@dsh-enhanced/lark-channel 0.1.48 → 0.1.53

package/lib/launchd-target-lock.js

@@ -0,0 +1,48 @@
+import { spawnSync } from 'node:child_process';
+import { constants, realpathSync } from 'node:fs';
+import { lstat, open } from 'node:fs/promises';
+const profilePattern = /^[A-Za-z0-9][A-Za-z0-9._-]{0,63}$/u;
+/** The launchd label is shared by every DSH_HOME for this GUI user. */
+export async function withLaunchAgentTargetLock(input, operation) {
+    const uid = input.uid ?? process.getuid?.();
+    if (!profilePattern.test(input.profile) || !Number.isSafeInteger(uid) || uid === undefined || uid < 1) {
+        throw new Error('lark-channel setup: invalid launchd target lock identity');
+    }
+    const temporary = await lstat(realpathSync('/tmp'));
+    if (!temporary.isDirectory() || temporary.isSymbolicLink() || temporary.uid !== 0
+        || (temporary.mode & 0o7777) !== 0o1777) {
+        throw new Error('lark-channel setup: unsafe launchd target lock directory');
+    }
+    const lockPath = `/tmp/.dsh-enhanced-launchd-${uid}-${input.profile}.lock`;
+    let descriptor;
+    try {
+        descriptor = await open(lockPath, constants.O_RDWR | constants.O_CREAT | constants.O_NOFOLLOW, 0o600);
+        const assertIdentity = async () => {
+            const [opened, linked] = await Promise.all([descriptor.stat(), lstat(lockPath)]);
+            if (!opened.isFile() || !linked.isFile() || linked.isSymbolicLink()
+                || opened.uid !== uid || linked.uid !== uid || opened.nlink !== 1 || linked.nlink !== 1
+                || (opened.mode & 0o777) !== 0o600 || (linked.mode & 0o777) !== 0o600
+                || opened.dev !== linked.dev || opened.ino !== linked.ino) {
+                throw new Error(`lark-channel setup: unsafe launchd target lock: ${lockPath}`);
+            }
+        };
+        await assertIdentity();
+        const acquired = spawnSync('/usr/bin/perl', ['-MFcntl=:flock', '-MErrno=EAGAIN,EWOULDBLOCK', '-e',
+            'open(F, "<&", 3) or exit 74; flock(F, LOCK_EX|LOCK_NB) or exit(($! == EAGAIN || $! == EWOULDBLOCK) ? 75 : 74);'], {
+            encoding: 'utf8', stdio: ['ignore', 'ignore', 'pipe', descriptor.fd],
+            env: { PATH: '/usr/bin:/bin', LANG: 'C' }, timeout: 10_000,
+        });
+        if (acquired.status === 75)
+            throw new Error(`lark-channel setup: launchd target is busy: ${lockPath}`);
+        if (acquired.status !== 0) {
+            const detail = acquired.stderr?.trim().slice(0, 1_000);
+            throw new Error(`lark-channel setup: cannot acquire launchd target lock${detail ? `: ${detail}` : ''}`);
+        }
+        await assertIdentity();
+        return await operation();
+    }
+    finally {
+        await descriptor?.close();
+    }
+}
+//# sourceMappingURL=launchd-target-lock.js.map

package/lib/launchd-target-lock.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"launchd-target-lock.js","sourceRoot":"","sources":["../src/launchd-target-lock.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAA;AAC9C,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,SAAS,CAAA;AACjD,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAA;AAE9C,MAAM,cAAc,GAAG,oCAAoC,CAAA;AAE3D,uEAAuE;AACvE,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC7C,KAAwC,EAAE,SAA2B;IAErE,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,IAAI,OAAO,CAAC,MAAM,EAAE,EAAE,CAAA;IAC3C,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,GAAG,CAAC,EAAE,CAAC;QACtG,MAAM,IAAI,KAAK,CAAC,0DAA0D,CAAC,CAAA;IAC7E,CAAC;IACD,MAAM,SAAS,GAAG,MAAM,KAAK,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,CAAA;IACnD,IAAI,CAAC,SAAS,CAAC,WAAW,EAAE,IAAI,SAAS,CAAC,cAAc,EAAE,IAAI,SAAS,CAAC,GAAG,KAAK,CAAC;WAC5E,CAAC,SAAS,CAAC,IAAI,GAAG,MAAM,CAAC,KAAK,MAAM,EAAE,CAAC;QAC1C,MAAM,IAAI,KAAK,CAAC,0DAA0D,CAAC,CAAA;IAC7E,CAAC;IACD,MAAM,QAAQ,GAAG,8BAA8B,GAAG,IAAI,KAAK,CAAC,OAAO,OAAO,CAAA;IAC1E,IAAI,UAAwD,CAAA;IAC5D,IAAI,CAAC;QACH,UAAU,GAAG,MAAM,IAAI,CAAC,QAAQ,EAAE,SAAS,CAAC,MAAM,GAAG,SAAS,CAAC,OAAO,GAAG,SAAS,CAAC,UAAU,EAAE,KAAK,CAAC,CAAA;QACrG,MAAM,cAAc,GAAG,KAAK,IAAI,EAAE;YAChC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,UAAW,CAAC,IAAI,EAAE,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAA;YACjF,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,MAAM,CAAC,cAAc,EAAE;mBAC9D,MAAM,CAAC,GAAG,KAAK,GAAG,IAAI,MAAM,CAAC,GAAG,KAAK,GAAG,IAAI,MAAM,CAAC,KAAK,KAAK,CAAC,IAAI,MAAM,CAAC,KAAK,KAAK,CAAC;mBACpF,CAAC,MAAM,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,KAAK,IAAI,CAAC,MAAM,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,KAAK;mBAClE,MAAM,CAAC,GAAG,KAAK,MAAM,CAAC,GAAG,IAAI,MAAM,CAAC,GAAG,KAAK,MAAM,CAAC,GAAG,EAAE,CAAC;gBAC5D,MAAM,IAAI,KAAK,CAAC,mDAAmD,QAAQ,EAAE,CAAC,CAAA;YAChF,CAAC;QACH,CAAC,CAAA;QACD,MAAM,cAAc,EAAE,CAAA;QACtB,MAAM,QAAQ,GAAG,SAAS,CAAC,eAAe,EAAE,CAAC,gBAAgB,EAAE,4BAA4B,EAAE,IAAI;YAC/F,gHAAgH,CAAC,EAAE;YACnH,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,CAAC;YACpE,GAAG,EAAE,EAAE,IAAI,EAAE,eAAe,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE,OAAO,EAAE,MAAM;SAC3D,CAAC,CAAA;QACF,IAAI,QAAQ,CAAC,MAAM,KAAK,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,+CAA+C,QAAQ,EAAE,CAAC,CAAA;QACtG,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC1B,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAA;YACtD,MAAM,IAAI,KAAK,CAAC,yDAAyD,MAAM,CAAC,CAAC,CAAC,KAAK,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAA;QACzG,CAAC;QACD,MAAM,cAAc,EAAE,CAAA;QACtB,OAAO,MAAM,SAAS,EAAE,CAAA;IAC1B,CAAC;YAAS,CAAC;QACT,MAAM,UAAU,EAAE,KAAK,EAAE,CAAA;IAC3B,CAAC;AACH,CAAC"}

package/lib/launchd.d.ts

@@ -22,6 +22,7 @@ export interface InstalledLaunchAgent extends LaunchAgentPaths {
 }
 interface CommandResult {
     status: number | null;
+    stdout?: string | Buffer;
     stderr?: string | Buffer;
 }
 export interface LaunchAgentInstallOptions {
@@ -33,9 +34,26 @@ export interface LaunchAgentInstallOptions {
     platform?: NodeJS.Platform;
     run?: (command: string, args: readonly string[]) => CommandResult;
     wait?: (milliseconds: number) => Promise<void>;
+    signal?: AbortSignal;
+}
+export interface DshLaunchAgentInspection {
+    target: string;
+    plistPath: string;
+    registered: boolean;
+    pid: number;
+    running: boolean;
+    identity: {
+        nodePath: string;
+        dshPath: string;
+        dshSha256: string;
+    } | null;
 }
 export declare function launchAgentPaths(input: LaunchAgentPathsInput): LaunchAgentPaths;
 export declare function createLaunchAgent(input: LaunchAgentInput): string;
+export declare function inspectDshLaunchAgent(input: {
+    dshHome: string;
+    profile: string;
+}, options?: Pick<LaunchAgentInstallOptions, 'home' | 'uid' | 'platform' | 'run'>): Promise<DshLaunchAgentInspection>;
 export declare function installDshLaunchAgent(input: {
     dshHome: string;
     profile: string;

package/lib/launchd.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"launchd.d.ts","sourceRoot":"","sources":["../src/launchd.ts"],"names":[],"mappings":"AAQA,MAAM,WAAW,qBAAqB;IACpC,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,OAAO,EAAE,MAAM,CAAA;IACf,OAAO,EAAE,MAAM,CAAA;CAChB;AAED,MAAM,WAAW,gBAAgB;IAC/B,KAAK,EAAE,MAAM,CAAA;IACb,SAAS,EAAE,MAAM,CAAA;IACjB,UAAU,EAAE,MAAM,CAAA;IAClB,UAAU,EAAE,MAAM,CAAA;CACnB;AAED,MAAM,WAAW,gBAAiB,SAAQ,gBAAgB;IACxD,OAAO,EAAE,MAAM,CAAA;IACf,OAAO,EAAE,MAAM,CAAA;IACf,gBAAgB,EAAE,MAAM,CAAA;IACxB,QAAQ,EAAE,MAAM,CAAA;IAChB,OAAO,EAAE,MAAM,CAAA;IACf,IAAI,EAAE,MAAM,CAAA;CACb;AAED,MAAM,WAAW,oBAAqB,SAAQ,gBAAgB;IAC5D,MAAM,EAAE,MAAM,CAAA;CACf;AAED,UAAU,aAAa;IACrB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAA;IACrB,MAAM,CAAC,EAAE,MAAM,GAAG,MAAM,CAAA;CACzB;AAED,MAAM,WAAW,yBAAyB;IACxC,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,GAAG,CAAC,EAAE,MAAM,CAAA;IACZ,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,QAAQ,CAAC,EAAE,MAAM,CAAC,QAAQ,CAAA;IAC1B,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,MAAM,EAAE,KAAK,aAAa,CAAA;IACjE,IAAI,CAAC,EAAE,CAAC,YAAY,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAA;CAC/C;AAgBD,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,qBAAqB,GAAG,gBAAgB,CAW/E;AAED,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,gBAAgB,GAAG,MAAM,CAmDjE;AA+DD,wBAAsB,qBAAqB,CACzC,KAAK,EAAE;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,EAC3C,OAAO,GAAE,yBAA8B,GACtC,OAAO,CAAC,oBAAoB,CAAC,CA6D/B"}
+{"version":3,"file":"launchd.d.ts","sourceRoot":"","sources":["../src/launchd.ts"],"names":[],"mappings":"AAYA,MAAM,WAAW,qBAAqB;IACpC,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,OAAO,EAAE,MAAM,CAAA;IACf,OAAO,EAAE,MAAM,CAAA;CAChB;AAED,MAAM,WAAW,gBAAgB;IAC/B,KAAK,EAAE,MAAM,CAAA;IACb,SAAS,EAAE,MAAM,CAAA;IACjB,UAAU,EAAE,MAAM,CAAA;IAClB,UAAU,EAAE,MAAM,CAAA;CACnB;AAED,MAAM,WAAW,gBAAiB,SAAQ,gBAAgB;IACxD,OAAO,EAAE,MAAM,CAAA;IACf,OAAO,EAAE,MAAM,CAAA;IACf,gBAAgB,EAAE,MAAM,CAAA;IACxB,QAAQ,EAAE,MAAM,CAAA;IAChB,OAAO,EAAE,MAAM,CAAA;IACf,IAAI,EAAE,MAAM,CAAA;CACb;AAED,MAAM,WAAW,oBAAqB,SAAQ,gBAAgB;IAC5D,MAAM,EAAE,MAAM,CAAA;CACf;AAED,UAAU,aAAa;IACrB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAA;IACrB,MAAM,CAAC,EAAE,MAAM,GAAG,MAAM,CAAA;IACxB,MAAM,CAAC,EAAE,MAAM,GAAG,MAAM,CAAA;CACzB;AAED,MAAM,WAAW,yBAAyB;IACxC,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,GAAG,CAAC,EAAE,MAAM,CAAA;IACZ,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,QAAQ,CAAC,EAAE,MAAM,CAAC,QAAQ,CAAA;IAC1B,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,MAAM,EAAE,KAAK,aAAa,CAAA;IACjE,IAAI,CAAC,EAAE,CAAC,YAAY,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAA;IAC9C,MAAM,CAAC,EAAE,WAAW,CAAA;CACrB;AAED,MAAM,WAAW,wBAAwB;IACvC,MAAM,EAAE,MAAM,CAAA;IACd,SAAS,EAAE,MAAM,CAAA;IACjB,UAAU,EAAE,OAAO,CAAA;IACnB,GAAG,EAAE,MAAM,CAAA;IACX,OAAO,EAAE,OAAO,CAAA;IAChB,QAAQ,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAA;CAC1E;AAgBD,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,qBAAqB,GAAG,gBAAgB,CAW/E;AAED,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,gBAAgB,GAAG,MAAM,CAmDjE;AA8HD,wBAAsB,qBAAqB,CAAC,KAAK,EAAE;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,EACrF,OAAO,GAAE,IAAI,CAAC,yBAAyB,EAAE,MAAM,GAAG,KAAK,GAAG,UAAU,GAAG,KAAK,CAAM,GAAG,OAAO,CAAC,wBAAwB,CAAC,CAUvH;AA8CD,wBAAsB,qBAAqB,CACzC,KAAK,EAAE;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,EAC3C,OAAO,GAAE,yBAA8B,GACtC,OAAO,CAAC,oBAAoB,CAAC,CAiF/B"}

package/lib/launchd.js

@@ -1,8 +1,11 @@
-import { accessSync, constants } from 'node:fs';
-import { access, chmod, mkdir, open, rename, unlink } from 'node:fs/promises';
+import { accessSync, constants, realpathSync, readFileSync } from 'node:fs';
+import { access, chmod, lstat, mkdir, open, readFile, rename, unlink } from 'node:fs/promises';
 import { homedir } from 'node:os';
 import { dirname, isAbsolute, join } from 'node:path';
 import { spawnSync } from 'node:child_process';
+import { createHash, randomUUID } from 'node:crypto';
+import { assertNativeLaunchdPlist, inspectNativeLaunchd, inspectNativeLaunchdDetail, stopNativeLaunchd } from './launchd-identity.js';
+import { withLaunchAgentTargetLock } from './launchd-target-lock.js';
 const profilePattern = /^[A-Za-z0-9][A-Za-z0-9._-]{0,63}$/u;
 function xml(value) {
     return value
@@ -106,7 +109,8 @@ function defaultRun(command, args) {
         encoding: 'utf8',
         env: { PATH: '/usr/bin:/bin' },
         maxBuffer: 256 * 1024,
-        stdio: ['ignore', 'ignore', 'pipe'],
+        timeout: 10_000,
+        stdio: ['ignore', 'pipe', 'pipe'],
     });
 }
 function commandError(action, result) {
@@ -122,22 +126,150 @@ function defaultWait(milliseconds) {
     return new Promise(resolve => setTimeout(resolve, milliseconds));
 }
 async function writePlist(path, value, run) {
-    const temporary = `${path}.tmp-${process.pid}`;
-    const file = await open(temporary, 'w', 0o600);
+    const temporary = `${path}.tmp-${randomUUID()}`;
     try {
-        await file.writeFile(value, 'utf8');
-        await file.sync();
+        const file = await open(temporary, 'w', 0o600);
+        try {
+            await file.writeFile(value);
+            await file.sync();
+        }
+        finally {
+            await file.close();
+        }
+        const validation = run('/usr/bin/plutil', ['-lint', temporary]);
+        if (validation.status !== 0)
+            throw commandError('LaunchAgent plist validation', validation);
+        await chmod(temporary, 0o600);
+        await rename(temporary, path);
     }
     finally {
-        await file.close();
-    }
-    const validation = run('/usr/bin/plutil', ['-lint', temporary]);
-    if (validation.status !== 0) {
         await unlink(temporary).catch(() => { });
-        throw commandError('LaunchAgent plist validation', validation);
     }
-    await rename(temporary, path);
-    await chmod(path, 0o600);
+}
+function nativeCommand(run) {
+    return (command, args) => {
+        const result = run(command, args);
+        return { status: result.status, stdout: result.stdout?.toString() ?? '', stderr: result.stderr?.toString() ?? '' };
+    };
+}
+function executableIdentity(nodePath, dshPath) {
+    const node = realpathSync(nodePath), dsh = realpathSync(dshPath);
+    return { nodePath: node, dshPath: dsh,
+        dshSha256: createHash('sha256').update(readFileSync(dsh)).digest('hex') };
+}
+async function inspectWithPaths(input, paths, uid, run) {
+    const target = `gui/${uid}/${paths.label}`;
+    let bytes;
+    try {
+        const entry = await lstat(paths.plistPath);
+        if (!entry.isFile() || entry.isSymbolicLink() || (entry.mode & 0o077) !== 0) {
+            throw new Error('lark-channel setup: existing LaunchAgent plist is unsafe');
+        }
+        bytes = await readFile(paths.plistPath);
+    }
+    catch (error) {
+        if (error.code !== 'ENOENT')
+            throw error;
+        bytes = null;
+    }
+    let identity = null;
+    if (bytes !== null) {
+        const parsed = run('/usr/bin/plutil', ['-convert', 'json', '-o', '-', '--', paths.plistPath]);
+        if (parsed.status !== 0)
+            throw commandError('existing LaunchAgent plist inspection', parsed);
+        let value;
+        try {
+            value = JSON.parse(parsed.stdout?.toString() ?? '');
+        }
+        catch {
+            throw new Error('lark-channel setup: existing LaunchAgent plist is invalid');
+        }
+        const args = value.ProgramArguments;
+        if (!Array.isArray(args) || !args.every(arg => typeof arg === 'string')) {
+            throw new Error('lark-channel setup: existing LaunchAgent command is invalid');
+        }
+        const offset = args[1] === '--disable-warning=ExperimentalWarning' ? 2 : 1;
+        if (typeof args[0] !== 'string' || typeof args[offset] !== 'string') {
+            throw new Error('lark-channel setup: existing LaunchAgent command is invalid');
+        }
+        identity = executableIdentity(args[0], args[offset]);
+        const expected = { ...input, ...identity, home: dirname(dirname(dirname(paths.plistPath))), uid };
+        assertNativeLaunchdPlist(bytes.toString('utf8'), expected, (command, arguments_) => command === '/usr/bin/plutil'
+            ? { status: parsed.status, stdout: parsed.stdout?.toString() ?? '', stderr: parsed.stderr?.toString() ?? '' }
+            : nativeCommand(run)(command, arguments_));
+        // plutil parsed the pathname. Verify it still denotes the bytes checked above.
+        if (!(await readFile(paths.plistPath)).equals(bytes)) {
+            throw new Error('lark-channel setup: LaunchAgent plist changed during inspection');
+        }
+    }
+    const expected = { ...input, ...identity,
+        home: dirname(dirname(dirname(paths.plistPath))), uid };
+    const state = inspectNativeLaunchdDetail(expected, nativeCommand(run));
+    if (state.registered && identity === null) {
+        throw new Error('lark-channel setup: loaded LaunchAgent has no trusted plist');
+    }
+    return { target, plistPath: paths.plistPath, ...state, identity };
+}
+export async function inspectDshLaunchAgent(input, options = {}) {
+    if ((options.platform ?? process.platform) !== 'darwin') {
+        throw new Error('lark-channel setup: LaunchAgent inspection requires macOS');
+    }
+    const uid = options.uid ?? process.getuid?.();
+    if (!Number.isSafeInteger(uid) || uid === undefined || uid < 1) {
+        throw new Error('lark-channel setup: cannot resolve the launchd user domain');
+    }
+    const paths = launchAgentPaths({ ...input, ...(options.home === undefined ? {} : { home: options.home }) });
+    return inspectWithPaths(input, paths, uid, options.run ?? defaultRun);
+}
+async function startVerified(input, paths, uid, run, wait, requireRunning = true) {
+    const command = nativeCommand(run), target = `gui/${uid}/${paths.label}`, domain = `gui/${uid}`;
+    if (inspectNativeLaunchd(input, command).registered)
+        throw new Error('lark-channel setup: service remained registered before bootstrap');
+    const enable = run('/bin/launchctl', ['enable', target]);
+    if (enable.status !== 0)
+        throw commandError('launchd enable', enable);
+    const delays = [250, 750];
+    let bootstrap = { status: null };
+    for (let attempt = 0; attempt <= delays.length; attempt += 1) {
+        bootstrap = run('/bin/launchctl', ['bootstrap', domain, paths.plistPath]);
+        if (bootstrap.status !== 0 && !isBootstrapEio(bootstrap))
+            throw commandError('launchd bootstrap', bootstrap);
+        let consecutiveRunning = 0, previousRunningPid = 0, registered = false;
+        let lastState = 'absent', lastPid = 0, lastExitCode = null;
+        // launchd can register before the Host reaches running. Keep polling the
+        // same job; a second bootstrap while it remains registered is not safe.
+        for (let observation = 0; observation < 120; observation += 1) {
+            const state = inspectNativeLaunchdDetail(input, command);
+            registered = state.registered;
+            lastState = state.state ?? 'unknown';
+            lastPid = state.pid;
+            lastExitCode = state.lastExitCode;
+            if (registered && !requireRunning)
+                return;
+            if (state.running) {
+                consecutiveRunning = state.pid === previousRunningPid ? consecutiveRunning + 1 : 1;
+                previousRunningPid = state.pid;
+            }
+            else {
+                consecutiveRunning = 0;
+                previousRunningPid = 0;
+            }
+            if (consecutiveRunning >= 2)
+                return;
+            if (!registered && observation >= 2)
+                break;
+            await wait(250);
+        }
+        if (registered) {
+            throw new Error(`lark-channel setup: LaunchAgent registered but the Host did not become running (state=${lastState.slice(0, 40)}, pid=${lastPid}, lastExitCode=${lastExitCode?.slice(0, 40) ?? 'unknown'})`);
+        }
+        const delayMs = delays[attempt];
+        if (delayMs !== undefined)
+            await wait(delayMs);
+    }
+    if (bootstrap.status !== 0)
+        throw commandError('launchd bootstrap', bootstrap);
+    throw new Error('lark-channel setup: launchd bootstrap succeeded but the service was not registered');
 }
 export async function installDshLaunchAgent(input, options = {}) {
     if ((options.platform ?? process.platform) !== 'darwin') {
@@ -155,51 +287,76 @@ export async function installDshLaunchAgent(input, options = {}) {
     const profileDirectory = join(input.dshHome, 'profiles', input.profile);
     await access(profileDirectory, constants.R_OK);
     const currentPath = options.path ?? process.env.PATH;
-    const nodePath = options.nodePath ?? findExecutable('node', currentPath);
-    const dshPath = options.dshPath ?? findExecutable('dsh', currentPath);
+    const nodePath = realpathSync(options.nodePath ?? findExecutable('node', currentPath));
+    const dshPath = realpathSync(options.dshPath ?? findExecutable('dsh', currentPath));
     const path = servicePath(nodePath, dshPath, currentPath);
     const run = options.run ?? defaultRun;
     const wait = options.wait ?? defaultWait;
-    await mkdir(dirname(paths.plistPath), { recursive: true, mode: 0o700 });
-    await mkdir(dirname(paths.stdoutPath), { recursive: true, mode: 0o700 });
-    await writePlist(paths.plistPath, createLaunchAgent({
-        ...paths,
-        dshHome: input.dshHome,
-        profile: input.profile,
-        profileDirectory,
-        nodePath,
-        dshPath,
-        path,
-    }), run);
-    const domain = `gui/${uid}`;
-    const target = `${domain}/${paths.label}`;
-    run('/bin/launchctl', ['bootout', target]);
-    const enable = run('/bin/launchctl', ['enable', target]);
-    if (enable.status !== 0)
-        throw commandError('launchd enable', enable);
-    const retryDelays = [250, 750];
-    let bootstrap = { status: null };
-    for (let attempt = 0; attempt <= retryDelays.length; attempt += 1) {
-        bootstrap = run('/bin/launchctl', ['bootstrap', domain, paths.plistPath]);
-        if (bootstrap.status !== 0 && !isBootstrapEio(bootstrap)) {
-            throw commandError('launchd bootstrap', bootstrap);
+    const target = `gui/${uid}/${paths.label}`;
+    const newIdentity = { ...input,
+        ...(options.home === undefined ? {} : { home: options.home }), uid,
+        ...executableIdentity(nodePath, dshPath) };
+    return withLaunchAgentTargetLock({ profile: input.profile, uid }, async () => {
+        const before = await inspectWithPaths(input, paths, uid, run);
+        const original = before.identity === null ? null : await readFile(paths.plistPath);
+        const oldIdentity = { ...input,
+            ...(options.home === undefined ? {} : { home: options.home }), uid,
+            ...before.identity };
+        if (before.registered) {
+            await stopNativeLaunchd(oldIdentity, AbortSignal.any([
+                options.signal ?? new AbortController().signal, AbortSignal.timeout(45_000),
+            ]), nativeCommand(run));
         }
-        // `bootstrap` may return EIO after committing the job, or even return zero
-        // while an earlier bootout is still removing it. The job registry is the
-        // source of truth; require it to remain visible across a short settle window.
-        if (run('/bin/launchctl', ['print', target]).status === 0) {
-            await wait(250);
-            if (run('/bin/launchctl', ['print', target]).status === 0) {
-                return { ...paths, target };
+        // A concurrent actor outside our target lock must not silently replace
+        // the plist after inspection or while launchd is removing the old job.
+        const current = await readFile(paths.plistPath).catch((error) => {
+            if (error.code === 'ENOENT')
+                return null;
+            throw error;
+        });
+        if (current === null ? original !== null : original === null || !current.equals(original)) {
+            throw new Error('lark-channel setup: LaunchAgent plist changed during service replacement');
+        }
+        const replacement = createLaunchAgent({ ...paths, dshHome: input.dshHome, profile: input.profile,
+            profileDirectory, nodePath, dshPath, path });
+        let replaced = false;
+        try {
+            await mkdir(dirname(paths.plistPath), { recursive: true, mode: 0o700 });
+            await mkdir(dirname(paths.stdoutPath), { recursive: true, mode: 0o700 });
+            await writePlist(paths.plistPath, replacement, run);
+            replaced = true;
+            await startVerified(newIdentity, paths, uid, run, wait);
+            return { ...paths, target };
+        }
+        catch (error) {
+            try {
+                // A failed bootstrap can have committed the new job. Only remove a
+                // job whose full identity is known; preserve unknown state for review.
+                if (replaced)
+                    await stopNativeLaunchd(newIdentity, AbortSignal.timeout(45_000), nativeCommand(run));
+                const now = await readFile(paths.plistPath).catch((readError) => {
+                    if (readError.code === 'ENOENT')
+                        return null;
+                    throw readError;
+                });
+                if (replaced ? now?.toString('utf8') !== replacement
+                    : now === null ? original !== null : original === null || !now.equals(original)) {
+                    throw new Error('lark-channel setup: LaunchAgent plist changed before rollback');
+                }
+                if (replaced) {
+                    if (original === null)
+                        await unlink(paths.plistPath);
+                    else
+                        await writePlist(paths.plistPath, original, run);
+                }
+                if (before.registered)
+                    await startVerified(oldIdentity, paths, uid, run, wait, before.running);
             }
-            continue;
+            catch (rollbackError) {
+                throw new AggregateError([error, rollbackError], 'lark-channel setup: LaunchAgent replacement failed and rollback requires reconciliation');
+            }
+            throw error;
         }
-        const delayMs = retryDelays[attempt];
-        if (delayMs !== undefined)
-            await wait(delayMs);
-    }
-    if (bootstrap.status !== 0)
-        throw commandError('launchd bootstrap', bootstrap);
-    throw new Error('lark-channel setup: launchd bootstrap succeeded but the service was not registered');
+    });
 }
 //# sourceMappingURL=launchd.js.map

package/lib/launchd.js.map

@@ -1 +1 @@
-{"version":3,"file":"launchd.js","sourceRoot":"","sources":["../src/launchd.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,SAAS,CAAA;AAC/C,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAA;AAC7E,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAA;AACjC,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AACrD,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAA;AAE9C,MAAM,cAAc,GAAG,oCAAoC,CAAA;AA4C3D,SAAS,GAAG,CAAC,KAAa;IACxB,OAAO,KAAK;SACT,UAAU,CAAC,GAAG,EAAE,OAAO,CAAC;SACxB,UAAU,CAAC,GAAG,EAAE,MAAM,CAAC;SACvB,UAAU,CAAC,GAAG,EAAE,MAAM,CAAC;SACvB,UAAU,CAAC,GAAG,EAAE,QAAQ,CAAC;SACzB,UAAU,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAA;AAC9B,CAAC;AAED,SAAS,eAAe,CAAC,KAAa,EAAE,KAAa;IACnD,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,uBAAuB,KAAK,mBAAmB,CAAC,CAAA;IACxF,OAAO,KAAK,CAAA;AACd,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,KAA4B;IAC3D,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAA;IAC/F,MAAM,IAAI,GAAG,eAAe,CAAC,KAAK,CAAC,IAAI,IAAI,OAAO,EAAE,EAAE,MAAM,CAAC,CAAA;IAC7D,MAAM,OAAO,GAAG,eAAe,CAAC,KAAK,CAAC,OAAO,EAAE,UAAU,CAAC,CAAA;IAC1D,MAAM,KAAK,GAAG,2BAA2B,KAAK,CAAC,OAAO,EAAE,CAAA;IACxD,OAAO;QACL,KAAK;QACL,SAAS,EAAE,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,cAAc,EAAE,GAAG,KAAK,QAAQ,CAAC;QAClE,UAAU,EAAE,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,KAAK,CAAC,OAAO,WAAW,CAAC;QAC9D,UAAU,EAAE,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,KAAK,CAAC,OAAO,iBAAiB,CAAC;KACrE,CAAA;AACH,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,KAAuB;IACvD,MAAM,OAAO,GAAG,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,gBAAgB,EAAE,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,OAAO;QACnF,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,UAAU,CAAC,CAAA;IACrC,IAAI,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;QAC9C,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAA;IAC3E,CAAC;IACD,OAAO;;;;;YAKG,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC;;;cAGd,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC;;cAEnB,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC;;cAElB,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC;;;;;;gBAMhB,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC;;gBAElB,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC;;;YAGnB,GAAG,CAAC,KAAK,CAAC,gBAAgB,CAAC;;YAE3B,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC;;YAErB,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC;;;;;;;;;;;;;;;;;CAiBhC,CAAA;AACD,CAAC;AAED,SAAS,cAAc,CAAC,IAAY,EAAE,SAA6B;IACjE,KAAK,MAAM,SAAS,IAAI,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;QACrD,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC;YAAE,SAAQ;QACpC,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,CAAA;QACvC,IAAI,CAAC;YACH,gFAAgF;YAChF,UAAU,CAAC,SAAS,EAAE,SAAS,CAAC,IAAI,CAAC,CAAA;YACrC,OAAO,SAAS,CAAA;QAClB,CAAC;QAAC,MAAM,CAAC,CAAA,CAAC;IACZ,CAAC;IACD,MAAM,IAAI,KAAK,CAAC,mCAAmC,IAAI,UAAU,CAAC,CAAA;AACpE,CAAC;AAED,SAAS,WAAW,CAAC,QAAgB,EAAE,OAAe,EAAE,OAA2B;IACjF,MAAM,MAAM,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAC,OAAO,CAAC,EAAE,GAAG,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC;QAChF,mBAAmB,EAAE,gBAAgB,EAAE,UAAU,EAAE,MAAM,EAAE,WAAW,EAAE,OAAO,CAAC,CAAA;IAClF,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;AAC1E,CAAC;AAED,SAAS,UAAU,CAAC,OAAe,EAAE,IAAuB;IAC1D,OAAO,SAAS,CAAC,OAAO,EAAE,CAAC,GAAG,IAAI,CAAC,EAAE;QACnC,QAAQ,EAAE,MAAM;QAChB,GAAG,EAAE,EAAE,IAAI,EAAE,eAAe,EAAE;QAC9B,SAAS,EAAE,GAAG,GAAG,IAAI;QACrB,KAAK,EAAE,CAAC,QAAQ,EAAE,QAAQ,EAAE,MAAM,CAAC;KACpC,CAAC,CAAA;AACJ,CAAC;AAED,SAAS,YAAY,CAAC,MAAc,EAAE,MAAqB;IACzD,MAAM,MAAM,GAAG,OAAO,MAAM,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAA;IAClG,MAAM,MAAM,GAAG,MAAM,EAAE,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAA;IAC7C,OAAO,IAAI,KAAK,CAAC,uBAAuB,MAAM,UAAU,MAAM,CAAC,CAAC,CAAC,KAAK,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAA;AACxF,CAAC;AAED,SAAS,cAAc,CAAC,MAAqB;IAC3C,MAAM,MAAM,GAAG,OAAO,MAAM,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAA;IAClG,OAAO,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,gDAAgD,CAAC,IAAI,CAAC,MAAM,IAAI,EAAE,CAAC,CAAA;AACnG,CAAC;AAED,SAAS,WAAW,CAAC,YAAoB;IACvC,OAAO,IAAI,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC,CAAA;AAClE,CAAC;AAED,KAAK,UAAU,UAAU,CAAC,IAAY,EAAE,KAAa,EAAE,GAAkD;IACvG,MAAM,SAAS,GAAG,GAAG,IAAI,QAAQ,OAAO,CAAC,GAAG,EAAE,CAAA;IAC9C,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,SAAS,EAAE,GAAG,EAAE,KAAK,CAAC,CAAA;IAC9C,IAAI,CAAC;QACH,MAAM,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,MAAM,CAAC,CAAA;QACnC,MAAM,IAAI,CAAC,IAAI,EAAE,CAAA;IACnB,CAAC;YAAS,CAAC;QACT,MAAM,IAAI,CAAC,KAAK,EAAE,CAAA;IACpB,CAAC;IACD,MAAM,UAAU,GAAG,GAAG,CAAC,iBAAiB,EAAE,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC,CAAA;IAC/D,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC5B,MAAM,MAAM,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAA;QACvC,MAAM,YAAY,CAAC,8BAA8B,EAAE,UAAU,CAAC,CAAA;IAChE,CAAC;IACD,MAAM,MAAM,CAAC,SAAS,EAAE,IAAI,CAAC,CAAA;IAC7B,MAAM,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,CAAA;AAC1B,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,KAA2C,EAC3C,UAAqC,EAAE;IAEvC,IAAI,CAAC,OAAO,CAAC,QAAQ,IAAI,OAAO,CAAC,QAAQ,CAAC,KAAK,QAAQ,EAAE,CAAC;QACxD,MAAM,IAAI,KAAK,CAAC,iFAAiF,CAAC,CAAA;IACpG,CAAC;IACD,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,MAAM,EAAE,EAAE,CAAA;IAC7C,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,GAAG,CAAC,EAAE,CAAC;QAC/D,MAAM,IAAI,KAAK,CAAC,4DAA4D,CAAC,CAAA;IAC/E,CAAC;IACD,MAAM,KAAK,GAAG,gBAAgB,CAAC;QAC7B,GAAG,CAAC,OAAO,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC;QAC7D,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,OAAO,EAAE,KAAK,CAAC,OAAO;KACvB,CAAC,CAAA;IACF,MAAM,gBAAgB,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,UAAU,EAAE,KAAK,CAAC,OAAO,CAAC,CAAA;IACvE,MAAM,MAAM,CAAC,gBAAgB,EAAE,SAAS,CAAC,IAAI,CAAC,CAAA;IAC9C,MAAM,WAAW,GAAG,OAAO,CAAC,IAAI,IAAI,OAAO,CAAC,GAAG,CAAC,IAAI,CAAA;IACpD,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,cAAc,CAAC,MAAM,EAAE,WAAW,CAAC,CAAA;IACxE,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,cAAc,CAAC,KAAK,EAAE,WAAW,CAAC,CAAA;IACrE,MAAM,IAAI,GAAG,WAAW,CAAC,QAAQ,EAAE,OAAO,EAAE,WAAW,CAAC,CAAA;IACxD,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,UAAU,CAAA;IACrC,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,WAAW,CAAA;IAExC,MAAM,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAA;IACvE,MAAM,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAA;IACxE,MAAM,UAAU,CAAC,KAAK,CAAC,SAAS,EAAE,iBAAiB,CAAC;QAClD,GAAG,KAAK;QACR,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,gBAAgB;QAChB,QAAQ;QACR,OAAO;QACP,IAAI;KACL,CAAC,EAAE,GAAG,CAAC,CAAA;IAER,MAAM,MAAM,GAAG,OAAO,GAAG,EAAE,CAAA;IAC3B,MAAM,MAAM,GAAG,GAAG,MAAM,IAAI,KAAK,CAAC,KAAK,EAAE,CAAA;IACzC,GAAG,CAAC,gBAAgB,EAAE,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,CAAA;IAC1C,MAAM,MAAM,GAAG,GAAG,CAAC,gBAAgB,EAAE,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAA;IACxD,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,YAAY,CAAC,gBAAgB,EAAE,MAAM,CAAC,CAAA;IACrE,MAAM,WAAW,GAAG,CAAC,GAAG,EAAE,GAAG,CAAU,CAAA;IACvC,IAAI,SAAS,GAAkB,EAAE,MAAM,EAAE,IAAI,EAAE,CAAA;IAC/C,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,IAAI,WAAW,CAAC,MAAM,EAAE,OAAO,IAAI,CAAC,EAAE,CAAC;QAClE,SAAS,GAAG,GAAG,CAAC,gBAAgB,EAAE,CAAC,WAAW,EAAE,MAAM,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC,CAAA;QACzE,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,cAAc,CAAC,SAAS,CAAC,EAAE,CAAC;YACzD,MAAM,YAAY,CAAC,mBAAmB,EAAE,SAAS,CAAC,CAAA;QACpD,CAAC;QACD,2EAA2E;QAC3E,yEAAyE;QACzE,8EAA8E;QAC9E,IAAI,GAAG,CAAC,gBAAgB,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC1D,MAAM,IAAI,CAAC,GAAG,CAAC,CAAA;YACf,IAAI,GAAG,CAAC,gBAAgB,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC1D,OAAO,EAAE,GAAG,KAAK,EAAE,MAAM,EAAE,CAAA;YAC7B,CAAC;YACD,SAAQ;QACV,CAAC;QACD,MAAM,OAAO,GAAG,WAAW,CAAC,OAAO,CAAC,CAAA;QACpC,IAAI,OAAO,KAAK,SAAS;YAAE,MAAM,IAAI,CAAC,OAAO,CAAC,CAAA;IAChD,CAAC;IACD,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,YAAY,CAAC,mBAAmB,EAAE,SAAS,CAAC,CAAA;IAC9E,MAAM,IAAI,KAAK,CAAC,oFAAoF,CAAC,CAAA;AACvG,CAAC"}
+{"version":3,"file":"launchd.js","sourceRoot":"","sources":["../src/launchd.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,SAAS,CAAA;AAC3E,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAA;AAC9F,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAA;AACjC,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AACrD,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAA;AAC9C,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AACpD,OAAO,EAAE,wBAAwB,EAAE,oBAAoB,EAAE,0BAA0B,EAAE,iBAAiB,EAC7C,MAAM,uBAAuB,CAAA;AACtF,OAAO,EAAE,yBAAyB,EAAE,MAAM,0BAA0B,CAAA;AAEpE,MAAM,cAAc,GAAG,oCAAoC,CAAA;AAuD3D,SAAS,GAAG,CAAC,KAAa;IACxB,OAAO,KAAK;SACT,UAAU,CAAC,GAAG,EAAE,OAAO,CAAC;SACxB,UAAU,CAAC,GAAG,EAAE,MAAM,CAAC;SACvB,UAAU,CAAC,GAAG,EAAE,MAAM,CAAC;SACvB,UAAU,CAAC,GAAG,EAAE,QAAQ,CAAC;SACzB,UAAU,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAA;AAC9B,CAAC;AAED,SAAS,eAAe,CAAC,KAAa,EAAE,KAAa;IACnD,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,uBAAuB,KAAK,mBAAmB,CAAC,CAAA;IACxF,OAAO,KAAK,CAAA;AACd,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,KAA4B;IAC3D,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAA;IAC/F,MAAM,IAAI,GAAG,eAAe,CAAC,KAAK,CAAC,IAAI,IAAI,OAAO,EAAE,EAAE,MAAM,CAAC,CAAA;IAC7D,MAAM,OAAO,GAAG,eAAe,CAAC,KAAK,CAAC,OAAO,EAAE,UAAU,CAAC,CAAA;IAC1D,MAAM,KAAK,GAAG,2BAA2B,KAAK,CAAC,OAAO,EAAE,CAAA;IACxD,OAAO;QACL,KAAK;QACL,SAAS,EAAE,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,cAAc,EAAE,GAAG,KAAK,QAAQ,CAAC;QAClE,UAAU,EAAE,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,KAAK,CAAC,OAAO,WAAW,CAAC;QAC9D,UAAU,EAAE,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,KAAK,CAAC,OAAO,iBAAiB,CAAC;KACrE,CAAA;AACH,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,KAAuB;IACvD,MAAM,OAAO,GAAG,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,gBAAgB,EAAE,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,OAAO;QACnF,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,UAAU,CAAC,CAAA;IACrC,IAAI,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;QAC9C,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAA;IAC3E,CAAC;IACD,OAAO;;;;;YAKG,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC;;;cAGd,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC;;cAEnB,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC;;cAElB,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC;;;;;;gBAMhB,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC;;gBAElB,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC;;;YAGnB,GAAG,CAAC,KAAK,CAAC,gBAAgB,CAAC;;YAE3B,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC;;YAErB,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC;;;;;;;;;;;;;;;;;CAiBhC,CAAA;AACD,CAAC;AAED,SAAS,cAAc,CAAC,IAAY,EAAE,SAA6B;IACjE,KAAK,MAAM,SAAS,IAAI,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;QACrD,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC;YAAE,SAAQ;QACpC,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,CAAA;QACvC,IAAI,CAAC;YACH,gFAAgF;YAChF,UAAU,CAAC,SAAS,EAAE,SAAS,CAAC,IAAI,CAAC,CAAA;YACrC,OAAO,SAAS,CAAA;QAClB,CAAC;QAAC,MAAM,CAAC,CAAA,CAAC;IACZ,CAAC;IACD,MAAM,IAAI,KAAK,CAAC,mCAAmC,IAAI,UAAU,CAAC,CAAA;AACpE,CAAC;AAED,SAAS,WAAW,CAAC,QAAgB,EAAE,OAAe,EAAE,OAA2B;IACjF,MAAM,MAAM,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAC,OAAO,CAAC,EAAE,GAAG,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC;QAChF,mBAAmB,EAAE,gBAAgB,EAAE,UAAU,EAAE,MAAM,EAAE,WAAW,EAAE,OAAO,CAAC,CAAA;IAClF,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;AAC1E,CAAC;AAED,SAAS,UAAU,CAAC,OAAe,EAAE,IAAuB;IAC1D,OAAO,SAAS,CAAC,OAAO,EAAE,CAAC,GAAG,IAAI,CAAC,EAAE;QACnC,QAAQ,EAAE,MAAM;QAChB,GAAG,EAAE,EAAE,IAAI,EAAE,eAAe,EAAE;QAC9B,SAAS,EAAE,GAAG,GAAG,IAAI;QACrB,OAAO,EAAE,MAAM;QACf,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC;KAClC,CAAC,CAAA;AACJ,CAAC;AAED,SAAS,YAAY,CAAC,MAAc,EAAE,MAAqB;IACzD,MAAM,MAAM,GAAG,OAAO,MAAM,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAA;IAClG,MAAM,MAAM,GAAG,MAAM,EAAE,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAA;IAC7C,OAAO,IAAI,KAAK,CAAC,uBAAuB,MAAM,UAAU,MAAM,CAAC,CAAC,CAAC,KAAK,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAA;AACxF,CAAC;AAED,SAAS,cAAc,CAAC,MAAqB;IAC3C,MAAM,MAAM,GAAG,OAAO,MAAM,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAA;IAClG,OAAO,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,gDAAgD,CAAC,IAAI,CAAC,MAAM,IAAI,EAAE,CAAC,CAAA;AACnG,CAAC;AAED,SAAS,WAAW,CAAC,YAAoB;IACvC,OAAO,IAAI,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC,CAAA;AAClE,CAAC;AAED,KAAK,UAAU,UAAU,CAAC,IAAY,EAAE,KAAsB,EAAE,GAAkD;IAChH,MAAM,SAAS,GAAG,GAAG,IAAI,QAAQ,UAAU,EAAE,EAAE,CAAA;IAC/C,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,SAAS,EAAE,GAAG,EAAE,KAAK,CAAC,CAAA;QAC9C,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAA;YAC3B,MAAM,IAAI,CAAC,IAAI,EAAE,CAAA;QACnB,CAAC;gBAAS,CAAC;YACT,MAAM,IAAI,CAAC,KAAK,EAAE,CAAA;QACpB,CAAC;QACD,MAAM,UAAU,GAAG,GAAG,CAAC,iBAAiB,EAAE,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC,CAAA;QAC/D,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC;YAAE,MAAM,YAAY,CAAC,8BAA8B,EAAE,UAAU,CAAC,CAAA;QAC3F,MAAM,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,CAAA;QAC7B,MAAM,MAAM,CAAC,SAAS,EAAE,IAAI,CAAC,CAAA;IAC/B,CAAC;YAAS,CAAC;QACT,MAAM,MAAM,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAA;IACzC,CAAC;AACH,CAAC;AAED,SAAS,aAAa,CAAC,GAAkD;IACvE,OAAO,CAAC,OAAO,EAAE,IAAI,EAAE,EAAE;QACvB,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,EAAE,IAAI,CAAC,CAAA;QACjC,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE,CAAA;IACpH,CAAC,CAAA;AACH,CAAC;AAED,SAAS,kBAAkB,CAAC,QAAgB,EAAE,OAAe;IAC3D,MAAM,IAAI,GAAG,YAAY,CAAC,QAAQ,CAAC,EAAE,GAAG,GAAG,YAAY,CAAC,OAAO,CAAC,CAAA;IAChE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG;QACnC,SAAS,EAAE,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAA;AAC7E,CAAC;AAED,KAAK,UAAU,gBAAgB,CAAC,KAA2C,EACzE,KAAuB,EAAE,GAAW,EAAE,GAAkD;IACxF,MAAM,MAAM,GAAG,OAAO,GAAG,IAAI,KAAK,CAAC,KAAK,EAAE,CAAA;IAC1C,IAAI,KAAoB,CAAA;IACxB,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,MAAM,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,CAAA;QAC1C,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,IAAI,KAAK,CAAC,cAAc,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;YAC5E,MAAM,IAAI,KAAK,CAAC,0DAA0D,CAAC,CAAA;QAC7E,CAAC;QACD,KAAK,GAAG,MAAM,QAAQ,CAAC,KAAK,CAAC,SAAS,CAAC,CAAA;IACzC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,MAAM,KAAK,CAAA;QACnE,KAAK,GAAG,IAAI,CAAA;IACd,CAAC;IACD,IAAI,QAAQ,GAAyC,IAAI,CAAA;IACzD,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QACnB,MAAM,MAAM,GAAG,GAAG,CAAC,iBAAiB,EAAE,CAAC,UAAU,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC,CAAA;QAC7F,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;YAAE,MAAM,YAAY,CAAC,uCAAuC,EAAE,MAAM,CAAC,CAAA;QAC5F,IAAI,KAAqC,CAAA;QACzC,IAAI,CAAC;YAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAmC,CAAA;QAAC,CAAC;QAC7F,MAAM,CAAC;YAAC,MAAM,IAAI,KAAK,CAAC,2DAA2D,CAAC,CAAA;QAAC,CAAC;QACtF,MAAM,IAAI,GAAG,KAAK,CAAC,gBAAgB,CAAA;QACnC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,OAAO,GAAG,KAAK,QAAQ,CAAC,EAAE,CAAC;YACxE,MAAM,IAAI,KAAK,CAAC,6DAA6D,CAAC,CAAA;QAChF,CAAC;QACD,MAAM,MAAM,GAAG,IAAI,CAAC,CAAC,CAAC,KAAK,uCAAuC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;QAC1E,IAAI,OAAO,IAAI,CAAC,CAAC,CAAC,KAAK,QAAQ,IAAI,OAAO,IAAI,CAAC,MAAM,CAAC,KAAK,QAAQ,EAAE,CAAC;YACpE,MAAM,IAAI,KAAK,CAAC,6DAA6D,CAAC,CAAA;QAChF,CAAC;QACD,QAAQ,GAAG,kBAAkB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,CAAA;QACpD,MAAM,QAAQ,GAA0B,EAAE,GAAG,KAAK,EAAE,GAAG,QAAQ,EAAE,IAAI,EAAE,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,CAAA;QACxH,wBAAwB,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,CAAC,OAAO,EAAE,UAAU,EAAE,EAAE,CAAC,OAAO,KAAK,iBAAiB;YAC/G,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE;YAC7G,CAAC,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC,CAAA;QAC5C,+EAA+E;QAC/E,IAAI,CAAC,CAAC,MAAM,QAAQ,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;YACrD,MAAM,IAAI,KAAK,CAAC,iEAAiE,CAAC,CAAA;QACpF,CAAC;IACH,CAAC;IACD,MAAM,QAAQ,GAA0B,EAAE,GAAG,KAAK,EAAE,GAAG,QAAQ;QAC7D,IAAI,EAAE,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,CAAA;IACzD,MAAM,KAAK,GAAG,0BAA0B,CAAC,QAAQ,EAAE,aAAa,CAAC,GAAG,CAAC,CAAC,CAAA;IACtE,IAAI,KAAK,CAAC,UAAU,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;QAC1C,MAAM,IAAI,KAAK,CAAC,6DAA6D,CAAC,CAAA;IAChF,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,GAAG,KAAK,EAAE,QAAQ,EAAE,CAAA;AACnE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,KAA2C,EACrF,UAAgF,EAAE;IAClF,IAAI,CAAC,OAAO,CAAC,QAAQ,IAAI,OAAO,CAAC,QAAQ,CAAC,KAAK,QAAQ,EAAE,CAAC;QACxD,MAAM,IAAI,KAAK,CAAC,2DAA2D,CAAC,CAAA;IAC9E,CAAC;IACD,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,MAAM,EAAE,EAAE,CAAA;IAC7C,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,GAAG,CAAC,EAAE,CAAC;QAC/D,MAAM,IAAI,KAAK,CAAC,4DAA4D,CAAC,CAAA;IAC/E,CAAC;IACD,MAAM,KAAK,GAAG,gBAAgB,CAAC,EAAE,GAAG,KAAK,EAAE,GAAG,CAAC,OAAO,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC,CAAA;IAC3G,OAAO,gBAAgB,CAAC,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,IAAI,UAAU,CAAC,CAAA;AACvE,CAAC;AAED,KAAK,UAAU,aAAa,CAAC,KAA4B,EAAE,KAAuB,EAAE,GAAW,EAC7F,GAAkD,EAAE,IAAoD,EACxG,cAAc,GAAG,IAAI;IACrB,MAAM,OAAO,GAAG,aAAa,CAAC,GAAG,CAAC,EAAE,MAAM,GAAG,OAAO,GAAG,IAAI,KAAK,CAAC,KAAK,EAAE,EAAE,MAAM,GAAG,OAAO,GAAG,EAAE,CAAA;IAC/F,IAAI,oBAAoB,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC,UAAU;QAAE,MAAM,IAAI,KAAK,CAAC,kEAAkE,CAAC,CAAA;IACxI,MAAM,MAAM,GAAG,GAAG,CAAC,gBAAgB,EAAE,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAA;IACxD,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,YAAY,CAAC,gBAAgB,EAAE,MAAM,CAAC,CAAA;IACrE,MAAM,MAAM,GAAG,CAAC,GAAG,EAAE,GAAG,CAAU,CAAA;IAClC,IAAI,SAAS,GAAkB,EAAE,MAAM,EAAE,IAAI,EAAE,CAAA;IAC/C,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,IAAI,MAAM,CAAC,MAAM,EAAE,OAAO,IAAI,CAAC,EAAE,CAAC;QAC7D,SAAS,GAAG,GAAG,CAAC,gBAAgB,EAAE,CAAC,WAAW,EAAE,MAAM,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC,CAAA;QACzE,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,cAAc,CAAC,SAAS,CAAC;YAAE,MAAM,YAAY,CAAC,mBAAmB,EAAE,SAAS,CAAC,CAAA;QAC5G,IAAI,kBAAkB,GAAG,CAAC,EAAE,kBAAkB,GAAG,CAAC,EAAE,UAAU,GAAG,KAAK,CAAA;QACtE,IAAI,SAAS,GAAG,QAAQ,EAAE,OAAO,GAAG,CAAC,EAAE,YAAY,GAAkB,IAAI,CAAA;QACzE,yEAAyE;QACzE,wEAAwE;QACxE,KAAK,IAAI,WAAW,GAAG,CAAC,EAAE,WAAW,GAAG,GAAG,EAAE,WAAW,IAAI,CAAC,EAAE,CAAC;YAC9D,MAAM,KAAK,GAAG,0BAA0B,CAAC,KAAK,EAAE,OAAO,CAAC,CAAA;YACxD,UAAU,GAAG,KAAK,CAAC,UAAU,CAAA;YAC7B,SAAS,GAAG,KAAK,CAAC,KAAK,IAAI,SAAS,CAAA;YACpC,OAAO,GAAG,KAAK,CAAC,GAAG,CAAA;YACnB,YAAY,GAAG,KAAK,CAAC,YAAY,CAAA;YACjC,IAAI,UAAU,IAAI,CAAC,cAAc;gBAAE,OAAM;YACzC,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;gBAClB,kBAAkB,GAAG,KAAK,CAAC,GAAG,KAAK,kBAAkB,CAAC,CAAC,CAAC,kBAAkB,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;gBAClF,kBAAkB,GAAG,KAAK,CAAC,GAAG,CAAA;YAChC,CAAC;iBAAM,CAAC;gBACN,kBAAkB,GAAG,CAAC,CAAA;gBACtB,kBAAkB,GAAG,CAAC,CAAA;YACxB,CAAC;YACD,IAAI,kBAAkB,IAAI,CAAC;gBAAE,OAAM;YACnC,IAAI,CAAC,UAAU,IAAI,WAAW,IAAI,CAAC;gBAAE,MAAK;YAC1C,MAAM,IAAI,CAAC,GAAG,CAAC,CAAA;QACjB,CAAC;QACD,IAAI,UAAU,EAAE,CAAC;YACf,MAAM,IAAI,KAAK,CAAC,yFAAyF,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,SAAS,OAAO,kBAAkB,YAAY,EAAE,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,SAAS,GAAG,CAAC,CAAA;QAC9M,CAAC;QACD,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,CAAA;QAC/B,IAAI,OAAO,KAAK,SAAS;YAAE,MAAM,IAAI,CAAC,OAAO,CAAC,CAAA;IAChD,CAAC;IACD,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,YAAY,CAAC,mBAAmB,EAAE,SAAS,CAAC,CAAA;IAC9E,MAAM,IAAI,KAAK,CAAC,oFAAoF,CAAC,CAAA;AACvG,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,KAA2C,EAC3C,UAAqC,EAAE;IAEvC,IAAI,CAAC,OAAO,CAAC,QAAQ,IAAI,OAAO,CAAC,QAAQ,CAAC,KAAK,QAAQ,EAAE,CAAC;QACxD,MAAM,IAAI,KAAK,CAAC,iFAAiF,CAAC,CAAA;IACpG,CAAC;IACD,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,MAAM,EAAE,EAAE,CAAA;IAC7C,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,GAAG,CAAC,EAAE,CAAC;QAC/D,MAAM,IAAI,KAAK,CAAC,4DAA4D,CAAC,CAAA;IAC/E,CAAC;IACD,MAAM,KAAK,GAAG,gBAAgB,CAAC;QAC7B,GAAG,CAAC,OAAO,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC;QAC7D,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,OAAO,EAAE,KAAK,CAAC,OAAO;KACvB,CAAC,CAAA;IACF,MAAM,gBAAgB,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,UAAU,EAAE,KAAK,CAAC,OAAO,CAAC,CAAA;IACvE,MAAM,MAAM,CAAC,gBAAgB,EAAE,SAAS,CAAC,IAAI,CAAC,CAAA;IAC9C,MAAM,WAAW,GAAG,OAAO,CAAC,IAAI,IAAI,OAAO,CAAC,GAAG,CAAC,IAAI,CAAA;IACpD,MAAM,QAAQ,GAAG,YAAY,CAAC,OAAO,CAAC,QAAQ,IAAI,cAAc,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC,CAAA;IACtF,MAAM,OAAO,GAAG,YAAY,CAAC,OAAO,CAAC,OAAO,IAAI,cAAc,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC,CAAA;IACnF,MAAM,IAAI,GAAG,WAAW,CAAC,QAAQ,EAAE,OAAO,EAAE,WAAW,CAAC,CAAA;IACxD,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,UAAU,CAAA;IACrC,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,WAAW,CAAA;IAExC,MAAM,MAAM,GAAG,OAAO,GAAG,IAAI,KAAK,CAAC,KAAK,EAAE,CAAA;IAC1C,MAAM,WAAW,GAA0B,EAAE,GAAG,KAAK;QACnD,GAAG,CAAC,OAAO,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC,EAAE,GAAG;QAClE,GAAG,kBAAkB,CAAC,QAAQ,EAAE,OAAO,CAAC,EAAE,CAAA;IAC5C,OAAO,yBAAyB,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,GAAG,EAAE,EAAE,KAAK,IAAI,EAAE;QAC3E,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,CAAC,CAAA;QAC7D,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,QAAQ,CAAC,KAAK,CAAC,SAAS,CAAC,CAAA;QAClF,MAAM,WAAW,GAA0B,EAAE,GAAG,KAAK;YACnD,GAAG,CAAC,OAAO,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC,EAAE,GAAG;YAClE,GAAG,MAAM,CAAC,QAAQ,EAAE,CAAA;QACtB,IAAI,MAAM,CAAC,UAAU,EAAE,CAAC;YACtB,MAAM,iBAAiB,CAAC,WAAW,EAAE,WAAW,CAAC,GAAG,CAAC;gBACnD,OAAO,CAAC,MAAM,IAAI,IAAI,eAAe,EAAE,CAAC,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC;aAC5E,CAAC,EAAE,aAAa,CAAC,GAAG,CAAC,CAAC,CAAA;QACzB,CAAC;QACD,uEAAuE;QACvE,uEAAuE;QACvE,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,CAAC,KAA4B,EAAE,EAAE;YACrF,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ;gBAAE,OAAO,IAAI,CAAA;YACxC,MAAM,KAAK,CAAA;QACb,CAAC,CAAC,CAAA;QACF,IAAI,OAAO,KAAK,IAAI,CAAC,CAAC,CAAC,QAAQ,KAAK,IAAI,CAAC,CAAC,CAAC,QAAQ,KAAK,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC1F,MAAM,IAAI,KAAK,CAAC,0EAA0E,CAAC,CAAA;QAC7F,CAAC;QACD,MAAM,WAAW,GAAG,iBAAiB,CAAC,EAAE,GAAG,KAAK,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO;YAC9F,gBAAgB,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAA;QAC9C,IAAI,QAAQ,GAAG,KAAK,CAAA;QACpB,IAAI,CAAC;YACH,MAAM,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAA;YACvE,MAAM,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAA;YACxE,MAAM,UAAU,CAAC,KAAK,CAAC,SAAS,EAAE,WAAW,EAAE,GAAG,CAAC,CAAA;YACnD,QAAQ,GAAG,IAAI,CAAA;YACf,MAAM,aAAa,CAAC,WAAW,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,CAAA;YACvD,OAAO,EAAE,GAAG,KAAK,EAAE,MAAM,EAAE,CAAA;QAC7B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC;gBACH,mEAAmE;gBACnE,uEAAuE;gBACvE,IAAI,QAAQ;oBAAE,MAAM,iBAAiB,CAAC,WAAW,EAAE,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,aAAa,CAAC,GAAG,CAAC,CAAC,CAAA;gBACnG,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,CAAC,SAAgC,EAAE,EAAE;oBACrF,IAAI,SAAS,CAAC,IAAI,KAAK,QAAQ;wBAAE,OAAO,IAAI,CAAA;oBAC5C,MAAM,SAAS,CAAA;gBACjB,CAAC,CAAC,CAAA;gBACF,IAAI,QAAQ,CAAC,CAAC,CAAC,GAAG,EAAE,QAAQ,CAAC,MAAM,CAAC,KAAK,WAAW;oBAClD,CAAC,CAAC,GAAG,KAAK,IAAI,CAAC,CAAC,CAAC,QAAQ,KAAK,IAAI,CAAC,CAAC,CAAC,QAAQ,KAAK,IAAI,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;oBAClF,MAAM,IAAI,KAAK,CAAC,+DAA+D,CAAC,CAAA;gBAClF,CAAC;gBACD,IAAI,QAAQ,EAAE,CAAC;oBACb,IAAI,QAAQ,KAAK,IAAI;wBAAE,MAAM,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,CAAA;;wBAC/C,MAAM,UAAU,CAAC,KAAK,CAAC,SAAS,EAAE,QAAQ,EAAE,GAAG,CAAC,CAAA;gBACvD,CAAC;gBACD,IAAI,MAAM,CAAC,UAAU;oBAAE,MAAM,aAAa,CAAC,WAAW,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,CAAC,OAAO,CAAC,CAAA;YAChG,CAAC;YAAC,OAAO,aAAa,EAAE,CAAC;gBACvB,MAAM,IAAI,cAAc,CAAC,CAAC,KAAK,EAAE,aAAa,CAAC,EAC7C,yFAAyF,CAAC,CAAA;YAC9F,CAAC;YACD,MAAM,KAAK,CAAA;QACb,CAAC;IACH,CAAC,CAAC,CAAA;AACJ,CAAC"}

package/lib/rsi-authority-config.d.ts

@@ -0,0 +1,29 @@
+import { type PluginControlTrustConfig, type SourceReleaseAuthorityConfig, type SystemdHostAuthorityConfig } from '@dsh-enhanced/plugin-control-plane';
+import { type RsiAuthorityResources } from './rsi-authority-resources.js';
+import type { Pin, RsiAuthorityRuntime } from './rsi-authority-runtime.js';
+import type { RsiSetupManifest } from './rsi-profile.js';
+import type { RsiReleaseBuildConfig } from './rsi-release-build.js';
+import type { RsiSourceWorkspace } from './rsi-source.js';
+export interface RsiAuthorityConfigInput {
+    manifest: RsiSetupManifest;
+    resources: RsiAuthorityResources;
+    runtime: RsiAuthorityRuntime;
+    source: RsiSourceWorkspace;
+    releaseBuild: RsiReleaseBuildConfig;
+    executor: PluginControlTrustConfig['executor'];
+    systemctl: Pin & {
+        interpreter: Pin | null;
+    };
+    unitProperties: SystemdHostAuthorityConfig['template']['unitProperties'];
+    policies: SourceReleaseAuthorityConfig['grant']['policies'];
+    now: number;
+}
+/** Compile immutable configuration bytes. The caller creates private directories,
+ * writes files atomically, opens the Control Plane ledger, and runs the real
+ * filesystem and executable validators before any service is enabled. */
+export declare function compileRsiAuthorityConfigs(input: RsiAuthorityConfigInput): {
+    files: Record<string, string>;
+    directories: string[];
+    trust: PluginControlTrustConfig;
+};
+//# sourceMappingURL=rsi-authority-config.d.ts.map

package/lib/rsi-authority-config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rsi-authority-config.d.ts","sourceRoot":"","sources":["../src/rsi-authority-config.ts"],"names":[],"mappings":"AAGA,OAAO,EAAuE,KAAK,wBAAwB,EACjC,KAAK,4BAA4B,EAChF,KAAK,0BAA0B,EAAuC,MAAM,oCAAoC,CAAA;AAE3I,OAAO,EAAqB,KAAK,qBAAqB,EAAE,MAAM,8BAA8B,CAAA;AAC5F,OAAO,KAAK,EAAE,GAAG,EAAE,mBAAmB,EAAE,MAAM,4BAA4B,CAAA;AAC1E,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAA;AACxD,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,wBAAwB,CAAA;AACnE,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,iBAAiB,CAAA;AA+BzD,MAAM,WAAW,uBAAuB;IACtC,QAAQ,EAAE,gBAAgB,CAAA;IAC1B,SAAS,EAAE,qBAAqB,CAAA;IAChC,OAAO,EAAE,mBAAmB,CAAA;IAC5B,MAAM,EAAE,kBAAkB,CAAA;IAC1B,YAAY,EAAE,qBAAqB,CAAA;IACnC,QAAQ,EAAE,wBAAwB,CAAC,UAAU,CAAC,CAAA;IAC9C,SAAS,EAAE,GAAG,GAAG;QAAE,WAAW,EAAE,GAAG,GAAG,IAAI,CAAA;KAAE,CAAA;IAC5C,cAAc,EAAE,0BAA0B,CAAC,UAAU,CAAC,CAAC,gBAAgB,CAAC,CAAA;IACxE,QAAQ,EAAE,4BAA4B,CAAC,OAAO,CAAC,CAAC,UAAU,CAAC,CAAA;IAC3D,GAAG,EAAE,MAAM,CAAA;CACZ;AAED;;yEAEyE;AACzE,wBAAgB,0BAA0B,CAAC,KAAK,EAAE,uBAAuB,GAAG;IAC1E,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAAC,WAAW,EAAE,MAAM,EAAE,CAAC;IAAC,KAAK,EAAE,wBAAwB,CAAA;CACtF,CAgLA"}