@wopr-network/defcon 1.0.3 → 1.2.0

package/dist/src/ws/broadcast.js

@@ -0,0 +1,105 @@
+import { createHash, timingSafeEqual } from "node:crypto";
+import { WebSocketServer } from "ws";
+export class WebSocketBroadcaster {
+    wss;
+    engine;
+    adminToken;
+    constructor(deps) {
+        this.engine = deps.engine;
+        this.adminToken = deps.adminToken;
+        this.wss = new WebSocketServer({ noServer: true });
+        deps.server.on("upgrade", (req, socket, head) => {
+            if (!this.isWsPath(req.url)) {
+                socket.destroy();
+                return;
+            }
+            if (!this.authenticate(req)) {
+                socket.write("HTTP/1.1 401 Unauthorized\r\n\r\n");
+                socket.destroy();
+                return;
+            }
+            this.wss.handleUpgrade(req, socket, head, (ws) => {
+                this.wss.emit("connection", ws, req);
+            });
+        });
+        this.wss.on("connection", (ws) => {
+            this.sendSnapshot(ws);
+            ws.on("close", () => {
+                // Client removed automatically from wss.clients on close
+            });
+        });
+    }
+    isWsPath(url) {
+        if (!url)
+            return false;
+        const pathname = url.split("?")[0];
+        return pathname === "/ws";
+    }
+    authenticate(req) {
+        // Try Authorization header first
+        const authHeader = req.headers.authorization;
+        if (authHeader) {
+            const lower = authHeader.toLowerCase();
+            if (lower.startsWith("bearer ")) {
+                const token = authHeader.slice(7).trim();
+                if (token && this.tokenMatches(token))
+                    return true;
+            }
+        }
+        // Try ?token= query param
+        const url = new URL(req.url ?? "/", "http://localhost");
+        const queryToken = url.searchParams.get("token");
+        if (queryToken && this.tokenMatches(queryToken))
+            return true;
+        return false;
+    }
+    tokenMatches(callerToken) {
+        const hashA = createHash("sha256").update(this.adminToken).digest();
+        const hashB = createHash("sha256").update(callerToken).digest();
+        return timingSafeEqual(hashA, hashB);
+    }
+    async sendSnapshot(ws) {
+        try {
+            const status = await this.engine.getStatus();
+            const msg = JSON.stringify({
+                type: "snapshot",
+                payload: { status },
+                timestamp: new Date().toISOString(),
+            });
+            if (ws.readyState === ws.OPEN) {
+                ws.send(msg);
+            }
+        }
+        catch {
+            if (ws.readyState === ws.OPEN) {
+                ws.send(JSON.stringify({
+                    type: "snapshot",
+                    payload: { status: { flows: {}, activeInvocations: 0, pendingClaims: 0 } },
+                    timestamp: new Date().toISOString(),
+                }));
+            }
+        }
+    }
+    async emit(event) {
+        const { type, emittedAt, ...rest } = event;
+        const msg = JSON.stringify({
+            type,
+            payload: rest,
+            timestamp: emittedAt.toISOString(),
+        });
+        for (const client of this.wss.clients) {
+            if (client.readyState === client.OPEN) {
+                client.send(msg);
+            }
+        }
+    }
+    get clientCount() {
+        return this.wss.clients.size;
+    }
+    close() {
+        for (const client of this.wss.clients) {
+            client.terminate();
+        }
+        return new Promise((resolve) => this.wss.close(() => resolve()));
+    }
+}

package/drizzle/0011_modern_anita_blake.sql

@@ -0,0 +1,19 @@
+PRAGMA foreign_keys=OFF;--> statement-breakpoint
+CREATE TABLE `__new_gate_definitions` (
+	`id` text PRIMARY KEY NOT NULL,
+	`name` text NOT NULL,
+	`type` text NOT NULL,
+	`command` text,
+	`function_ref` text,
+	`api_config` text,
+	`timeout_ms` integer,
+	`failure_prompt` text,
+	`timeout_prompt` text
+);
+--> statement-breakpoint
+INSERT INTO `__new_gate_definitions`("id", "name", "type", "command", "function_ref", "api_config", "timeout_ms", "failure_prompt", "timeout_prompt") SELECT "id", "name", "type", "command", "function_ref", "api_config", "timeout_ms", "failure_prompt", "timeout_prompt" FROM `gate_definitions`;--> statement-breakpoint
+DROP TABLE `gate_definitions`;--> statement-breakpoint
+ALTER TABLE `__new_gate_definitions` RENAME TO `gate_definitions`;--> statement-breakpoint
+PRAGMA foreign_keys=ON;--> statement-breakpoint
+CREATE UNIQUE INDEX `gate_definitions_name_unique` ON `gate_definitions` (`name`);--> statement-breakpoint
+ALTER TABLE `flow_definitions` ADD `paused` integer DEFAULT 0;