@songsid/agend 2.1.12-beta.9 → 2.2.0-alpha.1

package/dist/public-web-gateway.js

@@ -0,0 +1,141 @@
+import { createServer } from "node:http";
+import { bindGatewayRequest } from "./web-request-context.js";
+import { applyWebSecurityHeaders } from "./web-host-guard.js";
+import { isServedAsset } from "./auth-api.js";
+import { shellRoute } from "./web-shell-routes.js";
+/** Reviewed panel routes. No health, agent, issue-code, preview, legacy restart or SSE. */
+export function isPublicWebRoute(method, path) {
+    const reads = method === "GET" || method === "HEAD";
+    if (reads && ["/", "/signin", "/ui", "/view", "/auth/session", "/auth/sessions", "/api/fleet", "/api/profiles", "/api/sort-order", "/api/ai-usage"].includes(path))
+        return true;
+    if (method === "GET" && path.startsWith("/assets/") && isServedAsset(path.slice("/assets/".length)))
+        return true;
+    // #1408: the app shell's pages, exactly as the classifier names them (a malformed one is answered 400 behind it).
+    if (reads && shellRoute(method, path) !== null)
+        return true;
+    if (method === "POST" && ["/auth/login", "/auth/logout"].includes(path))
+        return true;
+    if (method === "DELETE" && /^\/auth\/sessions(?:\/[0-9a-f]{16})?$/.test(path))
+        return true;
+    if (reads && /^\/api\/(pane|profile|avatar)\/[^/]+$/.test(path))
+        return true;
+    if (method === "POST" && (path === "/api/sort-order" || /^\/api\/(profile|avatar)\/[^/]+$/.test(path)))
+        return true;
+    if (method === "POST" && (/^\/stop\/[^/]+$/.test(path) || /^\/api\/instance\/[^/]+\/start$/.test(path)))
+        return true;
+    if (method === "GET" && /^\/ui\/js\/[a-z0-9_-]+\.js$/.test(path))
+        return true;
+    if (method === "GET" && /^\/ui\/(backends|poll|history|file\/[^/]+|prompts|instance\/[^/]+|instances|tasks(?:\/[^/]+)?|schedules(?:\/[^/]+)?|teams(?:\/[^/]+)?|config|org)$/.test(path))
+        return true;
+    if (method === "POST" && /^\/ui\/(send|upload|prompt|needs\/ack|cancel\/[^/]+|stop\/[^/]+|start\/[^/]+|instances\/[^/]+\/delete|restart\/[^/]+|instances|tasks|schedules|teams|config)$/.test(path))
+        return true;
+    if (((method === "POST" && /^\/ui\/tasks\/[^/]+$/.test(path))) || (method === "DELETE" && /^\/ui\/(schedules|teams)\/[^/]+$/.test(path)))
+        return true;
+    // Settings has an explicit method/subroute manifest (not an arbitrary /api prefix).
+    return isPublicSettingsRoute(method, path);
+}
+function isPublicSettingsRoute(method, path) {
+    if (method === "GET" && /^\/api\/settings\/pending(?:\/[0-9a-f]{32})?$/.test(path))
+        return true;
+    if (method === "DELETE" && /^\/api\/settings\/pending\/[0-9a-f]{32}$/.test(path))
+        return true;
+    if (method === "GET")
+        return /^\/api\/settings\/(schema|fleet|fleet\/raw|classic|status-emojis|status-emojis\/guild-emojis|connections|provider-secrets|secrets|apply\/[^/]+|quickstart\/environment)$/.test(path)
+            || /^\/api\/settings\/(provider-secrets|secrets)\/[^/]+\/apply\/[^/]+$/.test(path)
+            || /^\/api\/settings\/connections\/[^/]+\/(secret|binding)\/apply\/[^/]+$/.test(path);
+    if (method === "POST")
+        return /^\/api\/settings\/(status-emojis\/preview|apply|restart-fleet|reload|fleet\/instances|quickstart\/(probe|plan|commit))$/.test(path)
+            || /^\/api\/settings\/(provider-secrets|secrets)\/[^/]+\/(verify|apply)$/.test(path)
+            || /^\/api\/settings\/connections\/[^/]+\/(secret|binding)\/(verify|apply)$/.test(path)
+            || /^\/api\/settings\/instances\/[^/]+\/(pause|wake)$/.test(path);
+    if (method === "PUT")
+        return /^\/api\/settings\/(fleet\/(web|defaults|channels)|classic\/defaults)$/.test(path);
+    if (method === "PATCH" && /^\/api\/settings\/classic\/channels\/[^/]+$/.test(path))
+        return true;
+    return ["POST", "PATCH", "DELETE"].includes(method) && /^\/api\/settings\/fleet\/instances\/[^/]+$/.test(path);
+}
+export function createPublicWebGateway(opts) {
+    let host = null;
+    const marker = `agend-public-${opts.exposureId}`;
+    const sockets = new Set();
+    const reject = (res, status) => { res.writeHead(status); res.end(JSON.stringify({ error: "public web request refused" })); };
+    const server = (opts.create ?? createServer)((req, res) => {
+        applyWebSecurityHeaders(res);
+        res.setHeader("Cache-Control", "no-store");
+        res.setHeader("Referrer-Policy", "no-referrer");
+        res.setHeader("Vary", "Cookie");
+        const raw = req.url ?? "/";
+        try {
+            if (!opts.isCurrent() || !host || req.headers.host !== host)
+                return reject(res, 403);
+            if (!raw.startsWith("/") || raw.startsWith("//") || /[\\\u0000-\u0020\u007f]/.test(raw))
+                return reject(res, 400);
+            const url = new URL(raw, `https://${host}`);
+            // Decode once now; reject malformed encodings before any shared route can throw.
+            const decoded = decodeURIComponent(url.pathname);
+            if (decoded.includes("\\") || decoded.includes("\0") || /%2f|%5c/i.test(url.pathname))
+                return reject(res, 400);
+            if (!isPublicWebRoute(req.method ?? "GET", url.pathname))
+                return reject(res, 404);
+            if (!opts.isOpen()) {
+                if ((req.method === "GET" || req.method === "HEAD") && url.pathname === "/signin") {
+                    res.writeHead(200, { "Content-Type": "text/html; charset=utf-8" });
+                    res.end(`<html><body>${marker}</body></html>`);
+                    return;
+                }
+                return reject(res, 503);
+            }
+            bindGatewayRequest(req, { surface: "gateway", exposureId: opts.exposureId, expectedOrigin: `https://${host}`, isCurrent: () => opts.isCurrent() && opts.isOpen() });
+            opts.dispatch(req, res);
+        }
+        catch {
+            if (!res.headersSent)
+                reject(res, 400);
+            else
+                res.destroy();
+        }
+    });
+    server.maxHeadersCount = 64;
+    server.headersTimeout = 5_000;
+    server.requestTimeout = 10_000;
+    server.keepAliveTimeout = 5_000;
+    server.setTimeout(15_000, socket => socket.destroy());
+    server.on("connection", socket => { if (sockets.size >= 32) {
+        socket.destroy();
+        return;
+    } sockets.add(socket); socket.on("close", () => sockets.delete(socket)); });
+    // Upgrades are never accepted, but they still leave HTTP's ordinary connection accounting.
+    server.on("upgrade", (_req, socket) => socket.destroy());
+    server.on("connect", (_req, socket) => socket.destroy());
+    server.on("clientError", (_err, socket) => socket.destroy());
+    server.on("error", () => { host = null; opts.onError?.(); });
+    return {
+        server, readinessMarker: marker,
+        listen: () => new Promise((resolve, rejectListen) => {
+            server.once("error", rejectListen);
+            server.listen(0, "127.0.0.1", () => {
+                server.off("error", rejectListen);
+                const address = server.address();
+                if (!address || typeof address === "string") {
+                    rejectListen(new Error("gateway not bound"));
+                    return;
+                }
+                resolve(new URL(`http://127.0.0.1:${address.port}`));
+            });
+        }),
+        setHost: value => {
+            // Provider-validated only, pinned again at this boundary.
+            if (value !== null && !/^[a-z0-9-]+\.trycloudflare\.com$/.test(value))
+                throw new Error("invalid tunnel host");
+            host = value;
+        },
+        close: () => {
+            host = null;
+            server.close();
+            server.closeAllConnections();
+            for (const socket of sockets)
+                socket.destroy();
+        },
+    };
+}
+//# sourceMappingURL=public-web-gateway.js.map

package/dist/public-web-gateway.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"public-web-gateway.js","sourceRoot":"","sources":["../src/public-web-gateway.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAA0D,MAAM,WAAW,CAAC;AAEjG,OAAO,EAAE,kBAAkB,EAAE,MAAM,0BAA0B,CAAC;AAC9D,OAAO,EAAE,uBAAuB,EAAE,MAAM,qBAAqB,CAAC;AAC9D,OAAO,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAC9C,OAAO,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AAEnD,2FAA2F;AAC3F,MAAM,UAAU,gBAAgB,CAAC,MAAc,EAAE,IAAY;IAC3D,MAAM,KAAK,GAAG,MAAM,KAAK,KAAK,IAAI,MAAM,KAAK,MAAM,CAAC;IACpD,IAAI,KAAK,IAAI,CAAC,GAAG,EAAE,SAAS,EAAE,KAAK,EAAE,OAAO,EAAE,eAAe,EAAE,gBAAgB,EAAE,YAAY,EAAE,eAAe,EAAE,iBAAiB,EAAE,eAAe,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IAChL,IAAI,MAAM,KAAK,KAAK,IAAI,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,IAAI,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IACjH,kHAAkH;IAClH,IAAI,KAAK,IAAI,UAAU,CAAC,MAAM,EAAE,IAAI,CAAC,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAC5D,IAAI,MAAM,KAAK,MAAM,IAAI,CAAC,aAAa,EAAE,cAAc,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACrF,IAAI,MAAM,KAAK,QAAQ,IAAI,uCAAuC,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IAC3F,IAAI,KAAK,IAAI,uCAAuC,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IAC7E,IAAI,MAAM,KAAK,MAAM,IAAI,CAAC,IAAI,KAAK,iBAAiB,IAAI,kCAAkC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IACpH,IAAI,MAAM,KAAK,MAAM,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,iCAAiC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IACrH,IAAI,MAAM,KAAK,KAAK,IAAI,6BAA6B,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IAC9E,IAAI,MAAM,KAAK,KAAK,IAAI,oJAAoJ,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACrM,IAAI,MAAM,KAAK,MAAM,IAAI,+JAA+J,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACjN,IAAI,CAAC,CAAC,MAAM,KAAK,MAAM,IAAI,sBAAsB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,KAAK,QAAQ,IAAI,kCAAkC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IACtJ,oFAAoF;IACpF,OAAO,qBAAqB,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;AAC7C,CAAC;AACD,SAAS,qBAAqB,CAAC,MAAc,EAAE,IAAY;IACzD,IAAI,MAAM,KAAK,KAAK,IAAI,+CAA+C,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IAChG,IAAI,MAAM,KAAK,QAAQ,IAAI,0CAA0C,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IAC9F,IAAI,MAAM,KAAK,KAAK;QAAE,OAAO,0KAA0K,CAAC,IAAI,CAAC,IAAI,CAAC;eAC7M,oEAAoE,CAAC,IAAI,CAAC,IAAI,CAAC;eAC/E,uEAAuE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACxF,IAAI,MAAM,KAAK,MAAM;QAAE,OAAO,yHAAyH,CAAC,IAAI,CAAC,IAAI,CAAC;eAC7J,sEAAsE,CAAC,IAAI,CAAC,IAAI,CAAC;eACjF,yEAAyE,CAAC,IAAI,CAAC,IAAI,CAAC;eACpF,mDAAmD,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACpE,IAAI,MAAM,KAAK,KAAK;QAAE,OAAO,uEAAuE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAChH,IAAI,MAAM,KAAK,OAAO,IAAI,6CAA6C,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IAChG,OAAO,CAAC,MAAM,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,4CAA4C,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACjH,CAAC;AASD,MAAM,UAAU,sBAAsB,CAAC,IAOtC;IACC,IAAI,IAAI,GAAkB,IAAI,CAAC;IAC/B,MAAM,MAAM,GAAG,gBAAgB,IAAI,CAAC,UAAU,EAAE,CAAC;IACjD,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;IAClC,MAAM,MAAM,GAAG,CAAC,GAAmB,EAAE,MAAc,EAAQ,EAAE,GAAG,GAAG,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,4BAA4B,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC3J,MAAM,MAAM,GAAG,CAAC,IAAI,CAAC,MAAM,IAAI,YAAY,CAAC,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;QACxD,uBAAuB,CAAC,GAAG,CAAC,CAAC;QAC7B,GAAG,CAAC,SAAS,CAAC,eAAe,EAAE,UAAU,CAAC,CAAC;QAC3C,GAAG,CAAC,SAAS,CAAC,iBAAiB,EAAE,aAAa,CAAC,CAAC;QAChD,GAAG,CAAC,SAAS,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;QAChC,MAAM,GAAG,GAAG,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC;QAC3B,IAAI,CAAC;YACH,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,IAAI,IAAI,GAAG,CAAC,OAAO,CAAC,IAAI,KAAK,IAAI;gBAAE,OAAO,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;YACrF,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,yBAAyB,CAAC,IAAI,CAAC,GAAG,CAAC;gBAAE,OAAO,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;YACjH,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,EAAE,WAAW,IAAI,EAAE,CAAC,CAAC;YAC5C,iFAAiF;YACjF,MAAM,OAAO,GAAG,kBAAkB,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;YACjD,IAAI,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC;gBAAE,OAAO,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;YAC/G,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,MAAM,IAAI,KAAK,EAAE,GAAG,CAAC,QAAQ,CAAC;gBAAE,OAAO,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;YAClF,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC;gBACnB,IAAI,CAAC,GAAG,CAAC,MAAM,KAAK,KAAK,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,CAAC,IAAI,GAAG,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;oBAClF,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,0BAA0B,EAAE,CAAC,CAAC;oBAAC,GAAG,CAAC,GAAG,CAAC,eAAe,MAAM,gBAAgB,CAAC,CAAC;oBAAC,OAAO;gBAC7H,CAAC;gBACD,OAAO,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;YAC1B,CAAC;YACD,kBAAkB,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,cAAc,EAAE,WAAW,IAAI,EAAE,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;YACpK,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QAC1B,CAAC;QAAC,MAAM,CAAC;YACP,IAAI,CAAC,GAAG,CAAC,WAAW;gBAAE,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;;gBAAM,GAAG,CAAC,OAAO,EAAE,CAAC;QAC7D,CAAC;IACH,CAAC,CAAC,CAAC;IACH,MAAM,CAAC,eAAe,GAAG,EAAE,CAAC;IAC5B,MAAM,CAAC,cAAc,GAAG,KAAK,CAAC;IAC9B,MAAM,CAAC,cAAc,GAAG,MAAM,CAAC;IAC/B,MAAM,CAAC,gBAAgB,GAAG,KAAK,CAAC;IAChC,MAAM,CAAC,UAAU,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC;IACtD,MAAM,CAAC,EAAE,CAAC,YAAY,EAAE,MAAM,CAAC,EAAE,GAAG,IAAI,OAAO,CAAC,IAAI,IAAI,EAAE,EAAE,CAAC;QAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QAAC,OAAO;IAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACpK,2FAA2F;IAC3F,MAAM,CAAC,EAAE,CAAC,SAAS,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC;IACzD,MAAM,CAAC,EAAE,CAAC,SAAS,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC;IACzD,MAAM,CAAC,EAAE,CAAC,aAAa,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC;IAC7D,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IAC7D,OAAO;QACL,MAAM,EAAE,eAAe,EAAE,MAAM;QAC/B,MAAM,EAAE,GAAG,EAAE,CAAC,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,YAAY,EAAE,EAAE;YAClD,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;YACnC,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,WAAW,EAAE,GAAG,EAAE;gBACjC,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;gBAClC,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,EAAE,CAAC;gBACjC,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;oBAAC,YAAY,CAAC,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC,CAAC;oBAAC,OAAO;gBAAC,CAAC;gBACtG,OAAO,CAAC,IAAI,GAAG,CAAC,oBAAoB,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;YACvD,CAAC,CAAC,CAAC;QACL,CAAC,CAAC;QACF,OAAO,EAAE,KAAK,CAAC,EAAE;YACf,0DAA0D;YAC1D,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,kCAAkC,CAAC,IAAI,CAAC,KAAK,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAC;YAC9G,IAAI,GAAG,KAAK,CAAC;QACf,CAAC;QACD,KAAK,EAAE,GAAG,EAAE;YACV,IAAI,GAAG,IAAI,CAAC;YACZ,MAAM,CAAC,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,mBAAmB,EAAE,CAAC;YAC7B,KAAK,MAAM,MAAM,IAAI,OAAO;gBAAE,MAAM,CAAC,OAAO,EAAE,CAAC;QACjD,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/public-web-link.d.ts

@@ -0,0 +1,53 @@
+import { CloudflaredProvider } from "./tunnel/cloudflared.js";
+import { ensureCloudflared } from "./tunnel/cloudflared-install.js";
+import type { TunnelReservation } from "./tunnel/purpose-lane.js";
+import type { TunnelStopResult } from "./tunnel/types.js";
+import type { PublicGateway } from "./public-web-gateway.js";
+import type { LoginCodeOwner } from "./web-login.js";
+import type { WebConfig } from "./types.js";
+export declare const PUBLIC_LINK_DEFAULT_MINUTES = 120;
+export declare const PUBLIC_LINK_MAX_MINUTES = 480;
+export declare function publicLinkSettings(web: WebConfig | undefined): {
+    allowed: boolean;
+    ttlMs: number;
+    protocol: "http2" | "quic" | "auto";
+};
+export declare function validPublicLinkPatch(value: unknown): value is NonNullable<WebConfig["public_link"]>;
+export interface PublicLinkDelivery {
+    readonly exposureId: string;
+    readonly url: string;
+    readonly expiresAt: number;
+    readonly isCurrent: () => boolean;
+}
+/** Owns access before child cleanup: losing a tunnel cannot leave a public web session alive. */
+export declare class PublicWebLink {
+    private readonly deps;
+    private entry;
+    private readonly now;
+    constructor(deps: {
+        dataDir: string;
+        web(): WebConfig | undefined;
+        permitted(owner: LoginCodeOwner): boolean;
+        reserve(id: string): TunnelReservation | null;
+        createGateway(id: string, current: () => boolean, open: () => boolean, failed: () => void): PublicGateway;
+        revoke(id: string): void;
+        log(event: string, id: string): void;
+        onCleanupUnconfirmed?(result: TunnelStopResult, owner: LoginCodeOwner): void;
+        now?: () => number;
+        wallNow?: () => number;
+        ensure?: typeof ensureCloudflared;
+        provider?: (binary: string, protocol: "http2" | "quic" | "auto") => CloudflaredProvider;
+    });
+    get exposureId(): string | undefined;
+    status(): {
+        state: string;
+        expiresAt?: number;
+        remainingSeconds?: number;
+    };
+    private current;
+    refresh(): void;
+    /** Multiple same-start requests share delivery proof: failed A may never close confirmed B. */
+    deliver(owner: LoginCodeOwner, send: (link: PublicLinkDelivery) => Promise<boolean>): Promise<boolean>;
+    private start;
+    close(reason: string, expectedId?: string): Promise<TunnelStopResult>;
+}

package/dist/public-web-link.js

@@ -0,0 +1,175 @@
+import { performance } from "node:perf_hooks";
+import { newTunnelSid } from "./tunnel/manager.js";
+import { CloudflaredProvider } from "./tunnel/cloudflared.js";
+import { ensureCloudflared } from "./tunnel/cloudflared-install.js";
+export const PUBLIC_LINK_DEFAULT_MINUTES = 120;
+export const PUBLIC_LINK_MAX_MINUTES = 480;
+export function publicLinkSettings(web) {
+    // Raw YAML startup does not go through the Settings validator. Enforce the
+    // fixed cap here too, at the boundary every runtime consumer shares.
+    const settings = web?.public_link;
+    const minutes = typeof settings?.ttl_minutes === "number" && Number.isInteger(settings.ttl_minutes) && settings.ttl_minutes > 0
+        ? Math.min(settings.ttl_minutes, PUBLIC_LINK_MAX_MINUTES) : PUBLIC_LINK_DEFAULT_MINUTES;
+    const protocol = settings?.protocol;
+    return { allowed: settings?.allow_public === undefined || settings.allow_public === true, ttlMs: minutes * 60_000,
+        protocol: typeof protocol === "string" && ["http2", "quic", "auto"].includes(protocol) ? protocol : "http2" };
+}
+export function validPublicLinkPatch(value) {
+    if (!value || typeof value !== "object" || Array.isArray(value))
+        return false;
+    const v = value;
+    return Object.keys(v).every(k => ["allow_public", "ttl_minutes", "protocol"].includes(k))
+        && (v.allow_public === undefined || typeof v.allow_public === "boolean")
+        && (v.ttl_minutes === undefined || (Number.isInteger(v.ttl_minutes) && Number(v.ttl_minutes) >= 1 && Number(v.ttl_minutes) <= PUBLIC_LINK_MAX_MINUTES))
+        && (v.protocol === undefined || (typeof v.protocol === "string" && ["http2", "quic", "auto"].includes(v.protocol)));
+}
+/** Owns access before child cleanup: losing a tunnel cannot leave a public web session alive. */
+export class PublicWebLink {
+    deps;
+    entry = null;
+    now;
+    constructor(deps) {
+        this.deps = deps;
+        this.now = deps.now ?? (() => performance.now());
+    }
+    get exposureId() { return this.entry?.id; }
+    status() {
+        const e = this.entry;
+        if (e && this.now() >= e.deadline && !e.closing)
+            void this.close("expired");
+        return e ? { state: e.phase, expiresAt: e.expiresAt, remainingSeconds: Math.max(0, Math.ceil((e.deadline - this.now()) / 1000)) } : { state: "closed" };
+    }
+    current(e) {
+        return this.entry === e && !e.closing && !e.abort.signal.aborted && this.now() < e.deadline
+            && publicLinkSettings(this.deps.web()).allowed && this.deps.permitted(e.owner);
+    }
+    refresh() {
+        const e = this.entry;
+        if (e && !this.current(e))
+            void this.close("policy or binding changed");
+    }
+    /** Multiple same-start requests share delivery proof: failed A may never close confirmed B. */
+    async deliver(owner, send) {
+        if (!this.deps.permitted(owner) || !publicLinkSettings(this.deps.web()).allowed)
+            return false;
+        let e = this.entry;
+        if (e && (e.owner.adapterId !== owner.adapterId || e.owner.chatId !== owner.chatId || e.owner.threadId !== owner.threadId || !this.current(e)))
+            return false;
+        if (!e) {
+            const settings = publicLinkSettings(this.deps.web());
+            const id = newTunnelSid();
+            const reservation = this.deps.reserve(id); // Before installer, listener, or any await.
+            if (!reservation)
+                return false;
+            e = { id, owner: { ...owner }, reservation, abort: new AbortController(), deadline: this.now() + settings.ttlMs,
+                expiresAt: (this.deps.wallNow ?? Date.now)() + settings.ttlMs, phase: "starting", gateway: null, starting: Promise.resolve(), requests: 0, delivered: false };
+            this.entry = e;
+            const captured = e;
+            const expire = () => {
+                if (this.entry !== captured || captured.closing)
+                    return;
+                const remaining = captured.deadline - this.now();
+                if (remaining <= 0)
+                    void this.close("expired");
+                else {
+                    captured.timer = setTimeout(expire, Math.ceil(remaining));
+                    captured.timer.unref?.();
+                }
+            };
+            expire();
+            e.starting = this.start(e, settings.protocol);
+            this.deps.log("requested", id);
+        }
+        e.requests++;
+        try {
+            await e.starting;
+            if (!this.current(e) || !this.deps.permitted(owner) || !e.url)
+                return false;
+            const delivered = await send({ exposureId: e.id, url: e.url, expiresAt: e.expiresAt, isCurrent: () => this.current(e) && this.deps.permitted(owner) });
+            if (!delivered || !this.current(e) || !this.deps.permitted(owner))
+                return false;
+            e.delivered = true;
+            this.deps.log("privately delivered", e.id);
+            return true;
+        }
+        catch {
+            return false;
+        }
+        finally {
+            e.requests--;
+            if (!e.delivered && e.requests === 0 && this.entry === e)
+                await this.close("no confirmed private recipient");
+        }
+    }
+    async start(e, protocol) {
+        try {
+            const binary = await (this.deps.ensure ?? ensureCloudflared)({ dataDir: this.deps.dataDir, pinnedOnly: true, signal: e.abort.signal });
+            if (!this.current(e))
+                throw new Error("closed");
+            const gateway = this.deps.createGateway(e.id, () => this.current(e), () => e.phase === "open", () => { void this.close("gateway failed", e.id); });
+            e.gateway = gateway;
+            const origin = await gateway.listen();
+            if (!this.current(e))
+                throw new Error("closed");
+            const provider = (this.deps.provider ?? ((path, p) => new CloudflaredProvider({ binaryName: path, protocol: p })))(binary.path, protocol);
+            const result = await e.reservation.start(provider, {
+                sid: e.id, origin, pagePath: "/signin", readinessMarker: gateway.readinessMarker, expiresAt: e.expiresAt,
+                signal: e.abort.signal, onCandidateHost: host => { if (this.current(e))
+                    gateway.setHost(host); },
+            });
+            if (!result.ok || !this.current(e))
+                throw new Error("tunnel unavailable");
+            const published = new URL(result.handle.pageUrl);
+            if (published.protocol !== "https:" || published.pathname !== "/signin" || published.username || published.password || published.search || published.hash)
+                throw new Error("invalid public page");
+            gateway.setHost(published.host);
+            e.url = published.href;
+            e.unsubscribe = result.handle.onUnexpectedExit(() => { void this.close("tunnel exited", e.id); });
+            if (!this.current(e))
+                throw new Error("closed");
+            e.phase = "open";
+            this.deps.log("opened", e.id);
+        }
+        catch {
+            // deliver's finally joins close after this promise settles; no self-await.
+            e.abort.abort();
+            e.gateway?.setHost(null);
+            e.gateway?.close();
+            this.deps.log("startup failed", e.id);
+            throw new Error("public link unavailable");
+        }
+    }
+    close(reason, expectedId) {
+        const e = this.entry;
+        if (!e || (expectedId && expectedId !== e.id))
+            return Promise.resolve({ confirmed: true });
+        if (e.closing)
+            return e.closing;
+        // Every access fence is synchronous, before the first await and before child cleanup.
+        e.phase = "closing";
+        e.abort.abort();
+        if (e.timer)
+            clearTimeout(e.timer);
+        e.unsubscribe?.();
+        this.deps.revoke(e.id);
+        e.gateway?.setHost(null);
+        e.gateway?.close();
+        e.closing = (async () => {
+            await e.starting.catch(() => { });
+            e.gateway?.close(); // listen may have finished after the first close.
+            const result = await e.reservation.stop(reason);
+            if (this.entry === e) {
+                if (result.confirmed)
+                    this.entry = null;
+                else {
+                    e.phase = "cleanup_unconfirmed";
+                    this.deps.onCleanupUnconfirmed?.(result, e.owner);
+                }
+            }
+            this.deps.log(result.confirmed ? "closed" : "cleanup unconfirmed", e.id);
+            return result;
+        })();
+        return e.closing;
+    }
+}
+//# sourceMappingURL=public-web-link.js.map

package/dist/public-web-link.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"public-web-link.js","sourceRoot":"","sources":["../src/public-web-link.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAC9C,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAAE,mBAAmB,EAAE,MAAM,yBAAyB,CAAC;AAC9D,OAAO,EAAE,iBAAiB,EAAE,MAAM,iCAAiC,CAAC;AAOpE,MAAM,CAAC,MAAM,2BAA2B,GAAG,GAAG,CAAC;AAC/C,MAAM,CAAC,MAAM,uBAAuB,GAAG,GAAG,CAAC;AAC3C,MAAM,UAAU,kBAAkB,CAAC,GAA0B;IAC3D,2EAA2E;IAC3E,qEAAqE;IACrE,MAAM,QAAQ,GAAG,GAAG,EAAE,WAAW,CAAC;IAClC,MAAM,OAAO,GAAG,OAAO,QAAQ,EAAE,WAAW,KAAK,QAAQ,IAAI,MAAM,CAAC,SAAS,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,QAAQ,CAAC,WAAW,GAAG,CAAC;QAC7H,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,WAAW,EAAE,uBAAuB,CAAC,CAAC,CAAC,CAAC,2BAA2B,CAAC;IAC1F,MAAM,QAAQ,GAAG,QAAQ,EAAE,QAAQ,CAAC;IACpC,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,YAAY,KAAK,SAAS,IAAI,QAAQ,CAAC,YAAY,KAAK,IAAI,EAAE,KAAK,EAAE,OAAO,GAAG,MAAM;QAC/G,QAAQ,EAAE,OAAO,QAAQ,KAAK,QAAQ,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;AAClH,CAAC;AACD,MAAM,UAAU,oBAAoB,CAAC,KAAc;IACjD,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAC9E,MAAM,CAAC,GAAG,KAAgC,CAAC;IAC3C,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,cAAc,EAAE,aAAa,EAAE,UAAU,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;WACpF,CAAC,CAAC,CAAC,YAAY,KAAK,SAAS,IAAI,OAAO,CAAC,CAAC,YAAY,KAAK,SAAS,CAAC;WACrE,CAAC,CAAC,CAAC,WAAW,KAAK,SAAS,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,IAAI,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,IAAI,uBAAuB,CAAC,CAAC;WACpJ,CAAC,CAAC,CAAC,QAAQ,KAAK,SAAS,IAAI,CAAC,OAAO,CAAC,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;AACxH,CAAC;AAwBD,iGAAiG;AACjG,MAAM,OAAO,aAAa;IAGK;IAFrB,KAAK,GAAoB,IAAI,CAAC;IACrB,GAAG,CAAe;IACnC,YAA6B,IAa5B;QAb4B,SAAI,GAAJ,IAAI,CAahC;QAAI,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE,CAAC,CAAC;IAAC,CAAC;IAExD,IAAI,UAAU,KAAyB,OAAO,IAAI,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC;IAC/D,MAAM;QACJ,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC;QACrB,IAAI,CAAC,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,CAAC,OAAO;YAAE,KAAK,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QAC5E,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,EAAE,gBAAgB,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC;IAC1J,CAAC;IACO,OAAO,CAAC,CAAW;QACzB,OAAO,IAAI,CAAC,KAAK,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,QAAQ;eACtF,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,OAAO,IAAI,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;IACnF,CAAC;IACD,OAAO;QACL,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC;QACrB,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;YAAE,KAAK,IAAI,CAAC,KAAK,CAAC,2BAA2B,CAAC,CAAC;IAC1E,CAAC;IACD,+FAA+F;IAC/F,KAAK,CAAC,OAAO,CAAC,KAAqB,EAAE,IAAoD;QACvF,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,OAAO;YAAE,OAAO,KAAK,CAAC;QAC9F,IAAI,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC;QACnB,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,KAAK,KAAK,CAAC,SAAS,IAAI,CAAC,CAAC,KAAK,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM,IAAI,CAAC,CAAC,KAAK,CAAC,QAAQ,KAAK,KAAK,CAAC,QAAQ,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;YAAE,OAAO,KAAK,CAAC;QAC7J,IAAI,CAAC,CAAC,EAAE,CAAC;YACP,MAAM,QAAQ,GAAG,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;YACrD,MAAM,EAAE,GAAG,YAAY,EAAE,CAAC;YAC1B,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,4CAA4C;YACvF,IAAI,CAAC,WAAW;gBAAE,OAAO,KAAK,CAAC;YAC/B,CAAC,GAAG,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,GAAG,KAAK,EAAE,EAAE,WAAW,EAAE,KAAK,EAAE,IAAI,eAAe,EAAE,EAAE,QAAQ,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,CAAC,KAAK;gBAC7G,SAAS,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,GAAG,CAAC,EAAE,GAAG,QAAQ,CAAC,KAAK,EAAE,KAAK,EAAE,UAAU,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,CAAC,OAAO,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;YAChK,IAAI,CAAC,KAAK,GAAG,CAAC,CAAC;YACf,MAAM,QAAQ,GAAG,CAAC,CAAC;YACnB,MAAM,MAAM,GAAG,GAAS,EAAE;gBACxB,IAAI,IAAI,CAAC,KAAK,KAAK,QAAQ,IAAI,QAAQ,CAAC,OAAO;oBAAE,OAAO;gBACxD,MAAM,SAAS,GAAG,QAAQ,CAAC,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;gBACjD,IAAI,SAAS,IAAI,CAAC;oBAAE,KAAK,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;qBAC1C,CAAC;oBAAC,QAAQ,CAAC,KAAK,GAAG,UAAU,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC;oBAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC;gBAAC,CAAC;YAC/F,CAAC,CAAC;YACF,MAAM,EAAE,CAAC;YACT,CAAC,CAAC,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC,QAAQ,CAAC,CAAC;YAC9C,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;QACjC,CAAC;QACD,CAAC,CAAC,QAAQ,EAAE,CAAC;QACb,IAAI,CAAC;YACH,MAAM,CAAC,CAAC,QAAQ,CAAC;YACjB,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG;gBAAE,OAAO,KAAK,CAAC;YAC5E,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,CAAE,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YACxJ,IAAI,CAAC,SAAS,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC;gBAAE,OAAO,KAAK,CAAC;YAChF,CAAC,CAAC,SAAS,GAAG,IAAI,CAAC;YACnB,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,qBAAqB,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;YAC3C,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,MAAM,CAAC;YAAC,OAAO,KAAK,CAAC;QAAC,CAAC;gBACjB,CAAC;YACP,CAAC,CAAC,QAAQ,EAAE,CAAC;YACb,IAAI,CAAC,CAAC,CAAC,SAAS,IAAI,CAAC,CAAC,QAAQ,KAAK,CAAC,IAAI,IAAI,CAAC,KAAK,KAAK,CAAC;gBAAE,MAAM,IAAI,CAAC,KAAK,CAAC,gCAAgC,CAAC,CAAC;QAC/G,CAAC;IACH,CAAC;IACO,KAAK,CAAC,KAAK,CAAC,CAAW,EAAE,QAAmC;QAClE,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,IAAI,iBAAiB,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;YACvI,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,QAAQ,CAAC,CAAC;YAChD,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,MAAM,EAAE,GAAG,EAAE,GAAG,KAAK,IAAI,CAAC,KAAK,CAAC,gBAAgB,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YACnJ,CAAC,CAAC,OAAO,GAAG,OAAO,CAAC;YACpB,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,MAAM,EAAE,CAAC;YACtC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,QAAQ,CAAC,CAAC;YAChD,MAAM,QAAQ,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,EAAE,CAAC,IAAI,mBAAmB,CAAC,EAAE,UAAU,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;YAC1I,MAAM,MAAM,GAAG,MAAM,CAAC,CAAC,WAAW,CAAC,KAAK,CAAC,QAAQ,EAAE;gBACjD,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,eAAe,EAAE,OAAO,CAAC,eAAe,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS;gBACxG,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,MAAM,EAAE,eAAe,EAAE,IAAI,CAAC,EAAE,GAAG,IAAI,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;oBAAE,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;aACjG,CAAC,CAAC;YACH,IAAI,CAAC,MAAM,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAC;YAC1E,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;YACjD,IAAI,SAAS,CAAC,QAAQ,KAAK,QAAQ,IAAI,SAAS,CAAC,QAAQ,KAAK,SAAS,IAAI,SAAS,CAAC,QAAQ,IAAI,SAAS,CAAC,QAAQ,IAAI,SAAS,CAAC,MAAM,IAAI,SAAS,CAAC,IAAI;gBAAE,MAAM,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAC;YAClM,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;YAChC,CAAC,CAAC,GAAG,GAAG,SAAS,CAAC,IAAI,CAAC;YACvB,CAAC,CAAC,WAAW,GAAG,MAAM,CAAC,MAAM,CAAC,gBAAgB,CAAC,GAAG,EAAE,GAAG,KAAK,IAAI,CAAC,KAAK,CAAC,eAAe,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YAClG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,QAAQ,CAAC,CAAC;YAChD,CAAC,CAAC,KAAK,GAAG,MAAM,CAAC;YACjB,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;QAChC,CAAC;QAAC,MAAM,CAAC;YACP,2EAA2E;YAC3E,CAAC,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;YAAC,CAAC,CAAC,OAAO,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;YAAC,CAAC,CAAC,OAAO,EAAE,KAAK,EAAE,CAAC;YAC9D,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;YACtC,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;QAC7C,CAAC;IACH,CAAC;IACD,KAAK,CAAC,MAAc,EAAE,UAAmB;QACvC,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC;QACrB,IAAI,CAAC,CAAC,IAAI,CAAC,UAAU,IAAI,UAAU,KAAK,CAAC,CAAC,EAAE,CAAC;YAAE,OAAO,OAAO,CAAC,OAAO,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC3F,IAAI,CAAC,CAAC,OAAO;YAAE,OAAO,CAAC,CAAC,OAAO,CAAC;QAChC,sFAAsF;QACtF,CAAC,CAAC,KAAK,GAAG,SAAS,CAAC;QACpB,CAAC,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;QAChB,IAAI,CAAC,CAAC,KAAK;YAAE,YAAY,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;QACnC,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC;QAClB,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QACvB,CAAC,CAAC,OAAO,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;QAAC,CAAC,CAAC,OAAO,EAAE,KAAK,EAAE,CAAC;QAC7C,CAAC,CAAC,OAAO,GAAG,CAAC,KAAK,IAAI,EAAE;YACtB,MAAM,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;YACjC,CAAC,CAAC,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC,kDAAkD;YACtE,MAAM,MAAM,GAAG,MAAM,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YAChD,IAAI,IAAI,CAAC,KAAK,KAAK,CAAC,EAAE,CAAC;gBACrB,IAAI,MAAM,CAAC,SAAS;oBAAE,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;qBACnC,CAAC;oBAAC,CAAC,CAAC,KAAK,GAAG,qBAAqB,CAAC;oBAAC,IAAI,CAAC,IAAI,CAAC,oBAAoB,EAAE,CAAC,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC;gBAAC,CAAC;YAC9F,CAAC;YACD,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,qBAAqB,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;YACzE,OAAO,MAAM,CAAC;QAChB,CAAC,CAAC,EAAE,CAAC;QACL,OAAO,CAAC,CAAC,OAAO,CAAC;IACnB,CAAC;CACF"}

package/dist/quickstart-api.d.ts

@@ -1,3 +1,4 @@
+import { type SettingsExecution } from "./settings-transaction.js";
 /**
  * The Settings setup wizard's server side.
  *
@@ -145,14 +146,20 @@ export declare function detectWizardBackends(): string[];
  * asserts this module's import graph reaches neither fleet-manager, daemon nor
  * instance-lifecycle, so the host cannot grow a path to them by accident.
  */
+/** One pure draft shared by the writer and the authoritative confirmation diff. */
+export declare function draftQuickstart(cfg: FleetConfig, body: WizardPlanInput, plan: WizardPlan): FleetConfig;
 export interface QuickstartApiContext {
+    readonly webToken?: string | null;
+    readonly webSessions?: import("./web-session.js").WebSessionStore | null;
     fleetConfig: FleetConfig | null;
     dataDir: string;
     logger: {
         info(obj: unknown, msg?: string): void;
         warn(obj: unknown, msg?: string): void;
     };
-    saveFleetConfig(): void;
+    /** SetupHost returns an undo for its exact persisted write; ordinary fleet writers keep their existing contract. */
+    saveFleetConfig(): void | (() => boolean);
+    settingsCommitted?(execution?: SettingsExecution): void;
     /** Only a running fleet can answer this; without one, nothing is polling. */
     isBotTokenInUse?(token: string): boolean;
 }

package/dist/quickstart-api.js

@@ -1,3 +1,7 @@
+import { settingsRequestExecution, settingsWrite } from "./settings-request-capability.js";
+import { SettingsExecutionError, settingsFileResource, trySettingsLease } from "./settings-transaction.js";
+import { readBoundedWebBody } from "./web-body.js";
+import { permitWebContinuation } from "./web-continuation.js";
 import { join } from "node:path";
 import { SecretStore } from "./secret-store.js";
 import { KNOWN_BACKENDS, validateFleetConfig } from "./config-validator.js";
@@ -145,27 +149,41 @@ export async function runProviderProbe(request, opts = {}) {
 export function detectWizardBackends() {
     return detectInstalledBackends(WIZARD_BACKENDS);
 }
+// ── HTTP routes ─────────────────────────────────────────────────────────────
+/**
+ * What the wizard's routes need from their host.
+ *
+ * Five fields, and none of them is a fleet: this is the whole "ConfigVerbs +
+ * ProviderProbeVerbs" surface. A running fleet supplies it from FleetManager; a
+ * pre-fleet setup host supplies it from a file. `tests/prefleet-host.test.ts`
+ * asserts this module's import graph reaches neither fleet-manager, daemon nor
+ * instance-lifecycle, so the host cannot grow a path to them by accident.
+ */
+/** One pure draft shared by the writer and the authoritative confirmation diff. */
+export function draftQuickstart(cfg, body, plan) {
+    const draft = structuredClone(cfg), summary = wizardChannels(cfg);
+    const channels = draft.channels ?? (draft.channel ? [draft.channel] : []);
+    const existingIndex = channels.findIndex(channel => channel.bot_token_env === body.token_env);
+    const entry = { id: nextChannelId(body.platform, body.token_env, summary), ...plan.channel };
+    if (existingIndex >= 0)
+        channels[existingIndex] = { ...channels[existingIndex], ...entry };
+    else
+        channels.push(entry);
+    draft.channels = channels;
+    delete draft.channel;
+    draft.instances = { ...draft.instances, [body.instance_name]: {
+            ...(Object.hasOwn(draft.instances, body.instance_name) ? draft.instances[body.instance_name] : {}),
+            working_directory: body.working_directory, backend: body.backend,
+        } };
+    return draft;
+}
 function json(res, status, data) {
     res.setHeader("Content-Type", "application/json");
     res.writeHead(status);
     res.end(JSON.stringify(data));
 }
 function readBody(req, maxBytes) {
-    return new Promise((resolve, reject) => {
-        const chunks = [];
-        let size = 0;
-        req.on("data", (chunk) => {
-            size += chunk.length;
-            if (size > maxBytes) {
-                reject(new Error("body too large"));
-                req.destroy();
-                return;
-            }
-            chunks.push(chunk);
-        });
-        req.on("end", () => resolve(Buffer.concat(chunks)));
-        req.on("error", reject);
-    });
+    return readBoundedWebBody(req, maxBytes);
 }
 /** The channels as the wizard sees them, from either config shape. */
 export function wizardChannels(cfg) {
@@ -216,6 +234,8 @@ export function handleQuickstartRequest(req, res, url, ctx) {
     }
     if (method === "POST" && path === "/api/settings/quickstart/probe") {
         readBody(req, 16 * 1024).then(async (buf) => {
+            if (!permitWebContinuation(req, res, ctx))
+                return;
             let body;
             try {
                 body = JSON.parse(buf.toString("utf-8") || "{}");
@@ -245,6 +265,8 @@ export function handleQuickstartRequest(req, res, url, ctx) {
             return true;
         }
         readBody(req, 16 * 1024).then(buf => {
+            if (!permitWebContinuation(req, res, ctx))
+                return;
             let body;
             try {
                 body = JSON.parse(buf.toString("utf-8") || "{}");
@@ -269,6 +291,8 @@ export function handleQuickstartRequest(req, res, url, ctx) {
             return true;
         }
         readBody(req, 16 * 1024).then(buf => {
+            if (!permitWebContinuation(req, res, ctx))
+                return;
             let body;
             try {
                 body = JSON.parse(buf.toString("utf-8") || "{}");
@@ -291,58 +315,72 @@ export function handleQuickstartRequest(req, res, url, ctx) {
             // nothing in memory moves until the whole result is known to be valid —
             // the previous order wrote the token first and left the running config
             // rewritten when validation then failed.
-            const draft = structuredClone(cfg);
-            const channels = (draft.channels ?? (draft.channel ? [draft.channel] : []));
-            const existingIndex = channels.findIndex(channel => channel.bot_token_env === body.token_env);
-            const entry = { id: nextChannelId(body.platform, body.token_env, summary), ...plan.channel };
-            if (existingIndex >= 0)
-                channels[existingIndex] = { ...channels[existingIndex], ...entry };
-            else
-                channels.push(entry);
-            draft.channels = channels;
-            delete draft.channel;
-            draft.instances[body.instance_name] = {
-                ...(draft.instances[body.instance_name] ?? {}),
-                working_directory: body.working_directory,
-                backend: body.backend,
-            };
+            const draft = draftQuickstart(cfg, body, plan);
             const validation = validateFleetConfig(draft);
             if (!validation.valid) {
                 return json(res, 400, { error: validation.errors.map(e => `${e.path}: ${e.message}`).join("; ") });
             }
-            const secret = writeQuickstartSecret(ctx.dataDir, body.token_env, body.token);
-            if (!secret.ok) {
-                return json(res, 500, { error: "secret could not be stored securely" });
-            }
-            const before = {
-                channels: cfg.channels,
-                channel: cfg.channel,
-                instance: cfg.instances[body.instance_name],
-                hadInstance: Object.prototype.hasOwnProperty.call(cfg.instances, body.instance_name),
-            };
-            cfg.channels = draft.channels;
-            delete cfg.channel;
-            cfg.instances[body.instance_name] = draft.instances[body.instance_name];
+            const execution = settingsRequestExecution(req), envPath = join(ctx.dataDir, ".env");
+            const lease = trySettingsLease([settingsFileResource(envPath)], execution?.owner);
+            if (!lease)
+                return json(res, 409, { error: "another secret operation is still running" });
+            let stored = false, secretBefore;
+            const before = { channels: cfg.channels, channel: cfg.channel, instance: cfg.instances[body.instance_name],
+                hadInstance: Object.hasOwn(cfg.instances, body.instance_name) };
+            let store;
+            const rollback = {};
             try {
-                ctx.saveFleetConfig();
+                execution?.assert();
+                store = new SecretStore(envPath, new Set([body.token_env]), { owner: lease.owner });
+                settingsWrite(req, () => {
+                    secretBefore = store.write(body.token_env, body.token);
+                    stored = true;
+                    cfg.channels = draft.channels;
+                    delete cfg.channel;
+                    Object.defineProperty(cfg.instances, body.instance_name, { value: draft.instances[body.instance_name], enumerable: true, writable: true, configurable: true });
+                    const undo = ctx.saveFleetConfig();
+                    if (typeof undo === "function")
+                        rollback.config = undo;
+                    ctx.settingsCommitted?.(execution);
+                });
             }
             catch (err) {
-                // The file is the authority. If it did not take the change, the running
-                // config must not keep it either.
                 cfg.channels = before.channels;
                 if (before.channel !== undefined)
                     cfg.channel = before.channel;
+                else
+                    delete cfg.channel;
                 if (before.hadInstance)
                     cfg.instances[body.instance_name] = before.instance;
                 else
                     delete cfg.instances[body.instance_name];
-                return json(res, 500, { error: err.message });
+                let cleanupFailed = false;
+                try {
+                    if (rollback.config && !rollback.config())
+                        cleanupFailed = true;
+                }
+                catch {
+                    cleanupFailed = true;
+                }
+                try {
+                    if (stored && secretBefore)
+                        store.restoreIfCurrent(secretBefore);
+                }
+                catch {
+                    cleanupFailed = true;
+                }
+                if (cleanupFailed)
+                    return json(res, 500, { error: "setup cleanup failed; inspect configuration on the host" });
+                return json(res, err instanceof SettingsExecutionError ? 409 : 500, { error: "setup was not committed" });
+            }
+            finally {
+                lease.release();
             }
             ctx.logger.info({ instance: body.instance_name, platform: body.platform }, "settings: quickstart committed");
             // No apply here: the page starts the ordinary job so the wizard's last
             // step has the same progress, deadline and restart recovery as everything
             // else the panel applies.
-            json(res, 200, { ok: true, plan, secret_mode_ok: secret.ok, warnings: plan.warnings });
+            json(res, 200, { ok: true, plan, secret_mode_ok: true, warnings: plan.warnings });
         }).catch(() => json(res, 400, { error: "bad request" }));
         return true;
     }