@flui-cloud/cli 0.0.1

package/lib/src/modules/providers/services/contabo-provider.service.js

@@ -0,0 +1,194 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+var ContaboProviderService_1;
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ContaboProviderService = void 0;
+const common_1 = require("@nestjs/common");
+const config_1 = require("@nestjs/config");
+const instance_entity_1 = require("../../instances/entities/instance.entity");
+const instance_status_enum_1 = require("../../instances/entities/instance-status.enum");
+const instance_type_enum_1 = require("../../instances/entities/instance-type.enum");
+const cloud_provider_enum_1 = require("../enums/cloud-provider.enum");
+const generated_1 = require("../../../modules/providers/implementations/contabo/generated");
+const node_crypto_1 = require("node:crypto");
+const label_service_1 = require("../../common/services/label.service");
+let ContaboProviderService = ContaboProviderService_1 = class ContaboProviderService {
+    constructor(configService, credentialProvider, labelService) {
+        this.configService = configService;
+        this.credentialProvider = credentialProvider;
+        this.labelService = labelService;
+        this.logger = new common_1.Logger(ContaboProviderService_1.name);
+        this.FLUI_PREFIX = 'flui-';
+        this.apiUrl = this.configService.get('CONTABO_API_URL', 'https://api.contabo.com');
+    }
+    listServersAsDto() {
+        throw new common_1.NotImplementedException('Contabo provider: listServersAsDto not yet implemented');
+    }
+    getServerDetailsAsDto(serverId) {
+        throw new common_1.NotImplementedException('Contabo provider: getServerDetailsAsDto not yet implemented');
+    }
+    createServer(config) {
+        throw new common_1.NotImplementedException('Contabo provider: createServer not yet implemented');
+    }
+    deleteServer(config) {
+        throw new common_1.NotImplementedException('Contabo provider: deleteServer not yet implemented');
+    }
+    getServerStatus(serverId) {
+        throw new common_1.NotImplementedException('Contabo provider: getServerStatus not yet implemented');
+    }
+    testConnection() {
+        throw new common_1.NotImplementedException('Contabo provider: testConnection not yet implemented');
+    }
+    async powerOnServer(serverId) {
+        throw new common_1.NotImplementedException('Contabo provider: powerOnServer not yet implemented');
+    }
+    async powerOffServer(serverId) {
+        throw new common_1.NotImplementedException('Contabo provider: powerOffServer not yet implemented');
+    }
+    async changeServerType() {
+        throw new common_1.NotImplementedException('Contabo provider: changeServerType is not supported. Contabo requires re-provisioning the VPS to change its plan.');
+    }
+    async expandVolume() {
+        throw new common_1.NotImplementedException('Contabo provider: expandVolume is not supported.');
+    }
+    async listInstances(filters) {
+        try {
+            const activeToken = await this.credentialProvider.getActiveBearerToken(cloud_provider_enum_1.CloudProvider.CONTABO);
+            if (!activeToken) {
+                throw new common_1.HttpException('No active token found for Contabo', common_1.HttpStatus.UNAUTHORIZED);
+            }
+            const configuration = new generated_1.Configuration({
+                basePath: 'https://api.contabo.com',
+                accessToken: activeToken.access_token,
+            });
+            const instancesApi = new generated_1.InstancesApi(configuration);
+            const requestId = (0, node_crypto_1.randomUUID)();
+            const instanceList = await instancesApi.retrieveInstancesList(requestId);
+            return instanceList.data.data.map((instance) => this.mapContaboInstanceToEntity(instance));
+        }
+        catch (error) {
+            throw new common_1.HttpException(error.message || 'Failed to list instances', error.status || common_1.HttpStatus.INTERNAL_SERVER_ERROR);
+        }
+    }
+    mapContaboInstanceToEntity(contaboInstance) {
+        const instance = new instance_entity_1.InstanceEntity();
+        instance.providerId = String(contaboInstance.instanceId);
+        instance.name = contaboInstance.name;
+        instance.displayName = contaboInstance.displayName || '';
+        instance.type = instance_type_enum_1.InstanceType.VPS;
+        instance.provider = cloud_provider_enum_1.CloudProvider.CONTABO;
+        instance.status = this.mapContaboStatus(contaboInstance.status);
+        instance.dataCenter = contaboInstance.dataCenter;
+        instance.region = contaboInstance.region;
+        instance.regionName = contaboInstance.regionName;
+        instance.cpuCores = contaboInstance.cpuCores;
+        instance.ramMb = contaboInstance.ramMb;
+        instance.diskMb = contaboInstance.diskMb;
+        instance.osType = contaboInstance.osType;
+        instance.ipConfig = contaboInstance.ipConfig;
+        instance.macAddress = contaboInstance.macAddress;
+        instance.productType = contaboInstance.productType;
+        instance.productName = contaboInstance.productName;
+        instance.defaultUser = contaboInstance.defaultUser || '';
+        instance.additionalIps =
+            contaboInstance.additionalIps?.map((ip) => ip.v4.ip || '') || [];
+        if (contaboInstance.createdDate) {
+            instance.createdAt = new Date(contaboInstance.createdDate);
+        }
+        if (contaboInstance.cancelDate) {
+            instance.cancelDate = new Date(contaboInstance.cancelDate);
+        }
+        instance.metadata = {
+            vHostId: contaboInstance.vHostId,
+            vHostName: contaboInstance.vHostName,
+            vHostNumber: contaboInstance.vHostNumber,
+            tenantId: contaboInstance.tenantId,
+            imageId: contaboInstance.imageId,
+            productId: contaboInstance.productId,
+            errorMessage: contaboInstance.errorMessage,
+            sshKeys: contaboInstance.sshKeys,
+        };
+        return instance;
+    }
+    mapContaboStatus(status) {
+        switch (status?.toLowerCase()) {
+            case 'running':
+                return instance_status_enum_1.InstanceStatus.RUNNING;
+            case 'stopped':
+                return instance_status_enum_1.InstanceStatus.STOPPED;
+            case 'starting':
+                return instance_status_enum_1.InstanceStatus.STARTING;
+            case 'stopping':
+                return instance_status_enum_1.InstanceStatus.STOPPING;
+            case 'provisioning':
+                return instance_status_enum_1.InstanceStatus.PROVISIONING;
+            case 'error':
+                return instance_status_enum_1.InstanceStatus.ERROR;
+            default:
+                return instance_status_enum_1.InstanceStatus.UNKNOWN;
+        }
+    }
+    async listSSHKeys() {
+        return [];
+    }
+    async getNodeSizes() {
+        throw new common_1.NotImplementedException('Contabo provider: getNodeSizes not yet implemented');
+    }
+    async getPricing(query) {
+        throw new common_1.NotImplementedException('Contabo provider: getPricing not yet implemented');
+    }
+    generateSyntheticLabels(serverName) {
+        if (!serverName.startsWith(this.FLUI_PREFIX)) {
+            return [];
+        }
+        const parts = serverName.split('-');
+        const labels = [{ key: 'managed-by', value: 'flui-cloud' }];
+        if (parts.length > 2 && parts[1] === 'cluster') {
+            labels.push({ key: 'flui-resource-type', value: 'cluster-node' });
+            if (parts.length > 4) {
+                const clusterName = parts[3];
+                const nodeType = parts[4];
+                labels.push({ key: 'flui-cluster-name', value: clusterName });
+                if (nodeType === 'master' || nodeType === 'worker') {
+                    labels.push({ key: 'flui-node-type', value: nodeType });
+                }
+            }
+        }
+        else {
+            labels.push({ key: 'flui-resource-type', value: 'server' });
+        }
+        return labels;
+    }
+    isFluiManagedByName(serverName) {
+        return serverName.startsWith(this.FLUI_PREFIX);
+    }
+    async createSSHKey(name, publicKey, labels) {
+        throw new common_1.NotImplementedException('Contabo provider: SSH key creation not yet implemented. Configure SSH keys manually in the Contabo dashboard.');
+    }
+    async deleteSSHKey(providerKeyId) {
+        this.logger.warn(`Contabo provider: SSH key deletion not implemented. Key ${providerKeyId} must be deleted manually from the Contabo dashboard.`);
+    }
+    async getSSHKey(providerKeyId) {
+        throw new common_1.NotImplementedException(`Contabo provider: SSH key retrieval not yet implemented. Key ${providerKeyId} details not available.`);
+    }
+    async updateServerLabels(serverId, labels) {
+        this.logger.warn(`Contabo provider: label updates not supported. Server ${serverId} labels cannot be updated via API.`);
+    }
+};
+exports.ContaboProviderService = ContaboProviderService;
+exports.ContaboProviderService = ContaboProviderService = ContaboProviderService_1 = __decorate([
+    (0, common_1.Injectable)(),
+    __param(1, (0, common_1.Inject)('ICredentialProvider')),
+    __metadata("design:paramtypes", [config_1.ConfigService, Object, label_service_1.LabelService])
+], ContaboProviderService);

package/lib/src/modules/providers/services/credential-provider.service.d.ts

@@ -0,0 +1,17 @@
+import { ICredentialProvider, AccessKeyPair } from '../interfaces/credential-provider.interface';
+import { CloudProvider } from '../enums/cloud-provider.enum';
+import { BearerTokenDto } from '../../access/dto/bearer-token.dto';
+import { ProviderCredentialsRepository } from '../../access/repositories/provider-credentials.repository';
+import { ApiTokenRepository } from '../../access/repositories/api-token.repository';
+import { KeyStorageService } from '../../access/services/key-storage.service';
+import { CredentialPurpose } from '../../access/enums/credential-purpose.enum';
+export declare class CredentialProviderService implements ICredentialProvider {
+    private readonly providerCredentialsRepository;
+    private readonly apiTokenRepository;
+    private readonly keyStorage;
+    constructor(providerCredentialsRepository: ProviderCredentialsRepository, apiTokenRepository: ApiTokenRepository, keyStorage: KeyStorageService);
+    getActiveApiToken(provider: CloudProvider, purpose?: CredentialPurpose): Promise<string>;
+    getActiveAccessKeyPair(provider: CloudProvider, purpose?: CredentialPurpose): Promise<AccessKeyPair>;
+    getActiveBearerToken(provider: CloudProvider): Promise<BearerTokenDto>;
+    private getDecryptApiToken;
+}

package/lib/src/modules/providers/services/credential-provider.service.js

@@ -0,0 +1,78 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.CredentialProviderService = void 0;
+const common_1 = require("@nestjs/common");
+const credentials_entity_1 = require("../../management/entities/credentials.entity");
+const provider_credentials_repository_1 = require("../../access/repositories/provider-credentials.repository");
+const api_token_repository_1 = require("../../access/repositories/api-token.repository");
+const key_storage_service_1 = require("../../access/services/key-storage.service");
+const credential_purpose_enum_1 = require("../../access/enums/credential-purpose.enum");
+let CredentialProviderService = class CredentialProviderService {
+    constructor(providerCredentialsRepository, apiTokenRepository, keyStorage) {
+        this.providerCredentialsRepository = providerCredentialsRepository;
+        this.apiTokenRepository = apiTokenRepository;
+        this.keyStorage = keyStorage;
+    }
+    async getActiveApiToken(provider, purpose = credential_purpose_enum_1.CredentialPurpose.COMPUTE) {
+        const tokens = await this.apiTokenRepository.findByProviderAndPurpose(provider, purpose);
+        if (!tokens || tokens.length === 0) {
+            throw new common_1.NotFoundException('No active API token found');
+        }
+        const token = tokens[0];
+        return await this.getDecryptApiToken(token.id);
+    }
+    async getActiveAccessKeyPair(provider, purpose = credential_purpose_enum_1.CredentialPurpose.COMPUTE) {
+        const tokens = await this.apiTokenRepository.findByProviderAndPurpose(provider, purpose);
+        const token = tokens?.find((t) => t.credential_type === credentials_entity_1.CredentialType.ACCESS_KEY_SECRET);
+        if (!token) {
+            throw new common_1.NotFoundException(`No active access key pair found for provider ${provider}`);
+        }
+        const secretKey = this.keyStorage.decryptKeyFromString(token.encrypted_token);
+        const accessKey = token.encrypted_access_key
+            ? this.keyStorage.decryptKeyFromString(token.encrypted_access_key)
+            : '';
+        return { accessKey, secretKey };
+    }
+    async getActiveBearerToken(provider) {
+        const providerCredentials = await this.providerCredentialsRepository.findByProvider(provider);
+        if (!providerCredentials || providerCredentials.length === 0) {
+            throw new common_1.NotFoundException('No active credentials found');
+        }
+        const credentials = providerCredentials[0];
+        // Return the bearer token data
+        return {
+            access_token: credentials.access_token,
+            refresh_token: credentials.refresh_token,
+            expires_in: credentials.token_expires_at
+                ? Math.floor((credentials.token_expires_at.getTime() - Date.now()) / 1000)
+                : 3600,
+            token_type: 'Bearer',
+            scope: '',
+        };
+    }
+    async getDecryptApiToken(id) {
+        try {
+            const encryptedToken = await this.apiTokenRepository.getEncryptedToken(id);
+            return this.keyStorage.decryptKeyFromString(encryptedToken);
+        }
+        catch {
+            throw new common_1.NotFoundException(`API token with ID ${id} not found`);
+        }
+    }
+};
+exports.CredentialProviderService = CredentialProviderService;
+exports.CredentialProviderService = CredentialProviderService = __decorate([
+    (0, common_1.Injectable)(),
+    __metadata("design:paramtypes", [provider_credentials_repository_1.ProviderCredentialsRepository,
+        api_token_repository_1.ApiTokenRepository,
+        key_storage_service_1.KeyStorageService])
+], CredentialProviderService);

package/lib/src/modules/providers/services/dns-provider.factory.d.ts

@@ -0,0 +1,5 @@
+/**
+ * @deprecated Import from '../core/factories/dns-provider.factory' or from the module index.
+ * This file is kept for backwards compatibility.
+ */
+export { DnsProviderFactory } from '../core/factories/dns-provider.factory';

package/lib/src/modules/providers/services/dns-provider.factory.js

@@ -0,0 +1,9 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DnsProviderFactory = void 0;
+/**
+ * @deprecated Import from '../core/factories/dns-provider.factory' or from the module index.
+ * This file is kept for backwards compatibility.
+ */
+var dns_provider_factory_1 = require("../core/factories/dns-provider.factory");
+Object.defineProperty(exports, "DnsProviderFactory", { enumerable: true, get: function () { return dns_provider_factory_1.DnsProviderFactory; } });

package/lib/src/modules/providers/services/firewall-provider.factory.d.ts

@@ -0,0 +1,5 @@
+/**
+ * @deprecated Import from '../core/factories/firewall-provider.factory' or from the module index.
+ * This file is kept for backwards compatibility.
+ */
+export { FirewallProviderFactory } from '../core/factories/firewall-provider.factory';

package/lib/src/modules/providers/services/firewall-provider.factory.js

@@ -0,0 +1,9 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.FirewallProviderFactory = void 0;
+/**
+ * @deprecated Import from '../core/factories/firewall-provider.factory' or from the module index.
+ * This file is kept for backwards compatibility.
+ */
+var firewall_provider_factory_1 = require("../core/factories/firewall-provider.factory");
+Object.defineProperty(exports, "FirewallProviderFactory", { enumerable: true, get: function () { return firewall_provider_factory_1.FirewallProviderFactory; } });

package/lib/src/modules/providers/services/hetzner-dns.service.d.ts

@@ -0,0 +1,71 @@
+import { ConfigService } from '@nestjs/config';
+import { IDnsProvider, DnsZoneInfo, DnsRecordInfo, CreateDnsRecordConfig, UpdateDnsRecordConfig } from '../interfaces/dns-provider.interface';
+import { ICredentialProvider } from '../interfaces/credential-provider.interface';
+/**
+ * Hetzner DNS Service - Cloud API implementation
+ *
+ * Uses the Hetzner Cloud API (api.hetzner.cloud/v1) with the same Bearer token
+ * as other Hetzner Cloud services. The Cloud API uses RRSets (grouped by name+type)
+ * instead of individual records. This service maps between the IDnsProvider
+ * individual record interface and the RRSet model.
+ *
+ * Record IDs are composed as "{name}/{type}:{value}" to uniquely identify
+ * individual values within an RRSet.
+ */
+export declare class HetznerDnsService implements IDnsProvider {
+    private readonly configService;
+    private readonly credentialProvider;
+    private readonly logger;
+    private readonly basePath;
+    private readonly timeout;
+    constructor(configService: ConfigService, credentialProvider: ICredentialProvider);
+    private createAxiosInstance;
+    private createConfiguration;
+    private createZonesApi;
+    private createRRSetsApi;
+    listZones(): Promise<DnsZoneInfo[]>;
+    getZone(zoneId: string): Promise<DnsZoneInfo | null>;
+    getZoneByName(name: string): Promise<DnsZoneInfo | null>;
+    listRecords(zoneId: string): Promise<DnsRecordInfo[]>;
+    getRecord(zoneId: string, recordId: string): Promise<DnsRecordInfo | null>;
+    createRecord(config: CreateDnsRecordConfig): Promise<DnsRecordInfo>;
+    updateRecord(config: UpdateDnsRecordConfig): Promise<DnsRecordInfo>;
+    deleteRecord(zoneId: string, recordId: string): Promise<void>;
+    bulkCreateRecords(zoneId: string, records: CreateDnsRecordConfig[]): Promise<DnsRecordInfo[]>;
+    purgeARecords(zoneId: string): Promise<number>;
+    testConnection(): Promise<{
+        success: boolean;
+        error?: string;
+    }>;
+    /**
+     * Replace all records in an RRSet using the set-records endpoint.
+     * The Cloud API uses POST /zones/{id}/rrsets/{name}/{type}/records
+     * with body { records: [...] } to replace all record values.
+     *
+     * Since the generated client's updateZoneRrset only supports label changes,
+     * we use a direct axios call for the set-records operation.
+     */
+    private setRRSetRecords;
+    private applyLabels;
+    /**
+     * Remove a single value from an RRSet.
+     * If it's the last value, deletes the entire RRSet.
+     */
+    private removeValueFromRRSet;
+    /**
+     * Compose a synthetic record ID from name, type, and value.
+     * Format: "{name}/{type}:{value}"
+     */
+    private composeRecordId;
+    /**
+     * Parse a synthetic record ID back into its components.
+     * Expected format: "{name}/{type}:{value}"
+     */
+    private parseRecordId;
+    /**
+     * Flatten an RRSet into individual DnsRecordInfo entries.
+     * Each record value becomes a separate entry with a composed recordId.
+     */
+    private flattenRRSet;
+    private mapZone;
+}