@dsh-enhanced/dsh-rsi-cli 0.1.48 → 0.1.49

package/README.md

@@ -22,7 +22,7 @@ dsh-rsi [全局选项] <命令>
 | `logs` | 查看各 profile 的受管 `*-host.log` / `*-host.error.log` 尾部（默认末 200 行）。**只读**。 |
 | `web-url` | 从运行中受管服务的 journal（Linux）或 `*-host.log`（macOS）解析最近一次 `dsh web:` 行，输出带 token 的完整 Web 授权 URL。**只读**，不关闭或绕过 Web 认证；服务未运行时提示先 `dsh-rsi start`。 |
 | `update` | 升级全局 dsh-rsi 自身；加 `--all` 再把插件集合交给安装器 `--operation upgrade` **原地升级**（保留 patch、凭据、Session、Goal）。 |
-| `install` | 安装/修复插件集合：npm 形态下载与本 dsh-rsi 同版本的官方安装器执行，`--local <dir>` 执行 checkout 内安装器；其余参数原样透传。 |
+| `install` | 安装/修复插件集合：默认选择 supervised 自迭代场景；npm 形态下载与本 dsh-rsi 同版本的官方安装器执行，`--local <dir>` 执行 checkout 内安装器。 |
 | `reinstall` | 先 `purge`（默认先备份、同样的安全门控）再立即 `install`，用于干净重装。 |
 | `purge` | 彻底卸载：进程静止检查 → 停服注销 → tar.gz 备份 → 删除 profile / DSH home / 生命周期残留 → 清理外部凭据。 |
 | `version` | 打印版本。 |
@@ -37,14 +37,26 @@ dsh-rsi [全局选项] <命令>
 
 ## install / reinstall（薄委托）
 
-`dsh-rsi install` 不复制任何安装逻辑，只做统一入口与引导器版本固定：
+`dsh-rsi install` 为全新 Home 选择 Host，再调用统一安装器：
+
+`install` 和 `reinstall` 在未指定 `--scenario`、也未指定 `--mode` 时，向安装器显式传入 `--scenario supervised`；`--dry-run` 会展示这一默认场景。完整 supervised 需要 Linux/systemd user services；macOS 可显式选择 `--scenario core` 等轻量场景。显式 `--lark skip` 或 `--no-service` 不追加完整场景，交由统一安装器保留有限场景；它们不能覆盖用户显式选择的 `supervised`。显式 `--scenario` 或旧式 `--mode` 保持安装器原有语义，例如 `--scenario core` 选择 core，`--mode standard` 保留安装器的自动选择。`update --all` 等升级、卸载、恢复及 `install --help` 不采用此默认值。其余参数仍按原顺序透传。
+
+首次飞书身份授权须由平台的授权流程完成。全新 Home 尚无飞书 Bot 时，`supervised --yes` 或管道等非交互执行会在安装前停止；先在交互式终端运行 `dsh-rsi install` 完成 onboarding。安装器保留已有模型选择，并生成路径、签名身份及有期限的授权与有限预算；仍须有可用模型及隔离构建环境。已有 active/paused Automation 需要另行确认 `--ack-existing-automations`，`--yes` 不代替它。授权尚未就绪时，不能把 supervised 安装称为成功。
 
 - **npm 形态（默认）**：下载 `https://raw.githubusercontent.com/22-ai-00/dsh-enhanced/v<本包版本>/scripts/install/install-npm.sh` 到临时目录执行。引导脚本内部会按内嵌 SHA-256 自校验 `common.sh` 等资产，dsh-rsi 不重复 hash 逻辑。**锁定的只是引导脚本与同 tag 的安装器资产，不是插件 cohort 版本**：安装器默认把 `@dsh-enhanced/personal-assistant@latest` 解析为精确版本，再以该版本安装整套 `@dsh-enhanced/*` bundle；要锁定插件版本需透传 `--plugin-version <x.y.z|dist-tag>` 或预设 `DSH_ENHANCED_VERSION`。安装器尾部还会执行 `npm install --global @dsh-enhanced/dsh-rsi-cli@<cohort 版本>`，可能因此把全局 dsh-rsi 升降级到该 cohort 版本。
 - **local 形态**：`--local <checkout 目录>`，直接执行该目录下 `scripts/install/install-local.sh`，并从该 checkout 的 packages/dsh-rsi-cli 全局安装（本地开发 / 无网救机）。
-- 安装器 stdio 与终端直连（交互提示照常），退出码原样透传。
+- 全新、空的 `DSH_HOME` 默认从官方 npm 解析一次 DSH `latest`，当前新安装接受已适配的 `0.2.0-rc.2`（官方 latest，尚非正式稳定版），安装到 `~/.local/share/dsh-enhanced/hosts/<精确版本>`。安装不执行依赖安装脚本；校验 registry integrity、lockfile、实际入口及全部安装文件后，写入 Home 内的私有 `.dsh-rsi-host.json`。不替换全局 DSH。安装器及其生成的常驻服务使用该私有入口，补装 pnpm 后仍保留这个入口的优先级。
+- 重试安装按 Home 绑定读取原精确版本，并核对文件与收据；重试不重新解析 `latest`。受管 Home 的升级入口默认解析官方 `latest`，先核对兼容范围，再通过独立事务迁移 Host；同版本不创建 Host 事务。已有未绑定 Home 保留原 Host。`--dsh-version` 可在首次安装或受管 Home 升级时选择范围内精确版本，不能直接覆盖已有绑定。此路径已在 Linux 验证；macOS/Windows 私有 Host 安装尚未实机验证。直接运行 shell 安装脚本仍使用原有 Host 选择方式。
+- 同一 Home 不支持与旧版或外部安装器并发安装；绑定文件原子发布不等于整个安装流程具有跨程序排他锁。
+- 私有缓存是多个 Home 可共享的安装资源；全量 purge/reinstall 删除 Home 绑定但保留缓存，`--remove-host` 仍只操作全局 npm Host。缓存只含运行程序及收据，不含飞书凭据。
+- 安装器 stdio 与终端直连，退出码原样透传。`--help` / `--dry-run` 不准备私有 Host。
 
 ```bash
-# npm 形态安装 core 场景（其余安装器参数任意透传）
+# npm 形态在交互式终端安装 supervised 场景
+dsh-rsi install
+
+# 已完成飞书 onboarding 后可非交互重试；显式选择 core 也无需飞书
+dsh-rsi install --yes
 dsh-rsi install --scenario core --yes
 
 # local checkout 形态
@@ -53,9 +65,10 @@ dsh-rsi install --local ~/work/github/dsh-enhanced --scenario web
 # 查看安装器支持的全部参数
 dsh-rsi install --help
 
-# 干净重装：先备份+purge，再按相同形态重新安装
-dsh-rsi reinstall --yes
-dsh-rsi reinstall --profile web --yes
+# 干净重装：先备份+purge，再交互式完成新的 supervised onboarding
+dsh-rsi reinstall
+# 若只需轻量场景，可非交互地重装 core
+dsh-rsi reinstall --profile web --scenario core --yes
 ```
 
 `reinstall` 支持的 rsi 侧选项与 `purge` 一致（`--no-backup` / `--keep-keychain` / `--remove-host` / `--profile`）；只有既未加 `--yes` 也未加 `--dry-run` 时才需输入 `purge` 确认——`reinstall --dry-run` 全程无交互、无修改：先打印 purge 计划，再以 `--dry-run` 透传演练安装器（`--dry-run` 同时作用于 purge 与安装两个阶段）。重装阶段默认走 npm 形态；local 重装加 `--local <dir>`。
@@ -79,11 +92,17 @@ dsh-rsi update --all --yes
 
 `update` 选项：
 
-- `--all`：自身升级成功后，自动确认目标 profile 没有运行中 Host，再把插件集合交给同一目标版本的安装器原地升级。用户无需传 `--confirm-dsh-home-stopped` 或重复声明 `--scenario`；安装器从 effective/composed profile 自动识别场景。
+- `--all`：自身升级成功后，把插件集合交给同一目标版本的安装器原地升级；Linux 受管服务由事务停服并恢复，额外或手工启动的 Host 必须先停止。`0.1.49` 起，在已绑定的 Linux Home 继续执行受管 Host 更新；版本相同则跳过。用户无需传 `--confirm-dsh-home-stopped` 或重复声明 `--scenario`；安装器从 effective/composed profile 自动识别场景。
 - `--version <v|tag>`：dsh-rsi 自身的目标版本或 dist-tag（默认 `latest`）。只接受精确版本 `x.y.z`（可带预发布后缀）或纯字母 dist-tag；范围表达式如 `>=0.1.0` 会被拒绝。
 - `--dry-run`：解析出目标版本并打印将执行的命令，不做任何安装。
 - 其余参数在 `--all` 下原样透传给安装器；`--local <dir>` 走 local 形态。显式 `--scenario` 仍可作为一致性断言，但不再是必填项。
 
+### 受管 Host 更新
+
+`0.1.49` 起，已绑定 Linux Home 的受管更新分两步：先完成目标与协调器的同批插件升级，使其具备新版状态读取能力；再在 Home 外准备精确 Host 与原生依赖，停止同一 Home 的受管服务，对完整副本迁移、验证并切换。旧 `0.1` Home 到 `0.2` 不支持普通自动升级，须使用安装指南中的显式联合迁移。Host 阶段失败可能保留已成功更新的插件和旧 Host；整个命令不提供跨两个阶段的原子回退。真实跨版本 Host 更新的验收状态见 [RSI 状态](../../docs/rsi-status.md)。
+
+Host 事务覆盖同一 Home 的其它 profile，保留原配置、owner、历史记录、密钥、授权期限和已用额度。候选服务须重新通过启动与运行验收；中断重试先恢复已有事务，再规划更新。冻结本地源码/cohort 的升级仍不支持。兼容范围外的新 `latest` 会明确报错，须完成适配后才能更新；不会改用 `next` 或替换全局 Host。
+
 ### 三条语义边界
 
 - **自身先行，失败即止**。`--all` 下先升级 dsh-rsi 自身，失败就**不**继续升级 cohort —— 避免用旧版 rsi 的判断去驱动一轮新的 cohort 升级。

package/lib/host-runtime.d.ts

@@ -0,0 +1,36 @@
+export interface ManagedHostRuntime {
+    version: string;
+    root: string;
+    dshPath: string;
+    binDirectory: string;
+    integrity: string;
+    receiptDigest: string;
+}
+export interface ManagedHostCommandResult {
+    exitCode: number;
+    stdout: string;
+    stderr: string;
+}
+export interface ManagedHostRuntimePorts {
+    /** Injectable npm transport for deterministic fixtures. The dsh executable is always run for real. */
+    runNpm?: (args: readonly string[], options: {
+        cwd: string;
+        signal: AbortSignal;
+        timeoutMs: number;
+    }) => Promise<ManagedHostCommandResult>;
+}
+export declare function isSupportedReceiptVersion(version: string): boolean;
+export declare function isSupportedCandidateVersion(version: string): boolean;
+/** Read and independently verify a previously prepared exact version without contacting npm. */
+export declare function readManagedHostRuntime(input: {
+    root: string;
+    version: string;
+    signal?: AbortSignal;
+}): Promise<ManagedHostRuntime>;
+/** Resolve once from the official npm registry, then install exact DSH into an owner-private version directory. */
+export declare function prepareManagedHostRuntime(input: {
+    root: string;
+    selector?: 'latest' | string;
+    signal?: AbortSignal;
+}, ports?: ManagedHostRuntimePorts): Promise<ManagedHostRuntime>;
+//# sourceMappingURL=host-runtime.d.ts.map

package/lib/host-runtime.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"host-runtime.d.ts","sourceRoot":"","sources":["../src/host-runtime.ts"],"names":[],"mappings":"AAcA,MAAM,WAAW,kBAAkB;IACjC,OAAO,EAAE,MAAM,CAAA;IACf,IAAI,EAAE,MAAM,CAAA;IACZ,OAAO,EAAE,MAAM,CAAA;IACf,YAAY,EAAE,MAAM,CAAA;IACpB,SAAS,EAAE,MAAM,CAAA;IACjB,aAAa,EAAE,MAAM,CAAA;CACtB;AAED,MAAM,WAAW,wBAAwB;IACvC,QAAQ,EAAE,MAAM,CAAA;IAChB,MAAM,EAAE,MAAM,CAAA;IACd,MAAM,EAAE,MAAM,CAAA;CACf;AAED,MAAM,WAAW,uBAAuB;IACtC,sGAAsG;IACtG,MAAM,CAAC,EAAE,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,EAAE,OAAO,EAAE;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,WAAW,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,KAAK,OAAO,CAAC,wBAAwB,CAAC,CAAA;CAC1I;AA0BD,wBAAgB,yBAAyB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAGlE;AACD,wBAAgB,2BAA2B,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAEpE;AAgQD,gGAAgG;AAChG,wBAAsB,sBAAsB,CAAC,KAAK,EAAE;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,WAAW,CAAA;CAAE,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAIxI;AAED,mHAAmH;AACnH,wBAAsB,yBAAyB,CAAC,KAAK,EAAE;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,QAAQ,GAAG,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,WAAW,CAAA;CAAE,EAAE,KAAK,GAAE,uBAA4B,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAkC7L"}

package/lib/host-runtime.js

@@ -0,0 +1,400 @@
+import { randomUUID, createHash } from 'node:crypto';
+import { spawn } from 'node:child_process';
+import { createReadStream } from 'node:fs';
+import { chmod, lstat, mkdir, readFile, readdir, readlink, realpath, rename, rm, stat, writeFile } from 'node:fs/promises';
+import { basename, dirname, isAbsolute, join, relative, resolve, sep } from 'node:path';
+const PACKAGE = '@deepseek-ai/dsh';
+const REGISTRY = 'https://registry.npmjs.org/';
+const MAX_OUTPUT = 1024 * 1024;
+const MAX_RECEIPT = 32 * 1024 * 1024;
+const MAX_ENTRIES = 150_000;
+const NPM_TIMEOUT = 8 * 60_000;
+const LOCK_TIMEOUT = 10 * 60_000;
+function fail(message) { throw new Error(`Managed DSH runtime: ${message}`); }
+function sha256(input) { return createHash('sha256').update(input).digest('hex'); }
+function inside(base, path) {
+    const part = relative(base, path);
+    return part === '' || (part !== '..' && !part.startsWith(`..${sep}`) && !isAbsolute(part));
+}
+export function isSupportedReceiptVersion(version) {
+    const match = /^0\.1\.5(?:-rc\.([0-9]{1,6}))?$/u.exec(version);
+    return version === '0.2.0-rc.2' || match !== null && (match[1] === undefined || Number(match[1]) >= 3);
+}
+export function isSupportedCandidateVersion(version) {
+    return version === '0.2.0-rc.2';
+}
+function validReceiptVersion(version) {
+    if (!isSupportedReceiptVersion(version))
+        fail(`unsupported DSH receipt version ${JSON.stringify(version)}`);
+    return version;
+}
+function validCandidateVersion(version) {
+    if (!isSupportedCandidateVersion(version))
+        fail(`unsupported DSH version ${JSON.stringify(version)}; validated candidate is 0.2.0-rc.2`);
+    return version;
+}
+function validIntegrity(integrity) {
+    if (!/^sha512-[A-Za-z0-9+/]+={0,2}$/u.test(integrity))
+        return false;
+    const digest = integrity.slice('sha512-'.length);
+    return Buffer.from(digest, 'base64').length === 64
+        && Buffer.from(digest, 'base64').toString('base64') === digest;
+}
+async function canonicalRoot(root, create) {
+    if (!isAbsolute(root) || resolve(root) !== root)
+        fail('cache root must be an absolute canonical path');
+    if (create)
+        await mkdir(root, { recursive: true, mode: 0o700 });
+    const info = await lstat(root);
+    if (!info.isDirectory() || info.isSymbolicLink())
+        fail('cache root is not a real directory');
+    if (process.getuid !== undefined && info.uid !== process.getuid())
+        fail('cache root is not owned by the current user');
+    if ((info.mode & 0o077) !== 0)
+        fail('cache root must be private (mode 0700)');
+    if (await realpath(root) !== root)
+        fail('cache root contains a symlink or a noncanonical path');
+    return root;
+}
+async function runBounded(command, args, options) {
+    const maxOutput = options.maxOutput ?? MAX_OUTPUT;
+    if (options.signal.aborted)
+        fail('operation cancelled');
+    return await new Promise((resolvePromise, reject) => {
+        const child = spawn(command, [...args], { cwd: options.cwd, shell: false, detached: process.platform !== 'win32', stdio: ['ignore', 'pipe', 'pipe'] });
+        let stdout = '';
+        let stderr = '';
+        let ended = false;
+        let reason;
+        const kill = (why) => {
+            if (reason === undefined)
+                reason = why;
+            if (child.pid !== undefined && process.platform !== 'win32') {
+                try {
+                    process.kill(-child.pid, 'SIGKILL');
+                }
+                catch {
+                    child.kill('SIGKILL');
+                }
+            }
+            else
+                child.kill('SIGKILL');
+        };
+        const timer = setTimeout(() => kill(`timed out after ${options.timeoutMs} ms`), options.timeoutMs);
+        const aborted = () => kill('cancelled');
+        options.signal.addEventListener('abort', aborted, { once: true });
+        const append = (which, chunk) => {
+            if (reason !== undefined)
+                return;
+            if (which === 'stdout')
+                stdout += chunk.toString('utf8');
+            else
+                stderr += chunk.toString('utf8');
+            if (Buffer.byteLength(stdout) + Buffer.byteLength(stderr) > maxOutput) {
+                stdout = stdout.slice(0, maxOutput);
+                stderr = stderr.slice(0, maxOutput);
+                kill(`output exceeded ${maxOutput} bytes`);
+            }
+        };
+        child.stdout?.on('data', (chunk) => append('stdout', chunk));
+        child.stderr?.on('data', (chunk) => append('stderr', chunk));
+        const finish = (error, code) => {
+            if (ended)
+                return;
+            ended = true;
+            clearTimeout(timer);
+            options.signal.removeEventListener('abort', aborted);
+            if (error !== undefined)
+                reject(error);
+            else if (reason !== undefined)
+                reject(new Error(`Managed DSH runtime: process ${basename(command)} ${reason}`));
+            else
+                resolvePromise({ exitCode: code ?? -1, stdout, stderr });
+        };
+        child.on('error', error => finish(new Error(`Managed DSH runtime: cannot start ${basename(command)} (${error.message})`)));
+        child.on('close', code => finish(undefined, code));
+    });
+}
+async function npmCommand(args, cwd, signal, ports) {
+    const result = await (ports.runNpm ?? ((cmdArgs, opts) => runBounded('npm', cmdArgs, opts)))(args, { cwd, signal, timeoutMs: NPM_TIMEOUT });
+    if (result.exitCode !== 0) {
+        // npm diagnostics can echo auth configuration. Report a stable error code, never raw output.
+        const code = /(?:^|\n)npm (?:ERR!|error) code ([A-Z][A-Z0-9_]*)/u.exec(result.stderr)?.[1];
+        fail(`npm ${args[0] ?? 'command'} failed (exit ${result.exitCode}${code === undefined ? '' : `, ${code}`})`);
+    }
+    if (Buffer.byteLength(result.stdout) + Buffer.byteLength(result.stderr) > MAX_OUTPUT)
+        fail('npm output exceeded limit');
+    return result;
+}
+async function resolveMetadata(selector, root, signal, ports) {
+    if (selector !== 'latest')
+        validCandidateVersion(selector);
+    const response = await npmCommand(['view', `${PACKAGE}@${selector}`, 'version', 'dist.integrity', 'dist.tarball', '--json', '--prefer-online', `--registry=${REGISTRY}`], root, signal, ports);
+    let object;
+    try {
+        object = JSON.parse(response.stdout);
+    }
+    catch {
+        fail('npm view did not return valid JSON');
+    }
+    if (object === null || typeof object !== 'object' || Array.isArray(object))
+        fail('npm view returned unexpected metadata');
+    const data = object;
+    const version = data.version;
+    const integrity = data['dist.integrity'];
+    const tarball = data['dist.tarball'];
+    if (typeof version !== 'string' || typeof integrity !== 'string' || typeof tarball !== 'string')
+        fail('npm metadata is incomplete');
+    validCandidateVersion(version);
+    if (selector !== 'latest' && version !== selector)
+        fail('npm resolved a different exact version');
+    if (!validIntegrity(integrity))
+        fail('npm metadata lacks a valid SHA-512 integrity value');
+    const expectedTarball = `${REGISTRY}@deepseek-ai/dsh/-/dsh-${version}.tgz`;
+    if (tarball !== expectedTarball)
+        fail('npm metadata points outside the official DSH tarball');
+    return { version, integrity, tarball };
+}
+async function sha256File(path) {
+    const hash = createHash('sha256');
+    for await (const chunk of createReadStream(path))
+        hash.update(chunk);
+    return hash.digest('hex');
+}
+async function inventory(runtimeRoot) {
+    const entries = [];
+    async function walk(directory) {
+        for (const name of (await readdir(directory)).sort()) {
+            const path = join(directory, name);
+            const rel = relative(runtimeRoot, path).split(sep).join('/');
+            if (rel === 'receipt.json')
+                continue;
+            if (entries.length >= MAX_ENTRIES)
+                fail('runtime inventory exceeds limit');
+            const info = await lstat(path);
+            const mode = info.mode & 0o777;
+            if (info.isDirectory()) {
+                entries.push({ path: rel, type: 'directory', mode });
+                await walk(path);
+            }
+            else if (info.isFile()) {
+                entries.push({ path: rel, type: 'file', mode, sha256: await sha256File(path) });
+            }
+            else if (info.isSymbolicLink()) {
+                const link = await readlink(path);
+                if (isAbsolute(link) || !inside(runtimeRoot, resolve(dirname(path), link)))
+                    fail(`symlink escapes runtime: ${rel}`);
+                const destination = await realpath(path);
+                if (!inside(runtimeRoot, destination))
+                    fail(`symlink escapes runtime: ${rel}`);
+                entries.push({ path: rel, type: 'link', mode, target: link });
+            }
+            else
+                fail(`unsupported runtime file type: ${rel}`);
+        }
+    }
+    await walk(runtimeRoot);
+    return entries;
+}
+async function parseJsonFile(path, maxBytes = MAX_RECEIPT) {
+    const file = await lstat(path);
+    if (!file.isFile() || file.isSymbolicLink() || file.size > maxBytes)
+        fail(`invalid ${basename(path)}`);
+    let parsed;
+    try {
+        parsed = JSON.parse(await readFile(path, 'utf8'));
+    }
+    catch {
+        fail(`invalid JSON in ${basename(path)}`);
+    }
+    if (parsed === null || typeof parsed !== 'object' || Array.isArray(parsed))
+        fail(`invalid ${basename(path)}`);
+    return parsed;
+}
+async function verifyPackage(runtimeRoot, expected, signal) {
+    const lock = await parseJsonFile(join(runtimeRoot, 'package-lock.json'));
+    const packages = lock.packages;
+    if (packages === null || typeof packages !== 'object' || Array.isArray(packages))
+        fail('package-lock lacks packages');
+    const lockedRoot = packages[''];
+    if (lockedRoot === null || typeof lockedRoot !== 'object' || Array.isArray(lockedRoot))
+        fail('package-lock lacks root package');
+    const lockedDependencies = lockedRoot.dependencies;
+    if (lockedDependencies === null || typeof lockedDependencies !== 'object' || Array.isArray(lockedDependencies)
+        || lockedDependencies[PACKAGE] !== expected.version)
+        fail('package-lock root does not pin exact DSH version');
+    const resolved = packages['node_modules/@deepseek-ai/dsh'];
+    if (resolved === null || typeof resolved !== 'object' || Array.isArray(resolved))
+        fail('package-lock lacks DSH');
+    const entry = resolved;
+    if (entry.version !== expected.version || entry.integrity !== expected.integrity || entry.resolved !== expected.tarball)
+        fail('package-lock DSH resolution differs from npm metadata');
+    const rootManifest = await parseJsonFile(join(runtimeRoot, 'package.json'));
+    const dependencies = rootManifest.dependencies;
+    if (dependencies === null || typeof dependencies !== 'object' || Array.isArray(dependencies)
+        || dependencies[PACKAGE] !== expected.version)
+        fail('runtime manifest does not pin exact DSH version');
+    const packageRoot = join(runtimeRoot, 'node_modules', '@deepseek-ai', 'dsh');
+    const manifest = await parseJsonFile(join(packageRoot, 'package.json'));
+    if (manifest.name !== PACKAGE || manifest.version !== expected.version)
+        fail('installed DSH package manifest differs from selected version');
+    const bin = manifest.bin;
+    const binFile = typeof bin === 'object' && bin !== null && !Array.isArray(bin) ? bin.dsh : undefined;
+    if (typeof binFile !== 'string' || binFile.length === 0 || isAbsolute(binFile) || !inside(packageRoot, resolve(packageRoot, binFile)))
+        fail('installed DSH package has invalid bin metadata');
+    const dshPath = join(runtimeRoot, 'node_modules', '.bin', 'dsh');
+    const binInfo = await lstat(dshPath);
+    if (!binInfo.isSymbolicLink() && !binInfo.isFile())
+        fail('installed DSH bin is missing');
+    if (await realpath(dshPath) !== await realpath(resolve(packageRoot, binFile)))
+        fail('installed DSH bin does not match its manifest');
+    if ((await stat(dshPath)).mode & 0o111) {
+        const version = await runBounded(dshPath, ['--version'], { cwd: runtimeRoot, signal, timeoutMs: 20_000, maxOutput: 4096 });
+        if (version.exitCode !== 0 || version.stdout.trim() !== expected.version)
+            fail('installed DSH --version differs from selected version');
+    }
+    else
+        fail('installed DSH bin is not executable');
+    return dshPath;
+}
+async function checkReceipt(root, version, signal) {
+    const runtimeRoot = join(root, version);
+    const info = await lstat(runtimeRoot);
+    if (!info.isDirectory() || info.isSymbolicLink())
+        fail(`runtime ${version} is not a real directory`);
+    if (process.getuid !== undefined && info.uid !== process.getuid())
+        fail(`runtime ${version} is not owned by the current user`);
+    if ((info.mode & 0o077) !== 0)
+        fail(`runtime ${version} is not private`);
+    const receiptPath = join(runtimeRoot, 'receipt.json');
+    const receipt = await parseJsonFile(receiptPath);
+    if (receipt.schemaVersion !== 1 || receipt.version !== version || typeof receipt.integrity !== 'string'
+        || typeof receipt.tarball !== 'string' || !Array.isArray(receipt.entries))
+        fail('runtime receipt is invalid');
+    const expected = { version, integrity: receipt.integrity, tarball: receipt.tarball };
+    if (!validIntegrity(expected.integrity)
+        || expected.tarball !== `${REGISTRY}@deepseek-ai/dsh/-/dsh-${version}.tgz`)
+        fail('runtime receipt metadata is invalid');
+    const actual = await inventory(runtimeRoot);
+    if (JSON.stringify(actual) !== JSON.stringify(receipt.entries))
+        fail(`runtime ${version} file inventory changed`);
+    const dshPath = await verifyPackage(runtimeRoot, expected, signal);
+    const receiptDigest = sha256(JSON.stringify(receipt));
+    return { version, root: runtimeRoot, dshPath, binDirectory: dirname(dshPath), integrity: expected.integrity, receiptDigest };
+}
+async function acquireLock(root, signal) {
+    const lock = join(root, '.prepare.lock');
+    const token = randomUUID();
+    const deadline = Date.now() + LOCK_TIMEOUT;
+    for (;;) {
+        if (signal.aborted)
+            fail('operation cancelled while waiting for runtime lock');
+        let created = false;
+        try {
+            await mkdir(lock, { mode: 0o700 });
+            created = true;
+            await writeFile(join(lock, 'owner.json'), JSON.stringify({ pid: process.pid, token }), { flag: 'wx', mode: 0o600 });
+            return async () => {
+                try {
+                    const owner = JSON.parse(await readFile(join(lock, 'owner.json'), 'utf8'));
+                    if (owner.token === token)
+                        await rm(lock, { recursive: true, force: true });
+                }
+                catch { /* another owner or damaged lock: never remove it */ }
+            };
+        }
+        catch (error) {
+            if (created) {
+                await rm(lock, { recursive: true, force: true });
+                throw error;
+            }
+            if (error.code !== 'EEXIST')
+                throw error;
+            const age = Date.now() - (await stat(lock)).mtimeMs;
+            if (age > 60_000) {
+                try {
+                    const owner = JSON.parse(await readFile(join(lock, 'owner.json'), 'utf8'));
+                    if (typeof owner.pid === 'number' && Number.isInteger(owner.pid) && owner.pid > 0) {
+                        try {
+                            process.kill(owner.pid, 0);
+                        }
+                        catch (err) {
+                            if (err.code === 'ESRCH') {
+                                const stale = join(root, `.stale-${randomUUID()}`);
+                                await rename(lock, stale);
+                                await rm(stale, { recursive: true, force: true });
+                                continue;
+                            }
+                        }
+                    }
+                }
+                catch (error) {
+                    if (error.code === 'ENOENT') {
+                        const stale = join(root, `.stale-${randomUUID()}`);
+                        try {
+                            await rename(lock, stale);
+                            await rm(stale, { recursive: true, force: true });
+                            continue;
+                        }
+                        catch { /* another process may have acquired the lock */ }
+                    }
+                }
+            }
+            if (Date.now() >= deadline)
+                fail('timed out waiting for private runtime lock');
+            await new Promise((done, reject) => {
+                const timer = setTimeout(() => { signal.removeEventListener('abort', abort); done(); }, 100);
+                const abort = () => { clearTimeout(timer); reject(new Error('Managed DSH runtime: operation cancelled')); };
+                signal.addEventListener('abort', abort, { once: true });
+            });
+        }
+    }
+}
+/** Read and independently verify a previously prepared exact version without contacting npm. */
+export async function readManagedHostRuntime(input) {
+    const root = await canonicalRoot(input.root, false);
+    const version = validReceiptVersion(input.version);
+    return await checkReceipt(root, version, input.signal ?? new AbortController().signal);
+}
+/** Resolve once from the official npm registry, then install exact DSH into an owner-private version directory. */
+export async function prepareManagedHostRuntime(input, ports = {}) {
+    const root = await canonicalRoot(input.root, true);
+    const signal = input.signal ?? new AbortController().signal;
+    const release = await acquireLock(root, signal);
+    try {
+        const metadata = await resolveMetadata(input.selector ?? 'latest', root, signal, ports);
+        const runtimeRoot = join(root, metadata.version);
+        try {
+            await lstat(runtimeRoot);
+            const existing = await checkReceipt(root, metadata.version, signal);
+            if (existing.integrity !== metadata.integrity)
+                fail('cached runtime integrity differs from current registry metadata');
+            return existing;
+        }
+        catch (error) {
+            if (error.code !== 'ENOENT')
+                throw error;
+        }
+        const stage = join(root, `.stage-${metadata.version}-${randomUUID()}`);
+        await mkdir(stage, { mode: 0o700 });
+        try {
+            await writeFile(join(stage, 'package.json'), JSON.stringify({ name: 'dsh-enhanced-managed-host', private: true, version: '0.0.0', dependencies: { [PACKAGE]: metadata.version } }) + '\n', { flag: 'wx', mode: 0o600 });
+            await npmCommand(['install', '--prefix', stage, '--ignore-scripts', '--no-audit', '--no-fund', '--package-lock=true', '--save-exact', `--registry=${REGISTRY}`], stage, signal, ports);
+            // Check links and package metadata before executing any installed code.
+            const entries = await inventory(stage);
+            await verifyPackage(stage, metadata, signal);
+            const receipt = { schemaVersion: 1, ...metadata, entries };
+            await writeFile(join(stage, 'receipt.json'), JSON.stringify(receipt) + '\n', { flag: 'wx', mode: 0o600 });
+            await chmod(stage, 0o700);
+            await rename(stage, runtimeRoot);
+            return await checkReceipt(root, metadata.version, signal);
+        }
+        finally {
+            await rm(stage, { recursive: true, force: true });
+        }
+    }
+    finally {
+        await release();
+    }
+}
+//# sourceMappingURL=host-runtime.js.map

package/lib/host-runtime.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"host-runtime.js","sourceRoot":"","sources":["../src/host-runtime.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AACpD,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAA;AAC1C,OAAO,EAAE,gBAAgB,EAAE,MAAM,SAAS,CAAA;AAC1C,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAA;AAC1H,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,WAAW,CAAA;AAEvF,MAAM,OAAO,GAAG,kBAAkB,CAAA;AAClC,MAAM,QAAQ,GAAG,6BAA6B,CAAA;AAC9C,MAAM,UAAU,GAAG,IAAI,GAAG,IAAI,CAAA;AAC9B,MAAM,WAAW,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAA;AACpC,MAAM,WAAW,GAAG,OAAO,CAAA;AAC3B,MAAM,WAAW,GAAG,CAAC,GAAG,MAAM,CAAA;AAC9B,MAAM,YAAY,GAAG,EAAE,GAAG,MAAM,CAAA;AAwChC,SAAS,IAAI,CAAC,OAAe,IAAW,MAAM,IAAI,KAAK,CAAC,wBAAwB,OAAO,EAAE,CAAC,CAAA,CAAC,CAAC;AAC5F,SAAS,MAAM,CAAC,KAAsB,IAAY,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA,CAAC,CAAC;AAC3G,SAAS,MAAM,CAAC,IAAY,EAAE,IAAY;IACxC,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,CAAA;IACjC,OAAO,IAAI,KAAK,EAAE,IAAI,CAAC,IAAI,KAAK,IAAI,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,GAAG,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAA;AAC5F,CAAC;AACD,MAAM,UAAU,yBAAyB,CAAC,OAAe;IACvD,MAAM,KAAK,GAAG,kCAAkC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;IAC9D,OAAO,OAAO,KAAK,YAAY,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,SAAS,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAA;AACxG,CAAC;AACD,MAAM,UAAU,2BAA2B,CAAC,OAAe;IACzD,OAAO,OAAO,KAAK,YAAY,CAAA;AACjC,CAAC;AACD,SAAS,mBAAmB,CAAC,OAAe;IAC1C,IAAI,CAAC,yBAAyB,CAAC,OAAO,CAAC;QAAE,IAAI,CAAC,mCAAmC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,CAAC,CAAA;IAC3G,OAAO,OAAO,CAAA;AAChB,CAAC;AACD,SAAS,qBAAqB,CAAC,OAAe;IAC5C,IAAI,CAAC,2BAA2B,CAAC,OAAO,CAAC;QAAE,IAAI,CAAC,2BAA2B,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,qCAAqC,CAAC,CAAA;IACxI,OAAO,OAAO,CAAA;AAChB,CAAC;AACD,SAAS,cAAc,CAAC,SAAiB;IACvC,IAAI,CAAC,gCAAgC,CAAC,IAAI,CAAC,SAAS,CAAC;QAAE,OAAO,KAAK,CAAA;IACnE,MAAM,MAAM,GAAG,SAAS,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,CAAA;IAChD,OAAO,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,MAAM,KAAK,EAAE;WAC7C,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,KAAK,MAAM,CAAA;AAClE,CAAC;AAED,KAAK,UAAU,aAAa,CAAC,IAAY,EAAE,MAAe;IACxD,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,KAAK,IAAI;QAAE,IAAI,CAAC,+CAA+C,CAAC,CAAA;IACtG,IAAI,MAAM;QAAE,MAAM,KAAK,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAA;IAC/D,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,CAAA;IAC9B,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,IAAI,CAAC,cAAc,EAAE;QAAE,IAAI,CAAC,oCAAoC,CAAC,CAAA;IAC5F,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS,IAAI,IAAI,CAAC,GAAG,KAAK,OAAO,CAAC,MAAM,EAAE;QAAE,IAAI,CAAC,6CAA6C,CAAC,CAAA;IACtH,IAAI,CAAC,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC;QAAE,IAAI,CAAC,wCAAwC,CAAC,CAAA;IAC7E,IAAI,MAAM,QAAQ,CAAC,IAAI,CAAC,KAAK,IAAI;QAAE,IAAI,CAAC,sDAAsD,CAAC,CAAA;IAC/F,OAAO,IAAI,CAAA;AACb,CAAC;AAED,KAAK,UAAU,UAAU,CAAC,OAAe,EAAE,IAAuB,EAAE,OAAoF;IACtJ,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,UAAU,CAAA;IACjD,IAAI,OAAO,CAAC,MAAM,CAAC,OAAO;QAAE,IAAI,CAAC,qBAAqB,CAAC,CAAA;IACvD,OAAO,MAAM,IAAI,OAAO,CAA2B,CAAC,cAAc,EAAE,MAAM,EAAE,EAAE;QAC5E,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,EAAE,CAAC,GAAG,IAAI,CAAC,EAAE,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,CAAA;QACtJ,IAAI,MAAM,GAAG,EAAE,CAAA;QACf,IAAI,MAAM,GAAG,EAAE,CAAA;QACf,IAAI,KAAK,GAAG,KAAK,CAAA;QACjB,IAAI,MAA0B,CAAA;QAC9B,MAAM,IAAI,GAAG,CAAC,GAAW,EAAE,EAAE;YAC3B,IAAI,MAAM,KAAK,SAAS;gBAAE,MAAM,GAAG,GAAG,CAAA;YACtC,IAAI,KAAK,CAAC,GAAG,KAAK,SAAS,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;gBAC5D,IAAI,CAAC;oBAAC,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,SAAS,CAAC,CAAA;gBAAC,CAAC;gBAAC,MAAM,CAAC;oBAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;gBAAC,CAAC;YAC7E,CAAC;;gBAAM,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;QAC9B,CAAC,CAAA;QACD,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,mBAAmB,OAAO,CAAC,SAAS,KAAK,CAAC,EAAE,OAAO,CAAC,SAAS,CAAC,CAAA;QAClG,MAAM,OAAO,GAAG,GAAG,EAAE,CAAC,IAAI,CAAC,WAAW,CAAC,CAAA;QACvC,OAAO,CAAC,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAA;QACjE,MAAM,MAAM,GAAG,CAAC,KAA0B,EAAE,KAAa,EAAE,EAAE;YAC3D,IAAI,MAAM,KAAK,SAAS;gBAAE,OAAM;YAChC,IAAI,KAAK,KAAK,QAAQ;gBAAE,MAAM,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAA;;gBACnD,MAAM,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAA;YACrC,IAAI,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,GAAG,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,GAAG,SAAS,EAAE,CAAC;gBACtE,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,CAAA;gBACnC,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,CAAA;gBACnC,IAAI,CAAC,mBAAmB,SAAS,QAAQ,CAAC,CAAA;YAC5C,CAAC;QACH,CAAC,CAAA;QACD,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE,CAAC,MAAM,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC,CAAA;QACpE,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE,CAAC,MAAM,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC,CAAA;QACpE,MAAM,MAAM,GAAG,CAAC,KAAa,EAAE,IAAoB,EAAE,EAAE;YACrD,IAAI,KAAK;gBAAE,OAAM;YACjB,KAAK,GAAG,IAAI,CAAA;YACZ,YAAY,CAAC,KAAK,CAAC,CAAA;YACnB,OAAO,CAAC,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAA;YACpD,IAAI,KAAK,KAAK,SAAS;gBAAE,MAAM,CAAC,KAAK,CAAC,CAAA;iBACjC,IAAI,MAAM,KAAK,SAAS;gBAAE,MAAM,CAAC,IAAI,KAAK,CAAC,gCAAgC,QAAQ,CAAC,OAAO,CAAC,IAAI,MAAM,EAAE,CAAC,CAAC,CAAA;;gBAC1G,cAAc,CAAC,EAAE,QAAQ,EAAE,IAAI,IAAI,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAA;QAC/D,CAAC,CAAA;QACD,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,KAAK,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,qCAAqC,QAAQ,CAAC,OAAO,CAAC,KAAK,KAAK,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC,CAAA;QAC1H,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC,CAAA;IACpD,CAAC,CAAC,CAAA;AACJ,CAAC;AAED,KAAK,UAAU,UAAU,CAAC,IAAuB,EAAE,GAAW,EAAE,MAAmB,EAAE,KAA8B;IACjH,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,IAAI,CAAC,CAAC,OAAO,EAAE,IAAI,EAAE,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,GAAG,EAAE,MAAM,EAAE,SAAS,EAAE,WAAW,EAAE,CAAC,CAAA;IAC3I,IAAI,MAAM,CAAC,QAAQ,KAAK,CAAC,EAAE,CAAC;QAC1B,6FAA6F;QAC7F,MAAM,IAAI,GAAG,oDAAoD,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAA;QAC1F,IAAI,CAAC,OAAO,IAAI,CAAC,CAAC,CAAC,IAAI,SAAS,iBAAiB,MAAM,CAAC,QAAQ,GAAG,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,GAAG,CAAC,CAAA;IAC9G,CAAC;IACD,IAAI,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,UAAU;QAAE,IAAI,CAAC,2BAA2B,CAAC,CAAA;IACvH,OAAO,MAAM,CAAA;AACf,CAAC;AAED,KAAK,UAAU,eAAe,CAAC,QAAgB,EAAE,IAAY,EAAE,MAAmB,EAAE,KAA8B;IAChH,IAAI,QAAQ,KAAK,QAAQ;QAAE,qBAAqB,CAAC,QAAQ,CAAC,CAAA;IAC1D,MAAM,QAAQ,GAAG,MAAM,UAAU,CAAC,CAAC,MAAM,EAAE,GAAG,OAAO,IAAI,QAAQ,EAAE,EAAE,SAAS,EAAE,gBAAgB,EAAE,cAAc,EAAE,QAAQ,EAAE,iBAAiB,EAAE,cAAc,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,CAAC,CAAA;IAC9L,IAAI,MAAe,CAAA;IACnB,IAAI,CAAC;QAAC,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAA;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,IAAI,CAAC,oCAAoC,CAAC,CAAA;IAAC,CAAC;IACjG,IAAI,MAAM,KAAK,IAAI,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;QAAE,IAAI,CAAC,uCAAuC,CAAC,CAAA;IACzH,MAAM,IAAI,GAAG,MAAiC,CAAA;IAC9C,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAA;IAC5B,MAAM,SAAS,GAAG,IAAI,CAAC,gBAAgB,CAAC,CAAA;IACxC,MAAM,OAAO,GAAG,IAAI,CAAC,cAAc,CAAC,CAAA;IACpC,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,OAAO,OAAO,KAAK,QAAQ;QAAE,IAAI,CAAC,4BAA4B,CAAC,CAAA;IACnI,qBAAqB,CAAC,OAAO,CAAC,CAAA;IAC9B,IAAI,QAAQ,KAAK,QAAQ,IAAI,OAAO,KAAK,QAAQ;QAAE,IAAI,CAAC,wCAAwC,CAAC,CAAA;IACjG,IAAI,CAAC,cAAc,CAAC,SAAS,CAAC;QAAE,IAAI,CAAC,oDAAoD,CAAC,CAAA;IAC1F,MAAM,eAAe,GAAG,GAAG,QAAQ,0BAA0B,OAAO,MAAM,CAAA;IAC1E,IAAI,OAAO,KAAK,eAAe;QAAE,IAAI,CAAC,sDAAsD,CAAC,CAAA;IAC7F,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,CAAA;AACxC,CAAC;AAED,KAAK,UAAU,UAAU,CAAC,IAAY;IACpC,MAAM,IAAI,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAA;IACjC,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,gBAAgB,CAAC,IAAI,CAAC;QAAE,IAAI,CAAC,MAAM,CAAC,KAAe,CAAC,CAAA;IAC9E,OAAO,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;AAC3B,CAAC;AAED,KAAK,UAAU,SAAS,CAAC,WAAmB;IAC1C,MAAM,OAAO,GAAqB,EAAE,CAAA;IACpC,KAAK,UAAU,IAAI,CAAC,SAAiB;QACnC,KAAK,MAAM,IAAI,IAAI,CAAC,MAAM,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;YACrD,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,CAAA;YAClC,MAAM,GAAG,GAAG,QAAQ,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;YAC5D,IAAI,GAAG,KAAK,cAAc;gBAAE,SAAQ;YACpC,IAAI,OAAO,CAAC,MAAM,IAAI,WAAW;gBAAE,IAAI,CAAC,iCAAiC,CAAC,CAAA;YAC1E,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,CAAA;YAC9B,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,GAAG,KAAK,CAAA;YAC9B,IAAI,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC;gBACvB,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAA;gBACpD,MAAM,IAAI,CAAC,IAAI,CAAC,CAAA;YAClB,CAAC;iBAAM,IAAI,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC;gBACzB,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;YACjF,CAAC;iBAAM,IAAI,IAAI,CAAC,cAAc,EAAE,EAAE,CAAC;gBACjC,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,CAAA;gBACjC,IAAI,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,CAAC;oBAAE,IAAI,CAAC,4BAA4B,GAAG,EAAE,CAAC,CAAA;gBACnH,MAAM,WAAW,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,CAAA;gBACxC,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,WAAW,CAAC;oBAAE,IAAI,CAAC,4BAA4B,GAAG,EAAE,CAAC,CAAA;gBAC9E,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAA;YAC/D,CAAC;;gBAAM,IAAI,CAAC,kCAAkC,GAAG,EAAE,CAAC,CAAA;QACtD,CAAC;IACH,CAAC;IACD,MAAM,IAAI,CAAC,WAAW,CAAC,CAAA;IACvB,OAAO,OAAO,CAAA;AAChB,CAAC;AAED,KAAK,UAAU,aAAa,CAAC,IAAY,EAAE,QAAQ,GAAG,WAAW;IAC/D,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,CAAA;IAC9B,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,IAAI,CAAC,cAAc,EAAE,IAAI,IAAI,CAAC,IAAI,GAAG,QAAQ;QAAE,IAAI,CAAC,WAAW,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;IACtG,IAAI,MAAe,CAAA;IACnB,IAAI,CAAC;QAAC,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAA;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,IAAI,CAAC,mBAAmB,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;IAAC,CAAC;IAC7G,IAAI,MAAM,KAAK,IAAI,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;QAAE,IAAI,CAAC,WAAW,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;IAC7G,OAAO,MAAiC,CAAA;AAC1C,CAAC;AAED,KAAK,UAAU,aAAa,CAAC,WAAmB,EAAE,QAAkB,EAAE,MAAmB;IACvF,MAAM,IAAI,GAAG,MAAM,aAAa,CAAC,IAAI,CAAC,WAAW,EAAE,mBAAmB,CAAC,CAAC,CAAA;IACxE,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAA;IAC9B,IAAI,QAAQ,KAAK,IAAI,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC;QAAE,IAAI,CAAC,6BAA6B,CAAC,CAAA;IACrH,MAAM,UAAU,GAAI,QAAoC,CAAC,EAAE,CAAC,CAAA;IAC5D,IAAI,UAAU,KAAK,IAAI,IAAI,OAAO,UAAU,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC;QAAE,IAAI,CAAC,iCAAiC,CAAC,CAAA;IAC/H,MAAM,kBAAkB,GAAI,UAAsC,CAAC,YAAY,CAAA;IAC/E,IAAI,kBAAkB,KAAK,IAAI,IAAI,OAAO,kBAAkB,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,kBAAkB,CAAC;WACxG,kBAA8C,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,OAAO;QAAE,IAAI,CAAC,kDAAkD,CAAC,CAAA;IAC5I,MAAM,QAAQ,GAAI,QAAoC,CAAC,+BAA+B,CAAC,CAAA;IACvF,IAAI,QAAQ,KAAK,IAAI,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC;QAAE,IAAI,CAAC,wBAAwB,CAAC,CAAA;IAChH,MAAM,KAAK,GAAG,QAAmC,CAAA;IACjD,IAAI,KAAK,CAAC,OAAO,KAAK,QAAQ,CAAC,OAAO,IAAI,KAAK,CAAC,SAAS,KAAK,QAAQ,CAAC,SAAS,IAAI,KAAK,CAAC,QAAQ,KAAK,QAAQ,CAAC,OAAO;QAAE,IAAI,CAAC,uDAAuD,CAAC,CAAA;IACtL,MAAM,YAAY,GAAG,MAAM,aAAa,CAAC,IAAI,CAAC,WAAW,EAAE,cAAc,CAAC,CAAC,CAAA;IAC3E,MAAM,YAAY,GAAG,YAAY,CAAC,YAAY,CAAA;IAC9C,IAAI,YAAY,KAAK,IAAI,IAAI,OAAO,YAAY,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,YAAY,CAAC;WACtF,YAAwC,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,OAAO;QAAE,IAAI,CAAC,iDAAiD,CAAC,CAAA;IACrI,MAAM,WAAW,GAAG,IAAI,CAAC,WAAW,EAAE,cAAc,EAAE,cAAc,EAAE,KAAK,CAAC,CAAA;IAC5E,MAAM,QAAQ,GAAG,MAAM,aAAa,CAAC,IAAI,CAAC,WAAW,EAAE,cAAc,CAAC,CAAC,CAAA;IACvE,IAAI,QAAQ,CAAC,IAAI,KAAK,OAAO,IAAI,QAAQ,CAAC,OAAO,KAAK,QAAQ,CAAC,OAAO;QAAE,IAAI,CAAC,8DAA8D,CAAC,CAAA;IAC5I,MAAM,GAAG,GAAG,QAAQ,CAAC,GAAG,CAAA;IACxB,MAAM,OAAO,GAAG,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAE,GAA+B,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAA;IACjI,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,IAAI,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,OAAO,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;QAAE,IAAI,CAAC,gDAAgD,CAAC,CAAA;IAC7L,MAAM,OAAO,GAAG,IAAI,CAAC,WAAW,EAAE,cAAc,EAAE,MAAM,EAAE,KAAK,CAAC,CAAA;IAChE,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,OAAO,CAAC,CAAA;IACpC,IAAI,CAAC,OAAO,CAAC,cAAc,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE;QAAE,IAAI,CAAC,8BAA8B,CAAC,CAAA;IACxF,IAAI,MAAM,QAAQ,CAAC,OAAO,CAAC,KAAK,MAAM,QAAQ,CAAC,OAAO,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;QAAE,IAAI,CAAC,+CAA+C,CAAC,CAAA;IACpI,IAAI,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,GAAG,KAAK,EAAE,CAAC;QACvC,MAAM,OAAO,GAAG,MAAM,UAAU,CAAC,OAAO,EAAE,CAAC,WAAW,CAAC,EAAE,EAAE,GAAG,EAAE,WAAW,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;QAC1H,IAAI,OAAO,CAAC,QAAQ,KAAK,CAAC,IAAI,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,QAAQ,CAAC,OAAO;YAAE,IAAI,CAAC,uDAAuD,CAAC,CAAA;IACzI,CAAC;;QAAM,IAAI,CAAC,qCAAqC,CAAC,CAAA;IAClD,OAAO,OAAO,CAAA;AAChB,CAAC;AAED,KAAK,UAAU,YAAY,CAAC,IAAY,EAAE,OAAe,EAAE,MAAmB;IAC5E,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,CAAA;IACvC,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,WAAW,CAAC,CAAA;IACrC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,IAAI,CAAC,cAAc,EAAE;QAAE,IAAI,CAAC,WAAW,OAAO,0BAA0B,CAAC,CAAA;IACpG,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS,IAAI,IAAI,CAAC,GAAG,KAAK,OAAO,CAAC,MAAM,EAAE;QAAE,IAAI,CAAC,WAAW,OAAO,mCAAmC,CAAC,CAAA;IAC9H,IAAI,CAAC,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC;QAAE,IAAI,CAAC,WAAW,OAAO,iBAAiB,CAAC,CAAA;IACxE,MAAM,WAAW,GAAG,IAAI,CAAC,WAAW,EAAE,cAAc,CAAC,CAAA;IACrD,MAAM,OAAO,GAAG,MAAM,aAAa,CAAC,WAAW,CAA8B,CAAA;IAC7E,IAAI,OAAO,CAAC,aAAa,KAAK,CAAC,IAAI,OAAO,CAAC,OAAO,KAAK,OAAO,IAAI,OAAO,OAAO,CAAC,SAAS,KAAK,QAAQ;WAClG,OAAO,OAAO,CAAC,OAAO,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC;QAAE,IAAI,CAAC,4BAA4B,CAAC,CAAA;IAC/G,MAAM,QAAQ,GAAa,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,CAAA;IAC9F,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,SAAS,CAAC;WAClC,QAAQ,CAAC,OAAO,KAAK,GAAG,QAAQ,0BAA0B,OAAO,MAAM;QAAE,IAAI,CAAC,qCAAqC,CAAC,CAAA;IACzH,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,WAAW,CAAC,CAAA;IAC3C,IAAI,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,OAAO,CAAC;QAAE,IAAI,CAAC,WAAW,OAAO,yBAAyB,CAAC,CAAA;IACjH,MAAM,OAAO,GAAG,MAAM,aAAa,CAAC,WAAW,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAA;IAClE,MAAM,aAAa,GAAG,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAA;IACrD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,YAAY,EAAE,OAAO,CAAC,OAAO,CAAC,EAAE,SAAS,EAAE,QAAQ,CAAC,SAAS,EAAE,aAAa,EAAE,CAAA;AAC9H,CAAC;AAED,KAAK,UAAU,WAAW,CAAC,IAAY,EAAE,MAAmB;IAC1D,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,EAAE,eAAe,CAAC,CAAA;IACxC,MAAM,KAAK,GAAG,UAAU,EAAE,CAAA;IAC1B,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,YAAY,CAAA;IAC1C,SAAS,CAAC;QACR,IAAI,MAAM,CAAC,OAAO;YAAE,IAAI,CAAC,oDAAoD,CAAC,CAAA;QAC9E,IAAI,OAAO,GAAG,KAAK,CAAA;QACnB,IAAI,CAAC;YACH,MAAM,KAAK,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAA;YAClC,OAAO,GAAG,IAAI,CAAA;YACd,MAAM,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,YAAY,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAA;YACnH,OAAO,KAAK,IAAI,EAAE;gBAChB,IAAI,CAAC;oBACH,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,YAAY,CAAC,EAAE,MAAM,CAAC,CAAuB,CAAA;oBAChG,IAAI,KAAK,CAAC,KAAK,KAAK,KAAK;wBAAE,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;gBAC7E,CAAC;gBAAC,MAAM,CAAC,CAAC,oDAAoD,CAAC,CAAC;YAClE,CAAC,CAAA;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,OAAO,EAAE,CAAC;gBACZ,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;gBAChD,MAAM,KAAK,CAAA;YACb,CAAC;YACD,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;gBAAE,MAAM,KAAK,CAAA;YACnE,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAA;YACnD,IAAI,GAAG,GAAG,MAAM,EAAE,CAAC;gBACjB,IAAI,CAAC;oBACH,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,YAAY,CAAC,EAAE,MAAM,CAAC,CAAqB,CAAA;oBAC9F,IAAI,OAAO,KAAK,CAAC,GAAG,KAAK,QAAQ,IAAI,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,GAAG,GAAG,CAAC,EAAE,CAAC;wBAClF,IAAI,CAAC;4BAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAA;wBAAC,CAAC;wBAAC,OAAO,GAAG,EAAE,CAAC;4BAC9C,IAAK,GAA6B,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;gCACpD,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,EAAE,UAAU,UAAU,EAAE,EAAE,CAAC,CAAA;gCAClD,MAAM,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,CAAA;gCACzB,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;gCACjD,SAAQ;4BACV,CAAC;wBACH,CAAC;oBACH,CAAC;gBACH,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;wBACvD,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,EAAE,UAAU,UAAU,EAAE,EAAE,CAAC,CAAA;wBAClD,IAAI,CAAC;4BACH,MAAM,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,CAAA;4BACzB,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;4BACjD,SAAQ;wBACV,CAAC;wBAAC,MAAM,CAAC,CAAC,gDAAgD,CAAC,CAAC;oBAC9D,CAAC;gBACH,CAAC;YACH,CAAC;YACD,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,QAAQ;gBAAE,IAAI,CAAC,4CAA4C,CAAC,CAAA;YAC9E,MAAM,IAAI,OAAO,CAAO,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE;gBACvC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAA,CAAC,CAAC,EAAE,GAAG,CAAC,CAAA;gBAC3F,MAAM,KAAK,GAAG,GAAG,EAAE,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC,CAAA,CAAC,CAAC,CAAA;gBAC1G,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAA;YACzD,CAAC,CAAC,CAAA;QACJ,CAAC;IACH,CAAC;AACH,CAAC;AAED,gGAAgG;AAChG,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAAC,KAA8D;IACzG,MAAM,IAAI,GAAG,MAAM,aAAa,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,CAAA;IACnD,MAAM,OAAO,GAAG,mBAAmB,CAAC,KAAK,CAAC,OAAO,CAAC,CAAA;IAClD,OAAO,MAAM,YAAY,CAAC,IAAI,EAAE,OAAO,EAAE,KAAK,CAAC,MAAM,IAAI,IAAI,eAAe,EAAE,CAAC,MAAM,CAAC,CAAA;AACxF,CAAC;AAED,mHAAmH;AACnH,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAAC,KAA2E,EAAE,QAAiC,EAAE;IAC9J,MAAM,IAAI,GAAG,MAAM,aAAa,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,CAAC,CAAA;IAClD,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,IAAI,IAAI,eAAe,EAAE,CAAC,MAAM,CAAA;IAC3D,MAAM,OAAO,GAAG,MAAM,WAAW,CAAC,IAAI,EAAE,MAAM,CAAC,CAAA;IAC/C,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,eAAe,CAAC,KAAK,CAAC,QAAQ,IAAI,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,CAAC,CAAA;QACvF,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,OAAO,CAAC,CAAA;QAChD,IAAI,CAAC;YACH,MAAM,KAAK,CAAC,WAAW,CAAC,CAAA;YACxB,MAAM,QAAQ,GAAG,MAAM,YAAY,CAAC,IAAI,EAAE,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC,CAAA;YACnE,IAAI,QAAQ,CAAC,SAAS,KAAK,QAAQ,CAAC,SAAS;gBAAE,IAAI,CAAC,iEAAiE,CAAC,CAAA;YACtH,OAAO,QAAQ,CAAA;QACjB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;gBAAE,MAAM,KAAK,CAAA;QACrE,CAAC;QACD,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,EAAE,UAAU,QAAQ,CAAC,OAAO,IAAI,UAAU,EAAE,EAAE,CAAC,CAAA;QACtE,MAAM,KAAK,CAAC,KAAK,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAA;QACnC,IAAI,CAAC;YACH,MAAM,SAAS,CAAC,IAAI,CAAC,KAAK,EAAE,cAAc,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,2BAA2B,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,YAAY,EAAE,EAAE,CAAC,OAAO,CAAC,EAAE,QAAQ,CAAC,OAAO,EAAE,EAAE,CAAC,GAAG,IAAI,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAA;YACvN,MAAM,UAAU,CAAC,CAAC,SAAS,EAAE,UAAU,EAAE,KAAK,EAAE,kBAAkB,EAAE,YAAY,EAAE,WAAW,EAAE,qBAAqB,EAAE,cAAc,EAAE,cAAc,QAAQ,EAAE,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,CAAC,CAAA;YACtL,wEAAwE;YACxE,MAAM,OAAO,GAAG,MAAM,SAAS,CAAC,KAAK,CAAC,CAAA;YACtC,MAAM,aAAa,CAAC,KAAK,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAA;YAC5C,MAAM,OAAO,GAAmB,EAAE,aAAa,EAAE,CAAC,EAAE,GAAG,QAAQ,EAAE,OAAO,EAAE,CAAA;YAC1E,MAAM,SAAS,CAAC,IAAI,CAAC,KAAK,EAAE,cAAc,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,GAAG,IAAI,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAA;YACzG,MAAM,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,CAAA;YACzB,MAAM,MAAM,CAAC,KAAK,EAAE,WAAW,CAAC,CAAA;YAChC,OAAO,MAAM,YAAY,CAAC,IAAI,EAAE,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC,CAAA;QAC3D,CAAC;gBAAS,CAAC;YACT,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;QACnD,CAAC;IACH,CAAC;YAAS,CAAC;QACT,MAAM,OAAO,EAAE,CAAA;IACjB,CAAC;AACH,CAAC"}

package/lib/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,QAAQ,EAAgC,MAAM,YAAY,CAAA;AAGnE,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAA;AACzC,OAAO,EAAE,mBAAmB,EAAE,MAAM,UAAU,CAAA;AAC9C,OAAO,EAA0B,aAAa,EAAE,MAAM,aAAa,CAAA;AAEnE,OAAO,EAKL,wBAAwB,EAIzB,MAAM,eAAe,CAAA;AAGtB,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,YAAY,CAAA;AACjD,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAA;AACzC,OAAO,EAAE,aAAa,EAAE,SAAS,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,eAAe,CAAA;AACtF,OAAO,EAAE,sBAAsB,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,aAAa,CAAA;AACpF,OAAO,EACL,WAAW,EACX,qBAAqB,EACrB,UAAU,EACV,qBAAqB,EACrB,qBAAqB,EACrB,wBAAwB,EACxB,qBAAqB,EACrB,WAAW,GACZ,MAAM,eAAe,CAAA;AACtB,OAAO,EAAE,qBAAqB,EAAE,kBAAkB,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAA;AAC7F,OAAO,EAAE,cAAc,EAAE,MAAM,YAAY,CAAA;AAC3C,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAA;AAgFtC,UAAU,UAAU;IAClB,OAAO,EAAE,MAAM,CAAA;IACf,OAAO,EAAE,MAAM,CAAA;IACf,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,MAAM,EAAE,OAAO,CAAA;IACf,GAAG,EAAE,OAAO,CAAA;IACZ,MAAM,EAAE,OAAO,CAAA;IACf,YAAY,EAAE,OAAO,CAAA;IACrB,UAAU,EAAE,OAAO,CAAA;IACnB,IAAI,EAAE,OAAO,CAAA;IACb,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,wBAAwB;IACxB,KAAK,EAAE,MAAM,CAAA;IACb,iCAAiC;IACjC,UAAU,EAAE,OAAO,CAAA;IACnB,wCAAwC;IACxC,GAAG,EAAE,OAAO,CAAA;IACZ,wCAAwC;IACxC,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB,qCAAqC;IACrC,WAAW,EAAE,MAAM,EAAE,CAAA;CACtB;AA+BD,wBAAgB,SAAS,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,EAAE,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,UAAU,CAwFnG;AAsJD,0DAA0D;AAC1D,MAAM,WAAW,QAAQ;IACvB,KAAK,CAAC,EAAE,OAAO,QAAQ,CAAA;IACvB,OAAO,CAAC,EAAE,OAAO,UAAU,CAAA;IAC3B,UAAU,CAAC,EAAE,OAAO,aAAa,CAAA;IACjC,WAAW,CAAC,EAAE,OAAO,mBAAmB,CAAA;IACxC,kBAAkB,CAAC,EAAE,OAAO,wBAAwB,CAAA;CACrD;AAED,wBAAsB,IAAI,CACxB,IAAI,GAAE,SAAS,MAAM,EAA0B,EAC/C,GAAG,GAAE,MAAM,CAAC,UAAwB,EACpC,IAAI,GAAE,QAAa,GAClB,OAAO,CAAC,MAAM,CAAC,CAwLjB"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,QAAQ,EAAgC,MAAM,YAAY,CAAA;AAGnE,OAAO,EAA0B,UAAU,EAAE,MAAM,cAAc,CAAA;AACjE,OAAO,EAAE,mBAAmB,EAAE,MAAM,UAAU,CAAA;AAC9C,OAAO,EAA0B,aAAa,EAAE,MAAM,aAAa,CAAA;AAEnE,OAAO,EAKL,wBAAwB,EAIzB,MAAM,eAAe,CAAA;AAGtB,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,YAAY,CAAA;AACjD,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAA;AACzC,OAAO,EAAE,aAAa,EAAE,SAAS,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,eAAe,CAAA;AACtF,OAAO,EAAE,sBAAsB,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,aAAa,CAAA;AACpF,OAAO,EACL,WAAW,EACX,qBAAqB,EACrB,UAAU,EACV,qBAAqB,EACrB,qBAAqB,EACrB,wBAAwB,EACxB,qBAAqB,EACrB,WAAW,GACZ,MAAM,eAAe,CAAA;AACtB,OAAO,EAAE,qBAAqB,EAAE,kBAAkB,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAA;AAC7F,OAAO,EAAE,cAAc,EAAE,MAAM,YAAY,CAAA;AAC3C,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAA;AAkFtC,UAAU,UAAU;IAClB,OAAO,EAAE,MAAM,CAAA;IACf,OAAO,EAAE,MAAM,CAAA;IACf,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,MAAM,EAAE,OAAO,CAAA;IACf,GAAG,EAAE,OAAO,CAAA;IACZ,MAAM,EAAE,OAAO,CAAA;IACf,YAAY,EAAE,OAAO,CAAA;IACrB,UAAU,EAAE,OAAO,CAAA;IACnB,IAAI,EAAE,OAAO,CAAA;IACb,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,wBAAwB;IACxB,KAAK,EAAE,MAAM,CAAA;IACb,iCAAiC;IACjC,UAAU,EAAE,OAAO,CAAA;IACnB,wCAAwC;IACxC,GAAG,EAAE,OAAO,CAAA;IACZ,wCAAwC;IACxC,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB,qCAAqC;IACrC,WAAW,EAAE,MAAM,EAAE,CAAA;CACtB;AA+BD,wBAAgB,SAAS,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,EAAE,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,UAAU,CAwFnG;AAsJD,0DAA0D;AAC1D,MAAM,WAAW,QAAQ;IACvB,KAAK,CAAC,EAAE,OAAO,QAAQ,CAAA;IACvB,OAAO,CAAC,EAAE,OAAO,UAAU,CAAA;IAC3B,UAAU,CAAC,EAAE,OAAO,aAAa,CAAA;IACjC,WAAW,CAAC,EAAE,OAAO,mBAAmB,CAAA;IACxC,kBAAkB,CAAC,EAAE,OAAO,wBAAwB,CAAA;CACrD;AAED,wBAAsB,IAAI,CACxB,IAAI,GAAE,SAAS,MAAM,EAA0B,EAC/C,GAAG,GAAE,MAAM,CAAC,UAAwB,EACpC,IAAI,GAAE,QAAa,GAClB,OAAO,CAAC,MAAM,CAAC,CA+LjB"}

package/lib/index.js

@@ -3,7 +3,7 @@ import { createInterface } from 'node:readline/promises';
 import { runPurge, PurgeError } from "./purge.js";
 import { collectStatus, formatStatus, formatFindings, runDoctor } from "./diagnose.js";
 import { resolveDshHome } from "./paths.js";
-import { runInstall } from "./install.js";
+import { hasPendingHostRecovery, runInstall } from "./install.js";
 import { findRunningProfiles } from "./run.js";
 import { formatSelfUpdateReport, runSelfUpdate } from "./update.js";
 import { formatWebUrlResult, resolveManagedWebUrl } from "./weburl.js";
@@ -53,8 +53,10 @@ install / reinstall：
 update：
   不带参数            只升级全局 dsh-rsi 自身（npm install --global @dsh-enhanced/dsh-rsi-cli@latest）；
                       若当前仍由旧包 @dsh-enhanced/rsi-cli 安装，会在新包可用后自动卸载旧包。
-  --all               自身升级成功后，再把插件集合交给官方安装器 --operation upgrade 原地升级
-                      （保留 patch、凭据、Session、Goal 等状态；不同于 reinstall 的先 purge 再装）
+  --all               自身升级成功后，先升级插件集合，再将已绑定的私有 Host 更新到最新兼容版本；
+                      保留 patch、凭据、Session、Goal 等状态
+  --dsh-version <v>   --all 时指定兼容的私有 Host 版本；默认 latest（现有未绑定 Home 保持原 Host）
+                      Host 事务覆盖同一 DSH_HOME 下全部已登记受管 unit，即使 --profile 只升级一个 cohort
   --version <v|tag>   指定 dsh-rsi 目标版本或 dist-tag（默认 latest）
   --local <dir>       --all 时走 local 形态，用该 checkout 的安装器升级
   其它参数            --all 时原样透传给安装器；通常无需再写 --scenario 或内部确认参数
@@ -491,6 +493,26 @@ export async function main(argv = process.argv.slice(2), env = process.env, deps
                 process.stdout.write(`${formatSelfUpdateReport(report, args.dryRun)}\n`);
                 if (!args.all)
                     return 0;
+                const passthrough = [...args.passthrough];
+                if (!passthrough.includes('--operation'))
+                    passthrough.push('--operation', 'upgrade');
+                if (!passthrough.includes('--confirm-dsh-home-stopped')) {
+                    passthrough.push('--confirm-dsh-home-stopped');
+                }
+                const releaseVersion = report.installedVersion
+                    ?? report.resolvedVersion
+                    ?? (/^\d+\.\d+\.\d+(?:-[0-9A-Za-z.-]+)?$/u.test(report.selector) ? report.selector : undefined);
+                if (releaseVersion === undefined) {
+                    throw new PurgeError('无法把 dsh-rsi 目标 selector 解析为精确发布版本；为避免 CLI 与安装器版本错配，未开始插件升级。');
+                }
+                if (!args.dryRun && await hasPendingHostRecovery(args.dshHome)) {
+                    const recovery = await install({
+                        ...buildInstallOptions(args), releaseRef: `v${releaseVersion}`, passthrough,
+                        recoveryOnly: true,
+                    });
+                    if (recovery !== 0)
+                        return recovery;
+                }
                 const profiles = args.profile === undefined
                     ? await resolveTargetProfiles(args.dshHome)
                     : [args.profile];
@@ -512,18 +534,6 @@ export async function main(argv = process.argv.slice(2), env = process.env, deps
                 process.stdout.write(managed.pids.length > 0
                     ? '\n插件集合升级：已确认除受管服务外没有其它 Host；生命周期事务将安全停服、升级并恢复。\n'
                     : '\n插件集合升级：已确认目标 profile 无运行中 Host，正在继承现有部署场景并原地升级。\n');
-                const passthrough = [...args.passthrough];
-                if (!passthrough.includes('--operation'))
-                    passthrough.push('--operation', 'upgrade');
-                if (!passthrough.includes('--confirm-dsh-home-stopped')) {
-                    passthrough.push('--confirm-dsh-home-stopped');
-                }
-                const releaseVersion = report.installedVersion
-                    ?? report.resolvedVersion
-                    ?? (/^\d+\.\d+\.\d+(?:-[0-9A-Za-z.-]+)?$/u.test(report.selector) ? report.selector : undefined);
-                if (releaseVersion === undefined) {
-                    throw new PurgeError('无法把 dsh-rsi 目标 selector 解析为精确发布版本；为避免 CLI 与安装器版本错配，未开始插件升级。');
-                }
                 return await install({
                     ...buildInstallOptions(args),
                     releaseRef: `v${releaseVersion}`,