@aaricchen1991/n2-cli 1.0.0

package/dist/commands/nginx.js

@@ -0,0 +1,72 @@
+/**
+ * Generate nginx config from domains config; optionally install and reload.
+ */
+import { spawn } from "node:child_process";
+import fs from "node:fs";
+import path from "node:path";
+import { parseDeployConfig } from "../lib/domains.js";
+import { error, info, success, warn } from "../lib/logger.js";
+import { generateNginxConf } from "../lib/nginx.js";
+import { resolveConfigPath } from "../lib/paths.js";
+const NGINX_CONF_NAME = "n2.conf";
+export async function runNginx(opts) {
+    const configPath = resolveConfigPath(opts.config);
+    if (!fs.existsSync(configPath)) {
+        error(`配置文件不存在: ${configPath}`);
+        info("请先执行: n2-deploy config init");
+        process.exit(1);
+    }
+    const yaml = fs.readFileSync(configPath, "utf8");
+    const { domainsConfig } = parseDeployConfig(yaml);
+    const nginxConf = generateNginxConf(domainsConfig);
+    const outPath = path.resolve(process.cwd(), opts.output);
+    const outDir = path.dirname(outPath);
+    fs.mkdirSync(outDir, { recursive: true });
+    fs.writeFileSync(outPath, nginxConf);
+    info(`已写入: ${outPath}`);
+    if (opts.install) {
+        const destDir = detectNginxConfDir();
+        const destPath = path.join(destDir, NGINX_CONF_NAME);
+        try {
+            fs.copyFileSync(outPath, destPath);
+            info(`已安装到: ${destPath}`);
+        }
+        catch (e) {
+            error(`安装失败（可尝试 sudo）: ${e}`);
+            process.exit(1);
+        }
+        await nginxTestAndReload();
+    }
+}
+function detectNginxConfDir() {
+    if (fs.existsSync("/etc/nginx/conf.d"))
+        return "/etc/nginx/conf.d";
+    if (fs.existsSync("/etc/nginx/sites-available"))
+        return "/etc/nginx/sites-available";
+    return "/etc/nginx/conf.d";
+}
+function nginxTestAndReload() {
+    return new Promise((resolve, reject) => {
+        const t = spawn("nginx", ["-t"], { stdio: "inherit" });
+        t.on("close", code => {
+            if (code !== 0) {
+                reject(new Error("nginx -t failed"));
+                return;
+            }
+            const r = spawn("systemctl", ["reload", "nginx"], { stdio: "inherit" });
+            r.on("close", c => {
+                if (c === 0) {
+                    success("Nginx 已重载");
+                    resolve();
+                }
+                else {
+                    warn("systemctl reload nginx 失败，请尝试: sudo systemctl reload nginx");
+                    resolve();
+                }
+            });
+            r.on("error", () => resolve());
+        });
+        t.on("error", () => reject(new Error("nginx not found")));
+    });
+}
+//# sourceMappingURL=nginx.js.map

package/dist/commands/nginx.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"nginx.js","sourceRoot":"","sources":["../../src/commands/nginx.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAC3C,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AACtD,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AAC9D,OAAO,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AACpD,OAAO,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AAQpD,MAAM,eAAe,GAAG,SAAS,CAAC;AAElC,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,IAAkB;IAC/C,MAAM,UAAU,GAAG,iBAAiB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAClD,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QAC/B,KAAK,CAAC,YAAY,UAAU,EAAE,CAAC,CAAC;QAChC,IAAI,CAAC,6BAA6B,CAAC,CAAC;QACpC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,MAAM,IAAI,GAAG,EAAE,CAAC,YAAY,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;IACjD,MAAM,EAAE,aAAa,EAAE,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAC;IAClD,MAAM,SAAS,GAAG,iBAAiB,CAAC,aAAa,CAAC,CAAC;IAEnD,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;IACzD,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IACrC,EAAE,CAAC,SAAS,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC1C,EAAE,CAAC,aAAa,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;IACrC,IAAI,CAAC,QAAQ,OAAO,EAAE,CAAC,CAAC;IAExB,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;QACjB,MAAM,OAAO,GAAG,kBAAkB,EAAE,CAAC;QACrC,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,eAAe,CAAC,CAAC;QACrD,IAAI,CAAC;YACH,EAAE,CAAC,YAAY,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;YACnC,IAAI,CAAC,SAAS,QAAQ,EAAE,CAAC,CAAC;QAC5B,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,KAAK,CAAC,mBAAmB,CAAC,EAAE,CAAC,CAAC;YAC9B,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QACD,MAAM,kBAAkB,EAAE,CAAC;IAC7B,CAAC;AACH,CAAC;AAED,SAAS,kBAAkB;IACzB,IAAI,EAAE,CAAC,UAAU,CAAC,mBAAmB,CAAC;QAAE,OAAO,mBAAmB,CAAC;IACnE,IAAI,EAAE,CAAC,UAAU,CAAC,4BAA4B,CAAC;QAC7C,OAAO,4BAA4B,CAAC;IACtC,OAAO,mBAAmB,CAAC;AAC7B,CAAC;AAED,SAAS,kBAAkB;IACzB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,CAAC,GAAG,KAAK,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC;QACvD,CAAC,CAAC,EAAE,CAAC,OAAO,EAAE,IAAI,CAAC,EAAE;YACnB,IAAI,IAAI,KAAK,CAAC,EAAE,CAAC;gBACf,MAAM,CAAC,IAAI,KAAK,CAAC,iBAAiB,CAAC,CAAC,CAAC;gBACrC,OAAO;YACT,CAAC;YACD,MAAM,CAAC,GAAG,KAAK,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE,OAAO,CAAC,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC;YACxE,CAAC,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC,EAAE;gBAChB,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;oBACZ,OAAO,CAAC,WAAW,CAAC,CAAC;oBACrB,OAAO,EAAE,CAAC;gBACZ,CAAC;qBAAM,CAAC;oBACN,IAAI,CACF,4DAA4D,CAC7D,CAAC;oBACF,OAAO,EAAE,CAAC;gBACZ,CAAC;YACH,CAAC,CAAC,CAAC;YACH,CAAC,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;QACjC,CAAC,CAAC,CAAC;QACH,CAAC,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC;IAC5D,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/commands/nginx.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=nginx.test.d.ts.map

package/dist/commands/nginx.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"nginx.test.d.ts","sourceRoot":"","sources":["../../src/commands/nginx.test.ts"],"names":[],"mappings":""}

package/dist/commands/nginx.test.js

@@ -0,0 +1,75 @@
+import { describe, it, expect, beforeEach, afterEach, vi } from "vitest";
+import fs from "node:fs";
+import path from "node:path";
+import os from "node:os";
+import { runNginx } from "./nginx.js";
+describe("nginx command", () => {
+    let tmpDir;
+    let configPath;
+    let exitMock;
+    beforeEach(() => {
+        tmpDir = path.join(os.tmpdir(), `n2-nginx-${Date.now()}`);
+        fs.mkdirSync(tmpDir, { recursive: true });
+        configPath = path.join(tmpDir, "config.yaml");
+        exitMock = vi.spyOn(process, "exit").mockImplementation((code) => {
+            throw new Error(`exit:${code}`);
+        });
+    });
+    afterEach(() => {
+        exitMock.mockRestore();
+        fs.rmSync(tmpDir, { recursive: true, force: true });
+    });
+    it("exits when config file does not exist", async () => {
+        await expect(runNginx({
+            config: path.join(tmpDir, "missing.yaml"),
+            output: path.join(tmpDir, "out", "n2.conf"),
+        })).rejects.toThrow("exit:1");
+        expect(exitMock).toHaveBeenCalledWith(1);
+    });
+    it("writes nginx config to output path", async () => {
+        const yaml = `api:
+  backend_port: 3000
+  domains: []
+
+admin:
+  domains:
+    - admin.example.com
+
+tenant:
+  domains: []
+
+client:
+  domains: []
+`;
+        fs.writeFileSync(configPath, yaml, "utf8");
+        const outPath = path.join(tmpDir, "out", "n2.conf");
+        await runNginx({ config: configPath, output: outPath });
+        expect(exitMock).not.toHaveBeenCalled();
+        expect(fs.existsSync(outPath)).toBe(true);
+        const content = fs.readFileSync(outPath, "utf8");
+        expect(content).toContain("server_name admin.example.com");
+        expect(content).toContain("proxy_pass http://127.0.0.1:3000");
+        expect(content).toContain("listen 443 ssl http2");
+        expect(content).toContain("return 301 https://");
+    });
+    it("creates output directory", async () => {
+        const yaml = `api:
+  backend_port: 3000
+  domains: []
+
+admin:
+  domains: []
+
+tenant:
+  domains: []
+
+client:
+  domains: []
+`;
+        fs.writeFileSync(configPath, yaml, "utf8");
+        const outPath = path.join(tmpDir, "sub", "dir", "n2.conf");
+        await runNginx({ config: configPath, output: outPath });
+        expect(fs.existsSync(outPath)).toBe(true);
+    });
+});
+//# sourceMappingURL=nginx.test.js.map

package/dist/commands/nginx.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"nginx.test.js","sourceRoot":"","sources":["../../src/commands/nginx.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AACzE,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AAEtC,QAAQ,CAAC,eAAe,EAAE,GAAG,EAAE;IAC7B,IAAI,MAAc,CAAC;IACnB,IAAI,UAAkB,CAAC;IACvB,IAAI,QAAqC,CAAC;IAE1C,UAAU,CAAC,GAAG,EAAE;QACd,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,YAAY,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;QAC1D,EAAE,CAAC,SAAS,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1C,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;QAC9C,QAAQ,GAAG,EAAE,CAAC,KAAK,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,kBAAkB,CAAC,CAAC,IAA6B,EAAE,EAAE;YACxF,MAAM,IAAI,KAAK,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC;QAClC,CAAC,CAA6B,CAAC;IACjC,CAAC,CAAC,CAAC;IAEH,SAAS,CAAC,GAAG,EAAE;QACb,QAAQ,CAAC,WAAW,EAAE,CAAC;QACvB,EAAE,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACtD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uCAAuC,EAAE,KAAK,IAAI,EAAE;QACrD,MAAM,MAAM,CACV,QAAQ,CAAC;YACP,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,cAAc,CAAC;YACzC,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,SAAS,CAAC;SAC5C,CAAC,CACH,CAAC,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QAC5B,MAAM,CAAC,QAAQ,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,CAAC;IAC3C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oCAAoC,EAAE,KAAK,IAAI,EAAE;QAClD,MAAM,IAAI,GAAG;;;;;;;;;;;;;CAahB,CAAC;QACE,EAAE,CAAC,aAAa,CAAC,UAAU,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;QAC3C,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,SAAS,CAAC,CAAC;QACpD,MAAM,QAAQ,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC;QACxD,MAAM,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;QACxC,MAAM,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC1C,MAAM,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QACjD,MAAM,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,+BAA+B,CAAC,CAAC;QAC3D,MAAM,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,kCAAkC,CAAC,CAAC;QAC9D,MAAM,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,sBAAsB,CAAC,CAAC;QAClD,MAAM,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,qBAAqB,CAAC,CAAC;IACnD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0BAA0B,EAAE,KAAK,IAAI,EAAE;QACxC,MAAM,IAAI,GAAG;;;;;;;;;;;;CAYhB,CAAC;QACE,EAAE,CAAC,aAAa,CAAC,UAAU,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;QAC3C,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,SAAS,CAAC,CAAC;QAC3D,MAAM,QAAQ,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC;QACxD,MAAM,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC5C,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/commands/ssl-logs.d.ts

@@ -0,0 +1,17 @@
+/**
+ * View SSL log file: tail, lines, follow, optional filter by action/result.
+ */
+export interface SslLogsOptions {
+    /** Log file path (default: /opt/deploy/logs/ssl.log) */
+    logFile?: string;
+    /** Show last N lines (default: 50) */
+    lines?: number;
+    /** Follow (tail -f) */
+    follow?: boolean;
+    /** Filter: create | renew | success | failure | run */
+    action?: string;
+    /** Filter: ok | fail */
+    result?: string;
+}
+export declare function runSslLogs(opts: SslLogsOptions): Promise<void>;
+//# sourceMappingURL=ssl-logs.d.ts.map

package/dist/commands/ssl-logs.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ssl-logs.d.ts","sourceRoot":"","sources":["../../src/commands/ssl-logs.ts"],"names":[],"mappings":"AAAA;;GAEG;AASH,MAAM,WAAW,cAAc;IAC7B,wDAAwD;IACxD,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,sCAAsC;IACtC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,uBAAuB;IACvB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,uDAAuD;IACvD,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,wBAAwB;IACxB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,wBAAsB,UAAU,CAAC,IAAI,EAAE,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC,CAwDpE"}

package/dist/commands/ssl-logs.js

@@ -0,0 +1,55 @@
+/**
+ * View SSL log file: tail, lines, follow, optional filter by action/result.
+ */
+import consola from "consola";
+import fs from "node:fs";
+import path from "node:path";
+import { getLogFilePath } from "../lib/logger.js";
+const DEFAULT_SSL_LOG = "/opt/deploy/logs/ssl.log";
+export async function runSslLogs(opts) {
+    const logPath = opts.logFile ?? getLogFilePath() ?? DEFAULT_SSL_LOG;
+    const resolved = path.resolve(process.cwd(), logPath);
+    if (!fs.existsSync(resolved)) {
+        consola.error("日志文件不存在:", resolved);
+        process.exit(1);
+    }
+    const lines = opts.lines ?? 50;
+    let content;
+    const stat = fs.statSync(resolved);
+    const fd = fs.openSync(resolved, "r");
+    try {
+        const buffer = Buffer.alloc(Math.min(stat.size, 256 * 1024));
+        const read = fs.readSync(fd, buffer, 0, buffer.length, Math.max(0, stat.size - buffer.length));
+        content = buffer.subarray(0, read).toString("utf8");
+    }
+    finally {
+        fs.closeSync(fd);
+    }
+    const allLines = content.split(/\n/).filter(l => l.length > 0);
+    const lastLines = allLines.slice(-lines);
+    const filter = (line) => {
+        if (opts.action || opts.result) {
+            const parts = line.split("\t");
+            if (parts.length >= 5) {
+                const [, , action, , result] = parts;
+                if (opts.action && action !== opts.action)
+                    return false;
+                if (opts.result && result !== opts.result)
+                    return false;
+            }
+        }
+        return true;
+    };
+    const filtered = opts.action || opts.result ? lastLines.filter(filter) : lastLines;
+    for (const line of filtered) {
+        consola.log(line);
+    }
+    if (opts.follow) {
+        const { spawn } = await import("node:child_process");
+        const tail = spawn("tail", ["-n", String(lines), "-f", resolved], {
+            stdio: "inherit",
+        });
+        tail.on("close", code => process.exit(code ?? 0));
+    }
+}
+//# sourceMappingURL=ssl-logs.js.map

package/dist/commands/ssl-logs.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ssl-logs.js","sourceRoot":"","sources":["../../src/commands/ssl-logs.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,OAAO,MAAM,SAAS,CAAC;AAC9B,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAElD,MAAM,eAAe,GAAG,0BAA0B,CAAC;AAenD,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,IAAoB;IACnD,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,cAAc,EAAE,IAAI,eAAe,CAAC;IACpE,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,OAAO,CAAC,CAAC;IAEtD,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC7B,OAAO,CAAC,KAAK,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;QACpC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC;IAC/B,IAAI,OAAe,CAAC;IACpB,MAAM,IAAI,GAAG,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACnC,MAAM,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;IACtC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC;QAC7D,MAAM,IAAI,GAAG,EAAE,CAAC,QAAQ,CACtB,EAAE,EACF,MAAM,EACN,CAAC,EACD,MAAM,CAAC,MAAM,EACb,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,CACvC,CAAC;QACF,OAAO,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IACtD,CAAC;YAAS,CAAC;QACT,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;IACnB,CAAC;IAED,MAAM,QAAQ,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAC/D,MAAM,SAAS,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC;IAEzC,MAAM,MAAM,GAAG,CAAC,IAAY,EAAW,EAAE;QACvC,IAAI,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YAC/B,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAC/B,IAAI,KAAK,CAAC,MAAM,IAAI,CAAC,EAAE,CAAC;gBACtB,MAAM,CAAC,EAAE,AAAD,EAAG,MAAM,EAAE,AAAD,EAAG,MAAM,CAAC,GAAG,KAAK,CAAC;gBACrC,IAAI,IAAI,CAAC,MAAM,IAAI,MAAM,KAAK,IAAI,CAAC,MAAM;oBAAE,OAAO,KAAK,CAAC;gBACxD,IAAI,IAAI,CAAC,MAAM,IAAI,MAAM,KAAK,IAAI,CAAC,MAAM;oBAAE,OAAO,KAAK,CAAC;YAC1D,CAAC;QACH,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC,CAAC;IAEF,MAAM,QAAQ,GACZ,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAEpE,KAAK,MAAM,IAAI,IAAI,QAAQ,EAAE,CAAC;QAC5B,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACpB,CAAC;IAED,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;QAChB,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,MAAM,CAAC,oBAAoB,CAAC,CAAC;QACrD,MAAM,IAAI,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,QAAQ,CAAC,EAAE;YAChE,KAAK,EAAE,SAAS;SACjB,CAAC,CAAC;QACH,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC;IACpD,CAAC;AACH,CAAC"}

package/dist/commands/ssl-logs.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=ssl-logs.test.d.ts.map

package/dist/commands/ssl-logs.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ssl-logs.test.d.ts","sourceRoot":"","sources":["../../src/commands/ssl-logs.test.ts"],"names":[],"mappings":""}

package/dist/commands/ssl-logs.test.js

@@ -0,0 +1,54 @@
+import { describe, it, expect, beforeEach, afterEach, vi } from "vitest";
+import fs from "node:fs";
+import path from "node:path";
+import os from "node:os";
+import { runSslLogs } from "./ssl-logs.js";
+describe("ssl-logs command", () => {
+    let tmpDir;
+    let logPath;
+    let exitMock;
+    beforeEach(() => {
+        tmpDir = path.join(os.tmpdir(), `n2-ssl-logs-${Date.now()}`);
+        fs.mkdirSync(tmpDir, { recursive: true });
+        logPath = path.join(tmpDir, "ssl.log");
+        exitMock = vi.spyOn(process, "exit").mockImplementation((code) => {
+            throw new Error(`exit:${code}`);
+        });
+    });
+    afterEach(() => {
+        exitMock.mockRestore();
+        fs.rmSync(tmpDir, { recursive: true, force: true });
+    });
+    it("exits when log file does not exist", async () => {
+        await expect(runSslLogs({ logFile: path.join(tmpDir, "nonexistent.log") })).rejects.toThrow("exit:1");
+        expect(exitMock).toHaveBeenCalledWith(1);
+    });
+    it("reads and outputs last N lines", async () => {
+        const lines = Array.from({ length: 100 }, (_, i) => `line-${i + 1}`);
+        fs.writeFileSync(logPath, lines.join("\n"), "utf8");
+        const consola = await import("consola");
+        const logSpy = vi.spyOn(consola.default, "log").mockImplementation(() => { });
+        await runSslLogs({ logFile: logPath, lines: 10 });
+        expect(exitMock).not.toHaveBeenCalled();
+        expect(logSpy).toHaveBeenCalled();
+        const lastCalls = logSpy.mock.calls.slice(-10);
+        expect(lastCalls.length).toBeLessThanOrEqual(10);
+        logSpy.mockRestore();
+    });
+    it("filters by action and result when provided", async () => {
+        // SSL log format: time \t ssl \t action \t domain \t result \t message
+        const logContent = [
+            "2025-01-01 00:00:00\tssl\tcreate\tdomain.com\tok\t",
+            "2025-01-01 00:00:01\tssl\trenew\tdomain.com\tfail\t",
+            "2025-01-01 00:00:02\tssl\tsuccess\tdomain.com\tok\t",
+        ].join("\n");
+        fs.writeFileSync(logPath, logContent, "utf8");
+        const consola = await import("consola");
+        const logSpy = vi.spyOn(consola.default, "log").mockImplementation(() => { });
+        await runSslLogs({ logFile: logPath, lines: 50, action: "create", result: "ok" });
+        expect(exitMock).not.toHaveBeenCalled();
+        expect(logSpy).toHaveBeenCalledWith("2025-01-01 00:00:00\tssl\tcreate\tdomain.com\tok\t");
+        logSpy.mockRestore();
+    });
+});
+//# sourceMappingURL=ssl-logs.test.js.map

package/dist/commands/ssl-logs.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ssl-logs.test.js","sourceRoot":"","sources":["../../src/commands/ssl-logs.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AACzE,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAE3C,QAAQ,CAAC,kBAAkB,EAAE,GAAG,EAAE;IAChC,IAAI,MAAc,CAAC;IACnB,IAAI,OAAe,CAAC;IACpB,IAAI,QAAqC,CAAC;IAE1C,UAAU,CAAC,GAAG,EAAE;QACd,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,eAAe,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;QAC7D,EAAE,CAAC,SAAS,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1C,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;QACvC,QAAQ,GAAG,EAAE,CAAC,KAAK,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,kBAAkB,CAAC,CAAC,IAA6B,EAAE,EAAE;YACxF,MAAM,IAAI,KAAK,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC;QAClC,CAAC,CAA6B,CAAC;IACjC,CAAC,CAAC,CAAC;IAEH,SAAS,CAAC,GAAG,EAAE;QACb,QAAQ,CAAC,WAAW,EAAE,CAAC;QACvB,EAAE,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACtD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oCAAoC,EAAE,KAAK,IAAI,EAAE;QAClD,MAAM,MAAM,CAAC,UAAU,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,iBAAiB,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QACtG,MAAM,CAAC,QAAQ,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,CAAC;IAC3C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gCAAgC,EAAE,KAAK,IAAI,EAAE;QAC9C,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACrE,EAAE,CAAC,aAAa,CAAC,OAAO,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,CAAC;QACpD,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,SAAS,CAAC,CAAC;QACxC,MAAM,MAAM,GAAG,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,kBAAkB,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QAC7E,MAAM,UAAU,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC;QAClD,MAAM,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;QACxC,MAAM,CAAC,MAAM,CAAC,CAAC,gBAAgB,EAAE,CAAC;QAClC,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;QAC/C,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,mBAAmB,CAAC,EAAE,CAAC,CAAC;QACjD,MAAM,CAAC,WAAW,EAAE,CAAC;IACvB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4CAA4C,EAAE,KAAK,IAAI,EAAE;QAC1D,uEAAuE;QACvE,MAAM,UAAU,GAAG;YACjB,oDAAoD;YACpD,qDAAqD;YACrD,qDAAqD;SACtD,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACb,EAAE,CAAC,aAAa,CAAC,OAAO,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC;QAC9C,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,SAAS,CAAC,CAAC;QACxC,MAAM,MAAM,GAAG,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,kBAAkB,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QAC7E,MAAM,UAAU,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;QAClF,MAAM,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;QACxC,MAAM,CAAC,MAAM,CAAC,CAAC,oBAAoB,CAAC,oDAAoD,CAAC,CAAC;QAC1F,MAAM,CAAC,WAAW,EAAE,CAAC;IACvB,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/commands/ssl.d.ts

@@ -0,0 +1,16 @@
+/**
+ * SSL certificate setup/renew for all domains from config.
+ * Runs check-and-setup-ssl.sh; all output and structured events go to SSL log file.
+ */
+export interface SslOptions {
+    config: string;
+    /** Ali key (or ALIYUN_ACCESS_KEY_ID / Ali_Key env) */
+    aliKey?: string;
+    /** Ali secret (or ALIYUN_ACCESS_KEY_SECRET / Ali_Secret env) */
+    aliSecret?: string;
+    logFile?: string;
+    /** Path to deploy scripts (default: N2_DEPLOY_SCRIPTS_DIR or package assets/deploy) */
+    scriptsDir?: string;
+}
+export declare function runSsl(opts: SslOptions): Promise<void>;
+//# sourceMappingURL=ssl.d.ts.map

package/dist/commands/ssl.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ssl.d.ts","sourceRoot":"","sources":["../../src/commands/ssl.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAkBH,MAAM,WAAW,UAAU;IACzB,MAAM,EAAE,MAAM,CAAC;IACf,sDAAsD;IACtD,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,gEAAgE;IAChE,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,uFAAuF;IACvF,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,wBAAsB,MAAM,CAAC,IAAI,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CAsH5D"}

package/dist/commands/ssl.js

@@ -0,0 +1,105 @@
+/**
+ * SSL certificate setup/renew for all domains from config.
+ * Runs check-and-setup-ssl.sh; all output and structured events go to SSL log file.
+ */
+import { spawn } from "node:child_process";
+import fs from "node:fs";
+import path from "node:path";
+import { getAllDomains, parseDeployConfig } from "../lib/domains.js";
+import { appendRaw, appendSslLog, error, info, setLogFile, success, } from "../lib/logger.js";
+import { getScriptsDir, resolveConfigPath } from "../lib/paths.js";
+const DEFAULT_SSL_LOG = "/opt/deploy/logs/ssl.log";
+export async function runSsl(opts) {
+    const configPath = resolveConfigPath(opts.config);
+    if (!fs.existsSync(configPath)) {
+        error(`配置文件不存在: ${configPath}`);
+        info("请先执行: n2-deploy config init");
+        process.exit(1);
+    }
+    const yaml = fs.readFileSync(configPath, "utf8");
+    const { domainsConfig, aliyunAccessKeyId: configAliId, aliyunAccessKeySecret: configAliSecret, } = parseDeployConfig(yaml);
+    const aliKey = opts.aliKey ??
+        configAliId ??
+        process.env.ALIYUN_ACCESS_KEY_ID ??
+        process.env.Ali_Key;
+    const aliSecret = opts.aliSecret ??
+        configAliSecret ??
+        process.env.ALIYUN_ACCESS_KEY_SECRET ??
+        process.env.Ali_Secret;
+    if (!aliKey || !aliSecret) {
+        error("缺少阿里云 API 凭证");
+        info("请在配置 (~/.deploy/config.yaml)、--ali-key/--ali-secret 或环境变量 ALIYUN_ACCESS_KEY_ID/ALIYUN_ACCESS_KEY_SECRET 中设置");
+        process.exit(1);
+    }
+    const domains = getAllDomains(domainsConfig);
+    const domainsTxt = domains.join("\n") + "\n";
+    const logPath = opts.logFile ?? DEFAULT_SSL_LOG;
+    setLogFile(logPath);
+    const logDir = path.dirname(logPath);
+    fs.mkdirSync(logDir, { recursive: true });
+    info(`SSL 日志: ${logPath}`);
+    info(`域名: ${domains.join(", ") || "(无)"}`);
+    const scriptsDir = opts.scriptsDir ||
+        process.env.N2_DEPLOY_SCRIPTS_DIR ||
+        getScriptsDir(process.cwd());
+    let scriptPath;
+    let domainsFilePath;
+    if (fs.existsSync("/opt/ssl/check-and-setup-ssl.sh")) {
+        scriptPath = "/opt/ssl/check-and-setup-ssl.sh";
+        domainsFilePath = "/opt/ssl/domains.txt";
+        fs.writeFileSync(domainsFilePath, domainsTxt);
+        info("已更新 /opt/ssl/domains.txt");
+    }
+    else if (scriptsDir &&
+        fs.existsSync(path.join(scriptsDir, "ssl", "check-and-setup-ssl.sh"))) {
+        scriptPath = path.join(scriptsDir, "ssl", "check-and-setup-ssl.sh");
+        const tmpDomains = path.join(logDir, "domains.txt");
+        fs.writeFileSync(tmpDomains, domainsTxt);
+        domainsFilePath = tmpDomains;
+    }
+    else {
+        error("未找到 SSL 脚本");
+        info("请先执行 n2-deploy init 或设置 N2_DEPLOY_SCRIPTS_DIR");
+        process.exit(1);
+    }
+    appendSslLog("run", "", "ok", "start");
+    await new Promise((resolve, reject) => {
+        const child = spawn("bash", [scriptPath, "--ali-key", aliKey, "--ali-secret", aliSecret], {
+            env: {
+                ...process.env,
+                Ali_Key: aliKey,
+                Ali_Secret: aliSecret,
+                DOMAINS_FILE: domainsFilePath,
+            },
+            stdio: ["inherit", "pipe", "pipe"],
+        });
+        const appendOut = (data) => {
+            const s = data.toString();
+            process.stdout.write(s);
+            appendRaw(s.trimEnd());
+        };
+        child.stdout?.on("data", appendOut);
+        child.stderr?.on("data", data => {
+            const s = data.toString();
+            process.stderr.write(s);
+            appendRaw(s.trimEnd());
+        });
+        child.on("close", (code, signal) => {
+            if (code === 0) {
+                appendSslLog("run", "", "ok", "done");
+                success("SSL 证书配置完成");
+                resolve();
+            }
+            else {
+                appendSslLog("run", "", "fail", `exit ${code} ${signal ?? ""}`);
+                error(`SSL script exited with code ${code}`);
+                reject(new Error(`SSL script exited with ${code}`));
+            }
+        });
+        child.on("error", err => {
+            appendSslLog("run", "", "fail", err.message);
+            reject(err);
+        });
+    });
+}
+//# sourceMappingURL=ssl.js.map

package/dist/commands/ssl.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ssl.js","sourceRoot":"","sources":["../../src/commands/ssl.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAC3C,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,aAAa,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AACrE,OAAO,EACL,SAAS,EACT,YAAY,EACZ,KAAK,EACL,IAAI,EACJ,UAAU,EACV,OAAO,GACR,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,aAAa,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AAEnE,MAAM,eAAe,GAAG,0BAA0B,CAAC;AAanD,MAAM,CAAC,KAAK,UAAU,MAAM,CAAC,IAAgB;IAC3C,MAAM,UAAU,GAAG,iBAAiB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAClD,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QAC/B,KAAK,CAAC,YAAY,UAAU,EAAE,CAAC,CAAC;QAChC,IAAI,CAAC,6BAA6B,CAAC,CAAC;QACpC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,MAAM,IAAI,GAAG,EAAE,CAAC,YAAY,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;IACjD,MAAM,EACJ,aAAa,EACb,iBAAiB,EAAE,WAAW,EAC9B,qBAAqB,EAAE,eAAe,GACvC,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAC;IAE5B,MAAM,MAAM,GACV,IAAI,CAAC,MAAM;QACX,WAAW;QACX,OAAO,CAAC,GAAG,CAAC,oBAAoB;QAChC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC;IACtB,MAAM,SAAS,GACb,IAAI,CAAC,SAAS;QACd,eAAe;QACf,OAAO,CAAC,GAAG,CAAC,wBAAwB;QACpC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC;IAEzB,IAAI,CAAC,MAAM,IAAI,CAAC,SAAS,EAAE,CAAC;QAC1B,KAAK,CAAC,cAAc,CAAC,CAAC;QACtB,IAAI,CACF,6GAA6G,CAC9G,CAAC;QACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,MAAM,OAAO,GAAG,aAAa,CAAC,aAAa,CAAC,CAAC;IAC7C,MAAM,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;IAE7C,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,eAAe,CAAC;IAChD,UAAU,CAAC,OAAO,CAAC,CAAC;IACpB,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IACrC,EAAE,CAAC,SAAS,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAE1C,IAAI,CAAC,WAAW,OAAO,EAAE,CAAC,CAAC;IAC3B,IAAI,CAAC,OAAO,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,EAAE,CAAC,CAAC;IAE3C,MAAM,UAAU,GACd,IAAI,CAAC,UAAU;QACf,OAAO,CAAC,GAAG,CAAC,qBAAqB;QACjC,aAAa,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;IAE/B,IAAI,UAAkB,CAAC;IACvB,IAAI,eAAuB,CAAC;IAE5B,IAAI,EAAE,CAAC,UAAU,CAAC,iCAAiC,CAAC,EAAE,CAAC;QACrD,UAAU,GAAG,iCAAiC,CAAC;QAC/C,eAAe,GAAG,sBAAsB,CAAC;QACzC,EAAE,CAAC,aAAa,CAAC,eAAe,EAAE,UAAU,CAAC,CAAC;QAC9C,IAAI,CAAC,0BAA0B,CAAC,CAAC;IACnC,CAAC;SAAM,IACL,UAAU;QACV,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,KAAK,EAAE,wBAAwB,CAAC,CAAC,EACrE,CAAC;QACD,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,KAAK,EAAE,wBAAwB,CAAC,CAAC;QACpE,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;QACpD,EAAE,CAAC,aAAa,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC;QACzC,eAAe,GAAG,UAAU,CAAC;IAC/B,CAAC;SAAM,CAAC;QACN,KAAK,CAAC,YAAY,CAAC,CAAC;QACpB,IAAI,CAAC,+CAA+C,CAAC,CAAC;QACtD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,YAAY,CAAC,KAAK,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;IAEvC,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QAC1C,MAAM,KAAK,GAAG,KAAK,CACjB,MAAM,EACN,CAAC,UAAU,EAAE,WAAW,EAAE,MAAM,EAAE,cAAc,EAAE,SAAS,CAAC,EAC5D;YACE,GAAG,EAAE;gBACH,GAAG,OAAO,CAAC,GAAG;gBACd,OAAO,EAAE,MAAM;gBACf,UAAU,EAAE,SAAS;gBACrB,YAAY,EAAE,eAAe;aAC9B;YACD,KAAK,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,CAAC;SACnC,CACF,CAAC;QAEF,MAAM,SAAS,GAAG,CAAC,IAAqB,EAAE,EAAE;YAC1C,MAAM,CAAC,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC;YAC1B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YACxB,SAAS,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;QACzB,CAAC,CAAC;QAEF,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;QACpC,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE;YAC9B,MAAM,CAAC,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC;YAC1B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YACxB,SAAS,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;QACzB,CAAC,CAAC,CAAC;QAEH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE;YACjC,IAAI,IAAI,KAAK,CAAC,EAAE,CAAC;gBACf,YAAY,CAAC,KAAK,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;gBACtC,OAAO,CAAC,YAAY,CAAC,CAAC;gBACtB,OAAO,EAAE,CAAC;YACZ,CAAC;iBAAM,CAAC;gBACN,YAAY,CAAC,KAAK,EAAE,EAAE,EAAE,MAAM,EAAE,QAAQ,IAAI,IAAI,MAAM,IAAI,EAAE,EAAE,CAAC,CAAC;gBAChE,KAAK,CAAC,+BAA+B,IAAI,EAAE,CAAC,CAAC;gBAC7C,MAAM,CAAC,IAAI,KAAK,CAAC,0BAA0B,IAAI,EAAE,CAAC,CAAC,CAAC;YACtD,CAAC;QACH,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,CAAC,EAAE;YACtB,YAAY,CAAC,KAAK,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC;YAC7C,MAAM,CAAC,GAAG,CAAC,CAAC;QACd,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/commands/ssl.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=ssl.test.d.ts.map

package/dist/commands/ssl.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ssl.test.d.ts","sourceRoot":"","sources":["../../src/commands/ssl.test.ts"],"names":[],"mappings":""}

package/dist/commands/ssl.test.js

@@ -0,0 +1,95 @@
+import { describe, it, expect, beforeEach, afterEach, vi } from "vitest";
+import fs from "node:fs";
+import path from "node:path";
+import os from "node:os";
+import { runSsl } from "./ssl.js";
+const mockSpawn = vi.fn();
+vi.mock("node:child_process", () => ({
+    spawn: (...args) => mockSpawn(...args),
+}));
+describe("ssl command", () => {
+    let tmpDir;
+    let configPath;
+    let scriptsDir;
+    let exitMock;
+    beforeEach(() => {
+        tmpDir = path.join(os.tmpdir(), `n2-ssl-${Date.now()}`);
+        fs.mkdirSync(tmpDir, { recursive: true });
+        configPath = path.join(tmpDir, "config.yaml");
+        scriptsDir = path.join(tmpDir, "scripts");
+        const sslDir = path.join(scriptsDir, "ssl");
+        fs.mkdirSync(sslDir, { recursive: true });
+        fs.writeFileSync(path.join(sslDir, "check-and-setup-ssl.sh"), "#!/bin/bash\nexit 0", "utf8");
+        exitMock = vi.spyOn(process, "exit").mockImplementation((code) => {
+            throw new Error(`exit:${code}`);
+        });
+        mockSpawn.mockReturnValue({
+            on: (ev, cb) => {
+                if (ev === "close")
+                    setImmediate(() => cb(0));
+                if (ev === "error")
+                    return;
+                return {};
+            },
+            stdout: { on: () => { } },
+            stderr: { on: () => { } },
+            stdio: "inherit",
+        });
+    });
+    afterEach(() => {
+        exitMock.mockRestore();
+        mockSpawn.mockClear();
+        vi.unstubAllEnvs();
+        fs.rmSync(tmpDir, { recursive: true, force: true });
+    });
+    it("exits when config file does not exist", async () => {
+        await expect(runSsl({ config: path.join(tmpDir, "missing.yaml") })).rejects.toThrow("exit:1");
+        expect(exitMock).toHaveBeenCalledWith(1);
+    });
+    it("exits when aliyun credentials are missing", async () => {
+        const yaml = `api:
+  backend_port: 3000
+  domains: []
+
+admin:
+  domains: []
+
+tenant:
+  domains: []
+
+client:
+  domains: []
+`;
+        fs.writeFileSync(configPath, yaml, "utf8");
+        await expect(runSsl({ config: configPath, scriptsDir })).rejects.toThrow("exit:1");
+        expect(exitMock).toHaveBeenCalledWith(1);
+    });
+    it("runs ssl script when credentials provided", async () => {
+        const yaml = `api:
+  backend_port: 3000
+  domains: []
+
+admin:
+  domains: []
+
+tenant:
+  domains: []
+
+client:
+  domains: []
+`;
+        fs.writeFileSync(configPath, yaml, "utf8");
+        const logDir = path.join(tmpDir, "logs");
+        fs.mkdirSync(logDir, { recursive: true });
+        await runSsl({
+            config: configPath,
+            scriptsDir,
+            aliKey: "key",
+            aliSecret: "secret",
+            logFile: path.join(logDir, "ssl.log"),
+        });
+        expect(exitMock).not.toHaveBeenCalled();
+        expect(mockSpawn).toHaveBeenCalledWith("bash", expect.arrayContaining([expect.stringContaining("check-and-setup-ssl.sh"), "--ali-key", "key", "--ali-secret", "secret"]), expect.any(Object));
+    });
+});
+//# sourceMappingURL=ssl.test.js.map

package/dist/commands/ssl.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ssl.test.js","sourceRoot":"","sources":["../../src/commands/ssl.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AACzE,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,EAAE,MAAM,EAAE,MAAM,UAAU,CAAC;AAElC,MAAM,SAAS,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC;AAC1B,EAAE,CAAC,IAAI,CAAC,oBAAoB,EAAE,GAAG,EAAE,CAAC,CAAC;IACnC,KAAK,EAAE,CAAC,GAAG,IAAe,EAAE,EAAE,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC;CAClD,CAAC,CAAC,CAAC;AAEJ,QAAQ,CAAC,aAAa,EAAE,GAAG,EAAE;IAC3B,IAAI,MAAc,CAAC;IACnB,IAAI,UAAkB,CAAC;IACvB,IAAI,UAAkB,CAAC;IACvB,IAAI,QAAqC,CAAC;IAE1C,UAAU,CAAC,GAAG,EAAE;QACd,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,UAAU,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;QACxD,EAAE,CAAC,SAAS,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1C,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;QAC9C,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;QAC1C,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;QAC5C,EAAE,CAAC,SAAS,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1C,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,wBAAwB,CAAC,EAAE,qBAAqB,EAAE,MAAM,CAAC,CAAC;QAC7F,QAAQ,GAAG,EAAE,CAAC,KAAK,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,kBAAkB,CAAC,CAAC,IAA6B,EAAE,EAAE;YACxF,MAAM,IAAI,KAAK,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC;QAClC,CAAC,CAA6B,CAAC;QAC/B,SAAS,CAAC,eAAe,CAAC;YACxB,EAAE,EAAE,CAAC,EAAU,EAAE,EAA2B,EAAE,EAAE;gBAC9C,IAAI,EAAE,KAAK,OAAO;oBAAE,YAAY,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;gBAC9C,IAAI,EAAE,KAAK,OAAO;oBAAE,OAAO;gBAC3B,OAAO,EAAE,CAAC;YACZ,CAAC;YACD,MAAM,EAAE,EAAE,EAAE,EAAE,GAAG,EAAE,GAAE,CAAC,EAAE;YACxB,MAAM,EAAE,EAAE,EAAE,EAAE,GAAG,EAAE,GAAE,CAAC,EAAE;YACxB,KAAK,EAAE,SAAS;SACjB,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,SAAS,CAAC,GAAG,EAAE;QACb,QAAQ,CAAC,WAAW,EAAE,CAAC;QACvB,SAAS,CAAC,SAAS,EAAE,CAAC;QACtB,EAAE,CAAC,aAAa,EAAE,CAAC;QACnB,EAAE,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACtD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uCAAuC,EAAE,KAAK,IAAI,EAAE;QACrD,MAAM,MAAM,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,cAAc,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QAC9F,MAAM,CAAC,QAAQ,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,CAAC;IAC3C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2CAA2C,EAAE,KAAK,IAAI,EAAE;QACzD,MAAM,IAAI,GAAG;;;;;;;;;;;;CAYhB,CAAC;QACE,EAAE,CAAC,aAAa,CAAC,UAAU,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;QAC3C,MAAM,MAAM,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QACnF,MAAM,CAAC,QAAQ,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,CAAC;IAC3C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2CAA2C,EAAE,KAAK,IAAI,EAAE;QACzD,MAAM,IAAI,GAAG;;;;;;;;;;;;CAYhB,CAAC;QACE,EAAE,CAAC,aAAa,CAAC,UAAU,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;QAC3C,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QACzC,EAAE,CAAC,SAAS,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1C,MAAM,MAAM,CAAC;YACX,MAAM,EAAE,UAAU;YAClB,UAAU;YACV,MAAM,EAAE,KAAK;YACb,SAAS,EAAE,QAAQ;YACnB,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,SAAS,CAAC;SACtC,CAAC,CAAC;QACH,MAAM,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;QACxC,MAAM,CAAC,SAAS,CAAC,CAAC,oBAAoB,CACpC,MAAM,EACN,MAAM,CAAC,eAAe,CAAC,CAAC,MAAM,CAAC,gBAAgB,CAAC,wBAAwB,CAAC,EAAE,WAAW,EAAE,KAAK,EAAE,cAAc,EAAE,QAAQ,CAAC,CAAC,EACzH,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CACnB,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/lib/config-store.d.ts

@@ -0,0 +1,14 @@
+/**
+ * Config file CRUD: load, get, set, delete, save for ~/.deploy/config.yaml.
+ * Keys: aliyun_access_key_id, aliyun_access_key_secret, api.backend_port,
+ *       api.domains, admin.domains, tenant.domains, client.domains
+ */
+import type { DeployConfigResult } from "./domains.js";
+export type ConfigKey = "aliyun_access_key_id" | "aliyun_access_key_secret" | "api.backend_port" | "api.domains" | "admin.domains" | "tenant.domains" | "client.domains";
+export declare function isValidConfigKey(key: string): key is ConfigKey;
+export declare function loadConfig(configPath: string): DeployConfigResult;
+export declare function saveConfig(configPath: string, data: DeployConfigResult): void;
+export declare function getConfigValue(data: DeployConfigResult, key: ConfigKey): string | number | string[] | undefined;
+export declare function setConfigValue(data: DeployConfigResult, key: ConfigKey, value: string | number | string[]): void;
+export declare function deleteConfigValue(data: DeployConfigResult, key: ConfigKey): void;
+//# sourceMappingURL=config-store.d.ts.map

package/dist/lib/config-store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config-store.d.ts","sourceRoot":"","sources":["../../src/lib/config-store.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAIH,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAC;AAGvD,MAAM,MAAM,SAAS,GACjB,sBAAsB,GACtB,0BAA0B,GAC1B,kBAAkB,GAClB,aAAa,GACb,eAAe,GACf,gBAAgB,GAChB,gBAAgB,CAAC;AAUrB,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,MAAM,GAAG,GAAG,IAAI,SAAS,CAM9D;AAED,wBAAgB,UAAU,CAAC,UAAU,EAAE,MAAM,GAAG,kBAAkB,CAGjE;AAED,wBAAgB,UAAU,CAAC,UAAU,EAAE,MAAM,EAAE,IAAI,EAAE,kBAAkB,GAAG,IAAI,CAM7E;AAED,wBAAgB,cAAc,CAC5B,IAAI,EAAE,kBAAkB,EACxB,GAAG,EAAE,SAAS,GACb,MAAM,GAAG,MAAM,GAAG,MAAM,EAAE,GAAG,SAAS,CAmBxC;AAED,wBAAgB,cAAc,CAC5B,IAAI,EAAE,kBAAkB,EACxB,GAAG,EAAE,SAAS,EACd,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,MAAM,EAAE,GAChC,IAAI,CAiCN;AAED,wBAAgB,iBAAiB,CAC/B,IAAI,EAAE,kBAAkB,EACxB,GAAG,EAAE,SAAS,GACb,IAAI,CAwBN"}