mirror of
https://github.com/Start9Labs/start-os.git
synced 2026-03-30 04:01:58 +00:00
* docs: update preferred external port design in TODO * docs: add user-controlled public/private and port forward mapping to design * docs: overhaul interfaces page design with view/manage split and per-address controls * docs: move address enable/disable to overflow menu, add SSL indicator, defer UI placement decisions * chore: remove tor from startos core Tor is being moved from a built-in OS feature to a service. This removes the Arti-based Tor client, onion address management, hidden service creation, and all related code from the core backend, frontend, and SDK. - Delete core/src/net/tor/ module (~2060 lines) - Remove OnionAddress, TorSecretKey, TorController from all consumers - Remove HostnameInfo::Onion and HostAddress::Onion variants - Remove onion CRUD RPC endpoints and tor subcommand - Remove tor key handling from account and backup/restore - Remove ~12 tor-related Cargo dependencies (arti-client, torut, etc.) - Remove tor UI components, API methods, mock data, and routes - Remove OnionHostname and tor patterns/regexes from SDK - Add v0_4_0_alpha_20 database migration to strip onion data - Bump version to 0.4.0-alpha.20 * chore: flatten HostnameInfo from enum to struct HostnameInfo only had one variant (Ip) after removing Tor. Flatten it into a plain struct with fields gateway, public, hostname. Remove all kind === 'ip' type guards and narrowing across SDK, frontend, and container runtime. Update DB migration to strip the kind field. * chore: format RPCSpec.md markdown table * docs: update TODO.md with DerivedAddressInfo design, remove completed tor task * feat: implement preferred port allocation and per-address enable/disable - Add AvailablePorts::try_alloc() with SSL tracking (BTreeMap<u16, bool>) - Add DerivedAddressInfo on BindInfo with private_disabled/public_enabled/possible sets - Add Bindings wrapper with Map impl for patchdb indexed access - Flatten HostAddress from single-variant enum to struct - Replace set-gateway-enabled RPC with set-address-enabled - Remove hostname_info from Host; computed addresses now in BindInfo.addresses.possible - Compute possible addresses inline in NetServiceData::update() - Update DB migration, SDK types, frontend, and container-runtime * feat: replace InterfaceFilter with ForwardRequirements, add WildcardListener, complete alpha.20 bump - Replace DynInterfaceFilter with ForwardRequirements for per-IP forward precision with source-subnet iptables filtering for private forwards - Add WildcardListener (binds [::]:port) to replace the per-gateway NetworkInterfaceListener/SelfContainedNetworkInterfaceListener/ UpgradableListener infrastructure - Update forward-port script with src_subnet and excluded_src env vars - Remove unused filter types and listener infrastructure from gateway.rs - Add availablePorts migration (IdPool -> BTreeMap<u16, bool>) to alpha.20 - Complete version bump to 0.4.0-alpha.20 in SDK and web * outbound gateway support (#3120) * Multiple (#3111) * fix alerts i18n, fix status display, better, remove usb media, hide shutdown for install complete * trigger chnage detection for localize pipe and round out implementing localize pipe for consistency even though not needed * Fix PackageInfoShort to handle LocaleString on releaseNotes (#3112) * Fix PackageInfoShort to handle LocaleString on releaseNotes * fix: filter by target_version in get_matching_models and pass otherVersions from install * chore: add exver documentation for ai agents * frontend plus some be types --------- Co-authored-by: Aiden McClelland <3732071+dr-bonez@users.noreply.github.com> * feat: replace SourceFilter with IpNet, add policy routing, remove MASQUERADE * build ts types and fix i18n * fix license display in marketplace * wip refactor * chore: update ts bindings for preferred port design * feat: refactor NetService to watch DB and reconcile network state - NetService sync task now uses PatchDB DbWatch instead of being called directly after DB mutations - Read gateways from DB instead of network interface context when updating host addresses - gateway sync updates all host addresses in the DB - Add Watch<u64> channel for callers to wait on sync completion - Fix ts-rs codegen bug with #[ts(skip)] on flattened Plugin field - Update SDK getServiceInterface.ts for new HostnameInfo shape - Remove unnecessary HTTPS redirect in static_server.rs - Fix tunnel/api.rs to filter for WAN IPv4 address * re-arrange (#3123) * new service interfacee page * feat: add mdns hostname metadata variant and fix vhost routing - Add HostnameMetadata::Mdns variant to distinguish mDNS from private domains - Mark mDNS addresses as private (public: false) since mDNS is local-only - Fall back to null SNI entry when hostname not found in vhost mapping - Simplify public detection in ProxyTarget filter - Pass hostname to update_addresses for mDNS domain name generation * looking good * feat: add port_forwards field to Host for tracking gateway forwarding rules * update bindings for API types, add ARCHITECTURE (#3124) * update binding for API types, add ARCHITECTURE * translations * fix: add CONNMARK restore-mark to mangle OUTPUT chain The CONNMARK --restore-mark rule was only in PREROUTING, which handles forwarded packets. Locally-bound listeners (e.g. vhost) generate replies through the OUTPUT chain, where the fwmark was never restored. This caused response packets to route via the default table instead of back through the originating interface. * chore: reserialize db on equal version, update bindings and docs - Run de/ser roundtrip in pre_init even when db version matches, ensuring all #[serde(default)] fields are populated before any typed access - Add patchdb.md documentation for TypedDbWatch patterns - Update TS bindings for CheckPortParams, CheckPortRes, ifconfigUrl - Update CLAUDE.md docs with patchdb and component-level references * fix: include public gateways for IP-based addresses in vhost targets The server hostname vhost construction only collected private IPs, always setting public to empty. Public IP addresses (Ipv4/Ipv6 metadata with public=true) were never added to the vhost target's public gateway set, causing the vhost filter to reject public traffic for IP-based addresses. * fix: add TLS handshake timeout and fix accept loop deadlock Two issues in TlsListener::poll_accept: 1. No timeout on TLS handshakes: LazyConfigAcceptor waits indefinitely for ClientHello. Attackers that complete TCP handshake but never send TLS data create zombie futures in `in_progress` that never complete. Fix: wrap the entire handshake in tokio::time::timeout(15s). 2. Missing waker on new-connection pending path: when a TCP connection is accepted and the TLS handshake is pending, poll_accept returned Pending without calling wake_by_ref(). Since the TcpListener returned Ready (not Pending), no waker was registered for it. With edge- triggered epoll and no other wakeup source, the task sleeps forever and remaining connections in the kernel accept queue are never drained. Fix: add cx.waker().wake_by_ref() so the task immediately re-polls and continues draining the accept queue. * fix: switch BackgroundJobRunner from Vec to FuturesUnordered BackgroundJobRunner stored active jobs in a Vec<BoxFuture> and polled ALL of them on every wakeup — O(n) per poll. Since this runs in the same tokio::select! as the WebServer accept loop, polling overhead from active connections directly delayed acceptance of new connections. FuturesUnordered only polls woken futures — O(woken) instead of O(n). * chore: update bindings and use typed params for outbound gateway API * feat: per-service and default outbound gateway routing Add set-outbound-gateway RPC for packages and set-default-outbound RPC for the server, with policy routing enforcement via ip rules. Fix connmark restore to skip packets with existing fwmarks, add bridge subnet routes to per-interface tables, and fix squashfs path in update-image-local.sh. * refactor: manifest wraps PackageMetadata, move dependency_metadata to PackageVersionInfo Manifest now embeds PackageMetadata via #[serde(flatten)] instead of duplicating ~14 fields. icon and dependency_metadata moved from PackageMetadata to PackageVersionInfo since they are registry-enrichment data loaded from the S9PK archive. merge_with now returns errors on metadata/icon/dependency_metadata mismatches instead of silently ignoring them. * fix: replace .status() with .invoke() for iptables/ip commands Using .status() leaks stderr directly to system logs, causing noisy iptables error messages. Switch all networking CLI invocations to use .invoke() which captures stderr properly. For check-then-act patterns (iptables -C), use .invoke().await.is_err() instead of .status().await.map_or(false, |s| s.success()). * feat: add check-dns gateway endpoint and fix per-interface routing tables Add a `check-dns` RPC endpoint that verifies whether a gateway's DNS is properly configured for private domain resolution. Uses a three-tier check: direct match (DNS == server IP), TXT challenge probe (DNS on LAN), or failure (DNS off-subnet). Fix per-interface routing tables to clone all non-default routes from the main table instead of only the interface's own subnets. This preserves LAN reachability when the priority-75 catch-all overrides default routing. Filter out status-only flags (linkdown, dead) that are invalid for `ip route add`. * refactor: rename manifest metadata fields and improve error display Rename wrapperRepo→packageRepo, marketingSite→marketingUrl, docsUrl→docsUrls (array), remove supportSite. Add display_src/display_dbg helpers to Error. Fix DepInfo description type to LocaleString. Update web UI, SDK bindings, tests, and fixtures to match. Clean up cli_attach error handling and remove dead commented code. * chore: bump sdk version to 0.4.0-beta.49 * chore: add createTask decoupling TODO * chore: add TODO to clear service error state on install/update * round out dns check, dns server check, port forward check, and gateway port forwards * chore: add TODOs for URL plugins, NAT hairpinning, and start-tunnel OTA updates * version instead of os query param * interface row clickable again, bu now with a chevron! * feat: implement URL plugins with table/row actions and prefill support - Add URL plugin effects (register, export_url, clear_urls) in core - Add PluginHostnameInfo, HostnameMetadata::Plugin, and plugin registration types - Implement plugin URL table in web UI with tableAction button and rowAction overflow menus - Thread urlPluginMetadata (packageId, hostId, interfaceId, internalPort) as prefill to actions - Add prefill support to PackageActionData so metadata passes through form dialogs - Add i18n translations for plugin error messages - Clean up plugin URLs on package uninstall * feat: split row_actions into remove_action and overflow_actions for URL plugins * touch up URL plugins table * show table even when no addresses * feat: NAT hairpinning, DNS static servers, clear service error on install - Add POSTROUTING MASQUERADE rules for container and host hairpin NAT - Allow bridge subnet containers to reach private forwards via LAN IPs - Pass bridge_subnet env var from forward.rs to forward-port script - Use DB-configured static DNS servers in resolver with DB watcher - Fall back to resolv.conf servers when no static servers configured - Clear service error state when install/update completes successfully - Remove completed TODO items * feat: builder-style InputSpec API, prefill plumbing, and port forward fix - Add addKey() and add() builder methods to InputSpec with InputSpecTools - Move OuterType to last generic param on Value, List, and all dynamic methods - Plumb prefill through getActionInput end-to-end (core → container-runtime → SDK) - Filter port_forwards to enabled addresses only - Bump SDK to 0.4.0-beta.50 * fix: propagate host locale into LXC containers and write locale.conf * chore: remove completed URL plugins TODO * feat: OTA updates for start-tunnel via apt repository (untested) - Add apt repo publish script (build/apt/publish-deb.sh) for S3-hosted repo - Add apt source config and GPG key placeholder (apt/) - Add tunnel.update.check and tunnel.update.apply RPC endpoints - Wire up update API in tunnel frontend (api service + mock) - Uses systemd-run --scope to survive service restart during update * fix: publish script dpkg-name, s3cfg fallback, and --reinstall for apply * chore: replace OTA updates TODO with UI TODO for MattDHill * feat: add getOutboundGateway effect and simplify VersionGraph init/uninit Add getOutboundGateway effect across core, container-runtime, and SDK to let services query their effective outbound gateway with callback support. Remove preInstall/uninstall hooks from VersionGraph as they are no longer needed. * frontend start-tunnel updates * chore: remove completed TODO * feat: tor hidden service key migration * chore: migrate from ts-matches to zod across all TypeScript packages * feat(core): allow setting server hostname * send prefill for tasks and hide operations to hidden fields * fix(core): preserve plugin URLs across binding updates BindInfo::update was replacing addresses with a new DerivedAddressInfo that cleared the available set, wiping plugin-exported URLs whenever bind() was called. Also simplify update_addresses plugin preservation to use retain in place rather than collecting into a separate set. * minor cleanup from patch-db audit * clean up prefill flow * frontend support for setting and changing hostname * feat(core): refactor hostname to ServerHostnameInfo with name/hostname pair - Rename Hostname to ServerHostnameInfo, add name + hostname fields - Add set_hostname_rpc for changing hostname at runtime - Migrate alpha_20: generate serverInfo.name from hostname, delete ui.name - Extract gateway.rs helpers to fix rustfmt nesting depth issue - Add i18n key for hostname validation error - Update SDK bindings * add comments to everything potentially consumer facing (#3127) * add comments to everything potentially consumer facing * rework smtp --------- Co-authored-by: Aiden McClelland <3732071+dr-bonez@users.noreply.github.com> * implement server name * setup changes * clean up copy around addresses table * feat: add zod-deep-partial, partialValidator on InputSpec, and z.deepPartial re-export * fix: header color in zoom (#3128) * fix: merge version ranges when adding existing package signer (#3125) * fix: merge version ranges when adding existing package signer Previously, add_package_signer unconditionally inserted the new version range, overwriting any existing authorization for that signer. Now it OR-merges the new range with the existing one, so running signer add multiple times accumulates permissions rather than replacing them. * add --merge flag to registry package signer add Default behavior remains overwrite. When --merge is passed, the new version range is OR-merged with the existing one, allowing admins to accumulate permissions incrementally. * add missing attribute to TS type * make merge optional * upsert instead of insert * VersionRange::None on upsert * fix: header color in zoom --------- Co-authored-by: Dominion5254 <musashidisciple@proton.me> * update snake and add about this server to system general * chore: bump sdk to beta.53, wrap z.deepPartial with passthrough * reset instead of reset defaults * action failure show dialog * chore: bump sdk to beta.54, add device-info RPC, improve SDK abort handling and InputSpec filtering - Bump SDK version to 0.4.0-beta.54 - Add `server.device-info` RPC endpoint and `s9pk select` CLI command - Extract `HardwareRequirements::is_compatible()` method, reuse in registry filtering - Add `AbortedError` class with `muteUnhandled` flag, replace generic abort errors - Handle unhandled promise rejections in container-runtime with mute support - Improve `InputSpec.filter()` with `keepByDefault` param and boolean filter values - Accept readonly tuples in `CommandType` and `splitCommand` - Remove `sync_host` calls from host API handlers (binding/address changes) - Filter mDNS hostnames by secure gateway availability - Derive mDNS enabled state from LAN IPs in web UI - Add "Open UI" action to address table, disable mDNS toggle - Hide debug details in service error component - Update rpc-toolkit docs for no-params handlers * fix: add --no-nvram to efi grub-install to preserve built-in boot order * update snake * diable actions when in error state * chore: split out nvidia variant * misc bugfixes * create manage-release script (untested) * fix: preserve z namespace types for sdk consumers * sdk version bump * new checkPort types * multiple bugs and better port forward ux * fix link * chore: todos and formatting * fix build --------- Co-authored-by: Matt Hill <MattDHill@users.noreply.github.com> Co-authored-by: Matt Hill <mattnine@protonmail.com> Co-authored-by: Alex Inkin <alexander@inkin.ru> Co-authored-by: Dominion5254 <musashidisciple@proton.me>
468 lines
14 KiB
TypeScript
468 lines
14 KiB
TypeScript
import { Signals } from '../../../base/lib/types'
|
|
|
|
import { HealthCheckResult } from '../health/checkFns'
|
|
|
|
import { Trigger } from '../trigger'
|
|
import * as T from '../../../base/lib/types'
|
|
import { SubContainer } from '../util/SubContainer'
|
|
|
|
import { promisify } from 'node:util'
|
|
import * as CP from 'node:child_process'
|
|
|
|
export { Daemon } from './Daemon'
|
|
export { CommandController } from './CommandController'
|
|
import { EXIT_SUCCESS, HealthDaemon } from './HealthDaemon'
|
|
import { Daemon } from './Daemon'
|
|
import { CommandController } from './CommandController'
|
|
import { Oneshot } from './Oneshot'
|
|
|
|
/** Promisified version of `child_process.exec` */
|
|
export const cpExec = promisify(CP.exec)
|
|
/** Promisified version of `child_process.execFile` */
|
|
export const cpExecFile = promisify(CP.execFile)
|
|
/**
|
|
* Configuration for a daemon's health-check readiness probe.
|
|
*
|
|
* Determines how the system knows when a daemon is healthy and ready to serve.
|
|
*/
|
|
export type Ready = {
|
|
/** A human-readable display name for the health check. If null, the health check itself will be from the UI */
|
|
display: string | null
|
|
/**
|
|
* @description The function to determine the health status of the daemon
|
|
*
|
|
* The SDK provides some built-in health checks. To see them, type sdk.healthCheck.
|
|
*
|
|
* @example
|
|
* ```
|
|
fn: () =>
|
|
sdk.healthCheck.checkPortListening(effects, 80, {
|
|
successMessage: 'service listening on port 80',
|
|
errorMessage: 'service is unreachable',
|
|
})
|
|
* ```
|
|
*/
|
|
fn: () => Promise<HealthCheckResult> | HealthCheckResult
|
|
/**
|
|
* A duration in milliseconds to treat a failing health check as "starting"
|
|
*
|
|
* defaults to 5000
|
|
*/
|
|
gracePeriod?: number
|
|
trigger?: Trigger
|
|
}
|
|
|
|
/**
|
|
* Options for running a daemon as a shell command inside a subcontainer.
|
|
* Includes the command to run, optional signal/timeout, environment, user, and stdio callbacks.
|
|
*/
|
|
export type ExecCommandOptions = {
|
|
command: T.CommandType
|
|
// Defaults to the DEFAULT_SIGTERM_TIMEOUT = 30_000ms
|
|
sigtermTimeout?: number
|
|
runAsInit?: boolean
|
|
env?:
|
|
| {
|
|
[variable in string]?: string
|
|
}
|
|
| undefined
|
|
cwd?: string | undefined
|
|
user?: string | undefined
|
|
onStdout?: (chunk: Buffer | string | any) => void
|
|
onStderr?: (chunk: Buffer | string | any) => void
|
|
}
|
|
|
|
/**
|
|
* Options for running a daemon via an async function that may optionally return
|
|
* a command to execute in the subcontainer. The function receives an `AbortSignal`
|
|
* for cooperative cancellation.
|
|
*/
|
|
export type ExecFnOptions<
|
|
Manifest extends T.SDKManifest,
|
|
C extends SubContainer<Manifest> | null,
|
|
> = {
|
|
fn: (
|
|
subcontainer: C,
|
|
abort: AbortSignal,
|
|
) => Promise<C extends null ? null : ExecCommandOptions | null>
|
|
// Defaults to the DEFAULT_SIGTERM_TIMEOUT = 30_000ms
|
|
sigtermTimeout?: number
|
|
}
|
|
|
|
/**
|
|
* The execution specification for a daemon: either an {@link ExecFnOptions} (async function)
|
|
* or an {@link ExecCommandOptions} (shell command, only valid when a subcontainer is provided).
|
|
*/
|
|
export type DaemonCommandType<
|
|
Manifest extends T.SDKManifest,
|
|
C extends SubContainer<Manifest> | null,
|
|
> = ExecFnOptions<Manifest, C> | (C extends null ? never : ExecCommandOptions)
|
|
|
|
type NewDaemonParams<
|
|
Manifest extends T.SDKManifest,
|
|
C extends SubContainer<Manifest> | null,
|
|
> = {
|
|
/** What to run as the daemon: either an async fn or a commandline command to run in the subcontainer */
|
|
exec: DaemonCommandType<Manifest, C>
|
|
/** The subcontainer in which the daemon runs */
|
|
subcontainer: C
|
|
}
|
|
|
|
type OptionalParamSync<T> = T | (() => T | null)
|
|
type OptionalParamAsync<T> = () => Promise<T | null>
|
|
type OptionalParam<T> = OptionalParamSync<T> | OptionalParamAsync<T>
|
|
|
|
type AddDaemonParams<
|
|
Manifest extends T.SDKManifest,
|
|
Ids extends string,
|
|
Id extends string,
|
|
C extends SubContainer<Manifest> | null,
|
|
> = (
|
|
| NewDaemonParams<Manifest, C>
|
|
| {
|
|
daemon: Daemon<Manifest>
|
|
}
|
|
) & {
|
|
ready: Ready
|
|
/** An array of IDs of prior daemons whose successful initializations are required before this daemon will initialize */
|
|
requires: Exclude<Ids, Id>[]
|
|
}
|
|
|
|
type AddOneshotParams<
|
|
Manifest extends T.SDKManifest,
|
|
Ids extends string,
|
|
Id extends string,
|
|
C extends SubContainer<Manifest> | null,
|
|
> = NewDaemonParams<Manifest, C> & {
|
|
exec: DaemonCommandType<Manifest, C>
|
|
/** An array of IDs of prior daemons whose successful initializations are required before this daemon will initialize */
|
|
requires: Exclude<Ids, Id>[]
|
|
}
|
|
|
|
type AddHealthCheckParams<Ids extends string, Id extends string> = {
|
|
ready: Ready
|
|
/** An array of IDs of prior daemons whose successful initializations are required before this daemon will initialize */
|
|
requires: Exclude<Ids, Id>[]
|
|
}
|
|
|
|
type ErrorDuplicateId<Id extends string> = `The id '${Id}' is already used`
|
|
|
|
export const runCommand = <Manifest extends T.SDKManifest>() =>
|
|
CommandController.of<Manifest, SubContainer<Manifest>>()
|
|
|
|
/**
|
|
* A class for defining and controlling the service daemons
|
|
```ts
|
|
Daemons.of({
|
|
effects,
|
|
started,
|
|
interfaceReceipt, // Provide the interfaceReceipt to prove it was completed
|
|
healthReceipts, // Provide the healthReceipts or [] to prove they were at least considered
|
|
}).addDaemon('webui', {
|
|
command: 'hello-world', // The command to start the daemon
|
|
ready: {
|
|
display: 'Web Interface',
|
|
// The function to run to determine the health status of the daemon
|
|
fn: () =>
|
|
checkPortListening(effects, 80, {
|
|
successMessage: 'The web interface is ready',
|
|
errorMessage: 'The web interface is not ready',
|
|
}),
|
|
},
|
|
requires: [],
|
|
})
|
|
```
|
|
*/
|
|
export class Daemons<Manifest extends T.SDKManifest, Ids extends string>
|
|
implements T.DaemonBuildable
|
|
{
|
|
private constructor(
|
|
readonly effects: T.Effects,
|
|
readonly ids: Ids[],
|
|
readonly healthDaemons: HealthDaemon<Manifest>[],
|
|
) {}
|
|
/**
|
|
* Returns an empty new Daemons class with the provided inputSpec.
|
|
*
|
|
* Call .addDaemon() on the returned class to add a daemon.
|
|
*
|
|
* Daemons run in the order they are defined, with latter daemons being capable of
|
|
* depending on prior daemons
|
|
*
|
|
* @param effects
|
|
*
|
|
* @param started
|
|
* @returns
|
|
*/
|
|
static of<Manifest extends T.SDKManifest>(options: { effects: T.Effects }) {
|
|
return new Daemons<Manifest, never>(options.effects, [], [])
|
|
}
|
|
|
|
private addDaemonImpl<Id extends string>(
|
|
id: Id,
|
|
daemon: Daemon<Manifest, SubContainer<Manifest, T.Effects> | null> | null,
|
|
requires: Ids[],
|
|
ready: Ready | typeof EXIT_SUCCESS,
|
|
) {
|
|
const healthDaemon = new HealthDaemon(
|
|
daemon,
|
|
requires
|
|
.map((x) => this.ids.indexOf(x))
|
|
.filter((x) => x >= 0)
|
|
.map((id) => this.healthDaemons[id]),
|
|
id,
|
|
ready,
|
|
this.effects,
|
|
)
|
|
const ids = [...this.ids, id] as (Ids | Id)[]
|
|
const healthDaemons = [...this.healthDaemons, healthDaemon]
|
|
return new Daemons<Manifest, Ids | Id>(this.effects, ids, healthDaemons)
|
|
}
|
|
|
|
/**
|
|
* Returns the complete list of daemons, including the one defined here
|
|
* @param id
|
|
* @param options
|
|
* @returns a new Daemons object
|
|
*/
|
|
addDaemon<Id extends string, C extends SubContainer<Manifest> | null>(
|
|
// prettier-ignore
|
|
id:
|
|
"" extends Id ? never :
|
|
ErrorDuplicateId<Id> extends Id ? never :
|
|
Id extends Ids ? ErrorDuplicateId<Id> :
|
|
Id,
|
|
options: OptionalParamSync<AddDaemonParams<Manifest, Ids, Id, C>>,
|
|
): Daemons<Manifest, Ids | Id>
|
|
addDaemon<Id extends string, C extends SubContainer<Manifest> | null>(
|
|
// prettier-ignore
|
|
id:
|
|
"" extends Id ? never :
|
|
ErrorDuplicateId<Id> extends Id ? never :
|
|
Id extends Ids ? ErrorDuplicateId<Id> :
|
|
Id,
|
|
options: OptionalParamAsync<AddDaemonParams<Manifest, Ids, Id, C>>,
|
|
): Promise<Daemons<Manifest, Ids | Id>>
|
|
addDaemon<Id extends string, C extends SubContainer<Manifest> | null>(
|
|
id: Id,
|
|
options: OptionalParam<AddDaemonParams<Manifest, Ids, Id, C>>,
|
|
) {
|
|
const prev = this
|
|
const res = (options: AddDaemonParams<Manifest, Ids, Id, C> | null) => {
|
|
if (!options) return prev
|
|
const daemon =
|
|
'daemon' in options
|
|
? options.daemon
|
|
: Daemon.of<Manifest>()<C>(
|
|
this.effects,
|
|
options.subcontainer,
|
|
options.exec,
|
|
)
|
|
return prev.addDaemonImpl(id, daemon, options.requires, options.ready)
|
|
}
|
|
if (options instanceof Function) {
|
|
const opts = options()
|
|
if (opts instanceof Promise) {
|
|
return opts.then(res)
|
|
}
|
|
return res(opts)
|
|
}
|
|
return res(options)
|
|
}
|
|
|
|
/**
|
|
* Returns the complete list of daemons, including a "oneshot" daemon one defined here
|
|
* a oneshot daemon is a command that executes once when started, and is considered "running" once it exits successfully
|
|
* @param id
|
|
* @param options
|
|
* @returns a new Daemons object
|
|
*/
|
|
addOneshot<Id extends string, C extends SubContainer<Manifest> | null>(
|
|
// prettier-ignore
|
|
id:
|
|
"" extends Id ? never :
|
|
ErrorDuplicateId<Id> extends Id ? never :
|
|
Id extends Ids ? ErrorDuplicateId<Id> :
|
|
Id,
|
|
options: OptionalParamSync<AddOneshotParams<Manifest, Ids, Id, C>>,
|
|
): Daemons<Manifest, Ids | Id>
|
|
addOneshot<Id extends string, C extends SubContainer<Manifest> | null>(
|
|
// prettier-ignore
|
|
id:
|
|
"" extends Id ? never :
|
|
ErrorDuplicateId<Id> extends Id ? never :
|
|
Id extends Ids ? ErrorDuplicateId<Id> :
|
|
Id,
|
|
options: OptionalParamAsync<AddOneshotParams<Manifest, Ids, Id, C>>,
|
|
): Promise<Daemons<Manifest, Ids | Id>>
|
|
addOneshot<Id extends string, C extends SubContainer<Manifest> | null>(
|
|
id: Id,
|
|
options: OptionalParam<AddOneshotParams<Manifest, Ids, Id, C>>,
|
|
) {
|
|
const prev = this
|
|
const res = (options: AddOneshotParams<Manifest, Ids, Id, C> | null) => {
|
|
if (!options) return prev
|
|
const daemon = Oneshot.of<Manifest>()<C>(
|
|
this.effects,
|
|
options.subcontainer,
|
|
options.exec,
|
|
)
|
|
return prev.addDaemonImpl(id, daemon, options.requires, EXIT_SUCCESS)
|
|
}
|
|
if (options instanceof Function) {
|
|
const opts = options()
|
|
if (opts instanceof Promise) {
|
|
return opts.then(res)
|
|
}
|
|
return res(opts)
|
|
}
|
|
return res(options)
|
|
}
|
|
|
|
/**
|
|
* Returns the complete list of daemons, including a new HealthCheck defined here
|
|
* @param id
|
|
* @param options
|
|
* @returns a new Daemons object
|
|
*/
|
|
addHealthCheck<Id extends string>(
|
|
// prettier-ignore
|
|
id:
|
|
"" extends Id ? never :
|
|
ErrorDuplicateId<Id> extends Id ? never :
|
|
Id extends Ids ? ErrorDuplicateId<Id> :
|
|
Id,
|
|
options: OptionalParamSync<AddHealthCheckParams<Ids, Id>>,
|
|
): Daemons<Manifest, Ids | Id>
|
|
addHealthCheck<Id extends string>(
|
|
// prettier-ignore
|
|
id:
|
|
"" extends Id ? never :
|
|
ErrorDuplicateId<Id> extends Id ? never :
|
|
Id extends Ids ? ErrorDuplicateId<Id> :
|
|
Id,
|
|
options: OptionalParamAsync<AddHealthCheckParams<Ids, Id>>,
|
|
): Promise<Daemons<Manifest, Ids | Id>>
|
|
addHealthCheck<Id extends string>(
|
|
id: Id,
|
|
options: OptionalParam<AddHealthCheckParams<Ids, Id>>,
|
|
) {
|
|
const prev = this
|
|
const res = (options: AddHealthCheckParams<Ids, Id> | null) => {
|
|
if (!options) return prev
|
|
return prev.addDaemonImpl(id, null, options.requires, options.ready)
|
|
}
|
|
if (options instanceof Function) {
|
|
const opts = options()
|
|
if (opts instanceof Promise) {
|
|
return opts.then(res)
|
|
}
|
|
return res(opts)
|
|
}
|
|
return res(options)
|
|
}
|
|
|
|
/**
|
|
* Runs the entire system until all daemons have returned `ready`.
|
|
* @param id
|
|
* @param options
|
|
* @returns a new Daemons object
|
|
*/
|
|
async runUntilSuccess(timeout: number | null) {
|
|
let resolve = (_: void) => {}
|
|
const res = new Promise<void>((res, rej) => {
|
|
resolve = res
|
|
if (timeout)
|
|
setTimeout(() => {
|
|
const notReady = this.healthDaemons
|
|
.filter((d) => !d.isReady)
|
|
.map((d) => d.id)
|
|
rej(new Error(`Timed out waiting for ${notReady}`))
|
|
}, timeout)
|
|
})
|
|
const daemon = Oneshot.of()(this.effects, null, {
|
|
fn: async () => {
|
|
resolve()
|
|
return null
|
|
},
|
|
})
|
|
const healthDaemon = new HealthDaemon<Manifest>(
|
|
daemon,
|
|
[...this.healthDaemons],
|
|
'__RUN_UNTIL_SUCCESS',
|
|
'EXIT_SUCCESS',
|
|
this.effects,
|
|
)
|
|
const daemons = await new Daemons<Manifest, Ids>(this.effects, this.ids, [
|
|
...this.healthDaemons,
|
|
healthDaemon,
|
|
]).build()
|
|
try {
|
|
await res
|
|
} finally {
|
|
await daemons.term()
|
|
}
|
|
return null
|
|
}
|
|
|
|
/**
|
|
* Gracefully terminate all daemons in reverse dependency order.
|
|
*
|
|
* Daemons with no remaining dependents are shut down first, proceeding
|
|
* until all daemons have been terminated. Falls back to a bulk shutdown
|
|
* if a dependency cycle is detected.
|
|
*/
|
|
async term() {
|
|
const remaining = new Set(this.healthDaemons)
|
|
|
|
while (remaining.size > 0) {
|
|
// Find daemons with no remaining dependents
|
|
const canShutdown = [...remaining].filter(
|
|
(daemon) =>
|
|
![...remaining].some((other) =>
|
|
other.dependencies.some((dep) => dep.id === daemon.id),
|
|
),
|
|
)
|
|
|
|
if (canShutdown.length === 0) {
|
|
// Dependency cycle that should not happen, just shutdown remaining daemons
|
|
console.warn(
|
|
'Dependency cycle detected, shutting down remaining daemons',
|
|
)
|
|
canShutdown.push(...[...remaining].reverse())
|
|
}
|
|
|
|
// remove from remaining set
|
|
canShutdown.forEach((daemon) => remaining.delete(daemon))
|
|
|
|
// Shutdown daemons with no remaining dependents concurrently
|
|
await Promise.allSettled(
|
|
canShutdown.map(async (daemon) => {
|
|
try {
|
|
console.debug(`Terminating daemon ${daemon.id}`)
|
|
const destroySubcontainer = daemon.daemon
|
|
? ![...remaining].some((d) =>
|
|
d.daemon?.sharesSubcontainerWith(daemon.daemon!),
|
|
)
|
|
: false
|
|
await daemon.term({ destroySubcontainer })
|
|
} catch (e) {
|
|
console.error(e)
|
|
}
|
|
}),
|
|
)
|
|
}
|
|
}
|
|
|
|
/**
|
|
* Start all registered daemons and their health checks.
|
|
* @returns This `Daemons` instance, now running
|
|
*/
|
|
async build() {
|
|
for (const daemon of this.healthDaemons) {
|
|
await daemon.updateStatus()
|
|
}
|
|
return this
|
|
}
|
|
}
|