devchain-cli 0.23.4 → 0.24.0

package/dist/server/modules/remotes/host/host-tls-front.js

@@ -0,0 +1,86 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.installTlsFront = installTlsFront;
+const node_tls_1 = require("node:tls");
+const integration_admission_1 = require("../../../common/config/integration-admission");
+const TLS_HANDSHAKE_RECORD = 0x16;
+const FIRST_BYTE_TIMEOUT_MS = 10_000;
+const HANDSHAKE_TIMEOUT_MS = 10_000;
+const INSTALLED = Symbol('hostTlsFront');
+function installTlsFront(server, options) {
+    const guarded = server;
+    if (guarded[INSTALLED])
+        throw new Error('The TLS front is already installed on this server');
+    if (server.listening)
+        throw new Error('Install the TLS front before the server listens');
+    guarded[INSTALLED] = true;
+    const firstByteTimeoutMs = options.firstByteTimeoutMs ?? FIRST_BYTE_TIMEOUT_MS;
+    const handshakeTimeoutMs = options.handshakeTimeoutMs ?? HANDSHAKE_TIMEOUT_MS;
+    const handlers = server.listeners('connection');
+    server.removeAllListeners('connection');
+    const pending = new Set();
+    const handOff = (socket) => {
+        for (const handler of handlers)
+            handler.call(server, socket);
+    };
+    const startTls = (socket) => {
+        const secure = new node_tls_1.TLSSocket(socket, {
+            isServer: true,
+            secureContext: options.secureContext,
+            ALPNProtocols: ['http/1.1'],
+        });
+        const fail = () => secure.destroy();
+        const timer = setTimeout(fail, handshakeTimeoutMs);
+        secure.on('error', fail);
+        socket.on('error', fail);
+        secure.once('close', () => {
+            clearTimeout(timer);
+            pending.delete(socket);
+            socket.destroy();
+        });
+        secure.once('secure', () => {
+            clearTimeout(timer);
+            pending.delete(socket);
+            secure.off('error', fail);
+            handOff(secure);
+        });
+    };
+    server.on('connection', (socket) => {
+        pending.add(socket);
+        const drop = () => socket.destroy();
+        const timer = setTimeout(drop, firstByteTimeoutMs);
+        const onData = (chunk) => {
+            clearTimeout(timer);
+            socket.off('data', onData);
+            socket.off('end', drop);
+            socket.off('error', drop);
+            socket.pause();
+            socket.unshift(chunk);
+            if (chunk[0] === TLS_HANDSHAKE_RECORD) {
+                startTls(socket);
+                return;
+            }
+            pending.delete(socket);
+            if (!(0, integration_admission_1.isLoopbackHost)(socket.remoteAddress ?? '')) {
+                socket.destroy();
+                return;
+            }
+            handOff(socket);
+            socket.resume();
+        };
+        socket.on('data', onData);
+        socket.once('end', drop);
+        socket.once('error', drop);
+        socket.once('close', () => {
+            clearTimeout(timer);
+            pending.delete(socket);
+        });
+    });
+    const close = server.close.bind(server);
+    server.close = ((callback) => {
+        for (const socket of pending)
+            socket.destroy();
+        return close(callback);
+    });
+}
+//# sourceMappingURL=host-tls-front.js.map

package/dist/server/modules/remotes/host/host-tls-front.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"host-tls-front.js","sourceRoot":"","sources":["../../../../src/modules/remotes/host/host-tls-front.ts"],"names":[],"mappings":";;AA0BA,0CAqFC;AA7GD,uCAAyD;AACzD,wFAA8E;AAG9E,MAAM,oBAAoB,GAAG,IAAI,CAAC;AAClC,MAAM,qBAAqB,GAAG,MAAM,CAAC;AACrC,MAAM,oBAAoB,GAAG,MAAM,CAAC;AACpC,MAAM,SAAS,GAAG,MAAM,CAAC,cAAc,CAAC,CAAC;AAiBzC,SAAgB,eAAe,CAAC,MAAc,EAAE,OAAwB;IACtE,MAAM,OAAO,GAAG,MAAyC,CAAC;IAC1D,IAAI,OAAO,CAAC,SAAS,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;IAE7F,IAAI,MAAM,CAAC,SAAS;QAAE,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;IACzF,OAAO,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC;IAE1B,MAAM,kBAAkB,GAAG,OAAO,CAAC,kBAAkB,IAAI,qBAAqB,CAAC;IAC/E,MAAM,kBAAkB,GAAG,OAAO,CAAC,kBAAkB,IAAI,oBAAoB,CAAC;IAC9E,MAAM,QAAQ,GAAG,MAAM,CAAC,SAAS,CAAC,YAAY,CAAyB,CAAC;IACxE,MAAM,CAAC,kBAAkB,CAAC,YAAY,CAAC,CAAC;IAGxC,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;IAElC,MAAM,OAAO,GAAG,CAAC,MAAc,EAAE,EAAE;QACjC,KAAK,MAAM,OAAO,IAAI,QAAQ;YAAE,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC/D,CAAC,CAAC;IAEF,MAAM,QAAQ,GAAG,CAAC,MAAc,EAAE,EAAE;QAClC,MAAM,MAAM,GAAG,IAAI,oBAAS,CAAC,MAAM,EAAE;YACnC,QAAQ,EAAE,IAAI;YACd,aAAa,EAAE,OAAO,CAAC,aAAa;YACpC,aAAa,EAAE,CAAC,UAAU,CAAC;SAC5B,CAAC,CAAC;QACH,MAAM,IAAI,GAAG,GAAG,EAAE,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpC,MAAM,KAAK,GAAG,UAAU,CAAC,IAAI,EAAE,kBAAkB,CAAC,CAAC;QACnD,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QAGzB,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QACzB,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE;YACxB,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;YACvB,MAAM,CAAC,OAAO,EAAE,CAAC;QACnB,CAAC,CAAC,CAAC;QACH,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,EAAE;YACzB,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;YAEvB,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;YAC1B,OAAO,CAAC,MAAM,CAAC,CAAC;QAClB,CAAC,CAAC,CAAC;IACL,CAAC,CAAC;IAEF,MAAM,CAAC,EAAE,CAAC,YAAY,EAAE,CAAC,MAAc,EAAE,EAAE;QACzC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACpB,MAAM,IAAI,GAAG,GAAG,EAAE,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpC,MAAM,KAAK,GAAG,UAAU,CAAC,IAAI,EAAE,kBAAkB,CAAC,CAAC;QACnD,MAAM,MAAM,GAAG,CAAC,KAAa,EAAE,EAAE;YAC/B,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,MAAM,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;YAC3B,MAAM,CAAC,GAAG,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;YACxB,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;YAC1B,MAAM,CAAC,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;YACtB,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,oBAAoB,EAAE,CAAC;gBACtC,QAAQ,CAAC,MAAM,CAAC,CAAC;gBACjB,OAAO;YACT,CAAC;YACD,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;YACvB,IAAI,CAAC,IAAA,sCAAc,EAAC,MAAM,CAAC,aAAa,IAAI,EAAE,CAAC,EAAE,CAAC;gBAChD,MAAM,CAAC,OAAO,EAAE,CAAC;gBACjB,OAAO;YACT,CAAC;YACD,OAAO,CAAC,MAAM,CAAC,CAAC;YAEhB,MAAM,CAAC,MAAM,EAAE,CAAC;QAClB,CAAC,CAAC;QACF,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAG1B,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QACzB,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QAC3B,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE;YACxB,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QACzB,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACxC,MAAM,CAAC,KAAK,GAAG,CAAC,CAAC,QAAkC,EAAE,EAAE;QACrD,KAAK,MAAM,MAAM,IAAI,OAAO;YAAE,MAAM,CAAC,OAAO,EAAE,CAAC;QAC/C,OAAO,KAAK,CAAC,QAAQ,CAAC,CAAC;IACzB,CAAC,CAAoB,CAAC;AACxB,CAAC"}

package/dist/server/modules/remotes/host/host-tls.setup.d.ts

@@ -0,0 +1,12 @@
+import type { INestApplication } from '@nestjs/common';
+import { type SecureContext } from 'node:tls';
+import { type EnvConfig } from '../../../common/config/env.config';
+type HostTlsConfig = Pick<EnvConfig, 'DEVCHAIN_HOST_ETC_DIR' | 'DEVCHAIN_HOST_TLS_KEY_FILE' | 'DEVCHAIN_HOST_TLS_CERT_FILE'>;
+export interface HostTls {
+    keyFile: string;
+    certFile: string;
+    secureContext: SecureContext;
+}
+export declare function resolveHostTls(config?: HostTlsConfig): HostTls | null;
+export declare function registerHostTls(app: INestApplication): void;
+export {};

package/dist/server/modules/remotes/host/host-tls.setup.js

@@ -0,0 +1,48 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.resolveHostTls = resolveHostTls;
+exports.registerHostTls = registerHostTls;
+const node_fs_1 = require("node:fs");
+const node_tls_1 = require("node:tls");
+const env_config_1 = require("../../../common/config/env.config");
+const logger_1 = require("../../../common/logging/logger");
+const host_api_key_1 = require("../host-api-key");
+const host_tls_front_1 = require("./host-tls-front");
+const logger = (0, logger_1.createLogger)('HostTls');
+function readTlsFile(kind, file) {
+    try {
+        return (0, node_fs_1.readFileSync)(file);
+    }
+    catch (error) {
+        throw new Error(`Cannot read the TLS ${kind} ${file} (${error.code ?? 'error'}); DevChain does not start without it.`);
+    }
+}
+function resolveHostTls(config = (0, env_config_1.getEnvConfig)()) {
+    const keyFile = config.DEVCHAIN_HOST_TLS_KEY_FILE;
+    const certFile = config.DEVCHAIN_HOST_TLS_CERT_FILE;
+    if (!keyFile && !certFile) {
+        if ((0, host_api_key_1.isClaimedHost)(config.DEVCHAIN_HOST_ETC_DIR)) {
+            throw new Error('This VM is claimed, but DEVCHAIN_HOST_TLS_KEY_FILE and DEVCHAIN_HOST_TLS_CERT_FILE are not set; DevChain does not serve a claimed VM without TLS.');
+        }
+        return null;
+    }
+    if (!keyFile || !certFile) {
+        throw new Error('Set both DEVCHAIN_HOST_TLS_KEY_FILE and DEVCHAIN_HOST_TLS_CERT_FILE, or neither.');
+    }
+    const key = readTlsFile('key', keyFile);
+    const cert = readTlsFile('certificate', certFile);
+    try {
+        return { keyFile, certFile, secureContext: (0, node_tls_1.createSecureContext)({ key, cert }) };
+    }
+    catch (error) {
+        throw new Error(`The TLS key ${keyFile} and certificate ${certFile} are not a usable pair: ${error.message}`);
+    }
+}
+function registerHostTls(app) {
+    const tls = resolveHostTls();
+    if (!tls)
+        return;
+    (0, host_tls_front_1.installTlsFront)(app.getHttpServer(), { secureContext: tls.secureContext });
+    logger.info({ keyFile: tls.keyFile, certFile: tls.certFile }, 'Host TLS on the app port: TLS from any peer, plaintext from loopback only');
+}
+//# sourceMappingURL=host-tls.setup.js.map

package/dist/server/modules/remotes/host/host-tls.setup.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"host-tls.setup.js","sourceRoot":"","sources":["../../../../src/modules/remotes/host/host-tls.setup.ts"],"names":[],"mappings":";;AAqCA,wCAyBC;AAQD,0CAQC;AA7ED,qCAAuC;AACvC,uCAAmE;AACnE,kEAAiF;AACjF,2DAA8D;AAC9D,kDAAgD;AAChD,qDAAmD;AAEnD,MAAM,MAAM,GAAG,IAAA,qBAAY,EAAC,SAAS,CAAC,CAAC;AAavC,SAAS,WAAW,CAAC,IAA2B,EAAE,IAAY;IAC5D,IAAI,CAAC;QACH,OAAO,IAAA,sBAAY,EAAC,IAAI,CAAC,CAAC;IAC5B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,KAAK,CACb,uBAAuB,IAAI,IAAI,IAAI,KAAM,KAA+B,CAAC,IAAI,IAAI,OAAO,wCAAwC,CACjI,CAAC;IACJ,CAAC;AACH,CAAC;AAQD,SAAgB,cAAc,CAAC,SAAwB,IAAA,yBAAY,GAAE;IACnE,MAAM,OAAO,GAAG,MAAM,CAAC,0BAA0B,CAAC;IAClD,MAAM,QAAQ,GAAG,MAAM,CAAC,2BAA2B,CAAC;IACpD,IAAI,CAAC,OAAO,IAAI,CAAC,QAAQ,EAAE,CAAC;QAC1B,IAAI,IAAA,4BAAa,EAAC,MAAM,CAAC,qBAAqB,CAAC,EAAE,CAAC;YAChD,MAAM,IAAI,KAAK,CACb,mJAAmJ,CACpJ,CAAC;QACJ,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,CAAC,OAAO,IAAI,CAAC,QAAQ,EAAE,CAAC;QAC1B,MAAM,IAAI,KAAK,CACb,kFAAkF,CACnF,CAAC;IACJ,CAAC;IACD,MAAM,GAAG,GAAG,WAAW,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IACxC,MAAM,IAAI,GAAG,WAAW,CAAC,aAAa,EAAE,QAAQ,CAAC,CAAC;IAClD,IAAI,CAAC;QACH,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,aAAa,EAAE,IAAA,8BAAmB,EAAC,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;IAClF,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,KAAK,CACb,eAAe,OAAO,oBAAoB,QAAQ,2BAA4B,KAAe,CAAC,OAAO,EAAE,CACxG,CAAC;IACJ,CAAC;AACH,CAAC;AAQD,SAAgB,eAAe,CAAC,GAAqB;IACnD,MAAM,GAAG,GAAG,cAAc,EAAE,CAAC;IAC7B,IAAI,CAAC,GAAG;QAAE,OAAO;IACjB,IAAA,gCAAe,EAAC,GAAG,CAAC,aAAa,EAAE,EAAE,EAAE,aAAa,EAAE,GAAG,CAAC,aAAa,EAAE,CAAC,CAAC;IAC3E,MAAM,CAAC,IAAI,CACT,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,EAChD,2EAA2E,CAC5E,CAAC;AACJ,CAAC"}

package/dist/server/modules/remotes/host/host-transcript-body.parser.d.ts

@@ -0,0 +1,7 @@
+import { OnModuleInit } from '@nestjs/common';
+import { HttpAdapterHost } from '@nestjs/core';
+export declare class HostTranscriptBodyParser implements OnModuleInit {
+    private readonly adapterHost;
+    constructor(adapterHost: HttpAdapterHost);
+    onModuleInit(): void;
+}

package/dist/server/modules/remotes/host/host-transcript-body.parser.js

@@ -0,0 +1,35 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.HostTranscriptBodyParser = void 0;
+const common_1 = require("@nestjs/common");
+const core_1 = require("@nestjs/core");
+let HostTranscriptBodyParser = class HostTranscriptBodyParser {
+    adapterHost;
+    constructor(adapterHost) {
+        this.adapterHost = adapterHost;
+    }
+    onModuleInit() {
+        const adapter = this.adapterHost.httpAdapter;
+        if (!adapter || adapter.getType() !== 'fastify')
+            return;
+        const fastify = adapter.getInstance();
+        if (!fastify.hasContentTypeParser('application/octet-stream')) {
+            fastify.addContentTypeParser('application/octet-stream', (_request, payload, done) => done(null, payload));
+        }
+    }
+};
+exports.HostTranscriptBodyParser = HostTranscriptBodyParser;
+exports.HostTranscriptBodyParser = HostTranscriptBodyParser = __decorate([
+    (0, common_1.Injectable)(),
+    __metadata("design:paramtypes", [core_1.HttpAdapterHost])
+], HostTranscriptBodyParser);
+//# sourceMappingURL=host-transcript-body.parser.js.map

package/dist/server/modules/remotes/host/host-transcript-body.parser.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"host-transcript-body.parser.js","sourceRoot":"","sources":["../../../../src/modules/remotes/host/host-transcript-body.parser.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,2CAA0D;AAC1D,uCAA+C;AAIxC,IAAM,wBAAwB,GAA9B,MAAM,wBAAwB;IACN;IAA7B,YAA6B,WAA4B;QAA5B,gBAAW,GAAX,WAAW,CAAiB;IAAG,CAAC;IAE7D,YAAY;QACV,MAAM,OAAO,GAAG,IAAI,CAAC,WAAW,CAAC,WAAW,CAAC;QAC7C,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,OAAO,EAAE,KAAK,SAAS;YAAE,OAAO;QACxD,MAAM,OAAO,GAAG,OAAO,CAAC,WAAW,EAAmB,CAAC;QACvD,IAAI,CAAC,OAAO,CAAC,oBAAoB,CAAC,0BAA0B,CAAC,EAAE,CAAC;YAE9D,OAAO,CAAC,oBAAoB,CAAC,0BAA0B,EAAE,CAAC,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,CACnF,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,CACpB,CAAC;QACJ,CAAC;IACH,CAAC;CACF,CAAA;AAdY,4DAAwB;mCAAxB,wBAAwB;IADpC,IAAA,mBAAU,GAAE;qCAE+B,sBAAe;GAD9C,wBAAwB,CAcpC"}

package/dist/server/modules/remotes/host/host-transcripts.controller.d.ts

@@ -0,0 +1,10 @@
+import type { FastifyReply, FastifyRequest } from 'fastify';
+import { TranscriptFilesService } from '../transcripts/transcript-files.service';
+import { type TranscriptListing } from '../transcripts/transcript-transfer.dto';
+export declare class HostTranscriptsController {
+    private readonly files;
+    constructor(files: TranscriptFilesService);
+    list(body: unknown): Promise<TranscriptListing>;
+    read(query: unknown, reply: FastifyReply): Promise<void>;
+    write(query: unknown, request: FastifyRequest): Promise<void>;
+}

package/dist/server/modules/remotes/host/host-transcripts.controller.js

@@ -0,0 +1,82 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.HostTranscriptsController = void 0;
+const common_1 = require("@nestjs/common");
+const swagger_1 = require("@nestjs/swagger");
+const node_stream_1 = require("node:stream");
+const transcript_files_service_1 = require("../transcripts/transcript-files.service");
+const transcript_transfer_dto_1 = require("../transcripts/transcript-transfer.dto");
+let HostTranscriptsController = class HostTranscriptsController {
+    files;
+    constructor(files) {
+        this.files = files;
+    }
+    list(body) {
+        return this.files.list(transcript_transfer_dto_1.TranscriptListRequestSchema.parse(body).refs);
+    }
+    async read(query, reply) {
+        const { stream, size } = await this.files.read(transcript_transfer_dto_1.TranscriptFileSchema.parse(query));
+        reply.header('Content-Length', size).type('application/octet-stream').send(stream);
+    }
+    async write(query, request) {
+        const file = transcript_transfer_dto_1.TranscriptFileSchema.parse(query);
+        const length = request.headers['content-length'];
+        if (typeof length !== 'string' || !/^\d+$/.test(length))
+            throw new common_1.BadRequestException('Content-Length is required');
+        const size = Number(length);
+        (0, transcript_files_service_1.assertTranscriptSize)(size);
+        if (!(request.body instanceof node_stream_1.Readable))
+            throw new common_1.BadRequestException('application/octet-stream is required');
+        await this.files.write(file, request.body, size);
+    }
+};
+exports.HostTranscriptsController = HostTranscriptsController;
+__decorate([
+    (0, common_1.Post)('list'),
+    (0, common_1.HttpCode)(200),
+    (0, swagger_1.ApiOperation)({ summary: 'List recorded transcript files' }),
+    (0, swagger_1.ApiResponse)({ status: 200 }),
+    __param(0, (0, common_1.Body)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object]),
+    __metadata("design:returntype", Promise)
+], HostTranscriptsController.prototype, "list", null);
+__decorate([
+    (0, common_1.Get)(),
+    (0, swagger_1.ApiOperation)({ summary: 'Stream a transcript file' }),
+    (0, swagger_1.ApiResponse)({ status: 200 }),
+    __param(0, (0, common_1.Query)()),
+    __param(1, (0, common_1.Res)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object, Object]),
+    __metadata("design:returntype", Promise)
+], HostTranscriptsController.prototype, "read", null);
+__decorate([
+    (0, common_1.Put)(),
+    (0, common_1.HttpCode)(204),
+    (0, swagger_1.ApiOperation)({ summary: 'Atomically receive a transcript file' }),
+    (0, swagger_1.ApiResponse)({ status: 204 }),
+    __param(0, (0, common_1.Query)()),
+    __param(1, (0, common_1.Req)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object, Object]),
+    __metadata("design:returntype", Promise)
+], HostTranscriptsController.prototype, "write", null);
+exports.HostTranscriptsController = HostTranscriptsController = __decorate([
+    (0, swagger_1.ApiTags)('Host transcripts'),
+    (0, common_1.Controller)('api/host/transcripts'),
+    __metadata("design:paramtypes", [transcript_files_service_1.TranscriptFilesService])
+], HostTranscriptsController);
+//# sourceMappingURL=host-transcripts.controller.js.map

package/dist/server/modules/remotes/host/host-transcripts.controller.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"host-transcripts.controller.js","sourceRoot":"","sources":["../../../../src/modules/remotes/host/host-transcripts.controller.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,2CAWwB;AACxB,6CAAqE;AAErE,6CAAuC;AACvC,sFAGiD;AACjD,oFAIgD;AAIzC,IAAM,yBAAyB,GAA/B,MAAM,yBAAyB;IACP;IAA7B,YAA6B,KAA6B;QAA7B,UAAK,GAAL,KAAK,CAAwB;IAAG,CAAC;IAM9D,IAAI,CAAS,IAAa;QACxB,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,qDAA2B,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC;IACvE,CAAC;IAKK,AAAN,KAAK,CAAC,IAAI,CAAU,KAAc,EAAS,KAAmB;QAC5D,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,8CAAoB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC;QAClF,KAAK,CAAC,MAAM,CAAC,gBAAgB,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACrF,CAAC;IAMK,AAAN,KAAK,CAAC,KAAK,CAAU,KAAc,EAAS,OAAuB;QACjE,MAAM,IAAI,GAAG,8CAAoB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAC/C,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;QACjD,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC;YACrD,MAAM,IAAI,4BAAmB,CAAC,4BAA4B,CAAC,CAAC;QAC9D,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC;QAC5B,IAAA,+CAAoB,EAAC,IAAI,CAAC,CAAC;QAC3B,IAAI,CAAC,CAAC,OAAO,CAAC,IAAI,YAAY,sBAAQ,CAAC;YACrC,MAAM,IAAI,4BAAmB,CAAC,sCAAsC,CAAC,CAAC;QACxE,MAAM,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACnD,CAAC;CACF,CAAA;AAlCY,8DAAyB;AAOpC;IAJC,IAAA,aAAI,EAAC,MAAM,CAAC;IACZ,IAAA,iBAAQ,EAAC,GAAG,CAAC;IACb,IAAA,sBAAY,EAAC,EAAE,OAAO,EAAE,gCAAgC,EAAE,CAAC;IAC3D,IAAA,qBAAW,EAAC,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;IACvB,WAAA,IAAA,aAAI,GAAE,CAAA;;;;qDAEX;AAKK;IAHL,IAAA,YAAG,GAAE;IACL,IAAA,sBAAY,EAAC,EAAE,OAAO,EAAE,0BAA0B,EAAE,CAAC;IACrD,IAAA,qBAAW,EAAC,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;IACjB,WAAA,IAAA,cAAK,GAAE,CAAA;IAAkB,WAAA,IAAA,YAAG,GAAE,CAAA;;;;qDAGzC;AAMK;IAJL,IAAA,YAAG,GAAE;IACL,IAAA,iBAAQ,EAAC,GAAG,CAAC;IACb,IAAA,sBAAY,EAAC,EAAE,OAAO,EAAE,sCAAsC,EAAE,CAAC;IACjE,IAAA,qBAAW,EAAC,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;IAChB,WAAA,IAAA,cAAK,GAAE,CAAA;IAAkB,WAAA,IAAA,YAAG,GAAE,CAAA;;;;sDAU1C;oCAjCU,yBAAyB;IAFrC,IAAA,iBAAO,EAAC,kBAAkB,CAAC;IAC3B,IAAA,mBAAU,EAAC,sBAAsB,CAAC;qCAEG,iDAAsB;GAD/C,yBAAyB,CAkCrC"}

package/dist/server/modules/remotes/host/host-update.controller.d.ts

@@ -0,0 +1,21 @@
+import { HostHelperService, type HostUpdateStatus, type HostDockerStatus, type ProjectRootResult } from './host-helper.service';
+export declare class HostUpdateController {
+    private readonly helper;
+    constructor(helper: HostHelperService);
+    claim(): never;
+    update(body: unknown): Promise<{
+        version: string;
+        state: 'pending';
+    }>;
+    status(): {
+        status: HostUpdateStatus | null;
+    };
+    docker(body: unknown): Promise<{
+        state: 'pending';
+        jobId: string | null;
+    }>;
+    dockerStatus(): {
+        status: HostDockerStatus | null;
+    };
+    createProjectRoot(body: unknown): Promise<ProjectRootResult>;
+}

package/dist/server/modules/remotes/host/host-update.controller.js

@@ -0,0 +1,153 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.HostUpdateController = void 0;
+const common_1 = require("@nestjs/common");
+const swagger_1 = require("@nestjs/swagger");
+const semver = __importStar(require("semver"));
+const zod_1 = require("zod");
+const error_types_1 = require("../../../common/errors/error-types");
+const logger_1 = require("../../../common/logging/logger");
+const host_helper_service_1 = require("./host-helper.service");
+const logger = (0, logger_1.createLogger)('HostUpdateController');
+const HostUpdateBodySchema = zod_1.z
+    .object({ version: zod_1.z.string().refine((value) => semver.valid(value) === value) })
+    .strict();
+const ProjectRootBodySchema = zod_1.z.object({ path: zod_1.z.string().min(1).max(4096) }).strict();
+let HostUpdateController = class HostUpdateController {
+    helper;
+    constructor(helper) {
+        this.helper = helper;
+    }
+    claim() {
+        if (this.helper.isClaimedHost()) {
+            throw new error_types_1.ConflictError('This VM is already claimed.', { code: 'ALREADY_CLAIMED' });
+        }
+        throw new error_types_1.ConflictError('This DevChain instance is not a host VM.', { code: 'NOT_A_HOST' });
+    }
+    async update(body) {
+        const { version } = HostUpdateBodySchema.parse(body);
+        logger.info({ version }, 'POST /api/host/update');
+        await this.helper.requestUpdate(version);
+        return { version, state: 'pending' };
+    }
+    status() {
+        return { status: this.helper.readUpdateStatus() };
+    }
+    async docker(body) {
+        zod_1.z.object({})
+            .strict()
+            .parse(body ?? {});
+        return { state: 'pending', ...(await this.helper.requestDocker()) };
+    }
+    dockerStatus() {
+        return { status: this.helper.readDockerStatus() };
+    }
+    async createProjectRoot(body) {
+        const { path } = ProjectRootBodySchema.parse(body);
+        logger.info({ path }, 'POST /api/host/projects/roots');
+        return this.helper.createProjectRoot(path);
+    }
+};
+exports.HostUpdateController = HostUpdateController;
+__decorate([
+    (0, common_1.Post)('claim'),
+    (0, swagger_1.ApiOperation)({ summary: 'Refused: DevChain runs here, so the VM is claimed already' }),
+    (0, swagger_1.ApiResponse)({ status: 409, description: 'ALREADY_CLAIMED or NOT_A_HOST' }),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", []),
+    __metadata("design:returntype", void 0)
+], HostUpdateController.prototype, "claim", null);
+__decorate([
+    (0, common_1.Post)('update'),
+    (0, common_1.HttpCode)(202),
+    (0, swagger_1.ApiOperation)({ summary: 'Install another DevChain version on this host VM and restart' }),
+    (0, swagger_1.ApiResponse)({ status: 202, description: 'Update started; poll GET /api/host/update' }),
+    __param(0, (0, common_1.Body)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object]),
+    __metadata("design:returntype", Promise)
+], HostUpdateController.prototype, "update", null);
+__decorate([
+    (0, common_1.Get)('update'),
+    (0, swagger_1.ApiOperation)({ summary: 'Progress of the last host update' }),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", []),
+    __metadata("design:returntype", Object)
+], HostUpdateController.prototype, "status", null);
+__decorate([
+    (0, common_1.Post)('docker'),
+    (0, common_1.HttpCode)(202),
+    (0, swagger_1.ApiOperation)({ summary: 'Install Docker Engine and Compose in a detached job' }),
+    (0, swagger_1.ApiResponse)({ status: 202, description: 'Install requested; poll GET /api/host/docker' }),
+    __param(0, (0, common_1.Body)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object]),
+    __metadata("design:returntype", Promise)
+], HostUpdateController.prototype, "docker", null);
+__decorate([
+    (0, common_1.Get)('docker'),
+    (0, swagger_1.ApiOperation)({ summary: 'Progress of the Docker install' }),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", []),
+    __metadata("design:returntype", Object)
+], HostUpdateController.prototype, "dockerStatus", null);
+__decorate([
+    (0, common_1.Post)('projects/roots'),
+    (0, common_1.HttpCode)(200),
+    (0, swagger_1.ApiOperation)({ summary: 'Create a project root outside the home, owned by the host user' }),
+    __param(0, (0, common_1.Body)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object]),
+    __metadata("design:returntype", Promise)
+], HostUpdateController.prototype, "createProjectRoot", null);
+exports.HostUpdateController = HostUpdateController = __decorate([
+    (0, swagger_1.ApiTags)('host'),
+    (0, common_1.Controller)('api/host'),
+    __metadata("design:paramtypes", [host_helper_service_1.HostHelperService])
+], HostUpdateController);
+//# sourceMappingURL=host-update.controller.js.map

package/dist/server/modules/remotes/host/host-update.controller.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"host-update.controller.js","sourceRoot":"","sources":["../../../../src/modules/remotes/host/host-update.controller.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,2CAAuE;AACvE,6CAAqE;AACrE,+CAAiC;AACjC,6BAAwB;AACxB,oEAAmE;AACnE,2DAA8D;AAC9D,+DAK+B;AAE/B,MAAM,MAAM,GAAG,IAAA,qBAAY,EAAC,sBAAsB,CAAC,CAAC;AAEpD,MAAM,oBAAoB,GAAG,OAAC;KAC3B,MAAM,CAAC,EAAE,OAAO,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,KAAK,CAAC,EAAE,CAAC;KAChF,MAAM,EAAE,CAAC;AACZ,MAAM,qBAAqB,GAAG,OAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;AAShF,IAAM,oBAAoB,GAA1B,MAAM,oBAAoB;IACF;IAA7B,YAA6B,MAAyB;QAAzB,WAAM,GAAN,MAAM,CAAmB;IAAG,CAAC;IAK1D,KAAK;QACH,IAAI,IAAI,CAAC,MAAM,CAAC,aAAa,EAAE,EAAE,CAAC;YAChC,MAAM,IAAI,2BAAa,CAAC,6BAA6B,EAAE,EAAE,IAAI,EAAE,iBAAiB,EAAE,CAAC,CAAC;QACtF,CAAC;QACD,MAAM,IAAI,2BAAa,CAAC,0CAA0C,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC,CAAC;IAC9F,CAAC;IAMK,AAAN,KAAK,CAAC,MAAM,CAAS,IAAa;QAChC,MAAM,EAAE,OAAO,EAAE,GAAG,oBAAoB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACrD,MAAM,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,EAAE,uBAAuB,CAAC,CAAC;QAClD,MAAM,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC;QACzC,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;IACvC,CAAC;IAID,MAAM;QACJ,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,gBAAgB,EAAE,EAAE,CAAC;IACpD,CAAC;IAMK,AAAN,KAAK,CAAC,MAAM,CAAS,IAAa;QAChC,OAAC,CAAC,MAAM,CAAC,EAAE,CAAC;aACT,MAAM,EAAE;aACR,KAAK,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;QACrB,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,aAAa,EAAE,CAAC,EAAE,CAAC;IACtE,CAAC;IAID,YAAY;QACV,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,gBAAgB,EAAE,EAAE,CAAC;IACpD,CAAC;IAKK,AAAN,KAAK,CAAC,iBAAiB,CAAS,IAAa;QAC3C,MAAM,EAAE,IAAI,EAAE,GAAG,qBAAqB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACnD,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,EAAE,+BAA+B,CAAC,CAAC;QACvD,OAAO,IAAI,CAAC,MAAM,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC;IAC7C,CAAC;CACF,CAAA;AAvDY,oDAAoB;AAM/B;IAHC,IAAA,aAAI,EAAC,OAAO,CAAC;IACb,IAAA,sBAAY,EAAC,EAAE,OAAO,EAAE,2DAA2D,EAAE,CAAC;IACtF,IAAA,qBAAW,EAAC,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,+BAA+B,EAAE,CAAC;;;;iDAM1E;AAMK;IAJL,IAAA,aAAI,EAAC,QAAQ,CAAC;IACd,IAAA,iBAAQ,EAAC,GAAG,CAAC;IACb,IAAA,sBAAY,EAAC,EAAE,OAAO,EAAE,8DAA8D,EAAE,CAAC;IACzF,IAAA,qBAAW,EAAC,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,2CAA2C,EAAE,CAAC;IACzE,WAAA,IAAA,aAAI,GAAE,CAAA;;;;kDAKnB;AAID;IAFC,IAAA,YAAG,EAAC,QAAQ,CAAC;IACb,IAAA,sBAAY,EAAC,EAAE,OAAO,EAAE,kCAAkC,EAAE,CAAC;;;;kDAG7D;AAMK;IAJL,IAAA,aAAI,EAAC,QAAQ,CAAC;IACd,IAAA,iBAAQ,EAAC,GAAG,CAAC;IACb,IAAA,sBAAY,EAAC,EAAE,OAAO,EAAE,qDAAqD,EAAE,CAAC;IAChF,IAAA,qBAAW,EAAC,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,8CAA8C,EAAE,CAAC;IAC5E,WAAA,IAAA,aAAI,GAAE,CAAA;;;;kDAKnB;AAID;IAFC,IAAA,YAAG,EAAC,QAAQ,CAAC;IACb,IAAA,sBAAY,EAAC,EAAE,OAAO,EAAE,gCAAgC,EAAE,CAAC;;;;wDAG3D;AAKK;IAHL,IAAA,aAAI,EAAC,gBAAgB,CAAC;IACtB,IAAA,iBAAQ,EAAC,GAAG,CAAC;IACb,IAAA,sBAAY,EAAC,EAAE,OAAO,EAAE,gEAAgE,EAAE,CAAC;IACnE,WAAA,IAAA,aAAI,GAAE,CAAA;;;;6DAI9B;+BAtDU,oBAAoB;IAFhC,IAAA,iBAAO,EAAC,MAAM,CAAC;IACf,IAAA,mBAAU,EAAC,UAAU,CAAC;qCAEgB,uCAAiB;GAD3C,oBAAoB,CAuDhC"}

package/dist/server/modules/remotes/host/host.controller.d.ts

@@ -0,0 +1,19 @@
+import type { ProjectReplicaChanges, ProjectReplicaImportResult, ProjectReplicaOfScope } from '@devchain/shared';
+import type { FrozenProject } from '../../storage/interfaces/storage.interface';
+import { HostService } from './host.service';
+import type { ProjectTimeSettlement } from '../time/project-time-settler.service';
+export declare class HostController {
+    private readonly host;
+    constructor(host: HostService);
+    importProject(query: unknown, body: unknown): Promise<ProjectReplicaImportResult>;
+    exportReplica(id: string, query: unknown): Promise<ProjectReplicaOfScope<'attach' | 'detach'>>;
+    changes(id: string, query: unknown): Promise<ProjectReplicaChanges>;
+    freeze(id: string): Promise<FrozenProject>;
+    thaw(id: string): Promise<void>;
+    stopSessions(id: string): Promise<void>;
+    settleTime(id: string): Promise<ProjectTimeSettlement>;
+    release(id: string): Promise<void>;
+    findEpicByIdempotencyKey(id: string, key: string): Promise<{
+        epicId: string;
+    }>;
+}