@agent-link/agent 0.1.296 → 0.1.297

package/dist/upgrade-job.js

@@ -1,24 +1,65 @@
-import { chmodSync, mkdirSync, readFileSync, renameSync, writeFileSync } from 'fs';
-import { join } from 'path';
+import { appendFileSync, chmodSync, closeSync, existsSync, fsyncSync, mkdirSync, openSync, readFileSync, renameSync, rmSync, writeFileSync, } from 'fs';
+import { dirname, join, resolve } from 'path';
 import { randomUUID } from 'crypto';
 import { CONFIG_DIR } from './config.js';
+import { validateVersionPointer, } from './version-store.js';
+export const EXTERNAL_UPGRADE_PROTOCOL_VERSION = 1;
 const UPGRADE_DIR = join(CONFIG_DIR, 'upgrades');
-function jobPath(jobId) {
-    if (!/^[a-zA-Z0-9-]{1,128}$/.test(jobId)) {
+const JOB_ID = /^[a-zA-Z0-9-]{1,128}$/;
+const TRANSITIONS = {
+    created: ['worker-starting', 'failed'],
+    'worker-starting': ['worker-ready', 'failed'],
+    'worker-ready': ['shutdown-requested', 'failed'],
+    'shutdown-requested': ['old-agent-stopped', 'failed'],
+    'old-agent-stopped': ['switching', 'failed'],
+    switching: ['target-starting', 'failed'],
+    'target-starting': ['target-started', 'failed'],
+    'target-started': [],
+    failed: [],
+};
+function requireJobId(jobId) {
+    if (!JOB_ID.test(jobId))
         throw new Error(`Invalid upgrade job ID: ${jobId}`);
-    }
-    return join(UPGRADE_DIR, `${jobId}.json`);
+    return jobId;
+}
+function legacyJobPath(jobId) {
+    return join(UPGRADE_DIR, `${requireJobId(jobId)}.json`);
+}
+export function getUpgradeRoot() {
+    return UPGRADE_DIR;
+}
+export function getExternalUpgradeJobDirectory(jobId) {
+    return join(UPGRADE_DIR, requireJobId(jobId));
 }
-function writeJob(path, job) {
-    mkdirSync(UPGRADE_DIR, { recursive: true });
+export function getExternalUpgradeJobPath(jobId) {
+    return join(getExternalUpgradeJobDirectory(jobId), 'job.json');
+}
+export function getExternalUpgradeEventsPath(jobId) {
+    return join(getExternalUpgradeJobDirectory(jobId), 'events.jsonl');
+}
+function atomicWriteJson(path, value) {
+    mkdirSync(dirname(path), { recursive: true, mode: 0o700 });
     const temporaryPath = `${path}.${process.pid}.${randomUUID()}.tmp`;
-    writeFileSync(temporaryPath, JSON.stringify(job, null, 2) + '\n', {
-        encoding: 'utf8',
-        mode: 0o600,
-    });
-    renameSync(temporaryPath, path);
-    if (process.platform !== 'win32')
-        chmodSync(path, 0o600);
+    const handle = openSync(temporaryPath, 'wx', 0o600);
+    try {
+        writeFileSync(handle, JSON.stringify(value, null, 2) + '\n', 'utf8');
+        fsyncSync(handle);
+    }
+    finally {
+        closeSync(handle);
+    }
+    try {
+        renameSync(temporaryPath, path);
+        if (process.platform !== 'win32')
+            chmodSync(path, 0o600);
+    }
+    catch (error) {
+        rmSync(temporaryPath, { force: true });
+        throw error;
+    }
+}
+function writeLegacyJob(path, job) {
+    atomicWriteJson(path, job);
 }
 export function createUpgradeJob(input) {
     const timestamp = (input.now ?? new Date()).toISOString();
@@ -33,12 +74,12 @@ export function createUpgradeJob(input) {
         updatedAt: timestamp,
         launchSpecPath: input.launchSpecPath,
     };
-    writeJob(jobPath(job.jobId), job);
-    writeJob(join(UPGRADE_DIR, 'latest.json'), job);
+    writeLegacyJob(legacyJobPath(job.jobId), job);
+    writeLegacyJob(join(UPGRADE_DIR, 'latest.json'), job);
     return job;
 }
 export function updateUpgradeJob(jobId, phase, options = {}) {
-    const path = jobPath(jobId);
+    const path = legacyJobPath(jobId);
     const existing = JSON.parse(readFileSync(path, 'utf8'));
     if (existing.schemaVersion !== 1 || existing.jobId !== jobId) {
         throw new Error(`Invalid upgrade job file: ${path}`);
@@ -52,8 +93,180 @@ export function updateUpgradeJob(jobId, phase, options = {}) {
         updated.error = options.error;
     else
         delete updated.error;
-    writeJob(path, updated);
-    writeJob(join(UPGRADE_DIR, 'latest.json'), updated);
+    writeLegacyJob(path, updated);
+    writeLegacyJob(join(UPGRADE_DIR, 'latest.json'), updated);
     return updated;
 }
+function requireString(value, field) {
+    if (typeof value !== 'string' || value.length === 0) {
+        throw new Error(`External upgrade job ${field} must be a non-empty string`);
+    }
+    return value;
+}
+function requireTimestamp(value, field) {
+    const timestamp = requireString(value, field);
+    if (!Number.isFinite(Date.parse(timestamp))) {
+        throw new Error(`External upgrade job ${field} must be an ISO timestamp`);
+    }
+    return timestamp;
+}
+function validateProcessIdentity(value, field) {
+    if (!value || typeof value !== 'object' || Array.isArray(value)) {
+        throw new Error(`External upgrade job ${field} must be an object`);
+    }
+    const identity = value;
+    if (!Number.isSafeInteger(identity.pid) || identity.pid <= 0) {
+        throw new Error(`External upgrade job ${field}.pid must be a positive integer`);
+    }
+    return {
+        pid: identity.pid,
+        processStartIdentity: requireString(identity.processStartIdentity, `${field}.processStartIdentity`),
+    };
+}
+export function validateExternalUpgradeJob(value) {
+    if (!value || typeof value !== 'object' || Array.isArray(value)) {
+        throw new Error('External upgrade job must be an object');
+    }
+    const job = value;
+    if (job.schemaVersion !== 2)
+        throw new Error('External upgrade job schemaVersion is unsupported');
+    const jobId = requireJobId(requireString(job.jobId, 'jobId'));
+    if (!Object.prototype.hasOwnProperty.call(TRANSITIONS, String(job.phase))) {
+        throw new Error('External upgrade job phase is unsupported');
+    }
+    if (job.channel !== 'latest' && job.channel !== 'beta') {
+        throw new Error('External upgrade job channel is unsupported');
+    }
+    if (job.restartOwner !== 'worker') {
+        throw new Error('External upgrade job restartOwner must be worker');
+    }
+    const oldRuntime = validateProcessIdentity(job.oldRuntime, 'oldRuntime');
+    const oldRuntimeValue = job.oldRuntime;
+    const worker = job.worker === undefined
+        ? undefined
+        : {
+            ...validateProcessIdentity(job.worker, 'worker'),
+            protocolVersion: job.worker.protocolVersion,
+        };
+    if (worker && worker.protocolVersion !== EXTERNAL_UPGRADE_PROTOCOL_VERSION) {
+        throw new Error('External upgrade worker protocolVersion is unsupported');
+    }
+    const error = job.error;
+    if (error !== null && typeof error !== 'string') {
+        throw new Error('External upgrade job error must be null or a string');
+    }
+    const validated = {
+        schemaVersion: 2,
+        jobId,
+        requestId: requireString(job.requestId, 'requestId'),
+        channel: job.channel,
+        sourceVersion: requireString(job.sourceVersion, 'sourceVersion'),
+        targetVersion: requireString(job.targetVersion, 'targetVersion'),
+        phase: job.phase,
+        dataRoot: resolve(requireString(job.dataRoot, 'dataRoot')),
+        launchSpecPath: resolve(requireString(job.launchSpecPath, 'launchSpecPath')),
+        launchSpecDigest: requireString(job.launchSpecDigest, 'launchSpecDigest'),
+        oldRuntime: {
+            ...oldRuntime,
+            processInstanceId: requireString(oldRuntimeValue.processInstanceId, 'oldRuntime.processInstanceId'),
+            sessionId: requireString(oldRuntimeValue.sessionId, 'oldRuntime.sessionId'),
+            sessionUrlHash: requireString(oldRuntimeValue.sessionUrlHash, 'oldRuntime.sessionUrlHash'),
+        },
+        ...(worker ? {
+            worker: {
+                pid: worker.pid,
+                processStartIdentity: worker.processStartIdentity,
+                protocolVersion: 1,
+            },
+        } : {}),
+        restartOwner: 'worker',
+        sourceSelection: validateVersionPointer(job.sourceSelection),
+        targetSelection: validateVersionPointer(job.targetSelection),
+        lastKnownGoodSelection: validateVersionPointer(job.lastKnownGoodSelection),
+        lockNonce: requireString(job.lockNonce, 'lockNonce'),
+        handoffExpiresAt: requireTimestamp(job.handoffExpiresAt, 'handoffExpiresAt'),
+        createdAt: requireTimestamp(job.createdAt, 'createdAt'),
+        updatedAt: requireTimestamp(job.updatedAt, 'updatedAt'),
+        error: error,
+    };
+    if (validated.sourceSelection.version !== validated.sourceVersion
+        || validated.targetSelection.version !== validated.targetVersion) {
+        throw new Error('External upgrade job selections do not match source/target versions');
+    }
+    return validated;
+}
+export function createExternalUpgradeJob(input) {
+    const timestamp = (input.now ?? new Date()).toISOString();
+    const job = validateExternalUpgradeJob({
+        ...input,
+        now: undefined,
+        schemaVersion: 2,
+        phase: 'created',
+        createdAt: timestamp,
+        updatedAt: timestamp,
+        error: null,
+    });
+    const path = getExternalUpgradeJobPath(job.jobId);
+    if (existsSync(path))
+        throw new Error(`External upgrade job already exists: ${job.jobId}`);
+    atomicWriteJson(path, job);
+    atomicWriteJson(join(UPGRADE_DIR, 'latest.json'), job);
+    appendExternalUpgradeEvent(job, 'job-created');
+    return job;
+}
+export function loadExternalUpgradeJob(jobId) {
+    const path = getExternalUpgradeJobPath(jobId);
+    let value;
+    try {
+        value = JSON.parse(readFileSync(path, 'utf8'));
+    }
+    catch (error) {
+        throw new Error(`Failed to load external upgrade job ${jobId}: ${error.message}`);
+    }
+    const job = validateExternalUpgradeJob(value);
+    if (job.jobId !== jobId)
+        throw new Error('External upgrade job identity does not match its path');
+    return job;
+}
+export function transitionExternalUpgradeJob(jobId, phase, options = {}) {
+    const existing = loadExternalUpgradeJob(jobId);
+    if (existing.phase !== phase && !TRANSITIONS[existing.phase].includes(phase)) {
+        throw new Error(`Invalid external upgrade transition: ${existing.phase} -> ${phase}`);
+    }
+    const updated = validateExternalUpgradeJob({
+        ...existing,
+        phase,
+        ...(options.worker ? { worker: options.worker } : {}),
+        ...(options.error !== undefined ? { error: options.error } : {}),
+        updatedAt: (options.now ?? new Date()).toISOString(),
+    });
+    atomicWriteJson(getExternalUpgradeJobPath(jobId), updated);
+    atomicWriteJson(join(UPGRADE_DIR, 'latest.json'), updated);
+    appendExternalUpgradeEvent(updated, `phase-${phase}`);
+    return updated;
+}
+export function appendExternalUpgradeEvent(job, code, detail) {
+    const event = {
+        timestamp: new Date().toISOString(),
+        jobId: job.jobId,
+        phase: job.phase,
+        code,
+        ...(detail ? { detail: detail.slice(0, 512) } : {}),
+        oldRuntime: {
+            pid: job.oldRuntime.pid,
+            processStartIdentity: job.oldRuntime.processStartIdentity,
+        },
+        ...(job.worker ? {
+            worker: {
+                pid: job.worker.pid,
+                processStartIdentity: job.worker.processStartIdentity,
+            },
+        } : {}),
+    };
+    mkdirSync(getExternalUpgradeJobDirectory(job.jobId), { recursive: true, mode: 0o700 });
+    appendFileSync(getExternalUpgradeEventsPath(job.jobId), `${JSON.stringify(event)}\n`, {
+        encoding: 'utf8',
+        mode: 0o600,
+    });
+}
 //# sourceMappingURL=upgrade-job.js.map

package/dist/upgrade-job.js.map

@@ -1 +1 @@
-{"version":3,"file":"upgrade-job.js","sourceRoot":"","sources":["../src/upgrade-job.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,YAAY,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,IAAI,CAAC;AACnF,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AACpC,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAwBzC,MAAM,WAAW,GAAG,IAAI,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC;AAEjD,SAAS,OAAO,CAAC,KAAa;IAC5B,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACzC,MAAM,IAAI,KAAK,CAAC,2BAA2B,KAAK,EAAE,CAAC,CAAC;IACtD,CAAC;IACD,OAAO,IAAI,CAAC,WAAW,EAAE,GAAG,KAAK,OAAO,CAAC,CAAC;AAC5C,CAAC;AAED,SAAS,QAAQ,CAAC,IAAY,EAAE,GAAe;IAC7C,SAAS,CAAC,WAAW,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC5C,MAAM,aAAa,GAAG,GAAG,IAAI,IAAI,OAAO,CAAC,GAAG,IAAI,UAAU,EAAE,MAAM,CAAC;IACnE,aAAa,CAAC,aAAa,EAAE,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE;QAChE,QAAQ,EAAE,MAAM;QAChB,IAAI,EAAE,KAAK;KACZ,CAAC,CAAC;IACH,UAAU,CAAC,aAAa,EAAE,IAAI,CAAC,CAAC;IAChC,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO;QAAE,SAAS,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;AAC3D,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,KAMhC;IACC,MAAM,SAAS,GAAG,CAAC,KAAK,CAAC,GAAG,IAAI,IAAI,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;IAC1D,MAAM,GAAG,GAAe;QACtB,aAAa,EAAE,CAAC;QAChB,KAAK,EAAE,UAAU,EAAE;QACnB,aAAa,EAAE,KAAK,CAAC,aAAa;QAClC,aAAa,EAAE,KAAK,CAAC,aAAa;QAClC,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,KAAK,EAAE,UAAU;QACjB,SAAS,EAAE,SAAS;QACpB,SAAS,EAAE,SAAS;QACpB,cAAc,EAAE,KAAK,CAAC,cAAc;KACrC,CAAC;IACF,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC;IAClC,QAAQ,CAAC,IAAI,CAAC,WAAW,EAAE,aAAa,CAAC,EAAE,GAAG,CAAC,CAAC;IAChD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,UAAU,gBAAgB,CAC9B,KAAa,EACb,KAAsB,EACtB,UAA0C,EAAE;IAE5C,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC;IAC5B,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAe,CAAC;IACtE,IAAI,QAAQ,CAAC,aAAa,KAAK,CAAC,IAAI,QAAQ,CAAC,KAAK,KAAK,KAAK,EAAE,CAAC;QAC7D,MAAM,IAAI,KAAK,CAAC,6BAA6B,IAAI,EAAE,CAAC,CAAC;IACvD,CAAC;IACD,MAAM,OAAO,GAAe;QAC1B,GAAG,QAAQ;QACX,KAAK;QACL,SAAS,EAAE,CAAC,OAAO,CAAC,GAAG,IAAI,IAAI,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE;KACrD,CAAC;IACF,IAAI,OAAO,CAAC,KAAK,KAAK,SAAS;QAAE,OAAO,CAAC,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC;;QAC1D,OAAO,OAAO,CAAC,KAAK,CAAC;IAC1B,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IACxB,QAAQ,CAAC,IAAI,CAAC,WAAW,EAAE,aAAa,CAAC,EAAE,OAAO,CAAC,CAAC;IACpD,OAAO,OAAO,CAAC;AACjB,CAAC"}
+{"version":3,"file":"upgrade-job.js","sourceRoot":"","sources":["../src/upgrade-job.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,cAAc,EACd,SAAS,EACT,SAAS,EACT,UAAU,EACV,SAAS,EACT,SAAS,EACT,QAAQ,EACR,YAAY,EACZ,UAAU,EACV,MAAM,EACN,aAAa,GACd,MAAM,IAAI,CAAC;AACZ,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC;AAC9C,OAAO,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AACpC,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,OAAO,EACL,sBAAsB,GAEvB,MAAM,oBAAoB,CAAC;AAuB5B,MAAM,CAAC,MAAM,iCAAiC,GAAG,CAAC,CAAC;AAgDnD,MAAM,WAAW,GAAG,IAAI,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC;AACjD,MAAM,MAAM,GAAG,uBAAuB,CAAC;AACvC,MAAM,WAAW,GAA4E;IAC3F,OAAO,EAAE,CAAC,iBAAiB,EAAE,QAAQ,CAAC;IACtC,iBAAiB,EAAE,CAAC,cAAc,EAAE,QAAQ,CAAC;IAC7C,cAAc,EAAE,CAAC,oBAAoB,EAAE,QAAQ,CAAC;IAChD,oBAAoB,EAAE,CAAC,mBAAmB,EAAE,QAAQ,CAAC;IACrD,mBAAmB,EAAE,CAAC,WAAW,EAAE,QAAQ,CAAC;IAC5C,SAAS,EAAE,CAAC,iBAAiB,EAAE,QAAQ,CAAC;IACxC,iBAAiB,EAAE,CAAC,gBAAgB,EAAE,QAAQ,CAAC;IAC/C,gBAAgB,EAAE,EAAE;IACpB,MAAM,EAAE,EAAE;CACX,CAAC;AAEF,SAAS,YAAY,CAAC,KAAa;IACjC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,2BAA2B,KAAK,EAAE,CAAC,CAAC;IAC7E,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,aAAa,CAAC,KAAa;IAClC,OAAO,IAAI,CAAC,WAAW,EAAE,GAAG,YAAY,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;AAC1D,CAAC;AAED,MAAM,UAAU,cAAc;IAC5B,OAAO,WAAW,CAAC;AACrB,CAAC;AAED,MAAM,UAAU,8BAA8B,CAAC,KAAa;IAC1D,OAAO,IAAI,CAAC,WAAW,EAAE,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC;AAChD,CAAC;AAED,MAAM,UAAU,yBAAyB,CAAC,KAAa;IACrD,OAAO,IAAI,CAAC,8BAA8B,CAAC,KAAK,CAAC,EAAE,UAAU,CAAC,CAAC;AACjE,CAAC;AAED,MAAM,UAAU,4BAA4B,CAAC,KAAa;IACxD,OAAO,IAAI,CAAC,8BAA8B,CAAC,KAAK,CAAC,EAAE,cAAc,CAAC,CAAC;AACrE,CAAC;AAED,SAAS,eAAe,CAAC,IAAY,EAAE,KAAc;IACnD,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC3D,MAAM,aAAa,GAAG,GAAG,IAAI,IAAI,OAAO,CAAC,GAAG,IAAI,UAAU,EAAE,MAAM,CAAC;IACnE,MAAM,MAAM,GAAG,QAAQ,CAAC,aAAa,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;IACpD,IAAI,CAAC;QACH,aAAa,CAAC,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,MAAM,CAAC,CAAC;QACrE,SAAS,CAAC,MAAM,CAAC,CAAC;IACpB,CAAC;YAAS,CAAC;QACT,SAAS,CAAC,MAAM,CAAC,CAAC;IACpB,CAAC;IACD,IAAI,CAAC;QACH,UAAU,CAAC,aAAa,EAAE,IAAI,CAAC,CAAC;QAChC,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO;YAAE,SAAS,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IAC3D,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,CAAC,aAAa,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACvC,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,cAAc,CAAC,IAAY,EAAE,GAAe;IACnD,eAAe,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;AAC7B,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,KAMhC;IACC,MAAM,SAAS,GAAG,CAAC,KAAK,CAAC,GAAG,IAAI,IAAI,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;IAC1D,MAAM,GAAG,GAAe;QACtB,aAAa,EAAE,CAAC;QAChB,KAAK,EAAE,UAAU,EAAE;QACnB,aAAa,EAAE,KAAK,CAAC,aAAa;QAClC,aAAa,EAAE,KAAK,CAAC,aAAa;QAClC,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,KAAK,EAAE,UAAU;QACjB,SAAS,EAAE,SAAS;QACpB,SAAS,EAAE,SAAS;QACpB,cAAc,EAAE,KAAK,CAAC,cAAc;KACrC,CAAC;IACF,cAAc,CAAC,aAAa,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC;IAC9C,cAAc,CAAC,IAAI,CAAC,WAAW,EAAE,aAAa,CAAC,EAAE,GAAG,CAAC,CAAC;IACtD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,UAAU,gBAAgB,CAC9B,KAAa,EACb,KAAsB,EACtB,UAA0C,EAAE;IAE5C,MAAM,IAAI,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC;IAClC,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAe,CAAC;IACtE,IAAI,QAAQ,CAAC,aAAa,KAAK,CAAC,IAAI,QAAQ,CAAC,KAAK,KAAK,KAAK,EAAE,CAAC;QAC7D,MAAM,IAAI,KAAK,CAAC,6BAA6B,IAAI,EAAE,CAAC,CAAC;IACvD,CAAC;IACD,MAAM,OAAO,GAAe;QAC1B,GAAG,QAAQ;QACX,KAAK;QACL,SAAS,EAAE,CAAC,OAAO,CAAC,GAAG,IAAI,IAAI,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE;KACrD,CAAC;IACF,IAAI,OAAO,CAAC,KAAK,KAAK,SAAS;QAAE,OAAO,CAAC,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC;;QAC1D,OAAO,OAAO,CAAC,KAAK,CAAC;IAC1B,cAAc,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IAC9B,cAAc,CAAC,IAAI,CAAC,WAAW,EAAE,aAAa,CAAC,EAAE,OAAO,CAAC,CAAC;IAC1D,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,aAAa,CAAC,KAAc,EAAE,KAAa;IAClD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACpD,MAAM,IAAI,KAAK,CAAC,wBAAwB,KAAK,6BAA6B,CAAC,CAAC;IAC9E,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAc,EAAE,KAAa;IACrD,MAAM,SAAS,GAAG,aAAa,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IAC9C,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC;QAC5C,MAAM,IAAI,KAAK,CAAC,wBAAwB,KAAK,2BAA2B,CAAC,CAAC;IAC5E,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,uBAAuB,CAAC,KAAc,EAAE,KAAa;IAC5D,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAChE,MAAM,IAAI,KAAK,CAAC,wBAAwB,KAAK,oBAAoB,CAAC,CAAC;IACrE,CAAC;IACD,MAAM,QAAQ,GAAG,KAAgC,CAAC;IAClD,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAK,QAAQ,CAAC,GAAc,IAAI,CAAC,EAAE,CAAC;QACzE,MAAM,IAAI,KAAK,CAAC,wBAAwB,KAAK,iCAAiC,CAAC,CAAC;IAClF,CAAC;IACD,OAAO;QACL,GAAG,EAAE,QAAQ,CAAC,GAAa;QAC3B,oBAAoB,EAAE,aAAa,CACjC,QAAQ,CAAC,oBAAoB,EAC7B,GAAG,KAAK,uBAAuB,CAChC;KACF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,0BAA0B,CAAC,KAAc;IACvD,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAChE,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;IAC5D,CAAC;IACD,MAAM,GAAG,GAAG,KAAgC,CAAC;IAC7C,IAAI,GAAG,CAAC,aAAa,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;IAClG,MAAM,KAAK,GAAG,YAAY,CAAC,aAAa,CAAC,GAAG,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC;IAC9D,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,WAAW,EAAE,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;QAC1E,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;IAC/D,CAAC;IACD,IAAI,GAAG,CAAC,OAAO,KAAK,QAAQ,IAAI,GAAG,CAAC,OAAO,KAAK,MAAM,EAAE,CAAC;QACvD,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;IACjE,CAAC;IACD,IAAI,GAAG,CAAC,YAAY,KAAK,QAAQ,EAAE,CAAC;QAClC,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;IACtE,CAAC;IACD,MAAM,UAAU,GAAG,uBAAuB,CAAC,GAAG,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC;IACzE,MAAM,eAAe,GAAG,GAAG,CAAC,UAAqC,CAAC;IAClE,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,KAAK,SAAS;QACrC,CAAC,CAAC,SAAS;QACX,CAAC,CAAC;YACA,GAAG,uBAAuB,CAAC,GAAG,CAAC,MAAM,EAAE,QAAQ,CAAC;YAChD,eAAe,EAAG,GAAG,CAAC,MAAkC,CAAC,eAAe;SACzE,CAAC;IACJ,IAAI,MAAM,IAAI,MAAM,CAAC,eAAe,KAAK,iCAAiC,EAAE,CAAC;QAC3E,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAC;IAC5E,CAAC;IACD,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC;IACxB,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAChD,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;IACzE,CAAC;IACD,MAAM,SAAS,GAAuB;QACpC,aAAa,EAAE,CAAC;QAChB,KAAK;QACL,SAAS,EAAE,aAAa,CAAC,GAAG,CAAC,SAAS,EAAE,WAAW,CAAC;QACpD,OAAO,EAAE,GAAG,CAAC,OAAO;QACpB,aAAa,EAAE,aAAa,CAAC,GAAG,CAAC,aAAa,EAAE,eAAe,CAAC;QAChE,aAAa,EAAE,aAAa,CAAC,GAAG,CAAC,aAAa,EAAE,eAAe,CAAC;QAChE,KAAK,EAAE,GAAG,CAAC,KAA6B;QACxC,QAAQ,EAAE,OAAO,CAAC,aAAa,CAAC,GAAG,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;QAC1D,cAAc,EAAE,OAAO,CAAC,aAAa,CAAC,GAAG,CAAC,cAAc,EAAE,gBAAgB,CAAC,CAAC;QAC5E,gBAAgB,EAAE,aAAa,CAAC,GAAG,CAAC,gBAAgB,EAAE,kBAAkB,CAAC;QACzE,UAAU,EAAE;YACV,GAAG,UAAU;YACb,iBAAiB,EAAE,aAAa,CAAC,eAAe,CAAC,iBAAiB,EAAE,8BAA8B,CAAC;YACnG,SAAS,EAAE,aAAa,CAAC,eAAe,CAAC,SAAS,EAAE,sBAAsB,CAAC;YAC3E,cAAc,EAAE,aAAa,CAAC,eAAe,CAAC,cAAc,EAAE,2BAA2B,CAAC;SAC3F;QACD,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC;YACX,MAAM,EAAE;gBACN,GAAG,EAAE,MAAM,CAAC,GAAG;gBACf,oBAAoB,EAAE,MAAM,CAAC,oBAAoB;gBACjD,eAAe,EAAE,CAAC;aACnB;SACF,CAAC,CAAC,CAAC,EAAE,CAAC;QACP,YAAY,EAAE,QAAQ;QACtB,eAAe,EAAE,sBAAsB,CAAC,GAAG,CAAC,eAAe,CAAC;QAC5D,eAAe,EAAE,sBAAsB,CAAC,GAAG,CAAC,eAAe,CAAC;QAC5D,sBAAsB,EAAE,sBAAsB,CAAC,GAAG,CAAC,sBAAsB,CAAC;QAC1E,SAAS,EAAE,aAAa,CAAC,GAAG,CAAC,SAAS,EAAE,WAAW,CAAC;QACpD,gBAAgB,EAAE,gBAAgB,CAAC,GAAG,CAAC,gBAAgB,EAAE,kBAAkB,CAAC;QAC5E,SAAS,EAAE,gBAAgB,CAAC,GAAG,CAAC,SAAS,EAAE,WAAW,CAAC;QACvD,SAAS,EAAE,gBAAgB,CAAC,GAAG,CAAC,SAAS,EAAE,WAAW,CAAC;QACvD,KAAK,EAAE,KAAsB;KAC9B,CAAC;IACF,IACE,SAAS,CAAC,eAAe,CAAC,OAAO,KAAK,SAAS,CAAC,aAAa;WAC1D,SAAS,CAAC,eAAe,CAAC,OAAO,KAAK,SAAS,CAAC,aAAa,EAChE,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,qEAAqE,CAAC,CAAC;IACzF,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,MAAM,UAAU,wBAAwB,CACtC,KAEC;IAED,MAAM,SAAS,GAAG,CAAC,KAAK,CAAC,GAAG,IAAI,IAAI,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;IAC1D,MAAM,GAAG,GAAG,0BAA0B,CAAC;QACrC,GAAG,KAAK;QACR,GAAG,EAAE,SAAS;QACd,aAAa,EAAE,CAAC;QAChB,KAAK,EAAE,SAAS;QAChB,SAAS,EAAE,SAAS;QACpB,SAAS,EAAE,SAAS;QACpB,KAAK,EAAE,IAAI;KACZ,CAAC,CAAC;IACH,MAAM,IAAI,GAAG,yBAAyB,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IAClD,IAAI,UAAU,CAAC,IAAI,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,wCAAwC,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC;IAC3F,eAAe,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IAC3B,eAAe,CAAC,IAAI,CAAC,WAAW,EAAE,aAAa,CAAC,EAAE,GAAG,CAAC,CAAC;IACvD,0BAA0B,CAAC,GAAG,EAAE,aAAa,CAAC,CAAC;IAC/C,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,KAAa;IAClD,MAAM,IAAI,GAAG,yBAAyB,CAAC,KAAK,CAAC,CAAC;IAC9C,IAAI,KAAc,CAAC;IACnB,IAAI,CAAC;QACH,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;IACjD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,KAAK,CAAC,uCAAuC,KAAK,KAAM,KAAe,CAAC,OAAO,EAAE,CAAC,CAAC;IAC/F,CAAC;IACD,MAAM,GAAG,GAAG,0BAA0B,CAAC,KAAK,CAAC,CAAC;IAC9C,IAAI,GAAG,CAAC,KAAK,KAAK,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAC;IAClG,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,UAAU,4BAA4B,CAC1C,KAAa,EACb,KAA2B,EAC3B,UAII,EAAE;IAEN,MAAM,QAAQ,GAAG,sBAAsB,CAAC,KAAK,CAAC,CAAC;IAC/C,IAAI,QAAQ,CAAC,KAAK,KAAK,KAAK,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QAC7E,MAAM,IAAI,KAAK,CAAC,wCAAwC,QAAQ,CAAC,KAAK,OAAO,KAAK,EAAE,CAAC,CAAC;IACxF,CAAC;IACD,MAAM,OAAO,GAAG,0BAA0B,CAAC;QACzC,GAAG,QAAQ;QACX,KAAK;QACL,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACrD,GAAG,CAAC,OAAO,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAChE,SAAS,EAAE,CAAC,OAAO,CAAC,GAAG,IAAI,IAAI,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE;KACrD,CAAC,CAAC;IACH,eAAe,CAAC,yBAAyB,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC,CAAC;IAC3D,eAAe,CAAC,IAAI,CAAC,WAAW,EAAE,aAAa,CAAC,EAAE,OAAO,CAAC,CAAC;IAC3D,0BAA0B,CAAC,OAAO,EAAE,SAAS,KAAK,EAAE,CAAC,CAAC;IACtD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,UAAU,0BAA0B,CACxC,GAAuB,EACvB,IAAY,EACZ,MAAe;IAEf,MAAM,KAAK,GAAG;QACZ,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACnC,KAAK,EAAE,GAAG,CAAC,KAAK;QAChB,KAAK,EAAE,GAAG,CAAC,KAAK;QAChB,IAAI;QACJ,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACnD,UAAU,EAAE;YACV,GAAG,EAAE,GAAG,CAAC,UAAU,CAAC,GAAG;YACvB,oBAAoB,EAAE,GAAG,CAAC,UAAU,CAAC,oBAAoB;SAC1D;QACD,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC;YACf,MAAM,EAAE;gBACN,GAAG,EAAE,GAAG,CAAC,MAAM,CAAC,GAAG;gBACnB,oBAAoB,EAAE,GAAG,CAAC,MAAM,CAAC,oBAAoB;aACtD;SACF,CAAC,CAAC,CAAC,EAAE,CAAC;KACR,CAAC;IACF,SAAS,CAAC,8BAA8B,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACvF,cAAc,CAAC,4BAA4B,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,EAAE;QACpF,QAAQ,EAAE,MAAM;QAChB,IAAI,EAAE,KAAK;KACZ,CAAC,CAAC;AACL,CAAC"}

package/dist/upgrade-lock.d.ts

@@ -0,0 +1,25 @@
+import type { ProcessIdentity } from './upgrade-job.js';
+export interface UpgradeLockOwner {
+    schemaVersion: 1;
+    jobId: string;
+    nonce: string;
+    dataRoot: string;
+    controller: ProcessIdentity;
+    worker?: ProcessIdentity;
+    createdAt: string;
+}
+export interface UpgradeLock {
+    path: string;
+    owner: UpgradeLockOwner;
+    tryClaimControllerCleanup(): boolean;
+    tryReclaimDeadWorkerCleanup(worker: ProcessIdentity): boolean;
+    abandonControllerCleanup(): void;
+    release(): void;
+}
+export declare function getUpgradeLockPath(): string;
+export declare function loadUpgradeLockOwner(): UpgradeLockOwner;
+export declare function acquireUpgradeLock(jobId: string): UpgradeLock;
+export declare function assignUpgradeLockWorker(jobId: string, nonce: string, worker: ProcessIdentity): UpgradeLockOwner;
+export declare function releaseUpgradeLockForWorker(jobId: string, nonce: string, worker: ProcessIdentity): void;
+export declare function hasUpgradeLock(): boolean;
+export declare function loadUpgradeLockWorkerClaim(): ProcessIdentity | null;

package/dist/upgrade-lock.js

@@ -0,0 +1,207 @@
+import { closeSync, existsSync, fsyncSync, mkdirSync, openSync, readFileSync, renameSync, rmSync, writeFileSync, } from 'fs';
+import { join, resolve } from 'path';
+import { randomUUID } from 'crypto';
+import { CONFIG_DIR } from './config.js';
+import { getProcessStartIdentity } from './process-identity.js';
+import { writePrivateJsonAtomic } from './upgrade-persistence.js';
+export function getUpgradeLockPath() {
+    return join(CONFIG_DIR, 'upgrades', 'active.lock');
+}
+export function loadUpgradeLockOwner() {
+    const value = JSON.parse(readFileSync(join(getUpgradeLockPath(), 'owner.json'), 'utf8'));
+    if (value.schemaVersion !== 1
+        || typeof value.jobId !== 'string'
+        || typeof value.nonce !== 'string'
+        || resolve(value.dataRoot) !== resolve(CONFIG_DIR)
+        || !Number.isSafeInteger(value.controller?.pid)
+        || typeof value.controller?.processStartIdentity !== 'string') {
+        throw new Error('Upgrade lock owner is invalid');
+    }
+    return value;
+}
+function getHandoffClaimPath() {
+    return join(getUpgradeLockPath(), 'handoff.claim');
+}
+function loadHandoffClaim() {
+    try {
+        const value = JSON.parse(readFileSync(getHandoffClaimPath(), 'utf8'));
+        if (value.schemaVersion !== 1
+            || (value.role !== 'controller' && value.role !== 'worker')
+            || typeof value.jobId !== 'string'
+            || typeof value.nonce !== 'string'
+            || (value.role === 'worker'
+                && (!Number.isSafeInteger(value.worker?.pid)
+                    || typeof value.worker?.processStartIdentity !== 'string'))) {
+            throw new Error('Upgrade handoff claim is invalid');
+        }
+        return value;
+    }
+    catch (error) {
+        if (error.code === 'ENOENT')
+            return null;
+        throw error;
+    }
+}
+function tryCreateHandoffClaim(claim) {
+    let handle;
+    try {
+        handle = openSync(getHandoffClaimPath(), 'wx', 0o600);
+    }
+    catch (error) {
+        if (error.code === 'EEXIST')
+            return false;
+        throw error;
+    }
+    try {
+        writeFileSync(handle, JSON.stringify(claim, null, 2) + '\n', 'utf8');
+        fsyncSync(handle);
+    }
+    finally {
+        closeSync(handle);
+    }
+    return true;
+}
+function releaseClaimedLock(jobId, nonce, role) {
+    const owner = loadUpgradeLockOwner();
+    const claim = loadHandoffClaim();
+    if (owner.jobId !== jobId
+        || owner.nonce !== nonce
+        || claim?.jobId !== jobId
+        || claim.nonce !== nonce
+        || claim.role !== role) {
+        throw new Error('Upgrade lock ownership changed unexpectedly');
+    }
+    const lockPath = getUpgradeLockPath();
+    const tombstone = `${lockPath}.released-${nonce}`;
+    renameSync(lockPath, tombstone);
+    rmSync(tombstone, { recursive: true, force: true });
+}
+export function acquireUpgradeLock(jobId) {
+    const lockPath = getUpgradeLockPath();
+    mkdirSync(join(CONFIG_DIR, 'upgrades'), { recursive: true, mode: 0o700 });
+    try {
+        mkdirSync(lockPath, { mode: 0o700 });
+    }
+    catch (error) {
+        if (error.code === 'EEXIST') {
+            throw new Error('Another external upgrade owns the active upgrade lock');
+        }
+        throw error;
+    }
+    const processStartIdentity = getProcessStartIdentity(process.pid);
+    if (!processStartIdentity) {
+        rmSync(lockPath, { recursive: true, force: true });
+        throw new Error('Cannot acquire upgrade lock without an exact controller process identity');
+    }
+    const owner = {
+        schemaVersion: 1,
+        jobId,
+        nonce: randomUUID(),
+        dataRoot: resolve(CONFIG_DIR),
+        controller: { pid: process.pid, processStartIdentity },
+        createdAt: new Date().toISOString(),
+    };
+    try {
+        writePrivateJsonAtomic(join(lockPath, 'owner.json'), owner);
+    }
+    catch (error) {
+        rmSync(lockPath, { recursive: true, force: true });
+        throw error;
+    }
+    let released = false;
+    let controllerClaimed = false;
+    return {
+        path: lockPath,
+        owner,
+        tryClaimControllerCleanup() {
+            if (released)
+                return false;
+            if (controllerClaimed)
+                return true;
+            controllerClaimed = tryCreateHandoffClaim({
+                schemaVersion: 1,
+                role: 'controller',
+                jobId: owner.jobId,
+                nonce: owner.nonce,
+            });
+            return controllerClaimed;
+        },
+        tryReclaimDeadWorkerCleanup(worker) {
+            if (released || controllerClaimed)
+                return false;
+            const claim = loadHandoffClaim();
+            if (claim?.role !== 'worker'
+                || claim.jobId !== owner.jobId
+                || claim.nonce !== owner.nonce
+                || claim.worker?.pid !== worker.pid
+                || claim.worker.processStartIdentity !== worker.processStartIdentity) {
+                return false;
+            }
+            rmSync(getHandoffClaimPath());
+            return this.tryClaimControllerCleanup();
+        },
+        abandonControllerCleanup() {
+            if (!controllerClaimed || released)
+                return;
+            const claim = loadHandoffClaim();
+            if (claim?.role !== 'controller'
+                || claim.jobId !== owner.jobId
+                || claim.nonce !== owner.nonce) {
+                throw new Error('Upgrade controller cleanup claim changed unexpectedly');
+            }
+            rmSync(getHandoffClaimPath());
+            controllerClaimed = false;
+        },
+        release() {
+            if (released)
+                return;
+            if (!controllerClaimed && !this.tryClaimControllerCleanup()) {
+                throw new Error('Upgrade lock ownership transferred to the worker');
+            }
+            releaseClaimedLock(owner.jobId, owner.nonce, 'controller');
+            released = true;
+        },
+    };
+}
+export function assignUpgradeLockWorker(jobId, nonce, worker) {
+    const owner = loadUpgradeLockOwner();
+    if (owner.jobId !== jobId || owner.nonce !== nonce) {
+        throw new Error('Upgrade worker does not own the active lock');
+    }
+    if (!tryCreateHandoffClaim({
+        schemaVersion: 1,
+        role: 'worker',
+        jobId,
+        nonce,
+        worker,
+    })) {
+        throw new Error('Upgrade lock handoff was already claimed');
+    }
+    const current = loadUpgradeLockOwner();
+    if (current.jobId !== jobId || current.nonce !== nonce) {
+        throw new Error('Upgrade lock changed during worker handoff');
+    }
+    const updated = { ...owner, worker };
+    writePrivateJsonAtomic(join(getUpgradeLockPath(), 'owner.json'), updated);
+    return updated;
+}
+export function releaseUpgradeLockForWorker(jobId, nonce, worker) {
+    const owner = loadUpgradeLockOwner();
+    const claim = loadHandoffClaim();
+    if (owner.worker?.pid !== worker.pid
+        || owner.worker?.processStartIdentity !== worker.processStartIdentity
+        || claim?.role !== 'worker'
+        || claim.worker?.pid !== worker.pid
+        || claim.worker.processStartIdentity !== worker.processStartIdentity) {
+        throw new Error('Upgrade lock is not owned by this worker');
+    }
+    releaseClaimedLock(jobId, nonce, 'worker');
+}
+export function hasUpgradeLock() {
+    return existsSync(getUpgradeLockPath());
+}
+export function loadUpgradeLockWorkerClaim() {
+    const claim = loadHandoffClaim();
+    return claim?.role === 'worker' ? claim.worker ?? null : null;
+}
+//# sourceMappingURL=upgrade-lock.js.map

package/dist/upgrade-lock.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"upgrade-lock.js","sourceRoot":"","sources":["../src/upgrade-lock.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,SAAS,EACT,UAAU,EACV,SAAS,EACT,SAAS,EACT,QAAQ,EACR,YAAY,EACZ,UAAU,EACV,MAAM,EACN,aAAa,GACd,MAAM,IAAI,CAAC;AACZ,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC;AACrC,OAAO,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AACpC,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,uBAAuB,EAAE,MAAM,uBAAuB,CAAC;AAEhE,OAAO,EAAE,sBAAsB,EAAE,MAAM,0BAA0B,CAAC;AA6BlE,MAAM,UAAU,kBAAkB;IAChC,OAAO,IAAI,CAAC,UAAU,EAAE,UAAU,EAAE,aAAa,CAAC,CAAC;AACrD,CAAC;AAED,MAAM,UAAU,oBAAoB;IAClC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,kBAAkB,EAAE,EAAE,YAAY,CAAC,EAAE,MAAM,CAAC,CAAqB,CAAC;IAC7G,IACE,KAAK,CAAC,aAAa,KAAK,CAAC;WACtB,OAAO,KAAK,CAAC,KAAK,KAAK,QAAQ;WAC/B,OAAO,KAAK,CAAC,KAAK,KAAK,QAAQ;WAC/B,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,OAAO,CAAC,UAAU,CAAC;WAC/C,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,UAAU,EAAE,GAAG,CAAC;WAC5C,OAAO,KAAK,CAAC,UAAU,EAAE,oBAAoB,KAAK,QAAQ,EAC7D,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;IACnD,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,mBAAmB;IAC1B,OAAO,IAAI,CAAC,kBAAkB,EAAE,EAAE,eAAe,CAAC,CAAC;AACrD,CAAC;AAED,SAAS,gBAAgB;IACvB,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,mBAAmB,EAAE,EAAE,MAAM,CAAC,CAAwB,CAAC;QAC7F,IACE,KAAK,CAAC,aAAa,KAAK,CAAC;eACtB,CAAC,KAAK,CAAC,IAAI,KAAK,YAAY,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC;eACxD,OAAO,KAAK,CAAC,KAAK,KAAK,QAAQ;eAC/B,OAAO,KAAK,CAAC,KAAK,KAAK,QAAQ;eAC/B,CAAC,KAAK,CAAC,IAAI,KAAK,QAAQ;mBACtB,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,MAAM,EAAE,GAAG,CAAC;uBACvC,OAAO,KAAK,CAAC,MAAM,EAAE,oBAAoB,KAAK,QAAQ,CAAC,CAAC,EAC/D,CAAC;YACD,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;QACtD,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC;QACpE,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,qBAAqB,CAAC,KAA0B;IACvD,IAAI,MAAc,CAAC;IACnB,IAAI,CAAC;QACH,MAAM,GAAG,QAAQ,CAAC,mBAAmB,EAAE,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;IACxD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,KAAK,CAAC;QACrE,MAAM,KAAK,CAAC;IACd,CAAC;IACD,IAAI,CAAC;QACH,aAAa,CAAC,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,MAAM,CAAC,CAAC;QACrE,SAAS,CAAC,MAAM,CAAC,CAAC;IACpB,CAAC;YAAS,CAAC;QACT,SAAS,CAAC,MAAM,CAAC,CAAC;IACpB,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,kBAAkB,CAAC,KAAa,EAAE,KAAa,EAAE,IAAiC;IACzF,MAAM,KAAK,GAAG,oBAAoB,EAAE,CAAC;IACrC,MAAM,KAAK,GAAG,gBAAgB,EAAE,CAAC;IACjC,IACE,KAAK,CAAC,KAAK,KAAK,KAAK;WAClB,KAAK,CAAC,KAAK,KAAK,KAAK;WACrB,KAAK,EAAE,KAAK,KAAK,KAAK;WACtB,KAAK,CAAC,KAAK,KAAK,KAAK;WACrB,KAAK,CAAC,IAAI,KAAK,IAAI,EACtB,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;IACjE,CAAC;IACD,MAAM,QAAQ,GAAG,kBAAkB,EAAE,CAAC;IACtC,MAAM,SAAS,GAAG,GAAG,QAAQ,aAAa,KAAK,EAAE,CAAC;IAClD,UAAU,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;IAChC,MAAM,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;AACtD,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,KAAa;IAC9C,MAAM,QAAQ,GAAG,kBAAkB,EAAE,CAAC;IACtC,SAAS,CAAC,IAAI,CAAC,UAAU,EAAE,UAAU,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC1E,IAAI,CAAC;QACH,SAAS,CAAC,QAAQ,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACvC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YACvD,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAC;QAC3E,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC;IACD,MAAM,oBAAoB,GAAG,uBAAuB,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAClE,IAAI,CAAC,oBAAoB,EAAE,CAAC;QAC1B,MAAM,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACnD,MAAM,IAAI,KAAK,CAAC,0EAA0E,CAAC,CAAC;IAC9F,CAAC;IACD,MAAM,KAAK,GAAqB;QAC9B,aAAa,EAAE,CAAC;QAChB,KAAK;QACL,KAAK,EAAE,UAAU,EAAE;QACnB,QAAQ,EAAE,OAAO,CAAC,UAAU,CAAC;QAC7B,UAAU,EAAE,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,oBAAoB,EAAE;QACtD,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KACpC,CAAC;IACF,IAAI,CAAC;QACH,sBAAsB,CAAC,IAAI,CAAC,QAAQ,EAAE,YAAY,CAAC,EAAE,KAAK,CAAC,CAAC;IAC9D,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACnD,MAAM,KAAK,CAAC;IACd,CAAC;IACD,IAAI,QAAQ,GAAG,KAAK,CAAC;IACrB,IAAI,iBAAiB,GAAG,KAAK,CAAC;IAC9B,OAAO;QACL,IAAI,EAAE,QAAQ;QACd,KAAK;QACL,yBAAyB;YACvB,IAAI,QAAQ;gBAAE,OAAO,KAAK,CAAC;YAC3B,IAAI,iBAAiB;gBAAE,OAAO,IAAI,CAAC;YACnC,iBAAiB,GAAG,qBAAqB,CAAC;gBACxC,aAAa,EAAE,CAAC;gBAChB,IAAI,EAAE,YAAY;gBAClB,KAAK,EAAE,KAAK,CAAC,KAAK;gBAClB,KAAK,EAAE,KAAK,CAAC,KAAK;aACnB,CAAC,CAAC;YACH,OAAO,iBAAiB,CAAC;QAC3B,CAAC;QACD,2BAA2B,CAAC,MAAuB;YACjD,IAAI,QAAQ,IAAI,iBAAiB;gBAAE,OAAO,KAAK,CAAC;YAChD,MAAM,KAAK,GAAG,gBAAgB,EAAE,CAAC;YACjC,IACE,KAAK,EAAE,IAAI,KAAK,QAAQ;mBACrB,KAAK,CAAC,KAAK,KAAK,KAAK,CAAC,KAAK;mBAC3B,KAAK,CAAC,KAAK,KAAK,KAAK,CAAC,KAAK;mBAC3B,KAAK,CAAC,MAAM,EAAE,GAAG,KAAK,MAAM,CAAC,GAAG;mBAChC,KAAK,CAAC,MAAM,CAAC,oBAAoB,KAAK,MAAM,CAAC,oBAAoB,EACpE,CAAC;gBACD,OAAO,KAAK,CAAC;YACf,CAAC;YACD,MAAM,CAAC,mBAAmB,EAAE,CAAC,CAAC;YAC9B,OAAO,IAAI,CAAC,yBAAyB,EAAE,CAAC;QAC1C,CAAC;QACD,wBAAwB;YACtB,IAAI,CAAC,iBAAiB,IAAI,QAAQ;gBAAE,OAAO;YAC3C,MAAM,KAAK,GAAG,gBAAgB,EAAE,CAAC;YACjC,IACE,KAAK,EAAE,IAAI,KAAK,YAAY;mBACzB,KAAK,CAAC,KAAK,KAAK,KAAK,CAAC,KAAK;mBAC3B,KAAK,CAAC,KAAK,KAAK,KAAK,CAAC,KAAK,EAC9B,CAAC;gBACD,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAC;YAC3E,CAAC;YACD,MAAM,CAAC,mBAAmB,EAAE,CAAC,CAAC;YAC9B,iBAAiB,GAAG,KAAK,CAAC;QAC5B,CAAC;QACD,OAAO;YACL,IAAI,QAAQ;gBAAE,OAAO;YACrB,IAAI,CAAC,iBAAiB,IAAI,CAAC,IAAI,CAAC,yBAAyB,EAAE,EAAE,CAAC;gBAC5D,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;YACtE,CAAC;YACD,kBAAkB,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,YAAY,CAAC,CAAC;YAC3D,QAAQ,GAAG,IAAI,CAAC;QAClB,CAAC;KACF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,uBAAuB,CACrC,KAAa,EACb,KAAa,EACb,MAAuB;IAEvB,MAAM,KAAK,GAAG,oBAAoB,EAAE,CAAC;IACrC,IAAI,KAAK,CAAC,KAAK,KAAK,KAAK,IAAI,KAAK,CAAC,KAAK,KAAK,KAAK,EAAE,CAAC;QACnD,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;IACjE,CAAC;IACD,IAAI,CAAC,qBAAqB,CAAC;QACzB,aAAa,EAAE,CAAC;QAChB,IAAI,EAAE,QAAQ;QACd,KAAK;QACL,KAAK;QACL,MAAM;KACP,CAAC,EAAE,CAAC;QACH,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;IAC9D,CAAC;IACD,MAAM,OAAO,GAAG,oBAAoB,EAAE,CAAC;IACvC,IAAI,OAAO,CAAC,KAAK,KAAK,KAAK,IAAI,OAAO,CAAC,KAAK,KAAK,KAAK,EAAE,CAAC;QACvD,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;IAChE,CAAC;IACD,MAAM,OAAO,GAAG,EAAE,GAAG,KAAK,EAAE,MAAM,EAAE,CAAC;IACrC,sBAAsB,CAAC,IAAI,CAAC,kBAAkB,EAAE,EAAE,YAAY,CAAC,EAAE,OAAO,CAAC,CAAC;IAC1E,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,UAAU,2BAA2B,CACzC,KAAa,EACb,KAAa,EACb,MAAuB;IAEvB,MAAM,KAAK,GAAG,oBAAoB,EAAE,CAAC;IACrC,MAAM,KAAK,GAAG,gBAAgB,EAAE,CAAC;IACjC,IACE,KAAK,CAAC,MAAM,EAAE,GAAG,KAAK,MAAM,CAAC,GAAG;WAC7B,KAAK,CAAC,MAAM,EAAE,oBAAoB,KAAK,MAAM,CAAC,oBAAoB;WAClE,KAAK,EAAE,IAAI,KAAK,QAAQ;WACxB,KAAK,CAAC,MAAM,EAAE,GAAG,KAAK,MAAM,CAAC,GAAG;WAChC,KAAK,CAAC,MAAM,CAAC,oBAAoB,KAAK,MAAM,CAAC,oBAAoB,EACpE,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;IAC9D,CAAC;IACD,kBAAkB,CAAC,KAAK,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC;AAC7C,CAAC;AAED,MAAM,UAAU,cAAc;IAC5B,OAAO,UAAU,CAAC,kBAAkB,EAAE,CAAC,CAAC;AAC1C,CAAC;AAED,MAAM,UAAU,0BAA0B;IACxC,MAAM,KAAK,GAAG,gBAAgB,EAAE,CAAC;IACjC,OAAO,KAAK,EAAE,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;AAChE,CAAC"}

package/dist/upgrade-persistence.d.ts

@@ -0,0 +1 @@
+export declare function writePrivateJsonAtomic(path: string, value: unknown): void;

package/dist/upgrade-persistence.js

@@ -0,0 +1,25 @@
+import { chmodSync, closeSync, fsyncSync, mkdirSync, openSync, renameSync, rmSync, writeFileSync, } from 'fs';
+import { dirname } from 'path';
+import { randomUUID } from 'crypto';
+export function writePrivateJsonAtomic(path, value) {
+    mkdirSync(dirname(path), { recursive: true, mode: 0o700 });
+    const temporaryPath = `${path}.${process.pid}.${randomUUID()}.tmp`;
+    const handle = openSync(temporaryPath, 'wx', 0o600);
+    try {
+        writeFileSync(handle, JSON.stringify(value, null, 2) + '\n', 'utf8');
+        fsyncSync(handle);
+    }
+    finally {
+        closeSync(handle);
+    }
+    try {
+        renameSync(temporaryPath, path);
+        if (process.platform !== 'win32')
+            chmodSync(path, 0o600);
+    }
+    catch (error) {
+        rmSync(temporaryPath, { force: true });
+        throw error;
+    }
+}
+//# sourceMappingURL=upgrade-persistence.js.map

package/dist/upgrade-persistence.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"upgrade-persistence.js","sourceRoot":"","sources":["../src/upgrade-persistence.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,SAAS,EACT,SAAS,EACT,SAAS,EACT,SAAS,EACT,QAAQ,EACR,UAAU,EACV,MAAM,EACN,aAAa,GACd,MAAM,IAAI,CAAC;AACZ,OAAO,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC;AAC/B,OAAO,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AAEpC,MAAM,UAAU,sBAAsB,CAAC,IAAY,EAAE,KAAc;IACjE,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC3D,MAAM,aAAa,GAAG,GAAG,IAAI,IAAI,OAAO,CAAC,GAAG,IAAI,UAAU,EAAE,MAAM,CAAC;IACnE,MAAM,MAAM,GAAG,QAAQ,CAAC,aAAa,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;IACpD,IAAI,CAAC;QACH,aAAa,CAAC,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,MAAM,CAAC,CAAC;QACrE,SAAS,CAAC,MAAM,CAAC,CAAC;IACpB,CAAC;YAAS,CAAC;QACT,SAAS,CAAC,MAAM,CAAC,CAAC;IACpB,CAAC;IACD,IAAI,CAAC;QACH,UAAU,CAAC,aAAa,EAAE,IAAI,CAAC,CAAC;QAChC,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO;YAAE,SAAS,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IAC3D,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,CAAC,aAAa,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACvC,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC"}

package/dist/worker-host.d.ts

@@ -0,0 +1,38 @@
+import { type ChildProcess } from 'child_process';
+import type { LaunchHostType } from './launch-spec.js';
+export interface WorkerHostCommand {
+    executable: string;
+    args: string[];
+    options: {
+        cwd: string;
+        env: NodeJS.ProcessEnv;
+        detached?: boolean;
+        stdio?: ['ignore', number, number] | 'ignore';
+        windowsHide: true;
+    };
+}
+export interface WorkerHostDeps {
+    platform?: NodeJS.Platform;
+    nodePath?: string;
+    spawnProcess?: (command: WorkerHostCommand) => ChildProcess | {
+        pid?: number;
+        unref?: () => void;
+    };
+    uid?: number;
+}
+export interface WorkerHostResult {
+    kind: 'detached' | 'systemd-transient' | 'launchd-temporary';
+    pid?: number;
+    command: WorkerHostCommand;
+    artifactPath?: string;
+    serviceIdentifier?: string;
+    started: Promise<void>;
+}
+export declare function getPackagedWorkerPath(): string;
+export declare function startUpgradeWorker(input: {
+    jobId: string;
+    jobPath: string;
+    workerPath: string;
+    hostType: LaunchHostType;
+}, deps?: WorkerHostDeps): WorkerHostResult;
+export declare function cleanupUpgradeWorkerHost(result: WorkerHostResult, deps?: WorkerHostDeps): void;