ysk-server-core 1.0.0

package/dist/host-browse/stream-presets.js

@@ -0,0 +1,84 @@
+/**
+ * Host-browse live stream quality presets.
+ */
+export const STREAM_PRESETS = {
+    smooth: {
+        quality: 55,
+        scale: 0.75,
+        everyNthFrame: 2,
+        maxWidthCap: 1600,
+        maxHeightCap: 1000,
+    },
+    balanced: {
+        quality: 80,
+        scale: 1,
+        everyNthFrame: 1,
+        maxWidthCap: 1920,
+        maxHeightCap: 1200,
+    },
+    sharp: {
+        quality: 92,
+        scale: 1.25,
+        everyNthFrame: 1,
+        maxWidthCap: 1920,
+        maxHeightCap: 1200,
+    },
+};
+export function resolveStreamOptions(input) {
+    const rawPreset = input?.preset ?? 'balanced';
+    const named = rawPreset === 'smooth' || rawPreset === 'sharp' || rawPreset === 'balanced'
+        ? rawPreset
+        : 'balanced';
+    const base = STREAM_PRESETS[named];
+    const quality = clamp(input?.quality ?? base.quality, 40, 100);
+    const scale = clamp(input?.scale ?? base.scale, 0.5, 1.5);
+    const everyNthFrame = Math.max(1, Math.min(5, Math.floor(input?.everyNthFrame ?? base.everyNthFrame)));
+    const maxWidthCap = clamp(input?.maxWidthCap ?? base.maxWidthCap, 640, 2560);
+    const maxHeightCap = clamp(input?.maxHeightCap ?? base.maxHeightCap, 480, 1600);
+    const isCustom = rawPreset === 'custom' ||
+        (input?.quality != null && input.quality !== base.quality) ||
+        (input?.scale != null && input.scale !== base.scale);
+    return {
+        preset: isCustom && rawPreset === 'custom' ? 'custom' : named,
+        quality,
+        scale,
+        everyNthFrame,
+        maxWidthCap,
+        maxHeightCap,
+    };
+}
+export function clampViewport(w, h) {
+    return {
+        w: Math.floor(clamp(w, 320, 1920)),
+        h: Math.floor(clamp(h, 240, 1200)),
+    };
+}
+export function screencastSize(viewport, opts) {
+    const maxWidth = Math.min(opts.maxWidthCap, Math.max(320, Math.floor(viewport.w * opts.scale)));
+    const maxHeight = Math.min(opts.maxHeightCap, Math.max(240, Math.floor(viewport.h * opts.scale)));
+    return { maxWidth, maxHeight };
+}
+function clamp(n, lo, hi) {
+    if (!Number.isFinite(n))
+        return lo;
+    return Math.min(hi, Math.max(lo, n));
+}
+/** Heuristic: page title / url looks like bot / captcha interstitial */
+export function detectBotChallenge(title, url) {
+    const t = `${title} ${url}`.toLowerCase();
+    const needles = [
+        'just a moment',
+        'attention required',
+        'cf-browser-verification',
+        'checking your browser',
+        'captcha',
+        'cloudflare',
+        'access denied',
+        '\u8acb\u5b8c\u6210',
+        '\u5b89\u5168\u9a57\u8b49',
+        '\u4eba\u6a5f\u9a57\u8b49',
+        'verify you are human',
+    ];
+    return needles.some((n) => t.includes(n));
+}
+//# sourceMappingURL=stream-presets.js.map

package/dist/host-browse/stream-presets.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"stream-presets.js","sourceRoot":"","sources":["../../src/host-browse/stream-presets.ts"],"names":[],"mappings":"AAAA;;GAEG;AAgBH,MAAM,CAAC,MAAM,cAAc,GAA6E;IACtG,MAAM,EAAE;QACN,OAAO,EAAE,EAAE;QACX,KAAK,EAAE,IAAI;QACX,aAAa,EAAE,CAAC;QAChB,WAAW,EAAE,IAAI;QACjB,YAAY,EAAE,IAAI;KACnB;IACD,QAAQ,EAAE;QACR,OAAO,EAAE,EAAE;QACX,KAAK,EAAE,CAAC;QACR,aAAa,EAAE,CAAC;QAChB,WAAW,EAAE,IAAI;QACjB,YAAY,EAAE,IAAI;KACnB;IACD,KAAK,EAAE;QACL,OAAO,EAAE,EAAE;QACX,KAAK,EAAE,IAAI;QACX,aAAa,EAAE,CAAC;QAChB,WAAW,EAAE,IAAI;QACjB,YAAY,EAAE,IAAI;KACnB;CACF,CAAC;AAEF,MAAM,UAAU,oBAAoB,CAClC,KAA4D;IAE5D,MAAM,SAAS,GAAG,KAAK,EAAE,MAAM,IAAI,UAAU,CAAC;IAC9C,MAAM,KAAK,GACT,SAAS,KAAK,QAAQ,IAAI,SAAS,KAAK,OAAO,IAAI,SAAS,KAAK,UAAU;QACzE,CAAC,CAAC,SAAS;QACX,CAAC,CAAC,UAAU,CAAC;IACjB,MAAM,IAAI,GAAG,cAAc,CAAC,KAAK,CAAC,CAAC;IACnC,MAAM,OAAO,GAAG,KAAK,CAAC,KAAK,EAAE,OAAO,IAAI,IAAI,CAAC,OAAO,EAAE,EAAE,EAAE,GAAG,CAAC,CAAC;IAC/D,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,EAAE,KAAK,IAAI,IAAI,CAAC,KAAK,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;IAC1D,MAAM,aAAa,GAAG,IAAI,CAAC,GAAG,CAC5B,CAAC,EACD,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,aAAa,IAAI,IAAI,CAAC,aAAa,CAAC,CAAC,CACpE,CAAC;IACF,MAAM,WAAW,GAAG,KAAK,CAAC,KAAK,EAAE,WAAW,IAAI,IAAI,CAAC,WAAW,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;IAC7E,MAAM,YAAY,GAAG,KAAK,CAAC,KAAK,EAAE,YAAY,IAAI,IAAI,CAAC,YAAY,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;IAChF,MAAM,QAAQ,GACZ,SAAS,KAAK,QAAQ;QACtB,CAAC,KAAK,EAAE,OAAO,IAAI,IAAI,IAAI,KAAK,CAAC,OAAO,KAAK,IAAI,CAAC,OAAO,CAAC;QAC1D,CAAC,KAAK,EAAE,KAAK,IAAI,IAAI,IAAI,KAAK,CAAC,KAAK,KAAK,IAAI,CAAC,KAAK,CAAC,CAAC;IACvD,OAAO;QACL,MAAM,EAAE,QAAQ,IAAI,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK;QAC7D,OAAO;QACP,KAAK;QACL,aAAa;QACb,WAAW;QACX,YAAY;KACb,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,CAAS,EAAE,CAAS;IAChD,OAAO;QACL,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;QAClC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;KACnC,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,cAAc,CAC5B,QAAkC,EAClC,IAAmB;IAEnB,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CACvB,IAAI,CAAC,WAAW,EAChB,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CACnD,CAAC;IACF,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CACxB,IAAI,CAAC,YAAY,EACjB,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CACnD,CAAC;IACF,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC;AACjC,CAAC;AAED,SAAS,KAAK,CAAC,CAAS,EAAE,EAAU,EAAE,EAAU;IAC9C,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;QAAE,OAAO,EAAE,CAAC;IACnC,OAAO,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;AACvC,CAAC;AAED,wEAAwE;AACxE,MAAM,UAAU,kBAAkB,CAAC,KAAa,EAAE,GAAW;IAC3D,MAAM,CAAC,GAAG,GAAG,KAAK,IAAI,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC;IAC1C,MAAM,OAAO,GAAG;QACd,eAAe;QACf,oBAAoB;QACpB,yBAAyB;QACzB,uBAAuB;QACvB,SAAS;QACT,YAAY;QACZ,eAAe;QACf,oBAAoB;QACpB,0BAA0B;QAC1B,0BAA0B;QAC1B,sBAAsB;KACvB,CAAC;IACF,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;AAC5C,CAAC"}

package/dist/host-browse/types.d.ts

@@ -0,0 +1,151 @@
+/**
+ * Host-mediated proxy browser — shared types (core).
+ */
+export type HostBrowseMode = 'internet' | 'intranet';
+/** proxy = HTTP rewrite iframe; browser = host Chromium screencast */
+export type HostBrowseEngine = 'proxy' | 'browser';
+export type HostBrowseNavigateAction = 'goto' | 'reload' | 'back' | 'forward';
+export declare const HOST_BROWSE_DEFAULT_UA = "YSK-HostBrowse/1.0 (+https://ysk; host-mediated; privacy)";
+export declare const HOST_BROWSE_ACCEPT = "text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8";
+export declare const HOST_BROWSE_ACCEPT_LANGUAGE = "en-US,en;q=0.9";
+export interface HostBrowsePolicy {
+    /** Fixed User-Agent for all egress (never client UA). */
+    userAgent?: string;
+    acceptLanguage?: string;
+    /** Max response body bytes buffered (default 8 MiB). */
+    maxBodyBytes?: number;
+    /** Max request body for submit (default 1 MiB). */
+    maxRequestBodyBytes?: number;
+    /** Total fetch timeout ms (default 30_000). */
+    timeoutMs?: number;
+    /** Max redirects (default 5). */
+    maxRedirects?: number;
+    /** Idle session TTL ms (default 30 min). */
+    idleTtlMs?: number;
+    /** Absolute max session lifetime ms (default 4 h). */
+    maxLifetimeMs?: number;
+    /** Concurrent sessions per user (default 4). */
+    maxSessionsPerUser?: number;
+    /** Allow loopback in intranet mode (default false). */
+    allowLoopback?: boolean;
+    /** Extra allowed ports beyond 80/443 (intranet common admin ports). */
+    extraPorts?: number[];
+    /** Rate limit: max navigations per user per minute (default 60). */
+    rateLimitPerMinute?: number;
+    /** Override Chrome executable path */
+    chromePath?: string;
+    /** Max concurrent browser-engine sessions (default 4). */
+    maxBrowserSessions?: number;
+    /** Default engine when client omits (default auto→browser if chrome). */
+    defaultEngine?: HostBrowseEngine | 'auto';
+    /** Pass --no-sandbox to Chromium (containers). */
+    noSandbox?: boolean;
+    /** Content safety level (navigate + downloads). */
+    safetyLevel?: 'strict' | 'standard' | 'relaxed';
+    /** Extra hosts blocked by safety policy. */
+    blockHosts?: string[];
+    /** Allow potentially dangerous download extensions. */
+    allowDangerousDownloads?: boolean;
+    /**
+     * Stream page media audio (PCM over live WS). When true, Chromium is not launched muted.
+     * Capture uses HTMLMediaElement.captureStream (same-document media).
+     */
+    audioBridge?: boolean;
+}
+/** Panel-persisted settings (DB) — override process env. */
+export type HostBrowsePanelConfig = {
+    engine?: 'auto' | HostBrowseEngine;
+    chromePath?: string;
+    allowLoopback?: boolean;
+    noSandbox?: boolean;
+    safetyLevel?: 'strict' | 'standard' | 'relaxed';
+    /** Comma or newline separated hostnames */
+    blockHosts?: string[];
+    allowDangerousDownloads?: boolean;
+    audioBridge?: boolean;
+};
+export declare function mergeHostBrowsePolicy(base: HostBrowsePolicy, panel?: HostBrowsePanelConfig | null, env?: Record<string, string | undefined>): HostBrowsePolicy;
+export interface HostBrowseHistoryEntry {
+    url: string;
+    title?: string;
+    at: string;
+}
+export interface HostBrowseSessionMeta {
+    sessionId: string;
+    userId: string;
+    mode: HostBrowseMode;
+    engine: HostBrowseEngine;
+    contentToken: string;
+    userAgent: string;
+    createdAt: string;
+    expiresAt: string;
+    lastAccessAt: string;
+    cookieCount: number;
+    historyIndex: number;
+    historyLength: number;
+    currentUrl: string | null;
+    canGoBack: boolean;
+    canGoForward: boolean;
+}
+export interface HostBrowseFetchResult {
+    ok: boolean;
+    status: number;
+    finalUrl: string;
+    contentType: string | null;
+    bytes: number;
+    title?: string;
+    warnings: string[];
+    /** Absolute path for iframe content (proxy engine; includes content token). */
+    contentPath: string;
+    latencyMs: number;
+    /** True when body is HTML and was rewritten for proxy. */
+    rewritten: boolean;
+    blocked?: boolean;
+    blockReason?: string;
+    engine: HostBrowseEngine;
+    canGoBack?: boolean;
+    canGoForward?: boolean;
+    historyIndex?: number;
+    historyLength?: number;
+    cookieCount?: number;
+    /** Stable error / warning codes for UI (BOT_CHALLENGE, TIMEOUT, …) */
+    errorCode?: string;
+}
+export interface HostBrowseContentResult {
+    status: number;
+    finalUrl: string;
+    contentType: string;
+    body: Buffer;
+    rewritten: boolean;
+    warnings: string[];
+    headers: Record<string, string>;
+}
+export interface HostBrowseCapabilities {
+    chromeAvailable: boolean;
+    chromePath: string | null;
+    engines: HostBrowseEngine[];
+    defaultEngine: HostBrowseEngine;
+    reason?: string;
+    /** Raw panel settings (may be empty) */
+    panel?: HostBrowsePanelConfig;
+    /** Effective values after merge with env */
+    effective?: {
+        engine: 'auto' | HostBrowseEngine;
+        chromePath: string;
+        allowLoopback: boolean;
+        noSandbox: boolean;
+    };
+    /**
+     * Honest media surface: browser engine streams visual frames only.
+     * Audio is intentionally not bridged to the panel (phase-2).
+     */
+    media?: {
+        video: 'screencast_jpeg' | 'proxy_iframe';
+        audio: 'not_bridged' | 'pcm_ws';
+        chromeAudioMuted: boolean;
+        policy: 'visual_only' | 'visual_plus_pcm_audio';
+        audioBridge: boolean;
+        audioLimits?: string;
+    };
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/host-browse/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/host-browse/types.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,MAAM,MAAM,cAAc,GAAG,UAAU,GAAG,UAAU,CAAC;AAErD,sEAAsE;AACtE,MAAM,MAAM,gBAAgB,GAAG,OAAO,GAAG,SAAS,CAAC;AAEnD,MAAM,MAAM,wBAAwB,GAAG,MAAM,GAAG,QAAQ,GAAG,MAAM,GAAG,SAAS,CAAC;AAE9E,eAAO,MAAM,sBAAsB,8DAC0B,CAAC;AAE9D,eAAO,MAAM,kBAAkB,0FAC0D,CAAC;AAE1F,eAAO,MAAM,2BAA2B,mBAAmB,CAAC;AAE5D,MAAM,WAAW,gBAAgB;IAC/B,yDAAyD;IACzD,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,wDAAwD;IACxD,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,mDAAmD;IACnD,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,+CAA+C;IAC/C,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,iCAAiC;IACjC,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,4CAA4C;IAC5C,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,sDAAsD;IACtD,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,gDAAgD;IAChD,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,uDAAuD;IACvD,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,uEAAuE;IACvE,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IACtB,oEAAoE;IACpE,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,sCAAsC;IACtC,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,0DAA0D;IAC1D,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,yEAAyE;IACzE,aAAa,CAAC,EAAE,gBAAgB,GAAG,MAAM,CAAC;IAC1C,kDAAkD;IAClD,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,mDAAmD;IACnD,WAAW,CAAC,EAAE,QAAQ,GAAG,UAAU,GAAG,SAAS,CAAC;IAChD,4CAA4C;IAC5C,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IACtB,uDAAuD;IACvD,uBAAuB,CAAC,EAAE,OAAO,CAAC;IAClC;;;OAGG;IACH,WAAW,CAAC,EAAE,OAAO,CAAC;CACvB;AAED,4DAA4D;AAC5D,MAAM,MAAM,qBAAqB,GAAG;IAClC,MAAM,CAAC,EAAE,MAAM,GAAG,gBAAgB,CAAC;IACnC,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,WAAW,CAAC,EAAE,QAAQ,GAAG,UAAU,GAAG,SAAS,CAAC;IAChD,2CAA2C;IAC3C,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IACtB,uBAAuB,CAAC,EAAE,OAAO,CAAC;IAClC,WAAW,CAAC,EAAE,OAAO,CAAC;CACvB,CAAC;AAEF,wBAAgB,qBAAqB,CACnC,IAAI,EAAE,gBAAgB,EACtB,KAAK,CAAC,EAAE,qBAAqB,GAAG,IAAI,EACpC,GAAG,GAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAe,GACpD,gBAAgB,CAyClB;AAED,MAAM,WAAW,sBAAsB;IACrC,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,EAAE,EAAE,MAAM,CAAC;CACZ;AAED,MAAM,WAAW,qBAAqB;IACpC,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,cAAc,CAAC;IACrB,MAAM,EAAE,gBAAgB,CAAC;IACzB,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;IACrB,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB,aAAa,EAAE,MAAM,CAAC;IACtB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,SAAS,EAAE,OAAO,CAAC;IACnB,YAAY,EAAE,OAAO,CAAC;CACvB;AAED,MAAM,WAAW,qBAAqB;IACpC,EAAE,EAAE,OAAO,CAAC;IACZ,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,+EAA+E;IAC/E,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,0DAA0D;IAC1D,SAAS,EAAE,OAAO,CAAC;IACnB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,MAAM,EAAE,gBAAgB,CAAC;IACzB,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,sEAAsE;IACtE,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,uBAAuB;IACtC,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,OAAO,CAAC;IACnB,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACjC;AAED,MAAM,WAAW,sBAAsB;IACrC,eAAe,EAAE,OAAO,CAAC;IACzB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,OAAO,EAAE,gBAAgB,EAAE,CAAC;IAC5B,aAAa,EAAE,gBAAgB,CAAC;IAChC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,wCAAwC;IACxC,KAAK,CAAC,EAAE,qBAAqB,CAAC;IAC9B,4CAA4C;IAC5C,SAAS,CAAC,EAAE;QACV,MAAM,EAAE,MAAM,GAAG,gBAAgB,CAAC;QAClC,UAAU,EAAE,MAAM,CAAC;QACnB,aAAa,EAAE,OAAO,CAAC;QACvB,SAAS,EAAE,OAAO,CAAC;KACpB,CAAC;IACF;;;OAGG;IACH,KAAK,CAAC,EAAE;QACN,KAAK,EAAE,iBAAiB,GAAG,cAAc,CAAC;QAC1C,KAAK,EAAE,aAAa,GAAG,QAAQ,CAAC;QAChC,gBAAgB,EAAE,OAAO,CAAC;QAC1B,MAAM,EAAE,aAAa,GAAG,uBAAuB,CAAC;QAChD,WAAW,EAAE,OAAO,CAAC;QACrB,WAAW,CAAC,EAAE,MAAM,CAAC;KACtB,CAAC;CACH"}

package/dist/host-browse/types.js

@@ -0,0 +1,42 @@
+/**
+ * Host-mediated proxy browser — shared types (core).
+ */
+export const HOST_BROWSE_DEFAULT_UA = 'YSK-HostBrowse/1.0 (+https://ysk; host-mediated; privacy)';
+export const HOST_BROWSE_ACCEPT = 'text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8';
+export const HOST_BROWSE_ACCEPT_LANGUAGE = 'en-US,en;q=0.9';
+export function mergeHostBrowsePolicy(base, panel, env = process.env) {
+    const eng = panel?.engine ??
+        env.YSK_HOST_BROWSE_ENGINE ??
+        base.defaultEngine ??
+        'auto';
+    const level = panel?.safetyLevel === 'strict' ||
+        panel?.safetyLevel === 'standard' ||
+        panel?.safetyLevel === 'relaxed'
+        ? panel.safetyLevel
+        : base.safetyLevel ?? 'standard';
+    return {
+        ...base,
+        chromePath: (panel?.chromePath && panel.chromePath.trim()) ||
+            env.YSK_HOST_BROWSE_CHROME?.trim() ||
+            base.chromePath,
+        allowLoopback: panel?.allowLoopback ??
+            (env.YSK_HOST_BROWSE_LOOPBACK === '1' || env.YSK_HOST_BROWSE_LOOPBACK === 'true'
+                ? true
+                : base.allowLoopback),
+        noSandbox: panel?.noSandbox ??
+            (env.YSK_HOST_BROWSE_NO_SANDBOX === '1' || env.YSK_HOST_BROWSE_NO_SANDBOX === 'true'
+                ? true
+                : base.noSandbox),
+        defaultEngine: eng === 'auto' ? 'auto' : eng,
+        safetyLevel: level,
+        blockHosts: panel?.blockHosts?.length
+            ? panel.blockHosts.map((h) => h.trim().toLowerCase()).filter(Boolean)
+            : base.blockHosts,
+        allowDangerousDownloads: panel?.allowDangerousDownloads ?? base.allowDangerousDownloads ?? false,
+        audioBridge: panel?.audioBridge ??
+            (env.YSK_HOST_BROWSE_AUDIO === '1' || env.YSK_HOST_BROWSE_AUDIO === 'true'
+                ? true
+                : base.audioBridge ?? false),
+    };
+}
+//# sourceMappingURL=types.js.map

package/dist/host-browse/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/host-browse/types.ts"],"names":[],"mappings":"AAAA;;GAEG;AASH,MAAM,CAAC,MAAM,sBAAsB,GACjC,2DAA2D,CAAC;AAE9D,MAAM,CAAC,MAAM,kBAAkB,GAC7B,uFAAuF,CAAC;AAE1F,MAAM,CAAC,MAAM,2BAA2B,GAAG,gBAAgB,CAAC;AA4D5D,MAAM,UAAU,qBAAqB,CACnC,IAAsB,EACtB,KAAoC,EACpC,MAA0C,OAAO,CAAC,GAAG;IAErD,MAAM,GAAG,GACP,KAAK,EAAE,MAAM;QACZ,GAAG,CAAC,sBAAsE;QAC3E,IAAI,CAAC,aAAa;QAClB,MAAM,CAAC;IACT,MAAM,KAAK,GACT,KAAK,EAAE,WAAW,KAAK,QAAQ;QAC/B,KAAK,EAAE,WAAW,KAAK,UAAU;QACjC,KAAK,EAAE,WAAW,KAAK,SAAS;QAC9B,CAAC,CAAC,KAAK,CAAC,WAAW;QACnB,CAAC,CAAC,IAAI,CAAC,WAAW,IAAI,UAAU,CAAC;IACrC,OAAO;QACL,GAAG,IAAI;QACP,UAAU,EACR,CAAC,KAAK,EAAE,UAAU,IAAI,KAAK,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC;YAC9C,GAAG,CAAC,sBAAsB,EAAE,IAAI,EAAE;YAClC,IAAI,CAAC,UAAU;QACjB,aAAa,EACX,KAAK,EAAE,aAAa;YACpB,CAAC,GAAG,CAAC,wBAAwB,KAAK,GAAG,IAAI,GAAG,CAAC,wBAAwB,KAAK,MAAM;gBAC9E,CAAC,CAAC,IAAI;gBACN,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC;QACzB,SAAS,EACP,KAAK,EAAE,SAAS;YAChB,CAAC,GAAG,CAAC,0BAA0B,KAAK,GAAG,IAAI,GAAG,CAAC,0BAA0B,KAAK,MAAM;gBAClF,CAAC,CAAC,IAAI;gBACN,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC;QACrB,aAAa,EAAE,GAAG,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG;QAC5C,WAAW,EAAE,KAAK;QAClB,UAAU,EAAE,KAAK,EAAE,UAAU,EAAE,MAAM;YACnC,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC;YACrE,CAAC,CAAC,IAAI,CAAC,UAAU;QACnB,uBAAuB,EACrB,KAAK,EAAE,uBAAuB,IAAI,IAAI,CAAC,uBAAuB,IAAI,KAAK;QACzE,WAAW,EACT,KAAK,EAAE,WAAW;YAClB,CAAC,GAAG,CAAC,qBAAqB,KAAK,GAAG,IAAI,GAAG,CAAC,qBAAqB,KAAK,MAAM;gBACxE,CAAC,CAAC,IAAI;gBACN,CAAC,CAAC,IAAI,CAAC,WAAW,IAAI,KAAK,CAAC;KACjC,CAAC;AACJ,CAAC"}

package/dist/hosting/adminer.d.ts

@@ -0,0 +1,21 @@
+import type { HostExecutor } from '../host/executor.js';
+export declare function applyAdminer(input: {
+    dataDir: string;
+    host: HostExecutor;
+    domain?: string;
+    download?: boolean;
+    /** Copy managed nginx conf to /etc/nginx/conf.d + nginx -t + reload */
+    applySystem?: boolean;
+}): Promise<{
+    ok: boolean;
+    path?: string;
+    nginxPath?: string;
+    urlHint?: string;
+    notes: string[];
+    written: string[];
+    requiresExecute?: boolean;
+    blocked?: boolean;
+    blockMessage?: string;
+    apply_status: 'written' | 'applied' | 'blocked' | 'failed';
+}>;
+//# sourceMappingURL=adminer.d.ts.map

package/dist/hosting/adminer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"adminer.d.ts","sourceRoot":"","sources":["../../src/hosting/adminer.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAOxD,wBAAsB,YAAY,CAAC,KAAK,EAAE;IACxC,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,YAAY,CAAC;IACnB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,uEAAuE;IACvE,WAAW,CAAC,EAAE,OAAO,CAAC;CACvB,GAAG,OAAO,CAAC;IACV,EAAE,EAAE,OAAO,CAAC;IACZ,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,YAAY,EAAE,SAAS,GAAG,SAAS,GAAG,SAAS,GAAG,QAAQ,CAAC;CAC5D,CAAC,CAkKD"}

package/dist/hosting/adminer.js

@@ -0,0 +1,183 @@
+import { tl } from 'ysk-server-shared';
+/**
+ * Adminer (lightweight DB browser) — managed download under dataDir + nginx plan.
+ * Honest: download needs EXECUTE+network; system nginx needs root + applySystem.
+ */
+import { copyFileSync, mkdirSync, writeFileSync, existsSync } from 'node:fs';
+import { basename, join } from 'node:path';
+import { writeManagedNginxConf } from './nginx-sync.js';
+const ADMINER_URL = process.env.YSK_ADMINER_URL ??
+    'https://github.com/vrana/adminer/releases/download/v4.8.1/adminer-4.8.1.php';
+export async function applyAdminer(input) {
+    const notes = [];
+    const written = [];
+    const dir = join(input.dataDir, 'db', 'adminer');
+    mkdirSync(dir, { recursive: true });
+    const path = join(dir, 'adminer.php');
+    const domain = (input.domain ?? 'adminer.local').trim().toLowerCase();
+    if (input.download !== false) {
+        if (!input.host.executeEnabled()) {
+            // still write placeholder
+            if (!existsSync(path)) {
+                writeFileSync(path, `<?php\n// YSK Adminer placeholder — enable YSK_EXECUTE and re-run download\necho "Adminer not downloaded";\n`, 'utf8');
+                written.push(path);
+            }
+            // still write nginx plan so operator can inspect
+            const confEarly = renderAdminerNginx(domain, dir);
+            const nginxEarly = writeManagedNginxConf(input.dataDir, `adminer-${domain.replace(/\./g, '-')}.conf`, confEarly);
+            written.push(nginxEarly);
+            return {
+                ok: false,
+                path,
+                nginxPath: nginxEarly,
+                urlHint: `http://${domain}/adminer.php`,
+                notes: [
+                    tl('notes.auto.n1141'),
+                    tl('notes.auto.t0351', { v0: (path) }),
+                    tl('notes.auto.t0352', { v0: (nginxEarly) }),
+                    tl('notes.auto.n1215'),
+                ],
+                written,
+                requiresExecute: true,
+                blocked: true,
+                blockMessage: tl('notes.auto.n1558'),
+                apply_status: 'blocked'
+            };
+        }
+        const r = await input.host.runCommand([
+            'bash',
+            '-c',
+            `curl -fsSL ${JSON.stringify(ADMINER_URL)} -o ${JSON.stringify(path)} 2>&1`,
+        ], { timeoutMs: 120_000 });
+        if (r.exitCode !== 0 || !existsSync(path)) {
+            notes.push(tl('notes.auto.t0353', { v0: ((r.stderr || r.stdout).slice(0, 200)) }));
+            return {
+                ok: false,
+                notes,
+                written,
+                path,
+                apply_status: 'failed'
+            };
+        }
+        written.push(path);
+        notes.push(tl('notes.auto.t0354', { v0: (path) }));
+    }
+    else if (!existsSync(path)) {
+        return {
+            ok: false,
+            notes: [tl('notes.auto.n0074')],
+            written,
+            apply_status: 'failed'
+        };
+    }
+    else {
+        notes.push(tl('notes.auto.t0355', { v0: (path) }));
+    }
+    const conf = renderAdminerNginx(domain, dir);
+    const nginxPath = writeManagedNginxConf(input.dataDir, `adminer-${domain.replace(/\./g, '-')}.conf`, conf);
+    written.push(nginxPath);
+    notes.push(tl('notes.auto.t0356', { v0: (nginxPath) }));
+    notes.push(tl('notes.auto.n1429'));
+    if (!input.applySystem) {
+        notes.push(tl('notes.auto.n1230'));
+        return {
+            ok: true,
+            path,
+            nginxPath,
+            urlHint: `http://${domain}/adminer.php`,
+            notes,
+            written,
+            apply_status: 'written'
+        };
+    }
+    if (!input.host.executeEnabled() || !input.host.isRoot()) {
+        notes.push(tl('notes.auto.n0005'));
+        return {
+            ok: false,
+            path,
+            nginxPath,
+            urlHint: `http://${domain}/adminer.php`,
+            notes,
+            written,
+            blocked: true,
+            requiresExecute: true,
+            blockMessage: tl('notes.auto.n1587'),
+            apply_status: 'blocked'
+        };
+    }
+    const sysDir = '/etc/nginx/conf.d';
+    const dest = join(sysDir, `ysk-${basename(nginxPath)}`);
+    try {
+        mkdirSync(sysDir, { recursive: true });
+        copyFileSync(nginxPath, dest);
+        written.push(dest);
+        notes.push(tl('notes.auto.t0357', { v0: (dest) }));
+    }
+    catch (e) {
+        notes.push(tl('notes.tpl.copyFailed2', { detail: e instanceof Error ? e.message : String(e) }));
+        return {
+            ok: false,
+            path,
+            nginxPath,
+            notes,
+            written,
+            apply_status: 'failed'
+        };
+    }
+    const test = await input.host.runCommand(['nginx', '-t'], { timeoutMs: 15_000 });
+    if (test.exitCode !== 0) {
+        notes.push(tl('notes.tpl.nginxTestFailed', { detail: (test.stderr || test.stdout).slice(0, 200) }));
+        return {
+            ok: false,
+            path,
+            nginxPath,
+            notes,
+            written,
+            apply_status: 'failed'
+        };
+    }
+    notes.push('nginx -t ok');
+    const reload = await input.host.runCommand(['systemctl', 'reload', 'nginx'], {
+        timeoutMs: 15_000
+    });
+    if (reload.exitCode !== 0) {
+        notes.push(tl('notes.tpl.reloadFailed2', { detail: (reload.stderr || reload.stdout).slice(0, 160) }));
+        return {
+            ok: false,
+            path,
+            nginxPath,
+            urlHint: `http://${domain}/adminer.php`,
+            notes,
+            written,
+            apply_status: 'failed'
+        };
+    }
+    notes.push(tl('notes.auto.n0340'));
+    return {
+        ok: true,
+        path,
+        nginxPath,
+        urlHint: `http://${domain}/adminer.php`,
+        notes,
+        written,
+        apply_status: 'applied'
+    };
+}
+function renderAdminerNginx(domain, rootDir) {
+    return `server {
+  listen 80;
+  listen [::]:80;
+  server_name ${domain};
+  root ${rootDir};
+  index adminer.php;
+  location / {
+    try_files $uri $uri/ /adminer.php?$query_string;
+  }
+  location ~ \\.php$ {
+    include snippets/fastcgi-php.conf;
+    fastcgi_pass unix:/run/php/php8.2-fpm.sock;
+  }
+}
+`;
+}
+//# sourceMappingURL=adminer.js.map

package/dist/hosting/adminer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"adminer.js","sourceRoot":"","sources":["../../src/hosting/adminer.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,EAAE,EAAE,MAAM,mBAAmB,CAAC;AACvC;;;GAGG;AAEH,OAAO,EAAE,YAAY,EAAE,SAAS,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAC7E,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAE3C,OAAO,EAAE,qBAAqB,EAAE,MAAM,iBAAiB,CAAC;AAExD,MAAM,WAAW,GACf,OAAO,CAAC,GAAG,CAAC,eAAe;IAC3B,6EAA6E,CAAC;AAEhF,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,KAOlC;IAYC,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,IAAI,EAAE,SAAS,CAAC,CAAC;IACjD,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACpC,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,aAAa,CAAC,CAAC;IACtC,MAAM,MAAM,GAAG,CAAC,KAAK,CAAC,MAAM,IAAI,eAAe,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAEtE,IAAI,KAAK,CAAC,QAAQ,KAAK,KAAK,EAAE,CAAC;QAC7B,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,cAAc,EAAE,EAAE,CAAC;YACjC,0BAA0B;YAC1B,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;gBACtB,aAAa,CACX,IAAI,EACJ,8GAA8G,EAC9G,MAAM,CACP,CAAC;gBACF,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACrB,CAAC;YACD,iDAAiD;YACjD,MAAM,SAAS,GAAG,kBAAkB,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;YAClD,MAAM,UAAU,GAAG,qBAAqB,CACtC,KAAK,CAAC,OAAO,EACb,WAAW,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,OAAO,EAC5C,SAAS,CACV,CAAC;YACF,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YACzB,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,IAAI;gBACJ,SAAS,EAAE,UAAU;gBACrB,OAAO,EAAE,UAAU,MAAM,cAAc;gBACvC,KAAK,EAAE;oBACL,EAAE,CAAC,kBAAkB,CAAC;oBACtB,EAAE,CAAC,kBAAkB,EAAE,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;oBACtC,EAAE,CAAC,kBAAkB,EAAE,EAAE,EAAE,EAAE,CAAC,UAAU,CAAC,EAAE,CAAC;oBAC5C,EAAE,CAAC,kBAAkB,CAAC;iBACvB;gBACD,OAAO;gBACP,eAAe,EAAE,IAAI;gBACrB,OAAO,EAAE,IAAI;gBACb,YAAY,EAAE,EAAE,CAAC,kBAAkB,CAAC;gBACpC,YAAY,EAAE,SAAS;aAAE,CAAC;QAC9B,CAAC;QACD,MAAM,CAAC,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,UAAU,CACnC;YACE,MAAM;YACN,IAAI;YACJ,cAAc,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,OAAO,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO;SAC5E,EACD,EAAE,SAAS,EAAE,OAAO,EAAE,CACvB,CAAC;QACF,IAAI,CAAC,CAAC,QAAQ,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YAC1C,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,kBAAkB,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;YACnF,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,KAAK;gBACL,OAAO;gBACP,IAAI;gBACJ,YAAY,EAAE,QAAQ;aAAE,CAAC;QAC7B,CAAC;QACD,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACnB,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,kBAAkB,EAAE,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;IACrD,CAAC;SAAM,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QAC7B,OAAO;YACL,EAAE,EAAE,KAAK;YACT,KAAK,EAAE,CAAC,EAAE,CAAC,kBAAkB,CAAC,CAAC;YAC/B,OAAO;YACP,YAAY,EAAE,QAAQ;SAAE,CAAC;IAC7B,CAAC;SAAM,CAAC;QACN,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,kBAAkB,EAAE,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;IACrD,CAAC;IAED,MAAM,IAAI,GAAG,kBAAkB,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAC7C,MAAM,SAAS,GAAG,qBAAqB,CACrC,KAAK,CAAC,OAAO,EACb,WAAW,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,OAAO,EAC5C,IAAI,CACL,CAAC;IACF,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IACxB,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,kBAAkB,EAAE,EAAE,EAAE,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC;IACxD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,kBAAkB,CAAC,CAAC,CAAC;IAEnC,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC;QACvB,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,kBAAkB,CAAC,CAAC,CAAC;QACnC,OAAO;YACL,EAAE,EAAE,IAAI;YACR,IAAI;YACJ,SAAS;YACT,OAAO,EAAE,UAAU,MAAM,cAAc;YACvC,KAAK;YACL,OAAO;YACP,YAAY,EAAE,SAAS;SAAE,CAAC;IAC9B,CAAC;IAED,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,cAAc,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC;QACzD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,kBAAkB,CAAC,CAAC,CAAC;QACnC,OAAO;YACL,EAAE,EAAE,KAAK;YACT,IAAI;YACJ,SAAS;YACT,OAAO,EAAE,UAAU,MAAM,cAAc;YACvC,KAAK;YACL,OAAO;YACP,OAAO,EAAE,IAAI;YACb,eAAe,EAAE,IAAI;YACrB,YAAY,EAAE,EAAE,CAAC,kBAAkB,CAAC;YACpC,YAAY,EAAE,SAAS;SAAE,CAAC;IAC9B,CAAC;IAED,MAAM,MAAM,GAAG,mBAAmB,CAAC;IACnC,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,EAAE,OAAO,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;IACxD,IAAI,CAAC;QACH,SAAS,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACvC,YAAY,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;QAC9B,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACnB,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,kBAAkB,EAAE,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;IACrD,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,uBAAuB,EAAE,EAAE,MAAM,EAAE,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QAChG,OAAO;YACL,EAAE,EAAE,KAAK;YACT,IAAI;YACJ,SAAS;YACT,KAAK;YACL,OAAO;YACP,YAAY,EAAE,QAAQ;SAAE,CAAC;IAC7B,CAAC;IAED,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,OAAO,EAAE,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,CAAC;IACjF,IAAI,IAAI,CAAC,QAAQ,KAAK,CAAC,EAAE,CAAC;QACxB,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,2BAA2B,EAAE,EAAE,MAAM,EAAE,CAAC,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;QACpG,OAAO;YACL,EAAE,EAAE,KAAK;YACT,IAAI;YACJ,SAAS;YACT,KAAK;YACL,OAAO;YACP,YAAY,EAAE,QAAQ;SAAE,CAAC;IAC7B,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;IAC1B,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,WAAW,EAAE,QAAQ,EAAE,OAAO,CAAC,EAAE;QAC3E,SAAS,EAAE,MAAM;KAAE,CAAC,CAAC;IACvB,IAAI,MAAM,CAAC,QAAQ,KAAK,CAAC,EAAE,CAAC;QAC1B,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,yBAAyB,EAAE,EAAE,MAAM,EAAE,CAAC,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;QACtG,OAAO;YACL,EAAE,EAAE,KAAK;YACT,IAAI;YACJ,SAAS;YACT,OAAO,EAAE,UAAU,MAAM,cAAc;YACvC,KAAK;YACL,OAAO;YACP,YAAY,EAAE,QAAQ;SAAE,CAAC;IAC7B,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,kBAAkB,CAAC,CAAC,CAAC;IACnC,OAAO;QACL,EAAE,EAAE,IAAI;QACR,IAAI;QACJ,SAAS;QACT,OAAO,EAAE,UAAU,MAAM,cAAc;QACvC,KAAK;QACL,OAAO;QACP,YAAY,EAAE,SAAS;KAAE,CAAC;AAC9B,CAAC;AAED,SAAS,kBAAkB,CAAC,MAAc,EAAE,OAAe;IACzD,OAAO;;;gBAGO,MAAM;SACb,OAAO;;;;;;;;;;CAUf,CAAC;AACF,CAAC"}

package/dist/hosting/apache/artifacts.d.ts

@@ -0,0 +1,57 @@
+/**
+ * Apache disk-artifact (orphan conf) remove + ServerName clash retirement.
+ */
+import type { HostExecutor } from '../../host/executor.js';
+export declare function sanitizeApacheConfBasename(file: string): string | null;
+export type RemoveApacheArtifactResult = {
+    ok: boolean;
+    notes: string[];
+    removed?: string;
+    blocked?: boolean;
+    requiresExecute?: boolean;
+    code?: 'not_found' | 'owned' | 'invalid' | 'conflict_projects';
+};
+/**
+ * Remove an unclaimed managed conf under dataDir/apache/sites.
+ * Optionally disable/remove the system twin `ysk-{file}` when execute is on.
+ */
+export declare function removeApacheArtifact(opts: {
+    dataDir: string;
+    host: HostExecutor;
+    /** Basename or `artifact:basename` id */
+    fileOrId: string;
+    projects?: Array<Record<string, unknown>>;
+    /** When true, skip system disable (caller batches reload). */
+    skipSystem?: boolean;
+}): Promise<RemoveApacheArtifactResult>;
+/**
+ * Remove all artifact rows that conflict on ServerName with an owned row.
+ * Does not delete when the only conflict is between two projects.
+ */
+export declare function cleanupApacheServerNameConflicts(opts: {
+    dataDir: string;
+    host: HostExecutor;
+    projects: Array<Record<string, unknown>>;
+}): Promise<{
+    ok: boolean;
+    notes: string[];
+    removed: string[];
+    blocked?: boolean;
+    requiresExecute?: boolean;
+}>;
+/**
+ * After writing the authoritative project conf, retire other dataDir confs
+ * with the same ServerName (orphans). Never deletes another live project's conf.
+ */
+export declare function retireOrphanApacheConfsForDomain(opts: {
+    dataDir: string;
+    host: HostExecutor;
+    domain: string;
+    /** Basename of the conf just written (keep). */
+    keepBasename: string;
+    projects: Array<Record<string, unknown>>;
+}): Promise<{
+    notes: string[];
+    removed: string[];
+}>;
+//# sourceMappingURL=artifacts.d.ts.map

package/dist/hosting/apache/artifacts.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"artifacts.d.ts","sourceRoot":"","sources":["../../../src/hosting/apache/artifacts.ts"],"names":[],"mappings":"AAAA;;GAEG;AAIH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AAU3D,wBAAgB,0BAA0B,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAStE;AAED,MAAM,MAAM,0BAA0B,GAAG;IACvC,EAAE,EAAE,OAAO,CAAC;IACZ,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,IAAI,CAAC,EAAE,WAAW,GAAG,OAAO,GAAG,SAAS,GAAG,mBAAmB,CAAC;CAChE,CAAC;AAEF;;;GAGG;AACH,wBAAsB,oBAAoB,CAAC,IAAI,EAAE;IAC/C,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,YAAY,CAAC;IACnB,yCAAyC;IACzC,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IAC1C,8DAA8D;IAC9D,UAAU,CAAC,EAAE,OAAO,CAAC;CACtB,GAAG,OAAO,CAAC,0BAA0B,CAAC,CAqEtC;AAED;;;GAGG;AACH,wBAAsB,gCAAgC,CAAC,IAAI,EAAE;IAC3D,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,YAAY,CAAC;IACnB,QAAQ,EAAE,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;CAC1C,GAAG,OAAO,CAAC;IACV,EAAE,EAAE,OAAO,CAAC;IACZ,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,eAAe,CAAC,EAAE,OAAO,CAAC;CAC3B,CAAC,CA+ED;AAED;;;GAGG;AACH,wBAAsB,gCAAgC,CAAC,IAAI,EAAE;IAC3D,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,YAAY,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;IACf,gDAAgD;IAChD,YAAY,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;CAC1C,GAAG,OAAO,CAAC;IAAE,KAAK,EAAE,MAAM,EAAE,CAAC;IAAC,OAAO,EAAE,MAAM,EAAE,CAAA;CAAE,CAAC,CAoElD"}