@intentic/providers 1.18.0

package/dist/forgejo-org.js

@@ -0,0 +1,43 @@
+import { z } from "zod";
+import { forgejoApi } from "./forgejo-api.js";
+import { parseInputs } from "./inputs.js";
+const forgejoOrgSchema = z.object({
+    forgejoUrl: z.string(),
+    adminUser: z.string(),
+    adminPassword: z.string(),
+    org: z.string(),
+});
+const parse = (inputs) => parseInputs(forgejoOrgSchema, inputs, "forgejo-org");
+export const createForgejoOrgProvider = (api = forgejoApi) => ({
+    read: async (inputs, ctx) => {
+        if (typeof inputs["forgejoUrl"] !== "string") {
+            return undefined;
+        }
+        const parsed = parse(inputs);
+        try {
+            const exists = await api.findOrg({ baseUrl: parsed.forgejoUrl, user: parsed.adminUser, password: parsed.adminPassword, org: parsed.org });
+            return exists ? { outputs: {} } : undefined;
+        }
+        catch (error) {
+            ctx.log(`forgejo-org "${ctx.id}": forgejo not reachable yet, treating as not-yet-created: ${String(error)}`);
+            return undefined;
+        }
+    },
+    diff: () => ({ action: "noop" }),
+    apply: async (inputs) => {
+        const parsed = parse(inputs);
+        const auth = { baseUrl: parsed.forgejoUrl, user: parsed.adminUser, password: parsed.adminPassword };
+        if (!(await api.findOrg({ ...auth, org: parsed.org }))) {
+            await api.createOrg({ ...auth, org: parsed.org });
+        }
+        return {};
+    },
+    delete: async (inputs) => {
+        if (typeof inputs["forgejoUrl"] !== "string") {
+            return;
+        }
+        const parsed = parse(inputs);
+        await api.deleteOrg({ baseUrl: parsed.forgejoUrl, user: parsed.adminUser, password: parsed.adminPassword, org: parsed.org });
+    },
+});
+//# sourceMappingURL=forgejo-org.js.map

package/dist/forgejo-org.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"forgejo-org.js","sourceRoot":"","sources":["../src/forgejo-org.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC9C,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAE1C,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC9B,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE;IACtB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;IACrB,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE;IACzB,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE;CAClB,CAAC,CAAC;AAEH,MAAM,KAAK,GAAG,CAAC,MAAsB,EAAoB,EAAE,CAAC,WAAW,CAAC,gBAAgB,EAAE,MAAM,EAAE,aAAa,CAAC,CAAC;AAKjH,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,MAAkB,UAAU,EAAY,EAAE,CAAC,CAAC;IACjF,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE;QACxB,IAAI,OAAO,MAAM,CAAC,YAAY,CAAC,KAAK,QAAQ,EAAE,CAAC;YAC3C,OAAO,SAAS,CAAC;QACrB,CAAC;QACD,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC;QAC7B,IAAI,CAAC;YACD,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,UAAU,EAAE,IAAI,EAAE,MAAM,CAAC,SAAS,EAAE,QAAQ,EAAE,MAAM,CAAC,aAAa,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC;YAC1I,OAAO,MAAM,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;QAChD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACb,GAAG,CAAC,GAAG,CAAC,gBAAgB,GAAG,CAAC,EAAE,8DAA8D,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YAC7G,OAAO,SAAS,CAAC;QACrB,CAAC;IACL,CAAC;IACD,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;IAChC,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE;QACpB,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC;QAC7B,MAAM,IAAI,GAAG,EAAE,OAAO,EAAE,MAAM,CAAC,UAAU,EAAE,IAAI,EAAE,MAAM,CAAC,SAAS,EAAE,QAAQ,EAAE,MAAM,CAAC,aAAa,EAAE,CAAC;QACpG,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,OAAO,CAAC,EAAE,GAAG,IAAI,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC;YACrD,MAAM,GAAG,CAAC,SAAS,CAAC,EAAE,GAAG,IAAI,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC;QACtD,CAAC;QACD,OAAO,EAAE,CAAC;IACd,CAAC;IACD,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE;QACrB,IAAI,OAAO,MAAM,CAAC,YAAY,CAAC,KAAK,QAAQ,EAAE,CAAC;YAC3C,OAAO;QACX,CAAC;QACD,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC;QAC7B,MAAM,GAAG,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,UAAU,EAAE,IAAI,EAAE,MAAM,CAAC,SAAS,EAAE,QAAQ,EAAE,MAAM,CAAC,aAAa,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC;IACjI,CAAC;CACJ,CAAC,CAAC"}

package/dist/forgejo-runner.d.ts

@@ -0,0 +1,4 @@
+import type { Provider } from "@intentic/engine";
+import type { SshExecutor } from "./ssh.js";
+export declare const createForgejoRunnerProvider: (executor?: SshExecutor) => Provider;
+//# sourceMappingURL=forgejo-runner.d.ts.map

package/dist/forgejo-runner.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"forgejo-runner.d.ts","sourceRoot":"","sources":["../src/forgejo-runner.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAkB,MAAM,kBAAkB,CAAC;AAGjE,OAAO,KAAK,EAAE,WAAW,EAAc,MAAM,UAAU,CAAC;AA8DxD,eAAO,MAAM,2BAA2B,GAAI,WAAU,WAAyB,KAAG,QAmFhF,CAAC"}

package/dist/forgejo-runner.js

@@ -0,0 +1,111 @@
+import { z } from "zod";
+import { parseInputs, sshSchema, sshTarget } from "./inputs.js";
+import { sshExecutor } from "./ssh.js";
+const runnerSchema = sshSchema.extend({ instanceUrl: z.string(), token: z.string(), image: z.string(), jobImage: z.string() });
+const parse = (inputs) => parseInputs(runnerSchema, inputs, "forgejo-runner");
+const CONTAINER = "intentic-forgejo-runner";
+const CONFIG_DIR = "/opt/intentic/runner";
+const runnerConfig = (dockerBin, buildxPlugin, jobImage) => [
+    "runner:",
+    `  labels: [ "docker:docker://${jobImage}" ]`,
+    "container:",
+    "  network: host",
+    "  docker_host: automount",
+    `  options: -v ${dockerBin}:/usr/local/bin/docker:ro -v ${buildxPlugin}:/usr/local/lib/docker/cli-plugins/docker-buildx:ro`,
+    "  valid_volumes:",
+    `    - ${dockerBin}`,
+    `    - ${buildxPlugin}`,
+    "",
+].join("\n");
+const running = async (session) => {
+    const result = await session.exec(`docker ps --filter "name=^${CONTAINER}$" --format '{{.Names}}'`);
+    return result.stdout.trim() === CONTAINER;
+};
+const registeredTo = async (session, instanceUrl) => {
+    const result = await session.exec(`docker exec ${CONTAINER} cat /data/.runner 2>/dev/null || true`);
+    return result.stdout.includes(instanceUrl);
+};
+const runningImage = async (session) => {
+    const result = await session.exec(`docker inspect --format '{{.Config.Image}}' ${CONTAINER} 2>/dev/null || true`);
+    return result.stdout.trim();
+};
+const configuredJobImage = async (session) => {
+    const result = await session.exec(`cat ${CONFIG_DIR}/config.yaml 2>/dev/null || true`);
+    const match = result.stdout.match(/docker:\/\/(\S+?)"/);
+    return match?.[1] ?? "";
+};
+export const createForgejoRunnerProvider = (executor = sshExecutor) => ({
+    read: async (inputs, ctx) => {
+        const parsed = parse(inputs);
+        let session;
+        try {
+            session = await executor.connect(sshTarget(parsed));
+        }
+        catch (error) {
+            ctx.log(`forgejo-runner "${ctx.id}": host not reachable over SSH, treating as not-yet-created: ${String(error)}`);
+            return undefined;
+        }
+        try {
+            if (!(await running(session)) || !(await registeredTo(session, parsed.instanceUrl))) {
+                return undefined;
+            }
+            return { outputs: {}, detail: { image: await runningImage(session), jobImage: await configuredJobImage(session) } };
+        }
+        finally {
+            await session.dispose();
+        }
+    },
+    diff: (inputs, observed) => {
+        const parsed = parse(inputs);
+        if (observed.detail?.["image"] !== parsed.image) {
+            return { action: "update", reason: `forgejo-runner image differs (running ${String(observed.detail?.["image"])}, want ${parsed.image})` };
+        }
+        if (observed.detail?.["jobImage"] !== parsed.jobImage) {
+            return {
+                action: "update",
+                reason: `forgejo-runner job image differs (config ${String(observed.detail?.["jobImage"])}, want ${parsed.jobImage})`,
+            };
+        }
+        return { action: "noop" };
+    },
+    apply: async (inputs, _observed, ctx) => {
+        const parsed = parse(inputs);
+        const session = await executor.connect(sshTarget(parsed));
+        try {
+            const dockerBin = (await session.exec("command -v docker")).stdout.trim();
+            if (dockerBin === "") {
+                throw new Error("forgejo-runner: no docker CLI found on the host (CI builds the app image with the host daemon)");
+            }
+            const buildxPlugin = (await session.exec("find /usr/local/libexec/docker/cli-plugins /usr/libexec/docker/cli-plugins /usr/lib/docker/cli-plugins /usr/local/lib/docker/cli-plugins -name docker-buildx 2>/dev/null | head -1")).stdout.trim();
+            if (buildxPlugin === "") {
+                throw new Error("forgejo-runner: no docker buildx plugin found on the host (the CI build-push step needs it)");
+            }
+            await session.exec(`mkdir -p ${CONFIG_DIR}`);
+            await session.exec(`cat > ${CONFIG_DIR}/config.yaml <<'CFG'\n${runnerConfig(dockerBin, buildxPlugin, parsed.jobImage)}CFG`);
+            await session.exec(`docker rm -f ${CONTAINER} 2>/dev/null || true`);
+            const run = await session.exec(`docker run -d --restart unless-stopped --network host --user root --name ${CONTAINER} --label intentic.id=${ctx.id} ` +
+                `-v ${CONTAINER}-data:/data -v /var/run/docker.sock:/var/run/docker.sock -v ${CONFIG_DIR}/config.yaml:/config.yaml:ro ${parsed.image} ` +
+                `sh -c "forgejo-runner register --no-interactive --config /config.yaml --instance ${parsed.instanceUrl} --token ${parsed.token} && forgejo-runner daemon --config /config.yaml"`);
+            if (run.code !== 0) {
+                throw new Error(`failed to start forgejo-runner on host: exited ${run.code}: ${run.stderr.trim()}`);
+            }
+            return {};
+        }
+        finally {
+            await session.dispose();
+        }
+    },
+    delete: async (inputs) => {
+        const parsed = parse(inputs);
+        const session = await executor.connect(sshTarget(parsed));
+        try {
+            await session.exec(`docker rm -f ${CONTAINER} 2>/dev/null || true`);
+            await session.exec(`docker volume rm ${CONTAINER}-data 2>/dev/null || true`);
+            await session.exec(`rm -rf ${CONFIG_DIR}`);
+        }
+        finally {
+            await session.dispose();
+        }
+    },
+});
+//# sourceMappingURL=forgejo-runner.js.map

package/dist/forgejo-runner.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"forgejo-runner.js","sourceRoot":"","sources":["../src/forgejo-runner.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAEhE,OAAO,EAAE,WAAW,EAAE,MAAM,UAAU,CAAC;AAMvC,MAAM,YAAY,GAAG,SAAS,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;AAE/H,MAAM,KAAK,GAAG,CAAC,MAAsB,EAAgB,EAAE,CAAC,WAAW,CAAC,YAAY,EAAE,MAAM,EAAE,gBAAgB,CAAC,CAAC;AAE5G,MAAM,SAAS,GAAG,yBAAyB,CAAC;AAC5C,MAAM,UAAU,GAAG,sBAAsB,CAAC;AAM1C,MAAM,YAAY,GAAG,CAAC,SAAiB,EAAE,YAAoB,EAAE,QAAgB,EAAU,EAAE,CACvF;IACI,SAAS;IACT,gCAAgC,QAAQ,KAAK;IAC7C,YAAY;IACZ,iBAAiB;IACjB,0BAA0B;IAC1B,iBAAiB,SAAS,gCAAgC,YAAY,qDAAqD;IAC3H,kBAAkB;IAClB,SAAS,SAAS,EAAE;IACpB,SAAS,YAAY,EAAE;IACvB,EAAE;CACL,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAEjB,MAAM,OAAO,GAAG,KAAK,EAAE,OAAmB,EAAoB,EAAE;IAC5D,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,6BAA6B,SAAS,0BAA0B,CAAC,CAAC;IACpG,OAAO,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,SAAS,CAAC;AAC9C,CAAC,CAAC;AAIF,MAAM,YAAY,GAAG,KAAK,EAAE,OAAmB,EAAE,WAAmB,EAAoB,EAAE;IACtF,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,eAAe,SAAS,wCAAwC,CAAC,CAAC;IACpG,OAAO,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;AAC/C,CAAC,CAAC;AAKF,MAAM,YAAY,GAAG,KAAK,EAAE,OAAmB,EAAmB,EAAE;IAChE,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,+CAA+C,SAAS,sBAAsB,CAAC,CAAC;IAClH,OAAO,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;AAChC,CAAC,CAAC;AAEF,MAAM,kBAAkB,GAAG,KAAK,EAAE,OAAmB,EAAmB,EAAE;IACtE,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,OAAO,UAAU,kCAAkC,CAAC,CAAC;IACvF,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC;IACxD,OAAO,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;AAC5B,CAAC,CAAC;AAMF,MAAM,CAAC,MAAM,2BAA2B,GAAG,CAAC,WAAwB,WAAW,EAAY,EAAE,CAAC,CAAC;IAC3F,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE;QACxB,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC;QAC7B,IAAI,OAAmB,CAAC;QACxB,IAAI,CAAC;YACD,OAAO,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;QACxD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACb,GAAG,CAAC,GAAG,CAAC,mBAAmB,GAAG,CAAC,EAAE,gEAAgE,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YAClH,OAAO,SAAS,CAAC;QACrB,CAAC;QACD,IAAI,CAAC;YACD,IAAI,CAAC,CAAC,MAAM,OAAO,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,YAAY,CAAC,OAAO,EAAE,MAAM,CAAC,WAAW,CAAC,CAAC,EAAE,CAAC;gBAClF,OAAO,SAAS,CAAC;YACrB,CAAC;YACD,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,KAAK,EAAE,MAAM,YAAY,CAAC,OAAO,CAAC,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC;QACxH,CAAC;gBAAS,CAAC;YACP,MAAM,OAAO,CAAC,OAAO,EAAE,CAAC;QAC5B,CAAC;IACL,CAAC;IAGD,IAAI,EAAE,CAAC,MAAM,EAAE,QAAQ,EAAE,EAAE;QACvB,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC;QAC7B,IAAI,QAAQ,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,KAAK,MAAM,CAAC,KAAK,EAAE,CAAC;YAC9C,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,yCAAyC,MAAM,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,CAAC,UAAU,MAAM,CAAC,KAAK,GAAG,EAAE,CAAC;QAC9I,CAAC;QACD,IAAI,QAAQ,CAAC,MAAM,EAAE,CAAC,UAAU,CAAC,KAAK,MAAM,CAAC,QAAQ,EAAE,CAAC;YACpD,OAAO;gBACH,MAAM,EAAE,QAAQ;gBAChB,MAAM,EAAE,4CAA4C,MAAM,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,UAAU,CAAC,CAAC,UAAU,MAAM,CAAC,QAAQ,GAAG;aACxH,CAAC;QACN,CAAC;QACD,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;IAC9B,CAAC;IACD,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,GAAG,EAAE,EAAE;QACpC,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC;QAC7B,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;QAC1D,IAAI,CAAC;YAID,MAAM,SAAS,GAAG,CAAC,MAAM,OAAO,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;YAC1E,IAAI,SAAS,KAAK,EAAE,EAAE,CAAC;gBACnB,MAAM,IAAI,KAAK,CAAC,gGAAgG,CAAC,CAAC;YACtH,CAAC;YACD,MAAM,YAAY,GAAG,CACjB,MAAM,OAAO,CAAC,IAAI,CACd,oLAAoL,CACvL,CACJ,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;YAChB,IAAI,YAAY,KAAK,EAAE,EAAE,CAAC;gBACtB,MAAM,IAAI,KAAK,CAAC,6FAA6F,CAAC,CAAC;YACnH,CAAC;YACD,MAAM,OAAO,CAAC,IAAI,CAAC,YAAY,UAAU,EAAE,CAAC,CAAC;YAC7C,MAAM,OAAO,CAAC,IAAI,CAAC,SAAS,UAAU,yBAAyB,YAAY,CAAC,SAAS,EAAE,YAAY,EAAE,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;YAC5H,MAAM,OAAO,CAAC,IAAI,CAAC,gBAAgB,SAAS,sBAAsB,CAAC,CAAC;YACpE,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,IAAI,CAI1B,4EAA4E,SAAS,wBAAwB,GAAG,CAAC,EAAE,GAAG;gBAClH,MAAM,SAAS,+DAA+D,UAAU,gCAAgC,MAAM,CAAC,KAAK,GAAG;gBACvI,oFAAoF,MAAM,CAAC,WAAW,YAAY,MAAM,CAAC,KAAK,kDAAkD,CACvL,CAAC;YACF,IAAI,GAAG,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;gBACjB,MAAM,IAAI,KAAK,CAAC,kDAAkD,GAAG,CAAC,IAAI,KAAK,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;YACxG,CAAC;YACD,OAAO,EAAE,CAAC;QACd,CAAC;gBAAS,CAAC;YACP,MAAM,OAAO,CAAC,OAAO,EAAE,CAAC;QAC5B,CAAC;IACL,CAAC;IACD,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE;QACrB,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC;QAC7B,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;QAC1D,IAAI,CAAC;YACD,MAAM,OAAO,CAAC,IAAI,CAAC,gBAAgB,SAAS,sBAAsB,CAAC,CAAC;YACpE,MAAM,OAAO,CAAC,IAAI,CAAC,oBAAoB,SAAS,2BAA2B,CAAC,CAAC;YAC7E,MAAM,OAAO,CAAC,IAAI,CAAC,UAAU,UAAU,EAAE,CAAC,CAAC;QAC/C,CAAC;gBAAS,CAAC;YACP,MAAM,OAAO,CAAC,OAAO,EAAE,CAAC;QAC5B,CAAC;IACL,CAAC;CACJ,CAAC,CAAC"}

package/dist/forgejo-team.d.ts

@@ -0,0 +1,4 @@
+import type { Provider } from "@intentic/engine";
+import type { ForgejoApi } from "./forgejo-api.js";
+export declare const createForgejoTeamProvider: (api?: ForgejoApi) => Provider;
+//# sourceMappingURL=forgejo-team.d.ts.map

package/dist/forgejo-team.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"forgejo-team.d.ts","sourceRoot":"","sources":["../src/forgejo-team.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAkB,MAAM,kBAAkB,CAAC;AAEjE,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAwBnD,eAAO,MAAM,yBAAyB,GAAI,MAAK,UAAuB,KAAG,QAmDvE,CAAC"}

package/dist/forgejo-team.js

@@ -0,0 +1,68 @@
+import { z } from "zod";
+import { forgejoApi } from "./forgejo-api.js";
+import { parseInputs } from "./inputs.js";
+const forgejoTeamSchema = z.object({
+    forgejoUrl: z.string(),
+    adminUser: z.string(),
+    adminPassword: z.string(),
+    org: z.string(),
+    name: z.string(),
+    permission: z.string(),
+    members: z.array(z.string()),
+    repos: z.array(z.object({ owner: z.string(), name: z.string() })),
+});
+const parse = (inputs) => parseInputs(forgejoTeamSchema, inputs, "forgejo-team");
+export const createForgejoTeamProvider = (api = forgejoApi) => ({
+    read: async (inputs, ctx) => {
+        if (typeof inputs["forgejoUrl"] !== "string") {
+            return undefined;
+        }
+        const parsed = parse(inputs);
+        try {
+            const team = await api.findTeam({
+                baseUrl: parsed.forgejoUrl,
+                user: parsed.adminUser,
+                password: parsed.adminPassword,
+                org: parsed.org,
+                name: parsed.name,
+            });
+            return team === undefined ? undefined : { outputs: {}, detail: { permission: team.permission } };
+        }
+        catch (error) {
+            ctx.log(`forgejo-team "${ctx.id}": forgejo not reachable yet, treating as not-yet-created: ${String(error)}`);
+            return undefined;
+        }
+    },
+    diff: (inputs, observed) => {
+        if (observed.detail?.["permission"] !== parse(inputs).permission) {
+            return { action: "update", reason: "team permission differs from desired" };
+        }
+        return { action: "noop" };
+    },
+    apply: async (inputs) => {
+        const parsed = parse(inputs);
+        const auth = { baseUrl: parsed.forgejoUrl, user: parsed.adminUser, password: parsed.adminPassword };
+        const existing = await api.findTeam({ ...auth, org: parsed.org, name: parsed.name });
+        const teamId = existing?.id ?? (await api.createTeam({ ...auth, org: parsed.org, name: parsed.name, permission: parsed.permission })).id;
+        for (const username of parsed.members) {
+            await api.addTeamMember({ ...auth, teamId, username });
+        }
+        for (const repo of parsed.repos) {
+            await api.addTeamRepo({ ...auth, teamId, org: repo.owner, name: repo.name });
+        }
+        return {};
+    },
+    delete: async (inputs) => {
+        if (typeof inputs["forgejoUrl"] !== "string") {
+            return;
+        }
+        const parsed = parse(inputs);
+        const auth = { baseUrl: parsed.forgejoUrl, user: parsed.adminUser, password: parsed.adminPassword };
+        const existing = await api.findTeam({ ...auth, org: parsed.org, name: parsed.name });
+        if (existing === undefined) {
+            return;
+        }
+        await api.deleteTeam({ ...auth, teamId: existing.id });
+    },
+});
+//# sourceMappingURL=forgejo-team.js.map

package/dist/forgejo-team.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"forgejo-team.js","sourceRoot":"","sources":["../src/forgejo-team.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC9C,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAE1C,MAAM,iBAAiB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC/B,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE;IACtB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;IACrB,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE;IACzB,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE;IACf,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAGhB,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE;IAEtB,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;IAC5B,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;CACpE,CAAC,CAAC;AAEH,MAAM,KAAK,GAAG,CAAC,MAAsB,EAAqB,EAAE,CAAC,WAAW,CAAC,iBAAiB,EAAE,MAAM,EAAE,cAAc,CAAC,CAAC;AAMpH,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,MAAkB,UAAU,EAAY,EAAE,CAAC,CAAC;IAClF,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE;QACxB,IAAI,OAAO,MAAM,CAAC,YAAY,CAAC,KAAK,QAAQ,EAAE,CAAC;YAC3C,OAAO,SAAS,CAAC;QACrB,CAAC;QACD,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC;QAC7B,IAAI,CAAC;YACD,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,QAAQ,CAAC;gBAC5B,OAAO,EAAE,MAAM,CAAC,UAAU;gBAC1B,IAAI,EAAE,MAAM,CAAC,SAAS;gBACtB,QAAQ,EAAE,MAAM,CAAC,aAAa;gBAC9B,GAAG,EAAE,MAAM,CAAC,GAAG;gBACf,IAAI,EAAE,MAAM,CAAC,IAAI;aACpB,CAAC,CAAC;YACH,OAAO,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,EAAE,CAAC;QACrG,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACb,GAAG,CAAC,GAAG,CAAC,iBAAiB,GAAG,CAAC,EAAE,8DAA8D,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YAC9G,OAAO,SAAS,CAAC;QACrB,CAAC;IACL,CAAC;IACD,IAAI,EAAE,CAAC,MAAM,EAAE,QAAQ,EAAE,EAAE;QACvB,IAAI,QAAQ,CAAC,MAAM,EAAE,CAAC,YAAY,CAAC,KAAK,KAAK,CAAC,MAAM,CAAC,CAAC,UAAU,EAAE,CAAC;YAC/D,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,sCAAsC,EAAE,CAAC;QAChF,CAAC;QACD,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;IAC9B,CAAC;IACD,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE;QACpB,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC;QAC7B,MAAM,IAAI,GAAG,EAAE,OAAO,EAAE,MAAM,CAAC,UAAU,EAAE,IAAI,EAAE,MAAM,CAAC,SAAS,EAAE,QAAQ,EAAE,MAAM,CAAC,aAAa,EAAE,CAAC;QACpG,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,QAAQ,CAAC,EAAE,GAAG,IAAI,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;QACrF,MAAM,MAAM,GAAG,QAAQ,EAAE,EAAE,IAAI,CAAC,MAAM,GAAG,CAAC,UAAU,CAAC,EAAE,GAAG,IAAI,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACzI,KAAK,MAAM,QAAQ,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;YACpC,MAAM,GAAG,CAAC,aAAa,CAAC,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC;QAC3D,CAAC;QACD,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;YAC9B,MAAM,GAAG,CAAC,WAAW,CAAC,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,CAAC,KAAK,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;QACjF,CAAC;QACD,OAAO,EAAE,CAAC;IACd,CAAC;IACD,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE;QACrB,IAAI,OAAO,MAAM,CAAC,YAAY,CAAC,KAAK,QAAQ,EAAE,CAAC;YAC3C,OAAO;QACX,CAAC;QACD,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC;QAC7B,MAAM,IAAI,GAAG,EAAE,OAAO,EAAE,MAAM,CAAC,UAAU,EAAE,IAAI,EAAE,MAAM,CAAC,SAAS,EAAE,QAAQ,EAAE,MAAM,CAAC,aAAa,EAAE,CAAC;QACpG,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,QAAQ,CAAC,EAAE,GAAG,IAAI,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;QACrF,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YACzB,OAAO;QACX,CAAC;QACD,MAAM,GAAG,CAAC,UAAU,CAAC,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,EAAE,CAAC,CAAC;IAC3D,CAAC;CACJ,CAAC,CAAC"}

package/dist/forgejo-user.d.ts

@@ -0,0 +1,4 @@
+import type { Provider } from "@intentic/engine";
+import type { ForgejoApi } from "./forgejo-api.js";
+export declare const createForgejoUserProvider: (api?: ForgejoApi) => Provider;
+//# sourceMappingURL=forgejo-user.d.ts.map

package/dist/forgejo-user.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"forgejo-user.d.ts","sourceRoot":"","sources":["../src/forgejo-user.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAkB,MAAM,kBAAkB,CAAC;AAEjE,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAoBnD,eAAO,MAAM,yBAAyB,GAAI,MAAK,UAAuB,KAAG,QAmCvE,CAAC"}

package/dist/forgejo-user.js

@@ -0,0 +1,50 @@
+import { z } from "zod";
+import { forgejoApi } from "./forgejo-api.js";
+import { parseInputs } from "./inputs.js";
+const forgejoUserSchema = z.object({
+    forgejoUrl: z.string(),
+    adminUser: z.string(),
+    adminPassword: z.string(),
+    username: z.string(),
+    email: z.string(),
+    accountPassword: z.string(),
+});
+const parse = (inputs) => parseInputs(forgejoUserSchema, inputs, "forgejo-user");
+export const createForgejoUserProvider = (api = forgejoApi) => ({
+    read: async (inputs, ctx) => {
+        if (typeof inputs["forgejoUrl"] !== "string") {
+            return undefined;
+        }
+        const parsed = parse(inputs);
+        try {
+            const exists = await api.findUser({
+                baseUrl: parsed.forgejoUrl,
+                user: parsed.adminUser,
+                password: parsed.adminPassword,
+                username: parsed.username,
+            });
+            return exists ? { outputs: {} } : undefined;
+        }
+        catch (error) {
+            ctx.log(`forgejo-user "${ctx.id}": forgejo not reachable yet, treating as not-yet-created: ${String(error)}`);
+            return undefined;
+        }
+    },
+    diff: () => ({ action: "noop" }),
+    apply: async (inputs) => {
+        const parsed = parse(inputs);
+        const auth = { baseUrl: parsed.forgejoUrl, user: parsed.adminUser, password: parsed.adminPassword };
+        if (!(await api.findUser({ ...auth, username: parsed.username }))) {
+            await api.createUser({ ...auth, username: parsed.username, email: parsed.email, accountPassword: parsed.accountPassword });
+        }
+        return {};
+    },
+    delete: async (inputs) => {
+        if (typeof inputs["forgejoUrl"] !== "string") {
+            return;
+        }
+        const parsed = parse(inputs);
+        await api.deleteUser({ baseUrl: parsed.forgejoUrl, user: parsed.adminUser, password: parsed.adminPassword, username: parsed.username });
+    },
+});
+//# sourceMappingURL=forgejo-user.js.map

package/dist/forgejo-user.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"forgejo-user.js","sourceRoot":"","sources":["../src/forgejo-user.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC9C,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAE1C,MAAM,iBAAiB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC/B,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE;IACtB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;IACrB,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE;IACzB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE;IACpB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;IAEjB,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE;CAC9B,CAAC,CAAC;AAEH,MAAM,KAAK,GAAG,CAAC,MAAsB,EAAqB,EAAE,CAAC,WAAW,CAAC,iBAAiB,EAAE,MAAM,EAAE,cAAc,CAAC,CAAC;AAMpH,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,MAAkB,UAAU,EAAY,EAAE,CAAC,CAAC;IAClF,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE;QACxB,IAAI,OAAO,MAAM,CAAC,YAAY,CAAC,KAAK,QAAQ,EAAE,CAAC;YAC3C,OAAO,SAAS,CAAC;QACrB,CAAC;QACD,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC;QAC7B,IAAI,CAAC;YACD,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,QAAQ,CAAC;gBAC9B,OAAO,EAAE,MAAM,CAAC,UAAU;gBAC1B,IAAI,EAAE,MAAM,CAAC,SAAS;gBACtB,QAAQ,EAAE,MAAM,CAAC,aAAa;gBAC9B,QAAQ,EAAE,MAAM,CAAC,QAAQ;aAC5B,CAAC,CAAC;YACH,OAAO,MAAM,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;QAChD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACb,GAAG,CAAC,GAAG,CAAC,iBAAiB,GAAG,CAAC,EAAE,8DAA8D,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YAC9G,OAAO,SAAS,CAAC;QACrB,CAAC;IACL,CAAC;IACD,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;IAChC,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE;QACpB,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC;QAC7B,MAAM,IAAI,GAAG,EAAE,OAAO,EAAE,MAAM,CAAC,UAAU,EAAE,IAAI,EAAE,MAAM,CAAC,SAAS,EAAE,QAAQ,EAAE,MAAM,CAAC,aAAa,EAAE,CAAC;QACpG,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,QAAQ,CAAC,EAAE,GAAG,IAAI,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC,EAAE,CAAC;YAChE,MAAM,GAAG,CAAC,UAAU,CAAC,EAAE,GAAG,IAAI,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,eAAe,EAAE,MAAM,CAAC,eAAe,EAAE,CAAC,CAAC;QAC/H,CAAC;QACD,OAAO,EAAE,CAAC;IACd,CAAC;IACD,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE;QACrB,IAAI,OAAO,MAAM,CAAC,YAAY,CAAC,KAAK,QAAQ,EAAE,CAAC;YAC3C,OAAO;QACX,CAAC;QACD,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC;QAC7B,MAAM,GAAG,CAAC,UAAU,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,UAAU,EAAE,IAAI,EAAE,MAAM,CAAC,SAAS,EAAE,QAAQ,EAAE,MAAM,CAAC,aAAa,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC;IAC5I,CAAC;CACJ,CAAC,CAAC"}

package/dist/forgejo.d.ts

@@ -0,0 +1,4 @@
+import type { Provider } from "@intentic/engine";
+import type { SshExecutor } from "./ssh.js";
+export declare const createForgejoProvider: (executor?: SshExecutor) => Provider;
+//# sourceMappingURL=forgejo.d.ts.map

package/dist/forgejo.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"forgejo.d.ts","sourceRoot":"","sources":["../src/forgejo.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAkB,MAAM,kBAAkB,CAAC;AAIjE,OAAO,KAAK,EAAE,WAAW,EAAc,MAAM,UAAU,CAAC;AAkFxD,eAAO,MAAM,qBAAqB,GAAI,WAAU,WAAyB,KAAG,QAyH1E,CAAC"}

package/dist/forgejo.js

@@ -0,0 +1,169 @@
+import { z } from "zod";
+import { guardedUpdate } from "./guarded-update.js";
+import { parseInputs, sshSchema, sshTarget } from "./inputs.js";
+import { sshExecutor } from "./ssh.js";
+const forgejoSchema = sshSchema.extend({
+    internalIp: z.string(),
+    domain: z.string(),
+    adminUser: z.string(),
+    adminPassword: z.string(),
+    image: z.string(),
+    guardRepo: z.string().optional(),
+    resticImage: z.string().optional(),
+});
+const parse = (inputs) => parseInputs(forgejoSchema, inputs, "forgejo");
+const CONTAINER = "intentic-forgejo";
+const HTTP_PORT = 3000;
+const STATE_DIR = "/opt/intentic/forgejo";
+const TOKEN_FILE = `${STATE_DIR}/runner-token`;
+const GIT_TOKEN_FILE = `${STATE_DIR}/git-token`;
+const PKG_TOKEN_FILE = `${STATE_DIR}/packages-token`;
+const READY_TIMEOUT_MS = 120_000;
+const READY_INTERVAL_MS = 3_000;
+const internalUrl = (parsed) => `http://${parsed.internalIp}:${HTTP_PORT}`;
+const outputsFor = (parsed, runnerToken, gitToken, packagesToken) => ({
+    url: `https://${parsed.domain}`,
+    internalUrl: internalUrl(parsed),
+    runnerToken,
+    gitToken,
+    packagesToken,
+});
+const running = async (session) => {
+    const result = await session.exec(`docker ps --filter "name=^${CONTAINER}$" --format '{{.Names}}'`);
+    return result.stdout.trim() === CONTAINER;
+};
+const runningImage = async (session) => {
+    const result = await session.exec(`docker inspect --format '{{.Config.Image}}' ${CONTAINER} 2>/dev/null || true`);
+    return result.stdout.trim();
+};
+const healthy = async (session) => {
+    const result = await session.exec(`docker exec ${CONTAINER} wget -q --spider http://localhost:${HTTP_PORT}/api/healthz`);
+    return result.code === 0;
+};
+const persisted = async (session, file) => {
+    const result = await session.exec(`cat ${file} 2>/dev/null || true`);
+    return result.stdout.trim();
+};
+const waitHealthy = async (session) => {
+    const deadline = Date.now() + READY_TIMEOUT_MS;
+    for (;;) {
+        if (await healthy(session)) {
+            return;
+        }
+        if (Date.now() >= deadline) {
+            throw new Error(`forgejo did not become healthy within ${READY_TIMEOUT_MS}ms`);
+        }
+        await new Promise((resolve) => setTimeout(resolve, READY_INTERVAL_MS));
+    }
+};
+export const createForgejoProvider = (executor = sshExecutor) => ({
+    read: async (inputs, ctx) => {
+        const parsed = parse(inputs);
+        let session;
+        try {
+            session = await executor.connect(sshTarget(parsed));
+        }
+        catch (error) {
+            ctx.log(`forgejo "${ctx.id}": host not reachable over SSH, treating as not-yet-created: ${String(error)}`);
+            return undefined;
+        }
+        try {
+            if (!(await running(session)) || !(await healthy(session))) {
+                return undefined;
+            }
+            const runnerToken = await persisted(session, TOKEN_FILE);
+            const gitToken = await persisted(session, GIT_TOKEN_FILE);
+            const packagesToken = await persisted(session, PKG_TOKEN_FILE);
+            if (runnerToken === "" || gitToken === "" || packagesToken === "") {
+                return undefined;
+            }
+            return { outputs: outputsFor(parsed, runnerToken, gitToken, packagesToken), detail: { image: await runningImage(session) } };
+        }
+        finally {
+            await session.dispose();
+        }
+    },
+    diff: (inputs, observed) => {
+        const desired = parse(inputs).image;
+        if (observed.detail?.["image"] !== desired) {
+            return { action: "update", reason: `forgejo image differs (running ${String(observed.detail?.["image"])}, want ${desired})` };
+        }
+        return { action: "noop" };
+    },
+    apply: async (inputs, observed, ctx) => {
+        const parsed = parse(inputs);
+        const session = await executor.connect(sshTarget(parsed));
+        try {
+            await session.exec(`mkdir -p ${STATE_DIR}`);
+            const bringUp = async (image) => {
+                await session.exec(`docker rm -f ${CONTAINER} 2>/dev/null || true`);
+                const run = await session.exec(`docker run -d --restart unless-stopped --network host --name ${CONTAINER} --label intentic.id=${ctx.id} ` +
+                    `-v ${CONTAINER}-data:/data ` +
+                    `-e FORGEJO__security__INSTALL_LOCK=true -e FORGEJO__database__DB_TYPE=sqlite3 ` +
+                    `-e FORGEJO__server__ROOT_URL=https://${parsed.domain} -e FORGEJO__server__DOMAIN=${parsed.domain} ${image}`);
+                if (run.code !== 0) {
+                    throw new Error(`failed to start forgejo on host: exited ${run.code}: ${run.stderr.trim()}`);
+                }
+                await waitHealthy(session);
+            };
+            const oldImage = observed?.detail?.["image"];
+            if (observed !== undefined && parsed.guardRepo !== undefined && parsed.resticImage !== undefined && typeof oldImage === "string") {
+                await guardedUpdate({
+                    session,
+                    repo: parsed.guardRepo,
+                    resticImage: parsed.resticImage,
+                    volumes: [`${CONTAINER}-data`],
+                    tag: `intentic-preupdate-${ctx.id}`,
+                    recreate: () => bringUp(parsed.image),
+                    stop: async () => {
+                        await session.exec(`docker rm -f ${CONTAINER} 2>/dev/null || true`);
+                    },
+                    rollback: () => bringUp(oldImage),
+                    log: ctx.log,
+                });
+            }
+            else {
+                await bringUp(parsed.image);
+            }
+            const admin = await session.exec(`docker exec -u git ${CONTAINER} forgejo admin user create --admin --username ${parsed.adminUser} ` +
+                `--password ${parsed.adminPassword} --email ${parsed.adminUser}@${parsed.domain}`);
+            if (admin.code !== 0 && !admin.stderr.includes("already exists")) {
+                throw new Error(`failed to create forgejo admin: exited ${admin.code}: ${admin.stderr.trim()}`);
+            }
+            await session.exec(`test -f ${TOKEN_FILE} || docker exec -u git ${CONTAINER} forgejo actions generate-runner-token > ${TOKEN_FILE}`);
+            await session.exec(`test -f ${GIT_TOKEN_FILE} || docker exec -u git ${CONTAINER} forgejo admin user generate-access-token ` +
+                `--username ${parsed.adminUser} --token-name intentic-komodo --scopes read:repository --raw > ${GIT_TOKEN_FILE}`);
+            await session.exec(`test -f ${PKG_TOKEN_FILE} || docker exec -u git ${CONTAINER} forgejo admin user generate-access-token ` +
+                `--username ${parsed.adminUser} --token-name intentic-packages --scopes write:package,read:package --raw > ${PKG_TOKEN_FILE}`);
+            const runnerToken = await persisted(session, TOKEN_FILE);
+            const gitToken = await persisted(session, GIT_TOKEN_FILE);
+            const packagesToken = await persisted(session, PKG_TOKEN_FILE);
+            if (runnerToken === "") {
+                throw new Error("forgejo runner token was not persisted");
+            }
+            if (gitToken === "") {
+                throw new Error("forgejo git access token was not persisted");
+            }
+            if (packagesToken === "") {
+                throw new Error("forgejo packages access token was not persisted");
+            }
+            return outputsFor(parsed, runnerToken, gitToken, packagesToken);
+        }
+        finally {
+            await session.dispose();
+        }
+    },
+    delete: async (inputs) => {
+        const parsed = parse(inputs);
+        const session = await executor.connect(sshTarget(parsed));
+        try {
+            await session.exec(`docker rm -f ${CONTAINER} 2>/dev/null || true`);
+            await session.exec(`docker volume rm ${CONTAINER}-data 2>/dev/null || true`);
+            await session.exec(`rm -rf ${STATE_DIR}`);
+        }
+        finally {
+            await session.dispose();
+        }
+    },
+});
+//# sourceMappingURL=forgejo.js.map

package/dist/forgejo.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"forgejo.js","sourceRoot":"","sources":["../src/forgejo.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAEhE,OAAO,EAAE,WAAW,EAAE,MAAM,UAAU,CAAC;AAEvC,MAAM,aAAa,GAAG,SAAS,CAAC,MAAM,CAAC;IACnC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE;IACtB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;IAClB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;IACrB,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE;IAGzB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;IAIjB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAChC,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CACrC,CAAC,CAAC;AAEH,MAAM,KAAK,GAAG,CAAC,MAAsB,EAAiB,EAAE,CAAC,WAAW,CAAC,aAAa,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC;AAEvG,MAAM,SAAS,GAAG,kBAAkB,CAAC;AACrC,MAAM,SAAS,GAAG,IAAI,CAAC;AAKvB,MAAM,SAAS,GAAG,uBAAuB,CAAC;AAC1C,MAAM,UAAU,GAAG,GAAG,SAAS,eAAe,CAAC;AAC/C,MAAM,cAAc,GAAG,GAAG,SAAS,YAAY,CAAC;AAChD,MAAM,cAAc,GAAG,GAAG,SAAS,iBAAiB,CAAC;AACrD,MAAM,gBAAgB,GAAG,OAAO,CAAC;AACjC,MAAM,iBAAiB,GAAG,KAAK,CAAC;AAEhC,MAAM,WAAW,GAAG,CAAC,MAAqB,EAAU,EAAE,CAAC,UAAU,MAAM,CAAC,UAAU,IAAI,SAAS,EAAE,CAAC;AAClG,MAAM,UAAU,GAAG,CAAC,MAAqB,EAAE,WAAmB,EAAE,QAAgB,EAAE,aAAqB,EAA2B,EAAE,CAAC,CAAC;IAClI,GAAG,EAAE,WAAW,MAAM,CAAC,MAAM,EAAE;IAC/B,WAAW,EAAE,WAAW,CAAC,MAAM,CAAC;IAChC,WAAW;IACX,QAAQ;IACR,aAAa;CAChB,CAAC,CAAC;AAEH,MAAM,OAAO,GAAG,KAAK,EAAE,OAAmB,EAAoB,EAAE;IAC5D,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,6BAA6B,SAAS,0BAA0B,CAAC,CAAC;IACpG,OAAO,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,SAAS,CAAC;AAC9C,CAAC,CAAC;AAIF,MAAM,YAAY,GAAG,KAAK,EAAE,OAAmB,EAAmB,EAAE;IAChE,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,+CAA+C,SAAS,sBAAsB,CAAC,CAAC;IAClH,OAAO,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;AAChC,CAAC,CAAC;AAEF,MAAM,OAAO,GAAG,KAAK,EAAE,OAAmB,EAAoB,EAAE;IAC5D,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,eAAe,SAAS,sCAAsC,SAAS,cAAc,CAAC,CAAC;IACzH,OAAO,MAAM,CAAC,IAAI,KAAK,CAAC,CAAC;AAC7B,CAAC,CAAC;AAEF,MAAM,SAAS,GAAG,KAAK,EAAE,OAAmB,EAAE,IAAY,EAAmB,EAAE;IAC3E,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,OAAO,IAAI,sBAAsB,CAAC,CAAC;IACrE,OAAO,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;AAChC,CAAC,CAAC;AAEF,MAAM,WAAW,GAAG,KAAK,EAAE,OAAmB,EAAiB,EAAE;IAC7D,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,gBAAgB,CAAC;IAC/C,SAAS,CAAC;QACN,IAAI,MAAM,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;YACzB,OAAO;QACX,CAAC;QACD,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,QAAQ,EAAE,CAAC;YACzB,MAAM,IAAI,KAAK,CAAC,yCAAyC,gBAAgB,IAAI,CAAC,CAAC;QACnF,CAAC;QACD,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,iBAAiB,CAAC,CAAC,CAAC;IAC3E,CAAC;AACL,CAAC,CAAC;AAOF,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,WAAwB,WAAW,EAAY,EAAE,CAAC,CAAC;IACrF,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE;QACxB,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC;QAC7B,IAAI,OAAmB,CAAC;QACxB,IAAI,CAAC;YACD,OAAO,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;QACxD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACb,GAAG,CAAC,GAAG,CAAC,YAAY,GAAG,CAAC,EAAE,gEAAgE,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YAC3G,OAAO,SAAS,CAAC;QACrB,CAAC;QACD,IAAI,CAAC;YACD,IAAI,CAAC,CAAC,MAAM,OAAO,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,OAAO,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC;gBACzD,OAAO,SAAS,CAAC;YACrB,CAAC;YACD,MAAM,WAAW,GAAG,MAAM,SAAS,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;YACzD,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC;YAC1D,MAAM,aAAa,GAAG,MAAM,SAAS,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC;YAC/D,IAAI,WAAW,KAAK,EAAE,IAAI,QAAQ,KAAK,EAAE,IAAI,aAAa,KAAK,EAAE,EAAE,CAAC;gBAChE,OAAO,SAAS,CAAC;YACrB,CAAC;YACD,OAAO,EAAE,OAAO,EAAE,UAAU,CAAC,MAAM,EAAE,WAAW,EAAE,QAAQ,EAAE,aAAa,CAAC,EAAE,MAAM,EAAE,EAAE,KAAK,EAAE,MAAM,YAAY,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC;QACjI,CAAC;gBAAS,CAAC;YACP,MAAM,OAAO,CAAC,OAAO,EAAE,CAAC;QAC5B,CAAC;IACL,CAAC;IAGD,IAAI,EAAE,CAAC,MAAM,EAAE,QAAQ,EAAE,EAAE;QACvB,MAAM,OAAO,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC;QACpC,IAAI,QAAQ,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,KAAK,OAAO,EAAE,CAAC;YACzC,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,kCAAkC,MAAM,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,CAAC,UAAU,OAAO,GAAG,EAAE,CAAC;QAClI,CAAC;QACD,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;IAC9B,CAAC;IACD,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,EAAE,EAAE;QACnC,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC;QAC7B,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;QAC1D,IAAI,CAAC;YACD,MAAM,OAAO,CAAC,IAAI,CAAC,YAAY,SAAS,EAAE,CAAC,CAAC;YAE5C,MAAM,OAAO,GAAG,KAAK,EAAE,KAAa,EAAiB,EAAE;gBACnD,MAAM,OAAO,CAAC,IAAI,CAAC,gBAAgB,SAAS,sBAAsB,CAAC,CAAC;gBACpE,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,IAAI,CAC1B,gEAAgE,SAAS,wBAAwB,GAAG,CAAC,EAAE,GAAG;oBACtG,MAAM,SAAS,cAAc;oBAC7B,gFAAgF;oBAChF,wCAAwC,MAAM,CAAC,MAAM,+BAA+B,MAAM,CAAC,MAAM,IAAI,KAAK,EAAE,CACnH,CAAC;gBACF,IAAI,GAAG,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;oBACjB,MAAM,IAAI,KAAK,CAAC,2CAA2C,GAAG,CAAC,IAAI,KAAK,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;gBACjG,CAAC;gBACD,MAAM,WAAW,CAAC,OAAO,CAAC,CAAC;YAC/B,CAAC,CAAC;YAGF,MAAM,QAAQ,GAAG,QAAQ,EAAE,MAAM,EAAE,CAAC,OAAO,CAAC,CAAC;YAC7C,IAAI,QAAQ,KAAK,SAAS,IAAI,MAAM,CAAC,SAAS,KAAK,SAAS,IAAI,MAAM,CAAC,WAAW,KAAK,SAAS,IAAI,OAAO,QAAQ,KAAK,QAAQ,EAAE,CAAC;gBAC/H,MAAM,aAAa,CAAC;oBAChB,OAAO;oBACP,IAAI,EAAE,MAAM,CAAC,SAAS;oBACtB,WAAW,EAAE,MAAM,CAAC,WAAW;oBAC/B,OAAO,EAAE,CAAC,GAAG,SAAS,OAAO,CAAC;oBAC9B,GAAG,EAAE,sBAAsB,GAAG,CAAC,EAAE,EAAE;oBACnC,QAAQ,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC;oBACrC,IAAI,EAAE,KAAK,IAAI,EAAE;wBACb,MAAM,OAAO,CAAC,IAAI,CAAC,gBAAgB,SAAS,sBAAsB,CAAC,CAAC;oBACxE,CAAC;oBACD,QAAQ,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC;oBACjC,GAAG,EAAE,GAAG,CAAC,GAAG;iBACf,CAAC,CAAC;YACP,CAAC;iBAAM,CAAC;gBACJ,MAAM,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAChC,CAAC;YAED,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,IAAI,CAC5B,sBAAsB,SAAS,iDAAiD,MAAM,CAAC,SAAS,GAAG;gBAC/F,cAAc,MAAM,CAAC,aAAa,YAAY,MAAM,CAAC,SAAS,IAAI,MAAM,CAAC,MAAM,EAAE,CACxF,CAAC;YACF,IAAI,KAAK,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,CAAC;gBAC/D,MAAM,IAAI,KAAK,CAAC,0CAA0C,KAAK,CAAC,IAAI,KAAK,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;YACpG,CAAC;YAED,MAAM,OAAO,CAAC,IAAI,CAAC,WAAW,UAAU,0BAA0B,SAAS,4CAA4C,UAAU,EAAE,CAAC,CAAC;YACrI,MAAM,OAAO,CAAC,IAAI,CACd,WAAW,cAAc,0BAA0B,SAAS,4CAA4C;gBACpG,cAAc,MAAM,CAAC,SAAS,kEAAkE,cAAc,EAAE,CACvH,CAAC;YAEF,MAAM,OAAO,CAAC,IAAI,CACd,WAAW,cAAc,0BAA0B,SAAS,4CAA4C;gBACpG,cAAc,MAAM,CAAC,SAAS,+EAA+E,cAAc,EAAE,CACpI,CAAC;YACF,MAAM,WAAW,GAAG,MAAM,SAAS,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;YACzD,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC;YAC1D,MAAM,aAAa,GAAG,MAAM,SAAS,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC;YAC/D,IAAI,WAAW,KAAK,EAAE,EAAE,CAAC;gBACrB,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;YAC9D,CAAC;YACD,IAAI,QAAQ,KAAK,EAAE,EAAE,CAAC;gBAClB,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;YAClE,CAAC;YACD,IAAI,aAAa,KAAK,EAAE,EAAE,CAAC;gBACvB,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;YACvE,CAAC;YACD,OAAO,UAAU,CAAC,MAAM,EAAE,WAAW,EAAE,QAAQ,EAAE,aAAa,CAAC,CAAC;QACpE,CAAC;gBAAS,CAAC;YACP,MAAM,OAAO,CAAC,OAAO,EAAE,CAAC;QAC5B,CAAC;IACL,CAAC;IACD,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE;QACrB,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC;QAC7B,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;QAC1D,IAAI,CAAC;YAED,MAAM,OAAO,CAAC,IAAI,CAAC,gBAAgB,SAAS,sBAAsB,CAAC,CAAC;YACpE,MAAM,OAAO,CAAC,IAAI,CAAC,oBAAoB,SAAS,2BAA2B,CAAC,CAAC;YAC7E,MAAM,OAAO,CAAC,IAAI,CAAC,UAAU,SAAS,EAAE,CAAC,CAAC;QAC9C,CAAC;gBAAS,CAAC;YACP,MAAM,OAAO,CAAC,OAAO,EAAE,CAAC;QAC5B,CAAC;IACL,CAAC;CACJ,CAAC,CAAC"}

package/dist/garage-bucket.d.ts

@@ -0,0 +1,4 @@
+import type { Provider } from "@intentic/engine";
+import { type SshExecutor } from "./ssh.js";
+export declare const createGarageBucketProvider: (executor?: SshExecutor) => Provider;
+//# sourceMappingURL=garage-bucket.d.ts.map

package/dist/garage-bucket.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"garage-bucket.d.ts","sourceRoot":"","sources":["../src/garage-bucket.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAkB,MAAM,kBAAkB,CAAC;AAKjE,OAAO,EAAE,KAAK,WAAW,EAAe,MAAM,UAAU,CAAC;AA4CzD,eAAO,MAAM,0BAA0B,GAAI,WAAU,WAAyB,KAAG,QA2D/E,CAAC"}

package/dist/garage-bucket.js

@@ -0,0 +1,92 @@
+import { z } from "zod";
+import { containerId } from "./backing-ssh.js";
+import { parseInputs, sshSchema, sshTarget } from "./inputs.js";
+import { sshExecutor } from "./ssh.js";
+const BIN = "/garage";
+const bucketSchema = sshSchema.extend({
+    instance: z.string(),
+    endpoint: z.string(),
+    bucket: z.string(),
+    keyName: z.string(),
+});
+const parse = (inputs) => parseInputs(bucketSchema, inputs, "garage-bucket");
+const garage = async (session, cid, args) => {
+    const result = await session.exec(`docker exec ${cid} ${BIN} ${args}`);
+    if (result.code !== 0) {
+        throw new Error(`garage ${args.split(" ")[0]} failed (${result.code}): ${result.stderr.trim()}`);
+    }
+    return result.stdout.trim();
+};
+const readKey = async (session, cid, keyName) => {
+    const info = (await session.exec(`docker exec ${cid} ${BIN} key info --show-secret ${keyName}`)).stdout;
+    const field = (label) => info.match(new RegExp(`${label}:\\s*(\\S+)`))?.[1] ?? "";
+    return { accessKey: field("Key ID"), secretKey: field("Secret key") };
+};
+const outputsFor = (parsed, key) => ({
+    endpoint: parsed.endpoint,
+    accessKey: key.accessKey,
+    secretKey: key.secretKey,
+    bucket: parsed.bucket,
+});
+export const createGarageBucketProvider = (executor = sshExecutor) => ({
+    read: async (inputs, ctx) => {
+        const parsed = parse(inputs);
+        let session;
+        try {
+            session = await executor.connect(sshTarget(parsed));
+        }
+        catch (error) {
+            ctx.log(`garage-bucket "${ctx.id}": host not reachable over SSH, treating as not-yet-created: ${String(error)}`);
+            return undefined;
+        }
+        try {
+            const cid = await containerId(session, parsed.instance);
+            if (cid === "") {
+                return undefined;
+            }
+            const info = await session.exec(`docker exec ${cid} ${BIN} bucket info ${parsed.bucket}`);
+            if (info.code !== 0) {
+                return undefined;
+            }
+            return { outputs: outputsFor(parsed, await readKey(session, cid, parsed.keyName)) };
+        }
+        finally {
+            await session.dispose();
+        }
+    },
+    diff: () => ({ action: "noop" }),
+    apply: async (inputs, _observed, ctx) => {
+        const parsed = parse(inputs);
+        const session = await executor.connect(sshTarget(parsed));
+        try {
+            const cid = await containerId(session, parsed.instance);
+            if (cid === "") {
+                throw new Error(`garage-bucket "${ctx.id}": instance "${parsed.instance}" is not running`);
+            }
+            await session.exec(`docker exec ${cid} ${BIN} bucket create ${parsed.bucket} 2>/dev/null || true`);
+            await session.exec(`docker exec ${cid} ${BIN} key create ${parsed.keyName} 2>/dev/null || true`);
+            await garage(session, cid, `bucket allow --read --write ${parsed.bucket} --key ${parsed.keyName}`);
+            return outputsFor(parsed, await readKey(session, cid, parsed.keyName));
+        }
+        finally {
+            await session.dispose();
+        }
+    },
+    delete: async (inputs, ctx) => {
+        const parsed = parse(inputs);
+        const session = await executor.connect(sshTarget(parsed));
+        try {
+            const cid = await containerId(session, parsed.instance);
+            if (cid === "") {
+                ctx.log(`garage-bucket "${ctx.id}": instance "${parsed.instance}" already gone; nothing to drop`);
+                return;
+            }
+            await session.exec(`docker exec ${cid} ${BIN} bucket delete --yes ${parsed.bucket} 2>/dev/null || true`);
+            await session.exec(`docker exec ${cid} ${BIN} key delete --yes ${parsed.keyName} 2>/dev/null || true`);
+        }
+        finally {
+            await session.dispose();
+        }
+    },
+});
+//# sourceMappingURL=garage-bucket.js.map