@nocobase/app-installer 0.0.0-stage → 0.1.0-beta.4

package/dist/lib/app-cli.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"app-cli.js","sourceRoot":"","sources":["../../src/lib/app-cli.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,cAAc,EAAmB,MAAM,aAAa,CAAC;AAC9D,OAAO,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAC3D,OAAO,EACL,kBAAkB,EAClB,UAAU,EACV,IAAI,GAEL,MAAM,kBAAkB,CAAC;AAkB1B;;;;;GAKG;AACH,MAAM,UAAU,YAAY,CAC1B,KAES;IAET,MAAM,GAAG,GACP,OAAO,KAAK,CAAC,GAAG,KAAK,QAAQ;QAC3B,CAAC,CAAC,KAAK,CAAC,GAAG;QACX,CAAC,CAAC,KAAK,CAAC,GAAG;YACT,CAAC,CAAC,iBAAiB,CAAC,KAAK,CAAC,GAAG,CAAC;YAC9B,CAAC,CAAC,SAAS,CAAC;IAClB,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,IAAI,EAAE,CAAC;IACpC,OAAO;QACL,OAAO,EAAE,GAAG;YACV,CAAC,CAAC,CAAC,OAAO,EAAE,mCAAmC,GAAG,GAAG,CAAC;iBACjD,MAAM,CAAC,OAAO,CAAC;iBACf,IAAI,CAAC,GAAG,CAAC;YACd,CAAC,CAAC,OAAO;KACZ,CAAC;AACJ,CAAC;AAYD;;;GAGG;AACH,MAAM,UAAU,kBAAkB,CAAC,IAAuB;IACxD,MAAM,OAAO,GAAG,IAAI,CAAC,CAAC,CAAC,KAAK,QAAQ,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,KAAK,CAAC;IAC1D,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE;QAC7B,IAAI,GAAG,KAAK,YAAY;YAAE,OAAO,GAAG,IAAI,CAAC;QACzC,IAAI,CAAC,OAAO,IAAI,OAAO,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,OAAO,GAAG,CAAC;QAC3D,MAAM,KAAK,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAC/B,OAAO,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC;IAC3D,CAAC,CAAC,CAAC;IACH,OAAO,YAAY,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;AACvC,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,SAAS,CAC7B,IAAuB,EACvB,OAAsB;IAEtB,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,mBAAmB,CAAC,CAAC;IACjE,MAAM,KAAK,GAAG,kBAAkB,CAAC,IAAI,CAAC,CAAC;IACvC,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,UAAU,CAAC;IACtC,IAAI,MAAc,CAAC;IACnB,IAAI,MAAc,CAAC;IACnB,IAAI,CAAC;QACH,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,GAAG,CAC7B,OAAO,CAAC,QAAQ,EAChB,CAAC,KAAK,EAAE,GAAG,IAAI,EAAE,QAAQ,CAAC,EAC1B;YACE,GAAG,EAAE,OAAO,CAAC,GAAG;YAChB,GAAG,EAAE,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE;YACvC,SAAS,EAAE,EAAE,GAAG,MAAM;SACvB,CACF,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,CAAC,CAAC,KAAK,YAAY,kBAAkB,CAAC;YAAE,MAAM,KAAK,CAAC;QACxD,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC;QACtB,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC;IACxB,CAAC;IAED,IAAI,QAAwB,CAAC;IAC7B,IAAI,CAAC;QACH,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAmB,CAAC;IAClD,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,cAAc,CACtB,gBAAgB,EAChB,GAAG,KAAK,+BAA+B,EACvC,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAC5D,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,IAAI,cAAc,CACtB,QAAQ,CAAC,KAAK,EAAE,IAAI,IAAI,gBAAgB,EACxC,GAAG,KAAK,YAAY,QAAQ,CAAC,KAAK,EAAE,OAAO,IAAI,YAAY,EAAE,EAC7D;YACE,WAAW,EAAE,CAAC,QAAQ,CAAC,KAAK,EAAE,WAAW,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,YAAY,CAAC;YAClE,OAAO,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE;SAC5B,CACF,CAAC;IACJ,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,gBAAgB,CAAC,QAAwB;IACvD,MAAM,IAAI,GACR,QAAQ,CAAC,MACV,EAAE,IAAI,CAAC;IACR,OAAO,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,MAAM,CACxB,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,GAAG,CAAC,KAAK,CAAC,KAAK,EAAE,MAAM,IAAI,CAAC,CAAC,EACpD,CAAC,CACF,CAAC;AACJ,CAAC"}

package/dist/lib/backup.js

@@ -0,0 +1,167 @@
+import { existsSync, readFileSync } from 'node:fs';
+import { copyFile, mkdir, readFile, readdir, rm, writeFile, } from 'node:fs/promises';
+import path from 'node:path';
+import { parse } from 'yaml';
+import { EXIT_INVALID, InstallerError } from "./errors.js";
+/** A SQLite database is the main file plus whichever journal files exist beside it. */
+const SQLITE_SUFFIXES = ['', '-wal', '-shm', '-journal'];
+/** Written into every backup, so a restore knows where each database goes even after `config.yml` changes. */
+const MANIFEST = 'backup.json';
+/** `${NAME}` references, resolved the way the runtime resolves them from its environment; `undefined` if one is unset. */
+function interpolate(value, env) {
+    let missing = false;
+    const resolved = value.replace(/\$\{([A-Za-z_][A-Za-z0-9_]*)\}/gu, (_, name) => {
+        const found = env[name];
+        if (found === undefined)
+            missing = true;
+        return found ?? '';
+    });
+    return missing ? undefined : resolved;
+}
+/**
+ * The application's databases as `config.yml` declares them. A SQLite path is resolved against the storage directory,
+ * as the runtime resolves it; `:memory:` holds nothing to back up. A connection `config.yml` does not declare is not
+ * seen, which is why an upgrade stops when the default connection is SQLite and its file is missing.
+ */
+export function readDatabaseInventory(layout, env) {
+    let document = {};
+    try {
+        document = (parse(readFileSync(layout.configFile, 'utf8')) ??
+            {});
+    }
+    catch (error) {
+        // Treating this as "no databases" would let an upgrade proceed without a backup and without --backup-done.
+        throw new InstallerError('CONFIG_UNREADABLE', `${layout.configFile} could not be read as YAML, so the databases to back up are unknown: ${error instanceof Error ? error.message : String(error)}`, { exitCode: EXIT_INVALID, cause: error });
+    }
+    const inventory = {
+        defaultConnection: typeof document.database?.default === 'string'
+            ? document.database.default
+            : 'main',
+        sqlite: [],
+        external: [],
+        unresolved: [],
+    };
+    const lookup = { ...process.env, ...env };
+    for (const [connection, raw] of Object.entries(document.database?.connections ?? {})) {
+        const config = (raw ?? {});
+        if (config.dialect !== 'sqlite') {
+            inventory.external.push(connection);
+            continue;
+        }
+        const declared = config.database ?? config.filename;
+        if (typeof declared !== 'string' || declared === '') {
+            inventory.unresolved.push(connection);
+            continue;
+        }
+        const file = interpolate(declared, lookup);
+        if (file === undefined) {
+            inventory.unresolved.push(connection);
+            continue;
+        }
+        if (file === ':memory:')
+            continue;
+        inventory.sqlite.push({
+            connection,
+            file: path.resolve(layout.storageDir, file),
+        });
+    }
+    return inventory;
+}
+/** UTC, so backups taken on machines in different time zones sort the same way. */
+function stamp(date) {
+    const pad = (value) => String(value).padStart(2, '0');
+    return `${date.getUTCFullYear()}${pad(date.getUTCMonth() + 1)}${pad(date.getUTCDate())}-${pad(date.getUTCHours())}${pad(date.getUTCMinutes())}${pad(date.getUTCSeconds())}Z`;
+}
+export function backupName(from, to, date) {
+    return `${stamp(date)}_${from}_to_${to}`;
+}
+async function existingFiles(file) {
+    const base = path.basename(file);
+    const present = new Set(await readdir(path.dirname(file)).catch(() => []));
+    return SQLITE_SUFFIXES.map((suffix) => `${base}${suffix}`).filter((name) => present.has(name));
+}
+async function readManifest(layout, backupRelative) {
+    try {
+        return JSON.parse(await readFile(path.join(layout.root, backupRelative, MANIFEST), 'utf8'));
+    }
+    catch {
+        return undefined;
+    }
+}
+/**
+ * Whether a backup holds a database that can be restored. An upgrade of an application on an external database backs
+ * up only `config.yml` and `app.env`, and a backup interrupted before its copy finished has no manifest at all.
+ */
+export function backupHasDatabase(layout, backupRelative) {
+    const file = path.join(layout.root, backupRelative, MANIFEST);
+    if (!existsSync(file))
+        return false;
+    try {
+        const manifest = JSON.parse(readFileSync(file, 'utf8'));
+        return manifest.databases.some((database) => database.files.length > 0);
+    }
+    catch {
+        return false;
+    }
+}
+export async function removeBackup(layout, backupRelative) {
+    await rm(path.join(layout.root, backupRelative), {
+        recursive: true,
+        force: true,
+    });
+}
+/** Where a connection's files go inside a backup: one directory per connection, so equal file names never collide. */
+function backupDatabaseDir(target, connection) {
+    return path.join(target, 'sqlite', connection);
+}
+/**
+ * Copies the application's SQLite databases, `config.yml` and `app.env` while the application is stopped, so the files
+ * are consistent. The manifest is written last: a backup cut short has none and is never restored from. This is what
+ * a failed upgrade restores, not a replacement for regular backups of `storage/`, whose uploaded files it leaves out.
+ */
+export async function backupForUpgrade(layout, name, databases) {
+    const target = path.join(layout.backupsDir, name);
+    await mkdir(target, { recursive: true });
+    await copyFile(layout.configFile, path.join(target, 'config.yml'));
+    await copyFile(layout.appEnv, path.join(target, 'app.env'));
+    const copied = [];
+    for (const database of databases) {
+        const files = await existingFiles(database.file);
+        const directory = backupDatabaseDir(target, database.connection);
+        await mkdir(directory, { recursive: true });
+        for (const file of files) {
+            await copyFile(path.join(path.dirname(database.file), file), path.join(directory, file));
+        }
+        copied.push({ ...database, files });
+    }
+    const manifest = { databases: copied };
+    await writeFile(path.join(target, MANIFEST), `${JSON.stringify(manifest, null, 2)}\n`);
+    return { relative: path.relative(layout.root, target), databases: copied };
+}
+/**
+ * Puts backed-up databases back where the manifest says they were. Journal files that exist now but were not in the
+ * backup are removed, since SQLite would otherwise replay a newer write-ahead log onto the older database; a database
+ * that did not exist when the backup was taken is removed, since it was created by the release being undone.
+ */
+export async function restoreDatabase(layout, backupRelative) {
+    const source = path.join(layout.root, backupRelative);
+    const manifest = await readManifest(layout, backupRelative);
+    if (!manifest ||
+        !manifest.databases.some((database) => database.files.length > 0)) {
+        throw new Error(`${source} holds no SQLite database to restore.`);
+    }
+    for (const database of manifest.databases) {
+        const directory = path.dirname(database.file);
+        await mkdir(directory, { recursive: true });
+        for (const leftover of await existingFiles(database.file)) {
+            if (!database.files.includes(leftover)) {
+                await rm(path.join(directory, leftover), { force: true });
+            }
+        }
+        for (const file of database.files) {
+            await copyFile(path.join(backupDatabaseDir(source, database.connection), file), path.join(directory, file));
+        }
+    }
+    return manifest.databases;
+}
+//# sourceMappingURL=backup.js.map

package/dist/lib/backup.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"backup.js","sourceRoot":"","sources":["../../src/lib/backup.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EACL,QAAQ,EACR,KAAK,EACL,QAAQ,EACR,OAAO,EACP,EAAE,EACF,SAAS,GACV,MAAM,kBAAkB,CAAC;AAC1B,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,KAAK,EAAE,MAAM,MAAM,CAAC;AAC7B,OAAO,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAG3D,uFAAuF;AACvF,MAAM,eAAe,GAAG,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,CAAC,CAAC;AAEzD,8GAA8G;AAC9G,MAAM,QAAQ,GAAG,aAAa,CAAC;AAyB/B,0HAA0H;AAC1H,SAAS,WAAW,CAClB,KAAa,EACb,GAAuC;IAEvC,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,CAC5B,kCAAkC,EAClC,CAAC,CAAC,EAAE,IAAY,EAAE,EAAE;QAClB,MAAM,KAAK,GAAG,GAAG,CAAC,IAAI,CAAC,CAAC;QACxB,IAAI,KAAK,KAAK,SAAS;YAAE,OAAO,GAAG,IAAI,CAAC;QACxC,OAAO,KAAK,IAAI,EAAE,CAAC;IACrB,CAAC,CACF,CAAC;IACF,OAAO,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC;AACxC,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,qBAAqB,CACnC,MAAc,EACd,GAAuC;IAEvC,IAAI,QAAQ,GAER,EAAE,CAAC;IACP,IAAI,CAAC;QACH,QAAQ,GAAG,CAAC,KAAK,CAAC,YAAY,CAAC,MAAM,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;YACxD,EAAE,CAAoB,CAAC;IAC3B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,2GAA2G;QAC3G,MAAM,IAAI,cAAc,CACtB,mBAAmB,EACnB,GAAG,MAAM,CAAC,UAAU,wEAAwE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,EACpJ,EAAE,QAAQ,EAAE,YAAY,EAAE,KAAK,EAAE,KAAK,EAAE,CACzC,CAAC;IACJ,CAAC;IACD,MAAM,SAAS,GAAsB;QACnC,iBAAiB,EACf,OAAO,QAAQ,CAAC,QAAQ,EAAE,OAAO,KAAK,QAAQ;YAC5C,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,OAAO;YAC3B,CAAC,CAAC,MAAM;QACZ,MAAM,EAAE,EAAE;QACV,QAAQ,EAAE,EAAE;QACZ,UAAU,EAAE,EAAE;KACf,CAAC;IACF,MAAM,MAAM,GAAG,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,GAAG,GAAG,EAAE,CAAC;IAC1C,KAAK,MAAM,CAAC,UAAU,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAC5C,QAAQ,CAAC,QAAQ,EAAE,WAAW,IAAI,EAAE,CACrC,EAAE,CAAC;QACF,MAAM,MAAM,GAAG,CAAC,GAAG,IAAI,EAAE,CAAqB,CAAC;QAC/C,IAAI,MAAM,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;YAChC,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YACpC,SAAS;QACX,CAAC;QACD,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC;QACpD,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,QAAQ,KAAK,EAAE,EAAE,CAAC;YACpD,SAAS,CAAC,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YACtC,SAAS;QACX,CAAC;QACD,MAAM,IAAI,GAAG,WAAW,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QAC3C,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;YACvB,SAAS,CAAC,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YACtC,SAAS;QACX,CAAC;QACD,IAAI,IAAI,KAAK,UAAU;YAAE,SAAS;QAClC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC;YACpB,UAAU;YACV,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,UAAU,EAAE,IAAI,CAAC;SAC5C,CAAC,CAAC;IACL,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,mFAAmF;AACnF,SAAS,KAAK,CAAC,IAAU;IACvB,MAAM,GAAG,GAAG,CAAC,KAAa,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IAC9D,OAAO,GAAG,IAAI,CAAC,cAAc,EAAE,GAAG,GAAG,CAAC,IAAI,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC,GAAG,GAAG,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC,IAAI,GAAG,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,GAAG,GAAG,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC,GAAG,GAAG,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC,GAAG,CAAC;AAC/K,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,IAAY,EAAE,EAAU,EAAE,IAAU;IAC7D,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,IAAI,OAAO,EAAE,EAAE,CAAC;AAC3C,CAAC;AAED,KAAK,UAAU,aAAa,CAAC,IAAY;IACvC,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IACjC,MAAM,OAAO,GAAG,IAAI,GAAG,CACrB,MAAM,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAc,CAAC,CAC9D,CAAC;IACF,OAAO,eAAe,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,GAAG,IAAI,GAAG,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CACzE,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAClB,CAAC;AACJ,CAAC;AAWD,KAAK,UAAU,YAAY,CACzB,MAAc,EACd,cAAsB;IAEtB,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CACf,MAAM,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,cAAc,EAAE,QAAQ,CAAC,EAAE,MAAM,CAAC,CACvD,CAAC;IACtB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,iBAAiB,CAC/B,MAAc,EACd,cAAsB;IAEtB,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,cAAc,EAAE,QAAQ,CAAC,CAAC;IAC9D,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IACpC,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAmB,CAAC;QAC1E,OAAO,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAC1E,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,MAAc,EACd,cAAsB;IAEtB,MAAM,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,cAAc,CAAC,EAAE;QAC/C,SAAS,EAAE,IAAI;QACf,KAAK,EAAE,IAAI;KACZ,CAAC,CAAC;AACL,CAAC;AAQD,sHAAsH;AACtH,SAAS,iBAAiB,CAAC,MAAc,EAAE,UAAkB;IAC3D,OAAO,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,QAAQ,EAAE,UAAU,CAAC,CAAC;AACjD,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,MAAc,EACd,IAAY,EACZ,SAAoC;IAEpC,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;IAClD,MAAM,KAAK,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACzC,MAAM,QAAQ,CAAC,MAAM,CAAC,UAAU,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC,CAAC;IACnE,MAAM,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC,CAAC;IAC5D,MAAM,MAAM,GAAuB,EAAE,CAAC;IACtC,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;QACjC,MAAM,KAAK,GAAG,MAAM,aAAa,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QACjD,MAAM,SAAS,GAAG,iBAAiB,CAAC,MAAM,EAAE,QAAQ,CAAC,UAAU,CAAC,CAAC;QACjE,MAAM,KAAK,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC5C,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,MAAM,QAAQ,CACZ,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,EAC5C,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,CAC3B,CAAC;QACJ,CAAC;QACD,MAAM,CAAC,IAAI,CAAC,EAAE,GAAG,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC;IACtC,CAAC;IACD,MAAM,QAAQ,GAAmB,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC;IACvD,MAAM,SAAS,CACb,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC,EAC3B,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CACzC,CAAC;IACF,OAAO,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC;AAC7E,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,MAAc,EACd,cAAsB;IAEtB,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC;IACtD,MAAM,QAAQ,GAAG,MAAM,YAAY,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;IAC5D,IACE,CAAC,QAAQ;QACT,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,EACjE,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,GAAG,MAAM,uCAAuC,CAAC,CAAC;IACpE,CAAC;IACD,KAAK,MAAM,QAAQ,IAAI,QAAQ,CAAC,SAAS,EAAE,CAAC;QAC1C,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QAC9C,MAAM,KAAK,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC5C,KAAK,MAAM,QAAQ,IAAI,MAAM,aAAa,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YAC1D,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;gBACvC,MAAM,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,QAAQ,CAAC,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YAC5D,CAAC;QACH,CAAC;QACD,KAAK,MAAM,IAAI,IAAI,QAAQ,CAAC,KAAK,EAAE,CAAC;YAClC,MAAM,QAAQ,CACZ,IAAI,CAAC,IAAI,CAAC,iBAAiB,CAAC,MAAM,EAAE,QAAQ,CAAC,UAAU,CAAC,EAAE,IAAI,CAAC,EAC/D,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,CAC3B,CAAC;QACJ,CAAC;IACH,CAAC;IACD,OAAO,QAAQ,CAAC,SAAS,CAAC;AAC5B,CAAC"}

package/dist/lib/confirm.js

@@ -0,0 +1,36 @@
+import { createInterface } from 'node:readline/promises';
+import { EXIT_INVALID, InstallerError } from "./errors.js";
+/**
+ * Asks before an operation that takes the application down or discards data. `--yes` answers for scripts; without it, a run that
+ * cannot ask — `--json`, or no terminal — stops instead of guessing.
+ */
+export async function confirm(lines, options) {
+    if (options.yes)
+        return;
+    const input = options.input ?? process.stdin;
+    const output = options.output ?? process.stderr;
+    if (options.json || !input.isTTY) {
+        throw new InstallerError('CONFIRMATION_REQUIRED', `${lines[0]} Pass --yes to proceed without a prompt.`, {
+            exitCode: EXIT_INVALID,
+            details: { notes: lines.slice(1) },
+            suggestions: [
+                { message: 'Run it again with --yes once you have read:' },
+                ...lines.slice(1).map((message) => ({ message })),
+            ],
+        });
+    }
+    output.write(`${lines.map((line) => `  ${line}`).join('\n')}\n`);
+    const readline = createInterface({ input, output });
+    try {
+        const answer = await readline.question('Continue? [y/N] ');
+        if (!/^y(es)?$/iu.test(answer.trim())) {
+            throw new InstallerError('CANCELLED', 'Cancelled; nothing was changed.', {
+                exitCode: EXIT_INVALID,
+            });
+        }
+    }
+    finally {
+        readline.close();
+    }
+}
+//# sourceMappingURL=confirm.js.map

package/dist/lib/confirm.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"confirm.js","sourceRoot":"","sources":["../../src/lib/confirm.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAS3D;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,OAAO,CAC3B,KAAwB,EACxB,OAAuB;IAEvB,IAAI,OAAO,CAAC,GAAG;QAAE,OAAO;IACxB,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,OAAO,CAAC,KAAK,CAAC;IAC7C,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,MAAM,CAAC;IAChD,IAAI,OAAO,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;QACjC,MAAM,IAAI,cAAc,CACtB,uBAAuB,EACvB,GAAG,KAAK,CAAC,CAAC,CAAC,0CAA0C,EACrD;YACE,QAAQ,EAAE,YAAY;YACtB,OAAO,EAAE,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE;YAClC,WAAW,EAAE;gBACX,EAAE,OAAO,EAAE,6CAA6C,EAAE;gBAC1D,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC;aAClD;SACF,CACF,CAAC;IACJ,CAAC;IACD,MAAM,CAAC,KAAK,CAAC,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACjE,MAAM,QAAQ,GAAG,eAAe,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;IACpD,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,QAAQ,CAAC,kBAAkB,CAAC,CAAC;QAC3D,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC;YACtC,MAAM,IAAI,cAAc,CAAC,WAAW,EAAE,iCAAiC,EAAE;gBACvE,QAAQ,EAAE,YAAY;aACvB,CAAC,CAAC;QACL,CAAC;IACH,CAAC;YAAS,CAAC;QACT,QAAQ,CAAC,KAAK,EAAE,CAAC;IACnB,CAAC;AACH,CAAC"}

package/dist/lib/current-link.js

@@ -0,0 +1,22 @@
+import { readlink, rename, rm, symlink } from 'node:fs/promises';
+/**
+ * Points `current` at a release in one step: the new link is created beside it and renamed over it, so `current`
+ * always names a complete release and never goes missing in between.
+ */
+export async function switchCurrent(layout, linkTarget) {
+    const temporary = `${layout.current}.${process.pid}.tmp`;
+    await rm(temporary, { force: true });
+    await symlink(linkTarget, temporary, 'dir');
+    await rename(temporary, layout.current);
+}
+export async function readCurrent(layout) {
+    try {
+        return await readlink(layout.current);
+    }
+    catch (error) {
+        if (error.code === 'ENOENT')
+            return undefined;
+        throw error;
+    }
+}
+//# sourceMappingURL=current-link.js.map

package/dist/lib/current-link.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"current-link.js","sourceRoot":"","sources":["../../src/lib/current-link.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAGjE;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,MAAc,EACd,UAAkB;IAElB,MAAM,SAAS,GAAG,GAAG,MAAM,CAAC,OAAO,IAAI,OAAO,CAAC,GAAG,MAAM,CAAC;IACzD,MAAM,EAAE,CAAC,SAAS,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACrC,MAAM,OAAO,CAAC,UAAU,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC;IAC5C,MAAM,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;AAC1C,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,MAAc;IAC9C,IAAI,CAAC;QACH,OAAO,MAAM,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACxC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,SAAS,CAAC;QACzE,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC"}

package/dist/lib/ecosystem.js

@@ -0,0 +1,82 @@
+/**
+ * Builds `ecosystem.config.cjs`, the pm2 configuration every start goes through.
+ *
+ * pm2 runs `node launcher.mjs` rather than the application's entry file. The file names nothing that changes: which
+ * release runs and with which variables is decided by `launcher.mjs` each time the process starts, so a plain
+ * `pm2 restart` picks up a switched `current` and an edited `app.env`.
+ *
+ * pm2 runs `node` itself, with the script as its argument. Pointing `script` at a module instead has pm2's fork mode
+ * load it through `ProcessContainerFork.js`, where `import.meta.main` is false, so `standalone.js` never calls
+ * `startServer()` and the application silently never starts.
+ */
+export function buildEcosystemConfig(options) {
+    return `// Written by app-installer. Starting the application always goes through this file.
+const path = require('node:path');
+
+const root = __dirname;
+
+module.exports = {
+  apps: [
+    {
+      name: ${JSON.stringify(options.name)},
+      // Run node itself, so launcher.mjs, and the application after it, are the main module (import.meta.main).
+      script: ${JSON.stringify(options.nodePath)},
+      // launcher.mjs reads app.env and resolves \`current\` on every start, so \`pm2 restart\` applies changes to either.
+      args: [path.join(root, 'launcher.mjs')],
+      interpreter: 'none',
+      cwd: root,
+      autorestart: true,
+      min_uptime: '30s',
+      max_restarts: 10,
+      exp_backoff_restart_delay: 1000,
+      // pm2 sends SIGKILL 1.6s after SIGINT by default; the application finishes what it is doing first.
+      kill_timeout: 60000,
+      out_file: path.join(root, 'logs/app.out.log'),
+      error_file: path.join(root, 'logs/app.err.log'),
+      time: true,
+    },
+  ],
+};
+`;
+}
+/**
+ * Builds `launcher.mjs`, the script pm2 runs. On every start it reads `app.env`, resolves `current`, and replaces itself
+ * with `node <release>/dist/server/standalone.js` through `process.execve`.
+ *
+ * Replacing the process rather than starting a child keeps the application on the pid pm2 watches, receiving pm2's
+ * signals itself and running as the main module. A child would need its signals forwarded, and would outlive a
+ * launcher that pm2 kills, holding the port the next start needs. Node flags given to the launcher, such as
+ * `--max-old-space-size` in `args`, pass on to the application; pm2's `node_args` does not apply to an
+ * `interpreter: 'none'` process.
+ *
+ * pm2 gives the launcher an IPC channel, but the channel does not survive `process.execve`: the application starts
+ * without `process.send`, and pm2 options that rely on it, such as `wait_ready` and `shutdown_with_message`, are not
+ * available.
+ *
+ * The entry is resolved to its real path, so a running application keeps loading its modules from the release it
+ * started from even after `current` moves on.
+ */
+export function buildLauncher() {
+    return `// Written by app-installer. pm2 runs this file; it starts the release \`current\` points at, with app.env applied.
+import { readFileSync, realpathSync } from 'node:fs';
+import path from 'node:path';
+import { parseEnv } from 'node:util';
+
+const root = import.meta.dirname;
+const env = {
+  ...process.env,
+  ...parseEnv(readFileSync(path.join(root, 'app.env'), 'utf8')),
+};
+const entry = realpathSync(path.join(root, 'current/dist/server/standalone.js'));
+
+// Become the application rather than start it as a child: same pid for pm2, signals delivered directly, and
+// standalone.js is the main module, which is what makes it start the server. Node flags and arguments pass on
+// unchanged.
+process.execve(
+  process.execPath,
+  [process.execPath, ...process.execArgv, entry, ...process.argv.slice(2)],
+  env,
+);
+`;
+}
+//# sourceMappingURL=ecosystem.js.map

package/dist/lib/ecosystem.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ecosystem.js","sourceRoot":"","sources":["../../src/lib/ecosystem.ts"],"names":[],"mappings":"AAOA;;;;;;;;;;GAUG;AACH,MAAM,UAAU,oBAAoB,CAAC,OAAyB;IAC5D,OAAO;;;;;;;;cAQK,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC;;gBAE1B,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,QAAQ,CAAC;;;;;;;;;;;;;;;;;CAiB/C,CAAC;AACF,CAAC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,UAAU,aAAa;IAC3B,OAAO;;;;;;;;;;;;;;;;;;;;CAoBR,CAAC;AACF,CAAC"}

package/dist/lib/env-file.js

@@ -0,0 +1,87 @@
+import { readFile } from 'node:fs/promises';
+import { parseEnv } from 'node:util';
+/**
+ * Builds `app.env`, the one set of runtime variables both the application and the installer's own CLI calls read.
+ * `launcher.mjs` reads it on every start, so an edit takes effect with `pm2 restart`.
+ *
+ * `APP_CONFIG_FILE` and `APP_STORAGE_DIR` are absolute on purpose. A built server treats the directory above `dist/` as
+ * its deployment root and keeps `config.yml` and `storage/` there by default, which here is the release directory an
+ * upgrade replaces. `dist/.env` carries neither variable, so leaving one out silently moves the application's data into
+ * the release.
+ */
+export function buildAppEnv(layout, options) {
+    const entries = [
+        ['NODE_ENV', 'production'],
+        ...(options.basePath === undefined
+            ? []
+            : [['APP_BASE_PATH', options.basePath]]),
+        ['APP_CONFIG_FILE', layout.configFile],
+        ['APP_STORAGE_DIR', layout.storageDir],
+        ['APP_PUBLIC_ORIGIN', options.origin],
+        ['APP_SERVER_HOST', options.host],
+        ['APP_SERVER_PORT', String(options.port)],
+        // A failed start exits non-zero, so pm2 restarts it and the installer sees the failure.
+        ['NOCOBASE_STRICT_STARTUP', 'true'],
+    ];
+    return [
+        '# Written by app-installer. Read by launcher.mjs on every start and by every app-installer command.',
+        ...entries.map(([key, value]) => `${key}=${quote(value)}`),
+        '',
+    ].join('\n');
+}
+function quote(value) {
+    return /^[\w@%+=:,./-]*$/u.test(value) ? value : JSON.stringify(value);
+}
+export async function readAppEnv(layout) {
+    return parseEnv(await readFile(layout.appEnv, 'utf8'));
+}
+const DEFAULT_HOST = '127.0.0.1';
+const DEFAULT_PORT = '13000';
+// The server mounts an application that sets no APP_BASE_PATH at `DEFAULT_APP_BASE_PATH` from
+// `@nocobase/app-server/support`. app-installer runs as its own npx tool, without the server's code, so it repeats the
+// value only to tell where such an installation is reached; it never writes it.
+const DEFAULT_BASE_PATH = '/main';
+function parsePort(value) {
+    const port = Number(value.trim());
+    return value.trim() !== '' &&
+        Number.isInteger(port) &&
+        port >= 1 &&
+        port <= 65535
+        ? port
+        : null;
+}
+/** The path the application is mounted at, as a URL prefix: `/crm` stays, and the origin root is `''`. */
+export function mountPathOf(env) {
+    return basePrefix(env);
+}
+/** The base path as a URL prefix: `/crm` stays, and the root `/` contributes nothing. */
+function basePrefix(env) {
+    const trimmed = (env.APP_BASE_PATH ?? DEFAULT_BASE_PATH)
+        .trim()
+        .replace(/^\/+|\/+$/gu, '');
+    return trimmed ? `/${trimmed}` : '';
+}
+/**
+ * Where the application is reached and where it listens, as `app.env` says. The file is edited by hand to change
+ * either, so a trailing slash on the origin is dropped, as `install` drops it from `--origin`, and a port that is not
+ * one reads as `null` rather than as a number the application is not using.
+ */
+export function endpointsOf(env) {
+    const host = env.APP_SERVER_HOST ?? DEFAULT_HOST;
+    const rawPort = env.APP_SERVER_PORT ?? DEFAULT_PORT;
+    const origin = (env.APP_PUBLIC_ORIGIN ?? `http://${host}:${rawPort}`).replace(/\/+$/u, '');
+    return {
+        url: `${origin}${basePrefix(env)}/`,
+        origin,
+        host,
+        port: parsePort(rawPort),
+    };
+}
+/** The address the installer checks health on: the listening address, with a wildcard bind reached through loopback. */
+export function healthUrl(env) {
+    const { host, port } = endpointsOf(env);
+    const reachable = host === '0.0.0.0' || host === '::' || host === '' ? '127.0.0.1' : host;
+    const hostPart = reachable.includes(':') ? `[${reachable}]` : reachable;
+    return `http://${hostPart}:${port ?? env.APP_SERVER_PORT}${basePrefix(env)}/api/healthz`;
+}
+//# sourceMappingURL=env-file.js.map

package/dist/lib/env-file.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"env-file.js","sourceRoot":"","sources":["../../src/lib/env-file.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AAcrC;;;;;;;;GAQG;AACH,MAAM,UAAU,WAAW,CAAC,MAAc,EAAE,OAAsB;IAChE,MAAM,OAAO,GAAuB;QAClC,CAAC,UAAU,EAAE,YAAY,CAAC;QAC1B,GAAG,CAAC,OAAO,CAAC,QAAQ,KAAK,SAAS;YAChC,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC,CAAC,CAAC,eAAe,EAAE,OAAO,CAAC,QAAQ,CAAqB,CAAC,CAAC;QAC9D,CAAC,iBAAiB,EAAE,MAAM,CAAC,UAAU,CAAC;QACtC,CAAC,iBAAiB,EAAE,MAAM,CAAC,UAAU,CAAC;QACtC,CAAC,mBAAmB,EAAE,OAAO,CAAC,MAAM,CAAC;QACrC,CAAC,iBAAiB,EAAE,OAAO,CAAC,IAAI,CAAC;QACjC,CAAC,iBAAiB,EAAE,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QACzC,wFAAwF;QACxF,CAAC,yBAAyB,EAAE,MAAM,CAAC;KACpC,CAAC;IACF,OAAO;QACL,qGAAqG;QACrG,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,IAAI,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1D,EAAE;KACH,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC;AAED,SAAS,KAAK,CAAC,KAAa;IAC1B,OAAO,mBAAmB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;AACzE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,MAAc;IAEd,OAAO,QAAQ,CAAC,MAAM,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAGpD,CAAC;AACJ,CAAC;AAaD,MAAM,YAAY,GAAG,WAAW,CAAC;AACjC,MAAM,YAAY,GAAG,OAAO,CAAC;AAC7B,8FAA8F;AAC9F,uHAAuH;AACvH,gFAAgF;AAChF,MAAM,iBAAiB,GAAG,OAAO,CAAC;AAElC,SAAS,SAAS,CAAC,KAAa;IAC9B,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;IAClC,OAAO,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE;QACxB,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC;QACtB,IAAI,IAAI,CAAC;QACT,IAAI,IAAI,KAAK;QACb,CAAC,CAAC,IAAI;QACN,CAAC,CAAC,IAAI,CAAC;AACX,CAAC;AAED,0GAA0G;AAC1G,MAAM,UAAU,WAAW,CAAC,GAA2B;IACrD,OAAO,UAAU,CAAC,GAAG,CAAC,CAAC;AACzB,CAAC;AAED,yFAAyF;AACzF,SAAS,UAAU,CAAC,GAA2B;IAC7C,MAAM,OAAO,GAAG,CAAC,GAAG,CAAC,aAAa,IAAI,iBAAiB,CAAC;SACrD,IAAI,EAAE;SACN,OAAO,CAAC,aAAa,EAAE,EAAE,CAAC,CAAC;IAC9B,OAAO,OAAO,CAAC,CAAC,CAAC,IAAI,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;AACtC,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,WAAW,CAAC,GAA2B;IACrD,MAAM,IAAI,GAAG,GAAG,CAAC,eAAe,IAAI,YAAY,CAAC;IACjD,MAAM,OAAO,GAAG,GAAG,CAAC,eAAe,IAAI,YAAY,CAAC;IACpD,MAAM,MAAM,GAAG,CAAC,GAAG,CAAC,iBAAiB,IAAI,UAAU,IAAI,IAAI,OAAO,EAAE,CAAC,CAAC,OAAO,CAC3E,OAAO,EACP,EAAE,CACH,CAAC;IACF,OAAO;QACL,GAAG,EAAE,GAAG,MAAM,GAAG,UAAU,CAAC,GAAG,CAAC,GAAG;QACnC,MAAM;QACN,IAAI;QACJ,IAAI,EAAE,SAAS,CAAC,OAAO,CAAC;KACzB,CAAC;AACJ,CAAC;AAED,wHAAwH;AACxH,MAAM,UAAU,SAAS,CAAC,GAA2B;IACnD,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;IACxC,MAAM,SAAS,GACb,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,IAAI,IAAI,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC;IAC1E,MAAM,QAAQ,GAAG,SAAS,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,SAAS,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;IACxE,OAAO,UAAU,QAAQ,IAAI,IAAI,IAAI,GAAG,CAAC,eAAe,GAAG,UAAU,CAAC,GAAG,CAAC,cAAc,CAAC;AAC3F,CAAC"}

package/dist/lib/errors.js

@@ -0,0 +1,32 @@
+/**
+ * Exit codes are part of the contract: CI and agents branch on them.
+ *
+ * - `0` success, including a run that found nothing to do
+ * - `1` the operation failed, and the running application was not touched
+ * - `2` invalid usage or a failed precheck, before anything was written
+ * - `3` an upgrade failed after the switch and was rolled back; the previous release is running again
+ * - `4` rolling back failed too; the application needs a person, and the error says what to do
+ */
+export const EXIT_OK = 0;
+export const EXIT_FAILED = 1;
+export const EXIT_INVALID = 2;
+export const EXIT_ROLLED_BACK = 3;
+export const EXIT_ROLLBACK_FAILED = 4;
+export class InstallerError extends Error {
+    code;
+    exitCode;
+    suggestions;
+    details;
+    constructor(code, message, options = {}) {
+        super(message, { cause: options.cause });
+        this.name = 'InstallerError';
+        this.code = code;
+        this.exitCode = options.exitCode ?? EXIT_FAILED;
+        this.suggestions = options.suggestions ?? [];
+        this.details = options.details;
+    }
+}
+export function isInstallerError(error) {
+    return error instanceof InstallerError;
+}
+//# sourceMappingURL=errors.js.map

package/dist/lib/errors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../../src/lib/errors.ts"],"names":[],"mappings":"AAEA;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,OAAO,GAAG,CAAC,CAAC;AACzB,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,CAAC;AAC7B,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,CAAC;AAC9B,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC;AAClC,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC;AAatC,MAAM,OAAO,cAAe,SAAQ,KAAK;IACvB,IAAI,CAAS;IACb,QAAQ,CAAS;IACjB,WAAW,CAAe;IAC1B,OAAO,CAAsC;IAE7D,YACE,IAAY,EACZ,OAAe,EACf,UAAiC,EAAE;QAEnC,KAAK,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC;QACzC,IAAI,CAAC,IAAI,GAAG,gBAAgB,CAAC;QAC7B,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,WAAW,CAAC;QAChD,IAAI,CAAC,WAAW,GAAG,OAAO,CAAC,WAAW,IAAI,EAAE,CAAC;QAC7C,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;IACjC,CAAC;CACF;AAED,MAAM,UAAU,gBAAgB,CAAC,KAAc;IAC7C,OAAO,KAAK,YAAY,cAAc,CAAC;AACzC,CAAC"}

package/dist/lib/health.js

@@ -0,0 +1,55 @@
+import { interruptError, takeInterrupt } from "./interrupt.js";
+/** One request to the application's health route; true only for a response whose body says `ok: true`. */
+export async function checkHealth(url, fetchImpl = fetch) {
+    try {
+        const response = await fetchImpl(url, {
+            signal: AbortSignal.timeout(3_000),
+        });
+        if (!response.ok)
+            return false;
+        const body = (await response.json());
+        return body.ok === true;
+    }
+    catch {
+        return false;
+    }
+}
+/**
+ * Polls the health route until it answers, the timeout passes, or `failed` says there is no point waiting. The server
+ * listens only once startup, migrations included, has finished, so a healthy answer means the application is ready.
+ */
+export async function waitForHealthy(url, options) {
+    const now = options.now ?? Date.now;
+    const sleep = options.sleep ??
+        ((ms) => new Promise((resolve) => setTimeout(resolve, ms)));
+    const deadline = now() + options.timeoutMs;
+    for (;;) {
+        if (takeInterrupt())
+            throw interruptError();
+        if (await checkHealth(url, options.fetchImpl))
+            return true;
+        if (now() >= deadline)
+            return false;
+        if (options.failed && (await options.failed()))
+            return false;
+        await sleep(options.intervalMs ?? 1_000);
+    }
+}
+/**
+ * Restarts pm2 has made before the application answered, beyond which a start counts as failed.
+ * `NOCOBASE_STRICT_STARTUP` makes a failed start exit, so a crash during startup is a real failure rather than a slow
+ * start.
+ */
+const MAX_STARTUP_RESTARTS = 2;
+/** A `failed` probe for `waitForHealthy`: the pm2 process has crashed repeatedly, or pm2 has given up on it. */
+export function pm2StartFailed(pm2, name) {
+    return async () => {
+        const process = await pm2.describe(name).catch(() => undefined);
+        if (!process)
+            return false;
+        return (process.status === 'errored' ||
+            process.status === 'stopped' ||
+            process.restarts > MAX_STARTUP_RESTARTS);
+    };
+}
+//# sourceMappingURL=health.js.map

package/dist/lib/health.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"health.js","sourceRoot":"","sources":["../../src/lib/health.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAc/D,0GAA0G;AAC1G,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,GAAW,EACX,YAAuB,KAAK;IAE5B,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,GAAG,EAAE;YACpC,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,KAAK,CAAC;SACnC,CAAC,CAAC;QACH,IAAI,CAAC,QAAQ,CAAC,EAAE;YAAE,OAAO,KAAK,CAAC;QAC/B,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAqB,CAAC;QACzD,OAAO,IAAI,CAAC,EAAE,KAAK,IAAI,CAAC;IAC1B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,GAAW,EACX,OAAsB;IAEtB,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC;IACpC,MAAM,KAAK,GACT,OAAO,CAAC,KAAK;QACb,CAAC,CAAC,EAAU,EAAE,EAAE,CAAC,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;IAC5E,MAAM,QAAQ,GAAG,GAAG,EAAE,GAAG,OAAO,CAAC,SAAS,CAAC;IAC3C,SAAS,CAAC;QACR,IAAI,aAAa,EAAE;YAAE,MAAM,cAAc,EAAE,CAAC;QAC5C,IAAI,MAAM,WAAW,CAAC,GAAG,EAAE,OAAO,CAAC,SAAS,CAAC;YAAE,OAAO,IAAI,CAAC;QAC3D,IAAI,GAAG,EAAE,IAAI,QAAQ;YAAE,OAAO,KAAK,CAAC;QACpC,IAAI,OAAO,CAAC,MAAM,IAAI,CAAC,MAAM,OAAO,CAAC,MAAM,EAAE,CAAC;YAAE,OAAO,KAAK,CAAC;QAC7D,MAAM,KAAK,CAAC,OAAO,CAAC,UAAU,IAAI,KAAK,CAAC,CAAC;IAC3C,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,oBAAoB,GAAG,CAAC,CAAC;AAE/B,gHAAgH;AAChH,MAAM,UAAU,cAAc,CAAC,GAAQ,EAAE,IAAY;IACnD,OAAO,KAAK,IAAI,EAAE;QAChB,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAChE,IAAI,CAAC,OAAO;YAAE,OAAO,KAAK,CAAC;QAC3B,OAAO,CACL,OAAO,CAAC,MAAM,KAAK,SAAS;YAC5B,OAAO,CAAC,MAAM,KAAK,SAAS;YAC5B,OAAO,CAAC,QAAQ,GAAG,oBAAoB,CACxC,CAAC;IACJ,CAAC,CAAC;AACJ,CAAC"}

package/dist/lib/initial-admin.js

@@ -0,0 +1,39 @@
+import { readFile } from 'node:fs/promises';
+import { parse } from 'yaml';
+/** The `config.yml` section the application creates its first administrator from. */
+export const INITIAL_ADMIN_KEY = 'users.initialAdmin';
+async function readSection(file) {
+    try {
+        const document = parse(await readFile(file, 'utf8'), {
+            logLevel: 'silent',
+        });
+        return document?.users?.initialAdmin ?? undefined;
+    }
+    catch {
+        return undefined;
+    }
+}
+function text(value) {
+    return typeof value === 'string' || typeof value === 'number'
+        ? String(value)
+        : null;
+}
+/**
+ * Reads the first administrator from `config.yml`, and compares its password with the one in the release's
+ * `config.example.yml`, which `config init` copies unless `--set` replaced it. The password itself never leaves here.
+ */
+export async function readInitialAdmin(configFile, exampleFile) {
+    const configured = await readSection(configFile);
+    const example = await readSection(exampleFile);
+    const password = text(configured?.password);
+    const examplePassword = text(example?.password);
+    return {
+        key: INITIAL_ADMIN_KEY,
+        username: text(configured?.username),
+        email: text(configured?.email),
+        defaultPassword: password === null || examplePassword === null
+            ? null
+            : password === examplePassword,
+    };
+}
+//# sourceMappingURL=initial-admin.js.map

package/dist/lib/initial-admin.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"initial-admin.js","sourceRoot":"","sources":["../../src/lib/initial-admin.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,KAAK,EAAE,MAAM,MAAM,CAAC;AAE7B,qFAAqF;AACrF,MAAM,CAAC,MAAM,iBAAiB,GAAG,oBAAoB,CAAC;AAqBtD,KAAK,UAAU,WAAW,CACxB,IAAY;IAEZ,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,KAAK,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE;YACnD,QAAQ,EAAE,QAAQ;SACnB,CAA8D,CAAC;QAChE,OAAO,QAAQ,EAAE,KAAK,EAAE,YAAY,IAAI,SAAS,CAAC;IACpD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,SAAS,IAAI,CAAC,KAAc;IAC1B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,KAAK,KAAK,QAAQ;QAC3D,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;QACf,CAAC,CAAC,IAAI,CAAC;AACX,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,UAAkB,EAClB,WAAmB;IAEnB,MAAM,UAAU,GAAG,MAAM,WAAW,CAAC,UAAU,CAAC,CAAC;IACjD,MAAM,OAAO,GAAG,MAAM,WAAW,CAAC,WAAW,CAAC,CAAC;IAC/C,MAAM,QAAQ,GAAG,IAAI,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;IAC5C,MAAM,eAAe,GAAG,IAAI,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IAChD,OAAO;QACL,GAAG,EAAE,iBAAiB;QACtB,QAAQ,EAAE,IAAI,CAAC,UAAU,EAAE,QAAQ,CAAC;QACpC,KAAK,EAAE,IAAI,CAAC,UAAU,EAAE,KAAK,CAAC;QAC9B,eAAe,EACb,QAAQ,KAAK,IAAI,IAAI,eAAe,KAAK,IAAI;YAC3C,CAAC,CAAC,IAAI;YACN,CAAC,CAAC,QAAQ,KAAK,eAAe;KACnC,CAAC;AACJ,CAAC"}

package/dist/lib/interrupt.js

@@ -0,0 +1,50 @@
+import { EXIT_FAILED, InstallerError } from "./errors.js";
+/**
+ * SIGINT and SIGTERM stop the step that is running, not the installer. The step fails with `INTERRUPTED`, and the
+ * command's own failure handling runs as it would for any other failure: an install removes what it wrote, an upgrade
+ * after the switch rolls back. A second signal exits at once, whatever that leaves behind.
+ */
+let pending = false;
+let received = 0;
+const listeners = new Set();
+export function interruptError() {
+    return new InstallerError('INTERRUPTED', 'Interrupted; the step that was running was stopped.', { exitCode: EXIT_FAILED });
+}
+/** Reports a pending interrupt once. The step that sees it fails; the recovery steps after it run normally. */
+export function takeInterrupt() {
+    if (!pending)
+        return false;
+    pending = false;
+    return true;
+}
+export function throwIfInterrupted() {
+    if (takeInterrupt())
+        throw interruptError();
+}
+/** Called for each interrupt, so running child processes can be stopped. */
+export function onInterrupt(listener) {
+    listeners.add(listener);
+    return () => listeners.delete(listener);
+}
+export function installInterruptHandlers(stderr = process.stderr) {
+    const handler = (signal) => {
+        received += 1;
+        if (received > 1) {
+            stderr.write(`\n${signal} again; exiting now.\n`);
+            process.exit(130);
+        }
+        pending = true;
+        stderr.write(`\n${signal} received; stopping the current step and cleaning up. Send it again to exit immediately.\n`);
+        for (const listener of listeners)
+            listener();
+    };
+    process.on('SIGINT', handler);
+    process.on('SIGTERM', handler);
+    return () => {
+        process.off('SIGINT', handler);
+        process.off('SIGTERM', handler);
+        pending = false;
+        received = 0;
+    };
+}
+//# sourceMappingURL=interrupt.js.map

package/dist/lib/interrupt.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"interrupt.js","sourceRoot":"","sources":["../../src/lib/interrupt.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAE1D;;;;GAIG;AACH,IAAI,OAAO,GAAG,KAAK,CAAC;AACpB,IAAI,QAAQ,GAAG,CAAC,CAAC;AACjB,MAAM,SAAS,GAAG,IAAI,GAAG,EAAc,CAAC;AAExC,MAAM,UAAU,cAAc;IAC5B,OAAO,IAAI,cAAc,CACvB,aAAa,EACb,qDAAqD,EACrD,EAAE,QAAQ,EAAE,WAAW,EAAE,CAC1B,CAAC;AACJ,CAAC;AAED,+GAA+G;AAC/G,MAAM,UAAU,aAAa;IAC3B,IAAI,CAAC,OAAO;QAAE,OAAO,KAAK,CAAC;IAC3B,OAAO,GAAG,KAAK,CAAC;IAChB,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,kBAAkB;IAChC,IAAI,aAAa,EAAE;QAAE,MAAM,cAAc,EAAE,CAAC;AAC9C,CAAC;AAED,4EAA4E;AAC5E,MAAM,UAAU,WAAW,CAAC,QAAoB;IAC9C,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IACxB,OAAO,GAAG,EAAE,CAAC,SAAS,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;AAC1C,CAAC;AAED,MAAM,UAAU,wBAAwB,CACtC,SAAgC,OAAO,CAAC,MAAM;IAE9C,MAAM,OAAO,GAAG,CAAC,MAAsB,EAAE,EAAE;QACzC,QAAQ,IAAI,CAAC,CAAC;QACd,IAAI,QAAQ,GAAG,CAAC,EAAE,CAAC;YACjB,MAAM,CAAC,KAAK,CAAC,KAAK,MAAM,wBAAwB,CAAC,CAAC;YAClD,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACpB,CAAC;QACD,OAAO,GAAG,IAAI,CAAC;QACf,MAAM,CAAC,KAAK,CACV,KAAK,MAAM,4FAA4F,CACxG,CAAC;QACF,KAAK,MAAM,QAAQ,IAAI,SAAS;YAAE,QAAQ,EAAE,CAAC;IAC/C,CAAC,CAAC;IACF,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IAC9B,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;IAC/B,OAAO,GAAG,EAAE;QACV,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QAC/B,OAAO,CAAC,GAAG,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;QAChC,OAAO,GAAG,KAAK,CAAC;QAChB,QAAQ,GAAG,CAAC,CAAC;IACf,CAAC,CAAC;AACJ,CAAC"}