ysk-server-core 1.0.0

package/dist/hosting/db-browser-project.js

@@ -0,0 +1,287 @@
+/**
+ * Create a PHP project that hosts Adminer or phpMyAdmin (DB browser).
+ * Used from MySQL/MariaDB “Adminer entry” — real project lifecycle + goLive.
+ */
+import { chmodSync, existsSync, mkdirSync, writeFileSync, rmSync } from 'node:fs';
+import { join } from 'node:path';
+import { ErrorCodes, YskError, tl } from 'ysk-server-shared';
+const ADMINER_URL = process.env.YSK_ADMINER_URL ??
+    'https://github.com/vrana/adminer/releases/download/v4.8.1/adminer-4.8.1.php';
+const PHPMYADMIN_URL = process.env.YSK_PHPMYADMIN_URL ??
+    'https://files.phpmyadmin.net/phpMyAdmin/5.2.1/phpMyAdmin-5.2.1-all-languages.tar.gz';
+export function normalizeDbBrowserTool(raw) {
+    const t = String(raw ?? 'adminer').trim().toLowerCase();
+    if (t === 'phpmyadmin' || t === 'pma')
+        return 'phpmyadmin';
+    return 'adminer';
+}
+export function defaultDbBrowserProjectName(tool, engine) {
+    const base = tool === 'phpmyadmin' ? 'phpmyadmin' : 'adminer';
+    const eng = (engine ?? '').trim().toLowerCase();
+    if (eng === 'mysql' || eng === 'mariadb')
+        return `${base}-${eng}`;
+    return base;
+}
+/**
+ * Download Adminer or phpMyAdmin into project document root (app/public).
+ */
+export async function installDbBrowserIntoProject(input) {
+    const notes = [];
+    const written = [];
+    const docRoot = input.docRoot ?? join(input.homeDir, 'app', 'public');
+    mkdirSync(docRoot, { recursive: true });
+    const download = input.download !== false;
+    if (input.tool === 'adminer') {
+        const path = join(docRoot, 'index.php');
+        if (!download) {
+            if (!existsSync(path) && !existsSync(join(docRoot, 'adminer.php'))) {
+                return {
+                    ok: false,
+                    notes: [tl('notes.auto.n0074')],
+                    written,
+                    entryFile: 'index.php',
+                };
+            }
+            notes.push(tl('notes.auto.t0355', { v0: path }));
+            return { ok: true, notes, written, entryFile: 'index.php' };
+        }
+        if (!input.host.executeEnabled()) {
+            writeFileSync(path, `<?php\necho "Adminer not downloaded — enable YSK_EXECUTE and re-run";\n`, 'utf8');
+            written.push(path);
+            return {
+                ok: false,
+                notes: [tl('notes.auto.n1141'), tl('notes.auto.t0351', { v0: path })],
+                written,
+                entryFile: 'index.php',
+            };
+        }
+        const r = await input.host.runCommand([
+            'bash',
+            '-c',
+            `curl -fsSL ${JSON.stringify(ADMINER_URL)} -o ${JSON.stringify(path)}`,
+        ], { timeoutMs: 120_000 });
+        if (r.exitCode !== 0 || !existsSync(path)) {
+            notes.push(tl('notes.auto.t0353', { v0: (r.stderr || r.stdout || '').slice(0, 200) }));
+            return { ok: false, notes, written, entryFile: 'index.php' };
+        }
+        written.push(path);
+        notes.push(tl('notes.auto.t0354', { v0: path }));
+        return { ok: true, notes, written, entryFile: 'index.php' };
+    }
+    // phpMyAdmin — extract all-languages tarball into docRoot
+    const marker = join(docRoot, 'index.php');
+    if (!download) {
+        if (!existsSync(marker)) {
+            return {
+                ok: false,
+                notes: [tl('notes.auto.n0074')],
+                written,
+                entryFile: 'index.php',
+            };
+        }
+        // Repair cookie/HTTP config without re-download (fixes "Failed to set session cookie")
+        const repaired = ensurePhpMyAdminRuntimeFiles(docRoot);
+        written.push(...repaired.written);
+        notes.push(tl('notes.auto.t0355', { v0: marker }), ...repaired.notes);
+        return { ok: true, notes, written, entryFile: 'index.php' };
+    }
+    if (!input.host.executeEnabled()) {
+        return {
+            ok: false,
+            notes: [tl('notes.auto.n1141')],
+            written,
+            entryFile: 'index.php',
+        };
+    }
+    const tmp = join(input.homeDir, 'tmp', 'pma.tgz');
+    mkdirSync(join(input.homeDir, 'tmp'), { recursive: true });
+    const pmaTmp = join(docRoot, 'tmp');
+    const script = [
+        `set -e`,
+        `curl -fsSL ${JSON.stringify(PHPMYADMIN_URL)} -o ${JSON.stringify(tmp)}`,
+        `rm -rf ${JSON.stringify(join(docRoot, '.pma-extract'))}`,
+        `mkdir -p ${JSON.stringify(join(docRoot, '.pma-extract'))}`,
+        `tar -xzf ${JSON.stringify(tmp)} -C ${JSON.stringify(join(docRoot, '.pma-extract'))}`,
+        // Flatten phpMyAdmin-*-all-languages/* into docRoot
+        `INNER=$(find ${JSON.stringify(join(docRoot, '.pma-extract'))} -maxdepth 1 -type d -name 'phpMyAdmin-*' | head -1)`,
+        `if [ -z "$INNER" ]; then echo "phpMyAdmin extract failed"; exit 1; fi`,
+        `shopt -s dotglob`,
+        `cp -a "$INNER"/* ${JSON.stringify(docRoot)}/`,
+        `rm -rf ${JSON.stringify(join(docRoot, '.pma-extract'))} ${JSON.stringify(tmp)}`,
+        `mkdir -p ${JSON.stringify(pmaTmp)}`,
+        `chmod 777 ${JSON.stringify(pmaTmp)}`,
+    ].join('\n');
+    const r = await input.host.runCommand(['bash', '-c', script], { timeoutMs: 180_000 });
+    if (r.exitCode !== 0 || !existsSync(marker)) {
+        notes.push(tl('notes.dbBrowser.pmaExtractFailed', {
+            detail: (r.stderr || r.stdout || '').slice(0, 300),
+        }));
+        return { ok: false, notes, written, entryFile: 'index.php' };
+    }
+    const runtime = ensurePhpMyAdminRuntimeFiles(docRoot);
+    written.push(docRoot, ...runtime.written);
+    notes.push(tl('notes.dbBrowser.pmaInstalled', { path: docRoot }), ...runtime.notes);
+    return { ok: true, notes, written, entryFile: 'index.php' };
+}
+/** Write/refresh config.inc.php, tmp/, .user.ini for cookie login over HTTP. */
+export function ensurePhpMyAdminRuntimeFiles(docRoot) {
+    const written = [];
+    const notes = [];
+    const pmaTmp = join(docRoot, 'tmp');
+    const configPath = join(docRoot, 'config.inc.php');
+    const userIniPath = join(docRoot, '.user.ini');
+    mkdirSync(pmaTmp, { recursive: true });
+    try {
+        // world-writable so www-data can session even if owner is panel user
+        chmodSync(pmaTmp, 0o777);
+    }
+    catch {
+        /* best-effort */
+    }
+    writeFileSync(configPath, buildPhpMyAdminConfigInc(randomBlowfish()), 'utf8');
+    writeFileSync(userIniPath, [
+        '; YSK-managed: phpMyAdmin cookie login over HTTP needs non-secure sessions',
+        'session.cookie_secure = 0',
+        'session.cookie_samesite = "Lax"',
+        'session.cookie_httponly = 1',
+        '',
+    ].join('\n'), 'utf8');
+    written.push(configPath, userIniPath, pmaTmp);
+    notes.push(tl('notes.dbBrowser.pmaConfigWritten'));
+    return { written, notes };
+}
+/**
+ * Managed phpMyAdmin config — cookie auth to local MySQL/MariaDB.
+ * HTTP-safe: ForceSSL off, writable TempDir (session cookies fail without it).
+ */
+export function buildPhpMyAdminConfigInc(blowfishSecret) {
+    const secret = String(blowfishSecret || randomBlowfish()).replace(/'/g, '');
+    return `<?php
+/**
+ * YSK-managed phpMyAdmin config (cookie auth → 127.0.0.1).
+ * Do not use the web installer. Log in with MySQL/MariaDB user + password.
+ */
+$cfg['blowfish_secret'] = '${secret}';
+$i = 0;
+$i++;
+$cfg['Servers'][$i]['auth_type'] = 'cookie';
+$cfg['Servers'][$i]['host'] = '127.0.0.1';
+$cfg['Servers'][$i]['compress'] = false;
+$cfg['Servers'][$i]['AllowNoPassword'] = false;
+$cfg['UploadDir'] = '';
+$cfg['SaveDir'] = '';
+/* Session / cookies fail with "Failed to set session cookie" if TempDir is missing */
+$cfg['TempDir'] = __DIR__ . '/tmp';
+/* Panel domains often start on HTTP; enable SSL on the project when ready */
+$cfg['ForceSSL'] = false;
+$cfg['CheckConfigurationPermissions'] = false;
+$cfg['LoginCookieValidity'] = 1440;
+$cfg['LoginCookieStore'] = 0;
+$cfg['LoginCookieDeleteAll'] = true;
+`;
+}
+function randomBlowfish() {
+    const chars = 'abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789';
+    let s = '';
+    for (let i = 0; i < 32; i++)
+        s += chars[Math.floor(Math.random() * chars.length)];
+    return s;
+}
+/**
+ * Create PHP project + install Adminer/phpMyAdmin + goLive (deploy + nginx).
+ */
+export async function createDbBrowserProject(input) {
+    const notes = [];
+    const written = [];
+    const name = input.name.trim();
+    const domain = input.domain.trim().toLowerCase();
+    const tool = normalizeDbBrowserTool(input.tool);
+    if (!name) {
+        throw new YskError(ErrorCodes.VALIDATION, tl('notes.needProjectName'), { httpStatus: 400 });
+    }
+    if (!domain) {
+        throw new YskError(ErrorCodes.VALIDATION, 'Domain is required', { httpStatus: 400 });
+    }
+    // Explicit pre-check for clear operator message (create also enforces)
+    const existing = input.projects.list().find((p) => p.name.trim().toLowerCase() === name.toLowerCase());
+    if (existing) {
+        return {
+            ok: false,
+            notes: [
+                tl('notes.ops.projectNameExists', { name }),
+                `existingProjectId=${existing.id}`,
+            ],
+            written,
+            apply_status: 'failed',
+        };
+    }
+    let created;
+    try {
+        created = await input.projects.create({
+            name,
+            domain,
+            runtime: 'php',
+            templateId: 'php-hello',
+            forceTemplate: true,
+            actor: input.actor,
+            actorUserId: input.actorUserId,
+        });
+    }
+    catch (e) {
+        if (e instanceof YskError)
+            throw e;
+        const msg = e instanceof Error ? e.message : String(e);
+        return { ok: false, notes: [msg], written, apply_status: 'failed' };
+    }
+    notes.push(tl('notes.dbBrowser.projectCreated', { id: created.project.id, name }));
+    if (created.scaffold?.notes?.length)
+        notes.push(...created.scaffold.notes.slice(0, 4));
+    const row = input.projects.get(created.project.id);
+    const docRoot = join(row.homeDir, (row.docRoot || 'app/public').replace(/^\//, ''));
+    // Clear hello world for browser tool
+    try {
+        const hello = join(docRoot, 'index.php');
+        if (existsSync(hello))
+            rmSync(hello, { force: true });
+    }
+    catch {
+        /* best-effort */
+    }
+    const inst = await installDbBrowserIntoProject({
+        host: input.host,
+        homeDir: row.homeDir,
+        docRoot,
+        tool,
+        download: input.download !== false,
+    });
+    notes.push(...inst.notes);
+    written.push(...inst.written);
+    if (!inst.ok) {
+        return {
+            ok: false,
+            project: row,
+            projectId: row.id,
+            notes,
+            written,
+            urlHint: `http://${domain}/`,
+            apply_status: 'failed',
+        };
+    }
+    const live = await input.projectOps.goLive(row.id, { actor: input.actor });
+    notes.push(...(live.notes ?? []).slice(0, 16));
+    const fresh = input.projects.get(row.id);
+    const ok = Boolean(live.ok) && inst.ok;
+    return {
+        ok,
+        project: fresh,
+        projectId: fresh.id,
+        urlHint: `http://${domain}/`,
+        notes,
+        written,
+        blocked: Boolean(live.deploy?.requiresExecute || live.publish?.requiresExecute),
+        requiresExecute: Boolean(live.deploy?.requiresExecute || live.publish?.requiresExecute),
+        requiresRoot: Boolean(live.deploy?.requiresRoot || live.publish?.requiresRoot),
+        apply_status: ok ? 'applied' : live.ok === false ? 'failed' : 'written',
+    };
+}
+//# sourceMappingURL=db-browser-project.js.map

package/dist/hosting/db-browser-project.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"db-browser-project.js","sourceRoot":"","sources":["../../src/hosting/db-browser-project.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AAClF,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAmB,EAAE,EAAE,MAAM,mBAAmB,CAAC;AAQ9E,MAAM,WAAW,GACf,OAAO,CAAC,GAAG,CAAC,eAAe;IAC3B,6EAA6E,CAAC;AAEhF,MAAM,cAAc,GAClB,OAAO,CAAC,GAAG,CAAC,kBAAkB;IAC9B,qFAAqF,CAAC;AAExF,MAAM,UAAU,sBAAsB,CAAC,GAAY;IACjD,MAAM,CAAC,GAAG,MAAM,CAAC,GAAG,IAAI,SAAS,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACxD,IAAI,CAAC,KAAK,YAAY,IAAI,CAAC,KAAK,KAAK;QAAE,OAAO,YAAY,CAAC;IAC3D,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,MAAM,UAAU,2BAA2B,CAAC,IAAmB,EAAE,MAAe;IAC9E,MAAM,IAAI,GAAG,IAAI,KAAK,YAAY,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;IAC9D,MAAM,GAAG,GAAG,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAChD,IAAI,GAAG,KAAK,OAAO,IAAI,GAAG,KAAK,SAAS;QAAE,OAAO,GAAG,IAAI,IAAI,GAAG,EAAE,CAAC;IAClE,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAAC,KAOjD;IACC,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC;IACtE,SAAS,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACxC,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,KAAK,KAAK,CAAC;IAE1C,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAC7B,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;QACxC,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC,EAAE,CAAC;gBACnE,OAAO;oBACL,EAAE,EAAE,KAAK;oBACT,KAAK,EAAE,CAAC,EAAE,CAAC,kBAAkB,CAAC,CAAC;oBAC/B,OAAO;oBACP,SAAS,EAAE,WAAW;iBACvB,CAAC;YACJ,CAAC;YACD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,kBAAkB,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;YACjD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,CAAC;QAC9D,CAAC;QACD,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,cAAc,EAAE,EAAE,CAAC;YACjC,aAAa,CACX,IAAI,EACJ,yEAAyE,EACzE,MAAM,CACP,CAAC;YACF,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACnB,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,KAAK,EAAE,CAAC,EAAE,CAAC,kBAAkB,CAAC,EAAE,EAAE,CAAC,kBAAkB,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;gBACrE,OAAO;gBACP,SAAS,EAAE,WAAW;aACvB,CAAC;QACJ,CAAC;QACD,MAAM,CAAC,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,UAAU,CACnC;YACE,MAAM;YACN,IAAI;YACJ,cAAc,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,OAAO,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE;SACvE,EACD,EAAE,SAAS,EAAE,OAAO,EAAE,CACvB,CAAC;QACF,IAAI,CAAC,CAAC,QAAQ,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YAC1C,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,kBAAkB,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;YACvF,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,CAAC;QAC/D,CAAC;QACD,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACnB,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,kBAAkB,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;QACjD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,CAAC;IAC9D,CAAC;IAED,0DAA0D;IAC1D,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;IAC1C,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;YACxB,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,KAAK,EAAE,CAAC,EAAE,CAAC,kBAAkB,CAAC,CAAC;gBAC/B,OAAO;gBACP,SAAS,EAAE,WAAW;aACvB,CAAC;QACJ,CAAC;QACD,uFAAuF;QACvF,MAAM,QAAQ,GAAG,4BAA4B,CAAC,OAAO,CAAC,CAAC;QACvD,OAAO,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC;QAClC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,kBAAkB,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC,EAAE,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;QACtE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,CAAC;IAC9D,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,cAAc,EAAE,EAAE,CAAC;QACjC,OAAO;YACL,EAAE,EAAE,KAAK;YACT,KAAK,EAAE,CAAC,EAAE,CAAC,kBAAkB,CAAC,CAAC;YAC/B,OAAO;YACP,SAAS,EAAE,WAAW;SACvB,CAAC;IACJ,CAAC;IACD,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,EAAE,SAAS,CAAC,CAAC;IAClD,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC3D,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IACpC,MAAM,MAAM,GAAG;QACb,QAAQ;QACR,cAAc,IAAI,CAAC,SAAS,CAAC,cAAc,CAAC,OAAO,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE;QACxE,UAAU,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC,EAAE;QACzD,YAAY,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC,EAAE;QAC3D,YAAY,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,OAAO,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC,EAAE;QACrF,oDAAoD;QACpD,gBAAgB,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC,sDAAsD;QACnH,uEAAuE;QACvE,kBAAkB;QAClB,oBAAoB,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,GAAG;QAC9C,UAAU,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC,IAAI,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE;QAChF,YAAY,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE;QACpC,aAAa,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE;KACtC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACb,MAAM,CAAC,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,EAAE,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,CAAC;IACtF,IAAI,CAAC,CAAC,QAAQ,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;QAC5C,KAAK,CAAC,IAAI,CACR,EAAE,CAAC,kCAAkC,EAAE;YACrC,MAAM,EAAE,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;SACnD,CAAC,CACH,CAAC;QACF,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,CAAC;IAC/D,CAAC;IACD,MAAM,OAAO,GAAG,4BAA4B,CAAC,OAAO,CAAC,CAAC;IACtD,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAC1C,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,8BAA8B,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,EAAE,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC;IACpF,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,CAAC;AAC9D,CAAC;AAED,gFAAgF;AAChF,MAAM,UAAU,4BAA4B,CAAC,OAAe;IAI1D,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IACpC,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,EAAE,gBAAgB,CAAC,CAAC;IACnD,MAAM,WAAW,GAAG,IAAI,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;IAC/C,SAAS,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACvC,IAAI,CAAC;QACH,qEAAqE;QACrE,SAAS,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IAC3B,CAAC;IAAC,MAAM,CAAC;QACP,iBAAiB;IACnB,CAAC;IACD,aAAa,CAAC,UAAU,EAAE,wBAAwB,CAAC,cAAc,EAAE,CAAC,EAAE,MAAM,CAAC,CAAC;IAC9E,aAAa,CACX,WAAW,EACX;QACE,4EAA4E;QAC5E,2BAA2B;QAC3B,iCAAiC;QACjC,6BAA6B;QAC7B,EAAE;KACH,CAAC,IAAI,CAAC,IAAI,CAAC,EACZ,MAAM,CACP,CAAC;IACF,OAAO,CAAC,IAAI,CAAC,UAAU,EAAE,WAAW,EAAE,MAAM,CAAC,CAAC;IAC9C,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,kCAAkC,CAAC,CAAC,CAAC;IACnD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;AAC5B,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,wBAAwB,CAAC,cAAsB;IAC7D,MAAM,MAAM,GAAG,MAAM,CAAC,cAAc,IAAI,cAAc,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;IAC5E,OAAO;;;;;6BAKoB,MAAM;;;;;;;;;;;;;;;;;CAiBlC,CAAC;AACF,CAAC;AAED,SAAS,cAAc;IACrB,MAAM,KAAK,GAAG,gEAAgE,CAAC;IAC/E,IAAI,CAAC,GAAG,EAAE,CAAC;IACX,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE;QAAE,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,KAAK,CAAC,MAAM,CAAC,CAAE,CAAC;IACnF,OAAO,CAAC,CAAC;AACX,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAAC,KAa5C;IAaC,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;IAC/B,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACjD,MAAM,IAAI,GAAG,sBAAsB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAEhD,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,MAAM,IAAI,QAAQ,CAAC,UAAU,CAAC,UAAU,EAAE,EAAE,CAAC,uBAAuB,CAAC,EAAE,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC,CAAC;IAC9F,CAAC;IACD,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,IAAI,QAAQ,CAAC,UAAU,CAAC,UAAU,EAAE,oBAAoB,EAAE,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC,CAAC;IACvF,CAAC;IAED,uEAAuE;IACvE,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,IAAI,CACzC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,KAAK,IAAI,CAAC,WAAW,EAAE,CAC1D,CAAC;IACF,IAAI,QAAQ,EAAE,CAAC;QACb,OAAO;YACL,EAAE,EAAE,KAAK;YACT,KAAK,EAAE;gBACL,EAAE,CAAC,6BAA6B,EAAE,EAAE,IAAI,EAAE,CAAC;gBAC3C,qBAAqB,QAAQ,CAAC,EAAE,EAAE;aACnC;YACD,OAAO;YACP,YAAY,EAAE,QAAQ;SACvB,CAAC;IACJ,CAAC;IAED,IAAI,OAAsD,CAAC;IAC3D,IAAI,CAAC;QACH,OAAO,GAAG,MAAM,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC;YACpC,IAAI;YACJ,MAAM;YACN,OAAO,EAAE,KAAK;YACd,UAAU,EAAE,WAAW;YACvB,aAAa,EAAE,IAAI;YACnB,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,WAAW,EAAE,KAAK,CAAC,WAAW;SAC/B,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,IAAI,CAAC,YAAY,QAAQ;YAAE,MAAM,CAAC,CAAC;QACnC,MAAM,GAAG,GAAG,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QACvD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,GAAG,CAAC,EAAE,OAAO,EAAE,YAAY,EAAE,QAAQ,EAAE,CAAC;IACtE,CAAC;IACD,KAAK,CAAC,IAAI,CACR,EAAE,CAAC,gCAAgC,EAAE,EAAE,EAAE,EAAE,OAAO,CAAC,OAAO,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,CACvE,CAAC;IACF,IAAI,OAAO,CAAC,QAAQ,EAAE,KAAK,EAAE,MAAM;QAAE,KAAK,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IAEvF,MAAM,GAAG,GAAG,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IACnD,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC,GAAG,CAAC,OAAO,IAAI,YAAY,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC;IAEpF,qCAAqC;IACrC,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;QACzC,IAAI,UAAU,CAAC,KAAK,CAAC;YAAE,MAAM,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACxD,CAAC;IAAC,MAAM,CAAC;QACP,iBAAiB;IACnB,CAAC;IAED,MAAM,IAAI,GAAG,MAAM,2BAA2B,CAAC;QAC7C,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,OAAO,EAAE,GAAG,CAAC,OAAO;QACpB,OAAO;QACP,IAAI;QACJ,QAAQ,EAAE,KAAK,CAAC,QAAQ,KAAK,KAAK;KACnC,CAAC,CAAC;IACH,KAAK,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC;IAC1B,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC;IAC9B,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;QACb,OAAO;YACL,EAAE,EAAE,KAAK;YACT,OAAO,EAAE,GAAG;YACZ,SAAS,EAAE,GAAG,CAAC,EAAE;YACjB,KAAK;YACL,OAAO;YACP,OAAO,EAAE,UAAU,MAAM,GAAG;YAC5B,YAAY,EAAE,QAAQ;SACvB,CAAC;IACJ,CAAC;IAED,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC;IAC3E,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;IAC/C,MAAM,KAAK,GAAG,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACzC,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,IAAI,CAAC,EAAE,CAAC;IACvC,OAAO;QACL,EAAE;QACF,OAAO,EAAE,KAAK;QACd,SAAS,EAAE,KAAK,CAAC,EAAE;QACnB,OAAO,EAAE,UAAU,MAAM,GAAG;QAC5B,KAAK;QACL,OAAO;QACP,OAAO,EAAE,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,eAAe,IAAI,IAAI,CAAC,OAAO,EAAE,eAAe,CAAC;QAC/E,eAAe,EAAE,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,eAAe,IAAI,IAAI,CAAC,OAAO,EAAE,eAAe,CAAC;QACvF,YAAY,EAAE,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,YAAY,IAAI,IAAI,CAAC,OAAO,EAAE,YAAY,CAAC;QAC9E,YAAY,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS;KACxE,CAAC;AACJ,CAAC"}

package/dist/hosting/db-client.d.ts

@@ -0,0 +1,33 @@
+/**
+ * MySQL / Redis connection probes and SQL plan execution hooks.
+ */
+export interface DbEndpoint {
+    host: string;
+    port: number;
+}
+/**
+ * TCP probe for database reachability (no native mysql client required).
+ */
+export declare function probeEndpoint(host: string, port: number, timeoutMs?: number): Promise<{
+    ok: boolean;
+    latencyMs: number;
+    detail: string;
+}>;
+/** Escape a string for single-quoted MySQL string literals. */
+export declare function escapeMysqlString(value: string): string;
+/** Host part of user@host — %, hostname, or IPv4-ish; reject quotes and spaces. */
+export declare function validateMysqlHost(host: string): string;
+export declare function validateMysqlIdent(name: string, field: string): void;
+/**
+ * Render SQL for create database + user (password placeholder for audit).
+ */
+export declare function renderMysqlProvisionSql(input: {
+    dbName: string;
+    username: string;
+    password?: string;
+    host?: string;
+}): {
+    sql: string[];
+    connectionHint: Record<string, string>;
+};
+//# sourceMappingURL=db-client.d.ts.map

package/dist/hosting/db-client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"db-client.d.ts","sourceRoot":"","sources":["../../src/hosting/db-client.ts"],"names":[],"mappings":"AAAA;;GAEG;AAKH,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;CACd;AAED;;GAEG;AACH,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,SAAO,GAAG,OAAO,CAAC;IACnF,EAAE,EAAE,OAAO,CAAC;IACZ,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;CAChB,CAAC,CAaD;AAGD,+DAA+D;AAC/D,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAQvD;AAED,mFAAmF;AACnF,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAQtD;AAED,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI,CAIpE;AAED;;GAEG;AACH,wBAAgB,uBAAuB,CAAC,KAAK,EAAE;IAC7C,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,IAAI,CAAC,EAAE,MAAM,CAAC;CACf,GAAG;IAAE,GAAG,EAAE,MAAM,EAAE,CAAC;IAAC,cAAc,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;CAAE,CAkB5D"}

package/dist/hosting/db-client.js

@@ -0,0 +1,70 @@
+/**
+ * MySQL / Redis connection probes and SQL plan execution hooks.
+ */
+import { ErrorCodes, YskError, tl } from 'ysk-server-shared';
+import net from 'node:net';
+/**
+ * TCP probe for database reachability (no native mysql client required).
+ */
+export function probeEndpoint(host, port, timeoutMs = 3000) {
+    const start = Date.now();
+    return new Promise((resolve) => {
+        const socket = net.createConnection({ host, port });
+        const finish = (ok, detail) => {
+            socket.destroy();
+            resolve({ ok, latencyMs: Date.now() - start, detail });
+        };
+        socket.setTimeout(timeoutMs);
+        socket.on('connect', () => finish(true, `connected to ${host}:${port}`));
+        socket.on('timeout', () => finish(false, 'timeout'));
+        socket.on('error', (e) => finish(false, e.message));
+    });
+}
+/** Escape a string for single-quoted MySQL string literals. */
+export function escapeMysqlString(value) {
+    return value
+        .replace(/\\/g, '\\\\')
+        .replace(/'/g, "\\'")
+        .replace(/\0/g, '\\0')
+        .replace(/\n/g, '\\n')
+        .replace(/\r/g, '\\r')
+        .replace(/\x1a/g, '\\Z');
+}
+/** Host part of user@host — %, hostname, or IPv4-ish; reject quotes and spaces. */
+export function validateMysqlHost(host) {
+    const h = (host ?? '%').trim() || '%';
+    if (h.length > 255 || /['"\\\s;]/.test(h)) {
+        throw new YskError(ErrorCodes.VALIDATION, tl('notes.auto.t0428', { v0: ('host') }), {
+            httpStatus: 400,
+        });
+    }
+    return h;
+}
+export function validateMysqlIdent(name, field) {
+    if (!/^[a-zA-Z][a-zA-Z0-9_]{0,63}$/.test(name)) {
+        throw new YskError(ErrorCodes.VALIDATION, tl('notes.auto.t0428', { v0: (field) }), { httpStatus: 400 });
+    }
+}
+/**
+ * Render SQL for create database + user (password placeholder for audit).
+ */
+export function renderMysqlProvisionSql(input) {
+    validateMysqlIdent(input.dbName, 'dbName');
+    validateMysqlIdent(input.username, 'username');
+    const host = validateMysqlHost(input.host ?? '%');
+    const pass = escapeMysqlString(input.password ?? 'CHANGE_ME');
+    return {
+        sql: [
+            `CREATE DATABASE IF NOT EXISTS \`${input.dbName}\` CHARACTER SET utf8mb4 COLLATE utf8mb4_unicode_ci;`,
+            `CREATE USER IF NOT EXISTS '${input.username}'@'${host}' IDENTIFIED BY '${pass}';`,
+            `GRANT ALL PRIVILEGES ON \`${input.dbName}\`.* TO '${input.username}'@'${host}';`,
+            'FLUSH PRIVILEGES;',
+        ],
+        connectionHint: {
+            database: input.dbName,
+            user: input.username,
+            host: input.host ?? 'localhost',
+        },
+    };
+}
+//# sourceMappingURL=db-client.js.map

package/dist/hosting/db-client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"db-client.js","sourceRoot":"","sources":["../../src/hosting/db-client.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,EAAE,EAAC,MAAM,mBAAmB,CAAC;AAC5D,OAAO,GAAG,MAAM,UAAU,CAAC;AAO3B;;GAEG;AACH,MAAM,UAAU,aAAa,CAAC,IAAY,EAAE,IAAY,EAAE,SAAS,GAAG,IAAI;IAKxE,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACzB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,MAAM,MAAM,GAAG,GAAG,CAAC,gBAAgB,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QACpD,MAAM,MAAM,GAAG,CAAC,EAAW,EAAE,MAAc,EAAE,EAAE;YAC7C,MAAM,CAAC,OAAO,EAAE,CAAC;YACjB,OAAO,CAAC,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;QACzD,CAAC,CAAC;QACF,MAAM,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;QAC7B,MAAM,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE,gBAAgB,IAAI,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC;QACzE,MAAM,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC,CAAC;QACrD,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IACtD,CAAC,CAAC,CAAC;AACL,CAAC;AAGD,+DAA+D;AAC/D,MAAM,UAAU,iBAAiB,CAAC,KAAa;IAC7C,OAAO,KAAK;SACT,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC;SACtB,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC;SACpB,OAAO,CAAC,KAAK,EAAE,KAAK,CAAC;SACrB,OAAO,CAAC,KAAK,EAAE,KAAK,CAAC;SACrB,OAAO,CAAC,KAAK,EAAE,KAAK,CAAC;SACrB,OAAO,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;AAC7B,CAAC;AAED,mFAAmF;AACnF,MAAM,UAAU,iBAAiB,CAAC,IAAY;IAC5C,MAAM,CAAC,GAAG,CAAC,IAAI,IAAI,GAAG,CAAC,CAAC,IAAI,EAAE,IAAI,GAAG,CAAC;IACtC,IAAI,CAAC,CAAC,MAAM,GAAG,GAAG,IAAI,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;QAC1C,MAAM,IAAI,QAAQ,CAAC,UAAU,CAAC,UAAU,EAAE,EAAE,CAAC,kBAAkB,EAAE,EAAE,EAAE,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE;YAClF,UAAU,EAAE,GAAG;SAChB,CAAC,CAAC;IACL,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,IAAY,EAAE,KAAa;IAC5D,IAAI,CAAC,8BAA8B,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QAC/C,MAAM,IAAI,QAAQ,CAAC,UAAU,CAAC,UAAU,EAAE,EAAE,CAAC,kBAAkB,EAAE,EAAE,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC,CAAC;IAC1G,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,uBAAuB,CAAC,KAKvC;IACC,kBAAkB,CAAC,KAAK,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;IAC3C,kBAAkB,CAAC,KAAK,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;IAC/C,MAAM,IAAI,GAAG,iBAAiB,CAAC,KAAK,CAAC,IAAI,IAAI,GAAG,CAAC,CAAC;IAClD,MAAM,IAAI,GAAG,iBAAiB,CAAC,KAAK,CAAC,QAAQ,IAAI,WAAW,CAAC,CAAC;IAC9D,OAAO;QACL,GAAG,EAAE;YACH,mCAAmC,KAAK,CAAC,MAAM,sDAAsD;YACrG,8BAA8B,KAAK,CAAC,QAAQ,MAAM,IAAI,oBAAoB,IAAI,IAAI;YAClF,6BAA6B,KAAK,CAAC,MAAM,YAAY,KAAK,CAAC,QAAQ,MAAM,IAAI,IAAI;YACjF,mBAAmB;SACpB;QACD,cAAc,EAAE;YACd,QAAQ,EAAE,KAAK,CAAC,MAAM;YACtB,IAAI,EAAE,KAAK,CAAC,QAAQ;YACpB,IAAI,EAAE,KAAK,CAAC,IAAI,IAAI,WAAW;SAChC;KACF,CAAC;AACJ,CAAC"}

package/dist/hosting/db-cluster/apply-local.d.ts

@@ -0,0 +1,35 @@
+import type { HostExecutor } from '../../host/executor.js';
+import type { JsonStore } from '../../db/store.js';
+import type { DbCluster } from './types.js';
+export interface ClusterApplyResult {
+    ok: boolean;
+    dryRun: boolean;
+    executed: boolean;
+    blocked?: boolean;
+    cluster: DbCluster;
+    written: string[];
+    notes: string[];
+    requiresExecute: boolean;
+    requiresRoot: boolean;
+    /** system drop-in path if installed */
+    systemConf?: string;
+}
+/**
+ * Apply local Galera (or generic) conf for this control-plane host.
+ * - Always ensures plan artifacts under dataDir
+ * - Without execute: status stays planned/partial, local applyStatus=written
+ * - With execute + EXECUTE + root: copy drop-in to system path
+ */
+export declare function applyDbClusterLocal(input: {
+    db: JsonStore;
+    dataDir: string;
+    host: HostExecutor;
+    clusterId: string;
+    /** default false — dry-run / panel write only */
+    execute?: boolean;
+    /** if true and execute, attempt galera_new_cluster instead of restart (first node only) */
+    bootstrap?: boolean;
+}): Promise<ClusterApplyResult>;
+/** Read managed conf snippet for display (no secrets). */
+export declare function readLocalGaleraConfSnippet(dataDir: string, clusterId: string, max?: number): string;
+//# sourceMappingURL=apply-local.d.ts.map

package/dist/hosting/db-cluster/apply-local.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"apply-local.d.ts","sourceRoot":"","sources":["../../../src/hosting/db-cluster/apply-local.ts"],"names":[],"mappings":"AASA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AAC3D,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAC;AAGnD,OAAO,KAAK,EAAE,SAAS,EAAsC,MAAM,YAAY,CAAC;AAYhF,MAAM,WAAW,kBAAkB;IACjC,EAAE,EAAE,OAAO,CAAC;IACZ,MAAM,EAAE,OAAO,CAAC;IAChB,QAAQ,EAAE,OAAO,CAAC;IAClB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,OAAO,EAAE,SAAS,CAAC;IACnB,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,eAAe,EAAE,OAAO,CAAC;IACzB,YAAY,EAAE,OAAO,CAAC;IACtB,uCAAuC;IACvC,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAkBD;;;;;GAKG;AACH,wBAAsB,mBAAmB,CAAC,KAAK,EAAE;IAC/C,EAAE,EAAE,SAAS,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,YAAY,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,iDAAiD;IACjD,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,2FAA2F;IAC3F,SAAS,CAAC,EAAE,OAAO,CAAC;CACrB,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAqU9B;AAED,0DAA0D;AAC1D,wBAAgB,0BAA0B,CAAC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,SAAO,GAAG,MAAM,CAQjG"}