@serfab/cadre-host 0.9.0 → 0.11.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/auth/index.d.ts +2 -0
- package/dist/auth/index.js +1 -0
- package/dist/auth/index.js.map +1 -1
- package/dist/auth/self-label.d.ts +36 -0
- package/dist/auth/self-label.js +57 -0
- package/dist/auth/self-label.js.map +1 -0
- package/dist/auth/trust-circle.d.ts +32 -5
- package/dist/auth/trust-circle.js +31 -11
- package/dist/auth/trust-circle.js.map +1 -1
- package/dist/bin/host.js +41 -5
- package/dist/bin/host.js.map +1 -1
- package/dist/donation/__tests__/fake-orchestrator.d.ts +103 -0
- package/dist/donation/__tests__/fake-orchestrator.js +180 -0
- package/dist/donation/__tests__/fake-orchestrator.js.map +1 -0
- package/dist/donation/donation-service.d.ts +237 -12
- package/dist/donation/donation-service.js +491 -34
- package/dist/donation/donation-service.js.map +1 -1
- package/dist/donation/donation-store.d.ts +7 -0
- package/dist/donation/donation-store.js +7 -0
- package/dist/donation/donation-store.js.map +1 -1
- package/dist/donation/donation-supervisor.d.ts +167 -0
- package/dist/donation/donation-supervisor.js +341 -0
- package/dist/donation/donation-supervisor.js.map +1 -0
- package/dist/donation/index.d.ts +4 -2
- package/dist/donation/index.js +2 -1
- package/dist/donation/index.js.map +1 -1
- package/dist/donation/types.d.ts +26 -0
- package/dist/donation/types.js.map +1 -1
- package/dist/index.d.ts +3 -1
- package/dist/index.js +3 -1
- package/dist/index.js.map +1 -1
- package/dist/orchestrator/host-process-orchestrator.d.ts +109 -5
- package/dist/orchestrator/host-process-orchestrator.js +341 -98
- package/dist/orchestrator/host-process-orchestrator.js.map +1 -1
- package/dist/orchestrator/node-identity.d.ts +26 -0
- package/dist/orchestrator/node-identity.js +36 -0
- package/dist/orchestrator/node-identity.js.map +1 -0
- package/dist/orchestrator/port-allocator.d.ts +14 -0
- package/dist/orchestrator/port-allocator.js +45 -0
- package/dist/orchestrator/port-allocator.js.map +1 -1
- package/dist/owner/owner-node-client.d.ts +20 -5
- package/dist/owner/owner-node-client.js +21 -4
- package/dist/owner/owner-node-client.js.map +1 -1
- package/dist/server/error-handler.d.ts +7 -1
- package/dist/server/error-handler.js +23 -1
- package/dist/server/error-handler.js.map +1 -1
- package/dist/server/events/types.d.ts +3 -0
- package/dist/server/index.d.ts +7 -0
- package/dist/server/index.js +9 -3
- package/dist/server/index.js.map +1 -1
- package/dist/server/routes/grants.js +22 -3
- package/dist/server/routes/grants.js.map +1 -1
- package/dist/server/routes/strands.d.ts +20 -0
- package/dist/server/routes/strands.js +38 -0
- package/dist/server/routes/strands.js.map +1 -0
- package/dist/server/static.js +38 -38
- package/dist/strands/index.d.ts +7 -0
- package/dist/strands/index.js +6 -0
- package/dist/strands/index.js.map +1 -0
- package/dist/strands/strand-service.d.ts +50 -0
- package/dist/strands/strand-service.js +103 -0
- package/dist/strands/strand-service.js.map +1 -0
- package/dist/strands/types.d.ts +93 -0
- package/dist/strands/types.js +23 -0
- package/dist/strands/types.js.map +1 -0
- package/dist/ui/assets/index-BVoqLjyX.css +1 -0
- package/dist/ui/assets/index-C-iks41M.js +17 -0
- package/dist/ui/assets/index-C-iks41M.js.map +1 -0
- package/dist/ui/index.html +14 -14
- package/dist/update/release-key.d.ts +1 -1
- package/dist/update/release-key.js +1 -1
- package/package.json +5 -5
- package/service/cadre-host.service.tmpl +16 -16
- package/service/com.serfab.cadre-host.plist.tmpl +35 -35
- package/service/install-service.ps1 +98 -98
- package/service/uninstall-service.ps1 +19 -19
- package/src/__tests__/build-targets.test.ts +26 -0
- package/src/__tests__/cli-invite.smoke.test.ts +192 -192
- package/src/__tests__/cli-nat.smoke.test.ts +212 -212
- package/src/__tests__/cli.smoke.test.ts +46 -46
- package/src/__tests__/global-setup.ts +51 -0
- package/src/__tests__/host-owner.smoke.test.ts +123 -123
- package/src/__tests__/orchestrator-env-scrub.test.ts +140 -0
- package/src/__tests__/orchestrator-node-identity.test.ts +204 -0
- package/src/__tests__/orchestrator-owner.test.ts +198 -198
- package/src/__tests__/orchestrator-pin-keys.test.ts +153 -153
- package/src/__tests__/orchestrator-push.test.ts +145 -145
- package/src/__tests__/orchestrator.test.ts +951 -570
- package/src/auth/__tests__/duration.test.ts +28 -28
- package/src/auth/__tests__/self-label.test.ts +85 -0
- package/src/auth/__tests__/trust-circle-integration.test.ts +152 -147
- package/src/auth/__tests__/trust-circle-store.test.ts +115 -115
- package/src/auth/__tests__/trust-circle.test.ts +445 -401
- package/src/auth/duration.ts +33 -33
- package/src/auth/index.ts +21 -19
- package/src/auth/self-label.ts +74 -0
- package/src/auth/trust-circle-store.ts +155 -155
- package/src/auth/trust-circle.ts +45 -13
- package/src/auth/types.ts +99 -99
- package/src/bin/host.ts +1299 -1258
- package/src/donation/__tests__/donation-service.test.ts +1068 -290
- package/src/donation/__tests__/donation-supervisor.test.ts +510 -0
- package/src/donation/__tests__/fake-orchestrator.test.ts +168 -0
- package/src/donation/__tests__/fake-orchestrator.ts +225 -0
- package/src/donation/__tests__/grant-service.test.ts +213 -213
- package/src/donation/__tests__/grant-store.test.ts +113 -113
- package/src/donation/donation-service.ts +962 -392
- package/src/donation/donation-store.ts +171 -164
- package/src/donation/donation-supervisor.ts +388 -0
- package/src/donation/grant-service.ts +200 -200
- package/src/donation/grant-store.ts +152 -152
- package/src/donation/index.ts +64 -49
- package/src/donation/types.ts +243 -220
- package/src/index.ts +14 -0
- package/src/installer/__tests__/identity.test.ts +34 -34
- package/src/installer/__tests__/paths.test.ts +47 -47
- package/src/installer/__tests__/service-host.test.ts +62 -62
- package/src/installer/__tests__/wizard.test.ts +64 -64
- package/src/installer/identity.ts +49 -49
- package/src/installer/paths.ts +109 -109
- package/src/installer/platform.ts +27 -27
- package/src/installer/service-host/index.ts +21 -21
- package/src/installer/service-host/template.ts +21 -21
- package/src/installer/wizard.ts +103 -103
- package/src/nat/__tests__/address-resolver.test.ts +82 -82
- package/src/nat/__tests__/ddns-duckdns.test.ts +83 -83
- package/src/nat/__tests__/ddns-updater.test.ts +253 -253
- package/src/nat/__tests__/external-ip.test.ts +124 -124
- package/src/nat/__tests__/nat-service.test.ts +497 -497
- package/src/nat/__tests__/nat-store.test.ts +93 -93
- package/src/nat/__tests__/port-mapper.test.ts +191 -191
- package/src/nat/__tests__/reachability.test.ts +24 -24
- package/src/nat/__tests__/secrets.test.ts +178 -178
- package/src/nat/address-resolver.ts +51 -51
- package/src/nat/ddns/duckdns.ts +76 -76
- package/src/nat/ddns/index.ts +55 -55
- package/src/nat/ddns/updater.ts +243 -243
- package/src/nat/external-ip.ts +154 -154
- package/src/nat/index.ts +71 -71
- package/src/nat/nat-service.ts +501 -501
- package/src/nat/nat-store.ts +154 -154
- package/src/nat/port-mapper.ts +329 -329
- package/src/nat/reachability.ts +34 -34
- package/src/nat/secrets/file-store.ts +130 -130
- package/src/nat/secrets/index.ts +112 -112
- package/src/nat/secrets/keytar-store.ts +67 -67
- package/src/nat/types.ts +159 -159
- package/src/orchestrator/__tests__/node-identity.test.ts +62 -0
- package/src/orchestrator/host-process-orchestrator.ts +1133 -894
- package/src/orchestrator/index.ts +10 -10
- package/src/orchestrator/log-rotator.ts +53 -53
- package/src/orchestrator/node-identity.ts +40 -0
- package/src/orchestrator/pid-liveness.ts +24 -24
- package/src/orchestrator/port-allocator.ts +91 -43
- package/src/orchestrator/state-store.ts +90 -90
- package/src/orchestrator/types.ts +141 -141
- package/src/owner/__tests__/owner-node-client.test.ts +194 -194
- package/src/owner/index.ts +12 -12
- package/src/owner/owner-node-client.ts +259 -233
- package/src/push/__tests__/push.test.ts +90 -90
- package/src/push/index.ts +146 -146
- package/src/server/__tests__/bus.test.ts +38 -38
- package/src/server/__tests__/error-handler.test.ts +118 -118
- package/src/server/__tests__/grants-admin-route.test.ts +73 -73
- package/src/server/__tests__/grants-route.test.ts +263 -189
- package/src/server/__tests__/nodes-route.test.ts +259 -259
- package/src/server/__tests__/origin-guard.test.ts +72 -72
- package/src/server/__tests__/publishers.test.ts +216 -216
- package/src/server/__tests__/server.smoke.test.ts +253 -253
- package/src/server/__tests__/settings-route.test.ts +194 -194
- package/src/server/__tests__/sse-route.test.ts +119 -119
- package/src/server/__tests__/static.test.ts +145 -145
- package/src/server/__tests__/status-route.test.ts +134 -134
- package/src/server/__tests__/strands-route.test.ts +233 -0
- package/src/server/error-handler.ts +178 -155
- package/src/server/events/bus.ts +42 -42
- package/src/server/events/sse-route.ts +81 -81
- package/src/server/events/types.ts +23 -22
- package/src/server/index.ts +267 -254
- package/src/server/origin-guard.ts +84 -84
- package/src/server/routes/grants-admin.ts +41 -41
- package/src/server/routes/grants.ts +210 -186
- package/src/server/routes/nat.ts +63 -63
- package/src/server/routes/nodes.ts +170 -170
- package/src/server/routes/settings.ts +123 -123
- package/src/server/routes/status.ts +118 -118
- package/src/server/routes/strands.ts +54 -0
- package/src/server/routes/trust-circle.ts +49 -49
- package/src/server/routes/update.ts +43 -43
- package/src/server/server.ts +122 -122
- package/src/server/settings-store.ts +37 -37
- package/src/server/static.ts +207 -207
- package/src/strands/__tests__/strand-service.test.ts +165 -0
- package/src/strands/index.ts +14 -0
- package/src/strands/strand-service.ts +135 -0
- package/src/strands/types.ts +102 -0
- package/src/update/__tests__/apply.test.ts +158 -158
- package/src/update/__tests__/manifest.test.ts +128 -128
- package/src/update/__tests__/release-key.test.ts +42 -42
- package/src/update/__tests__/sign.test.ts +78 -78
- package/src/update/__tests__/store.test.ts +81 -81
- package/src/update/__tests__/update-service.integration.test.ts +256 -256
- package/src/update/__tests__/version.test.ts +31 -31
- package/src/update/apply.ts +190 -190
- package/src/update/index.ts +341 -341
- package/src/update/release-key.ts +71 -71
- package/src/update/sign.ts +74 -74
- package/src/update/store.ts +101 -101
- package/src/update/types.ts +109 -109
- package/src/update/version.ts +80 -80
- package/dist/ui/assets/index-BlMXQPSw.js +0 -14
- package/dist/ui/assets/index-BlMXQPSw.js.map +0 -1
- package/dist/ui/assets/index-BwU5mJGF.css +0 -1
|
@@ -1,81 +1,81 @@
|
|
|
1
|
-
/**
|
|
2
|
-
* Server-Sent Events route — `GET /api/events`.
|
|
3
|
-
*
|
|
4
|
-
* Hand-rolled (~40 lines vs. the 30 KB @fastify/sse-v2 dep). The wire format:
|
|
5
|
-
*
|
|
6
|
-
* retry: 5000\n\n ← reconnect hint
|
|
7
|
-
* : heartbeat\n\n ← comment line, every 15 s
|
|
8
|
-
* event: <type>\n ← event name
|
|
9
|
-
* data: <json>\n\n ← payload
|
|
10
|
-
*
|
|
11
|
-
* The handler subscribes to the bus on connect, unsubscribes on client
|
|
12
|
-
* disconnect, and ticks a heartbeat so corporate proxies don't close the
|
|
13
|
-
* connection at the idle timeout.
|
|
14
|
-
*/
|
|
15
|
-
|
|
16
|
-
import type { FastifyInstance, FastifyReply, FastifyRequest } from 'fastify';
|
|
17
|
-
import debug from 'debug';
|
|
18
|
-
|
|
19
|
-
import type { EventBus } from './bus.js';
|
|
20
|
-
import type { LocalUiEvent } from './types.js';
|
|
21
|
-
|
|
22
|
-
const log = debug('cadre:host:sse');
|
|
23
|
-
|
|
24
|
-
const HEARTBEAT_INTERVAL_MS = 15_000;
|
|
25
|
-
const RECONNECT_HINT_MS = 5_000;
|
|
26
|
-
|
|
27
|
-
export interface SseRouteOptions {
|
|
28
|
-
events: EventBus;
|
|
29
|
-
/** Test override: shorter heartbeat. */
|
|
30
|
-
heartbeatIntervalMs?: number;
|
|
31
|
-
}
|
|
32
|
-
|
|
33
|
-
export function registerSseRoute(app: FastifyInstance, opts: SseRouteOptions): void {
|
|
34
|
-
const heartbeatMs = opts.heartbeatIntervalMs ?? HEARTBEAT_INTERVAL_MS;
|
|
35
|
-
|
|
36
|
-
app.get('/api/events', (request: FastifyRequest, reply: FastifyReply) => {
|
|
37
|
-
// Tell Fastify we're handling the reply ourselves — it won't try to
|
|
38
|
-
// serialise or send a payload.
|
|
39
|
-
reply.hijack();
|
|
40
|
-
reply.raw.writeHead(200, {
|
|
41
|
-
'Content-Type': 'text/event-stream',
|
|
42
|
-
'Cache-Control': 'no-cache, no-transform',
|
|
43
|
-
Connection: 'keep-alive',
|
|
44
|
-
'X-Accel-Buffering': 'no',
|
|
45
|
-
});
|
|
46
|
-
reply.raw.write(`retry: ${RECONNECT_HINT_MS}\n\n`);
|
|
47
|
-
reply.raw.write(`: connected\n\n`);
|
|
48
|
-
|
|
49
|
-
const onEvent = (event: LocalUiEvent): void => {
|
|
50
|
-
try {
|
|
51
|
-
reply.raw.write(`event: ${event.type}\n`);
|
|
52
|
-
reply.raw.write(`data: ${JSON.stringify(event)}\n\n`);
|
|
53
|
-
} catch (err) {
|
|
54
|
-
log('write failed (client likely gone): %s', (err as Error).message);
|
|
55
|
-
}
|
|
56
|
-
};
|
|
57
|
-
const unsubscribe = opts.events.subscribe(onEvent);
|
|
58
|
-
|
|
59
|
-
const heartbeat = setInterval(() => {
|
|
60
|
-
try {
|
|
61
|
-
reply.raw.write(`: heartbeat\n\n`);
|
|
62
|
-
} catch (err) {
|
|
63
|
-
log('heartbeat write failed: %s', (err as Error).message);
|
|
64
|
-
}
|
|
65
|
-
}, heartbeatMs);
|
|
66
|
-
// Don't hold the event loop open for the heartbeat alone.
|
|
67
|
-
if (typeof heartbeat === 'object' && 'unref' in heartbeat) {
|
|
68
|
-
(heartbeat as { unref?: () => void }).unref?.();
|
|
69
|
-
}
|
|
70
|
-
|
|
71
|
-
const cleanup = (): void => {
|
|
72
|
-
clearInterval(heartbeat);
|
|
73
|
-
unsubscribe();
|
|
74
|
-
};
|
|
75
|
-
request.raw.on('close', cleanup);
|
|
76
|
-
request.raw.on('error', cleanup);
|
|
77
|
-
|
|
78
|
-
// The reply object is intentionally not returned — Fastify must not
|
|
79
|
-
// attempt to serialise an SSE response.
|
|
80
|
-
});
|
|
81
|
-
}
|
|
1
|
+
/**
|
|
2
|
+
* Server-Sent Events route — `GET /api/events`.
|
|
3
|
+
*
|
|
4
|
+
* Hand-rolled (~40 lines vs. the 30 KB @fastify/sse-v2 dep). The wire format:
|
|
5
|
+
*
|
|
6
|
+
* retry: 5000\n\n ← reconnect hint
|
|
7
|
+
* : heartbeat\n\n ← comment line, every 15 s
|
|
8
|
+
* event: <type>\n ← event name
|
|
9
|
+
* data: <json>\n\n ← payload
|
|
10
|
+
*
|
|
11
|
+
* The handler subscribes to the bus on connect, unsubscribes on client
|
|
12
|
+
* disconnect, and ticks a heartbeat so corporate proxies don't close the
|
|
13
|
+
* connection at the idle timeout.
|
|
14
|
+
*/
|
|
15
|
+
|
|
16
|
+
import type { FastifyInstance, FastifyReply, FastifyRequest } from 'fastify';
|
|
17
|
+
import debug from 'debug';
|
|
18
|
+
|
|
19
|
+
import type { EventBus } from './bus.js';
|
|
20
|
+
import type { LocalUiEvent } from './types.js';
|
|
21
|
+
|
|
22
|
+
const log = debug('cadre:host:sse');
|
|
23
|
+
|
|
24
|
+
const HEARTBEAT_INTERVAL_MS = 15_000;
|
|
25
|
+
const RECONNECT_HINT_MS = 5_000;
|
|
26
|
+
|
|
27
|
+
export interface SseRouteOptions {
|
|
28
|
+
events: EventBus;
|
|
29
|
+
/** Test override: shorter heartbeat. */
|
|
30
|
+
heartbeatIntervalMs?: number;
|
|
31
|
+
}
|
|
32
|
+
|
|
33
|
+
export function registerSseRoute(app: FastifyInstance, opts: SseRouteOptions): void {
|
|
34
|
+
const heartbeatMs = opts.heartbeatIntervalMs ?? HEARTBEAT_INTERVAL_MS;
|
|
35
|
+
|
|
36
|
+
app.get('/api/events', (request: FastifyRequest, reply: FastifyReply) => {
|
|
37
|
+
// Tell Fastify we're handling the reply ourselves — it won't try to
|
|
38
|
+
// serialise or send a payload.
|
|
39
|
+
reply.hijack();
|
|
40
|
+
reply.raw.writeHead(200, {
|
|
41
|
+
'Content-Type': 'text/event-stream',
|
|
42
|
+
'Cache-Control': 'no-cache, no-transform',
|
|
43
|
+
Connection: 'keep-alive',
|
|
44
|
+
'X-Accel-Buffering': 'no',
|
|
45
|
+
});
|
|
46
|
+
reply.raw.write(`retry: ${RECONNECT_HINT_MS}\n\n`);
|
|
47
|
+
reply.raw.write(`: connected\n\n`);
|
|
48
|
+
|
|
49
|
+
const onEvent = (event: LocalUiEvent): void => {
|
|
50
|
+
try {
|
|
51
|
+
reply.raw.write(`event: ${event.type}\n`);
|
|
52
|
+
reply.raw.write(`data: ${JSON.stringify(event)}\n\n`);
|
|
53
|
+
} catch (err) {
|
|
54
|
+
log('write failed (client likely gone): %s', (err as Error).message);
|
|
55
|
+
}
|
|
56
|
+
};
|
|
57
|
+
const unsubscribe = opts.events.subscribe(onEvent);
|
|
58
|
+
|
|
59
|
+
const heartbeat = setInterval(() => {
|
|
60
|
+
try {
|
|
61
|
+
reply.raw.write(`: heartbeat\n\n`);
|
|
62
|
+
} catch (err) {
|
|
63
|
+
log('heartbeat write failed: %s', (err as Error).message);
|
|
64
|
+
}
|
|
65
|
+
}, heartbeatMs);
|
|
66
|
+
// Don't hold the event loop open for the heartbeat alone.
|
|
67
|
+
if (typeof heartbeat === 'object' && 'unref' in heartbeat) {
|
|
68
|
+
(heartbeat as { unref?: () => void }).unref?.();
|
|
69
|
+
}
|
|
70
|
+
|
|
71
|
+
const cleanup = (): void => {
|
|
72
|
+
clearInterval(heartbeat);
|
|
73
|
+
unsubscribe();
|
|
74
|
+
};
|
|
75
|
+
request.raw.on('close', cleanup);
|
|
76
|
+
request.raw.on('error', cleanup);
|
|
77
|
+
|
|
78
|
+
// The reply object is intentionally not returned — Fastify must not
|
|
79
|
+
// attempt to serialise an SSE response.
|
|
80
|
+
});
|
|
81
|
+
}
|
|
@@ -1,22 +1,23 @@
|
|
|
1
|
-
/**
|
|
2
|
-
* Event types broadcast over the SPA's SSE channel.
|
|
3
|
-
*
|
|
4
|
-
* Publishers (orchestrator hook, route adapters, update observer) call
|
|
5
|
-
* EventBus.publish; the `/api/events` route fan-outs to connected clients.
|
|
6
|
-
*/
|
|
7
|
-
|
|
8
|
-
import type { ContainerStatus } from '@serfab/cadre-provider';
|
|
9
|
-
|
|
10
|
-
import type { DirectReachability, PortForwardMode } from '../../nat/index.js';
|
|
11
|
-
|
|
12
|
-
export type LocalUiEvent =
|
|
13
|
-
| { type: 'node-state-changed'; nodeId: string; status: ContainerStatus }
|
|
14
|
-
| { type: 'trust-circle-changed'; kind: 'invited' | 'redeemed' | 'revoked' }
|
|
15
|
-
| {
|
|
16
|
-
|
|
17
|
-
|
|
18
|
-
|
|
19
|
-
|
|
20
|
-
|
|
21
|
-
|
|
22
|
-
|
|
1
|
+
/**
|
|
2
|
+
* Event types broadcast over the SPA's SSE channel.
|
|
3
|
+
*
|
|
4
|
+
* Publishers (orchestrator hook, route adapters, update observer) call
|
|
5
|
+
* EventBus.publish; the `/api/events` route fan-outs to connected clients.
|
|
6
|
+
*/
|
|
7
|
+
|
|
8
|
+
import type { ContainerStatus } from '@serfab/cadre-provider';
|
|
9
|
+
|
|
10
|
+
import type { DirectReachability, PortForwardMode } from '../../nat/index.js';
|
|
11
|
+
|
|
12
|
+
export type LocalUiEvent =
|
|
13
|
+
| { type: 'node-state-changed'; nodeId: string; status: ContainerStatus }
|
|
14
|
+
| { type: 'trust-circle-changed'; kind: 'invited' | 'redeemed' | 'revoked' }
|
|
15
|
+
| { type: 'strands-changed'; kind: 'removed' }
|
|
16
|
+
| {
|
|
17
|
+
type: 'connectivity-changed';
|
|
18
|
+
portMode: PortForwardMode;
|
|
19
|
+
directReachability: DirectReachability;
|
|
20
|
+
}
|
|
21
|
+
| { type: 'update-available'; version: string; releaseNotesUrl?: string };
|
|
22
|
+
|
|
23
|
+
export type LocalUiEventType = LocalUiEvent['type'];
|