@serfab/cadre-host 0.7.1

package/dist/server/routes/settings.js

@@ -0,0 +1,97 @@
+/**
+ * /api/settings — host-level settings UI surface.
+ *
+ * The persisted shape is `host.config.json` (managed by the installer).
+ * This route is a thin passthrough plus a write-whitelist:
+ *
+ *   - uiPort        rejected (restart required; only edit at install time)
+ *   - libp2pPort    rejected (restart required)
+ *   - upnpEnabled   accepted → also propagated to NatService.putSettings
+ *   - updates.autoApply  accepted → propagated to UpdateService.putSettings
+ *   - updates.manifestUrl accepted → propagated to UpdateService.putSettings
+ *   - anything else 400 invalid_setting
+ *
+ * GET returns the full `HostConfigFile` (the SPA wants the full shape so it
+ * can render a read-only view of the rejected keys).
+ */
+const FORBIDDEN_KEYS = new Set(['uiPort', 'libp2pPort', 'dataDir', 'identityPath', 'installId', 'installedAt', 'installerVersion', 'version']);
+const WRITABLE_TOP_KEYS = new Set(['upnpEnabled', 'updates']);
+const WRITABLE_UPDATES_KEYS = new Set(['autoApply', 'manifestUrl']);
+export function registerSettingsRoutes(app, opts) {
+    const { settingsStore, nat, update } = opts;
+    app.get('/api/settings', async () => {
+        return { ok: true, data: settingsStore.read() };
+    });
+    app.put('/api/settings', async (request, reply) => {
+        const body = (request.body ?? {});
+        const validation = validatePatch(body);
+        if (validation.error) {
+            return reply.code(400).send({
+                ok: false,
+                error: { code: 'invalid_setting', message: validation.error },
+            });
+        }
+        const current = settingsStore.read();
+        const patch = {};
+        if ('upnpEnabled' in body) {
+            patch.upnpEnabled = body.upnpEnabled;
+            // Propagate UPnP toggle into the running NatService so the change
+            // takes effect immediately. NatService persists into nat.json — that's
+            // independent of host.config.json's `upnpEnabled` (which the installer
+            // uses on first run to seed nat.json). Update both for consistency.
+            await nat.putSettings({ upnpEnabled: body.upnpEnabled });
+        }
+        if ('updates' in body) {
+            const updates = body.updates;
+            const nextUpdates = { ...current.updates };
+            if ('autoApply' in updates)
+                nextUpdates.autoApply = updates.autoApply;
+            if ('manifestUrl' in updates)
+                nextUpdates.manifestUrl = updates.manifestUrl;
+            patch.updates = nextUpdates;
+            if (update) {
+                const propagate = {};
+                if ('autoApply' in updates)
+                    propagate.autoApply = updates.autoApply;
+                if ('manifestUrl' in updates)
+                    propagate.manifestUrl = updates.manifestUrl;
+                await update.putSettings(propagate);
+            }
+        }
+        const next = settingsStore.update(patch);
+        return { ok: true, data: next };
+    });
+}
+function validatePatch(body) {
+    for (const key of Object.keys(body)) {
+        if (FORBIDDEN_KEYS.has(key)) {
+            return { error: `Setting "${key}" is not editable at runtime; change it in host.config.json and restart cadre-host.` };
+        }
+        if (!WRITABLE_TOP_KEYS.has(key)) {
+            return { error: `Unknown setting "${key}"` };
+        }
+    }
+    if ('upnpEnabled' in body && typeof body.upnpEnabled !== 'boolean') {
+        return { error: '"upnpEnabled" must be a boolean' };
+    }
+    if ('updates' in body) {
+        if (!body.updates || typeof body.updates !== 'object') {
+            return { error: '"updates" must be an object' };
+        }
+        const updates = body.updates;
+        for (const key of Object.keys(updates)) {
+            if (!WRITABLE_UPDATES_KEYS.has(key)) {
+                return { error: `Unknown setting "updates.${key}"` };
+            }
+        }
+        if ('autoApply' in updates && typeof updates.autoApply !== 'boolean') {
+            return { error: '"updates.autoApply" must be a boolean' };
+        }
+        if ('manifestUrl' in updates &&
+            typeof updates.manifestUrl !== 'string') {
+            return { error: '"updates.manifestUrl" must be a string' };
+        }
+    }
+    return {};
+}
+//# sourceMappingURL=settings.js.map

package/dist/server/routes/settings.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"settings.js","sourceRoot":"","sources":["../../../src/server/routes/settings.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAQH,MAAM,cAAc,GAAG,IAAI,GAAG,CAAS,CAAC,QAAQ,EAAE,YAAY,EAAE,SAAS,EAAE,cAAc,EAAE,WAAW,EAAE,aAAa,EAAE,kBAAkB,EAAE,SAAS,CAAC,CAAC,CAAC;AAEvJ,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAAS,CAAC,aAAa,EAAE,SAAS,CAAC,CAAC,CAAC;AACtE,MAAM,qBAAqB,GAAG,IAAI,GAAG,CAAS,CAAC,WAAW,EAAE,aAAa,CAAC,CAAC,CAAC;AAQ5E,MAAM,UAAU,sBAAsB,CAAC,GAAoB,EAAE,IAA2B;IACtF,MAAM,EAAE,aAAa,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;IAE5C,GAAG,CAAC,GAAG,CAAC,eAAe,EAAE,KAAK,IAAI,EAAE;QAClC,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,aAAa,CAAC,IAAI,EAAE,EAAE,CAAC;IAClD,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,GAAG,CAAC,eAAe,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;QAChD,MAAM,IAAI,GAAG,CAAC,OAAO,CAAC,IAAI,IAAI,EAAE,CAA4B,CAAC;QAC7D,MAAM,UAAU,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;QACvC,IAAI,UAAU,CAAC,KAAK,EAAE,CAAC;YACrB,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;gBAC1B,EAAE,EAAE,KAAK;gBACT,KAAK,EAAE,EAAE,IAAI,EAAE,iBAAiB,EAAE,OAAO,EAAE,UAAU,CAAC,KAAK,EAAE;aAC9D,CAAC,CAAC;QACL,CAAC;QAED,MAAM,OAAO,GAAG,aAAa,CAAC,IAAI,EAAE,CAAC;QACrC,MAAM,KAAK,GAAgE,EAAE,CAAC;QAE9E,IAAI,aAAa,IAAI,IAAI,EAAE,CAAC;YAC1B,KAAK,CAAC,WAAW,GAAG,IAAI,CAAC,WAAsB,CAAC;YAChD,kEAAkE;YAClE,uEAAuE;YACvE,uEAAuE;YACvE,oEAAoE;YACpE,MAAM,GAAG,CAAC,WAAW,CAAC,EAAE,WAAW,EAAE,IAAI,CAAC,WAAsB,EAAE,CAAC,CAAC;QACtE,CAAC;QACD,IAAI,SAAS,IAAI,IAAI,EAAE,CAAC;YACtB,MAAM,OAAO,GAAG,IAAI,CAAC,OAAwD,CAAC;YAC9E,MAAM,WAAW,GAAG,EAAE,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC;YAC3C,IAAI,WAAW,IAAI,OAAO;gBAAE,WAAW,CAAC,SAAS,GAAG,OAAO,CAAC,SAAoB,CAAC;YACjF,IAAI,aAAa,IAAI,OAAO;gBAAE,WAAW,CAAC,WAAW,GAAG,OAAO,CAAC,WAAqB,CAAC;YACtF,KAAK,CAAC,OAAO,GAAG,WAAW,CAAC;YAC5B,IAAI,MAAM,EAAE,CAAC;gBACX,MAAM,SAAS,GAAkD,EAAE,CAAC;gBACpE,IAAI,WAAW,IAAI,OAAO;oBAAE,SAAS,CAAC,SAAS,GAAG,OAAO,CAAC,SAAoB,CAAC;gBAC/E,IAAI,aAAa,IAAI,OAAO;oBAAE,SAAS,CAAC,WAAW,GAAG,OAAO,CAAC,WAAqB,CAAC;gBACpF,MAAM,MAAM,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC;YACtC,CAAC;QACH,CAAC;QAED,MAAM,IAAI,GAAG,aAAa,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACzC,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IAClC,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,aAAa,CAAC,IAA6B;IAClD,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACpC,IAAI,cAAc,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YAC5B,OAAO,EAAE,KAAK,EAAE,YAAY,GAAG,qFAAqF,EAAE,CAAC;QACzH,CAAC;QACD,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YAChC,OAAO,EAAE,KAAK,EAAE,oBAAoB,GAAG,GAAG,EAAE,CAAC;QAC/C,CAAC;IACH,CAAC;IACD,IAAI,aAAa,IAAI,IAAI,IAAI,OAAO,IAAI,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;QACnE,OAAO,EAAE,KAAK,EAAE,iCAAiC,EAAE,CAAC;IACtD,CAAC;IACD,IAAI,SAAS,IAAI,IAAI,EAAE,CAAC;QACtB,IAAI,CAAC,IAAI,CAAC,OAAO,IAAI,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;YACtD,OAAO,EAAE,KAAK,EAAE,6BAA6B,EAAE,CAAC;QAClD,CAAC;QACD,MAAM,OAAO,GAAG,IAAI,CAAC,OAAkC,CAAC;QACxD,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YACvC,IAAI,CAAC,qBAAqB,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;gBACpC,OAAO,EAAE,KAAK,EAAE,4BAA4B,GAAG,GAAG,EAAE,CAAC;YACvD,CAAC;QACH,CAAC;QACD,IAAI,WAAW,IAAI,OAAO,IAAI,OAAO,OAAO,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;YACrE,OAAO,EAAE,KAAK,EAAE,uCAAuC,EAAE,CAAC;QAC5D,CAAC;QACD,IACE,aAAa,IAAI,OAAO;YACxB,OAAO,OAAO,CAAC,WAAW,KAAK,QAAQ,EACvC,CAAC;YACD,OAAO,EAAE,KAAK,EAAE,wCAAwC,EAAE,CAAC;QAC7D,CAAC;IACH,CAAC;IACD,OAAO,EAAE,CAAC;AACZ,CAAC"}

package/dist/server/routes/status.d.ts

@@ -0,0 +1,42 @@
+/**
+ * GET /api/status — aggregated health snapshot used by the SPA's dashboard.
+ *
+ * All inputs are in-memory subsystem state — no disk reads on each call.
+ * The response budget is < 5 ms; favour `getStatus()` over `testReachability()`.
+ */
+import type { FastifyInstance } from 'fastify';
+import type { HostProcessOrchestrator } from '../../orchestrator/index.js';
+import type { ManagedNodeInfo } from '../../orchestrator/types.js';
+import type { TrustCircleService } from '../../auth/index.js';
+import type { NatService } from '../../nat/index.js';
+import type { NatStatusSnapshot } from '../../nat/types.js';
+import type { UpdateService } from '../../update/index.js';
+export interface StatusRouteOptions {
+    orchestrator: HostProcessOrchestrator;
+    trustCircle: TrustCircleService;
+    nat: NatService;
+    update?: UpdateService;
+}
+export interface StatusResponse {
+    service: {
+        name: 'cadre-host';
+        version: string;
+        uptimeSeconds: number;
+    };
+    nodes: Array<{
+        id: string;
+        partyId: string;
+        status: ManagedNodeInfo['status'];
+        profile: ManagedNodeInfo['profile'];
+    }>;
+    trustCircle: {
+        members: number;
+        pending: number;
+    };
+    connectivity: NatStatusSnapshot;
+    update?: {
+        available?: string;
+        lastChecked?: string;
+    };
+}
+export declare function registerStatusRoute(app: FastifyInstance, opts: StatusRouteOptions): void;

package/dist/server/routes/status.js

@@ -0,0 +1,76 @@
+/**
+ * GET /api/status — aggregated health snapshot used by the SPA's dashboard.
+ *
+ * All inputs are in-memory subsystem state — no disk reads on each call.
+ * The response budget is < 5 ms; favour `getStatus()` over `testReachability()`.
+ */
+import { readFileSync } from 'node:fs';
+import { dirname, resolve } from 'node:path';
+import { fileURLToPath } from 'node:url';
+const PROCESS_STARTED_AT = process.hrtime.bigint();
+export function registerStatusRoute(app, opts) {
+    const version = readPackageVersion();
+    app.get('/api/status', async () => {
+        const nodes = opts.orchestrator.listNodes().map((n) => ({
+            id: n.id,
+            partyId: n.partyId,
+            status: n.status,
+            profile: n.profile,
+        }));
+        const tc = await opts.trustCircle.list();
+        const connectivity = opts.nat.getStatus();
+        const response = {
+            service: {
+                name: 'cadre-host',
+                version,
+                uptimeSeconds: secondsSince(PROCESS_STARTED_AT),
+            },
+            nodes,
+            trustCircle: { members: tc.members.length, pending: tc.pending.length },
+            connectivity,
+        };
+        if (opts.update) {
+            const state = await opts.update.getState();
+            const update = {};
+            if (state.available?.version)
+                update.available = state.available.version;
+            if (state.lastChecked)
+                update.lastChecked = state.lastChecked;
+            response.update = update;
+        }
+        return response;
+    });
+}
+function secondsSince(start) {
+    const now = process.hrtime.bigint();
+    const elapsedNs = now - start;
+    return Number(elapsedNs / 1000000000n);
+}
+let cachedVersion = null;
+function readPackageVersion() {
+    if (cachedVersion)
+        return cachedVersion;
+    try {
+        // dist/server/routes/status.js -> ../../../package.json
+        // src/server/routes/status.ts  -> ../../../package.json (vitest)
+        const here = dirname(fileURLToPath(import.meta.url));
+        const candidates = [
+            resolve(here, '..', '..', '..', 'package.json'),
+            resolve(here, '..', '..', 'package.json'),
+        ];
+        for (const p of candidates) {
+            try {
+                const parsed = JSON.parse(readFileSync(p, 'utf8'));
+                if (parsed.version) {
+                    cachedVersion = parsed.version;
+                    return cachedVersion;
+                }
+            }
+            catch { /* try next */ }
+        }
+    }
+    catch { /* ignore */ }
+    cachedVersion = '0.0.0-unknown';
+    return cachedVersion;
+}
+//# sourceMappingURL=status.js.map

package/dist/server/routes/status.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"status.js","sourceRoot":"","sources":["../../../src/server/routes/status.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC7C,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAWzC,MAAM,kBAAkB,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;AAsBnD,MAAM,UAAU,mBAAmB,CAAC,GAAoB,EAAE,IAAwB;IAChF,MAAM,OAAO,GAAG,kBAAkB,EAAE,CAAC;IAErC,GAAG,CAAC,GAAG,CAAC,aAAa,EAAE,KAAK,IAA6B,EAAE;QACzD,MAAM,KAAK,GAAG,IAAI,CAAC,YAAY,CAAC,SAAS,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YACtD,EAAE,EAAE,CAAC,CAAC,EAAE;YACR,OAAO,EAAE,CAAC,CAAC,OAAO;YAClB,MAAM,EAAE,CAAC,CAAC,MAAM;YAChB,OAAO,EAAE,CAAC,CAAC,OAAO;SACnB,CAAC,CAAC,CAAC;QACJ,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC;QACzC,MAAM,YAAY,GAAG,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC;QAE1C,MAAM,QAAQ,GAAmB;YAC/B,OAAO,EAAE;gBACP,IAAI,EAAE,YAAY;gBAClB,OAAO;gBACP,aAAa,EAAE,YAAY,CAAC,kBAAkB,CAAC;aAChD;YACD,KAAK;YACL,WAAW,EAAE,EAAE,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE;YACvE,YAAY;SACb,CAAC;QAEF,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YAChB,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC;YAC3C,MAAM,MAAM,GAAiD,EAAE,CAAC;YAChE,IAAI,KAAK,CAAC,SAAS,EAAE,OAAO;gBAAE,MAAM,CAAC,SAAS,GAAG,KAAK,CAAC,SAAS,CAAC,OAAO,CAAC;YACzE,IAAI,KAAK,CAAC,WAAW;gBAAE,MAAM,CAAC,WAAW,GAAG,KAAK,CAAC,WAAW,CAAC;YAC9D,QAAQ,CAAC,MAAM,GAAG,MAAM,CAAC;QAC3B,CAAC;QAED,OAAO,QAAQ,CAAC;IAClB,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,YAAY,CAAC,KAAa;IACjC,MAAM,GAAG,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;IACpC,MAAM,SAAS,GAAG,GAAG,GAAG,KAAK,CAAC;IAC9B,OAAO,MAAM,CAAC,SAAS,GAAG,WAAc,CAAC,CAAC;AAC5C,CAAC;AAED,IAAI,aAAa,GAAkB,IAAI,CAAC;AACxC,SAAS,kBAAkB;IACzB,IAAI,aAAa;QAAE,OAAO,aAAa,CAAC;IACxC,IAAI,CAAC;QACH,wDAAwD;QACxD,iEAAiE;QACjE,MAAM,IAAI,GAAG,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;QACrD,MAAM,UAAU,GAAG;YACjB,OAAO,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,cAAc,CAAC;YAC/C,OAAO,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,cAAc,CAAC;SAC1C,CAAC;QACF,KAAK,MAAM,CAAC,IAAI,UAAU,EAAE,CAAC;YAC3B,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,EAAE,MAAM,CAAC,CAAyB,CAAC;gBAC3E,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;oBACnB,aAAa,GAAG,MAAM,CAAC,OAAO,CAAC;oBAC/B,OAAO,aAAa,CAAC;gBACvB,CAAC;YACH,CAAC;YAAC,MAAM,CAAC,CAAC,cAAc,CAAC,CAAC;QAC5B,CAAC;IACH,CAAC;IAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;IACxB,aAAa,GAAG,eAAe,CAAC;IAChC,OAAO,aAAa,CAAC;AACvB,CAAC"}

package/dist/server/routes/trust-circle.d.ts

@@ -0,0 +1,17 @@
+/**
+ * Trust-circle HTTP routes — thin adapters around `TrustCircleHandlers`
+ * (`createTrustCircleHandlers(service)`). Side-effects (invite issued,
+ * pending revoked, member removed) emit a `trust-circle-changed` bus
+ * event so the SPA can refresh without polling.
+ *
+ * Mount path: `/auth/*` — the existing CLI (cadre-host invite / trust)
+ * already targets these URLs; do not change them.
+ */
+import type { FastifyInstance } from 'fastify';
+import type { TrustCircleHandlers } from '../../auth/types.js';
+import type { EventBus } from '../events/bus.js';
+export interface TrustCircleRoutesOptions {
+    handlers: TrustCircleHandlers;
+    events: EventBus;
+}
+export declare function registerTrustCircleRoutes(app: FastifyInstance, opts: TrustCircleRoutesOptions): void;

package/dist/server/routes/trust-circle.js

@@ -0,0 +1,35 @@
+/**
+ * Trust-circle HTTP routes — thin adapters around `TrustCircleHandlers`
+ * (`createTrustCircleHandlers(service)`). Side-effects (invite issued,
+ * pending revoked, member removed) emit a `trust-circle-changed` bus
+ * event so the SPA can refresh without polling.
+ *
+ * Mount path: `/auth/*` — the existing CLI (cadre-host invite / trust)
+ * already targets these URLs; do not change them.
+ */
+export function registerTrustCircleRoutes(app, opts) {
+    const { handlers, events } = opts;
+    app.get('/auth/trust-circle', async () => {
+        return handlers.listTrustCircle();
+    });
+    app.post('/auth/invites', async (request) => {
+        const body = (request.body ?? {});
+        const label = typeof body.label === 'string' ? body.label : '';
+        const ttlMs = typeof body.ttlMs === 'number' ? body.ttlMs : undefined;
+        const args = ttlMs !== undefined ? { label, ttlMs } : { label };
+        const result = await handlers.postInvite(args);
+        events.publish({ type: 'trust-circle-changed', kind: 'invited' });
+        return result;
+    });
+    app.delete('/auth/invites/:token', async (request) => {
+        await handlers.deleteInvite(request.params.token);
+        events.publish({ type: 'trust-circle-changed', kind: 'revoked' });
+        return { ok: true };
+    });
+    app.delete('/auth/members/:peerId', async (request) => {
+        await handlers.deleteMember(request.params.peerId);
+        events.publish({ type: 'trust-circle-changed', kind: 'revoked' });
+        return { ok: true };
+    });
+}
+//# sourceMappingURL=trust-circle.js.map

package/dist/server/routes/trust-circle.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"trust-circle.js","sourceRoot":"","sources":["../../../src/server/routes/trust-circle.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAYH,MAAM,UAAU,yBAAyB,CAAC,GAAoB,EAAE,IAA8B;IAC5F,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;IAElC,GAAG,CAAC,GAAG,CAAC,oBAAoB,EAAE,KAAK,IAAI,EAAE;QACvC,OAAO,QAAQ,CAAC,eAAe,EAAE,CAAC;IACpC,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,IAAI,CAAC,eAAe,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;QAC1C,MAAM,IAAI,GAAG,CAAC,OAAO,CAAC,IAAI,IAAI,EAAE,CAAyC,CAAC;QAC1E,MAAM,KAAK,GAAG,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/D,MAAM,KAAK,GAAG,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;QACtE,MAAM,IAAI,GAAG,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC;QAChE,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;QAC/C,MAAM,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,sBAAsB,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC;QAClE,OAAO,MAAM,CAAC;IAChB,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,MAAM,CAAgC,sBAAsB,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;QAClF,MAAM,QAAQ,CAAC,YAAY,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAClD,MAAM,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,sBAAsB,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC;QAClE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;IACtB,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,MAAM,CAAiC,uBAAuB,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;QACpF,MAAM,QAAQ,CAAC,YAAY,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QACnD,MAAM,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,sBAAsB,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC;QAClE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;IACtB,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/server/routes/update.d.ts

@@ -0,0 +1,16 @@
+/**
+ * Update-flow HTTP routes — thin adapters around `UpdateHandlers`
+ * (`createUpdateHandlers(service)`). The /update/apply route publishes
+ * `update-available` for the post-apply state when the new version
+ * differs from the running one.
+ *
+ * Mount path: `/update/*` (matches docs/cadre-host.md).
+ */
+import type { FastifyInstance } from 'fastify';
+import type { UpdateHandlers } from '../../update/index.js';
+import type { EventBus } from '../events/bus.js';
+export interface UpdateRoutesOptions {
+    handlers: UpdateHandlers;
+    events: EventBus;
+}
+export declare function registerUpdateRoutes(app: FastifyInstance, opts: UpdateRoutesOptions): void;

package/dist/server/routes/update.js

@@ -0,0 +1,29 @@
+/**
+ * Update-flow HTTP routes — thin adapters around `UpdateHandlers`
+ * (`createUpdateHandlers(service)`). The /update/apply route publishes
+ * `update-available` for the post-apply state when the new version
+ * differs from the running one.
+ *
+ * Mount path: `/update/*` (matches docs/cadre-host.md).
+ */
+export function registerUpdateRoutes(app, opts) {
+    const { handlers, events } = opts;
+    app.get('/update', async () => handlers.getState());
+    app.post('/update/apply', async () => {
+        const result = await handlers.postApply();
+        // Apply succeeded — the still-running binary is the *old* one; the new
+        // one becomes live after the service-host restarts. Surface the version
+        // we just applied so the UI can prompt the user to refresh.
+        events.publish({
+            type: 'update-available',
+            version: result.toVersion,
+        });
+        return result;
+    });
+    app.get('/update/settings', async () => handlers.getSettings());
+    app.put('/update/settings', async (request) => {
+        const body = (request.body ?? {});
+        return handlers.putSettings(body);
+    });
+}
+//# sourceMappingURL=update.js.map

package/dist/server/routes/update.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"update.js","sourceRoot":"","sources":["../../../src/server/routes/update.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAYH,MAAM,UAAU,oBAAoB,CAAC,GAAoB,EAAE,IAAyB;IAClF,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;IAElC,GAAG,CAAC,GAAG,CAAC,SAAS,EAAE,KAAK,IAAI,EAAE,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC,CAAC;IAEpD,GAAG,CAAC,IAAI,CAAC,eAAe,EAAE,KAAK,IAAI,EAAE;QACnC,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,SAAS,EAAE,CAAC;QAC1C,uEAAuE;QACvE,wEAAwE;QACxE,4DAA4D;QAC5D,MAAM,CAAC,OAAO,CAAC;YACb,IAAI,EAAE,kBAAkB;YACxB,OAAO,EAAE,MAAM,CAAC,SAAS;SAC1B,CAAC,CAAC;QACH,OAAO,MAAM,CAAC;IAChB,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,GAAG,CAAC,kBAAkB,EAAE,KAAK,IAAI,EAAE,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC,CAAC;IAEhE,GAAG,CAAC,GAAG,CAAC,kBAAkB,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;QAC5C,MAAM,IAAI,GAAG,CAAC,OAAO,CAAC,IAAI,IAAI,EAAE,CAAkD,CAAC;QACnF,OAAO,QAAQ,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;IACpC,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/server/server.d.ts

@@ -0,0 +1,40 @@
+/**
+ * Fastify lifecycle for the cadre-host local UI.
+ *
+ * Bound to `127.0.0.1:<uiPort>` only — never `0.0.0.0`. On `EADDRINUSE`
+ * tries the configured port and then nine consecutive ports. On total
+ * failure the start() promise rejects with a clear message naming every
+ * port that was attempted.
+ *
+ * Shutdown drains with a 5 s timeout, mirroring cadre-provider's pattern.
+ */
+import { type FastifyInstance } from 'fastify';
+export interface StartServerOptions {
+    /** Preferred port. The server tries this then the next 9 on EADDRINUSE. */
+    preferredPort: number;
+    /**
+     * Test override: when 0, lets the OS pick any free port (skips the
+     * fallback loop). The returned `port` reflects the actual bound port.
+     */
+    forcePort?: 0;
+}
+export interface StartedServer {
+    port: number;
+    url: string;
+}
+export interface ShutdownOptions {
+    /** Override the 5 s drain timeout (tests). */
+    drainTimeoutMs?: number;
+}
+/**
+ * Bind `app` to the loopback interface with port-fallback. Returns the
+ * actually-bound port — the configured port may be in use.
+ */
+export declare function startListening(app: FastifyInstance, opts: StartServerOptions): Promise<StartedServer>;
+/**
+ * Close the server with a hard 5 s drain timeout. Idempotent — safe to call
+ * from a SIGINT/SIGTERM handler that may fire twice.
+ */
+export declare function stopListening(app: FastifyInstance, opts?: ShutdownOptions): Promise<void>;
+/** Create a bare Fastify instance with the project's logging convention. */
+export declare function buildFastify(): FastifyInstance;

package/dist/server/server.js

@@ -0,0 +1,90 @@
+/**
+ * Fastify lifecycle for the cadre-host local UI.
+ *
+ * Bound to `127.0.0.1:<uiPort>` only — never `0.0.0.0`. On `EADDRINUSE`
+ * tries the configured port and then nine consecutive ports. On total
+ * failure the start() promise rejects with a clear message naming every
+ * port that was attempted.
+ *
+ * Shutdown drains with a 5 s timeout, mirroring cadre-provider's pattern.
+ */
+import Fastify from 'fastify';
+import debug from 'debug';
+const log = debug('cadre:host:server');
+/** Hard cap on Fastify's drain phase during shutdown. */
+const SHUTDOWN_DRAIN_TIMEOUT_MS = 5000;
+/** Inclusive count of ports to try (config port + 9 alternates). */
+const PORT_FALLBACK_TRIES = 10;
+/** Loopback interface; never serve from 0.0.0.0. */
+const LOOPBACK_HOST = '127.0.0.1';
+/**
+ * Bind `app` to the loopback interface with port-fallback. Returns the
+ * actually-bound port — the configured port may be in use.
+ */
+export async function startListening(app, opts) {
+    if (opts.forcePort === 0) {
+        const address = await app.listen({ host: LOOPBACK_HOST, port: 0 });
+        const port = parsePort(address);
+        return { port, url: `http://${LOOPBACK_HOST}:${port}` };
+    }
+    const tried = [];
+    let lastErr = null;
+    for (let i = 0; i < PORT_FALLBACK_TRIES; i++) {
+        const port = opts.preferredPort + i;
+        tried.push(port);
+        try {
+            const address = await app.listen({ host: LOOPBACK_HOST, port });
+            const bound = parsePort(address);
+            if (i > 0) {
+                log('port %d in use; bound on fallback port %d', opts.preferredPort, bound);
+            }
+            return { port: bound, url: `http://${LOOPBACK_HOST}:${bound}` };
+        }
+        catch (err) {
+            const code = err.code;
+            if (code !== 'EADDRINUSE') {
+                throw err;
+            }
+            lastErr = err;
+            log('port %d in use, trying next', port);
+        }
+    }
+    throw new Error(`cadre-host: all ${PORT_FALLBACK_TRIES} candidate ports were in use ` +
+        `(${tried.join(', ')}). Reconfigure uiPort in host.config.json. ` +
+        `Last error: ${lastErr?.message ?? 'unknown'}`);
+}
+/**
+ * Close the server with a hard 5 s drain timeout. Idempotent — safe to call
+ * from a SIGINT/SIGTERM handler that may fire twice.
+ */
+export async function stopListening(app, opts = {}) {
+    const drainMs = opts.drainTimeoutMs ?? SHUTDOWN_DRAIN_TIMEOUT_MS;
+    let timer;
+    const drain = app.close();
+    const timeout = new Promise((resolve) => {
+        timer = setTimeout(() => resolve('timeout'), drainMs);
+    });
+    const outcome = await Promise.race([drain.then(() => 'drained'), timeout]);
+    if (timer)
+        clearTimeout(timer);
+    if (outcome === 'timeout') {
+        log('shutdown drain timeout after %dms', drainMs);
+    }
+}
+/** Create a bare Fastify instance with the project's logging convention. */
+export function buildFastify() {
+    return Fastify({
+        // Stay quiet by default — request-level logs are noisy on a local UI.
+        // Operators can opt in via the `debug` env var (cadre:host:*).
+        logger: false,
+        disableRequestLogging: true,
+    });
+}
+function parsePort(address) {
+    // address is e.g. http://127.0.0.1:8765
+    const m = address.match(/:(\d+)\/?$/);
+    if (!m)
+        throw new Error(`cadre-host: unable to parse port from listen address: ${address}`);
+    return Number(m[1]);
+}
+//# sourceMappingURL=server.js.map

package/dist/server/server.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"server.js","sourceRoot":"","sources":["../../src/server/server.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,OAAiC,MAAM,SAAS,CAAC;AACxD,OAAO,KAAK,MAAM,OAAO,CAAC;AAE1B,MAAM,GAAG,GAAG,KAAK,CAAC,mBAAmB,CAAC,CAAC;AAEvC,yDAAyD;AACzD,MAAM,yBAAyB,GAAG,IAAI,CAAC;AACvC,oEAAoE;AACpE,MAAM,mBAAmB,GAAG,EAAE,CAAC;AAC/B,oDAAoD;AACpD,MAAM,aAAa,GAAG,WAAW,CAAC;AAsBlC;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,GAAoB,EACpB,IAAwB;IAExB,IAAI,IAAI,CAAC,SAAS,KAAK,CAAC,EAAE,CAAC;QACzB,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC;QACnE,MAAM,IAAI,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC;QAChC,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,UAAU,aAAa,IAAI,IAAI,EAAE,EAAE,CAAC;IAC1D,CAAC;IAED,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,IAAI,OAAO,GAAiB,IAAI,CAAC;IACjC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,mBAAmB,EAAE,CAAC,EAAE,EAAE,CAAC;QAC7C,MAAM,IAAI,GAAG,IAAI,CAAC,aAAa,GAAG,CAAC,CAAC;QACpC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACjB,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;YAChE,MAAM,KAAK,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC;YACjC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;gBACV,GAAG,CAAC,2CAA2C,EAAE,IAAI,CAAC,aAAa,EAAE,KAAK,CAAC,CAAC;YAC9E,CAAC;YACD,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,UAAU,aAAa,IAAI,KAAK,EAAE,EAAE,CAAC;QAClE,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,IAAI,GAAI,GAA6B,CAAC,IAAI,CAAC;YACjD,IAAI,IAAI,KAAK,YAAY,EAAE,CAAC;gBAC1B,MAAM,GAAG,CAAC;YACZ,CAAC;YACD,OAAO,GAAG,GAAY,CAAC;YACvB,GAAG,CAAC,6BAA6B,EAAE,IAAI,CAAC,CAAC;QAC3C,CAAC;IACH,CAAC;IACD,MAAM,IAAI,KAAK,CACb,mBAAmB,mBAAmB,+BAA+B;QACrE,IAAI,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,6CAA6C;QACjE,eAAe,OAAO,EAAE,OAAO,IAAI,SAAS,EAAE,CAC/C,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,GAAoB,EACpB,OAAwB,EAAE;IAE1B,MAAM,OAAO,GAAG,IAAI,CAAC,cAAc,IAAI,yBAAyB,CAAC;IACjE,IAAI,KAAgD,CAAC;IACrD,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,EAAE,CAAC;IAC1B,MAAM,OAAO,GAAG,IAAI,OAAO,CAAY,CAAC,OAAO,EAAE,EAAE;QACjD,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,OAAO,CAAC,CAAC;IACxD,CAAC,CAAC,CAAC;IACH,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,SAAkB,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC;IACpF,IAAI,KAAK;QAAE,YAAY,CAAC,KAAK,CAAC,CAAC;IAC/B,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;QAC1B,GAAG,CAAC,mCAAmC,EAAE,OAAO,CAAC,CAAC;IACpD,CAAC;AACH,CAAC;AAED,4EAA4E;AAC5E,MAAM,UAAU,YAAY;IAC1B,OAAO,OAAO,CAAC;QACb,sEAAsE;QACtE,+DAA+D;QAC/D,MAAM,EAAE,KAAK;QACb,qBAAqB,EAAE,IAAI;KAC5B,CAAC,CAAC;AACL,CAAC;AAED,SAAS,SAAS,CAAC,OAAe;IAChC,wCAAwC;IACxC,MAAM,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;IACtC,IAAI,CAAC,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,yDAAyD,OAAO,EAAE,CAAC,CAAC;IAC5F,OAAO,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACtB,CAAC"}

package/dist/server/settings-store.d.ts

@@ -0,0 +1,24 @@
+/**
+ * Settings store — read-write facade around `host.config.json` for the
+ * /api/settings route.
+ *
+ * The installer (`6.4.1`) owns the schema (`HostConfigFile` v2). This module
+ * just delegates load/persist to that file's helpers; it exists so route
+ * handlers can read/write without each one re-resolving `configPath(dataDir)`.
+ *
+ * PUT semantics live in routes/settings.ts; this class is purely an I/O
+ * boundary so tests can swap it for an in-memory fake.
+ */
+import { type HostConfigFile } from '../installer/config.js';
+export interface HostSettingsStoreOptions {
+    /** Resolved cadre-host data dir. */
+    dataDir: string;
+}
+export declare class HostSettingsStore {
+    private readonly configPath;
+    constructor(opts: HostSettingsStoreOptions);
+    /** Read the current host.config.json (runs v1→v2 migration on first read). */
+    read(): HostConfigFile;
+    /** Patch and persist. */
+    update(patch: Partial<Omit<HostConfigFile, 'version'>>): HostConfigFile;
+}

package/dist/server/settings-store.js

@@ -0,0 +1,27 @@
+/**
+ * Settings store — read-write facade around `host.config.json` for the
+ * /api/settings route.
+ *
+ * The installer (`6.4.1`) owns the schema (`HostConfigFile` v2). This module
+ * just delegates load/persist to that file's helpers; it exists so route
+ * handlers can read/write without each one re-resolving `configPath(dataDir)`.
+ *
+ * PUT semantics live in routes/settings.ts; this class is purely an I/O
+ * boundary so tests can swap it for an in-memory fake.
+ */
+import { configPath } from '../installer/paths.js';
+import { readHostConfig, updateHostConfig } from '../installer/config.js';
+export class HostSettingsStore {
+    constructor(opts) {
+        this.configPath = configPath(opts.dataDir);
+    }
+    /** Read the current host.config.json (runs v1→v2 migration on first read). */
+    read() {
+        return readHostConfig(this.configPath);
+    }
+    /** Patch and persist. */
+    update(patch) {
+        return updateHostConfig(this.configPath, patch);
+    }
+}
+//# sourceMappingURL=settings-store.js.map

package/dist/server/settings-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"settings-store.js","sourceRoot":"","sources":["../../src/server/settings-store.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AACnD,OAAO,EAAE,cAAc,EAAE,gBAAgB,EAAuB,MAAM,wBAAwB,CAAC;AAO/F,MAAM,OAAO,iBAAiB;IAG5B,YAAY,IAA8B;QACxC,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC7C,CAAC;IAED,8EAA8E;IAC9E,IAAI;QACF,OAAO,cAAc,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IACzC,CAAC;IAED,yBAAyB;IACzB,MAAM,CAAC,KAA+C;QACpD,OAAO,gBAAgB,CAAC,IAAI,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;IAClD,CAAC;CACF"}

package/dist/server/static.d.ts

@@ -0,0 +1,25 @@
+/**
+ * Static-asset mount for the SPA bundle.
+ *
+ * The SPA bundle is produced by `6.5.2-cadre-host-local-ui-spa` into
+ * `<package>/dist/ui/`. When that directory exists we serve files from it
+ * with an `index.html` SPA fallback. When it's missing (running from source
+ * before the SPA ticket lands) we serve a placeholder page that explains
+ * how to install/build the SPA.
+ *
+ * Hand-rolled rather than pulling in `@fastify/static` — the surface area we
+ * need is tiny and the dep would only matter under tests that don't exercise
+ * static serving anyway.
+ */
+import type { FastifyInstance } from 'fastify';
+/**
+ * Default location of the SPA bundle when `cadre-host` runs from its
+ * installed package.
+ * - dist/server/static.js → ../ui  → packages/cadre-host/dist/ui
+ */
+export declare function defaultStaticRoot(): string;
+export interface StaticMountOptions {
+    /** Absolute path to the SPA build output (defaults to `defaultStaticRoot()`). */
+    rootDir?: string;
+}
+export declare function registerStaticMount(app: FastifyInstance, opts?: StaticMountOptions): void;