utools/backend/routes/traceroute.js

// backend/routes/traceroute.js
const express = require('express');
const Sentry = require("@sentry/node");
const { spawn } = require('child_process');
const pino = require('pino');

// Import utilities
const { isValidIp, isPrivateIp, parseTracerouteLine } = require('../utils');

// Logger for this module
const logger = pino({ level: process.env.LOG_LEVEL || 'info' });

const router = express.Router();

// Helper function to safely create an error message string
function getErrorMessage(err, defaultMessage = 'An unknown error occurred') {
    if (typeof err === 'string') return err;
    if (err && typeof err.message === 'string' && err.message.trim() !== '') return err.message;
    return defaultMessage;
}


// Route handler for / (relative to /api/traceroute)
router.get('/', (req, res) => {
    const targetIpRaw = req.query.targetIp;
    const targetIp = typeof targetIpRaw === 'string' ? targetIpRaw.trim() : targetIpRaw;
    const requestIp = req.ip || req.socket.remoteAddress;

    logger.info({ requestIp, targetIp }, 'Traceroute stream request received');

    if (!isValidIp(targetIp)) {
        logger.warn({ requestIp, targetIp }, 'Invalid target IP for traceroute');
        return res.status(400).json({ success: false, error: 'Invalid target IP address provided.' });
    }
    if (isPrivateIp(targetIp)) {
        logger.warn({ requestIp, targetIp }, 'Attempt to traceroute private IP blocked');
        return res.status(403).json({ success: false, error: 'Operations on private or local IP addresses are not allowed.' });
    }

    const transaction = Sentry.startTransaction({
        op: "traceroute.stream",
        name: `/api/traceroute?targetIp=${targetIp}`,
    });
    Sentry.configureScope(scope => {
        scope.setSpan(transaction);
        scope.setContext("request", { ip: requestIp, targetIp });
    });

    try {
        logger.info({ requestIp, targetIp }, `Starting traceroute stream...`);
        res.setHeader('Content-Type', 'text/event-stream');
        res.setHeader('Cache-Control', 'no-cache');
        res.setHeader('Connection', 'keep-alive');
        res.setHeader('X-Accel-Buffering', 'no');
        res.flushHeaders();

        const args = ['-n', targetIp];
        const command = 'traceroute';
        const proc = spawn(command, args);
        logger.info({ requestIp, targetIp, command: `${command} ${args.join(' ')}` }, 'Spawned traceroute process');

        let buffer = '';

        const sendEvent = (event, data) => {
            try {
                if (!res.writableEnded) {
                    // Ensure error events always have a string in data.error
                    if (event === 'error' && (!data || typeof data.error !== 'string')) {
                         const safeErrorMessage = getErrorMessage(data?.error, 'Traceroute encountered an unspecified error.');
                         logger.warn({ requestIp, targetIp, originalData: data }, `Corrected invalid error event data. Sending: ${safeErrorMessage}`);
                         data = { error: safeErrorMessage };
                    }
                    res.write(`event: ${event}\ndata: ${JSON.stringify(data)}\n\n`);
                } else {
                     logger.warn({ requestIp, targetIp, event }, "Attempted to write to closed SSE stream.");
                }
            } catch (e) {
                logger.error({ requestIp, targetIp, event, error: e.message }, "Error writing to SSE stream (client likely disconnected)");
                Sentry.captureException(e, { level: 'warning', extra: { requestIp, targetIp, event } });
                if (proc && !proc.killed) proc.kill();
                if (!res.writableEnded) res.end();
                transaction.setStatus('internal_error');
                transaction.finish();
            }
        };

        proc.stdout.on('data', (data) => {
            buffer += data.toString();
            let lines = buffer.split('\n');
            buffer = lines.pop() || '';
            lines.forEach(line => {
                const parsed = parseTracerouteLine(line);
                if (parsed) {
                    logger.debug({ requestIp, targetIp, hop: parsed.hop, ip: parsed.ip }, 'Sending hop data');
                    sendEvent('hop', parsed);
                } else if (line.trim()) {
                     logger.debug({ requestIp, targetIp, message: line.trim() }, 'Sending info data');
                     sendEvent('info', { message: line.trim() });
                }
            });
        });

        proc.stderr.on('data', (data) => {
            const errorMsg = getErrorMessage(data.toString().trim(), 'Traceroute produced unknown stderr output.');
            logger.warn({ requestIp, targetIp, stderr: errorMsg }, 'Traceroute stderr output');
            Sentry.captureMessage('Traceroute stderr output', { level: 'warning', extra: { requestIp, targetIp, stderr: errorMsg } });
            sendEvent('error', { error: errorMsg }); // errorMsg is now guaranteed to be a string
        });

        proc.on('error', (err) => {
            const errorMsg = getErrorMessage(err, 'Failed to start traceroute command due to an unknown error.');
            logger.error({ requestIp, targetIp, error: errorMsg }, `Failed to start traceroute command`);
            Sentry.captureException(err, { extra: { requestIp, targetIp } }); // Send original error to Sentry
            sendEvent('error', { error: `Failed to start traceroute: ${errorMsg}` }); // Send safe message to client
            if (!res.writableEnded) res.end();
            transaction.setStatus('internal_error');
            transaction.finish();
        });

        proc.on('close', (code) => {
            if (buffer) {
                 const parsed = parseTracerouteLine(buffer);
                 if (parsed) sendEvent('hop', parsed);
                 else if (buffer.trim()) sendEvent('info', { message: buffer.trim() });
            }

            if (code !== 0) {
                const errorMsg = `Traceroute command failed with exit code ${code}`;
                logger.error({ requestIp, targetIp, exitCode: code }, errorMsg);
                Sentry.captureMessage('Traceroute command failed', { level: 'error', extra: { requestIp, targetIp, exitCode: code } });
                sendEvent('error', { error: errorMsg }); // Send specific error message
                transaction.setStatus('unknown_error');
            } else {
                logger.info({ requestIp, targetIp }, `Traceroute stream completed successfully.`);
                transaction.setStatus('ok');
            }
             sendEvent('end', { exitCode: code });
             if (!res.writableEnded) res.end();
             transaction.finish();
        });

        req.on('close', () => {
            logger.info({ requestIp, targetIp }, 'Client disconnected from traceroute stream, killing process.');
            if (proc && !proc.killed) proc.kill();
            if (!res.writableEnded) res.end();
            transaction.setStatus('cancelled');
            transaction.finish();
        });

    } catch (error) {
        const errorMsg = getErrorMessage(error, 'Failed to initiate traceroute due to an internal server error.');
        logger.error({ requestIp, targetIp, error: errorMsg, stack: error.stack }, 'Error setting up traceroute stream');
        Sentry.captureException(error, { extra: { requestIp, targetIp } }); // Send original error to Sentry
        transaction.setStatus('internal_error');
        transaction.finish();

        if (!res.headersSent) {
             res.status(500).json({ success: false, error: `Failed to initiate traceroute: ${errorMsg}` });
        } else {
             try {
                 if (!res.writableEnded) {
                    // Use the safe sendEvent function here as well
                    sendEvent('error', { error: `Internal server error during setup: ${errorMsg}` });
                    res.end();
                 }
             } catch (e) { logger.error({ requestIp, targetIp, error: e.message }, "Error writing final setup error to SSE stream"); }
        }
    }
});

module.exports = router;