@serfab/cadre-host 0.10.0 → 0.12.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (158) hide show
  1. package/README.md +406 -296
  2. package/dist/bin/host.d.ts +11 -7
  3. package/dist/bin/host.js +40 -12
  4. package/dist/bin/host.js.map +1 -1
  5. package/dist/installer/config.d.ts +4 -4
  6. package/dist/installer/config.js +5 -39
  7. package/dist/installer/config.js.map +1 -1
  8. package/dist/installer/identity.d.ts +8 -1
  9. package/dist/installer/identity.js +8 -1
  10. package/dist/installer/identity.js.map +1 -1
  11. package/dist/orchestrator/host-process-orchestrator.d.ts +2 -2
  12. package/dist/orchestrator/host-process-orchestrator.js +9 -4
  13. package/dist/orchestrator/host-process-orchestrator.js.map +1 -1
  14. package/dist/server/settings-store.d.ts +1 -1
  15. package/dist/server/settings-store.js +5 -1
  16. package/dist/server/settings-store.js.map +1 -1
  17. package/dist/server/static.js +38 -38
  18. package/dist/ui/assets/index-C-iks41M.js.map +1 -1
  19. package/dist/ui/index.html +12 -12
  20. package/package.json +4 -4
  21. package/service/cadre-host.service.tmpl +16 -16
  22. package/service/com.serfab.cadre-host.plist.tmpl +35 -35
  23. package/service/install-service.ps1 +98 -98
  24. package/service/uninstall-service.ps1 +19 -19
  25. package/src/__tests__/build-targets.test.ts +26 -26
  26. package/src/__tests__/cli-invite.smoke.test.ts +192 -192
  27. package/src/__tests__/cli-nat.smoke.test.ts +212 -212
  28. package/src/__tests__/cli.smoke.test.ts +51 -46
  29. package/src/__tests__/global-setup.ts +56 -51
  30. package/src/__tests__/host-owner.smoke.test.ts +123 -123
  31. package/src/__tests__/orchestrator-env-scrub.test.ts +140 -140
  32. package/src/__tests__/orchestrator-node-identity.test.ts +5 -5
  33. package/src/__tests__/orchestrator-owner.test.ts +198 -198
  34. package/src/__tests__/orchestrator-pin-keys.test.ts +153 -153
  35. package/src/__tests__/orchestrator-push.test.ts +145 -145
  36. package/src/__tests__/orchestrator.test.ts +951 -951
  37. package/src/auth/__tests__/duration.test.ts +28 -28
  38. package/src/auth/__tests__/self-label.test.ts +85 -85
  39. package/src/auth/__tests__/trust-circle-store.test.ts +115 -115
  40. package/src/auth/__tests__/trust-circle.test.ts +445 -445
  41. package/src/auth/duration.ts +33 -33
  42. package/src/auth/index.ts +21 -21
  43. package/src/auth/self-label.ts +74 -74
  44. package/src/auth/trust-circle-store.ts +155 -155
  45. package/src/auth/types.ts +99 -99
  46. package/src/bin/__tests__/cli-reference.test.ts +167 -0
  47. package/src/bin/host.ts +1326 -1299
  48. package/src/donation/__tests__/donation-service.test.ts +1068 -1068
  49. package/src/donation/__tests__/donation-supervisor.test.ts +510 -510
  50. package/src/donation/__tests__/fake-orchestrator.test.ts +168 -168
  51. package/src/donation/__tests__/fake-orchestrator.ts +225 -225
  52. package/src/donation/__tests__/grant-service.test.ts +213 -213
  53. package/src/donation/__tests__/grant-store.test.ts +113 -113
  54. package/src/donation/donation-service.ts +962 -962
  55. package/src/donation/donation-store.ts +171 -171
  56. package/src/donation/donation-supervisor.ts +388 -388
  57. package/src/donation/grant-service.ts +200 -200
  58. package/src/donation/grant-store.ts +152 -152
  59. package/src/donation/index.ts +64 -64
  60. package/src/donation/types.ts +243 -243
  61. package/src/installer/__tests__/config.test.ts +134 -112
  62. package/src/installer/__tests__/identity.test.ts +34 -34
  63. package/src/installer/__tests__/paths.test.ts +47 -47
  64. package/src/installer/__tests__/service-host.test.ts +62 -62
  65. package/src/installer/__tests__/wizard.test.ts +64 -64
  66. package/src/installer/config.ts +5 -43
  67. package/src/installer/identity.ts +56 -49
  68. package/src/installer/paths.ts +109 -109
  69. package/src/installer/platform.ts +27 -27
  70. package/src/installer/service-host/index.ts +21 -21
  71. package/src/installer/service-host/template.ts +21 -21
  72. package/src/installer/wizard.ts +103 -103
  73. package/src/nat/__tests__/address-resolver.test.ts +82 -82
  74. package/src/nat/__tests__/ddns-duckdns.test.ts +83 -83
  75. package/src/nat/__tests__/ddns-updater.test.ts +253 -253
  76. package/src/nat/__tests__/external-ip.test.ts +124 -124
  77. package/src/nat/__tests__/nat-service.test.ts +18 -0
  78. package/src/nat/__tests__/nat-store.test.ts +93 -93
  79. package/src/nat/__tests__/port-mapper.test.ts +191 -191
  80. package/src/nat/__tests__/reachability.test.ts +24 -24
  81. package/src/nat/__tests__/secrets.test.ts +178 -178
  82. package/src/nat/address-resolver.ts +51 -51
  83. package/src/nat/ddns/duckdns.ts +76 -76
  84. package/src/nat/ddns/index.ts +55 -55
  85. package/src/nat/ddns/updater.ts +243 -243
  86. package/src/nat/external-ip.ts +154 -154
  87. package/src/nat/index.ts +71 -71
  88. package/src/nat/nat-service.ts +501 -501
  89. package/src/nat/nat-store.ts +154 -154
  90. package/src/nat/port-mapper.ts +329 -329
  91. package/src/nat/reachability.ts +34 -34
  92. package/src/nat/secrets/file-store.ts +130 -130
  93. package/src/nat/secrets/index.ts +112 -112
  94. package/src/nat/secrets/keytar-store.ts +67 -67
  95. package/src/nat/types.ts +159 -159
  96. package/src/orchestrator/__tests__/node-identity.test.ts +62 -62
  97. package/src/orchestrator/host-process-orchestrator.ts +9 -4
  98. package/src/orchestrator/index.ts +10 -10
  99. package/src/orchestrator/log-rotator.ts +53 -53
  100. package/src/orchestrator/node-identity.ts +40 -40
  101. package/src/orchestrator/pid-liveness.ts +24 -24
  102. package/src/orchestrator/port-allocator.ts +91 -91
  103. package/src/orchestrator/state-store.ts +90 -90
  104. package/src/orchestrator/types.ts +141 -141
  105. package/src/owner/__tests__/owner-node-client.test.ts +194 -194
  106. package/src/owner/index.ts +12 -12
  107. package/src/owner/owner-node-client.ts +259 -259
  108. package/src/push/__tests__/push.test.ts +90 -90
  109. package/src/push/index.ts +146 -146
  110. package/src/server/__tests__/bus.test.ts +38 -38
  111. package/src/server/__tests__/error-handler.test.ts +118 -118
  112. package/src/server/__tests__/grants-admin-route.test.ts +73 -73
  113. package/src/server/__tests__/grants-route.test.ts +263 -263
  114. package/src/server/__tests__/nodes-route.test.ts +259 -259
  115. package/src/server/__tests__/origin-guard.test.ts +72 -72
  116. package/src/server/__tests__/publishers.test.ts +216 -216
  117. package/src/server/__tests__/server.smoke.test.ts +253 -253
  118. package/src/server/__tests__/settings-route.test.ts +195 -194
  119. package/src/server/__tests__/sse-route.test.ts +119 -119
  120. package/src/server/__tests__/static.test.ts +145 -145
  121. package/src/server/__tests__/status-route.test.ts +134 -134
  122. package/src/server/__tests__/strands-route.test.ts +233 -233
  123. package/src/server/error-handler.ts +178 -178
  124. package/src/server/events/bus.ts +42 -42
  125. package/src/server/events/sse-route.ts +81 -81
  126. package/src/server/events/types.ts +23 -23
  127. package/src/server/index.ts +267 -267
  128. package/src/server/origin-guard.ts +84 -84
  129. package/src/server/routes/grants-admin.ts +41 -41
  130. package/src/server/routes/grants.ts +210 -210
  131. package/src/server/routes/nat.ts +63 -63
  132. package/src/server/routes/nodes.ts +170 -170
  133. package/src/server/routes/settings.ts +123 -123
  134. package/src/server/routes/status.ts +118 -118
  135. package/src/server/routes/strands.ts +54 -54
  136. package/src/server/routes/trust-circle.ts +49 -49
  137. package/src/server/routes/update.ts +43 -43
  138. package/src/server/server.ts +122 -122
  139. package/src/server/settings-store.ts +5 -1
  140. package/src/server/static.ts +207 -207
  141. package/src/strands/__tests__/strand-service.test.ts +165 -165
  142. package/src/strands/index.ts +14 -14
  143. package/src/strands/strand-service.ts +135 -135
  144. package/src/strands/types.ts +102 -102
  145. package/src/update/__tests__/apply.test.ts +158 -158
  146. package/src/update/__tests__/manifest.test.ts +128 -128
  147. package/src/update/__tests__/release-key.test.ts +42 -42
  148. package/src/update/__tests__/sign.test.ts +78 -78
  149. package/src/update/__tests__/store.test.ts +81 -81
  150. package/src/update/__tests__/update-service.integration.test.ts +256 -256
  151. package/src/update/__tests__/version.test.ts +31 -31
  152. package/src/update/apply.ts +190 -190
  153. package/src/update/index.ts +341 -341
  154. package/src/update/release-key.ts +71 -71
  155. package/src/update/sign.ts +74 -74
  156. package/src/update/store.ts +101 -101
  157. package/src/update/types.ts +109 -109
  158. package/src/update/version.ts +80 -80
@@ -1,122 +1,122 @@
1
- /**
2
- * Fastify lifecycle for the cadre-host local UI.
3
- *
4
- * Bound to `127.0.0.1:<uiPort>` only — never `0.0.0.0`. On `EADDRINUSE`
5
- * tries the configured port and then nine consecutive ports. On total
6
- * failure the start() promise rejects with a clear message naming every
7
- * port that was attempted.
8
- *
9
- * Shutdown drains with a 5 s timeout, mirroring cadre-provider's pattern.
10
- */
11
-
12
- import Fastify, { type FastifyInstance } from 'fastify';
13
- import debug from 'debug';
14
-
15
- const log = debug('cadre:host:server');
16
-
17
- /** Hard cap on Fastify's drain phase during shutdown. */
18
- const SHUTDOWN_DRAIN_TIMEOUT_MS = 5000;
19
- /** Inclusive count of ports to try (config port + 9 alternates). */
20
- const PORT_FALLBACK_TRIES = 10;
21
- /** Loopback interface; never serve from 0.0.0.0. */
22
- const LOOPBACK_HOST = '127.0.0.1';
23
-
24
- export interface StartServerOptions {
25
- /** Preferred port. The server tries this then the next 9 on EADDRINUSE. */
26
- preferredPort: number;
27
- /**
28
- * Test override: when 0, lets the OS pick any free port (skips the
29
- * fallback loop). The returned `port` reflects the actual bound port.
30
- */
31
- forcePort?: 0;
32
- }
33
-
34
- export interface StartedServer {
35
- port: number;
36
- url: string;
37
- }
38
-
39
- export interface ShutdownOptions {
40
- /** Override the 5 s drain timeout (tests). */
41
- drainTimeoutMs?: number;
42
- }
43
-
44
- /**
45
- * Bind `app` to the loopback interface with port-fallback. Returns the
46
- * actually-bound port — the configured port may be in use.
47
- */
48
- export async function startListening(
49
- app: FastifyInstance,
50
- opts: StartServerOptions,
51
- ): Promise<StartedServer> {
52
- if (opts.forcePort === 0) {
53
- const address = await app.listen({ host: LOOPBACK_HOST, port: 0 });
54
- const port = parsePort(address);
55
- return { port, url: `http://${LOOPBACK_HOST}:${port}` };
56
- }
57
-
58
- const tried: number[] = [];
59
- let lastErr: Error | null = null;
60
- for (let i = 0; i < PORT_FALLBACK_TRIES; i++) {
61
- const port = opts.preferredPort + i;
62
- tried.push(port);
63
- try {
64
- const address = await app.listen({ host: LOOPBACK_HOST, port });
65
- const bound = parsePort(address);
66
- if (i > 0) {
67
- log('port %d in use; bound on fallback port %d', opts.preferredPort, bound);
68
- }
69
- return { port: bound, url: `http://${LOOPBACK_HOST}:${bound}` };
70
- } catch (err) {
71
- const code = (err as NodeJS.ErrnoException).code;
72
- if (code !== 'EADDRINUSE') {
73
- throw err;
74
- }
75
- lastErr = err as Error;
76
- log('port %d in use, trying next', port);
77
- }
78
- }
79
- throw new Error(
80
- `cadre-host: all ${PORT_FALLBACK_TRIES} candidate ports were in use ` +
81
- `(${tried.join(', ')}). Reconfigure uiPort in host.config.json. ` +
82
- `Last error: ${lastErr?.message ?? 'unknown'}`,
83
- );
84
- }
85
-
86
- /**
87
- * Close the server with a hard 5 s drain timeout. Idempotent — safe to call
88
- * from a SIGINT/SIGTERM handler that may fire twice.
89
- */
90
- export async function stopListening(
91
- app: FastifyInstance,
92
- opts: ShutdownOptions = {},
93
- ): Promise<void> {
94
- const drainMs = opts.drainTimeoutMs ?? SHUTDOWN_DRAIN_TIMEOUT_MS;
95
- let timer: ReturnType<typeof setTimeout> | undefined;
96
- const drain = app.close();
97
- const timeout = new Promise<'timeout'>((resolve) => {
98
- timer = setTimeout(() => resolve('timeout'), drainMs);
99
- });
100
- const outcome = await Promise.race([drain.then(() => 'drained' as const), timeout]);
101
- if (timer) clearTimeout(timer);
102
- if (outcome === 'timeout') {
103
- log('shutdown drain timeout after %dms', drainMs);
104
- }
105
- }
106
-
107
- /** Create a bare Fastify instance with the project's logging convention. */
108
- export function buildFastify(): FastifyInstance {
109
- return Fastify({
110
- // Stay quiet by default — request-level logs are noisy on a local UI.
111
- // Operators can opt in via the `debug` env var (cadre:host:*).
112
- logger: false,
113
- disableRequestLogging: true,
114
- });
115
- }
116
-
117
- function parsePort(address: string): number {
118
- // address is e.g. http://127.0.0.1:8765
119
- const m = address.match(/:(\d+)\/?$/);
120
- if (!m) throw new Error(`cadre-host: unable to parse port from listen address: ${address}`);
121
- return Number(m[1]);
122
- }
1
+ /**
2
+ * Fastify lifecycle for the cadre-host local UI.
3
+ *
4
+ * Bound to `127.0.0.1:<uiPort>` only — never `0.0.0.0`. On `EADDRINUSE`
5
+ * tries the configured port and then nine consecutive ports. On total
6
+ * failure the start() promise rejects with a clear message naming every
7
+ * port that was attempted.
8
+ *
9
+ * Shutdown drains with a 5 s timeout, mirroring cadre-provider's pattern.
10
+ */
11
+
12
+ import Fastify, { type FastifyInstance } from 'fastify';
13
+ import debug from 'debug';
14
+
15
+ const log = debug('cadre:host:server');
16
+
17
+ /** Hard cap on Fastify's drain phase during shutdown. */
18
+ const SHUTDOWN_DRAIN_TIMEOUT_MS = 5000;
19
+ /** Inclusive count of ports to try (config port + 9 alternates). */
20
+ const PORT_FALLBACK_TRIES = 10;
21
+ /** Loopback interface; never serve from 0.0.0.0. */
22
+ const LOOPBACK_HOST = '127.0.0.1';
23
+
24
+ export interface StartServerOptions {
25
+ /** Preferred port. The server tries this then the next 9 on EADDRINUSE. */
26
+ preferredPort: number;
27
+ /**
28
+ * Test override: when 0, lets the OS pick any free port (skips the
29
+ * fallback loop). The returned `port` reflects the actual bound port.
30
+ */
31
+ forcePort?: 0;
32
+ }
33
+
34
+ export interface StartedServer {
35
+ port: number;
36
+ url: string;
37
+ }
38
+
39
+ export interface ShutdownOptions {
40
+ /** Override the 5 s drain timeout (tests). */
41
+ drainTimeoutMs?: number;
42
+ }
43
+
44
+ /**
45
+ * Bind `app` to the loopback interface with port-fallback. Returns the
46
+ * actually-bound port — the configured port may be in use.
47
+ */
48
+ export async function startListening(
49
+ app: FastifyInstance,
50
+ opts: StartServerOptions,
51
+ ): Promise<StartedServer> {
52
+ if (opts.forcePort === 0) {
53
+ const address = await app.listen({ host: LOOPBACK_HOST, port: 0 });
54
+ const port = parsePort(address);
55
+ return { port, url: `http://${LOOPBACK_HOST}:${port}` };
56
+ }
57
+
58
+ const tried: number[] = [];
59
+ let lastErr: Error | null = null;
60
+ for (let i = 0; i < PORT_FALLBACK_TRIES; i++) {
61
+ const port = opts.preferredPort + i;
62
+ tried.push(port);
63
+ try {
64
+ const address = await app.listen({ host: LOOPBACK_HOST, port });
65
+ const bound = parsePort(address);
66
+ if (i > 0) {
67
+ log('port %d in use; bound on fallback port %d', opts.preferredPort, bound);
68
+ }
69
+ return { port: bound, url: `http://${LOOPBACK_HOST}:${bound}` };
70
+ } catch (err) {
71
+ const code = (err as NodeJS.ErrnoException).code;
72
+ if (code !== 'EADDRINUSE') {
73
+ throw err;
74
+ }
75
+ lastErr = err as Error;
76
+ log('port %d in use, trying next', port);
77
+ }
78
+ }
79
+ throw new Error(
80
+ `cadre-host: all ${PORT_FALLBACK_TRIES} candidate ports were in use ` +
81
+ `(${tried.join(', ')}). Reconfigure uiPort in host.config.json. ` +
82
+ `Last error: ${lastErr?.message ?? 'unknown'}`,
83
+ );
84
+ }
85
+
86
+ /**
87
+ * Close the server with a hard 5 s drain timeout. Idempotent — safe to call
88
+ * from a SIGINT/SIGTERM handler that may fire twice.
89
+ */
90
+ export async function stopListening(
91
+ app: FastifyInstance,
92
+ opts: ShutdownOptions = {},
93
+ ): Promise<void> {
94
+ const drainMs = opts.drainTimeoutMs ?? SHUTDOWN_DRAIN_TIMEOUT_MS;
95
+ let timer: ReturnType<typeof setTimeout> | undefined;
96
+ const drain = app.close();
97
+ const timeout = new Promise<'timeout'>((resolve) => {
98
+ timer = setTimeout(() => resolve('timeout'), drainMs);
99
+ });
100
+ const outcome = await Promise.race([drain.then(() => 'drained' as const), timeout]);
101
+ if (timer) clearTimeout(timer);
102
+ if (outcome === 'timeout') {
103
+ log('shutdown drain timeout after %dms', drainMs);
104
+ }
105
+ }
106
+
107
+ /** Create a bare Fastify instance with the project's logging convention. */
108
+ export function buildFastify(): FastifyInstance {
109
+ return Fastify({
110
+ // Stay quiet by default — request-level logs are noisy on a local UI.
111
+ // Operators can opt in via the `debug` env var (cadre:host:*).
112
+ logger: false,
113
+ disableRequestLogging: true,
114
+ });
115
+ }
116
+
117
+ function parsePort(address: string): number {
118
+ // address is e.g. http://127.0.0.1:8765
119
+ const m = address.match(/:(\d+)\/?$/);
120
+ if (!m) throw new Error(`cadre-host: unable to parse port from listen address: ${address}`);
121
+ return Number(m[1]);
122
+ }
@@ -25,7 +25,11 @@ export class HostSettingsStore {
25
25
  this.configPath = configPath(opts.dataDir);
26
26
  }
27
27
 
28
- /** Read the current host.config.json (runs v1→v2 migration on first read). */
28
+ // NOTE: a bad config (absent, malformed, wrong version) throws a plain Error, so
29
+ // /api/settings answers 500 code "internal" with the read message passed through.
30
+ // Fine while the UI just surfaces the text; if it ever needs to tell "your config
31
+ // file is unreadable" apart from a genuine server bug, give this a typed error.
32
+ /** Read the current host.config.json. Throws if absent, malformed, or not version 2. */
29
33
  read(): HostConfigFile {
30
34
  return readHostConfig(this.configPath);
31
35
  }