npm - @songsid/agend - Versions diffs - 2.1.5 → 2.1.6-beta.10 - Mend

@songsid/agend 2.1.5 → 2.1.6-beta.10

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (184) hide show

package/dist/agent-endpoint.d.ts +18 -0
package/dist/agent-endpoint.js +53 -2
package/dist/agent-endpoint.js.map +1 -1
package/dist/apply-job.d.ts +114 -0
package/dist/apply-job.js +214 -0
package/dist/apply-job.js.map +1 -0
package/dist/backend/claude-code.d.ts +25 -0
package/dist/backend/claude-code.js +127 -0
package/dist/backend/claude-code.js.map +1 -1
package/dist/backend/codex.d.ts +57 -0
package/dist/backend/codex.js +183 -0
package/dist/backend/codex.js.map +1 -1
package/dist/backend/credential-profile.d.ts +159 -0
package/dist/backend/credential-profile.js +340 -0
package/dist/backend/credential-profile.js.map +1 -0
package/dist/backend/factory.js +4 -1
package/dist/backend/factory.js.map +1 -1
package/dist/backend/kiro-auth-store.d.ts +25 -0
package/dist/backend/kiro-auth-store.js +61 -0
package/dist/backend/kiro-auth-store.js.map +1 -0
package/dist/backend/kiro.d.ts +8 -0
package/dist/backend/kiro.js +31 -2
package/dist/backend/kiro.js.map +1 -1
package/dist/backend/muse.d.ts +90 -0
package/dist/backend/muse.js +437 -0
package/dist/backend/muse.js.map +1 -0
package/dist/backend/types.d.ts +54 -0
package/dist/backend/types.js.map +1 -1
package/dist/channel/access-manager.d.ts +20 -0
package/dist/channel/access-manager.js +25 -0
package/dist/channel/access-manager.js.map +1 -1
package/dist/channel/adapters/discord.d.ts +17 -0
package/dist/channel/adapters/discord.js +72 -11
package/dist/channel/adapters/discord.js.map +1 -1
package/dist/channel/adapters/telegram.d.ts +6 -0
package/dist/channel/adapters/telegram.js +36 -0
package/dist/channel/adapters/telegram.js.map +1 -1
package/dist/channel/markdown-chunk.d.ts +8 -3
package/dist/channel/markdown-chunk.js +12 -3
package/dist/channel/markdown-chunk.js.map +1 -1
package/dist/channel/mcp-server.js +9 -12
package/dist/channel/mcp-server.js.map +1 -1
package/dist/channel/mcp-tools.d.ts +6 -2
package/dist/channel/mcp-tools.js +6 -36
package/dist/channel/mcp-tools.js.map +1 -1
package/dist/channel/tool-router.js +32 -3
package/dist/channel/tool-router.js.map +1 -1
package/dist/channel/types.d.ts +18 -0
package/dist/cli.js +113 -0
package/dist/cli.js.map +1 -1
package/dist/config-validator.js +45 -5
package/dist/config-validator.js.map +1 -1
package/dist/connection-secrets.d.ts +96 -0
package/dist/connection-secrets.js +25 -0
package/dist/connection-secrets.js.map +1 -0
package/dist/daemon.d.ts +76 -0
package/dist/daemon.js +489 -103
package/dist/daemon.js.map +1 -1
package/dist/event-log.d.ts +9 -0
package/dist/event-log.js +21 -0
package/dist/event-log.js.map +1 -1
package/dist/fleet-level-config.d.ts +42 -0
package/dist/fleet-level-config.js +78 -0
package/dist/fleet-level-config.js.map +1 -0
package/dist/fleet-lock.d.ts +21 -0
package/dist/fleet-lock.js +42 -8
package/dist/fleet-lock.js.map +1 -1
package/dist/fleet-manager.d.ts +425 -2
package/dist/fleet-manager.js +2055 -182
package/dist/fleet-manager.js.map +1 -1
package/dist/general-knowledge/skills/credential-profiles/SKILL.md +145 -0
package/dist/general-knowledge/skills/worker-collaboration/SKILL.md +11 -1
package/dist/instance-config-impact.d.ts +55 -0
package/dist/instance-config-impact.js +152 -0
package/dist/instance-config-impact.js.map +1 -0
package/dist/instance-lifecycle.js +8 -4
package/dist/instance-lifecycle.js.map +1 -1
package/dist/locale.js +24 -0
package/dist/locale.js.map +1 -1
package/dist/logger.js +42 -25
package/dist/logger.js.map +1 -1
package/dist/muse-usage-relay.d.ts +72 -0
package/dist/muse-usage-relay.js +419 -0
package/dist/muse-usage-relay.js.map +1 -0
package/dist/outbound-handlers.d.ts +5 -1
package/dist/outbound-handlers.js +199 -1
package/dist/outbound-handlers.js.map +1 -1
package/dist/outbound-schemas.d.ts +7 -5
package/dist/outbound-schemas.js +3 -2
package/dist/outbound-schemas.js.map +1 -1
package/dist/provider-probe.d.ts +48 -0
package/dist/provider-probe.js +121 -0
package/dist/provider-probe.js.map +1 -0
package/dist/provider-secret-registry.d.ts +98 -0
package/dist/provider-secret-registry.js +334 -0
package/dist/provider-secret-registry.js.map +1 -0
package/dist/quickstart-api.d.ts +164 -0
package/dist/quickstart-api.js +351 -0
package/dist/quickstart-api.js.map +1 -0
package/dist/quickstart.js +23 -50
package/dist/quickstart.js.map +1 -1
package/dist/scheduler/db.js +17 -5
package/dist/scheduler/db.js.map +1 -1
package/dist/scheduler/db.test.js +34 -1
package/dist/scheduler/db.test.js.map +1 -1
package/dist/scheduler/types.d.ts +4 -0
package/dist/scheduler/types.js.map +1 -1
package/dist/secret-store.d.ts +25 -0
package/dist/secret-store.js +165 -0
package/dist/secret-store.js.map +1 -0
package/dist/self-restart-limit.d.ts +21 -0
package/dist/self-restart-limit.js +129 -0
package/dist/self-restart-limit.js.map +1 -0
package/dist/settings-api.d.ts +116 -0
package/dist/settings-api.js +530 -5
package/dist/settings-api.js.map +1 -1
package/dist/setup-auth.d.ts +113 -0
package/dist/setup-auth.js +181 -0
package/dist/setup-auth.js.map +1 -0
package/dist/setup-form.d.ts +18 -0
package/dist/setup-form.js +315 -0
package/dist/setup-form.js.map +1 -0
package/dist/setup-host.d.ts +162 -0
package/dist/setup-host.js +496 -0
package/dist/setup-host.js.map +1 -0
package/dist/setup-marker.d.ts +8 -0
package/dist/setup-marker.js +39 -0
package/dist/setup-marker.js.map +1 -0
package/dist/setup-tunnel-consent.d.ts +53 -0
package/dist/setup-tunnel-consent.js +82 -0
package/dist/setup-tunnel-consent.js.map +1 -0
package/dist/setup-wizard.js +4 -0
package/dist/setup-wizard.js.map +1 -1
package/dist/steer-capability.js +4 -1
package/dist/steer-capability.js.map +1 -1
package/dist/tips.js +1 -1
package/dist/tips.js.map +1 -1
package/dist/tmux-manager.js +29 -4
package/dist/tmux-manager.js.map +1 -1
package/dist/tool-permissions-notice.d.ts +38 -0
package/dist/tool-permissions-notice.js +92 -0
package/dist/tool-permissions-notice.js.map +1 -0
package/dist/tool-permissions.d.ts +120 -0
package/dist/tool-permissions.js +277 -0
package/dist/tool-permissions.js.map +1 -0
package/dist/topic-commands.js +1 -0
package/dist/topic-commands.js.map +1 -1
package/dist/transcript-sources.d.ts +12 -1
package/dist/transcript-sources.js +19 -3
package/dist/transcript-sources.js.map +1 -1
package/dist/tunnel/cloudflared.d.ts +71 -0
package/dist/tunnel/cloudflared.js +447 -0
package/dist/tunnel/cloudflared.js.map +1 -0
package/dist/tunnel/lease.d.ts +75 -0
package/dist/tunnel/lease.js +209 -0
package/dist/tunnel/lease.js.map +1 -0
package/dist/tunnel/manager.d.ts +56 -0
package/dist/tunnel/manager.js +167 -0
package/dist/tunnel/manager.js.map +1 -0
package/dist/tunnel/types.d.ts +119 -0
package/dist/tunnel/types.js +33 -0
package/dist/tunnel/types.js.map +1 -0
package/dist/types.d.ts +2 -0
package/dist/ui/dashboard.html +4 -3
package/dist/ui/settings.html +808 -156
package/dist/ui/view.html +2 -2
package/dist/usage/i18n-keys.d.ts +1 -1
package/dist/usage/i18n-keys.js +1 -1
package/dist/usage/i18n-keys.js.map +1 -1
package/dist/usage/providers.d.ts +23 -14
package/dist/usage/providers.js +220 -58
package/dist/usage/providers.js.map +1 -1
package/dist/usage/usage-api.d.ts +13 -0
package/dist/usage/usage-api.js +69 -1
package/dist/usage/usage-api.js.map +1 -1
package/dist/web-api.js +8 -5
package/dist/web-api.js.map +1 -1
package/dist/web-auth.d.ts +75 -0
package/dist/web-auth.js +208 -2
package/dist/web-auth.js.map +1 -1
package/dist/web-terminal.d.ts +30 -1
package/dist/web-terminal.js +86 -3
package/dist/web-terminal.js.map +1 -1
package/package.json +2 -1

package/dist/setup-form.js ADDED Viewed

@@ -0,0 +1,315 @@
+/**
+ * The pre-fleet form, inline.
+ *
+ * Deliberately not `ui/settings.html`: that page is a panel for a running
+ * fleet — it starts and stops agents, applies jobs, restarts AgEnD. Serving it
+ * from a host that has none of those would be a page of controls that cannot
+ * work, and it would put the whole panel on a surface that exists before any
+ * fleet-level access control does.
+ */
+/**
+ * What an unauthenticated visitor gets: a box to type the code into.
+ *
+ * Deliberately says nothing about this machine — no backend list, no existing
+ * channels, no hostname. Whoever has the link has only the link, and until they
+ * prove they also have the code they learn nothing from it.
+ */
+export const SETUP_CODE_PAGE_HTML = `<!DOCTYPE html>
+<html lang="en">
+<head>
+<meta charset="utf-8">
+<meta name="viewport" content="width=device-width, initial-scale=1">
+<!-- Proof that a request reached THIS listener and not merely something that
+     answers 200. The tunnel's readiness probe looks for exactly this. It is the
+     sid, which is already in the URL, so it discloses nothing new. -->
+<meta name="agend-setup" content="__AGEND_SETUP_MARKER__">
+<title>Set up AgEnD</title>
+<style>
+  body { font-family: Inter, -apple-system, BlinkMacSystemFont, "Segoe UI", sans-serif; margin: 0; background: #ffffff; color: #111827; }
+  main { max-width: 420px; margin: 0 auto; padding: 64px 20px; }
+  h1 { font-size: 20px; margin: 0 0 8px; }
+  p { color: #6b7280; font-size: 13px; margin: 0 0 20px; }
+  input { width: 100%; padding: 12px; border: 1px solid #e5e7eb; border-radius: 6px; font-size: 20px; letter-spacing: 3px; text-align: center; text-transform: uppercase; box-sizing: border-box; }
+  button { width: 100%; margin-top: 12px; padding: 12px; border: 1px solid #2563eb; border-radius: 6px; background: #2563eb; color: #fff; font-size: 15px; cursor: pointer; }
+  button:disabled { opacity: .5; cursor: default; }
+  .err { color: #dc2626; font-size: 13px; margin-top: 12px; min-height: 18px; }
+</style>
+</head>
+<body>
+<main>
+  <h1>Set up AgEnD</h1>
+  <p>Enter the setup code shown in the terminal where you ran <code>agend setup</code>.</p>
+  <form id="f">
+    <input id="code" autocomplete="off" autocapitalize="characters" spellcheck="false" placeholder="ABCD-EFGH" maxlength="12" autofocus>
+    <button id="go" type="submit">Continue</button>
+  </form>
+  <div class="err" id="msg"></div>
+</main>
+<script>
+(() => {
+  "use strict";
+  const msg = document.getElementById("msg");
+  const go = document.getElementById("go");
+  document.getElementById("f").addEventListener("submit", async (event) => {
+    event.preventDefault();
+    go.disabled = true;
+    msg.textContent = "";
+    let res;
+    try {
+      res = await fetch("open", {
+        method: "POST",
+        headers: { "Content-Type": "application/json" },
+        body: JSON.stringify({ code: document.getElementById("code").value }),
+      });
+    } catch {
+      msg.textContent = "Could not reach the setup page.";
+      go.disabled = false;
+      return;
+    }
+    if (res.ok) { location.reload(); return; }
+    let body = null; try { body = await res.json(); } catch {}
+    msg.textContent = (body && body.error) || "That code was not accepted.";
+    // A spent budget ends the page; there is nothing useful left to type into.
+    if (res.status !== 410) go.disabled = false;
+  });
+})();
+</script>
+</body>
+</html>
+`;
+export const SETUP_FORM_HTML = `<!DOCTYPE html>
+<html lang="en">
+<head>
+<meta charset="utf-8">
+<meta name="viewport" content="width=device-width, initial-scale=1">
+<title>Set up AgEnD</title>
+<style>
+  * { box-sizing: border-box; }
+  body { font-family: Inter, -apple-system, BlinkMacSystemFont, "Segoe UI", sans-serif; margin: 0; background: #ffffff; color: #111827; }
+  main { max-width: 640px; margin: 0 auto; padding: 32px 20px 64px; }
+  h1 { font-size: 20px; margin: 0 0 4px; }
+  .sub { color: #6b7280; font-size: 13px; }
+  .step { border: 1px solid #e5e7eb; border-radius: 8px; padding: 16px; margin-top: 16px; }
+  .step h2 { font-size: 14px; margin: 0 0 12px; }
+  label { display: block; font-size: 13px; font-weight: 600; margin: 12px 0 4px; }
+  input, select { width: 100%; padding: 8px 10px; border: 1px solid #e5e7eb; border-radius: 6px; font-size: 14px; }
+  button { padding: 8px 14px; border: 1px solid #e5e7eb; border-radius: 6px; background: #fff; font-size: 14px; cursor: pointer; }
+  button.primary { background: #2563eb; color: #fff; border-color: #2563eb; }
+  button:disabled { opacity: .5; cursor: default; }
+  .row { display: flex; gap: 8px; align-items: center; margin-top: 12px; flex-wrap: wrap; }
+  .msg { font-size: 13px; }
+  .ok { color: #059669; } .err { color: #dc2626; }
+  pre { background: #f9fafb; border: 1px solid #e5e7eb; border-radius: 6px; padding: 12px; font-size: 12px; overflow: auto; }
+</style>
+</head>
+<body>
+<main>
+  <h1>Set up AgEnD</h1>
+  <div class="sub" id="intro">This page is open only while setup is running. It closes itself when you finish, or after 15 minutes.</div>
+  <div class="step">
+    <h2>1 · Agent</h2>
+    <label for="backend">Backend</label>
+    <select id="backend"></select>
+    <div class="sub" id="backendHint"></div>
+    <label for="dir">Working directory (absolute path)</label>
+    <input id="dir" placeholder="/home/you/projects/app">
+    <label for="name">First agent name</label>
+    <input id="name" value="agent-1">
+  </div>
+  <div class="step">
+    <h2>2 · Platform</h2>
+    <div class="row">
+      <button id="pickTelegram" class="primary">Telegram</button>
+      <button id="pickDiscord">Discord</button>
+    </div>
+    <div class="sub" id="platformHint">Create a bot with @BotFather, then add it to a group.</div>
+  </div>
+  <div class="step">
+    <h2>3 · Credentials</h2>
+    <label for="token">Bot token</label>
+    <input id="token" type="password" placeholder="123456:ABC-DEF…">
+    <div class="sub">Written to ~/.agend/.env and never shown again.</div>
+    <label for="tokenEnv">Environment variable</label>
+    <input id="tokenEnv" value="AGEND_BOT_TOKEN">
+    <div class="row"><button id="verify">Verify</button><span class="msg" id="verifyMsg"></span></div>
+    <div id="platformFields"></div>
+  </div>
+  <div class="step">
+    <h2>4 · Review and start</h2>
+    <div class="row"><button id="preview">Show what will be written</button></div>
+    <pre id="planOut" hidden></pre>
+    <div class="row"><button id="finish" class="primary" disabled>Create and start AgEnD</button><span class="msg" id="finishMsg"></span></div>
+  </div>
+</main>
+<script>
+(() => {
+  "use strict";
+  const $ = (id) => document.getElementById(id);
+  const state = { platform: "telegram", identity: null, guilds: [], offset: 0, plan: null };
+  // Relative to the page's own directory, which is /s/<sid>/. An absolute path
+  // would leave that namespace and 404 — the sid is where this page lives, not
+  // a prefix bolted on to it.
+  const api = async (path, opts) => {
+    const res = await fetch(path, Object.assign({ headers: { "Content-Type": "application/json" } }, opts || {}));
+    let body = null; try { body = await res.json(); } catch {}
+    return { ok: res.ok, status: res.status, body };
+  };
+  async function loadEnvironment() {
+    const res = await api("api/settings/quickstart/environment");
+    const backends = res.body?.backends || [];
+    $("backend").innerHTML = "";
+    for (const name of backends.length ? backends : ["claude-code"]) {
+      const opt = document.createElement("option"); opt.value = name; opt.textContent = name; $("backend").append(opt);
+    }
+    $("backendHint").textContent = backends.length
+      ? "Found on this host: " + backends.join(", ")
+      : "No backend CLI found on this host — install one first.";
+  }
+  function setPlatform(platform) {
+    state.platform = platform;
+    state.identity = null; $("verifyMsg").textContent = "";
+    $("pickTelegram").className = platform === "telegram" ? "primary" : "";
+    $("pickDiscord").className = platform === "discord" ? "primary" : "";
+    $("platformHint").textContent = platform === "telegram"
+      ? "Create a bot with @BotFather, then add it to a group."
+      : "Create an application in the Discord developer portal and invite the bot to your server.";
+    renderPlatformFields();
+  }
+  // Only the ids that platform has — the same question the CLI asks.
+  function renderPlatformFields() {
+    const host = $("platformFields"); host.innerHTML = "";
+    const field = (id, labelText, hint) => {
+      const label = document.createElement("label"); label.textContent = labelText; label.htmlFor = id;
+      const input = document.createElement("input"); input.id = id;
+      host.append(label, input);
+      if (hint) { const h = document.createElement("div"); h.className = "sub"; h.textContent = hint; host.append(h); }
+      return input;
+    };
+    if (state.platform === "discord") {
+      const guild = document.createElement("select"); guild.id = "guild";
+      const label = document.createElement("label"); label.textContent = "Server (guild)"; label.htmlFor = "guild";
+      host.append(label, guild);
+      for (const g of state.guilds) { const opt = document.createElement("option"); opt.value = g.id; opt.textContent = g.name + " (" + g.id + ")"; guild.append(opt); }
+      field("general", "General channel id");
+      field("admin", "Your Discord user id", "Becomes the first allowed user.");
+    } else {
+      field("group", "Group id", "Or post any message in the group and press Detect.");
+      const row = document.createElement("div"); row.className = "row";
+      const detect = document.createElement("button"); detect.textContent = "Detect from a message";
+      detect.onclick = detectGroup; row.append(detect);
+      const msg = document.createElement("span"); msg.className = "msg"; msg.id = "detectMsg"; row.append(msg);
+      host.append(row);
+      field("admin", "Your Telegram user id", "Becomes the first allowed user.");
+    }
+  }
+  async function detectGroup() {
+    $("detectMsg").textContent = "Waiting for a message in the group…";
+    const res = await api("api/settings/quickstart/probe", { method: "POST", body: JSON.stringify({ action: "await-telegram-start", token: $("token").value.trim(), offset: state.offset }) });
+    if (!res.ok) { $("detectMsg").textContent = res.body?.error || "Failed."; return; }
+    state.offset = res.body.offset;
+    if (res.body.found) {
+      $("group").value = String(res.body.found.groupId);
+      $("admin").value = String(res.body.found.userId);
+      $("detectMsg").textContent = "Found.";
+    } else $("detectMsg").textContent = "No group message yet — post one and press Detect again.";
+  }
+  function input() {
+    return {
+      platform: state.platform,
+      token_env: $("tokenEnv").value.trim(),
+      backend: $("backend").value,
+      working_directory: $("dir").value.trim(),
+      instance_name: $("name").value.trim(),
+      group_id: $("group") ? $("group").value.trim() || undefined : undefined,
+      guild_id: $("guild") ? $("guild").value || undefined : undefined,
+      general_channel_id: $("general") ? $("general").value.trim() || undefined : undefined,
+      admin_user_id: $("admin") ? $("admin").value.trim() || undefined : undefined,
+    };
+  }
+  $("verify").onclick = async () => {
+    $("verifyMsg").textContent = "Asking the provider…";
+    const token = $("token").value.trim();
+    const res = await api("api/settings/quickstart/probe", { method: "POST", body: JSON.stringify({ action: "verify", platform: state.platform, token }) });
+    state.identity = res.body?.identity || { valid: false };
+    $("verifyMsg").className = "msg " + (state.identity.valid ? "ok" : "err");
+    $("verifyMsg").textContent = state.identity.valid ? "✓ " + (state.identity.username || "verified") : "✗ " + (state.identity.reason || "rejected");
+    if (state.identity.valid && state.platform === "discord") {
+      const guilds = await api("api/settings/quickstart/probe", { method: "POST", body: JSON.stringify({ action: "guilds", token }) });
+      state.guilds = guilds.body?.guilds || [];
+      renderPlatformFields();
+    }
+  };
+  $("preview").onclick = async () => {
+    const res = await api("api/settings/quickstart/plan", { method: "POST", body: JSON.stringify(input()) });
+    if (!res.ok) { $("planOut").hidden = false; $("planOut").textContent = res.body?.error || "Failed."; return; }
+    state.plan = res.body;
+    $("planOut").hidden = false;
+    $("planOut").textContent = JSON.stringify(res.body, null, 2);
+    $("finish").disabled = !state.identity?.valid;
+  };
+  $("finish").onclick = async () => {
+    $("finish").disabled = true;
+    $("finishMsg").textContent = "Writing configuration…";
+    const commit = await api("api/settings/quickstart/commit", { method: "POST", body: JSON.stringify(Object.assign({}, input(), { token: $("token").value.trim() })) });
+    if (!commit.ok) { $("finishMsg").className = "msg err"; $("finishMsg").textContent = commit.body?.error || "Failed."; $("finish").disabled = false; return; }
+    const finished = await api("setup/finish", { method: "POST" });
+    $("finishMsg").className = "msg";
+    if (finished.body && finished.body.watch === false) {
+      // Behind a tunnel this page and its hostname are both about to stop
+      // existing, so there is nothing here to watch. And the dashboard is not
+      // the thing to promise: it binds loopback, so a link to it is one this
+      // phone cannot open. The channel is what was just set up, and it is
+      // where the agent will be.
+      $("finishMsg").className = "msg ok";
+      $("finishMsg").textContent = "AgEnD is starting. Talk to it in the channel you just set up — this page is done.";
+      return;
+    }
+    $("finishMsg").textContent = "Starting AgEnD… this page will stop responding while the port changes hands.";
+    waitForFleet();
+  };
+  // The host is gone; the fleet is binding the same port. Connection refused is
+  // the expected state in between, so it is not an error until the cap.
+  function waitForFleet() {
+    const deadline = Date.now() + 60_000;
+    const tick = async () => {
+      try {
+        const res = await fetch("/health", { cache: "no-store" });
+        if (res.status) {
+          $("finishMsg").className = "msg ok";
+          $("finishMsg").textContent = "AgEnD is up. Talk to it in the channel you just set up.";
+          return;
+        }
+      } catch { /* not listening yet */ }
+      if (Date.now() > deadline) {
+        $("finishMsg").className = "msg err";
+        $("finishMsg").textContent = "AgEnD has not come up within 60 seconds. Run \`agend start\` on the machine itself and check fleet.log — this page cannot tell you any more.";
+        return;
+      }
+      setTimeout(tick, 1000);
+    };
+    setTimeout(tick, 1500);
+  }
+  $("pickTelegram").onclick = () => setPlatform("telegram");
+  $("pickDiscord").onclick = () => setPlatform("discord");
+  loadEnvironment();
+  setPlatform("telegram");
+})();
+</script>
+</body>
+</html>
+`;
+//# sourceMappingURL=setup-form.js.map

package/dist/setup-form.js.map ADDED Viewed

@@ -0,0 +1 @@

+ {"version":3,"file":"setup-form.js","sourceRoot":"","sources":["../src/setup-form.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA8DnC,CAAC;AAEF,MAAM,CAAC,MAAM,eAAe,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA0O9B,CAAC"}

package/dist/setup-host.d.ts ADDED Viewed

@@ -0,0 +1,162 @@
+import { type FleetLockProbe } from "./fleet-lock.js";
+import { SetupCredentials } from "./setup-auth.js";
+import type { TunnelProvider } from "./tunnel/types.js";
+/** How long the form may stay open at all. */
+export declare const SETUP_HOST_TTL_MS: number;
+/**
+ * …and how long it may stay open with nobody touching it.
+ *
+ * Strictly shorter than the TTL, which it was not: both were fifteen minutes,
+ * so the idle timer could never fire first and the page always stayed open for
+ * the full quarter hour whether anyone was using it or not.
+ */
+export declare const SETUP_HOST_IDLE_MS: number;
+export interface SetupHostOptions {
+    dataDir: string;
+    configPath: string;
+    port: number;
+    ttlMs?: number;
+    idleMs?: number;
+    /** Injected so a test can observe the handover without starting a fleet. */
+    spawnFleet?: () => void;
+    now?: () => number;
+    log?: (message: string) => void;
+    /** Test seam: the same probe `acquireFleetLock` already accepts. */
+    lockProbe?: FleetLockProbe;
+    /** Fixed in tests so the URL and the code are predictable. */
+    credentials?: SetupCredentials;
+    /**
+     * Expose the page through a tunnel.
+     *
+     * Turning this on forces the listener onto an ephemeral port — see
+     * `resolvePort`. That is not a convenience; it is the reason a tunnel that
+     * outlives this process cannot end up pointed at a fleet dashboard.
+     */
+    tunnel?: boolean;
+    /** Test seam: the real one runs cloudflared. */
+    tunnelProvider?: TunnelProvider;
+}
+/**
+ * The port a setup host may bind.
+ *
+ * In tunnel mode it is always zero. Not "unless `--port` was given", and not
+ * "unless fleet.yaml names a health port" — those are the two ways a fixed
+ * port creeps back behind a tunnel, and the second one needs no flag at all.
+ * Whatever the fleet would later bind must never be the thing the tunnel is
+ * pointed at.
+ */
+export declare function resolvePort(opts: {
+    tunnel?: boolean;
+    port?: number;
+    healthPort?: number;
+}): number;
+export declare class SetupHost {
+    private readonly opts;
+    private server;
+    private lock;
+    private ttlTimer;
+    private idleTimer;
+    private stopping;
+    private readonly credentials;
+    /** Where this page lives. Random, and not a credential — see setup-auth.ts. */
+    readonly sid: string;
+    /** What the person types. Printed by the CLI; never put in a URL. */
+    readonly code: string;
+    constructor(opts: SetupHostOptions);
+    /** The page's own path. Everything outside it is not this page. */
+    private get basePath();
+    private managedTunnel;
+    private tunnelHandle;
+    /** The exact host the tunnel answers on; nothing else is added to the set. */
+    private externalHost;
+    private tunnelStopResult;
+    /**
+     * Set when the wizard asked to hand over, so a shutdown that started for
+     * another reason still completes it.
+     *
+     * Without this the tunnel dying in the moment between "finish" answering and
+     * the handover beginning would take the `stopping` flag first, and the
+     * handover would silently return: configuration written, page saying
+     * "starting", and no fleet.
+     */
+    private handoverRequested;
+    private get ttlMs();
+    private get idleMs();
+    private log;
+    /** The config the wizard edits: a file if there is one, otherwise a blank. */
+    private readConfig;
+    private context;
+    start(): Promise<{
+        port: number;
+        sid: string;
+        code: string;
+        path: string;
+        publicUrl: string | null;
+    }>;
+    /**
+     * Put the page behind a tunnel, or say why it is not.
+     *
+     * Three outcomes, and the third is the one that matters: a start that failed
+     * while leaving a process it could not account for is not a fallback, it is a
+     * stop. Carrying on would mean serving this page on loopback while something
+     * we cannot see may still be exposing it.
+     */
+    private openTunnel;
+    private boundPort;
+    /**
+     * The hosts this listener will answer to.
+     *
+     * Origin==Host alone accepts any Host at all, which was harmless while the
+     * only way in was loopback. It stops being harmless the moment something in
+     * front of the listener can set it, so the set is named rather than inferred.
+     */
+    private allowedHosts;
+    /**
+     * Whether the browser reached this over TLS.
+     *
+     * Derived from what this process knows it is serving, never from
+     * `X-Forwarded-Proto`: that header is set by whatever is in front, including
+     * an attacker, and a cookie's Secure attribute is not something to take on
+     * trust from a request.
+     */
+    private get endpointIsHttps();
+    private touch;
+    /**
+     * The answer for anything that is not this page.
+     *
+     * Byte-identical whatever the reason, because the difference between "wrong
+     * sid" and "no such path" is precisely how a sid gets found.
+     */
+    private notFound;
+    private deny;
+    private hostAllowed;
+    private presentedCookie;
+    /** Spend an attempt's worth of consequence: at zero the page is over. */
+    private afterFailure;
+    private handle;
+    /** Exchange the typed code for a session cookie. The only way in. */
+    private redeem;
+    /**
+     * Let go of the port, then hand it over.
+     *
+     * `closeAllConnections()` first, and not as a nicety: a browser polling for
+     * the fleet holds a connection open, and `close()` waits for it. Measured, a
+     * single open poll stops the close from ever completing — so the form would
+     * hang at "starting…" and the fleet would never be spawned.
+     */
+    shutdown(spawnSuccessor: boolean, reason: string): Promise<void>;
+    /**
+     * Whether an unconfirmed tunnel may be left behind while the fleet starts.
+     *
+     * Ruled on by fable, and conditional by construction. The reasoning only
+     * holds because a leftover tunnel points at an ephemeral port this process
+     * owned and nothing will deliberately bind again — so the damage of being
+     * wrong is a URL that answers "unavailable", not a public dashboard.
+     *
+     * **If anyone puts this host back on the health port, this ruling is void**
+     * and the path must return to refusing the handover. That is the first
+     * condition below rather than a note in a comment, precisely so the change
+     * that breaks the reasoning also flips the behaviour.
+     */
+    private mayHandOverWithUnconfirmedTunnel;
+}