@calltelemetry/cli 0.1.0

package/dist/lib/network.d.ts

@@ -0,0 +1,43 @@
+export interface NetworkInterfaceInfo {
+    name: string;
+    family: 'IPv4' | 'IPv6';
+    address: string;
+    netmask: string;
+    mac: string;
+    internal: boolean;
+}
+export declare function getNetworkInterfaceList(): NetworkInterfaceInfo[];
+export declare function getSystemHostname(): string;
+export declare function getPlatformInfo(): {
+    platform: string;
+    arch: string;
+    nodeVersion: string;
+};
+export interface DnsResult {
+    host: string;
+    ipv4: string[];
+    ipv6: string[];
+    durationMs: number;
+    error?: string;
+}
+export declare function resolveDns(host: string): Promise<DnsResult>;
+export interface TcpCheckResult {
+    host: string;
+    port: number;
+    open: boolean;
+    durationMs: number;
+    error?: string;
+}
+export declare function checkTcpPort(host: string, port: number, timeoutMs?: number): Promise<TcpCheckResult>;
+export interface HttpsCheckResult {
+    url: string;
+    status?: number;
+    durationMs: number;
+    tlsVersion?: string;
+    certExpiry?: string;
+    error?: string;
+}
+export declare function checkHttps(url: string, timeoutMs?: number): Promise<HttpsCheckResult>;
+export declare function getPingArgs(target: string, count?: number, timeoutSec?: number): string[];
+export declare function getDefaultGateway(): Promise<string | null>;
+//# sourceMappingURL=network.d.ts.map

package/dist/lib/network.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"network.d.ts","sourceRoot":"","sources":["../../src/lib/network.ts"],"names":[],"mappings":"AAMA,MAAM,WAAW,oBAAoB;IACnC,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,GAAG,MAAM,CAAC;IACxB,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,GAAG,EAAE,MAAM,CAAC;IACZ,QAAQ,EAAE,OAAO,CAAC;CACnB;AAED,wBAAgB,uBAAuB,IAAI,oBAAoB,EAAE,CAmBhE;AAED,wBAAgB,iBAAiB,IAAI,MAAM,CAE1C;AAED,wBAAgB,eAAe,IAAI;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,MAAM,CAAA;CAAE,CAMzF;AAED,MAAM,WAAW,SAAS;IACxB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,wBAAsB,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC,CA8BjE;AAED,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,OAAO,CAAC;IACd,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,SAAO,GAAG,OAAO,CAAC,cAAc,CAAC,CA+BlG;AAED,MAAM,WAAW,gBAAgB;IAC/B,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,wBAAgB,UAAU,CAAC,GAAG,EAAE,MAAM,EAAE,SAAS,SAAQ,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAkDpF;AAED,wBAAgB,WAAW,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,SAAI,EAAE,UAAU,SAAI,GAAG,MAAM,EAAE,CAO/E;AAED,wBAAsB,iBAAiB,IAAI,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAqBhE"}

package/dist/lib/network.js

@@ -0,0 +1,172 @@
+import { networkInterfaces, hostname, platform, arch } from 'node:os';
+import { createConnection } from 'node:net';
+import { request as httpsRequest } from 'node:https';
+import * as dns from 'node:dns/promises';
+import { execa } from 'execa';
+export function getNetworkInterfaceList() {
+    const ifaces = networkInterfaces();
+    const result = [];
+    for (const [name, addrs] of Object.entries(ifaces)) {
+        if (!addrs)
+            continue;
+        for (const addr of addrs) {
+            result.push({
+                name,
+                family: addr.family,
+                address: addr.address,
+                netmask: addr.netmask,
+                mac: addr.mac,
+                internal: addr.internal,
+            });
+        }
+    }
+    return result;
+}
+export function getSystemHostname() {
+    return hostname();
+}
+export function getPlatformInfo() {
+    return {
+        platform: `${platform()} (${arch()})`,
+        arch: arch(),
+        nodeVersion: process.version,
+    };
+}
+export async function resolveDns(host) {
+    const start = performance.now();
+    let ipv4 = [];
+    let ipv6 = [];
+    let error;
+    try {
+        const [v4Result, v6Result] = await Promise.allSettled([
+            dns.resolve4(host),
+            dns.resolve6(host),
+        ]);
+        if (v4Result.status === 'fulfilled')
+            ipv4 = v4Result.value;
+        if (v6Result.status === 'fulfilled')
+            ipv6 = v6Result.value;
+        if (ipv4.length === 0 && ipv6.length === 0) {
+            const v4Err = v4Result.status === 'rejected' ? v4Result.reason.message : '';
+            error = v4Err || 'No addresses found';
+        }
+    }
+    catch (e) {
+        error = e.message;
+    }
+    return {
+        host,
+        ipv4,
+        ipv6,
+        durationMs: Math.round(performance.now() - start),
+        error,
+    };
+}
+export function checkTcpPort(host, port, timeoutMs = 5000) {
+    return new Promise((resolve) => {
+        const start = performance.now();
+        let socket = null;
+        let settled = false;
+        const finish = (open, error) => {
+            if (settled)
+                return;
+            settled = true;
+            if (socket) {
+                socket.removeAllListeners();
+                socket.destroy();
+            }
+            resolve({
+                host,
+                port,
+                open,
+                durationMs: Math.round(performance.now() - start),
+                error,
+            });
+        };
+        socket = createConnection({ host, port, timeout: timeoutMs });
+        socket.on('connect', () => finish(true));
+        socket.on('timeout', () => finish(false, 'timeout'));
+        socket.on('error', (err) => {
+            const code = err.code;
+            finish(false, err.message || code || 'connection failed');
+        });
+    });
+}
+export function checkHttps(url, timeoutMs = 10000) {
+    return new Promise((resolve) => {
+        const start = performance.now();
+        let settled = false;
+        const finish = (result) => {
+            if (settled)
+                return;
+            settled = true;
+            resolve({
+                url,
+                durationMs: Math.round(performance.now() - start),
+                ...result,
+            });
+        };
+        try {
+            const req = httpsRequest(url, { method: 'HEAD', timeout: timeoutMs }, (res) => {
+                const socket = res.socket;
+                let tlsVersion;
+                let certExpiry;
+                if (socket && typeof socket.getProtocol === 'function') {
+                    tlsVersion = socket.getProtocol() ?? undefined;
+                }
+                if (socket && typeof socket.getPeerCertificate === 'function') {
+                    const cert = socket.getPeerCertificate();
+                    if (cert?.valid_to) {
+                        certExpiry = cert.valid_to;
+                    }
+                }
+                res.resume();
+                finish({ status: res.statusCode, tlsVersion, certExpiry });
+            });
+            req.on('timeout', () => {
+                req.destroy();
+                finish({ error: 'timeout' });
+            });
+            req.on('error', (err) => {
+                finish({ error: err.message });
+            });
+            req.end();
+        }
+        catch (e) {
+            finish({ error: e.message });
+        }
+    });
+}
+export function getPingArgs(target, count = 3, timeoutSec = 2) {
+    if (platform() === 'darwin') {
+        // macOS: -W takes milliseconds
+        return ['-c', String(count), '-W', String(timeoutSec * 1000), target];
+    }
+    // Linux: -W takes seconds
+    return ['-c', String(count), '-W', String(timeoutSec), target];
+}
+export async function getDefaultGateway() {
+    try {
+        if (platform() === 'darwin') {
+            const { stdout } = await execa('netstat', ['-rn']);
+            const defaultLine = stdout.split('\n').find(l => l.startsWith('default'));
+            if (defaultLine) {
+                const parts = defaultLine.split(/\s+/);
+                return parts[1] ?? null;
+            }
+        }
+        else {
+            const { stdout } = await execa('ip', ['route']);
+            const defaultLine = stdout.split('\n').find(l => l.startsWith('default'));
+            if (defaultLine) {
+                const parts = defaultLine.split(/\s+/);
+                return parts[2] ?? null;
+            }
+        }
+    }
+    catch {
+        // Command not available
+    }
+    return null;
+}
+//# sourceMappingURL=network.js.map

package/dist/lib/network.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"network.js","sourceRoot":"","sources":["../../src/lib/network.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,SAAS,CAAC;AACtE,OAAO,EAAE,gBAAgB,EAAe,MAAM,UAAU,CAAC;AACzD,OAAO,EAAE,OAAO,IAAI,YAAY,EAAE,MAAM,YAAY,CAAC;AACrD,OAAO,KAAK,GAAG,MAAM,mBAAmB,CAAC;AACzC,OAAO,EAAE,KAAK,EAAE,MAAM,OAAO,CAAC;AAW9B,MAAM,UAAU,uBAAuB;IACrC,MAAM,MAAM,GAAG,iBAAiB,EAAE,CAAC;IACnC,MAAM,MAAM,GAA2B,EAAE,CAAC;IAE1C,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QACnD,IAAI,CAAC,KAAK;YAAE,SAAS;QACrB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,MAAM,CAAC,IAAI,CAAC;gBACV,IAAI;gBACJ,MAAM,EAAE,IAAI,CAAC,MAAyB;gBACtC,OAAO,EAAE,IAAI,CAAC,OAAO;gBACrB,OAAO,EAAE,IAAI,CAAC,OAAO;gBACrB,GAAG,EAAE,IAAI,CAAC,GAAG;gBACb,QAAQ,EAAE,IAAI,CAAC,QAAQ;aACxB,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,iBAAiB;IAC/B,OAAO,QAAQ,EAAE,CAAC;AACpB,CAAC;AAED,MAAM,UAAU,eAAe;IAC7B,OAAO;QACL,QAAQ,EAAE,GAAG,QAAQ,EAAE,KAAK,IAAI,EAAE,GAAG;QACrC,IAAI,EAAE,IAAI,EAAE;QACZ,WAAW,EAAE,OAAO,CAAC,OAAO;KAC7B,CAAC;AACJ,CAAC;AAUD,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,IAAY;IAC3C,MAAM,KAAK,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC;IAChC,IAAI,IAAI,GAAa,EAAE,CAAC;IACxB,IAAI,IAAI,GAAa,EAAE,CAAC;IACxB,IAAI,KAAyB,CAAC;IAE9B,IAAI,CAAC;QACH,MAAM,CAAC,QAAQ,EAAE,QAAQ,CAAC,GAAG,MAAM,OAAO,CAAC,UAAU,CAAC;YACpD,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC;YAClB,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC;SACnB,CAAC,CAAC;QAEH,IAAI,QAAQ,CAAC,MAAM,KAAK,WAAW;YAAE,IAAI,GAAG,QAAQ,CAAC,KAAK,CAAC;QAC3D,IAAI,QAAQ,CAAC,MAAM,KAAK,WAAW;YAAE,IAAI,GAAG,QAAQ,CAAC,KAAK,CAAC;QAE3D,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC3C,MAAM,KAAK,GAAG,QAAQ,CAAC,MAAM,KAAK,UAAU,CAAC,CAAC,CAAE,QAAQ,CAAC,MAAgB,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;YACvF,KAAK,GAAG,KAAK,IAAI,oBAAoB,CAAC;QACxC,CAAC;IACH,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,KAAK,GAAI,CAAW,CAAC,OAAO,CAAC;IAC/B,CAAC;IAED,OAAO;QACL,IAAI;QACJ,IAAI;QACJ,IAAI;QACJ,UAAU,EAAE,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC;QACjD,KAAK;KACN,CAAC;AACJ,CAAC;AAUD,MAAM,UAAU,YAAY,CAAC,IAAY,EAAE,IAAY,EAAE,SAAS,GAAG,IAAI;IACvE,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,MAAM,KAAK,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC;QAChC,IAAI,MAAM,GAAkB,IAAI,CAAC;QACjC,IAAI,OAAO,GAAG,KAAK,CAAC;QAEpB,MAAM,MAAM,GAAG,CAAC,IAAa,EAAE,KAAc,EAAE,EAAE;YAC/C,IAAI,OAAO;gBAAE,OAAO;YACpB,OAAO,GAAG,IAAI,CAAC;YACf,IAAI,MAAM,EAAE,CAAC;gBACX,MAAM,CAAC,kBAAkB,EAAE,CAAC;gBAC5B,MAAM,CAAC,OAAO,EAAE,CAAC;YACnB,CAAC;YACD,OAAO,CAAC;gBACN,IAAI;gBACJ,IAAI;gBACJ,IAAI;gBACJ,UAAU,EAAE,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC;gBACjD,KAAK;aACN,CAAC,CAAC;QACL,CAAC,CAAC;QAEF,MAAM,GAAG,gBAAgB,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC,CAAC;QAE9D,MAAM,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;QACzC,MAAM,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC,CAAC;QACrD,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;YACzB,MAAM,IAAI,GAAI,GAA6B,CAAC,IAAI,CAAC;YACjD,MAAM,CAAC,KAAK,EAAE,GAAG,CAAC,OAAO,IAAI,IAAI,IAAI,mBAAmB,CAAC,CAAC;QAC5D,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAWD,MAAM,UAAU,UAAU,CAAC,GAAW,EAAE,SAAS,GAAG,KAAK;IACvD,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,MAAM,KAAK,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC;QAChC,IAAI,OAAO,GAAG,KAAK,CAAC;QAEpB,MAAM,MAAM,GAAG,CAAC,MAAiC,EAAE,EAAE;YACnD,IAAI,OAAO;gBAAE,OAAO;YACpB,OAAO,GAAG,IAAI,CAAC;YACf,OAAO,CAAC;gBACN,GAAG;gBACH,UAAU,EAAE,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC;gBACjD,GAAG,MAAM;aACV,CAAC,CAAC;QACL,CAAC,CAAC;QAEF,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,YAAY,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,EAAE,CAAC,GAAG,EAAE,EAAE;gBAC5E,MAAM,MAAM,GAAG,GAAG,CAAC,MAAsC,CAAC;gBAC1D,IAAI,UAA8B,CAAC;gBACnC,IAAI,UAA8B,CAAC;gBAEnC,IAAI,MAAM,IAAI,OAAO,MAAM,CAAC,WAAW,KAAK,UAAU,EAAE,CAAC;oBACvD,UAAU,GAAG,MAAM,CAAC,WAAW,EAAE,IAAI,SAAS,CAAC;gBACjD,CAAC;gBAED,IAAI,MAAM,IAAI,OAAO,MAAM,CAAC,kBAAkB,KAAK,UAAU,EAAE,CAAC;oBAC9D,MAAM,IAAI,GAAG,MAAM,CAAC,kBAAkB,EAAE,CAAC;oBACzC,IAAI,IAAI,EAAE,QAAQ,EAAE,CAAC;wBACnB,UAAU,GAAG,IAAI,CAAC,QAAQ,CAAC;oBAC7B,CAAC;gBACH,CAAC;gBAED,GAAG,CAAC,MAAM,EAAE,CAAC;gBACb,MAAM,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,CAAC,CAAC;YAC7D,CAAC,CAAC,CAAC;YAEH,GAAG,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE;gBACrB,GAAG,CAAC,OAAO,EAAE,CAAC;gBACd,MAAM,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC;YAC/B,CAAC,CAAC,CAAC;YAEH,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;gBACtB,MAAM,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;YACjC,CAAC,CAAC,CAAC;YAEH,GAAG,CAAC,GAAG,EAAE,CAAC;QACZ,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,MAAM,CAAC,EAAE,KAAK,EAAG,CAAW,CAAC,OAAO,EAAE,CAAC,CAAC;QAC1C,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,MAAc,EAAE,KAAK,GAAG,CAAC,EAAE,UAAU,GAAG,CAAC;IACnE,IAAI,QAAQ,EAAE,KAAK,QAAQ,EAAE,CAAC;QAC5B,+BAA+B;QAC/B,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,UAAU,GAAG,IAAI,CAAC,EAAE,MAAM,CAAC,CAAC;IACxE,CAAC;IACD,0BAA0B;IAC1B,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC,CAAC;AACjE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB;IACrC,IAAI,CAAC;QACH,IAAI,QAAQ,EAAE,KAAK,QAAQ,EAAE,CAAC;YAC5B,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,KAAK,CAAC,SAAS,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC;YACnD,MAAM,WAAW,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC;YAC1E,IAAI,WAAW,EAAE,CAAC;gBAChB,MAAM,KAAK,GAAG,WAAW,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;gBACvC,OAAO,KAAK,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC;YAC1B,CAAC;QACH,CAAC;aAAM,CAAC;YACN,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,KAAK,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;YAChD,MAAM,WAAW,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC;YAC1E,IAAI,WAAW,EAAE,CAAC;gBAChB,MAAM,KAAK,GAAG,WAAW,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;gBACvC,OAAO,KAAK,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC;YAC1B,CAAC;QACH,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,wBAAwB;IAC1B,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/lib/paths.d.ts

@@ -0,0 +1,19 @@
+export declare function getPaths(): {
+    installDir: string;
+    backupDir: string;
+    dbDumpsDir: string;
+    composeFile: string;
+    overrideFile: string;
+    certsDir: string;
+    postgresDataDir: string;
+    jtapiOverlayFile: string;
+    jtapiStateFile: string;
+    secretsOverlayFile: string;
+    gcsBaseUrl: string;
+    gcsBundleBaseUrl: string;
+    scriptUrl: string;
+    prepScriptUrl: string;
+    postgresSupportedVersions: string[];
+    postgresDefaultVersion: string;
+};
+//# sourceMappingURL=paths.d.ts.map

package/dist/lib/paths.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"paths.d.ts","sourceRoot":"","sources":["../../src/lib/paths.ts"],"names":[],"mappings":"AAyDA,wBAAgB,QAAQ;;;;;;;;;;;;;;;;;EAGvB"}

package/dist/lib/paths.js

@@ -0,0 +1,57 @@
+import { existsSync, readFileSync } from 'node:fs';
+import { homedir } from 'node:os';
+import { join } from 'node:path';
+const GCS_BASE_URL = 'https://storage.googleapis.com/ct_releases';
+const GCS_BUNDLE_BASE_URL = `${GCS_BASE_URL}/releases`;
+const KNOWN_INSTALL_PATHS = ['/home/calltelemetry', '/opt/calltelemetry'];
+function detectInstallDir() {
+    const sudoUser = process.env.SUDO_USER;
+    const fallback = sudoUser
+        ? join('/home', sudoUser)
+        : homedir();
+    for (const checkPath of KNOWN_INSTALL_PATHS) {
+        if (checkPath === fallback)
+            continue;
+        const composePath = join(checkPath, 'docker-compose.yml');
+        if (existsSync(composePath)) {
+            try {
+                const content = readFileSync(composePath, 'utf-8');
+                if (content.includes('calltelemetry')) {
+                    return checkPath;
+                }
+            }
+            catch {
+                // ignore read errors
+            }
+        }
+    }
+    return fallback;
+}
+let cached = null;
+function buildPaths() {
+    const installDir = detectInstallDir();
+    return {
+        installDir,
+        backupDir: join(installDir, 'backups'),
+        dbDumpsDir: join(installDir, 'db_dumps'),
+        composeFile: join(installDir, 'docker-compose.yml'),
+        overrideFile: join(installDir, 'docker-compose.override.yml'),
+        certsDir: join(installDir, 'certs'),
+        postgresDataDir: join(installDir, 'postgres-data'),
+        jtapiOverlayFile: join(installDir, 'docker-compose-jtapi.yml'),
+        jtapiStateFile: join(installDir, '.jtapi-enabled'),
+        secretsOverlayFile: join(installDir, 'docker-compose.secrets.yml'),
+        gcsBaseUrl: GCS_BASE_URL,
+        gcsBundleBaseUrl: GCS_BUNDLE_BASE_URL,
+        scriptUrl: `${GCS_BASE_URL}/cli.sh`,
+        prepScriptUrl: `${GCS_BASE_URL}/prep.sh`,
+        postgresSupportedVersions: ['14', '15', '16', '17', '18'],
+        postgresDefaultVersion: '17',
+    };
+}
+export function getPaths() {
+    if (!cached)
+        cached = buildPaths();
+    return cached;
+}
+//# sourceMappingURL=paths.js.map

package/dist/lib/paths.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"paths.js","sourceRoot":"","sources":["../../src/lib/paths.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,MAAM,YAAY,GAAG,4CAA4C,CAAC;AAClE,MAAM,mBAAmB,GAAG,GAAG,YAAY,WAAW,CAAC;AAEvD,MAAM,mBAAmB,GAAG,CAAC,qBAAqB,EAAE,oBAAoB,CAAC,CAAC;AAE1E,SAAS,gBAAgB;IACvB,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC;IACvC,MAAM,QAAQ,GAAG,QAAQ;QACvB,CAAC,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,CAAC;QACzB,CAAC,CAAC,OAAO,EAAE,CAAC;IAEd,KAAK,MAAM,SAAS,IAAI,mBAAmB,EAAE,CAAC;QAC5C,IAAI,SAAS,KAAK,QAAQ;YAAE,SAAS;QACrC,MAAM,WAAW,GAAG,IAAI,CAAC,SAAS,EAAE,oBAAoB,CAAC,CAAC;QAC1D,IAAI,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;YAC5B,IAAI,CAAC;gBACH,MAAM,OAAO,GAAG,YAAY,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;gBACnD,IAAI,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAC,EAAE,CAAC;oBACtC,OAAO,SAAS,CAAC;gBACnB,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,qBAAqB;YACvB,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,IAAI,MAAM,GAAyC,IAAI,CAAC;AAExD,SAAS,UAAU;IACjB,MAAM,UAAU,GAAG,gBAAgB,EAAE,CAAC;IACtC,OAAO;QACL,UAAU;QACV,SAAS,EAAE,IAAI,CAAC,UAAU,EAAE,SAAS,CAAC;QACtC,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,UAAU,CAAC;QACxC,WAAW,EAAE,IAAI,CAAC,UAAU,EAAE,oBAAoB,CAAC;QACnD,YAAY,EAAE,IAAI,CAAC,UAAU,EAAE,6BAA6B,CAAC;QAC7D,QAAQ,EAAE,IAAI,CAAC,UAAU,EAAE,OAAO,CAAC;QACnC,eAAe,EAAE,IAAI,CAAC,UAAU,EAAE,eAAe,CAAC;QAClD,gBAAgB,EAAE,IAAI,CAAC,UAAU,EAAE,0BAA0B,CAAC;QAC9D,cAAc,EAAE,IAAI,CAAC,UAAU,EAAE,gBAAgB,CAAC;QAClD,kBAAkB,EAAE,IAAI,CAAC,UAAU,EAAE,4BAA4B,CAAC;QAClE,UAAU,EAAE,YAAY;QACxB,gBAAgB,EAAE,mBAAmB;QACrC,SAAS,EAAE,GAAG,YAAY,SAAS;QACnC,aAAa,EAAE,GAAG,YAAY,UAAU;QACxC,yBAAyB,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC;QACzD,sBAAsB,EAAE,IAAI;KAC7B,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,QAAQ;IACtB,IAAI,CAAC,MAAM;QAAE,MAAM,GAAG,UAAU,EAAE,CAAC;IACnC,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/lib/postgres.d.ts

@@ -0,0 +1,4 @@
+export declare function getPostgresVersion(): string;
+export declare function getCurrentPostgresImage(): string;
+export declare function setPostgresVersion(version: string): Promise<void>;
+//# sourceMappingURL=postgres.d.ts.map

package/dist/lib/postgres.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"postgres.d.ts","sourceRoot":"","sources":["../../src/lib/postgres.ts"],"names":[],"mappings":"AAKA,wBAAgB,kBAAkB,IAAI,MAAM,CAQ3C;AAED,wBAAgB,uBAAuB,IAAI,MAAM,CAmBhD;AAED,wBAAsB,kBAAkB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAkBvE"}

package/dist/lib/postgres.js

@@ -0,0 +1,49 @@
+import { existsSync, readFileSync } from 'node:fs';
+import { execa } from 'execa';
+import { getPaths } from './paths.js';
+import { writeFileSafe } from './fs.js';
+export function getPostgresVersion() {
+    const { overrideFile, postgresDefaultVersion } = getPaths();
+    if (existsSync(overrideFile)) {
+        const content = readFileSync(overrideFile, 'utf-8');
+        const match = content.match(/calltelemetry\/postgres:(\d+)/);
+        if (match)
+            return match[1];
+    }
+    return postgresDefaultVersion;
+}
+export function getCurrentPostgresImage() {
+    const { overrideFile, composeFile } = getPaths();
+    if (existsSync(overrideFile)) {
+        const content = readFileSync(overrideFile, 'utf-8');
+        const match = content.match(/image:\s*"?([^"\s]+)"?/);
+        if (match)
+            return match[1];
+    }
+    if (existsSync(composeFile)) {
+        const content = readFileSync(composeFile, 'utf-8');
+        const dbSection = content.split(/^\s*db:/m)[1];
+        if (dbSection) {
+            const match = dbSection.match(/image:\s*"?([^"\s]+)"?/);
+            if (match)
+                return match[1];
+        }
+    }
+    return 'unknown';
+}
+export async function setPostgresVersion(version) {
+    const { postgresSupportedVersions, gcsBaseUrl, overrideFile } = getPaths();
+    if (!postgresSupportedVersions.includes(version)) {
+        throw new Error(`Invalid PostgreSQL version: ${version}\n` +
+            `Supported versions: ${postgresSupportedVersions.join(', ')}`);
+    }
+    const url = `${gcsBaseUrl}/postgres-${version}.yaml`;
+    try {
+        const { stdout } = await execa('curl', ['-sfL', url]);
+        await writeFileSafe(overrideFile, stdout);
+    }
+    catch {
+        throw new Error(`Failed to download override file from: ${url}`);
+    }
+}
+//# sourceMappingURL=postgres.js.map

package/dist/lib/postgres.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"postgres.js","sourceRoot":"","sources":["../../src/lib/postgres.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,KAAK,EAAE,MAAM,OAAO,CAAC;AAC9B,OAAO,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AACtC,OAAO,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAExC,MAAM,UAAU,kBAAkB;IAChC,MAAM,EAAE,YAAY,EAAE,sBAAsB,EAAE,GAAG,QAAQ,EAAE,CAAC;IAC5D,IAAI,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;QAC7B,MAAM,OAAO,GAAG,YAAY,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC;QACpD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,+BAA+B,CAAC,CAAC;QAC7D,IAAI,KAAK;YAAE,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC;IAC7B,CAAC;IACD,OAAO,sBAAsB,CAAC;AAChC,CAAC;AAED,MAAM,UAAU,uBAAuB;IACrC,MAAM,EAAE,YAAY,EAAE,WAAW,EAAE,GAAG,QAAQ,EAAE,CAAC;IAEjD,IAAI,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;QAC7B,MAAM,OAAO,GAAG,YAAY,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC;QACpD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,wBAAwB,CAAC,CAAC;QACtD,IAAI,KAAK;YAAE,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC;IAC7B,CAAC;IAED,IAAI,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;QAC5B,MAAM,OAAO,GAAG,YAAY,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;QACnD,MAAM,SAAS,GAAG,OAAO,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;QAC/C,IAAI,SAAS,EAAE,CAAC;YACd,MAAM,KAAK,GAAG,SAAS,CAAC,KAAK,CAAC,wBAAwB,CAAC,CAAC;YACxD,IAAI,KAAK;gBAAE,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC;QAC7B,CAAC;IACH,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,OAAe;IACtD,MAAM,EAAE,yBAAyB,EAAE,UAAU,EAAE,YAAY,EAAE,GAAG,QAAQ,EAAE,CAAC;IAE3E,IAAI,CAAC,yBAAyB,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;QACjD,MAAM,IAAI,KAAK,CACb,+BAA+B,OAAO,IAAI;YAC1C,uBAAuB,yBAAyB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAC9D,CAAC;IACJ,CAAC;IAED,MAAM,GAAG,GAAG,GAAG,UAAU,aAAa,OAAO,OAAO,CAAC;IAErD,IAAI,CAAC;QACH,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,KAAK,CAAC,MAAM,EAAE,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC;QACtD,MAAM,aAAa,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;IAC5C,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,0CAA0C,GAAG,EAAE,CAAC,CAAC;IACnE,CAAC;AACH,CAAC"}

package/dist/lib/rpc.d.ts

@@ -0,0 +1,5 @@
+export declare function rpc(code: string): Promise<string>;
+export declare function rpcOk(): Promise<boolean>;
+export declare function healthCheck(): Promise<boolean>;
+export declare function getReleaseBin(): string;
+//# sourceMappingURL=rpc.d.ts.map

package/dist/lib/rpc.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rpc.d.ts","sourceRoot":"","sources":["../../src/lib/rpc.ts"],"names":[],"mappings":"AAIA,wBAAsB,GAAG,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAGvD;AAED,wBAAsB,KAAK,IAAI,OAAO,CAAC,OAAO,CAAC,CAO9C;AAED,wBAAsB,WAAW,IAAI,OAAO,CAAC,OAAO,CAAC,CAOpD;AAED,wBAAgB,aAAa,IAAI,MAAM,CAEtC"}

package/dist/lib/rpc.js

@@ -0,0 +1,28 @@
+import { composeExec } from './compose.js';
+const RELEASE_BIN = '/home/app/onprem/bin/onprem';
+export async function rpc(code) {
+    const result = await composeExec('web', [RELEASE_BIN, 'rpc', code], { pipe: true });
+    return result.stdout ?? '';
+}
+export async function rpcOk() {
+    try {
+        const output = await rpc('IO.puts("ok")');
+        return output.includes('ok');
+    }
+    catch {
+        return false;
+    }
+}
+export async function healthCheck() {
+    try {
+        const result = await composeExec('web', ['curl', '-sf', 'http://127.0.0.1:4080/healthz'], { pipe: true });
+        return result.exitCode === 0;
+    }
+    catch {
+        return false;
+    }
+}
+export function getReleaseBin() {
+    return RELEASE_BIN;
+}
+//# sourceMappingURL=rpc.js.map

package/dist/lib/rpc.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rpc.js","sourceRoot":"","sources":["../../src/lib/rpc.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAE3C,MAAM,WAAW,GAAG,6BAA6B,CAAC;AAElD,MAAM,CAAC,KAAK,UAAU,GAAG,CAAC,IAAY;IACpC,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,KAAK,EAAE,CAAC,WAAW,EAAE,KAAK,EAAE,IAAI,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IACpF,OAAO,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC;AAC7B,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,KAAK;IACzB,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,eAAe,CAAC,CAAC;QAC1C,OAAO,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IAC/B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,WAAW;IAC/B,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,KAAK,EAAE,CAAC,MAAM,EAAE,KAAK,EAAE,+BAA+B,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1G,OAAO,MAAM,CAAC,QAAQ,KAAK,CAAC,CAAC;IAC/B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,MAAM,UAAU,aAAa;IAC3B,OAAO,WAAW,CAAC;AACrB,CAAC"}

package/dist/lib/secrets.d.ts

@@ -0,0 +1,38 @@
+export interface SecretDef {
+    key: string;
+    label: string;
+    group: 'PostgreSQL' | 'NATS' | 'Minio';
+    defaultValue: string;
+    sensitive: boolean;
+    required: boolean;
+}
+export declare const SECRET_CATALOG: SecretDef[];
+export declare const SECRET_GROUPS: readonly ["PostgreSQL", "NATS", "Minio"];
+export type SecretGroup = (typeof SECRET_GROUPS)[number];
+export declare function getEnvFilePath(): string;
+/**
+ * Parse a .env file into key-value pairs.
+ * Handles: comments, blank lines, export prefix, quoted values, values with =
+ */
+export declare function parseEnvFile(content: string): Record<string, string>;
+/**
+ * Load secrets with priority: defaults → .env file → process.env
+ */
+export declare function getSecrets(): Record<string, string>;
+/**
+ * Check if any secrets have been customized (via .env or process.env)
+ */
+export declare function isCustomized(): boolean;
+/**
+ * Count how many secrets differ from defaults
+ */
+export declare function countOverrides(): number;
+/**
+ * Write secrets to .env file with 0600 permissions
+ */
+export declare function writeEnvFile(values: Record<string, string>): Promise<void>;
+/**
+ * Generate docker-compose.secrets.yml overlay file
+ */
+export declare function writeSecretsOverlay(): Promise<void>;
+//# sourceMappingURL=secrets.d.ts.map

package/dist/lib/secrets.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"secrets.d.ts","sourceRoot":"","sources":["../../src/lib/secrets.ts"],"names":[],"mappings":"AAKA,MAAM,WAAW,SAAS;IACxB,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,YAAY,GAAG,MAAM,GAAG,OAAO,CAAC;IACvC,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,OAAO,CAAC;IACnB,QAAQ,EAAE,OAAO,CAAC;CACnB;AAED,eAAO,MAAM,cAAc,EAAE,SAAS,EAOrC,CAAC;AAEF,eAAO,MAAM,aAAa,0CAA2C,CAAC;AACtE,MAAM,MAAM,WAAW,GAAG,CAAC,OAAO,aAAa,CAAC,CAAC,MAAM,CAAC,CAAC;AAEzD,wBAAgB,cAAc,IAAI,MAAM,CAEvC;AAED;;;GAGG;AACH,wBAAgB,YAAY,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAwBpE;AAED;;GAEG;AACH,wBAAgB,UAAU,IAAI,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CA4BnD;AAED;;GAEG;AACH,wBAAgB,YAAY,IAAI,OAAO,CAMtC;AAED;;GAEG;AACH,wBAAgB,cAAc,IAAI,MAAM,CAGvC;AAED;;GAEG;AACH,wBAAsB,YAAY,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CAiBhF;AAED;;GAEG;AACH,wBAAsB,mBAAmB,IAAI,OAAO,CAAC,IAAI,CAAC,CAmBzD"}

package/dist/lib/secrets.js

@@ -0,0 +1,132 @@
+import { existsSync, readFileSync } from 'node:fs';
+import { join } from 'node:path';
+import { getPaths } from './paths.js';
+import { writeFileSafe } from './fs.js';
+export const SECRET_CATALOG = [
+    { key: 'POSTGRES_PASSWORD', label: 'PostgreSQL Password', group: 'PostgreSQL', defaultValue: 'postgres', sensitive: true, required: true },
+    { key: 'POSTGRES_USER', label: 'PostgreSQL User', group: 'PostgreSQL', defaultValue: 'calltelemetry', sensitive: false, required: true },
+    { key: 'POSTGRES_DB', label: 'PostgreSQL Database', group: 'PostgreSQL', defaultValue: 'calltelemetry_prod', sensitive: false, required: true },
+    { key: 'NATS_PASSWORD', label: 'NATS Password', group: 'NATS', defaultValue: '', sensitive: true, required: false },
+    { key: 'MINIO_ROOT_USER', label: 'Minio Root User', group: 'Minio', defaultValue: 'minioadmin', sensitive: false, required: false },
+    { key: 'MINIO_ROOT_PASSWORD', label: 'Minio Root Password', group: 'Minio', defaultValue: 'minioadmin', sensitive: true, required: false },
+];
+export const SECRET_GROUPS = ['PostgreSQL', 'NATS', 'Minio'];
+export function getEnvFilePath() {
+    return join(getPaths().installDir, '.env');
+}
+/**
+ * Parse a .env file into key-value pairs.
+ * Handles: comments, blank lines, export prefix, quoted values, values with =
+ */
+export function parseEnvFile(content) {
+    const result = {};
+    for (const rawLine of content.split('\n')) {
+        const line = rawLine.trim();
+        if (!line || line.startsWith('#'))
+            continue;
+        // Strip optional 'export ' prefix
+        const stripped = line.startsWith('export ') ? line.slice(7) : line;
+        const eqIdx = stripped.indexOf('=');
+        if (eqIdx === -1)
+            continue;
+        const key = stripped.slice(0, eqIdx).trim();
+        let value = stripped.slice(eqIdx + 1).trim();
+        // Strip matching quotes
+        if ((value.startsWith('"') && value.endsWith('"')) ||
+            (value.startsWith("'") && value.endsWith("'"))) {
+            value = value.slice(1, -1);
+        }
+        if (key)
+            result[key] = value;
+    }
+    return result;
+}
+/**
+ * Load secrets with priority: defaults → .env file → process.env
+ */
+export function getSecrets() {
+    const secrets = {};
+    // 1. Start with defaults
+    for (const def of SECRET_CATALOG) {
+        secrets[def.key] = def.defaultValue;
+    }
+    // 2. Load .env file (if exists)
+    const envPath = getEnvFilePath();
+    if (existsSync(envPath)) {
+        const content = readFileSync(envPath, 'utf-8');
+        const parsed = parseEnvFile(content);
+        for (const def of SECRET_CATALOG) {
+            if (parsed[def.key] !== undefined) {
+                secrets[def.key] = parsed[def.key];
+            }
+        }
+    }
+    // 3. Override with process.env (highest priority)
+    for (const def of SECRET_CATALOG) {
+        if (process.env[def.key] !== undefined) {
+            secrets[def.key] = process.env[def.key];
+        }
+    }
+    return secrets;
+}
+/**
+ * Check if any secrets have been customized (via .env or process.env)
+ */
+export function isCustomized() {
+    const envPath = getEnvFilePath();
+    if (!existsSync(envPath))
+        return false;
+    const content = readFileSync(envPath, 'utf-8');
+    const parsed = parseEnvFile(content);
+    return SECRET_CATALOG.some(def => parsed[def.key] !== undefined);
+}
+/**
+ * Count how many secrets differ from defaults
+ */
+export function countOverrides() {
+    const secrets = getSecrets();
+    return SECRET_CATALOG.filter(def => secrets[def.key] !== def.defaultValue).length;
+}
+/**
+ * Write secrets to .env file with 0600 permissions
+ */
+export async function writeEnvFile(values) {
+    const envPath = getEnvFilePath();
+    const lines = [
+        '# CallTelemetry secrets — generated by ct secrets setup',
+        `# Last updated: ${new Date().toISOString()}`,
+        '',
+    ];
+    for (const def of SECRET_CATALOG) {
+        const value = values[def.key] ?? def.defaultValue;
+        if (value) {
+            lines.push(`${def.key}=${value}`);
+        }
+    }
+    lines.push('');
+    await writeFileSafe(envPath, lines.join('\n'), { mode: 0o600 });
+}
+/**
+ * Generate docker-compose.secrets.yml overlay file
+ */
+export async function writeSecretsOverlay() {
+    const { secretsOverlayFile } = getPaths();
+    const content = `# Auto-generated by ct secrets setup — do not edit manually
+# To reconfigure: ct secrets setup
+services:
+  db:
+    environment:
+      POSTGRES_PASSWORD: \${POSTGRES_PASSWORD:-postgres}
+      POSTGRES_USER: \${POSTGRES_USER:-calltelemetry}
+      POSTGRES_DB: \${POSTGRES_DB:-calltelemetry_prod}
+  nats:
+    environment:
+      NATS_PASSWORD: \${NATS_PASSWORD:-}
+  minio:
+    environment:
+      MINIO_ROOT_USER: \${MINIO_ROOT_USER:-minioadmin}
+      MINIO_ROOT_PASSWORD: \${MINIO_ROOT_PASSWORD:-minioadmin}
+`;
+    await writeFileSafe(secretsOverlayFile, content);
+}
+//# sourceMappingURL=secrets.js.map

package/dist/lib/secrets.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"secrets.js","sourceRoot":"","sources":["../../src/lib/secrets.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AACtC,OAAO,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAWxC,MAAM,CAAC,MAAM,cAAc,GAAgB;IACzC,EAAE,GAAG,EAAE,mBAAmB,EAAE,KAAK,EAAE,qBAAqB,EAAE,KAAK,EAAE,YAAY,EAAE,YAAY,EAAE,UAAU,EAAE,SAAS,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE;IAC1I,EAAE,GAAG,EAAE,eAAe,EAAE,KAAK,EAAE,iBAAiB,EAAE,KAAK,EAAE,YAAY,EAAE,YAAY,EAAE,eAAe,EAAE,SAAS,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE;IACxI,EAAE,GAAG,EAAE,aAAa,EAAE,KAAK,EAAE,qBAAqB,EAAE,KAAK,EAAE,YAAY,EAAE,YAAY,EAAE,oBAAoB,EAAE,SAAS,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE;IAC/I,EAAE,GAAG,EAAE,eAAe,EAAE,KAAK,EAAE,eAAe,EAAE,KAAK,EAAE,MAAM,EAAE,YAAY,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE;IACnH,EAAE,GAAG,EAAE,iBAAiB,EAAE,KAAK,EAAE,iBAAiB,EAAE,KAAK,EAAE,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,SAAS,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE;IACnI,EAAE,GAAG,EAAE,qBAAqB,EAAE,KAAK,EAAE,qBAAqB,EAAE,KAAK,EAAE,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,SAAS,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE;CAC3I,CAAC;AAEF,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,YAAY,EAAE,MAAM,EAAE,OAAO,CAAU,CAAC;AAGtE,MAAM,UAAU,cAAc;IAC5B,OAAO,IAAI,CAAC,QAAQ,EAAE,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;AAC7C,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,YAAY,CAAC,OAAe;IAC1C,MAAM,MAAM,GAA2B,EAAE,CAAC;IAC1C,KAAK,MAAM,OAAO,IAAI,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QAC1C,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;QAC5B,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,SAAS;QAE5C,kCAAkC;QAClC,MAAM,QAAQ,GAAG,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QAEnE,MAAM,KAAK,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACpC,IAAI,KAAK,KAAK,CAAC,CAAC;YAAE,SAAS;QAE3B,MAAM,GAAG,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC;QAC5C,IAAI,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAE7C,wBAAwB;QACxB,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;YAC9C,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;YACnD,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QAC7B,CAAC;QAED,IAAI,GAAG;YAAE,MAAM,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;IAC/B,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,UAAU;IACxB,MAAM,OAAO,GAA2B,EAAE,CAAC;IAE3C,yBAAyB;IACzB,KAAK,MAAM,GAAG,IAAI,cAAc,EAAE,CAAC;QACjC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC,YAAY,CAAC;IACtC,CAAC;IAED,gCAAgC;IAChC,MAAM,OAAO,GAAG,cAAc,EAAE,CAAC;IACjC,IAAI,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;QACxB,MAAM,OAAO,GAAG,YAAY,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAC/C,MAAM,MAAM,GAAG,YAAY,CAAC,OAAO,CAAC,CAAC;QACrC,KAAK,MAAM,GAAG,IAAI,cAAc,EAAE,CAAC;YACjC,IAAI,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,SAAS,EAAE,CAAC;gBAClC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YACrC,CAAC;QACH,CAAC;IACH,CAAC;IAED,kDAAkD;IAClD,KAAK,MAAM,GAAG,IAAI,cAAc,EAAE,CAAC;QACjC,IAAI,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,SAAS,EAAE,CAAC;YACvC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAE,CAAC;QAC3C,CAAC;IACH,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,YAAY;IAC1B,MAAM,OAAO,GAAG,cAAc,EAAE,CAAC;IACjC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC;QAAE,OAAO,KAAK,CAAC;IACvC,MAAM,OAAO,GAAG,YAAY,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAC/C,MAAM,MAAM,GAAG,YAAY,CAAC,OAAO,CAAC,CAAC;IACrC,OAAO,cAAc,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,SAAS,CAAC,CAAC;AACnE,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,cAAc;IAC5B,MAAM,OAAO,GAAG,UAAU,EAAE,CAAC;IAC7B,OAAO,cAAc,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,GAAG,CAAC,YAAY,CAAC,CAAC,MAAM,CAAC;AACpF,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,MAA8B;IAC/D,MAAM,OAAO,GAAG,cAAc,EAAE,CAAC;IACjC,MAAM,KAAK,GAAG;QACZ,yDAAyD;QACzD,mBAAmB,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE;QAC7C,EAAE;KACH,CAAC;IAEF,KAAK,MAAM,GAAG,IAAI,cAAc,EAAE,CAAC;QACjC,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,YAAY,CAAC;QAClD,IAAI,KAAK,EAAE,CAAC;YACV,KAAK,CAAC,IAAI,CAAC,GAAG,GAAG,CAAC,GAAG,IAAI,KAAK,EAAE,CAAC,CAAC;QACpC,CAAC;IACH,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,MAAM,aAAa,CAAC,OAAO,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;AAClE,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB;IACvC,MAAM,EAAE,kBAAkB,EAAE,GAAG,QAAQ,EAAE,CAAC;IAC1C,MAAM,OAAO,GAAG;;;;;;;;;;;;;;;CAejB,CAAC;IACA,MAAM,aAAa,CAAC,kBAAkB,EAAE,OAAO,CAAC,CAAC;AACnD,CAAC"}

package/dist/lib/system.d.ts

@@ -0,0 +1,12 @@
+export declare function checkRam(requiredMb?: number): Promise<{
+    ok: boolean;
+    totalMb: number;
+}>;
+export declare function checkDiskSpace(path?: string, requiredFreePercent?: number): Promise<{
+    ok: boolean;
+    usedPercent: number;
+    freePercent: number;
+}>;
+export declare function getDockerVersion(): Promise<number | null>;
+export declare function getSystemStats(): Promise<string>;
+//# sourceMappingURL=system.d.ts.map

package/dist/lib/system.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"system.d.ts","sourceRoot":"","sources":["../../src/lib/system.ts"],"names":[],"mappings":"AAGA,wBAAsB,QAAQ,CAAC,UAAU,SAAO,GAAG,OAAO,CAAC;IAAE,EAAE,EAAE,OAAO,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC,CAI3F;AAED,wBAAsB,cAAc,CAAC,IAAI,SAAM,EAAE,mBAAmB,SAAK,GAAG,OAAO,CAAC;IAClF,EAAE,EAAE,OAAO,CAAC;IACZ,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;CACrB,CAAC,CAcD;AAED,wBAAsB,gBAAgB,IAAI,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAQ/D;AAED,wBAAsB,cAAc,IAAI,OAAO,CAAC,MAAM,CAAC,CAsBtD"}