ysk-server-core 1.0.0

package/dist/hosting/apache/artifacts.js

@@ -0,0 +1,309 @@
+/**
+ * Apache disk-artifact (orphan conf) remove + ServerName clash retirement.
+ */
+import { existsSync, readdirSync, readFileSync, unlinkSync } from 'node:fs';
+import { join } from 'node:path';
+import { tl } from 'ysk-server-shared';
+import { listMergedApacheSites, listOwnedApacheConfBasenames, parseServerNameFromConf, } from './sites-list.js';
+const SAFE_CONF = /^[A-Za-z0-9._-]+\.conf$/;
+export function sanitizeApacheConfBasename(file) {
+    let raw = String(file ?? '').trim();
+    if (raw.startsWith('artifact:'))
+        raw = raw.slice('artifact:'.length);
+    // Reject path segments — only bare basenames allowed.
+    if (!raw || raw.includes('/') || raw.includes('\\') || raw.includes('..')) {
+        return null;
+    }
+    if (!SAFE_CONF.test(raw))
+        return null;
+    return raw;
+}
+/**
+ * Remove an unclaimed managed conf under dataDir/apache/sites.
+ * Optionally disable/remove the system twin `ysk-{file}` when execute is on.
+ */
+export async function removeApacheArtifact(opts) {
+    let raw = String(opts.fileOrId ?? '').trim();
+    if (raw.startsWith('artifact:'))
+        raw = raw.slice('artifact:'.length);
+    const file = sanitizeApacheConfBasename(raw);
+    if (!file) {
+        return {
+            ok: false,
+            notes: [tl('notes.apache.artifactInvalid')],
+            code: 'invalid',
+        };
+    }
+    const projects = opts.projects ?? [];
+    const owned = listOwnedApacheConfBasenames({
+        dataDir: opts.dataDir,
+        projects,
+    });
+    if (owned.has(file)) {
+        return {
+            ok: false,
+            notes: [tl('notes.apache.artifactOwned', { file })],
+            code: 'owned',
+        };
+    }
+    const path = join(opts.dataDir, 'apache', 'sites', file);
+    if (!existsSync(path)) {
+        return {
+            ok: false,
+            notes: [tl('notes.apache.artifactNotFound', { file })],
+            code: 'not_found',
+        };
+    }
+    try {
+        unlinkSync(path);
+    }
+    catch (e) {
+        return {
+            ok: false,
+            notes: [
+                tl('notes.apache.artifactRemoveFailed', {
+                    file,
+                    detail: e instanceof Error ? e.message : String(e),
+                }),
+            ],
+        };
+    }
+    const notes = [tl('notes.apache.artifactRemoved', { file })];
+    if (opts.skipSystem) {
+        return { ok: true, notes, removed: file };
+    }
+    if (!opts.host.executeEnabled()) {
+        notes.push(tl('notes.apache.artifactSystemPending'));
+        return {
+            ok: true,
+            notes,
+            removed: file,
+            blocked: true,
+            requiresExecute: true,
+        };
+    }
+    const systemNotes = await disableSystemApacheSite(opts.host, file);
+    notes.push(...systemNotes);
+    notes.push(...(await configtestAndReload(opts.host)));
+    return { ok: true, notes, removed: file };
+}
+/**
+ * Remove all artifact rows that conflict on ServerName with an owned row.
+ * Does not delete when the only conflict is between two projects.
+ */
+export async function cleanupApacheServerNameConflicts(opts) {
+    const rows = listMergedApacheSites({
+        dataDir: opts.dataDir,
+        projects: opts.projects,
+    });
+    const notes = [];
+    const toRemove = new Set();
+    const byName = new Map();
+    for (const r of rows) {
+        if (!r.conflict)
+            continue;
+        const key = r.serverName.trim().toLowerCase();
+        const list = byName.get(key) ?? [];
+        list.push(r);
+        byName.set(key, list);
+    }
+    for (const [name, group] of byName) {
+        const projects = group.filter((g) => g.source === 'project');
+        const artifacts = group.filter((g) => g.source === 'artifact');
+        if (projects.length > 1 && artifacts.length === 0) {
+            notes.push(tl('notes.apache.conflictProjectsOnly', { name }));
+            continue;
+        }
+        for (const a of artifacts) {
+            const base = a.confPath?.split(/[/\\]/).pop() ||
+                (a.id.startsWith('artifact:') ? a.id.slice('artifact:'.length) : '');
+            if (base)
+                toRemove.add(base);
+        }
+    }
+    const removed = [];
+    let anyBlocked = false;
+    let needsExec = false;
+    for (const file of toRemove) {
+        const r = await removeApacheArtifact({
+            dataDir: opts.dataDir,
+            host: opts.host,
+            fileOrId: file,
+            projects: opts.projects,
+            skipSystem: true,
+        });
+        notes.push(...r.notes.slice(0, 3));
+        if (r.ok && r.removed)
+            removed.push(r.removed);
+        if (r.blocked)
+            anyBlocked = true;
+        if (r.requiresExecute)
+            needsExec = true;
+    }
+    if (removed.length === 0) {
+        notes.push(tl('notes.apache.cleanupNothing'));
+        return { ok: true, notes, removed: [] };
+    }
+    if (!opts.host.executeEnabled()) {
+        notes.push(tl('notes.apache.artifactSystemPending'));
+        return {
+            ok: true,
+            notes,
+            removed,
+            blocked: true,
+            requiresExecute: true,
+        };
+    }
+    for (const file of removed) {
+        notes.push(...(await disableSystemApacheSite(opts.host, file)).slice(0, 2));
+    }
+    const reloadNotes = await configtestAndReload(opts.host);
+    notes.push(...reloadNotes);
+    return {
+        ok: true,
+        notes,
+        removed,
+        blocked: anyBlocked,
+        requiresExecute: needsExec,
+    };
+}
+/**
+ * After writing the authoritative project conf, retire other dataDir confs
+ * with the same ServerName (orphans). Never deletes another live project's conf.
+ */
+export async function retireOrphanApacheConfsForDomain(opts) {
+    const domain = opts.domain.trim().toLowerCase();
+    const keep = sanitizeApacheConfBasename(opts.keepBasename) || opts.keepBasename;
+    const notes = [];
+    const removed = [];
+    if (!domain)
+        return { notes, removed };
+    const owned = listOwnedApacheConfBasenames({
+        dataDir: opts.dataDir,
+        projects: opts.projects,
+    });
+    const sitesDir = join(opts.dataDir, 'apache', 'sites');
+    if (!existsSync(sitesDir))
+        return { notes, removed };
+    let files = [];
+    try {
+        files = readdirSync(sitesDir).filter((f) => f.endsWith('.conf'));
+    }
+    catch {
+        return { notes, removed };
+    }
+    for (const f of files) {
+        if (f === keep)
+            continue;
+        // Never auto-delete another owned project/standalone conf
+        if (owned.has(f) && f !== keep) {
+            let content = '';
+            try {
+                content = readFileSync(join(sitesDir, f), 'utf8');
+            }
+            catch {
+                continue;
+            }
+            const sn = parseServerNameFromConf(content)?.toLowerCase();
+            if (sn === domain) {
+                notes.push(tl('notes.apache.conflictOwnedKeep', { file: f, domain: opts.domain }));
+            }
+            continue;
+        }
+        let content = '';
+        try {
+            content = readFileSync(join(sitesDir, f), 'utf8');
+        }
+        catch {
+            continue;
+        }
+        const sn = parseServerNameFromConf(content)?.toLowerCase();
+        if (sn !== domain)
+            continue;
+        const r = await removeApacheArtifact({
+            dataDir: opts.dataDir,
+            host: opts.host,
+            fileOrId: f,
+            projects: opts.projects,
+            skipSystem: !opts.host.executeEnabled(),
+        });
+        notes.push(...r.notes.slice(0, 2));
+        if (r.ok && r.removed) {
+            removed.push(r.removed);
+            notes.push(tl('notes.apache.retiredOrphan', { file: r.removed, domain: opts.domain }));
+        }
+    }
+    if (removed.length > 0 && opts.host.executeEnabled()) {
+        notes.push(...(await configtestAndReload(opts.host)));
+    }
+    return { notes, removed };
+}
+async function disableSystemApacheSite(host, file) {
+    const notes = [];
+    const stem = file.replace(/\.conf$/i, '');
+    // sync installs as ysk-{filename} e.g. ysk-orphan.conf → site name ysk-orphan
+    const siteName = `ysk-${stem}`;
+    try {
+        const isDebian = await binOk(host, 'apache2ctl');
+        if (isDebian) {
+            await host.runCommand(['bash', '-c', `a2dissite ${shell(siteName)} 2>/dev/null || true`], { timeoutMs: 10_000 });
+            await host.runCommand([
+                'bash',
+                '-c',
+                `rm -f ${shell(`/etc/apache2/sites-available/${siteName}.conf`)} ${shell(`/etc/apache2/sites-enabled/${siteName}.conf`)} 2>/dev/null || true`,
+            ], { timeoutMs: 10_000 });
+            notes.push(tl('notes.apache.artifactSystemDisabled', { site: siteName }));
+        }
+        else {
+            await host.runCommand([
+                'bash',
+                '-c',
+                `rm -f ${shell(`/etc/httpd/conf.d/${siteName}.conf`)} 2>/dev/null || true`,
+            ], { timeoutMs: 10_000 });
+            notes.push(tl('notes.apache.artifactSystemDisabled', { site: siteName }));
+        }
+    }
+    catch (e) {
+        notes.push(tl('notes.apache.artifactSystemFailed', {
+            detail: e instanceof Error ? e.message : String(e),
+        }));
+    }
+    return notes;
+}
+async function configtestAndReload(host) {
+    const notes = [];
+    const isDebian = await binOk(host, 'apache2ctl');
+    const testCmd = isDebian
+        ? ['apache2ctl', 'configtest']
+        : ['httpd', '-t'];
+    const test = await host.runCommand(testCmd, { timeoutMs: 15_000 });
+    if (test.exitCode !== 0) {
+        notes.push(tl('notes.apache.configFailed', {
+            detail: (test.stderr || test.stdout || '').slice(0, 160),
+        }));
+        return notes;
+    }
+    notes.push(tl('notes.apache.configOk'));
+    const unit = isDebian ? 'apache2' : 'httpd';
+    const rel = await host.runCommand(['systemctl', 'reload', unit], {
+        timeoutMs: 30_000,
+    });
+    if (rel.exitCode === 0)
+        notes.push(tl('notes.apache.reloaded'));
+    else
+        notes.push(tl('notes.apache.reloadFailed'));
+    return notes;
+}
+async function binOk(host, bin) {
+    try {
+        const r = await host.runCommand(['bash', '-c', `command -v ${bin} >/dev/null 2>&1 && echo ok || true`], { timeoutMs: 5_000 });
+        return r.stdout.includes('ok');
+    }
+    catch {
+        return existsSync(`/usr/sbin/${bin}`) || existsSync(`/usr/bin/${bin}`);
+    }
+}
+function shell(s) {
+    return `'${s.replace(/'/g, `'\\''`)}'`;
+}
+//# sourceMappingURL=artifacts.js.map

package/dist/hosting/apache/artifacts.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"artifacts.js","sourceRoot":"","sources":["../../../src/hosting/apache/artifacts.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAC5E,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,OAAO,EAAE,EAAE,EAAE,MAAM,mBAAmB,CAAC;AACvC,OAAO,EACL,qBAAqB,EACrB,4BAA4B,EAC5B,uBAAuB,GACxB,MAAM,iBAAiB,CAAC;AAEzB,MAAM,SAAS,GAAG,yBAAyB,CAAC;AAE5C,MAAM,UAAU,0BAA0B,CAAC,IAAY;IACrD,IAAI,GAAG,GAAG,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IACpC,IAAI,GAAG,CAAC,UAAU,CAAC,WAAW,CAAC;QAAE,GAAG,GAAG,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;IACrE,sDAAsD;IACtD,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QAC1E,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IACtC,OAAO,GAAG,CAAC;AACb,CAAC;AAWD;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,IAQ1C;IACC,IAAI,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IAC7C,IAAI,GAAG,CAAC,UAAU,CAAC,WAAW,CAAC;QAAE,GAAG,GAAG,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;IACrE,MAAM,IAAI,GAAG,0BAA0B,CAAC,GAAG,CAAC,CAAC;IAC7C,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,OAAO;YACL,EAAE,EAAE,KAAK;YACT,KAAK,EAAE,CAAC,EAAE,CAAC,8BAA8B,CAAC,CAAC;YAC3C,IAAI,EAAE,SAAS;SAChB,CAAC;IACJ,CAAC;IAED,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,EAAE,CAAC;IACrC,MAAM,KAAK,GAAG,4BAA4B,CAAC;QACzC,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,QAAQ;KACT,CAAC,CAAC;IACH,IAAI,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;QACpB,OAAO;YACL,EAAE,EAAE,KAAK;YACT,KAAK,EAAE,CAAC,EAAE,CAAC,4BAA4B,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;YACnD,IAAI,EAAE,OAAO;SACd,CAAC;IACJ,CAAC;IAED,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;IACzD,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QACtB,OAAO;YACL,EAAE,EAAE,KAAK;YACT,KAAK,EAAE,CAAC,EAAE,CAAC,+BAA+B,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;YACtD,IAAI,EAAE,WAAW;SAClB,CAAC;IACJ,CAAC;IAED,IAAI,CAAC;QACH,UAAU,CAAC,IAAI,CAAC,CAAC;IACnB,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,OAAO;YACL,EAAE,EAAE,KAAK;YACT,KAAK,EAAE;gBACL,EAAE,CAAC,mCAAmC,EAAE;oBACtC,IAAI;oBACJ,MAAM,EAAE,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;iBACnD,CAAC;aACH;SACF,CAAC;IACJ,CAAC;IAED,MAAM,KAAK,GAAG,CAAC,EAAE,CAAC,8BAA8B,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IAE7D,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;QACpB,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC5C,CAAC;IAED,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,EAAE,CAAC;QAChC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,oCAAoC,CAAC,CAAC,CAAC;QACrD,OAAO;YACL,EAAE,EAAE,IAAI;YACR,KAAK;YACL,OAAO,EAAE,IAAI;YACb,OAAO,EAAE,IAAI;YACb,eAAe,EAAE,IAAI;SACtB,CAAC;IACJ,CAAC;IAED,MAAM,WAAW,GAAG,MAAM,uBAAuB,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACnE,KAAK,CAAC,IAAI,CAAC,GAAG,WAAW,CAAC,CAAC;IAC3B,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,mBAAmB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACtD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;AAC5C,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,gCAAgC,CAAC,IAItD;IAOC,MAAM,IAAI,GAAG,qBAAqB,CAAC;QACjC,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,QAAQ,EAAE,IAAI,CAAC,QAAQ;KACxB,CAAC,CAAC;IACH,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAU,CAAC;IAEnC,MAAM,MAAM,GAAG,IAAI,GAAG,EAAuB,CAAC;IAC9C,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;QACrB,IAAI,CAAC,CAAC,CAAC,QAAQ;YAAE,SAAS;QAC1B,MAAM,GAAG,GAAG,CAAC,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAC9C,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;QACnC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACb,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IACxB,CAAC;IAED,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,EAAE,CAAC;QACnC,MAAM,QAAQ,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC;QAC7D,MAAM,SAAS,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,UAAU,CAAC,CAAC;QAC/D,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAClD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,mCAAmC,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;YAC9D,SAAS;QACX,CAAC;QACD,KAAK,MAAM,CAAC,IAAI,SAAS,EAAE,CAAC;YAC1B,MAAM,IAAI,GACR,CAAC,CAAC,QAAQ,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE;gBAChC,CAAC,CAAC,CAAC,EAAE,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YACvE,IAAI,IAAI;gBAAE,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC/B,CAAC;IACH,CAAC;IAED,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,IAAI,UAAU,GAAG,KAAK,CAAC;IACvB,IAAI,SAAS,GAAG,KAAK,CAAC;IAEtB,KAAK,MAAM,IAAI,IAAI,QAAQ,EAAE,CAAC;QAC5B,MAAM,CAAC,GAAG,MAAM,oBAAoB,CAAC;YACnC,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,QAAQ,EAAE,IAAI;YACd,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,UAAU,EAAE,IAAI;SACjB,CAAC,CAAC;QACH,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QACnC,IAAI,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,OAAO;YAAE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;QAC/C,IAAI,CAAC,CAAC,OAAO;YAAE,UAAU,GAAG,IAAI,CAAC;QACjC,IAAI,CAAC,CAAC,eAAe;YAAE,SAAS,GAAG,IAAI,CAAC;IAC1C,CAAC;IAED,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,6BAA6B,CAAC,CAAC,CAAC;QAC9C,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;IAC1C,CAAC;IAED,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,EAAE,CAAC;QAChC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,oCAAoC,CAAC,CAAC,CAAC;QACrD,OAAO;YACL,EAAE,EAAE,IAAI;YACR,KAAK;YACL,OAAO;YACP,OAAO,EAAE,IAAI;YACb,eAAe,EAAE,IAAI;SACtB,CAAC;IACJ,CAAC;IAED,KAAK,MAAM,IAAI,IAAI,OAAO,EAAE,CAAC;QAC3B,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,uBAAuB,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IAC9E,CAAC;IACD,MAAM,WAAW,GAAG,MAAM,mBAAmB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACzD,KAAK,CAAC,IAAI,CAAC,GAAG,WAAW,CAAC,CAAC;IAE3B,OAAO;QACL,EAAE,EAAE,IAAI;QACR,KAAK;QACL,OAAO;QACP,OAAO,EAAE,UAAU;QACnB,eAAe,EAAE,SAAS;KAC3B,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,gCAAgC,CAAC,IAOtD;IACC,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAChD,MAAM,IAAI,GAAG,0BAA0B,CAAC,IAAI,CAAC,YAAY,CAAC,IAAI,IAAI,CAAC,YAAY,CAAC;IAChF,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,IAAI,CAAC,MAAM;QAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;IAEvC,MAAM,KAAK,GAAG,4BAA4B,CAAC;QACzC,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,QAAQ,EAAE,IAAI,CAAC,QAAQ;KACxB,CAAC,CAAC;IACH,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;IACvD,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC;QAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;IAErD,IAAI,KAAK,GAAa,EAAE,CAAC;IACzB,IAAI,CAAC;QACH,KAAK,GAAG,WAAW,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;IACnE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;IAC5B,CAAC;IAED,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACtB,IAAI,CAAC,KAAK,IAAI;YAAE,SAAS;QACzB,0DAA0D;QAC1D,IAAI,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC;YAC/B,IAAI,OAAO,GAAG,EAAE,CAAC;YACjB,IAAI,CAAC;gBACH,OAAO,GAAG,YAAY,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;YACpD,CAAC;YAAC,MAAM,CAAC;gBACP,SAAS;YACX,CAAC;YACD,MAAM,EAAE,GAAG,uBAAuB,CAAC,OAAO,CAAC,EAAE,WAAW,EAAE,CAAC;YAC3D,IAAI,EAAE,KAAK,MAAM,EAAE,CAAC;gBAClB,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,gCAAgC,EAAE,EAAE,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;YACrF,CAAC;YACD,SAAS;QACX,CAAC;QAED,IAAI,OAAO,GAAG,EAAE,CAAC;QACjB,IAAI,CAAC;YACH,OAAO,GAAG,YAAY,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;QACpD,CAAC;QAAC,MAAM,CAAC;YACP,SAAS;QACX,CAAC;QACD,MAAM,EAAE,GAAG,uBAAuB,CAAC,OAAO,CAAC,EAAE,WAAW,EAAE,CAAC;QAC3D,IAAI,EAAE,KAAK,MAAM;YAAE,SAAS;QAE5B,MAAM,CAAC,GAAG,MAAM,oBAAoB,CAAC;YACnC,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,QAAQ,EAAE,CAAC;YACX,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,UAAU,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE;SACxC,CAAC,CAAC;QACH,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QACnC,IAAI,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,OAAO,EAAE,CAAC;YACtB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;YACxB,KAAK,CAAC,IAAI,CACR,EAAE,CAAC,4BAA4B,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAC3E,CAAC;QACJ,CAAC;IACH,CAAC;IAED,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,EAAE,CAAC;QACrD,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,mBAAmB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACxD,CAAC;IAED,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;AAC5B,CAAC;AAED,KAAK,UAAU,uBAAuB,CACpC,IAAkB,EAClB,IAAY;IAEZ,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;IAC1C,8EAA8E;IAC9E,MAAM,QAAQ,GAAG,OAAO,IAAI,EAAE,CAAC;IAC/B,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;QACjD,IAAI,QAAQ,EAAE,CAAC;YACb,MAAM,IAAI,CAAC,UAAU,CACnB,CAAC,MAAM,EAAE,IAAI,EAAE,aAAa,KAAK,CAAC,QAAQ,CAAC,sBAAsB,CAAC,EAClE,EAAE,SAAS,EAAE,MAAM,EAAE,CACtB,CAAC;YACF,MAAM,IAAI,CAAC,UAAU,CACnB;gBACE,MAAM;gBACN,IAAI;gBACJ,SAAS,KAAK,CAAC,gCAAgC,QAAQ,OAAO,CAAC,IAAI,KAAK,CAAC,8BAA8B,QAAQ,OAAO,CAAC,sBAAsB;aAC9I,EACD,EAAE,SAAS,EAAE,MAAM,EAAE,CACtB,CAAC;YACF,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,qCAAqC,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC;QAC5E,CAAC;aAAM,CAAC;YACN,MAAM,IAAI,CAAC,UAAU,CACnB;gBACE,MAAM;gBACN,IAAI;gBACJ,SAAS,KAAK,CAAC,qBAAqB,QAAQ,OAAO,CAAC,sBAAsB;aAC3E,EACD,EAAE,SAAS,EAAE,MAAM,EAAE,CACtB,CAAC;YACF,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,qCAAqC,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC;QAC5E,CAAC;IACH,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,KAAK,CAAC,IAAI,CACR,EAAE,CAAC,mCAAmC,EAAE;YACtC,MAAM,EAAE,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;SACnD,CAAC,CACH,CAAC;IACJ,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,KAAK,UAAU,mBAAmB,CAAC,IAAkB;IACnD,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;IACjD,MAAM,OAAO,GAAG,QAAQ;QACtB,CAAC,CAAE,CAAC,YAAY,EAAE,YAAY,CAAc;QAC5C,CAAC,CAAE,CAAC,OAAO,EAAE,IAAI,CAAc,CAAC;IAClC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,CAAC;IACnE,IAAI,IAAI,CAAC,QAAQ,KAAK,CAAC,EAAE,CAAC;QACxB,KAAK,CAAC,IAAI,CACR,EAAE,CAAC,2BAA2B,EAAE;YAC9B,MAAM,EAAE,CAAC,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;SACzD,CAAC,CACH,CAAC;QACF,OAAO,KAAK,CAAC;IACf,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,uBAAuB,CAAC,CAAC,CAAC;IACxC,MAAM,IAAI,GAAG,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC;IAC5C,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,CAAC,WAAW,EAAE,QAAQ,EAAE,IAAI,CAAC,EAAE;QAC/D,SAAS,EAAE,MAAM;KAClB,CAAC,CAAC;IACH,IAAI,GAAG,CAAC,QAAQ,KAAK,CAAC;QAAE,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,uBAAuB,CAAC,CAAC,CAAC;;QAC3D,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,2BAA2B,CAAC,CAAC,CAAC;IACjD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,KAAK,UAAU,KAAK,CAAC,IAAkB,EAAE,GAAW;IAClD,IAAI,CAAC;QACH,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,UAAU,CAC7B,CAAC,MAAM,EAAE,IAAI,EAAE,cAAc,GAAG,qCAAqC,CAAC,EACtE,EAAE,SAAS,EAAE,KAAK,EAAE,CACrB,CAAC;QACF,OAAO,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IACjC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,UAAU,CAAC,aAAa,GAAG,EAAE,CAAC,IAAI,UAAU,CAAC,YAAY,GAAG,EAAE,CAAC,CAAC;IACzE,CAAC;AACH,CAAC;AAED,SAAS,KAAK,CAAC,CAAS;IACtB,OAAO,IAAI,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC;AACzC,CAAC"}

package/dist/hosting/apache/index.d.ts

@@ -0,0 +1,8 @@
+export * from './types.js';
+export * from './render-site.js';
+export * from './settings.js';
+export * from './sync.js';
+export * from './service.js';
+export * from './sites-list.js';
+export * from './artifacts.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/hosting/apache/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/hosting/apache/index.ts"],"names":[],"mappings":"AAAA,cAAc,YAAY,CAAC;AAC3B,cAAc,kBAAkB,CAAC;AACjC,cAAc,eAAe,CAAC;AAC9B,cAAc,WAAW,CAAC;AAC1B,cAAc,cAAc,CAAC;AAC7B,cAAc,iBAAiB,CAAC;AAChC,cAAc,gBAAgB,CAAC"}

package/dist/hosting/apache/index.js

@@ -0,0 +1,8 @@
+export * from './types.js';
+export * from './render-site.js';
+export * from './settings.js';
+export * from './sync.js';
+export * from './service.js';
+export * from './sites-list.js';
+export * from './artifacts.js';
+//# sourceMappingURL=index.js.map

package/dist/hosting/apache/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/hosting/apache/index.ts"],"names":[],"mappings":"AAAA,cAAc,YAAY,CAAC;AAC3B,cAAc,kBAAkB,CAAC;AACjC,cAAc,eAAe,CAAC;AAC9B,cAAc,WAAW,CAAC;AAC1B,cAAc,cAAc,CAAC;AAC7B,cAAc,iBAAiB,CAAC;AAChC,cAAc,gBAAgB,CAAC"}

package/dist/hosting/apache/render-site.d.ts

@@ -0,0 +1,17 @@
+/**
+ * Render Apache vhost conf for managed sites.
+ */
+import type { ApacheSiteKind } from './types.js';
+export declare function renderApacheSite(opts: {
+    serverName: string;
+    kind: ApacheSiteKind;
+    upstream?: string;
+    root?: string;
+    ssl?: boolean;
+    forceHttps?: boolean;
+    hsts?: boolean;
+    clientMaxBody?: string;
+    indexes?: boolean;
+    fpmSocket?: string;
+}): string;
+//# sourceMappingURL=render-site.d.ts.map

package/dist/hosting/apache/render-site.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"render-site.d.ts","sourceRoot":"","sources":["../../../src/hosting/apache/render-site.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAEjD,wBAAgB,gBAAgB,CAAC,IAAI,EAAE;IACrC,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,cAAc,CAAC;IACrB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,GAAG,CAAC,EAAE,OAAO,CAAC;IACd,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB,GAAG,MAAM,CA+ET"}

package/dist/hosting/apache/render-site.js

@@ -0,0 +1,93 @@
+/**
+ * Render Apache vhost conf for managed sites.
+ */
+export function renderApacheSite(opts) {
+    const name = opts.serverName.trim() || 'localhost';
+    const body = opts.clientMaxBody && opts.clientMaxBody !== 'inherit'
+        ? `  LimitRequestBody ${parseBodyBytes(opts.clientMaxBody)}\n`
+        : '';
+    const indexes = opts.indexes ? 'Indexes' : '-Indexes';
+    const hsts = opts.ssl && opts.hsts
+        ? '  Header always set Strict-Transport-Security "max-age=31536000; includeSubDomains"\n'
+        : '';
+    let core = '';
+    if (opts.kind === 'static') {
+        const root = opts.root || '/var/www/html';
+        core = `  DocumentRoot "${root}"
+  <Directory "${root}">
+    Options ${indexes} FollowSymLinks
+    AllowOverride None
+    Require all granted
+  </Directory>
+`;
+    }
+    else if (opts.kind === 'php') {
+        const root = opts.root || '/var/www/html';
+        const sock = opts.fpmSocket || '/run/php/php8.2-fpm.sock';
+        core = `  DocumentRoot "${root}"
+  <Directory "${root}">
+    Options ${indexes} FollowSymLinks
+    AllowOverride None
+    Require all granted
+  </Directory>
+  <FilesMatch \\.php$>
+    SetHandler "proxy:unix:${sock}|fcgi://localhost"
+  </FilesMatch>
+`;
+    }
+    else {
+        const up = opts.upstream || 'http://127.0.0.1:3000';
+        core = `  ProxyPreserveHost On
+  ProxyPass / ${up.endsWith('/') ? up : up + '/'}
+  ProxyPassReverse / ${up.endsWith('/') ? up : up + '/'}
+  RequestHeader set X-Forwarded-Proto expr=%{REQUEST_SCHEME}
+`;
+    }
+    if (opts.ssl && opts.forceHttps) {
+        return `# YSK managed
+<VirtualHost *:80>
+  ServerName ${name}
+  Redirect permanent / https://${name.split(/\s+/)[0]}/
+</VirtualHost>
+
+<VirtualHost *:443>
+  ServerName ${name}
+  SSLEngine on
+  SSLCertificateFile /etc/letsencrypt/live/${name.split(/\s+/)[0]}/fullchain.pem
+  SSLCertificateKeyFile /etc/letsencrypt/live/${name.split(/\s+/)[0]}/privkey.pem
+${hsts}${body}${core}</VirtualHost>
+`;
+    }
+    if (opts.ssl) {
+        return `# YSK managed
+<VirtualHost *:80>
+  ServerName ${name}
+${body}${core}</VirtualHost>
+
+<VirtualHost *:443>
+  ServerName ${name}
+  SSLEngine on
+  SSLCertificateFile /etc/letsencrypt/live/${name.split(/\s+/)[0]}/fullchain.pem
+  SSLCertificateKeyFile /etc/letsencrypt/live/${name.split(/\s+/)[0]}/privkey.pem
+${hsts}${body}${core}</VirtualHost>
+`;
+    }
+    return `# YSK managed
+<VirtualHost *:80>
+  ServerName ${name}
+${body}${core}</VirtualHost>
+`;
+}
+function parseBodyBytes(s) {
+    const m = /^(\d+)(m|k)?$/i.exec(s.trim());
+    if (!m)
+        return 10485760;
+    const n = Number(m[1]);
+    const u = (m[2] || '').toLowerCase();
+    if (u === 'k')
+        return n * 1024;
+    if (u === 'm')
+        return n * 1024 * 1024;
+    return n;
+}
+//# sourceMappingURL=render-site.js.map

package/dist/hosting/apache/render-site.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"render-site.js","sourceRoot":"","sources":["../../../src/hosting/apache/render-site.ts"],"names":[],"mappings":"AAAA;;GAEG;AAIH,MAAM,UAAU,gBAAgB,CAAC,IAWhC;IACC,MAAM,IAAI,GAAG,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,IAAI,WAAW,CAAC;IACnD,MAAM,IAAI,GACR,IAAI,CAAC,aAAa,IAAI,IAAI,CAAC,aAAa,KAAK,SAAS;QACpD,CAAC,CAAC,sBAAsB,cAAc,CAAC,IAAI,CAAC,aAAa,CAAC,IAAI;QAC9D,CAAC,CAAC,EAAE,CAAC;IACT,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,CAAC;IACtD,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,IAAI;QAChC,CAAC,CAAC,uFAAuF;QACzF,CAAC,CAAC,EAAE,CAAC;IAEP,IAAI,IAAI,GAAG,EAAE,CAAC;IACd,IAAI,IAAI,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC3B,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,IAAI,eAAe,CAAC;QAC1C,IAAI,GAAG,mBAAmB,IAAI;gBAClB,IAAI;cACN,OAAO;;;;CAIpB,CAAC;IACA,CAAC;SAAM,IAAI,IAAI,CAAC,IAAI,KAAK,KAAK,EAAE,CAAC;QAC/B,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,IAAI,eAAe,CAAC;QAC1C,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,IAAI,0BAA0B,CAAC;QAC1D,IAAI,GAAG,mBAAmB,IAAI;gBAClB,IAAI;cACN,OAAO;;;;;6BAKQ,IAAI;;CAEhC,CAAC;IACA,CAAC;SAAM,CAAC;QACN,MAAM,EAAE,GAAG,IAAI,CAAC,QAAQ,IAAI,uBAAuB,CAAC;QACpD,IAAI,GAAG;gBACK,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,GAAG;uBACzB,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,GAAG;;CAEtD,CAAC;IACA,CAAC;IAED,IAAI,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;QAChC,OAAO;;eAEI,IAAI;iCACc,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;;;;eAItC,IAAI;;6CAE0B,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;gDACjB,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;EAClE,IAAI,GAAG,IAAI,GAAG,IAAI;CACnB,CAAC;IACA,CAAC;IAED,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;QACb,OAAO;;eAEI,IAAI;EACjB,IAAI,GAAG,IAAI;;;eAGE,IAAI;;6CAE0B,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;gDACjB,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;EAClE,IAAI,GAAG,IAAI,GAAG,IAAI;CACnB,CAAC;IACA,CAAC;IAED,OAAO;;eAEM,IAAI;EACjB,IAAI,GAAG,IAAI;CACZ,CAAC;AACF,CAAC;AAED,SAAS,cAAc,CAAC,CAAS;IAC/B,MAAM,CAAC,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;IAC1C,IAAI,CAAC,CAAC;QAAE,OAAO,QAAQ,CAAC;IACxB,MAAM,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACvB,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;IACrC,IAAI,CAAC,KAAK,GAAG;QAAE,OAAO,CAAC,GAAG,IAAI,CAAC;IAC/B,IAAI,CAAC,KAAK,GAAG;QAAE,OAAO,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC;IACtC,OAAO,CAAC,CAAC;AACX,CAAC"}

package/dist/hosting/apache/service.d.ts

@@ -0,0 +1,27 @@
+/**
+ * Apache managed sites CRUD + apply.
+ */
+import type { HostExecutor } from '../../host/executor.js';
+import type { ApacheSiteKind, ApacheSiteRecord } from './types.js';
+export declare function listApacheSites(dataDir: string): ApacheSiteRecord[];
+export declare function createApacheSite(dataDir: string, input: {
+    serverName: string;
+    kind?: ApacheSiteKind;
+    upstream?: string;
+    root?: string;
+    ssl?: boolean;
+}): ApacheSiteRecord;
+export declare function updateApacheSite(dataDir: string, id: string, patch: Partial<ApacheSiteRecord>): ApacheSiteRecord;
+export declare function deleteApacheSite(dataDir: string, id: string): boolean;
+export declare function applyApacheSite(opts: {
+    dataDir: string;
+    host: HostExecutor;
+    id: string;
+}): Promise<{
+    ok: boolean;
+    site: ApacheSiteRecord | null;
+    notes: string[];
+    blocked?: boolean;
+    requiresExecute?: boolean;
+}>;
+//# sourceMappingURL=service.d.ts.map

package/dist/hosting/apache/service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"service.d.ts","sourceRoot":"","sources":["../../../src/hosting/apache/service.ts"],"names":[],"mappings":"AAAA;;GAEG;AAMH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AAG3D,OAAO,KAAK,EAAE,cAAc,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAUnE,wBAAgB,eAAe,CAAC,OAAO,EAAE,MAAM,GAAG,gBAAgB,EAAE,CASnE;AAWD,wBAAgB,gBAAgB,CAC9B,OAAO,EAAE,MAAM,EACf,KAAK,EAAE;IACL,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,CAAC,EAAE,cAAc,CAAC;IACtB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,GAAG,CAAC,EAAE,OAAO,CAAC;CACf,GACA,gBAAgB,CA4BlB;AAED,wBAAgB,gBAAgB,CAC9B,OAAO,EAAE,MAAM,EACf,EAAE,EAAE,MAAM,EACV,KAAK,EAAE,OAAO,CAAC,gBAAgB,CAAC,GAC/B,gBAAgB,CAiBlB;AAED,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAcrE;AAED,wBAAsB,eAAe,CAAC,IAAI,EAAE;IAC1C,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,YAAY,CAAC;IACnB,EAAE,EAAE,MAAM,CAAC;CACZ,GAAG,OAAO,CAAC;IACV,EAAE,EAAE,OAAO,CAAC;IACZ,IAAI,EAAE,gBAAgB,GAAG,IAAI,CAAC;IAC9B,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,eAAe,CAAC,EAAE,OAAO,CAAC;CAC3B,CAAC,CAmED"}

package/dist/hosting/apache/service.js

@@ -0,0 +1,162 @@
+/**
+ * Apache managed sites CRUD + apply.
+ */
+import { randomUUID } from 'node:crypto';
+import { existsSync, mkdirSync, readFileSync, writeFileSync, unlinkSync } from 'node:fs';
+import { basename, join } from 'node:path';
+import { ErrorCodes, YskError, tl } from 'ysk-server-shared';
+import { renderApacheSite } from './render-site.js';
+import { syncApacheConfigs } from './sync.js';
+function sitesPath(dataDir) {
+    return join(dataDir, 'apache', 'sites.json');
+}
+function sitesDir(dataDir) {
+    return join(dataDir, 'apache', 'sites');
+}
+export function listApacheSites(dataDir) {
+    const p = sitesPath(dataDir);
+    if (!existsSync(p))
+        return [];
+    try {
+        const raw = JSON.parse(readFileSync(p, 'utf8'));
+        return Array.isArray(raw.items) ? raw.items : [];
+    }
+    catch {
+        return [];
+    }
+}
+function saveApacheSites(dataDir, items) {
+    mkdirSync(join(dataDir, 'apache'), { recursive: true });
+    writeFileSync(sitesPath(dataDir), JSON.stringify({ items, updatedAt: new Date().toISOString() }, null, 2) + '\n', 'utf8');
+}
+export function createApacheSite(dataDir, input) {
+    const serverName = String(input.serverName ?? '').trim().toLowerCase();
+    if (!serverName) {
+        throw new YskError(ErrorCodes.VALIDATION, tl('notes.apache.needServerName'), {
+            httpStatus: 400,
+        });
+    }
+    const items = listApacheSites(dataDir);
+    if (items.some((s) => s.serverName === serverName)) {
+        throw new YskError(ErrorCodes.VALIDATION, tl('notes.apache.siteExists'), {
+            httpStatus: 409,
+        });
+    }
+    const now = new Date().toISOString();
+    const rec = {
+        id: randomUUID(),
+        serverName,
+        kind: input.kind === 'static' || input.kind === 'php' ? input.kind : 'proxy',
+        upstream: input.upstream,
+        root: input.root,
+        ssl: Boolean(input.ssl),
+        apply_status: 'draft',
+        created_at: now,
+        updated_at: now,
+    };
+    items.unshift(rec);
+    saveApacheSites(dataDir, items);
+    return rec;
+}
+export function updateApacheSite(dataDir, id, patch) {
+    const items = listApacheSites(dataDir);
+    const i = items.findIndex((s) => s.id === id);
+    if (i < 0) {
+        throw new YskError(ErrorCodes.NOT_FOUND, tl('notes.apache.siteNotFound'), {
+            httpStatus: 404,
+        });
+    }
+    const next = {
+        ...items[i],
+        ...patch,
+        id: items[i].id,
+        updated_at: new Date().toISOString(),
+    };
+    items[i] = next;
+    saveApacheSites(dataDir, items);
+    return next;
+}
+export function deleteApacheSite(dataDir, id) {
+    const items = listApacheSites(dataDir);
+    const rec = items.find((s) => s.id === id);
+    if (!rec)
+        return false;
+    const next = items.filter((s) => s.id !== id);
+    saveApacheSites(dataDir, next);
+    if (rec.confPath && existsSync(rec.confPath)) {
+        try {
+            unlinkSync(rec.confPath);
+        }
+        catch {
+            /* ignore */
+        }
+    }
+    return true;
+}
+export async function applyApacheSite(opts) {
+    const items = listApacheSites(opts.dataDir);
+    const rec = items.find((s) => s.id === opts.id);
+    if (!rec) {
+        return { ok: false, site: null, notes: [tl('notes.apache.siteNotFound')] };
+    }
+    mkdirSync(sitesDir(opts.dataDir), { recursive: true });
+    const slug = rec.serverName.replace(/[^a-zA-Z0-9._-]/g, '_') || rec.id.slice(0, 8);
+    const confPath = join(sitesDir(opts.dataDir), `ysk_site_${slug}.conf`);
+    const conf = renderApacheSite({
+        serverName: rec.serverName,
+        kind: rec.kind,
+        upstream: rec.upstream,
+        root: rec.root,
+        ssl: rec.ssl,
+        forceHttps: rec.forceHttps,
+        hsts: rec.hsts,
+        clientMaxBody: rec.clientMaxBody && rec.clientMaxBody !== 'inherit'
+            ? rec.clientMaxBody
+            : undefined,
+        indexes: rec.indexes,
+    });
+    writeFileSync(confPath, conf, 'utf8');
+    const notes = [tl('notes.apache.wroteConf', { path: confPath })];
+    const updated = updateApacheSite(opts.dataDir, rec.id, {
+        confPath,
+        apply_status: 'written',
+    });
+    if (!opts.host.executeEnabled()) {
+        notes.push(tl('notes.apache.needExecute'));
+        return {
+            ok: false,
+            site: updated,
+            notes,
+            blocked: true,
+            requiresExecute: true,
+        };
+    }
+    // Standalone apply: only push this site's conf (+ other standalone records),
+    // never unclaimed orphan artifacts (ServerName clash risk).
+    const onlyBasenames = new Set([basename(confPath)]);
+    for (const s of listApacheSites(opts.dataDir)) {
+        if (s.confPath) {
+            const b = basename(s.confPath);
+            if (b.endsWith('.conf'))
+                onlyBasenames.add(b);
+        }
+    }
+    const sync = await syncApacheConfigs({
+        dataDir: opts.dataDir,
+        host: opts.host,
+        onlyBasenames,
+    });
+    notes.push(...sync.notes.slice(0, 5));
+    const final = updateApacheSite(opts.dataDir, rec.id, {
+        confPath,
+        apply_status: sync.ok ? 'applied' : 'failed',
+    });
+    return {
+        ok: sync.ok,
+        site: final,
+        notes,
+        blocked: sync.blocked,
+        requiresExecute: sync.requiresExecute,
+    };
+}
+//# sourceMappingURL=service.js.map