2GT-RichandClaude Opus 5
0e364b1558
Closes #118. Unblocked by #110, which is what makes SSH on sixty devices practical. Arbitrary RouterOS console commands over SSH, because `:put`, `:foreach` and `/interface print` are console syntax that the binary API cannot express, and because a curated command library cannot cover "add a channel to LACP" or "rewrite a WireGuard endpoint" — the things people actually asked for. **Waves are the feature, not the safety rail around it.** A shell loop already runs a command on many hosts, costs nothing, and prints errors as they happen. What it cannot do is stop. Devices run together within a wave, waves run strictly in sequence, and halt-on-failure ends the run before a mistake becomes sixty mistakes. Without that, this would be a worse bash. Proved on hardware rather than argued: a bad command on two devices, one per wave, failed on the first and left the second `skipped`. RouterOS reports most errors in output text rather than an exit code, so output is read for failure markers — otherwise a rejected command and a successful one are indistinguishable and the run would sail on. Conservatively: only unambiguous markers count, since misreading ordinary output would halt a run that was working. Change Guard wraps each device by default, so one that stops answering after the command restores itself. It is one click to turn off, because a sharp tool that refuses to cut is not a tool — the requester's argument, and a fair one. The combination that gets an explicit acknowledgement is a command that can sever management *with the guard disabled*; that is the only case where nothing catches a mistake. A preview names devices, wave assignment, and the reasons a command looks capable of cutting management access. It warns, never blocks. Devices with no SSH credential are listed before the run rather than producing a wave of identical authentication failures. Per-device output is captured and kept, because "it failed" without the device's own words is not actionable, and because some commands exist purely for output. Verified end to end against real hardware: a read-only command across two devices, halt-on-failure stopping a bad command after one device, and a genuine write applied under Change Guard, confirmed, then reverted — with both devices returned to their original configuration afterwards. Also adds services/sshExec.ts, shared with the key work: it selects a verified key or a password, and throws rather than swallowing. That last part is deliberate — a swallowed error is exactly how the data-cap feature spent a week doing nothing while looking healthy. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
88 lines
4.7 KiB
TypeScript
88 lines
4.7 KiB
TypeScript
import { BrowserRouter, Routes, Route, Navigate } from 'react-router-dom';
|
|
import { useAuthStore } from './store/authStore';
|
|
import AppLayout from './components/layout/AppLayout';
|
|
import LoginPage from './pages/LoginPage';
|
|
import DashboardPage from './pages/DashboardPage';
|
|
import DevicesPage from './pages/DevicesPage';
|
|
import DeviceDetailPage from './pages/DeviceDetailPage';
|
|
import ClientsPage from './pages/ClientsPage';
|
|
import EventsPage from './pages/EventsPage';
|
|
import TopologyPage from './pages/TopologyPage';
|
|
import BackupsPage from './pages/BackupsPage';
|
|
import FirmwarePage from './pages/FirmwarePage';
|
|
import CommandsPage from './pages/CommandsPage';
|
|
import SettingsPage from './pages/SettingsPage';
|
|
import OidcCallbackPage from './pages/OidcCallbackPage';
|
|
import WirelessPage from './pages/WirelessPage';
|
|
import WirelessSettingsPage from './pages/WirelessSettingsPage';
|
|
import GuestWifiPage from './pages/GuestWifiPage';
|
|
import ClientDetailPage from './pages/ClientDetailPage';
|
|
import NetworkServicesOverviewPage from './pages/NetworkServicesOverviewPage';
|
|
import NetworkServicesDHCPPage from './pages/NetworkServicesDHCPPage';
|
|
import NetworkServicesDNSPage from './pages/NetworkServicesDNSPage';
|
|
import NetworkServicesNTPPage from './pages/NetworkServicesNTPPage';
|
|
import NetworkServicesWireGuardPage from './pages/NetworkServicesWireGuardPage';
|
|
import NetworkServicesSyslogPage from './pages/NetworkServicesSyslogPage';
|
|
import NetworkServicesNetflowPage from './pages/NetworkServicesNetflowPage';
|
|
import NetworkServicesDiscoveryPage from './pages/NetworkServicesDiscoveryPage';
|
|
import TrafficAnalyticsPage from './pages/TrafficAnalyticsPage';
|
|
import SecurityPage from './pages/SecurityPage';
|
|
|
|
function ProtectedRoute({ children }: { children: React.ReactNode }) {
|
|
const token = useAuthStore((s) => s.token);
|
|
if (!token) return <Navigate to="/login" replace />;
|
|
return <>{children}</>;
|
|
}
|
|
|
|
export default function App() {
|
|
return (
|
|
<BrowserRouter>
|
|
<Routes>
|
|
<Route path="/login" element={<LoginPage />} />
|
|
<Route path="/auth/callback" element={<OidcCallbackPage />} />
|
|
<Route
|
|
path="/"
|
|
element={
|
|
<ProtectedRoute>
|
|
<AppLayout />
|
|
</ProtectedRoute>
|
|
}
|
|
>
|
|
<Route index element={<Navigate to="/dashboard" replace />} />
|
|
<Route path="dashboard" element={<DashboardPage />} />
|
|
<Route path="devices" element={<DevicesPage />} />
|
|
<Route path="devices/:id" element={<DeviceDetailPage />} />
|
|
<Route path="clients" element={<ClientsPage />} />
|
|
<Route path="clients/:mac" element={<ClientDetailPage />} />
|
|
<Route path="events" element={<EventsPage />} />
|
|
<Route path="topology" element={<TopologyPage />} />
|
|
<Route path="backups" element={<BackupsPage />} />
|
|
<Route path="firmware" element={<FirmwarePage />} />
|
|
<Route path="commands" element={<CommandsPage />} />
|
|
<Route path="settings" element={<SettingsPage />} />
|
|
{/* Legacy routes — consolidated in the v0.16.4 UI reorganization */}
|
|
<Route path="switches" element={<Navigate to="/devices?type=SW" replace />} />
|
|
<Route path="switches/settings" element={<Navigate to="/network-services/discovery" replace />} />
|
|
<Route path="routers" element={<Navigate to="/devices?type=RTR" replace />} />
|
|
<Route path="routers/settings" element={<Navigate to="/network-services/discovery" replace />} />
|
|
<Route path="wireless/clients" element={<Navigate to="/clients?type=wireless" replace />} />
|
|
<Route path="wireless" element={<WirelessPage />} />
|
|
<Route path="wireless/settings" element={<WirelessSettingsPage />} />
|
|
<Route path="wireless/guest" element={<GuestWifiPage />} />
|
|
<Route path="network-services" element={<NetworkServicesOverviewPage />} />
|
|
<Route path="network-services/dhcp" element={<NetworkServicesDHCPPage />} />
|
|
<Route path="network-services/dns" element={<NetworkServicesDNSPage />} />
|
|
<Route path="network-services/ntp" element={<NetworkServicesNTPPage />} />
|
|
<Route path="network-services/wireguard" element={<NetworkServicesWireGuardPage />} />
|
|
<Route path="network-services/syslog" element={<NetworkServicesSyslogPage />} />
|
|
<Route path="network-services/netflow" element={<NetworkServicesNetflowPage />} />
|
|
<Route path="network-services/discovery" element={<NetworkServicesDiscoveryPage />} />
|
|
<Route path="traffic" element={<TrafficAnalyticsPage />} />
|
|
<Route path="security" element={<SecurityPage />} />
|
|
</Route>
|
|
<Route path="*" element={<Navigate to="/dashboard" replace />} />
|
|
</Routes>
|
|
</BrowserRouter>
|
|
);
|
|
}
|