devchain-cli 0.23.3 → 0.24.0

package/dist/server/modules/remotes/host/host-env-override-report.d.ts

@@ -0,0 +1,44 @@
+import { z } from 'zod';
+import type { ListResult } from '../../storage/interfaces/storage.interface';
+import type { EnvScopesMap, ProfileProviderConfig, Project, Provider } from '../../storage/models/domain.models';
+export type HostEnvOverrideSource = 'provider-env' | 'provider-env-scoped' | 'provider-config';
+export interface HostEnvOverrideEntry {
+    key: string;
+    source: HostEnvOverrideSource;
+    provider: string;
+    projects?: string[];
+    config?: string;
+}
+export declare const HostEnvOverridesSchema: z.ZodArray<z.ZodObject<{
+    key: z.ZodString;
+    source: z.ZodEnum<["provider-env", "provider-env-scoped", "provider-config"]>;
+    provider: z.ZodString;
+    projects: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+    config: z.ZodOptional<z.ZodString>;
+}, "strip", z.ZodTypeAny, {
+    provider: string;
+    source: "provider-env" | "provider-env-scoped" | "provider-config";
+    key: string;
+    projects?: string[] | undefined;
+    config?: string | undefined;
+}, {
+    provider: string;
+    source: "provider-env" | "provider-env-scoped" | "provider-config";
+    key: string;
+    projects?: string[] | undefined;
+    config?: string | undefined;
+}>, "many">;
+export interface HostEnvOverrideReportStorage {
+    listProviders(): Promise<ListResult<Provider>>;
+    listEnvScopesByProviderIds(providerIds: string[]): Map<string, EnvScopesMap>;
+    listAllProfileProviderConfigs(): Promise<ProfileProviderConfig[]>;
+    listProjects(): Promise<ListResult<Project>>;
+}
+export declare function buildHostEnvOverrideReport(input: {
+    hostEnv: Record<string, string>;
+    providers: Provider[];
+    envScopesByProvider: Map<string, EnvScopesMap>;
+    configs: ProfileProviderConfig[];
+    projects: Project[];
+}): HostEnvOverrideEntry[];
+export declare function readHostEnvOverrideReport(storage: HostEnvOverrideReportStorage): Promise<HostEnvOverrideEntry[]>;

package/dist/server/modules/remotes/host/host-env-override-report.js

@@ -0,0 +1,73 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.HostEnvOverridesSchema = void 0;
+exports.buildHostEnvOverrideReport = buildHostEnvOverrideReport;
+exports.readHostEnvOverrideReport = readHostEnvOverrideReport;
+const zod_1 = require("zod");
+const host_provider_auth_service_1 = require("./host-provider-auth.service");
+exports.HostEnvOverridesSchema = zod_1.z.array(zod_1.z.object({
+    key: zod_1.z.string(),
+    source: zod_1.z.enum(['provider-env', 'provider-env-scoped', 'provider-config']),
+    provider: zod_1.z.string(),
+    projects: zod_1.z.array(zod_1.z.string()).optional(),
+    config: zod_1.z.string().optional(),
+}));
+function buildHostEnvOverrideReport(input) {
+    const hostKeys = new Set(Object.keys(input.hostEnv));
+    if (hostKeys.size === 0)
+        return [];
+    const projectName = new Map(input.projects.map((project) => [project.id, project.name]));
+    const providerName = new Map(input.providers.map((provider) => [provider.id, provider.name]));
+    const entries = [];
+    for (const provider of input.providers) {
+        if (!provider.env)
+            continue;
+        const scopes = input.envScopesByProvider.get(provider.id) ?? {};
+        for (const key of Object.keys(provider.env)) {
+            if (!hostKeys.has(key))
+                continue;
+            const scopedTo = scopes[key];
+            if (!scopedTo || scopedTo.length === 0) {
+                entries.push({ key, source: 'provider-env', provider: provider.name });
+            }
+            else {
+                entries.push({
+                    key,
+                    source: 'provider-env-scoped',
+                    provider: provider.name,
+                    projects: [...new Set(scopedTo)].map((id) => projectName.get(id) ?? id).sort(),
+                });
+            }
+        }
+    }
+    for (const config of input.configs) {
+        if (!config.env)
+            continue;
+        for (const key of Object.keys(config.env)) {
+            if (!hostKeys.has(key))
+                continue;
+            entries.push({
+                key,
+                source: 'provider-config',
+                provider: config.providerName ?? providerName.get(config.providerId) ?? config.providerId,
+                config: config.name,
+            });
+        }
+    }
+    return entries.sort((a, b) => a.key.localeCompare(b.key) ||
+        a.source.localeCompare(b.source) ||
+        a.provider.localeCompare(b.provider));
+}
+async function readHostEnvOverrideReport(storage) {
+    const hostEnv = await (0, host_provider_auth_service_1.readHostEnvFile)();
+    if (Object.keys(hostEnv).length === 0)
+        return [];
+    const [{ items: providers }, { items: projects }, configs] = await Promise.all([
+        storage.listProviders(),
+        storage.listProjects(),
+        storage.listAllProfileProviderConfigs(),
+    ]);
+    const envScopesByProvider = storage.listEnvScopesByProviderIds(providers.map((p) => p.id));
+    return buildHostEnvOverrideReport({ hostEnv, providers, envScopesByProvider, configs, projects });
+}
+//# sourceMappingURL=host-env-override-report.js.map

package/dist/server/modules/remotes/host/host-env-override-report.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"host-env-override-report.js","sourceRoot":"","sources":["../../../../src/modules/remotes/host/host-env-override-report.ts"],"names":[],"mappings":";;;AA6CA,gEAiDC;AAQD,8DAaC;AAnHD,6BAAwB;AAQxB,6EAA+D;AAmBlD,QAAA,sBAAsB,GAAG,OAAC,CAAC,KAAK,CAC3C,OAAC,CAAC,MAAM,CAAC;IACP,GAAG,EAAE,OAAC,CAAC,MAAM,EAAE;IACf,MAAM,EAAE,OAAC,CAAC,IAAI,CAAC,CAAC,cAAc,EAAE,qBAAqB,EAAE,iBAAiB,CAAC,CAAC;IAC1E,QAAQ,EAAE,OAAC,CAAC,MAAM,EAAE;IACpB,QAAQ,EAAE,OAAC,CAAC,KAAK,CAAC,OAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IACxC,MAAM,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAC9B,CAAC,CACH,CAAC;AAUF,SAAgB,0BAA0B,CAAC,KAM1C;IACC,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;IACrD,IAAI,QAAQ,CAAC,IAAI,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IACnC,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACzF,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,EAAE,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAE9F,MAAM,OAAO,GAA2B,EAAE,CAAC;IAC3C,KAAK,MAAM,QAAQ,IAAI,KAAK,CAAC,SAAS,EAAE,CAAC;QACvC,IAAI,CAAC,QAAQ,CAAC,GAAG;YAAE,SAAS;QAC5B,MAAM,MAAM,GAAG,KAAK,CAAC,mBAAmB,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC;QAChE,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YAC5C,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC;gBAAE,SAAS;YACjC,MAAM,QAAQ,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;YAC7B,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACvC,OAAO,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,cAAc,EAAE,QAAQ,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC;YACzE,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC,IAAI,CAAC;oBACX,GAAG;oBACH,MAAM,EAAE,qBAAqB;oBAC7B,QAAQ,EAAE,QAAQ,CAAC,IAAI;oBACvB,QAAQ,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE;iBAC/E,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IACD,KAAK,MAAM,MAAM,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;QACnC,IAAI,CAAC,MAAM,CAAC,GAAG;YAAE,SAAS;QAC1B,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;YAC1C,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC;gBAAE,SAAS;YACjC,OAAO,CAAC,IAAI,CAAC;gBACX,GAAG;gBACH,MAAM,EAAE,iBAAiB;gBACzB,QAAQ,EAAE,MAAM,CAAC,YAAY,IAAI,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC,IAAI,MAAM,CAAC,UAAU;gBACzF,MAAM,EAAE,MAAM,CAAC,IAAI;aACpB,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,OAAO,OAAO,CAAC,IAAI,CACjB,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CACP,CAAC,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,GAAG,CAAC;QAC1B,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,MAAM,CAAC;QAChC,CAAC,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC,CAAC,QAAQ,CAAC,CACvC,CAAC;AACJ,CAAC;AAQM,KAAK,UAAU,yBAAyB,CAC7C,OAAqC;IAErC,MAAM,OAAO,GAAG,MAAM,IAAA,4CAAe,GAAE,CAAC;IAExC,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IACjD,MAAM,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE,OAAO,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QAC7E,OAAO,CAAC,aAAa,EAAE;QACvB,OAAO,CAAC,YAAY,EAAE;QACtB,OAAO,CAAC,6BAA6B,EAAE;KACxC,CAAC,CAAC;IACH,MAAM,mBAAmB,GAAG,OAAO,CAAC,0BAA0B,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IAC3F,OAAO,0BAA0B,CAAC,EAAE,OAAO,EAAE,SAAS,EAAE,mBAAmB,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,CAAC;AACpG,CAAC"}

package/dist/server/modules/remotes/host/host-helper.service.d.ts

@@ -0,0 +1,59 @@
+import { z } from 'zod';
+import { ProcessExecutor } from '../../terminal/services/process-executor/process-executor.port';
+export declare const HostUpdateStatusSchema: z.ZodObject<{
+    state: z.ZodEnum<["pending", "installing", "installing_clis", "restarting", "done", "failed"]>;
+    version: z.ZodString;
+    error: z.ZodOptional<z.ZodString>;
+    at: z.ZodString;
+}, "strip", z.ZodTypeAny, {
+    state: "installing" | "failed" | "done" | "pending" | "installing_clis" | "restarting";
+    at: string;
+    version: string;
+    error?: string | undefined;
+}, {
+    state: "installing" | "failed" | "done" | "pending" | "installing_clis" | "restarting";
+    at: string;
+    version: string;
+    error?: string | undefined;
+}>;
+export type HostUpdateStatus = z.infer<typeof HostUpdateStatusSchema>;
+export declare const HostDockerStatusSchema: z.ZodObject<{
+    jobId: z.ZodString;
+    state: z.ZodEnum<["pending", "installing", "restarting", "done", "failed"]>;
+    error: z.ZodOptional<z.ZodString>;
+    code: z.ZodOptional<z.ZodString>;
+    at: z.ZodString;
+}, "strip", z.ZodTypeAny, {
+    state: "installing" | "failed" | "done" | "pending" | "restarting";
+    at: string;
+    jobId: string;
+    error?: string | undefined;
+    code?: string | undefined;
+}, {
+    state: "installing" | "failed" | "done" | "pending" | "restarting";
+    at: string;
+    jobId: string;
+    error?: string | undefined;
+    code?: string | undefined;
+}>;
+export type HostDockerStatus = z.infer<typeof HostDockerStatusSchema>;
+export declare const HOST_HELPER_MIGRATION = "sudo npm install -g /opt/devchain-host/current/lib/node_modules/devchain-cli/dist/host-install/devchain-host-bootstrap.tgz";
+export interface ProjectRootResult {
+    path: string;
+    created: boolean;
+}
+export declare class HostHelperService {
+    private readonly executor;
+    constructor(executor: ProcessExecutor);
+    private get etcDir();
+    isClaimedHost(): boolean;
+    requestUpdate(version: string): Promise<void>;
+    readUpdateStatus(): HostUpdateStatus | null;
+    requestDocker(): Promise<{
+        jobId: string | null;
+    }>;
+    readDockerStatus(): HostDockerStatus | null;
+    createProjectRoot(path: string): Promise<ProjectRootResult>;
+    assertClaimedHost(): void;
+    private runHelper;
+}

package/dist/server/modules/remotes/host/host-helper.service.js

@@ -0,0 +1,146 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.HostHelperService = exports.HOST_HELPER_MIGRATION = exports.HostDockerStatusSchema = exports.HostUpdateStatusSchema = void 0;
+const common_1 = require("@nestjs/common");
+const node_fs_1 = require("node:fs");
+const node_path_1 = require("node:path");
+const zod_1 = require("zod");
+const env_config_1 = require("../../../common/config/env.config");
+const error_types_1 = require("../../../common/errors/error-types");
+const logger_1 = require("../../../common/logging/logger");
+const process_executor_port_1 = require("../../terminal/services/process-executor/process-executor.port");
+const logger = (0, logger_1.createLogger)('HostHelperService');
+const HELPER_TIMEOUT_MS = 60_000;
+exports.HostUpdateStatusSchema = zod_1.z.object({
+    state: zod_1.z.enum(['pending', 'installing', 'installing_clis', 'restarting', 'done', 'failed']),
+    version: zod_1.z.string(),
+    error: zod_1.z.string().optional(),
+    at: zod_1.z.string(),
+});
+exports.HostDockerStatusSchema = zod_1.z.object({
+    jobId: zod_1.z.string(),
+    state: zod_1.z.enum(['pending', 'installing', 'restarting', 'done', 'failed']),
+    error: zod_1.z.string().optional(),
+    code: zod_1.z.string().optional(),
+    at: zod_1.z.string(),
+});
+exports.HOST_HELPER_MIGRATION = 'sudo npm install -g /opt/devchain-host/current/lib/node_modules/devchain-cli/dist/host-install/devchain-host-bootstrap.tgz';
+const HELPER_EXIT = { invalid: 2, conflict: 3, refused: 4, notRoot: 77 };
+let HostHelperService = class HostHelperService {
+    executor;
+    constructor(executor) {
+        this.executor = executor;
+    }
+    get etcDir() {
+        return (0, env_config_1.getEnvConfig)().DEVCHAIN_HOST_ETC_DIR;
+    }
+    isClaimedHost() {
+        return (0, node_fs_1.existsSync)((0, node_path_1.join)(this.etcDir, 'claim.json'));
+    }
+    async requestUpdate(version) {
+        this.assertClaimedHost();
+        await this.runHelper('devchain-host-update', [version]);
+    }
+    readUpdateStatus() {
+        this.assertClaimedHost();
+        let raw;
+        try {
+            raw = (0, node_fs_1.readFileSync)((0, node_path_1.join)(this.etcDir, 'update.json'), 'utf8');
+        }
+        catch {
+            return null;
+        }
+        const parsed = exports.HostUpdateStatusSchema.safeParse(JSON.parse(raw));
+        return parsed.success ? parsed.data : null;
+    }
+    async requestDocker() {
+        this.assertClaimedHost();
+        try {
+            const stdout = await this.runHelper('devchain-host-update', ['--docker']);
+            return zod_1.z.object({ jobId: zod_1.z.string().nullable() }).parse(JSON.parse(stdout));
+        }
+        catch (error) {
+            if (error instanceof error_types_1.AppError && error.details?.code === 'INVALID_VERSION') {
+                throw new error_types_1.ConflictError(`The host helper needs one manual migration: ${exports.HOST_HELPER_MIGRATION}`, { code: 'HOST_HELPER_OUTDATED' });
+            }
+            throw error;
+        }
+    }
+    readDockerStatus() {
+        this.assertClaimedHost();
+        try {
+            const parsed = exports.HostDockerStatusSchema.safeParse(JSON.parse((0, node_fs_1.readFileSync)((0, node_path_1.join)(this.etcDir, 'docker.json'), 'utf8')));
+            return parsed.success ? parsed.data : null;
+        }
+        catch {
+            return null;
+        }
+    }
+    async createProjectRoot(path) {
+        this.assertClaimedHost();
+        const stdout = await this.runHelper('devchain-host-project-root', [path]);
+        return zod_1.z.object({ path: zod_1.z.string(), created: zod_1.z.boolean() }).parse(JSON.parse(stdout));
+    }
+    assertClaimedHost() {
+        if (!this.isClaimedHost()) {
+            throw new error_types_1.ConflictError('This DevChain instance is not a claimed host VM.', {
+                code: 'NOT_A_HOST',
+            });
+        }
+    }
+    async runHelper(helper, args) {
+        const helperPath = (0, node_path_1.join)((0, env_config_1.getEnvConfig)().DEVCHAIN_HOST_BIN_DIR, helper);
+        const result = await this.executor.run({
+            argv: ['sudo', '-n', helperPath, ...args],
+            mode: 'pipe',
+            timeout: HELPER_TIMEOUT_MS,
+        });
+        if (result.success && !result.timedOut)
+            return result.stdout;
+        const failure = parseFailure(result.timedOut ? null : result.exitCode, result.stderr);
+        logger.warn({ helper, exitCode: failure.exitCode, code: failure.code }, 'Host helper failed');
+        throw toAppError(helper, failure);
+    }
+};
+exports.HostHelperService = HostHelperService;
+exports.HostHelperService = HostHelperService = __decorate([
+    (0, common_1.Injectable)(),
+    __metadata("design:paramtypes", [process_executor_port_1.ProcessExecutor])
+], HostHelperService);
+function parseFailure(exitCode, stderr) {
+    const lastLine = stderr.trim().split('\n').pop() ?? '';
+    try {
+        const body = JSON.parse(lastLine);
+        return {
+            exitCode,
+            code: typeof body.code === 'string' ? body.code : null,
+            message: typeof body.message === 'string' ? body.message : lastLine,
+        };
+    }
+    catch {
+        return { exitCode, code: null, message: lastLine || `exit code ${exitCode ?? 'unknown'}` };
+    }
+}
+function toAppError(helper, failure) {
+    const details = { code: failure.code ?? 'HOST_HELPER_FAILED', helper };
+    switch (failure.exitCode) {
+        case HELPER_EXIT.invalid:
+            return new error_types_1.ValidationError(failure.message, details);
+        case HELPER_EXIT.conflict:
+            return new error_types_1.ConflictError(failure.message, details);
+        case HELPER_EXIT.refused:
+            return new error_types_1.ForbiddenError(failure.message, details);
+        default:
+            return new error_types_1.AppError(`${helper} failed: ${failure.message}`, 'HOST_HELPER_FAILED', 500, details);
+    }
+}
+//# sourceMappingURL=host-helper.service.js.map

package/dist/server/modules/remotes/host/host-helper.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"host-helper.service.js","sourceRoot":"","sources":["../../../../src/modules/remotes/host/host-helper.service.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,2CAA4C;AAC5C,qCAAmD;AACnD,yCAAiC;AACjC,6BAAwB;AACxB,kEAAiE;AACjE,oEAK4C;AAC5C,2DAA8D;AAC9D,0GAAiG;AAEjG,MAAM,MAAM,GAAG,IAAA,qBAAY,EAAC,mBAAmB,CAAC,CAAC;AAEjD,MAAM,iBAAiB,GAAG,MAAM,CAAC;AAEpB,QAAA,sBAAsB,GAAG,OAAC,CAAC,MAAM,CAAC;IAC7C,KAAK,EAAE,OAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,YAAY,EAAE,iBAAiB,EAAE,YAAY,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC;IAC3F,OAAO,EAAE,OAAC,CAAC,MAAM,EAAE;IACnB,KAAK,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC5B,EAAE,EAAE,OAAC,CAAC,MAAM,EAAE;CACf,CAAC,CAAC;AAGU,QAAA,sBAAsB,GAAG,OAAC,CAAC,MAAM,CAAC;IAC7C,KAAK,EAAE,OAAC,CAAC,MAAM,EAAE;IACjB,KAAK,EAAE,OAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC;IACxE,KAAK,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC5B,IAAI,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC3B,EAAE,EAAE,OAAC,CAAC,MAAM,EAAE;CACf,CAAC,CAAC;AAEU,QAAA,qBAAqB,GAChC,4HAA4H,CAAC;AAQ/H,MAAM,WAAW,GAAG,EAAE,OAAO,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,EAAE,EAAW,CAAC;AAe3E,IAAM,iBAAiB,GAAvB,MAAM,iBAAiB;IACC;IAA7B,YAA6B,QAAyB;QAAzB,aAAQ,GAAR,QAAQ,CAAiB;IAAG,CAAC;IAE1D,IAAY,MAAM;QAChB,OAAO,IAAA,yBAAY,GAAE,CAAC,qBAAqB,CAAC;IAC9C,CAAC;IAED,aAAa;QACX,OAAO,IAAA,oBAAU,EAAC,IAAA,gBAAI,EAAC,IAAI,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC,CAAC;IACrD,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,OAAe;QACjC,IAAI,CAAC,iBAAiB,EAAE,CAAC;QACzB,MAAM,IAAI,CAAC,SAAS,CAAC,sBAAsB,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;IAC1D,CAAC;IAGD,gBAAgB;QACd,IAAI,CAAC,iBAAiB,EAAE,CAAC;QACzB,IAAI,GAAW,CAAC;QAChB,IAAI,CAAC;YACH,GAAG,GAAG,IAAA,sBAAY,EAAC,IAAA,gBAAI,EAAC,IAAI,CAAC,MAAM,EAAE,aAAa,CAAC,EAAE,MAAM,CAAC,CAAC;QAC/D,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;QACD,MAAM,MAAM,GAAG,8BAAsB,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;QACjE,OAAO,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;IAC7C,CAAC;IAED,KAAK,CAAC,aAAa;QACjB,IAAI,CAAC,iBAAiB,EAAE,CAAC;QACzB,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,sBAAsB,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC;YAC1E,OAAO,OAAC,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;QAC9E,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,sBAAQ,IAAI,KAAK,CAAC,OAAO,EAAE,IAAI,KAAK,iBAAiB,EAAE,CAAC;gBAC3E,MAAM,IAAI,2BAAa,CACrB,+CAA+C,6BAAqB,EAAE,EACtE,EAAE,IAAI,EAAE,sBAAsB,EAAE,CACjC,CAAC;YACJ,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAED,gBAAgB;QACd,IAAI,CAAC,iBAAiB,EAAE,CAAC;QACzB,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,8BAAsB,CAAC,SAAS,CAC7C,IAAI,CAAC,KAAK,CAAC,IAAA,sBAAY,EAAC,IAAA,gBAAI,EAAC,IAAI,CAAC,MAAM,EAAE,aAAa,CAAC,EAAE,MAAM,CAAC,CAAC,CACnE,CAAC;YACF,OAAO,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;QAC7C,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED,KAAK,CAAC,iBAAiB,CAAC,IAAY;QAClC,IAAI,CAAC,iBAAiB,EAAE,CAAC;QACzB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,4BAA4B,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC;QAC1E,OAAO,OAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,OAAC,CAAC,MAAM,EAAE,EAAE,OAAO,EAAE,OAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;IACxF,CAAC;IAED,iBAAiB;QACf,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,EAAE,CAAC;YAC1B,MAAM,IAAI,2BAAa,CAAC,kDAAkD,EAAE;gBAC1E,IAAI,EAAE,YAAY;aACnB,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,SAAS,CAAC,MAAc,EAAE,IAAc;QACpD,MAAM,UAAU,GAAG,IAAA,gBAAI,EAAC,IAAA,yBAAY,GAAE,CAAC,qBAAqB,EAAE,MAAM,CAAC,CAAC;QACtE,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC;YACrC,IAAI,EAAE,CAAC,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,GAAG,IAAI,CAAC;YACzC,IAAI,EAAE,MAAM;YACZ,OAAO,EAAE,iBAAiB;SAC3B,CAAC,CAAC;QACH,IAAI,MAAM,CAAC,OAAO,IAAI,CAAC,MAAM,CAAC,QAAQ;YAAE,OAAO,MAAM,CAAC,MAAM,CAAC;QAC7D,MAAM,OAAO,GAAG,YAAY,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;QACtF,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,EAAE,oBAAoB,CAAC,CAAC;QAC9F,MAAM,UAAU,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACpC,CAAC;CACF,CAAA;AAnFY,8CAAiB;4BAAjB,iBAAiB;IAD7B,IAAA,mBAAU,GAAE;qCAE4B,uCAAe;GAD3C,iBAAiB,CAmF7B;AAED,SAAS,YAAY,CAAC,QAAuB,EAAE,MAAc;IAC3D,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC;IACvD,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAA0C,CAAC;QAC3E,OAAO;YACL,QAAQ;YACR,IAAI,EAAE,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI;YACtD,OAAO,EAAE,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ;SACpE,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,IAAI,aAAa,QAAQ,IAAI,SAAS,EAAE,EAAE,CAAC;IAC7F,CAAC;AACH,CAAC;AAED,SAAS,UAAU,CAAC,MAAc,EAAE,OAAsB;IACxD,MAAM,OAAO,GAAG,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,IAAI,oBAAoB,EAAE,MAAM,EAAE,CAAC;IACvE,QAAQ,OAAO,CAAC,QAAQ,EAAE,CAAC;QACzB,KAAK,WAAW,CAAC,OAAO;YACtB,OAAO,IAAI,6BAAe,CAAC,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACvD,KAAK,WAAW,CAAC,QAAQ;YACvB,OAAO,IAAI,2BAAa,CAAC,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACrD,KAAK,WAAW,CAAC,OAAO;YACtB,OAAO,IAAI,4BAAc,CAAC,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACtD;YACE,OAAO,IAAI,sBAAQ,CACjB,GAAG,MAAM,YAAY,OAAO,CAAC,OAAO,EAAE,EACtC,oBAAoB,EACpB,GAAG,EACH,OAAO,CACR,CAAC;IACN,CAAC;AACH,CAAC"}

package/dist/server/modules/remotes/host/host-provider-auth.controller.d.ts

@@ -0,0 +1,9 @@
+import { HostProviderAuthService, type HostProviderApplyResult, type HostProviderVerifyResult } from './host-provider-auth.service';
+import type { ProviderAuthFamilyReport } from '../../provider-auth/provider-auth-watcher.service';
+export declare class HostProviderAuthController {
+    private readonly providerAuth;
+    constructor(providerAuth: HostProviderAuthService);
+    verify(body: unknown): Promise<HostProviderVerifyResult>;
+    apply(body: unknown): Promise<HostProviderApplyResult>;
+    families(since?: string): Promise<ProviderAuthFamilyReport[]>;
+}

package/dist/server/modules/remotes/host/host-provider-auth.controller.js

@@ -0,0 +1,97 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.HostProviderAuthController = void 0;
+const common_1 = require("@nestjs/common");
+const zod_1 = require("zod");
+const logger_1 = require("../../../common/logging/logger");
+const host_provider_auth_service_1 = require("./host-provider-auth.service");
+const logger = (0, logger_1.createLogger)('HostProviderAuthController');
+const VerifyBodySchema = zod_1.z
+    .object({
+    provider: zod_1.z.string().trim().min(1).max(32),
+    opencodeProviderIds: zod_1.z.array(zod_1.z.string().min(1).max(128)).max(32).optional().default([]),
+})
+    .strict();
+const FamiliesSinceSchema = zod_1.z.coerce.number().finite().min(0).optional().default(0);
+const RemoveSchema = zod_1.z
+    .object({
+    envKeys: zod_1.z.array(zod_1.z.string().min(1).max(128)).max(64).default([]),
+    files: zod_1.z.array(zod_1.z.string().min(1).max(4096)).max(32).default([]),
+})
+    .strict();
+const ApplyBodySchema = zod_1.z
+    .object({
+    env: zod_1.z.record(zod_1.z.string(), zod_1.z.string()).default({}),
+    files: zod_1.z
+        .array(zod_1.z
+        .object({
+        path: zod_1.z.string().min(1).max(4096),
+        mode: zod_1.z.literal('0600'),
+        contentBase64: zod_1.z.string().max(400_000),
+    })
+        .strict())
+        .default([]),
+    remove: RemoveSchema.optional(),
+})
+    .strict();
+let HostProviderAuthController = class HostProviderAuthController {
+    providerAuth;
+    constructor(providerAuth) {
+        this.providerAuth = providerAuth;
+    }
+    verify(body) {
+        const { provider, opencodeProviderIds } = VerifyBodySchema.parse(body);
+        logger.info({ provider }, 'POST /api/host/provider-auth/verify');
+        return this.providerAuth.verify(provider.toLowerCase(), opencodeProviderIds);
+    }
+    apply(body) {
+        logger.info('POST /api/host/provider-auth');
+        return this.providerAuth.apply(ApplyBodySchema.parse(body));
+    }
+    families(since) {
+        const sinceMs = FamiliesSinceSchema.parse(since ?? 0);
+        logger.info({ since: sinceMs }, 'GET /api/host/provider-auth/families');
+        return this.providerAuth.families(sinceMs);
+    }
+};
+exports.HostProviderAuthController = HostProviderAuthController;
+__decorate([
+    (0, common_1.Post)('verify'),
+    (0, common_1.HttpCode)(200),
+    __param(0, (0, common_1.Body)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object]),
+    __metadata("design:returntype", Promise)
+], HostProviderAuthController.prototype, "verify", null);
+__decorate([
+    (0, common_1.Post)(),
+    (0, common_1.HttpCode)(200),
+    __param(0, (0, common_1.Body)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object]),
+    __metadata("design:returntype", Promise)
+], HostProviderAuthController.prototype, "apply", null);
+__decorate([
+    (0, common_1.Get)('families'),
+    __param(0, (0, common_1.Query)('since')),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [String]),
+    __metadata("design:returntype", Promise)
+], HostProviderAuthController.prototype, "families", null);
+exports.HostProviderAuthController = HostProviderAuthController = __decorate([
+    (0, common_1.Controller)('api/host/provider-auth'),
+    __metadata("design:paramtypes", [host_provider_auth_service_1.HostProviderAuthService])
+], HostProviderAuthController);
+//# sourceMappingURL=host-provider-auth.controller.js.map

package/dist/server/modules/remotes/host/host-provider-auth.controller.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"host-provider-auth.controller.js","sourceRoot":"","sources":["../../../../src/modules/remotes/host/host-provider-auth.controller.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,2CAA8E;AAC9E,6BAAwB;AACxB,2DAA8D;AAC9D,6EAIsC;AAGtC,MAAM,MAAM,GAAG,IAAA,qBAAY,EAAC,4BAA4B,CAAC,CAAC;AAE1D,MAAM,gBAAgB,GAAG,OAAC;KACvB,MAAM,CAAC;IACN,QAAQ,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;IAC1C,mBAAmB,EAAE,OAAC,CAAC,KAAK,CAAC,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC;CACxF,CAAC;KACD,MAAM,EAAE,CAAC;AAGZ,MAAM,mBAAmB,GAAG,OAAC,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;AAEpF,MAAM,YAAY,GAAG,OAAC;KACnB,MAAM,CAAC;IACN,OAAO,EAAE,OAAC,CAAC,KAAK,CAAC,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IAChE,KAAK,EAAE,OAAC,CAAC,KAAK,CAAC,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;CAChE,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,MAAM,eAAe,GAAG,OAAC;KACtB,MAAM,CAAC;IACN,GAAG,EAAE,OAAC,CAAC,MAAM,CAAC,OAAC,CAAC,MAAM,EAAE,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IACjD,KAAK,EAAE,OAAC;SACL,KAAK,CACJ,OAAC;SACE,MAAM,CAAC;QACN,IAAI,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC;QACjC,IAAI,EAAE,OAAC,CAAC,OAAO,CAAC,MAAM,CAAC;QACvB,aAAa,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC;KACvC,CAAC;SACD,MAAM,EAAE,CACZ;SACA,OAAO,CAAC,EAAE,CAAC;IAGd,MAAM,EAAE,YAAY,CAAC,QAAQ,EAAE;CAChC,CAAC;KACD,MAAM,EAAE,CAAC;AAOL,IAAM,0BAA0B,GAAhC,MAAM,0BAA0B;IACR;IAA7B,YAA6B,YAAqC;QAArC,iBAAY,GAAZ,YAAY,CAAyB;IAAG,CAAC;IAItE,MAAM,CAAS,IAAa;QAC1B,MAAM,EAAE,QAAQ,EAAE,mBAAmB,EAAE,GAAG,gBAAgB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACvE,MAAM,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,EAAE,qCAAqC,CAAC,CAAC;QACjE,OAAO,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,QAAQ,CAAC,WAAW,EAAE,EAAE,mBAAmB,CAAC,CAAC;IAC/E,CAAC;IAID,KAAK,CAAS,IAAa;QACzB,MAAM,CAAC,IAAI,CAAC,8BAA8B,CAAC,CAAC;QAC5C,OAAO,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,eAAe,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;IAC9D,CAAC;IAID,QAAQ,CAAiB,KAAc;QACrC,MAAM,OAAO,GAAG,mBAAmB,CAAC,KAAK,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC;QACtD,MAAM,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,sCAAsC,CAAC,CAAC;QACxE,OAAO,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;IAC7C,CAAC;CACF,CAAA;AAzBY,gEAA0B;AAKrC;IAFC,IAAA,aAAI,EAAC,QAAQ,CAAC;IACd,IAAA,iBAAQ,EAAC,GAAG,CAAC;IACN,WAAA,IAAA,aAAI,GAAE,CAAA;;;;wDAIb;AAID;IAFC,IAAA,aAAI,GAAE;IACN,IAAA,iBAAQ,EAAC,GAAG,CAAC;IACP,WAAA,IAAA,aAAI,GAAE,CAAA;;;;uDAGZ;AAID;IADC,IAAA,YAAG,EAAC,UAAU,CAAC;IACN,WAAA,IAAA,cAAK,EAAC,OAAO,CAAC,CAAA;;;;0DAIvB;qCAxBU,0BAA0B;IADtC,IAAA,mBAAU,EAAC,wBAAwB,CAAC;qCAEQ,oDAAuB;GADvD,0BAA0B,CAyBtC"}

package/dist/server/modules/remotes/host/host-provider-auth.service.d.ts

@@ -0,0 +1,46 @@
+import { type ProviderAuthClaimBundle } from '../../provider-auth/provider-auth-adapters';
+import { ProviderAuthWatcherService, type ProviderAuthFamilyReport } from '../../provider-auth/provider-auth-watcher.service';
+import { type ProviderStorage } from '../../storage/interfaces/storage.interface';
+import { ProcessExecutor } from '../../terminal/services/process-executor/process-executor.port';
+import { HostHelperService } from './host-helper.service';
+export declare const REFUSED_FILES: string[];
+export interface HostProviderVerifyResult {
+    ok: boolean;
+    summary: string;
+    hint: string | null;
+}
+export interface HostProviderAuthRemoveSpec {
+    envKeys: string[];
+    files: string[];
+}
+export type HostProviderApplyInput = ProviderAuthClaimBundle & {
+    remove?: HostProviderAuthRemoveSpec;
+};
+export interface HostProviderApplyResult {
+    envKeys: string[];
+    files: string[];
+    removed: HostProviderAuthRemoveSpec;
+}
+export declare function parseHostEnvFile(content: string): Record<string, string>;
+export declare function hostEnvFilePath(): string;
+export declare function readHostEnvFile(): Promise<Record<string, string>>;
+export declare function renderHostEnvFile(env: Record<string, string>): string;
+export declare class HostProviderAuthService {
+    private readonly helper;
+    private readonly executor;
+    private readonly familyWatcher;
+    private readonly storage;
+    constructor(helper: HostHelperService, executor: ProcessExecutor, familyWatcher: ProviderAuthWatcherService, storage: Pick<ProviderStorage, 'listProviders'>);
+    private get home();
+    private get envFile();
+    verify(provider: string, opencodeProviderIds: string[]): Promise<HostProviderVerifyResult>;
+    families(sinceMs: number): Promise<ProviderAuthFamilyReport[]>;
+    apply(bundle: HostProviderApplyInput): Promise<HostProviderApplyResult>;
+    private readHostEnv;
+    private binPath;
+    private validateFile;
+    private validateRemove;
+    private removeLogins;
+    private refuseSymlinkedParents;
+    private ensureDirs;
+}