@highstate/nixos 0.19.1 → 0.21.1

package/dist/highstate.manifest.json

@@ -1,7 +1,7 @@
 {
   "sourceHashes": {
-    "./dist/inline-flake/index.js": 3236905120,
-    "./dist/inline-module/index.js": 3070693262,
-    "./dist/system/index.js": 1831815835
+    "./dist/inline-flake/index.js": 3199952428,
+    "./dist/inline-module/index.js": 972761601,
+    "./dist/system/index.js": 948362688
   }
 }

package/dist/inline-flake/index.js

@@ -1,16 +1,16 @@
-import { writeFile, readFile, access } from 'node:fs/promises';
-import { join } from 'node:path';
-import { MaterializedFolder, MaterializedFile, Command } from '@highstate/common';
-import { text } from '@highstate/contract';
-import { MaterializedRepository } from '@highstate/git';
-import { nixos } from '@highstate/library';
-import { forUnit, toPromise } from '@highstate/pulumi';
-
+// @bun
 // src/inline-flake/index.ts
+import { access, readFile, writeFile } from "fs/promises";
+import { join } from "path";
+import { Command, MaterializedFile, MaterializedFolder } from "@highstate/common";
+import { text } from "@highstate/contract";
+import { MaterializedRepository } from "@highstate/git";
+import { nixos } from "@highstate/library";
+import { forUnit } from "@highstate/pulumi";
 var { name, args, inputs, outputs } = forUnit(nixos.inlineFlake);
-var { folders, files } = await toPromise(inputs);
 var flakeRepo = await MaterializedRepository.create(args.flakeName ?? name);
-var firstOpenBrace = args.code.indexOf("{\n");
+var firstOpenBrace = args.code.indexOf(`{
+`);
 if (firstOpenBrace === -1) {
   firstOpenBrace = args.code.indexOf("{");
 }
@@ -26,17 +26,18 @@ var hasFlake = async (folder) => {
     return false;
   }
 };
-for (const inputFolder of folders ?? []) {
+for (const inputFolder of inputs.folders) {
   const folder = await MaterializedFolder.open(inputFolder, flakeRepo.folder);
   if (await hasFlake(folder)) {
     codeParts.push(`inputs.${inputFolder.meta.name}.url = "path:./${folder.entity.meta.name}";`);
   }
 }
-for (const inputFile of files ?? []) {
+for (const inputFile of inputs.files ?? []) {
   await MaterializedFile.open(inputFile, flakeRepo.folder);
 }
 codeParts.push("", args.code.slice(firstOpenBrace + 1).trim(), "");
-var generatedCode = codeParts.join("\n");
+var generatedCode = codeParts.join(`
+`);
 await writeFile(join(flakeRepo.path, "flake.nix"), generatedCode);
 await flakeRepo.git.add(".");
 await new Command("format-flake", {
@@ -85,7 +86,6 @@ var inline_flake_default = outputs({
     }
   }
 });
-
-export { inline_flake_default as default };
-//# sourceMappingURL=index.js.map
-//# sourceMappingURL=index.js.map
+export {
+  inline_flake_default as default
+};

package/dist/inline-module/index.js

@@ -1,34 +1,40 @@
-import { nixos } from '@highstate/library';
-import { forUnit, toPromise } from '@highstate/pulumi';
-
+// @bun
 // src/inline-module/index.ts
-var { name, args, inputs, outputs } = forUnit(nixos.inlineModule);
+import { common, nixos } from "@highstate/library";
+import { forUnit, makeEntityOutput, makeFile } from "@highstate/pulumi";
+var {
+  name,
+  stateId,
+  args,
+  inputs: { files, folders },
+  outputs
+} = forUnit(nixos.inlineModule);
 var moduleName = args.moduleName ?? name;
-var { files, folders } = await toPromise(inputs);
 var inline_module_default = outputs({
-  folder: {
+  folder: makeEntityOutput({
+    entity: common.folderEntity,
+    identity: stateId,
     meta: {
-      name: moduleName
+      title: moduleName
     },
-    content: {
-      type: "embedded",
+    value: {
+      meta: {
+        name: moduleName
+      },
+      content: {
+        type: "embedded"
+      },
       files: [
-        ...files ?? [],
-        {
-          meta: {
-            name: "default.nix"
-          },
-          content: {
-            type: "embedded",
-            value: args.code
-          }
-        }
+        ...files,
+        makeFile({
+          name: "default.nix",
+          content: args.code
+        })
       ],
-      folders: folders ?? []
+      folders
     }
-  }
+  })
 });
-
-export { inline_module_default as default };
-//# sourceMappingURL=index.js.map
-//# sourceMappingURL=index.js.map
+export {
+  inline_module_default as default
+};

package/dist/system/index.js

@@ -1,9 +1,15 @@
-import { MaterializedFile, createSshHostKeyFile, Command, l3EndpointToString, createSshTerminal } from '@highstate/common';
-import { MaterializedRepository } from '@highstate/git';
-import { nixos } from '@highstate/library';
-import { forUnit, toPromise } from '@highstate/pulumi';
-
+// @bun
 // src/system/index.ts
+import {
+  Command,
+  createSshHostKeyFile,
+  createSshTerminal,
+  l3EndpointToString,
+  MaterializedFile
+} from "@highstate/common";
+import { MaterializedRepository } from "@highstate/git";
+import { nixos } from "@highstate/library";
+import { forUnit, toPromise } from "@highstate/pulumi";
 var { args, inputs, outputs } = forUnit(nixos.system);
 var { flake, server } = await toPromise(inputs);
 if (!server.ssh) {
@@ -11,16 +17,19 @@ if (!server.ssh) {
 }
 var repo = await MaterializedRepository.open(flake);
 await repo.git.add(".");
-var privateKey = await MaterializedFile.create(
-  "private-key",
-  server.ssh.keyPair?.privateKey,
-  384
-);
+if (!server.ssh.keyPair?.privateKey) {
+  throw new Error("Server must have an SSH private key");
+}
+var privateKey = await MaterializedFile.create({
+  name: "private-key",
+  content: server.ssh.keyPair.privateKey.value,
+  isSecret: true,
+  mode: 384
+});
 var hostKey = await MaterializedFile.open(createSshHostKeyFile(server));
 var system = args.system ?? server.hostname;
 await new Command("system", {
   host: "local",
-  // install the system using nixos-anywhere if not already installed
   create: [
     "nixos-anywhere",
     `--flake ${repo.path}#${system}`,
@@ -29,7 +38,6 @@ await new Command("system", {
     `--ssh-port ${server.ssh.endpoints[0].port}`,
     "--copy-host-keys"
   ],
-  // switch to the latest configuration on every update
   update: [
     `NIX_SSHOPTS="${[
       `-o IdentityFile=${privateKey.path}`,
@@ -48,7 +56,6 @@ var system_default = outputs({
   server: inputs.server,
   $terminals: [createSshTerminal(server.ssh)]
 });
-
-export { system_default as default };
-//# sourceMappingURL=index.js.map
-//# sourceMappingURL=index.js.map
+export {
+  system_default as default
+};

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@highstate/nixos",
-  "version": "0.19.1",
+  "version": "0.21.1",
   "type": "module",
   "files": [
     "dist"
@@ -18,28 +18,28 @@
       "stdlib"
     ]
   },
+  "scripts": {
+    "build": "highstate build",
+    "typecheck": "tsgo --noEmit --skipLibCheck",
+    "biome": "biome check --write --unsafe --error-on-warnings",
+    "biome:check": "biome check --error-on-warnings"
+  },
   "dependencies": {
+    "@highstate/common": "0.20.0",
+    "@highstate/contract": "0.20.0",
+    "@highstate/git": "0.20.0",
+    "@highstate/library": "0.20.0",
+    "@highstate/pulumi": "0.20.0",
     "@pulumi/kubernetes": "^4.18.0",
-    "@pulumi/pulumi": "3.198.0",
-    "remeda": "^2.21.3",
-    "@highstate/common": "0.19.1",
-    "@highstate/contract": "0.19.1",
-    "@highstate/git": "0.19.1",
-    "@highstate/library": "0.19.1",
-    "@highstate/pulumi": "0.19.1"
+    "@pulumi/pulumi": "3.232.0",
+    "remeda": "^2.21.3"
   },
   "devDependencies": {
     "@biomejs/biome": "2.2.0",
-    "@typescript/native-preview": "^7.0.0-dev.20250920.1",
-    "@highstate/cli": "0.19.1"
+    "@highstate/cli": "0.20.0",
+    "@typescript/native-preview": "^7.0.0-dev.20250920.1"
   },
   "repository": {
     "url": "https://github.com/highstate-io/highstate"
-  },
-  "scripts": {
-    "build": "highstate build",
-    "typecheck": "tsgo --noEmit --skipLibCheck",
-    "biome": "biome check --write --unsafe --error-on-warnings",
-    "biome:check": "biome check --error-on-warnings"
   }
-}
+}

package/LICENSE

@@ -1,21 +0,0 @@
-MIT License
-
-Copyright (c) 2025 Exeteres
-
-Permission is hereby granted, free of charge, to any person obtaining a copy
-of this software and associated documentation files (the "Software"), to deal
-in the Software without restriction, including without limitation the rights
-to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
-copies of the Software, and to permit persons to whom the Software is
-furnished to do so, subject to the following conditions:
-
-The above copyright notice and this permission notice shall be included in all
-copies or substantial portions of the Software.
-
-THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
-IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
-FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
-AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
-LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
-OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
-SOFTWARE.

package/dist/inline-flake/index.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../../src/inline-flake/index.ts"],"names":[],"mappings":";;;;;;;;;AAQA,IAAM,EAAE,MAAM,IAAA,EAAM,MAAA,EAAQ,SAAQ,GAAI,OAAA,CAAQ,MAAM,WAAW,CAAA;AAEjE,IAAM,EAAE,OAAA,EAAS,KAAA,EAAM,GAAI,MAAM,UAAU,MAAM,CAAA;AAEjD,IAAM,YAAY,MAAM,sBAAA,CAAuB,MAAA,CAAO,IAAA,CAAK,aAAa,IAAI,CAAA;AAE5E,IAAI,cAAA,GAAiB,IAAA,CAAK,IAAA,CAAK,OAAA,CAAQ,KAAK,CAAA;AAC5C,IAAI,mBAAmB,EAAA,EAAI;AACzB,EAAA,cAAA,GAAiB,IAAA,CAAK,IAAA,CAAK,OAAA,CAAQ,GAAG,CAAA;AACxC;AAEA,IAAI,mBAAmB,EAAA,EAAI;AACzB,EAAA,MAAM,IAAI,MAAM,iEAAiE,CAAA;AACnF;AAEA,IAAM,SAAA,GAAY,CAAC,IAAA,CAAK,IAAA,CAAK,KAAA,CAAM,CAAA,EAAG,cAAA,GAAiB,CAAC,CAAA,CAAE,IAAA,EAAK,EAAG,EAAE,CAAA;AAEpE,IAAM,QAAA,GAAW,OAAO,MAAA,KAA+B;AACrD,EAAA,IAAI;AACF,IAAA,MAAM,MAAA,CAAO,IAAA,CAAK,MAAA,CAAO,IAAA,EAAM,WAAW,CAAC,CAAA;AAC3C,IAAA,OAAO,IAAA;AAAA,EACT,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,KAAA;AAAA,EACT;AACF,CAAA;AAEA,KAAA,MAAW,WAAA,IAAe,OAAA,IAAW,EAAC,EAAG;AACvC,EAAA,MAAM,SAAS,MAAM,kBAAA,CAAmB,IAAA,CAAK,WAAA,EAAa,UAAU,MAAM,CAAA;AAE1E,EAAA,IAAI,MAAM,QAAA,CAAS,MAAM,CAAA,EAAG;AAC1B,IAAA,SAAA,CAAU,IAAA,CAAK,CAAA,OAAA,EAAU,WAAA,CAAY,IAAA,CAAK,IAAI,kBAAkB,MAAA,CAAO,MAAA,CAAO,IAAA,CAAK,IAAI,CAAA,EAAA,CAAI,CAAA;AAAA,EAC7F;AACF;AAEA,KAAA,MAAW,SAAA,IAAa,KAAA,IAAS,EAAC,EAAG;AACnC,EAAA,MAAM,gBAAA,CAAiB,IAAA,CAAK,SAAA,EAAW,SAAA,CAAU,MAAM,CAAA;AACzD;AAEA,SAAA,CAAU,IAAA,CAAK,EAAA,EAAI,IAAA,CAAK,IAAA,CAAK,KAAA,CAAM,iBAAiB,CAAC,CAAA,CAAE,IAAA,EAAK,EAAG,EAAE,CAAA;AACjE,IAAM,aAAA,GAAgB,SAAA,CAAU,IAAA,CAAK,IAAI,CAAA;AAEzC,MAAM,UAAU,IAAA,CAAK,SAAA,CAAU,IAAA,EAAM,WAAW,GAAG,aAAa,CAAA;AAChE,MAAM,SAAA,CAAU,GAAA,CAAI,GAAA,CAAI,GAAG,CAAA;AAG3B,MAAM,IAAI,QAAQ,cAAA,EAAgB;AAAA,EAChC,IAAA,EAAM,OAAA;AAAA,EACN,MAAA,EAAQ,CAAA,sDAAA,CAAA;AAAA,EACR,KAAK,SAAA,CAAU;AACjB,CAAC,EAAE,IAAA,EAAK;AAER,IAAM,aAAA,GAAgB,MAAM,QAAA,CAAS,IAAA,CAAK,UAAU,IAAA,EAAM,WAAW,GAAG,OAAO,CAAA;AAG/E,MAAM,IAAI,QAAQ,cAAA,EAAgB;AAAA,EAChC,IAAA,EAAM,OAAA;AAAA,EACN,MAAA,EAAQ,kBAAA;AAAA,EACR,KAAK,SAAA,CAAU;AACjB,CAAC,EAAE,IAAA,EAAK;AAER,IAAM,WAAA,GAAc,MAAM,QAAA,CAAS,IAAA,CAAK,UAAU,IAAA,EAAM,YAAY,GAAG,OAAO,CAAA;AAE9E,IAAO,uBAAQ,OAAA,CAAQ;AAAA,EACrB,MAAA,EAAQ,UAAU,IAAA,EAAK;AAAA,EAEvB,MAAA,EAAQ;AAAA,IACN,KAAA,EAAO;AAAA,MACL,IAAA,EAAM;AAAA,QACJ,KAAA,EAAO,qBAAA;AAAA,QACP,WAAA,EAAa,+DAAA;AAAA,QACb,IAAA,EAAM;AAAA,OACR;AAAA,MACA,OAAA,EAAS;AAAA,QACP;AAAA,UACE,IAAA,EAAM,UAAA;AAAA,UACN,OAAA,EAAS,IAAA;AAAA;;AAAA;AAAA,YAAA,EAIL,aAAa;AAAA;AAAA,UAAA;AAAA,SAGnB;AAAA,QACA;AAAA,UACE,IAAA,EAAM,UAAA;AAAA,UACN,OAAA,EAAS,IAAA;AAAA;;AAAA;AAAA,YAAA,EAIL,WAAW;AAAA;AAAA,UAAA;AAAA;AAGjB;AACF;AACF;AAEJ,CAAC","file":"index.js","sourcesContent":["import { access, readFile, writeFile } from \"node:fs/promises\"\nimport { join } from \"node:path\"\nimport { Command, MaterializedFile, MaterializedFolder } from \"@highstate/common\"\nimport { text } from \"@highstate/contract\"\nimport { MaterializedRepository } from \"@highstate/git\"\nimport { nixos } from \"@highstate/library\"\nimport { forUnit, toPromise } from \"@highstate/pulumi\"\n\nconst { name, args, inputs, outputs } = forUnit(nixos.inlineFlake)\n\nconst { folders, files } = await toPromise(inputs)\n\nconst flakeRepo = await MaterializedRepository.create(args.flakeName ?? name)\n\nlet firstOpenBrace = args.code.indexOf(\"{\\n\")\nif (firstOpenBrace === -1) {\n  firstOpenBrace = args.code.indexOf(\"{\")\n}\n\nif (firstOpenBrace === -1) {\n  throw new Error(\"The provided code does not contain a valid flake.nix structure.\")\n}\n\nconst codeParts = [args.code.slice(0, firstOpenBrace + 1).trim(), \"\"]\n\nconst hasFlake = async (folder: MaterializedFolder) => {\n  try {\n    await access(join(folder.path, \"flake.nix\"))\n    return true\n  } catch {\n    return false\n  }\n}\n\nfor (const inputFolder of folders ?? []) {\n  const folder = await MaterializedFolder.open(inputFolder, flakeRepo.folder)\n\n  if (await hasFlake(folder)) {\n    codeParts.push(`inputs.${inputFolder.meta.name}.url = \"path:./${folder.entity.meta.name}\";`)\n  }\n}\n\nfor (const inputFile of files ?? []) {\n  await MaterializedFile.open(inputFile, flakeRepo.folder)\n}\n\ncodeParts.push(\"\", args.code.slice(firstOpenBrace + 1).trim(), \"\")\nconst generatedCode = codeParts.join(\"\\n\")\n\nawait writeFile(join(flakeRepo.path, \"flake.nix\"), generatedCode)\nawait flakeRepo.git.add(\".\")\n\n// format the code with nixfmt\nawait new Command(\"format-flake\", {\n  host: \"local\",\n  create: `nix-shell -p nixfmt-rfc-style --run \"nixfmt flake.nix\"`,\n  cwd: flakeRepo.path,\n}).wait()\n\nconst formattedCode = await readFile(join(flakeRepo.path, \"flake.nix\"), \"utf-8\")\n\n// run nix flake update to generate the lock file and check for errors\nawait new Command(\"update-flake\", {\n  host: \"local\",\n  create: \"nix flake update\",\n  cwd: flakeRepo.path,\n}).wait()\n\nconst lockContent = await readFile(join(flakeRepo.path, \"flake.lock\"), \"utf-8\")\n\nexport default outputs({\n  folder: flakeRepo.pack(),\n\n  $pages: {\n    index: {\n      meta: {\n        title: \"Generated flake.nix\",\n        description: \"The generated flake.nix file from the provided template code.\",\n        icon: \"mdi:file-code\",\n      },\n      content: [\n        {\n          type: \"markdown\",\n          content: text`\n            The following \\`flake.nix\\` file was generated:\n\n            \\`\\`\\`nix\n            ${formattedCode}\n            \\`\\`\\`\n          `,\n        },\n        {\n          type: \"markdown\",\n          content: text`\n            The following inputs were locked:\n\n            \\`\\`\\`nix\n            ${lockContent}\n            \\`\\`\\`\n          `,\n        },\n      ],\n    },\n  },\n})\n"]}

package/dist/inline-module/index.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../../src/inline-module/index.ts"],"names":[],"mappings":";;;;AAGA,IAAM,EAAE,MAAM,IAAA,EAAM,MAAA,EAAQ,SAAQ,GAAI,OAAA,CAAQ,MAAM,YAAY,CAAA;AAElE,IAAM,UAAA,GAAa,KAAK,UAAA,IAAc,IAAA;AACtC,IAAM,EAAE,KAAA,EAAO,OAAA,EAAQ,GAAI,MAAM,UAAU,MAAM,CAAA;AAEjD,IAAO,wBAAQ,OAAA,CAAQ;AAAA,EACrB,MAAA,EAAQ;AAAA,IACN,IAAA,EAAM;AAAA,MACJ,IAAA,EAAM;AAAA,KACR;AAAA,IACA,OAAA,EAAS;AAAA,MACP,IAAA,EAAM,UAAA;AAAA,MACN,KAAA,EAAO;AAAA,QACL,GAAI,SAAS,EAAC;AAAA,QACd;AAAA,UACE,IAAA,EAAM;AAAA,YACJ,IAAA,EAAM;AAAA,WACR;AAAA,UACA,OAAA,EAAS;AAAA,YACP,IAAA,EAAM,UAAA;AAAA,YACN,OAAO,IAAA,CAAK;AAAA;AACd;AACF,OACF;AAAA,MACA,OAAA,EAAS,WAAW;AAAC;AACvB;AAEJ,CAAC","file":"index.js","sourcesContent":["import { nixos } from \"@highstate/library\"\nimport { forUnit, toPromise } from \"@highstate/pulumi\"\n\nconst { name, args, inputs, outputs } = forUnit(nixos.inlineModule)\n\nconst moduleName = args.moduleName ?? name\nconst { files, folders } = await toPromise(inputs)\n\nexport default outputs({\n  folder: {\n    meta: {\n      name: moduleName,\n    },\n    content: {\n      type: \"embedded\",\n      files: [\n        ...(files ?? []),\n        {\n          meta: {\n            name: \"default.nix\",\n          },\n          content: {\n            type: \"embedded\",\n            value: args.code,\n          },\n        },\n      ],\n      folders: folders ?? [],\n    },\n  },\n})\n"]}

package/dist/system/index.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../../src/system/index.ts"],"names":[],"mappings":";;;;;;AAWA,IAAM,EAAE,IAAA,EAAM,MAAA,EAAQ,SAAQ,GAAI,OAAA,CAAQ,MAAM,MAAM,CAAA;AAEtD,IAAM,EAAE,KAAA,EAAO,MAAA,EAAO,GAAI,MAAM,UAAU,MAAM,CAAA;AAEhD,IAAI,CAAC,OAAO,GAAA,EAAK;AACf,EAAA,MAAM,IAAI,MAAM,0CAA0C,CAAA;AAC5D;AAEA,IAAM,IAAA,GAAO,MAAM,sBAAA,CAAuB,IAAA,CAAK,KAAK,CAAA;AACpD,MAAM,IAAA,CAAK,GAAA,CAAI,GAAA,CAAI,GAAG,CAAA;AAEtB,IAAM,UAAA,GAAa,MAAM,gBAAA,CAAiB,MAAA;AAAA,EACxC,aAAA;AAAA,EACA,MAAA,CAAO,IAAI,OAAA,EAAS,UAAA;AAAA,EACpB;AACF,CAAA;AAEA,IAAM,UAAU,MAAM,gBAAA,CAAiB,IAAA,CAAK,oBAAA,CAAqB,MAAM,CAAC,CAAA;AAExE,IAAM,MAAA,GAAS,IAAA,CAAK,MAAA,IAAU,MAAA,CAAO,QAAA;AAErC,MAAM,IAAI,QAAQ,QAAA,EAAU;AAAA,EAC1B,IAAA,EAAM,OAAA;AAAA;AAAA,EAGN,MAAA,EAAQ;AAAA,IACN,gBAAA;AAAA,IACA,CAAA,QAAA,EAAW,IAAA,CAAK,IAAI,CAAA,CAAA,EAAI,MAAM,CAAA,CAAA;AAAA,IAC9B,CAAA,GAAA,EAAM,WAAW,IAAI,CAAA,CAAA;AAAA,IACrB,CAAA,cAAA,EAAiB,MAAA,CAAO,GAAA,CAAI,IAAI,CAAA,CAAA,EAAI,kBAAA,CAAmB,MAAA,CAAO,GAAA,CAAI,SAAA,CAAU,CAAC,CAAC,CAAC,CAAA,CAAA;AAAA,IAC/E,cAAc,MAAA,CAAO,GAAA,CAAI,SAAA,CAAU,CAAC,EAAE,IAAI,CAAA,CAAA;AAAA,IAC1C;AAAA,GACF;AAAA;AAAA,EAGA,MAAA,EAAQ;AAAA,IACN,CAAA,aAAA,EAAgB;AAAA,MACd,CAAA,gBAAA,EAAmB,WAAW,IAAI,CAAA,CAAA;AAAA,MAClC,CAAA,4BAAA,CAAA;AAAA,MACA,CAAA,sBAAA,EAAyB,QAAQ,IAAI,CAAA,CAAA;AAAA,MACrC,MAAM,MAAA,CAAO,GAAA,CAAI,SAAA,CAAU,CAAC,EAAE,IAAI,CAAA;AAAA,KACpC,CAAE,IAAA,CAAK,GAAG,CAAC,CAAA,CAAA,CAAA;AAAA,IAEX,eAAA;AAAA,IACA,QAAA;AAAA,IACA,CAAA,QAAA,EAAW,IAAA,CAAK,IAAI,CAAA,CAAA,EAAI,MAAM,CAAA,CAAA;AAAA,IAC9B,CAAA,iBAAA,CAAA;AAAA,IACA,CAAA,cAAA,EAAiB,MAAA,CAAO,GAAA,CAAI,IAAI,CAAA,CAAA,EAAI,kBAAA,CAAmB,MAAA,CAAO,GAAA,CAAI,SAAA,CAAU,CAAC,CAAC,CAAC,CAAA;AAAA;AAEnF,CAAC,EAAE,IAAA,EAAK;AAER,IAAO,iBAAQ,OAAA,CAAQ;AAAA,EACrB,QAAQ,MAAA,CAAO,MAAA;AAAA,EAEf,UAAA,EAAY,CAAC,iBAAA,CAAkB,MAAA,CAAO,GAAG,CAAC;AAC5C,CAAC","file":"index.js","sourcesContent":["import {\n  Command,\n  createSshHostKeyFile,\n  createSshTerminal,\n  l3EndpointToString,\n  MaterializedFile,\n} from \"@highstate/common\"\nimport { MaterializedRepository } from \"@highstate/git\"\nimport { nixos } from \"@highstate/library\"\nimport { forUnit, toPromise } from \"@highstate/pulumi\"\n\nconst { args, inputs, outputs } = forUnit(nixos.system)\n\nconst { flake, server } = await toPromise(inputs)\n\nif (!server.ssh) {\n  throw new Error(\"Server must have an SSH endpoint defined\")\n}\n\nconst repo = await MaterializedRepository.open(flake)\nawait repo.git.add(\".\")\n\nconst privateKey = await MaterializedFile.create(\n  \"private-key\",\n  server.ssh.keyPair?.privateKey,\n  0o600,\n)\n\nconst hostKey = await MaterializedFile.open(createSshHostKeyFile(server))\n\nconst system = args.system ?? server.hostname\n\nawait new Command(\"system\", {\n  host: \"local\",\n\n  // install the system using nixos-anywhere if not already installed\n  create: [\n    \"nixos-anywhere\",\n    `--flake ${repo.path}#${system}`,\n    `-i ${privateKey.path}`,\n    `--target-host ${server.ssh.user}@${l3EndpointToString(server.ssh.endpoints[0])}`,\n    `--ssh-port ${server.ssh.endpoints[0].port}`,\n    \"--copy-host-keys\",\n  ],\n\n  // switch to the latest configuration on every update\n  update: [\n    `NIX_SSHOPTS=\"${[\n      `-o IdentityFile=${privateKey.path}`,\n      `-o StrictHostKeyChecking=yes`,\n      `-o UserKnownHostsFile=${hostKey.path}`,\n      `-p ${server.ssh.endpoints[0].port}`,\n    ].join(\" \")}\"`,\n\n    \"nixos-rebuild\",\n    \"switch\",\n    `--flake ${repo.path}#${system}`,\n    `--use-remote-sudo`,\n    `--target-host ${server.ssh.user}@${l3EndpointToString(server.ssh.endpoints[0])}`,\n  ],\n}).wait()\n\nexport default outputs({\n  server: inputs.server,\n\n  $terminals: [createSshTerminal(server.ssh)],\n})\n"]}