@serfab/cadre-host 1.7.0 → 1.8.0

package/dist/ui/assets/index-TtIYSeZO.css

@@ -0,0 +1 @@
+.dot.svelte-1qa2kn2{display:inline-flex;align-items:center;gap:.5rem;font-weight:500}.bulb.svelte-1qa2kn2{display:inline-block;border-radius:999px;flex:0 0 auto;background:var(--color-text-soft);box-shadow:0 0 0 3px #0000000f}.dot-ok.svelte-1qa2kn2 .bulb:where(.svelte-1qa2kn2){background:var(--color-success);box-shadow:0 0 0 3px var(--color-success-bg)}.dot-warn.svelte-1qa2kn2 .bulb:where(.svelte-1qa2kn2){background:var(--color-warn);box-shadow:0 0 0 3px var(--color-warn-bg)}.dot-err.svelte-1qa2kn2 .bulb:where(.svelte-1qa2kn2){background:var(--color-danger);box-shadow:0 0 0 3px var(--color-danger-bg)}.dot-muted.svelte-1qa2kn2 .bulb:where(.svelte-1qa2kn2){background:var(--color-text-soft)}.dot-ok.svelte-1qa2kn2{color:var(--color-success)}.dot-warn.svelte-1qa2kn2{color:var(--color-warn)}.dot-err.svelte-1qa2kn2{color:var(--color-danger)}.row.svelte-lwwmgz{display:inline-flex;gap:.4rem;flex-wrap:wrap}.banner.svelte-15mtls8{display:flex;align-items:center;justify-content:space-between;gap:var(--space-3);padding:var(--space-3) var(--space-4);border-radius:var(--radius);background:var(--color-info-bg);color:var(--color-info);border:1px solid var(--color-info)}.summary.svelte-15mtls8{grid-template-columns:repeat(auto-fit,minmax(15rem,1fr))}.kv.svelte-15mtls8{margin:var(--space-3) 0 0 0;display:grid;grid-template-columns:max-content 1fr;gap:var(--space-1) var(--space-3);font-size:.9rem}.kv.svelte-15mtls8>div:where(.svelte-15mtls8){display:contents}.kv.svelte-15mtls8 dt:where(.svelte-15mtls8){color:var(--color-text-muted)}.kv.svelte-15mtls8 dd:where(.svelte-15mtls8){margin:0}.big.svelte-15mtls8{font-size:1.75rem;font-weight:600;margin:var(--space-2) 0}.big.svelte-15mtls8 .muted:where(.svelte-15mtls8){font-size:.95rem;font-weight:400}.link.svelte-15mtls8{display:inline-block;margin-top:var(--space-2);font-weight:500}.backdrop.svelte-80vbit{position:fixed;inset:0;background:#0f111673;z-index:1000}.dialog.svelte-80vbit{position:fixed;top:50%;left:50%;transform:translate(-50%,-50%);background:var(--color-surface);border:1px solid var(--color-border);border-radius:var(--radius-lg);box-shadow:var(--shadow-lg);padding:var(--space-5);min-width:min(24rem,calc(100vw - 2rem));max-width:min(32rem,calc(100vw - 2rem));overflow-wrap:anywhere;z-index:1010}.note.svelte-80vbit{background:var(--color-warn-bg);color:var(--color-warn);border-radius:var(--radius);padding:var(--space-2) var(--space-3);font-size:.9rem}.gate.svelte-80vbit{margin-top:var(--space-3);overflow-wrap:anywhere}.actions.svelte-80vbit{display:flex;justify-content:flex-end;gap:.5rem;margin-top:var(--space-4)}.qr.svelte-1uqetyj{background:#fff;border-radius:var(--radius);padding:.5rem;display:inline-block;line-height:0}.qr.svelte-1uqetyj svg{width:100%;height:100%;display:block}.placeholder.svelte-1uqetyj{background:var(--color-surface-alt)}.qr-wrap.svelte-sddtr9{display:flex;justify-content:center;margin:var(--space-3) 0}.token.svelte-sddtr9{display:flex;flex-direction:column;gap:.5rem}.token.svelte-sddtr9 textarea:where(.svelte-sddtr9){font-family:var(--font-mono);font-size:.78rem;word-break:break-all;resize:vertical}.token.svelte-sddtr9 button:where(.svelte-sddtr9){align-self:flex-end;display:inline-flex;align-items:center;gap:.375rem}.backdrop.svelte-1d46kin{position:fixed;inset:0;background:#0f111673;z-index:1000}.dialog.svelte-1d46kin{position:fixed;top:50%;left:50%;transform:translate(-50%,-50%);background:var(--color-surface);border:1px solid var(--color-border);border-radius:var(--radius-lg);box-shadow:var(--shadow-lg);padding:var(--space-5);width:min(28rem,calc(100vw - 2rem));max-height:calc(100vh - 2rem);overflow:auto;z-index:1010}.actions.svelte-1d46kin{display:flex;justify-content:flex-end;gap:.5rem;margin-top:var(--space-4)}.small.svelte-1d46kin{font-size:.85rem}.page-header.svelte-3alf51{display:flex;align-items:flex-end;justify-content:space-between;flex-wrap:wrap;gap:var(--space-3)}.list.svelte-3alf51{list-style:none;padding:0;margin:var(--space-3) 0 0 0;display:flex;flex-direction:column;gap:.5rem}.list.svelte-3alf51 li:where(.svelte-3alf51){display:flex;align-items:center;justify-content:space-between;gap:var(--space-3);padding:var(--space-3);border:1px solid var(--color-border);border-radius:var(--radius);background:var(--color-surface-alt)}.member-main.svelte-3alf51{display:flex;flex-direction:column;gap:.125rem;min-width:0}.member-label.svelte-3alf51{font-weight:500}.small.svelte-3alf51{font-size:.85rem}.grid.two.svelte-hh3bto{grid-template-columns:repeat(auto-fit,minmax(20rem,1fr))}.kv.svelte-hh3bto{margin:var(--space-3) 0;display:grid;grid-template-columns:max-content 1fr;gap:var(--space-1) var(--space-3);font-size:.9rem}.kv.svelte-hh3bto>div:where(.svelte-hh3bto){display:contents}.kv.svelte-hh3bto dt:where(.svelte-hh3bto){color:var(--color-text-muted)}.kv.svelte-hh3bto dd:where(.svelte-hh3bto){margin:0}.row.inline.svelte-hh3bto{gap:.5rem}.row.inline.svelte-hh3bto input[type=checkbox]:where(.svelte-hh3bto){width:auto}.warning.svelte-hh3bto{background:var(--color-warn-bg);border-color:var(--color-warn)}.warning.svelte-hh3bto ul:where(.svelte-hh3bto){margin:0;padding-left:1.25rem}.actions.svelte-hh3bto{display:flex;justify-content:flex-end;gap:.5rem}.small.svelte-hh3bto{font-size:.85rem}table.svelte-7tcksg{width:100%;border-collapse:collapse;font-size:.92rem}th.svelte-7tcksg,td.svelte-7tcksg{padding:.5rem .75rem;text-align:left;border-bottom:1px solid var(--color-border)}th.svelte-7tcksg{font-weight:600;font-size:.78rem;text-transform:uppercase;letter-spacing:.05em;color:var(--color-text-muted);border-bottom-color:var(--color-border-strong)}tr.svelte-7tcksg:last-child td:where(.svelte-7tcksg){border-bottom:none}.log-card.svelte-15ufwrh{display:flex;flex-direction:column;gap:var(--space-3)}.header.svelte-15ufwrh{display:flex;align-items:center;justify-content:space-between;gap:var(--space-3)}.logs.svelte-15ufwrh{max-height:24rem;font-size:.78rem;line-height:1.45;white-space:pre}.small.svelte-15ufwrh{font-size:.85rem}button.svelte-15ufwrh{display:inline-flex;align-items:center;gap:.375rem}.back.svelte-1eq4g96{font-size:.92rem}.page-header.svelte-1eq4g96{display:flex;align-items:flex-start;justify-content:space-between;flex-wrap:wrap;gap:var(--space-3)}.kv.svelte-1eq4g96{margin:var(--space-3) 0;display:grid;grid-template-columns:max-content 1fr;gap:var(--space-1) var(--space-3);font-size:.92rem}.kv.svelte-1eq4g96>div:where(.svelte-1eq4g96){display:contents}.kv.svelte-1eq4g96 dt:where(.svelte-1eq4g96){color:var(--color-text-muted)}.kv.svelte-1eq4g96 dd:where(.svelte-1eq4g96){margin:0}.actions.svelte-1eq4g96{display:flex;gap:.5rem;flex-wrap:wrap}.row.inline.svelte-1cl3wo6{gap:.5rem}.row.inline.svelte-1cl3wo6 input[type=checkbox]:where(.svelte-1cl3wo6){width:auto}.banner.svelte-1cl3wo6{display:flex;align-items:center;justify-content:space-between;gap:var(--space-3);padding:var(--space-3);border-radius:var(--radius);background:var(--color-info-bg);color:var(--color-info);border:1px solid var(--color-info);flex-wrap:wrap}.kv.svelte-1cl3wo6{margin:var(--space-3) 0;display:grid;grid-template-columns:max-content 1fr;gap:var(--space-1) var(--space-3);font-size:.92rem}.kv.svelte-1cl3wo6>div:where(.svelte-1cl3wo6){display:contents}.kv.svelte-1cl3wo6 dt:where(.svelte-1cl3wo6){color:var(--color-text-muted)}.kv.svelte-1cl3wo6 dd:where(.svelte-1cl3wo6){margin:0}.copy-row.svelte-1cl3wo6{display:flex;align-items:center;gap:.375rem}.actions.svelte-1cl3wo6{display:flex;justify-content:flex-end}.small.svelte-1cl3wo6{font-size:.85rem}.error.svelte-1cl3wo6{color:var(--color-danger)}.list.svelte-ngb3vw{list-style:none;padding:0;margin:0;display:flex;flex-direction:column;gap:.5rem}.list.svelte-ngb3vw li:where(.svelte-ngb3vw){display:flex;align-items:center;justify-content:space-between;gap:var(--space-3);padding:var(--space-3);border:1px solid var(--color-border);border-radius:var(--radius);background:var(--color-surface-alt)}.strand-main.svelte-ngb3vw{display:flex;flex-direction:column;gap:.25rem;min-width:0}.strand-id.svelte-ngb3vw{overflow-wrap:anywhere;user-select:text}.error.svelte-ngb3vw{color:var(--color-danger)}.meta.svelte-ngb3vw{gap:.5rem}.small.svelte-ngb3vw{font-size:.85rem}.warning.svelte-ngb3vw{background:var(--color-warn-bg);border-color:var(--color-warn)}.warning.svelte-ngb3vw code:where(.svelte-ngb3vw){overflow-wrap:anywhere}.actions.svelte-ngb3vw{display:flex;justify-content:flex-end;gap:.5rem}.backdrop.svelte-1gylbi3{position:fixed;inset:0;background:#0f111673;z-index:1000}.dialog.svelte-1gylbi3{position:fixed;top:50%;left:50%;transform:translate(-50%,-50%);background:var(--color-surface);border:1px solid var(--color-border);border-radius:var(--radius-lg);box-shadow:var(--shadow-lg);padding:var(--space-5);width:min(28rem,calc(100vw - 2rem));max-height:calc(100vh - 2rem);overflow:auto;overflow-wrap:anywhere;z-index:1010}.actions.svelte-1gylbi3{display:flex;justify-content:flex-end;gap:.5rem;margin-top:var(--space-4)}.small.svelte-1gylbi3{font-size:.85rem}.page-header.svelte-1jncsno{display:flex;align-items:flex-end;justify-content:space-between;flex-wrap:wrap;gap:var(--space-3)}.list.svelte-1jncsno{list-style:none;padding:0;margin:0;display:flex;flex-direction:column;gap:.5rem}.list.svelte-1jncsno>li:where(.svelte-1jncsno){display:flex;align-items:center;justify-content:space-between;flex-wrap:wrap;gap:var(--space-3);padding:var(--space-3);border:1px solid var(--color-border);border-radius:var(--radius);background:var(--color-surface-alt)}.grant-main.svelte-1jncsno{display:flex;flex-direction:column;gap:.25rem;min-width:0;overflow-wrap:anywhere}.grant-label.svelte-1jncsno{font-weight:500}.meta.svelte-1jncsno{gap:.5rem}.donations.svelte-1jncsno{list-style:none;padding:0;margin:.25rem 0 0;display:flex;flex-direction:column;gap:.125rem}.donations.svelte-1jncsno li:where(.svelte-1jncsno){display:flex;flex-wrap:wrap;gap:.5rem}.actions.svelte-1jncsno{display:flex;gap:.5rem}.keep.svelte-1jncsno{display:flex;align-items:center;gap:.5rem;margin-top:var(--space-3);font-size:.9rem;font-weight:400;color:var(--color-text)}.error.svelte-1jncsno{color:var(--color-danger)}.small.svelte-1jncsno{font-size:.85rem}.toast-stack.svelte-g7yjw8{position:fixed;right:1rem;bottom:1rem;display:flex;flex-direction:column;gap:.5rem;max-width:min(30rem,calc(100vw - 2rem));z-index:1100}.toast.svelte-g7yjw8{background:var(--color-surface);color:var(--color-text);border:1px solid var(--color-border-strong);border-radius:var(--radius);padding:.625rem .75rem;display:flex;align-items:center;gap:.5rem;box-shadow:var(--shadow);font-size:.92rem}.toast-error.svelte-g7yjw8{border-color:var(--color-danger);background:var(--color-danger-bg);color:var(--color-danger)}.toast-success.svelte-g7yjw8{border-color:var(--color-success);background:var(--color-success-bg);color:var(--color-success)}.text.svelte-g7yjw8{flex:1 1 auto}button.svelte-g7yjw8{font-size:1.1rem;line-height:1;padding:.125rem .5rem;color:currentColor}.topbar.svelte-1r8vfx3{position:sticky;top:0;z-index:10;display:flex;align-items:center;justify-content:space-between;gap:var(--space-4);padding:var(--space-3) var(--space-5);background:var(--color-surface);border-bottom:1px solid var(--color-border);backdrop-filter:saturate(180%) blur(8px)}.brand.svelte-1r8vfx3{display:flex;align-items:center;gap:.6rem;font-weight:600}.logo.svelte-1r8vfx3{color:var(--color-accent);font-size:1.1rem}nav.svelte-1r8vfx3{display:flex;gap:.125rem}nav.svelte-1r8vfx3 a:where(.svelte-1r8vfx3){font-size:.92rem;color:var(--color-text-muted);padding:.375rem .75rem;border-radius:var(--radius);text-decoration:none}nav.svelte-1r8vfx3 a:where(.svelte-1r8vfx3):hover{background:var(--color-surface-alt);color:var(--color-text)}nav.svelte-1r8vfx3 a.active:where(.svelte-1r8vfx3){color:var(--color-accent-on);background:var(--color-accent)}main.svelte-1r8vfx3{flex:1 1 auto;width:min(64rem,100%);margin:0 auto;padding:var(--space-5)}@media(max-width:640px){.topbar.svelte-1r8vfx3{flex-direction:column;align-items:flex-start;gap:var(--space-2);padding:var(--space-2) var(--space-3)}nav.svelte-1r8vfx3{width:100%;overflow-x:auto}main.svelte-1r8vfx3{padding:var(--space-3)}}:root{color-scheme:light dark;--font-sans: ui-sans-serif, system-ui, -apple-system, "Segoe UI", Roboto, sans-serif;--font-mono: ui-monospace, "SF Mono", "Cascadia Code", "Roboto Mono", Menlo, monospace;--radius-sm: .25rem;--radius: .5rem;--radius-lg: .75rem;--space-1: .25rem;--space-2: .5rem;--space-3: .75rem;--space-4: 1rem;--space-5: 1.5rem;--space-6: 2rem;--space-7: 3rem;--color-bg: #f7f8fa;--color-surface: #ffffff;--color-surface-alt: #f0f2f6;--color-border: #d9dde3;--color-border-strong: #b8bec7;--color-text: #1d1f24;--color-text-muted: #5b626d;--color-text-soft: #8a8f99;--color-accent: #1d4ed8;--color-accent-strong: #1e3a8a;--color-accent-on: #ffffff;--color-accent-soft: #e0e7ff;--color-success: #15803d;--color-success-bg: #dcfce7;--color-warn: #b45309;--color-warn-bg: #fef3c7;--color-danger: #b91c1c;--color-danger-bg: #fee2e2;--color-info: #1d4ed8;--color-info-bg: #dbeafe;--shadow-sm: 0 1px 2px rgba(15, 23, 42, .05);--shadow: 0 4px 12px rgba(15, 23, 42, .08);--shadow-lg: 0 12px 32px rgba(15, 23, 42, .16)}@media(prefers-color-scheme:dark){:root{--color-bg: #0f1116;--color-surface: #181b22;--color-surface-alt: #20242d;--color-border: #2c313c;--color-border-strong: #3b424f;--color-text: #e8eaf0;--color-text-muted: #a4abb8;--color-text-soft: #777e8b;--color-accent: #93c5fd;--color-accent-strong: #bfdbfe;--color-accent-on: #0f1116;--color-accent-soft: #1e293b;--color-success: #4ade80;--color-success-bg: #14532d;--color-warn: #fbbf24;--color-warn-bg: #78350f;--color-danger: #f87171;--color-danger-bg: #7f1d1d;--color-info: #93c5fd;--color-info-bg: #1e3a8a;--shadow-sm: 0 1px 2px rgba(0, 0, 0, .4);--shadow: 0 4px 12px rgba(0, 0, 0, .45);--shadow-lg: 0 12px 32px rgba(0, 0, 0, .6)}}*,*:before,*:after{box-sizing:border-box}html,body{margin:0;padding:0;background:var(--color-bg);color:var(--color-text);font-family:var(--font-sans);font-size:15px;line-height:1.5;-webkit-font-smoothing:antialiased;min-height:100vh}#app{min-height:100vh;display:flex;flex-direction:column}h1,h2,h3,h4,h5,h6{margin:0 0 var(--space-2) 0;font-weight:600;line-height:1.25;letter-spacing:-.01em}h1{font-size:1.5rem}h2{font-size:1.25rem}h3{font-size:1.05rem}p{margin:0 0 var(--space-3) 0}a{color:var(--color-accent);text-decoration:none}a:hover{text-decoration:underline}button{font:inherit;cursor:pointer;border:1px solid var(--color-border-strong);background:var(--color-surface);color:var(--color-text);padding:var(--space-2) var(--space-3);border-radius:var(--radius);transition:background-color .12s ease,border-color .12s ease}button:hover:not(:disabled){background:var(--color-surface-alt);border-color:var(--color-text-muted)}button:focus-visible,a:focus-visible,input:focus-visible,select:focus-visible,textarea:focus-visible{outline:2px solid var(--color-accent);outline-offset:2px}button:disabled{opacity:.55;cursor:not-allowed}button.primary{background:var(--color-accent);border-color:var(--color-accent);color:var(--color-accent-on)}button.primary:hover:not(:disabled){background:var(--color-accent-strong);border-color:var(--color-accent-strong)}button.danger{background:var(--color-danger);border-color:var(--color-danger);color:#fff}button.ghost{background:transparent;border-color:transparent;color:var(--color-text-muted);padding:var(--space-1) var(--space-2)}button.ghost:hover:not(:disabled){color:var(--color-text);background:var(--color-surface-alt)}input[type=text],input[type=url],input[type=number],input[type=password],select,textarea{font:inherit;color:var(--color-text);background:var(--color-surface);border:1px solid var(--color-border-strong);border-radius:var(--radius);padding:var(--space-2) var(--space-3);width:100%}label{display:block;font-size:.85rem;color:var(--color-text-muted);font-weight:500;margin-bottom:var(--space-1)}code,pre{font-family:var(--font-mono);font-size:.85rem}pre{background:var(--color-surface-alt);padding:var(--space-3);border-radius:var(--radius);overflow:auto;margin:0}hr{border:none;border-top:1px solid var(--color-border);margin:var(--space-5) 0}.card{background:var(--color-surface);border:1px solid var(--color-border);border-radius:var(--radius-lg);padding:var(--space-5);box-shadow:var(--shadow-sm)}.muted{color:var(--color-text-muted)}.row{display:flex;gap:var(--space-3);align-items:center;flex-wrap:wrap}.stack{display:flex;flex-direction:column;gap:var(--space-3)}.grid{display:grid;gap:var(--space-4)}.badge{display:inline-flex;align-items:center;gap:var(--space-1);font-size:.78rem;font-weight:600;letter-spacing:.02em;text-transform:uppercase;padding:.125rem .5rem;border-radius:999px;background:var(--color-surface-alt);color:var(--color-text-muted)}.badge.ok{background:var(--color-success-bg);color:var(--color-success)}.badge.warn{background:var(--color-warn-bg);color:var(--color-warn)}.badge.err{background:var(--color-danger-bg);color:var(--color-danger)}.badge.info{background:var(--color-info-bg);color:var(--color-info)}.visually-hidden{position:absolute;width:1px;height:1px;padding:0;margin:-1px;overflow:hidden;clip:rect(0,0,0,0);white-space:nowrap;border:0}

package/dist/ui/index.html

@@ -5,8 +5,8 @@
     <meta name="viewport" content="width=device-width, initial-scale=1.0" />
     <meta name="color-scheme" content="light dark" />
     <title>cadre-host</title>
-    <script type="module" crossorigin src="./assets/index-CEoNRwM_.js"></script>
-    <link rel="stylesheet" crossorigin href="./assets/index-BVoqLjyX.css">
+    <script type="module" crossorigin src="./assets/index-C6nELNfC.js"></script>
+    <link rel="stylesheet" crossorigin href="./assets/index-TtIYSeZO.css">
   </head>
   <body>
     <div id="app"></div>

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@serfab/cadre-host",
-  "version": "1.7.0",
+  "version": "1.8.0",
   "type": "module",
   "description": "Self-hosted cadre node manager for basement-PC deployments",
   "main": "dist/index.js",
@@ -65,9 +65,9 @@
     "@libp2p/interface": "^3.1.0",
     "@libp2p/peer-id": "^6.0.4",
     "@multiformats/multiaddr": "^12.5.1",
-    "@serfab/cadre-cli": "^1.7.0",
-    "@serfab/cadre-core": "^1.7.0",
-    "@serfab/cadre-provider": "^1.7.0",
+    "@serfab/cadre-cli": "^1.8.0",
+    "@serfab/cadre-core": "^1.8.0",
+    "@serfab/cadre-provider": "^1.8.0",
     "commander": "^14.0.2",
     "debug": "^4.4.3",
     "fastify": "^5.7.1",

package/src/__tests__/global-setup.ts

@@ -1,56 +1,58 @@
-/**
- * Vitest global setup — runs once before the whole cadre-host suite.
- *
- * `src/update/manifest.ts` and `src/push/index.ts` import real symbols from
- * `@serfab/cadre-core` (`canonicalJson`, `validatePushCredentials`), and
- * `trust-circle-integration.test.ts` imports and drives a real `CadreNode` from
- * it too. `@serfab/cadre-core`'s compiled entry point in turn imports
- * `@serfab/quereus-plugin-sereus`, which imports the `@optimystic/*` and
- * `@quereus/quereus` packages linked in from their sibling checkouts.
- * `host-process-orchestrator.ts` also resolves `@serfab/cadre-cli`'s bin path at
- * runtime, and `@serfab/cadre-provider` is a declared dependency in its own
- * right. Every one of those resolves through a `node_modules` symlink whose
- * manifest points at `dist`, so an edit to any of their `src` with no following
- * build is invisible here: the suite runs the previous build and reports green
- * about code it never executed. Fail the run up front instead.
- *
- * NOTE: accepted tradeoff — this does not cover cadre-host's *own* `src` going
- * stale relative to its own `dist`. The CLI smoke tests spawn `dist/bin/host.js`
- * as a child process, which is a same-package staleness concern, not the
- * cross-package one `BuildTarget` is meant to check (see
- * `test-harness/build-freshness.ts`'s module comment). Consequence: a `src`-only
- * edit to `bin/host.ts` is checked by `bin/__tests__/cli-reference.test.ts`
- * (which reads `src`) but not by the smoke tests (which read `dist`), so run
- * `yarn workspace @serfab/cadre-host build:server` before the suite. Revisit if
- * a stale `dist` ever produces a false green rather than merely a weaker check.
- *
- * The guard itself lives at the repo root (`test-harness/build-freshness.ts`),
- * shared with the other suites that call it; the list of packages below is this
- * suite's own concern.
- */
-
-import { assertBuildFresh, type BuildTarget } from '../../../../test-harness/build-freshness.js';
-
-/**
- * Every package this suite runs compiled code from — the `workspace:` entries of
- * `package.json`'s `dependencies`, plus the `link:` packages reached
- * transitively through them.
- *
- * Exported so `build-targets.test.ts` can hold it against this package's actual
- * `dependencies` — a hand-written list rots silently otherwise.
- */
-export const TARGETS: BuildTarget[] = [
-	{ packageName: '@serfab/cadre-cli', distEntry: 'dist/bin/cadre.js', location: 'workspace' },
-	{ packageName: '@serfab/cadre-core', distEntry: 'dist/index.js', location: 'workspace' },
-	{ packageName: '@serfab/cadre-provider', distEntry: 'dist/index.js', location: 'workspace' },
-	{ packageName: '@serfab/quereus-plugin-sereus', distEntry: 'dist/index.js', location: 'workspace' },
-	{ packageName: '@optimystic/db-core', distEntry: 'dist/src/index.js', location: 'linked' },
-	{ packageName: '@optimystic/db-p2p', distEntry: 'dist/src/index.js', location: 'linked' },
-	{ packageName: '@optimystic/quereus-plugin-crypto', distEntry: 'dist/index.js', location: 'linked' },
-	{ packageName: '@optimystic/quereus-plugin-optimystic', distEntry: 'dist/index.js', location: 'linked' },
-	{ packageName: '@quereus/quereus', distEntry: 'dist/src/index.js', location: 'linked' },
-];
-
-export default function setup(): void {
-	assertBuildFresh(TARGETS, import.meta.url);
-}
+/**
+ * Vitest global setup — runs once before the whole cadre-host suite.
+ *
+ * `src/update/manifest.ts` and `src/push/index.ts` import real symbols from
+ * `@serfab/cadre-core` (`canonicalJson`, `validatePushCredentials`), and
+ * `trust-circle-integration.test.ts` imports and drives a real `CadreNode` from
+ * it too. `@serfab/cadre-core`'s compiled entry point in turn imports
+ * `@serfab/quereus-plugin-sereus`, which imports the `@optimystic/*` and
+ * `@quereus/quereus` packages linked in from their sibling checkouts.
+ * `host-process-orchestrator.ts` also resolves `@serfab/cadre-cli`'s bin path at
+ * runtime, and `@serfab/cadre-provider` is a declared dependency in its own
+ * right. Every one of those resolves through a `node_modules` symlink whose
+ * manifest points at `dist`, so an edit to any of their `src` with no following
+ * build is invisible here: the suite runs the previous build and reports green
+ * about code it never executed. Fail the run up front instead.
+ *
+ * NOTE: accepted tradeoff — this does not cover cadre-host's *own* `src` going
+ * stale relative to its own `dist`. The CLI smoke tests spawn `dist/bin/host.js`
+ * as a child process, which is a same-package staleness concern, not the
+ * cross-package one `BuildTarget` is meant to check (see
+ * `test-harness/build-freshness.ts`'s module comment). Consequence: a `src`-only
+ * edit to `bin/host.ts` is checked by `bin/__tests__/cli-reference.test.ts`
+ * (which reads `src`) but not by the smoke tests (which read `dist`), so run
+ * `yarn workspace @serfab/cadre-host build:server` before the suite. Revisit if
+ * a stale `dist` ever produces a false green rather than merely a weaker check.
+ *
+ * The guard itself lives at the repo root (`test-harness/build-freshness.ts`),
+ * shared with the other suites that call it; the list of packages below is this
+ * suite's own concern.
+ */
+
+import { assertBuildFresh, type BuildTarget } from '../../../../test-harness/build-freshness.js';
+
+/**
+ * Every package this suite runs compiled code from — the `workspace:` entries of
+ * `package.json`'s `dependencies`, plus the `link:` packages reached
+ * transitively through them.
+ *
+ * Exported so `build-targets.test.ts` can hold it against this package's actual
+ * `dependencies` — a hand-written list rots silently otherwise.
+ */
+export const TARGETS: BuildTarget[] = [
+	{ packageName: '@serfab/cadre-cli', distEntry: 'dist/bin/cadre.js', location: 'workspace' },
+	{ packageName: '@serfab/cadre-core', distEntry: 'dist/index.js', location: 'workspace' },
+	{ packageName: '@serfab/cadre-provider', distEntry: 'dist/index.js', location: 'workspace' },
+	// Reached through `@serfab/cadre-cli`, whose spawned `dist` loads it.
+	{ packageName: '@serfab/config-check', distEntry: 'dist/index.js', location: 'workspace' },
+	{ packageName: '@serfab/quereus-plugin-sereus', distEntry: 'dist/index.js', location: 'workspace' },
+	{ packageName: '@optimystic/db-core', distEntry: 'dist/src/index.js', location: 'linked' },
+	{ packageName: '@optimystic/db-p2p', distEntry: 'dist/src/index.js', location: 'linked' },
+	{ packageName: '@optimystic/quereus-plugin-crypto', distEntry: 'dist/index.js', location: 'linked' },
+	{ packageName: '@optimystic/quereus-plugin-optimystic', distEntry: 'dist/index.js', location: 'linked' },
+	{ packageName: '@quereus/quereus', distEntry: 'dist/src/index.js', location: 'linked' },
+];
+
+export default function setup(): void {
+	assertBuildFresh(TARGETS, import.meta.url);
+}

package/src/__tests__/orchestrator-env-scrub.test.ts

@@ -24,6 +24,7 @@ import { tmpdir } from 'node:os';
 import { join } from 'node:path';
 
 import { HostProcessOrchestrator } from '../orchestrator/host-process-orchestrator.js';
+import { removeAllNodes } from './orchestrator-teardown.js';
 
 // Writes the vars under test (as seen in the child env) next to the startup token.
 const FAKE_CLI = `
@@ -42,7 +43,9 @@ if (tokenPath) {
     CADRE_LISTEN_ADDRS: process.env.CADRE_LISTEN_ADDRS ?? null,
     DEBUG: process.env.DEBUG ?? null,
   };
-  try { fs.writeFileSync(path.join(dir, 'env-seen.json'), JSON.stringify(record), 'utf8'); } catch (e) { console.error(e); }
+  // Write then rename: the test polls for the file's existence, and must never read it half-written.
+  const seenPath = path.join(dir, 'env-seen.json');
+  try { fs.writeFileSync(seenPath + '.tmp', JSON.stringify(record), 'utf8'); fs.renameSync(seenPath + '.tmp', seenPath); } catch (e) { console.error(e); }
   if (token) { try { fs.writeFileSync(tokenPath, token, 'utf8'); } catch (e) { console.error(e); } }
 }
 process.on('SIGTERM', () => process.exit(0));
@@ -67,18 +70,16 @@ beforeEach(() => {
 });
 
 afterEach(async () => {
-  for (const orch of orchestrators) {
-    for (const n of orch.listNodes()) {
-      try { await orch.removeContainer(n.dockerId); } catch { /* ignore */ }
+  try {
+    await removeAllNodes(orchestrators);
+  } finally {
+    await sleep(50);
+    try { rmSync(tmpRoot, { recursive: true, force: true }); } catch { /* ignore */ }
+    for (const [key, value] of Object.entries(savedEnv)) {
+      if (value === undefined) delete process.env[key];
+      else process.env[key] = value;
     }
   }
-  orchestrators.length = 0;
-  await sleep(50);
-  try { rmSync(tmpRoot, { recursive: true, force: true }); } catch { /* ignore */ }
-  for (const [key, value] of Object.entries(savedEnv)) {
-    if (value === undefined) delete process.env[key];
-    else process.env[key] = value;
-  }
 });
 
 function makeOrchestrator(rootDir: string): HostProcessOrchestrator {

package/src/__tests__/orchestrator-handle-contract.ts

@@ -0,0 +1,134 @@
+/**
+ * The handle rules `HostProcessOrchestrator` and its test stand-in
+ * `FakeOrchestrator` (`donation/__tests__/fake-orchestrator.ts`) must both obey,
+ * written once and run against each: `orchestrator.test.ts` registers them over
+ * the real class, `fake-orchestrator.test.ts` over the fake. A rule one of them
+ * stops obeying fails in that file's run.
+ *
+ * Not a `.test.ts` file, so vitest does not collect it on its own.
+ *
+ * Only what both classes can satisfy belongs here — no ports, no files on disk,
+ * none of the fake's recording arrays. Those stay in the two calling files.
+ */
+
+import { describe, expect, it } from 'vitest';
+
+import type { OrchestratorCreateRequest, OrchestratorCreateResult } from '@serfab/cadre-provider';
+
+import type { HostProcessOrchestrator } from '../orchestrator/host-process-orchestrator.js';
+
+/** What the contract needs from either orchestrator. */
+export type ContractOrchestrator = Pick<
+  HostProcessOrchestrator,
+  'createContainer' | 'stopContainer' | 'removeContainer' | 'resolveDockerId'
+>;
+
+export interface HandleContractHarness<O extends ContractOrchestrator> {
+  /** A fresh orchestrator. Teardown is the calling file's own afterEach. */
+  make(): O;
+  request(containerId: string): OrchestratorCreateRequest;
+  /** Resolve once the spawn named by `dockerId` reads as running. */
+  started(orch: O, dockerId: string): Promise<void>;
+  /**
+   * Make `createContainer` for `containerId` throw from here on. Only called
+   * after that container has been spawned once and stopped, and no case creates
+   * again afterwards.
+   */
+  failNextCreate(orch: O, containerId: string): void;
+}
+
+const CONTAINER = 'grn_contract_a';
+const OTHER_CONTAINER = 'grn_contract_b';
+
+export function describeHandleContract<O extends ContractOrchestrator>(
+  label: string,
+  harness: HandleContractHarness<O>,
+): void {
+  async function spawn(orch: O, containerId: string): Promise<OrchestratorCreateResult> {
+    const result = await orch.createContainer(harness.request(containerId));
+    await harness.started(orch, result.dockerId);
+    return result;
+  }
+
+  // Stops first: a container whose previous child is still running is refused.
+  async function respawn(orch: O, containerId: string, previousDockerId: string): Promise<OrchestratorCreateResult> {
+    await orch.stopContainer(previousDockerId);
+    return spawn(orch, containerId);
+  }
+
+  describe(`${label} handle contract`, () => {
+    it('rejects a dockerId it never issued', async () => {
+      const orch = harness.make();
+
+      await expectNotFound(orch.stopContainer('never-issued'), 'never-issued');
+      await expectNotFound(orch.removeContainer('never-issued'), 'never-issued');
+    });
+
+    it('rejects a dockerId once its container has been removed', async () => {
+      const orch = harness.make();
+      const { dockerId } = await spawn(orch, CONTAINER);
+      await orch.stopContainer(dockerId);
+
+      await orch.removeContainer(dockerId);
+
+      await expectNotFound(orch.stopContainer(dockerId), dockerId);
+      await expectNotFound(orch.removeContainer(dockerId), dockerId);
+    });
+
+    it('replaces the first spawn\'s dockerId when the container re-spawns', async () => {
+      const orch = harness.make();
+      const first = await spawn(orch, CONTAINER);
+
+      const second = await respawn(orch, CONTAINER, first.dockerId);
+
+      await expectNotFound(orch.stopContainer(first.dockerId), first.dockerId);
+      expect(orch.resolveDockerId(CONTAINER)).toBe(second.dockerId);
+      await expect(orch.stopContainer(second.dockerId)).resolves.toBeUndefined();
+    });
+
+    // Launching over a live child hands its ports to a second child that then
+    // dies on them, while the caller records the new dockerId and seed token.
+    it('refuses to re-spawn a container whose previous child is still running', async () => {
+      const orch = harness.make();
+      const first = await spawn(orch, CONTAINER);
+
+      await expect(orch.createContainer(harness.request(CONTAINER)))
+        .rejects.toHaveProperty('message', `container ${CONTAINER} is still running`);
+
+      expect(orch.resolveDockerId(CONTAINER)).toBe(first.dockerId);
+      await expect(orch.stopContainer(first.dockerId)).resolves.toBeUndefined();
+    });
+
+    // The drop on re-spawn filters on containerId; an orchestrator that cleared
+    // every handle would still pass the same-container case above.
+    it('leaves another container\'s dockerId alone when one container re-spawns', async () => {
+      const orch = harness.make();
+      const other = await spawn(orch, OTHER_CONTAINER);
+      const first = await spawn(orch, CONTAINER);
+
+      await respawn(orch, CONTAINER, first.dockerId);
+
+      expect(orch.resolveDockerId(OTHER_CONTAINER)).toBe(other.dockerId);
+      await expect(orch.stopContainer(other.dockerId)).resolves.toBeUndefined();
+    });
+
+    // What lets a caller still clean up the node it knows about after a re-spawn
+    // that did not happen.
+    it('keeps the first spawn\'s dockerId when the re-spawn fails', async () => {
+      const orch = harness.make();
+      const first = await spawn(orch, CONTAINER);
+      await orch.stopContainer(first.dockerId);
+
+      harness.failNextCreate(orch, CONTAINER);
+      await expect(orch.createContainer(harness.request(CONTAINER))).rejects.toThrow();
+
+      expect(orch.resolveDockerId(CONTAINER)).toBe(first.dockerId);
+      await expect(orch.removeContainer(first.dockerId)).resolves.toBeUndefined();
+    });
+  });
+}
+
+/** The whole message, not a substring, so the two classes cannot come to word it differently. */
+async function expectNotFound(call: Promise<void>, dockerId: string): Promise<void> {
+  await expect(call).rejects.toHaveProperty('message', `Container not found: ${dockerId}`);
+}

package/src/__tests__/orchestrator-node-identity.test.ts

@@ -19,6 +19,7 @@ import { join } from 'node:path';
 
 import { HostProcessOrchestrator, OWNER_CONTAINER_ID } from '../orchestrator/host-process-orchestrator.js';
 import { loadIdentity } from '../installer/identity.js';
+import { removeAllNodes } from './orchestrator-teardown.js';
 
 // Writes the --identity-file argument (as seen on its own command line) next
 // to the startup token, then behaves like a minimal long-lived node.
@@ -49,14 +50,12 @@ beforeEach(() => {
 });
 
 afterEach(async () => {
-  for (const orch of orchestrators) {
-    for (const n of orch.listNodes()) {
-      try { await orch.removeContainer(n.dockerId); } catch { /* ignore */ }
-    }
+  try {
+    await removeAllNodes(orchestrators);
+  } finally {
+    await sleep(50);
+    try { rmSync(tmpRoot, { recursive: true, force: true }); } catch { /* ignore */ }
   }
-  orchestrators.length = 0;
-  await sleep(50);
-  try { rmSync(tmpRoot, { recursive: true, force: true }); } catch { /* ignore */ }
 });
 
 function makeOrchestrator(

package/src/__tests__/orchestrator-owner.test.ts

@@ -17,6 +17,7 @@ import { StateStore } from '../orchestrator/state-store.js';
 import { isPidAlive } from '../orchestrator/pid-liveness.js';
 import { decodeDockerId } from '../orchestrator/types.js';
 import { OwnerNodeClient } from '../owner/owner-node-client.js';
+import { removeAllNodes } from './orchestrator-teardown.js';
 
 const FAKE_OWNER_CLI = `
 import fs from 'node:fs';
@@ -70,15 +71,12 @@ beforeEach(() => {
 });
 
 afterEach(async () => {
-  for (const orch of orchestrators) {
-    try { await orch.stopOwnerNode(); } catch { /* ignore */ }
-    for (const dockerId of listDockerIds(orch)) {
-      try { await orch.removeContainer(dockerId); } catch { /* ignore */ }
-    }
+  try {
+    await removeAllNodes(orchestrators);
+  } finally {
+    await sleep(50);
+    try { rmSync(tmpRoot, { recursive: true, force: true }); } catch { /* ignore */ }
   }
-  orchestrators.length = 0;
-  await sleep(50);
-  try { rmSync(tmpRoot, { recursive: true, force: true }); } catch { /* ignore */ }
 });
 
 function makeOrchestrator(rootDir: string): HostProcessOrchestrator {
@@ -93,11 +91,6 @@ function makeOrchestrator(rootDir: string): HostProcessOrchestrator {
   return orch;
 }
 
-function listDockerIds(orch: HostProcessOrchestrator): string[] {
-  const state = new StateStore((orch as unknown as { rootDir: string }).rootDir);
-  return state.load().handles.map((h) => h.dockerId);
-}
-
 async function waitFor(predicate: () => boolean | Promise<boolean>, timeoutMs = 4000, intervalMs = 50): Promise<void> {
   const deadline = Date.now() + timeoutMs;
   while (Date.now() < deadline) {

package/src/__tests__/orchestrator-pin-keys.test.ts

@@ -20,6 +20,7 @@ import { join } from 'node:path';
 
 import type { PushCredentials } from '@serfab/cadre-core';
 import { HostProcessOrchestrator } from '../orchestrator/host-process-orchestrator.js';
+import { removeAllNodes } from './orchestrator-teardown.js';
 
 // Writes CADRE_OWNER_KEYS (as seen in the child env) next to the startup token,
 // then behaves like a minimal long-lived node.
@@ -52,14 +53,12 @@ beforeEach(() => {
 });
 
 afterEach(async () => {
-  for (const orch of orchestrators) {
-    for (const n of orch.listNodes()) {
-      try { await orch.removeContainer(n.dockerId); } catch { /* ignore */ }
-    }
+  try {
+    await removeAllNodes(orchestrators);
+  } finally {
+    await sleep(50);
+    try { rmSync(tmpRoot, { recursive: true, force: true }); } catch { /* ignore */ }
   }
-  orchestrators.length = 0;
-  await sleep(50);
-  try { rmSync(tmpRoot, { recursive: true, force: true }); } catch { /* ignore */ }
 });
 
 function makeOrchestrator(rootDir: string, pushResolver?: () => Promise<PushCredentials | undefined>): HostProcessOrchestrator {

package/src/__tests__/orchestrator-ports.test.ts

@@ -1,16 +1,17 @@
 /**
- * The pure port-set logic behind `HostProcessOrchestrator`: the allocator, the
- * helpers that allocate, hold, release and reuse one node's set of ports, and the
- * listen addresses a child is started with. No child processes — the behaviour these
+ * The pure port-set logic behind `HostProcessOrchestrator`: the helpers that
+ * allocate, hold, release and reuse one node's set of ports, and the listen
+ * addresses a child is started with. No child processes — the behaviour these
  * feed is exercised against a stub child in `orchestrator.test.ts`.
  */
 
 import { describe, expect, it } from 'vitest';
 
+import { PortAllocator } from '@serfab/cadre-provider';
+
 import { childListenAddrs } from '../orchestrator/host-process-orchestrator.js';
 import {
   allocateNodePorts,
-  PortAllocator,
   releaseNodePorts,
   reserveNodePorts,
   reusedNodePorts,
@@ -25,36 +26,6 @@ function portsWithoutWs(ports: Omit<NodePorts, 'ws'>): NodePorts {
   return ports as NodePorts;
 }
 
-describe('PortAllocator', () => {
-  it('allocates sequentially, releases, and reuses', () => {
-    const a = new PortAllocator(100, 102);
-    expect(a.allocate()).toBe(100);
-    expect(a.allocate()).toBe(101);
-    expect(a.allocate()).toBe(102);
-    expect(() => a.allocate()).toThrow(/No available ports/);
-    a.release(101);
-    expect(a.allocate()).toBe(101);
-  });
-
-  it('markUsed reserves ports without allocating', () => {
-    const a = new PortAllocator(100, 102);
-    a.markUsed(101);
-    expect(a.allocate()).toBe(100);
-    expect(a.allocate()).toBe(102);
-    expect(() => a.allocate()).toThrow();
-  });
-
-  // Without the integer check, `undefined` and NaN pass both range comparisons (each
-  // is false) and land in the used-set, as would an in-range fraction.
-  it('markUsed ignores a non-integer', () => {
-    const a = new PortAllocator(100, 101);
-    for (const junk of [undefined as unknown as number, Number.NaN, 100.5]) {
-      a.markUsed(junk);
-      expect(a.has(junk)).toBe(false);
-    }
-  });
-});
-
 describe('allocateNodePorts', () => {
   it('allocates the five ports in a fixed order, the newest key last', () => {
     const a = new PortAllocator(10000, 10010);

package/src/__tests__/orchestrator-push.test.ts

@@ -14,6 +14,7 @@ import { join } from 'node:path';
 
 import type { PushCredentials } from '@serfab/cadre-core';
 import { HostProcessOrchestrator, OWNER_CONTAINER_ID } from '../orchestrator/host-process-orchestrator.js';
+import { removeAllNodes } from './orchestrator-teardown.js';
 
 const FAKE_CLI = `
 import fs from 'node:fs';
@@ -41,12 +42,12 @@ beforeEach(() => {
 });
 
 afterEach(async () => {
-  for (const orch of orchestrators) {
-    try { await orch.stopOwnerNode(); } catch { /* ignore */ }
+  try {
+    await removeAllNodes(orchestrators);
+  } finally {
+    await sleep(50);
+    try { rmSync(tmpRoot, { recursive: true, force: true }); } catch { /* ignore */ }
   }
-  orchestrators.length = 0;
-  await sleep(50);
-  try { rmSync(tmpRoot, { recursive: true, force: true }); } catch { /* ignore */ }
 });
 
 function makeOrchestrator(rootDir: string, pushResolver?: () => Promise<PushCredentials | undefined>): HostProcessOrchestrator {

package/src/__tests__/orchestrator-teardown.ts

@@ -0,0 +1,65 @@
+/**
+ * Shared teardown for the test files that drive a real HostProcessOrchestrator
+ * against a stub child script.
+ */
+import type { HostProcessOrchestrator } from '../orchestrator/host-process-orchestrator.js';
+import { isPidAlive } from '../orchestrator/pid-liveness.js';
+import { decodeDockerId } from '../orchestrator/types.js';
+
+interface StartedNode {
+  containerId: string;
+  pid: number;
+}
+
+/**
+ * Stop and remove every node the given orchestrators hold, then fail if any of
+ * their processes is still alive. Empties `orchestrators`.
+ *
+ * Nodes come from `listNodes()` rather than the state file: two orchestrators
+ * over one rootDir each rewrite the whole file from their own memory, so the
+ * file can omit a child that one of them still holds.
+ */
+export async function removeAllNodes(orchestrators: HostProcessOrchestrator[]): Promise<void> {
+  try {
+    const nodes: StartedNode[] = [];
+    const errors: string[] = [];
+    for (const orch of orchestrators) {
+      await removeNodesOf(orch, nodes, errors);
+    }
+    // NOTE: liveness is by pid alone, not the startup token. If the OS hands a dead child's pid to an
+    // unrelated process before this line, that process is reported and killed; if this ever produces a
+    // false failure, verify the token before counting a pid as a survivor.
+    const survivors = nodes.filter((n) => isPidAlive(n.pid));
+    if (survivors.length === 0) return;
+    survivors.forEach((n) => forceKill(n.pid));
+    throw new Error(describeSurvivors(survivors, errors));
+  } finally {
+    orchestrators.length = 0;
+  }
+}
+
+/** Keeps going past a failed removal so one failure does not strand the rest. */
+async function removeNodesOf(orch: HostProcessOrchestrator, nodes: StartedNode[], errors: string[]): Promise<void> {
+  for (const node of orch.listNodes()) {
+    nodes.push({ containerId: node.id, pid: decodeDockerId(node.dockerId).pid });
+    try {
+      await orch.removeContainer(node.dockerId);
+    } catch (err) {
+      errors.push(`${node.id}: ${err instanceof Error ? err.message : String(err)}`);
+    }
+  }
+}
+
+function forceKill(pid: number): void {
+  try {
+    process.kill(pid, 'SIGKILL');
+  } catch (err) {
+    if ((err as NodeJS.ErrnoException).code !== 'ESRCH') throw err;
+  }
+}
+
+function describeSurvivors(survivors: StartedNode[], errors: string[]): string {
+  const names = survivors.map((n) => `${n.containerId} (pid ${n.pid})`).join(', ');
+  const causes = errors.length > 0 ? `; removeContainer errors: ${errors.join(' | ')}` : '';
+  return `test teardown left child processes running (now force-killed): ${names}${causes}`;
+}