@nordbyte/nordrelay 0.8.2 → 0.8.3

package/dist/web/web-dashboard-peer-routes.js

@@ -171,6 +171,25 @@ export async function handleDashboardPeerRoute(req, res, url, options) {
         options.auditPeerAction?.("peer_tls_repinned", `${updated.name} (${updated.id})`);
         return true;
     }
+    const rotateMatch = url.pathname.match(/^\/api\/peers\/([^/]+)\/rotate$/);
+    if (rotateMatch?.[1] && req.method === "POST") {
+        const body = await readJsonBody(req);
+        const readiness = await buildPeerReadiness(options.config);
+        const created = store.createRotationInvitation(decodeURIComponent(rotateMatch[1]), {
+            expiresInMs: (optionalNumberField(body, "expiresMinutes") ?? 10) * 60 * 1000,
+        });
+        const command = `nordrelay peer add ${readiness.listenUrl} --code ${created.code}`;
+        sendJson(res, 201, {
+            peer: created.peer,
+            invitation: created.invitation,
+            code: created.code,
+            command,
+            readiness,
+            warnings: readiness.warnings,
+        });
+        options.auditPeerAction?.("peer_rotation_invite_created", `${created.peer.name} (${created.peer.id})`);
+        return true;
+    }
     if (req.method === "GET" && url.pathname === "/api/peers/global-sessions") {
         const query = optionalStringField(Object.fromEntries(url.searchParams), "query") ?? "";
         const agent = parseAgent(optionalStringField(Object.fromEntries(url.searchParams), "agent"));

package/dist/web/web-dashboard-runtime-routes.js

@@ -63,7 +63,14 @@ export async function handleDashboardRuntimeRoute(req, res, url, options) {
         return true;
     }
     if (req.method === "GET" && url.pathname === "/api/jobs") {
-        sendJson(res, 200, await runtime.jobs());
+        sendJson(res, 200, await runtime.jobs({
+            limit: numberParam(url, "limit", 100),
+            cursor: url.searchParams.get("cursor") || undefined,
+        }));
+        return true;
+    }
+    if (req.method === "GET" && url.pathname === "/api/trace") {
+        sendJson(res, 200, await runtime.trace(stringField(Object.fromEntries(url.searchParams), "correlationId")));
         return true;
     }
     const jobLogMatch = url.pathname.match(/^\/api\/jobs\/([^/]+)\/log$/);

package/dist/web/web-dashboard-session-routes.js

@@ -1,5 +1,6 @@
 import { isAgentId } from "../agents/shared/agent.js";
 import { numberParam, optionalBooleanField, optionalStringField, parseUploadFiles, readJsonBody, requiredSearch, sendJson, stringField, } from "./web-dashboard-http.js";
+import { cursorPage, normalizeCursorLimit } from "../core/pagination.js";
 export async function handleDashboardSessionRoute(req, res, url, options) {
     const { runtime, authUser } = options;
     if (req.method === "GET" && url.pathname === "/api/locks") {
@@ -207,19 +208,23 @@ export async function handleDashboardSessionRoute(req, res, url, options) {
         return true;
     }
     if (req.method === "GET" && url.pathname === "/api/activity") {
+        const limit = normalizeCursorLimit(numberParam(url, "limit", 100), 100, 500);
+        const scoped = options.filterActivityByScope(authUser, runtime.activity({
+            limit: 500,
+            source: (url.searchParams.get("source") || "all"),
+            status: (url.searchParams.get("status") || "all"),
+            category: (url.searchParams.get("category") || "all"),
+            actor: url.searchParams.get("actor") || undefined,
+            agentId: url.searchParams.get("agent") || "all",
+            threadId: url.searchParams.get("thread") || undefined,
+            workspace: url.searchParams.get("workspace") || undefined,
+            type: url.searchParams.get("type") || undefined,
+            since: url.searchParams.get("since") || undefined,
+        }));
+        const scopedPage = cursorPage(scoped, url.searchParams.get("cursor") || undefined, limit, (event) => event.id);
         sendJson(res, 200, {
-            events: options.filterActivityByScope(authUser, runtime.activity({
-                limit: numberParam(url, "limit", 100),
-                source: (url.searchParams.get("source") || "all"),
-                status: (url.searchParams.get("status") || "all"),
-                category: (url.searchParams.get("category") || "all"),
-                actor: url.searchParams.get("actor") || undefined,
-                agentId: url.searchParams.get("agent") || "all",
-                threadId: url.searchParams.get("thread") || undefined,
-                workspace: url.searchParams.get("workspace") || undefined,
-                type: url.searchParams.get("type") || undefined,
-                since: url.searchParams.get("since") || undefined,
-            })),
+            events: scopedPage.items,
+            pagination: scopedPage.pagination,
         });
         return true;
     }

package/dist/web/web-dashboard-ui.js

@@ -1,20 +1,56 @@
-export const DASHBOARD_PAGES = [
+export const DASHBOARD_PRIMARY_NAV_PAGES = [
     { id: "overview", label: "Overview", permission: "inspect" },
     { id: "chat", label: "Chat", permission: "sessions.read" },
     { id: "sessions", label: "Sessions", permission: "sessions.read" },
     { id: "queue", label: "Queue", permission: "queue.read" },
     { id: "tasks", label: "Tasks", permission: "inspect" },
-    { id: "metrics", label: "Metrics", permission: "inspect" },
     { id: "activity", label: "Activity", permission: "sessions.read" },
+    { id: "trace", label: "Trace", permission: "sessions.read" },
     { id: "artifacts", label: "Artifacts", permission: "files.read" },
-    { id: "adapters", label: "Adapters", permission: "inspect" },
-    { id: "peers", label: "Peers", permission: "peers.read" },
-    { id: "access", label: "Users", permission: "users.read" },
-    { id: "version", label: "Version", permission: "inspect" },
-    { id: "settings", label: "Settings", permission: "settings.read" },
-    { id: "logs", label: "Logs", permission: "logs.read" },
-    { id: "diagnostics", label: "Diagnostics", permission: "diagnostics.read" },
 ];
+export const DASHBOARD_NAV_SECTIONS = [
+    {
+        id: "operations",
+        label: "Operations",
+        pages: [
+            { id: "metrics", label: "Metrics", permission: "inspect" },
+            { id: "adapters", label: "Adapters", permission: "inspect" },
+            { id: "version", label: "Version", permission: "inspect" },
+            { id: "logs", label: "Logs", permission: "logs.read" },
+            { id: "diagnostics", label: "Diagnostics", permission: "diagnostics.read" },
+        ],
+    },
+    {
+        id: "administration",
+        label: "Administration",
+        pages: [
+            { id: "access", label: "Users", permission: "users.read" },
+            { id: "settings", label: "Settings", permission: "settings.read" },
+            { id: "peers", label: "Peers", permission: "peers.read" },
+        ],
+    },
+];
+export const DASHBOARD_PAGES = [
+    ...DASHBOARD_PRIMARY_NAV_PAGES,
+    ...DASHBOARD_NAV_SECTIONS.flatMap((section) => section.pages),
+];
+function renderDashboardPageButton(page, activePage) {
+    return `<button type="button" data-page="${page.id}" data-permission="${page.permission}"${page.id === activePage ? ' class="active"' : ""}>${page.label}</button>`;
+}
+function renderDashboardNavSection(section, activePage) {
+    const isOpen = section.defaultOpen === true || section.pages.some((page) => page.id === activePage);
+    const itemsId = `nav-section-${section.id}`;
+    return `<div class="nav-section" data-nav-section="${section.id}" data-nav-open="${isOpen ? "true" : "false"}" data-nav-default-open="${section.defaultOpen === true ? "true" : "false"}">
+          <button type="button" class="nav-section-toggle" data-nav-toggle="${section.id}" aria-expanded="${isOpen ? "true" : "false"}" aria-controls="${itemsId}">${section.label}</button>
+          <div class="nav-section-items" id="${itemsId}"${isOpen ? "" : " hidden"}>
+            ${section.pages.map((page) => renderDashboardPageButton(page, activePage)).join("\n            ")}
+          </div>
+        </div>`;
+}
 export function renderDashboardNav(activePage = "overview") {
-    return DASHBOARD_PAGES.map((page) => `<button data-page="${page.id}" data-permission="${page.permission}"${page.id === activePage ? ' class="active"' : ""}>${page.label}</button>`).join("\n        ");
+    const primary = `<div class="nav-primary">
+            ${DASHBOARD_PRIMARY_NAV_PAGES.map((page) => renderDashboardPageButton(page, activePage)).join("\n            ")}
+          </div>`;
+    const sections = DASHBOARD_NAV_SECTIONS.map((section) => renderDashboardNavSection(section, activePage)).join("\n        ");
+    return `${primary}\n        ${sections}`;
 }

package/dist/web/web-performance.js

@@ -51,8 +51,10 @@ function routeKey(path) {
         .replace(/\/api\/peers\/[^/]+\/events$/, "/api/peers/:id/events")
         .replace(/\/api\/peers\/[^/]+\/health$/, "/api/peers/:id/health")
         .replace(/\/api\/peers\/[^/]+\/repin$/, "/api/peers/:id/repin")
+        .replace(/\/api\/peers\/[^/]+\/rotate$/, "/api/peers/:id/rotate")
         .replace(/\/api\/agent-update\/[^/]+\/(log|input|cancel)$/, "/api/agent-update/:id/$1")
         .replace(/\/api\/jobs\/[^/]+\/(log|action)$/, "/api/jobs/:id/$1")
+        .replace(/\/api\/trace$/, "/api/trace")
         .replace(/\/api\/users\/[^/]+\/sessions\/[^/]+$/, "/api/users/:id/sessions/:sessionId")
         .replace(/\/api\/users\/[^/]+\/(password|telegram|discord|slack|sessions)$/, "/api/users/:id/$1")
         .replace(/\/api\/peers\/discovery-jobs\/[^/]+\/(cancel|log)$/, "/api/peers/discovery-jobs/:id/$1")

package/dist/web/web-state.js

@@ -1,5 +1,6 @@
 import { randomUUID } from "node:crypto";
 import { activityActorLabel, activityCategoryForType, } from "../core/activity-events.js";
+import { cursorPage, normalizeCursorLimit } from "../core/pagination.js";
 import { createDocumentStore } from "../state/state-backend.js";
 const DEFAULT_CHAT_LIMIT = 300;
 const DEFAULT_ACTIVITY_LIMIT = 1000;
@@ -50,6 +51,7 @@ export class WebChatStore {
             existing.role = input.role;
             existing.text = input.text;
             existing.source = input.source;
+            existing.correlationId = input.correlationId;
             existing.turnId = input.turnId;
             existing.timestamp = input.timestamp ?? now;
             existing.key = input.key;
@@ -74,6 +76,17 @@ export class WebChatStore {
         const messages = this.readPayload().messagesByThread[threadId || "pending"] ?? [];
         return messages.slice(-Math.max(1, Math.min(this.maxMessages, limit)));
     }
+    findByCorrelationId(correlationId, limit = 100) {
+        const needle = correlationId.trim();
+        if (!needle) {
+            return [];
+        }
+        return Object.values(this.readPayload().messagesByThread)
+            .flat()
+            .filter((message) => message.correlationId === needle)
+            .sort((left, right) => Date.parse(left.timestamp) - Date.parse(right.timestamp))
+            .slice(-Math.max(1, Math.min(this.maxMessages, limit)));
+    }
     clear(threadId) {
         const payload = this.readPayload();
         const key = threadId || "pending";
@@ -124,7 +137,25 @@ export class WebActivityStore {
         return event;
     }
     list(options = {}) {
-        const limit = Math.max(1, Math.min(500, options.limit ?? 100));
+        return this.listPage(options).items;
+    }
+    listPage(options = {}) {
+        const limit = normalizeCursorLimit(options.limit, 100, 500);
+        const events = this.filteredEvents(options)
+            .sort((left, right) => Date.parse(right.timestamp) - Date.parse(left.timestamp));
+        return cursorPage(events, options.cursor, limit, (event) => event.id);
+    }
+    findByCorrelationId(correlationId, limit = 100) {
+        const needle = correlationId.trim();
+        if (!needle) {
+            return [];
+        }
+        return this.readPayload().events
+            .filter((event) => event.correlationId === needle)
+            .sort((left, right) => Date.parse(left.timestamp) - Date.parse(right.timestamp))
+            .slice(-Math.max(1, Math.min(500, limit)));
+    }
+    filteredEvents(options) {
         const since = normalizeSince(options.since);
         return this.readPayload().events
             .filter((event) => !options.source || options.source === "all" || event.source === options.source)
@@ -135,9 +166,7 @@ export class WebActivityStore {
             .filter((event) => !options.workspace || event.workspace === options.workspace)
             .filter((event) => !options.type || event.type.toLowerCase().includes(options.type.toLowerCase()))
             .filter((event) => !options.actor || activityActorMatches(event.actor, options.actor))
-            .filter((event) => !since || Date.parse(event.timestamp) >= since)
-            .slice(-limit)
-            .reverse();
+            .filter((event) => !since || Date.parse(event.timestamp) >= since);
     }
     readPayload() {
         const payload = this.store.read();

package/dist/webui-assets/dashboard.css

@@ -44,48 +44,68 @@
   --shadow:0 10px 28px rgba(0,0,0,.22);
   --link:#75c99a;
 }
-.agent-settings-nav {
+.access-tab {
+  display: none;
+}
+.access-tab.active {
+  display: block;
+}
+.section-header {
   display: flex;
-  align-items: center;
-  gap: 8px;
-  flex-wrap: wrap;
-  margin: 0 0 12px;
-  padding: 10px;
-  border: 1px solid var(--border-soft);
-  border-radius: 8px;
-  background: var(--surface);
+  align-items: flex-end;
+  justify-content: space-between;
+  gap: 16px;
+  margin: -12px -16px 0;
+  padding: 0 16px;
 }
-.agent-settings-nav strong {
-  font-size: 13px;
-  color: var(--muted);
-  margin-right: 4px;
+.access-section-header,
+.settings-section-header {
+  margin-bottom: 12px;
 }
-.agent-settings-nav button {
-  background: var(--surface);
-  color: var(--text);
-  border-color: var(--border);
-  min-height: 32px;
-  height: 32px;
-  line-height: 1;
+.section-tabs {
+  display: flex;
+  align-items: flex-end;
+  gap: 2px;
+  width: 100%;
+  min-width: 0;
+  min-height: 43px;
+  overflow-x: auto;
+  overflow-y: hidden;
+  border-bottom: 1px solid var(--border);
 }
-.agent-settings-nav button.active {
-  background: var(--accent);
-  color: white;
-  border-color: var(--accent);
+.section-tabs button {
+  appearance: none;
+  -webkit-appearance: none;
+  display: inline-flex;
+  align-items: center;
+  justify-content: center;
+  min-height: 43px;
+  height: 43px;
+  margin: 0;
+  padding: 0 14px;
+  border: 0;
+  border-radius: 0;
+  background: transparent;
+  color: var(--muted);
+  font-weight: 650;
+  line-height: 1;
+  white-space: nowrap;
+  cursor: pointer;
+  box-shadow: inset 0 -2px 0 transparent;
 }
-@media (max-width: 560px) {
-  .agent-settings-nav {
-    align-items: stretch;
-  }
-  .agent-settings-nav button {
-    width: 100%;
-  }
+.section-tabs button:hover {
+  background: color-mix(in srgb, var(--accent) 8%, transparent);
+  color: var(--text);
 }
-.access-tab {
-  display: none;
+.section-tabs button.active,
+.section-tabs button[aria-selected=true] {
+  box-shadow: inset 0 -2px 0 var(--accent);
+  background: transparent;
+  color: var(--text);
 }
-.access-tab.active {
-  display: block;
+.section-tabs button:focus-visible {
+  outline: 2px solid var(--accent);
+  outline-offset: -3px;
 }
 .access-tab-heading {
   display: flex;
@@ -94,24 +114,130 @@
   gap: 12px;
   margin: 0 0 10px;
 }
-.access-tab-heading h2 {
-  margin: 0;
-}
 .access-tab-heading input {
   max-width: 320px;
 }
+.settings-subnav {
+  display: flex;
+  align-items: center;
+  gap: 10px;
+  margin: 0 0 14px;
+}
+.settings-subnav[hidden] {
+  display: none;
+}
+.settings-subnav label {
+  display: inline-flex;
+  align-items: center;
+  gap: 8px;
+  color: var(--muted);
+  font-size: 13px;
+  line-height: 1;
+}
+.settings-subnav select {
+  min-width: 220px;
+}
+.settings-actions {
+  margin: 0 0 14px;
+}
+.access-filter-row {
+  display: flex;
+  align-items: center;
+  gap: 8px;
+  flex-wrap: wrap;
+}
+.access-filter-row input,
+.access-filter-row select {
+  min-width: 170px;
+}
 .access-id-row {
   display: flex;
   align-items: center;
   gap: 8px;
   flex-wrap: wrap;
 }
+.user-list {
+  gap: 10px;
+}
+.user-card-main {
+  display: grid;
+  grid-template-columns: minmax(0, 1fr) auto;
+  gap: 12px;
+  align-items: start;
+}
+.user-card-meta {
+  display: flex;
+  align-items: center;
+  justify-content: flex-end;
+  gap: 6px;
+  flex-wrap: wrap;
+  max-width: 460px;
+}
+.identity-actions {
+  margin-bottom: 10px;
+}
+.user-detail-tabs {
+  margin: 14px 0 12px;
+}
+.user-detail-panel {
+  display: none;
+}
+.user-detail-panel.active {
+  display: block;
+}
+.access-effective-grid {
+  display: grid;
+  grid-template-columns: repeat(2, minmax(0, 1fr));
+  gap: 12px;
+}
+.permission-category-grid {
+  display: grid;
+  grid-template-columns: repeat(auto-fit, minmax(220px, 1fr));
+  gap: 10px;
+}
+.permission-section {
+  min-width: 0;
+  margin: 0;
+  border: 1px solid var(--border-soft);
+  border-radius: 8px;
+  padding: 10px;
+  background: var(--surface-soft);
+}
+.permission-section legend {
+  font-size: 12px;
+  font-weight: 700;
+  color: var(--muted);
+  padding: 0 4px;
+}
+.permission-section label {
+  display: flex !important;
+  margin: 5px 0;
+}
+.scope-section {
+  display: grid;
+  gap: 6px;
+}
+.scope-section small {
+  color: var(--muted);
+}
+@media (max-width: 760px) {
+  .user-card-main,
+  .access-effective-grid {
+    grid-template-columns: 1fr;
+  }
+  .user-card-meta {
+    justify-content: flex-start;
+    max-width: none;
+  }
+}
 @media (max-width: 560px) {
   .access-tab-heading {
     align-items: stretch;
     flex-direction: column;
   }
-  .access-tab-heading input {
+  .access-tab-heading input,
+  .access-filter-row input,
+  .access-filter-row select {
     max-width: none;
     width: 100%;
   }
@@ -395,6 +521,10 @@
 .log-line {
   display: block;
 }
+.log-line.INFO {
+  color: var(--pre-text);
+  font-weight: 400;
+}
 .log-line.ERROR {
   color: var(--danger);
   font-weight: 700;
@@ -626,6 +756,62 @@ nav button.active,
 nav button:hover {
   background: color-mix(in srgb, var(--accent) 35%, transparent);
 }
+.nav-section {
+  display: flex;
+  flex-direction: column;
+  gap: 4px;
+}
+.nav-section[hidden],
+.nav-section-items[hidden] {
+  display: none;
+}
+.nav-primary {
+  display: flex;
+  flex-direction: column;
+  gap: 4px;
+}
+.nav-primary + .nav-section,
+.nav-section + .nav-section {
+  margin-top: 8px;
+  padding-top: 10px;
+  border-top: 1px solid color-mix(in srgb, var(--sidebar-border) 72%, transparent);
+}
+.nav-section-items {
+  display: flex;
+  flex-direction: column;
+  gap: 4px;
+}
+.nav-section-toggle {
+  min-height: 30px !important;
+  height: 30px !important;
+  padding: 0 8px !important;
+  color: var(--sidebar-muted);
+  font-size: 11px;
+  font-weight: 760;
+  line-height: 1;
+  text-transform: uppercase;
+  letter-spacing: .04em;
+  justify-content: space-between !important;
+}
+.nav-section-toggle::after {
+  content: "";
+  width: 7px;
+  height: 7px;
+  border-right: 1.5px solid currentColor;
+  border-bottom: 1.5px solid currentColor;
+  transform: rotate(45deg) translateY(-1px);
+  opacity: .8;
+}
+.nav-section[data-nav-open=true] .nav-section-toggle::after {
+  transform: rotate(225deg) translateY(-1px);
+}
+.nav-section-toggle.active {
+  color: var(--sidebar-text);
+}
+.nav-section-toggle.active,
+.nav-section-toggle:hover {
+  background: color-mix(in srgb, var(--accent) 24%, transparent);
+}
 main {
   min-width: 0;
   display: flex;
@@ -1073,6 +1259,8 @@ input[type=file] {
   border-radius: 8px;
   padding: 12px;
   background: var(--surface-soft);
+  content-visibility: auto;
+  contain-intrinsic-size: 96px;
 }
 .item strong {
   display: block;