@ebowwa/hetzner 0.2.2 → 0.3.0

package/ssh-keys.js

@@ -1,180 +0,0 @@
-"use strict";
-/**
- * Hetzner SSH key operations
- */
-var __assign = (this && this.__assign) || function () {
-    __assign = Object.assign || function(t) {
-        for (var s, i = 1, n = arguments.length; i < n; i++) {
-            s = arguments[i];
-            for (var p in s) if (Object.prototype.hasOwnProperty.call(s, p))
-                t[p] = s[p];
-        }
-        return t;
-    };
-    return __assign.apply(this, arguments);
-};
-var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
-    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
-    return new (P || (P = Promise))(function (resolve, reject) {
-        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
-        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
-        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
-        step((generator = generator.apply(thisArg, _arguments || [])).next());
-    });
-};
-var __generator = (this && this.__generator) || function (thisArg, body) {
-    var _ = { label: 0, sent: function() { if (t[0] & 1) throw t[1]; return t[1]; }, trys: [], ops: [] }, f, y, t, g = Object.create((typeof Iterator === "function" ? Iterator : Object).prototype);
-    return g.next = verb(0), g["throw"] = verb(1), g["return"] = verb(2), typeof Symbol === "function" && (g[Symbol.iterator] = function() { return this; }), g;
-    function verb(n) { return function (v) { return step([n, v]); }; }
-    function step(op) {
-        if (f) throw new TypeError("Generator is already executing.");
-        while (g && (g = 0, op[0] && (_ = 0)), _) try {
-            if (f = 1, y && (t = op[0] & 2 ? y["return"] : op[0] ? y["throw"] || ((t = y["return"]) && t.call(y), 0) : y.next) && !(t = t.call(y, op[1])).done) return t;
-            if (y = 0, t) op = [op[0] & 2, t.value];
-            switch (op[0]) {
-                case 0: case 1: t = op; break;
-                case 4: _.label++; return { value: op[1], done: false };
-                case 5: _.label++; y = op[1]; op = [0]; continue;
-                case 7: op = _.ops.pop(); _.trys.pop(); continue;
-                default:
-                    if (!(t = _.trys, t = t.length > 0 && t[t.length - 1]) && (op[0] === 6 || op[0] === 2)) { _ = 0; continue; }
-                    if (op[0] === 3 && (!t || (op[1] > t[0] && op[1] < t[3]))) { _.label = op[1]; break; }
-                    if (op[0] === 6 && _.label < t[1]) { _.label = t[1]; t = op; break; }
-                    if (t && _.label < t[2]) { _.label = t[2]; _.ops.push(op); break; }
-                    if (t[2]) _.ops.pop();
-                    _.trys.pop(); continue;
-            }
-            op = body.call(thisArg, _);
-        } catch (e) { op = [6, e]; y = 0; } finally { f = t = 0; }
-        if (op[0] & 5) throw op[1]; return { value: op[0] ? op[1] : void 0, done: true };
-    }
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.SSHKeyOperations = void 0;
-var schemas_js_1 = require("./schemas.js");
-var SSHKeyOperations = /** @class */ (function () {
-    function SSHKeyOperations(client) {
-        this.client = client;
-    }
-    /**
-     * List all SSH keys
-     */
-    SSHKeyOperations.prototype.list = function () {
-        return __awaiter(this, void 0, void 0, function () {
-            var response, validated;
-            return __generator(this, function (_a) {
-                switch (_a.label) {
-                    case 0: return [4 /*yield*/, this.client.request("/ssh_keys")];
-                    case 1:
-                        response = _a.sent();
-                        validated = schemas_js_1.HetznerListSSHKeysResponseSchema.safeParse(response);
-                        if (!validated.success) {
-                            console.warn('Hetzner list SSH keys validation warning:', validated.error.issues);
-                            return [2 /*return*/, response.ssh_keys]; // Return unvalidated data for backward compatibility
-                        }
-                        return [2 /*return*/, validated.data.ssh_keys];
-                }
-            });
-        });
-    };
-    /**
-     * Get a specific SSH key by ID or name
-     */
-    SSHKeyOperations.prototype.get = function (idOrName) {
-        return __awaiter(this, void 0, void 0, function () {
-            var endpoint, response, validated;
-            return __generator(this, function (_a) {
-                switch (_a.label) {
-                    case 0:
-                        endpoint = typeof idOrName === 'number'
-                            ? "/ssh_keys/".concat(idOrName)
-                            : "/ssh_keys?name=".concat(encodeURIComponent(idOrName));
-                        return [4 /*yield*/, this.client.request(endpoint)];
-                    case 1:
-                        response = _a.sent();
-                        validated = schemas_js_1.HetznerGetSSHKeyResponseSchema.safeParse(response);
-                        if (!validated.success) {
-                            console.warn('Hetzner get SSH key validation warning:', validated.error.issues);
-                            return [2 /*return*/, response.ssh_key]; // Return unvalidated data for backward compatibility
-                        }
-                        return [2 /*return*/, validated.data.ssh_key];
-                }
-            });
-        });
-    };
-    /**
-     * Create a new SSH key
-     *
-     * @param options - SSH key creation options
-     * @returns Created SSH key
-     */
-    SSHKeyOperations.prototype.create = function (options) {
-        return __awaiter(this, void 0, void 0, function () {
-            var validatedOptions, body, response, validated;
-            return __generator(this, function (_a) {
-                switch (_a.label) {
-                    case 0:
-                        validatedOptions = schemas_js_1.HetznerCreateSSHKeyRequestSchema.safeParse(options);
-                        if (!validatedOptions.success) {
-                            throw new Error("Invalid SSH key options: ".concat(validatedOptions.error.issues.map(function (i) { return i.message; }).join(', ')));
-                        }
-                        body = __assign({ name: validatedOptions.data.name, public_key: validatedOptions.data.public_key }, (validatedOptions.data.labels && { labels: validatedOptions.data.labels }));
-                        return [4 /*yield*/, this.client.request("/ssh_keys", {
-                                method: "POST",
-                                body: JSON.stringify(body),
-                            })];
-                    case 1:
-                        response = _a.sent();
-                        validated = schemas_js_1.HetznerCreateSSHKeyResponseSchema.safeParse(response);
-                        if (!validated.success) {
-                            console.warn('Hetzner create SSH key validation warning:', validated.error.issues);
-                            return [2 /*return*/, response.ssh_key]; // Return unvalidated data for backward compatibility
-                        }
-                        return [2 /*return*/, validated.data.ssh_key];
-                }
-            });
-        });
-    };
-    /**
-     * Delete an SSH key
-     *
-     * @param id - SSH key ID
-     */
-    SSHKeyOperations.prototype.delete = function (id) {
-        return __awaiter(this, void 0, void 0, function () {
-            return __generator(this, function (_a) {
-                switch (_a.label) {
-                    case 0: return [4 /*yield*/, this.client.request("/ssh_keys/".concat(id), { method: "DELETE" })];
-                    case 1:
-                        _a.sent();
-                        return [2 /*return*/];
-                }
-            });
-        });
-    };
-    /**
-     * Find an SSH key by name
-     * Returns undefined if not found
-     */
-    SSHKeyOperations.prototype.findByName = function (name) {
-        return __awaiter(this, void 0, void 0, function () {
-            var keys, _a;
-            return __generator(this, function (_b) {
-                switch (_b.label) {
-                    case 0:
-                        _b.trys.push([0, 2, , 3]);
-                        return [4 /*yield*/, this.list()];
-                    case 1:
-                        keys = _b.sent();
-                        return [2 /*return*/, keys.find(function (key) { return key.name === name; })];
-                    case 2:
-                        _a = _b.sent();
-                        return [2 /*return*/, undefined];
-                    case 3: return [2 /*return*/];
-                }
-            });
-        });
-    };
-    return SSHKeyOperations;
-}());
-exports.SSHKeyOperations = SSHKeyOperations;

package/ssh-keys.ts

@@ -1,122 +0,0 @@
-/**
- * Hetzner SSH key operations
- */
-
-import { z } from "zod";
-import type {
-  HetznerSSHKey,
-  CreateSSHKeyOptions,
-} from "./types.js";
-import type { HetznerClient } from "./client.js";
-import {
-  HetznerListSSHKeysResponseSchema,
-  HetznerGetSSHKeyResponseSchema,
-  HetznerCreateSSHKeyRequestSchema,
-  HetznerCreateSSHKeyResponseSchema,
-} from "./schemas.js";
-
-export class SSHKeyOperations {
-  constructor(private client: HetznerClient) {}
-
-  /**
-   * List all SSH keys
-   */
-  async list(): Promise<HetznerSSHKey[]> {
-    const response = await this.client.request<{ ssh_keys: HetznerSSHKey[] }>(
-      "/ssh_keys",
-    );
-
-    // Validate response with Zod
-    const validated = HetznerListSSHKeysResponseSchema.safeParse(response);
-    if (!validated.success) {
-      console.warn('Hetzner list SSH keys validation warning:', validated.error.issues);
-      return response.ssh_keys; // Return unvalidated data for backward compatibility
-    }
-
-    return validated.data.ssh_keys;
-  }
-
-  /**
-   * Get a specific SSH key by ID or name
-   */
-  async get(idOrName: number | string): Promise<HetznerSSHKey> {
-    const endpoint = typeof idOrName === 'number'
-      ? `/ssh_keys/${idOrName}`
-      : `/ssh_keys?name=${encodeURIComponent(idOrName)}`;
-
-    const response = await this.client.request<{ ssh_key: HetznerSSHKey }>(
-      endpoint,
-    );
-
-    // Validate response with Zod
-    const validated = HetznerGetSSHKeyResponseSchema.safeParse(response);
-    if (!validated.success) {
-      console.warn('Hetzner get SSH key validation warning:', validated.error.issues);
-      return response.ssh_key; // Return unvalidated data for backward compatibility
-    }
-
-    return validated.data.ssh_key;
-  }
-
-  /**
-   * Create a new SSH key
-   *
-   * @param options - SSH key creation options
-   * @returns Created SSH key
-   */
-  async create(options: CreateSSHKeyOptions): Promise<HetznerSSHKey> {
-    // Validate input with Zod
-    const validatedOptions = HetznerCreateSSHKeyRequestSchema.safeParse(options);
-    if (!validatedOptions.success) {
-      throw new Error(`Invalid SSH key options: ${validatedOptions.error.issues.map(i => i.message).join(', ')}`);
-    }
-
-    const body = {
-      name: validatedOptions.data.name,
-      public_key: validatedOptions.data.public_key,
-      ...(validatedOptions.data.labels && { labels: validatedOptions.data.labels }),
-    };
-
-    const response = await this.client.request<{ ssh_key: HetznerSSHKey }>(
-      "/ssh_keys",
-      {
-        method: "POST",
-        body: JSON.stringify(body),
-      }
-    );
-
-    // Validate response with Zod
-    const validated = HetznerCreateSSHKeyResponseSchema.safeParse(response);
-    if (!validated.success) {
-      console.warn('Hetzner create SSH key validation warning:', validated.error.issues);
-      return response.ssh_key; // Return unvalidated data for backward compatibility
-    }
-
-    return validated.data.ssh_key;
-  }
-
-  /**
-   * Delete an SSH key
-   *
-   * @param id - SSH key ID
-   */
-  async delete(id: number): Promise<void> {
-    await this.client.request(
-      `/ssh_keys/${id}`,
-      { method: "DELETE" }
-    );
-  }
-
-  /**
-   * Find an SSH key by name
-   * Returns undefined if not found
-   */
-  async findByName(name: string): Promise<HetznerSSHKey | undefined> {
-    try {
-      const keys = await this.list();
-      return keys.find(key => key.name === name);
-    } catch {
-      return undefined;
-    }
-  }
-}

package/ssh-setup.js

@@ -1,253 +0,0 @@
-"use strict";
-/**
- * SSH Key Management for Hetzner
- *
- * This module ensures SSH keys are properly configured between:
- * 1. Local machine (~/.ssh/)
- * 2. Hetzner Cloud API
- *
- * PROBLEM:
- * - Creating random keys in Hetzner doesn't work because we need the matching private key locally
- * - Password auth is unreliable and often disabled
- * - IP reuse causes known_hosts conflicts
- *
- * SOLUTION:
- * - Always use existing local keys or create new key pairs
- * - Upload public key to Hetzner, keep private key local
- */
-var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
-    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
-    return new (P || (P = Promise))(function (resolve, reject) {
-        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
-        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
-        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
-        step((generator = generator.apply(thisArg, _arguments || [])).next());
-    });
-};
-var __generator = (this && this.__generator) || function (thisArg, body) {
-    var _ = { label: 0, sent: function() { if (t[0] & 1) throw t[1]; return t[1]; }, trys: [], ops: [] }, f, y, t, g = Object.create((typeof Iterator === "function" ? Iterator : Object).prototype);
-    return g.next = verb(0), g["throw"] = verb(1), g["return"] = verb(2), typeof Symbol === "function" && (g[Symbol.iterator] = function() { return this; }), g;
-    function verb(n) { return function (v) { return step([n, v]); }; }
-    function step(op) {
-        if (f) throw new TypeError("Generator is already executing.");
-        while (g && (g = 0, op[0] && (_ = 0)), _) try {
-            if (f = 1, y && (t = op[0] & 2 ? y["return"] : op[0] ? y["throw"] || ((t = y["return"]) && t.call(y), 0) : y.next) && !(t = t.call(y, op[1])).done) return t;
-            if (y = 0, t) op = [op[0] & 2, t.value];
-            switch (op[0]) {
-                case 0: case 1: t = op; break;
-                case 4: _.label++; return { value: op[1], done: false };
-                case 5: _.label++; y = op[1]; op = [0]; continue;
-                case 7: op = _.ops.pop(); _.trys.pop(); continue;
-                default:
-                    if (!(t = _.trys, t = t.length > 0 && t[t.length - 1]) && (op[0] === 6 || op[0] === 2)) { _ = 0; continue; }
-                    if (op[0] === 3 && (!t || (op[1] > t[0] && op[1] < t[3]))) { _.label = op[1]; break; }
-                    if (op[0] === 6 && _.label < t[1]) { _.label = t[1]; t = op; break; }
-                    if (t && _.label < t[2]) { _.label = t[2]; _.ops.push(op); break; }
-                    if (t[2]) _.ops.pop();
-                    _.trys.pop(); continue;
-            }
-            op = body.call(thisArg, _);
-        } catch (e) { op = [6, e]; y = 0; } finally { f = t = 0; }
-        if (op[0] & 5) throw op[1]; return { value: op[0] ? op[1] : void 0, done: true };
-    }
-};
-var __spreadArray = (this && this.__spreadArray) || function (to, from, pack) {
-    if (pack || arguments.length === 2) for (var i = 0, l = from.length, ar; i < l; i++) {
-        if (ar || !(i in from)) {
-            if (!ar) ar = Array.prototype.slice.call(from, 0, i);
-            ar[i] = from[i];
-        }
-    }
-    return to.concat(ar || Array.prototype.slice.call(from));
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.getOrCreateHetznerSSHKey = getOrCreateHetznerSSHKey;
-exports.ensureHetznerSSHKey = ensureHetznerSSHKey;
-exports.clearKnownHosts = clearKnownHosts;
-exports.testSSHConnection = testSSHConnection;
-exports.prepareSSHKeys = prepareSSHKeys;
-var fs_1 = require("fs");
-var path_1 = require("path");
-var ssh_1 = require("@ebowwa/ssh");
-var HETZNER_SSH_DIR = (0, path_1.join)(process.env.HOME || "", ".ssh");
-var HETZNER_KEY_PREFIX = "hetzner-codespaces";
-/**
- * Get or create a local SSH key pair for Hetzner
- * Returns the key name to use with Hetzner API
- */
-function getOrCreateHetznerSSHKey() {
-    return __awaiter(this, void 0, void 0, function () {
-        var existingKey;
-        return __generator(this, function (_a) {
-            existingKey = findExistingHetznerKey();
-            if (existingKey) {
-                console.log("\u2713 Using existing SSH key: ".concat(existingKey.name));
-                return [2 /*return*/, existingKey];
-            }
-            // Create new key pair
-            console.log("Creating new SSH key pair for Hetzner...");
-            return [2 /*return*/, createNewKeyPair()];
-        });
-    });
-}
-/**
- * Find existing Hetzner SSH key in local ~/.ssh/
- */
-function findExistingHetznerKey() {
-    var privateKeyPath = (0, path_1.join)(HETZNER_SSH_DIR, "".concat(HETZNER_KEY_PREFIX));
-    var publicKeyPath = "".concat(privateKeyPath, ".pub");
-    if (!(0, fs_1.existsSync)(privateKeyPath) || !(0, fs_1.existsSync)(publicKeyPath)) {
-        return null;
-    }
-    var publicKey = (0, fs_1.readFileSync)(publicKeyPath, "utf-8").trim();
-    return {
-        name: HETZNER_KEY_PREFIX,
-        publicKey: publicKey,
-        privateKeyPath: privateKeyPath,
-    };
-}
-/**
- * Create a new SSH key pair for Hetzner
- */
-function createNewKeyPair() {
-    var keyName = "".concat(HETZNER_KEY_PREFIX, "-").concat(Date.now());
-    var privateKeyPath = (0, path_1.join)(HETZNER_SSH_DIR, keyName);
-    var publicKeyPath = "".concat(privateKeyPath, ".pub");
-    // Generate new ed25519 key pair
-    try {
-        // Bun.spawn automatically escapes arguments to prevent shell injection
-        Bun.spawnSync(["ssh-keygen", "-t", "ed25519", "-f", privateKeyPath, "-N", "", "-C", keyName], {
-            stdout: "ignore",
-            stderr: "ignore",
-        });
-        // Set proper permissions
-        Bun.spawnSync(["chmod", "600", privateKeyPath], { stdout: "ignore", stderr: "ignore" });
-        Bun.spawnSync(["chmod", "644", publicKeyPath], { stdout: "ignore", stderr: "ignore" });
-        var publicKey = (0, fs_1.readFileSync)(publicKeyPath, "utf-8").trim();
-        console.log("\u2713 Created new SSH key: ".concat(keyName));
-        console.log("  Private: ".concat(privateKeyPath));
-        console.log("  Public:  ".concat(publicKeyPath));
-        return {
-            name: keyName,
-            publicKey: publicKey,
-            privateKeyPath: privateKeyPath,
-        };
-    }
-    catch (error) {
-        throw new Error("Failed to create SSH key: ".concat(error));
-    }
-}
-/**
- * Ensure SSH key exists in Hetzner
- * Returns the SSH key name to use when creating servers
- */
-function ensureHetznerSSHKey(hetznerAPI) {
-    return __awaiter(this, void 0, void 0, function () {
-        var localKey, existingKeys, matchingKey, createResponse, error, createdKey;
-        return __generator(this, function (_a) {
-            switch (_a.label) {
-                case 0: return [4 /*yield*/, getOrCreateHetznerSSHKey()];
-                case 1:
-                    localKey = _a.sent();
-                    return [4 /*yield*/, hetznerAPI("/ssh_keys", "GET", null)
-                            .then(function (r) { return r.json(); })
-                            .then(function (data) { return data.ssh_keys; })];
-                case 2:
-                    existingKeys = _a.sent();
-                    matchingKey = existingKeys.find(function (k) { return k.public_key.trim() === localKey.publicKey.trim(); });
-                    if (matchingKey) {
-                        console.log("\u2713 SSH key already exists in Hetzner: ".concat(matchingKey.name, " (").concat(matchingKey.id, ")"));
-                        return [2 /*return*/, matchingKey.name]; // Use existing key name
-                    }
-                    // 4. Upload new key to Hetzner
-                    console.log("Uploading SSH key to Hetzner: ".concat(localKey.name, "..."));
-                    return [4 /*yield*/, hetznerAPI("/ssh_keys", "POST", {
-                            name: localKey.name,
-                            public_key: localKey.publicKey,
-                        })];
-                case 3:
-                    createResponse = _a.sent();
-                    if (!!createResponse.ok) return [3 /*break*/, 5];
-                    return [4 /*yield*/, createResponse.text()];
-                case 4:
-                    error = _a.sent();
-                    throw new Error("Failed to upload SSH key to Hetzner: ".concat(error));
-                case 5: return [4 /*yield*/, createResponse.json()];
-                case 6:
-                    createdKey = (_a.sent());
-                    console.log("\u2713 SSH key uploaded: ".concat(createdKey.name, " (").concat(createdKey.id, ")"));
-                    return [2 /*return*/, createdKey.name];
-            }
-        });
-    });
-}
-/**
- * Clear known_hosts entry for an IP (to fix IP reuse issues)
- */
-function clearKnownHosts(ip) {
-    try {
-        // Bun.spawn automatically escapes arguments to prevent shell injection
-        Bun.spawnSync(["ssh-keygen", "-R", ip], { stdout: "ignore", stderr: "ignore" });
-        console.log("\u2713 Cleared known_hosts entry for ".concat(ip));
-    }
-    catch (_a) {
-        // Ignore if entry doesn't exist
-    }
-}
-/**
- * Test SSH connection to a server using typed flags
- */
-function testSSHConnection(ip_1, privateKeyPath_1) {
-    return __awaiter(this, arguments, void 0, function (ip, privateKeyPath, username) {
-        var flags, sshArgs, proc_1, timeout, _a;
-        if (username === void 0) { username = "root"; }
-        return __generator(this, function (_b) {
-            switch (_b.label) {
-                case 0:
-                    _b.trys.push([0, 2, , 3]);
-                    flags = __spreadArray(__spreadArray([], ssh_1.SSHPresets.default, true), [
-                        ssh_1.SSHFlags.identity(privateKeyPath),
-                        (0, ssh_1.sshConfig)("ConnectTimeout", "10"),
-                    ], false);
-                    sshArgs = (0, ssh_1.buildSSHArgs)(flags, ip, username);
-                    sshArgs.push("echo", "connected");
-                    proc_1 = Bun.spawn(sshArgs, {
-                        stdout: "ignore",
-                        stderr: "ignore",
-                    });
-                    timeout = setTimeout(function () { return proc_1.kill(); }, 15000);
-                    return [4 /*yield*/, proc_1.exited];
-                case 1:
-                    _b.sent();
-                    clearTimeout(timeout);
-                    return [2 /*return*/, proc_1.exitCode === 0];
-                case 2:
-                    _a = _b.sent();
-                    return [2 /*return*/, false];
-                case 3: return [2 /*return*/];
-            }
-        });
-    });
-}
-/**
- * Full workflow: Prepare SSH keys before creating servers
- */
-function prepareSSHKeys(hetznerAPI) {
-    return __awaiter(this, void 0, void 0, function () {
-        var sshKeyName, localKey;
-        return __generator(this, function (_a) {
-            switch (_a.label) {
-                case 0: return [4 /*yield*/, ensureHetznerSSHKey(hetznerAPI)];
-                case 1:
-                    sshKeyName = _a.sent();
-                    return [4 /*yield*/, getOrCreateHetznerSSHKey()];
-                case 2:
-                    localKey = _a.sent();
-                    return [2 /*return*/, {
-                            sshKeyName: sshKeyName,
-                            privateKeyPath: localKey.privateKeyPath,
-                        }];
-            }
-        });
-    });
-}