@styleflow.app/flowpress-deploy 1.0.0-beta.3 → 1.0.0-beta.31

package/dist/ops/cms-template/transport.mjs

@@ -0,0 +1,115 @@
+import { localComposeArgs } from "../local.js";
+import { randomUUID } from "node:crypto";
+import { spawnSync } from "node:child_process";
+import { mkdirSync, rmSync, writeFileSync } from "node:fs";
+import { join } from "node:path";
+const RESPONSE_MARKER = "@@cms-template@@";
+const ROUTE = "wp-json/flowpress/v1/site-editor-sync";
+/**
+ * Local backend: the command runs inside the Docker CMS through `wp eval`. The
+ * request goes through the bind-mounted .local/ folder instead of argv, which
+ * would hit ARG_MAX with large templates.
+ */
+export function dockerTransport({ root, run = spawnSync }) {
+    return {
+        kind: "docker",
+        async call(operation, args = {}) {
+            const directory = join(root, ".local", "cms-template");
+            const name = `request-${randomUUID()}.json`;
+            mkdirSync(directory, { recursive: true, mode: 0o700 });
+            writeFileSync(join(directory, name), JSON.stringify({ operation, args }), { mode: 0o600, flag: "wx" });
+            try {
+                const result = run("docker", [
+                    ...localComposeArgs(root),
+                    "exec", "-T", "cms",
+                    "/workspace/apps/cms/vendor/bin/wp",
+                    "--allow-root",
+                    "--path=/workspace/apps/cms/web/wp",
+                    "eval", dockerProgram(`/workspace/.local/cms-template/${name}`),
+                ], { cwd: root, encoding: "utf8", maxBuffer: 256 * 1024 * 1024 });
+                return parseDockerResponse(result);
+            }
+            finally {
+                rmSync(join(directory, name), { force: true });
+            }
+        },
+    };
+}
+export function dockerProgram(path) {
+    return String.raw `
+$request = json_decode((string) file_get_contents(${JSON.stringify(path)}), true, 512, JSON_THROW_ON_ERROR);
+try {
+    if (! function_exists('flowpress_site_editor_sync_dispatch')) {
+        throw new RuntimeException('The CMS does not load the official FlowPress Site Editor sync module.');
+    }
+    $admins = get_users(['role' => 'administrator', 'number' => 1, 'orderby' => 'ID', 'order' => 'ASC', 'fields' => 'ID']);
+    if (! $admins) throw new RuntimeException('The local CMS has no administrator.');
+    // Saves run as an administrator, like an editor session (trusted code, kses).
+    wp_set_current_user((int) $admins[0]);
+    $response = ['ok' => true, 'result' => flowpress_site_editor_sync_dispatch((string) $request['operation'], (array) $request['args'])];
+} catch (Throwable $error) {
+    $response = ['ok' => false, 'error' => $error->getMessage()];
+}
+echo "\n${RESPONSE_MARKER}\n", wp_json_encode($response);
+`;
+}
+export function parseDockerResponse(result) {
+    if (result.error || result.status !== 0)
+        throw new Error(`The local CMS command failed (exit ${result.status ?? "unknown"}). ${String(result.stderr ?? "").trim()}`);
+    const output = String(result.stdout ?? "");
+    const index = output.lastIndexOf(RESPONSE_MARKER);
+    if (index < 0) {
+        throw new Error(`The local CMS did not answer (exit ${result.status}). Is the Docker stack running (pnpm dev)?\n${String(result.stderr || output).trim()}`);
+    }
+    const response = JSON.parse(output.slice(index + RESPONSE_MARKER.length));
+    if (!response.ok)
+        throw new Error(response.error);
+    return response.result;
+}
+/** Remote backends: official Site Editor sync REST routes, Application Password (Basic) auth. */
+export function restTransport({ backendUrl, auth, targetName, fetchImpl = fetch }) {
+    if (!/^[^:]+:.+$/.test(auth)) {
+        throw new Error(`CMS_SYNC_AUTH is missing in .env.${targetName}: set it to "<user>:<application password>" ` +
+            "for a user with the edit_theme_options capability (Users → Profile → Application Passwords).");
+    }
+    return {
+        kind: "rest",
+        async call(operation, args = {}) {
+            const read = operation === "status";
+            const response = await fetchImpl(`${backendUrl}/${ROUTE}/${operation}`, {
+                method: read ? "GET" : "POST",
+                headers: {
+                    accept: "application/json",
+                    authorization: `Basic ${Buffer.from(auth).toString("base64")}`,
+                    ...(read ? {} : { "content-type": "application/json" }),
+                },
+                body: read ? undefined : JSON.stringify(args),
+            });
+            const text = await response.text();
+            let body = null;
+            try {
+                body = JSON.parse(text);
+            }
+            catch {
+                // Reported below with the HTTP status.
+            }
+            if (response.status === 404 && body?.code === "rest_no_route") {
+                throw new Error(`${backendUrl} does not expose the Site Editor sync routes: deploy the backend first (pnpm backend:deploy).`);
+            }
+            if (["rest_forbidden", "rest_not_logged_in"].includes(body?.code)) {
+                // This stack answers a wrong password as anonymous too, not only a dropped header.
+                throw new Error(`${backendUrl} treated the request as anonymous (${body.code}): check CMS_SYNC_AUTH in .env.${targetName} ` +
+                    "and that the user has edit_theme_options; if both are right, the host strips the Authorization header " +
+                    "(see apps/cms/web/.htaccess).");
+            }
+            if (response.status === 401 || response.status === 403) {
+                throw new Error(`${backendUrl} refused the credentials (${body?.code ?? response.status}): check CMS_SYNC_AUTH in .env.${targetName}.`);
+            }
+            if (!response.ok || body === null) {
+                throw new Error(body?.message ?? `${backendUrl} answered HTTP ${response.status}.`);
+            }
+            return body;
+        },
+    };
+}
+//# sourceMappingURL=transport.mjs.map

package/dist/ops/cms-template/transport.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"transport.mjs","sourceRoot":"","sources":["../../../src/ops/cms-template/transport.mjs"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAC/C,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAC/C,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAC3D,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,MAAM,eAAe,GAAG,kBAAkB,CAAC;AAC3C,MAAM,KAAK,GAAG,uCAAuC,CAAC;AAEtD;;;;GAIG;AACH,MAAM,UAAU,eAAe,CAAC,EAAE,IAAI,EAAE,GAAG,GAAG,SAAS,EAAE;IACvD,OAAO;QACL,IAAI,EAAE,QAAQ;QACd,KAAK,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,GAAG,EAAE;YAC7B,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,cAAc,CAAC,CAAC;YACvD,MAAM,IAAI,GAAG,WAAW,UAAU,EAAE,OAAO,CAAC;YAC5C,SAAS,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;YACvD,aAAa,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;YACvG,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,GAAG,CAAC,QAAQ,EAAE;oBAC3B,GAAG,gBAAgB,CAAC,IAAI,CAAC;oBACzB,MAAM,EAAE,IAAI,EAAE,KAAK;oBACnB,mCAAmC;oBACnC,cAAc;oBACd,mCAAmC;oBACnC,MAAM,EAAE,aAAa,CAAC,kCAAkC,IAAI,EAAE,CAAC;iBAChE,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,GAAG,GAAG,IAAI,GAAG,IAAI,EAAE,CAAC,CAAC;gBAClE,OAAO,mBAAmB,CAAC,MAAM,CAAC,CAAC;YACrC,CAAC;oBAAS,CAAC;gBACT,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YACjD,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,IAAI;IAChC,OAAO,MAAM,CAAC,GAAG,CAAA;oDACiC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;;;;;;;;;;;;;UAa9D,eAAe;CACxB,CAAC;AACF,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,MAAM;IACxC,IAAI,MAAM,CAAC,KAAK,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,sCAAsC,MAAM,CAAC,MAAM,IAAI,SAAS,MAAM,MAAM,CAAC,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;IACrK,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC;IAC3C,MAAM,KAAK,GAAG,MAAM,CAAC,WAAW,CAAC,eAAe,CAAC,CAAC;IAClD,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;QACd,MAAM,IAAI,KAAK,CACb,sCAAsC,MAAM,CAAC,MAAM,+CAA+C,MAAM,CAAC,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAC3I,CAAC;IACJ,CAAC;IACD,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC,CAAC;IAC1E,IAAI,CAAC,QAAQ,CAAC,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAClD,OAAO,QAAQ,CAAC,MAAM,CAAC;AACzB,CAAC;AAED,iGAAiG;AACjG,MAAM,UAAU,aAAa,CAAC,EAAE,UAAU,EAAE,IAAI,EAAE,UAAU,EAAE,SAAS,GAAG,KAAK,EAAE;IAC/E,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QAC7B,MAAM,IAAI,KAAK,CACb,oCAAoC,UAAU,8CAA8C;YAC1F,8FAA8F,CACjG,CAAC;IACJ,CAAC;IACD,OAAO;QACL,IAAI,EAAE,MAAM;QACZ,KAAK,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,GAAG,EAAE;YAC7B,MAAM,IAAI,GAAG,SAAS,KAAK,QAAQ,CAAC;YACpC,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,GAAG,UAAU,IAAI,KAAK,IAAI,SAAS,EAAE,EAAE;gBACtE,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM;gBAC7B,OAAO,EAAE;oBACP,MAAM,EAAE,kBAAkB;oBAC1B,aAAa,EAAE,SAAS,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE;oBAC9D,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC;iBACxD;gBACD,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;aAC9C,CAAC,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;YACnC,IAAI,IAAI,GAAG,IAAI,CAAC;YAChB,IAAI,CAAC;gBACH,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAC1B,CAAC;YAAC,MAAM,CAAC;gBACP,uCAAuC;YACzC,CAAC;YACD,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,IAAI,IAAI,EAAE,IAAI,KAAK,eAAe,EAAE,CAAC;gBAC9D,MAAM,IAAI,KAAK,CACb,GAAG,UAAU,+FAA+F,CAC7G,CAAC;YACJ,CAAC;YACD,IAAI,CAAC,gBAAgB,EAAE,oBAAoB,CAAC,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,CAAC;gBAClE,mFAAmF;gBACnF,MAAM,IAAI,KAAK,CACb,GAAG,UAAU,sCAAsC,IAAI,CAAC,IAAI,kCAAkC,UAAU,GAAG;oBACzG,wGAAwG;oBACxG,+BAA+B,CAClC,CAAC;YACJ,CAAC;YACD,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;gBACvD,MAAM,IAAI,KAAK,CACb,GAAG,UAAU,6BAA6B,IAAI,EAAE,IAAI,IAAI,QAAQ,CAAC,MAAM,kCAAkC,UAAU,GAAG,CACvH,CAAC;YACJ,CAAC;YACD,IAAI,CAAC,QAAQ,CAAC,EAAE,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;gBAClC,MAAM,IAAI,KAAK,CAAC,IAAI,EAAE,OAAO,IAAI,GAAG,UAAU,kBAAkB,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC;YACtF,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/ops/config.d.ts

@@ -0,0 +1,54 @@
+export function projectRoot(start?: string): string;
+export function readJson(file: any, fallback?: undefined): any;
+export function writeJson(file: any, value: any, mode?: number): void;
+export function readEnv(file: any): import("dotenv").DotenvParseOutput;
+export function origin(value: any, label: any): string;
+export function assertManifest(value: any): any;
+export function readManifest(root?: string): any;
+export function targetConfig(manifest: any, name: any): any;
+export function allowedComponents(manifest: any, name: any, requested?: any[]): any;
+export function identity(root?: string): {
+    slug: string;
+    displayName: any;
+    repository: any;
+};
+export function statePath(root: any, name: any): string;
+export function loadState(root: any, name: any): any;
+export function saveState(root: any, name: any, state: any): void;
+export function platformConfig(root: any, manifest: any, file: any): any;
+export function publicPlatform(id: any, platform: any): {
+    id: any;
+    coolifyUrl: any;
+    serverUuid: any;
+    ssh: any;
+    network: any;
+    subnet: any;
+    registry: any;
+    registryProject: any;
+    backupStorageUuid: any;
+    poolUuid: any;
+    destinationUuid: any;
+    phpImage: any;
+};
+export function databaseIdentity(slug: any, name: any): {
+    DB_NAME: string;
+    DB_USER: string;
+};
+export function ensureSecrets(root: any, name: any, slug: any): {
+    DB_NAME: string;
+    DB_USER: string;
+};
+export function operatorEnvironment(root: any): {
+    [x: string]: string | undefined;
+};
+export function imageRepository(platform: any, slug: any, component: any): string;
+export function releaseTag(component: any, name: any, sha: any, buildId: any): string;
+export const profiles: Readonly<{
+    backend: string[];
+    static: string[];
+    "headless-static": string[];
+    "headless-ssr": string[];
+}>;
+export const environments: string[];
+export const saltKeys: string[];
+//# sourceMappingURL=config.d.ts.map

package/dist/ops/config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../src/ops/config.js"],"names":[],"mappings":"AAcA,oDAQC;AACD,+DAGC;AACD,sEAKC;AACD,uEAEC;AACD,uDAOC;AACD,gDAmCC;AACD,iDAEC;AACD,4DAGC;AACD,oFAMC;AACD;;;;EAMC;AACD,wDAA+F;AAC/F,qDAAqF;AACrF,kEAWC;AACD,yEAwBC;AACD;;;;;;;;;;;;;EAGC;AACD;;;EAGC;AAED;;;EASC;AACD;;EAEC;AACD,kFAGC;AACD,sFAKC;AApKD;;;;;GAKG;AACH,oCAA0E;AAuI1E,gCAAuJ"}

package/dist/ops/config.js

@@ -0,0 +1,221 @@
+import { createHash, randomBytes } from "node:crypto";
+import { existsSync, readFileSync, mkdirSync, writeFileSync, renameSync } from "node:fs";
+import { dirname, join, resolve } from "node:path";
+import { parse as parseYaml } from "yaml";
+import { parse as parseEnv } from "dotenv";
+import { mediaConfiguration, validateMediaValue } from "./media-config.js";
+export const profiles = Object.freeze({
+    backend: ["cms"],
+    static: ["web-static"],
+    "headless-static": ["cms", "web-static"],
+    "headless-ssr": ["cms", "web-ssr"],
+});
+export const environments = ["local", "staging", "production", "preview"];
+export function projectRoot(start = process.env.FLOWPRESS_PROJECT_ROOT || process.cwd()) {
+    let root = resolve(start);
+    while (!existsSync(join(root, "flowpress.deploy.yaml")) && !existsSync(join(root, "pnpm-workspace.yaml"))) {
+        const parent = dirname(root);
+        if (parent === root)
+            throw new Error("Run this command inside a FlowPress project.");
+        root = parent;
+    }
+    return root;
+}
+export function readJson(file, fallback = undefined) {
+    if (!existsSync(file))
+        return fallback;
+    return JSON.parse(readFileSync(file, "utf8"));
+}
+export function writeJson(file, value, mode = 0o644) {
+    mkdirSync(dirname(file), { recursive: true, mode: 0o700 });
+    const temporary = file + ".tmp-" + process.pid;
+    writeFileSync(temporary, JSON.stringify(value, null, 2) + "\n", { mode });
+    renameSync(temporary, file);
+}
+export function readEnv(file) {
+    return existsSync(file) ? parseEnv(readFileSync(file)) : {};
+}
+export function origin(value, label) {
+    let url;
+    try {
+        url = new URL(value);
+    }
+    catch {
+        throw new Error(label + " must be an absolute HTTP(S) URL.");
+    }
+    if (!["https:", "http:"].includes(url.protocol) || url.username || url.password || url.search || url.hash || url.pathname !== "/") {
+        throw new Error(label + " must be an origin without credentials, path, query or fragment.");
+    }
+    return url.origin;
+}
+export function assertManifest(value) {
+    if (!value || ![1, 2].includes(value.schemaVersion) || !profiles[value.profile])
+        throw new Error("Expected deployment schemaVersion 1|2 and a supported profile.");
+    if (typeof value.platform !== "string" || !/^[a-z0-9][a-z0-9-]*$/.test(value.platform))
+        throw new Error("Invalid platform identifier.");
+    if (value.database !== "shared")
+        throw new Error("Use database: shared.");
+    if (value.schemaVersion === 2)
+        validateMediaValue(value.media);
+    else if (!["local", "s3"].includes(value.media))
+        throw new Error("Schema 1 media must be local|s3.");
+    if (!value.environments || typeof value.environments !== "object")
+        throw new Error("Missing environments.");
+    if (value.development?.ports)
+        for (const [key, port] of Object.entries(value.development.ports)) {
+            if (!["web", "cms", "https", "database"].includes(key) || !Number.isInteger(port) || port < 1 || port > 65535)
+                throw new Error("Invalid development port: " + key);
+        }
+    for (const [name, target] of Object.entries(value.environments)) {
+        if (value.schemaVersion === 1 && target.media !== undefined)
+            throw new Error("Environment media overrides require schemaVersion 2.");
+        mediaConfiguration(value, name);
+        if (!environments.includes(name))
+            throw new Error("Unsupported environment: " + name);
+        const components = name === "preview" ? ["web-ssr"] : profiles[target.profile || value.profile];
+        if (!components)
+            throw new Error("Unsupported profile for " + name);
+        if (!Array.isArray(target.publish) || target.publish.some(component => !components.includes(component)) || new Set(target.publish).size !== target.publish.length) {
+            throw new Error("Explicit publish list required for " + name + "; select components from " + components.join(", "));
+        }
+        for (const key of ["backendUrl", "frontendUrl"])
+            if (target[key])
+                origin(target[key], name + "." + key);
+        if (target.mediaUrl) {
+            let mediaUrl;
+            try {
+                mediaUrl = new URL(target.mediaUrl);
+            }
+            catch {
+                throw new Error("Invalid mediaUrl for " + name);
+            }
+            if (!["http:", "https:"].includes(mediaUrl.protocol) || mediaUrl.username || mediaUrl.password || mediaUrl.search || mediaUrl.hash)
+                throw new Error("Invalid mediaUrl for " + name);
+        }
+        for (const key of ["aliases", "backendAliases"])
+            if (target[key] !== undefined) {
+                if (!Array.isArray(target[key]))
+                    throw new Error(name + "." + key + " must be a list of origins.");
+                for (const value of target[key])
+                    origin(value, name + "." + key);
+            }
+        if (target.publish.includes("cms") && !target.backendUrl)
+            throw new Error(name + " CMS requires backendUrl.");
+        if (target.publish.some(component => component !== "cms") && !target.frontendUrl)
+            throw new Error(name + " frontend requires frontendUrl.");
+        if (name === "preview" && (target.mode !== "on-demand" || !["staging", "production"].includes(target.backend)))
+            throw new Error("Preview requires mode: on-demand and backend: staging|production.");
+        if (target.backend && !value.environments[target.backend])
+            throw new Error("Unknown backend reference: " + target.backend);
+    }
+    return value;
+}
+export function readManifest(root = projectRoot()) {
+    return assertManifest(parseYaml(readFileSync(join(root, "flowpress.deploy.yaml"), "utf8"), { uniqueKeys: true, maxAliasCount: 0 }));
+}
+export function targetConfig(manifest, name) {
+    if (!environments.includes(name) || !manifest.environments[name])
+        throw new Error("Environment not configured: " + name);
+    return manifest.environments[name];
+}
+export function allowedComponents(manifest, name, requested = []) {
+    const target = targetConfig(manifest, name);
+    const selected = requested.length ? requested : target.publish;
+    if (!selected.length)
+        throw new Error("Publication is disabled for " + name + ".");
+    for (const component of selected)
+        if (!target.publish.includes(component))
+            throw new Error("Publication of " + component + " is disabled for " + name + ".");
+    return selected;
+}
+export function identity(root = projectRoot()) {
+    const config = readJson(join(root, "flowpress.config.json"));
+    const pkg = readJson(join(root, "package.json"), {});
+    const slug = config?.project?.slug || pkg.name;
+    if (typeof slug !== "string" || !/^[a-z0-9][a-z0-9.-]*$/.test(slug))
+        throw new Error("A safe project slug is required.");
+    return { slug, displayName: config?.project?.displayName || slug, repository: config?.repository?.slug };
+}
+export function statePath(root, name) { return join(root, "deploy", "state", name + ".json"); }
+export function loadState(root, name) { return readJson(statePath(root, name), {}); }
+export function saveState(root, name, state) {
+    const binding = structuredClone(state), runtime = { apps: {} };
+    for (const [component, app] of Object.entries(binding.apps || {})) {
+        for (const key of ["current", "previous", "deployedAt"])
+            if (app[key] !== undefined) {
+                runtime.apps[component] ||= {};
+                runtime.apps[component][key] = app[key];
+                delete app[key];
+            }
+    }
+    writeJson(statePath(root, name), binding);
+    if (Object.keys(runtime.apps).length)
+        writeJson(join(root, ".local/flowpress", "runtime-" + name + ".json"), runtime, 0o600);
+}
+export function platformConfig(root, manifest, file) {
+    if (file || process.env.FLOWPRESS_PLATFORMS_FILE) {
+        const catalogFile = file || process.env.FLOWPRESS_PLATFORMS_FILE;
+        const catalog = parseYaml(readFileSync(catalogFile, "utf8"));
+        const platform = catalog.platforms?.[manifest.platform];
+        if (!platform)
+            throw new Error("Platform not found: " + manifest.platform);
+        if (platform.server) {
+            const server = parseYaml(readFileSync(join(dirname(catalogFile), "servers.yaml"), "utf8")).servers?.[platform.server];
+            if (!server?.ssh?.alias || !server.ssh.user || !server.coolify_server_uuid)
+                throw new Error("Incomplete server inventory binding: " + platform.server);
+            platform.serverUuid = server.coolify_server_uuid;
+            platform.ssh = server.ssh.user + "@" + server.ssh.alias;
+        }
+        if (platform.panel) {
+            const panel = parseYaml(readFileSync(join(dirname(catalogFile), "panels.yaml"), "utf8")).panels?.[platform.panel];
+            if (!panel?.panel_url_tailnet)
+                throw new Error("Missing private panel URL in inventory.");
+            platform.coolifyUrl = panel.panel_url_tailnet;
+        }
+        return { ...platform, registryProject: manifest.registryProject || identity(root).slug };
+    }
+    for (const name of Object.keys(manifest.environments)) {
+        const state = loadState(root, name);
+        if (state.platform?.id === manifest.platform)
+            return { ...state.platform, registryProject: manifest.registryProject || identity(root).slug };
+    }
+    throw new Error("Set FLOWPRESS_PLATFORMS_FILE for initial provisioning.");
+}
+export function publicPlatform(id, platform) {
+    const { coolifyUrl, serverUuid, ssh, network, subnet, registry, registryProject, backupStorageUuid, poolUuid, destinationUuid, phpImage } = platform;
+    return { id, coolifyUrl, serverUuid, ssh, network, subnet, registry, registryProject, backupStorageUuid, poolUuid, destinationUuid, phpImage };
+}
+export function databaseIdentity(slug, name) {
+    const hash = createHash("sha256").update(slug + ":" + name).digest("hex").slice(0, 16);
+    return { DB_NAME: "fp" + hash, DB_USER: "fp" + hash };
+}
+export const saltKeys = ["AUTH_KEY", "SECURE_AUTH_KEY", "LOGGED_IN_KEY", "NONCE_KEY", "AUTH_SALT", "SECURE_AUTH_SALT", "LOGGED_IN_SALT", "NONCE_SALT"];
+export function ensureSecrets(root, name, slug) {
+    const file = join(root, ".secrets", name + ".env");
+    const current = readEnv(file);
+    const values = { ...databaseIdentity(slug, name), ...current };
+    for (const key of [...saltKeys, "DB_PASSWORD", "CMS_BUILD_CALLBACK_TOKEN"])
+        values[key] ||= randomBytes(32).toString("hex");
+    values.DB_PREFIX ||= "fp_";
+    mkdirSync(dirname(file), { recursive: true, mode: 0o700 });
+    writeFileSync(file, Object.entries(values).map(([key, value]) => key + "=" + JSON.stringify(value)).join("\n") + "\n", { mode: 0o600 });
+    return values;
+}
+export function operatorEnvironment(root) {
+    return { ...readEnv(join(root, ".secrets", "ops.env")), ...process.env };
+}
+export function imageRepository(platform, slug, component) {
+    if (!/^[a-z0-9][a-z0-9.-]*$/.test(slug) || !["cms", "web-static", "web-ssr"].includes(component))
+        throw new Error("Invalid image identity.");
+    return platform.registry + "/" + platform.registryProject + "/" + slug + "-" + component;
+}
+export function releaseTag(component, name, sha, buildId) {
+    if (!/^[a-f0-9]{40}$/.test(sha))
+        throw new Error("Expected a full commit SHA.");
+    if (component === "cms")
+        return "sha-" + sha;
+    if (!/^[a-zA-Z0-9][a-zA-Z0-9.-]{0,63}$/.test(buildId || ""))
+        throw new Error("A safe frontend build ID is required.");
+    return name + "-" + sha + "-" + buildId;
+}
+//# sourceMappingURL=config.js.map

package/dist/ops/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../../src/ops/config.js"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AACtD,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,SAAS,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACzF,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACnD,OAAO,EAAE,KAAK,IAAI,SAAS,EAAE,MAAM,MAAM,CAAC;AAC1C,OAAO,EAAE,KAAK,IAAI,QAAQ,EAAE,MAAM,QAAQ,CAAC;AAC3C,OAAO,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AAE3E,MAAM,CAAC,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC;IACpC,OAAO,EAAE,CAAC,KAAK,CAAC;IAChB,MAAM,EAAE,CAAC,YAAY,CAAC;IACtB,iBAAiB,EAAE,CAAC,KAAK,EAAE,YAAY,CAAC;IACxC,cAAc,EAAE,CAAC,KAAK,EAAE,SAAS,CAAC;CACnC,CAAC,CAAC;AACH,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,SAAS,CAAC,CAAC;AAC1E,MAAM,UAAU,WAAW,CAAC,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,sBAAsB,IAAI,OAAO,CAAC,GAAG,EAAE;IACrF,IAAI,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC;IAC1B,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,EAAE,uBAAuB,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,EAAE,qBAAqB,CAAC,CAAC,EAAE,CAAC;QAC1G,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;QAC7B,IAAI,MAAM,KAAK,IAAI;YAAE,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;QACrF,IAAI,GAAG,MAAM,CAAC;IAChB,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AACD,MAAM,UAAU,QAAQ,CAAC,IAAI,EAAE,QAAQ,GAAG,SAAS;IACjD,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,QAAQ,CAAC;IACvC,OAAO,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;AAChD,CAAC;AACD,MAAM,UAAU,SAAS,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,GAAG,KAAK;IACjD,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC3D,MAAM,SAAS,GAAG,IAAI,GAAG,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC;IAC/C,aAAa,CAAC,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;IAC1E,UAAU,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;AAC9B,CAAC;AACD,MAAM,UAAU,OAAO,CAAC,IAAI;IAC1B,OAAO,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;AAC9D,CAAC;AACD,MAAM,UAAU,MAAM,CAAC,KAAK,EAAE,KAAK;IACjC,IAAI,GAAG,CAAC;IACR,IAAI,CAAC;QAAC,GAAG,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,MAAM,IAAI,KAAK,CAAC,KAAK,GAAG,mCAAmC,CAAC,CAAC;IAAC,CAAC;IACrG,IAAI,CAAC,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,IAAI,IAAI,GAAG,CAAC,QAAQ,KAAK,GAAG,EAAE,CAAC;QAClI,MAAM,IAAI,KAAK,CAAC,KAAK,GAAG,kEAAkE,CAAC,CAAC;IAC9F,CAAC;IACD,OAAO,GAAG,CAAC,MAAM,CAAC;AACpB,CAAC;AACD,MAAM,UAAU,cAAc,CAAC,KAAK;IAClC,IAAI,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,aAAa,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,gEAAgE,CAAC,CAAC;IACnK,IAAI,OAAO,KAAK,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,sBAAsB,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;IACxI,IAAI,KAAK,CAAC,QAAQ,KAAK,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;IAC1E,IAAI,KAAK,CAAC,aAAa,KAAK,CAAC;QAAE,kBAAkB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;SAC1D,IAAI,CAAC,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;IACrG,IAAI,CAAC,KAAK,CAAC,YAAY,IAAI,OAAO,KAAK,CAAC,YAAY,KAAK,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;IAC5G,IAAI,KAAK,CAAC,WAAW,EAAE,KAAK;QAAE,KAAK,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC,KAAK,CAAC,EAAE,CAAC;YAChG,IAAI,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,UAAU,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,IAAI,GAAG,CAAC,IAAI,IAAI,GAAG,KAAK;gBAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,GAAG,GAAG,CAAC,CAAC;QACrK,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,YAAY,CAAC,EAAE,CAAC;QAChE,IAAI,KAAK,CAAC,aAAa,KAAK,CAAC,IAAI,MAAM,CAAC,KAAK,KAAK,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC;QACrI,kBAAkB,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QAChC,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,IAAI,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,2BAA2B,GAAG,IAAI,CAAC,CAAC;QACtF,MAAM,UAAU,GAAG,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC;QAChG,IAAI,CAAC,UAAU;YAAE,MAAM,IAAI,KAAK,CAAC,0BAA0B,GAAG,IAAI,CAAC,CAAC;QACpE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,UAAU,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,IAAI,IAAI,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;YAClK,MAAM,IAAI,KAAK,CAAC,qCAAqC,GAAG,IAAI,GAAG,2BAA2B,GAAG,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QACtH,CAAC;QACD,KAAK,MAAM,GAAG,IAAI,CAAC,YAAY,EAAE,aAAa,CAAC;YAAE,IAAI,MAAM,CAAC,GAAG,CAAC;gBAAE,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,IAAI,GAAG,GAAG,GAAG,GAAG,CAAC,CAAC;QACxG,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;YACpB,IAAI,QAAQ,CAAC;YACb,IAAI,CAAC;gBAAC,QAAQ,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC;gBAAC,MAAM,IAAI,KAAK,CAAC,uBAAuB,GAAG,IAAI,CAAC,CAAC;YAAC,CAAC;YACvG,IAAI,CAAC,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,QAAQ,CAAC,QAAQ,IAAI,QAAQ,CAAC,QAAQ,IAAI,QAAQ,CAAC,MAAM,IAAI,QAAQ,CAAC,IAAI;gBAAE,MAAM,IAAI,KAAK,CAAC,uBAAuB,GAAG,IAAI,CAAC,CAAC;QACtL,CAAC;QACD,KAAK,MAAM,GAAG,IAAI,CAAC,SAAS,EAAE,gBAAgB,CAAC;YAAE,IAAI,MAAM,CAAC,GAAG,CAAC,KAAK,SAAS,EAAE,CAAC;gBAC/E,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;oBAAE,MAAM,IAAI,KAAK,CAAC,IAAI,GAAG,GAAG,GAAG,GAAG,GAAG,6BAA6B,CAAC,CAAC;gBACnG,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,GAAG,CAAC;oBAAE,MAAM,CAAC,KAAK,EAAE,IAAI,GAAG,GAAG,GAAG,GAAG,CAAC,CAAC;YACnE,CAAC;QACD,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU;YAAE,MAAM,IAAI,KAAK,CAAC,IAAI,GAAG,2BAA2B,CAAC,CAAC;QAC9G,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,SAAS,KAAK,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW;YAAE,MAAM,IAAI,KAAK,CAAC,IAAI,GAAG,iCAAiC,CAAC,CAAC;QAC5I,IAAI,IAAI,KAAK,SAAS,IAAI,CAAC,MAAM,CAAC,IAAI,KAAK,WAAW,IAAI,CAAC,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,mEAAmE,CAAC,CAAC;QACrM,IAAI,MAAM,CAAC,OAAO,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,MAAM,CAAC,OAAO,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,6BAA6B,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC;IAC7H,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AACD,MAAM,UAAU,YAAY,CAAC,IAAI,GAAG,WAAW,EAAE;IAC/C,OAAO,cAAc,CAAC,SAAS,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE,uBAAuB,CAAC,EAAE,MAAM,CAAC,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;AACtI,CAAC;AACD,MAAM,UAAU,YAAY,CAAC,QAAQ,EAAE,IAAI;IACzC,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,IAAI,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,GAAG,IAAI,CAAC,CAAC;IACzH,OAAO,QAAQ,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;AACrC,CAAC;AACD,MAAM,UAAU,iBAAiB,CAAC,QAAQ,EAAE,IAAI,EAAE,SAAS,GAAG,EAAE;IAC9D,MAAM,MAAM,GAAG,YAAY,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;IAC5C,MAAM,QAAQ,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC;IAC/D,IAAI,CAAC,QAAQ,CAAC,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,GAAG,IAAI,GAAG,GAAG,CAAC,CAAC;IACnF,KAAK,MAAM,SAAS,IAAI,QAAQ;QAAE,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,iBAAiB,GAAG,SAAS,GAAG,mBAAmB,GAAG,IAAI,GAAG,GAAG,CAAC,CAAC;IAC7J,OAAO,QAAQ,CAAC;AAClB,CAAC;AACD,MAAM,UAAU,QAAQ,CAAC,IAAI,GAAG,WAAW,EAAE;IAC3C,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,uBAAuB,CAAC,CAAC,CAAC;IAC7D,MAAM,GAAG,GAAG,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,cAAc,CAAC,EAAE,EAAE,CAAC,CAAC;IACrD,MAAM,IAAI,GAAG,MAAM,EAAE,OAAO,EAAE,IAAI,IAAI,GAAG,CAAC,IAAI,CAAC;IAC/C,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;IACzH,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,EAAE,OAAO,EAAE,WAAW,IAAI,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC;AAC3G,CAAC;AACD,MAAM,UAAU,SAAS,CAAC,IAAI,EAAE,IAAI,IAAI,OAAO,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;AAC/F,MAAM,UAAU,SAAS,CAAC,IAAI,EAAE,IAAI,IAAI,OAAO,QAAQ,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;AACrF,MAAM,UAAU,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK;IACzC,MAAM,OAAO,GAAG,eAAe,CAAC,KAAK,CAAC,EAAE,OAAO,GAAG,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;IAC/D,KAAK,MAAM,CAAC,SAAS,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,IAAI,EAAE,CAAC,EAAE,CAAC;QAClE,KAAK,MAAM,GAAG,IAAI,CAAC,SAAS,EAAE,UAAU,EAAE,YAAY,CAAC;YAAE,IAAI,GAAG,CAAC,GAAG,CAAC,KAAK,SAAS,EAAE,CAAC;gBACpF,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC;gBAC/B,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC;gBACxC,OAAO,GAAG,CAAC,GAAG,CAAC,CAAC;YAClB,CAAC;IACH,CAAC;IACD,SAAS,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,OAAO,CAAC,CAAC;IAC1C,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM;QAAE,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,kBAAkB,EAAE,UAAU,GAAG,IAAI,GAAG,OAAO,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC;AAC/H,CAAC;AACD,MAAM,UAAU,cAAc,CAAC,IAAI,EAAE,QAAQ,EAAE,IAAI;IACjD,IAAI,IAAI,IAAI,OAAO,CAAC,GAAG,CAAC,wBAAwB,EAAE,CAAC;QACjD,MAAM,WAAW,GAAG,IAAI,IAAI,OAAO,CAAC,GAAG,CAAC,wBAAwB,CAAC;QACjE,MAAM,OAAO,GAAG,SAAS,CAAC,YAAY,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC,CAAC;QAC7D,MAAM,QAAQ,GAAG,OAAO,CAAC,SAAS,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QACxD,IAAI,CAAC,QAAQ;YAAE,MAAM,IAAI,KAAK,CAAC,sBAAsB,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC;QAC3E,IAAI,QAAQ,CAAC,MAAM,EAAE,CAAC;YACpB,MAAM,MAAM,GAAG,SAAS,CAAC,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,cAAc,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;YACtH,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,KAAK,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,mBAAmB;gBAAE,MAAM,IAAI,KAAK,CAAC,uCAAuC,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC;YACvJ,QAAQ,CAAC,UAAU,GAAG,MAAM,CAAC,mBAAmB,CAAC;YACjD,QAAQ,CAAC,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC,IAAI,GAAG,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC;QAC1D,CAAC;QACD,IAAI,QAAQ,CAAC,KAAK,EAAE,CAAC;YACnB,MAAM,KAAK,GAAG,SAAS,CAAC,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,aAAa,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;YAClH,IAAI,CAAC,KAAK,EAAE,iBAAiB;gBAAE,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;YAC1F,QAAQ,CAAC,UAAU,GAAG,KAAK,CAAC,iBAAiB,CAAC;QAChD,CAAC;QACD,OAAO,EAAE,GAAG,QAAQ,EAAE,eAAe,EAAE,QAAQ,CAAC,eAAe,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC;IAC3F,CAAC;IACD,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC;QACtD,MAAM,KAAK,GAAG,SAAS,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QACpC,IAAI,KAAK,CAAC,QAAQ,EAAE,EAAE,KAAK,QAAQ,CAAC,QAAQ;YAAE,OAAO,EAAE,GAAG,KAAK,CAAC,QAAQ,EAAE,eAAe,EAAE,QAAQ,CAAC,eAAe,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC;IAC/I,CAAC;IACD,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAC;AAC5E,CAAC;AACD,MAAM,UAAU,cAAc,CAAC,EAAE,EAAE,QAAQ;IACzC,MAAM,EAAE,UAAU,EAAE,UAAU,EAAE,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,eAAe,EAAE,iBAAiB,EAAE,QAAQ,EAAE,eAAe,EAAE,QAAQ,EAAE,GAAG,QAAQ,CAAC;IACrJ,OAAO,EAAE,EAAE,EAAE,UAAU,EAAE,UAAU,EAAE,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,eAAe,EAAE,iBAAiB,EAAE,QAAQ,EAAE,eAAe,EAAE,QAAQ,EAAE,CAAC;AACjJ,CAAC;AACD,MAAM,UAAU,gBAAgB,CAAC,IAAI,EAAE,IAAI;IACzC,MAAM,IAAI,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,GAAG,GAAG,GAAG,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IACvF,OAAO,EAAE,OAAO,EAAE,IAAI,GAAG,IAAI,EAAE,OAAO,EAAE,IAAI,GAAG,IAAI,EAAE,CAAC;AACxD,CAAC;AACD,MAAM,CAAC,MAAM,QAAQ,GAAG,CAAC,UAAU,EAAE,iBAAiB,EAAE,eAAe,EAAE,WAAW,EAAE,WAAW,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,YAAY,CAAC,CAAC;AACvJ,MAAM,UAAU,aAAa,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI;IAC5C,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,EAAE,UAAU,EAAE,IAAI,GAAG,MAAM,CAAC,CAAC;IACnD,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC9B,MAAM,MAAM,GAAG,EAAE,GAAG,gBAAgB,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,GAAG,OAAO,EAAE,CAAC;IAC/D,KAAK,MAAM,GAAG,IAAI,CAAC,GAAG,QAAQ,EAAE,aAAa,EAAE,0BAA0B,CAAC;QAAE,MAAM,CAAC,GAAG,CAAC,KAAK,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC5H,MAAM,CAAC,SAAS,KAAK,KAAK,CAAC;IAC3B,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC3D,aAAa,CAAC,IAAI,EAAE,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACxI,OAAO,MAAM,CAAC;AAChB,CAAC;AACD,MAAM,UAAU,mBAAmB,CAAC,IAAI;IACtC,OAAO,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,UAAU,EAAE,SAAS,CAAC,CAAC,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;AAC3E,CAAC;AACD,MAAM,UAAU,eAAe,CAAC,QAAQ,EAAE,IAAI,EAAE,SAAS;IACvD,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,YAAY,EAAE,SAAS,CAAC,CAAC,QAAQ,CAAC,SAAS,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;IAC7I,OAAO,QAAQ,CAAC,QAAQ,GAAG,GAAG,GAAG,QAAQ,CAAC,eAAe,GAAG,GAAG,GAAG,IAAI,GAAG,GAAG,GAAG,SAAS,CAAC;AAC3F,CAAC;AACD,MAAM,UAAU,UAAU,CAAC,SAAS,EAAE,IAAI,EAAE,GAAG,EAAE,OAAO;IACtD,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,GAAG,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;IAChF,IAAI,SAAS,KAAK,KAAK;QAAE,OAAO,MAAM,GAAG,GAAG,CAAC;IAC7C,IAAI,CAAC,kCAAkC,CAAC,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;IACtH,OAAO,IAAI,GAAG,GAAG,GAAG,GAAG,GAAG,GAAG,GAAG,OAAO,CAAC;AAC1C,CAAC"}

package/dist/ops/coolify.d.ts

@@ -0,0 +1,2 @@
+export function coolifyClient(baseUrl: any, token: any): (method: any, path: any, body: any) => Promise<any>;
+//# sourceMappingURL=coolify.d.ts.map

package/dist/ops/coolify.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"coolify.d.ts","sourceRoot":"","sources":["../../src/ops/coolify.js"],"names":[],"mappings":"AACA,0DAGgC,WAAM,EAAE,SAAI,EAAE,SAAI,kBA8BjD"}

package/dist/ops/coolify.js

@@ -0,0 +1,44 @@
+// Minimal Coolify v4 REST client (reachable only through the tailnet).
+export function coolifyClient(baseUrl, token) {
+    if (!token)
+        throw new Error("Missing Coolify API token (COOLIFY_TOKEN).");
+    const api = `${baseUrl.replace(/\/+$/, "")}/api/v1`;
+    return async function request(method, path, body) {
+        for (let attempt = 0;; attempt++) {
+            try {
+                const response = await fetch(`${api}${path}`, {
+                    method,
+                    signal: AbortSignal.timeout(30_000),
+                    headers: {
+                        accept: "application/json",
+                        authorization: `Bearer ${token}`,
+                        ...(body ? { "content-type": "application/json" } : {}),
+                    },
+                    ...(body ? { body: JSON.stringify(body) } : {}),
+                });
+                const text = await response.text();
+                let data;
+                try {
+                    data = text ? JSON.parse(text) : {};
+                }
+                catch {
+                    data = { message: text.slice(0, 300) };
+                }
+                if (!response.ok) {
+                    const details = data?.message ? String(data.message).replace(/Bearer\s+\S+/g, "[redacted]").slice(0, 160) : "Request refused";
+                    const error = new Error(`${method} ${path.split("?")[0]} -> HTTP ${response.status}: ${details}`);
+                    error.status = response.status;
+                    throw error;
+                }
+                return data;
+            }
+            catch (error) {
+                const transient = error.status === undefined || error.status >= 500 || error.status === 429;
+                if (method !== "GET" || !transient || attempt >= 2)
+                    throw error;
+                await new Promise((resolve) => setTimeout(resolve, 2000 * (attempt + 1)));
+            }
+        }
+    };
+}
+//# sourceMappingURL=coolify.js.map

package/dist/ops/coolify.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"coolify.js","sourceRoot":"","sources":["../../src/ops/coolify.js"],"names":[],"mappings":"AAAA,uEAAuE;AACvE,MAAM,UAAU,aAAa,CAAC,OAAO,EAAE,KAAK;IAC1C,IAAI,CAAC,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;IAC1E,MAAM,GAAG,GAAG,GAAG,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,SAAS,CAAC;IACpD,OAAO,KAAK,UAAU,OAAO,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI;QAC9C,KAAK,IAAI,OAAO,GAAG,CAAC,GAAI,OAAO,EAAE,EAAE,CAAC;YAClC,IAAI,CAAC;gBACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,GAAG,GAAG,IAAI,EAAE,EAAE;oBAC5C,MAAM;oBACN,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC;oBACnC,OAAO,EAAE;wBACP,MAAM,EAAE,kBAAkB;wBAC1B,aAAa,EAAE,UAAU,KAAK,EAAE;wBAChC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;qBACxD;oBACD,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBAChD,CAAC,CAAC;gBACH,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;gBACnC,IAAI,IAAI,CAAC;gBACT,IAAI,CAAC;oBAAC,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;gBAAC,CAAC;gBAAC,MAAM,CAAC;oBAAC,IAAI,GAAG,EAAE,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC;gBAAC,CAAC;gBAC9F,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;oBACjB,MAAM,OAAO,GAAG,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,eAAe,EAAE,YAAY,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,iBAAiB,CAAC;oBAC9H,MAAM,KAAK,GAAG,IAAI,KAAK,CAAC,GAAG,MAAM,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,YAAY,QAAQ,CAAC,MAAM,KAAK,OAAO,EAAE,CAAC,CAAC;oBAClG,KAAK,CAAC,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC;oBAC/B,MAAM,KAAK,CAAC;gBACd,CAAC;gBACD,OAAO,IAAI,CAAC;YACd,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,SAAS,GAAG,KAAK,CAAC,MAAM,KAAK,SAAS,IAAI,KAAK,CAAC,MAAM,IAAI,GAAG,IAAI,KAAK,CAAC,MAAM,KAAK,GAAG,CAAC;gBAC5F,IAAI,MAAM,KAAK,KAAK,IAAI,CAAC,SAAS,IAAI,OAAO,IAAI,CAAC;oBAAE,MAAM,KAAK,CAAC;gBAChE,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,IAAI,GAAG,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;YAC5E,CAAC;QACH,CAAC;IACH,CAAC,CAAC;AACJ,CAAC"}

package/dist/ops/data.d.ts

@@ -0,0 +1,31 @@
+export function safeArchiveEntries(entries: any): void;
+export function pullSource(root: any, manifest: any, sourceName: any): Promise<{
+    source: any;
+    createdAt: string;
+    dump: string;
+    archive: string;
+    sha256: string;
+}>;
+export function prepareData(root: any, manifest: any, name: any, { file, image, source }: {
+    file: any;
+    image: any;
+    source?: string | undefined;
+}): Promise<{
+    file: string;
+    counts: any;
+    prefix: any;
+}>;
+export function pushData(root: any, manifest: any, name: any, file: any): Promise<{
+    environment: any;
+    imported: boolean;
+    database: any;
+}>;
+export function pushUploads(root: any, manifest: any, name: any, archive: any): Promise<{
+    environment: any;
+    uploadsCopied: boolean;
+}>;
+export function cleanIntegrations(root: any, manifest: any, name: any): Promise<{
+    environment: any;
+    output: any;
+}>;
+//# sourceMappingURL=data.d.ts.map

package/dist/ops/data.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"data.d.ts","sourceRoot":"","sources":["../../src/ops/data.js"],"names":[],"mappings":"AAWA,uDAGC;AACD;;;;;;GAgBC;AAUD;;;;;;;;GAuDC;AACD;;;;GAiBC;AACD;;;GAWC;AAED;;;GAUC"}