vpsgui 1.2.0

package/dist/client.d.ts

@@ -0,0 +1,199 @@
+import type { VpsguiClientConfig, NodeSpec, ContainerItem, DockerImageItem, TelemetryPoint, ProcessItem, HealthCheck, FileItem, FileReadResult, FirewallRule, FirewallRuleInput, SecretItem, AuditLogEvent, CatalogItem, AutomationWorkflow, QueueJob, StoragePartition, NetworkInterfaceInfo, IpInfoResult, BackupItem, DatabaseInstance, Deployment, ProxyRule, SystemUser, TopologyLayer, PackagesResult, AgentInfo, CommandResult, MutationResult } from './types';
+/** Error carrying the HTTP status returned by the agent. */
+export declare class VpsguiError extends Error {
+    readonly status: number;
+    readonly endpoint: string;
+    constructor(message: string, status: number, endpoint: string);
+    /** The agent token is missing, wrong, or temporarily locked out after repeated failures. */
+    get isAuthError(): boolean;
+}
+/**
+ * Official VPSGUI Node.js/TypeScript SDK.
+ *
+ * Every endpoint except `health()` requires the agent token, which grants root-equivalent control
+ * of the host - treat it as a root password and never commit it.
+ *
+ * @example
+ * ```ts
+ * import { VpsguiClient } from 'vpsgui';
+ *
+ * const client = new VpsguiClient({
+ *   baseUrl: 'https://vps.example.com/api/v1',
+ *   token: process.env.VPSGUI_AGENT_TOKEN,
+ * });
+ *
+ * const telemetry = await client.system.telemetry();
+ * const containers = await client.docker.listContainers();
+ * ```
+ */
+export declare class VpsguiClient {
+    private readonly baseUrl;
+    private readonly token?;
+    private readonly timeout;
+    readonly nodes: NodesResource;
+    readonly system: SystemResource;
+    readonly docker: DockerResource;
+    readonly files: FilesResource;
+    readonly security: SecurityResource;
+    readonly network: NetworkResource;
+    readonly storage: StorageResource;
+    readonly backups: BackupsResource;
+    readonly deployments: DeploymentsResource;
+    readonly catalog: CatalogResource;
+    readonly automation: AutomationResource;
+    readonly queue: QueueResource;
+    readonly databases: DatabasesResource;
+    readonly proxy: ProxyResource;
+    readonly terminal: TerminalResource;
+    constructor(config: VpsguiClientConfig);
+    /** @internal */
+    request<T>(method: 'GET' | 'POST', endpoint: string, body?: unknown, timeoutMs?: number): Promise<T>;
+    /** Liveness probe. The only endpoint that does not require a token. */
+    health(): Promise<{
+        status: string;
+    }>;
+    /** Agent version, configured file roots, and whether optional integrations are set up. */
+    info(): Promise<AgentInfo>;
+}
+/** @internal */
+declare abstract class Resource {
+    protected readonly client: VpsguiClient;
+    constructor(client: VpsguiClient);
+}
+declare class NodesResource extends Resource {
+    /** The host this agent runs on. */
+    get(): Promise<NodeSpec>;
+    /** VPSGUI manages a single host, so this always returns exactly one entry. */
+    list(): Promise<NodeSpec[]>;
+    /** Derived topology: the host, its containers, and detected database engines. */
+    topology(): Promise<TopologyLayer[]>;
+    /** Computed health checks (memory, disk, load, failed units, Docker). */
+    health(): Promise<HealthCheck[]>;
+}
+declare class SystemResource extends Resource {
+    telemetry(): Promise<TelemetryPoint>;
+    processes(): Promise<ProcessItem[]>;
+    services(): Promise<Array<{
+        id: string;
+        name: string;
+        alias: string;
+        status: string;
+        enabled: boolean | null;
+    }>>;
+    /** `systemctl <action> <name>` on the host. */
+    serviceAction(name: string, action: 'start' | 'stop' | 'restart' | 'reload'): Promise<CommandResult>;
+    packages(): Promise<PackagesResult>;
+    /** `apt-get install -y <packageName>`. Can take minutes. */
+    installPackage(packageName: string): Promise<CommandResult>;
+    /** Host accounts from /etc/passwd. */
+    users(): Promise<SystemUser[]>;
+}
+declare class DockerResource extends Resource {
+    listContainers(): Promise<ContainerItem[]>;
+    listImages(): Promise<DockerImageItem[]>;
+    containerAction(id: string, action: 'start' | 'stop' | 'restart' | 'remove'): Promise<CommandResult>;
+    /** `docker rmi`. Without `force`, Docker refuses while a container still references the image. */
+    removeImage(id: string, force?: boolean): Promise<CommandResult>;
+}
+declare class FilesResource extends Resource {
+    /** Directory entries. Contents are NOT included - use `read` for that. */
+    list(path: string): Promise<FileItem[]>;
+    /** Full file contents. `truncated` is true when the file exceeded the agent's read cap. */
+    read(path: string): Promise<FileReadResult>;
+    write(path: string, content: string): Promise<MutationResult>;
+    mkdir(path: string): Promise<MutationResult>;
+    /** Without `recursive` the agent refuses to remove a non-empty directory. */
+    delete(path: string, recursive?: boolean): Promise<MutationResult>;
+    rename(from: string, to: string): Promise<MutationResult>;
+}
+declare class SecurityResource extends Resource {
+    firewallRules(): Promise<FirewallRule[]>;
+    /** Applies a real ufw rule change. */
+    applyFirewallRule(input: FirewallRuleInput): Promise<CommandResult>;
+    sshKeys(): Promise<Array<{
+        id: string;
+        user: string;
+        label: string;
+        algorithm: string;
+        fingerprint: string;
+        path: string;
+    }>>;
+    /** SSH and sudo events from the host journal. */
+    auditLogs(): Promise<AuditLogEvent[]>;
+    /** Secret metadata. Values are never included - use `revealSecret`. */
+    listSecrets(): Promise<SecretItem[]>;
+    /** Create or overwrite a secret. The agent encrypts the value before it touches disk. */
+    saveSecret(input: {
+        name: string;
+        value: string;
+        environment?: string;
+        type?: string;
+    }): Promise<MutationResult>;
+    deleteSecret(name: string): Promise<MutationResult>;
+    /** Decrypt one secret. Deliberately separate so values are never fetched in bulk. */
+    revealSecret(name: string): Promise<{
+        success: boolean;
+        name?: string;
+        value?: string;
+        error?: string;
+    }>;
+}
+declare class NetworkResource extends Resource {
+    interfaces(): Promise<NetworkInterfaceInfo[]>;
+    /** Geolocate an address. Omit `ip` to look up the host's own public address. */
+    ipInfo(ip?: string): Promise<IpInfoResult>;
+}
+declare class StorageResource extends Resource {
+    partitions(): Promise<StoragePartition[]>;
+}
+declare class BackupsResource extends Resource {
+    list(): Promise<BackupItem[]>;
+    /** Creates a tar.gz of `sourcePath`. Large trees can take minutes. */
+    create(sourcePath: string, label?: string): Promise<MutationResult & {
+        name?: string;
+        path?: string;
+    }>;
+    delete(name: string): Promise<MutationResult>;
+    /** Extracts an archive into `destination`. Existing files may be overwritten. */
+    restore(name: string, destination: string): Promise<MutationResult & {
+        restoredTo?: string;
+    }>;
+}
+declare class DeploymentsResource extends Resource {
+    /** Git checkouts found on the host. */
+    list(): Promise<Deployment[]>;
+    /** `git pull --ff-only`, accepted only for a path `list()` already reported. */
+    pull(path: string): Promise<CommandResult>;
+}
+declare class CatalogResource extends Resource {
+    list(): Promise<CatalogItem[]>;
+}
+declare class AutomationResource extends Resource {
+    /** cron entries from /etc/crontab, /etc/cron.d and root's crontab. */
+    workflows(): Promise<AutomationWorkflow[]>;
+}
+declare class QueueResource extends Resource {
+    /** systemd timers. */
+    jobs(): Promise<QueueJob[]>;
+}
+declare class DatabasesResource extends Resource {
+    /** Engines detected from listening TCP ports. */
+    list(): Promise<DatabaseInstance[]>;
+}
+declare class ProxyResource extends Resource {
+    /** Reverse-proxy rules parsed from the live nginx configuration. */
+    rules(): Promise<ProxyRule[]>;
+}
+declare class TerminalResource extends Resource {
+    /**
+     * Run a shell command on the host.
+     *
+     * This is arbitrary remote code execution by design, gated by the agent token. It can be disabled
+     * server-side with `AGENT_ENABLE_SHELL=0`, in which case this returns HTTP 403.
+     */
+    exec(command: string): Promise<CommandResult & {
+        command: string;
+    }>;
+}
+export {};
+//# sourceMappingURL=client.d.ts.map

package/dist/client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../src/client.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,kBAAkB,EAClB,QAAQ,EACR,aAAa,EACb,eAAe,EACf,cAAc,EACd,WAAW,EACX,WAAW,EACX,QAAQ,EACR,cAAc,EACd,YAAY,EACZ,iBAAiB,EACjB,UAAU,EACV,aAAa,EACb,WAAW,EACX,kBAAkB,EAClB,QAAQ,EACR,gBAAgB,EAChB,oBAAoB,EACpB,YAAY,EACZ,UAAU,EACV,gBAAgB,EAChB,UAAU,EACV,SAAS,EACT,UAAU,EACV,aAAa,EACb,cAAc,EACd,SAAS,EACT,aAAa,EACb,cAAc,EACf,MAAM,SAAS,CAAC;AAEjB,4DAA4D;AAC5D,qBAAa,WAAY,SAAQ,KAAK;IACpC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;gBAEd,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM;IAO7D,4FAA4F;IAC5F,IAAI,WAAW,IAAI,OAAO,CAEzB;CACF;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,qBAAa,YAAY;IACvB,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAS;IACjC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAS;IAChC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAS;IAEjC,QAAQ,CAAC,KAAK,EAAE,aAAa,CAAC;IAC9B,QAAQ,CAAC,MAAM,EAAE,cAAc,CAAC;IAChC,QAAQ,CAAC,MAAM,EAAE,cAAc,CAAC;IAChC,QAAQ,CAAC,KAAK,EAAE,aAAa,CAAC;IAC9B,QAAQ,CAAC,QAAQ,EAAE,gBAAgB,CAAC;IACpC,QAAQ,CAAC,OAAO,EAAE,eAAe,CAAC;IAClC,QAAQ,CAAC,OAAO,EAAE,eAAe,CAAC;IAClC,QAAQ,CAAC,OAAO,EAAE,eAAe,CAAC;IAClC,QAAQ,CAAC,WAAW,EAAE,mBAAmB,CAAC;IAC1C,QAAQ,CAAC,OAAO,EAAE,eAAe,CAAC;IAClC,QAAQ,CAAC,UAAU,EAAE,kBAAkB,CAAC;IACxC,QAAQ,CAAC,KAAK,EAAE,aAAa,CAAC;IAC9B,QAAQ,CAAC,SAAS,EAAE,iBAAiB,CAAC;IACtC,QAAQ,CAAC,KAAK,EAAE,aAAa,CAAC;IAC9B,QAAQ,CAAC,QAAQ,EAAE,gBAAgB,CAAC;gBAExB,MAAM,EAAE,kBAAkB;IAuBtC,gBAAgB;IACV,OAAO,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,GAAG,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,OAAO,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC;IAgD1G,uEAAuE;IACvE,MAAM,IAAI,OAAO,CAAC;QAAE,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC;IAIrC,0FAA0F;IAC1F,IAAI,IAAI,OAAO,CAAC,SAAS,CAAC;CAG3B;AAED,gBAAgB;AAChB,uBAAe,QAAQ;IACT,SAAS,CAAC,QAAQ,CAAC,MAAM,EAAE,YAAY;gBAApB,MAAM,EAAE,YAAY;CACpD;AAED,cAAM,aAAc,SAAQ,QAAQ;IAClC,mCAAmC;IACnC,GAAG,IAAI,OAAO,CAAC,QAAQ,CAAC;IAIxB,8EAA8E;IAC9E,IAAI,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;IAI3B,iFAAiF;IACjF,QAAQ,IAAI,OAAO,CAAC,aAAa,EAAE,CAAC;IAIpC,yEAAyE;IACzE,MAAM,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC;CAGjC;AAED,cAAM,cAAe,SAAQ,QAAQ;IACnC,SAAS,IAAI,OAAO,CAAC,cAAc,CAAC;IAIpC,SAAS,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC;IAInC,QAAQ,IAAI,OAAO,CAAC,KAAK,CAAC;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CAAA;KAAE,CAAC,CAAC;IAIhH,+CAA+C;IAC/C,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,GAAG,MAAM,GAAG,SAAS,GAAG,QAAQ,GAAG,OAAO,CAAC,aAAa,CAAC;IAIpG,QAAQ,IAAI,OAAO,CAAC,cAAc,CAAC;IAInC,4DAA4D;IAC5D,cAAc,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC;IAI3D,sCAAsC;IACtC,KAAK,IAAI,OAAO,CAAC,UAAU,EAAE,CAAC;CAG/B;AAED,cAAM,cAAe,SAAQ,QAAQ;IACnC,cAAc,IAAI,OAAO,CAAC,aAAa,EAAE,CAAC;IAI1C,UAAU,IAAI,OAAO,CAAC,eAAe,EAAE,CAAC;IAIxC,eAAe,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,GAAG,MAAM,GAAG,SAAS,GAAG,QAAQ,GAAG,OAAO,CAAC,aAAa,CAAC;IAIpG,kGAAkG;IAClG,WAAW,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,UAAQ,GAAG,OAAO,CAAC,aAAa,CAAC;CAG/D;AAED,cAAM,aAAc,SAAQ,QAAQ;IAClC,0EAA0E;IAC1E,IAAI,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,EAAE,CAAC;IAIvC,2FAA2F;IAC3F,IAAI,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,CAAC;IAI3C,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,CAAC;IAI7D,KAAK,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,CAAC;IAI5C,6EAA6E;IAC7E,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,UAAQ,GAAG,OAAO,CAAC,cAAc,CAAC;IAIhE,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,CAAC;CAG1D;AAED,cAAM,gBAAiB,SAAQ,QAAQ;IACrC,aAAa,IAAI,OAAO,CAAC,YAAY,EAAE,CAAC;IAIxC,sCAAsC;IACtC,iBAAiB,CAAC,KAAK,EAAE,iBAAiB,GAAG,OAAO,CAAC,aAAa,CAAC;IAInE,OAAO,IAAI,OAAO,CAAC,KAAK,CAAC;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAI5H,iDAAiD;IACjD,SAAS,IAAI,OAAO,CAAC,aAAa,EAAE,CAAC;IAIrC,uEAAuE;IACvE,WAAW,IAAI,OAAO,CAAC,UAAU,EAAE,CAAC;IAIpC,yFAAyF;IACzF,UAAU,CAAC,KAAK,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,WAAW,CAAC,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,cAAc,CAAC;IAIhH,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,CAAC;IAInD,qFAAqF;IACrF,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;CAGzG;AAED,cAAM,eAAgB,SAAQ,QAAQ;IACpC,UAAU,IAAI,OAAO,CAAC,oBAAoB,EAAE,CAAC;IAI7C,gFAAgF;IAChF,MAAM,CAAC,EAAE,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC;CAG3C;AAED,cAAM,eAAgB,SAAQ,QAAQ;IACpC,UAAU,IAAI,OAAO,CAAC,gBAAgB,EAAE,CAAC;CAG1C;AAED,cAAM,eAAgB,SAAQ,QAAQ;IACpC,IAAI,IAAI,OAAO,CAAC,UAAU,EAAE,CAAC;IAI7B,sEAAsE;IACtE,MAAM,CAAC,UAAU,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,GAAG;QAAE,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAItG,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,CAAC;IAI7C,iFAAiF;IACjF,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,GAAG;QAAE,UAAU,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;CAG9F;AAED,cAAM,mBAAoB,SAAQ,QAAQ;IACxC,uCAAuC;IACvC,IAAI,IAAI,OAAO,CAAC,UAAU,EAAE,CAAC;IAI7B,gFAAgF;IAChF,IAAI,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC;CAG3C;AAED,cAAM,eAAgB,SAAQ,QAAQ;IACpC,IAAI,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC;CAG/B;AAED,cAAM,kBAAmB,SAAQ,QAAQ;IACvC,sEAAsE;IACtE,SAAS,IAAI,OAAO,CAAC,kBAAkB,EAAE,CAAC;CAG3C;AAED,cAAM,aAAc,SAAQ,QAAQ;IAClC,sBAAsB;IACtB,IAAI,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;CAG5B;AAED,cAAM,iBAAkB,SAAQ,QAAQ;IACtC,iDAAiD;IACjD,IAAI,IAAI,OAAO,CAAC,gBAAgB,EAAE,CAAC;CAGpC;AAED,cAAM,aAAc,SAAQ,QAAQ;IAClC,oEAAoE;IACpE,KAAK,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC;CAG9B;AAED,cAAM,gBAAiB,SAAQ,QAAQ;IACrC;;;;;OAKG;IACH,IAAI,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,GAAG;QAAE,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;CAGpE"}

package/dist/client.js

@@ -0,0 +1,315 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.VpsguiClient = exports.VpsguiError = void 0;
+/** Error carrying the HTTP status returned by the agent. */
+class VpsguiError extends Error {
+    constructor(message, status, endpoint) {
+        super(message);
+        this.name = 'VpsguiError';
+        this.status = status;
+        this.endpoint = endpoint;
+    }
+    /** The agent token is missing, wrong, or temporarily locked out after repeated failures. */
+    get isAuthError() {
+        return this.status === 401 || this.status === 403 || this.status === 429;
+    }
+}
+exports.VpsguiError = VpsguiError;
+/**
+ * Official VPSGUI Node.js/TypeScript SDK.
+ *
+ * Every endpoint except `health()` requires the agent token, which grants root-equivalent control
+ * of the host - treat it as a root password and never commit it.
+ *
+ * @example
+ * ```ts
+ * import { VpsguiClient } from 'vpsgui';
+ *
+ * const client = new VpsguiClient({
+ *   baseUrl: 'https://vps.example.com/api/v1',
+ *   token: process.env.VPSGUI_AGENT_TOKEN,
+ * });
+ *
+ * const telemetry = await client.system.telemetry();
+ * const containers = await client.docker.listContainers();
+ * ```
+ */
+class VpsguiClient {
+    constructor(config) {
+        if (!config?.baseUrl)
+            throw new Error('VpsguiClient requires a baseUrl');
+        this.baseUrl = config.baseUrl.replace(/\/+$/, '');
+        this.token = config.token;
+        this.timeout = config.timeout ?? 15000;
+        this.nodes = new NodesResource(this);
+        this.system = new SystemResource(this);
+        this.docker = new DockerResource(this);
+        this.files = new FilesResource(this);
+        this.security = new SecurityResource(this);
+        this.network = new NetworkResource(this);
+        this.storage = new StorageResource(this);
+        this.backups = new BackupsResource(this);
+        this.deployments = new DeploymentsResource(this);
+        this.catalog = new CatalogResource(this);
+        this.automation = new AutomationResource(this);
+        this.queue = new QueueResource(this);
+        this.databases = new DatabasesResource(this);
+        this.proxy = new ProxyResource(this);
+        this.terminal = new TerminalResource(this);
+    }
+    /** @internal */
+    async request(method, endpoint, body, timeoutMs) {
+        const controller = new AbortController();
+        const timer = setTimeout(() => controller.abort(), timeoutMs ?? this.timeout);
+        let response;
+        try {
+            response = await fetch(`${this.baseUrl}${endpoint}`, {
+                method,
+                headers: {
+                    Accept: 'application/json',
+                    ...(body !== undefined ? { 'Content-Type': 'application/json' } : {}),
+                    ...(this.token ? { Authorization: `Bearer ${this.token}` } : {}),
+                },
+                body: body !== undefined ? JSON.stringify(body) : undefined,
+                signal: controller.signal,
+            });
+        }
+        catch (error) {
+            if (error instanceof Error && error.name === 'AbortError') {
+                throw new VpsguiError(`Request timed out after ${timeoutMs ?? this.timeout}ms`, 0, endpoint);
+            }
+            throw new VpsguiError(error instanceof Error ? error.message : 'Network request failed', 0, endpoint);
+        }
+        finally {
+            clearTimeout(timer);
+        }
+        if (response.status === 204)
+            return undefined;
+        const raw = await response.text();
+        let parsed;
+        if (raw) {
+            try {
+                parsed = JSON.parse(raw);
+            }
+            catch {
+                // Non-JSON body (e.g. a proxy error page); fall through to the status-based message.
+            }
+        }
+        if (!response.ok) {
+            const detail = parsed && typeof parsed === 'object' && 'error' in parsed
+                ? String(parsed.error)
+                : `HTTP ${response.status} ${response.statusText}`;
+            throw new VpsguiError(detail, response.status, endpoint);
+        }
+        return parsed;
+    }
+    /** Liveness probe. The only endpoint that does not require a token. */
+    health() {
+        return this.request('GET', '/health');
+    }
+    /** Agent version, configured file roots, and whether optional integrations are set up. */
+    info() {
+        return this.request('GET', '/agent/info');
+    }
+}
+exports.VpsguiClient = VpsguiClient;
+/** @internal */
+class Resource {
+    constructor(client) {
+        this.client = client;
+    }
+}
+class NodesResource extends Resource {
+    /** The host this agent runs on. */
+    get() {
+        return this.client.request('GET', '/node');
+    }
+    /** VPSGUI manages a single host, so this always returns exactly one entry. */
+    list() {
+        return this.client.request('GET', '/nodes');
+    }
+    /** Derived topology: the host, its containers, and detected database engines. */
+    topology() {
+        return this.client.request('GET', '/topology');
+    }
+    /** Computed health checks (memory, disk, load, failed units, Docker). */
+    health() {
+        return this.client.request('GET', '/health/matrix');
+    }
+}
+class SystemResource extends Resource {
+    telemetry() {
+        return this.client.request('GET', '/system/telemetry');
+    }
+    processes() {
+        return this.client.request('GET', '/system/processes');
+    }
+    services() {
+        return this.client.request('GET', '/system/services');
+    }
+    /** `systemctl <action> <name>` on the host. */
+    serviceAction(name, action) {
+        return this.client.request('POST', '/system/services/action', { name, action }, 60000);
+    }
+    packages() {
+        return this.client.request('GET', '/system/packages');
+    }
+    /** `apt-get install -y <packageName>`. Can take minutes. */
+    installPackage(packageName) {
+        return this.client.request('POST', '/system/packages/install', { packageName }, 300000);
+    }
+    /** Host accounts from /etc/passwd. */
+    users() {
+        return this.client.request('GET', '/users');
+    }
+}
+class DockerResource extends Resource {
+    listContainers() {
+        return this.client.request('GET', '/docker/containers');
+    }
+    listImages() {
+        return this.client.request('GET', '/docker/images');
+    }
+    containerAction(id, action) {
+        return this.client.request('POST', '/docker/containers/action', { id, action }, 60000);
+    }
+    /** `docker rmi`. Without `force`, Docker refuses while a container still references the image. */
+    removeImage(id, force = false) {
+        return this.client.request('POST', '/docker/images/action', { id, action: 'remove', force }, 60000);
+    }
+}
+class FilesResource extends Resource {
+    /** Directory entries. Contents are NOT included - use `read` for that. */
+    list(path) {
+        return this.client.request('GET', `/files?path=${encodeURIComponent(path)}`);
+    }
+    /** Full file contents. `truncated` is true when the file exceeded the agent's read cap. */
+    read(path) {
+        return this.client.request('GET', `/files/read?path=${encodeURIComponent(path)}`);
+    }
+    write(path, content) {
+        return this.client.request('POST', '/files/write', { path, content });
+    }
+    mkdir(path) {
+        return this.client.request('POST', '/files/mkdir', { path });
+    }
+    /** Without `recursive` the agent refuses to remove a non-empty directory. */
+    delete(path, recursive = false) {
+        return this.client.request('POST', '/files/delete', { path, recursive });
+    }
+    rename(from, to) {
+        return this.client.request('POST', '/files/rename', { from, to });
+    }
+}
+class SecurityResource extends Resource {
+    firewallRules() {
+        return this.client.request('GET', '/security/firewall');
+    }
+    /** Applies a real ufw rule change. */
+    applyFirewallRule(input) {
+        return this.client.request('POST', '/security/firewall/action', input, 30000);
+    }
+    sshKeys() {
+        return this.client.request('GET', '/security/ssh-keys');
+    }
+    /** SSH and sudo events from the host journal. */
+    auditLogs() {
+        return this.client.request('GET', '/security/audit-logs');
+    }
+    /** Secret metadata. Values are never included - use `revealSecret`. */
+    listSecrets() {
+        return this.client.request('GET', '/security/secrets');
+    }
+    /** Create or overwrite a secret. The agent encrypts the value before it touches disk. */
+    saveSecret(input) {
+        return this.client.request('POST', '/security/secrets', input);
+    }
+    deleteSecret(name) {
+        return this.client.request('POST', '/security/secrets/delete', { name });
+    }
+    /** Decrypt one secret. Deliberately separate so values are never fetched in bulk. */
+    revealSecret(name) {
+        return this.client.request('POST', '/security/secrets/reveal', { name });
+    }
+}
+class NetworkResource extends Resource {
+    interfaces() {
+        return this.client.request('GET', '/network/interfaces');
+    }
+    /** Geolocate an address. Omit `ip` to look up the host's own public address. */
+    ipInfo(ip) {
+        return this.client.request('GET', `/network/ip-info${ip ? `?ip=${encodeURIComponent(ip)}` : ''}`);
+    }
+}
+class StorageResource extends Resource {
+    partitions() {
+        return this.client.request('GET', '/storage/partitions');
+    }
+}
+class BackupsResource extends Resource {
+    list() {
+        return this.client.request('GET', '/backups');
+    }
+    /** Creates a tar.gz of `sourcePath`. Large trees can take minutes. */
+    create(sourcePath, label) {
+        return this.client.request('POST', '/backups/create', { sourcePath, label }, 600000);
+    }
+    delete(name) {
+        return this.client.request('POST', '/backups/delete', { name });
+    }
+    /** Extracts an archive into `destination`. Existing files may be overwritten. */
+    restore(name, destination) {
+        return this.client.request('POST', '/backups/restore', { name, destination }, 600000);
+    }
+}
+class DeploymentsResource extends Resource {
+    /** Git checkouts found on the host. */
+    list() {
+        return this.client.request('GET', '/deployments', undefined, 30000);
+    }
+    /** `git pull --ff-only`, accepted only for a path `list()` already reported. */
+    pull(path) {
+        return this.client.request('POST', '/deployments/pull', { path }, 120000);
+    }
+}
+class CatalogResource extends Resource {
+    list() {
+        return this.client.request('GET', '/catalog');
+    }
+}
+class AutomationResource extends Resource {
+    /** cron entries from /etc/crontab, /etc/cron.d and root's crontab. */
+    workflows() {
+        return this.client.request('GET', '/automation/workflows');
+    }
+}
+class QueueResource extends Resource {
+    /** systemd timers. */
+    jobs() {
+        return this.client.request('GET', '/queue/jobs');
+    }
+}
+class DatabasesResource extends Resource {
+    /** Engines detected from listening TCP ports. */
+    list() {
+        return this.client.request('GET', '/databases');
+    }
+}
+class ProxyResource extends Resource {
+    /** Reverse-proxy rules parsed from the live nginx configuration. */
+    rules() {
+        return this.client.request('GET', '/proxy/rules');
+    }
+}
+class TerminalResource extends Resource {
+    /**
+     * Run a shell command on the host.
+     *
+     * This is arbitrary remote code execution by design, gated by the agent token. It can be disabled
+     * server-side with `AGENT_ENABLE_SHELL=0`, in which case this returns HTTP 403.
+     */
+    exec(command) {
+        return this.client.request('POST', '/terminal/exec', { command }, 20000);
+    }
+}
+//# sourceMappingURL=client.js.map

package/dist/client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.js","sourceRoot":"","sources":["../src/client.ts"],"names":[],"mappings":";;;AAgCA,4DAA4D;AAC5D,MAAa,WAAY,SAAQ,KAAK;IAIpC,YAAY,OAAe,EAAE,MAAc,EAAE,QAAgB;QAC3D,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,aAAa,CAAC;QAC1B,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;IAC3B,CAAC;IAED,4FAA4F;IAC5F,IAAI,WAAW;QACb,OAAO,IAAI,CAAC,MAAM,KAAK,GAAG,IAAI,IAAI,CAAC,MAAM,KAAK,GAAG,IAAI,IAAI,CAAC,MAAM,KAAK,GAAG,CAAC;IAC3E,CAAC;CACF;AAfD,kCAeC;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAa,YAAY;IAqBvB,YAAY,MAA0B;QACpC,IAAI,CAAC,MAAM,EAAE,OAAO;YAAE,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;QACzE,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QAClD,IAAI,CAAC,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC;QAC1B,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC,OAAO,IAAI,KAAK,CAAC;QAEvC,IAAI,CAAC,KAAK,GAAG,IAAI,aAAa,CAAC,IAAI,CAAC,CAAC;QACrC,IAAI,CAAC,MAAM,GAAG,IAAI,cAAc,CAAC,IAAI,CAAC,CAAC;QACvC,IAAI,CAAC,MAAM,GAAG,IAAI,cAAc,CAAC,IAAI,CAAC,CAAC;QACvC,IAAI,CAAC,KAAK,GAAG,IAAI,aAAa,CAAC,IAAI,CAAC,CAAC;QACrC,IAAI,CAAC,QAAQ,GAAG,IAAI,gBAAgB,CAAC,IAAI,CAAC,CAAC;QAC3C,IAAI,CAAC,OAAO,GAAG,IAAI,eAAe,CAAC,IAAI,CAAC,CAAC;QACzC,IAAI,CAAC,OAAO,GAAG,IAAI,eAAe,CAAC,IAAI,CAAC,CAAC;QACzC,IAAI,CAAC,OAAO,GAAG,IAAI,eAAe,CAAC,IAAI,CAAC,CAAC;QACzC,IAAI,CAAC,WAAW,GAAG,IAAI,mBAAmB,CAAC,IAAI,CAAC,CAAC;QACjD,IAAI,CAAC,OAAO,GAAG,IAAI,eAAe,CAAC,IAAI,CAAC,CAAC;QACzC,IAAI,CAAC,UAAU,GAAG,IAAI,kBAAkB,CAAC,IAAI,CAAC,CAAC;QAC/C,IAAI,CAAC,KAAK,GAAG,IAAI,aAAa,CAAC,IAAI,CAAC,CAAC;QACrC,IAAI,CAAC,SAAS,GAAG,IAAI,iBAAiB,CAAC,IAAI,CAAC,CAAC;QAC7C,IAAI,CAAC,KAAK,GAAG,IAAI,aAAa,CAAC,IAAI,CAAC,CAAC;QACrC,IAAI,CAAC,QAAQ,GAAG,IAAI,gBAAgB,CAAC,IAAI,CAAC,CAAC;IAC7C,CAAC;IAED,gBAAgB;IAChB,KAAK,CAAC,OAAO,CAAI,MAAsB,EAAE,QAAgB,EAAE,IAAc,EAAE,SAAkB;QAC3F,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;QACzC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,SAAS,IAAI,IAAI,CAAC,OAAO,CAAC,CAAC;QAE9E,IAAI,QAAkB,CAAC;QACvB,IAAI,CAAC;YACH,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,CAAC,OAAO,GAAG,QAAQ,EAAE,EAAE;gBACnD,MAAM;gBACN,OAAO,EAAE;oBACP,MAAM,EAAE,kBAAkB;oBAC1B,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBACrE,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,UAAU,IAAI,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBACjE;gBACD,IAAI,EAAE,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS;gBAC3D,MAAM,EAAE,UAAU,CAAC,MAAM;aAC1B,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,KAAK,IAAI,KAAK,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;gBAC1D,MAAM,IAAI,WAAW,CAAC,2BAA2B,SAAS,IAAI,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC,EAAE,QAAQ,CAAC,CAAC;YAC/F,CAAC;YACD,MAAM,IAAI,WAAW,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,wBAAwB,EAAE,CAAC,EAAE,QAAQ,CAAC,CAAC;QACxG,CAAC;gBAAS,CAAC;YACT,YAAY,CAAC,KAAK,CAAC,CAAC;QACtB,CAAC;QAED,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG;YAAE,OAAO,SAAc,CAAC;QAEnD,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;QAClC,IAAI,MAAe,CAAC;QACpB,IAAI,GAAG,EAAE,CAAC;YACR,IAAI,CAAC;gBACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YAC3B,CAAC;YAAC,MAAM,CAAC;gBACP,qFAAqF;YACvF,CAAC;QACH,CAAC;QAED,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,MAAM,GACV,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,OAAO,IAAI,MAAM;gBACvD,CAAC,CAAC,MAAM,CAAE,MAA6B,CAAC,KAAK,CAAC;gBAC9C,CAAC,CAAC,QAAQ,QAAQ,CAAC,MAAM,IAAI,QAAQ,CAAC,UAAU,EAAE,CAAC;YACvD,MAAM,IAAI,WAAW,CAAC,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;QAC3D,CAAC;QAED,OAAO,MAAW,CAAC;IACrB,CAAC;IAED,uEAAuE;IACvE,MAAM;QACJ,OAAO,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;IACxC,CAAC;IAED,0FAA0F;IAC1F,IAAI;QACF,OAAO,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,aAAa,CAAC,CAAC;IAC5C,CAAC;CACF;AAtGD,oCAsGC;AAED,gBAAgB;AAChB,MAAe,QAAQ;IACrB,YAA+B,MAAoB;QAApB,WAAM,GAAN,MAAM,CAAc;IAAI,CAAC;CACzD;AAED,MAAM,aAAc,SAAQ,QAAQ;IAClC,mCAAmC;IACnC,GAAG;QACD,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IAC7C,CAAC;IAED,8EAA8E;IAC9E,IAAI;QACF,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;IAC9C,CAAC;IAED,iFAAiF;IACjF,QAAQ;QACN,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;IACjD,CAAC;IAED,yEAAyE;IACzE,MAAM;QACJ,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,gBAAgB,CAAC,CAAC;IACtD,CAAC;CACF;AAED,MAAM,cAAe,SAAQ,QAAQ;IACnC,SAAS;QACP,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,mBAAmB,CAAC,CAAC;IACzD,CAAC;IAED,SAAS;QACP,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,mBAAmB,CAAC,CAAC;IACzD,CAAC;IAED,QAAQ;QACN,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,kBAAkB,CAAC,CAAC;IACxD,CAAC;IAED,+CAA+C;IAC/C,aAAa,CAAC,IAAY,EAAE,MAA+C;QACzE,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,yBAAyB,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,KAAK,CAAC,CAAC;IACzF,CAAC;IAED,QAAQ;QACN,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,kBAAkB,CAAC,CAAC;IACxD,CAAC;IAED,4DAA4D;IAC5D,cAAc,CAAC,WAAmB;QAChC,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,0BAA0B,EAAE,EAAE,WAAW,EAAE,EAAE,MAAM,CAAC,CAAC;IAC1F,CAAC;IAED,sCAAsC;IACtC,KAAK;QACH,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;IAC9C,CAAC;CACF;AAED,MAAM,cAAe,SAAQ,QAAQ;IACnC,cAAc;QACZ,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,oBAAoB,CAAC,CAAC;IAC1D,CAAC;IAED,UAAU;QACR,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,gBAAgB,CAAC,CAAC;IACtD,CAAC;IAED,eAAe,CAAC,EAAU,EAAE,MAA+C;QACzE,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,2BAA2B,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,KAAK,CAAC,CAAC;IACzF,CAAC;IAED,kGAAkG;IAClG,WAAW,CAAC,EAAU,EAAE,KAAK,GAAG,KAAK;QACnC,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,uBAAuB,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,EAAE,KAAK,CAAC,CAAC;IACtG,CAAC;CACF;AAED,MAAM,aAAc,SAAQ,QAAQ;IAClC,0EAA0E;IAC1E,IAAI,CAAC,IAAY;QACf,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,eAAe,kBAAkB,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC/E,CAAC;IAED,2FAA2F;IAC3F,IAAI,CAAC,IAAY;QACf,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,oBAAoB,kBAAkB,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACpF,CAAC;IAED,KAAK,CAAC,IAAY,EAAE,OAAe;QACjC,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,cAAc,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;IACxE,CAAC;IAED,KAAK,CAAC,IAAY;QAChB,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,cAAc,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;IAC/D,CAAC;IAED,6EAA6E;IAC7E,MAAM,CAAC,IAAY,EAAE,SAAS,GAAG,KAAK;QACpC,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,eAAe,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC;IAC3E,CAAC;IAED,MAAM,CAAC,IAAY,EAAE,EAAU;QAC7B,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,eAAe,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;IACpE,CAAC;CACF;AAED,MAAM,gBAAiB,SAAQ,QAAQ;IACrC,aAAa;QACX,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,oBAAoB,CAAC,CAAC;IAC1D,CAAC;IAED,sCAAsC;IACtC,iBAAiB,CAAC,KAAwB;QACxC,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,2BAA2B,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;IAChF,CAAC;IAED,OAAO;QACL,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,oBAAoB,CAAC,CAAC;IAC1D,CAAC;IAED,iDAAiD;IACjD,SAAS;QACP,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,sBAAsB,CAAC,CAAC;IAC5D,CAAC;IAED,uEAAuE;IACvE,WAAW;QACT,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,mBAAmB,CAAC,CAAC;IACzD,CAAC;IAED,yFAAyF;IACzF,UAAU,CAAC,KAA2E;QACpF,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,mBAAmB,EAAE,KAAK,CAAC,CAAC;IACjE,CAAC;IAED,YAAY,CAAC,IAAY;QACvB,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,0BAA0B,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;IAC3E,CAAC;IAED,qFAAqF;IACrF,YAAY,CAAC,IAAY;QACvB,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,0BAA0B,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;IAC3E,CAAC;CACF;AAED,MAAM,eAAgB,SAAQ,QAAQ;IACpC,UAAU;QACR,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,qBAAqB,CAAC,CAAC;IAC3D,CAAC;IAED,gFAAgF;IAChF,MAAM,CAAC,EAAW;QAChB,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,mBAAmB,EAAE,CAAC,CAAC,CAAC,OAAO,kBAAkB,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IACpG,CAAC;CACF;AAED,MAAM,eAAgB,SAAQ,QAAQ;IACpC,UAAU;QACR,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,qBAAqB,CAAC,CAAC;IAC3D,CAAC;CACF;AAED,MAAM,eAAgB,SAAQ,QAAQ;IACpC,IAAI;QACF,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC;IAChD,CAAC;IAED,sEAAsE;IACtE,MAAM,CAAC,UAAkB,EAAE,KAAc;QACvC,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,iBAAiB,EAAE,EAAE,UAAU,EAAE,KAAK,EAAE,EAAE,MAAM,CAAC,CAAC;IACvF,CAAC;IAED,MAAM,CAAC,IAAY;QACjB,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,iBAAiB,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;IAClE,CAAC;IAED,iFAAiF;IACjF,OAAO,CAAC,IAAY,EAAE,WAAmB;QACvC,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,kBAAkB,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,EAAE,MAAM,CAAC,CAAC;IACxF,CAAC;CACF;AAED,MAAM,mBAAoB,SAAQ,QAAQ;IACxC,uCAAuC;IACvC,IAAI;QACF,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,cAAc,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC;IACtE,CAAC;IAED,gFAAgF;IAChF,IAAI,CAAC,IAAY;QACf,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,mBAAmB,EAAE,EAAE,IAAI,EAAE,EAAE,MAAM,CAAC,CAAC;IAC5E,CAAC;CACF;AAED,MAAM,eAAgB,SAAQ,QAAQ;IACpC,IAAI;QACF,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC;IAChD,CAAC;CACF;AAED,MAAM,kBAAmB,SAAQ,QAAQ;IACvC,sEAAsE;IACtE,SAAS;QACP,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,uBAAuB,CAAC,CAAC;IAC7D,CAAC;CACF;AAED,MAAM,aAAc,SAAQ,QAAQ;IAClC,sBAAsB;IACtB,IAAI;QACF,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,aAAa,CAAC,CAAC;IACnD,CAAC;CACF;AAED,MAAM,iBAAkB,SAAQ,QAAQ;IACtC,iDAAiD;IACjD,IAAI;QACF,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,YAAY,CAAC,CAAC;IAClD,CAAC;CACF;AAED,MAAM,aAAc,SAAQ,QAAQ;IAClC,oEAAoE;IACpE,KAAK;QACH,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,cAAc,CAAC,CAAC;IACpD,CAAC;CACF;AAED,MAAM,gBAAiB,SAAQ,QAAQ;IACrC;;;;;OAKG;IACH,IAAI,CAAC,OAAe;QAClB,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,gBAAgB,EAAE,EAAE,OAAO,EAAE,EAAE,KAAK,CAAC,CAAC;IAC3E,CAAC;CACF"}

package/dist/config.d.ts

@@ -0,0 +1,61 @@
+/**
+ * On-disk credentials for the CLI.
+ *
+ * The format is shared verbatim with the Python SDK, because `npm i -g vpsgui`
+ * and `pip install vpsgui` both put a `vpsgui` executable on PATH and only one
+ * of them can win. Sharing the file means it does not matter which one does:
+ * whichever binary runs, `vpsgui login` and every other command see the same
+ * profiles. Any change here has to land in sdk/python/vpsgui/config.py too.
+ */
+export declare const CONFIG_VERSION = 1;
+export interface Profile {
+    /** Full API root, e.g. https://vps.example.com/api/v1 */
+    url: string;
+    /** Agent token. Root-equivalent - this is why the file is 0600. */
+    token: string;
+    /** Recorded at login, for `vpsgui whoami`. Not trusted for anything. */
+    hostname?: string;
+    agentVersion?: string;
+    savedAt?: string;
+}
+export interface Config {
+    version: number;
+    current: string;
+    profiles: Record<string, Profile>;
+}
+export declare function configDir(): string;
+export declare function configPath(): string;
+export declare function readConfig(): Promise<Config>;
+/**
+ * Write the config with owner-only permissions.
+ *
+ * The mode is set on the temp file before any token reaches the disk; creating
+ * it 0644 and chmod-ing afterwards would leave a window where any local user
+ * could read the token.
+ */
+export declare function writeConfig(config: Config): Promise<void>;
+/**
+ * The profile to use, honouring `--profile`, then VPSGUI_PROFILE, then the
+ * `current` recorded at the last login.
+ */
+export declare function resolveProfileName(config: Config, explicit?: string): string;
+/**
+ * Credentials for a command, or null when there is no usable source.
+ *
+ * The environment wins over the config file so CI can run without a login step,
+ * and so an operator can override a saved profile for one command.
+ */
+export declare function loadCredentials(explicitProfile?: string): Promise<{
+    url: string;
+    token: string;
+    source: string;
+} | null>;
+/**
+ * Turn what an operator types into an API root.
+ *
+ * People paste the address bar - "vps.example.com", "http://1.2.3.4:46509",
+ * "https://host/api/v1/" - and every one of those should work rather than
+ * producing a 404 they have to debug.
+ */
+export declare function normaliseUrl(input: string): string;
+//# sourceMappingURL=config.d.ts.map

package/dist/config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAIA;;;;;;;;GAQG;AAEH,eAAO,MAAM,cAAc,IAAI,CAAC;AAEhC,MAAM,WAAW,OAAO;IACtB,yDAAyD;IACzD,GAAG,EAAE,MAAM,CAAC;IACZ,mEAAmE;IACnE,KAAK,EAAE,MAAM,CAAC;IACd,wEAAwE;IACxE,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,MAAM;IACrB,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACnC;AAED,wBAAgB,SAAS,IAAI,MAAM,CAIlC;AAED,wBAAgB,UAAU,IAAI,MAAM,CAEnC;AAMD,wBAAsB,UAAU,IAAI,OAAO,CAAC,MAAM,CAAC,CAuBlD;AAED;;;;;;GAMG;AACH,wBAAsB,WAAW,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAe/D;AAED;;;GAGG;AACH,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,MAAM,CAE5E;AAED;;;;;GAKG;AACH,wBAAsB,eAAe,CACnC,eAAe,CAAC,EAAE,MAAM,GACvB,OAAO,CAAC;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CAAC,CAahE;AAED;;;;;;GAMG;AACH,wBAAgB,YAAY,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAgBlD"}