@ai-coders/installer 0.3.0

package/dist/products/second-brain/server.js

@@ -0,0 +1,280 @@
+/**
+ * Local-only HTTP server for the installer UI. Binds 127.0.0.1, hides every
+ * route behind a random URL token, validates Host and Origin on each request,
+ * and never emits CORS headers, so browser pages from other origins cannot
+ * reach the API. The UI itself is a prebuilt React app served as static
+ * files, which is what lets the Content Security Policy stay at
+ * `script-src 'self'` with no inline scripts.
+ */
+import { randomBytes } from "node:crypto";
+import { readFile } from "node:fs/promises";
+import http from "node:http";
+import path from "node:path";
+import { fileURLToPath } from "node:url";
+const maxBodyBytes = 64 * 1024;
+function defaultUiDir() {
+    // dist/products/second-brain/main.js sits next to dist/products/second-brain/ui/.
+    return fileURLToPath(new URL("./ui/", import.meta.url));
+}
+function securityHeaders() {
+    return {
+        "cache-control": "no-store",
+        "referrer-policy": "no-referrer",
+        "x-content-type-options": "nosniff",
+        "x-frame-options": "DENY",
+        "content-security-policy": "default-src 'none'; script-src 'self'; style-src 'self' 'unsafe-inline'; connect-src 'self'; img-src 'self' data:; font-src 'self'; frame-ancestors 'none'; base-uri 'none'; form-action 'none'",
+    };
+}
+const assetContentTypes = {
+    ".js": "text/javascript; charset=utf-8",
+    ".css": "text/css; charset=utf-8",
+    ".svg": "image/svg+xml",
+    ".png": "image/png",
+    ".woff2": "font/woff2",
+    ".map": "application/json; charset=utf-8",
+};
+// Vite emits a flat assets/ directory with hashed names; anything outside
+// that shape is refused before touching the filesystem.
+const safeAssetName = /^[A-Za-z0-9][A-Za-z0-9._-]{0,128}$/;
+function sendJson(response, status, body) {
+    const payload = JSON.stringify(body);
+    response.writeHead(status, {
+        ...securityHeaders(),
+        "content-type": "application/json; charset=utf-8",
+        "content-length": Buffer.byteLength(payload),
+    });
+    response.end(payload);
+}
+function readBody(request) {
+    return new Promise((resolve) => {
+        let size = 0;
+        const chunks = [];
+        request.on("data", (chunk) => {
+            size += chunk.length;
+            if (size > maxBodyBytes) {
+                // Drain the rest instead of destroying the socket so the 413
+                // response still reaches the client.
+                request.removeAllListeners("data");
+                request.removeAllListeners("end");
+                request.resume();
+                resolve(null);
+                return;
+            }
+            chunks.push(chunk);
+        });
+        request.on("end", () => resolve(Buffer.concat(chunks).toString("utf8")));
+        request.on("error", () => resolve(null));
+    });
+}
+export function startInstallerServer(service, options = {}) {
+    const pathToken = randomBytes(16).toString("base64url");
+    const uiDir = options.uiDir ?? defaultUiDir();
+    const server = http.createServer((request, response) => {
+        void handle(request, response);
+    });
+    let expectedHost = "";
+    let expectedOrigin = "";
+    let closePromise = null;
+    const closeServer = () => {
+        if (closePromise !== null)
+            return closePromise;
+        closePromise = (async () => {
+            try {
+                await service.shutdown?.();
+            }
+            finally {
+                await new Promise((resolveClose) => {
+                    server.close(() => resolveClose());
+                    // Ctrl+C means stop now. Active browser requests must not keep the
+                    // local installer process alive after its in-memory secrets clear.
+                    server.closeAllConnections();
+                });
+            }
+        })();
+        return closePromise;
+    };
+    async function serveFile(response, filePath, contentType) {
+        let contents;
+        try {
+            contents = await readFile(filePath);
+        }
+        catch {
+            response.writeHead(404, securityHeaders());
+            response.end();
+            return;
+        }
+        response.writeHead(200, {
+            ...securityHeaders(),
+            "content-type": contentType,
+            "content-length": contents.length,
+        });
+        response.end(contents);
+    }
+    async function handle(request, response) {
+        try {
+            if (request.headers.host !== expectedHost) {
+                sendJson(response, 403, { error: "forbidden" });
+                return;
+            }
+            const method = request.method ?? "GET";
+            if (method !== "GET") {
+                const origin = request.headers.origin;
+                if (origin !== undefined && origin !== expectedOrigin) {
+                    sendJson(response, 403, { error: "forbidden" });
+                    return;
+                }
+            }
+            const url = new URL(request.url ?? "/", `http://${expectedHost}`);
+            const prefix = `/${pathToken}`;
+            if (url.pathname !== prefix && !url.pathname.startsWith(`${prefix}/`)) {
+                response.writeHead(404, securityHeaders());
+                response.end();
+                return;
+            }
+            const route = url.pathname.slice(prefix.length) || "/";
+            if (method === "GET") {
+                // The app is built with relative asset URLs, so it must live under
+                // the trailing-slash form of the token path.
+                if (route === "/" && !url.pathname.endsWith("/")) {
+                    response.writeHead(302, {
+                        ...securityHeaders(),
+                        location: `${prefix}/`,
+                    });
+                    response.end();
+                    return;
+                }
+                if (route === "/") {
+                    await serveFile(response, path.join(uiDir, "index.html"), "text/html; charset=utf-8");
+                    return;
+                }
+                if (route.startsWith("/assets/")) {
+                    const name = route.slice("/assets/".length);
+                    const extension = path.extname(name);
+                    const contentType = assetContentTypes[extension];
+                    if (!safeAssetName.test(name) || contentType === undefined) {
+                        response.writeHead(404, securityHeaders());
+                        response.end();
+                        return;
+                    }
+                    await serveFile(response, path.join(uiDir, "assets", name), contentType);
+                    return;
+                }
+                if (route === "/api/context") {
+                    sendJson(response, 200, service.context());
+                    return;
+                }
+                if (route === "/api/install/progress") {
+                    sendJson(response, 200, service.progress());
+                    return;
+                }
+                if (route === "/api/runs") {
+                    sendJson(response, 200, { runs: await service.listRuns() });
+                    return;
+                }
+            }
+            if (method === "POST") {
+                const raw = await readBody(request);
+                if (raw === null) {
+                    sendJson(response, 413, { error: "too-large" });
+                    return;
+                }
+                const contentType = request.headers["content-type"] ?? "";
+                if (!contentType.includes("application/json")) {
+                    sendJson(response, 415, { error: "json-only" });
+                    return;
+                }
+                let body;
+                try {
+                    body = raw === "" ? {} : JSON.parse(raw);
+                }
+                catch {
+                    sendJson(response, 400, { error: "invalid-json" });
+                    return;
+                }
+                switch (route) {
+                    case "/api/hostinger/connect":
+                        sendJson(response, 200, await service.connectHostinger(body));
+                        return;
+                    case "/api/hostinger/disconnect":
+                        sendJson(response, 200, await service.disconnectHostinger());
+                        return;
+                    case "/api/hostinger/refresh":
+                        sendJson(response, 200, await service.refreshHostinger());
+                        return;
+                    case "/api/hostinger/root-password/prepare":
+                        sendJson(response, 200, await service.prepareHostingerRootPasswordReset(body));
+                        return;
+                    case "/api/hostinger/root-password":
+                        sendJson(response, 200, await service.resetHostingerRootPassword(body));
+                        return;
+                    case "/api/github/validate":
+                        sendJson(response, 200, await service.validateGitHub(body));
+                        return;
+                    case "/api/ssh/test":
+                        sendJson(response, 200, await service.testSsh(body));
+                        return;
+                    case "/api/recover":
+                        sendJson(response, 200, await service.recoverExisting(body));
+                        return;
+                    case "/api/dns/check":
+                        sendJson(response, 200, await service.checkDns(body));
+                        return;
+                    case "/api/install/start": {
+                        const result = service.startInstall(body);
+                        sendJson(response, result.started ? 200 : result.error === undefined ? 409 : 400, result);
+                        return;
+                    }
+                    case "/api/deploy-local": {
+                        const result = service.deployLocal();
+                        sendJson(response, result.started ? 200 : 409, result);
+                        return;
+                    }
+                    case "/api/github/connect":
+                        sendJson(response, 200, await service.connectGitHub(body));
+                        return;
+                    case "/api/deploy":
+                        sendJson(response, 200, await service.deploy(body));
+                        return;
+                    case "/api/bootstrap":
+                        sendJson(response, 200, await service.bootstrapOwner(body));
+                        return;
+                    case "/api/bearer":
+                        sendJson(response, 200, await service.provisionBearer(body));
+                        return;
+                    case "/api/verify":
+                        sendJson(response, 200, await service.verify());
+                        return;
+                    case "/api/reset":
+                        sendJson(response, 200, await service.reset());
+                        return;
+                    default:
+                        break;
+                }
+            }
+            response.writeHead(404, securityHeaders());
+            response.end();
+        }
+        catch {
+            sendJson(response, 500, {
+                error: "internal",
+            });
+        }
+    }
+    return new Promise((resolve, reject) => {
+        server.on("error", reject);
+        server.listen(0, "127.0.0.1", () => {
+            const address = server.address();
+            if (address === null || typeof address === "string") {
+                reject(new Error("The installer server did not report a port."));
+                return;
+            }
+            expectedHost = `127.0.0.1:${address.port}`;
+            expectedOrigin = `http://${expectedHost}`;
+            resolve({
+                url: `http://${expectedHost}/${pathToken}/`,
+                close: closeServer,
+            });
+        });
+    });
+}
+//# sourceMappingURL=server.js.map

package/dist/products/second-brain/server.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"server.js","sourceRoot":"","sources":["../../../packages/second-brain/src/server.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAQzC,MAAM,YAAY,GAAG,EAAE,GAAG,IAAI,CAAC;AA0H/B,SAAS,YAAY;IACnB,kFAAkF;IAClF,OAAO,aAAa,CAAC,IAAI,GAAG,CAAC,OAAO,EAAE,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;AAC1D,CAAC;AAED,SAAS,eAAe;IACtB,OAAO;QACL,eAAe,EAAE,UAAU;QAC3B,iBAAiB,EAAE,aAAa;QAChC,wBAAwB,EAAE,SAAS;QACnC,iBAAiB,EAAE,MAAM;QACzB,yBAAyB,EACvB,iMAAiM;KACpM,CAAC;AACJ,CAAC;AAED,MAAM,iBAAiB,GAA2B;IAChD,KAAK,EAAE,gCAAgC;IACvC,MAAM,EAAE,yBAAyB;IACjC,MAAM,EAAE,eAAe;IACvB,MAAM,EAAE,WAAW;IACnB,QAAQ,EAAE,YAAY;IACtB,MAAM,EAAE,iCAAiC;CAC1C,CAAC;AAEF,0EAA0E;AAC1E,wDAAwD;AACxD,MAAM,aAAa,GAAG,oCAAoC,CAAC;AAE3D,SAAS,QAAQ,CACf,QAA6B,EAC7B,MAAc,EACd,IAAa;IAEb,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;IACrC,QAAQ,CAAC,SAAS,CAAC,MAAM,EAAE;QACzB,GAAG,eAAe,EAAE;QACpB,cAAc,EAAE,iCAAiC;QACjD,gBAAgB,EAAE,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC;KAC7C,CAAC,CAAC;IACH,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;AACxB,CAAC;AAED,SAAS,QAAQ,CAAC,OAA6B;IAC7C,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,IAAI,IAAI,GAAG,CAAC,CAAC;QACb,MAAM,MAAM,GAAa,EAAE,CAAC;QAC5B,OAAO,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;YACnC,IAAI,IAAI,KAAK,CAAC,MAAM,CAAC;YACrB,IAAI,IAAI,GAAG,YAAY,EAAE,CAAC;gBACxB,6DAA6D;gBAC7D,qCAAqC;gBACrC,OAAO,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAC;gBACnC,OAAO,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAC;gBAClC,OAAO,CAAC,MAAM,EAAE,CAAC;gBACjB,OAAO,CAAC,IAAI,CAAC,CAAC;gBACd,OAAO;YACT,CAAC;YACD,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACrB,CAAC,CAAC,CAAC;QACH,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QACzE,OAAO,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;IAC3C,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,oBAAoB,CAClC,OAAyB,EACzB,OAAO,GAA2B,EAAE;IAEpC,MAAM,SAAS,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IACxD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,YAAY,EAAE,CAAC;IAE9C,MAAM,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC,CAAC,OAAO,EAAE,QAAQ,EAAE,EAAE;QACrD,KAAK,MAAM,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IACjC,CAAC,CAAC,CAAC;IAEH,IAAI,YAAY,GAAG,EAAE,CAAC;IACtB,IAAI,cAAc,GAAG,EAAE,CAAC;IACxB,IAAI,YAAY,GAAyB,IAAI,CAAC;IAE9C,MAAM,WAAW,GAAG,GAAkB,EAAE;QACtC,IAAI,YAAY,KAAK,IAAI;YAAE,OAAO,YAAY,CAAC;QAC/C,YAAY,GAAG,CAAC,KAAK,IAAI,EAAE;YACzB,IAAI,CAAC;gBACH,MAAM,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC;YAC7B,CAAC;oBAAS,CAAC;gBACT,MAAM,IAAI,OAAO,CAAO,CAAC,YAAY,EAAE,EAAE;oBACvC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,YAAY,EAAE,CAAC,CAAC;oBACnC,mEAAmE;oBACnE,mEAAmE;oBACnE,MAAM,CAAC,mBAAmB,EAAE,CAAC;gBAC/B,CAAC,CAAC,CAAC;YACL,CAAC;QACH,CAAC,CAAC,EAAE,CAAC;QACL,OAAO,YAAY,CAAC;IACtB,CAAC,CAAC;IAEF,KAAK,UAAU,SAAS,CACtB,QAA6B,EAC7B,QAAgB,EAChB,WAAmB;QAEnB,IAAI,QAAgB,CAAC;QACrB,IAAI,CAAC;YACH,QAAQ,GAAG,MAAM,QAAQ,CAAC,QAAQ,CAAC,CAAC;QACtC,CAAC;QAAC,MAAM,CAAC;YACP,QAAQ,CAAC,SAAS,CAAC,GAAG,EAAE,eAAe,EAAE,CAAC,CAAC;YAC3C,QAAQ,CAAC,GAAG,EAAE,CAAC;YACf,OAAO;QACT,CAAC;QACD,QAAQ,CAAC,SAAS,CAAC,GAAG,EAAE;YACtB,GAAG,eAAe,EAAE;YACpB,cAAc,EAAE,WAAW;YAC3B,gBAAgB,EAAE,QAAQ,CAAC,MAAM;SAClC,CAAC,CAAC;QACH,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IACzB,CAAC;IAED,KAAK,UAAU,MAAM,CACnB,OAA6B,EAC7B,QAA6B;QAE7B,IAAI,CAAC;YACH,IAAI,OAAO,CAAC,OAAO,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;gBAC1C,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC;gBAChD,OAAO;YACT,CAAC;YACD,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,KAAK,CAAC;YACvC,IAAI,MAAM,KAAK,KAAK,EAAE,CAAC;gBACrB,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC;gBACtC,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,KAAK,cAAc,EAAE,CAAC;oBACtD,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC;oBAChD,OAAO;gBACT,CAAC;YACH,CAAC;YACD,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,IAAI,GAAG,EAAE,UAAU,YAAY,EAAE,CAAC,CAAC;YAClE,MAAM,MAAM,GAAG,IAAI,SAAS,EAAE,CAAC;YAC/B,IAAI,GAAG,CAAC,QAAQ,KAAK,MAAM,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC,GAAG,MAAM,GAAG,CAAC,EAAE,CAAC;gBACtE,QAAQ,CAAC,SAAS,CAAC,GAAG,EAAE,eAAe,EAAE,CAAC,CAAC;gBAC3C,QAAQ,CAAC,GAAG,EAAE,CAAC;gBACf,OAAO;YACT,CAAC;YACD,MAAM,KAAK,GAAG,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,GAAG,CAAC;YAEvD,IAAI,MAAM,KAAK,KAAK,EAAE,CAAC;gBACrB,mEAAmE;gBACnE,6CAA6C;gBAC7C,IAAI,KAAK,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;oBACjD,QAAQ,CAAC,SAAS,CAAC,GAAG,EAAE;wBACtB,GAAG,eAAe,EAAE;wBACpB,QAAQ,EAAE,GAAG,MAAM,GAAG;qBACvB,CAAC,CAAC;oBACH,QAAQ,CAAC,GAAG,EAAE,CAAC;oBACf,OAAO;gBACT,CAAC;gBACD,IAAI,KAAK,KAAK,GAAG,EAAE,CAAC;oBAClB,MAAM,SAAS,CACb,QAAQ,EACR,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,YAAY,CAAC,EAC9B,0BAA0B,CAC3B,CAAC;oBACF,OAAO;gBACT,CAAC;gBACD,IAAI,KAAK,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;oBACjC,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;oBAC5C,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;oBACrC,MAAM,WAAW,GAAG,iBAAiB,CAAC,SAAS,CAAC,CAAC;oBACjD,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;wBAC3D,QAAQ,CAAC,SAAS,CAAC,GAAG,EAAE,eAAe,EAAE,CAAC,CAAC;wBAC3C,QAAQ,CAAC,GAAG,EAAE,CAAC;wBACf,OAAO;oBACT,CAAC;oBACD,MAAM,SAAS,CACb,QAAQ,EACR,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,QAAQ,EAAE,IAAI,CAAC,EAChC,WAAW,CACZ,CAAC;oBACF,OAAO;gBACT,CAAC;gBACD,IAAI,KAAK,KAAK,cAAc,EAAE,CAAC;oBAC7B,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC;oBAC3C,OAAO;gBACT,CAAC;gBACD,IAAI,KAAK,KAAK,uBAAuB,EAAE,CAAC;oBACtC,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC;oBAC5C,OAAO;gBACT,CAAC;gBACD,IAAI,KAAK,KAAK,WAAW,EAAE,CAAC;oBAC1B,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,MAAM,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;oBAC5D,OAAO;gBACT,CAAC;YACH,CAAC;YAED,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;gBACtB,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,CAAC;gBACpC,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;oBACjB,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC;oBAChD,OAAO;gBACT,CAAC;gBACD,MAAM,WAAW,GAAG,OAAO,CAAC,OAAO,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC;gBAC1D,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,kBAAkB,CAAC,EAAE,CAAC;oBAC9C,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC;oBAChD,OAAO;gBACT,CAAC;gBACD,IAAI,IAA6B,CAAC;gBAClC,IAAI,CAAC;oBACH,IAAI,GAAG,GAAG,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAA6B,CAAC;gBACxE,CAAC;gBAAC,MAAM,CAAC;oBACP,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,CAAC;oBACnD,OAAO;gBACT,CAAC;gBAED,QAAQ,KAAK,EAAE,CAAC;oBACd,KAAK,wBAAwB;wBAC3B,QAAQ,CACN,QAAQ,EACR,GAAG,EACH,MAAM,OAAO,CAAC,gBAAgB,CAC5B,IAEI,CACL,CACF,CAAC;wBACF,OAAO;oBACT,KAAK,2BAA2B;wBAC9B,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE,MAAM,OAAO,CAAC,mBAAmB,EAAE,CAAC,CAAC;wBAC7D,OAAO;oBACT,KAAK,wBAAwB;wBAC3B,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE,MAAM,OAAO,CAAC,gBAAgB,EAAE,CAAC,CAAC;wBAC1D,OAAO;oBACT,KAAK,sCAAsC;wBACzC,QAAQ,CACN,QAAQ,EACR,GAAG,EACH,MAAM,OAAO,CAAC,iCAAiC,CAC7C,IAEI,CACL,CACF,CAAC;wBACF,OAAO;oBACT,KAAK,8BAA8B;wBACjC,QAAQ,CACN,QAAQ,EACR,GAAG,EACH,MAAM,OAAO,CAAC,0BAA0B,CACtC,IAEI,CACL,CACF,CAAC;wBACF,OAAO;oBACT,KAAK,sBAAsB;wBACzB,QAAQ,CACN,QAAQ,EACR,GAAG,EACH,MAAM,OAAO,CAAC,cAAc,CAC1B,IAEI,CACL,CACF,CAAC;wBACF,OAAO;oBACT,KAAK,eAAe;wBAClB,QAAQ,CACN,QAAQ,EACR,GAAG,EACH,MAAM,OAAO,CAAC,OAAO,CACnB,IAA6D,CAC9D,CACF,CAAC;wBACF,OAAO;oBACT,KAAK,cAAc;wBACjB,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE,MAAM,OAAO,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC;wBAC7D,OAAO;oBACT,KAAK,gBAAgB;wBACnB,QAAQ,CACN,QAAQ,EACR,GAAG,EACH,MAAM,OAAO,CAAC,QAAQ,CACpB,IAA8D,CAC/D,CACF,CAAC;wBACF,OAAO;oBACT,KAAK,oBAAoB,EAAE,CAAC;wBAC1B,MAAM,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;wBAC1C,QAAQ,CACN,QAAQ,EACR,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAC7D,MAAM,CACP,CAAC;wBACF,OAAO;oBACT,CAAC;oBACD,KAAK,mBAAmB,EAAE,CAAC;wBACzB,MAAM,MAAM,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC;wBACrC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;wBACvD,OAAO;oBACT,CAAC;oBACD,KAAK,qBAAqB;wBACxB,QAAQ,CACN,QAAQ,EACR,GAAG,EACH,MAAM,OAAO,CAAC,aAAa,CACzB,IAEI,CACL,CACF,CAAC;wBACF,OAAO;oBACT,KAAK,aAAa;wBAChB,QAAQ,CACN,QAAQ,EACR,GAAG,EACH,MAAM,OAAO,CAAC,MAAM,CAClB,IAA4D,CAC7D,CACF,CAAC;wBACF,OAAO;oBACT,KAAK,gBAAgB;wBACnB,QAAQ,CACN,QAAQ,EACR,GAAG,EACH,MAAM,OAAO,CAAC,cAAc,CAC1B,IAEI,CACL,CACF,CAAC;wBACF,OAAO;oBACT,KAAK,aAAa;wBAChB,QAAQ,CACN,QAAQ,EACR,GAAG,EACH,MAAM,OAAO,CAAC,eAAe,CAC3B,IAEI,CACL,CACF,CAAC;wBACF,OAAO;oBACT,KAAK,aAAa;wBAChB,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE,MAAM,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;wBAChD,OAAO;oBACT,KAAK,YAAY;wBACf,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE,MAAM,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC;wBAC/C,OAAO;oBACT;wBACE,MAAM;gBACV,CAAC;YACH,CAAC;YACD,QAAQ,CAAC,SAAS,CAAC,GAAG,EAAE,eAAe,EAAE,CAAC,CAAC;YAC3C,QAAQ,CAAC,GAAG,EAAE,CAAC;QACjB,CAAC;QAAC,MAAM,CAAC;YACP,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE;gBACtB,KAAK,EAAE,UAAU;aAClB,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC3B,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,WAAW,EAAE,GAAG,EAAE;YACjC,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,EAAE,CAAC;YACjC,IAAI,OAAO,KAAK,IAAI,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;gBACpD,MAAM,CAAC,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC,CAAC;gBACjE,OAAO;YACT,CAAC;YACD,YAAY,GAAG,aAAa,OAAO,CAAC,IAAI,EAAE,CAAC;YAC3C,cAAc,GAAG,UAAU,YAAY,EAAE,CAAC;YAC1C,OAAO,CAAC;gBACN,GAAG,EAAE,UAAU,YAAY,IAAI,SAAS,GAAG;gBAC3C,KAAK,EAAE,WAAW;aACnB,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/products/second-brain/service.d.ts

@@ -0,0 +1,26 @@
+import type { InstallerService } from "./server.js";
+import type { SshLike } from "./apply.js";
+import { type RepositoryRef } from "./github.js";
+import { type HostingerAction, type HostingerVirtualMachine } from "./hostinger.js";
+import { SshSession } from "./ssh.js";
+import { type InstallerState } from "./state.js";
+interface HostingerClientLike {
+    close?(): void;
+    listVirtualMachines(): Promise<readonly HostingerVirtualMachine[]>;
+    setRootPassword(virtualMachineId: number, password: string): Promise<HostingerAction>;
+}
+interface InstallerServiceDependencies {
+    readonly connectSsh?: (credentials: Parameters<typeof SshSession.connect>[0]) => Promise<SshLike>;
+    readonly createHostingerClient?: (token: string) => HostingerClientLike;
+    readonly now?: () => Date;
+    readonly randomToken?: () => string;
+}
+export declare function createInstallerService(options: {
+    statePath: string;
+    repoRoot: string;
+    initialState: InstallerState | null;
+    detectedRepository: RepositoryRef | null;
+    dependencies?: InstallerServiceDependencies;
+}): InstallerService;
+export declare function loadInitialState(statePath: string): Promise<InstallerState | null>;
+export {};