@yannelli/zoomies 0.0.0

package/dist/server/worker/main.js

@@ -0,0 +1,181 @@
+#!/usr/bin/env node
+/**
+ * Long-running renewal worker entrypoint.
+ *
+ * `main()` runs an outer loop that calls {@link runRenewalCheck} every
+ * {@link WorkerOptions.intervalMs} (default 6 hours), resolves the production
+ * dependencies from the environment once on startup, and races the wait
+ * between iterations against a SIGTERM/SIGINT-driven abort promise so the
+ * worker shuts down promptly on signal.
+ *
+ * Shutdown semantics: we never interrupt a renewal mid-flight. The signal
+ * handlers flip a flag and resolve the abort promise — the loop reads it
+ * **after** the current `runRenewalCheck` returns, then exits cleanly. Let's
+ * Encrypt orders are stateful and a half-completed order tends to consume
+ * rate limit without producing a usable cert, so the cost of a clean wait
+ * is worth more than a few seconds of shutdown latency.
+ *
+ * Importable + runnable: the bottom of this file uses the same
+ * `import.meta.url === pathToFileURL(process.argv[1]).href` shim as
+ * `src/index.ts`, so it works both as `node dist/server/worker/main.js` and
+ * as an imported module from tests.
+ *
+ * The leading `#!/usr/bin/env node` shebang must stay on line 1 for the
+ * `zoomies-worker` bin entry to be directly executable; TypeScript happily
+ * carries the line through to the emitted JS as a comment-shaped no-op.
+ */
+import { mkdir } from 'node:fs/promises';
+import { resolve, join } from 'node:path';
+import { pathToFileURL } from 'node:url';
+import { getDb } from '../api/db-context.js';
+import { CertRepository } from '../repositories/cert-repository.js';
+import { loadOrCreateAccount } from '../certs/acme-account.js';
+import { createChallengeStore } from '../certs/challenge-store.js';
+import { renewCertificate } from '../certs/renew.js';
+import { runRenewalCheck } from '../certs/scheduler.js';
+const DEFAULT_INTERVAL_MS = 6 * 60 * 60 * 1000;
+const DEFAULT_DIRECTORY_URL = 'https://acme-v02.api.letsencrypt.org/directory';
+function readConfigFromEnv() {
+    const contactEmail = process.env.ZOOMIES_ACME_EMAIL;
+    if (contactEmail === undefined || contactEmail === '') {
+        throw new Error('ZOOMIES_ACME_EMAIL is required — set it to a contact email registered with the ACME directory');
+    }
+    const directoryUrl = process.env.ZOOMIES_ACME_DIRECTORY_URL ?? DEFAULT_DIRECTORY_URL;
+    const stateDir = process.env.ZOOMIES_STATE_DIR ?? join(process.cwd(), '.zoomies');
+    const certDir = process.env.ZOOMIES_CERT_DIR ?? join(stateDir, 'certs');
+    return { contactEmail, directoryUrl, stateDir, certDir };
+}
+/**
+ * Resolve a SIGTERM/SIGINT-driven abort promise. Returns an object the
+ * caller can `await` and an `attach` that wires the handlers so signal
+ * delivery resolves the promise.
+ *
+ * Calling `dispose()` removes the handlers; tests don't use this (smoke
+ * test runs with `once: true`) but the production loop does after exit.
+ */
+function createAbortSignal() {
+    let resolveWait;
+    const wait = new Promise((r) => {
+        resolveWait = r;
+    });
+    const onSignal = (signal) => {
+        console.info(`zoomies: received ${signal}, shutting down after current renewal check`);
+        resolveWait();
+    };
+    const onTerm = () => onSignal('SIGTERM');
+    const onInt = () => onSignal('SIGINT');
+    process.once('SIGTERM', onTerm);
+    process.once('SIGINT', onInt);
+    return {
+        wait,
+        dispose: () => {
+            process.off('SIGTERM', onTerm);
+            process.off('SIGINT', onInt);
+        },
+    };
+}
+/**
+ * Wait for `ms` milliseconds OR for the abort promise to resolve, whichever
+ * happens first. The `setTimeout` is `unref`'d so it never holds the event
+ * loop open past a shutdown signal.
+ */
+async function waitOrAbort(ms, abort) {
+    let timer;
+    const sleep = new Promise((resolveSleep) => {
+        timer = setTimeout(resolveSleep, ms);
+        timer.unref();
+    });
+    try {
+        await Promise.race([sleep, abort]);
+    }
+    finally {
+        if (timer !== undefined) {
+            clearTimeout(timer);
+        }
+    }
+}
+/**
+ * Build a `renew(cert)` closure pre-bound to the production dependencies.
+ *
+ * The scheduler only knows about `Cert -> Promise<Cert>`, so the worker
+ * owns the responsibility of capturing the ACME account, challenge store,
+ * cert directory, and cert repository.
+ */
+function bindRenew(args) {
+    return (cert) => renewCertificate({
+        cert,
+        certRepo: args.certRepo,
+        domain: cert.domain,
+        account: args.account,
+        challengeStore: args.challengeStore,
+        certDir: args.certDir,
+    });
+}
+/**
+ * Worker entrypoint. Resolves the production deps from the environment,
+ * then loops `runRenewalCheck` on the configured cadence until a shutdown
+ * signal is received (or `opts.once` is true).
+ */
+export async function main(opts) {
+    const intervalMs = opts?.intervalMs ?? DEFAULT_INTERVAL_MS;
+    const once = opts?.once ?? false;
+    const config = readConfigFromEnv();
+    // Make sure the state, cert, and ACME challenge directories exist before
+    // any code reaches for them. `recursive: true` makes this idempotent.
+    await mkdir(config.certDir, { recursive: true });
+    const challengeStore = createChallengeStore({ stateDir: config.stateDir });
+    await mkdir(challengeStore.basePath, { recursive: true });
+    const account = await loadOrCreateAccount({
+        accountKeyPath: join(config.stateDir, 'acme-account.key'),
+        contactEmail: config.contactEmail,
+        directoryUrl: config.directoryUrl,
+    });
+    const certRepo = new CertRepository(getDb());
+    const renew = bindRenew({
+        account,
+        challengeStore,
+        certDir: config.certDir,
+        certRepo,
+    });
+    // TODO: signal handling smoke test — currently exercised manually with
+    // `kill -TERM <pid>`. Hard to automate without a child-process harness.
+    const abort = once ? null : createAbortSignal();
+    console.info('zoomies-worker: starting', {
+        directoryUrl: config.directoryUrl,
+        certDir: config.certDir,
+        intervalMs,
+        once,
+    });
+    try {
+        while (true) {
+            const result = await runRenewalCheck({ deps: { certRepo, renew } });
+            console.info('zoomies-worker: renewal check complete', result);
+            if (once || abort === null) {
+                return;
+            }
+            // Race the sleep against the abort promise. If a signal was already
+            // delivered while the renewal check was running, this resolves on the
+            // next microtask and the loop exits.
+            await waitOrAbort(intervalMs, abort.wait);
+            const aborted = await Promise.race([abort.wait.then(() => true), Promise.resolve(false)]);
+            if (aborted) {
+                return;
+            }
+        }
+    }
+    finally {
+        abort?.dispose();
+    }
+}
+// Entrypoint shim — mirrors src/index.ts so the patterns stay consistent.
+// `pathToFileURL` normalises the argv path so Windows + POSIX both match.
+const entryArg = process.argv[1];
+const entryUrl = entryArg ? pathToFileURL(resolve(entryArg)).href : undefined;
+const isEntrypoint = entryUrl !== undefined && import.meta.url === entryUrl;
+if (isEntrypoint) {
+    main().catch((err) => {
+        console.error('zoomies-worker: fatal error', err);
+        process.exit(1);
+    });
+}
+//# sourceMappingURL=main.js.map

package/dist/server/worker/main.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"main.js","sourceRoot":"","sources":["../../../src/server/worker/main.ts"],"names":[],"mappings":";AACA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAEH,OAAO,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAC;AACzC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAEzC,OAAO,EAAE,KAAK,EAAE,MAAM,sBAAsB,CAAC;AAC7C,OAAO,EAAE,cAAc,EAAE,MAAM,oCAAoC,CAAC;AACpE,OAAO,EAAE,mBAAmB,EAAoB,MAAM,0BAA0B,CAAC;AACjF,OAAO,EAAE,oBAAoB,EAAuB,MAAM,6BAA6B,CAAC;AAExF,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AACrD,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAaxD,MAAM,mBAAmB,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAC/C,MAAM,qBAAqB,GAAG,gDAAgD,CAAC;AAS/E,SAAS,iBAAiB;IACxB,MAAM,YAAY,GAAG,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC;IACpD,IAAI,YAAY,KAAK,SAAS,IAAI,YAAY,KAAK,EAAE,EAAE,CAAC;QACtD,MAAM,IAAI,KAAK,CACb,+FAA+F,CAChG,CAAC;IACJ,CAAC;IACD,MAAM,YAAY,GAAG,OAAO,CAAC,GAAG,CAAC,0BAA0B,IAAI,qBAAqB,CAAC;IACrF,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,iBAAiB,IAAI,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,UAAU,CAAC,CAAC;IAClF,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,gBAAgB,IAAI,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IACxE,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC;AAC3D,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,iBAAiB;IAIxB,IAAI,WAAwB,CAAC;IAC7B,MAAM,IAAI,GAAG,IAAI,OAAO,CAAO,CAAC,CAAC,EAAE,EAAE;QACnC,WAAW,GAAG,CAAC,CAAC;IAClB,CAAC,CAAC,CAAC;IAEH,MAAM,QAAQ,GAAG,CAAC,MAAsB,EAAQ,EAAE;QAChD,OAAO,CAAC,IAAI,CAAC,qBAAqB,MAAM,6CAA6C,CAAC,CAAC;QACvF,WAAW,EAAE,CAAC;IAChB,CAAC,CAAC;IACF,MAAM,MAAM,GAAG,GAAS,EAAE,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;IAC/C,MAAM,KAAK,GAAG,GAAS,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAC7C,OAAO,CAAC,IAAI,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;IAChC,OAAO,CAAC,IAAI,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;IAE9B,OAAO;QACL,IAAI;QACJ,OAAO,EAAE,GAAS,EAAE;YAClB,OAAO,CAAC,GAAG,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;YAC/B,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;QAC/B,CAAC;KACF,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,KAAK,UAAU,WAAW,CAAC,EAAU,EAAE,KAAoB;IACzD,IAAI,KAAiC,CAAC;IACtC,MAAM,KAAK,GAAG,IAAI,OAAO,CAAO,CAAC,YAAY,EAAE,EAAE;QAC/C,KAAK,GAAG,UAAU,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC;QACrC,KAAK,CAAC,KAAK,EAAE,CAAC;IAChB,CAAC,CAAC,CAAC;IACH,IAAI,CAAC;QACH,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC;IACrC,CAAC;YAAS,CAAC;QACT,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,YAAY,CAAC,KAAK,CAAC,CAAC;QACtB,CAAC;IACH,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,SAAS,SAAS,CAAC,IAKlB;IACC,OAAO,CAAC,IAAI,EAAE,EAAE,CACd,gBAAgB,CAAC;QACf,IAAI;QACJ,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,cAAc,EAAE,IAAI,CAAC,cAAc;QACnC,OAAO,EAAE,IAAI,CAAC,OAAO;KACtB,CAAC,CAAC;AACP,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,IAAI,CAAC,IAAoB;IAC7C,MAAM,UAAU,GAAG,IAAI,EAAE,UAAU,IAAI,mBAAmB,CAAC;IAC3D,MAAM,IAAI,GAAG,IAAI,EAAE,IAAI,IAAI,KAAK,CAAC;IAEjC,MAAM,MAAM,GAAG,iBAAiB,EAAE,CAAC;IAEnC,yEAAyE;IACzE,sEAAsE;IACtE,MAAM,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACjD,MAAM,cAAc,GAAG,oBAAoB,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC;IAC3E,MAAM,KAAK,CAAC,cAAc,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAE1D,MAAM,OAAO,GAAG,MAAM,mBAAmB,CAAC;QACxC,cAAc,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,kBAAkB,CAAC;QACzD,YAAY,EAAE,MAAM,CAAC,YAAY;QACjC,YAAY,EAAE,MAAM,CAAC,YAAY;KAClC,CAAC,CAAC;IAEH,MAAM,QAAQ,GAAG,IAAI,cAAc,CAAC,KAAK,EAAE,CAAC,CAAC;IAC7C,MAAM,KAAK,GAAG,SAAS,CAAC;QACtB,OAAO;QACP,cAAc;QACd,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,QAAQ;KACT,CAAC,CAAC;IAEH,uEAAuE;IACvE,wEAAwE;IACxE,MAAM,KAAK,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,iBAAiB,EAAE,CAAC;IAEhD,OAAO,CAAC,IAAI,CAAC,0BAA0B,EAAE;QACvC,YAAY,EAAE,MAAM,CAAC,YAAY;QACjC,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,UAAU;QACV,IAAI;KACL,CAAC,CAAC;IAEH,IAAI,CAAC;QACH,OAAO,IAAI,EAAE,CAAC;YACZ,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC,EAAE,IAAI,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC;YACpE,OAAO,CAAC,IAAI,CAAC,wCAAwC,EAAE,MAAM,CAAC,CAAC;YAE/D,IAAI,IAAI,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;gBAC3B,OAAO;YACT,CAAC;YAED,oEAAoE;YACpE,sEAAsE;YACtE,qCAAqC;YACrC,MAAM,WAAW,CAAC,UAAU,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;YAC1C,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,EAAE,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YAC1F,IAAI,OAAO,EAAE,CAAC;gBACZ,OAAO;YACT,CAAC;QACH,CAAC;IACH,CAAC;YAAS,CAAC;QACT,KAAK,EAAE,OAAO,EAAE,CAAC;IACnB,CAAC;AACH,CAAC;AAED,0EAA0E;AAC1E,0EAA0E;AAC1E,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AACjC,MAAM,QAAQ,GAAG,QAAQ,CAAC,CAAC,CAAC,aAAa,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;AAC9E,MAAM,YAAY,GAAG,QAAQ,KAAK,SAAS,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,KAAK,QAAQ,CAAC;AAC5E,IAAI,YAAY,EAAE,CAAC;IACjB,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,GAAY,EAAE,EAAE;QAC5B,OAAO,CAAC,KAAK,CAAC,6BAA6B,EAAE,GAAG,CAAC,CAAC;QAClD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/version.d.ts

@@ -0,0 +1,2 @@
+export declare const version = "0.0.0";
+//# sourceMappingURL=version.d.ts.map

package/dist/version.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"version.d.ts","sourceRoot":"","sources":["../src/version.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,OAAO,UAAU,CAAC"}

package/dist/version.js

@@ -0,0 +1,2 @@
+export const version = '0.0.0';
+//# sourceMappingURL=version.js.map

package/dist/version.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"version.js","sourceRoot":"","sources":["../src/version.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,OAAO,GAAG,OAAO,CAAC"}

package/package.json

@@ -0,0 +1,84 @@
+{
+  "name": "@yannelli/zoomies",
+  "version": "0.0.0",
+  "description": "Control plane for NGINX reverse proxy: config rendering, validation, and reload orchestration.",
+  "type": "module",
+  "main": "dist/index.js",
+  "bin": {
+    "zoomies": "dist/index.js",
+    "zoomies-worker": "dist/server/worker/main.js"
+  },
+  "files": [
+    "dist",
+    "dist/server/db/migrations/*.sql",
+    "README.md",
+    "LICENSE"
+  ],
+  "engines": {
+    "node": ">=22"
+  },
+  "packageManager": "pnpm@10.33.0",
+  "scripts": {
+    "dev": "next dev",
+    "build": "pnpm run build:web && pnpm run build:cli",
+    "build:web": "next build",
+    "build:cli": "tsc -p tsconfig.cli.json && node scripts/copy-migrations.mjs",
+    "start": "next start",
+    "cli": "tsx src/index.ts",
+    "typecheck": "tsc --noEmit && tsc -p tsconfig.cli.json --noEmit",
+    "lint": "eslint .",
+    "format": "prettier --write .",
+    "format:check": "prettier --check .",
+    "test": "vitest run",
+    "test:watch": "vitest"
+  },
+  "keywords": [
+    "nginx",
+    "reverse-proxy",
+    "proxy-manager",
+    "control-plane"
+  ],
+  "author": "Ryan Yannelli",
+  "license": "MIT",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/yannelli/zoomies.git"
+  },
+  "dependencies": {
+    "acme-client": "^5.4.0",
+    "better-sqlite3": "^12.10.0",
+    "class-variance-authority": "^0.7.1",
+    "clsx": "^2.1.1",
+    "execa": "^9.6.1",
+    "next": "^15.0.0",
+    "react": "^19.0.0",
+    "react-dom": "^19.0.0",
+    "tailwind-merge": "^2.5.5",
+    "zod": "^4.4.3"
+  },
+  "pnpm": {
+    "onlyBuiltDependencies": [
+      "better-sqlite3"
+    ]
+  },
+  "devDependencies": {
+    "@eslint/eslintrc": "^3.2.0",
+    "@eslint/js": "^9.18.0",
+    "@tailwindcss/postcss": "^4.0.0",
+    "@types/better-sqlite3": "^7.6.13",
+    "@types/node": "^22.10.5",
+    "@types/react": "^19.0.0",
+    "@types/react-dom": "^19.0.0",
+    "@typescript-eslint/eslint-plugin": "^8.20.0",
+    "@typescript-eslint/parser": "^8.20.0",
+    "eslint": "^9.18.0",
+    "eslint-config-next": "^15.0.0",
+    "postcss": "^8.4.49",
+    "prettier": "^3.4.2",
+    "tailwindcss": "^4.0.0",
+    "tsx": "^4.19.2",
+    "typescript": "^5.7.3",
+    "typescript-eslint": "^8.20.0",
+    "vitest": "^2.1.8"
+  }
+}