@serfab/cadre-host 0.9.0 → 0.11.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/auth/index.d.ts +2 -0
- package/dist/auth/index.js +1 -0
- package/dist/auth/index.js.map +1 -1
- package/dist/auth/self-label.d.ts +36 -0
- package/dist/auth/self-label.js +57 -0
- package/dist/auth/self-label.js.map +1 -0
- package/dist/auth/trust-circle.d.ts +32 -5
- package/dist/auth/trust-circle.js +31 -11
- package/dist/auth/trust-circle.js.map +1 -1
- package/dist/bin/host.js +41 -5
- package/dist/bin/host.js.map +1 -1
- package/dist/donation/__tests__/fake-orchestrator.d.ts +103 -0
- package/dist/donation/__tests__/fake-orchestrator.js +180 -0
- package/dist/donation/__tests__/fake-orchestrator.js.map +1 -0
- package/dist/donation/donation-service.d.ts +237 -12
- package/dist/donation/donation-service.js +491 -34
- package/dist/donation/donation-service.js.map +1 -1
- package/dist/donation/donation-store.d.ts +7 -0
- package/dist/donation/donation-store.js +7 -0
- package/dist/donation/donation-store.js.map +1 -1
- package/dist/donation/donation-supervisor.d.ts +167 -0
- package/dist/donation/donation-supervisor.js +341 -0
- package/dist/donation/donation-supervisor.js.map +1 -0
- package/dist/donation/index.d.ts +4 -2
- package/dist/donation/index.js +2 -1
- package/dist/donation/index.js.map +1 -1
- package/dist/donation/types.d.ts +26 -0
- package/dist/donation/types.js.map +1 -1
- package/dist/index.d.ts +3 -1
- package/dist/index.js +3 -1
- package/dist/index.js.map +1 -1
- package/dist/orchestrator/host-process-orchestrator.d.ts +109 -5
- package/dist/orchestrator/host-process-orchestrator.js +341 -98
- package/dist/orchestrator/host-process-orchestrator.js.map +1 -1
- package/dist/orchestrator/node-identity.d.ts +26 -0
- package/dist/orchestrator/node-identity.js +36 -0
- package/dist/orchestrator/node-identity.js.map +1 -0
- package/dist/orchestrator/port-allocator.d.ts +14 -0
- package/dist/orchestrator/port-allocator.js +45 -0
- package/dist/orchestrator/port-allocator.js.map +1 -1
- package/dist/owner/owner-node-client.d.ts +20 -5
- package/dist/owner/owner-node-client.js +21 -4
- package/dist/owner/owner-node-client.js.map +1 -1
- package/dist/server/error-handler.d.ts +7 -1
- package/dist/server/error-handler.js +23 -1
- package/dist/server/error-handler.js.map +1 -1
- package/dist/server/events/types.d.ts +3 -0
- package/dist/server/index.d.ts +7 -0
- package/dist/server/index.js +9 -3
- package/dist/server/index.js.map +1 -1
- package/dist/server/routes/grants.js +22 -3
- package/dist/server/routes/grants.js.map +1 -1
- package/dist/server/routes/strands.d.ts +20 -0
- package/dist/server/routes/strands.js +38 -0
- package/dist/server/routes/strands.js.map +1 -0
- package/dist/server/static.js +38 -38
- package/dist/strands/index.d.ts +7 -0
- package/dist/strands/index.js +6 -0
- package/dist/strands/index.js.map +1 -0
- package/dist/strands/strand-service.d.ts +50 -0
- package/dist/strands/strand-service.js +103 -0
- package/dist/strands/strand-service.js.map +1 -0
- package/dist/strands/types.d.ts +93 -0
- package/dist/strands/types.js +23 -0
- package/dist/strands/types.js.map +1 -0
- package/dist/ui/assets/index-BVoqLjyX.css +1 -0
- package/dist/ui/assets/index-C-iks41M.js +17 -0
- package/dist/ui/assets/index-C-iks41M.js.map +1 -0
- package/dist/ui/index.html +14 -14
- package/dist/update/release-key.d.ts +1 -1
- package/dist/update/release-key.js +1 -1
- package/package.json +5 -5
- package/service/cadre-host.service.tmpl +16 -16
- package/service/com.serfab.cadre-host.plist.tmpl +35 -35
- package/service/install-service.ps1 +98 -98
- package/service/uninstall-service.ps1 +19 -19
- package/src/__tests__/build-targets.test.ts +26 -0
- package/src/__tests__/cli-invite.smoke.test.ts +192 -192
- package/src/__tests__/cli-nat.smoke.test.ts +212 -212
- package/src/__tests__/cli.smoke.test.ts +46 -46
- package/src/__tests__/global-setup.ts +51 -0
- package/src/__tests__/host-owner.smoke.test.ts +123 -123
- package/src/__tests__/orchestrator-env-scrub.test.ts +140 -0
- package/src/__tests__/orchestrator-node-identity.test.ts +204 -0
- package/src/__tests__/orchestrator-owner.test.ts +198 -198
- package/src/__tests__/orchestrator-pin-keys.test.ts +153 -153
- package/src/__tests__/orchestrator-push.test.ts +145 -145
- package/src/__tests__/orchestrator.test.ts +951 -570
- package/src/auth/__tests__/duration.test.ts +28 -28
- package/src/auth/__tests__/self-label.test.ts +85 -0
- package/src/auth/__tests__/trust-circle-integration.test.ts +152 -147
- package/src/auth/__tests__/trust-circle-store.test.ts +115 -115
- package/src/auth/__tests__/trust-circle.test.ts +445 -401
- package/src/auth/duration.ts +33 -33
- package/src/auth/index.ts +21 -19
- package/src/auth/self-label.ts +74 -0
- package/src/auth/trust-circle-store.ts +155 -155
- package/src/auth/trust-circle.ts +45 -13
- package/src/auth/types.ts +99 -99
- package/src/bin/host.ts +1299 -1258
- package/src/donation/__tests__/donation-service.test.ts +1068 -290
- package/src/donation/__tests__/donation-supervisor.test.ts +510 -0
- package/src/donation/__tests__/fake-orchestrator.test.ts +168 -0
- package/src/donation/__tests__/fake-orchestrator.ts +225 -0
- package/src/donation/__tests__/grant-service.test.ts +213 -213
- package/src/donation/__tests__/grant-store.test.ts +113 -113
- package/src/donation/donation-service.ts +962 -392
- package/src/donation/donation-store.ts +171 -164
- package/src/donation/donation-supervisor.ts +388 -0
- package/src/donation/grant-service.ts +200 -200
- package/src/donation/grant-store.ts +152 -152
- package/src/donation/index.ts +64 -49
- package/src/donation/types.ts +243 -220
- package/src/index.ts +14 -0
- package/src/installer/__tests__/identity.test.ts +34 -34
- package/src/installer/__tests__/paths.test.ts +47 -47
- package/src/installer/__tests__/service-host.test.ts +62 -62
- package/src/installer/__tests__/wizard.test.ts +64 -64
- package/src/installer/identity.ts +49 -49
- package/src/installer/paths.ts +109 -109
- package/src/installer/platform.ts +27 -27
- package/src/installer/service-host/index.ts +21 -21
- package/src/installer/service-host/template.ts +21 -21
- package/src/installer/wizard.ts +103 -103
- package/src/nat/__tests__/address-resolver.test.ts +82 -82
- package/src/nat/__tests__/ddns-duckdns.test.ts +83 -83
- package/src/nat/__tests__/ddns-updater.test.ts +253 -253
- package/src/nat/__tests__/external-ip.test.ts +124 -124
- package/src/nat/__tests__/nat-service.test.ts +497 -497
- package/src/nat/__tests__/nat-store.test.ts +93 -93
- package/src/nat/__tests__/port-mapper.test.ts +191 -191
- package/src/nat/__tests__/reachability.test.ts +24 -24
- package/src/nat/__tests__/secrets.test.ts +178 -178
- package/src/nat/address-resolver.ts +51 -51
- package/src/nat/ddns/duckdns.ts +76 -76
- package/src/nat/ddns/index.ts +55 -55
- package/src/nat/ddns/updater.ts +243 -243
- package/src/nat/external-ip.ts +154 -154
- package/src/nat/index.ts +71 -71
- package/src/nat/nat-service.ts +501 -501
- package/src/nat/nat-store.ts +154 -154
- package/src/nat/port-mapper.ts +329 -329
- package/src/nat/reachability.ts +34 -34
- package/src/nat/secrets/file-store.ts +130 -130
- package/src/nat/secrets/index.ts +112 -112
- package/src/nat/secrets/keytar-store.ts +67 -67
- package/src/nat/types.ts +159 -159
- package/src/orchestrator/__tests__/node-identity.test.ts +62 -0
- package/src/orchestrator/host-process-orchestrator.ts +1133 -894
- package/src/orchestrator/index.ts +10 -10
- package/src/orchestrator/log-rotator.ts +53 -53
- package/src/orchestrator/node-identity.ts +40 -0
- package/src/orchestrator/pid-liveness.ts +24 -24
- package/src/orchestrator/port-allocator.ts +91 -43
- package/src/orchestrator/state-store.ts +90 -90
- package/src/orchestrator/types.ts +141 -141
- package/src/owner/__tests__/owner-node-client.test.ts +194 -194
- package/src/owner/index.ts +12 -12
- package/src/owner/owner-node-client.ts +259 -233
- package/src/push/__tests__/push.test.ts +90 -90
- package/src/push/index.ts +146 -146
- package/src/server/__tests__/bus.test.ts +38 -38
- package/src/server/__tests__/error-handler.test.ts +118 -118
- package/src/server/__tests__/grants-admin-route.test.ts +73 -73
- package/src/server/__tests__/grants-route.test.ts +263 -189
- package/src/server/__tests__/nodes-route.test.ts +259 -259
- package/src/server/__tests__/origin-guard.test.ts +72 -72
- package/src/server/__tests__/publishers.test.ts +216 -216
- package/src/server/__tests__/server.smoke.test.ts +253 -253
- package/src/server/__tests__/settings-route.test.ts +194 -194
- package/src/server/__tests__/sse-route.test.ts +119 -119
- package/src/server/__tests__/static.test.ts +145 -145
- package/src/server/__tests__/status-route.test.ts +134 -134
- package/src/server/__tests__/strands-route.test.ts +233 -0
- package/src/server/error-handler.ts +178 -155
- package/src/server/events/bus.ts +42 -42
- package/src/server/events/sse-route.ts +81 -81
- package/src/server/events/types.ts +23 -22
- package/src/server/index.ts +267 -254
- package/src/server/origin-guard.ts +84 -84
- package/src/server/routes/grants-admin.ts +41 -41
- package/src/server/routes/grants.ts +210 -186
- package/src/server/routes/nat.ts +63 -63
- package/src/server/routes/nodes.ts +170 -170
- package/src/server/routes/settings.ts +123 -123
- package/src/server/routes/status.ts +118 -118
- package/src/server/routes/strands.ts +54 -0
- package/src/server/routes/trust-circle.ts +49 -49
- package/src/server/routes/update.ts +43 -43
- package/src/server/server.ts +122 -122
- package/src/server/settings-store.ts +37 -37
- package/src/server/static.ts +207 -207
- package/src/strands/__tests__/strand-service.test.ts +165 -0
- package/src/strands/index.ts +14 -0
- package/src/strands/strand-service.ts +135 -0
- package/src/strands/types.ts +102 -0
- package/src/update/__tests__/apply.test.ts +158 -158
- package/src/update/__tests__/manifest.test.ts +128 -128
- package/src/update/__tests__/release-key.test.ts +42 -42
- package/src/update/__tests__/sign.test.ts +78 -78
- package/src/update/__tests__/store.test.ts +81 -81
- package/src/update/__tests__/update-service.integration.test.ts +256 -256
- package/src/update/__tests__/version.test.ts +31 -31
- package/src/update/apply.ts +190 -190
- package/src/update/index.ts +341 -341
- package/src/update/release-key.ts +71 -71
- package/src/update/sign.ts +74 -74
- package/src/update/store.ts +101 -101
- package/src/update/types.ts +109 -109
- package/src/update/version.ts +80 -80
- package/dist/ui/assets/index-BlMXQPSw.js +0 -14
- package/dist/ui/assets/index-BlMXQPSw.js.map +0 -1
- package/dist/ui/assets/index-BwU5mJGF.css +0 -1
|
@@ -1,192 +1,192 @@
|
|
|
1
|
-
/**
|
|
2
|
-
* CLI smoke test for the `invite` subcommand. Spawns a stub HTTP server
|
|
3
|
-
* playing the role of cadre-host's management API and asserts the CLI:
|
|
4
|
-
* - POSTs the expected body to /auth/invites
|
|
5
|
-
* - Prints the encodedInvite on stdout
|
|
6
|
-
* - Exits 0 on success / non-zero on connect failure
|
|
7
|
-
*
|
|
8
|
-
* Relies on `yarn build` having produced dist/bin/host.js.
|
|
9
|
-
*/
|
|
10
|
-
|
|
11
|
-
import { spawn } from 'node:child_process';
|
|
12
|
-
import { createServer, type IncomingMessage, type Server, type ServerResponse } from 'node:http';
|
|
13
|
-
import { existsSync } from 'node:fs';
|
|
14
|
-
import { fileURLToPath } from 'node:url';
|
|
15
|
-
import { dirname, resolve } from 'node:path';
|
|
16
|
-
import { afterEach, beforeEach, describe, expect, it, vi } from 'vitest';
|
|
17
|
-
|
|
18
|
-
const here = dirname(fileURLToPath(import.meta.url));
|
|
19
|
-
const binPath = resolve(here, '../../dist/bin/host.js');
|
|
20
|
-
|
|
21
|
-
// These smoke tests cold-start the built CLI as a child process (Node boot +,
|
|
22
|
-
// for some, an HTTP server). That comfortably exceeds vitest's 5s default under
|
|
23
|
-
// heavy parallel load, so give the subprocess generous headroom.
|
|
24
|
-
vi.setConfig({ testTimeout: 30000 });
|
|
25
|
-
|
|
26
|
-
interface StubServer {
|
|
27
|
-
server: Server;
|
|
28
|
-
port: number;
|
|
29
|
-
requests: Array<{ method: string; url: string; body: string }>;
|
|
30
|
-
setResponse(handler: (req: IncomingMessage, res: ServerResponse) => void): void;
|
|
31
|
-
}
|
|
32
|
-
|
|
33
|
-
async function startStub(): Promise<StubServer> {
|
|
34
|
-
const requests: StubServer['requests'] = [];
|
|
35
|
-
let handler: (req: IncomingMessage, res: ServerResponse) => void = (_req, res) => {
|
|
36
|
-
res.statusCode = 200;
|
|
37
|
-
res.setHeader('content-type', 'application/json');
|
|
38
|
-
res.end(JSON.stringify({
|
|
39
|
-
encodedInvite: 'fake-encoded-invite',
|
|
40
|
-
token: 'fake-token',
|
|
41
|
-
expiresAt: new Date(Date.now() + 60_000).toISOString(),
|
|
42
|
-
}));
|
|
43
|
-
};
|
|
44
|
-
|
|
45
|
-
const server = createServer((req, res) => {
|
|
46
|
-
const chunks: Buffer[] = [];
|
|
47
|
-
req.on('data', (chunk: Buffer) => chunks.push(chunk));
|
|
48
|
-
req.on('end', () => {
|
|
49
|
-
requests.push({ method: req.method ?? '', url: req.url ?? '', body: Buffer.concat(chunks).toString('utf8') });
|
|
50
|
-
handler(req, res);
|
|
51
|
-
});
|
|
52
|
-
});
|
|
53
|
-
|
|
54
|
-
await new Promise<void>((resolveStart) => server.listen(0, '127.0.0.1', () => resolveStart()));
|
|
55
|
-
const addr = server.address();
|
|
56
|
-
const port = typeof addr === 'object' && addr ? addr.port : 0;
|
|
57
|
-
return {
|
|
58
|
-
server,
|
|
59
|
-
port,
|
|
60
|
-
requests,
|
|
61
|
-
setResponse: (h) => { handler = h; },
|
|
62
|
-
};
|
|
63
|
-
}
|
|
64
|
-
|
|
65
|
-
function runCli(args: string[]): Promise<{ code: number; stdout: string; stderr: string }> {
|
|
66
|
-
return new Promise((resolveRun) => {
|
|
67
|
-
const child = spawn(process.execPath, [binPath, ...args], { stdio: ['ignore', 'pipe', 'pipe'] });
|
|
68
|
-
let stdout = '';
|
|
69
|
-
let stderr = '';
|
|
70
|
-
child.stdout.on('data', (chunk: Buffer) => { stdout += chunk.toString('utf8'); });
|
|
71
|
-
child.stderr.on('data', (chunk: Buffer) => { stderr += chunk.toString('utf8'); });
|
|
72
|
-
child.on('close', (code) => resolveRun({ code: code ?? -1, stdout, stderr }));
|
|
73
|
-
});
|
|
74
|
-
}
|
|
75
|
-
|
|
76
|
-
let stub: StubServer;
|
|
77
|
-
|
|
78
|
-
beforeEach(async () => {
|
|
79
|
-
if (!existsSync(binPath)) {
|
|
80
|
-
throw new Error(`cadre-host bin not built at ${binPath}; run \`yarn build\` first`);
|
|
81
|
-
}
|
|
82
|
-
stub = await startStub();
|
|
83
|
-
});
|
|
84
|
-
|
|
85
|
-
afterEach(async () => {
|
|
86
|
-
await new Promise<void>((resolveClose) => stub.server.close(() => resolveClose()));
|
|
87
|
-
});
|
|
88
|
-
|
|
89
|
-
describe('cadre-host invite CLI', () => {
|
|
90
|
-
it('POSTs to /auth/invites with label + ttlMs and prints encoded invite', async () => {
|
|
91
|
-
const result = await runCli(['invite', "Mom's phone", '--ttl', '12h', '--port', String(stub.port)]);
|
|
92
|
-
|
|
93
|
-
expect(result.code).toBe(0);
|
|
94
|
-
expect(result.stdout.trim()).toBe('fake-encoded-invite');
|
|
95
|
-
expect(stub.requests).toHaveLength(1);
|
|
96
|
-
expect(stub.requests[0]!.method).toBe('POST');
|
|
97
|
-
expect(stub.requests[0]!.url).toBe('/auth/invites');
|
|
98
|
-
const body = JSON.parse(stub.requests[0]!.body);
|
|
99
|
-
expect(body.label).toBe("Mom's phone");
|
|
100
|
-
expect(body.ttlMs).toBe(12 * 60 * 60 * 1000);
|
|
101
|
-
});
|
|
102
|
-
|
|
103
|
-
it('exits non-zero when cadre-host returns an error', async () => {
|
|
104
|
-
stub.setResponse((_req, res) => {
|
|
105
|
-
res.statusCode = 500;
|
|
106
|
-
res.end('boom');
|
|
107
|
-
});
|
|
108
|
-
const result = await runCli(['invite', 'Test', '--port', String(stub.port)]);
|
|
109
|
-
expect(result.code).not.toBe(0);
|
|
110
|
-
expect(result.stderr).toContain('500');
|
|
111
|
-
});
|
|
112
|
-
|
|
113
|
-
it('exits 2 (no service) when cadre-host is not reachable', async () => {
|
|
114
|
-
// Use a port the stub server occupied; close it first so connections fail.
|
|
115
|
-
const port = stub.port;
|
|
116
|
-
await new Promise<void>((resolveClose) => stub.server.close(() => resolveClose()));
|
|
117
|
-
const result = await runCli(['invite', 'Test', '--port', String(port)]);
|
|
118
|
-
expect(result.code).toBe(2);
|
|
119
|
-
expect(result.stderr).toMatch(/cadre-host start|Failed to reach/);
|
|
120
|
-
});
|
|
121
|
-
|
|
122
|
-
it('rejects invalid --ttl', async () => {
|
|
123
|
-
const result = await runCli(['invite', 'Test', '--ttl', 'eternity', '--port', String(stub.port)]);
|
|
124
|
-
expect(result.code).toBe(1);
|
|
125
|
-
expect(result.stderr).toMatch(/Invalid --ttl/);
|
|
126
|
-
});
|
|
127
|
-
});
|
|
128
|
-
|
|
129
|
-
describe('cadre-host trust list CLI', () => {
|
|
130
|
-
it('renders members and pending invites', async () => {
|
|
131
|
-
stub.setResponse((_req, res) => {
|
|
132
|
-
res.statusCode = 200;
|
|
133
|
-
res.setHeader('content-type', 'application/json');
|
|
134
|
-
res.end(JSON.stringify({
|
|
135
|
-
members: [
|
|
136
|
-
{ peerId: '12D3KooWAlice', label: 'Alice', addedAt: 't1' },
|
|
137
|
-
{ peerId: '12D3KooWHost', label: 'Host', addedAt: 't2', self: true },
|
|
138
|
-
],
|
|
139
|
-
pending: [
|
|
140
|
-
{ token: 'tok1', label: 'Mom', createdAt: 't3', expiresAt: 't4' },
|
|
141
|
-
],
|
|
142
|
-
}));
|
|
143
|
-
});
|
|
144
|
-
|
|
145
|
-
const result = await runCli(['trust', 'list', '--port', String(stub.port)]);
|
|
146
|
-
expect(result.code).toBe(0);
|
|
147
|
-
expect(result.stdout).toContain('12D3KooWAlice');
|
|
148
|
-
expect(result.stdout).toContain('Alice');
|
|
149
|
-
expect(result.stdout).toContain('[self]');
|
|
150
|
-
expect(result.stdout).toContain('tok1');
|
|
151
|
-
expect(result.stdout).toContain('Mom');
|
|
152
|
-
});
|
|
153
|
-
});
|
|
154
|
-
|
|
155
|
-
describe('cadre-host trust revoke CLI', () => {
|
|
156
|
-
it('DELETEs /auth/invites/<token> by default', async () => {
|
|
157
|
-
stub.setResponse((_req, res) => {
|
|
158
|
-
res.statusCode = 204;
|
|
159
|
-
res.end();
|
|
160
|
-
});
|
|
161
|
-
const result = await runCli(['trust', 'revoke', 'some-token', '--port', String(stub.port)]);
|
|
162
|
-
expect(result.code).toBe(0);
|
|
163
|
-
expect(stub.requests[0]!.method).toBe('DELETE');
|
|
164
|
-
expect(stub.requests[0]!.url).toBe('/auth/invites/some-token');
|
|
165
|
-
});
|
|
166
|
-
|
|
167
|
-
it('DELETEs /auth/members/<peerId> when id looks like a peerId', async () => {
|
|
168
|
-
stub.setResponse((_req, res) => {
|
|
169
|
-
res.statusCode = 204;
|
|
170
|
-
res.end();
|
|
171
|
-
});
|
|
172
|
-
const result = await runCli(['trust', 'revoke', '12D3KooWAlice', '--port', String(stub.port)]);
|
|
173
|
-
expect(result.code).toBe(0);
|
|
174
|
-
expect(stub.requests[0]!.url).toBe('/auth/members/12D3KooWAlice');
|
|
175
|
-
});
|
|
176
|
-
|
|
177
|
-
it('treats secp256k1 peer IDs (16Uiu2HAm…) as members', async () => {
|
|
178
|
-
stub.setResponse((_req, res) => {
|
|
179
|
-
res.statusCode = 204;
|
|
180
|
-
res.end();
|
|
181
|
-
});
|
|
182
|
-
const result = await runCli(['trust', 'revoke', '16Uiu2HAmExample', '--port', String(stub.port)]);
|
|
183
|
-
expect(result.code).toBe(0);
|
|
184
|
-
expect(stub.requests[0]!.url).toBe('/auth/members/16Uiu2HAmExample');
|
|
185
|
-
});
|
|
186
|
-
|
|
187
|
-
it('rejects invalid --port', async () => {
|
|
188
|
-
const result = await runCli(['trust', 'revoke', 'some-token', '--port', 'garbage']);
|
|
189
|
-
expect(result.code).toBe(1);
|
|
190
|
-
expect(result.stderr).toMatch(/Invalid --port/);
|
|
191
|
-
});
|
|
192
|
-
});
|
|
1
|
+
/**
|
|
2
|
+
* CLI smoke test for the `invite` subcommand. Spawns a stub HTTP server
|
|
3
|
+
* playing the role of cadre-host's management API and asserts the CLI:
|
|
4
|
+
* - POSTs the expected body to /auth/invites
|
|
5
|
+
* - Prints the encodedInvite on stdout
|
|
6
|
+
* - Exits 0 on success / non-zero on connect failure
|
|
7
|
+
*
|
|
8
|
+
* Relies on `yarn build` having produced dist/bin/host.js.
|
|
9
|
+
*/
|
|
10
|
+
|
|
11
|
+
import { spawn } from 'node:child_process';
|
|
12
|
+
import { createServer, type IncomingMessage, type Server, type ServerResponse } from 'node:http';
|
|
13
|
+
import { existsSync } from 'node:fs';
|
|
14
|
+
import { fileURLToPath } from 'node:url';
|
|
15
|
+
import { dirname, resolve } from 'node:path';
|
|
16
|
+
import { afterEach, beforeEach, describe, expect, it, vi } from 'vitest';
|
|
17
|
+
|
|
18
|
+
const here = dirname(fileURLToPath(import.meta.url));
|
|
19
|
+
const binPath = resolve(here, '../../dist/bin/host.js');
|
|
20
|
+
|
|
21
|
+
// These smoke tests cold-start the built CLI as a child process (Node boot +,
|
|
22
|
+
// for some, an HTTP server). That comfortably exceeds vitest's 5s default under
|
|
23
|
+
// heavy parallel load, so give the subprocess generous headroom.
|
|
24
|
+
vi.setConfig({ testTimeout: 30000 });
|
|
25
|
+
|
|
26
|
+
interface StubServer {
|
|
27
|
+
server: Server;
|
|
28
|
+
port: number;
|
|
29
|
+
requests: Array<{ method: string; url: string; body: string }>;
|
|
30
|
+
setResponse(handler: (req: IncomingMessage, res: ServerResponse) => void): void;
|
|
31
|
+
}
|
|
32
|
+
|
|
33
|
+
async function startStub(): Promise<StubServer> {
|
|
34
|
+
const requests: StubServer['requests'] = [];
|
|
35
|
+
let handler: (req: IncomingMessage, res: ServerResponse) => void = (_req, res) => {
|
|
36
|
+
res.statusCode = 200;
|
|
37
|
+
res.setHeader('content-type', 'application/json');
|
|
38
|
+
res.end(JSON.stringify({
|
|
39
|
+
encodedInvite: 'fake-encoded-invite',
|
|
40
|
+
token: 'fake-token',
|
|
41
|
+
expiresAt: new Date(Date.now() + 60_000).toISOString(),
|
|
42
|
+
}));
|
|
43
|
+
};
|
|
44
|
+
|
|
45
|
+
const server = createServer((req, res) => {
|
|
46
|
+
const chunks: Buffer[] = [];
|
|
47
|
+
req.on('data', (chunk: Buffer) => chunks.push(chunk));
|
|
48
|
+
req.on('end', () => {
|
|
49
|
+
requests.push({ method: req.method ?? '', url: req.url ?? '', body: Buffer.concat(chunks).toString('utf8') });
|
|
50
|
+
handler(req, res);
|
|
51
|
+
});
|
|
52
|
+
});
|
|
53
|
+
|
|
54
|
+
await new Promise<void>((resolveStart) => server.listen(0, '127.0.0.1', () => resolveStart()));
|
|
55
|
+
const addr = server.address();
|
|
56
|
+
const port = typeof addr === 'object' && addr ? addr.port : 0;
|
|
57
|
+
return {
|
|
58
|
+
server,
|
|
59
|
+
port,
|
|
60
|
+
requests,
|
|
61
|
+
setResponse: (h) => { handler = h; },
|
|
62
|
+
};
|
|
63
|
+
}
|
|
64
|
+
|
|
65
|
+
function runCli(args: string[]): Promise<{ code: number; stdout: string; stderr: string }> {
|
|
66
|
+
return new Promise((resolveRun) => {
|
|
67
|
+
const child = spawn(process.execPath, [binPath, ...args], { stdio: ['ignore', 'pipe', 'pipe'] });
|
|
68
|
+
let stdout = '';
|
|
69
|
+
let stderr = '';
|
|
70
|
+
child.stdout.on('data', (chunk: Buffer) => { stdout += chunk.toString('utf8'); });
|
|
71
|
+
child.stderr.on('data', (chunk: Buffer) => { stderr += chunk.toString('utf8'); });
|
|
72
|
+
child.on('close', (code) => resolveRun({ code: code ?? -1, stdout, stderr }));
|
|
73
|
+
});
|
|
74
|
+
}
|
|
75
|
+
|
|
76
|
+
let stub: StubServer;
|
|
77
|
+
|
|
78
|
+
beforeEach(async () => {
|
|
79
|
+
if (!existsSync(binPath)) {
|
|
80
|
+
throw new Error(`cadre-host bin not built at ${binPath}; run \`yarn build\` first`);
|
|
81
|
+
}
|
|
82
|
+
stub = await startStub();
|
|
83
|
+
});
|
|
84
|
+
|
|
85
|
+
afterEach(async () => {
|
|
86
|
+
await new Promise<void>((resolveClose) => stub.server.close(() => resolveClose()));
|
|
87
|
+
});
|
|
88
|
+
|
|
89
|
+
describe('cadre-host invite CLI', () => {
|
|
90
|
+
it('POSTs to /auth/invites with label + ttlMs and prints encoded invite', async () => {
|
|
91
|
+
const result = await runCli(['invite', "Mom's phone", '--ttl', '12h', '--port', String(stub.port)]);
|
|
92
|
+
|
|
93
|
+
expect(result.code).toBe(0);
|
|
94
|
+
expect(result.stdout.trim()).toBe('fake-encoded-invite');
|
|
95
|
+
expect(stub.requests).toHaveLength(1);
|
|
96
|
+
expect(stub.requests[0]!.method).toBe('POST');
|
|
97
|
+
expect(stub.requests[0]!.url).toBe('/auth/invites');
|
|
98
|
+
const body = JSON.parse(stub.requests[0]!.body);
|
|
99
|
+
expect(body.label).toBe("Mom's phone");
|
|
100
|
+
expect(body.ttlMs).toBe(12 * 60 * 60 * 1000);
|
|
101
|
+
});
|
|
102
|
+
|
|
103
|
+
it('exits non-zero when cadre-host returns an error', async () => {
|
|
104
|
+
stub.setResponse((_req, res) => {
|
|
105
|
+
res.statusCode = 500;
|
|
106
|
+
res.end('boom');
|
|
107
|
+
});
|
|
108
|
+
const result = await runCli(['invite', 'Test', '--port', String(stub.port)]);
|
|
109
|
+
expect(result.code).not.toBe(0);
|
|
110
|
+
expect(result.stderr).toContain('500');
|
|
111
|
+
});
|
|
112
|
+
|
|
113
|
+
it('exits 2 (no service) when cadre-host is not reachable', async () => {
|
|
114
|
+
// Use a port the stub server occupied; close it first so connections fail.
|
|
115
|
+
const port = stub.port;
|
|
116
|
+
await new Promise<void>((resolveClose) => stub.server.close(() => resolveClose()));
|
|
117
|
+
const result = await runCli(['invite', 'Test', '--port', String(port)]);
|
|
118
|
+
expect(result.code).toBe(2);
|
|
119
|
+
expect(result.stderr).toMatch(/cadre-host start|Failed to reach/);
|
|
120
|
+
});
|
|
121
|
+
|
|
122
|
+
it('rejects invalid --ttl', async () => {
|
|
123
|
+
const result = await runCli(['invite', 'Test', '--ttl', 'eternity', '--port', String(stub.port)]);
|
|
124
|
+
expect(result.code).toBe(1);
|
|
125
|
+
expect(result.stderr).toMatch(/Invalid --ttl/);
|
|
126
|
+
});
|
|
127
|
+
});
|
|
128
|
+
|
|
129
|
+
describe('cadre-host trust list CLI', () => {
|
|
130
|
+
it('renders members and pending invites', async () => {
|
|
131
|
+
stub.setResponse((_req, res) => {
|
|
132
|
+
res.statusCode = 200;
|
|
133
|
+
res.setHeader('content-type', 'application/json');
|
|
134
|
+
res.end(JSON.stringify({
|
|
135
|
+
members: [
|
|
136
|
+
{ peerId: '12D3KooWAlice', label: 'Alice', addedAt: 't1' },
|
|
137
|
+
{ peerId: '12D3KooWHost', label: 'Host', addedAt: 't2', self: true },
|
|
138
|
+
],
|
|
139
|
+
pending: [
|
|
140
|
+
{ token: 'tok1', label: 'Mom', createdAt: 't3', expiresAt: 't4' },
|
|
141
|
+
],
|
|
142
|
+
}));
|
|
143
|
+
});
|
|
144
|
+
|
|
145
|
+
const result = await runCli(['trust', 'list', '--port', String(stub.port)]);
|
|
146
|
+
expect(result.code).toBe(0);
|
|
147
|
+
expect(result.stdout).toContain('12D3KooWAlice');
|
|
148
|
+
expect(result.stdout).toContain('Alice');
|
|
149
|
+
expect(result.stdout).toContain('[self]');
|
|
150
|
+
expect(result.stdout).toContain('tok1');
|
|
151
|
+
expect(result.stdout).toContain('Mom');
|
|
152
|
+
});
|
|
153
|
+
});
|
|
154
|
+
|
|
155
|
+
describe('cadre-host trust revoke CLI', () => {
|
|
156
|
+
it('DELETEs /auth/invites/<token> by default', async () => {
|
|
157
|
+
stub.setResponse((_req, res) => {
|
|
158
|
+
res.statusCode = 204;
|
|
159
|
+
res.end();
|
|
160
|
+
});
|
|
161
|
+
const result = await runCli(['trust', 'revoke', 'some-token', '--port', String(stub.port)]);
|
|
162
|
+
expect(result.code).toBe(0);
|
|
163
|
+
expect(stub.requests[0]!.method).toBe('DELETE');
|
|
164
|
+
expect(stub.requests[0]!.url).toBe('/auth/invites/some-token');
|
|
165
|
+
});
|
|
166
|
+
|
|
167
|
+
it('DELETEs /auth/members/<peerId> when id looks like a peerId', async () => {
|
|
168
|
+
stub.setResponse((_req, res) => {
|
|
169
|
+
res.statusCode = 204;
|
|
170
|
+
res.end();
|
|
171
|
+
});
|
|
172
|
+
const result = await runCli(['trust', 'revoke', '12D3KooWAlice', '--port', String(stub.port)]);
|
|
173
|
+
expect(result.code).toBe(0);
|
|
174
|
+
expect(stub.requests[0]!.url).toBe('/auth/members/12D3KooWAlice');
|
|
175
|
+
});
|
|
176
|
+
|
|
177
|
+
it('treats secp256k1 peer IDs (16Uiu2HAm…) as members', async () => {
|
|
178
|
+
stub.setResponse((_req, res) => {
|
|
179
|
+
res.statusCode = 204;
|
|
180
|
+
res.end();
|
|
181
|
+
});
|
|
182
|
+
const result = await runCli(['trust', 'revoke', '16Uiu2HAmExample', '--port', String(stub.port)]);
|
|
183
|
+
expect(result.code).toBe(0);
|
|
184
|
+
expect(stub.requests[0]!.url).toBe('/auth/members/16Uiu2HAmExample');
|
|
185
|
+
});
|
|
186
|
+
|
|
187
|
+
it('rejects invalid --port', async () => {
|
|
188
|
+
const result = await runCli(['trust', 'revoke', 'some-token', '--port', 'garbage']);
|
|
189
|
+
expect(result.code).toBe(1);
|
|
190
|
+
expect(result.stderr).toMatch(/Invalid --port/);
|
|
191
|
+
});
|
|
192
|
+
});
|