@wjarka/cezarion 0.10.0-pr30.54

package/dist/server/wsl.js

@@ -0,0 +1,92 @@
+import { execFileSync } from 'node:child_process';
+import { readFileSync } from 'node:fs';
+/**
+ * WSL (Windows Subsystem for Linux) support for "Open in…" (#361): when cezar's server runs
+ * inside a WSL distro, its own `process.platform` reads `linux` — worktree paths are POSIX
+ * (`/home/…`) even though the user's editors, file explorer and terminal emulator mostly live on
+ * the Windows side, reachable through WSL interop (binfmt_misc lets a WSL process exec a `.exe`
+ * directly). Two things are needed to hand a worktree off correctly:
+ *  1. detect that we ARE inside WSL (`isWsl`), so the terminal/file-manager branches in
+ *     open-in-terminal.ts / open-in-app.ts know to go through interop instead of xdg-open;
+ *  2. translate the POSIX path to the `\\wsl$\<Distro>\…` (or `C:\…` for a `/mnt/<drive>` path)
+ *     form a Windows-side executable actually understands (`translateToWindowsPath`).
+ *
+ * Every helper here takes its inputs as optional parameters (defaulting to the real
+ * env/platform/`/proc/version`) so the detection and translation logic is unit-testable from any
+ * host OS, without needing to actually run inside WSL or stub globals.
+ */
+/** Best-effort read of `/proc/version`; empty string when unavailable (non-Linux, sandboxed,
+ *  permission-denied, etc) — absence just means "not WSL", never a crash. */
+function safeProcVersion() {
+    try {
+        return readFileSync('/proc/version', 'utf8');
+    }
+    catch {
+        return '';
+    }
+}
+/** True when this process is running inside WSL. The Linux kernel WSL ships identifies itself
+ *  in `/proc/version` (contains "microsoft"); WSL also sets `WSL_DISTRO_NAME`/`WSL_INTEROP` for
+ *  every process it starts, which is cheaper to check first. */
+export function isWsl(env = process.env, platform = process.platform, procVersion = safeProcVersion()) {
+    if (platform !== 'linux')
+        return false;
+    if (env.WSL_DISTRO_NAME || env.WSL_INTEROP)
+        return true;
+    return /microsoft/i.test(procVersion);
+}
+/** Distro names are user-chosen (`wsl --import <name> …`), so `WSL_DISTRO_NAME` is untrusted
+ *  input that we go on to put on a command line and into a UNC path. WSL's own naming rules are
+ *  narrower than this, so nothing legitimate is rejected — but a name like `a&calc&` is. */
+const SAFE_DISTRO_NAME = /^[A-Za-z0-9._-]+$/;
+/** The distro name Windows-side tools address this environment as (`wsl.exe -d <name>`, the
+ *  `\\wsl$\<name>\…` UNC prefix). Falls back to "Ubuntu" — WSL's own default — when unset or
+ *  when the name fails `SAFE_DISTRO_NAME`, so no unvalidated env value is ever interpolated into
+ *  a command line or a path. The launchers this feeds are shell-free anyway
+ *  (`wslTerminalLaunchers`); this is the belt to their braces. */
+export function wslDistroName(env = process.env) {
+    const name = env.WSL_DISTRO_NAME;
+    return name && SAFE_DISTRO_NAME.test(name) ? name : 'Ubuntu';
+}
+/** Pure POSIX → Windows path translation, no `wslpath` required (used as its fallback, and
+ *  directly in tests). Two cases:
+ *   - `/mnt/<drive>/…` (the Windows filesystem mounted into WSL) → `<DRIVE>:\…`, the native path,
+ *     not a UNC round-trip through the distro.
+ *   - anything else (the Linux filesystem proper) → `\\wsl$\<Distro>\…`, the UNC path Windows
+ *     apps use to reach into the distro. */
+export function toWindowsPath(posixPath, distro = wslDistroName()) {
+    const mnt = /^\/mnt\/([a-zA-Z])(\/.*)?$/.exec(posixPath);
+    if (mnt) {
+        const drive = mnt[1].toUpperCase();
+        const rest = (mnt[2] ?? '').split('/').filter(Boolean).join('\\');
+        return rest ? `${drive}:\\${rest}` : `${drive}:\\`;
+    }
+    const trimmed = posixPath.replace(/^\/+/, '');
+    const backslashed = trimmed.split('/').filter(Boolean).join('\\');
+    return backslashed ? `\\\\wsl$\\${distro}\\${backslashed}` : `\\\\wsl$\\${distro}`;
+}
+/** The reverse of the UNC case above: `\\wsl$\<Distro>\…` or `\\wsl.localhost\<Distro>\…` →
+ *  the POSIX path WSL-side tools expect. Anything else (a plain `C:\…`, an unrecognized UNC
+ *  share) passes through unchanged — it isn't a WSL path to begin with. */
+export function toPosixPath(windowsPath) {
+    const match = /^\\\\(?:wsl\$|wsl\.localhost)\\[^\\]+(\\.*)?$/i.exec(windowsPath);
+    if (!match)
+        return windowsPath;
+    const rest = match[1] ?? '';
+    return `/${rest.replace(/^\\+/, '').split('\\').join('/')}`;
+}
+/** The translation actually used at launch time: prefer the real `wslpath -w` (it knows about
+ *  every mount, not just `/mnt/<drive>`), falling back to the pure `toWindowsPath` above when
+ *  `wslpath` is missing or errors — degrade, never throw. */
+export function translateToWindowsPath(posixPath) {
+    try {
+        const out = execFileSync('wslpath', ['-w', posixPath], { encoding: 'utf8', timeout: 2000 }).trim();
+        if (out)
+            return out;
+    }
+    catch {
+        // wslpath not on PATH (shouldn't happen inside real WSL, but never trust it) — fall through.
+    }
+    return toWindowsPath(posixPath);
+}
+//# sourceMappingURL=wsl.js.map

package/dist/server/wsl.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"wsl.js","sourceRoot":"","sources":["../../src/server/wsl.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAEvC;;;;;;;;;;;;;;GAcG;AAEH;6EAC6E;AAC7E,SAAS,eAAe;IACtB,IAAI,CAAC;QACH,OAAO,YAAY,CAAC,eAAe,EAAE,MAAM,CAAC,CAAC;IAC/C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED;;gEAEgE;AAChE,MAAM,UAAU,KAAK,CACnB,GAAG,GAAsB,OAAO,CAAC,GAAG,EACpC,QAAQ,GAAoB,OAAO,CAAC,QAAQ,EAC5C,WAAW,GAAW,eAAe,EAAE;IAEvC,IAAI,QAAQ,KAAK,OAAO;QAAE,OAAO,KAAK,CAAC;IACvC,IAAI,GAAG,CAAC,eAAe,IAAI,GAAG,CAAC,WAAW;QAAE,OAAO,IAAI,CAAC;IACxD,OAAO,YAAY,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;AACxC,CAAC;AAED;;4FAE4F;AAC5F,MAAM,gBAAgB,GAAG,mBAAmB,CAAC;AAE7C;;;;kEAIkE;AAClE,MAAM,UAAU,aAAa,CAAC,GAAG,GAAsB,OAAO,CAAC,GAAG;IAChE,MAAM,IAAI,GAAG,GAAG,CAAC,eAAe,CAAC;IACjC,OAAO,IAAI,IAAI,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC;AAC/D,CAAC;AAED;;;;;4CAK4C;AAC5C,MAAM,UAAU,aAAa,CAAC,SAAiB,EAAE,MAAM,GAAW,aAAa,EAAE;IAC/E,MAAM,GAAG,GAAG,4BAA4B,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IACzD,IAAI,GAAG,EAAE,CAAC;QACR,MAAM,KAAK,GAAG,GAAG,CAAC,CAAC,CAAE,CAAC,WAAW,EAAE,CAAC;QACpC,MAAM,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAClE,OAAO,IAAI,CAAC,CAAC,CAAC,GAAG,KAAK,MAAM,IAAI,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,KAAK,CAAC;IACrD,CAAC;IACD,MAAM,OAAO,GAAG,SAAS,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAC9C,MAAM,WAAW,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAClE,OAAO,WAAW,CAAC,CAAC,CAAC,aAAa,MAAM,KAAK,WAAW,EAAE,CAAC,CAAC,CAAC,aAAa,MAAM,EAAE,CAAC;AACrF,CAAC;AAED;;2EAE2E;AAC3E,MAAM,UAAU,WAAW,CAAC,WAAmB;IAC7C,MAAM,KAAK,GAAG,gDAAgD,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IACjF,IAAI,CAAC,KAAK;QAAE,OAAO,WAAW,CAAC;IAC/B,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAC5B,OAAO,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;AAC9D,CAAC;AAED;;6DAE6D;AAC7D,MAAM,UAAU,sBAAsB,CAAC,SAAiB;IACtD,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,YAAY,CAAC,SAAS,EAAE,CAAC,IAAI,EAAE,SAAS,CAAC,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QACnG,IAAI,GAAG;YAAE,OAAO,GAAG,CAAC;IACtB,CAAC;IAAC,MAAM,CAAC;QACP,6FAA6F;IAC/F,CAAC;IACD,OAAO,aAAa,CAAC,SAAS,CAAC,CAAC;AAClC,CAAC"}

package/dist/server-install/engine.d.ts

@@ -0,0 +1,50 @@
+import { type PlatformStrategy, type Runner, type ServerState, type Ui } from './types.ts';
+/**
+ * The engine — pure control flow over a strategy's ordered steps. It never
+ * knows what a step *does*, only `check`/`run`/`undo`. `runInstall` resumes
+ * from `~/.cezar/server.json` (skips resolved steps unless `--reconfigure`
+ * names them); `runUninstall` walks completed steps in reverse. Both hold the
+ * single-writer lock for their whole run.
+ */
+export interface RunOptions {
+    dryRun: boolean;
+    assumeYes: boolean;
+    reconfigure: ReadonlySet<string>;
+    /** `--reinstall`: force every step to re-run, ignoring recorded/present state. */
+    reinstall?: boolean;
+    repoRoot: string;
+    /** ISO timestamp from the caller (Date.now is guarded in some contexts). */
+    now: string;
+    ui?: Ui;
+    runner?: Runner;
+    /**
+     * Instance id (slug) to act on. Omit / `default` for the original
+     * single-cockpit host (legacy `~/.cezar/server.json`); a domain-derived slug
+     * targets a named instance under `~/.cezar/server-instances/`.
+     */
+    instance?: string;
+    /** Public domain for this instance — recorded up front so instance selection
+     * and the SSL step share one source of truth. */
+    domain?: string;
+    /** Loopback port for this instance. For a NEW named instance the caller
+     * passes an auto-picked free port; a resume keeps the recorded one. */
+    port?: number;
+    /** `--external-proxy`: an existing reverse proxy fronts cezar, so the
+     * platform installs no nginx/SSL of its own. */
+    externalProxy?: boolean;
+    /** `--bind-host`: interface the cockpit binds so that proxy can reach it. */
+    bindHost?: string;
+}
+export type RunStatus = 'complete' | 'cancelled' | 'failed';
+export interface RunResult {
+    status: RunStatus;
+    state: ServerState;
+}
+export declare function runInstall(strategy: PlatformStrategy, opts: RunOptions): Promise<RunResult>;
+export declare function runUninstall(strategy: PlatformStrategy, opts: RunOptions): Promise<RunResult>;
+/**
+ * Reload the running cockpit to pick up a new cezar version — the standardized
+ * `server-deploy` flow. Delegates to the platform's `redeploy` (restart service
+ * + re-verify); holds the single-writer lock for the whole run.
+ */
+export declare function runDeploy(strategy: PlatformStrategy, opts: RunOptions): Promise<RunResult>;

package/dist/server-install/engine.js

@@ -0,0 +1,324 @@
+import { loadWorkspaceConfig } from '../workspace/config.js';
+import { acquireLock, deleteServerState, isResolved, loadServerState, saveServerState } from './state.js';
+import { StepAborted, StepCancelled, StepSkipped, defaultRunner } from './steps.js';
+import { createAutoUi, createClackUi } from './ui.js';
+import { CANCEL, PreflightError, } from './types.js';
+/**
+ * Record a step outcome WITHOUT losing the artifact ledger: `server.json`
+ * exists so uninstall can reverse what was created, so a re-run that is
+ * cancelled/skipped/failed must keep the artifacts recorded by the previous
+ * successful run. Only a successful `run()` (which re-creates or supersedes
+ * them) may replace `created`.
+ */
+function recordOutcome(state, id, status) {
+    state.steps[id] = { status, created: state.steps[id]?.created ?? null };
+}
+/** An outcome uninstall must reverse: completed, failed mid-run, or anything
+ * that still has recorded artifacts (e.g. a done step later downgraded). */
+function needsUndo(outcome) {
+    if (!outcome)
+        return false;
+    if (outcome.status === 'done' || outcome.status === 'failed')
+        return true;
+    return (outcome.created?.artifacts.length ?? 0) > 0;
+}
+/**
+ * A `CEZ_DRY_RUN` preview persists a full ledger with no real side effects
+ * (the packaged e2e round-trip depends on that). Two invariants keep previews
+ * from destroying real state:
+ *
+ *  1. A dry-run NEVER persists over a REAL record — the preview mutates its
+ *     in-memory copy only, so a preview on an installed host can't stamp
+ *     `dryRun: true` onto (or delete steps from) the genuine ledger.
+ *  2. A REAL run never resumes from a preview record — steps would all report
+ *     "already done" while nothing is installed. It self-heals by resetting.
+ */
+function reconcileDryRun(state, opts, ui) {
+    const realRecord = !state.dryRun && (state.installed || Object.keys(state.steps).length > 0);
+    if (opts.dryRun && realRecord) {
+        ui.info('DRY RUN over a real install record — previewing only, nothing will be saved to server.json.');
+        return { persist: false };
+    }
+    if (!opts.dryRun && state.dryRun) {
+        ui.info('The recorded state came from a CEZ_DRY_RUN preview — starting from a clean slate.');
+        state.steps = {};
+        state.installed = false;
+        state.platform = undefined;
+        state.publicUrl = undefined;
+        state.ephemeral = undefined;
+    }
+    if (opts.dryRun)
+        state.dryRun = true;
+    else
+        delete state.dryRun;
+    return { persist: true };
+}
+function buildContext(state, opts) {
+    // Real `--yes` runs fail closed on prompts they cannot answer; dry-run
+    // previews stay lenient so they can walk every step.
+    const ui = opts.ui ??
+        (opts.dryRun || opts.assumeYes
+            ? createAutoUi({}, (m) => console.log(m), { strictValidate: !opts.dryRun })
+            : createClackUi());
+    const instance = opts.instance ?? 'default';
+    const ctx = {
+        state,
+        ui,
+        instance,
+        runner: opts.runner ?? defaultRunner,
+        save: async () => saveServerState(state, instance),
+        dryRun: opts.dryRun,
+        assumeYes: opts.assumeYes,
+        reconfigure: opts.reconfigure,
+        repoRoot: opts.repoRoot,
+        now: opts.now,
+        prefs: {},
+    };
+    const { persist } = reconcileDryRun(state, opts, ui);
+    if (!persist)
+        ctx.save = async () => { };
+    return ctx;
+}
+export async function runInstall(strategy, opts) {
+    const release = acquireLock(opts.instance);
+    try {
+        const state = loadServerState(opts.instance);
+        // buildContext reconciles dry-run records first, so a preview of platform A
+        // never blocks a real install of platform B (the reset clears `platform`).
+        const ctx = buildContext(state, opts);
+        if (state.platform && state.platform !== strategy.id) {
+            throw new PreflightError(`this host already has a ${state.platform} install recorded — run \`server-uninstall\` first to switch platforms`);
+        }
+        state.platform = strategy.id;
+        // Record instance identity so the file is self-describing and later
+        // uninstall/deploy runs (and `server-instances/` listings) agree on it.
+        state.instance = opts.instance ?? state.instance ?? 'default';
+        if (opts.domain)
+            state.domain = opts.domain;
+        // Proxy mode + bind host are recorded before `steps(ctx)` runs, because the
+        // platform selects its step list from them (external proxy ⇒ no nginx/SSL).
+        if (opts.externalProxy !== undefined)
+            state.externalProxy = opts.externalProxy;
+        if (opts.bindHost)
+            state.bindHost = opts.bindHost;
+        // A caller-supplied port wins (a new named instance auto-picks a free one);
+        // otherwise keep whatever the resumed record already carries.
+        if (opts.port)
+            state.primaryPort = opts.port;
+        state.createdAt ??= opts.now;
+        state.updatedAt = opts.now;
+        await strategy.preflight(ctx); // throws PreflightError to refuse politely
+        const steps = strategy.steps(ctx);
+        const knownIds = new Set(steps.map((s) => s.id));
+        const unknownIds = [...opts.reconfigure].filter((id) => !knownIds.has(id));
+        if (unknownIds.length > 0) {
+            throw new PreflightError(`unknown --reconfigure step id(s): ${unknownIds.join(', ')} — ` +
+                `valid ids for ${strategy.id}: ${[...knownIds].join(', ')}`);
+        }
+        if (opts.reinstall) {
+            ctx.ui.info(`Reinstalling ${strategy.label} — every step will re-run.`);
+        }
+        else {
+            const resolvedCount = steps.filter((s) => isResolved(state.steps[s.id])).length;
+            if (resolvedCount > 0) {
+                ctx.ui.info(`Resuming ${strategy.label} — ${resolvedCount}/${steps.length} steps already done.`);
+            }
+        }
+        for (const step of steps) {
+            // `--reinstall` forces every step; `--reconfigure` forces the named ones.
+            const forced = opts.reinstall === true || opts.reconfigure.has(step.id);
+            if (!forced && isResolved(state.steps[step.id])) {
+                ctx.ui.info(`= ${step.title} (already done)`);
+                continue;
+            }
+            // Already satisfied on the box (fresh install, nothing recorded yet)?
+            if (!forced && (await step.check(ctx))) {
+                state.steps[step.id] = { status: 'done', created: state.steps[step.id]?.created ?? null };
+                await ctx.save();
+                ctx.ui.info(`= ${step.title} (already present)`);
+                continue;
+            }
+            if (step.optional) {
+                // `--yes` = accept safe defaults, and the safe default for an optional
+                // step (SSL against a real domain, autostart) is to SKIP it — never run
+                // it non-interactively against placeholder input.
+                if (ctx.assumeYes) {
+                    recordOutcome(state, step.id, 'skipped');
+                    await ctx.save();
+                    ctx.ui.info(`— ${step.title} (skipped: --yes)`);
+                    continue;
+                }
+                const proceed = await ctx.ui.confirm({ message: `Set up ${step.title}?`, initialValue: true });
+                if (proceed === CANCEL) {
+                    recordOutcome(state, step.id, 'pending');
+                    await ctx.save();
+                    ctx.ui.warn(`Cancelled at "${step.title}". Progress saved — re-run to resume.`);
+                    return { status: 'cancelled', state };
+                }
+                if (proceed !== true) {
+                    recordOutcome(state, step.id, 'skipped');
+                    await ctx.save();
+                    ctx.ui.info(`— ${step.title} (skipped)`);
+                    continue;
+                }
+            }
+            try {
+                const created = await step.run(ctx);
+                state.steps[step.id] = { status: 'done', created };
+                state.updatedAt = opts.now;
+                await ctx.save();
+            }
+            catch (err) {
+                if (err instanceof StepSkipped) {
+                    recordOutcome(state, step.id, 'skipped');
+                    await ctx.save();
+                    ctx.ui.info(`— ${step.title} (skipped: ${err.message})`);
+                    continue;
+                }
+                if (err instanceof StepCancelled) {
+                    recordOutcome(state, step.id, 'pending');
+                    await ctx.save();
+                    ctx.ui.warn(`Cancelled at "${step.title}". Progress saved — re-run to resume.`);
+                    return { status: 'cancelled', state };
+                }
+                if (err instanceof StepAborted) {
+                    recordOutcome(state, step.id, 'failed');
+                    await ctx.save();
+                    ctx.ui.error(`Stopped at "${step.title}": ${err.message}`);
+                    return { status: 'failed', state };
+                }
+                recordOutcome(state, step.id, 'failed');
+                await ctx.save();
+                throw err;
+            }
+        }
+        const requiredAllDone = steps
+            .filter((s) => !s.optional)
+            .every((s) => state.steps[s.id]?.status === 'done');
+        state.installed = requiredAllDone;
+        state.updatedAt = opts.now;
+        await ctx.save();
+        return { status: 'complete', state };
+    }
+    finally {
+        release();
+    }
+}
+export async function runUninstall(strategy, opts) {
+    const release = acquireLock(opts.instance);
+    try {
+        const state = loadServerState(opts.instance);
+        const ctx = buildContext(state, opts);
+        // Same guard as install/deploy: undoing with the wrong strategy would skip
+        // the real artifacts and (before this guard existed) destroy their ledger.
+        if (state.platform && state.platform !== strategy.id) {
+            throw new PreflightError(`this host has a ${state.platform} install recorded — run \`server-uninstall --platform ${state.platform}\``);
+        }
+        const registeredProjects = (await loadWorkspaceConfig()).projects.length;
+        if (registeredProjects > 0) {
+            ctx.ui.warn(`${registeredProjects} ${registeredProjects === 1 ? 'project is' : 'projects are'} registered in ~/.cezar/config.json.`);
+            const proceed = await ctx.ui.confirm({
+                message: 'Removing this server will make them unavailable. Continue?',
+                initialValue: false,
+            });
+            if (proceed !== true)
+                return { status: 'cancelled', state };
+        }
+        // Reverse order: undo the last-created first. `failed` outcomes are undone
+        // too — the step may have created artifacts before failing, and every undo
+        // is written to work from constants with a null/partial `created`.
+        const steps = [...strategy.steps(ctx)].reverse();
+        for (const step of steps) {
+            const outcome = state.steps[step.id];
+            if (!needsUndo(outcome))
+                continue;
+            try {
+                await step.undo(ctx, outcome.created ?? null);
+                delete state.steps[step.id];
+                state.updatedAt = opts.now;
+                await ctx.save();
+            }
+            catch (err) {
+                if (err instanceof StepCancelled) {
+                    ctx.ui.warn(`Cancelled during uninstall at "${step.title}". Re-run to continue.`);
+                    return { status: 'cancelled', state };
+                }
+                ctx.ui.error(`Failed to reverse "${step.title}": ${err instanceof Error ? err.message : String(err)}`);
+                return { status: 'failed', state };
+            }
+        }
+        // Drop entries that never had a system effect; anything left was recorded
+        // by a step id this binary doesn't know (a newer cezar) and was NOT
+        // reversed — keep its ledger and say so instead of silently erasing it.
+        for (const id of Object.keys(state.steps)) {
+            if (!needsUndo(state.steps[id]))
+                delete state.steps[id];
+        }
+        const leftover = Object.keys(state.steps);
+        state.installed = false;
+        state.updatedAt = opts.now;
+        if (leftover.length > 0) {
+            ctx.ui.warn(`Not reversed (recorded by a different cezar version): ${leftover.join(', ')}. ` +
+                'Their record is kept — re-run server-uninstall with the cezar version that installed them.');
+            await ctx.save();
+            return { status: 'failed', state };
+        }
+        // A completed uninstall leaves the record empty so the host can be
+        // re-installed with any platform (the install guard keys off `platform`,
+        // so it must be cleared here too).
+        state.platform = undefined;
+        state.publicUrl = undefined;
+        state.ephemeral = undefined;
+        state.domain = undefined;
+        await ctx.save();
+        // A named instance is fully gone now — drop its (empty) record so it no
+        // longer reserves a port or shows up as an install. The default record is
+        // kept, matching the legacy single-host behavior.
+        if (ctx.instance !== 'default')
+            deleteServerState(ctx.instance);
+        return { status: 'complete', state };
+    }
+    finally {
+        release();
+    }
+}
+/**
+ * Reload the running cockpit to pick up a new cezar version — the standardized
+ * `server-deploy` flow. Delegates to the platform's `redeploy` (restart service
+ * + re-verify); holds the single-writer lock for the whole run.
+ */
+export async function runDeploy(strategy, opts) {
+    const release = acquireLock(opts.instance);
+    try {
+        const state = loadServerState(opts.instance);
+        const ctx = buildContext(state, opts);
+        if (state.platform && state.platform !== strategy.id) {
+            throw new PreflightError(`this host has a ${state.platform} install recorded — deploy it with --platform ${state.platform}`);
+        }
+        if (!state.installed) {
+            ctx.ui.warn(`no completed ${strategy.label} install is recorded on this host — run \`server-install --platform ${strategy.id}\` first.`);
+            return { status: 'failed', state };
+        }
+        if (!strategy.redeploy) {
+            ctx.ui.warn(`${strategy.label} does not support server-deploy.`);
+            return { status: 'failed', state };
+        }
+        try {
+            await strategy.redeploy(ctx);
+        }
+        catch (err) {
+            if (err instanceof StepAborted || err instanceof StepCancelled) {
+                ctx.ui.error(`Deploy did not complete: ${err.message}`);
+                return { status: 'failed', state };
+            }
+            throw err;
+        }
+        state.updatedAt = opts.now;
+        await ctx.save();
+        return { status: 'complete', state };
+    }
+    finally {
+        release();
+    }
+}
+//# sourceMappingURL=engine.js.map

package/dist/server-install/engine.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"engine.js","sourceRoot":"","sources":["../../src/server-install/engine.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,MAAM,wBAAwB,CAAC;AAC7D,OAAO,EAAE,WAAW,EAAE,iBAAiB,EAAE,UAAU,EAAE,eAAe,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAC1G,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AACpF,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACtD,OAAO,EACL,MAAM,EACN,cAAc,GAOf,MAAM,YAAY,CAAC;AA8CpB;;;;;;GAMG;AACH,SAAS,aAAa,CAAC,KAAkB,EAAE,EAAU,EAAE,MAA6B;IAClF,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,OAAO,IAAI,IAAI,EAAE,CAAC;AAC1E,CAAC;AAED;4EAC4E;AAC5E,SAAS,SAAS,CAAC,OAAgC;IACjD,IAAI,CAAC,OAAO;QAAE,OAAO,KAAK,CAAC;IAC3B,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM,IAAI,OAAO,CAAC,MAAM,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC1E,OAAO,CAAC,OAAO,CAAC,OAAO,EAAE,SAAS,CAAC,MAAM,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;AACtD,CAAC;AAED;;;;;;;;;;GAUG;AACH,SAAS,eAAe,CAAC,KAAkB,EAAE,IAAgB,EAAE,EAAM;IACnE,MAAM,UAAU,GAAG,CAAC,KAAK,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,SAAS,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAC7F,IAAI,IAAI,CAAC,MAAM,IAAI,UAAU,EAAE,CAAC;QAC9B,EAAE,CAAC,IAAI,CAAC,6FAA6F,CAAC,CAAC;QACvG,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IAC5B,CAAC;IACD,IAAI,CAAC,IAAI,CAAC,MAAM,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;QACjC,EAAE,CAAC,IAAI,CAAC,mFAAmF,CAAC,CAAC;QAC7F,KAAK,CAAC,KAAK,GAAG,EAAE,CAAC;QACjB,KAAK,CAAC,SAAS,GAAG,KAAK,CAAC;QACxB,KAAK,CAAC,QAAQ,GAAG,SAAS,CAAC;QAC3B,KAAK,CAAC,SAAS,GAAG,SAAS,CAAC;QAC5B,KAAK,CAAC,SAAS,GAAG,SAAS,CAAC;IAC9B,CAAC;IACD,IAAI,IAAI,CAAC,MAAM;QAAE,KAAK,CAAC,MAAM,GAAG,IAAI,CAAC;;QAChC,OAAO,KAAK,CAAC,MAAM,CAAC;IACzB,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;AAC3B,CAAC;AAED,SAAS,YAAY,CAAC,KAAkB,EAAE,IAAgB;IACxD,uEAAuE;IACvE,qDAAqD;IACrD,MAAM,EAAE,GACN,IAAI,CAAC,EAAE;QACP,CAAC,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,SAAS;YAC5B,CAAC,CAAC,YAAY,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,cAAc,EAAE,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;YAC3E,CAAC,CAAC,aAAa,EAAE,CAAC,CAAC;IACvB,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,SAAS,CAAC;IAC5C,MAAM,GAAG,GAAmB;QAC1B,KAAK;QACL,EAAE;QACF,QAAQ;QACR,MAAM,EAAE,IAAI,CAAC,MAAM,IAAI,aAAa;QACpC,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC,eAAe,CAAC,KAAK,EAAE,QAAQ,CAAC;QAClD,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,WAAW,EAAE,IAAI,CAAC,WAAW;QAC7B,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,GAAG,EAAE,IAAI,CAAC,GAAG;QACb,KAAK,EAAE,EAAE;KACV,CAAC;IACF,MAAM,EAAE,OAAO,EAAE,GAAG,eAAe,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;IACrD,IAAI,CAAC,OAAO;QAAE,GAAG,CAAC,IAAI,GAAG,KAAK,IAAI,EAAE,GAAE,CAAC,CAAC;IACxC,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,QAA0B,EAAE,IAAgB;IAC3E,MAAM,OAAO,GAAG,WAAW,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC3C,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,eAAe,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC7C,4EAA4E;QAC5E,2EAA2E;QAC3E,MAAM,GAAG,GAAG,YAAY,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QACtC,IAAI,KAAK,CAAC,QAAQ,IAAI,KAAK,CAAC,QAAQ,KAAK,QAAQ,CAAC,EAAE,EAAE,CAAC;YACrD,MAAM,IAAI,cAAc,CACtB,2BAA2B,KAAK,CAAC,QAAQ,wEAAwE,CAClH,CAAC;QACJ,CAAC;QACD,KAAK,CAAC,QAAQ,GAAG,QAAQ,CAAC,EAAE,CAAC;QAC7B,oEAAoE;QACpE,wEAAwE;QACxE,KAAK,CAAC,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,KAAK,CAAC,QAAQ,IAAI,SAAS,CAAC;QAC9D,IAAI,IAAI,CAAC,MAAM;YAAE,KAAK,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;QAC5C,4EAA4E;QAC5E,4EAA4E;QAC5E,IAAI,IAAI,CAAC,aAAa,KAAK,SAAS;YAAE,KAAK,CAAC,aAAa,GAAG,IAAI,CAAC,aAAa,CAAC;QAC/E,IAAI,IAAI,CAAC,QAAQ;YAAE,KAAK,CAAC,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC;QAClD,4EAA4E;QAC5E,8DAA8D;QAC9D,IAAI,IAAI,CAAC,IAAI;YAAE,KAAK,CAAC,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC;QAC7C,KAAK,CAAC,SAAS,KAAK,IAAI,CAAC,GAAG,CAAC;QAC7B,KAAK,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC;QAE3B,MAAM,QAAQ,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,2CAA2C;QAE1E,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAClC,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QACjD,MAAM,UAAU,GAAG,CAAC,GAAG,IAAI,CAAC,WAAW,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;QAC3E,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC1B,MAAM,IAAI,cAAc,CACtB,qCAAqC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK;gBAC7D,iBAAiB,QAAQ,CAAC,EAAE,KAAK,CAAC,GAAG,QAAQ,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAC9D,CAAC;QACJ,CAAC;QACD,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YACnB,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,gBAAgB,QAAQ,CAAC,KAAK,4BAA4B,CAAC,CAAC;QAC1E,CAAC;aAAM,CAAC;YACN,MAAM,aAAa,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;YAChF,IAAI,aAAa,GAAG,CAAC,EAAE,CAAC;gBACtB,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,YAAY,QAAQ,CAAC,KAAK,MAAM,aAAa,IAAI,KAAK,CAAC,MAAM,sBAAsB,CAAC,CAAC;YACnG,CAAC;QACH,CAAC;QAED,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,0EAA0E;YAC1E,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,KAAK,IAAI,IAAI,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACxE,IAAI,CAAC,MAAM,IAAI,UAAU,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;gBAChD,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC,KAAK,iBAAiB,CAAC,CAAC;gBAC9C,SAAS;YACX,CAAC;YACD,sEAAsE;YACtE,IAAI,CAAC,MAAM,IAAI,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;gBACvC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,OAAO,IAAI,IAAI,EAAE,CAAC;gBAC1F,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;gBACjB,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC,KAAK,oBAAoB,CAAC,CAAC;gBACjD,SAAS;YACX,CAAC;YAED,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;gBAClB,uEAAuE;gBACvE,wEAAwE;gBACxE,kDAAkD;gBAClD,IAAI,GAAG,CAAC,SAAS,EAAE,CAAC;oBAClB,aAAa,CAAC,KAAK,EAAE,IAAI,CAAC,EAAE,EAAE,SAAS,CAAC,CAAC;oBACzC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;oBACjB,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC,KAAK,mBAAmB,CAAC,CAAC;oBAChD,SAAS;gBACX,CAAC;gBACD,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,EAAE,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,UAAU,IAAI,CAAC,KAAK,GAAG,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC;gBAC/F,IAAI,OAAO,KAAK,MAAM,EAAE,CAAC;oBACvB,aAAa,CAAC,KAAK,EAAE,IAAI,CAAC,EAAE,EAAE,SAAS,CAAC,CAAC;oBACzC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;oBACjB,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,iBAAiB,IAAI,CAAC,KAAK,uCAAuC,CAAC,CAAC;oBAChF,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC;gBACxC,CAAC;gBACD,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;oBACrB,aAAa,CAAC,KAAK,EAAE,IAAI,CAAC,EAAE,EAAE,SAAS,CAAC,CAAC;oBACzC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;oBACjB,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC,KAAK,YAAY,CAAC,CAAC;oBACzC,SAAS;gBACX,CAAC;YACH,CAAC;YAED,IAAI,CAAC;gBACH,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;gBACpC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;gBACnD,KAAK,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC;gBAC3B,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;YACnB,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,IAAI,GAAG,YAAY,WAAW,EAAE,CAAC;oBAC/B,aAAa,CAAC,KAAK,EAAE,IAAI,CAAC,EAAE,EAAE,SAAS,CAAC,CAAC;oBACzC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;oBACjB,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC,KAAK,cAAc,GAAG,CAAC,OAAO,GAAG,CAAC,CAAC;oBACzD,SAAS;gBACX,CAAC;gBACD,IAAI,GAAG,YAAY,aAAa,EAAE,CAAC;oBACjC,aAAa,CAAC,KAAK,EAAE,IAAI,CAAC,EAAE,EAAE,SAAS,CAAC,CAAC;oBACzC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;oBACjB,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,iBAAiB,IAAI,CAAC,KAAK,uCAAuC,CAAC,CAAC;oBAChF,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC;gBACxC,CAAC;gBACD,IAAI,GAAG,YAAY,WAAW,EAAE,CAAC;oBAC/B,aAAa,CAAC,KAAK,EAAE,IAAI,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC;oBACxC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;oBACjB,GAAG,CAAC,EAAE,CAAC,KAAK,CAAC,eAAe,IAAI,CAAC,KAAK,MAAM,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;oBAC3D,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;gBACrC,CAAC;gBACD,aAAa,CAAC,KAAK,EAAE,IAAI,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC;gBACxC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;gBACjB,MAAM,GAAG,CAAC;YACZ,CAAC;QACH,CAAC;QAED,MAAM,eAAe,GAAG,KAAK;aAC1B,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;aAC1B,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,MAAM,KAAK,MAAM,CAAC,CAAC;QACtD,KAAK,CAAC,SAAS,GAAG,eAAe,CAAC;QAClC,KAAK,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC;QAC3B,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;QACjB,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC;IACvC,CAAC;YAAS,CAAC;QACT,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,QAA0B,EAAE,IAAgB;IAC7E,MAAM,OAAO,GAAG,WAAW,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC3C,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,eAAe,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC7C,MAAM,GAAG,GAAG,YAAY,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QACtC,2EAA2E;QAC3E,2EAA2E;QAC3E,IAAI,KAAK,CAAC,QAAQ,IAAI,KAAK,CAAC,QAAQ,KAAK,QAAQ,CAAC,EAAE,EAAE,CAAC;YACrD,MAAM,IAAI,cAAc,CACtB,mBAAmB,KAAK,CAAC,QAAQ,yDAAyD,KAAK,CAAC,QAAQ,IAAI,CAC7G,CAAC;QACJ,CAAC;QAED,MAAM,kBAAkB,GAAG,CAAC,MAAM,mBAAmB,EAAE,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC;QACzE,IAAI,kBAAkB,GAAG,CAAC,EAAE,CAAC;YAC3B,GAAG,CAAC,EAAE,CAAC,IAAI,CACT,GAAG,kBAAkB,IAAI,kBAAkB,KAAK,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,cAAc,sCAAsC,CACxH,CAAC;YACF,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,EAAE,CAAC,OAAO,CAAC;gBACnC,OAAO,EAAE,4DAA4D;gBACrE,YAAY,EAAE,KAAK;aACpB,CAAC,CAAC;YACH,IAAI,OAAO,KAAK,IAAI;gBAAE,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC;QAC9D,CAAC;QAED,2EAA2E;QAC3E,2EAA2E;QAC3E,mEAAmE;QACnE,MAAM,KAAK,GAAG,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;QACjD,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,MAAM,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACrC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC;gBAAE,SAAS;YAClC,IAAI,CAAC;gBACH,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,OAAO,CAAC,OAAO,IAAI,IAAI,CAAC,CAAC;gBAC9C,OAAO,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;gBAC5B,KAAK,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC;gBAC3B,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;YACnB,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,IAAI,GAAG,YAAY,aAAa,EAAE,CAAC;oBACjC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,kCAAkC,IAAI,CAAC,KAAK,wBAAwB,CAAC,CAAC;oBAClF,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC;gBACxC,CAAC;gBACD,GAAG,CAAC,EAAE,CAAC,KAAK,CAAC,sBAAsB,IAAI,CAAC,KAAK,MAAM,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;gBACvG,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;YACrC,CAAC;QACH,CAAC;QAED,0EAA0E;QAC1E,oEAAoE;QACpE,wEAAwE;QACxE,KAAK,MAAM,EAAE,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;YAC1C,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;gBAAE,OAAO,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAC1D,CAAC;QACD,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAC1C,KAAK,CAAC,SAAS,GAAG,KAAK,CAAC;QACxB,KAAK,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC;QAC3B,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACxB,GAAG,CAAC,EAAE,CAAC,IAAI,CACT,yDAAyD,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI;gBAC9E,4FAA4F,CAC/F,CAAC;YACF,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;YACjB,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;QACrC,CAAC;QACD,mEAAmE;QACnE,yEAAyE;QACzE,mCAAmC;QACnC,KAAK,CAAC,QAAQ,GAAG,SAAS,CAAC;QAC3B,KAAK,CAAC,SAAS,GAAG,SAAS,CAAC;QAC5B,KAAK,CAAC,SAAS,GAAG,SAAS,CAAC;QAC5B,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC;QACzB,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;QACjB,wEAAwE;QACxE,0EAA0E;QAC1E,kDAAkD;QAClD,IAAI,GAAG,CAAC,QAAQ,KAAK,SAAS;YAAE,iBAAiB,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAChE,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC;IACvC,CAAC;YAAS,CAAC;QACT,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,QAA0B,EAAE,IAAgB;IAC1E,MAAM,OAAO,GAAG,WAAW,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC3C,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,eAAe,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC7C,MAAM,GAAG,GAAG,YAAY,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QACtC,IAAI,KAAK,CAAC,QAAQ,IAAI,KAAK,CAAC,QAAQ,KAAK,QAAQ,CAAC,EAAE,EAAE,CAAC;YACrD,MAAM,IAAI,cAAc,CACtB,mBAAmB,KAAK,CAAC,QAAQ,iDAAiD,KAAK,CAAC,QAAQ,EAAE,CACnG,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,CAAC;YACrB,GAAG,CAAC,EAAE,CAAC,IAAI,CACT,gBAAgB,QAAQ,CAAC,KAAK,uEAAuE,QAAQ,CAAC,EAAE,WAAW,CAC5H,CAAC;YACF,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;QACrC,CAAC;QACD,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC;YACvB,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC,KAAK,kCAAkC,CAAC,CAAC;YACjE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;QACrC,CAAC;QACD,IAAI,CAAC;YACH,MAAM,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;QAC/B,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,GAAG,YAAY,WAAW,IAAI,GAAG,YAAY,aAAa,EAAE,CAAC;gBAC/D,GAAG,CAAC,EAAE,CAAC,KAAK,CAAC,4BAA4B,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;gBACxD,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;YACrC,CAAC;YACD,MAAM,GAAG,CAAC;QACZ,CAAC;QACD,KAAK,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC;QAC3B,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;QACjB,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC;IACvC,CAAC;YAAS,CAAC;QACT,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC"}

package/dist/server-install/platforms/macosx-ngrok.d.ts

@@ -0,0 +1,6 @@
+import { type PlatformStrategy } from '../types.ts';
+/** launchd agent that keeps an authenticated ngrok tunnel to the local cockpit up. */
+export declare function launchdPlist(port: number, basicAuth: string, domain?: string, ngrokBin?: string): string;
+/** launchd agent that keeps the cezar cockpit running on the given port. */
+export declare function cezarLaunchdPlist(repoRoot: string, port: number, argv: string[]): string;
+export declare const macosxNgrok: PlatformStrategy;