@thingd/cli 0.70.0 → 0.72.0

package/dist/mcp/cluster.js

@@ -1,304 +0,0 @@
-import { parseBooleanFlag, parsePort } from "./config.js";
-const DEFAULT_CLUSTER_PORT = 8757;
-export function readClusterOptionsFromEnv(env) {
-    return {
-        mode: parseClusterMode(env.THINGD_CLUSTER_MODE),
-        advertiseUrl: env.THINGD_ADVERTISE_URL,
-        leaderUrl: env.THINGD_CLUSTER_LEADER_URL,
-        fallbackLeaderUrl: env.THINGD_CLUSTER_LEADER_FALLBACK_URL,
-        peers: parsePeers(env.THINGD_CLUSTER_PEERS),
-        discovery: parseClusterDiscovery(env.THINGD_CLUSTER_DISCOVERY),
-        service: env.THINGD_CLUSTER_SERVICE,
-        namespace: env.THINGD_CLUSTER_NAMESPACE,
-        port: parsePort(env.THINGD_CLUSTER_PORT, DEFAULT_CLUSTER_PORT),
-        forwardAuthToken: env.THINGD_CLUSTER_FORWARD_AUTH_TOKEN ?? env.THINGD_AUTH_TOKEN,
-        leaderElection: parseBooleanFlag(env.THINGD_CLUSTER_LEADER_ELECTION, "THINGD_CLUSTER_LEADER_ELECTION"),
-        electionMaxFailures: parsePositiveInt(env.THINGD_CLUSTER_LEADER_ELECTION_MAX_FAILURES, 3),
-    };
-}
-export function resolveClusterOptions(options) {
-    const mode = options?.mode ?? "single";
-    const discovery = options?.discovery ?? (options?.peers?.length ? "static" : "none");
-    const port = options?.port ?? DEFAULT_CLUSTER_PORT;
-    const peers = resolvePeers({
-        discovery,
-        peers: options?.peers ?? [],
-        service: options?.service,
-        namespace: options?.namespace,
-        port,
-    });
-    const leaderElection = options?.leaderElection ?? false;
-    const electionMaxFailures = options?.electionMaxFailures ?? 3;
-    // When leader election is enabled, derive leaderUrl from peer list if not explicitly set.
-    if (mode === "follower" && !options?.leaderUrl && leaderElection && peers.length > 0) {
-        options = { ...options, leaderUrl: peers[0] };
-    }
-    if (mode === "follower" && !options?.leaderUrl) {
-        throw new Error("THINGD_CLUSTER_LEADER_URL is required when THINGD_CLUSTER_MODE=follower");
-    }
-    return {
-        mode,
-        advertiseUrl: options?.advertiseUrl,
-        leaderUrl: options?.leaderUrl,
-        fallbackLeaderUrl: options?.fallbackLeaderUrl,
-        activeLeaderUrl: undefined,
-        peers,
-        discovery,
-        service: options?.service,
-        namespace: options?.namespace,
-        port,
-        forwardAuthToken: options?.forwardAuthToken,
-        statusPath: options?.statusPath ?? "/cluster/status",
-        peersPath: options?.peersPath ?? "/cluster/peers",
-        leaderElection,
-        electionMaxFailures,
-        cachedReplicationLag: 0,
-    };
-}
-export async function getClusterStatus(cluster, db, consecutiveFailures = 0) {
-    let replication = "not-implemented";
-    if (cluster.mode === "follower") {
-        try {
-            const status = await db.get("__thingd_meta", "replication_status");
-            const lastSeq = status && typeof status.lastReplicatedSequence === "number"
-                ? status.lastReplicatedSequence
-                : 0;
-            // Lag is updated asynchronously by the replication runner — read cached value
-            // to avoid a synchronous outbound HTTP call on every /healthz request.
-            replication = {
-                lastReplicatedSequence: lastSeq,
-                status: "syncing",
-                lag: cluster.cachedReplicationLag,
-            };
-        }
-        catch {
-            replication = { lastReplicatedSequence: 0, status: "error" };
-        }
-    }
-    else if (cluster.mode === "leader" || cluster.mode === "single") {
-        try {
-            const list = await db.events.list("__thingd:system:replication");
-            const lastEvent = list[list.length - 1];
-            const lastSeq = lastEvent ? Number.parseInt(lastEvent.id, 10) : 0;
-            replication = {
-                lastReplicatedSequence: lastSeq,
-                status: "active",
-            };
-        }
-        catch {
-            replication = { lastReplicatedSequence: 0, status: "error" };
-        }
-    }
-    return {
-        mode: cluster.mode,
-        writable: cluster.mode !== "follower",
-        forwarding: cluster.mode === "follower",
-        leaderUrl: cluster.leaderUrl,
-        fallbackLeaderUrl: cluster.fallbackLeaderUrl,
-        activeLeaderUrl: cluster.activeLeaderUrl,
-        advertiseUrl: cluster.advertiseUrl,
-        discovery: cluster.discovery,
-        peers: cluster.peers,
-        leaderElection: cluster.leaderElection,
-        electionMaxFailures: cluster.electionMaxFailures,
-        consecutiveFailures,
-        replication,
-    };
-}
-export async function forwardMcpRequestToLeader(cluster, mcpPath, request, response) {
-    if (!cluster.leaderUrl) {
-        writeForwardError(response, 503, "cluster_leader_unavailable");
-        return;
-    }
-    const body = await readRequestBody(request);
-    const urls = cluster.fallbackLeaderUrl
-        ? [cluster.leaderUrl, cluster.fallbackLeaderUrl]
-        : [cluster.leaderUrl];
-    let lastError;
-    for (const url of urls) {
-        try {
-            const upstreamUrl = leaderMcpUrl(url, mcpPath);
-            const upstream = await fetch(upstreamUrl, {
-                method: "POST",
-                headers: forwardedHeaders(request, cluster.forwardAuthToken),
-                body: new Uint8Array(body),
-                signal: AbortSignal.timeout(30_000),
-            });
-            cluster.activeLeaderUrl = url;
-            response.writeHead(upstream.status, responseHeaders(upstream.headers));
-            response.end(Buffer.from(await upstream.arrayBuffer()));
-            return;
-        }
-        catch (error) {
-            lastError = error instanceof Error ? error : new Error(String(error));
-            console.error(`Forward to leader ${url} failed:`, lastError.message);
-        }
-    }
-    if (lastError) {
-        console.error("All leader URLs exhausted for forward, last error:", lastError.message);
-    }
-    writeForwardError(response, 503, "cluster_leader_unavailable");
-}
-export function findNextLeaderCandidate(cluster) {
-    const { advertiseUrl, peers } = cluster;
-    const currentLeaderUrl = cluster.activeLeaderUrl ?? cluster.leaderUrl;
-    if (!currentLeaderUrl || peers.length === 0) {
-        return undefined;
-    }
-    const leaderIndex = findPeerIndex(peers, currentLeaderUrl);
-    if (leaderIndex === -1) {
-        return undefined;
-    }
-    // Scan from the next peer after the current leader.
-    for (let i = leaderIndex + 1; i < peers.length; i++) {
-        const candidate = peers[i];
-        if (candidate) {
-            const isSelf = typeof advertiseUrl === "string" && sameOrigin(advertiseUrl, candidate);
-            return { url: candidate, isSelf };
-        }
-    }
-    // Wrap around — all peers after leader's index exhausted, try from the beginning.
-    for (let i = 0; i < leaderIndex; i++) {
-        const candidate = peers[i];
-        if (candidate) {
-            const isSelf = typeof advertiseUrl === "string" && sameOrigin(advertiseUrl, candidate);
-            return { url: candidate, isSelf };
-        }
-    }
-    return undefined;
-}
-function findPeerIndex(peers, targetUrl) {
-    return peers.findIndex((peer) => sameOrigin(peer, targetUrl));
-}
-/** Compare two URLs by origin (scheme + host + port). */
-function sameOrigin(a, b) {
-    try {
-        return new URL(a).origin === new URL(b).origin;
-    }
-    catch {
-        return a === b;
-    }
-}
-function parsePositiveInt(value, fallback) {
-    if (!value) {
-        return fallback;
-    }
-    const n = Number.parseInt(value, 10);
-    if (!Number.isInteger(n) || n <= 0) {
-        throw new Error(`Invalid positive integer: ${value}`);
-    }
-    return n;
-}
-function parseClusterMode(value) {
-    if (!value) {
-        return undefined;
-    }
-    if (value === "single" || value === "leader" || value === "follower") {
-        return value;
-    }
-    throw new Error(`Unsupported THINGD_CLUSTER_MODE: ${value}`);
-}
-function parseClusterDiscovery(value) {
-    if (!value) {
-        return undefined;
-    }
-    if (value === "none" || value === "static" || value === "kubernetes") {
-        return value;
-    }
-    throw new Error(`Unsupported THINGD_CLUSTER_DISCOVERY: ${value}`);
-}
-function parsePeers(value) {
-    if (!value) {
-        return undefined;
-    }
-    return value
-        .split(",")
-        .map((peer) => peer.trim())
-        .filter(Boolean);
-}
-function resolvePeers(options) {
-    if (options.discovery === "static") {
-        return options.peers;
-    }
-    if (options.discovery !== "kubernetes" || !options.service) {
-        return [];
-    }
-    const namespace = options.namespace ?? "default";
-    return [`http://${options.service}.${namespace}.svc.cluster.local:${options.port}`];
-}
-function leaderMcpUrl(leaderUrl, mcpPath) {
-    const url = new URL(leaderUrl);
-    if (url.pathname === "/" || url.pathname === "") {
-        url.pathname = mcpPath;
-    }
-    return url.toString();
-}
-function forwardedHeaders(request, forwardAuthToken) {
-    const headers = new Headers();
-    const contentType = request.headers["content-type"];
-    const protocolVersion = request.headers["mcp-protocol-version"];
-    const accept = request.headers.accept;
-    if (typeof contentType === "string") {
-        headers.set("Content-Type", contentType);
-    }
-    if (typeof accept === "string") {
-        headers.set("Accept", accept);
-    }
-    if (typeof protocolVersion === "string") {
-        headers.set("MCP-Protocol-Version", protocolVersion);
-    }
-    if (forwardAuthToken) {
-        headers.set("Authorization", `Bearer ${forwardAuthToken}`);
-    }
-    else if (typeof request.headers.authorization === "string") {
-        headers.set("Authorization", request.headers.authorization);
-    }
-    return headers;
-}
-function responseHeaders(headers) {
-    const result = {};
-    for (const [key, value] of headers) {
-        if (!isHopByHopHeader(key)) {
-            result[key] = value;
-        }
-    }
-    return result;
-}
-function isHopByHopHeader(header) {
-    return [
-        "connection",
-        "content-length",
-        "keep-alive",
-        "proxy-authenticate",
-        "proxy-authorization",
-        "te",
-        "trailer",
-        "transfer-encoding",
-        "upgrade",
-    ].includes(header.toLowerCase());
-}
-function readRequestBody(request) {
-    return new Promise((resolve, reject) => {
-        const chunks = [];
-        request.on("data", (chunk) => {
-            chunks.push(chunk);
-        });
-        request.on("end", () => {
-            resolve(Buffer.concat(chunks));
-        });
-        request.on("error", reject);
-    });
-}
-function writeForwardError(response, statusCode, error) {
-    response.writeHead(statusCode, {
-        "Content-Type": "application/json",
-    });
-    response.end(JSON.stringify({
-        jsonrpc: "2.0",
-        error: {
-            code: -32_603,
-            message: error,
-        },
-        id: null,
-    }));
-}

package/dist/mcp/config.d.ts

@@ -1,14 +0,0 @@
-import type { ThingDDriver, ThingdMcpAuditOptions } from "@thingd/sdk";
-export type ThingDStorageDriver = Exclude<ThingDDriver, "cloud">;
-export type HttpRuntimeSafetyOptions = {
-    host: string;
-    authToken?: string;
-    allowUnauthenticated?: boolean;
-};
-export declare function parseThingdDriver(value: string | undefined): ThingDStorageDriver | undefined;
-export declare function parsePort(value: string | undefined, fallback: number): number;
-export declare function parseBooleanFlag(value: string | undefined, name: string): boolean;
-export declare function readMcpAuditOptionsFromEnv(env: Record<string, string | undefined>): ThingdMcpAuditOptions | false;
-export declare function readCliValue(args: string[], index: number, name: string): string;
-export declare function ensureHttpRuntimeIsSafe(options: HttpRuntimeSafetyOptions): void;
-//# sourceMappingURL=config.d.ts.map

package/dist/mcp/config.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../src/mcp/config.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAC;AAEvE,MAAM,MAAM,mBAAmB,GAAG,OAAO,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC;AAEjE,MAAM,MAAM,wBAAwB,GAAG;IACrC,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,oBAAoB,CAAC,EAAE,OAAO,CAAC;CAChC,CAAC;AAEF,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,GAAG,mBAAmB,GAAG,SAAS,CAU5F;AAED,wBAAgB,SAAS,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,EAAE,QAAQ,EAAE,MAAM,GAAG,MAAM,CAY7E;AAED,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAejF;AAED,wBAAgB,0BAA0B,CACxC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,GACtC,qBAAqB,GAAG,KAAK,CAgB/B;AAED,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAQhF;AAED,wBAAgB,uBAAuB,CAAC,OAAO,EAAE,wBAAwB,GAAG,IAAI,CAU/E"}

package/dist/mcp/config.js

@@ -1,67 +0,0 @@
-export function parseThingdDriver(value) {
-    if (!value) {
-        return undefined;
-    }
-    if (value === "memory" || value === "native") {
-        return value;
-    }
-    throw new Error(`Unsupported thingd driver: ${value}`);
-}
-export function parsePort(value, fallback) {
-    if (!value) {
-        return fallback;
-    }
-    const port = Number.parseInt(value, 10);
-    if (!Number.isInteger(port) || port < 0 || port > 65_535) {
-        throw new Error(`Invalid port: ${value}`);
-    }
-    return port;
-}
-export function parseBooleanFlag(value, name) {
-    if (!value) {
-        return false;
-    }
-    const normalized = value.toLowerCase();
-    if (["1", "true", "yes", "on"].includes(normalized)) {
-        return true;
-    }
-    if (["0", "false", "no", "off"].includes(normalized)) {
-        return false;
-    }
-    throw new Error(`Invalid ${name}: expected true or false`);
-}
-export function readMcpAuditOptionsFromEnv(env) {
-    const enabled = env.THINGD_MCP_AUDIT === undefined
-        ? undefined
-        : parseBooleanFlag(env.THINGD_MCP_AUDIT, "THINGD_MCP_AUDIT");
-    if (enabled === false) {
-        return false;
-    }
-    return {
-        enabled,
-        actor: env.THINGD_MCP_ACTOR,
-        source: env.THINGD_MCP_SOURCE,
-        stream: env.THINGD_MCP_AUDIT_STREAM,
-    };
-}
-export function readCliValue(args, index, name) {
-    const value = args[index + 1];
-    if (!value) {
-        throw new Error(`${name} requires a value`);
-    }
-    return value;
-}
-export function ensureHttpRuntimeIsSafe(options) {
-    const authToken = options.authToken?.trim();
-    if (authToken || options.allowUnauthenticated || isLoopbackHost(options.host)) {
-        return;
-    }
-    throw new Error("THINGD_AUTH_TOKEN is required when the HTTP MCP runtime binds to a non-loopback host. Set THINGD_AUTH_TOKEN or THINGD_ALLOW_UNAUTHENTICATED=true for local-only experiments.");
-}
-function isLoopbackHost(host) {
-    const normalized = host.toLowerCase();
-    return (normalized === "localhost" ||
-        normalized === "127.0.0.1" ||
-        normalized === "::1" ||
-        normalized === "[::1]");
-}

package/dist/mcp/http.d.ts

@@ -1,25 +0,0 @@
-import { type Server } from "node:http";
-import { type ThingdMcpAuditOptions, type ThingdMcpHardeningOptions } from "@thingd/sdk";
-import { type ThingdClusterOptions } from "./cluster.js";
-import { type ThingDStorageDriver } from "./config.js";
-export type ThingdHttpServerOptions = {
-    path: string;
-    driver?: ThingDStorageDriver;
-    host?: string;
-    port?: number;
-    authToken?: string;
-    allowUnauthenticated?: boolean;
-    audit?: ThingdMcpAuditOptions | false;
-    cluster?: ThingdClusterOptions;
-    mcpPath?: string;
-    healthPath?: string;
-    hardening?: ThingdMcpHardeningOptions;
-};
-export type RunningThingdHttpServer = {
-    server: Server;
-    url: string;
-    mcpUrl: string;
-    close(): Promise<void>;
-};
-export declare function startThingdHttpServer(options: ThingdHttpServerOptions): Promise<RunningThingdHttpServer>;
-//# sourceMappingURL=http.d.ts.map

package/dist/mcp/http.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"http.d.ts","sourceRoot":"","sources":["../../src/mcp/http.ts"],"names":[],"mappings":"AAAA,OAAO,EAAsC,KAAK,MAAM,EAAuB,MAAM,WAAW,CAAC;AAGjG,OAAO,EAKL,KAAK,qBAAqB,EAC1B,KAAK,yBAAyB,EAC/B,MAAM,aAAa,CAAC;AACrB,OAAO,EAML,KAAK,oBAAoB,EAC1B,MAAM,cAAc,CAAC;AACtB,OAAO,EAA2B,KAAK,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAEhF,MAAM,MAAM,uBAAuB,GAAG;IACpC,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,CAAC,EAAE,mBAAmB,CAAC;IAC7B,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,oBAAoB,CAAC,EAAE,OAAO,CAAC;IAC/B,KAAK,CAAC,EAAE,qBAAqB,GAAG,KAAK,CAAC;IACtC,OAAO,CAAC,EAAE,oBAAoB,CAAC;IAC/B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,EAAE,yBAAyB,CAAC;CACvC,CAAC;AAEF,MAAM,MAAM,uBAAuB,GAAG;IACpC,MAAM,EAAE,MAAM,CAAC;IACf,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACxB,CAAC;AAmBF,wBAAsB,qBAAqB,CACzC,OAAO,EAAE,uBAAuB,GAC/B,OAAO,CAAC,uBAAuB,CAAC,CAqDlC"}