@workflow/next 5.0.0-beta.4 → 5.0.0-beta.41

package/dist/socket-server.js

@@ -1,154 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.serializeMessage = serializeMessage;
-exports.parseMessage = parseMessage;
-exports.createSocketServer = createSocketServer;
-const node_crypto_1 = require("node:crypto");
-const promises_1 = require("node:fs/promises");
-const node_net_1 = require("node:net");
-const node_path_1 = require("node:path");
-/**
- * Magic preamble that must prefix all messages to authenticate them as workflow messages.
- * This prevents accidental processing of messages from port scanners or other local processes.
- */
-const MESSAGE_PREAMBLE = 'WF:';
-/**
- * Generate a random authentication token for this server session.
- * Clients must include this token in all messages.
- */
-function generateAuthToken() {
-    return (0, node_crypto_1.randomBytes)(16).toString('hex');
-}
-function getDefaultSocketInfoFilePath() {
-    return (0, node_path_1.join)(process.cwd(), '.next', 'cache', 'workflow-socket.json');
-}
-/**
- * Serialize a message with authentication preamble
- */
-function serializeMessage(message, authToken) {
-    return `${MESSAGE_PREAMBLE}${authToken}:${JSON.stringify(message)}\n`;
-}
-/**
- * Parse and authenticate a message from the socket
- * Returns the parsed message if valid, null otherwise
- */
-function parseMessage(line, authToken) {
-    const trimmed = line.trim();
-    if (!trimmed) {
-        return null;
-    }
-    // Check for preamble
-    if (!trimmed.startsWith(MESSAGE_PREAMBLE)) {
-        console.warn('Received message without valid preamble, ignoring');
-        return null;
-    }
-    // Extract auth token and payload
-    const withoutPreamble = trimmed.slice(MESSAGE_PREAMBLE.length);
-    const colonIndex = withoutPreamble.indexOf(':');
-    if (colonIndex === -1) {
-        console.warn('Received message without auth token separator, ignoring');
-        return null;
-    }
-    const messageToken = withoutPreamble.slice(0, colonIndex);
-    const payload = withoutPreamble.slice(colonIndex + 1);
-    // Verify auth token
-    if (messageToken !== authToken) {
-        console.warn('Received message with invalid auth token, ignoring');
-        return null;
-    }
-    // Parse JSON payload
-    try {
-        return JSON.parse(payload);
-    }
-    catch (error) {
-        console.error('Failed to parse socket message JSON:', error);
-        return null;
-    }
-}
-/**
- * Create a TCP socket server for loader<->builder communication.
- * Returns a SocketIO interface for broadcasting messages and the auth token.
- *
- * SECURITY: Server listens on 127.0.0.1 (localhost only) and uses
- * message authentication to prevent processing of unauthorized messages.
- */
-async function createSocketServer(config) {
-    const authToken = generateAuthToken();
-    const clients = new Set();
-    let buildTriggered = false;
-    const server = (0, node_net_1.createServer)((socket) => {
-        socket.setNoDelay(true);
-        clients.add(socket);
-        // Send build-complete if build already finished (production mode)
-        if (buildTriggered && !config.isDevServer) {
-            socket.write(serializeMessage({ type: 'build-complete' }, authToken));
-        }
-        let buffer = '';
-        socket.on('data', (data) => {
-            buffer += data.toString();
-            // Process complete messages (newline-delimited)
-            let newlineIndex = buffer.indexOf('\n');
-            while (newlineIndex !== -1) {
-                const line = buffer.slice(0, newlineIndex);
-                buffer = buffer.slice(newlineIndex + 1);
-                newlineIndex = buffer.indexOf('\n');
-                const message = parseMessage(line, authToken);
-                if (!message) {
-                    continue;
-                }
-                if (message.type === 'file-discovered') {
-                    config.onFileDiscovered(message.filePath, message.hasWorkflow, message.hasStep, message.hasSerde);
-                }
-                else if (message.type === 'trigger-build') {
-                    config.onTriggerBuild();
-                }
-            }
-        });
-        socket.on('end', () => {
-            clients.delete(socket);
-        });
-        socket.on('error', (err) => {
-            console.error('Socket error:', err);
-            clients.delete(socket);
-        });
-    });
-    // Listen on random available port (localhost only)
-    await new Promise((resolve, reject) => {
-        server.once('error', reject);
-        server.listen(0, '127.0.0.1', () => {
-            const address = server.address();
-            if (address && typeof address === 'object') {
-                const socketInfoFilePath = config.socketInfoFilePath || getDefaultSocketInfoFilePath();
-                void (async () => {
-                    try {
-                        await (0, promises_1.mkdir)((0, node_path_1.dirname)(socketInfoFilePath), { recursive: true });
-                        await (0, promises_1.writeFile)(socketInfoFilePath, JSON.stringify({
-                            port: address.port,
-                            authToken,
-                        }, null, 2));
-                        process.env.WORKFLOW_SOCKET_INFO_PATH = socketInfoFilePath;
-                        process.env.WORKFLOW_SOCKET_PORT = String(address.port);
-                        process.env.WORKFLOW_SOCKET_AUTH = authToken;
-                        resolve();
-                    }
-                    catch (error) {
-                        reject(error);
-                    }
-                })();
-                return;
-            }
-            reject(new Error('Failed to obtain workflow socket server address'));
-        });
-    });
-    return {
-        emit: (_event) => {
-            buildTriggered = true;
-            const message = serializeMessage({ type: 'build-complete' }, authToken);
-            for (const client of clients) {
-                client.write(message);
-            }
-        },
-        getAuthToken: () => authToken,
-    };
-}
-//# sourceMappingURL=socket-server.js.map

package/dist/socket-server.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"socket-server.js","sourceRoot":"","sources":["../src/socket-server.ts"],"names":[],"mappings":";;AA+DA,4CAKC;AAMD,oCAuCC;AASD,gDAsGC;AAhOD,6CAA0C;AAC1C,+CAAoD;AACpD,uCAAkE;AAClE,yCAA0C;AAE1C;;;GAGG;AACH,MAAM,gBAAgB,GAAG,KAAK,CAAC;AAE/B;;;GAGG;AACH,SAAS,iBAAiB;IACxB,OAAO,IAAA,yBAAW,EAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;AACzC,CAAC;AAuCD,SAAS,4BAA4B;IACnC,OAAO,IAAA,gBAAI,EAAC,OAAO,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,sBAAsB,CAAC,CAAC;AACvE,CAAC;AAED;;GAEG;AACH,SAAgB,gBAAgB,CAC9B,OAAsB,EACtB,SAAiB;IAEjB,OAAO,GAAG,gBAAgB,GAAG,SAAS,IAAI,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC;AACxE,CAAC;AAED;;;GAGG;AACH,SAAgB,YAAY,CAC1B,IAAY,EACZ,SAAiB;IAEjB,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;IAC5B,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,IAAI,CAAC;IACd,CAAC;IAED,qBAAqB;IACrB,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,gBAAgB,CAAC,EAAE,CAAC;QAC1C,OAAO,CAAC,IAAI,CAAC,mDAAmD,CAAC,CAAC;QAClE,OAAO,IAAI,CAAC;IACd,CAAC;IAED,iCAAiC;IACjC,MAAM,eAAe,GAAG,OAAO,CAAC,KAAK,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC;IAC/D,MAAM,UAAU,GAAG,eAAe,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAChD,IAAI,UAAU,KAAK,CAAC,CAAC,EAAE,CAAC;QACtB,OAAO,CAAC,IAAI,CAAC,yDAAyD,CAAC,CAAC;QACxE,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,YAAY,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC;IAC1D,MAAM,OAAO,GAAG,eAAe,CAAC,KAAK,CAAC,UAAU,GAAG,CAAC,CAAC,CAAC;IAEtD,oBAAoB;IACpB,IAAI,YAAY,KAAK,SAAS,EAAE,CAAC;QAC/B,OAAO,CAAC,IAAI,CAAC,oDAAoD,CAAC,CAAC;QACnE,OAAO,IAAI,CAAC;IACd,CAAC;IAED,qBAAqB;IACrB,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CAAkB,CAAC;IAC9C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,KAAK,CAAC,sCAAsC,EAAE,KAAK,CAAC,CAAC;QAC7D,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACI,KAAK,UAAU,kBAAkB,CACtC,MAA0B;IAE1B,MAAM,SAAS,GAAG,iBAAiB,EAAE,CAAC;IACtC,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;IAClC,IAAI,cAAc,GAAG,KAAK,CAAC;IAE3B,MAAM,MAAM,GAAW,IAAA,uBAAY,EAAC,CAAC,MAAc,EAAE,EAAE;QACrD,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;QACxB,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAEpB,kEAAkE;QAClE,IAAI,cAAc,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;YAC1C,MAAM,CAAC,KAAK,CAAC,gBAAgB,CAAC,EAAE,IAAI,EAAE,gBAAgB,EAAE,EAAE,SAAS,CAAC,CAAC,CAAC;QACxE,CAAC;QAED,IAAI,MAAM,GAAG,EAAE,CAAC;QAEhB,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAY,EAAE,EAAE;YACjC,MAAM,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YAE1B,gDAAgD;YAChD,IAAI,YAAY,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;YACxC,OAAO,YAAY,KAAK,CAAC,CAAC,EAAE,CAAC;gBAC3B,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,YAAY,CAAC,CAAC;gBAC3C,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,YAAY,GAAG,CAAC,CAAC,CAAC;gBACxC,YAAY,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;gBAEpC,MAAM,OAAO,GAAG,YAAY,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;gBAC9C,IAAI,CAAC,OAAO,EAAE,CAAC;oBACb,SAAS;gBACX,CAAC;gBAED,IAAI,OAAO,CAAC,IAAI,KAAK,iBAAiB,EAAE,CAAC;oBACvC,MAAM,CAAC,gBAAgB,CACrB,OAAO,CAAC,QAAQ,EAChB,OAAO,CAAC,WAAW,EACnB,OAAO,CAAC,OAAO,EACf,OAAO,CAAC,QAAQ,CACjB,CAAC;gBACJ,CAAC;qBAAM,IAAI,OAAO,CAAC,IAAI,KAAK,eAAe,EAAE,CAAC;oBAC5C,MAAM,CAAC,cAAc,EAAE,CAAC;gBAC1B,CAAC;YACH,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,MAAM,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE;YACpB,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QACzB,CAAC,CAAC,CAAC;QAEH,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAU,EAAE,EAAE;YAChC,OAAO,CAAC,KAAK,CAAC,eAAe,EAAE,GAAG,CAAC,CAAC;YACpC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QACzB,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,mDAAmD;IACnD,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QAC1C,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC7B,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,WAAW,EAAE,GAAG,EAAE;YACjC,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,EAAE,CAAC;YACjC,IAAI,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;gBAC3C,MAAM,kBAAkB,GACtB,MAAM,CAAC,kBAAkB,IAAI,4BAA4B,EAAE,CAAC;gBAC9D,KAAK,CAAC,KAAK,IAAI,EAAE;oBACf,IAAI,CAAC;wBACH,MAAM,IAAA,gBAAK,EAAC,IAAA,mBAAO,EAAC,kBAAkB,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;wBAC9D,MAAM,IAAA,oBAAS,EACb,kBAAkB,EAClB,IAAI,CAAC,SAAS,CACZ;4BACE,IAAI,EAAE,OAAO,CAAC,IAAI;4BAClB,SAAS;yBACV,EACD,IAAI,EACJ,CAAC,CACF,CACF,CAAC;wBACF,OAAO,CAAC,GAAG,CAAC,yBAAyB,GAAG,kBAAkB,CAAC;wBAC3D,OAAO,CAAC,GAAG,CAAC,oBAAoB,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;wBACxD,OAAO,CAAC,GAAG,CAAC,oBAAoB,GAAG,SAAS,CAAC;wBAC7C,OAAO,EAAE,CAAC;oBACZ,CAAC;oBAAC,OAAO,KAAK,EAAE,CAAC;wBACf,MAAM,CAAC,KAAK,CAAC,CAAC;oBAChB,CAAC;gBACH,CAAC,CAAC,EAAE,CAAC;gBACL,OAAO;YACT,CAAC;YACD,MAAM,CAAC,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC,CAAC;QACvE,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,OAAO;QACL,IAAI,EAAE,CAAC,MAAwB,EAAE,EAAE;YACjC,cAAc,GAAG,IAAI,CAAC;YACtB,MAAM,OAAO,GAAG,gBAAgB,CAAC,EAAE,IAAI,EAAE,gBAAgB,EAAE,EAAE,SAAS,CAAC,CAAC;YACxE,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;gBAC7B,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YACxB,CAAC;QACH,CAAC;QACD,YAAY,EAAE,GAAG,EAAE,CAAC,SAAS;KAC9B,CAAC;AACJ,CAAC","sourcesContent":["import { randomBytes } from 'node:crypto';\nimport { mkdir, writeFile } from 'node:fs/promises';\nimport { createServer, type Server, type Socket } from 'node:net';\nimport { dirname, join } from 'node:path';\n\n/**\n * Magic preamble that must prefix all messages to authenticate them as workflow messages.\n * This prevents accidental processing of messages from port scanners or other local processes.\n */\nconst MESSAGE_PREAMBLE = 'WF:';\n\n/**\n * Generate a random authentication token for this server session.\n * Clients must include this token in all messages.\n */\nfunction generateAuthToken(): string {\n  return randomBytes(16).toString('hex');\n}\n\n/**\n * Message types that can be sent between loader and builder\n */\nexport type SocketMessage =\n  | {\n      type: 'file-discovered';\n      filePath: string;\n      hasWorkflow: boolean;\n      hasStep: boolean;\n      hasSerde: boolean;\n    }\n  | { type: 'trigger-build' }\n  | { type: 'build-complete' };\n\n/**\n * Configuration for the socket server\n */\nexport interface SocketServerConfig {\n  isDevServer: boolean;\n  onFileDiscovered: (\n    filePath: string,\n    hasWorkflow: boolean,\n    hasStep: boolean,\n    hasSerde: boolean\n  ) => void;\n  onTriggerBuild: () => void;\n  socketInfoFilePath?: string;\n}\n\n/**\n * Interface for the socket IO instance returned by createSocketServer\n */\nexport interface SocketIO {\n  emit(event: 'build-complete'): void;\n  getAuthToken(): string;\n}\n\nfunction getDefaultSocketInfoFilePath(): string {\n  return join(process.cwd(), '.next', 'cache', 'workflow-socket.json');\n}\n\n/**\n * Serialize a message with authentication preamble\n */\nexport function serializeMessage(\n  message: SocketMessage,\n  authToken: string\n): string {\n  return `${MESSAGE_PREAMBLE}${authToken}:${JSON.stringify(message)}\\n`;\n}\n\n/**\n * Parse and authenticate a message from the socket\n * Returns the parsed message if valid, null otherwise\n */\nexport function parseMessage(\n  line: string,\n  authToken: string\n): SocketMessage | null {\n  const trimmed = line.trim();\n  if (!trimmed) {\n    return null;\n  }\n\n  // Check for preamble\n  if (!trimmed.startsWith(MESSAGE_PREAMBLE)) {\n    console.warn('Received message without valid preamble, ignoring');\n    return null;\n  }\n\n  // Extract auth token and payload\n  const withoutPreamble = trimmed.slice(MESSAGE_PREAMBLE.length);\n  const colonIndex = withoutPreamble.indexOf(':');\n  if (colonIndex === -1) {\n    console.warn('Received message without auth token separator, ignoring');\n    return null;\n  }\n\n  const messageToken = withoutPreamble.slice(0, colonIndex);\n  const payload = withoutPreamble.slice(colonIndex + 1);\n\n  // Verify auth token\n  if (messageToken !== authToken) {\n    console.warn('Received message with invalid auth token, ignoring');\n    return null;\n  }\n\n  // Parse JSON payload\n  try {\n    return JSON.parse(payload) as SocketMessage;\n  } catch (error) {\n    console.error('Failed to parse socket message JSON:', error);\n    return null;\n  }\n}\n\n/**\n * Create a TCP socket server for loader<->builder communication.\n * Returns a SocketIO interface for broadcasting messages and the auth token.\n *\n * SECURITY: Server listens on 127.0.0.1 (localhost only) and uses\n * message authentication to prevent processing of unauthorized messages.\n */\nexport async function createSocketServer(\n  config: SocketServerConfig\n): Promise<SocketIO> {\n  const authToken = generateAuthToken();\n  const clients = new Set<Socket>();\n  let buildTriggered = false;\n\n  const server: Server = createServer((socket: Socket) => {\n    socket.setNoDelay(true);\n    clients.add(socket);\n\n    // Send build-complete if build already finished (production mode)\n    if (buildTriggered && !config.isDevServer) {\n      socket.write(serializeMessage({ type: 'build-complete' }, authToken));\n    }\n\n    let buffer = '';\n\n    socket.on('data', (data: Buffer) => {\n      buffer += data.toString();\n\n      // Process complete messages (newline-delimited)\n      let newlineIndex = buffer.indexOf('\\n');\n      while (newlineIndex !== -1) {\n        const line = buffer.slice(0, newlineIndex);\n        buffer = buffer.slice(newlineIndex + 1);\n        newlineIndex = buffer.indexOf('\\n');\n\n        const message = parseMessage(line, authToken);\n        if (!message) {\n          continue;\n        }\n\n        if (message.type === 'file-discovered') {\n          config.onFileDiscovered(\n            message.filePath,\n            message.hasWorkflow,\n            message.hasStep,\n            message.hasSerde\n          );\n        } else if (message.type === 'trigger-build') {\n          config.onTriggerBuild();\n        }\n      }\n    });\n\n    socket.on('end', () => {\n      clients.delete(socket);\n    });\n\n    socket.on('error', (err: Error) => {\n      console.error('Socket error:', err);\n      clients.delete(socket);\n    });\n  });\n\n  // Listen on random available port (localhost only)\n  await new Promise<void>((resolve, reject) => {\n    server.once('error', reject);\n    server.listen(0, '127.0.0.1', () => {\n      const address = server.address();\n      if (address && typeof address === 'object') {\n        const socketInfoFilePath =\n          config.socketInfoFilePath || getDefaultSocketInfoFilePath();\n        void (async () => {\n          try {\n            await mkdir(dirname(socketInfoFilePath), { recursive: true });\n            await writeFile(\n              socketInfoFilePath,\n              JSON.stringify(\n                {\n                  port: address.port,\n                  authToken,\n                },\n                null,\n                2\n              )\n            );\n            process.env.WORKFLOW_SOCKET_INFO_PATH = socketInfoFilePath;\n            process.env.WORKFLOW_SOCKET_PORT = String(address.port);\n            process.env.WORKFLOW_SOCKET_AUTH = authToken;\n            resolve();\n          } catch (error) {\n            reject(error);\n          }\n        })();\n        return;\n      }\n      reject(new Error('Failed to obtain workflow socket server address'));\n    });\n  });\n\n  return {\n    emit: (_event: 'build-complete') => {\n      buildTriggered = true;\n      const message = serializeMessage({ type: 'build-complete' }, authToken);\n      for (const client of clients) {\n        client.write(message);\n      }\n    },\n    getAuthToken: () => authToken,\n  };\n}\n"]}