@highstate/common 0.9.3 → 0.9.5

package/dist/chunk-USV6SHAU.js

@@ -0,0 +1,530 @@
+// src/shared/network.ts
+import { toPromise } from "@highstate/pulumi";
+import { uniqueBy } from "remeda";
+function l3EndpointToString(l3Endpoint) {
+  switch (l3Endpoint.type) {
+    case "ipv4":
+      return l3Endpoint.address;
+    case "ipv6":
+      return l3Endpoint.address;
+    case "hostname":
+      return l3Endpoint.hostname;
+  }
+}
+function l4EndpointToString(l4Endpoint) {
+  if (l4Endpoint.type === "ipv6") {
+    return `[${l4Endpoint.address}]:${l4Endpoint.port}`;
+  }
+  return `${l3EndpointToString(l4Endpoint)}:${l4Endpoint.port}`;
+}
+function l34EndpointToString(l34Endpoint) {
+  if (l34Endpoint.port) {
+    return l4EndpointToString(l34Endpoint);
+  }
+  return l3EndpointToString(l34Endpoint);
+}
+var L34_ENDPOINT_RE = /^(?:(?<protocol>[a-z]+):\/\/)?(?:(?:\[?(?<ipv6>[0-9A-Fa-f:]+)\]?)|(?<ipv4>(?:\d{1,3}\.){3}\d{1,3})|(?<hostname>[a-zA-Z0-9-*]+(?:\.[a-zA-Z0-9-*]+)*))(?::(?<port>\d{1,5}))?$/;
+function parseL34Endpoint(l34Endpoint) {
+  if (typeof l34Endpoint === "object") {
+    return l34Endpoint;
+  }
+  const match = l34Endpoint.match(L34_ENDPOINT_RE);
+  if (!match) {
+    throw new Error(`Invalid L3/L4 endpoint: "${l34Endpoint}"`);
+  }
+  const { protocol, ipv6, ipv4, hostname, port } = match.groups;
+  if (protocol && protocol !== "tcp" && protocol !== "udp") {
+    throw new Error(`Invalid L4 endpoint protocol: "${protocol}"`);
+  }
+  let visibility = "public";
+  if (ipv4 && IPV4_PRIVATE_REGEX.test(ipv4)) {
+    visibility = "external";
+  } else if (ipv6 && IPV6_PRIVATE_REGEX.test(ipv6)) {
+    visibility = "external";
+  }
+  const fallbackProtocol = port ? "tcp" : void 0;
+  return {
+    type: ipv6 ? "ipv6" : ipv4 ? "ipv4" : "hostname",
+    visibility,
+    address: ipv6 || ipv4,
+    hostname,
+    port: port ? parseInt(port, 10) : void 0,
+    protocol: protocol ? protocol : fallbackProtocol
+  };
+}
+function parseL3Endpoint(l3Endpoint) {
+  if (typeof l3Endpoint === "object") {
+    return l3Endpoint;
+  }
+  const parsed = parseL34Endpoint(l3Endpoint);
+  if (parsed.port) {
+    throw new Error(`Port cannot be specified in L3 endpoint: "${l3Endpoint}"`);
+  }
+  return parsed;
+}
+function parseL4Endpoint(l4Endpoint) {
+  if (typeof l4Endpoint === "object") {
+    return l4Endpoint;
+  }
+  const parsed = parseL34Endpoint(l4Endpoint);
+  if (!parsed.port) {
+    throw new Error(`No port found in L4 endpoint: "${l4Endpoint}"`);
+  }
+  return parsed;
+}
+var IPV4_PRIVATE_REGEX = /^(?:10|127)(?:\.\d{1,3}){3}$|^(?:172\.1[6-9]|172\.2[0-9]|172\.3[0-1])(?:\.\d{1,3}){2}$|^(?:192\.168)(?:\.\d{1,3}){2}$/;
+var IPV6_PRIVATE_REGEX = /^(?:fc|fd)(?:[0-9a-f]{2}){0,2}::(?:[0-9a-f]{1,4}:){7}[0-9a-f]{1,4}$|^::(?:ffff:(?:10|127)(?:\.\d{1,3}){3}|(?:172\.1[6-9]|172\.2[0-9]|172\.3[0-1])(?:\.\d{1,3}){2}|(?:192\.168)(?:\.\d{1,3}){2})$/;
+async function requireInputL3Endpoint(rawEndpoint, inputEndpoint) {
+  if (rawEndpoint) {
+    return parseL3Endpoint(rawEndpoint);
+  }
+  if (inputEndpoint) {
+    return toPromise(inputEndpoint);
+  }
+  throw new Error("No endpoint provided");
+}
+async function requireInputL4Endpoint(rawEndpoint, inputEndpoint) {
+  if (rawEndpoint) {
+    return parseL4Endpoint(rawEndpoint);
+  }
+  if (inputEndpoint) {
+    return toPromise(inputEndpoint);
+  }
+  throw new Error("No endpoint provided");
+}
+function l3ToL4Endpoint(l3Endpoint, port, protocol = "tcp") {
+  return {
+    ...parseL3Endpoint(l3Endpoint),
+    port,
+    protocol
+  };
+}
+function filterEndpoints(endpoints, filter) {
+  if (filter?.length) {
+    return endpoints.filter((endpoint) => filter.includes(endpoint.visibility));
+  }
+  if (endpoints.some((endpoint) => endpoint.visibility === "public")) {
+    return endpoints.filter((endpoint) => endpoint.visibility === "public");
+  }
+  if (endpoints.some((endpoint) => endpoint.visibility === "external")) {
+    return endpoints.filter((endpoint) => endpoint.visibility === "external");
+  }
+  return endpoints;
+}
+function l3EndpointToCidr(l3Endpoint) {
+  switch (l3Endpoint.type) {
+    case "ipv4":
+      return `${l3Endpoint.address}/32`;
+    case "ipv6":
+      return `${l3Endpoint.address}/128`;
+    case "hostname":
+      throw new Error("Cannot convert hostname to CIDR");
+  }
+}
+async function updateEndpoints(currentEndpoints, endpoints, inputEndpoints, mode = "prepend") {
+  const resolvedCurrentEndpoints = await toPromise(currentEndpoints);
+  const resolvedInputEndpoints = await toPromise(inputEndpoints);
+  const newEndpoints = uniqueBy(
+    //
+    [...endpoints.map(parseL34Endpoint), ...resolvedInputEndpoints],
+    (endpoint) => l34EndpointToString(endpoint)
+  );
+  if (mode === "replace") {
+    return newEndpoints;
+  }
+  return uniqueBy(
+    //
+    [...newEndpoints, ...resolvedCurrentEndpoints],
+    (endpoint) => l34EndpointToString(endpoint)
+  );
+}
+
+// src/shared/command.ts
+import { local, remote } from "@pulumi/command";
+import {
+  ComponentResource,
+  interpolate,
+  output
+} from "@highstate/pulumi";
+import "@highstate/library";
+function getServerConnection(ssh2) {
+  return output(ssh2).apply((ssh3) => ({
+    host: l3EndpointToString(ssh3.endpoints[0]),
+    port: ssh3.endpoints[0].port,
+    user: ssh3.user,
+    password: ssh3.password,
+    privateKey: ssh3.keyPair?.privateKey,
+    dialErrorLimit: 3,
+    hostKey: ssh3.hostKey
+  }));
+}
+var Command = class _Command extends ComponentResource {
+  command;
+  stdout;
+  stderr;
+  constructor(name, args, opts) {
+    super("highstate:common:Command", name, args, opts);
+    this.command = output(args).apply((args2) => {
+      if (args2.host === "local") {
+        return new local.Command(
+          name,
+          {
+            create: args2.create,
+            update: args2.update,
+            delete: args2.delete,
+            logging: args2.logging,
+            triggers: args2.triggers
+          },
+          { ...opts, parent: this }
+        );
+      }
+      if (!args2.host.ssh) {
+        throw new Error(`The host "${args2.host.hostname}" has no SSH credentials`);
+      }
+      return new remote.Command(
+        name,
+        {
+          connection: getServerConnection(args2.host.ssh),
+          create: args2.create,
+          update: args2.update,
+          delete: args2.delete,
+          logging: args2.logging,
+          triggers: args2.triggers
+        },
+        { ...opts, parent: this }
+      );
+    });
+    this.stdout = this.command.stdout;
+    this.stderr = this.command.stderr;
+  }
+  static createTextFile(name, options, opts) {
+    return output(options).apply((options2) => {
+      const escapedContent = options2.content.replace(/"/g, '\\"');
+      const command = new _Command(
+        name,
+        {
+          host: options2.host,
+          create: interpolate`mkdir -p $(dirname ${options2.path}) && echo "${escapedContent}" > ${options2.path}`,
+          delete: interpolate`rm -rf ${options2.path}`
+        },
+        opts
+      );
+      return command;
+    });
+  }
+  static receiveTextFile(name, options, opts) {
+    return output(options).apply((options2) => {
+      const command = new _Command(
+        name,
+        {
+          host: options2.host,
+          create: interpolate`while ! test -f ${options2.path}; do sleep 1; done; cat ${options2.path}`,
+          logging: "stderr"
+        },
+        opts
+      );
+      return command;
+    });
+  }
+};
+
+// src/shared/dns.ts
+import {
+  ComponentResource as ComponentResource2,
+  normalize,
+  output as output2,
+  toPromise as toPromise2
+} from "@highstate/pulumi";
+import { capitalize, groupBy, uniqueBy as uniqueBy2 } from "remeda";
+function getTypeByEndpoint(endpoint) {
+  switch (endpoint.type) {
+    case "ipv4":
+      return "A";
+    case "ipv6":
+      return "AAAA";
+    case "hostname":
+      return "CNAME";
+  }
+}
+var DnsRecord = class extends ComponentResource2 {
+  /**
+   * The underlying dns record resource.
+   */
+  dnsRecord;
+  /**
+   * The wait commands to be executed after the DNS record is created/updated.
+   *
+   * Use this field as a dependency for other resources.
+   */
+  waitCommands;
+  constructor(name, args, opts) {
+    super("highstate:common:DnsRecord", name, args, opts);
+    this.dnsRecord = output2(args).apply((args2) => {
+      const l3Endpoint = parseL3Endpoint(args2.value);
+      const type = args2.type ?? getTypeByEndpoint(l3Endpoint);
+      return output2(
+        this.create(
+          name,
+          {
+            ...args2,
+            type,
+            value: l3EndpointToString(l3Endpoint)
+          },
+          { ...opts, parent: this }
+        )
+      );
+    });
+    this.waitCommands = output2(args).apply((args2) => {
+      const waitAt = args2.waitAt ? Array.isArray(args2.waitAt) ? args2.waitAt : [args2.waitAt] : [];
+      return waitAt.map((host) => {
+        const hostname = host === "local" ? "local" : host.hostname;
+        return new Command(
+          `${name}-wait-${hostname}`,
+          {
+            host,
+            create: `while ! getent hosts ${args2.name} >/dev/null; do echo "Waiting for DNS record ${args2.name} to be created"; sleep 5; done`,
+            triggers: [args2.type, args2.ttl, args2.priority, args2.proxied]
+          },
+          { parent: this }
+        );
+      });
+    });
+  }
+  static create(name, args, opts) {
+    return output2(args).apply(async (args2) => {
+      const providerType = args2.provider.type;
+      const implName = `${capitalize(providerType)}DnsRecord`;
+      const implModule = await import(`@highstate/${providerType}`);
+      const implClass = implModule[implName];
+      return new implClass(name, args2, opts);
+    });
+  }
+};
+var DnsRecordSet = class _DnsRecordSet extends ComponentResource2 {
+  /**
+   * The underlying dns record resources.
+   */
+  dnsRecords;
+  /**
+   * The wait commands to be executed after the DNS records are created/updated.
+   */
+  waitCommands;
+  constructor(name, records, opts) {
+    super("highstate:common:DnsRecordSet", name, records, opts);
+    this.dnsRecords = records;
+    this.waitCommands = records.apply(
+      (records2) => records2.flatMap((record) => record.waitCommands)
+    );
+  }
+  static create(name, args, opts) {
+    const records = output2(args).apply((args2) => {
+      const recordName = args2.name ?? name;
+      const values = normalize(args2.value, args2.values);
+      return output2(
+        args2.providers.filter((provider) => recordName.endsWith(provider.domain)).flatMap((provider) => {
+          return values.map((value) => {
+            const l3Endpoint = parseL3Endpoint(value);
+            return DnsRecord.create(
+              `${provider.type}-from-${provider.name}-to-${l3EndpointToString(l3Endpoint)}`,
+              { name: recordName, ...args2, value: l3Endpoint, provider },
+              opts
+            );
+          });
+        })
+      );
+    });
+    return new _DnsRecordSet(name, records, opts);
+  }
+};
+async function updateEndpointsWithFqdn(endpoints, fqdn, fqdnEndpointFilter, patchMode, dnsProviders) {
+  const resolvedEndpoints = await toPromise2(endpoints);
+  if (!fqdn) {
+    return {
+      endpoints: resolvedEndpoints,
+      dnsRecordSet: void 0
+    };
+  }
+  const filteredEndpoints = filterEndpoints(resolvedEndpoints, fqdnEndpointFilter);
+  const dnsRecordSet = DnsRecordSet.create(fqdn, {
+    providers: dnsProviders,
+    values: filteredEndpoints,
+    waitAt: "local"
+  });
+  const portProtocolGroups = groupBy(
+    filteredEndpoints,
+    (endpoint) => endpoint.port ? `${endpoint.port}-${endpoint.protocol}` : ""
+  );
+  const newEndpoints = [];
+  for (const group of Object.values(portProtocolGroups)) {
+    newEndpoints.unshift({
+      type: "hostname",
+      hostname: fqdn,
+      visibility: group[0].visibility,
+      port: group[0].port,
+      protocol: group[0].protocol
+    });
+  }
+  await toPromise2(
+    dnsRecordSet.waitCommands.apply((waitCommands) => waitCommands.map((command) => command.stdout))
+  );
+  if (patchMode === "prepend") {
+    return {
+      endpoints: uniqueBy2(
+        //
+        [...newEndpoints, ...resolvedEndpoints],
+        (endpoint) => l34EndpointToString(endpoint)
+      ),
+      dnsRecordSet
+    };
+  }
+  return {
+    endpoints: newEndpoints,
+    dnsRecordSet
+  };
+}
+
+// src/shared/passwords.ts
+import { randomBytes } from "@noble/hashes/utils";
+import { secureMask } from "micro-key-producer/password.js";
+function generatePassword() {
+  return secureMask.apply(randomBytes(32)).password;
+}
+
+// src/shared/ssh.ts
+import {
+  getOrCreateSecret,
+  getUnitInstanceName,
+  output as output3,
+  secret
+} from "@highstate/pulumi";
+import getKeys, { PrivateExport } from "micro-key-producer/ssh.js";
+import { randomBytes as randomBytes2 } from "micro-key-producer/utils.js";
+import { local as local2, remote as remote2 } from "@pulumi/command";
+function createSshTerminal(credentials) {
+  return output3(credentials).apply((credentials2) => {
+    if (!credentials2) {
+      return void 0;
+    }
+    const command = ["ssh", "-tt", "-o", "UserKnownHostsFile=/known_hosts"];
+    const endpoint = credentials2.endpoints[0];
+    command.push("-p", endpoint.port.toString());
+    if (credentials2.keyPair) {
+      command.push("-i", "/private_key");
+    }
+    command.push(`${credentials2.user}@${l3EndpointToString(endpoint)}`);
+    if (credentials2.password) {
+      command.unshift("sshpass", "-f", "/password");
+    }
+    return {
+      name: "ssh",
+      title: `SSH: ${getUnitInstanceName()}`,
+      description: "Connect to the server via SSH",
+      image: "ghcr.io/exeteres/highstate/terminal-ssh",
+      command,
+      files: {
+        "/password": credentials2.password,
+        "/private_key": {
+          content: credentials2.keyPair?.privateKey,
+          mode: 384
+        },
+        "/known_hosts": {
+          content: `${l4EndpointToString(endpoint)} ${credentials2.hostKey}`,
+          mode: 420
+        }
+      }
+    };
+  });
+}
+function generatePrivateKey() {
+  const seed = randomBytes2(32);
+  return getKeys(seed).privateKey;
+}
+function privateKeyToKeyPair(privateKeyString) {
+  return output3(privateKeyString).apply((privateKeyString2) => {
+    const privateKeyStruct = PrivateExport.decode(privateKeyString2);
+    const privKey = privateKeyStruct.keys[0].privKey.privKey;
+    const { fingerprint, publicKey, privateKey } = getKeys(privKey.slice(0, 32));
+    return output3({
+      type: "ed25519",
+      fingerprint,
+      publicKey,
+      privateKey: secret(privateKey)
+    });
+  });
+}
+function getOrCreateSshKeyPair(inputs, secrets) {
+  if (inputs.sshKeyPair) {
+    return output3(inputs.sshKeyPair);
+  }
+  const privateKey = getOrCreateSecret(secrets, "sshPrivateKey", generatePrivateKey);
+  return privateKey.apply(privateKeyToKeyPair);
+}
+function createServerEntity(fallbackHostname, endpoint, sshPort = 22, sshUser = "root", sshPassword, sshPrivateKey) {
+  const connection = output3({
+    host: l3EndpointToString(endpoint),
+    port: sshPort,
+    user: sshUser,
+    password: sshPassword,
+    privateKey: sshPrivateKey,
+    dialErrorLimit: 3
+  });
+  const command = new local2.Command("check-ssh", {
+    create: `nc -zv ${l3EndpointToString(endpoint)} ${sshPort} && echo "up" || echo "down"`
+  });
+  return command.stdout.apply((result) => {
+    if (result === "down") {
+      return output3({
+        hostname: fallbackHostname,
+        endpoints: [endpoint]
+      });
+    }
+    const hostnameResult = new remote2.Command("hostname", {
+      connection,
+      create: "hostname",
+      triggers: [Date.now()]
+    });
+    const hostKeyResult = new remote2.Command("host-key", {
+      connection,
+      create: "cat /etc/ssh/ssh_host_ed25519_key.pub",
+      triggers: [Date.now()]
+    });
+    return output3({
+      endpoints: [endpoint],
+      hostname: hostnameResult.stdout.apply((x) => x.trim()),
+      ssh: {
+        endpoints: [l3ToL4Endpoint(endpoint, sshPort)],
+        user: sshUser,
+        hostKey: hostKeyResult.stdout.apply((x) => x.trim()),
+        password: sshPassword,
+        keyPair: sshPrivateKey ? privateKeyToKeyPair(sshPrivateKey) : void 0
+      }
+    });
+  });
+}
+
+export {
+  l3EndpointToString,
+  l4EndpointToString,
+  l34EndpointToString,
+  parseL34Endpoint,
+  parseL3Endpoint,
+  parseL4Endpoint,
+  requireInputL3Endpoint,
+  requireInputL4Endpoint,
+  l3ToL4Endpoint,
+  filterEndpoints,
+  l3EndpointToCidr,
+  updateEndpoints,
+  getServerConnection,
+  Command,
+  DnsRecord,
+  DnsRecordSet,
+  updateEndpointsWithFqdn,
+  generatePassword,
+  createSshTerminal,
+  generatePrivateKey,
+  privateKeyToKeyPair,
+  getOrCreateSshKeyPair,
+  createServerEntity
+};
+//# sourceMappingURL=chunk-USV6SHAU.js.map

package/dist/chunk-USV6SHAU.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/shared/network.ts","../src/shared/command.ts","../src/shared/dns.ts","../src/shared/passwords.ts","../src/shared/ssh.ts"],"sourcesContent":["import type { ArrayPatchMode, network } from \"@highstate/library\"\nimport { toPromise, type Input } from \"@highstate/pulumi\"\nimport { uniqueBy } from \"remeda\"\n\n/**\n * The L3 or L4 endpoint for some service.\n *\n * The format is: `[protocol://]endpoint[:port]`\n */\nexport type InputL34Endpoint = network.L34Endpoint | string\n\n/**\n * The L3 endpoint for some service.\n */\nexport type InputL3Endpoint = network.L3Endpoint | string\n\n/**\n * The L4 endpoint for some service.\n */\nexport type InputL4Endpoint = network.L4Endpoint | string\n\n/**\n * Stringifies a L3 endpoint object into a string.\n *\n * @param l3Endpoint The L3 endpoint object to stringify.\n * @returns The string representation of the L3 endpoint.\n */\nexport function l3EndpointToString(l3Endpoint: network.L3Endpoint): string {\n  switch (l3Endpoint.type) {\n    case \"ipv4\":\n      return l3Endpoint.address\n    case \"ipv6\":\n      return l3Endpoint.address\n    case \"hostname\":\n      return l3Endpoint.hostname\n  }\n}\n\n/**\n * Stringifies a L4 endpoint object into a string.\n *\n * @param l4Endpoint The L4 endpoint object to stringify.\n *\n * @returns The string representation of the L4 endpoint.\n */\nexport function l4EndpointToString(l4Endpoint: network.L4Endpoint): string {\n  if (l4Endpoint.type === \"ipv6\") {\n    return `[${l4Endpoint.address}]:${l4Endpoint.port}`\n  }\n\n  return `${l3EndpointToString(l4Endpoint)}:${l4Endpoint.port}`\n}\n\n/**\n * Stringifies a L3 or L4 endpoint object into a string.\n *\n * @param l34Endpoint The L3 or L4 endpoint object to stringify.\n * @returns The string representation of the L3 or L4 endpoint.\n */\nexport function l34EndpointToString(l34Endpoint: network.L34Endpoint): string {\n  if (l34Endpoint.port) {\n    return l4EndpointToString(l34Endpoint)\n  }\n\n  return l3EndpointToString(l34Endpoint)\n}\n\nconst L34_ENDPOINT_RE =\n  /^(?:(?<protocol>[a-z]+):\\/\\/)?(?:(?:\\[?(?<ipv6>[0-9A-Fa-f:]+)\\]?)|(?<ipv4>(?:\\d{1,3}\\.){3}\\d{1,3})|(?<hostname>[a-zA-Z0-9-*]+(?:\\.[a-zA-Z0-9-*]+)*))(?::(?<port>\\d{1,5}))?$/\n\n/**\n * Parses a L3 or L4 endpoint from a string.\n *\n * The format is `[protocol://]endpoint[:port]`.\n *\n * @param l34Endpoint The L3 or L4 endpoint string to parse.\n * @returns The parsed L3 or L4 endpoint object.\n */\nexport function parseL34Endpoint(l34Endpoint: InputL34Endpoint): network.L34Endpoint {\n  if (typeof l34Endpoint === \"object\") {\n    return l34Endpoint\n  }\n\n  const match = l34Endpoint.match(L34_ENDPOINT_RE)\n  if (!match) {\n    throw new Error(`Invalid L3/L4 endpoint: \"${l34Endpoint}\"`)\n  }\n\n  const { protocol, ipv6, ipv4, hostname, port } = match.groups!\n\n  if (protocol && protocol !== \"tcp\" && protocol !== \"udp\") {\n    throw new Error(`Invalid L4 endpoint protocol: \"${protocol}\"`)\n  }\n\n  let visibility: network.EndpointVisibility = \"public\"\n\n  if (ipv4 && IPV4_PRIVATE_REGEX.test(ipv4)) {\n    visibility = \"external\"\n  } else if (ipv6 && IPV6_PRIVATE_REGEX.test(ipv6)) {\n    visibility = \"external\"\n  }\n\n  const fallbackProtocol = port ? \"tcp\" : undefined\n\n  return {\n    type: ipv6 ? \"ipv6\" : ipv4 ? \"ipv4\" : \"hostname\",\n    visibility,\n    address: ipv6 || ipv4,\n    hostname: hostname,\n    port: port ? parseInt(port, 10) : undefined,\n    protocol: protocol ? (protocol as network.L4Protocol) : fallbackProtocol,\n  } as network.L34Endpoint\n}\n\n/**\n * Parses a L3 endpoint from a string.\n *\n * The same as `parseL34Endpoint`, but only for L3 endpoints and will throw an error if the endpoint contains a port.\n *\n * @param l3Endpoint The L3 endpoint string to parse.\n * @returns The parsed L3 endpoint object.\n */\nexport function parseL3Endpoint(l3Endpoint: InputL3Endpoint): network.L3Endpoint {\n  if (typeof l3Endpoint === \"object\") {\n    return l3Endpoint\n  }\n\n  const parsed = parseL34Endpoint(l3Endpoint)\n\n  if (parsed.port) {\n    throw new Error(`Port cannot be specified in L3 endpoint: \"${l3Endpoint}\"`)\n  }\n\n  return parsed\n}\n\n/**\n * Parses a L4 endpoint from a string.\n *\n * The same as `parseL34Endpoint`, but only for L4 endpoints and will throw an error if the endpoint does not contain a port.\n */\nexport function parseL4Endpoint(l4Endpoint: InputL4Endpoint): network.L4Endpoint {\n  if (typeof l4Endpoint === \"object\") {\n    return l4Endpoint\n  }\n\n  const parsed = parseL34Endpoint(l4Endpoint)\n\n  if (!parsed.port) {\n    throw new Error(`No port found in L4 endpoint: \"${l4Endpoint}\"`)\n  }\n\n  return parsed\n}\n\nconst IPV4_PRIVATE_REGEX =\n  /^(?:10|127)(?:\\.\\d{1,3}){3}$|^(?:172\\.1[6-9]|172\\.2[0-9]|172\\.3[0-1])(?:\\.\\d{1,3}){2}$|^(?:192\\.168)(?:\\.\\d{1,3}){2}$/\n\nconst IPV6_PRIVATE_REGEX =\n  /^(?:fc|fd)(?:[0-9a-f]{2}){0,2}::(?:[0-9a-f]{1,4}:){7}[0-9a-f]{1,4}$|^::(?:ffff:(?:10|127)(?:\\.\\d{1,3}){3}|(?:172\\.1[6-9]|172\\.2[0-9]|172\\.3[0-1])(?:\\.\\d{1,3}){2}|(?:192\\.168)(?:\\.\\d{1,3}){2})$/\n\n/**\n * Helper function to get the input L3 endpoint from the raw endpoint or input endpoint.\n *\n * If neither is provided, an error is thrown.\n *\n * @param rawEndpoint The raw endpoint string to parse.\n * @param inputEndpoint The input endpoint object to use if the raw endpoint is not provided.\n * @returns The parsed L3 endpoint object.\n */\nexport async function requireInputL3Endpoint(\n  rawEndpoint: string | undefined,\n  inputEndpoint: Input<network.L3Endpoint> | undefined,\n): Promise<network.L3Endpoint> {\n  if (rawEndpoint) {\n    return parseL3Endpoint(rawEndpoint)\n  }\n\n  if (inputEndpoint) {\n    return toPromise(inputEndpoint)\n  }\n\n  throw new Error(\"No endpoint provided\")\n}\n\n/**\n * Helper function to get the input L4 endpoint from the raw endpoint or input endpoint.\n *\n * If neither is provided, an error is thrown.\n *\n * @param rawEndpoint The raw endpoint string to parse.\n * @param inputEndpoint The input endpoint object to use if the raw endpoint is not provided.\n * @returns The parsed L4 endpoint object.\n */\nexport async function requireInputL4Endpoint(\n  rawEndpoint: string | undefined,\n  inputEndpoint: Input<network.L4Endpoint> | undefined,\n): Promise<network.L4Endpoint> {\n  if (rawEndpoint) {\n    return parseL4Endpoint(rawEndpoint)\n  }\n\n  if (inputEndpoint) {\n    return toPromise(inputEndpoint)\n  }\n\n  throw new Error(\"No endpoint provided\")\n}\n\n/**\n * Convers L3 endpoint to L4 endpoint by adding a port and protocol.\n *\n * @param l3Endpoint The L3 endpoint to convert.\n * @param port The port to add to the L3 endpoint.\n * @param protocol The protocol to add to the L3 endpoint. Defaults to \"tcp\".\n * @returns The L4 endpoint with the port and protocol added.\n */\nexport function l3ToL4Endpoint(\n  l3Endpoint: InputL3Endpoint,\n  port: number,\n  protocol: network.L4Protocol = \"tcp\",\n): network.L4Endpoint {\n  return {\n    ...parseL3Endpoint(l3Endpoint),\n    port,\n    protocol,\n  }\n}\n\n/**\n * Filters the endpoints based on the given filter.\n *\n * @param endpoints The list of endpoints to filter.\n * @param filter The filter to apply. If not provided, the endpoints will be filtered by the most accessible type: `public` > `external` > `internal`.\n *\n * @returns The filtered list of endpoints.\n */\nexport function filterEndpoints<TEndpoint extends network.L34Endpoint>(\n  endpoints: TEndpoint[],\n  filter?: network.EndpointFilter,\n): TEndpoint[] {\n  if (filter?.length) {\n    return endpoints.filter(endpoint => filter.includes(endpoint.visibility))\n  }\n\n  if (endpoints.some(endpoint => endpoint.visibility === \"public\")) {\n    return endpoints.filter(endpoint => endpoint.visibility === \"public\")\n  }\n\n  if (endpoints.some(endpoint => endpoint.visibility === \"external\")) {\n    return endpoints.filter(endpoint => endpoint.visibility === \"external\")\n  }\n\n  // in this case all endpoints are already internal\n  return endpoints\n}\n\n/**\n * Converts a L3 endpoint to CIDR notation.\n *\n * If the endpoint is a hostname, an error is thrown.\n *\n * @param l3Endpoint The L3 endpoint to convert.\n * @returns The CIDR notation of the L3 endpoint.\n */\nexport function l3EndpointToCidr(l3Endpoint: network.L3Endpoint): string {\n  switch (l3Endpoint.type) {\n    case \"ipv4\":\n      return `${l3Endpoint.address}/32`\n    case \"ipv6\":\n      return `${l3Endpoint.address}/128`\n    case \"hostname\":\n      throw new Error(\"Cannot convert hostname to CIDR\")\n  }\n}\n\n/**\n * Updates the endpoints based on the given mode.\n *\n * @param currentEndpoints The current endpoints to update.\n * @param endpoints The new endpoints to add in string format.\n * @param inputEndpoints The input endpoints to add in object format.\n * @param mode The mode to use when updating the endpoints. Can be \"replace\" or \"prepend\". Defaults to \"prepend\".\n *\n * @returns The updated list of endpoints.\n */\nexport async function updateEndpoints<TEdnpoints extends network.L34Endpoint>(\n  currentEndpoints: Input<TEdnpoints[]>,\n  endpoints: string[],\n  inputEndpoints: Input<TEdnpoints[]>,\n  mode: ArrayPatchMode = \"prepend\",\n): Promise<TEdnpoints[]> {\n  const resolvedCurrentEndpoints = await toPromise(currentEndpoints)\n  const resolvedInputEndpoints = await toPromise(inputEndpoints)\n\n  const newEndpoints = uniqueBy(\n    //\n    [...endpoints.map(parseL34Endpoint), ...resolvedInputEndpoints],\n    endpoint => l34EndpointToString(endpoint),\n  )\n\n  if (mode === \"replace\") {\n    return newEndpoints as TEdnpoints[]\n  }\n\n  return uniqueBy(\n    //\n    [...newEndpoints, ...resolvedCurrentEndpoints],\n    endpoint => l34EndpointToString(endpoint),\n  ) as TEdnpoints[]\n}\n","import { local, remote, type types } from \"@pulumi/command\"\nimport {\n  ComponentResource,\n  interpolate,\n  output,\n  type ComponentResourceOptions,\n  type Input,\n  type InputOrArray,\n  type Output,\n} from \"@highstate/pulumi\"\nimport { common, ssh } from \"@highstate/library\"\nimport { l3EndpointToString } from \"./network\"\n\nexport function getServerConnection(\n  ssh: Input<ssh.Credentials>,\n): Output<types.input.remote.ConnectionArgs> {\n  return output(ssh).apply(ssh => ({\n    host: l3EndpointToString(ssh.endpoints[0]),\n    port: ssh.endpoints[0].port,\n    user: ssh.user,\n    password: ssh.password,\n    privateKey: ssh.keyPair?.privateKey,\n    dialErrorLimit: 3,\n    hostKey: ssh.hostKey,\n  }))\n}\n\nexport type CommandHost = \"local\" | common.Server\n\nexport type CommandArgs = {\n  host: Input<CommandHost>\n  create: Input<string>\n  update?: Input<string>\n  delete?: Input<string>\n  logging?: Input<remote.Logging>\n  triggers?: InputOrArray<unknown>\n}\n\nexport type TextFileArgs = {\n  host: CommandHost\n  path: Input<string>\n  content: Input<string>\n}\n\nexport class Command extends ComponentResource {\n  public readonly command: Output<local.Command | remote.Command>\n\n  public readonly stdout: Output<string>\n  public readonly stderr: Output<string>\n\n  constructor(name: string, args: CommandArgs, opts?: ComponentResourceOptions) {\n    super(\"highstate:common:Command\", name, args, opts)\n\n    this.command = output(args).apply(args => {\n      if (args.host === \"local\") {\n        return new local.Command(\n          name,\n          {\n            create: args.create,\n            update: args.update,\n            delete: args.delete,\n            logging: args.logging,\n            triggers: args.triggers,\n          },\n          { ...opts, parent: this },\n        )\n      }\n\n      if (!args.host.ssh) {\n        throw new Error(`The host \"${args.host.hostname}\" has no SSH credentials`)\n      }\n\n      return new remote.Command(\n        name,\n        {\n          connection: getServerConnection(args.host.ssh),\n          create: args.create,\n          update: args.update,\n          delete: args.delete,\n          logging: args.logging,\n          triggers: args.triggers,\n        },\n        { ...opts, parent: this },\n      )\n    })\n\n    this.stdout = this.command.stdout\n    this.stderr = this.command.stderr\n  }\n\n  static createTextFile(\n    name: string,\n    options: TextFileArgs,\n    opts?: ComponentResourceOptions,\n  ): Output<Command> {\n    return output(options).apply(options => {\n      const escapedContent = options.content.replace(/\"/g, '\\\\\"')\n\n      const command = new Command(\n        name,\n        {\n          host: options.host,\n          create: interpolate`mkdir -p $(dirname ${options.path}) && echo \"${escapedContent}\" > ${options.path}`,\n          delete: interpolate`rm -rf ${options.path}`,\n        },\n        opts,\n      )\n\n      return command\n    })\n  }\n\n  static receiveTextFile(\n    name: string,\n    options: Omit<TextFileArgs, \"content\">,\n    opts?: ComponentResourceOptions,\n  ): Output<Command> {\n    return output(options).apply(options => {\n      const command = new Command(\n        name,\n        {\n          host: options.host,\n          create: interpolate`while ! test -f ${options.path}; do sleep 1; done; cat ${options.path}`,\n          logging: \"stderr\",\n        },\n        opts,\n      )\n\n      return command\n    })\n  }\n}\n","import type { ArrayPatchMode, dns, network } from \"@highstate/library\"\nimport {\n  ComponentResource,\n  normalize,\n  output,\n  Output,\n  Resource,\n  toPromise,\n  type Input,\n  type InputArray,\n  type InputOrArray,\n  type ResourceOptions,\n  type Unwrap,\n} from \"@highstate/pulumi\"\nimport { capitalize, groupBy, uniqueBy } from \"remeda\"\nimport { Command, type CommandHost } from \"./command\"\nimport {\n  filterEndpoints,\n  l34EndpointToString,\n  l3EndpointToString,\n  parseL3Endpoint,\n  type InputL3Endpoint,\n} from \"./network\"\n\nexport type DnsRecordArgs = {\n  /**\n   * The DNS provider to use.\n   */\n  provider: Input<dns.Provider>\n\n  /**\n   * The name of the DNS record.\n   * If not provided, the name of the resource will be used.\n   */\n  name?: Input<string>\n\n  /**\n   * The type of the DNS record.\n   *\n   * If not provided, will be automatically detected based on the value.\n   */\n  type?: Input<string>\n\n  /**\n   * The value of the DNS record.\n   */\n  value: Input<InputL3Endpoint>\n\n  /**\n   * Whether the DNS record is proxied (e.g. to provide DDoS protection).\n   *\n   * Available only for public IPs and some DNS providers like Cloudflare.\n   * If not supported, the DNS provider will ignore this value.\n   */\n  proxied?: Input<boolean>\n\n  /**\n   * The TTL of the DNS record.\n   *\n   * If not provided, the DNS provider will use its default value.\n   */\n  ttl?: Input<number>\n\n  /**\n   * The priority of the DNS record.\n   *\n   * Only used for some DNS record types (e.g. MX).\n   */\n  priority?: Input<number>\n\n  /**\n   * Wait for the DNS record to be created/updated at the specified environment(s) before continuing.\n   */\n  waitAt?: InputOrArray<CommandHost>\n}\n\nexport type ResolvedDnsRecordArgs = Unwrap<Omit<DnsRecordArgs, \"value\" | \"type\">> & {\n  /**\n   * The value of the DNS record.\n   */\n  value: string\n\n  /**\n   * The type of the DNS record.\n   */\n  type: string\n}\n\nexport type DnsRecordSetArgs = Omit<DnsRecordArgs, \"provider\" | \"value\"> & {\n  /**\n   * The DNS providers to use to create the DNS records.\n   *\n   * If multiple providers matched the specified domain, multiple DNS records will be created.\n   */\n  providers: Input<dns.Provider[]>\n\n  /**\n   * The value of the DNS record.\n   */\n  value?: Input<InputL3Endpoint>\n\n  /**\n   * The values of the DNS records.\n   */\n  values?: InputArray<InputL3Endpoint>\n}\n\nfunction getTypeByEndpoint(endpoint: network.L3Endpoint): string {\n  switch (endpoint.type) {\n    case \"ipv4\":\n      return \"A\"\n    case \"ipv6\":\n      return \"AAAA\"\n    case \"hostname\":\n      return \"CNAME\"\n  }\n}\n\nexport abstract class DnsRecord extends ComponentResource {\n  /**\n   * The underlying dns record resource.\n   */\n  public readonly dnsRecord: Output<Resource>\n\n  /**\n   * The wait commands to be executed after the DNS record is created/updated.\n   *\n   * Use this field as a dependency for other resources.\n   */\n  public readonly waitCommands: Output<Command[]>\n\n  protected constructor(name: string, args: DnsRecordArgs, opts?: ResourceOptions) {\n    super(\"highstate:common:DnsRecord\", name, args, opts)\n\n    this.dnsRecord = output(args).apply(args => {\n      const l3Endpoint = parseL3Endpoint(args.value)\n      const type = args.type ?? getTypeByEndpoint(l3Endpoint)\n\n      return output(\n        this.create(\n          name,\n          {\n            ...args,\n            type,\n            value: l3EndpointToString(l3Endpoint),\n          },\n          { ...opts, parent: this },\n        ),\n      )\n    })\n\n    this.waitCommands = output(args).apply(args => {\n      const waitAt = args.waitAt ? (Array.isArray(args.waitAt) ? args.waitAt : [args.waitAt]) : []\n\n      return waitAt.map(host => {\n        const hostname = host === \"local\" ? \"local\" : host.hostname\n\n        return new Command(\n          `${name}-wait-${hostname}`,\n          {\n            host,\n            create: `while ! getent hosts ${args.name} >/dev/null; do echo \"Waiting for DNS record ${args.name} to be created\"; sleep 5; done`,\n            triggers: [args.type, args.ttl, args.priority, args.proxied],\n          },\n          { parent: this },\n        )\n      })\n    })\n  }\n\n  protected abstract create(\n    name: string,\n    args: ResolvedDnsRecordArgs,\n    opts?: ResourceOptions,\n  ): Input<Resource>\n\n  static create(name: string, args: DnsRecordArgs, opts?: ResourceOptions): Output<DnsRecord> {\n    return output(args).apply(async args => {\n      const providerType = args.provider.type\n      const implName = `${capitalize(providerType)}DnsRecord`\n      const implModule = (await import(`@highstate/${providerType}`)) as Record<string, unknown>\n\n      const implClass = implModule[implName] as new (\n        name: string,\n        args: Unwrap<DnsRecordArgs>,\n        opts?: ResourceOptions,\n      ) => DnsRecord\n\n      return new implClass(name, args, opts)\n    })\n  }\n}\n\nexport class DnsRecordSet extends ComponentResource {\n  /**\n   * The underlying dns record resources.\n   */\n  public readonly dnsRecords: Output<DnsRecord[]>\n\n  /**\n   * The wait commands to be executed after the DNS records are created/updated.\n   */\n  public readonly waitCommands: Output<Command[]>\n\n  private constructor(name: string, records: Output<DnsRecord[]>, opts?: ResourceOptions) {\n    super(\"highstate:common:DnsRecordSet\", name, records, opts)\n\n    this.dnsRecords = records\n\n    this.waitCommands = records.apply(records =>\n      records.flatMap(record => record.waitCommands),\n    ) as unknown as Output<Command[]>\n  }\n\n  static create(name: string, args: DnsRecordSetArgs, opts?: ResourceOptions): DnsRecordSet {\n    const records = output(args).apply(args => {\n      const recordName = args.name ?? name\n      const values = normalize(args.value, args.values)\n\n      return output(\n        args.providers\n          .filter(provider => recordName.endsWith(provider.domain))\n          .flatMap(provider => {\n            return values.map(value => {\n              const l3Endpoint = parseL3Endpoint(value)\n\n              return DnsRecord.create(\n                `${provider.type}-from-${provider.name}-to-${l3EndpointToString(l3Endpoint)}`,\n                { name: recordName, ...args, value: l3Endpoint, provider },\n                opts,\n              )\n            })\n          }),\n      )\n    })\n\n    return new DnsRecordSet(name, records, opts)\n  }\n}\n\n/**\n * Registers the DNS record set for the given endpoints and prepends the corresponding hostname endpoint to the list.\n *\n * Waits for the DNS record set to be created/updated before continuing.\n *\n * Ignores the \"hostname\" endpoints in the list.\n *\n * @param endpoints The list of endpoints to register. Will be modified in place.\n * @param fqdn The FQDN to register the DNS record set for. If not provided, no DNS record set will be created and array will not be modified.\n * @param fqdnEndpointFilter The filter to apply to the endpoints before passing them to the DNS record set. Does not apply to the resulted endpoint list.\n * @param dnsProviders The DNS providers to use to create the DNS records.\n */\nexport async function updateEndpointsWithFqdn<TEndpoint extends network.L34Endpoint>(\n  endpoints: Input<TEndpoint[]>,\n  fqdn: string | undefined,\n  fqdnEndpointFilter: network.EndpointFilter,\n  patchMode: ArrayPatchMode,\n  dnsProviders: Input<dns.Provider[]>,\n): Promise<{ endpoints: TEndpoint[]; dnsRecordSet: DnsRecordSet | undefined }> {\n  const resolvedEndpoints = await toPromise(endpoints)\n\n  if (!fqdn) {\n    return {\n      endpoints: resolvedEndpoints as TEndpoint[],\n      dnsRecordSet: undefined,\n    }\n  }\n\n  const filteredEndpoints = filterEndpoints(resolvedEndpoints, fqdnEndpointFilter)\n\n  const dnsRecordSet = DnsRecordSet.create(fqdn, {\n    providers: dnsProviders,\n    values: filteredEndpoints,\n    waitAt: \"local\",\n  })\n\n  const portProtocolGroups = groupBy(filteredEndpoints, endpoint =>\n    endpoint.port ? `${endpoint.port}-${endpoint.protocol}` : \"\",\n  )\n\n  const newEndpoints: TEndpoint[] = []\n\n  for (const group of Object.values(portProtocolGroups)) {\n    newEndpoints.unshift({\n      type: \"hostname\",\n      hostname: fqdn,\n      visibility: group[0].visibility,\n      port: group[0].port,\n      protocol: group[0].protocol,\n    } as TEndpoint)\n  }\n\n  await toPromise(\n    dnsRecordSet.waitCommands.apply(waitCommands => waitCommands.map(command => command.stdout)),\n  )\n\n  if (patchMode === \"prepend\") {\n    return {\n      endpoints: uniqueBy(\n        //\n        [...newEndpoints, ...(resolvedEndpoints as TEndpoint[])],\n        endpoint => l34EndpointToString(endpoint),\n      ),\n      dnsRecordSet,\n    }\n  }\n\n  return {\n    endpoints: newEndpoints,\n    dnsRecordSet,\n  }\n}\n","import { randomBytes } from \"@noble/hashes/utils\"\nimport { secureMask } from \"micro-key-producer/password.js\"\n\nexport function generatePassword() {\n  return secureMask.apply(randomBytes(32)).password\n}\n","import type { common, network, ssh } from \"@highstate/library\"\nimport {\n  getOrCreateSecret,\n  getUnitInstanceName,\n  output,\n  Output,\n  secret,\n  type Input,\n  type InstanceTerminal,\n} from \"@highstate/pulumi\"\nimport getKeys, { PrivateExport } from \"micro-key-producer/ssh.js\"\nimport { randomBytes } from \"micro-key-producer/utils.js\"\nimport { local, remote } from \"@pulumi/command\"\nimport { l3EndpointToString, l3ToL4Endpoint, l4EndpointToString } from \"./network\"\n\nexport function createSshTerminal(\n  credentials: Input<ssh.Credentials | undefined>,\n): Output<InstanceTerminal | undefined> {\n  return output(credentials).apply(credentials => {\n    if (!credentials) {\n      return undefined\n    }\n\n    const command = [\"ssh\", \"-tt\", \"-o\", \"UserKnownHostsFile=/known_hosts\"]\n\n    // TODO: select best endpoint based on the environment\n    const endpoint = credentials.endpoints[0]\n\n    command.push(\"-p\", endpoint.port.toString())\n\n    if (credentials.keyPair) {\n      command.push(\"-i\", \"/private_key\")\n    }\n\n    command.push(`${credentials.user}@${l3EndpointToString(endpoint)}`)\n\n    if (credentials.password) {\n      command.unshift(\"sshpass\", \"-f\", \"/password\")\n    }\n\n    return {\n      name: \"ssh\",\n      title: `SSH: ${getUnitInstanceName()}`,\n      description: \"Connect to the server via SSH\",\n      image: \"ghcr.io/exeteres/highstate/terminal-ssh\",\n      command,\n\n      files: {\n        \"/password\": credentials.password,\n\n        \"/private_key\": {\n          content: credentials.keyPair?.privateKey,\n          mode: 0o600,\n        },\n\n        \"/known_hosts\": {\n          content: `${l4EndpointToString(endpoint)} ${credentials.hostKey}`,\n          mode: 0o644,\n        },\n      },\n    }\n  })\n}\n\nexport function generatePrivateKey(): string {\n  const seed = randomBytes(32)\n\n  return getKeys(seed).privateKey\n}\n\nexport function privateKeyToKeyPair(privateKeyString: Input<string>): Output<ssh.KeyPair> {\n  return output(privateKeyString).apply(privateKeyString => {\n    const privateKeyStruct = PrivateExport.decode(privateKeyString)\n\n    // eslint-disable-next-line @typescript-eslint/no-unsafe-member-access\n    const privKey = privateKeyStruct.keys[0].privKey.privKey as Uint8Array\n\n    const { fingerprint, publicKey, privateKey } = getKeys(privKey.slice(0, 32))\n\n    return output({\n      type: \"ed25519\" as const,\n      fingerprint,\n      publicKey,\n      privateKey: secret(privateKey),\n    })\n  })\n}\n\nexport type SshKeyPairInputs = {\n  sshKeyPair?: Input<ssh.KeyPair>\n}\n\nexport type SshKeyPairSecrets = {\n  sshPrivateKey?: Input<string>\n}\n\nexport function getOrCreateSshKeyPair(\n  inputs: SshKeyPairInputs,\n  secrets: Output<SshKeyPairSecrets>,\n): Output<ssh.KeyPair> {\n  if (inputs.sshKeyPair) {\n    return output(inputs.sshKeyPair)\n  }\n\n  const privateKey = getOrCreateSecret(secrets, \"sshPrivateKey\", generatePrivateKey)\n\n  return privateKey.apply(privateKeyToKeyPair)\n}\n\nexport function createServerEntity(\n  fallbackHostname: string,\n  endpoint: network.L3Endpoint,\n  sshPort = 22,\n  sshUser = \"root\",\n  sshPassword?: Input<string | undefined>,\n  sshPrivateKey?: Input<string>,\n): Output<common.Server> {\n  const connection = output({\n    host: l3EndpointToString(endpoint),\n    port: sshPort,\n    user: sshUser,\n    password: sshPassword,\n    privateKey: sshPrivateKey,\n    dialErrorLimit: 3,\n  })\n\n  const command = new local.Command(\"check-ssh\", {\n    create: `nc -zv ${l3EndpointToString(endpoint)} ${sshPort} && echo \"up\" || echo \"down\"`,\n  })\n\n  return command.stdout.apply(result => {\n    if (result === \"down\") {\n      return output({\n        hostname: fallbackHostname,\n        endpoints: [endpoint],\n      })\n    }\n\n    const hostnameResult = new remote.Command(\"hostname\", {\n      connection,\n      create: \"hostname\",\n      triggers: [Date.now()],\n    })\n\n    const hostKeyResult = new remote.Command(\"host-key\", {\n      connection,\n      create: \"cat /etc/ssh/ssh_host_ed25519_key.pub\",\n      triggers: [Date.now()],\n    })\n\n    return output({\n      endpoints: [endpoint],\n      hostname: hostnameResult.stdout.apply(x => x.trim()),\n      ssh: {\n        endpoints: [l3ToL4Endpoint(endpoint, sshPort)],\n        user: sshUser,\n        hostKey: hostKeyResult.stdout.apply(x => x.trim()),\n        password: sshPassword,\n        keyPair: sshPrivateKey ? privateKeyToKeyPair(sshPrivateKey) : undefined,\n      },\n    })\n  })\n}\n"],"mappings":";AACA,SAAS,iBAA6B;AACtC,SAAS,gBAAgB;AAyBlB,SAAS,mBAAmB,YAAwC;AACzE,UAAQ,WAAW,MAAM;AAAA,IACvB,KAAK;AACH,aAAO,WAAW;AAAA,IACpB,KAAK;AACH,aAAO,WAAW;AAAA,IACpB,KAAK;AACH,aAAO,WAAW;AAAA,EACtB;AACF;AASO,SAAS,mBAAmB,YAAwC;AACzE,MAAI,WAAW,SAAS,QAAQ;AAC9B,WAAO,IAAI,WAAW,OAAO,KAAK,WAAW,IAAI;AAAA,EACnD;AAEA,SAAO,GAAG,mBAAmB,UAAU,CAAC,IAAI,WAAW,IAAI;AAC7D;AAQO,SAAS,oBAAoB,aAA0C;AAC5E,MAAI,YAAY,MAAM;AACpB,WAAO,mBAAmB,WAAW;AAAA,EACvC;AAEA,SAAO,mBAAmB,WAAW;AACvC;AAEA,IAAM,kBACJ;AAUK,SAAS,iBAAiB,aAAoD;AACnF,MAAI,OAAO,gBAAgB,UAAU;AACnC,WAAO;AAAA,EACT;AAEA,QAAM,QAAQ,YAAY,MAAM,eAAe;AAC/C,MAAI,CAAC,OAAO;AACV,UAAM,IAAI,MAAM,4BAA4B,WAAW,GAAG;AAAA,EAC5D;AAEA,QAAM,EAAE,UAAU,MAAM,MAAM,UAAU,KAAK,IAAI,MAAM;AAEvD,MAAI,YAAY,aAAa,SAAS,aAAa,OAAO;AACxD,UAAM,IAAI,MAAM,kCAAkC,QAAQ,GAAG;AAAA,EAC/D;AAEA,MAAI,aAAyC;AAE7C,MAAI,QAAQ,mBAAmB,KAAK,IAAI,GAAG;AACzC,iBAAa;AAAA,EACf,WAAW,QAAQ,mBAAmB,KAAK,IAAI,GAAG;AAChD,iBAAa;AAAA,EACf;AAEA,QAAM,mBAAmB,OAAO,QAAQ;AAExC,SAAO;AAAA,IACL,MAAM,OAAO,SAAS,OAAO,SAAS;AAAA,IACtC;AAAA,IACA,SAAS,QAAQ;AAAA,IACjB;AAAA,IACA,MAAM,OAAO,SAAS,MAAM,EAAE,IAAI;AAAA,IAClC,UAAU,WAAY,WAAkC;AAAA,EAC1D;AACF;AAUO,SAAS,gBAAgB,YAAiD;AAC/E,MAAI,OAAO,eAAe,UAAU;AAClC,WAAO;AAAA,EACT;AAEA,QAAM,SAAS,iBAAiB,UAAU;AAE1C,MAAI,OAAO,MAAM;AACf,UAAM,IAAI,MAAM,6CAA6C,UAAU,GAAG;AAAA,EAC5E;AAEA,SAAO;AACT;AAOO,SAAS,gBAAgB,YAAiD;AAC/E,MAAI,OAAO,eAAe,UAAU;AAClC,WAAO;AAAA,EACT;AAEA,QAAM,SAAS,iBAAiB,UAAU;AAE1C,MAAI,CAAC,OAAO,MAAM;AAChB,UAAM,IAAI,MAAM,kCAAkC,UAAU,GAAG;AAAA,EACjE;AAEA,SAAO;AACT;AAEA,IAAM,qBACJ;AAEF,IAAM,qBACJ;AAWF,eAAsB,uBACpB,aACA,eAC6B;AAC7B,MAAI,aAAa;AACf,WAAO,gBAAgB,WAAW;AAAA,EACpC;AAEA,MAAI,eAAe;AACjB,WAAO,UAAU,aAAa;AAAA,EAChC;AAEA,QAAM,IAAI,MAAM,sBAAsB;AACxC;AAWA,eAAsB,uBACpB,aACA,eAC6B;AAC7B,MAAI,aAAa;AACf,WAAO,gBAAgB,WAAW;AAAA,EACpC;AAEA,MAAI,eAAe;AACjB,WAAO,UAAU,aAAa;AAAA,EAChC;AAEA,QAAM,IAAI,MAAM,sBAAsB;AACxC;AAUO,SAAS,eACd,YACA,MACA,WAA+B,OACX;AACpB,SAAO;AAAA,IACL,GAAG,gBAAgB,UAAU;AAAA,IAC7B;AAAA,IACA;AAAA,EACF;AACF;AAUO,SAAS,gBACd,WACA,QACa;AACb,MAAI,QAAQ,QAAQ;AAClB,WAAO,UAAU,OAAO,cAAY,OAAO,SAAS,SAAS,UAAU,CAAC;AAAA,EAC1E;AAEA,MAAI,UAAU,KAAK,cAAY,SAAS,eAAe,QAAQ,GAAG;AAChE,WAAO,UAAU,OAAO,cAAY,SAAS,eAAe,QAAQ;AAAA,EACtE;AAEA,MAAI,UAAU,KAAK,cAAY,SAAS,eAAe,UAAU,GAAG;AAClE,WAAO,UAAU,OAAO,cAAY,SAAS,eAAe,UAAU;AAAA,EACxE;AAGA,SAAO;AACT;AAUO,SAAS,iBAAiB,YAAwC;AACvE,UAAQ,WAAW,MAAM;AAAA,IACvB,KAAK;AACH,aAAO,GAAG,WAAW,OAAO;AAAA,IAC9B,KAAK;AACH,aAAO,GAAG,WAAW,OAAO;AAAA,IAC9B,KAAK;AACH,YAAM,IAAI,MAAM,iCAAiC;AAAA,EACrD;AACF;AAYA,eAAsB,gBACpB,kBACA,WACA,gBACA,OAAuB,WACA;AACvB,QAAM,2BAA2B,MAAM,UAAU,gBAAgB;AACjE,QAAM,yBAAyB,MAAM,UAAU,cAAc;AAE7D,QAAM,eAAe;AAAA;AAAA,IAEnB,CAAC,GAAG,UAAU,IAAI,gBAAgB,GAAG,GAAG,sBAAsB;AAAA,IAC9D,cAAY,oBAAoB,QAAQ;AAAA,EAC1C;AAEA,MAAI,SAAS,WAAW;AACtB,WAAO;AAAA,EACT;AAEA,SAAO;AAAA;AAAA,IAEL,CAAC,GAAG,cAAc,GAAG,wBAAwB;AAAA,IAC7C,cAAY,oBAAoB,QAAQ;AAAA,EAC1C;AACF;;;ACtTA,SAAS,OAAO,cAA0B;AAC1C;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OAKK;AACP,OAA4B;AAGrB,SAAS,oBACdA,MAC2C;AAC3C,SAAO,OAAOA,IAAG,EAAE,MAAM,CAAAA,UAAQ;AAAA,IAC/B,MAAM,mBAAmBA,KAAI,UAAU,CAAC,CAAC;AAAA,IACzC,MAAMA,KAAI,UAAU,CAAC,EAAE;AAAA,IACvB,MAAMA,KAAI;AAAA,IACV,UAAUA,KAAI;AAAA,IACd,YAAYA,KAAI,SAAS;AAAA,IACzB,gBAAgB;AAAA,IAChB,SAASA,KAAI;AAAA,EACf,EAAE;AACJ;AAmBO,IAAM,UAAN,MAAM,iBAAgB,kBAAkB;AAAA,EAC7B;AAAA,EAEA;AAAA,EACA;AAAA,EAEhB,YAAY,MAAc,MAAmB,MAAiC;AAC5E,UAAM,4BAA4B,MAAM,MAAM,IAAI;AAElD,SAAK,UAAU,OAAO,IAAI,EAAE,MAAM,CAAAC,UAAQ;AACxC,UAAIA,MAAK,SAAS,SAAS;AACzB,eAAO,IAAI,MAAM;AAAA,UACf;AAAA,UACA;AAAA,YACE,QAAQA,MAAK;AAAA,YACb,QAAQA,MAAK;AAAA,YACb,QAAQA,MAAK;AAAA,YACb,SAASA,MAAK;AAAA,YACd,UAAUA,MAAK;AAAA,UACjB;AAAA,UACA,EAAE,GAAG,MAAM,QAAQ,KAAK;AAAA,QAC1B;AAAA,MACF;AAEA,UAAI,CAACA,MAAK,KAAK,KAAK;AAClB,cAAM,IAAI,MAAM,aAAaA,MAAK,KAAK,QAAQ,0BAA0B;AAAA,MAC3E;AAEA,aAAO,IAAI,OAAO;AAAA,QAChB;AAAA,QACA;AAAA,UACE,YAAY,oBAAoBA,MAAK,KAAK,GAAG;AAAA,UAC7C,QAAQA,MAAK;AAAA,UACb,QAAQA,MAAK;AAAA,UACb,QAAQA,MAAK;AAAA,UACb,SAASA,MAAK;AAAA,UACd,UAAUA,MAAK;AAAA,QACjB;AAAA,QACA,EAAE,GAAG,MAAM,QAAQ,KAAK;AAAA,MAC1B;AAAA,IACF,CAAC;AAED,SAAK,SAAS,KAAK,QAAQ;AAC3B,SAAK,SAAS,KAAK,QAAQ;AAAA,EAC7B;AAAA,EAEA,OAAO,eACL,MACA,SACA,MACiB;AACjB,WAAO,OAAO,OAAO,EAAE,MAAM,CAAAC,aAAW;AACtC,YAAM,iBAAiBA,SAAQ,QAAQ,QAAQ,MAAM,KAAK;AAE1D,YAAM,UAAU,IAAI;AAAA,QAClB;AAAA,QACA;AAAA,UACE,MAAMA,SAAQ;AAAA,UACd,QAAQ,iCAAiCA,SAAQ,IAAI,cAAc,cAAc,OAAOA,SAAQ,IAAI;AAAA,UACpG,QAAQ,qBAAqBA,SAAQ,IAAI;AAAA,QAC3C;AAAA,QACA;AAAA,MACF;AAEA,aAAO;AAAA,IACT,CAAC;AAAA,EACH;AAAA,EAEA,OAAO,gBACL,MACA,SACA,MACiB;AACjB,WAAO,OAAO,OAAO,EAAE,MAAM,CAAAA,aAAW;AACtC,YAAM,UAAU,IAAI;AAAA,QAClB;AAAA,QACA;AAAA,UACE,MAAMA,SAAQ;AAAA,UACd,QAAQ,8BAA8BA,SAAQ,IAAI,2BAA2BA,SAAQ,IAAI;AAAA,UACzF,SAAS;AAAA,QACX;AAAA,QACA;AAAA,MACF;AAEA,aAAO;AAAA,IACT,CAAC;AAAA,EACH;AACF;;;AClIA;AAAA,EACE,qBAAAC;AAAA,EACA;AAAA,EACA,UAAAC;AAAA,EAGA,aAAAC;AAAA,OAMK;AACP,SAAS,YAAY,SAAS,YAAAC,iBAAgB;AA6F9C,SAAS,kBAAkB,UAAsC;AAC/D,UAAQ,SAAS,MAAM;AAAA,IACrB,KAAK;AACH,aAAO;AAAA,IACT,KAAK;AACH,aAAO;AAAA,IACT,KAAK;AACH,aAAO;AAAA,EACX;AACF;AAEO,IAAe,YAAf,cAAiCC,mBAAkB;AAAA;AAAA;AAAA;AAAA,EAIxC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA;AAAA,EAEN,YAAY,MAAc,MAAqB,MAAwB;AAC/E,UAAM,8BAA8B,MAAM,MAAM,IAAI;AAEpD,SAAK,YAAYC,QAAO,IAAI,EAAE,MAAM,CAAAC,UAAQ;AAC1C,YAAM,aAAa,gBAAgBA,MAAK,KAAK;AAC7C,YAAM,OAAOA,MAAK,QAAQ,kBAAkB,UAAU;AAEtD,aAAOD;AAAA,QACL,KAAK;AAAA,UACH;AAAA,UACA;AAAA,YACE,GAAGC;AAAA,YACH;AAAA,YACA,OAAO,mBAAmB,UAAU;AAAA,UACtC;AAAA,UACA,EAAE,GAAG,MAAM,QAAQ,KAAK;AAAA,QAC1B;AAAA,MACF;AAAA,IACF,CAAC;AAED,SAAK,eAAeD,QAAO,IAAI,EAAE,MAAM,CAAAC,UAAQ;AAC7C,YAAM,SAASA,MAAK,SAAU,MAAM,QAAQA,MAAK,MAAM,IAAIA,MAAK,SAAS,CAACA,MAAK,MAAM,IAAK,CAAC;AAE3F,aAAO,OAAO,IAAI,UAAQ;AACxB,cAAM,WAAW,SAAS,UAAU,UAAU,KAAK;AAEnD,eAAO,IAAI;AAAA,UACT,GAAG,IAAI,SAAS,QAAQ;AAAA,UACxB;AAAA,YACE;AAAA,YACA,QAAQ,wBAAwBA,MAAK,IAAI,gDAAgDA,MAAK,IAAI;AAAA,YAClG,UAAU,CAACA,MAAK,MAAMA,MAAK,KAAKA,MAAK,UAAUA,MAAK,OAAO;AAAA,UAC7D;AAAA,UACA,EAAE,QAAQ,KAAK;AAAA,QACjB;AAAA,MACF,CAAC;AAAA,IACH,CAAC;AAAA,EACH;AAAA,EAQA,OAAO,OAAO,MAAc,MAAqB,MAA2C;AAC1F,WAAOD,QAAO,IAAI,EAAE,MAAM,OAAMC,UAAQ;AACtC,YAAM,eAAeA,MAAK,SAAS;AACnC,YAAM,WAAW,GAAG,WAAW,YAAY,CAAC;AAC5C,YAAM,aAAc,MAAM,OAAO,cAAc,YAAY;AAE3D,YAAM,YAAY,WAAW,QAAQ;AAMrC,aAAO,IAAI,UAAU,MAAMA,OAAM,IAAI;AAAA,IACvC,CAAC;AAAA,EACH;AACF;AAEO,IAAM,eAAN,MAAM,sBAAqBF,mBAAkB;AAAA;AAAA;AAAA;AAAA,EAIlC;AAAA;AAAA;AAAA;AAAA,EAKA;AAAA,EAER,YAAY,MAAc,SAA8B,MAAwB;AACtF,UAAM,iCAAiC,MAAM,SAAS,IAAI;AAE1D,SAAK,aAAa;AAElB,SAAK,eAAe,QAAQ;AAAA,MAAM,CAAAG,aAChCA,SAAQ,QAAQ,YAAU,OAAO,YAAY;AAAA,IAC/C;AAAA,EACF;AAAA,EAEA,OAAO,OAAO,MAAc,MAAwB,MAAsC;AACxF,UAAM,UAAUF,QAAO,IAAI,EAAE,MAAM,CAAAC,UAAQ;AACzC,YAAM,aAAaA,MAAK,QAAQ;AAChC,YAAM,SAAS,UAAUA,MAAK,OAAOA,MAAK,MAAM;AAEhD,aAAOD;AAAA,QACLC,MAAK,UACF,OAAO,cAAY,WAAW,SAAS,SAAS,MAAM,CAAC,EACvD,QAAQ,cAAY;AACnB,iBAAO,OAAO,IAAI,WAAS;AACzB,kBAAM,aAAa,gBAAgB,KAAK;AAExC,mBAAO,UAAU;AAAA,cACf,GAAG,SAAS,IAAI,SAAS,SAAS,IAAI,OAAO,mBAAmB,UAAU,CAAC;AAAA,cAC3E,EAAE,MAAM,YAAY,GAAGA,OAAM,OAAO,YAAY,SAAS;AAAA,cACzD;AAAA,YACF;AAAA,UACF,CAAC;AAAA,QACH,CAAC;AAAA,MACL;AAAA,IACF,CAAC;AAED,WAAO,IAAI,cAAa,MAAM,SAAS,IAAI;AAAA,EAC7C;AACF;AAcA,eAAsB,wBACpB,WACA,MACA,oBACA,WACA,cAC6E;AAC7E,QAAM,oBAAoB,MAAME,WAAU,SAAS;AAEnD,MAAI,CAAC,MAAM;AACT,WAAO;AAAA,MACL,WAAW;AAAA,MACX,cAAc;AAAA,IAChB;AAAA,EACF;AAEA,QAAM,oBAAoB,gBAAgB,mBAAmB,kBAAkB;AAE/E,QAAM,eAAe,aAAa,OAAO,MAAM;AAAA,IAC7C,WAAW;AAAA,IACX,QAAQ;AAAA,IACR,QAAQ;AAAA,EACV,CAAC;AAED,QAAM,qBAAqB;AAAA,IAAQ;AAAA,IAAmB,cACpD,SAAS,OAAO,GAAG,SAAS,IAAI,IAAI,SAAS,QAAQ,KAAK;AAAA,EAC5D;AAEA,QAAM,eAA4B,CAAC;AAEnC,aAAW,SAAS,OAAO,OAAO,kBAAkB,GAAG;AACrD,iBAAa,QAAQ;AAAA,MACnB,MAAM;AAAA,MACN,UAAU;AAAA,MACV,YAAY,MAAM,CAAC,EAAE;AAAA,MACrB,MAAM,MAAM,CAAC,EAAE;AAAA,MACf,UAAU,MAAM,CAAC,EAAE;AAAA,IACrB,CAAc;AAAA,EAChB;AAEA,QAAMA;AAAA,IACJ,aAAa,aAAa,MAAM,kBAAgB,aAAa,IAAI,aAAW,QAAQ,MAAM,CAAC;AAAA,EAC7F;AAEA,MAAI,cAAc,WAAW;AAC3B,WAAO;AAAA,MACL,WAAWC;AAAA;AAAA,QAET,CAAC,GAAG,cAAc,GAAI,iBAAiC;AAAA,QACvD,cAAY,oBAAoB,QAAQ;AAAA,MAC1C;AAAA,MACA;AAAA,IACF;AAAA,EACF;AAEA,SAAO;AAAA,IACL,WAAW;AAAA,IACX;AAAA,EACF;AACF;;;ACvTA,SAAS,mBAAmB;AAC5B,SAAS,kBAAkB;AAEpB,SAAS,mBAAmB;AACjC,SAAO,WAAW,MAAM,YAAY,EAAE,CAAC,EAAE;AAC3C;;;ACJA;AAAA,EACE;AAAA,EACA;AAAA,EACA,UAAAC;AAAA,EAEA;AAAA,OAGK;AACP,OAAO,WAAW,qBAAqB;AACvC,SAAS,eAAAC,oBAAmB;AAC5B,SAAS,SAAAC,QAAO,UAAAC,eAAc;AAGvB,SAAS,kBACd,aACsC;AACtC,SAAOC,QAAO,WAAW,EAAE,MAAM,CAAAC,iBAAe;AAC9C,QAAI,CAACA,cAAa;AAChB,aAAO;AAAA,IACT;AAEA,UAAM,UAAU,CAAC,OAAO,OAAO,MAAM,iCAAiC;AAGtE,UAAM,WAAWA,aAAY,UAAU,CAAC;AAExC,YAAQ,KAAK,MAAM,SAAS,KAAK,SAAS,CAAC;AAE3C,QAAIA,aAAY,SAAS;AACvB,cAAQ,KAAK,MAAM,cAAc;AAAA,IACnC;AAEA,YAAQ,KAAK,GAAGA,aAAY,IAAI,IAAI,mBAAmB,QAAQ,CAAC,EAAE;AAElE,QAAIA,aAAY,UAAU;AACxB,cAAQ,QAAQ,WAAW,MAAM,WAAW;AAAA,IAC9C;AAEA,WAAO;AAAA,MACL,MAAM;AAAA,MACN,OAAO,QAAQ,oBAAoB,CAAC;AAAA,MACpC,aAAa;AAAA,MACb,OAAO;AAAA,MACP;AAAA,MAEA,OAAO;AAAA,QACL,aAAaA,aAAY;AAAA,QAEzB,gBAAgB;AAAA,UACd,SAASA,aAAY,SAAS;AAAA,UAC9B,MAAM;AAAA,QACR;AAAA,QAEA,gBAAgB;AAAA,UACd,SAAS,GAAG,mBAAmB,QAAQ,CAAC,IAAIA,aAAY,OAAO;AAAA,UAC/D,MAAM;AAAA,QACR;AAAA,MACF;AAAA,IACF;AAAA,EACF,CAAC;AACH;AAEO,SAAS,qBAA6B;AAC3C,QAAM,OAAOC,aAAY,EAAE;AAE3B,SAAO,QAAQ,IAAI,EAAE;AACvB;AAEO,SAAS,oBAAoB,kBAAsD;AACxF,SAAOF,QAAO,gBAAgB,EAAE,MAAM,CAAAG,sBAAoB;AACxD,UAAM,mBAAmB,cAAc,OAAOA,iBAAgB;AAG9D,UAAM,UAAU,iBAAiB,KAAK,CAAC,EAAE,QAAQ;AAEjD,UAAM,EAAE,aAAa,WAAW,WAAW,IAAI,QAAQ,QAAQ,MAAM,GAAG,EAAE,CAAC;AAE3E,WAAOH,QAAO;AAAA,MACZ,MAAM;AAAA,MACN;AAAA,MACA;AAAA,MACA,YAAY,OAAO,UAAU;AAAA,IAC/B,CAAC;AAAA,EACH,CAAC;AACH;AAUO,SAAS,sBACd,QACA,SACqB;AACrB,MAAI,OAAO,YAAY;AACrB,WAAOA,QAAO,OAAO,UAAU;AAAA,EACjC;AAEA,QAAM,aAAa,kBAAkB,SAAS,iBAAiB,kBAAkB;AAEjF,SAAO,WAAW,MAAM,mBAAmB;AAC7C;AAEO,SAAS,mBACd,kBACA,UACA,UAAU,IACV,UAAU,QACV,aACA,eACuB;AACvB,QAAM,aAAaA,QAAO;AAAA,IACxB,MAAM,mBAAmB,QAAQ;AAAA,IACjC,MAAM;AAAA,IACN,MAAM;AAAA,IACN,UAAU;AAAA,IACV,YAAY;AAAA,IACZ,gBAAgB;AAAA,EAClB,CAAC;AAED,QAAM,UAAU,IAAII,OAAM,QAAQ,aAAa;AAAA,IAC7C,QAAQ,UAAU,mBAAmB,QAAQ,CAAC,IAAI,OAAO;AAAA,EAC3D,CAAC;AAED,SAAO,QAAQ,OAAO,MAAM,YAAU;AACpC,QAAI,WAAW,QAAQ;AACrB,aAAOJ,QAAO;AAAA,QACZ,UAAU;AAAA,QACV,WAAW,CAAC,QAAQ;AAAA,MACtB,CAAC;AAAA,IACH;AAEA,UAAM,iBAAiB,IAAIK,QAAO,QAAQ,YAAY;AAAA,MACpD;AAAA,MACA,QAAQ;AAAA,MACR,UAAU,CAAC,KAAK,IAAI,CAAC;AAAA,IACvB,CAAC;AAED,UAAM,gBAAgB,IAAIA,QAAO,QAAQ,YAAY;AAAA,MACnD;AAAA,MACA,QAAQ;AAAA,MACR,UAAU,CAAC,KAAK,IAAI,CAAC;AAAA,IACvB,CAAC;AAED,WAAOL,QAAO;AAAA,MACZ,WAAW,CAAC,QAAQ;AAAA,MACpB,UAAU,eAAe,OAAO,MAAM,OAAK,EAAE,KAAK,CAAC;AAAA,MACnD,KAAK;AAAA,QACH,WAAW,CAAC,eAAe,UAAU,OAAO,CAAC;AAAA,QAC7C,MAAM;AAAA,QACN,SAAS,cAAc,OAAO,MAAM,OAAK,EAAE,KAAK,CAAC;AAAA,QACjD,UAAU;AAAA,QACV,SAAS,gBAAgB,oBAAoB,aAAa,IAAI;AAAA,MAChE;AAAA,IACF,CAAC;AAAA,EACH,CAAC;AACH;","names":["ssh","args","options","ComponentResource","output","toPromise","uniqueBy","ComponentResource","output","args","records","toPromise","uniqueBy","output","randomBytes","local","remote","output","credentials","randomBytes","privateKeyString","local","remote"]}

package/dist/highstate.manifest.json

@@ -1,9 +1,13 @@
 {
   "sourceHashes": {
-    "./dist/index.js": "3c4e76e0ac05b10fa2a2067695242070c6beab04f6689a5d6181c448113eac89",
-    "./dist/dns/record/index.js": "e4f4558eaa29c589553e0c99b2f12e29e55e3db434977685b4f0e033e5666ac3",
-    "./dist/existing-server/index.js": "ebd36ffd0f09c7ebc01a80f32e74f6b8bb2e8a2f3359b7e2f3bd5c10ebcaecf2",
-    "./dist/ssh/key-pair/index.js": "9f3d11f005131a1e84542684bb412a72c0f4f4b21e82a4041259ec67f69a5d29",
-    "./dist/script/index.js": "6347f09e42f10d2f1ad14361357128a538b3139a23f1348eba7d65a0e856af70"
+    "./dist/index.js": "72c0b335a1996396fb5cd11e2f50e32ac46112062e5d6a8d995fe1c09465c710",
+    "./dist/units/dns/record-set/index.js": "8875747bcfdea0f4af4bf1172938751bcc1e1e3262fd73975c16194e97c65aab",
+    "./dist/units/network/l3-endpoint/index.js": "5af399fbc653ab8d4fef499c04ef90ffd106156af1947dc024f649c8d36a17d2",
+    "./dist/units/network/l4-endpoint/index.js": "aabc2a23b8977f6aac0e3e7ce64c44ea4656e13b65d36d586f7ff8e1bfde5d4b",
+    "./dist/units/existing-server/index.js": "7a50a5ba150556cfa440b5dd977376ebe4d16165f92d1175e688bf1a3b52e6ab",
+    "./dist/units/ssh/key-pair/index.js": "f88c29988f14fd81ba88219ae445c42476e734b2784f488de5aae8f5f0c77f4a",
+    "./dist/units/script/index.js": "bd095cdd005451ea8efc18837e9ff95ae152acc7374e15d2f02870c2cc1a2f98",
+    "./dist/units/server-dns/index.js": "05248c338318a9761fe7497e113d3e2afe8d3167bbb3554d8014fc63abe3ff8b",
+    "./dist/units/server-patch/index.js": "50d26e714bb3156e89a70b09be79cb66a0d3bdf764443bb1a336960a603759eb"
   }
 }