create-aura-appliance 0.1.0

package/README.md

@@ -0,0 +1,42 @@
+# create-aura-appliance
+
+Interactive installer for an [Aura](https://github.com/chetto1983/Aura) appliance — on this
+machine, or on another one over SSH.
+
+```bash
+npx create-aura-appliance            # asks whether to install here or remotely
+npx create-aura-appliance --mode remote
+```
+
+## What it does
+
+The wizard collects the target and the model route, writes an installer config, and then
+runs the appliance installer. The installer is **carried inside this package** as a
+self-extracting archive: nothing is fetched from a source host at install time, so the
+payload you run is the payload npm delivered.
+
+It probes the machine that will actually run Aura, not the one you are typing on — over SSH
+in remote mode. That is what decides the embedding runtime: with an NVIDIA GPU it selects
+the CUDA llama.cpp image and offloads every layer, without one it selects the CPU image and
+sets `AURA_EMBED_NGL=0`. You are not asked.
+
+Installs made from this package track the `edge` channel: the appliance images carry the
+moving `:edge` tag, Docker is set to always re-pull them, and a systemd timer applies new
+images as they are published — so the box keeps itself current without you returning to it.
+
+## Requirements
+
+On the machine running this wizard: Node.js >= 22.13.
+
+On the target: Linux (local installs may also be macOS), `x86_64` or `arm64`, at least
+4 CPU cores, 14 GiB of usable RAM, 20 GiB of free disk, `sudo`, `curl` and `openssl`, and
+network reach to `ghcr.io`, `get.docker.com` and `huggingface.co`. The hardware floors are
+checked before anything is copied, and again by the installer itself.
+
+The RAM floor is measured against `MemTotal`, which is installed RAM minus firmware, kernel
+and integrated-GPU reservations — a 16 GB machine reports well under 16 GiB, which is why
+the floor is where it is.
+
+## License
+
+MIT

package/dist/bin.d.ts

@@ -0,0 +1,3 @@
+#!/usr/bin/env node
+export {};
+//# sourceMappingURL=bin.d.ts.map

package/dist/bin.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"bin.d.ts","sourceRoot":"","sources":["../src/bin.ts"],"names":[],"mappings":""}

package/dist/bin.js

@@ -0,0 +1,5 @@
+#!/usr/bin/env node
+import { runCli } from './cli.js';
+const exitCode = await runCli(process.argv.slice(2));
+process.exitCode = exitCode;
+//# sourceMappingURL=bin.js.map

package/dist/bin.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bin.js","sourceRoot":"","sources":["../src/bin.ts"],"names":[],"mappings":";AACA,OAAO,EAAE,MAAM,EAAE,MAAM,UAAU,CAAC;AAElC,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;AACrD,OAAO,CAAC,QAAQ,GAAG,QAAQ,CAAC"}

package/dist/cli.d.ts

@@ -0,0 +1,30 @@
+import type { TemporaryFile } from './config-file.js';
+import { createTranslator } from './i18n.js';
+import type { MessageKey } from './i18n.js';
+import type { PromptPort, TargetSelection } from './prompts.js';
+import type { CommandRunner } from './process.js';
+import type { InstallMode, InstallSettings, RemoteTarget } from './types.js';
+type Writer = (message: string) => void;
+type TargetCollector = (prompt: PromptPort, t: ReturnType<typeof createTranslator>, requestedMode?: InstallMode) => Promise<TargetSelection>;
+type SettingsCollector = (prompt: PromptPort, t: ReturnType<typeof createTranslator>, installDir: string, probeRunner: CommandRunner | undefined) => Promise<InstallSettings | null>;
+type ConfigCreator = (settings: InstallSettings) => Promise<TemporaryFile>;
+type LocalInstaller = (runner: CommandRunner, config: TemporaryFile, settings: InstallSettings) => Promise<void>;
+type RemoteInstaller = (runner: CommandRunner, target: RemoteTarget, config: TemporaryFile, settings: InstallSettings) => Promise<void>;
+export interface CliDependencies {
+    locale?: string;
+    version?: string;
+    platform?: NodeJS.Platform;
+    prompt?: PromptPort;
+    runner?: CommandRunner;
+    collectTarget?: TargetCollector;
+    collectSettings?: SettingsCollector;
+    createConfig?: ConfigCreator;
+    installLocal?: LocalInstaller;
+    installRemote?: RemoteInstaller;
+    write?: Writer;
+    writeError?: Writer;
+}
+export declare const TRANSLATED_ERROR_CODES: Readonly<Record<string, MessageKey>>;
+export declare function runCli(argv: readonly string[], dependencies?: CliDependencies): Promise<number>;
+export {};
+//# sourceMappingURL=cli.d.ts.map

package/dist/cli.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli.d.ts","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAEtD,OAAO,EAAE,gBAAgB,EAAgB,MAAM,WAAW,CAAC;AAC3D,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AAG5C,OAAO,KAAK,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAEhE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAElD,OAAO,KAAK,EAAE,WAAW,EAAE,eAAe,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAG7E,KAAK,MAAM,GAAG,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;AACxC,KAAK,eAAe,GAAG,CACrB,MAAM,EAAE,UAAU,EAClB,CAAC,EAAE,UAAU,CAAC,OAAO,gBAAgB,CAAC,EACtC,aAAa,CAAC,EAAE,WAAW,KACxB,OAAO,CAAC,eAAe,CAAC,CAAC;AAC9B,KAAK,iBAAiB,GAAG,CACvB,MAAM,EAAE,UAAU,EAClB,CAAC,EAAE,UAAU,CAAC,OAAO,gBAAgB,CAAC,EACtC,UAAU,EAAE,MAAM,EAClB,WAAW,EAAE,aAAa,GAAG,SAAS,KACnC,OAAO,CAAC,eAAe,GAAG,IAAI,CAAC,CAAC;AACrC,KAAK,aAAa,GAAG,CAAC,QAAQ,EAAE,eAAe,KAAK,OAAO,CAAC,aAAa,CAAC,CAAC;AAC3E,KAAK,cAAc,GAAG,CACpB,MAAM,EAAE,aAAa,EACrB,MAAM,EAAE,aAAa,EACrB,QAAQ,EAAE,eAAe,KACtB,OAAO,CAAC,IAAI,CAAC,CAAC;AACnB,KAAK,eAAe,GAAG,CACrB,MAAM,EAAE,aAAa,EACrB,MAAM,EAAE,YAAY,EACpB,MAAM,EAAE,aAAa,EACrB,QAAQ,EAAE,eAAe,KACtB,OAAO,CAAC,IAAI,CAAC,CAAC;AAEnB,MAAM,WAAW,eAAe;IAC9B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC;IAIjB,QAAQ,CAAC,EAAE,MAAM,CAAC,QAAQ,CAAC;IAC3B,MAAM,CAAC,EAAE,UAAU,CAAC;IACpB,MAAM,CAAC,EAAE,aAAa,CAAC;IACvB,aAAa,CAAC,EAAE,eAAe,CAAC;IAChC,eAAe,CAAC,EAAE,iBAAiB,CAAC;IACpC,YAAY,CAAC,EAAE,aAAa,CAAC;IAK7B,YAAY,CAAC,EAAE,cAAc,CAAC;IAC9B,aAAa,CAAC,EAAE,eAAe,CAAC;IAChC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAYD,eAAO,MAAM,sBAAsB,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,CAsBvE,CAAC;AA0CF,wBAAsB,MAAM,CAC1B,IAAI,EAAE,SAAS,MAAM,EAAE,EACvB,YAAY,GAAE,eAAoB,GACjC,OAAO,CAAC,MAAM,CAAC,CAiIjB"}

package/dist/cli.js

@@ -0,0 +1,200 @@
+import { readFileSync } from 'node:fs';
+import { createTemporaryInstallConfig } from './config-file.js';
+import { createTranslator, detectLocale } from './i18n.js';
+import { installLocal, preflightLocal, resolveInstallerArtifact } from './local.js';
+import { collectSettings, collectTarget, inquirerPrompt } from './prompts.js';
+import { ProcessRunner } from './process.js';
+import { createSshProbeRunner, installRemote, preflightRemote } from './remote.js';
+import { ValidationError } from './validation.js';
+// Exported so cli.test.ts can assert, in one place, that every mapped code resolves to a
+// real message in both catalogues and that every preflight.ts error code is mapped (F3,
+// review round 1: six of these had neither a map entry nor a catalogue key, so
+// errorMessage() fell through to the raw thrown string and an operator on an unsupported
+// architecture read "unsupportedArchitecture:riscv64" literally).
+export const TRANSLATED_ERROR_CODES = {
+    invalidHost: 'invalidHost',
+    invalidPort: 'invalidPort',
+    invalidUsername: 'invalidUsername',
+    invalidInstallDir: 'invalidInstallDir',
+    invalidBaseUrl: 'invalidBaseUrl',
+    invalidModelId: 'invalidModelId',
+    unsupportedArchitecture: 'unsupportedArchitecture',
+    invalidDiskAvailability: 'invalidDiskAvailability',
+    insufficientDiskSpace: 'insufficientDiskSpace',
+    invalidCpuCount: 'invalidCpuCount',
+    insufficientCpuCores: 'insufficientCpuCores',
+    invalidMemoryAvailability: 'invalidMemoryAvailability',
+    insufficientMemory: 'insufficientMemory',
+    cleanupFailed: 'cleanupFailed',
+    // Task 6: local.ts's preflightLocal now throws these, and installLocal's real default
+    // (below) throws the artifact one when Task 7's bundled asset is absent.
+    unsupportedLocalPlatform: 'unsupportedLocalPlatform',
+    installerArtifactMissing: 'installerArtifactMissing',
+    // Task 6: remote.ts's preflightRemote now throws these two.
+    invalidRemotePreflightOutput: 'invalidRemotePreflightOutput',
+    unsupportedRemoteClientPlatform: 'unsupportedRemoteClientPlatform',
+};
+function parseArguments(argv) {
+    if (argv.length === 0)
+        return { action: 'install' };
+    if (argv.length === 1 && argv[0] === '--help')
+        return { action: 'help' };
+    if (argv.length === 1 && argv[0] === '--version')
+        return { action: 'version' };
+    if (argv.length === 2
+        && argv[0] === '--mode'
+        && (argv[1] === 'local' || argv[1] === 'remote')) {
+        return { action: 'install', mode: argv[1] };
+    }
+    return { action: 'invalid' };
+}
+function packageVersion() {
+    const contents = readFileSync(new URL('../package.json', import.meta.url), 'utf8');
+    const parsed = JSON.parse(contents);
+    if (typeof parsed !== 'object'
+        || parsed === null
+        || !('version' in parsed)
+        || typeof parsed.version !== 'string') {
+        throw new Error('invalidPackageVersion');
+    }
+    return parsed.version;
+}
+function errorMessage(error, t) {
+    if (!(error instanceof Error))
+        return String(error);
+    const rawCode = error instanceof ValidationError ? error.code : error.message;
+    const code = rawCode.split(':', 1)[0] ?? rawCode;
+    const key = TRANSLATED_ERROR_CODES[code];
+    return key ? t(key) : error.message;
+}
+function isPromptCancellation(error) {
+    return error instanceof Error && error.name === 'ExitPromptError';
+}
+export async function runCli(argv, dependencies = {}) {
+    const locale = detectLocale(dependencies.locale ?? Intl.DateTimeFormat().resolvedOptions().locale);
+    const t = createTranslator(locale);
+    const write = dependencies.write ?? ((message) => process.stdout.write(`${message}\n`));
+    const writeError = dependencies.writeError ?? ((message) => process.stderr.write(`${message}\n`));
+    const parsed = parseArguments(argv);
+    if (parsed.action === 'invalid') {
+        writeError(t('usageError'));
+        return 2;
+    }
+    if (parsed.action === 'help') {
+        write([
+            t('cliDescription'),
+            '',
+            t('helpUsage'),
+            t('helpMode'),
+            t('helpHelp'),
+            t('helpVersion'),
+        ].join('\n'));
+        return 0;
+    }
+    if (parsed.action === 'version') {
+        write(dependencies.version ?? packageVersion());
+        return 0;
+    }
+    const prompt = dependencies.prompt ?? inquirerPrompt;
+    const runner = dependencies.runner ?? new ProcessRunner();
+    const targetCollector = dependencies.collectTarget ?? collectTarget;
+    const settingsCollector = dependencies.collectSettings ?? collectSettings;
+    const configCreator = dependencies.createConfig ?? createTemporaryInstallConfig;
+    // R5/R6: the real installer runs the bundled makeself artifact (Task 7 packages it beside
+    // this module); resolving it here, once, keeps local.ts/remote.ts's own exported
+    // installLocal/installRemote matching the reference's ported (runner, artifact, config,
+    // settings) shape while cli.ts's injected defaults keep the 4-/5-arg shape the rest of this
+    // file already declares.
+    const localInstaller = dependencies.installLocal ?? (async (installRunner, installConfig, installSettings) => {
+        const artifact = await resolveInstallerArtifact();
+        await installLocal(installRunner, artifact, installConfig, installSettings);
+    });
+    const remoteInstaller = dependencies.installRemote ?? (async (installRunner, installTarget, installConfig, installSettings) => {
+        const artifact = await resolveInstallerArtifact();
+        // Matches the reference cli.ts's own default wiring: a best-effort cleanup failure is a
+        // warning, not a fatal error, and which of the two cleanup steps produced it does not
+        // change what the operator needs to do (re-run is safe either way) -- so one generic
+        // message covers both, exactly like cleanupWarning already does for the config file.
+        await installRemote(installRunner, installTarget, artifact, installConfig, installSettings, undefined, () => writeError(t('cleanupWarning')));
+    });
+    let config;
+    let operationError;
+    let installed = false;
+    try {
+        const target = await targetCollector(prompt, t, parsed.mode);
+        write(t('phasePreflight'));
+        // R1: the wizard runs on the operator's laptop, but in remote mode the install lands on
+        // a different machine. local mode passes the real runner -- the probed machine IS the
+        // target. R2 (Task 6, closing this out): remote mode used to pass undefined here --
+        // probing the laptop and presenting the answer as if it were the target's would have been
+        // worse than not probing -- but now wraps the runner over SSH (createSshProbeRunner) so
+        // collectSettings's GPU/Ollama probes reach the real target. Nothing in collectSettings or
+        // modelroute.ts needed to change: the seam was built for exactly this swap.
+        let probeRunner;
+        if (target.mode === 'remote') {
+            if (!target.remote)
+                throw new Error('invalidRemoteTarget');
+            const preflight = await preflightRemote(runner, target.remote, target.installDir, dependencies.platform);
+            write(t('remoteTargetSummary', {
+                user: target.remote.username,
+                host: target.remote.host,
+                port: target.remote.port,
+            }));
+            if (preflight.existingInstall)
+                write(t('existingInstall'));
+            probeRunner = createSshProbeRunner(runner, target.remote);
+        }
+        else {
+            // R1 (carried Task 5 debt, closed): the hardware/command/host gate that used to live
+            // here as a small local-only runLocalPreflight now lives in local.ts's preflightLocal,
+            // merged with the REQUIRED_COMMANDS/REQUIRED_HOSTS/existing-install checks Task 6 ports
+            // from the reference -- one gate, not two copies of it.
+            const preflight = await preflightLocal(runner, target.installDir, dependencies.platform);
+            write(t('localTargetSummary'));
+            if (preflight.existingInstall)
+                write(t('existingInstall'));
+            probeRunner = runner;
+        }
+        const settings = await settingsCollector(prompt, t, target.installDir, probeRunner);
+        if (settings === null) {
+            write(t('cancelled'));
+            return 0;
+        }
+        config = await configCreator(settings);
+        write(t('phaseInstall'));
+        if (target.mode === 'remote') {
+            if (!target.remote)
+                throw new Error('invalidRemoteTarget');
+            await remoteInstaller(runner, target.remote, config, settings);
+        }
+        else {
+            await localInstaller(runner, config, settings);
+        }
+        installed = true;
+    }
+    catch (error) {
+        if (isPromptCancellation(error) && !config) {
+            write(t('cancelled'));
+            return 0;
+        }
+        operationError = error;
+    }
+    if (config) {
+        write(t('phaseCleanup'));
+        try {
+            await config.cleanup();
+        }
+        catch {
+            writeError(t('cleanupWarning'));
+            operationError ??= new Error('cleanupFailed');
+        }
+    }
+    if (operationError !== undefined) {
+        writeError(errorMessage(operationError, t));
+        return 1;
+    }
+    if (installed)
+        write(t('installComplete'));
+    return 0;
+}
+//# sourceMappingURL=cli.js.map

package/dist/cli.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli.js","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAGvC,OAAO,EAAE,4BAA4B,EAAE,MAAM,kBAAkB,CAAC;AAChE,OAAO,EAAE,gBAAgB,EAAE,YAAY,EAAE,MAAM,WAAW,CAAC;AAE3D,OAAO,EAAE,YAAY,EAAE,cAAc,EAAE,wBAAwB,EAAE,MAAM,YAAY,CAAC;AACpF,OAAO,EAAE,eAAe,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAE9E,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAE7C,OAAO,EAAE,oBAAoB,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAEnF,OAAO,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAsDlD,yFAAyF;AACzF,wFAAwF;AACxF,+EAA+E;AAC/E,yFAAyF;AACzF,kEAAkE;AAClE,MAAM,CAAC,MAAM,sBAAsB,GAAyC;IAC1E,WAAW,EAAE,aAAa;IAC1B,WAAW,EAAE,aAAa;IAC1B,eAAe,EAAE,iBAAiB;IAClC,iBAAiB,EAAE,mBAAmB;IACtC,cAAc,EAAE,gBAAgB;IAChC,cAAc,EAAE,gBAAgB;IAChC,uBAAuB,EAAE,yBAAyB;IAClD,uBAAuB,EAAE,yBAAyB;IAClD,qBAAqB,EAAE,uBAAuB;IAC9C,eAAe,EAAE,iBAAiB;IAClC,oBAAoB,EAAE,sBAAsB;IAC5C,yBAAyB,EAAE,2BAA2B;IACtD,kBAAkB,EAAE,oBAAoB;IACxC,aAAa,EAAE,eAAe;IAC9B,sFAAsF;IACtF,yEAAyE;IACzE,wBAAwB,EAAE,0BAA0B;IACpD,wBAAwB,EAAE,0BAA0B;IACpD,4DAA4D;IAC5D,4BAA4B,EAAE,8BAA8B;IAC5D,+BAA+B,EAAE,iCAAiC;CACnE,CAAC;AAEF,SAAS,cAAc,CAAC,IAAuB;IAC7C,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;IACpD,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,QAAQ;QAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;IACzE,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,WAAW;QAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;IAC/E,IACE,IAAI,CAAC,MAAM,KAAK,CAAC;WACd,IAAI,CAAC,CAAC,CAAC,KAAK,QAAQ;WACpB,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,OAAO,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,QAAQ,CAAC,EAChD,CAAC;QACD,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;IAC9C,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;AAC/B,CAAC;AAED,SAAS,cAAc;IACrB,MAAM,QAAQ,GAAG,YAAY,CAAC,IAAI,GAAG,CAAC,iBAAiB,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,CAAC;IACnF,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IAC7C,IACE,OAAO,MAAM,KAAK,QAAQ;WACvB,MAAM,KAAK,IAAI;WACf,CAAC,CAAC,SAAS,IAAI,MAAM,CAAC;WACtB,OAAO,MAAM,CAAC,OAAO,KAAK,QAAQ,EACrC,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;IAC3C,CAAC;IACD,OAAO,MAAM,CAAC,OAAO,CAAC;AACxB,CAAC;AAED,SAAS,YAAY,CAAC,KAAc,EAAE,CAAsC;IAC1E,IAAI,CAAC,CAAC,KAAK,YAAY,KAAK,CAAC;QAAE,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;IACpD,MAAM,OAAO,GAAG,KAAK,YAAY,eAAe,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC;IAC9E,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC;IACjD,MAAM,GAAG,GAAG,sBAAsB,CAAC,IAAI,CAAC,CAAC;IACzC,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC;AACtC,CAAC;AAED,SAAS,oBAAoB,CAAC,KAAc;IAC1C,OAAO,KAAK,YAAY,KAAK,IAAI,KAAK,CAAC,IAAI,KAAK,iBAAiB,CAAC;AACpE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,MAAM,CAC1B,IAAuB,EACvB,eAAgC,EAAE;IAElC,MAAM,MAAM,GAAG,YAAY,CACzB,YAAY,CAAC,MAAM,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC,eAAe,EAAE,CAAC,MAAM,CACtE,CAAC;IACF,MAAM,CAAC,GAAG,gBAAgB,CAAC,MAAM,CAAC,CAAC;IACnC,MAAM,KAAK,GAAG,YAAY,CAAC,KAAK,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,OAAO,IAAI,CAAC,CAAC,CAAC;IACxF,MAAM,UAAU,GAAG,YAAY,CAAC,UAAU,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,OAAO,IAAI,CAAC,CAAC,CAAC;IAClG,MAAM,MAAM,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC;IAEpC,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QAChC,UAAU,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC;QAC5B,OAAO,CAAC,CAAC;IACX,CAAC;IACD,IAAI,MAAM,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;QAC7B,KAAK,CAAC;YACJ,CAAC,CAAC,gBAAgB,CAAC;YACnB,EAAE;YACF,CAAC,CAAC,WAAW,CAAC;YACd,CAAC,CAAC,UAAU,CAAC;YACb,CAAC,CAAC,UAAU,CAAC;YACb,CAAC,CAAC,aAAa,CAAC;SACjB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QACd,OAAO,CAAC,CAAC;IACX,CAAC;IACD,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QAChC,KAAK,CAAC,YAAY,CAAC,OAAO,IAAI,cAAc,EAAE,CAAC,CAAC;QAChD,OAAO,CAAC,CAAC;IACX,CAAC;IAED,MAAM,MAAM,GAAG,YAAY,CAAC,MAAM,IAAI,cAAc,CAAC;IACrD,MAAM,MAAM,GAAG,YAAY,CAAC,MAAM,IAAI,IAAI,aAAa,EAAE,CAAC;IAC1D,MAAM,eAAe,GAAG,YAAY,CAAC,aAAa,IAAI,aAAa,CAAC;IACpE,MAAM,iBAAiB,GAAG,YAAY,CAAC,eAAe,IAAI,eAAe,CAAC;IAC1E,MAAM,aAAa,GAAG,YAAY,CAAC,YAAY,IAAI,4BAA4B,CAAC;IAChF,0FAA0F;IAC1F,iFAAiF;IACjF,wFAAwF;IACxF,4FAA4F;IAC5F,yBAAyB;IACzB,MAAM,cAAc,GAAmB,YAAY,CAAC,YAAY,IAAI,CAAC,KAAK,EAAE,aAAa,EAAE,aAAa,EAAE,eAAe,EAAE,EAAE;QAC3H,MAAM,QAAQ,GAAG,MAAM,wBAAwB,EAAE,CAAC;QAClD,MAAM,YAAY,CAAC,aAAa,EAAE,QAAQ,EAAE,aAAa,EAAE,eAAe,CAAC,CAAC;IAC9E,CAAC,CAAC,CAAC;IACH,MAAM,eAAe,GAAoB,YAAY,CAAC,aAAa,IAAI,CAAC,KAAK,EAAE,aAAa,EAAE,aAAa,EAAE,aAAa,EAAE,eAAe,EAAE,EAAE;QAC7I,MAAM,QAAQ,GAAG,MAAM,wBAAwB,EAAE,CAAC;QAClD,wFAAwF;QACxF,sFAAsF;QACtF,qFAAqF;QACrF,qFAAqF;QACrF,MAAM,aAAa,CAAC,aAAa,EAAE,aAAa,EAAE,QAAQ,EAAE,aAAa,EAAE,eAAe,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC;IAChJ,CAAC,CAAC,CAAC;IAEH,IAAI,MAAiC,CAAC;IACtC,IAAI,cAAuB,CAAC;IAC5B,IAAI,SAAS,GAAG,KAAK,CAAC;IAEtB,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC,MAAM,EAAE,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;QAC7D,KAAK,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC;QAE3B,wFAAwF;QACxF,sFAAsF;QACtF,oFAAoF;QACpF,0FAA0F;QAC1F,wFAAwF;QACxF,2FAA2F;QAC3F,4EAA4E;QAC5E,IAAI,WAAsC,CAAC;QAC3C,IAAI,MAAM,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC7B,IAAI,CAAC,MAAM,CAAC,MAAM;gBAAE,MAAM,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAC;YAC3D,MAAM,SAAS,GAAG,MAAM,eAAe,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,UAAU,EAAE,YAAY,CAAC,QAAQ,CAAC,CAAC;YACzG,KAAK,CAAC,CAAC,CAAC,qBAAqB,EAAE;gBAC7B,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,QAAQ;gBAC5B,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI;gBACxB,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI;aACzB,CAAC,CAAC,CAAC;YACJ,IAAI,SAAS,CAAC,eAAe;gBAAE,KAAK,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC;YAC3D,WAAW,GAAG,oBAAoB,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;QAC5D,CAAC;aAAM,CAAC;YACN,qFAAqF;YACrF,uFAAuF;YACvF,wFAAwF;YACxF,wDAAwD;YACxD,MAAM,SAAS,GAAG,MAAM,cAAc,CAAC,MAAM,EAAE,MAAM,CAAC,UAAU,EAAE,YAAY,CAAC,QAAQ,CAAC,CAAC;YACzF,KAAK,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC;YAC/B,IAAI,SAAS,CAAC,eAAe;gBAAE,KAAK,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC;YAC3D,WAAW,GAAG,MAAM,CAAC;QACvB,CAAC;QAED,MAAM,QAAQ,GAAG,MAAM,iBAAiB,CAAC,MAAM,EAAE,CAAC,EAAE,MAAM,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC;QACpF,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;YACtB,KAAK,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC;YACtB,OAAO,CAAC,CAAC;QACX,CAAC;QAED,MAAM,GAAG,MAAM,aAAa,CAAC,QAAQ,CAAC,CAAC;QAEvC,KAAK,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC;QACzB,IAAI,MAAM,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC7B,IAAI,CAAC,MAAM,CAAC,MAAM;gBAAE,MAAM,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAC;YAC3D,MAAM,eAAe,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC;QACjE,CAAC;aAAM,CAAC;YACN,MAAM,cAAc,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC;QACjD,CAAC;QACD,SAAS,GAAG,IAAI,CAAC;IACnB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,oBAAoB,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;YAC3C,KAAK,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC;YACtB,OAAO,CAAC,CAAC;QACX,CAAC;QACD,cAAc,GAAG,KAAK,CAAC;IACzB,CAAC;IAED,IAAI,MAAM,EAAE,CAAC;QACX,KAAK,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC;QACzB,IAAI,CAAC;YACH,MAAM,MAAM,CAAC,OAAO,EAAE,CAAC;QACzB,CAAC;QAAC,MAAM,CAAC;YACP,UAAU,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC;YAChC,cAAc,KAAK,IAAI,KAAK,CAAC,eAAe,CAAC,CAAC;QAChD,CAAC;IACH,CAAC;IAED,IAAI,cAAc,KAAK,SAAS,EAAE,CAAC;QACjC,UAAU,CAAC,YAAY,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,CAAC;QAC5C,OAAO,CAAC,CAAC;IACX,CAAC;IACD,IAAI,SAAS;QAAE,KAAK,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC;IAC3C,OAAO,CAAC,CAAC;AACX,CAAC"}

package/dist/config-file.d.ts

@@ -0,0 +1,12 @@
+import type { InstallSettings } from './types.js';
+export interface TemporaryFile {
+    path: string;
+    cleanup: () => Promise<void>;
+}
+export interface TemporaryInstallConfig extends TemporaryFile {
+    path: string;
+    directory: string;
+}
+export declare function serializeInstallConfig(settings: InstallSettings): string;
+export declare function createTemporaryInstallConfig(settings: InstallSettings, tempRoot?: string): Promise<TemporaryInstallConfig>;
+//# sourceMappingURL=config-file.d.ts.map

package/dist/config-file.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config-file.d.ts","sourceRoot":"","sources":["../src/config-file.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAGlD,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;CAC9B;AAED,MAAM,WAAW,sBAAuB,SAAQ,aAAa;IAC3D,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;CACnB;AAaD,wBAAgB,sBAAsB,CAAC,QAAQ,EAAE,eAAe,GAAG,MAAM,CAgBxE;AAED,wBAAsB,4BAA4B,CAChD,QAAQ,EAAE,eAAe,EACzB,QAAQ,SAAW,GAClB,OAAO,CAAC,sBAAsB,CAAC,CAkBjC"}

package/dist/config-file.js

@@ -0,0 +1,50 @@
+import { chmod, mkdtemp, rm, writeFile } from 'node:fs/promises';
+import { tmpdir } from 'node:os';
+import { join } from 'node:path';
+import { assertNoLineBreak } from './validation.js';
+// install.sh's parse_install_config decodes every *_base64 value and only then re-checks
+// it for a line break (scripts/install.sh:296-304), because a newline that survived would
+// make set_env_value write a second .env line -- install.sh's own reader takes the first
+// occurrence, docker compose takes the last, so the installer and the running appliance
+// would end up trusting different values. Asserting here catches the same fault on the
+// machine running the wizard, before the config file crosses to the install target.
+function encode(value) {
+    assertNoLineBreak(value, 'invalidConfigValue');
+    return Buffer.from(value, 'utf8').toString('base64');
+}
+export function serializeInstallConfig(settings) {
+    return [
+        'format=1',
+        `install_dir_base64=${encode(settings.installDir)}`,
+        // appliance and gvisor are the two install.sh reads RAW; base64-ing them would make
+        // its literal `= "true"` comparison false and silently produce a non-appliance install.
+        `appliance=${settings.appliance ? 'true' : 'false'}`,
+        `gvisor=${settings.gvisor ? 'true' : 'false'}`,
+        `llm_provider_base64=${encode(settings.llmProvider)}`,
+        `llm_base_url_base64=${encode(settings.llmBaseUrl)}`,
+        `llm_model_base64=${encode(settings.llmModel)}`,
+        `openrouter_api_key_base64=${encode(settings.openrouterApiKey ?? '')}`,
+        `embed_image_base64=${encode(settings.embedImage)}`,
+        `embed_ngl_base64=${encode(settings.embedNgl)}`,
+        '',
+    ].join('\n');
+}
+export async function createTemporaryInstallConfig(settings, tempRoot = tmpdir()) {
+    const directory = await mkdtemp(join(tempRoot, 'create-aura-'));
+    const path = join(directory, 'install.conf');
+    try {
+        await chmod(directory, 0o700);
+        await writeFile(path, serializeInstallConfig(settings), { encoding: 'utf8', mode: 0o600 });
+        await chmod(path, 0o600);
+    }
+    catch (error) {
+        await rm(directory, { recursive: true, force: true });
+        throw error;
+    }
+    return {
+        path,
+        directory,
+        cleanup: async () => rm(directory, { recursive: true, force: true }),
+    };
+}
+//# sourceMappingURL=config-file.js.map

package/dist/config-file.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config-file.js","sourceRoot":"","sources":["../src/config-file.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AACjE,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAGjC,OAAO,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AAYpD,yFAAyF;AACzF,0FAA0F;AAC1F,yFAAyF;AACzF,wFAAwF;AACxF,uFAAuF;AACvF,oFAAoF;AACpF,SAAS,MAAM,CAAC,KAAa;IAC3B,iBAAiB,CAAC,KAAK,EAAE,oBAAoB,CAAC,CAAC;IAC/C,OAAO,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;AACvD,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,QAAyB;IAC9D,OAAO;QACL,UAAU;QACV,sBAAsB,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE;QACnD,oFAAoF;QACpF,wFAAwF;QACxF,aAAa,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,EAAE;QACpD,UAAU,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,EAAE;QAC9C,uBAAuB,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE;QACrD,uBAAuB,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE;QACpD,oBAAoB,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE;QAC/C,6BAA6B,MAAM,CAAC,QAAQ,CAAC,gBAAgB,IAAI,EAAE,CAAC,EAAE;QACtE,sBAAsB,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE;QACnD,oBAAoB,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE;QAC/C,EAAE;KACH,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,4BAA4B,CAChD,QAAyB,EACzB,QAAQ,GAAG,MAAM,EAAE;IAEnB,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,QAAQ,EAAE,cAAc,CAAC,CAAC,CAAC;IAChE,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,EAAE,cAAc,CAAC,CAAC;IAE7C,IAAI,CAAC;QACH,MAAM,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;QAC9B,MAAM,SAAS,CAAC,IAAI,EAAE,sBAAsB,CAAC,QAAQ,CAAC,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAC3F,MAAM,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IAC3B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,EAAE,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACtD,MAAM,KAAK,CAAC;IACd,CAAC;IAED,OAAO;QACL,IAAI;QACJ,SAAS;QACT,OAAO,EAAE,KAAK,IAAI,EAAE,CAAC,EAAE,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;KACrE,CAAC;AACJ,CAAC"}

package/dist/i18n.d.ts

@@ -0,0 +1,7 @@
+import { en } from './messages/en.js';
+export type Locale = 'en' | 'it';
+export type MessageKey = keyof typeof en;
+export type Translator = (key: MessageKey, values?: Readonly<Record<string, string | number>>) => string;
+export declare function detectLocale(locale?: string): Locale;
+export declare function createTranslator(locale: Locale): Translator;
+//# sourceMappingURL=i18n.d.ts.map

package/dist/i18n.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"i18n.d.ts","sourceRoot":"","sources":["../src/i18n.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,EAAE,EAAE,MAAM,kBAAkB,CAAC;AAGtC,MAAM,MAAM,MAAM,GAAG,IAAI,GAAG,IAAI,CAAC;AACjC,MAAM,MAAM,UAAU,GAAG,MAAM,OAAO,EAAE,CAAC;AACzC,MAAM,MAAM,UAAU,GAAG,CACvB,GAAG,EAAE,UAAU,EACf,MAAM,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAAC,CAAC,KAC/C,MAAM,CAAC;AAIZ,wBAAgB,YAAY,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,MAAM,CAEpD;AAED,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,MAAM,GAAG,UAAU,CAK3D"}

package/dist/i18n.js

@@ -0,0 +1,10 @@
+import { en } from './messages/en.js';
+import { it } from './messages/it.js';
+const catalogs = { en, it };
+export function detectLocale(locale) {
+    return locale?.replace('_', '-').toLowerCase().startsWith('it') ? 'it' : 'en';
+}
+export function createTranslator(locale) {
+    return (key, values = {}) => catalogs[locale][key].replace(/\{([a-zA-Z][a-zA-Z0-9]*)\}/g, (token, name) => name in values ? String(values[name]) : token);
+}
+//# sourceMappingURL=i18n.js.map

package/dist/i18n.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"i18n.js","sourceRoot":"","sources":["../src/i18n.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,EAAE,EAAE,MAAM,kBAAkB,CAAC;AACtC,OAAO,EAAE,EAAE,EAAE,MAAM,kBAAkB,CAAC;AAStC,MAAM,QAAQ,GAA+C,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC;AAExE,MAAM,UAAU,YAAY,CAAC,MAAe;IAC1C,OAAO,MAAM,EAAE,OAAO,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,WAAW,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;AAChF,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,MAAc;IAC7C,OAAO,CAAC,GAAG,EAAE,MAAM,GAAG,EAAE,EAAE,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,OAAO,CACxD,6BAA6B,EAC7B,CAAC,KAAK,EAAE,IAAY,EAAE,EAAE,CAAC,IAAI,IAAI,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CACvE,CAAC;AACJ,CAAC"}

package/dist/local.d.ts

@@ -0,0 +1,7 @@
+import type { TemporaryFile } from './config-file.js';
+import type { CommandRunner } from './process.js';
+import type { InstallSettings, PreflightResult } from './types.js';
+export declare function preflightLocal(runner: CommandRunner, installDir: string, platform?: NodeJS.Platform): Promise<PreflightResult>;
+export declare function resolveInstallerArtifact(): Promise<TemporaryFile>;
+export declare function installLocal(runner: CommandRunner, artifact: TemporaryFile, config: TemporaryFile, settings: InstallSettings): Promise<void>;
+//# sourceMappingURL=local.d.ts.map

package/dist/local.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"local.d.ts","sourceRoot":"","sources":["../src/local.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAOtD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAClD,OAAO,KAAK,EAAE,eAAe,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAkDnE,wBAAsB,cAAc,CAClC,MAAM,EAAE,aAAa,EACrB,UAAU,EAAE,MAAM,EAClB,QAAQ,GAAE,MAAM,CAAC,QAA2B,GAC3C,OAAO,CAAC,eAAe,CAAC,CA0C1B;AAQD,wBAAsB,wBAAwB,IAAI,OAAO,CAAC,aAAa,CAAC,CAQvE;AAED,wBAAsB,YAAY,CAChC,MAAM,EAAE,aAAa,EACrB,QAAQ,EAAE,aAAa,EACvB,MAAM,EAAE,aAAa,EACrB,QAAQ,EAAE,eAAe,GACxB,OAAO,CAAC,IAAI,CAAC,CAUf"}

package/dist/local.js

@@ -0,0 +1,110 @@
+import { access } from 'node:fs/promises';
+import { fileURLToPath } from 'node:url';
+import { assertSufficientCpuCores, assertSufficientDiskSpace, assertSufficientMemory, normalizeArchitecture, } from './preflight.js';
+// R4 (Task 6 controller ruling): derived from scripts/install.sh, not copied from the
+// reference's ['apt-get', 'systemctl', 'sudo', 'curl'].
+//   sudo    -- installLocal below always runs the artifact as `sudo bash ...`; if the sudo
+//              binary itself is missing, that top-level command fails outright, and this
+//              check catches it before a secret-bearing config file is even written.
+//   curl    -- install.sh's ensure_embed_model (scripts/install.sh:371-395) sends an
+//              unconditional HEAD request to size the embedding model on EVERY run, model
+//              already present or not; curl is never optional.
+//   openssl -- write_env_if_missing and ensure_internal_env_secrets (scripts/install.sh:465,
+//              536) each call `command -v openssl` themselves and exit 1 if it is absent, on
+//              a fresh install AND on every re-run.
+// apt-get and systemctl are dropped: apt-get would refuse the macOS target install.sh:216-226
+// explicitly supports via Docker Desktop, and systemctl only gates --appliance
+// (scripts/install.sh:691-719), a choice collectSettings makes AFTER this preflight runs --
+// gating on it here would refuse a machine a non-appliance install would have accepted.
+// docker itself is deliberately NOT required: install_docker (scripts/install.sh:198-236)
+// self-installs it via curl+sudo on Linux when absent, so requiring it up front would refuse
+// a fresh box the installer would have provisioned on its own.
+const REQUIRED_COMMANDS = ['sudo', 'curl', 'openssl'];
+// R3 (Task 6 controller ruling): raw.githubusercontent.com comes OUT -- the npm package
+// carries the payload (spec decision 5), so install.sh's download_file reads
+// AURA_PAYLOAD_DIR and never touches RAW_BASE; requiring that host would re-assert a trust
+// path this design deliberately removed. huggingface.co goes IN: install.sh:357 fetches
+// embeddinggemma-300M-Q8_0.gguf from there, the one pinned artifact in the whole product,
+// and ensure_embed_model's HEAD probe against it is unconditional (see curl, above).
+const REQUIRED_HOSTS = [
+    'https://ghcr.io',
+    'https://get.docker.com',
+    'https://huggingface.co',
+];
+// install.sh:126-135's ram_kib(): Linux reads /proc/meminfo's MemTotal (already KiB) directly;
+// Darwin has no /proc, so it converts `sysctl -n hw.memsize` (bytes) to KiB; any other
+// platform echoes 0, which then FAILS assertSufficientMemory's floor rather than skipping the
+// gate -- install.sh refuses a machine it cannot measure, and this must too.
+const RAM_KIB_SCRIPT = 'OS="$(uname -s)"; if [ "$OS" = "Linux" ] && [ -r /proc/meminfo ]; then '
+    + "awk '/MemTotal:/ {print $2}' /proc/meminfo; elif [ \"$OS\" = \"Darwin\" ]; then "
+    + 'bytes="$(sysctl -n hw.memsize 2>/dev/null || echo 0)"; echo $((bytes / 1024)); else echo 0; fi';
+// install.sh:137-144's disk_free_kib(): the install directory does not exist yet on a first
+// install, so it walks up to the nearest existing parent before measuring -- df on '/' when
+// the real target is a separately-mounted /opt (the appliance default install dir is
+// /opt/aura) would report free space on the wrong filesystem. $1 is the install dir, passed
+// positionally: a throwaway program-name placeholder occupies $0.
+const DISK_FREE_KIB_SCRIPT = 'probe="$1"; while [ ! -e "$probe" ] && [ "$probe" != "/" ]; do '
+    + 'probe="$(dirname "$probe")"; done; df -Pk "$probe" | awk \'NR==2 {print $4}\'';
+export async function preflightLocal(runner, installDir, platform = process.platform) {
+    // install.sh:81-88, :216-230 supports Linux and macOS (via Docker Desktop); anything else
+    // has no install.sh path to run at all and belongs in remote mode instead.
+    if (platform !== 'linux' && platform !== 'darwin')
+        throw new Error('unsupportedLocalPlatform');
+    for (const command of REQUIRED_COMMANDS) {
+        await runner.run('sh', [
+            '-c',
+            'command -v "$1" >/dev/null 2>&1',
+            'create-aura',
+            command,
+        ]);
+    }
+    const architecture = normalizeArchitecture((await runner.run('uname', ['-m'])).stdout);
+    // install.sh:118-124's cpu_count() branches on OS only because getconf might be absent;
+    // it ships on every Linux distribution and on macOS, so this one call already covers both
+    // platforms without branching -- `nproc` would be Linux-only and refuse a Mac install.sh
+    // itself accepts.
+    assertSufficientCpuCores((await runner.run('getconf', ['_NPROCESSORS_ONLN'])).stdout);
+    assertSufficientMemory((await runner.run('sh', ['-c', RAM_KIB_SCRIPT])).stdout);
+    assertSufficientDiskSpace((await runner.run('sh', [
+        '-c',
+        DISK_FREE_KIB_SCRIPT,
+        'create-aura',
+        installDir,
+    ])).stdout);
+    // install.sh writes compose.yaml (not docker-compose.yml) directly under INSTALL_DIR
+    // (scripts/install.sh:767); that is Aura's own re-run marker, not the reference's.
+    const existingInstall = (await runner.run('sh', [
+        '-c',
+        'if test -f "$1/compose.yaml"; then printf "true\\n"; else printf "false\\n"; fi',
+        'create-aura',
+        installDir,
+    ])).stdout.trim() === 'true';
+    for (const host of REQUIRED_HOSTS) {
+        await runner.run('curl', ['-fsS', '-o', '/dev/null', '-m', '10', host]);
+    }
+    return { architecture, existingInstall };
+}
+// R5 (Task 6 controller ruling): Task 7 packages packages/create-aura/install-appliance.run
+// beside this module. Resolved via import.meta.url rather than a hardcoded relative path so
+// it is correct BOTH from src/ under vitest and from dist/ when published -- both sit one
+// level under the package root. Until Task 7 lands the file is genuinely absent here; this
+// must fail with a clear, named error rather than let a missing artifact become a skipped
+// step or (worse) a silent no-op install.
+export async function resolveInstallerArtifact() {
+    const path = fileURLToPath(new URL('../install-appliance.run', import.meta.url));
+    try {
+        await access(path);
+    }
+    catch {
+        throw new Error('installerArtifactMissing');
+    }
+    return { path, cleanup: async () => { } };
+}
+export async function installLocal(runner, artifact, config, settings) {
+    // R6 (Task 6 controller ruling): makeself's runtime header parses argv against its OWN
+    // flag set before it execs the embedded script, so `artifact --config X` dies with
+    // "Unrecognized flag" and install.sh never runs. `--` tells the header to stop parsing and
+    // hand everything after it to install.sh untouched.
+    await runner.run('sudo', ['bash', artifact.path, '--', '--config', config.path], { redactions: [settings.openrouterApiKey] });
+}
+//# sourceMappingURL=local.js.map

package/dist/local.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"local.js","sourceRoot":"","sources":["../src/local.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAC1C,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAGzC,OAAO,EACL,wBAAwB,EACxB,yBAAyB,EACzB,sBAAsB,EACtB,qBAAqB,GACtB,MAAM,gBAAgB,CAAC;AAIxB,sFAAsF;AACtF,wDAAwD;AACxD,2FAA2F;AAC3F,yFAAyF;AACzF,qFAAqF;AACrF,qFAAqF;AACrF,0FAA0F;AAC1F,+DAA+D;AAC/D,6FAA6F;AAC7F,6FAA6F;AAC7F,oDAAoD;AACpD,8FAA8F;AAC9F,+EAA+E;AAC/E,4FAA4F;AAC5F,wFAAwF;AACxF,0FAA0F;AAC1F,6FAA6F;AAC7F,+DAA+D;AAC/D,MAAM,iBAAiB,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,CAAU,CAAC;AAE/D,wFAAwF;AACxF,6EAA6E;AAC7E,2FAA2F;AAC3F,wFAAwF;AACxF,0FAA0F;AAC1F,qFAAqF;AACrF,MAAM,cAAc,GAAG;IACrB,iBAAiB;IACjB,wBAAwB;IACxB,wBAAwB;CAChB,CAAC;AAEX,+FAA+F;AAC/F,uFAAuF;AACvF,8FAA8F;AAC9F,6EAA6E;AAC7E,MAAM,cAAc,GAAG,yEAAyE;MAC5F,kFAAkF;MAClF,gGAAgG,CAAC;AAErG,4FAA4F;AAC5F,4FAA4F;AAC5F,qFAAqF;AACrF,4FAA4F;AAC5F,kEAAkE;AAClE,MAAM,oBAAoB,GAAG,iEAAiE;MAC1F,+EAA+E,CAAC;AAEpF,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,MAAqB,EACrB,UAAkB,EAClB,WAA4B,OAAO,CAAC,QAAQ;IAE5C,0FAA0F;IAC1F,2EAA2E;IAC3E,IAAI,QAAQ,KAAK,OAAO,IAAI,QAAQ,KAAK,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;IAE/F,KAAK,MAAM,OAAO,IAAI,iBAAiB,EAAE,CAAC;QACxC,MAAM,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE;YACrB,IAAI;YACJ,iCAAiC;YACjC,aAAa;YACb,OAAO;SACR,CAAC,CAAC;IACL,CAAC;IAED,MAAM,YAAY,GAAG,qBAAqB,CAAC,CAAC,MAAM,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;IACvF,wFAAwF;IACxF,0FAA0F;IAC1F,yFAAyF;IACzF,kBAAkB;IAClB,wBAAwB,CAAC,CAAC,MAAM,MAAM,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC,mBAAmB,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;IACtF,sBAAsB,CAAC,CAAC,MAAM,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;IAChF,yBAAyB,CAAC,CAAC,MAAM,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE;QAChD,IAAI;QACJ,oBAAoB;QACpB,aAAa;QACb,UAAU;KACX,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;IAEZ,qFAAqF;IACrF,mFAAmF;IACnF,MAAM,eAAe,GAAG,CAAC,MAAM,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE;QAC9C,IAAI;QACJ,iFAAiF;QACjF,aAAa;QACb,UAAU;KACX,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,MAAM,CAAC;IAE7B,KAAK,MAAM,IAAI,IAAI,cAAc,EAAE,CAAC;QAClC,MAAM,MAAM,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC,MAAM,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;IAC1E,CAAC;IAED,OAAO,EAAE,YAAY,EAAE,eAAe,EAAE,CAAC;AAC3C,CAAC;AAED,4FAA4F;AAC5F,4FAA4F;AAC5F,0FAA0F;AAC1F,2FAA2F;AAC3F,0FAA0F;AAC1F,0CAA0C;AAC1C,MAAM,CAAC,KAAK,UAAU,wBAAwB;IAC5C,MAAM,IAAI,GAAG,aAAa,CAAC,IAAI,GAAG,CAAC,0BAA0B,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IACjF,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC;IACrB,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;IAC9C,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,IAAI,EAAE,GAAE,CAAC,EAAE,CAAC;AAC3C,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,MAAqB,EACrB,QAAuB,EACvB,MAAqB,EACrB,QAAyB;IAEzB,uFAAuF;IACvF,mFAAmF;IACnF,2FAA2F;IAC3F,oDAAoD;IACpD,MAAM,MAAM,CAAC,GAAG,CACd,MAAM,EACN,CAAC,MAAM,EAAE,QAAQ,CAAC,IAAI,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,CAAC,IAAI,CAAC,EACtD,EAAE,UAAU,EAAE,CAAC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,CAC5C,CAAC;AACJ,CAAC"}

package/dist/messages/en.d.ts

@@ -0,0 +1,61 @@
+export declare const en: {
+    readonly cliDescription: "Install or update the Aura appliance, locally or over SSH";
+    readonly helpUsage: "Usage: create-aura [--mode local|remote] [--help] [--version]";
+    readonly helpMode: "  --mode local|remote  Skip only the installation mode question";
+    readonly helpHelp: "  --help               Show this help";
+    readonly helpVersion: "  --version            Show the package version";
+    readonly usageError: "Invalid arguments. Use --help to see the supported options.";
+    readonly modeQuestion: "Where do you want to install Aura?";
+    readonly modeLocal: "This Linux device";
+    readonly modeRemote: "A remote Linux device over SSH";
+    readonly remoteHost: "Target hostname or IP address";
+    readonly remotePort: "SSH port";
+    readonly remoteUsername: "SSH username";
+    readonly installDir: "Installation directory";
+    readonly confirmInstall: "Apply this installation?";
+    readonly existingInstall: "Existing installation detected; configuration and data will be preserved.";
+    readonly remoteTargetSummary: "Target: {user}@{host}:{port}";
+    readonly localTargetSummary: "Target: this Linux device";
+    readonly phasePreflight: "Preflight checks";
+    readonly phaseTransfer: "Transfer secure configuration";
+    readonly phaseInstall: "Install Aura";
+    readonly phaseCleanup: "Remove temporary files";
+    readonly installComplete: "Aura is starting.";
+    readonly cancelled: "Installation cancelled before making changes.";
+    readonly unsupportedLocalPlatform: "Local mode requires Linux or macOS with Docker. Use remote mode otherwise.";
+    readonly installerArtifactMissing: "The bundled installer artifact is missing from this package.";
+    readonly invalidHost: "Enter a valid hostname or IP address.";
+    readonly invalidPort: "Enter a port between 1 and 65535.";
+    readonly invalidUsername: "Enter a valid Linux username.";
+    readonly invalidInstallDir: "Enter an absolute Linux path other than /.";
+    readonly invalidBaseUrl: "Enter a valid http or https URL.";
+    readonly invalidModelId: "Enter a valid model identifier.";
+    readonly missingCommand: "Required command not found: {command}";
+    readonly preflightFailed: "Preflight failed: {reason}";
+    readonly insufficientDiskSpace: "Not enough free disk space on the installation target.";
+    readonly unsupportedArchitecture: "This CPU architecture is not supported by Aura.";
+    readonly invalidDiskAvailability: "Could not determine the available disk space on the installation target.";
+    readonly invalidCpuCount: "Could not determine the number of CPU cores on the installation target.";
+    readonly insufficientCpuCores: "Not enough CPU cores on the installation target.";
+    readonly invalidMemoryAvailability: "Could not determine the available memory on the installation target.";
+    readonly insufficientMemory: "Not enough memory on the installation target.";
+    readonly cleanupWarning: "Warning: a temporary file could not be removed.";
+    readonly cleanupFailed: "Temporary-file cleanup failed.";
+    readonly invalidRemotePreflightOutput: "The remote preflight returned an invalid response.";
+    readonly unsupportedRemoteClientPlatform: "Remote mode requires Windows or Linux.";
+    readonly installFailed: "Installation failed during {phase}. It is safe to run the wizard again.";
+    readonly applianceQuestion: "Install as a self-starting appliance (systemd service that starts Aura on boot)?";
+    readonly gvisorQuestion: "Enable gVisor sandboxing for stronger container isolation (Linux with a Debian/Ubuntu package manager only)?";
+    readonly modelRouteQuestion: "Which model route should Aura use?";
+    readonly modelRouteOpenrouter: "OpenRouter (cloud API)";
+    readonly modelRouteOllama: "Ollama (local or remote server)";
+    readonly openrouterBaseUrl: "OpenRouter API base URL";
+    readonly openrouterApiKey: "OpenRouter API key";
+    readonly openrouterModel: "OpenRouter model id (e.g. vendor/model-name)";
+    readonly ollamaBaseUrl: "Ollama base URL";
+    readonly ollamaModelSelect: "Choose an installed Ollama model";
+    readonly ollamaModelManualEntry: "Enter the Ollama model id to use";
+    readonly ollamaModelUnreachable: "Could not reach that Ollama endpoint from here. Enter the model id you want to use";
+    readonly gpuQuestion: "Does the target machine have an NVIDIA GPU you want to use for embeddings?";
+};
+//# sourceMappingURL=en.d.ts.map

package/dist/messages/en.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"en.d.ts","sourceRoot":"","sources":["../../src/messages/en.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,EAAE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA2DL,CAAC"}