@glassmkr/crucible 0.7.1 → 0.8.0

package/.github/ISSUE_TEMPLATE/no_data.md

@@ -1,26 +0,0 @@
----
-name: No Data in Forge
-about: Crucible is running but Forge shows no data
----
-
-**Crucible version:**
-**OS and version:**
-**How long since install:**
-
-**Can you reach Forge?**
-```
-curl -s -o /dev/null -w "%{http_code}" https://forge.glassmkr.com/api/health
-```
-
-**Service status:**
-```
-systemctl status glassmkr-crucible
-```
-
-**Last 50 log lines:**
-```
-journalctl -u glassmkr-crucible -n 50 --no-pager
-```
-
-**Is smartctl installed?** `which smartctl`
-**Is ipmitool installed?** `which ipmitool`

package/.github/workflows/docker.yml

@@ -1,53 +0,0 @@
-name: Build and publish Docker image
-
-on:
-  push:
-    branches: [main]
-    tags: ['v*']
-
-permissions:
-  contents: read
-  packages: write
-
-jobs:
-  docker:
-    name: Build and push to ghcr.io and docker.io
-    runs-on: ubuntu-latest
-    steps:
-      - uses: actions/checkout@v4
-
-      - uses: docker/setup-buildx-action@v3
-
-      - uses: docker/login-action@v3
-        with:
-          registry: ghcr.io
-          username: ${{ github.actor }}
-          password: ${{ secrets.GITHUB_TOKEN }}
-
-      - uses: docker/login-action@v3
-        with:
-          registry: docker.io
-          username: ${{ secrets.DOCKERHUB_USERNAME }}
-          password: ${{ secrets.DOCKERHUB_TOKEN }}
-
-      - uses: docker/metadata-action@v5
-        id: meta
-        with:
-          images: |
-            ghcr.io/glassmkr/crucible
-            docker.io/glassmkr/crucible
-          tags: |
-            type=semver,pattern={{version}}
-            type=semver,pattern={{major}}.{{minor}}
-            type=raw,value=latest,enable={{is_default_branch}}
-            type=sha,prefix=sha-,format=short
-
-      - uses: docker/build-push-action@v6
-        with:
-          context: .
-          platforms: linux/amd64
-          push: true
-          tags: ${{ steps.meta.outputs.tags }}
-          labels: ${{ steps.meta.outputs.labels }}
-          cache-from: type=gha
-          cache-to: type=gha,mode=max

package/.github/workflows/publish.yml

@@ -1,25 +0,0 @@
-name: Publish to npm
-
-on:
-  push:
-    tags: ['v*']
-
-permissions:
-  contents: read
-  id-token: write
-
-jobs:
-  publish:
-    name: npm publish
-    runs-on: ubuntu-latest
-    steps:
-      - uses: actions/checkout@v4
-      - uses: actions/setup-node@v4
-        with:
-          # Node 24 ships with npm 11.x which has working npm Trusted Publishing.
-          node-version: 24
-          registry-url: 'https://registry.npmjs.org'
-      - run: npm --version
-      - run: npm install
-      - run: npm run build
-      - run: npm publish --access public --provenance

package/Dockerfile

@@ -1,59 +0,0 @@
-# syntax=docker/dockerfile:1.7
-# Multi-stage build for Glassmkr Crucible monitoring agent.
-
-# ---------- Stage 1: build TypeScript to dist/ ----------
-FROM node:24-slim AS builder
-WORKDIR /build
-COPY package.json package-lock.json* ./
-RUN npm install --include=dev --no-audit --no-fund
-COPY tsconfig.json ./
-COPY src ./src
-RUN npm run build
-
-# ---------- Stage 2: production runtime ----------
-FROM node:24-slim AS runtime
-
-# Hardware monitoring tools. Crucible shells out to these; they must be on PATH.
-RUN apt-get update && apt-get install -y --no-install-recommends \
-    smartmontools \
-    ipmitool \
-    dmidecode \
-    lm-sensors \
-    ethtool \
-    util-linux \
-    procps \
-    net-tools \
-    iproute2 \
-    ca-certificates \
-  && rm -rf /var/lib/apt/lists/*
-
-WORKDIR /app
-
-# Production node_modules only.
-COPY package.json package-lock.json* ./
-RUN npm ci --omit=dev --no-audit --no-fund && npm cache clean --force
-
-# Built code.
-COPY --from=builder /build/dist ./dist
-
-# Create a non-root user for future use. IPMI and SMART typically require root,
-# so the container is expected to run with --privileged or cap_add DAC_READ_SEARCH etc.
-# Keeping the user available lets operators drop privileges when hardware access is not needed.
-RUN useradd --system --no-create-home --shell /usr/sbin/nologin glassmkr
-
-# Crucible reads /etc/glassmkr/collector.yaml by default.
-# Mount the host config directory at this path.
-RUN mkdir -p /etc/glassmkr
-
-# Container health: verify the Node process is actually running and hasn't crashed.
-HEALTHCHECK --interval=60s --timeout=10s --start-period=30s --retries=3 \
-  CMD pgrep -f "node /app/dist/index.js" > /dev/null || exit 1
-
-LABEL org.opencontainers.image.source="https://github.com/glassmkr/crucible" \
-      org.opencontainers.image.description="Glassmkr Crucible - bare metal server monitoring agent" \
-      org.opencontainers.image.licenses="MIT" \
-      org.opencontainers.image.title="Crucible" \
-      org.opencontainers.image.vendor="Glassmkr"
-
-# Crucible does not listen on any port; data flows outbound to Forge.
-ENTRYPOINT ["node", "/app/dist/index.js"]

package/config/collector.example.yaml

@@ -1,43 +0,0 @@
-# Glassmkr Crucible Configuration
-# Copy to /etc/glassmkr/crucible.yaml
-
-# Server identity
-server_name: "my-server"
-
-# Collection settings
-collection:
-  interval_seconds: 300        # How often to collect (default 5 minutes)
-  ipmi: true                   # Collect IPMI data (requires ipmitool)
-  smart: true                  # Collect SMART data (requires smartmontools)
-
-# Forge integration (optional dashboard)
-forge:
-  enabled: false
-  url: "https://forge.glassmkr.com"
-  api_key: ""                  # Get this from forge.glassmkr.com after registering a server
-
-# Alert thresholds (all optional, sensible defaults used if omitted)
-thresholds:
-  ram_percent: 90              # Alert when RAM usage exceeds this
-  swap_alert: true             # Alert on any swap usage
-  disk_percent: 85             # Alert when any disk exceeds this
-  iowait_percent: 20           # Alert when CPU iowait exceeds this
-  nvme_wear_percent: 85        # Alert when NVMe lifetime wear exceeds this
-  disk_latency_nvme_ms: 50     # p99 latency threshold for NVMe
-  disk_latency_hdd_ms: 200     # p99 latency threshold for HDD
-  cpu_temp_warning_c: 80       # CPU temperature warning
-  cpu_temp_critical_c: 90      # CPU temperature critical
-  interface_utilization_percent: 90  # Network saturation threshold
-
-# Notification channels (all optional)
-channels:
-  telegram:
-    enabled: false
-    bot_token: ""
-    chat_id: ""
-  email:
-    enabled: false
-    to: ""
-  slack:
-    enabled: false
-    webhook_url: ""

package/docker-compose.yml

@@ -1,26 +0,0 @@
-# Glassmkr Crucible - docker compose deployment
-#
-# Before starting, create /etc/glassmkr/collector.yaml on the host with your
-# Forge collector key. See https://forge.glassmkr.com/docs/getting-started.
-#
-# Why privileged + host network:
-# - privileged: true gives access to /dev/ipmi0 (IPMI sensors) and raw disk devices (SMART)
-# - network_mode: host lets the agent read the real host network interfaces and bond state
-# - /proc and /sys are mounted so the agent monitors the host, not the container
-
-services:
-  crucible:
-    image: ghcr.io/glassmkr/crucible:latest
-    container_name: glassmkr-crucible
-    restart: unless-stopped
-    privileged: true
-    network_mode: host
-    volumes:
-      - /etc/glassmkr:/etc/glassmkr:ro
-      - /proc:/host/proc:ro
-      - /sys:/host/sys:ro
-      - /dev:/dev:ro
-      - /run/dbus:/run/dbus:ro
-    environment:
-      - HOST_PROC=/host/proc
-      - HOST_SYS=/host/sys

package/scripts/sign-release.sh

@@ -1,29 +0,0 @@
-#!/bin/bash
-# Sign a Crucible release
-# Usage: ./scripts/sign-release.sh <version>
-
-VERSION=$1
-DIST_DIR="dist"
-
-if [ -z "$VERSION" ]; then
-  echo "Usage: ./scripts/sign-release.sh <version>"
-  echo "Example: ./scripts/sign-release.sh v0.2.0"
-  exit 1
-fi
-
-echo "Signing Crucible $VERSION"
-
-# Generate checksums
-cd "$DIST_DIR" || exit 1
-sha256sum *.tar.gz *.deb 2>/dev/null > SHA256SUMS || sha256sum *.js > SHA256SUMS
-
-# Sign the checksums file
-gpg --armor --detach-sign --local-user security@glassmkr.com SHA256SUMS
-
-echo ""
-echo "Release artifacts:"
-ls -la SHA256SUMS SHA256SUMS.asc
-echo ""
-echo "Verify with:"
-echo "  gpg --verify SHA256SUMS.asc SHA256SUMS"
-echo "  sha256sum -c SHA256SUMS"

package/src/__tests__/cli.test.ts

@@ -1,74 +0,0 @@
-import { describe, it, expect } from "vitest";
-import { parseCliArgs, helpText, DEFAULT_CONFIG_PATH } from "../cli.js";
-
-describe("parseCliArgs", () => {
-  it("--version returns version string and mode=version", () => {
-    const { result, output } = parseCliArgs(["--version"], "1.2.3");
-    expect(result.mode).toBe("version");
-    expect(output).toBe("glassmkr-crucible v1.2.3");
-  });
-
-  it("-v aliases --version", () => {
-    const { result, output } = parseCliArgs(["-v"], "1.2.3");
-    expect(result.mode).toBe("version");
-    expect(output).toBe("glassmkr-crucible v1.2.3");
-  });
-
-  it("--help returns help text and mode=help", () => {
-    const { result, output } = parseCliArgs(["--help"], "1.2.3");
-    expect(result.mode).toBe("help");
-    expect(output).toContain("glassmkr-crucible v1.2.3");
-    expect(output).toContain("Usage:");
-    expect(output).toContain("--version");
-    expect(output).toContain("--help");
-    expect(output).toContain("--config");
-  });
-
-  it("-h aliases --help", () => {
-    const { result } = parseCliArgs(["-h"], "1.2.3");
-    expect(result.mode).toBe("help");
-  });
-
-  it("no args returns mode=run with the default config path", () => {
-    const { result, output } = parseCliArgs([], "1.2.3");
-    expect(result.mode).toBe("run");
-    expect(result.configPath).toBe(DEFAULT_CONFIG_PATH);
-    expect(output).toBeNull();
-  });
-
-  it("-c accepts a path in the next argument", () => {
-    const { result } = parseCliArgs(["-c", "/tmp/a.yaml"], "1.2.3");
-    expect(result.configPath).toBe("/tmp/a.yaml");
-  });
-
-  it("--config accepts a path in the next argument", () => {
-    const { result } = parseCliArgs(["--config", "/tmp/b.yaml"], "1.2.3");
-    expect(result.configPath).toBe("/tmp/b.yaml");
-  });
-
-  it("--config=PATH form works", () => {
-    const { result } = parseCliArgs(["--config=/tmp/c.yaml"], "1.2.3");
-    expect(result.configPath).toBe("/tmp/c.yaml");
-  });
-
-  it("legacy positional argument still sets config path", () => {
-    const { result } = parseCliArgs(["/tmp/legacy.yaml"], "1.2.3");
-    expect(result.configPath).toBe("/tmp/legacy.yaml");
-  });
-
-  it("--version wins over a provided config path (no collector start)", () => {
-    const { result } = parseCliArgs(["--config", "/tmp/x.yaml", "--version"], "1.2.3");
-    expect(result.mode).toBe("version");
-  });
-});
-
-describe("helpText", () => {
-  it("mentions the binary name, default config path, and both flags", () => {
-    const txt = helpText("0.6.1");
-    expect(txt).toContain("glassmkr-crucible v0.6.1");
-    expect(txt).toContain(DEFAULT_CONFIG_PATH);
-    expect(txt).toContain("-v, --version");
-    expect(txt).toContain("-h, --help");
-    expect(txt).toContain("-c, --config");
-  });
-});

package/src/__tests__/reboot-marker.test.ts

@@ -1,122 +0,0 @@
-import { describe, it, expect, beforeEach, afterEach } from "vitest";
-import { mkdtempSync, existsSync, writeFileSync, statSync, rmSync, chmodSync } from "node:fs";
-import { tmpdir } from "node:os";
-import { join } from "node:path";
-import {
-  consumeRebootMarker,
-  writeRebootMarker,
-  parseDuration,
-} from "../lib/reboot-marker.js";
-import { parseCliArgs } from "../cli.js";
-
-let tmpDir: string;
-let path: string;
-
-beforeEach(() => {
-  tmpDir = mkdtempSync(join(tmpdir(), "crucible-test-"));
-  path = join(tmpDir, "reboot-expected");
-});
-afterEach(() => {
-  try { rmSync(tmpDir, { recursive: true, force: true }); } catch {}
-});
-
-describe("consumeRebootMarker", () => {
-  it("7. marker present, not expired: returns flag, deletes file", () => {
-    const future = new Date(Date.now() + 5 * 60_000).toISOString();
-    writeFileSync(path, JSON.stringify({ expires_at: future, reason: "kernel update" }));
-    const out = consumeRebootMarker(path);
-    expect(out).toEqual({ expected: true, reason: "kernel update" });
-    expect(existsSync(path)).toBe(false);
-  });
-
-  it("8. marker present, expired: returns null, deletes file", () => {
-    const past = new Date(Date.now() - 60_000).toISOString();
-    writeFileSync(path, JSON.stringify({ expires_at: past, reason: "stale" }));
-    expect(consumeRebootMarker(path)).toBeNull();
-    expect(existsSync(path)).toBe(false);
-  });
-
-  it("9. marker absent: returns null, no throw", () => {
-    expect(consumeRebootMarker(path)).toBeNull();
-  });
-
-  it("15. malformed JSON: returns null, file deleted, no crash", () => {
-    writeFileSync(path, "{not json at all");
-    expect(consumeRebootMarker(path)).toBeNull();
-    expect(existsSync(path)).toBe(false);
-  });
-
-  it("invalid expires_at (missing): returns null, file deleted", () => {
-    writeFileSync(path, JSON.stringify({ reason: "oops" }));
-    expect(consumeRebootMarker(path)).toBeNull();
-    expect(existsSync(path)).toBe(false);
-  });
-
-  it("consumed marker cannot be re-read (single-use)", () => {
-    const future = new Date(Date.now() + 60_000).toISOString();
-    writeFileSync(path, JSON.stringify({ expires_at: future }));
-    expect(consumeRebootMarker(path)).not.toBeNull();
-    expect(consumeRebootMarker(path)).toBeNull();
-  });
-});
-
-describe("writeRebootMarker", () => {
-  it("13. writes file at given path with correct TTL and reason, 0600 mode", () => {
-    const now = new Date("2026-04-21T22:00:00Z");
-    const res = writeRebootMarker({ path, reason: "kernel update", ttlMs: 10 * 60_000, now });
-    expect(res.path).toBe(path);
-    expect(res.expires_at).toBe("2026-04-21T22:10:00.000Z");
-    expect(existsSync(path)).toBe(true);
-    const mode = statSync(path).mode & 0o777;
-    expect(mode).toBe(0o600);
-    const round = consumeRebootMarker(path, new Date("2026-04-21T22:05:00Z"));
-    expect(round).toEqual({ expected: true, reason: "kernel update" });
-  });
-
-  it("default TTL is 10 minutes", () => {
-    const now = new Date("2026-04-21T22:00:00Z");
-    const res = writeRebootMarker({ path, now });
-    expect(res.expires_at).toBe("2026-04-21T22:10:00.000Z");
-  });
-});
-
-describe("parseDuration", () => {
-  it.each([
-    ["10m", 600_000],
-    ["2h", 7_200_000],
-    ["600s", 600_000],
-    ["500ms", 500],
-    ["30", 30_000], // bare number -> seconds
-  ])("%s -> %d ms", (input, ms) => {
-    expect(parseDuration(input)).toBe(ms);
-  });
-  it("rejects garbage", () => {
-    expect(parseDuration("forever")).toBeNull();
-    expect(parseDuration("-5m")).toBeNull();
-    expect(parseDuration("")).toBeNull();
-  });
-});
-
-describe("CLI parseCliArgs subcommands", () => {
-  it("14. `reboot` subcommand captured with flags", () => {
-    const { result } = parseCliArgs(["reboot", "--reason", "kernel update"], "1.0.0");
-    expect(result.mode).toBe("reboot");
-    expect(result.reason).toBe("kernel update");
-  });
-  it("`mark-reboot` with --ttl parsed through", () => {
-    const { result } = parseCliArgs(["mark-reboot", "--ttl=5m", "--reason=test"], "1.0.0");
-    expect(result.mode).toBe("mark-reboot");
-    expect(result.ttl).toBe("5m");
-    expect(result.reason).toBe("test");
-  });
-  it("`mark-reboot --help` returns help output without running", () => {
-    const { result, output } = parseCliArgs(["mark-reboot", "--help"], "1.0.0");
-    expect(result.mode).toBe("help");
-    expect(output).toContain("mark-reboot");
-  });
-  it("top-level help lists the new subcommands", () => {
-    const { output } = parseCliArgs(["--help"], "1.0.0");
-    expect(output).toMatch(/mark-reboot/);
-    expect(output).toMatch(/reboot/);
-  });
-});

package/src/alerts/evaluator.ts

@@ -1,15 +0,0 @@
-import { allRules } from "./rules.js";
-import type { Snapshot, AlertResult } from "../lib/types.js";
-import type { Config } from "../config.js";
-
-export function evaluateAlerts(snapshot: Snapshot, thresholds: Config["thresholds"]): AlertResult[] {
-  const results: AlertResult[] = [];
-  for (const rule of allRules) {
-    try {
-      results.push(...rule.evaluate(snapshot, thresholds));
-    } catch (err) {
-      console.error(`[alerts] Rule ${rule.type} error:`, err);
-    }
-  }
-  return results;
-}