@studiometa/trafic-agent 0.1.7 → 0.1.9

package/dist/server-CHT47EXr.js

@@ -1,618 +0,0 @@
-import { createServer } from "node:http";
-import { existsSync, watch, readFileSync } from "node:fs";
-import { join, dirname, resolve } from "node:path";
-import { fileURLToPath } from "node:url";
-import { execSync } from "node:child_process";
-import Database from "better-sqlite3";
-function matchIp(ip, pattern) {
-  if (ip === pattern) return true;
-  if (pattern.includes("/")) {
-    return matchCidr(ip, pattern);
-  }
-  if (pattern.includes("*")) {
-    const regex = new RegExp(
-      "^" + pattern.replace(/\./g, "\\.").replace(/\*/g, ".*") + "$"
-    );
-    return regex.test(ip);
-  }
-  return false;
-}
-function matchCidr(ip, cidr) {
-  const [range, bits] = cidr.split("/");
-  const mask = parseInt(bits, 10);
-  const ipNum = ipToNumber(ip);
-  const rangeNum = ipToNumber(range);
-  if (ipNum === null || rangeNum === null) return false;
-  const maskNum = ~((1 << 32 - mask) - 1);
-  return (ipNum & maskNum) === (rangeNum & maskNum);
-}
-function ipToNumber(ip) {
-  const parts = ip.split(".");
-  if (parts.length !== 4) return null;
-  let num = 0;
-  for (const part of parts) {
-    const n = parseInt(part, 10);
-    if (isNaN(n) || n < 0 || n > 255) return null;
-    num = num << 8 | n;
-  }
-  return num >>> 0;
-}
-function matchHostname(hostname, pattern) {
-  if (hostname === pattern) return true;
-  const regex = new RegExp(
-    "^" + pattern.replace(/[.+^${}()|[\]\\]/g, "\\$&").replace(/\*/g, ".*").replace(/\?/g, ".") + "$"
-  );
-  return regex.test(hostname);
-}
-function parseBasicAuth(header) {
-  if (!header.startsWith("Basic ")) return null;
-  try {
-    const encoded = header.slice(6);
-    const decoded = Buffer.from(encoded, "base64").toString("utf-8");
-    const colonIndex = decoded.indexOf(":");
-    if (colonIndex === -1) return null;
-    return {
-      username: decoded.slice(0, colonIndex),
-      password: decoded.slice(colonIndex + 1)
-    };
-  } catch {
-    return null;
-  }
-}
-function parseBearerToken(header) {
-  if (!header.startsWith("Bearer ")) return null;
-  return header.slice(7);
-}
-function checkAuth(request, config2) {
-  const { hostname, ip, authorization } = request;
-  const realIp = request.forwardedFor?.split(",")[0].trim() ?? ip;
-  for (const pattern of config2.allowedIps) {
-    if (matchIp(realIp, pattern)) {
-      return { allowed: true, reason: "ip" };
-    }
-  }
-  for (const rule of config2.rules) {
-    if (matchHostname(hostname, rule.match)) {
-      return checkRule(rule, realIp, authorization, config2);
-    }
-  }
-  return applyDefaultPolicy(config2, realIp, authorization);
-}
-function checkRule(rule, ip, authorization, config2) {
-  if (rule.allowedIps) {
-    for (const pattern of rule.allowedIps) {
-      if (matchIp(ip, pattern)) {
-        return { allowed: true, reason: "rule" };
-      }
-    }
-  }
-  switch (rule.policy) {
-    case "allow":
-      return { allowed: true, reason: "rule" };
-    case "deny":
-      return { allowed: false, reason: "rule" };
-    case "token": {
-      if (!authorization) return { allowed: false, reason: "rule" };
-      const token = parseBearerToken(authorization);
-      const tokens = rule.tokens ?? config2.tokens;
-      if (token && tokens.includes(token)) {
-        return { allowed: true, reason: "token" };
-      }
-      return { allowed: false, reason: "rule" };
-    }
-    case "basic": {
-      if (!authorization) return { allowed: false, reason: "rule" };
-      const creds = parseBasicAuth(authorization);
-      if (creds) {
-        const credString = `${creds.username}:${creds.password}`;
-        if (config2.basicAuth.includes(credString)) {
-          return { allowed: true, reason: "basic" };
-        }
-      }
-      return { allowed: false, reason: "rule" };
-    }
-    default:
-      return { allowed: false, reason: "rule" };
-  }
-}
-function applyDefaultPolicy(config2, ip, authorization) {
-  switch (config2.defaultPolicy) {
-    case "allow":
-      return { allowed: true, reason: "default" };
-    case "deny":
-      return { allowed: false, reason: "default" };
-    case "basic": {
-      if (!authorization) return { allowed: false, reason: "default" };
-      const creds = parseBasicAuth(authorization);
-      if (creds) {
-        const credString = `${creds.username}:${creds.password}`;
-        if (config2.basicAuth.includes(credString)) {
-          return { allowed: true, reason: "basic" };
-        }
-      }
-      const token = parseBearerToken(authorization);
-      if (token && config2.tokens.includes(token)) {
-        return { allowed: true, reason: "token" };
-      }
-      return { allowed: false, reason: "default" };
-    }
-    case "token": {
-      if (!authorization) return { allowed: false, reason: "default" };
-      const token = parseBearerToken(authorization);
-      if (token && config2.tokens.includes(token)) {
-        return { allowed: true, reason: "token" };
-      }
-      return { allowed: false, reason: "default" };
-    }
-    default:
-      return { allowed: false, reason: "default" };
-  }
-}
-function parseSimpleYaml$1(content) {
-  const result = {};
-  const lines = content.split("\n");
-  for (const line of lines) {
-    const trimmed = line.trim();
-    if (!trimmed || trimmed.startsWith("#")) continue;
-    const colonIndex = trimmed.indexOf(":");
-    if (colonIndex === -1) continue;
-    const key = trimmed.slice(0, colonIndex).trim();
-    let value = trimmed.slice(colonIndex + 1).trim();
-    if (value.startsWith('"') && value.endsWith('"') || value.startsWith("'") && value.endsWith("'")) {
-      value = value.slice(1, -1);
-    }
-    result[key] = value;
-  }
-  return result;
-}
-function loadProjectList(projectListPath) {
-  if (!existsSync(projectListPath)) {
-    return /* @__PURE__ */ new Map();
-  }
-  const content = readFileSync(projectListPath, "utf-8");
-  const parsed = parseSimpleYaml$1(content);
-  return new Map(Object.entries(parsed));
-}
-function buildHostnameIndex(projects, tld) {
-  const index = /* @__PURE__ */ new Map();
-  for (const [name] of projects) {
-    index.set(`${name}.${tld}`, name);
-  }
-  return index;
-}
-function getProjectFromHostname(hostname, index) {
-  return index.get(hostname);
-}
-function watchProjectList(projectListPath, onChange) {
-  if (!existsSync(projectListPath)) {
-    console.warn(`Project list not found: ${projectListPath}`);
-    return;
-  }
-  watch(projectListPath, (eventType) => {
-    if (eventType === "change") {
-      onChange();
-    }
-  });
-}
-function getProjectInfo(name) {
-  try {
-    const output = execSync(`ddev describe ${name} -j`, {
-      encoding: "utf-8",
-      timeout: 1e4
-    });
-    const data = JSON.parse(output);
-    if (!data.raw) return void 0;
-    const raw = data.raw;
-    return {
-      name: raw.name,
-      status: raw.status,
-      appRoot: raw.approot,
-      httpURLs: raw.httpURLs ?? [],
-      httpsURLs: raw.httpsURLs ?? [],
-      type: raw.type,
-      phpVersion: raw.php_version,
-      dbType: raw.dbinfo?.dbType
-    };
-  } catch {
-    return void 0;
-  }
-}
-function startProject(name) {
-  try {
-    execSync(`ddev start ${name}`, {
-      encoding: "utf-8",
-      timeout: 12e4,
-      // 2 minutes
-      stdio: "pipe"
-    });
-    return true;
-  } catch (error) {
-    console.error(`Failed to start project ${name}:`, error);
-    return false;
-  }
-}
-function stopProject(name) {
-  try {
-    execSync(`ddev stop ${name}`, {
-      encoding: "utf-8",
-      timeout: 6e4,
-      // 1 minute
-      stdio: "pipe"
-    });
-    return true;
-  } catch (error) {
-    console.error(`Failed to stop project ${name}:`, error);
-    return false;
-  }
-}
-function listProjects() {
-  try {
-    const output = execSync("ddev list -j", {
-      encoding: "utf-8",
-      timeout: 3e4
-    });
-    const data = JSON.parse(output);
-    if (!Array.isArray(data)) return [];
-    return data.map((p) => ({
-      name: p.name,
-      status: p.status,
-      appRoot: p.approot,
-      httpURLs: p.httpURLs ?? [],
-      httpsURLs: p.httpsURLs ?? [],
-      type: p.type
-    }));
-  } catch {
-    return [];
-  }
-}
-let db = null;
-function initDb(dbPath) {
-  db = new Database(dbPath);
-  db.pragma("journal_mode = WAL");
-  db.exec(`
-    CREATE TABLE IF NOT EXISTS projects (
-      name TEXT PRIMARY KEY,
-      last_access INTEGER NOT NULL,
-      status TEXT NOT NULL DEFAULT 'stopped'
-    );
-
-    CREATE TABLE IF NOT EXISTS access_logs (
-      id INTEGER PRIMARY KEY AUTOINCREMENT,
-      project TEXT NOT NULL,
-      timestamp INTEGER NOT NULL,
-      ip TEXT NOT NULL,
-      user_agent TEXT NOT NULL,
-      path TEXT NOT NULL
-    );
-
-    CREATE INDEX IF NOT EXISTS idx_access_logs_project ON access_logs(project);
-    CREATE INDEX IF NOT EXISTS idx_access_logs_timestamp ON access_logs(timestamp);
-  `);
-  return db;
-}
-function getDb() {
-  if (!db) {
-    throw new Error("Database not initialized. Call initDb first.");
-  }
-  return db;
-}
-function closeDb() {
-  if (db) {
-    db.close();
-    db = null;
-  }
-}
-function updateProjectAccess(name) {
-  const database = getDb();
-  const stmt = database.prepare(`
-    INSERT INTO projects (name, last_access, status)
-    VALUES (?, ?, 'running')
-    ON CONFLICT(name) DO UPDATE SET last_access = excluded.last_access
-  `);
-  stmt.run(name, Date.now());
-}
-function getProject(name) {
-  const database = getDb();
-  const stmt = database.prepare(
-    "SELECT name, last_access as lastAccess, status FROM projects WHERE name = ?"
-  );
-  return stmt.get(name);
-}
-function setProjectStatus(name, status) {
-  const database = getDb();
-  const stmt = database.prepare(`
-    INSERT INTO projects (name, last_access, status)
-    VALUES (?, ?, ?)
-    ON CONFLICT(name) DO UPDATE SET status = excluded.status
-  `);
-  stmt.run(name, Date.now(), status);
-}
-function getIdleProjects(thresholdMs) {
-  const database = getDb();
-  const cutoff = Date.now() - thresholdMs;
-  const stmt = database.prepare(`
-    SELECT name, last_access as lastAccess, status
-    FROM projects
-    WHERE last_access < ? AND status = 'running'
-  `);
-  return stmt.all(cutoff);
-}
-function logAccess(log) {
-  const database = getDb();
-  const stmt = database.prepare(`
-    INSERT INTO access_logs (project, timestamp, ip, user_agent, path)
-    VALUES (?, ?, ?, ?, ?)
-  `);
-  stmt.run(log.project, log.timestamp, log.ip, log.userAgent, log.path);
-}
-function getAccessLogs(project, limit = 100) {
-  const database = getDb();
-  const stmt = database.prepare(`
-    SELECT id, project, timestamp, ip, user_agent as userAgent, path
-    FROM access_logs
-    WHERE project = ?
-    ORDER BY timestamp DESC
-    LIMIT ?
-  `);
-  return stmt.all(project, limit);
-}
-function cleanOldLogs(days) {
-  const database = getDb();
-  const cutoff = Date.now() - days * 24 * 60 * 60 * 1e3;
-  const stmt = database.prepare("DELETE FROM access_logs WHERE timestamp < ?");
-  const result = stmt.run(cutoff);
-  return result.changes;
-}
-function parseSimpleYaml(content) {
-  const result = {};
-  const lines = content.split("\n");
-  for (const line of lines) {
-    const trimmed = line.trim();
-    if (!trimmed || trimmed.startsWith("#")) continue;
-    const colonIndex = trimmed.indexOf(":");
-    if (colonIndex === -1) continue;
-    const key = trimmed.slice(0, colonIndex).trim();
-    let value = trimmed.slice(colonIndex + 1).trim();
-    if (value.startsWith('"') && value.endsWith('"') || value.startsWith("'") && value.endsWith("'")) {
-      value = value.slice(1, -1);
-    }
-    result[key] = value;
-  }
-  return result;
-}
-function loadProjectConfig(projectDir) {
-  const configPath = join(projectDir, ".ddev", "config.trafic.yaml");
-  if (!existsSync(configPath)) {
-    return {};
-  }
-  try {
-    const content = readFileSync(configPath, "utf-8");
-    const parsed = parseSimpleYaml(content);
-    const config2 = {};
-    if (parsed.auth_policy) {
-      const policy = parsed.auth_policy.toLowerCase();
-      if (["allow", "deny", "basic", "token"].includes(policy)) {
-        config2.auth_policy = policy;
-      }
-    }
-    if (parsed.idle_timeout) {
-      config2.idle_timeout = parsed.idle_timeout;
-    }
-    return config2;
-  } catch (error) {
-    console.warn(`Failed to load project config from ${configPath}:`, error);
-    return {};
-  }
-}
-function shouldNeverStop(config2) {
-  return config2.idle_timeout?.toLowerCase() === "never";
-}
-function getIdleTimeoutMs(config2) {
-  if (!config2.idle_timeout) return void 0;
-  if (shouldNeverStop(config2)) return void 0;
-  const regex = /(?:(\d+)h)?(?:(\d+)m)?(?:(\d+)s)?/;
-  const match = config2.idle_timeout.match(regex);
-  if (!match) return void 0;
-  const hours = parseInt(match[1] ?? "0", 10);
-  const minutes = parseInt(match[2] ?? "0", 10);
-  const seconds = parseInt(match[3] ?? "0", 10);
-  const ms = (hours * 3600 + minutes * 60 + seconds) * 1e3;
-  return ms > 0 ? ms : void 0;
-}
-const __dirname$1 = dirname(fileURLToPath(import.meta.url));
-let config;
-let projectList;
-let hostnameIndex;
-const projectConfigs = /* @__PURE__ */ new Map();
-function loadTemplate(name) {
-  const templatePath = resolve(__dirname$1, "..", "templates", `${name}.html`);
-  try {
-    return readFileSync(templatePath, "utf-8");
-  } catch {
-    return `<html><body><h1>${name}</h1></body></html>`;
-  }
-}
-function getEffectiveAuthConfig(projectName) {
-  if (!projectName) return config.auth;
-  const projectConfig = projectConfigs.get(projectName);
-  if (!projectConfig?.auth_policy) return config.auth;
-  return {
-    ...config.auth,
-    defaultPolicy: projectConfig.auth_policy
-  };
-}
-function handleAuth(req, res) {
-  const hostname = req.headers["x-forwarded-host"] ?? "";
-  const ip = req.headers["x-forwarded-for"] ?? req.socket.remoteAddress ?? "";
-  const authorization = req.headers["authorization"];
-  const path = req.headers["x-forwarded-uri"] ?? "/";
-  const projectName = hostnameIndex.get(hostname);
-  const authConfig = getEffectiveAuthConfig(projectName);
-  const result = checkAuth(
-    {
-      hostname,
-      ip: ip.split(",")[0].trim(),
-      authorization,
-      forwardedFor: ip
-    },
-    authConfig
-  );
-  if (result.allowed) {
-    if (projectName) {
-      updateProjectAccess(projectName);
-      logAccess({
-        project: projectName,
-        timestamp: Date.now(),
-        ip: ip.split(",")[0].trim(),
-        userAgent: req.headers["user-agent"] ?? "",
-        path
-      });
-    }
-    res.writeHead(200);
-    res.end();
-  } else {
-    res.writeHead(401, {
-      "WWW-Authenticate": 'Basic realm="Trafic"'
-    });
-    res.end("Unauthorized");
-  }
-}
-async function handleErrors(req, res) {
-  const hostname = req.headers["x-forwarded-host"] ?? req.headers.host ?? "";
-  const projectName = hostnameIndex.get(hostname);
-  if (!projectName) {
-    const template2 = loadTemplate("error");
-    res.writeHead(404, { "Content-Type": "text/html" });
-    res.end(template2.replace("{{message}}", "Project not found"));
-    return;
-  }
-  const record = getProject(projectName);
-  if (record?.status === "starting") {
-    const template2 = loadTemplate("wait");
-    res.writeHead(503, {
-      "Content-Type": "text/html",
-      "Retry-After": "5"
-    });
-    res.end(
-      template2.replace(/\{\{project\}\}/g, projectName).replace(/\{\{hostname\}\}/g, hostname)
-    );
-    return;
-  }
-  setProjectStatus(projectName, "starting");
-  const template = loadTemplate("wait");
-  res.writeHead(503, {
-    "Content-Type": "text/html",
-    "Retry-After": "5"
-  });
-  res.end(
-    template.replace(/\{\{project\}\}/g, projectName).replace(/\{\{hostname\}\}/g, hostname)
-  );
-  setTimeout(() => {
-    const success = startProject(projectName);
-    setProjectStatus(projectName, success ? "running" : "stopped");
-  }, 100);
-}
-function handleStatus(req, res) {
-  const url = new URL(req.url ?? "/", `http://${req.headers.host}`);
-  const projectName = url.searchParams.get("project");
-  if (!projectName) {
-    res.writeHead(400, { "Content-Type": "application/json" });
-    res.end(JSON.stringify({ error: "Missing project parameter" }));
-    return;
-  }
-  const info = getProjectInfo(projectName);
-  const record = getProject(projectName);
-  res.writeHead(200, { "Content-Type": "application/json" });
-  res.end(
-    JSON.stringify({
-      name: projectName,
-      status: info?.status ?? record?.status ?? "unknown",
-      ready: info?.status === "running"
-    })
-  );
-}
-async function handleRequest(req, res) {
-  const url = req.url ?? "/";
-  try {
-    if (url === "/__auth__" || url.startsWith("/__auth__/")) {
-      handleAuth(req, res);
-    } else if (url === "/__status__" || url.startsWith("/__status__/")) {
-      handleStatus(req, res);
-    } else if (url === "/__health__") {
-      res.writeHead(200, { "Content-Type": "application/json" });
-      res.end(JSON.stringify({ status: "ok", version: "__VERSION__" }));
-    } else {
-      await handleErrors(req, res);
-    }
-  } catch (error) {
-    console.error("Request error:", error);
-    res.writeHead(500, { "Content-Type": "text/plain" });
-    res.end("Internal Server Error");
-  }
-}
-function reloadProjects() {
-  projectList = loadProjectList(config.projectListPath);
-  hostnameIndex = buildHostnameIndex(projectList, config.tld);
-  projectConfigs.clear();
-  for (const [name, projectDir] of projectList) {
-    const projectConfig = loadProjectConfig(projectDir);
-    if (projectConfig.auth_policy || projectConfig.idle_timeout) {
-      projectConfigs.set(name, projectConfig);
-      console.log(`  ${name}: auth=${projectConfig.auth_policy ?? "default"}, idle=${projectConfig.idle_timeout ?? "default"}`);
-    }
-  }
-  console.log(`Loaded ${projectList.size} projects (${projectConfigs.size} with custom config)`);
-}
-function startServer(agentConfig) {
-  config = agentConfig;
-  initDb(config.dbPath);
-  reloadProjects();
-  watchProjectList(config.projectListPath, () => {
-    console.log("Project list changed, reloading...");
-    reloadProjects();
-  });
-  const server = createServer((req, res) => {
-    handleRequest(req, res).catch((error) => {
-      console.error("Unhandled error:", error);
-      if (!res.headersSent) {
-        res.writeHead(500);
-        res.end("Internal Server Error");
-      }
-    });
-  });
-  server.listen(config.port, () => {
-    console.log(`Trafic agent listening on port ${config.port}`);
-    console.log(`TLD: ${config.tld}`);
-    console.log(`Projects: ${projectList.size}`);
-  });
-}
-export {
-  watchProjectList as A,
-  cleanOldLogs as a,
-  buildHostnameIndex as b,
-  checkAuth as c,
-  closeDb as d,
-  getDb as e,
-  getIdleProjects as f,
-  getAccessLogs as g,
-  getIdleTimeoutMs as h,
-  getProject as i,
-  getProjectFromHostname as j,
-  getProjectInfo as k,
-  initDb as l,
-  listProjects as m,
-  loadProjectConfig as n,
-  loadProjectList as o,
-  logAccess as p,
-  matchHostname as q,
-  matchIp as r,
-  parseBasicAuth as s,
-  parseBearerToken as t,
-  setProjectStatus as u,
-  shouldNeverStop as v,
-  startProject as w,
-  startServer as x,
-  stopProject as y,
-  updateProjectAccess as z
-};
-//# sourceMappingURL=server-CHT47EXr.js.map