@rubytech/create-maxy-code 0.1.108 → 0.1.110

package/payload/platform/plugins/cloudflare/scripts/__tests__/tunnel-ingress.test.ts

@@ -1,241 +0,0 @@
-// acceptance grid for tunnel-ingress.ts pure layer.
-//
-// Runs under `node --test --experimental-strip-types` (no compile step). No
-// filesystem reads except via temp files written by the test itself; no
-// network; no shell-outs. Mirrors apt-resolve / samba-provision style.
-
-import test from "node:test";
-import assert from "node:assert/strict";
-import { mkdtempSync, writeFileSync, rmSync } from "node:fs";
-import { join } from "node:path";
-import { tmpdir } from "node:os";
-import {
-  renderConfigYml,
-  renderTunnelState,
-  readPersistedHostnames,
-  probeSambaStanza,
-  renderAccessPolicyActionRequired,
-  type IngressSpec,
-  type TunnelState,
-} from "../tunnel-ingress.ts";
-
-// ---------------------------------------------------------------------------
-// renderConfigYml
-// ---------------------------------------------------------------------------
-
-test("renderConfigYml: HTTPS-only matches expected shape byte-for-byte", () => {
-  const spec: IngressSpec = {
-    tunnelId: "abc-123",
-    credentialsPath: "/home/admin/.maxy/cloudflared/abc-123.json",
-    httpPort: 19200,
-    httpHostnames: ["admin.maxy.bot", "public.maxy.bot"],
-  };
-  assert.equal(
-    renderConfigYml(spec),
-    [
-      "tunnel: abc-123",
-      "credentials-file: /home/admin/.maxy/cloudflared/abc-123.json",
-      "ingress:",
-      "  - hostname: admin.maxy.bot",
-      "    service: http://localhost:19200",
-      "  - hostname: public.maxy.bot",
-      "    service: http://localhost:19200",
-      "  - service: http_status:404",
-      "",
-    ].join("\n"),
-  );
-});
-
-test("renderConfigYml: SSH+SMB appear AFTER http hostnames and BEFORE catch-all", () => {
-  const spec: IngressSpec = {
-    tunnelId: "t-id",
-    credentialsPath: "/creds.json",
-    httpPort: 19200,
-    httpHostnames: ["admin.maxy.bot"],
-    sshHostname: "ssh.maxy.bot",
-    smbHostname: "smb.maxy.bot",
-  };
-  const out = renderConfigYml(spec);
-  const idxHttp = out.indexOf("admin.maxy.bot");
-  const idxSsh = out.indexOf("ssh.maxy.bot");
-  const idxSmb = out.indexOf("smb.maxy.bot");
-  const idx404 = out.indexOf("http_status:404");
-  assert.ok(idxHttp < idxSsh, "HTTP before SSH");
-  assert.ok(idxSsh < idxSmb, "SSH before SMB");
-  assert.ok(idxSmb < idx404, "SMB before catch-all 404");
-  assert.match(out, /\s+service: ssh:\/\/localhost:22$/m);
-  assert.match(out, /\s+service: tcp:\/\/localhost:445$/m);
-});
-
-test("renderConfigYml: SSH only — no SMB block when smbHostname is null", () => {
-  const spec: IngressSpec = {
-    tunnelId: "t-id",
-    credentialsPath: "/creds.json",
-    httpPort: 19200,
-    httpHostnames: ["admin.maxy.bot"],
-    sshHostname: "ssh.maxy.bot",
-    smbHostname: null,
-  };
-  const out = renderConfigYml(spec);
-  assert.ok(out.includes("ssh.maxy.bot"));
-  assert.ok(!out.includes("tcp://localhost:445"));
-});
-
-test("renderConfigYml: empty string hostnames are treated as absent", () => {
-  const spec: IngressSpec = {
-    tunnelId: "t-id",
-    credentialsPath: "/creds.json",
-    httpPort: 19200,
-    httpHostnames: ["admin.maxy.bot"],
-    sshHostname: "",
-    smbHostname: "",
-  };
-  const out = renderConfigYml(spec);
-  assert.ok(!out.includes("ssh://localhost:22"));
-  assert.ok(!out.includes("tcp://localhost:445"));
-});
-
-// ---------------------------------------------------------------------------
-// renderTunnelState
-// ---------------------------------------------------------------------------
-
-test("renderTunnelState: base fields preserved when ssh/smb absent", () => {
-  const state: TunnelState = {
-    tunnelId: "abc",
-    tunnelName: "maxy",
-    domain: "admin.maxy.bot",
-    configPath: "/home/admin/.maxy/cloudflared/config.yml",
-    credentialsPath: "/home/admin/.maxy/cloudflared/abc.json",
-  };
-  const parsed = JSON.parse(renderTunnelState(state));
-  assert.deepEqual(parsed, {
-    tunnelId: "abc",
-    tunnelName: "maxy",
-    domain: "admin.maxy.bot",
-    configPath: "/home/admin/.maxy/cloudflared/config.yml",
-    credentialsPath: "/home/admin/.maxy/cloudflared/abc.json",
-  });
-});
-
-test("renderTunnelState: ssh/smb hostnames persist when present", () => {
-  const state: TunnelState = {
-    tunnelId: "abc",
-    tunnelName: "maxy",
-    domain: "admin.maxy.bot",
-    configPath: "/cfg.yml",
-    credentialsPath: "/creds.json",
-    sshHostname: "ssh.maxy.bot",
-    smbHostname: "smb.maxy.bot",
-  };
-  const parsed = JSON.parse(renderTunnelState(state));
-  assert.equal(parsed.sshHostname, "ssh.maxy.bot");
-  assert.equal(parsed.smbHostname, "smb.maxy.bot");
-});
-
-// ---------------------------------------------------------------------------
-// readPersistedHostnames
-// ---------------------------------------------------------------------------
-
-test("readPersistedHostnames: returns nulls when file missing", () => {
-  const got = readPersistedHostnames("/nope/does/not/exist.json");
-  assert.deepEqual(got, { sshHostname: null, smbHostname: null });
-});
-
-test("readPersistedHostnames: round-trips ssh/smb hostnames from disk", () => {
-  const dir = mkdtempSync(join(tmpdir(), "tunnel-state-"));
-  const path = join(dir, "tunnel.state");
-  try {
-    writeFileSync(
-      path,
-      JSON.stringify({
-        tunnelId: "abc",
-        tunnelName: "maxy",
-        domain: "admin.maxy.bot",
-        configPath: "/cfg.yml",
-        credentialsPath: "/creds.json",
-        sshHostname: "ssh.maxy.bot",
-        smbHostname: "smb.maxy.bot",
-      }),
-    );
-    const got = readPersistedHostnames(path);
-    assert.deepEqual(got, { sshHostname: "ssh.maxy.bot", smbHostname: "smb.maxy.bot" });
-  } finally {
-    rmSync(dir, { recursive: true, force: true });
-  }
-});
-
-test("readPersistedHostnames: malformed JSON returns nulls (no throw)", () => {
-  const dir = mkdtempSync(join(tmpdir(), "tunnel-state-bad-"));
-  const path = join(dir, "tunnel.state");
-  try {
-    writeFileSync(path, "not json");
-    assert.deepEqual(readPersistedHostnames(path), { sshHostname: null, smbHostname: null });
-  } finally {
-    rmSync(dir, { recursive: true, force: true });
-  }
-});
-
-// ---------------------------------------------------------------------------
-// probeSambaStanza
-// ---------------------------------------------------------------------------
-
-test("probeSambaStanza: true when [<brand>] header present", () => {
-  const dir = mkdtempSync(join(tmpdir(), "smb-probe-"));
-  const path = join(dir, "smb.conf");
-  try {
-    writeFileSync(path, "[global]\nworkgroup = WORKGROUP\n\n[maxy]\n   path = /home/admin\n");
-    assert.equal(probeSambaStanza("maxy", path), true);
-  } finally {
-    rmSync(dir, { recursive: true, force: true });
-  }
-});
-
-test("probeSambaStanza: false when only peer brand present (isolation)", () => {
-  const dir = mkdtempSync(join(tmpdir(), "smb-probe-peer-"));
-  const path = join(dir, "smb.conf");
-  try {
-    writeFileSync(path, "[global]\n\n[realagent]\n   path = /home/admin\n");
-    assert.equal(probeSambaStanza("maxy", path), false);
-  } finally {
-    rmSync(dir, { recursive: true, force: true });
-  }
-});
-
-test("probeSambaStanza: false when smb.conf missing", () => {
-  assert.equal(probeSambaStanza("maxy", "/nope/smb.conf"), false);
-});
-
-test("probeSambaStanza: brand names with regex meta characters are escaped", () => {
-  const dir = mkdtempSync(join(tmpdir(), "smb-probe-regex-"));
-  const path = join(dir, "smb.conf");
-  try {
-    writeFileSync(path, "[some.brand]\n   path = /x\n");
-    assert.equal(probeSambaStanza("some.brand", path), true);
-    assert.equal(probeSambaStanza("someXbrand", path), false);
-  } finally {
-    rmSync(dir, { recursive: true, force: true });
-  }
-});
-
-// ---------------------------------------------------------------------------
-// renderAccessPolicyActionRequired
-// ---------------------------------------------------------------------------
-
-test("renderAccessPolicyActionRequired: empty string when neither hostname set", () => {
-  assert.equal(
-    renderAccessPolicyActionRequired({ operatorEmail: "x@y.com" }),
-    "",
-  );
-});
-
-test("renderAccessPolicyActionRequired: lists each hostname with operator email", () => {
-  const out = renderAccessPolicyActionRequired({
-    sshHostname: "ssh.maxy.bot",
-    smbHostname: "smb.maxy.bot",
-    operatorEmail: "joel@example.com",
-  });
-  assert.match(out, /SSH: ssh\.maxy\.bot/);
-  assert.match(out, /SMB: smb\.maxy\.bot/);
-  assert.match(out, /Emails: joel@example\.com/);
-  assert.match(out, /Zero Trust → Access → Applications/);
-});

package/payload/platform/plugins/cloudflare/scripts/_stream-log.sh

@@ -1,154 +0,0 @@
-#!/usr/bin/env bash
-# Shared stream-log helpers sourced by setup-tunnel.sh and reset-tunnel.sh.
-#
-# The platform exposes STREAM_LOG_PATH in the `claude` spawn env;
-# the Bash-tool subprocess inherits it, and opt-in scripts call these
-# helpers to emit phase lines and tee subprocess output into the same
-# per-conversation file the chat UI's server-side tailer reads.
-#
-# Contract (read by platform/ui/app/lib/script-stream-tailer.ts tailer and
-# .docs/web-chat.md):
-#   [<ISO-ts>] [script:<scope>] <kv …>
-#   [<ISO-ts>] [script:<scope>:<subprocess-tag>] <raw line>
-# Canonical regex — SCRIPT_STREAM_RE at platform/ui/app/lib/script-stream-tailer.ts:
-#   ^\[([^\]]+)\] \[script:([a-z][a-z0-9-]*)((?::[a-z0-9:_-]+)?)\] (.*)$
-# The literal `script:` prefix is the chat-surface namespace. It
-# separates chat-surface emitters from log-file-only scopes (`[mcp:<server>]`
-# from mcp-stderr-tee, `[init]` / `[api-wait-*]` / `[mcp-init-error]` /
-# `[subproc-stderr]` / `[compaction-*]` from claude-agent.ts) which share
-# the same per-conversation stream log but must NOT reach the chat UI.
-# Callers of phase_line / tee_subprocess / tee_subprocess_capture pass the
-# bare scope (e.g. `setup-tunnel`, `list-cf-domains`, `reset-tunnel:cloudflared`);
-# these helpers prepend `script:` to the stream-log write. Stderr mirrors
-# stay unprefixed — stderr is for direct-SSH operators and route-handler
-# `reason=<enum>` regex, not the chat-surface contract.
-# <scope> is any `[a-z][a-z0-9-]*` token
-# pre-592 enum `setup-tunnel|reset-tunnel`, which silently filtered out the
-# `[list-cf-domains]` lines). <subprocess-tag> may contain
-# lowercase, digits, `-`, `_`, `:`. Adding a new chat-surface scope requires
-# no edit to the regex — the shape is the only contract. Any prefix-shape
-# change must be made on both sides (this helper + script-stream-tailer.ts)
-# atomically.
-#
-# Inner layers (e.g. a node/python helper a.sh wrapper spawns — the
-# `list-cf-domains.sh` → `list-cf-domains.ts` pattern) must write phase lines
-# directly to STREAM_LOG_PATH with the same prefix shape (including the
-# `script:` namespace): stderr alone is silently discarded by runFormSpawn on
-# exit 0. The build-gate `platform/ui/scripts/check-stream-log-contract.mjs`
-# enforces this by rejecting any.sh under `platform/plugins/*/scripts/`
-# that sources this helper and invokes an interpreter subprocess whose target
-# does not pair a STREAM_LOG_PATH env read with an append/write call. Opt out
-# per invocation with `# stream-log-contract: stderr-only (reason: <prose>)`.
-
-# Exit 1 loudly with the variable name and the invoking scope so direct-SSH
-# invocations fail fast and the operator reads exactly what to set. No
-# silent fallback — criterion 4 of.
-require_stream_log_path() {
-  local scope="$1"
-  if [ -z "${STREAM_LOG_PATH:-}" ]; then
-    echo "ERROR [${scope}]: STREAM_LOG_PATH environment variable is unset." >&2
-    echo "       This script tees subprocess output into a per-conversation" >&2
-    echo "       stream log; it is meaningless without a target path." >&2
-    echo "       The platform sets STREAM_LOG_PATH automatically for every" >&2
-    echo "       \`claude\` spawn. If you are invoking this" >&2
-    echo "       script by hand, export it yourself, for example:" >&2
-    echo "           export STREAM_LOG_PATH=\"\${HOME}/.maxy/logs/manual-invocation.log\"" >&2
-    exit 1
-  fi
-  mkdir -p "$(dirname "${STREAM_LOG_PATH}")"
-}
-
-# ISO-8601 UTC timestamp with millisecond precision.
-stream_log_ts() {
-  date -u +"%Y-%m-%dT%H:%M:%S.%3NZ"
-}
-
-# Append one phase line to STREAM_LOG_PATH AND echo to stderr so the Bash
-# tool's stderr capture carries it. Both paths matter: the stream log is
-# the live tailer surface; stderr is the exit-time Bash-tool surface.
-#
-# The stream-log write carries the `script:` chat-surface namespace;
-# the stderr mirror stays unprefixed because stderr is read by direct-SSH
-# operators and the route-handler `reason=<enum>` regex, not the chat UI.
-#
-# Usage: phase_line <scope> <key=value …>
-phase_line() {
-  local scope="$1"; shift
-  local ts
-  ts="$(stream_log_ts)"
-  printf '[%s] [script:%s] %s\n' "${ts}" "${scope}" "$*" >> "${STREAM_LOG_PATH}"
-  printf '[%s] %s\n' "${scope}" "$*" >&2
-}
-
-# Tee a subprocess's combined stdout+stderr into STREAM_LOG_PATH line-by-line
-# with the given tag, mirroring each line to stderr for the Bash tool.
-# Returns the subprocess's exit code.
-#
-# Use for fire-and-forget subprocesses whose stdout does NOT need to be
-# captured by the caller (the caller only cares about the exit code).
-# For subprocesses whose stdout the caller must parse (e.g. JSON output
-# feeding `jq`), use `tee_subprocess_capture` instead.
-#
-# Usage: tee_subprocess <tag> -- <cmd> <args …>
-# Example: tee_subprocess reset-tunnel:cloudflared -- cloudflared --origincert … tunnel delete my-tunnel
-#
-# stdbuf forces line buffering; without it cloudflared holds its stdout in
-# libc's 8 KB buffer until exit and the ≤ 1 s latency criterion fails.
-tee_subprocess() {
-  local tag="$1"; shift
-  if [ "${1:-}" != "--" ]; then
-    echo "tee_subprocess: expected -- before command" >&2
-    return 2
-  fi
-  shift
-  # Prefer `stdbuf -oL -eL` to force line buffering on the subprocess; fall
-  # back to the bare command when stdbuf is unavailable (macOS dev). On the
-  # Pi (Linux), stdbuf is present via coreutils and cloudflared's output
-  # reaches the tee as soon as each line is written.
-  local -a buf_prefix=()
-  if command -v stdbuf >/dev/null 2>&1; then
-    buf_prefix=(stdbuf -oL -eL)
-  fi
-  "${buf_prefix[@]}" "$@" 2>&1 | while IFS= read -r line; do
-    local ts
-    ts="$(stream_log_ts)"
-    printf '[%s] [script:%s] %s\n' "${ts}" "${tag}" "${line}" >> "${STREAM_LOG_PATH}"
-    printf '%s\n' "${line}" >&2
-  done
-  return "${PIPESTATUS[0]}"
-}
-
-# Tee a subprocess's combined stdout+stderr into STREAM_LOG_PATH line-by-line
-# with the given tag, passing each line through on stdout so the caller can
-# capture it with `> file` or `$( … )`. Stderr mirroring is dropped so the
-# caller's stdout is exactly the subprocess's output — `jq` and friends
-# remain parseable.
-#
-# Usage: tee_subprocess_capture <tag> -- <cmd> <args …> > captured.file
-# Example:
-#   tee_subprocess_capture reset-tunnel:cloudflared -- \
-#     cloudflared --origincert "${CERT}" tunnel list --output json \
-#     > "${NAMES_TMP}"
-tee_subprocess_capture() {
-  local tag="$1"; shift
-  if [ "${1:-}" != "--" ]; then
-    echo "tee_subprocess_capture: expected -- before command" >&2
-    return 2
-  fi
-  shift
-  # Prefer `stdbuf -oL -eL` to force line buffering on the subprocess; fall
-  # back to the bare command when stdbuf is unavailable (macOS dev). On the
-  # Pi (Linux), stdbuf is present via coreutils and cloudflared's output
-  # reaches the tee as soon as each line is written.
-  local -a buf_prefix=()
-  if command -v stdbuf >/dev/null 2>&1; then
-    buf_prefix=(stdbuf -oL -eL)
-  fi
-  "${buf_prefix[@]}" "$@" 2>&1 | while IFS= read -r line; do
-    local ts
-    ts="$(stream_log_ts)"
-    printf '[%s] [script:%s] %s\n' "${ts}" "${tag}" "${line}" >> "${STREAM_LOG_PATH}"
-    printf '%s\n' "${line}"
-  done
-  return "${PIPESTATUS[0]}"
-}

package/payload/platform/plugins/cloudflare/scripts/list-cf-domains.sh

@@ -1,98 +0,0 @@
-#!/usr/bin/env bash
-# Deterministic scrape of the operator's Cloudflare dashboard to discover
-# the domains on the logged-in account. Output on stdout is a JSON `string[]`,
-# sorted and deduped. Every failure exits non-zero with a `reason=<enum>`
-# token on stderr tagged `[list-cf-domains]`.
-#
-# Usage:
-#   list-cf-domains.sh <brand>
-#
-# brand arg is REQUIRED — the prior silent default (string
-# fallback to "maxy" when $1 was empty) made every non-Maxy brand's CF
-# setup form fail on first use because the wrapper's child node helper
-# read the Maxy CDP port from a hardcoded fallback. Missing arg now exits
-# 1 with `phase=error reason=brand-arg-missing`.
-#
-# The wrapper also resolves and exports MAXY_PLATFORM_ROOT from its own
-# script location so the .ts helper can read `<root>/config/brand.json` for
-# the brand's `cdpPort` (the source of truth). Direct-SSH invocation
-# works because the script lives at `<install>/platform/plugins/cloudflare/
-# scripts/`, making platform root three dirs up from the resolved script.
-#
-# Runtime: Node 22's `--experimental-strip-types` runs the .ts helper
-# directly, so no tsx / playwright / ws dependency exists.
-
-set -euo pipefail
-
-# --------------------------------------------------------------------------
-# Shared stream-log helpers (require STREAM_LOG_PATH, phase_line, …).
-# --------------------------------------------------------------------------
-
-# shellcheck source=_stream-log.sh
-# Resolve symlinks before dirname — ~/list-cf-domains.sh is installed as a
-# symlink into $HOME, so the raw BASH_SOURCE[0] points at $HOME, not the
-# scripts directory where _stream-log.sh lives.
-SCRIPT_DIR="$(dirname "$(readlink -f "${BASH_SOURCE[0]}")")"
-source "${SCRIPT_DIR}/_stream-log.sh"
-require_stream_log_path list-cf-domains
-
-if [ "$#" -lt 1 ] || [ -z "${1:-}" ]; then
-  phase_line list-cf-domains phase=error reason=brand-arg-missing
-  exit 1
-fi
-
-BRAND="${1}"
-CONFIG_DIR=".${BRAND}"
-mkdir -p "${HOME}/${CONFIG_DIR}/logs"
-
-# MAXY_PLATFORM_ROOT is set by the systemd service when the admin server
-# spawns this script via runFormSpawn. Direct-SSH invocation has no such env
-# so derive it from the resolved script location: scripts/ → cloudflare/ →
-# plugins/ → platform → install root (three dirs up).
-if [ -z "${MAXY_PLATFORM_ROOT:-}" ]; then
-  MAXY_PLATFORM_ROOT="$(cd "${SCRIPT_DIR}/../../.." && pwd)"
-fi
-
-phase_line list-cf-domains phase=script-start brand="${BRAND}" config_dir="${CONFIG_DIR}"
-
-TS_ENTRY="${SCRIPT_DIR}/list-cf-domains.ts"
-
-if [ ! -f "${TS_ENTRY}" ]; then
-  phase_line list-cf-domains phase=error reason=entry-missing path="${TS_ENTRY}"
-  exit 1
-fi
-
-# 30s hard ceiling. The node helper has its own per-phase budgets totalling
-# ~27s; the wrapper's extra 3s absorbs process startup and CF network jitter.
-# Use `timeout --preserve-status` so the exit code of a timeout is distinct
-# (124) from a helper-reported failure (1).
-HARD_TIMEOUT_SECS=30
-
-# Env passed through:
-#  - CONFIG_DIR    — consumed by the node helper when writing selector-drift
-#                    dumps to ~/.${BRAND}/logs/list-cf-domains-<ts>.html.
-#  - BRAND         — names the brand for log lines naming the brand on
-#                    config-class failures (helper does not derive it from
-#                    CONFIG_DIR to keep the two concerns independent).
-#  - MAXY_PLATFORM_ROOT — install root the helper reads `config/brand.json`
-#                    from for `cdpPort`. Resolved above so direct-SSH
-#                    invocation matches the systemd-spawned path.
-#
-# `node --experimental-strip-types` (stable in Node 22.22) runs the .ts file
-# natively: type annotations are stripped, no enums / decorators are used, so
-# no TS type-transform is needed. `--no-warnings` suppresses the experimental
-# banner which would otherwise leak into stderr and confuse the route parser.
-set +e
-CONFIG_DIR="${CONFIG_DIR}" BRAND="${BRAND}" MAXY_PLATFORM_ROOT="${MAXY_PLATFORM_ROOT}" \
-  timeout --preserve-status --signal=TERM "${HARD_TIMEOUT_SECS}" \
-  node --experimental-strip-types --no-warnings "${TS_ENTRY}"
-EXIT_CODE=$?
-set -e
-
-if [ "${EXIT_CODE}" -eq 124 ]; then
-  phase_line list-cf-domains phase=script-exit code=124 reason=wrapper-timeout budget_secs="${HARD_TIMEOUT_SECS}"
-  exit 1
-fi
-
-phase_line list-cf-domains phase=script-exit code="${EXIT_CODE}"
-exit "${EXIT_CODE}"