@linxin666/dsh-ssh 0.1.14 → 0.1.15

package/src/engine/tunnel.ts

@@ -0,0 +1,125 @@
+/**
+ * Local port-forward tunnels: one loopback-only listener per tunnel, pinned
+ * to a pooled connection so an idle sweep never closes it, with per-tunnel
+ * socket tracking and stop (single / alias-scoped / all).
+ */
+
+import { createServer, type Server as NetServer, type Socket } from 'node:net'
+import type { TunnelInfo } from '../protocol.ts'
+import { acquire, disposeRecord, type PoolEngine } from './connection-pool.ts'
+
+/** One active tunnel record (server + pinned client + live sockets). */
+export interface TunnelRecord {
+  info: TunnelInfo
+  server: NetServer
+  alias: string
+  sockets: Set<Socket>
+}
+
+/** The engine slice the tunnel module needs (adds the tunnel registry). */
+export interface TunnelEngine extends PoolEngine {
+  readonly tunnels: Map<string, TunnelRecord>
+  nextTunnelId: number
+}
+
+/** Start a local port-forward tunnel (listens on 127.0.0.1 only). */
+export async function startTunnel(
+  engine: TunnelEngine,
+  alias: string,
+  options: { remotePort: number; remoteHost?: string; localPort?: number },
+): Promise<TunnelInfo> {
+  if (!Number.isInteger(options.remotePort) || options.remotePort < 1 || options.remotePort > 65535) {
+    throw new Error('remotePort must be an integer in 1..65535')
+  }
+  if (options.localPort !== undefined && (!Number.isInteger(options.localPort) || options.localPort < 1 || options.localPort > 65535)) {
+    throw new Error('localPort must be an integer in 1..65535')
+  }
+  const entry = engine.store.find(alias)
+  if (entry === undefined) throw new Error('alias \'' + alias + '\' not found — add it first')
+  const remoteHost = options.remoteHost ?? '127.0.0.1'
+  const id = 'tun-' + engine.nextTunnelId
+  engine.nextTunnelId += 1
+  const info: TunnelInfo = {
+    id,
+    alias,
+    localPort: 0,
+    remoteHost,
+    remotePort: options.remotePort,
+    state: 'connecting',
+    startedAt: Date.now(),
+  }
+  const record = await acquire(engine, alias)
+  const client = record.client
+  const sockets = new Set<Socket>()
+  const server = createServer((socket) => {
+    sockets.add(socket)
+    socket.on('close', () => { sockets.delete(socket) })
+    client.forwardOut('127.0.0.1', 0, remoteHost, options.remotePort, (error, stream) => {
+      if (error !== undefined) {
+        socket.destroy()
+        return
+      }
+      // Both ends of the pipe can die independently; destroy the pair so an
+      // unhandled 'error' event can never crash the host process.
+      const destroy = (): void => {
+        try { socket.destroy() } catch { /* gone */ }
+        try { stream.close() } catch { /* gone */ }
+      }
+      stream.on('error', destroy)
+      socket.on('error', destroy)
+      stream.on('close', destroy)
+      socket.on('close', destroy)
+      stream.pipe(socket).pipe(stream)
+    })
+  })
+  try {
+    await new Promise<void>((resolve, reject) => {
+      server.once('error', reject)
+      server.listen(options.localPort ?? 0, '127.0.0.1', () => {
+        server.removeListener('error', reject)
+        resolve()
+      })
+    })
+  } catch (error) {
+    // Roll back: never leave an unpinned orphan connection behind.
+    if (!record.pinned && record.inFlight === 0) disposeRecord(engine, alias, record)
+    throw error
+  }
+  record.pinned = true
+  const address = server.address()
+  info.localPort = typeof address === 'object' && address !== null ? address.port : 0
+  info.state = 'forwarding'
+  engine.tunnels.set(id, { info, server, alias, sockets })
+  return info
+}
+
+/** All active tunnels. */
+export function listTunnels(engine: TunnelEngine): TunnelInfo[] {
+  return [...engine.tunnels.values()].map(tunnel => ({ ...tunnel.info }))
+}
+
+/** Stop one tunnel (closes the listener, live sockets, and the pinned connection). */
+export function stopTunnel(engine: TunnelEngine, id: string): boolean {
+  const tunnel = engine.tunnels.get(id)
+  if (tunnel === undefined) return false
+  engine.tunnels.delete(id)
+  try { tunnel.server.close() } catch { /* already closed */ }
+  for (const socket of tunnel.sockets) {
+    try { socket.destroy() } catch { /* already closed */ }
+  }
+  tunnel.sockets.clear()
+  disposeRecord(engine, tunnel.alias)
+  return true
+}
+
+/** Stop all tunnels (optionally for one alias). */
+export function stopAllTunnels(engine: TunnelEngine, alias?: string): number {
+  let count = 0
+  for (const [id, tunnel] of [...engine.tunnels]) {
+    if (alias === undefined || tunnel.alias === alias) {
+      stopTunnel(engine, id)
+      count += 1
+    }
+  }
+  return count
+}