@serfab/cadre-host 0.10.0 → 0.11.0

package/src/auth/__tests__/duration.test.ts

@@ -1,28 +1,28 @@
-import { describe, expect, it } from 'vitest';
-
-import { parseDuration } from '../duration.js';
-
-describe('parseDuration', () => {
-  it('parses common units', () => {
-    expect(parseDuration('500ms')).toBe(500);
-    expect(parseDuration('30s')).toBe(30_000);
-    expect(parseDuration('5m')).toBe(5 * 60 * 1000);
-    expect(parseDuration('24h')).toBe(24 * 60 * 60 * 1000);
-    expect(parseDuration('7d')).toBe(7 * 24 * 60 * 60 * 1000);
-    expect(parseDuration('2w')).toBe(2 * 7 * 24 * 60 * 60 * 1000);
-  });
-
-  it('treats bare numbers as milliseconds', () => {
-    expect(parseDuration('1234')).toBe(1234);
-  });
-
-  it('accepts whitespace and decimals', () => {
-    expect(parseDuration('  1.5h  ')).toBe(Math.round(1.5 * 60 * 60 * 1000));
-  });
-
-  it('throws on garbage input', () => {
-    expect(() => parseDuration('abc')).toThrow();
-    expect(() => parseDuration('1y')).toThrow();
-    expect(() => parseDuration('')).toThrow();
-  });
-});
+import { describe, expect, it } from 'vitest';
+
+import { parseDuration } from '../duration.js';
+
+describe('parseDuration', () => {
+  it('parses common units', () => {
+    expect(parseDuration('500ms')).toBe(500);
+    expect(parseDuration('30s')).toBe(30_000);
+    expect(parseDuration('5m')).toBe(5 * 60 * 1000);
+    expect(parseDuration('24h')).toBe(24 * 60 * 60 * 1000);
+    expect(parseDuration('7d')).toBe(7 * 24 * 60 * 60 * 1000);
+    expect(parseDuration('2w')).toBe(2 * 7 * 24 * 60 * 60 * 1000);
+  });
+
+  it('treats bare numbers as milliseconds', () => {
+    expect(parseDuration('1234')).toBe(1234);
+  });
+
+  it('accepts whitespace and decimals', () => {
+    expect(parseDuration('  1.5h  ')).toBe(Math.round(1.5 * 60 * 60 * 1000));
+  });
+
+  it('throws on garbage input', () => {
+    expect(() => parseDuration('abc')).toThrow();
+    expect(() => parseDuration('1y')).toThrow();
+    expect(() => parseDuration('')).toThrow();
+  });
+});

package/src/auth/__tests__/self-label.test.ts

@@ -1,85 +1,85 @@
-import { afterEach, beforeEach, describe, expect, it } from 'vitest';
-import { mkdtempSync, rmSync } from 'node:fs';
-import { tmpdir } from 'node:os';
-import { join } from 'node:path';
-
-import { SELF_LABEL, ensureSelfLabel } from '../self-label.js';
-import { TrustCircleStore } from '../trust-circle-store.js';
-
-let tmpRoot: string;
-let store: TrustCircleStore;
-
-const NOW = new Date('2025-06-01T12:00:00.000Z');
-const now = (): Date => NOW;
-
-beforeEach(() => {
-  tmpRoot = mkdtempSync(join(tmpdir(), 'cadre-host-self-label-'));
-  store = new TrustCircleStore(tmpRoot);
-});
-
-afterEach(() => {
-  try { rmSync(tmpRoot, { recursive: true, force: true }); } catch { /* ignore */ }
-});
-
-describe('ensureSelfLabel', () => {
-  it('writes a self-flagged label for the owner peer ID', async () => {
-    const peerId = await ensureSelfLabel({ store, getPeerId: async () => '12D3KooWOwner', now });
-
-    expect(peerId).toBe('12D3KooWOwner');
-    expect(store.getMember('12D3KooWOwner')).toEqual({
-      peerId: '12D3KooWOwner',
-      label: SELF_LABEL,
-      addedAt: NOW.toISOString(),
-      self: true,
-    });
-  });
-
-  it('keeps an admin-renamed label on a second run', async () => {
-    store.addMember({ peerId: '12D3KooWOwner', label: 'Basement PC', addedAt: 't0', self: true });
-
-    await ensureSelfLabel({ store, getPeerId: async () => '12D3KooWOwner', now });
-
-    expect(store.getMember('12D3KooWOwner')).toMatchObject({ label: 'Basement PC', addedAt: 't0', self: true });
-  });
-
-  it('stamps the self flag onto a pre-existing unflagged row', async () => {
-    store.addMember({ peerId: '12D3KooWOwner', label: 'Basement PC', addedAt: 't0' });
-
-    await ensureSelfLabel({ store, getPeerId: async () => '12D3KooWOwner', now });
-
-    expect(store.getMember('12D3KooWOwner')).toEqual({
-      peerId: '12D3KooWOwner',
-      label: 'Basement PC',
-      addedAt: 't0',
-      self: true,
-    });
-  });
-
-  it('drops a stale self label after the node identity changes', async () => {
-    store.addMember({ peerId: '12D3KooWOld', label: SELF_LABEL, addedAt: 't0', self: true });
-    store.addMember({ peerId: '12D3KooWPhone', label: "Mom's phone", addedAt: 't1' });
-
-    await ensureSelfLabel({ store, getPeerId: async () => '12D3KooWNew', now });
-
-    expect(store.getMember('12D3KooWOld')).toBeUndefined();
-    expect(store.getMember('12D3KooWNew')).toMatchObject({ label: SELF_LABEL, self: true });
-    // Non-self labels are untouched.
-    expect(store.getMember('12D3KooWPhone')).toMatchObject({ label: "Mom's phone" });
-  });
-
-  it('writes nothing when the node is not ready yet (empty peer ID)', async () => {
-    const peerId = await ensureSelfLabel({ store, getPeerId: async () => '', now });
-
-    expect(peerId).toBeUndefined();
-    expect(store.listMembers()).toEqual([]);
-  });
-
-  it('propagates a getPeerId failure to the caller', async () => {
-    await expect(ensureSelfLabel({
-      store,
-      getPeerId: async () => { throw new Error('owner node unavailable'); },
-      now,
-    })).rejects.toThrow('owner node unavailable');
-    expect(store.listMembers()).toEqual([]);
-  });
-});
+import { afterEach, beforeEach, describe, expect, it } from 'vitest';
+import { mkdtempSync, rmSync } from 'node:fs';
+import { tmpdir } from 'node:os';
+import { join } from 'node:path';
+
+import { SELF_LABEL, ensureSelfLabel } from '../self-label.js';
+import { TrustCircleStore } from '../trust-circle-store.js';
+
+let tmpRoot: string;
+let store: TrustCircleStore;
+
+const NOW = new Date('2025-06-01T12:00:00.000Z');
+const now = (): Date => NOW;
+
+beforeEach(() => {
+  tmpRoot = mkdtempSync(join(tmpdir(), 'cadre-host-self-label-'));
+  store = new TrustCircleStore(tmpRoot);
+});
+
+afterEach(() => {
+  try { rmSync(tmpRoot, { recursive: true, force: true }); } catch { /* ignore */ }
+});
+
+describe('ensureSelfLabel', () => {
+  it('writes a self-flagged label for the owner peer ID', async () => {
+    const peerId = await ensureSelfLabel({ store, getPeerId: async () => '12D3KooWOwner', now });
+
+    expect(peerId).toBe('12D3KooWOwner');
+    expect(store.getMember('12D3KooWOwner')).toEqual({
+      peerId: '12D3KooWOwner',
+      label: SELF_LABEL,
+      addedAt: NOW.toISOString(),
+      self: true,
+    });
+  });
+
+  it('keeps an admin-renamed label on a second run', async () => {
+    store.addMember({ peerId: '12D3KooWOwner', label: 'Basement PC', addedAt: 't0', self: true });
+
+    await ensureSelfLabel({ store, getPeerId: async () => '12D3KooWOwner', now });
+
+    expect(store.getMember('12D3KooWOwner')).toMatchObject({ label: 'Basement PC', addedAt: 't0', self: true });
+  });
+
+  it('stamps the self flag onto a pre-existing unflagged row', async () => {
+    store.addMember({ peerId: '12D3KooWOwner', label: 'Basement PC', addedAt: 't0' });
+
+    await ensureSelfLabel({ store, getPeerId: async () => '12D3KooWOwner', now });
+
+    expect(store.getMember('12D3KooWOwner')).toEqual({
+      peerId: '12D3KooWOwner',
+      label: 'Basement PC',
+      addedAt: 't0',
+      self: true,
+    });
+  });
+
+  it('drops a stale self label after the node identity changes', async () => {
+    store.addMember({ peerId: '12D3KooWOld', label: SELF_LABEL, addedAt: 't0', self: true });
+    store.addMember({ peerId: '12D3KooWPhone', label: "Mom's phone", addedAt: 't1' });
+
+    await ensureSelfLabel({ store, getPeerId: async () => '12D3KooWNew', now });
+
+    expect(store.getMember('12D3KooWOld')).toBeUndefined();
+    expect(store.getMember('12D3KooWNew')).toMatchObject({ label: SELF_LABEL, self: true });
+    // Non-self labels are untouched.
+    expect(store.getMember('12D3KooWPhone')).toMatchObject({ label: "Mom's phone" });
+  });
+
+  it('writes nothing when the node is not ready yet (empty peer ID)', async () => {
+    const peerId = await ensureSelfLabel({ store, getPeerId: async () => '', now });
+
+    expect(peerId).toBeUndefined();
+    expect(store.listMembers()).toEqual([]);
+  });
+
+  it('propagates a getPeerId failure to the caller', async () => {
+    await expect(ensureSelfLabel({
+      store,
+      getPeerId: async () => { throw new Error('owner node unavailable'); },
+      now,
+    })).rejects.toThrow('owner node unavailable');
+    expect(store.listMembers()).toEqual([]);
+  });
+});

package/src/auth/__tests__/trust-circle-store.test.ts

@@ -1,115 +1,115 @@
-import { afterEach, beforeEach, describe, expect, it } from 'vitest';
-import { existsSync, mkdtempSync, readFileSync, rmSync, writeFileSync } from 'node:fs';
-import { tmpdir } from 'node:os';
-import { join } from 'node:path';
-
-import { TrustCircleStore } from '../trust-circle-store.js';
-import { TrustCircleError } from '../types.js';
-
-let tmpRoot: string;
-
-beforeEach(() => {
-  tmpRoot = mkdtempSync(join(tmpdir(), 'cadre-host-tc-store-'));
-});
-
-afterEach(() => {
-  try { rmSync(tmpRoot, { recursive: true, force: true }); } catch { /* ignore */ }
-});
-
-describe('TrustCircleStore', () => {
-  it('returns empty state when file is missing', () => {
-    const store = new TrustCircleStore(tmpRoot);
-    expect(store.listMembers()).toEqual([]);
-    expect(store.listPending()).toEqual([]);
-  });
-
-  it('round-trips members through save/load', () => {
-    const store = new TrustCircleStore(tmpRoot);
-    store.addMember({
-      peerId: '12D3KooWAlice',
-      label: "Alice's phone",
-      addedAt: '2025-01-01T00:00:00.000Z',
-    });
-    store.addMember({
-      peerId: '12D3KooWBob',
-      label: 'Bob laptop',
-      addedAt: '2025-01-02T00:00:00.000Z',
-      self: true,
-    });
-
-    // Fresh instance reads from disk.
-    const reread = new TrustCircleStore(tmpRoot);
-    const members = reread.listMembers();
-    expect(members).toHaveLength(2);
-    expect(reread.getMember('12D3KooWAlice')).toMatchObject({ label: "Alice's phone" });
-    expect(reread.getMember('12D3KooWBob')?.self).toBe(true);
-  });
-
-  it('round-trips pending invites', () => {
-    const store = new TrustCircleStore(tmpRoot);
-    store.addPending({
-      token: 'token-A',
-      label: 'Mom',
-      createdAt: '2025-01-01T00:00:00.000Z',
-      expiresAt: '2025-01-02T00:00:00.000Z',
-    });
-    store.addPending({
-      token: 'token-B',
-      label: 'Dad',
-      createdAt: '2025-01-02T00:00:00.000Z',
-    });
-
-    const reread = new TrustCircleStore(tmpRoot);
-    expect(reread.listPending()).toHaveLength(2);
-    expect(reread.getPending('token-A')?.label).toBe('Mom');
-    expect(reread.getPending('token-B')?.expiresAt).toBeUndefined();
-  });
-
-  it('removes members and pending invites', () => {
-    const store = new TrustCircleStore(tmpRoot);
-    store.addMember({ peerId: 'p1', label: 'one', addedAt: 't' });
-    store.addPending({ token: 'tok', label: 'two', createdAt: 't' });
-
-    expect(store.removeMember('p1')).toBe(true);
-    expect(store.removeMember('p1')).toBe(false);
-    expect(store.removePending('tok')).toBe(true);
-    expect(store.removePending('tok')).toBe(false);
-
-    const reread = new TrustCircleStore(tmpRoot);
-    expect(reread.listMembers()).toEqual([]);
-    expect(reread.listPending()).toEqual([]);
-  });
-
-  it('writes through a temp file (atomic rename)', () => {
-    const store = new TrustCircleStore(tmpRoot);
-    store.addMember({ peerId: 'p1', label: 'one', addedAt: 't' });
-
-    // After save, no .tmp residue should remain.
-    expect(existsSync(join(tmpRoot, 'trust-circle.json'))).toBe(true);
-    expect(existsSync(join(tmpRoot, 'trust-circle.json.tmp'))).toBe(false);
-  });
-
-  it('throws on malformed file rather than silently wiping', () => {
-    writeFileSync(join(tmpRoot, 'trust-circle.json'), 'not json', 'utf8');
-    const store = new TrustCircleStore(tmpRoot);
-    expect(() => store.load()).toThrow(TrustCircleError);
-  });
-
-  it('throws on file with wrong shape', () => {
-    writeFileSync(
-      join(tmpRoot, 'trust-circle.json'),
-      JSON.stringify({ version: 99, foo: 'bar' }),
-      'utf8',
-    );
-    const store = new TrustCircleStore(tmpRoot);
-    expect(() => store.load()).toThrow(TrustCircleError);
-  });
-
-  it('persists version field in saved JSON', () => {
-    const store = new TrustCircleStore(tmpRoot);
-    store.addMember({ peerId: 'p1', label: 'one', addedAt: 't' });
-    const raw = JSON.parse(readFileSync(join(tmpRoot, 'trust-circle.json'), 'utf8'));
-    expect(raw.version).toBe(1);
-    expect(raw.members.p1.label).toBe('one');
-  });
-});
+import { afterEach, beforeEach, describe, expect, it } from 'vitest';
+import { existsSync, mkdtempSync, readFileSync, rmSync, writeFileSync } from 'node:fs';
+import { tmpdir } from 'node:os';
+import { join } from 'node:path';
+
+import { TrustCircleStore } from '../trust-circle-store.js';
+import { TrustCircleError } from '../types.js';
+
+let tmpRoot: string;
+
+beforeEach(() => {
+  tmpRoot = mkdtempSync(join(tmpdir(), 'cadre-host-tc-store-'));
+});
+
+afterEach(() => {
+  try { rmSync(tmpRoot, { recursive: true, force: true }); } catch { /* ignore */ }
+});
+
+describe('TrustCircleStore', () => {
+  it('returns empty state when file is missing', () => {
+    const store = new TrustCircleStore(tmpRoot);
+    expect(store.listMembers()).toEqual([]);
+    expect(store.listPending()).toEqual([]);
+  });
+
+  it('round-trips members through save/load', () => {
+    const store = new TrustCircleStore(tmpRoot);
+    store.addMember({
+      peerId: '12D3KooWAlice',
+      label: "Alice's phone",
+      addedAt: '2025-01-01T00:00:00.000Z',
+    });
+    store.addMember({
+      peerId: '12D3KooWBob',
+      label: 'Bob laptop',
+      addedAt: '2025-01-02T00:00:00.000Z',
+      self: true,
+    });
+
+    // Fresh instance reads from disk.
+    const reread = new TrustCircleStore(tmpRoot);
+    const members = reread.listMembers();
+    expect(members).toHaveLength(2);
+    expect(reread.getMember('12D3KooWAlice')).toMatchObject({ label: "Alice's phone" });
+    expect(reread.getMember('12D3KooWBob')?.self).toBe(true);
+  });
+
+  it('round-trips pending invites', () => {
+    const store = new TrustCircleStore(tmpRoot);
+    store.addPending({
+      token: 'token-A',
+      label: 'Mom',
+      createdAt: '2025-01-01T00:00:00.000Z',
+      expiresAt: '2025-01-02T00:00:00.000Z',
+    });
+    store.addPending({
+      token: 'token-B',
+      label: 'Dad',
+      createdAt: '2025-01-02T00:00:00.000Z',
+    });
+
+    const reread = new TrustCircleStore(tmpRoot);
+    expect(reread.listPending()).toHaveLength(2);
+    expect(reread.getPending('token-A')?.label).toBe('Mom');
+    expect(reread.getPending('token-B')?.expiresAt).toBeUndefined();
+  });
+
+  it('removes members and pending invites', () => {
+    const store = new TrustCircleStore(tmpRoot);
+    store.addMember({ peerId: 'p1', label: 'one', addedAt: 't' });
+    store.addPending({ token: 'tok', label: 'two', createdAt: 't' });
+
+    expect(store.removeMember('p1')).toBe(true);
+    expect(store.removeMember('p1')).toBe(false);
+    expect(store.removePending('tok')).toBe(true);
+    expect(store.removePending('tok')).toBe(false);
+
+    const reread = new TrustCircleStore(tmpRoot);
+    expect(reread.listMembers()).toEqual([]);
+    expect(reread.listPending()).toEqual([]);
+  });
+
+  it('writes through a temp file (atomic rename)', () => {
+    const store = new TrustCircleStore(tmpRoot);
+    store.addMember({ peerId: 'p1', label: 'one', addedAt: 't' });
+
+    // After save, no .tmp residue should remain.
+    expect(existsSync(join(tmpRoot, 'trust-circle.json'))).toBe(true);
+    expect(existsSync(join(tmpRoot, 'trust-circle.json.tmp'))).toBe(false);
+  });
+
+  it('throws on malformed file rather than silently wiping', () => {
+    writeFileSync(join(tmpRoot, 'trust-circle.json'), 'not json', 'utf8');
+    const store = new TrustCircleStore(tmpRoot);
+    expect(() => store.load()).toThrow(TrustCircleError);
+  });
+
+  it('throws on file with wrong shape', () => {
+    writeFileSync(
+      join(tmpRoot, 'trust-circle.json'),
+      JSON.stringify({ version: 99, foo: 'bar' }),
+      'utf8',
+    );
+    const store = new TrustCircleStore(tmpRoot);
+    expect(() => store.load()).toThrow(TrustCircleError);
+  });
+
+  it('persists version field in saved JSON', () => {
+    const store = new TrustCircleStore(tmpRoot);
+    store.addMember({ peerId: 'p1', label: 'one', addedAt: 't' });
+    const raw = JSON.parse(readFileSync(join(tmpRoot, 'trust-circle.json'), 'utf8'));
+    expect(raw.version).toBe(1);
+    expect(raw.members.p1.label).toBe('one');
+  });
+});