@lensmcp/cluster 1.0.0

package/executors/gateway/gateway.impl.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"gateway.impl.d.ts","sourceRoot":"","sources":["../../../../../libs/cluster/src/executors/gateway/gateway.impl.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,UAAU,CAAC;AACtD,OAAO,EAAgB,KAAK,cAAc,EAAE,MAAM,eAAe,CAAC;AAElE;;;;;;;;;;;;;;;;GAgBG;AACH,wBAA8B,eAAe,CAC3C,OAAO,EAAE,qBAAqB,EAC9B,OAAO,EAAE,cAAc,GACtB,OAAO,CAAC;IAAE,OAAO,EAAE,OAAO,CAAA;CAAE,CAAC,CAa/B"}

package/executors/gateway/gateway.impl.js

@@ -0,0 +1,39 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.default = gatewayExecutor;
+const gateway_lib_1 = require("./gateway.lib");
+/**
+ * `gateway` executor — ONE https front door for the whole workspace,
+ * assembled dynamically from every project's `cluster` declaration:
+ *
+ *   "cluster": { "host": "api.tetros.ai.local", "service": "api", "prependPrefix": "/api" }
+ *   "cluster": { "host": "tetros.ai.local", "port": 5173, "default": true }
+ *
+ * Socket-pool services get production-shaped treatment: the gateway is the
+ * load balancer, round-robining each request across the service's child
+ * sockets (the pods), with serverless lifecycle (eager/minPods/maxPods/
+ * idleKillSec) and an auto `internal.<host>` domain for east-west calls
+ * that bypass the middleware (JWT) — a full prod demo on localhost. All of
+ * it is published to the LensMCP bus (source `gateway`, category `cluster`).
+ *
+ * The runtime lives in `gateway.lib.ts` (`startGateway`) so it is testable
+ * without signals; this wrapper only adds the executor contract.
+ */
+async function gatewayExecutor(options, context) {
+    let handle;
+    try {
+        handle = await (0, gateway_lib_1.startGateway)(options, context);
+    }
+    catch (e) {
+        console.error(e.message);
+        return { success: false };
+    }
+    return new Promise((resolve) => {
+        const stop = () => void handle.stop().then(() => resolve({ success: true }));
+        process.on('SIGINT', stop);
+        process.on('SIGTERM', stop);
+    });
+}
+module.exports = gatewayExecutor;
+module.exports.default = gatewayExecutor;
+module.exports.startGateway = gateway_lib_1.startGateway;

package/executors/gateway/gateway.lib.d.ts

@@ -0,0 +1,130 @@
+/**
+ * The gateway runtime, separated from the Nx executor so it is directly
+ * testable: `startGateway()` returns a handle with the actually-bound ports
+ * and a `stop()` — no signals needed. The executor is a thin wrapper.
+ */
+import { type ChildProcess } from 'node:child_process';
+import * as http from 'node:http';
+import type { GatewayExecutorSchema } from './schema';
+import { type AuthPolicy } from './manifest';
+export { hostMatches } from './manifest';
+/**
+ * Dev edge auth (HS256), mirroring the prod gateway: verify the end-user token, then stamp the
+ * trusted identity headers the services read (via GatewayTrustGuard). RS256/JWKS is prod's job;
+ * dev shares the `AUTH_JWT_SECRET` the auth host signs with. Returns the claims, or undefined.
+ */
+export declare function verifyDevJwt(req: http.IncomingMessage): Record<string, unknown> | undefined;
+/** Stamp verified identity onto the forwarded request — tenant from the `tid` CLAIM, never a client header. */
+export declare function stampIdentity(req: http.IncomingMessage, claims: Record<string, unknown>): void;
+export interface GatewayContext {
+    root: string;
+    projectName?: string;
+    projectsConfigurations?: {
+        projects: Record<string, {
+            root: string;
+        }>;
+    };
+}
+/** Per-project declaration: top-level `cluster` field in project.json (`davnx` legacy). */
+export interface ClusterProjectDecl {
+    /** Public dev hostname (e.g. `api.tetros.ai.local`). */
+    host?: string;
+    /** Mount PATH under the host — backend services share api.<domain> path-routed (e.g. `/channels`). */
+    path?: string;
+    /**
+     * Socket-pool mode (the "pods" model): the cluster devserver's service
+     * name. The gateway round-robins DIRECTLY over its children's unix
+     * sockets (`$TMPDIR/<service>-devserver/child-*.sock`) — one load
+     * balancer in front of N pods, like production. Also auto-exposes
+     * `internal.<host>` for east-west calls that SKIP the middleware (JWT).
+     */
+    service?: string;
+    /** TCP mode (vite apps etc.): where the dev server listens. */
+    upstream?: string;
+    /** Shorthand for upstream. */
+    port?: number;
+    /** Prepend to forwarded URLs (e.g. `/api` for an app mounted under a prefix). */
+    prependPrefix?: string;
+    /** This project also serves unmatched hostnames (the catch-all). */
+    default?: boolean;
+    /** Override the auto `internal.<host>` name, or `false` to disable it. */
+    internalHost?: string | false;
+    /** Edge auth policy (default + per-path overrides) — generated from controller decorators
+     *  by @tetros-server/gateway-sync; the gateway verifies + injects identity + enforces it.
+     *  Absent ⇒ the service is unguarded at the edge (current behavior — opt-in enforcement). */
+    auth?: AuthPolicy;
+    /** Start at gateway boot (true) or on first request — scale from zero (false, default). */
+    eager?: boolean;
+    /** Pod range: spawn with min, autoscale up to max while requests overlap. */
+    minPods?: number;
+    maxPods?: number;
+    /** Kill a gateway-spawned (non-eager) service after this many idle seconds. */
+    idleKillSec?: number;
+    /** Nx target that runs the service. Default serve-hmr. */
+    serveTarget?: string;
+    /** Devserver admin endpoint for scaling (default from port: http(s)://localhost:<port>). */
+    adminUrl?: string;
+}
+export interface SockPool {
+    dir: string;
+    socks: string[];
+    idx: number;
+    scannedAt: number;
+}
+export interface Route {
+    host?: string;
+    prefix?: string;
+    project: string;
+    prependPrefix?: string;
+    target?: string;
+    pool?: SockPool;
+    svc?: ServiceCtl;
+    internal?: boolean;
+    auth?: AuthPolicy;
+}
+export interface ServiceCtl {
+    project: string;
+    decl: ClusterProjectDecl;
+    pool: SockPool;
+    proc?: ChildProcess;
+    state: 'down' | 'starting' | 'up';
+    lastUsed: number;
+    inflight: number;
+    lastScaleAt: number;
+    spawnAt?: number;
+    lastErrors?: string[];
+    buildFailed?: boolean;
+}
+/** Test-tunable knobs on top of the user-facing schema. */
+export interface GatewayRuntimeOptions extends GatewayExecutorSchema {
+    /** Traffic-edge flush period (ms). Default 5000. */
+    trafficFlushMs?: number;
+    /** Idle sweeper period (ms). Default 10000. */
+    sweepMs?: number;
+    /** Sock-dir rescan TTL (ms). Default 1500. */
+    scanTtlMs?: number;
+    /** Cold-start wait budget (ms). Default 120000. */
+    startupTimeoutMs?: number;
+}
+export interface GatewayHandle {
+    /** Ports actually bound (resolves `0` to the assigned ephemeral port). */
+    ports: number[];
+    routes: Route[];
+    services: ServiceCtl[];
+    stop: () => Promise<void>;
+}
+/** Round-robin over the pool's sockets, rescanning the dir when the cache ages out. */
+export declare function pickSock(pool: SockPool, scanTtlMs?: number): string | undefined;
+/**
+ * Read every project's `cluster` (or legacy `davnx`) declaration and build
+ * the route table: host routes first (plus auto `internal.<host>` for pod
+ * services), the `default` catch-all last.
+ */
+export declare function discoverRoutes(rootDir: string, projects: Record<string, {
+    root: string;
+}>, sockBaseDir?: string): {
+    routes: Route[];
+    services: ServiceCtl[];
+};
+export declare function startGateway(options: GatewayRuntimeOptions, context: GatewayContext): Promise<GatewayHandle>;
+//# sourceMappingURL=gateway.lib.d.ts.map

package/executors/gateway/gateway.lib.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"gateway.lib.d.ts","sourceRoot":"","sources":["../../../../../libs/cluster/src/executors/gateway/gateway.lib.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,EAAS,KAAK,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAG9D,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAGlC,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,UAAU,CAAC;AACtD,OAAO,EAAqE,KAAK,UAAU,EAAc,MAAM,YAAY,CAAC;AAE5H,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAKzC;;;;GAIG;AACH,wBAAgB,YAAY,CAAC,GAAG,EAAE,IAAI,CAAC,eAAe,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,CAiB3F;AAED,+GAA+G;AAC/G,wBAAgB,aAAa,CAAC,GAAG,EAAE,IAAI,CAAC,eAAe,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAQ9F;AASD,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,sBAAsB,CAAC,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE;YAAE,IAAI,EAAE,MAAM,CAAA;SAAE,CAAC,CAAA;KAAE,CAAC;CACzE;AAED,2FAA2F;AAC3F,MAAM,WAAW,kBAAkB;IACjC,wDAAwD;IACxD,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,sGAAsG;IACtG,IAAI,CAAC,EAAE,MAAM,CAAC;IACd;;;;;;OAMG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,+DAA+D;IAC/D,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,8BAA8B;IAC9B,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,iFAAiF;IACjF,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,oEAAoE;IACpE,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,0EAA0E;IAC1E,YAAY,CAAC,EAAE,MAAM,GAAG,KAAK,CAAC;IAC9B;;iGAE6F;IAC7F,IAAI,CAAC,EAAE,UAAU,CAAC;IAClB,2FAA2F;IAC3F,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,6EAA6E;IAC7E,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,+EAA+E;IAC/E,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,0DAA0D;IAC1D,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,4FAA4F;IAC5F,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,QAAQ;IAAG,GAAG,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,EAAE,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE;AAE1F,MAAM,WAAW,KAAK;IACpB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,QAAQ,CAAC;IAChB,GAAG,CAAC,EAAE,UAAU,CAAC;IACjB,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,IAAI,CAAC,EAAE,UAAU,CAAC;CACnB;AAED,MAAM,WAAW,UAAU;IACzB,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,kBAAkB,CAAC;IACzB,IAAI,EAAE,QAAQ,CAAC;IACf,IAAI,CAAC,EAAE,YAAY,CAAC;IACpB,KAAK,EAAE,MAAM,GAAG,UAAU,GAAG,IAAI,CAAC;IAClC,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IACtB,WAAW,CAAC,EAAE,OAAO,CAAC;CACvB;AAED,2DAA2D;AAC3D,MAAM,WAAW,qBAAsB,SAAQ,qBAAqB;IAClE,oDAAoD;IACpD,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,+CAA+C;IAC/C,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,8CAA8C;IAC9C,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,mDAAmD;IACnD,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED,MAAM,WAAW,aAAa;IAC5B,0EAA0E;IAC1E,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,MAAM,EAAE,KAAK,EAAE,CAAC;IAChB,QAAQ,EAAE,UAAU,EAAE,CAAC;IACvB,IAAI,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;CAC3B;AAKD,uFAAuF;AACvF,wBAAgB,QAAQ,CAAC,IAAI,EAAE,QAAQ,EAAE,SAAS,SAAO,GAAG,MAAM,GAAG,SAAS,CAa7E;AAED;;;;GAIG;AACH,wBAAgB,cAAc,CAC5B,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE;IAAE,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC,EAC1C,WAAW,SAAc,GACxB;IAAE,MAAM,EAAE,KAAK,EAAE,CAAC;IAAC,QAAQ,EAAE,UAAU,EAAE,CAAA;CAAE,CA8C7C;AAED,wBAAsB,YAAY,CAChC,OAAO,EAAE,qBAAqB,EAC9B,OAAO,EAAE,cAAc,GACtB,OAAO,CAAC,aAAa,CAAC,CAulBxB"}