ysk-server-core 1.0.0

package/dist/hosting/project-service.d.ts

@@ -0,0 +1,156 @@
+/**
+ * Real project lifecycle: DB + disk under dataDir/projects.
+ */
+import type { ProjectDto } from 'ysk-server-shared';
+import { planIsolationMigration } from './project-isolation-status.js';
+import type { ProjectRepository } from '../repositories/project-repo.js';
+import type { HostExecutor } from '../host/executor.js';
+import type { AuditRepository } from '../repositories/audit-repo.js';
+import { scaffoldAppTemplate } from './app-templates.js';
+export type DeleteProjectResult = {
+    ok: boolean;
+    projectId: string;
+    removedFiles: boolean;
+    notes: string[];
+    warnings: string[];
+};
+export type DeleteProjectOptions = {
+    /** Must equal project.name (trim). Required for API safety. */
+    confirmName?: string;
+    /** Delete OS home + linux user when safe (default true). */
+    removeFiles?: boolean;
+    /** Skip name check (CLI --yes with care; tests). */
+    skipConfirm?: boolean;
+};
+export declare class ProjectService {
+    private readonly projects;
+    private readonly host;
+    private readonly dataDir;
+    private readonly audit?;
+    constructor(projects: ProjectRepository, host: HostExecutor, dataDir: string, audit?: AuditRepository | undefined);
+    list(): ProjectDto[];
+    get(id: string): ProjectDto;
+    /** Repair PHP projects that were incorrectly stored with Node default "20". */
+    private healRuntimeVersion;
+    /**
+     * Create project record + home directory on disk.
+     * OS useradd only when YSK_EXECUTE=1 and process is root.
+     */
+    create(input: {
+        name: string;
+        domain?: string;
+        domainAliases?: string[];
+        runtime: ProjectDto['runtime'];
+        runtimeVersion?: string;
+        env?: 'staging' | 'production';
+        actor: string;
+        /** Panel user id for package quota ownership */
+        actorUserId?: string;
+        /** Optional one-click template */
+        templateId?: string;
+        forceTemplate?: boolean;
+        /** Preferred process listen port (optional) */
+        preferredPort?: number;
+    }): Promise<{
+        project: ProjectDto;
+        osProvision: {
+            attempted: boolean;
+            ok: boolean;
+            detail: string;
+        };
+        plan: string[];
+        scaffold?: ReturnType<typeof scaffoldAppTemplate>;
+    }>;
+    /**
+     * Re-attempt Linux user/group isolation for an existing project (root + EXECUTE).
+     * Migrates degraded shadow home → /home/ysk-server-{id} when needed.
+     * Never fakes success.
+     */
+    provisionOsIsolation(id: string, actor: string): Promise<{
+        ok: boolean;
+        osProvision: {
+            attempted: boolean;
+            ok: boolean;
+            detail: string;
+        };
+        requiresExecute: boolean;
+        requiresRoot: boolean;
+        homeDir?: string;
+    }>;
+    /**
+     * Bulk provision OS isolation for projects that need it (root + EXECUTE).
+     */
+    provisionOsIsolationAll(actor: string, opts?: {
+        limit?: number;
+        projectIds?: string[];
+    }): Promise<{
+        ok: boolean;
+        attempted: number;
+        succeeded: number;
+        failed: number;
+        results: Array<{
+            id: string;
+            name: string;
+            ok: boolean;
+            detail: string;
+        }>;
+        requiresExecute: boolean;
+        requiresRoot: boolean;
+    }>;
+    /**
+     * Explicit migrate: stop unit best-effort → provision home at /home/ysk-server-{id}
+     * → optional remove previous safe home. Operator must confirm (UI).
+     * Keeps existing linux_user (legacy name-slug users retained).
+     */
+    migrateOsIsolation(id: string, actor: string, opts?: {
+        removePreviousHome?: boolean;
+    }): Promise<{
+        ok: boolean;
+        notes: string[];
+        plan: ReturnType<typeof planIsolationMigration>;
+        osProvision?: {
+            attempted: boolean;
+            ok: boolean;
+            detail: string;
+        };
+        requiresExecute: boolean;
+        requiresRoot: boolean;
+        homeDir?: string;
+    }>;
+    private provisionOsUser;
+    /**
+     * Apply template onto existing project home.
+     */
+    applyTemplate(id: string, templateId: string, actor: string, force?: boolean): {
+        project: ProjectDto;
+        scaffold: ReturnType<typeof scaffoldAppTemplate>;
+    };
+    /**
+     * Destroy project: stop runners → tear web/PHP → OS user/home → DB.
+     * Returns honest notes; ok=true when control-plane row removed.
+     */
+    delete(id: string, actor: string, removeFilesOrOpts?: boolean | DeleteProjectOptions): Promise<DeleteProjectResult>;
+    /**
+     * Set extra log scan directories (relative to home). Always also scans logs/ and log/.
+     */
+    setLogExtraDirs(id: string, dirs: string[] | string, actor: string): {
+        project: ProjectDto;
+        notes: string[];
+    };
+    /** Update network fields (domain, aliases, HTTPS flags, docroot). Does not publish nginx. */
+    updateNetwork(id: string, patch: {
+        domain?: string;
+        domainAliases?: string[];
+        forceHttps?: boolean;
+        hsts?: boolean;
+        siteRedirectUrl?: string | null;
+        httpAuthUser?: string | null;
+        httpAuthPass?: string | null;
+        docRoot?: string | null;
+        bindIp?: string | null;
+        /** inherit | none | cloudflare | … */
+        realIpProvider?: string | null;
+        preferredPort?: number | null;
+    }, actor: string): ProjectDto;
+}
+//# sourceMappingURL=project-service.d.ts.map

package/dist/hosting/project-service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"project-service.d.ts","sourceRoot":"","sources":["../../src/hosting/project-service.ts"],"names":[],"mappings":"AAAA;;GAEG;AAKH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAOpD,OAAO,EAAE,sBAAsB,EAAE,MAAM,+BAA+B,CAAC;AAOvE,OAAO,KAAK,EAAE,iBAAiB,EAAc,MAAM,iCAAiC,CAAC;AACrF,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACxD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,+BAA+B,CAAC;AACrE,OAAO,EAAkB,mBAAmB,EAAsB,MAAM,oBAAoB,CAAC;AAW7F,MAAM,MAAM,mBAAmB,GAAG;IAChC,EAAE,EAAE,OAAO,CAAC;IACZ,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,OAAO,CAAC;IACtB,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,QAAQ,EAAE,MAAM,EAAE,CAAC;CACpB,CAAC;AAEF,MAAM,MAAM,oBAAoB,GAAG;IACjC,+DAA+D;IAC/D,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,4DAA4D;IAC5D,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,oDAAoD;IACpD,WAAW,CAAC,EAAE,OAAO,CAAC;CACvB,CAAC;AAEF,qBAAa,cAAc;IAEvB,OAAO,CAAC,QAAQ,CAAC,QAAQ;IACzB,OAAO,CAAC,QAAQ,CAAC,IAAI;IACrB,OAAO,CAAC,QAAQ,CAAC,OAAO;IACxB,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC;gBAHN,QAAQ,EAAE,iBAAiB,EAC3B,IAAI,EAAE,YAAY,EAClB,OAAO,EAAE,MAAM,EACf,KAAK,CAAC,EAAE,eAAe,YAAA;IAG1C,IAAI,IAAI,UAAU,EAAE;IAIpB,GAAG,CAAC,EAAE,EAAE,MAAM,GAAG,UAAU;IAQ3B,+EAA+E;IAC/E,OAAO,CAAC,kBAAkB;IAS1B;;;OAGG;IACG,MAAM,CAAC,KAAK,EAAE;QAClB,IAAI,EAAE,MAAM,CAAC;QACb,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;QACzB,OAAO,EAAE,UAAU,CAAC,SAAS,CAAC,CAAC;QAC/B,cAAc,CAAC,EAAE,MAAM,CAAC;QACxB,GAAG,CAAC,EAAE,SAAS,GAAG,YAAY,CAAC;QAC/B,KAAK,EAAE,MAAM,CAAC;QACd,gDAAgD;QAChD,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,kCAAkC;QAClC,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,aAAa,CAAC,EAAE,OAAO,CAAC;QACxB,+CAA+C;QAC/C,aAAa,CAAC,EAAE,MAAM,CAAC;KACxB,GAAG,OAAO,CAAC;QACV,OAAO,EAAE,UAAU,CAAC;QACpB,WAAW,EAAE;YAAE,SAAS,EAAE,OAAO,CAAC;YAAC,EAAE,EAAE,OAAO,CAAC;YAAC,MAAM,EAAE,MAAM,CAAA;SAAE,CAAC;QACjE,IAAI,EAAE,MAAM,EAAE,CAAC;QACf,QAAQ,CAAC,EAAE,UAAU,CAAC,OAAO,mBAAmB,CAAC,CAAC;KACnD,CAAC;IA0OF;;;;OAIG;IACG,oBAAoB,CACxB,EAAE,EAAE,MAAM,EACV,KAAK,EAAE,MAAM,GACZ,OAAO,CAAC;QACT,EAAE,EAAE,OAAO,CAAC;QACZ,WAAW,EAAE;YAAE,SAAS,EAAE,OAAO,CAAC;YAAC,EAAE,EAAE,OAAO,CAAC;YAAC,MAAM,EAAE,MAAM,CAAA;SAAE,CAAC;QACjE,eAAe,EAAE,OAAO,CAAC;QACzB,YAAY,EAAE,OAAO,CAAC;QACtB,OAAO,CAAC,EAAE,MAAM,CAAC;KAClB,CAAC;IA8EF;;OAEG;IACG,uBAAuB,CAC3B,KAAK,EAAE,MAAM,EACb,IAAI,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,UAAU,CAAC,EAAE,MAAM,EAAE,CAAA;KAAE,GAC/C,OAAO,CAAC;QACT,EAAE,EAAE,OAAO,CAAC;QACZ,SAAS,EAAE,MAAM,CAAC;QAClB,SAAS,EAAE,MAAM,CAAC;QAClB,MAAM,EAAE,MAAM,CAAC;QACf,OAAO,EAAE,KAAK,CAAC;YAAE,EAAE,EAAE,MAAM,CAAC;YAAC,IAAI,EAAE,MAAM,CAAC;YAAC,EAAE,EAAE,OAAO,CAAC;YAAC,MAAM,EAAE,MAAM,CAAA;SAAE,CAAC,CAAC;QAC1E,eAAe,EAAE,OAAO,CAAC;QACzB,YAAY,EAAE,OAAO,CAAC;KACvB,CAAC;IAqDF;;;;OAIG;IACG,kBAAkB,CACtB,EAAE,EAAE,MAAM,EACV,KAAK,EAAE,MAAM,EACb,IAAI,CAAC,EAAE;QAAE,kBAAkB,CAAC,EAAE,OAAO,CAAA;KAAE,GACtC,OAAO,CAAC;QACT,EAAE,EAAE,OAAO,CAAC;QACZ,KAAK,EAAE,MAAM,EAAE,CAAC;QAChB,IAAI,EAAE,UAAU,CAAC,OAAO,sBAAsB,CAAC,CAAC;QAChD,WAAW,CAAC,EAAE;YAAE,SAAS,EAAE,OAAO,CAAC;YAAC,EAAE,EAAE,OAAO,CAAC;YAAC,MAAM,EAAE,MAAM,CAAA;SAAE,CAAC;QAClE,eAAe,EAAE,OAAO,CAAC;QACzB,YAAY,EAAE,OAAO,CAAC;QACtB,OAAO,CAAC,EAAE,MAAM,CAAC;KAClB,CAAC;YAwFY,eAAe;IA8B7B;;OAEG;IACH,aAAa,CACX,EAAE,EAAE,MAAM,EACV,UAAU,EAAE,MAAM,EAClB,KAAK,EAAE,MAAM,EACb,KAAK,UAAQ,GACZ;QAAE,OAAO,EAAE,UAAU,CAAC;QAAC,QAAQ,EAAE,UAAU,CAAC,OAAO,mBAAmB,CAAC,CAAA;KAAE;IAwB5E;;;OAGG;IACG,MAAM,CACV,EAAE,EAAE,MAAM,EACV,KAAK,EAAE,MAAM,EACb,iBAAiB,GAAE,OAAO,GAAG,oBAA2B,GACvD,OAAO,CAAC,mBAAmB,CAAC;IA0P/B;;OAEG;IACH,eAAe,CACb,EAAE,EAAE,MAAM,EACV,IAAI,EAAE,MAAM,EAAE,GAAG,MAAM,EACvB,KAAK,EAAE,MAAM,GACZ;QAAE,OAAO,EAAE,UAAU,CAAC;QAAC,KAAK,EAAE,MAAM,EAAE,CAAA;KAAE;IAgB3C,6FAA6F;IAC7F,aAAa,CACX,EAAE,EAAE,MAAM,EACV,KAAK,EAAE;QACL,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;QACzB,UAAU,CAAC,EAAE,OAAO,CAAC;QACrB,IAAI,CAAC,EAAE,OAAO,CAAC;QACf,eAAe,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QAChC,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QAC7B,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QAC7B,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QACxB,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QACvB,sCAAsC;QACtC,cAAc,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QAC/B,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;KAC/B,EACD,KAAK,EAAE,MAAM,GACZ,UAAU;CA2Fd"}