3.3.1

[badrogger]

This pull request introduces SGX wallet certificate management commands to the SKALE Node CLI, improves documentation for both SGX and firewall configuration, and refines the firewall setup process to be more robust and operator-friendly. It also includes several internal refactorings related to health checks and configuration management.

SGX Wallet Certificate Management:

• Added new sgx command group to the CLI, enabling operators to check the status of SGX wallet client certificates, renew them, and inspect SGX server options, with full documentation and user feedback. (node_cli/cli/sgx.py, README.md) [1] [2] [3]
• Added supporting configuration constants for SGX certificate management. (node_cli/configs/sgx.py)

Firewall Configuration Improvements:

• Removed the --monitoring option from skale node configure-firewall to clarify that monitoring ports are not automatically opened, and updated documentation to explain SSH port detection and manual override via SSH_PORT. (node_cli/cli/node.py, README.md) [1] [2]
• Improved passive node initialization to ensure the firewall's default-drop policy is only enabled after the base port is known, preventing accidental lockout. (node_cli/core/node.py)
• On node registration, the base port is now saved and the firewall is reconfigured automatically, with error handling and user instructions if the process fails. (node_cli/core/node.py)

Documentation and Command Structure:

• Updated the README.md to document the new SGX commands for both standard and fair node modes, and reorganized the command index accordingly. [1] [2] [3] [4]

Internal Refactoring and Fixes:

• Refactored health and info routes to separate SGX info from health checks, aligning with the new command structure. (node_cli/configs/routes.py, node_cli/core/health.py) [1] [2] [3]
• Minor improvements for configuration file locking and JSON utilities. (node_cli/core/node.py) [1] [2] [3]
• Added admin API token paths for future use. (node_cli/configs/__init__.py)

Release Workflow:

• Updated the GitHub Actions release workflow to set the release target to the current commit SHA. (.github/workflows/publish.yml)