@highstate/common 0.9.3 → 0.9.5

package/src/shared/ssh.ts

@@ -1,51 +1,65 @@
-import type { common, ssh } from "@highstate/library"
+import type { common, network, ssh } from "@highstate/library"
 import {
   getOrCreateSecret,
   getUnitInstanceName,
   output,
   Output,
+  secret,
   type Input,
   type InstanceTerminal,
 } from "@highstate/pulumi"
 import getKeys, { PrivateExport } from "micro-key-producer/ssh.js"
 import { randomBytes } from "micro-key-producer/utils.js"
+import { local, remote } from "@pulumi/command"
+import { l3EndpointToString, l3ToL4Endpoint, l4EndpointToString } from "./network"
 
-export function createSshTerminal(server: common.Server): InstanceTerminal {
-  const command = ["ssh", "-tt", "-o", "StrictHostKeyChecking=no"]
+export function createSshTerminal(
+  credentials: Input<ssh.Credentials | undefined>,
+): Output<InstanceTerminal | undefined> {
+  return output(credentials).apply(credentials => {
+    if (!credentials) {
+      return undefined
+    }
 
-  if (server.sshCredentials?.port) {
-    command.push("-p", server.sshCredentials.port.toString())
-  }
+    const command = ["ssh", "-tt", "-o", "UserKnownHostsFile=/known_hosts"]
 
-  if (server.sshCredentials?.privateKey) {
-    command.push("-i", "/private-key")
-  }
+    // TODO: select best endpoint based on the environment
+    const endpoint = credentials.endpoints[0]
 
-  const endpoint = server.sshCredentials?.endpoint ?? server.endpoint
-  const user = server.sshCredentials?.user ?? "root"
+    command.push("-p", endpoint.port.toString())
 
-  command.push(`${user}@${endpoint}`)
+    if (credentials.keyPair) {
+      command.push("-i", "/private_key")
+    }
 
-  if (server.sshCredentials?.password) {
-    command.unshift("sshpass", "-f", "/password")
-  }
+    command.push(`${credentials.user}@${l3EndpointToString(endpoint)}`)
+
+    if (credentials.password) {
+      command.unshift("sshpass", "-f", "/password")
+    }
 
-  return {
-    name: "ssh",
-    title: `SSH: ${getUnitInstanceName()}`,
-    description: "Connect to the server via SSH",
-    image: "ghcr.io/exeteres/highstate/terminal-ssh",
-    command,
+    return {
+      name: "ssh",
+      title: `SSH: ${getUnitInstanceName()}`,
+      description: "Connect to the server via SSH",
+      image: "ghcr.io/exeteres/highstate/terminal-ssh",
+      command,
 
-    files: {
-      "/password": server.sshCredentials?.password,
+      files: {
+        "/password": credentials.password,
 
-      "/private-key": {
-        content: server.sshCredentials?.privateKey,
-        mode: 0o600,
+        "/private_key": {
+          content: credentials.keyPair?.privateKey,
+          mode: 0o600,
+        },
+
+        "/known_hosts": {
+          content: `${l4EndpointToString(endpoint)} ${credentials.hostKey}`,
+          mode: 0o644,
+        },
       },
-    },
-  }
+    }
+  })
 }
 
 export function generatePrivateKey(): string {
@@ -54,13 +68,22 @@ export function generatePrivateKey(): string {
   return getKeys(seed).privateKey
 }
 
-export function getKeysFromString(privateKey: string) {
-  const privateKeyStruct = PrivateExport.decode(privateKey)
+export function privateKeyToKeyPair(privateKeyString: Input<string>): Output<ssh.KeyPair> {
+  return output(privateKeyString).apply(privateKeyString => {
+    const privateKeyStruct = PrivateExport.decode(privateKeyString)
+
+    // eslint-disable-next-line @typescript-eslint/no-unsafe-member-access
+    const privKey = privateKeyStruct.keys[0].privKey.privKey as Uint8Array
 
-  // eslint-disable-next-line @typescript-eslint/no-unsafe-member-access
-  const privKey = privateKeyStruct.keys[0].privKey.privKey as Uint8Array
+    const { fingerprint, publicKey, privateKey } = getKeys(privKey.slice(0, 32))
 
-  return getKeys(privKey.slice(0, 32))
+    return output({
+      type: "ed25519" as const,
+      fingerprint,
+      publicKey,
+      privateKey: secret(privateKey),
+    })
+  })
 }
 
 export type SshKeyPairInputs = {
@@ -80,11 +103,61 @@ export function getOrCreateSshKeyPair(
   }
 
   const privateKey = getOrCreateSecret(secrets, "sshPrivateKey", generatePrivateKey)
-  const keys = privateKey.apply(getKeysFromString)
 
-  return output({
-    type: "ed25519",
-    privateKey,
-    publicKey: keys.publicKey,
+  return privateKey.apply(privateKeyToKeyPair)
+}
+
+export function createServerEntity(
+  fallbackHostname: string,
+  endpoint: network.L3Endpoint,
+  sshPort = 22,
+  sshUser = "root",
+  sshPassword?: Input<string | undefined>,
+  sshPrivateKey?: Input<string>,
+): Output<common.Server> {
+  const connection = output({
+    host: l3EndpointToString(endpoint),
+    port: sshPort,
+    user: sshUser,
+    password: sshPassword,
+    privateKey: sshPrivateKey,
+    dialErrorLimit: 3,
+  })
+
+  const command = new local.Command("check-ssh", {
+    create: `nc -zv ${l3EndpointToString(endpoint)} ${sshPort} && echo "up" || echo "down"`,
+  })
+
+  return command.stdout.apply(result => {
+    if (result === "down") {
+      return output({
+        hostname: fallbackHostname,
+        endpoints: [endpoint],
+      })
+    }
+
+    const hostnameResult = new remote.Command("hostname", {
+      connection,
+      create: "hostname",
+      triggers: [Date.now()],
+    })
+
+    const hostKeyResult = new remote.Command("host-key", {
+      connection,
+      create: "cat /etc/ssh/ssh_host_ed25519_key.pub",
+      triggers: [Date.now()],
+    })
+
+    return output({
+      endpoints: [endpoint],
+      hostname: hostnameResult.stdout.apply(x => x.trim()),
+      ssh: {
+        endpoints: [l3ToL4Endpoint(endpoint, sshPort)],
+        user: sshUser,
+        hostKey: hostKeyResult.stdout.apply(x => x.trim()),
+        password: sshPassword,
+        keyPair: sshPrivateKey ? privateKeyToKeyPair(sshPrivateKey) : undefined,
+      },
+    })
   })
 }

package/src/units/dns/record-set/index.ts

@@ -0,0 +1,16 @@
+import { dns } from "@highstate/library"
+import { forUnit, toPromise } from "@highstate/pulumi"
+import { DnsRecordSet } from "../../../shared"
+
+const { name, args, inputs } = forUnit(dns.recordSet)
+
+const endpoints = await toPromise(inputs.endpoints)
+
+DnsRecordSet.create(name, {
+  type: args.type,
+  providers: inputs.dnsProviders,
+  values: [...args.values, ...endpoints],
+  ttl: args.ttl,
+  priority: args.priority,
+  proxied: args.proxied,
+})

package/src/units/existing-server/index.ts

@@ -0,0 +1,34 @@
+import { common } from "@highstate/library"
+import { forUnit, toPromise } from "@highstate/pulumi"
+import {
+  createServerEntity,
+  createSshTerminal,
+  l3EndpointToString,
+  requireInputL3Endpoint,
+} from "../../shared"
+
+const { name, args, inputs, secrets, outputs } = forUnit(common.existingServer)
+
+const endpoint = await requireInputL3Endpoint(args.endpoint, inputs.endpoint)
+const privateKey = await toPromise(inputs.sshKeyPair?.privateKey ?? secrets.sshPrivateKey)
+
+const server = createServerEntity(
+  name,
+  endpoint,
+  args.sshPort,
+  args.sshUser,
+  secrets.sshPassword,
+  privateKey,
+)
+
+export default outputs({
+  server,
+  endpoints: server.endpoints,
+
+  $status: {
+    hostname: server.hostname,
+    endpoints: server.endpoints.apply(endpoints => endpoints.map(l3EndpointToString)),
+  },
+
+  $terminals: [createSshTerminal(server.ssh)],
+})

package/src/units/network/l3-endpoint/index.ts

@@ -0,0 +1,9 @@
+import { network } from "@highstate/library"
+import { forUnit } from "@highstate/pulumi"
+import { parseL3Endpoint } from "../../../shared"
+
+const { args, outputs } = forUnit(network.l3Endpoint)
+
+export default outputs({
+  endpoint: parseL3Endpoint(args.endpoint),
+})

package/src/units/network/l4-endpoint/index.ts

@@ -0,0 +1,9 @@
+import { network } from "@highstate/library"
+import { forUnit } from "@highstate/pulumi"
+import { parseL4Endpoint } from "../../../shared"
+
+const { args, outputs } = forUnit(network.l4Endpoint)
+
+export default outputs({
+  endpoint: parseL4Endpoint(args.endpoint),
+})

package/src/{script → units/script}/index.ts

@@ -1,13 +1,11 @@
 import { common } from "@highstate/library"
 import { forUnit } from "@highstate/pulumi"
-import { Server } from "../shared"
+import { Command } from "../../shared"
 
 const { name, args, inputs, outputs } = forUnit(common.script)
 
-const server = new Server(inputs.server)
-
-server.command({
-  id: name,
+new Command(name, {
+  host: inputs.server,
   create: args.script,
   update: args.updateScript,
   delete: args.deleteScript,

package/src/units/server-dns/index.ts

@@ -0,0 +1,26 @@
+import { common } from "@highstate/library"
+import { forUnit } from "@highstate/pulumi"
+import { l3EndpointToString, updateEndpointsWithFqdn } from "../../shared"
+
+const { args, inputs, outputs } = forUnit(common.serverDns)
+
+const { endpoints } = await updateEndpointsWithFqdn(
+  inputs.server.endpoints,
+  args.fqdn,
+  args.endpointFilter,
+  args.patchMode,
+  inputs.dnsProviders,
+)
+
+export default outputs({
+  server: inputs.server.apply(server => ({
+    ...server,
+    endpoints,
+  })),
+
+  endpoints,
+
+  $status: {
+    endpoints: endpoints.map(l3EndpointToString),
+  },
+})

package/src/units/server-patch/index.ts

@@ -0,0 +1,25 @@
+import { common } from "@highstate/library"
+import { forUnit } from "@highstate/pulumi"
+import { l3EndpointToString, updateEndpoints } from "../../shared"
+
+const { args, inputs, outputs } = forUnit(common.serverPatch)
+
+const endpoints = await updateEndpoints(
+  inputs.server.endpoints,
+  args.endpoints,
+  inputs.endpoints,
+  args.endpointsPatchMode,
+)
+
+export default outputs({
+  server: inputs.server.apply(server => ({
+    ...server,
+    endpoints,
+  })),
+
+  endpoints,
+
+  $status: {
+    endpoints: endpoints.map(l3EndpointToString),
+  },
+})

package/src/units/ssh/key-pair/index.ts

@@ -0,0 +1,16 @@
+import { ssh } from "@highstate/library"
+import { forUnit, getOrCreateSecret } from "@highstate/pulumi"
+import { generatePrivateKey, privateKeyToKeyPair } from "../../../shared"
+
+const { secrets, outputs } = forUnit(ssh.keyPair)
+
+const privateKey = getOrCreateSecret(secrets, "privateKey", generatePrivateKey)
+const keyPair = privateKeyToKeyPair(privateKey)
+
+export default outputs({
+  keyPair: privateKeyToKeyPair(privateKey),
+  $status: {
+    fingerprint: keyPair.fingerprint,
+    publicKey: keyPair.publicKey,
+  },
+})

package/dist/chunk-ZA27FN5N.js

@@ -1,214 +0,0 @@
-// src/shared/server.ts
-import { remote } from "@pulumi/command";
-import {
-  interpolate,
-  output
-} from "@highstate/pulumi";
-import "@highstate/library";
-function getServerConnection(server) {
-  return output(server).apply((server2) => ({
-    host: server2.endpoint,
-    port: server2.sshCredentials?.port ?? 22,
-    user: server2.sshCredentials?.user ?? "root",
-    password: server2.sshCredentials?.password,
-    privateKey: server2.sshCredentials?.privateKey,
-    dialErrorLimit: 3
-  }));
-}
-var Server = class {
-  server;
-  connection;
-  get endpoint() {
-    return this.server.endpoint;
-  }
-  get hostname() {
-    return this.server.hostname;
-  }
-  constructor(server) {
-    this.server = output(server);
-    this.connection = getServerConnection(this.server);
-  }
-  command(options) {
-    return new remote.Command(
-      options.id,
-      {
-        connection: this.connection,
-        create: options.create,
-        update: options.update,
-        delete: options.delete,
-        logging: options.logging
-      },
-      { dependsOn: options.dependsOn }
-    );
-  }
-  file(options) {
-    const escapedContent = output(options.content).apply((content) => content.replace(/"/g, '\\"'));
-    return new remote.Command(
-      options.id,
-      {
-        connection: this.connection,
-        create: interpolate`mkdir -p $(dirname ${options.path}) && echo "${escapedContent}" > ${options.path}`,
-        delete: interpolate`rm -rf ${options.path}`
-      },
-      { dependsOn: options.dependsOn }
-    );
-  }
-};
-
-// src/shared/dns.ts
-import {
-  ComponentResource,
-  output as output2
-} from "@highstate/pulumi";
-
-// ../../node_modules/remeda/dist/chunk-D6FCK2GA.js
-function u(o, n2, a) {
-  let t = (r) => o(r, ...n2);
-  return a === void 0 ? t : Object.assign(t, { lazy: a, lazyArgs: n2 });
-}
-
-// ../../node_modules/remeda/dist/chunk-WIMGWYZL.js
-function u2(r, n2, o) {
-  let a = r.length - n2.length;
-  if (a === 0) return r(...n2);
-  if (a === 1) return u(r, n2, o);
-  throw new Error("Wrong number of arguments");
-}
-
-// ../../node_modules/remeda/dist/chunk-VG2NVNXT.js
-function n(...t) {
-  return u2(e, t);
-}
-var e = (t) => `${t[0]?.toUpperCase() ?? ""}${t.slice(1)}`;
-
-// src/shared/dns.ts
-var DnsRecord = class _DnsRecord extends ComponentResource {
-  /**
-   * The underlying dns record resource.
-   */
-  dnsRecord;
-  constructor(name, args, opts) {
-    super("highstate:common:DnsRecord", name, args, opts);
-    this.dnsRecord = output2(args).apply((args2) => {
-      return output2(this.create(name, args2, { ...opts, parent: this }));
-    });
-  }
-  static create(name, args, opts) {
-    return output2(args).apply(async (args2) => {
-      const providerType = args2.provider.type;
-      const implName = `${n(providerType)}DnsRecord`;
-      const implModule = await import(`@highstate/${providerType}`);
-      const implClass = implModule[implName];
-      return new implClass(name, args2, opts);
-    });
-  }
-  static createSet(name, args, opts) {
-    return output2(args).apply((args2) => {
-      const recordName = args2.name ?? name;
-      return output2(
-        args2.providers.filter((provider) => recordName.endsWith(provider.domain)).map(
-          (provider) => _DnsRecord.create(
-            `${name}.${provider.type}`,
-            { name: recordName, ...args2, provider },
-            opts
-          )
-        )
-      );
-    });
-  }
-};
-
-// src/shared/passwords.ts
-import { randomBytes } from "@noble/hashes/utils";
-import { secureMask } from "micro-key-producer/password.js";
-function generatePassword() {
-  return secureMask.apply(randomBytes(32)).password;
-}
-
-// src/shared/ssh.ts
-import {
-  getOrCreateSecret,
-  getUnitInstanceName,
-  output as output3
-} from "@highstate/pulumi";
-import getKeys, { PrivateExport } from "micro-key-producer/ssh.js";
-import { randomBytes as randomBytes2 } from "micro-key-producer/utils.js";
-function createSshTerminal(server) {
-  const command = ["ssh", "-tt", "-o", "StrictHostKeyChecking=no"];
-  if (server.sshCredentials?.port) {
-    command.push("-p", server.sshCredentials.port.toString());
-  }
-  if (server.sshCredentials?.privateKey) {
-    command.push("-i", "/private-key");
-  }
-  const endpoint = server.sshCredentials?.endpoint ?? server.endpoint;
-  const user = server.sshCredentials?.user ?? "root";
-  command.push(`${user}@${endpoint}`);
-  if (server.sshCredentials?.password) {
-    command.unshift("sshpass", "-f", "/password");
-  }
-  return {
-    name: "ssh",
-    title: `SSH: ${getUnitInstanceName()}`,
-    description: "Connect to the server via SSH",
-    image: "ghcr.io/exeteres/highstate/terminal-ssh",
-    command,
-    files: {
-      "/password": server.sshCredentials?.password,
-      "/private-key": {
-        content: server.sshCredentials?.privateKey,
-        mode: 384
-      }
-    }
-  };
-}
-function generatePrivateKey() {
-  const seed = randomBytes2(32);
-  return getKeys(seed).privateKey;
-}
-function getKeysFromString(privateKey) {
-  const privateKeyStruct = PrivateExport.decode(privateKey);
-  const privKey = privateKeyStruct.keys[0].privKey.privKey;
-  return getKeys(privKey.slice(0, 32));
-}
-function getOrCreateSshKeyPair(inputs, secrets) {
-  if (inputs.sshKeyPair) {
-    return output3(inputs.sshKeyPair);
-  }
-  const privateKey = getOrCreateSecret(secrets, "sshPrivateKey", generatePrivateKey);
-  const keys = privateKey.apply(getKeysFromString);
-  return output3({
-    type: "ed25519",
-    privateKey,
-    publicKey: keys.publicKey
-  });
-}
-
-// src/shared/utils.ts
-function l4EndpointToString(l4Endpoint) {
-  return `${l4Endpoint.endpoint}:${l4Endpoint.port}`;
-}
-function parseL4Endpoint(l4Endpoint) {
-  const [endpoint, port] = l4Endpoint.split(":");
-  if (!port) {
-    throw new Error(`Invalid L4 endpoint: ${l4Endpoint}`);
-  }
-  return {
-    endpoint,
-    port: parseInt(port, 10)
-  };
-}
-
-export {
-  getServerConnection,
-  Server,
-  DnsRecord,
-  generatePassword,
-  createSshTerminal,
-  generatePrivateKey,
-  getKeysFromString,
-  getOrCreateSshKeyPair,
-  l4EndpointToString,
-  parseL4Endpoint
-};
-//# sourceMappingURL=chunk-ZA27FN5N.js.map

package/dist/chunk-ZA27FN5N.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/shared/server.ts","../src/shared/dns.ts","../../../node_modules/remeda/dist/chunk-D6FCK2GA.js","../../../node_modules/remeda/dist/chunk-WIMGWYZL.js","../../../node_modules/remeda/dist/chunk-VG2NVNXT.js","../src/shared/passwords.ts","../src/shared/ssh.ts","../src/shared/utils.ts"],"sourcesContent":["import { remote, type types } from \"@pulumi/command\"\nimport {\n  interpolate,\n  output,\n  Resource,\n  type Input,\n  type InputOrArray,\n  type Output,\n} from \"@highstate/pulumi\"\nimport { common } from \"@highstate/library\"\n\nexport function getServerConnection(\n  server: Input<common.Server>,\n): Output<types.input.remote.ConnectionArgs> {\n  return output(server).apply(server => ({\n    host: server.endpoint,\n    port: server.sshCredentials?.port ?? 22,\n    user: server.sshCredentials?.user ?? \"root\",\n    password: server.sshCredentials?.password,\n    privateKey: server.sshCredentials?.privateKey,\n    dialErrorLimit: 3,\n  }))\n}\n\nexport interface CommandOptions {\n  id: string\n  create: Input<string>\n  update?: Input<string>\n  delete?: Input<string>\n  logging?: Input<remote.Logging>\n  dependsOn?: InputOrArray<Resource>\n}\n\nexport interface FileOptions {\n  id: string\n  path: Input<string>\n  content: Input<string>\n  dependsOn?: InputOrArray<Resource>\n}\n\nexport class Server {\n  public readonly server: Output<common.Server>\n  public readonly connection: Output<types.input.remote.ConnectionArgs>\n\n  public get endpoint(): Output<string> {\n    return this.server.endpoint\n  }\n\n  public get hostname(): Output<string> {\n    return this.server.hostname\n  }\n\n  constructor(server: Input<common.Server>) {\n    this.server = output(server)\n    this.connection = getServerConnection(this.server)\n  }\n\n  public command(options: CommandOptions): remote.Command {\n    return new remote.Command(\n      options.id,\n      {\n        connection: this.connection,\n        create: options.create,\n        update: options.update,\n        delete: options.delete,\n        logging: options.logging,\n      },\n      { dependsOn: options.dependsOn },\n    )\n  }\n\n  public file(options: FileOptions): remote.Command {\n    const escapedContent = output(options.content).apply(content => content.replace(/\"/g, '\\\\\"'))\n\n    return new remote.Command(\n      options.id,\n      {\n        connection: this.connection,\n        create: interpolate`mkdir -p $(dirname ${options.path}) && echo \"${escapedContent}\" > ${options.path}`,\n        delete: interpolate`rm -rf ${options.path}`,\n      },\n      { dependsOn: options.dependsOn },\n    )\n  }\n}\n","import type { dns } from \"@highstate/library\"\nimport {\n  ComponentResource,\n  output,\n  Output,\n  Resource,\n  type Input,\n  type ResourceOptions,\n  type Unwrap,\n} from \"@highstate/pulumi\"\nimport { capitalize } from \"remeda\"\n\nexport type DnsRecordArgs = {\n  /**\n   * The DNS provider to use.\n   */\n  provider: Input<dns.Provider>\n\n  /**\n   * The name of the DNS record.\n   * If not provided, the name of the resource will be used.\n   */\n  name?: Input<string>\n\n  /**\n   * The type of the DNS record.\n   */\n  type: Input<string>\n\n  /**\n   * The value of the DNS record.\n   */\n  value: Input<string>\n\n  /**\n   * Whether the DNS record is proxied (e.g. to provide DDoS protection).\n   *\n   * Available only for public IPs and some DNS providers like Cloudflare.\n   * If not supported, the DNS provider will ignore this value.\n   */\n  proxied?: Input<boolean>\n\n  /**\n   * The TTL of the DNS record.\n   *\n   * If not provided, the DNS provider will use its default value.\n   */\n  ttl?: Input<number>\n\n  /**\n   * The priority of the DNS record.\n   *\n   * Only used for some DNS record types (e.g. MX).\n   */\n  priority?: Input<number>\n}\n\nexport type DnsRecordSetArgs = Omit<DnsRecordArgs, \"provider\"> & {\n  /**\n   * The DNS providers to use to create the DNS records.\n   *\n   * If multiple providers matched the specified domain, multiple DNS records will be created.\n   */\n  providers: Input<dns.Provider[]>\n}\n\nexport abstract class DnsRecord extends ComponentResource {\n  /**\n   * The underlying dns record resource.\n   */\n  public readonly dnsRecord: Output<Resource>\n\n  constructor(name: string, args: DnsRecordArgs, opts?: ResourceOptions) {\n    super(\"highstate:common:DnsRecord\", name, args, opts)\n\n    this.dnsRecord = output(args).apply(args => {\n      return output(this.create(name, args, { ...opts, parent: this }))\n    })\n  }\n\n  protected abstract create(\n    name: string,\n    args: Unwrap<DnsRecordArgs>,\n    opts?: ResourceOptions,\n  ): Input<Resource>\n\n  static create(name: string, args: DnsRecordArgs, opts?: ResourceOptions): Output<DnsRecord> {\n    return output(args).apply(async args => {\n      const providerType = args.provider.type\n      const implName = `${capitalize(providerType)}DnsRecord`\n      const implModule = (await import(`@highstate/${providerType}`)) as Record<string, unknown>\n\n      const implClass = implModule[implName] as new (\n        name: string,\n        args: Unwrap<DnsRecordArgs>,\n        opts?: ResourceOptions,\n      ) => DnsRecord\n\n      return new implClass(name, args, opts)\n    })\n  }\n\n  static createSet(\n    name: string,\n    args: DnsRecordSetArgs,\n    opts?: ResourceOptions,\n  ): Output<DnsRecord[]> {\n    return output(args).apply(args => {\n      const recordName = args.name ?? name\n\n      return output(\n        args.providers\n          .filter(provider => recordName.endsWith(provider.domain))\n          .map(provider =>\n            DnsRecord.create(\n              `${name}.${provider.type}`,\n              { name: recordName, ...args, provider },\n              opts,\n            ),\n          ),\n      )\n    })\n  }\n}\n","function u(o,n,a){let t=r=>o(r,...n);return a===void 0?t:Object.assign(t,{lazy:a,lazyArgs:n})}export{u as a};\n","import{a as t}from\"./chunk-D6FCK2GA.js\";function u(r,n,o){let a=r.length-n.length;if(a===0)return r(...n);if(a===1)return t(r,n,o);throw new Error(\"Wrong number of arguments\")}export{u as a};\n","import{a as i}from\"./chunk-WIMGWYZL.js\";function n(...t){return i(e,t)}var e=t=>`${t[0]?.toUpperCase()??\"\"}${t.slice(1)}`;export{n as a};\n","import { randomBytes } from \"@noble/hashes/utils\"\nimport { secureMask } from \"micro-key-producer/password.js\"\n\nexport function generatePassword() {\n  return secureMask.apply(randomBytes(32)).password\n}\n","import type { common, ssh } from \"@highstate/library\"\nimport {\n  getOrCreateSecret,\n  getUnitInstanceName,\n  output,\n  Output,\n  type Input,\n  type InstanceTerminal,\n} from \"@highstate/pulumi\"\nimport getKeys, { PrivateExport } from \"micro-key-producer/ssh.js\"\nimport { randomBytes } from \"micro-key-producer/utils.js\"\n\nexport function createSshTerminal(server: common.Server): InstanceTerminal {\n  const command = [\"ssh\", \"-tt\", \"-o\", \"StrictHostKeyChecking=no\"]\n\n  if (server.sshCredentials?.port) {\n    command.push(\"-p\", server.sshCredentials.port.toString())\n  }\n\n  if (server.sshCredentials?.privateKey) {\n    command.push(\"-i\", \"/private-key\")\n  }\n\n  const endpoint = server.sshCredentials?.endpoint ?? server.endpoint\n  const user = server.sshCredentials?.user ?? \"root\"\n\n  command.push(`${user}@${endpoint}`)\n\n  if (server.sshCredentials?.password) {\n    command.unshift(\"sshpass\", \"-f\", \"/password\")\n  }\n\n  return {\n    name: \"ssh\",\n    title: `SSH: ${getUnitInstanceName()}`,\n    description: \"Connect to the server via SSH\",\n    image: \"ghcr.io/exeteres/highstate/terminal-ssh\",\n    command,\n\n    files: {\n      \"/password\": server.sshCredentials?.password,\n\n      \"/private-key\": {\n        content: server.sshCredentials?.privateKey,\n        mode: 0o600,\n      },\n    },\n  }\n}\n\nexport function generatePrivateKey(): string {\n  const seed = randomBytes(32)\n\n  return getKeys(seed).privateKey\n}\n\nexport function getKeysFromString(privateKey: string) {\n  const privateKeyStruct = PrivateExport.decode(privateKey)\n\n  // eslint-disable-next-line @typescript-eslint/no-unsafe-member-access\n  const privKey = privateKeyStruct.keys[0].privKey.privKey as Uint8Array\n\n  return getKeys(privKey.slice(0, 32))\n}\n\nexport type SshKeyPairInputs = {\n  sshKeyPair?: Input<ssh.KeyPair>\n}\n\nexport type SshKeyPairSecrets = {\n  sshPrivateKey?: Input<string>\n}\n\nexport function getOrCreateSshKeyPair(\n  inputs: SshKeyPairInputs,\n  secrets: Output<SshKeyPairSecrets>,\n): Output<ssh.KeyPair> {\n  if (inputs.sshKeyPair) {\n    return output(inputs.sshKeyPair)\n  }\n\n  const privateKey = getOrCreateSecret(secrets, \"sshPrivateKey\", generatePrivateKey)\n  const keys = privateKey.apply(getKeysFromString)\n\n  return output({\n    type: \"ed25519\",\n    privateKey,\n    publicKey: keys.publicKey,\n  })\n}\n","import type { common } from \"@highstate/library\"\n\nexport function l4EndpointToString(l4Endpoint: common.L4Endpoint): string {\n  return `${l4Endpoint.endpoint}:${l4Endpoint.port}`\n}\n\nexport function parseL4Endpoint(l4Endpoint: string): common.L4Endpoint {\n  const [endpoint, port] = l4Endpoint.split(\":\")\n\n  if (!port) {\n    throw new Error(`Invalid L4 endpoint: ${l4Endpoint}`)\n  }\n\n  return {\n    endpoint,\n    port: parseInt(port, 10),\n  }\n}\n"],"mappings":";AAAA,SAAS,cAA0B;AACnC;AAAA,EACE;AAAA,EACA;AAAA,OAKK;AACP,OAAuB;AAEhB,SAAS,oBACd,QAC2C;AAC3C,SAAO,OAAO,MAAM,EAAE,MAAM,CAAAA,aAAW;AAAA,IACrC,MAAMA,QAAO;AAAA,IACb,MAAMA,QAAO,gBAAgB,QAAQ;AAAA,IACrC,MAAMA,QAAO,gBAAgB,QAAQ;AAAA,IACrC,UAAUA,QAAO,gBAAgB;AAAA,IACjC,YAAYA,QAAO,gBAAgB;AAAA,IACnC,gBAAgB;AAAA,EAClB,EAAE;AACJ;AAkBO,IAAM,SAAN,MAAa;AAAA,EACF;AAAA,EACA;AAAA,EAEhB,IAAW,WAA2B;AACpC,WAAO,KAAK,OAAO;AAAA,EACrB;AAAA,EAEA,IAAW,WAA2B;AACpC,WAAO,KAAK,OAAO;AAAA,EACrB;AAAA,EAEA,YAAY,QAA8B;AACxC,SAAK,SAAS,OAAO,MAAM;AAC3B,SAAK,aAAa,oBAAoB,KAAK,MAAM;AAAA,EACnD;AAAA,EAEO,QAAQ,SAAyC;AACtD,WAAO,IAAI,OAAO;AAAA,MAChB,QAAQ;AAAA,MACR;AAAA,QACE,YAAY,KAAK;AAAA,QACjB,QAAQ,QAAQ;AAAA,QAChB,QAAQ,QAAQ;AAAA,QAChB,QAAQ,QAAQ;AAAA,QAChB,SAAS,QAAQ;AAAA,MACnB;AAAA,MACA,EAAE,WAAW,QAAQ,UAAU;AAAA,IACjC;AAAA,EACF;AAAA,EAEO,KAAK,SAAsC;AAChD,UAAM,iBAAiB,OAAO,QAAQ,OAAO,EAAE,MAAM,aAAW,QAAQ,QAAQ,MAAM,KAAK,CAAC;AAE5F,WAAO,IAAI,OAAO;AAAA,MAChB,QAAQ;AAAA,MACR;AAAA,QACE,YAAY,KAAK;AAAA,QACjB,QAAQ,iCAAiC,QAAQ,IAAI,cAAc,cAAc,OAAO,QAAQ,IAAI;AAAA,QACpG,QAAQ,qBAAqB,QAAQ,IAAI;AAAA,MAC3C;AAAA,MACA,EAAE,WAAW,QAAQ,UAAU;AAAA,IACjC;AAAA,EACF;AACF;;;ACnFA;AAAA,EACE;AAAA,EACA,UAAAC;AAAA,OAMK;;;ACTP,SAAS,EAAE,GAAEC,IAAE,GAAE;AAAC,MAAI,IAAE,OAAG,EAAE,GAAE,GAAGA,EAAC;AAAE,SAAO,MAAI,SAAO,IAAE,OAAO,OAAO,GAAE,EAAC,MAAK,GAAE,UAASA,GAAC,CAAC;AAAC;;;ACArD,SAASC,GAAE,GAAEC,IAAE,GAAE;AAAC,MAAI,IAAE,EAAE,SAAOA,GAAE;AAAO,MAAG,MAAI,EAAE,QAAO,EAAE,GAAGA,EAAC;AAAE,MAAG,MAAI,EAAE,QAAO,EAAE,GAAEA,IAAE,CAAC;AAAE,QAAM,IAAI,MAAM,2BAA2B;AAAC;;;ACAvI,SAAS,KAAK,GAAE;AAAC,SAAOC,GAAE,GAAE,CAAC;AAAC;AAAC,IAAI,IAAE,OAAG,GAAG,EAAE,CAAC,GAAG,YAAY,KAAG,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC;;;AHkEhH,IAAe,YAAf,MAAe,mBAAkB,kBAAkB;AAAA;AAAA;AAAA;AAAA,EAIxC;AAAA,EAEhB,YAAY,MAAc,MAAqB,MAAwB;AACrE,UAAM,8BAA8B,MAAM,MAAM,IAAI;AAEpD,SAAK,YAAYC,QAAO,IAAI,EAAE,MAAM,CAAAC,UAAQ;AAC1C,aAAOD,QAAO,KAAK,OAAO,MAAMC,OAAM,EAAE,GAAG,MAAM,QAAQ,KAAK,CAAC,CAAC;AAAA,IAClE,CAAC;AAAA,EACH;AAAA,EAQA,OAAO,OAAO,MAAc,MAAqB,MAA2C;AAC1F,WAAOD,QAAO,IAAI,EAAE,MAAM,OAAMC,UAAQ;AACtC,YAAM,eAAeA,MAAK,SAAS;AACnC,YAAM,WAAW,GAAG,EAAW,YAAY,CAAC;AAC5C,YAAM,aAAc,MAAM,OAAO,cAAc,YAAY;AAE3D,YAAM,YAAY,WAAW,QAAQ;AAMrC,aAAO,IAAI,UAAU,MAAMA,OAAM,IAAI;AAAA,IACvC,CAAC;AAAA,EACH;AAAA,EAEA,OAAO,UACL,MACA,MACA,MACqB;AACrB,WAAOD,QAAO,IAAI,EAAE,MAAM,CAAAC,UAAQ;AAChC,YAAM,aAAaA,MAAK,QAAQ;AAEhC,aAAOD;AAAA,QACLC,MAAK,UACF,OAAO,cAAY,WAAW,SAAS,SAAS,MAAM,CAAC,EACvD;AAAA,UAAI,cACH,WAAU;AAAA,YACR,GAAG,IAAI,IAAI,SAAS,IAAI;AAAA,YACxB,EAAE,MAAM,YAAY,GAAGA,OAAM,SAAS;AAAA,YACtC;AAAA,UACF;AAAA,QACF;AAAA,MACJ;AAAA,IACF,CAAC;AAAA,EACH;AACF;;;AI3HA,SAAS,mBAAmB;AAC5B,SAAS,kBAAkB;AAEpB,SAAS,mBAAmB;AACjC,SAAO,WAAW,MAAM,YAAY,EAAE,CAAC,EAAE;AAC3C;;;ACJA;AAAA,EACE;AAAA,EACA;AAAA,EACA,UAAAC;AAAA,OAIK;AACP,OAAO,WAAW,qBAAqB;AACvC,SAAS,eAAAC,oBAAmB;AAErB,SAAS,kBAAkB,QAAyC;AACzE,QAAM,UAAU,CAAC,OAAO,OAAO,MAAM,0BAA0B;AAE/D,MAAI,OAAO,gBAAgB,MAAM;AAC/B,YAAQ,KAAK,MAAM,OAAO,eAAe,KAAK,SAAS,CAAC;AAAA,EAC1D;AAEA,MAAI,OAAO,gBAAgB,YAAY;AACrC,YAAQ,KAAK,MAAM,cAAc;AAAA,EACnC;AAEA,QAAM,WAAW,OAAO,gBAAgB,YAAY,OAAO;AAC3D,QAAM,OAAO,OAAO,gBAAgB,QAAQ;AAE5C,UAAQ,KAAK,GAAG,IAAI,IAAI,QAAQ,EAAE;AAElC,MAAI,OAAO,gBAAgB,UAAU;AACnC,YAAQ,QAAQ,WAAW,MAAM,WAAW;AAAA,EAC9C;AAEA,SAAO;AAAA,IACL,MAAM;AAAA,IACN,OAAO,QAAQ,oBAAoB,CAAC;AAAA,IACpC,aAAa;AAAA,IACb,OAAO;AAAA,IACP;AAAA,IAEA,OAAO;AAAA,MACL,aAAa,OAAO,gBAAgB;AAAA,MAEpC,gBAAgB;AAAA,QACd,SAAS,OAAO,gBAAgB;AAAA,QAChC,MAAM;AAAA,MACR;AAAA,IACF;AAAA,EACF;AACF;AAEO,SAAS,qBAA6B;AAC3C,QAAM,OAAOA,aAAY,EAAE;AAE3B,SAAO,QAAQ,IAAI,EAAE;AACvB;AAEO,SAAS,kBAAkB,YAAoB;AACpD,QAAM,mBAAmB,cAAc,OAAO,UAAU;AAGxD,QAAM,UAAU,iBAAiB,KAAK,CAAC,EAAE,QAAQ;AAEjD,SAAO,QAAQ,QAAQ,MAAM,GAAG,EAAE,CAAC;AACrC;AAUO,SAAS,sBACd,QACA,SACqB;AACrB,MAAI,OAAO,YAAY;AACrB,WAAOD,QAAO,OAAO,UAAU;AAAA,EACjC;AAEA,QAAM,aAAa,kBAAkB,SAAS,iBAAiB,kBAAkB;AACjF,QAAM,OAAO,WAAW,MAAM,iBAAiB;AAE/C,SAAOA,QAAO;AAAA,IACZ,MAAM;AAAA,IACN;AAAA,IACA,WAAW,KAAK;AAAA,EAClB,CAAC;AACH;;;ACvFO,SAAS,mBAAmB,YAAuC;AACxE,SAAO,GAAG,WAAW,QAAQ,IAAI,WAAW,IAAI;AAClD;AAEO,SAAS,gBAAgB,YAAuC;AACrE,QAAM,CAAC,UAAU,IAAI,IAAI,WAAW,MAAM,GAAG;AAE7C,MAAI,CAAC,MAAM;AACT,UAAM,IAAI,MAAM,wBAAwB,UAAU,EAAE;AAAA,EACtD;AAEA,SAAO;AAAA,IACL;AAAA,IACA,MAAM,SAAS,MAAM,EAAE;AAAA,EACzB;AACF;","names":["server","output","n","u","n","u","output","args","output","randomBytes"]}

package/dist/dns/record/index.js

@@ -1 +0,0 @@
-//# sourceMappingURL=index.js.map

package/dist/dns/record/index.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":[],"sourcesContent":[],"mappings":"","names":[]}

package/dist/existing-server/index.js

@@ -1,48 +0,0 @@
-import {
-  createSshTerminal
-} from "../chunk-ZA27FN5N.js";
-
-// src/existing-server/index.ts
-import { common } from "@highstate/library";
-import { forUnit, output } from "@highstate/pulumi";
-import { remote } from "@pulumi/command";
-var { args, inputs, secrets, outputs } = forUnit(common.existingServer);
-var privateKey = inputs.sshKeyPair?.privateKey ?? secrets.sshPrivateKey;
-var hostnameResult = new remote.Command("hostname", {
-  connection: output({
-    host: args.endpoint,
-    port: args.sshPort,
-    user: args.sshUser,
-    password: secrets.sshPassword,
-    privateKey,
-    dialErrorLimit: 3
-  }),
-  create: "hostname",
-  triggers: [Date.now()]
-});
-var hostname = hostnameResult.stdout.apply((x) => x.trim());
-var server = output({
-  endpoint: args.endpoint,
-  hostname,
-  sshCredentials: {
-    user: args.sshUser,
-    port: args.sshPort,
-    password: secrets.sshPassword,
-    privateKey
-  }
-});
-var existing_server_default = outputs({
-  server,
-  $status: {
-    hostname: {
-      value: hostname
-    }
-  },
-  $terminals: {
-    ssh: server.apply(createSshTerminal)
-  }
-});
-export {
-  existing_server_default as default
-};
-//# sourceMappingURL=index.js.map

package/dist/existing-server/index.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../../src/existing-server/index.ts"],"sourcesContent":["import { common } from \"@highstate/library\"\nimport { forUnit, Output, output } from \"@highstate/pulumi\"\nimport { remote } from \"@pulumi/command\"\nimport { createSshTerminal } from \"../shared\"\n\nconst { args, inputs, secrets, outputs } = forUnit(common.existingServer)\n\nconst privateKey = inputs.sshKeyPair?.privateKey ?? secrets.sshPrivateKey\n\nconst hostnameResult = new remote.Command(\"hostname\", {\n  connection: output({\n    host: args.endpoint,\n    port: args.sshPort,\n    user: args.sshUser,\n    password: secrets.sshPassword,\n    privateKey,\n    dialErrorLimit: 3,\n  }),\n  create: \"hostname\",\n  triggers: [Date.now()],\n})\n\nconst hostname = hostnameResult.stdout.apply(x => x.trim())\n\nconst server: Output<common.Server> = output({\n  endpoint: args.endpoint,\n  hostname,\n  sshCredentials: {\n    user: args.sshUser,\n    port: args.sshPort,\n    password: secrets.sshPassword,\n    privateKey,\n  },\n})\n\nexport default outputs({\n  server,\n  $status: {\n    hostname: {\n      value: hostname,\n    },\n  },\n  $terminals: {\n    ssh: server.apply(createSshTerminal),\n  },\n})\n"],"mappings":";;;;;AAAA,SAAS,cAAc;AACvB,SAAS,SAAiB,cAAc;AACxC,SAAS,cAAc;AAGvB,IAAM,EAAE,MAAM,QAAQ,SAAS,QAAQ,IAAI,QAAQ,OAAO,cAAc;AAExE,IAAM,aAAa,OAAO,YAAY,cAAc,QAAQ;AAE5D,IAAM,iBAAiB,IAAI,OAAO,QAAQ,YAAY;AAAA,EACpD,YAAY,OAAO;AAAA,IACjB,MAAM,KAAK;AAAA,IACX,MAAM,KAAK;AAAA,IACX,MAAM,KAAK;AAAA,IACX,UAAU,QAAQ;AAAA,IAClB;AAAA,IACA,gBAAgB;AAAA,EAClB,CAAC;AAAA,EACD,QAAQ;AAAA,EACR,UAAU,CAAC,KAAK,IAAI,CAAC;AACvB,CAAC;AAED,IAAM,WAAW,eAAe,OAAO,MAAM,OAAK,EAAE,KAAK,CAAC;AAE1D,IAAM,SAAgC,OAAO;AAAA,EAC3C,UAAU,KAAK;AAAA,EACf;AAAA,EACA,gBAAgB;AAAA,IACd,MAAM,KAAK;AAAA,IACX,MAAM,KAAK;AAAA,IACX,UAAU,QAAQ;AAAA,IAClB;AAAA,EACF;AACF,CAAC;AAED,IAAO,0BAAQ,QAAQ;AAAA,EACrB;AAAA,EACA,SAAS;AAAA,IACP,UAAU;AAAA,MACR,OAAO;AAAA,IACT;AAAA,EACF;AAAA,EACA,YAAY;AAAA,IACV,KAAK,OAAO,MAAM,iBAAiB;AAAA,EACrC;AACF,CAAC;","names":[]}

package/dist/script/index.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../../src/script/index.ts"],"sourcesContent":["import { common } from \"@highstate/library\"\nimport { forUnit } from \"@highstate/pulumi\"\nimport { Server } from \"../shared\"\n\nconst { name, args, inputs, outputs } = forUnit(common.script)\n\nconst server = new Server(inputs.server)\n\nserver.command({\n  id: name,\n  create: args.script,\n  update: args.updateScript,\n  delete: args.deleteScript,\n})\n\nexport default outputs({\n  server: inputs.server,\n})\n"],"mappings":";;;;;AAAA,SAAS,cAAc;AACvB,SAAS,eAAe;AAGxB,IAAM,EAAE,MAAM,MAAM,QAAQ,QAAQ,IAAI,QAAQ,OAAO,MAAM;AAE7D,IAAM,SAAS,IAAI,OAAO,OAAO,MAAM;AAEvC,OAAO,QAAQ;AAAA,EACb,IAAI;AAAA,EACJ,QAAQ,KAAK;AAAA,EACb,QAAQ,KAAK;AAAA,EACb,QAAQ,KAAK;AACf,CAAC;AAED,IAAO,iBAAQ,QAAQ;AAAA,EACrB,QAAQ,OAAO;AACjB,CAAC;","names":[]}