ysk-server-core 1.0.0

package/dist/hosting/service-matrix.d.ts

@@ -0,0 +1,31 @@
+/**
+ * Host service matrix — real systemctl probes for known panel services.
+ * Used by /services page (not a fake protection-only probe).
+ */
+import type { HostExecutor } from '../host/executor.js';
+export type ServiceMatrixItem = {
+    id: string;
+    label: string;
+    unit: string;
+    /** Panel deep-link when available */
+    href?: string;
+    category: string;
+    installed: boolean;
+    active: string;
+    enabled: string;
+    activeLabel: string;
+};
+export declare function getServiceMatrix(host: HostExecutor): Promise<{
+    items: ServiceMatrixItem[];
+    executeEnabled: boolean;
+    isRoot: boolean;
+    probedAt: string;
+}>;
+export declare function lifecycleServiceUnit(host: HostExecutor, unit: string, action: 'start' | 'stop' | 'restart' | 'reload'): Promise<{
+    ok: boolean;
+    blocked?: boolean;
+    blockMessage?: string;
+    notes: string[];
+    active?: string;
+}>;
+//# sourceMappingURL=service-matrix.d.ts.map

package/dist/hosting/service-matrix.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"service-matrix.d.ts","sourceRoot":"","sources":["../../src/hosting/service-matrix.ts"],"names":[],"mappings":"AACA;;;GAGG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAGxD,MAAM,MAAM,iBAAiB,GAAG;IAC9B,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,qCAAqC;IACrC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,OAAO,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;CACrB,CAAC;AAiJF,wBAAsB,gBAAgB,CAAC,IAAI,EAAE,YAAY,GAAG,OAAO,CAAC;IAClE,KAAK,EAAE,iBAAiB,EAAE,CAAC;IAC3B,cAAc,EAAE,OAAO,CAAC;IACxB,MAAM,EAAE,OAAO,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;CAClB,CAAC,CAmFD;AAED,wBAAsB,oBAAoB,CACxC,IAAI,EAAE,YAAY,EAClB,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,OAAO,GAAG,MAAM,GAAG,SAAS,GAAG,QAAQ,GAC9C,OAAO,CAAC;IACT,EAAE,EAAE,OAAO,CAAC;IACZ,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB,CAAC,CAwED"}

package/dist/hosting/service-matrix.js

@@ -0,0 +1,282 @@
+import { tl } from 'ysk-server-shared';
+import { HostSoftwareProbe, binPresent } from './software-probe/index.js';
+/**
+ * Static catalog — never call tl() here (module load freezes default locale).
+ * Resolve label/category keys inside getServiceMatrix under request locale.
+ */
+const CATALOG = [
+    { id: 'nginx', label: 'Nginx', unit: 'nginx', href: '/nginx', categoryKey: 'notes.auto.n1318', softwareProbeId: 'nginx', bins: ['nginx'] },
+    {
+        id: 'mysql',
+        label: 'MySQL',
+        unit: 'mysql',
+        href: '/databases/mysql/service',
+        categoryKey: 'notes.cat.database',
+        softwareProbeId: 'mysql-server',
+        bins: ['mysqld'],
+    },
+    {
+        id: 'mariadb',
+        label: 'MariaDB',
+        unit: 'mariadb',
+        href: '/databases/mariadb/service',
+        categoryKey: 'notes.cat.database',
+        softwareProbeId: 'mariadb-server',
+        bins: ['mariadbd'],
+    },
+    {
+        id: 'postgres',
+        label: 'PostgreSQL',
+        unit: 'postgresql',
+        href: '/databases/postgres/service',
+        categoryKey: 'notes.cat.database',
+        softwareProbeId: 'postgresql',
+        bins: ['postgres', 'psql'],
+    },
+    {
+        id: 'redis',
+        label: 'Redis',
+        unit: 'redis-server',
+        href: '/databases/redis/service',
+        categoryKey: 'notes.cat.database',
+        softwareProbeId: 'redis-server',
+        bins: ['redis-server', 'redis-cli'],
+    },
+    { id: 'vsftpd', label: 'vsftpd (FTPS)', unit: 'vsftpd', href: '/ftp/service', categoryKey: 'notes.auto.n1019', softwareProbeId: 'vsftpd', bins: ['vsftpd'] },
+    {
+        id: 'fail2ban',
+        label: 'fail2ban',
+        unit: 'fail2ban',
+        href: '/protection/fail2ban',
+        categoryKey: 'notes.readiness.security',
+        softwareProbeId: 'fail2ban',
+        bins: ['fail2ban-client'],
+    },
+    {
+        id: 'ufw',
+        labelKey: 'notes.auto.n0017',
+        unit: 'ufw',
+        href: '/protection/firewall',
+        categoryKey: 'notes.readiness.security',
+        softwareProbeId: 'ufw',
+        bins: ['ufw'],
+    },
+    { id: 'postfix', label: 'Postfix', unit: 'postfix', href: '/email', categoryKey: 'notes.readiness.email', softwareProbeId: 'postfix', bins: ['postfix'] },
+    { id: 'dovecot', label: 'Dovecot', unit: 'dovecot', href: '/email', categoryKey: 'notes.readiness.email', softwareProbeId: 'dovecot', bins: ['dovecot'] },
+    { id: 'php-fpm', label: 'PHP-FPM', unit: 'php8.2-fpm', href: '/runtimes/php', categoryKey: 'notes.auto.n0018', softwareProbeId: 'php', bins: ['php-fpm8.2', 'php-fpm', 'php'] },
+    { id: 'java', label: 'Java', unit: '', href: '/runtimes/java', categoryKey: 'notes.cat.runtime', softwareProbeId: 'java', bins: ['java', 'javac'] },
+    { id: 'kotlin', label: 'Kotlin', unit: '', href: '/runtimes/kotlin', categoryKey: 'notes.cat.runtime', softwareProbeId: 'kotlin', bins: ['kotlin', 'kotlinc'] },
+    { id: 'bun', label: 'Bun', unit: '', href: '/runtimes/bun', categoryKey: 'notes.cat.runtime', softwareProbeId: 'bun', bins: ['bun'] },
+    { id: 'ysk-server', labelKey: 'notes.tpl.yskControlPlane', unit: 'ysk-server', href: '/system/unit', categoryKey: 'notes.readiness.core' },
+];
+function resolveCatalogLabel(entry) {
+    if (entry.labelKey)
+        return tl(entry.labelKey);
+    return entry.label ?? entry.id;
+}
+function activeLabel(active, installed) {
+    if (!installed && active !== 'active')
+        return tl('notes.notInstalled');
+    if (active === 'tool')
+        return tl('notes.installedTool');
+    if (active === 'active')
+        return tl('notes.running');
+    if (active === 'inactive')
+        return tl('notes.stopped');
+    if (active === 'failed')
+        return tl('notes.failed');
+    if (active === 'activating')
+        return tl('notes.auto.n0014');
+    return active || tl('notes.unknown');
+}
+async function probeUnit(host, unit) {
+    let active = 'unknown';
+    let enabled = 'unknown';
+    try {
+        const a = await host.runCommand(['systemctl', 'is-active', unit], { timeoutMs: 4_000 });
+        active = (a.stdout || a.stderr || 'unknown').trim().split(/\s+/)[0] || 'unknown';
+    }
+    catch {
+        active = 'unknown';
+    }
+    try {
+        const e = await host.runCommand(['systemctl', 'is-enabled', unit], { timeoutMs: 4_000 });
+        enabled = (e.stdout || e.stderr || 'unknown').trim().split(/\s+/)[0] || 'unknown';
+    }
+    catch {
+        enabled = 'unknown';
+    }
+    return { active, enabled };
+}
+async function isEntryInstalled(host, probe, entry) {
+    if (entry.softwareProbeId) {
+        return probe.isInstalled(entry.softwareProbeId);
+    }
+    if (entry.id === 'ysk-server') {
+        return (await binPresent(host, 'ysk-server')) || (await binPresent(host, 'node'));
+    }
+    for (const b of entry.bins ?? []) {
+        if (await binPresent(host, b))
+            return true;
+    }
+    return false;
+}
+/** Alternate units for distro differences */
+const UNIT_ALIASES = {
+    mysql: ['mysql', 'mysqld'],
+    redis: ['redis-server', 'redis'],
+    postgres: ['postgresql', 'postgresql@16-main', 'postgresql@15-main', 'postgresql@14-main'],
+    'php-fpm': ['php8.3-fpm', 'php8.2-fpm', 'php8.1-fpm', 'php-fpm']
+};
+export async function getServiceMatrix(host) {
+    const items = [];
+    const probe = new HostSoftwareProbe(host);
+    for (const entry of CATALOG) {
+        const label = resolveCatalogLabel(entry);
+        const category = tl(entry.categoryKey);
+        // Product-semantic installed (MySQL vs MariaDB exclusive, etc.)
+        const installed = await isEntryInstalled(host, probe, entry);
+        // Toolchain rows (no systemd unit): installed vs not — no start/stop
+        if (!entry.unit) {
+            items.push({
+                id: entry.id,
+                label,
+                unit: '—',
+                href: entry.href,
+                category,
+                installed,
+                active: installed ? 'tool' : 'not-found',
+                enabled: 'n/a',
+                activeLabel: activeLabel(installed ? 'tool' : 'not-found', installed),
+            });
+            continue;
+        }
+        const aliases = UNIT_ALIASES[entry.id] ?? [entry.unit];
+        let bestActive = 'unknown';
+        let bestEnabled = 'unknown';
+        let bestUnit = entry.unit;
+        for (const u of aliases) {
+            const p = await probeUnit(host, u);
+            if (p.active === 'active' || (bestActive === 'unknown' && p.active !== 'unknown' && p.active !== 'not-found' && p.active !== 'inactive')) {
+                bestActive = p.active;
+                bestEnabled = p.enabled;
+                bestUnit = u;
+                if (p.active === 'active')
+                    break;
+            }
+            else if (bestActive === 'unknown') {
+                bestActive = p.active;
+                bestEnabled = p.enabled;
+                bestUnit = u;
+            }
+        }
+        // not-found from systemctl when package missing
+        if (!installed) {
+            items.push({
+                id: entry.id,
+                label,
+                unit: bestUnit,
+                href: entry.href,
+                category,
+                installed: false,
+                active: 'not-found',
+                enabled: bestEnabled,
+                activeLabel: activeLabel('not-found', false),
+            });
+            continue;
+        }
+        if (bestActive === 'unknown' || bestActive === 'not-found') {
+            bestActive = 'inactive';
+        }
+        items.push({
+            id: entry.id,
+            label,
+            unit: bestUnit,
+            href: entry.href,
+            category,
+            installed: true,
+            active: bestActive,
+            enabled: bestEnabled,
+            activeLabel: activeLabel(bestActive, true),
+        });
+    }
+    return {
+        items,
+        executeEnabled: host.executeEnabled(),
+        isRoot: host.isRoot(),
+        probedAt: new Date().toISOString()
+    };
+}
+export async function lifecycleServiceUnit(host, unit, action) {
+    if (!host.executeEnabled()) {
+        return {
+            ok: false,
+            blocked: true,
+            blockMessage: tl('ops.blocked.needExecute'),
+            notes: [tl('notes.auto.n0006')]
+        };
+    }
+    if (!host.isRoot()) {
+        return {
+            ok: false,
+            blocked: true,
+            blockMessage: tl('notes.auto.n0008'),
+            notes: [tl('notes.auto.n1570')]
+        };
+    }
+    const safe = unit.replace(/[^a-zA-Z0-9@._-]/g, '');
+    if (!safe || safe === '—' || safe === '-') {
+        return { ok: false, notes: [tl('notes.auto.n1107')] };
+    }
+    const notes = [];
+    // Postfix: missing main.cf → systemd ConditionPathExists skips start (inactive, not crash)
+    const base = safe.replace(/\.service$/, '');
+    if ((action === 'start' || action === 'restart') && (base === 'postfix' || safe === 'postfix.service')) {
+        try {
+            const { preparePostfixForStart, ensurePostfixMainCf } = await import('./postfix-bootstrap.js');
+            const prep = await preparePostfixForStart(host);
+            notes.push(...prep.notes);
+            if (!prep.ok) {
+                const heal = await ensurePostfixMainCf(host);
+                notes.push(...heal.notes);
+            }
+        }
+        catch {
+            /* best-effort */
+        }
+    }
+    let r = await host.runCommand(['systemctl', action, safe], { timeoutMs: 60_000 });
+    // If still down, try one more ensure + start (e.g. first ensure raced with pathExists)
+    if (r.exitCode !== 0 &&
+        (action === 'start' || action === 'restart') &&
+        (base === 'postfix' || safe === 'postfix.service')) {
+        try {
+            const { ensurePostfixMainCf } = await import('./postfix-bootstrap.js');
+            const heal = await ensurePostfixMainCf(host);
+            notes.push(...heal.notes);
+            if (heal.ok || heal.created) {
+                r = await host.runCommand(['systemctl', 'start', safe], { timeoutMs: 60_000 });
+            }
+        }
+        catch {
+            /* fall through */
+        }
+    }
+    const p = await probeUnit(host, safe);
+    const ok = r.exitCode === 0;
+    if (ok) {
+        notes.push(tl('notes.auto.t0316', { v0: action, v1: safe }));
+    }
+    else {
+        notes.push(tl('notes.tpl.actionFailed', {
+            action,
+            detail: (r.stderr || r.stdout).trim() || String(r.exitCode),
+        }));
+    }
+    return {
+        ok,
+        notes,
+        active: p.active
+    };
+}
+//# sourceMappingURL=service-matrix.js.map

package/dist/hosting/service-matrix.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"service-matrix.js","sourceRoot":"","sources":["../../src/hosting/service-matrix.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,EAAE,EAAE,MAAM,mBAAmB,CAAC;AAOvC,OAAO,EAAE,iBAAiB,EAAE,UAAU,EAAE,MAAM,2BAA2B,CAAC;AAe1E;;;GAGG;AACH,MAAM,OAAO,GAaR;IACH,EAAE,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,kBAAkB,EAAE,eAAe,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,OAAO,CAAC,EAAE;IAC1I;QACE,EAAE,EAAE,OAAO;QACX,KAAK,EAAE,OAAO;QACd,IAAI,EAAE,OAAO;QACb,IAAI,EAAE,0BAA0B;QAChC,WAAW,EAAE,oBAAoB;QACjC,eAAe,EAAE,cAAc;QAC/B,IAAI,EAAE,CAAC,QAAQ,CAAC;KACjB;IACD;QACE,EAAE,EAAE,SAAS;QACb,KAAK,EAAE,SAAS;QAChB,IAAI,EAAE,SAAS;QACf,IAAI,EAAE,4BAA4B;QAClC,WAAW,EAAE,oBAAoB;QACjC,eAAe,EAAE,gBAAgB;QACjC,IAAI,EAAE,CAAC,UAAU,CAAC;KACnB;IACD;QACE,EAAE,EAAE,UAAU;QACd,KAAK,EAAE,YAAY;QACnB,IAAI,EAAE,YAAY;QAClB,IAAI,EAAE,6BAA6B;QACnC,WAAW,EAAE,oBAAoB;QACjC,eAAe,EAAE,YAAY;QAC7B,IAAI,EAAE,CAAC,UAAU,EAAE,MAAM,CAAC;KAC3B;IACD;QACE,EAAE,EAAE,OAAO;QACX,KAAK,EAAE,OAAO;QACd,IAAI,EAAE,cAAc;QACpB,IAAI,EAAE,0BAA0B;QAChC,WAAW,EAAE,oBAAoB;QACjC,eAAe,EAAE,cAAc;QAC/B,IAAI,EAAE,CAAC,cAAc,EAAE,WAAW,CAAC;KACpC;IACD,EAAE,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,eAAe,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,cAAc,EAAE,WAAW,EAAE,kBAAkB,EAAE,eAAe,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,QAAQ,CAAC,EAAE;IAC5J;QACE,EAAE,EAAE,UAAU;QACd,KAAK,EAAE,UAAU;QACjB,IAAI,EAAE,UAAU;QAChB,IAAI,EAAE,sBAAsB;QAC5B,WAAW,EAAE,0BAA0B;QACvC,eAAe,EAAE,UAAU;QAC3B,IAAI,EAAE,CAAC,iBAAiB,CAAC;KAC1B;IACD;QACE,EAAE,EAAE,KAAK;QACT,QAAQ,EAAE,kBAAkB;QAC5B,IAAI,EAAE,KAAK;QACX,IAAI,EAAE,sBAAsB;QAC5B,WAAW,EAAE,0BAA0B;QACvC,eAAe,EAAE,KAAK;QACtB,IAAI,EAAE,CAAC,KAAK,CAAC;KACd;IACD,EAAE,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,uBAAuB,EAAE,eAAe,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,SAAS,CAAC,EAAE;IACzJ,EAAE,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,uBAAuB,EAAE,eAAe,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,SAAS,CAAC,EAAE;IACzJ,EAAE,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,eAAe,EAAE,WAAW,EAAE,kBAAkB,EAAE,eAAe,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,YAAY,EAAE,SAAS,EAAE,KAAK,CAAC,EAAE;IAC/K,EAAE,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,EAAE,IAAI,EAAE,gBAAgB,EAAE,WAAW,EAAE,mBAAmB,EAAE,eAAe,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE;IACnJ,EAAE,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE,EAAE,IAAI,EAAE,kBAAkB,EAAE,WAAW,EAAE,mBAAmB,EAAE,eAAe,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,QAAQ,EAAE,SAAS,CAAC,EAAE;IAC/J,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,EAAE,IAAI,EAAE,eAAe,EAAE,WAAW,EAAE,mBAAmB,EAAE,eAAe,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,KAAK,CAAC,EAAE;IACrI,EAAE,EAAE,EAAE,YAAY,EAAE,QAAQ,EAAE,2BAA2B,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,WAAW,EAAE,sBAAsB,EAAE;CAC3I,CAAC;AAEF,SAAS,mBAAmB,CAAC,KAA+B;IAC1D,IAAI,KAAK,CAAC,QAAQ;QAAE,OAAO,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IAC9C,OAAO,KAAK,CAAC,KAAK,IAAI,KAAK,CAAC,EAAE,CAAC;AACjC,CAAC;AAED,SAAS,WAAW,CAAC,MAAc,EAAE,SAAkB;IACrD,IAAI,CAAC,SAAS,IAAI,MAAM,KAAK,QAAQ;QAAE,OAAO,EAAE,CAAC,oBAAoB,CAAC,CAAC;IACvE,IAAI,MAAM,KAAK,MAAM;QAAE,OAAO,EAAE,CAAC,qBAAqB,CAAC,CAAC;IACxD,IAAI,MAAM,KAAK,QAAQ;QAAE,OAAO,EAAE,CAAC,eAAe,CAAC,CAAC;IACpD,IAAI,MAAM,KAAK,UAAU;QAAE,OAAO,EAAE,CAAC,eAAe,CAAC,CAAC;IACtD,IAAI,MAAM,KAAK,QAAQ;QAAE,OAAO,EAAE,CAAC,cAAc,CAAC,CAAC;IACnD,IAAI,MAAM,KAAK,YAAY;QAAE,OAAO,EAAE,CAAC,kBAAkB,CAAC,CAAC;IAC3D,OAAO,MAAM,IAAI,EAAE,CAAC,eAAe,CAAC,CAAC;AACvC,CAAC;AAED,KAAK,UAAU,SAAS,CACtB,IAAkB,EAClB,IAAY;IAEZ,IAAI,MAAM,GAAG,SAAS,CAAC;IACvB,IAAI,OAAO,GAAG,SAAS,CAAC;IACxB,IAAI,CAAC;QACH,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,CAAC,WAAW,EAAE,WAAW,EAAE,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC;QACxF,MAAM,GAAG,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,MAAM,IAAI,SAAS,CAAC,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,SAAS,CAAC;IACnF,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,GAAG,SAAS,CAAC;IACrB,CAAC;IACD,IAAI,CAAC;QACH,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,CAAC,WAAW,EAAE,YAAY,EAAE,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC;QACzF,OAAO,GAAG,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,MAAM,IAAI,SAAS,CAAC,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,SAAS,CAAC;IACpF,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,GAAG,SAAS,CAAC;IACtB,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;AAC7B,CAAC;AAED,KAAK,UAAU,gBAAgB,CAC7B,IAAkB,EAClB,KAAwB,EACxB,KAA+B;IAE/B,IAAI,KAAK,CAAC,eAAe,EAAE,CAAC;QAC1B,OAAO,KAAK,CAAC,WAAW,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC;IAClD,CAAC;IACD,IAAI,KAAK,CAAC,EAAE,KAAK,YAAY,EAAE,CAAC;QAC9B,OAAO,CAAC,MAAM,UAAU,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC,IAAI,CAAC,MAAM,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;IACpF,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,KAAK,CAAC,IAAI,IAAI,EAAE,EAAE,CAAC;QACjC,IAAI,MAAM,UAAU,CAAC,IAAI,EAAE,CAAC,CAAC;YAAE,OAAO,IAAI,CAAC;IAC7C,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,6CAA6C;AAC7C,MAAM,YAAY,GAA6B;IAC7C,KAAK,EAAE,CAAC,OAAO,EAAE,QAAQ,CAAC;IAC1B,KAAK,EAAE,CAAC,cAAc,EAAE,OAAO,CAAC;IAChC,QAAQ,EAAE,CAAC,YAAY,EAAE,oBAAoB,EAAE,oBAAoB,EAAE,oBAAoB,CAAC;IAC1F,SAAS,EAAE,CAAC,YAAY,EAAE,YAAY,EAAE,YAAY,EAAE,SAAS,CAAC;CAAE,CAAC;AAErE,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,IAAkB;IAMvD,MAAM,KAAK,GAAwB,EAAE,CAAC;IACtC,MAAM,KAAK,GAAG,IAAI,iBAAiB,CAAC,IAAI,CAAC,CAAC;IAE1C,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,MAAM,KAAK,GAAG,mBAAmB,CAAC,KAAK,CAAC,CAAC;QACzC,MAAM,QAAQ,GAAG,EAAE,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;QACvC,gEAAgE;QAChE,MAAM,SAAS,GAAG,MAAM,gBAAgB,CAAC,IAAI,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;QAE7D,qEAAqE;QACrE,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;YAChB,KAAK,CAAC,IAAI,CAAC;gBACT,EAAE,EAAE,KAAK,CAAC,EAAE;gBACZ,KAAK;gBACL,IAAI,EAAE,GAAG;gBACT,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,QAAQ;gBACR,SAAS;gBACT,MAAM,EAAE,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,WAAW;gBACxC,OAAO,EAAE,KAAK;gBACd,WAAW,EAAE,WAAW,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,WAAW,EAAE,SAAS,CAAC;aACtE,CAAC,CAAC;YACH,SAAS;QACX,CAAC;QAED,MAAM,OAAO,GAAG,YAAY,CAAC,KAAK,CAAC,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACvD,IAAI,UAAU,GAAG,SAAS,CAAC;QAC3B,IAAI,WAAW,GAAG,SAAS,CAAC;QAC5B,IAAI,QAAQ,GAAG,KAAK,CAAC,IAAI,CAAC;QAE1B,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;YACxB,MAAM,CAAC,GAAG,MAAM,SAAS,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;YACnC,IAAI,CAAC,CAAC,MAAM,KAAK,QAAQ,IAAI,CAAC,UAAU,KAAK,SAAS,IAAI,CAAC,CAAC,MAAM,KAAK,SAAS,IAAI,CAAC,CAAC,MAAM,KAAK,WAAW,IAAI,CAAC,CAAC,MAAM,KAAK,UAAU,CAAC,EAAE,CAAC;gBACzI,UAAU,GAAG,CAAC,CAAC,MAAM,CAAC;gBACtB,WAAW,GAAG,CAAC,CAAC,OAAO,CAAC;gBACxB,QAAQ,GAAG,CAAC,CAAC;gBACb,IAAI,CAAC,CAAC,MAAM,KAAK,QAAQ;oBAAE,MAAM;YACnC,CAAC;iBAAM,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;gBACpC,UAAU,GAAG,CAAC,CAAC,MAAM,CAAC;gBACtB,WAAW,GAAG,CAAC,CAAC,OAAO,CAAC;gBACxB,QAAQ,GAAG,CAAC,CAAC;YACf,CAAC;QACH,CAAC;QAED,gDAAgD;QAChD,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,KAAK,CAAC,IAAI,CAAC;gBACT,EAAE,EAAE,KAAK,CAAC,EAAE;gBACZ,KAAK;gBACL,IAAI,EAAE,QAAQ;gBACd,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,QAAQ;gBACR,SAAS,EAAE,KAAK;gBAChB,MAAM,EAAE,WAAW;gBACnB,OAAO,EAAE,WAAW;gBACpB,WAAW,EAAE,WAAW,CAAC,WAAW,EAAE,KAAK,CAAC;aAC7C,CAAC,CAAC;YACH,SAAS;QACX,CAAC;QAED,IAAI,UAAU,KAAK,SAAS,IAAI,UAAU,KAAK,WAAW,EAAE,CAAC;YAC3D,UAAU,GAAG,UAAU,CAAC;QAC1B,CAAC;QAED,KAAK,CAAC,IAAI,CAAC;YACT,EAAE,EAAE,KAAK,CAAC,EAAE;YACZ,KAAK;YACL,IAAI,EAAE,QAAQ;YACd,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,QAAQ;YACR,SAAS,EAAE,IAAI;YACf,MAAM,EAAE,UAAU;YAClB,OAAO,EAAE,WAAW;YACpB,WAAW,EAAE,WAAW,CAAC,UAAU,EAAE,IAAI,CAAC;SAC3C,CAAC,CAAC;IACL,CAAC;IAED,OAAO;QACL,KAAK;QACL,cAAc,EAAE,IAAI,CAAC,cAAc,EAAE;QACrC,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE;QACrB,QAAQ,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KAAE,CAAC;AACzC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,IAAkB,EAClB,IAAY,EACZ,MAA+C;IAQ/C,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,EAAE,CAAC;QAC3B,OAAO;YACL,EAAE,EAAE,KAAK;YACT,OAAO,EAAE,IAAI;YACb,YAAY,EAAE,EAAE,CAAC,yBAAyB,CAAC;YAC3C,KAAK,EAAE,CAAC,EAAE,CAAC,kBAAkB,CAAC,CAAC;SAAE,CAAC;IACtC,CAAC;IACD,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC;QACnB,OAAO;YACL,EAAE,EAAE,KAAK;YACT,OAAO,EAAE,IAAI;YACb,YAAY,EAAE,EAAE,CAAC,kBAAkB,CAAC;YACpC,KAAK,EAAE,CAAC,EAAE,CAAC,kBAAkB,CAAC,CAAC;SAAE,CAAC;IACtC,CAAC;IACD,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,mBAAmB,EAAE,EAAE,CAAC,CAAC;IACnD,IAAI,CAAC,IAAI,IAAI,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;QAC1C,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,kBAAkB,CAAC,CAAC,EAAE,CAAC;IACxD,CAAC;IAED,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,2FAA2F;IAC3F,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC;IAC5C,IAAI,CAAC,MAAM,KAAK,OAAO,IAAI,MAAM,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,iBAAiB,CAAC,EAAE,CAAC;QACvG,IAAI,CAAC;YACH,MAAM,EAAE,sBAAsB,EAAE,mBAAmB,EAAE,GAAG,MAAM,MAAM,CAAC,wBAAwB,CAAC,CAAC;YAC/F,MAAM,IAAI,GAAG,MAAM,sBAAsB,CAAC,IAAI,CAAC,CAAC;YAChD,KAAK,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC;YAC1B,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;gBACb,MAAM,IAAI,GAAG,MAAM,mBAAmB,CAAC,IAAI,CAAC,CAAC;gBAC7C,KAAK,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC;YAC5B,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,iBAAiB;QACnB,CAAC;IACH,CAAC;IAED,IAAI,CAAC,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,CAAC,WAAW,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,CAAC;IAClF,uFAAuF;IACvF,IACE,CAAC,CAAC,QAAQ,KAAK,CAAC;QAChB,CAAC,MAAM,KAAK,OAAO,IAAI,MAAM,KAAK,SAAS,CAAC;QAC5C,CAAC,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,iBAAiB,CAAC,EAClD,CAAC;QACD,IAAI,CAAC;YACH,MAAM,EAAE,mBAAmB,EAAE,GAAG,MAAM,MAAM,CAAC,wBAAwB,CAAC,CAAC;YACvE,MAAM,IAAI,GAAG,MAAM,mBAAmB,CAAC,IAAI,CAAC,CAAC;YAC7C,KAAK,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC;YAC1B,IAAI,IAAI,CAAC,EAAE,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;gBAC5B,CAAC,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,CAAC,WAAW,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,CAAC;YACjF,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,kBAAkB;QACpB,CAAC;IACH,CAAC;IAED,MAAM,CAAC,GAAG,MAAM,SAAS,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACtC,MAAM,EAAE,GAAG,CAAC,CAAC,QAAQ,KAAK,CAAC,CAAC;IAC5B,IAAI,EAAE,EAAE,CAAC;QACP,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,kBAAkB,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IAC/D,CAAC;SAAM,CAAC;QACN,KAAK,CAAC,IAAI,CACR,EAAE,CAAC,wBAAwB,EAAE;YAC3B,MAAM;YACN,MAAM,EAAE,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,IAAI,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC;SAC5D,CAAC,CACH,CAAC;IACJ,CAAC;IACD,OAAO;QACL,EAAE;QACF,KAAK;QACL,MAAM,EAAE,CAAC,CAAC,MAAM;KAAE,CAAC;AACvB,CAAC"}

package/dist/hosting/sftp-keys.d.ts

@@ -0,0 +1,35 @@
+import type { JsonStore } from '../db/store.js';
+import type { HostExecutor } from '../host/executor.js';
+export type SftpKeyRecord = {
+    id: string;
+    username: string;
+    comment?: string;
+    publicKey: string;
+    created_at: string;
+    /** When bound to a hosting project */
+    projectId?: string;
+    linuxUser?: string;
+    homeDir?: string;
+};
+export declare function listSftpKeys(db: JsonStore, username?: string): SftpKeyRecord[];
+export declare function addSftpKey(db: JsonStore, dataDir: string, input: {
+    username: string;
+    publicKey: string;
+    comment?: string;
+    projectId?: string;
+    linuxUser?: string;
+    homeDir?: string;
+}, host?: HostExecutor): {
+    ok: boolean;
+    key?: SftpKeyRecord;
+    notes: string[];
+    written: string[];
+};
+/** Sync chown helper used by HTTP after add */
+export declare function chownSftpProjectKeys(host: HostExecutor, homeDir: string, linuxUser: string): Promise<string[]>;
+export declare function removeSftpKey(db: JsonStore, dataDir: string, id: string): {
+    ok: boolean;
+    notes: string[];
+};
+export declare function readSftpAuthorizedKeysFile(dataDir: string, username: string): string;
+//# sourceMappingURL=sftp-keys.d.ts.map

package/dist/hosting/sftp-keys.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sftp-keys.d.ts","sourceRoot":"","sources":["../../src/hosting/sftp-keys.ts"],"names":[],"mappings":"AASA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAChD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAGxD,MAAM,MAAM,aAAa,GAAG;IAC1B,EAAE,EAAE,MAAM,CAAC;IACX,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,sCAAsC;IACtC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB,CAAC;AAIF,wBAAgB,YAAY,CAAC,EAAE,EAAE,SAAS,EAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,aAAa,EAAE,CAU9E;AA2CD,wBAAgB,UAAU,CACxB,EAAE,EAAE,SAAS,EACb,OAAO,EAAE,MAAM,EACf,KAAK,EAAE;IACL,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB,EACD,IAAI,CAAC,EAAE,YAAY,GAClB;IAAE,EAAE,EAAE,OAAO,CAAC;IAAC,GAAG,CAAC,EAAE,aAAa,CAAC;IAAC,KAAK,EAAE,MAAM,EAAE,CAAC;IAAC,OAAO,EAAE,MAAM,EAAE,CAAA;CAAE,CAqE1E;AAED,+CAA+C;AAC/C,wBAAsB,oBAAoB,CACxC,IAAI,EAAE,YAAY,EAClB,OAAO,EAAE,MAAM,EACf,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,MAAM,EAAE,CAAC,CAiBnB;AAED,wBAAgB,aAAa,CAC3B,EAAE,EAAE,SAAS,EACb,OAAO,EAAE,MAAM,EACf,EAAE,EAAE,MAAM,GACT;IAAE,EAAE,EAAE,OAAO,CAAC;IAAC,KAAK,EAAE,MAAM,EAAE,CAAA;CAAE,CAgBlC;AAED,wBAAgB,0BAA0B,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,MAAM,CAIpF"}

package/dist/hosting/sftp-keys.js

@@ -0,0 +1,151 @@
+import { tl } from 'ysk-server-shared';
+/**
+ * SSH public keys for SFTP — managed copy under dataDir + optional project home .ssh
+ * When projectId/homeDir/linuxUser provided, keys land in project isolation home.
+ */
+import { mkdirSync, writeFileSync, existsSync, readFileSync, chmodSync } from 'node:fs';
+import { join } from 'node:path';
+import { randomUUID } from 'node:crypto';
+import { shellQuote } from './project-user-run.js';
+const KEY = 'sftp_authorized_keys';
+export function listSftpKeys(db, username) {
+    const raw = db.snapshot.settings?.[KEY];
+    let all = [];
+    try {
+        all = raw ? JSON.parse(raw) : [];
+    }
+    catch {
+        all = [];
+    }
+    if (username)
+        return all.filter((k) => k.username === username);
+    return all;
+}
+function rewriteManagedAuthorizedKeys(dataDir, username, keys) {
+    const dir = join(dataDir, 'ftps', 'ssh', username);
+    mkdirSync(dir, { recursive: true });
+    const auth = join(dir, 'authorized_keys');
+    const lines = keys.filter((k) => k.username === username).map((k) => k.publicKey);
+    writeFileSync(auth, lines.join('\n') + (lines.length ? '\n' : ''), 'utf8');
+    try {
+        chmodSync(auth, 0o600);
+        chmodSync(dir, 0o700);
+    }
+    catch {
+        /* ignore */
+    }
+    return auth;
+}
+function rewriteProjectAuthorizedKeys(homeDir, keys, projectId) {
+    const sshDir = join(homeDir, '.ssh');
+    mkdirSync(sshDir, { recursive: true });
+    const auth = join(sshDir, 'authorized_keys');
+    const lines = keys
+        .filter((k) => (projectId ? k.projectId === projectId : k.homeDir === homeDir))
+        .map((k) => k.publicKey);
+    // Also include keys for same linuxUser without project filter if bound
+    writeFileSync(auth, lines.join('\n') + (lines.length ? '\n' : ''), 'utf8');
+    try {
+        chmodSync(sshDir, 0o700);
+        chmodSync(auth, 0o600);
+    }
+    catch {
+        /* ignore */
+    }
+    return auth;
+}
+export function addSftpKey(db, dataDir, input, host) {
+    const username = input.username.trim().toLowerCase();
+    const publicKey = input.publicKey.trim();
+    if (!username || !publicKey.startsWith('ssh-')) {
+        return { ok: false, notes: [tl('notes.auto.n1575')], written: [] };
+    }
+    // Resolve project binding
+    let projectId = input.projectId?.trim();
+    let linuxUser = input.linuxUser?.trim();
+    let homeDir = input.homeDir?.trim();
+    if (projectId && (!linuxUser || !homeDir)) {
+        const p = db.snapshot.projects.find((x) => x.id === projectId);
+        if (p) {
+            linuxUser = linuxUser || p.linux_user;
+            homeDir = homeDir || p.home_dir;
+        }
+    }
+    // Username defaults to linuxUser for project keys
+    const loginName = linuxUser || username;
+    const key = {
+        id: randomUUID(),
+        username: loginName,
+        publicKey,
+        comment: input.comment,
+        created_at: new Date().toISOString(),
+        projectId,
+        linuxUser,
+        homeDir,
+    };
+    const all = listSftpKeys(db);
+    all.unshift(key);
+    db.snapshot.settings[KEY] = JSON.stringify(all);
+    db.persist();
+    const written = [];
+    const notes = [];
+    const managedAuth = rewriteManagedAuthorizedKeys(dataDir, loginName, all);
+    written.push(managedAuth);
+    notes.push(tl('notes.auto.t0414', { v0: (managedAuth) }));
+    if (homeDir) {
+        const projAuth = rewriteProjectAuthorizedKeys(homeDir, all.filter((k) => k.homeDir === homeDir || k.projectId === projectId), projectId);
+        written.push(projAuth);
+        notes.push(tl('notes.auto.t0415', { v0: (projAuth) }));
+    }
+    else {
+        notes.push(tl('notes.auto.n0972'));
+    }
+    notes.push(homeDir && linuxUser
+        ? tl('notes.auto.t0416', { v0: (linuxUser) })
+        : tl('notes.auto.n1554'));
+    void host; // chown via chownSftpProjectKeys after add (async)
+    return {
+        ok: true,
+        key,
+        notes,
+        written,
+    };
+}
+/** Sync chown helper used by HTTP after add */
+export async function chownSftpProjectKeys(host, homeDir, linuxUser) {
+    if (!host.executeEnabled() || !host.isRoot()) {
+        return [tl('notes.auto.n0180')];
+    }
+    const sshDir = join(homeDir, '.ssh');
+    if (!existsSync(sshDir))
+        return [];
+    const r = await host.runCommand([
+        'bash',
+        '-c',
+        `chown -R ${shellQuote(linuxUser)}:${shellQuote(linuxUser)} ${shellQuote(sshDir)} && chmod 700 ${shellQuote(sshDir)} && chmod 600 ${shellQuote(join(sshDir, 'authorized_keys'))} 2>/dev/null || true`,
+    ], { timeoutMs: 15_000 });
+    return r.exitCode === 0
+        ? [tl('notes.auto.t0417', { v0: (linuxUser), v1: (sshDir) })]
+        : [tl('notes.auto.t0418', { v0: ((r.stderr || r.stdout).slice(0, 120)) })];
+}
+export function removeSftpKey(db, dataDir, id) {
+    const all = listSftpKeys(db);
+    const found = all.find((k) => k.id === id);
+    if (!found)
+        return { ok: false, notes: [tl('notes.auto.n0852')] };
+    const next = all.filter((k) => k.id !== id);
+    db.snapshot.settings[KEY] = JSON.stringify(next);
+    db.persist();
+    rewriteManagedAuthorizedKeys(dataDir, found.username, next);
+    if (found.homeDir) {
+        rewriteProjectAuthorizedKeys(found.homeDir, next.filter((k) => k.homeDir === found.homeDir || k.projectId === found.projectId), found.projectId);
+    }
+    return { ok: true, notes: [tl('notes.auto.t0419')] };
+}
+export function readSftpAuthorizedKeysFile(dataDir, username) {
+    const auth = join(dataDir, 'ftps', 'ssh', username, 'authorized_keys');
+    if (!existsSync(auth))
+        return '';
+    return readFileSync(auth, 'utf8');
+}
+//# sourceMappingURL=sftp-keys.js.map

package/dist/hosting/sftp-keys.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sftp-keys.js","sourceRoot":"","sources":["../../src/hosting/sftp-keys.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,EAAE,EAAE,MAAM,mBAAmB,CAAC;AACvC;;;GAGG;AAEH,OAAO,EAAE,SAAS,EAAE,aAAa,EAAE,UAAU,EAAE,YAAY,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AACxF,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAGzC,OAAO,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AAcnD,MAAM,GAAG,GAAG,sBAAsB,CAAC;AAEnC,MAAM,UAAU,YAAY,CAAC,EAAa,EAAE,QAAiB;IAC3D,MAAM,GAAG,GAAG,EAAE,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC,GAAG,CAAC,CAAC;IACxC,IAAI,GAAG,GAAoB,EAAE,CAAC;IAC9B,IAAI,CAAC;QACH,GAAG,GAAG,GAAG,CAAC,CAAC,CAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAqB,CAAC,CAAC,CAAC,EAAE,CAAC;IACxD,CAAC;IAAC,MAAM,CAAC;QACP,GAAG,GAAG,EAAE,CAAC;IACX,CAAC;IACD,IAAI,QAAQ;QAAE,OAAO,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC;IAChE,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,4BAA4B,CACnC,OAAe,EACf,QAAgB,EAChB,IAAqB;IAErB,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC;IACnD,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACpC,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,iBAAiB,CAAC,CAAC;IAC1C,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IAClF,aAAa,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,MAAM,CAAC,CAAC;IAC3E,IAAI,CAAC;QACH,SAAS,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QACvB,SAAS,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IACxB,CAAC;IAAC,MAAM,CAAC;QACP,YAAY;IACd,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,4BAA4B,CACnC,OAAe,EACf,IAAqB,EACrB,SAAkB;IAElB,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IACrC,SAAS,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACvC,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAAC;IAC7C,MAAM,KAAK,GAAG,IAAI;SACf,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,KAAK,OAAO,CAAC,CAAC;SAC9E,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IAC3B,uEAAuE;IACvE,aAAa,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,MAAM,CAAC,CAAC;IAC3E,IAAI,CAAC;QACH,SAAS,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QACzB,SAAS,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IACzB,CAAC;IAAC,MAAM,CAAC;QACP,YAAY;IACd,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,UAAU,CACxB,EAAa,EACb,OAAe,EACf,KAOC,EACD,IAAmB;IAEnB,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACrD,MAAM,SAAS,GAAG,KAAK,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC;IACzC,IAAI,CAAC,QAAQ,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;QAC/C,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,kBAAkB,CAAC,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;IACrE,CAAC;IAED,0BAA0B;IAC1B,IAAI,SAAS,GAAG,KAAK,CAAC,SAAS,EAAE,IAAI,EAAE,CAAC;IACxC,IAAI,SAAS,GAAG,KAAK,CAAC,SAAS,EAAE,IAAI,EAAE,CAAC;IACxC,IAAI,OAAO,GAAG,KAAK,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC;IACpC,IAAI,SAAS,IAAI,CAAC,CAAC,SAAS,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QAC1C,MAAM,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,SAAS,CAAC,CAAC;QAC/D,IAAI,CAAC,EAAE,CAAC;YACN,SAAS,GAAG,SAAS,IAAI,CAAC,CAAC,UAAU,CAAC;YACtC,OAAO,GAAG,OAAO,IAAI,CAAC,CAAC,QAAQ,CAAC;QAClC,CAAC;IACH,CAAC;IACD,kDAAkD;IAClD,MAAM,SAAS,GAAG,SAAS,IAAI,QAAQ,CAAC;IAExC,MAAM,GAAG,GAAkB;QACzB,EAAE,EAAE,UAAU,EAAE;QAChB,QAAQ,EAAE,SAAS;QACnB,SAAS;QACT,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACpC,SAAS;QACT,SAAS;QACT,OAAO;KACR,CAAC;IACF,MAAM,GAAG,GAAG,YAAY,CAAC,EAAE,CAAC,CAAC;IAC7B,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACjB,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;IAChD,EAAE,CAAC,OAAO,EAAE,CAAC;IAEb,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,MAAM,KAAK,GAAa,EAAE,CAAC;IAE3B,MAAM,WAAW,GAAG,4BAA4B,CAAC,OAAO,EAAE,SAAS,EAAE,GAAG,CAAC,CAAC;IAC1E,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IAC1B,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,kBAAkB,EAAE,EAAE,EAAE,EAAE,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC;IAE1D,IAAI,OAAO,EAAE,CAAC;QACZ,MAAM,QAAQ,GAAG,4BAA4B,CAC3C,OAAO,EACP,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,OAAO,IAAI,CAAC,CAAC,SAAS,KAAK,SAAS,CAAC,EACrE,SAAS,CACV,CAAC;QACF,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACvB,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,kBAAkB,EAAE,EAAE,EAAE,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC;IACzD,CAAC;SAAM,CAAC;QACN,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,kBAAkB,CAAC,CAAC,CAAC;IACrC,CAAC;IAED,KAAK,CAAC,IAAI,CACR,OAAO,IAAI,SAAS;QAClB,CAAC,CAAC,EAAE,CAAC,kBAAkB,EAAE,EAAE,EAAE,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC;QAC7C,CAAC,CAAC,EAAE,CAAC,kBAAkB,CAAC,CAC3B,CAAC;IAEF,KAAK,IAAI,CAAC,CAAC,mDAAmD;IAE9D,OAAO;QACL,EAAE,EAAE,IAAI;QACR,GAAG;QACH,KAAK;QACL,OAAO;KACR,CAAC;AACJ,CAAC;AAED,+CAA+C;AAC/C,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,IAAkB,EAClB,OAAe,EACf,SAAiB;IAEjB,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC;QAC7C,OAAO,CAAC,EAAE,CAAC,kBAAkB,CAAC,CAAC,CAAC;IAClC,CAAC;IACD,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IACrC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC;QAAE,OAAO,EAAE,CAAC;IACnC,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,UAAU,CAC7B;QACE,MAAM;QACN,IAAI;QACJ,YAAY,UAAU,CAAC,SAAS,CAAC,IAAI,UAAU,CAAC,SAAS,CAAC,IAAI,UAAU,CAAC,MAAM,CAAC,iBAAiB,UAAU,CAAC,MAAM,CAAC,iBAAiB,UAAU,CAAC,IAAI,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAAC,sBAAsB;KACtM,EACD,EAAE,SAAS,EAAE,MAAM,EAAE,CACtB,CAAC;IACF,OAAO,CAAC,CAAC,QAAQ,KAAK,CAAC;QACrB,CAAC,CAAC,CAAC,EAAE,CAAC,kBAAkB,EAAE,EAAE,EAAE,EAAE,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAC7D,CAAC,CAAC,CAAC,EAAE,CAAC,kBAAkB,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;AAC/E,CAAC;AAED,MAAM,UAAU,aAAa,CAC3B,EAAa,EACb,OAAe,EACf,EAAU;IAEV,MAAM,GAAG,GAAG,YAAY,CAAC,EAAE,CAAC,CAAC;IAC7B,MAAM,KAAK,GAAG,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;IAC3C,IAAI,CAAC,KAAK;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,kBAAkB,CAAC,CAAC,EAAE,CAAC;IAClE,MAAM,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;IAC5C,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;IACjD,EAAE,CAAC,OAAO,EAAE,CAAC;IACb,4BAA4B,CAAC,OAAO,EAAE,KAAK,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;IAC5D,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;QAClB,4BAA4B,CAC1B,KAAK,CAAC,OAAO,EACb,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,KAAK,CAAC,OAAO,IAAI,CAAC,CAAC,SAAS,KAAK,KAAK,CAAC,SAAS,CAAC,EAClF,KAAK,CAAC,SAAS,CAChB,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,kBAAkB,CAAC,CAAC,EAAE,CAAC;AACvD,CAAC;AAED,MAAM,UAAU,0BAA0B,CAAC,OAAe,EAAE,QAAgB;IAC1E,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,iBAAiB,CAAC,CAAC;IACvE,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,EAAE,CAAC;IACjC,OAAO,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;AACpC,CAAC"}

package/dist/hosting/software-catalog.d.ts

@@ -0,0 +1,56 @@
+/**
+ * Single catalog of host software required by admin features.
+ * Panel installs via software-install.ts — never user CLI.
+ */
+export type SoftwareId = 'vsftpd' | 'db-util' | 'nginx' | 'apache2' | 'certbot' | 'mysql-client' | 'mysql-server' | 'mariadb-server' | 'postgresql-client' | 'postgresql' | 'redis-tools' | 'redis-server' | 'ufw' | 'fail2ban' | 'postfix' | 'dovecot' | 'opendkim' | 'pdns-server' | 'git' | 'node' | 'pm2' | 'php' | 'python' | 'go' | 'rust' | 'java' | 'kotlin' | 'bun' | 'chromium' | 'wireguard' | 'openvpn' | 'shadowsocks' | 'tigervnc' | 'novnc' | 'vnc-desktop-xfce' | 'tigervnc-viewer';
+export type FeatureSoftwareKey = 'ftp' | 'nginx' | 'apache' | 'ssl' | 'mysql' | 'mariadb' | 'postgres' | 'redis' | 'firewall' | 'fail2ban' | 'dns' | 'email' | 'node' | 'php' | 'python' | 'go' | 'rust' | 'java' | 'kotlin' | 'bun' | 'git' | 'hostBrowse' | 'vpn' | 'wireguard' | 'openvpn' | 'outline' | 'vnc' | 'tigervnc' | 'novnc' | 'all';
+export type RuntimeInstaller = 'apt' | 'npm-global' | 'runtime-node' | 'runtime-php' | 'runtime-python' | 'runtime-go' | 'runtime-rust' | 'runtime-java' | 'runtime-kotlin' | 'runtime-bun';
+export interface SoftwareSpec {
+    id: SoftwareId;
+    /**
+     * Literal brand/product name (no i18n). Prefer this for proper nouns.
+     * When titleKey is set, title is only a fallback for tests/CLI without locale.
+     */
+    title: string;
+    /** Optional i18n key resolved under request locale (never call tl at module load). */
+    titleKey?: string;
+    /** Binaries probed via HostSoftwareProbe / resolveBin */
+    bins: string[];
+    /** Debian/Ubuntu packages */
+    aptPackages: string[];
+    /** npm packages for installer: npm-global (e.g. pm2) */
+    npmPackages?: string[];
+    /** systemctl units to enable --now after install */
+    units?: string[];
+    features: FeatureSoftwareKey[];
+    /** Use dedicated runtime installer instead of apt */
+    installer?: RuntimeInstaller;
+    /** Default runtime version when installer is runtime-* */
+    runtimeVersion?: string;
+    /**
+     * Data/config paths removable only under uninstall dataPolicy=purge
+     * (must pass isPurgePathAllowed at runtime).
+     */
+    dataPaths?: string[];
+    /**
+     * i18n keys under softwareLifecycle.impact.* describing user-facing impact.
+     */
+    impactKeys?: string[];
+    /** Refuse panel one-click uninstall (control-plane critical). */
+    uninstallProtected?: boolean;
+}
+/** Resolve display title under current request locale. */
+export declare function resolveSoftwareTitle(spec: SoftwareSpec): string;
+/**
+ * Static catalog — never call tl() when building this array (module-load freezes default locale).
+ */
+export declare const SOFTWARE_CATALOG: SoftwareSpec[];
+export declare function getSoftware(id: string): SoftwareSpec | undefined;
+/**
+ * Software tied to a panel feature.
+ * Specs tagged with features:['all'] are only returned when feature is exactly
+ * 'all' (full inventory / full-stack install) — never when filtering a single
+ * feature such as 'python' or 'nginx' (so git is not uninstalled with Python).
+ */
+export declare function listSoftwareForFeature(feature: string): SoftwareSpec[];
+//# sourceMappingURL=software-catalog.d.ts.map

package/dist/hosting/software-catalog.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"software-catalog.d.ts","sourceRoot":"","sources":["../../src/hosting/software-catalog.ts"],"names":[],"mappings":"AACA;;;GAGG;AAEH,MAAM,MAAM,UAAU,GAClB,QAAQ,GACR,SAAS,GACT,OAAO,GACP,SAAS,GACT,SAAS,GACT,cAAc,GACd,cAAc,GACd,gBAAgB,GAChB,mBAAmB,GACnB,YAAY,GACZ,aAAa,GACb,cAAc,GACd,KAAK,GACL,UAAU,GACV,SAAS,GACT,SAAS,GACT,UAAU,GACV,aAAa,GACb,KAAK,GACL,MAAM,GACN,KAAK,GACL,KAAK,GACL,QAAQ,GACR,IAAI,GACJ,MAAM,GACN,MAAM,GACN,QAAQ,GACR,KAAK,GACL,UAAU,GACV,WAAW,GACX,SAAS,GACT,aAAa,GACb,UAAU,GACV,OAAO,GACP,kBAAkB,GAClB,iBAAiB,CAAC;AAEtB,MAAM,MAAM,kBAAkB,GAC1B,KAAK,GACL,OAAO,GACP,QAAQ,GACR,KAAK,GACL,OAAO,GACP,SAAS,GACT,UAAU,GACV,OAAO,GACP,UAAU,GACV,UAAU,GACV,KAAK,GACL,OAAO,GACP,MAAM,GACN,KAAK,GACL,QAAQ,GACR,IAAI,GACJ,MAAM,GACN,MAAM,GACN,QAAQ,GACR,KAAK,GACL,KAAK,GACL,YAAY,GACZ,KAAK,GACL,WAAW,GACX,SAAS,GACT,SAAS,GACT,KAAK,GACL,UAAU,GACV,OAAO,GACP,KAAK,CAAC;AAEV,MAAM,MAAM,gBAAgB,GACxB,KAAK,GACL,YAAY,GACZ,cAAc,GACd,aAAa,GACb,gBAAgB,GAChB,YAAY,GACZ,cAAc,GACd,cAAc,GACd,gBAAgB,GAChB,aAAa,CAAC;AAElB,MAAM,WAAW,YAAY;IAC3B,EAAE,EAAE,UAAU,CAAC;IACf;;;OAGG;IACH,KAAK,EAAE,MAAM,CAAC;IACd,sFAAsF;IACtF,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,yDAAyD;IACzD,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,6BAA6B;IAC7B,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,wDAAwD;IACxD,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;IACvB,oDAAoD;IACpD,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;IACjB,QAAQ,EAAE,kBAAkB,EAAE,CAAC;IAC/B,qDAAqD;IACrD,SAAS,CAAC,EAAE,gBAAgB,CAAC;IAC7B,0DAA0D;IAC1D,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB;;;OAGG;IACH,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC;IACrB;;OAEG;IACH,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IACtB,iEAAiE;IACjE,kBAAkB,CAAC,EAAE,OAAO,CAAC;CAC9B;AAED,0DAA0D;AAC1D,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,YAAY,GAAG,MAAM,CAO/D;AAED;;GAEG;AACH,eAAO,MAAM,gBAAgB,EAAE,YAAY,EA0U1C,CAAC;AAEF,wBAAgB,WAAW,CAAC,EAAE,EAAE,MAAM,GAAG,YAAY,GAAG,SAAS,CAEhE;AAED;;;;;GAKG;AACH,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,MAAM,GAAG,YAAY,EAAE,CAKtE"}