@serfab/cadre-host 0.10.0 → 0.12.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (158) hide show
  1. package/README.md +406 -296
  2. package/dist/bin/host.d.ts +11 -7
  3. package/dist/bin/host.js +40 -12
  4. package/dist/bin/host.js.map +1 -1
  5. package/dist/installer/config.d.ts +4 -4
  6. package/dist/installer/config.js +5 -39
  7. package/dist/installer/config.js.map +1 -1
  8. package/dist/installer/identity.d.ts +8 -1
  9. package/dist/installer/identity.js +8 -1
  10. package/dist/installer/identity.js.map +1 -1
  11. package/dist/orchestrator/host-process-orchestrator.d.ts +2 -2
  12. package/dist/orchestrator/host-process-orchestrator.js +9 -4
  13. package/dist/orchestrator/host-process-orchestrator.js.map +1 -1
  14. package/dist/server/settings-store.d.ts +1 -1
  15. package/dist/server/settings-store.js +5 -1
  16. package/dist/server/settings-store.js.map +1 -1
  17. package/dist/server/static.js +38 -38
  18. package/dist/ui/assets/index-C-iks41M.js.map +1 -1
  19. package/dist/ui/index.html +12 -12
  20. package/package.json +4 -4
  21. package/service/cadre-host.service.tmpl +16 -16
  22. package/service/com.serfab.cadre-host.plist.tmpl +35 -35
  23. package/service/install-service.ps1 +98 -98
  24. package/service/uninstall-service.ps1 +19 -19
  25. package/src/__tests__/build-targets.test.ts +26 -26
  26. package/src/__tests__/cli-invite.smoke.test.ts +192 -192
  27. package/src/__tests__/cli-nat.smoke.test.ts +212 -212
  28. package/src/__tests__/cli.smoke.test.ts +51 -46
  29. package/src/__tests__/global-setup.ts +56 -51
  30. package/src/__tests__/host-owner.smoke.test.ts +123 -123
  31. package/src/__tests__/orchestrator-env-scrub.test.ts +140 -140
  32. package/src/__tests__/orchestrator-node-identity.test.ts +5 -5
  33. package/src/__tests__/orchestrator-owner.test.ts +198 -198
  34. package/src/__tests__/orchestrator-pin-keys.test.ts +153 -153
  35. package/src/__tests__/orchestrator-push.test.ts +145 -145
  36. package/src/__tests__/orchestrator.test.ts +951 -951
  37. package/src/auth/__tests__/duration.test.ts +28 -28
  38. package/src/auth/__tests__/self-label.test.ts +85 -85
  39. package/src/auth/__tests__/trust-circle-store.test.ts +115 -115
  40. package/src/auth/__tests__/trust-circle.test.ts +445 -445
  41. package/src/auth/duration.ts +33 -33
  42. package/src/auth/index.ts +21 -21
  43. package/src/auth/self-label.ts +74 -74
  44. package/src/auth/trust-circle-store.ts +155 -155
  45. package/src/auth/types.ts +99 -99
  46. package/src/bin/__tests__/cli-reference.test.ts +167 -0
  47. package/src/bin/host.ts +1326 -1299
  48. package/src/donation/__tests__/donation-service.test.ts +1068 -1068
  49. package/src/donation/__tests__/donation-supervisor.test.ts +510 -510
  50. package/src/donation/__tests__/fake-orchestrator.test.ts +168 -168
  51. package/src/donation/__tests__/fake-orchestrator.ts +225 -225
  52. package/src/donation/__tests__/grant-service.test.ts +213 -213
  53. package/src/donation/__tests__/grant-store.test.ts +113 -113
  54. package/src/donation/donation-service.ts +962 -962
  55. package/src/donation/donation-store.ts +171 -171
  56. package/src/donation/donation-supervisor.ts +388 -388
  57. package/src/donation/grant-service.ts +200 -200
  58. package/src/donation/grant-store.ts +152 -152
  59. package/src/donation/index.ts +64 -64
  60. package/src/donation/types.ts +243 -243
  61. package/src/installer/__tests__/config.test.ts +134 -112
  62. package/src/installer/__tests__/identity.test.ts +34 -34
  63. package/src/installer/__tests__/paths.test.ts +47 -47
  64. package/src/installer/__tests__/service-host.test.ts +62 -62
  65. package/src/installer/__tests__/wizard.test.ts +64 -64
  66. package/src/installer/config.ts +5 -43
  67. package/src/installer/identity.ts +56 -49
  68. package/src/installer/paths.ts +109 -109
  69. package/src/installer/platform.ts +27 -27
  70. package/src/installer/service-host/index.ts +21 -21
  71. package/src/installer/service-host/template.ts +21 -21
  72. package/src/installer/wizard.ts +103 -103
  73. package/src/nat/__tests__/address-resolver.test.ts +82 -82
  74. package/src/nat/__tests__/ddns-duckdns.test.ts +83 -83
  75. package/src/nat/__tests__/ddns-updater.test.ts +253 -253
  76. package/src/nat/__tests__/external-ip.test.ts +124 -124
  77. package/src/nat/__tests__/nat-service.test.ts +18 -0
  78. package/src/nat/__tests__/nat-store.test.ts +93 -93
  79. package/src/nat/__tests__/port-mapper.test.ts +191 -191
  80. package/src/nat/__tests__/reachability.test.ts +24 -24
  81. package/src/nat/__tests__/secrets.test.ts +178 -178
  82. package/src/nat/address-resolver.ts +51 -51
  83. package/src/nat/ddns/duckdns.ts +76 -76
  84. package/src/nat/ddns/index.ts +55 -55
  85. package/src/nat/ddns/updater.ts +243 -243
  86. package/src/nat/external-ip.ts +154 -154
  87. package/src/nat/index.ts +71 -71
  88. package/src/nat/nat-service.ts +501 -501
  89. package/src/nat/nat-store.ts +154 -154
  90. package/src/nat/port-mapper.ts +329 -329
  91. package/src/nat/reachability.ts +34 -34
  92. package/src/nat/secrets/file-store.ts +130 -130
  93. package/src/nat/secrets/index.ts +112 -112
  94. package/src/nat/secrets/keytar-store.ts +67 -67
  95. package/src/nat/types.ts +159 -159
  96. package/src/orchestrator/__tests__/node-identity.test.ts +62 -62
  97. package/src/orchestrator/host-process-orchestrator.ts +9 -4
  98. package/src/orchestrator/index.ts +10 -10
  99. package/src/orchestrator/log-rotator.ts +53 -53
  100. package/src/orchestrator/node-identity.ts +40 -40
  101. package/src/orchestrator/pid-liveness.ts +24 -24
  102. package/src/orchestrator/port-allocator.ts +91 -91
  103. package/src/orchestrator/state-store.ts +90 -90
  104. package/src/orchestrator/types.ts +141 -141
  105. package/src/owner/__tests__/owner-node-client.test.ts +194 -194
  106. package/src/owner/index.ts +12 -12
  107. package/src/owner/owner-node-client.ts +259 -259
  108. package/src/push/__tests__/push.test.ts +90 -90
  109. package/src/push/index.ts +146 -146
  110. package/src/server/__tests__/bus.test.ts +38 -38
  111. package/src/server/__tests__/error-handler.test.ts +118 -118
  112. package/src/server/__tests__/grants-admin-route.test.ts +73 -73
  113. package/src/server/__tests__/grants-route.test.ts +263 -263
  114. package/src/server/__tests__/nodes-route.test.ts +259 -259
  115. package/src/server/__tests__/origin-guard.test.ts +72 -72
  116. package/src/server/__tests__/publishers.test.ts +216 -216
  117. package/src/server/__tests__/server.smoke.test.ts +253 -253
  118. package/src/server/__tests__/settings-route.test.ts +195 -194
  119. package/src/server/__tests__/sse-route.test.ts +119 -119
  120. package/src/server/__tests__/static.test.ts +145 -145
  121. package/src/server/__tests__/status-route.test.ts +134 -134
  122. package/src/server/__tests__/strands-route.test.ts +233 -233
  123. package/src/server/error-handler.ts +178 -178
  124. package/src/server/events/bus.ts +42 -42
  125. package/src/server/events/sse-route.ts +81 -81
  126. package/src/server/events/types.ts +23 -23
  127. package/src/server/index.ts +267 -267
  128. package/src/server/origin-guard.ts +84 -84
  129. package/src/server/routes/grants-admin.ts +41 -41
  130. package/src/server/routes/grants.ts +210 -210
  131. package/src/server/routes/nat.ts +63 -63
  132. package/src/server/routes/nodes.ts +170 -170
  133. package/src/server/routes/settings.ts +123 -123
  134. package/src/server/routes/status.ts +118 -118
  135. package/src/server/routes/strands.ts +54 -54
  136. package/src/server/routes/trust-circle.ts +49 -49
  137. package/src/server/routes/update.ts +43 -43
  138. package/src/server/server.ts +122 -122
  139. package/src/server/settings-store.ts +5 -1
  140. package/src/server/static.ts +207 -207
  141. package/src/strands/__tests__/strand-service.test.ts +165 -165
  142. package/src/strands/index.ts +14 -14
  143. package/src/strands/strand-service.ts +135 -135
  144. package/src/strands/types.ts +102 -102
  145. package/src/update/__tests__/apply.test.ts +158 -158
  146. package/src/update/__tests__/manifest.test.ts +128 -128
  147. package/src/update/__tests__/release-key.test.ts +42 -42
  148. package/src/update/__tests__/sign.test.ts +78 -78
  149. package/src/update/__tests__/store.test.ts +81 -81
  150. package/src/update/__tests__/update-service.integration.test.ts +256 -256
  151. package/src/update/__tests__/version.test.ts +31 -31
  152. package/src/update/apply.ts +190 -190
  153. package/src/update/index.ts +341 -341
  154. package/src/update/release-key.ts +71 -71
  155. package/src/update/sign.ts +74 -74
  156. package/src/update/store.ts +101 -101
  157. package/src/update/types.ts +109 -109
  158. package/src/update/version.ts +80 -80
@@ -1,192 +1,192 @@
1
- /**
2
- * CLI smoke test for the `invite` subcommand. Spawns a stub HTTP server
3
- * playing the role of cadre-host's management API and asserts the CLI:
4
- * - POSTs the expected body to /auth/invites
5
- * - Prints the encodedInvite on stdout
6
- * - Exits 0 on success / non-zero on connect failure
7
- *
8
- * Relies on `yarn build` having produced dist/bin/host.js.
9
- */
10
-
11
- import { spawn } from 'node:child_process';
12
- import { createServer, type IncomingMessage, type Server, type ServerResponse } from 'node:http';
13
- import { existsSync } from 'node:fs';
14
- import { fileURLToPath } from 'node:url';
15
- import { dirname, resolve } from 'node:path';
16
- import { afterEach, beforeEach, describe, expect, it, vi } from 'vitest';
17
-
18
- const here = dirname(fileURLToPath(import.meta.url));
19
- const binPath = resolve(here, '../../dist/bin/host.js');
20
-
21
- // These smoke tests cold-start the built CLI as a child process (Node boot +,
22
- // for some, an HTTP server). That comfortably exceeds vitest's 5s default under
23
- // heavy parallel load, so give the subprocess generous headroom.
24
- vi.setConfig({ testTimeout: 30000 });
25
-
26
- interface StubServer {
27
- server: Server;
28
- port: number;
29
- requests: Array<{ method: string; url: string; body: string }>;
30
- setResponse(handler: (req: IncomingMessage, res: ServerResponse) => void): void;
31
- }
32
-
33
- async function startStub(): Promise<StubServer> {
34
- const requests: StubServer['requests'] = [];
35
- let handler: (req: IncomingMessage, res: ServerResponse) => void = (_req, res) => {
36
- res.statusCode = 200;
37
- res.setHeader('content-type', 'application/json');
38
- res.end(JSON.stringify({
39
- encodedInvite: 'fake-encoded-invite',
40
- token: 'fake-token',
41
- expiresAt: new Date(Date.now() + 60_000).toISOString(),
42
- }));
43
- };
44
-
45
- const server = createServer((req, res) => {
46
- const chunks: Buffer[] = [];
47
- req.on('data', (chunk: Buffer) => chunks.push(chunk));
48
- req.on('end', () => {
49
- requests.push({ method: req.method ?? '', url: req.url ?? '', body: Buffer.concat(chunks).toString('utf8') });
50
- handler(req, res);
51
- });
52
- });
53
-
54
- await new Promise<void>((resolveStart) => server.listen(0, '127.0.0.1', () => resolveStart()));
55
- const addr = server.address();
56
- const port = typeof addr === 'object' && addr ? addr.port : 0;
57
- return {
58
- server,
59
- port,
60
- requests,
61
- setResponse: (h) => { handler = h; },
62
- };
63
- }
64
-
65
- function runCli(args: string[]): Promise<{ code: number; stdout: string; stderr: string }> {
66
- return new Promise((resolveRun) => {
67
- const child = spawn(process.execPath, [binPath, ...args], { stdio: ['ignore', 'pipe', 'pipe'] });
68
- let stdout = '';
69
- let stderr = '';
70
- child.stdout.on('data', (chunk: Buffer) => { stdout += chunk.toString('utf8'); });
71
- child.stderr.on('data', (chunk: Buffer) => { stderr += chunk.toString('utf8'); });
72
- child.on('close', (code) => resolveRun({ code: code ?? -1, stdout, stderr }));
73
- });
74
- }
75
-
76
- let stub: StubServer;
77
-
78
- beforeEach(async () => {
79
- if (!existsSync(binPath)) {
80
- throw new Error(`cadre-host bin not built at ${binPath}; run \`yarn build\` first`);
81
- }
82
- stub = await startStub();
83
- });
84
-
85
- afterEach(async () => {
86
- await new Promise<void>((resolveClose) => stub.server.close(() => resolveClose()));
87
- });
88
-
89
- describe('cadre-host invite CLI', () => {
90
- it('POSTs to /auth/invites with label + ttlMs and prints encoded invite', async () => {
91
- const result = await runCli(['invite', "Mom's phone", '--ttl', '12h', '--port', String(stub.port)]);
92
-
93
- expect(result.code).toBe(0);
94
- expect(result.stdout.trim()).toBe('fake-encoded-invite');
95
- expect(stub.requests).toHaveLength(1);
96
- expect(stub.requests[0]!.method).toBe('POST');
97
- expect(stub.requests[0]!.url).toBe('/auth/invites');
98
- const body = JSON.parse(stub.requests[0]!.body);
99
- expect(body.label).toBe("Mom's phone");
100
- expect(body.ttlMs).toBe(12 * 60 * 60 * 1000);
101
- });
102
-
103
- it('exits non-zero when cadre-host returns an error', async () => {
104
- stub.setResponse((_req, res) => {
105
- res.statusCode = 500;
106
- res.end('boom');
107
- });
108
- const result = await runCli(['invite', 'Test', '--port', String(stub.port)]);
109
- expect(result.code).not.toBe(0);
110
- expect(result.stderr).toContain('500');
111
- });
112
-
113
- it('exits 2 (no service) when cadre-host is not reachable', async () => {
114
- // Use a port the stub server occupied; close it first so connections fail.
115
- const port = stub.port;
116
- await new Promise<void>((resolveClose) => stub.server.close(() => resolveClose()));
117
- const result = await runCli(['invite', 'Test', '--port', String(port)]);
118
- expect(result.code).toBe(2);
119
- expect(result.stderr).toMatch(/cadre-host start|Failed to reach/);
120
- });
121
-
122
- it('rejects invalid --ttl', async () => {
123
- const result = await runCli(['invite', 'Test', '--ttl', 'eternity', '--port', String(stub.port)]);
124
- expect(result.code).toBe(1);
125
- expect(result.stderr).toMatch(/Invalid --ttl/);
126
- });
127
- });
128
-
129
- describe('cadre-host trust list CLI', () => {
130
- it('renders members and pending invites', async () => {
131
- stub.setResponse((_req, res) => {
132
- res.statusCode = 200;
133
- res.setHeader('content-type', 'application/json');
134
- res.end(JSON.stringify({
135
- members: [
136
- { peerId: '12D3KooWAlice', label: 'Alice', addedAt: 't1' },
137
- { peerId: '12D3KooWHost', label: 'Host', addedAt: 't2', self: true },
138
- ],
139
- pending: [
140
- { token: 'tok1', label: 'Mom', createdAt: 't3', expiresAt: 't4' },
141
- ],
142
- }));
143
- });
144
-
145
- const result = await runCli(['trust', 'list', '--port', String(stub.port)]);
146
- expect(result.code).toBe(0);
147
- expect(result.stdout).toContain('12D3KooWAlice');
148
- expect(result.stdout).toContain('Alice');
149
- expect(result.stdout).toContain('[self]');
150
- expect(result.stdout).toContain('tok1');
151
- expect(result.stdout).toContain('Mom');
152
- });
153
- });
154
-
155
- describe('cadre-host trust revoke CLI', () => {
156
- it('DELETEs /auth/invites/<token> by default', async () => {
157
- stub.setResponse((_req, res) => {
158
- res.statusCode = 204;
159
- res.end();
160
- });
161
- const result = await runCli(['trust', 'revoke', 'some-token', '--port', String(stub.port)]);
162
- expect(result.code).toBe(0);
163
- expect(stub.requests[0]!.method).toBe('DELETE');
164
- expect(stub.requests[0]!.url).toBe('/auth/invites/some-token');
165
- });
166
-
167
- it('DELETEs /auth/members/<peerId> when id looks like a peerId', async () => {
168
- stub.setResponse((_req, res) => {
169
- res.statusCode = 204;
170
- res.end();
171
- });
172
- const result = await runCli(['trust', 'revoke', '12D3KooWAlice', '--port', String(stub.port)]);
173
- expect(result.code).toBe(0);
174
- expect(stub.requests[0]!.url).toBe('/auth/members/12D3KooWAlice');
175
- });
176
-
177
- it('treats secp256k1 peer IDs (16Uiu2HAm…) as members', async () => {
178
- stub.setResponse((_req, res) => {
179
- res.statusCode = 204;
180
- res.end();
181
- });
182
- const result = await runCli(['trust', 'revoke', '16Uiu2HAmExample', '--port', String(stub.port)]);
183
- expect(result.code).toBe(0);
184
- expect(stub.requests[0]!.url).toBe('/auth/members/16Uiu2HAmExample');
185
- });
186
-
187
- it('rejects invalid --port', async () => {
188
- const result = await runCli(['trust', 'revoke', 'some-token', '--port', 'garbage']);
189
- expect(result.code).toBe(1);
190
- expect(result.stderr).toMatch(/Invalid --port/);
191
- });
192
- });
1
+ /**
2
+ * CLI smoke test for the `invite` subcommand. Spawns a stub HTTP server
3
+ * playing the role of cadre-host's management API and asserts the CLI:
4
+ * - POSTs the expected body to /auth/invites
5
+ * - Prints the encodedInvite on stdout
6
+ * - Exits 0 on success / non-zero on connect failure
7
+ *
8
+ * Relies on `yarn build` having produced dist/bin/host.js.
9
+ */
10
+
11
+ import { spawn } from 'node:child_process';
12
+ import { createServer, type IncomingMessage, type Server, type ServerResponse } from 'node:http';
13
+ import { existsSync } from 'node:fs';
14
+ import { fileURLToPath } from 'node:url';
15
+ import { dirname, resolve } from 'node:path';
16
+ import { afterEach, beforeEach, describe, expect, it, vi } from 'vitest';
17
+
18
+ const here = dirname(fileURLToPath(import.meta.url));
19
+ const binPath = resolve(here, '../../dist/bin/host.js');
20
+
21
+ // These smoke tests cold-start the built CLI as a child process (Node boot +,
22
+ // for some, an HTTP server). That comfortably exceeds vitest's 5s default under
23
+ // heavy parallel load, so give the subprocess generous headroom.
24
+ vi.setConfig({ testTimeout: 30000 });
25
+
26
+ interface StubServer {
27
+ server: Server;
28
+ port: number;
29
+ requests: Array<{ method: string; url: string; body: string }>;
30
+ setResponse(handler: (req: IncomingMessage, res: ServerResponse) => void): void;
31
+ }
32
+
33
+ async function startStub(): Promise<StubServer> {
34
+ const requests: StubServer['requests'] = [];
35
+ let handler: (req: IncomingMessage, res: ServerResponse) => void = (_req, res) => {
36
+ res.statusCode = 200;
37
+ res.setHeader('content-type', 'application/json');
38
+ res.end(JSON.stringify({
39
+ encodedInvite: 'fake-encoded-invite',
40
+ token: 'fake-token',
41
+ expiresAt: new Date(Date.now() + 60_000).toISOString(),
42
+ }));
43
+ };
44
+
45
+ const server = createServer((req, res) => {
46
+ const chunks: Buffer[] = [];
47
+ req.on('data', (chunk: Buffer) => chunks.push(chunk));
48
+ req.on('end', () => {
49
+ requests.push({ method: req.method ?? '', url: req.url ?? '', body: Buffer.concat(chunks).toString('utf8') });
50
+ handler(req, res);
51
+ });
52
+ });
53
+
54
+ await new Promise<void>((resolveStart) => server.listen(0, '127.0.0.1', () => resolveStart()));
55
+ const addr = server.address();
56
+ const port = typeof addr === 'object' && addr ? addr.port : 0;
57
+ return {
58
+ server,
59
+ port,
60
+ requests,
61
+ setResponse: (h) => { handler = h; },
62
+ };
63
+ }
64
+
65
+ function runCli(args: string[]): Promise<{ code: number; stdout: string; stderr: string }> {
66
+ return new Promise((resolveRun) => {
67
+ const child = spawn(process.execPath, [binPath, ...args], { stdio: ['ignore', 'pipe', 'pipe'] });
68
+ let stdout = '';
69
+ let stderr = '';
70
+ child.stdout.on('data', (chunk: Buffer) => { stdout += chunk.toString('utf8'); });
71
+ child.stderr.on('data', (chunk: Buffer) => { stderr += chunk.toString('utf8'); });
72
+ child.on('close', (code) => resolveRun({ code: code ?? -1, stdout, stderr }));
73
+ });
74
+ }
75
+
76
+ let stub: StubServer;
77
+
78
+ beforeEach(async () => {
79
+ if (!existsSync(binPath)) {
80
+ throw new Error(`cadre-host bin not built at ${binPath}; run \`yarn build\` first`);
81
+ }
82
+ stub = await startStub();
83
+ });
84
+
85
+ afterEach(async () => {
86
+ await new Promise<void>((resolveClose) => stub.server.close(() => resolveClose()));
87
+ });
88
+
89
+ describe('cadre-host invite CLI', () => {
90
+ it('POSTs to /auth/invites with label + ttlMs and prints encoded invite', async () => {
91
+ const result = await runCli(['invite', "Mom's phone", '--ttl', '12h', '--port', String(stub.port)]);
92
+
93
+ expect(result.code).toBe(0);
94
+ expect(result.stdout.trim()).toBe('fake-encoded-invite');
95
+ expect(stub.requests).toHaveLength(1);
96
+ expect(stub.requests[0]!.method).toBe('POST');
97
+ expect(stub.requests[0]!.url).toBe('/auth/invites');
98
+ const body = JSON.parse(stub.requests[0]!.body);
99
+ expect(body.label).toBe("Mom's phone");
100
+ expect(body.ttlMs).toBe(12 * 60 * 60 * 1000);
101
+ });
102
+
103
+ it('exits non-zero when cadre-host returns an error', async () => {
104
+ stub.setResponse((_req, res) => {
105
+ res.statusCode = 500;
106
+ res.end('boom');
107
+ });
108
+ const result = await runCli(['invite', 'Test', '--port', String(stub.port)]);
109
+ expect(result.code).not.toBe(0);
110
+ expect(result.stderr).toContain('500');
111
+ });
112
+
113
+ it('exits 2 (no service) when cadre-host is not reachable', async () => {
114
+ // Use a port the stub server occupied; close it first so connections fail.
115
+ const port = stub.port;
116
+ await new Promise<void>((resolveClose) => stub.server.close(() => resolveClose()));
117
+ const result = await runCli(['invite', 'Test', '--port', String(port)]);
118
+ expect(result.code).toBe(2);
119
+ expect(result.stderr).toMatch(/cadre-host start|Failed to reach/);
120
+ });
121
+
122
+ it('rejects invalid --ttl', async () => {
123
+ const result = await runCli(['invite', 'Test', '--ttl', 'eternity', '--port', String(stub.port)]);
124
+ expect(result.code).toBe(1);
125
+ expect(result.stderr).toMatch(/Invalid --ttl/);
126
+ });
127
+ });
128
+
129
+ describe('cadre-host trust list CLI', () => {
130
+ it('renders members and pending invites', async () => {
131
+ stub.setResponse((_req, res) => {
132
+ res.statusCode = 200;
133
+ res.setHeader('content-type', 'application/json');
134
+ res.end(JSON.stringify({
135
+ members: [
136
+ { peerId: '12D3KooWAlice', label: 'Alice', addedAt: 't1' },
137
+ { peerId: '12D3KooWHost', label: 'Host', addedAt: 't2', self: true },
138
+ ],
139
+ pending: [
140
+ { token: 'tok1', label: 'Mom', createdAt: 't3', expiresAt: 't4' },
141
+ ],
142
+ }));
143
+ });
144
+
145
+ const result = await runCli(['trust', 'list', '--port', String(stub.port)]);
146
+ expect(result.code).toBe(0);
147
+ expect(result.stdout).toContain('12D3KooWAlice');
148
+ expect(result.stdout).toContain('Alice');
149
+ expect(result.stdout).toContain('[self]');
150
+ expect(result.stdout).toContain('tok1');
151
+ expect(result.stdout).toContain('Mom');
152
+ });
153
+ });
154
+
155
+ describe('cadre-host trust revoke CLI', () => {
156
+ it('DELETEs /auth/invites/<token> by default', async () => {
157
+ stub.setResponse((_req, res) => {
158
+ res.statusCode = 204;
159
+ res.end();
160
+ });
161
+ const result = await runCli(['trust', 'revoke', 'some-token', '--port', String(stub.port)]);
162
+ expect(result.code).toBe(0);
163
+ expect(stub.requests[0]!.method).toBe('DELETE');
164
+ expect(stub.requests[0]!.url).toBe('/auth/invites/some-token');
165
+ });
166
+
167
+ it('DELETEs /auth/members/<peerId> when id looks like a peerId', async () => {
168
+ stub.setResponse((_req, res) => {
169
+ res.statusCode = 204;
170
+ res.end();
171
+ });
172
+ const result = await runCli(['trust', 'revoke', '12D3KooWAlice', '--port', String(stub.port)]);
173
+ expect(result.code).toBe(0);
174
+ expect(stub.requests[0]!.url).toBe('/auth/members/12D3KooWAlice');
175
+ });
176
+
177
+ it('treats secp256k1 peer IDs (16Uiu2HAm…) as members', async () => {
178
+ stub.setResponse((_req, res) => {
179
+ res.statusCode = 204;
180
+ res.end();
181
+ });
182
+ const result = await runCli(['trust', 'revoke', '16Uiu2HAmExample', '--port', String(stub.port)]);
183
+ expect(result.code).toBe(0);
184
+ expect(stub.requests[0]!.url).toBe('/auth/members/16Uiu2HAmExample');
185
+ });
186
+
187
+ it('rejects invalid --port', async () => {
188
+ const result = await runCli(['trust', 'revoke', 'some-token', '--port', 'garbage']);
189
+ expect(result.code).toBe(1);
190
+ expect(result.stderr).toMatch(/Invalid --port/);
191
+ });
192
+ });