@camstack/server 1.2.572 → 1.2.574

package/dist/core/agent/hub-agent-pairing.js

@@ -0,0 +1,123 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.HubAgentPairing = void 0;
+/** A browse takes seconds; a list asked within this window reuses the last scan. */
+const SCAN_REUSE_MS = 4_000;
+/** A typed address is remembered this long without being heard again. */
+const ADDRESS_MEMORY_MS = 30 * 60_000;
+const DEFAULT_PORT = 4444;
+class HubAgentPairing {
+    deps;
+    scanned = null;
+    scanning = null;
+    manual = new Map();
+    timer = null;
+    now;
+    constructor(deps) {
+        this.deps = deps;
+        this.now = deps.now ?? Date.now;
+    }
+    /** Start advancing active pairings in the background. Idempotent. */
+    start() {
+        if (this.timer !== null)
+            return;
+        this.timer = setInterval(() => void this.advanceActive(), this.deps.pollMs ?? 2_000);
+        this.timer.unref?.();
+    }
+    stop() {
+        if (this.timer !== null)
+            clearInterval(this.timer);
+        this.timer = null;
+    }
+    /** Agents found on the LAN plus the addresses the operator typed. */
+    async listDiscovered(options = {}) {
+        const found = await this.scan(options.refresh === true);
+        const byKey = new Map();
+        for (const a of found) {
+            byKey.set(`${a.host}:${a.port}`, this.describe(a.nodeId, a.host, a.port, a, 'mdns'));
+        }
+        const at = this.now();
+        for (const [key, m] of this.manual) {
+            if (at - m.seenAt > ADDRESS_MEMORY_MS) {
+                this.manual.delete(key);
+                continue;
+            }
+            if (byKey.has(key))
+                continue;
+            byKey.set(key, this.describe(m.nodeId, m.endpoint.host, m.endpoint.port, { version: m.version, state: m.state, fingerprint: null }, 'address'));
+        }
+        return { agents: [...byKey.values()], scannedAt: this.scanned?.at ?? null };
+    }
+    /** Probe an address the operator typed; remembered so it shows in the list. */
+    async addByAddress(host, port = DEFAULT_PORT) {
+        const endpoint = { host, port };
+        const hello = await this.deps.transport.hello(endpoint);
+        this.manual.set(`${host}:${port}`, {
+            endpoint,
+            nodeId: hello.nodeId,
+            version: hello.version,
+            state: hello.state,
+            seenAt: this.now(),
+        });
+        return this.describe(hello.nodeId, host, port, { version: hello.version, state: hello.state, fingerprint: null }, 'address');
+    }
+    async begin(endpoint) {
+        const view = await this.deps.pairing.begin(endpoint);
+        this.start();
+        return view;
+    }
+    get(pairingId) {
+        return this.deps.pairing.advance(pairingId);
+    }
+    list() {
+        return this.deps.pairing.list();
+    }
+    confirm(pairingId, code) {
+        return this.deps.pairing.confirm(pairingId, code);
+    }
+    reject(pairingId) {
+        return this.deps.pairing.reject(pairingId);
+    }
+    async advanceActive() {
+        for (const id of this.deps.pairing.activeIds()) {
+            await this.deps.pairing.advance(id).catch((err) => this.deps.log.warn('pairing could not be advanced', {
+                meta: { pairingId: id, error: err instanceof Error ? err.message : String(err) },
+            }));
+        }
+    }
+    async scan(refresh) {
+        const last = this.scanned;
+        if (!refresh && last !== null && this.now() - last.at < SCAN_REUSE_MS)
+            return last.agents;
+        if (this.scanning !== null)
+            return this.scanning;
+        const running = this.deps
+            .browse()
+            .then((agents) => {
+            this.scanned = { at: this.now(), agents };
+            return agents;
+        })
+            .finally(() => {
+            this.scanning = null;
+        });
+        this.scanning = running;
+        return running;
+    }
+    describe(nodeId, host, port, facts, source) {
+        const active = this.deps.pairing
+            .list()
+            .find((p) => p.nodeId === nodeId && (p.state === 'awaiting-confirmation' || p.state === 'completing'));
+        return {
+            nodeId,
+            host,
+            port,
+            version: facts.version,
+            state: facts.state,
+            fingerprint: facts.fingerprint,
+            source,
+            connected: this.deps.isNodeConnected(nodeId),
+            pairing: active ?? null,
+        };
+    }
+}
+exports.HubAgentPairing = HubAgentPairing;

package/dist/core/agent/node-certificates-client.js

@@ -32,6 +32,7 @@ function createNodeCertificatesClient(moleculer, nodeId) {
         installMeshLeaf: (input) => call('installMeshLeaf', m.installMeshLeaf.output, input),
         confirmMeshLeaf: (input) => call('confirmMeshLeaf', m.confirmMeshLeaf.output, input),
         rollbackMeshLeaf: () => call('rollbackMeshLeaf', m.rollbackMeshLeaf.output, {}),
+        forgetHub: () => call('forgetHub', m.forgetHub.output, {}),
         prepareHttpsCertificate: () => call('prepareHttpsCertificate', m.prepareHttpsCertificate.output, {}),
         installHttpsCertificate: (input) => call('installHttpsCertificate', m.installHttpsCertificate.output, input),
     };

package/dist/core/moleculer/hub-mesh-guard.js

@@ -34,6 +34,7 @@ class HubMeshGuard {
             ownNodeId,
             gate: system_1.getProcessClusterSecretGate,
             mode: system_1.getProcessMeshAuthMode,
+            isVerifiedPeer: system_1.isProcessVerifiedMeshPeer,
             onAuthenticated: (nodeId) => {
                 this.logger.info('node authenticated to the mesh (challenge–response)', {
                     meta: { nodeId },

package/dist/core/moleculer/moleculer.service.js

@@ -711,6 +711,7 @@ class MoleculerService {
         });
         (0, system_1.setProcessMeshPeerTransportLookup)({
             transportOf: (nodeId) => (0, system_1.getBrokerTlsTransporter)(this.broker)?.peerTransport(nodeId),
+            isVerifiedPeer: (nodeId) => (0, system_1.getBrokerTlsTransporter)(this.broker)?.verifiedPeer(nodeId) !== undefined,
             peerLeaf: (nodeId) => (0, system_1.getBrokerTlsTransporter)(this.broker)?.peerLeaf(nodeId),
             dropPeer: (nodeId) => (0, system_1.getBrokerTlsTransporter)(this.broker)?.dropPeer(nodeId) ?? 0,
         });

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@camstack/server",
-  "version": "1.2.572",
+  "version": "1.2.574",
   "license": "MIT",
   "private": false,
   "files": [
@@ -38,18 +38,18 @@
     ]
   },
   "dependencies": {
-    "@camstack/addon-admin-ui": "1.2.423",
-    "@camstack/addon-agent-ui": "1.2.232",
+    "@camstack/addon-admin-ui": "1.2.424",
+    "@camstack/addon-agent-ui": "1.2.233",
     "@camstack/addon-auth": "1.2.144",
     "@camstack/addon-decoder-nodeav": "1.2.123",
     "@camstack/addon-notifiers": "1.2.134",
-    "@camstack/addon-pipeline": "1.2.368",
+    "@camstack/addon-pipeline": "1.2.369",
     "@camstack/addon-pipeline-orchestrator": "1.2.321",
     "@camstack/addon-post-analysis": "1.2.369",
-    "@camstack/develop": "0.1.8",
+    "@camstack/develop": "0.1.10",
     "@camstack/sdk": "1.2.131",
-    "@camstack/system": "1.2.432",
-    "@camstack/types": "1.2.368",
+    "@camstack/system": "1.2.433",
+    "@camstack/types": "1.2.369",
     "@camstack/ui-library": "1.2.289",
     "@fastify/compress": "^9.0.0",
     "@fastify/cookie": "^11.0.2",