ysk-server-core 1.0.0

package/dist/hosting/dns-zone.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dns-zone.js","sourceRoot":"","sources":["../../src/hosting/dns-zone.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EACL,SAAS,EACT,aAAa,EACb,WAAW,EACX,UAAU,EACV,YAAY,EACZ,UAAU,GACX,MAAM,SAAS,CAAC;AACjB,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,EAAE,EAAC,MAAM,mBAAmB,CAAC;AAE5D,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAChE,OAAO,EACL,wBAAwB,EACxB,WAAW,GAGZ,MAAM,aAAa,CAAC;AAmBrB,SAAS,cAAc,CAAC,IAAY;IAClC,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IACvD,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,GAAG,GAAG,IAAI,CAAC,mCAAmC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QAC7F,MAAM,IAAI,QAAQ,CAAC,UAAU,CAAC,UAAU,EAAE,EAAE,CAAC,kBAAkB,CAAC,EAAE;YAChE,UAAU,EAAE,GAAG;YACf,OAAO,EAAE,EAAE,IAAI,EAAE;SAClB,CAAC,CAAC;IACL,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC;AAED,SAAS,UAAU,CAAC,EAAU;IAC5B,MAAM,CAAC,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC;IAC1B,IAAI,CAAC,CAAC,IAAI,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC;QAC5B,MAAM,IAAI,QAAQ,CAAC,UAAU,CAAC,UAAU,EAAE,EAAE,CAAC,kBAAkB,CAAC,EAAE;YAChE,UAAU,EAAE,GAAG;YACf,OAAO,EAAE,EAAE,EAAE,EAAE;SAChB,CAAC,CAAC;IACL,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC;AAED,SAAS,kBAAkB,CAAC,EAAsB;IAChD,IAAI,EAAE,IAAI,IAAI,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,IAAI,EAAE;QAAE,OAAO,SAAS,CAAC;IACvD,MAAM,CAAC,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC;IAC1B,IAAI,CAAC,CAAC,IAAI,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC;QAC5B,MAAM,IAAI,QAAQ,CAAC,UAAU,CAAC,UAAU,EAAE,EAAE,CAAC,kBAAkB,CAAC,EAAE;YAChE,UAAU,EAAE,GAAG;YACf,OAAO,EAAE,EAAE,EAAE,EAAE;SAChB,CAAC,CAAC;IACL,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,kBAAkB,CAAC,KAqBlC;IACC,MAAM,IAAI,GAAG,cAAc,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACxC,MAAM,QAAQ,GAAG,UAAU,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IAC5C,MAAM,UAAU,GAAG,kBAAkB,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IACxD,MAAM,MAAM,GACV,KAAK,CAAC,MAAM;QACZ,MAAM,CACJ,GAAG,IAAI,IAAI,EAAE,CAAC,cAAc,EAAE,GAAG,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,GAAG,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC,UAAU,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,GAAG,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAChM,CAAC;IACJ,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,IAAI,GAAG,CAAC;IAC7B,MAAM,KAAK,GAAG,CAAC,CAAqB,EAAE,GAAW,EAAE,GAAW,EAAE,GAAW,EAAE,EAAE;QAC7E,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;YAAE,OAAO,GAAG,CAAC;QACjD,OAAO,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACrD,CAAC,CAAC;IACF,MAAM,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,UAAU,EAAE,IAAI,EAAE,GAAG,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;IAC9D,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,QAAQ,EAAE,IAAI,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC;IACtD,MAAM,MAAM,GAAG,KAAK,CAAC,KAAK,CAAC,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,GAAG,GAAG,CAAC,CAAC;IACnE,MAAM,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,UAAU,EAAE,GAAG,EAAE,EAAE,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;IAC5D,IAAI,EAAE,GAAG,CAAC,KAAK,CAAC,MAAM,IAAI,OAAO,IAAI,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;IACjD,IAAI,CAAC,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,EAAE,GAAG,GAAG,EAAE,GAAG,CAAC;IACrC,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IACvC,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,GAAG,GAAG,GAAG,GAAG,GAAG,CAAC;IAC/C,IAAI,KAAK,GAAG,CAAC,KAAK,CAAC,UAAU,IAAI,cAAc,IAAI,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IAClF,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,KAAK,GAAG,GAAG,KAAK,GAAG,CAAC;IAC9C,MAAM,WAAW,GACf,KAAK,CAAC,OAAO;QACb,WAAW,CAAC;YACV,IAAI;YACJ,QAAQ;YACR,UAAU;YACV,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,QAAQ,EAAE,KAAK,CAAC,QAAQ;SACzB,CAAC,CAAC,OAAO,CAAC;IAEb,MAAM,KAAK,GAAG;QACZ,+BAA+B,IAAI,EAAE;QACrC,8DAA8D;QAC9D,QAAQ,GAAG,EAAE;QACb,WAAW,IAAI,GAAG;QAClB,eAAe,EAAE,KAAK,KAAK,KAAK;QAChC,OAAO,MAAM,YAAY;QACzB,OAAO,OAAO,eAAe;QAC7B,OAAO,KAAK,aAAa;QACzB,OAAO,MAAM,cAAc;QAC3B,OAAO,OAAO,eAAe;QAC7B,OAAO;QACP,cAAc,EAAE,EAAE;KACnB,CAAC;IACF,IAAI,GAAG,EAAE,CAAC;QACR,KAAK,CAAC,IAAI,CAAC,cAAc,GAAG,EAAE,CAAC,CAAC;IAClC,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,eAAe,QAAQ,EAAE,CAAC,CAAC;IACtC,IAAI,UAAU,EAAE,CAAC;QACf,KAAK,CAAC,IAAI,CAAC,kBAAkB,UAAU,EAAE,CAAC,CAAC;IAC7C,CAAC;IAED,KAAK,MAAM,CAAC,IAAI,WAAW,EAAE,CAAC;QAC5B,MAAM,IAAI,GAAG,CAAC,CAAC,IAAI,KAAK,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QAC9D,IAAI,CAAC,CAAC,IAAI,KAAK,KAAK,EAAE,CAAC;YACrB,KAAK,CAAC,IAAI,CAAC,GAAG,IAAI,eAAe,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC;QAC5E,CAAC;aAAM,IAAI,CAAC,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;YAC9B,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,GAAG,CAAC;YAC1D,KAAK,CAAC,IAAI,CAAC,GAAG,IAAI,gBAAgB,CAAC,EAAE,CAAC,CAAC;QACzC,CAAC;aAAM,IAAI,CAAC,CAAC,IAAI,KAAK,GAAG,IAAI,CAAC,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;YAC/C,qCAAqC;YACrC,IAAI,CAAC,CAAC,IAAI,KAAK,GAAG,IAAI,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;gBACpE,MAAM,IAAI,QAAQ,CAAC,UAAU,CAAC,UAAU,EAAE,EAAE,CAAC,kBAAkB,CAAC,EAAE;oBAChE,UAAU,EAAE,GAAG;oBACf,OAAO,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE;iBAC5B,CAAC,CAAC;YACL,CAAC;YACD,IAAI,CAAC,CAAC,IAAI,KAAK,MAAM,IAAI,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;gBACvE,MAAM,IAAI,QAAQ,CAAC,UAAU,CAAC,UAAU,EAAE,EAAE,CAAC,kBAAkB,CAAC,EAAE;oBAChE,UAAU,EAAE,GAAG;oBACf,OAAO,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE;iBAC5B,CAAC,CAAC;YACL,CAAC;YACD,KAAK,CAAC,IAAI,CAAC,GAAG,IAAI,SAAS,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;QACnD,CAAC;aAAM,IAAI,CAAC,CAAC,IAAI,KAAK,IAAI,EAAE,CAAC;YAC3B,KAAK,CAAC,IAAI,CAAC,GAAG,IAAI,aAAa,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;QAC5C,CAAC;aAAM,IAAI,CAAC,CAAC,IAAI,KAAK,IAAI,EAAE,CAAC;YAC3B,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,GAAG,CAAC;YAC1D,KAAK,CAAC,IAAI,CAAC,GAAG,IAAI,aAAa,CAAC,EAAE,CAAC,CAAC;QACtC,CAAC;aAAM,IAAI,CAAC,CAAC,IAAI,KAAK,KAAK,IAAI,CAAC,CAAC,IAAI,KAAK,KAAK,EAAE,CAAC;YAChD,KAAK,CAAC,IAAI,CAAC,GAAG,IAAI,SAAS,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;QACnD,CAAC;IACH,CAAC;IACD,4EAA4E;IAC5E,IAAI,UAAU,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,EAAE,CAAC;QAC9D,KAAK,CAAC,IAAI,CAAC,gBAAgB,UAAU,EAAE,CAAC,CAAC;QACzC,KAAK,CAAC,IAAI,CAAC,kBAAkB,UAAU,EAAE,CAAC,CAAC;IAC7C,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAEf,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC;AAClE,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,KAqBzC;IACC,MAAM,IAAI,GAAG,cAAc,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACxC,MAAM,QAAQ,GAAG,wBAAwB,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IAC1D,MAAM,QAAQ,GAAG,kBAAkB,CAAC;QAClC,IAAI;QACJ,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,QAAQ;QACR,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,GAAG,EAAE,KAAK,CAAC,GAAG;QACd,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,UAAU,EAAE,KAAK,CAAC,UAAU;KAC7B,CAAC,CAAC;IAEH,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;IAChD,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACpC,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,OAAO,CAAC,CAAC;IAC3C,aAAa,CAAC,QAAQ,EAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAE/C,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,OAAO,CAAC,CAAC;IAC3C,aAAa,CACX,QAAQ,EACR,IAAI,CAAC,SAAS,CACZ;QACE,IAAI;QACJ,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7D,QAAQ,EAAE,KAAK,CAAC,QAAQ,IAAI,QAAQ,IAAI,EAAE;QAC1C,MAAM,EAAE,QAAQ,CAAC,MAAM;QACvB,QAAQ;QACR,MAAM,EAAE,KAAK,CAAC,MAAM,IAAI,OAAO,IAAI,GAAG;QACtC,GAAG,EAAE,KAAK,CAAC,GAAG,IAAI,GAAG;QACrB,OAAO,EAAE,QAAQ,CAAC,OAAO;QACzB,QAAQ;QACR,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KACpC,EACD,IAAI,EACJ,CAAC,CACF,GAAG,IAAI,EACR,MAAM,CACP,CAAC;IAEF,MAAM,KAAK,GAAG;QACZ,cAAc,QAAQ,EAAE;QACxB,WAAW,QAAQ,CAAC,MAAM,EAAE;QAC5B,sBAAsB,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE;KAChD,CAAC;IACF,MAAM,OAAO,GAAG,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IACrC,MAAM,cAAc,GAAqC,EAAE,CAAC;IAC5D,IAAI,SAA8B,CAAC;IACnC,IAAI,QAAQ,GAAG,KAAK,CAAC;IACrB,MAAM,YAAY,GAAG,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IAC7C,MAAM,UAAU,GAAG,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IAC5C,MAAM,UAAU,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,EAAE,cAAc,EAAE,CAAC,CAAC;IAEzD,IAAI,CAAC,YAAY,IAAI,UAAU,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC;QAChD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,kBAAkB,CAAC,CAAC,CAAC;IACrC,CAAC;IAED,IAAI,YAAY,IAAI,UAAU,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC;QAC7C,MAAM,EAAE,UAAU,EAAE,GAAG,MAAM,MAAM,CAAC,2BAA2B,CAAC,CAAC;QACjE,IAAI,MAAM,UAAU,CAAC,KAAK,CAAC,IAAI,EAAE,iBAAiB,CAAC,EAAE,CAAC;YACpD,MAAM,CAAC,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,iBAAiB,EAAE,IAAI,EAAE,QAAQ,CAAC,EAAE;gBACzE,SAAS,EAAE,MAAM;aAClB,CAAC,CAAC;YACH,cAAc,CAAC,IAAI,CAAC;gBAClB,IAAI,EAAE,CAAC,iBAAiB,EAAE,IAAI,EAAE,QAAQ,CAAC;gBACzC,QAAQ,EAAE,CAAC,CAAC,QAAQ;gBACpB,MAAM,EAAE,CAAC,CAAC,MAAM;aACjB,CAAC,CAAC;YACH,SAAS,GAAG,CAAC,CAAC,QAAQ,KAAK,CAAC,CAAC;YAC7B,KAAK,CAAC,IAAI,CACR,SAAS;gBACP,CAAC,CAAC,qBAAqB;gBACvB,CAAC,CAAC,2BAA2B,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,MAAM,EAAE,CACtD,CAAC;QACJ,CAAC;aAAM,CAAC;YACN,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,kBAAkB,CAAC,CAAC,CAAC;YACnC,SAAS,GAAG,SAAS,CAAC;QACxB,CAAC;IACH,CAAC;IAED,yCAAyC;IACzC,IAAI,UAAU,IAAI,UAAU,IAAI,KAAK,CAAC,IAAI,IAAI,SAAS,KAAK,KAAK,EAAE,CAAC;QAClE,yEAAyE;QACzE,QAAQ,GAAG,MAAM,0BAA0B,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,cAAc,EAAE;YAC7E,WAAW,EAAE,IAAI;SAClB,CAAC,CAAC;IACL,CAAC;SAAM,IAAI,UAAU,IAAI,UAAU,IAAI,SAAS,KAAK,KAAK,EAAE,CAAC;QAC3D,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,kBAAkB,CAAC,CAAC,CAAC;IACrC,CAAC;IAED,IAAI,WAAW,GAAkC,SAAS,CAAC;IAC3D,IAAI,EAAE,GAAG,IAAI,CAAC;IACd,IAAI,SAAS,KAAK,KAAK,EAAE,CAAC;QACxB,WAAW,GAAG,QAAQ,CAAC;QACvB,EAAE,GAAG,KAAK,CAAC;IACb,CAAC;SAAM,IAAI,QAAQ,EAAE,CAAC;QACpB,WAAW,GAAG,SAAS,CAAC;QACxB,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,kBAAkB,CAAC,CAAC,CAAC;IACrC,CAAC;SAAM,CAAC;QACN,WAAW,GAAG,SAAS,CAAC;QACxB,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,kBAAkB,CAAC,CAAC,CAAC;IACrC,CAAC;IAED,OAAO;QACL,EAAE;QACF,IAAI;QACJ,QAAQ;QACR,MAAM,EAAE,QAAQ,CAAC,MAAM;QACvB,OAAO,EAAE,QAAQ,CAAC,OAAO;QACzB,KAAK;QACL,OAAO;QACP,cAAc;QACd,eAAe,EAAE,CAAC,YAAY,IAAI,UAAU,CAAC,IAAI,CAAC,UAAU;QAC5D,SAAS;QACT,QAAQ;QACR,WAAW;KACZ,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAC9C,IAAkB,EAClB,KAAe,EACf,cAAgD,EAChD,IAA+F;IAE/F,MAAM,QAAQ,GAAe;QAC3B,CAAC,MAAM,EAAE,QAAQ,CAAC;QAClB,CAAC,WAAW,EAAE,QAAQ,EAAE,OAAO,CAAC;QAChC,CAAC,WAAW,EAAE,QAAQ,EAAE,OAAO,CAAC;KACjC,CAAC;IACF,IAAI,IAAI,EAAE,WAAW,EAAE,CAAC;QACtB,QAAQ,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC;IACjD,CAAC;IACD,KAAK,MAAM,IAAI,IAAI,QAAQ,EAAE,CAAC;QAC5B,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,WAAW,EAAE,CAAC;YAC5B,MAAM,EAAE,UAAU,EAAE,GAAG,MAAM,MAAM,CAAC,2BAA2B,CAAC,CAAC;YACjE,IAAI,CAAC,CAAC,MAAM,UAAU,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAE,CAAC,CAAC;gBAAE,SAAS;QACpD,CAAC;QACD,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,WAAW,EAAE,CAAC;YAC5B,MAAM,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;YACrB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,CAAC,WAAW,EAAE,WAAW,EAAE,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC;YAC7F,IAAI,CAAC,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,KAAK,QAAQ;gBAAE,SAAS;QAC1D,CAAC;QACD,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,CAAC;QAC7D,cAAc,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;QACtE,IAAI,CAAC,CAAC,QAAQ,KAAK,CAAC,EAAE,CAAC;YACrB,KAAK,CAAC,IAAI,CAAC,yBAAyB,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YACtD,OAAO,IAAI,CAAC;QACd,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,kBAAkB,EAAE,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;IACpG,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,kBAAkB,CAAC,CAAC,CAAC;IACnC,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,yBAAyB,CACvC,OAAe,EACf,IAAY;IAEZ,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IACvD,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,IAAI,CAAC,CAAC;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,YAAY,CAAC,EAAE,CAAC;IAC7D,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;IAC1C,KAAK,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;QAC3C,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QACvB,IAAI,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC;YAClB,IAAI,CAAC;gBACH,UAAU,CAAC,CAAC,CAAC,CAAC;gBACd,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAClB,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACX,KAAK,CAAC,IAAI,CAAC,oBAAoB,CAAC,KAAK,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YACrF,CAAC;QACH,CAAC;IACH,CAAC;IACD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,KAAK,CAAC,IAAI,CAAC,wBAAwB,CAAC,EAAE,CAAC,CAAC;;QAC7D,KAAK,CAAC,IAAI,CAAC,WAAW,OAAO,CAAC,MAAM,gBAAgB,CAAC,EAAE,CAAC,CAAC;IAC9D,OAAO,EAAE,EAAE,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;AAC7E,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,mBAAmB,CAAC,OAAe;IASjD,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;IAC1C,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,EAAE,CAAC;IAChC,MAAM,KAAK,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;IAClE,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;QACrB,MAAM,IAAI,GAAG,CAAC,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;QACtC,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QAC9B,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,OAAO,CAAC,CAAC;QAC3C,IAAI,MAA0B,CAAC;QAC/B,IAAI,QAA4B,CAAC;QACjC,IAAI,SAA6B,CAAC;QAClC,IAAI,QAA4B,CAAC;QACjC,IAAI,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;YACzB,IAAI,CAAC;gBACH,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,CAKrD,CAAC;gBACF,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;gBACrB,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC;gBACzB,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC;gBAC3B,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC;YAC3B,CAAC;YAAC,MAAM,CAAC;gBACP,YAAY;YACd,CAAC;QACH,CAAC;QACD,OAAO;YACL,IAAI;YACJ,QAAQ;YACR,QAAQ,EAAE,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS;YACrD,MAAM;YACN,QAAQ;YACR,SAAS;YACT,QAAQ;SACT,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/hosting/dnssec.d.ts

@@ -0,0 +1,22 @@
+import type { HostExecutor } from '../host/executor.js';
+export declare function generateDnssecKeys(input: {
+    dataDir: string;
+    zone: string;
+    host?: HostExecutor;
+    /** When true and keys exist, attempt dnssec-signzone on managed zone file */
+    signZone?: boolean;
+}): Promise<{
+    ok: boolean;
+    notes: string[];
+    written: string[];
+    dsRecord?: string;
+    publicKey?: string;
+    signedZonePath?: string;
+    requiresExecute?: boolean;
+    apply_status?: 'written' | 'applied' | 'partial';
+}>;
+export declare function listDnssecMaterial(dataDir: string, zone: string): {
+    files: string[];
+    notes: string[];
+};
+//# sourceMappingURL=dnssec.d.ts.map

package/dist/hosting/dnssec.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"dnssec.d.ts","sourceRoot":"","sources":["../../src/hosting/dnssec.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAExD,wBAAsB,kBAAkB,CAAC,KAAK,EAAE;IAC9C,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,YAAY,CAAC;IACpB,6EAA6E;IAC7E,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB,GAAG,OAAO,CAAC;IACV,EAAE,EAAE,OAAO,CAAC;IACZ,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,YAAY,CAAC,EAAE,SAAS,GAAG,SAAS,GAAG,SAAS,CAAC;CAClD,CAAC,CA6KD;AAED,wBAAgB,kBAAkB,CAChC,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,MAAM,GACX;IAAE,KAAK,EAAE,MAAM,EAAE,CAAC;IAAC,KAAK,EAAE,MAAM,EAAE,CAAA;CAAE,CAKtC"}

package/dist/hosting/dnssec.js

@@ -0,0 +1,170 @@
+import { tl } from 'ysk-server-shared';
+/**
+ * DNSSEC key material + optional zone signing under dataDir — honest, not auto-publish DS.
+ */
+import { mkdirSync, writeFileSync, existsSync, readFileSync, readdirSync, copyFileSync } from 'node:fs';
+import { join } from 'node:path';
+export async function generateDnssecKeys(input) {
+    const zone = input.zone.trim().toLowerCase().replace(/\.$/, '');
+    const dir = join(input.dataDir, 'dns', 'dnssec', zone);
+    mkdirSync(dir, { recursive: true });
+    const notes = [];
+    const written = [];
+    let dsRecord;
+    let publicKey;
+    let keysOk = false;
+    if (input.host?.executeEnabled()) {
+        const { binPresent } = await import('./software-probe/index.js');
+        const checkOk = await binPresent(input.host, 'dnssec-keygen');
+        if (checkOk) {
+            // Avoid re-generating if keys already present
+            const existingKeys = existsSync(dir)
+                ? readdirSync(dir).filter((f) => f.endsWith('.key'))
+                : [];
+            if (existingKeys.length === 0) {
+                const r = await input.host.runCommand([
+                    'bash',
+                    '-c',
+                    `cd ${JSON.stringify(dir)} && dnssec-keygen -a ECDSAP256SHA256 -n ZONE ${zone} 2>&1`,
+                ], { timeoutMs: 30_000 });
+                notes.push(r.stdout || r.stderr || `exit ${r.exitCode}`);
+                if (r.exitCode !== 0) {
+                    notes.push(tl('notes.auto.n0256'));
+                }
+            }
+            else {
+                notes.push(tl('notes.auto.t0360', { v0: (existingKeys.length) }));
+            }
+            const files = readdirSync(dir).filter((f) => f.endsWith('.key'));
+            for (const f of files)
+                written.push(join(dir, f));
+            const keyFile = files.find((f) => f.includes('key')) ?? files[0];
+            if (keyFile) {
+                keysOk = true;
+                const pub = readFileSync(join(dir, keyFile), 'utf8');
+                publicKey = pub.slice(0, 500);
+                const ds = await input.host.runCommand([
+                    'bash',
+                    '-c',
+                    `cd ${JSON.stringify(dir)} && dnssec-dsfromkey ${JSON.stringify(keyFile)} 2>&1`,
+                ], { timeoutMs: 10_000 });
+                if (ds.exitCode === 0 && ds.stdout.trim()) {
+                    dsRecord = ds.stdout.trim();
+                    const dsPath = join(dir, 'DS.txt');
+                    writeFileSync(dsPath, dsRecord + '\n', 'utf8');
+                    written.push(dsPath);
+                    notes.push(tl('notes.auto.n0788'));
+                }
+                else {
+                    notes.push(tl('notes.auto.n0254'));
+                }
+            }
+        }
+        else {
+            notes.push(tl('notes.auto.n0255'));
+        }
+    }
+    else {
+        notes.push(tl('notes.auto.n0986'));
+    }
+    // Optional: sign managed zone file
+    let signedZonePath;
+    let signed = false;
+    if (keysOk && input.signZone !== false && input.host?.executeEnabled()) {
+        const zoneCandidates = [
+            join(input.dataDir, 'dns', 'zones', `${zone}.zone`),
+            join(input.dataDir, 'dns', 'zones', zone),
+        ];
+        const zoneFile = zoneCandidates.find((p) => existsSync(p));
+        if (zoneFile) {
+            const { binPresent: hasSign } = await import('./software-probe/index.js');
+            if (await hasSign(input.host, 'dnssec-signzone')) {
+                // Copy zone into dnssec dir for signing next to keys
+                const localZone = join(dir, `${zone}.zone`);
+                try {
+                    copyFileSync(zoneFile, localZone);
+                    written.push(localZone);
+                }
+                catch {
+                    notes.push(tl('notes.auto.n1180'));
+                }
+                if (existsSync(localZone)) {
+                    const sign = await input.host.runCommand([
+                        'bash',
+                        '-c',
+                        `cd ${JSON.stringify(dir)} && dnssec-signzone -A -3 $(head -c 16 /dev/urandom | xxd -p) -N INCREMENT -o ${JSON.stringify(zone)} -t ${JSON.stringify(zone + '.zone')} 2>&1`,
+                    ], { timeoutMs: 60_000 });
+                    notes.push(sign.stdout || sign.stderr || `sign exit ${sign.exitCode}`);
+                    const signedPath = join(dir, `${zone}.zone.signed`);
+                    if (sign.exitCode === 0 && existsSync(signedPath)) {
+                        signed = true;
+                        signedZonePath = signedPath;
+                        written.push(signedPath);
+                        notes.push(tl('notes.auto.t0361', { v0: (signedPath) }));
+                    }
+                    else {
+                        notes.push(tl('notes.auto.n0258'));
+                    }
+                }
+            }
+            else {
+                notes.push(tl('notes.auto.n0257'));
+            }
+        }
+        else {
+            notes.push(tl('notes.auto.t0362', { v0: (zone) }));
+        }
+    }
+    if (keysOk) {
+        const readme = join(dir, 'README.txt');
+        writeFileSync(readme, [
+            `YSK DNSSEC for ${zone}`,
+            signed ? `signed: ${signedZonePath}` : 'not signed',
+            'Publish DS at registrar before claiming DNSSEC is live.',
+            '',
+        ].join('\n'), 'utf8');
+        written.push(readme);
+        return {
+            ok: true,
+            notes: [
+                ...notes,
+                signed
+                    ? tl('notes.auto.n1213')
+                    : tl('notes.auto.n1232'),
+            ],
+            written,
+            publicKey,
+            dsRecord,
+            signedZonePath,
+            apply_status: signed ? 'applied' : 'written',
+        };
+    }
+    // Fallback: README only — not success
+    const meta = join(dir, 'README.txt');
+    writeFileSync(meta, [
+        `YSK DNSSEC for ${zone}`,
+        tl('notes.auto.n1552'),
+        tl('notes.auto.n0099'),
+        '',
+    ].join('\n'), 'utf8');
+    written.push(meta);
+    return {
+        ok: false,
+        notes: [
+            ...notes,
+            tl('notes.auto.n0773'),
+            tl('notes.auto.n1234'),
+        ],
+        written,
+        requiresExecute: !input.host?.executeEnabled(),
+        apply_status: 'written',
+    };
+}
+export function listDnssecMaterial(dataDir, zone) {
+    const dir = join(dataDir, 'dns', 'dnssec', zone.trim().toLowerCase().replace(/\.$/, ''));
+    if (!existsSync(dir))
+        return { files: [], notes: [tl('notes.auto.n0710')] };
+    const files = readdirSync(dir).map((f) => join(dir, f));
+    return { files, notes: [tl('notes.auto.t0363', { v0: (files.length), v1: (dir) })] };
+}
+//# sourceMappingURL=dnssec.js.map

package/dist/hosting/dnssec.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dnssec.js","sourceRoot":"","sources":["../../src/hosting/dnssec.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,EAAE,EAAE,MAAM,mBAAmB,CAAC;AACvC;;GAEG;AAEH,OAAO,EAAE,SAAS,EAAE,aAAa,EAAE,UAAU,EAAE,YAAY,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACxG,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAGjC,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,KAMxC;IAUC,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IAChE,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC;IACvD,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACpC,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,MAAM,OAAO,GAAa,EAAE,CAAC;IAE7B,IAAI,QAA4B,CAAC;IACjC,IAAI,SAA6B,CAAC;IAClC,IAAI,MAAM,GAAG,KAAK,CAAC;IAEnB,IAAI,KAAK,CAAC,IAAI,EAAE,cAAc,EAAE,EAAE,CAAC;QACjC,MAAM,EAAE,UAAU,EAAE,GAAG,MAAM,MAAM,CAAC,2BAA2B,CAAC,CAAC;QACjE,MAAM,OAAO,GAAG,MAAM,UAAU,CAAC,KAAK,CAAC,IAAI,EAAE,eAAe,CAAC,CAAC;QAC9D,IAAI,OAAO,EAAE,CAAC;YACZ,8CAA8C;YAC9C,MAAM,YAAY,GAAG,UAAU,CAAC,GAAG,CAAC;gBAClC,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;gBACpD,CAAC,CAAC,EAAE,CAAC;YACP,IAAI,YAAY,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC9B,MAAM,CAAC,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,UAAU,CACnC;oBACE,MAAM;oBACN,IAAI;oBACJ,MAAM,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,gDAAgD,IAAI,OAAO;iBACrF,EACD,EAAE,SAAS,EAAE,MAAM,EAAE,CACtB,CAAC;gBACF,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,MAAM,IAAI,QAAQ,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC;gBACzD,IAAI,CAAC,CAAC,QAAQ,KAAK,CAAC,EAAE,CAAC;oBACrB,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,kBAAkB,CAAC,CAAC,CAAC;gBACrC,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,kBAAkB,EAAE,EAAE,EAAE,EAAE,CAAC,YAAY,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;YACpE,CAAC;YAED,MAAM,KAAK,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;YACjE,KAAK,MAAM,CAAC,IAAI,KAAK;gBAAE,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC;YAClD,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC;YACjE,IAAI,OAAO,EAAE,CAAC;gBACZ,MAAM,GAAG,IAAI,CAAC;gBACd,MAAM,GAAG,GAAG,YAAY,CAAC,IAAI,CAAC,GAAG,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,CAAC;gBACrD,SAAS,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;gBAC9B,MAAM,EAAE,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,UAAU,CACpC;oBACE,MAAM;oBACN,IAAI;oBACJ,MAAM,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,wBAAwB,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,OAAO;iBAChF,EACD,EAAE,SAAS,EAAE,MAAM,EAAE,CACtB,CAAC;gBACF,IAAI,EAAE,CAAC,QAAQ,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC;oBAC1C,QAAQ,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;oBAC5B,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;oBACnC,aAAa,CAAC,MAAM,EAAE,QAAQ,GAAG,IAAI,EAAE,MAAM,CAAC,CAAC;oBAC/C,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;oBACrB,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,kBAAkB,CAAC,CAAC,CAAC;gBACrC,CAAC;qBAAM,CAAC;oBACN,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,kBAAkB,CAAC,CAAC,CAAC;gBACrC,CAAC;YACH,CAAC;QACH,CAAC;aAAM,CAAC;YACN,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,kBAAkB,CAAC,CAAC,CAAC;QACrC,CAAC;IACH,CAAC;SAAM,CAAC;QACN,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,kBAAkB,CAAC,CAAC,CAAC;IACrC,CAAC;IAED,mCAAmC;IACnC,IAAI,cAAkC,CAAC;IACvC,IAAI,MAAM,GAAG,KAAK,CAAC;IACnB,IAAI,MAAM,IAAI,KAAK,CAAC,QAAQ,KAAK,KAAK,IAAI,KAAK,CAAC,IAAI,EAAE,cAAc,EAAE,EAAE,CAAC;QACvE,MAAM,cAAc,GAAG;YACrB,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,IAAI,OAAO,CAAC;YACnD,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,CAAC;SAC1C,CAAC;QACF,MAAM,QAAQ,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;QAC3D,IAAI,QAAQ,EAAE,CAAC;YACb,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,GAAG,MAAM,MAAM,CAAC,2BAA2B,CAAC,CAAC;YAC1E,IAAI,MAAM,OAAO,CAAC,KAAK,CAAC,IAAI,EAAE,iBAAiB,CAAC,EAAE,CAAC;gBACjD,qDAAqD;gBACrD,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,OAAO,CAAC,CAAC;gBAC5C,IAAI,CAAC;oBACH,YAAY,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;oBAClC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;gBAC1B,CAAC;gBAAC,MAAM,CAAC;oBACP,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,kBAAkB,CAAC,CAAC,CAAC;gBACrC,CAAC;gBACD,IAAI,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;oBAC1B,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,UAAU,CACtC;wBACE,MAAM;wBACN,IAAI;wBACJ,MAAM,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,iFAAiF,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,IAAI,CAAC,SAAS,CAAC,IAAI,GAAG,OAAO,CAAC,OAAO;qBAC3K,EACD,EAAE,SAAS,EAAE,MAAM,EAAE,CACtB,CAAC;oBACF,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,MAAM,IAAI,aAAa,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC;oBACvE,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,cAAc,CAAC,CAAC;oBACpD,IAAI,IAAI,CAAC,QAAQ,KAAK,CAAC,IAAI,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;wBAClD,MAAM,GAAG,IAAI,CAAC;wBACd,cAAc,GAAG,UAAU,CAAC;wBAC5B,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;wBACzB,KAAK,CAAC,IAAI,CACR,EAAE,CAAC,kBAAkB,EAAE,EAAE,EAAE,EAAE,CAAC,UAAU,CAAC,EAAE,CAAC,CAC7C,CAAC;oBACJ,CAAC;yBAAM,CAAC;wBACN,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,kBAAkB,CAAC,CAAC,CAAC;oBACrC,CAAC;gBACH,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,kBAAkB,CAAC,CAAC,CAAC;YACrC,CAAC;QACH,CAAC;aAAM,CAAC;YACN,KAAK,CAAC,IAAI,CACR,EAAE,CAAC,kBAAkB,EAAE,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,CACvC,CAAC;QACJ,CAAC;IACH,CAAC;IAED,IAAI,MAAM,EAAE,CAAC;QACX,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC;QACvC,aAAa,CACX,MAAM,EACN;YACE,kBAAkB,IAAI,EAAE;YACxB,MAAM,CAAC,CAAC,CAAC,WAAW,cAAc,EAAE,CAAC,CAAC,CAAC,YAAY;YACnD,yDAAyD;YACzD,EAAE;SACH,CAAC,IAAI,CAAC,IAAI,CAAC,EACZ,MAAM,CACP,CAAC;QACF,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACrB,OAAO;YACL,EAAE,EAAE,IAAI;YACR,KAAK,EAAE;gBACL,GAAG,KAAK;gBACR,MAAM;oBACJ,CAAC,CAAC,EAAE,CAAC,kBAAkB,CAAC;oBACxB,CAAC,CAAC,EAAE,CAAC,kBAAkB,CAAC;aAC3B;YACD,OAAO;YACP,SAAS;YACT,QAAQ;YACR,cAAc;YACd,YAAY,EAAE,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS;SAC7C,CAAC;IACJ,CAAC;IAED,sCAAsC;IACtC,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC;IACrC,aAAa,CACX,IAAI,EACJ;QACE,kBAAkB,IAAI,EAAE;QACxB,EAAE,CAAC,kBAAkB,CAAC;QACtB,EAAE,CAAC,kBAAkB,CAAC;QACtB,EAAE;KACH,CAAC,IAAI,CAAC,IAAI,CAAC,EACZ,MAAM,CACP,CAAC;IACF,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACnB,OAAO;QACL,EAAE,EAAE,KAAK;QACT,KAAK,EAAE;YACL,GAAG,KAAK;YACR,EAAE,CAAC,kBAAkB,CAAC;YACtB,EAAE,CAAC,kBAAkB,CAAC;SACvB;QACD,OAAO;QACP,eAAe,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,cAAc,EAAE;QAC9C,YAAY,EAAE,SAAS;KACxB,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,kBAAkB,CAChC,OAAe,EACf,IAAY;IAEZ,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC;IACzF,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,kBAAkB,CAAC,CAAC,EAAE,CAAC;IAC5E,MAAM,KAAK,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC;IACxD,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,kBAAkB,EAAE,EAAE,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;AACvF,CAAC"}

package/dist/hosting/extras.d.ts

@@ -0,0 +1,106 @@
+/**
+ * Phase 3 hosting remainder: File Server, FTPS, DNS, Firewall, cron, logs, backup, monitoring.
+ */
+export interface FileServerPlan {
+    publicRoot: string;
+    apiPrefix: string;
+    quotaMb: number;
+    commands: string[];
+}
+export declare function planPublicFileServer(opts: {
+    root?: string;
+    quotaMb?: number;
+}): FileServerPlan;
+export interface FtpsPlan {
+    pasvMin: number;
+    pasvMax: number;
+    sslCert: string;
+    configSnippet: string;
+    commands: string[];
+}
+export declare function planFtps(opts: {
+    domain: string;
+    pasvMin?: number;
+    pasvMax?: number;
+}): FtpsPlan;
+export interface DnsRecordPlan {
+    records: Array<{
+        type: string;
+        name: string;
+        value: string;
+        ttl: number;
+    }>;
+    providerHints: string[];
+    template: DnsZoneTemplate;
+}
+/** Zone seed templates (Hestia/DA-style defaults + CDN multi-A ready). */
+export type DnsZoneTemplate = 'minimal' | 'web' | 'mail' | 'full' | 'cdn';
+export declare const DNS_ZONE_TEMPLATES: Array<{
+    id: DnsZoneTemplate;
+    label: string;
+    description: string;
+}>;
+export declare function normalizeDnsZoneTemplate(raw?: string | null): DnsZoneTemplate;
+export declare function planDnsZone(opts: {
+    zone: string;
+    serverIp: string;
+    /** Optional public IPv6 → AAAA + SPF ip6: */
+    serverIpv6?: string;
+    mailHost?: string;
+    /** minimal | web | mail | full (default full) */
+    template?: DnsZoneTemplate | string;
+}): DnsRecordPlan;
+export interface FirewallPlan {
+    rules: string[];
+    fail2banJails: string[];
+    commands: string[];
+}
+/**
+ * Prefer extraPortSpecs ("21", "30000:30100") → one UFW rule per range.
+ * extraTcpPorts still accepted for legacy callers (one rule per number).
+ */
+export declare function planFirewall(opts: {
+    allowSsh?: boolean;
+    allowHttp?: boolean;
+    allowHttps?: boolean;
+    allowSmtp?: boolean;
+    extraTcpPorts?: number[];
+    /** e.g. ["21", "990", "30000:30100"] — FTPS PASV as a single range rule */
+    extraPortSpecs?: string[];
+}): FirewallPlan;
+/**
+ * Validate standard 5-field cron schedule (minute hour dom mon dow).
+ * Rejects newlines / carriage returns (crontab injection).
+ */
+export declare function assertSafeCronSchedule(schedule: string): string;
+/** Reject crontab line injection in command body. */
+export declare function assertSafeCronCommand(command: string): string;
+export declare function planCronJob(opts: {
+    user: string;
+    schedule: string;
+    command: string;
+}): {
+    crontabLine: string;
+    notes: string[];
+};
+export declare function planBackup(opts: {
+    projectId: string;
+    sources: string[];
+    dest: string;
+}): {
+    commands: string[];
+    notes: string[];
+};
+export declare function planMonitoringChecks(projectId: string): {
+    checks: Array<{
+        name: string;
+        type: string;
+        target: string;
+    }>;
+};
+export declare function planLogPaths(projectHome: string): {
+    app: string;
+    access: string;
+    error: string;
+};
+//# sourceMappingURL=extras.d.ts.map

package/dist/hosting/extras.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"extras.d.ts","sourceRoot":"","sources":["../../src/hosting/extras.ts"],"names":[],"mappings":"AAAA;;GAEG;AAIH,MAAM,WAAW,cAAc;IAC7B,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,EAAE,CAAC;CACpB;AAED,wBAAgB,oBAAoB,CAAC,IAAI,EAAE;IACzC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB,GAAG,cAAc,CAejB;AAED,MAAM,WAAW,QAAQ;IACvB,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,aAAa,EAAE,MAAM,CAAC;IACtB,QAAQ,EAAE,MAAM,EAAE,CAAC;CACpB;AAED,wBAAgB,QAAQ,CAAC,IAAI,EAAE;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,QAAQ,CAuB/F;AAED,MAAM,WAAW,aAAa;IAC5B,OAAO,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC3E,aAAa,EAAE,MAAM,EAAE,CAAC;IACxB,QAAQ,EAAE,eAAe,CAAC;CAC3B;AAED,0EAA0E;AAC1E,MAAM,MAAM,eAAe,GAAG,SAAS,GAAG,KAAK,GAAG,MAAM,GAAG,MAAM,GAAG,KAAK,CAAC;AAE1E,eAAO,MAAM,kBAAkB,EAAE,KAAK,CAAC;IACrC,EAAE,EAAE,eAAe,CAAC;IACpB,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;CACrB,CASA,CAAC;AAEF,wBAAgB,wBAAwB,CAAC,GAAG,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,eAAe,CAY7E;AAED,wBAAgB,WAAW,CAAC,IAAI,EAAE;IAChC,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,6CAA6C;IAC7C,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,iDAAiD;IACjD,QAAQ,CAAC,EAAE,eAAe,GAAG,MAAM,CAAC;CACrC,GAAG,aAAa,CA6DhB;AAED,MAAM,WAAW,YAAY;IAC3B,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,aAAa,EAAE,MAAM,EAAE,CAAC;IACxB,QAAQ,EAAE,MAAM,EAAE,CAAC;CACpB;AAED;;;GAGG;AACH,wBAAgB,YAAY,CAAC,IAAI,EAAE;IACjC,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;IACzB,2EAA2E;IAC3E,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;CAC3B,GAAG,YAAY,CAoDf;AAED;;;GAGG;AACH,wBAAgB,sBAAsB,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAyB/D;AAED,qDAAqD;AACrD,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAe7D;AAED,wBAAgB,WAAW,CAAC,IAAI,EAAE;IAChC,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;CACjB,GAAG;IAAE,WAAW,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,EAAE,CAAA;CAAE,CAc3C;AAED,wBAAgB,UAAU,CAAC,IAAI,EAAE;IAC/B,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,IAAI,EAAE,MAAM,CAAC;CACd,GAAG;IAAE,QAAQ,EAAE,MAAM,EAAE,CAAC;IAAC,KAAK,EAAE,MAAM,EAAE,CAAA;CAAE,CAY1C;AAED,wBAAgB,oBAAoB,CAAC,SAAS,EAAE,MAAM,GAAG;IACvD,MAAM,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CAC/D,CAQA;AAED,wBAAgB,YAAY,CAAC,WAAW,EAAE,MAAM,GAAG;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAKhG"}

package/dist/hosting/extras.js

@@ -0,0 +1,294 @@
+/**
+ * Phase 3 hosting remainder: File Server, FTPS, DNS, Firewall, cron, logs, backup, monitoring.
+ */
+import { ErrorCodes, YskError, tl } from 'ysk-server-shared';
+export function planPublicFileServer(opts) {
+    const publicRoot = opts.root ?? '/var/lib/ysk-server/files';
+    const quotaMb = opts.quotaMb ?? 1024;
+    if (quotaMb < 1) {
+        throw new YskError(ErrorCodes.VALIDATION, tl('notes.auto.n1511'), { httpStatus: 400 });
+    }
+    return {
+        publicRoot,
+        apiPrefix: '/api/v1/files',
+        quotaMb,
+        commands: [
+            `mkdir -p ${publicRoot}`,
+            `chown ysk-server:ysk-server ${publicRoot}`,
+            `chmod 750 ${publicRoot}`,
+        ]
+    };
+}
+export function planFtps(opts) {
+    if (!opts.domain) {
+        throw new YskError(ErrorCodes.VALIDATION, tl('notes.auto.n0104'), { httpStatus: 400 });
+    }
+    const pasvMin = opts.pasvMin ?? 30000;
+    const pasvMax = opts.pasvMax ?? 30100;
+    const configSnippet = `
+# vsftpd FTPS (generated by YSK Server)
+listen=YES
+ssl_enable=YES
+force_local_data_ssl=YES
+force_local_logins_ssl=YES
+rsa_cert_file=/etc/letsencrypt/live/${opts.domain}/fullchain.pem
+rsa_private_key_file=/etc/letsencrypt/live/${opts.domain}/privkey.pem
+pasv_min_port=${pasvMin}
+pasv_max_port=${pasvMax}
+`.trim();
+    return {
+        pasvMin,
+        pasvMax,
+        sslCert: `/etc/letsencrypt/live/${opts.domain}/fullchain.pem`,
+        configSnippet,
+        commands: ['apt-get install -y vsftpd', 'systemctl enable --now vsftpd']
+    };
+}
+export const DNS_ZONE_TEMPLATES = [
+    { id: 'minimal', label: tl('notes.auto.n0939'), description: tl('notes.auto.n0564') },
+    { id: 'web', label: tl('notes.auto.n1315'), description: 'apex + www' },
+    { id: 'mail', label: tl('notes.readiness.email'), description: 'apex + mail + MX + SPF' },
+    { id: 'full', label: tl('notes.auto.n0659'), description: 'web + mail + ftp + SPF' },
+    {
+        id: 'cdn',
+        label: 'CDN',
+        description: tl('notes.auto.n0218')
+    },
+];
+export function normalizeDnsZoneTemplate(raw) {
+    const t = (raw ?? 'full').toLowerCase();
+    if (t === 'minimal' ||
+        t === 'web' ||
+        t === 'mail' ||
+        t === 'full' ||
+        t === 'cdn') {
+        return t;
+    }
+    return 'full';
+}
+export function planDnsZone(opts) {
+    if (!opts.zone || !opts.serverIp) {
+        throw new YskError(ErrorCodes.VALIDATION, tl('notes.dns.needZoneServerIp'), { httpStatus: 400 });
+    }
+    const template = normalizeDnsZoneTemplate(opts.template);
+    const mail = opts.mailHost ?? `mail.${opts.zone}`;
+    const ttl = 300;
+    const ip = opts.serverIp;
+    const ip6 = opts.serverIpv6?.trim() || undefined;
+    const records = [];
+    // Always apex A for usable zone (except we still want apex for all templates)
+    records.push({ type: 'A', name: '@', value: ip, ttl });
+    if (ip6)
+        records.push({ type: 'AAAA', name: '@', value: ip6, ttl });
+    if (template === 'web' || template === 'full' || template === 'cdn') {
+        records.push({ type: 'A', name: 'www', value: ip, ttl });
+        if (ip6)
+            records.push({ type: 'AAAA', name: 'www', value: ip6, ttl });
+    }
+    if (template === 'cdn') {
+        // Edge hostname placeholder — multi-A will be managed by CDN planner later
+        records.push({ type: 'A', name: 'cdn', value: ip, ttl });
+        if (ip6)
+            records.push({ type: 'AAAA', name: 'cdn', value: ip6, ttl });
+        records.push({
+            type: 'TXT',
+            name: '_ysk-cdn',
+            value: 'ysk-cdn-ready v1',
+            ttl
+        });
+    }
+    if (template === 'mail' || template === 'full') {
+        records.push({ type: 'A', name: 'mail', value: ip, ttl });
+        if (ip6)
+            records.push({ type: 'AAAA', name: 'mail', value: ip6, ttl });
+        records.push({ type: 'MX', name: '@', value: `10 ${mail}.`, ttl });
+        const spf = ip6
+            ? `v=spf1 a mx ip4:${ip} ip6:${ip6} ~all`
+            : `v=spf1 a mx ip4:${ip} ~all`;
+        records.push({
+            type: 'TXT',
+            name: '@',
+            value: spf,
+            ttl
+        });
+    }
+    if (template === 'full') {
+        records.push({ type: 'A', name: 'ftp', value: ip, ttl });
+        if (ip6)
+            records.push({ type: 'AAAA', name: 'ftp', value: ip6, ttl });
+    }
+    return {
+        template,
+        records,
+        providerHints: [
+            'Managed zone file is not live until nameserver loads it',
+            'External DNS: copy these records to your provider',
+            ...(ip6 ? ['IPv6 AAAA records included for dual-stack'] : []),
+            ...(template === 'cdn'
+                ? [
+                    'CDN template: multi-edge IPs should be added as additional A/AAAA on @ / www / cdn',
+                    'Use CDN module later for health-based multi-A (managedBy=cdn)',
+                ]
+                : []),
+        ]
+    };
+}
+/**
+ * Prefer extraPortSpecs ("21", "30000:30100") → one UFW rule per range.
+ * extraTcpPorts still accepted for legacy callers (one rule per number).
+ */
+export function planFirewall(opts) {
+    const rules = ['ufw default deny incoming', 'ufw default allow outgoing'];
+    if (opts.allowSsh !== false)
+        rules.push('ufw allow OpenSSH');
+    if (opts.allowHttp !== false)
+        rules.push('ufw allow 80/tcp');
+    if (opts.allowHttps !== false)
+        rules.push('ufw allow 443/tcp');
+    if (opts.allowSmtp) {
+        rules.push('ufw allow 25/tcp', 'ufw allow 587/tcp', 'ufw allow 465/tcp', 'ufw allow 993/tcp');
+    }
+    const specs = opts.extraPortSpecs?.length
+        ? opts.extraPortSpecs
+        : (opts.extraTcpPorts ?? []).map((p) => String(p));
+    for (const raw of specs) {
+        const s = String(raw ?? '').trim();
+        if (!s)
+            continue;
+        // Validate single or range (max span 200 — same as firewallAllowPort)
+        if (s.includes(':')) {
+            const [a, b] = s.split(':').map((x) => Number(x.trim()));
+            if (!Number.isInteger(a) || !Number.isInteger(b) || a < 1 || b < 1 || a > 65535 || b > 65535) {
+                throw new YskError(ErrorCodes.VALIDATION, tl('notes.auto.t0358', { v0: s }), {
+                    httpStatus: 400,
+                });
+            }
+            const lo = Math.min(a, b);
+            const hi = Math.max(a, b);
+            if (hi - lo > 200) {
+                throw new YskError(ErrorCodes.VALIDATION, tl('notes.auto.n1113'), { httpStatus: 400 });
+            }
+            rules.push(`ufw allow ${lo}:${hi}/tcp`);
+        }
+        else {
+            const p = Number(s);
+            if (!Number.isInteger(p) || p < 1 || p > 65535) {
+                throw new YskError(ErrorCodes.VALIDATION, tl('notes.auto.t0358', { v0: s }), {
+                    httpStatus: 400,
+                });
+            }
+            rules.push(`ufw allow ${p}/tcp`);
+        }
+    }
+    rules.push('ufw --force enable');
+    // UFW only — fail2ban is a separate stack (do not couple install into firewall apply)
+    return {
+        rules,
+        fail2banJails: [
+            'sshd',
+            'nginx-http-auth',
+            'nginx-botsearch',
+            'nginx-badbots',
+            'nginx-limit-req',
+            'postfix',
+            'dovecot',
+        ],
+        commands: [...rules]
+    };
+}
+/**
+ * Validate standard 5-field cron schedule (minute hour dom mon dow).
+ * Rejects newlines / carriage returns (crontab injection).
+ */
+export function assertSafeCronSchedule(schedule) {
+    const s = schedule.trim();
+    if (!s || /[\r\n]/.test(s)) {
+        throw new YskError(ErrorCodes.VALIDATION, tl('notes.auto.n1396'), { httpStatus: 400 });
+    }
+    // 5 fields: allow numbers, *, /, -, ,, ranges
+    const fields = s.split(/\s+/);
+    if (fields.length !== 5) {
+        throw new YskError(ErrorCodes.VALIDATION, tl('notes.auto.n1396'), {
+            httpStatus: 400,
+            details: { reason: 'cron_schedule_fields', got: fields.length },
+        });
+    }
+    for (const f of fields) {
+        if (!/^[0-9*,\/\-]+$/.test(f) && !/^(sun|mon|tue|wed|thu|fri|sat)(-(sun|mon|tue|wed|thu|fri|sat))?$/i.test(f)) {
+            // allow month names abbreviated
+            if (!/^(jan|feb|mar|apr|may|jun|jul|aug|sep|oct|nov|dec)(-(jan|feb|mar|apr|may|jun|jul|aug|sep|oct|nov|dec))?$/i.test(f)) {
+                throw new YskError(ErrorCodes.VALIDATION, tl('notes.auto.n1396'), {
+                    httpStatus: 400,
+                    details: { reason: 'cron_schedule_field', field: f },
+                });
+            }
+        }
+    }
+    return s;
+}
+/** Reject crontab line injection in command body. */
+export function assertSafeCronCommand(command) {
+    const c = command.trim();
+    if (!c || /[\r\n%]/.test(c)) {
+        throw new YskError(ErrorCodes.VALIDATION, tl('notes.auto.n1396'), {
+            httpStatus: 400,
+            details: { reason: 'cron_command_injection' },
+        });
+    }
+    if (c.length > 4000) {
+        throw new YskError(ErrorCodes.VALIDATION, tl('notes.auto.n1396'), {
+            httpStatus: 400,
+            details: { reason: 'cron_command_too_long' },
+        });
+    }
+    return c;
+}
+export function planCronJob(opts) {
+    if (!opts.user || !opts.schedule || !opts.command) {
+        throw new YskError(ErrorCodes.VALIDATION, tl('notes.auto.n1396'), {
+            httpStatus: 400
+        });
+    }
+    const schedule = assertSafeCronSchedule(opts.schedule);
+    const command = assertSafeCronCommand(opts.command);
+    const user = opts.user.trim();
+    if (!/^[a-zA-Z0-9_.-]+$/.test(user)) {
+        throw new YskError(ErrorCodes.VALIDATION, tl('notes.auto.n1396'), { httpStatus: 400 });
+    }
+    return {
+        crontabLine: `${schedule} ${command} # ysk-server`,
+        notes: [tl('notes.auto.t0359', { v0: (user) }), tl('notes.auto.n0916')]
+    };
+}
+export function planBackup(opts) {
+    if (!opts.sources.length) {
+        throw new YskError(ErrorCodes.VALIDATION, tl('notes.auto.n1405'), { httpStatus: 400 });
+    }
+    const stamp = '${STAMP}';
+    return {
+        commands: [
+            `STAMP=$(date +%Y%m%d%H%M%S)`,
+            `mkdir -p ${opts.dest}/${opts.projectId}`,
+            `tar -czf ${opts.dest}/${opts.projectId}/backup-${stamp}.tar.gz ${opts.sources.join(' ')}`,
+        ],
+        notes: [tl('notes.auto.n0838'), tl('notes.auto.n1453')]
+    };
+}
+export function planMonitoringChecks(projectId) {
+    return {
+        checks: [
+            { name: 'http', type: 'http', target: `project:${projectId}` },
+            { name: 'disk', type: 'disk', target: '/' },
+            { name: 'memory', type: 'memory', target: 'host' },
+            { name: 'load', type: 'load', target: 'host' },
+        ]
+    };
+}
+export function planLogPaths(projectHome) {
+    return {
+        app: `${projectHome}/logs/app.log`,
+        access: `${projectHome}/logs/access.log`,
+        error: `${projectHome}/logs/error.log`
+    };
+}
+//# sourceMappingURL=extras.js.map