ysk-server-core 1.0.0

package/dist/hosting/host-migrate/reapply.js

@@ -0,0 +1,361 @@
+/**
+ * Reapply phase: re-materialize host services from restored dataDir.
+ * Reuses existing apply modules — no parallel apply logic.
+ */
+import { existsSync } from 'node:fs';
+import { join, resolve } from 'node:path';
+import { assertHonestOps, tl } from 'ysk-server-shared';
+import { CronJobService } from '../backup-cron.js';
+import { syncNginxConfigs } from '../nginx-sync.js';
+import { applyEmailStack, applyFail2ban, applyFirewall, installControlPlaneSystemd } from '../system-apply.js';
+import { appendMigrateStep, setMigratePhase, writeMigrateProgress } from './job-store.js';
+/**
+ * Clear project bind_ip that points at old address (notes only if cannot patch store).
+ */
+export function noteBindIpMigrations(db, manifest) {
+    const notes = [];
+    let changed = 0;
+    for (const p of manifest.projects) {
+        if (!p.bind_ip)
+            continue;
+        notes.push(tl('notes.auto.t0662', { v0: (p.id), v1: (p.bind_ip) }));
+        const row = db.snapshot.projects.find((x) => x.id === p.id);
+        if (row && row.bind_ip) {
+            row.bind_ip = '';
+            changed += 1;
+        }
+    }
+    if (changed) {
+        try {
+            db.persist();
+            notes.push(tl('notes.auto.t0663', { v0: (changed) }));
+        }
+        catch (e) {
+            notes.push(tl('notes.auto.t0664', { v0: (e instanceof Error ? e.message : String(e)) }));
+        }
+    }
+    return {
+        id: 'bind-ip',
+        ok: true,
+        notes: notes.length ? notes : [tl('notes.auto.n1073')],
+        apply_status: 'written'
+    };
+}
+/**
+ * Full reapply stack on local target.
+ */
+export async function reapplyOnHost(input) {
+    const dataDir = resolve(input.dataDir);
+    const items = [];
+    const host = input.host;
+    if (!host.executeEnabled()) {
+        return assertHonestOps({
+            ok: false,
+            blocked: true,
+            requiresExecute: true,
+            blockMessage: tl('notes.auto.n0402'),
+            notes: [tl('ops.blocked.needExecuteShort')],
+            items: []
+        });
+    }
+    setMigratePhase(dataDir, input.job, 'reapply');
+    writeMigrateProgress(dataDir, input.job.id, { phase: 'reapply', status: 'start' });
+    // 0) bind_ip cleanup
+    const bind = noteBindIpMigrations(input.db, input.manifest);
+    items.push(bind);
+    appendMigrateStep(dataDir, input.job, {
+        phase: 'reapply',
+        name: 'bind-ip',
+        result: {
+            ok: bind.ok,
+            apply_status: 'written',
+            notes: bind.notes
+        }
+    });
+    // 1) control plane unit
+    writeMigrateProgress(dataDir, input.job.id, {
+        phase: 'reapply',
+        status: 'systemd'
+    });
+    const cliPath = input.cliPath ||
+        (existsSync('/usr/bin/ysk-server')
+            ? '/usr/bin/ysk-server'
+            : existsSync('/usr/local/bin/ysk-server')
+                ? '/usr/local/bin/ysk-server'
+                : 'ysk-server');
+    // installControlPlaneSystemd expects node path to cli js; if CLI is shell wrapper, write unit with which node
+    const { resolveBin } = await import('../software-probe/index.js');
+    const resolvedCli = (await resolveBin(host, 'ysk-server')) || (await resolveBin(host, 'node')) || cliPath;
+    // Prefer running via `ysk-server` binary if it's the npm bin
+    const unit = await installControlPlaneSystemd({
+        dataDir,
+        // unit template uses: node cliPath serve — if cli is bin, use a small wrapper path under dataDir
+        cliPath: resolvedCli.endsWith('.js')
+            ? resolvedCli
+            : join(dataDir, 'systemd', 'ysk-serve-entry.js'),
+        host,
+        enable: true
+    });
+    // If we pointed at a missing entry, write a tiny launcher
+    if (!resolvedCli.endsWith('.js')) {
+        try {
+            const { writeFileSync, mkdirSync } = await import('node:fs');
+            mkdirSync(join(dataDir, 'systemd'), { recursive: true });
+            writeFileSync(join(dataDir, 'systemd', 'ysk-serve-entry.js'), `#!/usr/bin/env node\nimport { spawn } from 'node:child_process';\nconst bin = ${JSON.stringify(resolvedCli)};\nconst child = spawn(bin, ['serve', '--config', ${JSON.stringify(join(dataDir, 'config.json'))}], { stdio: 'inherit' });\nchild.on('exit', (c) => process.exit(c ?? 1));\n`, 'utf8');
+        }
+        catch {
+            /* */
+        }
+    }
+    items.push({
+        id: 'control-plane-unit',
+        ok: unit.ok,
+        blocked: unit.blocked,
+        notes: unit.notes,
+        apply_status: unit.blocked
+            ? 'blocked'
+            : unit.ok
+                ? unit.executed
+                    ? 'applied'
+                    : 'written'
+                : 'failed'
+    });
+    appendMigrateStep(dataDir, input.job, {
+        phase: 'reapply',
+        name: 'control-plane-unit',
+        result: {
+            ok: unit.ok,
+            blocked: unit.blocked,
+            apply_status: items[items.length - 1].apply_status,
+            notes: unit.notes,
+            written: unit.written
+        }
+    });
+    // 2) nginx
+    writeMigrateProgress(dataDir, input.job.id, { phase: 'reapply', status: 'nginx' });
+    let ngxNotes = [];
+    let ngxOk = false;
+    let ngxReloadOk = true;
+    try {
+        // Only push to system conf.d when root (avoid EACCES on mkdir in degraded/tests)
+        const systemConfDir = host.isRoot() && host.executeEnabled() ? '/etc/nginx/conf.d' : undefined;
+        const ngx = await syncNginxConfigs({
+            dataDir,
+            host,
+            systemConfDir
+        });
+        ngxNotes = [...ngx.notes];
+        ngxOk = ngx.ok !== false;
+        if (systemConfDir && host.executeEnabled() && host.isRoot()) {
+            const t = await host.runCommand(['nginx', '-t'], { timeoutMs: 15_000 });
+            if (t.exitCode === 0) {
+                const rel = await host.runCommand(['systemctl', 'reload', 'nginx'], {
+                    timeoutMs: 15_000
+                });
+                ngxReloadOk = rel.exitCode === 0;
+            }
+            else {
+                ngxReloadOk = false;
+                ngxNotes.push(tl('notes.tpl.nginxTestFailed', { detail: (t.stderr || t.stdout).slice(0, 120) }));
+            }
+        }
+        else {
+            ngxNotes.push(tl('notes.auto.n0978'));
+            ngxReloadOk = true;
+        }
+    }
+    catch (e) {
+        ngxOk = false;
+        ngxReloadOk = false;
+        ngxNotes.push(tl('notes.auto.t0665', { v0: (e instanceof Error ? e.message : String(e)) }));
+    }
+    items.push({
+        id: 'nginx',
+        ok: ngxOk && ngxReloadOk,
+        notes: [
+            ...ngxNotes,
+            ngxReloadOk ? 'nginx reload ok / skipped' : tl('notes.auto.n0341'),
+        ],
+        apply_status: ngxOk && ngxReloadOk ? 'applied' : 'partial'
+    });
+    appendMigrateStep(dataDir, input.job, {
+        phase: 'reapply',
+        name: 'nginx',
+        result: {
+            ok: items[items.length - 1].ok,
+            apply_status: items[items.length - 1].apply_status,
+            notes: items[items.length - 1].notes
+        }
+    });
+    // 3) email per domain
+    for (const d of input.manifest.emailDomains) {
+        if (!d.domain)
+            continue;
+        writeMigrateProgress(dataDir, input.job.id, {
+            phase: 'reapply',
+            status: 'email',
+            domain: d.domain
+        });
+        try {
+            const em = await applyEmailStack({
+                dataDir,
+                domain: d.domain,
+                host,
+                installPackages: false
+            });
+            items.push({
+                id: `email:${d.domain}`,
+                ok: em.ok,
+                blocked: em.blocked,
+                notes: em.notes,
+                apply_status: em.blocked
+                    ? 'blocked'
+                    : em.ok
+                        ? em.executed
+                            ? 'applied'
+                            : 'written'
+                        : 'failed'
+            });
+        }
+        catch (e) {
+            items.push({
+                id: `email:${d.domain}`,
+                ok: false,
+                notes: [e instanceof Error ? e.message : String(e)],
+                apply_status: 'failed'
+            });
+        }
+        appendMigrateStep(dataDir, input.job, {
+            phase: 'reapply',
+            name: `email:${d.domain}`,
+            result: {
+                ok: items[items.length - 1].ok,
+                blocked: items[items.length - 1].blocked,
+                apply_status: items[items.length - 1].apply_status,
+                notes: items[items.length - 1].notes
+            }
+        });
+    }
+    // 4) firewall / fail2ban optional
+    if (input.applyFirewall !== false && (input.manifest.counts.firewall_rules ?? 0) > 0) {
+        writeMigrateProgress(dataDir, input.job.id, {
+            phase: 'reapply',
+            status: 'firewall'
+        });
+        const fw = await applyFirewall({
+            host,
+            dataDir,
+            apply: true
+        });
+        items.push({
+            id: 'firewall',
+            ok: fw.ok,
+            blocked: fw.blocked,
+            notes: fw.notes,
+            apply_status: fw.blocked ? 'blocked' : fw.ok ? 'applied' : 'failed'
+        });
+        appendMigrateStep(dataDir, input.job, {
+            phase: 'reapply',
+            name: 'firewall',
+            result: {
+                ok: fw.ok,
+                blocked: fw.blocked,
+                apply_status: items[items.length - 1].apply_status,
+                notes: fw.notes
+            }
+        });
+    }
+    if (input.applyFail2ban !== false) {
+        writeMigrateProgress(dataDir, input.job.id, {
+            phase: 'reapply',
+            status: 'fail2ban'
+        });
+        const f2b = await applyFail2ban({
+            host,
+            dataDir,
+            apply: true
+        });
+        items.push({
+            id: 'fail2ban',
+            ok: f2b.ok,
+            blocked: f2b.blocked,
+            notes: f2b.notes,
+            apply_status: f2b.blocked ? 'blocked' : f2b.ok ? 'applied' : 'partial'
+        });
+        appendMigrateStep(dataDir, input.job, {
+            phase: 'reapply',
+            name: 'fail2ban',
+            result: {
+                ok: f2b.ok,
+                blocked: f2b.blocked,
+                apply_status: items[items.length - 1].apply_status,
+                notes: f2b.notes
+            }
+        });
+    }
+    // 5) cron
+    writeMigrateProgress(dataDir, input.job.id, { phase: 'reapply', status: 'cron' });
+    try {
+        const cron = new CronJobService(input.db, host, dataDir);
+        const inst = await cron.installCrontab('migrate-reapply');
+        items.push({
+            id: 'cron',
+            ok: Boolean(inst.ok),
+            blocked: inst.blocked,
+            notes: inst.notes,
+            apply_status: inst.blocked
+                ? 'blocked'
+                : inst.ok
+                    ? 'applied'
+                    : 'failed'
+        });
+    }
+    catch (e) {
+        items.push({
+            id: 'cron',
+            ok: false,
+            notes: [e instanceof Error ? e.message : String(e)],
+            apply_status: 'failed'
+        });
+    }
+    appendMigrateStep(dataDir, input.job, {
+        phase: 'reapply',
+        name: 'cron',
+        result: {
+            ok: items[items.length - 1].ok,
+            blocked: items[items.length - 1].blocked,
+            apply_status: items[items.length - 1].apply_status,
+            notes: items[items.length - 1].notes
+        }
+    });
+    writeMigrateProgress(dataDir, input.job.id, {
+        phase: 'reapply',
+        status: 'done'
+    });
+    // Critical: nginx + control plane; email/fw soft
+    const criticalIds = new Set(['control-plane-unit', 'nginx']);
+    const criticalFail = items.some((i) => criticalIds.has(i.id) && !i.ok && !i.blocked);
+    const blocked = items.some((i) => i.blocked && criticalIds.has(i.id));
+    const anyBlocked = items.some((i) => i.blocked);
+    const ok = !criticalFail && !blocked;
+    if (!ok) {
+        setMigratePhase(dataDir, input.job, 'failed', tl('notes.auto.n0037'));
+    }
+    return assertHonestOps({
+        ok,
+        blocked: anyBlocked || undefined,
+        apply_status: ok
+            ? items.some((i) => !i.ok)
+                ? 'partial'
+                : 'applied'
+            : blocked
+                ? 'blocked'
+                : 'failed',
+        notes: [
+            ok ? tl('notes.tpl.reapplyDone') : tl('notes.auto.n0037'),
+            ...items.filter((i) => !i.ok).flatMap((i) => [`[${i.id}] ${i.notes[0] ?? ''}`]),
+        ],
+        items
+    });
+}
+//# sourceMappingURL=reapply.js.map

package/dist/hosting/host-migrate/reapply.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"reapply.js","sourceRoot":"","sources":["../../../src/hosting/host-migrate/reapply.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAE1C,OAAO,EAAE,eAAe,EAAE,EAAE,EAAC,MAAM,mBAAmB,CAAC;AAGvD,OAAO,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AACnD,OAAO,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AACpD,OAAO,EACL,eAAe,EACf,aAAa,EACb,aAAa,EACb,0BAA0B,EAAE,MAAM,oBAAoB,CAAC;AACzD,OAAO,EAAE,iBAAiB,EAAE,eAAe,EAAE,oBAAoB,EAAE,MAAM,gBAAgB,CAAC;AAc1F;;GAEG;AACH,MAAM,UAAU,oBAAoB,CAClC,EAAa,EACb,QAAsB;IAEtB,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,KAAK,MAAM,CAAC,IAAI,QAAQ,CAAC,QAAQ,EAAE,CAAC;QAClC,IAAI,CAAC,CAAC,CAAC,OAAO;YAAE,SAAS;QACzB,KAAK,CAAC,IAAI,CACR,EAAE,CAAC,kBAAkB,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CACxD,CAAC;QACF,MAAM,GAAG,GAAG,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;QAC5D,IAAI,GAAG,IAAI,GAAG,CAAC,OAAO,EAAE,CAAC;YACvB,GAAG,CAAC,OAAO,GAAG,EAAE,CAAC;YACjB,OAAO,IAAI,CAAC,CAAC;QACf,CAAC;IACH,CAAC;IACD,IAAI,OAAO,EAAE,CAAC;QACZ,IAAI,CAAC;YACH,EAAE,CAAC,OAAO,EAAE,CAAC;YACb,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,kBAAkB,EAAE,EAAE,EAAE,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC;QACxD,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,kBAAkB,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QAC3F,CAAC;IACH,CAAC;IACD,OAAO;QACL,EAAE,EAAE,SAAS;QACb,EAAE,EAAE,IAAI;QACR,KAAK,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,kBAAkB,CAAC,CAAC;QACtD,YAAY,EAAE,SAAS;KAAE,CAAC;AAC9B,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,KAUnC;IACC,MAAM,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACvC,MAAM,KAAK,GAAkB,EAAE,CAAC;IAChC,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC;IAExB,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,EAAE,CAAC;QAC3B,OAAO,eAAe,CAAC;YACrB,EAAE,EAAE,KAAK;YACT,OAAO,EAAE,IAAI;YACb,eAAe,EAAE,IAAI;YACrB,YAAY,EAAE,EAAE,CAAC,kBAAkB,CAAC;YACpC,KAAK,EAAE,CAAC,EAAE,CAAC,8BAA8B,CAAC,CAAC;YAC3C,KAAK,EAAE,EAAE;SAAE,CAAkB,CAAC;IAClC,CAAC;IAED,eAAe,CAAC,OAAO,EAAE,KAAK,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;IAC/C,oBAAoB,CAAC,OAAO,EAAE,KAAK,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC;IAEnF,qBAAqB;IACrB,MAAM,IAAI,GAAG,oBAAoB,CAAC,KAAK,CAAC,EAAE,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;IAC5D,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACjB,iBAAiB,CAAC,OAAO,EAAE,KAAK,CAAC,GAAG,EAAE;QACpC,KAAK,EAAE,SAAS;QAChB,IAAI,EAAE,SAAS;QACf,MAAM,EAAE;YACN,EAAE,EAAE,IAAI,CAAC,EAAE;YACX,YAAY,EAAE,SAAS;YACvB,KAAK,EAAE,IAAI,CAAC,KAAK;SAAE;KAAE,CAAC,CAAC;IAE3B,wBAAwB;IACxB,oBAAoB,CAAC,OAAO,EAAE,KAAK,CAAC,GAAG,CAAC,EAAE,EAAE;QAC1C,KAAK,EAAE,SAAS;QAChB,MAAM,EAAE,SAAS;KAAE,CAAC,CAAC;IACvB,MAAM,OAAO,GACX,KAAK,CAAC,OAAO;QACb,CAAC,UAAU,CAAC,qBAAqB,CAAC;YAChC,CAAC,CAAC,qBAAqB;YACvB,CAAC,CAAC,UAAU,CAAC,2BAA2B,CAAC;gBACvC,CAAC,CAAC,2BAA2B;gBAC7B,CAAC,CAAC,YAAY,CAAC,CAAC;IACtB,8GAA8G;IAC9G,MAAM,EAAE,UAAU,EAAE,GAAG,MAAM,MAAM,CAAC,4BAA4B,CAAC,CAAC;IAClE,MAAM,WAAW,GACf,CAAC,MAAM,UAAU,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC,IAAI,CAAC,MAAM,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,IAAI,OAAO,CAAC;IACxF,6DAA6D;IAC7D,MAAM,IAAI,GAAG,MAAM,0BAA0B,CAAC;QAC5C,OAAO;QACP,iGAAiG;QACjG,OAAO,EAAE,WAAW,CAAC,QAAQ,CAAC,KAAK,CAAC;YAClC,CAAC,CAAC,WAAW;YACb,CAAC,CAAC,IAAI,CAAC,OAAO,EAAE,SAAS,EAAE,oBAAoB,CAAC;QAClD,IAAI;QACJ,MAAM,EAAE,IAAI;KAAE,CAAC,CAAC;IAClB,0DAA0D;IAC1D,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACjC,IAAI,CAAC;YACH,MAAM,EAAE,aAAa,EAAE,SAAS,EAAE,GAAG,MAAM,MAAM,CAAC,SAAS,CAAC,CAAC;YAC7D,SAAS,CAAC,IAAI,CAAC,OAAO,EAAE,SAAS,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YACzD,aAAa,CACX,IAAI,CAAC,OAAO,EAAE,SAAS,EAAE,oBAAoB,CAAC,EAC9C,iFAAiF,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,qDAAqD,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC,6EAA6E,EAC1R,MAAM,CACP,CAAC;QACJ,CAAC;QAAC,MAAM,CAAC;YACP,KAAK;QACP,CAAC;IACH,CAAC;IACD,KAAK,CAAC,IAAI,CAAC;QACT,EAAE,EAAE,oBAAoB;QACxB,EAAE,EAAE,IAAI,CAAC,EAAE;QACX,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,YAAY,EAAE,IAAI,CAAC,OAAO;YACxB,CAAC,CAAC,SAAS;YACX,CAAC,CAAC,IAAI,CAAC,EAAE;gBACP,CAAC,CAAC,IAAI,CAAC,QAAQ;oBACb,CAAC,CAAC,SAAS;oBACX,CAAC,CAAC,SAAS;gBACb,CAAC,CAAC,QAAQ;KAAE,CAAC,CAAC;IACpB,iBAAiB,CAAC,OAAO,EAAE,KAAK,CAAC,GAAG,EAAE;QACpC,KAAK,EAAE,SAAS;QAChB,IAAI,EAAE,oBAAoB;QAC1B,MAAM,EAAE;YACN,EAAE,EAAE,IAAI,CAAC,EAAE;YACX,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,YAAY,EAAE,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAE,CAAC,YAAY;YACnD,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,OAAO,EAAE,IAAI,CAAC,OAAO;SAAE;KAAE,CAAC,CAAC;IAE/B,WAAW;IACX,oBAAoB,CAAC,OAAO,EAAE,KAAK,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC;IACnF,IAAI,QAAQ,GAAa,EAAE,CAAC;IAC5B,IAAI,KAAK,GAAG,KAAK,CAAC;IAClB,IAAI,WAAW,GAAG,IAAI,CAAC;IACvB,IAAI,CAAC;QACH,iFAAiF;QACjF,MAAM,aAAa,GACjB,IAAI,CAAC,MAAM,EAAE,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,SAAS,CAAC;QAC3E,MAAM,GAAG,GAAG,MAAM,gBAAgB,CAAC;YACjC,OAAO;YACP,IAAI;YACJ,aAAa;SAAE,CAAC,CAAC;QACnB,QAAQ,GAAG,CAAC,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC;QAC1B,KAAK,GAAG,GAAG,CAAC,EAAE,KAAK,KAAK,CAAC;QACzB,IAAI,aAAa,IAAI,IAAI,CAAC,cAAc,EAAE,IAAI,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC;YAC5D,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,CAAC,OAAO,EAAE,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,CAAC;YACxE,IAAI,CAAC,CAAC,QAAQ,KAAK,CAAC,EAAE,CAAC;gBACrB,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,CAAC,WAAW,EAAE,QAAQ,EAAE,OAAO,CAAC,EAAE;oBAClE,SAAS,EAAE,MAAM;iBAAE,CAAC,CAAC;gBACvB,WAAW,GAAG,GAAG,CAAC,QAAQ,KAAK,CAAC,CAAC;YACnC,CAAC;iBAAM,CAAC;gBACN,WAAW,GAAG,KAAK,CAAC;gBACpB,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,2BAA2B,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;YACnG,CAAC;QACH,CAAC;aAAM,CAAC;YACN,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,kBAAkB,CAAC,CAAC,CAAC;YACtC,WAAW,GAAG,IAAI,CAAC;QACrB,CAAC;IACH,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,KAAK,GAAG,KAAK,CAAC;QACd,WAAW,GAAG,KAAK,CAAC;QACpB,QAAQ,CAAC,IAAI,CACX,EAAE,CAAC,kBAAkB,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAC7E,CAAC;IACJ,CAAC;IACD,KAAK,CAAC,IAAI,CAAC;QACT,EAAE,EAAE,OAAO;QACX,EAAE,EAAE,KAAK,IAAI,WAAW;QACxB,KAAK,EAAE;YACL,GAAG,QAAQ;YACX,WAAW,CAAC,CAAC,CAAC,2BAA2B,CAAC,CAAC,CAAC,EAAE,CAAC,kBAAkB,CAAC;SACnE;QACD,YAAY,EAAE,KAAK,IAAI,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS;KAAE,CAAC,CAAC;IAChE,iBAAiB,CAAC,OAAO,EAAE,KAAK,CAAC,GAAG,EAAE;QACpC,KAAK,EAAE,SAAS;QAChB,IAAI,EAAE,OAAO;QACb,MAAM,EAAE;YACN,EAAE,EAAE,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAE,CAAC,EAAE;YAC/B,YAAY,EAAE,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAE,CAAC,YAAY;YACnD,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAE,CAAC,KAAK;SAAE;KAAE,CAAC,CAAC;IAE/C,sBAAsB;IACtB,KAAK,MAAM,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,YAAY,EAAE,CAAC;QAC5C,IAAI,CAAC,CAAC,CAAC,MAAM;YAAE,SAAS;QACxB,oBAAoB,CAAC,OAAO,EAAE,KAAK,CAAC,GAAG,CAAC,EAAE,EAAE;YAC1C,KAAK,EAAE,SAAS;YAChB,MAAM,EAAE,OAAO;YACf,MAAM,EAAE,CAAC,CAAC,MAAM;SAAE,CAAC,CAAC;QACtB,IAAI,CAAC;YACH,MAAM,EAAE,GAAG,MAAM,eAAe,CAAC;gBAC/B,OAAO;gBACP,MAAM,EAAE,CAAC,CAAC,MAAM;gBAChB,IAAI;gBACJ,eAAe,EAAE,KAAK;aAAE,CAAC,CAAC;YAC5B,KAAK,CAAC,IAAI,CAAC;gBACT,EAAE,EAAE,SAAS,CAAC,CAAC,MAAM,EAAE;gBACvB,EAAE,EAAE,EAAE,CAAC,EAAE;gBACT,OAAO,EAAE,EAAE,CAAC,OAAO;gBACnB,KAAK,EAAE,EAAE,CAAC,KAAK;gBACf,YAAY,EAAE,EAAE,CAAC,OAAO;oBACtB,CAAC,CAAC,SAAS;oBACX,CAAC,CAAC,EAAE,CAAC,EAAE;wBACL,CAAC,CAAC,EAAE,CAAC,QAAQ;4BACX,CAAC,CAAC,SAAS;4BACX,CAAC,CAAC,SAAS;wBACb,CAAC,CAAC,QAAQ;aAAE,CAAC,CAAC;QACtB,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,KAAK,CAAC,IAAI,CAAC;gBACT,EAAE,EAAE,SAAS,CAAC,CAAC,MAAM,EAAE;gBACvB,EAAE,EAAE,KAAK;gBACT,KAAK,EAAE,CAAC,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;gBACnD,YAAY,EAAE,QAAQ;aAAE,CAAC,CAAC;QAC9B,CAAC;QACD,iBAAiB,CAAC,OAAO,EAAE,KAAK,CAAC,GAAG,EAAE;YACpC,KAAK,EAAE,SAAS;YAChB,IAAI,EAAE,SAAS,CAAC,CAAC,MAAM,EAAE;YACzB,MAAM,EAAE;gBACN,EAAE,EAAE,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAE,CAAC,EAAE;gBAC/B,OAAO,EAAE,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAE,CAAC,OAAO;gBACzC,YAAY,EAAE,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAE,CAAC,YAAY;gBACnD,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAE,CAAC,KAAK;aAAE;SAAE,CAAC,CAAC;IACjD,CAAC;IAED,kCAAkC;IAClC,IAAI,KAAK,CAAC,aAAa,KAAK,KAAK,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,cAAc,IAAI,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;QACrF,oBAAoB,CAAC,OAAO,EAAE,KAAK,CAAC,GAAG,CAAC,EAAE,EAAE;YAC1C,KAAK,EAAE,SAAS;YAChB,MAAM,EAAE,UAAU;SAAE,CAAC,CAAC;QACxB,MAAM,EAAE,GAAG,MAAM,aAAa,CAAC;YAC7B,IAAI;YACJ,OAAO;YACP,KAAK,EAAE,IAAI;SAAE,CAAC,CAAC;QACjB,KAAK,CAAC,IAAI,CAAC;YACT,EAAE,EAAE,UAAU;YACd,EAAE,EAAE,EAAE,CAAC,EAAE;YACT,OAAO,EAAE,EAAE,CAAC,OAAO;YACnB,KAAK,EAAE,EAAE,CAAC,KAAK;YACf,YAAY,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ;SAAE,CAAC,CAAC;QACzE,iBAAiB,CAAC,OAAO,EAAE,KAAK,CAAC,GAAG,EAAE;YACpC,KAAK,EAAE,SAAS;YAChB,IAAI,EAAE,UAAU;YAChB,MAAM,EAAE;gBACN,EAAE,EAAE,EAAE,CAAC,EAAE;gBACT,OAAO,EAAE,EAAE,CAAC,OAAO;gBACnB,YAAY,EAAE,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAE,CAAC,YAAY;gBACnD,KAAK,EAAE,EAAE,CAAC,KAAK;aAAE;SAAE,CAAC,CAAC;IAC3B,CAAC;IAED,IAAI,KAAK,CAAC,aAAa,KAAK,KAAK,EAAE,CAAC;QAClC,oBAAoB,CAAC,OAAO,EAAE,KAAK,CAAC,GAAG,CAAC,EAAE,EAAE;YAC1C,KAAK,EAAE,SAAS;YAChB,MAAM,EAAE,UAAU;SAAE,CAAC,CAAC;QACxB,MAAM,GAAG,GAAG,MAAM,aAAa,CAAC;YAC9B,IAAI;YACJ,OAAO;YACP,KAAK,EAAE,IAAI;SAAE,CAAC,CAAC;QACjB,KAAK,CAAC,IAAI,CAAC;YACT,EAAE,EAAE,UAAU;YACd,EAAE,EAAE,GAAG,CAAC,EAAE;YACV,OAAO,EAAE,GAAG,CAAC,OAAO;YACpB,KAAK,EAAE,GAAG,CAAC,KAAK;YAChB,YAAY,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS;SAAE,CAAC,CAAC;QAC5E,iBAAiB,CAAC,OAAO,EAAE,KAAK,CAAC,GAAG,EAAE;YACpC,KAAK,EAAE,SAAS;YAChB,IAAI,EAAE,UAAU;YAChB,MAAM,EAAE;gBACN,EAAE,EAAE,GAAG,CAAC,EAAE;gBACV,OAAO,EAAE,GAAG,CAAC,OAAO;gBACpB,YAAY,EAAE,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAE,CAAC,YAAY;gBACnD,KAAK,EAAE,GAAG,CAAC,KAAK;aAAE;SAAE,CAAC,CAAC;IAC5B,CAAC;IAED,UAAU;IACV,oBAAoB,CAAC,OAAO,EAAE,KAAK,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;IAClF,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,IAAI,cAAc,CAAC,KAAK,CAAC,EAAE,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;QACzD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,iBAAiB,CAAC,CAAC;QAC1D,KAAK,CAAC,IAAI,CAAC;YACT,EAAE,EAAE,MAAM;YACV,EAAE,EAAE,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;YACpB,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,YAAY,EAAE,IAAI,CAAC,OAAO;gBACxB,CAAC,CAAC,SAAS;gBACX,CAAC,CAAC,IAAI,CAAC,EAAE;oBACP,CAAC,CAAC,SAAS;oBACX,CAAC,CAAC,QAAQ;SAAE,CAAC,CAAC;IACtB,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,KAAK,CAAC,IAAI,CAAC;YACT,EAAE,EAAE,MAAM;YACV,EAAE,EAAE,KAAK;YACT,KAAK,EAAE,CAAC,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;YACnD,YAAY,EAAE,QAAQ;SAAE,CAAC,CAAC;IAC9B,CAAC;IACD,iBAAiB,CAAC,OAAO,EAAE,KAAK,CAAC,GAAG,EAAE;QACpC,KAAK,EAAE,SAAS;QAChB,IAAI,EAAE,MAAM;QACZ,MAAM,EAAE;YACN,EAAE,EAAE,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAE,CAAC,EAAE;YAC/B,OAAO,EAAE,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAE,CAAC,OAAO;YACzC,YAAY,EAAE,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAE,CAAC,YAAY;YACnD,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAE,CAAC,KAAK;SAAE;KAAE,CAAC,CAAC;IAE/C,oBAAoB,CAAC,OAAO,EAAE,KAAK,CAAC,GAAG,CAAC,EAAE,EAAE;QAC1C,KAAK,EAAE,SAAS;QAChB,MAAM,EAAE,MAAM;KAAE,CAAC,CAAC;IAEpB,iDAAiD;IACjD,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,CAAC,oBAAoB,EAAE,OAAO,CAAC,CAAC,CAAC;IAC7D,MAAM,YAAY,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;IACrF,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,IAAI,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IACtE,MAAM,UAAU,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;IAEhD,MAAM,EAAE,GAAG,CAAC,YAAY,IAAI,CAAC,OAAO,CAAC;IACrC,IAAI,CAAC,EAAE,EAAE,CAAC;QACR,eAAe,CAAC,OAAO,EAAE,KAAK,CAAC,GAAG,EAAE,QAAQ,EAAE,EAAE,CAAC,kBAAkB,CAAC,CAAC,CAAC;IACxE,CAAC;IAED,OAAO,eAAe,CAAC;QACrB,EAAE;QACF,OAAO,EAAE,UAAU,IAAI,SAAS;QAChC,YAAY,EAAE,EAAE;YACd,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;gBACxB,CAAC,CAAC,SAAS;gBACX,CAAC,CAAC,SAAS;YACb,CAAC,CAAC,OAAO;gBACP,CAAC,CAAC,SAAS;gBACX,CAAC,CAAC,QAAQ;QACd,KAAK,EAAE;YACL,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,uBAAuB,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,kBAAkB,CAAC;YACzD,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;SAChF;QACD,KAAK;KAAE,CAAkB,CAAC;AAC9B,CAAC"}

package/dist/hosting/host-migrate/redis-dump.d.ts

@@ -0,0 +1,25 @@
+/**
+ * Redis RDB snapshot for host migrate (honest fail-closed).
+ * Prefers `redis-cli --rdb`; falls back to BGSAVE + copy of dump.rdb.
+ */
+import type { HostExecutor } from '../../host/executor.js';
+import type { OpsResultDto } from 'ysk-server-shared';
+export type RedisDumpResult = OpsResultDto & {
+    path?: string;
+    bytes?: number;
+    method?: 'rdb-flag' | 'bgsave-copy';
+};
+/**
+ * Dump Redis instance to an RDB file under outputPath.
+ */
+export declare function dumpRedisRdb(input: {
+    host: HostExecutor;
+    /** Absolute path for .rdb output */
+    outputPath: string;
+    redisHost?: string;
+    redisPort?: number;
+    password?: string;
+    /** Max wait for BGSAVE fallback (ms) */
+    bgsaveTimeoutMs?: number;
+}): Promise<RedisDumpResult>;
+//# sourceMappingURL=redis-dump.d.ts.map

package/dist/hosting/host-migrate/redis-dump.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"redis-dump.d.ts","sourceRoot":"","sources":["../../../src/hosting/host-migrate/redis-dump.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAIH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AAC3D,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAGtD,MAAM,MAAM,eAAe,GAAG,YAAY,GAAG;IAC3C,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,UAAU,GAAG,aAAa,CAAC;CACrC,CAAC;AAUF;;GAEG;AACH,wBAAsB,YAAY,CAAC,KAAK,EAAE;IACxC,IAAI,EAAE,YAAY,CAAC;IACnB,oCAAoC;IACpC,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,wCAAwC;IACxC,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B,GAAG,OAAO,CAAC,eAAe,CAAC,CAmJ3B"}

package/dist/hosting/host-migrate/redis-dump.js

@@ -0,0 +1,153 @@
+/**
+ * Redis RDB snapshot for host migrate (honest fail-closed).
+ * Prefers `redis-cli --rdb`; falls back to BGSAVE + copy of dump.rdb.
+ */
+import { existsSync, mkdirSync, statSync, copyFileSync } from 'node:fs';
+import { dirname, join } from 'node:path';
+import { assertHonestOps, tl } from 'ysk-server-shared';
+function fileBytes(p) {
+    try {
+        return statSync(p).size;
+    }
+    catch {
+        return 0;
+    }
+}
+/**
+ * Dump Redis instance to an RDB file under outputPath.
+ */
+export async function dumpRedisRdb(input) {
+    if (!input.host.executeEnabled()) {
+        return assertHonestOps({
+            ok: false,
+            blocked: true,
+            requiresExecute: true,
+            blockMessage: tl('notes.auto.n0527'),
+            notes: [tl('notes.auto.n0170')]
+        });
+    }
+    const out = input.outputPath;
+    mkdirSync(dirname(out), { recursive: true });
+    const host = input.redisHost ?? '127.0.0.1';
+    const port = input.redisPort ?? 6379;
+    const auth = input.password
+        ? `-a ${JSON.stringify(input.password)} --no-auth-warning `
+        : '';
+    const base = `redis-cli -h ${JSON.stringify(host)} -p ${port} ${auth}`.trim();
+    // Probe redis-cli (unified PATH)
+    const { binPresent } = await import('../software-probe/index.js');
+    if (!(await binPresent(input.host, 'redis-cli'))) {
+        return assertHonestOps({
+            ok: false,
+            blocked: true,
+            blockMessage: tl('notes.redis.cliMissing'),
+            notes: [tl('notes.auto.n1124')]
+        });
+    }
+    // Method 1: redis-cli --rdb (Redis 6+)
+    const rdb = await input.host.runCommand([
+        'bash',
+        '-c',
+        `${base} --rdb ${JSON.stringify(out)} 2>&1`,
+    ], { timeoutMs: 300_000 });
+    if (rdb.exitCode === 0 && existsSync(out) && fileBytes(out) > 0) {
+        return assertHonestOps({
+            ok: true,
+            apply_status: 'written',
+            notes: [tl('notes.auto.t0671', { v0: (out) })],
+            path: out,
+            bytes: fileBytes(out),
+            method: 'rdb-flag',
+            written: [out]
+        });
+    }
+    // Method 2: BGSAVE + copy dump.rdb from dir
+    const bgsave = await input.host.runCommand(['bash', '-c', `${base} BGSAVE 2>&1`], { timeoutMs: 30_000 });
+    if (bgsave.exitCode !== 0) {
+        return assertHonestOps({
+            ok: false,
+            apply_status: 'failed',
+            notes: [
+                tl('notes.auto.t0672', { v0: ((rdb.stderr || rdb.stdout || '').slice(0, 200)) }),
+                tl('notes.auto.t0673', { v0: ((bgsave.stderr || bgsave.stdout || '').slice(0, 200)) }),
+            ]
+        });
+    }
+    const timeout = input.bgsaveTimeoutMs ?? 120_000;
+    const deadline = Date.now() + timeout;
+    let last = '';
+    while (Date.now() < deadline) {
+        const st = await input.host.runCommand(['bash', '-c', `${base} LASTSAVE 2>&1; ${base} INFO persistence 2>&1 | head -20`], { timeoutMs: 10_000 });
+        last = st.stdout || st.stderr || '';
+        // rdb_bgsave_in_progress:0 means done
+        if (/rdb_bgsave_in_progress:0/.test(last) || /Background saving terminated/.test(last)) {
+            break;
+        }
+        await sleep(500);
+    }
+    // Locate dump.rdb via CONFIG GET dir
+    const cfg = await input.host.runCommand(['bash', '-c', `${base} CONFIG GET dir 2>&1; ${base} CONFIG GET dbfilename 2>&1`], { timeoutMs: 10_000 });
+    const cfgOut = cfg.stdout || '';
+    // redis-cli CONFIG GET returns:
+    // dir
+    // /var/lib/redis
+    // dbfilename
+    // dump.rdb
+    const lines = cfgOut
+        .split('\n')
+        .map((l) => l.trim())
+        .filter(Boolean);
+    let dir = '/var/lib/redis';
+    let name = 'dump.rdb';
+    for (let i = 0; i < lines.length - 1; i++) {
+        if (lines[i] === 'dir')
+            dir = lines[i + 1] || dir;
+        if (lines[i] === 'dbfilename')
+            name = lines[i + 1] || name;
+    }
+    const src = join(dir, name);
+    // Prefer shell cp via host (permissions)
+    const cp = await input.host.runCommand([
+        'bash',
+        '-c',
+        `if [ -f ${JSON.stringify(src)} ]; then cp -a ${JSON.stringify(src)} ${JSON.stringify(out)} && echo YSK_RDB_COPIED; else echo YSK_RDB_MISSING; fi`,
+    ], { timeoutMs: 60_000 });
+    const copied = cp.exitCode === 0 &&
+        (cp.stdout.includes('YSK_RDB_COPIED') || (existsSync(out) && fileBytes(out) > 0));
+    if (!copied) {
+        // local copyFile fallback if same machine readable
+        try {
+            if (existsSync(src)) {
+                copyFileSync(src, out);
+            }
+        }
+        catch {
+            /* */
+        }
+    }
+    if (existsSync(out) && fileBytes(out) > 0) {
+        return assertHonestOps({
+            ok: true,
+            apply_status: 'written',
+            notes: [tl('notes.auto.t0674', { v0: (src), v1: (out) })],
+            path: out,
+            bytes: fileBytes(out),
+            method: 'bgsave-copy',
+            written: [out]
+        });
+    }
+    return assertHonestOps({
+        ok: false,
+        apply_status: 'failed',
+        notes: [
+            tl('notes.auto.t0675', { v0: (src) }),
+            (rdb.stderr || rdb.stdout || '').slice(0, 150),
+            (cp.stdout || cp.stderr || '').slice(0, 150),
+            last.slice(0, 100),
+        ].filter(Boolean)
+    });
+}
+function sleep(ms) {
+    return new Promise((r) => setTimeout(r, ms));
+}
+//# sourceMappingURL=redis-dump.js.map

package/dist/hosting/host-migrate/redis-dump.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"redis-dump.js","sourceRoot":"","sources":["../../../src/hosting/host-migrate/redis-dump.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACxE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAG1C,OAAO,EAAE,eAAe,EAAE,EAAE,EAAC,MAAM,mBAAmB,CAAC;AAQvD,SAAS,SAAS,CAAC,CAAS;IAC1B,IAAI,CAAC;QACH,OAAO,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC1B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,CAAC;IACX,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,KASlC;IACC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,cAAc,EAAE,EAAE,CAAC;QACjC,OAAO,eAAe,CAAC;YACrB,EAAE,EAAE,KAAK;YACT,OAAO,EAAE,IAAI;YACb,eAAe,EAAE,IAAI;YACrB,YAAY,EAAE,EAAE,CAAC,kBAAkB,CAAC;YACpC,KAAK,EAAE,CAAC,EAAE,CAAC,kBAAkB,CAAC,CAAC;SAAE,CAAC,CAAC;IACvC,CAAC;IAED,MAAM,GAAG,GAAG,KAAK,CAAC,UAAU,CAAC;IAC7B,SAAS,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC7C,MAAM,IAAI,GAAG,KAAK,CAAC,SAAS,IAAI,WAAW,CAAC;IAC5C,MAAM,IAAI,GAAG,KAAK,CAAC,SAAS,IAAI,IAAI,CAAC;IACrC,MAAM,IAAI,GAAG,KAAK,CAAC,QAAQ;QACzB,CAAC,CAAC,MAAM,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,QAAQ,CAAC,qBAAqB;QAC3D,CAAC,CAAC,EAAE,CAAC;IACP,MAAM,IAAI,GAAG,gBAAgB,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,IAAI,IAAI,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC;IAE9E,iCAAiC;IACjC,MAAM,EAAE,UAAU,EAAE,GAAG,MAAM,MAAM,CAAC,4BAA4B,CAAC,CAAC;IAClE,IAAI,CAAC,CAAC,MAAM,UAAU,CAAC,KAAK,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC,EAAE,CAAC;QACjD,OAAO,eAAe,CAAC;YACrB,EAAE,EAAE,KAAK;YACT,OAAO,EAAE,IAAI;YACb,YAAY,EAAE,EAAE,CAAC,wBAAwB,CAAC;YAC1C,KAAK,EAAE,CAAC,EAAE,CAAC,kBAAkB,CAAC,CAAC;SAAE,CAAC,CAAC;IACvC,CAAC;IAED,uCAAuC;IACvC,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,UAAU,CACrC;QACE,MAAM;QACN,IAAI;QACJ,GAAG,IAAI,UAAU,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,OAAO;KAC5C,EACD,EAAE,SAAS,EAAE,OAAO,EAAE,CACvB,CAAC;IACF,IAAI,GAAG,CAAC,QAAQ,KAAK,CAAC,IAAI,UAAU,CAAC,GAAG,CAAC,IAAI,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;QAChE,OAAO,eAAe,CAAC;YACrB,EAAE,EAAE,IAAI;YACR,YAAY,EAAE,SAAS;YACvB,KAAK,EAAE,CAAC,EAAE,CAAC,kBAAkB,EAAE,EAAE,EAAE,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAC9C,IAAI,EAAE,GAAG;YACT,KAAK,EAAE,SAAS,CAAC,GAAG,CAAC;YACrB,MAAM,EAAE,UAAmB;YAC3B,OAAO,EAAE,CAAC,GAAG,CAAC;SAAE,CAAC,CAAC;IACtB,CAAC;IAED,4CAA4C;IAC5C,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,UAAU,CACxC,CAAC,MAAM,EAAE,IAAI,EAAE,GAAG,IAAI,cAAc,CAAC,EACrC,EAAE,SAAS,EAAE,MAAM,EAAE,CACtB,CAAC;IACF,IAAI,MAAM,CAAC,QAAQ,KAAK,CAAC,EAAE,CAAC;QAC1B,OAAO,eAAe,CAAC;YACrB,EAAE,EAAE,KAAK;YACT,YAAY,EAAE,QAAQ;YACtB,KAAK,EAAE;gBACL,EAAE,CAAC,kBAAkB,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC;gBAChF,EAAE,CAAC,kBAAkB,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC;aACvF;SAAE,CAAC,CAAC;IACT,CAAC;IAED,MAAM,OAAO,GAAG,KAAK,CAAC,eAAe,IAAI,OAAO,CAAC;IACjD,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC;IACtC,IAAI,IAAI,GAAG,EAAE,CAAC;IACd,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,EAAE,CAAC;QAC7B,MAAM,EAAE,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,UAAU,CACpC,CAAC,MAAM,EAAE,IAAI,EAAE,GAAG,IAAI,mBAAmB,IAAI,mCAAmC,CAAC,EACjF,EAAE,SAAS,EAAE,MAAM,EAAE,CACtB,CAAC;QACF,IAAI,GAAG,EAAE,CAAC,MAAM,IAAI,EAAE,CAAC,MAAM,IAAI,EAAE,CAAC;QACpC,sCAAsC;QACtC,IAAI,0BAA0B,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,8BAA8B,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YACvF,MAAM;QACR,CAAC;QACD,MAAM,KAAK,CAAC,GAAG,CAAC,CAAC;IACnB,CAAC;IAED,qCAAqC;IACrC,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,UAAU,CACrC,CAAC,MAAM,EAAE,IAAI,EAAE,GAAG,IAAI,yBAAyB,IAAI,6BAA6B,CAAC,EACjF,EAAE,SAAS,EAAE,MAAM,EAAE,CACtB,CAAC;IACF,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,IAAI,EAAE,CAAC;IAChC,gCAAgC;IAChC,MAAM;IACN,iBAAiB;IACjB,aAAa;IACb,WAAW;IACX,MAAM,KAAK,GAAG,MAAM;SACjB,KAAK,CAAC,IAAI,CAAC;SACX,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;SACpB,MAAM,CAAC,OAAO,CAAC,CAAC;IACnB,IAAI,GAAG,GAAG,gBAAgB,CAAC;IAC3B,IAAI,IAAI,GAAG,UAAU,CAAC;IACtB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAC1C,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,KAAK;YAAE,GAAG,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,GAAG,CAAC;QAClD,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,YAAY;YAAE,IAAI,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC;IAC7D,CAAC;IACD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IAE5B,yCAAyC;IACzC,MAAM,EAAE,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,UAAU,CACpC;QACE,MAAM;QACN,IAAI;QACJ,WAAW,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,kBAAkB,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,wDAAwD;KACnJ,EACD,EAAE,SAAS,EAAE,MAAM,EAAE,CACtB,CAAC;IACF,MAAM,MAAM,GACV,EAAE,CAAC,QAAQ,KAAK,CAAC;QACjB,CAAC,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,gBAAgB,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IAEpF,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,mDAAmD;QACnD,IAAI,CAAC;YACH,IAAI,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;gBACpB,YAAY,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;YACzB,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,KAAK;QACP,CAAC;IACH,CAAC;IAED,IAAI,UAAU,CAAC,GAAG,CAAC,IAAI,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;QAC1C,OAAO,eAAe,CAAC;YACrB,EAAE,EAAE,IAAI;YACR,YAAY,EAAE,SAAS;YACvB,KAAK,EAAE,CAAC,EAAE,CAAC,kBAAkB,EAAE,EAAE,EAAE,EAAE,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YACzD,IAAI,EAAE,GAAG;YACT,KAAK,EAAE,SAAS,CAAC,GAAG,CAAC;YACrB,MAAM,EAAE,aAAsB;YAC9B,OAAO,EAAE,CAAC,GAAG,CAAC;SAAE,CAAC,CAAC;IACtB,CAAC;IAED,OAAO,eAAe,CAAC;QACrB,EAAE,EAAE,KAAK;QACT,YAAY,EAAE,QAAQ;QACtB,KAAK,EAAE;YACL,EAAE,CAAC,kBAAkB,EAAE,EAAE,EAAE,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC;YACrC,CAAC,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;YAC9C,CAAC,EAAE,CAAC,MAAM,IAAI,EAAE,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;YAC5C,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;SACnB,CAAC,MAAM,CAAC,OAAO,CAAC;KAAE,CAAC,CAAC;AACzB,CAAC;AAED,SAAS,KAAK,CAAC,EAAU;IACvB,OAAO,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;AAC/C,CAAC"}

package/dist/hosting/host-migrate/restore.d.ts

@@ -0,0 +1,62 @@
+/**
+ * Restore phase (runs on target host with local HostExecutor + dataDir).
+ * - Ensure control plane files present
+ * - Recreate OS users with preferred UID/GID
+ * - Import SQL dumps from package dir
+ * - Restore Redis RDB
+ */
+import type { HostManifest, HostManifestDatabase, HostManifestProject, HostManifestRedis, MigrateJobDto, OpsResultDto } from 'ysk-server-shared';
+import type { HostExecutor } from '../../host/executor.js';
+import type { JsonStore } from '../../db/store.js';
+export type RestoreItem = {
+    id: string;
+    kind: 'control-plane' | 'os-user' | 'sql' | 'redis' | 'chown';
+    ok: boolean;
+    notes: string[];
+    blocked?: boolean;
+};
+export type RestoreResult = OpsResultDto & {
+    items: RestoreItem[];
+};
+/**
+ * Ensure ysk.json + secrets master key exist after transfer.
+ */
+export declare function ensureControlPlaneFiles(dataDir: string): RestoreItem;
+/**
+ * Create group+user with optional fixed UID/GID; home already rsynced (-M).
+ */
+export declare function restoreOsUser(input: {
+    host: HostExecutor;
+    project: HostManifestProject;
+}): Promise<RestoreItem>;
+/**
+ * Import one SQL dump; create empty DB first if needed (best-effort).
+ */
+export declare function restoreSqlDatabase(input: {
+    host: HostExecutor;
+    dataDir: string;
+    db: HostManifestDatabase;
+    resolvePassword?: (db: HostManifestDatabase) => string | undefined;
+}): Promise<RestoreItem>;
+/**
+ * Restore Redis RDB: stop → copy → start (best-effort paths).
+ */
+export declare function restoreRedisInstance(input: {
+    host: HostExecutor;
+    dataDir: string;
+    redis: HostManifestRedis;
+    redisHost?: string;
+    redisPort?: number;
+}): Promise<RestoreItem>;
+/**
+ * Full restore phase on local target.
+ */
+export declare function restoreOnHost(input: {
+    host: HostExecutor;
+    dataDir: string;
+    job: MigrateJobDto;
+    manifest: HostManifest;
+    db?: JsonStore;
+    resolveSqlPassword?: (db: HostManifestDatabase) => string | undefined;
+}): Promise<RestoreResult>;
+//# sourceMappingURL=restore.d.ts.map

package/dist/hosting/host-migrate/restore.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"restore.d.ts","sourceRoot":"","sources":["../../../src/hosting/host-migrate/restore.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAIH,OAAO,KAAK,EACV,YAAY,EACZ,oBAAoB,EACpB,mBAAmB,EACnB,iBAAiB,EACjB,aAAa,EACb,YAAY,EACb,MAAM,mBAAmB,CAAC;AAE3B,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AAC3D,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAC;AAKnD,MAAM,MAAM,WAAW,GAAG;IACxB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,eAAe,GAAG,SAAS,GAAG,KAAK,GAAG,OAAO,GAAG,OAAO,CAAC;IAC9D,EAAE,EAAE,OAAO,CAAC;IACZ,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB,CAAC;AAEF,MAAM,MAAM,aAAa,GAAG,YAAY,GAAG;IACzC,KAAK,EAAE,WAAW,EAAE,CAAC;CACtB,CAAC;AAMF;;GAEG;AACH,wBAAgB,uBAAuB,CAAC,OAAO,EAAE,MAAM,GAAG,WAAW,CAwBpE;AAED;;GAEG;AACH,wBAAsB,aAAa,CAAC,KAAK,EAAE;IACzC,IAAI,EAAE,YAAY,CAAC;IACnB,OAAO,EAAE,mBAAmB,CAAC;CAC9B,GAAG,OAAO,CAAC,WAAW,CAAC,CA+FvB;AAED;;GAEG;AACH,wBAAsB,kBAAkB,CAAC,KAAK,EAAE;IAC9C,IAAI,EAAE,YAAY,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,EAAE,EAAE,oBAAoB,CAAC;IACzB,eAAe,CAAC,EAAE,CAAC,EAAE,EAAE,oBAAoB,KAAK,MAAM,GAAG,SAAS,CAAC;CACpE,GAAG,OAAO,CAAC,WAAW,CAAC,CA0DvB;AAED;;GAEG;AACH,wBAAsB,oBAAoB,CAAC,KAAK,EAAE;IAChD,IAAI,EAAE,YAAY,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,iBAAiB,CAAC;IACzB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB,GAAG,OAAO,CAAC,WAAW,CAAC,CAgGvB;AAED;;GAEG;AACH,wBAAsB,aAAa,CAAC,KAAK,EAAE;IACzC,IAAI,EAAE,YAAY,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,GAAG,EAAE,aAAa,CAAC;IACnB,QAAQ,EAAE,YAAY,CAAC;IACvB,EAAE,CAAC,EAAE,SAAS,CAAC;IACf,kBAAkB,CAAC,EAAE,CAAC,EAAE,EAAE,oBAAoB,KAAK,MAAM,GAAG,SAAS,CAAC;CACvE,GAAG,OAAO,CAAC,aAAa,CAAC,CA8KzB"}