@futo-org/backups-orchestrator-api 0.38.0 → 0.40.0

package/dist/enum.js

@@ -1,11 +1,12 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.ResticTagPrefix = exports.TelemetryLevel = exports.BootstrapStatus = exports.InternalEvent = exports.TaskType = exports.TaskStatus = exports.BackendType = exports.ConfigurationKey = exports.ImmichCookie = exports.CookieName = void 0;
+exports.ResticTagPrefix = exports.TelemetryLevel = exports.BootstrapStatus = exports.DeviceFlowFailureReason = exports.DeviceFlowEventType = exports.InternalEvent = exports.TaskType = exports.TaskStatus = exports.BackendType = exports.MetadataKey = exports.ConfigurationKey = exports.TicketAction = exports.ImmichCookie = exports.CookieName = void 0;
 var CookieName;
 (function (CookieName) {
     CookieName["NextUrl"] = "sdk-next";
     CookieName["OidcState"] = "sdk-oidc-state";
     CookieName["OidcCodeVerifier"] = "sdk-oidc-code-verifier";
+    CookieName["SessionToken"] = "sdk-session";
     CookieName["YuccaAccessToken"] = "yucca-access-token";
     CookieName["YuccaOidcState"] = "yucca-oidc-state";
     CookieName["YuccaOidcCodeVerifier"] = "yucca-oidc-code-verifier";
@@ -14,6 +15,11 @@ var ImmichCookie;
 (function (ImmichCookie) {
     ImmichCookie["MaintenanceToken"] = "immich_maintenance_token";
 })(ImmichCookie || (exports.ImmichCookie = ImmichCookie = {}));
+var TicketAction;
+(function (TicketAction) {
+    TicketAction["DeleteRepository"] = "repository.delete";
+    TicketAction["DisableWorm"] = "repository.disable-worm";
+})(TicketAction || (exports.TicketAction = TicketAction = {}));
 var ConfigurationKey;
 (function (ConfigurationKey) {
     ConfigurationKey["EncryptionKey"] = "encryption-key";
@@ -21,7 +27,12 @@ var ConfigurationKey;
     ConfigurationKey["Telemetry"] = "telemetry";
     ConfigurationKey["SkippedOnboardingExtraConfig"] = "skipped-onboarding-extra-config";
     ConfigurationKey["ResticOptionRestConnections"] = "restic-o-rest-connections";
+    ConfigurationKey["SessionSecret"] = "session-secret";
 })(ConfigurationKey || (exports.ConfigurationKey = ConfigurationKey = {}));
+var MetadataKey;
+(function (MetadataKey) {
+    MetadataKey["PublicRoute"] = "public-route";
+})(MetadataKey || (exports.MetadataKey = MetadataKey = {}));
 var BackendType;
 (function (BackendType) {
     BackendType["Yucca"] = "yucca";
@@ -46,6 +57,19 @@ var InternalEvent;
 (function (InternalEvent) {
     InternalEvent["ModuleConfigUpdated"] = "yucca.moduleConfig.updated";
 })(InternalEvent || (exports.InternalEvent = InternalEvent = {}));
+var DeviceFlowEventType;
+(function (DeviceFlowEventType) {
+    DeviceFlowEventType["Start"] = "START";
+    DeviceFlowEventType["Success"] = "SUCCESS";
+    DeviceFlowEventType["Failure"] = "FAILURE";
+})(DeviceFlowEventType || (exports.DeviceFlowEventType = DeviceFlowEventType = {}));
+var DeviceFlowFailureReason;
+(function (DeviceFlowFailureReason) {
+    DeviceFlowFailureReason["NotConnected"] = "NOT_CONNECTED";
+    DeviceFlowFailureReason["DeviceFlowFailed"] = "DEVICE_FLOW_FAILED";
+    DeviceFlowFailureReason["WrongAccount"] = "WRONG_ACCOUNT";
+    DeviceFlowFailureReason["Unknown"] = "UNKNOWN";
+})(DeviceFlowFailureReason || (exports.DeviceFlowFailureReason = DeviceFlowFailureReason = {}));
 var BootstrapStatus;
 (function (BootstrapStatus) {
     BootstrapStatus["NotReady"] = "not-ready";

package/dist/enum.js.map

@@ -1 +1 @@
-{"version":3,"file":"enum.js","sourceRoot":"","sources":["../src/enum.ts"],"names":[],"mappings":";;;AAAA,IAAY,UAOX;AAPD,WAAY,UAAU;IACpB,kCAAoB,CAAA;IACpB,0CAA4B,CAAA;IAC5B,yDAA2C,CAAA;IAC3C,qDAAuC,CAAA;IACvC,iDAAmC,CAAA;IACnC,gEAAkD,CAAA;AACpD,CAAC,EAPW,UAAU,0BAAV,UAAU,QAOrB;AAED,IAAY,YAEX;AAFD,WAAY,YAAY;IACtB,6DAA6C,CAAA;AAC/C,CAAC,EAFW,YAAY,4BAAZ,YAAY,QAEvB;AAED,IAAY,gBAMX;AAND,WAAY,gBAAgB;IAC1B,oDAAgC,CAAA;IAChC,kDAA8B,CAAA;IAC9B,2CAAuB,CAAA;IACvB,oFAAgE,CAAA;IAChE,6EAAyD,CAAA;AAC3D,CAAC,EANW,gBAAgB,gCAAhB,gBAAgB,QAM3B;AAED,IAAY,WAIX;AAJD,WAAY,WAAW;IACrB,8BAAe,CAAA;IACf,8BAAe,CAAA;IACf,wBAAS,CAAA;AACX,CAAC,EAJW,WAAW,2BAAX,WAAW,QAItB;AAED,IAAY,UAKX;AALD,WAAY,UAAU;IACpB,uCAAyB,CAAA;IACzB,mCAAqB,CAAA;IACrB,2BAAa,CAAA;IACb,+BAAiB,CAAA;AACnB,CAAC,EALW,UAAU,0BAAV,UAAU,QAKrB;AAED,IAAY,QAKX;AALD,WAAY,QAAQ;IAClB,iCAAqB,CAAA;IACrB,+BAAmB,CAAA;IACnB,6BAAiB,CAAA;IACjB,6BAAiB,CAAA;AACnB,CAAC,EALW,QAAQ,wBAAR,QAAQ,QAKnB;AAED,IAAY,aAEX;AAFD,WAAY,aAAa;IACvB,mEAAkD,CAAA;AACpD,CAAC,EAFW,aAAa,6BAAb,aAAa,QAExB;AAED,IAAY,eAIX;AAJD,WAAY,eAAe;IACzB,yCAAsB,CAAA;IACtB,kCAAe,CAAA;IACf,kCAAe,CAAA;AACjB,CAAC,EAJW,eAAe,+BAAf,eAAe,QAI1B;AAED,IAAY,cAGX;AAHD,WAAY,cAAc;IACxB,+BAAa,CAAA;IACb,+BAAa,CAAA;AACf,CAAC,EAHW,cAAc,8BAAd,cAAc,QAGzB;AAED,IAAY,eAEX;AAFD,WAAY,eAAe;IACzB,yEAAsD,CAAA;AACxD,CAAC,EAFW,eAAe,+BAAf,eAAe,QAE1B"}
+{"version":3,"file":"enum.js","sourceRoot":"","sources":["../src/enum.ts"],"names":[],"mappings":";;;AAAA,IAAY,UAQX;AARD,WAAY,UAAU;IACpB,kCAAoB,CAAA;IACpB,0CAA4B,CAAA;IAC5B,yDAA2C,CAAA;IAC3C,0CAA4B,CAAA;IAC5B,qDAAuC,CAAA;IACvC,iDAAmC,CAAA;IACnC,gEAAkD,CAAA;AACpD,CAAC,EARW,UAAU,0BAAV,UAAU,QAQrB;AAED,IAAY,YAEX;AAFD,WAAY,YAAY;IACtB,6DAA6C,CAAA;AAC/C,CAAC,EAFW,YAAY,4BAAZ,YAAY,QAEvB;AAED,IAAY,YAGX;AAHD,WAAY,YAAY;IACtB,sDAAsC,CAAA;IACtC,uDAAuC,CAAA;AACzC,CAAC,EAHW,YAAY,4BAAZ,YAAY,QAGvB;AAED,IAAY,gBAOX;AAPD,WAAY,gBAAgB;IAC1B,oDAAgC,CAAA;IAChC,kDAA8B,CAAA;IAC9B,2CAAuB,CAAA;IACvB,oFAAgE,CAAA;IAChE,6EAAyD,CAAA;IACzD,oDAAgC,CAAA;AAClC,CAAC,EAPW,gBAAgB,gCAAhB,gBAAgB,QAO3B;AAED,IAAY,WAEX;AAFD,WAAY,WAAW;IACrB,2CAA4B,CAAA;AAC9B,CAAC,EAFW,WAAW,2BAAX,WAAW,QAEtB;AAED,IAAY,WAIX;AAJD,WAAY,WAAW;IACrB,8BAAe,CAAA;IACf,8BAAe,CAAA;IACf,wBAAS,CAAA;AACX,CAAC,EAJW,WAAW,2BAAX,WAAW,QAItB;AAED,IAAY,UAKX;AALD,WAAY,UAAU;IACpB,uCAAyB,CAAA;IACzB,mCAAqB,CAAA;IACrB,2BAAa,CAAA;IACb,+BAAiB,CAAA;AACnB,CAAC,EALW,UAAU,0BAAV,UAAU,QAKrB;AAED,IAAY,QAKX;AALD,WAAY,QAAQ;IAClB,iCAAqB,CAAA;IACrB,+BAAmB,CAAA;IACnB,6BAAiB,CAAA;IACjB,6BAAiB,CAAA;AACnB,CAAC,EALW,QAAQ,wBAAR,QAAQ,QAKnB;AAED,IAAY,aAEX;AAFD,WAAY,aAAa;IACvB,mEAAkD,CAAA;AACpD,CAAC,EAFW,aAAa,6BAAb,aAAa,QAExB;AAED,IAAY,mBAIX;AAJD,WAAY,mBAAmB;IAC7B,sCAAe,CAAA;IACf,0CAAmB,CAAA;IACnB,0CAAmB,CAAA;AACrB,CAAC,EAJW,mBAAmB,mCAAnB,mBAAmB,QAI9B;AAED,IAAY,uBAKX;AALD,WAAY,uBAAuB;IACjC,yDAA8B,CAAA;IAC9B,kEAAuC,CAAA;IACvC,yDAA8B,CAAA;IAC9B,8CAAmB,CAAA;AACrB,CAAC,EALW,uBAAuB,uCAAvB,uBAAuB,QAKlC;AAED,IAAY,eAIX;AAJD,WAAY,eAAe;IACzB,yCAAsB,CAAA;IACtB,kCAAe,CAAA;IACf,kCAAe,CAAA;AACjB,CAAC,EAJW,eAAe,+BAAf,eAAe,QAI1B;AAED,IAAY,cAGX;AAHD,WAAY,cAAc;IACxB,+BAAa,CAAA;IACb,+BAAa,CAAA;AACf,CAAC,EAHW,cAAc,8BAAd,cAAc,QAGzB;AAED,IAAY,eAEX;AAFD,WAAY,eAAe;IACzB,yEAAsD,CAAA;AACxD,CAAC,EAFW,eAAe,+BAAf,eAAe,QAE1B"}

package/dist/events/events.gateway.d.ts

@@ -6,6 +6,7 @@ import { LocalRepositoryDto, RunDto } from '../dto/repository.dto';
 import { RunningTaskDto } from '../dto/runningTasks.dto';
 import { ScheduleDto } from '../dto/schedule.dto';
 import { ModuleConfigRepository } from '../repositories/moduleConfig.repository';
+import { SessionService } from '../services/session.service';
 export type GatewayEvent = {
     type: 'BackendCreate';
     backend: BackendDto;
@@ -50,12 +51,11 @@ export type GatewayEvent = {
     runId: string;
     repositoryId: string;
     run: Partial<RunDto>;
-} | {
-    type: 'DeviceFlowFailure';
 };
 export declare class EventsGateway implements OnGatewayConnection {
     private readonly moduleConfig;
-    constructor(moduleConfig: ModuleConfigRepository);
+    private readonly session;
+    constructor(moduleConfig: ModuleConfigRepository, session: SessionService);
     server?: Server;
     publish(event: GatewayEvent): void;
     emit(event: GatewayEvent): void;

package/dist/events/events.gateway.js

@@ -13,10 +13,13 @@ exports.EventsGateway = void 0;
 const websockets_1 = require("@nestjs/websockets");
 const socket_io_1 = require("socket.io");
 const moduleConfig_repository_1 = require("../repositories/moduleConfig.repository");
+const session_service_1 = require("../services/session.service");
 let EventsGateway = class EventsGateway {
     moduleConfig;
-    constructor(moduleConfig) {
+    session;
+    constructor(moduleConfig, session) {
         this.moduleConfig = moduleConfig;
+        this.session = session;
     }
     server;
     publish(event) {
@@ -43,6 +46,13 @@ let EventsGateway = class EventsGateway {
             if (requireWsAuth) {
                 throw new Error('Auth function not set');
             }
+            const configuration = await this.session.cloudConfiguration();
+            if (this.session.isRequired(configuration)) {
+                const session = await this.session.fromCookieHeader(client.handshake.headers.cookie, configuration);
+                if (!session) {
+                    throw new Error('No session cookie.');
+                }
+            }
             return {
                 user: {
                     isAdmin: true,
@@ -63,6 +73,7 @@ exports.EventsGateway = EventsGateway = __decorate([
         path: '/api/yucca/socket.io',
         transports: ['websocket'],
     }),
-    __metadata("design:paramtypes", [moduleConfig_repository_1.ModuleConfigRepository])
+    __metadata("design:paramtypes", [moduleConfig_repository_1.ModuleConfigRepository,
+        session_service_1.SessionService])
 ], EventsGateway);
 //# sourceMappingURL=events.gateway.js.map

package/dist/events/events.gateway.js.map

@@ -1 +1 @@
-{"version":3,"file":"events.gateway.js","sourceRoot":"","sources":["../../src/events/events.gateway.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,mDAA4F;AAC5F,yCAA2C;AAM3C,qFAAiF;AAqE1E,IAAM,aAAa,GAAnB,MAAM,aAAa;IACK;IAA7B,YAA6B,YAAoC;QAApC,iBAAY,GAAZ,YAAY,CAAwB;IAAG,CAAC;IAGrE,MAAM,CAAU;IAEhB,OAAO,CAAC,KAAmB;QACzB,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;QACzC,IAAI,CAAC,YAAY,CAAC,GAAG,EAAE,CAAC,eAAe,EAAE,CAAC,KAAK,CAAC,CAAC;IACnD,CAAC;IAED,IAAI,CAAC,KAAmB;QACtB,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;IAC3C,CAAC;IAED,KAAK,CAAC,gBAAgB,CAAC,MAAc;QACnC,IAAI,CAAC;YACH,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;YACjD,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;gBAClB,MAAM,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC;YACvC,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,CAAC,UAAU,EAAE,CAAC;QACtB,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,YAAY,CAAC,MAAc;QACvC,MAAM,EAAE,YAAY,EAAE,aAAa,EAAE,GAAG,IAAI,CAAC,YAAY,CAAC,GAAG,EAAE,CAAC;QAEhE,IAAI,CAAC,YAAY,EAAE,CAAC;YAClB,IAAI,aAAa,EAAE,CAAC;gBAClB,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;YAC3C,CAAC;YAED,OAAO;gBACL,IAAI,EAAE;oBACJ,OAAO,EAAE,IAAI;iBACd;aACF,CAAC;QACJ,CAAC;QAED,OAAO,YAAY,CAAC,MAAM,CAAC,CAAC;IAC9B,CAAC;CACF,CAAA;AA3CY,sCAAa;AAIxB;IADC,IAAA,4BAAe,GAAE;8BACT,kBAAM;6CAAC;wBAJL,aAAa;IALzB,IAAA,6BAAgB,EAAC;QAChB,IAAI,EAAE,KAAK;QACX,IAAI,EAAE,sBAAsB;QAC5B,UAAU,EAAE,CAAC,WAAW,CAAC;KAC1B,CAAC;qCAE2C,gDAAsB;GADtD,aAAa,CA2CzB"}
+{"version":3,"file":"events.gateway.js","sourceRoot":"","sources":["../../src/events/events.gateway.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,mDAA4F;AAC5F,yCAA2C;AAM3C,qFAAiF;AACjF,iEAA6D;AAkEtD,IAAM,aAAa,GAAnB,MAAM,aAAa;IAEL;IACA;IAFnB,YACmB,YAAoC,EACpC,OAAuB;QADvB,iBAAY,GAAZ,YAAY,CAAwB;QACpC,YAAO,GAAP,OAAO,CAAgB;IACvC,CAAC;IAGJ,MAAM,CAAU;IAEhB,OAAO,CAAC,KAAmB;QACzB,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;QACzC,IAAI,CAAC,YAAY,CAAC,GAAG,EAAE,CAAC,eAAe,EAAE,CAAC,KAAK,CAAC,CAAC;IACnD,CAAC;IAED,IAAI,CAAC,KAAmB;QACtB,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;IAC3C,CAAC;IAED,KAAK,CAAC,gBAAgB,CAAC,MAAc;QACnC,IAAI,CAAC;YACH,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;YACjD,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;gBAClB,MAAM,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC;YACvC,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,CAAC,UAAU,EAAE,CAAC;QACtB,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,YAAY,CAAC,MAAc;QACvC,MAAM,EAAE,YAAY,EAAE,aAAa,EAAE,GAAG,IAAI,CAAC,YAAY,CAAC,GAAG,EAAE,CAAC;QAEhE,IAAI,CAAC,YAAY,EAAE,CAAC;YAClB,IAAI,aAAa,EAAE,CAAC;gBAClB,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;YAC3C,CAAC;YAED,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,kBAAkB,EAAE,CAAC;YAE9D,IAAI,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,aAAa,CAAC,EAAE,CAAC;gBAC3C,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,gBAAgB,CAAC,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;gBAEpG,IAAI,CAAC,OAAO,EAAE,CAAC;oBACb,MAAM,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAC;gBACxC,CAAC;YACH,CAAC;YAED,OAAO;gBACL,IAAI,EAAE;oBACJ,OAAO,EAAE,IAAI;iBACd;aACF,CAAC;QACJ,CAAC;QAED,OAAO,YAAY,CAAC,MAAM,CAAC,CAAC;IAC9B,CAAC;CACF,CAAA;AAxDY,sCAAa;AAOxB;IADC,IAAA,4BAAe,GAAE;8BACT,kBAAM;6CAAC;wBAPL,aAAa;IALzB,IAAA,6BAAgB,EAAC;QAChB,IAAI,EAAE,KAAK;QACX,IAAI,EAAE,sBAAsB;QAC5B,UAAU,EAAE,CAAC,WAAW,CAAC;KAC1B,CAAC;qCAGiC,gDAAsB;QAC3B,gCAAc;GAH/B,aAAa,CAwDzB"}

package/dist/middleware/session.guard.d.ts

@@ -0,0 +1,14 @@
+import { CanActivate, ExecutionContext } from '@nestjs/common';
+import { Reflector } from '@nestjs/core';
+import { Request } from 'express';
+import { Session, SessionService } from '../services/session.service';
+export declare const PublicRoute: () => MethodDecorator;
+export interface SessionRequest extends Request {
+    session?: Session;
+}
+export declare class SessionGuard implements CanActivate {
+    private readonly reflector;
+    private readonly session;
+    constructor(reflector: Reflector, session: SessionService);
+    canActivate(context: ExecutionContext): Promise<boolean>;
+}

package/dist/middleware/session.guard.js

@@ -0,0 +1,49 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SessionGuard = exports.PublicRoute = void 0;
+const common_1 = require("@nestjs/common");
+const core_1 = require("@nestjs/core");
+const enum_1 = require("../enum");
+const session_service_1 = require("../services/session.service");
+const PublicRoute = () => (0, common_1.SetMetadata)(enum_1.MetadataKey.PublicRoute, true);
+exports.PublicRoute = PublicRoute;
+let SessionGuard = class SessionGuard {
+    reflector;
+    session;
+    constructor(reflector, session) {
+        this.reflector = reflector;
+        this.session = session;
+    }
+    async canActivate(context) {
+        const request = context.switchToHttp().getRequest();
+        const configuration = await this.session.cloudConfiguration();
+        request.session = await this.session.fromCookieHeader(request.headers.cookie, configuration);
+        const isPublic = this.reflector.getAllAndOverride(enum_1.MetadataKey.PublicRoute, [
+            context.getHandler(),
+            context.getClass(),
+        ]);
+        if (isPublic || !this.session.isRequired(configuration)) {
+            return true;
+        }
+        if (!request.session) {
+            throw new common_1.UnauthorizedException('Log in to FUTO Backups to manage this instance');
+        }
+        return true;
+    }
+};
+exports.SessionGuard = SessionGuard;
+exports.SessionGuard = SessionGuard = __decorate([
+    (0, common_1.Injectable)(),
+    __metadata("design:paramtypes", [core_1.Reflector,
+        session_service_1.SessionService])
+], SessionGuard);
+//# sourceMappingURL=session.guard.js.map

package/dist/middleware/session.guard.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"session.guard.js","sourceRoot":"","sources":["../../src/middleware/session.guard.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,2CAA+G;AAC/G,uCAAyC;AAEzC,kCAAsC;AACtC,iEAAsE;AAE/D,MAAM,WAAW,GAAG,GAAoB,EAAE,CAAC,IAAA,oBAAW,EAAC,kBAAW,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;AAAhF,QAAA,WAAW,eAAqE;AAOtF,IAAM,YAAY,GAAlB,MAAM,YAAY;IAEJ;IACA;IAFnB,YACmB,SAAoB,EACpB,OAAuB;QADvB,cAAS,GAAT,SAAS,CAAW;QACpB,YAAO,GAAP,OAAO,CAAgB;IACvC,CAAC;IAEJ,KAAK,CAAC,WAAW,CAAC,OAAyB;QACzC,MAAM,OAAO,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC,UAAU,EAAkB,CAAC;QACpE,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,kBAAkB,EAAE,CAAC;QAC9D,OAAO,CAAC,OAAO,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,gBAAgB,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;QAE7F,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,iBAAiB,CAAsB,kBAAW,CAAC,WAAW,EAAE;YAC9F,OAAO,CAAC,UAAU,EAAE;YACpB,OAAO,CAAC,QAAQ,EAAE;SACnB,CAAC,CAAC;QAEH,IAAI,QAAQ,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,aAAa,CAAC,EAAE,CAAC;YACxD,OAAO,IAAI,CAAC;QACd,CAAC;QAED,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;YACrB,MAAM,IAAI,8BAAqB,CAAC,gDAAgD,CAAC,CAAC;QACpF,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;CACF,CAAA;AA1BY,oCAAY;uBAAZ,YAAY;IADxB,IAAA,mBAAU,GAAE;qCAGmB,gBAAS;QACX,gCAAc;GAH/B,YAAY,CA0BxB"}

package/dist/moduleConfig.d.ts

@@ -28,6 +28,7 @@ export type ModuleConfig = {
     wellKnownUrl?: string;
     externalBaseUrl?: string;
     requireWsAuth?: boolean;
+    requireSession?: boolean;
     requireLock?: boolean;
     developmentMode?: boolean;
     authenticate?: AuthenticateFn;

package/dist/orchestrationApi.module.d.ts

@@ -36,11 +36,12 @@ import { RepositoryService } from './services/repository.service';
 import { RunHistoryService } from './services/runHistory.service';
 import { RunningTasksService } from './services/runningTasks.service';
 import { ScheduleService } from './services/schedule.service';
+import { SessionService } from './services/session.service';
 import { TelemetryService } from './services/telemetry.service';
 import { YuccaService } from './services/yucca.service';
 export declare const controllers: (typeof AuthController | typeof BackendController | typeof DevelopmentController | typeof FilesystemController | typeof IntegrationsController | typeof OnboardingController | typeof RepositoryController | typeof RunHistoryController | typeof RunningTasksController | typeof ScheduleController)[];
 export declare const repositories: (typeof ModuleConfigRepository | typeof LoggingRepository | typeof BackendRepository | typeof ConfigRepository | typeof RepositoryRepository | typeof BootstrapRepository | typeof StorageRepository | typeof DatabaseRepository | typeof RunHistoryRepository | typeof RepositoryIntegrationImmichRepository | typeof RunningTasksRepository | typeof ScheduleRepository | typeof RepositoryLocalMetricsRepository | typeof RepositoryPathRepository | typeof ResticRepository)[];
-export declare const services: (typeof TelemetryService | typeof AuthService | typeof BackendService | typeof RepositoryService | typeof BootstrapService | typeof ScheduleService | typeof DevelopmentService | typeof FilesystemService | typeof IntegrationsService | typeof OnboardingService | typeof RunningTasksService | typeof RunHistoryService | typeof YuccaService)[];
+export declare const services: (typeof SessionService | typeof TelemetryService | typeof AuthService | typeof BackendService | typeof RepositoryService | typeof BootstrapService | typeof ScheduleService | typeof DevelopmentService | typeof FilesystemService | typeof IntegrationsService | typeof OnboardingService | typeof RunningTasksService | typeof RunHistoryService | typeof YuccaService)[];
 export interface OrchestrationApiModuleAsyncOptions extends Pick<ModuleMetadata, 'imports'> {
     inject?: FactoryProvider['inject'];
     useFactory: (...args: any[]) => Promise<Partial<ModuleConfig>> | Partial<ModuleConfig>;

package/dist/orchestrationApi.module.js

@@ -14,6 +14,7 @@ exports.OrchestrationApiModule = exports.services = exports.repositories = expor
 const common_1 = require("@nestjs/common");
 const core_1 = require("@nestjs/core");
 const event_emitter_1 = require("@nestjs/event-emitter");
+const jwt_1 = require("@nestjs/jwt");
 const schedule_1 = require("@nestjs/schedule");
 const better_sqlite3_1 = __importDefault(require("better-sqlite3"));
 const kysely_1 = require("kysely");
@@ -33,7 +34,9 @@ const runningTasks_controller_1 = require("./controllers/runningTasks.controller
 const schedule_controller_1 = require("./controllers/schedule.controller");
 const events_gateway_1 = require("./events/events.gateway");
 const telemetry_error_interceptor_1 = require("./interceptors/telemetry-error.interceptor");
+const session_guard_1 = require("./middleware/session.guard");
 const moduleConfig_1 = require("./moduleConfig");
+const resticProxyPool_1 = require("./proxy/resticProxyPool");
 const backend_repository_1 = require("./repositories/backend.repository");
 const bootstrap_repository_1 = require("./repositories/bootstrap.repository");
 const config_repository_1 = require("./repositories/config.repository");
@@ -60,6 +63,7 @@ const repository_service_1 = require("./services/repository.service");
 const runHistory_service_1 = require("./services/runHistory.service");
 const runningTasks_service_1 = require("./services/runningTasks.service");
 const schedule_service_1 = require("./services/schedule.service");
+const session_service_1 = require("./services/session.service");
 const telemetry_service_1 = require("./services/telemetry.service");
 const yucca_service_1 = require("./services/yucca.service");
 const wellKnown_1 = require("./wellKnown");
@@ -104,6 +108,7 @@ exports.services = [
     runHistory_service_1.RunHistoryService,
     runningTasks_service_1.RunningTasksService,
     schedule_service_1.ScheduleService,
+    session_service_1.SessionService,
     telemetry_service_1.TelemetryService,
     yucca_service_1.YuccaService,
 ];
@@ -154,12 +159,15 @@ let OrchestrationApiModule = OrchestrationApiModule_1 = class OrchestrationApiMo
                     },
                 }),
                 event_emitter_1.EventEmitterModule.forRoot(),
+                jwt_1.JwtModule.register({}),
                 schedule_1.ScheduleModule.forRoot(),
             ],
             controllers: exports.controllers,
             providers: [
                 { provide: core_1.APP_INTERCEPTOR, useClass: telemetry_error_interceptor_1.TelemetryErrorInterceptor },
+                { provide: core_1.APP_GUARD, useClass: session_guard_1.SessionGuard },
                 events_gateway_1.EventsGateway,
+                resticProxyPool_1.ResticProxyPool,
                 ...exports.repositories,
                 ...exports.services,
             ],

package/dist/orchestrationApi.module.js.map

@@ -1 +1 @@
-{"version":3,"file":"orchestrationApi.module.js","sourceRoot":"","sources":["../src/orchestrationApi.module.ts"],"names":[],"mappings":";;;;;;;;;;;;;AAAA,2CAAwF;AACxF,uCAA+C;AAC/C,yDAA2D;AAC3D,+CAAkD;AAClD,oEAAsC;AACtC,mCAAuC;AACvC,iDAA6C;AAC7C,qCAAgD;AAChD,qCAAkC;AAClC,yCAAoC;AACpC,mEAA+D;AAC/D,yEAAqE;AACrE,iFAA6E;AAC7E,+EAA2E;AAC3E,mFAA+E;AAC/E,+EAA2E;AAC3E,+EAA2E;AAC3E,+EAA2E;AAC3E,mFAA+E;AAC/E,2EAAuE;AACvE,4DAAwD;AACxD,4FAAuF;AACvF,iDAAyE;AACzE,0EAAsE;AACtE,8EAA0E;AAC1E,wEAAoE;AACpE,4EAAwE;AACxE,0EAAsE;AACtE,oFAAgF;AAChF,gFAA4E;AAC5E,kHAA8G;AAC9G,wGAAoG;AACpG,wFAAoF;AACpF,wEAAoE;AACpE,gFAA4E;AAC5E,oFAAgF;AAChF,4EAAwE;AACxE,0EAAsE;AACtE,0DAAsD;AACtD,gEAA4D;AAC5D,oEAAgE;AAChE,wEAAoE;AACpE,sEAAkE;AAClE,0EAAsE;AACtE,sEAAkE;AAClE,sEAAkE;AAClE,sEAAkE;AAClE,0EAAsE;AACtE,kEAA8D;AAC9D,oEAAgE;AAChE,4DAAwD;AACxD,2CAA6C;AAEhC,QAAA,WAAW,GAAG;IACzB,gCAAc;IACd,sCAAiB;IACjB,8CAAqB;IACrB,4CAAoB;IACpB,gDAAsB;IACtB,4CAAoB;IACpB,4CAAoB;IACpB,4CAAoB;IACpB,gDAAsB;IACtB,wCAAkB;CACnB,CAAC;AAEW,QAAA,YAAY,GAAG;IAC1B,sCAAiB;IACjB,0CAAmB;IACnB,oCAAgB;IAChB,wCAAkB;IAClB,sCAAiB;IACjB,gDAAsB;IACtB,4CAAoB;IACpB,8EAAqC;IACrC,oEAAgC;IAChC,oDAAwB;IACxB,oCAAgB;IAChB,4CAAoB;IACpB,gDAAsB;IACtB,wCAAkB;IAClB,sCAAiB;CAClB,CAAC;AAEW,QAAA,QAAQ,GAAG;IACtB,0BAAW;IACX,gCAAc;IACd,oCAAgB;IAChB,wCAAkB;IAClB,sCAAiB;IACjB,0CAAmB;IACnB,sCAAiB;IACjB,sCAAiB;IACjB,sCAAiB;IACjB,0CAAmB;IACnB,kCAAe;IACf,oCAAgB;IAChB,4BAAY;CACb,CAAC;AAQF,IAAM,yBAAyB,iCAA/B,MAAM,yBAAyB;IAC7B,MAAM,CAAC,YAAY,CAAC,OAA2C;QAC7D,OAAO;YACL,MAAM,EAAE,2BAAyB;YACjC,OAAO,EAAE,OAAO,CAAC,OAAO,IAAI,EAAE;YAC9B,SAAS,EAAE;gBACT;oBACE,OAAO,EAAE,mCAAoB;oBAC7B,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,EAAE;oBAC5B,UAAU,EAAE,KAAK,EAAE,GAAG,IAAW,EAAyB,EAAE;wBAC1D,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC,CAAC;wBACjD,MAAM,CAAC,SAAS,KAAK,IAAA,mBAAO,EAAC,IAAA,iBAAO,GAAE,EAAE,QAAQ,CAAC,CAAC;wBAClD,0BAAc,CAAC,SAAS,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;wBAC9C,OAAO,MAAsB,CAAC;oBAChC,CAAC;iBACF;aACF;YACD,OAAO,EAAE,CAAC,mCAAoB,CAAC;SAChC,CAAC;IACJ,CAAC;CACF,CAAA;AApBK,yBAAyB;IAD9B,IAAA,eAAM,EAAC,EAAE,CAAC;GACL,yBAAyB,CAoB9B;AAGM,IAAM,sBAAsB,8BAA5B,MAAM,sBAAsB;IACjC,MAAM,CAAC,YAAY,CAAC,OAA2C;QAC7D,MAAM,YAAY,GAAG,yBAAyB,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;QAErE,OAAO;YACL,MAAM,EAAE,wBAAsB;YAC9B,OAAO,EAAE;gBACP,YAAY;gBACZ,4BAAY,CAAC,YAAY,CAAC;oBACxB,SAAS,EAAE,cAAc;oBACzB,OAAO,EAAE,CAAC,YAAY,CAAC;oBACvB,MAAM,EAAE,CAAC,mCAAoB,CAAC;oBAC9B,UAAU,EAAE,CAAC,MAAoB,EAAE,EAAE;wBACnC,IAAI,CAAC,IAAA,oBAAU,EAAC,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC;4BAClC,IAAA,mBAAS,EAAC,MAAM,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;wBACnD,CAAC;wBAED,MAAM,QAAQ,GAAG,IAAI,wBAAQ,CAAC,IAAA,mBAAO,EAAC,MAAM,CAAC,SAAS,EAAE,eAAe,CAAC,CAAC,CAAC;wBAC1E,QAAQ,CAAC,MAAM,CAAC,oBAAoB,CAAC,CAAC;wBAEtC,OAAO;4BACL,OAAO,EAAE,IAAI,sBAAa,CAAC,EAAE,QAAQ,EAAE,CAAC;yBACzC,CAAC;oBACJ,CAAC;iBACF,CAAC;gBACF,kCAAkB,CAAC,OAAO,EAAE;gBAC5B,yBAAc,CAAC,OAAO,EAAE;aACzB;YACD,WAAW,EAAX,mBAAW;YACX,SAAS,EAAE;gBACT,EAAE,OAAO,EAAE,sBAAe,EAAE,QAAQ,EAAE,uDAAyB,EAAE;gBACjE,8BAAa;gBACb,GAAG,oBAAY;gBACf,GAAG,gBAAQ;aACZ;YACD,OAAO,EAAE,CAAC,4BAAY,CAAC;SACxB,CAAC;IACJ,CAAC;CACF,CAAA;AAtCY,wDAAsB;iCAAtB,sBAAsB;IADlC,IAAA,eAAM,EAAC,EAAE,CAAC;GACE,sBAAsB,CAsClC"}
+{"version":3,"file":"orchestrationApi.module.js","sourceRoot":"","sources":["../src/orchestrationApi.module.ts"],"names":[],"mappings":";;;;;;;;;;;;;AAAA,2CAAwF;AACxF,uCAA0D;AAC1D,yDAA2D;AAC3D,qCAAwC;AACxC,+CAAkD;AAClD,oEAAsC;AACtC,mCAAuC;AACvC,iDAA6C;AAC7C,qCAAgD;AAChD,qCAAkC;AAClC,yCAAoC;AACpC,mEAA+D;AAC/D,yEAAqE;AACrE,iFAA6E;AAC7E,+EAA2E;AAC3E,mFAA+E;AAC/E,+EAA2E;AAC3E,+EAA2E;AAC3E,+EAA2E;AAC3E,mFAA+E;AAC/E,2EAAuE;AACvE,4DAAwD;AACxD,4FAAuF;AACvF,8DAA0D;AAC1D,iDAAyE;AACzE,6DAA0D;AAC1D,0EAAsE;AACtE,8EAA0E;AAC1E,wEAAoE;AACpE,4EAAwE;AACxE,0EAAsE;AACtE,oFAAgF;AAChF,gFAA4E;AAC5E,kHAA8G;AAC9G,wGAAoG;AACpG,wFAAoF;AACpF,wEAAoE;AACpE,gFAA4E;AAC5E,oFAAgF;AAChF,4EAAwE;AACxE,0EAAsE;AACtE,0DAAsD;AACtD,gEAA4D;AAC5D,oEAAgE;AAChE,wEAAoE;AACpE,sEAAkE;AAClE,0EAAsE;AACtE,sEAAkE;AAClE,sEAAkE;AAClE,sEAAkE;AAClE,0EAAsE;AACtE,kEAA8D;AAC9D,gEAA4D;AAC5D,oEAAgE;AAChE,4DAAwD;AACxD,2CAA6C;AAEhC,QAAA,WAAW,GAAG;IACzB,gCAAc;IACd,sCAAiB;IACjB,8CAAqB;IACrB,4CAAoB;IACpB,gDAAsB;IACtB,4CAAoB;IACpB,4CAAoB;IACpB,4CAAoB;IACpB,gDAAsB;IACtB,wCAAkB;CACnB,CAAC;AAEW,QAAA,YAAY,GAAG;IAC1B,sCAAiB;IACjB,0CAAmB;IACnB,oCAAgB;IAChB,wCAAkB;IAClB,sCAAiB;IACjB,gDAAsB;IACtB,4CAAoB;IACpB,8EAAqC;IACrC,oEAAgC;IAChC,oDAAwB;IACxB,oCAAgB;IAChB,4CAAoB;IACpB,gDAAsB;IACtB,wCAAkB;IAClB,sCAAiB;CAClB,CAAC;AAEW,QAAA,QAAQ,GAAG;IACtB,0BAAW;IACX,gCAAc;IACd,oCAAgB;IAChB,wCAAkB;IAClB,sCAAiB;IACjB,0CAAmB;IACnB,sCAAiB;IACjB,sCAAiB;IACjB,sCAAiB;IACjB,0CAAmB;IACnB,kCAAe;IACf,gCAAc;IACd,oCAAgB;IAChB,4BAAY;CACb,CAAC;AAQF,IAAM,yBAAyB,iCAA/B,MAAM,yBAAyB;IAC7B,MAAM,CAAC,YAAY,CAAC,OAA2C;QAC7D,OAAO;YACL,MAAM,EAAE,2BAAyB;YACjC,OAAO,EAAE,OAAO,CAAC,OAAO,IAAI,EAAE;YAC9B,SAAS,EAAE;gBACT;oBACE,OAAO,EAAE,mCAAoB;oBAC7B,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,EAAE;oBAC5B,UAAU,EAAE,KAAK,EAAE,GAAG,IAAW,EAAyB,EAAE;wBAC1D,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC,CAAC;wBACjD,MAAM,CAAC,SAAS,KAAK,IAAA,mBAAO,EAAC,IAAA,iBAAO,GAAE,EAAE,QAAQ,CAAC,CAAC;wBAClD,0BAAc,CAAC,SAAS,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;wBAC9C,OAAO,MAAsB,CAAC;oBAChC,CAAC;iBACF;aACF;YACD,OAAO,EAAE,CAAC,mCAAoB,CAAC;SAChC,CAAC;IACJ,CAAC;CACF,CAAA;AApBK,yBAAyB;IAD9B,IAAA,eAAM,EAAC,EAAE,CAAC;GACL,yBAAyB,CAoB9B;AAGM,IAAM,sBAAsB,8BAA5B,MAAM,sBAAsB;IACjC,MAAM,CAAC,YAAY,CAAC,OAA2C;QAC7D,MAAM,YAAY,GAAG,yBAAyB,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;QAErE,OAAO;YACL,MAAM,EAAE,wBAAsB;YAC9B,OAAO,EAAE;gBACP,YAAY;gBACZ,4BAAY,CAAC,YAAY,CAAC;oBACxB,SAAS,EAAE,cAAc;oBACzB,OAAO,EAAE,CAAC,YAAY,CAAC;oBACvB,MAAM,EAAE,CAAC,mCAAoB,CAAC;oBAC9B,UAAU,EAAE,CAAC,MAAoB,EAAE,EAAE;wBACnC,IAAI,CAAC,IAAA,oBAAU,EAAC,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC;4BAClC,IAAA,mBAAS,EAAC,MAAM,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;wBACnD,CAAC;wBAED,MAAM,QAAQ,GAAG,IAAI,wBAAQ,CAAC,IAAA,mBAAO,EAAC,MAAM,CAAC,SAAS,EAAE,eAAe,CAAC,CAAC,CAAC;wBAC1E,QAAQ,CAAC,MAAM,CAAC,oBAAoB,CAAC,CAAC;wBAEtC,OAAO;4BACL,OAAO,EAAE,IAAI,sBAAa,CAAC,EAAE,QAAQ,EAAE,CAAC;yBACzC,CAAC;oBACJ,CAAC;iBACF,CAAC;gBACF,kCAAkB,CAAC,OAAO,EAAE;gBAC5B,eAAS,CAAC,QAAQ,CAAC,EAAE,CAAC;gBACtB,yBAAc,CAAC,OAAO,EAAE;aACzB;YACD,WAAW,EAAX,mBAAW;YACX,SAAS,EAAE;gBACT,EAAE,OAAO,EAAE,sBAAe,EAAE,QAAQ,EAAE,uDAAyB,EAAE;gBACjE,EAAE,OAAO,EAAE,gBAAS,EAAE,QAAQ,EAAE,4BAAY,EAAE;gBAC9C,8BAAa;gBACb,iCAAe;gBACf,GAAG,oBAAY;gBACf,GAAG,gBAAQ;aACZ;YACD,OAAO,EAAE,CAAC,4BAAY,CAAC;SACxB,CAAC;IACJ,CAAC;CACF,CAAA;AAzCY,wDAAsB;iCAAtB,sBAAsB;IADlC,IAAA,eAAM,EAAC,EAAE,CAAC;GACE,sBAAsB,CAyClC"}

package/dist/proxy/resticProxy.d.ts

@@ -0,0 +1,11 @@
+import { ChildProcess } from 'node:child_process';
+export declare class ResticProxy {
+    readonly address: string;
+    readonly port: number;
+    readonly process: ChildProcess;
+    private constructor();
+    static isAvailable(): Promise<boolean>;
+    static create(apiUrl: string): Promise<ResticProxy>;
+    createUrl(repositoryId: string, accessToken: string): string;
+    stop(): Promise<void>;
+}

package/dist/proxy/resticProxy.js

@@ -0,0 +1,93 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ResticProxy = void 0;
+const node_child_process_1 = require("node:child_process");
+const node_events_1 = require("node:events");
+const promises_1 = require("node:fs/promises");
+const node_path_1 = require("node:path");
+const node_readline_1 = require("node:readline");
+const RESTIC_PROXY_BIN = 'restic-proxy';
+const RESTIC_PROXY_READY_FD = 3;
+const RESTIC_PROXY_READY_TIMEOUT_MS = 10_000;
+class ResticProxy {
+    address;
+    port;
+    process;
+    constructor(address, port, process) {
+        this.address = address;
+        this.port = port;
+        this.process = process;
+    }
+    static async isAvailable() {
+        for (const directory of (process.env.PATH ?? '').split(node_path_1.delimiter)) {
+            try {
+                await (0, promises_1.access)((0, node_path_1.join)(directory, RESTIC_PROXY_BIN), promises_1.constants.X_OK);
+                return true;
+            }
+            catch {
+                continue;
+            }
+        }
+        return false;
+    }
+    static async create(apiUrl) {
+        const child = (0, node_child_process_1.spawn)(RESTIC_PROXY_BIN, {
+            env: {
+                ...process.env,
+                RESTIC_PROXY_API_URL: apiUrl,
+                RESTIC_PROXY_PORT: '0',
+                RESTIC_PROXY_READY_FD: String(RESTIC_PROXY_READY_FD),
+            },
+            stdio: ['ignore', 'inherit', 'inherit', 'pipe'],
+        });
+        try {
+            const { address, port } = await readReady(child);
+            return new ResticProxy(address, port, child);
+        }
+        catch (error) {
+            child.kill();
+            throw error;
+        }
+    }
+    createUrl(repositoryId, accessToken) {
+        return `rest:http://${repositoryId}:${accessToken}@${this.address}`;
+    }
+    async stop() {
+        if (this.process.exitCode !== null || this.process.signalCode !== null) {
+            return;
+        }
+        this.process.kill();
+        await (0, node_events_1.once)(this.process, 'exit');
+    }
+}
+exports.ResticProxy = ResticProxy;
+async function readReady(child) {
+    const pipe = child.stdio[RESTIC_PROXY_READY_FD];
+    const lines = (0, node_readline_1.createInterface)({ input: pipe });
+    const settled = new AbortController();
+    const signal = AbortSignal.any([settled.signal, AbortSignal.timeout(RESTIC_PROXY_READY_TIMEOUT_MS)]);
+    try {
+        const [line] = await Promise.race([
+            (0, node_events_1.once)(lines, 'line', { signal }),
+            rejectOnClose(lines, signal),
+            rejectOnSpawnError(child, signal),
+        ]);
+        return JSON.parse(line);
+    }
+    catch (error) {
+        throw new Error(`${RESTIC_PROXY_BIN} did not report an address`, { cause: error });
+    }
+    finally {
+        settled.abort();
+        lines.close();
+    }
+}
+async function rejectOnClose(lines, signal) {
+    await (0, node_events_1.once)(lines, 'close', { signal });
+    throw new Error(`${RESTIC_PROXY_BIN} exited before reporting an address`);
+}
+async function rejectOnSpawnError(child, signal) {
+    const [error] = await (0, node_events_1.once)(child, 'error', { signal });
+    throw error;
+}
+//# sourceMappingURL=resticProxy.js.map

package/dist/proxy/resticProxy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"resticProxy.js","sourceRoot":"","sources":["../../src/proxy/resticProxy.ts"],"names":[],"mappings":";;;AAAA,2DAAyD;AACzD,6CAAmC;AACnC,+CAAqD;AACrD,yCAA4C;AAC5C,iDAA2D;AAG3D,MAAM,gBAAgB,GAAG,cAAc,CAAC;AACxC,MAAM,qBAAqB,GAAG,CAAC,CAAC;AAChC,MAAM,6BAA6B,GAAG,MAAM,CAAC;AAO7C,MAAa,WAAW;IAEX;IACA;IACA;IAHX,YACW,OAAe,EACf,IAAY,EACZ,OAAqB;QAFrB,YAAO,GAAP,OAAO,CAAQ;QACf,SAAI,GAAJ,IAAI,CAAQ;QACZ,YAAO,GAAP,OAAO,CAAc;IAC7B,CAAC;IAEJ,MAAM,CAAC,KAAK,CAAC,WAAW;QACtB,KAAK,MAAM,SAAS,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,qBAAS,CAAC,EAAE,CAAC;YAClE,IAAI,CAAC;gBACH,MAAM,IAAA,iBAAM,EAAC,IAAA,gBAAI,EAAC,SAAS,EAAE,gBAAgB,CAAC,EAAE,oBAAS,CAAC,IAAI,CAAC,CAAC;gBAChE,OAAO,IAAI,CAAC;YACd,CAAC;YAAC,MAAM,CAAC;gBACP,SAAS;YACX,CAAC;QACH,CAAC;QAED,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAc;QAChC,MAAM,KAAK,GAAG,IAAA,0BAAK,EAAC,gBAAgB,EAAE;YACpC,GAAG,EAAE;gBACH,GAAG,OAAO,CAAC,GAAG;gBACd,oBAAoB,EAAE,MAAM;gBAC5B,iBAAiB,EAAE,GAAG;gBACtB,qBAAqB,EAAE,MAAM,CAAC,qBAAqB,CAAC;aACrD;YACD,KAAK,EAAE,CAAC,QAAQ,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,CAAC;SAChD,CAAC,CAAC;QAEH,IAAI,CAAC;YACH,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,MAAM,SAAS,CAAC,KAAK,CAAC,CAAC;YACjD,OAAO,IAAI,WAAW,CAAC,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;QAC/C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,KAAK,CAAC,IAAI,EAAE,CAAC;YACb,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAED,SAAS,CAAC,YAAoB,EAAE,WAAmB;QACjD,OAAO,eAAe,YAAY,IAAI,WAAW,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;IACtE,CAAC;IAED,KAAK,CAAC,IAAI;QACR,IAAI,IAAI,CAAC,OAAO,CAAC,QAAQ,KAAK,IAAI,IAAI,IAAI,CAAC,OAAO,CAAC,UAAU,KAAK,IAAI,EAAE,CAAC;YACvE,OAAO;QACT,CAAC;QAED,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;QACpB,MAAM,IAAA,kBAAI,EAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IACnC,CAAC;CACF;AApDD,kCAoDC;AAED,KAAK,UAAU,SAAS,CAAC,KAAmB;IAC1C,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,qBAAqB,CAAa,CAAC;IAC5D,MAAM,KAAK,GAAG,IAAA,+BAAe,EAAC,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAC/C,MAAM,OAAO,GAAG,IAAI,eAAe,EAAE,CAAC;IACtC,MAAM,MAAM,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,6BAA6B,CAAC,CAAC,CAAC,CAAC;IAErG,IAAI,CAAC;QACH,MAAM,CAAC,IAAI,CAAC,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC;YAChC,IAAA,kBAAI,EAAC,KAAK,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,CAAC;YAC/B,aAAa,CAAC,KAAK,EAAE,MAAM,CAAC;YAC5B,kBAAkB,CAAC,KAAK,EAAE,MAAM,CAAC;SAClC,CAAC,CAAC;QAEH,OAAO,IAAI,CAAC,KAAK,CAAC,IAAc,CAAqB,CAAC;IACxD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,KAAK,CAAC,GAAG,gBAAgB,4BAA4B,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;IACrF,CAAC;YAAS,CAAC;QACT,OAAO,CAAC,KAAK,EAAE,CAAC;QAChB,KAAK,CAAC,KAAK,EAAE,CAAC;IAChB,CAAC;AACH,CAAC;AAED,KAAK,UAAU,aAAa,CAAC,KAAgB,EAAE,MAAmB;IAChE,MAAM,IAAA,kBAAI,EAAC,KAAK,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;IACvC,MAAM,IAAI,KAAK,CAAC,GAAG,gBAAgB,qCAAqC,CAAC,CAAC;AAC5E,CAAC;AAED,KAAK,UAAU,kBAAkB,CAAC,KAAmB,EAAE,MAAmB;IACxE,MAAM,CAAC,KAAK,CAAC,GAAG,MAAM,IAAA,kBAAI,EAAC,KAAK,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;IACvD,MAAM,KAAK,CAAC;AACd,CAAC"}

package/dist/proxy/resticProxyPool.d.ts

@@ -0,0 +1,9 @@
+import { OnApplicationShutdown } from '@nestjs/common';
+import { ResticProxy } from './resticProxy';
+export declare class ResticProxyPool implements OnApplicationShutdown {
+    static pool: Map<string, Promise<ResticProxy>>;
+    static available: Promise<boolean> | undefined;
+    isAvailable(): Promise<boolean>;
+    getProxy(apiUrl: string): Promise<ResticProxy>;
+    onApplicationShutdown(): Promise<void>;
+}

package/dist/proxy/resticProxyPool.js

@@ -0,0 +1,44 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var ResticProxyPool_1;
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ResticProxyPool = void 0;
+const common_1 = require("@nestjs/common");
+const resticProxy_1 = require("./resticProxy");
+let ResticProxyPool = class ResticProxyPool {
+    static { ResticProxyPool_1 = this; }
+    static pool = new Map();
+    static available;
+    isAvailable() {
+        ResticProxyPool_1.available ??= resticProxy_1.ResticProxy.isAvailable();
+        return ResticProxyPool_1.available;
+    }
+    getProxy(apiUrl) {
+        const existing = ResticProxyPool_1.pool.get(apiUrl);
+        if (existing) {
+            return existing;
+        }
+        const pending = resticProxy_1.ResticProxy.create(apiUrl).then((proxy) => {
+            proxy.process.once('exit', () => ResticProxyPool_1.pool.delete(apiUrl));
+            return proxy;
+        });
+        pending.catch(() => ResticProxyPool_1.pool.delete(apiUrl));
+        ResticProxyPool_1.pool.set(apiUrl, pending);
+        return pending;
+    }
+    async onApplicationShutdown() {
+        const outcomes = await Promise.allSettled(ResticProxyPool_1.pool.values());
+        const running = outcomes.filter((outcome) => outcome.status === 'fulfilled').map((outcome) => outcome.value);
+        await Promise.all(running.map((proxy) => proxy.stop()));
+    }
+};
+exports.ResticProxyPool = ResticProxyPool;
+exports.ResticProxyPool = ResticProxyPool = ResticProxyPool_1 = __decorate([
+    (0, common_1.Injectable)()
+], ResticProxyPool);
+//# sourceMappingURL=resticProxyPool.js.map

package/dist/proxy/resticProxyPool.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"resticProxyPool.js","sourceRoot":"","sources":["../../src/proxy/resticProxyPool.ts"],"names":[],"mappings":";;;;;;;;;;AAAA,2CAAmE;AACnE,+CAA4C;AAGrC,IAAM,eAAe,GAArB,MAAM,eAAe;;IAC1B,MAAM,CAAC,IAAI,GAAG,IAAI,GAAG,EAAgC,CAAC;IACtD,MAAM,CAAC,SAAS,CAA+B;IAE/C,WAAW;QACT,iBAAe,CAAC,SAAS,KAAK,yBAAW,CAAC,WAAW,EAAE,CAAC;QACxD,OAAO,iBAAe,CAAC,SAAS,CAAC;IACnC,CAAC;IAED,QAAQ,CAAC,MAAc;QACrB,MAAM,QAAQ,GAAG,iBAAe,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAClD,IAAI,QAAQ,EAAE,CAAC;YACb,OAAO,QAAQ,CAAC;QAClB,CAAC;QAED,MAAM,OAAO,GAAG,yBAAW,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE;YACxD,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,iBAAe,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;YACtE,OAAO,KAAK,CAAC;QACf,CAAC,CAAC,CAAC;QAEH,OAAO,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,iBAAe,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;QAEzD,iBAAe,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAC1C,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,KAAK,CAAC,qBAAqB;QACzB,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,UAAU,CAAC,iBAAe,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;QACzE,MAAM,OAAO,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,KAAK,WAAW,CAAC,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QAC7G,MAAM,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IAC1D,CAAC;;AA9BU,0CAAe;0BAAf,eAAe;IAD3B,IAAA,mBAAU,GAAE;GACA,eAAe,CA+B3B"}

package/dist/repositories/config.repository.d.ts

@@ -22,6 +22,8 @@ export declare class ConfigRepository {
     enableTelemetry(): Promise<void>;
     hasSkippedExtraConfig(): Promise<boolean>;
     skipExtraConfig(): Promise<void>;
+    hasSessionSecret(): Promise<boolean>;
+    getSessionSecret(): Promise<Buffer>;
     getResticOptions(placement: ResticPlacement): Promise<{
         connections: number;
         packSizeMib: number | undefined;

package/dist/repositories/config.repository.js

@@ -30,6 +30,10 @@ let ConfigRepository = class ConfigRepository {
         if (!hasKey) {
             await this.set(enum_1.ConfigurationKey.EncryptionKey, (0, node_crypto_1.randomBytes)(32).toString('hex'));
         }
+        const hasSecret = await this.hasSessionSecret();
+        if (!hasSecret) {
+            await this.set(enum_1.ConfigurationKey.SessionSecret, (0, node_crypto_1.randomBytes)(32).toString('hex'));
+        }
     }
     async set(key, value) {
         await this.db
@@ -99,6 +103,12 @@ let ConfigRepository = class ConfigRepository {
     async skipExtraConfig() {
         return this.set(enum_1.ConfigurationKey.SkippedOnboardingExtraConfig, '1');
     }
+    async hasSessionSecret() {
+        return this.has(enum_1.ConfigurationKey.SessionSecret);
+    }
+    async getSessionSecret() {
+        return Buffer.from(await this.get(enum_1.ConfigurationKey.SessionSecret), 'hex');
+    }
     async getResticOptions(placement) {
         const siteCode = placement.siteCode ?? undefined;
         const clusterCode = placement.storageClusterCode ?? undefined;

package/dist/repositories/config.repository.js.map

@@ -1 +1 @@
-{"version":3,"file":"config.repository.js","sourceRoot":"","sources":["../../src/repositories/config.repository.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,2CAA4C;AAC5C,mCAAgC;AAChC,iDAA6C;AAC7C,6CAA0C;AAC1C,qCAA+C;AAC/C,kCAA2C;AAE3C,4CAA8C;AAKvC,IAAM,gBAAgB,GAAtB,MAAM,gBAAgB;IACuB;IAAlD,YAAkD,EAAc;QAAd,OAAE,GAAF,EAAE,CAAY;IAAG,CAAC;IAEpE,KAAK,CAAC,SAAS;QACb,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,gBAAgB,EAAE,CAAC;QAE7C,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,IAAI,CAAC,GAAG,CAAC,uBAAgB,CAAC,aAAa,EAAE,IAAA,yBAAW,EAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;QAClF,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,GAAG,CAAC,GAAqB,EAAE,KAAa;QACpD,MAAM,IAAI,CAAC,EAAE;aACV,UAAU,CAAC,QAAQ,CAAC;aACpB,MAAM,CAAC;YACN,GAAG;YACH,KAAK;SACN,CAAC;aACD,UAAU,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,WAAW,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;aAC7C,uBAAuB,EAAE,CAAC;IAC/B,CAAC;IAEO,KAAK,CAAC,GAAG,CAAC,GAAqB;QACrC,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,EAAE;aAC5B,UAAU,CAAC,QAAQ,CAAC;aACpB,KAAK,CAAC,YAAY,EAAE,GAAG,EAAE,GAAG,CAAC;aAC7B,MAAM,CAAC,cAAc,CAAC;aACtB,uBAAuB,EAAE,CAAC;QAE7B,OAAO,KAAK,CAAC;IACf,CAAC;IAEO,KAAK,CAAC,WAAW,CAAC,GAAqB;QAC7C,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,EAAE;aACtB,UAAU,CAAC,QAAQ,CAAC;aACpB,KAAK,CAAC,YAAY,EAAE,GAAG,EAAE,GAAG,CAAC;aAC7B,MAAM,CAAC,cAAc,CAAC;aACtB,gBAAgB,EAAE,CAAC;QAEtB,OAAO,GAAG,EAAE,KAAK,CAAC;IACpB,CAAC;IAEO,KAAK,CAAC,GAAG,CAAC,GAAqB;QACrC,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC,YAAY,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC,SAAS,EAAE,CAAC,OAAO,EAAE,CAAC;QAEvG,OAAO,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC;IAC5B,CAAC;IAED,KAAK,CAAC,gBAAgB;QACpB,OAAO,IAAI,CAAC,GAAG,CAAC,uBAAgB,CAAC,aAAa,CAAC,CAAC;IAClD,CAAC;IAED,KAAK,CAAC,sBAAsB;QAC1B,OAAO,MAAM,IAAI,CAAC,GAAG,CAAC,uBAAgB,CAAC,aAAa,CAAC,CAAC;IACxD,CAAC;IAED,KAAK,CAAC,mBAAmB,CAAC,IAA4B;QACpD,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,uBAAgB,CAAC,aAAa,CAAC,CAAC;QACrE,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,aAAa,EAAE,KAAK,CAAC,CAAC;QAEpD,MAAM,GAAG,GAAG,IAAI,UAAU,CACxB,MAAM,MAAM,CAAC,MAAM,CAAC,UAAU,CAC5B;YACE,IAAI,EAAE,MAAM;YACZ,IAAI,EAAE,SAAS;YACf,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC;YACvB,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAa,CAAC;SAClE,EACD,MAAM,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,YAAY,CAAC,CAAC,EAC9E,GAAG,CACJ,CACF,CAAC;QAEF,OAAO,GAAG,CAAC;IACb,CAAC;IAED,KAAK,CAAC,mBAAmB,CAAC,GAAW;QACnC,MAAM,IAAI,CAAC,GAAG,CAAC,uBAAgB,CAAC,aAAa,EAAE,GAAG,CAAC,CAAC;IACtD,CAAC;IAED,KAAK,CAAC,eAAe;QACnB,OAAO,IAAI,CAAC,GAAG,CAAC,uBAAgB,CAAC,YAAY,CAAC,CAAC;IACjD,CAAC;IAED,KAAK,CAAC,mBAAmB;QACvB,OAAO,IAAI,CAAC,GAAG,CAAC,uBAAgB,CAAC,YAAY,EAAE,GAAG,CAAC,CAAC;IACtD,CAAC;IAED,KAAK,CAAC,YAAY;QAChB,OAAO,IAAI,CAAC,GAAG,CAAC,uBAAgB,CAAC,SAAS,CAAC,CAAC;IAC9C,CAAC;IAED,KAAK,CAAC,eAAe;QACnB,OAAO,IAAI,CAAC,GAAG,CAAC,uBAAgB,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;IACtD,CAAC;IAED,KAAK,CAAC,qBAAqB;QACzB,OAAO,IAAI,CAAC,GAAG,CAAC,uBAAgB,CAAC,4BAA4B,CAAC,CAAC;IACjE,CAAC;IAED,KAAK,CAAC,eAAe;QACnB,OAAO,IAAI,CAAC,GAAG,CAAC,uBAAgB,CAAC,4BAA4B,EAAE,GAAG,CAAC,CAAC;IACtE,CAAC;IAED,KAAK,CAAC,gBAAgB,CACpB,SAA0B;QAE1B,MAAM,QAAQ,GAAG,SAAS,CAAC,QAAQ,IAAI,SAAS,CAAC;QACjD,MAAM,WAAW,GAAG,SAAS,CAAC,kBAAkB,IAAI,SAAS,CAAC;QAC9D,MAAM,KAAK,GAAG,IAAA,8BAAoB,GAAE,CAAC;QAErC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,uBAAgB,CAAC,2BAA2B,CAAC,CAAC;QACtF,MAAM,WAAW,GAAG,QAAQ;YAC1B,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC;YAC3B,CAAC,CAAC,CAAC,CAAC,MAAM,0BAAc,CAAC,cAAc,CAAC,KAAK,EAAE,QAAQ,EAAE,WAAW,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC;QAEnF,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,0BAAc,CAAC,cAAc,CAAC,QAAQ,EAAE,WAAW,CAAC,EAAE,CAAC;IAClG,CAAC;CACF,CAAA;AAtHY,4CAAgB;2BAAhB,gBAAgB;IAD5B,IAAA,mBAAU,GAAE;IAEE,WAAA,IAAA,4BAAY,EAAC,cAAc,CAAC,CAAA;qCAAa,eAAM;GADjD,gBAAgB,CAsH5B"}
+{"version":3,"file":"config.repository.js","sourceRoot":"","sources":["../../src/repositories/config.repository.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,2CAA4C;AAC5C,mCAAgC;AAChC,iDAA6C;AAC7C,6CAA0C;AAC1C,qCAA+C;AAC/C,kCAA2C;AAE3C,4CAA8C;AAKvC,IAAM,gBAAgB,GAAtB,MAAM,gBAAgB;IACuB;IAAlD,YAAkD,EAAc;QAAd,OAAE,GAAF,EAAE,CAAY;IAAG,CAAC;IAEpE,KAAK,CAAC,SAAS;QACb,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,gBAAgB,EAAE,CAAC;QAE7C,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,IAAI,CAAC,GAAG,CAAC,uBAAgB,CAAC,aAAa,EAAE,IAAA,yBAAW,EAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;QAClF,CAAC;QAED,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,gBAAgB,EAAE,CAAC;QAEhD,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,MAAM,IAAI,CAAC,GAAG,CAAC,uBAAgB,CAAC,aAAa,EAAE,IAAA,yBAAW,EAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;QAClF,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,GAAG,CAAC,GAAqB,EAAE,KAAa;QACpD,MAAM,IAAI,CAAC,EAAE;aACV,UAAU,CAAC,QAAQ,CAAC;aACpB,MAAM,CAAC;YACN,GAAG;YACH,KAAK;SACN,CAAC;aACD,UAAU,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,WAAW,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;aAC7C,uBAAuB,EAAE,CAAC;IAC/B,CAAC;IAEO,KAAK,CAAC,GAAG,CAAC,GAAqB;QACrC,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,EAAE;aAC5B,UAAU,CAAC,QAAQ,CAAC;aACpB,KAAK,CAAC,YAAY,EAAE,GAAG,EAAE,GAAG,CAAC;aAC7B,MAAM,CAAC,cAAc,CAAC;aACtB,uBAAuB,EAAE,CAAC;QAE7B,OAAO,KAAK,CAAC;IACf,CAAC;IAEO,KAAK,CAAC,WAAW,CAAC,GAAqB;QAC7C,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,EAAE;aACtB,UAAU,CAAC,QAAQ,CAAC;aACpB,KAAK,CAAC,YAAY,EAAE,GAAG,EAAE,GAAG,CAAC;aAC7B,MAAM,CAAC,cAAc,CAAC;aACtB,gBAAgB,EAAE,CAAC;QAEtB,OAAO,GAAG,EAAE,KAAK,CAAC;IACpB,CAAC;IAEO,KAAK,CAAC,GAAG,CAAC,GAAqB;QACrC,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC,YAAY,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC,SAAS,EAAE,CAAC,OAAO,EAAE,CAAC;QAEvG,OAAO,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC;IAC5B,CAAC;IAED,KAAK,CAAC,gBAAgB;QACpB,OAAO,IAAI,CAAC,GAAG,CAAC,uBAAgB,CAAC,aAAa,CAAC,CAAC;IAClD,CAAC;IAED,KAAK,CAAC,sBAAsB;QAC1B,OAAO,MAAM,IAAI,CAAC,GAAG,CAAC,uBAAgB,CAAC,aAAa,CAAC,CAAC;IACxD,CAAC;IAED,KAAK,CAAC,mBAAmB,CAAC,IAA4B;QACpD,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,uBAAgB,CAAC,aAAa,CAAC,CAAC;QACrE,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,aAAa,EAAE,KAAK,CAAC,CAAC;QAEpD,MAAM,GAAG,GAAG,IAAI,UAAU,CACxB,MAAM,MAAM,CAAC,MAAM,CAAC,UAAU,CAC5B;YACE,IAAI,EAAE,MAAM;YACZ,IAAI,EAAE,SAAS;YACf,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC;YACvB,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAa,CAAC;SAClE,EACD,MAAM,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,YAAY,CAAC,CAAC,EAC9E,GAAG,CACJ,CACF,CAAC;QAEF,OAAO,GAAG,CAAC;IACb,CAAC;IAED,KAAK,CAAC,mBAAmB,CAAC,GAAW;QACnC,MAAM,IAAI,CAAC,GAAG,CAAC,uBAAgB,CAAC,aAAa,EAAE,GAAG,CAAC,CAAC;IACtD,CAAC;IAED,KAAK,CAAC,eAAe;QACnB,OAAO,IAAI,CAAC,GAAG,CAAC,uBAAgB,CAAC,YAAY,CAAC,CAAC;IACjD,CAAC;IAED,KAAK,CAAC,mBAAmB;QACvB,OAAO,IAAI,CAAC,GAAG,CAAC,uBAAgB,CAAC,YAAY,EAAE,GAAG,CAAC,CAAC;IACtD,CAAC;IAED,KAAK,CAAC,YAAY;QAChB,OAAO,IAAI,CAAC,GAAG,CAAC,uBAAgB,CAAC,SAAS,CAAC,CAAC;IAC9C,CAAC;IAED,KAAK,CAAC,eAAe;QACnB,OAAO,IAAI,CAAC,GAAG,CAAC,uBAAgB,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;IACtD,CAAC;IAED,KAAK,CAAC,qBAAqB;QACzB,OAAO,IAAI,CAAC,GAAG,CAAC,uBAAgB,CAAC,4BAA4B,CAAC,CAAC;IACjE,CAAC;IAED,KAAK,CAAC,eAAe;QACnB,OAAO,IAAI,CAAC,GAAG,CAAC,uBAAgB,CAAC,4BAA4B,EAAE,GAAG,CAAC,CAAC;IACtE,CAAC;IAED,KAAK,CAAC,gBAAgB;QACpB,OAAO,IAAI,CAAC,GAAG,CAAC,uBAAgB,CAAC,aAAa,CAAC,CAAC;IAClD,CAAC;IAED,KAAK,CAAC,gBAAgB;QACpB,OAAO,MAAM,CAAC,IAAI,CAAC,MAAM,IAAI,CAAC,GAAG,CAAC,uBAAgB,CAAC,aAAa,CAAC,EAAE,KAAK,CAAC,CAAC;IAC5E,CAAC;IAED,KAAK,CAAC,gBAAgB,CACpB,SAA0B;QAE1B,MAAM,QAAQ,GAAG,SAAS,CAAC,QAAQ,IAAI,SAAS,CAAC;QACjD,MAAM,WAAW,GAAG,SAAS,CAAC,kBAAkB,IAAI,SAAS,CAAC;QAC9D,MAAM,KAAK,GAAG,IAAA,8BAAoB,GAAE,CAAC;QAErC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,uBAAgB,CAAC,2BAA2B,CAAC,CAAC;QACtF,MAAM,WAAW,GAAG,QAAQ;YAC1B,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC;YAC3B,CAAC,CAAC,CAAC,CAAC,MAAM,0BAAc,CAAC,cAAc,CAAC,KAAK,EAAE,QAAQ,EAAE,WAAW,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC;QAEnF,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,0BAAc,CAAC,cAAc,CAAC,QAAQ,EAAE,WAAW,CAAC,EAAE,CAAC;IAClG,CAAC;CACF,CAAA;AApIY,4CAAgB;2BAAhB,gBAAgB;IAD5B,IAAA,mBAAU,GAAE;IAEE,WAAA,IAAA,4BAAY,EAAC,cAAc,CAAC,CAAA;qCAAa,eAAM;GADjD,gBAAgB,CAoI5B"}

package/dist/repositories/runHistory.repository.d.ts

@@ -32,22 +32,22 @@ export declare class RunHistoryRepository {
     private ephemeralLogs;
     createLogAsync(repositoryId: string, type: RunType, fn: (log: WriteStream, logId: string) => Promise<void>): Promise<void>;
     get(id: string): Promise<{
-        type: RunType;
         id: string;
+        type: RunType;
+        status: TaskStatus;
         repositoryId: string;
         start: string;
         end: string | undefined;
         logFilePath: string;
-        status: TaskStatus;
     } | undefined>;
     getAll(repositoryId: string): Promise<{
-        type: RunType;
         id: string;
+        type: RunType;
+        status: TaskStatus;
         repositoryId: string;
         start: string;
         end: string | undefined;
         logFilePath: string;
-        status: TaskStatus;
     }[]>;
     getObservable(id: string): import("rxjs").Observable<MessageEvent<any>>;
     markIncompleteAsFailed(): Promise<void>;

package/dist/schema/tables/backend.table.d.ts

@@ -4,6 +4,7 @@ export type BackendConfiguration = {
     type: BackendType.Yucca;
     url?: string;
     accessToken: string;
+    userId?: string;
 } | {
     type: BackendType.Local;
     path: string;

package/dist/schema/tables/backend.table.js.map

@@ -1 +1 @@
-{"version":3,"file":"backend.table.js","sourceRoot":"","sources":["../../../src/schema/tables/backend.table.ts"],"names":[],"mappings":";;;AAuCA,MAAa,YAAY;IACvB,EAAE,CAAqB;IACvB,aAAa,CAAU;CACxB;AAHD,oCAGC"}
+{"version":3,"file":"backend.table.js","sourceRoot":"","sources":["../../../src/schema/tables/backend.table.ts"],"names":[],"mappings":";;;AAwCA,MAAa,YAAY;IACvB,EAAE,CAAqB;IACvB,aAAa,CAAU;CACxB;AAHD,oCAGC"}

package/dist/services/auth.service.d.ts

@@ -1,8 +1,11 @@
+import { TicketCreateRequestDto } from '@futo-org/backups-api-client';
+import { TicketCreateResponseDto } from '../dto/ticket.dto';
 import { EventsGateway } from '../events/events.gateway';
 import { BackendRepository } from '../repositories/backend.repository';
 import { ConfigRepository } from '../repositories/config.repository';
 import { ModuleConfigRepository } from '../repositories/moduleConfig.repository';
 import { RepositoryRepository } from '../repositories/repository.repository';
+import { SessionService } from './session.service';
 import { TelemetryService } from './telemetry.service';
 export declare class AuthService {
     readonly config: ConfigRepository;
@@ -11,13 +14,15 @@ export declare class AuthService {
     readonly events: EventsGateway;
     readonly telemetry: TelemetryService;
     readonly repository: RepositoryRepository;
-    constructor(config: ConfigRepository, backend: BackendRepository, moduleConfig: ModuleConfigRepository, events: EventsGateway, telemetry: TelemetryService, repository: RepositoryRepository);
+    readonly session: SessionService;
+    constructor(config: ConfigRepository, backend: BackendRepository, moduleConfig: ModuleConfigRepository, events: EventsGateway, telemetry: TelemetryService, repository: RepositoryRepository, session: SessionService);
     private connectionType;
     private connectionName;
     private adoptOwnRepositories;
-    private waitForDeviceFlow;
-    oidcDeviceFlow(): Promise<{
-        userCode: string;
-        verificationUri: string;
-    }>;
+    private fetchBackendUserId;
+    private connectBackend;
+    private relayDeviceFlow;
+    private runDeviceFlow;
+    deviceFlow(identity: boolean): import("rxjs").Observable<MessageEvent<any>>;
+    createTicket(dto: TicketCreateRequestDto): Promise<TicketCreateResponseDto>;
 }