@naviyra/cloud-panel 0.0.0-stage → 0.0.2

package/apps/agent/src/server.mjs

@@ -0,0 +1,195 @@
+import http from "node:http";
+import { timingSafeEqual, createHash } from "node:crypto";
+import { pathToFileURL } from "node:url";
+import { Runtime } from "./runtime.mjs";
+import {
+  projectInput,
+  idSchema,
+  deploymentInput,
+  MAX_ZIP_BYTES,
+} from "@naviyra/shared";
+import {
+  cloudflareStatus,
+  startCloudflareLogin,
+  cloudflareLoginStatus,
+  startCloudflareApiLogin,
+  cloudflareApiLoginStatus,
+  listDns,
+  getDnsRecord,
+  updateDnsRecord,
+  emailOverview,
+  setEmailRouting,
+  createEmailRule,
+  updateEmailRule,
+  deleteEmailRule,
+  addDestination,
+  deleteDestination,
+} from "./cloudflare.mjs";
+
+export function createServer(runtime, token) {
+  if (!token || token.length < 32)
+    throw Error("AGENT_TOKEN must contain at least 32 characters");
+  const digest = (value) => createHash("sha256").update(value).digest();
+  return http.createServer(async (req, res) => {
+    const send = (status, data) => {
+      res.writeHead(status, {
+        "Content-Type": "application/json",
+        "Cache-Control": "no-store",
+      });
+      res.end(JSON.stringify(data));
+    };
+    try {
+      if (
+        !timingSafeEqual(
+          digest(req.headers.authorization || ""),
+          digest(`Bearer ${token}`),
+        )
+      )
+        return send(401, { error: "Unauthorized" });
+      const url = new URL(req.url, "http://localhost");
+      if (req.method === "GET" && url.pathname === "/health")
+        return send(200, { ok: true, mode: runtime.mode });
+      if (req.method === "GET" && url.pathname === "/system/metrics")
+        return send(200, runtime.systemMetrics());
+      if (url.pathname.startsWith("/cloudflare")) {
+        const readJson = async () => {
+          let size = 0;
+          const chunks = [];
+          for await (const chunk of req) {
+            size += chunk.length;
+            if (size > 8192) {
+              const error = Error("Payload too large");
+              error.status = 413;
+              throw error;
+            }
+            chunks.push(chunk);
+          }
+          const text = Buffer.concat(chunks).toString();
+          return text ? JSON.parse(text) : {};
+        };
+        const cf = url.pathname.match(
+          /^\/cloudflare\/(?:(status|login|api-login|dns|email)|dns\/([a-f0-9]{32})|email\/(routing|rules|addresses)(?:\/([a-f0-9]{32}))?)$/i,
+        );
+        if (!cf) return send(404, { error: "Not found" });
+        const [, root, dnsId, emailAction, emailId] = cf;
+        if (req.method === "GET" && root === "status")
+          return send(200, await cloudflareStatus());
+        if (req.method === "GET" && root === "login")
+          return send(200, cloudflareLoginStatus());
+        if (req.method === "POST" && root === "login") {
+          await readJson();
+          return send(202, await startCloudflareLogin());
+        }
+        if (req.method === "GET" && root === "api-login")
+          return send(200, cloudflareApiLoginStatus());
+        if (req.method === "POST" && root === "api-login") {
+          await readJson();
+          return send(202, await startCloudflareApiLogin());
+        }
+        if (req.method === "GET" && root === "dns")
+          return send(200, await listDns());
+        if (req.method === "GET" && dnsId)
+          return send(200, await getDnsRecord(dnsId));
+        if (req.method === "PUT" && dnsId)
+          return send(200, await updateDnsRecord(dnsId, await readJson()));
+        if (req.method === "GET" && root === "email")
+          return send(200, await emailOverview());
+        if (req.method === "POST" && emailAction === "routing")
+          return send(
+            200,
+            await setEmailRouting(Boolean((await readJson()).enabled)),
+          );
+        if (req.method === "POST" && emailAction === "rules" && !emailId)
+          return send(201, await createEmailRule(await readJson()));
+        if (req.method === "PUT" && emailAction === "rules" && emailId)
+          return send(200, await updateEmailRule(emailId, await readJson()));
+        if (req.method === "DELETE" && emailAction === "rules" && emailId)
+          return send(
+            200,
+            await deleteEmailRule(emailId, url.searchParams.get("domain") || ""),
+          );
+        if (req.method === "POST" && emailAction === "addresses" && !emailId)
+          return send(201, await addDestination((await readJson()).email));
+        if (req.method === "DELETE" && emailAction === "addresses" && emailId)
+          return send(200, await deleteDestination(emailId));
+        return send(405, { error: "Method not allowed" });
+      }
+      const match = url.pathname.match(
+        /^\/projects(?:\/([^/]+))?(?:\/(deploy|source|restart|logs|metrics))?$/,
+      );
+      if (!match) return send(404, { error: "Not found" });
+      const id = match[1] ? idSchema.parse(match[1]) : null;
+      const action = match[2];
+      if (req.method === "GET" && id) {
+        if (action === "logs") return send(200, await runtime.logs(id));
+        if (action === "metrics") return send(200, await runtime.metrics(id));
+        if (!action) return send(200, runtime.get(id));
+      }
+      let size = 0;
+      const chunks = [];
+      const limit = action === "source" ? MAX_ZIP_BYTES : 8192;
+      for await (const chunk of req) {
+        size += chunk.length;
+        if (size > limit) return send(413, { error: "Payload too large" });
+        chunks.push(chunk);
+      }
+      const body = Buffer.concat(chunks);
+      if (req.method === "POST" && !id) {
+        const input = JSON.parse(body.toString());
+        return send(
+          201,
+          await runtime.serial(() =>
+            runtime.create(idSchema.parse(input.id), projectInput.parse(input)),
+          ),
+        );
+      }
+      if (req.method === "PUT" && action === "source") {
+        await runtime.serial(() => runtime.upload(id, body));
+        return send(200, { ok: true });
+      }
+      if (req.method === "POST" && action === "deploy") {
+        const input = deploymentInput.parse(JSON.parse(body.toString()));
+        return send(
+          202,
+          await runtime.serial(() => runtime.deploy(id, input.deployment_id)),
+        );
+      }
+      if (req.method === "POST" && action === "restart")
+        return send(200, await runtime.serial(() => runtime.restart(id)));
+      if (req.method === "DELETE" && id && !action) {
+        await runtime.serial(() => runtime.remove(id));
+        return send(200, { ok: true });
+      }
+      return send(405, { error: "Method not allowed" });
+    } catch (error) {
+      send(
+        error.status ||
+          (error.name === "ZodError" || error instanceof SyntaxError
+            ? 400
+            : 500),
+        { error: error.message },
+      );
+    }
+  });
+}
+if (
+  process.argv[1] &&
+  import.meta.url === pathToFileURL(process.argv[1]).href
+) {
+  const runtime = await new Runtime({
+    root: process.env.AGENT_ROOT || ".runtime",
+    mode: process.env.AGENT_MODE || "mock",
+    portMin: Number(process.env.PORT_MIN || 3100),
+    portMax: Number(process.env.PORT_MAX || 3999),
+  }).init();
+  for (const signal of ["SIGINT", "SIGTERM"])
+    process.once(signal, async () => {
+      await runtime.supervisor.shutdown();
+      process.exit(0);
+    });
+  createServer(runtime, process.env.AGENT_TOKEN).listen(
+    Number(process.env.AGENT_PORT || 4001),
+    process.env.AGENT_HOST || "127.0.0.1",
+    () => console.log(`Naviyra agent listening (${runtime.mode})`),
+  );
+}

package/apps/agent/src/static-server.mjs

@@ -0,0 +1,53 @@
+import http from "node:http";
+import { realpath, stat, readFile } from "node:fs/promises";
+import path from "node:path";
+const root = await realpath(process.argv[2]);
+const types = {
+  ".html": "text/html; charset=utf-8",
+  ".js": "text/javascript",
+  ".css": "text/css",
+  ".json": "application/json",
+  ".svg": "image/svg+xml",
+  ".png": "image/png",
+  ".jpg": "image/jpeg",
+  ".ico": "image/x-icon",
+  ".woff2": "font/woff2",
+  ".txt": "text/plain",
+  ".webp": "image/webp",
+};
+http
+  .createServer(async (req, res) => {
+    try {
+      if (!["GET", "HEAD"].includes(req.method)) {
+        res.writeHead(405);
+        res.end();
+        return;
+      }
+      const requested = decodeURIComponent(
+        new URL(req.url, "http://localhost").pathname,
+      );
+      if (
+        requested.split("/").some((part) => part.startsWith(".")) ||
+        requested.includes("\\") ||
+        requested.includes("\0")
+      )
+        throw Error();
+      let file = await realpath(path.join(root, requested));
+      let relative = path.relative(root, file);
+      if (relative.startsWith("..") || path.isAbsolute(relative)) throw Error();
+      if ((await stat(file)).isDirectory())
+        file = await realpath(path.join(file, "index.html"));
+      relative = path.relative(root, file);
+      if (relative.startsWith("..") || path.isAbsolute(relative)) throw Error();
+      const data = await readFile(file);
+      res.writeHead(200, {
+        "Content-Type": types[path.extname(file)] || "application/octet-stream",
+        "X-Content-Type-Options": "nosniff",
+      });
+      res.end(req.method === "HEAD" ? undefined : data);
+    } catch {
+      res.writeHead(404);
+      res.end("Not found");
+    }
+  })
+  .listen(Number(process.env.PORT), "127.0.0.1");

package/apps/panel/AGENTS.md

@@ -0,0 +1,9 @@
+<!-- BEGIN:nextjs-agent-rules -->
+
+# This is NOT the Next.js you know
+
+This version has breaking changes — APIs, conventions, and file structure may all differ from your training data. Read the relevant guide in `node_modules/next/dist/docs/` (resolved from this file's directory; in monorepos the `next` package may not be visible from the repo root) before writing any code. Heed deprecation notices.
+
+This block is written and re-added by `next dev` — verify at `node_modules/next/dist/server/lib/generate-agent-files.js`. Removing it from a diff only re-creates the uncommitted change; committing it with your work keeps the tree clean.
+
+<!-- END:nextjs-agent-rules -->

package/apps/panel/CLAUDE.md

@@ -0,0 +1 @@
+@AGENTS.md