@lamalibre/create-lamaste 4.5.0 → 4.7.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (178) hide show
  1. package/package.json +2 -2
  2. package/scripts/bundle-vendor.js +20 -3
  3. package/scripts/lamaste-priv +56 -5
  4. package/scripts/pin-release.js +98 -0
  5. package/src/index.js +8 -1
  6. package/src/lib/env.js +19 -0
  7. package/src/lib/service-config.js +7 -0
  8. package/src/tasks/redeploy.js +8 -0
  9. package/vendor/docs/00-introduction/how-it-works.md +2 -2
  10. package/vendor/docs/00-introduction/quickstart.md +5 -5
  11. package/vendor/docs/00-introduction/what-is-lamaste.md +5 -5
  12. package/vendor/docs/01-concepts/authentication.md +6 -2
  13. package/vendor/docs/01-concepts/authorization.md +4 -0
  14. package/vendor/docs/01-concepts/certificates.md +3 -3
  15. package/vendor/docs/01-concepts/dns-and-domains.md +9 -0
  16. package/vendor/docs/01-concepts/mtls.md +2 -2
  17. package/vendor/docs/01-concepts/security-model.md +28 -3
  18. package/vendor/docs/01-concepts/tickets.md +2 -2
  19. package/vendor/docs/01-concepts/tunneling.md +4 -4
  20. package/vendor/docs/02-guides/agent-setup.md +5 -5
  21. package/vendor/docs/02-guides/certificate-management.md +2 -2
  22. package/vendor/docs/02-guides/cloud-provisioning.md +3 -3
  23. package/vendor/docs/02-guides/desktop-app-setup.md +10 -10
  24. package/vendor/docs/02-guides/installation.md +3 -3
  25. package/vendor/docs/02-guides/managing-users.md +5 -11
  26. package/vendor/docs/02-guides/onboarding.md +2 -2
  27. package/vendor/docs/02-guides/second-domain.md +82 -0
  28. package/vendor/docs/02-guides/standalone-plugin-with-tickets.md +2 -2
  29. package/vendor/docs/02-guides/static-sites.md +4 -0
  30. package/vendor/docs/03-architecture/installer-flow.md +2 -2
  31. package/vendor/docs/03-architecture/installer.md +4 -4
  32. package/vendor/docs/03-architecture/management-flow.md +1 -1
  33. package/vendor/docs/03-architecture/nginx-configuration.md +80 -12
  34. package/vendor/docs/03-architecture/overview.md +5 -5
  35. package/vendor/docs/03-architecture/panel-client.md +6 -6
  36. package/vendor/docs/03-architecture/panel-server.md +2 -2
  37. package/vendor/docs/03-architecture/state-management.md +3 -3
  38. package/vendor/docs/03-architecture/system-overview.md +1 -1
  39. package/vendor/docs/04-api-reference/agent-hosted-plugins.md +116 -37
  40. package/vendor/docs/04-api-reference/app-host.md +3 -3
  41. package/vendor/docs/04-api-reference/domains.md +192 -0
  42. package/vendor/docs/04-api-reference/gatekeeper.md +54 -8
  43. package/vendor/docs/04-api-reference/lifecycle-hooks.md +4 -4
  44. package/vendor/docs/04-api-reference/onboarding.md +1 -1
  45. package/vendor/docs/04-api-reference/overview.md +9 -0
  46. package/vendor/docs/04-api-reference/registry-and-oidc.md +26 -13
  47. package/vendor/docs/04-api-reference/sites.md +9 -0
  48. package/vendor/docs/04-api-reference/tunnels.md +35 -28
  49. package/vendor/docs/04-api-reference/users.md +41 -29
  50. package/vendor/docs/05-operations/backup-and-restore.md +1 -1
  51. package/vendor/docs/05-operations/uninstalling.md +1 -1
  52. package/vendor/docs/05-operations/upgrades.md +15 -6
  53. package/vendor/docs/06-reference/config-files.md +19 -15
  54. package/vendor/docs/06-reference/glossary.md +3 -3
  55. package/vendor/docs/06-reference/installer-flags.md +13 -13
  56. package/vendor/docs/06-reference/ports-and-services.md +1 -1
  57. package/vendor/docs/06-reference/troubleshooting.md +8 -8
  58. package/vendor/docs/_index.json +105 -19
  59. package/vendor/docs/external-members-design.md +816 -0
  60. package/vendor/docs/gatekeeper-design.md +8 -8
  61. package/vendor/docs/identity-directory-design.md +3 -3
  62. package/vendor/docs/multi-domain-relay-design.md +836 -0
  63. package/vendor/docs/package.json +1 -1
  64. package/vendor/docs/todo/lib-cli-desktop-refactor.md +27 -27
  65. package/vendor/gatekeeper/dist/index.d.ts +3 -3
  66. package/vendor/gatekeeper/dist/index.d.ts.map +1 -1
  67. package/vendor/gatekeeper/dist/index.js +2 -2
  68. package/vendor/gatekeeper/dist/index.js.map +1 -1
  69. package/vendor/gatekeeper/dist/lib/authz.d.ts +9 -0
  70. package/vendor/gatekeeper/dist/lib/authz.d.ts.map +1 -1
  71. package/vendor/gatekeeper/dist/lib/authz.js +31 -0
  72. package/vendor/gatekeeper/dist/lib/authz.js.map +1 -1
  73. package/vendor/gatekeeper/dist/lib/constants.d.ts +5 -2
  74. package/vendor/gatekeeper/dist/lib/constants.d.ts.map +1 -1
  75. package/vendor/gatekeeper/dist/lib/constants.js +5 -2
  76. package/vendor/gatekeeper/dist/lib/constants.js.map +1 -1
  77. package/vendor/gatekeeper/dist/lib/grants.d.ts.map +1 -1
  78. package/vendor/gatekeeper/dist/lib/grants.js +20 -13
  79. package/vendor/gatekeeper/dist/lib/grants.js.map +1 -1
  80. package/vendor/gatekeeper/dist/lib/migrations/gatekeeper/0004_unconsume_access_grants.sql +8 -0
  81. package/vendor/gatekeeper/dist/lib/secret.d.ts +6 -0
  82. package/vendor/gatekeeper/dist/lib/secret.d.ts.map +1 -0
  83. package/vendor/gatekeeper/dist/lib/secret.js +12 -0
  84. package/vendor/gatekeeper/dist/lib/secret.js.map +1 -0
  85. package/vendor/gatekeeper/dist/lib/templates.d.ts +20 -0
  86. package/vendor/gatekeeper/dist/lib/templates.d.ts.map +1 -1
  87. package/vendor/gatekeeper/dist/lib/templates.js +80 -14
  88. package/vendor/gatekeeper/dist/lib/templates.js.map +1 -1
  89. package/vendor/gatekeeper/dist/lib/tunnels.d.ts +3 -6
  90. package/vendor/gatekeeper/dist/lib/tunnels.d.ts.map +1 -1
  91. package/vendor/gatekeeper/dist/lib/tunnels.js +4 -16
  92. package/vendor/gatekeeper/dist/lib/tunnels.js.map +1 -1
  93. package/vendor/gatekeeper/dist/lib/types.d.ts +0 -19
  94. package/vendor/gatekeeper/dist/lib/types.d.ts.map +1 -1
  95. package/vendor/gatekeeper/dist/server/index.d.ts +6 -1
  96. package/vendor/gatekeeper/dist/server/index.d.ts.map +1 -1
  97. package/vendor/gatekeeper/dist/server/index.js +56 -11
  98. package/vendor/gatekeeper/dist/server/index.js.map +1 -1
  99. package/vendor/gatekeeper/dist/server/routes/authz.d.ts.map +1 -1
  100. package/vendor/gatekeeper/dist/server/routes/authz.js +325 -55
  101. package/vendor/gatekeeper/dist/server/routes/authz.js.map +1 -1
  102. package/vendor/gatekeeper/dist/server/routes/diagnostic.d.ts.map +1 -1
  103. package/vendor/gatekeeper/dist/server/routes/diagnostic.js +5 -2
  104. package/vendor/gatekeeper/dist/server/routes/diagnostic.js.map +1 -1
  105. package/vendor/gatekeeper/package.json +2 -2
  106. package/vendor/server/bin/lamaste-server.js +7 -0
  107. package/vendor/server/package.json +2 -2
  108. package/vendor/server/src/commands/domains.js +214 -0
  109. package/vendor/server/src/commands/plugin-identity.js +2 -16
  110. package/vendor/server/src/commands/plugin-web-surface.js +269 -0
  111. package/vendor/server/src/commands/plugins.js +175 -14
  112. package/vendor/server/src/commands/registry-credential.js +10 -3
  113. package/vendor/server/src/commands/sites.js +18 -1
  114. package/vendor/server/src/commands/status.js +19 -0
  115. package/vendor/server/src/commands/tunnels.js +4 -1
  116. package/vendor/server/src/commands/users.js +8 -19
  117. package/vendor/server/src/domains.js +92 -0
  118. package/vendor/server/src/fail.js +21 -0
  119. package/vendor/server/src/oidc-client-grants.js +63 -0
  120. package/vendor/server/src/panel-api.js +15 -0
  121. package/vendor/server/src/plugin-approval.js +80 -1
  122. package/vendor/server/src/plugin-web-surface.js +307 -0
  123. package/vendor/server-ui/dist/assets/index-B8Tv_ocF.js +84 -0
  124. package/vendor/server-ui/dist/assets/index-Cb-ADsbB.css +1 -0
  125. package/vendor/server-ui/dist/index.html +2 -2
  126. package/vendor/serverd/package.json +2 -2
  127. package/vendor/serverd/src/index.js +50 -19
  128. package/vendor/serverd/src/lib/app-error.js +24 -0
  129. package/vendor/serverd/src/lib/audience.js +12 -3
  130. package/vendor/serverd/src/lib/authelia.js +341 -35
  131. package/vendor/serverd/src/lib/chisel-runtime.js +18 -6
  132. package/vendor/serverd/src/lib/chisel.js +10 -2
  133. package/vendor/serverd/src/lib/directory.js +67 -52
  134. package/vendor/serverd/src/lib/domains.js +1792 -0
  135. package/vendor/serverd/src/lib/gatekeeper-client.js +34 -7
  136. package/vendor/serverd/src/lib/hook-pipelines.js +8 -3
  137. package/vendor/serverd/src/lib/identity-sync.js +35 -0
  138. package/vendor/serverd/src/lib/migrations/state/0015_plugin_web_surface.sql +14 -0
  139. package/vendor/serverd/src/lib/migrations/state/0016_domains.sql +53 -0
  140. package/vendor/serverd/src/lib/migrations/state/0017_membership_kind.sql +15 -0
  141. package/vendor/serverd/src/lib/migrations/state/0018_domain_group_keys.sql +23 -0
  142. package/vendor/serverd/src/lib/nginx.js +576 -131
  143. package/vendor/serverd/src/lib/owned-groups.js +326 -0
  144. package/vendor/serverd/src/lib/plugin-domain.js +86 -0
  145. package/vendor/serverd/src/lib/plugin-hooks.js +40 -11
  146. package/vendor/serverd/src/lib/plugin-lifecycle.js +129 -5
  147. package/vendor/serverd/src/lib/plugin-oidc.js +144 -42
  148. package/vendor/serverd/src/lib/plugin-packages.js +74 -2
  149. package/vendor/serverd/src/lib/plugins.js +82 -9
  150. package/vendor/serverd/src/lib/registry-credential.js +39 -6
  151. package/vendor/serverd/src/lib/services.js +9 -1
  152. package/vendor/serverd/src/lib/state.js +29 -0
  153. package/vendor/serverd/src/lib/tunnel-deps.js +2 -4
  154. package/vendor/serverd/src/lib/user-surface.js +77 -31
  155. package/vendor/serverd/src/lib/users-lock.js +23 -0
  156. package/vendor/serverd/src/lib/vhost-reconcile.js +151 -41
  157. package/vendor/serverd/src/lib/web-surface.js +783 -0
  158. package/vendor/serverd/src/middleware/user-access-session.js +11 -4
  159. package/vendor/serverd/src/routes/invite.js +15 -5
  160. package/vendor/serverd/src/routes/management/domains.js +154 -0
  161. package/vendor/serverd/src/routes/management/gatekeeper-proxy.js +44 -8
  162. package/vendor/serverd/src/routes/management/identity.js +21 -7
  163. package/vendor/serverd/src/routes/management/invitations.js +33 -4
  164. package/vendor/serverd/src/routes/management/plugin-web-surface.js +151 -0
  165. package/vendor/serverd/src/routes/management/plugins.js +6 -2
  166. package/vendor/serverd/src/routes/management/registry-credential.js +86 -57
  167. package/vendor/serverd/src/routes/management/sites.js +188 -71
  168. package/vendor/serverd/src/routes/management/tunnels.js +37 -22
  169. package/vendor/serverd/src/routes/management/users.js +184 -64
  170. package/vendor/serverd/src/routes/management.js +4 -0
  171. package/vendor/serverd/src/routes/onboarding/dns.js +3 -17
  172. package/vendor/serverd/src/routes/onboarding/provision.js +22 -13
  173. package/vendor/serverd/src/routes/user-access.js +13 -1
  174. package/vendor/gatekeeper/dist/lib/migrations/migrations/gatekeeper/0001_groups.sql +0 -7
  175. package/vendor/gatekeeper/dist/lib/migrations/migrations/gatekeeper/0002_access_grants.sql +0 -14
  176. package/vendor/gatekeeper/dist/lib/migrations/migrations/gatekeeper/0003_access_request_log.sql +0 -9
  177. package/vendor/server-ui/dist/assets/index-D-fer5ef.css +0 -1
  178. package/vendor/server-ui/dist/assets/index-DSaDPJaw.js +0 -84
@@ -13,14 +13,26 @@
13
13
  "slug": "how-it-works",
14
14
  "file": "00-introduction/how-it-works.md"
15
15
  },
16
- { "title": "Quick Start", "slug": "quickstart", "file": "00-introduction/quickstart.md" }
16
+ {
17
+ "title": "Quick Start",
18
+ "slug": "quickstart",
19
+ "file": "00-introduction/quickstart.md"
20
+ }
17
21
  ]
18
22
  },
19
23
  {
20
24
  "title": "Concepts",
21
25
  "pages": [
22
- { "title": "Tunneling", "slug": "tunneling", "file": "01-concepts/tunneling.md" },
23
- { "title": "mTLS & Client Certificates", "slug": "mtls", "file": "01-concepts/mtls.md" },
26
+ {
27
+ "title": "Tunneling",
28
+ "slug": "tunneling",
29
+ "file": "01-concepts/tunneling.md"
30
+ },
31
+ {
32
+ "title": "mTLS & Client Certificates",
33
+ "slug": "mtls",
34
+ "file": "01-concepts/mtls.md"
35
+ },
24
36
  {
25
37
  "title": "Authentication (Authelia)",
26
38
  "slug": "authentication",
@@ -61,13 +73,26 @@
61
73
  {
62
74
  "title": "Guides",
63
75
  "pages": [
64
- { "title": "Installation", "slug": "installation", "file": "02-guides/installation.md" },
65
- { "title": "Onboarding Wizard", "slug": "onboarding", "file": "02-guides/onboarding.md" },
76
+ {
77
+ "title": "Installation",
78
+ "slug": "installation",
79
+ "file": "02-guides/installation.md"
80
+ },
81
+ {
82
+ "title": "Onboarding Wizard",
83
+ "slug": "onboarding",
84
+ "file": "02-guides/onboarding.md"
85
+ },
66
86
  {
67
87
  "title": "Your First Tunnel",
68
88
  "slug": "first-tunnel",
69
89
  "file": "02-guides/first-tunnel.md"
70
90
  },
91
+ {
92
+ "title": "Adding a Second Domain",
93
+ "slug": "second-domain",
94
+ "file": "02-guides/second-domain.md"
95
+ },
71
96
  {
72
97
  "title": "Desktop App Setup",
73
98
  "slug": "desktop-app-setup",
@@ -88,7 +113,11 @@
88
113
  "slug": "certificate-management",
89
114
  "file": "02-guides/certificate-management.md"
90
115
  },
91
- { "title": "Static Sites", "slug": "static-sites", "file": "02-guides/static-sites.md" },
116
+ {
117
+ "title": "Static Sites",
118
+ "slug": "static-sites",
119
+ "file": "02-guides/static-sites.md"
120
+ },
92
121
  {
93
122
  "title": "Cloud Provisioning",
94
123
  "slug": "cloud-provisioning",
@@ -169,24 +198,61 @@
169
198
  {
170
199
  "title": "API Reference",
171
200
  "pages": [
172
- { "title": "API Overview", "slug": "api-overview", "file": "04-api-reference/overview.md" },
201
+ {
202
+ "title": "API Overview",
203
+ "slug": "api-overview",
204
+ "file": "04-api-reference/overview.md"
205
+ },
173
206
  {
174
207
  "title": "Onboarding API",
175
208
  "slug": "api-onboarding",
176
209
  "file": "04-api-reference/onboarding.md"
177
210
  },
178
- { "title": "Tunnels API", "slug": "api-tunnels", "file": "04-api-reference/tunnels.md" },
179
- { "title": "Users API", "slug": "api-users", "file": "04-api-reference/users.md" },
211
+ {
212
+ "title": "Tunnels API",
213
+ "slug": "api-tunnels",
214
+ "file": "04-api-reference/tunnels.md"
215
+ },
216
+ {
217
+ "title": "Users API",
218
+ "slug": "api-users",
219
+ "file": "04-api-reference/users.md"
220
+ },
221
+ {
222
+ "title": "Domains API",
223
+ "slug": "api-domains",
224
+ "file": "04-api-reference/domains.md"
225
+ },
180
226
  {
181
227
  "title": "Certificates API",
182
228
  "slug": "api-certificates",
183
229
  "file": "04-api-reference/certificates.md"
184
230
  },
185
- { "title": "Settings API", "slug": "api-settings", "file": "04-api-reference/settings.md" },
186
- { "title": "Services API", "slug": "api-services", "file": "04-api-reference/services.md" },
187
- { "title": "Sites API", "slug": "api-sites", "file": "04-api-reference/sites.md" },
188
- { "title": "System API", "slug": "api-system", "file": "04-api-reference/system.md" },
189
- { "title": "Tickets API", "slug": "api-tickets", "file": "04-api-reference/tickets.md" },
231
+ {
232
+ "title": "Settings API",
233
+ "slug": "api-settings",
234
+ "file": "04-api-reference/settings.md"
235
+ },
236
+ {
237
+ "title": "Services API",
238
+ "slug": "api-services",
239
+ "file": "04-api-reference/services.md"
240
+ },
241
+ {
242
+ "title": "Sites API",
243
+ "slug": "api-sites",
244
+ "file": "04-api-reference/sites.md"
245
+ },
246
+ {
247
+ "title": "System API",
248
+ "slug": "api-system",
249
+ "file": "04-api-reference/system.md"
250
+ },
251
+ {
252
+ "title": "Tickets API",
253
+ "slug": "api-tickets",
254
+ "file": "04-api-reference/tickets.md"
255
+ },
190
256
  {
191
257
  "title": "Gatekeeper API",
192
258
  "slug": "api-gatekeeper",
@@ -222,14 +288,26 @@
222
288
  {
223
289
  "title": "Operations",
224
290
  "pages": [
225
- { "title": "Monitoring", "slug": "monitoring", "file": "05-operations/monitoring.md" },
226
- { "title": "Upgrades", "slug": "upgrades", "file": "05-operations/upgrades.md" },
291
+ {
292
+ "title": "Monitoring",
293
+ "slug": "monitoring",
294
+ "file": "05-operations/monitoring.md"
295
+ },
296
+ {
297
+ "title": "Upgrades",
298
+ "slug": "upgrades",
299
+ "file": "05-operations/upgrades.md"
300
+ },
227
301
  {
228
302
  "title": "Backup & Restore",
229
303
  "slug": "backup-and-restore",
230
304
  "file": "05-operations/backup-and-restore.md"
231
305
  },
232
- { "title": "Uninstalling", "slug": "uninstalling", "file": "05-operations/uninstalling.md" }
306
+ {
307
+ "title": "Uninstalling",
308
+ "slug": "uninstalling",
309
+ "file": "05-operations/uninstalling.md"
310
+ }
233
311
  ]
234
312
  },
235
313
  {
@@ -240,7 +318,11 @@
240
318
  "slug": "installer-flags",
241
319
  "file": "06-reference/installer-flags.md"
242
320
  },
243
- { "title": "Config Files", "slug": "config-files", "file": "06-reference/config-files.md" },
321
+ {
322
+ "title": "Config Files",
323
+ "slug": "config-files",
324
+ "file": "06-reference/config-files.md"
325
+ },
244
326
  {
245
327
  "title": "Ports & Services",
246
328
  "slug": "ports-and-services",
@@ -251,7 +333,11 @@
251
333
  "slug": "troubleshooting",
252
334
  "file": "06-reference/troubleshooting.md"
253
335
  },
254
- { "title": "Glossary", "slug": "glossary", "file": "06-reference/glossary.md" }
336
+ {
337
+ "title": "Glossary",
338
+ "slug": "glossary",
339
+ "file": "06-reference/glossary.md"
340
+ }
255
341
  ]
256
342
  }
257
343
  ]