diff --git a/app/(main)/gre/page.tsx b/app/(main)/gre/page.tsx index 1424be7a..18856992 100644 --- a/app/(main)/gre/page.tsx +++ b/app/(main)/gre/page.tsx @@ -321,7 +321,7 @@ function GrePageContent({ selectedServerId, selectedTunnelId, allTunnelsHref, on name: form.name.trim(), localAddress: form.localAddress.trim() || undefined, remoteAddress: form.remoteAddress.trim(), - localInnerIp: form.localInnerIp.trim() || undefined, + localInnerIp: form.localInnerIp.trim(), remoteInnerIp: form.remoteInnerIp.trim(), comment: form.comment || undefined, enabled: form.enabled, @@ -833,7 +833,7 @@ function GrePageContent({ selectedServerId, selectedTunnelId, allTunnelsHref, on {!isLive &&

Моковые пулы доступны только для просмотра.

}
- setT("localInnerIp", e.target.value)} /> + setT("localInnerIp", e.target.value)} /> setT("remoteInnerIp", e.target.value)} /> diff --git a/backend/package.json b/backend/package.json index 21d7de39..add1c91e 100644 --- a/backend/package.json +++ b/backend/package.json @@ -24,7 +24,7 @@ "test:users": "tsx src/modules/users/iface-type.test.ts && tsx src/modules/users/bindings.test.ts && tsx src/modules/users/interface-inventory.test.ts && tsx src/routes/users-catalog.test.ts", "test:pg": "tsx src/db/sql-bind.test.ts && tsx src/db/sqlite-json.test.ts && tsx src/db/traffic-flags.test.ts && tsx src/db/pg-schema.test.ts && tsx src/services/config-revisions.test.ts", "test:recursive-routes": "tsx src/routes/recursive-routes.test.ts && tsx src/services/recursive-route-catalog.test.ts && tsx src/services/recursive-apply.test.ts", - "test:config-sync": "tsx src/services/config-apply-plan.test.ts && tsx src/services/entity-snapshots.test.ts", + "test:config-sync": "tsx src/services/config-apply-plan.test.ts && tsx src/services/entity-snapshots.test.ts && tsx src/services/gre-ipv6.test.ts && tsx src/routes/gre-ipv6-validation.test.ts", "test:ros-file": "tsx src/services/ros-file-contents.test.ts && tsx src/services/mikrotik-response.test.ts", "test:scheduler": "tsx src/services/scheduler-running.test.ts && tsx src/services/scheduler-recorded-run.test.ts && tsx src/routes/scheduler.test.ts", "test:backups": "tsx src/services/backup-scheduler-run.test.ts && tsx src/services/backup-restore.test.ts && tsx src/services/backup-deletion.test.ts && tsx src/services/backup-dto.test.ts && tsx src/services/backup-storage-update.test.ts && tsx src/services/backup-job-execution.test.ts && tsx src/routes/backups-operations.test.ts && tsx src/services/s3-backup-client.test.ts", diff --git a/backend/src/routes/gre-ipv6-validation.test.ts b/backend/src/routes/gre-ipv6-validation.test.ts new file mode 100644 index 00000000..9507b789 --- /dev/null +++ b/backend/src/routes/gre-ipv6-validation.test.ts @@ -0,0 +1,18 @@ +import assert from "node:assert/strict" +import Fastify from "fastify" +import { validatorCompiler, serializerCompiler } from "@fastify/type-provider-zod" +import greRoutes from "./gre.js" + +const app = Fastify() +app.setValidatorCompiler(validatorCompiler) +app.setSerializerCompiler(serializerCompiler) +await app.register(greRoutes, { prefix: "/api" }) +for (const localInnerIp of ["fd00::1", "fd00::1/129", "fd00::1%ether1/64", "10.0.0.1/33", "bad/64", "10.0.0.1/24/x", " "]) { + for (const method of ["POST", "PATCH"] as const) { + const r = await app.inject({ method, url: "/api/gre/tunnels", payload: { serverId: "1", name: "own", remoteAddress: "192.0.2.1", localInnerIp } }) + assert.equal(r.statusCode, 400) + assert.equal(r.json().error, "Некорректное тело запроса") + } +} +await app.close() +console.log("GRE IPv6: 14 invalid POST/PATCH requests rejected before DB/RouterOS access") diff --git a/backend/src/routes/gre.ts b/backend/src/routes/gre.ts index 30dd5d78..9835eab1 100644 --- a/backend/src/routes/gre.ts +++ b/backend/src/routes/gre.ts @@ -15,6 +15,8 @@ import { planGreCreate, planGreDelete, planGreRestore, + greAddressPath, + GreRestoreConflict, } from "../services/entity-snapshots.js" import { executeRosOps } from "../services/ros-ops.js" import { @@ -32,7 +34,10 @@ const TunnelWriteSchema = z.object({ rosId: z.string().optional(), localAddress: z.string().optional(), remoteAddress: z.string().min(1), - localInnerIp: z.string().optional(), + localInnerIp: z.string().refine(value => { + if (!value) return true + try { greAddressPath(value); return true } catch { return false } + }, "Требуется IPv4/IPv6 с префиксом").optional(), remoteInnerIp: z.string().optional(), comment: z.string().optional(), enabled: z.boolean().optional(), @@ -126,7 +131,7 @@ const greRoutes: FastifyPluginAsyncZod = async (app) => { const created = state.tunnels.find((t) => t.name === tunnel.name) return reply.status(201).send(created ?? { ok: true, name: tunnel.name }) } catch (e) { - return reply.status(502).send({ error: `RouterOS: ${rosErr(e)}` }) + return reply.status(e instanceof GreRestoreConflict ? 409 : 502).send({ error: `RouterOS: ${rosErr(e)}` }) } }) @@ -144,12 +149,15 @@ const greRoutes: FastifyPluginAsyncZod = async (app) => { (body.rosId && g.rosId === body.rosId) || (body.name && g.name === body.name), ) if (!live) return reply.status(404).send({ error: "Туннель не найден" }) + if (body.rosId && body.rosId !== live.rosId) return reply.status(409).send({ error: "ID и имя GRE указывают на разные объекты" }) + if (body.name && body.name !== live.name) return reply.status(409).send({ error: "Переименование GRE требует отдельной операции" }) + const original = state.snapshot.tunnels.find(t => t.name === live.name)! const merged = tunnelFromBody({ serverId: body.serverId, name: body.name || live.name, localAddress: body.localAddress ?? live.localAddress, remoteAddress: body.remoteAddress || live.remoteAddress, - localInnerIp: body.localInnerIp ?? state.addrs.find((a) => a.interfaceName === live.name)?.address ?? "", + localInnerIp: body.localInnerIp ?? original.localInnerIp, remoteInnerIp: body.remoteInnerIp ?? state.tunnels.find(t => t.name === live.name)?.remoteInnerIp ?? "", comment: body.comment ?? live.comment, enabled: body.enabled ?? !live.disabled, @@ -161,15 +169,22 @@ const greRoutes: FastifyPluginAsyncZod = async (app) => { allowFastPath: body.allowFastPath ?? live.allowFastPath, ipsecSecret: body.ipsecSecret ?? live.ipsecSecret, }) + merged.innerAddresses = original.innerAddresses?.map(a => ({ ...a })) + if (body.localInnerIp !== undefined && body.localInnerIp !== original.localInnerIp) { + merged.innerAddresses = (merged.innerAddresses ?? []).filter(a => a.address !== original.localInnerIp) + if (body.localInnerIp && !merged.innerAddresses.some(a => a.address === body.localInnerIp)) { + merged.innerAddresses.push({ address: body.localInnerIp, disabled: false, ...(greAddressPath(body.localInnerIp) === "/ipv6/address" ? { advertise: false } : {}) }) + } + } const ops = planGreRestore( - { tunnels: state.snapshot.tunnels.map((t) => t.name === live.name ? merged : t) }, - { gre: state.gre, addrs: state.addrs }, + { tunnels: [merged] }, + { gre: [live], addrs: state.addrs.filter(a => a.interfaceName === live.name) }, ) await executeRosOps(state.client, ops) await recordGre(server, "apply") return reply.send({ ok: true }) } catch (e) { - return reply.status(502).send({ error: `RouterOS: ${rosErr(e)}` }) + return reply.status(e instanceof GreRestoreConflict ? 409 : 502).send({ error: `RouterOS: ${rosErr(e)}` }) } }) @@ -187,11 +202,12 @@ const greRoutes: FastifyPluginAsyncZod = async (app) => { (body.rosId && g.rosId === body.rosId) || (body.name && g.name === body.name), ) if (!live) return reply.status(404).send({ error: "Туннель не найден" }) + if ((body.rosId && body.rosId !== live.rosId) || (body.name && body.name !== live.name)) return reply.status(409).send({ error: "ID и имя GRE указывают на разные объекты" }) await executeRosOps(state.client, planGreDelete(live.name, { gre: state.gre, addrs: state.addrs })) await recordGre(server, "apply") return reply.send({ ok: true }) } catch (e) { - return reply.status(502).send({ error: `RouterOS: ${rosErr(e)}` }) + return reply.status(e instanceof GreRestoreConflict ? 409 : 502).send({ error: `RouterOS: ${rosErr(e)}` }) } }) @@ -223,7 +239,7 @@ const greRoutes: FastifyPluginAsyncZod = async (app) => { const next = await fetchGreState(loaded.server) return reply.send({ ok: true, tunnels: next.tunnels }) } catch (e) { - return reply.status(502).send({ error: `RouterOS: ${rosErr(e)}` }) + return reply.status(e instanceof GreRestoreConflict ? 409 : 502).send({ error: `RouterOS: ${rosErr(e)}` }) } }) } diff --git a/backend/src/services/entity-snapshots.ts b/backend/src/services/entity-snapshots.ts index 0ef0cf8c..67809b89 100644 --- a/backend/src/services/entity-snapshots.ts +++ b/backend/src/services/entity-snapshots.ts @@ -1,6 +1,7 @@ /** Канонические снапшоты и планы restore для firewall / WireGuard / GRE / IPsec. */ import { isIpsecManagedComment, isManagedIpsecModeConfig } from "./ipsec-config.js" import { readGreComment, writeGreComment } from "./gre-comment.js" +import { isIP } from "node:net" export type FirewallFamily = "ip" | "ip6" export type FirewallTable = "filter" | "nat" | "mangle" | "raw" @@ -129,6 +130,7 @@ export interface GreSnapshotTunnel { localAddress: string remoteAddress: string localInnerIp: string + innerAddresses?: GreSnapshotAddress[] remoteInnerIp: string comment: string disabled: boolean @@ -163,6 +165,40 @@ export interface GreLiveAddr { rosId: string interfaceName: string address: string + disabled?: boolean + advertise?: boolean + dynamic?: boolean + comment?: string + noDad?: boolean + fromPool?: string + eui64?: boolean +} + +export interface GreSnapshotAddress { + address: string + disabled: boolean + advertise?: boolean + comment?: string + noDad?: boolean + fromPool?: string + eui64?: boolean +} + +export class GreRestoreConflict extends Error {} + +export function greAddressPath(address: string): "/ip/address" | "/ipv6/address" { + const parts = address.split("/") + const family = isIP(parts[0] ?? "") + if (!family || address.includes("%") || parts.length !== 2 || !/^\d+$/.test(parts[1] ?? "") || Number(parts[1]) > (family === 6 ? 128 : 32)) { + throw new GreRestoreConflict("Некорректный внутренний адрес GRE: требуется IPv4/IPv6 с префиксом") + } + return family === 6 ? "/ipv6/address" : "/ip/address" +} + +export function greAddressKey(address: string): string { + const path = greAddressPath(address) + const [ip, prefix] = address.split("/") + return `${path === "/ipv6/address" ? new URL(`http://[${ip}]`).hostname : ip}/${Number(prefix)}` } // ── IPsec / IKEv2 (managed-объекты, маркер MikrotikManager:ipsec) ──────────── @@ -864,6 +900,17 @@ export function canonicalGreSnapshot(input: { localAddress: str(t.localAddress), remoteAddress: str(t.remoteAddress), localInnerIp: str(t.localInnerIp), + ...(t.innerAddresses === undefined ? {} : { + innerAddresses: t.innerAddresses.map(a => ({ + address: str(a.address), disabled: bool(a.disabled), + ...(a.comment === undefined ? {} : { comment: str(a.comment) }), + ...(greAddressPath(str(a.address)) === "/ipv6/address" ? { advertise: a.advertise === true, + ...(a.noDad === undefined ? {} : { noDad: a.noDad === true }), + ...(a.fromPool ? { fromPool: str(a.fromPool) } : {}), + ...(a.eui64 ? { eui64: true } : {}), + } : {}), + })).sort((a, b) => a.address.localeCompare(b.address)), + }), remoteInnerIp: str(t.remoteInnerIp), comment: str(t.comment), disabled: Boolean(t.disabled), @@ -913,11 +960,13 @@ export function planGreCreate(tunnel: GreSnapshotTunnel): RosWriteOp[] { const ops: RosWriteOp[] = [ { op: "put", path: "/interface/gre", body: greInterfaceBody(t) }, ] - if (t.localInnerIp) { + const addresses = t.innerAddresses ?? (t.localInnerIp ? [{ address: t.localInnerIp, disabled: false }] : []) + if (new Set(addresses.map(a => greAddressKey(a.address))).size !== addresses.length) throw new GreRestoreConflict("В ревизии GRE повторяются внутренние адреса") + for (const a of addresses) { ops.push({ op: "put", - path: "/ip/address", - body: { address: t.localInnerIp, interface: t.name }, + path: greAddressPath(a.address), + body: greAddressBody(a, t.name), }) } return ops @@ -930,8 +979,8 @@ export function planGreDelete( const want = str(name) const ops: RosWriteOp[] = [] for (const addr of current.addrs) { - if (addr.interfaceName === want) { - ops.push({ op: "delete", path: `/ip/address/${addr.rosId}` }) + if (addr.interfaceName === want && !addr.dynamic) { + ops.push({ op: "delete", path: `${greAddressPath(addr.address)}/${addr.rosId}` }) } } for (const gre of current.gre) { @@ -965,30 +1014,40 @@ export function planGreRestore( ops.push({ op: "patch", path: `/interface/gre/${live.rosId}`, body }) } - const liveAddr = current.addrs.find((a) => a.interfaceName === want.name) - if (want.localInnerIp) { - if (!liveAddr) { - ops.push({ - op: "put", - path: "/ip/address", - body: { address: want.localInnerIp, interface: want.name }, - }) - } else if (liveAddr.address !== want.localInnerIp) { - ops.push({ op: "delete", path: `/ip/address/${liveAddr.rosId}` }) - ops.push({ - op: "put", - path: "/ip/address", - body: { address: want.localInnerIp, interface: want.name }, - }) + const liveAddrs = current.addrs.filter(a => a.interfaceName === want.name && !a.dynamic) + if (liveAddrs.some(a => a.fromPool || a.eui64)) throw new GreRestoreConflict("GRE содержит адрес из IPv6-пула или EUI-64. Измените его отдельно в RouterOS") + if (want.innerAddresses === undefined && liveAddrs.length > 1) { + throw new GreRestoreConflict("Старая ревизия GRE не описывает все адреса интерфейса. Восстановление остановлено") + } + const addresses = want.innerAddresses ?? (want.localInnerIp ? [{ address: want.localInnerIp, disabled: false }] : []) + const keys = new Set(addresses.map(a => greAddressKey(a.address))) + if (keys.size !== addresses.length) throw new GreRestoreConflict("В ревизии GRE повторяются внутренние адреса") + for (const addr of liveAddrs) { + if (!keys.has(greAddressKey(addr.address))) ops.push({ op: "delete", path: `${greAddressPath(addr.address)}/${addr.rosId}` }) + } + for (const addr of addresses) { + const existing = liveAddrs.find(a => greAddressKey(a.address) === greAddressKey(addr.address)) + if (!existing) ops.push({ op: "put", path: greAddressPath(addr.address), body: greAddressBody(addr, want.name) }) + else if (Boolean(existing.disabled) !== addr.disabled || (addr.comment !== undefined && str(existing.comment) !== addr.comment) || (greAddressPath(addr.address) === "/ipv6/address" && (Boolean(existing.advertise) !== Boolean(addr.advertise) || (addr.noDad !== undefined && Boolean(existing.noDad) !== addr.noDad)))) { + ops.push({ op: "patch", path: `${greAddressPath(addr.address)}/${existing.rosId}`, body: greAddressBody(addr, want.name) }) } - } else if (liveAddr) { - ops.push({ op: "delete", path: `/ip/address/${liveAddr.rosId}` }) } } return ops } +function greAddressBody(a: GreSnapshotAddress, name: string): Record { + if (a.fromPool || a.eui64) throw new GreRestoreConflict("Восстановление IPv6-пула/EUI-64 требует отдельной настройки RouterOS") + return { + address: a.address, interface: name, + ...(a.comment === undefined ? {} : { comment: a.comment }), + ...(a.disabled ? { disabled: "yes" } : { disabled: "no" }), + ...(greAddressPath(a.address) === "/ipv6/address" ? { advertise: a.advertise ? "yes" : "no" } : {}), + ...(a.noDad === undefined ? {} : { "no-dad": a.noDad ? "yes" : "no" }), + } +} + export function opsPaths(ops: RosWriteOp[]): string[] { return ops.map((op) => op.path) } diff --git a/backend/src/services/gre-ipv6.test.ts b/backend/src/services/gre-ipv6.test.ts new file mode 100644 index 00000000..16a3eba4 --- /dev/null +++ b/backend/src/services/gre-ipv6.test.ts @@ -0,0 +1,72 @@ +import assert from "node:assert/strict" +import { canonicalGreSnapshot, greAddressPath, GreRestoreConflict, planGreCreate, planGreDelete, planGreRestore, parseGreSnapshot } from "./entity-snapshots.js" +import { fetchGreState, mapGreLive } from "./gre-live.js" +import { MikrotikClient } from "./mikrotik.js" +import type { servers } from "../db/schema.js" + +const server = { id: 1, name: "CHR", enabled: true } as typeof servers.$inferSelect +const raw = [{ ".id": "*g", name: "own-gre", "remote-address": "192.0.2.1", running: "true" }] +const rows = [ + { ".id": "*1", interface: "own-gre", address: "10.1.0.1/30" }, + { ".id": "*1", interface: "own-gre", address: "fd00:151::1/64", advertise: "yes" }, + { ".id": "*2", interface: "own-gre", address: "fd00:151::2/64", disabled: "true", advertise: "no" }, + { ".id": "*3", interface: "own-gre", address: "fe80::1/64", dynamic: "true" }, + { ".id": "*4", interface: "public", address: "192.0.2.2/24" }, +] +const state = mapGreLive(server, raw, rows) +assert.equal(state.addrs.length, 3) +assert.equal(state.tunnels[0]?.localInnerIp, "10.1.0.1/30") +assert.equal(state.snapshot.tunnels[0]?.innerAddresses?.length, 3) +assert.deepEqual(mapGreLive(server, raw, [...rows].reverse()).snapshot, state.snapshot) +assert.equal(mapGreLive(server, raw, rows.slice(1)).tunnels[0]?.localInnerIp, "fd00:151::1/64") +const del = planGreDelete("own-gre", state) +assert.deepEqual(del.map(op => op.path), ["/ip/address/*1", "/ipv6/address/*1", "/ipv6/address/*2", "/interface/gre/*g"]) +assert(!del.some(op => op.path.includes("*3") || op.path.includes("*4"))) +const noChanges = planGreRestore(state.snapshot, state) +assert.equal(noChanges.filter(op => op.path.includes("/address")).length, 0) +const expanded = structuredClone(state.snapshot) +expanded.tunnels[0]!.innerAddresses![1]!.address = "fd00:0151:0000:0000:0000:0000:0000:0001/64" +assert.equal(planGreRestore(expanded, state).filter(op => op.path.includes("/address")).length, 0) +const legacy = canonicalGreSnapshot({ tunnels: [{ name: "own-gre", localInnerIp: "fd00:151::1/64" }] }) +assert.equal(parseGreSnapshot(legacy).tunnels[0]?.innerAddresses, undefined) +assert.throws(() => planGreRestore(legacy, state), GreRestoreConflict) +for (const address of ["fd00::1/64", "10.0.0.1/30"]) { + const t = canonicalGreSnapshot({ tunnels: [{ name: "own-gre", localInnerIp: address }] }).tunnels[0]! + const create = planGreCreate(t) + assert.equal(create[1]?.path, greAddressPath(address)) + if (create[1]?.op === "put" && address.includes(":")) assert.equal(create[1].body.advertise, "no") + const only = { gre: state.gre, addrs: [{ rosId: "*x", interfaceName: "own-gre", address: address.includes(":") ? "10.0.0.1/30" : "fd00::1/64" }] } + const restore = planGreRestore({ tunnels: [t] }, only) + assert(restore.some(op => op.op === "delete" && op.path === `${greAddressPath(only.addrs[0]!.address)}/*x`)) + assert(restore.some(op => op.op === "put" && op.path === greAddressPath(address))) +} +const flags = structuredClone(state.snapshot) +flags.tunnels[0]!.innerAddresses![1]!.advertise = false +assert(planGreRestore(flags, state).some(op => op.op === "patch" && op.path === "/ipv6/address/*1" && op.body.advertise === "no")) +for (const address of ["fd00::1", "fd00::1/129", "fd00::1/-1", "bad/64", "10.0.0.1/33", "10.0.0.1/", "10.0.0.1/24/x"]) assert.throws(() => greAddressPath(address), GreRestoreConflict) +const duplicate = structuredClone(state.snapshot) +duplicate.tunnels[0]!.innerAddresses!.push({ address: "fd00:0151:0:0:0:0:0:1/64", disabled: false }) +assert.throws(() => planGreRestore(duplicate, state), GreRestoreConflict) +assert.throws(() => planGreRestore(state.snapshot, { ...state, addrs: state.addrs.map(a => ({ ...a, fromPool: "pool6" })) }), GreRestoreConflict) +assert.throws(() => planGreCreate(canonicalGreSnapshot({ tunnels: [{ name: "pooled", innerAddresses: [{ address: "fd00::1/64", disabled: false, eui64: true }] }] }).tunnels[0]!), GreRestoreConflict) +const original = MikrotikClient.fromServer +try { + const calls: string[] = [] + MikrotikClient.fromServer = () => ({ get: async (path: string) => { + calls.push(path) + if (path === "/interface/gre") return raw + if (path === "/ip/address") return [rows[0]] + if (path === "/ipv6/address") return rows.slice(1) + throw new Error("Unexpected path") + } }) as unknown as MikrotikClient + assert.equal((await fetchGreState(server)).addrs.length, 3) + assert.deepEqual(calls.sort(), ["/interface/gre", "/ip/address", "/ipv6/address"]) + MikrotikClient.fromServer = () => ({ get: async (path: string) => { + if (path === "/ipv6/address") throw new Error("Unauthorized") + return [] + } }) as unknown as MikrotikClient + await assert.rejects(fetchGreState(server), /Unauthorized/) + MikrotikClient.fromServer = () => ({ get: async () => ({}) }) as unknown as MikrotikClient + await assert.rejects(fetchGreState(server), /неполный каталог/) +} finally { MikrotikClient.fromServer = original } +console.log("GRE IPv6: static catalog, disabled/advertise, family IDs, legacy conflict, normalization, create/restore/delete and failed reads passed") diff --git a/backend/src/services/gre-live.ts b/backend/src/services/gre-live.ts index 0a886940..c7951146 100644 --- a/backend/src/services/gre-live.ts +++ b/backend/src/services/gre-live.ts @@ -1,10 +1,11 @@ -import { eq } from "drizzle-orm" +import { and, eq } from "drizzle-orm" import { db } from "../db/index.js" import { servers } from "../db/schema.js" import { MikrotikClient } from "./mikrotik.js" import { readGreComment } from "./gre-comment.js" import { canonicalGreSnapshot, + greAddressPath, type GreLiveAddr, type GreLiveIface, type GreSnapshot, @@ -35,6 +36,12 @@ interface RosIpAddress { interface?: string disabled?: string network?: string + dynamic?: string + advertise?: string + comment?: string + "no-dad"?: string + "from-pool"?: string + "eui-64"?: string } export interface LiveGreTunnel { @@ -83,7 +90,7 @@ function parseDscp(value: string | undefined): "inherit" | number { function parseInnerFromComment(comment: string | undefined): { localInnerIp: string; remoteInnerIp: string } { if (!comment) return { localInnerIp: "", remoteInnerIp: "" } - const local = comment.match(/address\s*=\s*([0-9.]+\/\d+)/)?.[1] ?? "" + const local = comment.match(/address\s*=\s*([0-9a-fA-F:.]+\/\d+)/)?.[1] ?? "" const remote = readGreComment(comment).remoteInnerIp return { localInnerIp: local, remoteInnerIp: remote } } @@ -102,15 +109,19 @@ export function mapGreLive( gre: GreLiveIface[] addrs: GreLiveAddr[] } { - const addrsByIface = new Map() + const addrsByIface = new Map() + const greNames = new Set(greRaw.map(g => (g.name ?? "").trim())) for (const a of addrsRaw) { - if (rosDisabled(a.disabled)) continue + if (rosDisabled(a.dynamic)) continue const iface = (a.interface ?? "").trim() const address = (a.address ?? "").trim() const rosId = String(a[".id"] ?? "") - if (!iface || !address || !rosId) continue + if (!iface || !address || !rosId || !greNames.has(iface)) continue const list = addrsByIface.get(iface) ?? [] - list.push({ address, rosId }) + const family = greAddressPath(address) + list.push({ address, rosId, interfaceName: iface, disabled: rosDisabled(a.disabled), comment: a.comment ?? "", + ...(family === "/ipv6/address" ? { advertise: rosDisabled(a.advertise), noDad: rosDisabled(a["no-dad"]), fromPool: a["from-pool"] ?? "", eui64: rosDisabled(a["eui-64"]) } : {}), + }) addrsByIface.set(iface, list) } @@ -124,6 +135,7 @@ export function mapGreLive( const keepalive = parseKeepalive(g.keepalive) const fromComment = parseInnerFromComment(g.comment) const ifaceAddrs = addrsByIface.get(name) ?? [] + ifaceAddrs.sort((a, b) => Number(Boolean(a.disabled)) - Number(Boolean(b.disabled)) || a.address.localeCompare(b.address)) const localInnerIp = ifaceAddrs[0]?.address || fromComment.localInnerIp const secret = (g["ipsec-secret"] ?? "").trim() const disabled = rosDisabled(g.disabled) @@ -145,7 +157,7 @@ export function mapGreLive( }) for (const a of ifaceAddrs) { - addrs.push({ rosId: a.rosId, interfaceName: name, address: a.address }) + addrs.push(a) } tunnels.push({ @@ -178,7 +190,10 @@ export function mapGreLive( name: g.name, localAddress: g.localAddress, remoteAddress: g.remoteAddress, - localInnerIp: addrs.find((a) => a.interfaceName === g.name)?.address ?? "", + localInnerIp: tunnels.find(t => t.name === g.name)?.localInnerIp ?? "", + innerAddresses: addrs.filter(a => a.interfaceName === g.name).map(a => ({ address: a.address, disabled: Boolean(a.disabled), comment: a.comment, + ...(a.advertise === undefined ? {} : { advertise: a.advertise, noDad: a.noDad, fromPool: a.fromPool, eui64: a.eui64 }), + })), remoteInnerIp: tunnels.find(t => t.name === g.name)?.remoteInnerIp ?? "", comment: g.comment, disabled: g.disabled, @@ -197,13 +212,15 @@ export function mapGreLive( export async function fetchGreState(server: ServerRow) { const client = MikrotikClient.fromServer(server) - const [greRaw, addrsRaw] = await Promise.all([ + const [greRaw, addrsRaw, ipv6Raw] = await Promise.all([ client.get("/interface/gre"), - client.get("/ip/address").catch(() => [] as RosIpAddress[]), + client.get("/ip/address"), + client.get("/ipv6/address"), ]) + if (![greRaw, addrsRaw, ipv6Raw].every(Array.isArray)) throw new Error("RouterOS: неполный каталог GRE/адресов") return { client, - ...mapGreLive(server, Array.isArray(greRaw) ? greRaw : [], Array.isArray(addrsRaw) ? addrsRaw : []), + ...mapGreLive(server, Array.isArray(greRaw) ? greRaw : [], [...(Array.isArray(addrsRaw) ? addrsRaw : []), ...(Array.isArray(ipv6Raw) ? ipv6Raw : [])]), } } @@ -222,7 +239,7 @@ export async function listGreTunnels(opts?: { serverId?: string }): Promise<{ if (!Number.isFinite(id)) { return { tunnels: [], failures: [{ serverId: String(opts.serverId), error: "Некорректный serverId" }] } } - const row = (await db.select().from(servers).where(eq(servers.id, id)).limit(1))[0] + const row = (await db.select().from(servers).where(and(eq(servers.id, id), eq(servers.enabled, true))).limit(1))[0] serverRows = row ? [row] : [] } else { serverRows = await db.select().from(servers).where(eq(servers.enabled, true)) diff --git a/docs/ux-ui-external-acceptance.md b/docs/ux-ui-external-acceptance.md index e4c760f3..50e6b538 100644 --- a/docs/ux-ui-external-acceptance.md +++ b/docs/ux-ui-external-acceptance.md @@ -1,6 +1,6 @@ # UX/UI: протокол внешней приёмки 12.5 -Актуальное продолжение 2026-10-11: завершён12.5.150 — Sessions columns/направления подписаны по-русски, ReUI/Frame/base-nova/data/sort/filter сохранены.2 viewport checks/ESLint/sequential types/frontend build/live PC/mobile passed. Runtime backend ux-month149/frontend ux-sessions150. Блоки142–150 завершены локальными коммитами без push;12.5 открыт. Следующий151 — application GRE IPv6 address lifecycle: catalog/create/update/history restore/delete с family-safe paths и static-address ownership; сначала подтвердить бюджет. +Актуальное продолжение 2026-10-11: завершён12.5.151 — GRE IPv6 static-address lifecycle через приложение: чтение/create/PATCH/history restore/delete, дополнительные/выключенные адреса, family-safe IDs и legacy409.15 профильных E2E, source types/ESLint, обе production сборки, 984 compiled parity и real native API/SQL/Ping3/3×2/cleanup прошли. Runtime backend/frontend ux-gre151 healthy;12.5 открыт. Следующий152 — application WireGuard IPv6 address lifecycle, включая импорт/историю/удаление; работать укрупнённым разделом без повторения принятого GRE. IPsec78: реальный PSK responder established, mode-config198.18.78.10 и online=true подтверждены API; точные собственные объекты удалены. Сертификатный/DN online, late failure и history restore остаются открытыми. [Отчёт](ux-ui/acceptance/ipsec-mode-config-2026-10-09.json), [журнал](ux-ui-progress.md). @@ -696,7 +696,7 @@ flowchart LR ## 12.5.77 — основной блок IPsec (2026-10-09) -Актуальное продолжение 2026-10-11: завершён12.5.150 — Sessions columns/направления подписаны по-русски, ReUI/Frame/base-nova/data/sort/filter сохранены.2 viewport checks/ESLint/sequential types/frontend build/live PC/mobile passed. Runtime backend ux-month149/frontend ux-sessions150. Блоки142–150 завершены локальными коммитами без push;12.5 открыт. Следующий151 — application GRE IPv6 address lifecycle: catalog/create/update/history restore/delete с family-safe paths и static-address ownership; сначала подтвердить бюджет. +Актуальное продолжение 2026-10-11: завершён12.5.151 — GRE IPv6 static-address lifecycle через приложение: чтение/create/PATCH/history restore/delete, дополнительные/выключенные адреса, family-safe IDs и legacy409.15 профильных E2E, source types/ESLint, обе production сборки, 984 compiled parity и real native API/SQL/Ping3/3×2/cleanup прошли. Runtime backend/frontend ux-gre151 healthy;12.5 открыт. Следующий152 — application WireGuard IPv6 address lifecycle, включая импорт/историю/удаление; работать укрупнённым разделом без повторения принятого GRE. Подробный объём, протоколы, схема и ограничения: [12.5.77 в журнале](ux-ui-progress.md). @@ -1633,3 +1633,19 @@ Column IDs, accessors, sorting/filtering, row values, direction meanings, grid l Existing viewport1440/320 cases passed: endpoint/tooltip/IPv4/ICMPv6 behaviour иno document overflow. ESLint passed. Первый types check совпал с Next dev записью generated routes.d.ts и прочитал незавершённый файл; после окончания E2E/webserver TypeScript повторён последовательно и passed без изменения source. Production frontend build passed. Frontend ux-sessions150 развёрнут, backend ux-month149/PG healthy; [receipt](ux-ui/acceptance/flow-sessions-column-labels-2026-10-11.json), [readonly PC/mobile smoke](ux-ui/acceptance/traffic-sessions-labels-smoke-2026-10-11.json). Rollback image/env сохранены. Network/password/device/schema changes нет; populated native145 не повторялся для copy-only delta. Окно завершает coherent группу IPv6/NetFlow142–150. Следующий151 — application GRE IPv6 address lifecycle. Native inner proof109/145 уже есть, но gre-live читает только /ip/address, а entity-snapshots create/restore/delete всегда используют IPv4 resource. Нельзя просто объединить IPv6 catalog без family-safe write/delete paths: одинаковые ROS IDs в разных namespaces и dynamic link-local требуют отдельной обработки. План151: static IPv6 catalog, family-aware paths, create/update/restore/delete+legacy snapshot compatibility, запрет неоднозначной смены primary при multiple addresses, profile/native own tunnel cleanup иUI metadata. Сначала проверить лимит; не выпускать partial family migration.12.5 открыт, public IPv6 WAN/outer и внешние integrations остаются в матрице. + +## 12.5.151 — управление статическими IPv6-адресами GRE (2026-10-11) + +GRE читает IPv4 и IPv6 адреса; динамические адреса исключены из управления. Ошибка любого address catalog или неверный формат ответа останавливает чтение/запись, неполный ответ не становится пустым снимком. Выбранный выключенный сервер также исключён из опроса. + +Create/PATCH/restore/delete выбирают /ip/address или /ipv6/address по проверенному CIDR; одинаковый RouterOS ID в разных семействах безопасен. Новые снимки содержат все статические адреса, disabled/advertise/comment/no-dad. PATCH меняет только целевой GRE, сохраняет дополнительные адреса; очистка поля передаёт явную пустую строку. Восстановление старой ревизии при нескольких текущих адресах возвращает409 до записи. Неоднозначные ID/name и переименование также409. Expanded/compressed IPv6 сравниваются по одному ключу. Применение from-pool/EUI-64 остановлено с объяснением: их выделение не принимается за обычный literal static address. + +Существующие ReUI/Frame/base-nova сохранены, добавлена подсказка IPv4/IPv6 с префиксом. Проверки: config-sync4 scripts (включая14 invalid POST/PATCH до DB/REST), gre-comment и selected-context tests; backend/source-only types/ESLint;15 GRE E2E; backend/frontend production builds;984 emitted outputs совпали. Первый E2E запуск не стартовал из-за sandbox Windows/SWC canonicalize access; разрешённый повтор прошёл. + +Настоящие production Fastify handlers + выделенная PG база + оба CHR:18 API requests включая создание IPv6 пары, PATCH IPv6, сохранение дополнительных IPv4/disabled IPv6, history restore многoадресного снимка, legacy409 и ID/name409, смену IPv6→IPv4, очистку, восстановление и DELETE. Ping3/3 в обе стороны после running=true и address invalid=false. Первоначальный короткий Ping получил0 вместо ожидаемых3 и остановил первый сценарий; причина не доказана. Его результат и очистка сохранены отдельно, повтор не скрывает начальный отказ. Это короткий dataplane, не доказательство бесшовности/throughput. + +Оба запуска: собственные объекты удалены,8 static collections×2 совпали с baseline, отдельные базы удалены. Пароли не менялись, public/default routes не трогались. Native parent читает исходные enabled server credentials; background polling главного приложения продолжался, отсутствие всех background SQL writes не заявляется. Runtime backend/frontend ux-gre151 healthy, live read-only PC/mobile catalog/form smoke прошёл после cleanup; native mutation принята через изолированную базу, deployed browser mutation не выполнялась. + +Протоколы: [native/cleanup](ux-ui/acceptance/gre-ipv6-native-2026-10-11.json), [API/history](ux-ui/acceptance/gre-ipv6-api-history-2026-10-11.json), [первый запуск](ux-ui/acceptance/gre-ipv6-initial-cleanup-2026-10-11.json), [compiled parity](ux-ui/acceptance/gre-ipv6-compiled-2026-10-11.json), [live UI](ux-ui/acceptance/gre-ipv6-smoke-2026-10-11.json). + +Границы: IPv6 ULA inner по IPv4 GRE outer; IPv6 outer/public WAN, scale, длительное восстановление и from-pool/EUI-64 не приняты. Полная регрессия после139 не повторялась: выполнен профиль изменённых областей. Следующий152 — WireGuard IPv6 lifecycle;12.5 остаётся открытым. diff --git a/docs/ux-ui-plan.md b/docs/ux-ui-plan.md index 07c72dce..5b32bfb1 100644 --- a/docs/ux-ui-plan.md +++ b/docs/ux-ui-plan.md @@ -1,12 +1,12 @@ # План реализации UX/UI по пятичасовым окнам -Актуальное продолжение 2026-10-11: завершён12.5.150 — Sessions columns/направления подписаны по-русски, ReUI/Frame/base-nova/data/sort/filter сохранены.2 viewport checks/ESLint/sequential types/frontend build/live PC/mobile passed. Runtime backend ux-month149/frontend ux-sessions150. Блоки142–150 завершены локальными коммитами без push;12.5 открыт. Следующий151 — application GRE IPv6 address lifecycle: catalog/create/update/history restore/delete с family-safe paths и static-address ownership; сначала подтвердить бюджет. +Актуальное продолжение 2026-10-11: завершён12.5.151 — GRE IPv6 static-address lifecycle через приложение: чтение/create/PATCH/history restore/delete, дополнительные/выключенные адреса, family-safe IDs и legacy409.15 профильных E2E, source types/ESLint, обе production сборки, 984 compiled parity и real native API/SQL/Ping3/3×2/cleanup прошли. Runtime backend/frontend ux-gre151 healthy;12.5 открыт. Следующий152 — application WireGuard IPv6 address lifecycle, включая импорт/историю/удаление; работать укрупнённым разделом без повторения принятого GRE. Общий план проекта MikrotikManager. Основан на согласованном плане из задачи; точка продолжения обновлена 2026-10-10. Источник фактического прогресса, проверок и ограничений — [журнал реализации](ux-ui-progress.md). Этот документ задаёт объём и критерии завершения, журнал фиксирует результат. ## Актуальная точка продолжения — 2026-10-10 -Актуальное продолжение 2026-10-11: завершён12.5.150 — Sessions columns/направления подписаны по-русски, ReUI/Frame/base-nova/data/sort/filter сохранены.2 viewport checks/ESLint/sequential types/frontend build/live PC/mobile passed. Runtime backend ux-month149/frontend ux-sessions150. Блоки142–150 завершены локальными коммитами без push;12.5 открыт. Следующий151 — application GRE IPv6 address lifecycle: catalog/create/update/history restore/delete с family-safe paths и static-address ownership; сначала подтвердить бюджет. +Актуальное продолжение 2026-10-11: завершён12.5.151 — GRE IPv6 static-address lifecycle через приложение: чтение/create/PATCH/history restore/delete, дополнительные/выключенные адреса, family-safe IDs и legacy409.15 профильных E2E, source types/ESLint, обе production сборки, 984 compiled parity и real native API/SQL/Ping3/3×2/cleanup прошли. Runtime backend/frontend ux-gre151 healthy;12.5 открыт. Следующий152 — application WireGuard IPv6 address lifecycle, включая импорт/историю/удаление; работать укрупнённым разделом без повторения принятого GRE. Этапы0–11 завершены в локальных границах журнала. История выполненных внешних блоков и доказательства сохранены в [журнале](ux-ui-stage-12.md) и [протоколе](ux-ui-external-acceptance.md). Реальная Telegram доставка, Portal SSO, multi-instance и оставшиеся профильные сетевые ограничения открыты. @@ -371,6 +371,6 @@ flowchart LR ## 12.5.77 — основной блок IPsec (2026-10-09) -Актуальное продолжение 2026-10-11: завершён12.5.150 — Sessions columns/направления подписаны по-русски, ReUI/Frame/base-nova/data/sort/filter сохранены.2 viewport checks/ESLint/sequential types/frontend build/live PC/mobile passed. Runtime backend ux-month149/frontend ux-sessions150. Блоки142–150 завершены локальными коммитами без push;12.5 открыт. Следующий151 — application GRE IPv6 address lifecycle: catalog/create/update/history restore/delete с family-safe paths и static-address ownership; сначала подтвердить бюджет. +Актуальное продолжение 2026-10-11: завершён12.5.151 — GRE IPv6 static-address lifecycle через приложение: чтение/create/PATCH/history restore/delete, дополнительные/выключенные адреса, family-safe IDs и legacy409.15 профильных E2E, source types/ESLint, обе production сборки, 984 compiled parity и real native API/SQL/Ping3/3×2/cleanup прошли. Runtime backend/frontend ux-gre151 healthy;12.5 открыт. Следующий152 — application WireGuard IPv6 address lifecycle, включая импорт/историю/удаление; работать укрупнённым разделом без повторения принятого GRE. Подробный объём, протоколы, схема и ограничения: [12.5.77 в журнале](ux-ui-progress.md). diff --git a/docs/ux-ui-progress.md b/docs/ux-ui-progress.md index 926091d5..7541419d 100644 --- a/docs/ux-ui-progress.md +++ b/docs/ux-ui-progress.md @@ -1,6 +1,6 @@ # UX/UI: журнал реализации -Актуальное продолжение 2026-10-11: завершён12.5.150 — Sessions columns/направления подписаны по-русски, ReUI/Frame/base-nova/data/sort/filter сохранены.2 viewport checks/ESLint/sequential types/frontend build/live PC/mobile passed. Runtime backend ux-month149/frontend ux-sessions150. Блоки142–150 завершены локальными коммитами без push;12.5 открыт. Следующий151 — application GRE IPv6 address lifecycle: catalog/create/update/history restore/delete с family-safe paths и static-address ownership; сначала подтвердить бюджет. +Актуальное продолжение 2026-10-11: завершён12.5.151 — GRE IPv6 static-address lifecycle через приложение: чтение/create/PATCH/history restore/delete, дополнительные/выключенные адреса, family-safe IDs и legacy409.15 профильных E2E, source types/ESLint, обе production сборки, 984 compiled parity и real native API/SQL/Ping3/3×2/cleanup прошли. Runtime backend/frontend ux-gre151 healthy;12.5 открыт. Следующий152 — application WireGuard IPv6 address lifecycle, включая импорт/историю/удаление; работать укрупнённым разделом без повторения принятого GRE. Общий план: [UX/UI по этапам и пятичасовым окнам](ux-ui-plan.md). План задаёт объём, этот журнал фиксирует выполненные блоки и ограничения. Записи расположены от новых к старым; подробная история этапа12 также сохранена в [ux-ui-stage-12.md](ux-ui-stage-12.md). @@ -36,7 +36,23 @@ | 10 | Маршрутизация, диагностика, карта и терминал | Завершён в границах локальной приёмки 2026-10-01; блоки 10.1–10.71, внешние ограничения в 10.71 | | 11А | Пользователи, контейнеры, сертификаты и резервные копии | Завершён в границах локальной приёмки 2026-10-01; 11А.1–11А.33, внешние ограничения в 11А.33 | | 11Б | Оповещения, сбор данных, интеграции, релизы и настройки | Завершён в границах локальной приёмки 2026-10-03; ограничения и evidence в11Б.7 | -| 12 | Итоговая доступность, адаптивность, производительность и регрессия | Локальная приёмка завершена в границах12.3.83; внешняя12.5 в работе, выполненные блоки1–150 и ограничения ниже. Runtime backend ux-month149/frontend ux-sessions150. | +| 12 | Итоговая доступность, адаптивность, производительность и регрессия | Локальная приёмка завершена в границах12.3.83; внешняя12.5 в работе, выполненные блоки1–151 и ограничения ниже. Runtime backend ux-month149/frontend ux-sessions150. | + +## 12.5.151 — управление статическими IPv6-адресами GRE (2026-10-11) + +GRE читает IPv4 и IPv6 адреса; динамические адреса исключены из управления. Ошибка любого address catalog или неверный формат ответа останавливает чтение/запись, неполный ответ не становится пустым снимком. Выбранный выключенный сервер также исключён из опроса. + +Create/PATCH/restore/delete выбирают /ip/address или /ipv6/address по проверенному CIDR; одинаковый RouterOS ID в разных семействах безопасен. Новые снимки содержат все статические адреса, disabled/advertise/comment/no-dad. PATCH меняет только целевой GRE, сохраняет дополнительные адреса; очистка поля передаёт явную пустую строку. Восстановление старой ревизии при нескольких текущих адресах возвращает409 до записи. Неоднозначные ID/name и переименование также409. Expanded/compressed IPv6 сравниваются по одному ключу. Применение from-pool/EUI-64 остановлено с объяснением: их выделение не принимается за обычный literal static address. + +Существующие ReUI/Frame/base-nova сохранены, добавлена подсказка IPv4/IPv6 с префиксом. Проверки: config-sync4 scripts (включая14 invalid POST/PATCH до DB/REST), gre-comment и selected-context tests; backend/source-only types/ESLint;15 GRE E2E; backend/frontend production builds;984 emitted outputs совпали. Первый E2E запуск не стартовал из-за sandbox Windows/SWC canonicalize access; разрешённый повтор прошёл. + +Настоящие production Fastify handlers + выделенная PG база + оба CHR:18 API requests включая создание IPv6 пары, PATCH IPv6, сохранение дополнительных IPv4/disabled IPv6, history restore многoадресного снимка, legacy409 и ID/name409, смену IPv6→IPv4, очистку, восстановление и DELETE. Ping3/3 в обе стороны после running=true и address invalid=false. Первоначальный короткий Ping получил0 вместо ожидаемых3 и остановил первый сценарий; причина не доказана. Его результат и очистка сохранены отдельно, повтор не скрывает начальный отказ. Это короткий dataplane, не доказательство бесшовности/throughput. + +Оба запуска: собственные объекты удалены,8 static collections×2 совпали с baseline, отдельные базы удалены. Пароли не менялись, public/default routes не трогались. Native parent читает исходные enabled server credentials; background polling главного приложения продолжался, отсутствие всех background SQL writes не заявляется. Runtime backend/frontend ux-gre151 healthy, live read-only PC/mobile catalog/form smoke прошёл после cleanup; native mutation принята через изолированную базу, deployed browser mutation не выполнялась. + +Протоколы: [native/cleanup](ux-ui/acceptance/gre-ipv6-native-2026-10-11.json), [API/history](ux-ui/acceptance/gre-ipv6-api-history-2026-10-11.json), [первый запуск](ux-ui/acceptance/gre-ipv6-initial-cleanup-2026-10-11.json), [compiled parity](ux-ui/acceptance/gre-ipv6-compiled-2026-10-11.json), [live UI](ux-ui/acceptance/gre-ipv6-smoke-2026-10-11.json). + +Границы: IPv6 ULA inner по IPv4 GRE outer; IPv6 outer/public WAN, scale, длительное восстановление и from-pool/EUI-64 не приняты. Полная регрессия после139 не повторялась: выполнен профиль изменённых областей. Следующий152 — WireGuard IPv6 lifecycle;12.5 остаётся открытым. ## 12.5.150 — понятные названия колонок сессий (2026-10-11) diff --git a/docs/ux-ui-remaining-acceptance.md b/docs/ux-ui-remaining-acceptance.md index 6066462e..debc3bb1 100644 --- a/docs/ux-ui-remaining-acceptance.md +++ b/docs/ux-ui-remaining-acceptance.md @@ -1,15 +1,15 @@ # Оставшаяся внешняя приёмка — 2026-10-11 -Это актуальная матрица после 12.5.150. Исторические записи сохраняют версии и ограничения на момент выполнения; поздние проверки ниже уточняют их. Этап 12.5 открыт. Успех в двух CHR и одном backend не означает приёмку всех конфигураций, интеграций или полной регрессии. +Это актуальная матрица после 12.5.151. Исторические записи сохраняют версии и ограничения на момент выполнения; поздние проверки ниже уточняют их. Этап 12.5 открыт. Успех в двух CHR и одном backend не означает приёмку всех конфигураций, интеграций или полной регрессии. -Стенд: Debian13/Compose, PostgreSQL18.6, два CHR RouterOS7.24.5. Backend `ux-month149`, frontend `ux-sessions150`; production lab использует AUTH_REQUIRED=false. Подписанные JWT/RBAC проверялись в изолированных процессах. Все собственные объекты112 удалены, исходные13 коллекций×2 (включая logging/certificates/files/routes) проверены; пароли не менялись. +Стенд: Debian13/Compose, PostgreSQL18.6, два CHR RouterOS7.24.5. Backend `ux-gre151`, frontend `ux-gre151`; production lab использует AUTH_REQUIRED=false. Подписанные JWT/RBAC проверялись в изолированных процессах. Все собственные объекты112 удалены, исходные13 коллекций×2 (включая logging/certificates/files/routes) проверены; пароли не менялись. | Раздел | Подтверждено | Осталось / условие завершения | | --- | --- | --- | | PostgreSQL | Bootstrap, backup/restore, SQL rollback, concurrency, writer drain одного экземпляра, JWT guards и unknown commit: блоки14–24 | Несколько backend/worker экземпляров и координация всех writers; физическая потеря соединения отличается от введённого отказа подтверждения | | Speed/uptime | TCP transmit/receive/both32–33, короткий UDP34, auth failure25, transport timeout27, интерфейс after-ping28–29, snapshot/history race23–24 | Busy/abort/physical WAN disconnect; HTTP receipt socket disconnect принят97; независимое доказательство multi-WAN source/path; Home→JH/JH↔Exit с асимметричными каналами ; ROS-10 POST/SQL/GET и три часовых пояса приняты96. Короткие тесты не доказывают maximum throughput | | Outbox | Production PG claim/dedupe/settlement/retry/JWT/browser checkpoint/a11y35–49 | Настоящий Telegram API/чат, физический timeout после возможной отправки, несколько sender процессов. Нужны тестовый бот/чат и прямое разрешение на конкретное сообщение; подменённый ответ не доказывает доставку | -| GRE | Native lifecycle, metadata, live формы/меню/URL/Ping53–57; GRE используется в OSPF/BGP/IPsec последующих блоков; native IPv6 ULA inner109 | IPv6 outer и application IPv6 interface address lifecycle, независимые WAN, масштаб и длительное восстановление; принятие GRE не означает приёмку всех сценариев автоматического расписания | +| GRE | Native lifecycle, metadata, live формы/меню/URL/Ping53–57; GRE используется в OSPF/BGP/IPsec последующих блоков; native IPv6 ULA inner109; application static IPv6 lifecycle151 | IPv6 outer, from-pool/EUI-64, независимые WAN, масштаб и длительное восстановление; принятие GRE не означает приёмку всех сценариев автоматического расписания | | WireGuard | Native handshake/data plane58, deletion60, live create/peer/disable/enable/delete62, mobile64, export/import67–74; native IPv6 ULA inner/allowedIps/handshake109 | Клиентские ОС и произвольные конфигурации, IPv6 outer/scale и application IPv6 interface address lifecycle, физический lost ACK и устойчивое восстановление; `.conf` с placeholders — шаблон, не принятый клиентский tunnel | | VXLAN | Собственная пара/private Ping/catalog/URL/export75–76; bridge/FDB/port loss/recovery107; IPv6 ULA inner по IPv4 outer108 | API приложения read-only: create/delete проверены native. IPv6 outer, масштаб/производительность, профильные mutation RBAC/concurrency отдельно не приняты | | IPsec | PSK и сертификатное шифрование77–82, active peer/online/mode-config, scoped NAT/group, partial/unknown/applied receipts, restore conflicts, JWT; full DN/специальные символы/online110; literal CN namespace guards и explicit FQDN111; certificate/PSK shared ID unknown/recovery112; multiple sessions controlled snapshots113; shared certificate rows/target guards114; preserve-certificate UI/native DELETE115; explicit deletion binding/PSK collision116; legacy export binding118; real duplicate DN sessions/Linux Ping/UI119; DN DER/ASCII tag и FQDN SAN native120; implicit unique DNS SAN/mixed IDs/API/UI121; короткий CHILD/IKE rekey/reconnect122; server pin и unbound same-CA certificate refusal123; own RSA Root/Intermediate/client chain/CRLs/IKE/reauth138; external revoked CRL new-handshake refusal/existing-session boundary137; certificate-bound malformed/signed expired CRL IKE refusal/recovery136; certificate-bound missing-CDP404/IKE refusal and recovery135; external HTTP CRL download/404/cache preservation134; isolated diagnostic buffers132; own ECDSA P-256/Ping/API export131 and final18×2 inventory; isolated same-key/CA time boundary with explicit AUTH_FAILED130; valid-renewal control timeout/clock/log observation129; original/renewed controls and time-invalid timeout observation128; CRL-issued cert/CA no-write delete guards127; own CRL-enabled valid/revoked control126; local revoked flag/CRL-disabled reconnect observation125; certificate reauth/CHILD absence boundary/UI124 | Реальные duplicate certificate-derived DN sessions приняты119; arbitrary custom PKI/OIDs/policies/path-length and missing/intermediate-revoked chain; native intermediate chain accepted138; ECDSA P-256 accepted131;128/129 timeout cause still unknown,130 time boundary accepted; periodic refresh; existing IKE survives short external-revocation observation137, automatic termination not guaranteed; direct CHR-to-CHR CRL HTTP failure cause134; reauth/CHILD loss принят124; длительный rekey/переходная потеря пакетов; прочие ID типы/ADDR4/manual DN/custom PKI; native edit identical matching rules rejected; клиентские Windows/macOS/iOS/Android, прочие DN форматы/custom OIDs/IKE ID namespaces, полная PKI и policy/profile/proposal restore, физический disconnect, durable retry/multi-instance, IPv6/maximum throughput | @@ -18,7 +18,7 @@ | Recursive routes | Production PUT/change/own history restore88, disabled guards, partial/unknown/applied outcomes, live формы/контекст | Автоматический rollback/retry, durable receipts и несколько экземпляров отсутствуют; PUT не является idempotent noop. Полная произвольная legacy catalog миграция не принята | | Diagnostics/terminal | Allowlist/native reads, Ping/trace/route/MTU/DNS, actual avg-rtt, disabled guards, JWT/live PC/mobile89; real default memory tail/log limits/API/UI133 | DNS использует backend resolver; MTU — ограниченная оценка, не гарантированный максимум. Stop ожидания не доказывает остановку RouterOS команды; arbitrary CLI и physical disconnect не приняты | | Portal/интеграции | Локальные и isolated JWT guards; UI/API error states в границах журналов | Настоящий Portal issuer/login/отзыв прав; RIPE SDK two-IP/no-fetch passed140, native IPv6 ULA flow pipeline passed145 (IPv4 transport), public IPv6 WAN/local licensed MaxMind/S3/container/certificate jobs и Gitea delivery требуют отдельных тестовых endpoints/аккаунтов. Не отправлять сообщения и не публиковать релиз без соответствующего поручения | -| Общая приёмка | Локальная12.3.83; UI1244/context221/compiled984 parity139; профильные build/E2E/live проверки последующих блоков | Traffic initial live mock-id gate passed141; IPv6 special ranges/cache passed142; unknown RIPE coordinates passed143; IPv6 synthetic UDP/worker/SQL passed144; native CHR ULA/IPFIX/API/UI passed145; ICMPv6/IPv6 endpoint labels passed146; HTTP DTO validation passed147; scoped flow catalog/serverId guards passed148; strict monthly calendar passed149; Sessions labels passed150; application GRE IPv6 lifecycle151; последующие изменения проверять отдельно; scoped axe не означает полную WCAG сертификацию | +| Общая приёмка | Локальная12.3.83; UI1244/context221/compiled984 parity139; профильные build/E2E/live проверки последующих блоков | Traffic initial live mock-id gate passed141; IPv6 special ranges/cache passed142; unknown RIPE coordinates passed143; IPv6 synthetic UDP/worker/SQL passed144; native CHR ULA/IPFIX/API/UI passed145; ICMPv6/IPv6 endpoint labels passed146; HTTP DTO validation passed147; scoped flow catalog/serverId guards passed148; strict monthly calendar passed149; Sessions labels passed150; application GRE static IPv6 lifecycle151 passed; следующий WireGuard IPv6 lifecycle152; последующие изменения проверять отдельно; scoped axe не означает полную WCAG сертификацию | Доказательства и точные ограничения: [полная история этапа12](ux-ui-stage-12.md), [внешний протокол](ux-ui-external-acceptance.md), [BGP93](ux-ui/acceptance/bgp-failover-2026-10-10.json), [паспорт стенда](ux-ui-test-server.md). Невыполненные пункты не являются все блокерами данного лабораторного сценария: для выпуска необходимо явно определить требуемые конфигурации и принять их либо согласовать ограничение. @@ -548,3 +548,19 @@ Column IDs, accessors, sorting/filtering, row values, direction meanings, grid l Existing viewport1440/320 cases passed: endpoint/tooltip/IPv4/ICMPv6 behaviour иno document overflow. ESLint passed. Первый types check совпал с Next dev записью generated routes.d.ts и прочитал незавершённый файл; после окончания E2E/webserver TypeScript повторён последовательно и passed без изменения source. Production frontend build passed. Frontend ux-sessions150 развёрнут, backend ux-month149/PG healthy; [receipt](ux-ui/acceptance/flow-sessions-column-labels-2026-10-11.json), [readonly PC/mobile smoke](ux-ui/acceptance/traffic-sessions-labels-smoke-2026-10-11.json). Rollback image/env сохранены. Network/password/device/schema changes нет; populated native145 не повторялся для copy-only delta. Окно завершает coherent группу IPv6/NetFlow142–150. Следующий151 — application GRE IPv6 address lifecycle. Native inner proof109/145 уже есть, но gre-live читает только /ip/address, а entity-snapshots create/restore/delete всегда используют IPv4 resource. Нельзя просто объединить IPv6 catalog без family-safe write/delete paths: одинаковые ROS IDs в разных namespaces и dynamic link-local требуют отдельной обработки. План151: static IPv6 catalog, family-aware paths, create/update/restore/delete+legacy snapshot compatibility, запрет неоднозначной смены primary при multiple addresses, profile/native own tunnel cleanup иUI metadata. Сначала проверить лимит; не выпускать partial family migration.12.5 открыт, public IPv6 WAN/outer и внешние integrations остаются в матрице. + +## 12.5.151 — управление статическими IPv6-адресами GRE (2026-10-11) + +GRE читает IPv4 и IPv6 адреса; динамические адреса исключены из управления. Ошибка любого address catalog или неверный формат ответа останавливает чтение/запись, неполный ответ не становится пустым снимком. Выбранный выключенный сервер также исключён из опроса. + +Create/PATCH/restore/delete выбирают /ip/address или /ipv6/address по проверенному CIDR; одинаковый RouterOS ID в разных семействах безопасен. Новые снимки содержат все статические адреса, disabled/advertise/comment/no-dad. PATCH меняет только целевой GRE, сохраняет дополнительные адреса; очистка поля передаёт явную пустую строку. Восстановление старой ревизии при нескольких текущих адресах возвращает409 до записи. Неоднозначные ID/name и переименование также409. Expanded/compressed IPv6 сравниваются по одному ключу. Применение from-pool/EUI-64 остановлено с объяснением: их выделение не принимается за обычный literal static address. + +Существующие ReUI/Frame/base-nova сохранены, добавлена подсказка IPv4/IPv6 с префиксом. Проверки: config-sync4 scripts (включая14 invalid POST/PATCH до DB/REST), gre-comment и selected-context tests; backend/source-only types/ESLint;15 GRE E2E; backend/frontend production builds;984 emitted outputs совпали. Первый E2E запуск не стартовал из-за sandbox Windows/SWC canonicalize access; разрешённый повтор прошёл. + +Настоящие production Fastify handlers + выделенная PG база + оба CHR:18 API requests включая создание IPv6 пары, PATCH IPv6, сохранение дополнительных IPv4/disabled IPv6, history restore многoадресного снимка, legacy409 и ID/name409, смену IPv6→IPv4, очистку, восстановление и DELETE. Ping3/3 в обе стороны после running=true и address invalid=false. Первоначальный короткий Ping получил0 вместо ожидаемых3 и остановил первый сценарий; причина не доказана. Его результат и очистка сохранены отдельно, повтор не скрывает начальный отказ. Это короткий dataplane, не доказательство бесшовности/throughput. + +Оба запуска: собственные объекты удалены,8 static collections×2 совпали с baseline, отдельные базы удалены. Пароли не менялись, public/default routes не трогались. Native parent читает исходные enabled server credentials; background polling главного приложения продолжался, отсутствие всех background SQL writes не заявляется. Runtime backend/frontend ux-gre151 healthy, live read-only PC/mobile catalog/form smoke прошёл после cleanup; native mutation принята через изолированную базу, deployed browser mutation не выполнялась. + +Протоколы: [native/cleanup](ux-ui/acceptance/gre-ipv6-native-2026-10-11.json), [API/history](ux-ui/acceptance/gre-ipv6-api-history-2026-10-11.json), [первый запуск](ux-ui/acceptance/gre-ipv6-initial-cleanup-2026-10-11.json), [compiled parity](ux-ui/acceptance/gre-ipv6-compiled-2026-10-11.json), [live UI](ux-ui/acceptance/gre-ipv6-smoke-2026-10-11.json). + +Границы: IPv6 ULA inner по IPv4 GRE outer; IPv6 outer/public WAN, scale, длительное восстановление и from-pool/EUI-64 не приняты. Полная регрессия после139 не повторялась: выполнен профиль изменённых областей. Следующий152 — WireGuard IPv6 lifecycle;12.5 остаётся открытым. diff --git a/docs/ux-ui-stage-12.md b/docs/ux-ui-stage-12.md index 433a810c..48c37931 100644 --- a/docs/ux-ui-stage-12.md +++ b/docs/ux-ui-stage-12.md @@ -1,6 +1,6 @@ # Этап 12: итоговая приёмка UX/UI -Актуальное продолжение 2026-10-11: завершён12.5.150 — Sessions columns/направления подписаны по-русски, ReUI/Frame/base-nova/data/sort/filter сохранены.2 viewport checks/ESLint/sequential types/frontend build/live PC/mobile passed. Runtime backend ux-month149/frontend ux-sessions150. Блоки142–150 завершены локальными коммитами без push;12.5 открыт. Следующий151 — application GRE IPv6 address lifecycle: catalog/create/update/history restore/delete с family-safe paths и static-address ownership; сначала подтвердить бюджет. +Актуальное продолжение 2026-10-11: завершён12.5.151 — GRE IPv6 static-address lifecycle через приложение: чтение/create/PATCH/history restore/delete, дополнительные/выключенные адреса, family-safe IDs и legacy409.15 профильных E2E, source types/ESLint, обе production сборки, 984 compiled parity и real native API/SQL/Ping3/3×2/cleanup прошли. Runtime backend/frontend ux-gre151 healthy;12.5 открыт. Следующий152 — application WireGuard IPv6 address lifecycle, включая импорт/историю/удаление; работать укрупнённым разделом без повторения принятого GRE. План: [ux-ui-plan.md](ux-ui-plan.md). Фактические результаты: [ux-ui-progress.md](ux-ui-progress.md). Подготовлен после сводных проверок 11Б; завершение каждого блока требует локального коммита без push. @@ -2938,3 +2938,19 @@ Column IDs, accessors, sorting/filtering, row values, direction meanings, grid l Existing viewport1440/320 cases passed: endpoint/tooltip/IPv4/ICMPv6 behaviour иno document overflow. ESLint passed. Первый types check совпал с Next dev записью generated routes.d.ts и прочитал незавершённый файл; после окончания E2E/webserver TypeScript повторён последовательно и passed без изменения source. Production frontend build passed. Frontend ux-sessions150 развёрнут, backend ux-month149/PG healthy; [receipt](ux-ui/acceptance/flow-sessions-column-labels-2026-10-11.json), [readonly PC/mobile smoke](ux-ui/acceptance/traffic-sessions-labels-smoke-2026-10-11.json). Rollback image/env сохранены. Network/password/device/schema changes нет; populated native145 не повторялся для copy-only delta. Окно завершает coherent группу IPv6/NetFlow142–150. Следующий151 — application GRE IPv6 address lifecycle. Native inner proof109/145 уже есть, но gre-live читает только /ip/address, а entity-snapshots create/restore/delete всегда используют IPv4 resource. Нельзя просто объединить IPv6 catalog без family-safe write/delete paths: одинаковые ROS IDs в разных namespaces и dynamic link-local требуют отдельной обработки. План151: static IPv6 catalog, family-aware paths, create/update/restore/delete+legacy snapshot compatibility, запрет неоднозначной смены primary при multiple addresses, profile/native own tunnel cleanup иUI metadata. Сначала проверить лимит; не выпускать partial family migration.12.5 открыт, public IPv6 WAN/outer и внешние integrations остаются в матрице. + +## 12.5.151 — управление статическими IPv6-адресами GRE (2026-10-11) + +GRE читает IPv4 и IPv6 адреса; динамические адреса исключены из управления. Ошибка любого address catalog или неверный формат ответа останавливает чтение/запись, неполный ответ не становится пустым снимком. Выбранный выключенный сервер также исключён из опроса. + +Create/PATCH/restore/delete выбирают /ip/address или /ipv6/address по проверенному CIDR; одинаковый RouterOS ID в разных семействах безопасен. Новые снимки содержат все статические адреса, disabled/advertise/comment/no-dad. PATCH меняет только целевой GRE, сохраняет дополнительные адреса; очистка поля передаёт явную пустую строку. Восстановление старой ревизии при нескольких текущих адресах возвращает409 до записи. Неоднозначные ID/name и переименование также409. Expanded/compressed IPv6 сравниваются по одному ключу. Применение from-pool/EUI-64 остановлено с объяснением: их выделение не принимается за обычный literal static address. + +Существующие ReUI/Frame/base-nova сохранены, добавлена подсказка IPv4/IPv6 с префиксом. Проверки: config-sync4 scripts (включая14 invalid POST/PATCH до DB/REST), gre-comment и selected-context tests; backend/source-only types/ESLint;15 GRE E2E; backend/frontend production builds;984 emitted outputs совпали. Первый E2E запуск не стартовал из-за sandbox Windows/SWC canonicalize access; разрешённый повтор прошёл. + +Настоящие production Fastify handlers + выделенная PG база + оба CHR:18 API requests включая создание IPv6 пары, PATCH IPv6, сохранение дополнительных IPv4/disabled IPv6, history restore многoадресного снимка, legacy409 и ID/name409, смену IPv6→IPv4, очистку, восстановление и DELETE. Ping3/3 в обе стороны после running=true и address invalid=false. Первоначальный короткий Ping получил0 вместо ожидаемых3 и остановил первый сценарий; причина не доказана. Его результат и очистка сохранены отдельно, повтор не скрывает начальный отказ. Это короткий dataplane, не доказательство бесшовности/throughput. + +Оба запуска: собственные объекты удалены,8 static collections×2 совпали с baseline, отдельные базы удалены. Пароли не менялись, public/default routes не трогались. Native parent читает исходные enabled server credentials; background polling главного приложения продолжался, отсутствие всех background SQL writes не заявляется. Runtime backend/frontend ux-gre151 healthy, live read-only PC/mobile catalog/form smoke прошёл после cleanup; native mutation принята через изолированную базу, deployed browser mutation не выполнялась. + +Протоколы: [native/cleanup](ux-ui/acceptance/gre-ipv6-native-2026-10-11.json), [API/history](ux-ui/acceptance/gre-ipv6-api-history-2026-10-11.json), [первый запуск](ux-ui/acceptance/gre-ipv6-initial-cleanup-2026-10-11.json), [compiled parity](ux-ui/acceptance/gre-ipv6-compiled-2026-10-11.json), [live UI](ux-ui/acceptance/gre-ipv6-smoke-2026-10-11.json). + +Границы: IPv6 ULA inner по IPv4 GRE outer; IPv6 outer/public WAN, scale, длительное восстановление и from-pool/EUI-64 не приняты. Полная регрессия после139 не повторялась: выполнен профиль изменённых областей. Следующий152 — WireGuard IPv6 lifecycle;12.5 остаётся открытым. diff --git a/docs/ux-ui-test-server.md b/docs/ux-ui-test-server.md index 4c1b01f9..8b6c24fa 100644 --- a/docs/ux-ui-test-server.md +++ b/docs/ux-ui-test-server.md @@ -1,6 +1,6 @@ # Тестовый сервер UX/UI — 2026-10-10 -Сервер161.104.46.222: завершён12.5.150 — Sessions columns/направления подписаны по-русски, ReUI/Frame/base-nova/data/sort/filter сохранены.2 viewport checks/ESLint/sequential types/frontend build/live PC/mobile passed. Runtime backend ux-month149/frontend ux-sessions150. Блоки142–150 завершены локальными коммитами без push;12.5 открыт. Следующий151 — application GRE IPv6 address lifecycle: catalog/create/update/history restore/delete с family-safe paths и static-address ownership; сначала подтвердить бюджет. +Сервер161.104.46.222: завершён12.5.151 — GRE IPv6 static-address lifecycle через приложение: чтение/create/PATCH/history restore/delete, дополнительные/выключенные адреса, family-safe IDs и legacy409.15 профильных E2E, source types/ESLint, обе production сборки, 984 compiled parity и real native API/SQL/Ping3/3×2/cleanup прошли. Runtime backend/frontend ux-gre151 healthy;12.5 открыт. Следующий152 — application WireGuard IPv6 address lifecycle, включая импорт/историю/удаление; работать укрупнённым разделом без повторения принятого GRE. | Параметр | Проверенное состояние | | --- | --- | @@ -14,7 +14,7 @@ | PostgreSQL | postgres:18-alpine,18.6;mmapp-test-postgres healthy;SELECT version() passed | | Данные | Отдельный Compose project mmapp-test,том mmapp-test_mmapp-pgdata и каталог ./data | | Доступ | PostgreSQL не публикуется;frontend3000/backend8000 привязаны к127.0.0.1 после запуска | -| Образы приложения | mmapp-test/backend:ux-month149 и mmapp-test/frontend:ux-sessions150; запущены | +| Образы приложения | mmapp-test/backend:ux-gre151 и mmapp-test/frontend:ux-gre151; запущены | Compose SHA256:3052bd6ab5d9865f97605cebfb5ff27a4410cd3357b81153a65a87fb7c92582f. OptionalBACKEND_IMAGE_TAG позволяетобновлятьbackendотдельно. Локальный и удалённый файлы совпали. Шаблоны: [Compose](../deploy/docker-compose.test.yml), [env без секретов](../deploy/env.test.example). @@ -1364,3 +1364,19 @@ Column IDs, accessors, sorting/filtering, row values, direction meanings, grid l Existing viewport1440/320 cases passed: endpoint/tooltip/IPv4/ICMPv6 behaviour иno document overflow. ESLint passed. Первый types check совпал с Next dev записью generated routes.d.ts и прочитал незавершённый файл; после окончания E2E/webserver TypeScript повторён последовательно и passed без изменения source. Production frontend build passed. Frontend ux-sessions150 развёрнут, backend ux-month149/PG healthy; [receipt](ux-ui/acceptance/flow-sessions-column-labels-2026-10-11.json), [readonly PC/mobile smoke](ux-ui/acceptance/traffic-sessions-labels-smoke-2026-10-11.json). Rollback image/env сохранены. Network/password/device/schema changes нет; populated native145 не повторялся для copy-only delta. Окно завершает coherent группу IPv6/NetFlow142–150. Следующий151 — application GRE IPv6 address lifecycle. Native inner proof109/145 уже есть, но gre-live читает только /ip/address, а entity-snapshots create/restore/delete всегда используют IPv4 resource. Нельзя просто объединить IPv6 catalog без family-safe write/delete paths: одинаковые ROS IDs в разных namespaces и dynamic link-local требуют отдельной обработки. План151: static IPv6 catalog, family-aware paths, create/update/restore/delete+legacy snapshot compatibility, запрет неоднозначной смены primary при multiple addresses, profile/native own tunnel cleanup иUI metadata. Сначала проверить лимит; не выпускать partial family migration.12.5 открыт, public IPv6 WAN/outer и внешние integrations остаются в матрице. + +## 12.5.151 — управление статическими IPv6-адресами GRE (2026-10-11) + +GRE читает IPv4 и IPv6 адреса; динамические адреса исключены из управления. Ошибка любого address catalog или неверный формат ответа останавливает чтение/запись, неполный ответ не становится пустым снимком. Выбранный выключенный сервер также исключён из опроса. + +Create/PATCH/restore/delete выбирают /ip/address или /ipv6/address по проверенному CIDR; одинаковый RouterOS ID в разных семействах безопасен. Новые снимки содержат все статические адреса, disabled/advertise/comment/no-dad. PATCH меняет только целевой GRE, сохраняет дополнительные адреса; очистка поля передаёт явную пустую строку. Восстановление старой ревизии при нескольких текущих адресах возвращает409 до записи. Неоднозначные ID/name и переименование также409. Expanded/compressed IPv6 сравниваются по одному ключу. Применение from-pool/EUI-64 остановлено с объяснением: их выделение не принимается за обычный literal static address. + +Существующие ReUI/Frame/base-nova сохранены, добавлена подсказка IPv4/IPv6 с префиксом. Проверки: config-sync4 scripts (включая14 invalid POST/PATCH до DB/REST), gre-comment и selected-context tests; backend/source-only types/ESLint;15 GRE E2E; backend/frontend production builds;984 emitted outputs совпали. Первый E2E запуск не стартовал из-за sandbox Windows/SWC canonicalize access; разрешённый повтор прошёл. + +Настоящие production Fastify handlers + выделенная PG база + оба CHR:18 API requests включая создание IPv6 пары, PATCH IPv6, сохранение дополнительных IPv4/disabled IPv6, history restore многoадресного снимка, legacy409 и ID/name409, смену IPv6→IPv4, очистку, восстановление и DELETE. Ping3/3 в обе стороны после running=true и address invalid=false. Первоначальный короткий Ping получил0 вместо ожидаемых3 и остановил первый сценарий; причина не доказана. Его результат и очистка сохранены отдельно, повтор не скрывает начальный отказ. Это короткий dataplane, не доказательство бесшовности/throughput. + +Оба запуска: собственные объекты удалены,8 static collections×2 совпали с baseline, отдельные базы удалены. Пароли не менялись, public/default routes не трогались. Native parent читает исходные enabled server credentials; background polling главного приложения продолжался, отсутствие всех background SQL writes не заявляется. Runtime backend/frontend ux-gre151 healthy, live read-only PC/mobile catalog/form smoke прошёл после cleanup; native mutation принята через изолированную базу, deployed browser mutation не выполнялась. + +Протоколы: [native/cleanup](ux-ui/acceptance/gre-ipv6-native-2026-10-11.json), [API/history](ux-ui/acceptance/gre-ipv6-api-history-2026-10-11.json), [первый запуск](ux-ui/acceptance/gre-ipv6-initial-cleanup-2026-10-11.json), [compiled parity](ux-ui/acceptance/gre-ipv6-compiled-2026-10-11.json), [live UI](ux-ui/acceptance/gre-ipv6-smoke-2026-10-11.json). + +Границы: IPv6 ULA inner по IPv4 GRE outer; IPv6 outer/public WAN, scale, длительное восстановление и from-pool/EUI-64 не приняты. Полная регрессия после139 не повторялась: выполнен профиль изменённых областей. Следующий152 — WireGuard IPv6 lifecycle;12.5 остаётся открытым. diff --git a/docs/ux-ui/acceptance/gre-ipv6-api-history-2026-10-11.json b/docs/ux-ui/acceptance/gre-ipv6-api-history-2026-10-11.json new file mode 100644 index 00000000..9f439a6f --- /dev/null +++ b/docs/ux-ui/acceptance/gre-ipv6-api-history-2026-10-11.json @@ -0,0 +1,122 @@ +{ + "date": "2026-10-11", + "block": "12.5.151", + "name": "mm-gre151-1791729169930", + "cases": [ + { + "method": "POST", + "path": "/gre/tunnels", + "status": 201 + }, + { + "method": "GET", + "path": "/gre/revisions?serverId=1", + "status": 200 + }, + { + "method": "POST", + "path": "/gre/tunnels", + "status": 201 + }, + { + "method": "GET", + "path": "/gre/revisions?serverId=2", + "status": 200 + }, + { + "method": "PATCH", + "path": "/gre/tunnels", + "status": 200 + }, + { + "method": "GET", + "path": "/gre/tunnels?serverId=1", + "status": 200 + }, + { + "method": "GET", + "path": "/gre/revisions?serverId=1", + "status": 200 + }, + { + "method": "POST", + "path": "/gre/revisions/legacy-mm_accept_151_1791729169930/restore", + "status": 409 + }, + { + "method": "PATCH", + "path": "/gre/tunnels", + "status": 200 + }, + { + "method": "PATCH", + "path": "/gre/tunnels", + "status": 409 + }, + { + "method": "POST", + "path": "/gre/revisions/2c0425c3-c8dc-4394-9792-afb5c21ab62d/restore", + "status": 200 + }, + { + "method": "POST", + "path": "/gre/revisions/8c2c0de3-3651-46ba-8abb-f6ad78dda59c/restore", + "status": 200 + }, + { + "method": "POST", + "path": "/gre/revisions/2c0425c3-c8dc-4394-9792-afb5c21ab62d/restore", + "status": 200 + }, + { + "method": "PATCH", + "path": "/gre/tunnels", + "status": 200 + }, + { + "method": "PATCH", + "path": "/gre/tunnels", + "status": 200 + }, + { + "method": "POST", + "path": "/gre/revisions/2c0425c3-c8dc-4394-9792-afb5c21ab62d/restore", + "status": 200 + }, + { + "method": "DELETE", + "path": "/gre/tunnels", + "status": 200 + }, + { + "method": "DELETE", + "path": "/gre/tunnels", + "status": 200 + } + ], + "pings": [ + { + "serverId": 1, + "sent": 3, + "received": 3 + }, + { + "serverId": 2, + "sent": 3, + "received": 3 + } + ], + "ready": [ + { + "serverId": 1, + "running": "true", + "addressInvalid": "false" + }, + { + "serverId": 2, + "running": "true", + "addressInvalid": "false" + } + ], + "passed": true +} \ No newline at end of file diff --git a/docs/ux-ui/acceptance/gre-ipv6-compiled-2026-10-11.json b/docs/ux-ui/acceptance/gre-ipv6-compiled-2026-10-11.json new file mode 100644 index 00000000..649f2ba6 --- /dev/null +++ b/docs/ux-ui/acceptance/gre-ipv6-compiled-2026-10-11.json @@ -0,0 +1,994 @@ +{ + "date": "2026-10-11", + "block": "12.5.151", + "backendVersion": "1.0.0-test.gre151", + "normalization": "CRLF to LF; emitted files derived from tracked non-test source inputs", + "matched": [ + "backend/dist/config.js", + "backend/dist/config.js.map", + "backend/dist/config.d.ts", + "backend/dist/config.d.ts.map", + "backend/dist/constants/ping-probe.js", + "backend/dist/constants/ping-probe.js.map", + "backend/dist/constants/ping-probe.d.ts", + "backend/dist/constants/ping-probe.d.ts.map", + "backend/dist/db/bootstrap.js", + "backend/dist/db/bootstrap.js.map", + "backend/dist/db/bootstrap.d.ts", + "backend/dist/db/bootstrap.d.ts.map", + "backend/dist/db/index.js", + "backend/dist/db/index.js.map", + "backend/dist/db/index.d.ts", + "backend/dist/db/index.d.ts.map", + "backend/dist/db/json.js", + "backend/dist/db/json.js.map", + "backend/dist/db/json.d.ts", + "backend/dist/db/json.d.ts.map", + "backend/dist/db/migrate.js", + "backend/dist/db/migrate.js.map", + "backend/dist/db/migrate.d.ts", + "backend/dist/db/migrate.d.ts.map", + "backend/dist/db/operation-lock.js", + "backend/dist/db/operation-lock.js.map", + "backend/dist/db/operation-lock.d.ts", + "backend/dist/db/operation-lock.d.ts.map", + "backend/dist/db/partitions.js", + "backend/dist/db/partitions.js.map", + "backend/dist/db/partitions.d.ts", + "backend/dist/db/partitions.d.ts.map", + "backend/dist/db/schema.js", + "backend/dist/db/schema.js.map", + "backend/dist/db/schema.d.ts", + "backend/dist/db/schema.d.ts.map", + "backend/dist/db/sql-bind.js", + "backend/dist/db/sql-bind.js.map", + "backend/dist/db/sql-bind.d.ts", + "backend/dist/db/sql-bind.d.ts.map", + "backend/dist/db/sqlite-import.js", + "backend/dist/db/sqlite-import.js.map", + "backend/dist/db/sqlite-import.d.ts", + "backend/dist/db/sqlite-import.d.ts.map", + "backend/dist/db/traffic-flags.js", + "backend/dist/db/traffic-flags.js.map", + "backend/dist/db/traffic-flags.d.ts", + "backend/dist/db/traffic-flags.d.ts.map", + "backend/dist/index.js", + "backend/dist/index.js.map", + "backend/dist/index.d.ts", + "backend/dist/index.d.ts.map", + "backend/dist/lib/permissions.js", + "backend/dist/lib/permissions.js.map", + "backend/dist/lib/permissions.d.ts", + "backend/dist/lib/permissions.d.ts.map", + "backend/dist/managed-markers.js", + "backend/dist/managed-markers.js.map", + "backend/dist/managed-markers.d.ts", + "backend/dist/managed-markers.d.ts.map", + "backend/dist/modules/events/repository/events-repository.js", + "backend/dist/modules/events/repository/events-repository.js.map", + "backend/dist/modules/events/repository/events-repository.d.ts", + "backend/dist/modules/events/repository/events-repository.d.ts.map", + "backend/dist/modules/events/service/events-service.js", + "backend/dist/modules/events/service/events-service.js.map", + "backend/dist/modules/events/service/events-service.d.ts", + "backend/dist/modules/events/service/events-service.d.ts.map", + "backend/dist/modules/servers/mapper/servers-mapper.js", + "backend/dist/modules/servers/mapper/servers-mapper.js.map", + "backend/dist/modules/servers/mapper/servers-mapper.d.ts", + "backend/dist/modules/servers/mapper/servers-mapper.d.ts.map", + "backend/dist/modules/servers/repository/servers-repository.js", + "backend/dist/modules/servers/repository/servers-repository.js.map", + "backend/dist/modules/servers/repository/servers-repository.d.ts", + "backend/dist/modules/servers/repository/servers-repository.d.ts.map", + "backend/dist/modules/servers/service/servers-service.js", + "backend/dist/modules/servers/service/servers-service.js.map", + "backend/dist/modules/servers/service/servers-service.d.ts", + "backend/dist/modules/servers/service/servers-service.d.ts.map", + "backend/dist/modules/users/iface-type.js", + "backend/dist/modules/users/iface-type.js.map", + "backend/dist/modules/users/iface-type.d.ts", + "backend/dist/modules/users/iface-type.d.ts.map", + "backend/dist/modules/users/interface-inventory.js", + "backend/dist/modules/users/interface-inventory.js.map", + "backend/dist/modules/users/interface-inventory.d.ts", + "backend/dist/modules/users/interface-inventory.d.ts.map", + "backend/dist/modules/users/peer-bind.js", + "backend/dist/modules/users/peer-bind.js.map", + "backend/dist/modules/users/peer-bind.d.ts", + "backend/dist/modules/users/peer-bind.d.ts.map", + "backend/dist/modules/users/repository/users-repository.js", + "backend/dist/modules/users/repository/users-repository.js.map", + "backend/dist/modules/users/repository/users-repository.d.ts", + "backend/dist/modules/users/repository/users-repository.d.ts.map", + "backend/dist/modules/users/service/users-service.js", + "backend/dist/modules/users/service/users-service.js.map", + "backend/dist/modules/users/service/users-service.d.ts", + "backend/dist/modules/users/service/users-service.d.ts.map", + "backend/dist/plugins/auth.js", + "backend/dist/plugins/auth.js.map", + "backend/dist/plugins/auth.d.ts", + "backend/dist/plugins/auth.d.ts.map", + "backend/dist/plugins/database-request-gate.js", + "backend/dist/plugins/database-request-gate.js.map", + "backend/dist/plugins/database-request-gate.d.ts", + "backend/dist/plugins/database-request-gate.d.ts.map", + "backend/dist/routes/alerts.js", + "backend/dist/routes/alerts.js.map", + "backend/dist/routes/alerts.d.ts", + "backend/dist/routes/alerts.d.ts.map", + "backend/dist/routes/backups.js", + "backend/dist/routes/backups.js.map", + "backend/dist/routes/backups.d.ts", + "backend/dist/routes/backups.d.ts.map", + "backend/dist/routes/bgp.js", + "backend/dist/routes/bgp.js.map", + "backend/dist/routes/bgp.d.ts", + "backend/dist/routes/bgp.d.ts.map", + "backend/dist/routes/certificates.js", + "backend/dist/routes/certificates.js.map", + "backend/dist/routes/certificates.d.ts", + "backend/dist/routes/certificates.d.ts.map", + "backend/dist/routes/containers.js", + "backend/dist/routes/containers.js.map", + "backend/dist/routes/containers.d.ts", + "backend/dist/routes/containers.d.ts.map", + "backend/dist/routes/events.js", + "backend/dist/routes/events.js.map", + "backend/dist/routes/events.d.ts", + "backend/dist/routes/events.d.ts.map", + "backend/dist/routes/evobgp-catalog.js", + "backend/dist/routes/evobgp-catalog.js.map", + "backend/dist/routes/evobgp-catalog.d.ts", + "backend/dist/routes/evobgp-catalog.d.ts.map", + "backend/dist/routes/evobgp-settings.js", + "backend/dist/routes/evobgp-settings.js.map", + "backend/dist/routes/evobgp-settings.d.ts", + "backend/dist/routes/evobgp-settings.d.ts.map", + "backend/dist/routes/evobgp.js", + "backend/dist/routes/evobgp.js.map", + "backend/dist/routes/evobgp.d.ts", + "backend/dist/routes/evobgp.d.ts.map", + "backend/dist/routes/exec.js", + "backend/dist/routes/exec.js.map", + "backend/dist/routes/exec.d.ts", + "backend/dist/routes/exec.d.ts.map", + "backend/dist/routes/filters.js", + "backend/dist/routes/filters.js.map", + "backend/dist/routes/filters.d.ts", + "backend/dist/routes/filters.d.ts.map", + "backend/dist/routes/firewall.js", + "backend/dist/routes/firewall.js.map", + "backend/dist/routes/firewall.d.ts", + "backend/dist/routes/firewall.d.ts.map", + "backend/dist/routes/geoip.js", + "backend/dist/routes/geoip.js.map", + "backend/dist/routes/geoip.d.ts", + "backend/dist/routes/geoip.d.ts.map", + "backend/dist/routes/gre.js", + "backend/dist/routes/gre.js.map", + "backend/dist/routes/gre.d.ts", + "backend/dist/routes/gre.d.ts.map", + "backend/dist/routes/internet-path.js", + "backend/dist/routes/internet-path.js.map", + "backend/dist/routes/internet-path.d.ts", + "backend/dist/routes/internet-path.d.ts.map", + "backend/dist/routes/ipsec.js", + "backend/dist/routes/ipsec.js.map", + "backend/dist/routes/ipsec.d.ts", + "backend/dist/routes/ipsec.d.ts.map", + "backend/dist/routes/network.js", + "backend/dist/routes/network.js.map", + "backend/dist/routes/network.d.ts", + "backend/dist/routes/network.d.ts.map", + "backend/dist/routes/ospf.js", + "backend/dist/routes/ospf.js.map", + "backend/dist/routes/ospf.d.ts", + "backend/dist/routes/ospf.d.ts.map", + "backend/dist/routes/ping-probes-write.js", + "backend/dist/routes/ping-probes-write.js.map", + "backend/dist/routes/ping-probes-write.d.ts", + "backend/dist/routes/ping-probes-write.d.ts.map", + "backend/dist/routes/probes.js", + "backend/dist/routes/probes.js.map", + "backend/dist/routes/probes.d.ts", + "backend/dist/routes/probes.d.ts.map", + "backend/dist/routes/recursive-routes.js", + "backend/dist/routes/recursive-routes.js.map", + "backend/dist/routes/recursive-routes.d.ts", + "backend/dist/routes/recursive-routes.d.ts.map", + "backend/dist/routes/scheduler.js", + "backend/dist/routes/scheduler.js.map", + "backend/dist/routes/scheduler.d.ts", + "backend/dist/routes/scheduler.d.ts.map", + "backend/dist/routes/servers-api-ping.js", + "backend/dist/routes/servers-api-ping.js.map", + "backend/dist/routes/servers-api-ping.d.ts", + "backend/dist/routes/servers-api-ping.d.ts.map", + "backend/dist/routes/servers.js", + "backend/dist/routes/servers.js.map", + "backend/dist/routes/servers.d.ts", + "backend/dist/routes/servers.d.ts.map", + "backend/dist/routes/sidebar-counts.js", + "backend/dist/routes/sidebar-counts.js.map", + "backend/dist/routes/sidebar-counts.d.ts", + "backend/dist/routes/sidebar-counts.d.ts.map", + "backend/dist/routes/speed-probes-write.js", + "backend/dist/routes/speed-probes-write.js.map", + "backend/dist/routes/speed-probes-write.d.ts", + "backend/dist/routes/speed-probes-write.d.ts.map", + "backend/dist/routes/speed-test.js", + "backend/dist/routes/speed-test.js.map", + "backend/dist/routes/speed-test.d.ts", + "backend/dist/routes/speed-test.d.ts.map", + "backend/dist/routes/statistics.js", + "backend/dist/routes/statistics.js.map", + "backend/dist/routes/statistics.d.ts", + "backend/dist/routes/statistics.d.ts.map", + "backend/dist/routes/system-database.js", + "backend/dist/routes/system-database.js.map", + "backend/dist/routes/system-database.d.ts", + "backend/dist/routes/system-database.d.ts.map", + "backend/dist/routes/traffic-flow-purge.js", + "backend/dist/routes/traffic-flow-purge.js.map", + "backend/dist/routes/traffic-flow-purge.d.ts", + "backend/dist/routes/traffic-flow-purge.d.ts.map", + "backend/dist/routes/traffic-flow-settings.js", + "backend/dist/routes/traffic-flow-settings.js.map", + "backend/dist/routes/traffic-flow-settings.d.ts", + "backend/dist/routes/traffic-flow-settings.d.ts.map", + "backend/dist/routes/traffic-flow.js", + "backend/dist/routes/traffic-flow.js.map", + "backend/dist/routes/traffic-flow.d.ts", + "backend/dist/routes/traffic-flow.d.ts.map", + "backend/dist/routes/traffic.js", + "backend/dist/routes/traffic.js.map", + "backend/dist/routes/traffic.d.ts", + "backend/dist/routes/traffic.d.ts.map", + "backend/dist/routes/uptime.js", + "backend/dist/routes/uptime.js.map", + "backend/dist/routes/uptime.d.ts", + "backend/dist/routes/uptime.d.ts.map", + "backend/dist/routes/users.js", + "backend/dist/routes/users.js.map", + "backend/dist/routes/users.d.ts", + "backend/dist/routes/users.d.ts.map", + "backend/dist/routes/vxlan.js", + "backend/dist/routes/vxlan.js.map", + "backend/dist/routes/vxlan.d.ts", + "backend/dist/routes/vxlan.d.ts.map", + "backend/dist/routes/wireguard.js", + "backend/dist/routes/wireguard.js.map", + "backend/dist/routes/wireguard.d.ts", + "backend/dist/routes/wireguard.d.ts.map", + "backend/dist/scripts/migrate-sqlite-to-pg.js", + "backend/dist/scripts/migrate-sqlite-to-pg.js.map", + "backend/dist/scripts/migrate-sqlite-to-pg.d.ts", + "backend/dist/scripts/migrate-sqlite-to-pg.d.ts.map", + "backend/dist/scripts/rebuild-flow-facts.js", + "backend/dist/scripts/rebuild-flow-facts.js.map", + "backend/dist/scripts/rebuild-flow-facts.d.ts", + "backend/dist/scripts/rebuild-flow-facts.d.ts.map", + "backend/dist/services/acme-cloudflare.js", + "backend/dist/services/acme-cloudflare.js.map", + "backend/dist/services/acme-cloudflare.d.ts", + "backend/dist/services/acme-cloudflare.d.ts.map", + "backend/dist/services/alert-collector-hooks.js", + "backend/dist/services/alert-collector-hooks.js.map", + "backend/dist/services/alert-collector-hooks.d.ts", + "backend/dist/services/alert-collector-hooks.d.ts.map", + "backend/dist/services/alert-engine/confirm-stability.js", + "backend/dist/services/alert-engine/confirm-stability.js.map", + "backend/dist/services/alert-engine/confirm-stability.d.ts", + "backend/dist/services/alert-engine/confirm-stability.d.ts.map", + "backend/dist/services/alert-engine/cooldown.js", + "backend/dist/services/alert-engine/cooldown.js.map", + "backend/dist/services/alert-engine/cooldown.d.ts", + "backend/dist/services/alert-engine/cooldown.d.ts.map", + "backend/dist/services/alert-engine/decision-engine.js", + "backend/dist/services/alert-engine/decision-engine.js.map", + "backend/dist/services/alert-engine/decision-engine.d.ts", + "backend/dist/services/alert-engine/decision-engine.d.ts.map", + "backend/dist/services/alert-engine/evaluate-rule.js", + "backend/dist/services/alert-engine/evaluate-rule.js.map", + "backend/dist/services/alert-engine/evaluate-rule.d.ts", + "backend/dist/services/alert-engine/evaluate-rule.d.ts.map", + "backend/dist/services/alert-engine/groups.js", + "backend/dist/services/alert-engine/groups.js.map", + "backend/dist/services/alert-engine/groups.d.ts", + "backend/dist/services/alert-engine/groups.d.ts.map", + "backend/dist/services/alert-engine/outbox-execution.js", + "backend/dist/services/alert-engine/outbox-execution.js.map", + "backend/dist/services/alert-engine/outbox-execution.d.ts", + "backend/dist/services/alert-engine/outbox-execution.d.ts.map", + "backend/dist/services/alert-engine/outbox.js", + "backend/dist/services/alert-engine/outbox.js.map", + "backend/dist/services/alert-engine/outbox.d.ts", + "backend/dist/services/alert-engine/outbox.d.ts.map", + "backend/dist/services/alert-engine/prev-live-store.js", + "backend/dist/services/alert-engine/prev-live-store.js.map", + "backend/dist/services/alert-engine/prev-live-store.d.ts", + "backend/dist/services/alert-engine/prev-live-store.d.ts.map", + "backend/dist/services/alert-engine/rule-matcher.js", + "backend/dist/services/alert-engine/rule-matcher.js.map", + "backend/dist/services/alert-engine/rule-matcher.d.ts", + "backend/dist/services/alert-engine/rule-matcher.d.ts.map", + "backend/dist/services/alert-engine/run-once.js", + "backend/dist/services/alert-engine/run-once.js.map", + "backend/dist/services/alert-engine/run-once.d.ts", + "backend/dist/services/alert-engine/run-once.d.ts.map", + "backend/dist/services/alert-engine/signal-ingestor.js", + "backend/dist/services/alert-engine/signal-ingestor.js.map", + "backend/dist/services/alert-engine/signal-ingestor.d.ts", + "backend/dist/services/alert-engine/signal-ingestor.d.ts.map", + "backend/dist/services/alert-engine/signals-from-collectors.js", + "backend/dist/services/alert-engine/signals-from-collectors.js.map", + "backend/dist/services/alert-engine/signals-from-collectors.d.ts", + "backend/dist/services/alert-engine/signals-from-collectors.d.ts.map", + "backend/dist/services/alert-engine/snapshot.js", + "backend/dist/services/alert-engine/snapshot.js.map", + "backend/dist/services/alert-engine/snapshot.d.ts", + "backend/dist/services/alert-engine/snapshot.d.ts.map", + "backend/dist/services/alert-engine/source-watermark.js", + "backend/dist/services/alert-engine/source-watermark.js.map", + "backend/dist/services/alert-engine/source-watermark.d.ts", + "backend/dist/services/alert-engine/source-watermark.d.ts.map", + "backend/dist/services/alert-engine/state-machine.js", + "backend/dist/services/alert-engine/state-machine.js.map", + "backend/dist/services/alert-engine/state-machine.d.ts", + "backend/dist/services/alert-engine/state-machine.d.ts.map", + "backend/dist/services/alert-engine/telegram-emoji.js", + "backend/dist/services/alert-engine/telegram-emoji.js.map", + "backend/dist/services/alert-engine/telegram-emoji.d.ts", + "backend/dist/services/alert-engine/telegram-emoji.d.ts.map", + "backend/dist/services/alert-engine/types.js", + "backend/dist/services/alert-engine/types.js.map", + "backend/dist/services/alert-engine/types.d.ts", + "backend/dist/services/alert-engine/types.d.ts.map", + "backend/dist/services/alerts-config-execution.js", + "backend/dist/services/alerts-config-execution.js.map", + "backend/dist/services/alerts-config-execution.d.ts", + "backend/dist/services/alerts-config-execution.d.ts.map", + "backend/dist/services/alerts-outbox-overview.js", + "backend/dist/services/alerts-outbox-overview.js.map", + "backend/dist/services/alerts-outbox-overview.d.ts", + "backend/dist/services/alerts-outbox-overview.d.ts.map", + "backend/dist/services/alerts-outbox-retry.js", + "backend/dist/services/alerts-outbox-retry.js.map", + "backend/dist/services/alerts-outbox-retry.d.ts", + "backend/dist/services/alerts-outbox-retry.d.ts.map", + "backend/dist/services/alerts-overview.js", + "backend/dist/services/alerts-overview.js.map", + "backend/dist/services/alerts-overview.d.ts", + "backend/dist/services/alerts-overview.d.ts.map", + "backend/dist/services/alerts-revision.js", + "backend/dist/services/alerts-revision.js.map", + "backend/dist/services/alerts-revision.d.ts", + "backend/dist/services/alerts-revision.d.ts.map", + "backend/dist/services/alerts-service.js", + "backend/dist/services/alerts-service.js.map", + "backend/dist/services/alerts-service.d.ts", + "backend/dist/services/alerts-service.d.ts.map", + "backend/dist/services/alerts-telegram-delivery.js", + "backend/dist/services/alerts-telegram-delivery.js.map", + "backend/dist/services/alerts-telegram-delivery.d.ts", + "backend/dist/services/alerts-telegram-delivery.d.ts.map", + "backend/dist/services/alerts-telegram-send.js", + "backend/dist/services/alerts-telegram-send.js.map", + "backend/dist/services/alerts-telegram-send.d.ts", + "backend/dist/services/alerts-telegram-send.d.ts.map", + "backend/dist/services/alerts-telegram-settings.js", + "backend/dist/services/alerts-telegram-settings.js.map", + "backend/dist/services/alerts-telegram-settings.d.ts", + "backend/dist/services/alerts-telegram-settings.d.ts.map", + "backend/dist/services/backup-deletion.js", + "backend/dist/services/backup-deletion.js.map", + "backend/dist/services/backup-deletion.d.ts", + "backend/dist/services/backup-deletion.d.ts.map", + "backend/dist/services/backup-dto.js", + "backend/dist/services/backup-dto.js.map", + "backend/dist/services/backup-dto.d.ts", + "backend/dist/services/backup-dto.d.ts.map", + "backend/dist/services/backup-job-execution.js", + "backend/dist/services/backup-job-execution.js.map", + "backend/dist/services/backup-job-execution.d.ts", + "backend/dist/services/backup-job-execution.d.ts.map", + "backend/dist/services/backup-prune.js", + "backend/dist/services/backup-prune.js.map", + "backend/dist/services/backup-prune.d.ts", + "backend/dist/services/backup-prune.d.ts.map", + "backend/dist/services/backup-restore.js", + "backend/dist/services/backup-restore.js.map", + "backend/dist/services/backup-restore.d.ts", + "backend/dist/services/backup-restore.d.ts.map", + "backend/dist/services/backup-scheduler-collector.js", + "backend/dist/services/backup-scheduler-collector.js.map", + "backend/dist/services/backup-scheduler-collector.d.ts", + "backend/dist/services/backup-scheduler-collector.d.ts.map", + "backend/dist/services/backup-scheduler-run.js", + "backend/dist/services/backup-scheduler-run.js.map", + "backend/dist/services/backup-scheduler-run.d.ts", + "backend/dist/services/backup-scheduler-run.d.ts.map", + "backend/dist/services/backup-service.js", + "backend/dist/services/backup-service.js.map", + "backend/dist/services/backup-service.d.ts", + "backend/dist/services/backup-service.d.ts.map", + "backend/dist/services/backup-storage-update.js", + "backend/dist/services/backup-storage-update.js.map", + "backend/dist/services/backup-storage-update.d.ts", + "backend/dist/services/backup-storage-update.d.ts.map", + "backend/dist/services/bandwidth-test-rates.js", + "backend/dist/services/bandwidth-test-rates.js.map", + "backend/dist/services/bandwidth-test-rates.d.ts", + "backend/dist/services/bandwidth-test-rates.d.ts.map", + "backend/dist/services/bandwidth-test-status.js", + "backend/dist/services/bandwidth-test-status.js.map", + "backend/dist/services/bandwidth-test-status.d.ts", + "backend/dist/services/bandwidth-test-status.d.ts.map", + "backend/dist/services/bgp-catalog-poll.js", + "backend/dist/services/bgp-catalog-poll.js.map", + "backend/dist/services/bgp-catalog-poll.d.ts", + "backend/dist/services/bgp-catalog-poll.d.ts.map", + "backend/dist/services/bgp-parse-sessions.js", + "backend/dist/services/bgp-parse-sessions.js.map", + "backend/dist/services/bgp-parse-sessions.d.ts", + "backend/dist/services/bgp-parse-sessions.d.ts.map", + "backend/dist/services/bgp-peers-live.js", + "backend/dist/services/bgp-peers-live.js.map", + "backend/dist/services/bgp-peers-live.d.ts", + "backend/dist/services/bgp-peers-live.d.ts.map", + "backend/dist/services/btest-node-locks.js", + "backend/dist/services/btest-node-locks.js.map", + "backend/dist/services/btest-node-locks.d.ts", + "backend/dist/services/btest-node-locks.d.ts.map", + "backend/dist/services/certificate-issue-dto.js", + "backend/dist/services/certificate-issue-dto.js.map", + "backend/dist/services/certificate-issue-dto.d.ts", + "backend/dist/services/certificate-issue-dto.d.ts.map", + "backend/dist/services/certificate-issue-execution.js", + "backend/dist/services/certificate-issue-execution.js.map", + "backend/dist/services/certificate-issue-execution.d.ts", + "backend/dist/services/certificate-issue-execution.d.ts.map", + "backend/dist/services/certificate-issue-request.js", + "backend/dist/services/certificate-issue-request.js.map", + "backend/dist/services/certificate-issue-request.d.ts", + "backend/dist/services/certificate-issue-request.d.ts.map", + "backend/dist/services/certificate-issue-runner.js", + "backend/dist/services/certificate-issue-runner.js.map", + "backend/dist/services/certificate-issue-runner.d.ts", + "backend/dist/services/certificate-issue-runner.d.ts.map", + "backend/dist/services/certificate-parse.js", + "backend/dist/services/certificate-parse.js.map", + "backend/dist/services/certificate-parse.d.ts", + "backend/dist/services/certificate-parse.d.ts.map", + "backend/dist/services/certificate-renew-collector.js", + "backend/dist/services/certificate-renew-collector.js.map", + "backend/dist/services/certificate-renew-collector.d.ts", + "backend/dist/services/certificate-renew-collector.d.ts.map", + "backend/dist/services/certificates-service.js", + "backend/dist/services/certificates-service.js.map", + "backend/dist/services/certificates-service.d.ts", + "backend/dist/services/certificates-service.d.ts.map", + "backend/dist/services/certificates-state.js", + "backend/dist/services/certificates-state.js.map", + "backend/dist/services/certificates-state.d.ts", + "backend/dist/services/certificates-state.d.ts.map", + "backend/dist/services/complete-count.js", + "backend/dist/services/complete-count.js.map", + "backend/dist/services/complete-count.d.ts", + "backend/dist/services/complete-count.d.ts.map", + "backend/dist/services/config-apply-plan.js", + "backend/dist/services/config-apply-plan.js.map", + "backend/dist/services/config-apply-plan.d.ts", + "backend/dist/services/config-apply-plan.d.ts.map", + "backend/dist/services/config-revisions.js", + "backend/dist/services/config-revisions.js.map", + "backend/dist/services/config-revisions.d.ts", + "backend/dist/services/config-revisions.d.ts.map", + "backend/dist/services/containers-live.js", + "backend/dist/services/containers-live.js.map", + "backend/dist/services/containers-live.d.ts", + "backend/dist/services/containers-live.d.ts.map", + "backend/dist/services/containers-state.js", + "backend/dist/services/containers-state.js.map", + "backend/dist/services/containers-state.d.ts", + "backend/dist/services/containers-state.d.ts.map", + "backend/dist/services/database-background-work.js", + "backend/dist/services/database-background-work.js.map", + "backend/dist/services/database-background-work.d.ts", + "backend/dist/services/database-background-work.d.ts.map", + "backend/dist/services/database-request-gate.js", + "backend/dist/services/database-request-gate.js.map", + "backend/dist/services/database-request-gate.d.ts", + "backend/dist/services/database-request-gate.d.ts.map", + "backend/dist/services/entity-snapshots.js", + "backend/dist/services/entity-snapshots.js.map", + "backend/dist/services/entity-snapshots.d.ts", + "backend/dist/services/entity-snapshots.d.ts.map", + "backend/dist/services/evobgp-catalog.js", + "backend/dist/services/evobgp-catalog.js.map", + "backend/dist/services/evobgp-catalog.d.ts", + "backend/dist/services/evobgp-catalog.d.ts.map", + "backend/dist/services/firewall-live.js", + "backend/dist/services/firewall-live.js.map", + "backend/dist/services/firewall-live.d.ts", + "backend/dist/services/firewall-live.d.ts.map", + "backend/dist/services/firewall-poll.js", + "backend/dist/services/firewall-poll.js.map", + "backend/dist/services/firewall-poll.d.ts", + "backend/dist/services/firewall-poll.d.ts.map", + "backend/dist/services/geoip-settings.js", + "backend/dist/services/geoip-settings.js.map", + "backend/dist/services/geoip-settings.d.ts", + "backend/dist/services/geoip-settings.d.ts.map", + "backend/dist/services/geoip-update-collector.js", + "backend/dist/services/geoip-update-collector.js.map", + "backend/dist/services/geoip-update-collector.d.ts", + "backend/dist/services/geoip-update-collector.d.ts.map", + "backend/dist/services/gre-bgp-snapshot-collector.js", + "backend/dist/services/gre-bgp-snapshot-collector.js.map", + "backend/dist/services/gre-bgp-snapshot-collector.d.ts", + "backend/dist/services/gre-bgp-snapshot-collector.d.ts.map", + "backend/dist/services/gre-catalog-poll.js", + "backend/dist/services/gre-catalog-poll.js.map", + "backend/dist/services/gre-catalog-poll.d.ts", + "backend/dist/services/gre-catalog-poll.d.ts.map", + "backend/dist/services/gre-comment.js", + "backend/dist/services/gre-comment.js.map", + "backend/dist/services/gre-comment.d.ts", + "backend/dist/services/gre-comment.d.ts.map", + "backend/dist/services/gre-live.js", + "backend/dist/services/gre-live.js.map", + "backend/dist/services/gre-live.d.ts", + "backend/dist/services/gre-live.d.ts.map", + "backend/dist/services/gre-tunnels-live.js", + "backend/dist/services/gre-tunnels-live.js.map", + "backend/dist/services/gre-tunnels-live.d.ts", + "backend/dist/services/gre-tunnels-live.d.ts.map", + "backend/dist/services/internet-path-collector.js", + "backend/dist/services/internet-path-collector.js.map", + "backend/dist/services/internet-path-collector.d.ts", + "backend/dist/services/internet-path-collector.d.ts.map", + "backend/dist/services/internet-path-snapshot.js", + "backend/dist/services/internet-path-snapshot.js.map", + "backend/dist/services/internet-path-snapshot.d.ts", + "backend/dist/services/internet-path-snapshot.d.ts.map", + "backend/dist/services/ipsec-ca.js", + "backend/dist/services/ipsec-ca.js.map", + "backend/dist/services/ipsec-ca.d.ts", + "backend/dist/services/ipsec-ca.d.ts.map", + "backend/dist/services/ipsec-certificate-dn.js", + "backend/dist/services/ipsec-certificate-dn.js.map", + "backend/dist/services/ipsec-certificate-dn.d.ts", + "backend/dist/services/ipsec-certificate-dn.d.ts.map", + "backend/dist/services/ipsec-cleanup.js", + "backend/dist/services/ipsec-cleanup.js.map", + "backend/dist/services/ipsec-cleanup.d.ts", + "backend/dist/services/ipsec-cleanup.d.ts.map", + "backend/dist/services/ipsec-config.js", + "backend/dist/services/ipsec-config.js.map", + "backend/dist/services/ipsec-config.d.ts", + "backend/dist/services/ipsec-config.d.ts.map", + "backend/dist/services/ipsec-live.js", + "backend/dist/services/ipsec-live.js.map", + "backend/dist/services/ipsec-live.d.ts", + "backend/dist/services/ipsec-live.d.ts.map", + "backend/dist/services/ipsec-operation.js", + "backend/dist/services/ipsec-operation.js.map", + "backend/dist/services/ipsec-operation.d.ts", + "backend/dist/services/ipsec-operation.d.ts.map", + "backend/dist/services/ipsec-ros.js", + "backend/dist/services/ipsec-ros.js.map", + "backend/dist/services/ipsec-ros.d.ts", + "backend/dist/services/ipsec-ros.d.ts.map", + "backend/dist/services/mikrotik.js", + "backend/dist/services/mikrotik.js.map", + "backend/dist/services/mikrotik.d.ts", + "backend/dist/services/mikrotik.d.ts.map", + "backend/dist/services/monitoring-server-catalog.js", + "backend/dist/services/monitoring-server-catalog.js.map", + "backend/dist/services/monitoring-server-catalog.d.ts", + "backend/dist/services/monitoring-server-catalog.d.ts.map", + "backend/dist/services/ospf-catalog-poll.js", + "backend/dist/services/ospf-catalog-poll.js.map", + "backend/dist/services/ospf-catalog-poll.d.ts", + "backend/dist/services/ospf-catalog-poll.d.ts.map", + "backend/dist/services/ospf-effective-disabled.js", + "backend/dist/services/ospf-effective-disabled.js.map", + "backend/dist/services/ospf-effective-disabled.d.ts", + "backend/dist/services/ospf-effective-disabled.d.ts.map", + "backend/dist/services/ospf-observed-values.js", + "backend/dist/services/ospf-observed-values.js.map", + "backend/dist/services/ospf-observed-values.d.ts", + "backend/dist/services/ospf-observed-values.d.ts.map", + "backend/dist/services/ospf-optimizer-identity.js", + "backend/dist/services/ospf-optimizer-identity.js.map", + "backend/dist/services/ospf-optimizer-identity.d.ts", + "backend/dist/services/ospf-optimizer-identity.d.ts.map", + "backend/dist/services/ospf-optimizer-metrics.js", + "backend/dist/services/ospf-optimizer-metrics.js.map", + "backend/dist/services/ospf-optimizer-metrics.d.ts", + "backend/dist/services/ospf-optimizer-metrics.d.ts.map", + "backend/dist/services/ospf-optimizer-plan.js", + "backend/dist/services/ospf-optimizer-plan.js.map", + "backend/dist/services/ospf-optimizer-plan.d.ts", + "backend/dist/services/ospf-optimizer-plan.d.ts.map", + "backend/dist/services/ospf-route-parse.js", + "backend/dist/services/ospf-route-parse.js.map", + "backend/dist/services/ospf-route-parse.d.ts", + "backend/dist/services/ospf-route-parse.d.ts.map", + "backend/dist/services/ping-probe-replacement.js", + "backend/dist/services/ping-probe-replacement.js.map", + "backend/dist/services/ping-probe-replacement.d.ts", + "backend/dist/services/ping-probe-replacement.d.ts.map", + "backend/dist/services/poller.js", + "backend/dist/services/poller.js.map", + "backend/dist/services/poller.d.ts", + "backend/dist/services/poller.d.ts.map", + "backend/dist/services/recursive-apply.js", + "backend/dist/services/recursive-apply.js.map", + "backend/dist/services/recursive-apply.d.ts", + "backend/dist/services/recursive-apply.d.ts.map", + "backend/dist/services/recursive-route-catalog.js", + "backend/dist/services/recursive-route-catalog.js.map", + "backend/dist/services/recursive-route-catalog.d.ts", + "backend/dist/services/recursive-route-catalog.d.ts.map", + "backend/dist/services/recursive-route-validation.js", + "backend/dist/services/recursive-route-validation.js.map", + "backend/dist/services/recursive-route-validation.d.ts", + "backend/dist/services/recursive-route-validation.d.ts.map", + "backend/dist/services/ros-metric-parse.js", + "backend/dist/services/ros-metric-parse.js.map", + "backend/dist/services/ros-metric-parse.d.ts", + "backend/dist/services/ros-metric-parse.d.ts.map", + "backend/dist/services/ros-ops.js", + "backend/dist/services/ros-ops.js.map", + "backend/dist/services/ros-ops.d.ts", + "backend/dist/services/ros-ops.d.ts.map", + "backend/dist/services/s3-backup-client.js", + "backend/dist/services/s3-backup-client.js.map", + "backend/dist/services/s3-backup-client.d.ts", + "backend/dist/services/s3-backup-client.d.ts.map", + "backend/dist/services/scheduler-recorded-run.js", + "backend/dist/services/scheduler-recorded-run.js.map", + "backend/dist/services/scheduler-recorded-run.d.ts", + "backend/dist/services/scheduler-recorded-run.d.ts.map", + "backend/dist/services/scheduler-running.js", + "backend/dist/services/scheduler-running.js.map", + "backend/dist/services/scheduler-running.d.ts", + "backend/dist/services/scheduler-running.d.ts.map", + "backend/dist/services/scheduler.js", + "backend/dist/services/scheduler.js.map", + "backend/dist/services/scheduler.d.ts", + "backend/dist/services/scheduler.d.ts.map", + "backend/dist/services/serial-operation.js", + "backend/dist/services/serial-operation.js.map", + "backend/dist/services/serial-operation.d.ts", + "backend/dist/services/serial-operation.d.ts.map", + "backend/dist/services/servers-rest-ping-collector.js", + "backend/dist/services/servers-rest-ping-collector.js.map", + "backend/dist/services/servers-rest-ping-collector.d.ts", + "backend/dist/services/servers-rest-ping-collector.d.ts.map", + "backend/dist/services/speed-history-dto.js", + "backend/dist/services/speed-history-dto.js.map", + "backend/dist/services/speed-history-dto.d.ts", + "backend/dist/services/speed-history-dto.d.ts.map", + "backend/dist/services/speed-probe-dto.js", + "backend/dist/services/speed-probe-dto.js.map", + "backend/dist/services/speed-probe-dto.d.ts", + "backend/dist/services/speed-probe-dto.d.ts.map", + "backend/dist/services/speed-probe-replacement.js", + "backend/dist/services/speed-probe-replacement.js.map", + "backend/dist/services/speed-probe-replacement.d.ts", + "backend/dist/services/speed-probe-replacement.d.ts.map", + "backend/dist/services/speed-run-error-message.js", + "backend/dist/services/speed-run-error-message.js.map", + "backend/dist/services/speed-run-error-message.d.ts", + "backend/dist/services/speed-run-error-message.d.ts.map", + "backend/dist/services/speed-run-persistence.js", + "backend/dist/services/speed-run-persistence.js.map", + "backend/dist/services/speed-run-persistence.d.ts", + "backend/dist/services/speed-run-persistence.d.ts.map", + "backend/dist/services/statistics-aggregate.js", + "backend/dist/services/statistics-aggregate.js.map", + "backend/dist/services/statistics-aggregate.d.ts", + "backend/dist/services/statistics-aggregate.d.ts.map", + "backend/dist/services/system-database-backup.js", + "backend/dist/services/system-database-backup.js.map", + "backend/dist/services/system-database-backup.d.ts", + "backend/dist/services/system-database-backup.d.ts.map", + "backend/dist/services/system-database-cache.js", + "backend/dist/services/system-database-cache.js.map", + "backend/dist/services/system-database-cache.d.ts", + "backend/dist/services/system-database-cache.d.ts.map", + "backend/dist/services/system-database-operation.js", + "backend/dist/services/system-database-operation.js.map", + "backend/dist/services/system-database-operation.d.ts", + "backend/dist/services/system-database-operation.d.ts.map", + "backend/dist/services/system-database-partition-restore.js", + "backend/dist/services/system-database-partition-restore.js.map", + "backend/dist/services/system-database-partition-restore.d.ts", + "backend/dist/services/system-database-partition-restore.d.ts.map", + "backend/dist/services/system-database-restore-execution.js", + "backend/dist/services/system-database-restore-execution.js.map", + "backend/dist/services/system-database-restore-execution.d.ts", + "backend/dist/services/system-database-restore-execution.d.ts.map", + "backend/dist/services/traffic-collector.js", + "backend/dist/services/traffic-collector.js.map", + "backend/dist/services/traffic-collector.d.ts", + "backend/dist/services/traffic-collector.d.ts.map", + "backend/dist/services/traffic-flow-analytics.js", + "backend/dist/services/traffic-flow-analytics.js.map", + "backend/dist/services/traffic-flow-analytics.d.ts", + "backend/dist/services/traffic-flow-analytics.d.ts.map", + "backend/dist/services/traffic-flow-apps.js", + "backend/dist/services/traffic-flow-apps.js.map", + "backend/dist/services/traffic-flow-apps.d.ts", + "backend/dist/services/traffic-flow-apps.d.ts.map", + "backend/dist/services/traffic-flow-brands.js", + "backend/dist/services/traffic-flow-brands.js.map", + "backend/dist/services/traffic-flow-brands.d.ts", + "backend/dist/services/traffic-flow-brands.d.ts.map", + "backend/dist/services/traffic-flow-classify.js", + "backend/dist/services/traffic-flow-classify.js.map", + "backend/dist/services/traffic-flow-classify.d.ts", + "backend/dist/services/traffic-flow-classify.d.ts.map", + "backend/dist/services/traffic-flow-collector-ipc.js", + "backend/dist/services/traffic-flow-collector-ipc.js.map", + "backend/dist/services/traffic-flow-collector-ipc.d.ts", + "backend/dist/services/traffic-flow-collector-ipc.d.ts.map", + "backend/dist/services/traffic-flow-collector-worker.js", + "backend/dist/services/traffic-flow-collector-worker.js.map", + "backend/dist/services/traffic-flow-collector-worker.d.ts", + "backend/dist/services/traffic-flow-collector-worker.d.ts.map", + "backend/dist/services/traffic-flow-dedup.js", + "backend/dist/services/traffic-flow-dedup.js.map", + "backend/dist/services/traffic-flow-dedup.d.ts", + "backend/dist/services/traffic-flow-dedup.d.ts.map", + "backend/dist/services/traffic-flow-dest.js", + "backend/dist/services/traffic-flow-dest.js.map", + "backend/dist/services/traffic-flow-dest.d.ts", + "backend/dist/services/traffic-flow-dest.d.ts.map", + "backend/dist/services/traffic-flow-engine.js", + "backend/dist/services/traffic-flow-engine.js.map", + "backend/dist/services/traffic-flow-engine.d.ts", + "backend/dist/services/traffic-flow-engine.d.ts.map", + "backend/dist/services/traffic-flow-facts-filter.js", + "backend/dist/services/traffic-flow-facts-filter.js.map", + "backend/dist/services/traffic-flow-facts-filter.d.ts", + "backend/dist/services/traffic-flow-facts-filter.d.ts.map", + "backend/dist/services/traffic-flow-facts-rebuild.js", + "backend/dist/services/traffic-flow-facts-rebuild.js.map", + "backend/dist/services/traffic-flow-facts-rebuild.d.ts", + "backend/dist/services/traffic-flow-facts-rebuild.d.ts.map", + "backend/dist/services/traffic-flow-facts.js", + "backend/dist/services/traffic-flow-facts.js.map", + "backend/dist/services/traffic-flow-facts.d.ts", + "backend/dist/services/traffic-flow-facts.d.ts.map", + "backend/dist/services/traffic-flow-geoip.js", + "backend/dist/services/traffic-flow-geoip.js.map", + "backend/dist/services/traffic-flow-geoip.d.ts", + "backend/dist/services/traffic-flow-geoip.d.ts.map", + "backend/dist/services/traffic-flow-host-file-builders.js", + "backend/dist/services/traffic-flow-host-file-builders.js.map", + "backend/dist/services/traffic-flow-host-file-builders.d.ts", + "backend/dist/services/traffic-flow-host-file-builders.d.ts.map", + "backend/dist/services/traffic-flow-host-files.js", + "backend/dist/services/traffic-flow-host-files.js.map", + "backend/dist/services/traffic-flow-host-files.d.ts", + "backend/dist/services/traffic-flow-host-files.d.ts.map", + "backend/dist/services/traffic-flow-ifaces.js", + "backend/dist/services/traffic-flow-ifaces.js.map", + "backend/dist/services/traffic-flow-ifaces.d.ts", + "backend/dist/services/traffic-flow-ifaces.d.ts.map", + "backend/dist/services/traffic-flow-ifindex.js", + "backend/dist/services/traffic-flow-ifindex.js.map", + "backend/dist/services/traffic-flow-ifindex.d.ts", + "backend/dist/services/traffic-flow-ifindex.d.ts.map", + "backend/dist/services/traffic-flow-ingest.js", + "backend/dist/services/traffic-flow-ingest.js.map", + "backend/dist/services/traffic-flow-ingest.d.ts", + "backend/dist/services/traffic-flow-ingest.d.ts.map", + "backend/dist/services/traffic-flow-ip.js", + "backend/dist/services/traffic-flow-ip.js.map", + "backend/dist/services/traffic-flow-ip.d.ts", + "backend/dist/services/traffic-flow-ip.d.ts.map", + "backend/dist/services/traffic-flow-key-execution.js", + "backend/dist/services/traffic-flow-key-execution.js.map", + "backend/dist/services/traffic-flow-key-execution.d.ts", + "backend/dist/services/traffic-flow-key-execution.d.ts.map", + "backend/dist/services/traffic-flow-map-exporter.js", + "backend/dist/services/traffic-flow-map-exporter.js.map", + "backend/dist/services/traffic-flow-map-exporter.d.ts", + "backend/dist/services/traffic-flow-map-exporter.d.ts.map", + "backend/dist/services/traffic-flow-map-hops.js", + "backend/dist/services/traffic-flow-map-hops.js.map", + "backend/dist/services/traffic-flow-map-hops.d.ts", + "backend/dist/services/traffic-flow-map-hops.d.ts.map", + "backend/dist/services/traffic-flow-overlay.js", + "backend/dist/services/traffic-flow-overlay.js.map", + "backend/dist/services/traffic-flow-overlay.d.ts", + "backend/dist/services/traffic-flow-overlay.d.ts.map", + "backend/dist/services/traffic-flow-parse.js", + "backend/dist/services/traffic-flow-parse.js.map", + "backend/dist/services/traffic-flow-parse.d.ts", + "backend/dist/services/traffic-flow-parse.d.ts.map", + "backend/dist/services/traffic-flow-planes.js", + "backend/dist/services/traffic-flow-planes.js.map", + "backend/dist/services/traffic-flow-planes.d.ts", + "backend/dist/services/traffic-flow-planes.d.ts.map", + "backend/dist/services/traffic-flow-purge-execution.js", + "backend/dist/services/traffic-flow-purge-execution.js.map", + "backend/dist/services/traffic-flow-purge-execution.d.ts", + "backend/dist/services/traffic-flow-purge-execution.d.ts.map", + "backend/dist/services/traffic-flow-ripe.js", + "backend/dist/services/traffic-flow-ripe.js.map", + "backend/dist/services/traffic-flow-ripe.d.ts", + "backend/dist/services/traffic-flow-ripe.d.ts.map", + "backend/dist/services/traffic-flow-settings.js", + "backend/dist/services/traffic-flow-settings.js.map", + "backend/dist/services/traffic-flow-settings.d.ts", + "backend/dist/services/traffic-flow-settings.d.ts.map", + "backend/dist/services/traffic-flow-topology.js", + "backend/dist/services/traffic-flow-topology.js.map", + "backend/dist/services/traffic-flow-topology.d.ts", + "backend/dist/services/traffic-flow-topology.d.ts.map", + "backend/dist/services/traffic-flow-worker-shutdown.js", + "backend/dist/services/traffic-flow-worker-shutdown.js.map", + "backend/dist/services/traffic-flow-worker-shutdown.d.ts", + "backend/dist/services/traffic-flow-worker-shutdown.d.ts.map", + "backend/dist/services/traffic-rate.js", + "backend/dist/services/traffic-rate.js.map", + "backend/dist/services/traffic-rate.d.ts", + "backend/dist/services/traffic-rate.d.ts.map", + "backend/dist/services/traffic-users.js", + "backend/dist/services/traffic-users.js.map", + "backend/dist/services/traffic-users.d.ts", + "backend/dist/services/traffic-users.d.ts.map", + "backend/dist/services/uptime-collector.js", + "backend/dist/services/uptime-collector.js.map", + "backend/dist/services/uptime-collector.d.ts", + "backend/dist/services/uptime-collector.d.ts.map", + "backend/dist/services/uptime-probe-observations.js", + "backend/dist/services/uptime-probe-observations.js.map", + "backend/dist/services/uptime-probe-observations.d.ts", + "backend/dist/services/uptime-probe-observations.d.ts.map", + "backend/dist/services/uptime-speed-service.js", + "backend/dist/services/uptime-speed-service.js.map", + "backend/dist/services/uptime-speed-service.d.ts", + "backend/dist/services/uptime-speed-service.d.ts.map", + "backend/dist/services/vxlan-live.js", + "backend/dist/services/vxlan-live.js.map", + "backend/dist/services/vxlan-live.d.ts", + "backend/dist/services/vxlan-live.d.ts.map", + "backend/dist/services/wg-keys.js", + "backend/dist/services/wg-keys.js.map", + "backend/dist/services/wg-keys.d.ts", + "backend/dist/services/wg-keys.d.ts.map", + "backend/dist/services/wireguard-config.js", + "backend/dist/services/wireguard-config.js.map", + "backend/dist/services/wireguard-config.d.ts", + "backend/dist/services/wireguard-config.d.ts.map", + "backend/dist/services/wireguard-delete.js", + "backend/dist/services/wireguard-delete.js.map", + "backend/dist/services/wireguard-delete.d.ts", + "backend/dist/services/wireguard-delete.d.ts.map", + "backend/dist/services/wireguard-import-apply.js", + "backend/dist/services/wireguard-import-apply.js.map", + "backend/dist/services/wireguard-import-apply.d.ts", + "backend/dist/services/wireguard-import-apply.d.ts.map", + "backend/dist/services/wireguard-import-revision.js", + "backend/dist/services/wireguard-import-revision.js.map", + "backend/dist/services/wireguard-import-revision.d.ts", + "backend/dist/services/wireguard-import-revision.d.ts.map", + "backend/dist/services/wireguard-import.js", + "backend/dist/services/wireguard-import.js.map", + "backend/dist/services/wireguard-import.d.ts", + "backend/dist/services/wireguard-import.d.ts.map", + "backend/dist/services/wireguard-live.js", + "backend/dist/services/wireguard-live.js.map", + "backend/dist/services/wireguard-live.d.ts", + "backend/dist/services/wireguard-live.d.ts.map", + "backend/dist/services/wireguard-observed-values.js", + "backend/dist/services/wireguard-observed-values.js.map", + "backend/dist/services/wireguard-observed-values.d.ts", + "backend/dist/services/wireguard-observed-values.d.ts.map", + "backend/dist/services/wireguard-ros.js", + "backend/dist/services/wireguard-ros.js.map", + "backend/dist/services/wireguard-ros.d.ts", + "backend/dist/services/wireguard-ros.d.ts.map", + "backend/dist/test/pg.js", + "backend/dist/test/pg.js.map", + "backend/dist/test/pg.d.ts", + "backend/dist/test/pg.d.ts.map", + "backend/dist/types/scheduler-run-snapshot.js", + "backend/dist/types/scheduler-run-snapshot.js.map", + "backend/dist/types/scheduler-run-snapshot.d.ts", + "backend/dist/types/scheduler-run-snapshot.d.ts.map", + "backend/dist/types/server.js", + "backend/dist/types/server.js.map", + "backend/dist/types/server.d.ts", + "backend/dist/types/server.d.ts.map", + "backend/dist/utils/abort-signals.js", + "backend/dist/utils/abort-signals.js.map", + "backend/dist/utils/abort-signals.d.ts", + "backend/dist/utils/abort-signals.d.ts.map", + "backend/dist/utils/ros-src-address.js", + "backend/dist/utils/ros-src-address.js.map", + "backend/dist/utils/ros-src-address.d.ts", + "backend/dist/utils/ros-src-address.d.ts.map", + "backend/dist/utils/server-id.js", + "backend/dist/utils/server-id.js.map", + "backend/dist/utils/server-id.d.ts", + "backend/dist/utils/server-id.d.ts.map", + "packages/contracts/dist/alerts.js", + "packages/contracts/dist/alerts.js.map", + "packages/contracts/dist/alerts.d.ts", + "packages/contracts/dist/alerts.d.ts.map", + "packages/contracts/dist/backups.js", + "packages/contracts/dist/backups.js.map", + "packages/contracts/dist/backups.d.ts", + "packages/contracts/dist/backups.d.ts.map", + "packages/contracts/dist/certificates.js", + "packages/contracts/dist/certificates.js.map", + "packages/contracts/dist/certificates.d.ts", + "packages/contracts/dist/certificates.d.ts.map", + "packages/contracts/dist/containers.js", + "packages/contracts/dist/containers.js.map", + "packages/contracts/dist/containers.d.ts", + "packages/contracts/dist/containers.d.ts.map", + "packages/contracts/dist/events.js", + "packages/contracts/dist/events.js.map", + "packages/contracts/dist/events.d.ts", + "packages/contracts/dist/events.d.ts.map", + "packages/contracts/dist/evobgp.js", + "packages/contracts/dist/evobgp.js.map", + "packages/contracts/dist/evobgp.d.ts", + "packages/contracts/dist/evobgp.d.ts.map", + "packages/contracts/dist/geoip.js", + "packages/contracts/dist/geoip.js.map", + "packages/contracts/dist/geoip.d.ts", + "packages/contracts/dist/geoip.d.ts.map", + "packages/contracts/dist/index.js", + "packages/contracts/dist/index.js.map", + "packages/contracts/dist/index.d.ts", + "packages/contracts/dist/index.d.ts.map", + "packages/contracts/dist/ipsec.js", + "packages/contracts/dist/ipsec.js.map", + "packages/contracts/dist/ipsec.d.ts", + "packages/contracts/dist/ipsec.d.ts.map", + "packages/contracts/dist/ospf-optimizer.js", + "packages/contracts/dist/ospf-optimizer.js.map", + "packages/contracts/dist/ospf-optimizer.d.ts", + "packages/contracts/dist/ospf-optimizer.d.ts.map", + "packages/contracts/dist/servers.js", + "packages/contracts/dist/servers.js.map", + "packages/contracts/dist/servers.d.ts", + "packages/contracts/dist/servers.d.ts.map", + "packages/contracts/dist/statistics.js", + "packages/contracts/dist/statistics.js.map", + "packages/contracts/dist/statistics.d.ts", + "packages/contracts/dist/statistics.d.ts.map", + "packages/contracts/dist/traffic-flow.js", + "packages/contracts/dist/traffic-flow.js.map", + "packages/contracts/dist/traffic-flow.d.ts", + "packages/contracts/dist/traffic-flow.d.ts.map", + "packages/contracts/dist/uptime-probes.js", + "packages/contracts/dist/uptime-probes.js.map", + "packages/contracts/dist/uptime-probes.d.ts", + "packages/contracts/dist/uptime-probes.d.ts.map", + "packages/contracts/dist/uptime-speed.js", + "packages/contracts/dist/uptime-speed.js.map", + "packages/contracts/dist/uptime-speed.d.ts", + "packages/contracts/dist/uptime-speed.d.ts.map", + "packages/contracts/dist/users.js", + "packages/contracts/dist/users.js.map", + "packages/contracts/dist/users.d.ts", + "packages/contracts/dist/users.d.ts.map", + "packages/contracts/dist/wireguard.js", + "packages/contracts/dist/wireguard.js.map", + "packages/contracts/dist/wireguard.d.ts", + "packages/contracts/dist/wireguard.d.ts.map" + ], + "missing": [], + "different": [] +} \ No newline at end of file diff --git a/docs/ux-ui/acceptance/gre-ipv6-initial-api-2026-10-11.json b/docs/ux-ui/acceptance/gre-ipv6-initial-api-2026-10-11.json new file mode 100644 index 00000000..1d3651d9 --- /dev/null +++ b/docs/ux-ui/acceptance/gre-ipv6-initial-api-2026-10-11.json @@ -0,0 +1,28 @@ +{ + "date": "2026-10-11", + "block": "12.5.151", + "name": "mm-gre151-1791729010604", + "cases": [ + { + "method": "POST", + "path": "/gre/tunnels", + "status": 201 + }, + { + "method": "GET", + "path": "/gre/revisions?serverId=1", + "status": 200 + }, + { + "method": "POST", + "path": "/gre/tunnels", + "status": 201 + }, + { + "method": "GET", + "path": "/gre/revisions?serverId=2", + "status": 200 + } + ], + "pings": [] +} \ No newline at end of file diff --git a/docs/ux-ui/acceptance/gre-ipv6-initial-cleanup-2026-10-11.json b/docs/ux-ui/acceptance/gre-ipv6-initial-cleanup-2026-10-11.json new file mode 100644 index 00000000..8bc260d8 --- /dev/null +++ b/docs/ux-ui/acceptance/gre-ipv6-initial-cleanup-2026-10-11.json @@ -0,0 +1,47 @@ +{ + "date": "2026-10-11", + "block": "12.5.151", + "name": "mm-gre151-1791729010604", + "devices": [ + { + "serverId": 1, + "host": "194.226.121.150", + "version": "7.24.5 (stable)", + "reachable": true + }, + { + "serverId": 2, + "host": "104.165.244.7", + "version": "7.24.5 (stable)", + "reachable": true + } + ], + "cleanup": [ + { + "serverId": 1, + "/interface/gre": true, + "/ip/address": true, + "/ipv6/address": true, + "/ip/route": true, + "/ipv6/route": true, + "/ip/firewall/filter": true, + "/ip/firewall/nat": true, + "/ipv6/firewall/filter": true + }, + { + "serverId": 2, + "/interface/gre": true, + "/ip/address": true, + "/ipv6/address": true, + "/ip/route": true, + "/ipv6/route": true, + "/ip/firewall/filter": true, + "/ip/firewall/nat": true, + "/ipv6/firewall/filter": true + } + ], + "childExit": 1, + "error": "Child failed: inspect private log\n\n1 !== 0\n", + "databaseRemoved": true, + "passed": false +} \ No newline at end of file diff --git a/docs/ux-ui/acceptance/gre-ipv6-native-2026-10-11.json b/docs/ux-ui/acceptance/gre-ipv6-native-2026-10-11.json new file mode 100644 index 00000000..972934ec --- /dev/null +++ b/docs/ux-ui/acceptance/gre-ipv6-native-2026-10-11.json @@ -0,0 +1,46 @@ +{ + "date": "2026-10-11", + "block": "12.5.151", + "name": "mm-gre151-1791729169930", + "devices": [ + { + "serverId": 1, + "host": "194.226.121.150", + "version": "7.24.5 (stable)", + "reachable": true + }, + { + "serverId": 2, + "host": "104.165.244.7", + "version": "7.24.5 (stable)", + "reachable": true + } + ], + "cleanup": [ + { + "serverId": 1, + "/interface/gre": true, + "/ip/address": true, + "/ipv6/address": true, + "/ip/route": true, + "/ipv6/route": true, + "/ip/firewall/filter": true, + "/ip/firewall/nat": true, + "/ipv6/firewall/filter": true + }, + { + "serverId": 2, + "/interface/gre": true, + "/ip/address": true, + "/ipv6/address": true, + "/ip/route": true, + "/ipv6/route": true, + "/ip/firewall/filter": true, + "/ip/firewall/nat": true, + "/ipv6/firewall/filter": true + } + ], + "childExit": 0, + "databaseRemoved": true, + "passed": true +} \ No newline at end of file diff --git a/docs/ux-ui/acceptance/gre-ipv6-smoke-2026-10-11.json b/docs/ux-ui/acceptance/gre-ipv6-smoke-2026-10-11.json new file mode 100644 index 00000000..5a419cdd --- /dev/null +++ b/docs/ux-ui/acceptance/gre-ipv6-smoke-2026-10-11.json @@ -0,0 +1,49 @@ +{ + "date": "2026-10-11", + "block": "12.5.151", + "runtime": { + "backend": "ux-gre151", + "frontend": "ux-gre151" + }, + "cases": [ + { + "width": 1440, + "status": 200, + "api": [ + { + "path": "/api/servers", + "status": 200 + }, + { + "path": "/api/gre/tunnels", + "status": 200 + } + ], + "pageErrors": [], + "noOverflow": true, + "ipv6AddressHint": true + }, + { + "width": 320, + "status": 200, + "api": [ + { + "path": "/api/servers", + "status": 200 + }, + { + "path": "/api/gre/tunnels", + "status": 200 + } + ], + "pageErrors": [], + "noOverflow": true, + "ipv6AddressHint": true + } + ], + "bounds": [ + "Read-only live catalog/new-form UI smoke after native cleanup; no deployed UI mutation", + "Native real RouterOS mutations/history/SQL accepted via dedicated database with production Fastify handlers", + "IPv6 ULA inner over IPv4 GRE outer; no IPv6 outer/independent WAN/throughput/scale claim" + ] +} diff --git a/tests/e2e/gre-form.spec.ts b/tests/e2e/gre-form.spec.ts index f33529bd..8fd696ae 100644 --- a/tests/e2e/gre-form.spec.ts +++ b/tests/e2e/gre-form.spec.ts @@ -13,7 +13,7 @@ for (const mode of ["create", "dto", "edit"]) { if (route.request().method() === (mode === "edit" ? "PATCH" : "POST")) { attempts++ expect(path).toBe("/api/gre/tunnels") - expect(route.request().postDataJSON()).toMatchObject({ serverId: "1", name: "gre-test", remoteAddress: "192.0.2.9", remoteInnerIp, comment: "сохранённый ввод" }) + expect(route.request().postDataJSON()).toMatchObject({ serverId: "1", name: "gre-test", remoteAddress: "192.0.2.9", remoteInnerIp, localInnerIp: mode === "edit" ? "" : "fd00:151::1/64", comment: "сохранённый ввод" }) if (mode === "edit") expect(route.request().postDataJSON().rosId).toBe("*T/1") if (attempts === 1) { await gate; return route.fulfill({ status: 403, json: { error: "Запись запрещена тест" } }) } if (attempts === 2) return route.fulfill({ json: {} }) @@ -40,6 +40,7 @@ for (const mode of ["create", "dto", "edit"]) { await sheet.getByLabel("Удалённый адрес").fill("192.0.2.9") await sheet.getByLabel("Комментарий").fill("сохранённый ввод") await sheet.getByLabel("Удалённый IP", { exact: true }).fill(remoteInnerIp) + await sheet.getByLabel("Локальный IP", { exact: true }).fill(mode === "edit" ? "" : "fd00:151::1/64") const submit = sheet.getByRole("button", { name: mode === "edit" ? "Сохранить" : "Создать туннель", exact: true }) await submit.evaluate(button => { (button as HTMLButtonElement).click(); (button as HTMLButtonElement).click() }) await expect.poll(() => attempts).toBe(1) diff --git a/tests/e2e/gre-ipv6.spec.ts b/tests/e2e/gre-ipv6.spec.ts new file mode 100644 index 00000000..4cd713b0 --- /dev/null +++ b/tests/e2e/gre-ipv6.spec.ts @@ -0,0 +1,34 @@ +import { test, expect } from "@playwright/test" + +for (const width of [1440, 320]) { + test(`GRE IPv6: каталог и явная очистка адреса, ширина ${width}`, async ({ page }) => { + await page.setViewportSize({ width, height: 1000 }) + const errors: string[] = [] + page.on("pageerror", e => errors.push(e.message)) + const tunnel = { id: "*151", name: "gre-ipv6", serverId: "1", localAddress: "192.0.2.1", remoteAddress: "192.0.2.2", localInnerIp: "fd00:151::1/64", remoteInnerIp: "fd00:151::2", poolId: "live", ipsec: null, mtu: 1400, keepaliveInterval: 10, keepaliveRetries: 3, dscp: "inherit", clampTcpMss: true, allowFastPath: false, comment: "", enabled: true, status: "up" } + let submitted = false + await page.route("**/health", route => route.fulfill({ json: { ok: true } })) + await page.route("**/api/**", route => { + const path = new URL(route.request().url()).pathname + if (route.request().method() === "PATCH" && path === "/api/gre/tunnels") { + expect(route.request().postDataJSON()).toMatchObject({ rosId: "*151", localInnerIp: "", remoteInnerIp: "fd00:151::2" }) + submitted = true + return route.fulfill({ json: { ok: true } }) + } + return route.fulfill({ json: path === "/api/auth/config" ? { required: false } : path === "/api/servers" ? [{ id: 1, name: "CHR", host: "192.0.2.1", enabled: true, type: "exit-node", country: "RU", status: "online" }] : path === "/api/gre/tunnels" ? { tunnels: [tunnel] } : {} }) + }) + await page.goto("/gre") + await expect(page.getByRole("button", { name: "Действия: gre-ipv6" })).toBeVisible() + await page.getByRole("button", { name: "Действия: gre-ipv6" }).click() + await page.getByRole("menuitem", { name: "Редактировать", exact: true }).click() + const sheet = page.getByRole("dialog") + await expect(sheet.getByLabel("Локальный IP", { exact: true })).toHaveValue("fd00:151::1/64") + await expect(sheet.getByLabel("Локальный IP", { exact: true })).toHaveAttribute("placeholder", "IPv4/IPv6 с префиксом") + expect(await page.evaluate(() => document.documentElement.scrollWidth <= innerWidth)).toBe(true) + await sheet.getByLabel("Локальный IP", { exact: true }).fill("") + await sheet.getByRole("button", { name: "Сохранить", exact: true }).click() + await expect(sheet).toHaveCount(0) + expect(submitted).toBe(true) + expect(errors).toEqual([]) + }) +}