@generacy-ai/control-plane 0.0.0-preview-20260507200146

package/dist/src/services/tunnel-handler.js

@@ -0,0 +1,110 @@
+import net from 'node:net';
+export class TunnelHandler {
+    relaySend;
+    codeServerManager;
+    allowedTarget;
+    tunnels = new Map();
+    constructor(relaySend, codeServerManager, allowedTarget = '/run/code-server.sock') {
+        this.relaySend = relaySend;
+        this.codeServerManager = codeServerManager;
+        this.allowedTarget = allowedTarget;
+    }
+    async handleOpen(msg) {
+        const { tunnelId, target } = msg;
+        // FR-004: Restrict target to allowed path only
+        if (target !== this.allowedTarget) {
+            this.relaySend.send({
+                type: 'tunnel_open_ack',
+                tunnelId,
+                status: 'error',
+                error: 'invalid target',
+            });
+            return;
+        }
+        try {
+            // FR-005: Auto-start code-server if not running
+            await this.codeServerManager.start();
+            // Wait for socket with 10s timeout
+            const socket = await this.connectWithTimeout(target, 10_000);
+            // Store in map
+            this.tunnels.set(tunnelId, socket);
+            // Wire socket data → relay (base64 encode)
+            socket.on('data', (chunk) => {
+                this.relaySend.send({
+                    type: 'tunnel_data',
+                    tunnelId,
+                    data: chunk.toString('base64'),
+                });
+            });
+            // FR-007: Handle abrupt socket disconnects
+            const onSocketEnd = () => {
+                if (this.tunnels.has(tunnelId)) {
+                    this.tunnels.delete(tunnelId);
+                    this.relaySend.send({
+                        type: 'tunnel_close',
+                        tunnelId,
+                        reason: 'socket closed',
+                    });
+                }
+            };
+            socket.on('close', onSocketEnd);
+            socket.on('error', () => {
+                socket.destroy();
+                onSocketEnd();
+            });
+            // Send success ack
+            this.relaySend.send({
+                type: 'tunnel_open_ack',
+                tunnelId,
+                status: 'ok',
+            });
+        }
+        catch (err) {
+            this.relaySend.send({
+                type: 'tunnel_open_ack',
+                tunnelId,
+                status: 'error',
+                error: err instanceof Error ? err.message : String(err),
+            });
+        }
+    }
+    handleData(msg) {
+        const socket = this.tunnels.get(msg.tunnelId);
+        if (!socket)
+            return; // silently drop if tunnel not found
+        const buf = Buffer.from(msg.data, 'base64');
+        socket.write(buf);
+        // FR-006: Reset code-server idle timer
+        this.codeServerManager.touch();
+    }
+    handleClose(msg) {
+        const socket = this.tunnels.get(msg.tunnelId);
+        if (!socket)
+            return; // no-op if tunnel not found
+        this.tunnels.delete(msg.tunnelId);
+        socket.destroy();
+    }
+    cleanup() {
+        for (const [tunnelId, socket] of this.tunnels) {
+            socket.destroy();
+            this.tunnels.delete(tunnelId);
+        }
+    }
+    connectWithTimeout(socketPath, timeoutMs) {
+        return new Promise((resolve, reject) => {
+            const timer = setTimeout(() => {
+                socket.destroy();
+                reject(new Error(`Timeout connecting to ${socketPath} after ${timeoutMs}ms`));
+            }, timeoutMs);
+            const socket = net.createConnection({ path: socketPath }, () => {
+                clearTimeout(timer);
+                resolve(socket);
+            });
+            socket.on('error', (err) => {
+                clearTimeout(timer);
+                reject(err);
+            });
+        });
+    }
+}
+//# sourceMappingURL=tunnel-handler.js.map

package/dist/src/services/tunnel-handler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tunnel-handler.js","sourceRoot":"","sources":["../../../src/services/tunnel-handler.ts"],"names":[],"mappings":"AAAA,OAAO,GAAG,MAAM,UAAU,CAAC;AAsB3B,MAAM,OAAO,aAAa;IAIL;IACA;IACA;IALF,OAAO,GAA4B,IAAI,GAAG,EAAE,CAAC;IAE9D,YACmB,SAA6B,EAC7B,iBAAoC,EACpC,gBAAwB,uBAAuB;QAF/C,cAAS,GAAT,SAAS,CAAoB;QAC7B,sBAAiB,GAAjB,iBAAiB,CAAmB;QACpC,kBAAa,GAAb,aAAa,CAAkC;IAC/D,CAAC;IAEJ,KAAK,CAAC,UAAU,CAAC,GAAsB;QACrC,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,GAAG,CAAC;QAEjC,+CAA+C;QAC/C,IAAI,MAAM,KAAK,IAAI,CAAC,aAAa,EAAE,CAAC;YAClC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;gBAClB,IAAI,EAAE,iBAAiB;gBACvB,QAAQ;gBACR,MAAM,EAAE,OAAO;gBACf,KAAK,EAAE,gBAAgB;aACxB,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QAED,IAAI,CAAC;YACH,gDAAgD;YAChD,MAAM,IAAI,CAAC,iBAAiB,CAAC,KAAK,EAAE,CAAC;YAErC,mCAAmC;YACnC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;YAE7D,eAAe;YACf,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;YAEnC,2CAA2C;YAC3C,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;gBAClC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;oBAClB,IAAI,EAAE,aAAa;oBACnB,QAAQ;oBACR,IAAI,EAAE,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC;iBAC/B,CAAC,CAAC;YACL,CAAC,CAAC,CAAC;YAEH,2CAA2C;YAC3C,MAAM,WAAW,GAAG,GAAG,EAAE;gBACvB,IAAI,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;oBAC/B,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;oBAC9B,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;wBAClB,IAAI,EAAE,cAAc;wBACpB,QAAQ;wBACR,MAAM,EAAE,eAAe;qBACxB,CAAC,CAAC;gBACL,CAAC;YACH,CAAC,CAAC;YACF,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;YAChC,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;gBACtB,MAAM,CAAC,OAAO,EAAE,CAAC;gBACjB,WAAW,EAAE,CAAC;YAChB,CAAC,CAAC,CAAC;YAEH,mBAAmB;YACnB,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;gBAClB,IAAI,EAAE,iBAAiB;gBACvB,QAAQ;gBACR,MAAM,EAAE,IAAI;aACb,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;gBAClB,IAAI,EAAE,iBAAiB;gBACvB,QAAQ;gBACR,MAAM,EAAE,OAAO;gBACf,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;aACxD,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,UAAU,CAAC,GAAsB;QAC/B,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC9C,IAAI,CAAC,MAAM;YAAE,OAAO,CAAC,oCAAoC;QAEzD,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;QAC5C,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAElB,uCAAuC;QACvC,IAAI,CAAC,iBAAiB,CAAC,KAAK,EAAE,CAAC;IACjC,CAAC;IAED,WAAW,CAAC,GAAuB;QACjC,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC9C,IAAI,CAAC,MAAM;YAAE,OAAO,CAAC,4BAA4B;QAEjD,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAClC,MAAM,CAAC,OAAO,EAAE,CAAC;IACnB,CAAC;IAED,OAAO;QACL,KAAK,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YAC9C,MAAM,CAAC,OAAO,EAAE,CAAC;YACjB,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAChC,CAAC;IACH,CAAC;IAEO,kBAAkB,CAAC,UAAkB,EAAE,SAAiB;QAC9D,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACrC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;gBAC5B,MAAM,CAAC,OAAO,EAAE,CAAC;gBACjB,MAAM,CAAC,IAAI,KAAK,CAAC,yBAAyB,UAAU,UAAU,SAAS,IAAI,CAAC,CAAC,CAAC;YAChF,CAAC,EAAE,SAAS,CAAC,CAAC;YAEd,MAAM,MAAM,GAAG,GAAG,CAAC,gBAAgB,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE,GAAG,EAAE;gBAC7D,YAAY,CAAC,KAAK,CAAC,CAAC;gBACpB,OAAO,CAAC,MAAM,CAAC,CAAC;YAClB,CAAC,CAAC,CAAC;YAEH,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;gBACzB,YAAY,CAAC,KAAK,CAAC,CAAC;gBACpB,MAAM,CAAC,GAAG,CAAC,CAAC;YACd,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC;CACF"}

package/dist/src/state.d.ts

@@ -0,0 +1,8 @@
+import type { ClusterState, ClusterStatus, DeploymentMode, ClusterVariant } from './schemas.js';
+export declare function initClusterState(config: {
+    deploymentMode?: DeploymentMode;
+    variant?: ClusterVariant;
+}): void;
+export declare function updateClusterStatus(status: ClusterStatus, statusReason?: string): void;
+export declare function getClusterState(): ClusterState;
+//# sourceMappingURL=state.d.ts.map

package/dist/src/state.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"state.d.ts","sourceRoot":"","sources":["../../src/state.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,aAAa,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAgBhG,wBAAgB,gBAAgB,CAAC,MAAM,EAAE;IACvC,cAAc,CAAC,EAAE,cAAc,CAAC;IAChC,OAAO,CAAC,EAAE,cAAc,CAAC;CAC1B,GAAG,IAAI,CAOP;AAED,wBAAgB,mBAAmB,CACjC,MAAM,EAAE,aAAa,EACrB,YAAY,CAAC,EAAE,MAAM,GACpB,IAAI,CAcN;AAED,wBAAgB,eAAe,IAAI,YAAY,CAK9C"}

package/dist/src/state.js

@@ -0,0 +1,39 @@
+const VALID_TRANSITIONS = {
+    bootstrapping: ['ready', 'error'],
+    ready: ['degraded', 'error'],
+    degraded: ['ready', 'error'],
+    error: [],
+};
+let state = {
+    status: 'bootstrapping',
+    deploymentMode: 'local',
+    variant: 'cluster-base',
+    lastSeen: new Date().toISOString(),
+};
+export function initClusterState(config) {
+    state = {
+        status: 'bootstrapping',
+        deploymentMode: config.deploymentMode ?? 'local',
+        variant: config.variant ?? 'cluster-base',
+        lastSeen: new Date().toISOString(),
+    };
+}
+export function updateClusterStatus(status, statusReason) {
+    const allowed = VALID_TRANSITIONS[state.status];
+    if (!allowed.includes(status)) {
+        throw new Error(`Invalid state transition: ${state.status} → ${status}`);
+    }
+    state = {
+        ...state,
+        status,
+        lastSeen: new Date().toISOString(),
+        statusReason,
+    };
+}
+export function getClusterState() {
+    return {
+        ...state,
+        lastSeen: new Date().toISOString(),
+    };
+}
+//# sourceMappingURL=state.js.map

package/dist/src/state.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"state.js","sourceRoot":"","sources":["../../src/state.ts"],"names":[],"mappings":"AAEA,MAAM,iBAAiB,GAA2C;IAChE,aAAa,EAAE,CAAC,OAAO,EAAE,OAAO,CAAC;IACjC,KAAK,EAAE,CAAC,UAAU,EAAE,OAAO,CAAC;IAC5B,QAAQ,EAAE,CAAC,OAAO,EAAE,OAAO,CAAC;IAC5B,KAAK,EAAE,EAAE;CACV,CAAC;AAEF,IAAI,KAAK,GAAiB;IACxB,MAAM,EAAE,eAAe;IACvB,cAAc,EAAE,OAAO;IACvB,OAAO,EAAE,cAAc;IACvB,QAAQ,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;CACnC,CAAC;AAEF,MAAM,UAAU,gBAAgB,CAAC,MAGhC;IACC,KAAK,GAAG;QACN,MAAM,EAAE,eAAe;QACvB,cAAc,EAAE,MAAM,CAAC,cAAc,IAAI,OAAO;QAChD,OAAO,EAAE,MAAM,CAAC,OAAO,IAAI,cAAc;QACzC,QAAQ,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KACnC,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,mBAAmB,CACjC,MAAqB,EACrB,YAAqB;IAErB,MAAM,OAAO,GAAG,iBAAiB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAChD,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;QAC9B,MAAM,IAAI,KAAK,CACb,6BAA6B,KAAK,CAAC,MAAM,MAAM,MAAM,EAAE,CACxD,CAAC;IACJ,CAAC;IAED,KAAK,GAAG;QACN,GAAG,KAAK;QACR,MAAM;QACN,QAAQ,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QAClC,YAAY;KACb,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,eAAe;IAC7B,OAAO;QACL,GAAG,KAAK;QACR,QAAQ,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KACnC,CAAC;AACJ,CAAC"}

package/dist/src/types.d.ts

@@ -0,0 +1,12 @@
+import type http from 'node:http';
+import type { ActorContext } from './context.js';
+import type { ClusterState, ClusterStatus } from './schemas.js';
+export interface ServerConfig {
+    socketPath: string;
+}
+export type RouteHandler = (req: http.IncomingMessage, res: http.ServerResponse, actor: ActorContext, params: Record<string, string>) => Promise<void>;
+export interface ClusterStateStore {
+    getState(): ClusterState;
+    updateStatus(status: ClusterStatus, statusReason?: string): void;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/src/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AACjD,OAAO,KAAK,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAEhE,MAAM,WAAW,YAAY;IAC3B,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,MAAM,YAAY,GAAG,CACzB,GAAG,EAAE,IAAI,CAAC,eAAe,EACzB,GAAG,EAAE,IAAI,CAAC,cAAc,EACxB,KAAK,EAAE,YAAY,EACnB,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,KAC3B,OAAO,CAAC,IAAI,CAAC,CAAC;AAEnB,MAAM,WAAW,iBAAiB;IAChC,QAAQ,IAAI,YAAY,CAAC;IACzB,YAAY,CAAC,MAAM,EAAE,aAAa,EAAE,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAClE"}

package/dist/src/types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=types.js.map

package/dist/src/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/types.ts"],"names":[],"mappings":""}

package/dist/src/util/read-body.d.ts

@@ -0,0 +1,3 @@
+import http from 'node:http';
+export declare function readBody(req: http.IncomingMessage): Promise<string>;
+//# sourceMappingURL=read-body.d.ts.map

package/dist/src/util/read-body.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"read-body.d.ts","sourceRoot":"","sources":["../../../src/util/read-body.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,wBAAgB,QAAQ,CAAC,GAAG,EAAE,IAAI,CAAC,eAAe,GAAG,OAAO,CAAC,MAAM,CAAC,CAOnE"}

package/dist/src/util/read-body.js

@@ -0,0 +1,9 @@
+export function readBody(req) {
+    return new Promise((resolve, reject) => {
+        const chunks = [];
+        req.on('data', (chunk) => chunks.push(chunk));
+        req.on('end', () => resolve(Buffer.concat(chunks).toString()));
+        req.on('error', reject);
+    });
+}
+//# sourceMappingURL=read-body.js.map

package/dist/src/util/read-body.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"read-body.js","sourceRoot":"","sources":["../../../src/util/read-body.ts"],"names":[],"mappings":"AAEA,MAAM,UAAU,QAAQ,CAAC,GAAyB;IAChD,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,MAAM,GAAa,EAAE,CAAC;QAC5B,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;QACtD,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC;QAC/D,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAC1B,CAAC,CAAC,CAAC;AACL,CAAC"}

package/package.json

@@ -0,0 +1,51 @@
+{
+  "name": "@generacy-ai/control-plane",
+  "version": "0.0.0-preview-20260507200146",
+  "description": "In-cluster control-plane HTTP service over Unix socket for cloud-hosted bootstrap UI",
+  "main": "dist/src/index.js",
+  "types": "dist/src/index.d.ts",
+  "type": "module",
+  "exports": {
+    ".": {
+      "types": "./dist/src/index.d.ts",
+      "import": "./dist/src/index.js"
+    }
+  },
+  "bin": {
+    "control-plane": "./dist/bin/control-plane.js"
+  },
+  "author": "Generacy AI",
+  "license": "Apache-2.0",
+  "dependencies": {
+    "yaml": "^2.7.0",
+    "zod": "^3.23.0",
+    "@generacy-ai/credhelper": "0.0.0-preview-20260507200146"
+  },
+  "devDependencies": {
+    "@types/node": "^20.14.0",
+    "typescript": "^5.4.5",
+    "vitest": "^4.0.18"
+  },
+  "engines": {
+    "node": ">=20.0.0"
+  },
+  "files": [
+    "dist",
+    "README.md"
+  ],
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/generacy-ai/generacy.git",
+    "directory": "packages/control-plane"
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "scripts": {
+    "build": "tsc",
+    "dev": "tsc --watch",
+    "test": "vitest run",
+    "test:watch": "vitest",
+    "clean": "rm -rf dist"
+  }
+}