fix(gre): сохранять и восстанавливать статические IPv6 адреса

This commit is contained in:
Denozordec committed 2026-10-11 21:37:12 +07:00
1 parent 655ea9727f
commit f3cbc32720
21 files changed
+1643 -60

No files matched your search

+2 -2
View File
@@ -321,7 +321,7 @@ function GrePageContent({ selectedServerId, selectedTunnelId, allTunnelsHref, on
name: form.name.trim(),
localAddress: form.localAddress.trim() || undefined,
remoteAddress: form.remoteAddress.trim(),
localInnerIp: form.localInnerIp.trim() || undefined,
localInnerIp: form.localInnerIp.trim(),
remoteInnerIp: form.remoteInnerIp.trim(),
comment: form.comment || undefined,
enabled: form.enabled,
@@ -833,7 +833,7 @@ function GrePageContent({ selectedServerId, selectedTunnelId, allTunnelsHref, on
{!isLive && <p className="text-xs text-muted-foreground">Моковые пулы доступны только для просмотра.</p>}
<div className="grid grid-cols-1 gap-3 sm:grid-cols-2">
<FormField label="Локальный IP" hint="/ip address на этом конце">
<Input className="font-mono" aria-label="Локальный IP" placeholder="10.200.0.1/30" value={tForm.localInnerIp} onChange={(e) => setT("localInnerIp", e.target.value)} />
<Input className="font-mono" aria-label="Локальный IP" placeholder="IPv4/IPv6 с префиксом" value={tForm.localInnerIp} onChange={(e) => setT("localInnerIp", e.target.value)} />
</FormField>
<FormField label="Удалённый IP" hint="/ip address на другом конце">
<Input className="font-mono" aria-label="Удалённый IP" placeholder="10.200.0.2/30" value={tForm.remoteInnerIp} onChange={(e) => setT("remoteInnerIp", e.target.value)} />
+1 -1
View File
@@ -24,7 +24,7 @@
"test:users": "tsx src/modules/users/iface-type.test.ts && tsx src/modules/users/bindings.test.ts && tsx src/modules/users/interface-inventory.test.ts && tsx src/routes/users-catalog.test.ts",
"test:pg": "tsx src/db/sql-bind.test.ts && tsx src/db/sqlite-json.test.ts && tsx src/db/traffic-flags.test.ts && tsx src/db/pg-schema.test.ts && tsx src/services/config-revisions.test.ts",
"test:recursive-routes": "tsx src/routes/recursive-routes.test.ts && tsx src/services/recursive-route-catalog.test.ts && tsx src/services/recursive-apply.test.ts",
"test:config-sync": "tsx src/services/config-apply-plan.test.ts && tsx src/services/entity-snapshots.test.ts",
"test:config-sync": "tsx src/services/config-apply-plan.test.ts && tsx src/services/entity-snapshots.test.ts && tsx src/services/gre-ipv6.test.ts && tsx src/routes/gre-ipv6-validation.test.ts",
"test:ros-file": "tsx src/services/ros-file-contents.test.ts && tsx src/services/mikrotik-response.test.ts",
"test:scheduler": "tsx src/services/scheduler-running.test.ts && tsx src/services/scheduler-recorded-run.test.ts && tsx src/routes/scheduler.test.ts",
"test:backups": "tsx src/services/backup-scheduler-run.test.ts && tsx src/services/backup-restore.test.ts && tsx src/services/backup-deletion.test.ts && tsx src/services/backup-dto.test.ts && tsx src/services/backup-storage-update.test.ts && tsx src/services/backup-job-execution.test.ts && tsx src/routes/backups-operations.test.ts && tsx src/services/s3-backup-client.test.ts",
@@ -0,0 +1,18 @@
import assert from "node:assert/strict"
import Fastify from "fastify"
import { validatorCompiler, serializerCompiler } from "@fastify/type-provider-zod"
import greRoutes from "./gre.js"
const app = Fastify()
app.setValidatorCompiler(validatorCompiler)
app.setSerializerCompiler(serializerCompiler)
await app.register(greRoutes, { prefix: "/api" })
for (const localInnerIp of ["fd00::1", "fd00::1/129", "fd00::1%ether1/64", "10.0.0.1/33", "bad/64", "10.0.0.1/24/x", " "]) {
for (const method of ["POST", "PATCH"] as const) {
const r = await app.inject({ method, url: "/api/gre/tunnels", payload: { serverId: "1", name: "own", remoteAddress: "192.0.2.1", localInnerIp } })
assert.equal(r.statusCode, 400)
assert.equal(r.json().error, "Некорректное тело запроса")
}
}
await app.close()
console.log("GRE IPv6: 14 invalid POST/PATCH requests rejected before DB/RouterOS access")
+24 -8
View File
@@ -15,6 +15,8 @@ import {
planGreCreate,
planGreDelete,
planGreRestore,
greAddressPath,
GreRestoreConflict,
} from "../services/entity-snapshots.js"
import { executeRosOps } from "../services/ros-ops.js"
import {
@@ -32,7 +34,10 @@ const TunnelWriteSchema = z.object({
rosId: z.string().optional(),
localAddress: z.string().optional(),
remoteAddress: z.string().min(1),
localInnerIp: z.string().optional(),
localInnerIp: z.string().refine(value => {
if (!value) return true
try { greAddressPath(value); return true } catch { return false }
}, "Требуется IPv4/IPv6 с префиксом").optional(),
remoteInnerIp: z.string().optional(),
comment: z.string().optional(),
enabled: z.boolean().optional(),
@@ -126,7 +131,7 @@ const greRoutes: FastifyPluginAsyncZod = async (app) => {
const created = state.tunnels.find((t) => t.name === tunnel.name)
return reply.status(201).send(created ?? { ok: true, name: tunnel.name })
} catch (e) {
return reply.status(502).send({ error: `RouterOS: ${rosErr(e)}` })
return reply.status(e instanceof GreRestoreConflict ? 409 : 502).send({ error: `RouterOS: ${rosErr(e)}` })
}
})
@@ -144,12 +149,15 @@ const greRoutes: FastifyPluginAsyncZod = async (app) => {
(body.rosId && g.rosId === body.rosId) || (body.name && g.name === body.name),
)
if (!live) return reply.status(404).send({ error: "Туннель не найден" })
if (body.rosId && body.rosId !== live.rosId) return reply.status(409).send({ error: "ID и имя GRE указывают на разные объекты" })
if (body.name && body.name !== live.name) return reply.status(409).send({ error: "Переименование GRE требует отдельной операции" })
const original = state.snapshot.tunnels.find(t => t.name === live.name)!
const merged = tunnelFromBody({
serverId: body.serverId,
name: body.name || live.name,
localAddress: body.localAddress ?? live.localAddress,
remoteAddress: body.remoteAddress || live.remoteAddress,
localInnerIp: body.localInnerIp ?? state.addrs.find((a) => a.interfaceName === live.name)?.address ?? "",
localInnerIp: body.localInnerIp ?? original.localInnerIp,
remoteInnerIp: body.remoteInnerIp ?? state.tunnels.find(t => t.name === live.name)?.remoteInnerIp ?? "",
comment: body.comment ?? live.comment,
enabled: body.enabled ?? !live.disabled,
@@ -161,15 +169,22 @@ const greRoutes: FastifyPluginAsyncZod = async (app) => {
allowFastPath: body.allowFastPath ?? live.allowFastPath,
ipsecSecret: body.ipsecSecret ?? live.ipsecSecret,
})
merged.innerAddresses = original.innerAddresses?.map(a => ({ ...a }))
if (body.localInnerIp !== undefined && body.localInnerIp !== original.localInnerIp) {
merged.innerAddresses = (merged.innerAddresses ?? []).filter(a => a.address !== original.localInnerIp)
if (body.localInnerIp && !merged.innerAddresses.some(a => a.address === body.localInnerIp)) {
merged.innerAddresses.push({ address: body.localInnerIp, disabled: false, ...(greAddressPath(body.localInnerIp) === "/ipv6/address" ? { advertise: false } : {}) })
}
}
const ops = planGreRestore(
{ tunnels: state.snapshot.tunnels.map((t) => t.name === live.name ? merged : t) },
{ gre: state.gre, addrs: state.addrs },
{ tunnels: [merged] },
{ gre: [live], addrs: state.addrs.filter(a => a.interfaceName === live.name) },
)
await executeRosOps(state.client, ops)
await recordGre(server, "apply")
return reply.send({ ok: true })
} catch (e) {
return reply.status(502).send({ error: `RouterOS: ${rosErr(e)}` })
return reply.status(e instanceof GreRestoreConflict ? 409 : 502).send({ error: `RouterOS: ${rosErr(e)}` })
}
})
@@ -187,11 +202,12 @@ const greRoutes: FastifyPluginAsyncZod = async (app) => {
(body.rosId && g.rosId === body.rosId) || (body.name && g.name === body.name),
)
if (!live) return reply.status(404).send({ error: "Туннель не найден" })
if ((body.rosId && body.rosId !== live.rosId) || (body.name && body.name !== live.name)) return reply.status(409).send({ error: "ID и имя GRE указывают на разные объекты" })
await executeRosOps(state.client, planGreDelete(live.name, { gre: state.gre, addrs: state.addrs }))
await recordGre(server, "apply")
return reply.send({ ok: true })
} catch (e) {
return reply.status(502).send({ error: `RouterOS: ${rosErr(e)}` })
return reply.status(e instanceof GreRestoreConflict ? 409 : 502).send({ error: `RouterOS: ${rosErr(e)}` })
}
})
@@ -223,7 +239,7 @@ const greRoutes: FastifyPluginAsyncZod = async (app) => {
const next = await fetchGreState(loaded.server)
return reply.send({ ok: true, tunnels: next.tunnels })
} catch (e) {
return reply.status(502).send({ error: `RouterOS: ${rosErr(e)}` })
return reply.status(e instanceof GreRestoreConflict ? 409 : 502).send({ error: `RouterOS: ${rosErr(e)}` })
}
})
}
+81 -22
View File
@@ -1,6 +1,7 @@
/** Канонические снапшоты и планы restore для firewall / WireGuard / GRE / IPsec. */
import { isIpsecManagedComment, isManagedIpsecModeConfig } from "./ipsec-config.js"
import { readGreComment, writeGreComment } from "./gre-comment.js"
import { isIP } from "node:net"
export type FirewallFamily = "ip" | "ip6"
export type FirewallTable = "filter" | "nat" | "mangle" | "raw"
@@ -129,6 +130,7 @@ export interface GreSnapshotTunnel {
localAddress: string
remoteAddress: string
localInnerIp: string
innerAddresses?: GreSnapshotAddress[]
remoteInnerIp: string
comment: string
disabled: boolean
@@ -163,6 +165,40 @@ export interface GreLiveAddr {
rosId: string
interfaceName: string
address: string
disabled?: boolean
advertise?: boolean
dynamic?: boolean
comment?: string
noDad?: boolean
fromPool?: string
eui64?: boolean
}
export interface GreSnapshotAddress {
address: string
disabled: boolean
advertise?: boolean
comment?: string
noDad?: boolean
fromPool?: string
eui64?: boolean
}
export class GreRestoreConflict extends Error {}
export function greAddressPath(address: string): "/ip/address" | "/ipv6/address" {
const parts = address.split("/")
const family = isIP(parts[0] ?? "")
if (!family || address.includes("%") || parts.length !== 2 || !/^\d+$/.test(parts[1] ?? "") || Number(parts[1]) > (family === 6 ? 128 : 32)) {
throw new GreRestoreConflict("Некорректный внутренний адрес GRE: требуется IPv4/IPv6 с префиксом")
}
return family === 6 ? "/ipv6/address" : "/ip/address"
}
export function greAddressKey(address: string): string {
const path = greAddressPath(address)
const [ip, prefix] = address.split("/")
return `${path === "/ipv6/address" ? new URL(`http://[${ip}]`).hostname : ip}/${Number(prefix)}`
}
// ── IPsec / IKEv2 (managed-объекты, маркер MikrotikManager:ipsec) ────────────
@@ -864,6 +900,17 @@ export function canonicalGreSnapshot(input: {
localAddress: str(t.localAddress),
remoteAddress: str(t.remoteAddress),
localInnerIp: str(t.localInnerIp),
...(t.innerAddresses === undefined ? {} : {
innerAddresses: t.innerAddresses.map(a => ({
address: str(a.address), disabled: bool(a.disabled),
...(a.comment === undefined ? {} : { comment: str(a.comment) }),
...(greAddressPath(str(a.address)) === "/ipv6/address" ? { advertise: a.advertise === true,
...(a.noDad === undefined ? {} : { noDad: a.noDad === true }),
...(a.fromPool ? { fromPool: str(a.fromPool) } : {}),
...(a.eui64 ? { eui64: true } : {}),
} : {}),
})).sort((a, b) => a.address.localeCompare(b.address)),
}),
remoteInnerIp: str(t.remoteInnerIp),
comment: str(t.comment),
disabled: Boolean(t.disabled),
@@ -913,11 +960,13 @@ export function planGreCreate(tunnel: GreSnapshotTunnel): RosWriteOp[] {
const ops: RosWriteOp[] = [
{ op: "put", path: "/interface/gre", body: greInterfaceBody(t) },
]
if (t.localInnerIp) {
const addresses = t.innerAddresses ?? (t.localInnerIp ? [{ address: t.localInnerIp, disabled: false }] : [])
if (new Set(addresses.map(a => greAddressKey(a.address))).size !== addresses.length) throw new GreRestoreConflict("В ревизии GRE повторяются внутренние адреса")
for (const a of addresses) {
ops.push({
op: "put",
path: "/ip/address",
body: { address: t.localInnerIp, interface: t.name },
path: greAddressPath(a.address),
body: greAddressBody(a, t.name),
})
}
return ops
@@ -930,8 +979,8 @@ export function planGreDelete(
const want = str(name)
const ops: RosWriteOp[] = []
for (const addr of current.addrs) {
if (addr.interfaceName === want) {
ops.push({ op: "delete", path: `/ip/address/${addr.rosId}` })
if (addr.interfaceName === want && !addr.dynamic) {
ops.push({ op: "delete", path: `${greAddressPath(addr.address)}/${addr.rosId}` })
}
}
for (const gre of current.gre) {
@@ -965,30 +1014,40 @@ export function planGreRestore(
ops.push({ op: "patch", path: `/interface/gre/${live.rosId}`, body })
}
const liveAddr = current.addrs.find((a) => a.interfaceName === want.name)
if (want.localInnerIp) {
if (!liveAddr) {
ops.push({
op: "put",
path: "/ip/address",
body: { address: want.localInnerIp, interface: want.name },
})
} else if (liveAddr.address !== want.localInnerIp) {
ops.push({ op: "delete", path: `/ip/address/${liveAddr.rosId}` })
ops.push({
op: "put",
path: "/ip/address",
body: { address: want.localInnerIp, interface: want.name },
})
const liveAddrs = current.addrs.filter(a => a.interfaceName === want.name && !a.dynamic)
if (liveAddrs.some(a => a.fromPool || a.eui64)) throw new GreRestoreConflict("GRE содержит адрес из IPv6-пула или EUI-64. Измените его отдельно в RouterOS")
if (want.innerAddresses === undefined && liveAddrs.length > 1) {
throw new GreRestoreConflict("Старая ревизия GRE не описывает все адреса интерфейса. Восстановление остановлено")
}
const addresses = want.innerAddresses ?? (want.localInnerIp ? [{ address: want.localInnerIp, disabled: false }] : [])
const keys = new Set(addresses.map(a => greAddressKey(a.address)))
if (keys.size !== addresses.length) throw new GreRestoreConflict("В ревизии GRE повторяются внутренние адреса")
for (const addr of liveAddrs) {
if (!keys.has(greAddressKey(addr.address))) ops.push({ op: "delete", path: `${greAddressPath(addr.address)}/${addr.rosId}` })
}
for (const addr of addresses) {
const existing = liveAddrs.find(a => greAddressKey(a.address) === greAddressKey(addr.address))
if (!existing) ops.push({ op: "put", path: greAddressPath(addr.address), body: greAddressBody(addr, want.name) })
else if (Boolean(existing.disabled) !== addr.disabled || (addr.comment !== undefined && str(existing.comment) !== addr.comment) || (greAddressPath(addr.address) === "/ipv6/address" && (Boolean(existing.advertise) !== Boolean(addr.advertise) || (addr.noDad !== undefined && Boolean(existing.noDad) !== addr.noDad)))) {
ops.push({ op: "patch", path: `${greAddressPath(addr.address)}/${existing.rosId}`, body: greAddressBody(addr, want.name) })
}
} else if (liveAddr) {
ops.push({ op: "delete", path: `/ip/address/${liveAddr.rosId}` })
}
}
return ops
}
function greAddressBody(a: GreSnapshotAddress, name: string): Record<string, string> {
if (a.fromPool || a.eui64) throw new GreRestoreConflict("Восстановление IPv6-пула/EUI-64 требует отдельной настройки RouterOS")
return {
address: a.address, interface: name,
...(a.comment === undefined ? {} : { comment: a.comment }),
...(a.disabled ? { disabled: "yes" } : { disabled: "no" }),
...(greAddressPath(a.address) === "/ipv6/address" ? { advertise: a.advertise ? "yes" : "no" } : {}),
...(a.noDad === undefined ? {} : { "no-dad": a.noDad ? "yes" : "no" }),
}
}
export function opsPaths(ops: RosWriteOp[]): string[] {
return ops.map((op) => op.path)
}
+72
View File
@@ -0,0 +1,72 @@
import assert from "node:assert/strict"
import { canonicalGreSnapshot, greAddressPath, GreRestoreConflict, planGreCreate, planGreDelete, planGreRestore, parseGreSnapshot } from "./entity-snapshots.js"
import { fetchGreState, mapGreLive } from "./gre-live.js"
import { MikrotikClient } from "./mikrotik.js"
import type { servers } from "../db/schema.js"
const server = { id: 1, name: "CHR", enabled: true } as typeof servers.$inferSelect
const raw = [{ ".id": "*g", name: "own-gre", "remote-address": "192.0.2.1", running: "true" }]
const rows = [
{ ".id": "*1", interface: "own-gre", address: "10.1.0.1/30" },
{ ".id": "*1", interface: "own-gre", address: "fd00:151::1/64", advertise: "yes" },
{ ".id": "*2", interface: "own-gre", address: "fd00:151::2/64", disabled: "true", advertise: "no" },
{ ".id": "*3", interface: "own-gre", address: "fe80::1/64", dynamic: "true" },
{ ".id": "*4", interface: "public", address: "192.0.2.2/24" },
]
const state = mapGreLive(server, raw, rows)
assert.equal(state.addrs.length, 3)
assert.equal(state.tunnels[0]?.localInnerIp, "10.1.0.1/30")
assert.equal(state.snapshot.tunnels[0]?.innerAddresses?.length, 3)
assert.deepEqual(mapGreLive(server, raw, [...rows].reverse()).snapshot, state.snapshot)
assert.equal(mapGreLive(server, raw, rows.slice(1)).tunnels[0]?.localInnerIp, "fd00:151::1/64")
const del = planGreDelete("own-gre", state)
assert.deepEqual(del.map(op => op.path), ["/ip/address/*1", "/ipv6/address/*1", "/ipv6/address/*2", "/interface/gre/*g"])
assert(!del.some(op => op.path.includes("*3") || op.path.includes("*4")))
const noChanges = planGreRestore(state.snapshot, state)
assert.equal(noChanges.filter(op => op.path.includes("/address")).length, 0)
const expanded = structuredClone(state.snapshot)
expanded.tunnels[0]!.innerAddresses![1]!.address = "fd00:0151:0000:0000:0000:0000:0000:0001/64"
assert.equal(planGreRestore(expanded, state).filter(op => op.path.includes("/address")).length, 0)
const legacy = canonicalGreSnapshot({ tunnels: [{ name: "own-gre", localInnerIp: "fd00:151::1/64" }] })
assert.equal(parseGreSnapshot(legacy).tunnels[0]?.innerAddresses, undefined)
assert.throws(() => planGreRestore(legacy, state), GreRestoreConflict)
for (const address of ["fd00::1/64", "10.0.0.1/30"]) {
const t = canonicalGreSnapshot({ tunnels: [{ name: "own-gre", localInnerIp: address }] }).tunnels[0]!
const create = planGreCreate(t)
assert.equal(create[1]?.path, greAddressPath(address))
if (create[1]?.op === "put" && address.includes(":")) assert.equal(create[1].body.advertise, "no")
const only = { gre: state.gre, addrs: [{ rosId: "*x", interfaceName: "own-gre", address: address.includes(":") ? "10.0.0.1/30" : "fd00::1/64" }] }
const restore = planGreRestore({ tunnels: [t] }, only)
assert(restore.some(op => op.op === "delete" && op.path === `${greAddressPath(only.addrs[0]!.address)}/*x`))
assert(restore.some(op => op.op === "put" && op.path === greAddressPath(address)))
}
const flags = structuredClone(state.snapshot)
flags.tunnels[0]!.innerAddresses![1]!.advertise = false
assert(planGreRestore(flags, state).some(op => op.op === "patch" && op.path === "/ipv6/address/*1" && op.body.advertise === "no"))
for (const address of ["fd00::1", "fd00::1/129", "fd00::1/-1", "bad/64", "10.0.0.1/33", "10.0.0.1/", "10.0.0.1/24/x"]) assert.throws(() => greAddressPath(address), GreRestoreConflict)
const duplicate = structuredClone(state.snapshot)
duplicate.tunnels[0]!.innerAddresses!.push({ address: "fd00:0151:0:0:0:0:0:1/64", disabled: false })
assert.throws(() => planGreRestore(duplicate, state), GreRestoreConflict)
assert.throws(() => planGreRestore(state.snapshot, { ...state, addrs: state.addrs.map(a => ({ ...a, fromPool: "pool6" })) }), GreRestoreConflict)
assert.throws(() => planGreCreate(canonicalGreSnapshot({ tunnels: [{ name: "pooled", innerAddresses: [{ address: "fd00::1/64", disabled: false, eui64: true }] }] }).tunnels[0]!), GreRestoreConflict)
const original = MikrotikClient.fromServer
try {
const calls: string[] = []
MikrotikClient.fromServer = () => ({ get: async (path: string) => {
calls.push(path)
if (path === "/interface/gre") return raw
if (path === "/ip/address") return [rows[0]]
if (path === "/ipv6/address") return rows.slice(1)
throw new Error("Unexpected path")
} }) as unknown as MikrotikClient
assert.equal((await fetchGreState(server)).addrs.length, 3)
assert.deepEqual(calls.sort(), ["/interface/gre", "/ip/address", "/ipv6/address"])
MikrotikClient.fromServer = () => ({ get: async (path: string) => {
if (path === "/ipv6/address") throw new Error("Unauthorized")
return []
} }) as unknown as MikrotikClient
await assert.rejects(fetchGreState(server), /Unauthorized/)
MikrotikClient.fromServer = () => ({ get: async () => ({}) }) as unknown as MikrotikClient
await assert.rejects(fetchGreState(server), /неполный каталог/)
} finally { MikrotikClient.fromServer = original }
console.log("GRE IPv6: static catalog, disabled/advertise, family IDs, legacy conflict, normalization, create/restore/delete and failed reads passed")
+29 -12
View File
@@ -1,10 +1,11 @@
import { eq } from "drizzle-orm"
import { and, eq } from "drizzle-orm"
import { db } from "../db/index.js"
import { servers } from "../db/schema.js"
import { MikrotikClient } from "./mikrotik.js"
import { readGreComment } from "./gre-comment.js"
import {
canonicalGreSnapshot,
greAddressPath,
type GreLiveAddr,
type GreLiveIface,
type GreSnapshot,
@@ -35,6 +36,12 @@ interface RosIpAddress {
interface?: string
disabled?: string
network?: string
dynamic?: string
advertise?: string
comment?: string
"no-dad"?: string
"from-pool"?: string
"eui-64"?: string
}
export interface LiveGreTunnel {
@@ -83,7 +90,7 @@ function parseDscp(value: string | undefined): "inherit" | number {
function parseInnerFromComment(comment: string | undefined): { localInnerIp: string; remoteInnerIp: string } {
if (!comment) return { localInnerIp: "", remoteInnerIp: "" }
const local = comment.match(/address\s*=\s*([0-9.]+\/\d+)/)?.[1] ?? ""
const local = comment.match(/address\s*=\s*([0-9a-fA-F:.]+\/\d+)/)?.[1] ?? ""
const remote = readGreComment(comment).remoteInnerIp
return { localInnerIp: local, remoteInnerIp: remote }
}
@@ -102,15 +109,19 @@ export function mapGreLive(
gre: GreLiveIface[]
addrs: GreLiveAddr[]
} {
const addrsByIface = new Map<string, { address: string; rosId: string }[]>()
const addrsByIface = new Map<string, GreLiveAddr[]>()
const greNames = new Set(greRaw.map(g => (g.name ?? "").trim()))
for (const a of addrsRaw) {
if (rosDisabled(a.disabled)) continue
if (rosDisabled(a.dynamic)) continue
const iface = (a.interface ?? "").trim()
const address = (a.address ?? "").trim()
const rosId = String(a[".id"] ?? "")
if (!iface || !address || !rosId) continue
if (!iface || !address || !rosId || !greNames.has(iface)) continue
const list = addrsByIface.get(iface) ?? []
list.push({ address, rosId })
const family = greAddressPath(address)
list.push({ address, rosId, interfaceName: iface, disabled: rosDisabled(a.disabled), comment: a.comment ?? "",
...(family === "/ipv6/address" ? { advertise: rosDisabled(a.advertise), noDad: rosDisabled(a["no-dad"]), fromPool: a["from-pool"] ?? "", eui64: rosDisabled(a["eui-64"]) } : {}),
})
addrsByIface.set(iface, list)
}
@@ -124,6 +135,7 @@ export function mapGreLive(
const keepalive = parseKeepalive(g.keepalive)
const fromComment = parseInnerFromComment(g.comment)
const ifaceAddrs = addrsByIface.get(name) ?? []
ifaceAddrs.sort((a, b) => Number(Boolean(a.disabled)) - Number(Boolean(b.disabled)) || a.address.localeCompare(b.address))
const localInnerIp = ifaceAddrs[0]?.address || fromComment.localInnerIp
const secret = (g["ipsec-secret"] ?? "").trim()
const disabled = rosDisabled(g.disabled)
@@ -145,7 +157,7 @@ export function mapGreLive(
})
for (const a of ifaceAddrs) {
addrs.push({ rosId: a.rosId, interfaceName: name, address: a.address })
addrs.push(a)
}
tunnels.push({
@@ -178,7 +190,10 @@ export function mapGreLive(
name: g.name,
localAddress: g.localAddress,
remoteAddress: g.remoteAddress,
localInnerIp: addrs.find((a) => a.interfaceName === g.name)?.address ?? "",
localInnerIp: tunnels.find(t => t.name === g.name)?.localInnerIp ?? "",
innerAddresses: addrs.filter(a => a.interfaceName === g.name).map(a => ({ address: a.address, disabled: Boolean(a.disabled), comment: a.comment,
...(a.advertise === undefined ? {} : { advertise: a.advertise, noDad: a.noDad, fromPool: a.fromPool, eui64: a.eui64 }),
})),
remoteInnerIp: tunnels.find(t => t.name === g.name)?.remoteInnerIp ?? "",
comment: g.comment,
disabled: g.disabled,
@@ -197,13 +212,15 @@ export function mapGreLive(
export async function fetchGreState(server: ServerRow) {
const client = MikrotikClient.fromServer(server)
const [greRaw, addrsRaw] = await Promise.all([
const [greRaw, addrsRaw, ipv6Raw] = await Promise.all([
client.get<RosGre[]>("/interface/gre"),
client.get<RosIpAddress[]>("/ip/address").catch(() => [] as RosIpAddress[]),
client.get<RosIpAddress[]>("/ip/address"),
client.get<RosIpAddress[]>("/ipv6/address"),
])
if (![greRaw, addrsRaw, ipv6Raw].every(Array.isArray)) throw new Error("RouterOS: неполный каталог GRE/адресов")
return {
client,
...mapGreLive(server, Array.isArray(greRaw) ? greRaw : [], Array.isArray(addrsRaw) ? addrsRaw : []),
...mapGreLive(server, Array.isArray(greRaw) ? greRaw : [], [...(Array.isArray(addrsRaw) ? addrsRaw : []), ...(Array.isArray(ipv6Raw) ? ipv6Raw : [])]),
}
}
@@ -222,7 +239,7 @@ export async function listGreTunnels(opts?: { serverId?: string }): Promise<{
if (!Number.isFinite(id)) {
return { tunnels: [], failures: [{ serverId: String(opts.serverId), error: "Некорректный serverId" }] }
}
const row = (await db.select().from(servers).where(eq(servers.id, id)).limit(1))[0]
const row = (await db.select().from(servers).where(and(eq(servers.id, id), eq(servers.enabled, true))).limit(1))[0]
serverRows = row ? [row] : []
} else {
serverRows = await db.select().from(servers).where(eq(servers.enabled, true))
+18 -2
View File
@@ -1,6 +1,6 @@
# UX/UI: протокол внешней приёмки 12.5
Актуальное продолжение 2026-10-11: завершён12.5.150 — Sessions columns/направления подписаны по-русски, ReUI/Frame/base-nova/data/sort/filter сохранены.2 viewport checks/ESLint/sequential types/frontend build/live PC/mobile passed. Runtime backend ux-month149/frontend ux-sessions150. Блоки142–150 завершены локальными коммитами без push;12.5 открыт. Следующий151 — application GRE IPv6 address lifecycle: catalog/create/update/history restore/delete с family-safe paths и static-address ownership; сначала подтвердить бюджет.
Актуальное продолжение 2026-10-11: завершён12.5.151 — GRE IPv6 static-address lifecycle через приложение: чтение/create/PATCH/history restore/delete, дополнительные/выключенные адреса, family-safe IDs и legacy409.15 профильных E2E, source types/ESLint, обе production сборки, 984 compiled parity и real native API/SQL/Ping3/3×2/cleanup прошли. Runtime backend/frontend ux-gre151 healthy;12.5 открыт. Следующий152 — application WireGuard IPv6 address lifecycle, включая импорт/историю/удаление; работать укрупнённым разделом без повторения принятого GRE.
IPsec78: реальный PSK responder established, mode-config198.18.78.10 и online=true подтверждены API; точные собственные объекты удалены. Сертификатный/DN online, late failure и history restore остаются открытыми. [Отчёт](ux-ui/acceptance/ipsec-mode-config-2026-10-09.json), [журнал](ux-ui-progress.md).
@@ -696,7 +696,7 @@ flowchart LR
## 12.5.77 — основной блок IPsec (2026-10-09)
Актуальное продолжение 2026-10-11: завершён12.5.150 — Sessions columns/направления подписаны по-русски, ReUI/Frame/base-nova/data/sort/filter сохранены.2 viewport checks/ESLint/sequential types/frontend build/live PC/mobile passed. Runtime backend ux-month149/frontend ux-sessions150. Блоки142–150 завершены локальными коммитами без push;12.5 открыт. Следующий151 — application GRE IPv6 address lifecycle: catalog/create/update/history restore/delete с family-safe paths и static-address ownership; сначала подтвердить бюджет.
Актуальное продолжение 2026-10-11: завершён12.5.151 — GRE IPv6 static-address lifecycle через приложение: чтение/create/PATCH/history restore/delete, дополнительные/выключенные адреса, family-safe IDs и legacy409.15 профильных E2E, source types/ESLint, обе production сборки, 984 compiled parity и real native API/SQL/Ping3/3×2/cleanup прошли. Runtime backend/frontend ux-gre151 healthy;12.5 открыт. Следующий152 — application WireGuard IPv6 address lifecycle, включая импорт/историю/удаление; работать укрупнённым разделом без повторения принятого GRE.
Подробный объём, протоколы, схема и ограничения: [12.5.77 в журнале](ux-ui-progress.md).
@@ -1633,3 +1633,19 @@ Column IDs, accessors, sorting/filtering, row values, direction meanings, grid l
Existing viewport1440/320 cases passed: endpoint/tooltip/IPv4/ICMPv6 behaviour иno document overflow. ESLint passed. Первый types check совпал с Next dev записью generated routes.d.ts и прочитал незавершённый файл; после окончания E2E/webserver TypeScript повторён последовательно и passed без изменения source. Production frontend build passed. Frontend ux-sessions150 развёрнут, backend ux-month149/PG healthy; [receipt](ux-ui/acceptance/flow-sessions-column-labels-2026-10-11.json), [readonly PC/mobile smoke](ux-ui/acceptance/traffic-sessions-labels-smoke-2026-10-11.json). Rollback image/env сохранены. Network/password/device/schema changes нет; populated native145 не повторялся для copy-only delta.
Окно завершает coherent группу IPv6/NetFlow142–150. Следующий151 — application GRE IPv6 address lifecycle. Native inner proof109/145 уже есть, но gre-live читает только /ip/address, а entity-snapshots create/restore/delete всегда используют IPv4 resource. Нельзя просто объединить IPv6 catalog без family-safe write/delete paths: одинаковые ROS IDs в разных namespaces и dynamic link-local требуют отдельной обработки. План151: static IPv6 catalog, family-aware paths, create/update/restore/delete+legacy snapshot compatibility, запрет неоднозначной смены primary при multiple addresses, profile/native own tunnel cleanup иUI metadata. Сначала проверить лимит; не выпускать partial family migration.12.5 открыт, public IPv6 WAN/outer и внешние integrations остаются в матрице.
## 12.5.151 — управление статическими IPv6-адресами GRE (2026-10-11)
GRE читает IPv4 и IPv6 адреса; динамические адреса исключены из управления. Ошибка любого address catalog или неверный формат ответа останавливает чтение/запись, неполный ответ не становится пустым снимком. Выбранный выключенный сервер также исключён из опроса.
Create/PATCH/restore/delete выбирают /ip/address или /ipv6/address по проверенному CIDR; одинаковый RouterOS ID в разных семействах безопасен. Новые снимки содержат все статические адреса, disabled/advertise/comment/no-dad. PATCH меняет только целевой GRE, сохраняет дополнительные адреса; очистка поля передаёт явную пустую строку. Восстановление старой ревизии при нескольких текущих адресах возвращает409 до записи. Неоднозначные ID/name и переименование также409. Expanded/compressed IPv6 сравниваются по одному ключу. Применение from-pool/EUI-64 остановлено с объяснением: их выделение не принимается за обычный literal static address.
Существующие ReUI/Frame/base-nova сохранены, добавлена подсказка IPv4/IPv6 с префиксом. Проверки: config-sync4 scripts (включая14 invalid POST/PATCH до DB/REST), gre-comment и selected-context tests; backend/source-only types/ESLint;15 GRE E2E; backend/frontend production builds;984 emitted outputs совпали. Первый E2E запуск не стартовал из-за sandbox Windows/SWC canonicalize access; разрешённый повтор прошёл.
Настоящие production Fastify handlers + выделенная PG база + оба CHR:18 API requests включая создание IPv6 пары, PATCH IPv6, сохранение дополнительных IPv4/disabled IPv6, history restore многoадресного снимка, legacy409 и ID/name409, смену IPv6→IPv4, очистку, восстановление и DELETE. Ping3/3 в обе стороны после running=true и address invalid=false. Первоначальный короткий Ping получил0 вместо ожидаемых3 и остановил первый сценарий; причина не доказана. Его результат и очистка сохранены отдельно, повтор не скрывает начальный отказ. Это короткий dataplane, не доказательство бесшовности/throughput.
Оба запуска: собственные объекты удалены,8 static collections×2 совпали с baseline, отдельные базы удалены. Пароли не менялись, public/default routes не трогались. Native parent читает исходные enabled server credentials; background polling главного приложения продолжался, отсутствие всех background SQL writes не заявляется. Runtime backend/frontend ux-gre151 healthy, live read-only PC/mobile catalog/form smoke прошёл после cleanup; native mutation принята через изолированную базу, deployed browser mutation не выполнялась.
Протоколы: [native/cleanup](ux-ui/acceptance/gre-ipv6-native-2026-10-11.json), [API/history](ux-ui/acceptance/gre-ipv6-api-history-2026-10-11.json), [первый запуск](ux-ui/acceptance/gre-ipv6-initial-cleanup-2026-10-11.json), [compiled parity](ux-ui/acceptance/gre-ipv6-compiled-2026-10-11.json), [live UI](ux-ui/acceptance/gre-ipv6-smoke-2026-10-11.json).
Границы: IPv6 ULA inner по IPv4 GRE outer; IPv6 outer/public WAN, scale, длительное восстановление и from-pool/EUI-64 не приняты. Полная регрессия после139 не повторялась: выполнен профиль изменённых областей. Следующий152 — WireGuard IPv6 lifecycle;12.5 остаётся открытым.
+3 -3
View File
@@ -1,12 +1,12 @@
# План реализации UX/UI по пятичасовым окнам
Актуальное продолжение 2026-10-11: завершён12.5.150 — Sessions columns/направления подписаны по-русски, ReUI/Frame/base-nova/data/sort/filter сохранены.2 viewport checks/ESLint/sequential types/frontend build/live PC/mobile passed. Runtime backend ux-month149/frontend ux-sessions150. Блоки142–150 завершены локальными коммитами без push;12.5 открыт. Следующий151 — application GRE IPv6 address lifecycle: catalog/create/update/history restore/delete с family-safe paths и static-address ownership; сначала подтвердить бюджет.
Актуальное продолжение 2026-10-11: завершён12.5.151 — GRE IPv6 static-address lifecycle через приложение: чтение/create/PATCH/history restore/delete, дополнительные/выключенные адреса, family-safe IDs и legacy409.15 профильных E2E, source types/ESLint, обе production сборки, 984 compiled parity и real native API/SQL/Ping3/3×2/cleanup прошли. Runtime backend/frontend ux-gre151 healthy;12.5 открыт. Следующий152 — application WireGuard IPv6 address lifecycle, включая импорт/историю/удаление; работать укрупнённым разделом без повторения принятого GRE.
Общий план проекта MikrotikManager. Основан на согласованном плане из задачи; точка продолжения обновлена 2026-10-10. Источник фактического прогресса, проверок и ограничений — [журнал реализации](ux-ui-progress.md). Этот документ задаёт объём и критерии завершения, журнал фиксирует результат.
## Актуальная точка продолжения — 2026-10-10
Актуальное продолжение 2026-10-11: завершён12.5.150 — Sessions columns/направления подписаны по-русски, ReUI/Frame/base-nova/data/sort/filter сохранены.2 viewport checks/ESLint/sequential types/frontend build/live PC/mobile passed. Runtime backend ux-month149/frontend ux-sessions150. Блоки142–150 завершены локальными коммитами без push;12.5 открыт. Следующий151 — application GRE IPv6 address lifecycle: catalog/create/update/history restore/delete с family-safe paths и static-address ownership; сначала подтвердить бюджет.
Актуальное продолжение 2026-10-11: завершён12.5.151 — GRE IPv6 static-address lifecycle через приложение: чтение/create/PATCH/history restore/delete, дополнительные/выключенные адреса, family-safe IDs и legacy409.15 профильных E2E, source types/ESLint, обе production сборки, 984 compiled parity и real native API/SQL/Ping3/3×2/cleanup прошли. Runtime backend/frontend ux-gre151 healthy;12.5 открыт. Следующий152 — application WireGuard IPv6 address lifecycle, включая импорт/историю/удаление; работать укрупнённым разделом без повторения принятого GRE.
Этапы0–11 завершены в локальных границах журнала. История выполненных внешних блоков и доказательства сохранены в [журнале](ux-ui-stage-12.md) и [протоколе](ux-ui-external-acceptance.md). Реальная Telegram доставка, Portal SSO, multi-instance и оставшиеся профильные сетевые ограничения открыты.
@@ -371,6 +371,6 @@ flowchart LR
## 12.5.77 — основной блок IPsec (2026-10-09)
Актуальное продолжение 2026-10-11: завершён12.5.150 — Sessions columns/направления подписаны по-русски, ReUI/Frame/base-nova/data/sort/filter сохранены.2 viewport checks/ESLint/sequential types/frontend build/live PC/mobile passed. Runtime backend ux-month149/frontend ux-sessions150. Блоки142–150 завершены локальными коммитами без push;12.5 открыт. Следующий151 — application GRE IPv6 address lifecycle: catalog/create/update/history restore/delete с family-safe paths и static-address ownership; сначала подтвердить бюджет.
Актуальное продолжение 2026-10-11: завершён12.5.151 — GRE IPv6 static-address lifecycle через приложение: чтение/create/PATCH/history restore/delete, дополнительные/выключенные адреса, family-safe IDs и legacy409.15 профильных E2E, source types/ESLint, обе production сборки, 984 compiled parity и real native API/SQL/Ping3/3×2/cleanup прошли. Runtime backend/frontend ux-gre151 healthy;12.5 открыт. Следующий152 — application WireGuard IPv6 address lifecycle, включая импорт/историю/удаление; работать укрупнённым разделом без повторения принятого GRE.
Подробный объём, протоколы, схема и ограничения: [12.5.77 в журнале](ux-ui-progress.md).
+18 -2
View File
@@ -1,6 +1,6 @@
# UX/UI: журнал реализации
Актуальное продолжение 2026-10-11: завершён12.5.150 — Sessions columns/направления подписаны по-русски, ReUI/Frame/base-nova/data/sort/filter сохранены.2 viewport checks/ESLint/sequential types/frontend build/live PC/mobile passed. Runtime backend ux-month149/frontend ux-sessions150. Блоки142–150 завершены локальными коммитами без push;12.5 открыт. Следующий151 — application GRE IPv6 address lifecycle: catalog/create/update/history restore/delete с family-safe paths и static-address ownership; сначала подтвердить бюджет.
Актуальное продолжение 2026-10-11: завершён12.5.151 — GRE IPv6 static-address lifecycle через приложение: чтение/create/PATCH/history restore/delete, дополнительные/выключенные адреса, family-safe IDs и legacy409.15 профильных E2E, source types/ESLint, обе production сборки, 984 compiled parity и real native API/SQL/Ping3/3×2/cleanup прошли. Runtime backend/frontend ux-gre151 healthy;12.5 открыт. Следующий152 — application WireGuard IPv6 address lifecycle, включая импорт/историю/удаление; работать укрупнённым разделом без повторения принятого GRE.
Общий план: [UX/UI по этапам и пятичасовым окнам](ux-ui-plan.md). План задаёт объём, этот журнал фиксирует выполненные блоки и ограничения. Записи расположены от новых к старым; подробная история этапа12 также сохранена в [ux-ui-stage-12.md](ux-ui-stage-12.md).
@@ -36,7 +36,23 @@
| 10 | Маршрутизация, диагностика, карта и терминал | Завершён в границах локальной приёмки 2026-10-01; блоки 10.1–10.71, внешние ограничения в 10.71 |
| 11А | Пользователи, контейнеры, сертификаты и резервные копии | Завершён в границах локальной приёмки 2026-10-01; 11А.1–11А.33, внешние ограничения в 11А.33 |
| 11Б | Оповещения, сбор данных, интеграции, релизы и настройки | Завершён в границах локальной приёмки 2026-10-03; ограничения и evidence в11Б.7 |
| 12 | Итоговая доступность, адаптивность, производительность и регрессия | Локальная приёмка завершена в границах12.3.83; внешняя12.5 в работе, выполненные блоки1–150 и ограничения ниже. Runtime backend ux-month149/frontend ux-sessions150. |
| 12 | Итоговая доступность, адаптивность, производительность и регрессия | Локальная приёмка завершена в границах12.3.83; внешняя12.5 в работе, выполненные блоки1–151 и ограничения ниже. Runtime backend ux-month149/frontend ux-sessions150. |
## 12.5.151 — управление статическими IPv6-адресами GRE (2026-10-11)
GRE читает IPv4 и IPv6 адреса; динамические адреса исключены из управления. Ошибка любого address catalog или неверный формат ответа останавливает чтение/запись, неполный ответ не становится пустым снимком. Выбранный выключенный сервер также исключён из опроса.
Create/PATCH/restore/delete выбирают /ip/address или /ipv6/address по проверенному CIDR; одинаковый RouterOS ID в разных семействах безопасен. Новые снимки содержат все статические адреса, disabled/advertise/comment/no-dad. PATCH меняет только целевой GRE, сохраняет дополнительные адреса; очистка поля передаёт явную пустую строку. Восстановление старой ревизии при нескольких текущих адресах возвращает409 до записи. Неоднозначные ID/name и переименование также409. Expanded/compressed IPv6 сравниваются по одному ключу. Применение from-pool/EUI-64 остановлено с объяснением: их выделение не принимается за обычный literal static address.
Существующие ReUI/Frame/base-nova сохранены, добавлена подсказка IPv4/IPv6 с префиксом. Проверки: config-sync4 scripts (включая14 invalid POST/PATCH до DB/REST), gre-comment и selected-context tests; backend/source-only types/ESLint;15 GRE E2E; backend/frontend production builds;984 emitted outputs совпали. Первый E2E запуск не стартовал из-за sandbox Windows/SWC canonicalize access; разрешённый повтор прошёл.
Настоящие production Fastify handlers + выделенная PG база + оба CHR:18 API requests включая создание IPv6 пары, PATCH IPv6, сохранение дополнительных IPv4/disabled IPv6, history restore многoадресного снимка, legacy409 и ID/name409, смену IPv6→IPv4, очистку, восстановление и DELETE. Ping3/3 в обе стороны после running=true и address invalid=false. Первоначальный короткий Ping получил0 вместо ожидаемых3 и остановил первый сценарий; причина не доказана. Его результат и очистка сохранены отдельно, повтор не скрывает начальный отказ. Это короткий dataplane, не доказательство бесшовности/throughput.
Оба запуска: собственные объекты удалены,8 static collections×2 совпали с baseline, отдельные базы удалены. Пароли не менялись, public/default routes не трогались. Native parent читает исходные enabled server credentials; background polling главного приложения продолжался, отсутствие всех background SQL writes не заявляется. Runtime backend/frontend ux-gre151 healthy, live read-only PC/mobile catalog/form smoke прошёл после cleanup; native mutation принята через изолированную базу, deployed browser mutation не выполнялась.
Протоколы: [native/cleanup](ux-ui/acceptance/gre-ipv6-native-2026-10-11.json), [API/history](ux-ui/acceptance/gre-ipv6-api-history-2026-10-11.json), [первый запуск](ux-ui/acceptance/gre-ipv6-initial-cleanup-2026-10-11.json), [compiled parity](ux-ui/acceptance/gre-ipv6-compiled-2026-10-11.json), [live UI](ux-ui/acceptance/gre-ipv6-smoke-2026-10-11.json).
Границы: IPv6 ULA inner по IPv4 GRE outer; IPv6 outer/public WAN, scale, длительное восстановление и from-pool/EUI-64 не приняты. Полная регрессия после139 не повторялась: выполнен профиль изменённых областей. Следующий152 — WireGuard IPv6 lifecycle;12.5 остаётся открытым.
## 12.5.150 — понятные названия колонок сессий (2026-10-11)
+20 -4
View File
@@ -1,15 +1,15 @@
# Оставшаяся внешняя приёмка — 2026-10-11
Это актуальная матрица после 12.5.150. Исторические записи сохраняют версии и ограничения на момент выполнения; поздние проверки ниже уточняют их. Этап 12.5 открыт. Успех в двух CHR и одном backend не означает приёмку всех конфигураций, интеграций или полной регрессии.
Это актуальная матрица после 12.5.151. Исторические записи сохраняют версии и ограничения на момент выполнения; поздние проверки ниже уточняют их. Этап 12.5 открыт. Успех в двух CHR и одном backend не означает приёмку всех конфигураций, интеграций или полной регрессии.
Стенд: Debian13/Compose, PostgreSQL18.6, два CHR RouterOS7.24.5. Backend `ux-month149`, frontend `ux-sessions150`; production lab использует AUTH_REQUIRED=false. Подписанные JWT/RBAC проверялись в изолированных процессах. Все собственные объекты112 удалены, исходные13 коллекций×2 (включая logging/certificates/files/routes) проверены; пароли не менялись.
Стенд: Debian13/Compose, PostgreSQL18.6, два CHR RouterOS7.24.5. Backend `ux-gre151`, frontend `ux-gre151`; production lab использует AUTH_REQUIRED=false. Подписанные JWT/RBAC проверялись в изолированных процессах. Все собственные объекты112 удалены, исходные13 коллекций×2 (включая logging/certificates/files/routes) проверены; пароли не менялись.
| Раздел | Подтверждено | Осталось / условие завершения |
| --- | --- | --- |
| PostgreSQL | Bootstrap, backup/restore, SQL rollback, concurrency, writer drain одного экземпляра, JWT guards и unknown commit: блоки14–24 | Несколько backend/worker экземпляров и координация всех writers; физическая потеря соединения отличается от введённого отказа подтверждения |
| Speed/uptime | TCP transmit/receive/both32–33, короткий UDP34, auth failure25, transport timeout27, интерфейс after-ping28–29, snapshot/history race23–24 | Busy/abort/physical WAN disconnect; HTTP receipt socket disconnect принят97; независимое доказательство multi-WAN source/path; Home→JH/JH↔Exit с асимметричными каналами ; ROS-10 POST/SQL/GET и три часовых пояса приняты96. Короткие тесты не доказывают maximum throughput |
| Outbox | Production PG claim/dedupe/settlement/retry/JWT/browser checkpoint/a11y35–49 | Настоящий Telegram API/чат, физический timeout после возможной отправки, несколько sender процессов. Нужны тестовый бот/чат и прямое разрешение на конкретное сообщение; подменённый ответ не доказывает доставку |
| GRE | Native lifecycle, metadata, live формы/меню/URL/Ping53–57; GRE используется в OSPF/BGP/IPsec последующих блоков; native IPv6 ULA inner109 | IPv6 outer и application IPv6 interface address lifecycle, независимые WAN, масштаб и длительное восстановление; принятие GRE не означает приёмку всех сценариев автоматического расписания |
| GRE | Native lifecycle, metadata, live формы/меню/URL/Ping53–57; GRE используется в OSPF/BGP/IPsec последующих блоков; native IPv6 ULA inner109; application static IPv6 lifecycle151 | IPv6 outer, from-pool/EUI-64, независимые WAN, масштаб и длительное восстановление; принятие GRE не означает приёмку всех сценариев автоматического расписания |
| WireGuard | Native handshake/data plane58, deletion60, live create/peer/disable/enable/delete62, mobile64, export/import67–74; native IPv6 ULA inner/allowedIps/handshake109 | Клиентские ОС и произвольные конфигурации, IPv6 outer/scale и application IPv6 interface address lifecycle, физический lost ACK и устойчивое восстановление; `.conf` с placeholders — шаблон, не принятый клиентский tunnel |
| VXLAN | Собственная пара/private Ping/catalog/URL/export75–76; bridge/FDB/port loss/recovery107; IPv6 ULA inner по IPv4 outer108 | API приложения read-only: create/delete проверены native. IPv6 outer, масштаб/производительность, профильные mutation RBAC/concurrency отдельно не приняты |
| IPsec | PSK и сертификатное шифрование77–82, active peer/online/mode-config, scoped NAT/group, partial/unknown/applied receipts, restore conflicts, JWT; full DN/специальные символы/online110; literal CN namespace guards и explicit FQDN111; certificate/PSK shared ID unknown/recovery112; multiple sessions controlled snapshots113; shared certificate rows/target guards114; preserve-certificate UI/native DELETE115; explicit deletion binding/PSK collision116; legacy export binding118; real duplicate DN sessions/Linux Ping/UI119; DN DER/ASCII tag и FQDN SAN native120; implicit unique DNS SAN/mixed IDs/API/UI121; короткий CHILD/IKE rekey/reconnect122; server pin и unbound same-CA certificate refusal123; own RSA Root/Intermediate/client chain/CRLs/IKE/reauth138; external revoked CRL new-handshake refusal/existing-session boundary137; certificate-bound malformed/signed expired CRL IKE refusal/recovery136; certificate-bound missing-CDP404/IKE refusal and recovery135; external HTTP CRL download/404/cache preservation134; isolated diagnostic buffers132; own ECDSA P-256/Ping/API export131 and final18×2 inventory; isolated same-key/CA time boundary with explicit AUTH_FAILED130; valid-renewal control timeout/clock/log observation129; original/renewed controls and time-invalid timeout observation128; CRL-issued cert/CA no-write delete guards127; own CRL-enabled valid/revoked control126; local revoked flag/CRL-disabled reconnect observation125; certificate reauth/CHILD absence boundary/UI124 | Реальные duplicate certificate-derived DN sessions приняты119; arbitrary custom PKI/OIDs/policies/path-length and missing/intermediate-revoked chain; native intermediate chain accepted138; ECDSA P-256 accepted131;128/129 timeout cause still unknown,130 time boundary accepted; periodic refresh; existing IKE survives short external-revocation observation137, automatic termination not guaranteed; direct CHR-to-CHR CRL HTTP failure cause134; reauth/CHILD loss принят124; длительный rekey/переходная потеря пакетов; прочие ID типы/ADDR4/manual DN/custom PKI; native edit identical matching rules rejected; клиентские Windows/macOS/iOS/Android, прочие DN форматы/custom OIDs/IKE ID namespaces, полная PKI и policy/profile/proposal restore, физический disconnect, durable retry/multi-instance, IPv6/maximum throughput |
@@ -18,7 +18,7 @@
| Recursive routes | Production PUT/change/own history restore88, disabled guards, partial/unknown/applied outcomes, live формы/контекст | Автоматический rollback/retry, durable receipts и несколько экземпляров отсутствуют; PUT не является idempotent noop. Полная произвольная legacy catalog миграция не принята |
| Diagnostics/terminal | Allowlist/native reads, Ping/trace/route/MTU/DNS, actual avg-rtt, disabled guards, JWT/live PC/mobile89; real default memory tail/log limits/API/UI133 | DNS использует backend resolver; MTU — ограниченная оценка, не гарантированный максимум. Stop ожидания не доказывает остановку RouterOS команды; arbitrary CLI и physical disconnect не приняты |
| Portal/интеграции | Локальные и isolated JWT guards; UI/API error states в границах журналов | Настоящий Portal issuer/login/отзыв прав; RIPE SDK two-IP/no-fetch passed140, native IPv6 ULA flow pipeline passed145 (IPv4 transport), public IPv6 WAN/local licensed MaxMind/S3/container/certificate jobs и Gitea delivery требуют отдельных тестовых endpoints/аккаунтов. Не отправлять сообщения и не публиковать релиз без соответствующего поручения |
| Общая приёмка | Локальная12.3.83; UI1244/context221/compiled984 parity139; профильные build/E2E/live проверки последующих блоков | Traffic initial live mock-id gate passed141; IPv6 special ranges/cache passed142; unknown RIPE coordinates passed143; IPv6 synthetic UDP/worker/SQL passed144; native CHR ULA/IPFIX/API/UI passed145; ICMPv6/IPv6 endpoint labels passed146; HTTP DTO validation passed147; scoped flow catalog/serverId guards passed148; strict monthly calendar passed149; Sessions labels passed150; application GRE IPv6 lifecycle151; последующие изменения проверять отдельно; scoped axe не означает полную WCAG сертификацию |
| Общая приёмка | Локальная12.3.83; UI1244/context221/compiled984 parity139; профильные build/E2E/live проверки последующих блоков | Traffic initial live mock-id gate passed141; IPv6 special ranges/cache passed142; unknown RIPE coordinates passed143; IPv6 synthetic UDP/worker/SQL passed144; native CHR ULA/IPFIX/API/UI passed145; ICMPv6/IPv6 endpoint labels passed146; HTTP DTO validation passed147; scoped flow catalog/serverId guards passed148; strict monthly calendar passed149; Sessions labels passed150; application GRE static IPv6 lifecycle151 passed; следующий WireGuard IPv6 lifecycle152; последующие изменения проверять отдельно; scoped axe не означает полную WCAG сертификацию |
Доказательства и точные ограничения: [полная история этапа12](ux-ui-stage-12.md), [внешний протокол](ux-ui-external-acceptance.md), [BGP93](ux-ui/acceptance/bgp-failover-2026-10-10.json), [паспорт стенда](ux-ui-test-server.md). Невыполненные пункты не являются все блокерами данного лабораторного сценария: для выпуска необходимо явно определить требуемые конфигурации и принять их либо согласовать ограничение.
@@ -548,3 +548,19 @@ Column IDs, accessors, sorting/filtering, row values, direction meanings, grid l
Existing viewport1440/320 cases passed: endpoint/tooltip/IPv4/ICMPv6 behaviour иno document overflow. ESLint passed. Первый types check совпал с Next dev записью generated routes.d.ts и прочитал незавершённый файл; после окончания E2E/webserver TypeScript повторён последовательно и passed без изменения source. Production frontend build passed. Frontend ux-sessions150 развёрнут, backend ux-month149/PG healthy; [receipt](ux-ui/acceptance/flow-sessions-column-labels-2026-10-11.json), [readonly PC/mobile smoke](ux-ui/acceptance/traffic-sessions-labels-smoke-2026-10-11.json). Rollback image/env сохранены. Network/password/device/schema changes нет; populated native145 не повторялся для copy-only delta.
Окно завершает coherent группу IPv6/NetFlow142–150. Следующий151 — application GRE IPv6 address lifecycle. Native inner proof109/145 уже есть, но gre-live читает только /ip/address, а entity-snapshots create/restore/delete всегда используют IPv4 resource. Нельзя просто объединить IPv6 catalog без family-safe write/delete paths: одинаковые ROS IDs в разных namespaces и dynamic link-local требуют отдельной обработки. План151: static IPv6 catalog, family-aware paths, create/update/restore/delete+legacy snapshot compatibility, запрет неоднозначной смены primary при multiple addresses, profile/native own tunnel cleanup иUI metadata. Сначала проверить лимит; не выпускать partial family migration.12.5 открыт, public IPv6 WAN/outer и внешние integrations остаются в матрице.
## 12.5.151 — управление статическими IPv6-адресами GRE (2026-10-11)
GRE читает IPv4 и IPv6 адреса; динамические адреса исключены из управления. Ошибка любого address catalog или неверный формат ответа останавливает чтение/запись, неполный ответ не становится пустым снимком. Выбранный выключенный сервер также исключён из опроса.
Create/PATCH/restore/delete выбирают /ip/address или /ipv6/address по проверенному CIDR; одинаковый RouterOS ID в разных семействах безопасен. Новые снимки содержат все статические адреса, disabled/advertise/comment/no-dad. PATCH меняет только целевой GRE, сохраняет дополнительные адреса; очистка поля передаёт явную пустую строку. Восстановление старой ревизии при нескольких текущих адресах возвращает409 до записи. Неоднозначные ID/name и переименование также409. Expanded/compressed IPv6 сравниваются по одному ключу. Применение from-pool/EUI-64 остановлено с объяснением: их выделение не принимается за обычный literal static address.
Существующие ReUI/Frame/base-nova сохранены, добавлена подсказка IPv4/IPv6 с префиксом. Проверки: config-sync4 scripts (включая14 invalid POST/PATCH до DB/REST), gre-comment и selected-context tests; backend/source-only types/ESLint;15 GRE E2E; backend/frontend production builds;984 emitted outputs совпали. Первый E2E запуск не стартовал из-за sandbox Windows/SWC canonicalize access; разрешённый повтор прошёл.
Настоящие production Fastify handlers + выделенная PG база + оба CHR:18 API requests включая создание IPv6 пары, PATCH IPv6, сохранение дополнительных IPv4/disabled IPv6, history restore многoадресного снимка, legacy409 и ID/name409, смену IPv6→IPv4, очистку, восстановление и DELETE. Ping3/3 в обе стороны после running=true и address invalid=false. Первоначальный короткий Ping получил0 вместо ожидаемых3 и остановил первый сценарий; причина не доказана. Его результат и очистка сохранены отдельно, повтор не скрывает начальный отказ. Это короткий dataplane, не доказательство бесшовности/throughput.
Оба запуска: собственные объекты удалены,8 static collections×2 совпали с baseline, отдельные базы удалены. Пароли не менялись, public/default routes не трогались. Native parent читает исходные enabled server credentials; background polling главного приложения продолжался, отсутствие всех background SQL writes не заявляется. Runtime backend/frontend ux-gre151 healthy, live read-only PC/mobile catalog/form smoke прошёл после cleanup; native mutation принята через изолированную базу, deployed browser mutation не выполнялась.
Протоколы: [native/cleanup](ux-ui/acceptance/gre-ipv6-native-2026-10-11.json), [API/history](ux-ui/acceptance/gre-ipv6-api-history-2026-10-11.json), [первый запуск](ux-ui/acceptance/gre-ipv6-initial-cleanup-2026-10-11.json), [compiled parity](ux-ui/acceptance/gre-ipv6-compiled-2026-10-11.json), [live UI](ux-ui/acceptance/gre-ipv6-smoke-2026-10-11.json).
Границы: IPv6 ULA inner по IPv4 GRE outer; IPv6 outer/public WAN, scale, длительное восстановление и from-pool/EUI-64 не приняты. Полная регрессия после139 не повторялась: выполнен профиль изменённых областей. Следующий152 — WireGuard IPv6 lifecycle;12.5 остаётся открытым.
+17 -1
View File
@@ -1,6 +1,6 @@
# Этап 12: итоговая приёмка UX/UI
Актуальное продолжение 2026-10-11: завершён12.5.150 — Sessions columns/направления подписаны по-русски, ReUI/Frame/base-nova/data/sort/filter сохранены.2 viewport checks/ESLint/sequential types/frontend build/live PC/mobile passed. Runtime backend ux-month149/frontend ux-sessions150. Блоки142–150 завершены локальными коммитами без push;12.5 открыт. Следующий151 — application GRE IPv6 address lifecycle: catalog/create/update/history restore/delete с family-safe paths и static-address ownership; сначала подтвердить бюджет.
Актуальное продолжение 2026-10-11: завершён12.5.151 — GRE IPv6 static-address lifecycle через приложение: чтение/create/PATCH/history restore/delete, дополнительные/выключенные адреса, family-safe IDs и legacy409.15 профильных E2E, source types/ESLint, обе production сборки, 984 compiled parity и real native API/SQL/Ping3/3×2/cleanup прошли. Runtime backend/frontend ux-gre151 healthy;12.5 открыт. Следующий152 — application WireGuard IPv6 address lifecycle, включая импорт/историю/удаление; работать укрупнённым разделом без повторения принятого GRE.
План: [ux-ui-plan.md](ux-ui-plan.md). Фактические результаты: [ux-ui-progress.md](ux-ui-progress.md). Подготовлен после сводных проверок 11Б; завершение каждого блока требует локального коммита без push.
@@ -2938,3 +2938,19 @@ Column IDs, accessors, sorting/filtering, row values, direction meanings, grid l
Existing viewport1440/320 cases passed: endpoint/tooltip/IPv4/ICMPv6 behaviour иno document overflow. ESLint passed. Первый types check совпал с Next dev записью generated routes.d.ts и прочитал незавершённый файл; после окончания E2E/webserver TypeScript повторён последовательно и passed без изменения source. Production frontend build passed. Frontend ux-sessions150 развёрнут, backend ux-month149/PG healthy; [receipt](ux-ui/acceptance/flow-sessions-column-labels-2026-10-11.json), [readonly PC/mobile smoke](ux-ui/acceptance/traffic-sessions-labels-smoke-2026-10-11.json). Rollback image/env сохранены. Network/password/device/schema changes нет; populated native145 не повторялся для copy-only delta.
Окно завершает coherent группу IPv6/NetFlow142–150. Следующий151 — application GRE IPv6 address lifecycle. Native inner proof109/145 уже есть, но gre-live читает только /ip/address, а entity-snapshots create/restore/delete всегда используют IPv4 resource. Нельзя просто объединить IPv6 catalog без family-safe write/delete paths: одинаковые ROS IDs в разных namespaces и dynamic link-local требуют отдельной обработки. План151: static IPv6 catalog, family-aware paths, create/update/restore/delete+legacy snapshot compatibility, запрет неоднозначной смены primary при multiple addresses, profile/native own tunnel cleanup иUI metadata. Сначала проверить лимит; не выпускать partial family migration.12.5 открыт, public IPv6 WAN/outer и внешние integrations остаются в матрице.
## 12.5.151 — управление статическими IPv6-адресами GRE (2026-10-11)
GRE читает IPv4 и IPv6 адреса; динамические адреса исключены из управления. Ошибка любого address catalog или неверный формат ответа останавливает чтение/запись, неполный ответ не становится пустым снимком. Выбранный выключенный сервер также исключён из опроса.
Create/PATCH/restore/delete выбирают /ip/address или /ipv6/address по проверенному CIDR; одинаковый RouterOS ID в разных семействах безопасен. Новые снимки содержат все статические адреса, disabled/advertise/comment/no-dad. PATCH меняет только целевой GRE, сохраняет дополнительные адреса; очистка поля передаёт явную пустую строку. Восстановление старой ревизии при нескольких текущих адресах возвращает409 до записи. Неоднозначные ID/name и переименование также409. Expanded/compressed IPv6 сравниваются по одному ключу. Применение from-pool/EUI-64 остановлено с объяснением: их выделение не принимается за обычный literal static address.
Существующие ReUI/Frame/base-nova сохранены, добавлена подсказка IPv4/IPv6 с префиксом. Проверки: config-sync4 scripts (включая14 invalid POST/PATCH до DB/REST), gre-comment и selected-context tests; backend/source-only types/ESLint;15 GRE E2E; backend/frontend production builds;984 emitted outputs совпали. Первый E2E запуск не стартовал из-за sandbox Windows/SWC canonicalize access; разрешённый повтор прошёл.
Настоящие production Fastify handlers + выделенная PG база + оба CHR:18 API requests включая создание IPv6 пары, PATCH IPv6, сохранение дополнительных IPv4/disabled IPv6, history restore многoадресного снимка, legacy409 и ID/name409, смену IPv6→IPv4, очистку, восстановление и DELETE. Ping3/3 в обе стороны после running=true и address invalid=false. Первоначальный короткий Ping получил0 вместо ожидаемых3 и остановил первый сценарий; причина не доказана. Его результат и очистка сохранены отдельно, повтор не скрывает начальный отказ. Это короткий dataplane, не доказательство бесшовности/throughput.
Оба запуска: собственные объекты удалены,8 static collections×2 совпали с baseline, отдельные базы удалены. Пароли не менялись, public/default routes не трогались. Native parent читает исходные enabled server credentials; background polling главного приложения продолжался, отсутствие всех background SQL writes не заявляется. Runtime backend/frontend ux-gre151 healthy, live read-only PC/mobile catalog/form smoke прошёл после cleanup; native mutation принята через изолированную базу, deployed browser mutation не выполнялась.
Протоколы: [native/cleanup](ux-ui/acceptance/gre-ipv6-native-2026-10-11.json), [API/history](ux-ui/acceptance/gre-ipv6-api-history-2026-10-11.json), [первый запуск](ux-ui/acceptance/gre-ipv6-initial-cleanup-2026-10-11.json), [compiled parity](ux-ui/acceptance/gre-ipv6-compiled-2026-10-11.json), [live UI](ux-ui/acceptance/gre-ipv6-smoke-2026-10-11.json).
Границы: IPv6 ULA inner по IPv4 GRE outer; IPv6 outer/public WAN, scale, длительное восстановление и from-pool/EUI-64 не приняты. Полная регрессия после139 не повторялась: выполнен профиль изменённых областей. Следующий152 — WireGuard IPv6 lifecycle;12.5 остаётся открытым.
+18 -2
View File
@@ -1,6 +1,6 @@
# Тестовый сервер UX/UI — 2026-10-10
Сервер161.104.46.222: завершён12.5.150 — Sessions columns/направления подписаны по-русски, ReUI/Frame/base-nova/data/sort/filter сохранены.2 viewport checks/ESLint/sequential types/frontend build/live PC/mobile passed. Runtime backend ux-month149/frontend ux-sessions150. Блоки142–150 завершены локальными коммитами без push;12.5 открыт. Следующий151 — application GRE IPv6 address lifecycle: catalog/create/update/history restore/delete с family-safe paths и static-address ownership; сначала подтвердить бюджет.
Сервер161.104.46.222: завершён12.5.151 — GRE IPv6 static-address lifecycle через приложение: чтение/create/PATCH/history restore/delete, дополнительные/выключенные адреса, family-safe IDs и legacy409.15 профильных E2E, source types/ESLint, обе production сборки, 984 compiled parity и real native API/SQL/Ping3/3×2/cleanup прошли. Runtime backend/frontend ux-gre151 healthy;12.5 открыт. Следующий152 — application WireGuard IPv6 address lifecycle, включая импорт/историю/удаление; работать укрупнённым разделом без повторения принятого GRE.
| Параметр | Проверенное состояние |
| --- | --- |
@@ -14,7 +14,7 @@
| PostgreSQL | postgres:18-alpine,18.6;mmapp-test-postgres healthy;SELECT version() passed |
| Данные | Отдельный Compose project mmapp-test,том mmapp-test_mmapp-pgdata и каталог ./data |
| Доступ | PostgreSQL не публикуется;frontend3000/backend8000 привязаны к127.0.0.1 после запуска |
| Образы приложения | mmapp-test/backend:ux-month149 и mmapp-test/frontend:ux-sessions150; запущены |
| Образы приложения | mmapp-test/backend:ux-gre151 и mmapp-test/frontend:ux-gre151; запущены |
Compose SHA256:3052bd6ab5d9865f97605cebfb5ff27a4410cd3357b81153a65a87fb7c92582f. OptionalBACKEND_IMAGE_TAG позволяетобновлятьbackendотдельно. Локальный и удалённый файлы совпали. Шаблоны: [Compose](../deploy/docker-compose.test.yml), [env без секретов](../deploy/env.test.example).
@@ -1364,3 +1364,19 @@ Column IDs, accessors, sorting/filtering, row values, direction meanings, grid l
Existing viewport1440/320 cases passed: endpoint/tooltip/IPv4/ICMPv6 behaviour иno document overflow. ESLint passed. Первый types check совпал с Next dev записью generated routes.d.ts и прочитал незавершённый файл; после окончания E2E/webserver TypeScript повторён последовательно и passed без изменения source. Production frontend build passed. Frontend ux-sessions150 развёрнут, backend ux-month149/PG healthy; [receipt](ux-ui/acceptance/flow-sessions-column-labels-2026-10-11.json), [readonly PC/mobile smoke](ux-ui/acceptance/traffic-sessions-labels-smoke-2026-10-11.json). Rollback image/env сохранены. Network/password/device/schema changes нет; populated native145 не повторялся для copy-only delta.
Окно завершает coherent группу IPv6/NetFlow142–150. Следующий151 — application GRE IPv6 address lifecycle. Native inner proof109/145 уже есть, но gre-live читает только /ip/address, а entity-snapshots create/restore/delete всегда используют IPv4 resource. Нельзя просто объединить IPv6 catalog без family-safe write/delete paths: одинаковые ROS IDs в разных namespaces и dynamic link-local требуют отдельной обработки. План151: static IPv6 catalog, family-aware paths, create/update/restore/delete+legacy snapshot compatibility, запрет неоднозначной смены primary при multiple addresses, profile/native own tunnel cleanup иUI metadata. Сначала проверить лимит; не выпускать partial family migration.12.5 открыт, public IPv6 WAN/outer и внешние integrations остаются в матрице.
## 12.5.151 — управление статическими IPv6-адресами GRE (2026-10-11)
GRE читает IPv4 и IPv6 адреса; динамические адреса исключены из управления. Ошибка любого address catalog или неверный формат ответа останавливает чтение/запись, неполный ответ не становится пустым снимком. Выбранный выключенный сервер также исключён из опроса.
Create/PATCH/restore/delete выбирают /ip/address или /ipv6/address по проверенному CIDR; одинаковый RouterOS ID в разных семействах безопасен. Новые снимки содержат все статические адреса, disabled/advertise/comment/no-dad. PATCH меняет только целевой GRE, сохраняет дополнительные адреса; очистка поля передаёт явную пустую строку. Восстановление старой ревизии при нескольких текущих адресах возвращает409 до записи. Неоднозначные ID/name и переименование также409. Expanded/compressed IPv6 сравниваются по одному ключу. Применение from-pool/EUI-64 остановлено с объяснением: их выделение не принимается за обычный literal static address.
Существующие ReUI/Frame/base-nova сохранены, добавлена подсказка IPv4/IPv6 с префиксом. Проверки: config-sync4 scripts (включая14 invalid POST/PATCH до DB/REST), gre-comment и selected-context tests; backend/source-only types/ESLint;15 GRE E2E; backend/frontend production builds;984 emitted outputs совпали. Первый E2E запуск не стартовал из-за sandbox Windows/SWC canonicalize access; разрешённый повтор прошёл.
Настоящие production Fastify handlers + выделенная PG база + оба CHR:18 API requests включая создание IPv6 пары, PATCH IPv6, сохранение дополнительных IPv4/disabled IPv6, history restore многoадресного снимка, legacy409 и ID/name409, смену IPv6→IPv4, очистку, восстановление и DELETE. Ping3/3 в обе стороны после running=true и address invalid=false. Первоначальный короткий Ping получил0 вместо ожидаемых3 и остановил первый сценарий; причина не доказана. Его результат и очистка сохранены отдельно, повтор не скрывает начальный отказ. Это короткий dataplane, не доказательство бесшовности/throughput.
Оба запуска: собственные объекты удалены,8 static collections×2 совпали с baseline, отдельные базы удалены. Пароли не менялись, public/default routes не трогались. Native parent читает исходные enabled server credentials; background polling главного приложения продолжался, отсутствие всех background SQL writes не заявляется. Runtime backend/frontend ux-gre151 healthy, live read-only PC/mobile catalog/form smoke прошёл после cleanup; native mutation принята через изолированную базу, deployed browser mutation не выполнялась.
Протоколы: [native/cleanup](ux-ui/acceptance/gre-ipv6-native-2026-10-11.json), [API/history](ux-ui/acceptance/gre-ipv6-api-history-2026-10-11.json), [первый запуск](ux-ui/acceptance/gre-ipv6-initial-cleanup-2026-10-11.json), [compiled parity](ux-ui/acceptance/gre-ipv6-compiled-2026-10-11.json), [live UI](ux-ui/acceptance/gre-ipv6-smoke-2026-10-11.json).
Границы: IPv6 ULA inner по IPv4 GRE outer; IPv6 outer/public WAN, scale, длительное восстановление и from-pool/EUI-64 не приняты. Полная регрессия после139 не повторялась: выполнен профиль изменённых областей. Следующий152 — WireGuard IPv6 lifecycle;12.5 остаётся открытым.
@@ -0,0 +1,122 @@
{
"date": "2026-10-11",
"block": "12.5.151",
"name": "mm-gre151-1791729169930",
"cases": [
{
"method": "POST",
"path": "/gre/tunnels",
"status": 201
},
{
"method": "GET",
"path": "/gre/revisions?serverId=1",
"status": 200
},
{
"method": "POST",
"path": "/gre/tunnels",
"status": 201
},
{
"method": "GET",
"path": "/gre/revisions?serverId=2",
"status": 200
},
{
"method": "PATCH",
"path": "/gre/tunnels",
"status": 200
},
{
"method": "GET",
"path": "/gre/tunnels?serverId=1",
"status": 200
},
{
"method": "GET",
"path": "/gre/revisions?serverId=1",
"status": 200
},
{
"method": "POST",
"path": "/gre/revisions/legacy-mm_accept_151_1791729169930/restore",
"status": 409
},
{
"method": "PATCH",
"path": "/gre/tunnels",
"status": 200
},
{
"method": "PATCH",
"path": "/gre/tunnels",
"status": 409
},
{
"method": "POST",
"path": "/gre/revisions/2c0425c3-c8dc-4394-9792-afb5c21ab62d/restore",
"status": 200
},
{
"method": "POST",
"path": "/gre/revisions/8c2c0de3-3651-46ba-8abb-f6ad78dda59c/restore",
"status": 200
},
{
"method": "POST",
"path": "/gre/revisions/2c0425c3-c8dc-4394-9792-afb5c21ab62d/restore",
"status": 200
},
{
"method": "PATCH",
"path": "/gre/tunnels",
"status": 200
},
{
"method": "PATCH",
"path": "/gre/tunnels",
"status": 200
},
{
"method": "POST",
"path": "/gre/revisions/2c0425c3-c8dc-4394-9792-afb5c21ab62d/restore",
"status": 200
},
{
"method": "DELETE",
"path": "/gre/tunnels",
"status": 200
},
{
"method": "DELETE",
"path": "/gre/tunnels",
"status": 200
}
],
"pings": [
{
"serverId": 1,
"sent": 3,
"received": 3
},
{
"serverId": 2,
"sent": 3,
"received": 3
}
],
"ready": [
{
"serverId": 1,
"running": "true",
"addressInvalid": "false"
},
{
"serverId": 2,
"running": "true",
"addressInvalid": "false"
}
],
"passed": true
}
@@ -0,0 +1,994 @@
{
"date": "2026-10-11",
"block": "12.5.151",
"backendVersion": "1.0.0-test.gre151",
"normalization": "CRLF to LF; emitted files derived from tracked non-test source inputs",
"matched": [
"backend/dist/config.js",
"backend/dist/config.js.map",
"backend/dist/config.d.ts",
"backend/dist/config.d.ts.map",
"backend/dist/constants/ping-probe.js",
"backend/dist/constants/ping-probe.js.map",
"backend/dist/constants/ping-probe.d.ts",
"backend/dist/constants/ping-probe.d.ts.map",
"backend/dist/db/bootstrap.js",
"backend/dist/db/bootstrap.js.map",
"backend/dist/db/bootstrap.d.ts",
"backend/dist/db/bootstrap.d.ts.map",
"backend/dist/db/index.js",
"backend/dist/db/index.js.map",
"backend/dist/db/index.d.ts",
"backend/dist/db/index.d.ts.map",
"backend/dist/db/json.js",
"backend/dist/db/json.js.map",
"backend/dist/db/json.d.ts",
"backend/dist/db/json.d.ts.map",
"backend/dist/db/migrate.js",
"backend/dist/db/migrate.js.map",
"backend/dist/db/migrate.d.ts",
"backend/dist/db/migrate.d.ts.map",
"backend/dist/db/operation-lock.js",
"backend/dist/db/operation-lock.js.map",
"backend/dist/db/operation-lock.d.ts",
"backend/dist/db/operation-lock.d.ts.map",
"backend/dist/db/partitions.js",
"backend/dist/db/partitions.js.map",
"backend/dist/db/partitions.d.ts",
"backend/dist/db/partitions.d.ts.map",
"backend/dist/db/schema.js",
"backend/dist/db/schema.js.map",
"backend/dist/db/schema.d.ts",
"backend/dist/db/schema.d.ts.map",
"backend/dist/db/sql-bind.js",
"backend/dist/db/sql-bind.js.map",
"backend/dist/db/sql-bind.d.ts",
"backend/dist/db/sql-bind.d.ts.map",
"backend/dist/db/sqlite-import.js",
"backend/dist/db/sqlite-import.js.map",
"backend/dist/db/sqlite-import.d.ts",
"backend/dist/db/sqlite-import.d.ts.map",
"backend/dist/db/traffic-flags.js",
"backend/dist/db/traffic-flags.js.map",
"backend/dist/db/traffic-flags.d.ts",
"backend/dist/db/traffic-flags.d.ts.map",
"backend/dist/index.js",
"backend/dist/index.js.map",
"backend/dist/index.d.ts",
"backend/dist/index.d.ts.map",
"backend/dist/lib/permissions.js",
"backend/dist/lib/permissions.js.map",
"backend/dist/lib/permissions.d.ts",
"backend/dist/lib/permissions.d.ts.map",
"backend/dist/managed-markers.js",
"backend/dist/managed-markers.js.map",
"backend/dist/managed-markers.d.ts",
"backend/dist/managed-markers.d.ts.map",
"backend/dist/modules/events/repository/events-repository.js",
"backend/dist/modules/events/repository/events-repository.js.map",
"backend/dist/modules/events/repository/events-repository.d.ts",
"backend/dist/modules/events/repository/events-repository.d.ts.map",
"backend/dist/modules/events/service/events-service.js",
"backend/dist/modules/events/service/events-service.js.map",
"backend/dist/modules/events/service/events-service.d.ts",
"backend/dist/modules/events/service/events-service.d.ts.map",
"backend/dist/modules/servers/mapper/servers-mapper.js",
"backend/dist/modules/servers/mapper/servers-mapper.js.map",
"backend/dist/modules/servers/mapper/servers-mapper.d.ts",
"backend/dist/modules/servers/mapper/servers-mapper.d.ts.map",
"backend/dist/modules/servers/repository/servers-repository.js",
"backend/dist/modules/servers/repository/servers-repository.js.map",
"backend/dist/modules/servers/repository/servers-repository.d.ts",
"backend/dist/modules/servers/repository/servers-repository.d.ts.map",
"backend/dist/modules/servers/service/servers-service.js",
"backend/dist/modules/servers/service/servers-service.js.map",
"backend/dist/modules/servers/service/servers-service.d.ts",
"backend/dist/modules/servers/service/servers-service.d.ts.map",
"backend/dist/modules/users/iface-type.js",
"backend/dist/modules/users/iface-type.js.map",
"backend/dist/modules/users/iface-type.d.ts",
"backend/dist/modules/users/iface-type.d.ts.map",
"backend/dist/modules/users/interface-inventory.js",
"backend/dist/modules/users/interface-inventory.js.map",
"backend/dist/modules/users/interface-inventory.d.ts",
"backend/dist/modules/users/interface-inventory.d.ts.map",
"backend/dist/modules/users/peer-bind.js",
"backend/dist/modules/users/peer-bind.js.map",
"backend/dist/modules/users/peer-bind.d.ts",
"backend/dist/modules/users/peer-bind.d.ts.map",
"backend/dist/modules/users/repository/users-repository.js",
"backend/dist/modules/users/repository/users-repository.js.map",
"backend/dist/modules/users/repository/users-repository.d.ts",
"backend/dist/modules/users/repository/users-repository.d.ts.map",
"backend/dist/modules/users/service/users-service.js",
"backend/dist/modules/users/service/users-service.js.map",
"backend/dist/modules/users/service/users-service.d.ts",
"backend/dist/modules/users/service/users-service.d.ts.map",
"backend/dist/plugins/auth.js",
"backend/dist/plugins/auth.js.map",
"backend/dist/plugins/auth.d.ts",
"backend/dist/plugins/auth.d.ts.map",
"backend/dist/plugins/database-request-gate.js",
"backend/dist/plugins/database-request-gate.js.map",
"backend/dist/plugins/database-request-gate.d.ts",
"backend/dist/plugins/database-request-gate.d.ts.map",
"backend/dist/routes/alerts.js",
"backend/dist/routes/alerts.js.map",
"backend/dist/routes/alerts.d.ts",
"backend/dist/routes/alerts.d.ts.map",
"backend/dist/routes/backups.js",
"backend/dist/routes/backups.js.map",
"backend/dist/routes/backups.d.ts",
"backend/dist/routes/backups.d.ts.map",
"backend/dist/routes/bgp.js",
"backend/dist/routes/bgp.js.map",
"backend/dist/routes/bgp.d.ts",
"backend/dist/routes/bgp.d.ts.map",
"backend/dist/routes/certificates.js",
"backend/dist/routes/certificates.js.map",
"backend/dist/routes/certificates.d.ts",
"backend/dist/routes/certificates.d.ts.map",
"backend/dist/routes/containers.js",
"backend/dist/routes/containers.js.map",
"backend/dist/routes/containers.d.ts",
"backend/dist/routes/containers.d.ts.map",
"backend/dist/routes/events.js",
"backend/dist/routes/events.js.map",
"backend/dist/routes/events.d.ts",
"backend/dist/routes/events.d.ts.map",
"backend/dist/routes/evobgp-catalog.js",
"backend/dist/routes/evobgp-catalog.js.map",
"backend/dist/routes/evobgp-catalog.d.ts",
"backend/dist/routes/evobgp-catalog.d.ts.map",
"backend/dist/routes/evobgp-settings.js",
"backend/dist/routes/evobgp-settings.js.map",
"backend/dist/routes/evobgp-settings.d.ts",
"backend/dist/routes/evobgp-settings.d.ts.map",
"backend/dist/routes/evobgp.js",
"backend/dist/routes/evobgp.js.map",
"backend/dist/routes/evobgp.d.ts",
"backend/dist/routes/evobgp.d.ts.map",
"backend/dist/routes/exec.js",
"backend/dist/routes/exec.js.map",
"backend/dist/routes/exec.d.ts",
"backend/dist/routes/exec.d.ts.map",
"backend/dist/routes/filters.js",
"backend/dist/routes/filters.js.map",
"backend/dist/routes/filters.d.ts",
"backend/dist/routes/filters.d.ts.map",
"backend/dist/routes/firewall.js",
"backend/dist/routes/firewall.js.map",
"backend/dist/routes/firewall.d.ts",
"backend/dist/routes/firewall.d.ts.map",
"backend/dist/routes/geoip.js",
"backend/dist/routes/geoip.js.map",
"backend/dist/routes/geoip.d.ts",
"backend/dist/routes/geoip.d.ts.map",
"backend/dist/routes/gre.js",
"backend/dist/routes/gre.js.map",
"backend/dist/routes/gre.d.ts",
"backend/dist/routes/gre.d.ts.map",
"backend/dist/routes/internet-path.js",
"backend/dist/routes/internet-path.js.map",
"backend/dist/routes/internet-path.d.ts",
"backend/dist/routes/internet-path.d.ts.map",
"backend/dist/routes/ipsec.js",
"backend/dist/routes/ipsec.js.map",
"backend/dist/routes/ipsec.d.ts",
"backend/dist/routes/ipsec.d.ts.map",
"backend/dist/routes/network.js",
"backend/dist/routes/network.js.map",
"backend/dist/routes/network.d.ts",
"backend/dist/routes/network.d.ts.map",
"backend/dist/routes/ospf.js",
"backend/dist/routes/ospf.js.map",
"backend/dist/routes/ospf.d.ts",
"backend/dist/routes/ospf.d.ts.map",
"backend/dist/routes/ping-probes-write.js",
"backend/dist/routes/ping-probes-write.js.map",
"backend/dist/routes/ping-probes-write.d.ts",
"backend/dist/routes/ping-probes-write.d.ts.map",
"backend/dist/routes/probes.js",
"backend/dist/routes/probes.js.map",
"backend/dist/routes/probes.d.ts",
"backend/dist/routes/probes.d.ts.map",
"backend/dist/routes/recursive-routes.js",
"backend/dist/routes/recursive-routes.js.map",
"backend/dist/routes/recursive-routes.d.ts",
"backend/dist/routes/recursive-routes.d.ts.map",
"backend/dist/routes/scheduler.js",
"backend/dist/routes/scheduler.js.map",
"backend/dist/routes/scheduler.d.ts",
"backend/dist/routes/scheduler.d.ts.map",
"backend/dist/routes/servers-api-ping.js",
"backend/dist/routes/servers-api-ping.js.map",
"backend/dist/routes/servers-api-ping.d.ts",
"backend/dist/routes/servers-api-ping.d.ts.map",
"backend/dist/routes/servers.js",
"backend/dist/routes/servers.js.map",
"backend/dist/routes/servers.d.ts",
"backend/dist/routes/servers.d.ts.map",
"backend/dist/routes/sidebar-counts.js",
"backend/dist/routes/sidebar-counts.js.map",
"backend/dist/routes/sidebar-counts.d.ts",
"backend/dist/routes/sidebar-counts.d.ts.map",
"backend/dist/routes/speed-probes-write.js",
"backend/dist/routes/speed-probes-write.js.map",
"backend/dist/routes/speed-probes-write.d.ts",
"backend/dist/routes/speed-probes-write.d.ts.map",
"backend/dist/routes/speed-test.js",
"backend/dist/routes/speed-test.js.map",
"backend/dist/routes/speed-test.d.ts",
"backend/dist/routes/speed-test.d.ts.map",
"backend/dist/routes/statistics.js",
"backend/dist/routes/statistics.js.map",
"backend/dist/routes/statistics.d.ts",
"backend/dist/routes/statistics.d.ts.map",
"backend/dist/routes/system-database.js",
"backend/dist/routes/system-database.js.map",
"backend/dist/routes/system-database.d.ts",
"backend/dist/routes/system-database.d.ts.map",
"backend/dist/routes/traffic-flow-purge.js",
"backend/dist/routes/traffic-flow-purge.js.map",
"backend/dist/routes/traffic-flow-purge.d.ts",
"backend/dist/routes/traffic-flow-purge.d.ts.map",
"backend/dist/routes/traffic-flow-settings.js",
"backend/dist/routes/traffic-flow-settings.js.map",
"backend/dist/routes/traffic-flow-settings.d.ts",
"backend/dist/routes/traffic-flow-settings.d.ts.map",
"backend/dist/routes/traffic-flow.js",
"backend/dist/routes/traffic-flow.js.map",
"backend/dist/routes/traffic-flow.d.ts",
"backend/dist/routes/traffic-flow.d.ts.map",
"backend/dist/routes/traffic.js",
"backend/dist/routes/traffic.js.map",
"backend/dist/routes/traffic.d.ts",
"backend/dist/routes/traffic.d.ts.map",
"backend/dist/routes/uptime.js",
"backend/dist/routes/uptime.js.map",
"backend/dist/routes/uptime.d.ts",
"backend/dist/routes/uptime.d.ts.map",
"backend/dist/routes/users.js",
"backend/dist/routes/users.js.map",
"backend/dist/routes/users.d.ts",
"backend/dist/routes/users.d.ts.map",
"backend/dist/routes/vxlan.js",
"backend/dist/routes/vxlan.js.map",
"backend/dist/routes/vxlan.d.ts",
"backend/dist/routes/vxlan.d.ts.map",
"backend/dist/routes/wireguard.js",
"backend/dist/routes/wireguard.js.map",
"backend/dist/routes/wireguard.d.ts",
"backend/dist/routes/wireguard.d.ts.map",
"backend/dist/scripts/migrate-sqlite-to-pg.js",
"backend/dist/scripts/migrate-sqlite-to-pg.js.map",
"backend/dist/scripts/migrate-sqlite-to-pg.d.ts",
"backend/dist/scripts/migrate-sqlite-to-pg.d.ts.map",
"backend/dist/scripts/rebuild-flow-facts.js",
"backend/dist/scripts/rebuild-flow-facts.js.map",
"backend/dist/scripts/rebuild-flow-facts.d.ts",
"backend/dist/scripts/rebuild-flow-facts.d.ts.map",
"backend/dist/services/acme-cloudflare.js",
"backend/dist/services/acme-cloudflare.js.map",
"backend/dist/services/acme-cloudflare.d.ts",
"backend/dist/services/acme-cloudflare.d.ts.map",
"backend/dist/services/alert-collector-hooks.js",
"backend/dist/services/alert-collector-hooks.js.map",
"backend/dist/services/alert-collector-hooks.d.ts",
"backend/dist/services/alert-collector-hooks.d.ts.map",
"backend/dist/services/alert-engine/confirm-stability.js",
"backend/dist/services/alert-engine/confirm-stability.js.map",
"backend/dist/services/alert-engine/confirm-stability.d.ts",
"backend/dist/services/alert-engine/confirm-stability.d.ts.map",
"backend/dist/services/alert-engine/cooldown.js",
"backend/dist/services/alert-engine/cooldown.js.map",
"backend/dist/services/alert-engine/cooldown.d.ts",
"backend/dist/services/alert-engine/cooldown.d.ts.map",
"backend/dist/services/alert-engine/decision-engine.js",
"backend/dist/services/alert-engine/decision-engine.js.map",
"backend/dist/services/alert-engine/decision-engine.d.ts",
"backend/dist/services/alert-engine/decision-engine.d.ts.map",
"backend/dist/services/alert-engine/evaluate-rule.js",
"backend/dist/services/alert-engine/evaluate-rule.js.map",
"backend/dist/services/alert-engine/evaluate-rule.d.ts",
"backend/dist/services/alert-engine/evaluate-rule.d.ts.map",
"backend/dist/services/alert-engine/groups.js",
"backend/dist/services/alert-engine/groups.js.map",
"backend/dist/services/alert-engine/groups.d.ts",
"backend/dist/services/alert-engine/groups.d.ts.map",
"backend/dist/services/alert-engine/outbox-execution.js",
"backend/dist/services/alert-engine/outbox-execution.js.map",
"backend/dist/services/alert-engine/outbox-execution.d.ts",
"backend/dist/services/alert-engine/outbox-execution.d.ts.map",
"backend/dist/services/alert-engine/outbox.js",
"backend/dist/services/alert-engine/outbox.js.map",
"backend/dist/services/alert-engine/outbox.d.ts",
"backend/dist/services/alert-engine/outbox.d.ts.map",
"backend/dist/services/alert-engine/prev-live-store.js",
"backend/dist/services/alert-engine/prev-live-store.js.map",
"backend/dist/services/alert-engine/prev-live-store.d.ts",
"backend/dist/services/alert-engine/prev-live-store.d.ts.map",
"backend/dist/services/alert-engine/rule-matcher.js",
"backend/dist/services/alert-engine/rule-matcher.js.map",
"backend/dist/services/alert-engine/rule-matcher.d.ts",
"backend/dist/services/alert-engine/rule-matcher.d.ts.map",
"backend/dist/services/alert-engine/run-once.js",
"backend/dist/services/alert-engine/run-once.js.map",
"backend/dist/services/alert-engine/run-once.d.ts",
"backend/dist/services/alert-engine/run-once.d.ts.map",
"backend/dist/services/alert-engine/signal-ingestor.js",
"backend/dist/services/alert-engine/signal-ingestor.js.map",
"backend/dist/services/alert-engine/signal-ingestor.d.ts",
"backend/dist/services/alert-engine/signal-ingestor.d.ts.map",
"backend/dist/services/alert-engine/signals-from-collectors.js",
"backend/dist/services/alert-engine/signals-from-collectors.js.map",
"backend/dist/services/alert-engine/signals-from-collectors.d.ts",
"backend/dist/services/alert-engine/signals-from-collectors.d.ts.map",
"backend/dist/services/alert-engine/snapshot.js",
"backend/dist/services/alert-engine/snapshot.js.map",
"backend/dist/services/alert-engine/snapshot.d.ts",
"backend/dist/services/alert-engine/snapshot.d.ts.map",
"backend/dist/services/alert-engine/source-watermark.js",
"backend/dist/services/alert-engine/source-watermark.js.map",
"backend/dist/services/alert-engine/source-watermark.d.ts",
"backend/dist/services/alert-engine/source-watermark.d.ts.map",
"backend/dist/services/alert-engine/state-machine.js",
"backend/dist/services/alert-engine/state-machine.js.map",
"backend/dist/services/alert-engine/state-machine.d.ts",
"backend/dist/services/alert-engine/state-machine.d.ts.map",
"backend/dist/services/alert-engine/telegram-emoji.js",
"backend/dist/services/alert-engine/telegram-emoji.js.map",
"backend/dist/services/alert-engine/telegram-emoji.d.ts",
"backend/dist/services/alert-engine/telegram-emoji.d.ts.map",
"backend/dist/services/alert-engine/types.js",
"backend/dist/services/alert-engine/types.js.map",
"backend/dist/services/alert-engine/types.d.ts",
"backend/dist/services/alert-engine/types.d.ts.map",
"backend/dist/services/alerts-config-execution.js",
"backend/dist/services/alerts-config-execution.js.map",
"backend/dist/services/alerts-config-execution.d.ts",
"backend/dist/services/alerts-config-execution.d.ts.map",
"backend/dist/services/alerts-outbox-overview.js",
"backend/dist/services/alerts-outbox-overview.js.map",
"backend/dist/services/alerts-outbox-overview.d.ts",
"backend/dist/services/alerts-outbox-overview.d.ts.map",
"backend/dist/services/alerts-outbox-retry.js",
"backend/dist/services/alerts-outbox-retry.js.map",
"backend/dist/services/alerts-outbox-retry.d.ts",
"backend/dist/services/alerts-outbox-retry.d.ts.map",
"backend/dist/services/alerts-overview.js",
"backend/dist/services/alerts-overview.js.map",
"backend/dist/services/alerts-overview.d.ts",
"backend/dist/services/alerts-overview.d.ts.map",
"backend/dist/services/alerts-revision.js",
"backend/dist/services/alerts-revision.js.map",
"backend/dist/services/alerts-revision.d.ts",
"backend/dist/services/alerts-revision.d.ts.map",
"backend/dist/services/alerts-service.js",
"backend/dist/services/alerts-service.js.map",
"backend/dist/services/alerts-service.d.ts",
"backend/dist/services/alerts-service.d.ts.map",
"backend/dist/services/alerts-telegram-delivery.js",
"backend/dist/services/alerts-telegram-delivery.js.map",
"backend/dist/services/alerts-telegram-delivery.d.ts",
"backend/dist/services/alerts-telegram-delivery.d.ts.map",
"backend/dist/services/alerts-telegram-send.js",
"backend/dist/services/alerts-telegram-send.js.map",
"backend/dist/services/alerts-telegram-send.d.ts",
"backend/dist/services/alerts-telegram-send.d.ts.map",
"backend/dist/services/alerts-telegram-settings.js",
"backend/dist/services/alerts-telegram-settings.js.map",
"backend/dist/services/alerts-telegram-settings.d.ts",
"backend/dist/services/alerts-telegram-settings.d.ts.map",
"backend/dist/services/backup-deletion.js",
"backend/dist/services/backup-deletion.js.map",
"backend/dist/services/backup-deletion.d.ts",
"backend/dist/services/backup-deletion.d.ts.map",
"backend/dist/services/backup-dto.js",
"backend/dist/services/backup-dto.js.map",
"backend/dist/services/backup-dto.d.ts",
"backend/dist/services/backup-dto.d.ts.map",
"backend/dist/services/backup-job-execution.js",
"backend/dist/services/backup-job-execution.js.map",
"backend/dist/services/backup-job-execution.d.ts",
"backend/dist/services/backup-job-execution.d.ts.map",
"backend/dist/services/backup-prune.js",
"backend/dist/services/backup-prune.js.map",
"backend/dist/services/backup-prune.d.ts",
"backend/dist/services/backup-prune.d.ts.map",
"backend/dist/services/backup-restore.js",
"backend/dist/services/backup-restore.js.map",
"backend/dist/services/backup-restore.d.ts",
"backend/dist/services/backup-restore.d.ts.map",
"backend/dist/services/backup-scheduler-collector.js",
"backend/dist/services/backup-scheduler-collector.js.map",
"backend/dist/services/backup-scheduler-collector.d.ts",
"backend/dist/services/backup-scheduler-collector.d.ts.map",
"backend/dist/services/backup-scheduler-run.js",
"backend/dist/services/backup-scheduler-run.js.map",
"backend/dist/services/backup-scheduler-run.d.ts",
"backend/dist/services/backup-scheduler-run.d.ts.map",
"backend/dist/services/backup-service.js",
"backend/dist/services/backup-service.js.map",
"backend/dist/services/backup-service.d.ts",
"backend/dist/services/backup-service.d.ts.map",
"backend/dist/services/backup-storage-update.js",
"backend/dist/services/backup-storage-update.js.map",
"backend/dist/services/backup-storage-update.d.ts",
"backend/dist/services/backup-storage-update.d.ts.map",
"backend/dist/services/bandwidth-test-rates.js",
"backend/dist/services/bandwidth-test-rates.js.map",
"backend/dist/services/bandwidth-test-rates.d.ts",
"backend/dist/services/bandwidth-test-rates.d.ts.map",
"backend/dist/services/bandwidth-test-status.js",
"backend/dist/services/bandwidth-test-status.js.map",
"backend/dist/services/bandwidth-test-status.d.ts",
"backend/dist/services/bandwidth-test-status.d.ts.map",
"backend/dist/services/bgp-catalog-poll.js",
"backend/dist/services/bgp-catalog-poll.js.map",
"backend/dist/services/bgp-catalog-poll.d.ts",
"backend/dist/services/bgp-catalog-poll.d.ts.map",
"backend/dist/services/bgp-parse-sessions.js",
"backend/dist/services/bgp-parse-sessions.js.map",
"backend/dist/services/bgp-parse-sessions.d.ts",
"backend/dist/services/bgp-parse-sessions.d.ts.map",
"backend/dist/services/bgp-peers-live.js",
"backend/dist/services/bgp-peers-live.js.map",
"backend/dist/services/bgp-peers-live.d.ts",
"backend/dist/services/bgp-peers-live.d.ts.map",
"backend/dist/services/btest-node-locks.js",
"backend/dist/services/btest-node-locks.js.map",
"backend/dist/services/btest-node-locks.d.ts",
"backend/dist/services/btest-node-locks.d.ts.map",
"backend/dist/services/certificate-issue-dto.js",
"backend/dist/services/certificate-issue-dto.js.map",
"backend/dist/services/certificate-issue-dto.d.ts",
"backend/dist/services/certificate-issue-dto.d.ts.map",
"backend/dist/services/certificate-issue-execution.js",
"backend/dist/services/certificate-issue-execution.js.map",
"backend/dist/services/certificate-issue-execution.d.ts",
"backend/dist/services/certificate-issue-execution.d.ts.map",
"backend/dist/services/certificate-issue-request.js",
"backend/dist/services/certificate-issue-request.js.map",
"backend/dist/services/certificate-issue-request.d.ts",
"backend/dist/services/certificate-issue-request.d.ts.map",
"backend/dist/services/certificate-issue-runner.js",
"backend/dist/services/certificate-issue-runner.js.map",
"backend/dist/services/certificate-issue-runner.d.ts",
"backend/dist/services/certificate-issue-runner.d.ts.map",
"backend/dist/services/certificate-parse.js",
"backend/dist/services/certificate-parse.js.map",
"backend/dist/services/certificate-parse.d.ts",
"backend/dist/services/certificate-parse.d.ts.map",
"backend/dist/services/certificate-renew-collector.js",
"backend/dist/services/certificate-renew-collector.js.map",
"backend/dist/services/certificate-renew-collector.d.ts",
"backend/dist/services/certificate-renew-collector.d.ts.map",
"backend/dist/services/certificates-service.js",
"backend/dist/services/certificates-service.js.map",
"backend/dist/services/certificates-service.d.ts",
"backend/dist/services/certificates-service.d.ts.map",
"backend/dist/services/certificates-state.js",
"backend/dist/services/certificates-state.js.map",
"backend/dist/services/certificates-state.d.ts",
"backend/dist/services/certificates-state.d.ts.map",
"backend/dist/services/complete-count.js",
"backend/dist/services/complete-count.js.map",
"backend/dist/services/complete-count.d.ts",
"backend/dist/services/complete-count.d.ts.map",
"backend/dist/services/config-apply-plan.js",
"backend/dist/services/config-apply-plan.js.map",
"backend/dist/services/config-apply-plan.d.ts",
"backend/dist/services/config-apply-plan.d.ts.map",
"backend/dist/services/config-revisions.js",
"backend/dist/services/config-revisions.js.map",
"backend/dist/services/config-revisions.d.ts",
"backend/dist/services/config-revisions.d.ts.map",
"backend/dist/services/containers-live.js",
"backend/dist/services/containers-live.js.map",
"backend/dist/services/containers-live.d.ts",
"backend/dist/services/containers-live.d.ts.map",
"backend/dist/services/containers-state.js",
"backend/dist/services/containers-state.js.map",
"backend/dist/services/containers-state.d.ts",
"backend/dist/services/containers-state.d.ts.map",
"backend/dist/services/database-background-work.js",
"backend/dist/services/database-background-work.js.map",
"backend/dist/services/database-background-work.d.ts",
"backend/dist/services/database-background-work.d.ts.map",
"backend/dist/services/database-request-gate.js",
"backend/dist/services/database-request-gate.js.map",
"backend/dist/services/database-request-gate.d.ts",
"backend/dist/services/database-request-gate.d.ts.map",
"backend/dist/services/entity-snapshots.js",
"backend/dist/services/entity-snapshots.js.map",
"backend/dist/services/entity-snapshots.d.ts",
"backend/dist/services/entity-snapshots.d.ts.map",
"backend/dist/services/evobgp-catalog.js",
"backend/dist/services/evobgp-catalog.js.map",
"backend/dist/services/evobgp-catalog.d.ts",
"backend/dist/services/evobgp-catalog.d.ts.map",
"backend/dist/services/firewall-live.js",
"backend/dist/services/firewall-live.js.map",
"backend/dist/services/firewall-live.d.ts",
"backend/dist/services/firewall-live.d.ts.map",
"backend/dist/services/firewall-poll.js",
"backend/dist/services/firewall-poll.js.map",
"backend/dist/services/firewall-poll.d.ts",
"backend/dist/services/firewall-poll.d.ts.map",
"backend/dist/services/geoip-settings.js",
"backend/dist/services/geoip-settings.js.map",
"backend/dist/services/geoip-settings.d.ts",
"backend/dist/services/geoip-settings.d.ts.map",
"backend/dist/services/geoip-update-collector.js",
"backend/dist/services/geoip-update-collector.js.map",
"backend/dist/services/geoip-update-collector.d.ts",
"backend/dist/services/geoip-update-collector.d.ts.map",
"backend/dist/services/gre-bgp-snapshot-collector.js",
"backend/dist/services/gre-bgp-snapshot-collector.js.map",
"backend/dist/services/gre-bgp-snapshot-collector.d.ts",
"backend/dist/services/gre-bgp-snapshot-collector.d.ts.map",
"backend/dist/services/gre-catalog-poll.js",
"backend/dist/services/gre-catalog-poll.js.map",
"backend/dist/services/gre-catalog-poll.d.ts",
"backend/dist/services/gre-catalog-poll.d.ts.map",
"backend/dist/services/gre-comment.js",
"backend/dist/services/gre-comment.js.map",
"backend/dist/services/gre-comment.d.ts",
"backend/dist/services/gre-comment.d.ts.map",
"backend/dist/services/gre-live.js",
"backend/dist/services/gre-live.js.map",
"backend/dist/services/gre-live.d.ts",
"backend/dist/services/gre-live.d.ts.map",
"backend/dist/services/gre-tunnels-live.js",
"backend/dist/services/gre-tunnels-live.js.map",
"backend/dist/services/gre-tunnels-live.d.ts",
"backend/dist/services/gre-tunnels-live.d.ts.map",
"backend/dist/services/internet-path-collector.js",
"backend/dist/services/internet-path-collector.js.map",
"backend/dist/services/internet-path-collector.d.ts",
"backend/dist/services/internet-path-collector.d.ts.map",
"backend/dist/services/internet-path-snapshot.js",
"backend/dist/services/internet-path-snapshot.js.map",
"backend/dist/services/internet-path-snapshot.d.ts",
"backend/dist/services/internet-path-snapshot.d.ts.map",
"backend/dist/services/ipsec-ca.js",
"backend/dist/services/ipsec-ca.js.map",
"backend/dist/services/ipsec-ca.d.ts",
"backend/dist/services/ipsec-ca.d.ts.map",
"backend/dist/services/ipsec-certificate-dn.js",
"backend/dist/services/ipsec-certificate-dn.js.map",
"backend/dist/services/ipsec-certificate-dn.d.ts",
"backend/dist/services/ipsec-certificate-dn.d.ts.map",
"backend/dist/services/ipsec-cleanup.js",
"backend/dist/services/ipsec-cleanup.js.map",
"backend/dist/services/ipsec-cleanup.d.ts",
"backend/dist/services/ipsec-cleanup.d.ts.map",
"backend/dist/services/ipsec-config.js",
"backend/dist/services/ipsec-config.js.map",
"backend/dist/services/ipsec-config.d.ts",
"backend/dist/services/ipsec-config.d.ts.map",
"backend/dist/services/ipsec-live.js",
"backend/dist/services/ipsec-live.js.map",
"backend/dist/services/ipsec-live.d.ts",
"backend/dist/services/ipsec-live.d.ts.map",
"backend/dist/services/ipsec-operation.js",
"backend/dist/services/ipsec-operation.js.map",
"backend/dist/services/ipsec-operation.d.ts",
"backend/dist/services/ipsec-operation.d.ts.map",
"backend/dist/services/ipsec-ros.js",
"backend/dist/services/ipsec-ros.js.map",
"backend/dist/services/ipsec-ros.d.ts",
"backend/dist/services/ipsec-ros.d.ts.map",
"backend/dist/services/mikrotik.js",
"backend/dist/services/mikrotik.js.map",
"backend/dist/services/mikrotik.d.ts",
"backend/dist/services/mikrotik.d.ts.map",
"backend/dist/services/monitoring-server-catalog.js",
"backend/dist/services/monitoring-server-catalog.js.map",
"backend/dist/services/monitoring-server-catalog.d.ts",
"backend/dist/services/monitoring-server-catalog.d.ts.map",
"backend/dist/services/ospf-catalog-poll.js",
"backend/dist/services/ospf-catalog-poll.js.map",
"backend/dist/services/ospf-catalog-poll.d.ts",
"backend/dist/services/ospf-catalog-poll.d.ts.map",
"backend/dist/services/ospf-effective-disabled.js",
"backend/dist/services/ospf-effective-disabled.js.map",
"backend/dist/services/ospf-effective-disabled.d.ts",
"backend/dist/services/ospf-effective-disabled.d.ts.map",
"backend/dist/services/ospf-observed-values.js",
"backend/dist/services/ospf-observed-values.js.map",
"backend/dist/services/ospf-observed-values.d.ts",
"backend/dist/services/ospf-observed-values.d.ts.map",
"backend/dist/services/ospf-optimizer-identity.js",
"backend/dist/services/ospf-optimizer-identity.js.map",
"backend/dist/services/ospf-optimizer-identity.d.ts",
"backend/dist/services/ospf-optimizer-identity.d.ts.map",
"backend/dist/services/ospf-optimizer-metrics.js",
"backend/dist/services/ospf-optimizer-metrics.js.map",
"backend/dist/services/ospf-optimizer-metrics.d.ts",
"backend/dist/services/ospf-optimizer-metrics.d.ts.map",
"backend/dist/services/ospf-optimizer-plan.js",
"backend/dist/services/ospf-optimizer-plan.js.map",
"backend/dist/services/ospf-optimizer-plan.d.ts",
"backend/dist/services/ospf-optimizer-plan.d.ts.map",
"backend/dist/services/ospf-route-parse.js",
"backend/dist/services/ospf-route-parse.js.map",
"backend/dist/services/ospf-route-parse.d.ts",
"backend/dist/services/ospf-route-parse.d.ts.map",
"backend/dist/services/ping-probe-replacement.js",
"backend/dist/services/ping-probe-replacement.js.map",
"backend/dist/services/ping-probe-replacement.d.ts",
"backend/dist/services/ping-probe-replacement.d.ts.map",
"backend/dist/services/poller.js",
"backend/dist/services/poller.js.map",
"backend/dist/services/poller.d.ts",
"backend/dist/services/poller.d.ts.map",
"backend/dist/services/recursive-apply.js",
"backend/dist/services/recursive-apply.js.map",
"backend/dist/services/recursive-apply.d.ts",
"backend/dist/services/recursive-apply.d.ts.map",
"backend/dist/services/recursive-route-catalog.js",
"backend/dist/services/recursive-route-catalog.js.map",
"backend/dist/services/recursive-route-catalog.d.ts",
"backend/dist/services/recursive-route-catalog.d.ts.map",
"backend/dist/services/recursive-route-validation.js",
"backend/dist/services/recursive-route-validation.js.map",
"backend/dist/services/recursive-route-validation.d.ts",
"backend/dist/services/recursive-route-validation.d.ts.map",
"backend/dist/services/ros-metric-parse.js",
"backend/dist/services/ros-metric-parse.js.map",
"backend/dist/services/ros-metric-parse.d.ts",
"backend/dist/services/ros-metric-parse.d.ts.map",
"backend/dist/services/ros-ops.js",
"backend/dist/services/ros-ops.js.map",
"backend/dist/services/ros-ops.d.ts",
"backend/dist/services/ros-ops.d.ts.map",
"backend/dist/services/s3-backup-client.js",
"backend/dist/services/s3-backup-client.js.map",
"backend/dist/services/s3-backup-client.d.ts",
"backend/dist/services/s3-backup-client.d.ts.map",
"backend/dist/services/scheduler-recorded-run.js",
"backend/dist/services/scheduler-recorded-run.js.map",
"backend/dist/services/scheduler-recorded-run.d.ts",
"backend/dist/services/scheduler-recorded-run.d.ts.map",
"backend/dist/services/scheduler-running.js",
"backend/dist/services/scheduler-running.js.map",
"backend/dist/services/scheduler-running.d.ts",
"backend/dist/services/scheduler-running.d.ts.map",
"backend/dist/services/scheduler.js",
"backend/dist/services/scheduler.js.map",
"backend/dist/services/scheduler.d.ts",
"backend/dist/services/scheduler.d.ts.map",
"backend/dist/services/serial-operation.js",
"backend/dist/services/serial-operation.js.map",
"backend/dist/services/serial-operation.d.ts",
"backend/dist/services/serial-operation.d.ts.map",
"backend/dist/services/servers-rest-ping-collector.js",
"backend/dist/services/servers-rest-ping-collector.js.map",
"backend/dist/services/servers-rest-ping-collector.d.ts",
"backend/dist/services/servers-rest-ping-collector.d.ts.map",
"backend/dist/services/speed-history-dto.js",
"backend/dist/services/speed-history-dto.js.map",
"backend/dist/services/speed-history-dto.d.ts",
"backend/dist/services/speed-history-dto.d.ts.map",
"backend/dist/services/speed-probe-dto.js",
"backend/dist/services/speed-probe-dto.js.map",
"backend/dist/services/speed-probe-dto.d.ts",
"backend/dist/services/speed-probe-dto.d.ts.map",
"backend/dist/services/speed-probe-replacement.js",
"backend/dist/services/speed-probe-replacement.js.map",
"backend/dist/services/speed-probe-replacement.d.ts",
"backend/dist/services/speed-probe-replacement.d.ts.map",
"backend/dist/services/speed-run-error-message.js",
"backend/dist/services/speed-run-error-message.js.map",
"backend/dist/services/speed-run-error-message.d.ts",
"backend/dist/services/speed-run-error-message.d.ts.map",
"backend/dist/services/speed-run-persistence.js",
"backend/dist/services/speed-run-persistence.js.map",
"backend/dist/services/speed-run-persistence.d.ts",
"backend/dist/services/speed-run-persistence.d.ts.map",
"backend/dist/services/statistics-aggregate.js",
"backend/dist/services/statistics-aggregate.js.map",
"backend/dist/services/statistics-aggregate.d.ts",
"backend/dist/services/statistics-aggregate.d.ts.map",
"backend/dist/services/system-database-backup.js",
"backend/dist/services/system-database-backup.js.map",
"backend/dist/services/system-database-backup.d.ts",
"backend/dist/services/system-database-backup.d.ts.map",
"backend/dist/services/system-database-cache.js",
"backend/dist/services/system-database-cache.js.map",
"backend/dist/services/system-database-cache.d.ts",
"backend/dist/services/system-database-cache.d.ts.map",
"backend/dist/services/system-database-operation.js",
"backend/dist/services/system-database-operation.js.map",
"backend/dist/services/system-database-operation.d.ts",
"backend/dist/services/system-database-operation.d.ts.map",
"backend/dist/services/system-database-partition-restore.js",
"backend/dist/services/system-database-partition-restore.js.map",
"backend/dist/services/system-database-partition-restore.d.ts",
"backend/dist/services/system-database-partition-restore.d.ts.map",
"backend/dist/services/system-database-restore-execution.js",
"backend/dist/services/system-database-restore-execution.js.map",
"backend/dist/services/system-database-restore-execution.d.ts",
"backend/dist/services/system-database-restore-execution.d.ts.map",
"backend/dist/services/traffic-collector.js",
"backend/dist/services/traffic-collector.js.map",
"backend/dist/services/traffic-collector.d.ts",
"backend/dist/services/traffic-collector.d.ts.map",
"backend/dist/services/traffic-flow-analytics.js",
"backend/dist/services/traffic-flow-analytics.js.map",
"backend/dist/services/traffic-flow-analytics.d.ts",
"backend/dist/services/traffic-flow-analytics.d.ts.map",
"backend/dist/services/traffic-flow-apps.js",
"backend/dist/services/traffic-flow-apps.js.map",
"backend/dist/services/traffic-flow-apps.d.ts",
"backend/dist/services/traffic-flow-apps.d.ts.map",
"backend/dist/services/traffic-flow-brands.js",
"backend/dist/services/traffic-flow-brands.js.map",
"backend/dist/services/traffic-flow-brands.d.ts",
"backend/dist/services/traffic-flow-brands.d.ts.map",
"backend/dist/services/traffic-flow-classify.js",
"backend/dist/services/traffic-flow-classify.js.map",
"backend/dist/services/traffic-flow-classify.d.ts",
"backend/dist/services/traffic-flow-classify.d.ts.map",
"backend/dist/services/traffic-flow-collector-ipc.js",
"backend/dist/services/traffic-flow-collector-ipc.js.map",
"backend/dist/services/traffic-flow-collector-ipc.d.ts",
"backend/dist/services/traffic-flow-collector-ipc.d.ts.map",
"backend/dist/services/traffic-flow-collector-worker.js",
"backend/dist/services/traffic-flow-collector-worker.js.map",
"backend/dist/services/traffic-flow-collector-worker.d.ts",
"backend/dist/services/traffic-flow-collector-worker.d.ts.map",
"backend/dist/services/traffic-flow-dedup.js",
"backend/dist/services/traffic-flow-dedup.js.map",
"backend/dist/services/traffic-flow-dedup.d.ts",
"backend/dist/services/traffic-flow-dedup.d.ts.map",
"backend/dist/services/traffic-flow-dest.js",
"backend/dist/services/traffic-flow-dest.js.map",
"backend/dist/services/traffic-flow-dest.d.ts",
"backend/dist/services/traffic-flow-dest.d.ts.map",
"backend/dist/services/traffic-flow-engine.js",
"backend/dist/services/traffic-flow-engine.js.map",
"backend/dist/services/traffic-flow-engine.d.ts",
"backend/dist/services/traffic-flow-engine.d.ts.map",
"backend/dist/services/traffic-flow-facts-filter.js",
"backend/dist/services/traffic-flow-facts-filter.js.map",
"backend/dist/services/traffic-flow-facts-filter.d.ts",
"backend/dist/services/traffic-flow-facts-filter.d.ts.map",
"backend/dist/services/traffic-flow-facts-rebuild.js",
"backend/dist/services/traffic-flow-facts-rebuild.js.map",
"backend/dist/services/traffic-flow-facts-rebuild.d.ts",
"backend/dist/services/traffic-flow-facts-rebuild.d.ts.map",
"backend/dist/services/traffic-flow-facts.js",
"backend/dist/services/traffic-flow-facts.js.map",
"backend/dist/services/traffic-flow-facts.d.ts",
"backend/dist/services/traffic-flow-facts.d.ts.map",
"backend/dist/services/traffic-flow-geoip.js",
"backend/dist/services/traffic-flow-geoip.js.map",
"backend/dist/services/traffic-flow-geoip.d.ts",
"backend/dist/services/traffic-flow-geoip.d.ts.map",
"backend/dist/services/traffic-flow-host-file-builders.js",
"backend/dist/services/traffic-flow-host-file-builders.js.map",
"backend/dist/services/traffic-flow-host-file-builders.d.ts",
"backend/dist/services/traffic-flow-host-file-builders.d.ts.map",
"backend/dist/services/traffic-flow-host-files.js",
"backend/dist/services/traffic-flow-host-files.js.map",
"backend/dist/services/traffic-flow-host-files.d.ts",
"backend/dist/services/traffic-flow-host-files.d.ts.map",
"backend/dist/services/traffic-flow-ifaces.js",
"backend/dist/services/traffic-flow-ifaces.js.map",
"backend/dist/services/traffic-flow-ifaces.d.ts",
"backend/dist/services/traffic-flow-ifaces.d.ts.map",
"backend/dist/services/traffic-flow-ifindex.js",
"backend/dist/services/traffic-flow-ifindex.js.map",
"backend/dist/services/traffic-flow-ifindex.d.ts",
"backend/dist/services/traffic-flow-ifindex.d.ts.map",
"backend/dist/services/traffic-flow-ingest.js",
"backend/dist/services/traffic-flow-ingest.js.map",
"backend/dist/services/traffic-flow-ingest.d.ts",
"backend/dist/services/traffic-flow-ingest.d.ts.map",
"backend/dist/services/traffic-flow-ip.js",
"backend/dist/services/traffic-flow-ip.js.map",
"backend/dist/services/traffic-flow-ip.d.ts",
"backend/dist/services/traffic-flow-ip.d.ts.map",
"backend/dist/services/traffic-flow-key-execution.js",
"backend/dist/services/traffic-flow-key-execution.js.map",
"backend/dist/services/traffic-flow-key-execution.d.ts",
"backend/dist/services/traffic-flow-key-execution.d.ts.map",
"backend/dist/services/traffic-flow-map-exporter.js",
"backend/dist/services/traffic-flow-map-exporter.js.map",
"backend/dist/services/traffic-flow-map-exporter.d.ts",
"backend/dist/services/traffic-flow-map-exporter.d.ts.map",
"backend/dist/services/traffic-flow-map-hops.js",
"backend/dist/services/traffic-flow-map-hops.js.map",
"backend/dist/services/traffic-flow-map-hops.d.ts",
"backend/dist/services/traffic-flow-map-hops.d.ts.map",
"backend/dist/services/traffic-flow-overlay.js",
"backend/dist/services/traffic-flow-overlay.js.map",
"backend/dist/services/traffic-flow-overlay.d.ts",
"backend/dist/services/traffic-flow-overlay.d.ts.map",
"backend/dist/services/traffic-flow-parse.js",
"backend/dist/services/traffic-flow-parse.js.map",
"backend/dist/services/traffic-flow-parse.d.ts",
"backend/dist/services/traffic-flow-parse.d.ts.map",
"backend/dist/services/traffic-flow-planes.js",
"backend/dist/services/traffic-flow-planes.js.map",
"backend/dist/services/traffic-flow-planes.d.ts",
"backend/dist/services/traffic-flow-planes.d.ts.map",
"backend/dist/services/traffic-flow-purge-execution.js",
"backend/dist/services/traffic-flow-purge-execution.js.map",
"backend/dist/services/traffic-flow-purge-execution.d.ts",
"backend/dist/services/traffic-flow-purge-execution.d.ts.map",
"backend/dist/services/traffic-flow-ripe.js",
"backend/dist/services/traffic-flow-ripe.js.map",
"backend/dist/services/traffic-flow-ripe.d.ts",
"backend/dist/services/traffic-flow-ripe.d.ts.map",
"backend/dist/services/traffic-flow-settings.js",
"backend/dist/services/traffic-flow-settings.js.map",
"backend/dist/services/traffic-flow-settings.d.ts",
"backend/dist/services/traffic-flow-settings.d.ts.map",
"backend/dist/services/traffic-flow-topology.js",
"backend/dist/services/traffic-flow-topology.js.map",
"backend/dist/services/traffic-flow-topology.d.ts",
"backend/dist/services/traffic-flow-topology.d.ts.map",
"backend/dist/services/traffic-flow-worker-shutdown.js",
"backend/dist/services/traffic-flow-worker-shutdown.js.map",
"backend/dist/services/traffic-flow-worker-shutdown.d.ts",
"backend/dist/services/traffic-flow-worker-shutdown.d.ts.map",
"backend/dist/services/traffic-rate.js",
"backend/dist/services/traffic-rate.js.map",
"backend/dist/services/traffic-rate.d.ts",
"backend/dist/services/traffic-rate.d.ts.map",
"backend/dist/services/traffic-users.js",
"backend/dist/services/traffic-users.js.map",
"backend/dist/services/traffic-users.d.ts",
"backend/dist/services/traffic-users.d.ts.map",
"backend/dist/services/uptime-collector.js",
"backend/dist/services/uptime-collector.js.map",
"backend/dist/services/uptime-collector.d.ts",
"backend/dist/services/uptime-collector.d.ts.map",
"backend/dist/services/uptime-probe-observations.js",
"backend/dist/services/uptime-probe-observations.js.map",
"backend/dist/services/uptime-probe-observations.d.ts",
"backend/dist/services/uptime-probe-observations.d.ts.map",
"backend/dist/services/uptime-speed-service.js",
"backend/dist/services/uptime-speed-service.js.map",
"backend/dist/services/uptime-speed-service.d.ts",
"backend/dist/services/uptime-speed-service.d.ts.map",
"backend/dist/services/vxlan-live.js",
"backend/dist/services/vxlan-live.js.map",
"backend/dist/services/vxlan-live.d.ts",
"backend/dist/services/vxlan-live.d.ts.map",
"backend/dist/services/wg-keys.js",
"backend/dist/services/wg-keys.js.map",
"backend/dist/services/wg-keys.d.ts",
"backend/dist/services/wg-keys.d.ts.map",
"backend/dist/services/wireguard-config.js",
"backend/dist/services/wireguard-config.js.map",
"backend/dist/services/wireguard-config.d.ts",
"backend/dist/services/wireguard-config.d.ts.map",
"backend/dist/services/wireguard-delete.js",
"backend/dist/services/wireguard-delete.js.map",
"backend/dist/services/wireguard-delete.d.ts",
"backend/dist/services/wireguard-delete.d.ts.map",
"backend/dist/services/wireguard-import-apply.js",
"backend/dist/services/wireguard-import-apply.js.map",
"backend/dist/services/wireguard-import-apply.d.ts",
"backend/dist/services/wireguard-import-apply.d.ts.map",
"backend/dist/services/wireguard-import-revision.js",
"backend/dist/services/wireguard-import-revision.js.map",
"backend/dist/services/wireguard-import-revision.d.ts",
"backend/dist/services/wireguard-import-revision.d.ts.map",
"backend/dist/services/wireguard-import.js",
"backend/dist/services/wireguard-import.js.map",
"backend/dist/services/wireguard-import.d.ts",
"backend/dist/services/wireguard-import.d.ts.map",
"backend/dist/services/wireguard-live.js",
"backend/dist/services/wireguard-live.js.map",
"backend/dist/services/wireguard-live.d.ts",
"backend/dist/services/wireguard-live.d.ts.map",
"backend/dist/services/wireguard-observed-values.js",
"backend/dist/services/wireguard-observed-values.js.map",
"backend/dist/services/wireguard-observed-values.d.ts",
"backend/dist/services/wireguard-observed-values.d.ts.map",
"backend/dist/services/wireguard-ros.js",
"backend/dist/services/wireguard-ros.js.map",
"backend/dist/services/wireguard-ros.d.ts",
"backend/dist/services/wireguard-ros.d.ts.map",
"backend/dist/test/pg.js",
"backend/dist/test/pg.js.map",
"backend/dist/test/pg.d.ts",
"backend/dist/test/pg.d.ts.map",
"backend/dist/types/scheduler-run-snapshot.js",
"backend/dist/types/scheduler-run-snapshot.js.map",
"backend/dist/types/scheduler-run-snapshot.d.ts",
"backend/dist/types/scheduler-run-snapshot.d.ts.map",
"backend/dist/types/server.js",
"backend/dist/types/server.js.map",
"backend/dist/types/server.d.ts",
"backend/dist/types/server.d.ts.map",
"backend/dist/utils/abort-signals.js",
"backend/dist/utils/abort-signals.js.map",
"backend/dist/utils/abort-signals.d.ts",
"backend/dist/utils/abort-signals.d.ts.map",
"backend/dist/utils/ros-src-address.js",
"backend/dist/utils/ros-src-address.js.map",
"backend/dist/utils/ros-src-address.d.ts",
"backend/dist/utils/ros-src-address.d.ts.map",
"backend/dist/utils/server-id.js",
"backend/dist/utils/server-id.js.map",
"backend/dist/utils/server-id.d.ts",
"backend/dist/utils/server-id.d.ts.map",
"packages/contracts/dist/alerts.js",
"packages/contracts/dist/alerts.js.map",
"packages/contracts/dist/alerts.d.ts",
"packages/contracts/dist/alerts.d.ts.map",
"packages/contracts/dist/backups.js",
"packages/contracts/dist/backups.js.map",
"packages/contracts/dist/backups.d.ts",
"packages/contracts/dist/backups.d.ts.map",
"packages/contracts/dist/certificates.js",
"packages/contracts/dist/certificates.js.map",
"packages/contracts/dist/certificates.d.ts",
"packages/contracts/dist/certificates.d.ts.map",
"packages/contracts/dist/containers.js",
"packages/contracts/dist/containers.js.map",
"packages/contracts/dist/containers.d.ts",
"packages/contracts/dist/containers.d.ts.map",
"packages/contracts/dist/events.js",
"packages/contracts/dist/events.js.map",
"packages/contracts/dist/events.d.ts",
"packages/contracts/dist/events.d.ts.map",
"packages/contracts/dist/evobgp.js",
"packages/contracts/dist/evobgp.js.map",
"packages/contracts/dist/evobgp.d.ts",
"packages/contracts/dist/evobgp.d.ts.map",
"packages/contracts/dist/geoip.js",
"packages/contracts/dist/geoip.js.map",
"packages/contracts/dist/geoip.d.ts",
"packages/contracts/dist/geoip.d.ts.map",
"packages/contracts/dist/index.js",
"packages/contracts/dist/index.js.map",
"packages/contracts/dist/index.d.ts",
"packages/contracts/dist/index.d.ts.map",
"packages/contracts/dist/ipsec.js",
"packages/contracts/dist/ipsec.js.map",
"packages/contracts/dist/ipsec.d.ts",
"packages/contracts/dist/ipsec.d.ts.map",
"packages/contracts/dist/ospf-optimizer.js",
"packages/contracts/dist/ospf-optimizer.js.map",
"packages/contracts/dist/ospf-optimizer.d.ts",
"packages/contracts/dist/ospf-optimizer.d.ts.map",
"packages/contracts/dist/servers.js",
"packages/contracts/dist/servers.js.map",
"packages/contracts/dist/servers.d.ts",
"packages/contracts/dist/servers.d.ts.map",
"packages/contracts/dist/statistics.js",
"packages/contracts/dist/statistics.js.map",
"packages/contracts/dist/statistics.d.ts",
"packages/contracts/dist/statistics.d.ts.map",
"packages/contracts/dist/traffic-flow.js",
"packages/contracts/dist/traffic-flow.js.map",
"packages/contracts/dist/traffic-flow.d.ts",
"packages/contracts/dist/traffic-flow.d.ts.map",
"packages/contracts/dist/uptime-probes.js",
"packages/contracts/dist/uptime-probes.js.map",
"packages/contracts/dist/uptime-probes.d.ts",
"packages/contracts/dist/uptime-probes.d.ts.map",
"packages/contracts/dist/uptime-speed.js",
"packages/contracts/dist/uptime-speed.js.map",
"packages/contracts/dist/uptime-speed.d.ts",
"packages/contracts/dist/uptime-speed.d.ts.map",
"packages/contracts/dist/users.js",
"packages/contracts/dist/users.js.map",
"packages/contracts/dist/users.d.ts",
"packages/contracts/dist/users.d.ts.map",
"packages/contracts/dist/wireguard.js",
"packages/contracts/dist/wireguard.js.map",
"packages/contracts/dist/wireguard.d.ts",
"packages/contracts/dist/wireguard.d.ts.map"
],
"missing": [],
"different": []
}
@@ -0,0 +1,28 @@
{
"date": "2026-10-11",
"block": "12.5.151",
"name": "mm-gre151-1791729010604",
"cases": [
{
"method": "POST",
"path": "/gre/tunnels",
"status": 201
},
{
"method": "GET",
"path": "/gre/revisions?serverId=1",
"status": 200
},
{
"method": "POST",
"path": "/gre/tunnels",
"status": 201
},
{
"method": "GET",
"path": "/gre/revisions?serverId=2",
"status": 200
}
],
"pings": []
}
@@ -0,0 +1,47 @@
{
"date": "2026-10-11",
"block": "12.5.151",
"name": "mm-gre151-1791729010604",
"devices": [
{
"serverId": 1,
"host": "194.226.121.150",
"version": "7.24.5 (stable)",
"reachable": true
},
{
"serverId": 2,
"host": "104.165.244.7",
"version": "7.24.5 (stable)",
"reachable": true
}
],
"cleanup": [
{
"serverId": 1,
"/interface/gre": true,
"/ip/address": true,
"/ipv6/address": true,
"/ip/route": true,
"/ipv6/route": true,
"/ip/firewall/filter": true,
"/ip/firewall/nat": true,
"/ipv6/firewall/filter": true
},
{
"serverId": 2,
"/interface/gre": true,
"/ip/address": true,
"/ipv6/address": true,
"/ip/route": true,
"/ipv6/route": true,
"/ip/firewall/filter": true,
"/ip/firewall/nat": true,
"/ipv6/firewall/filter": true
}
],
"childExit": 1,
"error": "Child failed: inspect private log\n\n1 !== 0\n",
"databaseRemoved": true,
"passed": false
}
@@ -0,0 +1,46 @@
{
"date": "2026-10-11",
"block": "12.5.151",
"name": "mm-gre151-1791729169930",
"devices": [
{
"serverId": 1,
"host": "194.226.121.150",
"version": "7.24.5 (stable)",
"reachable": true
},
{
"serverId": 2,
"host": "104.165.244.7",
"version": "7.24.5 (stable)",
"reachable": true
}
],
"cleanup": [
{
"serverId": 1,
"/interface/gre": true,
"/ip/address": true,
"/ipv6/address": true,
"/ip/route": true,
"/ipv6/route": true,
"/ip/firewall/filter": true,
"/ip/firewall/nat": true,
"/ipv6/firewall/filter": true
},
{
"serverId": 2,
"/interface/gre": true,
"/ip/address": true,
"/ipv6/address": true,
"/ip/route": true,
"/ipv6/route": true,
"/ip/firewall/filter": true,
"/ip/firewall/nat": true,
"/ipv6/firewall/filter": true
}
],
"childExit": 0,
"databaseRemoved": true,
"passed": true
}
@@ -0,0 +1,49 @@
{
"date": "2026-10-11",
"block": "12.5.151",
"runtime": {
"backend": "ux-gre151",
"frontend": "ux-gre151"
},
"cases": [
{
"width": 1440,
"status": 200,
"api": [
{
"path": "/api/servers",
"status": 200
},
{
"path": "/api/gre/tunnels",
"status": 200
}
],
"pageErrors": [],
"noOverflow": true,
"ipv6AddressHint": true
},
{
"width": 320,
"status": 200,
"api": [
{
"path": "/api/servers",
"status": 200
},
{
"path": "/api/gre/tunnels",
"status": 200
}
],
"pageErrors": [],
"noOverflow": true,
"ipv6AddressHint": true
}
],
"bounds": [
"Read-only live catalog/new-form UI smoke after native cleanup; no deployed UI mutation",
"Native real RouterOS mutations/history/SQL accepted via dedicated database with production Fastify handlers",
"IPv6 ULA inner over IPv4 GRE outer; no IPv6 outer/independent WAN/throughput/scale claim"
]
}
+2 -1
View File
@@ -13,7 +13,7 @@ for (const mode of ["create", "dto", "edit"]) {
if (route.request().method() === (mode === "edit" ? "PATCH" : "POST")) {
attempts++
expect(path).toBe("/api/gre/tunnels")
expect(route.request().postDataJSON()).toMatchObject({ serverId: "1", name: "gre-test", remoteAddress: "192.0.2.9", remoteInnerIp, comment: "сохранённый ввод" })
expect(route.request().postDataJSON()).toMatchObject({ serverId: "1", name: "gre-test", remoteAddress: "192.0.2.9", remoteInnerIp, localInnerIp: mode === "edit" ? "" : "fd00:151::1/64", comment: "сохранённый ввод" })
if (mode === "edit") expect(route.request().postDataJSON().rosId).toBe("*T/1")
if (attempts === 1) { await gate; return route.fulfill({ status: 403, json: { error: "Запись запрещена тест" } }) }
if (attempts === 2) return route.fulfill({ json: {} })
@@ -40,6 +40,7 @@ for (const mode of ["create", "dto", "edit"]) {
await sheet.getByLabel("Удалённый адрес").fill("192.0.2.9")
await sheet.getByLabel("Комментарий").fill("сохранённый ввод")
await sheet.getByLabel("Удалённый IP", { exact: true }).fill(remoteInnerIp)
await sheet.getByLabel("Локальный IP", { exact: true }).fill(mode === "edit" ? "" : "fd00:151::1/64")
const submit = sheet.getByRole("button", { name: mode === "edit" ? "Сохранить" : "Создать туннель", exact: true })
await submit.evaluate(button => { (button as HTMLButtonElement).click(); (button as HTMLButtonElement).click() })
await expect.poll(() => attempts).toBe(1)
+34
View File
@@ -0,0 +1,34 @@
import { test, expect } from "@playwright/test"
for (const width of [1440, 320]) {
test(`GRE IPv6: каталог и явная очистка адреса, ширина ${width}`, async ({ page }) => {
await page.setViewportSize({ width, height: 1000 })
const errors: string[] = []
page.on("pageerror", e => errors.push(e.message))
const tunnel = { id: "*151", name: "gre-ipv6", serverId: "1", localAddress: "192.0.2.1", remoteAddress: "192.0.2.2", localInnerIp: "fd00:151::1/64", remoteInnerIp: "fd00:151::2", poolId: "live", ipsec: null, mtu: 1400, keepaliveInterval: 10, keepaliveRetries: 3, dscp: "inherit", clampTcpMss: true, allowFastPath: false, comment: "", enabled: true, status: "up" }
let submitted = false
await page.route("**/health", route => route.fulfill({ json: { ok: true } }))
await page.route("**/api/**", route => {
const path = new URL(route.request().url()).pathname
if (route.request().method() === "PATCH" && path === "/api/gre/tunnels") {
expect(route.request().postDataJSON()).toMatchObject({ rosId: "*151", localInnerIp: "", remoteInnerIp: "fd00:151::2" })
submitted = true
return route.fulfill({ json: { ok: true } })
}
return route.fulfill({ json: path === "/api/auth/config" ? { required: false } : path === "/api/servers" ? [{ id: 1, name: "CHR", host: "192.0.2.1", enabled: true, type: "exit-node", country: "RU", status: "online" }] : path === "/api/gre/tunnels" ? { tunnels: [tunnel] } : {} })
})
await page.goto("/gre")
await expect(page.getByRole("button", { name: "Действия: gre-ipv6" })).toBeVisible()
await page.getByRole("button", { name: "Действия: gre-ipv6" }).click()
await page.getByRole("menuitem", { name: "Редактировать", exact: true }).click()
const sheet = page.getByRole("dialog")
await expect(sheet.getByLabel("Локальный IP", { exact: true })).toHaveValue("fd00:151::1/64")
await expect(sheet.getByLabel("Локальный IP", { exact: true })).toHaveAttribute("placeholder", "IPv4/IPv6 с префиксом")
expect(await page.evaluate(() => document.documentElement.scrollWidth <= innerWidth)).toBe(true)
await sheet.getByLabel("Локальный IP", { exact: true }).fill("")
await sheet.getByRole("button", { name: "Сохранить", exact: true }).click()
await expect(sheet).toHaveCount(0)
expect(submitted).toBe(true)
expect(errors).toEqual([])
})
}