@ai-coders/installer 0.3.0

package/dist/products/severino/keys.js

@@ -0,0 +1,16 @@
+/**
+ * Deploy keypair generation. ssh2 emits OpenSSH-format ed25519 keys on every
+ * platform, which is what the installer appends to ~/.ssh/authorized_keys.
+ */
+import ssh2 from "ssh2";
+export function generateDeployKey() {
+    return new Promise((resolve, reject) => {
+        ssh2.utils.generateKeyPair("ed25519", { comment: "severino-deploy" }, (error, keys) => {
+            if (error)
+                reject(error);
+            else
+                resolve({ publicKey: keys.public, privateKey: keys.private });
+        });
+    });
+}
+//# sourceMappingURL=keys.js.map

package/dist/products/severino/keys.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"keys.js","sourceRoot":"","sources":["../../../packages/severino/src/keys.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,IAAI,MAAM,MAAM,CAAC;AAOxB,MAAM,UAAU,iBAAiB;IAC/B,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,IAAI,CAAC,KAAK,CAAC,eAAe,CACxB,SAAS,EACT,EAAE,OAAO,EAAE,iBAAiB,EAAE,EAC9B,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;YACd,IAAI,KAAK;gBAAE,MAAM,CAAC,KAAK,CAAC,CAAC;;gBACpB,OAAO,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,MAAM,EAAE,UAAU,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;QACrE,CAAC,CACF,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/products/severino/main.d.ts

@@ -0,0 +1,3 @@
+export declare function runSeverinoInstaller(options: {
+    readonly projectRoot: string;
+}): Promise<void>;

package/dist/products/severino/main.js

@@ -0,0 +1,78 @@
+/** Local web-UI installer composition root for the Severino product. */
+import { execFile } from "node:child_process";
+import { spawn } from "node:child_process";
+import path from "node:path";
+import { promisify } from "node:util";
+import { parseRepositoryFromRemote } from "./github.js";
+import { defaultLanguage, installerMessages } from "./i18n.js";
+import { startInstallerServer } from "./server.js";
+import { createInstallerService, loadInitialState } from "./service.js";
+import { stateFileName } from "./state.js";
+const execFileAsync = promisify(execFile);
+const messages = installerMessages[defaultLanguage];
+async function detectRepository(repoRoot) {
+    try {
+        const { stdout } = await execFileAsync("git", ["remote", "get-url", "origin"], { cwd: repoRoot });
+        return parseRepositoryFromRemote(stdout.trim());
+    }
+    catch {
+        return null;
+    }
+}
+function openBrowser(url) {
+    const command = process.platform === "darwin"
+        ? { file: "open", args: [url] }
+        : process.platform === "win32"
+            ? { file: "cmd", args: ["/c", "start", "", url] }
+            : { file: "xdg-open", args: [url] };
+    try {
+        const child = spawn(command.file, command.args, {
+            detached: true,
+            stdio: "ignore",
+        });
+        child.on("error", () => { });
+        child.unref();
+    }
+    catch {
+        // The printed URL is the contract; opening the browser is best effort.
+    }
+}
+export async function runSeverinoInstaller(options) {
+    const repoRoot = path.resolve(options.projectRoot);
+    const statePath = path.join(repoRoot, stateFileName);
+    let server;
+    try {
+        const [initialState, detectedRepository] = await Promise.all([
+            loadInitialState(statePath),
+            detectRepository(repoRoot),
+        ]);
+        const service = createInstallerService({
+            statePath,
+            repoRoot,
+            initialState,
+            detectedRepository,
+        });
+        server = await startInstallerServer(service);
+    }
+    catch {
+        throw new Error(messages.terminalStartFailed);
+    }
+    process.stdout.write(`${messages.terminalRunningAt}\n│  ${server.url}\n│\n`);
+    process.stdout.write(`${messages.terminalPressCtrlC}\n`);
+    openBrowser(server.url);
+    let shutdownPromise = null;
+    const shutdown = () => {
+        if (shutdownPromise !== null)
+            return;
+        shutdownPromise = server
+            .close()
+            .then(() => process.exit(0))
+            .catch(() => {
+            process.stderr.write(`${messages.terminalStopFailed}\n`);
+            process.exit(1);
+        });
+    };
+    process.on("SIGINT", shutdown);
+    process.on("SIGTERM", shutdown);
+}
+//# sourceMappingURL=main.js.map

package/dist/products/severino/main.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"main.js","sourceRoot":"","sources":["../../../packages/severino/src/main.ts"],"names":[],"mappings":"AAAA,wEAAwE;AACxE,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAC3C,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAEtC,OAAO,EAAE,yBAAyB,EAAsB,MAAM,aAAa,CAAC;AAC5E,OAAO,EAAE,eAAe,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAC;AAC/D,OAAO,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAC;AACnD,OAAO,EAAE,sBAAsB,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AACxE,OAAO,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAE3C,MAAM,aAAa,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;AAC1C,MAAM,QAAQ,GAAG,iBAAiB,CAAC,eAAe,CAAC,CAAC;AAEpD,KAAK,UAAU,gBAAgB,CAC7B,QAAgB;IAEhB,IAAI,CAAC;QACH,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,aAAa,CACpC,KAAK,EACL,CAAC,QAAQ,EAAE,SAAS,EAAE,QAAQ,CAAC,EAC/B,EAAE,GAAG,EAAE,QAAQ,EAAE,CAClB,CAAC;QACF,OAAO,yBAAyB,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;IAClD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAAC,GAAW;IAC9B,MAAM,OAAO,GACX,OAAO,CAAC,QAAQ,KAAK,QAAQ;QAC3B,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,GAAG,CAAC,EAAE;QAC/B,CAAC,CAAC,OAAO,CAAC,QAAQ,KAAK,OAAO;YAC5B,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE;YACjD,CAAC,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC;IAC1C,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE;YAC9C,QAAQ,EAAE,IAAI;YACd,KAAK,EAAE,QAAQ;SAChB,CAAC,CAAC;QACH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QAC5B,KAAK,CAAC,KAAK,EAAE,CAAC;IAChB,CAAC;IAAC,MAAM,CAAC;QACP,uEAAuE;IACzE,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,OAE1C;IACC,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;IACnD,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC;IACrD,IAAI,MAAwD,CAAC;IAC7D,IAAI,CAAC;QACH,MAAM,CAAC,YAAY,EAAE,kBAAkB,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YAC3D,gBAAgB,CAAC,SAAS,CAAC;YAC3B,gBAAgB,CAAC,QAAQ,CAAC;SAC3B,CAAC,CAAC;QACH,MAAM,OAAO,GAAG,sBAAsB,CAAC;YACrC,SAAS;YACT,QAAQ;YACR,YAAY;YACZ,kBAAkB;SACnB,CAAC,CAAC;QACH,MAAM,GAAG,MAAM,oBAAoB,CAAC,OAAO,CAAC,CAAC;IAC/C,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,QAAQ,CAAC,mBAAmB,CAAC,CAAC;IAChD,CAAC;IACD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,QAAQ,CAAC,iBAAiB,QAAQ,MAAM,CAAC,GAAG,OAAO,CAAC,CAAC;IAC7E,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,QAAQ,CAAC,kBAAkB,IAAI,CAAC,CAAC;IACzD,WAAW,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IACxB,IAAI,eAAe,GAAyB,IAAI,CAAC;IACjD,MAAM,QAAQ,GAAG,GAAS,EAAE;QAC1B,IAAI,eAAe,KAAK,IAAI;YAAE,OAAO;QACrC,eAAe,GAAG,MAAM;aACrB,KAAK,EAAE;aACP,IAAI,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;aAC3B,KAAK,CAAC,GAAG,EAAE;YACV,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,QAAQ,CAAC,kBAAkB,IAAI,CAAC,CAAC;YACzD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC,CAAC,CAAC;IACP,CAAC,CAAC;IACF,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IAC/B,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;AAClC,CAAC"}

package/dist/products/severino/recovery.d.ts

@@ -0,0 +1,50 @@
+/**
+ * Reconnects a new computer to an existing VPS installation. Recovery proves
+ * server ownership over SSH, reads only the public hostname, installs a fresh
+ * deploy key for this computer, and persists a new private local state file.
+ */
+import type { DeployKeyPair } from "./keys.js";
+import type { InstallerLanguage } from "./i18n.js";
+import type { InstallerState } from "./state.js";
+import type { SshLike } from "./apply.js";
+type RecoverySshAuth = {
+    readonly kind: "password";
+    readonly password: string;
+} | {
+    readonly kind: "key";
+    readonly privateKey: string;
+};
+export interface RecoveryInput {
+    readonly language: InstallerLanguage;
+    readonly repository?: {
+        readonly owner: string;
+        readonly repo: string;
+    } | undefined;
+    readonly vps: {
+        readonly host: string;
+        readonly port: number;
+        readonly username: string;
+    };
+    readonly vpsAuth: RecoverySshAuth;
+}
+export interface RecoveryDependencies {
+    readonly generateKey: () => Promise<DeployKeyPair>;
+    readonly connectSsh: (credentials: {
+        readonly host: string;
+        readonly port: number;
+        readonly username: string;
+        readonly auth: RecoverySshAuth;
+    }) => Promise<SshLike>;
+    readonly saveState: (state: InstallerState) => Promise<void>;
+    readonly now: () => Date;
+}
+export type RecoveryOutcome = {
+    readonly ok: true;
+    readonly domain: string;
+} | {
+    readonly ok: false;
+    readonly error: string;
+};
+export declare const readRecoveryMetadataCommand: string;
+export declare function recoverExistingInstallation(input: RecoveryInput, deps: RecoveryDependencies): Promise<RecoveryOutcome>;
+export {};

package/dist/products/severino/recovery.js

@@ -0,0 +1,96 @@
+import { normalizeDomain } from "./envfile.js";
+import { buildAuthorizedKeysCommand } from "./ssh.js";
+export const readRecoveryMetadataCommand = [
+    "test -f /opt/severino/.env || exit 44",
+    "test -f /opt/severino/compose.yaml || exit 44",
+    "domain=$(awk -F= '$1 == \"SEVERINO_PUBLIC_HOST\" { sub(/^[^=]*=/, \"\"); print; exit }' /opt/severino/.env)",
+    "test -n \"$domain\" || exit 45",
+    "printf '%s\\n' \"$domain\"",
+].join(" && ");
+export async function recoverExistingInstallation(input, deps) {
+    let keys;
+    try {
+        keys = await deps.generateKey();
+    }
+    catch {
+        return {
+            ok: false,
+            error: "A new local deploy key could not be created.",
+        };
+    }
+    let ssh;
+    try {
+        ssh = await deps.connectSsh({ ...input.vps, auth: input.vpsAuth });
+    }
+    catch (error) {
+        return {
+            ok: false,
+            error: error instanceof Error ? error.message : String(error),
+        };
+    }
+    try {
+        const metadata = await ssh.exec(readRecoveryMetadataCommand);
+        if (metadata.code !== 0 || metadata.stdout.trim() === "") {
+            return {
+                ok: false,
+                error: "No existing Severino installation was found on this server.",
+            };
+        }
+        let domain;
+        try {
+            domain = normalizeDomain(metadata.stdout.trim());
+        }
+        catch {
+            return {
+                ok: false,
+                error: "The existing installation has an invalid public hostname.",
+            };
+        }
+        const authorized = await ssh.exec(buildAuthorizedKeysCommand(keys.publicKey));
+        if (authorized.code !== 0) {
+            return {
+                ok: false,
+                error: "The new local deploy key could not be installed on the server.",
+            };
+        }
+        try {
+            const keySession = await deps.connectSsh({
+                ...input.vps,
+                auth: { kind: "key", privateKey: keys.privateKey },
+            });
+            keySession.close();
+        }
+        catch {
+            return {
+                ok: false,
+                error: "The new local deploy key could not connect to the server.",
+            };
+        }
+        const timestamp = deps.now().toISOString();
+        try {
+            await deps.saveState({
+                version: 1,
+                language: input.language,
+                ...(input.repository === undefined
+                    ? {}
+                    : { repository: input.repository }),
+                vps: input.vps,
+                deployKey: keys,
+                domain,
+                installedAt: timestamp,
+                updatedAt: timestamp,
+            });
+        }
+        catch {
+            return {
+                ok: false,
+                error: "The recovered settings could not be saved on this computer.",
+            };
+        }
+        return { ok: true, domain };
+    }
+    finally {
+        ssh.close();
+    }
+}
+//# sourceMappingURL=recovery.js.map

package/dist/products/severino/recovery.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"recovery.js","sourceRoot":"","sources":["../../../packages/severino/src/recovery.ts"],"names":[],"mappings":"AASA,OAAO,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAC/C,OAAO,EAAE,0BAA0B,EAAE,MAAM,UAAU,CAAC;AAmCtD,MAAM,CAAC,MAAM,2BAA2B,GAAG;IACzC,uCAAuC;IACvC,+CAA+C;IAC/C,6GAA6G;IAC7G,gCAAgC;IAChC,4BAA4B;CAC7B,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;AAEf,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAC/C,KAAoB,EACpB,IAA0B;IAE1B,IAAI,IAAmB,CAAC;IACxB,IAAI,CAAC;QACH,IAAI,GAAG,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC;IAClC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO;YACL,EAAE,EAAE,KAAK;YACT,KAAK,EAAE,8CAA8C;SACtD,CAAC;IACJ,CAAC;IAED,IAAI,GAAY,CAAC;IACjB,IAAI,CAAC;QACH,GAAG,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,EAAE,GAAG,KAAK,CAAC,GAAG,EAAE,IAAI,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;IACrE,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO;YACL,EAAE,EAAE,KAAK;YACT,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;SAC9D,CAAC;IACJ,CAAC;IAED,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC;QAC7D,IAAI,QAAQ,CAAC,IAAI,KAAK,CAAC,IAAI,QAAQ,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;YACzD,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,KAAK,EAAE,6DAA6D;aACrE,CAAC;QACJ,CAAC;QAED,IAAI,MAAc,CAAC;QACnB,IAAI,CAAC;YACH,MAAM,GAAG,eAAe,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;QACnD,CAAC;QAAC,MAAM,CAAC;YACP,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,KAAK,EAAE,2DAA2D;aACnE,CAAC;QACJ,CAAC;QAED,MAAM,UAAU,GAAG,MAAM,GAAG,CAAC,IAAI,CAC/B,0BAA0B,CAAC,IAAI,CAAC,SAAS,CAAC,CAC3C,CAAC;QACF,IAAI,UAAU,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;YAC1B,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,KAAK,EAAE,gEAAgE;aACxE,CAAC;QACJ,CAAC;QAED,IAAI,CAAC;YACH,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC;gBACvC,GAAG,KAAK,CAAC,GAAG;gBACZ,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE;aACnD,CAAC,CAAC;YACH,UAAU,CAAC,KAAK,EAAE,CAAC;QACrB,CAAC;QAAC,MAAM,CAAC;YACP,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,KAAK,EAAE,2DAA2D;aACnE,CAAC;QACJ,CAAC;QAED,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC;QAC3C,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,SAAS,CAAC;gBACnB,OAAO,EAAE,CAAC;gBACV,QAAQ,EAAE,KAAK,CAAC,QAAQ;gBACxB,GAAG,CAAC,KAAK,CAAC,UAAU,KAAK,SAAS;oBAChC,CAAC,CAAC,EAAE;oBACJ,CAAC,CAAC,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,CAAC;gBACrC,GAAG,EAAE,KAAK,CAAC,GAAG;gBACd,SAAS,EAAE,IAAI;gBACf,MAAM;gBACN,WAAW,EAAE,SAAS;gBACtB,SAAS,EAAE,SAAS;aACrB,CAAC,CAAC;QACL,CAAC;QAAC,MAAM,CAAC;YACP,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,KAAK,EAAE,6DAA6D;aACrE,CAAC;QACJ,CAAC;QAED,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IAC9B,CAAC;YAAS,CAAC;QACT,GAAG,CAAC,KAAK,EAAE,CAAC;IACd,CAAC;AACH,CAAC"}

package/dist/products/severino/sealed-box.d.ts

@@ -0,0 +1 @@
+export declare function sealForGitHubSecret(publicKeyBase64: string, value: string): Promise<string>;

package/dist/products/severino/sealed-box.js

@@ -0,0 +1,11 @@
+/**
+ * GitHub Actions secrets require libsodium sealed-box encryption with the
+ * repository public key; node:crypto has no crypto_box_seal equivalent.
+ */
+import sodium from "libsodium-wrappers";
+export async function sealForGitHubSecret(publicKeyBase64, value) {
+    await sodium.ready;
+    const sealed = sodium.crypto_box_seal(sodium.from_string(value), sodium.from_base64(publicKeyBase64, sodium.base64_variants.ORIGINAL));
+    return sodium.to_base64(sealed, sodium.base64_variants.ORIGINAL);
+}
+//# sourceMappingURL=sealed-box.js.map

package/dist/products/severino/sealed-box.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sealed-box.js","sourceRoot":"","sources":["../../../packages/severino/src/sealed-box.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,MAAM,MAAM,oBAAoB,CAAC;AAExC,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,eAAuB,EACvB,KAAa;IAEb,MAAM,MAAM,CAAC,KAAK,CAAC;IACnB,MAAM,MAAM,GAAG,MAAM,CAAC,eAAe,CACnC,MAAM,CAAC,WAAW,CAAC,KAAK,CAAC,EACzB,MAAM,CAAC,WAAW,CAAC,eAAe,EAAE,MAAM,CAAC,eAAe,CAAC,QAAQ,CAAC,CACrE,CAAC;IACF,OAAO,MAAM,CAAC,SAAS,CAAC,MAAM,EAAE,MAAM,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAC;AACnE,CAAC"}

package/dist/products/severino/server.d.ts

@@ -0,0 +1,123 @@
+import type { InstallerLanguage } from "./i18n.js";
+import type { InstallStepReport } from "./apply.js";
+import type { DnsCheckResult, VerificationResult } from "./verify.js";
+import type { HostingerVirtualMachine } from "./hostinger.js";
+import type { WorkflowRun } from "./github.js";
+export interface InstallerContext {
+    readonly mode: "wizard" | "dashboard";
+    readonly language: InstallerLanguage;
+    readonly repository: {
+        readonly owner: string;
+        readonly repo: string;
+    } | null;
+    readonly domain: string | null;
+    readonly vpsHost: string | null;
+    readonly githubConnected: boolean;
+}
+export interface InstallProgress {
+    readonly running: boolean;
+    readonly finished: boolean;
+    readonly ok: boolean | null;
+    readonly steps: readonly InstallStepReport[];
+}
+interface HostingerOperationFailure {
+    readonly ok: false;
+    readonly errorCode: string;
+    readonly correlationId?: string;
+    readonly retryAfterMs?: number;
+}
+type HostingerVirtualMachinesResult = {
+    readonly ok: true;
+    readonly virtualMachines: readonly HostingerVirtualMachine[];
+} | HostingerOperationFailure;
+type HostingerPasswordPreparationResult = {
+    readonly ok: true;
+    readonly confirmationToken: string;
+    readonly target: {
+        readonly virtualMachineId: number;
+        readonly hostname: string;
+        readonly ipv4Id: number;
+        readonly ipv4: string;
+    };
+} | HostingerOperationFailure;
+type HostingerPasswordResetResult = {
+    readonly ok: true;
+    readonly actionId: number;
+} | HostingerOperationFailure;
+export interface InstallerService {
+    context(): InstallerContext;
+    connectHostinger(input: {
+        token: string;
+    }): Promise<HostingerVirtualMachinesResult>;
+    disconnectHostinger(): Promise<{
+        readonly ok: true;
+    } | HostingerOperationFailure>;
+    refreshHostinger(): Promise<HostingerVirtualMachinesResult>;
+    prepareHostingerRootPasswordReset(input: {
+        virtualMachineId: number;
+    }): Promise<HostingerPasswordPreparationResult>;
+    resetHostingerRootPassword(input: {
+        confirmationToken: string;
+        confirmationText: string;
+        password: string;
+    }): Promise<HostingerPasswordResetResult>;
+    validateGitHub(input: {
+        token: string;
+        owner: string;
+        repo: string;
+    }): Promise<unknown>;
+    connectGitHub(input: {
+        token: string;
+        owner?: string;
+        repo?: string;
+    }): Promise<unknown>;
+    deploy(input: {
+        imageTag?: string;
+    }): Promise<{
+        ok: boolean;
+    }>;
+    listRuns(): Promise<WorkflowRun[]>;
+    testSsh(input: {
+        host: string;
+        port: number;
+        username: string;
+        password: string;
+    }): Promise<{
+        ok: boolean;
+        message?: string;
+        proof?: string;
+    }>;
+    recoverExisting(input: Record<string, unknown>): Promise<{
+        ok: boolean;
+        domain?: string;
+        error?: string;
+    }>;
+    checkDns(input: {
+        domain: string;
+        host: string;
+    }): Promise<DnsCheckResult>;
+    startInstall(input: Record<string, unknown>): {
+        started: boolean;
+        error?: string;
+    };
+    deployLocal(): {
+        started: boolean;
+    };
+    progress(): InstallProgress;
+    verify(): Promise<VerificationResult>;
+    reset(): Promise<{
+        ok: boolean;
+        errorCode?: string;
+    }>;
+    shutdown?(): void | Promise<void>;
+}
+export interface InstallerServer {
+    readonly url: string;
+    close(): Promise<void>;
+}
+export interface InstallerServerOptions {
+    /** Directory holding the built UI (index.html + assets/). Test override. */
+    readonly uiDir?: string;
+}
+export declare function startInstallerServer(service: InstallerService, options?: InstallerServerOptions): Promise<InstallerServer>;
+export {};