mn-ws-server 0.0.0-stage → 0.2.0

package/dist/server.d.ts

@@ -0,0 +1,114 @@
+import type { ServerResponse } from 'node:http';
+import { WebSocket } from 'ws';
+import { type AppDescriptor } from './apps.js';
+import { Logger } from './logger.js';
+import { Store } from './store.js';
+import { AuthHub } from './auth.js';
+/**
+ * mn-ws server —— 公网侧的 HTTP ⇄ WebSocket 桥。
+ *
+ * 一个端口同时提供：
+ *   · HTTP 面：/health /stats /clients /auth/* 以及 /<app>/* 桥接入口
+ *   · WS  面：/ws —— 与本机 client half 的长连接
+ *
+ * ## 三层鉴权（缺一不可）
+ *
+ *   L1 通道层：谁能接入这个桥
+ *      · 设备令牌（go-ah 统一登录签发，带 userId）→ 只能访问**自己名下**的桥
+ *      · 静态门禁 token（MN_WS_TOKEN）→ 等价于全量访问（共享密钥，慎用）
+ *   L2 路由层：请求的 app 必须在该桥的注册表里，且属主匹配
+ *   L3 应用层：原始 Authorization / Cookie 原样透传给 nx，nx 自己那套鉴权照常生效
+ *
+ * ## 路由表按 app 索引
+ *
+ * bridges: Map<app, {ws, bridgeId, userId, ...}>。一个 app 同时只有一个桥
+ * （后来者顶替前者）—— 同一台机器跑两份 nx 是异常状态，顶替比随机命中更可预期。
+ */
+/** server 半的构造参数。 */
+export interface ServerOptions {
+    host?: string;
+    port?: number;
+    wsPath?: string;
+    token?: string;
+    issuer?: string;
+    idpClientId?: string;
+    loginClientId?: string;
+    redirectUri?: string;
+    jwtSecret?: string;
+    authEnabled?: boolean;
+    insecure?: boolean;
+    requestTimeoutMs?: number;
+    dataDir?: string | null;
+    logLevel?: string;
+}
+/** 一条已注册的桥。 */
+interface Bridge {
+    ws: WebSocket;
+    bridgeId: string;
+    userId: string;
+    isGate: boolean;
+    apps: AppDescriptor[];
+    meta: AppDescriptor | undefined;
+    connectedAt: string;
+    ip: string | undefined;
+}
+/** 一条等待中的请求。 */
+interface Pending {
+    res: ServerResponse;
+    timer: NodeJS.Timeout;
+    bridgeId: string;
+    app: string;
+    startedAt: number;
+    status?: number;
+    resHeaders?: Record<string, unknown>;
+    chunks?: Buffer[];
+}
+/** 一条 WS 连接。 */
+interface PeerMeta {
+    peerId: string;
+    bridgeId: string | null;
+    userId: string | null;
+    registered: boolean;
+    connectedAt: string;
+    ip: string | undefined;
+}
+export declare function createServer(userConfig?: ServerOptions): {
+    config: {
+        host: string;
+        port: number;
+        wsPath: string;
+        token: string;
+        issuer: string;
+        idpClientId: string;
+        loginClientId: string;
+        redirectUri: string;
+        jwtSecret: string;
+        authEnabled: boolean;
+        insecure: boolean;
+        requestTimeoutMs: number;
+        dataDir: string | null;
+        logLevel: string;
+    };
+    logger: Logger;
+    store: Store;
+    auth: AuthHub;
+    bridges: Map<string, Bridge>;
+    knownApps: Set<string>;
+    pending: Map<string, Pending>;
+    peers: Map<WebSocket, PeerMeta>;
+    stats: {
+        connections: number;
+        requestsIn: number;
+        forwarded: number;
+        offline: number;
+        rejected: number;
+        errors: number;
+        bytesIn: number;
+        bytesOut: number;
+    };
+    listen: () => Promise<number>;
+    close: () => Promise<void>;
+    APP_HEADER: string;
+};
+export {};
+//# sourceMappingURL=server.d.ts.map

package/dist/server.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../src/server.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAmB,cAAc,EAAwB,MAAM,WAAW,CAAC;AACvF,OAAO,EAAmB,SAAS,EAAE,MAAM,IAAI,CAAC;AAQhD,OAAO,EAA2B,KAAK,aAAa,EAAE,MAAM,WAAW,CAAC;AACxE,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AACrC,OAAO,EAAE,KAAK,EAAE,MAAM,YAAY,CAAC;AACnC,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEpC;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,qBAAqB;AACrB,MAAM,WAAW,aAAa;IAC5B,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,eAAe;AACf,UAAU,MAAM;IACd,EAAE,EAAE,SAAS,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,OAAO,CAAC;IAChB,IAAI,EAAE,aAAa,EAAE,CAAC;IACtB,IAAI,EAAE,aAAa,GAAG,SAAS,CAAC;IAChC,WAAW,EAAE,MAAM,CAAC;IACpB,EAAE,EAAE,MAAM,GAAG,SAAS,CAAC;CACxB;AAED,gBAAgB;AAChB,UAAU,OAAO;IACf,GAAG,EAAE,cAAc,CAAC;IACpB,KAAK,EAAE,MAAM,CAAC,OAAO,CAAC;IACtB,QAAQ,EAAE,MAAM,CAAC;IACjB,GAAG,EAAE,MAAM,CAAC;IACZ,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACrC,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;CACnB;AAED,gBAAgB;AAChB,UAAU,QAAQ;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,UAAU,EAAE,OAAO,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;IACpB,EAAE,EAAE,MAAM,GAAG,SAAS,CAAC;CACxB;AAOD,wBAAgB,YAAY,CAAC,UAAU,GAAE,aAAkB;;cAvDlD,MAAM;cACN,MAAM;gBACJ,MAAM;eACP,MAAM;gBACL,MAAM;qBACD,MAAM;uBACJ,MAAM;qBACR,MAAM;mBACR,MAAM;qBACJ,OAAO;kBACV,OAAO;0BACC,MAAM;iBACf,MAAM,GAAG,IAAI;kBACZ,MAAM;;;;;;;;;;;;;;;;;;;kBA4rBE,OAAO,CAAC,MAAM,CAAC;iBAmBV,OAAO,CAAC,IAAI,CAAC;;EAoCtC"}