: 'rolled-back',
+            notes: [input.reason],
+        },
+        updatedAt: new Date().toISOString(),
+    };
+    upsertValidatorInstance(input.dataDir, restored);
+    const up = await composeUp({
+        host: input.host,
+        file: input.composePath,
+        project: composeProjectName(restored.id),
+        execute: true,
+    });
+    if (!up.ok) {
+        const failed = {
+            ...restored,
+            lastUpgrade: { ...restored.lastUpgrade, result: 'failed' },
+        };
+        upsertValidatorInstance(input.dataDir, failed);
+        return {
+            ok: false,
+            rolledBack: false,
+            notes: [input.reason, 'rollback compose up failed', up.stderr],
+            spec: failed,
+        };
+    }
+    return {
+        ok: true,
+        rolledBack: true,
+        notes: [
+            input.reason,
+            `rolled back ${input.offer.clientId} to ${input.offer.currentTag}`,
+        ],
+        spec: restored,
+    };
+}
+export async function runValidatorUpgradeScan(input) {
+    try {
+        await refreshRemoteClientTags({ dataDir: input.dataDir });
+    }
+    catch {
+        /* keep last cache / pins */
+    }
+    const offers = scanValidatorUpgrades(input.dataDir);
+    saveUpgradeScan(input.dataDir, offers);
+    for (const inst of listValidatorInstances(input.dataDir)) {
+        const offer = offers.find((o) => o.instanceId === inst.id);
+        if (!offer)
+            continue;
+        const kind = networkKindFor(inst);
+        if (!shouldAutoApply(inst.upgradePolicy, offer, kind))
+            continue;
+        try {
+            await applyValidatorUpgrade({
+                dataDir: input.dataDir,
+                host: input.host,
+                spec: inst,
+                execute: input.host.executeEnabled(),
+            });
+        }
+        catch {
+            /* next interval */
+        }
+    }
+    return offers;
+}
+export function networkKindFor(spec) {
+    return getValidatorNetwork(spec.chain, spec.network)?.kind === 'mainnet' ? 'mainnet' : 'testnet';
+}
+//# sourceMappingURL=upgrade.js.map