1.2.5

.gitea/workflows/docker_nottags.yaml

@@ -6,8 +6,8 @@ on:
       - '**'
 
 env:
-  IMAGE: registry.gitlab.com/hosttoday/ht-docker-node:npmci
+  IMAGE: code.foss.global/hosttoday/ht-docker-node:npmci
-  NPMCI_COMPUTED_REPOURL: https://${{gitea.repository_owner}}:${{secrets.GITEA_TOKEN}}@gitea.lossless.digital/${{gitea.repository}}.git
+  NPMCI_COMPUTED_REPOURL: https://${{gitea.repository_owner}}:${{secrets.GITEA_TOKEN}}@/${{gitea.repository}}.git
   NPMCI_TOKEN_NPM: ${{secrets.NPMCI_TOKEN_NPM}}
   NPMCI_TOKEN_NPM2: ${{secrets.NPMCI_TOKEN_NPM2}}
   NPMCI_GIT_GITHUBTOKEN: ${{secrets.NPMCI_GIT_GITHUBTOKEN}}
@@ -27,7 +27,7 @@ jobs:
       - name: Install pnpm and npmci
         run: |
           pnpm install -g pnpm
-          pnpm install -g @shipzone/npmci
+          pnpm install -g @ship.zone/npmci
           npmci npm prepare
 
       - name: Audit production dependencies
@@ -54,7 +54,7 @@ jobs:
       - name: Prepare
         run: |
           pnpm install -g pnpm
-          pnpm install -g @shipzone/npmci
+          pnpm install -g @ship.zone/npmci
           npmci npm prepare
 
       - name: Test stable

.gitea/workflows/docker_tags.yaml

@@ -6,8 +6,8 @@ on:
       - '*'
 
 env:
-  IMAGE: registry.gitlab.com/hosttoday/ht-docker-node:npmci
+  IMAGE: code.foss.global/hosttoday/ht-docker-node:npmci
-  NPMCI_COMPUTED_REPOURL: https://${{gitea.repository_owner}}:${{secrets.GITEA_TOKEN}}@gitea.lossless.digital/${{gitea.repository}}.git
+  NPMCI_COMPUTED_REPOURL: https://${{gitea.repository_owner}}:${{secrets.GITEA_TOKEN}}@/${{gitea.repository}}.git
   NPMCI_TOKEN_NPM: ${{secrets.NPMCI_TOKEN_NPM}}
   NPMCI_TOKEN_NPM2: ${{secrets.NPMCI_TOKEN_NPM2}}
   NPMCI_GIT_GITHUBTOKEN: ${{secrets.NPMCI_GIT_GITHUBTOKEN}}
@@ -27,7 +27,7 @@ jobs:
       - name: Prepare
         run: |
           pnpm install -g pnpm
-          pnpm install -g @shipzone/npmci
+          pnpm install -g @ship.zone/npmci
           npmci npm prepare
 
       - name: Audit production dependencies
@@ -54,7 +54,7 @@ jobs:
       - name: Prepare
         run: |
           pnpm install -g pnpm
-          pnpm install -g @shipzone/npmci
+          pnpm install -g @ship.zone/npmci
           npmci npm prepare
 
       - name: Test stable
@@ -74,7 +74,7 @@ jobs:
     if: github.event_name == 'push' && startsWith(github.ref, 'refs/tags/')
     runs-on: ubuntu-latest
     container:
-      image: registry.gitlab.com/hosttoday/ht-docker-dbase:npmci
+      image: code.foss.global/hosttoday/ht-docker-dbase:npmci
 
     steps:
       - uses: actions/checkout@v3
@@ -82,15 +82,15 @@ jobs:
       - name: Prepare
         run: |
           pnpm install -g pnpm
-          pnpm install -g @shipzone/npmci
+          pnpm install -g @ship.zone/npmci
 
       - name: Release
         run: |
           npmci docker login
           npmci docker build
           npmci docker test
-          # npmci docker push gitea.lossless.digital
+          # npmci docker push 
-          npmci docker push dockerregistry.lossless.digital
+          npmci docker push 
 
   metadata:
     needs: test

Dockerfile

@@ -1,6 +1,6 @@
 # gitzone dockerfile_service
 ## STAGE 1 // BUILD
-FROM registry.gitlab.com/hosttoday/ht-docker-node:npmci as node1
+FROM code.foss.global/hosttoday/ht-docker-node:npmci as node1
 COPY ./ /app
 WORKDIR /app
 ARG NPMCI_TOKEN_NPM2
@@ -12,7 +12,7 @@ RUN pnpm run build
 
 # gitzone dockerfile_service
 ## STAGE 2 // install production
-FROM registry.gitlab.com/hosttoday/ht-docker-node:npmci as node2
+FROM code.foss.global/hosttoday/ht-docker-node:npmci as node2
 WORKDIR /app
 COPY --from=node1 /app /app
 RUN rm -rf .pnpm-store
@@ -24,7 +24,7 @@ RUN rm -rf node_modules/ && pnpm install --prod
 
 
 ## STAGE 3 // rebuild dependencies for alpine
-FROM registry.gitlab.com/hosttoday/ht-docker-node:alpinenpmci as node3
+FROM code.foss.global/hosttoday/ht-docker-node:alpinenpmci as node3
 WORKDIR /app
 COPY --from=node2 /app /app
 ARG NPMCI_TOKEN_NPM2
@@ -34,7 +34,7 @@ RUN pnpm config set store-dir .pnpm-store
 RUN pnpm rebuild -r
 
 ## STAGE 4 // the final production image with all dependencies in place
-FROM registry.gitlab.com/hosttoday/ht-docker-node:alpine as node4
+FROM code.foss.global/hosttoday/ht-docker-node:alpine as node4
 WORKDIR /app
 COPY --from=node3 /app /app
 

changelog.md

@@ -0,0 +1,114 @@
+# Changelog
+
+## 2024-10-28 - 1.2.5 - fix(build)
+Updated devDependencies for tspublish and removed buildDocs script
+
+- devDependencies updated: @git.zone/tspublish to version ^1.5.4
+- Removed: buildDocs script from the scripts section
+
+## 2024-10-27 - 1.2.4 - fix(ci)
+Fix Docker images and npm registry URL in CI workflows
+
+- Updated Docker image registry URL from 'registry.gitlab.com' to 'code.foss.global'.
+- Fixed npmci package installation path from '@shipzone/npmci' to '@ship.zone/npmci'.
+
+## 2024-10-23 - 1.2.3 - fix(cli)
+Set up CLI client definition and registry configuration
+
+- Added a console log message for CLI identification.
+- Defined package name for CLI client.
+- Configured npm registries for package distribution.
+
+## 2024-10-23 - 1.2.2 - fix(docs)
+Updated documentation with clearer usage instructions and examples.
+
+- Refined setup guides in README.
+- Added more detailed examples in code snippets.
+- Clarified cloud service integration instructions.
+
+## 2024-10-23 - 1.2.1 - fix(core)
+Fixed startup issue for the Cloudly instance
+
+
+## 2024-10-21 - 1.2.0 - feat(cli)
+Add tspublish.json for CLI client and interfaces
+
+- Added registration details for publishing CLI client (@serve.zone/cli)
+- Specified npm and custom registries in the tspublish.json for better publish control
+- Updated dependency version for @git.zone/tspublish in package.json
+
+## 2024-10-21 - 1.1.9 - fix(build)
+Update Node types and other dependencies, add tspublish.json for api client
+
+- Updated Node types devDependency to version ^22.7.7 from ^22.7.5.
+- Updated smartbucket dependency to version ^3.0.23 from ^3.0.22.
+- Added tspublish configuration file to the api client.
+- Fixed the npm publish script in package.json.
+
+## 2024-10-16 - 1.1.8 - fix(big fix upgrade)
+fix: update dependency versions and address type errors
+
+- Updated all listed dependencies in the package.json to their specified ranges.
+- Fixed type mismatches and added missing imports in various TypeScript files.
+- Refined existing tests and added a new helper to manage Docker image streams.
+
+## 2024-08-25 - 1.1.7 - fix(deps)
+Update dependencies to latest versions
+
+- Updated @git.zone/tsbuild from ^2.1.80 to ^2.1.84
+- Updated @push.rocks/tapbundle from ^5.0.23 to ^5.0.24
+- Updated @types/node from ^20.14.6 to ^22.5.0
+- Updated @apiclient.xyz/docker from ^1.2.2 to ^1.2.3
+- Updated @design.estate/dees-catalog from ^1.0.289 to ^1.1.6
+- Updated @design.estate/dees-element from ^2.0.34 to ^2.0.36
+- Updated @git.zone/tsrun from ^1.2.37 to ^1.2.49
+- Updated @push.rocks/smartbucket from ^3.0.20 to ^3.0.22
+- Updated @push.rocks/smartpromise from ^4.0.3 to ^4.0.4
+- Updated @serve.zone/interfaces from ^1.0.74 to ^1.0.78
+- Updated @tsclass/tsclass from ^4.0.60 to ^4.1.2
+
+## 2024-06-20 - 1.1.6 - Updates
+Routine updates and fixes.
+
+- (fix) core: update
+
+## 2024-06-13 - 1.1.4 - Service Management Preparation
+Incorporated updates and service management preparations.
+
+- (fix) core: update
+- (feat) prepare service management
+
+## 2024-06-05 - 1.1.3 - CI Integration Improvement
+Structural improvements and better CI integration preparation.
+
+- (fix) structure: improve structure, prepare better CI integration
+
+## 2024-06-02 - 1.1.2 - Image Manager Update
+Prepared proper storage and retrieval of container images.
+
+- (fix) imagemanager: prepare proper storage and retrieval of container images
+
+## 2024-06-01 - 1.1.0 - Image Registry Work
+Initiated work on image registry.
+
+- (fix) image registry: start work on image registry
+
+## 2024-05-30 - 1.0.216 - Enhanced Smartguards
+Enhanced smartguards to verify action authorization.
+
+- (feat) guards: use better smartguards to verify action authorization
+
+## 2024-05-28 - 1.0.215 - Unified Package Update
+Updated package unification for cloudly + API + CLI.
+
+- (fix) switch to unified package for cloudly + API + CLI: update
+
+## 2024-05-05 - 1.0.214 - Core Updates
+Routine core updates.
+
+- (fix) core: update
+
+## 2024-04-20 - 1.0.213 - Core Update
+Routine core updates.
+
+- (fix) core: update

npmextra.json

@@ -16,23 +16,23 @@
       "githost": "gitlab.com",
       "gitscope": "servezone/private",
       "gitrepo": "cloudly",
-      "description": "A comprehensive multi-cloud manager leveraging Docker Swarmkit to orchestrate containerized applications across various cloud services and integrate robust configuration and API management capabilities.",
+      "description": "A comprehensive multi-cloud manager leveraging Docker Swarmkit to orchestrate containerized applications across various cloud services and provide robust configuration and API integration.",
       "npmPackagename": "@serve.zone/cloudly",
       "license": "UNLICENSED",
       "keywords": [
         "cloud management",
-        "multi-cloud",
+        "multi-cloud management",
         "Docker Swarmkit",
+        "container orchestration",
+        "cloud services",
         "DigitalOcean",
         "Hetzner Cloud",
         "Cloudflare",
-        "container orchestration",
         "configuration management",
         "SSL management",
         "API integration",
         "TypeScript",
         "node.js",
-        "cloud integration",
         "infrastructure automation",
         "devOps",
         "cloud API client",
@@ -42,7 +42,7 @@
         "task scheduling",
         "frontend",
         "backend",
-        "cli",
+        "CLI",
         "web interface",
         "cloud providers",
         "security",

package.json

@@ -1,8 +1,8 @@
 {
   "name": "@serve.zone/cloudly",
-  "version": "1.1.5",
+  "version": "1.2.5",
   "private": false,
-  "description": "A comprehensive multi-cloud manager leveraging Docker Swarmkit to orchestrate containerized applications across various cloud services and integrate robust configuration and API management capabilities.",
+  "description": "A comprehensive multi-cloud manager leveraging Docker Swarmkit to orchestrate containerized applications across various cloud services and provide robust configuration and API integration.",
   "type": "module",
   "exports": {
     ".": "./dist/index.js",
@@ -18,58 +18,61 @@
     "start": "node cli.js",
     "startTs": "node cli.ts.js",
     "watch": "tswatch website",
-    "localPublish": "gitzone commit"
+    "publish": "tspublish"
   },
   "devDependencies": {
-    "@git.zone/tsbuild": "^2.1.80",
+    "@git.zone/tsbuild": "^2.1.85",
-    "@git.zone/tsbundle": "^2.0.15",
+    "@git.zone/tsbundle": "^2.1.0",
+    "@git.zone/tspublish": "^1.5.4",
     "@git.zone/tstest": "^1.0.90",
-    "@git.zone/tswatch": "^2.0.23",
+    "@git.zone/tswatch": "^2.0.25",
-    "@push.rocks/tapbundle": "^5.0.23",
+    "@push.rocks/tapbundle": "^5.3.0",
-    "@types/node": "^20.14.6"
+    "@types/node": "^22.8.1"
   },
   "dependencies": {
-    "@api.global/typedrequest": "3.0.30",
+    "@api.global/typedrequest": "3.1.10",
-    "@api.global/typedserver": "^3.0.50",
+    "@api.global/typedrequest-interfaces": "^3.0.19",
+    "@api.global/typedserver": "^3.0.51",
     "@api.global/typedsocket": "^3.0.1",
     "@apiclient.xyz/cloudflare": "^6.0.1",
-    "@apiclient.xyz/docker": "^1.2.2",
+    "@apiclient.xyz/docker": "^1.2.7",
     "@apiclient.xyz/hetznercloud": "^1.2.0",
     "@apiclient.xyz/slack": "^3.0.9",
-    "@design.estate/dees-catalog": "^1.0.289",
+    "@design.estate/dees-catalog": "^1.2.0",
-    "@design.estate/dees-domtools": "^2.0.57",
+    "@design.estate/dees-domtools": "^2.0.64",
-    "@design.estate/dees-element": "^2.0.34",
+    "@design.estate/dees-element": "^2.0.39",
-    "@git.zone/tsrun": "^1.2.37",
+    "@git.zone/tsrun": "^1.3.3",
     "@push.rocks/early": "^4.0.3",
     "@push.rocks/npmextra": "^5.0.23",
     "@push.rocks/projectinfo": "^5.0.1",
     "@push.rocks/qenv": "^6.0.5",
     "@push.rocks/smartacme": "^5.0.0",
-    "@push.rocks/smartbucket": "^3.0.20",
+    "@push.rocks/smartbucket": "^3.0.23",
     "@push.rocks/smartcli": "^4.0.11",
     "@push.rocks/smartclickhouse": "^2.0.17",
-    "@push.rocks/smartdata": "^5.2.6",
+    "@push.rocks/smartdata": "^5.2.10",
     "@push.rocks/smartdelay": "^3.0.5",
     "@push.rocks/smartexit": "^1.0.23",
-    "@push.rocks/smartfile": "^11.0.20",
+    "@push.rocks/smartexpect": "^1.2.1",
-    "@push.rocks/smartguard": "^3.0.2",
+    "@push.rocks/smartfile": "^11.0.21",
+    "@push.rocks/smartguard": "^3.1.0",
     "@push.rocks/smartjson": "^5.0.19",
-    "@push.rocks/smartjwt": "^2.0.4",
+    "@push.rocks/smartjwt": "^2.2.1",
     "@push.rocks/smartlog": "^3.0.7",
     "@push.rocks/smartlog-destination-clickhouse": "^1.0.13",
+    "@push.rocks/smartlog-interfaces": "^3.0.2",
     "@push.rocks/smartpath": "^5.0.18",
-    "@push.rocks/smartpromise": "^4.0.3",
+    "@push.rocks/smartpromise": "^4.0.4",
     "@push.rocks/smartrequest": "^2.0.22",
     "@push.rocks/smartrx": "^3.0.7",
     "@push.rocks/smartssh": "^2.0.1",
-    "@push.rocks/smartstate": "^2.0.17",
+    "@push.rocks/smartstate": "^2.0.19",
-    "@push.rocks/smartstream": "^3.0.44",
+    "@push.rocks/smartstream": "^3.2.4",
     "@push.rocks/smartstring": "^4.0.15",
     "@push.rocks/smartunique": "^3.0.9",
     "@push.rocks/taskbuffer": "^3.0.2",
     "@push.rocks/webjwt": "^1.0.9",
-    "@serve.zone/interfaces": "^1.0.74",
+    "@tsclass/tsclass": "^4.1.2"
-    "@tsclass/tsclass": "^4.0.60"
   },
   "files": [
     "ts/**/*",
@@ -96,18 +99,18 @@
   "homepage": "https://gitlab.com/servezone/private/cloudly#readme",
   "keywords": [
     "cloud management",
-    "multi-cloud",
+    "multi-cloud management",
     "Docker Swarmkit",
+    "container orchestration",
+    "cloud services",
     "DigitalOcean",
     "Hetzner Cloud",
     "Cloudflare",
-    "container orchestration",
     "configuration management",
     "SSL management",
     "API integration",
     "TypeScript",
     "node.js",
-    "cloud integration",
     "infrastructure automation",
     "devOps",
     "cloud API client",
@@ -117,7 +120,7 @@
     "task scheduling",
     "frontend",
     "backend",
-    "cli",
+    "CLI",
     "web interface",
     "cloud providers",
     "security",

readme.hints.md

@@ -8,3 +8,4 @@
   `code.foss.global/serve.zone/cloudly:latest`
 
 - Note: the exports are defined in the package.json.
+- For now, cloud wise only the setup with cloudron and hetzner cloud is supported.

readme.md

@@ -1,6 +1,6 @@
 # @serve.zone/cloudly
 
-A comprehensive multi-cloud manager leveraging Docker Swarmkit for orchestrating containerized applications and integrating various cloud services like DigitalOcean, Hetzner Cloud, and Cloudflare, with robust configuration and API management capabilities.
+A comprehensive multi-cloud manager leveraging Docker Swarmkit to orchestrate containerized applications across various cloud services and integrate robust configuration and API management capabilities.
 
 ## Install
 

test/helpers/cloudlyfactory.ts

@@ -0,0 +1,27 @@
+import { Qenv } from '@push.rocks/qenv';
+const testQenv = new Qenv('./', './.nogit/');
+
+import * as cloudly from '../../ts/index.js';
+
+export const createCloudly = async () => {
+  const cloudlyConfig: cloudly.ICloudlyConfig = {
+    cfToken: await testQenv.getEnvVarOnDemand('CF_TOKEN'),
+    environment: 'integration',
+    letsEncryptEmail: await testQenv.getEnvVarOnDemand('LETSENCRYPT_EMAIL'),
+    publicUrl: await testQenv.getEnvVarOnDemand('SERVEZONE_URL'),
+    publicPort: await testQenv.getEnvVarOnDemand('SERVEZONE_PORT'),
+    mongoDescriptor: {
+      mongoDbName: await testQenv.getEnvVarOnDemand('MONGODB_DATABASE'),
+      mongoDbUser: await testQenv.getEnvVarOnDemand('MONGODB_USER'),
+      mongoDbPass: await testQenv.getEnvVarOnDemand('MONGODB_PASSWORD'),
+      mongoDbUrl: await testQenv.getEnvVarOnDemand('MONGODB_URL'),
+    },
+  };
+  const cloudlyInstance = new cloudly.Cloudly();
+  return cloudlyInstance;
+}
+
+export const getEnvVarOnDemand = async (envVarName: string) => {
+  return testQenv.getEnvVarOnDemand(envVarName);
+} 
+

test/helpers/docker.ts

@@ -0,0 +1,9 @@
+import * as smartstream from '@push.rocks/smartstream';
+import * as smartpath from '@push.rocks/smartpath';
+
+export const getAlpineImageReadableStream = async () => {
+  const currentDir = smartpath.get.dirnameFromImportMetaUrl(import.meta.url);
+  const imagePath = smartpath.join(currentDir, '../../.nogit/testfiles/alpine.tar');
+  const readableStream = smartstream.nodewebhelpers.createWebReadableStreamFromFile(imagePath);
+  return readableStream;
+}

test/helpers/index.ts

@@ -0,0 +1,2 @@
+export * from './cloudlyfactory.js';
+export * from './docker.js';

test/test.apiclient.ts

@@ -1,24 +1,80 @@
 import { tap, expect } from '@push.rocks/tapbundle';
+import * as helpers from './helpers/index.js';
 
+import * as cloudly from '../ts/index.js';
 import * as cloudlyApiClient from '../ts_apiclient/index.js';
+import { Image } from '../ts_apiclient/classes.image.js';
 
+let testCloudly: cloudly.Cloudly;
 let testClient: cloudlyApiClient.CloudlyApiClient;
 
+tap.preTask('should start cloudly', async () => {
+  testCloudly = await helpers.createCloudly();
+  await testCloudly.start();
+});
+
+tap.preTask('should create a new machine user for testing', async () => {
+  const machineUser = new testCloudly.authManager.CUser();
+  machineUser.id = await testCloudly.authManager.CUser.getNewId();
+  machineUser.data = {
+    type: 'machine',
+    username: 'test',
+    password: 'test',
+    tokens: [{
+      token: 'test',
+      expiresAt: Date.now() + 3600 * 1000 * 24 * 365,
+      assignedRoles: ['admin'],
+    }],
+    role: 'admin',
+  };
+  await machineUser.save();
+});
+
 tap.test('should create a new cloudlyApiClient', async () => {
   testClient = new cloudlyApiClient.CloudlyApiClient({
     registerAs: 'api',
-    cloudlyUrl: 'http://localhost:3000',
+    cloudlyUrl: `http://localhost:${await helpers.getEnvVarOnDemand('SERVEZONE_PORT')}`,
   });
   await testClient.start();
   expect(testClient).toBeTruthy();
 });
 
-tap.test('should trigger a server action', async () => {
+tap.test('create a new machine user', async () => {
-  
+  const machineUser = await testCloudly.authManager.CUser.createMachineUser('test', 'api');
+  machineUser.data.tokens.push({
+    token: 'test',
+    expiresAt: Date.now() + 3600 * 1000 * 24 * 365,
+    assignedRoles: ['api'],
+  })
+  await machineUser.save();
 })
 
-tap.test('should stop the apiclient', async () => {
+tap.test('should get an identity', async () => {
+  const identity = await testClient.getIdentityByToken('test');
+  expect(identity).toBeTruthy();
+  console.log(identity);
+});
+
+let image: Image;
+tap.test('should create and upload an image', async () => {
+  image = await testClient.images.createImage({
+    name: 'test',
+    description: 'test'
+  });
+  console.log('created image: ', image);
+  expect(image).toBeInstanceOf(Image);
+})
+
+tap.test('should upload an image version', async () => {
+  const imageStream = await helpers.getAlpineImageReadableStream();
+
+  await image.pushImageVersion('v1.0.0', imageStream);
+});
+
+tap.test('should stop the apiclient', async (toolsArg) => {
+  await toolsArg.delayFor(10000);
   await testClient.stop();
+  await testCloudly.stop();
 })
 
 export default tap.start();

test/test.ts

@@ -1,28 +1,11 @@
 import { expect, tap } from '@push.rocks/tapbundle';
-import { Qenv } from '@push.rocks/qenv';
+import * as helpers from './helpers/index.js';
-const testQenv = new Qenv('./', './.nogit/');
-process.env.TESTING_CLOUDLY = 'true';
-
-delete process.env.CLI_CALL;
 
 import * as cloudly from '../ts/index.js';
 
 let testCloudly: cloudly.Cloudly;
 tap.test('first test', async () => {
-  const cloudlyConfig: cloudly.ICloudlyConfig = {
+  testCloudly = await helpers.createCloudly();
-    cfToken: await testQenv.getEnvVarOnDemand('CF_TOKEN'),
-    environment: 'integration',
-    letsEncryptEmail: await testQenv.getEnvVarOnDemand('LETSENCRYPT_EMAIL'),
-    publicUrl: await testQenv.getEnvVarOnDemand('SERVEZONE_URL'),
-    publicPort: await testQenv.getEnvVarOnDemand('SERVEZONE_PORT'),
-    mongoDescriptor: {
-      mongoDbName: await testQenv.getEnvVarOnDemand('MONGODB_DATABASE'),
-      mongoDbUser: await testQenv.getEnvVarOnDemand('MONGODB_USER'),
-      mongoDbPass: await testQenv.getEnvVarOnDemand('MONGODB_PASSWORD'),
-      mongoDbUrl: await testQenv.getEnvVarOnDemand('MONGODB_URL'),
-    },
-  };
-  testCloudly = new cloudly.Cloudly();
   expect(testCloudly).toBeInstanceOf(cloudly.Cloudly);
 });
 

ts/00_commitinfo_data.ts

@@ -1,8 +1,8 @@
 /**
- * autocreated commitinfo by @pushrocks/commitinfo
+ * autocreated commitinfo by @push.rocks/commitinfo
  */
 export const commitinfo = {
   name: '@serve.zone/cloudly',
-  version: '1.1.5',
+  version: '1.2.5',
-  description: 'A comprehensive multi-cloud manager leveraging Docker Swarmkit to orchestrate containerized applications across various cloud services and integrate robust configuration and API management capabilities.'
+  description: 'A comprehensive multi-cloud manager leveraging Docker Swarmkit to orchestrate containerized applications across various cloud services and provide robust configuration and API integration.'
 }

ts/00demo/demo.data.users.ts

@@ -9,6 +9,7 @@ export const getUsers = async (cloudlyRef: Cloudly) => {
     users.push({
       id: 'envadmin',
       data: {
+        type: 'human',
         username: envAdminUser.split(':')[0],
         password: envAdminUser.split(':')[1],
         role: 'admin',

ts/classes.cloudly.ts

@@ -17,7 +17,7 @@ import { MongodbConnector } from './connector.mongodb/connector.js';
 import { CloudlyCoreflowManager } from './manager.coreflow/coreflowmanager.js';
 import { ClusterManager } from './manager.cluster/classes.clustermanager.js';
 import { CloudlyTaskmanager } from './manager.task/taskmanager.js';
-import { CloudlySecretManager } from './manager.secret/classes.secretmanager.js'
+import { CloudlySecretManager } from './manager.secret/classes.secretmanager.js';
 import { CloudlyServerManager } from './manager.server/classes.servermanager.js';
 import { ExternalApiManager } from './manager.status/statusmanager.js';
 import { ImageManager } from './manager.image/classes.imagemanager.js';

ts/classes.config.ts

@@ -9,15 +9,16 @@ import type { Cloudly } from './classes.cloudly.js';
 export class CloudlyConfig {
   public cloudlyRef: Cloudly;
   public appData: plugins.npmextra.AppData<plugins.servezoneInterfaces.data.ICloudlyConfig>;
-  public data: plugins.servezoneInterfaces.data.ICloudlyConfig
+  public data: plugins.servezoneInterfaces.data.ICloudlyConfig;
-
 
   constructor(cloudlyRefArg: Cloudly) {
     this.cloudlyRef = cloudlyRefArg;
   }
 
   public async init() {
-    this.appData = await plugins.npmextra.AppData.createAndInit<plugins.servezoneInterfaces.data.ICloudlyConfig>({
+    this.appData =
+      await plugins.npmextra.AppData.createAndInit<plugins.servezoneInterfaces.data.ICloudlyConfig>(
+        {
           envMapping: {
             cfToken: 'CF_TOKEN',
             environment: 'SERVEZONE_ENVIRONMENT' as 'production' | 'integration',
@@ -39,7 +40,8 @@ export class CloudlyConfig {
               port: 'S3_PORT', // Note: This will remain as a string. Ensure to parse it to an integer where it's used.
               useSsl: true,
             },
-        sslMode: 'SERVEZONE_SSLMODE' as plugins.servezoneInterfaces.data.ICloudlyConfig['sslMode'],
+            sslMode:
+              'SERVEZONE_SSLMODE' as plugins.servezoneInterfaces.data.ICloudlyConfig['sslMode'],
             servezoneAdminaccount: 'SERVEZONE_ADMINACCOUNT',
           },
           requiredKeys: [
@@ -52,7 +54,8 @@ export class CloudlyConfig {
             'environment',
             'mongoDescriptor',
           ],
-    });
+        },
+      );
 
     const kvStore = await this.appData.getKvStore();
 

ts/classes.server.ts

@@ -45,16 +45,16 @@ export class CloudlyServer {
       logger.log('info', `Using letsencrypt for ssl mode. Trying to obtain a certificate...`);
       logger.log('info', `This might take 10 minutes...`);
       sslCert = await this.cloudlyRef.letsencryptConnector.getCertificateForDomain(
-        this.cloudlyRef.config.data.publicUrl
+        this.cloudlyRef.config.data.publicUrl,
       );
       logger.log(
         'success',
-        `Successfully obtained certificate for cloudly domain ${this.cloudlyRef.config.data.publicUrl}`
+        `Successfully obtained certificate for cloudly domain ${this.cloudlyRef.config.data.publicUrl}`,
       );
     } else if (this.cloudlyRef.config.data.sslMode === 'external') {
       logger.log(
         'info',
-        `Using external certificate for ssl mode, meaning cloudly is not in charge of ssl termination.`
+        `Using external certificate for ssl mode, meaning cloudly is not in charge of ssl termination.`,
       );
     }
 
@@ -95,7 +95,7 @@ export class CloudlyServer {
     this.typedServer.typedrouter.addTypedRouter(this.typedrouter);
     this.typedServer.server.addRoute(
       '/curlfresh/:scriptname',
-      this.cloudlyRef.serverManager.curlfreshInstance.handler
+      this.cloudlyRef.serverManager.curlfreshInstance.handler,
     );
     await this.typedServer.start();
   }

ts/connector.letsencrypt/connector.ts

@@ -24,19 +24,19 @@ export class LetsencryptConnector {
       environment: this.cloudlyRef.config.data.environment,
       setChallenge: async (dnsChallenge) => {
         await this.cloudlyRef.cloudflareConnector.cloudflare.convenience.acmeSetDnsChallenge(
-          dnsChallenge
+          dnsChallenge,
         );
       },
       removeChallenge: async (dnsChallenge) => {
         await this.cloudlyRef.cloudflareConnector.cloudflare.convenience.acmeRemoveDnsChallenge(
-          dnsChallenge
+          dnsChallenge,
         );
       },
       mongoDescriptor: this.cloudlyRef.config.data.mongoDescriptor,
     });
-    await this.smartacme.init().catch(err => {
+    await this.smartacme.start().catch((err) => {
       console.error('error in init', err);
-      console.log(`trying again in a few minutes`)
+      console.log(`trying again in a few minutes`);
     });
   }
 

ts/connector.mongodb/connector.ts

@@ -11,7 +11,9 @@ export class MongodbConnector {
   }
 
   public async init() {
-    this.smartdataDb = new plugins.smartdata.SmartdataDb(this.cloudlyRef.config.data.mongoDescriptor);
+    this.smartdataDb = new plugins.smartdata.SmartdataDb(
+      this.cloudlyRef.config.data.mongoDescriptor,
+    );
     await this.smartdataDb.init();
   }
 

ts/index.ts

@@ -7,7 +7,6 @@ import { logger } from './logger.js';
 const cloudlyQenv = new plugins.qenv.Qenv(paths.packageDir, paths.nogitDir, true);
 early.stop();
 
-
 /**
  * starts the cloudly instance
  */
@@ -17,7 +16,7 @@ const runCli = async () => {
 
   logger.log(
     'info',
-    `running in environment ${await cloudlyQenv.getEnvVarOnDemand('SERVEZONE_ENVIRONMENT')}`
+    `running in environment ${await cloudlyQenv.getEnvVarOnDemand('SERVEZONE_ENVIRONMENT')}`,
   );
 
   await cloudlyInstance.start();
@@ -27,4 +26,4 @@ const runCli = async () => {
 
 export { runCli, Cloudly };
 type ICloudlyConfig = plugins.servezoneInterfaces.data.ICloudlyConfig;
-export { type ICloudlyConfig }
+export { type ICloudlyConfig };

ts/logger.ts

@@ -9,8 +9,8 @@ export const logger = new plugins.smartlog.Smartlog({
     zone: null,
     companyunit: null,
     containerName: null,
-  }
+  },
 });
 logger.enableConsole({
-  captureAll: false
+  captureAll: false,
 });

ts/manager.auth/classes.authmanager.ts

@@ -5,14 +5,14 @@ import { logger } from '../logger.js';
 import { Authorization } from './classes.authorization.js';
 import { User } from './classes.user.js';
 
-
 export interface IJwtData {
   userId: string;
   status: 'loggedIn' | 'loggedOut';
+  expiresAt: number;
 }
 
 export class CloudlyAuthManager {
-  cloudlyRef: Cloudly
+  cloudlyRef: Cloudly;
   public get db() {
     return this.cloudlyRef.mongodbConnector.smartdataDb;
   }
@@ -27,18 +27,24 @@ export class CloudlyAuthManager {
     this.cloudlyRef.typedrouter.addTypedRouter(this.typedrouter);
   }
 
+  public async createNewSecureToken() {
+    return plugins.smartunique.uniSimple('secureToken', 64);
+  }
+
   public async start() {
     // lets setup the smartjwtInstance
     this.smartjwtInstance = new plugins.smartjwt.SmartJwt();
     await this.smartjwtInstance.init();
     const kvStore = await this.cloudlyRef.config.appData.getKvStore();
 
-    const existingJwtKeys: plugins.tsclass.network.IJwtKeypair = await kvStore.readKey('jwtKeys');
+    const existingJwtKeys: plugins.tsclass.network.IJwtKeypair = (await kvStore.readKey(
+      'jwtKeypair',
+    )) as plugins.tsclass.network.IJwtKeypair;
 
     if (!existingJwtKeys) {
       await this.smartjwtInstance.createNewKeyPair();
       const newJwtKeys = this.smartjwtInstance.getKeyPairAsJson();
-      await kvStore.writeKey('jwtKeys', newJwtKeys);
+      await kvStore.writeKey('jwtKeypair', newJwtKeys);
     } else {
       this.smartjwtInstance.setKeyPairAsJson(existingJwtKeys);
     }
@@ -48,34 +54,84 @@ export class CloudlyAuthManager {
         'adminLoginWithUsernameAndPassword',
         async (dataArg) => {
           let jwt: string;
+          let expiresAtTimestamp: number = Date.now() + 3600 * 1000 * 24 * 7;
           const user = await User.findUserByUsernameAndPassword(dataArg.username, dataArg.password);
           if (!user) {
             logger.log('warn', 'login failed');
+            throw new plugins.typedrequest.TypedResponseError('login failed');
           } else {
             jwt = await this.smartjwtInstance.createJWT({
               userId: user.id,
               status: 'loggedIn',
+              expiresAt: expiresAtTimestamp,
             });
             logger.log('success', 'login successful');
           }
           return {
+            identity: {
               jwt,
+              userId: user.id,
+              name: user.data.username,
+              expiresAt: expiresAtTimestamp,
+              role: user.data.role,
+              type: user.data.type,
+            },
           };
-        }
+        },
-      )
+      ),
     );
   }
 
-  public async stop () {}
+  public async stop() {}
 
-  public adminJwtGuard = new plugins.smartguard.Guard<{jwt: string}>(async (dataArg) => {
+  public validIdentityGuard = new plugins.smartguard.Guard<{
-    const jwt = dataArg.jwt;
+    identity: plugins.servezoneInterfaces.data.IIdentity;
+  }>(
+    async (dataArg) => {
+      const jwt = dataArg.identity.jwt;
       const jwtData: IJwtData = await this.smartjwtInstance.verifyJWTAndGetData(jwt);
-    const user = await this.CUser.getInstance({id: jwtData.userId});
+      const expired = jwtData.expiresAt < Date.now();
+      plugins.smartexpect
+        .expect(jwtData.status)
+        .setFailMessage('user not logged in')
+        .toEqual('loggedIn');
+      plugins.smartexpect.expect(expired).setFailMessage(`jwt expired`).toBeFalse();
+      plugins.smartexpect
+        .expect(dataArg.identity.expiresAt)
+        .setFailMessage(
+          `expiresAt >>identity valid until:${dataArg.identity.expiresAt}, but jwt says: ${jwtData.expiresAt}<< has been tampered with`,
+        )
+        .toEqual(jwtData.expiresAt);
+      plugins.smartexpect
+        .expect(dataArg.identity.userId)
+        .setFailMessage('userId has been tampered with')
+        .toEqual(jwtData.userId);
+      if (expired) {
+        throw new Error('identity is expired');
+      }
+      return true;
+    },
+    {
+      failedHint: 'identity is not valid.',
+      name: 'validIdentityGuard',
+    },
+  );
+
+  public adminIdentityGuard = new plugins.smartguard.Guard<{
+    identity: plugins.servezoneInterfaces.data.IIdentity;
+  }>(
+    async (dataArg) => {
+      await plugins.smartguard.passGuardsOrReject(dataArg, [this.validIdentityGuard]);
+      const jwt = dataArg.identity.jwt;
+      const jwtData: IJwtData = await this.smartjwtInstance.verifyJWTAndGetData(jwt);
+      const user = await this.CUser.getInstance({ id: jwtData.userId });
       const isAdminBool = user.data.role === 'admin';
       console.log(`user is admin: ${isAdminBool}`);
       return isAdminBool;
-  }, {
+    },
-    failedHint: 'user is not admin.'
+    {
-  })
+      failedHint: 'user is not admin.',
+      name: 'adminIdentityGuard',
+    },
+  );
 }

ts/manager.auth/classes.authorization.ts

@@ -1,6 +1,4 @@
 import * as plugins from '../plugins.js';
 
 @plugins.smartdata.managed()
-export class Authorization extends plugins.smartdata.SmartDataDbDoc<Authorization, Authorization> {
+export class Authorization extends plugins.smartdata.SmartDataDbDoc<Authorization, Authorization> {}
-
-}

ts/manager.auth/classes.user.ts

@@ -5,6 +5,28 @@ export class User extends plugins.smartdata.SmartDataDbDoc<
   User,
   plugins.servezoneInterfaces.data.IUser
 > {
+  /**
+   * creates a machine user
+   */
+  public static async createMachineUser(userNameArg: string, roleArg: 'api' | 'cluster') {
+    const user = new User();
+    user.id = await User.getNewId();
+    user.data = {
+      type: 'machine',
+      username: userNameArg,
+      tokens: [
+        {
+          token: 'machineUser',
+          expiresAt: Date.now() + 3600 * 1000 * 24 * 365,
+          assignedRoles: ['admin'],
+        },
+      ],
+      role: 'api',
+    };
+    await user.save();
+    return user;
+  }
+
   public static async findUserByUsernameAndPassword(usernameArg: string, passwordArg: string) {
     return await User.getInstance({
       data: {
@@ -14,14 +36,17 @@ export class User extends plugins.smartdata.SmartDataDbDoc<
     });
   }
 
+  constructor(optionsArg?: plugins.servezoneInterfaces.data.IUser) {
+    super();
+    if (optionsArg) {
+      Object.assign(this, optionsArg);
+    }
+  }
+
   // INSTANCE
   @plugins.smartdata.unI()
   public id: string;
 
   @plugins.smartdata.svDb()
-  public data: {
+  public data: plugins.servezoneInterfaces.data.IUser['data'];
-    role: 'admin' | 'user';
-    username: string;
-    password: string;
-  };
 }

ts/manager.cert/cert.ts

@@ -1,5 +1,3 @@
 import * as plugins from '../plugins.js';
 
-export class Cert extends plugins.smartdata.SmartDataDbDoc<> {
+export class Cert extends plugins.smartdata.SmartDataDbDoc<Cert, Cert> {}
-
-}

ts/manager.cluster/classes.cluster.ts

@@ -4,11 +4,12 @@ import * as plugins from '../plugins.js';
  * cluster defines a swarmkit cluster
  */
 @plugins.smartdata.managed()
-export class Cluster extends plugins.smartdata.SmartDataDbDoc<Cluster, plugins.servezoneInterfaces.data.ICluster> {
+export class Cluster extends plugins.smartdata.SmartDataDbDoc<
+  Cluster,
+  plugins.servezoneInterfaces.data.ICluster
+> {
   // STATIC
-  public static async fromConfigObject(
+  public static async fromConfigObject(configObjectArg: plugins.servezoneInterfaces.data.ICluster) {
-    configObjectArg: plugins.servezoneInterfaces.data.ICluster
-  ) {
     const newCluster = new Cluster();
     Object.assign(newCluster, configObjectArg);
     return newCluster;

ts/manager.cluster/classes.clustermanager.ts

@@ -4,6 +4,7 @@ import { Cloudly } from '../classes.cloudly.js';
 import { logger } from '../logger.js';
 
 import { Cluster } from './classes.cluster.js';
+import { data } from '@serve.zone/interfaces';
 
 export class ClusterManager {
   public ready = plugins.smartpromise.defer();
@@ -22,12 +23,12 @@ export class ClusterManager {
 
     this.typedrouter.addTypedHandler<plugins.servezoneInterfaces.requests.cluster.IRequest_CreateCluster>(
       new plugins.typedrequest.TypedHandler('createCluster', async (dataArg) => {
-        const cluster = await this.storeCluster({
+        // TODO: guards
+        const cluster = await this.createCluster({
           id: plugins.smartunique.uniSimple('cluster'),
           data: {
+            userId: null, // this is created by the createCluster method
             name: dataArg.clusterName,
-            jumpCode: plugins.smartunique.uniSimple('cluster'),
-            jumpCodeUsedAt: null,
             acmeInfo: null,
             cloudlyUrl: `https://${this.cloudlyRef.config.data.publicUrl}:${this.cloudlyRef.config.data.publicPort}/`,
             servers: [],
@@ -39,7 +40,7 @@ export class ClusterManager {
         return {
           clusterConfig: await cluster.createSavableObject(),
         };
-      })
+      }),
     );
 
     this.typedrouter.addTypedHandler<plugins.servezoneInterfaces.requests.cluster.IRequest_GetAllClusters>(
@@ -48,21 +49,21 @@ export class ClusterManager {
         const clusters = await this.getAllClusters();
         return {
           clusters: await Promise.all(
-            clusters.map((clusterArg) => clusterArg.createSavableObject())
+            clusters.map((clusterArg) => clusterArg.createSavableObject()),
           ),
         };
-      })
+      }),
     );
 
     // delete cluster
     this.typedrouter.addTypedHandler<plugins.servezoneInterfaces.requests.cluster.IRequest_DeleteCluster>(
       new plugins.typedrequest.TypedHandler('deleteCluster', async (reqDataArg, toolsArg) => {
-        await toolsArg.passGuards([this.cloudlyRef.authManager.adminJwtGuard], reqDataArg);
+        await toolsArg.passGuards([this.cloudlyRef.authManager.adminIdentityGuard], reqDataArg);
         await this.deleteCluster(reqDataArg.clusterId);
         return {
           success: true,
         };
-      })
+      }),
     );
   }
 
@@ -80,25 +81,22 @@ export class ClusterManager {
     // TODO: implement getclusterConfigByServerIp
   }
 
-  public async getClusterConfigBy_JumpCode(jumpCodeArg: string) {
+  public async getClusterBy_UserId(userIdArg: string) {
     await this.ready.promise;
 
     return await Cluster.getInstance({
       data: {
-        jumpCode: jumpCodeArg,
+        userId: userIdArg,
       },
     });
   }
 
-  public async getClusterConfigBy_ClusterIdentifier(
+  public async getClusterBy_Identity(clusterIdentity: plugins.servezoneInterfaces.data.IIdentity) {
-    clusterIdentifier: plugins.servezoneInterfaces.data.IClusterIdentifier
-  ) {
     await this.ready.promise;
 
     return await Cluster.getInstance({
-      id: clusterIdentifier.clusterId,
       data: {
-        name: clusterIdentifier.clusterName,
+        userId: clusterIdentity.userId,
       },
     });
   }
@@ -124,17 +122,32 @@ export class ClusterManager {
   }
 
   /**
-   * allows storage of a config
+   * creates a cluster (and a new user for it) and saves it
    * @param configName
    * @param configObjectArg
    */
-  public async storeCluster(configObjectArg: plugins.servezoneInterfaces.data.ICluster) {
+  public async createCluster(configObjectArg: plugins.servezoneInterfaces.data.ICluster) {
-    let clusterInstance = await Cluster.getInstance({ id: configObjectArg.id });
+    // TODO: guards
-    if (!clusterInstance) {
+    // lets create the cluster user
-      clusterInstance = await Cluster.fromConfigObject(configObjectArg);
+    const clusterUser = new this.cloudlyRef.authManager.CUser({
-    } else {
+      id: await this.cloudlyRef.authManager.CUser.getNewId(),
-      Object.assign(clusterInstance, configObjectArg);
+      data: {
-    }
+        role: 'cluster',
+        type: 'machine',
+        tokens: [
+          {
+            expiresAt: Date.now() + 3600 * 1000 * 24 * 365,
+            assignedRoles: ['cluster'],
+            token: await this.cloudlyRef.authManager.createNewSecureToken(),
+          },
+        ],
+      },
+    });
+    await clusterUser.save();
+    Object.assign(configObjectArg, {
+      userId: clusterUser.id,
+    });
+    const clusterInstance = await Cluster.fromConfigObject(configObjectArg);
     await clusterInstance.save();
     return clusterInstance;
   }

ts/manager.coreflow/coreflowmanager.ts

@@ -1,5 +1,6 @@
 import * as plugins from '../plugins.js';
 import { Cloudly } from '../classes.cloudly.js';
+import type { Cluster } from '../manager.cluster/classes.cluster.js';
 
 /**
  * in charge of talking to coreflow services on clusters
@@ -13,28 +14,54 @@ export class CloudlyCoreflowManager {
     this.cloudlyRef = cloudlyRefArg;
     this.cloudlyRef.typedrouter.addTypedRouter(this.typedRouter);
 
-    this.typedRouter.addTypedHandler<plugins.servezoneInterfaces.requests.identity.IRequest_Any_Cloudly_CoreflowManager_GetIdentityByJumpCode>(
+    this.typedRouter.addTypedHandler<plugins.servezoneInterfaces.requests.identity.IRequest_Any_Cloudly_CoreflowManager_GetIdentityByToken>(
-      new plugins.typedrequest.TypedHandler('getIdentityByJumpCode', async (requestData) => {
+      new plugins.typedrequest.TypedHandler('getIdentityByToken', async (requestData) => {
-        const clusterConfig =
+        const user = await this.cloudlyRef.authManager.CUser.getInstance({
-          await this.cloudlyRef.clusterManager.getClusterConfigBy_JumpCode(
+          data: {
-            requestData.jumpCode
+            tokens: [
+              {
+                token: requestData.token,
+              },
+            ], // find the proper user here.
+          } as any,
+        });
+
+        if (!user) {
+          throw new plugins.typedrequest.TypedResponseError(
+            'The supplied token is not valid. No matching user found.',
           );
-
-        if (!clusterConfig) {
-          throw new plugins.typedrequest.TypedResponseError('The supplied jumpCode is not valid.');
         }
-
+        if (user.data.type !== 'machine') {
+          throw new plugins.typedrequest.TypedResponseError(
+            'The supplied token is not valid. The user is not a machine.',
+          );
+        }
+        let cluster: Cluster;
+        if (user.data.role === 'cluster') {
+          cluster = await this.cloudlyRef.clusterManager.getClusterBy_UserId(user.id);
+        }
+        const expiryTimestamp = Date.now() + 3600 * 1000 * 24 * 365;
         return {
-          clusterIdentifier: {
+          identity: {
-            clusterId: clusterConfig.id,
+            name: user.data.username,
-            clusterName: clusterConfig.data.name,
+            role: user.data.role,
+            type: 'machine', // if someone authenticates by token, they are a machine, no matter what.
+            userId: user.id,
+            expiresAt: expiryTimestamp,
+            ...(cluster
+              ? {
+                  clusterId: cluster.id,
+                  clusterName: cluster.data.name,
+                }
+              : {}),
             jwt: await this.cloudlyRef.authManager.smartjwtInstance.createJWT({
               status: 'loggedIn',
-              userId: 'cluster:' + clusterConfig.id,  // TODO: create real users for clusters
+              userId: user.id,
-            })
+              expiresAt: expiryTimestamp,
+            }),
           },
         };
-      })
+      }),
     );
 
     // lets enable the getting of cluster configs
@@ -42,37 +69,34 @@ export class CloudlyCoreflowManager {
       new plugins.typedrequest.TypedHandler<plugins.servezoneInterfaces.requests.config.IRequest_Any_Cloudly_GetClusterConfig>(
         'getClusterConfig',
         async (dataArg) => {
-          const clusterIdentifier = dataArg.clusterIdentifier;
+          const identity = dataArg.identity;
           console.log('trying to get clusterConfigSet');
           console.log(dataArg);
-          const clusterConfigSet =
+          const cluster = await this.cloudlyRef.clusterManager.getClusterBy_Identity(identity);
-            await this.cloudlyRef.clusterManager.getClusterConfigBy_ClusterIdentifier(
-              clusterIdentifier
-            );
           console.log('got cluster config and sending it back to coreflow');
           return {
-            configData: await clusterConfigSet.createSavableObject(),
+            configData: await cluster.createSavableObject(),
             deploymentDirectives: [],
           };
-        }
+        },
-      )
+      ),
     );
 
     // lets enable getting of certificates
     this.typedRouter.addTypedHandler(
-      new plugins.typedrequest.TypedHandler<plugins.servezoneInterfaces.requests.certificate.IRequest_Any_Cloudly_GetSslCertificate>(
+      new plugins.typedrequest.TypedHandler<plugins.servezoneInterfaces.requests.certificate.IRequest_Any_Cloudly_GetCertificateForDomain>(
-        'getSslCertificate',
+        'getCertificateForDomain',
         async (dataArg) => {
-          console.log(`got request for certificate ${dataArg.requiredCertName}`);
+          console.log(`incoming API request for certificate ${dataArg.domainName}`);
           const cert = await this.cloudlyRef.letsencryptConnector.getCertificateForDomain(
-            dataArg.requiredCertName
+            dataArg.domainName,
           );
-          console.log(`got certificate ready for reponse ${dataArg.requiredCertName}`);
+          console.log(`got certificate ready for reponse ${dataArg.domainName}`);
           return {
             certificate: await cert.createSavableObject(),
           };
-        }
+        },
-      )
+      ),
     );
   }
 }

ts/manager.image/classes.image.ts

@@ -2,8 +2,14 @@ import * as plugins from '../plugins.js';
 import type { ImageManager } from './classes.imagemanager.js';
 
 @plugins.smartdata.managed()
-export class Image extends plugins.smartdata.SmartDataDbDoc<Image, plugins.servezoneInterfaces.data.IImage, ImageManager> {
+export class Image extends plugins.smartdata.SmartDataDbDoc<
-  public static async create(imageDataArg: Partial<plugins.servezoneInterfaces.data.IImage['data']>) {
+  Image,
+  plugins.servezoneInterfaces.data.IImage,
+  ImageManager
+> {
+  public static async create(
+    imageDataArg: Partial<plugins.servezoneInterfaces.data.IImage['data']>,
+  ) {
     const image = new Image();
     image.id = await this.getNewId();
     console.log(imageDataArg);
@@ -14,7 +20,7 @@ export class Image extends plugins.smartdata.SmartDataDbDoc<Image, plugins.serve
         versions: [],
       },
     });
-    console.log((Image as any).saveableProperties)
+    console.log((Image as any).saveableProperties);
     await image.save();
     return image;
   }
@@ -32,6 +38,10 @@ export class Image extends plugins.smartdata.SmartDataDbDoc<Image, plugins.serve
    * note: this is relative to the storage method defined by the imageManager
    */
   public async getStoragePath(versionStringArg: string) {
-    return `${this.data.name}:${versionStringArg}`.replace('/', '__')
+    return `${this.data.name}:${versionStringArg}`.replace('/', '__');
   }
+
+  public async getWriteStream() {}
+
+  public async getReadStream() {}
 }

ts/manager.image/classes.imagemanager.ts

@@ -1,5 +1,6 @@
 import type { Cloudly } from '../classes.cloudly.js';
 import * as plugins from '../plugins.js';
+import * as paths from '../paths.js';
 
 import { Image } from './classes.image.js';
 
@@ -16,7 +17,6 @@ export class ImageManager {
 
   public CImage = plugins.smartdata.setDefaultManagerForDoc(this, Image);
 
-
   constructor(cloudlyRefArg: Cloudly) {
     this.cloudlyRef = cloudlyRefArg;
 
@@ -26,7 +26,7 @@ export class ImageManager {
       new plugins.typedrequest.TypedHandler<plugins.servezoneInterfaces.requests.image.IRequest_CreateImage>(
         'createImage',
         async (reqArg, toolsArg) => {
-          await toolsArg.passGuards([this.cloudlyRef.authManager.adminJwtGuard], reqArg);
+          await toolsArg.passGuards([this.cloudlyRef.authManager.adminIdentityGuard], reqArg);
           const image = await this.CImage.create({
             name: reqArg.name,
             description: reqArg.description,
@@ -35,58 +35,92 @@ export class ImageManager {
           return {
             image: await image.createSavableObject(),
           };
-        }
+        },
-      )
+      ),
-    )
+    );
+
+    this.typedrouter.addTypedHandler<plugins.servezoneInterfaces.requests.image.IRequest_GetImage>(
+      new plugins.typedrequest.TypedHandler('getImage', async (reqArg, toolsArg) => {
+        await toolsArg.passGuards([this.cloudlyRef.authManager.adminIdentityGuard], reqArg);
+        const image = await this.CImage.getInstance({
+          id: reqArg.imageId,
+        });
+        return {
+          image: await image.createSavableObject(),
+        };
+      }),
+    );
 
     this.typedrouter.addTypedHandler(
       new plugins.typedrequest.TypedHandler<plugins.servezoneInterfaces.requests.image.IRequest_DeleteImage>(
         'deleteImage',
         async (reqArg, toolsArg) => {
-          await toolsArg.passGuards([this.cloudlyRef.authManager.adminJwtGuard], reqArg);
+          await toolsArg.passGuards([this.cloudlyRef.authManager.adminIdentityGuard], reqArg);
           const image = await this.CImage.getInstance({
             id: reqArg.imageId,
           });
           await image.delete();
           return {};
-        }
+        },
-      )
+      ),
     );
 
     this.typedrouter.addTypedHandler(
       new plugins.typedrequest.TypedHandler<plugins.servezoneInterfaces.requests.image.IRequest_GetAllImages>(
         'getAllImages',
         async (requestArg, toolsArg) => {
-          await toolsArg.passGuards([this.cloudlyRef.authManager.adminJwtGuard], requestArg);
+          await toolsArg.passGuards([this.cloudlyRef.authManager.adminIdentityGuard], requestArg);
           const images = await this.CImage.getInstances({});
           return {
             images: await Promise.all(
               images.map((image) => {
                 return image.createSavableObject();
-              })
+              }),
             ),
           };
-        }
+        },
-      )
+      ),
     );
 
     this.typedrouter.addTypedHandler(
       new plugins.typedrequest.TypedHandler<plugins.servezoneInterfaces.requests.image.IRequest_PushImageVersion>(
         'pushImageVersion',
         async (reqArg, toolsArg) => {
-          const image = await this.CImage.getInstance({
+          await plugins.smartguard.passGuardsOrReject(reqArg, [
+            this.cloudlyRef.authManager.validIdentityGuard,
+          ]);
+          const refImage = await this.CImage.getInstance({
             id: reqArg.imageId,
           });
-          if (!image) {
+          if (!refImage) {
             throw new plugins.typedrequest.TypedResponseError('Image not found');
           }
           const imageVersion = reqArg.versionString;
+          console.log(
+            `got request to push image version ${imageVersion} for image ${refImage.data.name}`,
+          );
           const imagePushStream = reqArg.imageStream;
+          (async () => {
+            const smartWebDuplex = new plugins.smartstream.webstream.WebDuplexStream<
+              Uint8Array,
+              Uint8Array
+            >({
+              writeFunction: async (chunkArg, toolsArg) => {
+                console.log(chunkArg);
+                return chunkArg;
+              },
+            });
+            imagePushStream.writeToWebstream(smartWebDuplex.writable);
+            await this.dockerImageStore.storeImage(
+              refImage.id,
+              plugins.smartstream.SmartDuplex.fromWebReadableStream(smartWebDuplex.readable),
+            );
+          })();
           return {
             allowed: true,
           };
-        }
+        },
-      )
+      ),
     );
 
     this.typedrouter.addTypedHandler(
@@ -96,31 +130,44 @@ export class ImageManager {
           const image = await this.CImage.getInstance({
             id: reqArg.imageId,
           });
-          const imageVersion = image.data.versions.find((version) => version.versionString === reqArg.versionString);
+          const imageVersion = image.data.versions.find(
-          const readable = this.imageDir.fastGetStream({
+            (version) => version.versionString === reqArg.versionString,
+          );
+          const readable = this.imageDir.fastGetStream(
+            {
               path: await image.getStoragePath(reqArg.versionString),
-          }, 'webstream');
+            },
+            'webstream',
+          );
           const imageVirtualStream = new plugins.typedrequest.VirtualStream();
           return {
             imageStream: imageVirtualStream,
           };
-        }
+        },
-      )
+      ),
     );
   }
 
   public async start() {
+    // lets setup s3
     const s3Descriptor: plugins.tsclass.storage.IS3Descriptor =
       await this.cloudlyRef.config.appData.waitForAndGetKey('s3Descriptor');
     console.log(this.cloudlyRef.config.data.s3Descriptor);
     this.smartbucketInstance = new plugins.smartbucket.SmartBucket(
-      this.cloudlyRef.config.data.s3Descriptor
+      this.cloudlyRef.config.data.s3Descriptor,
     );
     const bucket = await this.smartbucketInstance.getBucketByName('cloudly-test');
-    await bucket.fastPut({ path: 'test/test.txt', contents: 'hello' });
+    await bucket.fastPut({ path: 'images/00init', contents: 'init' });
 
     this.imageDir = await bucket.getDirectoryFromPath({
-      path: 'images',
+      path: '/images',
+    });
+
+    // lets setup dockerstore
+    await plugins.smartfile.fs.ensureDir(paths.dockerImageStoreDir);
+    this.dockerImageStore = new plugins.docker.DockerImageStore({
+      localDirPath: paths.dockerImageStoreDir,
+      bucketDir: this.imageDir,
     });
   }
 }

ts/manager.secret/classes.secretbundle.ts

@@ -23,7 +23,7 @@ export class SecretBundle extends plugins.smartdata.SmartDataDbDoc<
       secretGroups.push(
         await SecretGroup.getInstance({
           id: secretGroupId,
-        })
+        }),
       );
     }
     return secretGroups;

ts/manager.secret/classes.secretmanager.ts

@@ -39,24 +39,24 @@ export class CloudlySecretManager {
       new plugins.typedrequest.TypedHandler<plugins.servezoneInterfaces.requests.secret.IReq_Admin_GetConfigBundlesAndSecretGroups>(
         'adminGetConfigBundlesAndSecretGroups',
         async (dataArg, toolsArg) => {
-          await toolsArg.passGuards([this.cloudlyRef.authManager.adminJwtGuard], dataArg);
+          await toolsArg.passGuards([this.cloudlyRef.authManager.adminIdentityGuard], dataArg);
-          dataArg.jwt
+          dataArg.identity.jwt;
           const secretBundles = await SecretBundle.getInstances({});
           const secretGroups = await SecretGroup.getInstances({});
           return {
             secretBundles: [
               ...(await Promise.all(
-                secretBundles.map((configBundle) => configBundle.createSavableObject())
+                secretBundles.map((configBundle) => configBundle.createSavableObject()),
               )),
             ],
             secretGroups: [
               ...(await Promise.all(
-                secretGroups.map((secretGroup) => secretGroup.createSavableObject())
+                secretGroups.map((secretGroup) => secretGroup.createSavableObject()),
               )),
             ],
           };
-        }
+        },
-      )
+      ),
     );
 
     this.typedrouter.addTypedHandler<plugins.servezoneInterfaces.requests.secret.IReq_Admin_CreateConfigBundlesAndSecretGroups>(
@@ -72,8 +72,8 @@ export class CloudlySecretManager {
           return {
             ok: true,
           };
-        }
+        },
-      )
+      ),
     );
 
     this.typedrouter.addTypedHandler(
@@ -96,8 +96,8 @@ export class CloudlySecretManager {
           return {
             ok: true,
           };
-        }
+        },
-      )
+      ),
     );
 
     // lets add typedrouter routes for accessing the configvailt from apps
@@ -116,19 +116,19 @@ export class CloudlySecretManager {
             },
           });
           const authorization = await wantedBundle.getAuthorizationFromAuthKey(
-            dataArg.authorization
+            dataArg.authorization,
           );
           return {
             envBundle: {
               configKeyValueObject: await wantedBundle.getKeyValueObjectForEnvironment(
-                authorization.environment
+                authorization.environment,
               ),
               environment: authorization.environment,
               timeSensitive: false,
             },
           };
-        }
+        },
-      )
+      ),
     );
   }
 

ts/manager.server/classes.curlfresh.ts

@@ -5,7 +5,7 @@ import type { CloudlyServerManager } from './classes.servermanager.js';
 export class CurlFresh {
   public optionsArg = {
     npmRegistry: 'https://registry.npmjs.org',
-  }
+  };
   public scripts = {
     'setup.sh': `#!/bin/bash
 
@@ -50,7 +50,7 @@ bash -c "spark installdaemon"
   public handler = new plugins.typedserver.servertools.Handler('ALL', async (req, res) => {
     logger.log('info', 'curlfresh handler called. a server might be coming online soon :)');
     const scriptname = req.params.scriptname;
-    switch(scriptname) {
+    switch (scriptname) {
       case 'setup.sh':
         logger.log('info', 'sending setup.sh');
         res.type('application/x-sh');
@@ -66,7 +66,8 @@ bash -c "spark installdaemon"
     this.serverManagerRef = serverManagerRefArg;
   }
   public async getServerUserData(): Promise<string> {
-    const sslMode = await this.serverManagerRef.cloudlyRef.config.appData.waitForAndGetKey('sslMode');
+    const sslMode =
+      await this.serverManagerRef.cloudlyRef.config.appData.waitForAndGetKey('sslMode');
     let protocol: 'http' | 'https';
     if (sslMode === 'none') {
       protocol = 'http';
@@ -74,14 +75,16 @@ bash -c "spark installdaemon"
       protocol = 'https';
     }
 
-    const domain = await this.serverManagerRef.cloudlyRef.config.appData.waitForAndGetKey('publicUrl');
+    const domain =
-    const port = await this.serverManagerRef.cloudlyRef.config.appData.waitForAndGetKey('publicPort');
+      await this.serverManagerRef.cloudlyRef.config.appData.waitForAndGetKey('publicUrl');
+    const port =
+      await this.serverManagerRef.cloudlyRef.config.appData.waitForAndGetKey('publicPort');
 
     const serverUserData = `#cloud-config
   runcmd:
     - curl -o- ${protocol}://${domain}:${port}/curlfresh/setup.sh | sh
-  `
+  `;
     console.log(serverUserData);
     return serverUserData;
-  };
+  }
 }

ts/manager.server/classes.server.ts

@@ -4,10 +4,13 @@ import * as plugins from '../plugins.js';
  * cluster defines a swarmkit cluster
  */
 @plugins.smartdata.Manager()
-export class Server extends plugins.smartdata.SmartDataDbDoc<Server, plugins.servezoneInterfaces.data.IServer> {
+export class Server extends plugins.smartdata.SmartDataDbDoc<
+  Server,
+  plugins.servezoneInterfaces.data.IServer
+> {
   // STATIC
   public static async createFromHetznerServer(
-    hetznerServerArg: plugins.hetznercloud.HetznerServer
+    hetznerServerArg: plugins.hetznercloud.HetznerServer,
   ) {
     const newServer = new Server();
     newServer.id = plugins.smartunique.shortId(8);
@@ -16,7 +19,7 @@ export class Server extends plugins.smartdata.SmartDataDbDoc<Server, plugins.ser
       requiredDebianPackages: [],
       sshKeys: [],
       type: 'hetzner',
-    }
+    };
     Object.assign(newServer, { data });
     await newServer.save();
     return newServer;

ts/manager.server/classes.servermanager.ts

@@ -29,17 +29,19 @@ export class CloudlyServerManager {
           const serverId = requestData.serverId;
           const server = await this.CServer.getInstance({
             id: serverId,
-          })
+          });
           return {
             configData: await server.createSavableObject(),
           };
-        }
+        },
-      )
+      ),
     );
   }
 
   public async start() {
-    this.hetznerAccount = new plugins.hetznercloud.HetznerAccount(this.cloudlyRef.config.data.hetznerToken);
+    this.hetznerAccount = new plugins.hetznercloud.HetznerAccount(
+      this.cloudlyRef.config.data.hetznerToken,
+    );
   }
 
   public async stop() {}
@@ -66,16 +68,18 @@ export class CloudlyServerManager {
             clusterId: cluster.id,
             priority: '1',
           },
-          userData: await this.curlfreshInstance.getServerUserData()
+          userData: await this.curlfreshInstance.getServerUserData(),
         });
         const newServer = await Server.createFromHetznerServer(server);
         console.log(`cluster created new server for cluster ${cluster.id}`);
       } else {
-        console.log(`cluster ${cluster.id} already has servers. Making sure that they actually exist in the real world...`);
+        console.log(
+          `cluster ${cluster.id} already has servers. Making sure that they actually exist in the real world...`,
+        );
         // if there is a server, make sure that it exists
         for (const server of servers) {
           const hetznerServer = await this.hetznerAccount.getServersByLabel({
-            'clusterId': cluster.id
+            clusterId: cluster.id,
           });
           if (!hetznerServer) {
             console.log(`server ${server.id} does not exist in the real world. Creating it now...`);
@@ -86,7 +90,7 @@ export class CloudlyServerManager {
               labels: {
                 clusterId: cluster.id,
                 priority: '1',
-              }
+              },
             });
             const newServer = await Server.createFromHetznerServer(hetznerServer);
           }
@@ -99,7 +103,7 @@ export class CloudlyServerManager {
     const results = await this.CServer.getInstances({
       data: {
         assignedClusterId: clusterArg.id,
-      }
+      },
     });
     return results;
   }

ts/manager.service/classes.service.ts

@@ -1,12 +1,14 @@
 import * as plugins from '../plugins.js';
+import { ServiceManager } from './classes.servicemanager.js';
 
-export class Service extends plugins.smartdata.SmartDataDbDoc<Service, plugins.servezoneInterfaces.data.IService, ServiceManager> {
+export class Service extends plugins.smartdata.SmartDataDbDoc<
-  
+  Service,
+  plugins.servezoneInterfaces.data.IService,
+  ServiceManager
+> {
   @plugins.smartdata.svDb()
   public id: string;
 
   @plugins.smartdata.svDb()
   public data: plugins.servezoneInterfaces.data.IService['data'];
-
-
 }

ts/manager.status/statusmanager.ts

@@ -16,7 +16,7 @@ export class ExternalApiManager {
         return {
           networkNodes,
         };
-      })
+      }),
     );
   }
 }

ts/paths.ts

@@ -1,5 +1,9 @@
 import * as plugins from './plugins.js';
 
-export const packageDir = plugins.path.join(plugins.smartpath.get.dirnameFromImportMetaUrl(import.meta.url), '../');
+export const packageDir = plugins.path.join(
+  plugins.smartpath.get.dirnameFromImportMetaUrl(import.meta.url),
+  '../',
+);
 export const nogitDir = plugins.path.join(packageDir, '.nogit/');
+export const dockerImageStoreDir = plugins.path.join(nogitDir, './dockerimagestore/');
 export const distServeDir = plugins.path.join(packageDir, './dist_serve');

ts/plugins.ts

@@ -33,6 +33,7 @@ import * as smartclickhouse from '@push.rocks/smartclickhouse';
 import * as smartdata from '@push.rocks/smartdata';
 import * as smartdelay from '@push.rocks/smartdelay';
 import * as smartexit from '@push.rocks/smartexit';
+import * as smartexpect from '@push.rocks/smartexpect';
 import * as smartfile from '@push.rocks/smartfile';
 import * as smartguard from '@push.rocks/smartguard';
 import * as smartjson from '@push.rocks/smartjson';
@@ -42,6 +43,7 @@ import * as smartpath from '@push.rocks/smartpath';
 import * as smartpromise from '@push.rocks/smartpromise';
 import * as smartrequest from '@push.rocks/smartrequest';
 import * as smartssh from '@push.rocks/smartssh';
+import * as smartstream from '@push.rocks/smartstream';
 import * as smartstring from '@push.rocks/smartstring';
 import * as smartunique from '@push.rocks/smartunique';
 import * as taskbuffer from '@push.rocks/taskbuffer';
@@ -57,6 +59,7 @@ export {
   smartclickhouse,
   smartdata,
   smartexit,
+  smartexpect,
   smartdelay,
   smartfile,
   smartguard,
@@ -67,6 +70,7 @@ export {
   smartpromise,
   smartrequest,
   smartssh,
+  smartstream,
   smartstring,
   smartunique,
   taskbuffer,

ts_apiclient/classes.cloudlyapiclient.ts

@@ -55,7 +55,7 @@ export class CloudlyApiClient {
       this.cloudlyUrl
     );
     console.log(
-      `CloudlyCluent connected to cloudly at ${this.cloudlyUrl}. Remember to get an identity.`
+      `CloudlyClient connected to cloudly at ${this.cloudlyUrl}. Remember to get an identity.`
     );
   }
 
@@ -63,57 +63,69 @@ export class CloudlyApiClient {
     await this.typedsocketClient.stop();
   }
 
-  public identity: plugins.servezoneInterfaces.data.IClusterIdentifier;
+  public identity: plugins.servezoneInterfaces.data.IIdentity;
-  public async getIdentityByJumpCode(
+  public async getIdentityByToken(
-    jumpCodeArg: string,
+    token: string,
-    tagConnection = false,
+    optionsArg?: {
-    statefullIdentity = true
+      tagConnection?: boolean;
-  ): Promise<plugins.servezoneInterfaces.data.IClusterIdentifier> {
+      statefullIdentity?: boolean;
+    }
+  ): Promise<plugins.servezoneInterfaces.data.IIdentity> {
+    optionsArg = Object.assign({}, {
+      tagConnection: false,
+      statefullIdentity: true,
+    }, optionsArg);
+
     const identityRequest =
-      this.typedsocketClient.createTypedRequest<plugins.servezoneInterfaces.requests.identity.IRequest_Any_Cloudly_CoreflowManager_GetIdentityByJumpCode>(
+      this.typedsocketClient.createTypedRequest<plugins.servezoneInterfaces.requests.identity.IRequest_Any_Cloudly_CoreflowManager_GetIdentityByToken>(
-        'getIdentityByJumpCode'
+        'getIdentityByToken'
       );
-    console.log(`trying to get identity from cloudly with supplied jumpCodeArg: ${jumpCodeArg}`);
+    console.log(`trying to get identity from cloudly with supplied jumpCodeArg: ${token}`);
     const response = await identityRequest.fire({
-      jumpCode: jumpCodeArg,
+      token: token,
     });
     console.log('got identity response');
-    const identity = response.clusterIdentifier;
+    const identity = response.identity;
 
-    if (tagConnection) {
+    if (optionsArg.tagConnection) {
       this.typedsocketClient.addTag('identity', identity);
     }
 
-    if (statefullIdentity) {
+    if (optionsArg.statefullIdentity) {
       this.identity = identity;
     }
 
     return identity;
   }
 
+  /**
+   * will use statefull identity by default
+   */
   public async getClusterConfigFromCloudlyByIdentity(
-    identityArg: plugins.servezoneInterfaces.data.IClusterIdentifier
+    identityArg: plugins.servezoneInterfaces.data.IIdentity = this.identity
   ): Promise<plugins.servezoneInterfaces.data.ICluster> {
     const clusterConfigRequest =
       this.typedsocketClient.createTypedRequest<plugins.servezoneInterfaces.requests.config.IRequest_Any_Cloudly_GetClusterConfig>(
         'getClusterConfig'
       );
     const response = await clusterConfigRequest.fire({
-      jwt: '',
+      identity: identityArg,
-      clusterIdentifier: identityArg,
     });
     return response.configData;
   }
 
+  /**
+   * will use statefull identity by default
+   */
   public async getServerConfigFromCloudlyByIdentity(
-    identityArg: plugins.servezoneInterfaces.data.IClusterIdentifier
+    identityArg: plugins.servezoneInterfaces.data.IIdentity = this.identity
   ): Promise<plugins.servezoneInterfaces.data.IServer> {
     const serverConfigRequest =
       this.typedsocketClient.createTypedRequest<plugins.servezoneInterfaces.requests.config.IRequest_Any_Cloudly_GetServerConfig>(
         'getServerConfig'
       );
     const response = await serverConfigRequest.fire({
-      jwt: '', // TODO: do proper auth here
+      identity: identityArg,
       serverId: '', // TODO: get server id here
     });
     return response.configData;
@@ -121,25 +133,35 @@ export class CloudlyApiClient {
 
   /**
    * gets a certificate for a domain used by a service
-   * @param serviceNameArg
-   * @param domainNameArg
    */
-  public async getCertificateForDomainOverHttps(
+  public async getCertificateForDomain(optionsArg: {
-    domainNameArg: string
+    domainName: string;
-  ): Promise<plugins.tsclass.network.ICert> {
+    type: plugins.servezoneInterfaces.requests.certificate.IRequest_Any_Cloudly_GetCertificateForDomain['request']['type'];
+    identity?: plugins.servezoneInterfaces.data.IIdentity;
+  }): Promise<plugins.tsclass.network.ICert> {
+    optionsArg.identity = optionsArg.identity || this.identity;
+    if (!optionsArg.identity) {
+      throw new Error('identity is required. Either provide one or login first.');
+    }
     const typedCertificateRequest =
-      this.typedsocketClient.createTypedRequest<plugins.servezoneInterfaces.requests.certificate.IRequest_Any_Cloudly_GetSslCertificate>(
+      this.typedsocketClient.createTypedRequest<plugins.servezoneInterfaces.requests.certificate.IRequest_Any_Cloudly_GetCertificateForDomain>(
-        'getSslCertificate'
+        'getCertificateForDomain'
       );
     const typedResponse = await typedCertificateRequest.fire({
-      authToken: '', // do proper auth here
+      identity: this.identity, // do proper auth here
-      requiredCertName: domainNameArg,
+      domainName: optionsArg.domainName,
+      type: optionsArg.type,
     });
     return typedResponse.certificate;
   }
 
+  public images = {
     // Images
-  public async getImages() {
+    getImages: async () => {
       return Image.getImages(this);
+    },
+    createImage: async (optionsArg: Parameters<typeof Image.createImage>[1]) => {
+      return Image.createImage(this, optionsArg);
+    }
   }
 }

ts_apiclient/classes.image.ts

@@ -7,7 +7,7 @@ export class Image implements plugins.servezoneInterfaces.data.IImage {
       'getAllImages'
     );
     const response = await getAllImagesTR.fire({
-      jwt: cloudlyClientRef.identity.jwt,
+      identity: cloudlyClientRef.identity,
     });
     const resultImages: Image[] = [];
     for (const image of response.images) {
@@ -18,6 +18,23 @@ export class Image implements plugins.servezoneInterfaces.data.IImage {
     return resultImages;
   }
 
+  /**
+   * creates a new image 
+   */
+  public static async createImage(cloudlyClientRef: CloudlyApiClient, imageDataArg: Partial<plugins.servezoneInterfaces.data.IImage['data']>) {
+    const createImageTR = cloudlyClientRef.typedsocketClient.createTypedRequest<plugins.servezoneInterfaces.requests.image.IRequest_CreateImage>(
+      'createImage'
+    );
+    const response = await createImageTR.fire({
+      identity: cloudlyClientRef.identity,
+      name: imageDataArg.name,
+      description: imageDataArg.description,
+    });
+    const newImage = new Image(cloudlyClientRef);
+    Object.assign(newImage, response.image);
+    return newImage;
+  }
+
   // INSTANCE
   cloudlyClientRef: CloudlyApiClient;
 
@@ -32,11 +49,11 @@ export class Image implements plugins.servezoneInterfaces.data.IImage {
    * updates the image data
    */
   public async update() {
-    const getVersionsTR = this.cloudlyClientRef.typedsocketClient.createTypedRequest<plugins.servezoneInterfaces.requests.image.IRequest_GetImageMetadata>(
+    const getVersionsTR = this.cloudlyClientRef.typedsocketClient.createTypedRequest<plugins.servezoneInterfaces.requests.image.IRequest_GetImage>(
-      'getImageMetadata'
+      'getImage'
     );
     const response = await getVersionsTR.fire({
-      jwt: this.cloudlyClientRef.identity.jwt,
+      identity: this.cloudlyClientRef.identity,
       imageId: this.id,
     });
     Object.assign(this, response.image);
@@ -49,18 +66,17 @@ export class Image implements plugins.servezoneInterfaces.data.IImage {
    */
   public async pushImageVersion(imageVersion: string, imageReadableArg: ReadableStream<Uint8Array>): Promise<void> {
     const done = plugins.smartpromise.defer();
-    const pullImageTR = this.cloudlyClientRef.typedsocketClient.createTypedRequest<plugins.servezoneInterfaces.requests.image.IRequest_PushImageVersion>(
+    const pushImageTR = this.cloudlyClientRef.typedsocketClient.createTypedRequest<plugins.servezoneInterfaces.requests.image.IRequest_PushImageVersion>(
       'pushImageVersion'
     );
     const virtualStream = new plugins.typedrequest.VirtualStream();
-    const response = await pullImageTR.fire({
+    const response = await pushImageTR.fire({
-      jwt: this.cloudlyClientRef.identity.jwt,
+      identity: this.cloudlyClientRef.identity,
       imageId: this.id,
       versionString: '',
       imageStream: virtualStream,
     });
     await virtualStream.readFromWebstream(imageReadableArg);
-    await done.promise;
     await this.update();
   };
 
@@ -72,7 +88,7 @@ export class Image implements plugins.servezoneInterfaces.data.IImage {
       'pullImageVersion'
     );
     const response = await pullImageTR.fire({
-      jwt: this.cloudlyClientRef.identity.jwt,
+      identity: this.cloudlyClientRef.identity,
       imageId: this.id,
       versionString: versionStringArg,
     });

ts_apiclient/tspublish.json

@@ -0,0 +1,16 @@
+{
+  "name": "@serve.zone/api",
+  "dependencies": [
+    "@serve.zone/interfaces",
+    "@push.rocks/smartpromise",
+    "@push.rocks/smartrx",
+    "@push.rocks/smartstream",
+    "@api.global/typedrequest",
+    "@api.global/typedsocket",
+    "@tsclass/tsclass"
+  ],
+  "registries": [
+    "registry.npmjs.org:public",
+    "verdaccio.lossless.digital:public"
+  ]
+}

ts_cliclient/index.ts

@@ -0,0 +1 @@
+console.log('this is the cli client.');

ts_cliclient/tspublish.json

@@ -0,0 +1,8 @@
+{
+  "name": "@serve.zone/cli",
+  "dependencies": [],
+  "registries": [
+    "registry.npmjs.org:public",
+    "verdaccio.lossless.digital:public"
+  ]
+}

ts_interfaces/00_commitinfo_data.ts

@@ -0,0 +1,8 @@
+/**
+ * autocreated commitinfo by @push.rocks/commitinfo
+ */
+export const commitinfo = {
+  name: '@serve.zone/interfaces',
+  version: '1.1.2',
+  description: 'interfaces for working with containers'
+}

ts_interfaces/data/cloudlyconfig.ts

@@ -0,0 +1,16 @@
+import * as plugins from '../plugins.js';
+
+export interface ICloudlyConfig {
+  cfToken?: string;
+  hetznerToken?: string;
+  environment?: 'production' | 'integration';
+  letsEncryptEmail?: string;
+  letsEncryptPrivateKey?: string;
+  jwtKeypair?: plugins.tsclass.network.IJwtKeypair;
+  mongoDescriptor?: plugins.tsclass.database.IMongoDescriptor;
+  s3Descriptor?: plugins.tsclass.storage.IS3Descriptor;
+  publicUrl?: string;
+  publicPort?: string;
+  sslMode?: 'none' | 'letsencrypt' | 'external';
+  servezoneAdminaccount?: string;
+}

ts_interfaces/data/cluster.ts

@@ -0,0 +1,36 @@
+import * as plugins from '../plugins.js';
+
+import { type IDockerRegistryInfo } from '../data/docker.js';
+import type { IServer } from './server.js';
+
+export interface ICluster {
+  id: string;
+  data: {
+    name: string;
+
+    /**
+     * a cluster has a machine user that governs access rights.
+     */
+    userId: string;
+    
+    /**
+     * how can the cluster reach cloudly
+     */
+    cloudlyUrl?: string;
+
+    /**
+     * what servers are expected to be part of the cluster
+     */
+    servers: IServer[];
+
+    /**
+     * ACME info. This is used to get SSL certificates.
+     */
+    acmeInfo: {
+      serverAddress: string;
+      serverSecret: string;
+    };
+
+    sshKeys: plugins.tsclass.network.ISshKey[];
+  };
+}

ts_interfaces/data/config.ts

@@ -0,0 +1 @@
+export type TConfigType = 'server' | 'cluster' | 'coreflow' | 'service';

ts_interfaces/data/deployment.ts

@@ -0,0 +1,14 @@
+import * as plugins from '../plugins.js';
+
+/**
+ * results from a DeploymentDirective
+ * tracks the status of a deployment
+ */
+export interface IDeployment {
+  id: string;
+  deploymentDirectiveId: string;
+  affectedServiceIds: string[];
+  usedImageId: string;
+  deploymentLog: string[];
+  status: 'scheduled' | 'running' | 'deployed' | 'failed';
+}

ts_interfaces/data/deploymentdirective.ts

@@ -0,0 +1,14 @@
+import type { IServiceRessources } from "./docker.js";
+
+/**
+ * used for tellilng a cluster about a disired deployment
+ * and specifies its configuration
+ */
+export interface IDeploymentDirective {
+  id: string;
+  name: string;
+  imageClaim: string;
+  ports: { hostPort: number; containerPort: number }[];
+  environment: { [key: string]: string };
+  resources?: IServiceRessources;
+}

ts_interfaces/data/docker.ts

@@ -0,0 +1,15 @@
+import * as plugins from '../plugins.js';
+
+export interface IDockerRegistryInfo {
+  serveraddress: string;
+  username: string;
+  password: string;
+}
+
+export interface IServiceRessources {
+  cpuLimit?: number;
+  cpuReservation?: number;
+  memorySizeLimitMB?: number;
+  memorySizeReservationMB?: number;
+  volumeMounts?: plugins.tsclass.container.IVolumeMount[];
+}

ts_interfaces/data/env.ts

@@ -0,0 +1,6 @@
+
+export interface IEnvBundle {
+  environment: string;
+  timeSensitive: boolean;
+  configKeyValueObject: {[key: string]: string};
+}

ts_interfaces/data/event.ts

@@ -0,0 +1,11 @@
+import * as plugins from '../plugins.js';
+
+export interface IEvent_Cloudly_ContainerVersionNotification
+  extends plugins.typedrequestInterfaces.implementsTR<
+    plugins.typedrequestInterfaces.ITypedEvent<plugins.tsclass.container.IContainer>,
+    IEvent_Cloudly_ContainerVersionNotification
+  > {
+  name: 'newContainerVersion';
+  uniqueEventId: string;
+  payload: plugins.tsclass.container.IContainer;
+}

ts_interfaces/data/image.ts

@@ -0,0 +1,15 @@
+import * as plugins from '../plugins.js';
+
+export interface IImage {
+  id: string;
+  data: {
+    name: string;
+    description: string;
+    versions: Array<{
+      versionString: string;
+      storagePath?: string;
+      size: number;
+      createdAt: number;
+    }>;
+  };
+}

ts_interfaces/data/index.ts

@@ -0,0 +1,17 @@
+export * from './cloudlyconfig.js';
+export * from './cluster.js';
+export * from './config.js';
+export * from './deployment.js';
+export * from './deploymentdirective.js';
+export * from './docker.js';
+export * from './env.js';
+export * from './event.js';
+export * from './image.js';
+export * from './secretbundle.js';
+export * from './secretgroup.js'
+export * from './server.js';
+export * from './service.js';
+export * from './status.js';
+export * from './traffic.js';
+export * from './user.js';
+export * from './version.js';

ts_interfaces/data/secretbundle.ts

@@ -0,0 +1,42 @@
+export interface ISecretBundle {
+  id: string;
+  data: {
+    name: string;
+    description: string;
+
+    /**
+     * determines if the secret is a service or an external secret
+     * if external secret additional checks are put in place to protect the secret
+     */
+    type: 'service' | 'npmci' | 'gitzone' | 'external';
+
+    /**
+     * You can add specific secret groups using this
+     */
+    includedSecretGroupIds: string[];
+
+    /**
+     * You can add specific tags using this
+     */
+    includedTags: {
+      key: string;
+      value?: string;
+    }[];
+
+    /**
+     * add images
+     */
+    includedImages: {
+      imageId: string;
+      permissions: ('read' | 'write')[];
+    }[]; 
+
+    /**
+     * authrozations select a specific environment of a config bundle
+     */
+    authorizations: Array<{
+      secretAccessKey: string;
+      environment: string;
+    }>;
+  };
+}

ts_interfaces/data/secretgroup.ts

@@ -0,0 +1,54 @@
+export interface ISecretGroup {
+  /**
+   * the insatnce id. This should be a random id, except for default
+   */
+  id: string;
+
+  data: {
+    name: string;
+    description: string;
+
+    /**
+     * the key of the secretgroup like CI_RUNNER_TOKEN
+     */
+    key: string;
+
+    /**
+     * the priority of the secretgroup
+     * will be used to determine which secretgroup will be used
+     * when there are multiple secretgroups with the same key
+     */
+    priority?: number;
+
+    /**
+     * any tags that can be used to filter the secretgroup
+     * can be used for putting secrets into projects
+     */
+    tags: {
+      key: string;
+      value: string;
+    }[];
+    /**
+     * the values for this secretGroup
+     */
+    environments: {
+      [key: string]: {
+        value: string;
+
+        /**
+         * can be used to update the value
+         */
+        updateToken?: string;
+
+        /**
+         * the linux timestamp of the last update
+         */
+        lastUpdated: number;
+        history: {
+          timestamp: string;
+          value: string;
+        }[];
+      };
+    };
+  };
+}

ts_interfaces/data/server.ts

@@ -0,0 +1,36 @@
+import * as plugins from '../plugins.js';
+
+import { type IDockerRegistryInfo } from './docker.js';
+
+export interface IServerMetrics {
+  serverId: string;
+  cpuUsageInPercent: number;
+  memoryUsageinMB: number;
+  memoryAvailableInMB: number;
+  containerCount: number;
+  containerMetrics: Array<{
+    containerId: string;
+    containerName: string;
+    cpuUsageInPercent: number;
+    memoryUsageInMB: number;
+  }>;
+}
+
+export interface IServer {
+  id: string;
+  data: {
+    type: 'baremetal' | 'hetzner';
+
+    assignedClusterId: string;
+
+    /**
+     * a list of debian packages to be installed
+     */
+    requiredDebianPackages: string[];
+
+    /**
+     * a list of SSH keys to deploy
+     */
+    sshKeys: plugins.tsclass.network.ISshKey[];
+  };
+}

ts_interfaces/data/service.ts

@@ -0,0 +1,26 @@
+import type { IServiceRessources } from './docker.js';
+
+export interface IService {
+  id: string;
+  data: {
+    name: string;
+    imageId: string;
+    imageVersion: string;
+    environment: { [key: string]: string };
+    secretBundleId: string;
+    scaleFactor: number;
+    balancingStrategy: 'round-robin' | 'least-connections';
+    ports: {
+      web: number;
+      custom?: { [domain: string]: string };
+    };
+    resources?: IServiceRessources;
+    domains: {
+      name: string;
+      port?: number;
+      protocol?: 'http' | 'https' | 'ssh';
+    }[];
+    deploymentIds: string[];
+    deploymentDirectiveIds: string[];
+  };
+}

ts_interfaces/data/status.ts

@@ -0,0 +1,20 @@
+import * as plugins from '../plugins.js';
+
+export interface IClusterStatus {
+  name: string;
+  ip: string;
+  nodesCount: number;
+  containersUnderManagementCount: number;
+  nodeStatusId: string;
+  containerStatusArray: IContainerStatus[];
+}
+
+export interface INodeStatus {
+  nodeId: string;
+}
+
+export interface IContainerStatus {
+  serviceName: string;
+  dockerImageUrl: string;
+  dockerImageVersion: string;
+}

ts_interfaces/data/traffic.ts

@@ -0,0 +1,5 @@
+import * as plugins from '../plugins.js';
+
+interface IReverseProxyConfig extends plugins.tsclass.network.IReverseProxyConfig {}
+
+export { type IReverseProxyConfig };

ts_interfaces/data/user.ts

@@ -0,0 +1,30 @@
+export interface IToken {
+  token: string;
+  expiresAt: number;
+  assignedRoles: string[];
+}
+
+/**
+ * an identity is assumed by authentication as a user
+ * an identity is ephemeral and has to be renewed regularly
+ */
+export interface IIdentity {
+  name: string;
+  userId: string;
+  type: 'machine' | 'human';
+  role: 'admin' | 'user' | 'api' | 'cluster';
+  expiresAt: number;
+  /** the jwt token should contain above data for verification */
+  jwt: string;
+}
+
+export interface IUser {
+  id: string;
+  data: {
+    type: 'machine' | 'human';
+    role: 'admin' | 'user' | 'api' | 'cluster';
+    username?: string;
+    password?: string;
+    tokens?: IToken[];
+  }
+}

ts_interfaces/data/version.ts

@@ -0,0 +1,11 @@
+export interface IContainerVersionData {
+  /**
+   * the docker image url
+   * example: registry.gitlab.com/hosttoday/ht-docker-node:latest
+   */
+  dockerImageUrl: string;
+  /**
+   * the docker image version. Note: This is different from docker tags that are often used for versions.
+   */
+  dockerImageVersion: string;
+}

ts_interfaces/index.ts

@@ -0,0 +1,9 @@
+import * as data from './data/index.js';
+import * as platformservice from './platformservice/index.js';
+import * as requests from './requests/index.js';
+
+export {
+  data,
+  platformservice,
+  requests
+}

ts_interfaces/platformservice/00readme.md

@@ -0,0 +1 @@
+The platform folder contains types that can be used for talking with the underlying platform by apps running on serve.zone.

ts_interfaces/platformservice/aibridge.ts

@@ -0,0 +1,23 @@
+import * as plugins from '../plugins.js';
+
+export interface IChat {
+  systemMessage: string;
+  messages: {
+    role: 'assistant' | 'user';
+    content: string;
+  }[];
+}
+
+export interface IReq_Chat extends plugins.typedrequestInterfaces.implementsTR<
+  plugins.typedrequestInterfaces.ITypedRequest,
+  IReq_Chat
+>  {
+  method: 'chat',
+  request: {
+    chat: IChat;
+  };
+  response: {
+    chat: IChat;
+    latestMessage: string;
+  }
+}

ts_interfaces/platformservice/index.ts

@@ -0,0 +1,13 @@
+import * as aibridge from './aibridge.js';
+import * as letter from './letter.js';
+import * as mta from './mta.js';
+import * as pushnotification from './pushnotification.js';
+import * as sms from './sms.js';
+
+export {
+  aibridge,
+  letter,
+  mta,
+  pushnotification,
+  sms,
+}

ts_interfaces/platformservice/letter.ts

@@ -0,0 +1,34 @@
+import * as plugins from '../plugins.js';
+
+export interface IRequest_SendLetter extends plugins.typedrequestInterfaces.implementsTR<
+  plugins.typedrequestInterfaces.ITypedRequest,
+  IRequest_SendLetter
+> {
+  method: 'sendLetter';
+  request: {
+    /**
+     * will be used in logs
+     */
+    description: string;
+    /**
+     * if you send any PDF / invoice that you have not made sure to be letterxpress compliant
+     * we strongly recommend using a cover page
+     */
+    needsCover: boolean;
+    title?: string;
+    from?: plugins.tsclass.business.IAddress;
+    to?: plugins.tsclass.business.IAddress;
+    coverBody?: string;
+    service: ('Einschreiben')[];
+    pdfAttachments?: Array<{
+      name: string;
+      binaryAttachmentString: string;
+    }>
+  };
+  response: {
+    /**
+     * this process id allows status retrieval of the letter
+     */
+    processId: string;
+  };
+}

ts_interfaces/platformservice/mta.ts

@@ -0,0 +1,39 @@
+import * as plugins from '../plugins.js';
+
+export type TTemplates = 'default' | 'linkaction' | 'notification';
+
+export interface IRequest_SendEmail extends plugins.typedrequestInterfaces.implementsTR<
+  plugins.typedrequestInterfaces.ITypedRequest,
+  IRequest_SendEmail
+> {
+  method: 'sendEmail';
+  request: {
+    title: string;
+    from: string;
+    to: string;
+    body: string;
+    attachments?: Array<{
+      name: string;
+      binaryAttachmentString: string;
+    }>
+  };
+  response: {
+    /**
+     * the response id allows for handling of responses to that email
+     */
+    responseId: string;
+  };
+}
+
+export interface IRequestRegisterRecipient extends plugins.typedrequestInterfaces.implementsTR<
+  plugins.typedrequestInterfaces.ITypedRequest,
+  IRequestRegisterRecipient
+> {
+  method: 'registerRecepient';
+  request: {
+    emailAddress: string;
+  };
+  response: {
+    status: 'ok' | 'not ok';
+  };
+}

ts_interfaces/platformservice/pushnotification.ts

@@ -0,0 +1,16 @@
+import * as plugins from '../plugins.js';
+
+export interface IRequest_SendPushNotification extends plugins.typedrequestInterfaces.implementsTR<
+  plugins.typedrequestInterfaces.ITypedRequest,
+  IRequest_SendPushNotification
+> {
+  method: 'sendPushNotification';
+  request: {
+    deviceToken: string;
+    message: string;
+  }
+  response: {
+    ok: boolean;
+    status: string;
+  }
+}

ts_interfaces/platformservice/sms.ts

@@ -0,0 +1,33 @@
+import * as plugins from '../plugins.js';
+
+export interface IRequest_SendSms
+  extends plugins.typedrequestInterfaces.implementsTR<
+    plugins.typedrequestInterfaces.ITypedRequest,
+    IRequest_SendSms
+  > {
+    method: 'sendSms';
+    request: {
+      toNumber: number;
+      fromName: string;
+      messageText: string;
+    };
+    response: {
+      status: 'ok' | 'not ok';
+    }
+  }
+
+  export interface IRequest_SendVerificationCode
+  extends plugins.typedrequestInterfaces.implementsTR<
+    plugins.typedrequestInterfaces.ITypedRequest,
+    IRequest_SendVerificationCode
+  > {
+    method: 'sendVerificationCode';
+    request: {
+      toNumber: number;
+      fromName: string;
+    };
+    response: {
+      status: 'ok' | 'not ok';
+      verificationCode: string;
+    }
+  }

ts_interfaces/plugins.ts

@@ -0,0 +1,20 @@
+// @apiglobal scope
+import * as typedrequestInterfaces from '@api.global/typedrequest-interfaces';
+
+export {
+  typedrequestInterfaces
+}
+
+// @push.rocks scope
+import * as smartlogInterfaces from '@push.rocks/smartlog-interfaces';
+
+export {
+  smartlogInterfaces,
+}
+
+// tsclass scope
+import * as tsclass from '@tsclass/tsclass';
+
+export {
+  tsclass
+}

ts_interfaces/requests/certificate.ts

@@ -0,0 +1,18 @@
+import * as plugins from '../plugins.js';
+import * as userInterfaces from '../data/user.js';
+
+export interface IRequest_Any_Cloudly_GetCertificateForDomain
+  extends plugins.typedrequestInterfaces.implementsTR<
+    plugins.typedrequestInterfaces.ITypedRequest,
+    IRequest_Any_Cloudly_GetCertificateForDomain
+  > {
+  method: 'getCertificateForDomain';
+  request: {
+    identity: userInterfaces.IIdentity;
+    domainName: string;
+    type: 'ssl';
+  };
+  response: {
+    certificate: plugins.tsclass.network.ICert;
+  };
+}

ts_interfaces/requests/cluster.ts

@@ -0,0 +1,67 @@
+import * as userInterfaces from '../data/user.js';
+import * as clusterInterfaces from '../data/cluster.js';
+import * as plugins from '../plugins.js';
+
+/**
+ * get all clusters
+ */
+export interface IRequest_GetAllClusters extends plugins.typedrequestInterfaces.implementsTR<
+  plugins.typedrequestInterfaces.ITypedRequest,
+  IRequest_GetAllClusters
+> {
+  method: 'getAllClusters';
+  request: {
+    identity: userInterfaces.IIdentity;
+  };
+  response: {
+    clusters: clusterInterfaces.ICluster[];
+  };
+}
+
+export interface IRequest_CreateCluster extends plugins.typedrequestInterfaces.implementsTR<
+  plugins.typedrequestInterfaces.ITypedRequest,
+  IRequest_CreateCluster
+> {
+  method: 'createCluster';
+  request: {
+    identity: userInterfaces.IIdentity;
+    clusterName: string;
+  };
+  response: {
+    clusterConfig: clusterInterfaces.ICluster;
+  };
+}
+
+/**
+ * updates a cluster
+ */
+export interface IRequest_UpdateCluster extends plugins.typedrequestInterfaces.implementsTR<
+  plugins.typedrequestInterfaces.ITypedRequest,
+  IRequest_UpdateCluster
+> {
+  method: 'updateCluster';
+  request: {
+    identity: userInterfaces.IIdentity;
+    clusterConfig: clusterInterfaces.ICluster;
+  };
+  response: {
+    clusterConfig: clusterInterfaces.ICluster;
+  };
+}
+
+/**
+ * deletes a cluster
+ */
+export interface IRequest_DeleteCluster extends plugins.typedrequestInterfaces.implementsTR<
+  plugins.typedrequestInterfaces.ITypedRequest,
+  IRequest_DeleteCluster
+> {
+  method: 'deleteCluster';
+  request: {
+    identity: userInterfaces.IIdentity;
+    clusterId: string;
+  };
+  response: {
+    success: boolean;
+  };
+}

ts_interfaces/requests/config.ts

@@ -0,0 +1,49 @@
+import * as plugins from '../plugins.js';
+import * as clusterInterfaces from '../data/cluster.js';
+import * as serverInterfaces from '../data/server.js';
+import * as userInterfaces from '../data/user.js';
+import type { IService } from '../data/service.js';
+import type { IDeploymentDirective } from '../data/deploymentdirective.js';
+
+export interface IRequest_Any_Cloudly_GetServerConfig
+extends plugins.typedrequestInterfaces.implementsTR<
+  plugins.typedrequestInterfaces.ITypedRequest,
+  IRequest_Any_Cloudly_GetServerConfig
+> {
+  method: 'getServerConfig';
+  request: {
+    identity: userInterfaces.IIdentity;
+    serverId: string;
+  };
+  response: {
+    configData: serverInterfaces.IServer;
+  };
+}
+
+export interface IRequest_Any_Cloudly_GetClusterConfig
+extends plugins.typedrequestInterfaces.implementsTR<
+  plugins.typedrequestInterfaces.ITypedRequest,
+  IRequest_Any_Cloudly_GetClusterConfig
+> {
+  method: 'getClusterConfig';
+  request: {
+    identity: userInterfaces.IIdentity;
+  };
+  response: {
+    configData: clusterInterfaces.ICluster;
+    deploymentDirectives: IDeploymentDirective[];
+  };
+}
+
+export interface IRequest_Cloudly_Coreflow_PushClusterConfig
+extends plugins.typedrequestInterfaces.implementsTR<
+  plugins.typedrequestInterfaces.ITypedRequest,
+  IRequest_Cloudly_Coreflow_PushClusterConfig
+> {
+  method: 'pushClusterConfig';
+  request: {
+    configData: clusterInterfaces.ICluster;
+    deploymentDirectives: IDeploymentDirective[];
+  };
+  response: {};
+}

ts_interfaces/requests/identity.ts

@@ -0,0 +1,23 @@
+import * as plugins from '../plugins.js';
+import * as userInterfaces from '../data/user.js'
+
+// ========
+// IDENTITY
+// ========
+
+/**
+ * get the identity that then will be used to get the config
+ */
+export interface IRequest_Any_Cloudly_CoreflowManager_GetIdentityByToken
+extends plugins.typedrequestInterfaces.implementsTR<
+  plugins.typedrequestInterfaces.ITypedRequest,
+  IRequest_Any_Cloudly_CoreflowManager_GetIdentityByToken
+> {
+  method: 'getIdentityByToken';
+  request: {
+    token: string;
+  };
+  response: {
+    identity: userInterfaces.IIdentity;
+  };
+}

ts_interfaces/requests/image.ts

@@ -0,0 +1,94 @@
+import * as plugins from '../plugins.js';
+import * as userInterfaces from '../data/user.js';
+
+import type { IImage } from '../data/index.js';
+
+export interface IRequest_GetAllImages extends plugins.typedrequestInterfaces.implementsTR<
+  plugins.typedrequestInterfaces.ITypedRequest,
+  IRequest_GetAllImages
+> {
+  method: 'getAllImages';
+  request: {
+    identity: userInterfaces.IIdentity;
+  };
+  response: {
+    images: IImage[];
+  };
+}
+
+/**
+ * gets a single image
+ */
+export interface IRequest_GetImage extends plugins.typedrequestInterfaces.implementsTR<
+  plugins.typedrequestInterfaces.ITypedRequest,
+  IRequest_GetImage
+> {
+  method: 'getImage';
+  request: {
+    identity: userInterfaces.IIdentity;
+    imageId: string;
+  };
+  response: {
+    image: IImage;
+  };
+}
+
+export interface IRequest_CreateImage extends plugins.typedrequestInterfaces.implementsTR<
+  plugins.typedrequestInterfaces.ITypedRequest,
+  IRequest_CreateImage
+> {
+  method: 'createImage';
+  request: {
+    identity: userInterfaces.IIdentity;
+    name: string;
+    description: string;
+  };
+  response: {
+    image: IImage;
+  };
+
+}
+
+export interface IRequest_PushImageVersion extends plugins.typedrequestInterfaces.implementsTR<
+  plugins.typedrequestInterfaces.ITypedRequest,
+  IRequest_PushImageVersion
+> {
+  method: 'pushImageVersion';
+  request: {
+    identity: userInterfaces.IIdentity;
+    imageId: string;
+    versionString: string;
+    imageStream: plugins.typedrequestInterfaces.IVirtualStream;
+  };
+  response: {
+    allowed: boolean;
+  };
+}
+
+export interface IRequest_PullImageVersion extends plugins.typedrequestInterfaces.implementsTR<
+  plugins.typedrequestInterfaces.ITypedRequest,
+  IRequest_PullImageVersion
+> {
+  method: 'pullImageVersion';
+  request: {
+    identity: userInterfaces.IIdentity;
+    imageId: string;
+    versionString: string;
+  };
+  response: {
+    imageStream: plugins.typedrequestInterfaces.IVirtualStream;
+  };
+}
+
+export interface IRequest_DeleteImage extends plugins.typedrequestInterfaces.implementsTR<
+  plugins.typedrequestInterfaces.ITypedRequest,
+  IRequest_DeleteImage
+> {
+  method: 'deleteImage';
+  request: {
+    identity: userInterfaces.IIdentity;
+    imageId: string;
+  };
+  response: {
+  };
+}

ts_interfaces/requests/index.ts

@@ -0,0 +1,33 @@
+import * as plugins from '../plugins.js';
+
+import * as certificateRequests from './certificate.js';
+import * as clusterRequests from './cluster.js';
+import * as configRequests from './config.js';
+import * as identityRequests from './identity.js';
+import * as imageRequests from './image.js';
+import * as informRequests from './inform.js';
+import * as logRequests from './log.js';
+import * as networkRequests from './network.js';
+import * as routingRequests from './routing.js';
+import * as secretRequests from './secret.js';
+import * as serverRequests from './server.js';
+import * as statusRequests from './status.js';
+import * as versionRequests from './version.js';
+
+export {
+  certificateRequests as certificate,
+  clusterRequests as cluster,
+  configRequests as config,
+  identityRequests as identity,
+  imageRequests as image,
+  informRequests as inform,
+  logRequests as log,
+  networkRequests as network,
+  routingRequests as routing,
+  secretRequests as secret,
+  serverRequests as server,
+  statusRequests as status,
+  versionRequests as version,
+};
+
+export * from './inform.js';

ts_interfaces/requests/inform.ts

@@ -0,0 +1,12 @@
+import * as plugins from '../plugins.js';
+
+export interface IRequest_InformAboutNewContainerImage extends plugins.typedrequestInterfaces.implementsTR<
+  plugins.typedrequestInterfaces.ITypedRequest,
+  IRequest_InformAboutNewContainerImage
+> {
+  method: 'servezonestandard_InformAboutNewContainerVersion';
+  request: {
+    containerImageInfo: plugins.tsclass.container.IContainer
+  };
+  response: {};
+}

ts_interfaces/requests/log.ts

@@ -0,0 +1,13 @@
+import * as plugins from '../plugins.js';
+
+export interface IRequest_Log extends plugins.typedrequestInterfaces.implementsTR<
+  plugins.typedrequestInterfaces.ITypedRequest,
+  IRequest_Log
+> {
+  method: 'log';
+  request: {
+    authToken: string;
+    logPackages: plugins.smartlogInterfaces.ILogPackage[];
+  },
+  response: {};
+}

ts_interfaces/requests/network.ts

@@ -0,0 +1,9 @@
+import * as plugins from '../plugins.js';
+
+export interface IRequest_Any_Cloudly_GetNetworkNodes {
+  method: 'getNetworkNodes';
+  request: {};
+  response: {
+    networkNodes: plugins.tsclass.network.INetworkNode[];
+  };
+}

ts_interfaces/requests/routing.ts

@@ -0,0 +1,12 @@
+import { type IReverseProxyConfig } from '../data/traffic.js';
+
+export interface IRequest_Coreflow_Coretraffic_RoutingUpdate {
+  method: 'updateRouting';
+  request: {
+    reverseConfigs: IReverseProxyConfig[];
+  };
+  response: {
+    status: 'ok' | 'error';
+    errorText: string;
+  };
+}

ts_interfaces/requests/secret.ts

@@ -0,0 +1,94 @@
+import * as plugins from '../plugins.js';
+import * as data from '../data/index.js';
+import * as userInterfaces from '../data/user.js';
+
+export interface IReq_GetEnvBundle extends plugins.typedrequestInterfaces.implementsTR<
+  plugins.typedrequestInterfaces.ITypedRequest,
+  IReq_GetEnvBundle
+> {
+  method: 'getEnvBundle';
+  request: {
+    authorization: string;
+    /**
+     * specify this if you want to get a warning, if the envBundle is for an unexpected environment
+     */
+    environment?: string;
+  };
+  response: {
+    envBundle: data.IEnvBundle;
+  };
+}
+
+export interface IReq_Admin_LoginWithUsernameAndPassword extends plugins.typedrequestInterfaces.implementsTR<
+  plugins.typedrequestInterfaces.ITypedRequest,
+  IReq_Admin_LoginWithUsernameAndPassword
+> {
+  method: 'adminLoginWithUsernameAndPassword';
+  request: {
+    username: string;
+    password: string;
+  };
+  response: {
+    identity: userInterfaces.IIdentity;
+  }
+}
+
+export interface IReq_Admin_GetConfigBundlesAndSecretGroups extends plugins.typedrequestInterfaces.implementsTR<
+  plugins.typedrequestInterfaces.ITypedRequest,
+  IReq_Admin_GetConfigBundlesAndSecretGroups
+> {
+  method: 'adminGetConfigBundlesAndSecretGroups';
+  request: {
+    identity: userInterfaces.IIdentity;
+  };
+  response: {
+    secretBundles: data.ISecretBundle[];
+    secretGroups: data.ISecretGroup[];
+  };
+
+}
+
+export interface IReq_Admin_CreateConfigBundlesAndSecretGroups extends plugins.typedrequestInterfaces.implementsTR<
+  plugins.typedrequestInterfaces.ITypedRequest,
+  IReq_Admin_CreateConfigBundlesAndSecretGroups
+> {
+  method: 'adminCreateConfigBundlesAndSecretGroups';
+  request: {
+    identity: userInterfaces.IIdentity;
+    secretBundles: data.ISecretBundle[];
+    secretGroups: data.ISecretGroup[];
+  };
+  response: {
+    ok: boolean;
+  };
+}
+
+export interface IReq_Admin_UpdateConfigBundlesAndSecretGroups extends plugins.typedrequestInterfaces.implementsTR<
+  plugins.typedrequestInterfaces.ITypedRequest,
+  IReq_Admin_UpdateConfigBundlesAndSecretGroups
+> {
+  method: 'adminUpdateConfigBundlesAndSecretGroups';
+  request: {
+    identity: userInterfaces.IIdentity;
+    configBundles: data.ISecretBundle[];
+    secretGroups: data.ISecretGroup[];
+  };
+  response: {
+    ok: boolean;
+  };
+}
+
+export interface IReq_Admin_DeleteConfigBundlesAndSecretGroups extends plugins.typedrequestInterfaces.implementsTR<
+  plugins.typedrequestInterfaces.ITypedRequest,
+  IReq_Admin_DeleteConfigBundlesAndSecretGroups
+> {
+  method: 'adminDeleteConfigBundlesAndSecretGroups';
+  request: {
+    identity: userInterfaces.IIdentity;
+    secretBundleIds: string[];
+    secretGroupIds: string[];
+  };
+  response: {
+    ok: boolean;
+  };
+}

ts_interfaces/requests/server.ts

@@ -0,0 +1,47 @@
+import type { IServerMetrics } from '../data/server.js';
+import * as plugins from '../plugins.js';
+
+/**
+ * This request can be used between any two players
+ * Examples:
+ * WebApp -> Cloudly (get metrics)
+ * Cloudly -> Webapp (send metrics)
+ * Cloudly -> Coreflow (get metrics)
+ * Coreflow -> Cloudly (send metrics)
+ */
+export interface IRequest_Any_Cloudly_ServerStatus
+extends plugins.typedrequestInterfaces.implementsTR<
+  plugins.typedrequestInterfaces.ITypedRequest,
+  IRequest_Any_Cloudly_ServerStatus
+> {
+  method: 'getOrSendServerMetrics',
+  request: {
+    getOrSend: 'get' | 'send';
+    serverMetrics?: IServerMetrics;
+  },
+  response: {
+    serverMetrics?: IServerMetrics;
+  },
+}
+
+/**
+ * this request can be used between any two players
+ * Examples:
+ * WebApp -> Cloudly
+ * Cloudly -> Coreflow
+ * Cloudly -> HostingProvider
+ */
+export interface IRequest_TriggerServerAction
+  extends plugins.typedrequestInterfaces.implementsTR<
+    plugins.typedrequestInterfaces.ITypedRequest,
+    IRequest_TriggerServerAction
+  > {
+  method: 'triggerServerAction';
+  request: {
+    actionName: 'reboot' | 'rebuild';
+    payload: any;
+  };
+  response: {
+    actionConfirmed: boolean;  
+  };
+}

ts_interfaces/requests/status.ts

@@ -0,0 +1,12 @@
+import * as userInterfaces from '../data/user.js';
+
+/**
+ * a status update dashboard
+ */
+export interface IRequest_Coreflow_Cloudly_CoreflowManagerStatusupdate {
+  method: 'cloudlyStatus';
+  request: {
+    identity: userInterfaces.IIdentity;
+  };
+  response: {};
+}

ts_interfaces/requests/version.ts

@@ -0,0 +1,8 @@
+import * as versionInterfaces from '../data/version.js';
+
+// Containers
+export interface IRequest_Any_Cloudly_VersionManager_InformCloudlyAboutNewContainerVersion {
+  method: 'informCloudlyAboutNewContainerVersion';
+  request: versionInterfaces.IContainerVersionData;
+  response: {};
+}

ts_interfaces/tspublish.json

@@ -0,0 +1,12 @@
+{
+  "name": "@serve.zone/interfaces",
+  "dependencies": [
+    "@api.global/typedrequest-interfaces",
+    "@push.rocks/smartlog-interfaces",
+    "@tsclass/tsclass"
+  ],
+  "registries": [
+    "registry.npmjs.org:public",
+    "verdaccio.lossless.digital:public"
+  ]
+}

ts_web/00_commitinfo_data.ts

@@ -1,8 +1,8 @@
 /**
- * autocreated commitinfo by @pushrocks/commitinfo
+ * autocreated commitinfo by @push.rocks/commitinfo
  */
 export const commitinfo = {
   name: '@serve.zone/cloudly',
-  version: '1.1.5',
+  version: '1.2.5',
-  description: 'A comprehensive multi-cloud manager leveraging Docker Swarmkit to orchestrate containerized applications across various cloud services and integrate robust configuration and API management capabilities.'
+  description: 'A comprehensive multi-cloud manager leveraging Docker Swarmkit to orchestrate containerized applications across various cloud services and provide robust configuration and API integration.'
 }

ts_web/appstate.ts

@@ -3,11 +3,11 @@ import * as domtools from '@design.estate/dees-domtools';
 
 const appstate = new plugins.deesDomtools.plugins.smartstate.Smartstate();
 export interface ILoginState {
-  jwt: string;
+  identity: plugins.interfaces.data.IIdentity;
 }
 export const loginStatePart: plugins.smartstate.StatePart<unknown, ILoginState> = await appstate.getStatePart<ILoginState>(
   'login',
-  { jwt: null },
+  { identity: null },
   'persistent'
 );
 
@@ -22,10 +22,15 @@ export const loginAction = loginStatePart.createAction<{ username: string; passw
     const response = await trLogin.fire({
       username: payloadArg.username,
       password: payloadArg.password,
+    }).catch(err => {
+      console.log(err);
+      return {
+        ...statePartArg.getState(),
+      }
     });
     return {
       ...currentState,
-      ...(response.jwt ? { jwt: response.jwt } : {}),
+      ...(response.identity ? { identity: response.identity } : {}),
     };
   }
 );
@@ -34,7 +39,7 @@ export const logoutAction = loginStatePart.createAction(async (statePartArg) =>
   const currentState = statePartArg.getState();
   return {
     ...currentState,
-    jwt: null,
+    identity: null,
   };
 });
 
@@ -81,7 +86,7 @@ export const getAllDataAction = dataState.createAction(async (statePartArg, part
       'adminGetConfigBundlesAndSecretGroups'
     );
   const response = await trGetSecrets.fire({
-    jwt: loginStatePart.getState().jwt,
+    identity: loginStatePart.getState().identity,
   });
   currentState = {
     ...currentState,
@@ -95,7 +100,7 @@ export const getAllDataAction = dataState.createAction(async (statePartArg, part
       'getAllImages'
     );
   const responseImages = await trGetImages.fire({
-    jwt: loginStatePart.getState().jwt,
+    identity: loginStatePart.getState().identity,
   });
   currentState = {
     ...currentState,
@@ -109,7 +114,7 @@ export const getAllDataAction = dataState.createAction(async (statePartArg, part
       'getAllClusters'
     );
   const responseClusters = await trGetClusters.fire({
-    jwt: loginStatePart.getState().jwt,
+    identity: loginStatePart.getState().identity,
   });
 
   currentState = {
@@ -130,7 +135,7 @@ export const createSecretGroupAction = dataState.createAction(
         'adminCreateConfigBundlesAndSecretGroups'
       );
     const response = await trCreateSecretGroup.fire({
-      jwt: loginStatePart.getState().jwt,
+      identity: loginStatePart.getState().identity,
       secretBundles: [],
       secretGroups: [payloadArg],
     });
@@ -149,7 +154,7 @@ export const deleteSecretGroupAction = dataState.createAction(
         'adminDeleteConfigBundlesAndSecretGroups'
       );
     const response = await trDeleteSecretGroup.fire({
-      jwt: loginStatePart.getState().jwt,
+      identity: loginStatePart.getState().identity,
       secretBundleIds: [],
       secretGroupIds: [payloadArg.secretGroupId],
     });
@@ -168,7 +173,7 @@ export const deleteSecretBundleAction = dataState.createAction(
         'adminDeleteConfigBundlesAndSecretGroups'
       );
     const response = await trDeleteConfigBundle.fire({
-      jwt: loginStatePart.getState().jwt,
+      identity: loginStatePart.getState().identity,
       secretBundleIds: [payloadArg.configBundleId],
       secretGroupIds: [],
     });
@@ -187,7 +192,7 @@ export const createImageAction = dataState.createAction(
         'createImage'
       );
     const response = await trCreateImage.fire({
-      jwt: loginStatePart.getState().jwt,
+      identity: loginStatePart.getState().identity,
       name: payloadArg.imageName,
       description: payloadArg.description,
     });
@@ -210,7 +215,7 @@ export const deleteImageAction = dataState.createAction(
         'deleteImage'
       );
     const response = await trDeleteImage.fire({
-      jwt: loginStatePart.getState().jwt,
+      identity: loginStatePart.getState().identity,
       imageId: payloadArg.imageId,
     });
     currentState = {
@@ -238,7 +243,7 @@ export const addClusterAction = dataState.createAction(
         'createCluster'
       );
     const response = await trAddCluster.fire({
-      jwt: loginStatePart.getState().jwt,
+      identity: loginStatePart.getState().identity,
       ...payloadArg,
     });
     currentState = {

ts_web/elements/cloudly-dashboard.ts

@@ -33,7 +33,7 @@ declare global {
 
 @customElement('cloudly-dashboard')
 export class CloudlyDashboard extends DeesElement {
-  @state() private jwt: string;
+  @state() private identity: plugins.interfaces.data.IIdentity;
   @state() private data: appstate.IDataState = {
     secretGroups: [],
     secretBundles: [],
@@ -97,6 +97,10 @@ export class CloudlyDashboard extends DeesElement {
                 name: 'Services',
                 element: CloudlyViewServices,
               },
+              {
+                name: 'Testing & Building',
+                element: CloudlyViewServices,
+              },
               {
                 name: 'Deployments',
                 element: CloudlyViewDeployments,
@@ -169,8 +173,8 @@ export class CloudlyDashboard extends DeesElement {
     const domtools = await this.domtoolsPromise;
     const loginState = appstate.loginStatePart.getState();
     console.log(loginState);
-    if (loginState.jwt) {
+    if (loginState.identity) {
-      this.jwt = loginState.jwt;
+      this.identity = loginState.identity;
       await simpleLogin.switchToSlottedContent();
       await appstate.dataState.dispatchAction(appstate.getAllDataAction, null);
     }
@@ -186,9 +190,9 @@ export class CloudlyDashboard extends DeesElement {
       username,
       password,
     });
-    if (state.jwt) {
+    if (state.identity) {
       console.log('got jwt');
-      this.jwt = state.jwt;
+      this.identity = state.identity;
       form.setStatus('success', 'Logged in!');
       await simpleLogin.switchToSlottedContent();
       await appstate.dataState.dispatchAction(appstate.getAllDataAction, null);

ts_web/elements/cloudly-view-backups.ts

@@ -1,4 +1,5 @@
 import * as plugins from '../plugins.js';
+import * as shared from '../elements/shared/index.js';
 
 import {
   DeesElement,
@@ -31,13 +32,9 @@ export class CloudlyViewBackups extends DeesElement {
 
   public static styles = [
     cssManager.defaultStyles,
+    shared.viewHostCss,
     css`
-      :host {
+      
-        display: block;
-        margin: auto;
-        max-width: 1280px;
-        padding: 16px 16px;
-      }
     `,
   ];
 

ts_web/elements/cloudly-view-clusters.ts

@@ -1,4 +1,5 @@
 import * as plugins from '../plugins.js';
+import * as shared from '../elements/shared/index.js';
 
 import {
   DeesElement,
@@ -31,13 +32,9 @@ export class CloudlyViewClusters extends DeesElement {
 
   public static styles = [
     cssManager.defaultStyles,
+    shared.viewHostCss,
     css`
-      :host {
+      
-        display: block;
-        margin: auto;
-        max-width: 1280px;
-        padding: 16px 16px;
-      }
     `,
   ];
 

ts_web/elements/cloudly-view-dbs.ts

@@ -1,4 +1,5 @@
 import * as plugins from '../plugins.js';
+import * as shared from '../elements/shared/index.js';
 
 import {
   DeesElement,
@@ -31,13 +32,9 @@ export class CloudlyViewDbs extends DeesElement {
 
   public static styles = [
     cssManager.defaultStyles,
+    shared.viewHostCss,
     css`
-      :host {
+      
-        display: block;
-        margin: auto;
-        max-width: 1280px;
-        padding: 16px 16px;
-      }
     `,
   ];
 

ts_web/elements/cloudly-view-deployments.ts

@@ -1,4 +1,5 @@
 import * as plugins from '../plugins.js';
+import * as shared from '../elements/shared/index.js';
 
 import {
   DeesElement,
@@ -31,13 +32,9 @@ export class CloudlyViewDeployments extends DeesElement {
 
   public static styles = [
     cssManager.defaultStyles,
+    shared.viewHostCss,
     css`
-      :host {
+     
-        display: block;
-        margin: auto;
-        max-width: 1280px;
-        padding: 16px 16px;
-      }
     `,
   ];
 

ts_web/elements/cloudly-view-dns.ts

@@ -1,4 +1,5 @@
 import * as plugins from '../plugins.js';
+import * as shared from '../elements/shared/index.js';
 
 import {
   DeesElement,
@@ -31,13 +32,8 @@ export class CloudlyViewDns extends DeesElement {
 
   public static styles = [
     cssManager.defaultStyles,
+    shared.viewHostCss,
     css` 
-      :host {
-        display: block;
-        margin: auto;
-        max-width: 1280px;
-        padding: 16px 16px;
-      }
     `,
   ];
 

ts_web/elements/cloudly-view-images.ts

@@ -1,4 +1,5 @@
 import * as plugins from '../plugins.js';
+import * as shared from '../elements/shared/index.js';
 
 import { DeesElement, customElement, html, state, css, cssManager } from '@design.estate/dees-element';
 
@@ -23,13 +24,9 @@ export class CloudlyViewImages extends DeesElement {
 
   public static styles = [
     cssManager.defaultStyles,
+    shared.viewHostCss,
     css`
-      :host {
+      
-        display: block;
-        margin: auto;
-        max-width: 1280px;
-        padding: 16px 16px;
-      }
     `,
   ];
 

ts_web/elements/cloudly-view-logs.ts

@@ -1,4 +1,5 @@
 import * as plugins from '../plugins.js';
+import * as shared from '../elements/shared/index.js';
 
 import {
   DeesElement,
@@ -31,13 +32,9 @@ export class CloudlyViewLogs extends DeesElement {
 
   public static styles = [
     cssManager.defaultStyles,
+    shared.viewHostCss,
     css`
-      :host {
+      
-        display: block;
-        margin: auto;
-        max-width: 1280px;
-        padding: 16px 16px;
-      }
     `,
   ];
 

ts_web/elements/cloudly-view-mails.ts

@@ -1,4 +1,5 @@
 import * as plugins from '../plugins.js';
+import * as shared from '../elements/shared/index.js';
 
 import {
   DeesElement,
@@ -31,14 +32,8 @@ export class CloudlyViewMails extends DeesElement {
 
   public static styles = [
     cssManager.defaultStyles,
-    css`
+    shared.viewHostCss,
-      :host {
+    css``
-        display: block;
-        margin: auto;
-        max-width: 1280px;
-        padding: 16px 16px;
-      }
-    `,
   ];
 
   public render() {