Function expressCreateServer

src/node/hooks/express/updateActions.ts:141–374

(
  _hookName: string,
  {app}: ArgsExpressType,
  cb: Function,
)

const tierAllowsActions = (): boolean => TIER2_TIERS.has(settings.updates.tier);

export const expressCreateServer = (
  _hookName: string,
  {app}: ArgsExpressType,
  cb: Function,
): void => {
  // Always register the routes; gate at request time so a runtime tier change
  // takes effect on the next request rather than requiring a restart.
  // The early 404 below preserves Qodo #1's "disabled path matches prior
  // behaviour (no Tier 2 endpoints existed before this PR)" requirement.
  const tierGate = (req: any, res: any, next: Function) => {
    if (!tierAllowsActions()) return res.status(404).send('Not found');
    next();
  };
  app.use(['/admin/update/apply', '/admin/update/cancel', '/admin/update/acknowledge', '/admin/update/log'], tierGate);

  app.post('/admin/update/apply', wrapAsync(async (req: any, res: any) => {
    if (!requireAdmin(req, res)) return;

    // HTTP-specific pre-checks: produce structured 4xx error codes the UI
    // localises. The pipeline duplicates these as safety, but mapping cleanly
    // to status codes is easier when we know the failure kind up-front.
    const state = await loadState(stateFilePath());
    if (!state.latest) return res.status(409).json({error: 'no-known-latest'});
    if (!isValidTag(state.latest.tag)) {
      return res.status(409).json({error: 'invalid-tag-in-state'});
    }
    // Allowed entry statuses: idle / verified / preflight-failed / rolled-back / scheduled.
    // `scheduled` lets the admin "Apply now" during the Tier 3 grace window.
    const allowedEntry = ['idle', 'verified', 'preflight-failed', 'rolled-back', 'scheduled'];
    if (!allowedEntry.includes(state.execution.status)) {
      return res.status(409).json({error: `execution-busy:${state.execution.status}`});
    }
    const installMethod = getDetectedInstallMethod();
    const policy = evaluatePolicy({
      installMethod,
      tier: settings.updates.tier,
      current: getEpVersion(),
      latest: state.latest.version,
      executionStatus: state.execution.status,
    });
    if (!policy.canManual) {
      return res.status(409).json({error: 'policy-denied', reason: policy.reason});
    }

    // Admin clicked "Apply now" during the Tier 3 grace window. Drop the
    // pending scheduler timer so it doesn't later fire and attempt a second
    // apply (Qodo #3). The pipeline will overwrite execution → preflight
    // momentarily, but cancelling the timer is what guarantees we don't race.
    if (state.execution.status === 'scheduled') cancelScheduler();

    const targetTag = state.latest.tag;
    let responded = false;

    try {
      const result = await applyUpdate({
        targetTag,
        deps: {
          loadState: () => loadState(stateFilePath()),