devchain-cli 0.23.3 → 0.24.0

package/dist/server/modules/remotes/docker/docker-plan.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"docker-plan.service.js","sourceRoot":"","sources":["../../../../src/modules/remotes/docker/docker-plan.service.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAwCA,0CAcC;AAtDD,6DAA6E;AAC7E,2CAAoD;AACpD,6CAAuC;AACvC,oEAA8D;AAC9D,sFAIqD;AACrD,kFAIoD;AAEpD,+FAAyF;AACzF,yEAAsF;AACtF,uDAA4F;AAC5F,uDAQ2B;AAC3B,2DAAkE;AAClE,6DAK8B;AAC9B,6EAAgG;AAMzF,KAAK,UAAU,eAAe,CACnC,KAAe,EACf,IAAmD;IAEnD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;IAC9C,KAAK,IAAI,MAAM,GAAG,EAAE,EAAE,MAAM,GAAG,KAAK,CAAC,MAAM,EAAE,MAAM,IAAI,EAAE,EAAE,CAAC;QAC1D,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,EAAE,MAAM,GAAG,EAAE,CAAC,CAAC,CAAC;QAC1D,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;YAChC,MAAM,QAAQ,GAAG,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;YACtE,IAAI,QAAQ,IAAI,CAAC,CAAC,QAAQ;gBAAE,QAAQ,CAAC,QAAQ,GAAG,CAAC,CAAC,QAAQ,CAAC;QAC7D,CAAC;QACD,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC;IACnC,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAGM,IAAM,iBAAiB,GAAvB,MAAM,iBAAiB;IAEgB;IACzB;IACA;IACA;IAJnB,YAC4C,OAAuC,EAChE,MAA+B,EAC/B,MAAwB,EACxB,SAAqC;QAHZ,YAAO,GAAP,OAAO,CAAgC;QAChE,WAAM,GAAN,MAAM,CAAyB;QAC/B,WAAM,GAAN,MAAM,CAAkB;QACxB,cAAS,GAAT,SAAS,CAA4B;IACrD,CAAC;IAEJ,KAAK,CAAC,WAAW,CAAC,SAAiB;QACjC,OAAO,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC;IAC7D,CAAC;IAMD,KAAK,CAAC,IAAI,CACR,SAAiB,EACjB,KAAc,EACd,MAAoB,EACpB,EAAE,QAAQ,GAAG,IAAI,KAA6B,EAAE;QAEhD,MAAM,OAAO,GAAG,yCAAuB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACrD,MAAM,CAAC,OAAO,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YAClC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,SAAS,CAAC;YAClC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,OAAO,CAAC,QAAQ,CAAC;SACzC,CAAC,CAAC;QACH,MAAM,IAAI,GAAe;YACvB,SAAS;YACT,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,YAAY,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE;YAC3D,UAAU,EAAE,IAAI;YAChB,KAAK,EAAE,EAAE;YACT,WAAW,EAAE,EAAE;YACf,GAAG,EAAE,SAAS;YACd,UAAU,EAAE,KAAK;YACjB,QAAQ,EAAE,EAAE;YACZ,iBAAiB,EAAE,EAAE;YACrB,SAAS,EAAE,IAAI;YACf,QAAQ,EAAE,IAAI;SACf,CAAC;QAEF,MAAM,UAAU,GAAG,MAAM;YACvB,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC;YACzD,CAAC,CAAC,WAAW,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QACjC,IAAI,MAA0B,CAAC;QAC/B,IAAI,CAAC;YACH,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;QACjD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,MAAM,EAAE,OAAO;gBAAE,MAAM,KAAK,CAAC;YACjC,OAAO,WAAW,CAChB,IAAI,EACJ,MAAM,EACN,KAAK,YAAY,oDAAuB,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,aAAa,EACvE,KAAK,YAAY,wCAAiB,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,6BAA6B,CACnF,CAAC;QACJ,CAAC;QAGD,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC;YAC3B,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC;YAC1B,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;SACpE,CAAC,CAAC;QACH,KAAK,QAAQ,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QACrC,IAAI,OAAoB,CAAC;QACzB,IAAI,CAAC;YACH,OAAO,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QAC9D,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,WAAW,CAAC,IAAI,EAAE,QAAQ,EAAE,oBAAoB,EAAE,wBAAwB,CAAC,CAAC;QACrF,CAAC;QACD,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,SAAS;YAC5B,OAAO,WAAW,CAChB,IAAI,EACJ,QAAQ,EACR,kBAAkB,EAClB,kEAAkE,CACnE,CAAC;QACJ,IAAI,CAAC;YACH,MAAM,CAAC,WAAW,EAAE,aAAa,CAAC,GAAG,MAAM,QAAQ,CAAC;YACpD,IAAI,CAAC,UAAU,GAAG,IAAA,6CAAsB,EAAC,WAAW,EAAE,aAAa,CAAC,CAAC;YACrE,MAAM,CAAC,UAAU,GAAG,IAAI,CAAC,UAAU,CAAC;QACtC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,MAAM,EAAE,OAAO;gBAAE,MAAM,KAAK,CAAC;YACjC,OAAO,WAAW,CAChB,IAAI,EACJ,QAAQ,EACR,KAAK,YAAY,wCAAiB,IAAI,KAAK,CAAC,IAAI,KAAK,kBAAkB;gBACrE,CAAC,CAAC,kBAAkB;gBACpB,CAAC,CAAC,oBAAoB,EACxB,KAAK,YAAY,wCAAiB;gBAChC,CAAC,CAAC,KAAK,CAAC,OAAO;gBACf,CAAC,CAAC,2CAA2C,CAChD,CAAC;QACJ,CAAC;QACD,MAAM,OAAO,GAAG,EAAE,MAAM,EAAE,UAAU,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,CAAC;QACpE,IAAI,OAAO,CAAC;QACZ,IAAI,CAAC;YACH,OAAO,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;QACzE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,wCAAiB,IAAI,KAAK,CAAC,IAAI,KAAK,aAAa;gBACpE,MAAM,IAAI,sBAAQ,CAAC,KAAK,CAAC,OAAO,EAAE,4BAA4B,EAAE,GAAG,CAAC,CAAC;YACvE,MAAM,KAAK,CAAC;QACd,CAAC;QACD,IAAI,CAAC,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC;QAC3B,MAAM,UAAU,GAAG,IAAA,oCAAe,EAAC,IAAI,CAAC,KAAK,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC;QACjE,MAAM,aAAa,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;QACzE,MAAM,aAAa,GAAG;YACpB,GAAG,IAAI,GAAG,CAAC;gBACT,GAAG,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;gBACzC,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAC1B,CAAC,CAAC,MAAM;qBACL,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,wBAAwB,IAAI,CAAC,CAAC,MAAM,CAAC,MAAM,IAAI,IAAI,CAAC;qBAC7E,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CACxB;aACF,CAAC;SACH,CAAC;QACF,IAAI,MAAwB,CAAC;QAC7B,IAAI,CAAC;YACH,MAAM,GAAG,MAAM,eAAe,CAAC,aAAa,EAAE,CAAC,KAAK,EAAE,EAAE,CACtD,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC,QAAQ,EAAE,KAAK,EAAE,OAAO,EAAE,aAAa,CAAC,CACxE,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,MAAM,EAAE,OAAO;gBAAE,MAAM,KAAK,CAAC;YACjC,OAAO,WAAW,CAAC,IAAI,EAAE,QAAQ,EAAE,sBAAsB,EAAE,iBAAiB,CAAC,CAAC;QAChF,CAAC;QACD,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,SAAS,EAAE,OAAO,CAAC,QAAQ,CAAC,EAAE,MAAM,IAAI,EAAE,CAAC;QAC9E,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CACzC,IAAA,yCAAoB,EAAC,KAAK,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,MAAM,EAAE,SAAS,CAAC,CACzE,CAAC;QACF,IAAA,sCAAiB,EACf,IAAI,CAAC,KAAK,EACV,OAAO,EACP,MAAM,EACN,SAAS,EACT,OAAO,CAAC,QAAQ,IAAI,IAAI,EACxB,OAAO,CAAC,GAAG,IAAI,IAAI,EACnB,OAAO,CAAC,GAAG,CACZ,CAAC;QACF,IAAA,0CAAqB,EAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,UAAU,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;QAEpE,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,WAAW,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QAChG,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAC9B,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,WAAW,IAAI,IAAA,2BAAS,EAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAClF,CAAC;QACF,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK;YAC3B,IAAI,CAAC,SAAS,GAAG,CACf,IAAI,CAAC,YAAY,IAAI,IAAI,CAAC,UAAU,KAAK,SAAS;gBAChD,CAAC,CAAC,IAAA,iCAAe,EAAC,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC;gBACnC,CAAC,CAAC,IAAA,6BAAW,EAAC,IAAI,EAAE,YAAY,EAAE,OAAO,CAAC,QAAQ,CAAC,CACtD,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,gBAAgB,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;QAC9C,MAAM,MAAM,GAAG,IAAA,oCAAkB,EAAC,IAAI,CAAC,KAAK,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC;QAChE,MAAM,SAAS,GAAG,MAAM;aACrB,MAAM,CACL,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAA,+BAAa,EAAC,CAAC,CAAC,IAAI,CAAC,IAAI,OAAO,CAAC,QAAQ,IAAI,IAAA,0BAAM,EAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC,CACxF;aACA,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;QACxB,MAAM,KAAK,GAAyB,EAAE,CAAC;QAEvC,MAAM,QAAQ,GAAG;YACf,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,2BAAS,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC;SAC3F,CAAC;QACF,IAAI,OAA0B,CAAC;QAC/B,IAAI,CAAC;YACH,KAAK,IAAI,MAAM,GAAG,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC,MAAM,EAAE,MAAM,IAAI,EAAE;gBAC1D,KAAK,CAAC,IAAI,CACR,GAAG,CACD,MAAM,IAAI,CAAC,MAAM,CAAC,cAAc,CAC9B,OAAO,CAAC,QAAQ,EAChB,SAAS,CAAC,KAAK,CAAC,MAAM,EAAE,MAAM,GAAG,EAAE,CAAC,EACpC,OAAO,CACR,CACF,CAAC,KAAK,CACR,CAAC;YACJ,OAAO,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,mBAAmB,CAAC,OAAO,CAAC,QAAQ,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;QACvF,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,MAAM,EAAE,OAAO;gBAAE,MAAM,KAAK,CAAC;YACjC,OAAO,WAAW,CAAC,IAAI,EAAE,QAAQ,EAAE,sBAAsB,EAAE,iBAAiB,CAAC,CAAC;QAChF,CAAC;QACD,MAAM,GAAG,GAAG,IAAA,+BAAa,EACvB,IAAI,CAAC,KAAK,EACV,OAAO,CAAC,GAAG,EACX;YACE,UAAU,EAAE,OAAO,CAAC,MAAM,CAAC,QAAQ,EAAE,UAAU,IAAI,IAAI;YACvD,UAAU,EAAE,OAAO,CAAC,MAAM,CAAC,QAAQ,EAAE,UAAU,IAAI,IAAI;YACvD,KAAK;SACN,EACD,OAAO,CAAC,QAAQ,CACjB,CAAC;QACF,IAAI,CAAC,WAAW,GAAG,GAAG,CAAC,WAAW,CAAC;QACnC,IAAI,CAAC,GAAG,GAAG,GAAG,CAAC,GAAG,CAAC;QACnB,IAAI,CAAC,UAAU;YACb,GAAG,CAAC,GAAG,KAAK,SAAS;gBACrB,IAAI,CAAC,KAAK,CAAC,KAAK,CACd,CAAC,IAAI,EAAE,EAAE,CACP,CAAC,IAAI,CAAC,YAAY,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAA,+BAAU,EAAC,IAAI,CAAC,YAAa,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAC3F,CAAC;QACJ,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YAC9B,IACE,CAAC,IAAI,CAAC,YAAY;gBAClB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,cAAc,IAAI,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC;gBAEpE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;oBACjB,IAAI,EAAE,8BAA8B;oBACpC,OAAO,EAAE,GAAG,IAAI,CAAC,IAAI,8GAA8G;iBACpI,CAAC,CAAC;QACP,CAAC;QACD,MAAM,aAAa,GAAG;YACpB,GAAG,MAAM;YACT,GAAG,IAAI,CAAC,KAAK;iBACV,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,YAAY,IAAI,CAAC,CAAC,UAAU,KAAK,SAAS,CAAC;iBAC3D,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAA,qCAAmB,EAAC,CAAC,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC;SAC5D,CAAC;QACF,IAAI,CAAC,iBAAiB,GAAG,aAAa;aACnC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,cAAc,CAAC;aACxC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAA,uCAAmB,EAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;QAC/D,IAAI,CAAC,SAAS,GAAG,IAAA,oCAAe,EAC9B,IAAI,CAAC,KAAK,EACV,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,SAAS,EAAE,OAAO,CAAC,QAAQ,CAAC,EAC/C,OAAO,CAAC,QAAQ,CACjB,CAAC;QACF,IAAI,CAAC,QAAQ;YAAE,OAAO,IAAI,CAAC;QAC3B,IAAI,GAAG,CAAC,KAAK,KAAK,CAAC;YAAE,IAAI,CAAC,QAAQ,GAAG,IAAA,oCAAkB,EAAC,CAAC,EAAE,CAAC,EAAE,IAAI,CAAC,CAAC;aAC/D,CAAC;YACJ,IAAI,CAAC;gBACH,MAAM,KAAK,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC;gBAChC,MAAM,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,QAAQ,EAAE,SAAS,EAAE,EAAE,OAAO,CAAC,CAAC;gBACtE,MAAM,YAAY,GAAG,CAAC,WAAW,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC,GAAG,IAAI,CAAC;gBACxD,MAAM,KAAK,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;gBAC5B,MAAM,UAAU,GAAG,KAAK,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,MAAM,EAAE,KAAK,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;gBAC1F,IAAI,CAAC,QAAQ,GAAG,IAAA,oCAAkB,EAAC,GAAG,CAAC,KAAK,EAAE,YAAY,EAAE,UAAU,CAAC,CAAC;YAC1E,CAAC;YAAC,MAAM,CAAC;gBACP,IAAI,MAAM,EAAE,OAAO;oBAAE,MAAM,CAAC,cAAc,EAAE,CAAC;gBAC7C,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;oBACjB,IAAI,EAAE,sBAAsB;oBAC5B,OAAO,EAAE,wCAAwC;iBAClD,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;CACF,CAAA;AAjPY,8CAAiB;4BAAjB,iBAAiB;IAD7B,IAAA,mBAAU,GAAE;IAGR,WAAA,IAAA,eAAM,EAAC,mCAAe,CAAC,CAAA;6CACC,oDAAuB;QACvB,qCAAgB;QACb,0DAA0B;GAL7C,iBAAiB,CAiP7B;AAED,MAAM,iBAAiB,GAAG,wEAAwE,CAAC;AAEnG,SAAS,WAAW,CAClB,IAAgB,EAChB,IAAuB,EACvB,IAAY,EACZ,OAAe;IAEf,OAAO;QACL,GAAG,IAAI;QACP,YAAY,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE;QACnE,KAAK,EAAE,EAAE;QACT,UAAU,EAAE,IAAI;KACjB,CAAC;AACJ,CAAC;AACD,SAAS,SAAS;IAChB,OAAO,sBAAQ,CAAC,IAAI,CAClB,CAAC,QAAQ,CAAC;QACR,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,EAAE,GAAG,IAAI,CAAC,CAAC;QACtC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,EAAE,CAAC,EAAE;YAAE,MAAM,KAAK,CAAC;IAC5C,CAAC,CAAC,EAAE,CACL,CAAC;AACJ,CAAC"}

package/dist/server/modules/remotes/dtos/remote-probe.dto.d.ts

@@ -0,0 +1,49 @@
+import { z } from 'zod';
+export declare const ProbeAddressSchema: z.ZodObject<{
+    address: z.ZodString;
+    checkSsh: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+}, "strict", z.ZodTypeAny, {
+    address: string;
+    checkSsh: boolean;
+}, {
+    address: string;
+    checkSsh?: boolean | undefined;
+}>;
+export type ProbeAddressData = z.infer<typeof ProbeAddressSchema>;
+export type ProbeResultDto = {
+    kind: 'devchain';
+    baseUrl: string;
+    version: string | null;
+    versionMatches: boolean;
+    homePath: string | null;
+    homePathMatches: boolean | null;
+    remoteId: string | null;
+} | {
+    kind: 'installer';
+    bootstrapUrl: string;
+    state: string;
+    imageVersion: string | null;
+    supported: boolean;
+    remoteId: string | null;
+} | {
+    kind: 'nothing';
+    tried: string[];
+    sshReachable: boolean | null;
+};
+export interface RemoteReadinessDto {
+    syncthing: {
+        ok: boolean;
+        version: string | null;
+        message: string | null;
+    };
+    identity: {
+        ok: boolean;
+        user: string;
+        homePath: string;
+        message: string | null;
+    };
+    docker: {
+        ok: boolean;
+        message: string | null;
+    };
+}

package/dist/server/modules/remotes/dtos/remote-probe.dto.js

@@ -0,0 +1,11 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ProbeAddressSchema = void 0;
+const zod_1 = require("zod");
+exports.ProbeAddressSchema = zod_1.z
+    .object({
+    address: zod_1.z.string().trim().min(1).max(2048),
+    checkSsh: zod_1.z.boolean().optional().default(true),
+})
+    .strict();
+//# sourceMappingURL=remote-probe.dto.js.map

package/dist/server/modules/remotes/dtos/remote-probe.dto.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"remote-probe.dto.js","sourceRoot":"","sources":["../../../../src/modules/remotes/dtos/remote-probe.dto.ts"],"names":[],"mappings":";;;AAAA,6BAAwB;AAEX,QAAA,kBAAkB,GAAG,OAAC;KAChC,MAAM,CAAC;IAEN,OAAO,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC;IAC3C,QAAQ,EAAE,OAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;CAC/C,CAAC;KACD,MAAM,EAAE,CAAC"}

package/dist/server/modules/remotes/dtos/remote.dto.d.ts

@@ -0,0 +1,75 @@
+import type { ProviderCliRuntimeReport } from '@devchain/shared';
+import type { DockerRuntime } from '../../core/controllers/docker-runtime';
+import { z } from 'zod';
+import type { Remote, RemoteOperationKind, RemoteOperationState } from '../../storage/models/domain.models';
+import type { HostStats } from '../../core/models/host-stats.model';
+import type { HostEnvOverrideEntry } from '../host/host-env-override-report';
+export declare const BASE_URL_MESSAGE = "baseUrl must be https://host[:port] with no path";
+export declare function normalizeRemoteBaseUrl(value: string): string | null;
+export declare const REMOTE_NAME_MAX_LENGTH = 128;
+export declare const RemoteApiKeySchema: z.ZodString;
+export declare const CERTIFICATE_FINGERPRINT_MESSAGE = "Enter the SHA-256 fingerprint of the VM certificate: 64 hex characters, with or without colons.";
+export declare function parseCertificateFingerprint(value: string): string | null;
+export declare const CertificateFingerprintSchema: z.ZodEffects<z.ZodString, string, string>;
+export declare const CreateRemoteSchema: z.ZodObject<{
+    name: z.ZodString;
+    baseUrl: z.ZodEffects<z.ZodString, string, string>;
+    kind: z.ZodDefault<z.ZodOptional<z.ZodLiteral<"address">>>;
+    apiKey: z.ZodOptional<z.ZodString>;
+    certificateFingerprint: z.ZodEffects<z.ZodString, string, string>;
+}, "strict", z.ZodTypeAny, {
+    name: string;
+    kind: "address";
+    baseUrl: string;
+    certificateFingerprint: string;
+    apiKey?: string | undefined;
+}, {
+    name: string;
+    baseUrl: string;
+    certificateFingerprint: string;
+    kind?: "address" | undefined;
+    apiKey?: string | undefined;
+}>;
+export type CreateRemoteData = z.infer<typeof CreateRemoteSchema>;
+export declare const UpdateRemoteNameSchema: z.ZodObject<{
+    name: z.ZodString;
+}, "strict", z.ZodTypeAny, {
+    name: string;
+}, {
+    name: string;
+}>;
+export type UpdateRemoteNameData = z.infer<typeof UpdateRemoteNameSchema>;
+export interface RemoteListItemDto extends Remote {
+    cliVersions?: Record<string, string> | null;
+    providerClis?: ProviderCliRuntimeReport | null;
+    docker?: DockerRuntime;
+    online: boolean;
+    apiKeyRejected?: boolean;
+    version: string | null;
+    versionMatches: boolean;
+    uid: number | null;
+    gid: number | null;
+    providerEnvOverrides?: HostEnvOverrideEntry[] | null;
+    stats: HostStats | null;
+    lastSeenAt: string | null;
+    powerState?: 'running' | 'stopped' | 'unknown';
+    homePath: string | null;
+    homePathMatches: boolean | null;
+    lastOperation: RemoteLastOperationDto | null;
+    userName: string | null;
+    logins: RemoteLoginsDto | null;
+}
+export interface RemoteLastOperationDto {
+    id: string;
+    kind: RemoteOperationKind;
+    state: RemoteOperationState;
+    updatedAt: string;
+}
+export type RemoteLoginsDto = Record<string, {
+    choice: 'reuse' | 'generate' | 'skip';
+    entryIds: string[];
+}>;
+export interface RemoteStatsHistoryDto {
+    intervalMs: number;
+    samples: HostStats[];
+}

package/dist/server/modules/remotes/dtos/remote.dto.js

@@ -0,0 +1,69 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.UpdateRemoteNameSchema = exports.CreateRemoteSchema = exports.CertificateFingerprintSchema = exports.CERTIFICATE_FINGERPRINT_MESSAGE = exports.RemoteApiKeySchema = exports.REMOTE_NAME_MAX_LENGTH = exports.BASE_URL_MESSAGE = void 0;
+exports.normalizeRemoteBaseUrl = normalizeRemoteBaseUrl;
+exports.parseCertificateFingerprint = parseCertificateFingerprint;
+const zod_1 = require("zod");
+exports.BASE_URL_MESSAGE = 'baseUrl must be https://host[:port] with no path';
+function normalizeRemoteBaseUrl(value) {
+    let url;
+    try {
+        url = new URL(value.trim());
+    }
+    catch {
+        return null;
+    }
+    if (url.protocol !== 'https:')
+        return null;
+    if (url.username || url.password)
+        return null;
+    if (url.pathname !== '/' || url.search || url.hash)
+        return null;
+    return url.origin;
+}
+exports.REMOTE_NAME_MAX_LENGTH = 128;
+exports.RemoteApiKeySchema = zod_1.z
+    .string()
+    .regex(/^dck_[A-Za-z0-9_-]{43}$/, 'Enter a valid VM API key.');
+exports.CERTIFICATE_FINGERPRINT_MESSAGE = 'Enter the SHA-256 fingerprint of the VM certificate: 64 hex characters, with or without colons.';
+function parseCertificateFingerprint(value) {
+    const hex = value
+        .trim()
+        .replace(/^(?:sha-?256\s+fingerprint\s*=|certificate\s+fingerprint\s*\(sha-?256\)\s*:)\s*/i, '')
+        .replace(/:/g, '')
+        .toUpperCase();
+    return /^[0-9A-F]{64}$/.test(hex) ? hex : null;
+}
+exports.CertificateFingerprintSchema = zod_1.z
+    .string()
+    .max(256)
+    .transform((value, ctx) => {
+    const fingerprint = parseCertificateFingerprint(value);
+    if (fingerprint === null) {
+        ctx.addIssue({ code: zod_1.z.ZodIssueCode.custom, message: exports.CERTIFICATE_FINGERPRINT_MESSAGE });
+        return zod_1.z.NEVER;
+    }
+    return fingerprint;
+});
+exports.CreateRemoteSchema = zod_1.z
+    .object({
+    name: zod_1.z.string().trim().min(1).max(exports.REMOTE_NAME_MAX_LENGTH),
+    baseUrl: zod_1.z.string().transform((value, ctx) => {
+        const origin = normalizeRemoteBaseUrl(value);
+        if (origin === null) {
+            ctx.addIssue({ code: zod_1.z.ZodIssueCode.custom, message: exports.BASE_URL_MESSAGE });
+            return zod_1.z.NEVER;
+        }
+        return origin;
+    }),
+    kind: zod_1.z.literal('address').optional().default('address'),
+    apiKey: exports.RemoteApiKeySchema.optional(),
+    certificateFingerprint: exports.CertificateFingerprintSchema,
+})
+    .strict();
+exports.UpdateRemoteNameSchema = zod_1.z
+    .object({
+    name: zod_1.z.string().trim().min(1).max(exports.REMOTE_NAME_MAX_LENGTH),
+})
+    .strict();
+//# sourceMappingURL=remote.dto.js.map

package/dist/server/modules/remotes/dtos/remote.dto.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"remote.dto.js","sourceRoot":"","sources":["../../../../src/modules/remotes/dtos/remote.dto.ts"],"names":[],"mappings":";;;AAoBA,wDAWC;AAqBD,kEAOC;AAzDD,6BAAwB;AASX,QAAA,gBAAgB,GAAG,kDAAkD,CAAC;AASnF,SAAgB,sBAAsB,CAAC,KAAa;IAClD,IAAI,GAAQ,CAAC;IACb,IAAI,CAAC;QACH,GAAG,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;IAC9B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC3C,IAAI,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC9C,IAAI,GAAG,CAAC,QAAQ,KAAK,GAAG,IAAI,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,IAAI;QAAE,OAAO,IAAI,CAAC;IAChE,OAAO,GAAG,CAAC,MAAM,CAAC;AACpB,CAAC;AAGY,QAAA,sBAAsB,GAAG,GAAG,CAAC;AAI7B,QAAA,kBAAkB,GAAG,OAAC;KAChC,MAAM,EAAE;KACR,KAAK,CAAC,yBAAyB,EAAE,2BAA2B,CAAC,CAAC;AAEpD,QAAA,+BAA+B,GAC1C,iGAAiG,CAAC;AASpG,SAAgB,2BAA2B,CAAC,KAAa;IACvD,MAAM,GAAG,GAAG,KAAK;SACd,IAAI,EAAE;SACN,OAAO,CAAC,kFAAkF,EAAE,EAAE,CAAC;SAC/F,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC;SACjB,WAAW,EAAE,CAAC;IACjB,OAAO,gBAAgB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;AACjD,CAAC;AAEY,QAAA,4BAA4B,GAAG,OAAC;KAC1C,MAAM,EAAE;KACR,GAAG,CAAC,GAAG,CAAC;KACR,SAAS,CAAC,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;IACxB,MAAM,WAAW,GAAG,2BAA2B,CAAC,KAAK,CAAC,CAAC;IACvD,IAAI,WAAW,KAAK,IAAI,EAAE,CAAC;QACzB,GAAG,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,OAAC,CAAC,YAAY,CAAC,MAAM,EAAE,OAAO,EAAE,uCAA+B,EAAE,CAAC,CAAC;QACxF,OAAO,OAAC,CAAC,KAAK,CAAC;IACjB,CAAC;IACD,OAAO,WAAW,CAAC;AACrB,CAAC,CAAC,CAAC;AAEQ,QAAA,kBAAkB,GAAG,OAAC;KAChC,MAAM,CAAC;IACN,IAAI,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,8BAAsB,CAAC;IAC1D,OAAO,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,SAAS,CAAC,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;QAC3C,MAAM,MAAM,GAAG,sBAAsB,CAAC,KAAK,CAAC,CAAC;QAC7C,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;YACpB,GAAG,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,OAAC,CAAC,YAAY,CAAC,MAAM,EAAE,OAAO,EAAE,wBAAgB,EAAE,CAAC,CAAC;YACzE,OAAO,OAAC,CAAC,KAAK,CAAC;QACjB,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC,CAAC;IAEF,IAAI,EAAE,OAAC,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,SAAS,CAAC;IACxD,MAAM,EAAE,0BAAkB,CAAC,QAAQ,EAAE;IAErC,sBAAsB,EAAE,oCAA4B;CACrD,CAAC;KACD,MAAM,EAAE,CAAC;AAIC,QAAA,sBAAsB,GAAG,OAAC;KACpC,MAAM,CAAC;IACN,IAAI,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,8BAAsB,CAAC;CAC3D,CAAC;KACD,MAAM,EAAE,CAAC"}

package/dist/server/modules/remotes/home-identity.d.ts

@@ -0,0 +1,11 @@
+export interface HomeIdentity {
+    user: string;
+    homePath: string;
+    uid: number | null;
+    gid: number | null;
+}
+export declare function homeIdentity(): HomeIdentity;
+export declare function matchesHomePath(homePath: string | null): boolean | null;
+export declare function assertClaimableIdentity(): HomeIdentity;
+export declare const CLAIM_IDENTITY_KINDS: readonly ["claim", "create_vm", "reset_vm", "install_host", "update_logins"];
+export declare function claimIdentityMismatch(kind: string, details: Record<string, unknown>): string | null;

package/dist/server/modules/remotes/home-identity.js

@@ -0,0 +1,59 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.CLAIM_IDENTITY_KINDS = void 0;
+exports.homeIdentity = homeIdentity;
+exports.matchesHomePath = matchesHomePath;
+exports.assertClaimableIdentity = assertClaimableIdentity;
+exports.claimIdentityMismatch = claimIdentityMismatch;
+const node_os_1 = require("node:os");
+const error_types_1 = require("../../common/errors/error-types");
+const claim_operation_1 = require("./operations/claim.operation");
+function homeIdentity() {
+    let user = process.env.USER ?? 'devchain';
+    try {
+        user = (0, node_os_1.userInfo)().username || user;
+    }
+    catch {
+    }
+    return {
+        user,
+        homePath: (0, node_os_1.homedir)(),
+        uid: process.getuid?.() ?? null,
+        gid: process.getgid?.() ?? null,
+    };
+}
+function matchesHomePath(homePath) {
+    return homePath === null ? null : homePath === (0, node_os_1.homedir)();
+}
+function assertClaimableIdentity() {
+    const identity = homeIdentity();
+    if (!claim_operation_1.USER_NAME.test(identity.user)) {
+        throw new error_types_1.ValidationError(`This PC's user name "${identity.user}" cannot claim a VM: it must start with a lowercase letter or underscore and use lowercase letters, digits, - or _, with at most 32 characters.`, { reason: 'claim_user_name_invalid' });
+    }
+    if (!claim_operation_1.HOME_ROOTS.some((root) => identity.homePath.startsWith(root))) {
+        throw new error_types_1.ValidationError(`This PC's home folder "${identity.homePath}" cannot claim a VM: it must be under ${claim_operation_1.HOME_ROOTS.join(', ')}.`, { reason: 'claim_home_path_invalid' });
+    }
+    return identity;
+}
+exports.CLAIM_IDENTITY_KINDS = [
+    'claim',
+    'create_vm',
+    'reset_vm',
+    'install_host',
+    'update_logins',
+];
+function claimIdentityMismatch(kind, details) {
+    if (!exports.CLAIM_IDENTITY_KINDS.includes(kind))
+        return null;
+    const persistedUser = typeof details.userName === 'string' ? details.userName : null;
+    const persistedHome = typeof details.homePath === 'string' ? details.homePath : null;
+    if (!persistedUser || !persistedHome)
+        return null;
+    const identity = homeIdentity();
+    if (persistedUser === identity.user && persistedHome === identity.homePath)
+        return null;
+    return (`This operation claims the VM as "${persistedUser}" with home "${persistedHome}", ` +
+        `but this PC is "${identity.user}" with home "${identity.homePath}". ` +
+        'The VM identity is locked to this PC; cancel this operation and start a new one.');
+}
+//# sourceMappingURL=home-identity.js.map

package/dist/server/modules/remotes/home-identity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"home-identity.js","sourceRoot":"","sources":["../../../src/modules/remotes/home-identity.ts"],"names":[],"mappings":";;;AAkBA,oCAaC;AAGD,0CAEC;AAMD,0DAeC;AAkBD,sDAeC;AA1FD,qCAA4C;AAC5C,iEAAkE;AAClE,kEAAqE;AAgBrE,SAAgB,YAAY;IAC1B,IAAI,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,UAAU,CAAC;IAC1C,IAAI,CAAC;QACH,IAAI,GAAG,IAAA,kBAAQ,GAAE,CAAC,QAAQ,IAAI,IAAI,CAAC;IACrC,CAAC;IAAC,MAAM,CAAC;IAET,CAAC;IACD,OAAO;QACL,IAAI;QACJ,QAAQ,EAAE,IAAA,iBAAO,GAAE;QACnB,GAAG,EAAE,OAAO,CAAC,MAAM,EAAE,EAAE,IAAI,IAAI;QAC/B,GAAG,EAAE,OAAO,CAAC,MAAM,EAAE,EAAE,IAAI,IAAI;KAChC,CAAC;AACJ,CAAC;AAGD,SAAgB,eAAe,CAAC,QAAuB;IACrD,OAAO,QAAQ,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,KAAK,IAAA,iBAAO,GAAE,CAAC;AAC3D,CAAC;AAMD,SAAgB,uBAAuB;IACrC,MAAM,QAAQ,GAAG,YAAY,EAAE,CAAC;IAChC,IAAI,CAAC,2BAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACnC,MAAM,IAAI,6BAAe,CACvB,wBAAwB,QAAQ,CAAC,IAAI,iJAAiJ,EACtL,EAAE,MAAM,EAAE,yBAAyB,EAAE,CACtC,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,4BAAU,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;QACnE,MAAM,IAAI,6BAAe,CACvB,0BAA0B,QAAQ,CAAC,QAAQ,yCAAyC,4BAAU,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAC5G,EAAE,MAAM,EAAE,yBAAyB,EAAE,CACtC,CAAC;IACJ,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAGY,QAAA,oBAAoB,GAAG;IAClC,OAAO;IACP,WAAW;IACX,UAAU;IACV,cAAc;IACd,eAAe;CACP,CAAC;AASX,SAAgB,qBAAqB,CACnC,IAAY,EACZ,OAAgC;IAEhC,IAAI,CAAE,4BAA0C,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IAC7E,MAAM,aAAa,GAAG,OAAO,OAAO,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC;IACrF,MAAM,aAAa,GAAG,OAAO,OAAO,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC;IACrF,IAAI,CAAC,aAAa,IAAI,CAAC,aAAa;QAAE,OAAO,IAAI,CAAC;IAClD,MAAM,QAAQ,GAAG,YAAY,EAAE,CAAC;IAChC,IAAI,aAAa,KAAK,QAAQ,CAAC,IAAI,IAAI,aAAa,KAAK,QAAQ,CAAC,QAAQ;QAAE,OAAO,IAAI,CAAC;IACxF,OAAO,CACL,oCAAoC,aAAa,gBAAgB,aAAa,KAAK;QACnF,mBAAmB,QAAQ,CAAC,IAAI,gBAAgB,QAAQ,CAAC,QAAQ,KAAK;QACtE,kFAAkF,CACnF,CAAC;AACJ,CAAC"}

package/dist/server/modules/remotes/host/host-api-key-io.adapter.d.ts

@@ -0,0 +1,9 @@
+import type { INestApplicationContext } from '@nestjs/common';
+import { IoAdapter } from '@nestjs/platform-socket.io';
+import type { Server, ServerOptions } from 'socket.io';
+import { HostApiKeyService } from './host-api-key.service';
+export declare class HostApiKeyIoAdapter extends IoAdapter {
+    private readonly keys;
+    constructor(app: INestApplicationContext, keys: HostApiKeyService);
+    createIOServer(port: number, options?: Partial<ServerOptions>): Server;
+}

package/dist/server/modules/remotes/host/host-api-key-io.adapter.js

@@ -0,0 +1,30 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.HostApiKeyIoAdapter = void 0;
+const platform_socket_io_1 = require("@nestjs/platform-socket.io");
+const host_api_key_1 = require("../host-api-key");
+class HostApiKeyIoAdapter extends platform_socket_io_1.IoAdapter {
+    keys;
+    constructor(app, keys) {
+        super(app);
+        this.keys = keys;
+    }
+    createIOServer(port, options) {
+        return super.createIOServer(port, {
+            ...options,
+            allowRequest: (request, callback) => {
+                if (!this.keys.allows(request, 'socket')) {
+                    callback(host_api_key_1.HOST_API_KEY_REJECTED, false);
+                }
+                else if (options?.allowRequest) {
+                    options.allowRequest(request, callback);
+                }
+                else {
+                    callback(null, true);
+                }
+            },
+        });
+    }
+}
+exports.HostApiKeyIoAdapter = HostApiKeyIoAdapter;
+//# sourceMappingURL=host-api-key-io.adapter.js.map

package/dist/server/modules/remotes/host/host-api-key-io.adapter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"host-api-key-io.adapter.js","sourceRoot":"","sources":["../../../../src/modules/remotes/host/host-api-key-io.adapter.ts"],"names":[],"mappings":";;;AACA,mEAAuD;AAEvD,kDAAwD;AAGxD,MAAa,mBAAoB,SAAQ,8BAAS;IAG7B;IAFnB,YACE,GAA4B,EACX,IAAuB;QAExC,KAAK,CAAC,GAAG,CAAC,CAAC;QAFM,SAAI,GAAJ,IAAI,CAAmB;IAG1C,CAAC;IAED,cAAc,CAAC,IAAY,EAAE,OAAgC;QAC3D,OAAO,KAAK,CAAC,cAAc,CAAC,IAAI,EAAE;YAChC,GAAG,OAAO;YACV,YAAY,EAAE,CAAC,OAAO,EAAE,QAAQ,EAAE,EAAE;gBAClC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,QAAQ,CAAC,EAAE,CAAC;oBACzC,QAAQ,CAAC,oCAAqB,EAAE,KAAK,CAAC,CAAC;gBACzC,CAAC;qBAAM,IAAI,OAAO,EAAE,YAAY,EAAE,CAAC;oBACjC,OAAO,CAAC,YAAY,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;gBAC1C,CAAC;qBAAM,CAAC;oBACN,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;gBACvB,CAAC;YACH,CAAC;SAC+B,CAAC,CAAC;IACtC,CAAC;CACF;AAtBD,kDAsBC"}

package/dist/server/modules/remotes/host/host-api-key.controller.d.ts

@@ -0,0 +1,7 @@
+import type { FastifyRequest } from 'fastify';
+import { HostApiKeyService } from './host-api-key.service';
+export declare class HostApiKeyController {
+    private readonly keys;
+    constructor(keys: HostApiKeyService);
+    rotate(request: FastifyRequest, body: unknown): void;
+}

package/dist/server/modules/remotes/host/host-api-key.controller.js

@@ -0,0 +1,51 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.HostApiKeyController = void 0;
+const common_1 = require("@nestjs/common");
+const swagger_1 = require("@nestjs/swagger");
+const zod_1 = require("zod");
+const host_api_key_service_1 = require("./host-api-key.service");
+const RotationSchema = zod_1.z.object({ sha256: zod_1.z.string().regex(/^[a-f0-9]{64}$/) }).strict();
+let HostApiKeyController = class HostApiKeyController {
+    keys;
+    constructor(keys) {
+        this.keys = keys;
+    }
+    rotate(request, body) {
+        const parsed = RotationSchema.safeParse(body);
+        if (!parsed.success)
+            throw new common_1.BadRequestException('Expected a lowercase SHA-256 digest');
+        this.keys.rotate(request.raw, parsed.data.sha256);
+    }
+};
+exports.HostApiKeyController = HostApiKeyController;
+__decorate([
+    (0, common_1.Post)(),
+    (0, common_1.HttpCode)(204),
+    (0, swagger_1.ApiOperation)({ summary: 'Replace the host API key digest using the current key' }),
+    (0, swagger_1.ApiResponse)({ status: 204, description: 'Host API key replaced' }),
+    (0, swagger_1.ApiResponse)({ status: 401, description: 'HOST_API_KEY_REJECTED' }),
+    __param(0, (0, common_1.Req)()),
+    __param(1, (0, common_1.Body)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object, Object]),
+    __metadata("design:returntype", void 0)
+], HostApiKeyController.prototype, "rotate", null);
+exports.HostApiKeyController = HostApiKeyController = __decorate([
+    (0, swagger_1.ApiTags)('host'),
+    (0, common_1.Controller)('api/host/api-key'),
+    __metadata("design:paramtypes", [host_api_key_service_1.HostApiKeyService])
+], HostApiKeyController);
+//# sourceMappingURL=host-api-key.controller.js.map

package/dist/server/modules/remotes/host/host-api-key.controller.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"host-api-key.controller.js","sourceRoot":"","sources":["../../../../src/modules/remotes/host/host-api-key.controller.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,2CAA4F;AAC5F,6CAAqE;AACrE,6BAAwB;AAExB,iEAA2D;AAE3D,MAAM,cAAc,GAAG,OAAC,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,gBAAgB,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;AAIlF,IAAM,oBAAoB,GAA1B,MAAM,oBAAoB;IACF;IAA7B,YAA6B,IAAuB;QAAvB,SAAI,GAAJ,IAAI,CAAmB;IAAG,CAAC;IAOxD,MAAM,CAAQ,OAAuB,EAAU,IAAa;QAC1D,MAAM,MAAM,GAAG,cAAc,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QAC9C,IAAI,CAAC,MAAM,CAAC,OAAO;YAAE,MAAM,IAAI,4BAAmB,CAAC,qCAAqC,CAAC,CAAC;QAC1F,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACpD,CAAC;CACF,CAAA;AAbY,oDAAoB;AAQ/B;IALC,IAAA,aAAI,GAAE;IACN,IAAA,iBAAQ,EAAC,GAAG,CAAC;IACb,IAAA,sBAAY,EAAC,EAAE,OAAO,EAAE,uDAAuD,EAAE,CAAC;IAClF,IAAA,qBAAW,EAAC,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,uBAAuB,EAAE,CAAC;IAClE,IAAA,qBAAW,EAAC,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,uBAAuB,EAAE,CAAC;IAC3D,WAAA,IAAA,YAAG,GAAE,CAAA;IAA2B,WAAA,IAAA,aAAI,GAAE,CAAA;;;;kDAI7C;+BAZU,oBAAoB;IAFhC,IAAA,iBAAO,EAAC,MAAM,CAAC;IACf,IAAA,mBAAU,EAAC,kBAAkB,CAAC;qCAEM,wCAAiB;GADzC,oBAAoB,CAahC"}

package/dist/server/modules/remotes/host/host-api-key.module.d.ts

@@ -0,0 +1,10 @@
+import { OnModuleInit } from '@nestjs/common';
+import { HttpAdapterHost } from '@nestjs/core';
+import { HostApiKeyService } from './host-api-key.service';
+export declare class HostApiKeyModule implements OnModuleInit {
+    private readonly adapterHost;
+    private readonly keys;
+    private registered;
+    constructor(adapterHost: HttpAdapterHost, keys: HostApiKeyService);
+    onModuleInit(): void;
+}

package/dist/server/modules/remotes/host/host-api-key.module.js

@@ -0,0 +1,48 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.HostApiKeyModule = void 0;
+const common_1 = require("@nestjs/common");
+const core_1 = require("@nestjs/core");
+const host_api_key_service_1 = require("./host-api-key.service");
+const host_api_key_controller_1 = require("./host-api-key.controller");
+let HostApiKeyModule = class HostApiKeyModule {
+    adapterHost;
+    keys;
+    registered = false;
+    constructor(adapterHost, keys) {
+        this.adapterHost = adapterHost;
+        this.keys = keys;
+    }
+    onModuleInit() {
+        const adapter = this.adapterHost.httpAdapter;
+        if (this.registered || !adapter || adapter.getType() !== 'fastify')
+            return;
+        adapter.getInstance().addHook('onRequest', async (request, reply) => {
+            const rotation = request.method === 'POST' && request.url.split('?', 1)[0] === '/api/host/api-key';
+            if (!this.keys.allows(request.raw, 'http', rotation)) {
+                return reply.code(401).send(host_api_key_service_1.HOST_API_KEY_REJECTION);
+            }
+        });
+        this.registered = true;
+    }
+};
+exports.HostApiKeyModule = HostApiKeyModule;
+exports.HostApiKeyModule = HostApiKeyModule = __decorate([
+    (0, common_1.Module)({
+        controllers: [host_api_key_controller_1.HostApiKeyController],
+        providers: [host_api_key_service_1.HostApiKeyService],
+        exports: [host_api_key_service_1.HostApiKeyService],
+    }),
+    __metadata("design:paramtypes", [core_1.HttpAdapterHost,
+        host_api_key_service_1.HostApiKeyService])
+], HostApiKeyModule);
+//# sourceMappingURL=host-api-key.module.js.map

package/dist/server/modules/remotes/host/host-api-key.module.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"host-api-key.module.js","sourceRoot":"","sources":["../../../../src/modules/remotes/host/host-api-key.module.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,2CAAsD;AACtD,uCAA+C;AAE/C,iEAAmF;AACnF,uEAAiE;AAO1D,IAAM,gBAAgB,GAAtB,MAAM,gBAAgB;IAIR;IACA;IAJX,UAAU,GAAG,KAAK,CAAC;IAE3B,YACmB,WAA4B,EAC5B,IAAuB;QADvB,gBAAW,GAAX,WAAW,CAAiB;QAC5B,SAAI,GAAJ,IAAI,CAAmB;IACvC,CAAC;IAEJ,YAAY;QACV,MAAM,OAAO,GAAG,IAAI,CAAC,WAAW,CAAC,WAAW,CAAC;QAC7C,IAAI,IAAI,CAAC,UAAU,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,OAAO,EAAE,KAAK,SAAS;YAAE,OAAO;QAC3E,OAAO,CAAC,WAAW,EAAmB,CAAC,OAAO,CAAC,WAAW,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;YACnF,MAAM,QAAQ,GACZ,OAAO,CAAC,MAAM,KAAK,MAAM,IAAI,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,mBAAmB,CAAC;YACpF,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,CAAC;gBACrD,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,6CAAsB,CAAC,CAAC;YACtD,CAAC;QACH,CAAC,CAAC,CAAC;QACH,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC;IACzB,CAAC;CACF,CAAA;AApBY,4CAAgB;2BAAhB,gBAAgB;IAL5B,IAAA,eAAM,EAAC;QACN,WAAW,EAAE,CAAC,8CAAoB,CAAC;QACnC,SAAS,EAAE,CAAC,wCAAiB,CAAC;QAC9B,OAAO,EAAE,CAAC,wCAAiB,CAAC;KAC7B,CAAC;qCAKgC,sBAAe;QACtB,wCAAiB;GAL/B,gBAAgB,CAoB5B"}

package/dist/server/modules/remotes/host/host-api-key.service.d.ts

@@ -0,0 +1,17 @@
+import type { IncomingMessage } from 'node:http';
+export declare const HOST_API_KEY_REJECTION: {
+    statusCode: number;
+    code: string;
+    message: string;
+};
+export declare class HostApiKeyService {
+    private cachedKey?;
+    allows(request: IncomingMessage, transport: 'http' | 'socket', requireKey?: boolean): boolean;
+    rotate(request: IncomingMessage, sha256: string): void;
+    private holdsKey;
+    private logRejection;
+    private path;
+    private readClaim;
+    private matches;
+    private readDigest;
+}