@bhooai/nexus-core 0.1.5 → 2.0.0

package/src/config/env.ts

@@ -84,6 +84,7 @@ const PAIR_FIELDS: Record<string, string> = {
   'cpu_high': 'cpuHigh',
   'rps_per_node_high': 'rpsPerNodeHigh',
   'rps_per_node_low': 'rpsPerNodeLow',
+  'server_url': 'serverUrl',
 };
 
 export function configFromEnv(env: NodeJS.ProcessEnv = process.env): DeepPartial<NexusConfig> {

package/src/config/schema.ts

@@ -47,7 +47,7 @@ export const nexusConfigSchema = z.object({
   }),
   auth: z.object({
     jwt: z.object({
-      secret: z.string().min(8, 'jwt.secret must be at least 8 characters'),
+      secret: z.string().min(8, 'jwt.secret must be at least 8 characters').optional(),
       accessTtl: z.number().int().positive(),
       refreshTtl: z.number().int().positive(),
       issuer: z.string(),
@@ -153,32 +153,6 @@ export const nexusConfigSchema = z.object({
     host: z.string().min(1),
     enabled: z.boolean(),
   }),
-  cluster: z.object({
-    enabled: z.boolean(),
-    role: z.enum(['backend', 'files', 'database', 'ai']).optional(),
-    failOpenSingleNode: z.boolean(),
-    lbHost: z.string().min(1),
-    lbPort: z.number().int().min(1).max(65535),
-    nodeAgentHost: z.string().min(1),
-    nodeAgentPort: z.number().int().min(1).max(65535),
-    registryFile: z.string().min(1),
-    token: z.string(),
-    pathPins: z.array(z.object({
-      prefix: z.string().min(1),
-      nodeId: z.string().min(1),
-      role: z.enum(['backend', 'files', 'database', 'ai']).optional(),
-    })).optional(),
-    autoscale: z.object({
-      enabled: z.boolean(),
-      mode: z.enum(['auto', 'manual']),
-      minNodes: z.number().int().min(1),
-      maxNodes: z.number().int().min(1),
-      cooldownMs: z.number().int().nonnegative(),
-      cpuHigh: z.number().min(0).max(100),
-      rpsPerNodeHigh: z.number().nonnegative(),
-      rpsPerNodeLow: z.number().nonnegative(),
-    }),
-  }),
 });
 
 export type ValidatedNexusConfig = z.infer<typeof nexusConfigSchema>;

package/src/config/types.ts

@@ -52,7 +52,9 @@ export interface RedisConfig {
 }
 
 export interface JwtConfig {
-  secret: string;
+  /** Secret used to sign access + refresh tokens.
+   *  Loaded from env NEXUS_AUTH_JWT_SECRET; never store in nexus.config.ts. */
+  secret?: string;
   /** Access token TTL in seconds. */
   accessTtl: number;
   /** Refresh token TTL in seconds. */
@@ -238,90 +240,6 @@ export interface AdminConfig {
   enabled: boolean;
 }
 
-/** Node type — the service profile a node advertises and exposes. */
-export type NodeRole = 'backend' | 'files' | 'database' | 'ai';
-
-/** A registered remote node in the central registry. */
-export interface NodeInfo {
-  /** Stable node id (hostname-derived slug or caller-provided). */
-  id: string;
-  /** Base URL that reaches the node's agent, e.g. "https://node.example.com:7575". */
-  baseUrl: string;
-  /** The node's role profile. */
-  role: NodeRole;
-  /** Node reported version string. */
-  version?: string;
-  /** First successful registration time (ISO). */
-  registeredAt: string;
-  /** Last successful health/link time (ISO). */
-  lastSeenAt: string;
-  /** Last known metric sample. */
-  lastMetrics?: NodeMetrics;
-  /** Linked (discovered yet unverified) vs ready nodes. */
-  status: 'pending' | 'ready' | 'unreachable';
-}
-
-/** Rolling snapshot of a node's load, sampled by the central autoscaler. */
-export interface NodeMetrics {
-  /** Requests per second the node reports receiving (if role exposes it). */
-  rps: number;
-  /** CPU usage of the node process (0-100). */
-  cpu: number;
-  /** Memory usage of the node process in MiB. */
-  memoryMb: number;
-  /** Unix ms timestamp the sample was taken. */
-  sampledAt: number;
-}
-
-export interface ClusterAutoscaleConfig {
-  /** Enable the autoscaler entirely. */
-  enabled: boolean;
-  /** Scale decision mode: "auto" (deterministic + AI) or "manual". */
-  mode: 'auto' | 'manual';
-  /** Minimum number of backend nodes the LB keeps ready. */
-  minNodes: number;
-  /** Maximum number of backend nodes the LB may scale to. */
-  maxNodes: number;
-  /** Minimum wait (ms) between two autoscale decisions. */
-  cooldownMs: number;
-  /** CPU% at/above which the cluster considers a node overloaded. */
-  cpuHigh: number;
-  /** RPS per backend node at/above which the cluster scales up. */
-  rpsPerNodeHigh: number;
-  /** RPS per backend node below which the cluster scales down. */
-  rpsPerNodeLow: number;
-}
-
-export interface ClusterConfig {
-  /** Turn the cluster (registry + LB + autoscaler) on. */
-  enabled: boolean;
-  /** When set, this server is a cluster node (slave) of this role — `nexus dev`
-   *  auto-starts a node agent alongside the backend so a master can link it.
-   *  Undefined/empty on the root/central server. */
-  role?: NodeRole;
-  /** When false, the LB fails open to a single direct node (no scaling). */
-  failOpenSingleNode: boolean;
-  /** Bind address of the central cluster's public load balancer. */
-  lbHost: string;
-  /** Port of the central cluster's public load balancer. */
-  lbPort: number;
-  /** Bind address of the node agent's control API (per node side). */
-  nodeAgentHost: string;
-  /** Port of the node agent's control API (per node side). */
-  nodeAgentPort: number;
-  /** File path (relative to this config's root) for the persisted registry. */
-  registryFile: string;
-  /** Shared pairing secret minted at node setup; pasted into the central. */
-  token: string;
-  /** Path-prefix -> node-id pins: requests whose URL starts with `prefix` are
-   *  always routed to `nodeId` (fail-closed 503 when that node is down, instead
-   *  of round-robining). Used to allocate upload paths to specific file nodes,
-   *  e.g. `/upload/users` -> slave-1. Optional `role` guards that the pinned
-   *  node must be of that role (defensive). */
-  pathPins?: Array<{ prefix: string; nodeId: string; role?: NodeRole }>;
-  autoscale: ClusterAutoscaleConfig;
-}
-
 export interface NexusConfig {
   env: Env;
   server: ServerConfig;
@@ -341,7 +259,6 @@ export interface NexusConfig {
   plugins: PluginsConfig;
   frontend: FrontendConfig;
   admin: AdminConfig;
-  cluster: ClusterConfig;
 }
 
 /** Deep partial used for user config files and runtime overrides. */

package/src/index.ts

@@ -1,4 +1,5 @@
 export * from './config/index.js';
 export * from './di/index.js';
 export * from './errors.js';
-export * from './http/index.js';
+export * from './http/index.js';
+export * from './app/index.js';

package/tests/config.test.ts

@@ -19,13 +19,19 @@ describe('configFromEnv', () => {
     expect(cfg.server?.port).toBe(5000);
     expect(cfg.server?.https).toBe(true);
   });
+
+  it("maps NEXUS_AI_SERVER_URL to { ai: { serverUrl } } (not ai.server.url)", () => {
+    const cfg = configFromEnv({ NEXUS_AI_SERVER_URL: 'http://ai:8000' });
+    expect((cfg as any).ai?.serverUrl).toBe('http://ai:8000');
+    expect((cfg as any).ai?.server?.url).toBeUndefined();
+  });
 });
 
 describe('mergeConfig', () => {
   it('applies user overrides over defaults and validates', () => {
     const cfg = mergeConfig({ server: { port: 5000 }, auth: { jwt: { secret: 'supersecret' } } });
     expect(cfg.server.port).toBe(5000);
-    expect(cfg.server.host).toBe('0.0.0.0'); // default retained
+    expect(cfg.server.host).toBe('127.0.0.1'); // default retained
     expect(cfg.auth.jwt.secret).toBe('supersecret');
   });