@dsh-enhanced/lark-channel 0.1.47 → 0.1.49

package/lib/rsi-local-pair-install.js

@@ -0,0 +1,200 @@
+import { createHash, randomUUID } from 'node:crypto';
+import { lstat, realpath, rename, unlink } from 'node:fs/promises';
+import { join } from 'node:path';
+import { isDeepStrictEqual } from 'node:util';
+import { rsiBuildResources as io } from './rsi-build.js';
+import { rsiCoordinatorProfile } from './rsi-install.js';
+import { readRsiLocalCohort, verifyRsiLocalInstalledPackages, verifyRsiLocalInstalledPackagesFresh, rsiLocalPeerOverrides } from './rsi-local-cohort.js';
+import { installRsiLocalProfile } from './rsi-local-install.js';
+import { assertRsiLocalProfileRoots, rebaseRsiLocalProfileWorkspace } from './rsi-local-profile-update.js';
+import { rsiLocalUpdateBundles, rsiMemoryLearningInitialRow } from './rsi-local-roots-extension.js';
+import { isMap, isScalar, isSeq, parseDocument } from 'yaml';
+const coordinatorBundles = ['assistant-policy', 'assistant-automations', 'plugin-control-plane'];
+const hash = (source) => createHash('sha256').update(source).digest('hex');
+function fail(message) { throw new Error(`rsi local pair install: ${message}`); }
+const ports = { install: installRsiLocalProfile, verify: verifyRsiLocalInstalledPackagesFresh };
+async function replace(path, before, after) {
+    const temporary = `${path}.rsi-update-${randomUUID()}`;
+    try {
+        await io.writeExclusive(temporary, after);
+        if (!(await io.readStable(path, 2_097_152)).equals(before))
+            fail(`file changed before replacement: ${path}`);
+        await rename(temporary, path);
+    }
+    finally {
+        await unlink(temporary).catch(error => { if (error.code !== 'ENOENT')
+            throw error; });
+    }
+}
+export async function stageRsiLocalPairPackages(input, dependencies = ports) {
+    return { ...await stageRsiLocalPackages(input, dependencies, true), coordinatorProfile: rsiCoordinatorProfile(input.profile) };
+}
+/** Package-only step for an explicitly verified pre-owner installation. The
+ * outer transaction must also prove the absence of owner authority, stage signed
+ * source maintenance and own stop/copy/switch/recovery. Never splits an existing
+ * coordinator pair, even if its receipt or profile has been partly removed. */
+export async function stageRsiLocalSinglePackages(input, dependencies = ports) {
+    return stageRsiLocalPackages(input, dependencies, false);
+}
+async function absent(path) {
+    try {
+        await lstat(path);
+        return false;
+    }
+    catch (error) {
+        if (error.code === 'ENOENT')
+            return true;
+        throw error;
+    }
+}
+function assertNoLearnerPatchReference(source) {
+    const document = parseDocument(source, { uniqueKeys: true,
+        customTags: [{ tag: 'tag:yaml.org,2002:js', resolve: (value) => value }] });
+    if (document.errors.length || document.warnings.length || !isSeq(document.contents))
+        fail('profile patch is invalid');
+    const inspect = (node) => {
+        if (isScalar(node) && typeof node.value === 'string'
+            && (node.value.includes(rsiMemoryLearningInitialRow.id) || node.value.includes(rsiMemoryLearningInitialRow.name))) {
+            fail('profile patch already references the memory learner');
+        }
+        if (isMap(node))
+            for (const pair of node.items) {
+                inspect(pair.key);
+                inspect(pair.value);
+            }
+        if (isSeq(node))
+            for (const item of node.items)
+                inspect(item);
+    };
+    inspect(document.contents);
+}
+function assertExpectedLearnerManifest(before, after, candidate) {
+    const expected = JSON.parse(before.toString('utf8'));
+    const actual = JSON.parse(after.toString('utf8'));
+    const name = rsiMemoryLearningInitialRow.name;
+    const learner = candidate.packages.find(item => item.name === name && item.bundle);
+    if (!learner)
+        fail('candidate memory learner bundle is absent');
+    const dependencies = actual.dependencies;
+    const locator = dependencies && typeof dependencies === 'object' && !Array.isArray(dependencies)
+        ? dependencies[name] : undefined;
+    if (typeof locator !== 'string' || !locator.startsWith('file:'))
+        fail('memory learner manifest dependency is missing');
+    const mounted = actual.dsh && typeof actual.dsh === 'object' && !Array.isArray(actual.dsh)
+        ? actual.dsh.profile : undefined;
+    const bundles = mounted && typeof mounted === 'object' && !Array.isArray(mounted)
+        ? mounted.bundles : undefined;
+    const oldDsh = expected.dsh;
+    const oldProfile = oldDsh.profile;
+    if (!Array.isArray(bundles) || !Array.isArray(oldProfile.bundles)
+        || !isDeepStrictEqual(bundles, [...oldProfile.bundles, name]))
+        fail('memory learner mounted bundle changed unexpectedly');
+    delete dependencies[name];
+    bundles.pop();
+    if (!isDeepStrictEqual(actual, expected))
+        fail('owner manifest changed beyond the memory learner root');
+}
+async function stageRsiLocalPackages(input, dependencies, paired) {
+    const { dshHome, profile, originalCohort, signal } = input;
+    signal.throwIfAborted();
+    if (paired && input.rootExtension)
+        fail('paired installation cannot extend bundle roots');
+    if (await realpath(dshHome) !== dshHome)
+        fail('Home is not canonical');
+    const coordinatorProfile = rsiCoordinatorProfile(profile);
+    const candidate = await readRsiLocalCohort({ dshHome, profile });
+    const targetBundles = rsiLocalUpdateBundles(originalCohort.bundles, input.rootExtension);
+    if (!isDeepStrictEqual(candidate.bundles, targetBundles))
+        fail('candidate cohort bundle roots differ');
+    const receiptPath = join(dshHome, `.rsi-coordinator-${hash(profile).slice(0, 16)}.json`);
+    const assertSingle = async () => {
+        if (!await absent(receiptPath) || !await absent(join(dshHome, 'profiles', coordinatorProfile))) {
+            fail('single-profile update cannot split an existing or incomplete coordinator pair');
+        }
+    };
+    if (!paired)
+        await assertSingle();
+    const receiptSource = paired ? await io.readStable(receiptPath, 65_536, true) : undefined;
+    const receipt = { schemaVersion: 1, targetProfile: profile, coordinatorProfile,
+        version: originalCohort.version, sourceRepository: originalCohort.sourceRepository };
+    if (receiptSource && !isDeepStrictEqual(JSON.parse(receiptSource.toString('utf8')), receipt))
+        fail('coordinator receipt differs');
+    const nextReceipt = JSON.stringify({ ...receipt, version: candidate.version });
+    const snapshots = [];
+    const profiles = paired
+        ? [[profile, originalCohort.bundles], [coordinatorProfile, coordinatorBundles]]
+        : [[profile, originalCohort.bundles]];
+    for (const [name, bundles] of profiles) {
+        signal.throwIfAborted();
+        const root = join(dshHome, 'profiles', name);
+        await io.directory(root, false);
+        const read = async (name) => {
+            const path = join(root, name);
+            if (await realpath(path) !== path)
+                fail(`profile metadata is not physical: ${path}`);
+            return io.readStable(path, 2_097_152);
+        };
+        const manifest = await read('package.json'), patch = await read('cordis.patch.yml');
+        const workspace = await read('pnpm-workspace.yaml');
+        assertRsiLocalProfileRoots({ source: manifest.toString('utf8'), cohort: originalCohort, bundles });
+        if (input.rootExtension)
+            assertNoLearnerPatchReference(patch.toString('utf8'));
+        const nextBundles = input.rootExtension ? targetBundles : [...bundles];
+        const nextWorkspace = rebaseRsiLocalProfileWorkspace({ source: workspace.toString('utf8'), original: originalCohort, candidate, bundles,
+            ...(input.rootExtension ? { rootExtension: input.rootExtension } : {}),
+            originalPeers: await rsiLocalPeerOverrides({ cohort: originalCohort, bundles, profilePath: root }),
+            candidatePeers: await rsiLocalPeerOverrides({ cohort: candidate, bundles: nextBundles }) });
+        await dependencies.verify({ cohort: originalCohort, profilePath: root, bundles: [...bundles] }, signal);
+        snapshots.push({ name, root, bundles: nextBundles, manifest, patch, workspace, nextWorkspace });
+    }
+    // All old package inventories and both configurations must pass before the
+    // first write or package-manager invocation.
+    if (receiptSource && !(await io.readStable(receiptPath, 65_536, true)).equals(receiptSource))
+        fail('coordinator receipt changed');
+    if (!paired)
+        await assertSingle();
+    for (const snapshot of snapshots)
+        for (const [name, expected] of [
+            ['package.json', snapshot.manifest], ['cordis.patch.yml', snapshot.patch], ['pnpm-workspace.yaml', snapshot.workspace],
+        ])
+            if (!(await io.readStable(join(snapshot.root, name), 2_097_152)).equals(expected))
+                fail(`profile changed before installation: ${snapshot.name}`);
+    for (const snapshot of snapshots) {
+        signal.throwIfAborted();
+        await replace(join(snapshot.root, 'pnpm-workspace.yaml'), snapshot.workspace, snapshot.nextWorkspace);
+        await io.syncDirectory(snapshot.root);
+        await dependencies.install({ dshHome, profile: snapshot.name, cohort: candidate,
+            bundles: snapshot.bundles, dsh: input.dsh, signal });
+    }
+    const files = {};
+    for (const snapshot of snapshots) {
+        signal.throwIfAborted();
+        await dependencies.verify({ cohort: candidate, profilePath: snapshot.root, bundles: [...snapshot.bundles] }, signal);
+        const manifest = await io.readStable(join(snapshot.root, 'package.json'), 2_097_152);
+        // Native plugin add may introduce only the one explicit pre-owner root.
+        if (input.rootExtension)
+            assertExpectedLearnerManifest(snapshot.manifest, manifest, candidate);
+        else if (!isDeepStrictEqual(JSON.parse(manifest.toString('utf8')), JSON.parse(snapshot.manifest.toString('utf8'))))
+            fail(`owner manifest changed: ${snapshot.name}`);
+        assertRsiLocalProfileRoots({ source: manifest.toString('utf8'), cohort: candidate, bundles: snapshot.bundles });
+        const patch = await io.readStable(join(snapshot.root, 'cordis.patch.yml'), 2_097_152);
+        const workspace = await io.readStable(join(snapshot.root, 'pnpm-workspace.yaml'), 2_097_152);
+        if (!patch.equals(snapshot.patch) || workspace.toString('utf8') !== snapshot.nextWorkspace)
+            fail(`owner patch or workspace changed: ${snapshot.name}`);
+        for (const [name, source] of [['package.json', manifest], ['cordis.patch.yml', patch], ['pnpm-workspace.yaml', workspace]])
+            files[join(snapshot.root, name)] = hash(source);
+        files[join(snapshot.root, 'pnpm-lock.yaml')] = hash(await io.readStable(join(snapshot.root, 'pnpm-lock.yaml'), 16_777_216));
+    }
+    if (!isDeepStrictEqual(await readRsiLocalCohort({ dshHome, profile }), candidate))
+        fail('candidate cohort changed');
+    signal.throwIfAborted();
+    if (receiptSource) {
+        await replace(receiptPath, receiptSource, nextReceipt);
+        await io.syncDirectory(dshHome);
+        files[receiptPath] = hash(nextReceipt);
+    }
+    else
+        await assertSingle();
+    return { schemaVersion: 1, profile, cohortDigest: candidate.receiptDigest, files };
+}
+//# sourceMappingURL=rsi-local-pair-install.js.map

package/lib/rsi-local-pair-install.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rsi-local-pair-install.js","sourceRoot":"","sources":["../src/rsi-local-pair-install.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AACpD,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAA;AAClE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAChC,OAAO,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAA;AAC7C,OAAO,EAAE,iBAAiB,IAAI,EAAE,EAAE,MAAM,gBAAgB,CAAA;AACxD,OAAO,EAAE,qBAAqB,EAAE,MAAM,kBAAkB,CAAA;AAExD,OAAO,EAAE,kBAAkB,EAAE,+BAA+B,EAAE,oCAAoC,EAAE,qBAAqB,EAAuB,MAAM,uBAAuB,CAAA;AAC7K,OAAO,EAAE,sBAAsB,EAAE,MAAM,wBAAwB,CAAA;AAC/D,OAAO,EAAE,0BAA0B,EAAE,8BAA8B,EAAE,MAAM,+BAA+B,CAAA;AAC1G,OAAO,EAAE,qBAAqB,EAAE,2BAA2B,EAA8B,MAAM,gCAAgC,CAAA;AAC/H,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,aAAa,EAAE,MAAM,MAAM,CAAA;AAE5D,MAAM,kBAAkB,GAAG,CAAC,kBAAkB,EAAE,uBAAuB,EAAE,sBAAsB,CAAC,CAAA;AAChG,MAAM,IAAI,GAAG,CAAC,MAAuB,EAAU,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;AACnG,SAAS,IAAI,CAAC,OAAe,IAAW,MAAM,IAAI,KAAK,CAAC,2BAA2B,OAAO,EAAE,CAAC,CAAA,CAAC,CAAC;AAc/F,MAAM,KAAK,GAA6B,EAAE,OAAO,EAAE,sBAAsB,EAAE,MAAM,EAAE,oCAAoC,EAAE,CAAA;AAEzH,KAAK,UAAU,OAAO,CAAC,IAAY,EAAE,MAAc,EAAE,KAAa;IAChE,MAAM,SAAS,GAAG,GAAG,IAAI,eAAe,UAAU,EAAE,EAAE,CAAA;IACtD,IAAI,CAAC;QACH,MAAM,EAAE,CAAC,cAAc,CAAC,SAAS,EAAE,KAAK,CAAC,CAAA;QACzC,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC,UAAU,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC;YAAE,IAAI,CAAC,oCAAoC,IAAI,EAAE,CAAC,CAAA;QAC5G,MAAM,MAAM,CAAC,SAAS,EAAE,IAAI,CAAC,CAAA;IAC/B,CAAC;YAAS,CAAC;QACT,MAAM,MAAM,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,GAAG,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,MAAM,KAAK,CAAA,CAAC,CAAC,CAAC,CAAA;IACjH,CAAC;AACH,CAAC;AAaD,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAAC,KAA2B,EACzE,eAAyC,KAAK;IAC9C,OAAO,EAAE,GAAG,MAAM,qBAAqB,CAAC,KAAK,EAAE,YAAY,EAAE,IAAI,CAAC,EAAE,kBAAkB,EAAE,qBAAqB,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAA;AAChI,CAAC;AAED;;;+EAG+E;AAC/E,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAAC,KAA2B,EAC3E,eAAyC,KAAK;IAC9C,OAAO,qBAAqB,CAAC,KAAK,EAAE,YAAY,EAAE,KAAK,CAAC,CAAA;AAC1D,CAAC;AAED,KAAK,UAAU,MAAM,CAAC,IAAY;IAChC,IAAI,CAAC;QAAC,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC;QAAC,OAAO,KAAK,CAAA;IAAC,CAAC;IACvC,OAAO,KAAK,EAAE,CAAC;QAAC,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC;QAAC,MAAM,KAAK,CAAA;IAAC,CAAC;AACpG,CAAC;AAED,SAAS,6BAA6B,CAAC,MAAc;IACnD,MAAM,QAAQ,GAAG,aAAa,CAAC,MAAM,EAAE,EAAE,UAAU,EAAE,IAAI;QACvD,UAAU,EAAE,CAAC,EAAE,GAAG,EAAE,sBAAsB,EAAE,OAAO,EAAE,CAAC,KAAa,EAAE,EAAE,CAAC,KAAK,EAAE,CAAC,EAAE,CAAC,CAAA;IACrF,IAAI,QAAQ,CAAC,MAAM,CAAC,MAAM,IAAI,QAAQ,CAAC,QAAQ,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAAE,IAAI,CAAC,0BAA0B,CAAC,CAAA;IACrH,MAAM,OAAO,GAAG,CAAC,IAAa,EAAQ,EAAE;QACtC,IAAI,QAAQ,CAAC,IAAI,CAAC,IAAI,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ;eAC/C,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,2BAA2B,CAAC,EAAE,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,2BAA2B,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;YACpH,IAAI,CAAC,qDAAqD,CAAC,CAAA;QAC7D,CAAC;QACD,IAAI,KAAK,CAAC,IAAI,CAAC;YAAE,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;gBAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;gBAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;YAAC,CAAC;QAC1F,IAAI,KAAK,CAAC,IAAI,CAAC;YAAE,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK;gBAAE,OAAO,CAAC,IAAI,CAAC,CAAA;IAC/D,CAAC,CAAA;IACD,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAA;AAC5B,CAAC;AAED,SAAS,6BAA6B,CAAC,MAAc,EAAE,KAAa,EAAE,SAAyB;IAC7F,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAA4B,CAAA;IAC/E,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAA4B,CAAA;IAC5E,MAAM,IAAI,GAAG,2BAA2B,CAAC,IAAI,CAAA;IAC7C,MAAM,OAAO,GAAG,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,IAAI,IAAI,IAAI,CAAC,MAAM,CAAC,CAAA;IAClF,IAAI,CAAC,OAAO;QAAE,IAAI,CAAC,2CAA2C,CAAC,CAAA;IAC/D,MAAM,YAAY,GAAG,MAAM,CAAC,YAAY,CAAA;IACxC,MAAM,OAAO,GAAG,YAAY,IAAI,OAAO,YAAY,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,YAAY,CAAC;QAC9F,CAAC,CAAE,YAAwC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;IAC/D,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC;QAAE,IAAI,CAAC,+CAA+C,CAAC,CAAA;IACtH,MAAM,OAAO,GAAG,MAAM,CAAC,GAAG,IAAI,OAAO,MAAM,CAAC,GAAG,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC;QACxF,CAAC,CAAE,MAAM,CAAC,GAA+B,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAA;IAC/D,MAAM,OAAO,GAAG,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC;QAC/E,CAAC,CAAE,OAAmC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAA;IAC5D,MAAM,MAAM,GAAG,QAAQ,CAAC,GAA8B,CAAA;IACtD,MAAM,UAAU,GAAG,MAAM,CAAC,OAAkC,CAAA;IAC5D,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC;WAC5D,CAAC,iBAAiB,CAAC,OAAO,EAAE,CAAC,GAAG,UAAU,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QAAE,IAAI,CAAC,oDAAoD,CAAC,CAAA;IAC3H,OAAQ,YAAwC,CAAC,IAAI,CAAC,CAAA;IACtD,OAAO,CAAC,GAAG,EAAE,CAAA;IACb,IAAI,CAAC,iBAAiB,CAAC,MAAM,EAAE,QAAQ,CAAC;QAAE,IAAI,CAAC,uDAAuD,CAAC,CAAA;AACzG,CAAC;AAED,KAAK,UAAU,qBAAqB,CAAC,KAA2B,EAC9D,YAAsC,EAAE,MAAe;IACvD,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,cAAc,EAAE,MAAM,EAAE,GAAG,KAAK,CAAA;IAC1D,MAAM,CAAC,cAAc,EAAE,CAAA;IACvB,IAAI,MAAM,IAAI,KAAK,CAAC,aAAa;QAAE,IAAI,CAAC,gDAAgD,CAAC,CAAA;IACzF,IAAI,MAAM,QAAQ,CAAC,OAAO,CAAC,KAAK,OAAO;QAAE,IAAI,CAAC,uBAAuB,CAAC,CAAA;IACtE,MAAM,kBAAkB,GAAG,qBAAqB,CAAC,OAAO,CAAC,CAAA;IACzD,MAAM,SAAS,GAAG,MAAM,kBAAkB,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAA;IAChE,MAAM,aAAa,GAAG,qBAAqB,CAAC,cAAc,CAAC,OAAO,EAAE,KAAK,CAAC,aAAa,CAAC,CAAA;IACxF,IAAI,CAAC,iBAAiB,CAAC,SAAS,CAAC,OAAO,EAAE,aAAa,CAAC;QAAE,IAAI,CAAC,sCAAsC,CAAC,CAAA;IACtG,MAAM,WAAW,GAAG,IAAI,CAAC,OAAO,EAAE,oBAAoB,IAAI,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,CAAA;IACxF,MAAM,YAAY,GAAG,KAAK,IAAmB,EAAE;QAC7C,IAAI,CAAC,MAAM,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,MAAM,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,UAAU,EAAE,kBAAkB,CAAC,CAAC,EAAE,CAAC;YAC/F,IAAI,CAAC,+EAA+E,CAAC,CAAA;QACvF,CAAC;IACH,CAAC,CAAA;IACD,IAAI,CAAC,MAAM;QAAE,MAAM,YAAY,EAAE,CAAA;IACjC,MAAM,aAAa,GAAG,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,UAAU,CAAC,WAAW,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;IACzF,MAAM,OAAO,GAAG,EAAE,aAAa,EAAE,CAAC,EAAE,aAAa,EAAE,OAAO,EAAE,kBAAkB;QAC5E,OAAO,EAAE,cAAc,CAAC,OAAO,EAAE,gBAAgB,EAAE,cAAc,CAAC,gBAAgB,EAAE,CAAA;IACtF,IAAI,aAAa,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,EAAE,OAAO,CAAC;QAAE,IAAI,CAAC,6BAA6B,CAAC,CAAA;IACjI,MAAM,WAAW,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,OAAO,EAAE,OAAO,EAAE,SAAS,CAAC,OAAO,EAAE,CAAC,CAAA;IAC9E,MAAM,SAAS,GAAG,EAAE,CAAA;IACpB,MAAM,QAAQ,GAAsD,MAAM;QACxE,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,cAAc,CAAC,OAAO,CAAC,EAAE,CAAC,kBAAkB,EAAE,kBAAkB,CAAC,CAAC;QAC/E,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,cAAc,CAAC,OAAO,CAAC,CAAC,CAAA;IACvC,KAAK,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,QAAQ,EAAE,CAAC;QACvC,MAAM,CAAC,cAAc,EAAE,CAAA;QACvB,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,EAAE,UAAU,EAAE,IAAI,CAAC,CAAA;QAC5C,MAAM,EAAE,CAAC,SAAS,CAAC,IAAI,EAAE,KAAK,CAAC,CAAA;QAC/B,MAAM,IAAI,GAAG,KAAK,EAAE,IAAY,EAAmB,EAAE;YACnD,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAA;YAC7B,IAAI,MAAM,QAAQ,CAAC,IAAI,CAAC,KAAK,IAAI;gBAAE,IAAI,CAAC,qCAAqC,IAAI,EAAE,CAAC,CAAA;YACpF,OAAO,EAAE,CAAC,UAAU,CAAC,IAAI,EAAE,SAAS,CAAC,CAAA;QACvC,CAAC,CAAA;QACD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,EAAE,KAAK,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,CAAA;QACnF,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,qBAAqB,CAAC,CAAA;QACnD,0BAA0B,CAAC,EAAE,MAAM,EAAE,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,cAAc,EAAE,OAAO,EAAE,CAAC,CAAA;QAClG,IAAI,KAAK,CAAC,aAAa;YAAE,6BAA6B,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAA;QAC9E,MAAM,WAAW,GAAG,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAA;QACtE,MAAM,aAAa,GAAG,8BAA8B,CAAC,EAAE,MAAM,EAAE,SAAS,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,cAAc,EAAE,SAAS,EAAE,OAAO;YACrI,GAAG,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,KAAK,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACtE,aAAa,EAAE,MAAM,qBAAqB,CAAC,EAAE,MAAM,EAAE,cAAc,EAAE,OAAO,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC;YAClG,cAAc,EAAE,MAAM,qBAAqB,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC,EAAE,CAAC,CAAA;QAC7F,MAAM,YAAY,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,cAAc,EAAE,WAAW,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,GAAG,OAAO,CAAC,EAAE,EAAE,MAAM,CAAC,CAAA;QACvG,SAAS,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,WAAW,EAAE,QAAQ,EAAE,KAAK,EAAE,SAAS,EAAE,aAAa,EAAE,CAAC,CAAA;IACjG,CAAC;IACD,2EAA2E;IAC3E,6CAA6C;IAC7C,IAAI,aAAa,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC,UAAU,CAAC,WAAW,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC;QAAE,IAAI,CAAC,6BAA6B,CAAC,CAAA;IACjI,IAAI,CAAC,MAAM;QAAE,MAAM,YAAY,EAAE,CAAA;IACjC,KAAK,MAAM,QAAQ,IAAI,SAAS;QAAE,KAAK,MAAM,CAAC,IAAI,EAAE,QAAQ,CAAC,IAAI;YAC/D,CAAC,cAAc,EAAE,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC,kBAAkB,EAAE,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC,qBAAqB,EAAE,QAAQ,CAAC,SAAS,CAAC;SAC9G;YAAE,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC;gBAAE,IAAI,CAAC,wCAAwC,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAA;IAC5J,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;QACjC,MAAM,CAAC,cAAc,EAAE,CAAA;QACvB,MAAM,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,qBAAqB,CAAC,EAAE,QAAQ,CAAC,SAAS,EAAE,QAAQ,CAAC,aAAa,CAAC,CAAA;QACrG,MAAM,EAAE,CAAC,aAAa,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAA;QACrC,MAAM,YAAY,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS;YAC7E,OAAO,EAAE,QAAQ,CAAC,OAAO,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,MAAM,EAAE,CAAC,CAAA;IACxD,CAAC;IACD,MAAM,KAAK,GAA2B,EAAE,CAAA;IACxC,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;QACjC,MAAM,CAAC,cAAc,EAAE,CAAA;QACvB,MAAM,YAAY,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,WAAW,EAAE,QAAQ,CAAC,IAAI,EAAE,OAAO,EAAE,CAAC,GAAG,QAAQ,CAAC,OAAO,CAAC,EAAE,EAAE,MAAM,CAAC,CAAA;QACpH,MAAM,QAAQ,GAAG,MAAM,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,cAAc,CAAC,EAAE,SAAS,CAAC,CAAA;QACpF,wEAAwE;QACxE,IAAI,KAAK,CAAC,aAAa;YAAE,6BAA6B,CAAC,QAAQ,CAAC,QAAQ,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAA;aACzF,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;YAAE,IAAI,CAAC,2BAA2B,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAA;QACpK,0BAA0B,CAAC,EAAE,MAAM,EAAE,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAA;QAC/G,MAAM,KAAK,GAAG,MAAM,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,kBAAkB,CAAC,EAAE,SAAS,CAAC,CAAA;QACrF,MAAM,SAAS,GAAG,MAAM,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,qBAAqB,CAAC,EAAE,SAAS,CAAC,CAAA;QAC5F,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,SAAS,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,QAAQ,CAAC,aAAa;YAAE,IAAI,CAAC,qCAAqC,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAA;QACtJ,KAAK,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,cAAc,EAAE,QAAQ,CAAC,EAAE,CAAC,kBAAkB,EAAE,KAAK,CAAC,EAAE,CAAC,qBAAqB,EAAE,SAAS,CAAC,CAAU;YAAE,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,CAAA;QACpL,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,gBAAgB,CAAC,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,gBAAgB,CAAC,EAAE,UAAU,CAAC,CAAC,CAAA;IAC7H,CAAC;IACD,IAAI,CAAC,iBAAiB,CAAC,MAAM,kBAAkB,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,SAAS,CAAC;QAAE,IAAI,CAAC,0BAA0B,CAAC,CAAA;IACnH,MAAM,CAAC,cAAc,EAAE,CAAA;IACvB,IAAI,aAAa,EAAE,CAAC;QAClB,MAAM,OAAO,CAAC,WAAW,EAAE,aAAa,EAAE,WAAW,CAAC,CAAA;QACtD,MAAM,EAAE,CAAC,aAAa,CAAC,OAAO,CAAC,CAAA;QAC/B,KAAK,CAAC,WAAW,CAAC,GAAG,IAAI,CAAC,WAAW,CAAC,CAAA;IACxC,CAAC;;QAAM,MAAM,YAAY,EAAE,CAAA;IAC3B,OAAO,EAAE,aAAa,EAAE,CAAC,EAAE,OAAO,EAAE,YAAY,EAAE,SAAS,CAAC,aAAa,EAAE,KAAK,EAAE,CAAA;AACpF,CAAC"}

package/lib/rsi-local-profile-update.d.ts

@@ -0,0 +1,25 @@
+import type { RsiLocalCohort } from './rsi-local-cohort.js';
+import { type RsiLocalRootExtension } from './rsi-local-roots-extension.js';
+/** Replace only the old cohort's exact runtime edges in a stopped profile's
+ * workspace. Extra owner settings and YAML comments remain in the document;
+ * the candidate cannot grant new build-script authority. No files are read or
+ * written and no installation/Host action is performed. */
+export declare function rebaseRsiLocalProfileWorkspace(input: {
+    source: string;
+    original: RsiLocalCohort;
+    candidate: RsiLocalCohort;
+    bundles?: readonly string[];
+    originalPeers?: Record<string, string>;
+    candidatePeers?: Record<string, string>;
+    rootExtension?: RsiLocalRootExtension;
+}): string;
+/** Assert the manifest's internal root dependencies are exactly this profile's
+ * selected frozen bundles. pnpm may save a tarball as an absolute file: path or
+ * relative to Home/profiles/<name>; every profile has that same directory depth.
+ * Other dependency/configuration fields are inspected without rewriting bytes. */
+export declare function assertRsiLocalProfileRoots(input: {
+    source: string;
+    cohort: RsiLocalCohort;
+    bundles: readonly string[];
+}): void;
+//# sourceMappingURL=rsi-local-profile-update.d.ts.map

package/lib/rsi-local-profile-update.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rsi-local-profile-update.d.ts","sourceRoot":"","sources":["../src/rsi-local-profile-update.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAA;AAE3D,OAAO,EAAyB,KAAK,qBAAqB,EAAE,MAAM,gCAAgC,CAAA;AAuDlG;;;2DAG2D;AAC3D,wBAAgB,8BAA8B,CAAC,KAAK,EAAE;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,cAAc,CAAC;IAAC,SAAS,EAAE,cAAc,CAAC;IAAC,OAAO,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACvJ,aAAa,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAAC,cAAc,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAAC,aAAa,CAAC,EAAE,qBAAqB,CAAA;CAAE,GAAG,MAAM,CAiFlI;AAED;;;kFAGkF;AAClF,wBAAgB,0BAA0B,CAAC,KAAK,EAAE;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,cAAc,CAAC;IAAC,OAAO,EAAE,SAAS,MAAM,EAAE,CAAA;CAAE,GAAG,IAAI,CA8B9H"}

package/lib/rsi-local-profile-update.js

@@ -0,0 +1,226 @@
+import { dirname, isAbsolute, join, resolve } from 'node:path';
+import { isDeepStrictEqual } from 'node:util';
+import { isMap, isScalar, parseDocument } from 'yaml';
+import { mergeRsiLocalOverrides, rsiLocalDependencyOverrides } from './rsi-local-install.js';
+import { rsiLocalUpdateBundles } from './rsi-local-roots-extension.js';
+const INTERNAL = '@dsh-enhanced/';
+const SLUG = /^[a-z0-9]+(?:-[a-z0-9]+)*$/u;
+const PROFILE = /^[A-Za-z0-9][A-Za-z0-9._-]{0,63}$/u;
+const VERSION = /^(\d+)\.(\d+)\.(\d+)(?:-([0-9A-Za-z]+(?:[.-][0-9A-Za-z]+)*))?$/u;
+function fail(message) { throw new Error(`rsi local profile update: ${message}`); }
+function canonical(path) { return typeof path === 'string' && isAbsolute(path) && resolve(path) === path && !path.includes('\0'); }
+function object(value) {
+    return value !== null && typeof value === 'object' && !Array.isArray(value);
+}
+/** Only configuration identities are checked here. The caller independently
+ * reads/verifies both frozen receipts and their tarball inventories. */
+function assertCohort(cohort) {
+    if (!canonical(cohort.root) || !PROFILE.test(cohort.root.split('/').at(-1))
+        || dirname(cohort.root).split('/').at(-1) !== 'rsi-local-cohorts'
+        || !VERSION.test(cohort.version) || !object(cohort.allowBuilds)
+        || !Array.isArray(cohort.bundles) || !cohort.bundles.length || new Set(cohort.bundles).size !== cohort.bundles.length
+        || cohort.bundles.some(slug => !SLUG.test(slug))
+        || !Array.isArray(cohort.packages) || !cohort.packages.length || cohort.packages.length > 128
+        || new Set(cohort.packages.map(item => item.name)).size !== cohort.packages.length
+        || Object.entries(cohort.allowBuilds).some(([name, allowed]) => !name || typeof allowed !== 'boolean'))
+        fail('invalid frozen cohort configuration');
+    for (const item of cohort.packages) {
+        const slug = item.name.slice(INTERNAL.length);
+        if (!item.name.startsWith(INTERNAL) || !SLUG.test(slug)
+            || item.path !== `${item.bundle ? 'plugins' : 'packages'}/${slug}`
+            || item.tarball !== join(cohort.root, 'artifacts', `${slug}.tgz`)
+            || !Array.isArray(item.runtimeDependencies) || new Set(item.runtimeDependencies).size !== item.runtimeDependencies.length
+            || item.runtimeDependencies.some(name => !cohort.packages.some(child => child.name === name)))
+            fail(`invalid frozen package configuration: ${item.name}`);
+    }
+    if (cohort.bundles.some(slug => !cohort.packages.some(item => item.name === `${INTERNAL}${slug}` && item.bundle)))
+        fail('selected bundle is absent from cohort');
+}
+function compareVersions(left, right) {
+    const a = VERSION.exec(left), b = VERSION.exec(right);
+    for (let index = 1; index <= 3; index++) {
+        const first = BigInt(a[index]), second = BigInt(b[index]);
+        if (first !== second)
+            return first < second ? -1 : 1;
+    }
+    if (a[4] === b[4])
+        return 0;
+    if (a[4] === undefined || b[4] === undefined)
+        return a[4] === undefined ? 1 : -1;
+    const first = a[4].split('.'), second = b[4].split('.');
+    for (let index = 0; index < Math.max(first.length, second.length); index++) {
+        const x = first[index], y = second[index];
+        if (x === y)
+            continue;
+        if (x === undefined || y === undefined)
+            return x === undefined ? -1 : 1;
+        const nx = /^\d+$/u.test(x), ny = /^\d+$/u.test(y);
+        if (nx && ny) {
+            if (BigInt(x) !== BigInt(y))
+                return BigInt(x) < BigInt(y) ? -1 : 1;
+        }
+        else if (nx !== ny)
+            return nx ? -1 : 1;
+        else
+            return x < y ? -1 : 1;
+    }
+    return 0;
+}
+/** Replace only the old cohort's exact runtime edges in a stopped profile's
+ * workspace. Extra owner settings and YAML comments remain in the document;
+ * the candidate cannot grant new build-script authority. No files are read or
+ * written and no installation/Host action is performed. */
+export function rebaseRsiLocalProfileWorkspace(input) {
+    const { source, original, candidate } = input;
+    assertCohort(original);
+    assertCohort(candidate);
+    const expectedBundles = rsiLocalUpdateBundles(original.bundles, input.rootExtension);
+    if (original.root !== candidate.root || original.sourceRepository !== candidate.sourceRepository
+        || !isDeepStrictEqual(candidate.bundles, expectedBundles))
+        fail('candidate cohort installation identity changed');
+    if (input.rootExtension && input.bundles !== undefined && !isDeepStrictEqual([...input.bundles].sort(), [...original.bundles].sort())) {
+        fail('root extension is only supported for the target profile');
+    }
+    if (compareVersions(candidate.version, original.version) < 0)
+        fail('candidate cohort version moved backwards');
+    for (const item of original.packages) {
+        const next = candidate.packages.find(value => value.name === item.name);
+        if (next && (next.path !== item.path || next.bundle !== item.bundle || next.tarball !== item.tarball))
+            fail(`candidate package path changed: ${item.name}`);
+    }
+    for (const [name, allowed] of Object.entries(original.allowBuilds)) {
+        if (candidate.allowBuilds[name] !== allowed)
+            fail(`candidate changed existing build authorization: ${name}`);
+    }
+    for (const [name, allowed] of Object.entries(candidate.allowBuilds)) {
+        if (!Object.hasOwn(original.allowBuilds, name) && allowed)
+            fail(`candidate added build authorization: ${name}`);
+    }
+    const document = parseDocument(source, { uniqueKeys: true });
+    if (document.errors.length || document.warnings.length || !isMap(document.contents))
+        fail('profile workspace configuration is invalid');
+    if (document.get('nodeLinker') !== 'isolated')
+        fail('profile nodeLinker drifted from frozen local installation');
+    const oldRuntime = rsiLocalDependencyOverrides(original);
+    const oldRequired = rsiLocalDependencyOverrides(original, input.bundles);
+    const oldOverrides = { ...oldRuntime, ...input.originalPeers };
+    const nextOverrides = { ...rsiLocalDependencyOverrides(candidate, input.rootExtension ? candidate.bundles : input.bundles), ...input.candidatePeers };
+    const overrides = document.get('overrides', true);
+    if (overrides !== undefined && !isMap(overrides))
+        fail('profile overrides must be a mapping');
+    if (isMap(overrides))
+        for (const item of overrides.items) {
+            if (!isScalar(item.key) || typeof item.key.value !== 'string')
+                fail('profile override selector is invalid');
+            const selector = item.key.value;
+            if (selector.includes(INTERNAL) && !Object.hasOwn(oldOverrides, selector))
+                fail(`unknown or stale internal override: ${selector}`);
+        }
+    for (const [selector, value] of Object.entries(oldRequired)) {
+        if (document.getIn(['overrides', selector]) !== value)
+            fail(`old runtime override is missing or changed: ${selector}`);
+    }
+    for (const [selector, value] of Object.entries(oldOverrides)) {
+        const present = document.getIn(['overrides', selector]);
+        if (present !== undefined && present !== value)
+            fail(`old peer or runtime override changed: ${selector}`);
+    }
+    const builds = document.get('allowBuilds', true);
+    if (builds !== undefined && !isMap(builds))
+        fail('profile allowBuilds must be a mapping');
+    if (isMap(builds))
+        for (const item of builds.items) {
+            if (!isScalar(item.key) || typeof item.key.value !== 'string'
+                || !isScalar(item.value) || typeof item.value.value !== 'boolean')
+                fail('profile build policy must contain booleans');
+        }
+    for (const [name, allowed] of Object.entries(original.allowBuilds)) {
+        if (document.getIn(['allowBuilds', name]) !== allowed)
+            fail(`old build authorization is missing or changed: ${name}`);
+    }
+    // Rename retained edges in place, including version advances, so owner
+    // comments survive. Comments on removed edges remain on the overrides map.
+    for (const selector of Object.keys(oldOverrides)) {
+        if (document.getIn(['overrides', selector]) === undefined)
+            continue;
+        const nextSelector = selector.replace(`@${original.version}>`, `@${candidate.version}>`);
+        if (Object.hasOwn(nextOverrides, nextSelector) && isMap(overrides)) {
+            const pair = overrides.items.find(item => isScalar(item.key) && item.key.value === selector);
+            if (isScalar(pair.key))
+                pair.key.value = nextSelector;
+        }
+        else {
+            if (isMap(overrides)) {
+                const pair = overrides.items.find(item => isScalar(item.key) && item.key.value === selector);
+                const comments = [overrides.comment, isScalar(pair.key) && pair.key.commentBefore,
+                    isScalar(pair.key) && pair.key.comment, isScalar(pair.value) && pair.value.commentBefore,
+                    isScalar(pair.value) && pair.value.comment].filter(value => typeof value === 'string');
+                overrides.comment = comments.join('\n') || null;
+            }
+            document.deleteIn(['overrides', selector]);
+        }
+    }
+    let result = mergeRsiLocalOverrides(document.toString(), nextOverrides, candidate.allowBuilds);
+    if (input.rootExtension) {
+        // The native installer runs this same merge once more. Long new peer
+        // selectors may be wrapped on that parse/serialize pass.
+        for (let attempt = 0; attempt < 4; attempt++) {
+            const next = mergeRsiLocalOverrides(result, nextOverrides, candidate.allowBuilds);
+            if (next === result)
+                return result;
+            result = next;
+        }
+        fail('extended workspace serialization did not stabilize');
+    }
+    return result;
+}
+/** Assert the manifest's internal root dependencies are exactly this profile's
+ * selected frozen bundles. pnpm may save a tarball as an absolute file: path or
+ * relative to Home/profiles/<name>; every profile has that same directory depth.
+ * Other dependency/configuration fields are inspected without rewriting bytes. */
+export function assertRsiLocalProfileRoots(input) {
+    assertCohort(input.cohort);
+    let manifest;
+    try {
+        manifest = JSON.parse(input.source);
+    }
+    catch {
+        fail('profile manifest is invalid JSON');
+    }
+    if (!object(manifest) || !input.bundles.length || new Set(input.bundles).size !== input.bundles.length)
+        fail('profile manifest or bundle roots are invalid');
+    const roots = new Map(input.bundles.map(slug => {
+        const item = input.cohort.packages.find(value => value.name === `${INTERNAL}${slug}` && value.bundle);
+        if (!item)
+            fail(`profile bundle is absent from cohort: ${slug}`);
+        return [item.name, item.tarball];
+    }));
+    const dsh = manifest.dsh, profile = object(dsh) ? dsh.profile : undefined;
+    const mounted = object(profile) ? profile.bundles : undefined;
+    if (!Array.isArray(mounted) || mounted.some(name => typeof name !== 'string' || !name || name.includes('\0'))
+        || new Set(mounted).size !== mounted.length)
+        fail('profile mounted bundles are invalid');
+    const internalMounted = mounted.filter((name) => name.includes(INTERNAL));
+    if (internalMounted.length !== roots.size || internalMounted.some((name) => !roots.has(name)))
+        fail('profile mounted internal bundle roots changed');
+    const profileDirectory = join(dirname(dirname(input.cohort.root)), 'profiles', '_profile_');
+    const seen = new Set();
+    for (const field of ['dependencies', 'devDependencies', 'optionalDependencies', 'peerDependencies']) {
+        const mapping = manifest[field];
+        if (mapping === undefined)
+            continue;
+        if (!object(mapping))
+            fail(`profile ${field} must be a mapping`);
+        for (const [name, value] of Object.entries(mapping)) {
+            if (!name.startsWith(INTERNAL))
+                continue;
+            if (field !== 'dependencies' || !roots.has(name) || typeof value !== 'string' || !value.startsWith('file:')
+                || value.includes('\0') || resolve(profileDirectory, value.slice(5)) !== roots.get(name))
+                fail(`profile internal bundle root is missing or changed: ${name}`);
+            seen.add(name);
+        }
+    }
+    if (seen.size !== roots.size)
+        fail('profile selected bundle root is missing');
+}
+//# sourceMappingURL=rsi-local-profile-update.js.map

package/lib/rsi-local-profile-update.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rsi-local-profile-update.js","sourceRoot":"","sources":["../src/rsi-local-profile-update.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AAC9D,OAAO,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAA;AAC7C,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,aAAa,EAAE,MAAM,MAAM,CAAA;AAErD,OAAO,EAAE,sBAAsB,EAAE,2BAA2B,EAAE,MAAM,wBAAwB,CAAA;AAC5F,OAAO,EAAE,qBAAqB,EAA8B,MAAM,gCAAgC,CAAA;AAElG,MAAM,QAAQ,GAAG,gBAAgB,CAAA;AACjC,MAAM,IAAI,GAAG,6BAA6B,CAAA;AAC1C,MAAM,OAAO,GAAG,oCAAoC,CAAA;AACpD,MAAM,OAAO,GAAG,iEAAiE,CAAA;AACjF,SAAS,IAAI,CAAC,OAAe,IAAW,MAAM,IAAI,KAAK,CAAC,6BAA6B,OAAO,EAAE,CAAC,CAAA,CAAC,CAAC;AACjG,SAAS,SAAS,CAAC,IAAY,IAAa,OAAO,OAAO,IAAI,KAAK,QAAQ,IAAI,UAAU,CAAC,IAAI,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAA,CAAC,CAAC;AACnJ,SAAS,MAAM,CAAC,KAAc;IAC5B,OAAO,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAA;AAC7E,CAAC;AAED;wEACwE;AACxE,SAAS,YAAY,CAAC,MAAsB;IAC1C,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAE,CAAC;WACvE,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,mBAAmB;WAC9D,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC;WAC5D,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,IAAI,IAAI,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,OAAO,CAAC,MAAM;WAClH,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;WAC7C,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,GAAG,GAAG;WAC1F,IAAI,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,QAAQ,CAAC,MAAM;WAC/E,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,OAAO,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,IAAI,OAAO,OAAO,KAAK,SAAS,CAAC;QAAE,IAAI,CAAC,qCAAqC,CAAC,CAAA;IACrJ,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;QACnC,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAA;QAC7C,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;eAClD,IAAI,CAAC,IAAI,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,IAAI,IAAI,EAAE;eAC/D,IAAI,CAAC,OAAO,KAAK,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,WAAW,EAAE,GAAG,IAAI,MAAM,CAAC;eAC9D,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,mBAAmB,CAAC,IAAI,IAAI,GAAG,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,mBAAmB,CAAC,MAAM;eACtH,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;YAAE,IAAI,CAAC,yCAAyC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAA;IAC7J,CAAC;IACD,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,GAAG,QAAQ,GAAG,IAAI,EAAE,IAAI,IAAI,CAAC,MAAM,CAAC,CAAC;QAAE,IAAI,CAAC,uCAAuC,CAAC,CAAA;AAClK,CAAC;AAED,SAAS,eAAe,CAAC,IAAY,EAAE,KAAa;IAClD,MAAM,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,CAAE,EAAE,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAE,CAAA;IACvD,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,IAAI,CAAC,EAAE,KAAK,EAAE,EAAE,CAAC;QACxC,MAAM,KAAK,GAAG,MAAM,CAAC,CAAC,CAAC,KAAK,CAAE,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC,KAAK,CAAE,CAAC,CAAA;QAC3D,IAAI,KAAK,KAAK,MAAM;YAAE,OAAO,KAAK,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;IACtD,CAAC;IACD,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAAE,OAAO,CAAC,CAAA;IAC3B,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,SAAS,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,SAAS;QAAE,OAAO,CAAC,CAAC,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;IAChF,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;IACvD,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,EAAE,CAAC;QAC3E,MAAM,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,CAAA;QACzC,IAAI,CAAC,KAAK,CAAC;YAAE,SAAQ;QACrB,IAAI,CAAC,KAAK,SAAS,IAAI,CAAC,KAAK,SAAS;YAAE,OAAO,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;QACvE,MAAM,EAAE,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;QAClD,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC;YAAC,IAAI,MAAM,CAAC,CAAC,CAAC,KAAK,MAAM,CAAC,CAAC,CAAC;gBAAE,OAAO,MAAM,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;QAAC,CAAC;aAC/E,IAAI,EAAE,KAAK,EAAE;YAAE,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;;YACjC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;IAC5B,CAAC;IACD,OAAO,CAAC,CAAA;AACV,CAAC;AAED;;;2DAG2D;AAC3D,MAAM,UAAU,8BAA8B,CAAC,KAC2E;IACxH,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,GAAG,KAAK,CAAA;IAC7C,YAAY,CAAC,QAAQ,CAAC,CAAC;IAAC,YAAY,CAAC,SAAS,CAAC,CAAA;IAC/C,MAAM,eAAe,GAAG,qBAAqB,CAAC,QAAQ,CAAC,OAAO,EAAE,KAAK,CAAC,aAAa,CAAC,CAAA;IACpF,IAAI,QAAQ,CAAC,IAAI,KAAK,SAAS,CAAC,IAAI,IAAI,QAAQ,CAAC,gBAAgB,KAAK,SAAS,CAAC,gBAAgB;WAC3F,CAAC,iBAAiB,CAAC,SAAS,CAAC,OAAO,EAAE,eAAe,CAAC;QAAE,IAAI,CAAC,gDAAgD,CAAC,CAAA;IACnH,IAAI,KAAK,CAAC,aAAa,IAAI,KAAK,CAAC,OAAO,KAAK,SAAS,IAAI,CAAC,iBAAiB,CAAC,CAAC,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC;QACtI,IAAI,CAAC,yDAAyD,CAAC,CAAA;IACjE,CAAC;IACD,IAAI,eAAe,CAAC,SAAS,CAAC,OAAO,EAAE,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC;QAAE,IAAI,CAAC,0CAA0C,CAAC,CAAA;IAC9G,KAAK,MAAM,IAAI,IAAI,QAAQ,CAAC,QAAQ,EAAE,CAAC;QACrC,MAAM,IAAI,GAAG,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,IAAI,CAAC,CAAA;QACvE,IAAI,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,MAAM,KAAK,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,OAAO,KAAK,IAAI,CAAC,OAAO,CAAC;YAAE,IAAI,CAAC,mCAAmC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAA;IAC7J,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;QACnE,IAAI,SAAS,CAAC,WAAW,CAAC,IAAI,CAAC,KAAK,OAAO;YAAE,IAAI,CAAC,mDAAmD,IAAI,EAAE,CAAC,CAAA;IAC9G,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,WAAW,CAAC,EAAE,CAAC;QACpE,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,WAAW,EAAE,IAAI,CAAC,IAAI,OAAO;YAAE,IAAI,CAAC,wCAAwC,IAAI,EAAE,CAAC,CAAA;IACjH,CAAC;IACD,MAAM,QAAQ,GAAG,aAAa,CAAC,MAAM,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,CAAA;IAC5D,IAAI,QAAQ,CAAC,MAAM,CAAC,MAAM,IAAI,QAAQ,CAAC,QAAQ,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAAE,IAAI,CAAC,4CAA4C,CAAC,CAAA;IACvI,IAAI,QAAQ,CAAC,GAAG,CAAC,YAAY,CAAC,KAAK,UAAU;QAAE,IAAI,CAAC,2DAA2D,CAAC,CAAA;IAChH,MAAM,UAAU,GAAG,2BAA2B,CAAC,QAAQ,CAAC,CAAA;IACxD,MAAM,WAAW,GAAG,2BAA2B,CAAC,QAAQ,EAAE,KAAK,CAAC,OAAO,CAAC,CAAA;IACxE,MAAM,YAAY,GAAG,EAAE,GAAG,UAAU,EAAE,GAAG,KAAK,CAAC,aAAa,EAAE,CAAA;IAC9D,MAAM,aAAa,GAAG,EAAE,GAAG,2BAA2B,CAAC,SAAS,EAAE,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,GAAG,KAAK,CAAC,cAAc,EAAE,CAAA;IACrJ,MAAM,SAAS,GAAG,QAAQ,CAAC,GAAG,CAAC,WAAW,EAAE,IAAI,CAAC,CAAA;IACjD,IAAI,SAAS,KAAK,SAAS,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC;QAAE,IAAI,CAAC,qCAAqC,CAAC,CAAA;IAC7F,IAAI,KAAK,CAAC,SAAS,CAAC;QAAE,KAAK,MAAM,IAAI,IAAI,SAAS,CAAC,KAAK,EAAE,CAAC;YACzD,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,OAAO,IAAI,CAAC,GAAG,CAAC,KAAK,KAAK,QAAQ;gBAAE,IAAI,CAAC,sCAAsC,CAAC,CAAA;YAC3G,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,CAAA;YAC/B,IAAI,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,YAAY,EAAE,QAAQ,CAAC;gBAAE,IAAI,CAAC,uCAAuC,QAAQ,EAAE,CAAC,CAAA;QACpI,CAAC;IACD,KAAK,MAAM,CAAC,QAAQ,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,CAAC;QAC5D,IAAI,QAAQ,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC,KAAK,KAAK;YAAE,IAAI,CAAC,+CAA+C,QAAQ,EAAE,CAAC,CAAA;IACxH,CAAC;IACD,KAAK,MAAM,CAAC,QAAQ,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,CAAC;QAC7D,MAAM,OAAO,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC,CAAA;QACvD,IAAI,OAAO,KAAK,SAAS,IAAI,OAAO,KAAK,KAAK;YAAE,IAAI,CAAC,yCAAyC,QAAQ,EAAE,CAAC,CAAA;IAC3G,CAAC;IACD,MAAM,MAAM,GAAG,QAAQ,CAAC,GAAG,CAAC,aAAa,EAAE,IAAI,CAAC,CAAA;IAChD,IAAI,MAAM,KAAK,SAAS,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC;QAAE,IAAI,CAAC,uCAAuC,CAAC,CAAA;IACzF,IAAI,KAAK,CAAC,MAAM,CAAC;QAAE,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;YACnD,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,OAAO,IAAI,CAAC,GAAG,CAAC,KAAK,KAAK,QAAQ;mBACxD,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,OAAO,IAAI,CAAC,KAAK,CAAC,KAAK,KAAK,SAAS;gBAAE,IAAI,CAAC,4CAA4C,CAAC,CAAA;QACzH,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;QACnE,IAAI,QAAQ,CAAC,KAAK,CAAC,CAAC,aAAa,EAAE,IAAI,CAAC,CAAC,KAAK,OAAO;YAAE,IAAI,CAAC,kDAAkD,IAAI,EAAE,CAAC,CAAA;IACvH,CAAC;IACD,uEAAuE;IACvE,2EAA2E;IAC3E,KAAK,MAAM,QAAQ,IAAI,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,EAAE,CAAC;QACjD,IAAI,QAAQ,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC,KAAK,SAAS;YAAE,SAAQ;QACnE,MAAM,YAAY,GAAG,QAAQ,CAAC,OAAO,CAAC,IAAI,QAAQ,CAAC,OAAO,GAAG,EAAE,IAAI,SAAS,CAAC,OAAO,GAAG,CAAC,CAAA;QACxF,IAAI,MAAM,CAAC,MAAM,CAAC,aAAa,EAAE,YAAY,CAAC,IAAI,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC;YACnE,MAAM,IAAI,GAAG,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,KAAK,QAAQ,CAAE,CAAA;YAC7F,IAAI,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC;gBAAE,IAAI,CAAC,GAAG,CAAC,KAAK,GAAG,YAAY,CAAA;QACvD,CAAC;aAAM,CAAC;YACN,IAAI,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC;gBACrB,MAAM,IAAI,GAAG,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,KAAK,QAAQ,CAAE,CAAA;gBAC7F,MAAM,QAAQ,GAAG,CAAC,SAAS,CAAC,OAAO,EAAE,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,aAAa;oBAC/E,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,aAAa;oBACxF,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAA;gBACxF,SAAS,CAAC,OAAO,GAAG,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,CAAA;YACjD,CAAC;YACD,QAAQ,CAAC,QAAQ,CAAC,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC,CAAA;QAC5C,CAAC;IACH,CAAC;IACD,IAAI,MAAM,GAAG,sBAAsB,CAAC,QAAQ,CAAC,QAAQ,EAAE,EAAE,aAAa,EAAE,SAAS,CAAC,WAAW,CAAC,CAAA;IAC9F,IAAI,KAAK,CAAC,aAAa,EAAE,CAAC;QACxB,qEAAqE;QACrE,yDAAyD;QACzD,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,CAAC,EAAE,OAAO,EAAE,EAAE,CAAC;YAC7C,MAAM,IAAI,GAAG,sBAAsB,CAAC,MAAM,EAAE,aAAa,EAAE,SAAS,CAAC,WAAW,CAAC,CAAA;YACjF,IAAI,IAAI,KAAK,MAAM;gBAAE,OAAO,MAAM,CAAA;YAClC,MAAM,GAAG,IAAI,CAAA;QACf,CAAC;QACD,IAAI,CAAC,oDAAoD,CAAC,CAAA;IAC5D,CAAC;IACD,OAAO,MAAM,CAAA;AACf,CAAC;AAED;;;kFAGkF;AAClF,MAAM,UAAU,0BAA0B,CAAC,KAA6E;IACtH,YAAY,CAAC,KAAK,CAAC,MAAM,CAAC,CAAA;IAC1B,IAAI,QAAiB,CAAA;IACrB,IAAI,CAAC;QAAC,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,CAAA;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,IAAI,CAAC,kCAAkC,CAAC,CAAA;IAAC,CAAC;IAC9F,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,IAAI,IAAI,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,KAAK,KAAK,CAAC,OAAO,CAAC,MAAM;QAAE,IAAI,CAAC,8CAA8C,CAAC,CAAA;IAC5J,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE;QAC7C,MAAM,IAAI,GAAG,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,QAAQ,GAAG,IAAI,EAAE,IAAI,KAAK,CAAC,MAAM,CAAC,CAAA;QACrG,IAAI,CAAC,IAAI;YAAE,IAAI,CAAC,yCAAyC,IAAI,EAAE,CAAC,CAAA;QAChE,OAAO,CAAC,IAAK,CAAC,IAAI,EAAE,IAAK,CAAC,OAAO,CAAU,CAAA;IAC7C,CAAC,CAAC,CAAC,CAAA;IACH,MAAM,GAAG,GAAG,QAAQ,CAAC,GAAG,EAAE,OAAO,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAA;IACzE,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAA;IAC7D,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;WACxG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC,IAAI,KAAK,OAAO,CAAC,MAAM;QAAE,IAAI,CAAC,qCAAqC,CAAC,CAAA;IAC1F,MAAM,eAAe,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,IAAY,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAA;IACjF,IAAI,eAAe,CAAC,MAAM,KAAK,KAAK,CAAC,IAAI,IAAI,eAAe,CAAC,IAAI,CAAC,CAAC,IAAY,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAAE,IAAI,CAAC,+CAA+C,CAAC,CAAA;IAC5J,MAAM,gBAAgB,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,UAAU,EAAE,WAAW,CAAC,CAAA;IAC3F,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAA;IAC9B,KAAK,MAAM,KAAK,IAAI,CAAC,cAAc,EAAE,iBAAiB,EAAE,sBAAsB,EAAE,kBAAkB,CAAC,EAAE,CAAC;QACpG,MAAM,OAAO,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAA;QAC/B,IAAI,OAAO,KAAK,SAAS;YAAE,SAAQ;QACnC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC;YAAE,IAAI,CAAC,WAAW,KAAK,oBAAoB,CAAC,CAAA;QAChE,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;YACpD,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC;gBAAE,SAAQ;YACxC,IAAI,KAAK,KAAK,cAAc,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,OAAO,CAAC;mBACtG,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,OAAO,CAAC,gBAAgB,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC;gBAAE,IAAI,CAAC,uDAAuD,IAAI,EAAE,CAAC,CAAA;YAC/J,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;QAChB,CAAC;IACH,CAAC;IACD,IAAI,IAAI,CAAC,IAAI,KAAK,KAAK,CAAC,IAAI;QAAE,IAAI,CAAC,yCAAyC,CAAC,CAAA;AAC/E,CAAC"}

package/lib/rsi-local-resources.d.ts

@@ -0,0 +1,37 @@
+import { type RsiBuildEnvironment } from './rsi-build.js';
+import type { RsiReleaseBuildEnvironment } from './rsi-release-build.js';
+import type { RsiLocalCohort } from './rsi-local-cohort.js';
+declare const kinds: readonly ["rsi-local-cohorts", "rsi-builds", "rsi-release-builds"];
+type Kind = typeof kinds[number];
+export interface RsiLocalResourceProof {
+    schemaVersion: 1;
+    dshHome: string;
+    profile: string;
+    preparationDigest: string;
+    original: Record<Kind, string>;
+    candidate: Record<Kind, string>;
+}
+/** Caller owns the Home lifecycle lock and has stopped all Home writers. Only
+ * these three trees in the disposable stage are changed; source, profiles,
+ * owner authority and ledger still require the enclosing activation transaction.
+ * A crash requires discarding/recovering that stage, never reusing it as live. */
+export declare function stageRsiLocalUpdateResources(input: {
+    logicalHome: string;
+    stagePhysicalHome: string;
+    profile: string;
+    preparationRoot: string;
+    signal?: AbortSignal;
+}): Promise<{
+    cohort: RsiLocalCohort;
+    sourceBuild: RsiBuildEnvironment;
+    releaseBuild: RsiReleaseBuildEnvironment;
+    proof: RsiLocalResourceProof;
+}>;
+export declare function verifyRsiLocalUpdateResources(input: {
+    physicalHome: string;
+    proof: RsiLocalResourceProof;
+    original?: boolean;
+    signal?: AbortSignal;
+}): Promise<void>;
+export {};
+//# sourceMappingURL=rsi-local-resources.d.ts.map

package/lib/rsi-local-resources.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rsi-local-resources.d.ts","sourceRoot":"","sources":["../src/rsi-local-resources.ts"],"names":[],"mappings":"AAIA,OAAO,EAA2B,KAAK,mBAAmB,EAAE,MAAM,gBAAgB,CAAA;AAClF,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,wBAAwB,CAAA;AACxE,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAA;AAG3D,QAAA,MAAM,KAAK,oEAAqE,CAAA;AAChF,KAAK,IAAI,GAAG,OAAO,KAAK,CAAC,MAAM,CAAC,CAAA;AAMhC,MAAM,WAAW,qBAAqB;IACpC,aAAa,EAAE,CAAC,CAAA;IAChB,OAAO,EAAE,MAAM,CAAA;IACf,OAAO,EAAE,MAAM,CAAA;IACf,iBAAiB,EAAE,MAAM,CAAA;IACzB,QAAQ,EAAE,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,CAAA;IAC9B,SAAS,EAAE,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,CAAA;CAChC;AAoCD;;;kFAGkF;AAClF,wBAAsB,4BAA4B,CAAC,KAAK,EAAE;IACxD,WAAW,EAAE,MAAM,CAAC;IAAC,iBAAiB,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,eAAe,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,WAAW,CAAA;CAC/G,GAAG,OAAO,CAAC;IAAE,MAAM,EAAE,cAAc,CAAC;IAAC,WAAW,EAAE,mBAAmB,CAAC;IACrE,YAAY,EAAE,0BAA0B,CAAC;IAAC,KAAK,EAAE,qBAAqB,CAAA;CAAE,CAAC,CAiG1E;AAED,wBAAsB,6BAA6B,CAAC,KAAK,EAAE;IACzD,YAAY,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,qBAAqB,CAAC;IAAC,QAAQ,CAAC,EAAE,OAAO,CAAC;IAAC,MAAM,CAAC,EAAE,WAAW,CAAA;CAC7F,GAAG,OAAO,CAAC,IAAI,CAAC,CAWhB"}