@palmyr/cli 1.0.0

package/dist/compute-ssh.js

@@ -0,0 +1,577 @@
+/**
+ * SSH-key helpers for the `compute` command group.
+ *
+ * Three responsibilities:
+ *   1. Local keypair generation (`generateKeypair`) — shells out to `ssh-keygen`
+ *      so we don't have to ship our own OpenSSH-format encoder. Saved under
+ *      `~/.palmyr/ssh/<server-id>/id_ed25519{,.pub}` with chmod 600.
+ *   2. Local server cache (`saveDeployedServer` / `findCachedServer`) — lets
+ *      `palmyr compute ssh <name>` resolve a friendly name → IP without a
+ *      paid `GET /compute/servers` round-trip.
+ *   3. Wait-for-running (`waitForRunning`) — polls the server's status with
+ *      backoff until Hetzner reports `running` or the deadline trips.
+ */
+import { spawnSync } from 'child_process';
+import { existsSync, mkdirSync, readFileSync, writeFileSync, chmodSync } from 'fs';
+import { homedir } from 'os';
+import { join, dirname } from 'path';
+import { createConnection } from 'net';
+const PALMYR_DIR = join(homedir(), '.palmyr');
+const SSH_DIR = join(PALMYR_DIR, 'ssh');
+const SERVER_CACHE = join(PALMYR_DIR, 'data', 'servers.json');
+function ensureDir(p) {
+    if (!existsSync(p))
+        mkdirSync(p, { recursive: true });
+}
+/**
+ * Confirm `ssh-keygen` is on PATH before we promise a keypair to the caller.
+ * On Windows it's bundled with Git for Windows / OpenSSH client; on macOS and
+ * most Linux distros it's installed by default. We prefer this over rolling
+ * our own ed25519 OpenSSH-format encoder because the file format
+ * (`-----BEGIN OPENSSH PRIVATE KEY-----`, base64-wrapped, encrypted by KDF)
+ * is finicky to produce correctly without bugs.
+ */
+export function hasSshKeygen() {
+    try {
+        const r = spawnSync('ssh-keygen', ['-V'], { stdio: 'pipe' });
+        // ssh-keygen prints help to stderr and exits non-zero on -V, but the
+        // command is found if spawn didn't ENOENT.
+        return r.error == null;
+    }
+    catch {
+        return false;
+    }
+}
+/**
+ * Generate a fresh ed25519 keypair in `~/.palmyr/ssh/<serverId>/`. The label
+ * (typically the Hetzner server id, but any safe slug works) namespaces the
+ * key so multiple deploys don't trample each other. Caller is responsible for
+ * passing the resulting `publicKey` string to the deploy endpoint.
+ *
+ * Throws if `ssh-keygen` isn't on PATH or if the key already exists at the
+ * destination — refusing to overwrite is intentional, the user should delete
+ * the old key explicitly if they want a clean slate.
+ */
+export function generateKeypair(label) {
+    if (!hasSshKeygen()) {
+        throw new Error("ssh-keygen not on PATH. Install OpenSSH client (Windows: 'Add Optional Feature → OpenSSH Client', macOS: bundled, Linux: 'apt install openssh-client') or pass --pubkey-file to deploy with an existing key.");
+    }
+    if (!/^[A-Za-z0-9._-]{1,64}$/.test(label)) {
+        throw new Error('keypair label must be 1–64 chars of [A-Za-z0-9._-]');
+    }
+    const dir = join(SSH_DIR, label);
+    ensureDir(dir);
+    const privateKeyPath = join(dir, 'id_ed25519');
+    const publicKeyPath = privateKeyPath + '.pub';
+    if (existsSync(privateKeyPath)) {
+        throw new Error(`Key already exists at ${privateKeyPath}. Delete it first or pass --pubkey-file ${publicKeyPath} to reuse it.`);
+    }
+    const comment = `palmyr-${label}`;
+    // -N "" is empty passphrase. -q suppresses ssh-keygen's banner.
+    // We pass the path with no shell metachars (label already validated).
+    const r = spawnSync('ssh-keygen', ['-t', 'ed25519', '-N', '', '-q', '-f', privateKeyPath, '-C', comment], { stdio: 'pipe' });
+    if (r.status !== 0) {
+        const errText = (r.stderr?.toString() || r.stdout?.toString() || 'ssh-keygen failed').trim();
+        throw new Error(`ssh-keygen failed: ${errText}`);
+    }
+    // ssh-keygen sets 600 on Unix already, but Windows NTFS doesn't honor that.
+    // chmod is a no-op on Windows but harmless.
+    try {
+        chmodSync(privateKeyPath, 0o600);
+    }
+    catch { }
+    const publicKey = readFileSync(publicKeyPath, 'utf8').trim();
+    return { privateKeyPath, publicKeyPath, publicKey, comment };
+}
+function readCache() {
+    if (!existsSync(SERVER_CACHE))
+        return [];
+    try {
+        const data = JSON.parse(readFileSync(SERVER_CACHE, 'utf8'));
+        return Array.isArray(data) ? data : [];
+    }
+    catch {
+        return [];
+    }
+}
+function writeCache(entries) {
+    ensureDir(dirname(SERVER_CACHE));
+    writeFileSync(SERVER_CACHE, JSON.stringify(entries, null, 2));
+}
+export function saveDeployedServer(s) {
+    const all = readCache().filter(e => e.id !== s.id && e.name !== s.name);
+    all.push(s);
+    writeCache(all);
+}
+export function removeCachedServer(idOrName) {
+    const filtered = readCache().filter(e => e.id !== idOrName && e.name !== idOrName);
+    writeCache(filtered);
+}
+/**
+ * Resolve a user-supplied identifier (name or id) against the local cache.
+ * Returns the first matching entry, or null if nothing matches. Caller can
+ * fall back to a server-side `GET /compute/servers` lookup on null.
+ */
+export function findCachedServer(idOrName) {
+    const norm = idOrName.trim();
+    if (!norm)
+        return null;
+    const all = readCache();
+    // Exact id match wins over name match — ids are globally unique, names aren't.
+    return all.find(e => e.id === norm) || all.find(e => e.name === norm) || null;
+}
+export function listCachedServers() {
+    return readCache();
+}
+/**
+ * Spawn `ssh root@<ip>` with stdio inherited so the user's interactive
+ * session takes over the parent terminal. The optional `keyPath` is appended
+ * as `-i <path>` only if the file actually exists — saves a confusing "no
+ * such identity" error when the cached path is stale.
+ *
+ * Returns the ssh exit code (or non-zero on spawn failure). Caller is
+ * expected to `process.exit(returnCode)` so shell pipelines see the right
+ * status. Non-TTY callers shouldn't reach here — they should print the
+ * command instead via `buildSshCommand`.
+ */
+export function spawnInteractiveSsh(ip, keyPath) {
+    const args = [];
+    if (keyPath && existsSync(keyPath))
+        args.push('-i', keyPath);
+    args.push('-o', 'StrictHostKeyChecking=accept-new', '-o', 'UserKnownHostsFile=' + join(PALMYR_DIR, 'ssh', 'known_hosts'), `root@${ip}`);
+    ensureDir(join(PALMYR_DIR, 'ssh'));
+    const r = spawnSync('ssh', args, { stdio: 'inherit' });
+    if (r.error) {
+        process.stderr.write(`ssh spawn failed: ${r.error.message}\n`);
+        return 127;
+    }
+    return r.status ?? 1;
+}
+/**
+ * Build the equivalent shell command without running it. Used in agent mode
+ * so the caller (an automated runner) can shell out to ssh themselves.
+ */
+export function buildSshCommand(ip, keyPath) {
+    const parts = ['ssh'];
+    if (keyPath && existsSync(keyPath))
+        parts.push('-i', shellQuote(keyPath));
+    parts.push(`root@${ip}`);
+    return parts.join(' ');
+}
+function shellQuote(s) {
+    // Simple POSIX quoting — wrap in single quotes, escape any embedded ones.
+    // Good enough for path-like inputs we control; not for arbitrary user data.
+    if (/^[A-Za-z0-9._/:\\-]+$/.test(s))
+        return s;
+    return "'" + s.replace(/'/g, "'\\''") + "'";
+}
+/**
+ * Poll `getStatus()` until it returns `running` or the deadline trips. Backs
+ * off from 1s → 5s so we don't hammer the API while a fresh box is doing its
+ * first-boot work (Hetzner servers usually go `initializing` → `running` in
+ * 30–60s). Returns the final status object or throws on timeout.
+ */
+export async function waitForRunning(getStatus, opts = {}) {
+    const deadline = Date.now() + (opts.timeoutMs ?? 120_000);
+    let delay = 1_000;
+    while (Date.now() < deadline) {
+        const s = await getStatus().catch(() => null);
+        if (s && s.status === 'running' && s.ipv4)
+            return s;
+        await new Promise(r => setTimeout(r, delay));
+        delay = Math.min(delay * 1.4, 5_000);
+    }
+    throw new Error(`Server did not reach 'running' state within ${opts.timeoutMs ?? 120_000}ms`);
+}
+/**
+ * TCP-probe `host:port` once with a hard timeout. Resolves true on connect,
+ * false on RST/refused/timeout. Used as the second readiness gate after
+ * Hetzner reports `running` — Hetzner's status flips before the OS finishes
+ * booting and sshd binds, so we need an independent signal that port 22 is
+ * actually listening.
+ */
+export function tcpProbe(host, port, timeoutMs = 3000) {
+    return new Promise(resolve => {
+        const sock = createConnection({ host, port });
+        let done = false;
+        const finish = (ok) => {
+            if (done)
+                return;
+            done = true;
+            try {
+                sock.destroy();
+            }
+            catch { }
+            resolve(ok);
+        };
+        sock.setTimeout(timeoutMs);
+        sock.once('connect', () => finish(true));
+        sock.once('timeout', () => finish(false));
+        sock.once('error', () => finish(false));
+    });
+}
+/**
+ * Probe an SSH endpoint with the user's key, asking sshd to run `true` and
+ * exit. Confirms three things at once: sshd is up, the key is in
+ * authorized_keys, and the user can actually open a session. We pass
+ * `BatchMode=yes` so ssh refuses to fall back to password prompts (which
+ * would hang in a non-interactive runner).
+ *
+ * Returns true on exit code 0; false on anything else (connection refused,
+ * permission denied, host key mismatch, timeout). The caller can decide
+ * whether to retry — most "fresh box" failures resolve in 10–30s as
+ * cloud-init finishes touching authorized_keys.
+ */
+export function sshProbe(ip, keyPath, timeoutSec = 5) {
+    if (!existsSync(keyPath))
+        return false;
+    // -q + -T: quiet, no PTY (issue #85 — see sshRun).
+    //
+    // UserKnownHostsFile=/dev/null + StrictHostKeyChecking=no: deploy/wait
+    // probes are NOT security-critical. We're verifying "does this newly-
+    // provisioned VPS accept our key" — not authenticating a long-lived
+    // host. Hetzner reuses public IPs across short-lived test boxes, and a
+    // persistent known_hosts file accumulates stale entries that trigger
+    // host-key-mismatch failures (user report 2026-05-05: same IP reused →
+    // SSH gate hung for the full --wait-timeout). Discarding host keys
+    // matches the platform-side `sshCmd` and removes the entire class of
+    // failure. The interactive `compute ssh` command — which is security-
+    // relevant — keeps host-key pinning via spawnInteractiveSsh.
+    const r = spawnSync('ssh', [
+        '-i', keyPath,
+        '-q',
+        '-T',
+        '-o', 'BatchMode=yes',
+        '-o', `ConnectTimeout=${timeoutSec}`,
+        '-o', 'StrictHostKeyChecking=no',
+        '-o', 'UserKnownHostsFile=/dev/null',
+        `root@${ip}`,
+        'true',
+    ], { stdio: 'pipe', timeout: (timeoutSec + 2) * 1000 });
+    return r.status === 0;
+}
+/**
+ * Run a single command on the server via SSH using the platform/user key
+ * supplied to gate 3 + 4. Returns {stdout, status} so callers can branch on
+ * exit code rather than just trim/parse stdout.
+ *
+ * Used by the install-status probe, the cloud-init status probe, and the
+ * diagnostic-fetcher that runs on readiness failure. None of those need
+ * structured stderr handling, so we redirect 2>&1 to keep a single buffer.
+ */
+function sshRun(ip, keyPath, command, timeoutSec = 10) {
+    if (!existsSync(keyPath))
+        return { stdout: '', status: 127 };
+    // -q + -T: quiet, no PTY (issue #85).
+    // UserKnownHostsFile=/dev/null + StrictHostKeyChecking=no: not security-
+    // critical (we're polling /etc/palmyr/install-status.json on a server
+    // we just deployed). See sshProbe for full rationale.
+    const r = spawnSync('ssh', [
+        '-i', keyPath,
+        '-q',
+        '-T',
+        '-o', 'BatchMode=yes',
+        '-o', `ConnectTimeout=${Math.min(15, timeoutSec)}`,
+        '-o', 'StrictHostKeyChecking=no',
+        '-o', 'UserKnownHostsFile=/dev/null',
+        `root@${ip}`,
+        command,
+    ], { stdio: 'pipe', timeout: (timeoutSec + 2) * 1000, encoding: 'utf-8', maxBuffer: 1024 * 1024 });
+    return {
+        stdout: (r.stdout ?? '').toString(),
+        status: r.status === null ? 124 : r.status,
+    };
+}
+/**
+ * Read /etc/palmyr/install-status.json from the server via SSH. Returns the
+ * parsed object on success, null if the file doesn't exist yet (cloud-init
+ * still running) or can't be parsed. Used as gate 4 of the readiness chain
+ * when a deploy requested install recipes.
+ */
+export function readInstallStatus(ip, keyPath, timeoutSec = 8) {
+    // 2>/dev/null suppresses the "no such file" error so the missing-file
+    // case is just an empty stdout, not a parse failure with stderr noise.
+    const r = sshRun(ip, keyPath, 'cat /etc/palmyr/install-status.json 2>/dev/null', timeoutSec);
+    if (r.status !== 0)
+        return null;
+    const out = r.stdout.trim();
+    if (!out)
+        return null;
+    try {
+        const parsed = JSON.parse(out);
+        if (parsed && typeof parsed === 'object' && parsed.status === 'ok' && Array.isArray(parsed.installs)) {
+            return parsed;
+        }
+    }
+    catch { }
+    return null;
+}
+/**
+ * Probe `cloud-init status` so the readiness chain can fail fast when the
+ * user_data script has clearly aborted. Returns the parsed status string
+ * (`done`, `running`, `error`, `disabled`, etc.) or null when the binary
+ * isn't reachable yet.
+ *
+ * Polled in gate 4 — if it returns 'error' we break out immediately and
+ * surface diagnostics, instead of waiting the full 600s install timeout
+ * for a marker file that's never going to be written.
+ */
+export function readCloudInitStatus(ip, keyPath, timeoutSec = 8) {
+    const r = sshRun(ip, keyPath, 'cloud-init status 2>/dev/null', timeoutSec);
+    if (r.status !== 0)
+        return null;
+    // cloud-init status output: "status: done" / "status: error" / etc.
+    const m = r.stdout.match(/status:\s*(\S+)/);
+    return m ? m[1] : null;
+}
+/**
+ * On readiness failure, SSH in (best effort) and grab a small bundle of
+ * diagnostic data so the JSON response includes a clear cause without the
+ * caller needing to ssh in by hand:
+ *
+ *   - cloud-init status (--long if available)
+ *   - tail of /var/log/cloud-init-output.log
+ *   - tail of /var/log/palmyr/cloud-init.log (the wrapper's own tee)
+ *   - tail of any /var/log/palmyr/<recipe>-install.log files
+ *
+ * Tails are capped to keep response bodies sane. If SSH is unreachable
+ * (gate 2 or 3 tripped), returns a short note instead of throwing.
+ */
+export function fetchDeployDiagnostics(ip, keyPath) {
+    const result = {
+        cloudInitStatus: null,
+        cloudInitLogTail: null,
+        palmyrLogTail: null,
+        recipeLogs: [],
+    };
+    if (!existsSync(keyPath))
+        return result;
+    // cloud-init status --long has more detail than plain status (errors[],
+    // boot_status_code, etc.) but is also Ubuntu-version-dependent. Fall back
+    // to plain status if --long isn't supported.
+    const status = sshRun(ip, keyPath, 'cloud-init status --long 2>/dev/null || cloud-init status 2>/dev/null', 10);
+    if (status.status === 0 && status.stdout.trim()) {
+        result.cloudInitStatus = status.stdout.trim().split('\n').slice(0, 40).join('\n');
+    }
+    const ciLog = sshRun(ip, keyPath, 'tail -120 /var/log/cloud-init-output.log 2>/dev/null', 15);
+    if (ciLog.status === 0 && ciLog.stdout.trim()) {
+        result.cloudInitLogTail = ciLog.stdout;
+    }
+    const palmyrLog = sshRun(ip, keyPath, 'tail -80 /var/log/palmyr/cloud-init.log 2>/dev/null', 15);
+    if (palmyrLog.status === 0 && palmyrLog.stdout.trim()) {
+        result.palmyrLogTail = palmyrLog.stdout;
+    }
+    // List per-recipe install logs and tail the last one each. We use ls + a
+    // capped find so we don't accidentally pull megabytes from a runaway log.
+    const list = sshRun(ip, keyPath, 'ls /var/log/palmyr/*-install.log 2>/dev/null', 10);
+    if (list.status === 0) {
+        const files = list.stdout.split('\n').map(s => s.trim()).filter(Boolean).slice(0, 8);
+        for (const file of files) {
+            // Path is from `ls`, not user input, so safe to splice.
+            const r = sshRun(ip, keyPath, `tail -80 ${file}`, 15);
+            if (r.status === 0) {
+                const m = file.match(/\/([^/]+)-install\.log$/);
+                result.recipeLogs.push({ name: m ? m[1] : file, tail: r.stdout });
+            }
+        }
+    }
+    return result;
+}
+/**
+ * Four-gate readiness chain used by `compute deploy --wait` and `compute
+ * wait <id>`:
+ *
+ *   1. Hetzner status flips to `running`.
+ *   2. TCP port 22 accepts connections.
+ *   3. (Optional) `ssh -i <key> root@<ip> 'true'` exits 0.
+ *   4. (Optional) /etc/palmyr/install-status.json exists with `status: ok`
+ *      and contains every recipe in `expectedInstalls`. Skipped when no
+ *      installs were requested at deploy time, OR when we don't have a
+ *      private key path to SSH in with.
+ *
+ * Gate 3 is skipped when `keyPath` is undefined or the file doesn't exist —
+ * e.g. user deployed with `--ssh-key <hetzner-id>` and we don't have the
+ * private key locally. They get gates 1+2 and a documented "ssh: skipped"
+ * marker so they know the credential check wasn't done.
+ *
+ * The function shares one wall-clock budget across all four gates so a slow
+ * Hetzner provisioning step doesn't steal time from the install poll. Default
+ * 240s is enough for the SSH gates with no install; bump via `timeoutMs` (the
+ * CLI defaults to 600s when an install is requested, since Hermes pulls
+ * Python 3.11 + several hundred MB of pip packages).
+ */
+export async function waitForReady(opts) {
+    const startedAt = Date.now();
+    const deadline = startedAt + (opts.timeoutMs ?? 240_000);
+    const checks = {
+        hetznerStatus: 'fail',
+        port22: 'skipped',
+        ssh: 'skipped',
+    };
+    let ip = null;
+    let status = null;
+    // Gate 1: Hetzner status → running
+    opts.onProgress?.({ stage: 'status', message: 'Waiting for Hetzner status=running…' });
+    let delay = 1_000;
+    while (Date.now() < deadline) {
+        const s = await opts.getStatus().catch(() => null);
+        if (s) {
+            status = s.status;
+            ip = s.ipv4;
+            if (s.status === 'running' && s.ipv4) {
+                checks.hetznerStatus = 'pass';
+                break;
+            }
+        }
+        await new Promise(r => setTimeout(r, delay));
+        delay = Math.min(delay * 1.4, 5_000);
+    }
+    if (checks.hetznerStatus !== 'pass') {
+        checks.hetznerStatus = 'timeout';
+        return {
+            ready: false,
+            ip,
+            status,
+            checks,
+            elapsedMs: Date.now() - startedAt,
+            reason: `Hetzner status did not reach 'running' (last seen: ${status ?? 'unknown'})`,
+        };
+    }
+    // Gate 2: TCP port 22
+    opts.onProgress?.({ stage: 'port22', message: 'Probing port 22…' });
+    checks.port22 = 'fail';
+    let port22Open = false;
+    delay = 1_000;
+    while (Date.now() < deadline) {
+        if (await tcpProbe(ip, 22, 3_000)) {
+            checks.port22 = 'pass';
+            port22Open = true;
+            break;
+        }
+        await new Promise(r => setTimeout(r, delay));
+        delay = Math.min(delay * 1.4, 5_000);
+    }
+    if (!port22Open) {
+        checks.port22 = 'timeout';
+        return {
+            ready: false,
+            ip,
+            status,
+            checks,
+            elapsedMs: Date.now() - startedAt,
+            reason: `Server is running but port 22 did not open within the timeout`,
+        };
+    }
+    // Gate 3: SSH credential probe (optional)
+    const skipReasons = {};
+    if (opts.keyPath && existsSync(opts.keyPath)) {
+        opts.onProgress?.({ stage: 'ssh', message: `Verifying SSH login with ${opts.keyPath}…` });
+        checks.ssh = 'fail';
+        let sshOk = false;
+        delay = 2_000;
+        while (Date.now() < deadline) {
+            if (sshProbe(ip, opts.keyPath, 5)) {
+                checks.ssh = 'pass';
+                sshOk = true;
+                break;
+            }
+            await new Promise(r => setTimeout(r, delay));
+            delay = Math.min(delay * 1.4, 5_000);
+        }
+        if (!sshOk) {
+            checks.ssh = 'timeout';
+            return {
+                ready: false,
+                ip,
+                status,
+                checks,
+                elapsedMs: Date.now() - startedAt,
+                reason: `Port 22 is open but ssh -i ${opts.keyPath} root@${ip} did not authenticate. Check that the public half is in authorized_keys (cloud-init may still be running).`,
+            };
+        }
+    }
+    else {
+        checks.ssh = 'skipped';
+        skipReasons.ssh = opts.keyPath
+            ? `Private key not found at ${opts.keyPath}.`
+            : 'No local SSH key path supplied. Pass --key <path> to enable the SSH credential probe, or run from the host where the key was generated.';
+    }
+    // Gate 4: Install marker (optional). Cloud-init writes
+    // /etc/palmyr/install-status.json once every requested recipe finishes.
+    // We poll it via SSH every 5–8s, AND probe `cloud-init status` so we can
+    // fail fast when scripts_user has aborted (no point polling for a marker
+    // file that's never going to land).
+    let installStatus;
+    if (opts.expectedInstalls && opts.expectedInstalls.length > 0) {
+        if (opts.keyPath && existsSync(opts.keyPath)) {
+            checks.installs = 'fail';
+            opts.onProgress?.({ stage: 'installs', message: `Waiting for installs to finish: ${opts.expectedInstalls.join(', ')}…` });
+            let installOk = false;
+            let cloudInitErrored = false;
+            delay = 5_000;
+            let pollIter = 0;
+            while (Date.now() < deadline) {
+                const s = readInstallStatus(ip, opts.keyPath, 8);
+                if (s) {
+                    // Confirm every requested recipe shows up in the marker. The server
+                    // writes them in install order, so set-equality is sufficient.
+                    const have = new Set(s.installs);
+                    const missing = opts.expectedInstalls.filter(r => !have.has(r));
+                    if (missing.length === 0) {
+                        checks.installs = 'pass';
+                        installStatus = s;
+                        installOk = true;
+                        break;
+                    }
+                }
+                // Every 3rd iteration, probe cloud-init status. Don't probe every
+                // tick — it's an extra SSH roundtrip and cloud-init's status file
+                // doesn't update that often anyway. 3 polls × ~6s = ~18s cadence.
+                pollIter++;
+                if (pollIter % 3 === 0) {
+                    const ciStatus = readCloudInitStatus(ip, opts.keyPath, 8);
+                    if (ciStatus === 'error') {
+                        cloudInitErrored = true;
+                        break;
+                    }
+                }
+                await new Promise(r => setTimeout(r, delay));
+                delay = Math.min(delay * 1.2, 8_000);
+            }
+            if (!installOk) {
+                checks.installs = cloudInitErrored ? 'fail' : 'timeout';
+                const diagnostics = fetchDeployDiagnostics(ip, opts.keyPath);
+                return {
+                    ready: false,
+                    ip,
+                    status,
+                    checks,
+                    elapsedMs: Date.now() - startedAt,
+                    reason: cloudInitErrored
+                        ? `cloud-init aborted (status: error). The user_data script failed before writing the install marker. See diagnostics.cloudInitLogTail for the failure.`
+                        : `Install did not complete within ${Math.round((opts.timeoutMs ?? 240_000) / 1000)}s. Recipes requested: ${opts.expectedInstalls.join(', ')}. See diagnostics for cloud-init + recipe logs.`,
+                    installStatus,
+                    diagnostics,
+                };
+            }
+        }
+        else {
+            // Install was requested but we have no local key to SSH in with — can't
+            // poll the marker. Mark skipped so the caller knows the gate didn't run.
+            checks.installs = 'skipped';
+            skipReasons.installs = opts.keyPath
+                ? `Private key not found at ${opts.keyPath}; can't read /etc/palmyr/install-status.json.`
+                : 'No local SSH key path supplied; can\'t read /etc/palmyr/install-status.json. Pass --key <path>, or check the marker manually: palmyr compute exec <id> -- cat /etc/palmyr/install-status.json';
+        }
+    }
+    return {
+        ready: true,
+        ip,
+        status,
+        checks,
+        ...(Object.keys(skipReasons).length > 0 ? { skipReasons } : {}),
+        elapsedMs: Date.now() - startedAt,
+        installStatus,
+    };
+}
+//# sourceMappingURL=compute-ssh.js.map

package/dist/compute-ssh.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"compute-ssh.js","sourceRoot":"","sources":["../compute-ssh.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAY,SAAS,EAAE,MAAM,eAAe,CAAA;AACnD,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,IAAI,CAAA;AAClF,OAAO,EAAE,OAAO,EAAE,MAAM,IAAI,CAAA;AAC5B,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,MAAM,CAAA;AACpC,OAAO,EAAE,gBAAgB,EAAE,MAAM,KAAK,CAAA;AAEtC,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,CAAC,CAAA;AAC7C,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,EAAE,KAAK,CAAC,CAAA;AACvC,MAAM,YAAY,GAAG,IAAI,CAAC,UAAU,EAAE,MAAM,EAAE,cAAc,CAAC,CAAA;AAE7D,SAAS,SAAS,CAAC,CAAS;IAC1B,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC;QAAE,SAAS,CAAC,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;AACvD,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,YAAY;IAC1B,IAAI,CAAC;QACH,MAAM,CAAC,GAAG,SAAS,CAAC,YAAY,EAAE,CAAC,IAAI,CAAC,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAA;QAC5D,qEAAqE;QACrE,2CAA2C;QAC3C,OAAO,CAAC,CAAC,KAAK,IAAI,IAAI,CAAA;IACxB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAA;IACd,CAAC;AACH,CAAC;AAUD;;;;;;;;;GASG;AACH,MAAM,UAAU,eAAe,CAAC,KAAa;IAC3C,IAAI,CAAC,YAAY,EAAE,EAAE,CAAC;QACpB,MAAM,IAAI,KAAK,CACb,8MAA8M,CAC/M,CAAA;IACH,CAAC;IACD,IAAI,CAAC,wBAAwB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1C,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAA;IACvE,CAAC;IACD,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,CAAA;IAChC,SAAS,CAAC,GAAG,CAAC,CAAA;IACd,MAAM,cAAc,GAAG,IAAI,CAAC,GAAG,EAAE,YAAY,CAAC,CAAA;IAC9C,MAAM,aAAa,GAAG,cAAc,GAAG,MAAM,CAAA;IAC7C,IAAI,UAAU,CAAC,cAAc,CAAC,EAAE,CAAC;QAC/B,MAAM,IAAI,KAAK,CACb,yBAAyB,cAAc,2CAA2C,aAAa,eAAe,CAC/G,CAAA;IACH,CAAC;IACD,MAAM,OAAO,GAAG,UAAU,KAAK,EAAE,CAAA;IACjC,gEAAgE;IAChE,sEAAsE;IACtE,MAAM,CAAC,GAAG,SAAS,CACjB,YAAY,EACZ,CAAC,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE,OAAO,CAAC,EACtE,EAAE,KAAK,EAAE,MAAM,EAAE,CAClB,CAAA;IACD,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACnB,MAAM,OAAO,GAAG,CAAC,CAAC,CAAC,MAAM,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC,MAAM,EAAE,QAAQ,EAAE,IAAI,mBAAmB,CAAC,CAAC,IAAI,EAAE,CAAA;QAC5F,MAAM,IAAI,KAAK,CAAC,sBAAsB,OAAO,EAAE,CAAC,CAAA;IAClD,CAAC;IACD,4EAA4E;IAC5E,4CAA4C;IAC5C,IAAI,CAAC;QAAC,SAAS,CAAC,cAAc,EAAE,KAAK,CAAC,CAAA;IAAC,CAAC;IAAC,MAAM,CAAC,CAAA,CAAC;IACjD,MAAM,SAAS,GAAG,YAAY,CAAC,aAAa,EAAE,MAAM,CAAC,CAAC,IAAI,EAAE,CAAA;IAC5D,OAAO,EAAE,cAAc,EAAE,aAAa,EAAE,SAAS,EAAE,OAAO,EAAE,CAAA;AAC9D,CAAC;AAoBD,SAAS,SAAS;IAChB,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC;QAAE,OAAO,EAAE,CAAA;IACxC,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC,CAAA;QAC3D,OAAO,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAA;IACxC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAA;IACX,CAAC;AACH,CAAC;AAED,SAAS,UAAU,CAAC,OAAuB;IACzC,SAAS,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,CAAA;IAChC,aAAa,CAAC,YAAY,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAA;AAC/D,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,CAAe;IAChD,MAAM,GAAG,GAAG,SAAS,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,IAAI,CAAC,CAAA;IACvE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACX,UAAU,CAAC,GAAG,CAAC,CAAA;AACjB,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,QAAgB;IACjD,MAAM,QAAQ,GAAG,SAAS,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,QAAQ,IAAI,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAA;IAClF,UAAU,CAAC,QAAQ,CAAC,CAAA;AACtB,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,gBAAgB,CAAC,QAAgB;IAC/C,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,EAAE,CAAA;IAC5B,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAA;IACtB,MAAM,GAAG,GAAG,SAAS,EAAE,CAAA;IACvB,+EAA+E;IAC/E,OAAO,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,IAAI,CAAC,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,IAAI,IAAI,CAAA;AAC/E,CAAC;AAED,MAAM,UAAU,iBAAiB;IAC/B,OAAO,SAAS,EAAE,CAAA;AACpB,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,mBAAmB,CAAC,EAAU,EAAE,OAAgB;IAC9D,MAAM,IAAI,GAAa,EAAE,CAAA;IACzB,IAAI,OAAO,IAAI,UAAU,CAAC,OAAO,CAAC;QAAE,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,CAAA;IAC5D,IAAI,CAAC,IAAI,CACP,IAAI,EAAE,kCAAkC,EACxC,IAAI,EAAE,qBAAqB,GAAG,IAAI,CAAC,UAAU,EAAE,KAAK,EAAE,aAAa,CAAC,EACpE,QAAQ,EAAE,EAAE,CACb,CAAA;IACD,SAAS,CAAC,IAAI,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC,CAAA;IAClC,MAAM,CAAC,GAAG,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAA;IACtD,IAAI,CAAC,CAAC,KAAK,EAAE,CAAC;QACZ,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,qBAAsB,CAAC,CAAC,KAAa,CAAC,OAAO,IAAI,CAAC,CAAA;QACvE,OAAO,GAAG,CAAA;IACZ,CAAC;IACD,OAAO,CAAC,CAAC,MAAM,IAAI,CAAC,CAAA;AACtB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,eAAe,CAAC,EAAU,EAAE,OAAgB;IAC1D,MAAM,KAAK,GAAG,CAAC,KAAK,CAAC,CAAA;IACrB,IAAI,OAAO,IAAI,UAAU,CAAC,OAAO,CAAC;QAAE,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,UAAU,CAAC,OAAO,CAAC,CAAC,CAAA;IACzE,KAAK,CAAC,IAAI,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAA;IACxB,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;AACxB,CAAC;AAED,SAAS,UAAU,CAAC,CAAS;IAC3B,0EAA0E;IAC1E,4EAA4E;IAC5E,IAAI,uBAAuB,CAAC,IAAI,CAAC,CAAC,CAAC;QAAE,OAAO,CAAC,CAAA;IAC7C,OAAO,GAAG,GAAG,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,GAAG,CAAA;AAC7C,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,SAAiE,EACjE,OAA+B,EAAE;IAEjC,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,CAAC,SAAS,IAAI,OAAO,CAAC,CAAA;IACzD,IAAI,KAAK,GAAG,KAAK,CAAA;IACjB,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,EAAE,CAAC;QAC7B,MAAM,CAAC,GAAG,MAAM,SAAS,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAA;QAC7C,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,KAAK,SAAS,IAAI,CAAC,CAAC,IAAI;YAAE,OAAO,CAAC,CAAA;QACnD,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAA;QAC5C,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,GAAG,GAAG,EAAE,KAAK,CAAC,CAAA;IACtC,CAAC;IACD,MAAM,IAAI,KAAK,CAAC,+CAA+C,IAAI,CAAC,SAAS,IAAI,OAAO,IAAI,CAAC,CAAA;AAC/F,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,QAAQ,CAAC,IAAY,EAAE,IAAY,EAAE,YAAoB,IAAI;IAC3E,OAAO,IAAI,OAAO,CAAC,OAAO,CAAC,EAAE;QAC3B,MAAM,IAAI,GAAG,gBAAgB,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAA;QAC7C,IAAI,IAAI,GAAG,KAAK,CAAA;QAChB,MAAM,MAAM,GAAG,CAAC,EAAW,EAAE,EAAE;YAC7B,IAAI,IAAI;gBAAE,OAAM;YAChB,IAAI,GAAG,IAAI,CAAA;YACX,IAAI,CAAC;gBAAC,IAAI,CAAC,OAAO,EAAE,CAAA;YAAC,CAAC;YAAC,MAAM,CAAC,CAAA,CAAC;YAC/B,OAAO,CAAC,EAAE,CAAC,CAAA;QACb,CAAC,CAAA;QACD,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,CAAA;QAC1B,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAA;QACxC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAA;QACzC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAA;IACzC,CAAC,CAAC,CAAA;AACJ,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,QAAQ,CAAC,EAAU,EAAE,OAAe,EAAE,aAAqB,CAAC;IAC1E,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC;QAAE,OAAO,KAAK,CAAA;IACtC,mDAAmD;IACnD,EAAE;IACF,uEAAuE;IACvE,sEAAsE;IACtE,oEAAoE;IACpE,uEAAuE;IACvE,qEAAqE;IACrE,uEAAuE;IACvE,mEAAmE;IACnE,qEAAqE;IACrE,sEAAsE;IACtE,6DAA6D;IAC7D,MAAM,CAAC,GAAG,SAAS,CAAC,KAAK,EAAE;QACzB,IAAI,EAAE,OAAO;QACb,IAAI;QACJ,IAAI;QACJ,IAAI,EAAE,eAAe;QACrB,IAAI,EAAE,kBAAkB,UAAU,EAAE;QACpC,IAAI,EAAE,0BAA0B;QAChC,IAAI,EAAE,8BAA8B;QACpC,QAAQ,EAAE,EAAE;QACZ,MAAM;KACP,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,UAAU,GAAG,CAAC,CAAC,GAAG,IAAI,EAAE,CAAC,CAAA;IACvD,OAAO,CAAC,CAAC,MAAM,KAAK,CAAC,CAAA;AACvB,CAAC;AA0CD;;;;;;;;GAQG;AACH,SAAS,MAAM,CAAC,EAAU,EAAE,OAAe,EAAE,OAAe,EAAE,aAAqB,EAAE;IACnF,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC;QAAE,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAA;IAC5D,sCAAsC;IACtC,yEAAyE;IACzE,sEAAsE;IACtE,sDAAsD;IACtD,MAAM,CAAC,GAAG,SAAS,CAAC,KAAK,EAAE;QACzB,IAAI,EAAE,OAAO;QACb,IAAI;QACJ,IAAI;QACJ,IAAI,EAAE,eAAe;QACrB,IAAI,EAAE,kBAAkB,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,UAAU,CAAC,EAAE;QAClD,IAAI,EAAE,0BAA0B;QAChC,IAAI,EAAE,8BAA8B;QACpC,QAAQ,EAAE,EAAE;QACZ,OAAO;KACR,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,UAAU,GAAG,CAAC,CAAC,GAAG,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,SAAS,EAAE,IAAI,GAAG,IAAI,EAAE,CAAC,CAAA;IAClG,OAAO;QACL,MAAM,EAAE,CAAC,CAAC,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,QAAQ,EAAE;QACnC,MAAM,EAAE,CAAC,CAAC,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM;KAC3C,CAAA;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,iBAAiB,CAAC,EAAU,EAAE,OAAe,EAAE,aAAqB,CAAC;IAInF,sEAAsE;IACtE,uEAAuE;IACvE,MAAM,CAAC,GAAG,MAAM,CAAC,EAAE,EAAE,OAAO,EAAE,iDAAiD,EAAE,UAAU,CAAC,CAAA;IAC5F,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAA;IAC/B,MAAM,GAAG,GAAG,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,CAAA;IAC3B,IAAI,CAAC,GAAG;QAAE,OAAO,IAAI,CAAA;IACrB,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;QAC9B,IAAI,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,MAAM,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;YACrG,OAAO,MAAa,CAAA;QACtB,CAAC;IACH,CAAC;IAAC,MAAM,CAAC,CAAA,CAAC;IACV,OAAO,IAAI,CAAA;AACb,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,mBAAmB,CAAC,EAAU,EAAE,OAAe,EAAE,aAAqB,CAAC;IACrF,MAAM,CAAC,GAAG,MAAM,CAAC,EAAE,EAAE,OAAO,EAAE,+BAA+B,EAAE,UAAU,CAAC,CAAA;IAC1E,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAA;IAC/B,oEAAoE;IACpE,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAA;IAC3C,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;AACxB,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,sBAAsB,CAAC,EAAU,EAAE,OAAe;IAMhE,MAAM,MAAM,GAAG;QACb,eAAe,EAAE,IAAqB;QACtC,gBAAgB,EAAE,IAAqB;QACvC,aAAa,EAAE,IAAqB;QACpC,UAAU,EAAE,EAA2C;KACxD,CAAA;IACD,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC;QAAE,OAAO,MAAM,CAAA;IAEvC,wEAAwE;IACxE,0EAA0E;IAC1E,6CAA6C;IAC7C,MAAM,MAAM,GAAG,MAAM,CAAC,EAAE,EAAE,OAAO,EAAE,uEAAuE,EAAE,EAAE,CAAC,CAAA;IAC/G,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC;QAChD,MAAM,CAAC,eAAe,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IACnF,CAAC;IAED,MAAM,KAAK,GAAG,MAAM,CAAC,EAAE,EAAE,OAAO,EAAE,sDAAsD,EAAE,EAAE,CAAC,CAAA;IAC7F,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC;QAC9C,MAAM,CAAC,gBAAgB,GAAG,KAAK,CAAC,MAAM,CAAA;IACxC,CAAC;IAED,MAAM,SAAS,GAAG,MAAM,CAAC,EAAE,EAAE,OAAO,EAAE,qDAAqD,EAAE,EAAE,CAAC,CAAA;IAChG,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,IAAI,SAAS,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC;QACtD,MAAM,CAAC,aAAa,GAAG,SAAS,CAAC,MAAM,CAAA;IACzC,CAAC;IAED,yEAAyE;IACzE,0EAA0E;IAC1E,MAAM,IAAI,GAAG,MAAM,CAAC,EAAE,EAAE,OAAO,EAAE,8CAA8C,EAAE,EAAE,CAAC,CAAA;IACpF,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtB,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;QACpF,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,wDAAwD;YACxD,MAAM,CAAC,GAAG,MAAM,CAAC,EAAE,EAAE,OAAO,EAAE,YAAY,IAAI,EAAE,EAAE,EAAE,CAAC,CAAA;YACrD,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACnB,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,yBAAyB,CAAC,CAAA;gBAC/C,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAA;YACnE,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAA;AACf,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,IAQlC;IACC,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;IAC5B,MAAM,QAAQ,GAAG,SAAS,GAAG,CAAC,IAAI,CAAC,SAAS,IAAI,OAAO,CAAC,CAAA;IACxD,MAAM,MAAM,GAA8B;QACxC,aAAa,EAAE,MAAM;QACrB,MAAM,EAAE,SAAS;QACjB,GAAG,EAAE,SAAS;KACf,CAAA;IACD,IAAI,EAAE,GAAkB,IAAI,CAAA;IAC5B,IAAI,MAAM,GAAkB,IAAI,CAAA;IAEhC,mCAAmC;IACnC,IAAI,CAAC,UAAU,EAAE,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,qCAAqC,EAAE,CAAC,CAAA;IACtF,IAAI,KAAK,GAAG,KAAK,CAAA;IACjB,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,EAAE,CAAC;QAC7B,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,SAAS,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAA;QAClD,IAAI,CAAC,EAAE,CAAC;YACN,MAAM,GAAG,CAAC,CAAC,MAAM,CAAA;YACjB,EAAE,GAAG,CAAC,CAAC,IAAI,CAAA;YACX,IAAI,CAAC,CAAC,MAAM,KAAK,SAAS,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC;gBACrC,MAAM,CAAC,aAAa,GAAG,MAAM,CAAA;gBAC7B,MAAK;YACP,CAAC;QACH,CAAC;QACD,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAA;QAC5C,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,GAAG,GAAG,EAAE,KAAK,CAAC,CAAA;IACtC,CAAC;IACD,IAAI,MAAM,CAAC,aAAa,KAAK,MAAM,EAAE,CAAC;QACpC,MAAM,CAAC,aAAa,GAAG,SAAS,CAAA;QAChC,OAAO;YACL,KAAK,EAAE,KAAK;YACZ,EAAE;YACF,MAAM;YACN,MAAM;YACN,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;YACjC,MAAM,EAAE,sDAAsD,MAAM,IAAI,SAAS,GAAG;SACrF,CAAA;IACH,CAAC;IAED,sBAAsB;IACtB,IAAI,CAAC,UAAU,EAAE,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,kBAAkB,EAAE,CAAC,CAAA;IACnE,MAAM,CAAC,MAAM,GAAG,MAAM,CAAA;IACtB,IAAI,UAAU,GAAG,KAAK,CAAA;IACtB,KAAK,GAAG,KAAK,CAAA;IACb,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,EAAE,CAAC;QAC7B,IAAI,MAAM,QAAQ,CAAC,EAAG,EAAE,EAAE,EAAE,KAAK,CAAC,EAAE,CAAC;YACnC,MAAM,CAAC,MAAM,GAAG,MAAM,CAAA;YACtB,UAAU,GAAG,IAAI,CAAA;YACjB,MAAK;QACP,CAAC;QACD,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAA;QAC5C,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,GAAG,GAAG,EAAE,KAAK,CAAC,CAAA;IACtC,CAAC;IACD,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,MAAM,CAAC,MAAM,GAAG,SAAS,CAAA;QACzB,OAAO;YACL,KAAK,EAAE,KAAK;YACZ,EAAE;YACF,MAAM;YACN,MAAM;YACN,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;YACjC,MAAM,EAAE,+DAA+D;SACxE,CAAA;IACH,CAAC;IAED,0CAA0C;IAC1C,MAAM,WAAW,GAAgD,EAAE,CAAA;IACnE,IAAI,IAAI,CAAC,OAAO,IAAI,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QAC7C,IAAI,CAAC,UAAU,EAAE,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,4BAA4B,IAAI,CAAC,OAAO,GAAG,EAAE,CAAC,CAAA;QACzF,MAAM,CAAC,GAAG,GAAG,MAAM,CAAA;QACnB,IAAI,KAAK,GAAG,KAAK,CAAA;QACjB,KAAK,GAAG,KAAK,CAAA;QACb,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,EAAE,CAAC;YAC7B,IAAI,QAAQ,CAAC,EAAG,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,EAAE,CAAC;gBACnC,MAAM,CAAC,GAAG,GAAG,MAAM,CAAA;gBACnB,KAAK,GAAG,IAAI,CAAA;gBACZ,MAAK;YACP,CAAC;YACD,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAA;YAC5C,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,GAAG,GAAG,EAAE,KAAK,CAAC,CAAA;QACtC,CAAC;QACD,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,CAAC,GAAG,GAAG,SAAS,CAAA;YACtB,OAAO;gBACL,KAAK,EAAE,KAAK;gBACZ,EAAE;gBACF,MAAM;gBACN,MAAM;gBACN,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;gBACjC,MAAM,EAAE,8BAA8B,IAAI,CAAC,OAAO,SAAS,EAAE,4GAA4G;aAC1K,CAAA;QACH,CAAC;IACH,CAAC;SAAM,CAAC;QACN,MAAM,CAAC,GAAG,GAAG,SAAS,CAAA;QACtB,WAAW,CAAC,GAAG,GAAG,IAAI,CAAC,OAAO;YAC5B,CAAC,CAAC,4BAA4B,IAAI,CAAC,OAAO,GAAG;YAC7C,CAAC,CAAC,yIAAyI,CAAA;IAC/I,CAAC;IAED,uDAAuD;IACvD,wEAAwE;IACxE,yEAAyE;IACzE,yEAAyE;IACzE,oCAAoC;IACpC,IAAI,aAA+C,CAAA;IACnD,IAAI,IAAI,CAAC,gBAAgB,IAAI,IAAI,CAAC,gBAAgB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC9D,IAAI,IAAI,CAAC,OAAO,IAAI,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YAC7C,MAAM,CAAC,QAAQ,GAAG,MAAM,CAAA;YACxB,IAAI,CAAC,UAAU,EAAE,CAAC,EAAE,KAAK,EAAE,UAAU,EAAE,OAAO,EAAE,mCAAmC,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAA;YACzH,IAAI,SAAS,GAAG,KAAK,CAAA;YACrB,IAAI,gBAAgB,GAAG,KAAK,CAAA;YAC5B,KAAK,GAAG,KAAK,CAAA;YACb,IAAI,QAAQ,GAAG,CAAC,CAAA;YAChB,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,EAAE,CAAC;gBAC7B,MAAM,CAAC,GAAG,iBAAiB,CAAC,EAAG,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAA;gBACjD,IAAI,CAAC,EAAE,CAAC;oBACN,oEAAoE;oBACpE,+DAA+D;oBAC/D,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAA;oBAChC,MAAM,OAAO,GAAG,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAA;oBAC/D,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;wBACzB,MAAM,CAAC,QAAQ,GAAG,MAAM,CAAA;wBACxB,aAAa,GAAG,CAAC,CAAA;wBACjB,SAAS,GAAG,IAAI,CAAA;wBAChB,MAAK;oBACP,CAAC;gBACH,CAAC;gBAED,kEAAkE;gBAClE,kEAAkE;gBAClE,kEAAkE;gBAClE,QAAQ,EAAE,CAAA;gBACV,IAAI,QAAQ,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;oBACvB,MAAM,QAAQ,GAAG,mBAAmB,CAAC,EAAG,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAA;oBAC1D,IAAI,QAAQ,KAAK,OAAO,EAAE,CAAC;wBACzB,gBAAgB,GAAG,IAAI,CAAA;wBACvB,MAAK;oBACP,CAAC;gBACH,CAAC;gBAED,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAA;gBAC5C,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,GAAG,GAAG,EAAE,KAAK,CAAC,CAAA;YACtC,CAAC;YACD,IAAI,CAAC,SAAS,EAAE,CAAC;gBACf,MAAM,CAAC,QAAQ,GAAG,gBAAgB,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAA;gBACvD,MAAM,WAAW,GAAG,sBAAsB,CAAC,EAAG,EAAE,IAAI,CAAC,OAAO,CAAC,CAAA;gBAC7D,OAAO;oBACL,KAAK,EAAE,KAAK;oBACZ,EAAE;oBACF,MAAM;oBACN,MAAM;oBACN,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;oBACjC,MAAM,EAAE,gBAAgB;wBACtB,CAAC,CAAC,sJAAsJ;wBACxJ,CAAC,CAAC,mCAAmC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,SAAS,IAAI,OAAO,CAAC,GAAG,IAAI,CAAC,yBAAyB,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,iDAAiD;oBAC/L,aAAa;oBACb,WAAW;iBACZ,CAAA;YACH,CAAC;QACH,CAAC;aAAM,CAAC;YACN,wEAAwE;YACxE,yEAAyE;YACzE,MAAM,CAAC,QAAQ,GAAG,SAAS,CAAA;YAC3B,WAAW,CAAC,QAAQ,GAAG,IAAI,CAAC,OAAO;gBACjC,CAAC,CAAC,4BAA4B,IAAI,CAAC,OAAO,+CAA+C;gBACzF,CAAC,CAAC,+LAA+L,CAAA;QACrM,CAAC;IACH,CAAC;IAED,OAAO;QACL,KAAK,EAAE,IAAI;QACX,EAAE;QACF,MAAM;QACN,MAAM;QACN,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/D,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;QACjC,aAAa;KACd,CAAA;AACH,CAAC"}

package/dist/config.d.ts

@@ -0,0 +1,46 @@
+/**
+ * Palmyr local config + data management
+ * Everything lives in ~/.palmyr/
+ */
+export declare function ensureDirs(): void;
+export interface WalletConfig {
+    keyfile?: string;
+    vaultWalletId?: string;
+}
+export interface PalmyrConfig {
+    api: string;
+    wallets: {
+        solana?: WalletConfig;
+        base?: WalletConfig;
+    };
+    defaultChain: 'solana' | 'base';
+    setupDone?: boolean;
+    vaultEnabled?: boolean;
+    apiKey?: string;
+    defaultPayWalletId?: string;
+    defaultPayChain?: 'solana' | 'base';
+    chain?: string;
+    keyfile?: string;
+}
+export declare function loadConfig(): PalmyrConfig;
+export declare function saveConfig(config: PalmyrConfig): void;
+export declare function addWalletToConfig(chain: 'solana' | 'base', keyfile: string): void;
+export declare function getKeyfile(chain?: 'solana' | 'base'): string | null;
+export declare function loadKeypair(chain?: 'solana' | 'base'): Uint8Array | null;
+export declare function getConfiguredChains(): string[];
+export declare function getData(file: string): any;
+export declare function setData(file: string, data: any): void;
+export declare function getPhones(): any[];
+export declare function addPhone(phone: any): void;
+export declare function getInboxes(): any[];
+export declare function addInbox(inbox: any): void;
+export declare function getServers(): any[];
+export declare function addServer(server: any): void;
+export declare function getDomains(): any[];
+export declare function addDomain(domain: any): void;
+export declare function getAccounts(): any[];
+export declare function addAccount(account: any): void;
+export declare function saveDraft(id: string, draft: any): void;
+export declare function getDraft(id: string): any;
+export declare function addNote(note: string): void;
+export declare function log(message: string): void;