devchain-cli 0.23.3 → 0.24.0

package/dist/server/modules/remotes/operations/reset-vm.operation.js

@@ -0,0 +1,202 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ResetVmOperation = void 0;
+const docker_import_inventory_store_1 = require("./docker-import-inventory.store");
+const common_1 = require("@nestjs/common");
+const error_types_1 = require("../../../common/errors/error-types");
+const storage_interface_1 = require("../../storage/interfaces/storage.interface");
+const provider_auth_writeback_service_1 = require("../../provider-auth/provider-auth-writeback.service");
+const vm_providers_service_1 = require("../../vm-providers/vm-providers.service");
+const attach_operation_1 = require("./attach.operation");
+const create_vm_operation_1 = require("./create-vm.operation");
+const detach_operation_1 = require("./detach.operation");
+const remote_operation_errors_1 = require("./remote-operation.errors");
+const guarded_vm_destroy_1 = require("./guarded-vm-destroy");
+const vm_operations_dto_1 = require("./vm-operations.dto");
+const remote_operation_types_1 = require("./remote-operation.types");
+let ResetVmOperation = class ResetVmOperation {
+    storage;
+    providers;
+    writeback;
+    detach;
+    create;
+    attach;
+    inventory;
+    kind = 'reset_vm';
+    steps = [];
+    constructor(storage, providers, writeback, detach, create, attach, inventory) {
+        this.storage = storage;
+        this.providers = providers;
+        this.writeback = writeback;
+        this.detach = detach;
+        this.create = create;
+        this.attach = attach;
+        this.inventory = inventory;
+    }
+    stepsFor(raw) {
+        const details = raw;
+        return [
+            { id: 'preflight', label: 'Check the VM', run: (c) => this.preflight(c) },
+            {
+                id: 'pull_families',
+                label: 'Save the logins from the VM',
+                run: (c) => this.pullFamilies(c),
+            },
+            ...details.projectIds.flatMap((projectId) => this.detach
+                .stepsFor({ force: details.force })
+                .map((step) => this.projectStep('detach', projectId, step, details.force))),
+            {
+                id: 'record_loss',
+                label: 'Record what the forced reset loses',
+                run: (c) => this.recordLoss(c),
+            },
+            { id: 'destroy', label: 'Destroy the old VM', run: (c) => this.destroy(c) },
+            ...(0, remote_operation_types_1.prefixSteps)(this.create.steps, 'create_'),
+            ...details.projectIds.flatMap((projectId) => this.attach.steps.map((step) => this.projectStep('attach', projectId, step, false))),
+        ];
+    }
+    assertCancellable(operation) {
+        if (operation.steps.some((step) => step.id.startsWith('detach:') && step.state !== 'pending' && step.state !== 'skipped') ||
+            (0, remote_operation_types_1.stepStarted)(operation, 'destroy')) {
+            throw new error_types_1.ConflictError('Reset has begun moving projects or destroying the VM; retry it instead.', {
+                code: 'REMOTE_OPERATION_NOT_CANCELLABLE',
+                operationId: operation.id,
+            });
+        }
+    }
+    async interrupt(id) {
+        await this.attach.interrupt(id);
+        await this.detach.interrupt(id);
+        await this.create.interrupt(id);
+    }
+    forget(id) {
+        this.create.forget(id);
+        this.attach.forget(id);
+    }
+    retryFrom(operation) {
+        const from = this.create.retryFrom(createOperation(operation));
+        return from ? `create_${from}` : null;
+    }
+    async rollback(operation) {
+        await this.create.rollbackNewVm(createOperation(operation));
+    }
+    async preflight({ operation, details }) {
+        const reset = details;
+        const remote = await this.storage.getRemote(operation.remoteId);
+        if (remote.kind !== 'proxmox' ||
+            remote.vmProviderConnectionId !== reset.connectionId ||
+            !remote.vmIdentity ||
+            remote.vmIdentity !== reset.oldIdentity) {
+            throw new remote_operation_errors_1.RemoteOperationStepRefusedError('RESET_TARGET_CHANGED', 'The managed VM changed after reset was requested.');
+        }
+        if (reset.spec.memory < vm_operations_dto_1.MIN_VM_MEMORY_MIB) {
+            throw new remote_operation_errors_1.RemoteOperationStepRefusedError('VM_MEMORY_TOO_SMALL', 'Reset needs 4096 MiB of memory for the claim/update install.');
+        }
+        const current = (await this.storage.listRemoteProjectBindings()).filter((binding) => binding.remoteId === operation.remoteId);
+        if (current.length !== reset.projectIds.length ||
+            current.some((binding) => binding.state !== 'remote' || !reset.projectIds.includes(binding.projectId))) {
+            throw new remote_operation_errors_1.RemoteOperationStepRefusedError('RESET_BINDINGS_CHANGED', 'The connected projects changed after reset was requested.');
+        }
+        for (const projectId of reset.projectIds) {
+            const open = await this.storage.listRemoteOperations({
+                projectId,
+                states: ['running', 'failed'],
+                limit: 1,
+            });
+            if (open.length > 0) {
+                throw new remote_operation_errors_1.RemoteOperationStepRefusedError('RESET_PROJECT_OPERATION_OPEN', 'A project operation is still open; finish it before reset.');
+            }
+        }
+    }
+    async pullFamilies({ operation, details }) {
+        const reset = details;
+        reset.familyPull = await this.writeback.pullFamiliesNow(operation.remoteId);
+        if (!reset.familyPull.pulled && !reset.force) {
+            throw new remote_operation_errors_1.RemoteOperationStepRefusedError('REMOTE_OFFLINE', 'The remote did not answer the final provider login pull; choose forced reset to use the last stored logins.');
+        }
+    }
+    async recordLoss({ details }) {
+        const reset = details;
+        reset.forcedLoss = reset.projectIds.flatMap((projectId) => {
+            const loss = reset.detachDetails?.[projectId]?.forcedLoss;
+            return loss ? [{ projectId, detach: loss, families: reset.familyPull?.families ?? [] }] : [];
+        });
+    }
+    async destroy({ operation, details }) {
+        const reset = details;
+        await (0, guarded_vm_destroy_1.destroyGuardedVm)({
+            storage: this.storage,
+            providers: this.providers,
+            operation,
+            details,
+            connectionId: reset.connectionId,
+            vmIdentity: reset.oldIdentity,
+            vmidKey: 'oldVmid',
+            attemptKey: 'oldDestroyAttempted',
+        });
+        this.inventory.deleteRemote(operation.remoteId);
+        await this.storage.updateRemoteBaseUrl(operation.remoteId, null);
+        await this.storage.updateRemoteVmIdentity(operation.remoteId, null);
+        await this.storage.updateRemoteTlsCertificate(operation.remoteId, null);
+    }
+    projectStep(phase, projectId, step, force) {
+        const id = `${phase}:${projectId}:${step.id}`;
+        return {
+            id,
+            label: `${phase === 'detach' ? 'Disconnect' : 'Reconnect'} ${projectId}: ${step.label}`,
+            skip: step.skip ? () => step.skip({ force }) : undefined,
+            run: async (run) => {
+                const reset = run.details;
+                const group = phase === 'detach' ? (reset.detachDetails ??= {}) : (reset.attachDetails ??= {});
+                const nested = (group[projectId] ??
+                    (group[projectId] = phase === 'detach' ? { force } : {}));
+                const prefix = `${phase}:${projectId}:`;
+                const synthetic = {
+                    ...(0, remote_operation_types_1.withStepPrefix)(run.operation, prefix),
+                    projectId,
+                    details: nested,
+                };
+                await step.run({
+                    operation: synthetic,
+                    details: nested,
+                    progress: (patch) => {
+                        Object.assign(nested, patch);
+                        return run.progress({
+                            [phase === 'detach' ? 'detachDetails' : 'attachDetails']: {
+                                ...group,
+                                [projectId]: nested,
+                            },
+                        });
+                    },
+                });
+            },
+        };
+    }
+};
+exports.ResetVmOperation = ResetVmOperation;
+exports.ResetVmOperation = ResetVmOperation = __decorate([
+    (0, common_1.Injectable)(),
+    __param(0, (0, common_1.Inject)(storage_interface_1.STORAGE_SERVICE)),
+    __metadata("design:paramtypes", [Object, vm_providers_service_1.VmProvidersService,
+        provider_auth_writeback_service_1.ProviderAuthWritebackService,
+        detach_operation_1.DetachOperation,
+        create_vm_operation_1.CreateVmOperation,
+        attach_operation_1.AttachOperation,
+        docker_import_inventory_store_1.DockerImportInventoryStore])
+], ResetVmOperation);
+function createOperation(operation) {
+    return (0, remote_operation_types_1.withStepPrefix)(operation, 'create_');
+}
+//# sourceMappingURL=reset-vm.operation.js.map

package/dist/server/modules/remotes/operations/reset-vm.operation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"reset-vm.operation.js","sourceRoot":"","sources":["../../../../src/modules/remotes/operations/reset-vm.operation.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,mFAA6E;AAC7E,2CAAoD;AACpD,oEAAmE;AACnE,kFAAiG;AAEjG,yGAG6D;AAC7D,kFAA6E;AAC7E,yDAAqD;AACrD,+DAAgF;AAChF,yDAAyE;AACzE,uEAA4E;AAC5E,6DAAwD;AACxD,2DAAwD;AACxD,qEAOkC;AAmB3B,IAAM,gBAAgB,GAAtB,MAAM,gBAAgB;IAKiB;IACzB;IACA;IACA;IACA;IACA;IACA;IAVV,IAAI,GAAG,UAAmB,CAAC;IAC3B,KAAK,GAA6C,EAAE,CAAC;IAE9D,YAC4C,OAAsB,EAC/C,SAA6B,EAC7B,SAAuC,EACvC,MAAuB,EACvB,MAAyB,EACzB,MAAuB,EACvB,SAAqC;QANZ,YAAO,GAAP,OAAO,CAAe;QAC/C,cAAS,GAAT,SAAS,CAAoB;QAC7B,cAAS,GAAT,SAAS,CAA8B;QACvC,WAAM,GAAN,MAAM,CAAiB;QACvB,WAAM,GAAN,MAAM,CAAmB;QACzB,WAAM,GAAN,MAAM,CAAiB;QACvB,cAAS,GAAT,SAAS,CAA4B;IACrD,CAAC;IAEJ,QAAQ,CAAC,GAA4B;QACnC,MAAM,OAAO,GAAG,GAAgC,CAAC;QACjD,OAAO;YACL,EAAE,EAAE,EAAE,WAAW,EAAE,KAAK,EAAE,cAAc,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE;YACzE;gBACE,EAAE,EAAE,eAAe;gBACnB,KAAK,EAAE,6BAA6B;gBACpC,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC;aACjC;YACD,GAAG,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,SAAS,EAAE,EAAE,CAC1C,IAAI,CAAC,MAAM;iBACR,QAAQ,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC;iBAClC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,WAAW,CAAC,QAAQ,EAAE,SAAS,EAAE,IAAI,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC,CAC7E;YACD;gBACE,EAAE,EAAE,aAAa;gBACjB,KAAK,EAAE,oCAAoC;gBAC3C,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC;aAC/B;YACD,EAAE,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,oBAAoB,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE;YAC3E,GAAG,IAAA,oCAAW,EAAC,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,SAAS,CAAC;YAC5C,GAAG,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,SAAS,EAAE,EAAE,CAC1C,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,WAAW,CAAC,QAAQ,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC,CACpF;SACF,CAAC;IACJ,CAAC;IAED,iBAAiB,CAAC,SAA0B;QAC1C,IACE,SAAS,CAAC,KAAK,CAAC,IAAI,CAClB,CAAC,IAAI,EAAE,EAAE,CACP,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS,CACxF;YACD,IAAA,oCAAW,EAAC,SAAS,EAAE,SAAS,CAAC,EACjC,CAAC;YACD,MAAM,IAAI,2BAAa,CACrB,yEAAyE,EACzE;gBACE,IAAI,EAAE,kCAAkC;gBACxC,WAAW,EAAE,SAAS,CAAC,EAAE;aAC1B,CACF,CAAC;QACJ,CAAC;IACH,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,EAAU;QACxB,MAAM,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;QAChC,MAAM,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;QAChC,MAAM,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;IAClC,CAAC;IACD,MAAM,CAAC,EAAU;QACf,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QACvB,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IACzB,CAAC;IACD,SAAS,CAAC,SAA0B;QAClC,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,eAAe,CAAC,SAAS,CAAC,CAAC,CAAC;QAC/D,OAAO,IAAI,CAAC,CAAC,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;IACxC,CAAC;IACD,KAAK,CAAC,QAAQ,CAAC,SAA0B;QACvC,MAAM,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,eAAe,CAAC,SAAS,CAAC,CAAC,CAAC;IAC9D,CAAC;IAEO,KAAK,CAAC,SAAS,CAAC,EAAE,SAAS,EAAE,OAAO,EAA0B;QACpE,MAAM,KAAK,GAAG,OAAoC,CAAC;QACnD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;QAChE,IACE,MAAM,CAAC,IAAI,KAAK,SAAS;YACzB,MAAM,CAAC,sBAAsB,KAAK,KAAK,CAAC,YAAY;YACpD,CAAC,MAAM,CAAC,UAAU;YAClB,MAAM,CAAC,UAAU,KAAK,KAAK,CAAC,WAAW,EACvC,CAAC;YACD,MAAM,IAAI,yDAA+B,CACvC,sBAAsB,EACtB,mDAAmD,CACpD,CAAC;QACJ,CAAC;QACD,IAAI,KAAK,CAAC,IAAI,CAAC,MAAM,GAAG,qCAAiB,EAAE,CAAC;YAC1C,MAAM,IAAI,yDAA+B,CACvC,qBAAqB,EACrB,8DAA8D,CAC/D,CAAC;QACJ,CAAC;QACD,MAAM,OAAO,GAAG,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,yBAAyB,EAAE,CAAC,CAAC,MAAM,CACrE,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,KAAK,SAAS,CAAC,QAAQ,CACrD,CAAC;QACF,IACE,OAAO,CAAC,MAAM,KAAK,KAAK,CAAC,UAAU,CAAC,MAAM;YAC1C,OAAO,CAAC,IAAI,CACV,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,QAAQ,CAAC,OAAO,CAAC,SAAS,CAAC,CACzF,EACD,CAAC;YACD,MAAM,IAAI,yDAA+B,CACvC,wBAAwB,EACxB,2DAA2D,CAC5D,CAAC;QACJ,CAAC;QACD,KAAK,MAAM,SAAS,IAAI,KAAK,CAAC,UAAU,EAAE,CAAC;YACzC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,oBAAoB,CAAC;gBACnD,SAAS;gBACT,MAAM,EAAE,CAAC,SAAS,EAAE,QAAQ,CAAC;gBAC7B,KAAK,EAAE,CAAC;aACT,CAAC,CAAC;YACH,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACpB,MAAM,IAAI,yDAA+B,CACvC,8BAA8B,EAC9B,4DAA4D,CAC7D,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,YAAY,CAAC,EAAE,SAAS,EAAE,OAAO,EAA0B;QACvE,MAAM,KAAK,GAAG,OAAoC,CAAC;QACnD,KAAK,CAAC,UAAU,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,eAAe,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;QAC5E,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;YAC7C,MAAM,IAAI,yDAA+B,CACvC,gBAAgB,EAChB,6GAA6G,CAC9G,CAAC;QACJ,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,UAAU,CAAC,EAAE,OAAO,EAA0B;QAC1D,MAAM,KAAK,GAAG,OAAoC,CAAC;QACnD,KAAK,CAAC,UAAU,GAAG,KAAK,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,SAAS,EAAE,EAAE;YACxD,MAAM,IAAI,GAAG,KAAK,CAAC,aAAa,EAAE,CAAC,SAAS,CAAC,EAAE,UAAU,CAAC;YAC1D,OAAO,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,CAAC,UAAU,EAAE,QAAQ,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/F,CAAC,CAAC,CAAC;IACL,CAAC;IAEO,KAAK,CAAC,OAAO,CAAC,EAAE,SAAS,EAAE,OAAO,EAA0B;QAClE,MAAM,KAAK,GAAG,OAAoC,CAAC;QACnD,MAAM,IAAA,qCAAgB,EAAC;YACrB,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,SAAS;YACT,OAAO;YACP,YAAY,EAAE,KAAK,CAAC,YAAY;YAChC,UAAU,EAAE,KAAK,CAAC,WAAW;YAC7B,OAAO,EAAE,SAAS;YAClB,UAAU,EAAE,qBAAqB;SAClC,CAAC,CAAC;QACH,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;QAChD,MAAM,IAAI,CAAC,OAAO,CAAC,mBAAmB,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;QACjE,MAAM,IAAI,CAAC,OAAO,CAAC,sBAAsB,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;QACpE,MAAM,IAAI,CAAC,OAAO,CAAC,0BAA0B,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;IAC1E,CAAC;IAEO,WAAW,CACjB,KAA0B,EAC1B,SAAiB,EACjB,IAAmC,EACnC,KAAc;QAEd,MAAM,EAAE,GAAG,GAAG,KAAK,IAAI,SAAS,IAAI,IAAI,CAAC,EAAE,EAAE,CAAC;QAC9C,OAAO;YACL,EAAE;YACF,KAAK,EAAE,GAAG,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,WAAW,IAAI,SAAS,KAAK,IAAI,CAAC,KAAK,EAAE;YACvF,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,IAAK,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS;YACzD,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;gBACjB,MAAM,KAAK,GAAG,GAAG,CAAC,OAAoC,CAAC;gBACvD,MAAM,KAAK,GACT,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,aAAa,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,aAAa,KAAK,EAAE,CAAC,CAAC;gBACnF,MAAM,MAAM,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC;oBAC9B,CAAC,KAAK,CAAC,SAAS,CAAC,GAAG,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAA4B,CAAC;gBACvF,MAAM,MAAM,GAAG,GAAG,KAAK,IAAI,SAAS,GAAG,CAAC;gBACxC,MAAM,SAAS,GAAoB;oBACjC,GAAG,IAAA,uCAAc,EAAC,GAAG,CAAC,SAAS,EAAE,MAAM,CAAC;oBACxC,SAAS;oBACT,OAAO,EAAE,MAAM;iBAChB,CAAC;gBACF,MAAM,IAAI,CAAC,GAAG,CAAC;oBACb,SAAS,EAAE,SAAS;oBACpB,OAAO,EAAE,MAAM;oBACf,QAAQ,EAAE,CAAC,KAAK,EAAE,EAAE;wBAClB,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;wBAC7B,OAAO,GAAG,CAAC,QAAQ,CAAC;4BAClB,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,eAAe,CAAC,EAAE;gCACxD,GAAG,KAAK;gCACR,CAAC,SAAS,CAAC,EAAE,MAAM;6BACpB;yBACF,CAAC,CAAC;oBACL,CAAC;iBACF,CAAC,CAAC;YACL,CAAC;SACF,CAAC;IACJ,CAAC;CACF,CAAA;AAzMY,4CAAgB;2BAAhB,gBAAgB;IAD5B,IAAA,mBAAU,GAAE;IAMR,WAAA,IAAA,eAAM,EAAC,mCAAe,CAAC,CAAA;6CACI,yCAAkB;QAClB,8DAA4B;QAC/B,kCAAe;QACf,uCAAiB;QACjB,kCAAe;QACZ,0DAA0B;GAX7C,gBAAgB,CAyM5B;AAED,SAAS,eAAe,CAAC,SAA0B;IACjD,OAAO,IAAA,uCAAc,EAAC,SAAS,EAAE,SAAS,CAAC,CAAC;AAC9C,CAAC"}

package/dist/server/modules/remotes/operations/syncthing-temp-cleanup.d.ts

@@ -0,0 +1,2 @@
+export declare const SYNCTHING_TEMP_CLEANUP_TIMEOUT_MS = 30000;
+export declare function deleteSyncthingTempFiles(rootPath: string, ignores: readonly string[], timeoutMs?: number): Promise<number>;

package/dist/server/modules/remotes/operations/syncthing-temp-cleanup.js

@@ -0,0 +1,68 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SYNCTHING_TEMP_CLEANUP_TIMEOUT_MS = void 0;
+exports.deleteSyncthingTempFiles = deleteSyncthingTempFiles;
+const promises_1 = require("node:fs/promises");
+const node_path_1 = require("node:path");
+const syncthing_markers_1 = require("../../../common/constants/syncthing-markers");
+const logger_1 = require("../../../common/logging/logger");
+const project_size_service_1 = require("../host-install/project-size.service");
+const logger = (0, logger_1.createLogger)('SyncthingTempCleanup');
+exports.SYNCTHING_TEMP_CLEANUP_TIMEOUT_MS = 30_000;
+class TempCleanupStoppedError extends Error {
+    constructor() {
+        super('Syncthing temp-file cleanup reached its time limit');
+        this.name = 'TempCleanupStoppedError';
+    }
+}
+async function deleteSyncthingTempFiles(rootPath, ignores, timeoutMs = exports.SYNCTHING_TEMP_CLEANUP_TIMEOUT_MS) {
+    const { rules } = (0, project_size_service_1.parseIgnoreRules)(ignores);
+    const startedAt = Date.now();
+    const expired = () => {
+        if (Date.now() - startedAt >= timeoutMs)
+            throw new TempCleanupStoppedError();
+    };
+    let deleted = 0;
+    const walk = async (directoryPath) => {
+        expired();
+        const directory = await (0, promises_1.opendir)(directoryPath);
+        try {
+            for await (const entry of directory) {
+                expired();
+                if (entry.isSymbolicLink() || (0, project_size_service_1.isIgnored)(entry.name, rules))
+                    continue;
+                if (entry.isDirectory())
+                    await walk((0, node_path_1.join)(directoryPath, entry.name));
+                else if (entry.isFile() && (0, syncthing_markers_1.isSyncthingTemp)(entry.name)) {
+                    await (0, promises_1.rm)((0, node_path_1.join)(directoryPath, entry.name));
+                    deleted += 1;
+                }
+            }
+        }
+        finally {
+            await directory.close().catch(() => undefined);
+        }
+    };
+    let timer;
+    try {
+        const walking = walk(rootPath);
+        const timeout = new Promise((_, reject) => {
+            timer = setTimeout(() => reject(new TempCleanupStoppedError()), timeoutMs);
+        });
+        await Promise.race([walking, timeout]);
+    }
+    catch (error) {
+        if (error instanceof TempCleanupStoppedError) {
+            logger.warn({ rootPath, deleted }, 'Syncthing temp-file cleanup stopped at its time limit');
+        }
+        else {
+            logger.warn({ rootPath, deleted, error: error instanceof Error ? error.message : String(error) }, 'Syncthing temp-file cleanup failed');
+        }
+    }
+    finally {
+        if (timer !== undefined)
+            clearTimeout(timer);
+    }
+    return deleted;
+}
+//# sourceMappingURL=syncthing-temp-cleanup.js.map

package/dist/server/modules/remotes/operations/syncthing-temp-cleanup.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"syncthing-temp-cleanup.js","sourceRoot":"","sources":["../../../../src/modules/remotes/operations/syncthing-temp-cleanup.ts"],"names":[],"mappings":";;;AA4BA,4DAoDC;AAhFD,+CAA+C;AAC/C,yCAAiC;AACjC,mFAA8E;AAC9E,2DAA8D;AAC9D,+EAAmF;AAEnF,MAAM,MAAM,GAAG,IAAA,qBAAY,EAAC,sBAAsB,CAAC,CAAC;AAGvC,QAAA,iCAAiC,GAAG,MAAM,CAAC;AAExD,MAAM,uBAAwB,SAAQ,KAAK;IACzC;QACE,KAAK,CAAC,oDAAoD,CAAC,CAAC;QAC5D,IAAI,CAAC,IAAI,GAAG,yBAAyB,CAAC;IACxC,CAAC;CACF;AAYM,KAAK,UAAU,wBAAwB,CAC5C,QAAgB,EAChB,OAA0B,EAC1B,SAAS,GAAG,yCAAiC;IAE7C,MAAM,EAAE,KAAK,EAAE,GAAG,IAAA,uCAAgB,EAAC,OAAO,CAAC,CAAC;IAC5C,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC7B,MAAM,OAAO,GAAG,GAAG,EAAE;QACnB,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,IAAI,SAAS;YAAE,MAAM,IAAI,uBAAuB,EAAE,CAAC;IAC/E,CAAC,CAAC;IACF,IAAI,OAAO,GAAG,CAAC,CAAC;IAEhB,MAAM,IAAI,GAAG,KAAK,EAAE,aAAqB,EAAiB,EAAE;QAC1D,OAAO,EAAE,CAAC;QACV,MAAM,SAAS,GAAG,MAAM,IAAA,kBAAO,EAAC,aAAa,CAAC,CAAC;QAC/C,IAAI,CAAC;YACH,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,SAAS,EAAE,CAAC;gBACpC,OAAO,EAAE,CAAC;gBAGV,IAAI,KAAK,CAAC,cAAc,EAAE,IAAI,IAAA,gCAAS,EAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC;oBAAE,SAAS;gBACrE,IAAI,KAAK,CAAC,WAAW,EAAE;oBAAE,MAAM,IAAI,CAAC,IAAA,gBAAI,EAAC,aAAa,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;qBAChE,IAAI,KAAK,CAAC,MAAM,EAAE,IAAI,IAAA,mCAAe,EAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;oBACvD,MAAM,IAAA,aAAE,EAAC,IAAA,gBAAI,EAAC,aAAa,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;oBAC1C,OAAO,IAAI,CAAC,CAAC;gBACf,CAAC;YACH,CAAC;QACH,CAAC;gBAAS,CAAC;YACT,MAAM,SAAS,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QACjD,CAAC;IACH,CAAC,CAAC;IAEF,IAAI,KAAgD,CAAC;IACrD,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC/B,MAAM,OAAO,GAAG,IAAI,OAAO,CAAQ,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE;YAC/C,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,uBAAuB,EAAE,CAAC,EAAE,SAAS,CAAC,CAAC;QAC7E,CAAC,CAAC,CAAC;QACH,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;IACzC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,uBAAuB,EAAE,CAAC;YAC7C,MAAM,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,EAAE,uDAAuD,CAAC,CAAC;QAC9F,CAAC;aAAM,CAAC;YACN,MAAM,CAAC,IAAI,CACT,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,EACpF,oCAAoC,CACrC,CAAC;QACJ,CAAC;IACH,CAAC;YAAS,CAAC;QACT,IAAI,KAAK,KAAK,SAAS;YAAE,YAAY,CAAC,KAAK,CAAC,CAAC;IAC/C,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/dist/server/modules/remotes/operations/transcript-handoff.d.ts

@@ -0,0 +1,11 @@
+import { TranscriptFilesService } from '../transcripts/transcript-files.service';
+import { RemoteHostClient } from './remote-host.client';
+import type { RemoteOperationStepRun } from './remote-operation.types';
+export declare class TranscriptHandoff {
+    private readonly files;
+    private readonly host;
+    private readonly active;
+    constructor(files: TranscriptFilesService, host: RemoteHostClient);
+    interrupt(operationId: string): void;
+    copy(run: RemoteOperationStepRun, projectId: string, direction: 'push' | 'pull'): Promise<void>;
+}

package/dist/server/modules/remotes/operations/transcript-handoff.js

@@ -0,0 +1,68 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.TranscriptHandoff = void 0;
+const common_1 = require("@nestjs/common");
+const transcript_files_service_1 = require("../transcripts/transcript-files.service");
+const remote_host_client_1 = require("./remote-host.client");
+let TranscriptHandoff = class TranscriptHandoff {
+    files;
+    host;
+    active = new Map();
+    constructor(files, host) {
+        this.files = files;
+        this.host = host;
+    }
+    interrupt(operationId) {
+        this.active.get(operationId)?.abort();
+    }
+    async copy(run, projectId, direction) {
+        const controller = new AbortController();
+        this.active.set(run.operation.id, controller);
+        try {
+            const { refs, skipped } = this.files.projectRefs(projectId);
+            const home = await this.files.list(refs);
+            const host = await this.host.listTranscripts(run.operation.remoteId, refs);
+            const [source, destination] = direction === 'push' ? [home, host] : [host, home];
+            const sizes = new Map(destination.files.map(({ file, size }) => [`${file.provider}:${file.path}`, size]));
+            const pending = source.files.filter(({ file, size }) => sizes.get(`${file.provider}:${file.path}`) !== size);
+            const progress = {
+                filesDone: 0,
+                filesTotal: pending.length,
+                bytesDone: 0,
+                bytesTotal: pending.reduce((sum, file) => sum + file.size, 0),
+                missing: source.missing,
+                skipped,
+            };
+            await run.progress({ transcripts: { ...progress } });
+            for (const { file, size } of pending) {
+                controller.signal.throwIfAborted();
+                if (direction === 'push')
+                    await this.host.uploadTranscript(run.operation.remoteId, file, this.files, controller.signal);
+                else
+                    await this.host.downloadTranscript(run.operation.remoteId, file, this.files, controller.signal);
+                progress.filesDone++;
+                progress.bytesDone += size;
+                await run.progress({ transcripts: { ...progress } });
+            }
+        }
+        finally {
+            this.active.delete(run.operation.id);
+        }
+    }
+};
+exports.TranscriptHandoff = TranscriptHandoff;
+exports.TranscriptHandoff = TranscriptHandoff = __decorate([
+    (0, common_1.Injectable)(),
+    __metadata("design:paramtypes", [transcript_files_service_1.TranscriptFilesService,
+        remote_host_client_1.RemoteHostClient])
+], TranscriptHandoff);
+//# sourceMappingURL=transcript-handoff.js.map

package/dist/server/modules/remotes/operations/transcript-handoff.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"transcript-handoff.js","sourceRoot":"","sources":["../../../../src/modules/remotes/operations/transcript-handoff.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,2CAA4C;AAC5C,sFAAiF;AAEjF,6DAAwD;AAIjD,IAAM,iBAAiB,GAAvB,MAAM,iBAAiB;IAIT;IACA;IAJF,MAAM,GAAG,IAAI,GAAG,EAA2B,CAAC;IAE7D,YACmB,KAA6B,EAC7B,IAAsB;QADtB,UAAK,GAAL,KAAK,CAAwB;QAC7B,SAAI,GAAJ,IAAI,CAAkB;IACtC,CAAC;IAEJ,SAAS,CAAC,WAAmB;QAC3B,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,KAAK,EAAE,CAAC;IACxC,CAAC;IAED,KAAK,CAAC,IAAI,CACR,GAA2B,EAC3B,SAAiB,EACjB,SAA0B;QAE1B,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;QACzC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,EAAE,UAAU,CAAC,CAAC;QAC9C,IAAI,CAAC;YACH,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC;YAC5D,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACzC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;YAC3E,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,GAAG,SAAS,KAAK,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;YACjF,MAAM,KAAK,GAAG,IAAI,GAAG,CACnB,WAAW,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,IAAI,EAAE,EAAE,IAAI,CAAC,CAAC,CACnF,CAAC;YACF,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CACjC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,IAAI,CACxE,CAAC;YACF,MAAM,QAAQ,GAA8B;gBAC1C,SAAS,EAAE,CAAC;gBACZ,UAAU,EAAE,OAAO,CAAC,MAAM;gBAC1B,SAAS,EAAE,CAAC;gBACZ,UAAU,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,CAAC,GAAG,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;gBAC7D,OAAO,EAAE,MAAM,CAAC,OAAO;gBACvB,OAAO;aACR,CAAC;YACF,MAAM,GAAG,CAAC,QAAQ,CAAC,EAAE,WAAW,EAAE,EAAE,GAAG,QAAQ,EAAE,EAAE,CAAC,CAAC;YACrD,KAAK,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,OAAO,EAAE,CAAC;gBACrC,UAAU,CAAC,MAAM,CAAC,cAAc,EAAE,CAAC;gBACnC,IAAI,SAAS,KAAK,MAAM;oBACtB,MAAM,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAC9B,GAAG,CAAC,SAAS,CAAC,QAAQ,EACtB,IAAI,EACJ,IAAI,CAAC,KAAK,EACV,UAAU,CAAC,MAAM,CAClB,CAAC;;oBAEF,MAAM,IAAI,CAAC,IAAI,CAAC,kBAAkB,CAChC,GAAG,CAAC,SAAS,CAAC,QAAQ,EACtB,IAAI,EACJ,IAAI,CAAC,KAAK,EACV,UAAU,CAAC,MAAM,CAClB,CAAC;gBACJ,QAAQ,CAAC,SAAS,EAAE,CAAC;gBACrB,QAAQ,CAAC,SAAS,IAAI,IAAI,CAAC;gBAC3B,MAAM,GAAG,CAAC,QAAQ,CAAC,EAAE,WAAW,EAAE,EAAE,GAAG,QAAQ,EAAE,EAAE,CAAC,CAAC;YACvD,CAAC;QACH,CAAC;gBAAS,CAAC;YACT,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;QACvC,CAAC;IACH,CAAC;CACF,CAAA;AA/DY,8CAAiB;4BAAjB,iBAAiB;IAD7B,IAAA,mBAAU,GAAE;qCAKe,iDAAsB;QACvB,qCAAgB;GAL9B,iBAAiB,CA+D7B"}

package/dist/server/modules/remotes/operations/update-host.operation.d.ts

@@ -0,0 +1,32 @@
+import type { RemoteOperation } from '../../storage/models/domain.models';
+import { type RemoteHealthPort } from '../ports/remote-health.port';
+import { RemoteBindingsService } from '../services/remote-bindings.service';
+import { RemoteHostClient } from './remote-host.client';
+import { type RemoteOperationTiming } from './remote-operation.timing';
+import { type RemoteOperationDefinition, type RemoteOperationStepDefinition } from './remote-operation.types';
+export interface UpdateHostDetails {
+    versionChange?: boolean;
+    installDocker?: boolean;
+    dockerChange?: boolean;
+    version: string;
+    frozenProjectIds?: string[];
+}
+export declare class UpdateHostOperation implements RemoteOperationDefinition {
+    private readonly health;
+    private readonly bindings;
+    private readonly host;
+    readonly kind: "update_host";
+    readonly steps: readonly RemoteOperationStepDefinition[];
+    private readonly timing;
+    constructor(health: RemoteHealthPort, bindings: RemoteBindingsService, host: RemoteHostClient, timing?: RemoteOperationTiming | null);
+    stepsFor(details: Record<string, unknown>): readonly RemoteOperationStepDefinition[];
+    assertCancellable(operation: RemoteOperation): void;
+    rollback(operation: RemoteOperation): Promise<void>;
+    private preflight;
+    private freezeProjects;
+    private update;
+    private waitHealthy;
+    private thawProjects;
+    private thaw;
+    private hostRuntime;
+}

package/dist/server/modules/remotes/operations/update-host.operation.js

@@ -0,0 +1,156 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.UpdateHostOperation = void 0;
+const docker_step_1 = require("./docker.step");
+const common_1 = require("@nestjs/common");
+const error_types_1 = require("../../../common/errors/error-types");
+const logger_1 = require("../../../common/logging/logger");
+const remote_health_port_1 = require("../ports/remote-health.port");
+const remote_bindings_service_1 = require("../services/remote-bindings.service");
+const remote_host_client_1 = require("./remote-host.client");
+const host_api_key_1 = require("../host-api-key");
+const remote_operation_errors_1 = require("./remote-operation.errors");
+const remote_operation_timing_1 = require("./remote-operation.timing");
+const remote_operation_types_1 = require("./remote-operation.types");
+const logger = (0, logger_1.createLogger)('UpdateHostOperation');
+let UpdateHostOperation = class UpdateHostOperation {
+    health;
+    bindings;
+    host;
+    kind = 'update_host';
+    steps;
+    timing;
+    constructor(health, bindings, host, timing = null) {
+        this.health = health;
+        this.bindings = bindings;
+        this.host = host;
+        this.timing = timing ?? remote_operation_timing_1.DEFAULT_REMOTE_OPERATION_TIMING;
+        this.steps = [
+            { id: 'preflight', label: 'Check the VM', run: (c) => this.preflight(c) },
+            {
+                id: 'freeze_projects',
+                label: 'Lock the projects on the VM',
+                run: (c) => this.freezeProjects(c),
+            },
+            { id: 'update', label: 'Install the new version', run: (c) => this.update(c) },
+            {
+                id: 'wait_healthy',
+                label: 'Wait for DevChain to restart',
+                run: (c) => this.waitHealthy(c),
+            },
+            (0, docker_step_1.dockerStep)(this.host, this.timing),
+            {
+                id: 'thaw_projects',
+                label: 'Unlock the projects on the VM',
+                run: (c) => this.thawProjects(c),
+            },
+        ];
+    }
+    stepsFor(details) {
+        return this.steps.filter((step) => {
+            if (step.id === 'docker')
+                return details.dockerChange === true;
+            if (step.id === 'update' || step.id === 'wait_healthy')
+                return details.versionChange !== false;
+            return true;
+        });
+    }
+    assertCancellable(operation) {
+        if ((0, remote_operation_types_1.stepStarted)(operation, 'update') || (0, remote_operation_types_1.stepStarted)(operation, 'docker')) {
+            throw new error_types_1.ConflictError('The host may be installing the version; retry instead.', {
+                code: 'REMOTE_OPERATION_NOT_CANCELLABLE',
+                operationId: operation.id,
+            });
+        }
+    }
+    async rollback(operation) {
+        await this.thaw(operation);
+    }
+    async preflight({ operation, details }) {
+        const { version } = details;
+        const health = await this.health.refresh(operation.remoteId);
+        if (!health.online) {
+            throw new remote_operation_errors_1.RemoteOperationStepRefusedError('REMOTE_OFFLINE', 'The remote is offline.', {
+                remoteId: operation.remoteId,
+            });
+        }
+        if (health.apiKeyRejected) {
+            throw new remote_operation_errors_1.RemoteOperationStepRefusedError(host_api_key_1.HOST_API_KEY_REJECTED, host_api_key_1.HOST_API_KEY_REJECTED_MESSAGE, { remoteId: operation.remoteId });
+        }
+        if (health.version === version && details.dockerChange !== true) {
+            throw new remote_operation_errors_1.RemoteOperationStepRefusedError('REMOTE_VERSION_CURRENT', `The remote already runs ${version}.`, { remoteId: operation.remoteId });
+        }
+    }
+    async freezeProjects({ operation, details }) {
+        const projectIds = (await this.bindings.list())
+            .filter((binding) => binding.remoteId === operation.remoteId && binding.state === 'remote')
+            .map((binding) => binding.projectId);
+        details.frozenProjectIds = projectIds;
+        for (const projectId of projectIds) {
+            await this.host.freeze(operation.remoteId, projectId);
+        }
+    }
+    async update({ operation, details }) {
+        const { version } = details;
+        const remote = await this.hostRuntime(operation);
+        if (remote === version)
+            return;
+        const outcome = await this.host.requestHostUpdate(operation.remoteId, version);
+        logger.info({ operationId: operation.id, version, outcome }, 'Host update requested');
+    }
+    async waitHealthy({ operation, details }) {
+        const { version } = details;
+        const deadline = Date.now() + this.timing.hostUpdateTimeoutMs;
+        for (;;) {
+            if ((await this.hostRuntime(operation)) === version)
+                break;
+            const status = await this.host.hostUpdateStatus(operation.remoteId).catch(() => null);
+            if (status?.state === 'failed' && status.version === version) {
+                throw new remote_operation_errors_1.RemoteOperationStepRefusedError('HOST_UPDATE_FAILED', `The host could not install ${version}: ${status.error ?? 'unknown error'}.`);
+            }
+            if (Date.now() >= deadline) {
+                throw new remote_operation_errors_1.RemoteOperationStepRefusedError('HOST_UPDATE_TIMEOUT', `The host did not come back on ${version} in time.`);
+            }
+            await (0, remote_operation_timing_1.sleep)(this.timing.pollIntervalMs);
+        }
+        const health = await this.health.refresh(operation.remoteId);
+        if (!health.versionMatches) {
+            throw new remote_operation_errors_1.RemoteOperationStepRefusedError('REMOTE_VERSION_MISMATCH', `The remote runs ${health.version ?? 'an unknown version'}, which differs from this instance.`);
+        }
+    }
+    async thawProjects({ operation }) {
+        await this.thaw(operation);
+    }
+    async thaw(operation) {
+        const projectIds = operation.details.frozenProjectIds ?? [];
+        for (const projectId of projectIds) {
+            await this.host.thaw(operation.remoteId, projectId);
+        }
+    }
+    async hostRuntime(operation) {
+        const remote = await this.host.remoteRuntime(operation.remoteId).catch(() => null);
+        return remote?.version ?? null;
+    }
+};
+exports.UpdateHostOperation = UpdateHostOperation;
+exports.UpdateHostOperation = UpdateHostOperation = __decorate([
+    (0, common_1.Injectable)(),
+    __param(0, (0, common_1.Inject)(remote_health_port_1.REMOTE_HEALTH_PORT)),
+    __param(3, (0, common_1.Optional)()),
+    __param(3, (0, common_1.Inject)(remote_operation_timing_1.REMOTE_OPERATION_TIMING)),
+    __metadata("design:paramtypes", [Object, remote_bindings_service_1.RemoteBindingsService,
+        remote_host_client_1.RemoteHostClient, Object])
+], UpdateHostOperation);
+//# sourceMappingURL=update-host.operation.js.map

package/dist/server/modules/remotes/operations/update-host.operation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"update-host.operation.js","sourceRoot":"","sources":["../../../../src/modules/remotes/operations/update-host.operation.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,+CAA2C;AAC3C,2CAA8D;AAC9D,oEAAmE;AACnE,2DAA8D;AAE9D,oEAAwF;AACxF,iFAA4E;AAC5E,6DAAwD;AACxD,kDAAuF;AACvF,uEAA4E;AAC5E,uEAKmC;AACnC,qEAKkC;AAElC,MAAM,MAAM,GAAG,IAAA,qBAAY,EAAC,qBAAqB,CAAC,CAAC;AAkB5C,IAAM,mBAAmB,GAAzB,MAAM,mBAAmB;IAMiB;IAC5B;IACA;IAPV,IAAI,GAAG,aAAsB,CAAC;IAC9B,KAAK,CAA2C;IACxC,MAAM,CAAwB;IAE/C,YAC+C,MAAwB,EACpD,QAA+B,EAC/B,IAAsB,EACM,SAAuC,IAAI;QAH3C,WAAM,GAAN,MAAM,CAAkB;QACpD,aAAQ,GAAR,QAAQ,CAAuB;QAC/B,SAAI,GAAJ,IAAI,CAAkB;QAGvC,IAAI,CAAC,MAAM,GAAG,MAAM,IAAI,yDAA+B,CAAC;QACxD,IAAI,CAAC,KAAK,GAAG;YACX,EAAE,EAAE,EAAE,WAAW,EAAE,KAAK,EAAE,cAAc,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE;YACzE;gBACE,EAAE,EAAE,iBAAiB;gBACrB,KAAK,EAAE,6BAA6B;gBACpC,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC;aACnC;YACD,EAAE,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,yBAAyB,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE;YAC9E;gBACE,EAAE,EAAE,cAAc;gBAClB,KAAK,EAAE,8BAA8B;gBACrC,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC;aAChC;YACD,IAAA,wBAAU,EAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC;YAClC;gBACE,EAAE,EAAE,eAAe;gBACnB,KAAK,EAAE,+BAA+B;gBACtC,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC;aACjC;SACF,CAAC;IACJ,CAAC;IAED,QAAQ,CAAC,OAAgC;QACvC,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE;YAChC,IAAI,IAAI,CAAC,EAAE,KAAK,QAAQ;gBAAE,OAAO,OAAO,CAAC,YAAY,KAAK,IAAI,CAAC;YAC/D,IAAI,IAAI,CAAC,EAAE,KAAK,QAAQ,IAAI,IAAI,CAAC,EAAE,KAAK,cAAc;gBACpD,OAAO,OAAO,CAAC,aAAa,KAAK,KAAK,CAAC;YACzC,OAAO,IAAI,CAAC;QACd,CAAC,CAAC,CAAC;IACL,CAAC;IAED,iBAAiB,CAAC,SAA0B;QAC1C,IAAI,IAAA,oCAAW,EAAC,SAAS,EAAE,QAAQ,CAAC,IAAI,IAAA,oCAAW,EAAC,SAAS,EAAE,QAAQ,CAAC,EAAE,CAAC;YACzE,MAAM,IAAI,2BAAa,CAAC,wDAAwD,EAAE;gBAChF,IAAI,EAAE,kCAAkC;gBACxC,WAAW,EAAE,SAAS,CAAC,EAAE;aAC1B,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,SAA0B;QACvC,MAAM,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAC7B,CAAC;IAEO,KAAK,CAAC,SAAS,CAAC,EAAE,SAAS,EAAE,OAAO,EAA0B;QACpE,MAAM,EAAE,OAAO,EAAE,GAAG,OAAuC,CAAC;QAC5D,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;QAC7D,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;YACnB,MAAM,IAAI,yDAA+B,CAAC,gBAAgB,EAAE,wBAAwB,EAAE;gBACpF,QAAQ,EAAE,SAAS,CAAC,QAAQ;aAC7B,CAAC,CAAC;QACL,CAAC;QACD,IAAI,MAAM,CAAC,cAAc,EAAE,CAAC;YAC1B,MAAM,IAAI,yDAA+B,CACvC,oCAAqB,EACrB,4CAA6B,EAC7B,EAAE,QAAQ,EAAE,SAAS,CAAC,QAAQ,EAAE,CACjC,CAAC;QACJ,CAAC;QACD,IAAI,MAAM,CAAC,OAAO,KAAK,OAAO,IAAI,OAAO,CAAC,YAAY,KAAK,IAAI,EAAE,CAAC;YAChE,MAAM,IAAI,yDAA+B,CACvC,wBAAwB,EACxB,2BAA2B,OAAO,GAAG,EACrC,EAAE,QAAQ,EAAE,SAAS,CAAC,QAAQ,EAAE,CACjC,CAAC;QACJ,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,cAAc,CAAC,EAAE,SAAS,EAAE,OAAO,EAA0B;QACzE,MAAM,UAAU,GAAG,CAAC,MAAM,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;aAC5C,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,KAAK,SAAS,CAAC,QAAQ,IAAI,OAAO,CAAC,KAAK,KAAK,QAAQ,CAAC;aAC1F,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QAEtC,OAAwC,CAAC,gBAAgB,GAAG,UAAU,CAAC;QACxE,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;YACnC,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;QACxD,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,OAAO,EAA0B;QACjE,MAAM,EAAE,OAAO,EAAE,GAAG,OAAuC,CAAC;QAC5D,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC;QACjD,IAAI,MAAM,KAAK,OAAO;YAAE,OAAO;QAC/B,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,iBAAiB,CAAC,SAAS,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QAC/E,MAAM,CAAC,IAAI,CAAC,EAAE,WAAW,EAAE,SAAS,CAAC,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,uBAAuB,CAAC,CAAC;IACxF,CAAC;IAGO,KAAK,CAAC,WAAW,CAAC,EAAE,SAAS,EAAE,OAAO,EAA0B;QACtE,MAAM,EAAE,OAAO,EAAE,GAAG,OAAuC,CAAC;QAC5D,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,mBAAmB,CAAC;QAC9D,SAAS,CAAC;YACR,IAAI,CAAC,MAAM,IAAI,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC,KAAK,OAAO;gBAAE,MAAM;YAC3D,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;YACtF,IAAI,MAAM,EAAE,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,OAAO,KAAK,OAAO,EAAE,CAAC;gBAC7D,MAAM,IAAI,yDAA+B,CACvC,oBAAoB,EACpB,8BAA8B,OAAO,KAAK,MAAM,CAAC,KAAK,IAAI,eAAe,GAAG,CAC7E,CAAC;YACJ,CAAC;YACD,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,QAAQ,EAAE,CAAC;gBAC3B,MAAM,IAAI,yDAA+B,CACvC,qBAAqB,EACrB,iCAAiC,OAAO,WAAW,CACpD,CAAC;YACJ,CAAC;YACD,MAAM,IAAA,+BAAK,EAAC,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;QAC1C,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;QAC7D,IAAI,CAAC,MAAM,CAAC,cAAc,EAAE,CAAC;YAC3B,MAAM,IAAI,yDAA+B,CACvC,yBAAyB,EACzB,mBAAmB,MAAM,CAAC,OAAO,IAAI,oBAAoB,qCAAqC,CAC/F,CAAC;QACJ,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,YAAY,CAAC,EAAE,SAAS,EAA0B;QAC9D,MAAM,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAC7B,CAAC;IAEO,KAAK,CAAC,IAAI,CAAC,SAA0B;QAC3C,MAAM,UAAU,GAAI,SAAS,CAAC,OAAwC,CAAC,gBAAgB,IAAI,EAAE,CAAC;QAC9F,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;YACnC,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;QACtD,CAAC;IACH,CAAC;IAGO,KAAK,CAAC,WAAW,CAAC,SAA0B;QAClD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;QACnF,OAAO,MAAM,EAAE,OAAO,IAAI,IAAI,CAAC;IACjC,CAAC;CACF,CAAA;AAjJY,kDAAmB;8BAAnB,mBAAmB;IAD/B,IAAA,mBAAU,GAAE;IAOR,WAAA,IAAA,eAAM,EAAC,uCAAkB,CAAC,CAAA;IAG1B,WAAA,IAAA,iBAAQ,GAAE,CAAA;IAAE,WAAA,IAAA,eAAM,EAAC,iDAAuB,CAAC,CAAA;6CAFjB,+CAAqB;QACzB,qCAAgB;GAR9B,mBAAmB,CAiJ/B"}

package/dist/server/modules/remotes/operations/update-logins.operation.d.ts

@@ -0,0 +1,46 @@
+import { RemoteApiKeyService } from '../auth/remote-api-key.service';
+import { ProviderAuthGeneratorService } from '../../provider-auth/provider-auth-generator.service';
+import { ProviderAuthVaultService } from '../../provider-auth/provider-auth-vault.service';
+import { ProviderAuthWritebackService } from '../../provider-auth/provider-auth-writeback.service';
+import { type ProviderAuthStorage, type RemoteStorage } from '../../storage/interfaces/storage.interface';
+import type { RemoteOperation } from '../../storage/models/domain.models';
+import { ClaimOperation, type ClaimDetails, type ClaimProviderState } from './claim.operation';
+import type { HostProviderAuthRemoveSpec } from '../host/host-provider-auth.service';
+import { RemoteHostClient } from './remote-host.client';
+import { type RemoteOperationDefinition, type RemoteOperationStepDefinition } from './remote-operation.types';
+export type AppliedProviderManifest = HostProviderAuthRemoveSpec;
+export interface UpdateLoginsDetails extends ClaimDetails {
+    force: boolean;
+    changedProviders: string[];
+    previousProviderAuth: Record<string, ClaimProviderState>;
+    releasedIds?: string[];
+    writebackPaused?: boolean;
+    applyStarted?: boolean;
+    choicesReplaced?: boolean;
+    appliedManifest?: Record<string, AppliedProviderManifest>;
+    replacedManifest?: Record<string, AppliedProviderManifest>;
+}
+export declare class UpdateLoginsOperation implements RemoteOperationDefinition {
+    private readonly storage;
+    private readonly host;
+    private readonly vault;
+    private readonly writeback;
+    private readonly claim;
+    private readonly generator;
+    private readonly apiKeys;
+    readonly kind: "update_logins";
+    readonly steps: readonly RemoteOperationStepDefinition[];
+    constructor(storage: RemoteStorage & ProviderAuthStorage, host: RemoteHostClient, vault: ProviderAuthVaultService, writeback: ProviderAuthWritebackService, claim: ClaimOperation, generator: ProviderAuthGeneratorService, apiKeys: RemoteApiKeyService);
+    interrupt(id: string): Promise<void>;
+    forget(id: string): void;
+    retryFrom(operation: RemoteOperation): string | null;
+    completed(operation: RemoteOperation): Promise<void>;
+    assertCancellable(operation: RemoteOperation): void;
+    rollback(operation: RemoteOperation): Promise<void>;
+    private preflight;
+    private pull;
+    private release;
+    private recordManifest;
+    private remove;
+    private manifest;
+}