@heronlabs/terminal-cli 2.0.0 → 2.0.1

package/README.md

@@ -95,13 +95,15 @@ pnpm dep:cruise    # architecture check
 | `hcli psql-rollup --filename <file>` | Restore a PostgreSQL database from a backup |
 | `hcli mysql-backup` | Back up a MySQL database (S3 by default) |
 | `hcli mysql-rollup --filename <file>` | Restore a MySQL database from a backup |
+| `hcli easypanel-backup` | Snapshot an EasyPanel host — config + Docker state — to a `.tar.gz` (S3 by default). Run as root on the host. |
+| `hcli easypanel-rollup --filename <file>` | Restore an EasyPanel host from a snapshot. Run as root on the host. **Overwrites host files.** |
 | `hcli version` | Print the current version |
 
 ### Flags
 
 | Flag | Applies to | Meaning |
 |---|---|---|
-| `-f, --filename <name>` | all | Backup filename. Backup defaults to `<database>-<timestamp>.sql.gz`; rollup requires it. |
+| `-f, --filename <name>` | all | Backup filename. DB backups default to `<database>-<timestamp>.sql.gz` and `easypanel-backup` to `easypanel-<timestamp>.tar.gz`; rollup requires it. |
 | `--local` | all | Read/write the backup on the local filesystem instead of S3. |
 
 Examples:
@@ -118,6 +120,15 @@ hcli psql-rollup --local --filename seed.sql.gz
 
 # Restore from S3
 hcli mysql-rollup --filename mydb-2026-03-05T12-00-00Z.sql.gz
+
+# Snapshot an EasyPanel host to S3 (run as root on the host)
+sudo hcli easypanel-backup
+
+# Snapshot to a local file with a custom name
+sudo hcli easypanel-backup --local --filename easypanel-snapshot.tar.gz
+
+# Restore an EasyPanel host from S3 (OVERWRITES host files)
+sudo hcli easypanel-rollup --filename easypanel-2026-03-05T12-00-00Z.tar.gz
 ```
 
 ## Configuration
@@ -179,6 +190,40 @@ Local stack for manual testing:
 docker compose up        # spins up psql + mysql DBs and CLI containers
 ```
 
+## EasyPanel host backup
+
+`easypanel-backup` / `easypanel-rollup` snapshot a whole [EasyPanel](https://easypanel.io/)
+host — `/etc/easypanel`, `/var/lib/docker/volumes`, and `/var/lib/docker/buildkit` —
+into a single `.tar.gz`. To keep the snapshot consistent the command stops the
+Docker daemon while the archive is taken and restarts it afterwards (even if the
+backup fails).
+
+Because it runs `systemctl stop docker` and reads `/var/lib/docker`, it must run
+**natively on the host as root**, not inside a container managed by that daemon.
+If not run as root the command refuses to start (it will not stop Docker and
+then fail), so schedule it as root.
+
+> ⚠️ **`easypanel-rollup` extracts the archive to `/` and overwrites host files**
+> (`/etc/easypanel` and `/var/lib/docker`). It does not prompt — run it
+> deliberately, against a host you intend to roll back.
+
+### Scheduling (every 12h)
+
+Install the CLI on the host (Ubuntu 22.04) and match the DB cron containers'
+cadence with a host crontab line:
+
+```bash
+npm i -g @heronlabs/terminal-cli
+```
+
+```cron
+# /etc/crontab — run as root, source the env first
+0 */12 * * * root . /etc/easypanel-backup.env; hcli easypanel-backup
+```
+
+Put the `AWS_*` variables (the `easypanel-*` commands need only `AWS_*`, no DB
+vars) in `/etc/easypanel-backup.env`.
+
 ## Testing
 
 | Detail | Value |

package/bin/src/application/cli/cli-module.js

@@ -10,8 +10,10 @@ exports.CliModule = exports.cliModule = void 0;
 const common_1 = require("@nestjs/common");
 const core_module_1 = require("../../core/core-module");
 const log_module_1 = require("../../infrastructure/log/log-module");
+const easypanel_backup_command_1 = require("./commands/backup/easypanel-backup-command");
 const mysql_backup_command_1 = require("./commands/backup/mysql-backup-command");
 const psql_backup_command_1 = require("./commands/backup/psql-backup-command");
+const easypanel_rollup_command_1 = require("./commands/rollup/easypanel-rollup-command");
 const mysql_rollup_command_1 = require("./commands/rollup/mysql-rollup-command");
 const psql_rollup_command_1 = require("./commands/rollup/psql-rollup-command");
 const version_command_1 = require("./commands/version/version-command");
@@ -24,6 +26,8 @@ exports.cliModule = {
         psql_rollup_command_1.PsqlRollupCommand,
         mysql_backup_command_1.MysqlBackupCommand,
         mysql_rollup_command_1.MysqlRollupCommand,
+        easypanel_backup_command_1.EasypanelBackupCommand,
+        easypanel_rollup_command_1.EasypanelRollupCommand,
     ],
 };
 let CliModule = class CliModule {

package/bin/src/application/cli/commands/backup/easypanel-backup-command.js

@@ -0,0 +1,57 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.EasypanelBackupCommand = void 0;
+const nest_commander_1 = require("nest-commander");
+const easypanel_backup_service_1 = require("../../../../core/services/easy-panel/easypanel-backup-service");
+const backup_options_1 = require("./types/backup-options");
+let EasypanelBackupCommand = class EasypanelBackupCommand extends nest_commander_1.CommandRunner {
+    easypanelBackupService;
+    parseFilename(val) {
+        return val;
+    }
+    parseLocal() {
+        return true;
+    }
+    async run(_args, options) {
+        await this.easypanelBackupService.run(options?.[backup_options_1.BackupOptionsKeys.LOCAL] ?? false, options?.[backup_options_1.BackupOptionsKeys.FILENAME]);
+    }
+    constructor(easypanelBackupService) {
+        super();
+        this.easypanelBackupService = easypanelBackupService;
+    }
+};
+exports.EasypanelBackupCommand = EasypanelBackupCommand;
+__decorate([
+    (0, nest_commander_1.Option)({
+        flags: `-f, --${backup_options_1.BackupOptionsKeys.FILENAME} <filename>`,
+        description: 'Output filename (e.g. snapshot.tar.gz). Defaults to "easypanel-<timestamp>.tar.gz"',
+    }),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [String]),
+    __metadata("design:returntype", String)
+], EasypanelBackupCommand.prototype, "parseFilename", null);
+__decorate([
+    (0, nest_commander_1.Option)({
+        flags: `--${backup_options_1.BackupOptionsKeys.LOCAL}`,
+        description: 'Save backup to the local filesystem instead of S3 (default: S3)',
+    }),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", []),
+    __metadata("design:returntype", Boolean)
+], EasypanelBackupCommand.prototype, "parseLocal", null);
+exports.EasypanelBackupCommand = EasypanelBackupCommand = __decorate([
+    (0, nest_commander_1.Command)({
+        name: 'easypanel-backup',
+        description: 'Backup EasyPanel host (config + Docker state)',
+    }),
+    __metadata("design:paramtypes", [easypanel_backup_service_1.EasypanelBackupService])
+], EasypanelBackupCommand);

package/bin/src/application/cli/commands/backup/mysql-backup-command.js

@@ -11,7 +11,7 @@ var __metadata = (this && this.__metadata) || function (k, v) {
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.MysqlBackupCommand = void 0;
 const nest_commander_1 = require("nest-commander");
-const mysql_backup_service_1 = require("../../../../core/services/mysql-backup-service");
+const mysql_backup_service_1 = require("../../../../core/services/mysql/mysql-backup-service");
 const backup_options_1 = require("./types/backup-options");
 let MysqlBackupCommand = class MysqlBackupCommand extends nest_commander_1.CommandRunner {
     mysqlBackupService;

package/bin/src/application/cli/commands/backup/psql-backup-command.js

@@ -11,7 +11,7 @@ var __metadata = (this && this.__metadata) || function (k, v) {
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.PsqlBackupCommand = void 0;
 const nest_commander_1 = require("nest-commander");
-const psql_backup_service_1 = require("../../../../core/services/psql-backup-service");
+const psql_backup_service_1 = require("../../../../core/services/psql/psql-backup-service");
 const backup_options_1 = require("./types/backup-options");
 let PsqlBackupCommand = class PsqlBackupCommand extends nest_commander_1.CommandRunner {
     psqlBackupService;

package/bin/src/application/cli/commands/rollup/easypanel-rollup-command.js

@@ -0,0 +1,58 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.EasypanelRollupCommand = void 0;
+const nest_commander_1 = require("nest-commander");
+const easypanel_rollup_service_1 = require("../../../../core/services/easy-panel/easypanel-rollup-service");
+const rollup_options_1 = require("./types/rollup-options");
+let EasypanelRollupCommand = class EasypanelRollupCommand extends nest_commander_1.CommandRunner {
+    easypanelRollupService;
+    parseFilename(val) {
+        return val;
+    }
+    parseLocal() {
+        return true;
+    }
+    async run(_args, options) {
+        await this.easypanelRollupService.run(options[rollup_options_1.RollupOptionsKeys.FILENAME], options[rollup_options_1.RollupOptionsKeys.LOCAL] ?? false);
+    }
+    constructor(easypanelRollupService) {
+        super();
+        this.easypanelRollupService = easypanelRollupService;
+    }
+};
+exports.EasypanelRollupCommand = EasypanelRollupCommand;
+__decorate([
+    (0, nest_commander_1.Option)({
+        flags: `-f, --${rollup_options_1.RollupOptionsKeys.FILENAME} <filename>`,
+        description: 'Backup filename to restore (e.g. easypanel-2026-03-05T12-00-00Z.tar.gz)',
+        required: true,
+    }),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [String]),
+    __metadata("design:returntype", String)
+], EasypanelRollupCommand.prototype, "parseFilename", null);
+__decorate([
+    (0, nest_commander_1.Option)({
+        flags: `--${rollup_options_1.RollupOptionsKeys.LOCAL}`,
+        description: 'Read backup from the local filesystem instead of S3 (default: S3)',
+    }),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", []),
+    __metadata("design:returntype", Boolean)
+], EasypanelRollupCommand.prototype, "parseLocal", null);
+exports.EasypanelRollupCommand = EasypanelRollupCommand = __decorate([
+    (0, nest_commander_1.Command)({
+        name: 'easypanel-rollup',
+        description: 'Restore an EasyPanel host from a backup file (S3 by default, or local filesystem with --local). Overwrites host files.',
+    }),
+    __metadata("design:paramtypes", [easypanel_rollup_service_1.EasypanelRollupService])
+], EasypanelRollupCommand);

package/bin/src/application/cli/commands/rollup/mysql-rollup-command.js

@@ -11,7 +11,7 @@ var __metadata = (this && this.__metadata) || function (k, v) {
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.MysqlRollupCommand = void 0;
 const nest_commander_1 = require("nest-commander");
-const mysql_rollup_service_1 = require("../../../../core/services/mysql-rollup-service");
+const mysql_rollup_service_1 = require("../../../../core/services/mysql/mysql-rollup-service");
 const rollup_options_1 = require("./types/rollup-options");
 let MysqlRollupCommand = class MysqlRollupCommand extends nest_commander_1.CommandRunner {
     mysqlRollupService;

package/bin/src/application/cli/commands/rollup/psql-rollup-command.js

@@ -11,7 +11,7 @@ var __metadata = (this && this.__metadata) || function (k, v) {
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.PsqlRollupCommand = void 0;
 const nest_commander_1 = require("nest-commander");
-const psql_rollup_service_1 = require("../../../../core/services/psql-rollup-service");
+const psql_rollup_service_1 = require("../../../../core/services/psql/psql-rollup-service");
 const rollup_options_1 = require("./types/rollup-options");
 let PsqlRollupCommand = class PsqlRollupCommand extends nest_commander_1.CommandRunner {
     psqlRollupService;

package/bin/src/core/core-module.js

@@ -10,20 +10,29 @@ exports.CoreModule = void 0;
 const common_1 = require("@nestjs/common");
 const environment_module_1 = require("../infrastructure/environment/environment-module");
 const storage_module_1 = require("../infrastructure/storage/storage-module");
-const mysql_backup_service_1 = require("./services/mysql-backup-service");
-const mysql_rollup_service_1 = require("./services/mysql-rollup-service");
-const psql_backup_service_1 = require("./services/psql-backup-service");
-const psql_rollup_service_1 = require("./services/psql-rollup-service");
+const easypanel_backup_service_1 = require("./services/easy-panel/easypanel-backup-service");
+const easypanel_rollup_service_1 = require("./services/easy-panel/easypanel-rollup-service");
+const mysql_backup_service_1 = require("./services/mysql/mysql-backup-service");
+const mysql_rollup_service_1 = require("./services/mysql/mysql-rollup-service");
+const psql_backup_service_1 = require("./services/psql/psql-backup-service");
+const psql_rollup_service_1 = require("./services/psql/psql-rollup-service");
+const script_loader_service_1 = require("./services/script-loader-service");
 const coreModule = {
     imports: [environment_module_1.EnvironmentModule, storage_module_1.StorageModule],
     providers: [
         common_1.Logger,
+        script_loader_service_1.ScriptLoaderService,
+        easypanel_backup_service_1.EasypanelBackupService,
+        easypanel_rollup_service_1.EasypanelRollupService,
         mysql_backup_service_1.MysqlBackupService,
         mysql_rollup_service_1.MysqlRollupService,
         psql_backup_service_1.PsqlBackupService,
         psql_rollup_service_1.PsqlRollupService,
     ],
     exports: [
+        script_loader_service_1.ScriptLoaderService,
+        easypanel_backup_service_1.EasypanelBackupService,
+        easypanel_rollup_service_1.EasypanelRollupService,
         mysql_backup_service_1.MysqlBackupService,
         mysql_rollup_service_1.MysqlRollupService,
         psql_backup_service_1.PsqlBackupService,

package/bin/src/core/services/easy-panel/easypanel-backup-service.js

@@ -0,0 +1,61 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.EasypanelBackupService = void 0;
+const common_1 = require("@nestjs/common");
+const child_process_1 = require("child_process");
+const luxon_1 = require("luxon");
+const s3_storage_service_1 = require("../../../infrastructure/storage/services/s3-storage-service");
+const backup_service_1 = require("../../interfaces/backup-service");
+const script_loader_service_1 = require("../script-loader-service");
+let EasypanelBackupService = class EasypanelBackupService extends backup_service_1.BackupService {
+    logger;
+    s3StorageService;
+    scriptLoader;
+    async dump(filename) {
+        if (process.getuid?.() !== 0) {
+            return {
+                ok: false,
+                error: new Error('easypanel-backup must run as root (needs systemctl + /var/lib/docker access)'),
+            };
+        }
+        const timestamp = luxon_1.DateTime.utc().toFormat("yyyy-MM-dd'T'HH-mm-ss'Z'");
+        const backupFileName = filename ?? `easypanel-${timestamp}.tar.gz`;
+        try {
+            (0, child_process_1.execSync)(this.scriptLoader.load('easy-panel', 'easypanel-backup'), {
+                env: {
+                    ...process.env,
+                    ARCHIVE: backupFileName,
+                },
+                stdio: ['inherit', 'pipe', 'inherit'],
+                shell: '/bin/bash',
+            });
+            this.logger.log(`Backup EasyPanel host successfully! Filename: ${backupFileName}`);
+            return { ok: true, data: { backupFileName } };
+        }
+        catch {
+            return { ok: false, error: new Error('easypanel backup failed') };
+        }
+    }
+    constructor(logger, s3StorageService, scriptLoader) {
+        super(logger, s3StorageService);
+        this.logger = logger;
+        this.s3StorageService = s3StorageService;
+        this.scriptLoader = scriptLoader;
+    }
+};
+exports.EasypanelBackupService = EasypanelBackupService;
+exports.EasypanelBackupService = EasypanelBackupService = __decorate([
+    (0, common_1.Injectable)(),
+    __metadata("design:paramtypes", [common_1.Logger,
+        s3_storage_service_1.S3StorageService,
+        script_loader_service_1.ScriptLoaderService])
+], EasypanelBackupService);

package/bin/src/core/services/easy-panel/easypanel-backup.sh

@@ -0,0 +1,8 @@
+set -e
+trap 'systemctl start docker' EXIT
+systemctl stop docker.socket || true
+systemctl stop docker
+set -- /etc/easypanel /var/lib/docker/volumes
+[ -d /var/lib/docker/buildkit ] && set -- "$@" /var/lib/docker/buildkit
+tar czf "$ARCHIVE" --warning=no-file-changed "$@" 2>/dev/null || { rc=$?; [ "$rc" -le 1 ] || exit "$rc"; }
+test -s "$ARCHIVE"

package/bin/src/core/services/easy-panel/easypanel-rollup-service.js

@@ -0,0 +1,57 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.EasypanelRollupService = void 0;
+const common_1 = require("@nestjs/common");
+const child_process_1 = require("child_process");
+const s3_storage_service_1 = require("../../../infrastructure/storage/services/s3-storage-service");
+const rollup_service_1 = require("../../interfaces/rollup-service");
+const script_loader_service_1 = require("../script-loader-service");
+let EasypanelRollupService = class EasypanelRollupService extends rollup_service_1.RollupService {
+    logger;
+    s3StorageService;
+    scriptLoader;
+    async restore(backupFileName) {
+        if (process.getuid?.() !== 0) {
+            return {
+                ok: false,
+                error: new Error('easypanel-rollup must run as root (needs systemctl + /var/lib/docker access)'),
+            };
+        }
+        try {
+            (0, child_process_1.execSync)(this.scriptLoader.load('easy-panel', 'easypanel-rollup'), {
+                env: {
+                    ...process.env,
+                    ARCHIVE: backupFileName,
+                },
+                stdio: ['inherit', 'pipe', 'inherit'],
+                shell: '/bin/bash',
+            });
+            return { ok: true, data: { backupFileName } };
+        }
+        catch {
+            return { ok: false, error: new Error('easypanel restore failed') };
+        }
+    }
+    constructor(logger, s3StorageService, scriptLoader) {
+        super(logger, s3StorageService);
+        this.logger = logger;
+        this.s3StorageService = s3StorageService;
+        this.scriptLoader = scriptLoader;
+    }
+};
+exports.EasypanelRollupService = EasypanelRollupService;
+exports.EasypanelRollupService = EasypanelRollupService = __decorate([
+    (0, common_1.Injectable)(),
+    __metadata("design:paramtypes", [common_1.Logger,
+        s3_storage_service_1.S3StorageService,
+        script_loader_service_1.ScriptLoaderService])
+], EasypanelRollupService);

package/bin/src/core/services/easy-panel/easypanel-rollup.sh

@@ -0,0 +1,7 @@
+set -e
+test -s "$ARCHIVE"
+gzip -t "$ARCHIVE"
+trap 'systemctl start docker' EXIT
+systemctl stop docker.socket || true
+systemctl stop docker
+tar xzf "$ARCHIVE" -C /

package/bin/src/core/services/{mysql-backup-service.js → mysql/mysql-backup-service.js}

@@ -13,19 +13,25 @@ exports.MysqlBackupService = void 0;
 const common_1 = require("@nestjs/common");
 const child_process_1 = require("child_process");
 const luxon_1 = require("luxon");
-const environment_service_1 = require("../../infrastructure/environment/services/environment-service");
-const s3_storage_service_1 = require("../../infrastructure/storage/services/s3-storage-service");
-const backup_service_1 = require("../interfaces/backup-service");
+const environment_service_1 = require("../../../infrastructure/environment/services/environment-service");
+const s3_storage_service_1 = require("../../../infrastructure/storage/services/s3-storage-service");
+const backup_service_1 = require("../../interfaces/backup-service");
+const script_loader_service_1 = require("../script-loader-service");
 let MysqlBackupService = class MysqlBackupService extends backup_service_1.BackupService {
     logger;
     environmentService;
     s3StorageService;
+    scriptLoader;
     async dump(filename) {
-        const { host, port, name, user, password } = await this.environmentService.database();
+        const db = await this.environmentService.database();
+        if (!db.ok) {
+            return { ok: false, error: db.error };
+        }
+        const { host, port, name, user, password } = db.connection;
         const timestamp = luxon_1.DateTime.utc().toFormat("yyyy-MM-dd'T'HH-mm-ss'Z'");
         const backupFileName = filename ?? `${name}-${timestamp}.sql.gz`;
         try {
-            (0, child_process_1.execSync)('set -o pipefail; mariadb-dump -u "$DB_USER" -h "$DB_HOST" -P "$DB_PORT" "$DB_NAME" | gzip > "$BACKUP_FILE"', {
+            (0, child_process_1.execSync)(this.scriptLoader.load('mysql', 'mysql-backup'), {
                 env: {
                     ...process.env,
                     DB_USER: user,
@@ -45,11 +51,12 @@ let MysqlBackupService = class MysqlBackupService extends backup_service_1.Backu
             return { ok: false, error: new Error('mariadb-dump failed') };
         }
     }
-    constructor(logger, environmentService, s3StorageService) {
+    constructor(logger, environmentService, s3StorageService, scriptLoader) {
         super(logger, s3StorageService);
         this.logger = logger;
         this.environmentService = environmentService;
         this.s3StorageService = s3StorageService;
+        this.scriptLoader = scriptLoader;
     }
 };
 exports.MysqlBackupService = MysqlBackupService;
@@ -57,5 +64,6 @@ exports.MysqlBackupService = MysqlBackupService = __decorate([
     (0, common_1.Injectable)(),
     __metadata("design:paramtypes", [common_1.Logger,
         environment_service_1.EnvironmentService,
-        s3_storage_service_1.S3StorageService])
+        s3_storage_service_1.S3StorageService,
+        script_loader_service_1.ScriptLoaderService])
 ], MysqlBackupService);

package/bin/src/core/services/mysql/mysql-backup.sh

@@ -0,0 +1,2 @@
+set -o pipefail
+mariadb-dump -u "$DB_USER" -h "$DB_HOST" -P "$DB_PORT" "$DB_NAME" | gzip > "$BACKUP_FILE"

package/bin/src/core/services/{mysql-rollup-service.js → mysql/mysql-rollup-service.js}

@@ -12,17 +12,23 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.MysqlRollupService = void 0;
 const common_1 = require("@nestjs/common");
 const child_process_1 = require("child_process");
-const environment_service_1 = require("../../infrastructure/environment/services/environment-service");
-const s3_storage_service_1 = require("../../infrastructure/storage/services/s3-storage-service");
-const rollup_service_1 = require("../interfaces/rollup-service");
+const environment_service_1 = require("../../../infrastructure/environment/services/environment-service");
+const s3_storage_service_1 = require("../../../infrastructure/storage/services/s3-storage-service");
+const rollup_service_1 = require("../../interfaces/rollup-service");
+const script_loader_service_1 = require("../script-loader-service");
 let MysqlRollupService = class MysqlRollupService extends rollup_service_1.RollupService {
     logger;
     environmentService;
     s3StorageService;
+    scriptLoader;
     async restore(backupFileName) {
-        const { host, port, name, user, password } = await this.environmentService.database();
+        const db = await this.environmentService.database();
+        if (!db.ok) {
+            return { ok: false, error: db.error };
+        }
+        const { host, port, name, user, password } = db.connection;
         try {
-            (0, child_process_1.execSync)('set -o pipefail; gunzip -c "$BACKUP_FILE" | mariadb -u "$DB_USER" -h "$DB_HOST" -P "$DB_PORT" "$DB_NAME"', {
+            (0, child_process_1.execSync)(this.scriptLoader.load('mysql', 'mysql-rollup'), {
                 env: {
                     ...process.env,
                     DB_USER: user,
@@ -41,11 +47,12 @@ let MysqlRollupService = class MysqlRollupService extends rollup_service_1.Rollu
             return { ok: false, error: new Error('mariadb restore failed') };
         }
     }
-    constructor(logger, environmentService, s3StorageService) {
+    constructor(logger, environmentService, s3StorageService, scriptLoader) {
         super(logger, s3StorageService);
         this.logger = logger;
         this.environmentService = environmentService;
         this.s3StorageService = s3StorageService;
+        this.scriptLoader = scriptLoader;
     }
 };
 exports.MysqlRollupService = MysqlRollupService;
@@ -53,5 +60,6 @@ exports.MysqlRollupService = MysqlRollupService = __decorate([
     (0, common_1.Injectable)(),
     __metadata("design:paramtypes", [common_1.Logger,
         environment_service_1.EnvironmentService,
-        s3_storage_service_1.S3StorageService])
+        s3_storage_service_1.S3StorageService,
+        script_loader_service_1.ScriptLoaderService])
 ], MysqlRollupService);

package/bin/src/core/services/mysql/mysql-rollup.sh

@@ -0,0 +1,2 @@
+set -o pipefail
+gunzip -c "$BACKUP_FILE" | mariadb -u "$DB_USER" -h "$DB_HOST" -P "$DB_PORT" "$DB_NAME"

package/bin/src/core/services/{psql-backup-service.js → psql/psql-backup-service.js}

@@ -13,19 +13,25 @@ exports.PsqlBackupService = void 0;
 const common_1 = require("@nestjs/common");
 const child_process_1 = require("child_process");
 const luxon_1 = require("luxon");
-const environment_service_1 = require("../../infrastructure/environment/services/environment-service");
-const s3_storage_service_1 = require("../../infrastructure/storage/services/s3-storage-service");
-const backup_service_1 = require("../interfaces/backup-service");
+const environment_service_1 = require("../../../infrastructure/environment/services/environment-service");
+const s3_storage_service_1 = require("../../../infrastructure/storage/services/s3-storage-service");
+const backup_service_1 = require("../../interfaces/backup-service");
+const script_loader_service_1 = require("../script-loader-service");
 let PsqlBackupService = class PsqlBackupService extends backup_service_1.BackupService {
     logger;
     environmentService;
     s3StorageService;
+    scriptLoader;
     async dump(filename) {
-        const { host, port, name, user, password } = await this.environmentService.database();
+        const db = await this.environmentService.database();
+        if (!db.ok) {
+            return { ok: false, error: db.error };
+        }
+        const { host, port, name, user, password } = db.connection;
         const timestamp = luxon_1.DateTime.utc().toFormat("yyyy-MM-dd'T'HH-mm-ss'Z'");
         const backupFileName = filename ?? `${name}-${timestamp}.sql.gz`;
         try {
-            (0, child_process_1.execSync)('set -o pipefail; pg_dump | gzip > "$BACKUP_FILE"', {
+            (0, child_process_1.execSync)(this.scriptLoader.load('psql', 'psql-backup'), {
                 env: {
                     ...process.env,
                     PGHOST: host,
@@ -45,11 +51,12 @@ let PsqlBackupService = class PsqlBackupService extends backup_service_1.BackupS
             return { ok: false, error: new Error('pg_dump failed') };
         }
     }
-    constructor(logger, environmentService, s3StorageService) {
+    constructor(logger, environmentService, s3StorageService, scriptLoader) {
         super(logger, s3StorageService);
         this.logger = logger;
         this.environmentService = environmentService;
         this.s3StorageService = s3StorageService;
+        this.scriptLoader = scriptLoader;
     }
 };
 exports.PsqlBackupService = PsqlBackupService;
@@ -57,5 +64,6 @@ exports.PsqlBackupService = PsqlBackupService = __decorate([
     (0, common_1.Injectable)(),
     __metadata("design:paramtypes", [common_1.Logger,
         environment_service_1.EnvironmentService,
-        s3_storage_service_1.S3StorageService])
+        s3_storage_service_1.S3StorageService,
+        script_loader_service_1.ScriptLoaderService])
 ], PsqlBackupService);

package/bin/src/core/services/psql/psql-backup.sh

@@ -0,0 +1,2 @@
+set -o pipefail
+pg_dump | gzip > "$BACKUP_FILE"

package/bin/src/core/services/{psql-rollup-service.js → psql/psql-rollup-service.js}

@@ -12,17 +12,23 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.PsqlRollupService = void 0;
 const common_1 = require("@nestjs/common");
 const child_process_1 = require("child_process");
-const environment_service_1 = require("../../infrastructure/environment/services/environment-service");
-const s3_storage_service_1 = require("../../infrastructure/storage/services/s3-storage-service");
-const rollup_service_1 = require("../interfaces/rollup-service");
+const environment_service_1 = require("../../../infrastructure/environment/services/environment-service");
+const s3_storage_service_1 = require("../../../infrastructure/storage/services/s3-storage-service");
+const rollup_service_1 = require("../../interfaces/rollup-service");
+const script_loader_service_1 = require("../script-loader-service");
 let PsqlRollupService = class PsqlRollupService extends rollup_service_1.RollupService {
     logger;
     environmentService;
     s3StorageService;
+    scriptLoader;
     async restore(backupFileName) {
-        const { host, port, name, user, password } = await this.environmentService.database();
+        const db = await this.environmentService.database();
+        if (!db.ok) {
+            return { ok: false, error: db.error };
+        }
+        const { host, port, name, user, password } = db.connection;
         try {
-            (0, child_process_1.execSync)('set -o pipefail; gunzip -c "$BACKUP_FILE" | psql', {
+            (0, child_process_1.execSync)(this.scriptLoader.load('psql', 'psql-rollup'), {
                 env: {
                     ...process.env,
                     PGHOST: host,
@@ -41,11 +47,12 @@ let PsqlRollupService = class PsqlRollupService extends rollup_service_1.RollupS
             return { ok: false, error: new Error('psql restore failed') };
         }
     }
-    constructor(logger, environmentService, s3StorageService) {
+    constructor(logger, environmentService, s3StorageService, scriptLoader) {
         super(logger, s3StorageService);
         this.logger = logger;
         this.environmentService = environmentService;
         this.s3StorageService = s3StorageService;
+        this.scriptLoader = scriptLoader;
     }
 };
 exports.PsqlRollupService = PsqlRollupService;
@@ -53,5 +60,6 @@ exports.PsqlRollupService = PsqlRollupService = __decorate([
     (0, common_1.Injectable)(),
     __metadata("design:paramtypes", [common_1.Logger,
         environment_service_1.EnvironmentService,
-        s3_storage_service_1.S3StorageService])
+        s3_storage_service_1.S3StorageService,
+        script_loader_service_1.ScriptLoaderService])
 ], PsqlRollupService);

package/bin/src/core/services/psql/psql-rollup.sh

@@ -0,0 +1,2 @@
+set -o pipefail
+gunzip -c "$BACKUP_FILE" | psql

package/bin/src/core/services/script-loader-service.js

@@ -0,0 +1,21 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ScriptLoaderService = void 0;
+const common_1 = require("@nestjs/common");
+const fs_1 = require("fs");
+const path_1 = require("path");
+let ScriptLoaderService = class ScriptLoaderService {
+    load(dir, name) {
+        return (0, fs_1.readFileSync)((0, path_1.join)(__dirname, dir, `${name}.sh`), 'utf8');
+    }
+};
+exports.ScriptLoaderService = ScriptLoaderService;
+exports.ScriptLoaderService = ScriptLoaderService = __decorate([
+    (0, common_1.Injectable)()
+], ScriptLoaderService);

package/bin/src/infrastructure/environment/environment-module.js

@@ -15,7 +15,7 @@ exports.environmentModule = {
     providers: [
         environment_service_1.EnvironmentService,
         {
-            provide: env_ssm_1.SsmConfigService,
+            provide: env_ssm_1.ConfigService,
             useValue: env_ssm_1.SsmConfigFactory.make(),
         },
     ],

package/bin/src/infrastructure/environment/services/environment-service.js

@@ -17,13 +17,19 @@ let EnvironmentService = class EnvironmentService {
     configService;
     ssmConfigService;
     async database() {
-        const databaseUrl = await this.ssmConfigService.getOrThrow('DB_URL');
+        let databaseUrl;
+        try {
+            databaseUrl = await this.ssmConfigService.getOrThrow('DB_URL');
+        }
+        catch (error) {
+            return { ok: false, error: error };
+        }
         let url;
         try {
             url = new URL(databaseUrl);
         }
         catch {
-            throw new Error('Invalid DB_URL');
+            return { ok: false, error: new Error('Invalid DB_URL') };
         }
         const connection = {
             host: url.hostname,
@@ -34,9 +40,12 @@ let EnvironmentService = class EnvironmentService {
         };
         const missing = ['host', 'name', 'user'].filter(field => connection[field] === '');
         if (missing.length > 0) {
-            throw new Error(`Invalid DB_URL: missing ${missing.join(', ')}`);
+            return {
+                ok: false,
+                error: new Error(`Invalid DB_URL: missing ${missing.join(', ')}`),
+            };
         }
-        return connection;
+        return { ok: true, connection };
     }
     get storage() {
         return {
@@ -52,5 +61,5 @@ exports.EnvironmentService = EnvironmentService;
 exports.EnvironmentService = EnvironmentService = __decorate([
     (0, common_1.Injectable)(),
     __metadata("design:paramtypes", [config_1.ConfigService,
-        env_ssm_1.SsmConfigService])
+        env_ssm_1.ConfigService])
 ], EnvironmentService);

package/package.json

@@ -8,7 +8,7 @@
   },
   "dependencies": {
     "@aws-sdk/client-s3": "^3.1045.0",
-    "@heronlabs/env-ssm": "^2.0.1",
+    "@heronlabs/env-ssm": "^3.0.1",
     "@nestjs/common": "^11.1.18",
     "@nestjs/config": "^4.0.4",
     "@nestjs/core": "^11.1.18",
@@ -40,6 +40,7 @@
     "jiti": "^2.7.0",
     "moq.ts": "^10.0.8",
     "nest-commander-testing": "^3.5.1",
+    "shellcheck": "^4.1.0",
     "typescript": "~5.8.3",
     "typescript-eslint": "^8.60.0",
     "vitest": "^4.1.6"
@@ -47,7 +48,7 @@
   "engineStrict": true,
   "engines": {
     "node": ">=22",
-    "pnpm": ">=10.29.3"
+    "pnpm": ">=10.33.2"
   },
   "files": [
     "bin"
@@ -87,12 +88,13 @@
   "scripts": {
     "build": "nest build --path tsconfig.bin.json",
     "dep:cruise": "depcruise src --config .dependency-cruiser.json",
-    "lint:check": "gts lint && eslint \"**/*.json\" \"**/*.yml\" \"**/*.yaml\" --no-error-on-unmatched-pattern",
-    "lint:fix": "gts fix && eslint \"**/*.json\" \"**/*.yml\" \"**/*.yaml\" --fix --no-error-on-unmatched-pattern",
+    "lint:check": "gts lint && eslint \"**/*.json\" \"**/*.yml\" \"**/*.yaml\" --no-error-on-unmatched-pattern && pnpm lint:shell",
+    "lint:fix": "gts fix && eslint \"**/*.json\" \"**/*.yml\" \"**/*.yaml\" --fix --no-error-on-unmatched-pattern && pnpm lint:shell",
+    "lint:shell": "find src -name '*.sh' -exec shellcheck {} +",
     "prepublishOnly": "pnpm build",
     "start": "dotenv -- node bin/src/main.js",
     "test:mutation": "stryker run stryker.conf.json",
     "test:unit": "vitest run"
   },
-  "version": "2.0.0"
+  "version": "2.0.1"
 }