@dsh-enhanced/lark-channel 0.1.48 → 0.1.49

package/lib/rsi-install.js

@@ -0,0 +1,404 @@
+import { createHash } from 'node:crypto';
+import { lstat, mkdir, readFile, realpath } from 'node:fs/promises';
+import { join } from 'node:path';
+import { setTimeout as delay } from 'node:timers/promises';
+import { listActiveAutomationsLocally } from '@dsh-enhanced/assistant-automations';
+import { growthObjectDigest } from '@dsh-enhanced/assistant-growth-contract';
+import { isDeepStrictEqual } from 'node:util';
+import { controlPlaneDigest, queryRuntimeObserver, runtimeConfigDigest } from '@dsh-enhanced/plugin-control-plane';
+import { withDshHomeLifecycleLock } from './setup.js';
+import { prepareRsiSourceWorkspace } from './rsi-source.js';
+import { prepareRsiBuildEnvironment, RsiBuildUnavailableError, rsiBuildResources as io } from './rsi-build.js';
+import { prepareRsiReleaseBuildEnvironment, RsiReleaseBuildUnavailableError } from './rsi-release-build.js';
+import { prepareRsiAuthorityRuntime } from './rsi-authority-runtime.js';
+import { prepareRsiAuthorityResources } from './rsi-authority-resources.js';
+import { createRsiBootstrapManifest } from './rsi-bootstrap-manifest.js';
+import { prepareRsiCreationBuildEnvironment } from './rsi-creation-build.js';
+import { validateRsiPluginCreationSetup } from './rsi-plugin-creation.js';
+import { inspectRsiOwnerConfiguration, prepareRsiOwnerConfiguration } from './rsi-bootstrap.js';
+import { collectRsiInstalledInputs, RsiInstalledInputsUnavailableError } from './rsi-install-inputs.js';
+import { captureRsiSystemdUnitProperties, readRsiSystemdUnitProperties } from './rsi-systemd-bootstrap.js';
+import { configureRsiSetupLocked, rsiSetupPorts } from './rsi-setup.js';
+import { systemdServicePaths } from './systemd.js';
+import { readRsiServiceEnvironment } from './rsi-service-environment.js';
+import { version } from './version.js';
+import { readRsiLocalCohort, verifyRsiLocalInstalledPackages } from './rsi-local-cohort.js';
+import { installRsiLocalProfile, isRsiLocalPackageRepairable } from './rsi-local-install.js';
+import { assertRsiSchedulerActivation, captureRsiAutomationInventories, rsiDatabasePaths } from './rsi-owner-profile.js';
+const profilePattern = /^[A-Za-z0-9][A-Za-z0-9._-]{0,63}$/u;
+const coordinatorBundles = ['assistant-policy', 'assistant-automations', 'plugin-control-plane'];
+const hash = (value) => createHash('sha256').update(value).digest('hex');
+function fail(message) { throw new Error(`rsi install: ${message}`); }
+async function exists(path) {
+    try {
+        await lstat(path);
+        return true;
+    }
+    catch (error) {
+        if (error.code !== 'ENOENT')
+            throw error;
+        return false;
+    }
+}
+/** Stable per-target name, including for a maximum-length target profile. */
+export function rsiCoordinatorProfile(profile) {
+    if (!profilePattern.test(profile))
+        fail('invalid target profile');
+    return `rsi-${profile.slice(0, 43)}-${hash(profile).slice(0, 12)}`;
+}
+async function prepareResources(input, signal) {
+    const source = await prepareRsiSourceWorkspace({ ...input, version, signal });
+    const runtime = await prepareRsiAuthorityRuntime({ ...input, signal });
+    const resources = await prepareRsiAuthorityResources({ ...input, signal });
+    const build = await prepareRsiBuildEnvironment({ ...input, source, signal });
+    const release = await prepareRsiReleaseBuildEnvironment({ ...input, build, signal });
+    const storedManifest = join(resources.configRoot, 'manifest.json');
+    const previous = await exists(storedManifest)
+        ? JSON.parse((await io.readStable(storedManifest, 2_097_152, true)).toString('utf8'))
+        : undefined;
+    if (previous?.pluginCreation !== undefined)
+        validateRsiPluginCreationSetup(previous.pluginCreation, previous.sourceReviews.owner);
+    const creationBuild = previous && previous.pluginCreation === undefined
+        ? undefined : await prepareRsiCreationBuildEnvironment({ ...input, source, build, signal });
+    if (creationBuild) {
+        for (const name of ['creation-review-runner', 'creation-adoption-runner']) {
+            const path = join(resources.stateRoot, name);
+            if (!await exists(path))
+                await mkdir(path, { mode: 0o700 });
+            await io.directory(path);
+        }
+    }
+    return { source, runtime, resources, build, release, ...(creationBuild ? { creationBuild } : {}) };
+}
+async function ensureCoordinator(input, coordinator, executor, signal, systemctlPin) {
+    const root = join(input.dshHome, 'profiles', coordinator);
+    const receiptPath = join(input.dshHome, `.rsi-coordinator-${hash(input.profile).slice(0, 16)}.json`);
+    const receipt = JSON.stringify({ schemaVersion: 1, targetProfile: input.profile, coordinatorProfile: coordinator,
+        version, sourceRepository: input.sourceRepository ?? null });
+    let owned = await exists(receiptPath);
+    if (owned && (await io.readStable(receiptPath, 65_536, true)).toString('utf8') !== receipt)
+        fail('coordinator preparation belongs to another installation');
+    if (await exists(root) && !owned)
+        fail('unregistered coordinator profile cannot be overwritten');
+    if (!await exists(root) && !owned) {
+        await io.writeExclusive(receiptPath, receipt);
+        await io.syncDirectory(input.dshHome);
+        owned = true;
+    }
+    const matches = async (name) => {
+        const path = join(root, 'node_modules', '@dsh-enhanced', name, 'package.json');
+        if (!await exists(path))
+            return false;
+        const manifest = JSON.parse((await io.readStable(await realpath(path), 65_536)).toString('utf8'));
+        if (manifest.name !== `@dsh-enhanced/${name}` || manifest.version !== version)
+            fail('coordinator must use the same installed plugin release');
+        return true;
+    };
+    let complete = (await Promise.all(coordinatorBundles.map(matches))).every(Boolean);
+    const local = input.sourceRepository ? await readRsiLocalCohort({ dshHome: input.dshHome, profile: input.profile }) : undefined;
+    if (local && (local.sourceRepository !== input.sourceRepository || local.version !== version))
+        fail('local coordinator cohort differs from the source installation');
+    if (local && complete) {
+        try {
+            await verifyRsiLocalInstalledPackages({ cohort: local, profilePath: root, bundles: [...coordinatorBundles] });
+        }
+        catch (error) {
+            if (!isRsiLocalPackageRepairable(error))
+                throw error;
+            complete = false;
+        }
+    }
+    if (!complete) {
+        if (!owned)
+            fail('unregistered coordinator profile cannot be overwritten');
+        const state = await status(systemctlPin, coordinator, signal);
+        if (!['inactive', 'failed'].includes(state.ActiveState) || state.MainPID !== '0')
+            fail('partial coordinator must be stopped before package repair');
+        if (local)
+            await installRsiLocalProfile({ dshHome: input.dshHome, profile: coordinator, cohort: local,
+                bundles: coordinatorBundles, dsh: { path: executor.path, pin: { path: executor.path, sha256: executor.sha256 } }, signal });
+        else
+            await io.command(executor.path, ['plugin', '--profile', coordinator, 'add', ...coordinatorBundles.map(name => `@dsh-enhanced/${name}@${version}`)], { ...process.env, DSH_HOME: input.dshHome, npm_config_loglevel: 'error' }, signal, 300_000, 2_097_152);
+        if (!(await Promise.all(coordinatorBundles.map(matches))).every(Boolean))
+            fail('coordinator package installation is incomplete');
+    }
+    if (local)
+        await verifyRsiLocalInstalledPackages({ cohort: local, profilePath: root, bundles: [...coordinatorBundles] });
+    await io.directory(root, false);
+}
+async function systemctl(pin, args, signal) {
+    if (pin.interpreter !== null)
+        fail('automatic installation requires native systemctl');
+    if (createHash('sha256').update(await io.readStable(pin.path, 268_435_456, false, true)).digest('hex') !== pin.sha256)
+        fail('systemctl changed');
+    return io.command(pin.path, ['--user', ...args], process.env, signal, 40_000, 262_144);
+}
+async function status(pin, profile, signal) {
+    const text = await systemctl(pin, ['show', `dsh-profile-${profile}.service`,
+        '--property=LoadState,ActiveState,MainPID,InvocationID,NRestarts,FragmentPath,DropInPaths,WorkingDirectory'], signal);
+    return Object.fromEntries(text.split('\n').filter(Boolean).map(line => {
+        const index = line.indexOf('=');
+        if (index < 1)
+            fail('invalid systemctl status');
+        return [line.slice(0, index), line.slice(index + 1)];
+    }));
+}
+async function stopManaged(input, profile, pin, signal) {
+    const state = await status(pin, profile, signal);
+    if (state.LoadState === 'not-found' && state.MainPID === '0' && state.ActiveState === 'inactive')
+        return false;
+    const paths = systemdServicePaths({ dshHome: input.dshHome, profile });
+    if (state.LoadState !== 'loaded' || state.FragmentPath !== paths.unitPath || state.DropInPaths !== ''
+        || state.WorkingDirectory !== join(input.dshHome, 'profiles', profile))
+        fail(`service ${profile} is not the target installation's managed unit`);
+    const active = state.ActiveState === 'active';
+    await systemctl(pin, ['stop', paths.unitName], signal);
+    const stopped = await status(pin, profile, signal);
+    if (!['inactive', 'failed'].includes(stopped.ActiveState) || stopped.MainPID !== '0')
+        fail(`service ${profile} did not stop`);
+    if (stopped.ActiveState === 'failed')
+        await systemctl(pin, ['reset-failed', paths.unitName], signal);
+    return active;
+}
+async function observerReady(observer, state, signal) {
+    const value = await queryRuntimeObserver({ ...observer, signal });
+    if (value.processId !== Number(state.MainPID) || value.invocationId !== state.InvocationID
+        || value.profilePath !== observer.profilePath || value.observerConfigDigest !== runtimeConfigDigest(observer)
+        || Math.abs(Date.now() - value.observedAt) > 5_000 || value.entries.length !== observer.targets.length)
+        fail('runtime observation differs from installed Host');
+    for (const target of observer.targets) {
+        const entry = value.entries.find(item => item.entryId === target.entryId);
+        if (!entry?.active || entry.module !== target.module || entry.configDigest !== target.configDigest
+            || target.services.some(name => !entry.services.some(service => service.name === name && service.instance !== null)))
+            fail('installed Loader entries are not ready');
+    }
+}
+export function assertRsiMemoryScanActivation(manifest, records) {
+    const learning = manifest.memoryLearning?.learning;
+    if (!learning)
+        return;
+    const owner = learning.owner, digest = growthObjectDigest(learning);
+    const id = `memory-scan-${growthObjectDigest([learning.authorityId, owner])}`;
+    const registration = records.find(item => item.id === id);
+    const definition = registration?.definition, execution = definition?.execution;
+    if (!registration || registration.owner !== 'assistant-memory-learning'
+        || definition?.principal !== owner.principalId || definition.workspace !== owner.workspace
+        || definition.agentPreset !== owner.agentPreset || definition.budgetId !== learning.scanBudgetId
+        || definition.budgetAmount !== learning.scanBudgetAmount || definition.retrySafety !== 'never'
+        || definition.maxRetries !== 0 || execution?.kind !== 'host'
+        || execution.executorId !== 'assistant-memory-learning-v1' || execution.executorContractVersion !== 1
+        || execution.runbookId !== 'scan' || execution.runbookVersion !== 1
+        || execution.catalogDigest !== growthObjectDigest({ executor: 'assistant-memory-learning-v1', contract: 1 })
+        || execution.ownerRouteId !== owner.authorityId || execution.activationNonce !== digest
+        || !isDeepStrictEqual(execution.targetScope, { workspace: owner.workspace, preset: owner.agentPreset })
+        || execution.scopeDigest !== growthObjectDigest([owner.workspace, owner.agentPreset])) {
+        fail('target has no matching owner-bound native memory scan activation');
+    }
+}
+async function ready(manifest, pin, signal, startedAt) {
+    const home = manifest.controlPlane.runtimeObserver.profilePath.split('/profiles/').slice(0, -1).join('/profiles/');
+    const memoryDatabasePath = manifest.memoryLearning === undefined ? undefined
+        : rsiDatabasePaths(rsiSetupPorts.dump(manifest.targetProfile, home), home).automationsDatabasePath;
+    if (manifest.memoryLearning) {
+        for (const [id, service] of [['dsh-enhanced-personal-assistant', 'personalMemory'],
+            ['dsh-enhanced-assistant-verifier', 'assistantVerifier'],
+            ['dsh-enhanced-assistant-memory-learning', 'assistantMemoryLearning']]) {
+            if (!manifest.controlPlane.runtimeObserver?.targets.some(target => target.entryId === id
+                && target.services.includes(service)))
+                fail(`target memory observer is missing ${id}`);
+        }
+    }
+    const deadline = Date.now() + 60_000;
+    let stableSince = 0, last = '', failure;
+    while (Date.now() < deadline) {
+        signal.throwIfAborted();
+        try {
+            const states = await Promise.all([manifest.targetProfile, manifest.coordinatorProfile].map(profile => status(pin, profile, signal)));
+            if (states.some(state => state.ActiveState !== 'active' || !/^\d+$/u.test(state.MainPID ?? '') || Number(state.MainPID) < 1
+                || !/^[a-f0-9]{32}$/u.test(state.InvocationID ?? '')))
+                fail('Host services are not running');
+            await observerReady(manifest.controlPlane.runtimeObserver, states[0], signal);
+            if (memoryDatabasePath)
+                assertRsiMemoryScanActivation(manifest, listActiveAutomationsLocally(memoryDatabasePath));
+            const scope = manifest.controlPlane.taskObservations.scope;
+            const coordinatorId = manifest.controlPlane.sourceAdoptions.handoff.coordinatorId;
+            const id = `adoption-coordinator-${controlPlaneDigest({ coordinatorId, scope }).slice(0, 40)}`;
+            const registration = listActiveAutomationsLocally(join(home, 'rsi-coordinators', manifest.coordinatorProfile, 'automations.sqlite')).find(item => item.id === id);
+            if (!registration || registration.owner !== 'plugin-control-plane-adoption-coordinator'
+                || registration.updatedAt < startedAt || registration.definition.execution?.kind !== 'host'
+                || registration.definition.execution.executorId !== 'plugin-control-plane-adoption-coordinator-v1'
+                || registration.definition.execution.ownerRouteId !== scope.ownerRouteId
+                || registration.definition.principal !== scope.principalId || registration.definition.workspace !== scope.workspace
+                || registration.definition.agentPreset !== scope.preset)
+                fail('coordinator has no fresh owner-bound native activation');
+            const current = JSON.stringify(states.map(state => [state.MainPID, state.InvocationID, state.NRestarts]));
+            if (last !== current) {
+                stableSince = Date.now();
+                last = current;
+            }
+            if (Date.now() - stableSince >= 12_000)
+                return;
+        }
+        catch (error) {
+            failure = error;
+            stableSince = 0;
+            last = '';
+        }
+        await delay(250, undefined, { signal });
+    }
+    throw new Error('rsi install: dual Host readiness failed; applied configuration retained for retry', { cause: failure });
+}
+export const rsiInstallPorts = {
+    prepare: prepareResources, collect: collectRsiInstalledInputs, coordinator: ensureCoordinator, setup: rsiSetupPorts,
+    capture: captureRsiSystemdUnitProperties, readUnit: readRsiSystemdUnitProperties, stop: stopManaged, ready, configure: configureRsiSetupLocked, prepareOwner: prepareRsiOwnerConfiguration,
+};
+/** Installer-owned process, never invoked from the Host being restarted. */
+export async function installRsiOwnerDeployment(input, ports = rsiInstallPorts) {
+    if (!profilePattern.test(input.profile) || await realpath(input.dshHome) !== input.dshHome)
+        fail('invalid installation identity');
+    const signal = AbortSignal.any([input.signal ?? new AbortController().signal, AbortSignal.timeout(2_400_000)]);
+    signal.throwIfAborted();
+    return withDshHomeLifecycleLock(input.dshHome, async () => {
+        let prepared;
+        try {
+            prepared = await ports.prepare(input, signal);
+        }
+        catch (error) {
+            signal.throwIfAborted();
+            if (error instanceof RsiBuildUnavailableError || error instanceof RsiReleaseBuildUnavailableError)
+                return { mode: 'not-ready', reason: error.message };
+            throw error;
+        }
+        const { resources, runtime, source, build, release } = prepared;
+        let targetEffective = ports.setup.dump(input.profile, input.dshHome);
+        let installed;
+        try {
+            installed = await ports.collect({ dshHome: input.dshHome, targetProfile: input.profile, targetEffective, resources, source });
+        }
+        catch (error) {
+            signal.throwIfAborted();
+            if (error instanceof RsiInstalledInputsUnavailableError)
+                return { mode: 'not-ready', reason: error.message };
+            throw error;
+        }
+        const coordinatorProfile = rsiCoordinatorProfile(input.profile);
+        await ports.coordinator(input, coordinatorProfile, installed.executor, signal, installed.systemctl);
+        const pair = [input.profile, coordinatorProfile];
+        const setupJournal = join(input.dshHome, '.rsi-setup-journal.json');
+        if (await exists(setupJournal)) {
+            const interrupted = JSON.parse((await io.readStable(setupJournal, 2_097_152, true)).toString('utf8'));
+            if (interrupted.stage === 'prepared') {
+                if (!Array.isArray(interrupted.entries) || interrupted.entries.length !== 2
+                    || interrupted.entries.some((entry, index) => entry.profile !== pair[index]))
+                    fail('interrupted setup belongs to another profile pair');
+                const recoveryRunning = [];
+                for (const profile of [...pair].reverse())
+                    if (await ports.stop(input, profile, installed.systemctl, signal))
+                        recoveryRunning.push(profile);
+                await ports.configure({ dshHome: input.dshHome, manifestPath: join(resources.configRoot, 'manifest.json'),
+                    apply: false, rollback: true, start: false, confirmStopped: true, help: false }, ports.setup);
+                // A successful rollback restores a known deployment. Restore prior
+                // availability before any new owner or source preflight can fail.
+                for (const profile of recoveryRunning)
+                    await ports.setup.start(profile, input.dshHome);
+                targetEffective = ports.setup.dump(input.profile, input.dshHome);
+                installed = await ports.collect({ dshHome: input.dshHome, targetProfile: input.profile, targetEffective, resources, source });
+            }
+        }
+        const profiles = { targetPatch: (await io.readStable(join(input.dshHome, 'profiles', pair[0], 'cordis.patch.yml'), 2_097_152)).toString('utf8'),
+            targetEffective, coordinatorPatch: (await io.readStable(join(input.dshHome, 'profiles', pair[1], 'cordis.patch.yml'), 2_097_152)).toString('utf8'),
+            coordinatorEffective: ports.setup.dump(pair[1], input.dshHome), coordinatorBase: await ports.setup.base(pair[1], input.dshHome) };
+        const snapshot = await ports.setup.snapshot(targetEffective, input.dshHome);
+        if (snapshot.bindings.length !== 1)
+            fail('exactly one active owner DM is required');
+        const binding = snapshot.bindings[0];
+        const storedManifest = join(resources.configRoot, 'manifest.json');
+        let now = Date.now(), expiresAt = now + 365 * 86_400_000;
+        let enableCreation = true;
+        let previousManifest;
+        if (await exists(storedManifest)) {
+            // A retry reuses the original installation's finite terms, never renews them.
+            const previous = JSON.parse((await io.readStable(storedManifest, 2_097_152, true)).toString('utf8'));
+            previousManifest = previous;
+            const host = JSON.parse((await io.readStable(join(resources.configRoot, 'host-authority.json'), 2_097_152, true)).toString('utf8'));
+            now = host.grant.notBefore;
+            expiresAt = previous.sourceReviews.expiresAt;
+            // Replaying a legacy installation must not silently add a new authority.
+            enableCreation = previous.pluginCreation !== undefined;
+        }
+        const manifest = createRsiBootstrapManifest({ dshHome: input.dshHome, targetProfile: pair[0], coordinatorProfile: pair[1],
+            targetEffective, owner: binding, resources, runtime, source, sourceBuild: build.sourceBuild,
+            ...(enableCreation && prepared.creationBuild ? { creationBuild: prepared.creationBuild } : {}),
+            git: installed.git, now, expiresAt, plugins: installed.plugins,
+            observerTargets: installed.observerTargets, hostDeploymentInputs: installed.hostDeploymentInputs });
+        if (previousManifest && !isDeepStrictEqual(previousManifest, manifest))
+            fail('existing manifest differs before stopping Hosts');
+        if (previousManifest) {
+            const compiledPatches = await ports.setup.compile({ manifest, dshHome: input.dshHome,
+                ...profiles, owner: binding });
+            await inspectRsiOwnerConfiguration({ manifest, resources, patches: compiledPatches, signal });
+        }
+        const inventories = await captureRsiAutomationInventories(ports.setup.automationInventory, targetEffective, profiles.coordinatorEffective, input.dshHome, coordinatorProfile);
+        assertRsiSchedulerActivation(inventories, input.ackExistingAutomations === true);
+        const previousJournal = await exists(setupJournal) ? (await io.readStable(setupJournal, 2_097_152, true)).toString('utf8') : null;
+        const running = new Set();
+        let applied = false;
+        try {
+            for (const profile of [...pair].reverse())
+                if (await ports.stop(input, profile, installed.systemctl, signal))
+                    running.add(profile);
+            signal.throwIfAborted();
+            if (!isDeepStrictEqual(snapshot.bindings, (await ports.setup.snapshot(targetEffective, input.dshHome)).bindings)
+                || ports.setup.dump(pair[0], input.dshHome) !== targetEffective
+                || ports.setup.dump(pair[1], input.dshHome) !== profiles.coordinatorEffective)
+                fail('owner or profile changed while stopping Hosts');
+            if (!isDeepStrictEqual(inventories, await captureRsiAutomationInventories(ports.setup.automationInventory, targetEffective, profiles.coordinatorEffective, input.dshHome, coordinatorProfile)))
+                fail('Automation inventory changed while stopping Hosts');
+            const unitProperties = await ports.capture({ dshHome: input.dshHome, profile: pair[0] }, { systemctl: { ...installed.systemctl, interpreter: null }, environment: manifest.serviceEnvironment.target, signal });
+            const configuration = await ports.prepareOwner({ manifest, resources, runtime, source, releaseBuild: release.releaseBuild,
+                executor: installed.executor, systemctl: installed.systemctl, unitProperties, policies: installed.policies, now }, { binding, profiles, signal });
+            const args = { dshHome: input.dshHome, manifestPath: configuration.manifestPath, apply: true, rollback: false,
+                start: false, confirmStopped: true, help: false, ackExistingAutomations: input.ackExistingAutomations === true,
+                expectedAutomationInventories: inventories };
+            const deploymentPorts = { ...ports.setup, async validateServiceUnits(value, environment) {
+                    await ports.setup.validateServiceUnits(value, environment);
+                    const current = await ports.readUnit({ dshHome: input.dshHome, profile: pair[0] }, { systemctl: { ...installed.systemctl, interpreter: null }, signal });
+                    if (!isDeepStrictEqual(current, unitProperties))
+                        fail('final loaded systemd unit differs from the installation grant');
+                } };
+            await ports.configure(args, deploymentPorts);
+            applied = true;
+            signal.throwIfAborted();
+            // The setup journal remains the source of recovery truth after application.
+            const startedAt = Date.now();
+            await ports.setup.start(pair[1], input.dshHome);
+            await ports.setup.start(pair[0], input.dshHome);
+            await ports.ready(manifest, installed.systemctl, signal, startedAt);
+            await deploymentPorts.validateServiceUnits(manifest, manifest.serviceEnvironment.target);
+            return { mode: 'ready', profiles: pair, manifestPath: configuration.manifestPath };
+        }
+        catch (error) {
+            if (!applied) {
+                // Restore availability only when all profile bytes and the unit are still
+                // the original deployment. Unknown outcomes retain stopped services.
+                const unchanged = await Promise.all(pair.map(async (profile, index) => {
+                    const bytes = (await io.readStable(join(input.dshHome, 'profiles', profile, 'cordis.patch.yml'), 2_097_152)).toString('utf8');
+                    return bytes === (index === 0 ? profiles.targetPatch : profiles.coordinatorPatch);
+                })).catch(() => [false]);
+                const recoveredJournal = await exists(setupJournal) ? (await io.readStable(setupJournal, 2_097_152, true)).toString('utf8') : null;
+                if (unchanged.every(Boolean) && recoveredJournal === previousJournal) {
+                    for (const profile of [...pair].reverse())
+                        if (running.has(profile)) {
+                            const environment = await readRsiServiceEnvironment(input.dshHome, profile);
+                            const rendered = await ports.setup.renderServiceUnit(profile, input.dshHome, environment ?? {});
+                            const actual = await readFile(ports.setup.serviceUnitPath(profile, input.dshHome), 'utf8').catch(() => '');
+                            if (actual === rendered)
+                                await ports.setup.start(profile, input.dshHome);
+                        }
+                }
+            }
+            throw error;
+        }
+    });
+}
+//# sourceMappingURL=rsi-install.js.map

package/lib/rsi-install.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rsi-install.js","sourceRoot":"","sources":["../src/rsi-install.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AACxC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAA;AACnE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAChC,OAAO,EAAE,UAAU,IAAI,KAAK,EAAE,MAAM,sBAAsB,CAAA;AAC1D,OAAO,EAAE,4BAA4B,EAAE,MAAM,qCAAqC,CAAA;AAClF,OAAO,EAAE,kBAAkB,EAAE,MAAM,yCAAyC,CAAA;AAC5E,OAAO,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAA;AAC7C,OAAO,EAAE,kBAAkB,EAAE,oBAAoB,EAAE,mBAAmB,EAA8B,MAAM,oCAAoC,CAAA;AAC9I,OAAO,EAAE,wBAAwB,EAAE,MAAM,YAAY,CAAA;AACrD,OAAO,EAAE,yBAAyB,EAAE,MAAM,iBAAiB,CAAA;AAC3D,OAAO,EAAE,0BAA0B,EAAE,wBAAwB,EAAE,iBAAiB,IAAI,EAAE,EAAE,MAAM,gBAAgB,CAAA;AAC9G,OAAO,EAAE,iCAAiC,EAAE,+BAA+B,EAAE,MAAM,wBAAwB,CAAA;AAC3G,OAAO,EAAE,0BAA0B,EAAE,MAAM,4BAA4B,CAAA;AACvE,OAAO,EAAE,4BAA4B,EAAE,MAAM,8BAA8B,CAAA;AAC3E,OAAO,EAAE,0BAA0B,EAAE,MAAM,6BAA6B,CAAA;AACxE,OAAO,EAAE,kCAAkC,EAAoC,MAAM,yBAAyB,CAAA;AAC9G,OAAO,EAAE,8BAA8B,EAAE,MAAM,0BAA0B,CAAA;AACzE,OAAO,EAAE,4BAA4B,EAAE,4BAA4B,EAAE,MAAM,oBAAoB,CAAA;AAC/F,OAAO,EAAE,yBAAyB,EAAE,kCAAkC,EAAE,MAAM,yBAAyB,CAAA;AACvG,OAAO,EAAE,+BAA+B,EAAE,4BAA4B,EAAE,MAAM,4BAA4B,CAAA;AAC1G,OAAO,EAAE,uBAAuB,EAAE,aAAa,EAAsB,MAAM,gBAAgB,CAAA;AAC3F,OAAO,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAA;AAGlD,OAAO,EAAE,yBAAyB,EAAE,MAAM,8BAA8B,CAAA;AACxE,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAA;AACtC,OAAO,EAAE,kBAAkB,EAAE,+BAA+B,EAAE,MAAM,uBAAuB,CAAA;AAC3F,OAAO,EAAE,sBAAsB,EAAE,2BAA2B,EAAE,MAAM,wBAAwB,CAAA;AAC5F,OAAO,EAAE,4BAA4B,EAAE,+BAA+B,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAA;AAExH,MAAM,cAAc,GAAG,oCAAoC,CAAA;AAC3D,MAAM,kBAAkB,GAAG,CAAC,kBAAkB,EAAE,uBAAuB,EAAE,sBAAsB,CAAU,CAAA;AACzG,MAAM,IAAI,GAAG,CAAC,KAAa,EAAU,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;AACxF,SAAS,IAAI,CAAC,OAAe,IAAW,MAAM,IAAI,KAAK,CAAC,gBAAgB,OAAO,EAAE,CAAC,CAAA,CAAC,CAAC;AAGpF,KAAK,UAAU,MAAM,CAAC,IAAY;IAChC,IAAI,CAAC;QAAC,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC;QAAC,OAAO,IAAI,CAAA;IAAC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAAC,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,MAAM,KAAK,CAAC;QAAC,OAAO,KAAK,CAAA;IAAC,CAAC;AAC5I,CAAC;AACD,6EAA6E;AAC7E,MAAM,UAAU,qBAAqB,CAAC,OAAe;IACnD,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,OAAO,CAAC;QAAE,IAAI,CAAC,wBAAwB,CAAC,CAAA;IACjE,OAAO,OAAO,OAAO,CAAC,KAAK,CAAC,CAAC,EAAC,EAAE,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,EAAC,EAAE,CAAC,EAAE,CAAA;AAClE,CAAC;AACD,KAAK,UAAU,gBAAgB,CAAC,KAAsB,EAAE,MAAmB;IACzE,MAAM,MAAM,GAAG,MAAM,yBAAyB,CAAC,EAAE,GAAG,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAA;IAC7E,MAAM,OAAO,GAAG,MAAM,0BAA0B,CAAC,EAAE,GAAG,KAAK,EAAE,MAAM,EAAE,CAAC,CAAA;IACtE,MAAM,SAAS,GAAG,MAAM,4BAA4B,CAAC,EAAE,GAAG,KAAK,EAAE,MAAM,EAAE,CAAC,CAAA;IAC1E,MAAM,KAAK,GAAG,MAAM,0BAA0B,CAAC,EAAE,GAAG,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAA;IAC5E,MAAM,OAAO,GAAG,MAAM,iCAAiC,CAAC,EAAE,GAAG,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAA;IACpF,MAAM,cAAc,GAAG,IAAI,CAAC,SAAS,CAAC,UAAU,EAAE,eAAe,CAAC,CAAA;IAClE,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,cAAc,CAAC;QAC3C,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,EAAE,CAAC,UAAU,CAAC,cAAc,EAAE,SAAS,EAAE,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAqB;QACzG,CAAC,CAAC,SAAS,CAAA;IACb,IAAI,QAAQ,EAAE,cAAc,KAAK,SAAS;QAAE,8BAA8B,CAAC,QAAQ,CAAC,cAAc,EAAE,QAAQ,CAAC,aAAa,CAAC,KAAK,CAAC,CAAA;IACjI,MAAM,aAAa,GAA4C,QAAQ,IAAI,QAAQ,CAAC,cAAc,KAAK,SAAS;QAC9G,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,kCAAkC,CAAC,EAAE,GAAG,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAA;IAC7F,IAAI,aAAa,EAAE,CAAC;QAClB,KAAK,MAAM,IAAI,IAAI,CAAC,wBAAwB,EAAE,0BAA0B,CAAC,EAAE,CAAC;YAC1E,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE,IAAI,CAAC,CAAA;YAC5C,IAAI,CAAC,MAAM,MAAM,CAAC,IAAI,CAAC;gBAAE,MAAM,KAAK,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAA;YAC3D,MAAM,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,CAAA;QAC1B,CAAC;IACH,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAA;AACpG,CAAC;AACD,KAAK,UAAU,iBAAiB,CAAC,KAAsB,EAAE,WAAmB,EAC1E,QAA6C,EAAE,MAAmB,EAAE,YAAkD;IACtH,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,UAAU,EAAE,WAAW,CAAC,CAAA;IACzD,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,oBAAoB,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,EAAC,EAAE,CAAC,OAAO,CAAC,CAAA;IACnG,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,EAAC,aAAa,EAAC,CAAC,EAAC,aAAa,EAAC,KAAK,CAAC,OAAO,EAAC,kBAAkB,EAAC,WAAW;QACxG,OAAO,EAAC,gBAAgB,EAAC,KAAK,CAAC,gBAAgB,IAAI,IAAI,EAAC,CAAC,CAAA;IAC3D,IAAI,KAAK,GAAG,MAAM,MAAM,CAAC,WAAW,CAAC,CAAA;IACrC,IAAI,KAAK,IAAI,CAAC,MAAM,EAAE,CAAC,UAAU,CAAC,WAAW,EAAC,MAAM,EAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,OAAO;QAAE,IAAI,CAAC,yDAAyD,CAAC,CAAA;IACzJ,IAAI,MAAM,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK;QAAE,IAAI,CAAC,wDAAwD,CAAC,CAAA;IAChG,IAAI,CAAC,MAAM,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;QAClC,MAAM,EAAE,CAAC,cAAc,CAAC,WAAW,EAAC,OAAO,CAAC,CAAC;QAAC,MAAM,EAAE,CAAC,aAAa,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAAC,KAAK,GAAG,IAAI,CAAA;IACnG,CAAC;IACD,MAAM,OAAO,GAAG,KAAK,EAAE,IAAY,EAAoB,EAAE;QACvD,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,EAAC,cAAc,EAAC,eAAe,EAAC,IAAI,EAAC,cAAc,CAAC,CAAA;QAC1E,IAAI,CAAC,MAAM,MAAM,CAAC,IAAI,CAAC;YAAE,OAAO,KAAK,CAAA;QACrC,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,EAAE,CAAC,UAAU,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,EAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAiC,CAAA;QAChI,IAAI,QAAQ,CAAC,IAAI,KAAK,iBAAiB,IAAI,EAAE,IAAI,QAAQ,CAAC,OAAO,KAAK,OAAO;YAAE,IAAI,CAAC,wDAAwD,CAAC,CAAA;QAC7I,OAAO,IAAI,CAAA;IACb,CAAC,CAAA;IACD,IAAI,QAAQ,GAAG,CAAC,MAAM,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAA;IAClF,MAAM,KAAK,GAAG,KAAK,CAAC,gBAAgB,CAAC,CAAC,CAAC,MAAM,kBAAkB,CAAC,EAAC,OAAO,EAAC,KAAK,CAAC,OAAO,EAAC,OAAO,EAAC,KAAK,CAAC,OAAO,EAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;IAC1H,IAAI,KAAK,IAAI,CAAC,KAAK,CAAC,gBAAgB,KAAK,KAAK,CAAC,gBAAgB,IAAI,KAAK,CAAC,OAAO,KAAK,OAAO,CAAC;QAAE,IAAI,CAAC,+DAA+D,CAAC,CAAA;IACpK,IAAI,KAAK,IAAI,QAAQ,EAAE,CAAC;QACtB,IAAI,CAAC;YAAC,MAAM,+BAA+B,CAAC,EAAC,MAAM,EAAC,KAAK,EAAC,WAAW,EAAC,IAAI,EAAC,OAAO,EAAC,CAAC,GAAG,kBAAkB,CAAC,EAAC,CAAC,CAAA;QAAC,CAAC;QAC9G,OAAO,KAAK,EAAE,CAAC;YAAC,IAAI,CAAC,2BAA2B,CAAC,KAAK,CAAC;gBAAE,MAAM,KAAK,CAAC;YAAC,QAAQ,GAAG,KAAK,CAAA;QAAC,CAAC;IAC1F,CAAC;IACD,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,IAAI,CAAC,KAAK;YAAE,IAAI,CAAC,wDAAwD,CAAC,CAAA;QAC1E,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,YAAY,EAAC,WAAW,EAAC,MAAM,CAAC,CAAA;QAC3D,IAAI,CAAC,CAAC,UAAU,EAAC,QAAQ,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,WAAY,CAAC,IAAI,KAAK,CAAC,OAAO,KAAK,GAAG;YAAE,IAAI,CAAC,2DAA2D,CAAC,CAAA;QACnJ,IAAI,KAAK;YAAE,MAAM,sBAAsB,CAAC,EAAC,OAAO,EAAC,KAAK,CAAC,OAAO,EAAC,OAAO,EAAC,WAAW,EAAC,MAAM,EAAC,KAAK;gBAC7F,OAAO,EAAC,kBAAkB,EAAC,GAAG,EAAC,EAAC,IAAI,EAAC,QAAQ,CAAC,IAAI,EAAC,GAAG,EAAC,EAAC,IAAI,EAAC,QAAQ,CAAC,IAAI,EAAC,MAAM,EAAC,QAAQ,CAAC,MAAM,EAAC,EAAC,EAAC,MAAM,EAAC,CAAC,CAAA;;YACzG,MAAM,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE,WAAW,EAAE,WAAW,EAAE,KAAK,EAAE,GAAG,kBAAkB,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,iBAAiB,IAAI,IAAI,OAAO,EAAE,CAAC,CAAC,EACrJ,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,QAAQ,EAAE,KAAK,CAAC,OAAO,EAAE,mBAAmB,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,CAAC,CAAA;QACxG,IAAI,CAAC,CAAC,MAAM,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC;YAAE,IAAI,CAAC,gDAAgD,CAAC,CAAA;IAClI,CAAC;IACD,IAAI,KAAK;QAAE,MAAM,+BAA+B,CAAC,EAAC,MAAM,EAAC,KAAK,EAAC,WAAW,EAAC,IAAI,EAAC,OAAO,EAAC,CAAC,GAAG,kBAAkB,CAAC,EAAC,CAAC,CAAA;IACjH,MAAM,EAAE,CAAC,SAAS,CAAC,IAAI,EAAE,KAAK,CAAC,CAAA;AACjC,CAAC;AACD,KAAK,UAAU,SAAS,CAAC,GAAyC,EAAE,IAAc,EAAE,MAAmB;IACrG,IAAI,GAAG,CAAC,WAAW,KAAK,IAAI;QAAE,IAAI,CAAC,kDAAkD,CAAC,CAAA;IACtF,IAAI,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,MAAM;QAAE,IAAI,CAAC,mBAAmB,CAAC,CAAA;IAChJ,OAAO,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE,GAAG,IAAI,CAAC,EAAE,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,CAAA;AACxF,CAAC;AACD,KAAK,UAAU,MAAM,CAAC,GAAyC,EAAE,OAAe,EAAE,MAAmB;IACnG,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,GAAG,EAAE,CAAC,MAAM,EAAE,eAAe,OAAO,UAAU;QACzE,2GAA2G,CAAC,EAAE,MAAM,CAAC,CAAA;IACvH,OAAO,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE;QACpE,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAAC,IAAI,KAAK,GAAG,CAAC;YAAE,IAAI,CAAC,0BAA0B,CAAC,CAAC;QAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAC,KAAK,CAAC,EAAC,IAAI,CAAC,KAAK,CAAC,KAAK,GAAC,CAAC,CAAC,CAAC,CAAA;IACpI,CAAC,CAAC,CAAC,CAAA;AACL,CAAC;AACD,KAAK,UAAU,WAAW,CAAC,KAAsB,EAAE,OAAe,EAAE,GAAyC,EAAE,MAAmB;IAChI,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,GAAG,EAAE,OAAO,EAAE,MAAM,CAAC,CAAA;IAChD,IAAI,KAAK,CAAC,SAAS,KAAK,WAAW,IAAI,KAAK,CAAC,OAAO,KAAK,GAAG,IAAI,KAAK,CAAC,WAAW,KAAK,UAAU;QAAE,OAAO,KAAK,CAAA;IAC9G,MAAM,KAAK,GAAG,mBAAmB,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,OAAO,EAAE,CAAC,CAAA;IACtE,IAAI,KAAK,CAAC,SAAS,KAAK,QAAQ,IAAI,KAAK,CAAC,YAAY,KAAK,KAAK,CAAC,QAAQ,IAAI,KAAK,CAAC,WAAW,KAAK,EAAE;WAChG,KAAK,CAAC,gBAAgB,KAAK,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,UAAU,EAAE,OAAO,CAAC;QAAE,IAAI,CAAC,WAAW,OAAO,gDAAgD,CAAC,CAAA;IAClJ,MAAM,MAAM,GAAG,KAAK,CAAC,WAAW,KAAK,QAAQ,CAAA;IAC7C,MAAM,SAAS,CAAC,GAAG,EAAE,CAAC,MAAM,EAAE,KAAK,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,CAAA;IACtD,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,GAAG,EAAE,OAAO,EAAE,MAAM,CAAC,CAAA;IAClD,IAAI,CAAC,CAAC,UAAU,EAAC,QAAQ,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,WAAY,CAAC,IAAI,OAAO,CAAC,OAAO,KAAK,GAAG;QAAE,IAAI,CAAC,WAAW,OAAO,eAAe,CAAC,CAAA;IAC7H,IAAI,OAAO,CAAC,WAAW,KAAK,QAAQ;QAAE,MAAM,SAAS,CAAC,GAAG,EAAE,CAAC,cAAc,EAAE,KAAK,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,CAAA;IACpG,OAAO,MAAM,CAAA;AACf,CAAC;AACD,KAAK,UAAU,aAAa,CAAC,QAA+B,EAAE,KAA4B,EAAE,MAAmB;IAC7G,MAAM,KAAK,GAAG,MAAM,oBAAoB,CAAC,EAAE,GAAG,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAA;IACjE,IAAI,KAAK,CAAC,SAAS,KAAK,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC,YAAY,KAAK,KAAK,CAAC,YAAY;WACrF,KAAK,CAAC,WAAW,KAAK,QAAQ,CAAC,WAAW,IAAI,KAAK,CAAC,oBAAoB,KAAK,mBAAmB,CAAC,QAAQ,CAAC;WAC1G,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC,UAAU,CAAC,GAAG,KAAK,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,KAAK,QAAQ,CAAC,OAAO,CAAC,MAAM;QAAE,IAAI,CAAC,iDAAiD,CAAC,CAAA;IACjK,KAAK,MAAM,MAAM,IAAI,QAAQ,CAAC,OAAO,EAAE,CAAC;QACtC,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,OAAO,KAAK,MAAM,CAAC,OAAO,CAAC,CAAA;QACzE,IAAI,CAAC,KAAK,EAAE,MAAM,IAAI,KAAK,CAAC,MAAM,KAAK,MAAM,CAAC,MAAM,IAAI,KAAK,CAAC,YAAY,KAAK,MAAM,CAAC,YAAY;eAC7F,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,IAAI,KAAK,IAAI,IAAI,OAAO,CAAC,QAAQ,KAAK,IAAI,CAAC,CAAC;YAAE,IAAI,CAAC,wCAAwC,CAAC,CAAA;IACxK,CAAC;AACH,CAAC;AACD,MAAM,UAAU,6BAA6B,CAAC,QAA0B,EACtE,OAAwD;IACxD,MAAM,QAAQ,GAAG,QAAQ,CAAC,cAAc,EAAE,QAAQ,CAAA;IAClD,IAAI,CAAC,QAAQ;QAAE,OAAM;IACrB,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,kBAAkB,CAAC,QAAQ,CAAC,CAAA;IACnE,MAAM,EAAE,GAAG,eAAe,kBAAkB,CAAC,CAAC,QAAQ,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC,EAAE,CAAA;IAC7E,MAAM,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,CAAC,CAAA;IACzD,MAAM,UAAU,GAAG,YAAY,EAAE,UAAU,EAAE,SAAS,GAAG,UAAU,EAAE,SAAS,CAAA;IAC9E,IAAI,CAAC,YAAY,IAAI,YAAY,CAAC,KAAK,KAAK,2BAA2B;WAClE,UAAU,EAAE,SAAS,KAAK,KAAK,CAAC,WAAW,IAAI,UAAU,CAAC,SAAS,KAAK,KAAK,CAAC,SAAS;WACvF,UAAU,CAAC,WAAW,KAAK,KAAK,CAAC,WAAW,IAAI,UAAU,CAAC,QAAQ,KAAK,QAAQ,CAAC,YAAY;WAC7F,UAAU,CAAC,YAAY,KAAK,QAAQ,CAAC,gBAAgB,IAAI,UAAU,CAAC,WAAW,KAAK,OAAO;WAC3F,UAAU,CAAC,UAAU,KAAK,CAAC,IAAI,SAAS,EAAE,IAAI,KAAK,MAAM;WACzD,SAAS,CAAC,UAAU,KAAK,8BAA8B,IAAI,SAAS,CAAC,uBAAuB,KAAK,CAAC;WAClG,SAAS,CAAC,SAAS,KAAK,MAAM,IAAI,SAAS,CAAC,cAAc,KAAK,CAAC;WAChE,SAAS,CAAC,aAAa,KAAK,kBAAkB,CAAC,EAAE,QAAQ,EAAE,8BAA8B,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;WACzG,SAAS,CAAC,YAAY,KAAK,KAAK,CAAC,WAAW,IAAI,SAAS,CAAC,eAAe,KAAK,MAAM;WACpF,CAAC,iBAAiB,CAAC,SAAS,CAAC,WAAW,EAAE,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC;WACpG,SAAS,CAAC,WAAW,KAAK,kBAAkB,CAAC,CAAC,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,WAAW,CAAC,CAAC,EAAE,CAAC;QACxF,IAAI,CAAC,kEAAkE,CAAC,CAAA;IAC1E,CAAC;AACH,CAAC;AACD,KAAK,UAAU,KAAK,CAAC,QAA0B,EAAE,GAAyC,EAAE,MAAmB,EAAE,SAAiB;IAChI,MAAM,IAAI,GAAG,QAAQ,CAAC,YAAY,CAAC,eAAgB,CAAC,WAAW,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,KAAK,CAAC,CAAC,EAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAA;IAClH,MAAM,kBAAkB,GAAG,QAAQ,CAAC,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS;QAC1E,CAAC,CAAC,gBAAgB,CAAC,aAAa,CAAC,IAAI,CAAC,QAAQ,CAAC,aAAa,EAAE,IAAI,CAAC,EAAE,IAAI,CAAC,CAAC,uBAAuB,CAAA;IACpG,IAAI,QAAQ,CAAC,cAAc,EAAE,CAAC;QAC5B,KAAK,MAAM,CAAC,EAAE,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC,iCAAiC,EAAE,gBAAgB,CAAC;YAChF,CAAC,iCAAiC,EAAE,mBAAmB,CAAC;YACxD,CAAC,wCAAwC,EAAE,yBAAyB,CAAC,CAAU,EAAE,CAAC;YAClF,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,eAAe,EAAE,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,OAAO,KAAK,EAAE;mBACnF,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;gBAAE,IAAI,CAAC,qCAAqC,EAAE,EAAE,CAAC,CAAA;QAC1F,CAAC;IACH,CAAC;IACD,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAA;IACpC,IAAI,WAAW,GAAG,CAAC,EAAE,IAAI,GAAG,EAAE,EAAE,OAAgB,CAAA;IAChD,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,EAAE,CAAC;QAC7B,MAAM,CAAC,cAAc,EAAE,CAAA;QACvB,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,aAAa,EAAE,QAAQ,CAAC,kBAAkB,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,MAAM,CAAC,GAAG,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,CAAA;YACpI,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,WAAW,KAAK,QAAQ,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,IAAI,EAAE,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC;mBACtH,CAAC,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC;gBAAE,IAAI,CAAC,+BAA+B,CAAC,CAAA;YAC9F,MAAM,aAAa,CAAC,QAAQ,CAAC,YAAY,CAAC,eAAgB,EAAE,MAAM,CAAC,CAAC,CAAE,EAAE,MAAM,CAAC,CAAA;YAC/E,IAAI,kBAAkB;gBAAE,6BAA6B,CAAC,QAAQ,EAAE,4BAA4B,CAAC,kBAAkB,CAAC,CAAC,CAAA;YACjH,MAAM,KAAK,GAAG,QAAQ,CAAC,YAAY,CAAC,gBAAiB,CAAC,KAAK,CAAA;YAC3D,MAAM,aAAa,GAAG,QAAQ,CAAC,YAAY,CAAC,eAAgB,CAAC,OAAQ,CAAC,aAAa,CAAA;YACnF,MAAM,EAAE,GAAG,wBAAwB,kBAAkB,CAAC,EAAC,aAAa,EAAC,KAAK,EAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAC,EAAE,CAAC,EAAE,CAAA;YAC1F,MAAM,YAAY,GAAG,4BAA4B,CAAC,IAAI,CAAC,IAAI,EAAC,kBAAkB,EAAC,QAAQ,CAAC,kBAAkB,EAAC,oBAAoB,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,CAAC,CAAA;YAC9J,IAAI,CAAC,YAAY,IAAI,YAAY,CAAC,KAAK,KAAK,2CAA2C;mBAClF,YAAY,CAAC,SAAS,GAAG,SAAS,IAAI,YAAY,CAAC,UAAU,CAAC,SAAS,EAAE,IAAI,KAAK,MAAM;mBACxF,YAAY,CAAC,UAAU,CAAC,SAAS,CAAC,UAAU,KAAK,8CAA8C;mBAC/F,YAAY,CAAC,UAAU,CAAC,SAAS,CAAC,YAAY,KAAK,KAAK,CAAC,YAAY;mBACrE,YAAY,CAAC,UAAU,CAAC,SAAS,KAAK,KAAK,CAAC,WAAW,IAAI,YAAY,CAAC,UAAU,CAAC,SAAS,KAAK,KAAK,CAAC,SAAS;mBAChH,YAAY,CAAC,UAAU,CAAC,WAAW,KAAK,KAAK,CAAC,MAAM;gBAAE,IAAI,CAAC,wDAAwD,CAAC,CAAA;YACzH,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,OAAO,EAAC,KAAK,CAAC,YAAY,EAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,CAAA;YACvG,IAAI,IAAI,KAAK,OAAO,EAAE,CAAC;gBAAC,WAAW,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;gBAAC,IAAI,GAAG,OAAO,CAAA;YAAC,CAAC;YAClE,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,WAAW,IAAI,MAAM;gBAAE,OAAM;QAChD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAAC,OAAO,GAAG,KAAK,CAAC;YAAC,WAAW,GAAG,CAAC,CAAC;YAAC,IAAI,GAAG,EAAE,CAAA;QAAC,CAAC;QAC/D,MAAM,KAAK,CAAC,GAAG,EAAE,SAAS,EAAE,EAAE,MAAM,EAAE,CAAC,CAAA;IACzC,CAAC;IACD,MAAM,IAAI,KAAK,CAAC,mFAAmF,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAA;AAC1H,CAAC;AAaD,MAAM,CAAC,MAAM,eAAe,GAAoB;IAC9C,OAAO,EAAE,gBAAgB,EAAE,OAAO,EAAE,yBAAyB,EAAE,WAAW,EAAE,iBAAiB,EAAE,KAAK,EAAE,aAAa;IACnH,OAAO,EAAE,+BAA+B,EAAE,QAAQ,EAAE,4BAA4B,EAAE,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,SAAS,EAAE,uBAAuB,EAAE,YAAY,EAAE,4BAA4B;CAC3L,CAAA;AAED,4EAA4E;AAC5E,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAAC,KAAsB,EAAE,QAAyB,eAAe;IAC9G,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,MAAM,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,KAAK,CAAC,OAAO;QAAE,IAAI,CAAC,+BAA+B,CAAC,CAAA;IACjI,MAAM,MAAM,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,MAAM,IAAI,IAAI,eAAe,EAAE,CAAC,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,CAAA;IAC9G,MAAM,CAAC,cAAc,EAAE,CAAA;IACvB,OAAO,wBAAwB,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,IAAI,EAAE;QACxD,IAAI,QAAsD,CAAA;QAC1D,IAAI,CAAC;YAAC,QAAQ,GAAG,MAAM,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC,CAAA;QAAC,CAAC;QACrD,OAAO,KAAK,EAAE,CAAC;YACb,MAAM,CAAC,cAAc,EAAE,CAAA;YACvB,IAAI,KAAK,YAAY,wBAAwB,IAAI,KAAK,YAAY,+BAA+B;gBAAE,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,EAAE,KAAK,CAAC,OAAO,EAAE,CAAA;YACtJ,MAAM,KAAK,CAAA;QACb,CAAC;QACD,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,QAAQ,CAAA;QAC/D,IAAI,eAAe,GAAG,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,CAAA;QACpE,IAAI,SAAgE,CAAA;QACpE,IAAI,CAAC;YAAC,SAAS,GAAG,MAAM,KAAK,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,aAAa,EAAE,KAAK,CAAC,OAAO,EAAE,eAAe,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,CAAA;QAAC,CAAC;QACrI,OAAO,KAAK,EAAE,CAAC;YACb,MAAM,CAAC,cAAc,EAAE,CAAA;YACvB,IAAI,KAAK,YAAY,kCAAkC;gBAAE,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,EAAE,KAAK,CAAC,OAAO,EAAE,CAAA;YAC5G,MAAM,KAAK,CAAA;QACb,CAAC;QACD,MAAM,kBAAkB,GAAG,qBAAqB,CAAC,KAAK,CAAC,OAAO,CAAC,CAAA;QAC/D,MAAM,KAAK,CAAC,WAAW,CAAC,KAAK,EAAE,kBAAkB,EAAE,SAAS,CAAC,QAAQ,EAAE,MAAM,EAAE,SAAS,CAAC,SAAS,CAAC,CAAA;QACnG,MAAM,IAAI,GAAG,CAAC,KAAK,CAAC,OAAO,EAAE,kBAAkB,CAAU,CAAA;QACzD,MAAM,YAAY,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,EAAC,yBAAyB,CAAC,CAAA;QAClE,IAAI,MAAM,MAAM,CAAC,YAAY,CAAC,EAAE,CAAC;YAC/B,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,EAAE,CAAC,UAAU,CAAC,YAAY,EAAC,SAAS,EAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAsD,CAAA;YACxJ,IAAI,WAAW,CAAC,KAAK,KAAK,UAAU,EAAE,CAAC;gBACrC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC,OAAO,CAAC,IAAI,WAAW,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC;uBACtE,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,EAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,KAAK,IAAI,CAAC,KAAK,CAAC,CAAC;oBAAE,IAAI,CAAC,mDAAmD,CAAC,CAAA;gBACxI,MAAM,eAAe,GAAa,EAAE,CAAA;gBACpC,KAAK,MAAM,OAAO,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC,OAAO,EAAE;oBAAE,IAAI,MAAM,KAAK,CAAC,IAAI,CAAC,KAAK,EAAC,OAAO,EAAC,SAAS,CAAC,SAAS,EAAC,MAAM,CAAC;wBAAE,eAAe,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;gBACxI,MAAM,KAAK,CAAC,SAAS,CAAC,EAAC,OAAO,EAAC,KAAK,CAAC,OAAO,EAAC,YAAY,EAAC,IAAI,CAAC,SAAS,CAAC,UAAU,EAAC,eAAe,CAAC;oBAClG,KAAK,EAAC,KAAK,EAAC,QAAQ,EAAC,IAAI,EAAC,KAAK,EAAC,KAAK,EAAC,cAAc,EAAC,IAAI,EAAC,IAAI,EAAC,KAAK,EAAC,EAAC,KAAK,CAAC,KAAK,CAAC,CAAA;gBACpF,mEAAmE;gBACnE,kEAAkE;gBAClE,KAAK,MAAM,OAAO,IAAI,eAAe;oBAAE,MAAM,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,EAAC,KAAK,CAAC,OAAO,CAAC,CAAA;gBACrF,eAAe,GAAG,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,EAAC,KAAK,CAAC,OAAO,CAAC,CAAA;gBAC/D,SAAS,GAAG,MAAM,KAAK,CAAC,OAAO,CAAC,EAAC,OAAO,EAAC,KAAK,CAAC,OAAO,EAAC,aAAa,EAAC,KAAK,CAAC,OAAO,EAAC,eAAe,EAAC,SAAS,EAAC,MAAM,EAAC,CAAC,CAAA;YACvH,CAAC;QACH,CAAC;QACD,MAAM,QAAQ,GAAG,EAAE,WAAW,EAAE,CAAC,MAAM,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,UAAU,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,kBAAkB,CAAC,EAAE,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC;YAC7I,eAAe,EAAE,gBAAgB,EAAE,CAAC,MAAM,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,UAAU,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,kBAAkB,CAAC,EAAE,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC;YAClJ,oBAAoB,EAAE,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,OAAO,CAAC,EAAE,eAAe,EAAE,MAAM,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,OAAO,CAAC,EAAE,CAAA;QACnI,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,eAAe,EAAE,KAAK,CAAC,OAAO,CAAC,CAAA;QAC3E,IAAI,QAAQ,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC;YAAE,IAAI,CAAC,yCAAyC,CAAC,CAAA;QACnF,MAAM,OAAO,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAE,CAAA;QACrC,MAAM,cAAc,GAAG,IAAI,CAAC,SAAS,CAAC,UAAU,EAAE,eAAe,CAAC,CAAA;QAClE,IAAI,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,EAAE,SAAS,GAAG,GAAG,GAAG,GAAG,GAAG,UAAU,CAAA;QACxD,IAAI,cAAc,GAAG,IAAI,CAAA;QACzB,IAAI,gBAA8C,CAAA;QAClD,IAAI,MAAM,MAAM,CAAC,cAAc,CAAC,EAAE,CAAC;YACjC,8EAA8E;YAC9E,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,EAAE,CAAC,UAAU,CAAC,cAAc,EAAE,SAAS,EAAE,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAqB,CAAA;YACxH,gBAAgB,GAAG,QAAQ,CAAA;YAC3B,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,UAAU,EAAC,qBAAqB,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAqC,CAAA;YACtK,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC;YAAC,SAAS,GAAG,QAAQ,CAAC,aAAa,CAAC,SAAS,CAAA;YACxE,yEAAyE;YACzE,cAAc,GAAG,QAAQ,CAAC,cAAc,KAAK,SAAS,CAAA;QACxD,CAAC;QACD,MAAM,QAAQ,GAAG,0BAA0B,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,aAAa,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,kBAAkB,EAAE,IAAI,CAAC,CAAC,CAAC;YACvH,eAAe,EAAE,KAAK,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW;YAC3F,GAAG,CAAC,cAAc,IAAI,QAAQ,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,QAAQ,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC9F,GAAG,EAAE,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE,SAAS,EAAE,OAAO,EAAE,SAAS,CAAC,OAAO;YAC9D,eAAe,EAAE,SAAS,CAAC,eAAe,EAAE,oBAAoB,EAAE,SAAS,CAAC,oBAAoB,EAAE,CAAC,CAAA;QACrG,IAAI,gBAAgB,IAAI,CAAC,iBAAiB,CAAC,gBAAgB,EAAE,QAAQ,CAAC;YAAE,IAAI,CAAC,iDAAiD,CAAC,CAAA;QAC/H,IAAI,gBAAgB,EAAE,CAAC;YACrB,MAAM,eAAe,GAAG,MAAM,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO;gBAClF,GAAG,QAAQ,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAA;YAChC,MAAM,4BAA4B,CAAC,EAAE,QAAQ,EAAE,SAAS,EAAE,OAAO,EAAE,eAAe,EAAE,MAAM,EAAE,CAAC,CAAA;QAC/F,CAAC;QACD,MAAM,WAAW,GAAG,MAAM,+BAA+B,CAAC,KAAK,CAAC,KAAK,CAAC,mBAAmB,EACvF,eAAe,EAAE,QAAQ,CAAC,oBAAoB,EAAE,KAAK,CAAC,OAAO,EAAE,kBAAkB,CAAC,CAAA;QACpF,4BAA4B,CAAC,WAAW,EAAE,KAAK,CAAC,sBAAsB,KAAK,IAAI,CAAC,CAAA;QAChF,MAAM,eAAe,GAAG,MAAM,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,UAAU,CAAC,YAAY,EAAC,SAAS,EAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;QAC/H,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAA;QACjC,IAAI,OAAO,GAAG,KAAK,CAAA;QACnB,IAAI,CAAC;YACH,KAAK,MAAM,OAAO,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC,OAAO,EAAE;gBAAE,IAAI,MAAM,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,OAAO,EAAE,SAAS,CAAC,SAAS,EAAE,MAAM,CAAC;oBAAE,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAA;YAClI,MAAM,CAAC,cAAc,EAAE,CAAA;YACvB,IAAI,CAAC,iBAAiB,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC,MAAM,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,eAAe,EAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC;mBAC1G,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAC,KAAK,CAAC,OAAO,CAAC,KAAK,eAAe;mBAC3D,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAC,KAAK,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,oBAAoB;gBAAE,IAAI,CAAC,+CAA+C,CAAC,CAAA;YACrI,IAAI,CAAC,iBAAiB,CAAC,WAAW,EAAE,MAAM,+BAA+B,CAAC,KAAK,CAAC,KAAK,CAAC,mBAAmB,EACvG,eAAe,EAAE,QAAQ,CAAC,oBAAoB,EAAE,KAAK,CAAC,OAAO,EAAE,kBAAkB,CAAC,CAAC;gBAAE,IAAI,CAAC,mDAAmD,CAAC,CAAA;YAChJ,MAAM,cAAc,GAAG,MAAM,KAAK,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,EACrF,EAAE,SAAS,EAAE,EAAE,GAAG,SAAS,CAAC,SAAS,EAAE,WAAW,EAAE,IAAI,EAAE,EAAE,WAAW,EAAE,QAAQ,CAAC,kBAAmB,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAA;YACzH,MAAM,aAAa,GAAG,MAAM,KAAK,CAAC,YAAY,CAAC,EAAE,QAAQ,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,OAAO,CAAC,YAAY;gBACvH,QAAQ,EAAE,SAAS,CAAC,QAAQ,EAAE,SAAS,EAAE,SAAS,CAAC,SAAS,EAAE,cAAc,EAAE,QAAQ,EAAE,SAAS,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAA;YACnJ,MAAM,IAAI,GAAG,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,YAAY,EAAE,aAAa,CAAC,YAAY,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK;gBAC3G,KAAK,EAAE,KAAK,EAAE,cAAc,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,sBAAsB,EAAE,KAAK,CAAC,sBAAsB,KAAK,IAAI;gBAC9G,6BAA6B,EAAE,WAAW,EAAE,CAAA;YAC9C,MAAM,eAAe,GAAkB,EAAE,GAAG,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,oBAAoB,CAAC,KAAK,EAAE,WAAW;oBACpG,MAAM,KAAK,CAAC,KAAK,CAAC,oBAAoB,CAAC,KAAK,EAAE,WAAW,CAAC,CAAA;oBAC1D,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,QAAQ,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,EAC/E,EAAE,SAAS,EAAE,EAAE,GAAG,SAAS,CAAC,SAAS,EAAE,WAAW,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,CAAC,CAAA;oBACvE,IAAI,CAAC,iBAAiB,CAAC,OAAO,EAAE,cAAc,CAAC;wBAAE,IAAI,CAAC,+DAA+D,CAAC,CAAA;gBACxH,CAAC,EAAE,CAAA;YACH,MAAM,KAAK,CAAC,SAAS,CAAC,IAAI,EAAE,eAAe,CAAC,CAAA;YAC5C,OAAO,GAAG,IAAI,CAAA;YACd,MAAM,CAAC,cAAc,EAAE,CAAA;YACvB,4EAA4E;YAC5E,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;YAC5B,MAAM,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAC,KAAK,CAAC,OAAO,CAAC,CAAA;YAC9C,MAAM,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAC,KAAK,CAAC,OAAO,CAAC,CAAA;YAC9C,MAAM,KAAK,CAAC,KAAK,CAAC,QAAQ,EAAC,SAAS,CAAC,SAAS,EAAC,MAAM,EAAC,SAAS,CAAC,CAAA;YAChE,MAAM,eAAe,CAAC,oBAAoB,CAAC,QAAQ,EAAC,QAAQ,CAAC,kBAAmB,CAAC,MAAM,CAAC,CAAA;YACxF,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,YAAY,EAAE,aAAa,CAAC,YAAY,EAAE,CAAA;QACpF,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,0EAA0E;gBAC1E,qEAAqE;gBACrE,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,OAAO,EAAC,KAAK,EAAE,EAAE;oBACnE,MAAM,KAAK,GAAG,CAAC,MAAM,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,EAAC,UAAU,EAAC,OAAO,EAAC,kBAAkB,CAAC,EAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAA;oBACzH,OAAO,KAAK,KAAK,CAAC,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC,CAAC,QAAQ,CAAC,gBAAgB,CAAC,CAAA;gBACnF,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAA;gBACxB,MAAM,gBAAgB,GAAG,MAAM,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,UAAU,CAAC,YAAY,EAAC,SAAS,EAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;gBAChI,IAAI,SAAS,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,gBAAgB,KAAK,eAAe,EAAE,CAAC;oBACrE,KAAK,MAAM,OAAO,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC,OAAO,EAAE;wBAAE,IAAI,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;4BACpE,MAAM,WAAW,GAAG,MAAM,yBAAyB,CAAC,KAAK,CAAC,OAAO,EAAC,OAAO,CAAC,CAAA;4BAC1E,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,KAAK,CAAC,iBAAiB,CAAC,OAAO,EAAC,KAAK,CAAC,OAAO,EAAC,WAAW,IAAI,EAAE,CAAC,CAAA;4BAC7F,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,eAAe,CAAC,OAAO,EAAC,KAAK,CAAC,OAAO,CAAC,EAAC,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAA;4BACxG,IAAI,MAAM,KAAK,QAAQ;gCAAE,MAAM,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,EAAC,KAAK,CAAC,OAAO,CAAC,CAAA;wBACzE,CAAC;gBACH,CAAC;YACH,CAAC;YACD,MAAM,KAAK,CAAA;QACb,CAAC;IACH,CAAC,CAAC,CAAA;AACJ,CAAC"}

package/lib/rsi-local-activation.d.ts

@@ -0,0 +1,78 @@
+import { type SourceMaintenanceAnchor, type SourceMaintenanceRecord } from '@dsh-enhanced/plugin-control-plane';
+import type { RsiLocalCohort } from './rsi-local-cohort.js';
+import type { RsiLocalUpdatePreparation } from './rsi-local-update.js';
+import { readRsiSourceMaintenance } from './rsi-source-maintenance.js';
+export type LiveRsiSourceMaintenance = Awaited<ReturnType<typeof readRsiSourceMaintenance>>;
+export interface ProduceRsiLocalMaintenanceInput {
+    /** Logical Home path; every receipt and ledger field retains this path. */
+    logicalHome: string;
+    profile: string;
+    /** Locked, TOCTOU-verified preparation produced outside the Home tree. */
+    preparation: RsiLocalUpdatePreparation;
+    /** Physical path of the copied, already stopped Home stage with the next cohort materialized. */
+    stagePhysicalHome: string;
+    /** Signed maintenance state read from the live Home before the stage was copied. */
+    live: LiveRsiSourceMaintenance;
+    /** The next cohort receipt after its paths were rewritten to the logical Home. */
+    nextCohort: Pick<RsiLocalCohort, 'sourceCommit' | 'version' | 'receiptDigest'>;
+    /** An absent ledger never selects pre-owner implicitly. */
+    maintenanceMode?: 'owner-ledger' | 'pre-owner';
+    preparedCoordinator?: true;
+    now?: () => number;
+    signal?: AbortSignal;
+}
+export interface AssertRsiPreOwnerInstallationInput {
+    logicalHome: string;
+    physicalHome: string;
+    profile: string;
+    /** Optional frozen expectations. Both are revalidated against real files. */
+    anchor?: SourceMaintenanceAnchor;
+    /** Expected sidecar in physicalHome; defaults to the current live sidecar.
+     * A caller checking a newly maintained stage supplies its full next chain. */
+    records?: readonly SourceMaintenanceRecord[];
+    /** CLI --patch overlays are outside this copied Home proof and unsupported. */
+    extraPatchFiles?: readonly string[];
+    preparedCoordinator?: true;
+    signal?: AbortSignal;
+}
+export interface RsiPreOwnerInstallationProof {
+    mode: 'pre-owner';
+    anchor: SourceMaintenanceAnchor;
+    records: readonly SourceMaintenanceRecord[];
+    workspace: LiveRsiSourceMaintenance['workspace'];
+    sourceChainTip: string;
+    originalBootstrapDigest: string;
+    authorityBootstrapDigest: string;
+    preparedCoordinator?: {
+        profile: string;
+        receiptDigest: string;
+        cohortDigest: string;
+    };
+}
+/** Read-only absence proof for an installation whose authority bootstrap exists
+ * but owner grants and control ledger have never been installed. The explicit
+ * preparedCoordinator path accepts only the inert, receipt-bound original pair.
+ * It neither creates a ledger nor interprets arbitrary partial setup as fresh.
+ * Only Home/profile cordis.yml and cordis.patch.yml layers are supported.
+ * Alternate formats, dynamic owner rows/config, includes and explicit CLI
+ * overlays are rejected. The outer transaction must verify the effective
+ * graph and launch arguments, and owns package/Git materialization checks. */
+export declare function assertRsiPreOwnerInstallation(input: AssertRsiPreOwnerInstallationInput): Promise<RsiPreOwnerInstallationProof>;
+/**
+ * Derive the next Host-signed source maintenance record for a frozen local
+ * update, without mutating anything. The caller applies it to the stopped stage
+ * and appends it to the staged ledger as one owned transaction.
+ *
+ * Explicit pre-owner mode uses a read-only absence proof and an empty release
+ * history; it signs host:null without creating either ledger. In owner mode,
+ * both the live ledger and the copied stage ledger are opened strictly
+ * read-only and must already exist at the current schema. Their release history,
+ * maintenance rows, and activation classification must agree byte-for-byte.
+ * When the stage anchors a watched runtime epoch, the record binds that plan and
+ * its original applied readiness receipt; with no watch the record carries
+ * `host: null`. Any other activation state, or any failure to read a watched
+ * deployment, aborts production — it is never silently downgraded, because the
+ * ledger append rejects a mismatched anchor anyway.
+ */
+export declare function produceRsiLocalSourceMaintenance(input: ProduceRsiLocalMaintenanceInput): Promise<SourceMaintenanceRecord>;
+//# sourceMappingURL=rsi-local-activation.d.ts.map

package/lib/rsi-local-activation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rsi-local-activation.d.ts","sourceRoot":"","sources":["../src/rsi-local-activation.ts"],"names":[],"mappings":"AAIA,OAAO,EAEL,KAAK,uBAAuB,EAAE,KAAK,uBAAuB,EAAE,MAAM,oCAAoC,CAAA;AAMxG,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAA;AAC3D,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,uBAAuB,CAAA;AACtE,OAAO,EAAE,wBAAwB,EAAE,MAAM,6BAA6B,CAAA;AActE,MAAM,MAAM,wBAAwB,GAAG,OAAO,CAAC,UAAU,CAAC,OAAO,wBAAwB,CAAC,CAAC,CAAA;AAE3F,MAAM,WAAW,+BAA+B;IAC9C,2EAA2E;IAC3E,WAAW,EAAE,MAAM,CAAA;IACnB,OAAO,EAAE,MAAM,CAAA;IACf,0EAA0E;IAC1E,WAAW,EAAE,yBAAyB,CAAA;IACtC,iGAAiG;IACjG,iBAAiB,EAAE,MAAM,CAAA;IACzB,oFAAoF;IACpF,IAAI,EAAE,wBAAwB,CAAA;IAC9B,kFAAkF;IAClF,UAAU,EAAE,IAAI,CAAC,cAAc,EAAE,cAAc,GAAG,SAAS,GAAG,eAAe,CAAC,CAAA;IAC9E,2DAA2D;IAC3D,eAAe,CAAC,EAAE,cAAc,GAAG,WAAW,CAAA;IAC9C,mBAAmB,CAAC,EAAE,IAAI,CAAA;IAC1B,GAAG,CAAC,EAAE,MAAM,MAAM,CAAA;IAClB,MAAM,CAAC,EAAE,WAAW,CAAA;CACrB;AAED,MAAM,WAAW,kCAAkC;IACjD,WAAW,EAAE,MAAM,CAAA;IACnB,YAAY,EAAE,MAAM,CAAA;IACpB,OAAO,EAAE,MAAM,CAAA;IACf,6EAA6E;IAC7E,MAAM,CAAC,EAAE,uBAAuB,CAAA;IAChC;kFAC8E;IAC9E,OAAO,CAAC,EAAE,SAAS,uBAAuB,EAAE,CAAA;IAC5C,+EAA+E;IAC/E,eAAe,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;IACnC,mBAAmB,CAAC,EAAE,IAAI,CAAA;IAC1B,MAAM,CAAC,EAAE,WAAW,CAAA;CACrB;AACD,MAAM,WAAW,4BAA4B;IAC3C,IAAI,EAAE,WAAW,CAAA;IACjB,MAAM,EAAE,uBAAuB,CAAA;IAC/B,OAAO,EAAE,SAAS,uBAAuB,EAAE,CAAA;IAC3C,SAAS,EAAE,wBAAwB,CAAC,WAAW,CAAC,CAAA;IAChD,cAAc,EAAE,MAAM,CAAA;IACtB,uBAAuB,EAAE,MAAM,CAAA;IAC/B,wBAAwB,EAAE,MAAM,CAAA;IAChC,mBAAmB,CAAC,EAAE;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,aAAa,EAAE,MAAM,CAAC;QAAC,YAAY,EAAE,MAAM,CAAA;KAAE,CAAA;CACvF;AAsFD;;;;;;;8EAO8E;AAC9E,wBAAsB,6BAA6B,CAAC,KAAK,EAAE,kCAAkC,GAAG,OAAO,CAAC,4BAA4B,CAAC,CAmHpI;AAkCD;;;;;;;;;;;;;;;GAeG;AACH,wBAAsB,gCAAgC,CAAC,KAAK,EAAE,+BAA+B,GAAG,OAAO,CAAC,uBAAuB,CAAC,CAkI/H"}