@serfab/cadre-host 0.10.0 → 0.12.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +406 -296
- package/dist/bin/host.d.ts +11 -7
- package/dist/bin/host.js +40 -12
- package/dist/bin/host.js.map +1 -1
- package/dist/installer/config.d.ts +4 -4
- package/dist/installer/config.js +5 -39
- package/dist/installer/config.js.map +1 -1
- package/dist/installer/identity.d.ts +8 -1
- package/dist/installer/identity.js +8 -1
- package/dist/installer/identity.js.map +1 -1
- package/dist/orchestrator/host-process-orchestrator.d.ts +2 -2
- package/dist/orchestrator/host-process-orchestrator.js +9 -4
- package/dist/orchestrator/host-process-orchestrator.js.map +1 -1
- package/dist/server/settings-store.d.ts +1 -1
- package/dist/server/settings-store.js +5 -1
- package/dist/server/settings-store.js.map +1 -1
- package/dist/server/static.js +38 -38
- package/dist/ui/assets/index-C-iks41M.js.map +1 -1
- package/dist/ui/index.html +12 -12
- package/package.json +4 -4
- package/service/cadre-host.service.tmpl +16 -16
- package/service/com.serfab.cadre-host.plist.tmpl +35 -35
- package/service/install-service.ps1 +98 -98
- package/service/uninstall-service.ps1 +19 -19
- package/src/__tests__/build-targets.test.ts +26 -26
- package/src/__tests__/cli-invite.smoke.test.ts +192 -192
- package/src/__tests__/cli-nat.smoke.test.ts +212 -212
- package/src/__tests__/cli.smoke.test.ts +51 -46
- package/src/__tests__/global-setup.ts +56 -51
- package/src/__tests__/host-owner.smoke.test.ts +123 -123
- package/src/__tests__/orchestrator-env-scrub.test.ts +140 -140
- package/src/__tests__/orchestrator-node-identity.test.ts +5 -5
- package/src/__tests__/orchestrator-owner.test.ts +198 -198
- package/src/__tests__/orchestrator-pin-keys.test.ts +153 -153
- package/src/__tests__/orchestrator-push.test.ts +145 -145
- package/src/__tests__/orchestrator.test.ts +951 -951
- package/src/auth/__tests__/duration.test.ts +28 -28
- package/src/auth/__tests__/self-label.test.ts +85 -85
- package/src/auth/__tests__/trust-circle-store.test.ts +115 -115
- package/src/auth/__tests__/trust-circle.test.ts +445 -445
- package/src/auth/duration.ts +33 -33
- package/src/auth/index.ts +21 -21
- package/src/auth/self-label.ts +74 -74
- package/src/auth/trust-circle-store.ts +155 -155
- package/src/auth/types.ts +99 -99
- package/src/bin/__tests__/cli-reference.test.ts +167 -0
- package/src/bin/host.ts +1326 -1299
- package/src/donation/__tests__/donation-service.test.ts +1068 -1068
- package/src/donation/__tests__/donation-supervisor.test.ts +510 -510
- package/src/donation/__tests__/fake-orchestrator.test.ts +168 -168
- package/src/donation/__tests__/fake-orchestrator.ts +225 -225
- package/src/donation/__tests__/grant-service.test.ts +213 -213
- package/src/donation/__tests__/grant-store.test.ts +113 -113
- package/src/donation/donation-service.ts +962 -962
- package/src/donation/donation-store.ts +171 -171
- package/src/donation/donation-supervisor.ts +388 -388
- package/src/donation/grant-service.ts +200 -200
- package/src/donation/grant-store.ts +152 -152
- package/src/donation/index.ts +64 -64
- package/src/donation/types.ts +243 -243
- package/src/installer/__tests__/config.test.ts +134 -112
- package/src/installer/__tests__/identity.test.ts +34 -34
- package/src/installer/__tests__/paths.test.ts +47 -47
- package/src/installer/__tests__/service-host.test.ts +62 -62
- package/src/installer/__tests__/wizard.test.ts +64 -64
- package/src/installer/config.ts +5 -43
- package/src/installer/identity.ts +56 -49
- package/src/installer/paths.ts +109 -109
- package/src/installer/platform.ts +27 -27
- package/src/installer/service-host/index.ts +21 -21
- package/src/installer/service-host/template.ts +21 -21
- package/src/installer/wizard.ts +103 -103
- package/src/nat/__tests__/address-resolver.test.ts +82 -82
- package/src/nat/__tests__/ddns-duckdns.test.ts +83 -83
- package/src/nat/__tests__/ddns-updater.test.ts +253 -253
- package/src/nat/__tests__/external-ip.test.ts +124 -124
- package/src/nat/__tests__/nat-service.test.ts +18 -0
- package/src/nat/__tests__/nat-store.test.ts +93 -93
- package/src/nat/__tests__/port-mapper.test.ts +191 -191
- package/src/nat/__tests__/reachability.test.ts +24 -24
- package/src/nat/__tests__/secrets.test.ts +178 -178
- package/src/nat/address-resolver.ts +51 -51
- package/src/nat/ddns/duckdns.ts +76 -76
- package/src/nat/ddns/index.ts +55 -55
- package/src/nat/ddns/updater.ts +243 -243
- package/src/nat/external-ip.ts +154 -154
- package/src/nat/index.ts +71 -71
- package/src/nat/nat-service.ts +501 -501
- package/src/nat/nat-store.ts +154 -154
- package/src/nat/port-mapper.ts +329 -329
- package/src/nat/reachability.ts +34 -34
- package/src/nat/secrets/file-store.ts +130 -130
- package/src/nat/secrets/index.ts +112 -112
- package/src/nat/secrets/keytar-store.ts +67 -67
- package/src/nat/types.ts +159 -159
- package/src/orchestrator/__tests__/node-identity.test.ts +62 -62
- package/src/orchestrator/host-process-orchestrator.ts +9 -4
- package/src/orchestrator/index.ts +10 -10
- package/src/orchestrator/log-rotator.ts +53 -53
- package/src/orchestrator/node-identity.ts +40 -40
- package/src/orchestrator/pid-liveness.ts +24 -24
- package/src/orchestrator/port-allocator.ts +91 -91
- package/src/orchestrator/state-store.ts +90 -90
- package/src/orchestrator/types.ts +141 -141
- package/src/owner/__tests__/owner-node-client.test.ts +194 -194
- package/src/owner/index.ts +12 -12
- package/src/owner/owner-node-client.ts +259 -259
- package/src/push/__tests__/push.test.ts +90 -90
- package/src/push/index.ts +146 -146
- package/src/server/__tests__/bus.test.ts +38 -38
- package/src/server/__tests__/error-handler.test.ts +118 -118
- package/src/server/__tests__/grants-admin-route.test.ts +73 -73
- package/src/server/__tests__/grants-route.test.ts +263 -263
- package/src/server/__tests__/nodes-route.test.ts +259 -259
- package/src/server/__tests__/origin-guard.test.ts +72 -72
- package/src/server/__tests__/publishers.test.ts +216 -216
- package/src/server/__tests__/server.smoke.test.ts +253 -253
- package/src/server/__tests__/settings-route.test.ts +195 -194
- package/src/server/__tests__/sse-route.test.ts +119 -119
- package/src/server/__tests__/static.test.ts +145 -145
- package/src/server/__tests__/status-route.test.ts +134 -134
- package/src/server/__tests__/strands-route.test.ts +233 -233
- package/src/server/error-handler.ts +178 -178
- package/src/server/events/bus.ts +42 -42
- package/src/server/events/sse-route.ts +81 -81
- package/src/server/events/types.ts +23 -23
- package/src/server/index.ts +267 -267
- package/src/server/origin-guard.ts +84 -84
- package/src/server/routes/grants-admin.ts +41 -41
- package/src/server/routes/grants.ts +210 -210
- package/src/server/routes/nat.ts +63 -63
- package/src/server/routes/nodes.ts +170 -170
- package/src/server/routes/settings.ts +123 -123
- package/src/server/routes/status.ts +118 -118
- package/src/server/routes/strands.ts +54 -54
- package/src/server/routes/trust-circle.ts +49 -49
- package/src/server/routes/update.ts +43 -43
- package/src/server/server.ts +122 -122
- package/src/server/settings-store.ts +5 -1
- package/src/server/static.ts +207 -207
- package/src/strands/__tests__/strand-service.test.ts +165 -165
- package/src/strands/index.ts +14 -14
- package/src/strands/strand-service.ts +135 -135
- package/src/strands/types.ts +102 -102
- package/src/update/__tests__/apply.test.ts +158 -158
- package/src/update/__tests__/manifest.test.ts +128 -128
- package/src/update/__tests__/release-key.test.ts +42 -42
- package/src/update/__tests__/sign.test.ts +78 -78
- package/src/update/__tests__/store.test.ts +81 -81
- package/src/update/__tests__/update-service.integration.test.ts +256 -256
- package/src/update/__tests__/version.test.ts +31 -31
- package/src/update/apply.ts +190 -190
- package/src/update/index.ts +341 -341
- package/src/update/release-key.ts +71 -71
- package/src/update/sign.ts +74 -74
- package/src/update/store.ts +101 -101
- package/src/update/types.ts +109 -109
- package/src/update/version.ts +80 -80
package/src/server/server.ts
CHANGED
|
@@ -1,122 +1,122 @@
|
|
|
1
|
-
/**
|
|
2
|
-
* Fastify lifecycle for the cadre-host local UI.
|
|
3
|
-
*
|
|
4
|
-
* Bound to `127.0.0.1:<uiPort>` only — never `0.0.0.0`. On `EADDRINUSE`
|
|
5
|
-
* tries the configured port and then nine consecutive ports. On total
|
|
6
|
-
* failure the start() promise rejects with a clear message naming every
|
|
7
|
-
* port that was attempted.
|
|
8
|
-
*
|
|
9
|
-
* Shutdown drains with a 5 s timeout, mirroring cadre-provider's pattern.
|
|
10
|
-
*/
|
|
11
|
-
|
|
12
|
-
import Fastify, { type FastifyInstance } from 'fastify';
|
|
13
|
-
import debug from 'debug';
|
|
14
|
-
|
|
15
|
-
const log = debug('cadre:host:server');
|
|
16
|
-
|
|
17
|
-
/** Hard cap on Fastify's drain phase during shutdown. */
|
|
18
|
-
const SHUTDOWN_DRAIN_TIMEOUT_MS = 5000;
|
|
19
|
-
/** Inclusive count of ports to try (config port + 9 alternates). */
|
|
20
|
-
const PORT_FALLBACK_TRIES = 10;
|
|
21
|
-
/** Loopback interface; never serve from 0.0.0.0. */
|
|
22
|
-
const LOOPBACK_HOST = '127.0.0.1';
|
|
23
|
-
|
|
24
|
-
export interface StartServerOptions {
|
|
25
|
-
/** Preferred port. The server tries this then the next 9 on EADDRINUSE. */
|
|
26
|
-
preferredPort: number;
|
|
27
|
-
/**
|
|
28
|
-
* Test override: when 0, lets the OS pick any free port (skips the
|
|
29
|
-
* fallback loop). The returned `port` reflects the actual bound port.
|
|
30
|
-
*/
|
|
31
|
-
forcePort?: 0;
|
|
32
|
-
}
|
|
33
|
-
|
|
34
|
-
export interface StartedServer {
|
|
35
|
-
port: number;
|
|
36
|
-
url: string;
|
|
37
|
-
}
|
|
38
|
-
|
|
39
|
-
export interface ShutdownOptions {
|
|
40
|
-
/** Override the 5 s drain timeout (tests). */
|
|
41
|
-
drainTimeoutMs?: number;
|
|
42
|
-
}
|
|
43
|
-
|
|
44
|
-
/**
|
|
45
|
-
* Bind `app` to the loopback interface with port-fallback. Returns the
|
|
46
|
-
* actually-bound port — the configured port may be in use.
|
|
47
|
-
*/
|
|
48
|
-
export async function startListening(
|
|
49
|
-
app: FastifyInstance,
|
|
50
|
-
opts: StartServerOptions,
|
|
51
|
-
): Promise<StartedServer> {
|
|
52
|
-
if (opts.forcePort === 0) {
|
|
53
|
-
const address = await app.listen({ host: LOOPBACK_HOST, port: 0 });
|
|
54
|
-
const port = parsePort(address);
|
|
55
|
-
return { port, url: `http://${LOOPBACK_HOST}:${port}` };
|
|
56
|
-
}
|
|
57
|
-
|
|
58
|
-
const tried: number[] = [];
|
|
59
|
-
let lastErr: Error | null = null;
|
|
60
|
-
for (let i = 0; i < PORT_FALLBACK_TRIES; i++) {
|
|
61
|
-
const port = opts.preferredPort + i;
|
|
62
|
-
tried.push(port);
|
|
63
|
-
try {
|
|
64
|
-
const address = await app.listen({ host: LOOPBACK_HOST, port });
|
|
65
|
-
const bound = parsePort(address);
|
|
66
|
-
if (i > 0) {
|
|
67
|
-
log('port %d in use; bound on fallback port %d', opts.preferredPort, bound);
|
|
68
|
-
}
|
|
69
|
-
return { port: bound, url: `http://${LOOPBACK_HOST}:${bound}` };
|
|
70
|
-
} catch (err) {
|
|
71
|
-
const code = (err as NodeJS.ErrnoException).code;
|
|
72
|
-
if (code !== 'EADDRINUSE') {
|
|
73
|
-
throw err;
|
|
74
|
-
}
|
|
75
|
-
lastErr = err as Error;
|
|
76
|
-
log('port %d in use, trying next', port);
|
|
77
|
-
}
|
|
78
|
-
}
|
|
79
|
-
throw new Error(
|
|
80
|
-
`cadre-host: all ${PORT_FALLBACK_TRIES} candidate ports were in use ` +
|
|
81
|
-
`(${tried.join(', ')}). Reconfigure uiPort in host.config.json. ` +
|
|
82
|
-
`Last error: ${lastErr?.message ?? 'unknown'}`,
|
|
83
|
-
);
|
|
84
|
-
}
|
|
85
|
-
|
|
86
|
-
/**
|
|
87
|
-
* Close the server with a hard 5 s drain timeout. Idempotent — safe to call
|
|
88
|
-
* from a SIGINT/SIGTERM handler that may fire twice.
|
|
89
|
-
*/
|
|
90
|
-
export async function stopListening(
|
|
91
|
-
app: FastifyInstance,
|
|
92
|
-
opts: ShutdownOptions = {},
|
|
93
|
-
): Promise<void> {
|
|
94
|
-
const drainMs = opts.drainTimeoutMs ?? SHUTDOWN_DRAIN_TIMEOUT_MS;
|
|
95
|
-
let timer: ReturnType<typeof setTimeout> | undefined;
|
|
96
|
-
const drain = app.close();
|
|
97
|
-
const timeout = new Promise<'timeout'>((resolve) => {
|
|
98
|
-
timer = setTimeout(() => resolve('timeout'), drainMs);
|
|
99
|
-
});
|
|
100
|
-
const outcome = await Promise.race([drain.then(() => 'drained' as const), timeout]);
|
|
101
|
-
if (timer) clearTimeout(timer);
|
|
102
|
-
if (outcome === 'timeout') {
|
|
103
|
-
log('shutdown drain timeout after %dms', drainMs);
|
|
104
|
-
}
|
|
105
|
-
}
|
|
106
|
-
|
|
107
|
-
/** Create a bare Fastify instance with the project's logging convention. */
|
|
108
|
-
export function buildFastify(): FastifyInstance {
|
|
109
|
-
return Fastify({
|
|
110
|
-
// Stay quiet by default — request-level logs are noisy on a local UI.
|
|
111
|
-
// Operators can opt in via the `debug` env var (cadre:host:*).
|
|
112
|
-
logger: false,
|
|
113
|
-
disableRequestLogging: true,
|
|
114
|
-
});
|
|
115
|
-
}
|
|
116
|
-
|
|
117
|
-
function parsePort(address: string): number {
|
|
118
|
-
// address is e.g. http://127.0.0.1:8765
|
|
119
|
-
const m = address.match(/:(\d+)\/?$/);
|
|
120
|
-
if (!m) throw new Error(`cadre-host: unable to parse port from listen address: ${address}`);
|
|
121
|
-
return Number(m[1]);
|
|
122
|
-
}
|
|
1
|
+
/**
|
|
2
|
+
* Fastify lifecycle for the cadre-host local UI.
|
|
3
|
+
*
|
|
4
|
+
* Bound to `127.0.0.1:<uiPort>` only — never `0.0.0.0`. On `EADDRINUSE`
|
|
5
|
+
* tries the configured port and then nine consecutive ports. On total
|
|
6
|
+
* failure the start() promise rejects with a clear message naming every
|
|
7
|
+
* port that was attempted.
|
|
8
|
+
*
|
|
9
|
+
* Shutdown drains with a 5 s timeout, mirroring cadre-provider's pattern.
|
|
10
|
+
*/
|
|
11
|
+
|
|
12
|
+
import Fastify, { type FastifyInstance } from 'fastify';
|
|
13
|
+
import debug from 'debug';
|
|
14
|
+
|
|
15
|
+
const log = debug('cadre:host:server');
|
|
16
|
+
|
|
17
|
+
/** Hard cap on Fastify's drain phase during shutdown. */
|
|
18
|
+
const SHUTDOWN_DRAIN_TIMEOUT_MS = 5000;
|
|
19
|
+
/** Inclusive count of ports to try (config port + 9 alternates). */
|
|
20
|
+
const PORT_FALLBACK_TRIES = 10;
|
|
21
|
+
/** Loopback interface; never serve from 0.0.0.0. */
|
|
22
|
+
const LOOPBACK_HOST = '127.0.0.1';
|
|
23
|
+
|
|
24
|
+
export interface StartServerOptions {
|
|
25
|
+
/** Preferred port. The server tries this then the next 9 on EADDRINUSE. */
|
|
26
|
+
preferredPort: number;
|
|
27
|
+
/**
|
|
28
|
+
* Test override: when 0, lets the OS pick any free port (skips the
|
|
29
|
+
* fallback loop). The returned `port` reflects the actual bound port.
|
|
30
|
+
*/
|
|
31
|
+
forcePort?: 0;
|
|
32
|
+
}
|
|
33
|
+
|
|
34
|
+
export interface StartedServer {
|
|
35
|
+
port: number;
|
|
36
|
+
url: string;
|
|
37
|
+
}
|
|
38
|
+
|
|
39
|
+
export interface ShutdownOptions {
|
|
40
|
+
/** Override the 5 s drain timeout (tests). */
|
|
41
|
+
drainTimeoutMs?: number;
|
|
42
|
+
}
|
|
43
|
+
|
|
44
|
+
/**
|
|
45
|
+
* Bind `app` to the loopback interface with port-fallback. Returns the
|
|
46
|
+
* actually-bound port — the configured port may be in use.
|
|
47
|
+
*/
|
|
48
|
+
export async function startListening(
|
|
49
|
+
app: FastifyInstance,
|
|
50
|
+
opts: StartServerOptions,
|
|
51
|
+
): Promise<StartedServer> {
|
|
52
|
+
if (opts.forcePort === 0) {
|
|
53
|
+
const address = await app.listen({ host: LOOPBACK_HOST, port: 0 });
|
|
54
|
+
const port = parsePort(address);
|
|
55
|
+
return { port, url: `http://${LOOPBACK_HOST}:${port}` };
|
|
56
|
+
}
|
|
57
|
+
|
|
58
|
+
const tried: number[] = [];
|
|
59
|
+
let lastErr: Error | null = null;
|
|
60
|
+
for (let i = 0; i < PORT_FALLBACK_TRIES; i++) {
|
|
61
|
+
const port = opts.preferredPort + i;
|
|
62
|
+
tried.push(port);
|
|
63
|
+
try {
|
|
64
|
+
const address = await app.listen({ host: LOOPBACK_HOST, port });
|
|
65
|
+
const bound = parsePort(address);
|
|
66
|
+
if (i > 0) {
|
|
67
|
+
log('port %d in use; bound on fallback port %d', opts.preferredPort, bound);
|
|
68
|
+
}
|
|
69
|
+
return { port: bound, url: `http://${LOOPBACK_HOST}:${bound}` };
|
|
70
|
+
} catch (err) {
|
|
71
|
+
const code = (err as NodeJS.ErrnoException).code;
|
|
72
|
+
if (code !== 'EADDRINUSE') {
|
|
73
|
+
throw err;
|
|
74
|
+
}
|
|
75
|
+
lastErr = err as Error;
|
|
76
|
+
log('port %d in use, trying next', port);
|
|
77
|
+
}
|
|
78
|
+
}
|
|
79
|
+
throw new Error(
|
|
80
|
+
`cadre-host: all ${PORT_FALLBACK_TRIES} candidate ports were in use ` +
|
|
81
|
+
`(${tried.join(', ')}). Reconfigure uiPort in host.config.json. ` +
|
|
82
|
+
`Last error: ${lastErr?.message ?? 'unknown'}`,
|
|
83
|
+
);
|
|
84
|
+
}
|
|
85
|
+
|
|
86
|
+
/**
|
|
87
|
+
* Close the server with a hard 5 s drain timeout. Idempotent — safe to call
|
|
88
|
+
* from a SIGINT/SIGTERM handler that may fire twice.
|
|
89
|
+
*/
|
|
90
|
+
export async function stopListening(
|
|
91
|
+
app: FastifyInstance,
|
|
92
|
+
opts: ShutdownOptions = {},
|
|
93
|
+
): Promise<void> {
|
|
94
|
+
const drainMs = opts.drainTimeoutMs ?? SHUTDOWN_DRAIN_TIMEOUT_MS;
|
|
95
|
+
let timer: ReturnType<typeof setTimeout> | undefined;
|
|
96
|
+
const drain = app.close();
|
|
97
|
+
const timeout = new Promise<'timeout'>((resolve) => {
|
|
98
|
+
timer = setTimeout(() => resolve('timeout'), drainMs);
|
|
99
|
+
});
|
|
100
|
+
const outcome = await Promise.race([drain.then(() => 'drained' as const), timeout]);
|
|
101
|
+
if (timer) clearTimeout(timer);
|
|
102
|
+
if (outcome === 'timeout') {
|
|
103
|
+
log('shutdown drain timeout after %dms', drainMs);
|
|
104
|
+
}
|
|
105
|
+
}
|
|
106
|
+
|
|
107
|
+
/** Create a bare Fastify instance with the project's logging convention. */
|
|
108
|
+
export function buildFastify(): FastifyInstance {
|
|
109
|
+
return Fastify({
|
|
110
|
+
// Stay quiet by default — request-level logs are noisy on a local UI.
|
|
111
|
+
// Operators can opt in via the `debug` env var (cadre:host:*).
|
|
112
|
+
logger: false,
|
|
113
|
+
disableRequestLogging: true,
|
|
114
|
+
});
|
|
115
|
+
}
|
|
116
|
+
|
|
117
|
+
function parsePort(address: string): number {
|
|
118
|
+
// address is e.g. http://127.0.0.1:8765
|
|
119
|
+
const m = address.match(/:(\d+)\/?$/);
|
|
120
|
+
if (!m) throw new Error(`cadre-host: unable to parse port from listen address: ${address}`);
|
|
121
|
+
return Number(m[1]);
|
|
122
|
+
}
|
|
@@ -25,7 +25,11 @@ export class HostSettingsStore {
|
|
|
25
25
|
this.configPath = configPath(opts.dataDir);
|
|
26
26
|
}
|
|
27
27
|
|
|
28
|
-
|
|
28
|
+
// NOTE: a bad config (absent, malformed, wrong version) throws a plain Error, so
|
|
29
|
+
// /api/settings answers 500 code "internal" with the read message passed through.
|
|
30
|
+
// Fine while the UI just surfaces the text; if it ever needs to tell "your config
|
|
31
|
+
// file is unreadable" apart from a genuine server bug, give this a typed error.
|
|
32
|
+
/** Read the current host.config.json. Throws if absent, malformed, or not version 2. */
|
|
29
33
|
read(): HostConfigFile {
|
|
30
34
|
return readHostConfig(this.configPath);
|
|
31
35
|
}
|