webmail/instrumentation.node.ts

import { readFileSync } from "fs";
import { configManager } from "./lib/admin/config-manager";
import { initAdminPassword } from "./lib/admin/password";
import { migrateLegacyAdminLayout, migratePolicyUnifiedMailbox } from "./lib/admin/migrate";
import { detectSetupState } from "./lib/setup/state";
import { ensureSetupToken } from "./lib/setup/token";
import { ensureSessionSecret } from "./lib/auth/session-secret";
import { bootState, sharedStoreUrl } from "./lib/shared-store";
import { bootSharedMode } from "./lib/shared-store/boot";
import { importLocalData } from "./lib/shared-store/import";

const pkg = JSON.parse(
  readFileSync(`${process.cwd()}/package.json`, "utf-8")
);
const current: string = pkg.version ?? "0.0.0";
console.info(`Bulwark Webmail v${current}`);

// With REDIS_URL every replica shares one store (#1066). Without it,
// everything below runs exactly as it always has.
const shared = sharedStoreUrl() !== null;

async function loadAdmin(): Promise<void> {
  await configManager.load();
  await initAdminPassword();
}

async function bootShared(): Promise<void> {
  await bootSharedMode({ version: current, importLocal: importLocalData, load: loadAdmin });
  if (bootState() !== "ready") throw new Error(`shared store boot ended in state ${bootState()}`);
}

// Initialize admin config and password bootstrap. Migration runs first so
// existing v1 layouts are split before anything reads admin.json (with a
// shared store: before they are imported).
migrateLegacyAdminLayout()
  .then(() => migratePolicyUnifiedMailbox())
  .then(() => (shared ? bootShared() : loadAdmin()))
  .then(async () => {
    console.info("Admin dashboard initialized");
    // With a shared store, boot already made or loaded the secret.
    if (!shared) {
      try {
        if (await ensureSessionSecret()) {
          console.info(
            "Generated a session secret in the admin state dir. Keep that dir on a " +
            "persistent volume, or set SESSION_SECRET, so restarts don't sign everyone out.",
          );
        }
      } catch (err) {
        console.warn("Failed to generate a session secret:", err instanceof Error ? err.message : err);
      }
    }
    // If we're in bootstrap state (no JMAP_SERVER_URL env and no
    // setupComplete in config.json), generate/refresh the setup token and
    // print it to the logs so the operator can complete the web wizard
    // without execing into the container.
    if (detectSetupState() === "bootstrap") {
      try {
        const token = await ensureSetupToken();
        const port = process.env.PORT || "3000";
        console.info("");
        console.info("==============================================================");
        console.info("  SETUP REQUIRED");
        console.info(`  Token: ${token}`);
        // In the fragment, so the token stays out of access logs and Referer.
        console.info(`  Open:  http://<host>:${port}/setup#token=${token}`);
        console.info("  Token expires in 1 hour. Restart the container to reissue.");
        console.info("==============================================================");
        console.info("");
      } catch (err) {
        console.warn(
          "Failed to issue setup token:",
          err instanceof Error ? err.message : err,
        );
      }
    }
  })
  .then(async () => {
    // Anonymous telemetry, off by default. Admins turn it on in the admin UI
    // or with BULWARK_TELEMETRY=on; BULWARK_TELEMETRY=off or an empty
    // collector URL keeps it from sending.
    // See https://bulwarkmail.org/docs/legal/privacy/telemetry
    const { startScheduler, stopScheduler, markProcessStart } = await import("./lib/telemetry");
    markProcessStart();
    // Hourly check against version.telemetry.bulwarkmail.org. Disable with
    // BULWARK_UPDATE_CHECK=off or override the endpoint with
    // BULWARK_UPDATE_CHECK_URL.
    const versionCheck = await import("./lib/version-check");
    // Both run on one replica of the deployment, the scheduler leader
    // (#1066); a single instance always leads.
    const { startSchedulerLeader } = await import("./lib/scheduler-leader");
    await startSchedulerLeader([
      { name: "telemetry", start: startScheduler, stop: stopScheduler },
      { name: "version-check", start: versionCheck.startScheduler, stop: versionCheck.stopScheduler },
    ]);
  })
  .catch((err) => {
    console.warn("Admin dashboard init skipped:", err instanceof Error ? err.message : err);
  });