@warlock.js/devtools 5.26.0 → 5.27.0

package/cjs/server-DHYSVive.cjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"server-DHYSVive.cjs","names":["path","path"],"sources":["../../../../../../devtools/src/server/background-routes.ts","../../../../../../devtools/src/server/explain-route.ts","../../../../../../devtools/src/server/guard.ts","../../../../../../devtools/src/server/log-routes.ts","../../../../../../devtools/src/server/mail-routes.ts","../../../../../../devtools/src/server/requests-routes.ts","../../../../../../devtools/src/server/route-routes.ts","../../../../../../devtools/src/server/stream-route.ts","../../../../../../devtools/src/ui-root.ts","../../../../../../devtools/src/server/ui-assets.ts","../../../../../../devtools/src/server/index.ts"],"sourcesContent":["import type { FastifyInstance } from \"fastify\";\nimport type { MountDevtoolsRoutesDeps } from \"./types\";\n\n/** Registers the route that returns work recorded outside any request. */\nexport function registerBackgroundRoutes(\n  server: FastifyInstance,\n  deps: MountDevtoolsRoutesDeps,\n): void {\n  server.get(\"/api/background\", async () => deps.collector.getBackground());\n}\n","import type { FastifyInstance } from \"fastify\";\nimport type { MountDevtoolsRoutesDeps } from \"./types\";\n\n/**\n * The value the logger's redaction substitutes for a censored leaf\n * (`logger/src/redact/redact.ts`, `DEFAULT_CENSOR`). Not exported from\n * `@warlock.js/logger`, so matched by literal here.\n */\nconst REDACTED_PLACEHOLDER = \"[REDACTED]\";\n\nfunction isExplainableSql(sql: string | undefined): boolean {\n  return /^\\s*(select|with)\\b/i.test(sql ?? \"\");\n}\n\n/** Registers the EXPLAIN route: Postgres `SELECT`/`WITH` queries only. */\nexport function registerExplainRoute(server: FastifyInstance, deps: MountDevtoolsRoutesDeps): void {\n  server.post<{ Params: { requestId: string; queryId: string } }>(\n    \"/api/requests/:requestId/queries/:queryId/explain\",\n    async (request, reply) => {\n      const found = deps.collector.getRequest(request.params.requestId);\n      const query = found?.queries.find((item) => item.id === request.params.queryId);\n\n      if (!query) {\n        reply.code(404).send();\n        return;\n      }\n\n      if (query.driver !== \"postgres\" || !isExplainableSql(query.sql) || !deps.explain) {\n        reply.code(400).send({ error: \"Only Postgres SELECT or WITH queries can be explained\" });\n        return;\n      }\n\n      if (query.bindings?.some((binding) => binding === REDACTED_PLACEHOLDER)) {\n        reply.code(400).send({ error: \"bindings redacted\" });\n        return;\n      }\n\n      try {\n        const plan = await deps.explain(query);\n        return { plan };\n      } catch (error) {\n        reply.code(500).send({ error: error instanceof Error ? error.message : String(error) });\n      }\n    },\n  );\n}\n","import type { FastifyInstance, FastifyReply, FastifyRequest } from \"fastify\";\nimport type { MountDevtoolsRoutesDeps } from \"./types\";\n\nconst LOOPBACK_ADDRESSES = new Set([\"127.0.0.1\", \"::1\", \"::ffff:127.0.0.1\"]);\n\n/**\n * Whether `address` is a loopback address. Deliberately reads\n * `request.socket.remoteAddress` rather than `request.ip`, which honours\n * `X-Forwarded-For` when the app trusts a proxy — a header any client can\n * set.\n */\nfunction isLoopbackAddress(address: string | undefined): boolean {\n  return address !== undefined && LOOPBACK_ADDRESSES.has(address);\n}\n\n/**\n * Registers the dev-only, loopback-only guard as an `onRequest` hook on\n * `server`. Callers must register this inside an encapsulated Fastify\n * context (a plugin/prefix) so the hook never reaches routes outside the\n * dashboard.\n */\nexport function registerDevtoolsGuard(\n  server: FastifyInstance,\n  deps: MountDevtoolsRoutesDeps,\n): void {\n  server.addHook(\"onRequest\", async (request: FastifyRequest, reply: FastifyReply) => {\n    if (!deps.isDevelopment() || !isLoopbackAddress(request.socket.remoteAddress)) {\n      // Returning the reply is what stops the lifecycle in an async hook;\n      // without it Fastify still runs the handler after the 404 is sent.\n      return reply.code(404).send();\n    }\n  });\n}\n","import type { FastifyInstance } from \"fastify\";\nimport type { DevtoolsLogEntry } from \"../types\";\nimport type { MountDevtoolsRoutesDeps } from \"./types\";\n\ntype LogsQuery = { level?: DevtoolsLogEntry[\"level\"]; module?: string };\n\n/** Registers the log listing route, filterable by `level` and `module`. */\nexport function registerLogRoutes(server: FastifyInstance, deps: MountDevtoolsRoutesDeps): void {\n  server.get<{ Querystring: LogsQuery }>(\"/api/logs\", async (request) =>\n    deps.collector.listLogs({ level: request.query.level, module: request.query.module }),\n  );\n}\n","import type { FastifyInstance } from \"fastify\";\nimport type { MountDevtoolsRoutesDeps } from \"./types\";\n\nconst MAIL_HTML_CSP =\n  \"sandbox; default-src 'none'; img-src data: https: http:; style-src 'unsafe-inline'\";\n\n/** Registers the mailbox list, single-mail detail, and mail HTML routes. */\nexport function registerMailRoutes(server: FastifyInstance, deps: MountDevtoolsRoutesDeps): void {\n  server.get(\"/api/mails\", async () => deps.collector.listMails());\n\n  server.get<{ Params: { id: string } }>(\"/api/mails/:id\", async (request, reply) => {\n    const mail = deps.collector.getMail(request.params.id);\n\n    if (!mail) {\n      reply.code(404).send();\n      return;\n    }\n\n    const { html, ...rest } = mail;\n    return rest;\n  });\n\n  server.get<{ Params: { id: string } }>(\"/api/mails/:id/html\", async (request, reply) => {\n    const mail = deps.collector.getMail(request.params.id);\n\n    if (!mail || !mail.html) {\n      reply.code(404).send();\n      return;\n    }\n\n    reply\n      .header(\"Content-Security-Policy\", MAIL_HTML_CSP)\n      .header(\"X-Content-Type-Options\", \"nosniff\")\n      .header(\"Content-Type\", \"text/html; charset=utf-8\")\n      .send(mail.html);\n  });\n}\n","import type { FastifyInstance } from \"fastify\";\nimport type { MountDevtoolsRoutesDeps } from \"./types\";\n\n/** Registers the request list, single-request detail, and clear routes. */\nexport function registerRequestsRoutes(\n  server: FastifyInstance,\n  deps: MountDevtoolsRoutesDeps,\n): void {\n  server.get(\"/api/requests\", async () => deps.collector.listRequests());\n\n  server.get<{ Params: { id: string } }>(\"/api/requests/:id\", async (request, reply) => {\n    const found = deps.collector.getRequest(request.params.id);\n\n    if (!found) {\n      reply.code(404).send();\n      return;\n    }\n\n    return found;\n  });\n\n  server.delete(\"/api/requests\", async (_request, reply) => {\n    deps.collector.clear();\n    reply.code(204).send();\n  });\n}\n","import type { FastifyInstance } from \"fastify\";\nimport type { MountDevtoolsRoutesDeps } from \"./types\";\n\n/** Registers the route map, sourced from core's router via `deps.listRoutes`. */\nexport function registerRouteRoutes(server: FastifyInstance, deps: MountDevtoolsRoutesDeps): void {\n  server.get(\"/api/routes\", async () => (deps.listRoutes ? deps.listRoutes() : []));\n}\n","import type { FastifyInstance } from \"fastify\";\nimport type { MountDevtoolsRoutesDeps } from \"./types\";\n\nconst PING_INTERVAL_MS = 15_000;\n\n/**\n * Registers the SSE stream: one `event: <type>\\ndata: <json>\\n\\n` frame per\n * collector event, plus a `: ping` comment every 15s to keep intermediaries\n * from closing an idle connection. The reply is hijacked so Fastify never\n * tries to serialize or close the response itself.\n */\nexport function registerStreamRoute(server: FastifyInstance, deps: MountDevtoolsRoutesDeps): void {\n  server.get(\"/api/stream\", async (request, reply) => {\n    reply.hijack();\n    const res = reply.raw;\n\n    res.writeHead(200, {\n      \"Content-Type\": \"text/event-stream\",\n      \"Cache-Control\": \"no-store\",\n      Connection: \"keep-alive\",\n    });\n\n    const dispose = deps.collector.subscribe((event) => {\n      res.write(`event: ${event.type}\\ndata: ${JSON.stringify(event.data)}\\n\\n`);\n    });\n\n    const pingTimer = setInterval(() => res.write(\": ping\\n\\n\"), PING_INTERVAL_MS);\n    pingTimer.unref();\n\n    request.raw.on(\"close\", () => {\n      clearInterval(pingTimer);\n      dispose();\n    });\n  });\n}\n","import { existsSync, readFileSync } from \"node:fs\";\nimport path from \"node:path\";\nimport { fileURLToPath } from \"node:url\";\n\nlet cachedUiRoot: string | undefined;\n\n/** Whether `dir` is this package's root: it has `ui/index.html` beside a `package.json` named `@warlock.js/devtools`. */\nfunction isPackageRoot(dir: string): boolean {\n  const indexHtml = path.join(dir, \"ui\", \"index.html\");\n  const packageJson = path.join(dir, \"package.json\");\n\n  if (!existsSync(indexHtml) || !existsSync(packageJson)) {\n    return false;\n  }\n\n  try {\n    const parsed = JSON.parse(readFileSync(packageJson, \"utf8\")) as { name?: string };\n    return parsed.name === \"@warlock.js/devtools\";\n  } catch {\n    return false;\n  }\n}\n\n/**\n * Locate this package's `ui/` directory by walking up from the current\n * module's directory. Works from `src/` in development and from the built\n * `esm/`/`cjs/` output, since both sit beside `ui/` and `package.json` at\n * the package root.\n */\nexport function resolveUiRoot(): string {\n  if (cachedUiRoot) {\n    return cachedUiRoot;\n  }\n\n  let dir = path.dirname(fileURLToPath(import.meta.url));\n\n  while (true) {\n    if (isPackageRoot(dir)) {\n      cachedUiRoot = path.join(dir, \"ui\");\n      return cachedUiRoot;\n    }\n\n    const parent = path.dirname(dir);\n    if (parent === dir) {\n      throw new Error(\n        \"Could not locate the devtools UI directory: no ancestor of \" +\n          \"this module has a ui/index.html beside a package.json named \" +\n          \"@warlock.js/devtools.\",\n      );\n    }\n\n    dir = parent;\n  }\n}\n","import { readFileSync } from \"node:fs\";\nimport path from \"node:path\";\nimport type { FastifyInstance, FastifyReply } from \"fastify\";\nimport { resolveUiRoot } from \"../ui-root\";\n\nconst ASSET_CONTENT_TYPES: Record<string, string> = {\n  \"app.js\": \"text/javascript; charset=utf-8\",\n  \"app.css\": \"text/css; charset=utf-8\",\n};\n\nfunction sendFile(reply: FastifyReply, file: string, contentType: string): void {\n  reply\n    .header(\"Cache-Control\", \"no-store\")\n    .header(\"Content-Type\", contentType)\n    .send(readFileSync(file));\n}\n\n/**\n * Serves the static dashboard: `index.html` at the dashboard root and the\n * two named assets. The asset name is matched against a fixed whitelist —\n * never joined into a filesystem path — so no request can traverse outside\n * `ui/`.\n */\nexport function registerUiAssets(server: FastifyInstance): void {\n  const serveIndex = (_request: unknown, reply: FastifyReply): void => {\n    const uiRoot = resolveUiRoot();\n    sendFile(reply, path.join(uiRoot, \"index.html\"), \"text/html; charset=utf-8\");\n  };\n\n  server.get(\"/\", serveIndex);\n\n  server.get<{ Params: { name: string } }>(\"/assets/:name\", (request, reply) => {\n    const contentType = ASSET_CONTENT_TYPES[request.params.name];\n\n    if (!contentType) {\n      reply.code(404).header(\"Cache-Control\", \"no-store\").send();\n      return;\n    }\n\n    const uiRoot = resolveUiRoot();\n    sendFile(reply, path.join(uiRoot, request.params.name), contentType);\n  });\n}\n","import type { FastifyError, FastifyInstance } from \"fastify\";\nimport { registerBackgroundRoutes } from \"./background-routes\";\nimport { registerExplainRoute } from \"./explain-route\";\nimport { registerDevtoolsGuard } from \"./guard\";\nimport { registerLogRoutes } from \"./log-routes\";\nimport { registerMailRoutes } from \"./mail-routes\";\nimport { registerRequestsRoutes } from \"./requests-routes\";\nimport { registerRouteRoutes } from \"./route-routes\";\nimport { registerStreamRoute } from \"./stream-route\";\nimport type { MountDevtoolsRoutesDeps } from \"./types\";\nimport { registerUiAssets } from \"./ui-assets\";\n\nexport type { DevtoolsRouteRow, MountDevtoolsRoutesDeps } from \"./types\";\n\n/**\n * Mounts the devtools dashboard and its API under `deps.options.path` on\n * `server`. Every route is registered inside a single encapsulated Fastify\n * context so the dev-only, loopback-only guard never reaches the app's\n * other routes.\n */\nexport function mountDevtoolsRoutes(server: FastifyInstance, deps: MountDevtoolsRoutesDeps): void {\n  server.register(\n    async (instance) => {\n      registerDevtoolsGuard(instance, deps);\n\n      instance.setErrorHandler((error: FastifyError, _request, reply) => {\n        reply.code(error.statusCode ?? 500).send({ error: error.message });\n      });\n\n      registerUiAssets(instance);\n      registerRequestsRoutes(instance, deps);\n      registerBackgroundRoutes(instance, deps);\n      registerMailRoutes(instance, deps);\n      registerLogRoutes(instance, deps);\n      registerRouteRoutes(instance, deps);\n      registerExplainRoute(instance, deps);\n      registerStreamRoute(instance, deps);\n    },\n    { prefix: deps.options.path },\n  );\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAIA,SAAgB,yBACd,QACA,MACM;CACN,OAAO,IAAI,mBAAmB,YAAY,KAAK,UAAU,cAAc,CAAC;AAC1E;;;;;;;;;ACDA,MAAM,uBAAuB;AAE7B,SAAS,iBAAiB,KAAkC;CAC1D,OAAO,uBAAuB,KAAK,OAAO,EAAE;AAC9C;;AAGA,SAAgB,qBAAqB,QAAyB,MAAqC;CACjG,OAAO,KACL,qDACA,OAAO,SAAS,UAAU;EAExB,MAAM,QADQ,KAAK,UAAU,WAAW,QAAQ,OAAO,SACrC,CAAC,EAAE,QAAQ,MAAM,SAAS,KAAK,OAAO,QAAQ,OAAO,OAAO;EAE9E,IAAI,CAAC,OAAO;GACV,MAAM,KAAK,GAAG,CAAC,CAAC,KAAK;GACrB;EACF;EAEA,IAAI,MAAM,WAAW,cAAc,CAAC,iBAAiB,MAAM,GAAG,KAAK,CAAC,KAAK,SAAS;GAChF,MAAM,KAAK,GAAG,CAAC,CAAC,KAAK,EAAE,OAAO,wDAAwD,CAAC;GACvF;EACF;EAEA,IAAI,MAAM,UAAU,MAAM,YAAY,YAAY,oBAAoB,GAAG;GACvE,MAAM,KAAK,GAAG,CAAC,CAAC,KAAK,EAAE,OAAO,oBAAoB,CAAC;GACnD;EACF;EAEA,IAAI;GAEF,OAAO,EAAE,YADU,KAAK,QAAQ,KAAK,EACvB;EAChB,SAAS,OAAO;GACd,MAAM,KAAK,GAAG,CAAC,CAAC,KAAK,EAAE,OAAO,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,EAAE,CAAC;EACxF;CACF,CACF;AACF;;;;AC1CA,MAAM,qBAAqB,IAAI,IAAI;CAAC;CAAa;CAAO;AAAkB,CAAC;;;;;;;AAQ3E,SAAS,kBAAkB,SAAsC;CAC/D,OAAO,YAAY,UAAa,mBAAmB,IAAI,OAAO;AAChE;;;;;;;AAQA,SAAgB,sBACd,QACA,MACM;CACN,OAAO,QAAQ,aAAa,OAAO,SAAyB,UAAwB;EAClF,IAAI,CAAC,KAAK,cAAc,KAAK,CAAC,kBAAkB,QAAQ,OAAO,aAAa,GAG1E,OAAO,MAAM,KAAK,GAAG,CAAC,CAAC,KAAK;CAEhC,CAAC;AACH;;;;;ACzBA,SAAgB,kBAAkB,QAAyB,MAAqC;CAC9F,OAAO,IAAgC,aAAa,OAAO,YACzD,KAAK,UAAU,SAAS;EAAE,OAAO,QAAQ,MAAM;EAAO,QAAQ,QAAQ,MAAM;CAAO,CAAC,CACtF;AACF;;;;ACRA,MAAM,gBACJ;;AAGF,SAAgB,mBAAmB,QAAyB,MAAqC;CAC/F,OAAO,IAAI,cAAc,YAAY,KAAK,UAAU,UAAU,CAAC;CAE/D,OAAO,IAAgC,kBAAkB,OAAO,SAAS,UAAU;EACjF,MAAM,OAAO,KAAK,UAAU,QAAQ,QAAQ,OAAO,EAAE;EAErD,IAAI,CAAC,MAAM;GACT,MAAM,KAAK,GAAG,CAAC,CAAC,KAAK;GACrB;EACF;EAEA,MAAM,EAAE,MAAM,GAAG,SAAS;EAC1B,OAAO;CACT,CAAC;CAED,OAAO,IAAgC,uBAAuB,OAAO,SAAS,UAAU;EACtF,MAAM,OAAO,KAAK,UAAU,QAAQ,QAAQ,OAAO,EAAE;EAErD,IAAI,CAAC,QAAQ,CAAC,KAAK,MAAM;GACvB,MAAM,KAAK,GAAG,CAAC,CAAC,KAAK;GACrB;EACF;EAEA,MACG,OAAO,2BAA2B,aAAa,CAAC,CAChD,OAAO,0BAA0B,SAAS,CAAC,CAC3C,OAAO,gBAAgB,0BAA0B,CAAC,CAClD,KAAK,KAAK,IAAI;CACnB,CAAC;AACH;;;;;AChCA,SAAgB,uBACd,QACA,MACM;CACN,OAAO,IAAI,iBAAiB,YAAY,KAAK,UAAU,aAAa,CAAC;CAErE,OAAO,IAAgC,qBAAqB,OAAO,SAAS,UAAU;EACpF,MAAM,QAAQ,KAAK,UAAU,WAAW,QAAQ,OAAO,EAAE;EAEzD,IAAI,CAAC,OAAO;GACV,MAAM,KAAK,GAAG,CAAC,CAAC,KAAK;GACrB;EACF;EAEA,OAAO;CACT,CAAC;CAED,OAAO,OAAO,iBAAiB,OAAO,UAAU,UAAU;EACxD,KAAK,UAAU,MAAM;EACrB,MAAM,KAAK,GAAG,CAAC,CAAC,KAAK;CACvB,CAAC;AACH;;;;;ACrBA,SAAgB,oBAAoB,QAAyB,MAAqC;CAChG,OAAO,IAAI,eAAe,YAAa,KAAK,aAAa,KAAK,WAAW,IAAI,CAAC,CAAE;AAClF;;;;ACHA,MAAM,mBAAmB;;;;;;;AAQzB,SAAgB,oBAAoB,QAAyB,MAAqC;CAChG,OAAO,IAAI,eAAe,OAAO,SAAS,UAAU;EAClD,MAAM,OAAO;EACb,MAAM,MAAM,MAAM;EAElB,IAAI,UAAU,KAAK;GACjB,gBAAgB;GAChB,iBAAiB;GACjB,YAAY;EACd,CAAC;EAED,MAAM,UAAU,KAAK,UAAU,WAAW,UAAU;GAClD,IAAI,MAAM,UAAU,MAAM,KAAK,UAAU,KAAK,UAAU,MAAM,IAAI,EAAE,KAAK;EAC3E,CAAC;EAED,MAAM,YAAY,kBAAkB,IAAI,MAAM,YAAY,GAAG,gBAAgB;EAC7E,UAAU,MAAM;EAEhB,QAAQ,IAAI,GAAG,eAAe;GAC5B,cAAc,SAAS;GACvB,QAAQ;EACV,CAAC;CACH,CAAC;AACH;;;;AC9BA,IAAI;;AAGJ,SAAS,cAAc,KAAsB;CAC3C,MAAM,YAAYA,kBAAK,KAAK,KAAK,MAAM,YAAY;CACnD,MAAM,cAAcA,kBAAK,KAAK,KAAK,cAAc;CAEjD,IAAI,yBAAY,SAAS,KAAK,yBAAY,WAAW,GACnD,OAAO;CAGT,IAAI;EAEF,OADe,KAAK,gCAAmB,aAAa,MAAM,CAC9C,CAAC,CAAC,SAAS;CACzB,QAAQ;EACN,OAAO;CACT;AACF;;;;;;;AAQA,SAAgB,gBAAwB;CACtC,IAAI,cACF,OAAO;CAGT,IAAI,MAAMA,kBAAK,iFAAqC,CAAC;CAErD,OAAO,MAAM;EACX,IAAI,cAAc,GAAG,GAAG;GACtB,eAAeA,kBAAK,KAAK,KAAK,IAAI;GAClC,OAAO;EACT;EAEA,MAAM,SAASA,kBAAK,QAAQ,GAAG;EAC/B,IAAI,WAAW,KACb,MAAM,IAAI,MACR,8IAGF;EAGF,MAAM;CACR;AACF;;;;AChDA,MAAM,sBAA8C;CAClD,UAAU;CACV,WAAW;AACb;AAEA,SAAS,SAAS,OAAqB,MAAc,aAA2B;CAC9E,MACG,OAAO,iBAAiB,UAAU,CAAC,CACnC,OAAO,gBAAgB,WAAW,CAAC,CACnC,+BAAkB,IAAI,CAAC;AAC5B;;;;;;;AAQA,SAAgB,iBAAiB,QAA+B;CAC9D,MAAM,cAAc,UAAmB,UAA8B;EACnE,MAAM,SAAS,cAAc;EAC7B,SAAS,OAAOC,kBAAK,KAAK,QAAQ,YAAY,GAAG,0BAA0B;CAC7E;CAEA,OAAO,IAAI,KAAK,UAAU;CAE1B,OAAO,IAAkC,kBAAkB,SAAS,UAAU;EAC5E,MAAM,cAAc,oBAAoB,QAAQ,OAAO;EAEvD,IAAI,CAAC,aAAa;GAChB,MAAM,KAAK,GAAG,CAAC,CAAC,OAAO,iBAAiB,UAAU,CAAC,CAAC,KAAK;GACzD;EACF;EAEA,MAAM,SAAS,cAAc;EAC7B,SAAS,OAAOA,kBAAK,KAAK,QAAQ,QAAQ,OAAO,IAAI,GAAG,WAAW;CACrE,CAAC;AACH;;;;;;;;;;ACtBA,SAAgB,oBAAoB,QAAyB,MAAqC;CAChG,OAAO,SACL,OAAO,aAAa;EAClB,sBAAsB,UAAU,IAAI;EAEpC,SAAS,iBAAiB,OAAqB,UAAU,UAAU;GACjE,MAAM,KAAK,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,EAAE,OAAO,MAAM,QAAQ,CAAC;EACnE,CAAC;EAED,iBAAiB,QAAQ;EACzB,uBAAuB,UAAU,IAAI;EACrC,yBAAyB,UAAU,IAAI;EACvC,mBAAmB,UAAU,IAAI;EACjC,kBAAkB,UAAU,IAAI;EAChC,oBAAoB,UAAU,IAAI;EAClC,qBAAqB,UAAU,IAAI;EACnC,oBAAoB,UAAU,IAAI;CACpC,GACA,EAAE,QAAQ,KAAK,QAAQ,KAAK,CAC9B;AACF"}