Problem: the hexagonal refactor churns the backend tree for nine more phases; the UI delivery stack (web/ SPA, cmd/desktop Wails wrapper, compose/web image) must move to its own repo first so doc/layout rewrites land once on a backend-only tree. Change: - New repo git.hubris.network/dtoro/oikos-web (v0.33.0): web/, desktop/ (updateURL repointed to oikos-web releases), compose/, own CI (web + desktop jobs), own deploy script (CI-green gate, TOCTOU guard, version-tagged images, prune-to-3), own webhook receiver on :9798 + launchd unit, own compose project publishing the same 8091:80. - Cutover executed on mac-mini in order: oikos stack's web service stopped+removed, oikos-web project brought up on 8091; outer Caddy untouched (targets the published port) — serving + Authentik flow + /wails 404 quirk verified post-cutover. - Stripped from oikos: web/, cmd/desktop/, compose/web/, desktop CI workflow, ci.yml web job, Makefile ui/desktop/desktop-package/install targets, the compose web service, oikos-web from deploy.sh's fallback prune list; wails + go-keyring dropped from go.mod, vendor synced. - README / CONTRIBUTING / AGENTS.md / .agents dev+operations docs now point at the new repo; mbse + mascot design docs carry a path note. Risk: production SPA serving depends on the new pipeline now; rollback is versioned-image re-up of the old web service from a pre-split checkout (port 8091). Desktop builds installed before the split still check dtoro/oikos releases — one manual reinstall, noted in the oikos-web release notes. Verification: go vet, make test (race), make generate-check, golangci (no new findings; baseline down 400→365); post-cutover curls — localhost:8091 200, /wails/runtime.js 404, outer Caddy 302 Authentik.
119 lines
3.8 KiB
JavaScript
119 lines
3.8 KiB
JavaScript
'use strict';
|
|
|
|
var anchors = require('../doc/anchors.js');
|
|
var visit = require('../visit.js');
|
|
var identity = require('./identity.js');
|
|
var Node = require('./Node.js');
|
|
var toJS = require('./toJS.js');
|
|
|
|
class Alias extends Node.NodeBase {
|
|
constructor(source) {
|
|
super(identity.ALIAS);
|
|
this.source = source;
|
|
Object.defineProperty(this, 'tag', {
|
|
set() {
|
|
throw new Error('Alias nodes cannot have tags');
|
|
}
|
|
});
|
|
}
|
|
/**
|
|
* Resolve the value of this alias within `doc`, finding the last
|
|
* instance of the `source` anchor before this node.
|
|
*/
|
|
resolve(doc, ctx) {
|
|
if (ctx?.maxAliasCount === 0)
|
|
throw new ReferenceError('Alias resolution is disabled');
|
|
let nodes;
|
|
if (ctx?.aliasResolveCache) {
|
|
nodes = ctx.aliasResolveCache;
|
|
}
|
|
else {
|
|
nodes = [];
|
|
visit.visit(doc, {
|
|
Node: (_key, node) => {
|
|
if (identity.isAlias(node) || identity.hasAnchor(node))
|
|
nodes.push(node);
|
|
}
|
|
});
|
|
if (ctx)
|
|
ctx.aliasResolveCache = nodes;
|
|
}
|
|
let found = undefined;
|
|
for (const node of nodes) {
|
|
if (node === this)
|
|
break;
|
|
if (node.anchor === this.source)
|
|
found = node;
|
|
}
|
|
return found;
|
|
}
|
|
toJSON(_arg, ctx) {
|
|
if (!ctx)
|
|
return { source: this.source };
|
|
const { anchors, doc, maxAliasCount } = ctx;
|
|
const source = this.resolve(doc, ctx);
|
|
if (!source) {
|
|
const msg = `Unresolved alias (the anchor must be set before the alias): ${this.source}`;
|
|
throw new ReferenceError(msg);
|
|
}
|
|
let data = anchors.get(source);
|
|
if (!data) {
|
|
// Resolve anchors for Node.prototype.toJS()
|
|
toJS.toJS(source, null, ctx);
|
|
data = anchors.get(source);
|
|
}
|
|
/* istanbul ignore if */
|
|
if (data?.res === undefined) {
|
|
const msg = 'This should not happen: Alias anchor was not resolved?';
|
|
throw new ReferenceError(msg);
|
|
}
|
|
if (maxAliasCount >= 0) {
|
|
data.count += 1;
|
|
if (data.aliasCount === 0)
|
|
data.aliasCount = getAliasCount(doc, source, anchors);
|
|
if (data.count * data.aliasCount > maxAliasCount) {
|
|
const msg = 'Excessive alias count indicates a resource exhaustion attack';
|
|
throw new ReferenceError(msg);
|
|
}
|
|
}
|
|
return data.res;
|
|
}
|
|
toString(ctx, _onComment, _onChompKeep) {
|
|
const src = `*${this.source}`;
|
|
if (ctx) {
|
|
anchors.anchorIsValid(this.source);
|
|
if (ctx.options.verifyAliasOrder && !ctx.anchors.has(this.source)) {
|
|
const msg = `Unresolved alias (the anchor must be set before the alias): ${this.source}`;
|
|
throw new Error(msg);
|
|
}
|
|
if (ctx.implicitKey)
|
|
return `${src} `;
|
|
}
|
|
return src;
|
|
}
|
|
}
|
|
function getAliasCount(doc, node, anchors) {
|
|
if (identity.isAlias(node)) {
|
|
const source = node.resolve(doc);
|
|
const anchor = anchors && source && anchors.get(source);
|
|
return anchor ? anchor.count * anchor.aliasCount : 0;
|
|
}
|
|
else if (identity.isCollection(node)) {
|
|
let count = 0;
|
|
for (const item of node.items) {
|
|
const c = getAliasCount(doc, item, anchors);
|
|
if (c > count)
|
|
count = c;
|
|
}
|
|
return count;
|
|
}
|
|
else if (identity.isPair(node)) {
|
|
const kc = getAliasCount(doc, node.key, anchors);
|
|
const vc = getAliasCount(doc, node.value, anchors);
|
|
return Math.max(kc, vc);
|
|
}
|
|
return 1;
|
|
}
|
|
|
|
exports.Alias = Alias;
|