iobroker.bee 0.0.0-stage → 0.2.2

package/build/lib/console.js

@@ -0,0 +1,218 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.MAX_SHELLS = void 0;
+exports.findScript = findScript;
+exports.loginShell = loginShell;
+exports.consoleUser = consoleUser;
+exports.parentOf = parentOf;
+exports.startShell = startShell;
+const node_child_process_1 = require("node:child_process");
+const node_fs_1 = require("node:fs");
+const node_os_1 = __importDefault(require("node:os"));
+const tunnel_1 = require("./tunnel");
+/**
+ * Console of the remote access: a shell on this system for one terminal in the browser of the technician.
+ * Each stream of the tunnel is one shell. No native module: `script` of util-linux (on every Debian) gives the
+ * shell a pseudo terminal, and `stty` sets the size of its window. Only Linux, and only when the owner allows it.
+ */
+/** Shells per access session at the same time */
+exports.MAX_SHELLS = 4;
+/** `script` of util-linux, null if this system has none (then there is no console) */
+function findScript() {
+    if (process.platform !== 'linux') {
+        return null;
+    }
+    return ['/usr/bin/script', '/bin/script'].find(p => (0, node_fs_1.existsSync)(p)) ?? null;
+}
+function findStty() {
+    return ['/usr/bin/stty', '/bin/stty'].find(p => (0, node_fs_1.existsSync)(p)) ?? 'stty';
+}
+/** A shell to log in with; the one of a service user is often nologin, so not taken from /etc/passwd */
+function loginShell(env = process.env) {
+    return ([env.SHELL, '/bin/bash', '/bin/sh'].find(s => !!s && !/(nologin|false)$/.test(s) && (0, node_fs_1.existsSync)(s)) ?? '/bin/sh');
+}
+/** The user the shell runs as: the user of ioBroker */
+function consoleUser() {
+    try {
+        return node_os_1.default.userInfo().username;
+    }
+    catch {
+        return String(process.getuid?.() ?? '');
+    }
+}
+/** Parent process id from /proc/<pid>/stat; the name in parentheses may contain spaces and parentheses */
+function parentOf(stat) {
+    const rest = stat.slice(stat.lastIndexOf(')') + 2).split(' ');
+    return parseInt(rest[1], 10);
+}
+/** The child of `script` (the shell) and the terminal it reads from, e.g. /dev/pts/3 */
+function findTerminal(scriptPid) {
+    for (const entry of (0, node_fs_1.readdirSync)('/proc')) {
+        if (!/^\d+$/.test(entry)) {
+            continue;
+        }
+        try {
+            if (parentOf((0, node_fs_1.readFileSync)(`/proc/${entry}/stat`, 'utf8')) === scriptPid) {
+                const tty = (0, node_fs_1.readlinkSync)(`/proc/${entry}/fd/0`);
+                if (tty.startsWith('/dev/pts/')) {
+                    return { pid: parseInt(entry, 10), tty };
+                }
+            }
+        }
+        catch {
+            // the process ended meanwhile, or is not ours
+        }
+    }
+    return null;
+}
+function signalGroup(pid, signal) {
+    if (!pid) {
+        return;
+    }
+    try {
+        process.kill(-pid, signal);
+    }
+    catch {
+        // already gone
+    }
+}
+/**
+ * Runs one shell for a stream of the tunnel until one of both ends.
+ *
+ * @param stream stream of the tunnel, carrying console messages (see tunnel.ts)
+ * @param opts working directory, logger and who opened it
+ */
+function startShell(stream, opts) {
+    const script = findScript();
+    if (!script) {
+        stream.end((0, tunnel_1.consoleMessage)(tunnel_1.CONSOLE.EXIT, Buffer.from('keine Konsole auf diesem System')));
+        return;
+    }
+    const shell = loginShell();
+    const home = (() => {
+        try {
+            return node_os_1.default.userInfo().homedir;
+        }
+        catch {
+            return opts.cwd;
+        }
+    })();
+    // a fresh login environment instead of the one of the adapter process
+    const env = {
+        HOME: home,
+        USER: consoleUser(),
+        LOGNAME: consoleUser(),
+        SHELL: shell,
+        PATH: process.env.PATH || '/usr/local/bin:/usr/bin:/bin',
+        LANG: process.env.LANG || 'C.UTF-8',
+        TERM: 'xterm-256color',
+        COLORTERM: 'truecolor',
+    };
+    // detached: own process group, so that the end reaches everything started in it
+    const child = (0, node_child_process_1.spawn)(script, ['-qfec', `exec ${shell} -l`, '/dev/null'], {
+        cwd: (0, node_fs_1.existsSync)(opts.cwd) ? opts.cwd : home,
+        env,
+        detached: true,
+        stdio: ['pipe', 'pipe', 'pipe'],
+    });
+    let terminal = null;
+    let size = null;
+    let ended = false;
+    let killTimer = null;
+    const applySize = () => {
+        if (terminal && size) {
+            // the kernel tells the shell (SIGWINCH)
+            (0, node_child_process_1.execFile)(findStty(), ['-F', terminal.tty, 'cols', String(size.cols), 'rows', String(size.rows)], err => {
+                if (err) {
+                    opts.log.debug(`Console: stty: ${err.message}`);
+                }
+            });
+        }
+    };
+    // the shell needs a moment until it runs on its terminal
+    let tries = 0;
+    const lookup = setInterval(() => {
+        if (ended || terminal || ++tries > 60 || !child.pid) {
+            clearInterval(lookup);
+            return;
+        }
+        terminal = findTerminal(child.pid);
+        if (terminal) {
+            clearInterval(lookup);
+            applySize();
+        }
+    }, 50);
+    const stop = () => {
+        // nobody waits for a drain any more: read the pipes to their end, or the end of the shell is never seen
+        child.stdout?.resume();
+        child.stderr?.resume();
+        if (killTimer || ended) {
+            return;
+        }
+        // hang up: the shell and what runs in its foreground get SIGHUP, as when an SSH connection drops
+        signalGroup(terminal?.pid, 'SIGHUP');
+        signalGroup(child.pid, 'SIGHUP');
+        killTimer = setTimeout(() => {
+            signalGroup(terminal?.pid, 'SIGKILL');
+            signalGroup(child.pid, 'SIGKILL');
+        }, 3000);
+    };
+    const forward = (chunk) => {
+        if (stream.destroyed || !stream.writable) {
+            // the browser is gone, the shell is being hung up: drop what it still writes
+            return;
+        }
+        if (!stream.write((0, tunnel_1.consoleMessage)(tunnel_1.CONSOLE.DATA, chunk))) {
+            // the browser is slow: hold the shell back
+            child.stdout?.pause();
+            child.stderr?.pause();
+            stream.once('drain', () => {
+                child.stdout?.resume();
+                child.stderr?.resume();
+            });
+        }
+    };
+    child.stdout?.on('data', forward);
+    child.stderr?.on('data', forward);
+    child.stdin?.on('error', () => { });
+    const reader = new tunnel_1.ConsoleReader((type, payload) => {
+        if (type === tunnel_1.CONSOLE.DATA) {
+            child.stdin?.write(payload);
+        }
+        else if (type === tunnel_1.CONSOLE.RESIZE && payload.length >= 4) {
+            const clamp = (n) => Math.max(1, Math.min(1000, n));
+            size = { cols: clamp(payload.readUInt16BE(0)), rows: clamp(payload.readUInt16BE(2)) };
+            applySize();
+        }
+    });
+    stream.on('data', (chunk) => {
+        if (!reader.push(chunk)) {
+            stream.destroy(new Error('invalid console message'));
+        }
+    });
+    stream.on('end', stop);
+    stream.on('close', stop);
+    stream.on('error', stop);
+    child.on('error', err => {
+        opts.log.warn(`Console: ${err.message}`);
+        stop();
+    });
+    child.on('close', (code, signal) => {
+        ended = true;
+        clearInterval(lookup);
+        if (killTimer) {
+            clearTimeout(killTimer);
+        }
+        const result = signal ? signal : String(code ?? '');
+        if (!stream.destroyed && stream.writable) {
+            stream.end((0, tunnel_1.consoleMessage)(tunnel_1.CONSOLE.EXIT, Buffer.from(result)));
+        }
+        opts.log.info(`Console of ${opts.by} ended (${result})`);
+        opts.onEnd?.(result);
+    });
+    opts.log.info(`Console: shell ${shell} as ${consoleUser()} started for ${opts.by}`);
+}
+//# sourceMappingURL=console.js.map

package/build/lib/console.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"console.js","sourceRoot":"","sources":["../../src/lib/console.ts"],"names":[],"mappings":";;;;;;AAgBA,gCAKC;AAOD,gCAIC;AAGD,kCAMC;AAGD,4BAGC;AAgDD,gCAoIC;AAnOD,2DAAwE;AACxE,qCAA8E;AAC9E,sDAAyB;AAEzB,qCAAkE;AAElE;;;;GAIG;AAEH,iDAAiD;AACpC,QAAA,UAAU,GAAG,CAAC,CAAC;AAE5B,sFAAsF;AACtF,SAAgB,UAAU;IACtB,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;QAC/B,OAAO,IAAI,CAAC;IAChB,CAAC;IACD,OAAO,CAAC,iBAAiB,EAAE,aAAa,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,IAAA,oBAAU,EAAC,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC;AAC/E,CAAC;AAED,SAAS,QAAQ;IACb,OAAO,CAAC,eAAe,EAAE,WAAW,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,IAAA,oBAAU,EAAC,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC;AAC7E,CAAC;AAED,wGAAwG;AACxG,SAAgB,UAAU,CAAC,MAAyB,OAAO,CAAC,GAAG;IAC3D,OAAO,CACH,CAAC,GAAG,CAAC,KAAK,EAAE,WAAW,EAAE,SAAS,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,IAAA,oBAAU,EAAC,CAAC,CAAC,CAAC,IAAI,SAAS,CAClH,CAAC;AACN,CAAC;AAED,uDAAuD;AACvD,SAAgB,WAAW;IACvB,IAAI,CAAC;QACD,OAAO,iBAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC;IAClC,CAAC;IAAC,MAAM,CAAC;QACL,OAAO,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;IAC5C,CAAC;AACL,CAAC;AAED,0GAA0G;AAC1G,SAAgB,QAAQ,CAAC,IAAY;IACjC,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC9D,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AACjC,CAAC;AAED,wFAAwF;AACxF,SAAS,YAAY,CAAC,SAAiB;IACnC,KAAK,MAAM,KAAK,IAAI,IAAA,qBAAW,EAAC,OAAO,CAAC,EAAE,CAAC;QACvC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YACvB,SAAS;QACb,CAAC;QACD,IAAI,CAAC;YACD,IAAI,QAAQ,CAAC,IAAA,sBAAY,EAAC,SAAS,KAAK,OAAO,EAAE,MAAM,CAAC,CAAC,KAAK,SAAS,EAAE,CAAC;gBACtE,MAAM,GAAG,GAAG,IAAA,sBAAY,EAAC,SAAS,KAAK,OAAO,CAAC,CAAC;gBAChD,IAAI,GAAG,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;oBAC9B,OAAO,EAAE,GAAG,EAAE,QAAQ,CAAC,KAAK,EAAE,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC;gBAC7C,CAAC;YACL,CAAC;QACL,CAAC;QAAC,MAAM,CAAC;YACL,8CAA8C;QAClD,CAAC;IACL,CAAC;IACD,OAAO,IAAI,CAAC;AAChB,CAAC;AAED,SAAS,WAAW,CAAC,GAAuB,EAAE,MAAsB;IAChE,IAAI,CAAC,GAAG,EAAE,CAAC;QACP,OAAO;IACX,CAAC;IACD,IAAI,CAAC;QACD,OAAO,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IAC/B,CAAC;IAAC,MAAM,CAAC;QACL,eAAe;IACnB,CAAC;AACL,CAAC;AAWD;;;;;GAKG;AACH,SAAgB,UAAU,CAAC,MAAc,EAAE,IAAkB;IACzD,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;IAC5B,IAAI,CAAC,MAAM,EAAE,CAAC;QACV,MAAM,CAAC,GAAG,CAAC,IAAA,uBAAc,EAAC,gBAAO,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,iCAAiC,CAAC,CAAC,CAAC,CAAC;QACzF,OAAO;IACX,CAAC;IACD,MAAM,KAAK,GAAG,UAAU,EAAE,CAAC;IAC3B,MAAM,IAAI,GAAG,CAAC,GAAG,EAAE;QACf,IAAI,CAAC;YACD,OAAO,iBAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC;QACjC,CAAC;QAAC,MAAM,CAAC;YACL,OAAO,IAAI,CAAC,GAAG,CAAC;QACpB,CAAC;IACL,CAAC,CAAC,EAAE,CAAC;IACL,sEAAsE;IACtE,MAAM,GAAG,GAAsB;QAC3B,IAAI,EAAE,IAAI;QACV,IAAI,EAAE,WAAW,EAAE;QACnB,OAAO,EAAE,WAAW,EAAE;QACtB,KAAK,EAAE,KAAK;QACZ,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,8BAA8B;QACxD,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,SAAS;QACnC,IAAI,EAAE,gBAAgB;QACtB,SAAS,EAAE,WAAW;KACzB,CAAC;IACF,gFAAgF;IAChF,MAAM,KAAK,GAAiB,IAAA,0BAAK,EAAC,MAAM,EAAE,CAAC,OAAO,EAAE,QAAQ,KAAK,KAAK,EAAE,WAAW,CAAC,EAAE;QAClF,GAAG,EAAE,IAAA,oBAAU,EAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI;QAC3C,GAAG;QACH,QAAQ,EAAE,IAAI;QACd,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC;KAClC,CAAC,CAAC;IACH,IAAI,QAAQ,GAAwC,IAAI,CAAC;IACzD,IAAI,IAAI,GAA0C,IAAI,CAAC;IACvD,IAAI,KAAK,GAAG,KAAK,CAAC;IAClB,IAAI,SAAS,GAA0B,IAAI,CAAC;IAE5C,MAAM,SAAS,GAAG,GAAS,EAAE;QACzB,IAAI,QAAQ,IAAI,IAAI,EAAE,CAAC;YACnB,wCAAwC;YACxC,IAAA,6BAAQ,EAAC,QAAQ,EAAE,EAAE,CAAC,IAAI,EAAE,QAAQ,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE;gBACnG,IAAI,GAAG,EAAE,CAAC;oBACN,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,kBAAkB,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;gBACpD,CAAC;YACL,CAAC,CAAC,CAAC;QACP,CAAC;IACL,CAAC,CAAC;IACF,yDAAyD;IACzD,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,MAAM,MAAM,GAAG,WAAW,CAAC,GAAG,EAAE;QAC5B,IAAI,KAAK,IAAI,QAAQ,IAAI,EAAE,KAAK,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC;YAClD,aAAa,CAAC,MAAM,CAAC,CAAC;YACtB,OAAO;QACX,CAAC;QACD,QAAQ,GAAG,YAAY,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACnC,IAAI,QAAQ,EAAE,CAAC;YACX,aAAa,CAAC,MAAM,CAAC,CAAC;YACtB,SAAS,EAAE,CAAC;QAChB,CAAC;IACL,CAAC,EAAE,EAAE,CAAC,CAAC;IAEP,MAAM,IAAI,GAAG,GAAS,EAAE;QACpB,wGAAwG;QACxG,KAAK,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC;QACvB,KAAK,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC;QACvB,IAAI,SAAS,IAAI,KAAK,EAAE,CAAC;YACrB,OAAO;QACX,CAAC;QACD,iGAAiG;QACjG,WAAW,CAAC,QAAQ,EAAE,GAAG,EAAE,QAAQ,CAAC,CAAC;QACrC,WAAW,CAAC,KAAK,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;QACjC,SAAS,GAAG,UAAU,CAAC,GAAG,EAAE;YACxB,WAAW,CAAC,QAAQ,EAAE,GAAG,EAAE,SAAS,CAAC,CAAC;YACtC,WAAW,CAAC,KAAK,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;QACtC,CAAC,EAAE,IAAI,CAAC,CAAC;IACb,CAAC,CAAC;IAEF,MAAM,OAAO,GAAG,CAAC,KAAa,EAAQ,EAAE;QACpC,IAAI,MAAM,CAAC,SAAS,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC;YACvC,6EAA6E;YAC7E,OAAO;QACX,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAA,uBAAc,EAAC,gBAAO,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,EAAE,CAAC;YACrD,2CAA2C;YAC3C,KAAK,CAAC,MAAM,EAAE,KAAK,EAAE,CAAC;YACtB,KAAK,CAAC,MAAM,EAAE,KAAK,EAAE,CAAC;YACtB,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE;gBACtB,KAAK,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC;gBACvB,KAAK,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC;YAC3B,CAAC,CAAC,CAAC;QACP,CAAC;IACL,CAAC,CAAC;IACF,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAClC,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAClC,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;IAEnC,MAAM,MAAM,GAAG,IAAI,sBAAa,CAAC,CAAC,IAAI,EAAE,OAAO,EAAE,EAAE;QAC/C,IAAI,IAAI,KAAK,gBAAO,CAAC,IAAI,EAAE,CAAC;YACxB,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;QAChC,CAAC;aAAM,IAAI,IAAI,KAAK,gBAAO,CAAC,MAAM,IAAI,OAAO,CAAC,MAAM,IAAI,CAAC,EAAE,CAAC;YACxD,MAAM,KAAK,GAAG,CAAC,CAAS,EAAU,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;YACpE,IAAI,GAAG,EAAE,IAAI,EAAE,KAAK,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YACtF,SAAS,EAAE,CAAC;QAChB,CAAC;IACL,CAAC,CAAC,CAAC;IACH,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;QAChC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YACtB,MAAM,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC,CAAC;QACzD,CAAC;IACL,CAAC,CAAC,CAAC;IACH,MAAM,CAAC,EAAE,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IACvB,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IACzB,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IAEzB,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,CAAC,EAAE;QACpB,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,YAAY,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;QACzC,IAAI,EAAE,CAAC;IACX,CAAC,CAAC,CAAC;IACH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE;QAC/B,KAAK,GAAG,IAAI,CAAC;QACb,aAAa,CAAC,MAAM,CAAC,CAAC;QACtB,IAAI,SAAS,EAAE,CAAC;YACZ,YAAY,CAAC,SAAS,CAAC,CAAC;QAC5B,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;QACpD,IAAI,CAAC,MAAM,CAAC,SAAS,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;YACvC,MAAM,CAAC,GAAG,CAAC,IAAA,uBAAc,EAAC,gBAAO,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QAClE,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,cAAc,IAAI,CAAC,EAAE,WAAW,MAAM,GAAG,CAAC,CAAC;QACzD,IAAI,CAAC,KAAK,EAAE,CAAC,MAAM,CAAC,CAAC;IACzB,CAAC,CAAC,CAAC;IACH,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,kBAAkB,KAAK,OAAO,WAAW,EAAE,gBAAgB,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC;AACxF,CAAC"}

package/build/lib/enrollment.js

@@ -0,0 +1,37 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.enroll = enroll;
+async function enroll(url, req) {
+    let res;
+    try {
+        res = await fetch(`${url.replace(/\/+$/, '')}/api/enroll`, {
+            method: 'POST',
+            headers: { 'Content-Type': 'application/json' },
+            body: JSON.stringify(req),
+            signal: AbortSignal.timeout(30_000),
+        });
+    }
+    catch (e) {
+        return { kind: 'retry', reason: e.cause?.message || e.message };
+    }
+    let body = null;
+    try {
+        body = await res.json();
+    }
+    catch {
+        // ignore, handled by status
+    }
+    if (res.ok) {
+        const creds = body;
+        if (!creds?.deviceId || !creds.cert || !creds.key || !creds.ca || !creds.mqttUrl) {
+            return { kind: 'retry', reason: 'Unvollständige Antwort des Servers' };
+        }
+        return { kind: 'ok', creds };
+    }
+    const reason = body?.reason || `HTTP ${res.status}`;
+    if (res.status === 403 || res.status === 400) {
+        return { kind: 'rejected', reason };
+    }
+    return { kind: 'retry', reason };
+}
+//# sourceMappingURL=enrollment.js.map

package/build/lib/enrollment.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"enrollment.js","sourceRoot":"","sources":["../../src/lib/enrollment.ts"],"names":[],"mappings":";;AAYA,wBA8BC;AA9BM,KAAK,UAAU,MAAM,CAAC,GAAW,EAAE,GAAkB;IACxD,IAAI,GAAa,CAAC;IAClB,IAAI,CAAC;QACD,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,aAAa,EAAE;YACvD,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;YAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC;YACzB,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC;SACtC,CAAC,CAAC;IACP,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACT,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC,KAAK,EAAE,OAAO,IAAI,CAAC,CAAC,OAAO,EAAE,CAAC;IACpE,CAAC;IACD,IAAI,IAAI,GAAY,IAAI,CAAC;IACzB,IAAI,CAAC;QACD,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;IAC5B,CAAC;IAAC,MAAM,CAAC;QACL,4BAA4B;IAChC,CAAC;IACD,IAAI,GAAG,CAAC,EAAE,EAAE,CAAC;QACT,MAAM,KAAK,GAAG,IAAsB,CAAC;QACrC,IAAI,CAAC,KAAK,EAAE,QAAQ,IAAI,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;YAC/E,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,oCAAoC,EAAE,CAAC;QAC3E,CAAC;QACD,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;IACjC,CAAC;IACD,MAAM,MAAM,GAAI,IAA2B,EAAE,MAAM,IAAI,QAAQ,GAAG,CAAC,MAAM,EAAE,CAAC;IAC5E,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QAC3C,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,CAAC;IACxC,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC;AACrC,CAAC"}

package/build/lib/inventory.js

@@ -0,0 +1,136 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.sdWrites = sdWrites;
+exports.diskInfo = diskInfo;
+exports.cpuTemperature = cpuTemperature;
+exports.collectInventory = collectInventory;
+exports.installedVersions = installedVersions;
+const node_child_process_1 = require("node:child_process");
+const promises_1 = require("node:fs/promises");
+const node_os_1 = __importDefault(require("node:os"));
+/**
+ * Collects the inventory of this ioBroker system. Versions and system data only;
+ * no measured values of the end customer (data minimization).
+ */
+async function readText(path) {
+    try {
+        return (await (0, promises_1.readFile)(path, 'utf8')).trim();
+    }
+    catch {
+        return null;
+    }
+}
+async function osName() {
+    const release = await readText('/etc/os-release');
+    const m = release && /^PRETTY_NAME="?([^"\n]+)"?/m.exec(release);
+    return m ? m[1] : `${node_os_1.default.type()} ${node_os_1.default.version?.() || node_os_1.default.release()}`;
+}
+let npmVersion = null;
+async function npmVer() {
+    if (npmVersion === null) {
+        npmVersion = await new Promise(resolve => {
+            (0, node_child_process_1.execFile)(node_os_1.default.platform() === 'win32' ? 'npm.cmd' : 'npm', ['-v'], { timeout: 20_000, shell: node_os_1.default.platform() === 'win32' }, (err, stdout) => resolve(err ? '' : stdout.trim()));
+        });
+    }
+    return npmVersion || '';
+}
+/** Sectors written to the SD card since boot (field 7 of /sys/block/mmcblk0/stat) */
+async function sdWrites() {
+    const stat = await readText('/sys/block/mmcblk0/stat');
+    if (!stat) {
+        return null;
+    }
+    const fields = stat.split(/\s+/);
+    return fields.length > 6 ? parseInt(fields[6], 10) : null;
+}
+async function diskInfo(path) {
+    try {
+        const s = await (0, promises_1.statfs)(path);
+        return { total: s.blocks * s.bsize, free: s.bavail * s.bsize };
+    }
+    catch {
+        return null;
+    }
+}
+async function cpuTemperature() {
+    const t = await readText('/sys/class/thermal/thermal_zone0/temp');
+    return t ? Math.round(parseInt(t, 10) / 100) / 10 : null;
+}
+/** backitup targets that store the backup outside the device */
+const OFF_DEVICE_KEYS = [
+    'cifsEnabled',
+    'ftpEnabled',
+    'dropboxEnabled',
+    'googledriveEnabled',
+    'onedriveEnabled',
+    'webdavEnabled',
+    'sftpEnabled',
+];
+async function collectInventory(adapter, opts) {
+    const adapterRows = await adapter.getObjectViewAsync('system', 'adapter', {
+        startkey: 'system.adapter.',
+        endkey: 'system.adapter.香',
+    });
+    const adapters = {};
+    for (const row of adapterRows.rows) {
+        const common = row.value?.common;
+        if (common?.name && common.version) {
+            adapters[common.name] = {
+                version: common.version,
+                ...(common.installedFrom ? { installedFrom: common.installedFrom } : {}),
+            };
+        }
+    }
+    const instanceRows = await adapter.getObjectViewAsync('system', 'instance', {
+        startkey: 'system.adapter.',
+        endkey: 'system.adapter.香',
+    });
+    const instances = {};
+    let offDevice = false;
+    for (const row of instanceRows.rows) {
+        const obj = row.value;
+        if (!obj || obj.common.host !== adapter.host) {
+            continue;
+        }
+        const id = obj._id.replace(/^system\.adapter\./, '');
+        const alive = await adapter.getForeignStateAsync(`${obj._id}.alive`);
+        instances[id] = { enabled: !!obj.common.enabled, alive: !!alive?.val, mode: obj.common.mode };
+        if (obj.common.name === 'backitup' && obj.common.enabled) {
+            const native = obj.native;
+            offDevice ||= OFF_DEVICE_KEYS.some(k => native[k] === true);
+        }
+    }
+    const hostObj = await adapter.getForeignObjectAsync(`system.host.${adapter.host}`);
+    const disk = await diskInfo(opts.dataDir);
+    const model = (await readText('/proc/device-tree/model'))?.replace(/\0/g, '') || node_os_1.default.cpus()[0]?.model || '';
+    return {
+        agentVersion: opts.agentVersion,
+        uuid: '',
+        hostname: adapter.host || node_os_1.default.hostname(),
+        software: {
+            jsController: hostObj?.common?.installedVersion || '',
+            node: process.version,
+            npm: await npmVer(),
+            adapters,
+            instances,
+        },
+        system: {
+            platform: node_os_1.default.platform(),
+            arch: node_os_1.default.arch(),
+            os: await osName(),
+            kernel: node_os_1.default.release(),
+            model,
+            memTotal: node_os_1.default.totalmem(),
+            diskTotal: disk?.total ?? 0,
+        },
+        backup: { lastLocal: opts.lastBackup ?? null, offDevice },
+    };
+}
+/** Installed adapter versions (name -> version) */
+function installedVersions(inv) {
+    return Object.fromEntries(Object.entries(inv.software.adapters).map(([n, a]) => [n, a.version]));
+}
+//# sourceMappingURL=inventory.js.map

package/build/lib/inventory.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"inventory.js","sourceRoot":"","sources":["../../src/lib/inventory.ts"],"names":[],"mappings":";;;;;AAwCA,4BAOC;AAED,4BAOC;AAED,wCAGC;AAaD,4CAiEC;AAGD,8CAEC;AAhJD,2DAA8C;AAC9C,+CAAoD;AACpD,sDAAyB;AAGzB;;;GAGG;AAEH,KAAK,UAAU,QAAQ,CAAC,IAAY;IAChC,IAAI,CAAC;QACD,OAAO,CAAC,MAAM,IAAA,mBAAQ,EAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IACjD,CAAC;IAAC,MAAM,CAAC;QACL,OAAO,IAAI,CAAC;IAChB,CAAC;AACL,CAAC;AAED,KAAK,UAAU,MAAM;IACjB,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,iBAAiB,CAAC,CAAC;IAClD,MAAM,CAAC,GAAG,OAAO,IAAI,6BAA6B,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACjE,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,iBAAE,CAAC,IAAI,EAAE,IAAI,iBAAE,CAAC,OAAO,EAAE,EAAE,IAAI,iBAAE,CAAC,OAAO,EAAE,EAAE,CAAC;AACvE,CAAC;AAED,IAAI,UAAU,GAAkB,IAAI,CAAC;AACrC,KAAK,UAAU,MAAM;IACjB,IAAI,UAAU,KAAK,IAAI,EAAE,CAAC;QACtB,UAAU,GAAG,MAAM,IAAI,OAAO,CAAC,OAAO,CAAC,EAAE;YACrC,IAAA,6BAAQ,EACJ,iBAAE,CAAC,QAAQ,EAAE,KAAK,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,EAC7C,CAAC,IAAI,CAAC,EACN,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,iBAAE,CAAC,QAAQ,EAAE,KAAK,OAAO,EAAE,EACrD,CAAC,GAAG,EAAE,MAAM,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CACrD,CAAC;QACN,CAAC,CAAC,CAAC;IACP,CAAC;IACD,OAAO,UAAU,IAAI,EAAE,CAAC;AAC5B,CAAC;AAED,qFAAqF;AAC9E,KAAK,UAAU,QAAQ;IAC1B,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,yBAAyB,CAAC,CAAC;IACvD,IAAI,CAAC,IAAI,EAAE,CAAC;QACR,OAAO,IAAI,CAAC;IAChB,CAAC;IACD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACjC,OAAO,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AAC9D,CAAC;AAEM,KAAK,UAAU,QAAQ,CAAC,IAAY;IACvC,IAAI,CAAC;QACD,MAAM,CAAC,GAAG,MAAM,IAAA,iBAAM,EAAC,IAAI,CAAC,CAAC;QAC7B,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,KAAK,EAAE,CAAC;IACnE,CAAC;IAAC,MAAM,CAAC;QACL,OAAO,IAAI,CAAC;IAChB,CAAC;AACL,CAAC;AAEM,KAAK,UAAU,cAAc;IAChC,MAAM,CAAC,GAAG,MAAM,QAAQ,CAAC,uCAAuC,CAAC,CAAC;IAClE,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AAC7D,CAAC;AAED,gEAAgE;AAChE,MAAM,eAAe,GAAG;IACpB,aAAa;IACb,YAAY;IACZ,gBAAgB;IAChB,oBAAoB;IACpB,iBAAiB;IACjB,eAAe;IACf,aAAa;CAChB,CAAC;AAEK,KAAK,UAAU,gBAAgB,CAClC,OAAyB,EACzB,IAA6F;IAE7F,MAAM,WAAW,GAAG,MAAM,OAAO,CAAC,kBAAkB,CAAC,QAAQ,EAAE,SAAS,EAAE;QACtE,QAAQ,EAAE,iBAAiB;QAC3B,MAAM,EAAE,kBAAkB;KAC7B,CAAC,CAAC;IACH,MAAM,QAAQ,GAAqC,EAAE,CAAC;IACtD,KAAK,MAAM,GAAG,IAAI,WAAW,CAAC,IAAI,EAAE,CAAC;QACjC,MAAM,MAAM,GAAG,GAAG,CAAC,KAAK,EAAE,MAAM,CAAC;QACjC,IAAI,MAAM,EAAE,IAAI,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;YACjC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG;gBACpB,OAAO,EAAE,MAAM,CAAC,OAAO;gBACvB,GAAG,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,MAAM,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAC3E,CAAC;QACN,CAAC;IACL,CAAC;IAED,MAAM,YAAY,GAAG,MAAM,OAAO,CAAC,kBAAkB,CAAC,QAAQ,EAAE,UAAU,EAAE;QACxE,QAAQ,EAAE,iBAAiB;QAC3B,MAAM,EAAE,kBAAkB;KAC7B,CAAC,CAAC;IACH,MAAM,SAAS,GAAsC,EAAE,CAAC;IACxD,IAAI,SAAS,GAAG,KAAK,CAAC;IACtB,KAAK,MAAM,GAAG,IAAI,YAAY,CAAC,IAAI,EAAE,CAAC;QAClC,MAAM,GAAG,GAAG,GAAG,CAAC,KAA4C,CAAC;QAC7D,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,KAAK,OAAO,CAAC,IAAI,EAAE,CAAC;YAC3C,SAAS;QACb,CAAC;QACD,MAAM,EAAE,GAAG,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,oBAAoB,EAAE,EAAE,CAAC,CAAC;QACrD,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,oBAAoB,CAAC,GAAG,GAAG,CAAC,GAAG,QAAQ,CAAC,CAAC;QACrE,SAAS,CAAC,EAAE,CAAC,GAAG,EAAE,OAAO,EAAE,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;QAC9F,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,KAAK,UAAU,IAAI,GAAG,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACvD,MAAM,MAAM,GAAG,GAAG,CAAC,MAAiC,CAAC;YACrD,SAAS,KAAK,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC;QAChE,CAAC;IACL,CAAC;IAED,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,qBAAqB,CAAC,eAAe,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;IACnF,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC1C,MAAM,KAAK,GAAG,CAAC,MAAM,QAAQ,CAAC,yBAAyB,CAAC,CAAC,EAAE,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,iBAAE,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,IAAI,EAAE,CAAC;IAE3G,OAAO;QACH,YAAY,EAAE,IAAI,CAAC,YAAY;QAC/B,IAAI,EAAE,EAAE;QACR,QAAQ,EAAE,OAAO,CAAC,IAAI,IAAI,iBAAE,CAAC,QAAQ,EAAE;QACvC,QAAQ,EAAE;YACN,YAAY,EAAE,OAAO,EAAE,MAAM,EAAE,gBAAgB,IAAI,EAAE;YACrD,IAAI,EAAE,OAAO,CAAC,OAAO;YACrB,GAAG,EAAE,MAAM,MAAM,EAAE;YACnB,QAAQ;YACR,SAAS;SACZ;QACD,MAAM,EAAE;YACJ,QAAQ,EAAE,iBAAE,CAAC,QAAQ,EAAE;YACvB,IAAI,EAAE,iBAAE,CAAC,IAAI,EAAE;YACf,EAAE,EAAE,MAAM,MAAM,EAAE;YAClB,MAAM,EAAE,iBAAE,CAAC,OAAO,EAAE;YACpB,KAAK;YACL,QAAQ,EAAE,iBAAE,CAAC,QAAQ,EAAE;YACvB,SAAS,EAAE,IAAI,EAAE,KAAK,IAAI,CAAC;SAC9B;QACD,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,CAAC,UAAU,IAAI,IAAI,EAAE,SAAS,EAAE;KAC5D,CAAC;AACN,CAAC;AAED,mDAAmD;AACnD,SAAgB,iBAAiB,CAAC,GAAc;IAC5C,OAAO,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;AACrG,CAAC"}

package/build/lib/jobs.js

@@ -0,0 +1,251 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.JobManager = void 0;
+const node_child_process_1 = require("node:child_process");
+const node_fs_1 = require("node:fs");
+const promises_1 = require("node:fs/promises");
+const node_path_1 = require("node:path");
+const planner_1 = require("./planner");
+const util_1 = require("./util");
+function pidAlive(pid) {
+    if (!pid) {
+        return false;
+    }
+    try {
+        process.kill(pid, 0);
+        return true;
+    }
+    catch (e) {
+        return e.code === 'EPERM';
+    }
+}
+class JobManager {
+    deps;
+    job = null;
+    jobFile;
+    runnerFile;
+    haltFile;
+    busy = false;
+    constructor(deps) {
+        this.deps = deps;
+        this.jobFile = (0, node_path_1.join)(deps.dataDir, 'job.json');
+        this.runnerFile = (0, node_path_1.join)(deps.dataDir, 'runner.json');
+        this.haltFile = (0, node_path_1.join)(deps.dataDir, 'halt');
+    }
+    async load() {
+        this.job = await (0, util_1.readJson)(this.jobFile);
+        if (this.job?.phase === 'finished') {
+            this.job = null;
+        }
+    }
+    isActive() {
+        return !!this.job && this.job.phase !== 'finished';
+    }
+    async save() {
+        if (this.job) {
+            await (0, util_1.writeJsonAtomic)(this.jobFile, this.job);
+        }
+    }
+    async setState(state, detail) {
+        if (!this.job) {
+            return;
+        }
+        const changed = this.job.state !== state || this.job.detail !== detail;
+        this.job.state = state;
+        this.job.detail = detail;
+        await this.save();
+        if (changed) {
+            await this.deps.report(this.job);
+        }
+    }
+    async setHalt(halt) {
+        if (halt) {
+            await (0, util_1.writeJsonAtomic)(this.haltFile, { ts: Date.now() });
+        }
+        else {
+            await (0, promises_1.rm)(this.haltFile, { force: true });
+        }
+    }
+    async spawnRunner(mode, steps, files) {
+        const file = {
+            mode,
+            steps,
+            ...(files && Object.keys(files).length ? { files } : {}),
+            iobroker: this.deps.iobrokerJs,
+            cwd: this.deps.cwd,
+            haltFile: this.haltFile,
+            logFile: (0, node_path_1.join)(this.deps.dataDir, 'runner.log'),
+            phase: 'start',
+        };
+        await (0, util_1.writeJsonAtomic)(this.runnerFile, file);
+        const child = (0, node_child_process_1.spawn)(process.execPath, [(0, node_path_1.join)(__dirname, '..', 'runner.js'), this.runnerFile], {
+            detached: true,
+            stdio: 'ignore',
+            cwd: this.deps.cwd,
+            windowsHide: true,
+        });
+        child.unref();
+        this.deps.log.info(`Runner started (${mode}, ${steps.length} steps, pid ${child.pid})`);
+    }
+    /**
+     * Starts a job
+     *
+     * @param desired desired state
+     * @param steps plan
+     * @param withBackup backup first
+     * @param files local packages per adapter instead of npm (the rollback takes npm)
+     */
+    async start(desired, steps, withBackup, files = {}) {
+        const profile = desired.profile;
+        const all = withBackup ? [{ action: 'backup', status: 'pending' }, ...steps] : steps;
+        this.job = {
+            key: `${profile.hash}:${desired.retry}`,
+            profileId: profile.id,
+            profileName: profile.name,
+            profileHash: profile.hash,
+            retry: desired.retry,
+            targets: Object.fromEntries(steps.map(s => [s.adapter, s.to ?? null])),
+            state: 'preflight',
+            detail: '',
+            steps: all,
+            phase: 'apply',
+            createdAt: Date.now(),
+        };
+        await this.save();
+        await this.spawnRunner('apply', all, files);
+        await this.setState(withBackup ? 'backup' : 'rollout', withBackup ? 'Sicherung wird erstellt' : 'Ausrollen');
+    }
+    /** Called periodically while a job is active */
+    async poll() {
+        if (!this.job || this.busy) {
+            return;
+        }
+        this.busy = true;
+        try {
+            if (this.job.phase === 'apply' || this.job.phase === 'rollback') {
+                await this.pollRunner();
+            }
+            else if (this.job.phase === 'verify') {
+                await this.verify();
+            }
+        }
+        catch (e) {
+            this.deps.log.error(`Job: ${e.stack || e.message}`);
+        }
+        finally {
+            this.busy = false;
+        }
+    }
+    async pollRunner() {
+        const job = this.job;
+        const runner = await (0, util_1.readJson)(this.runnerFile);
+        if (!runner) {
+            return;
+        }
+        const finished = runner.phase === 'done' || runner.phase === 'failed' || runner.phase === 'halted';
+        if (!finished && runner.phase === 'running' && !pidAlive(runner.pid)) {
+            // runner died (power loss, reboot)
+            runner.phase = 'failed';
+            runner.error = 'Ausführung wurde unterbrochen (Neustart oder Stromausfall)';
+        }
+        else if (!finished) {
+            if (job.phase === 'apply') {
+                job.steps = runner.steps;
+                const current = runner.steps.find(s => s.status === 'running');
+                if (current?.action === 'backup') {
+                    await this.setState('backup', 'Sicherung wird erstellt');
+                }
+                else if (current) {
+                    await this.setState('rollout', `${current.action} ${current.adapter} ${current.to ?? ''}`.trim());
+                }
+            }
+            return;
+        }
+        if (job.phase === 'apply') {
+            job.steps = runner.steps;
+            if (runner.phase === 'done') {
+                job.phase = 'verify';
+                job.verifyStartedAt = Date.now();
+                await this.setState('verify', 'Instanzen und Log werden geprüft');
+            }
+            else {
+                await this.startRollback(runner.phase === 'halted' ? 'Not-Aus während des Rollouts' : runner.error || 'Fehler', runner.phase === 'halted');
+            }
+            return;
+        }
+        // rollback finished
+        const ok = runner.phase === 'done';
+        const detail = `${job.failure}; ${ok ? 'vorheriger Stand wiederhergestellt' : `Rollback unvollständig (${runner.error}), Sicherung vorhanden`}`;
+        for (const s of runner.steps) {
+            const original = job.steps.find(o => o.adapter === s.adapter && o.status === 'ok');
+            if (original) {
+                original.status = s.status === 'ok' ? 'skipped' : 'error';
+                original.detail = s.status === 'ok' ? 'zurückgerollt' : `Rollback: ${s.detail || 'fehlgeschlagen'}`;
+            }
+        }
+        await this.finish(job.halted && ok ? 'waiting' : 'blocked', detail);
+    }
+    async startRollback(reason, halted = false) {
+        const job = this.job;
+        job.failure = reason;
+        job.halted = halted;
+        const steps = (0, planner_1.rollbackPlan)(job.steps);
+        if (!steps.length) {
+            await this.finish(halted ? 'waiting' : 'blocked', `${reason}; keine Änderung erfolgt`);
+            return;
+        }
+        job.phase = 'rollback';
+        await this.save();
+        await this.spawnRunner('rollback', steps);
+        await this.setState('rollback', reason);
+    }
+    async verify() {
+        const job = this.job;
+        const elapsed = (Date.now() - (job.verifyStartedAt ?? Date.now())) / 1000;
+        const installed = await this.deps.installed();
+        for (const [name, version] of Object.entries(job.targets)) {
+            if ((installed[name] ?? null) !== version) {
+                await this.startRollback(`${name}: installiert ${installed[name] ?? 'nichts'}, erwartet ${version ?? 'entfernt'}`);
+                return;
+            }
+        }
+        const changed = Object.entries(job.targets)
+            .filter(([, v]) => v)
+            .map(([n]) => n);
+        const errors = this.deps.errorsSince(job.verifyStartedAt, changed);
+        if (errors.length) {
+            await this.startRollback(`Fehler im Log von ${errors[0].from}: ${errors[0].message.slice(0, 200)}`);
+            return;
+        }
+        const down = [];
+        for (const name of changed) {
+            for (const inst of await this.deps.instancesOf(name)) {
+                if (!inst.alive) {
+                    down.push(inst.id);
+                }
+            }
+        }
+        if (down.length) {
+            if (elapsed > this.deps.startTimeoutSeconds) {
+                await this.startRollback(`Instanz ${down.join(', ')} startet nach dem Update nicht`);
+            }
+            return;
+        }
+        if (elapsed >= this.deps.verifySeconds) {
+            const n = job.steps.filter(s => s.action !== 'backup').length;
+            await this.finish('done', `${n} Schritte erfolgreich, Instanzen laufen, keine neuen Fehler im Log`);
+        }
+    }
+    async finish(result, detail) {
+        const job = this.job;
+        job.phase = 'finished';
+        await this.setState(result === 'waiting' ? 'waiting' : result, detail);
+        await this.deps.onFinished(job, result);
+        this.job = null;
+        if ((0, node_fs_1.existsSync)(this.runnerFile)) {
+            await (0, promises_1.rm)(this.runnerFile, { force: true });
+        }
+    }
+}
+exports.JobManager = JobManager;
+//# sourceMappingURL=jobs.js.map