@qodalis/cli-server-plugin-admin 1.0.0-beta.5 → 1.0.0-beta.7
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +9 -2
- package/dashboard/assets/index-BAmUWZCS.js +242 -0
- package/dashboard/assets/index-BF7ofZj2.css +32 -0
- package/dashboard/assets/wasm/qodalis_cli_wasm_bg.wasm +0 -0
- package/dashboard/index.html +3 -2
- package/dist/auth/auth-controller.d.ts +2 -1
- package/dist/auth/auth-controller.d.ts.map +1 -1
- package/dist/auth/auth-controller.js +35 -5
- package/dist/auth/auth-controller.js.map +1 -1
- package/dist/auth/auth-middleware.d.ts +2 -1
- package/dist/auth/auth-middleware.d.ts.map +1 -1
- package/dist/auth/auth-middleware.js +35 -1
- package/dist/auth/auth-middleware.js.map +1 -1
- package/dist/auth/auth-provider.d.ts +33 -0
- package/dist/auth/auth-provider.d.ts.map +1 -0
- package/dist/auth/auth-provider.js +16 -0
- package/dist/auth/auth-provider.js.map +1 -0
- package/dist/cli-admin-builder.d.ts +11 -7
- package/dist/cli-admin-builder.d.ts.map +1 -1
- package/dist/cli-admin-builder.js +37 -47
- package/dist/cli-admin-builder.js.map +1 -1
- package/dist/index.d.ts +1 -0
- package/dist/index.d.ts.map +1 -1
- package/dist/index.js +3 -1
- package/dist/index.js.map +1 -1
- package/dist/services/admin-config.d.ts +2 -0
- package/dist/services/admin-config.d.ts.map +1 -1
- package/dist/services/admin-config.js +4 -3
- package/dist/services/admin-config.js.map +1 -1
- package/dist/services/dashboard-dir.d.ts +10 -0
- package/dist/services/dashboard-dir.d.ts.map +1 -0
- package/dist/services/dashboard-dir.js +51 -0
- package/dist/services/dashboard-dir.js.map +1 -0
- package/dist/services/log-ring-buffer.d.ts +2 -0
- package/dist/services/log-ring-buffer.d.ts.map +1 -1
- package/dist/services/log-ring-buffer.js +12 -0
- package/dist/services/log-ring-buffer.js.map +1 -1
- package/dist/tsconfig.tsbuildinfo +1 -1
- package/package.json +6 -3
- package/dashboard/assets/index-CKzcPzP-.js +0 -199
- package/dashboard/assets/index-LZx7c-rD.css +0 -32
|
@@ -0,0 +1,32 @@
|
|
|
1
|
+
/**
|
|
2
|
+
* Copyright (c) 2014 The xterm.js authors. All rights reserved.
|
|
3
|
+
* Copyright (c) 2012-2013, Christopher Jeffrey (MIT License)
|
|
4
|
+
* https://github.com/chjj/term.js
|
|
5
|
+
* @license MIT
|
|
6
|
+
*
|
|
7
|
+
* Permission is hereby granted, free of charge, to any person obtaining a copy
|
|
8
|
+
* of this software and associated documentation files (the "Software"), to deal
|
|
9
|
+
* in the Software without restriction, including without limitation the rights
|
|
10
|
+
* to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
|
|
11
|
+
* copies of the Software, and to permit persons to whom the Software is
|
|
12
|
+
* furnished to do so, subject to the following conditions:
|
|
13
|
+
*
|
|
14
|
+
* The above copyright notice and this permission notice shall be included in
|
|
15
|
+
* all copies or substantial portions of the Software.
|
|
16
|
+
*
|
|
17
|
+
* THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
|
|
18
|
+
* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
|
|
19
|
+
* FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
|
|
20
|
+
* AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
|
|
21
|
+
* LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
|
|
22
|
+
* OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
|
|
23
|
+
* THE SOFTWARE.
|
|
24
|
+
*
|
|
25
|
+
* Originally forked from (with the author's permission):
|
|
26
|
+
* Fabrice Bellard's javascript vt100 for jslinux:
|
|
27
|
+
* http://bellard.org/jslinux/
|
|
28
|
+
* Copyright (c) 2011 Fabrice Bellard
|
|
29
|
+
* The original design remains. The terminal itself
|
|
30
|
+
* has been extended to include xterm CSI codes, among
|
|
31
|
+
* other features.
|
|
32
|
+
*/.xterm{cursor:text;position:relative;-moz-user-select:none;user-select:none;-ms-user-select:none;-webkit-user-select:none}.xterm.focus,.xterm:focus{outline:none}.xterm .xterm-helpers{position:absolute;top:0;z-index:5}.xterm .xterm-helper-textarea{padding:0;border:0;margin:0;position:absolute;opacity:0;left:-9999em;top:0;width:0;height:0;z-index:-5;white-space:nowrap;overflow:hidden;resize:none}.xterm .composition-view{background:#000;color:#fff;display:none;position:absolute;white-space:nowrap;z-index:1}.xterm .composition-view.active{display:block}.xterm .xterm-viewport{background-color:#000;overflow-y:scroll;cursor:default;position:absolute;right:0;left:0;top:0;bottom:0}.xterm .xterm-screen{position:relative}.xterm .xterm-screen canvas{position:absolute;left:0;top:0}.xterm-char-measure-element{display:inline-block;visibility:hidden;position:absolute;top:0;left:-9999em;line-height:normal}.xterm.enable-mouse-events{cursor:default}.xterm.xterm-cursor-pointer,.xterm .xterm-cursor-pointer{cursor:pointer}.xterm.column-select.focus{cursor:crosshair}.xterm .xterm-accessibility:not(.debug),.xterm .xterm-message{position:absolute;left:0;top:0;bottom:0;right:0;z-index:10;color:transparent;pointer-events:none}.xterm .xterm-accessibility-tree:not(.debug) *::-moz-selection{color:transparent}.xterm .xterm-accessibility-tree:not(.debug) *::selection{color:transparent}.xterm .xterm-accessibility-tree{font-family:monospace;-webkit-user-select:text;-moz-user-select:text;user-select:text;white-space:pre}.xterm .xterm-accessibility-tree>div{transform-origin:left;width:-moz-fit-content;width:fit-content}.xterm .live-region{position:absolute;left:-9999px;width:1px;height:1px;overflow:hidden}.xterm-dim{opacity:1!important}.xterm-underline-1{text-decoration:underline}.xterm-underline-2{-webkit-text-decoration:double underline;text-decoration:double underline}.xterm-underline-3{-webkit-text-decoration:wavy underline;text-decoration:wavy underline}.xterm-underline-4{-webkit-text-decoration:dotted underline;text-decoration:dotted underline}.xterm-underline-5{-webkit-text-decoration:dashed underline;text-decoration:dashed underline}.xterm-overline{text-decoration:overline}.xterm-overline.xterm-underline-1{text-decoration:overline underline}.xterm-overline.xterm-underline-2{-webkit-text-decoration:overline double underline;text-decoration:overline double underline}.xterm-overline.xterm-underline-3{-webkit-text-decoration:overline wavy underline;text-decoration:overline wavy underline}.xterm-overline.xterm-underline-4{-webkit-text-decoration:overline dotted underline;text-decoration:overline dotted underline}.xterm-overline.xterm-underline-5{-webkit-text-decoration:overline dashed underline;text-decoration:overline dashed underline}.xterm-strikethrough{text-decoration:line-through}.xterm-screen .xterm-decoration-container .xterm-decoration{z-index:6;position:absolute}.xterm-screen .xterm-decoration-container .xterm-decoration.xterm-decoration-top-layer{z-index:7}.xterm-decoration-overview-ruler{z-index:8;position:absolute;top:0;right:0;pointer-events:none}.xterm-decoration-top{z-index:2;position:relative}.xterm .xterm-scrollable-element>.scrollbar{cursor:default}.xterm .xterm-scrollable-element>.scrollbar>.scra{cursor:pointer;font-size:11px!important}.xterm .xterm-scrollable-element>.visible{opacity:1;background:#0000;transition:opacity .1s linear;z-index:11}.xterm .xterm-scrollable-element>.invisible{opacity:0;pointer-events:none}.xterm .xterm-scrollable-element>.invisible.fade{transition:opacity .8s linear}.xterm .xterm-scrollable-element>.shadow{position:absolute;display:none}.xterm .xterm-scrollable-element>.shadow.top{display:block;top:0;left:3px;height:3px;width:100%;box-shadow:var(--vscode-scrollbar-shadow, #000) 0 6px 6px -6px inset}.xterm .xterm-scrollable-element>.shadow.left{display:block;top:3px;left:0;height:100%;width:3px;box-shadow:var(--vscode-scrollbar-shadow, #000) 6px 0 6px -6px inset}.xterm .xterm-scrollable-element>.shadow.top-left-corner{display:block;top:0;left:0;height:3px;width:3px}.xterm .xterm-scrollable-element>.shadow.top.left{box-shadow:var(--vscode-scrollbar-shadow, #000) 6px 0 6px -6px inset}.cli-panel-wrapper{position:fixed;bottom:0;left:0;right:0;width:100vw;transform:translateY(0);transition:transform .3s cubic-bezier(.4,0,.2,1);background-color:var(--cli-panel-bg, #111827);color:var(--cli-panel-text, rgba(255, 255, 255, .87));border-top:1px solid var(--cli-panel-border, #374151);display:flex;flex-direction:column;z-index:1000;font-family:-apple-system,BlinkMacSystemFont,Segoe UI,Roboto,Helvetica,Arial,sans-serif;box-shadow:0 -4px 20px #00000040}.cli-panel-wrapper.collapsed{transform:translateY(calc(100% - 60px))}.cli-panel-wrapper.resizing{transition:none;-webkit-user-select:none;-moz-user-select:none;user-select:none}.cli-panel-header{background-color:var(--cli-panel-header-bg, #1f2937);display:flex;flex-direction:column;position:relative;flex-shrink:0}.cli-panel-resize-bar{position:absolute;top:-6px;left:0;right:0;height:12px;cursor:ns-resize;display:flex;align-items:center;justify-content:center;z-index:2}.cli-panel-resize-grip{width:32px;height:4px;border-radius:2px;background:var(--cli-panel-text-secondary, rgba(255, 255, 255, .3));opacity:0;transition:opacity .2s ease}.cli-panel-resize-bar:hover .cli-panel-resize-grip{opacity:1}.cli-panel-header-content{height:60px;display:flex;flex-direction:row;gap:1rem;align-items:center;border-bottom:1px solid var(--cli-panel-border, #374151);padding:0 1rem}.cli-panel-title{font-size:.95rem;display:flex;gap:.5rem;justify-content:center;align-items:center;margin:0;font-weight:600;color:var(--cli-panel-text, rgba(255, 255, 255, .87))}.cli-panel-title-icon{color:var(--cli-panel-accent, #818cf8);display:flex;align-items:center}.cli-panel-action-buttons{display:flex;flex-direction:row;gap:.35rem;margin-left:auto}.cli-panel-btn{-webkit-appearance:none;-moz-appearance:none;appearance:none;background:transparent;border:none;color:var(--cli-panel-text-secondary, rgba(255, 255, 255, .6));cursor:pointer;width:40px;height:40px;border-radius:50%;display:inline-flex;align-items:center;justify-content:center;padding:0;transition:background-color .2s ease,color .2s ease}.cli-panel-btn svg{flex-shrink:0}.cli-panel-btn:hover:not(:disabled){color:var(--cli-panel-text, rgba(255, 255, 255, .87));background-color:var(--cli-btn-hover-bg, rgba(129, 140, 248, .12))}.cli-panel-btn:active:not(:disabled){background-color:var(--cli-btn-active-bg, rgba(129, 140, 248, .2))}.cli-panel-btn:disabled{opacity:.3;cursor:not-allowed}.cli-panel-content{flex:1;min-height:0;overflow:hidden;display:flex;flex-direction:column}.cli-panel-tabs{background-color:var(--cli-panel-header-bg, #1f2937);display:flex;align-items:center;height:38px;padding:0 8px;gap:4px;border-bottom:1px solid var(--cli-panel-border, #374151);overflow-x:auto;overflow-y:hidden;flex-shrink:0;scrollbar-width:thin;scrollbar-color:var(--cli-panel-text-secondary, rgba(255, 255, 255, .3)) transparent}.cli-panel-tabs::-webkit-scrollbar{height:2px}.cli-panel-tabs::-webkit-scrollbar-thumb{background:var(--cli-panel-text-secondary, rgba(255, 255, 255, .3));border-radius:1px}.cli-panel-tab-list{list-style:none;margin:0;padding:0;display:flex;gap:2px;align-items:stretch;height:100%}.cli-panel-tab{display:flex;align-items:center;gap:6px;padding:0 12px;cursor:pointer;background:transparent;border:none;border-top:2px solid transparent;color:var(--cli-panel-text-secondary, rgba(255, 255, 255, .6));font-size:.8rem;font-family:inherit;white-space:nowrap;transition:background-color .15s ease,color .15s ease,border-color .15s ease;height:100%}.cli-panel-tab:hover:not(.active){background-color:var(--cli-btn-hover-bg, rgba(129, 140, 248, .12));color:var(--cli-panel-text, rgba(255, 255, 255, .87))}.cli-panel-tab.active{background-color:var(--cli-panel-bg, #111827);color:var(--cli-panel-text, rgba(255, 255, 255, .87));border-top-color:var(--cli-panel-accent, #818cf8)}.cli-panel-tab-title{pointer-events:none}.cli-panel-tab-rename-input{-webkit-appearance:none;-moz-appearance:none;appearance:none;background:var(--cli-panel-bg, #111827);border:1px solid var(--cli-panel-accent, #818cf8);color:var(--cli-panel-text, rgba(255, 255, 255, .87));font-size:.8rem;font-family:inherit;padding:2px 6px;border-radius:3px;outline:none;width:120px;height:22px}.cli-panel-tab-close-btn{-webkit-appearance:none;-moz-appearance:none;appearance:none;background:none;border:none;color:var(--cli-panel-text-secondary, rgba(255, 255, 255, .4));cursor:pointer;font-size:1rem;line-height:1;padding:0 2px;border-radius:3px;transition:background-color .15s ease,color .15s ease}.cli-panel-tab-close-btn:hover{color:var(--cli-panel-text, rgba(255, 255, 255, .87));background-color:#ffffff1a}.cli-panel-add-tab{-webkit-appearance:none;-moz-appearance:none;appearance:none;background:transparent;border:1px dashed var(--cli-panel-text-secondary, rgba(255, 255, 255, .3));color:var(--cli-panel-text-secondary, rgba(255, 255, 255, .5));cursor:pointer;font-size:1rem;line-height:1;width:28px;height:24px;border-radius:4px;display:flex;align-items:center;justify-content:center;flex-shrink:0;transition:background-color .15s ease,color .15s ease,border-color .15s ease}.cli-panel-add-tab:hover{background-color:var(--cli-btn-hover-bg, rgba(129, 140, 248, .12));color:var(--cli-panel-text, rgba(255, 255, 255, .87));border-color:var(--cli-panel-text, rgba(255, 255, 255, .5))}.cli-panel-context-menu{position:fixed;z-index:1100;background-color:var(--cli-panel-header-bg, #1f2937);border:1px solid var(--cli-panel-border, #374151);border-radius:6px;padding:4px 0;min-width:180px;box-shadow:0 4px 16px #0006;font-family:inherit}.cli-panel-context-menu-item{-webkit-appearance:none;-moz-appearance:none;appearance:none;background:transparent;border:none;color:var(--cli-panel-text, rgba(255, 255, 255, .87));cursor:pointer;display:block;width:100%;text-align:left;padding:6px 14px;font-size:.82rem;font-family:inherit;transition:background-color .1s ease}.cli-panel-context-menu-item:hover:not(:disabled){background-color:var(--cli-btn-hover-bg, rgba(129, 140, 248, .12))}.cli-panel-context-menu-item:disabled{color:var(--cli-panel-text-secondary, rgba(255, 255, 255, .3));cursor:not-allowed}.cli-panel-context-menu-item.destructive{color:#f87171}.cli-panel-context-menu-item.destructive:hover:not(:disabled){background-color:#f871711f}.cli-panel-context-menu-separator{height:1px;background-color:var(--cli-panel-border, #374151);margin:4px 0}.cli-panel-instances{flex:1;min-height:0;overflow:hidden}.cli-panel-instance{height:100%}.cli-panel-panes-container{display:flex;height:100%}.cli-panel-panes-container.resizing{-webkit-user-select:none;-moz-user-select:none;user-select:none;cursor:ew-resize}.cli-panel-pane{position:relative;height:100%;min-width:0;overflow:hidden}.cli-panel-pane.active-pane{outline:1px solid var(--cli-panel-accent, #818cf8);outline-offset:-1px}.cli-panel-pane:hover .cli-panel-pane-close-btn{opacity:1}.cli-panel-pane-close-btn{-webkit-appearance:none;-moz-appearance:none;appearance:none;position:absolute;top:4px;right:4px;z-index:10;background:var(--cli-panel-header-bg, #1f2937);border:1px solid var(--cli-panel-border, #374151);color:var(--cli-panel-text-secondary, rgba(255, 255, 255, .6));cursor:pointer;font-size:.9rem;line-height:1;width:22px;height:22px;border-radius:3px;display:flex;align-items:center;justify-content:center;opacity:0;transition:opacity .15s ease,background-color .15s ease,color .15s ease}.cli-panel-pane-close-btn:hover{color:var(--cli-panel-text, rgba(255, 255, 255, .87));background-color:#ffffff1a}.cli-panel-pane-divider{width:6px;cursor:ew-resize;display:flex;align-items:center;justify-content:center;flex-shrink:0;background:transparent;transition:background-color .15s ease}.cli-panel-pane-divider:hover{background-color:var(--cli-panel-accent, #818cf8)}.cli-panel-pane-divider-grip{width:2px;height:24px;border-radius:1px;background-color:var(--cli-panel-text-secondary, rgba(255, 255, 255, .3));transition:background-color .15s ease}.cli-panel-pane-divider:hover .cli-panel-pane-divider-grip{background-color:var(--cli-panel-text, rgba(255, 255, 255, .87))}.cli-panel-wrapper[data-position=top]{bottom:auto;top:0;border-top:none;border-bottom:1px solid var(--cli-panel-border, #374151);box-shadow:0 4px 20px #00000040;flex-direction:column-reverse}.cli-panel-wrapper[data-position=top].collapsed{transform:translateY(calc(-100% + 60px))}.cli-panel-wrapper[data-position=top] .cli-panel-header-content{border-bottom:none;border-top:1px solid var(--cli-panel-border, #374151)}.cli-panel-wrapper[data-position=top] .cli-panel-resize-bar{top:auto;bottom:-6px;cursor:ns-resize}.cli-panel-wrapper[data-position=left]{bottom:0;top:0;left:0;right:auto;width:auto;height:100vh!important;border-top:none;border-right:1px solid var(--cli-panel-border, #374151);box-shadow:4px 0 20px #00000040;flex-direction:row-reverse}.cli-panel-wrapper[data-position=left].collapsed{transform:translate(calc(-100% + 60px))}.cli-panel-wrapper[data-position=left] .cli-panel-header{width:60px;flex-shrink:0;flex-direction:column}.cli-panel-wrapper[data-position=left] .cli-panel-header-content{height:auto;flex:1;flex-direction:column;padding:1rem 0;border-bottom:none;border-left:1px solid var(--cli-panel-border, #374151)}.cli-panel-wrapper[data-position=left] .cli-panel-title{writing-mode:vertical-rl;text-orientation:mixed}.cli-panel-wrapper[data-position=left] .cli-panel-action-buttons{flex-direction:column;margin-left:0;margin-top:auto}.cli-panel-wrapper[data-position=left] .cli-panel-resize-bar{position:absolute;top:0;bottom:0;left:auto;right:-6px;width:12px;height:auto;cursor:ew-resize}.cli-panel-wrapper[data-position=left] .cli-panel-resize-grip{width:4px;height:32px}.cli-panel-wrapper[data-position=left] .cli-panel-content{flex:1;min-width:0}.cli-panel-wrapper[data-position=right]{bottom:0;top:0;left:auto;right:0;width:auto;height:100vh!important;border-top:none;border-left:1px solid var(--cli-panel-border, #374151);box-shadow:-4px 0 20px #00000040;flex-direction:row}.cli-panel-wrapper[data-position=right].collapsed{transform:translate(calc(100% - 60px))}.cli-panel-wrapper[data-position=right] .cli-panel-header{width:60px;flex-shrink:0;flex-direction:column}.cli-panel-wrapper[data-position=right] .cli-panel-header-content{height:auto;flex:1;flex-direction:column;padding:1rem 0;border-bottom:none;border-right:1px solid var(--cli-panel-border, #374151)}.cli-panel-wrapper[data-position=right] .cli-panel-title{writing-mode:vertical-rl;text-orientation:mixed}.cli-panel-wrapper[data-position=right] .cli-panel-action-buttons{flex-direction:column;margin-left:0;margin-top:auto}.cli-panel-wrapper[data-position=right] .cli-panel-resize-bar{position:absolute;top:0;bottom:0;right:auto;left:-6px;width:12px;height:auto;cursor:ew-resize}.cli-panel-wrapper[data-position=right] .cli-panel-resize-grip{width:4px;height:32px}.cli-panel-wrapper[data-position=right] .cli-panel-content{flex:1;min-width:0}.cli-panel-wrapper[data-resizable=false] .cli-panel-resize-bar,.cli-panel-wrapper[data-closable=false] .cli-panel-btn-close{display:none}.cli-panel-hide-tab{position:fixed;z-index:1000;display:flex;align-items:center;gap:6px;background-color:var(--cli-panel-header-bg, #1f2937);border:1px solid var(--cli-panel-border, #374151);color:var(--cli-panel-text-secondary, rgba(255, 255, 255, .6));cursor:pointer;padding:6px 12px;-webkit-appearance:none;-moz-appearance:none;appearance:none;font-family:-apple-system,BlinkMacSystemFont,Segoe UI,Roboto,Helvetica,Arial,sans-serif;font-size:.8rem;font-weight:600;transition:transform .2s ease,opacity .2s ease,color .2s ease,background-color .2s ease,box-shadow .2s ease;box-shadow:0 2px 8px #0000004d;opacity:.85}.cli-panel-hide-tab:hover{transform:scale(1.05);opacity:1;color:var(--cli-panel-text, rgba(255, 255, 255, .87));background-color:var(--cli-panel-bg, #111827);box-shadow:0 4px 16px #0006}.cli-panel-hide-tab:active{transform:scale(.97)}.cli-panel-hide-tab svg{flex-shrink:0}.cli-panel-hide-tab .cli-panel-hide-tab-icon,.cli-panel-hide-tab:hover .cli-panel-hide-tab-icon{color:var(--cli-panel-accent, #818cf8)}.cli-panel-hide-tab .cli-panel-hide-tab-label{letter-spacing:.03em}@media(max-width:600px){.cli-panel-hide-tab{padding:6px 8px}.cli-panel-hide-tab .cli-panel-hide-tab-label,.cli-panel-hide-tab .cli-panel-hide-tab-arrow{display:none}}@keyframes cli-hide-tab-pulse{0%,to{transform:translate(0)}50%{transform:translate(3px)}}@keyframes cli-hide-tab-pulse-vertical{0%,to{transform:translateY(0)}50%{transform:translateY(3px)}}.cli-panel-hide-tab:hover .cli-panel-hide-tab-arrow{animation:cli-hide-tab-pulse .6s ease infinite}.cli-panel-hide-tab[data-position=left]:hover .cli-panel-hide-tab-arrow,.cli-panel-hide-tab[data-position=right]:hover .cli-panel-hide-tab-arrow{animation:cli-hide-tab-pulse-vertical .6s ease infinite}.cli-panel-hide-tab[data-position=bottom]{bottom:0;border-bottom:none;border-radius:8px 8px 0 0}.cli-panel-hide-tab[data-position=bottom][data-hide-align=start]{left:16px}.cli-panel-hide-tab[data-position=bottom][data-hide-align=center]{left:50%;transform:translate(-50%)}.cli-panel-hide-tab[data-position=bottom][data-hide-align=center]:hover{transform:translate(-50%) scale(1.05)}.cli-panel-hide-tab[data-position=bottom][data-hide-align=end]{right:16px}.cli-panel-hide-tab[data-position=top]{top:0;border-top:none;border-radius:0 0 8px 8px}.cli-panel-hide-tab[data-position=top][data-hide-align=start]{left:16px}.cli-panel-hide-tab[data-position=top][data-hide-align=center]{left:50%;transform:translate(-50%)}.cli-panel-hide-tab[data-position=top][data-hide-align=center]:hover{transform:translate(-50%) scale(1.05)}.cli-panel-hide-tab[data-position=top][data-hide-align=end]{right:16px}.cli-panel-hide-tab[data-position=left]{left:0;border-left:none;border-radius:0 8px 8px 0}.cli-panel-hide-tab[data-position=left][data-hide-align=start]{top:16px}.cli-panel-hide-tab[data-position=left][data-hide-align=center]{top:50%;transform:translateY(-50%)}.cli-panel-hide-tab[data-position=left][data-hide-align=center]:hover{transform:translateY(-50%) scale(1.05)}.cli-panel-hide-tab[data-position=left][data-hide-align=end]{bottom:16px}.cli-panel-hide-tab[data-position=right]{right:0;border-right:none;border-radius:8px 0 0 8px}.cli-panel-hide-tab[data-position=right][data-hide-align=start]{top:16px}.cli-panel-hide-tab[data-position=right][data-hide-align=center]{top:50%;transform:translateY(-50%)}.cli-panel-hide-tab[data-position=right][data-hide-align=center]:hover{transform:translateY(-50%) scale(1.05)}.cli-panel-hide-tab[data-position=right][data-hide-align=end]{bottom:16px}.cli-panel-wrapper[data-hideable=false] .cli-panel-btn-hide{display:none}.cli-panel-btn-position-wrapper{position:relative}.cli-panel-position-dropdown{position:absolute;bottom:calc(100% + 4px);top:auto;right:0;left:auto;background-color:var(--cli-panel-header-bg, #1f2937);border:1px solid var(--cli-panel-border, #374151);border-radius:6px;box-shadow:0 8px 24px #0006;z-index:1100;min-width:120px;overflow:hidden;display:flex;flex-direction:column}.cli-panel-position-dropdown-item{-webkit-appearance:none;-moz-appearance:none;appearance:none;background:transparent;border:none;color:var(--cli-panel-text-secondary, rgba(255, 255, 255, .6));cursor:pointer;display:flex;align-items:center;gap:8px;padding:8px 12px;font-size:.85rem;font-family:inherit;width:100%;text-align:left;transition:background-color .15s ease,color .15s ease}.cli-panel-position-dropdown-item:hover{background-color:var(--cli-btn-hover-bg, rgba(129, 140, 248, .12));color:var(--cli-panel-text, rgba(255, 255, 255, .87))}.cli-panel-position-dropdown-item.active{color:var(--cli-panel-accent, #818cf8)}.cli-panel-position-dropdown-item svg{flex-shrink:0}.cli-panel-wrapper[data-position=top] .cli-panel-position-dropdown{top:calc(100% + 4px);bottom:auto}.cli-panel-wrapper[data-position=left] .cli-panel-position-dropdown{top:0;bottom:auto;left:calc(100% + 4px);right:auto}.cli-panel-wrapper[data-position=right] .cli-panel-position-dropdown{top:0;bottom:auto;right:calc(100% + 4px);left:auto}.cli-panel-status-indicators{display:flex;align-items:center;gap:14px;margin-left:24px;font-size:12px;overflow:hidden;white-space:nowrap}.cli-panel-status-item{display:flex;align-items:center;gap:5px;color:var(--cli-panel-text-secondary, rgba(255, 255, 255, .6))}.cli-panel-status-dot{width:6px;height:6px;border-radius:50%;flex-shrink:0;background:var(--cli-status-neutral, #6b7280)}.cli-panel-status-dot.dot-idle{background:var(--cli-status-idle, #3fb950)}.cli-panel-status-dot.dot-running{background:var(--cli-status-running, #f0883e);animation:cliStatusPulse 1.5s ease-in-out infinite}.cli-panel-status-dot.dot-error{background:var(--cli-status-error, #f85149)}.cli-panel-status-icon{flex-shrink:0}.cli-panel-status-icon.status-success{color:var(--cli-status-idle, #3fb950)}.cli-panel-status-icon.status-error{color:var(--cli-status-error, #f85149)}.cli-panel-status-label{overflow:hidden;text-overflow:ellipsis}.cli-panel-status-item.status-muted{color:var(--cli-panel-text-secondary, rgba(255, 255, 255, .4))}.cli-panel-status-item.status-text{max-width:200px}.cli-panel-status-item.status-text.level-info{color:var(--cli-panel-accent, #818cf8)}.cli-panel-status-item.status-text.level-success{color:var(--cli-status-idle, #3fb950)}.cli-panel-status-item.status-text.level-warn{color:var(--cli-status-running, #f0883e)}.cli-panel-status-item.status-text.level-error{color:var(--cli-status-error, #f85149)}.cli-panel-status-item.status-running{color:var(--cli-status-running, #f0883e)}.cli-panel-status-item.status-clickable{cursor:pointer;border-radius:4px;padding:2px 6px;margin:-2px -6px;transition:background-color .15s ease}.cli-panel-status-item.status-clickable:hover{background-color:var(--cli-btn-hover-bg, rgba(129, 140, 248, .12))}.cli-panel-status-indicators-compact{display:none}.cli-panel-wrapper[data-position=left] .cli-panel-status-indicators-compact,.cli-panel-wrapper[data-position=right] .cli-panel-status-indicators-compact{display:flex;flex-direction:column;align-items:center;gap:10px;padding:12px 0}.cli-panel-status-compact-item{display:flex;align-items:center;justify-content:center;width:20px;height:20px;cursor:default;color:var(--cli-panel-text-secondary, rgba(255, 255, 255, .6));font-size:12px}.cli-panel-status-compact-item.status-clickable{cursor:pointer;border-radius:4px}.cli-panel-status-compact-item.status-clickable:hover{background-color:var(--cli-btn-hover-bg, rgba(129, 140, 248, .12))}.cli-panel-status-compact-item.status-muted{color:var(--cli-panel-text-secondary, rgba(255, 255, 255, .4))}.cli-panel-status-compact-dot{width:6px;height:6px;border-radius:50%;flex-shrink:0}.cli-panel-status-compact-dot.level-info{background:var(--cli-panel-accent, #818cf8)}.cli-panel-status-compact-dot.level-success{background:var(--cli-status-idle, #3fb950)}.cli-panel-status-compact-dot.level-warn{background:var(--cli-status-running, #f0883e)}.cli-panel-status-compact-dot.level-error{background:var(--cli-status-error, #f85149)}.cli-panel-tab-dot{width:6px;height:6px;border-radius:50%;flex-shrink:0;background:var(--cli-status-idle, #3fb950)}.cli-panel-tab-dot.dot-running{background:var(--cli-status-running, #f0883e);animation:cliStatusPulse 1.5s ease-in-out infinite}.cli-panel-tab-dot.dot-error{background:var(--cli-status-error, #f85149)}.cli-panel-services-dropdown{position:fixed;background-color:var(--cli-panel-header-bg, #1f2937);border:1px solid var(--cli-panel-border, #374151);border-radius:8px;box-shadow:0 8px 24px #0006;z-index:1100;min-width:260px;max-width:380px;overflow:hidden;font-family:-apple-system,BlinkMacSystemFont,Segoe UI,Roboto,Helvetica,Arial,sans-serif}.cli-panel-services-dropdown-header{padding:10px 14px 8px;font-size:11px;font-weight:600;text-transform:uppercase;letter-spacing:.05em;color:var(--cli-panel-text-secondary, rgba(255, 255, 255, .5));border-bottom:1px solid var(--cli-panel-border, #374151)}.cli-panel-services-dropdown-list{max-height:240px;overflow-y:auto;scrollbar-width:thin;scrollbar-color:var(--cli-panel-text-secondary, rgba(255, 255, 255, .2)) transparent}.cli-panel-services-dropdown-list::-webkit-scrollbar{width:6px}.cli-panel-services-dropdown-list::-webkit-scrollbar-track{background:transparent}.cli-panel-services-dropdown-list::-webkit-scrollbar-thumb{background:var(--cli-panel-text-secondary, rgba(255, 255, 255, .2));border-radius:3px}.cli-panel-services-dropdown-list::-webkit-scrollbar-thumb:hover{background:var(--cli-panel-text-secondary, rgba(255, 255, 255, .35))}.cli-panel-services-dropdown-item{display:flex;align-items:flex-start;gap:10px;padding:10px 14px;border-bottom:1px solid rgba(255,255,255,.04);transition:background-color .15s ease}.cli-panel-services-dropdown-item:last-child{border-bottom:none}.cli-panel-services-dropdown-item:hover{background-color:var(--cli-btn-hover-bg, rgba(129, 140, 248, .08))}.cli-panel-svc-dot{width:7px;height:7px;border-radius:50%;flex-shrink:0;margin-top:5px}.cli-panel-svc-dot.svc-running{background:var(--cli-status-idle, #3fb950)}.cli-panel-svc-dot.svc-stopped{background:var(--cli-panel-text-secondary, rgba(255, 255, 255, .3))}.cli-panel-svc-info{flex:1;min-width:0;display:flex;flex-direction:column;gap:2px}.cli-panel-svc-name{font-size:13px;font-weight:500;color:var(--cli-panel-text, rgba(255, 255, 255, .87));overflow:hidden;text-overflow:ellipsis;white-space:nowrap}.cli-panel-svc-desc{font-size:11px;color:var(--cli-panel-text-secondary, rgba(255, 255, 255, .5));overflow:hidden;text-overflow:ellipsis;white-space:nowrap}.cli-panel-svc-status{font-size:11px;flex-shrink:0;color:var(--cli-panel-text-secondary, rgba(255, 255, 255, .5));margin-top:1px}.cli-panel-srv-meta{display:flex;flex-direction:column;align-items:flex-end;gap:2px;flex-shrink:0}.cli-panel-services-dropdown-empty{padding:16px 14px;font-size:12px;color:var(--cli-panel-text-secondary, rgba(255, 255, 255, .4));text-align:center}.cli-panel-glow-line{position:absolute;bottom:0;left:0;right:0;height:2px;background:linear-gradient(90deg,transparent,var(--cli-status-glow, var(--cli-panel-accent, #818cf8)),#a78bfa,var(--cli-status-glow, var(--cli-panel-accent, #818cf8)),transparent);background-size:200% 100%;opacity:.4;animation:cliGlowShift 8s ease-in-out infinite;transition:opacity .6s ease;pointer-events:none}.cli-panel-glow-line.glow-active{opacity:.8;animation-duration:3s}.cli-panel-wrapper[data-position=left] .cli-panel-glow-line{bottom:auto;top:0;left:auto;right:0;width:2px;height:100%;background:linear-gradient(180deg,transparent,var(--cli-status-glow, var(--cli-panel-accent, #818cf8)),#a78bfa,var(--cli-status-glow, var(--cli-panel-accent, #818cf8)),transparent);background-size:100% 200%}.cli-panel-wrapper[data-position=right] .cli-panel-glow-line{bottom:auto;top:0;left:0;right:auto;width:2px;height:100%;background:linear-gradient(180deg,transparent,var(--cli-status-glow, var(--cli-panel-accent, #818cf8)),#a78bfa,var(--cli-status-glow, var(--cli-panel-accent, #818cf8)),transparent);background-size:100% 200%}@keyframes cliStatusPulse{0%,to{opacity:1}50%{opacity:.3}}@keyframes cliGlowShift{0%{background-position:200% center}to{background-position:-200% center}}@media(prefers-reduced-motion:reduce){.cli-panel-glow-line,.cli-panel-status-dot,.cli-panel-tab-dot{animation:none!important}}.cli-panel-wrapper .xterm .xterm-viewport{overscroll-behavior:contain}.cli-panel-wrapper .xterm .xterm-viewport::-webkit-scrollbar{width:8px}.cli-panel-wrapper .xterm .xterm-viewport::-webkit-scrollbar-thumb{background:#444;border-radius:4px}.cli-panel-wrapper .xterm .xterm-viewport::-webkit-scrollbar-thumb:hover{background:#666}body.cli-pane-resizing{-webkit-user-select:none;-moz-user-select:none;user-select:none;cursor:ew-resize}*,:before,:after{--tw-border-spacing-x: 0;--tw-border-spacing-y: 0;--tw-translate-x: 0;--tw-translate-y: 0;--tw-rotate: 0;--tw-skew-x: 0;--tw-skew-y: 0;--tw-scale-x: 1;--tw-scale-y: 1;--tw-pan-x: ;--tw-pan-y: ;--tw-pinch-zoom: ;--tw-scroll-snap-strictness: proximity;--tw-gradient-from-position: ;--tw-gradient-via-position: ;--tw-gradient-to-position: ;--tw-ordinal: ;--tw-slashed-zero: ;--tw-numeric-figure: ;--tw-numeric-spacing: ;--tw-numeric-fraction: ;--tw-ring-inset: ;--tw-ring-offset-width: 0px;--tw-ring-offset-color: #fff;--tw-ring-color: rgb(59 130 246 / .5);--tw-ring-offset-shadow: 0 0 #0000;--tw-ring-shadow: 0 0 #0000;--tw-shadow: 0 0 #0000;--tw-shadow-colored: 0 0 #0000;--tw-blur: ;--tw-brightness: ;--tw-contrast: ;--tw-grayscale: ;--tw-hue-rotate: ;--tw-invert: ;--tw-saturate: ;--tw-sepia: ;--tw-drop-shadow: ;--tw-backdrop-blur: ;--tw-backdrop-brightness: ;--tw-backdrop-contrast: ;--tw-backdrop-grayscale: ;--tw-backdrop-hue-rotate: ;--tw-backdrop-invert: ;--tw-backdrop-opacity: ;--tw-backdrop-saturate: ;--tw-backdrop-sepia: ;--tw-contain-size: ;--tw-contain-layout: ;--tw-contain-paint: ;--tw-contain-style: }::backdrop{--tw-border-spacing-x: 0;--tw-border-spacing-y: 0;--tw-translate-x: 0;--tw-translate-y: 0;--tw-rotate: 0;--tw-skew-x: 0;--tw-skew-y: 0;--tw-scale-x: 1;--tw-scale-y: 1;--tw-pan-x: ;--tw-pan-y: ;--tw-pinch-zoom: ;--tw-scroll-snap-strictness: proximity;--tw-gradient-from-position: ;--tw-gradient-via-position: ;--tw-gradient-to-position: ;--tw-ordinal: ;--tw-slashed-zero: ;--tw-numeric-figure: ;--tw-numeric-spacing: ;--tw-numeric-fraction: ;--tw-ring-inset: ;--tw-ring-offset-width: 0px;--tw-ring-offset-color: #fff;--tw-ring-color: rgb(59 130 246 / .5);--tw-ring-offset-shadow: 0 0 #0000;--tw-ring-shadow: 0 0 #0000;--tw-shadow: 0 0 #0000;--tw-shadow-colored: 0 0 #0000;--tw-blur: ;--tw-brightness: ;--tw-contrast: ;--tw-grayscale: ;--tw-hue-rotate: ;--tw-invert: ;--tw-saturate: ;--tw-sepia: ;--tw-drop-shadow: ;--tw-backdrop-blur: ;--tw-backdrop-brightness: ;--tw-backdrop-contrast: ;--tw-backdrop-grayscale: ;--tw-backdrop-hue-rotate: ;--tw-backdrop-invert: ;--tw-backdrop-opacity: ;--tw-backdrop-saturate: ;--tw-backdrop-sepia: ;--tw-contain-size: ;--tw-contain-layout: ;--tw-contain-paint: ;--tw-contain-style: }*,:before,:after{box-sizing:border-box;border-width:0;border-style:solid;border-color:#e5e7eb}:before,:after{--tw-content: ""}html,:host{line-height:1.5;-webkit-text-size-adjust:100%;-moz-tab-size:4;-o-tab-size:4;tab-size:4;font-family:ui-sans-serif,system-ui,sans-serif,"Apple Color Emoji","Segoe UI Emoji",Segoe UI Symbol,"Noto Color Emoji";font-feature-settings:normal;font-variation-settings:normal;-webkit-tap-highlight-color:transparent}body{margin:0;line-height:inherit}hr{height:0;color:inherit;border-top-width:1px}abbr:where([title]){-webkit-text-decoration:underline dotted;text-decoration:underline dotted}h1,h2,h3,h4,h5,h6{font-size:inherit;font-weight:inherit}a{color:inherit;text-decoration:inherit}b,strong{font-weight:bolder}code,kbd,samp,pre{font-family:ui-monospace,SFMono-Regular,Menlo,Monaco,Consolas,Liberation Mono,Courier New,monospace;font-feature-settings:normal;font-variation-settings:normal;font-size:1em}small{font-size:80%}sub,sup{font-size:75%;line-height:0;position:relative;vertical-align:baseline}sub{bottom:-.25em}sup{top:-.5em}table{text-indent:0;border-color:inherit;border-collapse:collapse}button,input,optgroup,select,textarea{font-family:inherit;font-feature-settings:inherit;font-variation-settings:inherit;font-size:100%;font-weight:inherit;line-height:inherit;letter-spacing:inherit;color:inherit;margin:0;padding:0}button,select{text-transform:none}button,input:where([type=button]),input:where([type=reset]),input:where([type=submit]){-webkit-appearance:button;background-color:transparent;background-image:none}:-moz-focusring{outline:auto}:-moz-ui-invalid{box-shadow:none}progress{vertical-align:baseline}::-webkit-inner-spin-button,::-webkit-outer-spin-button{height:auto}[type=search]{-webkit-appearance:textfield;outline-offset:-2px}::-webkit-search-decoration{-webkit-appearance:none}::-webkit-file-upload-button{-webkit-appearance:button;font:inherit}summary{display:list-item}blockquote,dl,dd,h1,h2,h3,h4,h5,h6,hr,figure,p,pre{margin:0}fieldset{margin:0;padding:0}legend{padding:0}ol,ul,menu{list-style:none;margin:0;padding:0}dialog{padding:0}textarea{resize:vertical}input::-moz-placeholder,textarea::-moz-placeholder{opacity:1;color:#9ca3af}input::placeholder,textarea::placeholder{opacity:1;color:#9ca3af}button,[role=button]{cursor:pointer}:disabled{cursor:default}img,svg,video,canvas,audio,iframe,embed,object{display:block;vertical-align:middle}img,video{max-width:100%;height:auto}[hidden]:where(:not([hidden=until-found])){display:none}.sr-only{position:absolute;width:1px;height:1px;padding:0;margin:-1px;overflow:hidden;clip:rect(0,0,0,0);white-space:nowrap;border-width:0}.static{position:static}.fixed{position:fixed}.relative{position:relative}.sticky{position:sticky}.inset-0{top:0;right:0;bottom:0;left:0}.top-0{top:0}.z-50{z-index:50}.col-span-full{grid-column:1 / -1}.m-6{margin:1.5rem}.mx-4{margin-left:1rem;margin-right:1rem}.mb-0\.5{margin-bottom:.125rem}.mb-1{margin-bottom:.25rem}.mb-1\.5{margin-bottom:.375rem}.mb-2{margin-bottom:.5rem}.mb-3{margin-bottom:.75rem}.mb-4{margin-bottom:1rem}.mb-6{margin-bottom:1.5rem}.mb-8{margin-bottom:2rem}.ml-0\.5{margin-left:.125rem}.ml-auto{margin-left:auto}.mt-0\.5{margin-top:.125rem}.mt-1{margin-top:.25rem}.mt-2{margin-top:.5rem}.mt-3{margin-top:.75rem}.line-clamp-2{overflow:hidden;display:-webkit-box;-webkit-box-orient:vertical;-webkit-line-clamp:2}.block{display:block}.inline-block{display:inline-block}.inline{display:inline}.flex{display:flex}.inline-flex{display:inline-flex}.table{display:table}.grid{display:grid}.contents{display:contents}.hidden{display:none}.h-1\.5{height:.375rem}.h-10{height:2.5rem}.h-3\.5{height:.875rem}.h-5{height:1.25rem}.h-7{height:1.75rem}.h-\[calc\(100vh-12rem\)\]{height:calc(100vh - 12rem)}.h-full{height:100%}.h-screen{height:100vh}.max-h-80{max-height:20rem}.max-h-\[60vh\]{max-height:60vh}.min-h-0{min-height:0px}.min-h-\[38px\]{min-height:38px}.min-h-screen{min-height:100vh}.w-1\.5{width:.375rem}.w-10{width:2.5rem}.w-12{width:3rem}.w-3\.5{width:.875rem}.w-48{width:12rem}.w-5{width:1.25rem}.w-7{width:1.75rem}.w-9{width:2.25rem}.w-\[220px\]{width:220px}.w-full{width:100%}.min-w-0{min-width:0px}.min-w-\[80px\]{min-width:80px}.max-w-\[120px\]{max-width:120px}.max-w-\[200px\]{max-width:200px}.max-w-md{max-width:28rem}.max-w-sm{max-width:24rem}.max-w-xs{max-width:20rem}.flex-1{flex:1 1 0%}.flex-\[2\]{flex:2}.flex-shrink-0,.shrink-0{flex-shrink:0}.translate-x-0\.5{--tw-translate-x: .125rem;transform:translate(var(--tw-translate-x),var(--tw-translate-y)) rotate(var(--tw-rotate)) skew(var(--tw-skew-x)) skewY(var(--tw-skew-y)) scaleX(var(--tw-scale-x)) scaleY(var(--tw-scale-y))}.translate-x-4{--tw-translate-x: 1rem;transform:translate(var(--tw-translate-x),var(--tw-translate-y)) rotate(var(--tw-rotate)) skew(var(--tw-skew-x)) skewY(var(--tw-skew-y)) scaleX(var(--tw-scale-x)) scaleY(var(--tw-scale-y))}.rotate-90{--tw-rotate: 90deg;transform:translate(var(--tw-translate-x),var(--tw-translate-y)) rotate(var(--tw-rotate)) skew(var(--tw-skew-x)) skewY(var(--tw-skew-y)) scaleX(var(--tw-scale-x)) scaleY(var(--tw-scale-y))}.transform{transform:translate(var(--tw-translate-x),var(--tw-translate-y)) rotate(var(--tw-rotate)) skew(var(--tw-skew-x)) skewY(var(--tw-skew-y)) scaleX(var(--tw-scale-x)) scaleY(var(--tw-scale-y))}.cursor-pointer{cursor:pointer}.grid-cols-1{grid-template-columns:repeat(1,minmax(0,1fr))}.grid-cols-2{grid-template-columns:repeat(2,minmax(0,1fr))}.flex-col{flex-direction:column}.flex-wrap{flex-wrap:wrap}.items-start{align-items:flex-start}.items-center{align-items:center}.justify-end{justify-content:flex-end}.justify-center{justify-content:center}.justify-between{justify-content:space-between}.gap-1{gap:.25rem}.gap-1\.5{gap:.375rem}.gap-2{gap:.5rem}.gap-2\.5{gap:.625rem}.gap-3{gap:.75rem}.gap-4{gap:1rem}.gap-6{gap:1.5rem}.gap-x-8{-moz-column-gap:2rem;column-gap:2rem}.gap-y-2{row-gap:.5rem}.space-y-0\.5>:not([hidden])~:not([hidden]){--tw-space-y-reverse: 0;margin-top:calc(.125rem * calc(1 - var(--tw-space-y-reverse)));margin-bottom:calc(.125rem * var(--tw-space-y-reverse))}.space-y-4>:not([hidden])~:not([hidden]){--tw-space-y-reverse: 0;margin-top:calc(1rem * calc(1 - var(--tw-space-y-reverse)));margin-bottom:calc(1rem * var(--tw-space-y-reverse))}.space-y-6>:not([hidden])~:not([hidden]){--tw-space-y-reverse: 0;margin-top:calc(1.5rem * calc(1 - var(--tw-space-y-reverse)));margin-bottom:calc(1.5rem * var(--tw-space-y-reverse))}.divide-y>:not([hidden])~:not([hidden]){--tw-divide-y-reverse: 0;border-top-width:calc(1px * calc(1 - var(--tw-divide-y-reverse)));border-bottom-width:calc(1px * var(--tw-divide-y-reverse))}.divide-white\/\[0\.04\]>:not([hidden])~:not([hidden]){border-color:#ffffff0a}.overflow-auto{overflow:auto}.overflow-hidden{overflow:hidden}.overflow-y-auto{overflow-y:auto}.truncate{overflow:hidden;text-overflow:ellipsis;white-space:nowrap}.whitespace-pre-wrap{white-space:pre-wrap}.break-all{word-break:break-all}.rounded{border-radius:.25rem}.rounded-full{border-radius:9999px}.rounded-lg{border-radius:.5rem}.rounded-md{border-radius:.375rem}.rounded-xl{border-radius:.75rem}.border{border-width:1px}.border-b{border-bottom-width:1px}.border-r{border-right-width:1px}.border-t{border-top-width:1px}.border-none{border-style:none}.border-amber-500\/30{border-color:#f59e0b4d}.border-indigo-500\/20{border-color:#6366f133}.border-red-500\/20{border-color:#ef444433}.border-red-500\/30{border-color:#ef44444d}.border-slate-500\/30{border-color:#64748b4d}.border-status-error\/30{border-color:#f871714d}.border-status-info\/30{border-color:#22d3ee4d}.border-status-success\/30{border-color:#4ade804d}.border-status-warning\/30{border-color:#fbbf244d}.border-white\/10{border-color:#ffffff1a}.border-white\/\[0\.03\]{border-color:#ffffff08}.border-white\/\[0\.04\]{border-color:#ffffff0a}.border-white\/\[0\.06\]{border-color:#ffffff0f}.border-white\/\[0\.08\]{border-color:#ffffff14}.border-white\/\[0\.1\]{border-color:#ffffff1a}.bg-\[\#0f172a\]{--tw-bg-opacity: 1;background-color:rgb(15 23 42 / var(--tw-bg-opacity, 1))}.bg-\[\#1e1b4b\]{--tw-bg-opacity: 1;background-color:rgb(30 27 75 / var(--tw-bg-opacity, 1))}.bg-amber-500\/10{background-color:#f59e0b1a}.bg-amber-500\/20{background-color:#f59e0b33}.bg-black\/30{background-color:#0000004d}.bg-black\/40{background-color:#0006}.bg-black\/60{background-color:#0009}.bg-blue-500\/20{background-color:#3b82f633}.bg-current{background-color:currentColor}.bg-green-500\/20{background-color:#22c55e33}.bg-indigo-500{--tw-bg-opacity: 1;background-color:rgb(99 102 241 / var(--tw-bg-opacity, 1))}.bg-indigo-500\/10{background-color:#6366f11a}.bg-indigo-500\/20{background-color:#6366f133}.bg-indigo-600{--tw-bg-opacity: 1;background-color:rgb(79 70 229 / var(--tw-bg-opacity, 1))}.bg-primary{--tw-bg-opacity: 1;background-color:rgb(99 102 241 / var(--tw-bg-opacity, 1))}.bg-primary\/15{background-color:#6366f126}.bg-primary\/20{background-color:#6366f133}.bg-red-500\/10{background-color:#ef44441a}.bg-red-500\/20{background-color:#ef444433}.bg-red-500\/\[0\.06\]{background-color:#ef44440f}.bg-red-600{--tw-bg-opacity: 1;background-color:rgb(220 38 38 / var(--tw-bg-opacity, 1))}.bg-slate-500\/15{background-color:#64748b26}.bg-slate-500\/20{background-color:#64748b33}.bg-slate-600{--tw-bg-opacity: 1;background-color:rgb(71 85 105 / var(--tw-bg-opacity, 1))}.bg-slate-900{--tw-bg-opacity: 1;background-color:rgb(15 23 42 / var(--tw-bg-opacity, 1))}.bg-status-error{--tw-bg-opacity: 1;background-color:rgb(248 113 113 / var(--tw-bg-opacity, 1))}.bg-status-error\/15{background-color:#f8717126}.bg-status-info\/15{background-color:#22d3ee26}.bg-status-success{--tw-bg-opacity: 1;background-color:rgb(74 222 128 / var(--tw-bg-opacity, 1))}.bg-status-success\/15{background-color:#4ade8026}.bg-status-warning{--tw-bg-opacity: 1;background-color:rgb(251 191 36 / var(--tw-bg-opacity, 1))}.bg-status-warning\/15{background-color:#fbbf2426}.bg-transparent{background-color:transparent}.bg-white{--tw-bg-opacity: 1;background-color:rgb(255 255 255 / var(--tw-bg-opacity, 1))}.bg-white\/\[0\.02\]{background-color:#ffffff05}.bg-white\/\[0\.03\]{background-color:#ffffff08}.bg-white\/\[0\.04\]{background-color:#ffffff0a}.bg-white\/\[0\.06\]{background-color:#ffffff0f}.bg-yellow-400\/30{background-color:#facc154d}.bg-gradient-to-br{background-image:linear-gradient(to bottom right,var(--tw-gradient-stops))}.from-primary{--tw-gradient-from: #6366f1 var(--tw-gradient-from-position);--tw-gradient-to: rgb(99 102 241 / 0) var(--tw-gradient-to-position);--tw-gradient-stops: var(--tw-gradient-from), var(--tw-gradient-to)}.from-primary-light{--tw-gradient-from: #818cf8 var(--tw-gradient-from-position);--tw-gradient-to: rgb(129 140 248 / 0) var(--tw-gradient-to-position);--tw-gradient-stops: var(--tw-gradient-from), var(--tw-gradient-to)}.to-primary{--tw-gradient-to: #6366f1 var(--tw-gradient-to-position)}.to-purple-500{--tw-gradient-to: #a855f7 var(--tw-gradient-to-position)}.p-2{padding:.5rem}.p-3{padding:.75rem}.p-4{padding:1rem}.p-5{padding:1.25rem}.p-6{padding:1.5rem}.p-8{padding:2rem}.px-1{padding-left:.25rem;padding-right:.25rem}.px-1\.5{padding-left:.375rem;padding-right:.375rem}.px-2{padding-left:.5rem;padding-right:.5rem}.px-2\.5{padding-left:.625rem;padding-right:.625rem}.px-3{padding-left:.75rem;padding-right:.75rem}.px-4{padding-left:1rem;padding-right:1rem}.px-5{padding-left:1.25rem;padding-right:1.25rem}.px-6{padding-left:1.5rem;padding-right:1.5rem}.py-0\.5{padding-top:.125rem;padding-bottom:.125rem}.py-1{padding-top:.25rem;padding-bottom:.25rem}.py-1\.5{padding-top:.375rem;padding-bottom:.375rem}.py-2{padding-top:.5rem;padding-bottom:.5rem}.py-2\.5{padding-top:.625rem;padding-bottom:.625rem}.py-3{padding-top:.75rem;padding-bottom:.75rem}.py-4{padding-top:1rem;padding-bottom:1rem}.py-5{padding-top:1.25rem;padding-bottom:1.25rem}.py-8{padding-top:2rem;padding-bottom:2rem}.pb-3{padding-bottom:.75rem}.pl-9{padding-left:2.25rem}.text-left{text-align:left}.text-center{text-align:center}.font-mono{font-family:ui-monospace,SFMono-Regular,Menlo,Monaco,Consolas,Liberation Mono,Courier New,monospace}.text-2xl{font-size:1.5rem;line-height:2rem}.text-\[10px\]{font-size:10px}.text-\[11px\]{font-size:11px}.text-base{font-size:1rem;line-height:1.5rem}.text-lg{font-size:1.125rem;line-height:1.75rem}.text-sm{font-size:.875rem;line-height:1.25rem}.text-xl{font-size:1.25rem;line-height:1.75rem}.text-xs{font-size:.75rem;line-height:1rem}.font-bold{font-weight:700}.font-medium{font-weight:500}.font-semibold{font-weight:600}.uppercase{text-transform:uppercase}.capitalize{text-transform:capitalize}.leading-5{line-height:1.25rem}.tracking-wide{letter-spacing:.025em}.tracking-wider{letter-spacing:.05em}.text-amber-300{--tw-text-opacity: 1;color:rgb(252 211 77 / var(--tw-text-opacity, 1))}.text-amber-400{--tw-text-opacity: 1;color:rgb(251 191 36 / var(--tw-text-opacity, 1))}.text-blue-400{--tw-text-opacity: 1;color:rgb(96 165 250 / var(--tw-text-opacity, 1))}.text-green-300{--tw-text-opacity: 1;color:rgb(134 239 172 / var(--tw-text-opacity, 1))}.text-green-400{--tw-text-opacity: 1;color:rgb(74 222 128 / var(--tw-text-opacity, 1))}.text-indigo-300{--tw-text-opacity: 1;color:rgb(165 180 252 / var(--tw-text-opacity, 1))}.text-indigo-400,.text-primary-light{--tw-text-opacity: 1;color:rgb(129 140 248 / var(--tw-text-opacity, 1))}.text-red-200\/70{color:#fecacab3}.text-red-300{--tw-text-opacity: 1;color:rgb(252 165 165 / var(--tw-text-opacity, 1))}.text-red-400{--tw-text-opacity: 1;color:rgb(248 113 113 / var(--tw-text-opacity, 1))}.text-slate-200{--tw-text-opacity: 1;color:rgb(226 232 240 / var(--tw-text-opacity, 1))}.text-slate-300{--tw-text-opacity: 1;color:rgb(203 213 225 / var(--tw-text-opacity, 1))}.text-slate-400{--tw-text-opacity: 1;color:rgb(148 163 184 / var(--tw-text-opacity, 1))}.text-slate-500{--tw-text-opacity: 1;color:rgb(100 116 139 / var(--tw-text-opacity, 1))}.text-slate-600{--tw-text-opacity: 1;color:rgb(71 85 105 / var(--tw-text-opacity, 1))}.text-status-error{--tw-text-opacity: 1;color:rgb(248 113 113 / var(--tw-text-opacity, 1))}.text-status-info{--tw-text-opacity: 1;color:rgb(34 211 238 / var(--tw-text-opacity, 1))}.text-status-success{--tw-text-opacity: 1;color:rgb(74 222 128 / var(--tw-text-opacity, 1))}.text-status-warning{--tw-text-opacity: 1;color:rgb(251 191 36 / var(--tw-text-opacity, 1))}.text-white{--tw-text-opacity: 1;color:rgb(255 255 255 / var(--tw-text-opacity, 1))}.text-yellow-200{--tw-text-opacity: 1;color:rgb(254 240 138 / var(--tw-text-opacity, 1))}.antialiased{-webkit-font-smoothing:antialiased;-moz-osx-font-smoothing:grayscale}.placeholder-slate-500::-moz-placeholder{--tw-placeholder-opacity: 1;color:rgb(100 116 139 / var(--tw-placeholder-opacity, 1))}.placeholder-slate-500::placeholder{--tw-placeholder-opacity: 1;color:rgb(100 116 139 / var(--tw-placeholder-opacity, 1))}.placeholder-slate-600::-moz-placeholder{--tw-placeholder-opacity: 1;color:rgb(71 85 105 / var(--tw-placeholder-opacity, 1))}.placeholder-slate-600::placeholder{--tw-placeholder-opacity: 1;color:rgb(71 85 105 / var(--tw-placeholder-opacity, 1))}.opacity-50{opacity:.5}.opacity-60{opacity:.6}.shadow-2xl{--tw-shadow: 0 25px 50px -12px rgb(0 0 0 / .25);--tw-shadow-colored: 0 25px 50px -12px var(--tw-shadow-color);box-shadow:var(--tw-ring-offset-shadow, 0 0 #0000),var(--tw-ring-shadow, 0 0 #0000),var(--tw-shadow)}.outline-none{outline:2px solid transparent;outline-offset:2px}.filter{filter:var(--tw-blur) var(--tw-brightness) var(--tw-contrast) var(--tw-grayscale) var(--tw-hue-rotate) var(--tw-invert) var(--tw-saturate) var(--tw-sepia) var(--tw-drop-shadow)}.backdrop-blur-sm{--tw-backdrop-blur: blur(4px);-webkit-backdrop-filter:var(--tw-backdrop-blur) var(--tw-backdrop-brightness) var(--tw-backdrop-contrast) var(--tw-backdrop-grayscale) var(--tw-backdrop-hue-rotate) var(--tw-backdrop-invert) var(--tw-backdrop-opacity) var(--tw-backdrop-saturate) var(--tw-backdrop-sepia);backdrop-filter:var(--tw-backdrop-blur) var(--tw-backdrop-brightness) var(--tw-backdrop-contrast) var(--tw-backdrop-grayscale) var(--tw-backdrop-hue-rotate) var(--tw-backdrop-invert) var(--tw-backdrop-opacity) var(--tw-backdrop-saturate) var(--tw-backdrop-sepia)}.transition-colors{transition-property:color,background-color,border-color,text-decoration-color,fill,stroke;transition-timing-function:cubic-bezier(.4,0,.2,1);transition-duration:.15s}.transition-transform{transition-property:transform;transition-timing-function:cubic-bezier(.4,0,.2,1);transition-duration:.15s}body{margin:0;min-height:100vh;background:linear-gradient(135deg,#1e1b4b,#0f172a)}.xterm-char-measure-element{display:inline-block!important;visibility:hidden!important;position:absolute!important;top:0!important;left:-9999em!important}.xterm .xterm-helper-textarea{position:absolute!important;opacity:0!important;left:-9999em!important}.xterm .xterm-helpers{position:absolute!important;top:0!important;z-index:5!important}.last\:border-0:last-child{border-width:0px}.hover\:border-white\/\[0\.14\]:hover{border-color:#ffffff24}.hover\:bg-amber-500\/30:hover{background-color:#f59e0b4d}.hover\:bg-green-500\/30:hover{background-color:#22c55e4d}.hover\:bg-indigo-500:hover{--tw-bg-opacity: 1;background-color:rgb(99 102 241 / var(--tw-bg-opacity, 1))}.hover\:bg-indigo-500\/30:hover{background-color:#6366f14d}.hover\:bg-primary-dark:hover{--tw-bg-opacity: 1;background-color:rgb(79 70 229 / var(--tw-bg-opacity, 1))}.hover\:bg-red-500:hover{--tw-bg-opacity: 1;background-color:rgb(239 68 68 / var(--tw-bg-opacity, 1))}.hover\:bg-red-500\/30:hover{background-color:#ef44444d}.hover\:bg-white\/\[0\.02\]:hover{background-color:#ffffff05}.hover\:bg-white\/\[0\.03\]:hover{background-color:#ffffff08}.hover\:bg-white\/\[0\.04\]:hover{background-color:#ffffff0a}.hover\:bg-white\/\[0\.06\]:hover{background-color:#ffffff0f}.hover\:bg-white\/\[0\.1\]:hover{background-color:#ffffff1a}.hover\:text-indigo-300:hover{--tw-text-opacity: 1;color:rgb(165 180 252 / var(--tw-text-opacity, 1))}.hover\:text-slate-200:hover{--tw-text-opacity: 1;color:rgb(226 232 240 / var(--tw-text-opacity, 1))}.hover\:text-slate-300:hover{--tw-text-opacity: 1;color:rgb(203 213 225 / var(--tw-text-opacity, 1))}.hover\:text-white:hover{--tw-text-opacity: 1;color:rgb(255 255 255 / var(--tw-text-opacity, 1))}.hover\:opacity-80:hover{opacity:.8}.focus\:border-indigo-500\/50:focus{border-color:#6366f180}.focus\:border-primary-light:focus{--tw-border-opacity: 1;border-color:rgb(129 140 248 / var(--tw-border-opacity, 1))}.focus\:outline-none:focus{outline:2px solid transparent;outline-offset:2px}.disabled\:cursor-not-allowed:disabled{cursor:not-allowed}.disabled\:opacity-40:disabled{opacity:.4}.disabled\:opacity-50:disabled{opacity:.5}@media(min-width:768px){.md\:grid-cols-2{grid-template-columns:repeat(2,minmax(0,1fr))}}@media(min-width:1280px){.xl\:grid-cols-3{grid-template-columns:repeat(3,minmax(0,1fr))}}
|
|
Binary file
|
package/dashboard/index.html
CHANGED
|
@@ -3,9 +3,10 @@
|
|
|
3
3
|
<head>
|
|
4
4
|
<meta charset="UTF-8" />
|
|
5
5
|
<meta name="viewport" content="width=device-width, initial-scale=1.0" />
|
|
6
|
+
<link rel="icon" href="data:image/svg+xml,%3Csvg xmlns='http://www.w3.org/2000/svg' viewBox='0 0 32 32'%3E%3Crect width='32' height='32' rx='6' fill='%234f46e5'/%3E%3Ctext x='16' y='22' font-size='18' text-anchor='middle' fill='white' font-family='sans-serif'%3EQ%3C/text%3E%3C/svg%3E" />
|
|
6
7
|
<title>Qodalis Cli Admin</title>
|
|
7
|
-
<script type="module" crossorigin src="/qcli/admin/assets/index-
|
|
8
|
-
<link rel="stylesheet" crossorigin href="/qcli/admin/assets/index-
|
|
8
|
+
<script type="module" crossorigin src="/qcli/admin/assets/index-BAmUWZCS.js"></script>
|
|
9
|
+
<link rel="stylesheet" crossorigin href="/qcli/admin/assets/index-BF7ofZj2.css">
|
|
9
10
|
</head>
|
|
10
11
|
<body class="bg-[#0f172a] text-slate-200 antialiased">
|
|
11
12
|
<div id="root"></div>
|
|
@@ -1,5 +1,6 @@
|
|
|
1
1
|
import { Router } from 'express';
|
|
2
2
|
import { AdminConfig } from '../services/admin-config';
|
|
3
|
+
import { AdminAuthProvider } from './auth-provider';
|
|
3
4
|
/** Return value of {@link createAuthController}. */
|
|
4
5
|
export interface AuthControllerResult {
|
|
5
6
|
/** Express router with login and user-info routes. */
|
|
@@ -14,5 +15,5 @@ export interface AuthControllerResult {
|
|
|
14
15
|
* - POST /login — authenticate and receive JWT
|
|
15
16
|
* - GET /me — get current user info from token
|
|
16
17
|
*/
|
|
17
|
-
export declare function createAuthController(config: AdminConfig, jwtSecret: string): AuthControllerResult;
|
|
18
|
+
export declare function createAuthController(config: AdminConfig, jwtSecret: string, provider?: AdminAuthProvider): AuthControllerResult;
|
|
18
19
|
//# sourceMappingURL=auth-controller.d.ts.map
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"auth-controller.d.ts","sourceRoot":"","sources":["../../auth/auth-controller.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAqB,MAAM,SAAS,CAAC;AAGpD,OAAO,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;
|
|
1
|
+
{"version":3,"file":"auth-controller.d.ts","sourceRoot":"","sources":["../../auth/auth-controller.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAqB,MAAM,SAAS,CAAC;AAGpD,OAAO,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AACvD,OAAO,EAAE,iBAAiB,EAAsD,MAAM,iBAAiB,CAAC;AAWxG,oDAAoD;AACpD,MAAM,WAAW,oBAAoB;IACjC,sDAAsD;IACtD,MAAM,EAAE,MAAM,CAAC;IACf,qFAAqF;IACrF,eAAe,EAAE,UAAU,CAAC,OAAO,WAAW,CAAC,CAAC;CACnD;AAED;;;;;;GAMG;AACH,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,iBAAiB,GAAG,oBAAoB,CAuH/H"}
|
|
@@ -4,6 +4,7 @@ exports.createAuthController = createAuthController;
|
|
|
4
4
|
const express_1 = require("express");
|
|
5
5
|
const jwt_service_1 = require("./jwt-service");
|
|
6
6
|
const auth_middleware_1 = require("./auth-middleware");
|
|
7
|
+
const auth_provider_1 = require("./auth-provider");
|
|
7
8
|
const MAX_ATTEMPTS = 5;
|
|
8
9
|
const WINDOW_MS = 60_000; // 1 minute
|
|
9
10
|
/**
|
|
@@ -13,9 +14,9 @@ const WINDOW_MS = 60_000; // 1 minute
|
|
|
13
14
|
* - POST /login — authenticate and receive JWT
|
|
14
15
|
* - GET /me — get current user info from token
|
|
15
16
|
*/
|
|
16
|
-
function createAuthController(config, jwtSecret) {
|
|
17
|
+
function createAuthController(config, jwtSecret, provider) {
|
|
17
18
|
const router = (0, express_1.Router)();
|
|
18
|
-
const authMiddleware = (0, auth_middleware_1.createAuthMiddleware)(jwtSecret);
|
|
19
|
+
const authMiddleware = (0, auth_middleware_1.createAuthMiddleware)(jwtSecret, provider);
|
|
19
20
|
const failedAttempts = new Map();
|
|
20
21
|
// Periodically clean up expired entries (every 5 minutes)
|
|
21
22
|
const cleanupInterval = setInterval(() => {
|
|
@@ -48,12 +49,11 @@ function createAuthController(config, jwtSecret) {
|
|
|
48
49
|
}
|
|
49
50
|
}
|
|
50
51
|
const { username, password } = req.body ?? {};
|
|
51
|
-
if (!username || !password) {
|
|
52
|
+
if (!username || !password || typeof username !== 'string' || typeof password !== 'string') {
|
|
52
53
|
res.status(400).json({ error: 'Username and password are required' });
|
|
53
54
|
return;
|
|
54
55
|
}
|
|
55
|
-
|
|
56
|
-
// Track failed attempt
|
|
56
|
+
const recordFailure = () => {
|
|
57
57
|
const existing = failedAttempts.get(ip);
|
|
58
58
|
if (existing && now - existing.firstAttemptAt <= WINDOW_MS) {
|
|
59
59
|
existing.count++;
|
|
@@ -61,6 +61,36 @@ function createAuthController(config, jwtSecret) {
|
|
|
61
61
|
else {
|
|
62
62
|
failedAttempts.set(ip, { count: 1, firstAttemptAt: now });
|
|
63
63
|
}
|
|
64
|
+
};
|
|
65
|
+
if (provider) {
|
|
66
|
+
// Users plugin installed: authenticate through it and require admin:access
|
|
67
|
+
provider
|
|
68
|
+
.login(username, password, { remoteAddress: ip, userAgent: req.headers['user-agent'] })
|
|
69
|
+
.then(async (result) => {
|
|
70
|
+
if (!provider.hasPermission(result, auth_provider_1.ADMIN_ACCESS_PERMISSION)) {
|
|
71
|
+
await provider.logout?.(result.token).catch(() => undefined);
|
|
72
|
+
res.status(403).json({ error: `forbidden: missing permission ${auth_provider_1.ADMIN_ACCESS_PERMISSION}` });
|
|
73
|
+
return;
|
|
74
|
+
}
|
|
75
|
+
failedAttempts.delete(ip);
|
|
76
|
+
res.json({
|
|
77
|
+
token: result.token,
|
|
78
|
+
expiresIn: Math.max(0, Math.floor((result.expiresAt - Date.now()) / 1000)),
|
|
79
|
+
username: result.userName,
|
|
80
|
+
mustChangePassword: !!result.mustChangePassword,
|
|
81
|
+
});
|
|
82
|
+
})
|
|
83
|
+
.catch((err) => {
|
|
84
|
+
const status = (0, auth_provider_1.errorStatus)(err);
|
|
85
|
+
if (status === 401)
|
|
86
|
+
recordFailure();
|
|
87
|
+
res.status(status).json({ error: (0, auth_provider_1.errorMessage)(err, 'Invalid credentials') });
|
|
88
|
+
});
|
|
89
|
+
return;
|
|
90
|
+
}
|
|
91
|
+
if (!config.validateCredentials(username, password)) {
|
|
92
|
+
// Track failed attempt
|
|
93
|
+
recordFailure();
|
|
64
94
|
res.status(401).json({ error: 'Invalid credentials' });
|
|
65
95
|
return;
|
|
66
96
|
}
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"auth-controller.js","sourceRoot":"","sources":["../../auth/auth-controller.ts"],"names":[],"mappings":";;
|
|
1
|
+
{"version":3,"file":"auth-controller.js","sourceRoot":"","sources":["../../auth/auth-controller.ts"],"names":[],"mappings":";;AA8BA,oDAuHC;AArJD,qCAAoD;AACpD,+CAA0C;AAC1C,uDAA+E;AAE/E,mDAAwG;AAQxG,MAAM,YAAY,GAAG,CAAC,CAAC;AACvB,MAAM,SAAS,GAAG,MAAM,CAAC,CAAC,WAAW;AAUrC;;;;;;GAMG;AACH,SAAgB,oBAAoB,CAAC,MAAmB,EAAE,SAAiB,EAAE,QAA4B;IACrG,MAAM,MAAM,GAAG,IAAA,gBAAM,GAAE,CAAC;IACxB,MAAM,cAAc,GAAG,IAAA,sCAAoB,EAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;IACjE,MAAM,cAAc,GAAG,IAAI,GAAG,EAAyB,CAAC;IAExD,0DAA0D;IAC1D,MAAM,eAAe,GAAG,WAAW,CAAC,GAAG,EAAE;QACrC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,KAAK,MAAM,CAAC,EAAE,EAAE,OAAO,CAAC,IAAI,cAAc,EAAE,CAAC;YACzC,IAAI,GAAG,GAAG,OAAO,CAAC,cAAc,GAAG,SAAS,EAAE,CAAC;gBAC3C,cAAc,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YAC9B,CAAC;QACL,CAAC;IACL,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,CAAC;IAEf,mDAAmD;IACnD,IAAI,eAAe,CAAC,KAAK,EAAE,CAAC;QACxB,eAAe,CAAC,KAAK,EAAE,CAAC;IAC5B,CAAC;IAED,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC,GAAY,EAAE,GAAa,EAAQ,EAAE;QACxD,MAAM,EAAE,GAAG,GAAG,CAAC,EAAE,IAAI,GAAG,CAAC,MAAM,CAAC,aAAa,IAAI,SAAS,CAAC;QAE3D,gBAAgB;QAChB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,OAAO,GAAG,cAAc,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACvC,IAAI,OAAO,EAAE,CAAC;YACV,IAAI,GAAG,GAAG,OAAO,CAAC,cAAc,GAAG,SAAS,EAAE,CAAC;gBAC3C,wBAAwB;gBACxB,cAAc,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YAC9B,CAAC;iBAAM,IAAI,OAAO,CAAC,KAAK,IAAI,YAAY,EAAE,CAAC;gBACvC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;oBACjB,KAAK,EAAE,kDAAkD;iBAC5D,CAAC,CAAC;gBACH,OAAO;YACX,CAAC;QACL,CAAC;QAED,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,GAAG,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC;QAE9C,IAAI,CAAC,QAAQ,IAAI,CAAC,QAAQ,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,OAAO,QAAQ,KAAK,QAAQ,EAAE,CAAC;YACzF,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,oCAAoC,EAAE,CAAC,CAAC;YACtE,OAAO;QACX,CAAC;QAED,MAAM,aAAa,GAAG,GAAG,EAAE;YACvB,MAAM,QAAQ,GAAG,cAAc,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YACxC,IAAI,QAAQ,IAAI,GAAG,GAAG,QAAQ,CAAC,cAAc,IAAI,SAAS,EAAE,CAAC;gBACzD,QAAQ,CAAC,KAAK,EAAE,CAAC;YACrB,CAAC;iBAAM,CAAC;gBACJ,cAAc,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,cAAc,EAAE,GAAG,EAAE,CAAC,CAAC;YAC9D,CAAC;QACL,CAAC,CAAC;QAEF,IAAI,QAAQ,EAAE,CAAC;YACX,2EAA2E;YAC3E,QAAQ;iBACH,KAAK,CAAC,QAAQ,EAAE,QAAQ,EAAE,EAAE,aAAa,EAAE,EAAE,EAAE,SAAS,EAAE,GAAG,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,CAAC;iBACtF,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE;gBACnB,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAC,MAAM,EAAE,uCAAuB,CAAC,EAAE,CAAC;oBAC3D,MAAM,QAAQ,CAAC,MAAM,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;oBAC7D,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,iCAAiC,uCAAuB,EAAE,EAAE,CAAC,CAAC;oBAC5F,OAAO;gBACX,CAAC;gBACD,cAAc,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;gBAC1B,GAAG,CAAC,IAAI,CAAC;oBACL,KAAK,EAAE,MAAM,CAAC,KAAK;oBACnB,SAAS,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC;oBAC1E,QAAQ,EAAE,MAAM,CAAC,QAAQ;oBACzB,kBAAkB,EAAE,CAAC,CAAC,MAAM,CAAC,kBAAkB;iBAClD,CAAC,CAAC;YACP,CAAC,CAAC;iBACD,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;gBACX,MAAM,MAAM,GAAG,IAAA,2BAAW,EAAC,GAAG,CAAC,CAAC;gBAChC,IAAI,MAAM,KAAK,GAAG;oBAAE,aAAa,EAAE,CAAC;gBACpC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,IAAA,4BAAY,EAAC,GAAG,EAAE,qBAAqB,CAAC,EAAE,CAAC,CAAC;YACjF,CAAC,CAAC,CAAC;YACP,OAAO;QACX,CAAC;QAED,IAAI,CAAC,MAAM,CAAC,mBAAmB,CAAC,QAAQ,EAAE,QAAQ,CAAC,EAAE,CAAC;YAClD,uBAAuB;YACvB,aAAa,EAAE,CAAC;YAEhB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,qBAAqB,EAAE,CAAC,CAAC;YACvD,OAAO;QACX,CAAC;QAED,mCAAmC;QACnC,cAAc,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAE1B,MAAM,eAAe,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QACjD,MAAM,KAAK,GAAG,IAAA,uBAAS,EACnB,EAAE,QAAQ,EAAE,eAAe,EAAE,EAC7B,SAAS,EACT,KAAK,CACR,CAAC;QAEF,GAAG,CAAC,IAAI,CAAC;YACL,KAAK;YACL,SAAS,EAAE,KAAK;YAChB,QAAQ;SACX,CAAC,CAAC;IACP,CAAC,CAAC,CAAC;IAEH,MAAM,CAAC,GAAG,CAAC,KAAK,EAAE,cAAc,EAAE,CAAC,GAAY,EAAE,GAAa,EAAQ,EAAE;QACpE,MAAM,OAAO,GAAG,GAA2B,CAAC;QAC5C,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;YAChB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,mBAAmB,EAAE,CAAC,CAAC;YACrD,OAAO;QACX,CAAC;QAED,GAAG,CAAC,IAAI,CAAC;YACL,QAAQ,EAAE,OAAO,CAAC,IAAI,CAAC,QAAQ;YAC/B,eAAe,EAAE,OAAO,CAAC,IAAI,CAAC,eAAe;SAChD,CAAC,CAAC;IACP,CAAC,CAAC,CAAC;IAEH,OAAO,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC;AACvC,CAAC"}
|
|
@@ -1,5 +1,6 @@
|
|
|
1
1
|
import { Request, RequestHandler } from 'express';
|
|
2
2
|
import { JwtPayload } from './jwt-service';
|
|
3
|
+
import { AdminAuthProvider } from './auth-provider';
|
|
3
4
|
/**
|
|
4
5
|
* Extended request interface with authenticated user info.
|
|
5
6
|
*/
|
|
@@ -13,5 +14,5 @@ export interface AuthenticatedRequest extends Request {
|
|
|
13
14
|
*
|
|
14
15
|
* @param secret JWT secret used to verify tokens.
|
|
15
16
|
*/
|
|
16
|
-
export declare function createAuthMiddleware(secret: string): RequestHandler;
|
|
17
|
+
export declare function createAuthMiddleware(secret: string, provider?: AdminAuthProvider): RequestHandler;
|
|
17
18
|
//# sourceMappingURL=auth-middleware.d.ts.map
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"auth-middleware.d.ts","sourceRoot":"","sources":["../../auth/auth-middleware.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAA0B,cAAc,EAAE,MAAM,SAAS,CAAC;AAC1E,OAAO,EAAe,UAAU,EAAE,MAAM,eAAe,CAAC;
|
|
1
|
+
{"version":3,"file":"auth-middleware.d.ts","sourceRoot":"","sources":["../../auth/auth-middleware.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAA0B,cAAc,EAAE,MAAM,SAAS,CAAC;AAC1E,OAAO,EAAe,UAAU,EAAE,MAAM,eAAe,CAAC;AACxD,OAAO,EAAE,iBAAiB,EAAsD,MAAM,iBAAiB,CAAC;AAExG;;GAEG;AACH,MAAM,WAAW,oBAAqB,SAAQ,OAAO;IACjD,IAAI,CAAC,EAAE,UAAU,CAAC;CACrB;AAED;;;;;;GAMG;AACH,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,iBAAiB,GAAG,cAAc,CA2BjG"}
|
|
@@ -2,6 +2,7 @@
|
|
|
2
2
|
Object.defineProperty(exports, "__esModule", { value: true });
|
|
3
3
|
exports.createAuthMiddleware = createAuthMiddleware;
|
|
4
4
|
const jwt_service_1 = require("./jwt-service");
|
|
5
|
+
const auth_provider_1 = require("./auth-provider");
|
|
5
6
|
/**
|
|
6
7
|
* Creates an Express middleware that validates JWT Bearer tokens.
|
|
7
8
|
*
|
|
@@ -9,7 +10,10 @@ const jwt_service_1 = require("./jwt-service");
|
|
|
9
10
|
*
|
|
10
11
|
* @param secret JWT secret used to verify tokens.
|
|
11
12
|
*/
|
|
12
|
-
function createAuthMiddleware(secret) {
|
|
13
|
+
function createAuthMiddleware(secret, provider) {
|
|
14
|
+
if (provider) {
|
|
15
|
+
return createProviderAuthMiddleware(provider);
|
|
16
|
+
}
|
|
13
17
|
return (req, res, next) => {
|
|
14
18
|
// Skip auth for login endpoint
|
|
15
19
|
if (req.path === '/auth/login') {
|
|
@@ -32,4 +36,34 @@ function createAuthMiddleware(secret) {
|
|
|
32
36
|
}
|
|
33
37
|
};
|
|
34
38
|
}
|
|
39
|
+
/**
|
|
40
|
+
* Auth middleware backed by the users plugin: a users session token with the
|
|
41
|
+
* `admin:access` permission (and no pending password change).
|
|
42
|
+
*/
|
|
43
|
+
function createProviderAuthMiddleware(provider) {
|
|
44
|
+
return (req, res, next) => {
|
|
45
|
+
const authHeader = req.headers.authorization;
|
|
46
|
+
if (!authHeader || !authHeader.startsWith('Bearer ')) {
|
|
47
|
+
res.status(401).json({ error: 'Missing or invalid Authorization header' });
|
|
48
|
+
return;
|
|
49
|
+
}
|
|
50
|
+
provider.authenticateToken(authHeader.slice(7)).then((ctx) => {
|
|
51
|
+
if (ctx.mustChangePassword) {
|
|
52
|
+
res.status(403).json({ error: 'password change required' });
|
|
53
|
+
return;
|
|
54
|
+
}
|
|
55
|
+
if (!provider.hasPermission(ctx, auth_provider_1.ADMIN_ACCESS_PERMISSION)) {
|
|
56
|
+
res.status(403).json({ error: `forbidden: missing permission ${auth_provider_1.ADMIN_ACCESS_PERMISSION}` });
|
|
57
|
+
return;
|
|
58
|
+
}
|
|
59
|
+
req.user = {
|
|
60
|
+
username: ctx.userName,
|
|
61
|
+
authenticatedAt: new Date(ctx.loginTime ?? Date.now()).toISOString(),
|
|
62
|
+
};
|
|
63
|
+
next();
|
|
64
|
+
}, (err) => {
|
|
65
|
+
res.status((0, auth_provider_1.errorStatus)(err)).json({ error: (0, auth_provider_1.errorMessage)(err, 'Invalid or expired token') });
|
|
66
|
+
});
|
|
67
|
+
};
|
|
68
|
+
}
|
|
35
69
|
//# sourceMappingURL=auth-middleware.js.map
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"auth-middleware.js","sourceRoot":"","sources":["../../auth/auth-middleware.ts"],"names":[],"mappings":";;
|
|
1
|
+
{"version":3,"file":"auth-middleware.js","sourceRoot":"","sources":["../../auth/auth-middleware.ts"],"names":[],"mappings":";;AAkBA,oDA2BC;AA5CD,+CAAwD;AACxD,mDAAwG;AASxG;;;;;;GAMG;AACH,SAAgB,oBAAoB,CAAC,MAAc,EAAE,QAA4B;IAC7E,IAAI,QAAQ,EAAE,CAAC;QACX,OAAO,4BAA4B,CAAC,QAAQ,CAAC,CAAC;IAClD,CAAC;IACD,OAAO,CAAC,GAAY,EAAE,GAAa,EAAE,IAAkB,EAAQ,EAAE;QAC7D,+BAA+B;QAC/B,IAAI,GAAG,CAAC,IAAI,KAAK,aAAa,EAAE,CAAC;YAC7B,IAAI,EAAE,CAAC;YACP,OAAO;QACX,CAAC;QAED,MAAM,UAAU,GAAG,GAAG,CAAC,OAAO,CAAC,aAAa,CAAC;QAC7C,IAAI,CAAC,UAAU,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;YACnD,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,yCAAyC,EAAE,CAAC,CAAC;YAC3E,OAAO;QACX,CAAC;QAED,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAElC,IAAI,CAAC;YACD,MAAM,OAAO,GAAG,IAAA,yBAAW,EAAC,KAAK,EAAE,MAAM,CAAC,CAAC;YAC1C,GAA4B,CAAC,IAAI,GAAG,OAAO,CAAC;YAC7C,IAAI,EAAE,CAAC;QACX,CAAC;QAAC,MAAM,CAAC;YACL,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,0BAA0B,EAAE,CAAC,CAAC;QAChE,CAAC;IACL,CAAC,CAAC;AACN,CAAC;AAED;;;GAGG;AACH,SAAS,4BAA4B,CAAC,QAA2B;IAC7D,OAAO,CAAC,GAAY,EAAE,GAAa,EAAE,IAAkB,EAAQ,EAAE;QAC7D,MAAM,UAAU,GAAG,GAAG,CAAC,OAAO,CAAC,aAAa,CAAC;QAC7C,IAAI,CAAC,UAAU,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;YACnD,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,yCAAyC,EAAE,CAAC,CAAC;YAC3E,OAAO;QACX,CAAC;QACD,QAAQ,CAAC,iBAAiB,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAChD,CAAC,GAAG,EAAE,EAAE;YACJ,IAAI,GAAG,CAAC,kBAAkB,EAAE,CAAC;gBACzB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,0BAA0B,EAAE,CAAC,CAAC;gBAC5D,OAAO;YACX,CAAC;YACD,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAC,GAAG,EAAE,uCAAuB,CAAC,EAAE,CAAC;gBACxD,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,iCAAiC,uCAAuB,EAAE,EAAE,CAAC,CAAC;gBAC5F,OAAO;YACX,CAAC;YACA,GAA4B,CAAC,IAAI,GAAG;gBACjC,QAAQ,EAAE,GAAG,CAAC,QAAQ;gBACtB,eAAe,EAAE,IAAI,IAAI,CAAC,GAAG,CAAC,SAAS,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,WAAW,EAAE;aACvE,CAAC;YACF,IAAI,EAAE,CAAC;QACX,CAAC,EACD,CAAC,GAAG,EAAE,EAAE;YACJ,GAAG,CAAC,MAAM,CAAC,IAAA,2BAAW,EAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,IAAA,4BAAY,EAAC,GAAG,EAAE,0BAA0B,CAAC,EAAE,CAAC,CAAC;QAChG,CAAC,CACJ,CAAC;IACN,CAAC,CAAC;AACN,CAAC"}
|
|
@@ -0,0 +1,33 @@
|
|
|
1
|
+
/**
|
|
2
|
+
* External authentication for the admin dashboard — implemented by the users
|
|
3
|
+
* plugin (`usersPlugin.serverAuth`). When set, the dashboard logs in through
|
|
4
|
+
* it and requires the `admin:access` permission; the static admin
|
|
5
|
+
* credentials are not used.
|
|
6
|
+
*/
|
|
7
|
+
export interface AdminAuthProvider {
|
|
8
|
+
login(username: string, password: string, metadata?: {
|
|
9
|
+
remoteAddress?: string;
|
|
10
|
+
userAgent?: string;
|
|
11
|
+
}): Promise<{
|
|
12
|
+
token: string;
|
|
13
|
+
userName: string;
|
|
14
|
+
permissions: string[];
|
|
15
|
+
expiresAt: number;
|
|
16
|
+
mustChangePassword?: boolean;
|
|
17
|
+
}>;
|
|
18
|
+
authenticateToken(token: string): Promise<{
|
|
19
|
+
userName: string;
|
|
20
|
+
permissions: string[];
|
|
21
|
+
mustChangePassword?: boolean;
|
|
22
|
+
loginTime?: number;
|
|
23
|
+
}>;
|
|
24
|
+
logout?(token: string): Promise<void>;
|
|
25
|
+
hasPermission(ctx: {
|
|
26
|
+
permissions: string[];
|
|
27
|
+
}, permission: string): boolean;
|
|
28
|
+
}
|
|
29
|
+
export declare const ADMIN_ACCESS_PERMISSION = "admin:access";
|
|
30
|
+
/** Status of an error thrown by the provider (defaults to 401). */
|
|
31
|
+
export declare function errorStatus(err: unknown): number;
|
|
32
|
+
export declare function errorMessage(err: unknown, fallback: string): string;
|
|
33
|
+
//# sourceMappingURL=auth-provider.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"auth-provider.d.ts","sourceRoot":"","sources":["../../auth/auth-provider.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,MAAM,WAAW,iBAAiB;IAC9B,KAAK,CACD,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,MAAM,EAChB,QAAQ,CAAC,EAAE;QAAE,aAAa,CAAC,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAA;KAAE,GAC1D,OAAO,CAAC;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,EAAE,CAAC;QAAC,SAAS,EAAE,MAAM,CAAC;QAAC,kBAAkB,CAAC,EAAE,OAAO,CAAA;KAAE,CAAC,CAAC;IACxH,iBAAiB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,EAAE,CAAC;QAAC,kBAAkB,CAAC,EAAE,OAAO,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACzI,MAAM,CAAC,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACtC,aAAa,CAAC,GAAG,EAAE;QAAE,WAAW,EAAE,MAAM,EAAE,CAAA;KAAE,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC;CAC9E;AAED,eAAO,MAAM,uBAAuB,iBAAiB,CAAC;AAEtD,mEAAmE;AACnE,wBAAgB,WAAW,CAAC,GAAG,EAAE,OAAO,GAAG,MAAM,CAGhD;AAED,wBAAgB,YAAY,CAAC,GAAG,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,GAAG,MAAM,CAGnE"}
|
|
@@ -0,0 +1,16 @@
|
|
|
1
|
+
"use strict";
|
|
2
|
+
Object.defineProperty(exports, "__esModule", { value: true });
|
|
3
|
+
exports.ADMIN_ACCESS_PERMISSION = void 0;
|
|
4
|
+
exports.errorStatus = errorStatus;
|
|
5
|
+
exports.errorMessage = errorMessage;
|
|
6
|
+
exports.ADMIN_ACCESS_PERMISSION = 'admin:access';
|
|
7
|
+
/** Status of an error thrown by the provider (defaults to 401). */
|
|
8
|
+
function errorStatus(err) {
|
|
9
|
+
const status = err?.status;
|
|
10
|
+
return typeof status === 'number' ? status : 401;
|
|
11
|
+
}
|
|
12
|
+
function errorMessage(err, fallback) {
|
|
13
|
+
const message = err?.message;
|
|
14
|
+
return typeof message === 'string' && message ? message : fallback;
|
|
15
|
+
}
|
|
16
|
+
//# sourceMappingURL=auth-provider.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"auth-provider.js","sourceRoot":"","sources":["../../auth/auth-provider.ts"],"names":[],"mappings":";;;AAoBA,kCAGC;AAED,oCAGC;AAXY,QAAA,uBAAuB,GAAG,cAAc,CAAC;AAEtD,mEAAmE;AACnE,SAAgB,WAAW,CAAC,GAAY;IACpC,MAAM,MAAM,GAAI,GAA4B,EAAE,MAAM,CAAC;IACrD,OAAO,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC;AACrD,CAAC;AAED,SAAgB,YAAY,CAAC,GAAY,EAAE,QAAgB;IACvD,MAAM,OAAO,GAAI,GAA6B,EAAE,OAAO,CAAC;IACxD,OAAO,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC;AACvE,CAAC"}
|
|
@@ -1,5 +1,6 @@
|
|
|
1
1
|
import { Router, RequestHandler } from 'express';
|
|
2
2
|
import { ICliProcessorFilter } from '@qodalis/cli-server-abstractions';
|
|
3
|
+
import { AdminAuthProvider } from './auth/auth-provider';
|
|
3
4
|
import { WsClientsDeps } from './controllers/ws-clients-controller';
|
|
4
5
|
import { IRegistryLike, IBuilderLike } from './services/module-registry';
|
|
5
6
|
import { LogRingBuffer } from './services/log-ring-buffer';
|
|
@@ -34,6 +35,8 @@ export interface CliAdminPluginResult {
|
|
|
34
35
|
authMiddleware: RequestHandler;
|
|
35
36
|
/** The log ring buffer, in case you need to push entries programmatically. */
|
|
36
37
|
logBuffer: LogRingBuffer;
|
|
38
|
+
/** Routes that stay public when the users plugin protects the server. */
|
|
39
|
+
publicRoutes: string[];
|
|
37
40
|
/** Clean up timers and restore console. Call when shutting down. */
|
|
38
41
|
dispose: () => void;
|
|
39
42
|
}
|
|
@@ -57,6 +60,14 @@ export declare class CliAdminBuilder {
|
|
|
57
60
|
private _registeredJobs;
|
|
58
61
|
private _dashboardDir?;
|
|
59
62
|
private _enabledFeatures;
|
|
63
|
+
private _authProvider?;
|
|
64
|
+
/**
|
|
65
|
+
* Authenticate the dashboard through the users plugin
|
|
66
|
+
* (`usersPlugin.serverAuth`): login uses the users auth service and
|
|
67
|
+
* requires the `admin:access` permission (`admin` has it via `*`). The
|
|
68
|
+
* static credentials are then ignored.
|
|
69
|
+
*/
|
|
70
|
+
setAuthProvider(provider: AdminAuthProvider): CliAdminBuilder;
|
|
60
71
|
/**
|
|
61
72
|
* Set admin credentials.
|
|
62
73
|
*/
|
|
@@ -85,12 +96,5 @@ export declare class CliAdminBuilder {
|
|
|
85
96
|
* If not set, the builder will try to resolve it automatically.
|
|
86
97
|
*/
|
|
87
98
|
setDashboardDir(dir: string): CliAdminBuilder;
|
|
88
|
-
/**
|
|
89
|
-
* Resolve the dashboard dist directory. Looks for:
|
|
90
|
-
* 1. Explicitly set path
|
|
91
|
-
* 2. @qodalis/cli-server-dashboard/dist (npm package)
|
|
92
|
-
* 3. Relative paths from this file and cwd (development)
|
|
93
|
-
*/
|
|
94
|
-
private _resolveDashboardDir;
|
|
95
99
|
}
|
|
96
100
|
//# sourceMappingURL=cli-admin-builder.d.ts.map
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"cli-admin-builder.d.ts","sourceRoot":"","sources":["../cli-admin-builder.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,cAAc,EAA2B,MAAM,SAAS,CAAC;AAC1E,OAAO,EAAoC,mBAAmB,EAAE,MAAM,kCAAkC,CAAC;
|
|
1
|
+
{"version":3,"file":"cli-admin-builder.d.ts","sourceRoot":"","sources":["../cli-admin-builder.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,cAAc,EAA2B,MAAM,SAAS,CAAC;AAC1E,OAAO,EAAoC,mBAAmB,EAAE,MAAM,kCAAkC,CAAC;AAGzG,OAAO,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AAKzD,OAAO,EAA6B,aAAa,EAAE,MAAM,qCAAqC,CAAC;AAC/F,OAAO,EAAkB,aAAa,EAAE,YAAY,EAAE,MAAM,4BAA4B,CAAC;AACzF,OAAO,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAC;AAM3D,iFAAiF;AACjF,MAAM,WAAW,aAAa;IAC1B,SAAS,CAAC,MAAM,EAAE,mBAAmB,GAAG,IAAI,CAAC;CAChD;AAED,MAAM,WAAW,iBAAiB;IAC9B,qCAAqC;IACrC,QAAQ,EAAE,aAAa,CAAC;IACxB,0CAA0C;IAC1C,kBAAkB,EAAE,aAAa,GAAG;QAChC,gBAAgB,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;KAC5D,CAAC;IACF,sDAAsD;IACtD,OAAO,EAAE,YAAY,CAAC;IACtB,6FAA6F;IAC7F,QAAQ,CAAC,EAAE,aAAa,CAAC;IACzB,2DAA2D;IAC3D,WAAW,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAC;CAC5D;AAED,MAAM,WAAW,oBAAoB;IACjC,+CAA+C;IAC/C,MAAM,EAAE,cAAc,CAAC;IACvB,kDAAkD;IAClD,eAAe,EAAE,aAAa,CAAC;IAC/B,8CAA8C;IAC9C,MAAM,EAAE,MAAM,CAAC;IACf,sCAAsC;IACtC,eAAe,EAAE,MAAM,CAAC;IACxB,0EAA0E;IAC1E,cAAc,EAAE,cAAc,CAAC;IAC/B,8EAA8E;IAC9E,SAAS,EAAE,aAAa,CAAC;IACzB,yEAAyE;IACzE,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,oEAAoE;IACpE,OAAO,EAAE,MAAM,IAAI,CAAC;CACvB;AAED;;;;;;;;;;;;;GAaG;AACH,qBAAa,eAAe;IACxB,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAqB;IAC7C,OAAO,CAAC,UAAU,CAAC,CAAS;IAC5B,OAAO,CAAC,eAAe,CAAK;IAC5B,OAAO,CAAC,aAAa,CAAC,CAAS;IAC/B,OAAO,CAAC,gBAAgB,CAAgB;IACxC,OAAO,CAAC,aAAa,CAAC,CAAoB;IAE1C;;;;;OAKG;IACH,eAAe,CAAC,QAAQ,EAAE,iBAAiB,GAAG,eAAe;IAK7D;;OAEG;IACH,cAAc,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,eAAe;IAKnE;;;OAGG;IACH,YAAY,CAAC,MAAM,EAAE,MAAM,GAAG,eAAe;IAM7C;;OAEG;IACH,iBAAiB,CAAC,KAAK,EAAE,MAAM,GAAG,eAAe;IAKjD;;;;OAIG;IACH,kBAAkB,CAAC,QAAQ,EAAE,MAAM,EAAE,GAAG,eAAe;IAKvD;;OAEG;IACH,KAAK,CAAC,IAAI,EAAE,iBAAiB,GAAG,oBAAoB;IA+GpD;;;OAGG;IACH,eAAe,CAAC,GAAG,EAAE,MAAM,GAAG,eAAe;CAIhD"}
|
|
@@ -45,7 +45,7 @@ const ws_clients_controller_1 = require("./controllers/ws-clients-controller");
|
|
|
45
45
|
const module_registry_1 = require("./services/module-registry");
|
|
46
46
|
const log_ring_buffer_1 = require("./services/log-ring-buffer");
|
|
47
47
|
const admin_config_1 = require("./services/admin-config");
|
|
48
|
-
const
|
|
48
|
+
const dashboard_dir_1 = require("./services/dashboard-dir");
|
|
49
49
|
const path_1 = require("path");
|
|
50
50
|
const crypto = __importStar(require("crypto"));
|
|
51
51
|
/**
|
|
@@ -68,6 +68,17 @@ class CliAdminBuilder {
|
|
|
68
68
|
_registeredJobs = 0;
|
|
69
69
|
_dashboardDir;
|
|
70
70
|
_enabledFeatures = [];
|
|
71
|
+
_authProvider;
|
|
72
|
+
/**
|
|
73
|
+
* Authenticate the dashboard through the users plugin
|
|
74
|
+
* (`usersPlugin.serverAuth`): login uses the users auth service and
|
|
75
|
+
* requires the `admin:access` permission (`admin` has it via `*`). The
|
|
76
|
+
* static credentials are then ignored.
|
|
77
|
+
*/
|
|
78
|
+
setAuthProvider(provider) {
|
|
79
|
+
this._authProvider = provider;
|
|
80
|
+
return this;
|
|
81
|
+
}
|
|
71
82
|
/**
|
|
72
83
|
* Set admin credentials.
|
|
73
84
|
*/
|
|
@@ -105,6 +116,9 @@ class CliAdminBuilder {
|
|
|
105
116
|
*/
|
|
106
117
|
build(deps) {
|
|
107
118
|
const { registry, eventSocketManager, builder, executor, broadcastFn } = deps;
|
|
119
|
+
if (!this._authProvider && this._config.usesDefaultCredentials()) {
|
|
120
|
+
console.warn('[qcli-admin] WARNING: Using default admin credentials. Set QCLI_ADMIN_USERNAME and QCLI_ADMIN_PASSWORD environment variables.');
|
|
121
|
+
}
|
|
108
122
|
// Resolve JWT secret: explicit > env var > random
|
|
109
123
|
const secret = this._jwtSecret
|
|
110
124
|
?? process.env.QCLI_ADMIN_JWT_SECRET
|
|
@@ -121,14 +135,16 @@ class CliAdminBuilder {
|
|
|
121
135
|
logBuffer.setBroadcastFn(broadcast);
|
|
122
136
|
logBuffer.interceptConsole();
|
|
123
137
|
// Create auth middleware
|
|
124
|
-
const authMiddleware = (0, auth_middleware_1.createAuthMiddleware)(secret);
|
|
138
|
+
const authMiddleware = (0, auth_middleware_1.createAuthMiddleware)(secret, this._authProvider);
|
|
125
139
|
// Create main router
|
|
126
140
|
const router = (0, express_1.Router)();
|
|
127
141
|
// Auth routes (login is unauthenticated, /me requires auth)
|
|
128
|
-
const authResult = (0, auth_controller_1.createAuthController)(this._config, secret);
|
|
142
|
+
const authResult = (0, auth_controller_1.createAuthController)(this._config, secret, this._authProvider);
|
|
129
143
|
router.use('/auth', authResult.router);
|
|
130
|
-
//
|
|
131
|
-
|
|
144
|
+
// Auth is applied per admin route group (not router-wide): this router
|
|
145
|
+
// is mounted at the shared /api/v1/qcli prefix, so an unscoped
|
|
146
|
+
// `router.use(authMiddleware)` would reject requests meant for other
|
|
147
|
+
// plugins mounted at the same prefix (e.g. the users plugin).
|
|
132
148
|
// Status
|
|
133
149
|
const registeredJobs = this._registeredJobs;
|
|
134
150
|
const enabledFeatures = this._enabledFeatures;
|
|
@@ -149,18 +165,18 @@ class CliAdminBuilder {
|
|
|
149
165
|
return features;
|
|
150
166
|
},
|
|
151
167
|
};
|
|
152
|
-
router.use('/status', (0, status_controller_1.createStatusController)(statusDeps));
|
|
168
|
+
router.use('/status', authMiddleware, (0, status_controller_1.createStatusController)(statusDeps));
|
|
153
169
|
// Plugins
|
|
154
|
-
router.use('/plugins', (0, plugins_controller_1.createPluginsController)(moduleRegistry));
|
|
170
|
+
router.use('/plugins', authMiddleware, (0, plugins_controller_1.createPluginsController)(moduleRegistry));
|
|
155
171
|
// Config
|
|
156
|
-
router.use('/config', (0, config_controller_1.createConfigController)(this._config));
|
|
172
|
+
router.use('/config', authMiddleware, (0, config_controller_1.createConfigController)(this._config));
|
|
157
173
|
// Logs
|
|
158
|
-
router.use('/logs', (0, logs_controller_1.createLogsController)(logBuffer));
|
|
174
|
+
router.use('/logs', authMiddleware, (0, logs_controller_1.createLogsController)(logBuffer));
|
|
159
175
|
// WebSocket clients
|
|
160
|
-
router.use('/ws/clients', (0, ws_clients_controller_1.createWsClientsController)(eventSocketManager));
|
|
176
|
+
router.use('/ws/clients', authMiddleware, (0, ws_clients_controller_1.createWsClientsController)(eventSocketManager));
|
|
161
177
|
// Dashboard SPA static file serving
|
|
162
178
|
const dashboardRouter = (0, express_1.Router)();
|
|
163
|
-
const dashboardDistDir = this.
|
|
179
|
+
const dashboardDistDir = (0, dashboard_dir_1.resolveDashboardDir)(this._dashboardDir);
|
|
164
180
|
if (dashboardDistDir) {
|
|
165
181
|
dashboardRouter.use((0, express_1.static)(dashboardDistDir));
|
|
166
182
|
// SPA fallback: serve index.html for all non-file routes
|
|
@@ -179,7 +195,16 @@ class CliAdminBuilder {
|
|
|
179
195
|
clearInterval(authResult.cleanupInterval);
|
|
180
196
|
logBuffer.restoreConsole();
|
|
181
197
|
};
|
|
182
|
-
return {
|
|
198
|
+
return {
|
|
199
|
+
prefix: '/api/v1/qcli',
|
|
200
|
+
dashboardPrefix: '/qcli/admin',
|
|
201
|
+
router,
|
|
202
|
+
dashboardRouter,
|
|
203
|
+
authMiddleware,
|
|
204
|
+
logBuffer,
|
|
205
|
+
publicRoutes: ['POST /api/v1/qcli/auth/login'],
|
|
206
|
+
dispose,
|
|
207
|
+
};
|
|
183
208
|
}
|
|
184
209
|
/**
|
|
185
210
|
* Set the path to the dashboard dist directory.
|
|
@@ -189,41 +214,6 @@ class CliAdminBuilder {
|
|
|
189
214
|
this._dashboardDir = dir;
|
|
190
215
|
return this;
|
|
191
216
|
}
|
|
192
|
-
/**
|
|
193
|
-
* Resolve the dashboard dist directory. Looks for:
|
|
194
|
-
* 1. Explicitly set path
|
|
195
|
-
* 2. @qodalis/cli-server-dashboard/dist (npm package)
|
|
196
|
-
* 3. Relative paths from this file and cwd (development)
|
|
197
|
-
*/
|
|
198
|
-
_resolveDashboardDir() {
|
|
199
|
-
// Explicit override
|
|
200
|
-
if (this._dashboardDir && (0, fs_1.existsSync)(this._dashboardDir)) {
|
|
201
|
-
return (0, path_1.resolve)(this._dashboardDir);
|
|
202
|
-
}
|
|
203
|
-
// Try bundled dashboard directory (embedded in this package)
|
|
204
|
-
const bundledPath = (0, path_1.resolve)(__dirname, '..', 'dashboard');
|
|
205
|
-
if ((0, fs_1.existsSync)(bundledPath))
|
|
206
|
-
return bundledPath;
|
|
207
|
-
// Try resolving from node_modules (published package — legacy fallback)
|
|
208
|
-
try {
|
|
209
|
-
const pkgDir = require.resolve('@qodalis/cli-server-dashboard/package.json');
|
|
210
|
-
const distDir = (0, path_1.join)(pkgDir, '..', 'dist');
|
|
211
|
-
if ((0, fs_1.existsSync)(distDir))
|
|
212
|
-
return (0, path_1.resolve)(distDir);
|
|
213
|
-
}
|
|
214
|
-
catch {
|
|
215
|
-
// Package not installed
|
|
216
|
-
}
|
|
217
|
-
// Try relative path from this file (development)
|
|
218
|
-
const devPath = (0, path_1.resolve)(__dirname, '../../../../cli-server-dashboard/dist');
|
|
219
|
-
if ((0, fs_1.existsSync)(devPath))
|
|
220
|
-
return devPath;
|
|
221
|
-
// Try relative path from cwd (workspace root)
|
|
222
|
-
const cwdPath = (0, path_1.resolve)(process.cwd(), '../cli-server-dashboard/dist');
|
|
223
|
-
if ((0, fs_1.existsSync)(cwdPath))
|
|
224
|
-
return cwdPath;
|
|
225
|
-
return null;
|
|
226
|
-
}
|
|
227
217
|
}
|
|
228
218
|
exports.CliAdminBuilder = CliAdminBuilder;
|
|
229
219
|
//# sourceMappingURL=cli-admin-builder.js.map
|