@guanjinke/artifact-client 1.5.1 → 1.6.1

package/dist/web/http.js

@@ -0,0 +1,167 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.HttpError = void 0;
+exports.applySecurityHeaders = applySecurityHeaders;
+exports.sendJson = sendJson;
+exports.sendText = sendText;
+exports.header = header;
+exports.readJson = readJson;
+exports.requireString = requireString;
+exports.optionalString = optionalString;
+exports.requireEnum = requireEnum;
+exports.optionalEnum = optionalEnum;
+exports.requireOptionalInteger = requireOptionalInteger;
+exports.optionalBoolean = optionalBoolean;
+exports.requireStringList = requireStringList;
+exports.requireRawStringList = requireRawStringList;
+exports.splitList = splitList;
+/** A failure that should reach the caller as an HTTP status rather than a 500. */
+class HttpError extends Error {
+    status;
+    allow;
+    constructor(status, message, allow) {
+        super(message);
+        this.status = status;
+        this.allow = allow;
+    }
+}
+exports.HttpError = HttpError;
+/** Response headers shared by every reply; no CORS header is ever sent. */
+function applySecurityHeaders(response) {
+    response.setHeader('X-Content-Type-Options', 'nosniff');
+    response.setHeader('Referrer-Policy', 'no-referrer');
+    response.setHeader('Cache-Control', 'no-store');
+}
+function sendJson(response, status, payload, allow) {
+    const body = Buffer.from(JSON.stringify(payload, null, 2) + '\n', 'utf8');
+    applySecurityHeaders(response);
+    response.writeHead(status, {
+        'Content-Type': 'application/json; charset=utf-8',
+        'Content-Length': body.length,
+        ...(allow ? { Allow: allow } : {}),
+    });
+    response.end(body);
+}
+function sendText(response, status, text, contentType, extra) {
+    const body = Buffer.from(text, 'utf8');
+    applySecurityHeaders(response);
+    response.writeHead(status, { 'Content-Type': contentType, 'Content-Length': body.length, ...extra });
+    response.end(body);
+}
+/** First value of a possibly repeated header, or undefined. */
+function header(request, name) {
+    const value = request.headers[name];
+    return Array.isArray(value) ? value[0] : value;
+}
+/**
+ * Read a JSON object body.
+ *
+ * Only `application/json` is accepted, so a browser form (which can be posted
+ * cross-origin without a preflight) can never reach a state-changing handler.
+ * An oversized body is drained rather than aborted, so the caller still
+ * receives the 413 instead of a reset connection.
+ */
+async function readJson(request, limit) {
+    const contentType = header(request, 'content-type') ?? '';
+    if (!contentType.toLowerCase().startsWith('application/json'))
+        throw new HttpError(415, 'Expected Content-Type: application/json.');
+    const chunks = [];
+    let size = 0;
+    let oversized = false;
+    for await (const chunk of request) {
+        const buffer = chunk;
+        size += buffer.length;
+        if (size > limit) {
+            oversized = true;
+            continue;
+        }
+        chunks.push(buffer);
+    }
+    if (oversized)
+        throw new HttpError(413, `Request body exceeds ${limit} bytes.`);
+    if (!size)
+        throw new HttpError(400, 'Expected a JSON object body.');
+    let parsed;
+    try {
+        parsed = JSON.parse(Buffer.concat(chunks).toString('utf8'));
+    }
+    catch {
+        throw new HttpError(400, 'Request body is not valid JSON.');
+    }
+    if (!parsed || typeof parsed !== 'object' || Array.isArray(parsed))
+        throw new HttpError(400, 'Expected a JSON object body.');
+    return parsed;
+}
+function requireString(body, field) {
+    const value = body[field];
+    if (typeof value !== 'string' || value.trim() === '')
+        throw new HttpError(400, `"${field}" is required and must be a non-empty string.`);
+    return value.trim();
+}
+function optionalString(body, field) {
+    const value = body[field];
+    if (value === undefined || value === null)
+        return undefined;
+    if (typeof value !== 'string')
+        throw new HttpError(400, `"${field}" must be a string.`);
+    return value;
+}
+function requireEnum(body, field, allowed) {
+    const value = body[field];
+    if (typeof value !== 'string' || !allowed.includes(value))
+        throw new HttpError(400, `"${field}" must be one of: ${allowed.join(', ')}.`);
+    return value;
+}
+function optionalEnum(body, field, allowed) {
+    if (body[field] === undefined || body[field] === null)
+        return undefined;
+    return requireEnum(body, field, allowed);
+}
+function requireOptionalInteger(body, field, min, max) {
+    const value = body[field];
+    if (value === undefined || value === null)
+        return undefined;
+    if (typeof value !== 'number' || !Number.isInteger(value) || value < min || value > max)
+        throw new HttpError(400, `"${field}" must be an integer between ${min} and ${max}.`);
+    return value;
+}
+function optionalBoolean(body, field) {
+    const value = body[field];
+    if (value === undefined || value === null)
+        return undefined;
+    if (typeof value !== 'boolean')
+        throw new HttpError(400, `"${field}" must be a boolean.`);
+    return value;
+}
+/** A `string[]` field that also accepts a single whitespace/comma separated string. */
+function requireStringList(body, field) {
+    const value = body[field];
+    if (typeof value === 'string')
+        return splitList(value);
+    if (Array.isArray(value)) {
+        if (!value.every(entry => typeof entry === 'string'))
+            throw new HttpError(400, `"${field}" must contain strings only.`);
+        return value.flatMap(entry => splitList(entry));
+    }
+    throw new HttpError(400, `"${field}" is required and must be a string or an array of strings.`);
+}
+/**
+ * A `string[]` field that is passed through unsplit.
+ *
+ * Module *specs* must reach `parseModuleSpecs` verbatim: a spec carrying a local
+ * source (`dashboard=D:\my build\out.dll`) is split on commas only there, so a
+ * Windows path may contain spaces.
+ */
+function requireRawStringList(body, field) {
+    const value = body[field];
+    if (typeof value === 'string')
+        return [value];
+    if (Array.isArray(value) && value.every(entry => typeof entry === 'string'))
+        return value;
+    throw new HttpError(400, `"${field}" is required and must be a string or an array of strings.`);
+}
+/** Same separator handling as the CLI's `--modules` values for plain module names. */
+function splitList(value) {
+    return value.split(/[\s,]+/).map(entry => entry.trim()).filter(Boolean);
+}
+//# sourceMappingURL=http.js.map

package/dist/web/http.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"http.js","sourceRoot":"","sources":["../../src/web/http.ts"],"names":[],"mappings":";;;AAQA,oDAIC;AAED,4BASC;AAED,4BAKC;AAGD,wBAGC;AAUD,4BAkBC;AAED,sCAIC;AAED,wCAKC;AAED,kCAIC;AAED,oCAGC;AAED,wDAKC;AAED,0CAKC;AAGD,8CAQC;AASD,oDAKC;AAGD,8BAEC;AAlID,kFAAkF;AAClF,MAAa,SAAU,SAAQ,KAAK;IACb;IAA0C;IAA/D,YAAqB,MAAc,EAAE,OAAe,EAAW,KAAc;QAAI,KAAK,CAAC,OAAO,CAAC,CAAC;QAA3E,WAAM,GAAN,MAAM,CAAQ;QAA4B,UAAK,GAAL,KAAK,CAAS;IAAoB,CAAC;CACnG;AAFD,8BAEC;AAED,2EAA2E;AAC3E,SAAgB,oBAAoB,CAAC,QAAwB;IAC3D,QAAQ,CAAC,SAAS,CAAC,wBAAwB,EAAE,SAAS,CAAC,CAAC;IACxD,QAAQ,CAAC,SAAS,CAAC,iBAAiB,EAAE,aAAa,CAAC,CAAC;IACrD,QAAQ,CAAC,SAAS,CAAC,eAAe,EAAE,UAAU,CAAC,CAAC;AAClD,CAAC;AAED,SAAgB,QAAQ,CAAC,QAAwB,EAAE,MAAc,EAAE,OAAgB,EAAE,KAAc;IACjG,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,MAAM,CAAC,CAAC;IAC1E,oBAAoB,CAAC,QAAQ,CAAC,CAAC;IAC/B,QAAQ,CAAC,SAAS,CAAC,MAAM,EAAE;QACzB,cAAc,EAAE,iCAAiC;QACjD,gBAAgB,EAAE,IAAI,CAAC,MAAM;QAC7B,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACnC,CAAC,CAAC;IACH,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;AACrB,CAAC;AAED,SAAgB,QAAQ,CAAC,QAAwB,EAAE,MAAc,EAAE,IAAY,EAAE,WAAmB,EAAE,KAA8B;IAClI,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACvC,oBAAoB,CAAC,QAAQ,CAAC,CAAC;IAC/B,QAAQ,CAAC,SAAS,CAAC,MAAM,EAAE,EAAE,cAAc,EAAE,WAAW,EAAE,gBAAgB,EAAE,IAAI,CAAC,MAAM,EAAE,GAAG,KAAK,EAAE,CAAC,CAAC;IACrG,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;AACrB,CAAC;AAED,+DAA+D;AAC/D,SAAgB,MAAM,CAAC,OAAwB,EAAE,IAAY;IAC3D,MAAM,KAAK,GAAG,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IACpC,OAAO,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;AACjD,CAAC;AAED;;;;;;;GAOG;AACI,KAAK,UAAU,QAAQ,CAAC,OAAwB,EAAE,KAAa;IACpE,MAAM,WAAW,GAAG,MAAM,CAAC,OAAO,EAAE,cAAc,CAAC,IAAI,EAAE,CAAC;IAC1D,IAAI,CAAC,WAAW,CAAC,WAAW,EAAE,CAAC,UAAU,CAAC,kBAAkB,CAAC;QAAE,MAAM,IAAI,SAAS,CAAC,GAAG,EAAE,0CAA0C,CAAC,CAAC;IACpI,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,IAAI,IAAI,GAAG,CAAC,CAAC;IACb,IAAI,SAAS,GAAG,KAAK,CAAC;IACtB,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAClC,MAAM,MAAM,GAAG,KAAe,CAAC;QAC/B,IAAI,IAAI,MAAM,CAAC,MAAM,CAAC;QACtB,IAAI,IAAI,GAAG,KAAK,EAAE,CAAC;YAAC,SAAS,GAAG,IAAI,CAAC;YAAC,SAAS;QAAC,CAAC;QACjD,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACtB,CAAC;IACD,IAAI,SAAS;QAAE,MAAM,IAAI,SAAS,CAAC,GAAG,EAAE,wBAAwB,KAAK,SAAS,CAAC,CAAC;IAChF,IAAI,CAAC,IAAI;QAAE,MAAM,IAAI,SAAS,CAAC,GAAG,EAAE,8BAA8B,CAAC,CAAC;IACpE,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QAAC,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,MAAM,IAAI,SAAS,CAAC,GAAG,EAAE,iCAAiC,CAAC,CAAC;IAAC,CAAC;IAC3I,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;QAAE,MAAM,IAAI,SAAS,CAAC,GAAG,EAAE,8BAA8B,CAAC,CAAC;IAC7H,OAAO,MAAiC,CAAC;AAC3C,CAAC;AAED,SAAgB,aAAa,CAAC,IAA6B,EAAE,KAAa;IACxE,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC;IAC1B,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE;QAAE,MAAM,IAAI,SAAS,CAAC,GAAG,EAAE,IAAI,KAAK,+CAA+C,CAAC,CAAC;IACzI,OAAO,KAAK,CAAC,IAAI,EAAE,CAAC;AACtB,CAAC;AAED,SAAgB,cAAc,CAAC,IAA6B,EAAE,KAAa;IACzE,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC;IAC1B,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,SAAS,CAAC;IAC5D,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,MAAM,IAAI,SAAS,CAAC,GAAG,EAAE,IAAI,KAAK,qBAAqB,CAAC,CAAC;IACxF,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAgB,WAAW,CAAmB,IAA6B,EAAE,KAAa,EAAE,OAAqB;IAC/G,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC;IAC1B,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAE,OAA6B,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,SAAS,CAAC,GAAG,EAAE,IAAI,KAAK,qBAAqB,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAChK,OAAO,KAAU,CAAC;AACpB,CAAC;AAED,SAAgB,YAAY,CAAmB,IAA6B,EAAE,KAAa,EAAE,OAAqB;IAChH,IAAI,IAAI,CAAC,KAAK,CAAC,KAAK,SAAS,IAAI,IAAI,CAAC,KAAK,CAAC,KAAK,IAAI;QAAE,OAAO,SAAS,CAAC;IACxE,OAAO,WAAW,CAAC,IAAI,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;AAC3C,CAAC;AAED,SAAgB,sBAAsB,CAAC,IAA6B,EAAE,KAAa,EAAE,GAAW,EAAE,GAAW;IAC3G,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC;IAC1B,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,SAAS,CAAC;IAC5D,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,GAAG,IAAI,KAAK,GAAG,GAAG;QAAE,MAAM,IAAI,SAAS,CAAC,GAAG,EAAE,IAAI,KAAK,gCAAgC,GAAG,QAAQ,GAAG,GAAG,CAAC,CAAC;IAC9K,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAgB,eAAe,CAAC,IAA6B,EAAE,KAAa;IAC1E,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC;IAC1B,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,SAAS,CAAC;IAC5D,IAAI,OAAO,KAAK,KAAK,SAAS;QAAE,MAAM,IAAI,SAAS,CAAC,GAAG,EAAE,IAAI,KAAK,sBAAsB,CAAC,CAAC;IAC1F,OAAO,KAAK,CAAC;AACf,CAAC;AAED,uFAAuF;AACvF,SAAgB,iBAAiB,CAAC,IAA6B,EAAE,KAAa;IAC5E,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC;IAC1B,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC,KAAK,CAAC,CAAC;IACvD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC;YAAE,MAAM,IAAI,SAAS,CAAC,GAAG,EAAE,IAAI,KAAK,8BAA8B,CAAC,CAAC;QACxH,OAAQ,KAAkB,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;IAChE,CAAC;IACD,MAAM,IAAI,SAAS,CAAC,GAAG,EAAE,IAAI,KAAK,4DAA4D,CAAC,CAAC;AAClG,CAAC;AAED;;;;;;GAMG;AACH,SAAgB,oBAAoB,CAAC,IAA6B,EAAE,KAAa;IAC/E,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC;IAC1B,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,CAAC,KAAK,CAAC,CAAC;IAC9C,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC;QAAE,OAAO,KAAiB,CAAC;IACtG,MAAM,IAAI,SAAS,CAAC,GAAG,EAAE,IAAI,KAAK,4DAA4D,CAAC,CAAC;AAClG,CAAC;AAED,sFAAsF;AACtF,SAAgB,SAAS,CAAC,KAAa;IACrC,OAAO,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;AAC1E,CAAC"}

package/dist/web/jobs.d.ts

@@ -0,0 +1,69 @@
+import { Provider } from './types';
+export type JobKind = 'create' | 'delete' | 'update' | 'lifecycle';
+export type JobStatus = 'queued' | 'running' | 'succeeded' | 'failed';
+export interface ProgressLine {
+    at: string;
+    message: string;
+}
+/** A job as returned by the HTTP API: never the live object, always a copy. */
+export interface JobSnapshot {
+    id: string;
+    kind: JobKind;
+    /** The environment name the job acts on (the new name for `create`). */
+    target: string;
+    provider?: Provider;
+    dryRun?: boolean;
+    status: JobStatus;
+    createdAt: string;
+    startedAt?: string;
+    finishedAt?: string;
+    progress: ProgressLine[];
+    /** True when old progress lines were dropped to bound memory. */
+    progressTruncated?: boolean;
+    result?: unknown;
+    error?: string;
+}
+export interface JobInput {
+    kind: JobKind;
+    target: string;
+    provider?: Provider;
+    dryRun?: boolean;
+}
+/**
+ * In-memory registry of long-running operations.
+ *
+ * Creating an environment downloads and assembles artifacts for minutes, so the
+ * HTTP API answers with a job id and the page polls it. Jobs are deliberately
+ * not persisted: they describe the work of this server process only, while the
+ * durable result (the environment registry and `<root>/environment.lock.json`)
+ * is written by the environment manager itself.
+ *
+ * Mutating jobs for the same environment are serialized here. `update-env`
+ * documents that it does not take the per-environment lifecycle lock, so a web
+ * update must never race a web start/stop/restart for the same environment.
+ */
+export declare class JobStore {
+    private readonly limit;
+    private readonly progressLimit;
+    private readonly jobs;
+    private readonly tails;
+    constructor(limit?: number, progressLimit?: number);
+    /**
+     * Queue `action` and return its snapshot immediately.
+     *
+     * The action receives a progress sink; its rejection is recorded on the job
+     * instead of propagating, because there is no request left to fail.
+     */
+    run<T>(input: JobInput, action: (progress: (line: string) => void) => Promise<T>): JobSnapshot;
+    get(id: string): JobSnapshot | undefined;
+    /** Newest first. */
+    list(): JobSnapshot[];
+    /** Resolves once no job is queued or running; used for a graceful shutdown. */
+    whenIdle(): Promise<void>;
+    busy(): boolean;
+    private append;
+    private snapshot;
+    /** Drop the oldest finished jobs first; a running job is never discarded. */
+    private prune;
+}
+//# sourceMappingURL=jobs.d.ts.map

package/dist/web/jobs.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"jobs.d.ts","sourceRoot":"","sources":["../../src/web/jobs.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAEnC,MAAM,MAAM,OAAO,GAAG,QAAQ,GAAG,QAAQ,GAAG,QAAQ,GAAG,WAAW,CAAC;AACnE,MAAM,MAAM,SAAS,GAAG,QAAQ,GAAG,SAAS,GAAG,WAAW,GAAG,QAAQ,CAAC;AAEtE,MAAM,WAAW,YAAY;IAAG,EAAE,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE;AAE7D,+EAA+E;AAC/E,MAAM,WAAW,WAAW;IAC1B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,OAAO,CAAC;IACd,wEAAwE;IACxE,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,QAAQ,CAAC;IACpB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,MAAM,EAAE,SAAS,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,YAAY,EAAE,CAAC;IACzB,iEAAiE;IACjE,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAC5B,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,QAAQ;IAAG,IAAI,EAAE,OAAO,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,QAAQ,CAAC;IAAC,MAAM,CAAC,EAAE,OAAO,CAAA;CAAE;AAMlG;;;;;;;;;;;;GAYG;AACH,qBAAa,QAAQ;IAGP,OAAO,CAAC,QAAQ,CAAC,KAAK;IAAO,OAAO,CAAC,QAAQ,CAAC,aAAa;IAFvE,OAAO,CAAC,QAAQ,CAAC,IAAI,CAA0B;IAC/C,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAoC;gBAC7B,KAAK,SAAK,EAAmB,aAAa,SAAM;IAE7E;;;;;OAKG;IACH,GAAG,CAAC,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,GAAG,WAAW;IAoC9F,GAAG,CAAC,EAAE,EAAE,MAAM,GAAG,WAAW,GAAG,SAAS;IAKxC,oBAAoB;IACpB,IAAI,IAAI,WAAW,EAAE;IAIrB,+EAA+E;IACzE,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC;IAI/B,IAAI,IAAI,OAAO;IAIf,OAAO,CAAC,MAAM;IAQd,OAAO,CAAC,QAAQ;IAIhB,6EAA6E;IAC7E,OAAO,CAAC,KAAK;CAOd"}

package/dist/web/jobs.js

@@ -0,0 +1,110 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.JobStore = void 0;
+const crypto_1 = require("crypto");
+const message = (error) => (error instanceof Error ? error.message : String(error));
+/**
+ * In-memory registry of long-running operations.
+ *
+ * Creating an environment downloads and assembles artifacts for minutes, so the
+ * HTTP API answers with a job id and the page polls it. Jobs are deliberately
+ * not persisted: they describe the work of this server process only, while the
+ * durable result (the environment registry and `<root>/environment.lock.json`)
+ * is written by the environment manager itself.
+ *
+ * Mutating jobs for the same environment are serialized here. `update-env`
+ * documents that it does not take the per-environment lifecycle lock, so a web
+ * update must never race a web start/stop/restart for the same environment.
+ */
+class JobStore {
+    limit;
+    progressLimit;
+    jobs = new Map();
+    tails = new Map();
+    constructor(limit = 50, progressLimit = 400) {
+        this.limit = limit;
+        this.progressLimit = progressLimit;
+    }
+    /**
+     * Queue `action` and return its snapshot immediately.
+     *
+     * The action receives a progress sink; its rejection is recorded on the job
+     * instead of propagating, because there is no request left to fail.
+     */
+    run(input, action) {
+        const key = input.target.toLowerCase();
+        const job = {
+            id: (0, crypto_1.randomUUID)(),
+            kind: input.kind,
+            target: input.target,
+            ...(input.provider !== undefined ? { provider: input.provider } : {}),
+            ...(input.dryRun !== undefined ? { dryRun: input.dryRun } : {}),
+            status: 'queued',
+            createdAt: new Date().toISOString(),
+            progress: [],
+            progressTruncated: false,
+        };
+        this.jobs.set(job.id, job);
+        const previous = this.tails.get(key);
+        if (previous)
+            this.append(job, `Queued behind another operation on ${input.target}; mutations of one environment are serialized.`);
+        const started = (previous ?? Promise.resolve()).then(async () => {
+            job.status = 'running';
+            job.startedAt = new Date().toISOString();
+            try {
+                job.result = await action(line => this.append(job, line));
+                job.status = 'succeeded';
+            }
+            catch (error) {
+                job.error = message(error);
+                job.status = 'failed';
+            }
+            finally {
+                job.finishedAt = new Date().toISOString();
+                this.prune();
+            }
+        });
+        this.tails.set(key, started);
+        void started.then(() => { if (this.tails.get(key) === started)
+            this.tails.delete(key); });
+        this.prune();
+        return this.snapshot(job);
+    }
+    get(id) {
+        const job = this.jobs.get(id);
+        return job ? this.snapshot(job) : undefined;
+    }
+    /** Newest first. */
+    list() {
+        return [...this.jobs.values()].reverse().map(job => this.snapshot(job));
+    }
+    /** Resolves once no job is queued or running; used for a graceful shutdown. */
+    async whenIdle() {
+        while (this.busy())
+            await new Promise(resolve => setTimeout(resolve, 200));
+    }
+    busy() {
+        return [...this.jobs.values()].some(job => job.status === 'queued' || job.status === 'running');
+    }
+    append(job, line) {
+        if (job.progress.length >= this.progressLimit) {
+            job.progress.shift();
+            job.progressTruncated = true;
+        }
+        job.progress.push({ at: new Date().toISOString(), message: line });
+    }
+    snapshot(job) {
+        return { ...job, progress: job.progress.map(line => ({ ...line })), ...(job.progressTruncated ? { progressTruncated: true } : {}) };
+    }
+    /** Drop the oldest finished jobs first; a running job is never discarded. */
+    prune() {
+        while (this.jobs.size > this.limit) {
+            const oldest = [...this.jobs.values()].find(candidate => candidate.status === 'succeeded' || candidate.status === 'failed');
+            if (!oldest)
+                return;
+            this.jobs.delete(oldest.id);
+        }
+    }
+}
+exports.JobStore = JobStore;
+//# sourceMappingURL=jobs.js.map

package/dist/web/jobs.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"jobs.js","sourceRoot":"","sources":["../../src/web/jobs.ts"],"names":[],"mappings":";;;AAAA,mCAAoC;AA+BpC,MAAM,OAAO,GAAG,CAAC,KAAc,EAAU,EAAE,CAAC,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;AAErG;;;;;;;;;;;;GAYG;AACH,MAAa,QAAQ;IAGU;IAA6B;IAFzC,IAAI,GAAG,IAAI,GAAG,EAAe,CAAC;IAC9B,KAAK,GAAG,IAAI,GAAG,EAAyB,CAAC;IAC1D,YAA6B,QAAQ,EAAE,EAAmB,gBAAgB,GAAG;QAAhD,UAAK,GAAL,KAAK,CAAK;QAAmB,kBAAa,GAAb,aAAa,CAAM;IAAG,CAAC;IAEjF;;;;;OAKG;IACH,GAAG,CAAI,KAAe,EAAE,MAAwD;QAC9E,MAAM,GAAG,GAAG,KAAK,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;QACvC,MAAM,GAAG,GAAQ;YACf,EAAE,EAAE,IAAA,mBAAU,GAAE;YAChB,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,GAAG,CAAC,KAAK,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACrE,GAAG,CAAC,KAAK,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC/D,MAAM,EAAE,QAAQ;YAChB,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,QAAQ,EAAE,EAAE;YACZ,iBAAiB,EAAE,KAAK;SACzB,CAAC;QACF,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;QAC3B,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACrC,IAAI,QAAQ;YAAE,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,sCAAsC,KAAK,CAAC,MAAM,gDAAgD,CAAC,CAAC;QACnI,MAAM,OAAO,GAAG,CAAC,QAAQ,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE;YAC9D,GAAG,CAAC,MAAM,GAAG,SAAS,CAAC;YACvB,GAAG,CAAC,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;YACzC,IAAI,CAAC;gBACH,GAAG,CAAC,MAAM,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC;gBAC1D,GAAG,CAAC,MAAM,GAAG,WAAW,CAAC;YAC3B,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,GAAG,CAAC,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC;gBAC3B,GAAG,CAAC,MAAM,GAAG,QAAQ,CAAC;YACxB,CAAC;oBAAS,CAAC;gBACT,GAAG,CAAC,UAAU,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;gBAC1C,IAAI,CAAC,KAAK,EAAE,CAAC;YACf,CAAC;QACH,CAAC,CAAC,CAAC;QACH,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;QAC7B,KAAK,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,OAAO;YAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC1F,IAAI,CAAC,KAAK,EAAE,CAAC;QACb,OAAO,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;IAC5B,CAAC;IAED,GAAG,CAAC,EAAU;QACZ,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC9B,OAAO,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC9C,CAAC;IAED,oBAAoB;IACpB,IAAI;QACF,OAAO,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1E,CAAC;IAED,+EAA+E;IAC/E,KAAK,CAAC,QAAQ;QACZ,OAAO,IAAI,CAAC,IAAI,EAAE;YAAE,MAAM,IAAI,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC;IAC7E,CAAC;IAED,IAAI;QACF,OAAO,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,MAAM,KAAK,QAAQ,IAAI,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC;IAClG,CAAC;IAEO,MAAM,CAAC,GAAQ,EAAE,IAAY;QACnC,IAAI,GAAG,CAAC,QAAQ,CAAC,MAAM,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC;YAC9C,GAAG,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC;YACrB,GAAG,CAAC,iBAAiB,GAAG,IAAI,CAAC;QAC/B,CAAC;QACD,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;IACrE,CAAC;IAEO,QAAQ,CAAC,GAAQ;QACvB,OAAO,EAAE,GAAG,GAAG,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,EAAE,GAAG,IAAI,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;IACtI,CAAC;IAED,6EAA6E;IACrE,KAAK;QACX,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,KAAK,EAAE,CAAC;YACnC,MAAM,MAAM,GAAG,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,SAAS,CAAC,MAAM,KAAK,WAAW,IAAI,SAAS,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC;YAC5H,IAAI,CAAC,MAAM;gBAAE,OAAO;YACpB,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAC9B,CAAC;IACH,CAAC;CACF;AAtFD,4BAsFC"}

package/dist/web/providers.d.ts

@@ -0,0 +1,12 @@
+import { WebProviders } from './types';
+/**
+ * The web server's credential access.
+ *
+ * Credentials are the same profile the CLI writes (`afm az login` /
+ * `afm oss login`), so both front-ends agree; the browser may write them but
+ * only ever reads back booleans and non-secret names. An update keeps every
+ * other field of the section (for example a hand-configured `basePrefix`) and
+ * every other setting of the file.
+ */
+export declare function storedProviders(): WebProviders;
+//# sourceMappingURL=providers.d.ts.map

package/dist/web/providers.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"providers.d.ts","sourceRoot":"","sources":["../../src/web/providers.ts"],"names":[],"mappings":"AAIA,OAAO,EAAgD,YAAY,EAAE,MAAM,SAAS,CAAC;AAkDrF;;;;;;;;GAQG;AACH,wBAAgB,eAAe,IAAI,YAAY,CAoC9C"}

package/dist/web/providers.js

@@ -0,0 +1,108 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.storedProviders = storedProviders;
+const config_manager_1 = require("../cli/config-manager");
+const stored_client_1 = require("../cli/stored-client");
+/**
+ * One upload/reference name segment: bucket and region, not a secret.
+ * Rejected values are refused with a message rather than stored silently.
+ */
+const nameSegment = /^[A-Za-z0-9][A-Za-z0-9._-]*$/;
+function requiredText(value, field) {
+    const text = typeof value === 'string' ? value.trim() : '';
+    if (!text)
+        throw new Error(`${field} is required.`);
+    if (/[\x00-\x1f\x7f]/.test(text))
+        throw new Error(`${field} contains control characters.`);
+    return text;
+}
+function optionalNameSegment(value, field) {
+    const text = typeof value === 'string' ? value.trim() : '';
+    if (!text)
+        return undefined;
+    if (!nameSegment.test(text))
+        throw new Error(`${field} may only contain letters, digits, dot, underscore and hyphen.`);
+    return text;
+}
+/** The SAS URL must be a real http(s) URL; its signature stays server-side. */
+function sasUrlOf(value) {
+    const text = requiredText(value, 'SAS URL');
+    let parsed;
+    try {
+        parsed = new URL(text);
+    }
+    catch {
+        throw new Error('SAS URL is not a valid URL.');
+    }
+    // `new URL()` tolerates a space (it percent-encodes it), which would silently
+    // corrupt the signature, so it is rejected explicitly.
+    if (/\s/.test(text))
+        throw new Error('SAS URL must not contain whitespace.');
+    if (parsed.protocol !== 'https:' && parsed.protocol !== 'http:')
+        throw new Error('SAS URL must use https or http.');
+    if (!parsed.hostname)
+        throw new Error('SAS URL has no host.');
+    return text;
+}
+/** Container name of a SAS URL, when it carries one. */
+function containerOf(sasUrl) {
+    if (!sasUrl)
+        return null;
+    try {
+        const name = new URL(sasUrl).pathname.replace(/^\/+/, '').split('/')[0];
+        return name || null;
+    }
+    catch {
+        return null;
+    }
+}
+/**
+ * The web server's credential access.
+ *
+ * Credentials are the same profile the CLI writes (`afm az login` /
+ * `afm oss login`), so both front-ends agree; the browser may write them but
+ * only ever reads back booleans and non-secret names. An update keeps every
+ * other field of the section (for example a hand-configured `basePrefix`) and
+ * every other setting of the file.
+ */
+function storedProviders() {
+    return {
+        available: stored_client_1.storedProviderAvailability,
+        client(provider) { return (0, stored_client_1.createStoredClient)(provider); },
+        info() {
+            const config = (0, config_manager_1.readConfig)();
+            return {
+                ...(config.az ? { az: { container: containerOf(config.az.sasUrl) } } : {}),
+                ...(config.oss ? { oss: { bucket: config.oss.bucket ?? null, region: config.oss.region ?? null } } : {}),
+            };
+        },
+        async save(provider, credentials) {
+            const config = (0, config_manager_1.readConfig)();
+            if (provider === 'az') {
+                const previous = config.az;
+                (0, config_manager_1.saveAzureConfig)({ ...previous, sasUrl: sasUrlOf(credentials.sasUrl) });
+                return;
+            }
+            if (credentials.keyId === undefined || credentials.key === undefined) {
+                throw new Error('OSS credentials need both Key ID and Key.');
+            }
+            const previous = config.oss;
+            (0, config_manager_1.saveOSSConfig)({
+                ...previous,
+                keyId: requiredText(credentials.keyId, 'Key ID'),
+                key: requiredText(credentials.key, 'Key'),
+                ...(optionalNameSegment(credentials.bucket, 'Bucket') !== undefined ? { bucket: optionalNameSegment(credentials.bucket, 'Bucket') } : {}),
+                ...(optionalNameSegment(credentials.region, 'Region') !== undefined ? { region: optionalNameSegment(credentials.region, 'Region') } : {}),
+            });
+        },
+        async clear(provider) {
+            const config = (0, config_manager_1.readConfig)();
+            if (provider === 'az')
+                delete config.az;
+            else
+                delete config.oss;
+            (0, config_manager_1.writeConfig)(config);
+        },
+    };
+}
+//# sourceMappingURL=providers.js.map

package/dist/web/providers.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"providers.js","sourceRoot":"","sources":["../../src/web/providers.ts"],"names":[],"mappings":";;AA+DA,0CAoCC;AAnGD,0DAAgG;AAChG,wDAAsF;AAKtF;;;GAGG;AACH,MAAM,WAAW,GAAG,8BAA8B,CAAC;AAEnD,SAAS,YAAY,CAAC,KAAyB,EAAE,KAAa;IAC5D,MAAM,IAAI,GAAG,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IAC3D,IAAI,CAAC,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,eAAe,CAAC,CAAC;IACpD,IAAI,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,+BAA+B,CAAC,CAAC;IAC3F,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,mBAAmB,CAAC,KAAyB,EAAE,KAAa;IACnE,MAAM,IAAI,GAAG,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IAC3D,IAAI,CAAC,IAAI;QAAE,OAAO,SAAS,CAAC;IAC5B,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,gEAAgE,CAAC,CAAC;IACvH,OAAO,IAAI,CAAC;AACd,CAAC;AAED,+EAA+E;AAC/E,SAAS,QAAQ,CAAC,KAAyB;IACzC,MAAM,IAAI,GAAG,YAAY,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;IAC5C,IAAI,MAAW,CAAC;IAChB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC;IACzB,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;IACjD,CAAC;IACD,8EAA8E;IAC9E,uDAAuD;IACvD,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;IAC7E,IAAI,MAAM,CAAC,QAAQ,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,KAAK,OAAO;QAAE,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;IACpH,IAAI,CAAC,MAAM,CAAC,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;IAC9D,OAAO,IAAI,CAAC;AACd,CAAC;AAED,wDAAwD;AACxD,SAAS,WAAW,CAAC,MAA0B;IAC7C,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IACzB,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QACxE,OAAO,IAAI,IAAI,IAAI,CAAC;IACtB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;;;;;GAQG;AACH,SAAgB,eAAe;IAC7B,OAAO;QACL,SAAS,EAAE,0CAA0B;QACrC,MAAM,CAAC,QAAkB,IAAuB,OAAO,IAAA,kCAAkB,EAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;QACtF,IAAI;YACF,MAAM,MAAM,GAAG,IAAA,2BAAU,GAAE,CAAC;YAC5B,OAAO;gBACL,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,EAAE,SAAS,EAAE,WAAW,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC1E,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,MAAM,IAAI,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,MAAM,IAAI,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACzG,CAAC;QACJ,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,QAAkB,EAAE,WAAiC;YAC9D,MAAM,MAAM,GAAG,IAAA,2BAAU,GAAE,CAAC;YAC5B,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;gBACtB,MAAM,QAAQ,GAAG,MAAM,CAAC,EAA6B,CAAC;gBACtD,IAAA,gCAAe,EAAC,EAAE,GAAG,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC,WAAW,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;gBACvE,OAAO;YACT,CAAC;YACD,IAAI,WAAW,CAAC,KAAK,KAAK,SAAS,IAAI,WAAW,CAAC,GAAG,KAAK,SAAS,EAAE,CAAC;gBACrE,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;YAC/D,CAAC;YACD,MAAM,QAAQ,GAAG,MAAM,CAAC,GAA4B,CAAC;YACrD,IAAA,8BAAa,EAAC;gBACZ,GAAG,QAAQ;gBACX,KAAK,EAAE,YAAY,CAAC,WAAW,CAAC,KAAK,EAAE,QAAQ,CAAC;gBAChD,GAAG,EAAE,YAAY,CAAC,WAAW,CAAC,GAAG,EAAE,KAAK,CAAC;gBACzC,GAAG,CAAC,mBAAmB,CAAC,WAAW,CAAC,MAAM,EAAE,QAAQ,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,mBAAmB,CAAC,WAAW,CAAC,MAAM,EAAE,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACzI,GAAG,CAAC,mBAAmB,CAAC,WAAW,CAAC,MAAM,EAAE,QAAQ,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,mBAAmB,CAAC,WAAW,CAAC,MAAM,EAAE,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAC1I,CAAC,CAAC;QACL,CAAC;QACD,KAAK,CAAC,KAAK,CAAC,QAAkB;YAC5B,MAAM,MAAM,GAAG,IAAA,2BAAU,GAAE,CAAC;YAC5B,IAAI,QAAQ,KAAK,IAAI;gBAAE,OAAO,MAAM,CAAC,EAAE,CAAC;;gBAAM,OAAO,MAAM,CAAC,GAAG,CAAC;YAChE,IAAA,4BAAW,EAAC,MAAM,CAAC,CAAC;QACtB,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/web/server.d.ts

@@ -0,0 +1,43 @@
+import { JobStore } from './jobs';
+import { WebManager, WebProviders, WebRegistry, WebStateInfo, WebUpdater } from './types';
+export interface WebServerOptions {
+    /** Secret required by every `/api` request. At least 16 characters. */
+    token: string;
+    /** 0 (default) lets the OS choose a free port. */
+    port?: number;
+    /** Loopback address to bind; the default is the only value the CLI exposes. */
+    host?: string;
+    assetsDirectory?: string;
+    manager?: WebManager;
+    updater?: WebUpdater;
+    registry?: WebRegistry;
+    providers?: WebProviders;
+    state?: () => WebStateInfo;
+    jobs?: JobStore;
+    maxBodyBytes?: number;
+    resolveRoot?: (name: string, requested: string | undefined, dryRun: boolean) => Promise<string>;
+    /** Remember or forget the unified environment root; defaults to the CLI's `env root`. */
+    setEnvironmentRoot?: (root: string | null) => Promise<string | null>;
+}
+export interface RunningWebServer {
+    host: string;
+    port: number;
+    /** Page URL without the token. */
+    url: string;
+    /** Page URL with the token in the fragment, so it never reaches the server log. */
+    tokenUrl: string;
+    jobs: JobStore;
+    close(): Promise<void>;
+}
+/** The token lives in the URL fragment: fragments are not sent in requests. */
+export declare function tokenizedUrl(url: string, token: string): string;
+/**
+ * Start the local web interface.
+ *
+ * It binds loopback only, requires the token for every API call, rejects any
+ * request whose Host header is not one of its own loopback names (DNS
+ * rebinding) and never sends a CORS header, so a page on another origin can
+ * neither read a reply nor send the custom token header.
+ */
+export declare function startWebServer(options: WebServerOptions): Promise<RunningWebServer>;
+//# sourceMappingURL=server.d.ts.map

package/dist/web/server.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../../src/web/server.ts"],"names":[],"mappings":"AAWA,OAAO,EAAE,QAAQ,EAAE,MAAM,QAAQ,CAAC;AAElC,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,WAAW,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAE1F,MAAM,WAAW,gBAAgB;IAC/B,uEAAuE;IACvE,KAAK,EAAE,MAAM,CAAC;IACd,kDAAkD;IAClD,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,+EAA+E;IAC/E,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,OAAO,CAAC,EAAE,UAAU,CAAC;IACrB,OAAO,CAAC,EAAE,UAAU,CAAC;IACrB,QAAQ,CAAC,EAAE,WAAW,CAAC;IACvB,SAAS,CAAC,EAAE,YAAY,CAAC;IACzB,KAAK,CAAC,EAAE,MAAM,YAAY,CAAC;IAC3B,IAAI,CAAC,EAAE,QAAQ,CAAC;IAChB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,WAAW,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,SAAS,EAAE,MAAM,EAAE,OAAO,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IAChG,yFAAyF;IACzF,kBAAkB,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,KAAK,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;CACtE;AAED,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,kCAAkC;IAClC,GAAG,EAAE,MAAM,CAAC;IACZ,mFAAmF;IACnF,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,QAAQ,CAAC;IACf,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACxB;AAID,+EAA+E;AAC/E,wBAAgB,YAAY,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,CAE/D;AAED;;;;;;;GAOG;AACH,wBAAsB,cAAc,CAAC,OAAO,EAAE,gBAAgB,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAwDzF"}