@monotykamary/localterm-server 2.26.1 → 2.27.0

package/dist/utils/migrate-secrets-to-processes.js

@@ -0,0 +1,109 @@
+import fs from "node:fs";
+import path from "node:path";
+import { PROCESSES_FILE_VERSION, PROCESSES_FILENAME, SECRETS_FILE_VERSION } from "../constants.js";
+import { processesFileSchema, processNameSchema, secretsFileSchema, secretsFileV1Schema, } from "../schemas.js";
+// One-time, in-place migration from the pre-flip secret-centric model to the
+// process-centric model. v1 secrets.json stored the binary names a secret shims
+// directly on each entry (`programs`); v2 moves that wiring into a separate
+// processes.json where a process names which secrets it receives (the same
+// multi-select model automations use). The flip is a clean cut-over — the
+// stores only know the new shapes, so this runs once at startup, before they
+// are constructed, and rewrites both files.
+//
+// Idempotent: if secrets.json is already v2 (or absent) it no-ops; if it is v1,
+// it inverts `programs` into processes, merges with any existing processes.json
+// (union of requestedSecrets per process name, deduped, order-stable), writes
+// processes.json, then rewrites secrets.json as v2 with `programs` stripped. A
+// later boot parses the v2 file and no-ops.
+export const migrateSecretsToProcesses = (stateDirectory) => {
+    const secretsPath = path.join(stateDirectory, "secrets.json");
+    const processesPath = path.join(stateDirectory, PROCESSES_FILENAME);
+    let secretsRaw;
+    try {
+        secretsRaw = fs.readFileSync(secretsPath, "utf8");
+    }
+    catch {
+        return;
+    }
+    let secretsJson;
+    try {
+        secretsJson = JSON.parse(secretsRaw);
+    }
+    catch {
+        return;
+    }
+    // Already v2 (or some future shape the store will handle) — nothing to migrate.
+    if (secretsFileSchema.safeParse(secretsJson).success)
+        return;
+    const v1 = secretsFileV1Schema.safeParse(secretsJson);
+    if (!v1.success)
+        return;
+    // Invert: for each (secret, program) pair, the program becomes a process that
+    // requests that secret. A program listed by several secrets becomes one
+    // process requesting all of them, preserving the combined shim the old model
+    // produced (buildProgramIndex already merged them per program). Program names
+    // are filtered through processNameSchema so a hand-edited v1 file with an
+    // invalid name can't produce a processes.json the store then rejects
+    // wholesale — invalid names are dropped with a warning instead.
+    const migrated = new Map();
+    for (const entry of v1.data.secrets) {
+        for (const program of entry.programs) {
+            const nameParse = processNameSchema.safeParse(program);
+            if (!nameParse.success) {
+                console.warn(`skipping invalid program name '${program}' during migration`);
+                continue;
+            }
+            const set = migrated.get(nameParse.data) ?? new Set();
+            set.add(entry.name);
+            migrated.set(nameParse.data, set);
+        }
+    }
+    // Merge with any existing processes.json so a partial/manual processes file
+    // isn't clobbered. Union requestedSecrets per name; migrated entries first so
+    // an existing process keeps the migrated secrets ahead of its own.
+    const existingByName = new Map();
+    try {
+        const existingRaw = fs.readFileSync(processesPath, "utf8");
+        const existing = processesFileSchema.safeParse(JSON.parse(existingRaw));
+        if (existing.success) {
+            for (const process of existing.data.processes) {
+                const set = new Set(process.requestedSecrets);
+                existingByName.set(process.name, set);
+            }
+        }
+    }
+    catch {
+        // absent or invalid — start from the migrated set only
+    }
+    const merged = new Map();
+    for (const [name, secrets] of migrated) {
+        const existing = existingByName.get(name);
+        const combined = [...secrets];
+        if (existing)
+            for (const secretName of existing)
+                if (!secrets.has(secretName))
+                    combined.push(secretName);
+        merged.set(name, combined);
+        existingByName.delete(name);
+    }
+    for (const [name, secrets] of existingByName) {
+        merged.set(name, [...secrets]);
+    }
+    const processes = [...merged.entries()].map(([name, requestedSecrets]) => ({
+        name,
+        requestedSecrets,
+    }));
+    const secrets = v1.data.secrets.map((entry) => ({
+        name: entry.name,
+        envVar: entry.envVar,
+    }));
+    writeJson(processesPath, { version: PROCESSES_FILE_VERSION, processes });
+    writeJson(secretsPath, { version: SECRETS_FILE_VERSION, secrets });
+};
+const writeJson = (filePath, payload) => {
+    fs.mkdirSync(path.dirname(filePath), { recursive: true });
+    const tmpPath = `${filePath}.tmp`;
+    fs.writeFileSync(tmpPath, `${JSON.stringify(payload, null, 2)}\n`, "utf8");
+    fs.renameSync(tmpPath, filePath);
+};
+//# sourceMappingURL=migrate-secrets-to-processes.js.map

package/dist/utils/migrate-secrets-to-processes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"migrate-secrets-to-processes.js","sourceRoot":"","sources":["../../src/utils/migrate-secrets-to-processes.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,sBAAsB,EAAE,kBAAkB,EAAE,oBAAoB,EAAE,MAAM,iBAAiB,CAAC;AACnG,OAAO,EACL,mBAAmB,EACnB,iBAAiB,EACjB,iBAAiB,EACjB,mBAAmB,GACpB,MAAM,eAAe,CAAC;AAGvB,6EAA6E;AAC7E,gFAAgF;AAChF,4EAA4E;AAC5E,2EAA2E;AAC3E,0EAA0E;AAC1E,6EAA6E;AAC7E,4CAA4C;AAC5C,EAAE;AACF,gFAAgF;AAChF,gFAAgF;AAChF,8EAA8E;AAC9E,+EAA+E;AAC/E,4CAA4C;AAC5C,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,cAAsB,EAAQ,EAAE;IACxE,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,cAAc,CAAC,CAAC;IAC9D,MAAM,aAAa,GAAG,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,kBAAkB,CAAC,CAAC;IAEpE,IAAI,UAAkB,CAAC;IACvB,IAAI,CAAC;QACH,UAAU,GAAG,EAAE,CAAC,YAAY,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;IACpD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO;IACT,CAAC;IACD,IAAI,WAAoB,CAAC;IACzB,IAAI,CAAC;QACH,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IACvC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO;IACT,CAAC;IAED,gFAAgF;IAChF,IAAI,iBAAiB,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC,OAAO;QAAE,OAAO;IAE7D,MAAM,EAAE,GAAG,mBAAmB,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC;IACtD,IAAI,CAAC,EAAE,CAAC,OAAO;QAAE,OAAO;IAExB,8EAA8E;IAC9E,wEAAwE;IACxE,6EAA6E;IAC7E,8EAA8E;IAC9E,0EAA0E;IAC1E,qEAAqE;IACrE,gEAAgE;IAChE,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAuB,CAAC;IAChD,KAAK,MAAM,KAAK,IAAI,EAAE,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;QACpC,KAAK,MAAM,OAAO,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;YACrC,MAAM,SAAS,GAAG,iBAAiB,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;YACvD,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,CAAC;gBACvB,OAAO,CAAC,IAAI,CAAC,kCAAkC,OAAO,oBAAoB,CAAC,CAAC;gBAC5E,SAAS;YACX,CAAC;YACD,MAAM,GAAG,GAAG,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,IAAI,GAAG,EAAU,CAAC;YAC9D,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YACpB,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QACpC,CAAC;IACH,CAAC;IAED,4EAA4E;IAC5E,8EAA8E;IAC9E,mEAAmE;IACnE,MAAM,cAAc,GAAG,IAAI,GAAG,EAAuB,CAAC;IACtD,IAAI,CAAC;QACH,MAAM,WAAW,GAAG,EAAE,CAAC,YAAY,CAAC,aAAa,EAAE,MAAM,CAAC,CAAC;QAC3D,MAAM,QAAQ,GAAG,mBAAmB,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC;QACxE,IAAI,QAAQ,CAAC,OAAO,EAAE,CAAC;YACrB,KAAK,MAAM,OAAO,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;gBAC9C,MAAM,GAAG,GAAG,IAAI,GAAG,CAAS,OAAO,CAAC,gBAAgB,CAAC,CAAC;gBACtD,cAAc,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;YACxC,CAAC;QACH,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,uDAAuD;IACzD,CAAC;IAED,MAAM,MAAM,GAAG,IAAI,GAAG,EAAoB,CAAC;IAC3C,KAAK,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,QAAQ,EAAE,CAAC;QACvC,MAAM,QAAQ,GAAG,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC1C,MAAM,QAAQ,GAAG,CAAC,GAAG,OAAO,CAAC,CAAC;QAC9B,IAAI,QAAQ;YACV,KAAK,MAAM,UAAU,IAAI,QAAQ;gBAAE,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC;oBAAE,QAAQ,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAC7F,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;QAC3B,cAAc,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAC9B,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,cAAc,EAAE,CAAC;QAC7C,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC;IACjC,CAAC;IAED,MAAM,SAAS,GAAc,CAAC,GAAG,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,gBAAgB,CAAC,EAAE,EAAE,CAAC,CAAC;QACpF,IAAI;QACJ,gBAAgB;KACjB,CAAC,CAAC,CAAC;IAEJ,MAAM,OAAO,GAAkB,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QAC7D,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,MAAM,EAAE,KAAK,CAAC,MAAM;KACrB,CAAC,CAAC,CAAC;IAEJ,SAAS,CAAC,aAAa,EAAE,EAAE,OAAO,EAAE,sBAAsB,EAAE,SAAS,EAAE,CAAC,CAAC;IACzE,SAAS,CAAC,WAAW,EAAE,EAAE,OAAO,EAAE,oBAAoB,EAAE,OAAO,EAAE,CAAC,CAAC;AACrE,CAAC,CAAC;AAEF,MAAM,SAAS,GAAG,CAAC,QAAgB,EAAE,OAAgB,EAAQ,EAAE;IAC7D,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC1D,MAAM,OAAO,GAAG,GAAG,QAAQ,MAAM,CAAC;IAClC,EAAE,CAAC,aAAa,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAC3E,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;AACnC,CAAC,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@monotykamary/localterm-server",
-  "version": "2.26.1",
+  "version": "2.27.0",
   "description": "PTY-backed HTTP/WebSocket server that powers localterm, built on Hono + node-pty.",
   "keywords": [
     "hono",