feat: establish NekoNest Cloud control and relay

2026-08-12 23:25:43 +08:00
commit f27606b709
222 changed files with 71456 additions and 0 deletions
@@ -0,0 +1,39 @@
+import Link from "next/link";
+import { requireCloudViewer } from "../../../cloud-auth";
+import { DashboardShell, PageHeading } from "../../../components/Shells";
+import { getDashboardSnapshot, getOrCreateAccount } from "@/db/repository";
+import { getDaemonReleaseState } from "../../../daemon-release";
+import { deriveBetaOnboarding } from "../../onboarding";
+import { PairingForm } from "./PairingForm";
+import { resolveConnectOrigin } from "./onboarding";
+import { env } from "cloudflare:workers";
+
+export const dynamic = "force-dynamic";
+
+export default async function NewHostPage() {
+  const viewer = await requireCloudViewer("/dashboard/hosts/new");
+  const account = await getOrCreateAccount(viewer);
+  const [snapshot, daemonRelease] = await Promise.all([
+    getDashboardSnapshot(account),
+    getDaemonReleaseState(),
+  ]);
+  const onboarding = deriveBetaOnboarding({
+    entitlement: snapshot.entitlement,
+    hasPendingRequest: snapshot.accessRequests.some((request) => request.status === "requested"),
+  });
+  const connectOrigin = resolveConnectOrigin(
+    env.NEKONEST_CLOUD_CONNECT_ORIGIN,
+    process.env.NODE_ENV !== "production",
+  );
+  return (
+    <DashboardShell viewer={viewer} active="/dashboard/hosts">
+      <div className="cloud-page narrow-cloud-page">
+        <PageHeading eyebrow="ADD OR RECOVER HOST / 添加或恢复主机" title="先创建一次性配对请求。" description="新主机和已撤销主机的安全恢复共用这一步；家里不需要打开入站端口。" actions={<Link className="button button-secondary" href="/download">先下载兼容 daemon</Link>} />
+        <div className="form-layout">
+          <section className="panel form-panel"><PairingForm accessState={onboarding.pairingAccessState} releaseAvailable={daemonRelease.available} minimumDaemonVersion={daemonRelease.minimumVersion} connectOrigin={connectOrigin} /></section>
+          <aside className="form-aside"><span className="eyebrow">接下来会发生</span><ol><li><strong>控制平面生成短时凭证</strong><p>原始代码只显示一次，库中保存 SHA-256 哈希。</p></li><li><strong>daemon 主动认领</strong><p>daemon 提交本机身份公钥，成功后获得独立可撤销令牌。</p></li><li><strong>恢复时证明原私钥</strong><p>若该身份对应已撤销记录，最新版 daemon 必须对本次配对签名；只有公开指纹不够。</p></li><li><strong>原子占用主机槽位</strong><p>认领和槽位分配在同一事务中完成；凭证成功后立即烧毁。</p></li></ol></aside>
+        </div>
+      </div>
+    </DashboardShell>
+  );
+}