rterm-backend 3.0.2 → 3.0.4

package/bin/gybackend.cjs

@@ -347146,6 +347146,9 @@ function createObservabilityBridge(deps) {
     dashboardState: async () => requireObs(deps).dashboard.state(),
     /** dashboard summary line. */
     dashboardSummary: async () => requireObs(deps).dashboard.summary(),
+    /** monitor-status diagnostic: why stats aren't displaying per terminal. */
+    monitorStatus: async () => requireObs(deps).monitorStatus.report(),
+    monitorStatusSummary: async () => ({ summary: requireObs(deps).monitorStatus.summary() }),
     // ── secrets vault (metadata only — never values) ────────────────────────
     secretsList: async (params) => requireObs(deps).secrets.list(params),
     secretsSet: async (params) => {
@@ -347291,6 +347294,8 @@ var OBSERVABILITY_METHODS = [
   "observability:metricsPrometheus",
   "observability:dashboardState",
   "observability:dashboardSummary",
+  "observability:monitorStatus",
+  "observability:monitorStatusSummary",
   "observability:secretsList",
   "observability:secretsSet",
   "observability:secretsDelete",
@@ -347678,6 +347683,21 @@ async function getCloudInventory(args, context2) {
   emit9(context2, "get_cloud_inventory", args, out);
   return out;
 }
+var getMonitorStatusSchema = external_exports.object({
+  format: external_exports.enum(["report", "summary"]).optional().describe("'report' = full per-terminal JSON; 'summary' = compact text (default).")
+});
+async function getMonitorStatus(args, context2) {
+  const { o, msg } = obs(context2, "get_monitor_status", args);
+  if (!o) return msg;
+  let out;
+  if (args.format === "report") {
+    out = JSON.stringify(o.monitorStatus.report(), null, 2);
+  } else {
+    out = o.monitorStatus.summary();
+  }
+  emit9(context2, "get_monitor_status", args, out);
+  return out;
+}
 var getLiveDashboardSchema = external_exports.object({
   action: external_exports.enum(["state", "subscribers"]).describe("'state' = current dashboard state; 'subscribers' = connected client count.")
 });
@@ -348149,6 +348169,11 @@ function buildToolsForModel(readFileSupport) {
       description: "Cloud resource inventory (AWS/GCP/Azure) \u2014 summary counts by provider/state, query instances (filter by provider/state/region), or pull fresh inventory.",
       schema: getCloudInventorySchema
     },
+    {
+      name: "get_monitor_status",
+      description: "Monitor-status diagnostic \u2014 reports why stats aren't displaying per terminal (publisher wired, session exists, collection stuck in-flight, platform, last-collect age).",
+      schema: getMonitorStatusSchema
+    },
     {
       name: "get_live_dashboard",
       description: "Live multi-client dashboard \u2014 read the current unified dashboard state/summary, or the number of connected dashboard subscribers.",
@@ -348232,6 +348257,7 @@ var toolImplementations = {
   manageGitops,
   managePlaybookVersion,
   getCloudInventory,
+  getMonitorStatus,
   getLiveDashboard,
   ingestApmSpans,
   getApmSummary,
@@ -386599,6 +386625,32 @@ function renderLiveDashboardHtml(state, opts = {}) {
   return renderDashboardHtml(state, { ...opts, live: true, refreshSeconds: 0 });
 }
 
+// ../../packages/backend/src/services/dashboard/dashboardHttpAuth.ts
+function isLoopbackAddress(raw) {
+  return /^(127\.|::1|::ffff:127\.)/.test(raw) || raw === "" || raw === "localhost";
+}
+function extractDashboardToken(req) {
+  const authz = typeof req.headers.authorization === "string" ? req.headers.authorization : "";
+  const bearer = /^Bearer\s+(.+)$/i.exec(authz)?.[1]?.trim();
+  const headerTok = typeof req.headers["x-access-token"] === "string" ? String(req.headers["x-access-token"]).trim() : "";
+  let queryTok = "";
+  try {
+    queryTok = new URL(req.url ?? "/", "http://localhost").searchParams.get("access_token")?.trim() ?? "";
+  } catch {
+  }
+  return bearer || headerTok || queryTok;
+}
+async function dashboardHttpAuthorized(req, verifyToken) {
+  if (isLoopbackAddress(String(req.socket?.remoteAddress ?? ""))) return true;
+  const token = extractDashboardToken(req);
+  if (!token) return false;
+  try {
+    return await verifyToken(token);
+  } catch {
+    return false;
+  }
+}
+
 // ../../packages/backend/src/services/ResourceMonitorService.ts
 var import_os2 = __toESM(require("os"), 1);
 var DEFAULT_POLL_INTERVAL_MS = 2e3;
@@ -386842,6 +386894,7 @@ var ResourceMonitorService = class {
       }
       const sourceTerminalId = session.sourceTerminalId || terminalIds[0];
       const snapshot = await this.collectSnapshot(sourceTerminalId);
+      session.lastCollectAt = Date.now();
       if (this.publisher) {
         terminalIds.forEach((terminalId) => {
           this.publisher?.(
@@ -388704,27 +388757,6 @@ async function startGyBackend() {
     gatewayService.broadcastRaw("skills:updated", result.skills);
     gatewayService.broadcastRaw("memory:updated", result.memory);
   };
-  const dashboardHttpAuthorized = async (req) => {
-    const remote = String(req.socket?.remoteAddress ?? "");
-    if (/^(127\.|::1|::ffff:127\.)/.test(remote) || remote === "" || remote === "localhost") {
-      return true;
-    }
-    const authz = typeof req.headers.authorization === "string" ? req.headers.authorization : "";
-    const bearer = /^Bearer\s+(.+)$/i.exec(authz)?.[1]?.trim();
-    const headerTok = typeof req.headers["x-access-token"] === "string" ? String(req.headers["x-access-token"]).trim() : "";
-    let queryTok = "";
-    try {
-      queryTok = new URL(req.url ?? "/", "http://localhost").searchParams.get("access_token")?.trim() ?? "";
-    } catch {
-    }
-    const token = bearer || headerTok || queryTok;
-    if (!token) return false;
-    try {
-      return await accessTokenService.verifyToken(token);
-    } catch {
-      return false;
-    }
-  };
   const wsGatewayControlService = new WebSocketGatewayControlService({
     createAdapter: (host, port, ipFilter) => new WebSocketGatewayAdapter(gatewayService, {
       host,
@@ -388742,7 +388774,7 @@ async function startGyBackend() {
         {
           path: "/dashboard",
           handler: async (req, res) => {
-            if (!await dashboardHttpAuthorized(req)) {
+            if (!await dashboardHttpAuthorized(req, (t) => accessTokenService.verifyToken(t))) {
               res.writeHead(401, { "content-type": "text/plain; charset=utf-8" });
               res.end("missing/invalid access token");
               return;
@@ -388760,7 +388792,7 @@ async function startGyBackend() {
         {
           path: "/dashboard/json",
           handler: async (req, res) => {
-            if (!await dashboardHttpAuthorized(req)) {
+            if (!await dashboardHttpAuthorized(req, (t) => accessTokenService.verifyToken(t))) {
               res.writeHead(401, { "content-type": "text/plain; charset=utf-8" });
               res.end("missing/invalid access token");
               return;

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "rterm-backend",
-  "version": "3.0.2",
-  "description": "rterm-backend — the headless AI-native backend for RTerm (dual-published as neuralOS). run RTerm-as-a-service (AI agent, SSH/WinRM/Serial/local terminals, fleet orchestration, advanced automation, SRE observability, Netdata, AWS APerf, plugin system, governance/audit, Prometheus/OTel metrics export, secrets vault, on-call paging, AI cost budgets, GitOps, cloud inventory, APM/DEM/Infra/ETW ingestion, AgentSpan durable-agent bridge). The RTerm desktop app stays RTerm; neuralOS is the standalone backend daemon. Dual-published as rterm-backend. v3.0.2: live browser dashboard at /dashboard (same-port HTTP + WS push).",
+  "version": "3.0.4",
+  "description": "rterm-backend — the headless AI-native backend for RTerm (dual-published as neuralOS). run RTerm-as-a-service (AI agent, SSH/WinRM/Serial/local terminals, fleet orchestration, advanced automation, SRE observability, Netdata, AWS APerf, plugin system, governance/audit, Prometheus/OTel metrics export, secrets vault, on-call paging, AI cost budgets, GitOps, cloud inventory, APM/DEM/Infra/ETW ingestion, AgentSpan durable-agent bridge). The RTerm desktop app stays RTerm; neuralOS is the standalone backend daemon. Dual-published as rterm-backend. v3.0.4: monitor-status diagnostic over RPC + agent tool.",
   "main": "bin/gybackend.cjs",
   "bin": {
     "gybackend": "bin/gybackend.cjs",