@intentic/providers 1.18.0

package/dist/backup.js

@@ -0,0 +1,150 @@
+import { z } from "zod";
+import { parseInputs, sshSchema, sshTarget } from "./inputs.js";
+import { sshExecutor } from "./ssh.js";
+const backupSchema = sshSchema.extend({
+    repo: z.string(),
+    password: z.string(),
+    image: z.string(),
+    signoz: z.coerce.boolean().default(false),
+    credentials: z.record(z.string(), z.string()).default({}),
+    schedule: z.string().default("0 3 * * *"),
+    retention: z
+        .object({ daily: z.coerce.number().default(7), weekly: z.coerce.number().default(4), monthly: z.coerce.number().default(6) })
+        .default({ daily: 7, weekly: 4, monthly: 6 }),
+});
+const parse = (inputs) => parseInputs(backupSchema, inputs, "backup");
+const CONTAINER = "intentic-backup";
+const STATE_DIR = "/opt/intentic/backup";
+const ENV_FILE = `${STATE_DIR}/restic.env`;
+const SCRIPT_FILE = `${STATE_DIR}/backup.sh`;
+const CRONTAB_FILE = `${STATE_DIR}/crontab`;
+const SEP = "|";
+const volumeMounts = (signoz) => ({
+    "intentic-forgejo-data": "/volumes/forgejo",
+    "komodo_postgres-data": "/volumes/komodo-postgres",
+    komodo_keys: "/volumes/komodo-keys",
+    "komodo_ferretdb-state": "/volumes/komodo-ferretdb",
+    ...(signoz ? { "signoz_clickhouse-data": "/volumes/signoz-clickhouse", "signoz_signoz-data": "/volumes/signoz-signoz" } : {}),
+});
+const backupScript = (parsed) => [
+    "#!/bin/sh",
+    "set -eu",
+    "STAGING=/staging",
+    'rm -rf "$STAGING"; mkdir -p "$STAGING"',
+    "# Forgejo: app-consistent dump (as the git user) copied out over the docker socket.",
+    "if docker exec -u git intentic-forgejo forgejo dump --type tar --file /tmp/intentic-forgejo.tar >/dev/null 2>&1; then",
+    '  docker cp intentic-forgejo:/tmp/intentic-forgejo.tar "$STAGING/forgejo-dump.tar"',
+    "  docker exec intentic-forgejo rm -f /tmp/intentic-forgejo.tar",
+    'else echo "forgejo dump skipped"; fi',
+    "# Komodo: logical pg_dump of the FerretDB-backing postgres (matched by its compose labels).",
+    "PG=$(docker ps -q -f label=com.docker.compose.project=komodo -f label=com.docker.compose.service=postgres)",
+    'if [ -n "$PG" ]; then docker exec "$PG" pg_dump -U komodo -d postgres > "$STAGING/komodo.sql"; else echo "komodo pg_dump skipped"; fi',
+    `restic -r "${parsed.repo}" backup "$STAGING" /volumes /host-opt-intentic`,
+    `restic -r "${parsed.repo}" forget --keep-daily ${parsed.retention.daily} --keep-weekly ${parsed.retention.weekly} --keep-monthly ${parsed.retention.monthly} --prune`,
+    "",
+].join("\n");
+const running = async (session) => {
+    const result = await session.exec(`docker ps --filter "name=^${CONTAINER}$" --format '{{.Names}}'`);
+    return result.stdout.trim() === CONTAINER;
+};
+const observe = async (session) => {
+    const result = await session.exec(`docker inspect --format '{{.Config.Image}}${SEP}{{index .Config.Labels "intentic.schedule"}}${SEP}{{index .Config.Labels "intentic.repo"}}' ${CONTAINER} 2>/dev/null || true`);
+    const [image = "", schedule = "", repo = ""] = result.stdout.trim().split(SEP);
+    return { image, schedule, repo };
+};
+const ensureFiles = async (session, parsed) => {
+    await session.exec(`mkdir -p ${STATE_DIR}`);
+    const envLines = [`RESTIC_PASSWORD=${parsed.password}`, ...Object.entries(parsed.credentials).map(([key, value]) => `${key}=${value}`)]
+        .map((line) => `'${line}'`)
+        .join(" ");
+    await session.exec(`test -f ${ENV_FILE} || { printf '%s\\n' ${envLines} > ${ENV_FILE} && chmod 600 ${ENV_FILE}; }`);
+    await session.exec(`cat > ${SCRIPT_FILE} <<'BACKUP_EOF'\n${backupScript(parsed)}BACKUP_EOF`);
+    await session.exec(`chmod +x ${SCRIPT_FILE}`);
+    await session.exec(`cat > ${CRONTAB_FILE} <<'CRON_EOF'\n${parsed.schedule} /bin/sh ${SCRIPT_FILE}\nCRON_EOF`);
+};
+const mountArgs = (parsed, dockerBin) => {
+    const volumes = Object.entries(volumeMounts(parsed.signoz))
+        .map(([name, path]) => `-v ${name}:${path}:ro`)
+        .join(" ");
+    return [
+        "-v /var/run/docker.sock:/var/run/docker.sock",
+        `-v ${dockerBin}:/usr/local/bin/docker:ro`,
+        volumes,
+        "-v /opt/intentic:/host-opt-intentic:ro",
+        `-v ${SCRIPT_FILE}:/backup.sh:ro`,
+        `-v ${CRONTAB_FILE}:/etc/crontabs/root:ro`,
+        `--env-file ${ENV_FILE}`,
+    ].join(" ");
+};
+export const createBackupProvider = (executor = sshExecutor) => ({
+    read: async (inputs, ctx) => {
+        const parsed = parse(inputs);
+        let session;
+        try {
+            session = await executor.connect(sshTarget(parsed));
+        }
+        catch (error) {
+            ctx.log(`backup "${ctx.id}": host not reachable over SSH, treating as not-yet-created: ${String(error)}`);
+            return undefined;
+        }
+        try {
+            if (!(await running(session))) {
+                return undefined;
+            }
+            const observed = await observe(session);
+            return { outputs: {}, detail: observed };
+        }
+        finally {
+            await session.dispose();
+        }
+    },
+    diff: (inputs, observed) => {
+        const parsed = parse(inputs);
+        const detail = observed.detail;
+        if (detail?.["image"] !== parsed.image) {
+            return { action: "update", reason: `backup image differs (running ${String(detail?.["image"])}, want ${parsed.image})` };
+        }
+        if (detail["schedule"] !== parsed.schedule) {
+            return { action: "update", reason: `backup schedule differs (running ${String(detail["schedule"])}, want ${parsed.schedule})` };
+        }
+        if (detail["repo"] !== parsed.repo) {
+            return { action: "update", reason: `backup repo differs (running ${String(detail["repo"])}, want ${parsed.repo})` };
+        }
+        return { action: "noop" };
+    },
+    apply: async (inputs, _observed, ctx) => {
+        const parsed = parse(inputs);
+        const session = await executor.connect(sshTarget(parsed));
+        try {
+            const dockerBin = (await session.exec("command -v docker")).stdout.trim();
+            if (dockerBin === "") {
+                throw new Error("backup: no docker CLI found on the host (the backup container needs it for app-consistent dumps)");
+            }
+            await ensureFiles(session, parsed);
+            await session.exec(`docker rm -f ${CONTAINER} 2>/dev/null || true`);
+            const run = await session.exec(`docker run -d --restart unless-stopped --name ${CONTAINER} --label intentic.id=${ctx.id} ` +
+                `--label "intentic.schedule=${parsed.schedule}" --label "intentic.repo=${parsed.repo}" ` +
+                `${mountArgs(parsed, dockerBin)} --entrypoint crond ${parsed.image} -f -l 8`);
+            if (run.code !== 0) {
+                throw new Error(`failed to start backup container on host: exited ${run.code}: ${run.stderr.trim()}`);
+            }
+            return {};
+        }
+        finally {
+            await session.dispose();
+        }
+    },
+    delete: async (inputs, ctx) => {
+        const parsed = parse(inputs);
+        const session = await executor.connect(sshTarget(parsed));
+        try {
+            await session.exec(`docker rm -f ${CONTAINER} 2>/dev/null || true`);
+            await session.exec(`rm -rf ${STATE_DIR}`);
+            ctx.log(`backup "${ctx.id}" removed; the restic repo and its snapshots are left untouched`);
+        }
+        finally {
+            await session.dispose();
+        }
+    },
+});
+//# sourceMappingURL=backup.js.map

package/dist/backup.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"backup.js","sourceRoot":"","sources":["../src/backup.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAEhE,OAAO,EAAE,WAAW,EAAE,MAAM,UAAU,CAAC;AAKvC,MAAM,YAAY,GAAG,SAAS,CAAC,MAAM,CAAC;IAClC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE;IACpB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;IACjB,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;IACzC,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IACzD,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,WAAW,CAAC;IACzC,SAAS,EAAE,CAAC;SACP,MAAM,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;SAC5H,OAAO,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC;CACpD,CAAC,CAAC;AAEH,MAAM,KAAK,GAAG,CAAC,MAAsB,EAAgB,EAAE,CAAC,WAAW,CAAC,YAAY,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC;AAEpG,MAAM,SAAS,GAAG,iBAAiB,CAAC;AACpC,MAAM,SAAS,GAAG,sBAAsB,CAAC;AACzC,MAAM,QAAQ,GAAG,GAAG,SAAS,aAAa,CAAC;AAC3C,MAAM,WAAW,GAAG,GAAG,SAAS,YAAY,CAAC;AAC7C,MAAM,YAAY,GAAG,GAAG,SAAS,UAAU,CAAC;AAG5C,MAAM,GAAG,GAAG,GAAG,CAAC;AAKhB,MAAM,YAAY,GAAG,CAAC,MAAe,EAA0B,EAAE,CAAC,CAAC;IAC/D,uBAAuB,EAAE,kBAAkB;IAC3C,sBAAsB,EAAE,0BAA0B;IAClD,WAAW,EAAE,sBAAsB;IACnC,uBAAuB,EAAE,0BAA0B;IACnD,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,wBAAwB,EAAE,4BAA4B,EAAE,oBAAoB,EAAE,wBAAwB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;CAChI,CAAC,CAAC;AAQH,MAAM,YAAY,GAAG,CAAC,MAAoB,EAAU,EAAE,CAClD;IACI,WAAW;IACX,SAAS;IACT,kBAAkB;IAClB,wCAAwC;IACxC,qFAAqF;IACrF,uHAAuH;IACvH,oFAAoF;IACpF,gEAAgE;IAChE,sCAAsC;IACtC,6FAA6F;IAC7F,4GAA4G;IAC5G,uIAAuI;IACvI,cAAc,MAAM,CAAC,IAAI,iDAAiD;IAC1E,cAAc,MAAM,CAAC,IAAI,yBAAyB,MAAM,CAAC,SAAS,CAAC,KAAK,kBAAkB,MAAM,CAAC,SAAS,CAAC,MAAM,mBAAmB,MAAM,CAAC,SAAS,CAAC,OAAO,UAAU;IACtK,EAAE;CACL,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAEjB,MAAM,OAAO,GAAG,KAAK,EAAE,OAAmB,EAAoB,EAAE;IAC5D,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,6BAA6B,SAAS,0BAA0B,CAAC,CAAC;IACpG,OAAO,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,SAAS,CAAC;AAC9C,CAAC,CAAC;AAGF,MAAM,OAAO,GAAG,KAAK,EAAE,OAAmB,EAA8D,EAAE;IACtG,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,IAAI,CAC7B,6CAA6C,GAAG,+CAA+C,GAAG,6CAA6C,SAAS,sBAAsB,CACjL,CAAC;IACF,MAAM,CAAC,KAAK,GAAG,EAAE,EAAE,QAAQ,GAAG,EAAE,EAAE,IAAI,GAAG,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC/E,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;AACrC,CAAC,CAAC;AAIF,MAAM,WAAW,GAAG,KAAK,EAAE,OAAmB,EAAE,MAAoB,EAAiB,EAAE;IACnF,MAAM,OAAO,CAAC,IAAI,CAAC,YAAY,SAAS,EAAE,CAAC,CAAC;IAC5C,MAAM,QAAQ,GAAG,CAAC,mBAAmB,MAAM,CAAC,QAAQ,EAAE,EAAE,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,IAAI,KAAK,EAAE,CAAC,CAAC;SAClI,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,IAAI,GAAG,CAAC;SAC1B,IAAI,CAAC,GAAG,CAAC,CAAC;IACf,MAAM,OAAO,CAAC,IAAI,CAAC,WAAW,QAAQ,wBAAwB,QAAQ,MAAM,QAAQ,iBAAiB,QAAQ,KAAK,CAAC,CAAC;IACpH,MAAM,OAAO,CAAC,IAAI,CAAC,SAAS,WAAW,oBAAoB,YAAY,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;IAC7F,MAAM,OAAO,CAAC,IAAI,CAAC,YAAY,WAAW,EAAE,CAAC,CAAC;IAC9C,MAAM,OAAO,CAAC,IAAI,CAAC,SAAS,YAAY,kBAAkB,MAAM,CAAC,QAAQ,YAAY,WAAW,YAAY,CAAC,CAAC;AAClH,CAAC,CAAC;AAGF,MAAM,SAAS,GAAG,CAAC,MAAoB,EAAE,SAAiB,EAAU,EAAE;IAClE,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;SACtD,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,MAAM,IAAI,IAAI,IAAI,KAAK,CAAC;SAC9C,IAAI,CAAC,GAAG,CAAC,CAAC;IACf,OAAO;QACH,8CAA8C;QAC9C,MAAM,SAAS,2BAA2B;QAC1C,OAAO;QACP,wCAAwC;QACxC,MAAM,WAAW,gBAAgB;QACjC,MAAM,YAAY,wBAAwB;QAC1C,cAAc,QAAQ,EAAE;KAC3B,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAChB,CAAC,CAAC;AAQF,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,WAAwB,WAAW,EAAY,EAAE,CAAC,CAAC;IACpF,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE;QACxB,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC;QAC7B,IAAI,OAAmB,CAAC;QACxB,IAAI,CAAC;YACD,OAAO,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;QACxD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACb,GAAG,CAAC,GAAG,CAAC,WAAW,GAAG,CAAC,EAAE,gEAAgE,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YAC1G,OAAO,SAAS,CAAC;QACrB,CAAC;QACD,IAAI,CAAC;YACD,IAAI,CAAC,CAAC,MAAM,OAAO,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC;gBAC5B,OAAO,SAAS,CAAC;YACrB,CAAC;YACD,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,CAAC;YACxC,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;QAC7C,CAAC;gBAAS,CAAC;YACP,MAAM,OAAO,CAAC,OAAO,EAAE,CAAC;QAC5B,CAAC;IACL,CAAC;IACD,IAAI,EAAE,CAAC,MAAM,EAAE,QAAQ,EAAE,EAAE;QACvB,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC;QAC7B,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC;QAC/B,IAAI,MAAM,EAAE,CAAC,OAAO,CAAC,KAAK,MAAM,CAAC,KAAK,EAAE,CAAC;YACrC,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,iCAAiC,MAAM,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,CAAC,UAAU,MAAM,CAAC,KAAK,GAAG,EAAE,CAAC;QAC7H,CAAC;QACD,IAAI,MAAM,CAAC,UAAU,CAAC,KAAK,MAAM,CAAC,QAAQ,EAAE,CAAC;YACzC,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,oCAAoC,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,UAAU,MAAM,CAAC,QAAQ,GAAG,EAAE,CAAC;QACpI,CAAC;QACD,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,MAAM,CAAC,IAAI,EAAE,CAAC;YACjC,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,gCAAgC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,UAAU,MAAM,CAAC,IAAI,GAAG,EAAE,CAAC;QACxH,CAAC;QACD,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;IAC9B,CAAC;IACD,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,GAAG,EAAE,EAAE;QACpC,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC;QAC7B,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;QAC1D,IAAI,CAAC;YAGD,MAAM,SAAS,GAAG,CAAC,MAAM,OAAO,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;YAC1E,IAAI,SAAS,KAAK,EAAE,EAAE,CAAC;gBACnB,MAAM,IAAI,KAAK,CAAC,kGAAkG,CAAC,CAAC;YACxH,CAAC;YACD,MAAM,WAAW,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YACnC,MAAM,OAAO,CAAC,IAAI,CAAC,gBAAgB,SAAS,sBAAsB,CAAC,CAAC;YACpE,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,IAAI,CAC1B,iDAAiD,SAAS,wBAAwB,GAAG,CAAC,EAAE,GAAG;gBACvF,8BAA8B,MAAM,CAAC,QAAQ,4BAA4B,MAAM,CAAC,IAAI,IAAI;gBACxF,GAAG,SAAS,CAAC,MAAM,EAAE,SAAS,CAAC,uBAAuB,MAAM,CAAC,KAAK,UAAU,CACnF,CAAC;YACF,IAAI,GAAG,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;gBACjB,MAAM,IAAI,KAAK,CAAC,oDAAoD,GAAG,CAAC,IAAI,KAAK,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;YAC1G,CAAC;YACD,OAAO,EAAE,CAAC;QACd,CAAC;gBAAS,CAAC;YACP,MAAM,OAAO,CAAC,OAAO,EAAE,CAAC;QAC5B,CAAC;IACL,CAAC;IACD,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE;QAC1B,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC;QAC7B,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;QAC1D,IAAI,CAAC;YAGD,MAAM,OAAO,CAAC,IAAI,CAAC,gBAAgB,SAAS,sBAAsB,CAAC,CAAC;YACpE,MAAM,OAAO,CAAC,IAAI,CAAC,UAAU,SAAS,EAAE,CAAC,CAAC;YAC1C,GAAG,CAAC,GAAG,CAAC,WAAW,GAAG,CAAC,EAAE,iEAAiE,CAAC,CAAC;QAChG,CAAC;gBAAS,CAAC;YACP,MAAM,OAAO,CAAC,OAAO,EAAE,CAAC;QAC5B,CAAC;IACL,CAAC;CACJ,CAAC,CAAC"}

package/dist/cf-route.d.ts

@@ -0,0 +1,5 @@
+import type { Provider } from "@intentic/engine";
+import type { CloudflareApi } from "./cloudflare-api.js";
+export type DnsPropagationWait = (hostname: string, log: (message: string) => void) => Promise<void>;
+export declare const createCfRouteProvider: (api?: CloudflareApi, awaitPropagation?: DnsPropagationWait) => Provider;
+//# sourceMappingURL=cf-route.d.ts.map

package/dist/cf-route.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cf-route.d.ts","sourceRoot":"","sources":["../src/cf-route.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAkB,MAAM,kBAAkB,CAAC;AAGjE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAczD,MAAM,MAAM,kBAAkB,GAAG,CAAC,QAAQ,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;AAoCrG,eAAO,MAAM,qBAAqB,GAC9B,MAAK,aAA6B,EAClC,mBAAkB,kBAA0C,KAC7D,QAqCD,CAAC"}

package/dist/cf-route.js

@@ -0,0 +1,74 @@
+import { formatStamp } from "@intentic/graph";
+import { z } from "zod";
+import { cloudflareApi } from "./cloudflare-api.js";
+import { parseInputs } from "./inputs.js";
+const cfRouteSchema = z.object({ hostname: z.string(), zoneId: z.string(), apiToken: z.string(), cname: z.string() });
+const parse = (inputs) => parseInputs(cfRouteSchema, inputs, "cf-route");
+const dohResolves = async (hostname) => {
+    try {
+        const response = await fetch(`https://cloudflare-dns.com/dns-query?name=${encodeURIComponent(hostname)}&type=A`, {
+            headers: { accept: "application/dns-json" },
+        });
+        if (!response.ok) {
+            return false;
+        }
+        const body = (await response.json());
+        return body.Status === 0 && Array.isArray(body.Answer) && body.Answer.length > 0;
+    }
+    catch {
+        return false;
+    }
+};
+const waitForDnsPropagation = async (hostname, log) => {
+    const deadline = Date.now() + 90_000;
+    for (;;) {
+        if (await dohResolves(hostname)) {
+            return;
+        }
+        if (Date.now() >= deadline) {
+            log(`cf-route: ${hostname} not yet observable via DoH after 90s; proceeding (downstream calls may need a retry)`);
+            return;
+        }
+        await new Promise((resolve) => setTimeout(resolve, 2000));
+    }
+};
+export const createCfRouteProvider = (api = cloudflareApi, awaitPropagation = waitForDnsPropagation) => ({
+    read: async (inputs) => {
+        const { hostname, zoneId, apiToken } = parse(inputs);
+        const record = await api.findDnsRecord({ apiToken, zoneId, name: hostname });
+        if (record === undefined) {
+            return undefined;
+        }
+        return { outputs: { url: `https://${hostname}` }, detail: { content: record.content } };
+    },
+    diff: (inputs, observed) => {
+        const { cname } = parse(inputs);
+        const content = observed.detail?.["content"];
+        if (content === cname) {
+            return { action: "noop" };
+        }
+        return { action: "update", reason: `CNAME target "${String(content)}" differs from "${cname}"` };
+    },
+    apply: async (inputs, _observed, ctx) => {
+        const { hostname, zoneId, apiToken, cname } = parse(inputs);
+        const comment = formatStamp(ctx.id);
+        const record = await api.findDnsRecord({ apiToken, zoneId, name: hostname });
+        if (record === undefined) {
+            await api.createDnsRecord({ apiToken, zoneId, name: hostname, content: cname, comment });
+        }
+        else {
+            await api.updateDnsRecord({ apiToken, zoneId, recordId: record.id, name: hostname, content: cname, comment });
+        }
+        await awaitPropagation(hostname, ctx.log);
+        return { url: `https://${hostname}` };
+    },
+    delete: async (inputs) => {
+        const { hostname, zoneId, apiToken } = parse(inputs);
+        const record = await api.findDnsRecord({ apiToken, zoneId, name: hostname });
+        if (record === undefined) {
+            return;
+        }
+        await api.deleteDnsRecord({ apiToken, zoneId, recordId: record.id });
+    },
+});
+//# sourceMappingURL=cf-route.js.map

package/dist/cf-route.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cf-route.js","sourceRoot":"","sources":["../src/cf-route.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAC9C,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAE1C,MAAM,aAAa,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;AACtH,MAAM,KAAK,GAAG,CAAC,MAAsB,EAAiC,EAAE,CAAC,WAAW,CAAC,aAAa,EAAE,MAAM,EAAE,UAAU,CAAC,CAAC;AAWxH,MAAM,WAAW,GAAG,KAAK,EAAE,QAAgB,EAAoB,EAAE;IAC7D,IAAI,CAAC;QACD,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,6CAA6C,kBAAkB,CAAC,QAAQ,CAAC,SAAS,EAAE;YAC7G,OAAO,EAAE,EAAE,MAAM,EAAE,sBAAsB,EAAE;SAC9C,CAAC,CAAC;QACH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACf,OAAO,KAAK,CAAC;QACjB,CAAC;QACD,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAuE,CAAC;QAC3G,OAAO,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC;IACrF,CAAC;IAAC,MAAM,CAAC;QACL,OAAO,KAAK,CAAC;IACjB,CAAC;AACL,CAAC,CAAC;AAEF,MAAM,qBAAqB,GAAuB,KAAK,EAAE,QAAQ,EAAE,GAAG,EAAE,EAAE;IACtE,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC;IACrC,SAAS,CAAC;QACN,IAAI,MAAM,WAAW,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC9B,OAAO;QACX,CAAC;QACD,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,QAAQ,EAAE,CAAC;YACzB,GAAG,CAAC,aAAa,QAAQ,uFAAuF,CAAC,CAAC;YAClH,OAAO;QACX,CAAC;QACD,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC;IAC9D,CAAC;AACL,CAAC,CAAC;AAOF,MAAM,CAAC,MAAM,qBAAqB,GAAG,CACjC,MAAqB,aAAa,EAClC,mBAAuC,qBAAqB,EACpD,EAAE,CAAC,CAAC;IACZ,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE;QACnB,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC;QACrD,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,aAAa,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;QAC7E,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACvB,OAAO,SAAS,CAAC;QACrB,CAAC;QACD,OAAO,EAAE,OAAO,EAAE,EAAE,GAAG,EAAE,WAAW,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,EAAE,CAAC;IAC5F,CAAC;IACD,IAAI,EAAE,CAAC,MAAM,EAAE,QAAQ,EAAE,EAAE;QACvB,MAAM,EAAE,KAAK,EAAE,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC;QAChC,MAAM,OAAO,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC,SAAS,CAAC,CAAC;QAC7C,IAAI,OAAO,KAAK,KAAK,EAAE,CAAC;YACpB,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;QAC9B,CAAC;QACD,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,iBAAiB,MAAM,CAAC,OAAO,CAAC,mBAAmB,KAAK,GAAG,EAAE,CAAC;IACrG,CAAC;IACD,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,GAAG,EAAE,EAAE;QACpC,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC;QAC5D,MAAM,OAAO,GAAG,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACpC,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,aAAa,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;QAC7E,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACvB,MAAM,GAAG,CAAC,eAAe,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;QAC7F,CAAC;aAAM,CAAC;YACJ,MAAM,GAAG,CAAC,eAAe,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,CAAC,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;QAClH,CAAC;QACD,MAAM,gBAAgB,CAAC,QAAQ,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC;QAC1C,OAAO,EAAE,GAAG,EAAE,WAAW,QAAQ,EAAE,EAAE,CAAC;IAC1C,CAAC;IACD,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE;QACrB,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC;QACrD,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,aAAa,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;QAC7E,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACvB,OAAO;QACX,CAAC;QACD,MAAM,GAAG,CAAC,eAAe,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC;IACzE,CAAC;CACJ,CAAC,CAAC"}

package/dist/ci.d.ts

@@ -0,0 +1,4 @@
+import type { Provider } from "@intentic/engine";
+import type { ForgejoApi } from "./forgejo-api.js";
+export declare const createCiProvider: (api?: ForgejoApi) => Provider;
+//# sourceMappingURL=ci.d.ts.map

package/dist/ci.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ci.d.ts","sourceRoot":"","sources":["../src/ci.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAkB,MAAM,kBAAkB,CAAC;AAEjE,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAsGnD,eAAO,MAAM,gBAAgB,GAAI,MAAK,UAAuB,KAAG,QAoF9D,CAAC"}

package/dist/ci.js

@@ -0,0 +1,151 @@
+import { z } from "zod";
+import { forgejoApi } from "./forgejo-api.js";
+import { parseInputs } from "./inputs.js";
+const ciSchema = z.object({
+    forgejoUrl: z.string(),
+    adminUser: z.string(),
+    adminPassword: z.string(),
+    komodoPassword: z.string(),
+    owner: z.string(),
+    repoName: z.string(),
+    branch: z.string(),
+    registry: z.string(),
+    tag: z.string(),
+    packagesToken: z.string(),
+    komodoUrl: z.string(),
+    deployment: z.string(),
+});
+const parse = (inputs) => parseInputs(ciSchema, inputs, "ci");
+const SECRET_REGISTRY = "REGISTRY_TOKEN";
+const SECRET_KOMODO = "KOMODO_PASSWORD";
+const workflowPath = (tag) => `.forgejo/workflows/build-${tag}.yaml`;
+const DOCKERFILE_PATH = "Dockerfile";
+const starterDockerfile = () => [
+    "# intentic starter Dockerfile — replace with your app's real build.",
+    "FROM busybox",
+    "RUN mkdir -p /www && printf '%s' 'intentic: replace this Dockerfile with your app' > /www/index.html",
+    "ENV PORT=8080",
+    "EXPOSE 8080",
+    'CMD ["sh","-c","httpd -f -v -p $PORT -h /www"]',
+    "",
+].join("\n");
+const workflowYaml = (parsed) => {
+    const base = `${parsed.registry}/${parsed.owner}/${parsed.repoName}`;
+    return [
+        "# Generated by intentic: build the image, push it to the Forgejo registry, notify Komodo to redeploy.",
+        "on:",
+        "  push:",
+        `    branches: [ "${parsed.branch}" ]`,
+        "jobs:",
+        "  build:",
+        "    runs-on: docker",
+        "    steps:",
+        "      - uses: https://github.com/actions/checkout@v4",
+        "      - uses: https://github.com/docker/login-action@v3",
+        "        with:",
+        `          registry: ${parsed.registry}`,
+        `          username: ${parsed.adminUser}`,
+        `          password: \${{ secrets.${SECRET_REGISTRY} }}`,
+        "      - uses: https://github.com/docker/build-push-action@v6",
+        "        with:",
+        "          context: .",
+        "          push: true",
+        "          tags: |",
+        `            ${base}:${parsed.tag}`,
+        `            ${base}:\${{ github.sha }}`,
+        "      - name: notify komodo to redeploy",
+        "        run: |",
+        `          KOMODO_PASSWORD='\${{ secrets.${SECRET_KOMODO} }}'`,
+        `          JWT=$(curl -sf ${parsed.komodoUrl}/auth/login/LoginLocalUser -H 'Content-Type: application/json' \\`,
+        `            -d '{"username":"${parsed.adminUser}","password":"'"$KOMODO_PASSWORD"'"}' | sed -n 's/.*"jwt":"\\([^"]*\\)".*/\\1/p')`,
+        `          curl -sf ${parsed.komodoUrl}/execute -H "Authorization: $JWT" -H 'Content-Type: application/json' \\`,
+        `            -d '{"type":"Deploy","params":{"deployment":"${parsed.deployment}"}}'`,
+        "",
+    ].join("\n");
+};
+const normalize = (yaml) => yaml
+    .split("\n")
+    .map((line) => line.replace(/\s+$/, ""))
+    .join("\n")
+    .trim();
+export const createCiProvider = (api = forgejoApi) => ({
+    read: async (inputs, ctx) => {
+        if (typeof inputs["forgejoUrl"] !== "string" || typeof inputs["komodoUrl"] !== "string") {
+            return undefined;
+        }
+        const parsed = parse(inputs);
+        try {
+            const workflow = await api.readFile({
+                baseUrl: parsed.forgejoUrl,
+                user: parsed.adminUser,
+                password: parsed.adminPassword,
+                owner: parsed.owner,
+                name: parsed.repoName,
+                branch: parsed.branch,
+                path: workflowPath(parsed.tag),
+            });
+            if (workflow === undefined) {
+                return undefined;
+            }
+            return { outputs: {}, detail: { workflow } };
+        }
+        catch (error) {
+            ctx.log(`ci "${ctx.id}": forgejo not reachable yet, treating as not-yet-created: ${String(error)}`);
+            return undefined;
+        }
+    },
+    diff: (inputs, observed) => {
+        const workflow = observed.detail?.["workflow"];
+        if (typeof workflow !== "string" || normalize(workflow) !== normalize(workflowYaml(parse(inputs)))) {
+            return { action: "update", reason: "ci workflow differs from desired" };
+        }
+        return { action: "noop" };
+    },
+    apply: async (inputs) => {
+        const parsed = parse(inputs);
+        const repo = {
+            baseUrl: parsed.forgejoUrl,
+            user: parsed.adminUser,
+            password: parsed.adminPassword,
+            owner: parsed.owner,
+            name: parsed.repoName,
+        };
+        await api.setRepoSecret({ ...repo, secretName: SECRET_REGISTRY, data: parsed.packagesToken });
+        await api.setRepoSecret({ ...repo, secretName: SECRET_KOMODO, data: parsed.komodoPassword });
+        const dockerfile = await api.readFile({ ...repo, branch: parsed.branch, path: DOCKERFILE_PATH });
+        if (dockerfile === undefined) {
+            await api.commitFile({
+                ...repo,
+                branch: parsed.branch,
+                path: DOCKERFILE_PATH,
+                content: starterDockerfile(),
+                message: "intentic: starter Dockerfile",
+            });
+        }
+        await api.commitFile({
+            ...repo,
+            branch: parsed.branch,
+            path: workflowPath(parsed.tag),
+            content: workflowYaml(parsed),
+            message: "intentic: ci workflow",
+        });
+        return {};
+    },
+    delete: async (inputs) => {
+        if (typeof inputs["forgejoUrl"] !== "string") {
+            return;
+        }
+        const parsed = parse(inputs);
+        const repo = {
+            baseUrl: parsed.forgejoUrl,
+            user: parsed.adminUser,
+            password: parsed.adminPassword,
+            owner: parsed.owner,
+            name: parsed.repoName,
+        };
+        await api.deleteFile({ ...repo, branch: parsed.branch, path: workflowPath(parsed.tag), message: "intentic: remove ci workflow" });
+        await api.deleteRepoSecret({ ...repo, secretName: SECRET_REGISTRY });
+        await api.deleteRepoSecret({ ...repo, secretName: SECRET_KOMODO });
+    },
+});
+//# sourceMappingURL=ci.js.map

package/dist/ci.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ci.js","sourceRoot":"","sources":["../src/ci.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC9C,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAE1C,MAAM,QAAQ,GAAG,CAAC,CAAC,MAAM,CAAC;IAEtB,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE;IAGtB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;IACrB,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE;IACzB,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE;IAG1B,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;IACjB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE;IAEpB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;IAElB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE;IAEpB,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE;IAEf,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE;IAEzB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;IAErB,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE;CACzB,CAAC,CAAC;AAEH,MAAM,KAAK,GAAG,CAAC,MAAsB,EAAY,EAAE,CAAC,WAAW,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;AAExF,MAAM,eAAe,GAAG,gBAAgB,CAAC;AACzC,MAAM,aAAa,GAAG,iBAAiB,CAAC;AACxC,MAAM,YAAY,GAAG,CAAC,GAAW,EAAU,EAAE,CAAC,4BAA4B,GAAG,OAAO,CAAC;AACrF,MAAM,eAAe,GAAG,YAAY,CAAC;AAKrC,MAAM,iBAAiB,GAAG,GAAW,EAAE,CACnC;IACI,qEAAqE;IACrE,cAAc;IACd,sGAAsG;IACtG,eAAe;IACf,aAAa;IACb,gDAAgD;IAChD,EAAE;CACL,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAMjB,MAAM,YAAY,GAAG,CAAC,MAAgB,EAAU,EAAE;IAC9C,MAAM,IAAI,GAAG,GAAG,MAAM,CAAC,QAAQ,IAAI,MAAM,CAAC,KAAK,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;IACrE,OAAO;QACH,uGAAuG;QACvG,KAAK;QACL,SAAS;QACT,oBAAoB,MAAM,CAAC,MAAM,KAAK;QACtC,OAAO;QACP,UAAU;QACV,qBAAqB;QACrB,YAAY;QACZ,sDAAsD;QACtD,yDAAyD;QACzD,eAAe;QACf,uBAAuB,MAAM,CAAC,QAAQ,EAAE;QACxC,uBAAuB,MAAM,CAAC,SAAS,EAAE;QACzC,oCAAoC,eAAe,KAAK;QACxD,8DAA8D;QAC9D,eAAe;QACf,sBAAsB;QACtB,sBAAsB;QACtB,mBAAmB;QACnB,eAAe,IAAI,IAAI,MAAM,CAAC,GAAG,EAAE;QACnC,eAAe,IAAI,qBAAqB;QACxC,yCAAyC;QACzC,gBAAgB;QAChB,2CAA2C,aAAa,MAAM;QAC9D,4BAA4B,MAAM,CAAC,SAAS,mEAAmE;QAC/G,gCAAgC,MAAM,CAAC,SAAS,mFAAmF;QACnI,sBAAsB,MAAM,CAAC,SAAS,0EAA0E;QAChH,4DAA4D,MAAM,CAAC,UAAU,MAAM;QACnF,EAAE;KACL,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACjB,CAAC,CAAC;AAEF,MAAM,SAAS,GAAG,CAAC,IAAY,EAAU,EAAE,CACvC,IAAI;KACC,KAAK,CAAC,IAAI,CAAC;KACX,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;KACvC,IAAI,CAAC,IAAI,CAAC;KACV,IAAI,EAAE,CAAC;AAOhB,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,MAAkB,UAAU,EAAY,EAAE,CAAC,CAAC;IACzE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE;QACxB,IAAI,OAAO,MAAM,CAAC,YAAY,CAAC,KAAK,QAAQ,IAAI,OAAO,MAAM,CAAC,WAAW,CAAC,KAAK,QAAQ,EAAE,CAAC;YACtF,OAAO,SAAS,CAAC;QACrB,CAAC;QACD,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC;QAC7B,IAAI,CAAC;YACD,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,QAAQ,CAAC;gBAChC,OAAO,EAAE,MAAM,CAAC,UAAU;gBAC1B,IAAI,EAAE,MAAM,CAAC,SAAS;gBACtB,QAAQ,EAAE,MAAM,CAAC,aAAa;gBAC9B,KAAK,EAAE,MAAM,CAAC,KAAK;gBACnB,IAAI,EAAE,MAAM,CAAC,QAAQ;gBACrB,MAAM,EAAE,MAAM,CAAC,MAAM;gBACrB,IAAI,EAAE,YAAY,CAAC,MAAM,CAAC,GAAG,CAAC;aACjC,CAAC,CAAC;YACH,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;gBACzB,OAAO,SAAS,CAAC;YACrB,CAAC;YACD,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,QAAQ,EAAE,EAAE,CAAC;QACjD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACb,GAAG,CAAC,GAAG,CAAC,OAAO,GAAG,CAAC,EAAE,8DAA8D,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YACpG,OAAO,SAAS,CAAC;QACrB,CAAC;IACL,CAAC;IACD,IAAI,EAAE,CAAC,MAAM,EAAE,QAAQ,EAAE,EAAE;QACvB,MAAM,QAAQ,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC,UAAU,CAAC,CAAC;QAC/C,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,SAAS,CAAC,QAAQ,CAAC,KAAK,SAAS,CAAC,YAAY,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;YACjG,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,kCAAkC,EAAE,CAAC;QAC5E,CAAC;QACD,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;IAC9B,CAAC;IACD,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE;QACpB,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC;QAC7B,MAAM,IAAI,GAAG;YACT,OAAO,EAAE,MAAM,CAAC,UAAU;YAC1B,IAAI,EAAE,MAAM,CAAC,SAAS;YACtB,QAAQ,EAAE,MAAM,CAAC,aAAa;YAC9B,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,IAAI,EAAE,MAAM,CAAC,QAAQ;SACxB,CAAC;QAEF,MAAM,GAAG,CAAC,aAAa,CAAC,EAAE,GAAG,IAAI,EAAE,UAAU,EAAE,eAAe,EAAE,IAAI,EAAE,MAAM,CAAC,aAAa,EAAE,CAAC,CAAC;QAC9F,MAAM,GAAG,CAAC,aAAa,CAAC,EAAE,GAAG,IAAI,EAAE,UAAU,EAAE,aAAa,EAAE,IAAI,EAAE,MAAM,CAAC,cAAc,EAAE,CAAC,CAAC;QAG7F,MAAM,UAAU,GAAG,MAAM,GAAG,CAAC,QAAQ,CAAC,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,IAAI,EAAE,eAAe,EAAE,CAAC,CAAC;QACjG,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;YAC3B,MAAM,GAAG,CAAC,UAAU,CAAC;gBACjB,GAAG,IAAI;gBACP,MAAM,EAAE,MAAM,CAAC,MAAM;gBACrB,IAAI,EAAE,eAAe;gBACrB,OAAO,EAAE,iBAAiB,EAAE;gBAC5B,OAAO,EAAE,8BAA8B;aAC1C,CAAC,CAAC;QACP,CAAC;QAED,MAAM,GAAG,CAAC,UAAU,CAAC;YACjB,GAAG,IAAI;YACP,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,IAAI,EAAE,YAAY,CAAC,MAAM,CAAC,GAAG,CAAC;YAC9B,OAAO,EAAE,YAAY,CAAC,MAAM,CAAC;YAC7B,OAAO,EAAE,uBAAuB;SACnC,CAAC,CAAC;QACH,OAAO,EAAE,CAAC;IACd,CAAC;IACD,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE;QACrB,IAAI,OAAO,MAAM,CAAC,YAAY,CAAC,KAAK,QAAQ,EAAE,CAAC;YAC3C,OAAO;QACX,CAAC;QACD,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC;QAC7B,MAAM,IAAI,GAAG;YACT,OAAO,EAAE,MAAM,CAAC,UAAU;YAC1B,IAAI,EAAE,MAAM,CAAC,SAAS;YACtB,QAAQ,EAAE,MAAM,CAAC,aAAa;YAC9B,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,IAAI,EAAE,MAAM,CAAC,QAAQ;SACxB,CAAC;QAGF,MAAM,GAAG,CAAC,UAAU,CAAC,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,IAAI,EAAE,YAAY,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,OAAO,EAAE,8BAA8B,EAAE,CAAC,CAAC;QAClI,MAAM,GAAG,CAAC,gBAAgB,CAAC,EAAE,GAAG,IAAI,EAAE,UAAU,EAAE,eAAe,EAAE,CAAC,CAAC;QACrE,MAAM,GAAG,CAAC,gBAAgB,CAAC,EAAE,GAAG,IAAI,EAAE,UAAU,EAAE,aAAa,EAAE,CAAC,CAAC;IACvE,CAAC;CACJ,CAAC,CAAC"}

package/dist/cloudflare-api.d.ts

@@ -0,0 +1,85 @@
+export interface IngressRule {
+    readonly hostname?: string;
+    readonly service: string;
+}
+export interface CloudflareApi {
+    readonly getZone: (args: {
+        readonly apiToken: string;
+        readonly zone: string;
+    }) => Promise<{
+        readonly id: string;
+        readonly accountId: string;
+    } | undefined>;
+    readonly listZones: (args: {
+        readonly apiToken: string;
+    }) => Promise<{
+        readonly id: string;
+        readonly name: string;
+        readonly accountId: string;
+    }[]>;
+    readonly findTunnel: (args: {
+        readonly accountId: string;
+        readonly apiToken: string;
+        readonly name: string;
+    }) => Promise<{
+        readonly id: string;
+    } | undefined>;
+    readonly createTunnel: (args: {
+        readonly accountId: string;
+        readonly apiToken: string;
+        readonly name: string;
+    }) => Promise<{
+        readonly id: string;
+    }>;
+    readonly getTunnelToken: (args: {
+        readonly accountId: string;
+        readonly apiToken: string;
+        readonly tunnelId: string;
+    }) => Promise<string>;
+    readonly getTunnelIngress: (args: {
+        readonly accountId: string;
+        readonly apiToken: string;
+        readonly tunnelId: string;
+    }) => Promise<IngressRule[] | undefined>;
+    readonly putTunnelIngress: (args: {
+        readonly accountId: string;
+        readonly apiToken: string;
+        readonly tunnelId: string;
+        readonly ingress: readonly IngressRule[];
+    }) => Promise<void>;
+    readonly findDnsRecord: (args: {
+        readonly apiToken: string;
+        readonly zoneId: string;
+        readonly name: string;
+    }) => Promise<{
+        readonly id: string;
+        readonly content: string;
+    } | undefined>;
+    readonly createDnsRecord: (args: {
+        readonly apiToken: string;
+        readonly zoneId: string;
+        readonly name: string;
+        readonly content: string;
+        readonly comment: string;
+    }) => Promise<void>;
+    readonly updateDnsRecord: (args: {
+        readonly apiToken: string;
+        readonly zoneId: string;
+        readonly recordId: string;
+        readonly name: string;
+        readonly content: string;
+        readonly comment: string;
+    }) => Promise<void>;
+    readonly deleteTunnel: (args: {
+        readonly accountId: string;
+        readonly apiToken: string;
+        readonly tunnelId: string;
+    }) => Promise<void>;
+    readonly deleteDnsRecord: (args: {
+        readonly apiToken: string;
+        readonly zoneId: string;
+        readonly recordId: string;
+    }) => Promise<void>;
+}
+export declare const cloudflareApi: CloudflareApi;
+//# sourceMappingURL=cloudflare-api.d.ts.map

package/dist/cloudflare-api.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cloudflare-api.d.ts","sourceRoot":"","sources":["../src/cloudflare-api.ts"],"names":[],"mappings":"AAKA,MAAM,WAAW,WAAW;IACxB,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC5B;AAOD,MAAM,WAAW,aAAa;IAG1B,QAAQ,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE;QACrB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;QAC1B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;KACzB,KAAK,OAAO,CAAC;QAAE,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;KAAE,GAAG,SAAS,CAAC,CAAC;IAG/E,QAAQ,CAAC,SAAS,EAAE,CAAC,IAAI,EAAE;QACvB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;KAC7B,KAAK,OAAO,CAAC;QAAE,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC,CAAC;IAE5F,QAAQ,CAAC,UAAU,EAAE,CAAC,IAAI,EAAE;QACxB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;QAC3B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;QAC1B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;KACzB,KAAK,OAAO,CAAC;QAAE,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;KAAE,GAAG,SAAS,CAAC,CAAC;IAEnD,QAAQ,CAAC,YAAY,EAAE,CAAC,IAAI,EAAE;QAC1B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;QAC3B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;QAC1B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;KACzB,KAAK,OAAO,CAAC;QAAE,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAEvC,QAAQ,CAAC,cAAc,EAAE,CAAC,IAAI,EAAE;QAAE,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IAEzI,QAAQ,CAAC,gBAAgB,EAAE,CAAC,IAAI,EAAE;QAC9B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;QAC3B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;QAC1B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;KAC7B,KAAK,OAAO,CAAC,WAAW,EAAE,GAAG,SAAS,CAAC,CAAC;IAEzC,QAAQ,CAAC,gBAAgB,EAAE,CAAC,IAAI,EAAE;QAC9B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;QAC3B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;QAC1B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;QAC1B,QAAQ,CAAC,OAAO,EAAE,SAAS,WAAW,EAAE,CAAC;KAC5C,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAEpB,QAAQ,CAAC,aAAa,EAAE,CAAC,IAAI,EAAE;QAC3B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;QAC1B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;QACxB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;KACzB,KAAK,OAAO,CAAC;QAAE,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;KAAE,GAAG,SAAS,CAAC,CAAC;IAE7E,QAAQ,CAAC,eAAe,EAAE,CAAC,IAAI,EAAE;QAC7B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;QAC1B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;QACxB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QACtB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;QACzB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;KAC5B,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAEpB,QAAQ,CAAC,eAAe,EAAE,CAAC,IAAI,EAAE;QAC7B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;QAC1B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;QACxB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;QAC1B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QACtB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;QACzB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;KAC5B,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAGpB,QAAQ,CAAC,YAAY,EAAE,CAAC,IAAI,EAAE;QAAE,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAErI,QAAQ,CAAC,eAAe,EAAE,CAAC,IAAI,EAAE;QAAE,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;CACxI;AAyCD,eAAO,MAAM,aAAa,EAAE,aAoG3B,CAAC"}

package/dist/cloudflare-api.js

@@ -0,0 +1,110 @@
+import { z } from "zod";
+import { parseResponse } from "./inputs.js";
+const ingressRuleSchema = z.object({ hostname: z.string().optional(), service: z.string() });
+const BASE = "https://api.cloudflare.com/client/v4";
+const envelopeSchema = z.object({
+    success: z.boolean(),
+    errors: z.array(z.object({ code: z.number(), message: z.string() })),
+    result: z.unknown(),
+    result_info: z.unknown().optional(),
+});
+const request = async (apiToken, path, init) => {
+    const label = `Cloudflare API ${init?.method ?? "GET"} ${path}`;
+    const response = await fetch(`${BASE}${path}`, {
+        ...init,
+        headers: {
+            Authorization: `Bearer ${apiToken}`,
+            ...(init?.body !== undefined ? { "Content-Type": "application/json" } : {}),
+        },
+    });
+    const envelope = parseResponse(envelopeSchema, await response.json(), label);
+    if (!response.ok || !envelope.success) {
+        const detail = envelope.errors.map((error) => `${error.code} ${error.message}`).join("; ");
+        throw new Error(`${label} failed (HTTP ${response.status}): ${detail}`);
+    }
+    return envelope;
+};
+const call = async (apiToken, path, resultSchema, init) => {
+    const envelope = await request(apiToken, path, init);
+    return parseResponse(resultSchema, envelope.result, `Cloudflare API ${init?.method ?? "GET"} ${path}`);
+};
+export const cloudflareApi = {
+    getZone: async ({ apiToken, zone }) => {
+        const zones = await call(apiToken, `/zones?name=${encodeURIComponent(zone)}`, z.array(z.object({ id: z.string(), account: z.object({ id: z.string() }) })));
+        const found = zones[0];
+        if (found === undefined) {
+            return undefined;
+        }
+        return { id: found.id, accountId: found.account.id };
+    },
+    listZones: async ({ apiToken }) => {
+        const zones = [];
+        let page = 1;
+        let totalPages = 1;
+        do {
+            const envelope = await request(apiToken, `/zones?per_page=50&page=${page}`);
+            const parsed = parseResponse(z.array(z.object({ id: z.string(), name: z.string(), account: z.object({ id: z.string() }) })), envelope.result, `Cloudflare API GET /zones?per_page=50&page=${page}`);
+            for (const zone of parsed) {
+                zones.push({ id: zone.id, name: zone.name, accountId: zone.account.id });
+            }
+            totalPages = z.object({ total_pages: z.number() }).safeParse(envelope.result_info).data?.total_pages ?? 1;
+            page += 1;
+        } while (page <= totalPages);
+        return zones;
+    },
+    findTunnel: async ({ accountId, apiToken, name }) => {
+        const tunnels = await call(apiToken, `/accounts/${encodeURIComponent(accountId)}/cfd_tunnel?name=${encodeURIComponent(name)}&is_deleted=false`, z.array(z.object({ id: z.string() })));
+        const found = tunnels[0];
+        if (found === undefined) {
+            return undefined;
+        }
+        return { id: found.id };
+    },
+    createTunnel: ({ accountId, apiToken, name }) => call(apiToken, `/accounts/${encodeURIComponent(accountId)}/cfd_tunnel`, z.object({ id: z.string() }), {
+        method: "POST",
+        body: JSON.stringify({ name, config_src: "cloudflare" }),
+    }),
+    getTunnelToken: ({ accountId, apiToken, tunnelId }) => call(apiToken, `/accounts/${encodeURIComponent(accountId)}/cfd_tunnel/${encodeURIComponent(tunnelId)}/token`, z.string()),
+    getTunnelIngress: async ({ accountId, apiToken, tunnelId }) => {
+        const config = await call(apiToken, `/accounts/${encodeURIComponent(accountId)}/cfd_tunnel/${encodeURIComponent(tunnelId)}/configurations`, z.object({ config: z.object({ ingress: z.array(ingressRuleSchema).optional() }).optional() }).nullable());
+        const ingress = config?.config?.ingress;
+        return ingress?.map((rule) => (rule.hostname === undefined ? { service: rule.service } : { hostname: rule.hostname, service: rule.service }));
+    },
+    putTunnelIngress: async ({ accountId, apiToken, tunnelId, ingress }) => {
+        await call(apiToken, `/accounts/${encodeURIComponent(accountId)}/cfd_tunnel/${encodeURIComponent(tunnelId)}/configurations`, z.unknown(), {
+            method: "PUT",
+            body: JSON.stringify({ config: { ingress } }),
+        });
+    },
+    findDnsRecord: async ({ apiToken, zoneId, name }) => {
+        const records = await call(apiToken, `/zones/${encodeURIComponent(zoneId)}/dns_records?type=CNAME&name=${encodeURIComponent(name)}`, z.array(z.object({ id: z.string(), content: z.string() })));
+        const found = records[0];
+        if (found === undefined) {
+            return undefined;
+        }
+        return { id: found.id, content: found.content };
+    },
+    createDnsRecord: async ({ apiToken, zoneId, name, content, comment }) => {
+        await call(apiToken, `/zones/${encodeURIComponent(zoneId)}/dns_records`, z.unknown(), {
+            method: "POST",
+            body: JSON.stringify({ type: "CNAME", name, content, proxied: true, comment }),
+        });
+    },
+    updateDnsRecord: async ({ apiToken, zoneId, recordId, name, content, comment }) => {
+        await call(apiToken, `/zones/${encodeURIComponent(zoneId)}/dns_records/${encodeURIComponent(recordId)}`, z.unknown(), {
+            method: "PUT",
+            body: JSON.stringify({ type: "CNAME", name, content, proxied: true, comment }),
+        });
+    },
+    deleteTunnel: async ({ accountId, apiToken, tunnelId }) => {
+        await call(apiToken, `/accounts/${encodeURIComponent(accountId)}/cfd_tunnel/${encodeURIComponent(tunnelId)}`, z.unknown(), {
+            method: "DELETE",
+        });
+    },
+    deleteDnsRecord: async ({ apiToken, zoneId, recordId }) => {
+        await call(apiToken, `/zones/${encodeURIComponent(zoneId)}/dns_records/${encodeURIComponent(recordId)}`, z.unknown(), {
+            method: "DELETE",
+        });
+    },
+};
+//# sourceMappingURL=cloudflare-api.js.map