@serfab/cadre-host 0.9.0 → 0.11.0

package/src/update/types.ts

@@ -1,109 +1,109 @@
-/**
- * Types for the cadre-host update flow.
- *
- * The update flow is split across:
- *
- *   - manifest.ts — fetch + verify the signed `latest.json` envelope.
- *   - store.ts    — persist the user-facing `UpdateState` to `<dataDir>/update-state.json`.
- *   - apply.ts    — invoke `npm install -g` + rollback on failure.
- *   - index.ts    — composes the above (UpdateService).
- *
- * Mirrors the typed-handler pattern used by trust-circle and NAT (handlers
- * throw `UpdateError` whose `.code` the local-UI maps to HTTP status).
- */
-
-/** Inner manifest object — signed by the release key. */
-export interface UpdateManifest {
-  /** Schema version. Bumped on incompatible manifest changes. */
-  v: 1;
-  /** Version string being announced (semver). */
-  version: string;
-  /** ISO publish timestamp. */
-  publishedAt: string;
-  /** Per-channel install hints. cadre-host currently only consults `npm`. */
-  channels: {
-    npm: { package: string; tag: string };
-  };
-  /** Optional human-facing release-notes URL. */
-  releaseNotesUrl?: string;
-  /**
-   * Minimum previous version that can step directly to this release. If the
-   * current install is older, the user must update through an intermediate
-   * release first.
-   */
-  minPreviousVersion?: string;
-}
-
-/** Signed envelope as fetched from the manifest URL. */
-export interface SignedManifest {
-  manifest: UpdateManifest;
-  /** Detached signature in the form `ed25519:<base64>`. */
-  sig: string;
-}
-
-/** Persisted shape of `<dataDir>/update-state.json`. */
-export interface UpdateState {
-  /** Schema version of this file. */
-  version: 1;
-  /** ISO timestamp of the most recent successful manifest fetch. */
-  lastChecked?: string;
-  /** Set when the manifest advertises a version newer than `currentVersion`. */
-  available?: {
-    version: string;
-    publishedAt: string;
-    releaseNotesUrl?: string;
-  };
-  /** Records the version before an apply, so a rollback can target it. */
-  applyInProgress?: {
-    fromVersion: string;
-    toVersion: string;
-    startedAt: string;
-  };
-  /** Most recent apply / verification error, surfaced by the UI banner. */
-  lastError?: UpdateError;
-}
-
-/** Stable error payload — both thrown via `UpdateErrorException` and serialized into state. */
-export interface UpdateError {
-  code: UpdateErrorCode;
-  message: string;
-  at: string;
-}
-
-export type UpdateErrorCode =
-  | 'signature_invalid'
-  | 'manifest_invalid'
-  | 'unsupported_state_version'
-  | 'apply_in_progress'
-  | 'apply_failed'
-  | 'rollback_failed'
-  | 'min_previous_version'
-  | 'no_update_available'
-  | 'storage_error';
-
-/** Thrown by UpdateService.apply() and related entry points. */
-export class UpdateErrorException extends Error {
-  readonly code: UpdateErrorCode;
-
-  constructor(code: UpdateErrorCode, message: string) {
-    super(message);
-    this.name = 'UpdateErrorException';
-    this.code = code;
-  }
-}
-
-/** Result of a successful apply() — the caller can inspect what just happened. */
-export interface UpdateApplyResult {
-  fromVersion: string;
-  toVersion: string;
-  restarted: boolean;
-  restartError?: string;
-}
-
-/** Subset of `host.config.json` consumed by the update flow. */
-export interface UpdateSettings {
-  /** When true, the daily timer applies updates automatically. */
-  autoApply: boolean;
-  /** Optional override for the manifest URL. */
-  manifestUrl?: string;
-}
+/**
+ * Types for the cadre-host update flow.
+ *
+ * The update flow is split across:
+ *
+ *   - manifest.ts — fetch + verify the signed `latest.json` envelope.
+ *   - store.ts    — persist the user-facing `UpdateState` to `<dataDir>/update-state.json`.
+ *   - apply.ts    — invoke `npm install -g` + rollback on failure.
+ *   - index.ts    — composes the above (UpdateService).
+ *
+ * Mirrors the typed-handler pattern used by trust-circle and NAT (handlers
+ * throw `UpdateError` whose `.code` the local-UI maps to HTTP status).
+ */
+
+/** Inner manifest object — signed by the release key. */
+export interface UpdateManifest {
+  /** Schema version. Bumped on incompatible manifest changes. */
+  v: 1;
+  /** Version string being announced (semver). */
+  version: string;
+  /** ISO publish timestamp. */
+  publishedAt: string;
+  /** Per-channel install hints. cadre-host currently only consults `npm`. */
+  channels: {
+    npm: { package: string; tag: string };
+  };
+  /** Optional human-facing release-notes URL. */
+  releaseNotesUrl?: string;
+  /**
+   * Minimum previous version that can step directly to this release. If the
+   * current install is older, the user must update through an intermediate
+   * release first.
+   */
+  minPreviousVersion?: string;
+}
+
+/** Signed envelope as fetched from the manifest URL. */
+export interface SignedManifest {
+  manifest: UpdateManifest;
+  /** Detached signature in the form `ed25519:<base64>`. */
+  sig: string;
+}
+
+/** Persisted shape of `<dataDir>/update-state.json`. */
+export interface UpdateState {
+  /** Schema version of this file. */
+  version: 1;
+  /** ISO timestamp of the most recent successful manifest fetch. */
+  lastChecked?: string;
+  /** Set when the manifest advertises a version newer than `currentVersion`. */
+  available?: {
+    version: string;
+    publishedAt: string;
+    releaseNotesUrl?: string;
+  };
+  /** Records the version before an apply, so a rollback can target it. */
+  applyInProgress?: {
+    fromVersion: string;
+    toVersion: string;
+    startedAt: string;
+  };
+  /** Most recent apply / verification error, surfaced by the UI banner. */
+  lastError?: UpdateError;
+}
+
+/** Stable error payload — both thrown via `UpdateErrorException` and serialized into state. */
+export interface UpdateError {
+  code: UpdateErrorCode;
+  message: string;
+  at: string;
+}
+
+export type UpdateErrorCode =
+  | 'signature_invalid'
+  | 'manifest_invalid'
+  | 'unsupported_state_version'
+  | 'apply_in_progress'
+  | 'apply_failed'
+  | 'rollback_failed'
+  | 'min_previous_version'
+  | 'no_update_available'
+  | 'storage_error';
+
+/** Thrown by UpdateService.apply() and related entry points. */
+export class UpdateErrorException extends Error {
+  readonly code: UpdateErrorCode;
+
+  constructor(code: UpdateErrorCode, message: string) {
+    super(message);
+    this.name = 'UpdateErrorException';
+    this.code = code;
+  }
+}
+
+/** Result of a successful apply() — the caller can inspect what just happened. */
+export interface UpdateApplyResult {
+  fromVersion: string;
+  toVersion: string;
+  restarted: boolean;
+  restartError?: string;
+}
+
+/** Subset of `host.config.json` consumed by the update flow. */
+export interface UpdateSettings {
+  /** When true, the daily timer applies updates automatically. */
+  autoApply: boolean;
+  /** Optional override for the manifest URL. */
+  manifestUrl?: string;
+}

package/src/update/version.ts

@@ -1,80 +1,80 @@
-/**
- * Tiny semver comparator. We refuse to pull in `semver` for a single
- * compareVersions() call; the surface here is intentionally narrow.
- *
- * Supports `MAJOR.MINOR.PATCH` and `MAJOR.MINOR.PATCH-PRERELEASE` (semver §11).
- * Build metadata (`+...`) is rejected — releases shouldn't ship with it and
- * it'd only confuse equality.
- */
-
-const SEMVER_RE = /^(\d+)\.(\d+)\.(\d+)(?:-([0-9A-Za-z.-]+))?$/;
-
-export interface ParsedVersion {
-  major: number;
-  minor: number;
-  patch: number;
-  /** Empty string when there is no prerelease (= a higher precedence release). */
-  prerelease: string;
-}
-
-export function parseVersion(input: string): ParsedVersion {
-  if (typeof input !== 'string') {
-    throw new Error(`Invalid version: ${String(input)}`);
-  }
-  const m = SEMVER_RE.exec(input.trim());
-  if (!m) {
-    throw new Error(`Invalid version: ${input}`);
-  }
-  return {
-    major: Number(m[1]),
-    minor: Number(m[2]),
-    patch: Number(m[3]),
-    prerelease: m[4] ?? '',
-  };
-}
-
-/** -1 if a < b, 0 if equal, +1 if a > b. */
-export function compareVersions(a: string, b: string): number {
-  const pa = parseVersion(a);
-  const pb = parseVersion(b);
-
-  if (pa.major !== pb.major) return pa.major < pb.major ? -1 : 1;
-  if (pa.minor !== pb.minor) return pa.minor < pb.minor ? -1 : 1;
-  if (pa.patch !== pb.patch) return pa.patch < pb.patch ? -1 : 1;
-
-  // Per semver §11: a version *without* a prerelease has higher precedence
-  // than one with a prerelease.
-  if (pa.prerelease === '' && pb.prerelease === '') return 0;
-  if (pa.prerelease === '') return 1;
-  if (pb.prerelease === '') return -1;
-
-  return comparePrerelease(pa.prerelease, pb.prerelease);
-}
-
-/** Component-wise compare per semver §11.4. */
-function comparePrerelease(a: string, b: string): number {
-  const as = a.split('.');
-  const bs = b.split('.');
-  const len = Math.min(as.length, bs.length);
-  for (let i = 0; i < len; i++) {
-    const c = compareIdentifier(as[i]!, bs[i]!);
-    if (c !== 0) return c;
-  }
-  if (as.length === bs.length) return 0;
-  return as.length < bs.length ? -1 : 1;
-}
-
-function compareIdentifier(a: string, b: string): number {
-  const aNum = /^\d+$/.test(a);
-  const bNum = /^\d+$/.test(b);
-  if (aNum && bNum) {
-    const na = Number(a);
-    const nb = Number(b);
-    return na === nb ? 0 : na < nb ? -1 : 1;
-  }
-  // Numeric identifiers always have lower precedence than alphanumeric.
-  if (aNum) return -1;
-  if (bNum) return 1;
-  if (a === b) return 0;
-  return a < b ? -1 : 1;
-}
+/**
+ * Tiny semver comparator. We refuse to pull in `semver` for a single
+ * compareVersions() call; the surface here is intentionally narrow.
+ *
+ * Supports `MAJOR.MINOR.PATCH` and `MAJOR.MINOR.PATCH-PRERELEASE` (semver §11).
+ * Build metadata (`+...`) is rejected — releases shouldn't ship with it and
+ * it'd only confuse equality.
+ */
+
+const SEMVER_RE = /^(\d+)\.(\d+)\.(\d+)(?:-([0-9A-Za-z.-]+))?$/;
+
+export interface ParsedVersion {
+  major: number;
+  minor: number;
+  patch: number;
+  /** Empty string when there is no prerelease (= a higher precedence release). */
+  prerelease: string;
+}
+
+export function parseVersion(input: string): ParsedVersion {
+  if (typeof input !== 'string') {
+    throw new Error(`Invalid version: ${String(input)}`);
+  }
+  const m = SEMVER_RE.exec(input.trim());
+  if (!m) {
+    throw new Error(`Invalid version: ${input}`);
+  }
+  return {
+    major: Number(m[1]),
+    minor: Number(m[2]),
+    patch: Number(m[3]),
+    prerelease: m[4] ?? '',
+  };
+}
+
+/** -1 if a < b, 0 if equal, +1 if a > b. */
+export function compareVersions(a: string, b: string): number {
+  const pa = parseVersion(a);
+  const pb = parseVersion(b);
+
+  if (pa.major !== pb.major) return pa.major < pb.major ? -1 : 1;
+  if (pa.minor !== pb.minor) return pa.minor < pb.minor ? -1 : 1;
+  if (pa.patch !== pb.patch) return pa.patch < pb.patch ? -1 : 1;
+
+  // Per semver §11: a version *without* a prerelease has higher precedence
+  // than one with a prerelease.
+  if (pa.prerelease === '' && pb.prerelease === '') return 0;
+  if (pa.prerelease === '') return 1;
+  if (pb.prerelease === '') return -1;
+
+  return comparePrerelease(pa.prerelease, pb.prerelease);
+}
+
+/** Component-wise compare per semver §11.4. */
+function comparePrerelease(a: string, b: string): number {
+  const as = a.split('.');
+  const bs = b.split('.');
+  const len = Math.min(as.length, bs.length);
+  for (let i = 0; i < len; i++) {
+    const c = compareIdentifier(as[i]!, bs[i]!);
+    if (c !== 0) return c;
+  }
+  if (as.length === bs.length) return 0;
+  return as.length < bs.length ? -1 : 1;
+}
+
+function compareIdentifier(a: string, b: string): number {
+  const aNum = /^\d+$/.test(a);
+  const bNum = /^\d+$/.test(b);
+  if (aNum && bNum) {
+    const na = Number(a);
+    const nb = Number(b);
+    return na === nb ? 0 : na < nb ? -1 : 1;
+  }
+  // Numeric identifiers always have lower precedence than alphanumeric.
+  if (aNum) return -1;
+  if (bNum) return 1;
+  if (a === b) return 0;
+  return a < b ? -1 : 1;
+}