@goodandready/dsh-remote-workspace 0.3.0 → 0.3.2

package/lib/routes/profiles.js

@@ -0,0 +1,141 @@
+import { writeJson, readBody, isTrustedSettingsRequest } from './helpers.js';
+import { SshConfigParser } from '../ssh-config-parser.js';
+
+export function registerProfileRoutes(sctx, webServer, { store, sshService, alertService, tunnelService }) {
+  // 1. GET /dsh-remote-workspace/state
+  sctx.effect(() => webServer.register({
+    kind: 'exact',
+    path: '/dsh-remote-workspace/state',
+    handler: async (req, res) => {
+      if (req.method !== 'GET') return writeJson(res, 405, { ok: false, error: 'GET only' });
+      try {
+        const profiles = store.getProfiles();
+        const activeId = store.getActiveId() || (profiles[0]?.id || '');
+        const tunnels = tunnelService.listActiveTunnels();
+        const autoSync = store.isAutoSyncEnabled ? store.isAutoSyncEnabled() : false;
+        const alerts = alertService ? alertService.getAlerts() : [];
+        const sanitized = profiles.map((p) => (store.vault ? store.vault.sanitizeProfile(p) : p));
+        writeJson(res, 200, { ok: true, activeId, profiles: sanitized, tunnels, autoSync, alerts });
+      } catch (err) {
+        writeJson(res, 500, { ok: false, error: err.message });
+      }
+    }
+  }), 'dsh-remote-workspace: /state');
+
+  // 2. POST /dsh-remote-workspace/profiles/save
+  sctx.effect(() => webServer.register({
+    kind: 'exact',
+    path: '/dsh-remote-workspace/profiles/save',
+    handler: async (req, res) => {
+      if (req.method !== 'POST') return writeJson(res, 405, { ok: false, error: 'POST only' });
+      if (!isTrustedSettingsRequest(req)) return writeJson(res, 403, { ok: false, error: 'Forbidden' });
+      try {
+        const profile = await readBody(req);
+        if (!profile.id || !profile.host) {
+          return writeJson(res, 400, { ok: false, error: 'ID and Host are required' });
+        }
+        sshService.invalidate(profile.id);
+        await store.saveProfile(profile);
+        const sanitized = store.vault ? store.vault.sanitizeProfile(profile) : profile;
+        writeJson(res, 200, { ok: true, profile: sanitized });
+      } catch (err) {
+        writeJson(res, 500, { ok: false, error: err.message });
+      }
+    }
+  }), 'dsh-remote-workspace: /profiles/save');
+
+  // 3. POST /dsh-remote-workspace/profiles/delete
+  sctx.effect(() => webServer.register({
+    kind: 'exact',
+    path: '/dsh-remote-workspace/profiles/delete',
+    handler: async (req, res) => {
+      if (req.method !== 'POST') return writeJson(res, 405, { ok: false, error: 'POST only' });
+      if (!isTrustedSettingsRequest(req)) return writeJson(res, 403, { ok: false, error: 'Forbidden' });
+      try {
+        const { id } = await readBody(req);
+        if (!id) return writeJson(res, 400, { ok: false, error: 'ID is required' });
+        sshService.disconnect(id);
+        await store.deleteProfile(id);
+        writeJson(res, 200, { ok: true });
+      } catch (err) {
+        writeJson(res, 500, { ok: false, error: err.message });
+      }
+    }
+  }), 'dsh-remote-workspace: /profiles/delete');
+
+  // 4. POST /dsh-remote-workspace/profiles/active
+  sctx.effect(() => webServer.register({
+    kind: 'exact',
+    path: '/dsh-remote-workspace/profiles/active',
+    handler: async (req, res) => {
+      if (req.method !== 'POST') return writeJson(res, 405, { ok: false, error: 'POST only' });
+      if (!isTrustedSettingsRequest(req)) return writeJson(res, 403, { ok: false, error: 'Forbidden' });
+      try {
+        const { id } = await readBody(req);
+        if (!id) return writeJson(res, 400, { ok: false, error: 'ID is required' });
+        await store.setActiveId(id);
+        writeJson(res, 200, { ok: true, activeId: id });
+      } catch (err) {
+        writeJson(res, 500, { ok: false, error: err.message });
+      }
+    }
+  }), 'dsh-remote-workspace: /profiles/active');
+
+  // 5. POST /dsh-remote-workspace/profiles/import-ssh-config
+  sctx.effect(() => webServer.register({
+    kind: 'exact',
+    path: '/dsh-remote-workspace/profiles/import-ssh-config',
+    handler: async (req, res) => {
+      if (req.method !== 'POST') return writeJson(res, 405, { ok: false, error: 'POST only' });
+      if (!isTrustedSettingsRequest(req)) return writeJson(res, 403, { ok: false, error: 'Forbidden' });
+      try {
+        const { content } = await readBody(req);
+        if (!content || typeof content !== 'string') {
+          return writeJson(res, 400, { ok: false, error: 'SSH config content is required' });
+        }
+        const importedProfiles = SshConfigParser.parse(content);
+        for (const p of importedProfiles) {
+          await store.saveProfile(p);
+        }
+        writeJson(res, 200, { ok: true, count: importedProfiles.length, profiles: importedProfiles });
+      } catch (err) {
+        writeJson(res, 500, { ok: false, error: err.message });
+      }
+    }
+  }), 'dsh-remote-workspace: /profiles/import-ssh-config');
+
+  // 6. POST /dsh-remote-workspace/test
+  sctx.effect(() => webServer.register({
+    kind: 'exact',
+    path: '/dsh-remote-workspace/test',
+    handler: async (req, res) => {
+      if (req.method !== 'POST') return writeJson(res, 405, { ok: false, error: 'POST only' });
+      if (!isTrustedSettingsRequest(req)) return writeJson(res, 403, { ok: false, error: 'Forbidden' });
+      try {
+        const profile = await readBody(req);
+        if (!profile.host) return writeJson(res, 400, { ok: false, error: 'Host is required' });
+
+        const existing = store.getProfile(profile.id);
+        const effectiveProfile = {
+          ...profile,
+          password: profile.password && profile.password !== '••••••••'
+            ? profile.password
+            : (existing?.password || ''),
+          privateKey: profile.privateKey && profile.privateKey !== '••••••••'
+            ? profile.privateKey
+            : (existing?.privateKey || ''),
+          passphrase: profile.passphrase && profile.passphrase !== '••••••••'
+            ? profile.passphrase
+            : (existing?.passphrase || '')
+        };
+
+        const result = await sshService.testConnection(effectiveProfile);
+        const latencyMs = result.latency !== undefined ? result.latency : (result.latencyMs ?? 0);
+        const remoteOs = result.os !== undefined ? result.os : (result.remoteOs ?? 'Linux/Unix');
+        writeJson(res, 200, { ok: true, latency: latencyMs, latencyMs, os: remoteOs, remoteOs });
+      } catch (err) {
+        writeJson(res, 200, { ok: false, error: err.message });
+      }
+    }
+  }), 'dsh-remote-workspace: /test');
+}

package/lib/routes/sync.js

@@ -0,0 +1,52 @@
+import { writeJson, readBody, isTrustedSettingsRequest } from './helpers.js';
+
+export function registerSyncRoutes(sctx, webServer, { mirrorSync, tarSyncService, watcherService, store }) {
+  // 17. POST /dsh-remote-workspace/sync
+  sctx.effect(() => webServer.register({
+    kind: 'exact',
+    path: '/dsh-remote-workspace/sync',
+    handler: async (req, res) => {
+      if (req.method !== 'POST') return writeJson(res, 405, { ok: false, error: 'POST only' });
+      if (!isTrustedSettingsRequest(req)) return writeJson(res, 403, { ok: false, error: 'Forbidden' });
+      try {
+        const { profileId, direction, force, mode } = await readBody(req);
+        const profile = (profileId ? store.getProfile(profileId) : null) || store.getActiveProfile();
+        if (!profile) return writeJson(res, 404, { ok: false, error: 'Profile not found' });
+        if (!profile.remoteWorkspace || !profile.localMirrorPath) {
+          return writeJson(res, 400, { ok: false, error: 'Both remoteWorkspace and localMirrorPath must be configured' });
+        }
+
+        if (mode === 'tarball' && tarSyncService) {
+          const resTar = direction === 'push'
+            ? await tarSyncService.pushTar(profile, profile.localMirrorPath, profile.remoteWorkspace)
+            : await tarSyncService.pullTar(profile, profile.remoteWorkspace, profile.localMirrorPath);
+          return writeJson(res, 200, { ok: true, ...resTar });
+        }
+
+        const resSync = direction === 'push'
+          ? await mirrorSync.push(profile, profile.localMirrorPath, profile.remoteWorkspace, Boolean(force))
+          : await mirrorSync.pull(profile, profile.remoteWorkspace, profile.localMirrorPath);
+        writeJson(res, 200, { ok: resSync.success, ...resSync });
+      } catch (err) {
+        writeJson(res, 500, { ok: false, error: err.message });
+      }
+    }
+  }), 'dsh-remote-workspace: /sync');
+
+  // 25. POST /dsh-remote-workspace/watcher/toggle
+  sctx.effect(() => webServer.register({
+    kind: 'exact',
+    path: '/dsh-remote-workspace/watcher/toggle',
+    handler: async (req, res) => {
+      if (req.method !== 'POST') return writeJson(res, 405, { ok: false, error: 'POST only' });
+      if (!isTrustedSettingsRequest(req)) return writeJson(res, 403, { ok: false, error: 'Forbidden' });
+      try {
+        const { enabled } = await readBody(req);
+        await store.setAutoSyncEnabled(Boolean(enabled));
+        writeJson(res, 200, { ok: true, autoSync: store.isAutoSyncEnabled() });
+      } catch (err) {
+        writeJson(res, 500, { ok: false, error: err.message });
+      }
+    }
+  }), 'dsh-remote-workspace: /watcher/toggle');
+}

package/lib/routes/terminal.js

@@ -0,0 +1,103 @@
+import { writeJson, readBody, isTrustedSettingsRequest } from './helpers.js';
+
+export function registerTerminalRoutes(sctx, webServer, { sshService, store }) {
+  // 13. POST /dsh-remote-workspace/terminal/create
+  sctx.effect(() => webServer.register({
+    kind: 'exact',
+    path: '/dsh-remote-workspace/terminal/create',
+    handler: async (req, res) => {
+      if (req.method !== 'POST') return writeJson(res, 405, { ok: false, error: 'POST only' });
+      if (!isTrustedSettingsRequest(req)) return writeJson(res, 403, { ok: false, error: 'Forbidden' });
+      try {
+        const { profileId, cols, rows } = await readBody(req);
+        const profile = store.getProfile(profileId);
+        if (!profile) return writeJson(res, 404, { ok: false, error: 'Profile not found' });
+        const session = await sshService.createTerminalSession(profile, cols || 80, rows || 24);
+        writeJson(res, 200, { ok: true, sessionId: session.id });
+      } catch (err) {
+        writeJson(res, 500, { ok: false, error: err.message });
+      }
+    }
+  }), 'dsh-remote-workspace: /terminal/create');
+
+  // 14. POST /dsh-remote-workspace/terminal/input
+  sctx.effect(() => webServer.register({
+    kind: 'exact',
+    path: '/dsh-remote-workspace/terminal/input',
+    handler: async (req, res) => {
+      if (req.method !== 'POST') return writeJson(res, 405, { ok: false, error: 'POST only' });
+      if (!isTrustedSettingsRequest(req)) return writeJson(res, 403, { ok: false, error: 'Forbidden' });
+      try {
+        const { sessionId, data, resize } = await readBody(req);
+        const session = sshService.getTerminalSession(sessionId);
+        if (!session) return writeJson(res, 404, { ok: false, error: 'Session not found' });
+        if (resize && typeof resize.cols === 'number' && typeof resize.rows === 'number') {
+          session.resize(resize.cols, resize.rows);
+        }
+        if (typeof data === 'string') {
+          session.write(data);
+        }
+        writeJson(res, 200, { ok: true });
+      } catch (err) {
+        writeJson(res, 500, { ok: false, error: err.message });
+      }
+    }
+  }), 'dsh-remote-workspace: /terminal/input');
+
+  // 15. GET /dsh-remote-workspace/terminal/stream (SSE)
+  sctx.effect(() => webServer.register({
+    kind: 'exact',
+    path: '/dsh-remote-workspace/terminal/stream',
+    handler: async (req, res) => {
+      if (req.method !== 'GET') return writeJson(res, 405, { ok: false, error: 'GET only' });
+      try {
+        const url = new URL(req.url, 'http://localhost');
+        const sessionId = url.searchParams.get('sessionId');
+        const session = sshService.getTerminalSession(sessionId);
+        if (!session) return writeJson(res, 404, { ok: false, error: 'Session not found' });
+
+        res.writeHead(200, {
+          'Content-Type': 'text/event-stream',
+          'Cache-Control': 'no-cache',
+          Connection: 'keep-alive'
+        });
+
+        if (session.buffer.length > 0) {
+          res.write(`data: ${JSON.stringify(session.buffer.join(''))}\n\n`);
+        }
+
+        const sub = (chunk) => {
+          try {
+            res.write(`data: ${JSON.stringify(chunk)}\n\n`);
+          } catch (e) {
+            session.subscribers.delete(sub);
+          }
+        };
+        session.subscribers.add(sub);
+
+        req.on('close', () => {
+          session.subscribers.delete(sub);
+        });
+      } catch (err) {
+        writeJson(res, 500, { ok: false, error: err.message });
+      }
+    }
+  }), 'dsh-remote-workspace: /terminal/stream');
+
+  // 16. POST /dsh-remote-workspace/terminal/close
+  sctx.effect(() => webServer.register({
+    kind: 'exact',
+    path: '/dsh-remote-workspace/terminal/close',
+    handler: async (req, res) => {
+      if (req.method !== 'POST') return writeJson(res, 405, { ok: false, error: 'POST only' });
+      if (!isTrustedSettingsRequest(req)) return writeJson(res, 403, { ok: false, error: 'Forbidden' });
+      try {
+        const { sessionId } = await readBody(req);
+        sshService.closeTerminalSession(sessionId);
+        writeJson(res, 200, { ok: true });
+      } catch (err) {
+        writeJson(res, 500, { ok: false, error: err.message });
+      }
+    }
+  }), 'dsh-remote-workspace: /terminal/close');
+}

package/lib/routes/tunnels.js

@@ -0,0 +1,59 @@
+import { writeJson, readBody, isTrustedSettingsRequest } from './helpers.js';
+
+export function registerTunnelRoutes(sctx, webServer, { tunnelService, store }) {
+  // 18. POST /dsh-remote-workspace/tunnels/start
+  sctx.effect(() => webServer.register({
+    kind: 'exact',
+    path: '/dsh-remote-workspace/tunnels/start',
+    handler: async (req, res) => {
+      if (req.method !== 'POST') return writeJson(res, 405, { ok: false, error: 'POST only' });
+      if (!isTrustedSettingsRequest(req)) return writeJson(res, 403, { ok: false, error: 'Forbidden' });
+      try {
+        const { profileId, localPort, targetHost, remotePort } = await readBody(req);
+        const profile = (profileId ? store.getProfile(profileId) : null) || store.getActiveProfile();
+        if (!profile) return writeJson(res, 404, { ok: false, error: 'Profile not found' });
+        const lPort = parseInt(localPort, 10);
+        const rPort = parseInt(remotePort, 10);
+        if (!lPort || !rPort) {
+          return writeJson(res, 400, { ok: false, error: 'Valid localPort and remotePort required' });
+        }
+        const result = await tunnelService.startLocalTunnel(profile, lPort, targetHost || '127.0.0.1', rPort);
+        writeJson(res, 200, { ok: result.success, ...result });
+      } catch (err) {
+        writeJson(res, 500, { ok: false, error: err.message });
+      }
+    }
+  }), 'dsh-remote-workspace: /tunnels/start');
+
+  // 19. POST /dsh-remote-workspace/tunnels/stop
+  sctx.effect(() => webServer.register({
+    kind: 'exact',
+    path: '/dsh-remote-workspace/tunnels/stop',
+    handler: async (req, res) => {
+      if (req.method !== 'POST') return writeJson(res, 405, { ok: false, error: 'POST only' });
+      if (!isTrustedSettingsRequest(req)) return writeJson(res, 403, { ok: false, error: 'Forbidden' });
+      try {
+        const { tunnelId } = await readBody(req);
+        if (!tunnelId) return writeJson(res, 400, { ok: false, error: 'tunnelId required' });
+        const stopped = tunnelService.stopTunnel(tunnelId);
+        writeJson(res, 200, { ok: stopped });
+      } catch (err) {
+        writeJson(res, 500, { ok: false, error: err.message });
+      }
+    }
+  }), 'dsh-remote-workspace: /tunnels/stop');
+
+  // 20. GET /dsh-remote-workspace/tunnels/telemetry
+  sctx.effect(() => webServer.register({
+    kind: 'exact',
+    path: '/dsh-remote-workspace/tunnels/telemetry',
+    handler: async (req, res) => {
+      if (req.method !== 'GET') return writeJson(res, 405, { ok: false, error: 'GET only' });
+      try {
+        writeJson(res, 200, { ok: true, tunnels: tunnelService.listActiveTunnels() });
+      } catch (err) {
+        writeJson(res, 500, { ok: false, error: err.message });
+      }
+    }
+  }), 'dsh-remote-workspace: /tunnels/telemetry');
+}