iobroker.bee 0.0.0-stage → 0.2.2

package/build/lib/remote.js

@@ -0,0 +1,211 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.TunnelClient = exports.ACCESS_LABEL = void 0;
+exports.findTargets = findTargets;
+exports.describeTargets = describeTargets;
+exports.chooseTarget = chooseTarget;
+exports.trustedTunnelUrl = trustedTunnelUrl;
+const node_net_1 = __importDefault(require("node:net"));
+const node_tls_1 = __importDefault(require("node:tls"));
+const ws_1 = __importDefault(require("ws"));
+const tunnel_1 = require("./tunnel");
+exports.ACCESS_LABEL = { admin: 'admin', vis: 'vis-2', console: 'Konsole' };
+/**
+ * Local web interfaces for a kind: the enabled admin instances, or web instances for vis-2 (only with vis-2
+ * installed), on this host, in the order of the instance number.
+ */
+async function findTargets(adapter, kind) {
+    if (kind === 'console' || (kind === 'vis' && !(await adapter.getForeignObjectAsync('system.adapter.vis-2')))) {
+        return [];
+    }
+    const name = kind === 'admin' ? 'admin' : 'web';
+    const res = await adapter.getObjectViewAsync('system', 'instance', {
+        startkey: `system.adapter.${name}.`,
+        endkey: `system.adapter.${name}.香`,
+    });
+    return res.rows
+        .map(r => r.value)
+        .filter((o) => !!o?.common.enabled && o.common.host === adapter.host)
+        .sort((a, b) => a._id.localeCompare(b._id, undefined, { numeric: true }))
+        .map(obj => {
+        const native = obj.native;
+        // an interface listening on all addresses is reached over loopback
+        const bind = (native.bind || '').trim();
+        const defaultUser = (native.defaultUser || 'admin').replace(/^system\.user\./, '');
+        return {
+            instance: obj._id.replace(/^system\.adapter\./, ''),
+            host: !bind || bind === '0.0.0.0' || bind === '::' ? '127.0.0.1' : bind,
+            port: parseInt(String(native.port || (kind === 'admin' ? 8081 : 8082)), 10),
+            secure: !!native.secure,
+            auth: !!native.auth,
+            ...(native.auth ? {} : { defaultUser }),
+        };
+    });
+}
+/** What the server learns about the targets: without the local address */
+function describeTargets(targets) {
+    return targets.map(({ host: _host, ...t }) => t);
+}
+/** The instance asked for, or the first one; null if it is not among the targets */
+function chooseTarget(targets, instance) {
+    return (instance ? targets.find(t => t.instance === instance) : targets[0]) ?? null;
+}
+/** Is the tunnel URL one of our own server? The job came over the broker, this is a second check. */
+function trustedTunnelUrl(url, serverUrls) {
+    let u;
+    try {
+        u = new URL(url);
+    }
+    catch {
+        return false;
+    }
+    const local = u.hostname === 'localhost' || u.hostname === '127.0.0.1';
+    if (u.protocol !== 'wss:' && !(u.protocol === 'ws:' && local)) {
+        return false;
+    }
+    return serverUrls.some(s => {
+        try {
+            return new URL(s).hostname === u.hostname;
+        }
+        catch {
+            return false;
+        }
+    });
+}
+const MAX_BACKOFF = 60_000;
+/** The server pings every 25 s; without a ping for this long the connection is dead */
+const DEAD_AFTER = 90_000;
+/** Longest session the agent accepts, whatever the server says */
+const MAX_SESSION = 4 * 3600_000;
+/** Tunnel of one access session. Reconnects after a connection loss until the session expires. */
+class TunnelClient {
+    req;
+    opts;
+    ws = null;
+    mux = null;
+    stopped = false;
+    backoff = 2000;
+    retryTimer = null;
+    endTimer;
+    watchdog = null;
+    lastPing = 0;
+    constructor(req, opts) {
+        this.req = req;
+        this.opts = opts;
+        const lifetime = Math.max(0, Math.min(req.expiresAt - Date.now(), MAX_SESSION));
+        this.endTimer = setTimeout(() => this.stop('expired'), lifetime);
+    }
+    /** Payload bytes so far */
+    get bytes() {
+        return (this.mux?.bytesIn ?? 0) + (this.mux?.bytesOut ?? 0);
+    }
+    start() {
+        this.connect();
+    }
+    stop(reason) {
+        if (this.stopped) {
+            return;
+        }
+        this.stopped = true;
+        clearTimeout(this.endTimer);
+        if (this.retryTimer) {
+            clearTimeout(this.retryTimer);
+        }
+        if (this.watchdog) {
+            clearInterval(this.watchdog);
+        }
+        this.mux?.close('Fernzugriff beendet');
+        if (this.ws && this.ws.readyState === ws_1.default.OPEN) {
+            this.ws.close(1000, 'agent stop');
+        }
+        else {
+            this.ws?.terminate();
+        }
+        this.opts.onEnd(this, reason);
+    }
+    connect() {
+        if (this.stopped) {
+            return;
+        }
+        const headers = { authorization: `Bearer ${this.req.ticket}` };
+        if (this.opts.refusal) {
+            headers[tunnel_1.REFUSE_HEADER] = encodeURIComponent(this.opts.refusal);
+        }
+        const ws = new ws_1.default(this.req.url, {
+            headers,
+            ca: this.opts.ca,
+            handshakeTimeout: 30_000,
+            // mobile data: compress, but cheaply (level 1) for the CPU of the device
+            perMessageDeflate: { threshold: 1024, zlibDeflateOptions: { level: 1 } },
+        });
+        this.ws = ws;
+        ws.on('open', () => {
+            this.backoff = 2000;
+            this.lastPing = Date.now();
+            this.mux = new tunnel_1.Mux(frame => ws.send(frame), stream => this.onStream(stream));
+            this.watchdog ??= setInterval(() => {
+                if (this.ws?.readyState === ws_1.default.OPEN && Date.now() - this.lastPing > DEAD_AFTER) {
+                    this.opts.log.info('Remote access: no sign of the server, reconnecting');
+                    this.ws.terminate();
+                }
+            }, 15_000);
+            this.opts.log.debug(`Remote access ${this.req.id}: tunnel open`);
+        });
+        ws.on('ping', () => (this.lastPing = Date.now()));
+        ws.on('message', (data, isBinary) => {
+            if (isBinary) {
+                this.mux?.receive(data);
+            }
+        });
+        ws.on('unexpected-response', (_request, res) => {
+            res.resume();
+            // 410: session unknown or ended, 403: refusal accepted; neither gets better by trying again
+            const reason = this.opts.refusal ? 'refused' : `server answered HTTP ${res.statusCode}`;
+            this.stop(reason);
+        });
+        ws.on('error', err => this.opts.log.debug(`Remote access ${this.req.id}: ${err.message}`));
+        ws.on('close', code => {
+            this.mux?.close('Verbindung zum Server unterbrochen');
+            this.mux = null;
+            if (this.ws !== ws || this.stopped) {
+                return;
+            }
+            if (code === tunnel_1.CLOSE.ENDED || code === tunnel_1.CLOSE.REPLACED) {
+                this.stop(code === tunnel_1.CLOSE.ENDED ? 'ended by the server' : 'replaced');
+                return;
+            }
+            const delay = this.backoff;
+            this.backoff = Math.min(this.backoff * 2, MAX_BACKOFF);
+            this.opts.log.info(`Remote access: connection lost, reconnecting in ${Math.round(delay / 1000)} s`);
+            this.retryTimer = setTimeout(() => {
+                this.retryTimer = null;
+                this.connect();
+            }, delay);
+        });
+    }
+    onStream(stream) {
+        if (this.opts.handler) {
+            this.opts.handler(stream);
+            return;
+        }
+        const t = this.opts.target;
+        if (!t) {
+            stream.destroy(new Error('no target'));
+            return;
+        }
+        // a local HTTPS interface has its own, usually self-signed certificate: loopback, nothing to verify
+        const sock = t.secure
+            ? node_tls_1.default.connect({ host: t.host, port: t.port, rejectUnauthorized: false })
+            : node_net_1.default.connect(t.port, t.host);
+        stream.pipe(sock);
+        sock.pipe(stream);
+        // a regular end runs through the pipes in both directions (half close); only errors cut off
+        sock.on('error', err => stream.destroy(err));
+        stream.on('error', () => sock.destroy());
+    }
+}
+exports.TunnelClient = TunnelClient;
+//# sourceMappingURL=remote.js.map

package/build/lib/remote.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"remote.js","sourceRoot":"","sources":["../../src/lib/remote.ts"],"names":[],"mappings":";;;;;;AAwBA,kCAiCC;AAGD,0CAEC;AAGD,oCAEC;AAGD,4CAkBC;AAxFD,wDAA2B;AAC3B,wDAA2B;AAC3B,4CAA2B;AAE3B,qCAAwE;AAc3D,QAAA,YAAY,GAA+B,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC;AAE7G;;;GAGG;AACI,KAAK,UAAU,WAAW,CAAC,OAAyB,EAAE,IAAgB;IACzE,IAAI,IAAI,KAAK,SAAS,IAAI,CAAC,IAAI,KAAK,KAAK,IAAI,CAAC,CAAC,MAAM,OAAO,CAAC,qBAAqB,CAAC,sBAAsB,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3G,OAAO,EAAE,CAAC;IACd,CAAC;IACD,MAAM,IAAI,GAAG,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC;IAChD,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,kBAAkB,CAAC,QAAQ,EAAE,UAAU,EAAE;QAC/D,QAAQ,EAAE,kBAAkB,IAAI,GAAG;QACnC,MAAM,EAAE,kBAAkB,IAAI,IAAI;KACrC,CAAC,CAAC;IACH,OAAO,GAAG,CAAC,IAAI;SACV,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAA4C,CAAC;SACxD,MAAM,CAAC,CAAC,CAAC,EAAgC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,OAAO,IAAI,CAAC,CAAC,MAAM,CAAC,IAAI,KAAK,OAAO,CAAC,IAAI,CAAC;SAClG,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,GAAG,EAAE,SAAS,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;SACxE,GAAG,CAAC,GAAG,CAAC,EAAE;QACP,MAAM,MAAM,GAAG,GAAG,CAAC,MAMlB,CAAC;QACF,mEAAmE;QACnE,MAAM,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QACxC,MAAM,WAAW,GAAG,CAAC,MAAM,CAAC,WAAW,IAAI,OAAO,CAAC,CAAC,OAAO,CAAC,iBAAiB,EAAE,EAAE,CAAC,CAAC;QACnF,OAAO;YACH,QAAQ,EAAE,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,oBAAoB,EAAE,EAAE,CAAC;YACnD,IAAI,EAAE,CAAC,IAAI,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI;YACvE,IAAI,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,CAAC;YAC3E,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM;YACvB,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,IAAI;YACnB,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC;SAC1C,CAAC;IACN,CAAC,CAAC,CAAC;AACX,CAAC;AAED,0EAA0E;AAC1E,SAAgB,eAAe,CAAC,OAAuB;IACnD,OAAO,OAAO,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;AACrD,CAAC;AAED,oFAAoF;AACpF,SAAgB,YAAY,CAAC,OAAuB,EAAE,QAA4B;IAC9E,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC;AACxF,CAAC;AAED,qGAAqG;AACrG,SAAgB,gBAAgB,CAAC,GAAW,EAAE,UAAoB;IAC9D,IAAI,CAAM,CAAC;IACX,IAAI,CAAC;QACD,CAAC,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;IACrB,CAAC;IAAC,MAAM,CAAC;QACL,OAAO,KAAK,CAAC;IACjB,CAAC;IACD,MAAM,KAAK,GAAG,CAAC,CAAC,QAAQ,KAAK,WAAW,IAAI,CAAC,CAAC,QAAQ,KAAK,WAAW,CAAC;IACvE,IAAI,CAAC,CAAC,QAAQ,KAAK,MAAM,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,KAAK,KAAK,IAAI,KAAK,CAAC,EAAE,CAAC;QAC5D,OAAO,KAAK,CAAC;IACjB,CAAC;IACD,OAAO,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE;QACvB,IAAI,CAAC;YACD,OAAO,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,KAAK,CAAC,CAAC,QAAQ,CAAC;QAC9C,CAAC;QAAC,MAAM,CAAC;YACL,OAAO,KAAK,CAAC;QACjB,CAAC;IACL,CAAC,CAAC,CAAC;AACP,CAAC;AAeD,MAAM,WAAW,GAAG,MAAM,CAAC;AAC3B,uFAAuF;AACvF,MAAM,UAAU,GAAG,MAAM,CAAC;AAC1B,kEAAkE;AAClE,MAAM,WAAW,GAAG,CAAC,GAAG,QAAQ,CAAC;AAEjC,kGAAkG;AAClG,MAAa,YAAY;IAWR;IACQ;IAXb,EAAE,GAAqB,IAAI,CAAC;IAC5B,GAAG,GAAe,IAAI,CAAC;IACvB,OAAO,GAAG,KAAK,CAAC;IAChB,OAAO,GAAG,IAAI,CAAC;IACf,UAAU,GAA0B,IAAI,CAAC;IAChC,QAAQ,CAAiB;IAClC,QAAQ,GAA0B,IAAI,CAAC;IACvC,QAAQ,GAAG,CAAC,CAAC;IAErB,YACa,GAAkB,EACV,IAAyB;QADjC,QAAG,GAAH,GAAG,CAAe;QACV,SAAI,GAAJ,IAAI,CAAqB;QAE1C,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,EAAE,WAAW,CAAC,CAAC,CAAC;QAChF,IAAI,CAAC,QAAQ,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,QAAQ,CAAC,CAAC;IACrE,CAAC;IAED,2BAA2B;IAC3B,IAAI,KAAK;QACL,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,OAAO,IAAI,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,QAAQ,IAAI,CAAC,CAAC,CAAC;IAChE,CAAC;IAED,KAAK;QACD,IAAI,CAAC,OAAO,EAAE,CAAC;IACnB,CAAC;IAED,IAAI,CAAC,MAAc;QACf,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACf,OAAO;QACX,CAAC;QACD,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;QACpB,YAAY,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC5B,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;YAClB,YAAY,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAClC,CAAC;QACD,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YAChB,aAAa,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACjC,CAAC;QACD,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,qBAAqB,CAAC,CAAC;QACvC,IAAI,IAAI,CAAC,EAAE,IAAI,IAAI,CAAC,EAAE,CAAC,UAAU,KAAK,YAAS,CAAC,IAAI,EAAE,CAAC;YACnD,IAAI,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;QACtC,CAAC;aAAM,CAAC;YACJ,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,CAAC;QACzB,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAClC,CAAC;IAEO,OAAO;QACX,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACf,OAAO;QACX,CAAC;QACD,MAAM,OAAO,GAA2B,EAAE,aAAa,EAAE,UAAU,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,EAAE,CAAC;QACvF,IAAI,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;YACpB,OAAO,CAAC,sBAAa,CAAC,GAAG,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACnE,CAAC;QACD,MAAM,EAAE,GAAG,IAAI,YAAS,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE;YACnC,OAAO;YACP,EAAE,EAAE,IAAI,CAAC,IAAI,CAAC,EAAE;YAChB,gBAAgB,EAAE,MAAM;YACxB,yEAAyE;YACzE,iBAAiB,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,kBAAkB,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;SAC3E,CAAC,CAAC;QACH,IAAI,CAAC,EAAE,GAAG,EAAE,CAAC;QACb,EAAE,CAAC,EAAE,CAAC,MAAM,EAAE,GAAG,EAAE;YACf,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;YACpB,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YAC3B,IAAI,CAAC,GAAG,GAAG,IAAI,YAAG,CACd,KAAK,CAAC,EAAE,CAAC,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,EACvB,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAClC,CAAC;YACF,IAAI,CAAC,QAAQ,KAAK,WAAW,CAAC,GAAG,EAAE;gBAC/B,IAAI,IAAI,CAAC,EAAE,EAAE,UAAU,KAAK,YAAS,CAAC,IAAI,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,QAAQ,GAAG,UAAU,EAAE,CAAC;oBACpF,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,oDAAoD,CAAC,CAAC;oBACzE,IAAI,CAAC,EAAE,CAAC,SAAS,EAAE,CAAC;gBACxB,CAAC;YACL,CAAC,EAAE,MAAM,CAAC,CAAC;YACX,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,iBAAiB,IAAI,CAAC,GAAG,CAAC,EAAE,eAAe,CAAC,CAAC;QACrE,CAAC,CAAC,CAAC;QACH,EAAE,CAAC,EAAE,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QAClD,EAAE,CAAC,EAAE,CAAC,SAAS,EAAE,CAAC,IAAI,EAAE,QAAQ,EAAE,EAAE;YAChC,IAAI,QAAQ,EAAE,CAAC;gBACX,IAAI,CAAC,GAAG,EAAE,OAAO,CAAC,IAAc,CAAC,CAAC;YACtC,CAAC;QACL,CAAC,CAAC,CAAC;QACH,EAAE,CAAC,EAAE,CAAC,qBAAqB,EAAE,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE;YAC3C,GAAG,CAAC,MAAM,EAAE,CAAC;YACb,4FAA4F;YAC5F,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,wBAAwB,GAAG,CAAC,UAAU,EAAE,CAAC;YACxF,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACtB,CAAC,CAAC,CAAC;QACH,EAAE,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,iBAAiB,IAAI,CAAC,GAAG,CAAC,EAAE,KAAK,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;QAC3F,EAAE,CAAC,EAAE,CAAC,OAAO,EAAE,IAAI,CAAC,EAAE;YAClB,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,oCAAoC,CAAC,CAAC;YACtD,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC;YAChB,IAAI,IAAI,CAAC,EAAE,KAAK,EAAE,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;gBACjC,OAAO;YACX,CAAC;YACD,IAAI,IAAI,KAAK,cAAK,CAAC,KAAK,IAAI,IAAI,KAAK,cAAK,CAAC,QAAQ,EAAE,CAAC;gBAClD,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,cAAK,CAAC,KAAK,CAAC,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;gBACrE,OAAO;YACX,CAAC;YACD,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC;YAC3B,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,GAAG,CAAC,EAAE,WAAW,CAAC,CAAC;YACvD,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,mDAAmD,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC;YACpG,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC,GAAG,EAAE;gBAC9B,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC;gBACvB,IAAI,CAAC,OAAO,EAAE,CAAC;YACnB,CAAC,EAAE,KAAK,CAAC,CAAC;QACd,CAAC,CAAC,CAAC;IACP,CAAC;IAEO,QAAQ,CAAC,MAAoB;QACjC,IAAI,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;YACpB,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;YAC1B,OAAO;QACX,CAAC;QACD,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC;QAC3B,IAAI,CAAC,CAAC,EAAE,CAAC;YACL,MAAM,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC;YACvC,OAAO;QACX,CAAC;QACD,oGAAoG;QACpG,MAAM,IAAI,GAAG,CAAC,CAAC,MAAM;YACjB,CAAC,CAAC,kBAAG,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,kBAAkB,EAAE,KAAK,EAAE,CAAC;YACxE,CAAC,CAAC,kBAAG,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;QAClC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAClB,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAClB,4FAA4F;QAC5F,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC;QAC7C,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;IAC7C,CAAC;CACJ;AApID,oCAoIC"}

package/build/lib/transport.js

@@ -0,0 +1,158 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.Transport = void 0;
+exports.trustedCas = trustedCas;
+const node_events_1 = require("node:events");
+const node_tls_1 = __importDefault(require("node:tls"));
+const mqtt_1 = __importDefault(require("mqtt"));
+const protocol_1 = require("./protocol");
+const util_1 = require("./util");
+const MIN_BACKOFF = 10_000;
+const MAX_BACKOFF = 24 * 3600_000;
+/**
+ * CAs the broker certificate may come from: the platform CA handed out at enrollment, plus the
+ * public root certificates shipped with Node.js (Mozilla list). So the broker can run with a
+ * certificate of the platform CA or of a public CA (e.g. Let's Encrypt), and the public roots
+ * are kept up to date with Node.js instead of a copy in this adapter.
+ */
+function trustedCas(platformCa) {
+    return [...node_tls_1.default.rootCertificates, platformCa];
+}
+class Transport extends node_events_1.EventEmitter {
+    creds;
+    opts;
+    client = null;
+    backoff = MIN_BACKOFF;
+    timer = null;
+    stopped = false;
+    constructor(creds, opts) {
+        super();
+        this.creds = creds;
+        this.opts = opts;
+    }
+    get connected() {
+        return !!this.client?.connected;
+    }
+    start() {
+        this.stopped = false;
+        this.connect();
+    }
+    async stop() {
+        this.stopped = true;
+        if (this.timer) {
+            clearTimeout(this.timer);
+            this.timer = null;
+        }
+        const client = this.client;
+        this.client = null;
+        if (client) {
+            // regular disconnect: publish offline ourselves, the Last Will only fires on connection loss
+            if (client.connected) {
+                await client
+                    .publishAsync(this.topic('state'), (0, util_1.encodePayload)(this.offline()), { qos: 1 })
+                    .catch(() => { });
+            }
+            await client.endAsync().catch(() => { });
+        }
+    }
+    topic(t) {
+        return (0, protocol_1.deviceTopic)(this.creds.tenantId, this.creds.deviceId, t);
+    }
+    offline() {
+        return { v: protocol_1.PROTOCOL_VERSION, ts: Date.now(), online: false };
+    }
+    scheduleReconnect() {
+        if (this.stopped || this.timer) {
+            return;
+        }
+        const delay = Math.round(this.backoff * (0.8 + Math.random() * 0.4));
+        this.opts.log.info(`Broker not reachable, next attempt in ${Math.round(delay / 1000)} s`);
+        this.backoff = Math.min(this.backoff * 2, MAX_BACKOFF);
+        this.timer = setTimeout(() => {
+            this.timer = null;
+            this.connect();
+        }, delay);
+    }
+    connect() {
+        if (this.stopped) {
+            return;
+        }
+        const client = mqtt_1.default.connect(this.creds.mqttUrl, {
+            clientId: this.creds.deviceId,
+            key: this.creds.key,
+            cert: this.creds.cert,
+            ca: trustedCas(this.creds.ca),
+            rejectUnauthorized: true,
+            protocolVersion: 4,
+            clean: false,
+            keepalive: this.opts.keepalive,
+            reconnectPeriod: 0,
+            connectTimeout: 30_000,
+            will: { topic: this.topic('state'), payload: (0, util_1.encodePayload)(this.offline()), qos: 1, retain: false },
+        });
+        this.client = client;
+        let rejected = false;
+        client.on('connect', () => {
+            this.backoff = MIN_BACKOFF;
+            client.subscribe([this.topic('desired'), this.topic('job'), (0, protocol_1.controlTopic)(this.creds.tenantId)], { qos: 1 }, err => err && this.opts.log.warn(`Subscribe failed: ${err.message}`));
+            this.emit('connected');
+        });
+        client.on('message', (topic, payload) => {
+            try {
+                if (topic === this.topic('desired')) {
+                    this.emit('desired', payload.length ? (0, util_1.decodePayload)(payload) : null);
+                }
+                else if (topic === (0, protocol_1.controlTopic)(this.creds.tenantId)) {
+                    if (payload.length) {
+                        this.emit('control', (0, util_1.decodePayload)(payload));
+                    }
+                }
+                else if (topic === this.topic('job')) {
+                    this.emit('job', (0, util_1.decodePayload)(payload));
+                }
+            }
+            catch (e) {
+                this.opts.log.warn(`Invalid message on ${topic}: ${e.message}`);
+            }
+        });
+        client.on('error', err => {
+            const code = err.code;
+            // CONNACK 4/5: the broker knows who we are and says no (certificate revoked)
+            if (code === 4 || code === 5 || /Not authorized|Bad username/i.test(err.message)) {
+                rejected = true;
+                this.stopped = true;
+                this.emit('rejected', err.message);
+                client.end(true);
+                return;
+            }
+            this.opts.log.debug(`MQTT: ${err.message}`);
+        });
+        client.on('close', () => {
+            if (this.client !== client) {
+                return;
+            }
+            this.emit('disconnected');
+            if (!rejected) {
+                this.scheduleReconnect();
+            }
+        });
+    }
+    async publish(topic, msg) {
+        if (!this.client?.connected) {
+            return false;
+        }
+        try {
+            await this.client.publishAsync(this.topic(topic), (0, util_1.encodePayload)(msg), { qos: 1 });
+            return true;
+        }
+        catch (e) {
+            this.opts.log.debug(`Publish ${topic} failed: ${e.message}`);
+            return false;
+        }
+    }
+}
+exports.Transport = Transport;
+//# sourceMappingURL=transport.js.map

package/build/lib/transport.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"transport.js","sourceRoot":"","sources":["../../src/lib/transport.ts"],"names":[],"mappings":";;;;;;AAwCA,gCAEC;AA1CD,6CAA2C;AAC3C,wDAA2B;AAC3B,gDAA6C;AAC7C,yCAUoB;AACpB,iCAAsD;AAiBtD,MAAM,WAAW,GAAG,MAAM,CAAC;AAC3B,MAAM,WAAW,GAAG,EAAE,GAAG,QAAQ,CAAC;AAElC;;;;;GAKG;AACH,SAAgB,UAAU,CAAC,UAAkB;IACzC,OAAO,CAAC,GAAG,kBAAG,CAAC,gBAAgB,EAAE,UAAU,CAAC,CAAC;AACjD,CAAC;AAED,MAAa,SAAU,SAAQ,0BAA6B;IAOnC;IACA;IAPb,MAAM,GAAsB,IAAI,CAAC;IACjC,OAAO,GAAG,WAAW,CAAC;IACtB,KAAK,GAA0B,IAAI,CAAC;IACpC,OAAO,GAAG,KAAK,CAAC;IAExB,YACqB,KAAqB,EACrB,IAAiD;QAElE,KAAK,EAAE,CAAC;QAHS,UAAK,GAAL,KAAK,CAAgB;QACrB,SAAI,GAAJ,IAAI,CAA6C;IAGtE,CAAC;IAED,IAAI,SAAS;QACT,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,EAAE,SAAS,CAAC;IACpC,CAAC;IAED,KAAK;QACD,IAAI,CAAC,OAAO,GAAG,KAAK,CAAC;QACrB,IAAI,CAAC,OAAO,EAAE,CAAC;IACnB,CAAC;IAED,KAAK,CAAC,IAAI;QACN,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;QACpB,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YACb,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACzB,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;QACtB,CAAC;QACD,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;QAC3B,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;QACnB,IAAI,MAAM,EAAE,CAAC;YACT,6FAA6F;YAC7F,IAAI,MAAM,CAAC,SAAS,EAAE,CAAC;gBACnB,MAAM,MAAM;qBACP,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,IAAA,oBAAa,EAAC,IAAI,CAAC,OAAO,EAAE,CAAC,EAAE,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC;qBAC5E,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;YACzB,CAAC;YACD,MAAM,MAAM,CAAC,QAAQ,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QAC5C,CAAC;IACL,CAAC;IAEO,KAAK,CAAC,CAAQ;QAClB,OAAO,IAAA,sBAAW,EAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC;IACpE,CAAC;IAEO,OAAO;QACX,OAAO,EAAE,CAAC,EAAE,2BAAgB,EAAE,EAAE,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;IAClE,CAAC;IAEO,iBAAiB;QACrB,IAAI,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YAC7B,OAAO;QACX,CAAC;QACD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,GAAG,CAAC,GAAG,GAAG,IAAI,CAAC,MAAM,EAAE,GAAG,GAAG,CAAC,CAAC,CAAC;QACrE,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,yCAAyC,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC;QAC1F,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,GAAG,CAAC,EAAE,WAAW,CAAC,CAAC;QACvD,IAAI,CAAC,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;YACzB,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;YAClB,IAAI,CAAC,OAAO,EAAE,CAAC;QACnB,CAAC,EAAE,KAAK,CAAC,CAAC;IACd,CAAC;IAEO,OAAO;QACX,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACf,OAAO;QACX,CAAC;QACD,MAAM,MAAM,GAAG,cAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE;YAC5C,QAAQ,EAAE,IAAI,CAAC,KAAK,CAAC,QAAQ;YAC7B,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG;YACnB,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI;YACrB,EAAE,EAAE,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YAC7B,kBAAkB,EAAE,IAAI;YACxB,eAAe,EAAE,CAAC;YAClB,KAAK,EAAE,KAAK;YACZ,SAAS,EAAE,IAAI,CAAC,IAAI,CAAC,SAAS;YAC9B,eAAe,EAAE,CAAC;YAClB,cAAc,EAAE,MAAM;YACtB,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,IAAA,oBAAa,EAAC,IAAI,CAAC,OAAO,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE;SACtG,CAAC,CAAC;QACH,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,QAAQ,GAAG,KAAK,CAAC;QAErB,MAAM,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE;YACtB,IAAI,CAAC,OAAO,GAAG,WAAW,CAAC;YAC3B,MAAM,CAAC,SAAS,CACZ,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,IAAA,uBAAY,EAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,EAC7E,EAAE,GAAG,EAAE,CAAC,EAAE,EACV,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,qBAAqB,GAAG,CAAC,OAAO,EAAE,CAAC,CACvE,CAAC;YACF,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QAC3B,CAAC,CAAC,CAAC;QACH,MAAM,CAAC,EAAE,CAAC,SAAS,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE;YACpC,IAAI,CAAC;gBACD,IAAI,KAAK,KAAK,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC;oBAClC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,IAAA,oBAAa,EAAiB,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;gBACzF,CAAC;qBAAM,IAAI,KAAK,KAAK,IAAA,uBAAY,EAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC;oBACrD,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;wBACjB,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,IAAA,oBAAa,EAAiB,OAAO,CAAC,CAAC,CAAC;oBACjE,CAAC;gBACL,CAAC;qBAAM,IAAI,KAAK,KAAK,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;oBACrC,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,IAAA,oBAAa,EAAa,OAAO,CAAC,CAAC,CAAC;gBACzD,CAAC;YACL,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACT,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,sBAAsB,KAAK,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;YACpE,CAAC;QACL,CAAC,CAAC,CAAC;QACH,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,CAAC,EAAE;YACrB,MAAM,IAAI,GAAI,GAAyB,CAAC,IAAI,CAAC;YAC7C,6EAA6E;YAC7E,IAAI,IAAI,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,IAAI,8BAA8B,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC/E,QAAQ,GAAG,IAAI,CAAC;gBAChB,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;gBACpB,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC;gBACnC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;gBACjB,OAAO;YACX,CAAC;YACD,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;QAChD,CAAC,CAAC,CAAC;QACH,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;YACpB,IAAI,IAAI,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;gBACzB,OAAO;YACX,CAAC;YACD,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;YAC1B,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACZ,IAAI,CAAC,iBAAiB,EAAE,CAAC;YAC7B,CAAC;QACL,CAAC,CAAC,CAAC;IACP,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,KAAiD,EAAE,GAAY;QACzE,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,SAAS,EAAE,CAAC;YAC1B,OAAO,KAAK,CAAC;QACjB,CAAC;QACD,IAAI,CAAC;YACD,MAAM,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,IAAA,oBAAa,EAAC,GAAG,CAAC,EAAE,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;YAClF,OAAO,IAAI,CAAC;QAChB,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACT,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,WAAW,KAAK,YAAY,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;YAC7D,OAAO,KAAK,CAAC;QACjB,CAAC;IACL,CAAC;CACJ;AA7ID,8BA6IC"}