@devflow-tools/server 0.16.33 → 0.17.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/auth/api-key.guard.d.ts.map +1 -1
- package/dist/auth/api-key.guard.js +29 -17
- package/dist/auth/api-key.guard.js.map +1 -1
- package/dist/auth/dashboard-session.d.ts +19 -0
- package/dist/auth/dashboard-session.d.ts.map +1 -0
- package/dist/auth/dashboard-session.js +79 -0
- package/dist/auth/dashboard-session.js.map +1 -0
- package/dist/main.d.ts.map +1 -1
- package/dist/main.js +12 -0
- package/dist/main.js.map +1 -1
- package/dist/workflow/workflow.controller.d.ts +4 -4
- package/dist/workflow/workflow.service.d.ts +4 -4
- package/package.json +11 -11
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"api-key.guard.d.ts","sourceRoot":"","sources":["../../src/auth/api-key.guard.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,WAAW,EACX,gBAAgB,EAGjB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;
|
|
1
|
+
{"version":3,"file":"api-key.guard.d.ts","sourceRoot":"","sources":["../../src/auth/api-key.guard.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,WAAW,EACX,gBAAgB,EAGjB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAmBzC,qBACa,WAAY,YAAW,WAAW;IACd,OAAO,CAAC,SAAS;gBAAT,SAAS,EAAE,SAAS;IAE3D,WAAW,CAAC,OAAO,EAAE,gBAAgB,GAAG,OAAO;CA6ChD"}
|
|
@@ -15,6 +15,7 @@ import { Reflector } from "@nestjs/core";
|
|
|
15
15
|
import { IS_PUBLIC_KEY } from "./api-key.decorator.js";
|
|
16
16
|
import { AuthErrorCode } from "./errors.js";
|
|
17
17
|
import { getLocalApiKey } from "@devflow-tools/sdk";
|
|
18
|
+
import { isDashboardSessionRequest, readDashboardSessionCookie, verifyDashboardSessionToken, } from "./dashboard-session.js";
|
|
18
19
|
function getValidApiKeys() {
|
|
19
20
|
const configured = process.env.DEVFLOW_API_KEYS
|
|
20
21
|
?.split(",")
|
|
@@ -37,25 +38,36 @@ let ApiKeyGuard = class ApiKeyGuard {
|
|
|
37
38
|
return true;
|
|
38
39
|
const request = context.switchToHttp().getRequest();
|
|
39
40
|
const apiKey = request.headers["x-api-key"];
|
|
40
|
-
if (
|
|
41
|
-
|
|
42
|
-
|
|
43
|
-
|
|
44
|
-
|
|
45
|
-
|
|
46
|
-
|
|
47
|
-
|
|
41
|
+
if (apiKey) {
|
|
42
|
+
if (!getValidApiKeys().includes(apiKey)) {
|
|
43
|
+
throw new UnauthorizedException({
|
|
44
|
+
error: {
|
|
45
|
+
code: AuthErrorCode.INVALID_API_KEY,
|
|
46
|
+
message: "Invalid API key",
|
|
47
|
+
details: {},
|
|
48
|
+
},
|
|
49
|
+
});
|
|
50
|
+
}
|
|
51
|
+
return true;
|
|
48
52
|
}
|
|
49
|
-
|
|
50
|
-
|
|
51
|
-
|
|
52
|
-
|
|
53
|
-
|
|
54
|
-
|
|
55
|
-
|
|
56
|
-
|
|
53
|
+
const cookieHeader = request.headers.cookie;
|
|
54
|
+
const dashboardToken = readDashboardSessionCookie(cookieHeader);
|
|
55
|
+
if (isDashboardSessionRequest({
|
|
56
|
+
host: request.headers.host,
|
|
57
|
+
origin: request.headers.origin,
|
|
58
|
+
fetchSite: request.headers["sec-fetch-site"],
|
|
59
|
+
})
|
|
60
|
+
&& dashboardToken
|
|
61
|
+
&& verifyDashboardSessionToken(dashboardToken)) {
|
|
62
|
+
return true;
|
|
57
63
|
}
|
|
58
|
-
|
|
64
|
+
throw new UnauthorizedException({
|
|
65
|
+
error: {
|
|
66
|
+
code: AuthErrorCode.MISSING_API_KEY,
|
|
67
|
+
message: "X-API-Key header is required",
|
|
68
|
+
details: {},
|
|
69
|
+
},
|
|
70
|
+
});
|
|
59
71
|
}
|
|
60
72
|
};
|
|
61
73
|
ApiKeyGuard = __decorate([
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"api-key.guard.js","sourceRoot":"","sources":["../../src/auth/api-key.guard.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,OAAO,EACL,UAAU,EAGV,qBAAqB,EACrB,MAAM,GACP,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AACzC,OAAO,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AACvD,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;
|
|
1
|
+
{"version":3,"file":"api-key.guard.js","sourceRoot":"","sources":["../../src/auth/api-key.guard.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,OAAO,EACL,UAAU,EAGV,qBAAqB,EACrB,MAAM,GACP,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AACzC,OAAO,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AACvD,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AACpD,OAAO,EACL,yBAAyB,EACzB,0BAA0B,EAC1B,2BAA2B,GAC5B,MAAM,wBAAwB,CAAC;AAEhC,SAAS,eAAe;IACtB,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,gBAAgB;QAC7C,EAAE,KAAK,CAAC,GAAG,CAAC;SACX,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;SACxB,MAAM,CAAC,OAAO,CAAC,CAAC;IACnB,IAAI,UAAU,EAAE,MAAM;QAAE,OAAO,UAAU,CAAC;IAC1C,OAAO,CAAC,cAAc,EAAE,CAAC,CAAC;AAC5B,CAAC;AAGM,IAAM,WAAW,GAAjB,MAAM,WAAW;IACtB,YAAuC,SAAoB;QAApB,cAAS,GAAT,SAAS,CAAW;IAAG,CAAC;IAE/D,WAAW,CAAC,OAAyB;QACnC,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,iBAAiB,CAAU,aAAa,EAAE;YACxE,OAAO,CAAC,UAAU,EAAE;YACpB,OAAO,CAAC,QAAQ,EAAE;SACnB,CAAC,CAAC;QACH,IAAI,QAAQ;YAAE,OAAO,IAAI,CAAC;QAE1B,MAAM,OAAO,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC,UAAU,EAAE,CAAC;QACpD,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,WAAW,CAAuB,CAAC;QAElE,IAAI,MAAM,EAAE,CAAC;YACX,IAAI,CAAC,eAAe,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;gBACxC,MAAM,IAAI,qBAAqB,CAAC;oBAC9B,KAAK,EAAE;wBACL,IAAI,EAAE,aAAa,CAAC,eAAe;wBACnC,OAAO,EAAE,iBAAiB;wBAC1B,OAAO,EAAE,EAAE;qBACZ;iBACF,CAAC,CAAC;YACL,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,YAAY,GAAG,OAAO,CAAC,OAAO,CAAC,MAA4B,CAAC;QAClE,MAAM,cAAc,GAAG,0BAA0B,CAAC,YAAY,CAAC,CAAC;QAChE,IACE,yBAAyB,CAAC;YACxB,IAAI,EAAE,OAAO,CAAC,OAAO,CAAC,IAA0B;YAChD,MAAM,EAAE,OAAO,CAAC,OAAO,CAAC,MAA4B;YACpD,SAAS,EAAE,OAAO,CAAC,OAAO,CAAC,gBAAgB,CAAuB;SACnE,CAAC;eACC,cAAc;eACd,2BAA2B,CAAC,cAAc,CAAC,EAC9C,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,IAAI,qBAAqB,CAAC;YAC9B,KAAK,EAAE;gBACL,IAAI,EAAE,aAAa,CAAC,eAAe;gBACnC,OAAO,EAAE,8BAA8B;gBACvC,OAAO,EAAE,EAAE;aACZ;SACF,CAAC,CAAC;IACL,CAAC;CACF,CAAA;AAhDY,WAAW;IADvB,UAAU,EAAE;IAEE,WAAA,MAAM,CAAC,SAAS,CAAC,CAAA;qCAAoB,SAAS;GADhD,WAAW,CAgDvB"}
|
|
@@ -0,0 +1,19 @@
|
|
|
1
|
+
export declare const DASHBOARD_SESSION_COOKIE = "devflow_dashboard_session";
|
|
2
|
+
export declare const DASHBOARD_SESSION_TTL_SECONDS: number;
|
|
3
|
+
interface DashboardSessionOptions {
|
|
4
|
+
now?: number;
|
|
5
|
+
secret?: string;
|
|
6
|
+
ttlSeconds?: number;
|
|
7
|
+
}
|
|
8
|
+
export declare function createDashboardSessionToken(options?: DashboardSessionOptions): string;
|
|
9
|
+
export declare function verifyDashboardSessionToken(token: string, options?: Pick<DashboardSessionOptions, "now" | "secret">): boolean;
|
|
10
|
+
export declare function createDashboardSessionCookie(options?: DashboardSessionOptions): string;
|
|
11
|
+
export declare function readDashboardSessionCookie(cookieHeader: string | undefined): string | null;
|
|
12
|
+
export declare function isLoopbackHost(hostHeader: string | undefined): boolean;
|
|
13
|
+
export declare function isDashboardSessionRequest(headers: {
|
|
14
|
+
host?: string;
|
|
15
|
+
origin?: string;
|
|
16
|
+
fetchSite?: string;
|
|
17
|
+
}): boolean;
|
|
18
|
+
export {};
|
|
19
|
+
//# sourceMappingURL=dashboard-session.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"dashboard-session.d.ts","sourceRoot":"","sources":["../../src/auth/dashboard-session.ts"],"names":[],"mappings":"AAGA,eAAO,MAAM,wBAAwB,8BAA8B,CAAC;AACpE,eAAO,MAAM,6BAA6B,QAAU,CAAC;AAIrD,UAAU,uBAAuB;IAC/B,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAMD,wBAAgB,2BAA2B,CACzC,OAAO,GAAE,uBAA4B,GACpC,MAAM,CAMR;AAED,wBAAgB,2BAA2B,CACzC,KAAK,EAAE,MAAM,EACb,OAAO,GAAE,IAAI,CAAC,uBAAuB,EAAE,KAAK,GAAG,QAAQ,CAAM,GAC5D,OAAO,CAgBT;AAED,wBAAgB,4BAA4B,CAC1C,OAAO,GAAE,uBAA4B,GACpC,MAAM,CAUR;AAED,wBAAgB,0BAA0B,CACxC,YAAY,EAAE,MAAM,GAAG,SAAS,GAC/B,MAAM,GAAG,IAAI,CAUf;AAED,wBAAgB,cAAc,CAAC,UAAU,EAAE,MAAM,GAAG,SAAS,GAAG,OAAO,CAKtE;AAED,wBAAgB,yBAAyB,CAAC,OAAO,EAAE;IACjD,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB,GAAG,OAAO,CAYV"}
|
|
@@ -0,0 +1,79 @@
|
|
|
1
|
+
import { createHmac, timingSafeEqual } from "node:crypto";
|
|
2
|
+
import { getLocalHmacSecret } from "@devflow-tools/sdk";
|
|
3
|
+
export const DASHBOARD_SESSION_COOKIE = "devflow_dashboard_session";
|
|
4
|
+
export const DASHBOARD_SESSION_TTL_SECONDS = 60 * 60;
|
|
5
|
+
const TOKEN_VERSION = "v1";
|
|
6
|
+
function sign(payload, secret) {
|
|
7
|
+
return createHmac("sha256", secret).update(payload).digest("base64url");
|
|
8
|
+
}
|
|
9
|
+
export function createDashboardSessionToken(options = {}) {
|
|
10
|
+
const now = options.now ?? Date.now();
|
|
11
|
+
const ttlSeconds = options.ttlSeconds ?? DASHBOARD_SESSION_TTL_SECONDS;
|
|
12
|
+
const expiresAt = Math.floor(now / 1000) + ttlSeconds;
|
|
13
|
+
const payload = `${TOKEN_VERSION}.${expiresAt}`;
|
|
14
|
+
return `${payload}.${sign(payload, options.secret ?? getLocalHmacSecret())}`;
|
|
15
|
+
}
|
|
16
|
+
export function verifyDashboardSessionToken(token, options = {}) {
|
|
17
|
+
const parts = token.split(".");
|
|
18
|
+
if (parts.length !== 3 || parts[0] !== TOKEN_VERSION)
|
|
19
|
+
return false;
|
|
20
|
+
const expiresAt = Number(parts[1]);
|
|
21
|
+
if (!Number.isSafeInteger(expiresAt))
|
|
22
|
+
return false;
|
|
23
|
+
const nowSeconds = Math.floor((options.now ?? Date.now()) / 1000);
|
|
24
|
+
if (expiresAt <= nowSeconds)
|
|
25
|
+
return false;
|
|
26
|
+
const payload = `${parts[0]}.${parts[1]}`;
|
|
27
|
+
const actual = Buffer.from(parts[2] ?? "", "base64url");
|
|
28
|
+
const expected = Buffer.from(sign(payload, options.secret ?? getLocalHmacSecret()), "base64url");
|
|
29
|
+
return actual.length === expected.length && timingSafeEqual(actual, expected);
|
|
30
|
+
}
|
|
31
|
+
export function createDashboardSessionCookie(options = {}) {
|
|
32
|
+
const ttlSeconds = options.ttlSeconds ?? DASHBOARD_SESSION_TTL_SECONDS;
|
|
33
|
+
const token = createDashboardSessionToken({ ...options, ttlSeconds });
|
|
34
|
+
return [
|
|
35
|
+
`${DASHBOARD_SESSION_COOKIE}=${token}`,
|
|
36
|
+
"HttpOnly",
|
|
37
|
+
"SameSite=Strict",
|
|
38
|
+
"Path=/api",
|
|
39
|
+
`Max-Age=${ttlSeconds}`,
|
|
40
|
+
].join("; ");
|
|
41
|
+
}
|
|
42
|
+
export function readDashboardSessionCookie(cookieHeader) {
|
|
43
|
+
if (!cookieHeader)
|
|
44
|
+
return null;
|
|
45
|
+
for (const entry of cookieHeader.split(";")) {
|
|
46
|
+
const separator = entry.indexOf("=");
|
|
47
|
+
if (separator < 0)
|
|
48
|
+
continue;
|
|
49
|
+
const name = entry.slice(0, separator).trim();
|
|
50
|
+
if (name !== DASHBOARD_SESSION_COOKIE)
|
|
51
|
+
continue;
|
|
52
|
+
return entry.slice(separator + 1).trim() || null;
|
|
53
|
+
}
|
|
54
|
+
return null;
|
|
55
|
+
}
|
|
56
|
+
export function isLoopbackHost(hostHeader) {
|
|
57
|
+
if (!hostHeader)
|
|
58
|
+
return false;
|
|
59
|
+
const host = hostHeader.trim().toLowerCase();
|
|
60
|
+
return /^(?:localhost|127\.0\.0\.1)(?::\d{1,5})?$/.test(host)
|
|
61
|
+
|| /^\[::1\](?::\d{1,5})?$/.test(host);
|
|
62
|
+
}
|
|
63
|
+
export function isDashboardSessionRequest(headers) {
|
|
64
|
+
if (!isLoopbackHost(headers.host))
|
|
65
|
+
return false;
|
|
66
|
+
if (headers.fetchSite && headers.fetchSite !== "same-origin")
|
|
67
|
+
return false;
|
|
68
|
+
if (!headers.origin)
|
|
69
|
+
return true;
|
|
70
|
+
try {
|
|
71
|
+
const origin = new URL(headers.origin);
|
|
72
|
+
return origin.protocol === "http:"
|
|
73
|
+
&& origin.host.toLowerCase() === headers.host.trim().toLowerCase();
|
|
74
|
+
}
|
|
75
|
+
catch {
|
|
76
|
+
return false;
|
|
77
|
+
}
|
|
78
|
+
}
|
|
79
|
+
//# sourceMappingURL=dashboard-session.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"dashboard-session.js","sourceRoot":"","sources":["../../src/auth/dashboard-session.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAC1D,OAAO,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AAExD,MAAM,CAAC,MAAM,wBAAwB,GAAG,2BAA2B,CAAC;AACpE,MAAM,CAAC,MAAM,6BAA6B,GAAG,EAAE,GAAG,EAAE,CAAC;AAErD,MAAM,aAAa,GAAG,IAAI,CAAC;AAQ3B,SAAS,IAAI,CAAC,OAAe,EAAE,MAAc;IAC3C,OAAO,UAAU,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;AAC1E,CAAC;AAED,MAAM,UAAU,2BAA2B,CACzC,UAAmC,EAAE;IAErC,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;IACtC,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,6BAA6B,CAAC;IACvE,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,UAAU,CAAC;IACtD,MAAM,OAAO,GAAG,GAAG,aAAa,IAAI,SAAS,EAAE,CAAC;IAChD,OAAO,GAAG,OAAO,IAAI,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,MAAM,IAAI,kBAAkB,EAAE,CAAC,EAAE,CAAC;AAC/E,CAAC;AAED,MAAM,UAAU,2BAA2B,CACzC,KAAa,EACb,UAA2D,EAAE;IAE7D,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC/B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,aAAa;QAAE,OAAO,KAAK,CAAC;IAEnE,MAAM,SAAS,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IACnC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,SAAS,CAAC;QAAE,OAAO,KAAK,CAAC;IACnD,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC;IAClE,IAAI,SAAS,IAAI,UAAU;QAAE,OAAO,KAAK,CAAC;IAE1C,MAAM,OAAO,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;IAC1C,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,WAAW,CAAC,CAAC;IACxD,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAC1B,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,MAAM,IAAI,kBAAkB,EAAE,CAAC,EACrD,WAAW,CACZ,CAAC;IACF,OAAO,MAAM,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM,IAAI,eAAe,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;AAChF,CAAC;AAED,MAAM,UAAU,4BAA4B,CAC1C,UAAmC,EAAE;IAErC,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,6BAA6B,CAAC;IACvE,MAAM,KAAK,GAAG,2BAA2B,CAAC,EAAE,GAAG,OAAO,EAAE,UAAU,EAAE,CAAC,CAAC;IACtE,OAAO;QACL,GAAG,wBAAwB,IAAI,KAAK,EAAE;QACtC,UAAU;QACV,iBAAiB;QACjB,WAAW;QACX,WAAW,UAAU,EAAE;KACxB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC;AAED,MAAM,UAAU,0BAA0B,CACxC,YAAgC;IAEhC,IAAI,CAAC,YAAY;QAAE,OAAO,IAAI,CAAC;IAC/B,KAAK,MAAM,KAAK,IAAI,YAAY,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;QAC5C,MAAM,SAAS,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACrC,IAAI,SAAS,GAAG,CAAC;YAAE,SAAS;QAC5B,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC,IAAI,EAAE,CAAC;QAC9C,IAAI,IAAI,KAAK,wBAAwB;YAAE,SAAS;QAChD,OAAO,KAAK,CAAC,KAAK,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,IAAI,CAAC;IACnD,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,UAA8B;IAC3D,IAAI,CAAC,UAAU;QAAE,OAAO,KAAK,CAAC;IAC9B,MAAM,IAAI,GAAG,UAAU,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC7C,OAAO,2CAA2C,CAAC,IAAI,CAAC,IAAI,CAAC;WACxD,wBAAwB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC3C,CAAC;AAED,MAAM,UAAU,yBAAyB,CAAC,OAIzC;IACC,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IAChD,IAAI,OAAO,CAAC,SAAS,IAAI,OAAO,CAAC,SAAS,KAAK,aAAa;QAAE,OAAO,KAAK,CAAC;IAC3E,IAAI,CAAC,OAAO,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IAEjC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QACvC,OAAO,MAAM,CAAC,QAAQ,KAAK,OAAO;eAC7B,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,OAAO,CAAC,IAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACxE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC"}
|
package/dist/main.d.ts.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"main.d.ts","sourceRoot":"","sources":["../src/main.ts"],"names":[],"mappings":"AAAA,OAAO,kBAAkB,CAAC;AAE1B,OAAO,EAEL,sBAAsB,EACvB,MAAM,0BAA0B,CAAC;
|
|
1
|
+
{"version":3,"file":"main.d.ts","sourceRoot":"","sources":["../src/main.ts"],"names":[],"mappings":"AAAA,OAAO,kBAAkB,CAAC;AAE1B,OAAO,EAEL,sBAAsB,EACvB,MAAM,0BAA0B,CAAC;AA8BlC,wBAAsB,SAAS,IAAI,OAAO,CAAC,sBAAsB,CAAC,CA0FjE"}
|
package/dist/main.js
CHANGED
|
@@ -7,6 +7,7 @@ import { join, dirname } from "node:path";
|
|
|
7
7
|
import { createRequire } from "node:module";
|
|
8
8
|
import { AppModule } from "./app.module.js";
|
|
9
9
|
import { HttpExceptionFilter } from "./common/http-exception.filter.js";
|
|
10
|
+
import { createDashboardSessionCookie, isLoopbackHost, } from "./auth/dashboard-session.js";
|
|
10
11
|
function resolveDashboardDir() {
|
|
11
12
|
const require = createRequire(import.meta.url);
|
|
12
13
|
// Production: dashboard static files in devflow package dist
|
|
@@ -46,6 +47,17 @@ export async function bootstrap() {
|
|
|
46
47
|
}
|
|
47
48
|
return payload;
|
|
48
49
|
});
|
|
50
|
+
fastify.addHook("onSend", async (request, reply, payload) => {
|
|
51
|
+
const pathname = request.url.split("?", 1)[0] ?? "/";
|
|
52
|
+
const contentType = String(reply.getHeader("content-type") ?? "");
|
|
53
|
+
if (request.method === "GET"
|
|
54
|
+
&& !pathname.startsWith("/api")
|
|
55
|
+
&& contentType.toLowerCase().includes("text/html")
|
|
56
|
+
&& isLoopbackHost(request.headers.host)) {
|
|
57
|
+
reply.header("set-cookie", createDashboardSessionCookie());
|
|
58
|
+
}
|
|
59
|
+
return payload;
|
|
60
|
+
});
|
|
49
61
|
// Serve dashboard static files
|
|
50
62
|
const dashboardDir = resolveDashboardDir();
|
|
51
63
|
if (dashboardDir) {
|
package/dist/main.js.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"main.js","sourceRoot":"","sources":["../src/main.ts"],"names":[],"mappings":"AAAA,OAAO,kBAAkB,CAAC;AAC1B,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAC3C,OAAO,EACL,cAAc,GAEf,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AACvC,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAC5C,OAAO,EAAE,mBAAmB,EAAE,MAAM,mCAAmC,CAAC;
|
|
1
|
+
{"version":3,"file":"main.js","sourceRoot":"","sources":["../src/main.ts"],"names":[],"mappings":"AAAA,OAAO,kBAAkB,CAAC;AAC1B,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAC3C,OAAO,EACL,cAAc,GAEf,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AACvC,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAC5C,OAAO,EAAE,mBAAmB,EAAE,MAAM,mCAAmC,CAAC;AACxE,OAAO,EACL,4BAA4B,EAC5B,cAAc,GACf,MAAM,6BAA6B,CAAC;AAErC,SAAS,mBAAmB;IAC1B,MAAM,OAAO,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC/C,6DAA6D;IAC7D,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,qCAAqC,CAAC,CAAC;QACvE,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,WAAW,CAAC,CAAC;QAC5D,IAAI,UAAU,CAAC,IAAI,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;YAAE,OAAO,OAAO,CAAC;IAC9D,CAAC;IAAC,MAAM,CAAC,CAAA,CAAC;IACV,uCAAuC;IACvC,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,qCAAqC,CAAC,CAAC;QACvE,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;QACpD,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,EAAE,MAAM,EAAE,WAAW,EAAE,KAAK,CAAC,CAAC;QAC1D,IAAI,UAAU,CAAC,IAAI,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;YAAE,OAAO,MAAM,CAAC;IAC5D,CAAC;IAAC,MAAM,CAAC,CAAA,CAAC;IACV,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,SAAS;IAC7B,MAAM,OAAO,GAAG,IAAI,cAAc,EAAE,CAAC;IACrC,MAAM,GAAG,GAAG,MAAM,WAAW,CAAC,MAAM,CAClC,SAAS,EACT,OAAO,CACR,CAAC;IACF,GAAG,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;IAC3B,GAAG,CAAC,gBAAgB,CAAC,IAAI,mBAAmB,EAAE,CAAC,CAAC;IAChD,GAAG,CAAC,UAAU,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC;IAEpD,MAAM,OAAO,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC;IAEtC,wEAAwE;IACxE,2EAA2E;IAC3E,kDAAkD;IAClD,OAAO,CAAC,OAAO,CAAC,YAAY,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE;QAC3D,IAAI,GAAG,CAAC,OAAO,CAAC,gBAAgB,CAAC,KAAK,GAAG,EAAE,CAAC;YAC1C,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC/B,GAAG,CAAC,OAAO,CAAC,gBAAgB,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACpD,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;QAC/B,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC,CAAC,CAAC;IAEH,OAAO,CAAC,OAAO,CAAC,QAAQ,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;QAC1D,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC;QACrD,MAAM,WAAW,GAAG,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC,CAAC;QAClE,IACE,OAAO,CAAC,MAAM,KAAK,KAAK;eACrB,CAAC,QAAQ,CAAC,UAAU,CAAC,MAAM,CAAC;eAC5B,WAAW,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,WAAW,CAAC;eAC/C,cAAc,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,EACvC,CAAC;YACD,KAAK,CAAC,MAAM,CAAC,YAAY,EAAE,4BAA4B,EAAE,CAAC,CAAC;QAC7D,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC,CAAC,CAAC;IAEH,+BAA+B;IAC/B,MAAM,YAAY,GAAG,mBAAmB,EAAE,CAAC;IAC3C,IAAI,YAAY,EAAE,CAAC;QACjB,MAAM,aAAa,GAAG,MAAM,MAAM,CAAC,iBAAiB,CAAC,CAAC;QACtD,MAAM,MAAM,GAAI,aAAqB,CAAC,OAAO,IAAI,aAAa,CAAC;QAC/D,iEAAiE;QACjE,MAAM,OAAO,CAAC,QAAQ,CAAC,MAAM,EAAE;YAC7B,IAAI,EAAE,YAAY;YAClB,MAAM,EAAE,GAAG;YACX,QAAQ,EAAE,KAAK;SAChB,CAAC,CAAC;QAEH,4EAA4E;QAC5E,2EAA2E;QAC3E,0EAA0E;QAC1E,OAAO,CAAC,KAAK,CAAC;YACZ,MAAM,EAAE,KAAK;YACb,GAAG,EAAE,IAAI;YACT,OAAO,EAAE,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE;gBAC1B,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC;gBACrD,MAAM,aAAa,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;gBAC1D,MAAM,WAAW,GAAG,aAAa,CAAC,MAAM,GAAG,CAAC;uBACvC,aAAa,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,kBAAkB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;oBACrE,CAAC,CAAC,GAAG,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO;oBACnC,CAAC,CAAC,IAAI,CAAC;gBACT,MAAM,iBAAiB,GAAG,CAAC,aAAa,EAAE,mBAAmB,CAAC,CAAC,IAAI,CACjE,CAAC,SAAS,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,YAAY,EAAE,SAAS,CAAC,CAAC,CACzD,CAAC;gBACF,MAAM,QAAQ,GAAG,WAAW,IAAI,UAAU,CAAC,IAAI,CAAC,YAAY,EAAE,WAAW,CAAC,CAAC;oBACzE,CAAC,CAAC,WAAW;oBACb,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,iBAAiB;wBAClD,CAAC,CAAC,iBAAiB;wBACnB,CAAC,CAAC,YAAY,CAAC;gBAClB,KAAa,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;YACpC,CAAC;SACF,CAAC,CAAC;IACL,CAAC;IAED,MAAM,IAAI,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,OAAO,EAAE,EAAE,CAAC,CAAC;IACvD,IAAI,CAAC;QACH,MAAM,GAAG,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC;IAChD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAK,KAA+B,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;YAC3D,MAAM,GAAG,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;YAClC,MAAM,IAAI,KAAK,CACb,qBAAqB,IAAI,uEAAuE,EAChG,EAAE,KAAK,EAAE,KAAK,EAAE,CACjB,CAAC;QACJ,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,IACE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,QAAQ,CAAC,SAAS,CAAC;IACpC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,QAAQ,CAAC,SAAS,CAAC;IACpC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,QAAQ,CAAC,WAAW,CAAC,EACtC,CAAC;IACD,SAAS,EAAE,CAAC;AACd,CAAC"}
|
|
@@ -12,10 +12,10 @@ export declare class WorkflowController {
|
|
|
12
12
|
listRuns(limit?: string, offset?: string): Promise<{
|
|
13
13
|
runId: string;
|
|
14
14
|
workflowName: string;
|
|
15
|
-
status: "
|
|
15
|
+
status: "failed" | "running" | "canceled" | "completed";
|
|
16
16
|
steps: {
|
|
17
17
|
stepId: string;
|
|
18
|
-
status: "
|
|
18
|
+
status: "pending" | "failed" | "running" | "success" | "skipped";
|
|
19
19
|
output: unknown;
|
|
20
20
|
error: string | undefined;
|
|
21
21
|
startedAt: number;
|
|
@@ -29,10 +29,10 @@ export declare class WorkflowController {
|
|
|
29
29
|
getRun(id: string): Promise<{
|
|
30
30
|
runId: string;
|
|
31
31
|
workflowName: string;
|
|
32
|
-
status: "
|
|
32
|
+
status: "failed" | "running" | "canceled" | "completed";
|
|
33
33
|
steps: {
|
|
34
34
|
stepId: string;
|
|
35
|
-
status: "
|
|
35
|
+
status: "pending" | "failed" | "running" | "success" | "skipped";
|
|
36
36
|
output: unknown;
|
|
37
37
|
error: string | undefined;
|
|
38
38
|
}[];
|
|
@@ -24,10 +24,10 @@ export declare class WorkflowService implements OnModuleInit {
|
|
|
24
24
|
listRuns(limit: number, offset: number): Promise<{
|
|
25
25
|
runId: string;
|
|
26
26
|
workflowName: string;
|
|
27
|
-
status: "
|
|
27
|
+
status: "failed" | "running" | "canceled" | "completed";
|
|
28
28
|
steps: {
|
|
29
29
|
stepId: string;
|
|
30
|
-
status: "
|
|
30
|
+
status: "pending" | "failed" | "running" | "success" | "skipped";
|
|
31
31
|
output: unknown;
|
|
32
32
|
error: string | undefined;
|
|
33
33
|
startedAt: number;
|
|
@@ -41,10 +41,10 @@ export declare class WorkflowService implements OnModuleInit {
|
|
|
41
41
|
getRun(runId: string): Promise<{
|
|
42
42
|
runId: string;
|
|
43
43
|
workflowName: string;
|
|
44
|
-
status: "
|
|
44
|
+
status: "failed" | "running" | "canceled" | "completed";
|
|
45
45
|
steps: {
|
|
46
46
|
stepId: string;
|
|
47
|
-
status: "
|
|
47
|
+
status: "pending" | "failed" | "running" | "success" | "skipped";
|
|
48
48
|
output: unknown;
|
|
49
49
|
error: string | undefined;
|
|
50
50
|
}[];
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@devflow-tools/server",
|
|
3
|
-
"version": "0.
|
|
3
|
+
"version": "0.17.0",
|
|
4
4
|
"type": "module",
|
|
5
5
|
"main": "./dist/main.js",
|
|
6
6
|
"bin": {
|
|
@@ -15,15 +15,15 @@
|
|
|
15
15
|
"clean": "rm -rf dist"
|
|
16
16
|
},
|
|
17
17
|
"dependencies": {
|
|
18
|
-
"@devflow-tools/adapters": "0.
|
|
19
|
-
"@devflow-tools/benchmark": "0.
|
|
20
|
-
"@devflow-tools/context-engine": "0.
|
|
21
|
-
"@devflow-tools/database": "0.
|
|
22
|
-
"@devflow-tools/knowledge-engine": "0.
|
|
23
|
-
"@devflow-tools/memory-engine": "0.
|
|
24
|
-
"@devflow-tools/sdk": "0.
|
|
25
|
-
"@devflow-tools/telemetry": "0.
|
|
26
|
-
"@devflow-tools/workflow-engine": "0.
|
|
18
|
+
"@devflow-tools/adapters": "0.17.0",
|
|
19
|
+
"@devflow-tools/benchmark": "0.17.0",
|
|
20
|
+
"@devflow-tools/context-engine": "0.17.0",
|
|
21
|
+
"@devflow-tools/database": "0.17.0",
|
|
22
|
+
"@devflow-tools/knowledge-engine": "0.17.0",
|
|
23
|
+
"@devflow-tools/memory-engine": "0.17.0",
|
|
24
|
+
"@devflow-tools/sdk": "0.17.0",
|
|
25
|
+
"@devflow-tools/telemetry": "0.17.0",
|
|
26
|
+
"@devflow-tools/workflow-engine": "0.17.0",
|
|
27
27
|
"@fastify/static": "^7.0.4",
|
|
28
28
|
"@nestjs/common": "^10.4.0",
|
|
29
29
|
"@nestjs/core": "^10.4.0",
|
|
@@ -43,5 +43,5 @@
|
|
|
43
43
|
"dist",
|
|
44
44
|
"bin"
|
|
45
45
|
],
|
|
46
|
-
"gitHead": "
|
|
46
|
+
"gitHead": "964af33767bf232606e63d973b3a29d7d53c8119"
|
|
47
47
|
}
|