@knpkv/herdr-approvals 0.2.0

package/dist/auth.d.ts

@@ -0,0 +1,10 @@
+import { FleetAuthorizationError } from "@knpkv/herdr-fleet";
+import { Effect } from "effect";
+export interface RequestIdentity {
+    readonly login: string | undefined;
+    readonly remoteAddress: string | undefined;
+}
+export type LoopbackActor = "local";
+export declare const authorizeLoopback: (identity: RequestIdentity) => Effect.Effect<LoopbackActor, FleetAuthorizationError>;
+export declare const authorize: (identity: RequestIdentity, allowedUsers: ReadonlyArray<string>, allowLocal: boolean) => Effect.Effect<"local", FleetAuthorizationError, never>;
+//# sourceMappingURL=auth.d.ts.map

package/dist/auth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../src/auth.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,uBAAuB,EAAE,MAAM,oBAAoB,CAAA;AAC5D,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAA;AAE/B,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,CAAA;IAClC,QAAQ,CAAC,aAAa,EAAE,MAAM,GAAG,SAAS,CAAA;CAC3C;AAID,MAAM,MAAM,aAAa,GAAG,OAAO,CAAA;AAEnC,eAAO,MAAM,iBAAiB,aAClB,eAAe,KACxB,MAAM,CAAC,MAAM,CAAC,aAAa,EAAE,uBAAuB,CAOlD,CAAA;AAEL,eAAO,MAAM,SAAS,aACV,eAAe,gBACX,aAAa,CAAC,MAAM,CAAC,cACvB,OAAO,2DAQhB,CAAA"}

package/dist/auth.js

@@ -0,0 +1,14 @@
+import { FleetAuthorizationError } from "@knpkv/herdr-fleet";
+import { Effect } from "effect";
+const loopback = new Set(["127.0.0.1", "::1", "::ffff:127.0.0.1"]);
+export const authorizeLoopback = (identity) => loopback.has(identity.remoteAddress ?? "") && identity.login === undefined
+    ? Effect.succeed("local")
+    : Effect.fail(new FleetAuthorizationError({
+        actor: identity.login ?? identity.remoteAddress ?? "unknown"
+    }));
+export const authorize = (identity, allowedUsers, allowLocal) => allowLocal
+    ? authorizeLoopback(identity)
+    : Effect.fail(new FleetAuthorizationError({
+        actor: identity.login ?? identity.remoteAddress ?? "unknown"
+    }));
+//# sourceMappingURL=auth.js.map

package/dist/auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.js","sourceRoot":"","sources":["../src/auth.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,uBAAuB,EAAE,MAAM,oBAAoB,CAAA;AAC5D,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAA;AAO/B,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,CAAC,WAAW,EAAE,KAAK,EAAE,kBAAkB,CAAC,CAAC,CAAA;AAIlE,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAC/B,QAAyB,EAC8B,EAAE,CACzD,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,aAAa,IAAI,EAAE,CAAC,IAAI,QAAQ,CAAC,KAAK,KAAK,SAAS;IACxE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC;IACzB,CAAC,CAAC,MAAM,CAAC,IAAI,CACX,IAAI,uBAAuB,CAAC;QAC1B,KAAK,EAAE,QAAQ,CAAC,KAAK,IAAI,QAAQ,CAAC,aAAa,IAAI,SAAS;KAC7D,CAAC,CACH,CAAA;AAEL,MAAM,CAAC,MAAM,SAAS,GAAG,CACvB,QAAyB,EACzB,YAAmC,EACnC,UAAmB,EACnB,EAAE,CACF,UAAU;IACR,CAAC,CAAC,iBAAiB,CAAC,QAAQ,CAAC;IAC7B,CAAC,CAAC,MAAM,CAAC,IAAI,CACX,IAAI,uBAAuB,CAAC;QAC1B,KAAK,EAAE,QAAQ,CAAC,KAAK,IAAI,QAAQ,CAAC,aAAa,IAAI,SAAS;KAC7D,CAAC,CACH,CAAA"}

package/dist/bin.d.ts

@@ -0,0 +1,3 @@
+#!/usr/bin/env node
+export {};
+//# sourceMappingURL=bin.d.ts.map

package/dist/bin.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"bin.d.ts","sourceRoot":"","sources":["../src/bin.ts"],"names":[],"mappings":""}

package/dist/bin.js

@@ -0,0 +1,47 @@
+#!/usr/bin/env node
+import { NodeRuntime, NodeServices } from "@effect/platform-node";
+import { FleetOperationError, JobStore, loadConfiguration, makeFleetService } from "@knpkv/herdr-fleet";
+import { Console, Effect, FileSystem, Path } from "effect";
+import { startHttpServer } from "./http.js";
+import { fleetConfigPath } from "./internal/config-path.js";
+import { makeHostOperations } from "./operations.js";
+const loadUiAssets = Effect.fn("Hostd.loadUiAssets")(function* (directory) {
+    const fileSystem = yield* FileSystem.FileSystem;
+    const paths = yield* Path.Path;
+    const stylesheet = yield* fileSystem.readFileString(paths.join(directory, "index.css"));
+    const fontNames = new Set([...stylesheet.matchAll(/url\(["']?\.\/([^"')]+\.woff2)/g)].flatMap((match) => match[1] === undefined ? [] : [match[1]]));
+    const fonts = yield* Effect.forEach([...fontNames], (name) => fileSystem.readFile(paths.join(directory, name)).pipe(Effect.map((contents) => [name, contents])));
+    return {
+        connectScript: yield* fileSystem.readFileString(paths.join(directory, "connect.js")),
+        fonts: new Map(fonts),
+        script: yield* fileSystem.readFileString(paths.join(directory, "approval.js")),
+        stylesheet,
+        worker: yield* fileSystem.readFileString(paths.join(directory, "approval-sw.js"))
+    };
+});
+const program = Effect.gen(function* () {
+    const paths = yield* Path.Path;
+    const configPath = yield* fleetConfigPath;
+    const config = yield* loadConfiguration(configPath);
+    const store = yield* Effect.acquireRelease(JobStore.open(paths.join(config.stateDirectory, "jobs.sqlite")), (opened) => Effect.sync(() => opened.close()));
+    const operations = yield* makeHostOperations(config);
+    const service = yield* makeFleetService({
+        approvalEnabled: config.crossHost,
+        host: config.host,
+        operations,
+        store
+    });
+    const directory = paths.dirname(yield* paths.fromFileUrl(new URL(import.meta.url)));
+    const assets = yield* loadUiAssets(directory);
+    const server = yield* Effect.acquireRelease(Effect.tryPromise({
+        try: () => startHttpServer(config, service, assets),
+        catch: (cause) => new FleetOperationError({ cause, detail: String(cause), operation: "hostd.listen" })
+    }), (running) => Effect.promise(running.close));
+    yield* Console.log(`hostd: ${config.host} local=${server.url} tailnet=${server.tailnetUrl ?? "disabled"} approval=${server.approvalUrl ?? "disabled"} serve=${server.serveUrl ?? "disabled"}`);
+    return yield* Effect.never;
+});
+program.pipe(Effect.scoped, 
+// The hostd process owns the Node service layer for its full lifetime.
+// @effect-diagnostics-next-line strictEffectProvide:off
+Effect.provide(NodeServices.layer), NodeRuntime.runMain({ disableErrorReporting: false }));
+//# sourceMappingURL=bin.js.map

package/dist/bin.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bin.js","sourceRoot":"","sources":["../src/bin.ts"],"names":[],"mappings":";AACA,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAA;AACjE,OAAO,EAAE,mBAAmB,EAAE,QAAQ,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAA;AACvG,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,QAAQ,CAAA;AAC1D,OAAO,EAAE,eAAe,EAAiB,MAAM,WAAW,CAAA;AAC1D,OAAO,EAAE,eAAe,EAAE,MAAM,2BAA2B,CAAA;AAC3D,OAAO,EAAE,kBAAkB,EAAE,MAAM,iBAAiB,CAAA;AAEpD,MAAM,YAAY,GAAG,MAAM,CAAC,EAAE,CAAC,oBAAoB,CAAC,CAAC,QAAQ,CAAC,EAAC,SAAiB;IAC9E,MAAM,UAAU,GAAG,KAAK,CAAC,CAAC,UAAU,CAAC,UAAU,CAAA;IAC/C,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAA;IAC9B,MAAM,UAAU,GAAG,KAAK,CAAC,CAAC,UAAU,CAAC,cAAc,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC,CAAA;IACvF,MAAM,SAAS,GAAG,IAAI,GAAG,CACvB,CAAC,GAAG,UAAU,CAAC,QAAQ,CAAC,iCAAiC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE,CAC5E,KAAK,CAAC,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CACzC,CACF,CAAA;IACD,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,CACjC,CAAC,GAAG,SAAS,CAAC,EACd,CAAC,IAAI,EAAE,EAAE,CACP,UAAU,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,CACnD,MAAM,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAiC,EAAE,CAAC,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,CAC1E,CACJ,CAAA;IACD,OAAO;QACL,aAAa,EAAE,KAAK,CAAC,CAAC,UAAU,CAAC,cAAc,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC;QACpF,KAAK,EAAE,IAAI,GAAG,CAAC,KAAK,CAAC;QACrB,MAAM,EAAE,KAAK,CAAC,CAAC,UAAU,CAAC,cAAc,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC;QAC9E,UAAU;QACV,MAAM,EAAE,KAAK,CAAC,CAAC,UAAU,CAAC,cAAc,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,EAAE,gBAAgB,CAAC,CAAC;KAC/D,CAAA;AACtB,CAAC,CAAC,CAAA;AAEF,MAAM,OAAO,GAAG,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClC,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAA;IAC9B,MAAM,UAAU,GAAG,KAAK,CAAC,CAAC,eAAe,CAAA;IACzC,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,iBAAiB,CAAC,UAAU,CAAC,CAAA;IACnD,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,cAAc,CACxC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,cAAc,EAAE,aAAa,CAAC,CAAC,EAC/D,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,CAC9C,CAAA;IACD,MAAM,UAAU,GAAG,KAAK,CAAC,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAA;IACpD,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,gBAAgB,CAAC;QACtC,eAAe,EAAE,MAAM,CAAC,SAAS;QACjC,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,UAAU;QACV,KAAK;KACN,CAAC,CAAA;IACF,MAAM,SAAS,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,IAAI,GAAG,CAAC,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAA;IACnF,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,YAAY,CAAC,SAAS,CAAC,CAAA;IAC7C,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,cAAc,CACzC,MAAM,CAAC,UAAU,CAAC;QAChB,GAAG,EAAE,GAAG,EAAE,CAAC,eAAe,CAAC,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC;QACnD,KAAK,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,mBAAmB,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,SAAS,EAAE,cAAc,EAAE,CAAC;KACvG,CAAC,EACF,CAAC,OAAO,EAAE,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAC3C,CAAA;IACD,KAAK,CAAC,CAAC,OAAO,CAAC,GAAG,CAChB,UAAU,MAAM,CAAC,IAAI,UAAU,MAAM,CAAC,GAAG,YAAY,MAAM,CAAC,UAAU,IAAI,UAAU,aAClF,MAAM,CAAC,WAAW,IAAI,UACxB,UAAU,MAAM,CAAC,QAAQ,IAAI,UAAU,EAAE,CAC1C,CAAA;IACD,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAA;AAC5B,CAAC,CAAC,CAAA;AAEF,OAAO,CAAC,IAAI,CACV,MAAM,CAAC,MAAM;AACb,uEAAuE;AACvE,wDAAwD;AACxD,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,KAAK,CAAC,EAClC,WAAW,CAAC,OAAO,CAAC,EAAE,qBAAqB,EAAE,KAAK,EAAE,CAAC,CACtD,CAAA"}

package/dist/connect-entry.d.ts

@@ -0,0 +1,2 @@
+import "@knpkv/herdr-connect/client";
+//# sourceMappingURL=connect-entry.d.ts.map

package/dist/connect-entry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"connect-entry.d.ts","sourceRoot":"","sources":["../src/connect-entry.ts"],"names":[],"mappings":"AAAA,OAAO,6BAA6B,CAAA"}

package/dist/connect-entry.js

@@ -0,0 +1,2 @@
+import "@knpkv/herdr-connect/client";
+//# sourceMappingURL=connect-entry.js.map

package/dist/connect-entry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"connect-entry.js","sourceRoot":"","sources":["../src/connect-entry.ts"],"names":[],"mappings":"AAAA,OAAO,6BAA6B,CAAA"}