@amalgm/shell 0.1.163 → 0.1.164-main.34182640231

package/dist/updates/controller.js

@@ -0,0 +1,322 @@
+import { createHash } from 'node:crypto';
+import { join } from 'node:path';
+import { existsSync } from 'node:fs';
+import { beginManagedUpdate, completeManagedUpdateEffect, createManagedUpdateState, desireManagedRuntimeRelease, managedUpdateEffect, retainedManagedReleaseDigests, } from '@amalgm/core/supervision';
+import { acquireProcessLease } from '../installation/lease.js';
+import { atomicJson } from '../filesystem.js';
+import { readRegistration, writeRegistration } from '../service/registration.js';
+import { collectAbandonedUpdateWork, collectRuntimeArtifacts, managedPackage, RuntimeDownloadError, stageRuntime } from './artifacts.js';
+import { installedPackage, observedRuntimeFormats, runtimeHost, UpdateStore } from './store.js';
+import { RELEASE_ORIGIN, RuntimeTrust } from './trust.js';
+const reason = (error) => String(error instanceof Error ? error.message : error).replace(/[\x00-\x1f]/g, ' ').slice(0, 1_024) || 'Runtime update effect failed';
+/** Core is the only transition owner. This host performs one persisted effect
+ * at a time; release notifications can update desired without changing it. */
+export class RuntimeUpdates {
+    identity;
+    effects;
+    store;
+    abort = new AbortController();
+    trust;
+    state;
+    job = null;
+    discovery = null;
+    notifications = null;
+    changed = true;
+    workGeneration = 0;
+    wake = null;
+    replacing = false;
+    registration;
+    constructor(identity, effects) {
+        this.identity = identity;
+        this.effects = effects;
+        this.registration = readRegistration(identity);
+        this.store = new UpdateStore(identity);
+        try {
+            this.state = this.store.state(identity.binding, runtimeHost());
+            this.trust = new RuntimeTrust(this.store, this.abort.signal);
+            this.restoreInterruptedLaunch();
+            if (this.state && !this.state.transaction)
+                this.projectActive();
+        }
+        catch (error) {
+            this.store.close();
+            throw error;
+        }
+    }
+    static enabled(identity) {
+        return identity.binding.runtimeLabel !== 'local' && managedPackage() && existsSync(join(identity.serviceDir, 'bootstrap.mjs'));
+    }
+    get permitsOrdinaryRuntime() {
+        return this.state === null || this.state.activeHealthy && (!this.state.transaction || ['stage', 'drain'].includes(this.state.transaction.phase));
+    }
+    get status() {
+        return this.state ? { active: this.state.active.target.id, desired: this.state.desired.target.id,
+            phase: this.state.transaction?.phase ?? 'current', quarantine: this.state.quarantine } : { phase: 'verifying-installed-baseline' };
+    }
+    start() {
+        this.job = this.run();
+        this.notifications = this.listen();
+    }
+    async close() {
+        this.abort.abort();
+        this.wake?.();
+        await Promise.allSettled([this.job, this.notifications, this.discovery]);
+        this.store.close();
+    }
+    persist(next, launch) {
+        if (next === this.state && !launch)
+            return;
+        this.store.atomic(() => {
+            this.store.write('policy', JSON.stringify(next));
+            if (launch)
+                this.store.write('launch', JSON.stringify(launch));
+        });
+        this.state = next;
+        this.effects.changed();
+        this.notifyWork();
+    }
+    launch() { return JSON.parse(this.store.read('launch')); }
+    command(release) {
+        const root = this.store.read(`artifact:${release.digest}`);
+        if (!root)
+            throw new Error('The release has no verified immutable package');
+        return { node: this.registration.node, bin: join(root, 'dist/main.js'), args: [...this.registration.keepalive_args] };
+    }
+    /** Registration and the shared CLI pointer are projections of the committed
+     * journal. Boot repairs interruption after policy/launcher commit. */
+    projectActive() {
+        const active = this.state.active;
+        const current = this.command(active);
+        const registration = readRegistration(this.identity);
+        writeRegistration(this.identity, { ...registration, node: current.node, bin: current.bin,
+            package_root: this.store.read(`artifact:${active.digest}`), package_version: active.target.release.units[0].artifact.version });
+        atomicJson(join(this.identity.home, '.amalgm/runtime-packages/shell', this.identity.binding.runtimeLabel, 'current.json'), { schema: 1, runtimeLabel: this.identity.binding.runtimeLabel, version: active.target.release.units[0].artifact.version, node: current.node, bin: current.bin });
+    }
+    sameCode(release) {
+        const pkg = installedPackage(this.effects.packageRoot);
+        const artifact = release.target.release.units[0].artifact;
+        return pkg.version === artifact.version && pkg.amalgmSource?.commit === artifact.source.commit;
+    }
+    restoreInterruptedLaunch() {
+        if (!this.state)
+            return;
+        const t = this.state.transaction;
+        if (!t) {
+            if (!this.sameCode(this.state.active))
+                throw new Error('The controller is not the committed runtime release');
+            return;
+        }
+        const launch = this.launch();
+        if ((launch.pending?.recoveryAttempted || this.sameCode(t.previous) && !this.sameCode(t.candidate))
+            && ['start', 'probe'].includes(t.phase)) {
+            const effect = managedUpdateEffect(this.state, Math.max(Date.now(), t.notBefore));
+            if (effect)
+                this.persist(completeManagedUpdateEffect(this.state, effect.token, { type: 'failed', reason: 'Candidate controller exited before committing healthy probation' }, Math.max(Date.now(), t.notBefore)));
+        }
+        if (![t.previous, t.candidate].some(release => this.sameCode(release)))
+            throw new Error('The controller is outside its persisted update transaction');
+    }
+    notifyWork() { this.workGeneration++; this.wake?.(); }
+    signal() { this.changed = true; this.notifyWork(); }
+    async wait(milliseconds) {
+        if (this.abort.signal.aborted)
+            return;
+        await new Promise(resolve => { const timer = setTimeout(resolve, milliseconds); this.wake = () => { clearTimeout(timer); resolve(); }; });
+        this.wake = null;
+    }
+    async discover() {
+        if (this.discovery)
+            return this.discovery;
+        this.discovery = (async () => {
+            try {
+                if (!this.state) {
+                    const installed = installedPackage(this.effects.packageRoot);
+                    const baseline = await this.trust.baseline(installed.version);
+                    const immutable = await stageRuntime(this.identity, baseline, this.registration.node, this.abort.signal, this.effects.packageRoot);
+                    this.store.write(`artifact:${baseline.digest}`, immutable);
+                    this.persist(createManagedUpdateState(this.identity.binding, runtimeHost(), baseline, 1));
+                }
+                const current = await this.trust.current(this.state.desired);
+                this.persist(desireManagedRuntimeRelease(this.state, current.target, current.digest));
+            }
+            catch (error) {
+                if (!this.abort.signal.aborted)
+                    this.effects.log(`Runtime discovery: ${reason(error)}`);
+            }
+        })().finally(() => { this.discovery = null; this.notifyWork(); });
+        return this.discovery;
+    }
+    async run() {
+        try {
+            await collectAbandonedUpdateWork(this.identity);
+        }
+        catch (error) {
+            this.effects.log(`Runtime scratch collection: ${reason(error)}`);
+        }
+        while (!this.abort.signal.aborted && !this.replacing) {
+            const observedWork = this.workGeneration;
+            try {
+                // A hint received during a refresh remains pending until that refresh
+                // completes. Its verified result independently wakes effect execution.
+                if (this.changed && !this.discovery) {
+                    this.changed = false;
+                    void this.discover();
+                }
+                if (this.state) {
+                    this.persist(beginManagedUpdate(this.state, Date.now()));
+                    const effect = managedUpdateEffect(this.state, Date.now());
+                    if (effect)
+                        await this.perform(effect.token);
+                }
+            }
+            catch (error) {
+                if (!this.abort.signal.aborted)
+                    this.effects.log(`Runtime reconciliation: ${reason(error)}`);
+            }
+            // State or hints can arrive while an effect is awaited, before a waiter
+            // exists. Observe that work before parking on a future timer.
+            if (this.workGeneration !== observedWork)
+                continue;
+            const pending = this.state?.transaction;
+            await this.wait(pending && pending.phase !== 'parked' ? Math.max(250, pending.notBefore - Date.now()) : 5 * 60_000);
+        }
+    }
+    async fence() {
+        await this.effects.pause();
+        const scope = createHash('sha256').update(JSON.stringify([this.identity.binding, this.identity.user])).digest('hex');
+        const file = join(this.identity.home, '.amalgm', 'owners', `${scope}.sqlite`);
+        const deadline = Date.now() + 30_000;
+        for (;;) {
+            const lease = acquireProcessLease(file);
+            if (lease) {
+                try {
+                    return observedRuntimeFormats(this.identity.serviceDir);
+                }
+                finally {
+                    lease.close();
+                }
+            }
+            if (this.abort.signal.aborted || Date.now() >= deadline)
+                throw new Error('The prior runtime has not released installation ownership');
+            await this.wait(50);
+        }
+    }
+    async perform(token) {
+        const effect = managedUpdateEffect(this.state, Date.now());
+        if (!effect || effect.token !== token)
+            return;
+        const t = effect.transaction;
+        let result;
+        try {
+            if (t.phase === 'stage') {
+                const root = await stageRuntime(this.identity, t.candidate, this.registration.node, this.abort.signal);
+                this.store.write(`artifact:${t.candidate.digest}`, root);
+                result = { type: 'staged' };
+            }
+            else if (t.phase === 'drain') {
+                await this.effects.pause();
+                result = { type: 'drained' };
+            }
+            else if (t.phase === 'fence' || t.phase === 'recovery-fence') {
+                result = { type: 'fenced', epoch: t.phase === 'fence' ? t.previousEpoch : t.epoch, schemas: await this.fence() };
+            }
+            else if (t.phase === 'start' || t.phase === 'recovery-start') {
+                const target = t.phase === 'start' ? t.candidate : t.previous;
+                if (!this.sameCode(target)) {
+                    const launch = this.launch();
+                    if (!launch.pending)
+                        launch.pending = { token, candidate: this.command(t.candidate), recovery: this.command(t.previous), attempted: false, recoveryAttempted: false };
+                    this.persist(this.state, launch);
+                    this.replacing = true;
+                    this.effects.replace();
+                    return;
+                }
+                await this.effects.start();
+                result = { type: 'started', epoch: t.phase === 'start' ? t.epoch : t.recoveryEpoch };
+            }
+            else if (t.phase === 'probe' || t.phase === 'recovery-probe') {
+                await this.effects.probe();
+                result = { type: 'healthy', epoch: t.phase === 'probe' ? t.epoch : t.recoveryEpoch };
+            }
+            else
+                return;
+        }
+        catch (error) {
+            if (this.abort.signal.aborted)
+                return;
+            // Network or installation failure cannot affect the still-running active
+            // release. A failed candidate remains quarantined until a newer target.
+            result = { type: t.phase === 'stage' && error instanceof RuntimeDownloadError ? 'retry' : 'failed', reason: reason(error) };
+        }
+        const previous = this.state;
+        const next = completeManagedUpdateEffect(previous, token, result, Date.now());
+        let launch;
+        if (!next.transaction || next.transaction.phase === 'parked') {
+            launch = this.launch();
+            launch.current = this.command(next.active);
+            launch.pending = null;
+        }
+        this.persist(next, launch);
+        if (next.transaction?.phase === 'parked')
+            await this.effects.pause();
+        if (!next.transaction) {
+            this.projectActive();
+            await collectRuntimeArtifacts(this.identity, retainedManagedReleaseDigests(next));
+        }
+    }
+    async listen() {
+        let backoff = 1_000;
+        const fallback = setInterval(() => this.signal(), 5 * 60_000);
+        fallback.unref();
+        try {
+            while (!this.abort.signal.aborted) {
+                const connection = new AbortController();
+                let idle;
+                const reset = () => { clearTimeout(idle); idle = setTimeout(() => connection.abort(), 75_000); };
+                try {
+                    reset();
+                    const response = await fetch(`${RELEASE_ORIGIN}/trust/runtime/${this.identity.binding.runtimeLabel}/events`, {
+                        redirect: 'error', headers: { accept: 'text/event-stream' }, signal: AbortSignal.any([this.abort.signal, connection.signal])
+                    });
+                    if (!response.ok || !response.body || !response.headers.get('content-type')?.startsWith('text/event-stream'))
+                        throw new Error('Release notifications unavailable');
+                    this.signal();
+                    backoff = 1_000;
+                    const decoder = new TextDecoder();
+                    let pending = '';
+                    for await (const chunk of response.body) {
+                        reset();
+                        pending += decoder.decode(chunk, { stream: true }).replace(/\r/g, '');
+                        if (pending.length > 16_384)
+                            throw new Error('Release notification exceeded its bound');
+                        let end;
+                        while ((end = pending.indexOf('\n\n')) >= 0) {
+                            const event = pending.slice(0, end);
+                            pending = pending.slice(end + 2);
+                            if (/^event: (ready|promotion)$/m.test(event))
+                                this.signal();
+                        }
+                    }
+                }
+                catch { /* Signed current-state reads remain the authority while offline. */ }
+                finally {
+                    clearTimeout(idle);
+                    connection.abort();
+                }
+                if (!this.abort.signal.aborted)
+                    await new Promise(resolve => {
+                        const timer = setTimeout(done, backoff);
+                        const abort = () => done();
+                        function done() { clearTimeout(timer); thisAbort.removeEventListener('abort', abort); resolve(); }
+                        const thisAbort = this.abort.signal;
+                        thisAbort.addEventListener('abort', abort, { once: true });
+                    });
+                backoff = Math.min(backoff * 2, 60_000);
+            }
+        }
+        finally {
+            clearInterval(fallback);
+        }
+    }
+}
+//# sourceMappingURL=controller.js.map

package/dist/updates/controller.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"controller.js","sourceRoot":"","sources":["../../src/updates/controller.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EACL,kBAAkB,EAAE,2BAA2B,EAAE,wBAAwB,EAAE,2BAA2B,EACtG,mBAAmB,EAAE,6BAA6B,GAEnD,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAC/D,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC9C,OAAO,EAAE,gBAAgB,EAAE,iBAAiB,EAA2C,MAAM,4BAA4B,CAAC;AAC1H,OAAO,EAAE,0BAA0B,EAAE,uBAAuB,EAAE,cAAc,EAAE,oBAAoB,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AACzI,OAAO,EAAE,gBAAgB,EAAE,sBAAsB,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAChG,OAAO,EAAE,cAAc,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAY1D,MAAM,MAAM,GAAG,CAAC,KAAc,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,cAAc,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,IAAI,8BAA8B,CAAC;AAEzK;8EAC8E;AAC9E,MAAM,OAAO,cAAc;IAaJ;IAAoC;IAZhD,KAAK,CAAc;IACnB,KAAK,GAAG,IAAI,eAAe,EAAE,CAAC;IAC9B,KAAK,CAAe;IACrB,KAAK,CAA4B;IACjC,GAAG,GAAyB,IAAI,CAAC;IACjC,SAAS,GAAyB,IAAI,CAAC;IACvC,aAAa,GAAyB,IAAI,CAAC;IAC3C,OAAO,GAAG,IAAI,CAAC;IACf,cAAc,GAAG,CAAC,CAAC;IACnB,IAAI,GAAwB,IAAI,CAAC;IACjC,SAAS,GAAG,KAAK,CAAC;IACT,YAAY,CAAe;IAC5C,YAAqB,QAAyB,EAAW,OAA6B;QAAjE,aAAQ,GAAR,QAAQ,CAAiB;QAAW,YAAO,GAAP,OAAO,CAAsB;QACpF,IAAI,CAAC,YAAY,GAAG,gBAAgB,CAAC,QAAQ,CAAE,CAAC;QAChD,IAAI,CAAC,KAAK,GAAG,IAAI,WAAW,CAAC,QAAQ,CAAC,CAAC;QACvC,IAAI,CAAC;YACH,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,OAAO,EAAE,WAAW,EAAE,CAAC,CAAC;YAC/D,IAAI,CAAC,KAAK,GAAG,IAAI,YAAY,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;YAC7D,IAAI,CAAC,wBAAwB,EAAE,CAAC;YAChC,IAAI,IAAI,CAAC,KAAK,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW;gBAAE,IAAI,CAAC,aAAa,EAAE,CAAC;QAClE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAAC,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;YAAC,MAAM,KAAK,CAAC;QAAC,CAAC;IACtD,CAAC;IACD,MAAM,CAAC,OAAO,CAAC,QAAyB;QACtC,OAAO,QAAQ,CAAC,OAAO,CAAC,YAAY,KAAK,OAAO,IAAI,cAAc,EAAE,IAAI,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,UAAU,EAAE,eAAe,CAAC,CAAC,CAAC;IACjI,CAAC;IACD,IAAI,sBAAsB;QACxB,OAAO,IAAI,CAAC,KAAK,KAAK,IAAI,IAAI,IAAI,CAAC,KAAK,CAAC,aAAa,IAAI,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC;IACnJ,CAAC;IACD,IAAI,MAAM;QACR,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,EAAE,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE;YAC9F,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,KAAK,IAAI,SAAS,EAAE,UAAU,EAAE,IAAI,CAAC,KAAK,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,8BAA8B,EAAE,CAAC;IACvI,CAAC;IACD,KAAK;QACH,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAAC,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;IAC5D,CAAC;IACD,KAAK,CAAC,KAAK;QACT,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;QAAC,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC;QAClC,MAAM,OAAO,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,aAAa,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC;QACzE,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;IACrB,CAAC;IACO,OAAO,CAAC,IAAwB,EAAE,MAAoB;QAC5D,IAAI,IAAI,KAAK,IAAI,CAAC,KAAK,IAAI,CAAC,MAAM;YAAE,OAAO;QAC3C,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,EAAE;YACrB,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;YACjD,IAAI,MAAM;gBAAE,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;QACjE,CAAC,CAAC,CAAC;QACH,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;QAAC,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;QAAC,IAAI,CAAC,UAAU,EAAE,CAAC;IAC/D,CAAC;IACO,MAAM,KAAkB,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAE,CAAC,CAAC,CAAC,CAAC;IACxE,OAAO,CAAC,OAA+B;QAC7C,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,YAAY,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;QAC3D,IAAI,CAAC,IAAI;YAAE,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;QAC5E,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,YAAY,CAAC,IAAI,EAAE,GAAG,EAAE,IAAI,CAAC,IAAI,EAAE,cAAc,CAAC,EAAE,IAAI,EAAE,CAAC,GAAG,IAAI,CAAC,YAAY,CAAC,cAAc,CAAC,EAAE,CAAC;IACxH,CAAC;IACD;0EACsE;IAC9D,aAAa;QACnB,MAAM,MAAM,GAAG,IAAI,CAAC,KAAM,CAAC,MAAM,CAAC;QAClC,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QACrC,MAAM,YAAY,GAAG,gBAAgB,CAAC,IAAI,CAAC,QAAQ,CAAE,CAAC;QACtD,iBAAiB,CAAC,IAAI,CAAC,QAAQ,EAAE,EAAE,GAAG,YAAY,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG;YACtF,YAAY,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,YAAY,MAAM,CAAC,MAAM,EAAE,CAAE,EAAE,eAAe,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC;QACnI,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,gCAAgC,EAAE,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,YAAY,EAAE,cAAc,CAAC,EACvH,EAAE,MAAM,EAAE,CAAC,EAAE,YAAY,EAAE,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,YAAY,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;IACrK,CAAC;IACO,QAAQ,CAAC,OAA+B;QAC9C,MAAM,GAAG,GAAG,gBAAgB,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;QAAC,MAAM,QAAQ,GAAG,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;QAClH,OAAO,GAAG,CAAC,OAAO,KAAK,QAAQ,CAAC,OAAO,IAAI,GAAG,CAAC,YAAY,EAAE,MAAM,KAAK,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC;IACjG,CAAC;IACO,wBAAwB;QAC9B,IAAI,CAAC,IAAI,CAAC,KAAK;YAAE,OAAO;QACxB,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC;QACjC,IAAI,CAAC,CAAC,EAAE,CAAC;YACP,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;YAC9G,OAAO;QACT,CAAC;QACD,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;QAC7B,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,iBAAiB,IAAI,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;eAC9F,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC;YAC1C,MAAM,MAAM,GAAG,mBAAmB,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC;YAClF,IAAI,MAAM;gBAAE,IAAI,CAAC,OAAO,CAAC,2BAA2B,CAAC,IAAI,CAAC,KAAK,EAAE,MAAM,CAAC,KAAK,EAC3E,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,iEAAiE,EAAE,EAAE,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;QACvI,CAAC;QACD,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,4DAA4D,CAAC,CAAC;IACxJ,CAAC;IACO,UAAU,KAAW,IAAI,CAAC,cAAc,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC;IAC5D,MAAM,KAAW,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC;IAC1D,KAAK,CAAC,IAAI,CAAC,YAAoB;QACrC,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO;YAAE,OAAO;QACtC,MAAM,IAAI,OAAO,CAAO,OAAO,CAAC,EAAE,GAAG,MAAM,KAAK,GAAG,UAAU,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,GAAG,GAAG,EAAE,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAChJ,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;IACnB,CAAC;IACO,KAAK,CAAC,QAAQ;QACpB,IAAI,IAAI,CAAC,SAAS;YAAE,OAAO,IAAI,CAAC,SAAS,CAAC;QAC1C,IAAI,CAAC,SAAS,GAAG,CAAC,KAAK,IAAI,EAAE;YAC3B,IAAI,CAAC;gBACH,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;oBAChB,MAAM,SAAS,GAAG,gBAAgB,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;oBAC7D,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;oBAC9D,MAAM,SAAS,GAAG,MAAM,YAAY,CAAC,IAAI,CAAC,QAAQ,EAAE,QAAQ,EAAE,IAAI,CAAC,YAAY,CAAC,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;oBACnI,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,YAAY,QAAQ,CAAC,MAAM,EAAE,EAAE,SAAS,CAAC,CAAC;oBAC3D,IAAI,CAAC,OAAO,CAAC,wBAAwB,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,WAAW,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,CAAC;gBAC5F,CAAC;gBACD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,KAAM,CAAC,OAAO,CAAC,CAAC;gBAC9D,IAAI,CAAC,OAAO,CAAC,2BAA2B,CAAC,IAAI,CAAC,KAAM,EAAE,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;YACzF,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO;oBAAE,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,sBAAsB,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YAAC,CAAC;QAC9G,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QAClE,OAAO,IAAI,CAAC,SAAS,CAAC;IACxB,CAAC;IACO,KAAK,CAAC,GAAG;QACf,IAAI,CAAC;YAAC,MAAM,0BAA0B,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAAC,CAAC;QACxD,OAAO,KAAK,EAAE,CAAC;YAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,+BAA+B,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAAC,CAAC;QACnF,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;YACrD,MAAM,YAAY,GAAG,IAAI,CAAC,cAAc,CAAC;YACzC,IAAI,CAAC;gBACH,sEAAsE;gBACtE,uEAAuE;gBACvE,IAAI,IAAI,CAAC,OAAO,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;oBAAC,IAAI,CAAC,OAAO,GAAG,KAAK,CAAC;oBAAC,KAAK,IAAI,CAAC,QAAQ,EAAE,CAAC;gBAAC,CAAC;gBACpF,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;oBACf,IAAI,CAAC,OAAO,CAAC,kBAAkB,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;oBACzD,MAAM,MAAM,GAAG,mBAAmB,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;oBAC3D,IAAI,MAAM;wBAAE,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;gBAC/C,CAAC;YACH,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO;oBAAE,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,2BAA2B,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YAAC,CAAC;YACjH,wEAAwE;YACxE,8DAA8D;YAC9D,IAAI,IAAI,CAAC,cAAc,KAAK,YAAY;gBAAE,SAAS;YACnD,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,EAAE,WAAW,CAAC;YACxC,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,OAAO,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,CAAC;QACtH,CAAC;IACH,CAAC;IACO,KAAK,CAAC,KAAK;QACjB,MAAM,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;QAC3B,MAAM,KAAK,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACrH,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,GAAG,KAAK,SAAS,CAAC,CAAC;QAC9E,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC;QACrC,SAAS,CAAC;YACR,MAAM,KAAK,GAAG,mBAAmB,CAAC,IAAI,CAAC,CAAC;YACxC,IAAI,KAAK,EAAE,CAAC;gBACV,IAAI,CAAC;oBAAC,OAAO,sBAAsB,CAAC,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;gBAAC,CAAC;wBACxD,CAAC;oBAAC,KAAK,CAAC,KAAK,EAAE,CAAC;gBAAC,CAAC;YAC5B,CAAC;YACD,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,QAAQ;gBAAE,MAAM,IAAI,KAAK,CAAC,2DAA2D,CAAC,CAAC;YACtI,MAAM,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACtB,CAAC;IACH,CAAC;IACO,KAAK,CAAC,OAAO,CAAC,KAAa;QACjC,MAAM,MAAM,GAAG,mBAAmB,CAAC,IAAI,CAAC,KAAM,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;QAC5D,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,KAAK,KAAK,KAAK;YAAE,OAAO;QAC9C,MAAM,CAAC,GAAG,MAAM,CAAC,WAAW,CAAC;QAC7B,IAAI,MAA2B,CAAC;QAChC,IAAI,CAAC;YACH,IAAI,CAAC,CAAC,KAAK,KAAK,OAAO,EAAE,CAAC;gBACxB,MAAM,IAAI,GAAG,MAAM,YAAY,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,SAAS,EAAE,IAAI,CAAC,YAAY,CAAC,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;gBACvG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,SAAS,CAAC,MAAM,EAAE,EAAE,IAAI,CAAC,CAAC;gBACzD,MAAM,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;YAC9B,CAAC;iBAAM,IAAI,CAAC,CAAC,KAAK,KAAK,OAAO,EAAE,CAAC;gBAC/B,MAAM,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;gBAAC,MAAM,GAAG,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;YAC3D,CAAC;iBAAM,IAAI,CAAC,CAAC,KAAK,KAAK,OAAO,IAAI,CAAC,CAAC,KAAK,KAAK,gBAAgB,EAAE,CAAC;gBAC/D,MAAM,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,KAAK,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,EAAE,OAAO,EAAE,MAAM,IAAI,CAAC,KAAK,EAAE,EAAE,CAAC;YACnH,CAAC;iBAAM,IAAI,CAAC,CAAC,KAAK,KAAK,OAAO,IAAI,CAAC,CAAC,KAAK,KAAK,gBAAgB,EAAE,CAAC;gBAC/D,MAAM,MAAM,GAAG,CAAC,CAAC,KAAK,KAAK,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;gBAC9D,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;oBAC3B,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;oBAC7B,IAAI,CAAC,MAAM,CAAC,OAAO;wBAAE,MAAM,CAAC,OAAO,GAAG,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,iBAAiB,EAAE,KAAK,EAAE,CAAC;oBACtK,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAM,EAAE,MAAM,CAAC,CAAC;oBAClC,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC;oBAAC,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;oBAAC,OAAO;gBACxD,CAAC;gBACD,MAAM,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;gBAAC,MAAM,GAAG,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,KAAK,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,aAAc,EAAE,CAAC;YACpH,CAAC;iBAAM,IAAI,CAAC,CAAC,KAAK,KAAK,OAAO,IAAI,CAAC,CAAC,KAAK,KAAK,gBAAgB,EAAE,CAAC;gBAC/D,MAAM,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;gBAAC,MAAM,GAAG,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,KAAK,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,aAAc,EAAE,CAAC;YACpH,CAAC;;gBAAM,OAAO;QAChB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO;gBAAE,OAAO;YACtC,yEAAyE;YACzE,wEAAwE;YACxE,MAAM,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,KAAK,OAAO,IAAI,KAAK,YAAY,oBAAoB,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;QAC9H,CAAC;QACD,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAM,CAAC;QAC7B,MAAM,IAAI,GAAG,2BAA2B,CAAC,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;QAC9E,IAAI,MAA+B,CAAC;QACpC,IAAI,CAAC,IAAI,CAAC,WAAW,IAAI,IAAI,CAAC,WAAW,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC7D,MAAM,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;YACvB,MAAM,CAAC,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YAAC,MAAM,CAAC,OAAO,GAAG,IAAI,CAAC;QACpE,CAAC;QACD,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QAC3B,IAAI,IAAI,CAAC,WAAW,EAAE,KAAK,KAAK,QAAQ;YAAE,MAAM,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;QACrE,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;YACtB,IAAI,CAAC,aAAa,EAAE,CAAC;YACrB,MAAM,uBAAuB,CAAC,IAAI,CAAC,QAAQ,EAAE,6BAA6B,CAAC,IAAI,CAAC,CAAC,CAAC;QACpF,CAAC;IACH,CAAC;IACO,KAAK,CAAC,MAAM;QAClB,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,MAAM,QAAQ,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC,GAAG,MAAM,CAAC,CAAC;QAAC,QAAQ,CAAC,KAAK,EAAE,CAAC;QAChF,IAAI,CAAC;YACH,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;gBAClC,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;gBACzC,IAAI,IAAmC,CAAC;gBACxC,MAAM,KAAK,GAAG,GAAG,EAAE,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;gBACjG,IAAI,CAAC;oBACH,KAAK,EAAE,CAAC;oBACR,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,cAAc,kBAAkB,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,YAAY,SAAS,EAAE;wBAC3G,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,mBAAmB,EAAE,EAAE,MAAM,EAAE,WAAW,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,UAAU,CAAC,MAAM,CAAC,CAAC;qBAAE,CAAC,CAAC;oBAClI,IAAI,CAAC,QAAQ,CAAC,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,EAAE,UAAU,CAAC,mBAAmB,CAAC;wBAAE,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;oBACnK,IAAI,CAAC,MAAM,EAAE,CAAC;oBAAC,OAAO,GAAG,KAAK,CAAC;oBAC/B,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAC;oBAAC,IAAI,OAAO,GAAG,EAAE,CAAC;oBACpD,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,QAAQ,CAAC,IAAI,EAAE,CAAC;wBACxC,KAAK,EAAE,CAAC;wBAAC,OAAO,IAAI,OAAO,CAAC,MAAM,CAAC,KAAK,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;wBAC/E,IAAI,OAAO,CAAC,MAAM,GAAG,MAAM;4BAAE,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;wBACxF,IAAI,GAAW,CAAC;wBAChB,OAAO,CAAC,GAAG,GAAG,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;4BAC5C,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;4BAAC,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC;4BACtE,IAAI,6BAA6B,CAAC,IAAI,CAAC,KAAK,CAAC;gCAAE,IAAI,CAAC,MAAM,EAAE,CAAC;wBAC/D,CAAC;oBACH,CAAC;gBACH,CAAC;gBAAC,MAAM,CAAC,CAAC,oEAAoE,CAAC,CAAC;wBACxE,CAAC;oBAAC,YAAY,CAAC,IAAK,CAAC,CAAC;oBAAC,UAAU,CAAC,KAAK,EAAE,CAAC;gBAAC,CAAC;gBACpD,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO;oBAAE,MAAM,IAAI,OAAO,CAAO,OAAO,CAAC,EAAE;wBAChE,MAAM,KAAK,GAAG,UAAU,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;wBACxC,MAAM,KAAK,GAAG,GAAG,EAAE,CAAC,IAAI,EAAE,CAAC;wBAC3B,SAAS,IAAI,KAAK,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,mBAAmB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;wBAClG,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC;wBAAC,SAAS,CAAC,gBAAgB,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;oBAClG,CAAC,CAAC,CAAC;gBACH,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,GAAG,CAAC,EAAE,MAAM,CAAC,CAAC;YAC1C,CAAC;QACH,CAAC;gBAAS,CAAC;YAAC,aAAa,CAAC,QAAQ,CAAC,CAAC;QAAC,CAAC;IACxC,CAAC;CACF"}

package/dist/updates/isolated-command-lifetime.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/updates/isolated-command-lifetime.js

@@ -0,0 +1,63 @@
+/** A staging command owns a native lease and a separate lifetime observer.
+ * The observer can stop this exact process when its parent pipe closes or its
+ * deadline expires, even while the command's main JavaScript thread is busy.
+ * Package lifecycle scripts remain npm-owned effects of the examined graph. */
+import { createConnection } from 'node:net';
+import { isAbsolute, toNamespacedPath } from 'node:path';
+import { DatabaseSync } from 'node:sqlite';
+import { isMainThread, parentPort, Worker, workerData } from 'node:worker_threads';
+function lifetime(value) {
+    const entry = value;
+    if (!entry || typeof entry.file !== 'string' || !isAbsolute(entry.file) || entry.file.includes('\0')
+        || !Number.isSafeInteger(entry.timeout) || entry.timeout < 1 || entry.timeout > 600_000
+        || !Number.isSafeInteger(entry.port) || entry.port < 1 || entry.port > 65535
+        || typeof entry.token !== 'string' || !/^[a-f0-9]{64}$/.test(entry.token))
+        throw new Error('Invalid isolated command lifetime');
+    return entry;
+}
+if (isMainThread) {
+    const input = lifetime(JSON.parse(process.env.AMALGM_ISOLATED_COMMAND_LIFETIME ?? 'null'));
+    delete process.env.AMALGM_ISOLATED_COMMAND_LIFETIME;
+    // This observer belongs to this command, so Worker/fork must inherit the
+    // command's own Node options without inheriting our preload admission.
+    const injected = process.execArgv.indexOf(import.meta.url);
+    if (injected > 0 && process.execArgv[injected - 1] === '--import')
+        process.execArgv.splice(injected - 1, 2);
+    const worker = new Worker(new URL(import.meta.url), { workerData: input });
+    await new Promise((resolve, reject) => {
+        worker.once('error', error => { reject(error); process.kill(process.pid, 'SIGKILL'); });
+        worker.once('exit', () => process.kill(process.pid, 'SIGKILL'));
+        worker.once('message', () => {
+            // Observation must not prevent an otherwise completed npm/preflight
+            // process from exiting naturally and releasing its native lease.
+            worker.unref();
+            resolve();
+        });
+    });
+}
+else {
+    const input = lifetime(workerData);
+    const stop = () => process.kill(process.pid, 'SIGKILL');
+    setTimeout(stop, input.timeout);
+    // The parent creates this directory before spawning. Never recreate a
+    // directory another controller has already proved abandoned and collected.
+    const lease = new DatabaseSync(toNamespacedPath(input.file));
+    lease.exec('PRAGMA busy_timeout = 0; BEGIN EXCLUSIVE;');
+    process.once('exit', () => lease.close());
+    // A dedicated stream has one lifetime owner and cancels cleanly when an
+    // unref'ed observer is terminated during normal process shutdown.
+    const pipe = createConnection({ host: '127.0.0.1', port: input.port });
+    pipe.once('end', stop);
+    pipe.once('close', stop);
+    pipe.once('error', stop);
+    pipe.once('connect', () => pipe.write(input.token + '\n'));
+    let admission = '';
+    pipe.on('data', bytes => {
+        admission += bytes.toString('utf8');
+        if (admission.length > 6 || !'start\n'.startsWith(admission))
+            stop();
+        else if (admission === 'start\n')
+            parentPort.postMessage('ready');
+    });
+}
+//# sourceMappingURL=isolated-command-lifetime.js.map

package/dist/updates/isolated-command-lifetime.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"isolated-command-lifetime.js","sourceRoot":"","sources":["../../src/updates/isolated-command-lifetime.ts"],"names":[],"mappings":"AAAA;;;+EAG+E;AAC/E,OAAO,EAAE,gBAAgB,EAAE,MAAM,UAAU,CAAC;AAC5C,OAAO,EAAE,UAAU,EAAE,gBAAgB,EAAE,MAAM,WAAW,CAAC;AACzD,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC3C,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AAGnF,SAAS,QAAQ,CAAC,KAAc;IAC9B,MAAM,KAAK,GAAG,KAAiB,CAAC;IAChC,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;WAC/F,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC,OAAO,GAAG,CAAC,IAAI,KAAK,CAAC,OAAO,GAAG,OAAO;WACpF,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,IAAI,GAAG,CAAC,IAAI,KAAK,CAAC,IAAI,GAAG,KAAK;WACzE,OAAO,KAAK,CAAC,KAAK,KAAK,QAAQ,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;IAClI,OAAO,KAAK,CAAC;AACf,CAAC;AAED,IAAI,YAAY,EAAE,CAAC;IACjB,MAAM,KAAK,GAAG,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,gCAAgC,IAAI,MAAM,CAAC,CAAC,CAAC;IAC3F,OAAO,OAAO,CAAC,GAAG,CAAC,gCAAgC,CAAC;IACpD,yEAAyE;IACzE,uEAAuE;IACvE,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC3D,IAAI,QAAQ,GAAG,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,QAAQ,GAAG,CAAC,CAAC,KAAK,UAAU;QAAE,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,QAAQ,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;IAC5G,MAAM,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,CAAC;IAC3E,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QAC1C,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,EAAE,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACxF,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC,CAAC;QAChE,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,EAAE;YAC1B,oEAAoE;YACpE,iEAAiE;YACjE,MAAM,CAAC,KAAK,EAAE,CAAC;YAAC,OAAO,EAAE,CAAC;QAC5B,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;KAAM,CAAC;IACN,MAAM,KAAK,GAAG,QAAQ,CAAC,UAAU,CAAC,CAAC;IACnC,MAAM,IAAI,GAAG,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;IACxD,UAAU,CAAC,IAAI,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;IAChC,sEAAsE;IACtE,2EAA2E;IAC3E,MAAM,KAAK,GAAG,IAAI,YAAY,CAAC,gBAAgB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;IAC7D,KAAK,CAAC,IAAI,CAAC,2CAA2C,CAAC,CAAC;IACxD,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC;IAC1C,wEAAwE;IACxE,kEAAkE;IAClE,MAAM,IAAI,GAAG,gBAAgB,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;IACvE,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IAC3E,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,GAAG,IAAI,CAAC,CAAC,CAAC;IAC3D,IAAI,SAAS,GAAG,EAAE,CAAC;IACnB,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,KAAK,CAAC,EAAE;QACtB,SAAS,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QACpC,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,SAAS,CAAC;YAAE,IAAI,EAAE,CAAC;aAChE,IAAI,SAAS,KAAK,SAAS;YAAE,UAAW,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;IACrE,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/updates/store.d.ts

@@ -0,0 +1,41 @@
+import { DatabaseSync } from 'node:sqlite';
+import { type ManagedHost, type ManagedUpdateState } from '@amalgm/core/supervision';
+import type { RuntimeBinding } from '@amalgm/core/binding';
+import type { ServiceIdentity } from '../service/registration.js';
+export declare const RUNTIME_FORMAT: Readonly<{
+    id: "installation";
+    reads: {
+        min: number;
+        max: number;
+    };
+    writes: 1;
+}>;
+export declare const CONTROLLER_PROTOCOL = 1;
+export declare const runtimeHost: () => ManagedHost;
+export declare const packageRoot: string;
+/** The bootstrap and controller use the same native SQLite transaction boundary.
+ * The installation controller lease serializes policy writers. */
+export declare class UpdateStore {
+    readonly identity: ServiceIdentity;
+    readonly database: DatabaseSync;
+    constructor(identity: ServiceIdentity);
+    read(key: string): string | null;
+    write(key: string, value: string): void;
+    atomic<T>(effect: () => T): T;
+    state(binding: RuntimeBinding, host: ManagedHost): ManagedUpdateState | null;
+    close(): void;
+}
+/** Schema 1 names the complete currently shipped installation format, including
+ * its locked SDK stores. Future writers must advance this contract before an
+ * incompatible migration; they never overwrite an unreadable receipt. */
+export declare function admitRuntimeFormat(serviceDir: string): void;
+export declare function observedRuntimeFormats(serviceDir: string): Readonly<Record<string, number>>;
+export declare function installedPackage(root?: string): {
+    name: string;
+    version: string;
+    amalgmSource?: {
+        repository: string;
+        branch: string;
+        commit: string;
+    };
+};

package/dist/updates/store.js

@@ -0,0 +1,80 @@
+import { DatabaseSync } from 'node:sqlite';
+import { mkdirSync, readFileSync } from 'node:fs';
+import { dirname, join, toNamespacedPath } from 'node:path';
+import { fileURLToPath } from 'node:url';
+import { restoreManagedUpdateState, } from '@amalgm/core/supervision';
+export const RUNTIME_FORMAT = Object.freeze({ id: 'installation', reads: { min: 1, max: 1 }, writes: 1 });
+export const CONTROLLER_PROTOCOL = 1;
+export const runtimeHost = () => ({ controllerProtocol: CONTROLLER_PROTOCOL,
+    nodeMajor: Number(process.versions.node.split('.')[0]), platform: `${process.platform}-${process.arch}` });
+export const packageRoot = fileURLToPath(new URL('../../', import.meta.url));
+/** The bootstrap and controller use the same native SQLite transaction boundary.
+ * The installation controller lease serializes policy writers. */
+export class UpdateStore {
+    identity;
+    database;
+    constructor(identity) {
+        this.identity = identity;
+        mkdirSync(identity.serviceDir, { recursive: true, mode: 0o700 });
+        this.database = new DatabaseSync(toNamespacedPath(join(identity.serviceDir, 'updates.sqlite')));
+        this.database.exec('PRAGMA busy_timeout = 5000; PRAGMA journal_mode = WAL; PRAGMA synchronous = FULL; CREATE TABLE IF NOT EXISTS update_state (key TEXT PRIMARY KEY, value TEXT NOT NULL);');
+    }
+    read(key) {
+        return this.database.prepare('SELECT value FROM update_state WHERE key = ?').get(key)?.value ?? null;
+    }
+    write(key, value) {
+        this.database.prepare('INSERT INTO update_state VALUES (?, ?) ON CONFLICT(key) DO UPDATE SET value = excluded.value').run(key, value);
+    }
+    atomic(effect) {
+        this.database.exec('BEGIN IMMEDIATE');
+        try {
+            const result = effect();
+            this.database.exec('COMMIT');
+            return result;
+        }
+        catch (error) {
+            this.database.exec('ROLLBACK');
+            throw error;
+        }
+    }
+    state(binding, host) {
+        const bytes = this.read('policy');
+        return bytes === null ? null : restoreManagedUpdateState(JSON.parse(bytes), binding, host);
+    }
+    close() { this.database.close(); }
+}
+/** Schema 1 names the complete currently shipped installation format, including
+ * its locked SDK stores. Future writers must advance this contract before an
+ * incompatible migration; they never overwrite an unreadable receipt. */
+export function admitRuntimeFormat(serviceDir) {
+    const file = join(serviceDir, 'runtime-format.sqlite');
+    mkdirSync(dirname(file), { recursive: true, mode: 0o700 });
+    const database = new DatabaseSync(toNamespacedPath(file));
+    try {
+        database.exec('PRAGMA synchronous = FULL; CREATE TABLE IF NOT EXISTS runtime_format (id INTEGER PRIMARY KEY CHECK(id = 1), schema INTEGER NOT NULL); BEGIN IMMEDIATE;');
+        const row = database.prepare('SELECT schema FROM runtime_format WHERE id = 1').get();
+        if (row && (row.schema < RUNTIME_FORMAT.reads.min || row.schema > RUNTIME_FORMAT.reads.max))
+            throw new Error('This runtime cannot read the installed state format.');
+        database.prepare('INSERT INTO runtime_format VALUES (1, ?) ON CONFLICT(id) DO UPDATE SET schema = excluded.schema').run(RUNTIME_FORMAT.writes);
+        database.exec('COMMIT');
+    }
+    finally {
+        database.close();
+    }
+}
+export function observedRuntimeFormats(serviceDir) {
+    const database = new DatabaseSync(toNamespacedPath(join(serviceDir, 'runtime-format.sqlite')), { readOnly: true });
+    try {
+        const row = database.prepare('SELECT schema FROM runtime_format WHERE id = 1').get();
+        if (!row || !Number.isSafeInteger(row.schema) || row.schema < 1)
+            throw new Error('The installed state format has no valid receipt.');
+        return { [RUNTIME_FORMAT.id]: row.schema };
+    }
+    finally {
+        database.close();
+    }
+}
+export function installedPackage(root = packageRoot) {
+    return JSON.parse(readFileSync(join(root, 'package.json'), 'utf8'));
+}
+//# sourceMappingURL=store.js.map

package/dist/updates/store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"store.js","sourceRoot":"","sources":["../../src/updates/store.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC3C,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAClD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,gBAAgB,EAAE,MAAM,WAAW,CAAC;AAC5D,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EACL,yBAAyB,GAC1B,MAAM,0BAA0B,CAAC;AAIlC,MAAM,CAAC,MAAM,cAAc,GAAG,MAAM,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,cAAc,EAAE,KAAK,EAAE,EAAE,GAAG,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC,CAAC;AAC1G,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC;AACrC,MAAM,CAAC,MAAM,WAAW,GAAG,GAAgB,EAAE,CAAC,CAAC,EAAE,kBAAkB,EAAE,mBAAmB;IACtF,SAAS,EAAE,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,GAAG,OAAO,CAAC,QAAQ,IAAI,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;AAC7G,MAAM,CAAC,MAAM,WAAW,GAAG,aAAa,CAAC,IAAI,GAAG,CAAC,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;AAE7E;kEACkE;AAClE,MAAM,OAAO,WAAW;IAED;IADZ,QAAQ,CAAe;IAChC,YAAqB,QAAyB;QAAzB,aAAQ,GAAR,QAAQ,CAAiB;QAC5C,SAAS,CAAC,QAAQ,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACjE,IAAI,CAAC,QAAQ,GAAG,IAAI,YAAY,CAAC,gBAAgB,CAAC,IAAI,CAAC,QAAQ,CAAC,UAAU,EAAE,gBAAgB,CAAC,CAAC,CAAC,CAAC;QAChG,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,wKAAwK,CAAC,CAAC;IAC/L,CAAC;IACD,IAAI,CAAC,GAAW;QACd,OAAQ,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,8CAA8C,CAAC,CAAC,GAAG,CAAC,GAAG,CAAmC,EAAE,KAAK,IAAI,IAAI,CAAC;IAC1I,CAAC;IACD,KAAK,CAAC,GAAW,EAAE,KAAa;QAC9B,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,8FAA8F,CAAC,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IACxI,CAAC;IACD,MAAM,CAAI,MAAe;QACvB,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;QACtC,IAAI,CAAC;YAAC,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC;YAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YAAC,OAAO,MAAM,CAAC;QAAC,CAAC;QAC7E,OAAO,KAAK,EAAE,CAAC;YAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YAAC,MAAM,KAAK,CAAC;QAAC,CAAC;IAChE,CAAC;IACD,KAAK,CAAC,OAAuB,EAAE,IAAiB;QAC9C,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAClC,OAAO,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,yBAAyB,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;IAC7F,CAAC;IACD,KAAK,KAAW,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;CACzC;AAED;;yEAEyE;AACzE,MAAM,UAAU,kBAAkB,CAAC,UAAkB;IACnD,MAAM,IAAI,GAAG,IAAI,CAAC,UAAU,EAAE,uBAAuB,CAAC,CAAC;IACvD,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC3D,MAAM,QAAQ,GAAG,IAAI,YAAY,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC;IAC1D,IAAI,CAAC;QACH,QAAQ,CAAC,IAAI,CAAC,wJAAwJ,CAAC,CAAC;QACxK,MAAM,GAAG,GAAG,QAAQ,CAAC,OAAO,CAAC,gDAAgD,CAAC,CAAC,GAAG,EAAoC,CAAC;QACvH,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,GAAG,cAAc,CAAC,KAAK,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,GAAG,cAAc,CAAC,KAAK,CAAC,GAAG,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC;QACrK,QAAQ,CAAC,OAAO,CAAC,iGAAiG,CAAC,CAAC,GAAG,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC;QAC/I,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC1B,CAAC;YAAS,CAAC;QAAC,QAAQ,CAAC,KAAK,EAAE,CAAC;IAAC,CAAC;AACjC,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,UAAkB;IACvD,MAAM,QAAQ,GAAG,IAAI,YAAY,CAAC,gBAAgB,CAAC,IAAI,CAAC,UAAU,EAAE,uBAAuB,CAAC,CAAC,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;IACnH,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,QAAQ,CAAC,OAAO,CAAC,gDAAgD,CAAC,CAAC,GAAG,EAAoC,CAAC;QACvH,IAAI,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;QACrI,OAAO,EAAE,CAAC,cAAc,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,MAAM,EAAE,CAAC;IAC7C,CAAC;YAAS,CAAC;QAAC,QAAQ,CAAC,KAAK,EAAE,CAAC;IAAC,CAAC;AACjC,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,OAAe,WAAW;IACzD,OAAO,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE,cAAc,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC;AACtE,CAAC"}

package/dist/updates/trust.d.ts

@@ -0,0 +1,20 @@
+import { Metadata } from '@tufjs/models';
+import { type AcceptedRuntimeRelease } from '@amalgm/core/supervision';
+import { type UpdateStore } from './store.js';
+export declare const RELEASE_ORIGIN = "https://amalgm-desktop-releases.fly.dev";
+export declare function runtimeRoot(value: unknown, lane: string): Metadata<import("@tufjs/models").Root>;
+/** Intentionally matches Electron's pinned host adapter: TUF owns verification;
+ * SQLite owns the four metadata writes, including partially failed refreshes.
+ * Neither consumer resets trust from a disposable filesystem mirror. */
+export declare class RuntimeTrust {
+    readonly store: UpdateStore;
+    readonly signal: AbortSignal;
+    readonly repository: URL;
+    readonly lane: 'main' | 'preview';
+    constructor(store: UpdateStore, signal: AbortSignal, origin?: string);
+    current(previous?: AcceptedRuntimeRelease): Promise<AcceptedRuntimeRelease>;
+    /** A historical signature identifies existing code; only current() authorizes
+     * a desired release. Expiry cannot retroactively change the installed bytes. */
+    baseline(version: string): Promise<AcceptedRuntimeRelease>;
+    private admit;
+}