devchain-cli 0.23.3 → 0.24.0

package/dist/server/modules/remotes/operations/create-vm.operation.js

@@ -0,0 +1,228 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.CreateVmOperation = void 0;
+exports.resolveCreateVmImage = resolveCreateVmImage;
+const common_1 = require("@nestjs/common");
+const proxmox_client_1 = require("@devchain/proxmox-client");
+const env_config_1 = require("../../../common/config/env.config");
+const host_image_config_1 = require("../../../common/config/host-image.config");
+const error_types_1 = require("../../../common/errors/error-types");
+const storage_interface_1 = require("../../storage/interfaces/storage.interface");
+const proxmox_vm_lifecycle_service_1 = require("../../vm-providers/proxmox-vm-lifecycle.service");
+const vm_providers_service_1 = require("../../vm-providers/vm-providers.service");
+const claim_operation_1 = require("./claim.operation");
+const vm_operations_dto_1 = require("./vm-operations.dto");
+const remote_operation_errors_1 = require("./remote-operation.errors");
+const remote_host_client_1 = require("./remote-host.client");
+const remote_operation_timing_1 = require("./remote-operation.timing");
+const remote_operation_types_1 = require("./remote-operation.types");
+const BOOTSTRAP_READY_TIMEOUT_MS = 60_000;
+function resolveCreateVmImage(lifecycle, environment, builtInImage = host_image_config_1.BUILT_IN_HOST_IMAGE) {
+    const source = (0, host_image_config_1.selectHostImageSource)(environment, builtInImage);
+    if (!source)
+        return null;
+    const image = lifecycle.image(source.url, source.sha256);
+    if (source.version && source.version !== image.version) {
+        throw new error_types_1.ConflictError('The built-in host image version does not match its URL.');
+    }
+    return image;
+}
+let CreateVmOperation = class CreateVmOperation {
+    storage;
+    lifecycle;
+    providers;
+    claim;
+    host;
+    kind = 'create_vm';
+    steps;
+    constructor(storage, lifecycle, providers, claim, host) {
+        this.storage = storage;
+        this.lifecycle = lifecycle;
+        this.providers = providers;
+        this.claim = claim;
+        this.host = host;
+        this.steps = [
+            {
+                id: 'vm_preflight',
+                label: 'Check VM settings and permissions',
+                run: (c) => this.preflight(c),
+            },
+            { id: 'ensure_image', label: 'Import the host image', run: (c) => this.ensureImage(c) },
+            {
+                id: 'ensure_template',
+                label: 'Prepare the image template',
+                run: (c) => this.ensureTemplate(c),
+            },
+            { id: 'clone', label: 'Clone the VM', run: (c) => this.clone(c) },
+            { id: 'configure', label: 'Configure VM resources', run: (c) => this.configure(c) },
+            { id: 'start', label: 'Start the VM', run: (c) => this.start(c) },
+            { id: 'wait_ip', label: 'Wait for the guest IP address', run: (c) => this.waitIp(c) },
+            ...(0, remote_operation_types_1.prefixSteps)(claim.steps, 'claim_'),
+        ];
+    }
+    assertCancellable(operation) {
+        if ((0, remote_operation_types_1.stepStarted)(operation, 'claim_claim'))
+            this.claim.assertCancellable(claimOperation(operation));
+    }
+    interrupt(id) {
+        return this.claim.interrupt(id);
+    }
+    forget(id) {
+        this.claim.forget(id);
+    }
+    retryFrom(operation) {
+        const failed = operation.steps.find((step) => step.state === 'failed');
+        if (failed?.error?.code === 'VMID_TAKEN')
+            return 'vm_preflight';
+        const retry = this.claim.retryFrom(claimOperation(operation));
+        return retry ? `claim_${retry}` : null;
+    }
+    async rollback(operation) {
+        await this.rollbackNewVm(operation);
+        return { vmCleanedUp: true };
+    }
+    async rollbackNewVm(operation) {
+        await this.claim.rollback(claimOperation(operation));
+        const details = operation.details;
+        if (details.vmid) {
+            await this.lifecycle.destroyCreated(details.connectionId, details.vmid, details.vmName, operation.id);
+        }
+    }
+    async preflight({ details }) {
+        const vm = details;
+        if (!Number.isInteger(vm.spec.cores) ||
+            vm.spec.cores < 1 ||
+            !Number.isInteger(vm.spec.memory) ||
+            vm.spec.memory < vm_operations_dto_1.MIN_VM_MEMORY_MIB ||
+            !Number.isInteger(vm.spec.disk) ||
+            vm.spec.disk < 1) {
+            throw new remote_operation_errors_1.RemoteOperationStepRefusedError('VM_RESOURCES_INVALID', 'VM creation needs at least one core, 4096 MiB of memory for the claim/update install, and one GiB of disk.');
+        }
+        const config = (0, env_config_1.getEnvConfig)();
+        const image = vm.image ?? resolveCreateVmImage(this.lifecycle, config);
+        if (!image) {
+            throw new remote_operation_errors_1.RemoteOperationStepRefusedError('HOST_IMAGE_NOT_CONFIGURED', 'No host image is configured; set both HOST_IMAGE_URL and HOST_IMAGE_SHA256 or publish a built-in image entry.');
+        }
+        await this.lifecycle.assertReachable(image);
+        const permissions = await this.providers.checkPermissions(vm.connectionId);
+        if (!permissions.ok) {
+            throw new remote_operation_errors_1.RemoteOperationStepRefusedError('PROXMOX_PERMISSIONS_MISSING', `Proxmox permissions: ${permissions.missing.join(', ')}.`);
+        }
+        const ids = await this.lifecycle.plan(vm.connectionId, image);
+        Object.assign(vm, { image, ...ids });
+    }
+    async ensureImage({ details }) {
+        const vm = checked(details);
+        vm.imageVolid = await this.lifecycle.ensureImage(vm.connectionId, vm.image);
+    }
+    async ensureTemplate({ details }) {
+        const vm = checked(details);
+        try {
+            vm.templateVmid = await this.lifecycle.ensureTemplate(vm.connectionId, vm.image, vm.templateVmid, vm.imageVolid);
+        }
+        catch (error) {
+            refuseVmidTaken(error);
+        }
+    }
+    async clone({ operation, details }) {
+        const vm = checked(details);
+        delete vm.tlsCertificate;
+        try {
+            vm.vmIdentity = await this.lifecycle.clone(vm.connectionId, vm.templateVmid, vm.vmid, vm.vmName, operation.id);
+        }
+        catch (error) {
+            refuseVmidTaken(error);
+        }
+        await this.storage.updateRemoteVmIdentity(operation.remoteId, vm.vmIdentity);
+    }
+    async configure({ details }) {
+        const vm = checked(details);
+        await this.lifecycle.configure(vm.connectionId, vm.vmid, vm.spec);
+    }
+    async start({ details }) {
+        const vm = checked(details);
+        await this.lifecycle.start(vm.connectionId, vm.vmid);
+    }
+    async waitIp({ operation, details, progress }) {
+        const vm = checked(details);
+        const address = await this.lifecycle.waitIp(vm.connectionId, vm.vmid, vm.port);
+        await this.storage.updateRemoteBaseUrl(operation.remoteId, address.address);
+        vm.bootstrapUrl = address.bootstrapUrl;
+        const deadline = Date.now() + BOOTSTRAP_READY_TIMEOUT_MS;
+        if (!vm.tlsCertificate) {
+            vm.tlsCertificate = await this.readCertificate(vm, deadline);
+            await progress({ tlsCertificate: vm.tlsCertificate });
+        }
+        await this.storage.updateRemoteTlsCertificate(operation.remoteId, vm.tlsCertificate);
+        for (;;) {
+            try {
+                await this.host.runtimeAt(address.bootstrapUrl, vm.tlsCertificate);
+                return;
+            }
+            catch {
+                if (Date.now() >= deadline) {
+                    throw new remote_operation_errors_1.RemoteOperationStepRefusedError('VM_BOOTSTRAP_TIMEOUT', 'The VM reported an IP address, but its bootstrap did not answer within 60 seconds.');
+                }
+                await (0, remote_operation_timing_1.sleep)(Math.min(2_000, deadline - Date.now()));
+            }
+        }
+    }
+    async readCertificate(vm, deadline) {
+        for (;;) {
+            let certificate;
+            try {
+                certificate = await this.lifecycle.readCertificate(vm.connectionId, vm.vmid);
+            }
+            catch (error) {
+                if (error instanceof proxmox_client_1.ProxmoxRemoteError && error.code === 'proxmox_denied') {
+                    throw new remote_operation_errors_1.RemoteOperationStepRefusedError('PROXMOX_PERMISSIONS_MISSING', 'Proxmox refused to read the VM certificate through the guest agent; grant VM.GuestAgent.FileRead (PVE 9) or VM.Monitor (PVE 8) on the pool.');
+                }
+                throw error;
+            }
+            if (certificate)
+                return certificate;
+            if (Date.now() >= deadline) {
+                throw new remote_operation_errors_1.RemoteOperationStepRefusedError('VM_CERTIFICATE_TIMEOUT', 'The VM reported an IP address, but the guest agent could not read its TLS certificate within 60 seconds. Check that the VM runs a supported host image.');
+            }
+            await (0, remote_operation_timing_1.sleep)(Math.min(2_000, deadline - Date.now()));
+        }
+    }
+};
+exports.CreateVmOperation = CreateVmOperation;
+exports.CreateVmOperation = CreateVmOperation = __decorate([
+    (0, common_1.Injectable)(),
+    __param(0, (0, common_1.Inject)(storage_interface_1.STORAGE_SERVICE)),
+    __metadata("design:paramtypes", [Object, proxmox_vm_lifecycle_service_1.ProxmoxVmLifecycleService,
+        vm_providers_service_1.VmProvidersService,
+        claim_operation_1.ClaimOperation,
+        remote_host_client_1.RemoteHostClient])
+], CreateVmOperation);
+function refuseVmidTaken(error) {
+    if (error instanceof error_types_1.ConflictError && error.details?.code === 'VMID_TAKEN') {
+        throw new remote_operation_errors_1.RemoteOperationStepRefusedError('VMID_TAKEN', error.message);
+    }
+    throw error;
+}
+function checked(details) {
+    const vm = details;
+    if (!vm.image || !vm.vmid || !vm.templateVmid) {
+        throw new error_types_1.ConflictError('VM preflight did not finish; retry it before this step.');
+    }
+    return vm;
+}
+function claimOperation(operation) {
+    return (0, remote_operation_types_1.withStepPrefix)(operation, 'claim_');
+}
+//# sourceMappingURL=create-vm.operation.js.map

package/dist/server/modules/remotes/operations/create-vm.operation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"create-vm.operation.js","sourceRoot":"","sources":["../../../../src/modules/remotes/operations/create-vm.operation.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AA4CA,oDAYC;AAxDD,2CAAoD;AACpD,6DAA8D;AAC9D,kEAAiE;AACjE,gFAKkD;AAClD,oEAAmE;AACnE,kFAAiG;AAEjG,kGAGyD;AACzD,kFAA6E;AAC7E,uDAAsE;AACtE,2DAAwD;AACxD,uEAA4E;AAC5E,6DAAwD;AACxD,uEAAkD;AAClD,qEAOkC;AAalC,MAAM,0BAA0B,GAAG,MAAM,CAAC;AAE1C,SAAgB,oBAAoB,CAClC,SAAmD,EACnD,WAAiC,EACjC,eAAwC,uCAAmB;IAE3D,MAAM,MAAM,GAAG,IAAA,yCAAqB,EAAC,WAAW,EAAE,YAAY,CAAC,CAAC;IAChE,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IACzB,MAAM,KAAK,GAAG,SAAS,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;IACzD,IAAI,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,OAAO,KAAK,KAAK,CAAC,OAAO,EAAE,CAAC;QACvD,MAAM,IAAI,2BAAa,CAAC,yDAAyD,CAAC,CAAC;IACrF,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAGM,IAAM,iBAAiB,GAAvB,MAAM,iBAAiB;IAKgB;IACzB;IACA;IACA;IACA;IARV,IAAI,GAAG,WAAoB,CAAC;IAC5B,KAAK,CAA2C;IAEzD,YAC4C,OAAsB,EAC/C,SAAoC,EACpC,SAA6B,EAC7B,KAAqB,EACrB,IAAsB;QAJG,YAAO,GAAP,OAAO,CAAe;QAC/C,cAAS,GAAT,SAAS,CAA2B;QACpC,cAAS,GAAT,SAAS,CAAoB;QAC7B,UAAK,GAAL,KAAK,CAAgB;QACrB,SAAI,GAAJ,IAAI,CAAkB;QAEvC,IAAI,CAAC,KAAK,GAAG;YACX;gBACE,EAAE,EAAE,cAAc;gBAClB,KAAK,EAAE,mCAAmC;gBAC1C,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC;aAC9B;YACD,EAAE,EAAE,EAAE,cAAc,EAAE,KAAK,EAAE,uBAAuB,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE;YACvF;gBACE,EAAE,EAAE,iBAAiB;gBACrB,KAAK,EAAE,4BAA4B;gBACnC,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC;aACnC;YACD,EAAE,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,cAAc,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE;YACjE,EAAE,EAAE,EAAE,WAAW,EAAE,KAAK,EAAE,wBAAwB,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE;YACnF,EAAE,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,cAAc,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE;YACjE,EAAE,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,+BAA+B,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE;YACrF,GAAG,IAAA,oCAAW,EAAC,KAAK,CAAC,KAAK,EAAE,QAAQ,CAAC;SACtC,CAAC;IACJ,CAAC;IAED,iBAAiB,CAAC,SAA0B;QAC1C,IAAI,IAAA,oCAAW,EAAC,SAAS,EAAE,aAAa,CAAC;YACvC,IAAI,CAAC,KAAK,CAAC,iBAAiB,CAAC,cAAc,CAAC,SAAS,CAAC,CAAC,CAAC;IAC5D,CAAC;IAED,SAAS,CAAC,EAAU;QAClB,OAAO,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;IAClC,CAAC;IACD,MAAM,CAAC,EAAU;QACf,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IACxB,CAAC;IAED,SAAS,CAAC,SAA0B;QAClC,MAAM,MAAM,GAAG,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC;QACvE,IAAI,MAAM,EAAE,KAAK,EAAE,IAAI,KAAK,YAAY;YAAE,OAAO,cAAc,CAAC;QAChE,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,cAAc,CAAC,SAAS,CAAC,CAAC,CAAC;QAC9D,OAAO,KAAK,CAAC,CAAC,CAAC,SAAS,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;IACzC,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,SAA0B;QACvC,MAAM,IAAI,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC;QAGpC,OAAO,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC;IAC/B,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,SAA0B;QAC5C,MAAM,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,cAAc,CAAC,SAAS,CAAC,CAAC,CAAC;QACrD,MAAM,OAAO,GAAG,SAAS,CAAC,OAAqC,CAAC;QAChE,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;YACjB,MAAM,IAAI,CAAC,SAAS,CAAC,cAAc,CACjC,OAAO,CAAC,YAAY,EACpB,OAAO,CAAC,IAAI,EACZ,OAAO,CAAC,MAAM,EACd,SAAS,CAAC,EAAE,CACb,CAAC;QACJ,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,SAAS,CAAC,EAAE,OAAO,EAA0B;QACzD,MAAM,EAAE,GAAG,OAAqC,CAAC;QACjD,IACE,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC;YAChC,EAAE,CAAC,IAAI,CAAC,KAAK,GAAG,CAAC;YACjB,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC;YACjC,EAAE,CAAC,IAAI,CAAC,MAAM,GAAG,qCAAiB;YAClC,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC;YAC/B,EAAE,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,EAChB,CAAC;YACD,MAAM,IAAI,yDAA+B,CACvC,sBAAsB,EACtB,4GAA4G,CAC7G,CAAC;QACJ,CAAC;QACD,MAAM,MAAM,GAAG,IAAA,yBAAY,GAAE,CAAC;QAC9B,MAAM,KAAK,GAAG,EAAE,CAAC,KAAK,IAAI,oBAAoB,CAAC,IAAI,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;QACvE,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,IAAI,yDAA+B,CACvC,2BAA2B,EAC3B,+GAA+G,CAChH,CAAC;QACJ,CAAC;QACD,MAAM,IAAI,CAAC,SAAS,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;QAC5C,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,gBAAgB,CAAC,EAAE,CAAC,YAAY,CAAC,CAAC;QAC3E,IAAI,CAAC,WAAW,CAAC,EAAE,EAAE,CAAC;YACpB,MAAM,IAAI,yDAA+B,CACvC,6BAA6B,EAC7B,wBAAwB,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAC1D,CAAC;QACJ,CAAC;QACD,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,YAAY,EAAE,KAAK,CAAC,CAAC;QAC9D,MAAM,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,GAAG,GAAG,EAAE,CAAC,CAAC;IACvC,CAAC;IAEO,KAAK,CAAC,WAAW,CAAC,EAAE,OAAO,EAA0B;QAC3D,MAAM,EAAE,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;QAC5B,EAAE,CAAC,UAAU,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,EAAE,CAAC,YAAY,EAAE,EAAE,CAAC,KAAM,CAAC,CAAC;IAC/E,CAAC;IAEO,KAAK,CAAC,cAAc,CAAC,EAAE,OAAO,EAA0B;QAC9D,MAAM,EAAE,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;QAC5B,IAAI,CAAC;YACH,EAAE,CAAC,YAAY,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,cAAc,CACnD,EAAE,CAAC,YAAY,EACf,EAAE,CAAC,KAAM,EACT,EAAE,CAAC,YAAa,EAChB,EAAE,CAAC,UAAW,CACf,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,eAAe,CAAC,KAAK,CAAC,CAAC;QACzB,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,KAAK,CAAC,EAAE,SAAS,EAAE,OAAO,EAA0B;QAChE,MAAM,EAAE,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;QAE5B,OAAO,EAAE,CAAC,cAAc,CAAC;QACzB,IAAI,CAAC;YACH,EAAE,CAAC,UAAU,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,KAAK,CACxC,EAAE,CAAC,YAAY,EACf,EAAE,CAAC,YAAa,EAChB,EAAE,CAAC,IAAK,EACR,EAAE,CAAC,MAAM,EACT,SAAS,CAAC,EAAE,CACb,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,eAAe,CAAC,KAAK,CAAC,CAAC;QACzB,CAAC;QACD,MAAM,IAAI,CAAC,OAAO,CAAC,sBAAsB,CAAC,SAAS,CAAC,QAAQ,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC;IAC/E,CAAC;IAEO,KAAK,CAAC,SAAS,CAAC,EAAE,OAAO,EAA0B;QACzD,MAAM,EAAE,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;QAC5B,MAAM,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,EAAE,CAAC,YAAY,EAAE,EAAE,CAAC,IAAK,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC;IACrE,CAAC;IAEO,KAAK,CAAC,KAAK,CAAC,EAAE,OAAO,EAA0B;QACrD,MAAM,EAAE,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;QAC5B,MAAM,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,EAAE,EAAE,CAAC,IAAK,CAAC,CAAC;IACxD,CAAC;IAEO,KAAK,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,OAAO,EAAE,QAAQ,EAA0B;QAC3E,MAAM,EAAE,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;QAC5B,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC,YAAY,EAAE,EAAE,CAAC,IAAK,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC;QAChF,MAAM,IAAI,CAAC,OAAO,CAAC,mBAAmB,CAAC,SAAS,CAAC,QAAQ,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;QAC5E,EAAE,CAAC,YAAY,GAAG,OAAO,CAAC,YAAY,CAAC;QACvC,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,0BAA0B,CAAC;QACzD,IAAI,CAAC,EAAE,CAAC,cAAc,EAAE,CAAC;YACvB,EAAE,CAAC,cAAc,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC;YAC7D,MAAM,QAAQ,CAAC,EAAE,cAAc,EAAE,EAAE,CAAC,cAAc,EAAE,CAAC,CAAC;QACxD,CAAC;QACD,MAAM,IAAI,CAAC,OAAO,CAAC,0BAA0B,CAAC,SAAS,CAAC,QAAQ,EAAE,EAAE,CAAC,cAAc,CAAC,CAAC;QACrF,SAAS,CAAC;YACR,IAAI,CAAC;gBACH,MAAM,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,YAAY,EAAE,EAAE,CAAC,cAAc,CAAC,CAAC;gBACnE,OAAO;YACT,CAAC;YAAC,MAAM,CAAC;gBACP,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,QAAQ,EAAE,CAAC;oBAC3B,MAAM,IAAI,yDAA+B,CACvC,sBAAsB,EACtB,oFAAoF,CACrF,CAAC;gBACJ,CAAC;gBACD,MAAM,IAAA,+BAAK,EAAC,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;YACtD,CAAC;QACH,CAAC;IACH,CAAC;IAGO,KAAK,CAAC,eAAe,CAAC,EAAmB,EAAE,QAAgB;QACjE,SAAS,CAAC;YACR,IAAI,WAA0B,CAAC;YAC/B,IAAI,CAAC;gBACH,WAAW,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,eAAe,CAAC,EAAE,CAAC,YAAY,EAAE,EAAE,CAAC,IAAK,CAAC,CAAC;YAChF,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,KAAK,YAAY,mCAAkB,IAAI,KAAK,CAAC,IAAI,KAAK,gBAAgB,EAAE,CAAC;oBAC3E,MAAM,IAAI,yDAA+B,CACvC,6BAA6B,EAC7B,6IAA6I,CAC9I,CAAC;gBACJ,CAAC;gBACD,MAAM,KAAK,CAAC;YACd,CAAC;YACD,IAAI,WAAW;gBAAE,OAAO,WAAW,CAAC;YACpC,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,QAAQ,EAAE,CAAC;gBAC3B,MAAM,IAAI,yDAA+B,CACvC,wBAAwB,EACxB,yJAAyJ,CAC1J,CAAC;YACJ,CAAC;YACD,MAAM,IAAA,+BAAK,EAAC,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QACtD,CAAC;IACH,CAAC;CACF,CAAA;AA5MY,8CAAiB;4BAAjB,iBAAiB;IAD7B,IAAA,mBAAU,GAAE;IAMR,WAAA,IAAA,eAAM,EAAC,mCAAe,CAAC,CAAA;6CACI,wDAAyB;QACzB,yCAAkB;QACtB,gCAAc;QACf,qCAAgB;GAT9B,iBAAiB,CA4M7B;AAGD,SAAS,eAAe,CAAC,KAAc;IACrC,IAAI,KAAK,YAAY,2BAAa,IAAI,KAAK,CAAC,OAAO,EAAE,IAAI,KAAK,YAAY,EAAE,CAAC;QAC3E,MAAM,IAAI,yDAA+B,CAAC,YAAY,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;IACzE,CAAC;IACD,MAAM,KAAK,CAAC;AACd,CAAC;AAED,SAAS,OAAO,CAAC,OAAgC;IAC/C,MAAM,EAAE,GAAG,OAAqC,CAAC;IACjD,IAAI,CAAC,EAAE,CAAC,KAAK,IAAI,CAAC,EAAE,CAAC,IAAI,IAAI,CAAC,EAAE,CAAC,YAAY,EAAE,CAAC;QAC9C,MAAM,IAAI,2BAAa,CAAC,yDAAyD,CAAC,CAAC;IACrF,CAAC;IACD,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,SAAS,cAAc,CAAC,SAA0B;IAChD,OAAO,IAAA,uCAAc,EAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;AAC7C,CAAC"}

package/dist/server/modules/remotes/operations/destroy-vm.operation.d.ts

@@ -0,0 +1,34 @@
+import { ProviderAuthWritebackService, type PullFamiliesResult } from '../../provider-auth/provider-auth-writeback.service';
+import { type RemoteStorage } from '../../storage/interfaces/storage.interface';
+import type { RemoteOperation } from '../../storage/models/domain.models';
+import { ProxmoxVmLifecycleService } from '../../vm-providers/proxmox-vm-lifecycle.service';
+import { VmProvidersService } from '../../vm-providers/vm-providers.service';
+import { type RemoteOperationDefinition, type RemoteOperationStepDefinition } from './remote-operation.types';
+export interface DestroyVmDetails {
+    connectionId: string;
+    vmIdentity: string | null;
+    expectedRemoteIdentity: string | null;
+    targetVmid?: number;
+    targetVmName?: string;
+    supersededOperationId?: string;
+    force: boolean;
+    vmid?: number;
+    destroyAttempted?: boolean;
+    familyPull?: PullFamiliesResult;
+}
+export declare class DestroyVmOperation implements RemoteOperationDefinition {
+    private readonly storage;
+    private readonly providers;
+    private readonly writeback;
+    private readonly lifecycle;
+    readonly kind: "destroy_vm";
+    readonly steps: readonly RemoteOperationStepDefinition[];
+    constructor(storage: RemoteStorage, providers: VmProvidersService, writeback: ProviderAuthWritebackService, lifecycle: ProxmoxVmLifecycleService);
+    assertCancellable(operation: RemoteOperation): void;
+    rollback(): Promise<void>;
+    completed(operation: RemoteOperation): Promise<void>;
+    private preflight;
+    private pullFamilies;
+    private destroy;
+    private isSupersededClone;
+}

package/dist/server/modules/remotes/operations/destroy-vm.operation.js

@@ -0,0 +1,164 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DestroyVmOperation = void 0;
+const common_1 = require("@nestjs/common");
+const error_types_1 = require("../../../common/errors/error-types");
+const logger_1 = require("../../../common/logging/logger");
+const provider_auth_writeback_service_1 = require("../../provider-auth/provider-auth-writeback.service");
+const storage_interface_1 = require("../../storage/interfaces/storage.interface");
+const proxmox_vm_lifecycle_service_1 = require("../../vm-providers/proxmox-vm-lifecycle.service");
+const vm_providers_service_1 = require("../../vm-providers/vm-providers.service");
+const guarded_vm_destroy_1 = require("./guarded-vm-destroy");
+const remote_operation_errors_1 = require("./remote-operation.errors");
+const remote_operation_types_1 = require("./remote-operation.types");
+const logger = (0, logger_1.createLogger)('DestroyVmOperation');
+let DestroyVmOperation = class DestroyVmOperation {
+    storage;
+    providers;
+    writeback;
+    lifecycle;
+    kind = 'destroy_vm';
+    steps = [
+        {
+            id: 'preflight',
+            label: 'Check VM ownership and projects',
+            run: (run) => this.preflight(run),
+        },
+        {
+            id: 'pull_families',
+            label: 'Save the logins from the VM',
+            run: (run) => this.pullFamilies(run),
+        },
+        { id: 'destroy', label: 'Destroy the VM', run: (run) => this.destroy(run) },
+    ];
+    constructor(storage, providers, writeback, lifecycle) {
+        this.storage = storage;
+        this.providers = providers;
+        this.writeback = writeback;
+        this.lifecycle = lifecycle;
+    }
+    assertCancellable(operation) {
+        if ((0, remote_operation_types_1.stepStarted)(operation, 'destroy')) {
+            throw new error_types_1.ConflictError('VM deletion has started; retry the operation instead.', {
+                code: 'REMOTE_OPERATION_NOT_CANCELLABLE',
+                operationId: operation.id,
+            });
+        }
+    }
+    async rollback() { }
+    async completed(operation) {
+        const details = operation.details;
+        logger.info({ remoteId: operation.remoteId, vmid: details.vmid, operationId: operation.id }, 'Destroyed managed VM; removing remote registration');
+        await this.storage.deleteRemote(operation.remoteId);
+    }
+    async preflight({ operation, details }) {
+        const destroy = details;
+        const remote = await this.storage.getRemote(operation.remoteId);
+        if (remote.kind !== 'proxmox' ||
+            remote.vmProviderConnectionId !== destroy.connectionId ||
+            remote.vmIdentity !== destroy.expectedRemoteIdentity) {
+            throw new remote_operation_errors_1.RemoteOperationStepRefusedError('DESTROY_TARGET_CHANGED', 'The managed VM changed after deletion was requested.');
+        }
+        if ((await this.storage.listRemoteProjectBindings()).some((binding) => binding.remoteId === operation.remoteId)) {
+            throw new error_types_1.ConflictError('Disconnect every project before destroying its VM.', {
+                code: 'REMOTE_HAS_PROJECT_BINDINGS',
+                remoteId: operation.remoteId,
+            });
+        }
+        if (!destroy.vmIdentity && destroy.targetVmid === undefined)
+            return;
+        try {
+            const provider = await this.providers.forConnection(destroy.connectionId);
+            if (destroy.vmIdentity) {
+                destroy.vmid = await provider.assertOwnedVmIdentity(destroy.vmIdentity);
+            }
+            else if (destroy.targetVmid !== undefined) {
+                if (!(await this.isSupersededClone(destroy))) {
+                    logger.warn({ remoteId: operation.remoteId, operationId: operation.id, vmid: destroy.targetVmid }, 'Planned VMID holds no clone of the failed operation; leaving it untouched');
+                    destroy.targetVmid = undefined;
+                    return;
+                }
+                await provider.assertOwnedVmid(destroy.targetVmid);
+                destroy.vmid = destroy.targetVmid;
+            }
+        }
+        catch (error) {
+            if (!(error instanceof error_types_1.NotFoundError))
+                throw error;
+            throw new remote_operation_errors_1.RemoteOperationStepRefusedError('VM_NOT_FOUND', 'The VM no longer exists. Delete the registration only.');
+        }
+    }
+    async pullFamilies({ operation, details }) {
+        const destroy = details;
+        destroy.familyPull = await this.writeback.pullFamiliesNow(operation.remoteId);
+        if (!destroy.familyPull.pulled && destroy.familyPull.families.length > 0) {
+            if (!destroy.force) {
+                throw new remote_operation_errors_1.RemoteOperationStepRefusedError('REMOTE_OFFLINE', 'The host did not answer the final provider login pull. Retry or force deletion to use the last stored logins.');
+            }
+            for (const family of destroy.familyPull.families) {
+                logger.warn({
+                    remoteId: operation.remoteId,
+                    operationId: operation.id,
+                    provider: family.provider,
+                    entryId: family.entryId,
+                    lastWritebackAt: family.lastWritebackAt,
+                }, 'Forced VM deletion used the last stored provider login');
+            }
+        }
+    }
+    async destroy({ operation, details }) {
+        const target = details;
+        if (target.vmIdentity) {
+            await (0, guarded_vm_destroy_1.destroyGuardedVm)({
+                storage: this.storage,
+                providers: this.providers,
+                operation,
+                details,
+                connectionId: target.connectionId,
+                vmIdentity: target.vmIdentity,
+                vmidKey: 'vmid',
+                attemptKey: 'destroyAttempted',
+            });
+        }
+        else if (target.targetVmid !== undefined && (await this.isSupersededClone(target))) {
+            await (0, guarded_vm_destroy_1.destroyGuardedVmid)({
+                storage: this.storage,
+                providers: this.providers,
+                operation,
+                details,
+                connectionId: target.connectionId,
+                vmid: target.targetVmid,
+                attemptKey: 'destroyAttempted',
+            });
+        }
+        await this.storage.updateRemoteBaseUrl(operation.remoteId, null);
+        await this.storage.updateRemoteVmIdentity(operation.remoteId, null);
+    }
+    async isSupersededClone(target) {
+        if (target.targetVmid === undefined || !target.targetVmName || !target.supersededOperationId) {
+            return false;
+        }
+        return this.lifecycle.isOperationClone(target.connectionId, target.targetVmid, target.targetVmName, target.supersededOperationId);
+    }
+};
+exports.DestroyVmOperation = DestroyVmOperation;
+exports.DestroyVmOperation = DestroyVmOperation = __decorate([
+    (0, common_1.Injectable)(),
+    __param(0, (0, common_1.Inject)(storage_interface_1.STORAGE_SERVICE)),
+    __metadata("design:paramtypes", [Object, vm_providers_service_1.VmProvidersService,
+        provider_auth_writeback_service_1.ProviderAuthWritebackService,
+        proxmox_vm_lifecycle_service_1.ProxmoxVmLifecycleService])
+], DestroyVmOperation);
+//# sourceMappingURL=destroy-vm.operation.js.map

package/dist/server/modules/remotes/operations/destroy-vm.operation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"destroy-vm.operation.js","sourceRoot":"","sources":["../../../../src/modules/remotes/operations/destroy-vm.operation.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,2CAAoD;AACpD,oEAAkF;AAClF,2DAA8D;AAC9D,yGAG6D;AAC7D,kFAAiG;AAEjG,kGAA4F;AAC5F,kFAA6E;AAC7E,6DAA4E;AAC5E,uEAA4E;AAC5E,qEAKkC;AAElC,MAAM,MAAM,GAAG,IAAA,qBAAY,EAAC,oBAAoB,CAAC,CAAC;AAqB3C,IAAM,kBAAkB,GAAxB,MAAM,kBAAkB;IAiBe;IACzB;IACA;IACA;IAnBV,IAAI,GAAG,YAAqB,CAAC;IAC7B,KAAK,GAA6C;QACzD;YACE,EAAE,EAAE,WAAW;YACf,KAAK,EAAE,iCAAiC;YACxC,GAAG,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC;SAClC;QACD;YACE,EAAE,EAAE,eAAe;YACnB,KAAK,EAAE,6BAA6B;YACpC,GAAG,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC;SACrC;QACD,EAAE,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,gBAAgB,EAAE,GAAG,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE;KAC5E,CAAC;IAEF,YAC4C,OAAsB,EAC/C,SAA6B,EAC7B,SAAuC,EACvC,SAAoC;QAHX,YAAO,GAAP,OAAO,CAAe;QAC/C,cAAS,GAAT,SAAS,CAAoB;QAC7B,cAAS,GAAT,SAAS,CAA8B;QACvC,cAAS,GAAT,SAAS,CAA2B;IACpD,CAAC;IAEJ,iBAAiB,CAAC,SAA0B;QAC1C,IAAI,IAAA,oCAAW,EAAC,SAAS,EAAE,SAAS,CAAC,EAAE,CAAC;YACtC,MAAM,IAAI,2BAAa,CAAC,uDAAuD,EAAE;gBAC/E,IAAI,EAAE,kCAAkC;gBACxC,WAAW,EAAE,SAAS,CAAC,EAAE;aAC1B,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,KAAK,CAAC,QAAQ,KAAmB,CAAC;IAElC,KAAK,CAAC,SAAS,CAAC,SAA0B;QACxC,MAAM,OAAO,GAAG,SAAS,CAAC,OAAsC,CAAC;QACjE,MAAM,CAAC,IAAI,CACT,EAAE,QAAQ,EAAE,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,WAAW,EAAE,SAAS,CAAC,EAAE,EAAE,EAC/E,oDAAoD,CACrD,CAAC;QACF,MAAM,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;IACtD,CAAC;IAEO,KAAK,CAAC,SAAS,CAAC,EAAE,SAAS,EAAE,OAAO,EAA0B;QACpE,MAAM,OAAO,GAAG,OAAsC,CAAC;QACvD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;QAChE,IACE,MAAM,CAAC,IAAI,KAAK,SAAS;YACzB,MAAM,CAAC,sBAAsB,KAAK,OAAO,CAAC,YAAY;YACtD,MAAM,CAAC,UAAU,KAAK,OAAO,CAAC,sBAAsB,EACpD,CAAC;YACD,MAAM,IAAI,yDAA+B,CACvC,wBAAwB,EACxB,sDAAsD,CACvD,CAAC;QACJ,CAAC;QACD,IACE,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,yBAAyB,EAAE,CAAC,CAAC,IAAI,CACnD,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,KAAK,SAAS,CAAC,QAAQ,CACrD,EACD,CAAC;YACD,MAAM,IAAI,2BAAa,CAAC,oDAAoD,EAAE;gBAC5E,IAAI,EAAE,6BAA6B;gBACnC,QAAQ,EAAE,SAAS,CAAC,QAAQ;aAC7B,CAAC,CAAC;QACL,CAAC;QACD,IAAI,CAAC,OAAO,CAAC,UAAU,IAAI,OAAO,CAAC,UAAU,KAAK,SAAS;YAAE,OAAO;QACpE,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;YAC1E,IAAI,OAAO,CAAC,UAAU,EAAE,CAAC;gBACvB,OAAO,CAAC,IAAI,GAAG,MAAM,QAAQ,CAAC,qBAAqB,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;YAC1E,CAAC;iBAAM,IAAI,OAAO,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;gBAC5C,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,iBAAiB,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC;oBAG7C,MAAM,CAAC,IAAI,CACT,EAAE,QAAQ,EAAE,SAAS,CAAC,QAAQ,EAAE,WAAW,EAAE,SAAS,CAAC,EAAE,EAAE,IAAI,EAAE,OAAO,CAAC,UAAU,EAAE,EACrF,2EAA2E,CAC5E,CAAC;oBACF,OAAO,CAAC,UAAU,GAAG,SAAS,CAAC;oBAC/B,OAAO;gBACT,CAAC;gBACD,MAAM,QAAQ,CAAC,eAAe,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;gBACnD,OAAO,CAAC,IAAI,GAAG,OAAO,CAAC,UAAU,CAAC;YACpC,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,CAAC,KAAK,YAAY,2BAAa,CAAC;gBAAE,MAAM,KAAK,CAAC;YACnD,MAAM,IAAI,yDAA+B,CACvC,cAAc,EACd,wDAAwD,CACzD,CAAC;QACJ,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,YAAY,CAAC,EAAE,SAAS,EAAE,OAAO,EAA0B;QACvE,MAAM,OAAO,GAAG,OAAsC,CAAC;QACvD,OAAO,CAAC,UAAU,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,eAAe,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;QAC9E,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,MAAM,IAAI,OAAO,CAAC,UAAU,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACzE,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;gBACnB,MAAM,IAAI,yDAA+B,CACvC,gBAAgB,EAChB,+GAA+G,CAChH,CAAC;YACJ,CAAC;YACD,KAAK,MAAM,MAAM,IAAI,OAAO,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;gBACjD,MAAM,CAAC,IAAI,CACT;oBACE,QAAQ,EAAE,SAAS,CAAC,QAAQ;oBAC5B,WAAW,EAAE,SAAS,CAAC,EAAE;oBACzB,QAAQ,EAAE,MAAM,CAAC,QAAQ;oBACzB,OAAO,EAAE,MAAM,CAAC,OAAO;oBACvB,eAAe,EAAE,MAAM,CAAC,eAAe;iBACxC,EACD,wDAAwD,CACzD,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,OAAO,CAAC,EAAE,SAAS,EAAE,OAAO,EAA0B;QAClE,MAAM,MAAM,GAAG,OAAsC,CAAC;QACtD,IAAI,MAAM,CAAC,UAAU,EAAE,CAAC;YACtB,MAAM,IAAA,qCAAgB,EAAC;gBACrB,OAAO,EAAE,IAAI,CAAC,OAAO;gBACrB,SAAS,EAAE,IAAI,CAAC,SAAS;gBACzB,SAAS;gBACT,OAAO;gBACP,YAAY,EAAE,MAAM,CAAC,YAAY;gBACjC,UAAU,EAAE,MAAM,CAAC,UAAU;gBAC7B,OAAO,EAAE,MAAM;gBACf,UAAU,EAAE,kBAAkB;aAC/B,CAAC,CAAC;QACL,CAAC;aAAM,IAAI,MAAM,CAAC,UAAU,KAAK,SAAS,IAAI,CAAC,MAAM,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC;YACrF,MAAM,IAAA,uCAAkB,EAAC;gBACvB,OAAO,EAAE,IAAI,CAAC,OAAO;gBACrB,SAAS,EAAE,IAAI,CAAC,SAAS;gBACzB,SAAS;gBACT,OAAO;gBACP,YAAY,EAAE,MAAM,CAAC,YAAY;gBACjC,IAAI,EAAE,MAAM,CAAC,UAAU;gBACvB,UAAU,EAAE,kBAAkB;aAC/B,CAAC,CAAC;QACL,CAAC;QACD,MAAM,IAAI,CAAC,OAAO,CAAC,mBAAmB,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;QACjE,MAAM,IAAI,CAAC,OAAO,CAAC,sBAAsB,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;IACtE,CAAC;IAGO,KAAK,CAAC,iBAAiB,CAAC,MAAwB;QACtD,IAAI,MAAM,CAAC,UAAU,KAAK,SAAS,IAAI,CAAC,MAAM,CAAC,YAAY,IAAI,CAAC,MAAM,CAAC,qBAAqB,EAAE,CAAC;YAC7F,OAAO,KAAK,CAAC;QACf,CAAC;QACD,OAAO,IAAI,CAAC,SAAS,CAAC,gBAAgB,CACpC,MAAM,CAAC,YAAY,EACnB,MAAM,CAAC,UAAU,EACjB,MAAM,CAAC,YAAY,EACnB,MAAM,CAAC,qBAAqB,CAC7B,CAAC;IACJ,CAAC;CACF,CAAA;AA/JY,gDAAkB;6BAAlB,kBAAkB;IAD9B,IAAA,mBAAU,GAAE;IAkBR,WAAA,IAAA,eAAM,EAAC,mCAAe,CAAC,CAAA;6CACI,yCAAkB;QAClB,8DAA4B;QAC5B,wDAAyB;GApB5C,kBAAkB,CA+J9B"}

package/dist/server/modules/remotes/operations/detach.operation.d.ts

@@ -0,0 +1,61 @@
+import { TranscriptHandoff } from './transcript-handoff';
+import { DockerHandoff } from '../docker/docker-handoff';
+import { DockerCopyBack } from '../docker/docker-copy-back';
+import type { DockerCopyBackRequest } from '../docker/docker-copy-back.dto';
+import type { RemoteOperation } from '../../storage/models/domain.models';
+import { ProjectFreezeService } from '../host/project-freeze.service';
+import { type RemoteHealthPort } from '../ports/remote-health.port';
+import { ProjectReplicaApplier } from '../replica/project-replica.applier';
+import { RemoteBindingsService } from '../services/remote-bindings.service';
+import { RemoteLiveSyncService } from '../sync/remote-live-sync.service';
+import type { ProjectTimeSettlement } from '../time/project-time-settler.service';
+import { FileSyncHandoff, type FileSyncLoss } from './file-sync-handoff';
+import { RemoteHostClient } from './remote-host.client';
+import { type RemoteOperationDefinition, type RemoteOperationStepDefinition } from './remote-operation.types';
+export interface DetachDetails {
+    force?: boolean;
+    dockerCopyBack?: DockerCopyBackRequest;
+    hostCursor?: string | null;
+    markedDetaching?: boolean;
+    fileSyncPaused?: boolean;
+    timeSettlement?: ProjectTimeSettlement;
+    finalCursor?: string;
+    forcedLoss?: {
+        hostCursor: string | null;
+        mirrorAgeMs: number | null;
+        fileSync: FileSyncLoss;
+        teamLanes: 'unfinalized';
+        transcripts?: 'remote-changes';
+    };
+}
+export declare class DetachOperation implements RemoteOperationDefinition {
+    private readonly health;
+    private readonly bindings;
+    private readonly applier;
+    private readonly host;
+    private readonly freeze;
+    private readonly liveSync;
+    private readonly fileSync;
+    private readonly transcripts;
+    private readonly docker;
+    private readonly dockerCopyBack;
+    readonly kind: "detach";
+    readonly steps: readonly RemoteOperationStepDefinition[];
+    constructor(health: RemoteHealthPort, bindings: RemoteBindingsService, applier: ProjectReplicaApplier, host: RemoteHostClient, freeze: ProjectFreezeService, liveSync: RemoteLiveSyncService, fileSync: FileSyncHandoff, transcripts: TranscriptHandoff, docker: DockerHandoff, dockerCopyBack: DockerCopyBack);
+    stepsFor(details: Record<string, unknown>): readonly RemoteOperationStepDefinition[];
+    interrupt(operationId: string): Promise<void>;
+    completed(operation: RemoteOperation): Promise<void>;
+    assertCancellable(operation: RemoteOperation): void;
+    rollback(operation: RemoteOperation): Promise<{
+        dockerCopyBackPartial?: string[];
+    } | void>;
+    private giveBack;
+    private preflight;
+    private freezeHost;
+    private stopHostSessions;
+    private waitTimeBatches;
+    private finalPull;
+    private hostRelease;
+    private unbind;
+    private thawHome;
+}