@serfab/cadre-host 0.7.1

package/dist/update/manifest.js

@@ -0,0 +1,152 @@
+/**
+ * Fetch + verify the signed update manifest.
+ *
+ * The manifest is a JSON envelope `{ manifest, sig }` where `sig` is a
+ * detached Ed25519 signature of `canonicalJson(manifest)`. cadre-host only
+ * trusts manifests whose signature matches the embedded release public key.
+ *
+ * Canonical serialization is a tiny local impl — depending on
+ * `json-canonicalize` (or similar) for a single call site is overkill, and
+ * the shape is fixed (`UpdateManifest`).
+ */
+import { sign as cryptoSign, verify as cryptoVerify } from 'node:crypto';
+import { ed25519FromRaw, getReleasePublicKey, getReleasePublicKeyBase64 } from './release-key.js';
+import { UpdateErrorException, } from './types.js';
+/** Default release-manifest URL. Overridable via env var on the caller. */
+export const DEFAULT_MANIFEST_URL = 'https://releases.serfab.io/cadre-host/latest.json';
+/**
+ * Fetch the manifest endpoint and validate the signature against the embedded
+ * release public key (or `CADRE_HOST_UPDATE_DEV_KEY` if set).
+ *
+ * Throws `UpdateErrorException` on any failure (bad JSON, bad signature,
+ * etc.). Network errors are *thrown* — the caller decides whether to log
+ * them at debug (the cadence path) or surface them (the apply path).
+ */
+export async function fetchManifest(opts) {
+    const fetcher = opts.fetcher ?? fetch;
+    const readTimeout = opts.readTimeoutMs ?? 10000;
+    const controller = new AbortController();
+    const timer = setTimeout(() => controller.abort(), readTimeout);
+    let response;
+    try {
+        response = await fetcher(opts.url, { signal: controller.signal });
+    }
+    finally {
+        clearTimeout(timer);
+    }
+    if (!response.ok) {
+        throw new Error(`manifest endpoint returned ${response.status}`);
+    }
+    let body;
+    try {
+        body = await response.json();
+    }
+    catch (err) {
+        throw new UpdateErrorException('manifest_invalid', `manifest is not valid JSON: ${err.message}`);
+    }
+    return verifyManifest(body);
+}
+/**
+ * Verify a parsed signed-manifest body. Pure (no network), so unit tests
+ * exercise this directly.
+ */
+export function verifyManifest(body, env = process.env) {
+    if (!isSignedManifest(body)) {
+        throw new UpdateErrorException('manifest_invalid', 'manifest envelope is malformed');
+    }
+    if (!isUpdateManifest(body.manifest)) {
+        throw new UpdateErrorException('manifest_invalid', 'manifest payload is missing required fields');
+    }
+    const sig = parseSignature(body.sig);
+    const canonical = Buffer.from(canonicalJson(body.manifest), 'utf8');
+    const key = getReleasePublicKey(env);
+    let ok;
+    try {
+        ok = cryptoVerify(null, canonical, key, sig);
+    }
+    catch (err) {
+        throw new UpdateErrorException('signature_invalid', `signature verification threw: ${err.message}`);
+    }
+    if (!ok) {
+        throw new UpdateErrorException('signature_invalid', 'manifest signature did not verify');
+    }
+    return body.manifest;
+}
+/** Exposed for test signers. */
+export function signManifestForTesting(manifest, privateKey) {
+    const canonical = Buffer.from(canonicalJson(manifest), 'utf8');
+    const sig = cryptoSign(null, canonical, privateKey).toString('base64');
+    return { manifest, sig: `ed25519:${sig}` };
+}
+/** Used by `apply.ts` to detect which key the signer matches. */
+export function publicKeyMatchesEmbedded(rawBase64, env = process.env) {
+    return rawBase64 === getReleasePublicKeyBase64(env);
+}
+/** Wrapper for `getReleasePublicKey`, re-exported for parity with `ed25519FromRaw`. */
+export { ed25519FromRaw };
+/** ---- internals ---- */
+function parseSignature(sig) {
+    const match = /^ed25519:(.+)$/.exec(sig);
+    if (!match) {
+        throw new UpdateErrorException('signature_invalid', `unsupported signature scheme: ${sig.slice(0, 16)}…`);
+    }
+    const decoded = Buffer.from(match[1], 'base64');
+    if (decoded.length !== 64) {
+        throw new UpdateErrorException('signature_invalid', `Ed25519 signature must be 64 bytes, got ${decoded.length}`);
+    }
+    return decoded;
+}
+function isSignedManifest(v) {
+    if (!v || typeof v !== 'object')
+        return false;
+    const obj = v;
+    return typeof obj.sig === 'string' && obj.manifest !== undefined && typeof obj.manifest === 'object';
+}
+function isUpdateManifest(v) {
+    if (!v || typeof v !== 'object')
+        return false;
+    const o = v;
+    if (o.v !== 1)
+        return false;
+    if (typeof o.version !== 'string' || o.version.length === 0)
+        return false;
+    if (typeof o.publishedAt !== 'string')
+        return false;
+    if (!o.channels || typeof o.channels !== 'object')
+        return false;
+    const npm = o.channels.npm;
+    if (!npm || typeof npm.package !== 'string' || typeof npm.tag !== 'string')
+        return false;
+    if (o.releaseNotesUrl !== undefined && typeof o.releaseNotesUrl !== 'string')
+        return false;
+    if (o.minPreviousVersion !== undefined && typeof o.minPreviousVersion !== 'string')
+        return false;
+    return true;
+}
+/**
+ * Canonical JSON: recursively sort object keys, no whitespace, no trailing
+ * newline. Matches a typical RFC 8785 subset for the fixed shape we sign.
+ * Arrays preserve order.
+ */
+export function canonicalJson(value) {
+    if (value === null)
+        return 'null';
+    if (typeof value === 'number') {
+        if (!Number.isFinite(value))
+            throw new Error('cannot serialize non-finite number');
+        return JSON.stringify(value);
+    }
+    if (typeof value === 'string' || typeof value === 'boolean') {
+        return JSON.stringify(value);
+    }
+    if (Array.isArray(value)) {
+        return '[' + value.map((v) => canonicalJson(v)).join(',') + ']';
+    }
+    if (typeof value === 'object') {
+        const obj = value;
+        const keys = Object.keys(obj).filter((k) => obj[k] !== undefined).sort();
+        return '{' + keys.map((k) => JSON.stringify(k) + ':' + canonicalJson(obj[k])).join(',') + '}';
+    }
+    throw new Error(`cannot serialize value of type ${typeof value}`);
+}
+//# sourceMappingURL=manifest.js.map

package/dist/update/manifest.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"manifest.js","sourceRoot":"","sources":["../../src/update/manifest.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EAAE,IAAI,IAAI,UAAU,EAAE,MAAM,IAAI,YAAY,EAAkB,MAAM,aAAa,CAAC;AAEzF,OAAO,EAAE,cAAc,EAAE,mBAAmB,EAAE,yBAAyB,EAAE,MAAM,kBAAkB,CAAC;AAClG,OAAO,EACL,oBAAoB,GAGrB,MAAM,YAAY,CAAC;AAEpB,2EAA2E;AAC3E,MAAM,CAAC,MAAM,oBAAoB,GAAG,mDAAmD,CAAC;AASxF;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,IAA0B;IAC5D,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,KAAK,CAAC;IACtC,MAAM,WAAW,GAAG,IAAI,CAAC,aAAa,IAAI,KAAM,CAAC;IACjD,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;IACzC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,WAAW,CAAC,CAAC;IAChE,IAAI,QAAkB,CAAC;IACvB,IAAI,CAAC;QACH,QAAQ,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,UAAU,CAAC,MAAM,EAAE,CAAC,CAAC;IACpE,CAAC;YAAS,CAAC;QACT,YAAY,CAAC,KAAK,CAAC,CAAC;IACtB,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,IAAI,KAAK,CAAC,8BAA8B,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;IACnE,CAAC;IACD,IAAI,IAAa,CAAC;IAClB,IAAI,CAAC;QACH,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;IAC/B,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,oBAAoB,CAC5B,kBAAkB,EAClB,+BAAgC,GAAa,CAAC,OAAO,EAAE,CACxD,CAAC;IACJ,CAAC;IACD,OAAO,cAAc,CAAC,IAAI,CAAC,CAAC;AAC9B,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,cAAc,CAC5B,IAAa,EACb,MAAyB,OAAO,CAAC,GAAG;IAEpC,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,EAAE,CAAC;QAC5B,MAAM,IAAI,oBAAoB,CAAC,kBAAkB,EAAE,gCAAgC,CAAC,CAAC;IACvF,CAAC;IACD,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;QACrC,MAAM,IAAI,oBAAoB,CAAC,kBAAkB,EAAE,6CAA6C,CAAC,CAAC;IACpG,CAAC;IAED,MAAM,GAAG,GAAG,cAAc,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACrC,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,CAAC;IACpE,MAAM,GAAG,GAAG,mBAAmB,CAAC,GAAG,CAAC,CAAC;IAErC,IAAI,EAAW,CAAC;IAChB,IAAI,CAAC;QACH,EAAE,GAAG,YAAY,CAAC,IAAI,EAAE,SAAS,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;IAC/C,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,oBAAoB,CAC5B,mBAAmB,EACnB,iCAAkC,GAAa,CAAC,OAAO,EAAE,CAC1D,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,EAAE,EAAE,CAAC;QACR,MAAM,IAAI,oBAAoB,CAAC,mBAAmB,EAAE,mCAAmC,CAAC,CAAC;IAC3F,CAAC;IACD,OAAO,IAAI,CAAC,QAAQ,CAAC;AACvB,CAAC;AAED,gCAAgC;AAChC,MAAM,UAAU,sBAAsB,CAAC,QAAwB,EAAE,UAAqB;IACpF,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,CAAC;IAC/D,MAAM,GAAG,GAAG,UAAU,CAAC,IAAI,EAAE,SAAS,EAAE,UAAU,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACvE,OAAO,EAAE,QAAQ,EAAE,GAAG,EAAE,WAAW,GAAG,EAAE,EAAE,CAAC;AAC7C,CAAC;AAED,iEAAiE;AACjE,MAAM,UAAU,wBAAwB,CAAC,SAAiB,EAAE,MAAyB,OAAO,CAAC,GAAG;IAC9F,OAAO,SAAS,KAAK,yBAAyB,CAAC,GAAG,CAAC,CAAC;AACtD,CAAC;AAED,uFAAuF;AACvF,OAAO,EAAE,cAAc,EAAE,CAAC;AAE1B,0BAA0B;AAE1B,SAAS,cAAc,CAAC,GAAW;IACjC,MAAM,KAAK,GAAG,gBAAgB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACzC,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,IAAI,oBAAoB,CAAC,mBAAmB,EAAE,iCAAiC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC;IAC5G,CAAC;IACD,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAE,EAAE,QAAQ,CAAC,CAAC;IACjD,IAAI,OAAO,CAAC,MAAM,KAAK,EAAE,EAAE,CAAC;QAC1B,MAAM,IAAI,oBAAoB,CAAC,mBAAmB,EAAE,2CAA2C,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IACnH,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,gBAAgB,CAAC,CAAU;IAClC,IAAI,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC9C,MAAM,GAAG,GAAG,CAA4B,CAAC;IACzC,OAAO,OAAO,GAAG,CAAC,GAAG,KAAK,QAAQ,IAAI,GAAG,CAAC,QAAQ,KAAK,SAAS,IAAI,OAAO,GAAG,CAAC,QAAQ,KAAK,QAAQ,CAAC;AACvG,CAAC;AAED,SAAS,gBAAgB,CAAC,CAAU;IAClC,IAAI,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC9C,MAAM,CAAC,GAAG,CAA4B,CAAC;IACvC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAC5B,IAAI,OAAO,CAAC,CAAC,OAAO,KAAK,QAAQ,IAAI,CAAC,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAC1E,IAAI,OAAO,CAAC,CAAC,WAAW,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IACpD,IAAI,CAAC,CAAC,CAAC,QAAQ,IAAI,OAAO,CAAC,CAAC,QAAQ,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAChE,MAAM,GAAG,GAAI,CAAC,CAAC,QAAoC,CAAC,GAA0C,CAAC;IAC/F,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,CAAC,OAAO,KAAK,QAAQ,IAAI,OAAO,GAAG,CAAC,GAAG,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IACzF,IAAI,CAAC,CAAC,eAAe,KAAK,SAAS,IAAI,OAAO,CAAC,CAAC,eAAe,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC3F,IAAI,CAAC,CAAC,kBAAkB,KAAK,SAAS,IAAI,OAAO,CAAC,CAAC,kBAAkB,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IACjG,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,aAAa,CAAC,KAAc;IAC1C,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,MAAM,CAAC;IAClC,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;QACnF,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAC/B,CAAC;IACD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,KAAK,KAAK,SAAS,EAAE,CAAC;QAC5D,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAC/B,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,GAAG,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC;IAClE,CAAC;IACD,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,MAAM,GAAG,GAAG,KAAgC,CAAC;QAC7C,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC,IAAI,EAAE,CAAC;QACzE,OAAO,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,GAAG,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC;IAChG,CAAC;IACD,MAAM,IAAI,KAAK,CAAC,kCAAkC,OAAO,KAAK,EAAE,CAAC,CAAC;AACpE,CAAC"}

package/dist/update/release-key.d.ts

@@ -0,0 +1,24 @@
+/**
+ * Production Ed25519 public key used to verify the update manifest.
+ *
+ * The signing key lives offline with the release operator; only the public
+ * half ever ships in the binary.
+ *
+ * **Provisional key.** The placeholder below is regenerated whenever the
+ * release tooling is rotated — the key in this file is replaced atomically
+ * by the release build. CI keys differ from prod keys; for dev/CI overrides
+ * see `CADRE_HOST_UPDATE_DEV_KEY`.
+ */
+import { KeyObject } from 'node:crypto';
+/**
+ * Public key (32 raw bytes, base64) — env override beats the embedded one.
+ * Used by both production and CI smoke tests.
+ */
+export declare function getReleasePublicKeyBase64(env?: NodeJS.ProcessEnv): string;
+/** Lazily build the KeyObject used by `crypto.verify`. */
+export declare function getReleasePublicKey(env?: NodeJS.ProcessEnv): KeyObject;
+/**
+ * Build an Ed25519 KeyObject from a raw 32-byte base64 public key by wrapping
+ * it in the SubjectPublicKeyInfo DER prefix Node expects.
+ */
+export declare function ed25519FromRaw(base64Raw: string): KeyObject;

package/dist/update/release-key.js

@@ -0,0 +1,52 @@
+/**
+ * Production Ed25519 public key used to verify the update manifest.
+ *
+ * The signing key lives offline with the release operator; only the public
+ * half ever ships in the binary.
+ *
+ * **Provisional key.** The placeholder below is regenerated whenever the
+ * release tooling is rotated — the key in this file is replaced atomically
+ * by the release build. CI keys differ from prod keys; for dev/CI overrides
+ * see `CADRE_HOST_UPDATE_DEV_KEY`.
+ */
+import { createPublicKey } from 'node:crypto';
+/**
+ * Raw 32-byte Ed25519 public key, base64-encoded. Placeholder pending key
+ * generation by the release op. Mismatch with the real signer will surface
+ * as `signature_invalid`, which the UI treats as "update available but
+ * unverifiable" rather than auto-applying.
+ *
+ * The real key generation/publication procedure is tracked in the
+ * release-tooling backlog; until then, the dev override below is the only
+ * supported path for CI + local manifest testing.
+ */
+const PROD_KEY_BASE64 = 'AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=';
+/**
+ * Public key (32 raw bytes, base64) — env override beats the embedded one.
+ * Used by both production and CI smoke tests.
+ */
+export function getReleasePublicKeyBase64(env = process.env) {
+    const override = env.CADRE_HOST_UPDATE_DEV_KEY?.trim();
+    if (override && override.length > 0)
+        return override;
+    return PROD_KEY_BASE64;
+}
+/** Lazily build the KeyObject used by `crypto.verify`. */
+export function getReleasePublicKey(env = process.env) {
+    return ed25519FromRaw(getReleasePublicKeyBase64(env));
+}
+/**
+ * Build an Ed25519 KeyObject from a raw 32-byte base64 public key by wrapping
+ * it in the SubjectPublicKeyInfo DER prefix Node expects.
+ */
+export function ed25519FromRaw(base64Raw) {
+    const raw = Buffer.from(base64Raw, 'base64');
+    if (raw.length !== 32) {
+        throw new Error(`Ed25519 public key must be 32 bytes, got ${raw.length}`);
+    }
+    // SPKI DER prefix for Ed25519: 0x302a300506032b6570032100
+    const prefix = Buffer.from('302a300506032b6570032100', 'hex');
+    const spki = Buffer.concat([prefix, raw]);
+    return createPublicKey({ key: spki, format: 'der', type: 'spki' });
+}
+//# sourceMappingURL=release-key.js.map

package/dist/update/release-key.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"release-key.js","sourceRoot":"","sources":["../../src/update/release-key.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EAAE,eAAe,EAAa,MAAM,aAAa,CAAC;AAEzD;;;;;;;;;GASG;AACH,MAAM,eAAe,GAAG,8CAA8C,CAAC;AAEvE;;;GAGG;AACH,MAAM,UAAU,yBAAyB,CAAC,MAAyB,OAAO,CAAC,GAAG;IAC5E,MAAM,QAAQ,GAAG,GAAG,CAAC,yBAAyB,EAAE,IAAI,EAAE,CAAC;IACvD,IAAI,QAAQ,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,QAAQ,CAAC;IACrD,OAAO,eAAe,CAAC;AACzB,CAAC;AAED,0DAA0D;AAC1D,MAAM,UAAU,mBAAmB,CAAC,MAAyB,OAAO,CAAC,GAAG;IACtE,OAAO,cAAc,CAAC,yBAAyB,CAAC,GAAG,CAAC,CAAC,CAAC;AACxD,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,cAAc,CAAC,SAAiB;IAC9C,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;IAC7C,IAAI,GAAG,CAAC,MAAM,KAAK,EAAE,EAAE,CAAC;QACtB,MAAM,IAAI,KAAK,CAAC,4CAA4C,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;IAC5E,CAAC;IACD,0DAA0D;IAC1D,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,0BAA0B,EAAE,KAAK,CAAC,CAAC;IAC9D,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC;IAC1C,OAAO,eAAe,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;AACrE,CAAC"}

package/dist/update/store.d.ts

@@ -0,0 +1,22 @@
+/**
+ * Atomic JSON store for `<dataDir>/update-state.json`.
+ *
+ * Mirrors `TrustCircleStore` / `NatStore`: load on demand, write to
+ * `<path>.tmp` then rename. Single-writer assumption — only one cadre-host
+ * process owns a given dataDir.
+ */
+import { type UpdateState } from './types.js';
+export declare class UpdateStateStore {
+    private readonly path;
+    private cache;
+    constructor(rootDir: string);
+    filePath(): string;
+    /** Load (with caching). A missing file returns an empty state. */
+    load(): UpdateState;
+    /** Persist a new state atomically. */
+    save(state: UpdateState): void;
+    /** Merge a patch into the current state and persist. */
+    update(patch: Partial<Omit<UpdateState, 'version'>>): UpdateState;
+    /** Drop a specific field from the persisted state. */
+    clearField<K extends keyof Omit<UpdateState, 'version'>>(field: K): UpdateState;
+}

package/dist/update/store.js

@@ -0,0 +1,81 @@
+/**
+ * Atomic JSON store for `<dataDir>/update-state.json`.
+ *
+ * Mirrors `TrustCircleStore` / `NatStore`: load on demand, write to
+ * `<path>.tmp` then rename. Single-writer assumption — only one cadre-host
+ * process owns a given dataDir.
+ */
+import { existsSync, mkdirSync, readFileSync, renameSync, writeFileSync } from 'node:fs';
+import { join } from 'node:path';
+import debug from 'debug';
+import { UpdateErrorException } from './types.js';
+const log = debug('cadre:host:update-store');
+const FILE_VERSION = 1;
+const FILE_NAME = 'update-state.json';
+export class UpdateStateStore {
+    constructor(rootDir) {
+        this.cache = null;
+        mkdirSync(rootDir, { recursive: true });
+        this.path = join(rootDir, FILE_NAME);
+    }
+    filePath() {
+        return this.path;
+    }
+    /** Load (with caching). A missing file returns an empty state. */
+    load() {
+        if (this.cache)
+            return this.cache;
+        if (!existsSync(this.path)) {
+            this.cache = { version: FILE_VERSION };
+            return this.cache;
+        }
+        let raw;
+        try {
+            raw = readFileSync(this.path, 'utf8');
+        }
+        catch (err) {
+            throw new UpdateErrorException('storage_error', `failed to read update-state at ${this.path}: ${err.message}`);
+        }
+        let parsed;
+        try {
+            parsed = JSON.parse(raw);
+        }
+        catch (err) {
+            throw new UpdateErrorException('storage_error', `update-state at ${this.path} is not valid JSON: ${err.message}`);
+        }
+        if (!parsed || typeof parsed !== 'object') {
+            throw new UpdateErrorException('storage_error', `update-state at ${this.path} is not an object`);
+        }
+        const obj = parsed;
+        if (obj.version !== FILE_VERSION) {
+            throw new UpdateErrorException('unsupported_state_version', `update-state at ${this.path} has unsupported version ${String(obj.version)}`);
+        }
+        this.cache = obj;
+        return this.cache;
+    }
+    /** Persist a new state atomically. */
+    save(state) {
+        const next = { ...state, version: FILE_VERSION };
+        const payload = JSON.stringify(next, null, 2) + '\n';
+        const tmp = `${this.path}.tmp`;
+        writeFileSync(tmp, payload, { encoding: 'utf8' });
+        renameSync(tmp, this.path);
+        this.cache = next;
+        log('saved update-state.json (available=%s, applying=%s) to %s', next.available?.version ?? '-', next.applyInProgress ? `${next.applyInProgress.fromVersion}→${next.applyInProgress.toVersion}` : '-', this.path);
+    }
+    /** Merge a patch into the current state and persist. */
+    update(patch) {
+        const current = this.load();
+        const next = { ...current, ...patch, version: FILE_VERSION };
+        this.save(next);
+        return next;
+    }
+    /** Drop a specific field from the persisted state. */
+    clearField(field) {
+        const current = { ...this.load() };
+        delete current[field];
+        this.save(current);
+        return current;
+    }
+}
+//# sourceMappingURL=store.js.map

package/dist/update/store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"store.js","sourceRoot":"","sources":["../../src/update/store.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACzF,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,KAAK,MAAM,OAAO,CAAC;AAE1B,OAAO,EAAE,oBAAoB,EAAoB,MAAM,YAAY,CAAC;AAEpE,MAAM,GAAG,GAAG,KAAK,CAAC,yBAAyB,CAAC,CAAC;AAE7C,MAAM,YAAY,GAAG,CAAC,CAAC;AACvB,MAAM,SAAS,GAAG,mBAAmB,CAAC;AAEtC,MAAM,OAAO,gBAAgB;IAI3B,YAAY,OAAe;QAFnB,UAAK,GAAuB,IAAI,CAAC;QAGvC,SAAS,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACxC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;IACvC,CAAC;IAED,QAAQ;QACN,OAAO,IAAI,CAAC,IAAI,CAAC;IACnB,CAAC;IAED,kEAAkE;IAClE,IAAI;QACF,IAAI,IAAI,CAAC,KAAK;YAAE,OAAO,IAAI,CAAC,KAAK,CAAC;QAClC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YAC3B,IAAI,CAAC,KAAK,GAAG,EAAE,OAAO,EAAE,YAAY,EAAE,CAAC;YACvC,OAAO,IAAI,CAAC,KAAK,CAAC;QACpB,CAAC;QACD,IAAI,GAAW,CAAC;QAChB,IAAI,CAAC;YACH,GAAG,GAAG,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QACxC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,IAAI,oBAAoB,CAC5B,eAAe,EACf,kCAAkC,IAAI,CAAC,IAAI,KAAM,GAAa,CAAC,OAAO,EAAE,CACzE,CAAC;QACJ,CAAC;QACD,IAAI,MAAe,CAAC;QACpB,IAAI,CAAC;YACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC3B,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,IAAI,oBAAoB,CAC5B,eAAe,EACf,mBAAmB,IAAI,CAAC,IAAI,uBAAwB,GAAa,CAAC,OAAO,EAAE,CAC5E,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;YAC1C,MAAM,IAAI,oBAAoB,CAAC,eAAe,EAAE,mBAAmB,IAAI,CAAC,IAAI,mBAAmB,CAAC,CAAC;QACnG,CAAC;QACD,MAAM,GAAG,GAAG,MAAiC,CAAC;QAC9C,IAAI,GAAG,CAAC,OAAO,KAAK,YAAY,EAAE,CAAC;YACjC,MAAM,IAAI,oBAAoB,CAC5B,2BAA2B,EAC3B,mBAAmB,IAAI,CAAC,IAAI,4BAA4B,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAC9E,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,KAAK,GAAG,GAA6B,CAAC;QAC3C,OAAO,IAAI,CAAC,KAAK,CAAC;IACpB,CAAC;IAED,sCAAsC;IACtC,IAAI,CAAC,KAAkB;QACrB,MAAM,IAAI,GAAgB,EAAE,GAAG,KAAK,EAAE,OAAO,EAAE,YAAY,EAAE,CAAC;QAC9D,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC;QACrD,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,IAAI,MAAM,CAAC;QAC/B,aAAa,CAAC,GAAG,EAAE,OAAO,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;QAClD,UAAU,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;QAC3B,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;QAClB,GAAG,CAAC,2DAA2D,EAC7D,IAAI,CAAC,SAAS,EAAE,OAAO,IAAI,GAAG,EAC9B,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,eAAe,CAAC,WAAW,IAAI,IAAI,CAAC,eAAe,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,GAAG,EACpG,IAAI,CAAC,IAAI,CAAC,CAAC;IACf,CAAC;IAED,wDAAwD;IACxD,MAAM,CAAC,KAA4C;QACjD,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QAC5B,MAAM,IAAI,GAAgB,EAAE,GAAG,OAAO,EAAE,GAAG,KAAK,EAAE,OAAO,EAAE,YAAY,EAAE,CAAC;QAC1E,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAChB,OAAO,IAAI,CAAC;IACd,CAAC;IAED,sDAAsD;IACtD,UAAU,CAA+C,KAAQ;QAC/D,MAAM,OAAO,GAAG,EAAE,GAAG,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC;QACnC,OAAO,OAAO,CAAC,KAAK,CAAC,CAAC;QACtB,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACnB,OAAO,OAAO,CAAC;IACjB,CAAC;CACF"}

package/dist/update/types.d.ts

@@ -0,0 +1,90 @@
+/**
+ * Types for the cadre-host update flow.
+ *
+ * The update flow is split across:
+ *
+ *   - manifest.ts — fetch + verify the signed `latest.json` envelope.
+ *   - store.ts    — persist the user-facing `UpdateState` to `<dataDir>/update-state.json`.
+ *   - apply.ts    — invoke `npm install -g` + rollback on failure.
+ *   - index.ts    — composes the above (UpdateService).
+ *
+ * Mirrors the typed-handler pattern used by trust-circle and NAT (handlers
+ * throw `UpdateError` whose `.code` the local-UI maps to HTTP status).
+ */
+/** Inner manifest object — signed by the release key. */
+export interface UpdateManifest {
+    /** Schema version. Bumped on incompatible manifest changes. */
+    v: 1;
+    /** Version string being announced (semver). */
+    version: string;
+    /** ISO publish timestamp. */
+    publishedAt: string;
+    /** Per-channel install hints. cadre-host currently only consults `npm`. */
+    channels: {
+        npm: {
+            package: string;
+            tag: string;
+        };
+    };
+    /** Optional human-facing release-notes URL. */
+    releaseNotesUrl?: string;
+    /**
+     * Minimum previous version that can step directly to this release. If the
+     * current install is older, the user must update through an intermediate
+     * release first.
+     */
+    minPreviousVersion?: string;
+}
+/** Signed envelope as fetched from the manifest URL. */
+export interface SignedManifest {
+    manifest: UpdateManifest;
+    /** Detached signature in the form `ed25519:<base64>`. */
+    sig: string;
+}
+/** Persisted shape of `<dataDir>/update-state.json`. */
+export interface UpdateState {
+    /** Schema version of this file. */
+    version: 1;
+    /** ISO timestamp of the most recent successful manifest fetch. */
+    lastChecked?: string;
+    /** Set when the manifest advertises a version newer than `currentVersion`. */
+    available?: {
+        version: string;
+        publishedAt: string;
+        releaseNotesUrl?: string;
+    };
+    /** Records the version before an apply, so a rollback can target it. */
+    applyInProgress?: {
+        fromVersion: string;
+        toVersion: string;
+        startedAt: string;
+    };
+    /** Most recent apply / verification error, surfaced by the UI banner. */
+    lastError?: UpdateError;
+}
+/** Stable error payload — both thrown via `UpdateErrorException` and serialized into state. */
+export interface UpdateError {
+    code: UpdateErrorCode;
+    message: string;
+    at: string;
+}
+export type UpdateErrorCode = 'signature_invalid' | 'manifest_invalid' | 'unsupported_state_version' | 'apply_in_progress' | 'apply_failed' | 'rollback_failed' | 'min_previous_version' | 'no_update_available' | 'storage_error';
+/** Thrown by UpdateService.apply() and related entry points. */
+export declare class UpdateErrorException extends Error {
+    readonly code: UpdateErrorCode;
+    constructor(code: UpdateErrorCode, message: string);
+}
+/** Result of a successful apply() — the caller can inspect what just happened. */
+export interface UpdateApplyResult {
+    fromVersion: string;
+    toVersion: string;
+    restarted: boolean;
+    restartError?: string;
+}
+/** Subset of `host.config.json` consumed by the update flow. */
+export interface UpdateSettings {
+    /** When true, the daily timer applies updates automatically. */
+    autoApply: boolean;
+    /** Optional override for the manifest URL. */
+    manifestUrl?: string;
+}

package/dist/update/types.js

@@ -0,0 +1,22 @@
+/**
+ * Types for the cadre-host update flow.
+ *
+ * The update flow is split across:
+ *
+ *   - manifest.ts — fetch + verify the signed `latest.json` envelope.
+ *   - store.ts    — persist the user-facing `UpdateState` to `<dataDir>/update-state.json`.
+ *   - apply.ts    — invoke `npm install -g` + rollback on failure.
+ *   - index.ts    — composes the above (UpdateService).
+ *
+ * Mirrors the typed-handler pattern used by trust-circle and NAT (handlers
+ * throw `UpdateError` whose `.code` the local-UI maps to HTTP status).
+ */
+/** Thrown by UpdateService.apply() and related entry points. */
+export class UpdateErrorException extends Error {
+    constructor(code, message) {
+        super(message);
+        this.name = 'UpdateErrorException';
+        this.code = code;
+    }
+}
+//# sourceMappingURL=types.js.map

package/dist/update/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/update/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAuEH,gEAAgE;AAChE,MAAM,OAAO,oBAAqB,SAAQ,KAAK;IAG7C,YAAY,IAAqB,EAAE,OAAe;QAChD,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,sBAAsB,CAAC;QACnC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;IACnB,CAAC;CACF"}

package/dist/update/version.d.ts

@@ -0,0 +1,18 @@
+/**
+ * Tiny semver comparator. We refuse to pull in `semver` for a single
+ * compareVersions() call; the surface here is intentionally narrow.
+ *
+ * Supports `MAJOR.MINOR.PATCH` and `MAJOR.MINOR.PATCH-PRERELEASE` (semver §11).
+ * Build metadata (`+...`) is rejected — releases shouldn't ship with it and
+ * it'd only confuse equality.
+ */
+export interface ParsedVersion {
+    major: number;
+    minor: number;
+    patch: number;
+    /** Empty string when there is no prerelease (= a higher precedence release). */
+    prerelease: string;
+}
+export declare function parseVersion(input: string): ParsedVersion;
+/** -1 if a < b, 0 if equal, +1 if a > b. */
+export declare function compareVersions(a: string, b: string): number;

package/dist/update/version.js

@@ -0,0 +1,76 @@
+/**
+ * Tiny semver comparator. We refuse to pull in `semver` for a single
+ * compareVersions() call; the surface here is intentionally narrow.
+ *
+ * Supports `MAJOR.MINOR.PATCH` and `MAJOR.MINOR.PATCH-PRERELEASE` (semver §11).
+ * Build metadata (`+...`) is rejected — releases shouldn't ship with it and
+ * it'd only confuse equality.
+ */
+const SEMVER_RE = /^(\d+)\.(\d+)\.(\d+)(?:-([0-9A-Za-z.-]+))?$/;
+export function parseVersion(input) {
+    if (typeof input !== 'string') {
+        throw new Error(`Invalid version: ${String(input)}`);
+    }
+    const m = SEMVER_RE.exec(input.trim());
+    if (!m) {
+        throw new Error(`Invalid version: ${input}`);
+    }
+    return {
+        major: Number(m[1]),
+        minor: Number(m[2]),
+        patch: Number(m[3]),
+        prerelease: m[4] ?? '',
+    };
+}
+/** -1 if a < b, 0 if equal, +1 if a > b. */
+export function compareVersions(a, b) {
+    const pa = parseVersion(a);
+    const pb = parseVersion(b);
+    if (pa.major !== pb.major)
+        return pa.major < pb.major ? -1 : 1;
+    if (pa.minor !== pb.minor)
+        return pa.minor < pb.minor ? -1 : 1;
+    if (pa.patch !== pb.patch)
+        return pa.patch < pb.patch ? -1 : 1;
+    // Per semver §11: a version *without* a prerelease has higher precedence
+    // than one with a prerelease.
+    if (pa.prerelease === '' && pb.prerelease === '')
+        return 0;
+    if (pa.prerelease === '')
+        return 1;
+    if (pb.prerelease === '')
+        return -1;
+    return comparePrerelease(pa.prerelease, pb.prerelease);
+}
+/** Component-wise compare per semver §11.4. */
+function comparePrerelease(a, b) {
+    const as = a.split('.');
+    const bs = b.split('.');
+    const len = Math.min(as.length, bs.length);
+    for (let i = 0; i < len; i++) {
+        const c = compareIdentifier(as[i], bs[i]);
+        if (c !== 0)
+            return c;
+    }
+    if (as.length === bs.length)
+        return 0;
+    return as.length < bs.length ? -1 : 1;
+}
+function compareIdentifier(a, b) {
+    const aNum = /^\d+$/.test(a);
+    const bNum = /^\d+$/.test(b);
+    if (aNum && bNum) {
+        const na = Number(a);
+        const nb = Number(b);
+        return na === nb ? 0 : na < nb ? -1 : 1;
+    }
+    // Numeric identifiers always have lower precedence than alphanumeric.
+    if (aNum)
+        return -1;
+    if (bNum)
+        return 1;
+    if (a === b)
+        return 0;
+    return a < b ? -1 : 1;
+}
+//# sourceMappingURL=version.js.map

package/dist/update/version.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"version.js","sourceRoot":"","sources":["../../src/update/version.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,MAAM,SAAS,GAAG,6CAA6C,CAAC;AAUhE,MAAM,UAAU,YAAY,CAAC,KAAa;IACxC,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,MAAM,IAAI,KAAK,CAAC,oBAAoB,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IACvD,CAAC;IACD,MAAM,CAAC,GAAG,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;IACvC,IAAI,CAAC,CAAC,EAAE,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,oBAAoB,KAAK,EAAE,CAAC,CAAC;IAC/C,CAAC;IACD,OAAO;QACL,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACnB,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACnB,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACnB,UAAU,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE;KACvB,CAAC;AACJ,CAAC;AAED,4CAA4C;AAC5C,MAAM,UAAU,eAAe,CAAC,CAAS,EAAE,CAAS;IAClD,MAAM,EAAE,GAAG,YAAY,CAAC,CAAC,CAAC,CAAC;IAC3B,MAAM,EAAE,GAAG,YAAY,CAAC,CAAC,CAAC,CAAC;IAE3B,IAAI,EAAE,CAAC,KAAK,KAAK,EAAE,CAAC,KAAK;QAAE,OAAO,EAAE,CAAC,KAAK,GAAG,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC/D,IAAI,EAAE,CAAC,KAAK,KAAK,EAAE,CAAC,KAAK;QAAE,OAAO,EAAE,CAAC,KAAK,GAAG,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC/D,IAAI,EAAE,CAAC,KAAK,KAAK,EAAE,CAAC,KAAK;QAAE,OAAO,EAAE,CAAC,KAAK,GAAG,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAE/D,yEAAyE;IACzE,8BAA8B;IAC9B,IAAI,EAAE,CAAC,UAAU,KAAK,EAAE,IAAI,EAAE,CAAC,UAAU,KAAK,EAAE;QAAE,OAAO,CAAC,CAAC;IAC3D,IAAI,EAAE,CAAC,UAAU,KAAK,EAAE;QAAE,OAAO,CAAC,CAAC;IACnC,IAAI,EAAE,CAAC,UAAU,KAAK,EAAE;QAAE,OAAO,CAAC,CAAC,CAAC;IAEpC,OAAO,iBAAiB,CAAC,EAAE,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC;AACzD,CAAC;AAED,+CAA+C;AAC/C,SAAS,iBAAiB,CAAC,CAAS,EAAE,CAAS;IAC7C,MAAM,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACxB,MAAM,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACxB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC;IAC3C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC;QAC7B,MAAM,CAAC,GAAG,iBAAiB,CAAC,EAAE,CAAC,CAAC,CAAE,EAAE,EAAE,CAAC,CAAC,CAAE,CAAC,CAAC;QAC5C,IAAI,CAAC,KAAK,CAAC;YAAE,OAAO,CAAC,CAAC;IACxB,CAAC;IACD,IAAI,EAAE,CAAC,MAAM,KAAK,EAAE,CAAC,MAAM;QAAE,OAAO,CAAC,CAAC;IACtC,OAAO,EAAE,CAAC,MAAM,GAAG,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACxC,CAAC;AAED,SAAS,iBAAiB,CAAC,CAAS,EAAE,CAAS;IAC7C,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC7B,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC7B,IAAI,IAAI,IAAI,IAAI,EAAE,CAAC;QACjB,MAAM,EAAE,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;QACrB,MAAM,EAAE,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;QACrB,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC1C,CAAC;IACD,sEAAsE;IACtE,IAAI,IAAI;QAAE,OAAO,CAAC,CAAC,CAAC;IACpB,IAAI,IAAI;QAAE,OAAO,CAAC,CAAC;IACnB,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,CAAC,CAAC;IACtB,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACxB,CAAC"}

package/package.json

@@ -0,0 +1,80 @@
+{
+  "name": "@serfab/cadre-host",
+  "version": "0.7.1",
+  "type": "module",
+  "description": "Self-hosted cadre node manager for basement-PC deployments",
+  "main": "dist/index.js",
+  "types": "dist/index.d.ts",
+  "bin": "dist/bin/host.js",
+  "files": [
+    "src",
+    "dist",
+    "service",
+    "!dist/test",
+    "!**/*.tsbuildinfo"
+  ],
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js"
+    }
+  },
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/gotchoices/sereus.git",
+    "directory": "packages/cadre-host"
+  },
+  "keywords": [
+    "sereus",
+    "cadre",
+    "host",
+    "self-hosted",
+    "p2p",
+    "trust-circle"
+  ],
+  "scripts": {
+    "clean": "rimraf dist",
+    "build": "tsc -p tsconfig.build.json && vite build --config ui/vite.config.ts",
+    "build:server": "tsc -p tsconfig.build.json",
+    "build:ui": "vite build --config ui/vite.config.ts",
+    "dev:ui": "vite --config ui/vite.config.ts",
+    "test": "vitest run --passWithNoTests",
+    "dev:test": "vitest",
+    "start": "node dist/bin/host.js"
+  },
+  "devDependencies": {
+    "@sveltejs/vite-plugin-svelte": "^5.0.0",
+    "@tsconfig/svelte": "^5.0.4",
+    "@types/debug": "^4.1.12",
+    "@types/node": "^25.0.10",
+    "@types/pidusage": "^2.0.5",
+    "@types/qrcode": "^1.5.5",
+    "jsdom": "^25.0.1",
+    "rimraf": "^6.1.2",
+    "svelte": "^5.0.0",
+    "svelte-check": "^4.0.0",
+    "typescript": "^5.9.3",
+    "vite": "^6.0.0",
+    "vitest": "^4.0.17"
+  },
+  "dependencies": {
+    "@achingbrain/nat-port-mapper": "^4.0.0",
+    "@serfab/cadre-cli": "^0.7.1",
+    "@serfab/cadre-core": "^0.7.1",
+    "@serfab/cadre-provider": "^0.7.1",
+    "commander": "^14.0.2",
+    "debug": "^4.4.3",
+    "fastify": "^5.7.1",
+    "pidusage": "^4.0.1",
+    "qrcode": "^1.5.4",
+    "qrcode-terminal": "^0.12.0"
+  },
+  "optionalDependencies": {
+    "keytar": "^7.9.0"
+  },
+  "engines": {
+    "node": ">=18"
+  },
+  "author": "",
+  "license": "MIT"
+}