@hearsay-tools/squawk 0.0.0-stage → 0.17.0-dev.5685

package/dist/server-install/steps.js

@@ -0,0 +1,348 @@
+import { productName } from '../home/display.js';
+import { spawn } from 'node:child_process';
+import { randomInt } from 'node:crypto';
+import { isRunnerId } from '../core/agent-runner.js';
+import { detectEnvironment } from '../core/backend-detect.js';
+import { CANCEL, } from './types.js';
+/**
+ * Platform-neutral step helpers. Privileged steps show the exact command, let the operator run
+ * it, then verify state before advancing or offering a retry.
+ */
+/** Real command runner (Node child_process). */
+export const defaultRunner = {
+    capture(program, args, opts) {
+        // spawn (not execFile) so a secret can be fed via stdin instead of argv.
+        return new Promise((resolve) => {
+            const child = spawn(program, args, { stdio: ['pipe', 'pipe', 'pipe'] });
+            let stdout = '';
+            let stderr = '';
+            child.stdout?.on('data', (d) => (stdout += String(d)));
+            child.stderr?.on('data', (d) => (stderr += String(d)));
+            child.on('error', () => resolve({ code: 127, stdout, stderr }));
+            child.on('close', (code) => resolve({ code: code ?? 0, stdout, stderr }));
+            // A child that exits before draining stdin makes the write emit EPIPE;
+            // swallow it so `capture` never crashes the CLI.
+            child.stdin?.on('error', () => { });
+            if (opts?.input != null)
+                child.stdin?.end(opts.input);
+            else
+                child.stdin?.end();
+        });
+    },
+    interactive(program, args, opts) {
+        return new Promise((resolve) => {
+            // With `input`, stdin is piped (sudo still prompts on /dev/tty, not stdin).
+            // `env` adds variables for in-child `$VAR` expansion — the other secret
+            // channel besides stdin that keeps values out of argv.
+            const child = spawn(program, args, {
+                stdio: [opts?.input != null ? 'pipe' : 'inherit', 'inherit', 'inherit'],
+                env: opts?.env ? { ...process.env, ...opts.env } : undefined,
+            });
+            child.on('error', () => resolve(127));
+            child.on('close', (code) => resolve(code ?? 0));
+            if (opts?.input != null) {
+                child.stdin?.on('error', () => { }); // EPIPE if the child exits early
+                child.stdin?.end(opts.input);
+            }
+        });
+    },
+};
+/** Run a probe and assert its result. Returns false in dry-run (nothing is verifiably present). */
+export async function verifyCommand(ctx, program, args, matcher = (r) => r.code === 0) {
+    if (ctx.dryRun)
+        return false;
+    return matcher(await ctx.runner.capture(program, args));
+}
+/**
+ * True when `sudo -n true` succeeds — the box grants passwordless sudo, OR a
+ * sudo timestamp from an earlier command in this session is still cached.
+ * Both mean "sudo will run right now without prompting", which is exactly the
+ * question `--yes` mode needs answered before choosing sudo over delegate.
+ */
+export async function hasPasswordlessSudo(ctx) {
+    if (ctx.dryRun)
+        return false;
+    return (await ctx.runner.capture('sudo', ['-n', 'true'])).code === 0;
+}
+/** A bare DNS hostname — no scheme, no path, no shell/nginx metacharacters. */
+export const HOSTNAME_RE = /^(?=.{1,253}$)([a-z0-9](-?[a-z0-9])*\.)+[a-z]{2,}$/i;
+export class StepCancelled extends Error {
+}
+export class StepAborted extends Error {
+}
+/** Thrown from an optional step's `run()` to record it as `skipped` (e.g. certbot DNS not ready). */
+export class StepSkipped extends Error {
+}
+/**
+ * A strong random cockpit password: guaranteed to mix lower/upper letters, a
+ * digit and a symbol, drawn from a crypto RNG, with visually-ambiguous glyphs
+ * (0/O/1/l/I) removed. Offered by the identity step so operators don't fall back
+ * to a weak hand-picked password.
+ */
+export function generatePassword(length = 16) {
+    const lower = 'abcdefghijkmnpqrstuvwxyz'; // no l
+    const upper = 'ABCDEFGHJKLMNPQRSTUVWXYZ'; // no I, O
+    const digits = '23456789'; // no 0, 1
+    const symbols = '!@#$%^&*-_=+';
+    const all = lower + upper + digits + symbols;
+    const pick = (set) => set.charAt(randomInt(set.length));
+    const chars = [pick(lower), pick(upper), pick(digits), pick(symbols)];
+    while (chars.length < Math.max(length, 8))
+        chars.push(pick(all));
+    // Fisher–Yates shuffle so the guaranteed-class chars aren't always in front.
+    for (let i = chars.length - 1; i > 0; i--) {
+        const j = randomInt(i + 1);
+        const tmp = chars[i];
+        chars[i] = chars[j];
+        chars[j] = tmp;
+    }
+    return chars.join('');
+}
+/**
+ * Execute one privileged command with the operator in the loop:
+ * print → run-via-sudo OR delegate → verify → redo-on-mismatch.
+ *
+ * - Dry-run: prints the intended command and returns (no exec, no verify).
+ * - `--yes` with passwordless sudo: runs non-interactively.
+ * - `--yes` without passwordless sudo: falls back to delegate (never blocks on a hidden prompt).
+ *
+ * Throws `StepCancelled` if the user cancels, `StepAborted` if they give up after a failed verify.
+ */
+/** Single-quote a shell string so a copy-paste of `display` runs exactly what we run. */
+export function shquote(s) {
+    return `'${s.replace(/'/g, `'\\''`)}'`;
+}
+/** Decide how one privileged command runs: `--yes` picks by passwordless sudo,
+ *  a remembered answer is reused, otherwise the operator chooses. */
+async function chooseSudoMode(ctx, passwordless) {
+    const { ui } = ctx;
+    if (ctx.assumeYes) {
+        return passwordless ? 'sudo' : 'delegate';
+    }
+    if (ctx.prefs.sudoMode) {
+        // Remembered from an earlier answer — don't ask again this run.
+        return ctx.prefs.sudoMode;
+    }
+    // Default to "I'll run it myself as root" — the safe, no-surprise choice
+    // for operators who prefer to paste privileged commands into a root shell.
+    const choice = await ui.select({
+        message: 'How should this privileged command run?',
+        options: [
+            { value: 'delegate', label: "I'll run it myself as root", hint: 'paste & run as root, then confirm' },
+            { value: 'sudo', label: 'Run it now via sudo', hint: 'streams output here' },
+        ],
+        initialValue: 'delegate',
+    });
+    if (choice === CANCEL)
+        throw new StepCancelled();
+    ctx.prefs.sudoMode = choice; // reuse this choice for every later privileged command
+    return choice;
+}
+/** Execute one chosen attempt. Sudo runs it here; delegate hands it to the
+ *  operator and confirms. Returns the exit code (`undefined` in delegate mode,
+ *  where the operator ran the command in a separate root shell). */
+async function runPrivilegedCommand(ctx, opts, mode) {
+    const { ui } = ctx;
+    if (mode === 'sudo') {
+        const commandCode = await ctx.runner.interactive('sudo', ['bash', '-lc', opts.command], opts.input != null ? { input: opts.input } : undefined);
+        if (commandCode !== 0)
+            ui.warn(`command exited with code ${commandCode}`);
+        return commandCode;
+    }
+    ui.info('Copy the command above and run it as root on the server (paste into a root shell, or prefix with sudo), then confirm below.');
+    if (opts.input != null) {
+        // Screen-only: pasted as stdin it stays out of argv AND shell history.
+        ui.info(`The command reads from stdin — after starting it, paste this ${opts.inputLabel ?? 'line'} and press Ctrl-D:`);
+        ui.message(opts.input);
+    }
+    if (!ctx.assumeYes) {
+        const done = await ui.confirm({ message: 'Have you run it as root?', initialValue: true });
+        if (done === CANCEL)
+            throw new StepCancelled();
+    }
+    return undefined;
+}
+/** React to one failed verification: give up under `--yes`, offer skip for a
+ *  skippable step, otherwise ask to retry (returning re-runs the loop). */
+async function handleFailedVerification(ctx, opts) {
+    const { ui } = ctx;
+    ui.error('That did not take effect — the verification check still fails.');
+    if (ctx.assumeYes) {
+        throw opts.skippable
+            ? new StepSkipped(`verification failed for: ${opts.command}`)
+            : new StepAborted(`verification failed for: ${opts.command}`);
+    }
+    if (opts.skippable) {
+        const next = await ui.select({
+            message: 'That did not verify. What now?',
+            options: [
+                { value: 'retry', label: 'Try again' },
+                { value: 'skip', label: 'Skip this step', hint: opts.skipHint },
+            ],
+            initialValue: 'retry',
+        });
+        if (next === CANCEL)
+            throw new StepCancelled();
+        if (next === 'skip')
+            throw new StepSkipped(`skipped: ${opts.command}`);
+        return; // retry: the caller's loop re-runs the command
+    }
+    const redo = await ui.confirm({ message: 'Try again?', initialValue: true });
+    if (redo === CANCEL || redo === false)
+        throw new StepAborted(`gave up on: ${opts.command}`);
+}
+export async function sudoStep(ctx, opts) {
+    const { ui } = ctx;
+    // What we actually run — and what the operator copy-pastes in the delegate path.
+    const display = `sudo bash -lc ${shquote(opts.command)}`;
+    if (ctx.dryRun) {
+        ui.info(opts.input != null
+            ? `DRY RUN — would run: ${display} (with the ${opts.inputLabel ?? 'payload'} on stdin)`
+            : `DRY RUN — would run: ${display}`);
+        return;
+    }
+    const passwordless = await hasPasswordlessSudo(ctx);
+    for (;;) {
+        ui.info(opts.description);
+        if (opts.note)
+            ui.message(opts.note);
+        ui.message(display);
+        const mode = await chooseSudoMode(ctx, passwordless);
+        const commandCode = await runPrivilegedCommand(ctx, opts, mode);
+        if (await opts.verify(ctx, commandCode)) {
+            ui.success('Verified.');
+            return;
+        }
+        await handleFailedVerification(ctx, opts);
+    }
+}
+/** Convenience: an `owned` file/service/etc. artifact. */
+export function owned(type, fields) {
+    return { kind: 'owned', type, ...fields };
+}
+/** Convenience: a `shared` artifact (listed, not removed, on uninstall). */
+export function shared(type, fields) {
+    return { kind: 'shared', type, ...fields };
+}
+export function depCheckStep(opts = {}) {
+    const detect = opts.detect ?? detectEnvironment;
+    const install = opts.installTool ?? aptInstallTool;
+    const hintFor = opts.removeHint ?? removeHintFor;
+    return {
+        id: 'deps',
+        title: 'Dependencies (agent CLIs + gh)',
+        async check(ctx) {
+            if (ctx.dryRun)
+                return false;
+            const checks = await detect();
+            // Satisfied when at least one agent CLI is present and authed. Derived from RUNNER_IDS,
+            // never a literal list: `BackendCheck['name']` also carries the non-agent tools (`gh`,
+            // `git`), so the gate has to filter — and a hand-written array silently under-counts the
+            // moment a runner is added (a pi-only host reporting "no agent CLI", #387 review).
+            return checks.some((c) => isRunnerId(c.name) && c.available);
+        },
+        async run(ctx) {
+            const checks = await detect();
+            const missing = checks.filter((c) => !c.available && c.name !== 'git');
+            if (missing.length === 0) {
+                ctx.ui.success('All dependencies present.');
+                return { artifacts: [] };
+            }
+            const pick = await ctx.ui.multiselect({
+                message: 'Missing tools — select the ones to install',
+                options: missing.map((c) => ({ value: c.name, label: c.name, ...(c.hint !== undefined ? { hint: c.hint } : {}) })),
+                required: false,
+            });
+            if (pick === CANCEL)
+                throw new StepCancelled();
+            const installed = [];
+            for (const name of pick) {
+                const check = missing.find((c) => c.name === name);
+                await install(ctx, name);
+                installed.push(shared('package', { name, removeHint: hintFor(name) }));
+                if (check?.hint)
+                    ctx.ui.note(check.hint, `Authorize ${name}`);
+            }
+            return { artifacts: installed };
+        },
+        async undo(ctx, created) {
+            // Dependencies are `shared` — never auto-removed. List them for the operator.
+            const pkgs = created?.artifacts ?? [];
+            if (pkgs.length === 0)
+                return;
+            ctx.ui.note(pkgs.map((a) => a.removeHint ?? a.name ?? '').filter(Boolean).join('\n'), `These tools were installed for ${productName('cezar')} but may be used elsewhere — remove manually if you want them gone`);
+        },
+    };
+}
+const NPM_GLOBAL = {
+    claude: '@anthropic-ai/claude-code',
+    codex: '@openai/codex',
+};
+/** Ubuntu/Debian installer: apt for gh, sudo npm -g for the agent CLIs (system node). */
+export const aptInstallTool = async (ctx, name) => {
+    if (name === 'gh') {
+        await sudoStep(ctx, {
+            description: 'Install the GitHub CLI (only needed for PR creation).',
+            command: 'apt-get update && apt-get install -y gh',
+            verify: (c) => verifyCommand(c, 'gh', ['--version']),
+        });
+        return;
+    }
+    await installViaNpmOrNote(ctx, name, true);
+};
+/** macOS installer: brew (no sudo) for gh, npm -g for the agent CLIs. */
+export const brewInstallTool = async (ctx, name) => {
+    if (name === 'gh') {
+        if (ctx.dryRun) {
+            ctx.ui.info('DRY RUN — would run: brew install gh');
+            return;
+        }
+        await ctx.runner.interactive('brew', ['install', 'gh']);
+        return;
+    }
+    await installViaNpmOrNote(ctx, name, false);
+};
+async function installViaNpmOrNote(ctx, name, sudo) {
+    if (name === 'opencode') {
+        ctx.ui.note('Install OpenCode from https://opencode.ai, then re-run.', 'opencode');
+        return;
+    }
+    const pkg = NPM_GLOBAL[name];
+    if (!pkg) {
+        ctx.ui.warn(`no known installer for ${name} — install it manually`);
+        return;
+    }
+    if (sudo) {
+        await sudoStep(ctx, {
+            description: `Install ${name} globally via npm.`,
+            command: `npm install -g ${pkg}`,
+            verify: (c) => verifyCommand(c, name, ['--version']),
+        });
+        return;
+    }
+    if (ctx.dryRun) {
+        ctx.ui.info(`DRY RUN — would run: npm install -g ${pkg}`);
+        return;
+    }
+    await ctx.runner.interactive('npm', ['install', '-g', pkg]);
+}
+function removeHintFor(name) {
+    const npm = {
+        claude: 'npm rm -g @anthropic-ai/claude-code',
+        codex: 'npm rm -g @openai/codex',
+    };
+    if (name === 'gh')
+        return 'sudo apt-get remove -y gh';
+    return npm[name] ?? `# remove ${name} manually`;
+}
+/** macOS-flavored removal hints (brew instead of apt). */
+export function brewRemoveHint(name) {
+    const npm = {
+        claude: 'npm rm -g @anthropic-ai/claude-code',
+        codex: 'npm rm -g @openai/codex',
+    };
+    if (name === 'gh')
+        return 'brew uninstall gh';
+    return npm[name] ?? `# remove ${name} manually`;
+}
+//# sourceMappingURL=steps.js.map

package/dist/server-install/steps.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"steps.js","sourceRoot":"","sources":["../../src/server-install/steps.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAC3C,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AACxC,OAAO,EAAE,UAAU,EAAE,MAAM,yBAAyB,CAAC;AACrD,OAAO,EAAE,iBAAiB,EAAqB,MAAM,2BAA2B,CAAC;AACjF,OAAO,EACL,MAAM,GAKP,MAAM,YAAY,CAAC;AAEpB;;;GAGG;AAEH,gDAAgD;AAChD,MAAM,CAAC,MAAM,aAAa,GAAW;IACnC,OAAO,CAAC,OAAO,EAAE,IAAI,EAAE,IAAI;QACzB,yEAAyE;QACzE,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;YAC7B,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC;YACxE,IAAI,MAAM,GAAG,EAAE,CAAC;YAChB,IAAI,MAAM,GAAG,EAAE,CAAC;YAChB,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,MAAM,IAAI,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YACvD,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,MAAM,IAAI,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YACvD,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC;YAChE,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,IAAI,IAAI,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC;YAC1E,uEAAuE;YACvE,iDAAiD;YACjD,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;YACnC,IAAI,IAAI,EAAE,KAAK,IAAI,IAAI;gBAAE,KAAK,CAAC,KAAK,EAAE,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;;gBACjD,KAAK,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC;QAC1B,CAAC,CAAC,CAAC;IACL,CAAC;IACD,WAAW,CAAC,OAAO,EAAE,IAAI,EAAE,IAAI;QAC7B,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;YAC7B,4EAA4E;YAC5E,wEAAwE;YACxE,uDAAuD;YACvD,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,EAAE,IAAI,EAAE;gBACjC,KAAK,EAAE,CAAC,IAAI,EAAE,KAAK,IAAI,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,EAAE,SAAS,EAAE,SAAS,CAAC;gBACvE,GAAG,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,SAAS;aAC7D,CAAC,CAAC;YACH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC;YACtC,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC;YAChD,IAAI,IAAI,EAAE,KAAK,IAAI,IAAI,EAAE,CAAC;gBACxB,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC,CAAC,iCAAiC;gBACrE,KAAK,CAAC,KAAK,EAAE,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAC/B,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC;CACF,CAAC;AAEF,mGAAmG;AACnG,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,GAAmB,EACnB,OAAe,EACf,IAAc,EACd,OAAO,GAAqE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC;IAE/F,IAAI,GAAG,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IAC7B,OAAO,OAAO,CAAC,MAAM,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC;AAC1D,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,GAAmB;IAC3D,IAAI,GAAG,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IAC7B,OAAO,CAAC,MAAM,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC;AACvE,CAAC;AAED,+EAA+E;AAC/E,MAAM,CAAC,MAAM,WAAW,GAAG,qDAAqD,CAAC;AAEjF,MAAM,OAAO,aAAc,SAAQ,KAAK;CAAG;AAC3C,MAAM,OAAO,WAAY,SAAQ,KAAK;CAAG;AACzC,qGAAqG;AACrG,MAAM,OAAO,WAAY,SAAQ,KAAK;CAAG;AAmCzC;;;;;GAKG;AACH,MAAM,UAAU,gBAAgB,CAAC,MAAM,GAAG,EAAE;IAC1C,MAAM,KAAK,GAAG,0BAA0B,CAAC,CAAC,OAAO;IACjD,MAAM,KAAK,GAAG,0BAA0B,CAAC,CAAC,UAAU;IACpD,MAAM,MAAM,GAAG,UAAU,CAAC,CAAC,UAAU;IACrC,MAAM,OAAO,GAAG,cAAc,CAAC;IAC/B,MAAM,GAAG,GAAG,KAAK,GAAG,KAAK,GAAG,MAAM,GAAG,OAAO,CAAC;IAC7C,MAAM,IAAI,GAAG,CAAC,GAAW,EAAE,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC;IAChE,MAAM,KAAK,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;IACtE,OAAO,KAAK,CAAC,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;QAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IACjE,6EAA6E;IAC7E,KAAK,IAAI,CAAC,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAC1C,MAAM,CAAC,GAAG,SAAS,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QAC3B,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,CAAW,CAAC;QAC/B,KAAK,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,CAAW,CAAC;QAC9B,KAAK,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC;IACjB,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;AACxB,CAAC;AAED;;;;;;;;;GASG;AACH,yFAAyF;AACzF,MAAM,UAAU,OAAO,CAAC,CAAS;IAC/B,OAAO,IAAI,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC;AACzC,CAAC;AAED;qEACqE;AACrE,KAAK,UAAU,cAAc,CAAC,GAAmB,EAAE,YAAqB;IACtE,MAAM,EAAE,EAAE,EAAE,GAAG,GAAG,CAAC;IACnB,IAAI,GAAG,CAAC,SAAS,EAAE,CAAC;QAClB,OAAO,YAAY,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC;IAC5C,CAAC;IACD,IAAI,GAAG,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC;QACvB,gEAAgE;QAChE,OAAO,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC;IAC5B,CAAC;IACD,yEAAyE;IACzE,2EAA2E;IAC3E,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,MAAM,CAAsB;QAClD,OAAO,EAAE,yCAAyC;QAClD,OAAO,EAAE;YACP,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,4BAA4B,EAAE,IAAI,EAAE,mCAAmC,EAAE;YACrG,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,qBAAqB,EAAE,IAAI,EAAE,qBAAqB,EAAE;SAC7E;QACD,YAAY,EAAE,UAAU;KACzB,CAAC,CAAC;IACH,IAAI,MAAM,KAAK,MAAM;QAAE,MAAM,IAAI,aAAa,EAAE,CAAC;IACjD,GAAG,CAAC,KAAK,CAAC,QAAQ,GAAG,MAAM,CAAC,CAAC,uDAAuD;IACpF,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;oEAEoE;AACpE,KAAK,UAAU,oBAAoB,CACjC,GAAmB,EACnB,IAAkB,EAClB,IAAyB;IAEzB,MAAM,EAAE,EAAE,EAAE,GAAG,GAAG,CAAC;IACnB,IAAI,IAAI,KAAK,MAAM,EAAE,CAAC;QACpB,MAAM,WAAW,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC,WAAW,CAC9C,MAAM,EACN,CAAC,MAAM,EAAE,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,EAC7B,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,SAAS,CACvD,CAAC;QACF,IAAI,WAAW,KAAK,CAAC;YAAE,EAAE,CAAC,IAAI,CAAC,4BAA4B,WAAW,EAAE,CAAC,CAAC;QAC1E,OAAO,WAAW,CAAC;IACrB,CAAC;IACD,EAAE,CAAC,IAAI,CAAC,6HAA6H,CAAC,CAAC;IACvI,IAAI,IAAI,CAAC,KAAK,IAAI,IAAI,EAAE,CAAC;QACvB,uEAAuE;QACvE,EAAE,CAAC,IAAI,CAAC,gEAAgE,IAAI,CAAC,UAAU,IAAI,MAAM,oBAAoB,CAAC,CAAC;QACvH,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACzB,CAAC;IACD,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC;QACnB,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,0BAA0B,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC;QAC3F,IAAI,IAAI,KAAK,MAAM;YAAE,MAAM,IAAI,aAAa,EAAE,CAAC;IACjD,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;2EAC2E;AAC3E,KAAK,UAAU,wBAAwB,CAAC,GAAmB,EAAE,IAAkB;IAC7E,MAAM,EAAE,EAAE,EAAE,GAAG,GAAG,CAAC;IACnB,EAAE,CAAC,KAAK,CAAC,gEAAgE,CAAC,CAAC;IAC3E,IAAI,GAAG,CAAC,SAAS,EAAE,CAAC;QAClB,MAAM,IAAI,CAAC,SAAS;YAClB,CAAC,CAAC,IAAI,WAAW,CAAC,4BAA4B,IAAI,CAAC,OAAO,EAAE,CAAC;YAC7D,CAAC,CAAC,IAAI,WAAW,CAAC,4BAA4B,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;IAClE,CAAC;IACD,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;QACnB,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,MAAM,CAAmB;YAC7C,OAAO,EAAE,gCAAgC;YACzC,OAAO,EAAE;gBACP,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE;gBACtC,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,gBAAgB,EAAE,IAAI,EAAE,IAAI,CAAC,QAAQ,EAAE;aAChE;YACD,YAAY,EAAE,OAAO;SACtB,CAAC,CAAC;QACH,IAAI,IAAI,KAAK,MAAM;YAAE,MAAM,IAAI,aAAa,EAAE,CAAC;QAC/C,IAAI,IAAI,KAAK,MAAM;YAAE,MAAM,IAAI,WAAW,CAAC,YAAY,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;QACvE,OAAO,CAAC,+CAA+C;IACzD,CAAC;IACD,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC;IAC7E,IAAI,IAAI,KAAK,MAAM,IAAI,IAAI,KAAK,KAAK;QAAE,MAAM,IAAI,WAAW,CAAC,eAAe,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;AAC9F,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,GAAmB,EAAE,IAAkB;IACpE,MAAM,EAAE,EAAE,EAAE,GAAG,GAAG,CAAC;IACnB,iFAAiF;IACjF,MAAM,OAAO,GAAG,iBAAiB,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;IAEzD,IAAI,GAAG,CAAC,MAAM,EAAE,CAAC;QACf,EAAE,CAAC,IAAI,CACL,IAAI,CAAC,KAAK,IAAI,IAAI;YAChB,CAAC,CAAC,wBAAwB,OAAO,cAAc,IAAI,CAAC,UAAU,IAAI,SAAS,YAAY;YACvF,CAAC,CAAC,wBAAwB,OAAO,EAAE,CACtC,CAAC;QACF,OAAO;IACT,CAAC;IAED,MAAM,YAAY,GAAG,MAAM,mBAAmB,CAAC,GAAG,CAAC,CAAC;IAEpD,SAAS,CAAC;QACR,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QAC1B,IAAI,IAAI,CAAC,IAAI;YAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACrC,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QAEpB,MAAM,IAAI,GAAG,MAAM,cAAc,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC;QACrD,MAAM,WAAW,GAAG,MAAM,oBAAoB,CAAC,GAAG,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;QAEhE,IAAI,MAAM,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,WAAW,CAAC,EAAE,CAAC;YACxC,EAAE,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;YACxB,OAAO;QACT,CAAC;QAED,MAAM,wBAAwB,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IAC5C,CAAC;AACH,CAAC;AAED,0DAA0D;AAC1D,MAAM,UAAU,KAAK,CAAC,IAAY,EAAE,MAA2C;IAC7E,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,MAAM,EAAE,CAAC;AAC5C,CAAC;AACD,4EAA4E;AAC5E,MAAM,UAAU,MAAM,CAAC,IAAY,EAAE,MAA2C;IAC9E,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,GAAG,MAAM,EAAE,CAAC;AAC7C,CAAC;AAmBD,MAAM,UAAU,YAAY,CAAC,IAAI,GAAgB,EAAE;IACjD,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,iBAAiB,CAAC;IAChD,MAAM,OAAO,GAAG,IAAI,CAAC,WAAW,IAAI,cAAc,CAAC;IACnD,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,IAAI,aAAa,CAAC;IACjD,OAAO;QACL,EAAE,EAAE,MAAM;QACV,KAAK,EAAE,gCAAgC;QACvC,KAAK,CAAC,KAAK,CAAC,GAAG;YACb,IAAI,GAAG,CAAC,MAAM;gBAAE,OAAO,KAAK,CAAC;YAC7B,MAAM,MAAM,GAAG,MAAM,MAAM,EAAE,CAAC;YAC9B,wFAAwF;YACxF,uFAAuF;YACvF,yFAAyF;YACzF,mFAAmF;YACnF,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,CAAC;QAC/D,CAAC;QACD,KAAK,CAAC,GAAG,CAAC,GAAG;YACX,MAAM,MAAM,GAAG,MAAM,MAAM,EAAE,CAAC;YAC9B,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,IAAI,CAAC,CAAC,IAAI,KAAK,KAAK,CAAC,CAAC;YACvE,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACzB,GAAG,CAAC,EAAE,CAAC,OAAO,CAAC,2BAA2B,CAAC,CAAC;gBAC5C,OAAO,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC;YAC3B,CAAC;YACD,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,EAAE,CAAC,WAAW,CAAS;gBAC5C,OAAO,EAAE,4CAA4C;gBACrD,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;gBAClH,QAAQ,EAAE,KAAK;aAChB,CAAC,CAAC;YACH,IAAI,IAAI,KAAK,MAAM;gBAAE,MAAM,IAAI,aAAa,EAAE,CAAC;YAE/C,MAAM,SAAS,GAAmB,EAAE,CAAC;YACrC,KAAK,MAAM,IAAI,IAAI,IAAI,EAAE,CAAC;gBACxB,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;gBACnD,MAAM,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;gBACzB,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;gBACvE,IAAI,KAAK,EAAE,IAAI;oBAAE,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,aAAa,IAAI,EAAE,CAAC,CAAC;YAChE,CAAC;YACD,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC;QAClC,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,OAAO;YACrB,8EAA8E;YAC9E,MAAM,IAAI,GAAG,OAAO,EAAE,SAAS,IAAI,EAAE,CAAC;YACtC,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;gBAAE,OAAO;YAC9B,GAAG,CAAC,EAAE,CAAC,IAAI,CACT,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,IAAI,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EACxE,kCAAkC,WAAW,CAAC,OAAO,CAAC,oEAAoE,CAC3H,CAAC;QACJ,CAAC;KACF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,GAA2B;IACzC,MAAM,EAAE,2BAA2B;IACnC,KAAK,EAAE,eAAe;CACvB,CAAC;AAEF,yFAAyF;AACzF,MAAM,CAAC,MAAM,cAAc,GAAkB,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;IAC/D,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;QAClB,MAAM,QAAQ,CAAC,GAAG,EAAE;YAClB,WAAW,EAAE,uDAAuD;YACpE,OAAO,EAAE,yCAAyC;YAClD,MAAM,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,aAAa,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,WAAW,CAAC,CAAC;SACrD,CAAC,CAAC;QACH,OAAO;IACT,CAAC;IACD,MAAM,mBAAmB,CAAC,GAAG,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;AAC7C,CAAC,CAAC;AAEF,yEAAyE;AACzE,MAAM,CAAC,MAAM,eAAe,GAAkB,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;IAChE,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;QAClB,IAAI,GAAG,CAAC,MAAM,EAAE,CAAC;YACf,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,sCAAsC,CAAC,CAAC;YACpD,OAAO;QACT,CAAC;QACD,MAAM,GAAG,CAAC,MAAM,CAAC,WAAW,CAAC,MAAM,EAAE,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC,CAAC;QACxD,OAAO;IACT,CAAC;IACD,MAAM,mBAAmB,CAAC,GAAG,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;AAC9C,CAAC,CAAC;AAEF,KAAK,UAAU,mBAAmB,CAAC,GAAmB,EAAE,IAAY,EAAE,IAAa;IACjF,IAAI,IAAI,KAAK,UAAU,EAAE,CAAC;QACxB,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,yDAAyD,EAAE,UAAU,CAAC,CAAC;QACnF,OAAO;IACT,CAAC;IACD,MAAM,GAAG,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;IAC7B,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,0BAA0B,IAAI,wBAAwB,CAAC,CAAC;QACpE,OAAO;IACT,CAAC;IACD,IAAI,IAAI,EAAE,CAAC;QACT,MAAM,QAAQ,CAAC,GAAG,EAAE;YAClB,WAAW,EAAE,WAAW,IAAI,oBAAoB;YAChD,OAAO,EAAE,kBAAkB,GAAG,EAAE;YAChC,MAAM,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,aAAa,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,WAAW,CAAC,CAAC;SACrD,CAAC,CAAC;QACH,OAAO;IACT,CAAC;IACD,IAAI,GAAG,CAAC,MAAM,EAAE,CAAC;QACf,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,uCAAuC,GAAG,EAAE,CAAC,CAAC;QAC1D,OAAO;IACT,CAAC;IACD,MAAM,GAAG,CAAC,MAAM,CAAC,WAAW,CAAC,KAAK,EAAE,CAAC,SAAS,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC;AAC9D,CAAC;AAED,SAAS,aAAa,CAAC,IAAY;IACjC,MAAM,GAAG,GAA2B;QAClC,MAAM,EAAE,qCAAqC;QAC7C,KAAK,EAAE,yBAAyB;KACjC,CAAC;IACF,IAAI,IAAI,KAAK,IAAI;QAAE,OAAO,2BAA2B,CAAC;IACtD,OAAO,GAAG,CAAC,IAAI,CAAC,IAAI,YAAY,IAAI,WAAW,CAAC;AAClD,CAAC;AAED,0DAA0D;AAC1D,MAAM,UAAU,cAAc,CAAC,IAAY;IACzC,MAAM,GAAG,GAA2B;QAClC,MAAM,EAAE,qCAAqC;QAC7C,KAAK,EAAE,yBAAyB;KACjC,CAAC;IACF,IAAI,IAAI,KAAK,IAAI;QAAE,OAAO,mBAAmB,CAAC;IAC9C,OAAO,GAAG,CAAC,IAAI,CAAC,IAAI,YAAY,IAAI,WAAW,CAAC;AAClD,CAAC"}

package/dist/server-install/strategies.d.ts

@@ -0,0 +1,6 @@
+import { type PlatformId, type PlatformStrategy } from './types.ts';
+export declare function getStrategy(id: string): PlatformStrategy | undefined;
+/** Ids that actually have a registered strategy (a subset of PLATFORM_IDS while phased). */
+export declare function availablePlatformIds(): PlatformId[];
+/** Group migration requires reversible resource moves and control of every service. */
+export declare function supportsServerMigration(strategy: PlatformStrategy | undefined): strategy is PlatformStrategy & Required<Pick<PlatformStrategy, 'migrate' | 'rollbackMigration' | 'stopService' | 'startService'>>;

package/dist/server-install/strategies.js

@@ -0,0 +1,24 @@
+import { macosxNgrok } from './platforms/macosx-ngrok.js';
+import { ubuntuVps } from './platforms/ubuntu-vps.js';
+import { PLATFORM_IDS } from './types.js';
+/**
+ * Platform registry. `--platform <id>` is validated against these keys; an
+ * unknown id lists the valid ones and exits 1. Add a strategy here to teach the
+ * wizard a new platform — the engine and helpers are untouched.
+ */
+const REGISTRY = {
+    'ubuntu-vps': ubuntuVps,
+    'macosx-ngrok': macosxNgrok,
+};
+export function getStrategy(id) {
+    return REGISTRY[id];
+}
+/** Ids that actually have a registered strategy (a subset of PLATFORM_IDS while phased). */
+export function availablePlatformIds() {
+    return PLATFORM_IDS.filter((id) => REGISTRY[id] !== undefined);
+}
+/** Group migration requires reversible resource moves and control of every service. */
+export function supportsServerMigration(strategy) {
+    return !!(strategy?.migrate && strategy.rollbackMigration && strategy.stopService && strategy.startService);
+}
+//# sourceMappingURL=strategies.js.map

package/dist/server-install/strategies.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"strategies.js","sourceRoot":"","sources":["../../src/server-install/strategies.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,6BAA6B,CAAC;AAC1D,OAAO,EAAE,SAAS,EAAE,MAAM,2BAA2B,CAAC;AACtD,OAAO,EAAE,YAAY,EAA0C,MAAM,YAAY,CAAC;AAElF;;;;GAIG;AACH,MAAM,QAAQ,GAAkD;IAC9D,YAAY,EAAE,SAAS;IACvB,cAAc,EAAE,WAAW;CAC5B,CAAC;AAEF,MAAM,UAAU,WAAW,CAAC,EAAU;IACpC,OAAO,QAAQ,CAAC,EAAgB,CAAC,CAAC;AACpC,CAAC;AAED,4FAA4F;AAC5F,MAAM,UAAU,oBAAoB;IAClC,OAAO,YAAY,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,KAAK,SAAS,CAAC,CAAC;AACjE,CAAC;AAED,uFAAuF;AACvF,MAAM,UAAU,uBAAuB,CAAC,QAAsC;IAE5E,OAAO,CAAC,CAAC,CAAC,QAAQ,EAAE,OAAO,IAAI,QAAQ,CAAC,iBAAiB,IAAI,QAAQ,CAAC,WAAW,IAAI,QAAQ,CAAC,YAAY,CAAC,CAAC;AAC9G,CAAC"}