@opensecurity/zonzon-cli 0.1.3 → 0.1.4

package/dist/cli.js

@@ -84,6 +84,8 @@ async function handleInit(configPath) {
     }
     const defaultConf = {
         port: 53,
+        httpPort: 80,
+        httpsPort: 443,
         fallbackDns: "1.1.1.1",
         maxTcpConnections: 100,
         tcpIdleTimeoutMs: 30000,
@@ -99,6 +101,8 @@ async function handleInit(configPath) {
     };
     saveConfig(configPath, defaultConf);
     audit.system(`Initialized secure default configuration at ${configPath}`);
+    audit.system(`Security Notice: Default HTTP/HTTPS ports mapped to 80/443.`);
+    audit.system(`If executing within a non-root sandbox, mutate config.json to unprivileged ports (e.g. 8080/8443) to prevent EACCES binding faults.`);
     process.exit(0);
 }
 async function handleConfig(configPath, args) {
@@ -127,6 +131,45 @@ async function handleConfig(configPath, args) {
     }
     printUsage();
 }
+class ZonzonDaemon {
+    dnsHandler = null;
+    httpHandler = null;
+    sniProxy = null;
+    async start(config) {
+        try {
+            const dnsServer = new DevDnsServer(config);
+            this.dnsHandler = new DnsHandler(dnsServer, config);
+            await this.dnsHandler.start();
+            audit.system(`DNS Listener actively enforcing Zero-Trust boundaries on port ${config.port}`);
+            this.httpHandler = new HttpHandler(dnsServer, config, config.httpPort ?? 80);
+            await this.httpHandler.start();
+            audit.system(`HTTP L7 Sandbox Router active on port ${config.httpPort ?? 80}`);
+            this.sniProxy = new SniProxyService(config, config.httpsPort ?? 443);
+            await this.sniProxy.start();
+            audit.system(`SNI Proxy active on port ${config.httpsPort ?? 443}`);
+        }
+        catch (err) {
+            audit.error(`Fatal bind error during initialization: ${err.message}`);
+            await this.stop();
+            process.exit(1);
+        }
+    }
+    async stop() {
+        if (this.dnsHandler) {
+            await this.dnsHandler.stop();
+            this.dnsHandler = null;
+        }
+        if (this.httpHandler) {
+            await this.httpHandler.stop();
+            this.httpHandler = null;
+        }
+        if (this.sniProxy) {
+            await this.sniProxy.stop();
+            this.sniProxy = null;
+        }
+        audit.system("Subsystems halted. Sockets closed.");
+    }
+}
 async function startEngine(configPath, portOverride, cpPortOverride) {
     const rawConfig = loadConfig(configPath);
     if (portOverride) {
@@ -145,10 +188,8 @@ async function startEngine(configPath, portOverride, cpPortOverride) {
         audit.error(`Configuration Schema Violation: ${err.message}`);
         process.exit(1);
     }
-    const dnsServer = new DevDnsServer(config);
-    const dnsHandler = new DnsHandler(dnsServer, config);
-    const httpHandler = new HttpHandler(dnsServer, config, 80);
-    const sniProxy = new SniProxyService(config, 443);
+    const daemon = new ZonzonDaemon();
+    await daemon.start(config);
     const isCpEnabled = config.controlPlane?.enabled !== false;
     let controlPlane = null;
     let isEphemeralKey = false;
@@ -167,15 +208,24 @@ async function startEngine(configPath, portOverride, cpPortOverride) {
             blindIndexSalt: blindIndexSalt,
             initialConfig: config,
         });
-        controlPlane.subscribe((newConfig) => {
+        controlPlane.subscribe(async (newConfig) => {
             audit.system("Applying dynamic configuration update from Control Plane...");
+            await daemon.stop();
+            await daemon.start(newConfig);
         });
+        await controlPlane.start();
+        if (isEphemeralKey) {
+            audit.system(`[SECURITY] Generated Ephemeral API Key for this session: ${activeApiKey}`);
+            audit.system(`[SECURITY] Do not lose this key. It will not be shown again.`);
+        }
+        else {
+            audit.system(`[SECURITY] Control Plane using static API Key from configuration.`);
+        }
     }
+    audit.system("Initialization complete. Awaiting connections...");
     const shutdown = async () => {
         audit.system("Initiating graceful shutdown sequence...");
-        await dnsHandler.stop();
-        await httpHandler.stop();
-        await sniProxy.stop();
+        await daemon.stop();
         if (controlPlane) {
             await controlPlane.stop();
         }
@@ -183,29 +233,6 @@ async function startEngine(configPath, portOverride, cpPortOverride) {
     };
     process.on("SIGINT", shutdown);
     process.on("SIGTERM", shutdown);
-    try {
-        await dnsHandler.start();
-        audit.system(`DNS Listener actively enforcing Zero-Trust boundaries on port ${config.port}`);
-        await httpHandler.start();
-        audit.system(`HTTP L7 Sandbox Router active on port 80`);
-        await sniProxy.start();
-        audit.system(`SNI Proxy active on port 443`);
-        if (controlPlane) {
-            await controlPlane.start();
-            if (isEphemeralKey) {
-                audit.system(`[SECURITY] Generated Ephemeral API Key for this session: ${activeApiKey}`);
-                audit.system(`[SECURITY] Do not lose this key. It will not be shown again.`);
-            }
-            else {
-                audit.system(`[SECURITY] Control Plane using static API Key from configuration.`);
-            }
-        }
-        audit.system("Initialization complete. Awaiting connections...");
-    }
-    catch (err) {
-        audit.error(`Fatal bind error during initialization: ${err.message}`);
-        await shutdown();
-    }
 }
 async function main() {
     const { values, positionals } = parseArgs({

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@opensecurity/zonzon-cli",
-  "version": "0.1.3",
+  "version": "0.1.4",
   "description": "cli interface for zonzon",
   "type": "module",
   "author": "Lucian BLETAN <neuraluc@gmail.com>",
@@ -28,10 +28,10 @@
   "scripts": {
     "build": "tsc -b",
     "start": "node dist/cli.js",
-    "dev": "tsx watch src/cli.ts"
+    "dev:watch": "NODE_OPTIONS=--disable-warning=DEP0205 tsx watch src/cli.ts start --config ../../config/hosts.json"
   },
   "dependencies": {
-    "@opensecurity/zonzon-core": "^0.1.3",
-    "@opensecurity/zonzon-control-plane": "^0.1.3"
+    "@opensecurity/zonzon-core": "^0.1.4",
+    "@opensecurity/zonzon-control-plane": "^0.1.4"
   }
 }