@exreve/exk 1.0.44 → 1.0.46

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
@@ -0,0 +1,279 @@
1
+ /**
2
+ * Cloudflared Handlers Module
3
+ *
4
+ * Handles cloudflared:check, cloudflared:sync, cloudflared:login,
5
+ * cloudflared:regenerate operations.
6
+ */
7
+ import fs from 'fs/promises';
8
+ import path from 'path';
9
+ import os from 'os';
10
+ import { spawn, execSync } from 'child_process';
11
+ export function registerCloudflaredHandlers(socket, foreground) {
12
+ socket.on('cloudflared:check:request', async () => {
13
+ try {
14
+ let installed = false;
15
+ let hasCert = false;
16
+ try {
17
+ execSync('which cloudflared', { stdio: 'ignore' });
18
+ installed = true;
19
+ const certPath = path.join(os.homedir(), '.cloudflared', 'cert.pem');
20
+ try {
21
+ const stats = await fs.stat(certPath);
22
+ hasCert = stats.isFile();
23
+ if (foreground && hasCert) {
24
+ console.log(`✓ Found cert.pem at ${certPath}`);
25
+ }
26
+ }
27
+ catch (err) {
28
+ hasCert = false;
29
+ if (foreground) {
30
+ console.log(`✗ cert.pem not found at ${certPath}: ${err.message}`);
31
+ }
32
+ }
33
+ }
34
+ catch {
35
+ installed = false;
36
+ }
37
+ socket.emit('cloudflared:check:response', { installed, hasCert });
38
+ if (foreground) {
39
+ console.log(`Cloudflared check: installed=${installed}, hasCert=${hasCert}`);
40
+ }
41
+ }
42
+ catch (error) {
43
+ socket.emit('cloudflared:check:response', { installed: false, hasCert: false });
44
+ }
45
+ });
46
+ socket.on('cloudflared:sync:request', async () => {
47
+ try {
48
+ const certPath = path.join(os.homedir(), '.cloudflared', 'cert.pem');
49
+ if (foreground) {
50
+ console.log(`Syncing credentials from ${certPath}`);
51
+ }
52
+ const certContent = await fs.readFile(certPath, 'utf-8');
53
+ const tokenMatch = certContent.match(/-----BEGIN ARGO TUNNEL TOKEN-----\s*([\s\S]*?)\s*-----END ARGO TUNNEL TOKEN-----/);
54
+ if (tokenMatch && tokenMatch[1]) {
55
+ const tokenBase64 = tokenMatch[1].replace(/\s/g, '');
56
+ const tokenJson = Buffer.from(tokenBase64, 'base64').toString('utf-8');
57
+ const tokenData = JSON.parse(tokenJson);
58
+ const apiToken = tokenData.apiToken;
59
+ const accountId = tokenData.accountID;
60
+ const zoneId = tokenData.zoneID;
61
+ if (foreground) {
62
+ console.log(`✓ Extracted credentials: accountId=${accountId}, zoneId=${zoneId}`);
63
+ }
64
+ socket.emit('cloudflared:sync:complete', {
65
+ accountId,
66
+ accountName: undefined,
67
+ apiToken,
68
+ zoneId
69
+ });
70
+ }
71
+ else {
72
+ const error = 'Failed to extract token from cert.pem';
73
+ if (foreground) {
74
+ console.error(`✗ ${error}`);
75
+ }
76
+ socket.emit('cloudflared:sync:error', { error });
77
+ }
78
+ }
79
+ catch (error) {
80
+ const errorMsg = `Failed to read cert.pem: ${error.message}`;
81
+ if (foreground) {
82
+ console.error(`✗ ${errorMsg}`);
83
+ }
84
+ socket.emit('cloudflared:sync:error', { error: errorMsg });
85
+ }
86
+ });
87
+ socket.on('cloudflared:login:request', async () => {
88
+ try {
89
+ // Check if cloudflared is installed
90
+ try {
91
+ execSync('which cloudflared', { stdio: 'ignore' });
92
+ }
93
+ catch {
94
+ socket.emit('cloudflared:login:error', { error: 'cloudflared is not installed' });
95
+ return;
96
+ }
97
+ const loginProcess = spawn('cloudflared', ['tunnel', 'login'], {
98
+ stdio: ['ignore', 'pipe', 'pipe']
99
+ });
100
+ let stdout = '';
101
+ let stderr = '';
102
+ let urlEmitted = false;
103
+ let alreadyLoggedIn = false;
104
+ let certPath = null;
105
+ const extractCertPath = (text) => {
106
+ const pathMatch = text.match(/existing certificate at\s+([^\s]+)/i) ||
107
+ text.match(/certificate at\s+([^\s]+)/i) ||
108
+ text.match(/cert\.pem.*?at\s+([^\s]+)/i);
109
+ return pathMatch ? pathMatch[1] : null;
110
+ };
111
+ const extractLoginUrl = (text) => {
112
+ const urlPatterns = [
113
+ /https:\/\/dash\.cloudflare\.com\/argotunnel[^\s\)]+/g,
114
+ /https:\/\/[^\s\)]+cloudflareaccess\.org[^\s\)]+/g,
115
+ /https:\/\/[^\s\)]+cloudflare\.com[^\s\)]+/g
116
+ ];
117
+ for (const pattern of urlPatterns) {
118
+ const matches = text.match(pattern);
119
+ if (matches && matches.length > 0) {
120
+ return matches[0];
121
+ }
122
+ }
123
+ return null;
124
+ };
125
+ loginProcess.stdout.on('data', (data) => {
126
+ const text = data.toString();
127
+ stdout += text;
128
+ if (text.includes('existing certificate') || text.includes('cert.pem which login would overwrite')) {
129
+ alreadyLoggedIn = true;
130
+ const extractedPath = extractCertPath(text);
131
+ if (extractedPath) {
132
+ certPath = extractedPath;
133
+ }
134
+ }
135
+ if (!alreadyLoggedIn && !urlEmitted) {
136
+ const url = extractLoginUrl(text);
137
+ if (url) {
138
+ urlEmitted = true;
139
+ socket.emit('cloudflared:login:url', { loginUrl: url });
140
+ }
141
+ }
142
+ });
143
+ loginProcess.stderr.on('data', (data) => {
144
+ const text = data.toString();
145
+ stderr += text;
146
+ if (text.includes('existing certificate') || text.includes('cert.pem which login would overwrite')) {
147
+ alreadyLoggedIn = true;
148
+ const extractedPath = extractCertPath(text);
149
+ if (extractedPath) {
150
+ certPath = extractedPath;
151
+ }
152
+ }
153
+ if (!alreadyLoggedIn && !urlEmitted) {
154
+ const url = extractLoginUrl(text);
155
+ if (url) {
156
+ urlEmitted = true;
157
+ socket.emit('cloudflared:login:url', { loginUrl: url });
158
+ }
159
+ }
160
+ });
161
+ loginProcess.on('close', async (code) => {
162
+ if (alreadyLoggedIn && certPath) {
163
+ // Already logged in - extract credentials from existing cert
164
+ try {
165
+ if (foreground) {
166
+ console.log(`Already logged in, extracting credentials from ${certPath}`);
167
+ }
168
+ const certContent = await fs.readFile(certPath, 'utf-8');
169
+ const tokenMatch = certContent.match(/-----BEGIN ARGO TUNNEL TOKEN-----\s*([\s\S]*?)\s*-----END ARGO TUNNEL TOKEN-----/);
170
+ if (tokenMatch && tokenMatch[1]) {
171
+ const tokenBase64 = tokenMatch[1].replace(/\s/g, '');
172
+ const tokenJson = Buffer.from(tokenBase64, 'base64').toString('utf-8');
173
+ const tokenData = JSON.parse(tokenJson);
174
+ if (foreground) {
175
+ console.log(`✓ Extracted credentials from existing cert`);
176
+ }
177
+ socket.emit('cloudflared:login:complete', {
178
+ accountId: tokenData.accountID,
179
+ accountName: undefined,
180
+ apiToken: tokenData.apiToken,
181
+ zoneId: tokenData.zoneID
182
+ });
183
+ }
184
+ else {
185
+ const error = 'Failed to extract token from existing cert.pem';
186
+ if (foreground) {
187
+ console.error(`✗ ${error}`);
188
+ }
189
+ socket.emit('cloudflared:login:error', { error });
190
+ }
191
+ }
192
+ catch (error) {
193
+ const errorMsg = `Failed to read cert.pem: ${error.message}`;
194
+ if (foreground) {
195
+ console.error(`✗ ${errorMsg}`);
196
+ }
197
+ socket.emit('cloudflared:login:error', { error: errorMsg });
198
+ }
199
+ }
200
+ else if (code === 0 && !alreadyLoggedIn) {
201
+ // Login completed successfully - wait a moment then extract credentials
202
+ if (foreground) {
203
+ console.log('Login completed, extracting credentials...');
204
+ }
205
+ setTimeout(async () => {
206
+ try {
207
+ const certFilePath = path.join(os.homedir(), '.cloudflared', 'cert.pem');
208
+ const certContent = await fs.readFile(certFilePath, 'utf-8');
209
+ const tokenMatch = certContent.match(/-----BEGIN ARGO TUNNEL TOKEN-----\s*([\s\S]*?)\s*-----END ARGO TUNNEL TOKEN-----/);
210
+ if (tokenMatch && tokenMatch[1]) {
211
+ const tokenBase64 = tokenMatch[1].replace(/\s/g, '');
212
+ const tokenJson = Buffer.from(tokenBase64, 'base64').toString('utf-8');
213
+ const tokenData = JSON.parse(tokenJson);
214
+ if (foreground) {
215
+ console.log(`✓ Extracted credentials after login`);
216
+ }
217
+ socket.emit('cloudflared:login:complete', {
218
+ accountId: tokenData.accountID,
219
+ accountName: undefined,
220
+ apiToken: tokenData.apiToken,
221
+ zoneId: tokenData.zoneID
222
+ });
223
+ }
224
+ else {
225
+ const error = 'Failed to extract token from cert.pem after login';
226
+ if (foreground) {
227
+ console.error(`✗ ${error}`);
228
+ }
229
+ socket.emit('cloudflared:login:error', { error });
230
+ }
231
+ }
232
+ catch (error) {
233
+ const errorMsg = `Failed to read cert.pem after login: ${error.message}`;
234
+ if (foreground) {
235
+ console.error(`✗ ${errorMsg}`);
236
+ }
237
+ socket.emit('cloudflared:login:error', { error: errorMsg });
238
+ }
239
+ }, 1000);
240
+ }
241
+ else if (!alreadyLoggedIn) {
242
+ const error = `Login failed with code ${code}: ${stderr || stdout}`;
243
+ if (foreground) {
244
+ console.error(`✗ ${error}`);
245
+ }
246
+ socket.emit('cloudflared:login:error', { error });
247
+ }
248
+ });
249
+ loginProcess.on('error', (error) => {
250
+ socket.emit('cloudflared:login:error', { error: error.message });
251
+ });
252
+ }
253
+ catch (error) {
254
+ socket.emit('cloudflared:login:error', { error: error.message });
255
+ }
256
+ });
257
+ socket.on('cloudflared:regenerate:request', async () => {
258
+ try {
259
+ const certPath = path.join(os.homedir(), '.cloudflared', 'cert.pem');
260
+ // Delete existing cert.pem
261
+ try {
262
+ await fs.unlink(certPath);
263
+ if (foreground) {
264
+ console.log(`✓ Deleted existing cert.pem`);
265
+ }
266
+ }
267
+ catch (error) {
268
+ if (foreground && error.code !== 'ENOENT') {
269
+ console.log(`Note: Could not delete cert.pem: ${error.message}`);
270
+ }
271
+ }
272
+ // Emit success - frontend will then trigger login
273
+ socket.emit('cloudflared:regenerate:complete', {});
274
+ }
275
+ catch (error) {
276
+ socket.emit('cloudflared:regenerate:error', { error: error.message });
277
+ }
278
+ });
279
+ }
@@ -0,0 +1,193 @@
1
+ /**
2
+ * Container Handlers Module
3
+ *
4
+ * Handles container:check, container:list, container:start,
5
+ * container:stop, container:remove, container:logs operations.
6
+ */
7
+ import path from 'path';
8
+ import { execSync } from 'child_process';
9
+ function getContainerRuntime() {
10
+ try {
11
+ execSync('which docker', { stdio: 'ignore' });
12
+ return 'docker';
13
+ }
14
+ catch {
15
+ try {
16
+ execSync('which podman', { stdio: 'ignore' });
17
+ return 'podman';
18
+ }
19
+ catch {
20
+ return null;
21
+ }
22
+ }
23
+ }
24
+ export function registerContainerHandlers(socket, foreground, cliDir) {
25
+ socket.on('container:check:request', async () => {
26
+ try {
27
+ let enabled = false;
28
+ let runtime;
29
+ let version = '';
30
+ try {
31
+ execSync('which docker', { stdio: 'ignore' });
32
+ runtime = 'docker';
33
+ version = execSync('docker --version', { encoding: 'utf-8' }).trim();
34
+ enabled = true;
35
+ }
36
+ catch {
37
+ try {
38
+ execSync('which podman', { stdio: 'ignore' });
39
+ runtime = 'podman';
40
+ version = execSync('podman --version', { encoding: 'utf-8' }).trim();
41
+ enabled = true;
42
+ }
43
+ catch {
44
+ enabled = false;
45
+ }
46
+ }
47
+ socket.emit('container:check:response', { enabled, runtime, version });
48
+ if (foreground) {
49
+ console.log(`Container runtime check: ${enabled ? `${runtime} (${version})` : 'Not found'}`);
50
+ }
51
+ }
52
+ catch (error) {
53
+ socket.emit('container:check:response', { enabled: false, runtime: undefined, version: '' });
54
+ }
55
+ });
56
+ socket.on('container:list:request', async () => {
57
+ try {
58
+ const runtime = getContainerRuntime();
59
+ if (!runtime) {
60
+ socket.emit('container:list:response', { success: false, error: 'No container runtime found' });
61
+ return;
62
+ }
63
+ const output = execSync(`${runtime} ps -a --format "{{json .}}"`, { encoding: 'utf-8', maxBuffer: 10 * 1024 * 1024 });
64
+ const containers = output.trim().split('\n').filter(Boolean).map(line => {
65
+ try {
66
+ const c = JSON.parse(line);
67
+ const ports = [];
68
+ if (c.Ports) {
69
+ const portMatches = c.Ports.match(/(\d+)->(\d+)/g);
70
+ if (portMatches) {
71
+ portMatches.forEach((p) => {
72
+ const [host, container] = p.split('->').map(Number);
73
+ ports.push({ host, container });
74
+ });
75
+ }
76
+ }
77
+ return {
78
+ containerId: c.ID,
79
+ name: c.Names.replace(/^\//, ''),
80
+ image: c.Image,
81
+ status: c.State === 'running' ? 'running' : c.State === 'paused' ? 'paused' : c.Status === 'exited' ? 'exited' : 'stopped',
82
+ ports,
83
+ createdAt: new Date(c.CreatedAt).toISOString()
84
+ };
85
+ }
86
+ catch {
87
+ return null;
88
+ }
89
+ }).filter(Boolean);
90
+ socket.emit('container:list:response', { success: true, containers });
91
+ }
92
+ catch (error) {
93
+ socket.emit('container:list:response', { success: false, error: error.message });
94
+ }
95
+ });
96
+ socket.on('container:start:request', async (data) => {
97
+ try {
98
+ const runtime = getContainerRuntime();
99
+ if (!runtime) {
100
+ socket.emit('container:start:response', { success: false, error: 'No container runtime found' });
101
+ return;
102
+ }
103
+ const { name, image, ports = [], env = {}, runAsRoot = false } = data;
104
+ let cmd = `${runtime} run -d --name ${name}`;
105
+ if (!runAsRoot) {
106
+ cmd += ' --user 1000:1000';
107
+ }
108
+ cmd += ' --memory=8g';
109
+ cmd += ` -v "${cliDir}:/opt/ttc:ro"`;
110
+ const entrypointScript = path.join(cliDir, 'container-entrypoint.sh');
111
+ cmd += ` -v "${entrypointScript}:/entrypoint.sh:ro"`;
112
+ ports.forEach(p => {
113
+ cmd += ` -p ${p.host}:${p.container}`;
114
+ });
115
+ Object.entries(env).forEach(([k, v]) => {
116
+ const escapedValue = String(v).replace(/"/g, '\\"');
117
+ cmd += ` -e ${k}="${escapedValue}"`;
118
+ });
119
+ cmd += ` -e CONTAINER_NAME="${name}"`;
120
+ cmd += ` -e HOSTNAME="${name}"`;
121
+ cmd += ` --entrypoint /bin/sh ${image} /entrypoint.sh`;
122
+ if (foreground) {
123
+ console.log(`Starting container: ${cmd}`);
124
+ }
125
+ try {
126
+ execSync(`${runtime} pull ${image}`, { stdio: 'ignore' });
127
+ }
128
+ catch {
129
+ // Pull failed, but might already exist locally
130
+ }
131
+ const output = execSync(cmd, { encoding: 'utf-8', stdio: 'pipe' });
132
+ const containerId = output.trim();
133
+ socket.emit('container:start:response', { success: true, containerId });
134
+ if (foreground) {
135
+ console.log(`✓ Container started: ${containerId}`);
136
+ }
137
+ }
138
+ catch (error) {
139
+ socket.emit('container:start:response', { success: false, error: error.message });
140
+ }
141
+ });
142
+ socket.on('container:stop:request', async (data) => {
143
+ try {
144
+ const runtime = getContainerRuntime();
145
+ if (!runtime) {
146
+ socket.emit('container:stop:response', { success: false, error: 'No container runtime found' });
147
+ return;
148
+ }
149
+ const { containerId } = data;
150
+ execSync(`${runtime} stop ${containerId}`, { stdio: 'ignore' });
151
+ socket.emit('container:stop:response', { success: true });
152
+ if (foreground) {
153
+ console.log(`✓ Container stopped: ${containerId}`);
154
+ }
155
+ }
156
+ catch (error) {
157
+ socket.emit('container:stop:response', { success: false, error: error.message });
158
+ }
159
+ });
160
+ socket.on('container:remove:request', async (data) => {
161
+ try {
162
+ const runtime = getContainerRuntime();
163
+ if (!runtime) {
164
+ socket.emit('container:remove:response', { success: false, error: 'No container runtime found' });
165
+ return;
166
+ }
167
+ const { containerId } = data;
168
+ execSync(`${runtime} rm -f ${containerId}`, { stdio: 'ignore' });
169
+ socket.emit('container:remove:response', { success: true });
170
+ if (foreground) {
171
+ console.log(`✓ Container removed: ${containerId}`);
172
+ }
173
+ }
174
+ catch (error) {
175
+ socket.emit('container:remove:response', { success: false, error: error.message });
176
+ }
177
+ });
178
+ socket.on('container:logs:request', async (data) => {
179
+ try {
180
+ const runtime = getContainerRuntime();
181
+ if (!runtime) {
182
+ socket.emit('container:logs:response', { success: false, error: 'No container runtime found' });
183
+ return;
184
+ }
185
+ const { containerId, lines = 100 } = data;
186
+ const logs = execSync(`${runtime} logs --tail ${lines} ${containerId}`, { encoding: 'utf-8', maxBuffer: 10 * 1024 * 1024 });
187
+ socket.emit('container:logs:response', { success: true, logs });
188
+ }
189
+ catch (error) {
190
+ socket.emit('container:logs:response', { success: false, error: error.message });
191
+ }
192
+ });
193
+ }
@@ -0,0 +1,86 @@
1
+ /**
2
+ * Filesystem Handlers Module
3
+ *
4
+ * Handles fs:list, fs:write, fs:read operations on the CLI device.
5
+ */
6
+ import fs from 'fs/promises';
7
+ import path from 'path';
8
+ export function registerFsHandlers(socket) {
9
+ socket.on('fs:list', async (data) => {
10
+ try {
11
+ const { dirPath } = data;
12
+ if (!dirPath) {
13
+ socket.emit('fs:list:response', { success: false, error: 'dirPath is required' });
14
+ return;
15
+ }
16
+ const entries = [];
17
+ try {
18
+ const dirents = await fs.readdir(dirPath, { withFileTypes: true });
19
+ for (const dirent of dirents) {
20
+ if (dirent.name.startsWith('.'))
21
+ continue;
22
+ const fullPath = path.join(dirPath, dirent.name);
23
+ entries.push({
24
+ name: dirent.name,
25
+ path: fullPath,
26
+ isDir: dirent.isDirectory()
27
+ });
28
+ }
29
+ entries.sort((a, b) => {
30
+ if (a.isDir && !b.isDir)
31
+ return -1;
32
+ if (!a.isDir && b.isDir)
33
+ return 1;
34
+ return a.name.localeCompare(b.name);
35
+ });
36
+ socket.emit('fs:list:response', { success: true, entries });
37
+ }
38
+ catch (err) {
39
+ socket.emit('fs:list:response', { success: false, error: err.message });
40
+ }
41
+ }
42
+ catch (error) {
43
+ socket.emit('fs:list:response', { success: false, error: error.message });
44
+ }
45
+ });
46
+ socket.on('fs:write', async (data) => {
47
+ try {
48
+ const { filePath, content, encoding = 'utf-8' } = data;
49
+ if (!filePath) {
50
+ socket.emit('fs:write:response', { success: false, error: 'filePath is required' });
51
+ return;
52
+ }
53
+ try {
54
+ const dir = path.dirname(filePath);
55
+ await fs.mkdir(dir, { recursive: true });
56
+ await fs.writeFile(filePath, content, encoding);
57
+ socket.emit('fs:write:response', { success: true });
58
+ }
59
+ catch (err) {
60
+ socket.emit('fs:write:response', { success: false, error: err.message });
61
+ }
62
+ }
63
+ catch (error) {
64
+ socket.emit('fs:write:response', { success: false, error: error.message });
65
+ }
66
+ });
67
+ socket.on('fs:read', async (data) => {
68
+ try {
69
+ const { filePath, encoding = 'utf-8' } = data;
70
+ if (!filePath) {
71
+ socket.emit('fs:read:response', { success: false, error: 'filePath is required' });
72
+ return;
73
+ }
74
+ try {
75
+ const content = await fs.readFile(filePath, encoding);
76
+ socket.emit('fs:read:response', { success: true, content });
77
+ }
78
+ catch (err) {
79
+ socket.emit('fs:read:response', { success: false, error: err.message });
80
+ }
81
+ }
82
+ catch (error) {
83
+ socket.emit('fs:read:response', { success: false, error: error.message });
84
+ }
85
+ });
86
+ }