@undefineds.co/xpod 0.1.0-local.202602081751

package/dist/http/ClusterWebSocketConfigurator.d.ts

@@ -0,0 +1,59 @@
+import type { Server } from 'node:http';
+import { EdgeNodeRepository } from '../identity/drizzle/EdgeNodeRepository';
+interface ClusterWebSocketConfiguratorOptions {
+    identityDbUrl: string;
+    edgeNodesEnabled?: string | boolean;
+    repository?: EdgeNodeRepository;
+    clusterIngressDomain: string;
+}
+/**
+ * ServerConfigurator that handles WebSocket upgrade requests for edge nodes.
+ *
+ * For proxy mode: proxies WebSocket connections through FRP tunnel
+ * For direct mode: sends 307 redirect to edge node's public IP
+ */
+export declare class ClusterWebSocketConfigurator {
+    protected readonly logger: import("global-logger-factory").Logger<unknown>;
+    private readonly repository;
+    private readonly enabled;
+    private readonly clusterIngressDomain;
+    private readonly wsProxy;
+    constructor(options: ClusterWebSocketConfiguratorOptions);
+    /**
+     * Attach to HTTP server's upgrade event
+     */
+    handle(server: Server): Promise<void>;
+    /**
+     * Handle WebSocket upgrade request
+     */
+    private handleUpgrade;
+    /**
+     * Send HTTP error response for WebSocket upgrade failure
+     */
+    private sendUpgradeError;
+    /**
+     * Resolve upstream endpoint from node metadata
+     */
+    private resolveUpstream;
+    /**
+     * Extract hostname from request headers
+     */
+    private extractHostname;
+    /**
+     * Extract node ID from hostname
+     */
+    private extractNodeIdFromHostname;
+    /**
+     * Normalize domain input
+     */
+    private normalizeDomain;
+    /**
+     * Normalize boolean values
+     */
+    private normalizeBoolean;
+    /**
+     * Normalize access mode
+     */
+    private normalizeMode;
+}
+export {};

package/dist/http/ClusterWebSocketConfigurator.js

@@ -0,0 +1,226 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ClusterWebSocketConfigurator = void 0;
+const http_proxy_1 = __importDefault(require("http-proxy"));
+const global_logger_factory_1 = require("global-logger-factory");
+const db_1 = require("../identity/drizzle/db");
+const EdgeNodeRepository_1 = require("../identity/drizzle/EdgeNodeRepository");
+/**
+ * ServerConfigurator that handles WebSocket upgrade requests for edge nodes.
+ *
+ * For proxy mode: proxies WebSocket connections through FRP tunnel
+ * For direct mode: sends 307 redirect to edge node's public IP
+ */
+class ClusterWebSocketConfigurator {
+    constructor(options) {
+        this.logger = (0, global_logger_factory_1.getLoggerFor)(this);
+        this.repository = options.repository ?? new EdgeNodeRepository_1.EdgeNodeRepository((0, db_1.getIdentityDatabase)(options.identityDbUrl));
+        this.enabled = this.normalizeBoolean(options.edgeNodesEnabled);
+        this.clusterIngressDomain = this.normalizeDomain(options.clusterIngressDomain);
+        // Create WebSocket proxy instance
+        this.wsProxy = http_proxy_1.default.createProxyServer({
+            ws: true,
+            changeOrigin: true,
+            xfwd: true,
+        });
+        this.wsProxy.on('error', (err, req, res) => {
+            this.logger.error(`WebSocket proxy error: ${String(err)}`);
+            if (res && 'end' in res && typeof res.end === 'function') {
+                res.end();
+            }
+        });
+    }
+    /**
+     * Attach to HTTP server's upgrade event
+     */
+    async handle(server) {
+        if (!this.enabled) {
+            this.logger.info('ClusterWebSocketConfigurator disabled');
+            return;
+        }
+        // Prepend our handler to run before CSS's WebSocketServerConfigurator
+        server.prependListener('upgrade', (request, socket, head) => {
+            this.handleUpgrade(request, socket, head).catch((error) => {
+                this.logger.error(`WebSocket upgrade error: ${String(error)}`);
+                // Don't destroy socket here - let other handlers try
+            });
+        });
+        this.logger.info('ClusterWebSocketConfigurator attached to server');
+    }
+    /**
+     * Handle WebSocket upgrade request
+     */
+    async handleUpgrade(request, socket, head) {
+        const hostname = this.extractHostname(request);
+        if (!hostname) {
+            return false; // Let other handlers deal with it
+        }
+        // Only handle requests to node subdomains
+        if (hostname === this.clusterIngressDomain) {
+            return false; // Cluster domain - let CSS handle it
+        }
+        const nodeId = this.extractNodeIdFromHostname(hostname);
+        if (!nodeId) {
+            return false; // Not a node subdomain
+        }
+        // Verify node exists
+        const nodeSecret = await this.repository.getNodeSecret(nodeId);
+        if (!nodeSecret) {
+            this.logger.warn(`WebSocket upgrade: Node ${nodeId} not registered`);
+            this.sendUpgradeError(socket, 404, `Node ${nodeId} not found`);
+            return true; // We handled it (with error)
+        }
+        // Get node info
+        const [nodeInfo, nodeMetadata] = await Promise.all([
+            this.repository.getNodeConnectivityInfo(nodeId),
+            this.repository.getNodeMetadata(nodeId),
+        ]);
+        if (!nodeInfo) {
+            this.logger.error(`WebSocket upgrade: Node ${nodeId} connectivity info not found`);
+            this.sendUpgradeError(socket, 502, 'Node connectivity info not found');
+            return true;
+        }
+        const mode = this.normalizeMode(nodeInfo.accessMode);
+        if (mode === 'direct' && nodeInfo.publicIp) {
+            // Direct mode: redirect client to connect directly
+            const port = nodeInfo.publicPort && nodeInfo.publicPort !== 443 ? `:${nodeInfo.publicPort}` : '';
+            const directUrl = `wss://${nodeInfo.publicIp}${port}${request.url ?? '/'}`;
+            this.logger.info(`WebSocket direct mode: redirecting to ${directUrl}`);
+            socket.write(`HTTP/1.1 307 Temporary Redirect\r\n` +
+                `Location: ${directUrl}\r\n` +
+                `X-Xpod-Direct-Node: ${nodeId}\r\n` +
+                `Connection: close\r\n` +
+                `\r\n`);
+            socket.end();
+            return true;
+        }
+        if (mode === 'proxy') {
+            const upstream = this.resolveUpstream(nodeMetadata?.metadata || null);
+            if (!upstream) {
+                this.logger.error(`WebSocket upgrade: Node ${nodeId} tunnel endpoint not ready`);
+                this.sendUpgradeError(socket, 502, 'Node tunnel not ready');
+                return true;
+            }
+            const upstreamUrl = new URL(upstream);
+            const wsProtocol = upstreamUrl.protocol === 'https:' ? 'wss:' : 'ws:';
+            const target = `${wsProtocol}//${upstreamUrl.host}`;
+            this.logger.info(`WebSocket proxy: ${hostname} -> ${target}${request.url}`);
+            // Add forwarded headers
+            request.headers['x-forwarded-host'] = hostname;
+            request.headers['x-forwarded-proto'] = 'wss';
+            request.headers['x-xpod-proxy-node'] = nodeId;
+            // Proxy the WebSocket connection
+            this.wsProxy.ws(request, socket, head, {
+                target,
+                secure: true,
+            });
+            return true;
+        }
+        this.logger.warn(`WebSocket upgrade: Unsupported mode ${mode} for node ${nodeId}`);
+        this.sendUpgradeError(socket, 400, `Unsupported access mode: ${mode}`);
+        return true;
+    }
+    /**
+     * Send HTTP error response for WebSocket upgrade failure
+     */
+    sendUpgradeError(socket, statusCode, message) {
+        socket.write(`HTTP/1.1 ${statusCode} ${message}\r\n` +
+            `Content-Type: text/plain\r\n` +
+            `Connection: close\r\n` +
+            `\r\n` +
+            message);
+        socket.end();
+    }
+    /**
+     * Resolve upstream endpoint from node metadata
+     */
+    resolveUpstream(metadata) {
+        const tunnel = metadata?.tunnel;
+        if (tunnel && typeof tunnel === 'object') {
+            const entrypoint = tunnel.entrypoint;
+            if (typeof entrypoint === 'string' && entrypoint.trim().length > 0) {
+                return entrypoint;
+            }
+        }
+        if (typeof metadata?.publicAddress === 'string') {
+            return metadata.publicAddress;
+        }
+        return undefined;
+    }
+    /**
+     * Extract hostname from request headers
+     */
+    extractHostname(request) {
+        const originalHost = request.headers['x-original-host'];
+        if (originalHost && typeof originalHost === 'string') {
+            return originalHost.toLowerCase();
+        }
+        const hostHeader = request.headers.host || request.headers.Host;
+        if (Array.isArray(hostHeader)) {
+            return hostHeader[0]?.toLowerCase();
+        }
+        return typeof hostHeader === 'string' ? hostHeader.toLowerCase() : undefined;
+    }
+    /**
+     * Extract node ID from hostname
+     */
+    extractNodeIdFromHostname(hostname) {
+        const clusterSuffix = `.${this.clusterIngressDomain}`;
+        if (!hostname.endsWith(clusterSuffix)) {
+            return undefined;
+        }
+        const nodeId = hostname.slice(0, -clusterSuffix.length);
+        if (!nodeId || nodeId.includes('.') || nodeId.length === 0) {
+            return undefined;
+        }
+        return nodeId;
+    }
+    /**
+     * Normalize domain input
+     */
+    normalizeDomain(domain) {
+        if (domain.includes('://')) {
+            try {
+                return new URL(domain).hostname.toLowerCase();
+            }
+            catch {
+                return domain.toLowerCase();
+            }
+        }
+        return domain.toLowerCase();
+    }
+    /**
+     * Normalize boolean values
+     */
+    normalizeBoolean(value) {
+        if (typeof value === 'boolean') {
+            return value;
+        }
+        if (typeof value === 'string') {
+            const normalized = value.trim().toLowerCase();
+            return normalized === 'true' || normalized === '1' || normalized === 'yes' || normalized === 'on';
+        }
+        return false;
+    }
+    /**
+     * Normalize access mode
+     */
+    normalizeMode(mode) {
+        if (!mode) {
+            return undefined;
+        }
+        const normalized = mode.trim().toLowerCase();
+        if (normalized === 'redirect' || normalized === 'direct') {
+            return 'direct';
+        }
+        if (normalized === 'proxy') {
+            return 'proxy';
+        }
+        return undefined;
+    }
+}
+exports.ClusterWebSocketConfigurator = ClusterWebSocketConfigurator;
+//# sourceMappingURL=ClusterWebSocketConfigurator.js.map

package/dist/http/ClusterWebSocketConfigurator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ClusterWebSocketConfigurator.js","sourceRoot":"","sources":["../../src/http/ClusterWebSocketConfigurator.ts"],"names":[],"mappings":";;;;;;AAEA,4DAAmC;AACnC,iEAAqD;AACrD,+CAA6D;AAC7D,+EAA4E;AAS5E;;;;;GAKG;AACH,MAAa,4BAA4B;IAOvC,YAAmB,OAA4C;QAN5C,WAAM,GAAG,IAAA,oCAAY,EAAC,IAAI,CAAC,CAAC;QAO7C,IAAI,CAAC,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,IAAI,uCAAkB,CAAC,IAAA,wBAAmB,EAAC,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC;QAC3G,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;QAC/D,IAAI,CAAC,oBAAoB,GAAG,IAAI,CAAC,eAAe,CAAC,OAAO,CAAC,oBAAoB,CAAC,CAAC;QAE/E,kCAAkC;QAClC,IAAI,CAAC,OAAO,GAAG,oBAAS,CAAC,iBAAiB,CAAC;YACzC,EAAE,EAAE,IAAI;YACR,YAAY,EAAE,IAAI;YAClB,IAAI,EAAE,IAAI;SACX,CAAC,CAAC;QAEH,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;YACzC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,0BAA0B,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAC3D,IAAI,GAAG,IAAI,KAAK,IAAI,GAAG,IAAI,OAAO,GAAG,CAAC,GAAG,KAAK,UAAU,EAAE,CAAC;gBACzD,GAAG,CAAC,GAAG,EAAE,CAAC;YACZ,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACI,KAAK,CAAC,MAAM,CAAC,MAAc;QAChC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;YAClB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,uCAAuC,CAAC,CAAC;YAC1D,OAAO;QACT,CAAC;QAED,sEAAsE;QACtE,MAAM,CAAC,eAAe,CAAC,SAAS,EAAE,CAAC,OAAwB,EAAE,MAAc,EAAE,IAAY,EAAE,EAAE;YAC3F,IAAI,CAAC,aAAa,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;gBACxD,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,4BAA4B,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;gBAC/D,qDAAqD;YACvD,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QAEH,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,iDAAiD,CAAC,CAAC;IACtE,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,aAAa,CACzB,OAAwB,EACxB,MAAc,EACd,IAAY;QAEZ,MAAM,QAAQ,GAAG,IAAI,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC;QAC/C,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,OAAO,KAAK,CAAC,CAAC,kCAAkC;QAClD,CAAC;QAED,0CAA0C;QAC1C,IAAI,QAAQ,KAAK,IAAI,CAAC,oBAAoB,EAAE,CAAC;YAC3C,OAAO,KAAK,CAAC,CAAC,qCAAqC;QACrD,CAAC;QAED,MAAM,MAAM,GAAG,IAAI,CAAC,yBAAyB,CAAC,QAAQ,CAAC,CAAC;QACxD,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO,KAAK,CAAC,CAAC,uBAAuB;QACvC,CAAC;QAED,qBAAqB;QACrB,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC;QAC/D,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,2BAA2B,MAAM,iBAAiB,CAAC,CAAC;YACrE,IAAI,CAAC,gBAAgB,CAAC,MAAM,EAAE,GAAG,EAAE,QAAQ,MAAM,YAAY,CAAC,CAAC;YAC/D,OAAO,IAAI,CAAC,CAAC,6BAA6B;QAC5C,CAAC;QAED,gBAAgB;QAChB,MAAM,CAAC,QAAQ,EAAE,YAAY,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YACjD,IAAI,CAAC,UAAU,CAAC,uBAAuB,CAAC,MAAM,CAAC;YAC/C,IAAI,CAAC,UAAU,CAAC,eAAe,CAAC,MAAM,CAAC;SACxC,CAAC,CAAC;QAEH,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,2BAA2B,MAAM,8BAA8B,CAAC,CAAC;YACnF,IAAI,CAAC,gBAAgB,CAAC,MAAM,EAAE,GAAG,EAAE,kCAAkC,CAAC,CAAC;YACvE,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,IAAI,GAAG,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;QAErD,IAAI,IAAI,KAAK,QAAQ,IAAI,QAAQ,CAAC,QAAQ,EAAE,CAAC;YAC3C,mDAAmD;YACnD,MAAM,IAAI,GAAG,QAAQ,CAAC,UAAU,IAAI,QAAQ,CAAC,UAAU,KAAK,GAAG,CAAC,CAAC,CAAC,IAAI,QAAQ,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACjG,MAAM,SAAS,GAAG,SAAS,QAAQ,CAAC,QAAQ,GAAG,IAAI,GAAG,OAAO,CAAC,GAAG,IAAI,GAAG,EAAE,CAAC;YAE3E,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,yCAAyC,SAAS,EAAE,CAAC,CAAC;YAEvE,MAAM,CAAC,KAAK,CACV,qCAAqC;gBACrC,aAAa,SAAS,MAAM;gBAC5B,uBAAuB,MAAM,MAAM;gBACnC,uBAAuB;gBACvB,MAAM,CACP,CAAC;YACF,MAAM,CAAC,GAAG,EAAE,CAAC;YACb,OAAO,IAAI,CAAC;QACd,CAAC;QAED,IAAI,IAAI,KAAK,OAAO,EAAE,CAAC;YACrB,MAAM,QAAQ,GAAG,IAAI,CAAC,eAAe,CAAC,YAAY,EAAE,QAAQ,IAAI,IAAI,CAAC,CAAC;YACtE,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,2BAA2B,MAAM,4BAA4B,CAAC,CAAC;gBACjF,IAAI,CAAC,gBAAgB,CAAC,MAAM,EAAE,GAAG,EAAE,uBAAuB,CAAC,CAAC;gBAC5D,OAAO,IAAI,CAAC;YACd,CAAC;YAED,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAC;YACtC,MAAM,UAAU,GAAG,WAAW,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC;YACtE,MAAM,MAAM,GAAG,GAAG,UAAU,KAAK,WAAW,CAAC,IAAI,EAAE,CAAC;YAEpD,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,oBAAoB,QAAQ,OAAO,MAAM,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;YAE5E,wBAAwB;YACxB,OAAO,CAAC,OAAO,CAAC,kBAAkB,CAAC,GAAG,QAAQ,CAAC;YAC/C,OAAO,CAAC,OAAO,CAAC,mBAAmB,CAAC,GAAG,KAAK,CAAC;YAC7C,OAAO,CAAC,OAAO,CAAC,mBAAmB,CAAC,GAAG,MAAM,CAAC;YAE9C,iCAAiC;YACjC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE;gBACrC,MAAM;gBACN,MAAM,EAAE,IAAI;aACb,CAAC,CAAC;YACH,OAAO,IAAI,CAAC;QACd,CAAC;QAED,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,uCAAuC,IAAI,aAAa,MAAM,EAAE,CAAC,CAAC;QACnF,IAAI,CAAC,gBAAgB,CAAC,MAAM,EAAE,GAAG,EAAE,4BAA4B,IAAI,EAAE,CAAC,CAAC;QACvE,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;OAEG;IACK,gBAAgB,CAAC,MAAc,EAAE,UAAkB,EAAE,OAAe;QAC1E,MAAM,CAAC,KAAK,CACV,YAAY,UAAU,IAAI,OAAO,MAAM;YACvC,8BAA8B;YAC9B,uBAAuB;YACvB,MAAM;YACN,OAAO,CACR,CAAC;QACF,MAAM,CAAC,GAAG,EAAE,CAAC;IACf,CAAC;IAED;;OAEG;IACK,eAAe,CAAC,QAAyC;QAC/D,MAAM,MAAM,GAAG,QAAQ,EAAE,MAAM,CAAC;QAChC,IAAI,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;YACzC,MAAM,UAAU,GAAI,MAAkC,CAAC,UAAU,CAAC;YAClE,IAAI,OAAO,UAAU,KAAK,QAAQ,IAAI,UAAU,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACnE,OAAO,UAAU,CAAC;YACpB,CAAC;QACH,CAAC;QACD,IAAI,OAAO,QAAQ,EAAE,aAAa,KAAK,QAAQ,EAAE,CAAC;YAChD,OAAO,QAAQ,CAAC,aAAa,CAAC;QAChC,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;IAED;;OAEG;IACK,eAAe,CAAC,OAAwB;QAC9C,MAAM,YAAY,GAAG,OAAO,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC;QACxD,IAAI,YAAY,IAAI,OAAO,YAAY,KAAK,QAAQ,EAAE,CAAC;YACrD,OAAO,YAAY,CAAC,WAAW,EAAE,CAAC;QACpC,CAAC;QACD,MAAM,UAAU,GAAG,OAAO,CAAC,OAAO,CAAC,IAAI,IAAI,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC;QAChE,IAAI,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;YAC9B,OAAO,UAAU,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC;QACtC,CAAC;QACD,OAAO,OAAO,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;IAC/E,CAAC;IAED;;OAEG;IACK,yBAAyB,CAAC,QAAgB;QAChD,MAAM,aAAa,GAAG,IAAI,IAAI,CAAC,oBAAoB,EAAE,CAAC;QACtD,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,aAAa,CAAC,EAAE,CAAC;YACtC,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,MAAM,MAAM,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC;QACxD,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC3D,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAED;;OAEG;IACK,eAAe,CAAC,MAAc;QACpC,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YAC3B,IAAI,CAAC;gBACH,OAAO,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC;YAChD,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,MAAM,CAAC,WAAW,EAAE,CAAC;YAC9B,CAAC;QACH,CAAC;QACD,OAAO,MAAM,CAAC,WAAW,EAAE,CAAC;IAC9B,CAAC;IAED;;OAEG;IACK,gBAAgB,CAAC,KAAwB;QAC/C,IAAI,OAAO,KAAK,KAAK,SAAS,EAAE,CAAC;YAC/B,OAAO,KAAK,CAAC;QACf,CAAC;QACD,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC9B,MAAM,UAAU,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;YAC9C,OAAO,UAAU,KAAK,MAAM,IAAI,UAAU,KAAK,GAAG,IAAI,UAAU,KAAK,KAAK,IAAI,UAAU,KAAK,IAAI,CAAC;QACpG,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED;;OAEG;IACK,aAAa,CAAC,IAAwB;QAC5C,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAC7C,IAAI,UAAU,KAAK,UAAU,IAAI,UAAU,KAAK,QAAQ,EAAE,CAAC;YACzD,OAAO,QAAQ,CAAC;QAClB,CAAC;QACD,IAAI,UAAU,KAAK,OAAO,EAAE,CAAC;YAC3B,OAAO,OAAO,CAAC;QACjB,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;CACF;AAvPD,oEAuPC","sourcesContent":["import type { IncomingMessage, Server } from 'node:http';\nimport type { Duplex } from 'node:stream';\nimport httpProxy from 'http-proxy';\nimport { getLoggerFor } from 'global-logger-factory';\nimport { getIdentityDatabase } from '../identity/drizzle/db';\nimport { EdgeNodeRepository } from '../identity/drizzle/EdgeNodeRepository';\n\ninterface ClusterWebSocketConfiguratorOptions {\n  identityDbUrl: string;\n  edgeNodesEnabled?: string | boolean;\n  repository?: EdgeNodeRepository;\n  clusterIngressDomain: string;\n}\n\n/**\n * ServerConfigurator that handles WebSocket upgrade requests for edge nodes.\n * \n * For proxy mode: proxies WebSocket connections through FRP tunnel\n * For direct mode: sends 307 redirect to edge node's public IP\n */\nexport class ClusterWebSocketConfigurator {\n  protected readonly logger = getLoggerFor(this);\n  private readonly repository: EdgeNodeRepository;\n  private readonly enabled: boolean;\n  private readonly clusterIngressDomain: string;\n  private readonly wsProxy: httpProxy;\n\n  public constructor(options: ClusterWebSocketConfiguratorOptions) {\n    this.repository = options.repository ?? new EdgeNodeRepository(getIdentityDatabase(options.identityDbUrl));\n    this.enabled = this.normalizeBoolean(options.edgeNodesEnabled);\n    this.clusterIngressDomain = this.normalizeDomain(options.clusterIngressDomain);\n    \n    // Create WebSocket proxy instance\n    this.wsProxy = httpProxy.createProxyServer({\n      ws: true,\n      changeOrigin: true,\n      xfwd: true,\n    });\n    \n    this.wsProxy.on('error', (err, req, res) => {\n      this.logger.error(`WebSocket proxy error: ${String(err)}`);\n      if (res && 'end' in res && typeof res.end === 'function') {\n        res.end();\n      }\n    });\n  }\n\n  /**\n   * Attach to HTTP server's upgrade event\n   */\n  public async handle(server: Server): Promise<void> {\n    if (!this.enabled) {\n      this.logger.info('ClusterWebSocketConfigurator disabled');\n      return;\n    }\n\n    // Prepend our handler to run before CSS's WebSocketServerConfigurator\n    server.prependListener('upgrade', (request: IncomingMessage, socket: Duplex, head: Buffer) => {\n      this.handleUpgrade(request, socket, head).catch((error) => {\n        this.logger.error(`WebSocket upgrade error: ${String(error)}`);\n        // Don't destroy socket here - let other handlers try\n      });\n    });\n\n    this.logger.info('ClusterWebSocketConfigurator attached to server');\n  }\n\n  /**\n   * Handle WebSocket upgrade request\n   */\n  private async handleUpgrade(\n    request: IncomingMessage,\n    socket: Duplex,\n    head: Buffer\n  ): Promise<boolean> {\n    const hostname = this.extractHostname(request);\n    if (!hostname) {\n      return false; // Let other handlers deal with it\n    }\n\n    // Only handle requests to node subdomains\n    if (hostname === this.clusterIngressDomain) {\n      return false; // Cluster domain - let CSS handle it\n    }\n\n    const nodeId = this.extractNodeIdFromHostname(hostname);\n    if (!nodeId) {\n      return false; // Not a node subdomain\n    }\n\n    // Verify node exists\n    const nodeSecret = await this.repository.getNodeSecret(nodeId);\n    if (!nodeSecret) {\n      this.logger.warn(`WebSocket upgrade: Node ${nodeId} not registered`);\n      this.sendUpgradeError(socket, 404, `Node ${nodeId} not found`);\n      return true; // We handled it (with error)\n    }\n\n    // Get node info\n    const [nodeInfo, nodeMetadata] = await Promise.all([\n      this.repository.getNodeConnectivityInfo(nodeId),\n      this.repository.getNodeMetadata(nodeId),\n    ]);\n\n    if (!nodeInfo) {\n      this.logger.error(`WebSocket upgrade: Node ${nodeId} connectivity info not found`);\n      this.sendUpgradeError(socket, 502, 'Node connectivity info not found');\n      return true;\n    }\n\n    const mode = this.normalizeMode(nodeInfo.accessMode);\n\n    if (mode === 'direct' && nodeInfo.publicIp) {\n      // Direct mode: redirect client to connect directly\n      const port = nodeInfo.publicPort && nodeInfo.publicPort !== 443 ? `:${nodeInfo.publicPort}` : '';\n      const directUrl = `wss://${nodeInfo.publicIp}${port}${request.url ?? '/'}`;\n\n      this.logger.info(`WebSocket direct mode: redirecting to ${directUrl}`);\n      \n      socket.write(\n        `HTTP/1.1 307 Temporary Redirect\\r\\n` +\n        `Location: ${directUrl}\\r\\n` +\n        `X-Xpod-Direct-Node: ${nodeId}\\r\\n` +\n        `Connection: close\\r\\n` +\n        `\\r\\n`\n      );\n      socket.end();\n      return true;\n    }\n\n    if (mode === 'proxy') {\n      const upstream = this.resolveUpstream(nodeMetadata?.metadata || null);\n      if (!upstream) {\n        this.logger.error(`WebSocket upgrade: Node ${nodeId} tunnel endpoint not ready`);\n        this.sendUpgradeError(socket, 502, 'Node tunnel not ready');\n        return true;\n      }\n\n      const upstreamUrl = new URL(upstream);\n      const wsProtocol = upstreamUrl.protocol === 'https:' ? 'wss:' : 'ws:';\n      const target = `${wsProtocol}//${upstreamUrl.host}`;\n\n      this.logger.info(`WebSocket proxy: ${hostname} -> ${target}${request.url}`);\n\n      // Add forwarded headers\n      request.headers['x-forwarded-host'] = hostname;\n      request.headers['x-forwarded-proto'] = 'wss';\n      request.headers['x-xpod-proxy-node'] = nodeId;\n\n      // Proxy the WebSocket connection\n      this.wsProxy.ws(request, socket, head, {\n        target,\n        secure: true,\n      });\n      return true;\n    }\n\n    this.logger.warn(`WebSocket upgrade: Unsupported mode ${mode} for node ${nodeId}`);\n    this.sendUpgradeError(socket, 400, `Unsupported access mode: ${mode}`);\n    return true;\n  }\n\n  /**\n   * Send HTTP error response for WebSocket upgrade failure\n   */\n  private sendUpgradeError(socket: Duplex, statusCode: number, message: string): void {\n    socket.write(\n      `HTTP/1.1 ${statusCode} ${message}\\r\\n` +\n      `Content-Type: text/plain\\r\\n` +\n      `Connection: close\\r\\n` +\n      `\\r\\n` +\n      message\n    );\n    socket.end();\n  }\n\n  /**\n   * Resolve upstream endpoint from node metadata\n   */\n  private resolveUpstream(metadata?: Record<string, unknown> | null): string | undefined {\n    const tunnel = metadata?.tunnel;\n    if (tunnel && typeof tunnel === 'object') {\n      const entrypoint = (tunnel as Record<string, unknown>).entrypoint;\n      if (typeof entrypoint === 'string' && entrypoint.trim().length > 0) {\n        return entrypoint;\n      }\n    }\n    if (typeof metadata?.publicAddress === 'string') {\n      return metadata.publicAddress;\n    }\n    return undefined;\n  }\n\n  /**\n   * Extract hostname from request headers\n   */\n  private extractHostname(request: IncomingMessage): string | undefined {\n    const originalHost = request.headers['x-original-host'];\n    if (originalHost && typeof originalHost === 'string') {\n      return originalHost.toLowerCase();\n    }\n    const hostHeader = request.headers.host || request.headers.Host;\n    if (Array.isArray(hostHeader)) {\n      return hostHeader[0]?.toLowerCase();\n    }\n    return typeof hostHeader === 'string' ? hostHeader.toLowerCase() : undefined;\n  }\n\n  /**\n   * Extract node ID from hostname\n   */\n  private extractNodeIdFromHostname(hostname: string): string | undefined {\n    const clusterSuffix = `.${this.clusterIngressDomain}`;\n    if (!hostname.endsWith(clusterSuffix)) {\n      return undefined;\n    }\n    const nodeId = hostname.slice(0, -clusterSuffix.length);\n    if (!nodeId || nodeId.includes('.') || nodeId.length === 0) {\n      return undefined;\n    }\n    return nodeId;\n  }\n\n  /**\n   * Normalize domain input\n   */\n  private normalizeDomain(domain: string): string {\n    if (domain.includes('://')) {\n      try {\n        return new URL(domain).hostname.toLowerCase();\n      } catch {\n        return domain.toLowerCase();\n      }\n    }\n    return domain.toLowerCase();\n  }\n\n  /**\n   * Normalize boolean values\n   */\n  private normalizeBoolean(value?: string | boolean): boolean {\n    if (typeof value === 'boolean') {\n      return value;\n    }\n    if (typeof value === 'string') {\n      const normalized = value.trim().toLowerCase();\n      return normalized === 'true' || normalized === '1' || normalized === 'yes' || normalized === 'on';\n    }\n    return false;\n  }\n\n  /**\n   * Normalize access mode\n   */\n  private normalizeMode(mode: string | undefined): 'direct' | 'proxy' | undefined {\n    if (!mode) {\n      return undefined;\n    }\n    const normalized = mode.trim().toLowerCase();\n    if (normalized === 'redirect' || normalized === 'direct') {\n      return 'direct';\n    }\n    if (normalized === 'proxy') {\n      return 'proxy';\n    }\n    return undefined;\n  }\n}\n"]}

package/dist/http/ClusterWebSocketConfigurator.jsonld

@@ -0,0 +1,145 @@
+{
+  "@context": [
+    "https://linkedsoftwaredependencies.org/bundles/npm/@undefineds.co/xpod/^0.0.0/components/context.jsonld"
+  ],
+  "@id": "npmd:@undefineds.co/xpod",
+  "components": [
+    {
+      "@id": "undefineds:dist/http/ClusterWebSocketConfigurator.jsonld#ClusterWebSocketConfigurator",
+      "@type": "Class",
+      "requireElement": "ClusterWebSocketConfigurator",
+      "comment": "ServerConfigurator that handles WebSocket upgrade requests for edge nodes.  For proxy mode: proxies WebSocket connections through FRP tunnel For direct mode: sends 307 redirect to edge node's public IP",
+      "parameters": [
+        {
+          "@id": "undefineds:dist/http/ClusterWebSocketConfigurator.jsonld#ClusterWebSocketConfigurator_options_identityDbUrl",
+          "range": "xsd:string"
+        },
+        {
+          "@id": "undefineds:dist/http/ClusterWebSocketConfigurator.jsonld#ClusterWebSocketConfigurator_options_edgeNodesEnabled",
+          "range": {
+            "@type": "ParameterRangeUnion",
+            "parameterRangeElements": [
+              "xsd:string",
+              "xsd:boolean",
+              {
+                "@type": "ParameterRangeUndefined"
+              }
+            ]
+          }
+        },
+        {
+          "@id": "undefineds:dist/http/ClusterWebSocketConfigurator.jsonld#ClusterWebSocketConfigurator_options_repository",
+          "range": {
+            "@type": "ParameterRangeUnion",
+            "parameterRangeElements": [
+              "undefineds:dist/identity/drizzle/EdgeNodeRepository.jsonld#EdgeNodeRepository",
+              {
+                "@type": "ParameterRangeUndefined"
+              }
+            ]
+          }
+        },
+        {
+          "@id": "undefineds:dist/http/ClusterWebSocketConfigurator.jsonld#ClusterWebSocketConfigurator_options_clusterIngressDomain",
+          "range": "xsd:string"
+        }
+      ],
+      "memberFields": [
+        {
+          "@id": "undefineds:dist/http/ClusterWebSocketConfigurator.jsonld#ClusterWebSocketConfigurator__member_logger",
+          "memberFieldName": "logger",
+          "range": {
+            "@type": "ParameterRangeWildcard"
+          }
+        },
+        {
+          "@id": "undefineds:dist/http/ClusterWebSocketConfigurator.jsonld#ClusterWebSocketConfigurator__member_repository",
+          "memberFieldName": "repository"
+        },
+        {
+          "@id": "undefineds:dist/http/ClusterWebSocketConfigurator.jsonld#ClusterWebSocketConfigurator__member_enabled",
+          "memberFieldName": "enabled"
+        },
+        {
+          "@id": "undefineds:dist/http/ClusterWebSocketConfigurator.jsonld#ClusterWebSocketConfigurator__member_clusterIngressDomain",
+          "memberFieldName": "clusterIngressDomain"
+        },
+        {
+          "@id": "undefineds:dist/http/ClusterWebSocketConfigurator.jsonld#ClusterWebSocketConfigurator__member_wsProxy",
+          "memberFieldName": "wsProxy"
+        },
+        {
+          "@id": "undefineds:dist/http/ClusterWebSocketConfigurator.jsonld#ClusterWebSocketConfigurator__member_constructor",
+          "memberFieldName": "constructor"
+        },
+        {
+          "@id": "undefineds:dist/http/ClusterWebSocketConfigurator.jsonld#ClusterWebSocketConfigurator__member_handle",
+          "memberFieldName": "handle"
+        },
+        {
+          "@id": "undefineds:dist/http/ClusterWebSocketConfigurator.jsonld#ClusterWebSocketConfigurator__member_handleUpgrade",
+          "memberFieldName": "handleUpgrade"
+        },
+        {
+          "@id": "undefineds:dist/http/ClusterWebSocketConfigurator.jsonld#ClusterWebSocketConfigurator__member_sendUpgradeError",
+          "memberFieldName": "sendUpgradeError"
+        },
+        {
+          "@id": "undefineds:dist/http/ClusterWebSocketConfigurator.jsonld#ClusterWebSocketConfigurator__member_resolveUpstream",
+          "memberFieldName": "resolveUpstream"
+        },
+        {
+          "@id": "undefineds:dist/http/ClusterWebSocketConfigurator.jsonld#ClusterWebSocketConfigurator__member_extractHostname",
+          "memberFieldName": "extractHostname"
+        },
+        {
+          "@id": "undefineds:dist/http/ClusterWebSocketConfigurator.jsonld#ClusterWebSocketConfigurator__member_extractNodeIdFromHostname",
+          "memberFieldName": "extractNodeIdFromHostname"
+        },
+        {
+          "@id": "undefineds:dist/http/ClusterWebSocketConfigurator.jsonld#ClusterWebSocketConfigurator__member_normalizeDomain",
+          "memberFieldName": "normalizeDomain"
+        },
+        {
+          "@id": "undefineds:dist/http/ClusterWebSocketConfigurator.jsonld#ClusterWebSocketConfigurator__member_normalizeBoolean",
+          "memberFieldName": "normalizeBoolean"
+        },
+        {
+          "@id": "undefineds:dist/http/ClusterWebSocketConfigurator.jsonld#ClusterWebSocketConfigurator__member_normalizeMode",
+          "memberFieldName": "normalizeMode"
+        }
+      ],
+      "constructorArguments": [
+        {
+          "@id": "undefineds:dist/http/ClusterWebSocketConfigurator.jsonld#ClusterWebSocketConfigurator_options__constructorArgument",
+          "fields": [
+            {
+              "keyRaw": "identityDbUrl",
+              "value": {
+                "@id": "undefineds:dist/http/ClusterWebSocketConfigurator.jsonld#ClusterWebSocketConfigurator_options_identityDbUrl"
+              }
+            },
+            {
+              "keyRaw": "edgeNodesEnabled",
+              "value": {
+                "@id": "undefineds:dist/http/ClusterWebSocketConfigurator.jsonld#ClusterWebSocketConfigurator_options_edgeNodesEnabled"
+              }
+            },
+            {
+              "keyRaw": "repository",
+              "value": {
+                "@id": "undefineds:dist/http/ClusterWebSocketConfigurator.jsonld#ClusterWebSocketConfigurator_options_repository"
+              }
+            },
+            {
+              "keyRaw": "clusterIngressDomain",
+              "value": {
+                "@id": "undefineds:dist/http/ClusterWebSocketConfigurator.jsonld#ClusterWebSocketConfigurator_options_clusterIngressDomain"
+              }
+            }
+          ]
+        }
+      ]
+    }
+  ]
+}

package/dist/http/EdgeNodeDirectDebugHttpHandler.d.ts

@@ -0,0 +1,25 @@
+import { HttpHandler } from '@solid/community-server';
+import type { HttpHandlerInput } from '@solid/community-server';
+import { EdgeNodeRepository } from '../identity/drizzle/EdgeNodeRepository';
+interface EdgeNodeDirectDebugHttpHandlerOptions {
+    identityDbUrl: string;
+    edgeNodesEnabled?: string | boolean;
+    skipPrefixes?: string[];
+    nodeRepository?: EdgeNodeRepository;
+}
+export declare class EdgeNodeDirectDebugHttpHandler extends HttpHandler {
+    protected readonly logger: import("global-logger-factory").Logger<unknown>;
+    private readonly nodeRepo;
+    private readonly enabled;
+    private readonly skipPrefixes;
+    constructor(options: EdgeNodeDirectDebugHttpHandlerOptions);
+    canHandle({ request }: HttpHandlerInput): Promise<void>;
+    handle({ request, response }: HttpHandlerInput): Promise<void>;
+    private resolve;
+    private shouldSkip;
+    private resolveTarget;
+    private extractUrl;
+    private parseUrl;
+    private normalizeBoolean;
+}
+export {};

package/dist/http/EdgeNodeDirectDebugHttpHandler.js

@@ -0,0 +1,126 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.EdgeNodeDirectDebugHttpHandler = void 0;
+const global_logger_factory_1 = require("global-logger-factory");
+const community_server_1 = require("@solid/community-server");
+const community_server_2 = require("@solid/community-server");
+const db_1 = require("../identity/drizzle/db");
+const EdgeNodeRepository_1 = require("../identity/drizzle/EdgeNodeRepository");
+class EdgeNodeDirectDebugHttpHandler extends community_server_1.HttpHandler {
+    constructor(options) {
+        super();
+        this.logger = (0, global_logger_factory_1.getLoggerFor)(this);
+        const db = (0, db_1.getIdentityDatabase)(options.identityDbUrl);
+        this.nodeRepo = options.nodeRepository ?? new EdgeNodeRepository_1.EdgeNodeRepository(db);
+        this.enabled = this.normalizeBoolean(options.edgeNodesEnabled);
+        this.skipPrefixes = options.skipPrefixes ?? ['/admin', '/api', '/.internal'];
+    }
+    async canHandle({ request }) {
+        if (!this.enabled) {
+            throw new community_server_2.NotImplementedHttpError('Edge node redirection disabled.');
+        }
+        const url = this.parseUrl(request);
+        if (this.shouldSkip(url.pathname)) {
+            throw new community_server_2.NotImplementedHttpError('Path excluded from edge routing.');
+        }
+        const target = await this.resolve(url.pathname, url);
+        if (!target) {
+            throw new community_server_2.NotImplementedHttpError('Edge node endpoint not configured.');
+        }
+    }
+    async handle({ request, response }) {
+        const url = this.parseUrl(request);
+        if (this.shouldSkip(url.pathname)) {
+            throw new community_server_2.NotImplementedHttpError('Path excluded from edge routing.');
+        }
+        const resolved = await this.resolve(url.pathname, url);
+        if (!resolved) {
+            throw new community_server_2.NotImplementedHttpError('No edge node registered for this resource.');
+        }
+        this.logger.debug(`Redirecting ${url.pathname} to edge node ${resolved.nodeId}`);
+        try {
+            response.statusCode = 307;
+            response.setHeader('Location', resolved.target.toString());
+            response.setHeader('Cache-Control', 'no-store');
+            response.setHeader('X-Xpod-Edge-Node', resolved.nodeId);
+            response.end();
+        }
+        catch (error) {
+            throw new community_server_2.InternalServerError('Failed to write edge node redirect.', { cause: error });
+        }
+    }
+    async resolve(pathname, original) {
+        const record = await this.nodeRepo.findNodeByResourcePath(pathname);
+        if (!record) {
+            return undefined;
+        }
+        // Only handle direct mode nodes - proxy mode traffic should go through L4 SNI proxy
+        if (record.accessMode === 'proxy') {
+            this.logger.warn(`Request reached cluster for proxy-mode node ${record.nodeId}, should be handled by L4 SNI proxy`);
+            return undefined;
+        }
+        const target = this.resolveTarget(record.metadata ?? {}, original, record.baseUrl);
+        if (!target) {
+            return undefined;
+        }
+        return { nodeId: record.nodeId, target };
+    }
+    shouldSkip(pathname) {
+        return this.skipPrefixes.some((prefix) => pathname.startsWith(prefix));
+    }
+    resolveTarget(metadata, original, podBaseUrl) {
+        const baseUrl = this.extractUrl(metadata.publicAddress) ?? this.extractUrl(metadata.baseUrl);
+        if (!baseUrl) {
+            return undefined;
+        }
+        const podBase = this.extractUrl(podBaseUrl);
+        if (!podBase) {
+            return undefined;
+        }
+        const podPath = podBase.pathname.endsWith('/') ? podBase.pathname : `${podBase.pathname}/`;
+        if (!original.pathname.startsWith(podPath)) {
+            return undefined;
+        }
+        const relativePath = original.pathname.slice(podPath.length);
+        const targetBase = baseUrl.href.endsWith('/') ? baseUrl.href : `${baseUrl.href}/`;
+        const target = new URL(relativePath, targetBase);
+        target.search = original.search;
+        target.hash = original.hash;
+        return target;
+    }
+    extractUrl(value) {
+        if (typeof value !== 'string') {
+            return undefined;
+        }
+        const trimmed = value.trim();
+        if (trimmed.length === 0) {
+            return undefined;
+        }
+        try {
+            return new URL(trimmed);
+        }
+        catch {
+            return undefined;
+        }
+    }
+    parseUrl(request) {
+        const hostHeader = request.headers.host ?? request.headers.Host ?? 'localhost';
+        const protoHeader = request.headers['x-forwarded-proto'] ?? request.headers['X-Forwarded-Proto'];
+        const protocol = Array.isArray(protoHeader) ? protoHeader[0] : protoHeader;
+        const scheme = typeof protocol === 'string' ? protocol.split(',')[0]?.trim() ?? 'http' : 'http';
+        const rawUrl = request.url ?? '/';
+        return new URL(rawUrl, `${scheme}://${hostHeader}`);
+    }
+    normalizeBoolean(value) {
+        if (typeof value === 'boolean') {
+            return value;
+        }
+        if (typeof value === 'string') {
+            const normalized = value.trim().toLowerCase();
+            return normalized === 'true' || normalized === '1' || normalized === 'yes' || normalized === 'on';
+        }
+        return false;
+    }
+}
+exports.EdgeNodeDirectDebugHttpHandler = EdgeNodeDirectDebugHttpHandler;
+//# sourceMappingURL=EdgeNodeDirectDebugHttpHandler.js.map

package/dist/http/EdgeNodeDirectDebugHttpHandler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"EdgeNodeDirectDebugHttpHandler.js","sourceRoot":"","sources":["../../src/http/EdgeNodeDirectDebugHttpHandler.ts"],"names":[],"mappings":";;;AACA,iEAAqD;AACrD,8DAAsD;AAEtD,8DAIiC;AACjC,+CAA6D;AAC7D,+EAA4E;AAS5E,MAAa,8BAA+B,SAAQ,8BAAW;IAM7D,YAAmB,OAA8C;QAC/D,KAAK,EAAE,CAAC;QANS,WAAM,GAAG,IAAA,oCAAY,EAAC,IAAI,CAAC,CAAC;QAO7C,MAAM,EAAE,GAAG,IAAA,wBAAmB,EAAC,OAAO,CAAC,aAAa,CAAC,CAAC;QACtD,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC,cAAc,IAAI,IAAI,uCAAkB,CAAC,EAAS,CAAC,CAAC;QAC5E,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;QAC/D,IAAI,CAAC,YAAY,GAAG,OAAO,CAAC,YAAY,IAAI,CAAE,QAAQ,EAAE,MAAM,EAAE,YAAY,CAAE,CAAC;IACjF,CAAC;IAEe,KAAK,CAAC,SAAS,CAAC,EAAE,OAAO,EAAoB;QAC3D,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;YAClB,MAAM,IAAI,0CAAuB,CAAC,iCAAiC,CAAC,CAAC;QACvE,CAAC;QACD,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QACnC,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;YAClC,MAAM,IAAI,0CAAuB,CAAC,kCAAkC,CAAC,CAAC;QACxE,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;QACrD,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,IAAI,0CAAuB,CAAC,oCAAoC,CAAC,CAAC;QAC1E,CAAC;IACH,CAAC;IAEe,KAAK,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,QAAQ,EAAoB;QAClE,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QACnC,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;YAClC,MAAM,IAAI,0CAAuB,CAAC,kCAAkC,CAAC,CAAC;QACxE,CAAC;QACD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;QACvD,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,MAAM,IAAI,0CAAuB,CAAC,4CAA4C,CAAC,CAAC;QAClF,CAAC;QAED,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,eAAe,GAAG,CAAC,QAAQ,iBAAiB,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;QACjF,IAAI,CAAC;YACH,QAAQ,CAAC,UAAU,GAAG,GAAG,CAAC;YAC1B,QAAQ,CAAC,SAAS,CAAC,UAAU,EAAE,QAAQ,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC;YAC3D,QAAQ,CAAC,SAAS,CAAC,eAAe,EAAE,UAAU,CAAC,CAAC;YAChD,QAAQ,CAAC,SAAS,CAAC,kBAAkB,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;YACxD,QAAQ,CAAC,GAAG,EAAE,CAAC;QACjB,CAAC;QAAC,OAAO,KAAc,EAAE,CAAC;YACxB,MAAM,IAAI,sCAAmB,CAAC,qCAAqC,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;QACzF,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,OAAO,CAAC,QAAgB,EAAE,QAAa;QACnD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,sBAAsB,CAAC,QAAQ,CAAC,CAAC;QACpE,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,oFAAoF;QACpF,IAAI,MAAM,CAAC,UAAU,KAAK,OAAO,EAAE,CAAC;YAClC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,+CAA+C,MAAM,CAAC,MAAM,qCAAqC,CAAC,CAAC;YACpH,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,MAAM,MAAM,GAAG,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,QAAQ,IAAI,EAAE,EAAE,QAAQ,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;QACnF,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC;IAC3C,CAAC;IAEO,UAAU,CAAC,QAAgB;QACjC,OAAO,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,QAAQ,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC;IACzE,CAAC;IAEO,aAAa,CAAC,QAAiC,EAAE,QAAa,EAAE,UAAkB;QACxF,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,aAAa,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QAC7F,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;QAC5C,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,MAAM,OAAO,GAAG,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,QAAQ,GAAG,CAAC;QAC3F,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;YAC3C,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,MAAM,YAAY,GAAG,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QAC7D,MAAM,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,IAAI,GAAG,CAAC;QAClF,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,YAAY,EAAE,UAAU,CAAC,CAAC;QACjD,MAAM,CAAC,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC;QAChC,MAAM,CAAC,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC;QAC5B,OAAO,MAAM,CAAC;IAChB,CAAC;IAEO,UAAU,CAAC,KAAc;QAC/B,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC9B,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;QAC7B,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACzB,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,IAAI,CAAC;YACH,OAAO,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC;QAC1B,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,SAAS,CAAC;QACnB,CAAC;IACH,CAAC;IAEO,QAAQ,CAAC,OAAwB;QACvC,MAAM,UAAU,GAAG,OAAO,CAAC,OAAO,CAAC,IAAI,IAAI,OAAO,CAAC,OAAO,CAAC,IAAI,IAAI,WAAW,CAAC;QAC/E,MAAM,WAAW,GAAG,OAAO,CAAC,OAAO,CAAC,mBAAmB,CAAC,IAAI,OAAO,CAAC,OAAO,CAAC,mBAAmB,CAAC,CAAC;QACjG,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC;QAC3E,MAAM,MAAM,GAAG,OAAO,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC;QAChG,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC;QAClC,OAAO,IAAI,GAAG,CAAC,MAAM,EAAE,GAAG,MAAM,MAAM,UAAU,EAAE,CAAC,CAAC;IACtD,CAAC;IAEO,gBAAgB,CAAC,KAAwB;QAC/C,IAAI,OAAO,KAAK,KAAK,SAAS,EAAE,CAAC;YAC/B,OAAO,KAAK,CAAC;QACf,CAAC;QACD,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC9B,MAAM,UAAU,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;YAC9C,OAAO,UAAU,KAAK,MAAM,IAAI,UAAU,KAAK,GAAG,IAAI,UAAU,KAAK,KAAK,IAAI,UAAU,KAAK,IAAI,CAAC;QACpG,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;CACF;AAhID,wEAgIC","sourcesContent":["import type { IncomingMessage } from 'node:http';\nimport { getLoggerFor } from 'global-logger-factory';\nimport { HttpHandler } from '@solid/community-server';\nimport type { HttpHandlerInput, HttpResponse } from '@solid/community-server';\nimport {\n  NotImplementedHttpError,\n  InternalServerError,\n  \n} from '@solid/community-server';\nimport { getIdentityDatabase } from '../identity/drizzle/db';\nimport { EdgeNodeRepository } from '../identity/drizzle/EdgeNodeRepository';\n\ninterface EdgeNodeDirectDebugHttpHandlerOptions {\n  identityDbUrl: string;\n  edgeNodesEnabled?: string | boolean;\n  skipPrefixes?: string[];\n  nodeRepository?: EdgeNodeRepository;\n}\n\nexport class EdgeNodeDirectDebugHttpHandler extends HttpHandler {\n  protected readonly logger = getLoggerFor(this);\n  private readonly nodeRepo: EdgeNodeRepository;\n  private readonly enabled: boolean;\n  private readonly skipPrefixes: string[];\n\n  public constructor(options: EdgeNodeDirectDebugHttpHandlerOptions) {\n    super();\n    const db = getIdentityDatabase(options.identityDbUrl);\n    this.nodeRepo = options.nodeRepository ?? new EdgeNodeRepository(db as any);\n    this.enabled = this.normalizeBoolean(options.edgeNodesEnabled);\n    this.skipPrefixes = options.skipPrefixes ?? [ '/admin', '/api', '/.internal' ];\n  }\n\n  public override async canHandle({ request }: HttpHandlerInput): Promise<void> {\n    if (!this.enabled) {\n      throw new NotImplementedHttpError('Edge node redirection disabled.');\n    }\n    const url = this.parseUrl(request);\n    if (this.shouldSkip(url.pathname)) {\n      throw new NotImplementedHttpError('Path excluded from edge routing.');\n    }\n    const target = await this.resolve(url.pathname, url);\n    if (!target) {\n      throw new NotImplementedHttpError('Edge node endpoint not configured.');\n    }\n  }\n\n  public override async handle({ request, response }: HttpHandlerInput): Promise<void> {\n    const url = this.parseUrl(request);\n    if (this.shouldSkip(url.pathname)) {\n      throw new NotImplementedHttpError('Path excluded from edge routing.');\n    }\n    const resolved = await this.resolve(url.pathname, url);\n    if (!resolved) {\n      throw new NotImplementedHttpError('No edge node registered for this resource.');\n    }\n\n    this.logger.debug(`Redirecting ${url.pathname} to edge node ${resolved.nodeId}`);\n    try {\n      response.statusCode = 307;\n      response.setHeader('Location', resolved.target.toString());\n      response.setHeader('Cache-Control', 'no-store');\n      response.setHeader('X-Xpod-Edge-Node', resolved.nodeId);\n      response.end();\n    } catch (error: unknown) {\n      throw new InternalServerError('Failed to write edge node redirect.', { cause: error });\n    }\n  }\n\n  private async resolve(pathname: string, original: URL): Promise<{ nodeId: string; target: URL } | undefined> {\n    const record = await this.nodeRepo.findNodeByResourcePath(pathname);\n    if (!record) {\n      return undefined;\n    }\n    \n    // Only handle direct mode nodes - proxy mode traffic should go through L4 SNI proxy\n    if (record.accessMode === 'proxy') {\n      this.logger.warn(`Request reached cluster for proxy-mode node ${record.nodeId}, should be handled by L4 SNI proxy`);\n      return undefined;\n    }\n    \n    const target = this.resolveTarget(record.metadata ?? {}, original, record.baseUrl);\n    if (!target) {\n      return undefined;\n    }\n    return { nodeId: record.nodeId, target };\n  }\n\n  private shouldSkip(pathname: string): boolean {\n    return this.skipPrefixes.some((prefix) => pathname.startsWith(prefix));\n  }\n\n  private resolveTarget(metadata: Record<string, unknown>, original: URL, podBaseUrl: string): URL | undefined {\n    const baseUrl = this.extractUrl(metadata.publicAddress) ?? this.extractUrl(metadata.baseUrl);\n    if (!baseUrl) {\n      return undefined;\n    }\n    const podBase = this.extractUrl(podBaseUrl);\n    if (!podBase) {\n      return undefined;\n    }\n    const podPath = podBase.pathname.endsWith('/') ? podBase.pathname : `${podBase.pathname}/`;\n    if (!original.pathname.startsWith(podPath)) {\n      return undefined;\n    }\n    const relativePath = original.pathname.slice(podPath.length);\n    const targetBase = baseUrl.href.endsWith('/') ? baseUrl.href : `${baseUrl.href}/`;\n    const target = new URL(relativePath, targetBase);\n    target.search = original.search;\n    target.hash = original.hash;\n    return target;\n  }\n\n  private extractUrl(value: unknown): URL | undefined {\n    if (typeof value !== 'string') {\n      return undefined;\n    }\n    const trimmed = value.trim();\n    if (trimmed.length === 0) {\n      return undefined;\n    }\n    try {\n      return new URL(trimmed);\n    } catch {\n      return undefined;\n    }\n  }\n\n  private parseUrl(request: IncomingMessage): URL {\n    const hostHeader = request.headers.host ?? request.headers.Host ?? 'localhost';\n    const protoHeader = request.headers['x-forwarded-proto'] ?? request.headers['X-Forwarded-Proto'];\n    const protocol = Array.isArray(protoHeader) ? protoHeader[0] : protoHeader;\n    const scheme = typeof protocol === 'string' ? protocol.split(',')[0]?.trim() ?? 'http' : 'http';\n    const rawUrl = request.url ?? '/';\n    return new URL(rawUrl, `${scheme}://${hostHeader}`);\n  }\n\n  private normalizeBoolean(value?: string | boolean): boolean {\n    if (typeof value === 'boolean') {\n      return value;\n    }\n    if (typeof value === 'string') {\n      const normalized = value.trim().toLowerCase();\n      return normalized === 'true' || normalized === '1' || normalized === 'yes' || normalized === 'on';\n    }\n    return false;\n  }\n}\n"]}