@serfab/cadre-host 0.10.0 → 0.11.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/server/static.js +38 -38
- package/dist/ui/assets/index-C-iks41M.js.map +1 -1
- package/dist/ui/index.html +12 -12
- package/package.json +4 -4
- package/service/cadre-host.service.tmpl +16 -16
- package/service/com.serfab.cadre-host.plist.tmpl +35 -35
- package/service/install-service.ps1 +98 -98
- package/service/uninstall-service.ps1 +19 -19
- package/src/__tests__/build-targets.test.ts +26 -26
- package/src/__tests__/cli-invite.smoke.test.ts +192 -192
- package/src/__tests__/cli-nat.smoke.test.ts +212 -212
- package/src/__tests__/cli.smoke.test.ts +46 -46
- package/src/__tests__/global-setup.ts +51 -51
- package/src/__tests__/host-owner.smoke.test.ts +123 -123
- package/src/__tests__/orchestrator-env-scrub.test.ts +140 -140
- package/src/__tests__/orchestrator-node-identity.test.ts +204 -204
- package/src/__tests__/orchestrator-owner.test.ts +198 -198
- package/src/__tests__/orchestrator-pin-keys.test.ts +153 -153
- package/src/__tests__/orchestrator-push.test.ts +145 -145
- package/src/__tests__/orchestrator.test.ts +951 -951
- package/src/auth/__tests__/duration.test.ts +28 -28
- package/src/auth/__tests__/self-label.test.ts +85 -85
- package/src/auth/__tests__/trust-circle-store.test.ts +115 -115
- package/src/auth/__tests__/trust-circle.test.ts +445 -445
- package/src/auth/duration.ts +33 -33
- package/src/auth/index.ts +21 -21
- package/src/auth/self-label.ts +74 -74
- package/src/auth/trust-circle-store.ts +155 -155
- package/src/auth/types.ts +99 -99
- package/src/donation/__tests__/donation-service.test.ts +1068 -1068
- package/src/donation/__tests__/donation-supervisor.test.ts +510 -510
- package/src/donation/__tests__/fake-orchestrator.test.ts +168 -168
- package/src/donation/__tests__/fake-orchestrator.ts +225 -225
- package/src/donation/__tests__/grant-service.test.ts +213 -213
- package/src/donation/__tests__/grant-store.test.ts +113 -113
- package/src/donation/donation-service.ts +962 -962
- package/src/donation/donation-store.ts +171 -171
- package/src/donation/donation-supervisor.ts +388 -388
- package/src/donation/grant-service.ts +200 -200
- package/src/donation/grant-store.ts +152 -152
- package/src/donation/index.ts +64 -64
- package/src/donation/types.ts +243 -243
- package/src/installer/__tests__/identity.test.ts +34 -34
- package/src/installer/__tests__/paths.test.ts +47 -47
- package/src/installer/__tests__/service-host.test.ts +62 -62
- package/src/installer/__tests__/wizard.test.ts +64 -64
- package/src/installer/identity.ts +49 -49
- package/src/installer/paths.ts +109 -109
- package/src/installer/platform.ts +27 -27
- package/src/installer/service-host/index.ts +21 -21
- package/src/installer/service-host/template.ts +21 -21
- package/src/installer/wizard.ts +103 -103
- package/src/nat/__tests__/address-resolver.test.ts +82 -82
- package/src/nat/__tests__/ddns-duckdns.test.ts +83 -83
- package/src/nat/__tests__/ddns-updater.test.ts +253 -253
- package/src/nat/__tests__/external-ip.test.ts +124 -124
- package/src/nat/__tests__/nat-service.test.ts +497 -497
- package/src/nat/__tests__/nat-store.test.ts +93 -93
- package/src/nat/__tests__/port-mapper.test.ts +191 -191
- package/src/nat/__tests__/reachability.test.ts +24 -24
- package/src/nat/__tests__/secrets.test.ts +178 -178
- package/src/nat/address-resolver.ts +51 -51
- package/src/nat/ddns/duckdns.ts +76 -76
- package/src/nat/ddns/index.ts +55 -55
- package/src/nat/ddns/updater.ts +243 -243
- package/src/nat/external-ip.ts +154 -154
- package/src/nat/index.ts +71 -71
- package/src/nat/nat-service.ts +501 -501
- package/src/nat/nat-store.ts +154 -154
- package/src/nat/port-mapper.ts +329 -329
- package/src/nat/reachability.ts +34 -34
- package/src/nat/secrets/file-store.ts +130 -130
- package/src/nat/secrets/index.ts +112 -112
- package/src/nat/secrets/keytar-store.ts +67 -67
- package/src/nat/types.ts +159 -159
- package/src/orchestrator/__tests__/node-identity.test.ts +62 -62
- package/src/orchestrator/host-process-orchestrator.ts +1133 -1133
- package/src/orchestrator/index.ts +10 -10
- package/src/orchestrator/log-rotator.ts +53 -53
- package/src/orchestrator/node-identity.ts +40 -40
- package/src/orchestrator/pid-liveness.ts +24 -24
- package/src/orchestrator/port-allocator.ts +91 -91
- package/src/orchestrator/state-store.ts +90 -90
- package/src/orchestrator/types.ts +141 -141
- package/src/owner/__tests__/owner-node-client.test.ts +194 -194
- package/src/owner/index.ts +12 -12
- package/src/owner/owner-node-client.ts +259 -259
- package/src/push/__tests__/push.test.ts +90 -90
- package/src/push/index.ts +146 -146
- package/src/server/__tests__/bus.test.ts +38 -38
- package/src/server/__tests__/error-handler.test.ts +118 -118
- package/src/server/__tests__/grants-admin-route.test.ts +73 -73
- package/src/server/__tests__/grants-route.test.ts +263 -263
- package/src/server/__tests__/nodes-route.test.ts +259 -259
- package/src/server/__tests__/origin-guard.test.ts +72 -72
- package/src/server/__tests__/publishers.test.ts +216 -216
- package/src/server/__tests__/server.smoke.test.ts +253 -253
- package/src/server/__tests__/settings-route.test.ts +194 -194
- package/src/server/__tests__/sse-route.test.ts +119 -119
- package/src/server/__tests__/static.test.ts +145 -145
- package/src/server/__tests__/status-route.test.ts +134 -134
- package/src/server/__tests__/strands-route.test.ts +233 -233
- package/src/server/error-handler.ts +178 -178
- package/src/server/events/bus.ts +42 -42
- package/src/server/events/sse-route.ts +81 -81
- package/src/server/events/types.ts +23 -23
- package/src/server/index.ts +267 -267
- package/src/server/origin-guard.ts +84 -84
- package/src/server/routes/grants-admin.ts +41 -41
- package/src/server/routes/grants.ts +210 -210
- package/src/server/routes/nat.ts +63 -63
- package/src/server/routes/nodes.ts +170 -170
- package/src/server/routes/settings.ts +123 -123
- package/src/server/routes/status.ts +118 -118
- package/src/server/routes/strands.ts +54 -54
- package/src/server/routes/trust-circle.ts +49 -49
- package/src/server/routes/update.ts +43 -43
- package/src/server/server.ts +122 -122
- package/src/server/settings-store.ts +37 -37
- package/src/server/static.ts +207 -207
- package/src/strands/__tests__/strand-service.test.ts +165 -165
- package/src/strands/index.ts +14 -14
- package/src/strands/strand-service.ts +135 -135
- package/src/strands/types.ts +102 -102
- package/src/update/__tests__/apply.test.ts +158 -158
- package/src/update/__tests__/manifest.test.ts +128 -128
- package/src/update/__tests__/release-key.test.ts +42 -42
- package/src/update/__tests__/sign.test.ts +78 -78
- package/src/update/__tests__/store.test.ts +81 -81
- package/src/update/__tests__/update-service.integration.test.ts +256 -256
- package/src/update/__tests__/version.test.ts +31 -31
- package/src/update/apply.ts +190 -190
- package/src/update/index.ts +341 -341
- package/src/update/release-key.ts +71 -71
- package/src/update/sign.ts +74 -74
- package/src/update/store.ts +101 -101
- package/src/update/types.ts +109 -109
- package/src/update/version.ts +80 -80
|
@@ -1,62 +1,62 @@
|
|
|
1
|
-
import { describe, expect, it } from 'vitest';
|
|
2
|
-
import { resolve } from 'node:path';
|
|
3
|
-
import { fileURLToPath } from 'node:url';
|
|
4
|
-
|
|
5
|
-
import { LaunchdServiceHost } from '../service-host/launchd.js';
|
|
6
|
-
import { SystemdServiceHost } from '../service-host/systemd.js';
|
|
7
|
-
import { NssmServiceHost } from '../service-host/nssm.js';
|
|
8
|
-
import { renderTemplate } from '../service-host/template.js';
|
|
9
|
-
import type { ServiceHostContext } from '../service-host/types.js';
|
|
10
|
-
|
|
11
|
-
const here = fileURLToPath(new URL('.', import.meta.url));
|
|
12
|
-
const serviceDir = resolve(here, '..', '..', '..', 'service');
|
|
13
|
-
|
|
14
|
-
function ctx(): ServiceHostContext {
|
|
15
|
-
return {
|
|
16
|
-
nodePath: '/usr/local/bin/node',
|
|
17
|
-
hostJs: '/opt/cadre-host/dist/bin/host.js',
|
|
18
|
-
dataDir: '/var/data/cadre-host',
|
|
19
|
-
serviceDir,
|
|
20
|
-
};
|
|
21
|
-
}
|
|
22
|
-
|
|
23
|
-
describe('renderTemplate', () => {
|
|
24
|
-
it('substitutes @TOKEN@ values', () => {
|
|
25
|
-
expect(renderTemplate('@A@ x @B@', { A: 'foo', B: 'bar' })).toBe('foo x bar');
|
|
26
|
-
});
|
|
27
|
-
|
|
28
|
-
it('throws on unknown tokens', () => {
|
|
29
|
-
expect(() => renderTemplate('@A@ @MISSING@', { A: 'foo' })).toThrow(/missing value for token @MISSING@/);
|
|
30
|
-
});
|
|
31
|
-
});
|
|
32
|
-
|
|
33
|
-
describe('SystemdServiceHost.renderUnit', () => {
|
|
34
|
-
it('produces an enable-able [Install] section and substitutes ExecStart', () => {
|
|
35
|
-
const unit = new SystemdServiceHost().renderUnit(ctx());
|
|
36
|
-
expect(unit).toContain('[Install]');
|
|
37
|
-
expect(unit).toContain('WantedBy=default.target');
|
|
38
|
-
expect(unit).toContain('ExecStart=/usr/local/bin/node /opt/cadre-host/dist/bin/host.js start --no-tui --data-dir /var/data/cadre-host');
|
|
39
|
-
expect(unit).toContain('RestartPreventExitStatus=0');
|
|
40
|
-
});
|
|
41
|
-
});
|
|
42
|
-
|
|
43
|
-
describe('LaunchdServiceHost.renderUnit', () => {
|
|
44
|
-
it('produces a plist with the substituted ProgramArguments', () => {
|
|
45
|
-
const unit = new LaunchdServiceHost().renderUnit(ctx());
|
|
46
|
-
expect(unit).toContain('<key>Label</key>');
|
|
47
|
-
expect(unit).toContain('<string>com.serfab.cadre-host</string>');
|
|
48
|
-
expect(unit).toContain('<string>/usr/local/bin/node</string>');
|
|
49
|
-
expect(unit).toContain('<string>/opt/cadre-host/dist/bin/host.js</string>');
|
|
50
|
-
expect(unit).toContain('<string>--data-dir</string>');
|
|
51
|
-
expect(unit).toContain('<string>/var/data/cadre-host</string>');
|
|
52
|
-
expect(unit).toContain('<key>KeepAlive</key>');
|
|
53
|
-
expect(unit).toContain('<key>SuccessfulExit</key>');
|
|
54
|
-
expect(unit).toContain('<key>Crashed</key>');
|
|
55
|
-
});
|
|
56
|
-
});
|
|
57
|
-
|
|
58
|
-
describe('NssmServiceHost', () => {
|
|
59
|
-
it('returns null from renderUnit (NSSM stores config in the registry)', () => {
|
|
60
|
-
expect(new NssmServiceHost().renderUnit(ctx())).toBeNull();
|
|
61
|
-
});
|
|
62
|
-
});
|
|
1
|
+
import { describe, expect, it } from 'vitest';
|
|
2
|
+
import { resolve } from 'node:path';
|
|
3
|
+
import { fileURLToPath } from 'node:url';
|
|
4
|
+
|
|
5
|
+
import { LaunchdServiceHost } from '../service-host/launchd.js';
|
|
6
|
+
import { SystemdServiceHost } from '../service-host/systemd.js';
|
|
7
|
+
import { NssmServiceHost } from '../service-host/nssm.js';
|
|
8
|
+
import { renderTemplate } from '../service-host/template.js';
|
|
9
|
+
import type { ServiceHostContext } from '../service-host/types.js';
|
|
10
|
+
|
|
11
|
+
const here = fileURLToPath(new URL('.', import.meta.url));
|
|
12
|
+
const serviceDir = resolve(here, '..', '..', '..', 'service');
|
|
13
|
+
|
|
14
|
+
function ctx(): ServiceHostContext {
|
|
15
|
+
return {
|
|
16
|
+
nodePath: '/usr/local/bin/node',
|
|
17
|
+
hostJs: '/opt/cadre-host/dist/bin/host.js',
|
|
18
|
+
dataDir: '/var/data/cadre-host',
|
|
19
|
+
serviceDir,
|
|
20
|
+
};
|
|
21
|
+
}
|
|
22
|
+
|
|
23
|
+
describe('renderTemplate', () => {
|
|
24
|
+
it('substitutes @TOKEN@ values', () => {
|
|
25
|
+
expect(renderTemplate('@A@ x @B@', { A: 'foo', B: 'bar' })).toBe('foo x bar');
|
|
26
|
+
});
|
|
27
|
+
|
|
28
|
+
it('throws on unknown tokens', () => {
|
|
29
|
+
expect(() => renderTemplate('@A@ @MISSING@', { A: 'foo' })).toThrow(/missing value for token @MISSING@/);
|
|
30
|
+
});
|
|
31
|
+
});
|
|
32
|
+
|
|
33
|
+
describe('SystemdServiceHost.renderUnit', () => {
|
|
34
|
+
it('produces an enable-able [Install] section and substitutes ExecStart', () => {
|
|
35
|
+
const unit = new SystemdServiceHost().renderUnit(ctx());
|
|
36
|
+
expect(unit).toContain('[Install]');
|
|
37
|
+
expect(unit).toContain('WantedBy=default.target');
|
|
38
|
+
expect(unit).toContain('ExecStart=/usr/local/bin/node /opt/cadre-host/dist/bin/host.js start --no-tui --data-dir /var/data/cadre-host');
|
|
39
|
+
expect(unit).toContain('RestartPreventExitStatus=0');
|
|
40
|
+
});
|
|
41
|
+
});
|
|
42
|
+
|
|
43
|
+
describe('LaunchdServiceHost.renderUnit', () => {
|
|
44
|
+
it('produces a plist with the substituted ProgramArguments', () => {
|
|
45
|
+
const unit = new LaunchdServiceHost().renderUnit(ctx());
|
|
46
|
+
expect(unit).toContain('<key>Label</key>');
|
|
47
|
+
expect(unit).toContain('<string>com.serfab.cadre-host</string>');
|
|
48
|
+
expect(unit).toContain('<string>/usr/local/bin/node</string>');
|
|
49
|
+
expect(unit).toContain('<string>/opt/cadre-host/dist/bin/host.js</string>');
|
|
50
|
+
expect(unit).toContain('<string>--data-dir</string>');
|
|
51
|
+
expect(unit).toContain('<string>/var/data/cadre-host</string>');
|
|
52
|
+
expect(unit).toContain('<key>KeepAlive</key>');
|
|
53
|
+
expect(unit).toContain('<key>SuccessfulExit</key>');
|
|
54
|
+
expect(unit).toContain('<key>Crashed</key>');
|
|
55
|
+
});
|
|
56
|
+
});
|
|
57
|
+
|
|
58
|
+
describe('NssmServiceHost', () => {
|
|
59
|
+
it('returns null from renderUnit (NSSM stores config in the registry)', () => {
|
|
60
|
+
expect(new NssmServiceHost().renderUnit(ctx())).toBeNull();
|
|
61
|
+
});
|
|
62
|
+
});
|
|
@@ -1,64 +1,64 @@
|
|
|
1
|
-
import { describe, expect, it } from 'vitest';
|
|
2
|
-
|
|
3
|
-
import { runWizardWith, type WizardDefaults } from '../wizard.js';
|
|
4
|
-
|
|
5
|
-
const defaults: WizardDefaults = {
|
|
6
|
-
dataDir: '/data/cadre-host',
|
|
7
|
-
uiPort: 8765,
|
|
8
|
-
libp2pPort: 4001,
|
|
9
|
-
upnpEnabled: true,
|
|
10
|
-
ownCadre: false,
|
|
11
|
-
};
|
|
12
|
-
|
|
13
|
-
function scripted(answers: ReadonlyArray<string>): (label: string, fallback: string) => Promise<string> {
|
|
14
|
-
let i = 0;
|
|
15
|
-
return async (_label, _fallback) => {
|
|
16
|
-
if (i >= answers.length) throw new Error(`wizard asked more questions than scripted (i=${i})`);
|
|
17
|
-
return answers[i++]!;
|
|
18
|
-
};
|
|
19
|
-
}
|
|
20
|
-
|
|
21
|
-
describe('runWizardWith', () => {
|
|
22
|
-
it('returns the defaults when every answer is blank', async () => {
|
|
23
|
-
const out = await runWizardWith(defaults, scripted(['', '', '', '', '', '']));
|
|
24
|
-
expect(out).toEqual({
|
|
25
|
-
dataDir: '/data/cadre-host',
|
|
26
|
-
uiPort: 8765,
|
|
27
|
-
libp2pPort: 4001,
|
|
28
|
-
upnpEnabled: true,
|
|
29
|
-
configureDdns: false,
|
|
30
|
-
ownCadre: false,
|
|
31
|
-
});
|
|
32
|
-
});
|
|
33
|
-
|
|
34
|
-
it('respects overrides', async () => {
|
|
35
|
-
const out = await runWizardWith(defaults, scripted([
|
|
36
|
-
'/srv/host',
|
|
37
|
-
'9000',
|
|
38
|
-
'5000',
|
|
39
|
-
'n',
|
|
40
|
-
'y',
|
|
41
|
-
'y',
|
|
42
|
-
]));
|
|
43
|
-
expect(out).toEqual({
|
|
44
|
-
dataDir: '/srv/host',
|
|
45
|
-
uiPort: 9000,
|
|
46
|
-
libp2pPort: 5000,
|
|
47
|
-
upnpEnabled: false,
|
|
48
|
-
configureDdns: true,
|
|
49
|
-
ownCadre: true,
|
|
50
|
-
});
|
|
51
|
-
});
|
|
52
|
-
|
|
53
|
-
it('rejects invalid port input', async () => {
|
|
54
|
-
await expect(
|
|
55
|
-
runWizardWith(defaults, scripted(['', 'banana', '', '', ''])),
|
|
56
|
-
).rejects.toThrow(/Invalid port/);
|
|
57
|
-
});
|
|
58
|
-
|
|
59
|
-
it('rejects unrecognized yes/no answers', async () => {
|
|
60
|
-
await expect(
|
|
61
|
-
runWizardWith(defaults, scripted(['', '', '', 'maybe', ''])),
|
|
62
|
-
).rejects.toThrow(/Invalid yes\/no/);
|
|
63
|
-
});
|
|
64
|
-
});
|
|
1
|
+
import { describe, expect, it } from 'vitest';
|
|
2
|
+
|
|
3
|
+
import { runWizardWith, type WizardDefaults } from '../wizard.js';
|
|
4
|
+
|
|
5
|
+
const defaults: WizardDefaults = {
|
|
6
|
+
dataDir: '/data/cadre-host',
|
|
7
|
+
uiPort: 8765,
|
|
8
|
+
libp2pPort: 4001,
|
|
9
|
+
upnpEnabled: true,
|
|
10
|
+
ownCadre: false,
|
|
11
|
+
};
|
|
12
|
+
|
|
13
|
+
function scripted(answers: ReadonlyArray<string>): (label: string, fallback: string) => Promise<string> {
|
|
14
|
+
let i = 0;
|
|
15
|
+
return async (_label, _fallback) => {
|
|
16
|
+
if (i >= answers.length) throw new Error(`wizard asked more questions than scripted (i=${i})`);
|
|
17
|
+
return answers[i++]!;
|
|
18
|
+
};
|
|
19
|
+
}
|
|
20
|
+
|
|
21
|
+
describe('runWizardWith', () => {
|
|
22
|
+
it('returns the defaults when every answer is blank', async () => {
|
|
23
|
+
const out = await runWizardWith(defaults, scripted(['', '', '', '', '', '']));
|
|
24
|
+
expect(out).toEqual({
|
|
25
|
+
dataDir: '/data/cadre-host',
|
|
26
|
+
uiPort: 8765,
|
|
27
|
+
libp2pPort: 4001,
|
|
28
|
+
upnpEnabled: true,
|
|
29
|
+
configureDdns: false,
|
|
30
|
+
ownCadre: false,
|
|
31
|
+
});
|
|
32
|
+
});
|
|
33
|
+
|
|
34
|
+
it('respects overrides', async () => {
|
|
35
|
+
const out = await runWizardWith(defaults, scripted([
|
|
36
|
+
'/srv/host',
|
|
37
|
+
'9000',
|
|
38
|
+
'5000',
|
|
39
|
+
'n',
|
|
40
|
+
'y',
|
|
41
|
+
'y',
|
|
42
|
+
]));
|
|
43
|
+
expect(out).toEqual({
|
|
44
|
+
dataDir: '/srv/host',
|
|
45
|
+
uiPort: 9000,
|
|
46
|
+
libp2pPort: 5000,
|
|
47
|
+
upnpEnabled: false,
|
|
48
|
+
configureDdns: true,
|
|
49
|
+
ownCadre: true,
|
|
50
|
+
});
|
|
51
|
+
});
|
|
52
|
+
|
|
53
|
+
it('rejects invalid port input', async () => {
|
|
54
|
+
await expect(
|
|
55
|
+
runWizardWith(defaults, scripted(['', 'banana', '', '', ''])),
|
|
56
|
+
).rejects.toThrow(/Invalid port/);
|
|
57
|
+
});
|
|
58
|
+
|
|
59
|
+
it('rejects unrecognized yes/no answers', async () => {
|
|
60
|
+
await expect(
|
|
61
|
+
runWizardWith(defaults, scripted(['', '', '', 'maybe', ''])),
|
|
62
|
+
).rejects.toThrow(/Invalid yes\/no/);
|
|
63
|
+
});
|
|
64
|
+
});
|
|
@@ -1,49 +1,49 @@
|
|
|
1
|
-
/**
|
|
2
|
-
* Identity persistence for cadre-host.
|
|
3
|
-
*
|
|
4
|
-
* The host's libp2p peer identity is an Ed25519 keypair generated at
|
|
5
|
-
* install time. The protobuf-encoded private key is written to
|
|
6
|
-
* `<dataDir>/identity.key` with mode 0600 on POSIX. `cadre-host start`
|
|
7
|
-
* later loads it with `privateKeyFromProtobuf`.
|
|
8
|
-
*
|
|
9
|
-
* We persist the protobuf form (not raw bytes) because that's the format
|
|
10
|
-
* libp2p's `privateKeyFromProtobuf` consumes directly and it preserves the
|
|
11
|
-
* key type tag — future migrations to a different key algorithm don't
|
|
12
|
-
* require a schema change here.
|
|
13
|
-
*/
|
|
14
|
-
|
|
15
|
-
import { chmodSync, mkdirSync, readFileSync, writeFileSync } from 'node:fs';
|
|
16
|
-
import { dirname } from 'node:path';
|
|
17
|
-
import {
|
|
18
|
-
generateKeyPair,
|
|
19
|
-
privateKeyFromProtobuf,
|
|
20
|
-
privateKeyToProtobuf,
|
|
21
|
-
} from '@libp2p/crypto/keys';
|
|
22
|
-
import { peerIdFromPrivateKey } from '@libp2p/peer-id';
|
|
23
|
-
import type { PrivateKey } from '@libp2p/interface';
|
|
24
|
-
|
|
25
|
-
export interface IdentityRecord {
|
|
26
|
-
privateKey: PrivateKey;
|
|
27
|
-
/** Stringified libp2p peer ID (`12D3Koo…`). */
|
|
28
|
-
peerId: string;
|
|
29
|
-
}
|
|
30
|
-
|
|
31
|
-
/** Generate a fresh Ed25519 identity and persist it. Returns the in-memory record. */
|
|
32
|
-
export async function generateIdentity(filePath: string): Promise<IdentityRecord> {
|
|
33
|
-
const privateKey = await generateKeyPair('Ed25519');
|
|
34
|
-
const bytes = privateKeyToProtobuf(privateKey);
|
|
35
|
-
mkdirSync(dirname(filePath), { recursive: true });
|
|
36
|
-
writeFileSync(filePath, bytes);
|
|
37
|
-
// 0600 — owner read/write only. No-op on Windows.
|
|
38
|
-
if (process.platform !== 'win32') {
|
|
39
|
-
chmodSync(filePath, 0o600);
|
|
40
|
-
}
|
|
41
|
-
return { privateKey, peerId: peerIdFromPrivateKey(privateKey).toString() };
|
|
42
|
-
}
|
|
43
|
-
|
|
44
|
-
/** Load an existing identity file. Throws if it doesn't decode. */
|
|
45
|
-
export function loadIdentity(filePath: string): IdentityRecord {
|
|
46
|
-
const bytes = readFileSync(filePath);
|
|
47
|
-
const privateKey = privateKeyFromProtobuf(new Uint8Array(bytes));
|
|
48
|
-
return { privateKey, peerId: peerIdFromPrivateKey(privateKey).toString() };
|
|
49
|
-
}
|
|
1
|
+
/**
|
|
2
|
+
* Identity persistence for cadre-host.
|
|
3
|
+
*
|
|
4
|
+
* The host's libp2p peer identity is an Ed25519 keypair generated at
|
|
5
|
+
* install time. The protobuf-encoded private key is written to
|
|
6
|
+
* `<dataDir>/identity.key` with mode 0600 on POSIX. `cadre-host start`
|
|
7
|
+
* later loads it with `privateKeyFromProtobuf`.
|
|
8
|
+
*
|
|
9
|
+
* We persist the protobuf form (not raw bytes) because that's the format
|
|
10
|
+
* libp2p's `privateKeyFromProtobuf` consumes directly and it preserves the
|
|
11
|
+
* key type tag — future migrations to a different key algorithm don't
|
|
12
|
+
* require a schema change here.
|
|
13
|
+
*/
|
|
14
|
+
|
|
15
|
+
import { chmodSync, mkdirSync, readFileSync, writeFileSync } from 'node:fs';
|
|
16
|
+
import { dirname } from 'node:path';
|
|
17
|
+
import {
|
|
18
|
+
generateKeyPair,
|
|
19
|
+
privateKeyFromProtobuf,
|
|
20
|
+
privateKeyToProtobuf,
|
|
21
|
+
} from '@libp2p/crypto/keys';
|
|
22
|
+
import { peerIdFromPrivateKey } from '@libp2p/peer-id';
|
|
23
|
+
import type { PrivateKey } from '@libp2p/interface';
|
|
24
|
+
|
|
25
|
+
export interface IdentityRecord {
|
|
26
|
+
privateKey: PrivateKey;
|
|
27
|
+
/** Stringified libp2p peer ID (`12D3Koo…`). */
|
|
28
|
+
peerId: string;
|
|
29
|
+
}
|
|
30
|
+
|
|
31
|
+
/** Generate a fresh Ed25519 identity and persist it. Returns the in-memory record. */
|
|
32
|
+
export async function generateIdentity(filePath: string): Promise<IdentityRecord> {
|
|
33
|
+
const privateKey = await generateKeyPair('Ed25519');
|
|
34
|
+
const bytes = privateKeyToProtobuf(privateKey);
|
|
35
|
+
mkdirSync(dirname(filePath), { recursive: true });
|
|
36
|
+
writeFileSync(filePath, bytes);
|
|
37
|
+
// 0600 — owner read/write only. No-op on Windows.
|
|
38
|
+
if (process.platform !== 'win32') {
|
|
39
|
+
chmodSync(filePath, 0o600);
|
|
40
|
+
}
|
|
41
|
+
return { privateKey, peerId: peerIdFromPrivateKey(privateKey).toString() };
|
|
42
|
+
}
|
|
43
|
+
|
|
44
|
+
/** Load an existing identity file. Throws if it doesn't decode. */
|
|
45
|
+
export function loadIdentity(filePath: string): IdentityRecord {
|
|
46
|
+
const bytes = readFileSync(filePath);
|
|
47
|
+
const privateKey = privateKeyFromProtobuf(new Uint8Array(bytes));
|
|
48
|
+
return { privateKey, peerId: peerIdFromPrivateKey(privateKey).toString() };
|
|
49
|
+
}
|
package/src/installer/paths.ts
CHANGED
|
@@ -1,109 +1,109 @@
|
|
|
1
|
-
/**
|
|
2
|
-
* Per-platform default paths for the installer.
|
|
3
|
-
*
|
|
4
|
-
* Linux: XDG_DATA_HOME / ~/.local/share/cadre-host
|
|
5
|
-
* macOS: ~/Library/Application Support/CadreHost
|
|
6
|
-
* Windows: %LocalAppData%\CadreHost
|
|
7
|
-
*
|
|
8
|
-
* The package root (where the installed `dist/bin/host.js` and `service/`
|
|
9
|
-
* directory live) is resolved at runtime relative to this module. The
|
|
10
|
-
* installer needs both: the data dir is per-user state, while the package
|
|
11
|
-
* root is what the service-host unit's `ExecStart` line points at.
|
|
12
|
-
*/
|
|
13
|
-
|
|
14
|
-
import { homedir } from 'node:os';
|
|
15
|
-
import { posix, win32, join, resolve, dirname } from 'node:path';
|
|
16
|
-
import { fileURLToPath } from 'node:url';
|
|
17
|
-
|
|
18
|
-
import type { SupportedPlatform } from './platform.js';
|
|
19
|
-
|
|
20
|
-
/** Use the path joiner the *target* platform would use, not the runtime's. */
|
|
21
|
-
function joinFor(platform: SupportedPlatform, ...parts: string[]): string {
|
|
22
|
-
return platform === 'win32' ? win32.join(...parts) : posix.join(...parts);
|
|
23
|
-
}
|
|
24
|
-
|
|
25
|
-
export interface InstallerEnv {
|
|
26
|
-
HOME?: string;
|
|
27
|
-
XDG_DATA_HOME?: string;
|
|
28
|
-
XDG_CONFIG_HOME?: string;
|
|
29
|
-
LocalAppData?: string;
|
|
30
|
-
}
|
|
31
|
-
|
|
32
|
-
/** Default data dir for the given platform. Honors XDG_DATA_HOME / LocalAppData. */
|
|
33
|
-
export function defaultDataDir(
|
|
34
|
-
platform: SupportedPlatform,
|
|
35
|
-
env: InstallerEnv = process.env as InstallerEnv,
|
|
36
|
-
home: string = homedir(),
|
|
37
|
-
): string {
|
|
38
|
-
switch (platform) {
|
|
39
|
-
case 'linux': {
|
|
40
|
-
const base = env.XDG_DATA_HOME?.trim() || joinFor(platform, env.HOME?.trim() || home, '.local', 'share');
|
|
41
|
-
return joinFor(platform, base, 'cadre-host');
|
|
42
|
-
}
|
|
43
|
-
case 'darwin': {
|
|
44
|
-
return joinFor(platform, env.HOME?.trim() || home, 'Library', 'Application Support', 'CadreHost');
|
|
45
|
-
}
|
|
46
|
-
case 'win32': {
|
|
47
|
-
// %LocalAppData% is the canonical per-user, non-roaming app data dir.
|
|
48
|
-
const base = env.LocalAppData?.trim();
|
|
49
|
-
if (!base) {
|
|
50
|
-
// Fallback: derive from HOME (works under cygwin/MSYS test envs too).
|
|
51
|
-
return joinFor(platform, home, 'AppData', 'Local', 'CadreHost');
|
|
52
|
-
}
|
|
53
|
-
return joinFor(platform, base, 'CadreHost');
|
|
54
|
-
}
|
|
55
|
-
}
|
|
56
|
-
}
|
|
57
|
-
|
|
58
|
-
/** Path on disk for the installed cadre-host CLI entrypoint. */
|
|
59
|
-
export function defaultHostJs(): string {
|
|
60
|
-
// dist/installer/paths.js -> ../../dist/bin/host.js
|
|
61
|
-
// src/installer/paths.ts -> ../bin/host.ts (only used by tests; build emits dist)
|
|
62
|
-
const here = dirname(fileURLToPath(import.meta.url));
|
|
63
|
-
return resolve(here, '..', 'bin', 'host.js');
|
|
64
|
-
}
|
|
65
|
-
|
|
66
|
-
/** Directory containing service templates (cadre-host.service.tmpl etc.). */
|
|
67
|
-
export function defaultServiceDir(): string {
|
|
68
|
-
// dist/installer/paths.js -> ../../service/
|
|
69
|
-
const here = dirname(fileURLToPath(import.meta.url));
|
|
70
|
-
return resolve(here, '..', '..', 'service');
|
|
71
|
-
}
|
|
72
|
-
|
|
73
|
-
/** Where the wizard writes the JSON config. */
|
|
74
|
-
export function configPath(dataDir: string): string {
|
|
75
|
-
return join(dataDir, 'host.config.json');
|
|
76
|
-
}
|
|
77
|
-
|
|
78
|
-
/** Where the wizard writes the Ed25519 identity. */
|
|
79
|
-
export function identityPath(dataDir: string): string {
|
|
80
|
-
return join(dataDir, 'identity.key');
|
|
81
|
-
}
|
|
82
|
-
|
|
83
|
-
/** Logs directory (used by launchd / NSSM unit templates). */
|
|
84
|
-
export function logsDir(dataDir: string): string {
|
|
85
|
-
return join(dataDir, 'logs');
|
|
86
|
-
}
|
|
87
|
-
|
|
88
|
-
/** Per-platform install dir for the rendered service unit file. */
|
|
89
|
-
export function serviceInstallPath(
|
|
90
|
-
platform: SupportedPlatform,
|
|
91
|
-
env: InstallerEnv = process.env as InstallerEnv,
|
|
92
|
-
home: string = homedir(),
|
|
93
|
-
): string {
|
|
94
|
-
const hd = env.HOME?.trim() || home;
|
|
95
|
-
switch (platform) {
|
|
96
|
-
case 'linux': {
|
|
97
|
-
const base = env.XDG_CONFIG_HOME?.trim() || joinFor(platform, hd, '.config');
|
|
98
|
-
return joinFor(platform, base, 'systemd', 'user', 'cadre-host.service');
|
|
99
|
-
}
|
|
100
|
-
case 'darwin': {
|
|
101
|
-
return joinFor(platform, hd, 'Library', 'LaunchAgents', 'com.serfab.cadre-host.plist');
|
|
102
|
-
}
|
|
103
|
-
case 'win32': {
|
|
104
|
-
// NSSM stores service config in the registry; this path is unused
|
|
105
|
-
// on Windows but returned for symmetry / logging.
|
|
106
|
-
return 'HKLM\\SYSTEM\\CurrentControlSet\\Services\\CadreHost';
|
|
107
|
-
}
|
|
108
|
-
}
|
|
109
|
-
}
|
|
1
|
+
/**
|
|
2
|
+
* Per-platform default paths for the installer.
|
|
3
|
+
*
|
|
4
|
+
* Linux: XDG_DATA_HOME / ~/.local/share/cadre-host
|
|
5
|
+
* macOS: ~/Library/Application Support/CadreHost
|
|
6
|
+
* Windows: %LocalAppData%\CadreHost
|
|
7
|
+
*
|
|
8
|
+
* The package root (where the installed `dist/bin/host.js` and `service/`
|
|
9
|
+
* directory live) is resolved at runtime relative to this module. The
|
|
10
|
+
* installer needs both: the data dir is per-user state, while the package
|
|
11
|
+
* root is what the service-host unit's `ExecStart` line points at.
|
|
12
|
+
*/
|
|
13
|
+
|
|
14
|
+
import { homedir } from 'node:os';
|
|
15
|
+
import { posix, win32, join, resolve, dirname } from 'node:path';
|
|
16
|
+
import { fileURLToPath } from 'node:url';
|
|
17
|
+
|
|
18
|
+
import type { SupportedPlatform } from './platform.js';
|
|
19
|
+
|
|
20
|
+
/** Use the path joiner the *target* platform would use, not the runtime's. */
|
|
21
|
+
function joinFor(platform: SupportedPlatform, ...parts: string[]): string {
|
|
22
|
+
return platform === 'win32' ? win32.join(...parts) : posix.join(...parts);
|
|
23
|
+
}
|
|
24
|
+
|
|
25
|
+
export interface InstallerEnv {
|
|
26
|
+
HOME?: string;
|
|
27
|
+
XDG_DATA_HOME?: string;
|
|
28
|
+
XDG_CONFIG_HOME?: string;
|
|
29
|
+
LocalAppData?: string;
|
|
30
|
+
}
|
|
31
|
+
|
|
32
|
+
/** Default data dir for the given platform. Honors XDG_DATA_HOME / LocalAppData. */
|
|
33
|
+
export function defaultDataDir(
|
|
34
|
+
platform: SupportedPlatform,
|
|
35
|
+
env: InstallerEnv = process.env as InstallerEnv,
|
|
36
|
+
home: string = homedir(),
|
|
37
|
+
): string {
|
|
38
|
+
switch (platform) {
|
|
39
|
+
case 'linux': {
|
|
40
|
+
const base = env.XDG_DATA_HOME?.trim() || joinFor(platform, env.HOME?.trim() || home, '.local', 'share');
|
|
41
|
+
return joinFor(platform, base, 'cadre-host');
|
|
42
|
+
}
|
|
43
|
+
case 'darwin': {
|
|
44
|
+
return joinFor(platform, env.HOME?.trim() || home, 'Library', 'Application Support', 'CadreHost');
|
|
45
|
+
}
|
|
46
|
+
case 'win32': {
|
|
47
|
+
// %LocalAppData% is the canonical per-user, non-roaming app data dir.
|
|
48
|
+
const base = env.LocalAppData?.trim();
|
|
49
|
+
if (!base) {
|
|
50
|
+
// Fallback: derive from HOME (works under cygwin/MSYS test envs too).
|
|
51
|
+
return joinFor(platform, home, 'AppData', 'Local', 'CadreHost');
|
|
52
|
+
}
|
|
53
|
+
return joinFor(platform, base, 'CadreHost');
|
|
54
|
+
}
|
|
55
|
+
}
|
|
56
|
+
}
|
|
57
|
+
|
|
58
|
+
/** Path on disk for the installed cadre-host CLI entrypoint. */
|
|
59
|
+
export function defaultHostJs(): string {
|
|
60
|
+
// dist/installer/paths.js -> ../../dist/bin/host.js
|
|
61
|
+
// src/installer/paths.ts -> ../bin/host.ts (only used by tests; build emits dist)
|
|
62
|
+
const here = dirname(fileURLToPath(import.meta.url));
|
|
63
|
+
return resolve(here, '..', 'bin', 'host.js');
|
|
64
|
+
}
|
|
65
|
+
|
|
66
|
+
/** Directory containing service templates (cadre-host.service.tmpl etc.). */
|
|
67
|
+
export function defaultServiceDir(): string {
|
|
68
|
+
// dist/installer/paths.js -> ../../service/
|
|
69
|
+
const here = dirname(fileURLToPath(import.meta.url));
|
|
70
|
+
return resolve(here, '..', '..', 'service');
|
|
71
|
+
}
|
|
72
|
+
|
|
73
|
+
/** Where the wizard writes the JSON config. */
|
|
74
|
+
export function configPath(dataDir: string): string {
|
|
75
|
+
return join(dataDir, 'host.config.json');
|
|
76
|
+
}
|
|
77
|
+
|
|
78
|
+
/** Where the wizard writes the Ed25519 identity. */
|
|
79
|
+
export function identityPath(dataDir: string): string {
|
|
80
|
+
return join(dataDir, 'identity.key');
|
|
81
|
+
}
|
|
82
|
+
|
|
83
|
+
/** Logs directory (used by launchd / NSSM unit templates). */
|
|
84
|
+
export function logsDir(dataDir: string): string {
|
|
85
|
+
return join(dataDir, 'logs');
|
|
86
|
+
}
|
|
87
|
+
|
|
88
|
+
/** Per-platform install dir for the rendered service unit file. */
|
|
89
|
+
export function serviceInstallPath(
|
|
90
|
+
platform: SupportedPlatform,
|
|
91
|
+
env: InstallerEnv = process.env as InstallerEnv,
|
|
92
|
+
home: string = homedir(),
|
|
93
|
+
): string {
|
|
94
|
+
const hd = env.HOME?.trim() || home;
|
|
95
|
+
switch (platform) {
|
|
96
|
+
case 'linux': {
|
|
97
|
+
const base = env.XDG_CONFIG_HOME?.trim() || joinFor(platform, hd, '.config');
|
|
98
|
+
return joinFor(platform, base, 'systemd', 'user', 'cadre-host.service');
|
|
99
|
+
}
|
|
100
|
+
case 'darwin': {
|
|
101
|
+
return joinFor(platform, hd, 'Library', 'LaunchAgents', 'com.serfab.cadre-host.plist');
|
|
102
|
+
}
|
|
103
|
+
case 'win32': {
|
|
104
|
+
// NSSM stores service config in the registry; this path is unused
|
|
105
|
+
// on Windows but returned for symmetry / logging.
|
|
106
|
+
return 'HKLM\\SYSTEM\\CurrentControlSet\\Services\\CadreHost';
|
|
107
|
+
}
|
|
108
|
+
}
|
|
109
|
+
}
|
|
@@ -1,27 +1,27 @@
|
|
|
1
|
-
/**
|
|
2
|
-
* Platform detection helpers for the installer.
|
|
3
|
-
*
|
|
4
|
-
* Kept narrow on purpose — `process.platform` everywhere else in the
|
|
5
|
-
* installer is funneled through here so tests can stub a single point.
|
|
6
|
-
*/
|
|
7
|
-
|
|
8
|
-
export type SupportedPlatform = 'linux' | 'darwin' | 'win32';
|
|
9
|
-
|
|
10
|
-
const SUPPORTED: ReadonlySet<NodeJS.Platform> = new Set<NodeJS.Platform>([
|
|
11
|
-
'linux',
|
|
12
|
-
'darwin',
|
|
13
|
-
'win32',
|
|
14
|
-
]);
|
|
15
|
-
|
|
16
|
-
export function detectPlatform(p: NodeJS.Platform = process.platform): SupportedPlatform {
|
|
17
|
-
if (!SUPPORTED.has(p)) {
|
|
18
|
-
throw new Error(
|
|
19
|
-
`Unsupported platform: ${p}. cadre-host install supports linux, darwin, win32.`,
|
|
20
|
-
);
|
|
21
|
-
}
|
|
22
|
-
return p as SupportedPlatform;
|
|
23
|
-
}
|
|
24
|
-
|
|
25
|
-
export function isPosix(p: SupportedPlatform): boolean {
|
|
26
|
-
return p === 'linux' || p === 'darwin';
|
|
27
|
-
}
|
|
1
|
+
/**
|
|
2
|
+
* Platform detection helpers for the installer.
|
|
3
|
+
*
|
|
4
|
+
* Kept narrow on purpose — `process.platform` everywhere else in the
|
|
5
|
+
* installer is funneled through here so tests can stub a single point.
|
|
6
|
+
*/
|
|
7
|
+
|
|
8
|
+
export type SupportedPlatform = 'linux' | 'darwin' | 'win32';
|
|
9
|
+
|
|
10
|
+
const SUPPORTED: ReadonlySet<NodeJS.Platform> = new Set<NodeJS.Platform>([
|
|
11
|
+
'linux',
|
|
12
|
+
'darwin',
|
|
13
|
+
'win32',
|
|
14
|
+
]);
|
|
15
|
+
|
|
16
|
+
export function detectPlatform(p: NodeJS.Platform = process.platform): SupportedPlatform {
|
|
17
|
+
if (!SUPPORTED.has(p)) {
|
|
18
|
+
throw new Error(
|
|
19
|
+
`Unsupported platform: ${p}. cadre-host install supports linux, darwin, win32.`,
|
|
20
|
+
);
|
|
21
|
+
}
|
|
22
|
+
return p as SupportedPlatform;
|
|
23
|
+
}
|
|
24
|
+
|
|
25
|
+
export function isPosix(p: SupportedPlatform): boolean {
|
|
26
|
+
return p === 'linux' || p === 'darwin';
|
|
27
|
+
}
|