@saadnvd1/agent-os 0.3.498 → 0.3.501

package/lib/connect/mux.ts

@@ -1,110 +0,0 @@
-/**
- * Both ends of the tunnel: a map of TunnelStreams over one WebSocket. The
- * relay opens streams (a phone connected); the machine receives them.
- */
-
-import type WebSocket from "ws";
-import { decode, encode, Frame, json, type Decoded } from "./frames";
-import { TunnelStream } from "./stream";
-
-// Past this much unsent data, writers wait for the socket to drain.
-const HIGH_WATER = 1 << 20;
-export const MAX_STREAMS = 256;
-
-export interface OpenMeta {
-  remote?: string;
-}
-
-export class Mux {
-  readonly streams = new Map<number, TunnelStream>();
-  bytesIn = 0;
-  bytesOut = 0;
-  private next = 1;
-
-  constructor(
-    private readonly ws: WebSocket,
-    private readonly onOpen?: (stream: TunnelStream, meta: OpenMeta) => void
-  ) {}
-
-  private send = (frame: Buffer): boolean => {
-    if (this.ws.readyState !== this.ws.OPEN) return true;
-    if (frame[0] === Frame.DATA) this.bytesOut += frame.length - 5;
-    this.ws.send(frame);
-    return this.ws.bufferedAmount < HIGH_WATER;
-  };
-
-  private drained = (cb: () => void): void => {
-    const check = () => {
-      if (
-        this.ws.readyState !== this.ws.OPEN ||
-        this.ws.bufferedAmount < HIGH_WATER
-      )
-        cb();
-      else setTimeout(check, 20);
-    };
-    setTimeout(check, 20);
-  };
-
-  private stream(id: number): TunnelStream {
-    const s = new TunnelStream(
-      id,
-      this.send,
-      (done) => this.streams.delete(done),
-      this.drained
-    );
-    this.streams.set(id, s);
-    return s;
-  }
-
-  /** Relay side: a new client connection, or null if the tunnel is going away. */
-  open(meta: OpenMeta): TunnelStream | null {
-    if (this.ws.readyState !== this.ws.OPEN) return null;
-    const id = this.next++;
-    const s = this.stream(id);
-    s.remoteAddress = meta.remote;
-    this.ws.send(encode(Frame.OPEN, id, meta));
-    return s;
-  }
-
-  /** Feed one WebSocket message in. Returns frames this layer doesn't own. */
-  handle(data: Buffer): Decoded | null {
-    const f = decode(data);
-    if (!f) return null;
-    const s = this.streams.get(f.stream);
-    switch (f.type) {
-      case Frame.OPEN: {
-        if (!this.onOpen || this.streams.has(f.stream)) return null;
-        // The relay doesn't get to open unlimited connections into this machine.
-        if (this.streams.size >= MAX_STREAMS) {
-          this.ws.send(encode(Frame.CLOSE, f.stream));
-          return null;
-        }
-        const meta = json<OpenMeta>(f.payload) ?? {};
-        const created = this.stream(f.stream);
-        created.remoteAddress = meta.remote;
-        this.onOpen(created, meta);
-        return null;
-      }
-      case Frame.DATA:
-        this.bytesIn += f.payload.length;
-        s?.receive(Buffer.from(f.payload));
-        return null;
-      case Frame.CLOSE:
-        s?.remoteClosed();
-        return null;
-      case Frame.PAUSE:
-        s?.setRemotePaused(true);
-        return null;
-      case Frame.RESUME:
-        s?.setRemotePaused(false);
-        return null;
-      default:
-        return f;
-    }
-  }
-
-  closeAll(): void {
-    for (const s of this.streams.values()) s.remoteClosed();
-    this.streams.clear();
-  }
-}

package/lib/connect/stream.ts

@@ -1,106 +0,0 @@
-/**
- * One tunnelled TCP connection, as a Duplex. Writes become DATA frames; DATA
- * frames from the other side are pushed in. When our reader falls behind we
- * tell the other side to PAUSE that stream, so one slow terminal can't stall
- * the others sharing the WebSocket.
- */
-
-import { Duplex } from "stream";
-import { encode, Frame } from "./frames";
-
-export type Send = (frame: Buffer) => boolean;
-
-const MAX_FRAME = 64 * 1024;
-// PAUSE goes out at the 64 KB high-water mark; this is far past it.
-export const MAX_BUFFERED = 4 * 1024 * 1024;
-
-export class TunnelStream extends Duplex {
-  private paused = false;
-  private remotePaused = false;
-  private waiting: (() => void)[] = [];
-  private closedByRemote = false;
-  /** Where the far end says the connection came from; informational only. */
-  remoteAddress?: string;
-
-  constructor(
-    readonly id: number,
-    private readonly send: Send,
-    private readonly onDone: (id: number) => void,
-    private readonly drained: (cb: () => void) => void
-  ) {
-    super({ allowHalfOpen: false });
-    this.once("close", () => this.onDone(this.id));
-  }
-
-  /** DATA from the far end. */
-  receive(chunk: Buffer): void {
-    // A far end that ignores PAUSE can't make us buffer without limit.
-    if (this.readableLength + chunk.length > MAX_BUFFERED) {
-      // No error object: nothing listens for "error" on these streams, and an
-      // unheard error event would take the whole process down.
-      this.destroy();
-      return;
-    }
-    if (!this.push(chunk) && !this.paused) {
-      this.paused = true;
-      this.send(encode(Frame.PAUSE, this.id));
-    }
-  }
-
-  /** The far end asked us to stop or start sending. */
-  setRemotePaused(paused: boolean): void {
-    this.remotePaused = paused;
-    if (!paused) this.waiting.splice(0).forEach((go) => go());
-  }
-
-  /** The far end closed. */
-  remoteClosed(): void {
-    this.closedByRemote = true;
-    this.push(null);
-    this.destroy();
-  }
-
-  _read(): void {
-    if (this.paused) {
-      this.paused = false;
-      this.send(encode(Frame.RESUME, this.id));
-    }
-  }
-
-  _write(
-    chunk: Buffer,
-    _enc: BufferEncoding,
-    done: (err?: Error) => void
-  ): void {
-    // Frames stay well under the relay's 1 MB message limit.
-    const pieces: Buffer[] = [];
-    for (let i = 0; i < chunk.length; i += MAX_FRAME) {
-      pieces.push(chunk.subarray(i, i + MAX_FRAME));
-    }
-    const next = (): void => {
-      const piece = pieces.shift();
-      if (!piece) return done();
-      if (this.remotePaused) return void this.waiting.push(next);
-      // send() is false while the WebSocket's buffer is full; wait it out.
-      if (this.send(encode(Frame.DATA, this.id, piece))) next();
-      else this.drained(next);
-    };
-    next();
-  }
-
-  _destroy(err: Error | null, done: (err: Error | null) => void): void {
-    if (!this.closedByRemote) this.send(encode(Frame.CLOSE, this.id));
-    done(err);
-  }
-
-  // What http/tls expect of a socket.
-  setNoDelay(): this {
-    return this;
-  }
-  setKeepAlive(): this {
-    return this;
-  }
-  setTimeout(): this {
-    return this;
-  }
-}

package/lib/connect/tunnel.ts

@@ -1,98 +0,0 @@
-/**
- * This machine's end of the tunnel: dial the relay, prove who we are, and
- * hand each incoming stream to `onStream`. Reconnects with backoff forever.
- */
-
-import WebSocket from "ws";
-import { encode, Frame, json } from "./frames";
-import { signHello } from "./identity";
-import { Mux } from "./mux";
-import type { TunnelStream } from "./stream";
-import type { ConnectConfig } from "./config";
-
-export interface TunnelOptions {
-  config: ConnectConfig;
-  machineKey: string;
-  onStream: (stream: TunnelStream) => void;
-  log?: (line: string) => void;
-}
-
-export type TunnelState = "connecting" | "up" | "denied" | "stopped";
-
-export function startTunnel(opts: TunnelOptions) {
-  const log = opts.log ?? (() => {});
-  let state: TunnelState = "connecting";
-  let ws: WebSocket | null = null;
-  let delay = 1000;
-  let timer: NodeJS.Timeout | null = null;
-
-  const connect = () => {
-    if (state === "stopped") return;
-    const { relayUrl, relayServername, relayCa } = opts.config;
-    // ws hands these to tls.connect; servername isn't in its own types.
-    const tlsOptions = {
-      // Frames are at most 64 KB; nothing legitimate comes near this.
-      maxPayload: 1 << 20,
-      servername: relayServername,
-      ca: relayCa,
-      headers: relayServername ? { Host: relayServername } : undefined,
-    } as WebSocket.ClientOptions;
-    try {
-      ws = new WebSocket(`${relayUrl}/tunnel`, tlsOptions);
-    } catch (err) {
-      // A bad relayUrl must not throw out of a reconnect timer.
-      log(`connect: can't dial ${relayUrl}: ${(err as Error).message}`);
-      state = "denied";
-      return;
-    }
-    const mux = new Mux(ws, (stream) => opts.onStream(stream));
-    ws.on("open", () => {
-      ws!.send(
-        encode(
-          Frame.HELLO,
-          0,
-          signHello(opts.config.machineId, opts.machineKey)
-        )
-      );
-    });
-    ws.on("message", (data: Buffer) => {
-      const f = mux.handle(data);
-      if (f?.type === Frame.READY) {
-        state = "up";
-        delay = 1000;
-        log(
-          `connect: up as ${json<{ hostname: string }>(f.payload)?.hostname}`
-        );
-      } else if (f?.type === Frame.DENIED) {
-        state = "denied";
-        log(
-          `connect: relay refused: ${json<{ error: string }>(f.payload)?.error}`
-        );
-      }
-    });
-    ws.on("close", () => {
-      mux.closeAll();
-      if (state === "stopped") return;
-      // A refusal won't fix itself quickly; back off hard.
-      const denied = state === "denied";
-      if (!denied) state = "connecting";
-      const wait = denied ? 5 * 60_000 : delay;
-      delay = Math.min(delay * 2, 30_000);
-      timer = setTimeout(() => {
-        state = "connecting";
-        connect();
-      }, wait);
-    });
-    ws.on("error", (err) => log(`connect: ${err.message}`));
-  };
-
-  connect();
-  return {
-    state: () => state,
-    stop() {
-      state = "stopped";
-      if (timer) clearTimeout(timer);
-      ws?.close();
-    },
-  };
-}