@r8s/nextcloud 0.2.0 → 0.3.0

package/dist/index.d.ts

@@ -0,0 +1,132 @@
+export interface NextcloudProps {
+    /** Resource name (defaults to 'nextcloud') */
+    name?: string;
+    /** Kubernetes namespace (defaults to 'default') */
+    namespace?: string;
+    /** Container image tag (defaults to '31-apache' — pin a version in production) */
+    version?: string;
+    /** Public hostname for the web UI and WebDAV (required) */
+    host: string;
+    /**
+     * Number of replicas. Safe to scale beyond 1 when `objectStorage` is
+     * configured (file blobs live in S3) and `cache` is enabled — Nextcloud
+     * becomes effectively stateless. Requires a StorageClass with
+     * ReadWriteMany support for the /var/www/html claim.
+     */
+    replicas?: number;
+    /** Provision a Redis replication set for file locking and caching (default: true) */
+    cache?: boolean;
+    /**
+     * Size of the PersistentVolumeClaim backing /var/www/html (defaults to
+     * '10Gi'). Apps, config and the data directory all live in this tree.
+     */
+    storage?: string;
+    /**
+     * StorageClass for the /var/www/html PersistentVolumeClaim. Must provide
+     * ReadWriteMany when `replicas` > 1 (e.g. NFS or EFS). Defaults to the
+     * cluster default StorageClass when omitted.
+     */
+    storageClassName?: string;
+    /**
+     * S3-compatible object storage used as primary storage for files
+     * (RustFS in the platform). Reference a bucket whose credentials live
+     * in a Secret provisioned by the secrets backend (keys: accessKey,
+     * secretKey) — never plaintext.
+     */
+    objectStorage?: {
+        /** S3 host WITHOUT protocol/scheme, e.g. s3.internal.example.com */
+        endpoint: string;
+        /** Bucket used for user files */
+        bucket: string;
+        /** Name of the Secret holding accessKey / secretKey */
+        credentialsSecret: string;
+        /** Region string for the S3 client (defaults to 'us-east-1') */
+        region?: string;
+        /** TCP port of the S3 endpoint (defaults to the provider default, typically 443) */
+        port?: number;
+        /** Use TLS against the S3 endpoint (default: true) */
+        ssl?: boolean;
+    };
+    /**
+     * Name of an existing Secret holding the Nextcloud app secrets
+     * (key: adminPassword). Required unless a secrets backend
+     * (openbao/vault) is configured on the surrounding Platform — the
+     * backend then provisions them automatically. Plaintext admin
+     * passwords are not supported.
+     */
+    secretsName?: string;
+    /** Requested resources */
+    resources?: {
+        requests?: {
+            cpu?: string;
+            memory?: string;
+        };
+        limits?: {
+            cpu?: string;
+            memory?: string;
+        };
+    };
+    /** TLS configuration (defaults to letsencrypt-prod cluster issuer) */
+    tls?: {
+        secretName: string;
+        clusterIssuer: string;
+    };
+}
+/**
+ * Nextcloud — self-hosted file cloud with Postgres, Redis, S3 primary
+ * storage and background cron jobs.
+ *
+ * @title Nextcloud
+ * @category File & Collaboration
+ *
+ * Composes:
+ * - CNPG Postgres cluster (file index, shares, user data)
+ * - Redis replication set for file locking and caching (default on)
+ * - PersistentVolumeClaim backing /var/www/html (ReadWriteMany)
+ * - Nextcloud Deployment + Service + Endpoint (nextcloud:31-apache,
+ *   probed via /status.php)
+ * - CronJob running `php -f /var/www/html/cron.php` every 5 minutes on
+ *   the same claim (concurrency forbidden)
+ * - S3/RustFS bucket reference for primary file storage
+ * - Admin bootstrap password provisioned by the Platform secrets
+ *   backend (openbao / vault), or referenced from an existing Secret
+ *
+ * The main app is a raw Deployment (not WebService) because Nextcloud
+ * needs the /var/www/html claim volume-mounted; the CronJob shares the
+ * same claim so background jobs operate on the live data tree.
+ *
+ * @example
+ * import { Platform } from '@r8s/recipes'
+ * import { Nextcloud } from '@r8s/nextcloud'
+ *
+ * export default (
+ *   <Platform secrets={{ backend: 'openbao', mount: 'kv', path: 'apps' }}>
+ *     <Nextcloud
+ *       name="cloud"
+ *       host="cloud.example.com"
+ *       objectStorage={{
+ *         endpoint: 's3.internal.example.com',
+ *         bucket: 'cloud-files',
+ *         credentialsSecret: 'cloud-files-credentials',
+ *       }}
+ *     />
+ *   </Platform>
+ * )
+ * @example
+ * import { Nextcloud } from '@r8s/nextcloud'
+ *
+ * export default (
+ *   <Nextcloud
+ *     name="cloud"
+ *     host="${env:CLOUD_HOST}"
+ *     secretsName="cloud-app-secrets"
+ *     objectStorage={{
+ *       endpoint: '${env:S3_ENDPOINT}',
+ *       bucket: 'cloud-files',
+ *       credentialsSecret: 'cloud-files-credentials',
+ *     }}
+ *   />
+ * )
+ */
+export declare function Nextcloud(props: NextcloudProps): import("@r8s/core").r8sElement;
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.tsx"],"names":[],"mappings":"AAQA,MAAM,WAAW,cAAc;IAC7B,8CAA8C;IAC9C,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,mDAAmD;IACnD,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,kFAAkF;IAClF,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,2DAA2D;IAC3D,IAAI,EAAE,MAAM,CAAA;IACZ;;;;;OAKG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,qFAAqF;IACrF,KAAK,CAAC,EAAE,OAAO,CAAA;IACf;;;OAGG;IACH,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB;;;;OAIG;IACH,gBAAgB,CAAC,EAAE,MAAM,CAAA;IACzB;;;;;OAKG;IACH,aAAa,CAAC,EAAE;QACd,oEAAoE;QACpE,QAAQ,EAAE,MAAM,CAAA;QAChB,iCAAiC;QACjC,MAAM,EAAE,MAAM,CAAA;QACd,uDAAuD;QACvD,iBAAiB,EAAE,MAAM,CAAA;QACzB,gEAAgE;QAChE,MAAM,CAAC,EAAE,MAAM,CAAA;QACf,oFAAoF;QACpF,IAAI,CAAC,EAAE,MAAM,CAAA;QACb,sDAAsD;QACtD,GAAG,CAAC,EAAE,OAAO,CAAA;KACd,CAAA;IACD;;;;;;OAMG;IACH,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,0BAA0B;IAC1B,SAAS,CAAC,EAAE;QACV,QAAQ,CAAC,EAAE;YAAE,GAAG,CAAC,EAAE,MAAM,CAAC;YAAC,MAAM,CAAC,EAAE,MAAM,CAAA;SAAE,CAAA;QAC5C,MAAM,CAAC,EAAE;YAAE,GAAG,CAAC,EAAE,MAAM,CAAC;YAAC,MAAM,CAAC,EAAE,MAAM,CAAA;SAAE,CAAA;KAC3C,CAAA;IACD,sEAAsE;IACtE,GAAG,CAAC,EAAE;QACJ,UAAU,EAAE,MAAM,CAAA;QAClB,aAAa,EAAE,MAAM,CAAA;KACtB,CAAA;CACF;AAID;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuDG;AACH,wBAAgB,SAAS,CAAC,KAAK,EAAE,cAAc,kCAsT9C"}

package/dist/index.js

@@ -0,0 +1,328 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.Nextcloud = Nextcloud;
+const jsx_runtime_1 = require("@r8s/core/jsx-runtime");
+const core_1 = require("@r8s/core");
+const defaults_1 = require("@r8s/core/defaults");
+const recipes_1 = require("@r8s/recipes");
+const redis_1 = require("@r8s/crds/redis");
+const operator_redis_1 = require("@r8s/operator-redis");
+const HTML_MOUNT = '/var/www/html';
+const STATUS_PATH = '/status.php';
+/**
+ * Nextcloud — self-hosted file cloud with Postgres, Redis, S3 primary
+ * storage and background cron jobs.
+ *
+ * @title Nextcloud
+ * @category File & Collaboration
+ *
+ * Composes:
+ * - CNPG Postgres cluster (file index, shares, user data)
+ * - Redis replication set for file locking and caching (default on)
+ * - PersistentVolumeClaim backing /var/www/html (ReadWriteMany)
+ * - Nextcloud Deployment + Service + Endpoint (nextcloud:31-apache,
+ *   probed via /status.php)
+ * - CronJob running `php -f /var/www/html/cron.php` every 5 minutes on
+ *   the same claim (concurrency forbidden)
+ * - S3/RustFS bucket reference for primary file storage
+ * - Admin bootstrap password provisioned by the Platform secrets
+ *   backend (openbao / vault), or referenced from an existing Secret
+ *
+ * The main app is a raw Deployment (not WebService) because Nextcloud
+ * needs the /var/www/html claim volume-mounted; the CronJob shares the
+ * same claim so background jobs operate on the live data tree.
+ *
+ * @example
+ * import { Platform } from '@r8s/recipes'
+ * import { Nextcloud } from '@r8s/nextcloud'
+ *
+ * export default (
+ *   <Platform secrets={{ backend: 'openbao', mount: 'kv', path: 'apps' }}>
+ *     <Nextcloud
+ *       name="cloud"
+ *       host="cloud.example.com"
+ *       objectStorage={{
+ *         endpoint: 's3.internal.example.com',
+ *         bucket: 'cloud-files',
+ *         credentialsSecret: 'cloud-files-credentials',
+ *       }}
+ *     />
+ *   </Platform>
+ * )
+ * @example
+ * import { Nextcloud } from '@r8s/nextcloud'
+ *
+ * export default (
+ *   <Nextcloud
+ *     name="cloud"
+ *     host="${env:CLOUD_HOST}"
+ *     secretsName="cloud-app-secrets"
+ *     objectStorage={{
+ *       endpoint: '${env:S3_ENDPOINT}',
+ *       bucket: 'cloud-files',
+ *       credentialsSecret: 'cloud-files-credentials',
+ *     }}
+ *   />
+ * )
+ */
+function Nextcloud(props) {
+    const { name = 'nextcloud', namespace = 'default', version = '31-apache', host, replicas = 1, cache = true, storage = '10Gi', storageClassName, objectStorage, secretsName, resources = {
+        requests: { memory: '512Mi', cpu: '250m' },
+        limits: { memory: '2Gi', cpu: '1000m' },
+    }, tls = { secretName: `${name}-tls`, clusterIssuer: 'letsencrypt-prod' }, } = props;
+    const sharedOperators = (0, core_1.useContext)(defaults_1.OperatorContext);
+    const secretProvider = (0, core_1.useContext)(defaults_1.SecretContext);
+    const resources_ = [];
+    const dbHost = `${name}-rw`;
+    const dbCredentialsName = `${name}-db-credentials`;
+    const appSecretsName = secretsName ?? `${name}-app-secrets`;
+    const htmlClaim = `${name}-html`;
+    const image = `nextcloud:${version}`;
+    const cronSchedule = '*/5 * * * *';
+    // --- App secrets provisioning ---------------------------------------------
+    // The admin bootstrap password must never be rendered as plaintext. With a
+    // secrets backend it is provisioned through the backend (key `adminPassword`);
+    // otherwise reference a pre-created Secret.
+    if (!secretsName) {
+        if (!secretProvider ||
+            (secretProvider.backend !== 'vault' && secretProvider.backend !== 'openbao')) {
+            throw new Error(`Nextcloud "${name}" requires application secrets (NEXTCLOUD_ADMIN_PASSWORD).\n` +
+                `\n` +
+                `Nextcloud bootstraps its admin account from this password — it must not ` +
+                `be rendered as plaintext.\n` +
+                `\n` +
+                `Fix: configure a secrets backend on the Platform:\n` +
+                `  <Platform secrets={{ backend: 'openbao', mount: 'kv', path: 'apps' }}>\n` +
+                `    <Nextcloud name="${name}" host="${host}" />\n` +
+                `  </Platform>\n` +
+                `\n` +
+                `Or reference a pre-created Secret (key: adminPassword):\n` +
+                `  <Nextcloud name="${name}" host="${host}" secretsName="${name}-app-secrets" />`);
+        }
+        const spec = {
+            ...(secretProvider.backend === 'vault'
+                ? { vaultAuthRef: secretProvider.authRef }
+                : { openbaoAuthRef: secretProvider.authRef }),
+            mount: secretProvider.mount,
+            type: 'kv-v2',
+            path: `${secretProvider.path ?? name}/${name}/secrets`,
+            destination: { create: true, name: appSecretsName },
+        };
+        resources_.push(secretProvider.backend === 'vault'
+            ? (0, core_1.jsx)('VaultStaticSecret', {
+                apiVersion: 'secrets.hashicorp.com/v1beta1',
+                kind: 'VaultStaticSecret',
+                metadata: { name: `${name}-secrets`, namespace },
+                spec,
+            })
+            : (0, core_1.jsx)('OpenBaoStaticSecret', {
+                apiVersion: 'secrets.openbao.org/v1beta1',
+                kind: 'OpenBaoStaticSecret',
+                metadata: { name: `${name}-secrets`, namespace },
+                spec,
+            }));
+    }
+    // --- Operators -------------------------------------------------------------
+    if (cache) {
+        resources_.push(...(0, operator_redis_1.declareIfMissing)(sharedOperators));
+    }
+    // Redis — file locking + caching (OT-Container-Kit operator). A
+    // RedisReplication (master/replica) is what Nextcloud's locking needs;
+    // cluster mode is overkill and the `${name}-redis` service fronts it.
+    if (cache) {
+        resources_.push((0, redis_1.RedisReplicationComponent)({
+            metadata: { name: `${name}-redis`, namespace },
+            spec: {
+                clusterSize: 3,
+                kubernetesConfig: { image: 'redis:7.2-alpine' },
+            },
+        }));
+    }
+    // --- /var/www/html persistence ----------------------------------------------
+    // Apps, config and the data directory live under /var/www/html and must
+    // survive pod restarts. ReadWriteMany lets the cron job share the same
+    // tree and keeps replicas > 1 viable (requires an RWX StorageClass).
+    const htmlPvc = {
+        apiVersion: 'v1',
+        kind: 'PersistentVolumeClaim',
+        metadata: { name: htmlClaim, namespace, labels: { app: name } },
+        spec: {
+            accessModes: ['ReadWriteMany'],
+            resources: { requests: { storage } },
+            ...(storageClassName && { storageClassName }),
+        },
+    };
+    resources_.push((0, core_1.jsx)('PersistentVolumeClaim', htmlPvc));
+    // --- Env wiring --------------------------------------------------------------
+    // Every credential is referenced with $(VAR) expansion or secretKeyRef —
+    // no plaintext in the manifest. Secret-backed vars are declared BEFORE
+    // plain env vars so dependent $(VAR) expansion resolves. Nextcloud
+    // natively reads POSTGRES_* and OBJECTSTORE_S3_*; the S3 keys/secrets are
+    // expanded from the AWS_* secret-backed vars. (Nextcloud ignores
+    // DATABASE_URL — do not add it back.)
+    const secrets = {
+        PGPASSWORD: { secret: dbCredentialsName, key: 'password' },
+        NEXTCLOUD_ADMIN_PASSWORD: { secret: appSecretsName, key: 'adminPassword' },
+        ...(objectStorage
+            ? {
+                AWS_ACCESS_KEY_ID: { secret: objectStorage.credentialsSecret, key: 'accessKey' },
+                AWS_SECRET_ACCESS_KEY: { secret: objectStorage.credentialsSecret, key: 'secretKey' },
+            }
+            : {}),
+    };
+    const env = {
+        POSTGRES_HOST: dbHost,
+        POSTGRES_PORT: '5432',
+        POSTGRES_DB: name,
+        POSTGRES_USER: name,
+        POSTGRES_PASSWORD: '$(PGPASSWORD)',
+        NEXTCLOUD_ADMIN_USER: 'admin',
+        NEXTCLOUD_TRUSTED_DOMAINS: host,
+        OVERWRITEHOST: host,
+        OVERWRITEPROTOCOL: 'https',
+        OVERWRITECLIURL: `https://${host}`,
+        ...(cache ? { REDIS_HOST: `${name}-redis`, REDIS_HOST_PORT: '6379' } : {}),
+        ...(objectStorage
+            ? {
+                OBJECTSTORE_S3_HOST: objectStorage.endpoint,
+                OBJECTSTORE_S3_BUCKET: objectStorage.bucket,
+                OBJECTSTORE_S3_REGION: objectStorage.region ?? 'us-east-1',
+                OBJECTSTORE_S3_SSL: (objectStorage.ssl ?? true) ? 'true' : 'false',
+                ...(objectStorage.port !== undefined && {
+                    OBJECTSTORE_S3_PORT: String(objectStorage.port),
+                }),
+                OBJECTSTORE_S3_USEPATH_STYLE: 'true',
+                OBJECTSTORE_S3_AUTOCREATE: 'true',
+                OBJECTSTORE_S3_KEY: '$(AWS_ACCESS_KEY_ID)',
+                OBJECTSTORE_S3_SECRET: '$(AWS_SECRET_ACCESS_KEY)',
+            }
+            : {}),
+    };
+    const envVars = Object.entries(secrets).map(([envName, ref]) => ({
+        name: envName,
+        valueFrom: {
+            secretKeyRef: typeof ref === 'string'
+                ? { name: ref, key: envName }
+                : { name: ref.secret, key: ref.key || envName },
+        },
+    }));
+    envVars.push(...Object.entries(env).map(([envName, value]) => ({ name: envName, value })));
+    // --- Database (CNPG) + app + endpoint ------------------------------------------
+    // <Database> is the parent wrapper so the CNPG operator and the Cluster
+    // piggyback on the r8s Database recipe (connect info stays by convention:
+    // host `${name}-rw`, secret `${name}-db-credentials` key `password`). The
+    // app is a raw Deployment because WebService cannot mount volumes.
+    const app = {
+        apiVersion: 'apps/v1',
+        kind: 'Deployment',
+        metadata: { name, namespace, labels: { app: name } },
+        spec: {
+            replicas,
+            selector: { matchLabels: { app: name } },
+            template: {
+                metadata: { labels: { app: name } },
+                spec: {
+                    containers: [
+                        {
+                            name: 'app',
+                            image,
+                            imagePullPolicy: 'Always',
+                            ports: [{ containerPort: 80 }],
+                            env: envVars,
+                            resources,
+                            livenessProbe: {
+                                httpGet: { path: STATUS_PATH, port: 80 },
+                                initialDelaySeconds: 30,
+                                periodSeconds: 10,
+                            },
+                            readinessProbe: {
+                                httpGet: { path: STATUS_PATH, port: 80 },
+                                initialDelaySeconds: 20,
+                                periodSeconds: 10,
+                                failureThreshold: 5,
+                            },
+                            volumeMounts: [{ name: 'html', mountPath: HTML_MOUNT }],
+                        },
+                    ],
+                    volumes: [{ name: 'html', persistentVolumeClaim: { claimName: htmlClaim } }],
+                },
+            },
+        },
+    };
+    const appService = {
+        apiVersion: 'v1',
+        kind: 'Service',
+        metadata: { name, namespace },
+        spec: {
+            type: 'ClusterIP',
+            selector: { app: name },
+            ports: [{ port: 80, targetPort: 80 }],
+        },
+    };
+    resources_.push((0, core_1.jsx)(recipes_1.Database, {
+        backup: false,
+        name,
+        namespace,
+        storage: '10Gi',
+        children: (0, core_1.jsx)(core_1.Fragment, {
+            children: [(0, core_1.jsx)('Deployment', app), (0, core_1.jsx)('Service', appService)],
+        }),
+    }));
+    // --- CronJob — background jobs (php -f cron.php) --------------------------------
+    // WebService cannot express a separate scheduled workload, so the cron job
+    // is a raw CronJob that mounts the SAME `${name}-html` claim and runs the
+    // image's own php. It cannot see DatabaseContext: host/user are hardcoded
+    // by convention and the DB password arrives via secretKeyRef.
+    resources_.push((0, core_1.jsx)('CronJob', {
+        apiVersion: 'batch/v1',
+        kind: 'CronJob',
+        metadata: { name: `${name}-cron`, namespace },
+        spec: {
+            schedule: cronSchedule,
+            concurrencyPolicy: 'Forbid',
+            successfulJobsHistoryLimit: 1,
+            failedJobsHistoryLimit: 1,
+            jobTemplate: {
+                spec: {
+                    backoffLimit: 2,
+                    template: {
+                        metadata: { labels: { app: `${name}-cron` } },
+                        spec: {
+                            restartPolicy: 'OnFailure',
+                            containers: [
+                                {
+                                    name: 'nextcloud-cron',
+                                    image,
+                                    command: ['php', '-f', '/var/www/html/cron.php'],
+                                    env: [
+                                        { name: 'POSTGRES_HOST', value: dbHost },
+                                        { name: 'POSTGRES_PORT', value: '5432' },
+                                        { name: 'POSTGRES_DB', value: name },
+                                        { name: 'POSTGRES_USER', value: name },
+                                        {
+                                            name: 'PGPASSWORD',
+                                            valueFrom: {
+                                                secretKeyRef: { name: dbCredentialsName, key: 'password' },
+                                            },
+                                        },
+                                        ...(cache ? [{ name: 'REDIS_HOST', value: `${name}-redis` }] : []),
+                                    ],
+                                    resources: {
+                                        requests: { memory: '128Mi', cpu: '100m' },
+                                        limits: { memory: '512Mi', cpu: '500m' },
+                                    },
+                                    volumeMounts: [{ name: 'html', mountPath: HTML_MOUNT }],
+                                },
+                            ],
+                            volumes: [{ name: 'html', persistentVolumeClaim: { claimName: htmlClaim } }],
+                        },
+                    },
+                },
+            },
+        },
+    }));
+    // --- Endpoint — web UI and WebDAV share the host --------------------------------
+    resources_.push((0, jsx_runtime_1.jsx)(recipes_1.Endpoint, { name: `${name}-endpoint`, namespace: namespace, host: host, serviceName: name, servicePort: 80, tls: tls }));
+    return (0, core_1.jsx)(core_1.Fragment, { children: resources_ });
+}
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.tsx"],"names":[],"mappings":";;AAuIA,8BAsTC;;AA7bD,oCAAsE;AAEtE,iDAAmE;AACnE,0CAAiD;AACjD,2CAA2D;AAC3D,wDAAsD;AAuEtD,MAAM,UAAU,GAAG,eAAe,CAAA;AAClC,MAAM,WAAW,GAAG,aAAa,CAAA;AAEjC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuDG;AACH,SAAgB,SAAS,CAAC,KAAqB;IAC7C,MAAM,EACJ,IAAI,GAAG,WAAW,EAClB,SAAS,GAAG,SAAS,EACrB,OAAO,GAAG,WAAW,EACrB,IAAI,EACJ,QAAQ,GAAG,CAAC,EACZ,KAAK,GAAG,IAAI,EACZ,OAAO,GAAG,MAAM,EAChB,gBAAgB,EAChB,aAAa,EACb,WAAW,EACX,SAAS,GAAG;QACV,QAAQ,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE;QAC1C,MAAM,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,OAAO,EAAE;KACxC,EACD,GAAG,GAAG,EAAE,UAAU,EAAE,GAAG,IAAI,MAAM,EAAE,aAAa,EAAE,kBAAkB,EAAE,GACvE,GAAG,KAAK,CAAA;IAET,MAAM,eAAe,GAAG,IAAA,iBAAU,EAAC,0BAAe,CAAC,CAAA;IACnD,MAAM,cAAc,GAAG,IAAA,iBAAU,EAAC,wBAAa,CAAC,CAAA;IAChD,MAAM,UAAU,GAA6B,EAAE,CAAA;IAE/C,MAAM,MAAM,GAAG,GAAG,IAAI,KAAK,CAAA;IAC3B,MAAM,iBAAiB,GAAG,GAAG,IAAI,iBAAiB,CAAA;IAClD,MAAM,cAAc,GAAG,WAAW,IAAI,GAAG,IAAI,cAAc,CAAA;IAC3D,MAAM,SAAS,GAAG,GAAG,IAAI,OAAO,CAAA;IAChC,MAAM,KAAK,GAAG,aAAa,OAAO,EAAE,CAAA;IACpC,MAAM,YAAY,GAAG,aAAa,CAAA;IAElC,6EAA6E;IAC7E,2EAA2E;IAC3E,+EAA+E;IAC/E,4CAA4C;IAC5C,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,IACE,CAAC,cAAc;YACf,CAAC,cAAc,CAAC,OAAO,KAAK,OAAO,IAAI,cAAc,CAAC,OAAO,KAAK,SAAS,CAAC,EAC5E,CAAC;YACD,MAAM,IAAI,KAAK,CACb,cAAc,IAAI,8DAA8D;gBAC9E,IAAI;gBACJ,0EAA0E;gBAC1E,6BAA6B;gBAC7B,IAAI;gBACJ,qDAAqD;gBACrD,4EAA4E;gBAC5E,wBAAwB,IAAI,WAAW,IAAI,QAAQ;gBACnD,iBAAiB;gBACjB,IAAI;gBACJ,2DAA2D;gBAC3D,sBAAsB,IAAI,WAAW,IAAI,kBAAkB,IAAI,kBAAkB,CACpF,CAAA;QACH,CAAC;QAED,MAAM,IAAI,GAAG;YACX,GAAG,CAAC,cAAc,CAAC,OAAO,KAAK,OAAO;gBACpC,CAAC,CAAC,EAAE,YAAY,EAAE,cAAc,CAAC,OAAO,EAAE;gBAC1C,CAAC,CAAC,EAAE,cAAc,EAAE,cAAc,CAAC,OAAO,EAAE,CAAC;YAC/C,KAAK,EAAE,cAAc,CAAC,KAAK;YAC3B,IAAI,EAAE,OAAgB;YACtB,IAAI,EAAE,GAAG,cAAc,CAAC,IAAI,IAAI,IAAI,IAAI,IAAI,UAAU;YACtD,WAAW,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,cAAc,EAAE;SACpD,CAAA;QACD,UAAU,CAAC,IAAI,CACb,cAAc,CAAC,OAAO,KAAK,OAAO;YAChC,CAAC,CAAC,IAAA,UAAG,EAAC,mBAAmB,EAAE;gBACvB,UAAU,EAAE,+BAA+B;gBAC3C,IAAI,EAAE,mBAAmB;gBACzB,QAAQ,EAAE,EAAE,IAAI,EAAE,GAAG,IAAI,UAAU,EAAE,SAAS,EAAE;gBAChD,IAAI;aACL,CAAC;YACJ,CAAC,CAAC,IAAA,UAAG,EAAC,qBAAqB,EAAE;gBACzB,UAAU,EAAE,6BAA6B;gBACzC,IAAI,EAAE,qBAAqB;gBAC3B,QAAQ,EAAE,EAAE,IAAI,EAAE,GAAG,IAAI,UAAU,EAAE,SAAS,EAAE;gBAChD,IAAI;aACL,CAAC,CACP,CAAA;IACH,CAAC;IAED,8EAA8E;IAC9E,IAAI,KAAK,EAAE,CAAC;QACV,UAAU,CAAC,IAAI,CAAC,GAAG,IAAA,iCAAgB,EAAC,eAAe,CAAC,CAAC,CAAA;IACvD,CAAC;IAED,gEAAgE;IAChE,uEAAuE;IACvE,sEAAsE;IACtE,IAAI,KAAK,EAAE,CAAC;QACV,UAAU,CAAC,IAAI,CACb,IAAA,iCAAyB,EAAC;YACxB,QAAQ,EAAE,EAAE,IAAI,EAAE,GAAG,IAAI,QAAQ,EAAE,SAAS,EAAE;YAC9C,IAAI,EAAE;gBACJ,WAAW,EAAE,CAAC;gBACd,gBAAgB,EAAE,EAAE,KAAK,EAAE,kBAAkB,EAAE;aAChD;SACF,CAAC,CACH,CAAA;IACH,CAAC;IAED,+EAA+E;IAC/E,wEAAwE;IACxE,uEAAuE;IACvE,qEAAqE;IACrE,MAAM,OAAO,GAA0B;QACrC,UAAU,EAAE,IAAI;QAChB,IAAI,EAAE,uBAAuB;QAC7B,QAAQ,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;QAC/D,IAAI,EAAE;YACJ,WAAW,EAAE,CAAC,eAAe,CAAC;YAC9B,SAAS,EAAE,EAAE,QAAQ,EAAE,EAAE,OAAO,EAAE,EAAE;YACpC,GAAG,CAAC,gBAAgB,IAAI,EAAE,gBAAgB,EAAE,CAAC;SAC9C;KACF,CAAA;IACD,UAAU,CAAC,IAAI,CAAC,IAAA,UAAG,EAAC,uBAAuB,EAAE,OAAO,CAAC,CAAC,CAAA;IAEtD,gFAAgF;IAChF,yEAAyE;IACzE,uEAAuE;IACvE,mEAAmE;IACnE,0EAA0E;IAC1E,iEAAiE;IACjE,sCAAsC;IACtC,MAAM,OAAO,GAAuC;QAClD,UAAU,EAAE,EAAE,MAAM,EAAE,iBAAiB,EAAE,GAAG,EAAE,UAAU,EAAE;QAC1D,wBAAwB,EAAE,EAAE,MAAM,EAAE,cAAc,EAAE,GAAG,EAAE,eAAe,EAAE;QAC1E,GAAG,CAAC,aAAa;YACf,CAAC,CAAC;gBACE,iBAAiB,EAAE,EAAE,MAAM,EAAE,aAAa,CAAC,iBAAiB,EAAE,GAAG,EAAE,WAAW,EAAE;gBAChF,qBAAqB,EAAE,EAAE,MAAM,EAAE,aAAa,CAAC,iBAAiB,EAAE,GAAG,EAAE,WAAW,EAAE;aACrF;YACH,CAAC,CAAC,EAAE,CAAC;KACR,CAAA;IAED,MAAM,GAAG,GAA2B;QAClC,aAAa,EAAE,MAAM;QACrB,aAAa,EAAE,MAAM;QACrB,WAAW,EAAE,IAAI;QACjB,aAAa,EAAE,IAAI;QACnB,iBAAiB,EAAE,eAAe;QAClC,oBAAoB,EAAE,OAAO;QAC7B,yBAAyB,EAAE,IAAI;QAC/B,aAAa,EAAE,IAAI;QACnB,iBAAiB,EAAE,OAAO;QAC1B,eAAe,EAAE,WAAW,IAAI,EAAE;QAClC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,GAAG,IAAI,QAAQ,EAAE,eAAe,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC1E,GAAG,CAAC,aAAa;YACf,CAAC,CAAC;gBACE,mBAAmB,EAAE,aAAa,CAAC,QAAQ;gBAC3C,qBAAqB,EAAE,aAAa,CAAC,MAAM;gBAC3C,qBAAqB,EAAE,aAAa,CAAC,MAAM,IAAI,WAAW;gBAC1D,kBAAkB,EAAE,CAAC,aAAa,CAAC,GAAG,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO;gBAClE,GAAG,CAAC,aAAa,CAAC,IAAI,KAAK,SAAS,IAAI;oBACtC,mBAAmB,EAAE,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC;iBAChD,CAAC;gBACF,4BAA4B,EAAE,MAAM;gBACpC,yBAAyB,EAAE,MAAM;gBACjC,kBAAkB,EAAE,sBAAsB;gBAC1C,qBAAqB,EAAE,0BAA0B;aAClD;YACH,CAAC,CAAC,EAAE,CAAC;KACR,CAAA;IAED,MAAM,OAAO,GAAa,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,EAAE,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC;QACzE,IAAI,EAAE,OAAO;QACb,SAAS,EAAE;YACT,YAAY,EACV,OAAO,GAAG,KAAK,QAAQ;gBACrB,CAAC,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,EAAE,OAAO,EAAE;gBAC7B,CAAC,CAAC,EAAE,IAAI,EAAE,GAAG,CAAC,MAAM,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,IAAI,OAAO,EAAE;SACpD;KACF,CAAC,CAAC,CAAA;IACH,OAAO,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,CAAA;IAE1F,kFAAkF;IAClF,wEAAwE;IACxE,0EAA0E;IAC1E,0EAA0E;IAC1E,mEAAmE;IACnE,MAAM,GAAG,GAAe;QACtB,UAAU,EAAE,SAAS;QACrB,IAAI,EAAE,YAAY;QAClB,QAAQ,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;QACpD,IAAI,EAAE;YACJ,QAAQ;YACR,QAAQ,EAAE,EAAE,WAAW,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;YACxC,QAAQ,EAAE;gBACR,QAAQ,EAAE,EAAE,MAAM,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;gBACnC,IAAI,EAAE;oBACJ,UAAU,EAAE;wBACV;4BACE,IAAI,EAAE,KAAK;4BACX,KAAK;4BACL,eAAe,EAAE,QAAQ;4BACzB,KAAK,EAAE,CAAC,EAAE,aAAa,EAAE,EAAE,EAAE,CAAC;4BAC9B,GAAG,EAAE,OAAO;4BACZ,SAAS;4BACT,aAAa,EAAE;gCACb,OAAO,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,EAAE,EAAE;gCACxC,mBAAmB,EAAE,EAAE;gCACvB,aAAa,EAAE,EAAE;6BAClB;4BACD,cAAc,EAAE;gCACd,OAAO,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,EAAE,EAAE;gCACxC,mBAAmB,EAAE,EAAE;gCACvB,aAAa,EAAE,EAAE;gCACjB,gBAAgB,EAAE,CAAC;6BACpB;4BACD,YAAY,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,CAAC;yBACxD;qBACF;oBACD,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,qBAAqB,EAAE,EAAE,SAAS,EAAE,SAAS,EAAE,EAAE,CAAC;iBAC7E;aACF;SACF;KACF,CAAA;IAED,MAAM,UAAU,GAAY;QAC1B,UAAU,EAAE,IAAI;QAChB,IAAI,EAAE,SAAS;QACf,QAAQ,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE;QAC7B,IAAI,EAAE;YACJ,IAAI,EAAE,WAAW;YACjB,QAAQ,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE;YACvB,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC;SACtC;KACF,CAAA;IAED,UAAU,CAAC,IAAI,CACb,IAAA,UAAG,EAAC,kBAAQ,EAAE;QACZ,MAAM,EAAE,KAAK;QACb,IAAI;QACJ,SAAS;QACT,OAAO,EAAE,MAAM;QACf,QAAQ,EAAE,IAAA,UAAG,EAAC,eAAQ,EAAE;YACtB,QAAQ,EAAE,CAAC,IAAA,UAAG,EAAC,YAAY,EAAE,GAAG,CAAC,EAAE,IAAA,UAAG,EAAC,SAAS,EAAE,UAAU,CAAC,CAAC;SAC/D,CAAC;KACH,CAAC,CACH,CAAA;IAED,mFAAmF;IACnF,2EAA2E;IAC3E,0EAA0E;IAC1E,0EAA0E;IAC1E,8DAA8D;IAC9D,UAAU,CAAC,IAAI,CACb,IAAA,UAAG,EAAC,SAAS,EAAE;QACb,UAAU,EAAE,UAAU;QACtB,IAAI,EAAE,SAAS;QACf,QAAQ,EAAE,EAAE,IAAI,EAAE,GAAG,IAAI,OAAO,EAAE,SAAS,EAAE;QAC7C,IAAI,EAAE;YACJ,QAAQ,EAAE,YAAY;YACtB,iBAAiB,EAAE,QAAQ;YAC3B,0BAA0B,EAAE,CAAC;YAC7B,sBAAsB,EAAE,CAAC;YACzB,WAAW,EAAE;gBACX,IAAI,EAAE;oBACJ,YAAY,EAAE,CAAC;oBACf,QAAQ,EAAE;wBACR,QAAQ,EAAE,EAAE,MAAM,EAAE,EAAE,GAAG,EAAE,GAAG,IAAI,OAAO,EAAE,EAAE;wBAC7C,IAAI,EAAE;4BACJ,aAAa,EAAE,WAAW;4BAC1B,UAAU,EAAE;gCACV;oCACE,IAAI,EAAE,gBAAgB;oCACtB,KAAK;oCACL,OAAO,EAAE,CAAC,KAAK,EAAE,IAAI,EAAE,wBAAwB,CAAC;oCAChD,GAAG,EAAE;wCACH,EAAE,IAAI,EAAE,eAAe,EAAE,KAAK,EAAE,MAAM,EAAE;wCACxC,EAAE,IAAI,EAAE,eAAe,EAAE,KAAK,EAAE,MAAM,EAAE;wCACxC,EAAE,IAAI,EAAE,aAAa,EAAE,KAAK,EAAE,IAAI,EAAE;wCACpC,EAAE,IAAI,EAAE,eAAe,EAAE,KAAK,EAAE,IAAI,EAAE;wCACtC;4CACE,IAAI,EAAE,YAAY;4CAClB,SAAS,EAAE;gDACT,YAAY,EAAE,EAAE,IAAI,EAAE,iBAAiB,EAAE,GAAG,EAAE,UAAU,EAAE;6CAC3D;yCACF;wCACD,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,GAAG,IAAI,QAAQ,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;qCACnE;oCACD,SAAS,EAAE;wCACT,QAAQ,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE;wCAC1C,MAAM,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE;qCACzC;oCACD,YAAY,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,CAAC;iCACxD;6BACF;4BACD,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,qBAAqB,EAAE,EAAE,SAAS,EAAE,SAAS,EAAE,EAAE,CAAC;yBAC7E;qBACF;iBACF;aACF;SACF;KACF,CAAC,CACH,CAAA;IAED,mFAAmF;IACnF,UAAU,CAAC,IAAI,CACb,uBAAC,kBAAQ,IACP,IAAI,EAAE,GAAG,IAAI,WAAW,EACxB,SAAS,EAAE,SAAS,EACpB,IAAI,EAAE,IAAI,EACV,WAAW,EAAE,IAAI,EACjB,WAAW,EAAE,EAAE,EACf,GAAG,EAAE,GAAG,GACR,CACH,CAAA;IAED,OAAO,IAAA,UAAG,EAAC,eAAQ,EAAE,EAAE,QAAQ,EAAE,UAAU,EAAE,CAAC,CAAA;AAChD,CAAC"}

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@r8s/nextcloud",
-  "version": "0.2.0",
-  "description": "Nextcloud file cloud — Postgres file index, Redis cache, S3-compatible primary storage, cron background jobs",
+  "version": "0.3.0",
+  "description": "Nextcloud file cloud \u2014 Postgres file index, Redis cache, S3-compatible primary storage, cron background jobs",
   "license": "MIT",
   "author": "Berget AI AB",
   "homepage": "https://r8s.berget.ai",
@@ -29,13 +29,20 @@
   },
   "category": "Collaboration & Productivity",
   "dependencies": {
-    "@r8s/core": "^0.2.0",
-    "@r8s/crds": "^0.2.0",
-    "@r8s/k8s-types": "^0.2.0",
-    "@r8s/recipes": "^0.2.0"
+    "@r8s/core": "^0.3.0",
+    "@r8s/crds": "^0.3.0",
+    "@r8s/k8s-types": "^0.3.0",
+    "@r8s/recipes": "^0.3.0"
   },
   "devDependencies": {
     "typescript": "^5.3.0",
-    "vitest": "^1.0.0"
+    "vitest": "^1.0.0",
+    "@r8s/operator-redis": "^0.22.0"
+  },
+  "files": [
+    "dist"
+  ],
+  "peerDependencies": {
+    "@r8s/operator-redis": "^0.22.0"
   }
 }