@wopr-network/defcon 1.1.0 → 1.2.0

package/dist/src/execution/cli.js

@@ -22,6 +22,7 @@ import { DrizzleInvocationRepository } from "../repositories/drizzle/invocation.
 import * as schema from "../repositories/drizzle/schema.js";
 import { entities, entityHistory, flowDefinitions, flowVersions, gateDefinitions, gateResults, invocations, stateDefinitions, transitionRules, } from "../repositories/drizzle/schema.js";
 import { DrizzleTransitionLogRepository } from "../repositories/drizzle/transition-log.repo.js";
+import { WebSocketBroadcaster } from "../ws/broadcast.js";
 import { createMcpServer, startStdioServer } from "./mcp-server.js";
 import { provisionWorktree } from "./provision-worktree.js";
 const DB_DEFAULT = process.env.DEFCON_DB_PATH ?? "./defcon.db";
@@ -244,6 +245,14 @@ program
             workerToken,
             corsOrigin: restCorsResult.origin ?? undefined,
         });
+        if (adminToken) {
+            const wsBroadcaster = new WebSocketBroadcaster({
+                server: restHttpServer,
+                engine,
+                adminToken,
+            });
+            eventEmitter.register(wsBroadcaster);
+        }
         restHttpServer.listen(httpPort, httpHost, () => {
             const addr = restHttpServer?.address();
             const boundPort = addr && typeof addr === "object" ? addr.port : httpPort;

package/dist/src/ws/broadcast.d.ts

@@ -0,0 +1,21 @@
+import type http from "node:http";
+import type { Engine } from "../engine/engine.js";
+import type { EngineEvent, IEventBusAdapter } from "../engine/event-types.js";
+export interface WebSocketBroadcasterDeps {
+    server: http.Server;
+    engine: Engine;
+    adminToken: string;
+}
+export declare class WebSocketBroadcaster implements IEventBusAdapter {
+    private wss;
+    private engine;
+    private adminToken;
+    constructor(deps: WebSocketBroadcasterDeps);
+    private isWsPath;
+    private authenticate;
+    private tokenMatches;
+    private sendSnapshot;
+    emit(event: EngineEvent): Promise<void>;
+    get clientCount(): number;
+    close(): Promise<void>;
+}

package/dist/src/ws/broadcast.js

@@ -0,0 +1,105 @@
+import { createHash, timingSafeEqual } from "node:crypto";
+import { WebSocketServer } from "ws";
+export class WebSocketBroadcaster {
+    wss;
+    engine;
+    adminToken;
+    constructor(deps) {
+        this.engine = deps.engine;
+        this.adminToken = deps.adminToken;
+        this.wss = new WebSocketServer({ noServer: true });
+        deps.server.on("upgrade", (req, socket, head) => {
+            if (!this.isWsPath(req.url)) {
+                socket.destroy();
+                return;
+            }
+            if (!this.authenticate(req)) {
+                socket.write("HTTP/1.1 401 Unauthorized\r\n\r\n");
+                socket.destroy();
+                return;
+            }
+            this.wss.handleUpgrade(req, socket, head, (ws) => {
+                this.wss.emit("connection", ws, req);
+            });
+        });
+        this.wss.on("connection", (ws) => {
+            this.sendSnapshot(ws);
+            ws.on("close", () => {
+                // Client removed automatically from wss.clients on close
+            });
+        });
+    }
+    isWsPath(url) {
+        if (!url)
+            return false;
+        const pathname = url.split("?")[0];
+        return pathname === "/ws";
+    }
+    authenticate(req) {
+        // Try Authorization header first
+        const authHeader = req.headers.authorization;
+        if (authHeader) {
+            const lower = authHeader.toLowerCase();
+            if (lower.startsWith("bearer ")) {
+                const token = authHeader.slice(7).trim();
+                if (token && this.tokenMatches(token))
+                    return true;
+            }
+        }
+        // Try ?token= query param
+        const url = new URL(req.url ?? "/", "http://localhost");
+        const queryToken = url.searchParams.get("token");
+        if (queryToken && this.tokenMatches(queryToken))
+            return true;
+        return false;
+    }
+    tokenMatches(callerToken) {
+        const hashA = createHash("sha256").update(this.adminToken).digest();
+        const hashB = createHash("sha256").update(callerToken).digest();
+        return timingSafeEqual(hashA, hashB);
+    }
+    async sendSnapshot(ws) {
+        try {
+            const status = await this.engine.getStatus();
+            const msg = JSON.stringify({
+                type: "snapshot",
+                payload: { status },
+                timestamp: new Date().toISOString(),
+            });
+            if (ws.readyState === ws.OPEN) {
+                ws.send(msg);
+            }
+        }
+        catch {
+            if (ws.readyState === ws.OPEN) {
+                ws.send(JSON.stringify({
+                    type: "snapshot",
+                    payload: { status: { flows: {}, activeInvocations: 0, pendingClaims: 0 } },
+                    timestamp: new Date().toISOString(),
+                }));
+            }
+        }
+    }
+    async emit(event) {
+        const { type, emittedAt, ...rest } = event;
+        const msg = JSON.stringify({
+            type,
+            payload: rest,
+            timestamp: emittedAt.toISOString(),
+        });
+        for (const client of this.wss.clients) {
+            if (client.readyState === client.OPEN) {
+                client.send(msg);
+            }
+        }
+    }
+    get clientCount() {
+        return this.wss.clients.size;
+    }
+    close() {
+        for (const client of this.wss.clients) {
+            client.terminate();
+        }
+        return new Promise((resolve) => this.wss.close(() => resolve()));
+    }
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@wopr-network/defcon",
-  "version": "1.1.0",
+  "version": "1.2.0",
   "type": "module",
   "packageManager": "pnpm@9.15.4",
   "engines": {
@@ -45,12 +45,14 @@
     "commander": "^14.0.3",
     "drizzle-orm": "^0.45.1",
     "handlebars": "^4.7.8",
+    "ws": "^8.19.0",
     "zod": "^4.3.6"
   },
   "devDependencies": {
     "@biomejs/biome": "^2.4.4",
     "@types/better-sqlite3": "^7.6.13",
     "@types/node": "^25.3.3",
+    "@types/ws": "^8.18.1",
     "@vitest/coverage-v8": "^4.0.18",
     "drizzle-kit": "^0.31.4",
     "tsx": "^4.21.0",