create-aura-appliance 0.1.0

package/dist/prompts.js

@@ -0,0 +1,123 @@
+import { confirm, input, password, select } from '@inquirer/prompts';
+import { embedTargetFor, probeGpu, probeOllama, } from './modelroute.js';
+import { validateBaseUrl, validateHost, validateInstallDir, validateModelId, validatePort, validateUsername, } from './validation.js';
+export const inquirerPrompt = {
+    select: (options) => select({ message: options.message, choices: [...options.choices] }),
+    input: (options) => input(options),
+    password: (options) => password(options),
+    confirm: (options) => confirm(options),
+};
+export async function collectTarget(prompt, t, requestedMode) {
+    const mode = requestedMode ?? await prompt.select({
+        message: t('modeQuestion'),
+        choices: [
+            { name: t('modeLocal'), value: 'local' },
+            { name: t('modeRemote'), value: 'remote' },
+        ],
+    });
+    let remote;
+    if (mode === 'remote') {
+        remote = {
+            host: validateHost(await prompt.input({ message: t('remoteHost') })),
+            port: validatePort(await prompt.input({ message: t('remotePort'), default: '22' })),
+            // Aura's remote target is a clean Ubuntu Server mini-PC, not a Raspberry Pi -- 'ubuntu'
+            // is that image's standard default account, replacing the reference's 'pi'.
+            username: validateUsername(await prompt.input({ message: t('remoteUsername'), default: 'ubuntu' })),
+        };
+    }
+    const installDir = validateInstallDir(await prompt.input({
+        message: t('installDir'),
+        // scripts/install.sh:86 -- /opt/aura is the appliance's own default installation path.
+        default: '/opt/aura',
+    }));
+    return remote ? { mode, installDir, remote } : { mode, installDir };
+}
+async function collectGpuChoice(prompt, t, probeRunner) {
+    if (probeRunner)
+        return probeGpu(probeRunner);
+    // R1 (Task 5 controller ruling): with no runner able to probe the actual install target
+    // (remote mode, until Task 6 supplies an SSH-wrapping one), the wizard must not run
+    // nvidia-smi against the operator's own laptop and present that as the target's GPU --
+    // it asks instead.
+    const hasGpu = await prompt.confirm({ message: t('gpuQuestion'), default: false });
+    return { cuda: hasGpu, ...embedTargetFor(hasGpu) };
+}
+async function collectOllamaModel(prompt, t, probeRunner, llmBaseUrl) {
+    const probe = probeRunner ? await probeOllama(probeRunner, llmBaseUrl) : undefined;
+    if (probe?.reachable && probe.models.length > 0) {
+        return prompt.select({
+            message: t('ollamaModelSelect'),
+            choices: probe.models.map((model) => ({ name: model, value: model })),
+        });
+    }
+    // R2 (Task 4 review, landed here): probe.reachable is false for four different causes --
+    // the endpoint refused, docker is absent or its daemon is down, the alpine probe image
+    // could not be pulled, or the reply was not JSON. The message must not assert the
+    // endpoint is at fault, or the operator debugs a box that was fine. A probe that WAS
+    // reachable but listed no models yet (or no probe was attempted at all, e.g. remote mode)
+    // gets the plain manual-entry prompt instead.
+    const message = probe && !probe.reachable ? t('ollamaModelUnreachable') : t('ollamaModelManualEntry');
+    return validateModelId(await prompt.input({ message }));
+}
+export async function collectSettings(prompt, t, installDir, probeRunner) {
+    const appliance = await prompt.confirm({ message: t('applianceQuestion'), default: true });
+    const gvisor = await prompt.confirm({ message: t('gvisorQuestion'), default: false });
+    // R4: exactly two model routes. A third llama.cpp route is deliberately not offered --
+    // compose.yaml's aura-llm sits behind profiles:[localllm] and needs a ~6.7 GB GGUF that
+    // install.sh never fetches, so enabling it would leave the volume empty, the healthcheck
+    // would never pass, and `docker compose up -d --wait` would abort the whole install.
+    const llmProvider = await prompt.select({
+        message: t('modelRouteQuestion'),
+        choices: [
+            { name: t('modelRouteOpenrouter'), value: 'openrouter' },
+            { name: t('modelRouteOllama'), value: 'ollama' },
+        ],
+    });
+    let llmBaseUrl;
+    let llmModel;
+    let openrouterApiKey;
+    if (llmProvider === 'openrouter') {
+        llmBaseUrl = validateBaseUrl(await prompt.input({
+            message: t('openrouterBaseUrl'),
+            default: 'https://openrouter.ai/api/v1',
+        }));
+        openrouterApiKey = await prompt.password({ message: t('openrouterApiKey'), mask: '*' });
+        llmModel = validateModelId(await prompt.input({ message: t('openrouterModel') }));
+    }
+    else {
+        llmBaseUrl = validateBaseUrl(await prompt.input({
+            message: t('ollamaBaseUrl'),
+            // C1 (review round 1): 'localhost' here is wrong twice. probeOllama's request runs
+            // INSIDE the throwaway alpine container, where 'localhost' means the container itself,
+            // not the operator's host -- modelroute.ts's own comment warns about exactly this ("an
+            // Ollama on the host is not at 127.0.0.1 as seen from there"), so the wizard's own
+            // default could never probe reachable. And the /v1 suffix is load-bearing:
+            // internal/llm/config.go:21's defaultBaseURL carries it, and every other Ollama base
+            // URL in this repo is spelled with it (scripts/install_config_test.sh:19,
+            // internal/agui/settings_api_test.go:218,
+            // internal/channels/telegram/commands_spend_test.go:157) -- without it Aura requests
+            // .../11434/chat/completions, which Ollama does not serve.
+            default: 'http://host.docker.internal:11434/v1',
+        }));
+        llmModel = await collectOllamaModel(prompt, t, probeRunner, llmBaseUrl);
+    }
+    const gpu = await collectGpuChoice(prompt, t, probeRunner);
+    const confirmed = await prompt.confirm({ message: t('confirmInstall'), default: true });
+    if (!confirmed)
+        return null;
+    return {
+        installDir,
+        appliance,
+        gvisor,
+        llmProvider,
+        llmBaseUrl,
+        llmModel,
+        // R5: the empty OpenRouter key is emitted, never omitted -- install.sh's
+        // parse_install_config accepts an empty openrouter_api_key_base64 and exit 2s on a
+        // MISSING key set, so the Ollama route must still produce all nine keys.
+        ...(openrouterApiKey === undefined ? {} : { openrouterApiKey }),
+        embedImage: gpu.embedImage,
+        embedNgl: gpu.embedNgl,
+    };
+}
+//# sourceMappingURL=prompts.js.map

package/dist/prompts.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"prompts.js","sourceRoot":"","sources":["../src/prompts.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAGrE,OAAO,EACL,cAAc,EACd,QAAQ,EACR,WAAW,GACZ,MAAM,iBAAiB,CAAC;AAGzB,OAAO,EACL,eAAe,EACf,YAAY,EACZ,kBAAkB,EAClB,eAAe,EACf,YAAY,EACZ,gBAAgB,GACjB,MAAM,iBAAiB,CAAC;AA6BzB,MAAM,CAAC,MAAM,cAAc,GAAe;IACxC,MAAM,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,OAAO,EAAE,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;IACxF,KAAK,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC;IAClC,QAAQ,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC;IACxC,OAAO,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC;CACvC,CAAC;AAQF,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,MAAkB,EAClB,CAAa,EACb,aAA2B;IAE3B,MAAM,IAAI,GAAG,aAAa,IAAI,MAAM,MAAM,CAAC,MAAM,CAAC;QAChD,OAAO,EAAE,CAAC,CAAC,cAAc,CAAC;QAC1B,OAAO,EAAE;YACP,EAAE,IAAI,EAAE,CAAC,CAAC,WAAW,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE;YACxC,EAAE,IAAI,EAAE,CAAC,CAAC,YAAY,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE;SAC3C;KACF,CAAgB,CAAC;IAElB,IAAI,MAAgC,CAAC;IACrC,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;QACtB,MAAM,GAAG;YACP,IAAI,EAAE,YAAY,CAAC,MAAM,MAAM,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC;YACpE,IAAI,EAAE,YAAY,CAAC,MAAM,MAAM,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,YAAY,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;YACnF,wFAAwF;YACxF,4EAA4E;YAC5E,QAAQ,EAAE,gBAAgB,CAAC,MAAM,MAAM,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,gBAAgB,CAAC,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,CAAC;SACpG,CAAC;IACJ,CAAC;IAED,MAAM,UAAU,GAAG,kBAAkB,CAAC,MAAM,MAAM,CAAC,KAAK,CAAC;QACvD,OAAO,EAAE,CAAC,CAAC,YAAY,CAAC;QACxB,uFAAuF;QACvF,OAAO,EAAE,WAAW;KACrB,CAAC,CAAC,CAAC;IAEJ,OAAO,MAAM,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC;AACtE,CAAC;AAQD,KAAK,UAAU,gBAAgB,CAAC,MAAkB,EAAE,CAAa,EAAE,WAAsC;IACvG,IAAI,WAAW;QAAE,OAAO,QAAQ,CAAC,WAAW,CAAC,CAAC;IAE9C,wFAAwF;IACxF,oFAAoF;IACpF,uFAAuF;IACvF,mBAAmB;IACnB,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,aAAa,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;IACnF,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,cAAc,CAAC,MAAM,CAAC,EAAE,CAAC;AACrD,CAAC;AAED,KAAK,UAAU,kBAAkB,CAC/B,MAAkB,EAClB,CAAa,EACb,WAAsC,EACtC,UAAkB;IAElB,MAAM,KAAK,GAAG,WAAW,CAAC,CAAC,CAAC,MAAM,WAAW,CAAC,WAAW,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAEnF,IAAI,KAAK,EAAE,SAAS,IAAI,KAAK,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAChD,OAAO,MAAM,CAAC,MAAM,CAAC;YACnB,OAAO,EAAE,CAAC,CAAC,mBAAmB,CAAC;YAC/B,OAAO,EAAE,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;SACtE,CAAC,CAAC;IACL,CAAC;IAED,yFAAyF;IACzF,uFAAuF;IACvF,kFAAkF;IAClF,qFAAqF;IACrF,0FAA0F;IAC1F,8CAA8C;IAC9C,MAAM,OAAO,GAAG,KAAK,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,wBAAwB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,wBAAwB,CAAC,CAAC;IACtG,OAAO,eAAe,CAAC,MAAM,MAAM,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC;AAC1D,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,MAAkB,EAClB,CAAa,EACb,UAAkB,EAClB,WAAsC;IAEtC,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,mBAAmB,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;IAC3F,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,gBAAgB,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;IAEtF,uFAAuF;IACvF,wFAAwF;IACxF,yFAAyF;IACzF,qFAAqF;IACrF,MAAM,WAAW,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC;QACtC,OAAO,EAAE,CAAC,CAAC,oBAAoB,CAAC;QAChC,OAAO,EAAE;YACP,EAAE,IAAI,EAAE,CAAC,CAAC,sBAAsB,CAAC,EAAE,KAAK,EAAE,YAAY,EAAE;YACxD,EAAE,IAAI,EAAE,CAAC,CAAC,kBAAkB,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE;SACjD;KACF,CAAC,CAAC;IAEH,IAAI,UAAkB,CAAC;IACvB,IAAI,QAAgB,CAAC;IACrB,IAAI,gBAAoC,CAAC;IAEzC,IAAI,WAAW,KAAK,YAAY,EAAE,CAAC;QACjC,UAAU,GAAG,eAAe,CAAC,MAAM,MAAM,CAAC,KAAK,CAAC;YAC9C,OAAO,EAAE,CAAC,CAAC,mBAAmB,CAAC;YAC/B,OAAO,EAAE,8BAA8B;SACxC,CAAC,CAAC,CAAC;QACJ,gBAAgB,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,kBAAkB,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC;QACxF,QAAQ,GAAG,eAAe,CAAC,MAAM,MAAM,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,iBAAiB,CAAC,EAAE,CAAC,CAAC,CAAC;IACpF,CAAC;SAAM,CAAC;QACN,UAAU,GAAG,eAAe,CAAC,MAAM,MAAM,CAAC,KAAK,CAAC;YAC9C,OAAO,EAAE,CAAC,CAAC,eAAe,CAAC;YAC3B,mFAAmF;YACnF,uFAAuF;YACvF,uFAAuF;YACvF,mFAAmF;YACnF,2EAA2E;YAC3E,qFAAqF;YACrF,0EAA0E;YAC1E,0CAA0C;YAC1C,qFAAqF;YACrF,2DAA2D;YAC3D,OAAO,EAAE,sCAAsC;SAChD,CAAC,CAAC,CAAC;QACJ,QAAQ,GAAG,MAAM,kBAAkB,CAAC,MAAM,EAAE,CAAC,EAAE,WAAW,EAAE,UAAU,CAAC,CAAC;IAC1E,CAAC;IAED,MAAM,GAAG,GAAG,MAAM,gBAAgB,CAAC,MAAM,EAAE,CAAC,EAAE,WAAW,CAAC,CAAC;IAE3D,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,gBAAgB,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;IACxF,IAAI,CAAC,SAAS;QAAE,OAAO,IAAI,CAAC;IAE5B,OAAO;QACL,UAAU;QACV,SAAS;QACT,MAAM;QACN,WAAW;QACX,UAAU;QACV,QAAQ;QACR,yEAAyE;QACzE,mFAAmF;QACnF,yEAAyE;QACzE,GAAG,CAAC,gBAAgB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,CAAC;QAC/D,UAAU,EAAE,GAAG,CAAC,UAAU;QAC1B,QAAQ,EAAE,GAAG,CAAC,QAAQ;KACvB,CAAC;AACJ,CAAC"}

package/dist/remote.d.ts

@@ -0,0 +1,10 @@
+import type { TemporaryFile } from './config-file.js';
+import type { CommandRunner } from './process.js';
+import type { InstallSettings, PreflightResult, RemoteTarget } from './types.js';
+export declare const REMOTE_INSTALL_SCRIPT = "#!/bin/sh\nset -eu\nexec 2>&1\nINSTALLER=\"$1\"\nCONFIG=\"$2\"\nRUNNER=\"$0\"\ncleanup() { rm -f -- \"$CONFIG\" \"$INSTALLER\" \"$RUNNER\"; }\ntrap cleanup EXIT\ntrap 'exit 129' HUP\ntrap 'exit 130' INT\ntrap 'exit 143' TERM\nchmod 700 \"$INSTALLER\"\nchmod 600 \"$CONFIG\"\nsudo bash \"$INSTALLER\" -- --config \"$CONFIG\"\n";
+export type WarningSink = (message: string) => void;
+export declare function sshDestination(target: RemoteTarget): string;
+export declare function preflightRemote(runner: CommandRunner, target: RemoteTarget, installDir: string, platform?: NodeJS.Platform): Promise<PreflightResult>;
+export declare function installRemote(runner: CommandRunner, target: RemoteTarget, artifact: TemporaryFile, config: TemporaryFile, settings: InstallSettings, remoteId?: string, warn?: WarningSink, tempRoot?: string): Promise<void>;
+export declare function createSshProbeRunner(runner: CommandRunner, target: RemoteTarget): CommandRunner;
+//# sourceMappingURL=remote.d.ts.map

package/dist/remote.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"remote.d.ts","sourceRoot":"","sources":["../src/remote.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAOtD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAClD,OAAO,KAAK,EAAE,eAAe,EAAE,eAAe,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAiFjF,eAAO,MAAM,qBAAqB,0UAcjC,CAAC;AAOF,MAAM,MAAM,WAAW,GAAG,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;AAiDpD,wBAAgB,cAAc,CAAC,MAAM,EAAE,YAAY,GAAG,MAAM,CAI3D;AAqCD,wBAAsB,eAAe,CACnC,MAAM,EAAE,aAAa,EACrB,MAAM,EAAE,YAAY,EACpB,UAAU,EAAE,MAAM,EAClB,QAAQ,GAAE,MAAM,CAAC,QAA2B,GAC3C,OAAO,CAAC,eAAe,CAAC,CA2B1B;AAED,wBAAsB,aAAa,CACjC,MAAM,EAAE,aAAa,EACrB,MAAM,EAAE,YAAY,EACpB,QAAQ,EAAE,aAAa,EACvB,MAAM,EAAE,aAAa,EACrB,QAAQ,EAAE,eAAe,EACzB,QAAQ,GAAE,MAAqB,EAC/B,IAAI,GAAE,WAA+D,EACrE,QAAQ,SAAW,GAClB,OAAO,CAAC,IAAI,CAAC,CAmEf;AAeD,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,YAAY,GAAG,aAAa,CAa/F"}

package/dist/remote.js

@@ -0,0 +1,268 @@
+import { randomUUID } from 'node:crypto';
+import { chmod, copyFile, mkdtemp, rm, writeFile } from 'node:fs/promises';
+import { isIP } from 'node:net';
+import { tmpdir } from 'node:os';
+import { join } from 'node:path';
+import { assertSufficientCpuCores, assertSufficientDiskSpace, assertSufficientMemory, normalizeArchitecture, } from './preflight.js';
+import { validateHost, validatePort, validateUsername } from './validation.js';
+const REMOTE_ID_PATTERN = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/;
+// R4: the same REQUIRED_COMMANDS as local.ts's preflightLocal, and for the same reasons --
+// the exact same install.sh runs on this target, whether reached over SSH or run in place.
+// See local.ts for the per-command justification (sudo/curl/openssl unconditional; apt-get,
+// systemctl, and docker itself deliberately excluded).
+// R3: the same REQUIRED_HOSTS -- ghcr.io and get.docker.com kept, raw.githubusercontent.com
+// removed (the npm package carries the payload), huggingface.co added (install.sh:357's
+// unconditional embedding-model probe).
+// R2 (this file's own gap, closed): the reference's own REMOTE_PROBE measured disk alone.
+// install.sh's actual hard gate is cpu+mem+disk together (scripts/install.sh:172-187), so
+// cpu_cores and memory_kib are measured here too -- a remote target must clear the same three
+// floors a local one does, not just one of them. Reading /proc/meminfo directly (no Darwin
+// branch, unlike local.ts's RAM_KIB_SCRIPT) is safe because the case above already asserts
+// the remote target is Linux.
+const REMOTE_PROBE = `set -eu
+exec 2>&1
+INSTALL_DIR="$(printf '%s' "$1" | base64 --decode)"
+case "$INSTALL_DIR" in
+  /*) ;;
+  *) echo 'invalid install directory' >&2; exit 1 ;;
+esac
+[ "$INSTALL_DIR" != "/" ] || { echo 'invalid install directory' >&2; exit 1; }
+[ "$(uname -s)" = "Linux" ] || { echo 'Linux target required' >&2; exit 1; }
+for REQUIRED_COMMAND in sudo curl openssl; do
+  command -v "$REQUIRED_COMMAND" >/dev/null 2>&1 || {
+    echo "missing command: $REQUIRED_COMMAND" >&2
+    exit 1
+  }
+done
+ARCHITECTURE="$(uname -m)"
+case "$ARCHITECTURE" in
+  aarch64|arm64|x86_64|amd64) ;;
+  *) echo "unsupported architecture: $ARCHITECTURE" >&2; exit 1 ;;
+esac
+EXISTING_INSTALL=false
+[ -f "$INSTALL_DIR/compose.yaml" ] && EXISTING_INSTALL=true
+CPU_CORES="$(getconf _NPROCESSORS_ONLN 2>/dev/null || echo 0)"
+case "$CPU_CORES" in
+  ''|*[!0-9]*) echo 'unable to determine cpu core count' >&2; exit 1 ;;
+esac
+MEMORY_KIB="$(awk '/MemTotal:/ {print $2}' /proc/meminfo 2>/dev/null || echo 0)"
+case "$MEMORY_KIB" in
+  ''|*[!0-9]*) echo 'unable to determine memory availability' >&2; exit 1 ;;
+esac
+DISK_PROBE="$INSTALL_DIR"
+while [ ! -e "$DISK_PROBE" ] && [ "$DISK_PROBE" != "/" ]; do
+  DISK_PROBE="$(dirname "$DISK_PROBE")"
+done
+DISK_AVAILABLE_KB="$(df -Pk "$DISK_PROBE" | awk 'NR == 2 { print $4 }')"
+case "$DISK_AVAILABLE_KB" in
+  ''|*[!0-9]*) echo 'unable to determine disk availability' >&2; exit 1 ;;
+esac
+for URL in https://ghcr.io https://get.docker.com https://huggingface.co; do
+  curl -fsS -o /dev/null -m 10 "$URL"
+done
+printf 'architecture=%s\\n' "$ARCHITECTURE"
+printf 'existing_install=%s\\n' "$EXISTING_INSTALL"
+printf 'cpu_cores=%s\\n' "$CPU_CORES"
+printf 'memory_kib=%s\\n' "$MEMORY_KIB"
+printf 'disk_available_kb=%s\\n' "$DISK_AVAILABLE_KB"
+`;
+const STALE_CLEANUP = `set -eu
+exec 2>&1
+find /tmp -xdev -maxdepth 1 -type f -user "$(id -un)" -mtime +0 \\
+  \\( -name 'create-aura-????????-????-????-????-????????????-installer.sh' \\
+     -o -name 'create-aura-????????-????-????-????-????????????-install.conf' \\
+     -o -name 'create-aura-????????-????-????-????-????????????-run.sh' \\) \\
+  -delete
+`;
+// R6: `--` before `--config`, mirroring local.ts's installLocal -- makeself's runtime header
+// parses argv against ITS OWN flag set before it execs the embedded script, so
+// `install-appliance.run --config X` dies with "Unrecognized flag" and install.sh never runs.
+// Exported (unlike the reference's private constant) so remote.test.ts can assert the fix
+// directly on the script's own source: the flag never appears in any ssh/scp argv, only
+// inside this transferred file, so an argv-only assertion would not exercise it.
+export const REMOTE_INSTALL_SCRIPT = `#!/bin/sh
+set -eu
+exec 2>&1
+INSTALLER="$1"
+CONFIG="$2"
+RUNNER="$0"
+cleanup() { rm -f -- "$CONFIG" "$INSTALLER" "$RUNNER"; }
+trap cleanup EXIT
+trap 'exit 129' HUP
+trap 'exit 130' INT
+trap 'exit 143' TERM
+chmod 700 "$INSTALLER"
+chmod 600 "$CONFIG"
+sudo bash "$INSTALLER" -- --config "$CONFIG"
+`;
+const CURRENT_CLEANUP = `set -eu
+exec 2>&1
+rm -f -- "$1" "$2" "$3"
+`;
+function remoteScriptCommand(script, args = []) {
+    const encodedScript = Buffer.from(script, 'utf8').toString('base64');
+    const suffix = args.length === 0 ? '' : ` -- ${args.join(' ')}`;
+    return `printf %s ${encodedScript} | base64 --decode | sh -s${suffix}`;
+}
+async function stageRemoteFiles(artifact, config, remoteId, tempRoot) {
+    const directory = await mkdtemp(join(tempRoot, 'create-aura-upload-'));
+    const installerPath = join(directory, `create-aura-${remoteId}-installer.sh`);
+    const configPath = join(directory, `create-aura-${remoteId}-install.conf`);
+    const runnerPath = join(directory, `create-aura-${remoteId}-run.sh`);
+    try {
+        await chmod(directory, 0o700);
+        await copyFile(artifact.path, installerPath);
+        await copyFile(config.path, configPath);
+        await writeFile(runnerPath, REMOTE_INSTALL_SCRIPT, { mode: 0o700, flag: 'wx' });
+        await chmod(installerPath, 0o700);
+        await chmod(configPath, 0o600);
+        await chmod(runnerPath, 0o700);
+    }
+    catch (error) {
+        await rm(directory, { recursive: true, force: true });
+        throw error;
+    }
+    return {
+        path: directory,
+        installerPath,
+        configPath,
+        runnerPath,
+        cleanup: async () => rm(directory, { recursive: true, force: true }),
+    };
+}
+// Ported unchanged (task instructions): validated defensively even though collectTarget
+// already validated host/username/port once at collection time.
+export function sshDestination(target) {
+    const username = validateUsername(target.username);
+    const host = validateHost(target.host);
+    return `${username}@${isIP(host) === 6 ? `[${host}]` : host}`;
+}
+function parseProbeOutput(output) {
+    const values = new Map();
+    for (const line of output.split(/\r?\n/)) {
+        const separator = line.indexOf('=');
+        if (separator <= 0)
+            continue;
+        values.set(line.slice(0, separator), line.slice(separator + 1));
+    }
+    const rawArchitecture = values.get('architecture');
+    const rawExisting = values.get('existing_install');
+    const rawCpuCores = values.get('cpu_cores');
+    const rawMemory = values.get('memory_kib');
+    const rawDisk = values.get('disk_available_kb');
+    if (rawArchitecture === undefined
+        || !['true', 'false'].includes(rawExisting ?? '')
+        || rawCpuCores === undefined
+        || rawMemory === undefined
+        || rawDisk === undefined) {
+        throw new Error('invalidRemotePreflightOutput');
+    }
+    // R2: the same three hard floors install.sh:172-187 enforces locally, run against the
+    // TARGET's own numbers -- not the operator's laptop.
+    assertSufficientCpuCores(rawCpuCores);
+    assertSufficientMemory(rawMemory);
+    assertSufficientDiskSpace(rawDisk);
+    return {
+        architecture: normalizeArchitecture(rawArchitecture),
+        existingInstall: rawExisting === 'true',
+    };
+}
+export async function preflightRemote(runner, target, installDir, platform = process.platform) {
+    await runner.run('ssh', ['-V']);
+    if (platform === 'win32') {
+        await runner.run('where.exe', ['scp.exe']);
+    }
+    else if (platform === 'linux') {
+        await runner.run('sh', [
+            '-c',
+            'command -v "$1" >/dev/null 2>&1',
+            'create-aura',
+            'scp',
+        ]);
+    }
+    else {
+        throw new Error('unsupportedRemoteClientPlatform');
+    }
+    const result = await runner.run('ssh', [
+        '-p',
+        String(validatePort(String(target.port))),
+        sshDestination(target),
+        remoteScriptCommand(REMOTE_PROBE, [Buffer.from(installDir, 'utf8').toString('base64')]),
+    ], { terminal: true });
+    return parseProbeOutput(result.stdout);
+}
+export async function installRemote(runner, target, artifact, config, settings, remoteId = randomUUID(), warn = (message) => process.stderr.write(`${message}\n`), tempRoot = tmpdir()) {
+    if (!REMOTE_ID_PATTERN.test(remoteId))
+        throw new Error('invalidRemoteId');
+    const destination = sshDestination(target);
+    const port = String(validatePort(String(target.port)));
+    const installerPath = `/tmp/create-aura-${remoteId}-installer.sh`;
+    const configPath = `/tmp/create-aura-${remoteId}-install.conf`;
+    const runnerPath = `/tmp/create-aura-${remoteId}-run.sh`;
+    // R7: the OpenRouter key travels in redactions on the remote path too -- its output crosses
+    // an SSH session and often a terminal someone is screen-sharing, so it matters MORE here
+    // than on the local path, not less.
+    const redactions = [settings.openrouterApiKey];
+    await runner.run('ssh', ['-p', port, destination, remoteScriptCommand(STALE_CLEANUP)], { terminal: true, redactions });
+    const staged = await stageRemoteFiles(artifact, config, remoteId, tempRoot);
+    let operationFailed = false;
+    let operationError;
+    try {
+        await runner.run('scp', [
+            '-P',
+            port,
+            staged.installerPath,
+            staged.configPath,
+            staged.runnerPath,
+            `${destination}:/tmp/`,
+        ], { terminal: true, redactions });
+        await runner.run('ssh', ['-tt', '-p', port, destination, 'sh', runnerPath, installerPath, configPath], { terminal: true, redactions });
+    }
+    catch (error) {
+        operationFailed = true;
+        operationError = error;
+        try {
+            await runner.run('ssh', [
+                '-p',
+                port,
+                destination,
+                remoteScriptCommand(CURRENT_CLEANUP, [installerPath, configPath, runnerPath]),
+            ], { terminal: true, redactions });
+        }
+        catch {
+            warn('remoteCleanupFailed');
+        }
+    }
+    try {
+        await staged.cleanup();
+    }
+    catch (cleanupError) {
+        warn('localStagingCleanupFailed');
+        if (!operationFailed)
+            throw cleanupError;
+    }
+    if (operationFailed)
+        throw operationError;
+}
+function shellQuote(value) {
+    return `'${value.replace(/'/g, "'\\''")}'`;
+}
+// R2 (Task 6 controller ruling): collectSettings's GPU/Ollama probes (modelroute.ts) take a
+// plain CommandRunner and know nothing about SSH -- Task 5's own ruling forbids teaching them
+// ("Nothing inside collectSettings or modelroute.ts may learn what an SSH is"). This wraps one
+// so its run(command, args) executes ON THE REMOTE TARGET via sshDestination instead of on the
+// machine running the wizard. Each argument is single-quoted because ssh joins the trailing
+// argv into ONE string for the remote shell to re-parse (it does not preserve argv
+// boundaries the way execa's direct spawn does): an operator-typed Ollama base URL reaching
+// modelroute.ts's `docker run ... wget ... "$url"` unquoted would let shell metacharacters in
+// that URL execute on the target.
+export function createSshProbeRunner(runner, target) {
+    const destination = sshDestination(target);
+    const port = String(validatePort(String(target.port)));
+    return {
+        async run(command, args = [], options) {
+            return runner.run('ssh', ['-p', port, destination, ...[command, ...args].map(shellQuote)], options);
+        },
+    };
+}
+//# sourceMappingURL=remote.js.map

package/dist/remote.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"remote.js","sourceRoot":"","sources":["../src/remote.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,EAAE,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC3E,OAAO,EAAE,IAAI,EAAE,MAAM,UAAU,CAAC;AAChC,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAGjC,OAAO,EACL,wBAAwB,EACxB,yBAAyB,EACzB,sBAAsB,EACtB,qBAAqB,GACtB,MAAM,gBAAgB,CAAC;AAGxB,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AAE/E,MAAM,iBAAiB,GAAG,gEAAgE,CAAC;AAE3F,2FAA2F;AAC3F,2FAA2F;AAC3F,4FAA4F;AAC5F,uDAAuD;AACvD,4FAA4F;AAC5F,wFAAwF;AACxF,wCAAwC;AACxC,0FAA0F;AAC1F,0FAA0F;AAC1F,8FAA8F;AAC9F,2FAA2F;AAC3F,2FAA2F;AAC3F,8BAA8B;AAC9B,MAAM,YAAY,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA8CpB,CAAC;AAEF,MAAM,aAAa,GAAG;;;;;;;CAOrB,CAAC;AAEF,6FAA6F;AAC7F,+EAA+E;AAC/E,8FAA8F;AAC9F,0FAA0F;AAC1F,wFAAwF;AACxF,iFAAiF;AACjF,MAAM,CAAC,MAAM,qBAAqB,GAAG;;;;;;;;;;;;;;CAcpC,CAAC;AAEF,MAAM,eAAe,GAAG;;;CAGvB,CAAC;AAUF,SAAS,mBAAmB,CAAC,MAAc,EAAE,OAA0B,EAAE;IACvE,MAAM,aAAa,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACrE,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;IAChE,OAAO,aAAa,aAAa,6BAA6B,MAAM,EAAE,CAAC;AACzE,CAAC;AAED,KAAK,UAAU,gBAAgB,CAC7B,QAAuB,EACvB,MAAqB,EACrB,QAAgB,EAChB,QAAgB;IAEhB,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,QAAQ,EAAE,qBAAqB,CAAC,CAAC,CAAC;IACvE,MAAM,aAAa,GAAG,IAAI,CAAC,SAAS,EAAE,eAAe,QAAQ,eAAe,CAAC,CAAC;IAC9E,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,EAAE,eAAe,QAAQ,eAAe,CAAC,CAAC;IAC3E,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,EAAE,eAAe,QAAQ,SAAS,CAAC,CAAC;IAErE,IAAI,CAAC;QACH,MAAM,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;QAC9B,MAAM,QAAQ,CAAC,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC;QAC7C,MAAM,QAAQ,CAAC,MAAM,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;QACxC,MAAM,SAAS,CAAC,UAAU,EAAE,qBAAqB,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QAChF,MAAM,KAAK,CAAC,aAAa,EAAE,KAAK,CAAC,CAAC;QAClC,MAAM,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;QAC/B,MAAM,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;IACjC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,EAAE,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACtD,MAAM,KAAK,CAAC;IACd,CAAC;IAED,OAAO;QACL,IAAI,EAAE,SAAS;QACf,aAAa;QACb,UAAU;QACV,UAAU;QACV,OAAO,EAAE,KAAK,IAAI,EAAE,CAAC,EAAE,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;KACrE,CAAC;AACJ,CAAC;AAED,wFAAwF;AACxF,gEAAgE;AAChE,MAAM,UAAU,cAAc,CAAC,MAAoB;IACjD,MAAM,QAAQ,GAAG,gBAAgB,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IACnD,MAAM,IAAI,GAAG,YAAY,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACvC,OAAO,GAAG,QAAQ,IAAI,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;AAChE,CAAC;AAED,SAAS,gBAAgB,CAAC,MAAc;IACtC,MAAM,MAAM,GAAG,IAAI,GAAG,EAAkB,CAAC;IACzC,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;QACzC,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACpC,IAAI,SAAS,IAAI,CAAC;YAAE,SAAS;QAC7B,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC;IAClE,CAAC;IAED,MAAM,eAAe,GAAG,MAAM,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;IACnD,MAAM,WAAW,GAAG,MAAM,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC;IACnD,MAAM,WAAW,GAAG,MAAM,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;IAC5C,MAAM,SAAS,GAAG,MAAM,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;IAC3C,MAAM,OAAO,GAAG,MAAM,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC;IAChD,IACE,eAAe,KAAK,SAAS;WAC1B,CAAC,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,WAAW,IAAI,EAAE,CAAC;WAC9C,WAAW,KAAK,SAAS;WACzB,SAAS,KAAK,SAAS;WACvB,OAAO,KAAK,SAAS,EACxB,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;IAClD,CAAC;IAED,sFAAsF;IACtF,qDAAqD;IACrD,wBAAwB,CAAC,WAAW,CAAC,CAAC;IACtC,sBAAsB,CAAC,SAAS,CAAC,CAAC;IAClC,yBAAyB,CAAC,OAAO,CAAC,CAAC;IAEnC,OAAO;QACL,YAAY,EAAE,qBAAqB,CAAC,eAAe,CAAC;QACpD,eAAe,EAAE,WAAW,KAAK,MAAM;KACxC,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,MAAqB,EACrB,MAAoB,EACpB,UAAkB,EAClB,WAA4B,OAAO,CAAC,QAAQ;IAE5C,MAAM,MAAM,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC;IAChC,IAAI,QAAQ,KAAK,OAAO,EAAE,CAAC;QACzB,MAAM,MAAM,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC;IAC7C,CAAC;SAAM,IAAI,QAAQ,KAAK,OAAO,EAAE,CAAC;QAChC,MAAM,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE;YACrB,IAAI;YACJ,iCAAiC;YACjC,aAAa;YACb,KAAK;SACN,CAAC,CAAC;IACL,CAAC;SAAM,CAAC;QACN,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;IACrD,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,GAAG,CAC7B,KAAK,EACL;QACE,IAAI;QACJ,MAAM,CAAC,YAAY,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;QACzC,cAAc,CAAC,MAAM,CAAC;QACtB,mBAAmB,CAAC,YAAY,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC;KACxF,EACD,EAAE,QAAQ,EAAE,IAAI,EAAE,CACnB,CAAC;IAEF,OAAO,gBAAgB,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;AACzC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,MAAqB,EACrB,MAAoB,EACpB,QAAuB,EACvB,MAAqB,EACrB,QAAyB,EACzB,WAAmB,UAAU,EAAE,EAC/B,OAAoB,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,OAAO,IAAI,CAAC,EACrE,QAAQ,GAAG,MAAM,EAAE;IAEnB,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,QAAQ,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,iBAAiB,CAAC,CAAC;IAE1E,MAAM,WAAW,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC;IAC3C,MAAM,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACvD,MAAM,aAAa,GAAG,oBAAoB,QAAQ,eAAe,CAAC;IAClE,MAAM,UAAU,GAAG,oBAAoB,QAAQ,eAAe,CAAC;IAC/D,MAAM,UAAU,GAAG,oBAAoB,QAAQ,SAAS,CAAC;IACzD,4FAA4F;IAC5F,yFAAyF;IACzF,oCAAoC;IACpC,MAAM,UAAU,GAAG,CAAC,QAAQ,CAAC,gBAAgB,CAAC,CAAC;IAE/C,MAAM,MAAM,CAAC,GAAG,CACd,KAAK,EACL,CAAC,IAAI,EAAE,IAAI,EAAE,WAAW,EAAE,mBAAmB,CAAC,aAAa,CAAC,CAAC,EAC7D,EAAE,QAAQ,EAAE,IAAI,EAAE,UAAU,EAAE,CAC/B,CAAC;IAEF,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC;IAC5E,IAAI,eAAe,GAAG,KAAK,CAAC;IAC5B,IAAI,cAAuB,CAAC;IAC5B,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,GAAG,CACd,KAAK,EACL;YACE,IAAI;YACJ,IAAI;YACJ,MAAM,CAAC,aAAa;YACpB,MAAM,CAAC,UAAU;YACjB,MAAM,CAAC,UAAU;YACjB,GAAG,WAAW,QAAQ;SACvB,EACD,EAAE,QAAQ,EAAE,IAAI,EAAE,UAAU,EAAE,CAC/B,CAAC;QACF,MAAM,MAAM,CAAC,GAAG,CACd,KAAK,EACL,CAAC,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,UAAU,EAAE,aAAa,EAAE,UAAU,CAAC,EAC7E,EAAE,QAAQ,EAAE,IAAI,EAAE,UAAU,EAAE,CAC/B,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,eAAe,GAAG,IAAI,CAAC;QACvB,cAAc,GAAG,KAAK,CAAC;QACvB,IAAI,CAAC;YACH,MAAM,MAAM,CAAC,GAAG,CACd,KAAK,EACL;gBACE,IAAI;gBACJ,IAAI;gBACJ,WAAW;gBACX,mBAAmB,CAAC,eAAe,EAAE,CAAC,aAAa,EAAE,UAAU,EAAE,UAAU,CAAC,CAAC;aAC9E,EACD,EAAE,QAAQ,EAAE,IAAI,EAAE,UAAU,EAAE,CAC/B,CAAC;QACJ,CAAC;QAAC,MAAM,CAAC;YACP,IAAI,CAAC,qBAAqB,CAAC,CAAC;QAC9B,CAAC;IACH,CAAC;IAED,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,OAAO,EAAE,CAAC;IACzB,CAAC;IAAC,OAAO,YAAY,EAAE,CAAC;QACtB,IAAI,CAAC,2BAA2B,CAAC,CAAC;QAClC,IAAI,CAAC,eAAe;YAAE,MAAM,YAAY,CAAC;IAC3C,CAAC;IAED,IAAI,eAAe;QAAE,MAAM,cAAc,CAAC;AAC5C,CAAC;AAED,SAAS,UAAU,CAAC,KAAa;IAC/B,OAAO,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC;AAC7C,CAAC;AAED,4FAA4F;AAC5F,8FAA8F;AAC9F,+FAA+F;AAC/F,+FAA+F;AAC/F,4FAA4F;AAC5F,mFAAmF;AACnF,4FAA4F;AAC5F,8FAA8F;AAC9F,kCAAkC;AAClC,MAAM,UAAU,oBAAoB,CAAC,MAAqB,EAAE,MAAoB;IAC9E,MAAM,WAAW,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC;IAC3C,MAAM,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAEvD,OAAO;QACL,KAAK,CAAC,GAAG,CAAC,OAAO,EAAE,IAAI,GAAG,EAAE,EAAE,OAAO;YACnC,OAAO,MAAM,CAAC,GAAG,CACf,KAAK,EACL,CAAC,IAAI,EAAE,IAAI,EAAE,WAAW,EAAE,GAAG,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,EAChE,OAAO,CACR,CAAC;QACJ,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/types.d.ts

@@ -0,0 +1,23 @@
+import type { SupportedArchitecture } from './preflight.js';
+export type InstallMode = 'local' | 'remote';
+export interface RemoteTarget {
+    host: string;
+    port: number;
+    username: string;
+}
+export interface PreflightResult {
+    architecture: SupportedArchitecture;
+    existingInstall: boolean;
+}
+export interface InstallSettings {
+    installDir: string;
+    appliance: boolean;
+    gvisor: boolean;
+    llmProvider: string;
+    llmBaseUrl: string;
+    llmModel: string;
+    openrouterApiKey?: string;
+    embedImage: string;
+    embedNgl: string;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,gBAAgB,CAAC;AAE5D,MAAM,MAAM,WAAW,GAAG,OAAO,GAAG,QAAQ,CAAC;AAE7C,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;CAClB;AAKD,MAAM,WAAW,eAAe;IAC9B,YAAY,EAAE,qBAAqB,CAAC;IACpC,eAAe,EAAE,OAAO,CAAC;CAC1B;AAED,MAAM,WAAW,eAAe;IAC9B,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,OAAO,CAAC;IACnB,MAAM,EAAE,OAAO,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;CAClB"}

package/dist/types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=types.js.map

package/dist/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":""}

package/dist/validation.d.ts

@@ -0,0 +1,12 @@
+export declare class ValidationError extends Error {
+    readonly code: string;
+    constructor(code: string);
+}
+export declare function validateHost(raw: string): string;
+export declare function validatePort(raw: string): number;
+export declare function validateUsername(raw: string): string;
+export declare function validateInstallDir(raw: string): string;
+export declare function assertNoLineBreak(raw: string, code: string): void;
+export declare function validateBaseUrl(raw: string): string;
+export declare function validateModelId(raw: string): string;
+//# sourceMappingURL=validation.d.ts.map

package/dist/validation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"validation.d.ts","sourceRoot":"","sources":["../src/validation.ts"],"names":[],"mappings":"AAGA,qBAAa,eAAgB,SAAQ,KAAK;aACZ,IAAI,EAAE,MAAM;gBAAZ,IAAI,EAAE,MAAM;CAIzC;AAKD,wBAAgB,YAAY,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAMhD;AAED,wBAAgB,YAAY,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAQhD;AAED,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAIpD;AAED,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAatD;AAQD,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,IAAI,CAEjE;AAED,wBAAgB,eAAe,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAiBnD;AAID,wBAAgB,eAAe,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAKnD"}

package/dist/validation.js

@@ -0,0 +1,88 @@
+import { isIP } from 'node:net';
+import { posix } from 'node:path';
+export class ValidationError extends Error {
+    code;
+    constructor(code) {
+        super(code);
+        this.code = code;
+        this.name = 'ValidationError';
+    }
+}
+const hostnamePattern = /^(?=.{1,253}$)(?:[a-zA-Z0-9](?:[a-zA-Z0-9-]{0,61}[a-zA-Z0-9])?)(?:\.(?:[a-zA-Z0-9](?:[a-zA-Z0-9-]{0,61}[a-zA-Z0-9])?))*$/;
+const usernamePattern = /^[a-z_][a-z0-9_-]{0,31}$/;
+export function validateHost(raw) {
+    const value = raw.trim();
+    if (!isIP(value) && !hostnamePattern.test(value)) {
+        throw new ValidationError('invalidHost');
+    }
+    return value;
+}
+export function validatePort(raw) {
+    const trimmed = raw.trim();
+    if (!/^\d+$/.test(trimmed))
+        throw new ValidationError('invalidPort');
+    const value = Number(trimmed);
+    if (!Number.isInteger(value) || value < 1 || value > 65535) {
+        throw new ValidationError('invalidPort');
+    }
+    return value;
+}
+export function validateUsername(raw) {
+    const value = raw.trim();
+    if (!usernamePattern.test(value))
+        throw new ValidationError('invalidUsername');
+    return value;
+}
+export function validateInstallDir(raw) {
+    if ([...raw].some((character) => {
+        const code = character.codePointAt(0) ?? 0;
+        return code <= 31 || code === 127;
+    })) {
+        throw new ValidationError('invalidInstallDir');
+    }
+    const normalized = posix.normalize(raw.trim());
+    const value = normalized.length > 1 ? normalized.replace(/\/$/, '') : normalized;
+    if (!value.startsWith('/') || value === '/') {
+        throw new ValidationError('invalidInstallDir');
+    }
+    return value;
+}
+// A newline reaches set_env_value, which writes two .env lines; install.sh's reader takes
+// the first and docker compose takes the last, so the installer and the running appliance
+// would trust different secrets. install.sh rejects it too -- this layer can say so while
+// the operator is still typing. Checked on the raw value (not the trimmed one), mirroring
+// validateInstallDir's control-character check above, since trimming could hide a break
+// sitting at the very edge of the input.
+export function assertNoLineBreak(raw, code) {
+    if (/[\n\r]/.test(raw))
+        throw new ValidationError(code);
+}
+export function validateBaseUrl(raw) {
+    assertNoLineBreak(raw, 'invalidBaseUrl');
+    const value = raw.trim();
+    let parsed;
+    try {
+        parsed = new URL(value);
+    }
+    catch {
+        throw new ValidationError('invalidBaseUrl');
+    }
+    if (parsed.protocol !== 'http:' && parsed.protocol !== 'https:') {
+        throw new ValidationError('invalidBaseUrl');
+    }
+    // modelroute.ts's tagsUrlFor only strips a trailing /v1; a base URL that ends in a bare
+    // trailing slash (no /v1) would reach it unchanged and produce `${base}//api/tags`, a
+    // double slash. Stripping it once here means every downstream consumer sees a URL with
+    // no trailing slash, whether or not it happens to end in /v1.
+    return value.replace(/\/$/, '');
+}
+// Aura is agnostic about which model an operator runs: no vendor-specific naming shape is
+// enforced here, only that a value was actually given and carries no line break.
+export function validateModelId(raw) {
+    assertNoLineBreak(raw, 'invalidModelId');
+    const value = raw.trim();
+    if (value.length === 0)
+        throw new ValidationError('invalidModelId');
+    return value;
+}
+//# sourceMappingURL=validation.js.map

package/dist/validation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"validation.js","sourceRoot":"","sources":["../src/validation.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,UAAU,CAAC;AAChC,OAAO,EAAE,KAAK,EAAE,MAAM,WAAW,CAAC;AAElC,MAAM,OAAO,eAAgB,SAAQ,KAAK;IACZ;IAA5B,YAA4B,IAAY;QACtC,KAAK,CAAC,IAAI,CAAC,CAAC;QADc,SAAI,GAAJ,IAAI,CAAQ;QAEtC,IAAI,CAAC,IAAI,GAAG,iBAAiB,CAAC;IAChC,CAAC;CACF;AAED,MAAM,eAAe,GAAG,0HAA0H,CAAC;AACnJ,MAAM,eAAe,GAAG,0BAA0B,CAAC;AAEnD,MAAM,UAAU,YAAY,CAAC,GAAW;IACtC,MAAM,KAAK,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;IACzB,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACjD,MAAM,IAAI,eAAe,CAAC,aAAa,CAAC,CAAC;IAC3C,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,GAAW;IACtC,MAAM,OAAO,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;IAC3B,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC;QAAE,MAAM,IAAI,eAAe,CAAC,aAAa,CAAC,CAAC;IACrE,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC;IAC9B,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,IAAI,KAAK,GAAG,KAAK,EAAE,CAAC;QAC3D,MAAM,IAAI,eAAe,CAAC,aAAa,CAAC,CAAC;IAC3C,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,GAAW;IAC1C,MAAM,KAAK,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;IACzB,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,eAAe,CAAC,iBAAiB,CAAC,CAAC;IAC/E,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,GAAW;IAC5C,IAAI,CAAC,GAAG,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE;QAC9B,MAAM,IAAI,GAAG,SAAS,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QAC3C,OAAO,IAAI,IAAI,EAAE,IAAI,IAAI,KAAK,GAAG,CAAC;IACpC,CAAC,CAAC,EAAE,CAAC;QACH,MAAM,IAAI,eAAe,CAAC,mBAAmB,CAAC,CAAC;IACjD,CAAC;IACD,MAAM,UAAU,GAAG,KAAK,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;IAC/C,MAAM,KAAK,GAAG,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC;IACjF,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,KAAK,KAAK,GAAG,EAAE,CAAC;QAC5C,MAAM,IAAI,eAAe,CAAC,mBAAmB,CAAC,CAAC;IACjD,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,0FAA0F;AAC1F,0FAA0F;AAC1F,0FAA0F;AAC1F,0FAA0F;AAC1F,wFAAwF;AACxF,yCAAyC;AACzC,MAAM,UAAU,iBAAiB,CAAC,GAAW,EAAE,IAAY;IACzD,IAAI,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC;QAAE,MAAM,IAAI,eAAe,CAAC,IAAI,CAAC,CAAC;AAC1D,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,GAAW;IACzC,iBAAiB,CAAC,GAAG,EAAE,gBAAgB,CAAC,CAAC;IACzC,MAAM,KAAK,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;IACzB,IAAI,MAAW,CAAC;IAChB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;IAC1B,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,eAAe,CAAC,gBAAgB,CAAC,CAAC;IAC9C,CAAC;IACD,IAAI,MAAM,CAAC,QAAQ,KAAK,OAAO,IAAI,MAAM,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAChE,MAAM,IAAI,eAAe,CAAC,gBAAgB,CAAC,CAAC;IAC9C,CAAC;IACD,wFAAwF;IACxF,sFAAsF;IACtF,uFAAuF;IACvF,8DAA8D;IAC9D,OAAO,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;AAClC,CAAC;AAED,0FAA0F;AAC1F,iFAAiF;AACjF,MAAM,UAAU,eAAe,CAAC,GAAW;IACzC,iBAAiB,CAAC,GAAG,EAAE,gBAAgB,CAAC,CAAC;IACzC,MAAM,KAAK,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;IACzB,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,IAAI,eAAe,CAAC,gBAAgB,CAAC,CAAC;IACpE,OAAO,KAAK,CAAC;AACf,CAAC"}