@hearsay-tools/squawk 0.0.0-stage → 0.17.0-dev.5682

package/dist/server-install/engine.js

@@ -0,0 +1,358 @@
+import { productName } from '../home/display.js';
+import { commandText } from '../home/command.js';
+import { loadWorkspaceConfig } from '../workspace/config.js';
+import { disableRemoteSettings, isGranted, readRemoteSettings } from '../remote-settings.js';
+import { acquireLock, deleteServerState, isResolved, loadServerState, saveServerState } from './state.js';
+import { StepAborted, StepCancelled, StepSkipped, defaultRunner } from './steps.js';
+import { createAutoUi, createClackUi } from './ui.js';
+import { CANCEL, PreflightError, } from './types.js';
+/**
+ * Record a step outcome WITHOUT losing the artifact ledger: `server.json`
+ * exists so uninstall can reverse what was created, so a re-run that is
+ * cancelled/skipped/failed must keep the artifacts recorded by the previous
+ * successful run. Only a successful `run()` (which re-creates or supersedes
+ * them) may replace `created`.
+ */
+function recordOutcome(state, id, status) {
+    state.steps[id] = { status, created: state.steps[id]?.created ?? null };
+}
+/** An outcome uninstall must reverse: completed, failed mid-run, or anything
+ * that still has recorded artifacts (e.g. a done step later downgraded). */
+function needsUndo(outcome) {
+    if (!outcome)
+        return false;
+    if (outcome.status === 'done' || outcome.status === 'failed')
+        return true;
+    return (outcome.created?.artifacts.length ?? 0) > 0;
+}
+/**
+ * Keep preview state separate: a dry-run never overwrites a real ledger, and a real run resets
+ * preview outcomes before executing.
+ */
+function reconcileDryRun(state, opts, ui) {
+    const realRecord = !state.dryRun && (state.installed || Object.keys(state.steps).length > 0);
+    if (opts.dryRun && realRecord) {
+        ui.info('DRY RUN over a real install record — previewing only, nothing will be saved to server.json.');
+        return { persist: false };
+    }
+    if (!opts.dryRun && state.dryRun) {
+        ui.info('The recorded state came from a CEZ_DRY_RUN preview — starting from a clean slate.');
+        state.steps = {};
+        state.installed = false;
+        state.platform = undefined;
+        state.publicUrl = undefined;
+        state.ephemeral = undefined;
+    }
+    if (opts.dryRun)
+        state.dryRun = true;
+    else
+        delete state.dryRun;
+    return { persist: true };
+}
+function buildContext(state, opts) {
+    // Real `--yes` runs fail closed on prompts they cannot answer; dry-run
+    // previews stay lenient so they can walk every step.
+    const ui = opts.ui ??
+        (opts.dryRun || opts.assumeYes
+            ? createAutoUi({}, (m) => console.log(m), { strictValidate: !opts.dryRun })
+            : createClackUi());
+    const instance = opts.instance ?? 'default';
+    const ctx = {
+        state,
+        home: opts.home,
+        ui,
+        instance,
+        runner: opts.runner ?? defaultRunner,
+        save: async () => saveServerState(state, instance, opts.home),
+        dryRun: opts.dryRun,
+        assumeYes: opts.assumeYes,
+        reconfigure: opts.reconfigure,
+        repoRoot: opts.repoRoot,
+        now: opts.now,
+        prefs: {},
+    };
+    const { persist } = reconcileDryRun(state, opts, ui);
+    if (!persist)
+        ctx.save = async () => { };
+    return ctx;
+}
+/**
+ * A remote settings grant names a port, not an install (ADR 0055). Withdraw it when this instance
+ * stops owning the port, so a later cockpit on that port, with another login, starts without it.
+ */
+async function withdrawRemoteSettings(ctx, port, why, when = true) {
+    if (!when || !isGranted(readRemoteSettings(process.env, ctx.home), port))
+        return;
+    if (ctx.dryRun) {
+        ctx.ui.info(`DRY RUN — would withdraw the remote settings grant for port ${port} (${why}).`);
+        return;
+    }
+    await disableRemoteSettings(process.env, port, ctx.home);
+    ctx.ui.info(commandText(`Withdrew the remote settings grant for port ${port} (${why}). \`cez remote-settings enable --port ${port}\` grants it again.`));
+}
+function setupInstallRecord(state, strategy, opts) {
+    if (state.platform && state.platform !== strategy.id) {
+        throw new PreflightError(`this host already has a ${state.platform} install recorded — run \`server-uninstall\` first to switch platforms`);
+    }
+    state.platform = strategy.id;
+    // Record instance identity so the file is self-describing and later
+    // uninstall/deploy runs (and `server-instances/` listings) agree on it.
+    state.instance = opts.instance ?? state.instance ?? 'default';
+    if (opts.domain)
+        state.domain = opts.domain;
+    // Proxy mode + bind host are recorded before `steps(ctx)` runs, because the
+    // platform selects its step list from them (external proxy ⇒ no nginx/SSL).
+    if (opts.externalProxy !== undefined)
+        state.externalProxy = opts.externalProxy;
+    if (opts.bindHost)
+        state.bindHost = opts.bindHost;
+    // A caller-supplied port wins (a new named instance auto-picks a free one);
+    // otherwise keep whatever the resumed record already carries.
+    if (opts.port)
+        state.primaryPort = opts.port;
+    // Only a re-run of a completed real install keeps a grant; a dry-run preview record does not count.
+    const freshInstall = state.installed !== true;
+    state.createdAt ??= opts.now;
+    state.updatedAt = opts.now;
+    return freshInstall;
+}
+async function runInstallStep(step, ctx, opts) {
+    const { state } = ctx;
+    // `--reinstall` forces every step; `--reconfigure` forces the named ones.
+    const forced = opts.reinstall === true || opts.reconfigure.has(step.id);
+    if (!forced && isResolved(state.steps[step.id])) {
+        ctx.ui.info(`= ${step.title} (already done)`);
+        return;
+    }
+    // Already satisfied on the box (fresh install, nothing recorded yet)?
+    if (!forced && (await step.check(ctx))) {
+        state.steps[step.id] = { status: 'done', created: state.steps[step.id]?.created ?? null };
+        await ctx.save();
+        ctx.ui.info(`= ${step.title} (already present)`);
+        return;
+    }
+    if (step.optional) {
+        // `--yes` = accept safe defaults, and the safe default for an optional
+        // step (SSL against a real domain, autostart) is to SKIP it — never run
+        // it non-interactively against placeholder input.
+        if (ctx.assumeYes) {
+            recordOutcome(state, step.id, 'skipped');
+            await ctx.save();
+            ctx.ui.info(`— ${step.title} (skipped: --yes)`);
+            return;
+        }
+        const proceed = await ctx.ui.confirm({ message: `Set up ${step.title}?`, initialValue: true });
+        if (proceed === CANCEL) {
+            recordOutcome(state, step.id, 'pending');
+            await ctx.save();
+            ctx.ui.warn(`Cancelled at "${step.title}". Progress saved — re-run to resume.`);
+            return 'cancelled';
+        }
+        if (proceed !== true) {
+            recordOutcome(state, step.id, 'skipped');
+            await ctx.save();
+            ctx.ui.info(`— ${step.title} (skipped)`);
+            return;
+        }
+    }
+    try {
+        const created = await step.run(ctx);
+        state.steps[step.id] = { status: 'done', created };
+        state.updatedAt = opts.now;
+        await ctx.save();
+    }
+    catch (err) {
+        if (err instanceof StepSkipped) {
+            recordOutcome(state, step.id, 'skipped');
+            await ctx.save();
+            ctx.ui.info(`— ${step.title} (skipped: ${err.message})`);
+            return;
+        }
+        if (err instanceof StepCancelled) {
+            recordOutcome(state, step.id, 'pending');
+            await ctx.save();
+            ctx.ui.warn(`Cancelled at "${step.title}". Progress saved — re-run to resume.`);
+            return 'cancelled';
+        }
+        if (err instanceof StepAborted) {
+            recordOutcome(state, step.id, 'failed');
+            await ctx.save();
+            ctx.ui.error(`Stopped at "${step.title}": ${err.message}`);
+            return 'failed';
+        }
+        recordOutcome(state, step.id, 'failed');
+        await ctx.save();
+        throw err;
+    }
+}
+/** Keep the install, uninstall and deploy context under the same whole-run lock. */
+async function withInstallContext(opts, run) {
+    const release = acquireLock(opts.instance, opts.home);
+    try {
+        return await run(buildContext(loadServerState(opts.instance, opts.home), opts));
+    }
+    finally {
+        release();
+    }
+}
+/** Group variant for `server-migrate`: every instance lock, taken in sorted order, held to the end. */
+export async function withInstallLocks(instances, home, run) {
+    const releases = [];
+    try {
+        for (const instance of [...instances].sort())
+            releases.push(acquireLock(instance, home));
+        return await run();
+    }
+    finally {
+        for (const release of releases.reverse())
+            release();
+    }
+}
+export async function runInstall(strategy, opts) {
+    return withInstallContext(opts, async (ctx) => {
+        const { state } = ctx;
+        // buildContext reconciles dry-run records first, so a preview of platform A
+        // never blocks a real install of platform B (the reset clears `platform`).
+        const freshInstall = setupInstallRecord(state, strategy, opts);
+        await strategy.preflight(ctx); // throws PreflightError to refuse politely
+        // A grant left on this port belongs to a cockpit that is gone; a completed install keeps its own.
+        await withdrawRemoteSettings(ctx, state.primaryPort, 'a new install on this port', freshInstall);
+        const steps = strategy.steps(ctx);
+        const knownIds = new Set(steps.map((s) => s.id));
+        const unknownIds = [...opts.reconfigure].filter((id) => !knownIds.has(id));
+        if (unknownIds.length > 0) {
+            throw new PreflightError(`unknown --reconfigure step id(s): ${unknownIds.join(', ')} — ` +
+                `valid ids for ${strategy.id}: ${[...knownIds].join(', ')}`);
+        }
+        if (opts.reinstall) {
+            ctx.ui.info(`Reinstalling ${strategy.label} — every step will re-run.`);
+        }
+        else {
+            const resolvedCount = steps.filter((s) => isResolved(state.steps[s.id])).length;
+            if (resolvedCount > 0) {
+                ctx.ui.info(`Resuming ${strategy.label} — ${resolvedCount}/${steps.length} steps already done.`);
+            }
+        }
+        for (const step of steps) {
+            const status = await runInstallStep(step, ctx, opts);
+            if (status)
+                return { status, state };
+        }
+        const requiredAllDone = steps
+            .filter((s) => !s.optional)
+            .every((s) => state.steps[s.id]?.status === 'done');
+        state.installed = requiredAllDone;
+        state.updatedAt = opts.now;
+        await ctx.save();
+        return { status: 'complete', state };
+    });
+}
+export async function runUninstall(strategy, opts) {
+    return withInstallContext(opts, async (ctx) => {
+        const { state } = ctx;
+        // Same guard as install/deploy: undoing with the wrong strategy would skip
+        // the real artifacts and (before this guard existed) destroy their ledger.
+        if (state.platform && state.platform !== strategy.id) {
+            throw new PreflightError(`this host has a ${state.platform} install recorded — run \`server-uninstall --platform ${state.platform}\``);
+        }
+        const registeredProjects = (await loadWorkspaceConfig(opts.home.workspaceConfig)).projects.length;
+        if (registeredProjects > 0) {
+            ctx.ui.warn(`${registeredProjects} ${registeredProjects === 1 ? 'project is' : 'projects are'} registered in ~/.cezar/config.json.`);
+            const proceed = await ctx.ui.confirm({
+                message: 'Removing this server will make them unavailable. Continue?',
+                initialValue: false,
+            });
+            if (proceed !== true)
+                return { status: 'cancelled', state };
+        }
+        await withdrawRemoteSettings(ctx, state.primaryPort, 'uninstalling this cockpit');
+        // Reverse order: undo the last-created first. `failed` outcomes are undone
+        // too — the step may have created artifacts before failing, and every undo
+        // is written to work from constants with a null/partial `created`.
+        const steps = [...strategy.steps(ctx)].reverse();
+        for (const step of steps) {
+            const outcome = state.steps[step.id];
+            if (!needsUndo(outcome))
+                continue;
+            try {
+                await step.undo(ctx, outcome.created ?? null);
+                delete state.steps[step.id];
+                state.updatedAt = opts.now;
+                await ctx.save();
+            }
+            catch (err) {
+                if (err instanceof StepCancelled) {
+                    ctx.ui.warn(`Cancelled during uninstall at "${step.title}". Re-run to continue.`);
+                    return { status: 'cancelled', state };
+                }
+                ctx.ui.error(`Failed to reverse "${step.title}": ${err instanceof Error ? err.message : String(err)}`);
+                return { status: 'failed', state };
+            }
+        }
+        // Drop entries that never had a system effect; anything left was recorded
+        // by a step id this binary doesn't know (a newer cezar) and was NOT
+        // reversed — keep its ledger and say so instead of silently erasing it.
+        for (const id of Object.keys(state.steps)) {
+            if (!needsUndo(state.steps[id]))
+                delete state.steps[id];
+        }
+        const leftover = Object.keys(state.steps);
+        state.installed = false;
+        state.updatedAt = opts.now;
+        if (leftover.length > 0) {
+            ctx.ui.warn(`Not reversed (recorded by a different ${productName('cezar')} version): ${leftover.join(', ')}. ` +
+                `Their record is kept — re-run server-uninstall with the ${productName('cezar')} version that installed them.`);
+            await ctx.save();
+            return { status: 'failed', state };
+        }
+        // A completed uninstall leaves the record empty so the host can be
+        // re-installed with any platform (the install guard keys off `platform`,
+        // so it must be cleared here too).
+        state.platform = undefined;
+        state.publicUrl = undefined;
+        state.ephemeral = undefined;
+        state.domain = undefined;
+        await ctx.save();
+        // A named instance is fully gone now — drop its (empty) record so it no
+        // longer reserves a port or shows up as an install. The default record is
+        // kept, matching the legacy single-host behavior.
+        if (ctx.instance !== 'default')
+            deleteServerState(ctx.instance, ctx.home);
+        return { status: 'complete', state };
+    });
+}
+/**
+ * Reload the running cockpit to pick up a new cezar version — the standardized
+ * `server-deploy` flow. Delegates to the platform's `redeploy` (restart service
+ * + re-verify); holds the single-writer lock for the whole run.
+ */
+export async function runDeploy(strategy, opts) {
+    return withInstallContext(opts, async (ctx) => {
+        const { state } = ctx;
+        if (state.platform && state.platform !== strategy.id) {
+            throw new PreflightError(`this host has a ${state.platform} install recorded — deploy it with --platform ${state.platform}`);
+        }
+        if (!state.installed) {
+            ctx.ui.warn(`no completed ${strategy.label} install is recorded on this host — run \`server-install --platform ${strategy.id}\` first.`);
+            return { status: 'failed', state };
+        }
+        if (!strategy.redeploy) {
+            ctx.ui.warn(`${strategy.label} does not support server-deploy.`);
+            return { status: 'failed', state };
+        }
+        try {
+            await strategy.redeploy(ctx);
+        }
+        catch (err) {
+            if (err instanceof StepAborted || err instanceof StepCancelled) {
+                ctx.ui.error(`Deploy did not complete: ${err.message}`);
+                return { status: 'failed', state };
+            }
+            throw err;
+        }
+        state.updatedAt = opts.now;
+        await ctx.save();
+        return { status: 'complete', state };
+    });
+}
+//# sourceMappingURL=engine.js.map

package/dist/server-install/engine.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"engine.js","sourceRoot":"","sources":["../../src/server-install/engine.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAEjD,OAAO,EAAE,mBAAmB,EAAE,MAAM,wBAAwB,CAAC;AAC7D,OAAO,EAAE,qBAAqB,EAAE,SAAS,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAC7F,OAAO,EAAE,WAAW,EAAE,iBAAiB,EAAE,UAAU,EAAE,eAAe,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAC1G,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AACpF,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACtD,OAAO,EACL,MAAM,EACN,cAAc,GAQf,MAAM,YAAY,CAAC;AA4CpB;;;;;;GAMG;AACH,SAAS,aAAa,CAAC,KAAkB,EAAE,EAAU,EAAE,MAA6B;IAClF,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,OAAO,IAAI,IAAI,EAAE,CAAC;AAC1E,CAAC;AAED;4EAC4E;AAC5E,SAAS,SAAS,CAAC,OAAgC;IACjD,IAAI,CAAC,OAAO;QAAE,OAAO,KAAK,CAAC;IAC3B,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM,IAAI,OAAO,CAAC,MAAM,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC1E,OAAO,CAAC,OAAO,CAAC,OAAO,EAAE,SAAS,CAAC,MAAM,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;AACtD,CAAC;AAED;;;GAGG;AACH,SAAS,eAAe,CAAC,KAAkB,EAAE,IAAgB,EAAE,EAAM;IACnE,MAAM,UAAU,GAAG,CAAC,KAAK,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,SAAS,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAC7F,IAAI,IAAI,CAAC,MAAM,IAAI,UAAU,EAAE,CAAC;QAC9B,EAAE,CAAC,IAAI,CAAC,6FAA6F,CAAC,CAAC;QACvG,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IAC5B,CAAC;IACD,IAAI,CAAC,IAAI,CAAC,MAAM,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;QACjC,EAAE,CAAC,IAAI,CAAC,mFAAmF,CAAC,CAAC;QAC7F,KAAK,CAAC,KAAK,GAAG,EAAE,CAAC;QACjB,KAAK,CAAC,SAAS,GAAG,KAAK,CAAC;QACxB,KAAK,CAAC,QAAQ,GAAG,SAAS,CAAC;QAC3B,KAAK,CAAC,SAAS,GAAG,SAAS,CAAC;QAC5B,KAAK,CAAC,SAAS,GAAG,SAAS,CAAC;IAC9B,CAAC;IACD,IAAI,IAAI,CAAC,MAAM;QAAE,KAAK,CAAC,MAAM,GAAG,IAAI,CAAC;;QAChC,OAAO,KAAK,CAAC,MAAM,CAAC;IACzB,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;AAC3B,CAAC;AAED,SAAS,YAAY,CAAC,KAAkB,EAAE,IAAgB;IACxD,uEAAuE;IACvE,qDAAqD;IACrD,MAAM,EAAE,GACN,IAAI,CAAC,EAAE;QACP,CAAC,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,SAAS;YAC5B,CAAC,CAAC,YAAY,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,cAAc,EAAE,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;YAC3E,CAAC,CAAC,aAAa,EAAE,CAAC,CAAC;IACvB,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,SAAS,CAAC;IAC5C,MAAM,GAAG,GAAmB;QAC1B,KAAK;QACL,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,EAAE;QACF,QAAQ;QACR,MAAM,EAAE,IAAI,CAAC,MAAM,IAAI,aAAa;QACpC,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC,eAAe,CAAC,KAAK,EAAE,QAAQ,EAAE,IAAI,CAAC,IAAI,CAAC;QAC7D,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,WAAW,EAAE,IAAI,CAAC,WAAW;QAC7B,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,GAAG,EAAE,IAAI,CAAC,GAAG;QACb,KAAK,EAAE,EAAE;KACV,CAAC;IACF,MAAM,EAAE,OAAO,EAAE,GAAG,eAAe,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;IACrD,IAAI,CAAC,OAAO;QAAE,GAAG,CAAC,IAAI,GAAG,KAAK,IAAI,EAAE,GAAE,CAAC,CAAC;IACxC,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;GAGG;AACH,KAAK,UAAU,sBAAsB,CAAC,GAAmB,EAAE,IAAY,EAAE,GAAW,EAAE,IAAI,GAAG,IAAI;IAC/F,IAAI,CAAC,IAAI,IAAI,CAAC,SAAS,CAAC,kBAAkB,CAAC,OAAO,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC;QAAE,OAAO;IACjF,IAAI,GAAG,CAAC,MAAM,EAAE,CAAC;QACf,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,+DAA+D,IAAI,KAAK,GAAG,IAAI,CAAC,CAAC;QAC7F,OAAO;IACT,CAAC;IACD,MAAM,qBAAqB,CAAC,OAAO,CAAC,GAAG,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;IACzD,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,WAAW,CAAC,+CAA+C,IAAI,KAAK,GAAG,0CAA0C,IAAI,qBAAqB,CAAC,CAAC,CAAC;AAC3J,CAAC;AAED,SAAS,kBAAkB,CAAC,KAAkB,EAAE,QAA0B,EAAE,IAAgB;IAC1F,IAAI,KAAK,CAAC,QAAQ,IAAI,KAAK,CAAC,QAAQ,KAAK,QAAQ,CAAC,EAAE,EAAE,CAAC;QACrD,MAAM,IAAI,cAAc,CACtB,2BAA2B,KAAK,CAAC,QAAQ,wEAAwE,CAClH,CAAC;IACJ,CAAC;IACD,KAAK,CAAC,QAAQ,GAAG,QAAQ,CAAC,EAAE,CAAC;IAC7B,oEAAoE;IACpE,wEAAwE;IACxE,KAAK,CAAC,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,KAAK,CAAC,QAAQ,IAAI,SAAS,CAAC;IAC9D,IAAI,IAAI,CAAC,MAAM;QAAE,KAAK,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;IAC5C,4EAA4E;IAC5E,4EAA4E;IAC5E,IAAI,IAAI,CAAC,aAAa,KAAK,SAAS;QAAE,KAAK,CAAC,aAAa,GAAG,IAAI,CAAC,aAAa,CAAC;IAC/E,IAAI,IAAI,CAAC,QAAQ;QAAE,KAAK,CAAC,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC;IAClD,4EAA4E;IAC5E,8DAA8D;IAC9D,IAAI,IAAI,CAAC,IAAI;QAAE,KAAK,CAAC,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC;IAC7C,oGAAoG;IACpG,MAAM,YAAY,GAAG,KAAK,CAAC,SAAS,KAAK,IAAI,CAAC;IAC9C,KAAK,CAAC,SAAS,KAAK,IAAI,CAAC,GAAG,CAAC;IAC7B,KAAK,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC;IAC3B,OAAO,YAAY,CAAC;AACtB,CAAC;AAED,KAAK,UAAU,cAAc,CAAC,IAAiB,EAAE,GAAmB,EAAE,IAAgB;IACpF,MAAM,EAAE,KAAK,EAAE,GAAG,GAAG,CAAC;IACtB,0EAA0E;IAC1E,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,KAAK,IAAI,IAAI,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACxE,IAAI,CAAC,MAAM,IAAI,UAAU,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;QAChD,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC,KAAK,iBAAiB,CAAC,CAAC;QAC9C,OAAO;IACT,CAAC;IACD,sEAAsE;IACtE,IAAI,CAAC,MAAM,IAAI,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;QACvC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,OAAO,IAAI,IAAI,EAAE,CAAC;QAC1F,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;QACjB,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC,KAAK,oBAAoB,CAAC,CAAC;QACjD,OAAO;IACT,CAAC;IAED,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;QAClB,uEAAuE;QACvE,wEAAwE;QACxE,kDAAkD;QAClD,IAAI,GAAG,CAAC,SAAS,EAAE,CAAC;YAClB,aAAa,CAAC,KAAK,EAAE,IAAI,CAAC,EAAE,EAAE,SAAS,CAAC,CAAC;YACzC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;YACjB,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC,KAAK,mBAAmB,CAAC,CAAC;YAChD,OAAO;QACT,CAAC;QACD,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,EAAE,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,UAAU,IAAI,CAAC,KAAK,GAAG,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC;QAC/F,IAAI,OAAO,KAAK,MAAM,EAAE,CAAC;YACvB,aAAa,CAAC,KAAK,EAAE,IAAI,CAAC,EAAE,EAAE,SAAS,CAAC,CAAC;YACzC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;YACjB,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,iBAAiB,IAAI,CAAC,KAAK,uCAAuC,CAAC,CAAC;YAChF,OAAO,WAAW,CAAC;QACrB,CAAC;QACD,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;YACrB,aAAa,CAAC,KAAK,EAAE,IAAI,CAAC,EAAE,EAAE,SAAS,CAAC,CAAC;YACzC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;YACjB,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC,KAAK,YAAY,CAAC,CAAC;YACzC,OAAO;QACT,CAAC;IACH,CAAC;IAED,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACpC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;QACnD,KAAK,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC;QAC3B,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;IACnB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,GAAG,YAAY,WAAW,EAAE,CAAC;YAC/B,aAAa,CAAC,KAAK,EAAE,IAAI,CAAC,EAAE,EAAE,SAAS,CAAC,CAAC;YACzC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;YACjB,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC,KAAK,cAAc,GAAG,CAAC,OAAO,GAAG,CAAC,CAAC;YACzD,OAAO;QACT,CAAC;QACD,IAAI,GAAG,YAAY,aAAa,EAAE,CAAC;YACjC,aAAa,CAAC,KAAK,EAAE,IAAI,CAAC,EAAE,EAAE,SAAS,CAAC,CAAC;YACzC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;YACjB,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,iBAAiB,IAAI,CAAC,KAAK,uCAAuC,CAAC,CAAC;YAChF,OAAO,WAAW,CAAC;QACrB,CAAC;QACD,IAAI,GAAG,YAAY,WAAW,EAAE,CAAC;YAC/B,aAAa,CAAC,KAAK,EAAE,IAAI,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC;YACxC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;YACjB,GAAG,CAAC,EAAE,CAAC,KAAK,CAAC,eAAe,IAAI,CAAC,KAAK,MAAM,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;YAC3D,OAAO,QAAQ,CAAC;QAClB,CAAC;QACD,aAAa,CAAC,KAAK,EAAE,IAAI,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC;QACxC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;QACjB,MAAM,GAAG,CAAC;IACZ,CAAC;AACH,CAAC;AAED,oFAAoF;AACpF,KAAK,UAAU,kBAAkB,CAAC,IAAgB,EAAE,GAAgD;IAClG,MAAM,OAAO,GAAG,WAAW,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;IACtD,IAAI,CAAC;QACH,OAAO,MAAM,GAAG,CAAC,YAAY,CAAC,eAAe,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC;IAClF,CAAC;YAAS,CAAC;QACT,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,uGAAuG;AACvG,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAI,SAA4B,EAAE,IAAU,EAAE,GAAqB;IACvG,MAAM,QAAQ,GAAsB,EAAE,CAAC;IACvC,IAAI,CAAC;QACH,KAAK,MAAM,QAAQ,IAAI,CAAC,GAAG,SAAS,CAAC,CAAC,IAAI,EAAE;YAAE,QAAQ,CAAC,IAAI,CAAC,WAAW,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC;QACzF,OAAO,MAAM,GAAG,EAAE,CAAC;IACrB,CAAC;YAAS,CAAC;QACT,KAAK,MAAM,OAAO,IAAI,QAAQ,CAAC,OAAO,EAAE;YAAE,OAAO,EAAE,CAAC;IACtD,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,QAA0B,EAAE,IAAgB;IAC3E,OAAO,kBAAkB,CAAC,IAAI,EAAE,KAAK,EAAC,GAAG,EAAC,EAAE;QAC1C,MAAM,EAAE,KAAK,EAAE,GAAG,GAAG,CAAC;QACtB,4EAA4E;QAC5E,2EAA2E;QAC3E,MAAM,YAAY,GAAG,kBAAkB,CAAC,KAAK,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC;QAE/D,MAAM,QAAQ,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,2CAA2C;QAC1E,kGAAkG;QAClG,MAAM,sBAAsB,CAAC,GAAG,EAAE,KAAK,CAAC,WAAW,EAAE,4BAA4B,EAAE,YAAY,CAAC,CAAC;QAEjG,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAClC,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QACjD,MAAM,UAAU,GAAG,CAAC,GAAG,IAAI,CAAC,WAAW,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;QAC3E,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC1B,MAAM,IAAI,cAAc,CACtB,qCAAqC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK;gBAC7D,iBAAiB,QAAQ,CAAC,EAAE,KAAK,CAAC,GAAG,QAAQ,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAC9D,CAAC;QACJ,CAAC;QACD,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YACnB,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,gBAAgB,QAAQ,CAAC,KAAK,4BAA4B,CAAC,CAAC;QAC1E,CAAC;aAAM,CAAC;YACN,MAAM,aAAa,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;YAChF,IAAI,aAAa,GAAG,CAAC,EAAE,CAAC;gBACtB,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,YAAY,QAAQ,CAAC,KAAK,MAAM,aAAa,IAAI,KAAK,CAAC,MAAM,sBAAsB,CAAC,CAAC;YACnG,CAAC;QACH,CAAC;QAED,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,IAAI,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;YACrD,IAAI,MAAM;gBAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;QACvC,CAAC;QAED,MAAM,eAAe,GAAG,KAAK;aAC1B,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;aAC1B,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,MAAM,KAAK,MAAM,CAAC,CAAC;QACtD,KAAK,CAAC,SAAS,GAAG,eAAe,CAAC;QAClC,KAAK,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC;QAC3B,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;QACjB,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC;IACvC,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,QAA0B,EAAE,IAAgB;IAC7E,OAAO,kBAAkB,CAAC,IAAI,EAAE,KAAK,EAAC,GAAG,EAAC,EAAE;QAC1C,MAAM,EAAE,KAAK,EAAE,GAAG,GAAG,CAAC;QACtB,2EAA2E;QAC3E,2EAA2E;QAC3E,IAAI,KAAK,CAAC,QAAQ,IAAI,KAAK,CAAC,QAAQ,KAAK,QAAQ,CAAC,EAAE,EAAE,CAAC;YACrD,MAAM,IAAI,cAAc,CACtB,mBAAmB,KAAK,CAAC,QAAQ,yDAAyD,KAAK,CAAC,QAAQ,IAAI,CAC7G,CAAC;QACJ,CAAC;QAED,MAAM,kBAAkB,GAAG,CAAC,MAAM,mBAAmB,CAAC,IAAI,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC;QAClG,IAAI,kBAAkB,GAAG,CAAC,EAAE,CAAC;YAC3B,GAAG,CAAC,EAAE,CAAC,IAAI,CACT,GAAG,kBAAkB,IAAI,kBAAkB,KAAK,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,cAAc,sCAAsC,CACxH,CAAC;YACF,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,EAAE,CAAC,OAAO,CAAC;gBACnC,OAAO,EAAE,4DAA4D;gBACrE,YAAY,EAAE,KAAK;aACpB,CAAC,CAAC;YACH,IAAI,OAAO,KAAK,IAAI;gBAAE,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC;QAC9D,CAAC;QACD,MAAM,sBAAsB,CAAC,GAAG,EAAE,KAAK,CAAC,WAAW,EAAE,2BAA2B,CAAC,CAAC;QAElF,2EAA2E;QAC3E,2EAA2E;QAC3E,mEAAmE;QACnE,MAAM,KAAK,GAAG,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;QACjD,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,MAAM,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACrC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC;gBAAE,SAAS;YAClC,IAAI,CAAC;gBACH,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,OAAO,CAAC,OAAO,IAAI,IAAI,CAAC,CAAC;gBAC9C,OAAO,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;gBAC5B,KAAK,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC;gBAC3B,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;YACnB,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,IAAI,GAAG,YAAY,aAAa,EAAE,CAAC;oBACjC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,kCAAkC,IAAI,CAAC,KAAK,wBAAwB,CAAC,CAAC;oBAClF,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC;gBACxC,CAAC;gBACD,GAAG,CAAC,EAAE,CAAC,KAAK,CAAC,sBAAsB,IAAI,CAAC,KAAK,MAAM,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;gBACvG,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;YACrC,CAAC;QACH,CAAC;QAED,0EAA0E;QAC1E,oEAAoE;QACpE,wEAAwE;QACxE,KAAK,MAAM,EAAE,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;YAC1C,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;gBAAE,OAAO,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAC1D,CAAC;QACD,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAC1C,KAAK,CAAC,SAAS,GAAG,KAAK,CAAC;QACxB,KAAK,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC;QAC3B,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACxB,GAAG,CAAC,EAAE,CAAC,IAAI,CACT,yCAAyC,WAAW,CAAC,OAAO,CAAC,cAAc,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI;gBAChG,2DAA2D,WAAW,CAAC,OAAO,CAAC,+BAA+B,CACjH,CAAC;YACF,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;YACjB,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;QACrC,CAAC;QACD,mEAAmE;QACnE,yEAAyE;QACzE,mCAAmC;QACnC,KAAK,CAAC,QAAQ,GAAG,SAAS,CAAC;QAC3B,KAAK,CAAC,SAAS,GAAG,SAAS,CAAC;QAC5B,KAAK,CAAC,SAAS,GAAG,SAAS,CAAC;QAC5B,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC;QACzB,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;QACjB,wEAAwE;QACxE,0EAA0E;QAC1E,kDAAkD;QAClD,IAAI,GAAG,CAAC,QAAQ,KAAK,SAAS;YAAE,iBAAiB,CAAC,GAAG,CAAC,QAAQ,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;QAC1E,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC;IACvC,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,QAA0B,EAAE,IAAgB;IAC1E,OAAO,kBAAkB,CAAC,IAAI,EAAE,KAAK,EAAC,GAAG,EAAC,EAAE;QAC1C,MAAM,EAAE,KAAK,EAAE,GAAG,GAAG,CAAC;QACtB,IAAI,KAAK,CAAC,QAAQ,IAAI,KAAK,CAAC,QAAQ,KAAK,QAAQ,CAAC,EAAE,EAAE,CAAC;YACrD,MAAM,IAAI,cAAc,CACtB,mBAAmB,KAAK,CAAC,QAAQ,iDAAiD,KAAK,CAAC,QAAQ,EAAE,CACnG,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,CAAC;YACrB,GAAG,CAAC,EAAE,CAAC,IAAI,CACT,gBAAgB,QAAQ,CAAC,KAAK,uEAAuE,QAAQ,CAAC,EAAE,WAAW,CAC5H,CAAC;YACF,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;QACrC,CAAC;QACD,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC;YACvB,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC,KAAK,kCAAkC,CAAC,CAAC;YACjE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;QACrC,CAAC;QACD,IAAI,CAAC;YACH,MAAM,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;QAC/B,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,GAAG,YAAY,WAAW,IAAI,GAAG,YAAY,aAAa,EAAE,CAAC;gBAC/D,GAAG,CAAC,EAAE,CAAC,KAAK,CAAC,4BAA4B,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;gBACxD,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;YACrC,CAAC;YACD,MAAM,GAAG,CAAC;QACZ,CAAC;QACD,KAAK,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC;QAC3B,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;QACjB,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC;IACvC,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/server-install/group-migrate.d.ts

@@ -0,0 +1,26 @@
+import type { Home } from '../home/home.ts';
+import type { PlatformStrategy, Runner, Ui } from './types.ts';
+/**
+ * `server-migrate` (spec 2026-11-06 §4 "Server installs"). The instances recorded in one home form
+ * one group: stop all, stage the home with `migrateLegacyHome(..., { commit: false })`, move each
+ * platform's resources, start and check every instance, then commit. Any failure rolls the whole
+ * group back to the old units, sites and legacy home. Ledgers change only after the commit.
+ */
+export interface ServerMigrateOptions {
+    legacy: Home;
+    target: Home;
+    strategy: (platform: string) => PlatformStrategy | undefined;
+    dryRun: boolean;
+    assumeYes: boolean;
+    repoRoot: string;
+    now: string;
+    ui: Ui;
+    runner?: Runner;
+    env?: NodeJS.ProcessEnv;
+}
+export type ServerMigrateStatus = 'migrated' | 'unchanged' | 'planned' | 'rolled-back' | 'failed';
+export interface ServerMigrateResult {
+    status: ServerMigrateStatus;
+    lines: string[];
+}
+export declare function runServerMigrate(opts: ServerMigrateOptions): Promise<ServerMigrateResult>;

package/dist/server-install/group-migrate.js

@@ -0,0 +1,241 @@
+import { readFileSync } from 'node:fs';
+import { join } from 'node:path';
+import { readInstallMarker } from '../home/install-marker.js';
+import { commitLegacyMigration, migrateLegacyHome, rollbackLegacyMigration } from '../home/migrate.js';
+import { planLegacyMigration } from '../home/migration-plan.js';
+import { withInstallLocks } from './engine.js';
+import { applyMigrationReport } from './migration-report.js';
+import { readServerMigrateJournal, removeServerMigrateJournal, writeServerMigrateJournal } from './migrate-journal.js';
+import { listServerInstances, loadServerState, saveServerState } from './state.js';
+import { defaultRunner } from './steps.js';
+import { supportsServerMigration } from './strategies.js';
+const message = (error) => error instanceof Error ? error.message : String(error);
+const pending = (target) => readInstallMarker(target.config)?.state === 'pending';
+const committed = (target) => readInstallMarker(target.config)?.state === 'committed';
+class Group {
+    opts;
+    records;
+    lines = [];
+    /** True once this run staged the home; its commit is then this run's to finish. */
+    staged = false;
+    prefs = {};
+    constructor(opts, records) {
+        this.opts = opts;
+        this.records = records;
+    }
+    /** Planning cannot seed a version log or recover a journal as a side effect of reading. */
+    instances() {
+        return listServerInstances(this.records, this.opts.dryRun ? path => readFileSync(path, 'utf8') : undefined);
+    }
+    say(line, level = 'info') {
+        this.lines.push(line);
+        this.opts.ui[level](line);
+    }
+    /** A migration context never saves: P2d strategies report moves and the group persists them. */
+    context(instance, state, dryRun = this.opts.dryRun) {
+        return { home: this.records, state: structuredClone(state), ui: this.opts.ui, runner: this.opts.runner ?? defaultRunner, instance,
+            save: async () => { }, dryRun, assumeYes: this.opts.assumeYes, reconfigure: new Set(), repoRoot: this.opts.repoRoot, now: this.opts.now, prefs: this.prefs };
+    }
+    migratedContext(member) {
+        return this.context(member.instance, applyMigrationReport(member.state, member.moved ?? member.planned), false);
+    }
+    member(instance, state) {
+        const strategy = this.opts.strategy(state.platform ?? '');
+        if (!supportsServerMigration(strategy)) {
+            return `${instance}: server-migrate does not support platform ${state.platform ?? 'unknown'}`;
+        }
+        return strategy;
+    }
+}
+/** Every completed install in the records home, with its dry-run plan. Refusals change nothing. */
+async function planGroup(group) {
+    const members = [];
+    const errors = [];
+    for (const { instance, state } of group.instances()) {
+        if (!state.installed || state.dryRun) {
+            group.say(`${instance}: not a completed install — left as is`);
+            continue;
+        }
+        const strategy = group.member(instance, state);
+        if (typeof strategy === 'string') {
+            errors.push(strategy);
+            continue;
+        }
+        const planned = await strategy.migrate(group.context(instance, state, true));
+        errors.push(...planned.errors.map(e => `${instance}: ${e.artifact.path ?? e.artifact.name ?? e.artifact.type}: ${e.message}`));
+        members.push({ instance, state, strategy, planned });
+    }
+    return { members, errors };
+}
+function describePlan(group, members) {
+    const { legacy, target } = group.opts;
+    const names = members.map(m => m.instance).join(', ');
+    const homeCommitted = committed(target);
+    group.say(`stop: every instance that shares this home stops first (${names})`);
+    if (homeCommitted)
+        group.say(`home: already migrated to ${target.config}`);
+    else {
+        const plan = planLegacyMigration(legacy, target);
+        group.say(`home: ${legacy.root} → config ${target.config}, state ${target.state}, data ${target.data} (${plan.files.length} files copied; the legacy home stays)`);
+    }
+    for (const { instance, planned } of members) {
+        // A platform's details name each of its moves; the raw moves print only when it gives none.
+        const lines = planned.details?.length ? planned.details : planned.moved.map(({ stepId, from, to }) => `${stepId} ${from.path ?? from.name} → ${to.path ?? to.name}`);
+        for (const line of lines)
+            group.say(`${instance}: ${line}`);
+    }
+    group.say(`group: ${names} succeed or fail together. Each instance starts under its new name and passes its health check before the group commits.`);
+    if (!homeCommitted)
+        group.say(`marker: ${join(target.config, 'install.json')} stays pending (the new home is read-only) until every instance passes, then commits.`);
+    group.say(`rollback: any failure restores every old service definition (systemd units and nginx sites, launchd plists), starts the old services${homeCommitted ? '' : ' and renames the marker to install.json.failed; the legacy home stays in use'}. A restore error leaves its instance stopped and the rollback journal in place: fix the reported error and re-run server-migrate to finish the rollback. A restored service that fails its start check is reported as a warning.`);
+}
+function journalFor(group, members, phase) {
+    return { version: 1, phase, stagedHome: group.staged, instances: members.map(({ instance, planned, moved }) => ({ instance, planned, ...(moved ? { moved } : {}) })) };
+}
+/** The home marker is committed by now; apply the ledgers. Recovery also finishes the home's
+ *  publication (MOVED.json, PATH), which commitLegacyMigration repeats safely. */
+function commitGroup(group, members, finishHome) {
+    const { target, env, now } = group.opts;
+    if (finishHome)
+        commitLegacyMigration(target, env);
+    for (const { instance, state, moved } of members) {
+        if (moved)
+            saveServerState({ ...applyMigrationReport(state, moved), updatedAt: now }, instance, target);
+    }
+    removeServerMigrateJournal(target);
+}
+/** Reverse every planned move from disk state, then the home. Start only fully restored instances. */
+async function rollbackGroup(group, members) {
+    const { target } = group.opts;
+    if (readServerMigrateJournal(target) && readInstallMarker(target.config))
+        writeServerMigrateJournal(target, journalFor(group, members, 'rolling-back'));
+    const restored = [];
+    for (const member of [...members].reverse()) {
+        const report = await member.strategy.rollbackMigration(group.context(member.instance, member.state, false), member.planned);
+        for (const error of report.errors)
+            group.say(`${member.instance}: rollback of ${error.artifact.path ?? error.artifact.name}: ${error.message}`, 'error');
+        if (!report.errors.length)
+            restored.push(member);
+    }
+    const complete = restored.length === members.length;
+    if (complete) {
+        removeServerMigrateJournal(target);
+        if (pending(target))
+            rollbackLegacyMigration(target);
+    }
+    else
+        group.say('The rollback is incomplete. Re-run server-migrate to finish it.', 'error');
+    for (const member of restored.reverse()) {
+        try {
+            await member.strategy.startService(group.context(member.instance, member.state, false));
+        }
+        catch (error) {
+            group.say(`${member.instance}: the restored service did not pass its check: ${message(error)}`, 'warn');
+        }
+    }
+    return complete;
+}
+/** Finish or reverse an interrupted run before planning a new one. */
+async function recover(group, journal) {
+    const { target } = group.opts;
+    const loaded = journal.instances.map(({ instance, planned, moved }) => ({ instance, planned, moved, state: loadServerState(instance, group.records) }));
+    // A staged home whose marker committed belongs to a group that passed every check.
+    if (journal.phase === 'committing' || (journal.stagedHome && committed(target))) {
+        group.say('Finishing an interrupted server-migrate commit.');
+        commitGroup(group, loaded, journal.stagedHome);
+        return 'committed';
+    }
+    group.say('Rolling back an interrupted server-migrate run.');
+    const members = [];
+    for (const entry of loaded) {
+        const strategy = group.member(entry.instance, entry.state);
+        if (typeof strategy === 'string') {
+            group.say(strategy, 'error');
+            return 'failed';
+        }
+        members.push({ ...entry, strategy });
+    }
+    if (!members.length && pending(target))
+        rollbackLegacyMigration(target);
+    return await rollbackGroup(group, members) ? 'rolled-back' : 'failed';
+}
+async function stopAll(group, members) {
+    for (const member of members)
+        await member.strategy.stopService(group.context(member.instance, member.state, false));
+}
+async function moveAndCheck(group, members) {
+    const { legacy, target, env } = group.opts;
+    if (!committed(target)) {
+        const staged = migrateLegacyHome(legacy, target, { commit: false, ...(env ? { env } : {}) });
+        if (staged.status !== 'pending')
+            throw new Error(`Expected a staged home, got ${staged.status}`);
+        group.staged = true;
+    }
+    writeServerMigrateJournal(target, journalFor(group, members, 'migrating'));
+    for (const member of members) {
+        member.moved = await member.strategy.migrate(group.context(member.instance, member.state, false));
+        writeServerMigrateJournal(target, journalFor(group, members, 'migrating'));
+        const [error] = member.moved.errors;
+        if (error)
+            throw new Error(`${member.instance}: ${error.artifact.path ?? error.artifact.name}: ${error.message}`);
+    }
+    for (const member of members) {
+        group.say(`${member.instance}: checking health`);
+        await member.strategy.startService(group.migratedContext(member), { probeAuth: true });
+    }
+    // The last refusal point: a legacy write during the checks refuses here and rolls the group back.
+    if (pending(target))
+        commitLegacyMigration(target, env);
+    writeServerMigrateJournal(target, journalFor(group, members, 'committing'));
+}
+async function migrateGroup(group) {
+    const journal = readServerMigrateJournal(group.opts.target);
+    if (journal && !group.opts.dryRun) {
+        const recovered = await recover(group, journal);
+        if (recovered !== 'rolled-back')
+            return recovered === 'committed' ? 'migrated' : 'failed';
+    }
+    const { members, errors } = await planGroup(group);
+    for (const error of errors)
+        group.say(error, 'error');
+    if (errors.length)
+        return 'failed';
+    if (!members.length) {
+        group.say(`No completed server install is recorded in ${group.records.root}.`);
+        return 'unchanged';
+    }
+    if (committed(group.opts.target) && members.every(m => !m.planned.moved.length)) {
+        group.say('Every server install already uses the new names. Nothing to migrate.');
+        return 'unchanged';
+    }
+    describePlan(group, members);
+    if (group.opts.dryRun)
+        return 'planned';
+    try {
+        await stopAll(group, members);
+        await moveAndCheck(group, members);
+    }
+    catch (error) {
+        if (!(group.staged && committed(group.opts.target))) {
+            group.say(`server-migrate failed: ${message(error)}. Rolling back every instance.`, 'error');
+            return await rollbackGroup(group, members) ? 'rolled-back' : 'failed';
+        }
+        // The home committed after every check passed: finish forward, never roll a committed home back.
+        group.say(`server-migrate committed the home, then failed: ${message(error)}. Finishing the commit.`, 'warn');
+        commitGroup(group, members, true);
+        return 'migrated';
+    }
+    commitGroup(group, members, false);
+    group.say(`Migrated ${members.length} server install${members.length === 1 ? '' : 's'}.`, 'info');
+    return 'migrated';
+}
+export async function runServerMigrate(opts) {
+    // Until the home commits, the legacy home holds the authoritative server records and locks.
+    const records = committed(opts.target) ? opts.target : opts.legacy;
+    const group = new Group(opts, records);
+    // A dry run only reads: it takes no install lock, because a lock is a home write.
+    const instances = group.instances().map(i => i.instance);
+    const status = opts.dryRun ? await migrateGroup(group) : await withInstallLocks(instances, records, () => migrateGroup(group));
+    return { status, lines: group.lines };
+}
+//# sourceMappingURL=group-migrate.js.map