igniter 0.5.0 → 0.5.1

data/{lib/igniter → packages/igniter-cluster/lib/igniter/cluster}/consensus/errors.rb

@@ -1,7 +1,8 @@
 # frozen_string_literal: true
 
 module Igniter
-  module Consensus
+  module Cluster
+    module Consensus
     # Base class for all consensus errors.
     class Error < Igniter::Error; end
 
@@ -10,5 +11,6 @@ module Igniter
 
     # Raised when the cluster loses quorum mid-operation.
     class QuorumLostError < Error; end
+    end
   end
 end

data/{lib/igniter → packages/igniter-cluster/lib/igniter/cluster}/consensus/executors.rb

@@ -1,7 +1,8 @@
 # frozen_string_literal: true
 
 module Igniter
-  module Consensus
+  module Cluster
+    module Consensus
     # Finds the current leader in a Cluster.
     # Raises +Igniter::ResolutionError+ if no leader is available —
     # the Resolver will enrich the error with graph/node context.
@@ -39,5 +40,6 @@ module Igniter
         command_kwargs
       end
     end
+    end
   end
 end

data/{lib/igniter → packages/igniter-cluster/lib/igniter/cluster}/consensus/node.rb

@@ -1,7 +1,8 @@
 # frozen_string_literal: true
 
 module Igniter
-  module Consensus
+  module Cluster
+    module Consensus
     # Value objects for sync-reply handlers.
     # Must be non-Hash so the Agent runner sends them as replies rather than
     # treating them as new state.
@@ -316,5 +317,6 @@ module Igniter
         NodeReadResult.new(data: state[:state_machine].dup)
       end
     end
+    end
   end
 end

data/{lib/igniter → packages/igniter-cluster/lib/igniter/cluster}/consensus/read_query.rb

@@ -1,7 +1,8 @@
 # frozen_string_literal: true
 
 module Igniter
-  module Consensus
+  module Cluster
+    module Consensus
     # Built-in single-shot read Contract. Dependency graph: find_leader → read_value.
     #
     # Prefer +Cluster#read_contract+ for convenience:
@@ -12,12 +13,12 @@ module Igniter
     #
     # Or instantiate directly:
     #
-    #   q = Igniter::Consensus::ReadQuery.new(cluster: my_cluster, key: :price)
+    #   q = Igniter::Cluster::Consensus::ReadQuery.new(cluster: my_cluster, key: :price)
     #   q.resolve_all
     #   q.result.value   # => 99
     class ReadQuery < Igniter::Contract
       define do
-        input :cluster   # Igniter::Consensus::Cluster
+        input :cluster   # Igniter::Cluster::Consensus::Cluster
         input :key       # key to read from the state machine
 
         compute :leader, with: :cluster,        call: FindLeader
@@ -26,5 +27,6 @@ module Igniter
         output :value
       end
     end
+    end
   end
 end

data/{lib/igniter → packages/igniter-cluster/lib/igniter/cluster}/consensus/state_machine.rb

@@ -1,14 +1,15 @@
 # frozen_string_literal: true
 
 module Igniter
-  module Consensus
+  module Cluster
+    module Consensus
     # Base class for user-defined consensus state machines.
     #
     # Subclass and declare command handlers with +apply+. Each handler receives
     # the current state (Hash) and a command Hash and must return the NEW state —
     # without mutating the original.
     #
-    #   class PriceStore < Igniter::Consensus::StateMachine
+    #   class PriceStore < Igniter::Cluster::Consensus::StateMachine
     #     apply :set    do |state, cmd| state.merge(cmd[:key] => cmd[:value]) end
     #     apply :delete do |state, cmd| state.reject { |k, _| k == cmd[:key] } end
     #   end
@@ -54,5 +55,6 @@ module Igniter
         end
       end
     end
+    end
   end
 end

data/packages/igniter-cluster/lib/igniter/cluster/consensus.rb

@@ -0,0 +1,18 @@
+# frozen_string_literal: true
+
+require "igniter/core"
+require "igniter/agent"
+require_relative "consensus/errors"
+require_relative "consensus/state_machine"
+require_relative "consensus/node"
+require_relative "consensus/cluster"
+require_relative "consensus/executors"
+require_relative "consensus/read_query"
+
+module Igniter
+  module Cluster
+    # Consensus protocol primitives built on Igniter::Agent and Igniter::Contract.
+    module Consensus
+    end
+  end
+end

data/packages/igniter-cluster/lib/igniter/cluster/diagnostics/governance_contributor.rb

@@ -0,0 +1,90 @@
+# frozen_string_literal: true
+
+module Igniter
+  module Cluster
+    module Diagnostics
+      module GovernanceContributor
+        class << self
+          def augment(report:, execution:) # rubocop:disable Lint/UnusedMethodArgument
+            return report unless defined?(Igniter::Cluster::Mesh)
+
+            config = Igniter::Cluster::Mesh.config
+            summary = config.governance_trail&.snapshot(limit: 10)
+            return report unless summary
+
+            checkpoint = config.governance_checkpoint(limit: 10)
+            assessment = Igniter::Cluster::Trust::Verifier.assess_governance_checkpoint(
+              checkpoint,
+              trust_store: config.trust_store
+            )
+
+            summary[:checkpoint] = {
+              peer_name: checkpoint.peer_name,
+              node_id: checkpoint.node_id,
+              fingerprint: checkpoint.fingerprint,
+              crest_digest: checkpoint.crest_digest,
+              checkpointed_at: checkpoint.checkpointed_at,
+              trust: assessment.to_h
+            }
+            report[:cluster_governance] = summary
+            report
+          end
+
+          def append_text(report:, lines:)
+            summary = report[:cluster_governance]
+            return unless summary
+
+            lines << "Cluster Governance: #{summary_line(summary)}"
+          end
+
+          def append_markdown_summary(report:, lines:)
+            summary = report[:cluster_governance]
+            return unless summary
+
+            lines << "- Cluster Governance: #{summary_line(summary)}"
+          end
+
+          def append_markdown_sections(report:, lines:)
+            summary = report[:cluster_governance]
+            return unless summary
+
+            lines << ""
+            lines << "## Cluster Governance"
+            lines << "- Events: total=#{summary[:total]}, latest=#{summary[:latest_type] || "none"}"
+            if summary[:persistence]
+              lines << "- Persistence: enabled=#{summary.dig(:persistence, :enabled)} path=#{summary.dig(:persistence, :path) || "none"} retain=#{summary.dig(:persistence, :max_events) || "all"} archived=#{summary.dig(:persistence, :archived_events) || 0}"
+            end
+            if summary[:checkpoint]
+              lines << "- Checkpoint: node_id=`#{summary.dig(:checkpoint, :node_id)}` trust=`#{summary.dig(:checkpoint, :trust, :status)}` digest=`#{summary.dig(:checkpoint, :crest_digest)}` at=`#{summary.dig(:checkpoint, :checkpointed_at)}`"
+            end
+            lines << "- Types: #{inline_counts(summary[:by_type])}" unless summary[:by_type].empty?
+            summary[:events].each do |event|
+              lines << "- `#{event[:type]}` source=`#{event[:source]}` at=`#{event[:timestamp]}` payload=#{event[:payload].inspect}"
+            end
+          end
+
+          private
+
+          def summary_line(summary)
+            parts = []
+            parts << "total=#{summary[:total]}"
+            parts << "latest=#{summary[:latest_type] || "none"}"
+            if summary[:persistence]
+              parts << "persisted=#{summary.dig(:persistence, :enabled)}"
+              parts << "retain=#{summary.dig(:persistence, :max_events) || "all"}"
+              parts << "archived=#{summary.dig(:persistence, :archived_events) || 0}"
+            end
+            if summary[:checkpoint]
+              parts << "checkpoint=#{summary.dig(:checkpoint, :trust, :status) || "unknown"}"
+            end
+            parts.join(" ")
+          end
+
+          def inline_counts(counts)
+            counts.sort_by { |key, _count| key.to_s }.map { |key, count| "#{key}=#{count}" }.join(", ")
+          end
+        end
+      end
+    end
+  end
+end

data/packages/igniter-cluster/lib/igniter/cluster/diagnostics/identity_contributor.rb

@@ -0,0 +1,98 @@
+# frozen_string_literal: true
+
+module Igniter
+  module Cluster
+    module Diagnostics
+      module IdentityContributor
+        class << self
+          def augment(report:, execution:) # rubocop:disable Lint/UnusedMethodArgument
+            return report unless defined?(Igniter::Cluster::Mesh)
+
+            config = Igniter::Cluster::Mesh.config
+            local_identity = config.identity || safe_generated_identity(config)
+            peers = summarize_peers(config.peer_registry.all)
+
+            report[:cluster_identity] = {
+              local: local_identity ? summarize_identity(local_identity) : nil,
+              trust_store: config.trust_store.to_h,
+              peers: peers,
+              counts: {
+                peers: peers.size,
+                trusted: peers.count { |peer| peer.dig(:trust, :status) == :trusted },
+                unknown: peers.count { |peer| peer.dig(:trust, :status) == :unknown },
+                attested: peers.count { |peer| !peer[:capabilities_attestation].nil? },
+                attested_trusted: peers.count { |peer| peer.dig(:capabilities_attestation, :trust, :status) == :trusted },
+                invalid: peers.count do |peer|
+                  %i[invalid_signature key_mismatch missing_identity missing_signature].include?(peer.dig(:trust, :status))
+                end
+              }
+            }
+
+            report
+          end
+
+          def append_text(report:, lines:)
+            summary = report[:cluster_identity]
+            return unless summary
+
+            counts = summary[:counts]
+            lines << "Cluster Identity: local=#{summary.dig(:local, :node_id) || 'none'} fingerprint=#{summary.dig(:local, :fingerprint) || 'none'} peers=#{counts[:peers]} trusted=#{counts[:trusted]} unknown=#{counts[:unknown]} attested=#{counts[:attested]} attested_trusted=#{counts[:attested_trusted]} invalid=#{counts[:invalid]}"
+          end
+
+          def append_markdown_summary(report:, lines:)
+            summary = report[:cluster_identity]
+            return unless summary
+
+            counts = summary[:counts]
+            lines << "- Cluster Identity: local=`#{summary.dig(:local, :node_id) || 'none'}` peers=#{counts[:peers]} trusted=#{counts[:trusted]} unknown=#{counts[:unknown]} attested=#{counts[:attested]} attested_trusted=#{counts[:attested_trusted]} invalid=#{counts[:invalid]}"
+          end
+
+          def append_markdown_sections(report:, lines:)
+            summary = report[:cluster_identity]
+            return unless summary
+
+            lines << ""
+            lines << "## Cluster Identity"
+            lines << "- Local: node_id=`#{summary.dig(:local, :node_id) || 'none'}` fingerprint=`#{summary.dig(:local, :fingerprint) || 'none'}`"
+            lines << "- Trust Store: known=#{summary.dig(:trust_store, :size)}"
+
+            summary[:peers].each do |peer|
+              lines << "- `#{peer[:name]}` node_id=`#{peer.dig(:identity, :node_id) || 'unknown'}` trust=`#{peer.dig(:trust, :status) || 'unknown'}` attestation=`#{peer.dig(:capabilities_attestation, :trust, :status) || 'none'}` fingerprint=`#{peer.dig(:identity, :fingerprint) || 'none'}`"
+            end
+          end
+
+          private
+
+          def summarize_identity(identity)
+            {
+              node_id: identity.node_id,
+              algorithm: identity.algorithm,
+              fingerprint: identity.fingerprint,
+              created_at: identity.created_at
+            }
+          end
+
+          def summarize_peers(peers)
+            peers.map do |peer|
+              {
+                name: peer.name,
+                url: peer.url,
+                identity: peer.metadata[:mesh_identity],
+                trust: peer.metadata[:mesh_trust],
+                capabilities_attestation: peer.metadata[:mesh_capabilities]
+              }
+            end.sort_by { |peer| peer[:name].to_s }
+          end
+
+          def safe_generated_identity(config)
+            return nil unless config.peer_name
+
+            config.ensure_identity!
+          rescue StandardError
+            nil
+          end
+        end
+      end
+    end
+  end
+end