@serfab/cadre-host 0.10.0 → 0.11.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (138) hide show
  1. package/dist/server/static.js +38 -38
  2. package/dist/ui/assets/index-C-iks41M.js.map +1 -1
  3. package/dist/ui/index.html +12 -12
  4. package/package.json +4 -4
  5. package/service/cadre-host.service.tmpl +16 -16
  6. package/service/com.serfab.cadre-host.plist.tmpl +35 -35
  7. package/service/install-service.ps1 +98 -98
  8. package/service/uninstall-service.ps1 +19 -19
  9. package/src/__tests__/build-targets.test.ts +26 -26
  10. package/src/__tests__/cli-invite.smoke.test.ts +192 -192
  11. package/src/__tests__/cli-nat.smoke.test.ts +212 -212
  12. package/src/__tests__/cli.smoke.test.ts +46 -46
  13. package/src/__tests__/global-setup.ts +51 -51
  14. package/src/__tests__/host-owner.smoke.test.ts +123 -123
  15. package/src/__tests__/orchestrator-env-scrub.test.ts +140 -140
  16. package/src/__tests__/orchestrator-node-identity.test.ts +204 -204
  17. package/src/__tests__/orchestrator-owner.test.ts +198 -198
  18. package/src/__tests__/orchestrator-pin-keys.test.ts +153 -153
  19. package/src/__tests__/orchestrator-push.test.ts +145 -145
  20. package/src/__tests__/orchestrator.test.ts +951 -951
  21. package/src/auth/__tests__/duration.test.ts +28 -28
  22. package/src/auth/__tests__/self-label.test.ts +85 -85
  23. package/src/auth/__tests__/trust-circle-store.test.ts +115 -115
  24. package/src/auth/__tests__/trust-circle.test.ts +445 -445
  25. package/src/auth/duration.ts +33 -33
  26. package/src/auth/index.ts +21 -21
  27. package/src/auth/self-label.ts +74 -74
  28. package/src/auth/trust-circle-store.ts +155 -155
  29. package/src/auth/types.ts +99 -99
  30. package/src/donation/__tests__/donation-service.test.ts +1068 -1068
  31. package/src/donation/__tests__/donation-supervisor.test.ts +510 -510
  32. package/src/donation/__tests__/fake-orchestrator.test.ts +168 -168
  33. package/src/donation/__tests__/fake-orchestrator.ts +225 -225
  34. package/src/donation/__tests__/grant-service.test.ts +213 -213
  35. package/src/donation/__tests__/grant-store.test.ts +113 -113
  36. package/src/donation/donation-service.ts +962 -962
  37. package/src/donation/donation-store.ts +171 -171
  38. package/src/donation/donation-supervisor.ts +388 -388
  39. package/src/donation/grant-service.ts +200 -200
  40. package/src/donation/grant-store.ts +152 -152
  41. package/src/donation/index.ts +64 -64
  42. package/src/donation/types.ts +243 -243
  43. package/src/installer/__tests__/identity.test.ts +34 -34
  44. package/src/installer/__tests__/paths.test.ts +47 -47
  45. package/src/installer/__tests__/service-host.test.ts +62 -62
  46. package/src/installer/__tests__/wizard.test.ts +64 -64
  47. package/src/installer/identity.ts +49 -49
  48. package/src/installer/paths.ts +109 -109
  49. package/src/installer/platform.ts +27 -27
  50. package/src/installer/service-host/index.ts +21 -21
  51. package/src/installer/service-host/template.ts +21 -21
  52. package/src/installer/wizard.ts +103 -103
  53. package/src/nat/__tests__/address-resolver.test.ts +82 -82
  54. package/src/nat/__tests__/ddns-duckdns.test.ts +83 -83
  55. package/src/nat/__tests__/ddns-updater.test.ts +253 -253
  56. package/src/nat/__tests__/external-ip.test.ts +124 -124
  57. package/src/nat/__tests__/nat-service.test.ts +497 -497
  58. package/src/nat/__tests__/nat-store.test.ts +93 -93
  59. package/src/nat/__tests__/port-mapper.test.ts +191 -191
  60. package/src/nat/__tests__/reachability.test.ts +24 -24
  61. package/src/nat/__tests__/secrets.test.ts +178 -178
  62. package/src/nat/address-resolver.ts +51 -51
  63. package/src/nat/ddns/duckdns.ts +76 -76
  64. package/src/nat/ddns/index.ts +55 -55
  65. package/src/nat/ddns/updater.ts +243 -243
  66. package/src/nat/external-ip.ts +154 -154
  67. package/src/nat/index.ts +71 -71
  68. package/src/nat/nat-service.ts +501 -501
  69. package/src/nat/nat-store.ts +154 -154
  70. package/src/nat/port-mapper.ts +329 -329
  71. package/src/nat/reachability.ts +34 -34
  72. package/src/nat/secrets/file-store.ts +130 -130
  73. package/src/nat/secrets/index.ts +112 -112
  74. package/src/nat/secrets/keytar-store.ts +67 -67
  75. package/src/nat/types.ts +159 -159
  76. package/src/orchestrator/__tests__/node-identity.test.ts +62 -62
  77. package/src/orchestrator/host-process-orchestrator.ts +1133 -1133
  78. package/src/orchestrator/index.ts +10 -10
  79. package/src/orchestrator/log-rotator.ts +53 -53
  80. package/src/orchestrator/node-identity.ts +40 -40
  81. package/src/orchestrator/pid-liveness.ts +24 -24
  82. package/src/orchestrator/port-allocator.ts +91 -91
  83. package/src/orchestrator/state-store.ts +90 -90
  84. package/src/orchestrator/types.ts +141 -141
  85. package/src/owner/__tests__/owner-node-client.test.ts +194 -194
  86. package/src/owner/index.ts +12 -12
  87. package/src/owner/owner-node-client.ts +259 -259
  88. package/src/push/__tests__/push.test.ts +90 -90
  89. package/src/push/index.ts +146 -146
  90. package/src/server/__tests__/bus.test.ts +38 -38
  91. package/src/server/__tests__/error-handler.test.ts +118 -118
  92. package/src/server/__tests__/grants-admin-route.test.ts +73 -73
  93. package/src/server/__tests__/grants-route.test.ts +263 -263
  94. package/src/server/__tests__/nodes-route.test.ts +259 -259
  95. package/src/server/__tests__/origin-guard.test.ts +72 -72
  96. package/src/server/__tests__/publishers.test.ts +216 -216
  97. package/src/server/__tests__/server.smoke.test.ts +253 -253
  98. package/src/server/__tests__/settings-route.test.ts +194 -194
  99. package/src/server/__tests__/sse-route.test.ts +119 -119
  100. package/src/server/__tests__/static.test.ts +145 -145
  101. package/src/server/__tests__/status-route.test.ts +134 -134
  102. package/src/server/__tests__/strands-route.test.ts +233 -233
  103. package/src/server/error-handler.ts +178 -178
  104. package/src/server/events/bus.ts +42 -42
  105. package/src/server/events/sse-route.ts +81 -81
  106. package/src/server/events/types.ts +23 -23
  107. package/src/server/index.ts +267 -267
  108. package/src/server/origin-guard.ts +84 -84
  109. package/src/server/routes/grants-admin.ts +41 -41
  110. package/src/server/routes/grants.ts +210 -210
  111. package/src/server/routes/nat.ts +63 -63
  112. package/src/server/routes/nodes.ts +170 -170
  113. package/src/server/routes/settings.ts +123 -123
  114. package/src/server/routes/status.ts +118 -118
  115. package/src/server/routes/strands.ts +54 -54
  116. package/src/server/routes/trust-circle.ts +49 -49
  117. package/src/server/routes/update.ts +43 -43
  118. package/src/server/server.ts +122 -122
  119. package/src/server/settings-store.ts +37 -37
  120. package/src/server/static.ts +207 -207
  121. package/src/strands/__tests__/strand-service.test.ts +165 -165
  122. package/src/strands/index.ts +14 -14
  123. package/src/strands/strand-service.ts +135 -135
  124. package/src/strands/types.ts +102 -102
  125. package/src/update/__tests__/apply.test.ts +158 -158
  126. package/src/update/__tests__/manifest.test.ts +128 -128
  127. package/src/update/__tests__/release-key.test.ts +42 -42
  128. package/src/update/__tests__/sign.test.ts +78 -78
  129. package/src/update/__tests__/store.test.ts +81 -81
  130. package/src/update/__tests__/update-service.integration.test.ts +256 -256
  131. package/src/update/__tests__/version.test.ts +31 -31
  132. package/src/update/apply.ts +190 -190
  133. package/src/update/index.ts +341 -341
  134. package/src/update/release-key.ts +71 -71
  135. package/src/update/sign.ts +74 -74
  136. package/src/update/store.ts +101 -101
  137. package/src/update/types.ts +109 -109
  138. package/src/update/version.ts +80 -80
@@ -1,122 +1,122 @@
1
- /**
2
- * Fastify lifecycle for the cadre-host local UI.
3
- *
4
- * Bound to `127.0.0.1:<uiPort>` only — never `0.0.0.0`. On `EADDRINUSE`
5
- * tries the configured port and then nine consecutive ports. On total
6
- * failure the start() promise rejects with a clear message naming every
7
- * port that was attempted.
8
- *
9
- * Shutdown drains with a 5 s timeout, mirroring cadre-provider's pattern.
10
- */
11
-
12
- import Fastify, { type FastifyInstance } from 'fastify';
13
- import debug from 'debug';
14
-
15
- const log = debug('cadre:host:server');
16
-
17
- /** Hard cap on Fastify's drain phase during shutdown. */
18
- const SHUTDOWN_DRAIN_TIMEOUT_MS = 5000;
19
- /** Inclusive count of ports to try (config port + 9 alternates). */
20
- const PORT_FALLBACK_TRIES = 10;
21
- /** Loopback interface; never serve from 0.0.0.0. */
22
- const LOOPBACK_HOST = '127.0.0.1';
23
-
24
- export interface StartServerOptions {
25
- /** Preferred port. The server tries this then the next 9 on EADDRINUSE. */
26
- preferredPort: number;
27
- /**
28
- * Test override: when 0, lets the OS pick any free port (skips the
29
- * fallback loop). The returned `port` reflects the actual bound port.
30
- */
31
- forcePort?: 0;
32
- }
33
-
34
- export interface StartedServer {
35
- port: number;
36
- url: string;
37
- }
38
-
39
- export interface ShutdownOptions {
40
- /** Override the 5 s drain timeout (tests). */
41
- drainTimeoutMs?: number;
42
- }
43
-
44
- /**
45
- * Bind `app` to the loopback interface with port-fallback. Returns the
46
- * actually-bound port — the configured port may be in use.
47
- */
48
- export async function startListening(
49
- app: FastifyInstance,
50
- opts: StartServerOptions,
51
- ): Promise<StartedServer> {
52
- if (opts.forcePort === 0) {
53
- const address = await app.listen({ host: LOOPBACK_HOST, port: 0 });
54
- const port = parsePort(address);
55
- return { port, url: `http://${LOOPBACK_HOST}:${port}` };
56
- }
57
-
58
- const tried: number[] = [];
59
- let lastErr: Error | null = null;
60
- for (let i = 0; i < PORT_FALLBACK_TRIES; i++) {
61
- const port = opts.preferredPort + i;
62
- tried.push(port);
63
- try {
64
- const address = await app.listen({ host: LOOPBACK_HOST, port });
65
- const bound = parsePort(address);
66
- if (i > 0) {
67
- log('port %d in use; bound on fallback port %d', opts.preferredPort, bound);
68
- }
69
- return { port: bound, url: `http://${LOOPBACK_HOST}:${bound}` };
70
- } catch (err) {
71
- const code = (err as NodeJS.ErrnoException).code;
72
- if (code !== 'EADDRINUSE') {
73
- throw err;
74
- }
75
- lastErr = err as Error;
76
- log('port %d in use, trying next', port);
77
- }
78
- }
79
- throw new Error(
80
- `cadre-host: all ${PORT_FALLBACK_TRIES} candidate ports were in use ` +
81
- `(${tried.join(', ')}). Reconfigure uiPort in host.config.json. ` +
82
- `Last error: ${lastErr?.message ?? 'unknown'}`,
83
- );
84
- }
85
-
86
- /**
87
- * Close the server with a hard 5 s drain timeout. Idempotent — safe to call
88
- * from a SIGINT/SIGTERM handler that may fire twice.
89
- */
90
- export async function stopListening(
91
- app: FastifyInstance,
92
- opts: ShutdownOptions = {},
93
- ): Promise<void> {
94
- const drainMs = opts.drainTimeoutMs ?? SHUTDOWN_DRAIN_TIMEOUT_MS;
95
- let timer: ReturnType<typeof setTimeout> | undefined;
96
- const drain = app.close();
97
- const timeout = new Promise<'timeout'>((resolve) => {
98
- timer = setTimeout(() => resolve('timeout'), drainMs);
99
- });
100
- const outcome = await Promise.race([drain.then(() => 'drained' as const), timeout]);
101
- if (timer) clearTimeout(timer);
102
- if (outcome === 'timeout') {
103
- log('shutdown drain timeout after %dms', drainMs);
104
- }
105
- }
106
-
107
- /** Create a bare Fastify instance with the project's logging convention. */
108
- export function buildFastify(): FastifyInstance {
109
- return Fastify({
110
- // Stay quiet by default — request-level logs are noisy on a local UI.
111
- // Operators can opt in via the `debug` env var (cadre:host:*).
112
- logger: false,
113
- disableRequestLogging: true,
114
- });
115
- }
116
-
117
- function parsePort(address: string): number {
118
- // address is e.g. http://127.0.0.1:8765
119
- const m = address.match(/:(\d+)\/?$/);
120
- if (!m) throw new Error(`cadre-host: unable to parse port from listen address: ${address}`);
121
- return Number(m[1]);
122
- }
1
+ /**
2
+ * Fastify lifecycle for the cadre-host local UI.
3
+ *
4
+ * Bound to `127.0.0.1:<uiPort>` only — never `0.0.0.0`. On `EADDRINUSE`
5
+ * tries the configured port and then nine consecutive ports. On total
6
+ * failure the start() promise rejects with a clear message naming every
7
+ * port that was attempted.
8
+ *
9
+ * Shutdown drains with a 5 s timeout, mirroring cadre-provider's pattern.
10
+ */
11
+
12
+ import Fastify, { type FastifyInstance } from 'fastify';
13
+ import debug from 'debug';
14
+
15
+ const log = debug('cadre:host:server');
16
+
17
+ /** Hard cap on Fastify's drain phase during shutdown. */
18
+ const SHUTDOWN_DRAIN_TIMEOUT_MS = 5000;
19
+ /** Inclusive count of ports to try (config port + 9 alternates). */
20
+ const PORT_FALLBACK_TRIES = 10;
21
+ /** Loopback interface; never serve from 0.0.0.0. */
22
+ const LOOPBACK_HOST = '127.0.0.1';
23
+
24
+ export interface StartServerOptions {
25
+ /** Preferred port. The server tries this then the next 9 on EADDRINUSE. */
26
+ preferredPort: number;
27
+ /**
28
+ * Test override: when 0, lets the OS pick any free port (skips the
29
+ * fallback loop). The returned `port` reflects the actual bound port.
30
+ */
31
+ forcePort?: 0;
32
+ }
33
+
34
+ export interface StartedServer {
35
+ port: number;
36
+ url: string;
37
+ }
38
+
39
+ export interface ShutdownOptions {
40
+ /** Override the 5 s drain timeout (tests). */
41
+ drainTimeoutMs?: number;
42
+ }
43
+
44
+ /**
45
+ * Bind `app` to the loopback interface with port-fallback. Returns the
46
+ * actually-bound port — the configured port may be in use.
47
+ */
48
+ export async function startListening(
49
+ app: FastifyInstance,
50
+ opts: StartServerOptions,
51
+ ): Promise<StartedServer> {
52
+ if (opts.forcePort === 0) {
53
+ const address = await app.listen({ host: LOOPBACK_HOST, port: 0 });
54
+ const port = parsePort(address);
55
+ return { port, url: `http://${LOOPBACK_HOST}:${port}` };
56
+ }
57
+
58
+ const tried: number[] = [];
59
+ let lastErr: Error | null = null;
60
+ for (let i = 0; i < PORT_FALLBACK_TRIES; i++) {
61
+ const port = opts.preferredPort + i;
62
+ tried.push(port);
63
+ try {
64
+ const address = await app.listen({ host: LOOPBACK_HOST, port });
65
+ const bound = parsePort(address);
66
+ if (i > 0) {
67
+ log('port %d in use; bound on fallback port %d', opts.preferredPort, bound);
68
+ }
69
+ return { port: bound, url: `http://${LOOPBACK_HOST}:${bound}` };
70
+ } catch (err) {
71
+ const code = (err as NodeJS.ErrnoException).code;
72
+ if (code !== 'EADDRINUSE') {
73
+ throw err;
74
+ }
75
+ lastErr = err as Error;
76
+ log('port %d in use, trying next', port);
77
+ }
78
+ }
79
+ throw new Error(
80
+ `cadre-host: all ${PORT_FALLBACK_TRIES} candidate ports were in use ` +
81
+ `(${tried.join(', ')}). Reconfigure uiPort in host.config.json. ` +
82
+ `Last error: ${lastErr?.message ?? 'unknown'}`,
83
+ );
84
+ }
85
+
86
+ /**
87
+ * Close the server with a hard 5 s drain timeout. Idempotent — safe to call
88
+ * from a SIGINT/SIGTERM handler that may fire twice.
89
+ */
90
+ export async function stopListening(
91
+ app: FastifyInstance,
92
+ opts: ShutdownOptions = {},
93
+ ): Promise<void> {
94
+ const drainMs = opts.drainTimeoutMs ?? SHUTDOWN_DRAIN_TIMEOUT_MS;
95
+ let timer: ReturnType<typeof setTimeout> | undefined;
96
+ const drain = app.close();
97
+ const timeout = new Promise<'timeout'>((resolve) => {
98
+ timer = setTimeout(() => resolve('timeout'), drainMs);
99
+ });
100
+ const outcome = await Promise.race([drain.then(() => 'drained' as const), timeout]);
101
+ if (timer) clearTimeout(timer);
102
+ if (outcome === 'timeout') {
103
+ log('shutdown drain timeout after %dms', drainMs);
104
+ }
105
+ }
106
+
107
+ /** Create a bare Fastify instance with the project's logging convention. */
108
+ export function buildFastify(): FastifyInstance {
109
+ return Fastify({
110
+ // Stay quiet by default — request-level logs are noisy on a local UI.
111
+ // Operators can opt in via the `debug` env var (cadre:host:*).
112
+ logger: false,
113
+ disableRequestLogging: true,
114
+ });
115
+ }
116
+
117
+ function parsePort(address: string): number {
118
+ // address is e.g. http://127.0.0.1:8765
119
+ const m = address.match(/:(\d+)\/?$/);
120
+ if (!m) throw new Error(`cadre-host: unable to parse port from listen address: ${address}`);
121
+ return Number(m[1]);
122
+ }
@@ -1,37 +1,37 @@
1
- /**
2
- * Settings store — read-write facade around `host.config.json` for the
3
- * /api/settings route.
4
- *
5
- * The installer (`6.4.1`) owns the schema (`HostConfigFile` v2). This module
6
- * just delegates load/persist to that file's helpers; it exists so route
7
- * handlers can read/write without each one re-resolving `configPath(dataDir)`.
8
- *
9
- * PUT semantics live in routes/settings.ts; this class is purely an I/O
10
- * boundary so tests can swap it for an in-memory fake.
11
- */
12
-
13
- import { configPath } from '../installer/paths.js';
14
- import { readHostConfig, updateHostConfig, type HostConfigFile } from '../installer/config.js';
15
-
16
- export interface HostSettingsStoreOptions {
17
- /** Resolved cadre-host data dir. */
18
- dataDir: string;
19
- }
20
-
21
- export class HostSettingsStore {
22
- private readonly configPath: string;
23
-
24
- constructor(opts: HostSettingsStoreOptions) {
25
- this.configPath = configPath(opts.dataDir);
26
- }
27
-
28
- /** Read the current host.config.json (runs v1→v2 migration on first read). */
29
- read(): HostConfigFile {
30
- return readHostConfig(this.configPath);
31
- }
32
-
33
- /** Patch and persist. */
34
- update(patch: Partial<Omit<HostConfigFile, 'version'>>): HostConfigFile {
35
- return updateHostConfig(this.configPath, patch);
36
- }
37
- }
1
+ /**
2
+ * Settings store — read-write facade around `host.config.json` for the
3
+ * /api/settings route.
4
+ *
5
+ * The installer (`6.4.1`) owns the schema (`HostConfigFile` v2). This module
6
+ * just delegates load/persist to that file's helpers; it exists so route
7
+ * handlers can read/write without each one re-resolving `configPath(dataDir)`.
8
+ *
9
+ * PUT semantics live in routes/settings.ts; this class is purely an I/O
10
+ * boundary so tests can swap it for an in-memory fake.
11
+ */
12
+
13
+ import { configPath } from '../installer/paths.js';
14
+ import { readHostConfig, updateHostConfig, type HostConfigFile } from '../installer/config.js';
15
+
16
+ export interface HostSettingsStoreOptions {
17
+ /** Resolved cadre-host data dir. */
18
+ dataDir: string;
19
+ }
20
+
21
+ export class HostSettingsStore {
22
+ private readonly configPath: string;
23
+
24
+ constructor(opts: HostSettingsStoreOptions) {
25
+ this.configPath = configPath(opts.dataDir);
26
+ }
27
+
28
+ /** Read the current host.config.json (runs v1→v2 migration on first read). */
29
+ read(): HostConfigFile {
30
+ return readHostConfig(this.configPath);
31
+ }
32
+
33
+ /** Patch and persist. */
34
+ update(patch: Partial<Omit<HostConfigFile, 'version'>>): HostConfigFile {
35
+ return updateHostConfig(this.configPath, patch);
36
+ }
37
+ }