devchain-cli 0.23.4 → 0.24.1

package/dist/server/modules/remotes/host/host-provider-auth.service.js

@@ -0,0 +1,323 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.HostProviderAuthService = exports.REFUSED_FILES = void 0;
+exports.parseHostEnvFile = parseHostEnvFile;
+exports.hostEnvFilePath = hostEnvFilePath;
+exports.readHostEnvFile = readHostEnvFile;
+exports.renderHostEnvFile = renderHostEnvFile;
+const provider_cli_policy_1 = require("../../providers/adapters/provider-cli-policy");
+const node_crypto_1 = require("node:crypto");
+const promises_1 = require("node:fs/promises");
+const node_os_1 = require("node:os");
+const node_path_1 = require("node:path");
+const common_1 = require("@nestjs/common");
+const error_types_1 = require("../../../common/errors/error-types");
+const logger_1 = require("../../../common/logging/logger");
+const provider_auth_adapters_1 = require("../../provider-auth/provider-auth-adapters");
+const provider_auth_generator_service_1 = require("../../provider-auth/provider-auth-generator.service");
+const provider_auth_watcher_service_1 = require("../../provider-auth/provider-auth-watcher.service");
+const storage_interface_1 = require("../../storage/interfaces/storage.interface");
+const process_executor_port_1 = require("../../terminal/services/process-executor/process-executor.port");
+const host_helper_service_1 = require("./host-helper.service");
+const logger = (0, logger_1.createLogger)('HostProviderAuthService');
+const VERIFY_TIMEOUT_MS = 90_000;
+const SUMMARY_LIMIT = 1_000;
+const MAX_FILES = 32;
+const MAX_FILE_BYTES = 256 * 1024;
+const MAX_REMOVE_ENV_KEYS = 64;
+exports.REFUSED_FILES = [
+    '.claude/.credentials.json',
+    '.devchain/host.env',
+    '.devchain/tls/key.pem',
+    '.devchain/tls/cert.pem',
+];
+function parseHostEnvFile(content) {
+    const env = {};
+    for (const line of content.split('\n')) {
+        const match = /^([A-Za-z_][A-Za-z0-9_]*)="((?:[^"\\]|\\.)*)"$/.exec(line.trim());
+        if (match)
+            env[match[1]] = match[2].replace(/\\(.)/g, '$1');
+    }
+    return env;
+}
+function hostEnvFilePath() {
+    return (0, node_path_1.join)(process.env.HOME || (0, node_os_1.homedir)(), '.devchain', 'host.env');
+}
+async function readHostEnvFile() {
+    try {
+        return parseHostEnvFile(await (0, promises_1.readFile)(hostEnvFilePath(), 'utf8'));
+    }
+    catch {
+        return {};
+    }
+}
+function renderHostEnvFile(env) {
+    const lines = ['# Provider environment for devchain-host.service. Written at claim time.'];
+    for (const [key, value] of Object.entries(env)) {
+        lines.push(`${key}="${value.replace(/[\\"`$]/g, (c) => `\\${c}`)}"`);
+    }
+    return `${lines.join('\n')}\n`;
+}
+let HostProviderAuthService = class HostProviderAuthService {
+    helper;
+    executor;
+    familyWatcher;
+    storage;
+    constructor(helper, executor, familyWatcher, storage) {
+        this.helper = helper;
+        this.executor = executor;
+        this.familyWatcher = familyWatcher;
+        this.storage = storage;
+    }
+    get home() {
+        return process.env.HOME || (0, node_os_1.homedir)();
+    }
+    get envFile() {
+        return hostEnvFilePath();
+    }
+    async verify(provider, opencodeProviderIds) {
+        this.helper.assertClaimedHost();
+        const check = provider_auth_adapters_1.PROVIDER_AUTH_VERIFY[provider];
+        if (!check) {
+            throw new error_types_1.ValidationError(`Provider "${provider}" has no login check.`, {
+                reason: 'provider_not_supported',
+            });
+        }
+        const hostEnv = await this.readHostEnv();
+        const binPath = await this.binPath(provider);
+        const argv = check.argv((cli) => (cli === provider ? binPath : cli));
+        const command = (0, provider_cli_policy_1.applyProviderCliNoUpdate)(provider, argv);
+        const result = await this.executor.run({
+            argv: command.argv,
+            mode: 'pipe',
+            cwd: this.home,
+            env: (0, provider_auth_generator_service_1.buildLoginEnv)(process.env, { set: { ...hostEnv, ...command.env }, unset: [] }),
+            timeout: VERIFY_TIMEOUT_MS,
+            outputLimits: { maxBytes: 64 * 1024 },
+        });
+        const output = [result.stdout, result.stderr].filter(Boolean).join('\n');
+        const summary = (0, provider_auth_generator_service_1.redactSecrets)(output.trim(), Object.values(hostEnv)).slice(-SUMMARY_LIMIT);
+        if (result.timedOut) {
+            return { ok: false, summary, hint: 'The check timed out.' };
+        }
+        const outcome = check.check(output, { opencodeProviderIds });
+        const ok = result.exitCode === 0 && outcome.ok;
+        logger.info({ provider, ok, exitCode: result.exitCode }, 'Checked provider login');
+        return {
+            ok,
+            summary,
+            hint: ok ? null : outcome.ok ? `The check exited ${result.exitCode}.` : outcome.hint,
+        };
+    }
+    async families(sinceMs) {
+        this.helper.assertClaimedHost();
+        return this.familyWatcher.getFamilies(sinceMs);
+    }
+    async apply(bundle) {
+        this.helper.assertClaimedHost();
+        if (bundle.files.length > MAX_FILES) {
+            throw new error_types_1.ValidationError(`At most ${MAX_FILES} files.`, {
+                reason: 'provider_auth_too_many',
+            });
+        }
+        const files = bundle.files.map((file) => this.validateFile(file));
+        const envKeys = Object.keys(bundle.env);
+        for (const [key, value] of Object.entries(bundle.env))
+            validateEnv(key, value);
+        const remove = this.validateRemove(bundle.remove);
+        const removed = await this.removeLogins(remove);
+        for (const file of files) {
+            await this.ensureDirs((0, node_path_1.dirname)(file.path));
+            await refuseSymlink(file.path);
+            await writeAtomic(file.path, file.content);
+        }
+        if (envKeys.length > 0) {
+            const env = { ...(await this.readHostEnv()), ...bundle.env };
+            await this.ensureDirs((0, node_path_1.dirname)(this.envFile));
+            await writeAtomic(this.envFile, Buffer.from(renderHostEnvFile(env)));
+            for (const key of envKeys) {
+                process.env[key] = bundle.env[key];
+                await this.executor.run({
+                    argv: ['tmux', 'set-environment', '-g', key, bundle.env[key]],
+                    mode: 'pipe',
+                });
+            }
+        }
+        logger.info({ envKeys, files: files.map((file) => file.path), removed }, 'Applied provider logins');
+        return { envKeys, files: files.map((file) => file.path), removed };
+    }
+    readHostEnv() {
+        return readHostEnvFile();
+    }
+    async binPath(provider) {
+        const { items } = await this.storage.listProviders();
+        const configured = items.find((row) => row.name.toLowerCase() === provider)?.binPath;
+        return (await (0, provider_auth_generator_service_1.resolveExecutable)(configured ?? provider, process.env.PATH)) ?? provider;
+    }
+    validateFile(file) {
+        const path = (0, node_path_1.normalize)(file.path);
+        const inside = (0, node_path_1.relative)(this.home, path);
+        if (!(0, node_path_1.isAbsolute)(file.path) || !inside || inside.startsWith('..') || (0, node_path_1.isAbsolute)(inside)) {
+            throw new error_types_1.ValidationError('Every file must be inside the home directory.', {
+                reason: 'provider_auth_file_outside_home',
+            });
+        }
+        if (exports.REFUSED_FILES.includes(inside.split(node_path_1.sep).join('/'))) {
+            throw new error_types_1.ValidationError(`${inside} cannot be written.`, {
+                reason: 'provider_auth_file_refused',
+            });
+        }
+        const content = Buffer.from(file.contentBase64, 'base64');
+        if (content.length > MAX_FILE_BYTES) {
+            throw new error_types_1.ValidationError('A provider file is too large.', {
+                reason: 'provider_auth_file_too_large',
+            });
+        }
+        return { path, content };
+    }
+    validateRemove(spec) {
+        if (!spec)
+            return { envKeys: [], files: [] };
+        if (spec.envKeys.length > MAX_REMOVE_ENV_KEYS || spec.files.length > MAX_FILES) {
+            throw new error_types_1.ValidationError('Too many removals in one request.', {
+                reason: 'provider_auth_too_many',
+            });
+        }
+        const envKeys = [...new Set(spec.envKeys)];
+        for (const key of envKeys) {
+            if (!provider_auth_adapters_1.PROVIDER_AUTH_ENV_KEY_PATTERN.test(key) || provider_auth_adapters_1.RESERVED_PROVIDER_AUTH_ENV_KEYS.has(key)) {
+                throw new error_types_1.ValidationError(`Environment key "${key}" cannot be removed.`, {
+                    reason: 'provider_auth_env_key_refused',
+                });
+            }
+        }
+        const familyPaths = new Set((0, provider_auth_watcher_service_1.familyFilePaths)().map((entry) => entry.path));
+        const files = [...new Set(spec.files)].map((raw) => {
+            const path = (0, node_path_1.normalize)(raw);
+            const inside = (0, node_path_1.relative)(this.home, path);
+            if (!(0, node_path_1.isAbsolute)(raw) || !inside || inside.startsWith('..') || (0, node_path_1.isAbsolute)(inside)) {
+                throw new error_types_1.ValidationError('Every removed file must be inside the home directory.', {
+                    reason: 'provider_auth_file_outside_home',
+                });
+            }
+            const relativePath = inside.split(node_path_1.sep).join('/');
+            if (exports.REFUSED_FILES.includes(relativePath)) {
+                throw new error_types_1.ValidationError(`${inside} cannot be removed.`, {
+                    reason: 'provider_auth_file_refused',
+                });
+            }
+            if (!familyPaths.has(relativePath)) {
+                throw new error_types_1.ValidationError(`${inside} is not a provider login file.`, {
+                    reason: 'provider_auth_file_not_family',
+                });
+            }
+            return path;
+        });
+        return { envKeys, files };
+    }
+    async removeLogins(remove) {
+        const removedEnvKeys = [];
+        if (remove.envKeys.length > 0) {
+            const hostEnv = await this.readHostEnv();
+            let envChanged = false;
+            for (const key of remove.envKeys) {
+                const known = key in hostEnv || key in process.env;
+                if (key in hostEnv) {
+                    delete hostEnv[key];
+                    envChanged = true;
+                }
+                if (key in process.env)
+                    delete process.env[key];
+                await this.executor.run({
+                    argv: ['tmux', 'set-environment', '-gu', key],
+                    mode: 'pipe',
+                });
+                if (known)
+                    removedEnvKeys.push(key);
+            }
+            if (envChanged) {
+                await this.ensureDirs((0, node_path_1.dirname)(this.envFile));
+                await writeAtomic(this.envFile, Buffer.from(renderHostEnvFile(hostEnv)));
+            }
+        }
+        const removedFiles = [];
+        for (const path of remove.files) {
+            await this.refuseSymlinkedParents(path);
+            await refuseSymlink(path);
+            const stat = await (0, promises_1.lstat)(path).catch(() => null);
+            if (!stat)
+                continue;
+            await (0, promises_1.rm)(path, { force: true });
+            removedFiles.push(path);
+        }
+        return { envKeys: removedEnvKeys, files: removedFiles };
+    }
+    async refuseSymlinkedParents(file) {
+        let current = this.home;
+        for (const segment of (0, node_path_1.relative)(this.home, file).split(node_path_1.sep).slice(0, -1)) {
+            current = (0, node_path_1.join)(current, segment);
+            await refuseSymlink(current);
+        }
+    }
+    async ensureDirs(dir) {
+        let current = this.home;
+        for (const segment of (0, node_path_1.relative)(this.home, dir).split(node_path_1.sep).filter(Boolean)) {
+            current = (0, node_path_1.join)(current, segment);
+            await refuseSymlink(current);
+            await (0, promises_1.mkdir)(current, { mode: 0o700 }).catch((error) => {
+                if (error.code !== 'EEXIST')
+                    throw error;
+            });
+        }
+    }
+};
+exports.HostProviderAuthService = HostProviderAuthService;
+exports.HostProviderAuthService = HostProviderAuthService = __decorate([
+    (0, common_1.Injectable)(),
+    __param(3, (0, common_1.Inject)(storage_interface_1.STORAGE_SERVICE)),
+    __metadata("design:paramtypes", [host_helper_service_1.HostHelperService,
+        process_executor_port_1.ProcessExecutor,
+        provider_auth_watcher_service_1.ProviderAuthWatcherService, Object])
+], HostProviderAuthService);
+function validateEnv(key, value) {
+    if (!provider_auth_adapters_1.PROVIDER_AUTH_ENV_KEY_PATTERN.test(key) || provider_auth_adapters_1.RESERVED_PROVIDER_AUTH_ENV_KEYS.has(key)) {
+        throw new error_types_1.ValidationError(`Environment key "${key}" cannot be set.`, {
+            reason: 'provider_auth_env_key_refused',
+        });
+    }
+    if (/[\0\r\n]/.test(value) || value.length > 16 * 1024) {
+        throw new error_types_1.ValidationError(`The value of "${key}" must be one line.`, {
+            reason: 'provider_auth_env_value_invalid',
+        });
+    }
+}
+async function refuseSymlink(path) {
+    const stat = await (0, promises_1.lstat)(path).catch(() => null);
+    if (stat?.isSymbolicLink()) {
+        throw new error_types_1.ValidationError(`${path} is a symbolic link.`, { reason: 'provider_auth_symlink' });
+    }
+}
+async function writeAtomic(path, content) {
+    const tmp = `${path}.${(0, node_crypto_1.randomUUID)()}.tmp`;
+    try {
+        await (0, promises_1.writeFile)(tmp, content, { mode: 0o600, flag: 'wx' });
+        await (0, promises_1.chmod)(tmp, 0o600);
+        await (0, promises_1.rename)(tmp, path);
+    }
+    finally {
+        await (0, promises_1.rm)(tmp, { force: true });
+    }
+}
+//# sourceMappingURL=host-provider-auth.service.js.map

package/dist/server/modules/remotes/host/host-provider-auth.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"host-provider-auth.service.js","sourceRoot":"","sources":["../../../../src/modules/remotes/host/host-provider-auth.service.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AA0EA,4CAOC;AAGD,0CAEC;AAGD,0CAMC;AAED,8CAMC;AAvGD,sFAAwF;AACxF,6CAAyC;AACzC,+CAAwF;AACxF,qCAAkC;AAClC,yCAAgF;AAChF,2CAAoD;AACpD,oEAAqE;AACrE,2DAA8D;AAC9D,uFAKoD;AACpD,yGAI6D;AAC7D,qGAI2D;AAC3D,kFAAmG;AACnG,0GAAiG;AACjG,+DAA0D;AAE1D,MAAM,MAAM,GAAG,IAAA,qBAAY,EAAC,yBAAyB,CAAC,CAAC;AAEvD,MAAM,iBAAiB,GAAG,MAAM,CAAC;AACjC,MAAM,aAAa,GAAG,KAAK,CAAC;AAC5B,MAAM,SAAS,GAAG,EAAE,CAAC;AACrB,MAAM,cAAc,GAAG,GAAG,GAAG,IAAI,CAAC;AAClC,MAAM,mBAAmB,GAAG,EAAE,CAAC;AAKlB,QAAA,aAAa,GAAG;IAC3B,2BAA2B;IAC3B,oBAAoB;IACpB,uBAAuB;IACvB,wBAAwB;CACzB,CAAC;AA8BF,SAAgB,gBAAgB,CAAC,OAAe;IAC9C,MAAM,GAAG,GAA2B,EAAE,CAAC;IACvC,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACvC,MAAM,KAAK,GAAG,gDAAgD,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;QACjF,IAAI,KAAK;YAAE,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;IAC9D,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAGD,SAAgB,eAAe;IAC7B,OAAO,IAAA,gBAAI,EAAC,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,IAAA,iBAAO,GAAE,EAAE,WAAW,EAAE,UAAU,CAAC,CAAC;AACtE,CAAC;AAGM,KAAK,UAAU,eAAe;IACnC,IAAI,CAAC;QACH,OAAO,gBAAgB,CAAC,MAAM,IAAA,mBAAQ,EAAC,eAAe,EAAE,EAAE,MAAM,CAAC,CAAC,CAAC;IACrE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,SAAgB,iBAAiB,CAAC,GAA2B;IAC3D,MAAM,KAAK,GAAG,CAAC,0EAA0E,CAAC,CAAC;IAC3F,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QAC/C,KAAK,CAAC,IAAI,CAAC,GAAG,GAAG,KAAK,KAAK,CAAC,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC;IACvE,CAAC;IACD,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;AACjC,CAAC;AASM,IAAM,uBAAuB,GAA7B,MAAM,uBAAuB;IAEf;IACA;IACA;IACyB;IAJ5C,YACmB,MAAyB,EACzB,QAAyB,EACzB,aAAyC,EAChB,OAA+C;QAHxE,WAAM,GAAN,MAAM,CAAmB;QACzB,aAAQ,GAAR,QAAQ,CAAiB;QACzB,kBAAa,GAAb,aAAa,CAA4B;QAChB,YAAO,GAAP,OAAO,CAAwC;IACxF,CAAC;IAGJ,IAAY,IAAI;QACd,OAAO,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,IAAA,iBAAO,GAAE,CAAC;IACvC,CAAC;IAED,IAAY,OAAO;QACjB,OAAO,eAAe,EAAE,CAAC;IAC3B,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,QAAgB,EAAE,mBAA6B;QAC1D,IAAI,CAAC,MAAM,CAAC,iBAAiB,EAAE,CAAC;QAChC,MAAM,KAAK,GAAG,6CAAoB,CAAC,QAAQ,CAAC,CAAC;QAC7C,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,IAAI,6BAAe,CAAC,aAAa,QAAQ,uBAAuB,EAAE;gBACtE,MAAM,EAAE,wBAAwB;aACjC,CAAC,CAAC;QACL,CAAC;QACD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC;QACzC,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QAC7C,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QACrE,MAAM,OAAO,GAAG,IAAA,8CAAwB,EAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;QACzD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC;YACrC,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,IAAI,EAAE,MAAM;YACZ,GAAG,EAAE,IAAI,CAAC,IAAI;YACd,GAAG,EAAE,IAAA,+CAAa,EAAC,OAAO,CAAC,GAAG,EAAE,EAAE,GAAG,EAAE,EAAE,GAAG,OAAO,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC;YACnF,OAAO,EAAE,iBAAiB;YAC1B,YAAY,EAAE,EAAE,QAAQ,EAAE,EAAE,GAAG,IAAI,EAAE;SACtC,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACzE,MAAM,OAAO,GAAG,IAAA,+CAAa,EAAC,MAAM,CAAC,IAAI,EAAE,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,aAAa,CAAC,CAAC;QAC3F,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;YACpB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,sBAAsB,EAAE,CAAC;QAC9D,CAAC;QACD,MAAM,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,MAAM,EAAE,EAAE,mBAAmB,EAAE,CAAC,CAAC;QAC7D,MAAM,EAAE,GAAG,MAAM,CAAC,QAAQ,KAAK,CAAC,IAAI,OAAO,CAAC,EAAE,CAAC;QAC/C,MAAM,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,EAAE,wBAAwB,CAAC,CAAC;QACnF,OAAO;YACL,EAAE;YACF,OAAO;YACP,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,oBAAoB,MAAM,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI;SACrF,CAAC;IACJ,CAAC;IAOD,KAAK,CAAC,QAAQ,CAAC,OAAe;QAC5B,IAAI,CAAC,MAAM,CAAC,iBAAiB,EAAE,CAAC;QAChC,OAAO,IAAI,CAAC,aAAa,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;IACjD,CAAC;IAGD,KAAK,CAAC,KAAK,CAAC,MAA8B;QACxC,IAAI,CAAC,MAAM,CAAC,iBAAiB,EAAE,CAAC;QAChC,IAAI,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,EAAE,CAAC;YACpC,MAAM,IAAI,6BAAe,CAAC,WAAW,SAAS,SAAS,EAAE;gBACvD,MAAM,EAAE,wBAAwB;aACjC,CAAC,CAAC;QACL,CAAC;QACD,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC;QAClE,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACxC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC;YAAE,WAAW,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QAC/E,MAAM,MAAM,GAAG,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAIlD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;QAEhD,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,MAAM,IAAI,CAAC,UAAU,CAAC,IAAA,mBAAO,EAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;YAC1C,MAAM,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC/B,MAAM,WAAW,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;QAC7C,CAAC;QACD,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACvB,MAAM,GAAG,GAAG,EAAE,GAAG,CAAC,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC,EAAE,GAAG,MAAM,CAAC,GAAG,EAAE,CAAC;YAC7D,MAAM,IAAI,CAAC,UAAU,CAAC,IAAA,mBAAO,EAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;YAC7C,MAAM,WAAW,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;YACrE,KAAK,MAAM,GAAG,IAAI,OAAO,EAAE,CAAC;gBAC1B,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;gBAEnC,MAAM,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC;oBACtB,IAAI,EAAE,CAAC,MAAM,EAAE,iBAAiB,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;oBAC7D,IAAI,EAAE,MAAM;iBACb,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QACD,MAAM,CAAC,IAAI,CACT,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,EAC3D,yBAAyB,CAC1B,CAAC;QACF,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,CAAC;IACrE,CAAC;IAEO,WAAW;QACjB,OAAO,eAAe,EAAE,CAAC;IAC3B,CAAC;IAEO,KAAK,CAAC,OAAO,CAAC,QAAgB;QACpC,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,aAAa,EAAE,CAAC;QACrD,MAAM,UAAU,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,QAAQ,CAAC,EAAE,OAAO,CAAC;QACrF,OAAO,CAAC,MAAM,IAAA,mDAAiB,EAAC,UAAU,IAAI,QAAQ,EAAE,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,IAAI,QAAQ,CAAC;IACzF,CAAC;IAEO,YAAY,CAAC,IAA8C;QAIjE,MAAM,IAAI,GAAG,IAAA,qBAAS,EAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAClC,MAAM,MAAM,GAAG,IAAA,oBAAQ,EAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QACzC,IAAI,CAAC,IAAA,sBAAU,EAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,IAAA,sBAAU,EAAC,MAAM,CAAC,EAAE,CAAC;YACvF,MAAM,IAAI,6BAAe,CAAC,+CAA+C,EAAE;gBACzE,MAAM,EAAE,iCAAiC;aAC1C,CAAC,CAAC;QACL,CAAC;QACD,IAAI,qBAAa,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,eAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;YACxD,MAAM,IAAI,6BAAe,CAAC,GAAG,MAAM,qBAAqB,EAAE;gBACxD,MAAM,EAAE,4BAA4B;aACrC,CAAC,CAAC;QACL,CAAC;QACD,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,QAAQ,CAAC,CAAC;QAC1D,IAAI,OAAO,CAAC,MAAM,GAAG,cAAc,EAAE,CAAC;YACpC,MAAM,IAAI,6BAAe,CAAC,+BAA+B,EAAE;gBACzD,MAAM,EAAE,8BAA8B;aACvC,CAAC,CAAC;QACL,CAAC;QACD,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;IAC3B,CAAC;IAMO,cAAc,CAAC,IAA4C;QACjE,IAAI,CAAC,IAAI;YAAE,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC;QAC7C,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,GAAG,mBAAmB,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,EAAE,CAAC;YAC/E,MAAM,IAAI,6BAAe,CAAC,mCAAmC,EAAE;gBAC7D,MAAM,EAAE,wBAAwB;aACjC,CAAC,CAAC;QACL,CAAC;QACD,MAAM,OAAO,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;QAC3C,KAAK,MAAM,GAAG,IAAI,OAAO,EAAE,CAAC;YAC1B,IAAI,CAAC,sDAA6B,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,wDAA+B,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;gBACzF,MAAM,IAAI,6BAAe,CAAC,oBAAoB,GAAG,sBAAsB,EAAE;oBACvE,MAAM,EAAE,+BAA+B;iBACxC,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QACD,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,IAAA,+CAAe,GAAE,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;QAC1E,MAAM,KAAK,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE;YACjD,MAAM,IAAI,GAAG,IAAA,qBAAS,EAAC,GAAG,CAAC,CAAC;YAC5B,MAAM,MAAM,GAAG,IAAA,oBAAQ,EAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;YACzC,IAAI,CAAC,IAAA,sBAAU,EAAC,GAAG,CAAC,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,IAAA,sBAAU,EAAC,MAAM,CAAC,EAAE,CAAC;gBACjF,MAAM,IAAI,6BAAe,CAAC,uDAAuD,EAAE;oBACjF,MAAM,EAAE,iCAAiC;iBAC1C,CAAC,CAAC;YACL,CAAC;YACD,MAAM,YAAY,GAAG,MAAM,CAAC,KAAK,CAAC,eAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACjD,IAAI,qBAAa,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC;gBACzC,MAAM,IAAI,6BAAe,CAAC,GAAG,MAAM,qBAAqB,EAAE;oBACxD,MAAM,EAAE,4BAA4B;iBACrC,CAAC,CAAC;YACL,CAAC;YACD,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,YAAY,CAAC,EAAE,CAAC;gBACnC,MAAM,IAAI,6BAAe,CAAC,GAAG,MAAM,gCAAgC,EAAE;oBACnE,MAAM,EAAE,+BAA+B;iBACxC,CAAC,CAAC;YACL,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC,CAAC,CAAC;QACH,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IAC5B,CAAC;IAGO,KAAK,CAAC,YAAY,CACxB,MAAkC;QAElC,MAAM,cAAc,GAAa,EAAE,CAAC;QACpC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC9B,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC;YACzC,IAAI,UAAU,GAAG,KAAK,CAAC;YACvB,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;gBACjC,MAAM,KAAK,GAAG,GAAG,IAAI,OAAO,IAAI,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC;gBACnD,IAAI,GAAG,IAAI,OAAO,EAAE,CAAC;oBACnB,OAAO,OAAO,CAAC,GAAG,CAAC,CAAC;oBACpB,UAAU,GAAG,IAAI,CAAC;gBACpB,CAAC;gBACD,IAAI,GAAG,IAAI,OAAO,CAAC,GAAG;oBAAE,OAAO,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;gBAEhD,MAAM,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC;oBACtB,IAAI,EAAE,CAAC,MAAM,EAAE,iBAAiB,EAAE,KAAK,EAAE,GAAG,CAAC;oBAC7C,IAAI,EAAE,MAAM;iBACb,CAAC,CAAC;gBACH,IAAI,KAAK;oBAAE,cAAc,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACtC,CAAC;YACD,IAAI,UAAU,EAAE,CAAC;gBACf,MAAM,IAAI,CAAC,UAAU,CAAC,IAAA,mBAAO,EAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;gBAC7C,MAAM,WAAW,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,iBAAiB,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;YAC3E,CAAC;QACH,CAAC;QAED,MAAM,YAAY,GAAa,EAAE,CAAC;QAClC,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;YAChC,MAAM,IAAI,CAAC,sBAAsB,CAAC,IAAI,CAAC,CAAC;YACxC,MAAM,aAAa,CAAC,IAAI,CAAC,CAAC;YAC1B,MAAM,IAAI,GAAG,MAAM,IAAA,gBAAK,EAAC,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;YACjD,IAAI,CAAC,IAAI;gBAAE,SAAS;YACpB,MAAM,IAAA,aAAE,EAAC,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YAChC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC1B,CAAC;QACD,OAAO,EAAE,OAAO,EAAE,cAAc,EAAE,KAAK,EAAE,YAAY,EAAE,CAAC;IAC1D,CAAC;IAGO,KAAK,CAAC,sBAAsB,CAAC,IAAY;QAC/C,IAAI,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC;QACxB,KAAK,MAAM,OAAO,IAAI,IAAA,oBAAQ,EAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,KAAK,CAAC,eAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACxE,OAAO,GAAG,IAAA,gBAAI,EAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YACjC,MAAM,aAAa,CAAC,OAAO,CAAC,CAAC;QAC/B,CAAC;IACH,CAAC;IAGO,KAAK,CAAC,UAAU,CAAC,GAAW;QAClC,IAAI,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC;QACxB,KAAK,MAAM,OAAO,IAAI,IAAA,oBAAQ,EAAC,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,eAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;YAC1E,OAAO,GAAG,IAAA,gBAAI,EAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YACjC,MAAM,aAAa,CAAC,OAAO,CAAC,CAAC;YAC7B,MAAM,IAAA,gBAAK,EAAC,OAAO,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,KAA4B,EAAE,EAAE;gBAC3E,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ;oBAAE,MAAM,KAAK,CAAC;YAC3C,CAAC,CAAC,CAAC;QACL,CAAC;IACH,CAAC;CACF,CAAA;AAnPY,0DAAuB;kCAAvB,uBAAuB;IADnC,IAAA,mBAAU,GAAE;IAMR,WAAA,IAAA,eAAM,EAAC,mCAAe,CAAC,CAAA;qCAHC,uCAAiB;QACf,uCAAe;QACV,0DAA0B;GAJjD,uBAAuB,CAmPnC;AAED,SAAS,WAAW,CAAC,GAAW,EAAE,KAAa;IAC7C,IAAI,CAAC,sDAA6B,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,wDAA+B,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;QACzF,MAAM,IAAI,6BAAe,CAAC,oBAAoB,GAAG,kBAAkB,EAAE;YACnE,MAAM,EAAE,+BAA+B;SACxC,CAAC,CAAC;IACL,CAAC;IACD,IAAI,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,EAAE,GAAG,IAAI,EAAE,CAAC;QACvD,MAAM,IAAI,6BAAe,CAAC,iBAAiB,GAAG,qBAAqB,EAAE;YACnE,MAAM,EAAE,iCAAiC;SAC1C,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED,KAAK,UAAU,aAAa,CAAC,IAAY;IACvC,MAAM,IAAI,GAAG,MAAM,IAAA,gBAAK,EAAC,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;IACjD,IAAI,IAAI,EAAE,cAAc,EAAE,EAAE,CAAC;QAC3B,MAAM,IAAI,6BAAe,CAAC,GAAG,IAAI,sBAAsB,EAAE,EAAE,MAAM,EAAE,uBAAuB,EAAE,CAAC,CAAC;IAChG,CAAC;AACH,CAAC;AAED,KAAK,UAAU,WAAW,CAAC,IAAY,EAAE,OAAe;IACtD,MAAM,GAAG,GAAG,GAAG,IAAI,IAAI,IAAA,wBAAU,GAAE,MAAM,CAAC;IAC1C,IAAI,CAAC;QACH,MAAM,IAAA,oBAAS,EAAC,GAAG,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QAC3D,MAAM,IAAA,gBAAK,EAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QACxB,MAAM,IAAA,iBAAM,EAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IAC1B,CAAC;YAAS,CAAC;QACT,MAAM,IAAA,aAAE,EAAC,GAAG,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACjC,CAAC;AACH,CAAC"}

package/dist/server/modules/remotes/host/host-provider-cli-policy.d.ts

@@ -0,0 +1,2 @@
+import { type HostProviderCliPolicy } from '@devchain/shared';
+export declare function providerCliPolicyRevision(policy: HostProviderCliPolicy): string;

package/dist/server/modules/remotes/host/host-provider-cli-policy.js

@@ -0,0 +1,11 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.providerCliPolicyRevision = providerCliPolicyRevision;
+const node_crypto_1 = require("node:crypto");
+const shared_1 = require("@devchain/shared");
+function providerCliPolicyRevision(policy) {
+    return (0, node_crypto_1.createHash)('sha256')
+        .update(JSON.stringify(shared_1.HostProviderCliPolicySchema.parse(policy)))
+        .digest('hex');
+}
+//# sourceMappingURL=host-provider-cli-policy.js.map

package/dist/server/modules/remotes/host/host-provider-cli-policy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"host-provider-cli-policy.js","sourceRoot":"","sources":["../../../../src/modules/remotes/host/host-provider-cli-policy.ts"],"names":[],"mappings":";;AAGA,8DAIC;AAPD,6CAAyC;AACzC,6CAA2F;AAE3F,SAAgB,yBAAyB,CAAC,MAA6B;IACrE,OAAO,IAAA,wBAAU,EAAC,QAAQ,CAAC;SACxB,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,oCAA2B,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;SACjE,MAAM,CAAC,KAAK,CAAC,CAAC;AACnB,CAAC"}

package/dist/server/modules/remotes/host/host-provider-cli-settings.controller.d.ts

@@ -0,0 +1,44 @@
+import { HostHelperService } from './host-helper.service';
+import { HostProviderCliSettingsService } from './host-provider-cli-settings.service';
+export declare class HostProviderCliSettingsController {
+    private readonly helper;
+    private readonly service;
+    constructor(helper: HostHelperService, service: HostProviderCliSettingsService);
+    status(): {
+        providers: {
+            claude: {
+                installedVersion: string | null;
+                state: "failed" | "accepted" | "pending" | "applied";
+                error: string | null;
+                acceptedVersion: string | null;
+            };
+            codex: {
+                installedVersion: string | null;
+                state: "failed" | "accepted" | "pending" | "applied";
+                error: string | null;
+                acceptedVersion: string | null;
+            };
+            copilot: {
+                installedVersion: string | null;
+                state: "failed" | "accepted" | "pending" | "applied";
+                error: string | null;
+                acceptedVersion: string | null;
+            };
+            opencode: {
+                installedVersion: string | null;
+                state: "failed" | "accepted" | "pending" | "applied";
+                error: string | null;
+                acceptedVersion: string | null;
+            };
+        };
+        acceptedRevision: string | null;
+        pendingRevision: string | null;
+        appliedRevision: string | null;
+    };
+    accept(body: unknown): {
+        revision: string;
+    };
+    check(): {
+        accepted: boolean;
+    };
+}

package/dist/server/modules/remotes/host/host-provider-cli-settings.controller.js

@@ -0,0 +1,74 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.HostProviderCliSettingsController = void 0;
+const common_1 = require("@nestjs/common");
+const shared_1 = require("@devchain/shared");
+const host_helper_service_1 = require("./host-helper.service");
+const host_provider_cli_settings_service_1 = require("./host-provider-cli-settings.service");
+const host_provider_cli_policy_1 = require("./host-provider-cli-policy");
+let HostProviderCliSettingsController = class HostProviderCliSettingsController {
+    helper;
+    service;
+    constructor(helper, service) {
+        this.helper = helper;
+        this.service = service;
+    }
+    status() {
+        this.helper.assertClaimedHost();
+        return this.service.status();
+    }
+    accept(body) {
+        this.helper.assertClaimedHost();
+        const parsed = shared_1.HostProviderCliSettingsSchema.safeParse(body);
+        if (!parsed.success ||
+            parsed.data.revision !== (0, host_provider_cli_policy_1.providerCliPolicyRevision)(parsed.data.providers))
+            throw new common_1.BadRequestException('Invalid host provider CLI policy');
+        this.service.accept(parsed.data);
+        return { revision: parsed.data.revision };
+    }
+    check() {
+        this.helper.assertClaimedHost();
+        this.service.checkNow();
+        return { accepted: true };
+    }
+};
+exports.HostProviderCliSettingsController = HostProviderCliSettingsController;
+__decorate([
+    (0, common_1.Get)('status'),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", []),
+    __metadata("design:returntype", void 0)
+], HostProviderCliSettingsController.prototype, "status", null);
+__decorate([
+    (0, common_1.Put)(),
+    (0, common_1.HttpCode)(202),
+    __param(0, (0, common_1.Body)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object]),
+    __metadata("design:returntype", void 0)
+], HostProviderCliSettingsController.prototype, "accept", null);
+__decorate([
+    (0, common_1.Post)('check'),
+    (0, common_1.HttpCode)(202),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", []),
+    __metadata("design:returntype", void 0)
+], HostProviderCliSettingsController.prototype, "check", null);
+exports.HostProviderCliSettingsController = HostProviderCliSettingsController = __decorate([
+    (0, common_1.Controller)('api/host/provider-clis'),
+    __metadata("design:paramtypes", [host_helper_service_1.HostHelperService,
+        host_provider_cli_settings_service_1.HostProviderCliSettingsService])
+], HostProviderCliSettingsController);
+//# sourceMappingURL=host-provider-cli-settings.controller.js.map

package/dist/server/modules/remotes/host/host-provider-cli-settings.controller.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"host-provider-cli-settings.controller.js","sourceRoot":"","sources":["../../../../src/modules/remotes/host/host-provider-cli-settings.controller.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,2CAAiG;AACjG,6CAAiE;AACjE,+DAA0D;AAC1D,6FAAsF;AACtF,yEAAuE;AAGhE,IAAM,iCAAiC,GAAvC,MAAM,iCAAiC;IAEzB;IACA;IAFnB,YACmB,MAAyB,EACzB,OAAuC;QADvC,WAAM,GAAN,MAAM,CAAmB;QACzB,YAAO,GAAP,OAAO,CAAgC;IACvD,CAAC;IAGJ,MAAM;QACJ,IAAI,CAAC,MAAM,CAAC,iBAAiB,EAAE,CAAC;QAChC,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;IAC/B,CAAC;IAID,MAAM,CAAS,IAAa;QAC1B,IAAI,CAAC,MAAM,CAAC,iBAAiB,EAAE,CAAC;QAChC,MAAM,MAAM,GAAG,sCAA6B,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QAC7D,IACE,CAAC,MAAM,CAAC,OAAO;YACf,MAAM,CAAC,IAAI,CAAC,QAAQ,KAAK,IAAA,oDAAyB,EAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC;YAEzE,MAAM,IAAI,4BAAmB,CAAC,kCAAkC,CAAC,CAAC;QACpE,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACjC,OAAO,EAAE,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;IAC5C,CAAC;IAID,KAAK;QACH,IAAI,CAAC,MAAM,CAAC,iBAAiB,EAAE,CAAC;QAChC,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC;QACxB,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IAC5B,CAAC;CACF,CAAA;AAjCY,8EAAiC;AAO5C;IADC,IAAA,YAAG,EAAC,QAAQ,CAAC;;;;+DAIb;AAID;IAFC,IAAA,YAAG,GAAE;IACL,IAAA,iBAAQ,EAAC,GAAG,CAAC;IACN,WAAA,IAAA,aAAI,GAAE,CAAA;;;;+DAUb;AAID;IAFC,IAAA,aAAI,EAAC,OAAO,CAAC;IACb,IAAA,iBAAQ,EAAC,GAAG,CAAC;;;;8DAKb;4CAhCU,iCAAiC;IAD7C,IAAA,mBAAU,EAAC,wBAAwB,CAAC;qCAGR,uCAAiB;QAChB,mEAA8B;GAH/C,iCAAiC,CAiC7C"}

package/dist/server/modules/remotes/host/host-provider-cli-settings.service.d.ts

@@ -0,0 +1,26 @@
+import { OnModuleInit, OnModuleDestroy } from '@nestjs/common';
+import { type HostProviderCliSettings, type HostProviderCliSettingsStatus } from '@devchain/shared';
+import { SettingsService } from '../../settings/services/settings.service';
+import { ProviderCliInstallStateService } from '../../providers/services/provider-cli-install-state.service';
+import { ProviderCliInstallerService } from '../../providers/services/provider-cli-installer.service';
+import { ProviderCliVersionsService } from '../../providers/services/provider-cli-versions.service';
+import { HostHelperService } from './host-helper.service';
+export declare class HostProviderCliSettingsService implements OnModuleInit, OnModuleDestroy {
+    private readonly helper;
+    private readonly local;
+    private readonly settings;
+    private readonly versions;
+    private readonly installer;
+    private stopped;
+    private accepted;
+    constructor(helper: HostHelperService, local: ProviderCliInstallStateService, settings: SettingsService, versions: ProviderCliVersionsService, installer: ProviderCliInstallerService);
+    onModuleInit(): void;
+    onModuleDestroy(): void;
+    private get path();
+    accept(body: HostProviderCliSettings): void;
+    private saveSettings;
+    private applyInBackground;
+    checkNow(): void;
+    private checkInBackground;
+    status(): HostProviderCliSettingsStatus;
+}