Function _loadStateFromDisk

src/gep/validator/stakeBootstrap.js:105–138

()

let _stateLoaded = false;

function _loadStateFromDisk() {
  if (_stateLoaded) return;
  _stateLoaded = true;
  try {
    const file = _stateFile();
    if (!fs.existsSync(file)) return;
    const raw = fs.readFileSync(file, 'utf8');
    if (!raw) return;
    const parsed = JSON.parse(raw);
    if (!parsed || typeof parsed !== 'object') return;
    const nextAttemptAt = Number(parsed.nextAttemptAt) || 0;
    const transientFailures = Number(parsed.transientFailures) || 0;
    const fundsFailures = Number(parsed.fundsFailures) || 0;
    const lastSuccessAt = Number(parsed.lastSuccessAt) || 0;
    // Defensive clamp: a clock change or corrupted file could push
    // nextAttemptAt arbitrarily far into the future. Cap it at now +
    // the longest backoff step to avoid permanently silencing stake
    // attempts on this host.
    const maxHorizonMs = 24 * 60 * 60 * 1000;
    const nowMs = Date.now();
    const boundedNext = nextAttemptAt > nowMs + maxHorizonMs
      ? nowMs + maxHorizonMs
      : nextAttemptAt;
    _state.nextAttemptAt = boundedNext;
    _state.transientFailures = transientFailures;
    _state.fundsFailures = fundsFailures;
    _state.lastSuccessAt = lastSuccessAt;
    // disabledUntilRestart is intentionally NOT persisted: we want the
    // next process start to re-try once, so operator-driven fixes (hub
    // upgrade, client downgrade/reconfig) clear the flag naturally.
  } catch (_) {
    // best-effort: fall back to default _state
  }
}

function _persistState() {
  // NOTE(windows): mode 0o700 / 0o600 are silently ignored on Windows.