@highstate/nixos 0.20.0 → 0.21.1

package/dist/highstate.manifest.json

@@ -1,7 +1,7 @@
 {
   "sourceHashes": {
-    "./dist/inline-flake/index.js": 2619925202,
-    "./dist/inline-module/index.js": 3246713999,
-    "./dist/system/index.js": 2224580570
+    "./dist/inline-flake/index.js": 3199952428,
+    "./dist/inline-module/index.js": 972761601,
+    "./dist/system/index.js": 948362688
   }
 }

package/dist/inline-flake/index.js

@@ -1,15 +1,16 @@
-import { writeFile, readFile, access } from 'node:fs/promises';
-import { join } from 'node:path';
-import { MaterializedFolder, MaterializedFile, Command } from '@highstate/common';
-import { text } from '@highstate/contract';
-import { MaterializedRepository } from '@highstate/git';
-import { nixos } from '@highstate/library';
-import { forUnit } from '@highstate/pulumi';
-
+// @bun
 // src/inline-flake/index.ts
+import { access, readFile, writeFile } from "fs/promises";
+import { join } from "path";
+import { Command, MaterializedFile, MaterializedFolder } from "@highstate/common";
+import { text } from "@highstate/contract";
+import { MaterializedRepository } from "@highstate/git";
+import { nixos } from "@highstate/library";
+import { forUnit } from "@highstate/pulumi";
 var { name, args, inputs, outputs } = forUnit(nixos.inlineFlake);
 var flakeRepo = await MaterializedRepository.create(args.flakeName ?? name);
-var firstOpenBrace = args.code.indexOf("{\n");
+var firstOpenBrace = args.code.indexOf(`{
+`);
 if (firstOpenBrace === -1) {
   firstOpenBrace = args.code.indexOf("{");
 }
@@ -35,7 +36,8 @@ for (const inputFile of inputs.files ?? []) {
   await MaterializedFile.open(inputFile, flakeRepo.folder);
 }
 codeParts.push("", args.code.slice(firstOpenBrace + 1).trim(), "");
-var generatedCode = codeParts.join("\n");
+var generatedCode = codeParts.join(`
+`);
 await writeFile(join(flakeRepo.path, "flake.nix"), generatedCode);
 await flakeRepo.git.add(".");
 await new Command("format-flake", {
@@ -84,7 +86,6 @@ var inline_flake_default = outputs({
     }
   }
 });
-
-export { inline_flake_default as default };
-//# sourceMappingURL=index.js.map
-//# sourceMappingURL=index.js.map
+export {
+  inline_flake_default as default
+};

package/dist/inline-module/index.js

@@ -1,7 +1,7 @@
-import { nixos, common } from '@highstate/library';
-import { forUnit, makeEntityOutput, makeFile } from '@highstate/pulumi';
-
+// @bun
 // src/inline-module/index.ts
+import { common, nixos } from "@highstate/library";
+import { forUnit, makeEntityOutput, makeFile } from "@highstate/pulumi";
 var {
   name,
   stateId,
@@ -35,7 +35,6 @@ var inline_module_default = outputs({
     }
   })
 });
-
-export { inline_module_default as default };
-//# sourceMappingURL=index.js.map
-//# sourceMappingURL=index.js.map
+export {
+  inline_module_default as default
+};

package/dist/system/index.js

@@ -1,9 +1,15 @@
-import { MaterializedFile, createSshHostKeyFile, Command, l3EndpointToString, createSshTerminal } from '@highstate/common';
-import { MaterializedRepository } from '@highstate/git';
-import { nixos } from '@highstate/library';
-import { forUnit, toPromise } from '@highstate/pulumi';
-
+// @bun
 // src/system/index.ts
+import {
+  Command,
+  createSshHostKeyFile,
+  createSshTerminal,
+  l3EndpointToString,
+  MaterializedFile
+} from "@highstate/common";
+import { MaterializedRepository } from "@highstate/git";
+import { nixos } from "@highstate/library";
+import { forUnit, toPromise } from "@highstate/pulumi";
 var { args, inputs, outputs } = forUnit(nixos.system);
 var { flake, server } = await toPromise(inputs);
 if (!server.ssh) {
@@ -24,7 +30,6 @@ var hostKey = await MaterializedFile.open(createSshHostKeyFile(server));
 var system = args.system ?? server.hostname;
 await new Command("system", {
   host: "local",
-  // install the system using nixos-anywhere if not already installed
   create: [
     "nixos-anywhere",
     `--flake ${repo.path}#${system}`,
@@ -33,7 +38,6 @@ await new Command("system", {
     `--ssh-port ${server.ssh.endpoints[0].port}`,
     "--copy-host-keys"
   ],
-  // switch to the latest configuration on every update
   update: [
     `NIX_SSHOPTS="${[
       `-o IdentityFile=${privateKey.path}`,
@@ -52,7 +56,6 @@ var system_default = outputs({
   server: inputs.server,
   $terminals: [createSshTerminal(server.ssh)]
 });
-
-export { system_default as default };
-//# sourceMappingURL=index.js.map
-//# sourceMappingURL=index.js.map
+export {
+  system_default as default
+};

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@highstate/nixos",
-  "version": "0.20.0",
+  "version": "0.21.1",
   "type": "module",
   "files": [
     "dist"
@@ -18,28 +18,28 @@
       "stdlib"
     ]
   },
+  "scripts": {
+    "build": "highstate build",
+    "typecheck": "tsgo --noEmit --skipLibCheck",
+    "biome": "biome check --write --unsafe --error-on-warnings",
+    "biome:check": "biome check --error-on-warnings"
+  },
   "dependencies": {
-    "@pulumi/kubernetes": "^4.18.0",
-    "@pulumi/pulumi": "3.220.0",
-    "remeda": "^2.21.3",
     "@highstate/common": "0.20.0",
     "@highstate/contract": "0.20.0",
     "@highstate/git": "0.20.0",
+    "@highstate/library": "0.20.0",
     "@highstate/pulumi": "0.20.0",
-    "@highstate/library": "0.20.0"
+    "@pulumi/kubernetes": "^4.18.0",
+    "@pulumi/pulumi": "3.232.0",
+    "remeda": "^2.21.3"
   },
   "devDependencies": {
     "@biomejs/biome": "2.2.0",
-    "@typescript/native-preview": "^7.0.0-dev.20250920.1",
-    "@highstate/cli": "0.20.0"
+    "@highstate/cli": "0.20.0",
+    "@typescript/native-preview": "^7.0.0-dev.20250920.1"
   },
   "repository": {
     "url": "https://github.com/highstate-io/highstate"
-  },
-  "scripts": {
-    "build": "highstate build",
-    "typecheck": "tsgo --noEmit --skipLibCheck",
-    "biome": "biome check --write --unsafe --error-on-warnings",
-    "biome:check": "biome check --error-on-warnings"
   }
-}
+}

package/LICENSE

@@ -1,21 +0,0 @@
-MIT License
-
-Copyright (c) 2025 Exeteres
-
-Permission is hereby granted, free of charge, to any person obtaining a copy
-of this software and associated documentation files (the "Software"), to deal
-in the Software without restriction, including without limitation the rights
-to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
-copies of the Software, and to permit persons to whom the Software is
-furnished to do so, subject to the following conditions:
-
-The above copyright notice and this permission notice shall be included in all
-copies or substantial portions of the Software.
-
-THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
-IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
-FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
-AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
-LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
-OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
-SOFTWARE.

package/dist/inline-flake/index.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../../src/inline-flake/index.ts"],"names":[],"mappings":";;;;;;;;;AAQA,IAAM,EAAE,MAAM,IAAA,EAAM,MAAA,EAAQ,SAAQ,GAAI,OAAA,CAAQ,MAAM,WAAW,CAAA;AAEjE,IAAM,YAAY,MAAM,sBAAA,CAAuB,MAAA,CAAO,IAAA,CAAK,aAAa,IAAI,CAAA;AAE5E,IAAI,cAAA,GAAiB,IAAA,CAAK,IAAA,CAAK,OAAA,CAAQ,KAAK,CAAA;AAC5C,IAAI,mBAAmB,EAAA,EAAI;AACzB,EAAA,cAAA,GAAiB,IAAA,CAAK,IAAA,CAAK,OAAA,CAAQ,GAAG,CAAA;AACxC;AAEA,IAAI,mBAAmB,EAAA,EAAI;AACzB,EAAA,MAAM,IAAI,MAAM,iEAAiE,CAAA;AACnF;AAEA,IAAM,SAAA,GAAY,CAAC,IAAA,CAAK,IAAA,CAAK,KAAA,CAAM,CAAA,EAAG,cAAA,GAAiB,CAAC,CAAA,CAAE,IAAA,EAAK,EAAG,EAAE,CAAA;AAEpE,IAAM,QAAA,GAAW,OAAO,MAAA,KAA+B;AACrD,EAAA,IAAI;AACF,IAAA,MAAM,MAAA,CAAO,IAAA,CAAK,MAAA,CAAO,IAAA,EAAM,WAAW,CAAC,CAAA;AAC3C,IAAA,OAAO,IAAA;AAAA,EACT,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,KAAA;AAAA,EACT;AACF,CAAA;AAEA,KAAA,MAAW,WAAA,IAAe,OAAO,OAAA,EAAS;AACxC,EAAA,MAAM,SAAS,MAAM,kBAAA,CAAmB,IAAA,CAAK,WAAA,EAAa,UAAU,MAAM,CAAA;AAE1E,EAAA,IAAI,MAAM,QAAA,CAAS,MAAM,CAAA,EAAG;AAC1B,IAAA,SAAA,CAAU,IAAA,CAAK,CAAA,OAAA,EAAU,WAAA,CAAY,IAAA,CAAK,IAAI,kBAAkB,MAAA,CAAO,MAAA,CAAO,IAAA,CAAK,IAAI,CAAA,EAAA,CAAI,CAAA;AAAA,EAC7F;AACF;AAEA,KAAA,MAAW,SAAA,IAAa,MAAA,CAAO,KAAA,IAAS,EAAC,EAAG;AAC1C,EAAA,MAAM,gBAAA,CAAiB,IAAA,CAAK,SAAA,EAAW,SAAA,CAAU,MAAM,CAAA;AACzD;AAEA,SAAA,CAAU,IAAA,CAAK,EAAA,EAAI,IAAA,CAAK,IAAA,CAAK,KAAA,CAAM,iBAAiB,CAAC,CAAA,CAAE,IAAA,EAAK,EAAG,EAAE,CAAA;AACjE,IAAM,aAAA,GAAgB,SAAA,CAAU,IAAA,CAAK,IAAI,CAAA;AAEzC,MAAM,UAAU,IAAA,CAAK,SAAA,CAAU,IAAA,EAAM,WAAW,GAAG,aAAa,CAAA;AAChE,MAAM,SAAA,CAAU,GAAA,CAAI,GAAA,CAAI,GAAG,CAAA;AAG3B,MAAM,IAAI,QAAQ,cAAA,EAAgB;AAAA,EAChC,IAAA,EAAM,OAAA;AAAA,EACN,MAAA,EAAQ,CAAA,sDAAA,CAAA;AAAA,EACR,KAAK,SAAA,CAAU;AACjB,CAAC,EAAE,IAAA,EAAK;AAER,IAAM,aAAA,GAAgB,MAAM,QAAA,CAAS,IAAA,CAAK,UAAU,IAAA,EAAM,WAAW,GAAG,OAAO,CAAA;AAG/E,MAAM,IAAI,QAAQ,cAAA,EAAgB;AAAA,EAChC,IAAA,EAAM,OAAA;AAAA,EACN,MAAA,EAAQ,kBAAA;AAAA,EACR,KAAK,SAAA,CAAU;AACjB,CAAC,EAAE,IAAA,EAAK;AAER,IAAM,WAAA,GAAc,MAAM,QAAA,CAAS,IAAA,CAAK,UAAU,IAAA,EAAM,YAAY,GAAG,OAAO,CAAA;AAE9E,IAAO,uBAAQ,OAAA,CAAQ;AAAA,EACrB,MAAA,EAAQ,UAAU,IAAA,EAAK;AAAA,EAEvB,MAAA,EAAQ;AAAA,IACN,KAAA,EAAO;AAAA,MACL,IAAA,EAAM;AAAA,QACJ,KAAA,EAAO,qBAAA;AAAA,QACP,WAAA,EAAa,+DAAA;AAAA,QACb,IAAA,EAAM;AAAA,OACR;AAAA,MACA,OAAA,EAAS;AAAA,QACP;AAAA,UACE,IAAA,EAAM,UAAA;AAAA,UACN,OAAA,EAAS,IAAA;AAAA;;AAAA;AAAA,YAAA,EAIL,aAAa;AAAA;AAAA,UAAA;AAAA,SAGnB;AAAA,QACA;AAAA,UACE,IAAA,EAAM,UAAA;AAAA,UACN,OAAA,EAAS,IAAA;AAAA;;AAAA;AAAA,YAAA,EAIL,WAAW;AAAA;AAAA,UAAA;AAAA;AAGjB;AACF;AACF;AAEJ,CAAC","file":"index.js","sourcesContent":["import { access, readFile, writeFile } from \"node:fs/promises\"\nimport { join } from \"node:path\"\nimport { Command, MaterializedFile, MaterializedFolder } from \"@highstate/common\"\nimport { text } from \"@highstate/contract\"\nimport { MaterializedRepository } from \"@highstate/git\"\nimport { nixos } from \"@highstate/library\"\nimport { forUnit } from \"@highstate/pulumi\"\n\nconst { name, args, inputs, outputs } = forUnit(nixos.inlineFlake)\n\nconst flakeRepo = await MaterializedRepository.create(args.flakeName ?? name)\n\nlet firstOpenBrace = args.code.indexOf(\"{\\n\")\nif (firstOpenBrace === -1) {\n  firstOpenBrace = args.code.indexOf(\"{\")\n}\n\nif (firstOpenBrace === -1) {\n  throw new Error(\"The provided code does not contain a valid flake.nix structure.\")\n}\n\nconst codeParts = [args.code.slice(0, firstOpenBrace + 1).trim(), \"\"]\n\nconst hasFlake = async (folder: MaterializedFolder) => {\n  try {\n    await access(join(folder.path, \"flake.nix\"))\n    return true\n  } catch {\n    return false\n  }\n}\n\nfor (const inputFolder of inputs.folders) {\n  const folder = await MaterializedFolder.open(inputFolder, flakeRepo.folder)\n\n  if (await hasFlake(folder)) {\n    codeParts.push(`inputs.${inputFolder.meta.name}.url = \"path:./${folder.entity.meta.name}\";`)\n  }\n}\n\nfor (const inputFile of inputs.files ?? []) {\n  await MaterializedFile.open(inputFile, flakeRepo.folder)\n}\n\ncodeParts.push(\"\", args.code.slice(firstOpenBrace + 1).trim(), \"\")\nconst generatedCode = codeParts.join(\"\\n\")\n\nawait writeFile(join(flakeRepo.path, \"flake.nix\"), generatedCode)\nawait flakeRepo.git.add(\".\")\n\n// format the code with nixfmt\nawait new Command(\"format-flake\", {\n  host: \"local\",\n  create: `nix-shell -p nixfmt-rfc-style --run \"nixfmt flake.nix\"`,\n  cwd: flakeRepo.path,\n}).wait()\n\nconst formattedCode = await readFile(join(flakeRepo.path, \"flake.nix\"), \"utf-8\")\n\n// run nix flake update to generate the lock file and check for errors\nawait new Command(\"update-flake\", {\n  host: \"local\",\n  create: \"nix flake update\",\n  cwd: flakeRepo.path,\n}).wait()\n\nconst lockContent = await readFile(join(flakeRepo.path, \"flake.lock\"), \"utf-8\")\n\nexport default outputs({\n  folder: flakeRepo.pack(),\n\n  $pages: {\n    index: {\n      meta: {\n        title: \"Generated flake.nix\",\n        description: \"The generated flake.nix file from the provided template code.\",\n        icon: \"mdi:file-code\",\n      },\n      content: [\n        {\n          type: \"markdown\",\n          content: text`\n            The following \\`flake.nix\\` file was generated:\n\n            \\`\\`\\`nix\n            ${formattedCode}\n            \\`\\`\\`\n          `,\n        },\n        {\n          type: \"markdown\",\n          content: text`\n            The following inputs were locked:\n\n            \\`\\`\\`nix\n            ${lockContent}\n            \\`\\`\\`\n          `,\n        },\n      ],\n    },\n  },\n})\n"]}

package/dist/inline-module/index.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../../src/inline-module/index.ts"],"names":[],"mappings":";;;;AAGA,IAAM;AAAA,EACJ,IAAA;AAAA,EACA,OAAA;AAAA,EACA,IAAA;AAAA,EACA,MAAA,EAAQ,EAAE,KAAA,EAAO,OAAA,EAAQ;AAAA,EACzB;AACF,CAAA,GAAI,OAAA,CAAQ,MAAM,YAAY,CAAA;AAE9B,IAAM,UAAA,GAAa,KAAK,UAAA,IAAc,IAAA;AAEtC,IAAO,wBAAQ,OAAA,CAAQ;AAAA,EACrB,QAAQ,gBAAA,CAAiB;AAAA,IACvB,QAAQ,MAAA,CAAO,YAAA;AAAA,IACf,QAAA,EAAU,OAAA;AAAA,IACV,IAAA,EAAM;AAAA,MACJ,KAAA,EAAO;AAAA,KACT;AAAA,IACA,KAAA,EAAO;AAAA,MACL,IAAA,EAAM;AAAA,QACJ,IAAA,EAAM;AAAA,OACR;AAAA,MACA,OAAA,EAAS;AAAA,QACP,IAAA,EAAM;AAAA,OACR;AAAA,MACA,KAAA,EAAO;AAAA,QACL,GAAG,KAAA;AAAA,QACH,QAAA,CAAS;AAAA,UACP,IAAA,EAAM,aAAA;AAAA,UACN,SAAS,IAAA,CAAK;AAAA,SACf;AAAA,OACH;AAAA,MACA;AAAA;AACF,GACD;AACH,CAAC","file":"index.js","sourcesContent":["import { common, nixos } from \"@highstate/library\"\nimport { forUnit, makeEntityOutput, makeFile } from \"@highstate/pulumi\"\n\nconst {\n  name,\n  stateId,\n  args,\n  inputs: { files, folders },\n  outputs,\n} = forUnit(nixos.inlineModule)\n\nconst moduleName = args.moduleName ?? name\n\nexport default outputs({\n  folder: makeEntityOutput({\n    entity: common.folderEntity,\n    identity: stateId,\n    meta: {\n      title: moduleName,\n    },\n    value: {\n      meta: {\n        name: moduleName,\n      },\n      content: {\n        type: \"embedded\",\n      },\n      files: [\n        ...files,\n        makeFile({\n          name: \"default.nix\",\n          content: args.code,\n        }),\n      ],\n      folders,\n    },\n  }),\n})\n"]}

package/dist/system/index.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../../src/system/index.ts"],"names":[],"mappings":";;;;;;AAWA,IAAM,EAAE,IAAA,EAAM,MAAA,EAAQ,SAAQ,GAAI,OAAA,CAAQ,MAAM,MAAM,CAAA;AAEtD,IAAM,EAAE,KAAA,EAAO,MAAA,EAAO,GAAI,MAAM,UAAU,MAAM,CAAA;AAEhD,IAAI,CAAC,OAAO,GAAA,EAAK;AACf,EAAA,MAAM,IAAI,MAAM,0CAA0C,CAAA;AAC5D;AAEA,IAAM,IAAA,GAAO,MAAM,sBAAA,CAAuB,IAAA,CAAK,KAAK,CAAA;AACpD,MAAM,IAAA,CAAK,GAAA,CAAI,GAAA,CAAI,GAAG,CAAA;AAEtB,IAAI,CAAC,MAAA,CAAO,GAAA,CAAI,OAAA,EAAS,UAAA,EAAY;AACnC,EAAA,MAAM,IAAI,MAAM,qCAAqC,CAAA;AACvD;AAEA,IAAM,UAAA,GAAa,MAAM,gBAAA,CAAiB,MAAA,CAAO;AAAA,EAC/C,IAAA,EAAM,aAAA;AAAA,EACN,OAAA,EAAS,MAAA,CAAO,GAAA,CAAI,OAAA,CAAQ,UAAA,CAAW,KAAA;AAAA,EACvC,QAAA,EAAU,IAAA;AAAA,EACV,IAAA,EAAM;AACR,CAAC,CAAA;AAED,IAAM,UAAU,MAAM,gBAAA,CAAiB,IAAA,CAAK,oBAAA,CAAqB,MAAM,CAAC,CAAA;AAExE,IAAM,MAAA,GAAS,IAAA,CAAK,MAAA,IAAU,MAAA,CAAO,QAAA;AAErC,MAAM,IAAI,QAAQ,QAAA,EAAU;AAAA,EAC1B,IAAA,EAAM,OAAA;AAAA;AAAA,EAGN,MAAA,EAAQ;AAAA,IACN,gBAAA;AAAA,IACA,CAAA,QAAA,EAAW,IAAA,CAAK,IAAI,CAAA,CAAA,EAAI,MAAM,CAAA,CAAA;AAAA,IAC9B,CAAA,GAAA,EAAM,WAAW,IAAI,CAAA,CAAA;AAAA,IACrB,CAAA,cAAA,EAAiB,MAAA,CAAO,GAAA,CAAI,IAAI,CAAA,CAAA,EAAI,kBAAA,CAAmB,MAAA,CAAO,GAAA,CAAI,SAAA,CAAU,CAAC,CAAC,CAAC,CAAA,CAAA;AAAA,IAC/E,cAAc,MAAA,CAAO,GAAA,CAAI,SAAA,CAAU,CAAC,EAAE,IAAI,CAAA,CAAA;AAAA,IAC1C;AAAA,GACF;AAAA;AAAA,EAGA,MAAA,EAAQ;AAAA,IACN,CAAA,aAAA,EAAgB;AAAA,MACd,CAAA,gBAAA,EAAmB,WAAW,IAAI,CAAA,CAAA;AAAA,MAClC,CAAA,4BAAA,CAAA;AAAA,MACA,CAAA,sBAAA,EAAyB,QAAQ,IAAI,CAAA,CAAA;AAAA,MACrC,MAAM,MAAA,CAAO,GAAA,CAAI,SAAA,CAAU,CAAC,EAAE,IAAI,CAAA;AAAA,KACpC,CAAE,IAAA,CAAK,GAAG,CAAC,CAAA,CAAA,CAAA;AAAA,IAEX,eAAA;AAAA,IACA,QAAA;AAAA,IACA,CAAA,QAAA,EAAW,IAAA,CAAK,IAAI,CAAA,CAAA,EAAI,MAAM,CAAA,CAAA;AAAA,IAC9B,CAAA,iBAAA,CAAA;AAAA,IACA,CAAA,cAAA,EAAiB,MAAA,CAAO,GAAA,CAAI,IAAI,CAAA,CAAA,EAAI,kBAAA,CAAmB,MAAA,CAAO,GAAA,CAAI,SAAA,CAAU,CAAC,CAAC,CAAC,CAAA;AAAA;AAEnF,CAAC,EAAE,IAAA,EAAK;AAER,IAAO,iBAAQ,OAAA,CAAQ;AAAA,EACrB,QAAQ,MAAA,CAAO,MAAA;AAAA,EAEf,UAAA,EAAY,CAAC,iBAAA,CAAkB,MAAA,CAAO,GAAG,CAAC;AAC5C,CAAC","file":"index.js","sourcesContent":["import {\n  Command,\n  createSshHostKeyFile,\n  createSshTerminal,\n  l3EndpointToString,\n  MaterializedFile,\n} from \"@highstate/common\"\nimport { MaterializedRepository } from \"@highstate/git\"\nimport { nixos } from \"@highstate/library\"\nimport { forUnit, toPromise } from \"@highstate/pulumi\"\n\nconst { args, inputs, outputs } = forUnit(nixos.system)\n\nconst { flake, server } = await toPromise(inputs)\n\nif (!server.ssh) {\n  throw new Error(\"Server must have an SSH endpoint defined\")\n}\n\nconst repo = await MaterializedRepository.open(flake)\nawait repo.git.add(\".\")\n\nif (!server.ssh.keyPair?.privateKey) {\n  throw new Error(\"Server must have an SSH private key\")\n}\n\nconst privateKey = await MaterializedFile.create({\n  name: \"private-key\",\n  content: server.ssh.keyPair.privateKey.value,\n  isSecret: true,\n  mode: 0o600,\n})\n\nconst hostKey = await MaterializedFile.open(createSshHostKeyFile(server))\n\nconst system = args.system ?? server.hostname\n\nawait new Command(\"system\", {\n  host: \"local\",\n\n  // install the system using nixos-anywhere if not already installed\n  create: [\n    \"nixos-anywhere\",\n    `--flake ${repo.path}#${system}`,\n    `-i ${privateKey.path}`,\n    `--target-host ${server.ssh.user}@${l3EndpointToString(server.ssh.endpoints[0])}`,\n    `--ssh-port ${server.ssh.endpoints[0].port}`,\n    \"--copy-host-keys\",\n  ],\n\n  // switch to the latest configuration on every update\n  update: [\n    `NIX_SSHOPTS=\"${[\n      `-o IdentityFile=${privateKey.path}`,\n      `-o StrictHostKeyChecking=yes`,\n      `-o UserKnownHostsFile=${hostKey.path}`,\n      `-p ${server.ssh.endpoints[0].port}`,\n    ].join(\" \")}\"`,\n\n    \"nixos-rebuild\",\n    \"switch\",\n    `--flake ${repo.path}#${system}`,\n    `--use-remote-sudo`,\n    `--target-host ${server.ssh.user}@${l3EndpointToString(server.ssh.endpoints[0])}`,\n  ],\n}).wait()\n\nexport default outputs({\n  server: inputs.server,\n\n  $terminals: [createSshTerminal(server.ssh)],\n})\n"]}