@intentic/providers 1.0.2

package/dist/backup/backup.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"backup.js","sourceRoot":"","sources":["../../src/backup/backup.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAC;AAEtE,OAAO,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAK7C,MAAM,YAAY,GAAG,SAAS,CAAC,MAAM,CAAC;IAClC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE;IACpB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;IACjB,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;IACzC,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IACzD,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,WAAW,CAAC;IACzC,SAAS,EAAE,CAAC;SACP,MAAM,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;SAC5H,OAAO,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC;CACpD,CAAC,CAAC;AAEH,MAAM,KAAK,GAAG,CAAC,MAAsB,EAAgB,EAAE,CAAC,WAAW,CAAC,YAAY,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC;AAEpG,MAAM,SAAS,GAAG,iBAAiB,CAAC;AACpC,MAAM,SAAS,GAAG,sBAAsB,CAAC;AACzC,MAAM,QAAQ,GAAG,GAAG,SAAS,aAAa,CAAC;AAC3C,MAAM,WAAW,GAAG,GAAG,SAAS,YAAY,CAAC;AAC7C,MAAM,YAAY,GAAG,GAAG,SAAS,UAAU,CAAC;AAG5C,MAAM,GAAG,GAAG,GAAG,CAAC;AAKhB,MAAM,CAAC,MAAM,WAAW,GAAG,sBAAsB,CAAC;AAClD,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,IAAY,EAAW,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;AAK3E,MAAM,YAAY,GAAG,CAAC,MAAe,EAA0B,EAAE,CAAC,CAAC;IAC/D,uBAAuB,EAAE,kBAAkB;IAC3C,sBAAsB,EAAE,0BAA0B;IAClD,WAAW,EAAE,sBAAsB;IACnC,uBAAuB,EAAE,0BAA0B;IACnD,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,wBAAwB,EAAE,4BAA4B,EAAE,oBAAoB,EAAE,wBAAwB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;CAChI,CAAC,CAAC;AAQH,MAAM,YAAY,GAAG,CAAC,MAAoB,EAAU,EAAE,CAClD;IACI,WAAW;IACX,SAAS;IACT,kBAAkB;IAClB,wCAAwC;IACxC,qFAAqF;IACrF,uHAAuH;IACvH,oFAAoF;IACpF,gEAAgE;IAChE,sCAAsC;IACtC,6FAA6F;IAC7F,4GAA4G;IAC5G,uIAAuI;IAGvI,GAAG,CAAC,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,cAAc,MAAM,CAAC,IAAI,8CAA8C,MAAM,CAAC,IAAI,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACjI,cAAc,MAAM,CAAC,IAAI,iDAAiD;IAC1E,cAAc,MAAM,CAAC,IAAI,yBAAyB,MAAM,CAAC,SAAS,CAAC,KAAK,kBAAkB,MAAM,CAAC,SAAS,CAAC,MAAM,mBAAmB,MAAM,CAAC,SAAS,CAAC,OAAO,UAAU;IACtK,EAAE;CACL,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAEjB,MAAM,OAAO,GAAG,KAAK,EAAE,OAAmB,EAAoB,EAAE;IAC5D,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,6BAA6B,SAAS,0BAA0B,CAAC,CAAC;IACpG,OAAO,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,SAAS,CAAC;AAC9C,CAAC,CAAC;AAGF,MAAM,OAAO,GAAG,KAAK,EAAE,OAAmB,EAA8D,EAAE;IACtG,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,IAAI,CAC7B,6CAA6C,GAAG,+CAA+C,GAAG,6CAA6C,SAAS,sBAAsB,CACjL,CAAC;IACF,MAAM,CAAC,KAAK,GAAG,EAAE,EAAE,QAAQ,GAAG,EAAE,EAAE,IAAI,GAAG,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC/E,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;AACrC,CAAC,CAAC;AAIF,MAAM,WAAW,GAAG,KAAK,EAAE,OAAmB,EAAE,MAAoB,EAAiB,EAAE;IACnF,MAAM,OAAO,CAAC,IAAI,CAAC,YAAY,SAAS,EAAE,CAAC,CAAC;IAC5C,MAAM,QAAQ,GAAG,CAAC,mBAAmB,MAAM,CAAC,QAAQ,EAAE,EAAE,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,IAAI,KAAK,EAAE,CAAC,CAAC;SAClI,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,IAAI,GAAG,CAAC;SAC1B,IAAI,CAAC,GAAG,CAAC,CAAC;IACf,MAAM,OAAO,CAAC,IAAI,CAAC,WAAW,QAAQ,wBAAwB,QAAQ,MAAM,QAAQ,iBAAiB,QAAQ,KAAK,CAAC,CAAC;IACpH,MAAM,OAAO,CAAC,IAAI,CAAC,SAAS,WAAW,oBAAoB,YAAY,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;IAC7F,MAAM,OAAO,CAAC,IAAI,CAAC,YAAY,WAAW,EAAE,CAAC,CAAC;IAC9C,MAAM,OAAO,CAAC,IAAI,CAAC,SAAS,YAAY,kBAAkB,MAAM,CAAC,QAAQ,YAAY,WAAW,YAAY,CAAC,CAAC;AAClH,CAAC,CAAC;AAGF,MAAM,SAAS,GAAG,CAAC,MAAoB,EAAE,SAAiB,EAAU,EAAE;IAClE,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;SACtD,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,MAAM,IAAI,IAAI,IAAI,KAAK,CAAC;SAC9C,IAAI,CAAC,GAAG,CAAC,CAAC;IACf,OAAO;QACH,8CAA8C;QAC9C,MAAM,SAAS,2BAA2B;QAC1C,OAAO;QAEP,GAAG,CAAC,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,WAAW,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACzE,wCAAwC;QACxC,MAAM,WAAW,gBAAgB;QACjC,MAAM,YAAY,wBAAwB;QAC1C,cAAc,QAAQ,EAAE;KAC3B,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAChB,CAAC,CAAC;AAQF,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,WAAwB,WAAW,EAAY,EAAE,CAAC,CAAC;IACpF,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE;QACxB,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC;QAC7B,IAAI,OAAmB,CAAC;QACxB,IAAI,CAAC;YACD,OAAO,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;QACxD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACb,GAAG,CAAC,GAAG,CAAC,WAAW,GAAG,CAAC,EAAE,gEAAgE,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YAC1G,OAAO,SAAS,CAAC;QACrB,CAAC;QACD,IAAI,CAAC;YACD,IAAI,CAAC,CAAC,MAAM,OAAO,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC;gBAC5B,OAAO,SAAS,CAAC;YACrB,CAAC;YACD,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,CAAC;YACxC,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;QAC7C,CAAC;gBAAS,CAAC;YACP,MAAM,OAAO,CAAC,OAAO,EAAE,CAAC;QAC5B,CAAC;IACL,CAAC;IACD,IAAI,EAAE,CAAC,MAAM,EAAE,QAAQ,EAAE,EAAE;QACvB,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC;QAC7B,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC;QAC/B,IAAI,MAAM,EAAE,CAAC,OAAO,CAAC,KAAK,MAAM,CAAC,KAAK,EAAE,CAAC;YACrC,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,iCAAiC,MAAM,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,CAAC,UAAU,MAAM,CAAC,KAAK,GAAG,EAAE,CAAC;QAC7H,CAAC;QACD,IAAI,MAAM,CAAC,UAAU,CAAC,KAAK,MAAM,CAAC,QAAQ,EAAE,CAAC;YACzC,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,oCAAoC,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,UAAU,MAAM,CAAC,QAAQ,GAAG,EAAE,CAAC;QACpI,CAAC;QACD,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,MAAM,CAAC,IAAI,EAAE,CAAC;YACjC,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,gCAAgC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,UAAU,MAAM,CAAC,IAAI,GAAG,EAAE,CAAC;QACxH,CAAC;QACD,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;IAC9B,CAAC;IACD,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,GAAG,EAAE,EAAE;QACpC,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC;QAC7B,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;QAC1D,IAAI,CAAC;YAGD,MAAM,SAAS,GAAG,CAAC,MAAM,OAAO,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;YAC1E,IAAI,SAAS,KAAK,EAAE,EAAE,CAAC;gBACnB,MAAM,IAAI,KAAK,CAAC,kGAAkG,CAAC,CAAC;YACxH,CAAC;YACD,MAAM,WAAW,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YACnC,MAAM,OAAO,CAAC,IAAI,CAAC,gBAAgB,SAAS,sBAAsB,CAAC,CAAC;YACpE,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,IAAI,CAC1B,iDAAiD,SAAS,wBAAwB,GAAG,CAAC,EAAE,GAAG;gBACvF,8BAA8B,MAAM,CAAC,QAAQ,4BAA4B,MAAM,CAAC,IAAI,IAAI;gBACxF,GAAG,SAAS,CAAC,MAAM,EAAE,SAAS,CAAC,uBAAuB,MAAM,CAAC,KAAK,UAAU,CACnF,CAAC;YACF,IAAI,GAAG,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;gBACjB,MAAM,IAAI,KAAK,CAAC,oDAAoD,GAAG,CAAC,IAAI,KAAK,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;YAC1G,CAAC;YACD,OAAO,EAAE,CAAC;QACd,CAAC;gBAAS,CAAC;YACP,MAAM,OAAO,CAAC,OAAO,EAAE,CAAC;QAC5B,CAAC;IACL,CAAC;IACD,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE;QAC1B,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC;QAC7B,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;QAC1D,IAAI,CAAC;YAGD,MAAM,OAAO,CAAC,IAAI,CAAC,gBAAgB,SAAS,sBAAsB,CAAC,CAAC;YACpE,MAAM,OAAO,CAAC,IAAI,CAAC,UAAU,SAAS,EAAE,CAAC,CAAC;YAC1C,GAAG,CAAC,GAAG,CAAC,WAAW,GAAG,CAAC,EAAE,iEAAiE,CAAC,CAAC;QAChG,CAAC;gBAAS,CAAC;YACP,MAAM,OAAO,CAAC,OAAO,EAAE,CAAC;QAC5B,CAAC;IACL,CAAC;CACJ,CAAC,CAAC"}

package/dist/backup/migrate-host.d.ts

@@ -0,0 +1,6 @@
+import type { SshSession } from "../core/ssh.js";
+export declare const managedContainers: (session: SshSession) => Promise<string[]>;
+export declare const quiesceHost: (session: SshSession) => Promise<void>;
+export declare const snapshotNow: (session: SshSession, log: (message: string) => void) => Promise<boolean>;
+export declare const streamRepoVolume: (oldSession: SshSession, newSession: SshSession, image: string, localTarPath: string, log: (message: string) => void) => Promise<void>;
+//# sourceMappingURL=migrate-host.d.ts.map

package/dist/backup/migrate-host.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"migrate-host.d.ts","sourceRoot":"","sources":["../../src/backup/migrate-host.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAgBjD,eAAO,MAAM,iBAAiB,GAAU,SAAS,UAAU,KAAG,OAAO,CAAC,MAAM,EAAE,CAI7E,CAAC;AAMF,eAAO,MAAM,WAAW,GAAU,SAAS,UAAU,KAAG,OAAO,CAAC,IAAI,CAGnE,CAAC;AAKF,eAAO,MAAM,WAAW,GAAU,SAAS,UAAU,EAAE,KAAK,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,KAAG,OAAO,CAAC,OAAO,CAYtG,CAAC;AAMF,eAAO,MAAM,gBAAgB,GACzB,YAAY,UAAU,EACtB,YAAY,UAAU,EACtB,OAAO,MAAM,EACb,cAAc,MAAM,EACpB,KAAK,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,KAC/B,OAAO,CAAC,IAAI,CAsBd,CAAC"}

package/dist/backup/migrate-host.js

@@ -0,0 +1,46 @@
+import { REPO_VOLUME } from "./backup.js";
+const BACKUP_CONTAINER = "intentic-backup";
+const BACKUP_SCRIPT = "/opt/intentic/backup/backup.sh";
+const REPO_TAR = "/opt/intentic/migrate-repo.tgz";
+export const managedContainers = async (session) => {
+    const ours = (await session.exec('docker ps -a --filter label=intentic.id --format "{{.Names}}"')).stdout;
+    const komodo = (await session.exec('docker ps -a --filter label=com.docker.compose.project=komodo --format "{{.Names}}"')).stdout;
+    return [...ours.split("\n"), ...komodo.split("\n")].map((name) => name.trim()).filter((name) => name !== "");
+};
+export const quiesceHost = async (session) => {
+    await session.exec("docker stop intentic-forgejo-runner intentic-sandbox-workspace 2>/dev/null || true");
+    await session.exec('ids=$(docker ps -aq -f name=intentic-tunnel-); [ -n "$ids" ] && docker rm -f $ids || true');
+};
+export const snapshotNow = async (session, log) => {
+    const running = (await session.exec(`docker ps --filter "name=^${BACKUP_CONTAINER}$" --format '{{.Names}}'`)).stdout.trim();
+    if (running !== BACKUP_CONTAINER) {
+        log(`${BACKUP_CONTAINER} is not running on the old host — migrating from the latest existing snapshot instead`);
+        return false;
+    }
+    const result = await session.exec(`docker exec ${BACKUP_CONTAINER} /bin/sh ${BACKUP_SCRIPT}`);
+    if (result.code !== 0) {
+        throw new Error(`migrate: on-demand snapshot failed (exit ${result.code}): ${result.stderr.trim()}`);
+    }
+    log("took a fresh restic snapshot on the old host");
+    return true;
+};
+export const streamRepoVolume = async (oldSession, newSession, image, localTarPath, log) => {
+    if (oldSession.download === undefined || newSession.upload === undefined) {
+        throw new Error("migrate: the SSH executor cannot transfer files (no SFTP download/upload) — cannot stream the repo");
+    }
+    const pack = await oldSession.exec(`docker run --rm --entrypoint sh -v ${REPO_VOLUME}:/repo:ro -v /opt/intentic:/out ${image} -c 'tar czf /out/migrate-repo.tgz -C /repo .'`);
+    if (pack.code !== 0) {
+        throw new Error(`migrate: failed to pack the repo on the old host (exit ${pack.code}): ${pack.stderr.trim()}`);
+    }
+    await newSession.exec("mkdir -p /opt/intentic");
+    await oldSession.download(REPO_TAR, localTarPath);
+    await newSession.upload(localTarPath, REPO_TAR);
+    const unpack = await newSession.exec(`docker run --rm --entrypoint sh -v ${REPO_VOLUME}:/repo -v /opt/intentic:/in ${image} -c 'mkdir -p /repo && tar xzf /in/migrate-repo.tgz -C /repo'`);
+    if (unpack.code !== 0) {
+        throw new Error(`migrate: failed to unpack the repo on the new host (exit ${unpack.code}): ${unpack.stderr.trim()}`);
+    }
+    await oldSession.exec(`rm -f ${REPO_TAR}`);
+    await newSession.exec(`rm -f ${REPO_TAR}`);
+    log("streamed the restic repo from the old host to the new host");
+};
+//# sourceMappingURL=migrate-host.js.map

package/dist/backup/migrate-host.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"migrate-host.js","sourceRoot":"","sources":["../../src/backup/migrate-host.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAO1C,MAAM,gBAAgB,GAAG,iBAAiB,CAAC;AAC3C,MAAM,aAAa,GAAG,gCAAgC,CAAC;AAGvD,MAAM,QAAQ,GAAG,gCAAgC,CAAC;AAIlD,MAAM,CAAC,MAAM,iBAAiB,GAAG,KAAK,EAAE,OAAmB,EAAqB,EAAE;IAC9E,MAAM,IAAI,GAAG,CAAC,MAAM,OAAO,CAAC,IAAI,CAAC,+DAA+D,CAAC,CAAC,CAAC,MAAM,CAAC;IAC1G,MAAM,MAAM,GAAG,CAAC,MAAM,OAAO,CAAC,IAAI,CAAC,qFAAqF,CAAC,CAAC,CAAC,MAAM,CAAC;IAClI,OAAO,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,KAAK,EAAE,CAAC,CAAC;AACjH,CAAC,CAAC;AAMF,MAAM,CAAC,MAAM,WAAW,GAAG,KAAK,EAAE,OAAmB,EAAiB,EAAE;IACpE,MAAM,OAAO,CAAC,IAAI,CAAC,oFAAoF,CAAC,CAAC;IACzG,MAAM,OAAO,CAAC,IAAI,CAAC,2FAA2F,CAAC,CAAC;AACpH,CAAC,CAAC;AAKF,MAAM,CAAC,MAAM,WAAW,GAAG,KAAK,EAAE,OAAmB,EAAE,GAA8B,EAAoB,EAAE;IACvG,MAAM,OAAO,GAAG,CAAC,MAAM,OAAO,CAAC,IAAI,CAAC,6BAA6B,gBAAgB,0BAA0B,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;IAC5H,IAAI,OAAO,KAAK,gBAAgB,EAAE,CAAC;QAC/B,GAAG,CAAC,GAAG,gBAAgB,uFAAuF,CAAC,CAAC;QAChH,OAAO,KAAK,CAAC;IACjB,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,eAAe,gBAAgB,YAAY,aAAa,EAAE,CAAC,CAAC;IAC9F,IAAI,MAAM,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;QACpB,MAAM,IAAI,KAAK,CAAC,4CAA4C,MAAM,CAAC,IAAI,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;IACzG,CAAC;IACD,GAAG,CAAC,8CAA8C,CAAC,CAAC;IACpD,OAAO,IAAI,CAAC;AAChB,CAAC,CAAC;AAMF,MAAM,CAAC,MAAM,gBAAgB,GAAG,KAAK,EACjC,UAAsB,EACtB,UAAsB,EACtB,KAAa,EACb,YAAoB,EACpB,GAA8B,EACjB,EAAE;IACf,IAAI,UAAU,CAAC,QAAQ,KAAK,SAAS,IAAI,UAAU,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QACvE,MAAM,IAAI,KAAK,CAAC,oGAAoG,CAAC,CAAC;IAC1H,CAAC;IACD,MAAM,IAAI,GAAG,MAAM,UAAU,CAAC,IAAI,CAC9B,sCAAsC,WAAW,mCAAmC,KAAK,gDAAgD,CAC5I,CAAC;IACF,IAAI,IAAI,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;QAClB,MAAM,IAAI,KAAK,CAAC,0DAA0D,IAAI,CAAC,IAAI,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;IACnH,CAAC;IACD,MAAM,UAAU,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC;IAChD,MAAM,UAAU,CAAC,QAAQ,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC;IAClD,MAAM,UAAU,CAAC,MAAM,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC;IAChD,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,IAAI,CAChC,sCAAsC,WAAW,+BAA+B,KAAK,+DAA+D,CACvJ,CAAC;IACF,IAAI,MAAM,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;QACpB,MAAM,IAAI,KAAK,CAAC,4DAA4D,MAAM,CAAC,IAAI,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;IACzH,CAAC;IACD,MAAM,UAAU,CAAC,IAAI,CAAC,SAAS,QAAQ,EAAE,CAAC,CAAC;IAC3C,MAAM,UAAU,CAAC,IAAI,CAAC,SAAS,QAAQ,EAAE,CAAC,CAAC;IAC3C,GAAG,CAAC,4DAA4D,CAAC,CAAC;AACtE,CAAC,CAAC"}

package/dist/core/backing-ssh.d.ts

@@ -0,0 +1,9 @@
+import type { SshSession } from "./ssh.js";
+export declare const stateDir: (kind: string, id: string) => string;
+export declare const containerId: (session: SshSession, stamp: string) => Promise<string>;
+export declare const containerImage: (session: SshSession, stamp: string) => Promise<string>;
+export declare const composeUp: (session: SshSession, kind: string, id: string) => Promise<void>;
+export declare const composeDown: (session: SshSession, kind: string, id: string) => Promise<void>;
+export declare const restampBacking: (session: SshSession, kind: string, oldId: string, newId: string, image: string) => Promise<void>;
+export declare const waitReady: (session: SshSession, kind: string, id: string, probe: string, timeoutMs: number) => Promise<void>;
+//# sourceMappingURL=backing-ssh.d.ts.map

package/dist/core/backing-ssh.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"backing-ssh.d.ts","sourceRoot":"","sources":["../../src/core/backing-ssh.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,UAAU,CAAC;AAe3C,eAAO,MAAM,QAAQ,GAAI,MAAM,MAAM,EAAE,IAAI,MAAM,KAAG,MAA6C,CAAC;AAKlG,eAAO,MAAM,WAAW,GAAU,SAAS,UAAU,EAAE,OAAO,MAAM,KAAG,OAAO,CAAC,MAAM,CAGpF,CAAC;AAIF,eAAO,MAAM,cAAc,GAAU,SAAS,UAAU,EAAE,OAAO,MAAM,KAAG,OAAO,CAAC,MAAM,CAOvF,CAAC;AAGF,eAAO,MAAM,SAAS,GAAU,SAAS,UAAU,EAAE,MAAM,MAAM,EAAE,IAAI,MAAM,KAAG,OAAO,CAAC,IAAI,CAQ3F,CAAC;AAGF,eAAO,MAAM,WAAW,GAAU,SAAS,UAAU,EAAE,MAAM,MAAM,EAAE,IAAI,MAAM,KAAG,OAAO,CAAC,IAAI,CAM7F,CAAC;AAQF,eAAO,MAAM,cAAc,GAAU,SAAS,UAAU,EAAE,MAAM,MAAM,EAAE,OAAO,MAAM,EAAE,OAAO,MAAM,EAAE,OAAO,MAAM,KAAG,OAAO,CAAC,IAAI,CA0BjI,CAAC;AAGF,eAAO,MAAM,SAAS,GAAU,SAAS,UAAU,EAAE,MAAM,MAAM,EAAE,IAAI,MAAM,EAAE,OAAO,MAAM,EAAE,WAAW,MAAM,KAAG,OAAO,CAAC,IAAI,CAY7H,CAAC"}

package/dist/core/backing-ssh.js

@@ -0,0 +1,67 @@
+const slug = (id) => id
+    .toLowerCase()
+    .replace(/[^a-z0-9]+/g, "-")
+    .replace(/^-+|-+$/g, "");
+export const stateDir = (kind, id) => `/opt/intentic/${kind}/${slug(id)}`;
+const projectName = (kind, id) => `intentic-${kind}-${slug(id)}`;
+export const containerId = async (session, stamp) => {
+    const result = await session.exec(`docker ps -q --filter "label=intentic.id=${stamp}" --format '{{.ID}}'`);
+    return result.stdout.trim().split("\n")[0] ?? "";
+};
+export const containerImage = async (session, stamp) => {
+    const id = await containerId(session, stamp);
+    if (id === "") {
+        return "";
+    }
+    const result = await session.exec(`docker inspect --format '{{.Config.Image}}' ${id}`);
+    return result.stdout.trim();
+};
+export const composeUp = async (session, kind, id) => {
+    const dir = stateDir(kind, id);
+    const up = await session.exec(`docker compose -p ${projectName(kind, id)} --project-directory ${dir} --env-file ${dir}/.env -f ${dir}/compose.yaml up -d`);
+    if (up.code !== 0) {
+        throw new Error(`failed to bring up ${kind} "${id}": exited ${up.code}: ${up.stderr.trim()}`);
+    }
+};
+export const composeDown = async (session, kind, id) => {
+    const dir = stateDir(kind, id);
+    await session.exec(`docker compose -p ${projectName(kind, id)} --project-directory ${dir} --env-file ${dir}/.env -f ${dir}/compose.yaml down -v 2>/dev/null || true`);
+    await session.exec(`rm -rf ${dir}`);
+};
+export const restampBacking = async (session, kind, oldId, newId, image) => {
+    const oldDir = stateDir(kind, oldId);
+    const newDir = stateDir(kind, newId);
+    const oldProject = projectName(kind, oldId);
+    const newProject = projectName(kind, newId);
+    const oldVolume = `${oldProject}_data`;
+    const newVolume = `${newProject}_data`;
+    const script = [
+        "set -e",
+        `if [ -d ${newDir} ]; then exit 0; fi`,
+        `docker compose -p ${oldProject} --project-directory ${oldDir} --env-file ${oldDir}/.env -f ${oldDir}/compose.yaml down 2>/dev/null || true`,
+        `if docker volume inspect ${oldVolume} >/dev/null 2>&1 && ! docker volume inspect ${newVolume} >/dev/null 2>&1; then`,
+        `  docker volume create ${newVolume} >/dev/null`,
+        `  docker run --rm --entrypoint sh -v ${oldVolume}:/from -v ${newVolume}:/to ${image} -c 'cp -a /from/. /to/'`,
+        `  docker volume rm ${oldVolume} >/dev/null`,
+        "fi",
+        `if [ -d ${oldDir} ] && [ ! -d ${newDir} ]; then mkdir -p "$(dirname ${newDir})" && mv ${oldDir} ${newDir}; fi`,
+    ].join("\n");
+    const result = await session.exec(script);
+    if (result.code !== 0) {
+        throw new Error(`failed to restamp ${kind} "${oldId}" → "${newId}": exited ${result.code}: ${result.stderr.trim()}`);
+    }
+};
+export const waitReady = async (session, kind, id, probe, timeoutMs) => {
+    const deadline = Date.now() + timeoutMs;
+    for (;;) {
+        const result = await session.exec(probe);
+        if (result.code === 0) {
+            return;
+        }
+        if (Date.now() >= deadline) {
+            throw new Error(`${kind} "${id}" did not become ready within ${timeoutMs}ms`);
+        }
+        await new Promise((resolve) => setTimeout(resolve, 3_000));
+    }
+};
+//# sourceMappingURL=backing-ssh.js.map

package/dist/core/backing-ssh.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"backing-ssh.js","sourceRoot":"","sources":["../../src/core/backing-ssh.ts"],"names":[],"mappings":"AAQA,MAAM,IAAI,GAAG,CAAC,EAAU,EAAU,EAAE,CAChC,EAAE;KACG,WAAW,EAAE;KACb,OAAO,CAAC,aAAa,EAAE,GAAG,CAAC;KAC3B,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;AAGjC,MAAM,CAAC,MAAM,QAAQ,GAAG,CAAC,IAAY,EAAE,EAAU,EAAU,EAAE,CAAC,iBAAiB,IAAI,IAAI,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC;AAClG,MAAM,WAAW,GAAG,CAAC,IAAY,EAAE,EAAU,EAAU,EAAE,CAAC,YAAY,IAAI,IAAI,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC;AAIzF,MAAM,CAAC,MAAM,WAAW,GAAG,KAAK,EAAE,OAAmB,EAAE,KAAa,EAAmB,EAAE;IACrF,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,4CAA4C,KAAK,sBAAsB,CAAC,CAAC;IAC3G,OAAO,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;AACrD,CAAC,CAAC;AAIF,MAAM,CAAC,MAAM,cAAc,GAAG,KAAK,EAAE,OAAmB,EAAE,KAAa,EAAmB,EAAE;IACxF,MAAM,EAAE,GAAG,MAAM,WAAW,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IAC7C,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QACZ,OAAO,EAAE,CAAC;IACd,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,+CAA+C,EAAE,EAAE,CAAC,CAAC;IACvF,OAAO,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;AAChC,CAAC,CAAC;AAGF,MAAM,CAAC,MAAM,SAAS,GAAG,KAAK,EAAE,OAAmB,EAAE,IAAY,EAAE,EAAU,EAAiB,EAAE;IAC5F,MAAM,GAAG,GAAG,QAAQ,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;IAC/B,MAAM,EAAE,GAAG,MAAM,OAAO,CAAC,IAAI,CACzB,qBAAqB,WAAW,CAAC,IAAI,EAAE,EAAE,CAAC,wBAAwB,GAAG,eAAe,GAAG,YAAY,GAAG,qBAAqB,CAC9H,CAAC;IACF,IAAI,EAAE,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;QAChB,MAAM,IAAI,KAAK,CAAC,sBAAsB,IAAI,KAAK,EAAE,aAAa,EAAE,CAAC,IAAI,KAAK,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;IAClG,CAAC;AACL,CAAC,CAAC;AAGF,MAAM,CAAC,MAAM,WAAW,GAAG,KAAK,EAAE,OAAmB,EAAE,IAAY,EAAE,EAAU,EAAiB,EAAE;IAC9F,MAAM,GAAG,GAAG,QAAQ,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;IAC/B,MAAM,OAAO,CAAC,IAAI,CACd,qBAAqB,WAAW,CAAC,IAAI,EAAE,EAAE,CAAC,wBAAwB,GAAG,eAAe,GAAG,YAAY,GAAG,2CAA2C,CACpJ,CAAC;IACF,MAAM,OAAO,CAAC,IAAI,CAAC,UAAU,GAAG,EAAE,CAAC,CAAC;AACxC,CAAC,CAAC;AAQF,MAAM,CAAC,MAAM,cAAc,GAAG,KAAK,EAAE,OAAmB,EAAE,IAAY,EAAE,KAAa,EAAE,KAAa,EAAE,KAAa,EAAiB,EAAE;IAClI,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IACrC,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IACrC,MAAM,UAAU,GAAG,WAAW,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IAC5C,MAAM,UAAU,GAAG,WAAW,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IAC5C,MAAM,SAAS,GAAG,GAAG,UAAU,OAAO,CAAC;IACvC,MAAM,SAAS,GAAG,GAAG,UAAU,OAAO,CAAC;IACvC,MAAM,MAAM,GAAG;QACX,QAAQ;QAER,WAAW,MAAM,qBAAqB;QAEtC,qBAAqB,UAAU,wBAAwB,MAAM,eAAe,MAAM,YAAY,MAAM,wCAAwC;QAE5I,4BAA4B,SAAS,+CAA+C,SAAS,wBAAwB;QACrH,0BAA0B,SAAS,aAAa;QAChD,wCAAwC,SAAS,aAAa,SAAS,QAAQ,KAAK,0BAA0B;QAC9G,sBAAsB,SAAS,aAAa;QAC5C,IAAI;QAEJ,WAAW,MAAM,gBAAgB,MAAM,gCAAgC,MAAM,YAAY,MAAM,IAAI,MAAM,MAAM;KAClH,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACb,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC1C,IAAI,MAAM,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;QACpB,MAAM,IAAI,KAAK,CAAC,qBAAqB,IAAI,KAAK,KAAK,QAAQ,KAAK,aAAa,MAAM,CAAC,IAAI,KAAK,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;IACzH,CAAC;AACL,CAAC,CAAC;AAGF,MAAM,CAAC,MAAM,SAAS,GAAG,KAAK,EAAE,OAAmB,EAAE,IAAY,EAAE,EAAU,EAAE,KAAa,EAAE,SAAiB,EAAiB,EAAE;IAC9H,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;IACxC,SAAS,CAAC;QACN,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACzC,IAAI,MAAM,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;YACpB,OAAO;QACX,CAAC;QACD,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,QAAQ,EAAE,CAAC;YACzB,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,KAAK,EAAE,iCAAiC,SAAS,IAAI,CAAC,CAAC;QAClF,CAAC;QACD,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC;IAC/D,CAAC;AACL,CAAC,CAAC"}

package/dist/core/ci-yaml.d.ts

@@ -0,0 +1,3 @@
+export declare const starterDockerfile: () => string;
+export declare const normalize: (yaml: string) => string;
+//# sourceMappingURL=ci-yaml.d.ts.map

package/dist/core/ci-yaml.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ci-yaml.d.ts","sourceRoot":"","sources":["../../src/core/ci-yaml.ts"],"names":[],"mappings":"AAOA,eAAO,MAAM,iBAAiB,QAAO,MASrB,CAAC;AAIjB,eAAO,MAAM,SAAS,GAAI,MAAM,MAAM,KAAG,MAK1B,CAAC"}

package/dist/core/ci-yaml.js

@@ -0,0 +1,15 @@
+export const starterDockerfile = () => [
+    "# intentic starter Dockerfile — replace with your app's real build.",
+    "FROM busybox:1.37.0",
+    "RUN mkdir -p /www && printf '%s' 'intentic: replace this Dockerfile with your app' > /www/index.html",
+    "ENV PORT=8080",
+    "EXPOSE 8080",
+    'CMD ["sh","-c","httpd -f -v -p $PORT -h /www"]',
+    "",
+].join("\n");
+export const normalize = (yaml) => yaml
+    .split("\n")
+    .map((line) => line.replace(/\s+$/, ""))
+    .join("\n")
+    .trim();
+//# sourceMappingURL=ci-yaml.js.map

package/dist/core/ci-yaml.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ci-yaml.js","sourceRoot":"","sources":["../../src/core/ci-yaml.ts"],"names":[],"mappings":"AAOA,MAAM,CAAC,MAAM,iBAAiB,GAAG,GAAW,EAAE,CAC1C;IACI,qEAAqE;IACrE,qBAAqB;IACrB,sGAAsG;IACtG,eAAe;IACf,aAAa;IACb,gDAAgD;IAChD,EAAE;CACL,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAIjB,MAAM,CAAC,MAAM,SAAS,GAAG,CAAC,IAAY,EAAU,EAAE,CAC9C,IAAI;KACC,KAAK,CAAC,IAAI,CAAC;KACX,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;KACvC,IAAI,CAAC,IAAI,CAAC;KACV,IAAI,EAAE,CAAC"}

package/dist/core/guarded-update.d.ts

@@ -0,0 +1,14 @@
+import type { SshSession } from "./ssh.js";
+export interface GuardedUpdateOpts {
+    readonly session: SshSession;
+    readonly repo: string;
+    readonly resticImage: string;
+    readonly volumes: readonly string[];
+    readonly tag: string;
+    readonly recreate: () => Promise<void>;
+    readonly stop: () => Promise<void>;
+    readonly rollback: () => Promise<void>;
+    readonly log: (message: string) => void;
+}
+export declare const guardedUpdate: (opts: GuardedUpdateOpts) => Promise<void>;
+//# sourceMappingURL=guarded-update.d.ts.map

package/dist/core/guarded-update.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"guarded-update.d.ts","sourceRoot":"","sources":["../../src/core/guarded-update.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,UAAU,CAAC;AAM3C,MAAM,WAAW,iBAAiB;IAC9B,QAAQ,CAAC,OAAO,EAAE,UAAU,CAAC;IAC7B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAE7B,QAAQ,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,CAAC;IAEpC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IAErB,QAAQ,CAAC,QAAQ,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IAEvC,QAAQ,CAAC,IAAI,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IAEnC,QAAQ,CAAC,QAAQ,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IACvC,QAAQ,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;CAC3C;AAWD,eAAO,MAAM,aAAa,GAAU,MAAM,iBAAiB,KAAG,OAAO,CAAC,IAAI,CAuBzE,CAAC"}

package/dist/core/guarded-update.js

@@ -0,0 +1,25 @@
+const RESTIC_ENV = "/opt/intentic/backup/restic.env";
+const resticRun = (opts, volume, mode, args) => `docker run --rm --env-file ${RESTIC_ENV} -v ${volume}:/v${mode} ${opts.resticImage} -r '${opts.repo}' ${args}`;
+export const guardedUpdate = async (opts) => {
+    for (const volume of opts.volumes) {
+        const snapshot = await opts.session.exec(resticRun(opts, volume, ":ro", `backup /v --tag ${opts.tag}`));
+        if (snapshot.code !== 0) {
+            throw new Error(`guarded update: pre-update snapshot of ${volume} failed (exit ${snapshot.code}): ${snapshot.stderr.trim()} — ` +
+                "refusing to update without a recovery point (is i.have.backup applied?)");
+        }
+    }
+    opts.log(`guarded update: snapshotted ${opts.volumes.length} volume(s) as tag "${opts.tag}"`);
+    try {
+        await opts.recreate();
+    }
+    catch (error) {
+        opts.log(`guarded update: new image failed health — rolling back image + data: ${String(error)}`);
+        await opts.stop();
+        for (const volume of opts.volumes) {
+            await opts.session.exec(resticRun(opts, volume, "", `restore latest --tag ${opts.tag} --target /`));
+        }
+        await opts.rollback();
+        throw error;
+    }
+};
+//# sourceMappingURL=guarded-update.js.map

package/dist/core/guarded-update.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"guarded-update.js","sourceRoot":"","sources":["../../src/core/guarded-update.ts"],"names":[],"mappings":"AAIA,MAAM,UAAU,GAAG,iCAAiC,CAAC;AAmBrD,MAAM,SAAS,GAAG,CAAC,IAAuB,EAAE,MAAc,EAAE,IAAgB,EAAE,IAAY,EAAU,EAAE,CAClG,8BAA8B,UAAU,OAAO,MAAM,MAAM,IAAI,IAAI,IAAI,CAAC,WAAW,QAAQ,IAAI,CAAC,IAAI,KAAK,IAAI,EAAE,CAAC;AAQpH,MAAM,CAAC,MAAM,aAAa,GAAG,KAAK,EAAE,IAAuB,EAAiB,EAAE;IAC1E,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;QAChC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,mBAAmB,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QACxG,IAAI,QAAQ,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;YACtB,MAAM,IAAI,KAAK,CACX,0CAA0C,MAAM,iBAAiB,QAAQ,CAAC,IAAI,MAAM,QAAQ,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK;gBAC3G,yEAAyE,CAChF,CAAC;QACN,CAAC;IACL,CAAC;IACD,IAAI,CAAC,GAAG,CAAC,+BAA+B,IAAI,CAAC,OAAO,CAAC,MAAM,sBAAsB,IAAI,CAAC,GAAG,GAAG,CAAC,CAAC;IAC9F,IAAI,CAAC;QACD,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAC;IAC1B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACb,IAAI,CAAC,GAAG,CAAC,wEAAwE,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAClG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;QAClB,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YAEhC,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,wBAAwB,IAAI,CAAC,GAAG,aAAa,CAAC,CAAC,CAAC;QACxG,CAAC;QACD,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAC;QACtB,MAAM,KAAK,CAAC;IAChB,CAAC;AACL,CAAC,CAAC"}

package/dist/core/inputs.d.ts

@@ -0,0 +1,27 @@
+import type { ResolvedInputs } from "@intentic/engine";
+import { z } from "zod";
+import type { SshTarget } from "./ssh.js";
+export declare const sshSchema: z.ZodObject<{
+    address: z.ZodString;
+    user: z.ZodString;
+    sshKey: z.ZodString;
+    port: z.ZodDefault<z.ZodNumber>;
+    via: z.ZodDefault<z.ZodEnum<{
+        direct: "direct";
+        cloudflared: "cloudflared";
+    }>>;
+}, z.core.$strip>;
+export declare const parseInputs: <S extends z.ZodType>(schema: S, inputs: ResolvedInputs, label: string) => z.infer<S>;
+export declare const parseResponse: <S extends z.ZodType>(schema: S, value: unknown, label: string) => z.infer<S>;
+export declare const sshTarget: (parsed: z.infer<typeof sshSchema>) => SshTarget;
+export declare const gitProvider: (forgejoUrl: string) => {
+    domain: string;
+    https: boolean;
+};
+export declare const registryImage: (args: {
+    registry: string;
+    owner: string;
+    repoName: string;
+    tag: string;
+}) => string;
+//# sourceMappingURL=inputs.d.ts.map

package/dist/core/inputs.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"inputs.d.ts","sourceRoot":"","sources":["../../src/core/inputs.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AACvD,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,UAAU,CAAC;AAO1C,eAAO,MAAM,SAAS;;;;;;;;;iBAMpB,CAAC;AAOH,eAAO,MAAM,WAAW,GAAI,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,QAAQ,CAAC,EAAE,QAAQ,cAAc,EAAE,OAAO,MAAM,KAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAM5G,CAAC;AAMF,eAAO,MAAM,aAAa,GAAI,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,QAAQ,CAAC,EAAE,OAAO,OAAO,EAAE,OAAO,MAAM,KAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAMtG,CAAC;AAGF,eAAO,MAAM,SAAS,GAAI,QAAQ,CAAC,CAAC,KAAK,CAAC,OAAO,SAAS,CAAC,KAAG,SAM5D,CAAC;AAQH,eAAO,MAAM,WAAW,GAAI,YAAY,MAAM,KAAG;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,OAAO,CAAA;CAG/E,CAAC;AAMH,eAAO,MAAM,aAAa,GAAI,MAAM;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,KAAG,MACxC,CAAC"}

package/dist/core/inputs.js

@@ -0,0 +1,36 @@
+import { z } from "zod";
+export const sshSchema = z.object({
+    address: z.string(),
+    user: z.string(),
+    sshKey: z.string(),
+    port: z.number().default(22),
+    via: z.enum(["direct", "cloudflared"]).default("direct"),
+});
+const issues = (error) => error.issues.map((issue) => `${issue.path.join(".")} ${issue.message}`).join("; ");
+export const parseInputs = (schema, inputs, label) => {
+    const result = schema.safeParse(inputs);
+    if (!result.success) {
+        throw new Error(`${label} inputs malformed: ${issues(result.error)}`);
+    }
+    return result.data;
+};
+export const parseResponse = (schema, value, label) => {
+    const result = schema.safeParse(value);
+    if (!result.success) {
+        throw new Error(`${label} returned an unexpected response: ${issues(result.error)}`);
+    }
+    return result.data;
+};
+export const sshTarget = (parsed) => ({
+    address: parsed.address,
+    user: parsed.user,
+    privateKey: parsed.sshKey,
+    port: parsed.port,
+    via: parsed.via,
+});
+export const gitProvider = (forgejoUrl) => ({
+    domain: forgejoUrl.replace(/^https?:\/\//, "").replace(/\/+$/, ""),
+    https: forgejoUrl.startsWith("https://"),
+});
+export const registryImage = (args) => `${args.registry}/${args.owner}/${args.repoName}:${args.tag}`;
+//# sourceMappingURL=inputs.js.map

package/dist/core/inputs.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"inputs.js","sourceRoot":"","sources":["../../src/core/inputs.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAQxB,MAAM,CAAC,MAAM,SAAS,GAAG,CAAC,CAAC,MAAM,CAAC;IAC9B,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;IACnB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;IAClB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC;IAC5B,GAAG,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC;CAC3D,CAAC,CAAC;AAEH,MAAM,MAAM,GAAG,CAAC,KAAiB,EAAU,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAKjI,MAAM,CAAC,MAAM,WAAW,GAAG,CAAsB,MAAS,EAAE,MAAsB,EAAE,KAAa,EAAc,EAAE;IAC7G,MAAM,MAAM,GAAG,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;IACxC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QAClB,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,sBAAsB,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAC1E,CAAC;IACD,OAAO,MAAM,CAAC,IAAI,CAAC;AACvB,CAAC,CAAC;AAMF,MAAM,CAAC,MAAM,aAAa,GAAG,CAAsB,MAAS,EAAE,KAAc,EAAE,KAAa,EAAc,EAAE;IACvG,MAAM,MAAM,GAAG,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IACvC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QAClB,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,qCAAqC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IACzF,CAAC;IACD,OAAO,MAAM,CAAC,IAAI,CAAC;AACvB,CAAC,CAAC;AAGF,MAAM,CAAC,MAAM,SAAS,GAAG,CAAC,MAAiC,EAAa,EAAE,CAAC,CAAC;IACxE,OAAO,EAAE,MAAM,CAAC,OAAO;IACvB,IAAI,EAAE,MAAM,CAAC,IAAI;IACjB,UAAU,EAAE,MAAM,CAAC,MAAM;IACzB,IAAI,EAAE,MAAM,CAAC,IAAI;IACjB,GAAG,EAAE,MAAM,CAAC,GAAG;CAClB,CAAC,CAAC;AAQH,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,UAAkB,EAAsC,EAAE,CAAC,CAAC;IACpF,MAAM,EAAE,UAAU,CAAC,OAAO,CAAC,cAAc,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;IAClE,KAAK,EAAE,UAAU,CAAC,UAAU,CAAC,UAAU,CAAC;CAC3C,CAAC,CAAC;AAMH,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,IAAwE,EAAU,EAAE,CAC9G,GAAG,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC"}

package/dist/core/ssh-probe.d.ts

@@ -0,0 +1,5 @@
+import type { ReadinessProbe, ResolvedInputs } from "@intentic/engine";
+import type { SshExecutor, SshTarget } from "./ssh.js";
+export declare const hostTarget: (inputs: ResolvedInputs) => SshTarget;
+export declare const createSshProbe: (target: SshTarget, executor?: SshExecutor) => ReadinessProbe;
+//# sourceMappingURL=ssh-probe.d.ts.map

package/dist/core/ssh-probe.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ssh-probe.d.ts","sourceRoot":"","sources":["../../src/core/ssh-probe.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAEvE,OAAO,KAAK,EAAE,WAAW,EAAc,SAAS,EAAE,MAAM,UAAU,CAAC;AAKnE,eAAO,MAAM,UAAU,GAAI,QAAQ,cAAc,KAAG,SAA8D,CAAC;AASnH,eAAO,MAAM,cAAc,GACtB,QAAQ,SAAS,EAAE,WAAU,WAAyB,KAAG,cAezD,CAAC"}

package/dist/core/ssh-probe.js

@@ -0,0 +1,22 @@
+import { parseInputs, sshSchema, sshTarget } from "./inputs.js";
+import { sshExecutor } from "./ssh.js";
+export const hostTarget = (inputs) => sshTarget(parseInputs(sshSchema, inputs, "host"));
+export const createSshProbe = (target, executor = sshExecutor) => async (url) => {
+    let session;
+    try {
+        session = await executor.connect(target);
+    }
+    catch {
+        return false;
+    }
+    try {
+        return (await session.exec(`wget -q -T 10 -O /dev/null ${url}`)).code === 0;
+    }
+    catch {
+        return false;
+    }
+    finally {
+        await session.dispose();
+    }
+};
+//# sourceMappingURL=ssh-probe.js.map

package/dist/core/ssh-probe.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ssh-probe.js","sourceRoot":"","sources":["../../src/core/ssh-probe.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAEhE,OAAO,EAAE,WAAW,EAAE,MAAM,UAAU,CAAC;AAIvC,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,MAAsB,EAAa,EAAE,CAAC,SAAS,CAAC,WAAW,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;AASnH,MAAM,CAAC,MAAM,cAAc,GACvB,CAAC,MAAiB,EAAE,WAAwB,WAAW,EAAkB,EAAE,CAC3E,KAAK,EAAE,GAAG,EAAE,EAAE;IACV,IAAI,OAAmB,CAAC;IACxB,IAAI,CAAC;QACD,OAAO,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IAC7C,CAAC;IAAC,MAAM,CAAC;QACL,OAAO,KAAK,CAAC;IACjB,CAAC;IACD,IAAI,CAAC;QACD,OAAO,CAAC,MAAM,OAAO,CAAC,IAAI,CAAC,8BAA8B,GAAG,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC;IAChF,CAAC;IAAC,MAAM,CAAC;QACL,OAAO,KAAK,CAAC;IACjB,CAAC;YAAS,CAAC;QACP,MAAM,OAAO,CAAC,OAAO,EAAE,CAAC;IAC5B,CAAC;AACL,CAAC,CAAC"}

package/dist/core/ssh.d.ts

@@ -0,0 +1,31 @@
+export interface SshResult {
+    readonly stdout: string;
+    readonly stderr: string;
+    readonly code: number;
+}
+export interface SshSession {
+    readonly exec: (command: string, onOutput?: (chunk: string) => void) => Promise<SshResult>;
+    readonly dispose: () => Promise<void>;
+    readonly download?: (remotePath: string, localPath: string) => Promise<void>;
+    readonly upload?: (localPath: string, remotePath: string) => Promise<void>;
+}
+export interface SshTarget {
+    readonly address: string;
+    readonly user: string;
+    readonly privateKey: string;
+    readonly port: number;
+    readonly via?: "direct" | "cloudflared";
+}
+export interface SshExecutor {
+    readonly connect: (target: SshTarget) => Promise<SshSession>;
+    readonly dispose?: () => Promise<void>;
+}
+export interface HostKeyStore {
+    readonly get: (host: string, port: number) => Promise<string | undefined>;
+    readonly set: (host: string, port: number, key: string) => Promise<void>;
+}
+export declare const inMemoryHostKeyStore: () => HostKeyStore;
+export declare const verifyHostKey: (store: HostKeyStore, host: string, port: number, presented: string) => Promise<"ok" | "mismatch">;
+export declare const createSshExecutor: (store?: HostKeyStore) => SshExecutor;
+export declare const sshExecutor: SshExecutor;
+//# sourceMappingURL=ssh.d.ts.map

package/dist/core/ssh.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ssh.d.ts","sourceRoot":"","sources":["../../src/core/ssh.ts"],"names":[],"mappings":"AAKA,MAAM,WAAW,SAAS;IACtB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,UAAU;IAGvB,QAAQ,CAAC,IAAI,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,IAAI,KAAK,OAAO,CAAC,SAAS,CAAC,CAAC;IAC3F,QAAQ,CAAC,OAAO,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IAKtC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC,UAAU,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAC7E,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;CAC9E;AAED,MAAM,WAAW,SAAS;IACtB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAItB,QAAQ,CAAC,GAAG,CAAC,EAAE,QAAQ,GAAG,aAAa,CAAC;CAC3C;AAKD,MAAM,WAAW,WAAW;IACxB,QAAQ,CAAC,OAAO,EAAE,CAAC,MAAM,EAAE,SAAS,KAAK,OAAO,CAAC,UAAU,CAAC,CAAC;IAC7D,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;CAC1C;AAKD,MAAM,WAAW,YAAY;IACzB,QAAQ,CAAC,GAAG,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAC1E,QAAQ,CAAC,GAAG,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;CAC5E;AAOD,eAAO,MAAM,oBAAoB,QAAO,YASvC,CAAC;AAKF,eAAO,MAAM,aAAa,GAAU,OAAO,YAAY,EAAE,MAAM,MAAM,EAAE,MAAM,MAAM,EAAE,WAAW,MAAM,KAAG,OAAO,CAAC,IAAI,GAAG,UAAU,CAOjI,CAAC;AA4FF,eAAO,MAAM,iBAAiB,GAAI,QAAO,YAAqC,KAAG,WAsHhF,CAAC;AAEF,eAAO,MAAM,WAAW,EAAE,WAAiC,CAAC"}

package/dist/core/ssh.js

@@ -0,0 +1,186 @@
+import { spawn } from "node:child_process";
+import { createServer, connect as tcpConnect } from "node:net";
+import { Client } from "ssh2";
+const hostKeyId = (host, port) => `${host}:${port}`;
+export const inMemoryHostKeyStore = () => {
+    const keys = new Map();
+    return {
+        get: (host, port) => Promise.resolve(keys.get(hostKeyId(host, port))),
+        set: (host, port, key) => {
+            keys.set(hostKeyId(host, port), key);
+            return Promise.resolve();
+        },
+    };
+};
+export const verifyHostKey = async (store, host, port, presented) => {
+    const known = await store.get(host, port);
+    if (known === undefined) {
+        await store.set(host, port, presented);
+        return "ok";
+    }
+    return known === presented ? "ok" : "mismatch";
+};
+const collect = (stream, sink, onOutput) => {
+    stream.on("data", (chunk) => {
+        const text = chunk.toString("utf8");
+        sink.value += text;
+        onOutput?.(text);
+    });
+};
+const delay = (ms) => new Promise((resolve) => setTimeout(resolve, ms));
+const reserveLocalPort = () => new Promise((resolve, reject) => {
+    const probe = createServer();
+    probe.once("error", reject);
+    probe.listen(0, "127.0.0.1", () => {
+        const address = probe.address();
+        const port = typeof address === "object" && address !== null ? address.port : 0;
+        probe.close(() => resolve(port));
+    });
+});
+const tcpProbe = (port) => new Promise((resolve) => {
+    const socket = tcpConnect({ host: "127.0.0.1", port });
+    socket.once("connect", () => {
+        socket.destroy();
+        resolve(true);
+    });
+    socket.once("error", () => {
+        socket.destroy();
+        resolve(false);
+    });
+});
+const waitForPort = async (port, failure, timeoutMs = 20000) => {
+    const deadline = Date.now() + timeoutMs;
+    for (;;) {
+        const reason = failure();
+        if (reason !== undefined) {
+            throw new Error(`cloudflared access exited before its local forwarder came up: ${reason}`);
+        }
+        if (await tcpProbe(port)) {
+            return;
+        }
+        if (Date.now() > deadline) {
+            throw new Error(`cloudflared local forwarder on 127.0.0.1:${port} did not come up within ${timeoutMs}ms`);
+        }
+        await delay(150);
+    }
+};
+const startCloudflaredForwarder = async (hostname) => {
+    const port = await reserveLocalPort();
+    const child = spawn("cloudflared", ["access", "tcp", "--hostname", hostname, "--url", `127.0.0.1:${port}`], { stdio: "ignore" });
+    let exit;
+    child.once("error", (error) => {
+        exit = `spawn failed: ${error.message}`;
+    });
+    child.once("exit", (code, signal) => {
+        exit = `exited (code ${code ?? "?"}, signal ${signal ?? "none"})`;
+    });
+    try {
+        await waitForPort(port, () => exit);
+    }
+    catch (error) {
+        child.kill();
+        throw error;
+    }
+    return { port, child };
+};
+export const createSshExecutor = (store = inMemoryHostKeyStore()) => {
+    const forwarders = new Map();
+    const dial = async (target) => {
+        if (target.via !== "cloudflared") {
+            return { host: target.address, port: target.port };
+        }
+        let forwarder = forwarders.get(target.address);
+        if (forwarder === undefined) {
+            forwarder = startCloudflaredForwarder(target.address);
+            forwarders.set(target.address, forwarder);
+            forwarder.catch(() => forwarders.delete(target.address));
+        }
+        return { host: "127.0.0.1", port: (await forwarder).port };
+    };
+    return {
+        connect: async (target) => {
+            const endpoint = await dial(target);
+            return new Promise((resolve, reject) => {
+                const client = new Client();
+                client.on("error", reject);
+                client.on("ready", () => {
+                    client.removeListener("error", reject);
+                    resolve({
+                        exec: (command, onOutput) => new Promise((resolveExec, rejectExec) => {
+                            client.exec(command, (error, stream) => {
+                                if (error !== undefined) {
+                                    rejectExec(error);
+                                    return;
+                                }
+                                const stdout = { value: "" };
+                                const stderr = { value: "" };
+                                let code = 0;
+                                collect(stream, stdout, onOutput);
+                                collect(stream.stderr, stderr, onOutput);
+                                stream.on("exit", (exitCode) => {
+                                    code = exitCode ?? 0;
+                                });
+                                stream.on("close", () => {
+                                    resolveExec({ stdout: stdout.value, stderr: stderr.value, code });
+                                });
+                            });
+                        }),
+                        dispose: () => new Promise((resolveDispose) => {
+                            client.on("close", () => {
+                                resolveDispose();
+                            });
+                            client.end();
+                        }),
+                        download: (remotePath, localPath) => new Promise((resolveTransfer, rejectTransfer) => {
+                            client.sftp((sftpError, sftp) => {
+                                if (sftpError) {
+                                    rejectTransfer(sftpError);
+                                    return;
+                                }
+                                sftp.fastGet(remotePath, localPath, (getError) => (getError ? rejectTransfer(getError) : resolveTransfer()));
+                            });
+                        }),
+                        upload: (localPath, remotePath) => new Promise((resolveTransfer, rejectTransfer) => {
+                            client.sftp((sftpError, sftp) => {
+                                if (sftpError) {
+                                    rejectTransfer(sftpError);
+                                    return;
+                                }
+                                sftp.fastPut(localPath, remotePath, (putError) => (putError ? rejectTransfer(putError) : resolveTransfer()));
+                            });
+                        }),
+                    });
+                });
+                client.connect({
+                    host: endpoint.host,
+                    port: endpoint.port,
+                    username: target.user,
+                    privateKey: target.privateKey,
+                    hostVerifier: (key, callback) => {
+                        verifyHostKey(store, target.address, target.port, key.toString("base64"))
+                            .then((outcome) => {
+                            if (outcome === "mismatch") {
+                                reject(new Error(`host key mismatch for ${target.address}:${target.port} — refusing to connect (possible MITM, or the host was rebuilt; remove its entry from .known-hosts.json to re-trust)`));
+                            }
+                            callback(outcome === "ok");
+                        })
+                            .catch(reject);
+                    },
+                });
+            });
+        },
+        dispose: async () => {
+            const pending = [...forwarders.values()];
+            forwarders.clear();
+            await Promise.all(pending.map(async (forwarder) => {
+                try {
+                    (await forwarder).child.kill();
+                }
+                catch {
+                }
+            }));
+        },
+    };
+};
+export const sshExecutor = createSshExecutor();
+//# sourceMappingURL=ssh.js.map

package/dist/core/ssh.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ssh.js","sourceRoot":"","sources":["../../src/core/ssh.ts"],"names":[],"mappings":"AAAA,OAAO,EAAqB,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAC9D,OAAO,EAAE,YAAY,EAAE,OAAO,IAAI,UAAU,EAAE,MAAM,UAAU,CAAC;AAE/D,OAAO,EAAE,MAAM,EAAE,MAAM,MAAM,CAAC;AAmD9B,MAAM,SAAS,GAAG,CAAC,IAAY,EAAE,IAAY,EAAU,EAAE,CAAC,GAAG,IAAI,IAAI,IAAI,EAAE,CAAC;AAE5E,MAAM,CAAC,MAAM,oBAAoB,GAAG,GAAiB,EAAE;IACnD,MAAM,IAAI,GAAG,IAAI,GAAG,EAAkB,CAAC;IACvC,OAAO;QACH,GAAG,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;QACrE,GAAG,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE;YACrB,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,GAAG,CAAC,CAAC;YACrC,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC;QAC7B,CAAC;KACJ,CAAC;AACN,CAAC,CAAC;AAKF,MAAM,CAAC,MAAM,aAAa,GAAG,KAAK,EAAE,KAAmB,EAAE,IAAY,EAAE,IAAY,EAAE,SAAiB,EAA8B,EAAE;IAClI,MAAM,KAAK,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAC1C,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACtB,MAAM,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,EAAE,SAAS,CAAC,CAAC;QACvC,OAAO,IAAI,CAAC;IAChB,CAAC;IACD,OAAO,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC;AACnD,CAAC,CAAC;AAGF,MAAM,OAAO,GAAG,CAAC,MAAgB,EAAE,IAAuB,EAAE,QAAkC,EAAQ,EAAE;IACpG,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;QAChC,MAAM,IAAI,GAAG,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QACpC,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC;QACnB,QAAQ,EAAE,CAAC,IAAI,CAAC,CAAC;IACrB,CAAC,CAAC,CAAC;AACP,CAAC,CAAC;AASF,MAAM,KAAK,GAAG,CAAC,EAAU,EAAiB,EAAE,CAAC,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;AAI/F,MAAM,gBAAgB,GAAG,GAAoB,EAAE,CAC3C,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;IAC5B,MAAM,KAAK,GAAG,YAAY,EAAE,CAAC;IAC7B,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAC5B,KAAK,CAAC,MAAM,CAAC,CAAC,EAAE,WAAW,EAAE,GAAG,EAAE;QAC9B,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,EAAE,CAAC;QAChC,MAAM,IAAI,GAAG,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,KAAK,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;QAChF,KAAK,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;IACrC,CAAC,CAAC,CAAC;AACP,CAAC,CAAC,CAAC;AAGP,MAAM,QAAQ,GAAG,CAAC,IAAY,EAAoB,EAAE,CAChD,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;IACpB,MAAM,MAAM,GAAG,UAAU,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC;IACvD,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,EAAE;QACxB,MAAM,CAAC,OAAO,EAAE,CAAC;QACjB,OAAO,CAAC,IAAI,CAAC,CAAC;IAClB,CAAC,CAAC,CAAC;IACH,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE;QACtB,MAAM,CAAC,OAAO,EAAE,CAAC;QACjB,OAAO,CAAC,KAAK,CAAC,CAAC;IACnB,CAAC,CAAC,CAAC;AACP,CAAC,CAAC,CAAC;AAGP,MAAM,WAAW,GAAG,KAAK,EAAE,IAAY,EAAE,OAAiC,EAAE,SAAS,GAAG,KAAK,EAAiB,EAAE;IAC5G,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;IACxC,SAAS,CAAC;QACN,MAAM,MAAM,GAAG,OAAO,EAAE,CAAC;QACzB,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACvB,MAAM,IAAI,KAAK,CAAC,iEAAiE,MAAM,EAAE,CAAC,CAAC;QAC/F,CAAC;QACD,IAAI,MAAM,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YACvB,OAAO;QACX,CAAC;QACD,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,EAAE,CAAC;YACxB,MAAM,IAAI,KAAK,CAAC,4CAA4C,IAAI,2BAA2B,SAAS,IAAI,CAAC,CAAC;QAC9G,CAAC;QACD,MAAM,KAAK,CAAC,GAAG,CAAC,CAAC;IACrB,CAAC;AACL,CAAC,CAAC;AAKF,MAAM,yBAAyB,GAAG,KAAK,EAAE,QAAgB,EAAiC,EAAE;IACxF,MAAM,IAAI,GAAG,MAAM,gBAAgB,EAAE,CAAC;IACtC,MAAM,KAAK,GAAG,KAAK,CAAC,aAAa,EAAE,CAAC,QAAQ,EAAE,KAAK,EAAE,YAAY,EAAE,QAAQ,EAAE,OAAO,EAAE,aAAa,IAAI,EAAE,CAAC,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;IACjI,IAAI,IAAwB,CAAC;IAC7B,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE;QAC1B,IAAI,GAAG,iBAAiB,KAAK,CAAC,OAAO,EAAE,CAAC;IAC5C,CAAC,CAAC,CAAC;IACH,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE;QAChC,IAAI,GAAG,gBAAgB,IAAI,IAAI,GAAG,YAAY,MAAM,IAAI,MAAM,GAAG,CAAC;IACtE,CAAC,CAAC,CAAC;IACH,IAAI,CAAC;QACD,MAAM,WAAW,CAAC,IAAI,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;IACxC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACb,KAAK,CAAC,IAAI,EAAE,CAAC;QACb,MAAM,KAAK,CAAC;IAChB,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;AAC3B,CAAC,CAAC;AAOF,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,QAAsB,oBAAoB,EAAE,EAAe,EAAE;IAC3F,MAAM,UAAU,GAAG,IAAI,GAAG,EAAyC,CAAC;IAEpE,MAAM,IAAI,GAAG,KAAK,EAAE,MAAiB,EAA2C,EAAE;QAC9E,IAAI,MAAM,CAAC,GAAG,KAAK,aAAa,EAAE,CAAC;YAC/B,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC;QACvD,CAAC;QACD,IAAI,SAAS,GAAG,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAC/C,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;YAC1B,SAAS,GAAG,yBAAyB,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;YACtD,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;YAE1C,SAAS,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC;QAC7D,CAAC;QACD,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,MAAM,SAAS,CAAC,CAAC,IAAI,EAAE,CAAC;IAC/D,CAAC,CAAC;IAEF,OAAO;QACH,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE;YACtB,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,CAAC;YACpC,OAAO,IAAI,OAAO,CAAa,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;gBAC/C,MAAM,MAAM,GAAG,IAAI,MAAM,EAAE,CAAC;gBAE5B,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;gBAC3B,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;oBACpB,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;oBACvC,OAAO,CAAC;wBACJ,IAAI,EAAE,CAAC,OAAO,EAAE,QAAQ,EAAE,EAAE,CACxB,IAAI,OAAO,CAAY,CAAC,WAAW,EAAE,UAAU,EAAE,EAAE;4BAC/C,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE;gCACnC,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;oCACtB,UAAU,CAAC,KAAK,CAAC,CAAC;oCAClB,OAAO;gCACX,CAAC;gCACD,MAAM,MAAM,GAAG,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC;gCAC7B,MAAM,MAAM,GAAG,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC;gCAC7B,IAAI,IAAI,GAAG,CAAC,CAAC;gCACb,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC;gCAClC,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC;gCAEzC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,QAAuB,EAAE,EAAE;oCAC1C,IAAI,GAAG,QAAQ,IAAI,CAAC,CAAC;gCACzB,CAAC,CAAC,CAAC;gCACH,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;oCACpB,WAAW,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;gCACtE,CAAC,CAAC,CAAC;4BACP,CAAC,CAAC,CAAC;wBACP,CAAC,CAAC;wBACN,OAAO,EAAE,GAAG,EAAE,CACV,IAAI,OAAO,CAAO,CAAC,cAAc,EAAE,EAAE;4BACjC,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;gCACpB,cAAc,EAAE,CAAC;4BACrB,CAAC,CAAC,CAAC;4BACH,MAAM,CAAC,GAAG,EAAE,CAAC;wBACjB,CAAC,CAAC;wBAGN,QAAQ,EAAE,CAAC,UAAU,EAAE,SAAS,EAAE,EAAE,CAChC,IAAI,OAAO,CAAO,CAAC,eAAe,EAAE,cAAc,EAAE,EAAE;4BAClD,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,IAAI,EAAE,EAAE;gCAC5B,IAAI,SAAS,EAAE,CAAC;oCACZ,cAAc,CAAC,SAAS,CAAC,CAAC;oCAC1B,OAAO;gCACX,CAAC;gCACD,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,SAAS,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC;4BACjH,CAAC,CAAC,CAAC;wBACP,CAAC,CAAC;wBACN,MAAM,EAAE,CAAC,SAAS,EAAE,UAAU,EAAE,EAAE,CAC9B,IAAI,OAAO,CAAO,CAAC,eAAe,EAAE,cAAc,EAAE,EAAE;4BAClD,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,IAAI,EAAE,EAAE;gCAC5B,IAAI,SAAS,EAAE,CAAC;oCACZ,cAAc,CAAC,SAAS,CAAC,CAAC;oCAC1B,OAAO;gCACX,CAAC;gCACD,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,UAAU,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC;4BACjH,CAAC,CAAC,CAAC;wBACP,CAAC,CAAC;qBACT,CAAC,CAAC;gBACP,CAAC,CAAC,CAAC;gBACH,MAAM,CAAC,OAAO,CAAC;oBACX,IAAI,EAAE,QAAQ,CAAC,IAAI;oBACnB,IAAI,EAAE,QAAQ,CAAC,IAAI;oBACnB,QAAQ,EAAE,MAAM,CAAC,IAAI;oBACrB,UAAU,EAAE,MAAM,CAAC,UAAU;oBAI7B,YAAY,EAAE,CAAC,GAAW,EAAE,QAAkC,EAAE,EAAE;wBAC9D,aAAa,CAAC,KAAK,EAAE,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;6BACpE,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE;4BACd,IAAI,OAAO,KAAK,UAAU,EAAE,CAAC;gCACzB,MAAM,CACF,IAAI,KAAK,CACL,yBAAyB,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,IAAI,sHAAsH,CAC/K,CACJ,CAAC;4BACN,CAAC;4BACD,QAAQ,CAAC,OAAO,KAAK,IAAI,CAAC,CAAC;wBAC/B,CAAC,CAAC;6BACD,KAAK,CAAC,MAAM,CAAC,CAAC;oBACvB,CAAC;iBACJ,CAAC,CAAC;YACP,CAAC,CAAC,CAAC;QACP,CAAC;QACD,OAAO,EAAE,KAAK,IAAI,EAAE;YAChB,MAAM,OAAO,GAAG,CAAC,GAAG,UAAU,CAAC,MAAM,EAAE,CAAC,CAAC;YACzC,UAAU,CAAC,KAAK,EAAE,CAAC;YACnB,MAAM,OAAO,CAAC,GAAG,CACb,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,SAAS,EAAE,EAAE;gBAC5B,IAAI,CAAC;oBACD,CAAC,MAAM,SAAS,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;gBACnC,CAAC;gBAAC,MAAM,CAAC;gBAET,CAAC;YACL,CAAC,CAAC,CACL,CAAC;QACN,CAAC;KACJ,CAAC;AACN,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,WAAW,GAAgB,iBAAiB,EAAE,CAAC"}

package/dist/data/garage-bucket.d.ts

@@ -0,0 +1,4 @@
+import type { Provider } from "@intentic/engine";
+import { type SshExecutor } from "../core/ssh.js";
+export declare const createGarageBucketProvider: (executor?: SshExecutor) => Provider;
+//# sourceMappingURL=garage-bucket.d.ts.map

package/dist/data/garage-bucket.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"garage-bucket.d.ts","sourceRoot":"","sources":["../../src/data/garage-bucket.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAkB,MAAM,kBAAkB,CAAC;AAKjE,OAAO,EAAE,KAAK,WAAW,EAAe,MAAM,gBAAgB,CAAC;AA4C/D,eAAO,MAAM,0BAA0B,GAAI,WAAU,WAAyB,KAAG,QA2D/E,CAAC"}