@nordbyte/nordrelay 0.4.1 → 0.5.0

package/dist/web-api-contract.js

@@ -0,0 +1,56 @@
+export const WEB_API_ROUTES = [
+    ...exact(["/api/bootstrap", "/api/health", "/api/snapshot", "/api/tasks", "/api/progress"], "inspect"),
+    ...exact(["/api/version", "/api/adapters/health"], "inspect"),
+    ...exact(["/api/diagnostics"], "diagnostics.read"),
+    ...prefix(["/api/users", "/api/groups", "/api/telegram-chats"], readWrite("users.read", "users.write")),
+    ...exact(["/api/permissions"], "users.read"),
+    ...exact(["/api/audit"], "audit.read"),
+    ...exact(["/api/control-options"], "settings.read"),
+    ...exact(["/api/settings"], readWrite("settings.read", "settings.write")),
+    ...exact(["/api/update"], "updates.run"),
+    ...prefix(["/api/agent-update"], "updates.run"),
+    ...exact(["/api/logs"], "logs.read"),
+    ...exact(["/api/logs/clear"], "logs.clear"),
+    ...exact(["/api/runtime/restart"], "system.restart"),
+    ...prefix(["/api/sessions"], readWrite("sessions.read", "sessions.write")),
+    ...exact(["/api/agent", "/api/sync", "/api/handback", "/api/locks"], readWrite("sessions.read", "sessions.write")),
+    ...prefix(["/api/auth/"], readWrite("inspect", "auth.manage")),
+    ...prefix(["/api/models", "/api/session/"], readWrite("settings.read", "settings.write")),
+    ...exact(["/api/queue"], readWrite("queue.read", "queue.write")),
+    ...exact(["/api/prompt", "/api/prompt/upload", "/api/retry"], readWrite("inspect", "prompt.send")),
+    ...exact(["/api/abort", "/api/stop"], "prompt.abort"),
+    ...prefix(["/api/chat"], readWrite("sessions.read", "sessions.write")),
+    ...prefix(["/api/activity"], "sessions.read"),
+    ...prefix(["/api/artifacts"], readWrite("files.read", "files.write")),
+];
+export function permissionForWebRequestFromContract(method, pathname) {
+    const verb = normalizeMethod(method);
+    const rule = WEB_API_ROUTES.find((candidate) => (candidate.path !== undefined && candidate.path === pathname) ||
+        (candidate.prefix !== undefined && pathname.startsWith(candidate.prefix)));
+    if (!rule) {
+        return null;
+    }
+    return resolvePermission(rule.permissions, verb);
+}
+function exact(paths, permissions) {
+    return paths.map((path) => ({ path, permissions }));
+}
+function prefix(prefixes, permissions) {
+    return prefixes.map((pathPrefix) => ({ prefix: pathPrefix, permissions }));
+}
+function readWrite(read, write) {
+    return { read, write };
+}
+function resolvePermission(rule, verb) {
+    if (typeof rule === "string") {
+        return rule;
+    }
+    return verb === "GET" ? rule.read : rule.write;
+}
+function normalizeMethod(method) {
+    const upper = (method ?? "GET").toUpperCase();
+    if (upper === "GET" || upper === "POST" || upper === "PATCH" || upper === "PUT" || upper === "DELETE") {
+        return upper;
+    }
+    return "GET";
+}

package/dist/web-dashboard-assets.js

@@ -1,2 +1,33 @@
-export { dashboardJs } from "./web-dashboard-client.js";
-export { dashboardCss } from "./web-dashboard-style.js";
+import { existsSync, readFileSync } from "node:fs";
+import path from "node:path";
+import { fileURLToPath } from "node:url";
+const moduleDir = path.dirname(fileURLToPath(import.meta.url));
+const clientSources = [
+    "client/core/runtime.js",
+    "client/overview.js",
+    "client/events.js",
+    "client/workflows.js",
+    "client/admin.js",
+];
+const styleSources = [
+    "styles/theme.css",
+    "styles/components.css",
+    "styles/layout.css",
+    "styles/responsive.css",
+];
+export function dashboardJs() {
+    return readDashboardAsset("dashboard.js", clientSources);
+}
+export function dashboardCss() {
+    return readDashboardAsset("dashboard.css", styleSources);
+}
+function readDashboardAsset(assetName, sourceFiles) {
+    const builtAsset = path.join(moduleDir, "webui-assets", assetName);
+    if (existsSync(builtAsset)) {
+        return readFileSync(builtAsset, "utf8");
+    }
+    const sourceDir = path.join(moduleDir, "webui");
+    return sourceFiles
+        .map((file) => readFileSync(path.join(sourceDir, file), "utf8"))
+        .join("\n");
+}

package/dist/web-dashboard-ui.js

@@ -1,18 +1,18 @@
 export const DASHBOARD_PAGES = [
-    { id: "overview", label: "Overview" },
-    { id: "chat", label: "Chat" },
-    { id: "sessions", label: "Sessions" },
-    { id: "queue", label: "Queue" },
-    { id: "tasks", label: "Tasks" },
-    { id: "activity", label: "Activity" },
-    { id: "artifacts", label: "Artifacts" },
-    { id: "adapters", label: "Adapters" },
-    { id: "access", label: "Access" },
-    { id: "version", label: "Version" },
-    { id: "settings", label: "Settings" },
-    { id: "logs", label: "Logs" },
-    { id: "diagnostics", label: "Diagnostics" },
+    { id: "overview", label: "Overview", permission: "inspect" },
+    { id: "chat", label: "Chat", permission: "sessions.read" },
+    { id: "sessions", label: "Sessions", permission: "sessions.read" },
+    { id: "queue", label: "Queue", permission: "queue.read" },
+    { id: "tasks", label: "Tasks", permission: "inspect" },
+    { id: "activity", label: "Activity", permission: "sessions.read" },
+    { id: "artifacts", label: "Artifacts", permission: "files.read" },
+    { id: "adapters", label: "Adapters", permission: "inspect" },
+    { id: "access", label: "Users", permission: "users.read" },
+    { id: "version", label: "Version", permission: "inspect" },
+    { id: "settings", label: "Settings", permission: "settings.read" },
+    { id: "logs", label: "Logs", permission: "logs.read" },
+    { id: "diagnostics", label: "Diagnostics", permission: "diagnostics.read" },
 ];
 export function renderDashboardNav(activePage = "overview") {
-    return DASHBOARD_PAGES.map((page) => `<button data-page="${page.id}"${page.id === activePage ? ' class="active"' : ""}>${page.label}</button>`).join("\n        ");
+    return DASHBOARD_PAGES.map((page) => `<button data-page="${page.id}" data-permission="${page.permission}"${page.id === activePage ? ' class="active"' : ""}>${page.label}</button>`).join("\n        ");
 }