feat(host): role-gated Program.cs composes all v2 components

2026-05-26 05:22:59 -04:00
parent eb4280b7eb
commit e2b357f89a
6 changed files with 155 additions and 1 deletions
@@ -1,4 +1,87 @@
+using Akka.Hosting;
+using Serilog;
+using ZB.MOM.WW.OtOpcUa.AdminUI;
+using ZB.MOM.WW.OtOpcUa.AdminUI.Clients;
+using ZB.MOM.WW.OtOpcUa.AdminUI.Hubs;
+using ZB.MOM.WW.OtOpcUa.Cluster;
+using ZB.MOM.WW.OtOpcUa.Configuration;
+using ZB.MOM.WW.OtOpcUa.ControlPlane;
+using ZB.MOM.WW.OtOpcUa.Host;
+using ZB.MOM.WW.OtOpcUa.Host.Health;
+using ZB.MOM.WW.OtOpcUa.Security;
+using ZB.MOM.WW.OtOpcUa.Security.Endpoints;
+
+// Roles drive the entire conditional wiring below — see ZB.MOM.WW.OtOpcUa.Cluster.RoleParser.
+var roles = RoleParser.Parse(Environment.GetEnvironmentVariable("OTOPCUA_ROLES"));
+var hasAdmin = roles.Contains("admin");
+var hasDriver = roles.Contains("driver");
+
 var builder = WebApplication.CreateBuilder(args);
+
+// Per-role appsettings overlay: appsettings.{role}.json (single role) or appsettings.admin-driver.json
+// (both). Optional — base appsettings.json carries enough to boot if these don't exist.
+var roleSuffix = roles.Length == 0 ? null : string.Join('-', roles.OrderBy(r => r, StringComparer.Ordinal));
+if (roleSuffix is not null)
+    builder.Configuration.AddJsonFile($"appsettings.{roleSuffix}.json", optional: true, reloadOnChange: true);
+
+// Serilog — rolling daily file sink per CLAUDE.md. Console for local dev.
+builder.Host.UseSerilog((ctx, lc) => lc
+    .ReadFrom.Configuration(ctx.Configuration)
+    .WriteTo.Console()
+    .WriteTo.File("logs/otopcua-.log", rollingInterval: RollingInterval.Day));
+
+// Windows-service registration is handled at install time by scripts/install/Install-Services.ps1
+// (Task 62) rather than in-process, so the binary stays cross-platform-compilable.
+
+// Shared services — always registered regardless of role. ConfigDb is required for everything.
+builder.Services.AddOtOpcUaConfigDb(builder.Configuration);
+builder.Services.AddOtOpcUaCluster(builder.Configuration);
+
+// Akka cluster bootstrap. Role-specific singletons are registered on the AkkaConfigurationBuilder
+// from inside the configurator lambda. AddAkka spins the ActorSystem at host start.
+builder.Services.AddAkka("otopcua", (ab, _) =>
+{
+    if (hasAdmin)
+        ab.WithOtOpcUaControlPlaneSingletons();
+    // Driver-role startup (DriverHostActor spawn + child probes) is wired in F19 once a
+    // RuntimeStartup contract is added — the actor itself exists (Phase 6), the registration
+    // extension does not yet. Without it, driver-role nodes still join the cluster and serve
+    // health/redundancy traffic but won't auto-spawn DriverHostActor.
+});
+
+if (hasAdmin)
+{
+    // Auth + AdminUI surface only mounted on admin-role nodes. Driver-only nodes have no UI.
+    builder.Services.AddOtOpcUaAuth(builder.Configuration);
+    builder.Services.AddAdminUI();
+    builder.Services.AddSignalR();
+    builder.Services.AddOtOpcUaAdminClients();
+}
+
+builder.Services.AddOtOpcUaHealth();
+
 var app = builder.Build();
-app.MapGet("/", () => "OtOpcUa.Host scaffold");
+app.UseSerilogRequestLogging();
+
+if (hasAdmin)
+{
+    app.UseAuthentication();
+    app.UseAuthorization();
+    app.UseAntiforgery();
+    app.MapOtOpcUaAuth();
+    app.MapAdminUI<App>();
+    app.MapOtOpcUaHubs();
+}
+
+app.MapOtOpcUaHealth();
+
+Log.Information("OtOpcUa.Host starting with roles=[{Roles}] (admin={HasAdmin}, driver={HasDriver})",
+    string.Join(",", roles), hasAdmin, hasDriver);
+
 await app.RunAsync();
+
+namespace ZB.MOM.WW.OtOpcUa.Host
+{
+    /// <summary>Re-exported for <c>WebApplicationFactory&lt;Program&gt;</c> integration tests (F1).</summary>
+    public partial class Program;
+}