@highstate/common 0.9.1 → 0.9.3

package/dist/{chunk-VSX2NALR.js → chunk-ZA27FN5N.js}

@@ -211,4 +211,4 @@ export {
   l4EndpointToString,
   parseL4Endpoint
 };
-//# sourceMappingURL=chunk-VSX2NALR.js.map
+//# sourceMappingURL=chunk-ZA27FN5N.js.map

package/dist/chunk-ZA27FN5N.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/shared/server.ts","../src/shared/dns.ts","../../../node_modules/remeda/dist/chunk-D6FCK2GA.js","../../../node_modules/remeda/dist/chunk-WIMGWYZL.js","../../../node_modules/remeda/dist/chunk-VG2NVNXT.js","../src/shared/passwords.ts","../src/shared/ssh.ts","../src/shared/utils.ts"],"sourcesContent":["import { remote, type types } from \"@pulumi/command\"\nimport {\n  interpolate,\n  output,\n  Resource,\n  type Input,\n  type InputOrArray,\n  type Output,\n} from \"@highstate/pulumi\"\nimport { common } from \"@highstate/library\"\n\nexport function getServerConnection(\n  server: Input<common.Server>,\n): Output<types.input.remote.ConnectionArgs> {\n  return output(server).apply(server => ({\n    host: server.endpoint,\n    port: server.sshCredentials?.port ?? 22,\n    user: server.sshCredentials?.user ?? \"root\",\n    password: server.sshCredentials?.password,\n    privateKey: server.sshCredentials?.privateKey,\n    dialErrorLimit: 3,\n  }))\n}\n\nexport interface CommandOptions {\n  id: string\n  create: Input<string>\n  update?: Input<string>\n  delete?: Input<string>\n  logging?: Input<remote.Logging>\n  dependsOn?: InputOrArray<Resource>\n}\n\nexport interface FileOptions {\n  id: string\n  path: Input<string>\n  content: Input<string>\n  dependsOn?: InputOrArray<Resource>\n}\n\nexport class Server {\n  public readonly server: Output<common.Server>\n  public readonly connection: Output<types.input.remote.ConnectionArgs>\n\n  public get endpoint(): Output<string> {\n    return this.server.endpoint\n  }\n\n  public get hostname(): Output<string> {\n    return this.server.hostname\n  }\n\n  constructor(server: Input<common.Server>) {\n    this.server = output(server)\n    this.connection = getServerConnection(this.server)\n  }\n\n  public command(options: CommandOptions): remote.Command {\n    return new remote.Command(\n      options.id,\n      {\n        connection: this.connection,\n        create: options.create,\n        update: options.update,\n        delete: options.delete,\n        logging: options.logging,\n      },\n      { dependsOn: options.dependsOn },\n    )\n  }\n\n  public file(options: FileOptions): remote.Command {\n    const escapedContent = output(options.content).apply(content => content.replace(/\"/g, '\\\\\"'))\n\n    return new remote.Command(\n      options.id,\n      {\n        connection: this.connection,\n        create: interpolate`mkdir -p $(dirname ${options.path}) && echo \"${escapedContent}\" > ${options.path}`,\n        delete: interpolate`rm -rf ${options.path}`,\n      },\n      { dependsOn: options.dependsOn },\n    )\n  }\n}\n","import type { dns } from \"@highstate/library\"\nimport {\n  ComponentResource,\n  output,\n  Output,\n  Resource,\n  type Input,\n  type ResourceOptions,\n  type Unwrap,\n} from \"@highstate/pulumi\"\nimport { capitalize } from \"remeda\"\n\nexport type DnsRecordArgs = {\n  /**\n   * The DNS provider to use.\n   */\n  provider: Input<dns.Provider>\n\n  /**\n   * The name of the DNS record.\n   * If not provided, the name of the resource will be used.\n   */\n  name?: Input<string>\n\n  /**\n   * The type of the DNS record.\n   */\n  type: Input<string>\n\n  /**\n   * The value of the DNS record.\n   */\n  value: Input<string>\n\n  /**\n   * Whether the DNS record is proxied (e.g. to provide DDoS protection).\n   *\n   * Available only for public IPs and some DNS providers like Cloudflare.\n   * If not supported, the DNS provider will ignore this value.\n   */\n  proxied?: Input<boolean>\n\n  /**\n   * The TTL of the DNS record.\n   *\n   * If not provided, the DNS provider will use its default value.\n   */\n  ttl?: Input<number>\n\n  /**\n   * The priority of the DNS record.\n   *\n   * Only used for some DNS record types (e.g. MX).\n   */\n  priority?: Input<number>\n}\n\nexport type DnsRecordSetArgs = Omit<DnsRecordArgs, \"provider\"> & {\n  /**\n   * The DNS providers to use to create the DNS records.\n   *\n   * If multiple providers matched the specified domain, multiple DNS records will be created.\n   */\n  providers: Input<dns.Provider[]>\n}\n\nexport abstract class DnsRecord extends ComponentResource {\n  /**\n   * The underlying dns record resource.\n   */\n  public readonly dnsRecord: Output<Resource>\n\n  constructor(name: string, args: DnsRecordArgs, opts?: ResourceOptions) {\n    super(\"highstate:common:DnsRecord\", name, args, opts)\n\n    this.dnsRecord = output(args).apply(args => {\n      return output(this.create(name, args, { ...opts, parent: this }))\n    })\n  }\n\n  protected abstract create(\n    name: string,\n    args: Unwrap<DnsRecordArgs>,\n    opts?: ResourceOptions,\n  ): Input<Resource>\n\n  static create(name: string, args: DnsRecordArgs, opts?: ResourceOptions): Output<DnsRecord> {\n    return output(args).apply(async args => {\n      const providerType = args.provider.type\n      const implName = `${capitalize(providerType)}DnsRecord`\n      const implModule = (await import(`@highstate/${providerType}`)) as Record<string, unknown>\n\n      const implClass = implModule[implName] as new (\n        name: string,\n        args: Unwrap<DnsRecordArgs>,\n        opts?: ResourceOptions,\n      ) => DnsRecord\n\n      return new implClass(name, args, opts)\n    })\n  }\n\n  static createSet(\n    name: string,\n    args: DnsRecordSetArgs,\n    opts?: ResourceOptions,\n  ): Output<DnsRecord[]> {\n    return output(args).apply(args => {\n      const recordName = args.name ?? name\n\n      return output(\n        args.providers\n          .filter(provider => recordName.endsWith(provider.domain))\n          .map(provider =>\n            DnsRecord.create(\n              `${name}.${provider.type}`,\n              { name: recordName, ...args, provider },\n              opts,\n            ),\n          ),\n      )\n    })\n  }\n}\n","function u(o,n,a){let t=r=>o(r,...n);return a===void 0?t:Object.assign(t,{lazy:a,lazyArgs:n})}export{u as a};\n","import{a as t}from\"./chunk-D6FCK2GA.js\";function u(r,n,o){let a=r.length-n.length;if(a===0)return r(...n);if(a===1)return t(r,n,o);throw new Error(\"Wrong number of arguments\")}export{u as a};\n","import{a as i}from\"./chunk-WIMGWYZL.js\";function n(...t){return i(e,t)}var e=t=>`${t[0]?.toUpperCase()??\"\"}${t.slice(1)}`;export{n as a};\n","import { randomBytes } from \"@noble/hashes/utils\"\nimport { secureMask } from \"micro-key-producer/password.js\"\n\nexport function generatePassword() {\n  return secureMask.apply(randomBytes(32)).password\n}\n","import type { common, ssh } from \"@highstate/library\"\nimport {\n  getOrCreateSecret,\n  getUnitInstanceName,\n  output,\n  Output,\n  type Input,\n  type InstanceTerminal,\n} from \"@highstate/pulumi\"\nimport getKeys, { PrivateExport } from \"micro-key-producer/ssh.js\"\nimport { randomBytes } from \"micro-key-producer/utils.js\"\n\nexport function createSshTerminal(server: common.Server): InstanceTerminal {\n  const command = [\"ssh\", \"-tt\", \"-o\", \"StrictHostKeyChecking=no\"]\n\n  if (server.sshCredentials?.port) {\n    command.push(\"-p\", server.sshCredentials.port.toString())\n  }\n\n  if (server.sshCredentials?.privateKey) {\n    command.push(\"-i\", \"/private-key\")\n  }\n\n  const endpoint = server.sshCredentials?.endpoint ?? server.endpoint\n  const user = server.sshCredentials?.user ?? \"root\"\n\n  command.push(`${user}@${endpoint}`)\n\n  if (server.sshCredentials?.password) {\n    command.unshift(\"sshpass\", \"-f\", \"/password\")\n  }\n\n  return {\n    name: \"ssh\",\n    title: `SSH: ${getUnitInstanceName()}`,\n    description: \"Connect to the server via SSH\",\n    image: \"ghcr.io/exeteres/highstate/terminal-ssh\",\n    command,\n\n    files: {\n      \"/password\": server.sshCredentials?.password,\n\n      \"/private-key\": {\n        content: server.sshCredentials?.privateKey,\n        mode: 0o600,\n      },\n    },\n  }\n}\n\nexport function generatePrivateKey(): string {\n  const seed = randomBytes(32)\n\n  return getKeys(seed).privateKey\n}\n\nexport function getKeysFromString(privateKey: string) {\n  const privateKeyStruct = PrivateExport.decode(privateKey)\n\n  // eslint-disable-next-line @typescript-eslint/no-unsafe-member-access\n  const privKey = privateKeyStruct.keys[0].privKey.privKey as Uint8Array\n\n  return getKeys(privKey.slice(0, 32))\n}\n\nexport type SshKeyPairInputs = {\n  sshKeyPair?: Input<ssh.KeyPair>\n}\n\nexport type SshKeyPairSecrets = {\n  sshPrivateKey?: Input<string>\n}\n\nexport function getOrCreateSshKeyPair(\n  inputs: SshKeyPairInputs,\n  secrets: Output<SshKeyPairSecrets>,\n): Output<ssh.KeyPair> {\n  if (inputs.sshKeyPair) {\n    return output(inputs.sshKeyPair)\n  }\n\n  const privateKey = getOrCreateSecret(secrets, \"sshPrivateKey\", generatePrivateKey)\n  const keys = privateKey.apply(getKeysFromString)\n\n  return output({\n    type: \"ed25519\",\n    privateKey,\n    publicKey: keys.publicKey,\n  })\n}\n","import type { common } from \"@highstate/library\"\n\nexport function l4EndpointToString(l4Endpoint: common.L4Endpoint): string {\n  return `${l4Endpoint.endpoint}:${l4Endpoint.port}`\n}\n\nexport function parseL4Endpoint(l4Endpoint: string): common.L4Endpoint {\n  const [endpoint, port] = l4Endpoint.split(\":\")\n\n  if (!port) {\n    throw new Error(`Invalid L4 endpoint: ${l4Endpoint}`)\n  }\n\n  return {\n    endpoint,\n    port: parseInt(port, 10),\n  }\n}\n"],"mappings":";AAAA,SAAS,cAA0B;AACnC;AAAA,EACE;AAAA,EACA;AAAA,OAKK;AACP,OAAuB;AAEhB,SAAS,oBACd,QAC2C;AAC3C,SAAO,OAAO,MAAM,EAAE,MAAM,CAAAA,aAAW;AAAA,IACrC,MAAMA,QAAO;AAAA,IACb,MAAMA,QAAO,gBAAgB,QAAQ;AAAA,IACrC,MAAMA,QAAO,gBAAgB,QAAQ;AAAA,IACrC,UAAUA,QAAO,gBAAgB;AAAA,IACjC,YAAYA,QAAO,gBAAgB;AAAA,IACnC,gBAAgB;AAAA,EAClB,EAAE;AACJ;AAkBO,IAAM,SAAN,MAAa;AAAA,EACF;AAAA,EACA;AAAA,EAEhB,IAAW,WAA2B;AACpC,WAAO,KAAK,OAAO;AAAA,EACrB;AAAA,EAEA,IAAW,WAA2B;AACpC,WAAO,KAAK,OAAO;AAAA,EACrB;AAAA,EAEA,YAAY,QAA8B;AACxC,SAAK,SAAS,OAAO,MAAM;AAC3B,SAAK,aAAa,oBAAoB,KAAK,MAAM;AAAA,EACnD;AAAA,EAEO,QAAQ,SAAyC;AACtD,WAAO,IAAI,OAAO;AAAA,MAChB,QAAQ;AAAA,MACR;AAAA,QACE,YAAY,KAAK;AAAA,QACjB,QAAQ,QAAQ;AAAA,QAChB,QAAQ,QAAQ;AAAA,QAChB,QAAQ,QAAQ;AAAA,QAChB,SAAS,QAAQ;AAAA,MACnB;AAAA,MACA,EAAE,WAAW,QAAQ,UAAU;AAAA,IACjC;AAAA,EACF;AAAA,EAEO,KAAK,SAAsC;AAChD,UAAM,iBAAiB,OAAO,QAAQ,OAAO,EAAE,MAAM,aAAW,QAAQ,QAAQ,MAAM,KAAK,CAAC;AAE5F,WAAO,IAAI,OAAO;AAAA,MAChB,QAAQ;AAAA,MACR;AAAA,QACE,YAAY,KAAK;AAAA,QACjB,QAAQ,iCAAiC,QAAQ,IAAI,cAAc,cAAc,OAAO,QAAQ,IAAI;AAAA,QACpG,QAAQ,qBAAqB,QAAQ,IAAI;AAAA,MAC3C;AAAA,MACA,EAAE,WAAW,QAAQ,UAAU;AAAA,IACjC;AAAA,EACF;AACF;;;ACnFA;AAAA,EACE;AAAA,EACA,UAAAC;AAAA,OAMK;;;ACTP,SAAS,EAAE,GAAEC,IAAE,GAAE;AAAC,MAAI,IAAE,OAAG,EAAE,GAAE,GAAGA,EAAC;AAAE,SAAO,MAAI,SAAO,IAAE,OAAO,OAAO,GAAE,EAAC,MAAK,GAAE,UAASA,GAAC,CAAC;AAAC;;;ACArD,SAASC,GAAE,GAAEC,IAAE,GAAE;AAAC,MAAI,IAAE,EAAE,SAAOA,GAAE;AAAO,MAAG,MAAI,EAAE,QAAO,EAAE,GAAGA,EAAC;AAAE,MAAG,MAAI,EAAE,QAAO,EAAE,GAAEA,IAAE,CAAC;AAAE,QAAM,IAAI,MAAM,2BAA2B;AAAC;;;ACAvI,SAAS,KAAK,GAAE;AAAC,SAAOC,GAAE,GAAE,CAAC;AAAC;AAAC,IAAI,IAAE,OAAG,GAAG,EAAE,CAAC,GAAG,YAAY,KAAG,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC;;;AHkEhH,IAAe,YAAf,MAAe,mBAAkB,kBAAkB;AAAA;AAAA;AAAA;AAAA,EAIxC;AAAA,EAEhB,YAAY,MAAc,MAAqB,MAAwB;AACrE,UAAM,8BAA8B,MAAM,MAAM,IAAI;AAEpD,SAAK,YAAYC,QAAO,IAAI,EAAE,MAAM,CAAAC,UAAQ;AAC1C,aAAOD,QAAO,KAAK,OAAO,MAAMC,OAAM,EAAE,GAAG,MAAM,QAAQ,KAAK,CAAC,CAAC;AAAA,IAClE,CAAC;AAAA,EACH;AAAA,EAQA,OAAO,OAAO,MAAc,MAAqB,MAA2C;AAC1F,WAAOD,QAAO,IAAI,EAAE,MAAM,OAAMC,UAAQ;AACtC,YAAM,eAAeA,MAAK,SAAS;AACnC,YAAM,WAAW,GAAG,EAAW,YAAY,CAAC;AAC5C,YAAM,aAAc,MAAM,OAAO,cAAc,YAAY;AAE3D,YAAM,YAAY,WAAW,QAAQ;AAMrC,aAAO,IAAI,UAAU,MAAMA,OAAM,IAAI;AAAA,IACvC,CAAC;AAAA,EACH;AAAA,EAEA,OAAO,UACL,MACA,MACA,MACqB;AACrB,WAAOD,QAAO,IAAI,EAAE,MAAM,CAAAC,UAAQ;AAChC,YAAM,aAAaA,MAAK,QAAQ;AAEhC,aAAOD;AAAA,QACLC,MAAK,UACF,OAAO,cAAY,WAAW,SAAS,SAAS,MAAM,CAAC,EACvD;AAAA,UAAI,cACH,WAAU;AAAA,YACR,GAAG,IAAI,IAAI,SAAS,IAAI;AAAA,YACxB,EAAE,MAAM,YAAY,GAAGA,OAAM,SAAS;AAAA,YACtC;AAAA,UACF;AAAA,QACF;AAAA,MACJ;AAAA,IACF,CAAC;AAAA,EACH;AACF;;;AI3HA,SAAS,mBAAmB;AAC5B,SAAS,kBAAkB;AAEpB,SAAS,mBAAmB;AACjC,SAAO,WAAW,MAAM,YAAY,EAAE,CAAC,EAAE;AAC3C;;;ACJA;AAAA,EACE;AAAA,EACA;AAAA,EACA,UAAAC;AAAA,OAIK;AACP,OAAO,WAAW,qBAAqB;AACvC,SAAS,eAAAC,oBAAmB;AAErB,SAAS,kBAAkB,QAAyC;AACzE,QAAM,UAAU,CAAC,OAAO,OAAO,MAAM,0BAA0B;AAE/D,MAAI,OAAO,gBAAgB,MAAM;AAC/B,YAAQ,KAAK,MAAM,OAAO,eAAe,KAAK,SAAS,CAAC;AAAA,EAC1D;AAEA,MAAI,OAAO,gBAAgB,YAAY;AACrC,YAAQ,KAAK,MAAM,cAAc;AAAA,EACnC;AAEA,QAAM,WAAW,OAAO,gBAAgB,YAAY,OAAO;AAC3D,QAAM,OAAO,OAAO,gBAAgB,QAAQ;AAE5C,UAAQ,KAAK,GAAG,IAAI,IAAI,QAAQ,EAAE;AAElC,MAAI,OAAO,gBAAgB,UAAU;AACnC,YAAQ,QAAQ,WAAW,MAAM,WAAW;AAAA,EAC9C;AAEA,SAAO;AAAA,IACL,MAAM;AAAA,IACN,OAAO,QAAQ,oBAAoB,CAAC;AAAA,IACpC,aAAa;AAAA,IACb,OAAO;AAAA,IACP;AAAA,IAEA,OAAO;AAAA,MACL,aAAa,OAAO,gBAAgB;AAAA,MAEpC,gBAAgB;AAAA,QACd,SAAS,OAAO,gBAAgB;AAAA,QAChC,MAAM;AAAA,MACR;AAAA,IACF;AAAA,EACF;AACF;AAEO,SAAS,qBAA6B;AAC3C,QAAM,OAAOA,aAAY,EAAE;AAE3B,SAAO,QAAQ,IAAI,EAAE;AACvB;AAEO,SAAS,kBAAkB,YAAoB;AACpD,QAAM,mBAAmB,cAAc,OAAO,UAAU;AAGxD,QAAM,UAAU,iBAAiB,KAAK,CAAC,EAAE,QAAQ;AAEjD,SAAO,QAAQ,QAAQ,MAAM,GAAG,EAAE,CAAC;AACrC;AAUO,SAAS,sBACd,QACA,SACqB;AACrB,MAAI,OAAO,YAAY;AACrB,WAAOD,QAAO,OAAO,UAAU;AAAA,EACjC;AAEA,QAAM,aAAa,kBAAkB,SAAS,iBAAiB,kBAAkB;AACjF,QAAM,OAAO,WAAW,MAAM,iBAAiB;AAE/C,SAAOA,QAAO;AAAA,IACZ,MAAM;AAAA,IACN;AAAA,IACA,WAAW,KAAK;AAAA,EAClB,CAAC;AACH;;;ACvFO,SAAS,mBAAmB,YAAuC;AACxE,SAAO,GAAG,WAAW,QAAQ,IAAI,WAAW,IAAI;AAClD;AAEO,SAAS,gBAAgB,YAAuC;AACrE,QAAM,CAAC,UAAU,IAAI,IAAI,WAAW,MAAM,GAAG;AAE7C,MAAI,CAAC,MAAM;AACT,UAAM,IAAI,MAAM,wBAAwB,UAAU,EAAE;AAAA,EACtD;AAEA,SAAO;AAAA,IACL;AAAA,IACA,MAAM,SAAS,MAAM,EAAE;AAAA,EACzB;AACF;","names":["server","output","n","u","n","u","output","args","output","randomBytes"]}

package/dist/existing-server/index.js

@@ -1,6 +1,6 @@
 import {
   createSshTerminal
-} from "../chunk-VSX2NALR.js";
+} from "../chunk-ZA27FN5N.js";
 
 // src/existing-server/index.ts
 import { common } from "@highstate/library";

package/dist/highstate.manifest.json

@@ -1,9 +1,9 @@
 {
   "sourceHashes": {
-    "./dist/index.js": "dea0178b75b112315d6eef23f0245fb4b6fee00f4dee3f0347cd164a24baca2f",
+    "./dist/index.js": "3c4e76e0ac05b10fa2a2067695242070c6beab04f6689a5d6181c448113eac89",
     "./dist/dns/record/index.js": "e4f4558eaa29c589553e0c99b2f12e29e55e3db434977685b4f0e033e5666ac3",
-    "./dist/existing-server/index.js": "1c257036c248535d18bbb2504c9ef69233f43431307ffa6731bb046ca1f065ba",
-    "./dist/ssh/key-pair/index.js": "7b6b53ee6ed168aee7e513aba1e07a7f4d1be758052d1fe58046f20825bb183d",
-    "./dist/script/index.js": "8eef52abc78cf9eb866ea92d84af37261e10b21a51233eab18fb93c543502347"
+    "./dist/existing-server/index.js": "ebd36ffd0f09c7ebc01a80f32e74f6b8bb2e8a2f3359b7e2f3bd5c10ebcaecf2",
+    "./dist/ssh/key-pair/index.js": "9f3d11f005131a1e84542684bb412a72c0f4f4b21e82a4041259ec67f69a5d29",
+    "./dist/script/index.js": "6347f09e42f10d2f1ad14361357128a538b3139a23f1348eba7d65a0e856af70"
   }
 }

package/dist/index.js

@@ -9,7 +9,7 @@ import {
   getServerConnection,
   l4EndpointToString,
   parseL4Endpoint
-} from "./chunk-VSX2NALR.js";
+} from "./chunk-ZA27FN5N.js";
 export {
   DnsRecord,
   Server,

package/dist/script/index.js

@@ -1,6 +1,6 @@
 import {
   Server
-} from "../chunk-VSX2NALR.js";
+} from "../chunk-ZA27FN5N.js";
 
 // src/script/index.ts
 import { common } from "@highstate/library";

package/dist/ssh/key-pair/index.js

@@ -1,7 +1,7 @@
 import {
   generatePrivateKey,
   getKeysFromString
-} from "../../chunk-VSX2NALR.js";
+} from "../../chunk-ZA27FN5N.js";
 
 // src/ssh/key-pair/index.ts
 import { ssh } from "@highstate/library";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@highstate/common",
-  "version": "0.9.1",
+  "version": "0.9.3",
   "type": "module",
   "files": [
     "dist",
@@ -23,16 +23,14 @@
     "build": "highstate build"
   },
   "dependencies": {
-    "@highstate/pulumi": "^0.9.1",
+    "@highstate/library": "^0.9.3",
+    "@highstate/pulumi": "^0.9.3",
     "@noble/hashes": "^1.7.1",
     "@pulumi/command": "^1.0.2",
     "micro-key-producer": "^0.7.3"
   },
-  "peerDependencies": {
-    "@highstate/library": "workspace:^0.4.4"
-  },
   "devDependencies": {
-    "@highstate/cli": "^0.9.1"
+    "@highstate/cli": "^0.9.3"
   },
-  "gitHead": "2f9fdd9542fbdd11d4337fb59ac4f5728535fa0c"
+  "gitHead": "cdd2bb1d9001ba4a39f64087eb29af6f50d82bec"
 }

package/src/shared/dns.ts

@@ -39,6 +39,20 @@ export type DnsRecordArgs = {
    * If not supported, the DNS provider will ignore this value.
    */
   proxied?: Input<boolean>
+
+  /**
+   * The TTL of the DNS record.
+   *
+   * If not provided, the DNS provider will use its default value.
+   */
+  ttl?: Input<number>
+
+  /**
+   * The priority of the DNS record.
+   *
+   * Only used for some DNS record types (e.g. MX).
+   */
+  priority?: Input<number>
 }
 
 export type DnsRecordSetArgs = Omit<DnsRecordArgs, "provider"> & {

package/dist/chunk-VSX2NALR.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/shared/server.ts","../src/shared/dns.ts","../../../node_modules/remeda/dist/chunk-D6FCK2GA.js","../../../node_modules/remeda/dist/chunk-WIMGWYZL.js","../../../node_modules/remeda/dist/chunk-VG2NVNXT.js","../src/shared/passwords.ts","../src/shared/ssh.ts","../src/shared/utils.ts"],"sourcesContent":["import { remote, type types } from \"@pulumi/command\"\nimport {\n  interpolate,\n  output,\n  Resource,\n  type Input,\n  type InputOrArray,\n  type Output,\n} from \"@highstate/pulumi\"\nimport { common } from \"@highstate/library\"\n\nexport function getServerConnection(\n  server: Input<common.Server>,\n): Output<types.input.remote.ConnectionArgs> {\n  return output(server).apply(server => ({\n    host: server.endpoint,\n    port: server.sshCredentials?.port ?? 22,\n    user: server.sshCredentials?.user ?? \"root\",\n    password: server.sshCredentials?.password,\n    privateKey: server.sshCredentials?.privateKey,\n    dialErrorLimit: 3,\n  }))\n}\n\nexport interface CommandOptions {\n  id: string\n  create: Input<string>\n  update?: Input<string>\n  delete?: Input<string>\n  logging?: Input<remote.Logging>\n  dependsOn?: InputOrArray<Resource>\n}\n\nexport interface FileOptions {\n  id: string\n  path: Input<string>\n  content: Input<string>\n  dependsOn?: InputOrArray<Resource>\n}\n\nexport class Server {\n  public readonly server: Output<common.Server>\n  public readonly connection: Output<types.input.remote.ConnectionArgs>\n\n  public get endpoint(): Output<string> {\n    return this.server.endpoint\n  }\n\n  public get hostname(): Output<string> {\n    return this.server.hostname\n  }\n\n  constructor(server: Input<common.Server>) {\n    this.server = output(server)\n    this.connection = getServerConnection(this.server)\n  }\n\n  public command(options: CommandOptions): remote.Command {\n    return new remote.Command(\n      options.id,\n      {\n        connection: this.connection,\n        create: options.create,\n        update: options.update,\n        delete: options.delete,\n        logging: options.logging,\n      },\n      { dependsOn: options.dependsOn },\n    )\n  }\n\n  public file(options: FileOptions): remote.Command {\n    const escapedContent = output(options.content).apply(content => content.replace(/\"/g, '\\\\\"'))\n\n    return new remote.Command(\n      options.id,\n      {\n        connection: this.connection,\n        create: interpolate`mkdir -p $(dirname ${options.path}) && echo \"${escapedContent}\" > ${options.path}`,\n        delete: interpolate`rm -rf ${options.path}`,\n      },\n      { dependsOn: options.dependsOn },\n    )\n  }\n}\n","import type { dns } from \"@highstate/library\"\nimport {\n  ComponentResource,\n  output,\n  Output,\n  Resource,\n  type Input,\n  type ResourceOptions,\n  type Unwrap,\n} from \"@highstate/pulumi\"\nimport { capitalize } from \"remeda\"\n\nexport type DnsRecordArgs = {\n  /**\n   * The DNS provider to use.\n   */\n  provider: Input<dns.Provider>\n\n  /**\n   * The name of the DNS record.\n   * If not provided, the name of the resource will be used.\n   */\n  name?: Input<string>\n\n  /**\n   * The type of the DNS record.\n   */\n  type: Input<string>\n\n  /**\n   * The value of the DNS record.\n   */\n  value: Input<string>\n\n  /**\n   * Whether the DNS record is proxied (e.g. to provide DDoS protection).\n   *\n   * Available only for public IPs and some DNS providers like Cloudflare.\n   * If not supported, the DNS provider will ignore this value.\n   */\n  proxied?: Input<boolean>\n}\n\nexport type DnsRecordSetArgs = Omit<DnsRecordArgs, \"provider\"> & {\n  /**\n   * The DNS providers to use to create the DNS records.\n   *\n   * If multiple providers matched the specified domain, multiple DNS records will be created.\n   */\n  providers: Input<dns.Provider[]>\n}\n\nexport abstract class DnsRecord extends ComponentResource {\n  /**\n   * The underlying dns record resource.\n   */\n  public readonly dnsRecord: Output<Resource>\n\n  constructor(name: string, args: DnsRecordArgs, opts?: ResourceOptions) {\n    super(\"highstate:common:DnsRecord\", name, args, opts)\n\n    this.dnsRecord = output(args).apply(args => {\n      return output(this.create(name, args, { ...opts, parent: this }))\n    })\n  }\n\n  protected abstract create(\n    name: string,\n    args: Unwrap<DnsRecordArgs>,\n    opts?: ResourceOptions,\n  ): Input<Resource>\n\n  static create(name: string, args: DnsRecordArgs, opts?: ResourceOptions): Output<DnsRecord> {\n    return output(args).apply(async args => {\n      const providerType = args.provider.type\n      const implName = `${capitalize(providerType)}DnsRecord`\n      const implModule = (await import(`@highstate/${providerType}`)) as Record<string, unknown>\n\n      const implClass = implModule[implName] as new (\n        name: string,\n        args: Unwrap<DnsRecordArgs>,\n        opts?: ResourceOptions,\n      ) => DnsRecord\n\n      return new implClass(name, args, opts)\n    })\n  }\n\n  static createSet(\n    name: string,\n    args: DnsRecordSetArgs,\n    opts?: ResourceOptions,\n  ): Output<DnsRecord[]> {\n    return output(args).apply(args => {\n      const recordName = args.name ?? name\n\n      return output(\n        args.providers\n          .filter(provider => recordName.endsWith(provider.domain))\n          .map(provider =>\n            DnsRecord.create(\n              `${name}.${provider.type}`,\n              { name: recordName, ...args, provider },\n              opts,\n            ),\n          ),\n      )\n    })\n  }\n}\n","function u(o,n,a){let t=r=>o(r,...n);return a===void 0?t:Object.assign(t,{lazy:a,lazyArgs:n})}export{u as a};\n","import{a as t}from\"./chunk-D6FCK2GA.js\";function u(r,n,o){let a=r.length-n.length;if(a===0)return r(...n);if(a===1)return t(r,n,o);throw new Error(\"Wrong number of arguments\")}export{u as a};\n","import{a as i}from\"./chunk-WIMGWYZL.js\";function n(...t){return i(e,t)}var e=t=>`${t[0]?.toUpperCase()??\"\"}${t.slice(1)}`;export{n as a};\n","import { randomBytes } from \"@noble/hashes/utils\"\nimport { secureMask } from \"micro-key-producer/password.js\"\n\nexport function generatePassword() {\n  return secureMask.apply(randomBytes(32)).password\n}\n","import type { common, ssh } from \"@highstate/library\"\nimport {\n  getOrCreateSecret,\n  getUnitInstanceName,\n  output,\n  Output,\n  type Input,\n  type InstanceTerminal,\n} from \"@highstate/pulumi\"\nimport getKeys, { PrivateExport } from \"micro-key-producer/ssh.js\"\nimport { randomBytes } from \"micro-key-producer/utils.js\"\n\nexport function createSshTerminal(server: common.Server): InstanceTerminal {\n  const command = [\"ssh\", \"-tt\", \"-o\", \"StrictHostKeyChecking=no\"]\n\n  if (server.sshCredentials?.port) {\n    command.push(\"-p\", server.sshCredentials.port.toString())\n  }\n\n  if (server.sshCredentials?.privateKey) {\n    command.push(\"-i\", \"/private-key\")\n  }\n\n  const endpoint = server.sshCredentials?.endpoint ?? server.endpoint\n  const user = server.sshCredentials?.user ?? \"root\"\n\n  command.push(`${user}@${endpoint}`)\n\n  if (server.sshCredentials?.password) {\n    command.unshift(\"sshpass\", \"-f\", \"/password\")\n  }\n\n  return {\n    name: \"ssh\",\n    title: `SSH: ${getUnitInstanceName()}`,\n    description: \"Connect to the server via SSH\",\n    image: \"ghcr.io/exeteres/highstate/terminal-ssh\",\n    command,\n\n    files: {\n      \"/password\": server.sshCredentials?.password,\n\n      \"/private-key\": {\n        content: server.sshCredentials?.privateKey,\n        mode: 0o600,\n      },\n    },\n  }\n}\n\nexport function generatePrivateKey(): string {\n  const seed = randomBytes(32)\n\n  return getKeys(seed).privateKey\n}\n\nexport function getKeysFromString(privateKey: string) {\n  const privateKeyStruct = PrivateExport.decode(privateKey)\n\n  // eslint-disable-next-line @typescript-eslint/no-unsafe-member-access\n  const privKey = privateKeyStruct.keys[0].privKey.privKey as Uint8Array\n\n  return getKeys(privKey.slice(0, 32))\n}\n\nexport type SshKeyPairInputs = {\n  sshKeyPair?: Input<ssh.KeyPair>\n}\n\nexport type SshKeyPairSecrets = {\n  sshPrivateKey?: Input<string>\n}\n\nexport function getOrCreateSshKeyPair(\n  inputs: SshKeyPairInputs,\n  secrets: Output<SshKeyPairSecrets>,\n): Output<ssh.KeyPair> {\n  if (inputs.sshKeyPair) {\n    return output(inputs.sshKeyPair)\n  }\n\n  const privateKey = getOrCreateSecret(secrets, \"sshPrivateKey\", generatePrivateKey)\n  const keys = privateKey.apply(getKeysFromString)\n\n  return output({\n    type: \"ed25519\",\n    privateKey,\n    publicKey: keys.publicKey,\n  })\n}\n","import type { common } from \"@highstate/library\"\n\nexport function l4EndpointToString(l4Endpoint: common.L4Endpoint): string {\n  return `${l4Endpoint.endpoint}:${l4Endpoint.port}`\n}\n\nexport function parseL4Endpoint(l4Endpoint: string): common.L4Endpoint {\n  const [endpoint, port] = l4Endpoint.split(\":\")\n\n  if (!port) {\n    throw new Error(`Invalid L4 endpoint: ${l4Endpoint}`)\n  }\n\n  return {\n    endpoint,\n    port: parseInt(port, 10),\n  }\n}\n"],"mappings":";AAAA,SAAS,cAA0B;AACnC;AAAA,EACE;AAAA,EACA;AAAA,OAKK;AACP,OAAuB;AAEhB,SAAS,oBACd,QAC2C;AAC3C,SAAO,OAAO,MAAM,EAAE,MAAM,CAAAA,aAAW;AAAA,IACrC,MAAMA,QAAO;AAAA,IACb,MAAMA,QAAO,gBAAgB,QAAQ;AAAA,IACrC,MAAMA,QAAO,gBAAgB,QAAQ;AAAA,IACrC,UAAUA,QAAO,gBAAgB;AAAA,IACjC,YAAYA,QAAO,gBAAgB;AAAA,IACnC,gBAAgB;AAAA,EAClB,EAAE;AACJ;AAkBO,IAAM,SAAN,MAAa;AAAA,EACF;AAAA,EACA;AAAA,EAEhB,IAAW,WAA2B;AACpC,WAAO,KAAK,OAAO;AAAA,EACrB;AAAA,EAEA,IAAW,WAA2B;AACpC,WAAO,KAAK,OAAO;AAAA,EACrB;AAAA,EAEA,YAAY,QAA8B;AACxC,SAAK,SAAS,OAAO,MAAM;AAC3B,SAAK,aAAa,oBAAoB,KAAK,MAAM;AAAA,EACnD;AAAA,EAEO,QAAQ,SAAyC;AACtD,WAAO,IAAI,OAAO;AAAA,MAChB,QAAQ;AAAA,MACR;AAAA,QACE,YAAY,KAAK;AAAA,QACjB,QAAQ,QAAQ;AAAA,QAChB,QAAQ,QAAQ;AAAA,QAChB,QAAQ,QAAQ;AAAA,QAChB,SAAS,QAAQ;AAAA,MACnB;AAAA,MACA,EAAE,WAAW,QAAQ,UAAU;AAAA,IACjC;AAAA,EACF;AAAA,EAEO,KAAK,SAAsC;AAChD,UAAM,iBAAiB,OAAO,QAAQ,OAAO,EAAE,MAAM,aAAW,QAAQ,QAAQ,MAAM,KAAK,CAAC;AAE5F,WAAO,IAAI,OAAO;AAAA,MAChB,QAAQ;AAAA,MACR;AAAA,QACE,YAAY,KAAK;AAAA,QACjB,QAAQ,iCAAiC,QAAQ,IAAI,cAAc,cAAc,OAAO,QAAQ,IAAI;AAAA,QACpG,QAAQ,qBAAqB,QAAQ,IAAI;AAAA,MAC3C;AAAA,MACA,EAAE,WAAW,QAAQ,UAAU;AAAA,IACjC;AAAA,EACF;AACF;;;ACnFA;AAAA,EACE;AAAA,EACA,UAAAC;AAAA,OAMK;;;ACTP,SAAS,EAAE,GAAEC,IAAE,GAAE;AAAC,MAAI,IAAE,OAAG,EAAE,GAAE,GAAGA,EAAC;AAAE,SAAO,MAAI,SAAO,IAAE,OAAO,OAAO,GAAE,EAAC,MAAK,GAAE,UAASA,GAAC,CAAC;AAAC;;;ACArD,SAASC,GAAE,GAAEC,IAAE,GAAE;AAAC,MAAI,IAAE,EAAE,SAAOA,GAAE;AAAO,MAAG,MAAI,EAAE,QAAO,EAAE,GAAGA,EAAC;AAAE,MAAG,MAAI,EAAE,QAAO,EAAE,GAAEA,IAAE,CAAC;AAAE,QAAM,IAAI,MAAM,2BAA2B;AAAC;;;ACAvI,SAAS,KAAK,GAAE;AAAC,SAAOC,GAAE,GAAE,CAAC;AAAC;AAAC,IAAI,IAAE,OAAG,GAAG,EAAE,CAAC,GAAG,YAAY,KAAG,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC;;;AHoDhH,IAAe,YAAf,MAAe,mBAAkB,kBAAkB;AAAA;AAAA;AAAA;AAAA,EAIxC;AAAA,EAEhB,YAAY,MAAc,MAAqB,MAAwB;AACrE,UAAM,8BAA8B,MAAM,MAAM,IAAI;AAEpD,SAAK,YAAYC,QAAO,IAAI,EAAE,MAAM,CAAAC,UAAQ;AAC1C,aAAOD,QAAO,KAAK,OAAO,MAAMC,OAAM,EAAE,GAAG,MAAM,QAAQ,KAAK,CAAC,CAAC;AAAA,IAClE,CAAC;AAAA,EACH;AAAA,EAQA,OAAO,OAAO,MAAc,MAAqB,MAA2C;AAC1F,WAAOD,QAAO,IAAI,EAAE,MAAM,OAAMC,UAAQ;AACtC,YAAM,eAAeA,MAAK,SAAS;AACnC,YAAM,WAAW,GAAG,EAAW,YAAY,CAAC;AAC5C,YAAM,aAAc,MAAM,OAAO,cAAc,YAAY;AAE3D,YAAM,YAAY,WAAW,QAAQ;AAMrC,aAAO,IAAI,UAAU,MAAMA,OAAM,IAAI;AAAA,IACvC,CAAC;AAAA,EACH;AAAA,EAEA,OAAO,UACL,MACA,MACA,MACqB;AACrB,WAAOD,QAAO,IAAI,EAAE,MAAM,CAAAC,UAAQ;AAChC,YAAM,aAAaA,MAAK,QAAQ;AAEhC,aAAOD;AAAA,QACLC,MAAK,UACF,OAAO,cAAY,WAAW,SAAS,SAAS,MAAM,CAAC,EACvD;AAAA,UAAI,cACH,WAAU;AAAA,YACR,GAAG,IAAI,IAAI,SAAS,IAAI;AAAA,YACxB,EAAE,MAAM,YAAY,GAAGA,OAAM,SAAS;AAAA,YACtC;AAAA,UACF;AAAA,QACF;AAAA,MACJ;AAAA,IACF,CAAC;AAAA,EACH;AACF;;;AI7GA,SAAS,mBAAmB;AAC5B,SAAS,kBAAkB;AAEpB,SAAS,mBAAmB;AACjC,SAAO,WAAW,MAAM,YAAY,EAAE,CAAC,EAAE;AAC3C;;;ACJA;AAAA,EACE;AAAA,EACA;AAAA,EACA,UAAAC;AAAA,OAIK;AACP,OAAO,WAAW,qBAAqB;AACvC,SAAS,eAAAC,oBAAmB;AAErB,SAAS,kBAAkB,QAAyC;AACzE,QAAM,UAAU,CAAC,OAAO,OAAO,MAAM,0BAA0B;AAE/D,MAAI,OAAO,gBAAgB,MAAM;AAC/B,YAAQ,KAAK,MAAM,OAAO,eAAe,KAAK,SAAS,CAAC;AAAA,EAC1D;AAEA,MAAI,OAAO,gBAAgB,YAAY;AACrC,YAAQ,KAAK,MAAM,cAAc;AAAA,EACnC;AAEA,QAAM,WAAW,OAAO,gBAAgB,YAAY,OAAO;AAC3D,QAAM,OAAO,OAAO,gBAAgB,QAAQ;AAE5C,UAAQ,KAAK,GAAG,IAAI,IAAI,QAAQ,EAAE;AAElC,MAAI,OAAO,gBAAgB,UAAU;AACnC,YAAQ,QAAQ,WAAW,MAAM,WAAW;AAAA,EAC9C;AAEA,SAAO;AAAA,IACL,MAAM;AAAA,IACN,OAAO,QAAQ,oBAAoB,CAAC;AAAA,IACpC,aAAa;AAAA,IACb,OAAO;AAAA,IACP;AAAA,IAEA,OAAO;AAAA,MACL,aAAa,OAAO,gBAAgB;AAAA,MAEpC,gBAAgB;AAAA,QACd,SAAS,OAAO,gBAAgB;AAAA,QAChC,MAAM;AAAA,MACR;AAAA,IACF;AAAA,EACF;AACF;AAEO,SAAS,qBAA6B;AAC3C,QAAM,OAAOA,aAAY,EAAE;AAE3B,SAAO,QAAQ,IAAI,EAAE;AACvB;AAEO,SAAS,kBAAkB,YAAoB;AACpD,QAAM,mBAAmB,cAAc,OAAO,UAAU;AAGxD,QAAM,UAAU,iBAAiB,KAAK,CAAC,EAAE,QAAQ;AAEjD,SAAO,QAAQ,QAAQ,MAAM,GAAG,EAAE,CAAC;AACrC;AAUO,SAAS,sBACd,QACA,SACqB;AACrB,MAAI,OAAO,YAAY;AACrB,WAAOD,QAAO,OAAO,UAAU;AAAA,EACjC;AAEA,QAAM,aAAa,kBAAkB,SAAS,iBAAiB,kBAAkB;AACjF,QAAM,OAAO,WAAW,MAAM,iBAAiB;AAE/C,SAAOA,QAAO;AAAA,IACZ,MAAM;AAAA,IACN;AAAA,IACA,WAAW,KAAK;AAAA,EAClB,CAAC;AACH;;;ACvFO,SAAS,mBAAmB,YAAuC;AACxE,SAAO,GAAG,WAAW,QAAQ,IAAI,WAAW,IAAI;AAClD;AAEO,SAAS,gBAAgB,YAAuC;AACrE,QAAM,CAAC,UAAU,IAAI,IAAI,WAAW,MAAM,GAAG;AAE7C,MAAI,CAAC,MAAM;AACT,UAAM,IAAI,MAAM,wBAAwB,UAAU,EAAE;AAAA,EACtD;AAEA,SAAO;AAAA,IACL;AAAA,IACA,MAAM,SAAS,MAAM,EAAE;AAAA,EACzB;AACF;","names":["server","output","n","u","n","u","output","args","output","randomBytes"]}