@fastybird/smart-panel-backend 1.1.0-alpha.64 → 1.1.0-alpha.65

package/dist/plugins/devices-virtual/services/thermostat-installation-loader.service.js

@@ -0,0 +1,350 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+var ThermostatInstallationLoaderService_1;
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ThermostatInstallationLoaderService = void 0;
+const typeorm_1 = require("typeorm");
+const common_1 = require("@nestjs/common");
+const config_1 = require("@nestjs/config");
+const event_emitter_1 = require("@nestjs/event-emitter");
+const config_utils_1 = require("../../../common/utils/config.utils");
+const devices_constants_1 = require("../../../modules/devices/devices.constants");
+const device_structure_lock_service_1 = require("../../../modules/devices/services/device-structure-lock.service");
+const platform_registry_service_1 = require("../../../modules/devices/services/platform.registry.service");
+const shelly_ng_device_platform_1 = require("../../devices-shelly-ng/platforms/shelly-ng.device.platform");
+const thermostat_installation_entity_1 = require("../entities/thermostat-installation.entity");
+const thermostat_installation_artifact_1 = require("./thermostat-installation-artifact");
+const thermostat_installation_bindings_service_1 = require("./thermostat-installation-bindings.service");
+const thermostat_installation_service_1 = require("./thermostat-installation.service");
+const virtual_thermostat_claims_service_1 = require("./virtual-thermostat-claims.service");
+const virtual_thermostat_config_service_1 = require("./virtual-thermostat-config.service");
+const virtual_thermostat_runtime_service_1 = require("./virtual-thermostat-runtime.service");
+const EVENTS = [
+    virtual_thermostat_config_service_1.THERMOSTAT_CONFIG_CHANGED,
+    devices_constants_1.EventType.DEVICE_CONNECTION_CHANGED,
+    devices_constants_1.EventType.DEVICE_UPDATED,
+    devices_constants_1.EventType.DEVICE_DELETED,
+    devices_constants_1.EventType.CHANNEL_UPDATED,
+    devices_constants_1.EventType.CHANNEL_DELETED,
+    devices_constants_1.EventType.CHANNEL_PROPERTY_UPDATED,
+    devices_constants_1.EventType.CHANNEL_PROPERTY_DELETED,
+];
+let ThermostatInstallationLoaderService = ThermostatInstallationLoaderService_1 = class ThermostatInstallationLoaderService {
+    constructor(dataSource, bindings, installations, claims, platforms, lock, runtime, events, configService = new config_1.ConfigService()) {
+        this.dataSource = dataSource;
+        this.bindings = bindings;
+        this.installations = installations;
+        this.claims = claims;
+        this.platforms = platforms;
+        this.lock = lock;
+        this.runtime = runtime;
+        this.events = events;
+        this.configService = configService;
+        this.logger = new common_1.Logger(ThermostatInstallationLoaderService_1.name);
+        this.epoch = 0;
+        this.stopped = false;
+        this.queue = Promise.resolve();
+        this.scheduled = false;
+        this.pausedClaims = new Set();
+        this.verifications = new Map();
+        this.humanVerifications = new Map();
+        this.active = new Map();
+        this.changed = () => {
+            this.invalidate();
+            this.schedule();
+        };
+        this.installations.isActivationPaused = (claimId) => this.pausedClaims.has(claimId);
+        this.installations.onChanging = (claimId) => {
+            this.pausedClaims.add(claimId);
+            this.invalidate();
+        };
+    }
+    async onApplicationBootstrap() {
+        if ((0, config_utils_1.getEnvValue)(this.configService, 'FB_CLI', null) === 'on')
+            return;
+        for (const event of EVENTS)
+            this.events.on(event, this.changed);
+        const epoch = this.epoch;
+        try {
+            await this.refresh();
+        }
+        catch (error) {
+            if (epoch === this.epoch)
+                this.invalidate();
+            this.logger.error('Installation renewal failed during startup; retrying on the next cycle', error);
+        }
+        this.timer = setInterval(() => this.schedule(), 10000);
+        this.timer.unref();
+    }
+    onModuleDestroy() {
+        this.stopped = true;
+        clearInterval(this.timer);
+        for (const event of EVENTS)
+            this.events.off(event, this.changed);
+        this.installations.onChanging = undefined;
+        this.installations.isActivationPaused = undefined;
+        this.invalidate();
+    }
+    schedule() {
+        if (this.scheduled || this.stopped)
+            return;
+        this.scheduled = true;
+        this.queue = this.queue
+            .then(async () => {
+            if (this.stopped)
+                return;
+            const epoch = this.epoch;
+            try {
+                await this.refresh();
+            }
+            catch {
+                if (epoch === this.epoch)
+                    this.invalidate();
+            }
+        })
+            .finally(() => {
+            this.scheduled = false;
+        });
+    }
+    invalidate() {
+        this.epoch++;
+        for (const entry of this.active.values()) {
+            this.claims.revokeQualification(entry.identity);
+            void this.runtime.request(entry.controllerId);
+        }
+        this.active.clear();
+    }
+    async refresh() {
+        const rows = await this.dataSource.manager.find(thermostat_installation_entity_1.ThermostatInstallationEntity);
+        for (const row of rows) {
+            try {
+                await this.verify(row.claimId, undefined, null);
+            }
+            catch (error) {
+                this.logger.error(`Installation renewal failed for claim=${row.claimId}`, error);
+            }
+        }
+    }
+    async verify(claimId, expectedRevision, actorId = null) {
+        if (actorId === null && this.humanVerifications.has(claimId))
+            return;
+        let release;
+        if (actorId !== null) {
+            release = this.claims.holdRecoveryFence();
+            this.claims.revokeAllQualifications();
+            this.pausedClaims.add(claimId);
+            this.invalidate();
+        }
+        const operation = Symbol();
+        const epoch = this.epoch;
+        this.verifications.set(claimId, operation);
+        if (actorId !== null)
+            this.humanVerifications.set(claimId, operation);
+        const isCurrent = () => epoch === this.epoch && this.verifications.get(claimId) === operation && !this.stopped;
+        try {
+            await this.verifyProfile(claimId, expectedRevision, actorId, isCurrent);
+        }
+        catch (error) {
+            const current = isCurrent();
+            if (current) {
+                if (actorId !== null)
+                    this.invalidate();
+                else
+                    this.invalidateClaim(claimId);
+            }
+            if (actorId !== null || current)
+                throw error;
+        }
+        finally {
+            if (this.verifications.get(claimId) === operation)
+                this.verifications.delete(claimId);
+            if (this.humanVerifications.get(claimId) === operation)
+                this.humanVerifications.delete(claimId);
+            if (release) {
+                release();
+                await this.claims.refresh().catch(() => undefined);
+            }
+        }
+    }
+    invalidateClaim(claimId) {
+        const entry = this.active.get(claimId);
+        if (!entry)
+            return;
+        this.active.delete(claimId);
+        this.claims.revokeQualification(entry.identity);
+        void this.runtime.request(entry.controllerId);
+    }
+    async verifyProfile(claimId, expectedRevision, actorId, isCurrent) {
+        const epoch = this.epoch;
+        const row = await this.dataSource.manager.findOneByOrFail(thermostat_installation_entity_1.ThermostatInstallationEntity, { claimId });
+        if (expectedRevision !== undefined && row.revision !== expectedRevision)
+            throw new common_1.ConflictException('Installation revision changed; inspect again.');
+        let lease = null;
+        const reasons = [];
+        let hash;
+        let verifiedConfigurationRevision;
+        try {
+            const binding = await this.bindings.resolve(this.dataSource.manager, claimId);
+            verifiedConfigurationRevision = binding.config.revision;
+            if (row.revokedAt)
+                reasons.push('installation_revoked');
+            if (actorId === null && (!row.armedAt || this.pausedClaims.has(claimId)))
+                reasons.push('operator_activation_required');
+            if (binding.fingerprint !== row.bindingFingerprint || binding.claim.revision !== row.claimRevision)
+                reasons.push('installation_bindings_changed');
+            (0, thermostat_installation_artifact_1.validateThermostatInstallation)(row.setup, row.attestations, binding);
+            reasons.push(...(0, thermostat_installation_artifact_1.installationAttestationReasons)(row, binding.opposed));
+            if (reasons.length === 0) {
+                const artifact = (0, thermostat_installation_artifact_1.thermostatInstallationArtifact)(row, binding);
+                hash = artifact.sourceHash;
+                if (hash !== row.expectedScriptHash)
+                    throw new Error('reviewed_artifact_version_changed');
+                const platform = this.platforms.get(binding.target.device);
+                if (!(platform instanceof shelly_ng_device_platform_1.ShellyNgDevicePlatform))
+                    reasons.push('managed_shelly_provider_unavailable');
+                else {
+                    const session = platform.prepareGuardRpcSession(binding.target, artifact.qualification);
+                    lease =
+                        (await session?.inspectInstallation({
+                            componentType: row.setup.floorComponentType,
+                            componentId: row.setup.floorComponentId,
+                            configurationJson: row.setup.floorConfigurationJson,
+                            switchConfigurationJson: row.setup.switchConfigurationJson,
+                            peripheralsJson: row.setup.peripheralsJson,
+                        }, 5000, () => epoch === this.epoch && !this.stopped)) ?? null;
+                    if (!lease?.isCurrent())
+                        reasons.push('actual_device_code_floor_switch_or_connection_not_verified');
+                }
+            }
+        }
+        catch (error) {
+            reasons.push(error instanceof Error ? error.message : 'installation_verification_failed');
+        }
+        await this.lock.runExclusive(async () => {
+            const current = await this.dataSource.manager.findOneBy(thermostat_installation_entity_1.ThermostatInstallationEntity, { claimId });
+            if (!current || current.revision !== row.revision || !isCurrent())
+                return;
+            let verifiedBinding;
+            try {
+                verifiedBinding = await this.bindings.resolve(this.dataSource.manager, claimId);
+                if (verifiedConfigurationRevision !== verifiedBinding.config.revision)
+                    reasons.push('configuration_changed_during_inspection');
+                if (verifiedBinding.fingerprint !== row.bindingFingerprint)
+                    reasons.push('installation_bindings_changed_during_inspection');
+            }
+            catch {
+                reasons.push('installation_bindings_unavailable');
+            }
+            if (!isCurrent())
+                return;
+            if (!lease?.isCurrent() && reasons.length === 0)
+                reasons.push('machine_lease_expired');
+            const observation = {
+                observedAt: new Date().toISOString(),
+                configurationRevision: verifiedConfigurationRevision,
+                state: reasons.length ? 'blocked' : 'verified_metadata',
+                reasons,
+                ...(reasons.length === 0 ? { scriptHash: hash, firmware: row.setup.firmware } : {}),
+                physicalSafetyCertified: false,
+            };
+            if (actorId ||
+                JSON.stringify({ ...current.lastMachineObservation, observedAt: null }) !==
+                    JSON.stringify({ ...observation, observedAt: null })) {
+                await this.dataSource.transaction(async (manager) => {
+                    const result = await manager.update(thermostat_installation_entity_1.ThermostatInstallationEntity, { claimId, revision: row.revision }, {
+                        lastMachineObservation: observation,
+                        ...(actorId && reasons.length === 0 ? { armedAt: current.armedAt ?? new Date() } : {}),
+                    });
+                    if (result.affected !== 1)
+                        throw new common_1.ConflictException('Installation revision changed during verification.');
+                    if (!isCurrent())
+                        throw new common_1.ConflictException('Installation verification superseded.');
+                    await manager.save(thermostat_installation_entity_1.ThermostatInstallationAuditEntity, manager.create(thermostat_installation_entity_1.ThermostatInstallationAuditEntity, {
+                        claimId,
+                        revision: row.revision,
+                        action: reasons.length ? 'metadata_blocked' : actorId ? 'activated' : 'metadata_verified',
+                        actorId,
+                        occurredAt: new Date(),
+                        snapshot: {
+                            setup: row.setup,
+                            attestations: row.attestations,
+                            bindingFingerprint: row.bindingFingerprint,
+                            expectedScriptHash: row.expectedScriptHash,
+                            observation,
+                        },
+                    }));
+                    if (!isCurrent())
+                        throw new common_1.ConflictException('Installation verification superseded.');
+                    if (reasons.length === 0 && !lease?.isCurrent())
+                        throw new common_1.ConflictException('Installation machine lease expired during verification.');
+                });
+            }
+            if (!isCurrent())
+                return;
+            const existing = this.active.get(claimId);
+            if (reasons.length || !lease?.isCurrent()) {
+                this.claims.revokeQualification(row.physicalIdentity);
+                this.active.delete(claimId);
+                if (existing)
+                    void this.runtime.request(row.controllerId);
+                return;
+            }
+            if (actorId)
+                this.pausedClaims.delete(claimId);
+            if (this.pausedClaims.has(claimId))
+                return;
+            const entry = {
+                revision: row.revision,
+                configurationRevision: verifiedConfigurationRevision,
+                identity: row.physicalIdentity,
+                controllerId: row.controllerId,
+                isCurrent: lease.isCurrent,
+            };
+            if (!existing ||
+                existing.revision !== row.revision ||
+                existing.configurationRevision !== verifiedConfigurationRevision ||
+                !existing.isCurrent()) {
+                this.active.set(claimId, entry);
+                const artifact = (0, thermostat_installation_artifact_1.thermostatInstallationArtifact)(row, verifiedBinding);
+                this.claims.recordQualification({
+                    physicalIdentity: row.physicalIdentity,
+                    qualificationGeneration: verifiedBinding.claim.qualificationGeneration ?? undefined,
+                    profile: artifact.qualification,
+                    upstreamWritersExcluded: true,
+                    opposedOutputsInterlocked: !verifiedBinding.opposed || row.attestations.some((item) => item.kind === 'opposed_interlock'),
+                    machineLeaseIsCurrent: () => epoch === this.epoch &&
+                        !this.pausedClaims.has(claimId) &&
+                        this.active.get(claimId) === entry &&
+                        entry.isCurrent(),
+                });
+                void this.runtime.request(row.controllerId);
+            }
+        });
+    }
+};
+exports.ThermostatInstallationLoaderService = ThermostatInstallationLoaderService;
+exports.ThermostatInstallationLoaderService = ThermostatInstallationLoaderService = ThermostatInstallationLoaderService_1 = __decorate([
+    (0, common_1.Injectable)(),
+    __param(8, (0, common_1.Optional)()),
+    __metadata("design:paramtypes", [typeorm_1.DataSource,
+        thermostat_installation_bindings_service_1.ThermostatInstallationBindingsService,
+        thermostat_installation_service_1.ThermostatInstallationService,
+        virtual_thermostat_claims_service_1.VirtualThermostatClaimsService,
+        platform_registry_service_1.PlatformRegistryService,
+        device_structure_lock_service_1.DeviceStructureLockService,
+        virtual_thermostat_runtime_service_1.VirtualThermostatRuntimeService,
+        event_emitter_1.EventEmitter2,
+        config_1.ConfigService])
+], ThermostatInstallationLoaderService);
+//# sourceMappingURL=thermostat-installation-loader.service.js.map

package/dist/plugins/devices-virtual/services/thermostat-installation-loader.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"thermostat-installation-loader.service.js","sourceRoot":"","sources":["../../../../src/plugins/devices-virtual/services/thermostat-installation-loader.service.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,qCAAqC;AAErC,2CAOwB;AACxB,2CAA+C;AAC/C,yDAAsD;AAEtD,qEAAiE;AACjE,kFAAuE;AACvE,mHAA6G;AAC7G,2GAAsG;AACtG,2GAAqG;AACrG,+FAGoD;AAEpD,yFAI4C;AAC5C,yGAAmG;AACnG,uFAAkF;AAElF,2FAAqF;AACrF,2FAAgF;AAChF,6FAAuF;AAEvF,MAAM,MAAM,GAAG;IACd,6DAAyB;IACzB,6BAAS,CAAC,yBAAyB;IACnC,6BAAS,CAAC,cAAc;IACxB,6BAAS,CAAC,cAAc;IACxB,6BAAS,CAAC,eAAe;IACzB,6BAAS,CAAC,eAAe;IACzB,6BAAS,CAAC,wBAAwB;IAClC,6BAAS,CAAC,wBAAwB;CAClC,CAAC;AAGK,IAAM,mCAAmC,2CAAzC,MAAM,mCAAmC;IAwB/C,YACkB,UAAsB,EACtB,QAA+C,EAC/C,aAA4C,EAC5C,MAAsC,EACtC,SAAkC,EAClC,IAAgC,EAChC,OAAwC,EACxC,MAAqB,EAC1B,gBAAgD,IAAI,sBAAa,EAAE;QAR9D,eAAU,GAAV,UAAU,CAAY;QACtB,aAAQ,GAAR,QAAQ,CAAuC;QAC/C,kBAAa,GAAb,aAAa,CAA+B;QAC5C,WAAM,GAAN,MAAM,CAAgC;QACtC,cAAS,GAAT,SAAS,CAAyB;QAClC,SAAI,GAAJ,IAAI,CAA4B;QAChC,YAAO,GAAP,OAAO,CAAiC;QACxC,WAAM,GAAN,MAAM,CAAe;QACT,kBAAa,GAAb,aAAa,CAAqC;QAhC/D,WAAM,GAAG,IAAI,eAAM,CAAC,qCAAmC,CAAC,IAAI,CAAC,CAAC;QACvE,UAAK,GAAG,CAAC,CAAC;QACV,YAAO,GAAG,KAAK,CAAC;QAEhB,UAAK,GAAkB,OAAO,CAAC,OAAO,EAAE,CAAC;QACzC,cAAS,GAAG,KAAK,CAAC;QACT,iBAAY,GAAG,IAAI,GAAG,EAAU,CAAC;QACjC,kBAAa,GAAG,IAAI,GAAG,EAAkB,CAAC;QAC1C,uBAAkB,GAAG,IAAI,GAAG,EAAkB,CAAC;QAC/C,WAAM,GAAG,IAAI,GAAG,EAS9B,CAAC;QACa,YAAO,GAAG,GAAG,EAAE;YAC/B,IAAI,CAAC,UAAU,EAAE,CAAC;YAClB,IAAI,CAAC,QAAQ,EAAE,CAAC;QACjB,CAAC,CAAC;QAYD,IAAI,CAAC,aAAa,CAAC,kBAAkB,GAAG,CAAC,OAAO,EAAE,EAAE,CAAC,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACpF,IAAI,CAAC,aAAa,CAAC,UAAU,GAAG,CAAC,OAAO,EAAE,EAAE;YAC3C,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YAC/B,IAAI,CAAC,UAAU,EAAE,CAAC;QACnB,CAAC,CAAC;IACH,CAAC;IACD,KAAK,CAAC,sBAAsB;QAC3B,IAAI,IAAA,0BAAW,EAAS,IAAI,CAAC,aAAa,EAAE,QAAQ,EAAE,IAAI,CAAC,KAAK,IAAI;YAAE,OAAO;QAC7E,KAAK,MAAM,KAAK,IAAI,MAAM;YAAE,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;QAChE,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;QACzB,IAAI,CAAC;YACJ,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC;QACtB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,IAAI,KAAK,KAAK,IAAI,CAAC,KAAK;gBAAE,IAAI,CAAC,UAAU,EAAE,CAAC;YAC5C,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,wEAAwE,EAAE,KAAK,CAAC,CAAC;QACpG,CAAC;QACD,IAAI,CAAC,KAAK,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,QAAQ,EAAE,EAAE,KAAK,CAAC,CAAC;QACvD,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;IACpB,CAAC;IACD,eAAe;QACd,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;QACpB,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC1B,KAAK,MAAM,KAAK,IAAI,MAAM;YAAE,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;QACjE,IAAI,CAAC,aAAa,CAAC,UAAU,GAAG,SAAS,CAAC;QAC1C,IAAI,CAAC,aAAa,CAAC,kBAAkB,GAAG,SAAS,CAAC;QAClD,IAAI,CAAC,UAAU,EAAE,CAAC;IACnB,CAAC;IACO,QAAQ;QACf,IAAI,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,OAAO;YAAE,OAAO;QAC3C,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC;QACtB,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK;aACrB,IAAI,CAAC,KAAK,IAAI,EAAE;YAChB,IAAI,IAAI,CAAC,OAAO;gBAAE,OAAO;YACzB,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;YACzB,IAAI,CAAC;gBACJ,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC;YACtB,CAAC;YAAC,MAAM,CAAC;gBACR,IAAI,KAAK,KAAK,IAAI,CAAC,KAAK;oBAAE,IAAI,CAAC,UAAU,EAAE,CAAC;YAC7C,CAAC;QACF,CAAC,CAAC;aACD,OAAO,CAAC,GAAG,EAAE;YACb,IAAI,CAAC,SAAS,GAAG,KAAK,CAAC;QACxB,CAAC,CAAC,CAAC;IACL,CAAC;IACD,UAAU;QACT,IAAI,CAAC,KAAK,EAAE,CAAC;QACb,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,CAAC;YAC1C,IAAI,CAAC,MAAM,CAAC,mBAAmB,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;YAChD,KAAK,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;QAC/C,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;IACrB,CAAC;IACD,KAAK,CAAC,OAAO;QACZ,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,6DAA4B,CAAC,CAAC;QAC9E,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;YACxB,IAAI,CAAC;gBACJ,MAAM,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,SAAS,EAAE,IAAI,CAAC,CAAC;YACjD,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBAEhB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,yCAAyC,GAAG,CAAC,OAAO,EAAE,EAAE,KAAK,CAAC,CAAC;YAClF,CAAC;QACF,CAAC;IACF,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,OAAe,EAAE,gBAAyB,EAAE,UAAyB,IAAI;QAErF,IAAI,OAAO,KAAK,IAAI,IAAI,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,OAAO,CAAC;YAAE,OAAO;QACrE,IAAI,OAAiC,CAAC;QACtC,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;YACtB,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,iBAAiB,EAAE,CAAC;YAC1C,IAAI,CAAC,MAAM,CAAC,uBAAuB,EAAE,CAAC;YACtC,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YAC/B,IAAI,CAAC,UAAU,EAAE,CAAC;QACnB,CAAC;QACD,MAAM,SAAS,GAAG,MAAM,EAAE,CAAC;QAC3B,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;QACzB,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;QAC3C,IAAI,OAAO,KAAK,IAAI;YAAE,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;QACtE,MAAM,SAAS,GAAG,GAAG,EAAE,CAAC,KAAK,KAAK,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC;QAC/G,IAAI,CAAC;YACJ,MAAM,IAAI,CAAC,aAAa,CAAC,OAAO,EAAE,gBAAgB,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC;QACzE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,MAAM,OAAO,GAAG,SAAS,EAAE,CAAC;YAC5B,IAAI,OAAO,EAAE,CAAC;gBACb,IAAI,OAAO,KAAK,IAAI;oBAAE,IAAI,CAAC,UAAU,EAAE,CAAC;;oBACnC,IAAI,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC;YACpC,CAAC;YACD,IAAI,OAAO,KAAK,IAAI,IAAI,OAAO;gBAAE,MAAM,KAAK,CAAC;QAC9C,CAAC;gBAAS,CAAC;YACV,IAAI,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,SAAS;gBAAE,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;YACtF,IAAI,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,SAAS;gBAAE,IAAI,CAAC,kBAAkB,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;YAChG,IAAI,OAAO,EAAE,CAAC;gBACb,OAAO,EAAE,CAAC;gBAEV,MAAM,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;YACpD,CAAC;QACF,CAAC;IACF,CAAC;IACO,eAAe,CAAC,OAAe;QACtC,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACvC,IAAI,CAAC,KAAK;YAAE,OAAO;QACnB,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAC5B,IAAI,CAAC,MAAM,CAAC,mBAAmB,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QAChD,KAAK,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;IAC/C,CAAC;IACO,KAAK,CAAC,aAAa,CAC1B,OAAe,EACf,gBAAoC,EACpC,OAAsB,EACtB,SAAwB;QAExB,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;QACzB,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,eAAe,CAAC,6DAA4B,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;QACrG,IAAI,gBAAgB,KAAK,SAAS,IAAI,GAAG,CAAC,QAAQ,KAAK,gBAAgB;YACtE,MAAM,IAAI,0BAAiB,CAAC,+CAA+C,CAAC,CAAC;QAC9E,IAAI,KAAK,GAAwC,IAAI,CAAC;QACtD,MAAM,OAAO,GAAa,EAAE,CAAC;QAC7B,IAAI,IAAY,CAAC;QACjB,IAAI,6BAAqC,CAAC;QAC1C,IAAI,CAAC;YACJ,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YAC9E,6BAA6B,GAAG,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC;YACxD,IAAI,GAAG,CAAC,SAAS;gBAAE,OAAO,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;YACxD,IAAI,OAAO,KAAK,IAAI,IAAI,CAAC,CAAC,GAAG,CAAC,OAAO,IAAI,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;gBACvE,OAAO,CAAC,IAAI,CAAC,8BAA8B,CAAC,CAAC;YAC9C,IAAI,OAAO,CAAC,WAAW,KAAK,GAAG,CAAC,kBAAkB,IAAI,OAAO,CAAC,KAAK,CAAC,QAAQ,KAAK,GAAG,CAAC,aAAa;gBACjG,OAAO,CAAC,IAAI,CAAC,+BAA+B,CAAC,CAAC;YAC/C,IAAA,iEAA8B,EAAC,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC;YACrE,OAAO,CAAC,IAAI,CAAC,GAAG,IAAA,iEAA8B,EAAC,GAAG,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC;YACtE,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC1B,MAAM,QAAQ,GAAG,IAAA,iEAA8B,EAAC,GAAG,EAAE,OAAO,CAAC,CAAC;gBAC9D,IAAI,GAAG,QAAQ,CAAC,UAAU,CAAC;gBAC3B,IAAI,IAAI,KAAK,GAAG,CAAC,kBAAkB;oBAAE,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;gBAC1F,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;gBAC3D,IAAI,CAAC,CAAC,QAAQ,YAAY,kDAAsB,CAAC;oBAAE,OAAO,CAAC,IAAI,CAAC,qCAAqC,CAAC,CAAC;qBAClG,CAAC;oBACL,MAAM,OAAO,GAAG,QAAQ,CAAC,sBAAsB,CAAC,OAAO,CAAC,MAAM,EAAE,QAAQ,CAAC,aAAa,CAAC,CAAC;oBACxF,KAAK;wBACJ,CAAC,MAAM,OAAO,EAAE,mBAAmB,CAClC;4BACC,aAAa,EAAE,GAAG,CAAC,KAAK,CAAC,kBAAkB;4BAC3C,WAAW,EAAE,GAAG,CAAC,KAAK,CAAC,gBAAgB;4BACvC,iBAAiB,EAAE,GAAG,CAAC,KAAK,CAAC,sBAAsB;4BACnD,uBAAuB,EAAE,GAAG,CAAC,KAAK,CAAC,uBAAuB;4BAC1D,eAAe,EAAE,GAAG,CAAC,KAAK,CAAC,eAAe;yBAC1C,EACD,IAAI,EACJ,GAAG,EAAE,CAAC,KAAK,KAAK,IAAI,CAAC,KAAK,IAAI,CAAC,IAAI,CAAC,OAAO,CAC3C,CAAC,IAAI,IAAI,CAAC;oBACZ,IAAI,CAAC,KAAK,EAAE,SAAS,EAAE;wBAAE,OAAO,CAAC,IAAI,CAAC,4DAA4D,CAAC,CAAC;gBACrG,CAAC;YACF,CAAC;QACF,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,OAAO,CAAC,IAAI,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,kCAAkC,CAAC,CAAC;QAC3F,CAAC;QACD,MAAM,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,KAAK,IAAI,EAAE;YACvC,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,SAAS,CAAC,6DAA4B,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;YACnG,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,QAAQ,KAAK,GAAG,CAAC,QAAQ,IAAI,CAAC,SAAS,EAAE;gBAAE,OAAO;YAC1E,IAAI,eAAsF,CAAC;YAC3F,IAAI,CAAC;gBACJ,eAAe,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;gBAChF,IAAI,6BAA6B,KAAK,eAAe,CAAC,MAAM,CAAC,QAAQ;oBACpE,OAAO,CAAC,IAAI,CAAC,yCAAyC,CAAC,CAAC;gBACzD,IAAI,eAAe,CAAC,WAAW,KAAK,GAAG,CAAC,kBAAkB;oBACzD,OAAO,CAAC,IAAI,CAAC,iDAAiD,CAAC,CAAC;YAClE,CAAC;YAAC,MAAM,CAAC;gBACR,OAAO,CAAC,IAAI,CAAC,mCAAmC,CAAC,CAAC;YACnD,CAAC;YACD,IAAI,CAAC,SAAS,EAAE;gBAAE,OAAO;YACzB,IAAI,CAAC,KAAK,EAAE,SAAS,EAAE,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;gBAAE,OAAO,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;YACvF,MAAM,WAAW,GAAiC;gBACjD,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;gBACpC,qBAAqB,EAAE,6BAA6B;gBACpD,KAAK,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,mBAAmB;gBACvD,OAAO;gBACP,GAAG,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACnF,uBAAuB,EAAE,KAAK;aAC9B,CAAC;YAEF,IACC,OAAO;gBACP,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,OAAO,CAAC,sBAAsB,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC;oBACtE,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,WAAW,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,EACpD,CAAC;gBACF,MAAM,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE;oBACnD,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,MAAM,CAClC,6DAA4B,EAC5B,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,EACnC;wBACC,sBAAsB,EAAE,WAAW;wBACnC,GAAG,CAAC,OAAO,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,IAAI,IAAI,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;qBACtF,CACD,CAAC;oBACF,IAAI,MAAM,CAAC,QAAQ,KAAK,CAAC;wBAAE,MAAM,IAAI,0BAAiB,CAAC,oDAAoD,CAAC,CAAC;oBAC7G,IAAI,CAAC,SAAS,EAAE;wBAAE,MAAM,IAAI,0BAAiB,CAAC,uCAAuC,CAAC,CAAC;oBACvF,MAAM,OAAO,CAAC,IAAI,CACjB,kEAAiC,EACjC,OAAO,CAAC,MAAM,CAAC,kEAAiC,EAAE;wBACjD,OAAO;wBACP,QAAQ,EAAE,GAAG,CAAC,QAAQ;wBACtB,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,mBAAmB;wBACzF,OAAO;wBACP,UAAU,EAAE,IAAI,IAAI,EAAE;wBACtB,QAAQ,EAAE;4BACT,KAAK,EAAE,GAAG,CAAC,KAAK;4BAChB,YAAY,EAAE,GAAG,CAAC,YAAY;4BAC9B,kBAAkB,EAAE,GAAG,CAAC,kBAAkB;4BAC1C,kBAAkB,EAAE,GAAG,CAAC,kBAAkB;4BAC1C,WAAW;yBACX;qBACD,CAAC,CACF,CAAC;oBACF,IAAI,CAAC,SAAS,EAAE;wBAAE,MAAM,IAAI,0BAAiB,CAAC,uCAAuC,CAAC,CAAC;oBACvF,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,SAAS,EAAE;wBAC9C,MAAM,IAAI,0BAAiB,CAAC,yDAAyD,CAAC,CAAC;gBACzF,CAAC,CAAC,CAAC;YACJ,CAAC;YACD,IAAI,CAAC,SAAS,EAAE;gBAAE,OAAO;YACzB,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YAC1C,IAAI,OAAO,CAAC,MAAM,IAAI,CAAC,KAAK,EAAE,SAAS,EAAE,EAAE,CAAC;gBAC3C,IAAI,CAAC,MAAM,CAAC,mBAAmB,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;gBACtD,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;gBAC5B,IAAI,QAAQ;oBAAE,KAAK,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;gBAC1D,OAAO;YACR,CAAC;YACD,IAAI,OAAO;gBAAE,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;YAC/C,IAAI,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC;gBAAE,OAAO;YAC3C,MAAM,KAAK,GAAG;gBACb,QAAQ,EAAE,GAAG,CAAC,QAAQ;gBACtB,qBAAqB,EAAE,6BAA6B;gBACpD,QAAQ,EAAE,GAAG,CAAC,gBAAgB;gBAC9B,YAAY,EAAE,GAAG,CAAC,YAAY;gBAC9B,SAAS,EAAE,KAAK,CAAC,SAAS;aAC1B,CAAC;YACF,IACC,CAAC,QAAQ;gBACT,QAAQ,CAAC,QAAQ,KAAK,GAAG,CAAC,QAAQ;gBAClC,QAAQ,CAAC,qBAAqB,KAAK,6BAA6B;gBAChE,CAAC,QAAQ,CAAC,SAAS,EAAE,EACpB,CAAC;gBACF,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;gBAChC,MAAM,QAAQ,GAAG,IAAA,iEAA8B,EAAC,GAAG,EAAE,eAAe,CAAC,CAAC;gBACtE,IAAI,CAAC,MAAM,CAAC,mBAAmB,CAAC;oBAC/B,gBAAgB,EAAE,GAAG,CAAC,gBAAgB;oBACtC,uBAAuB,EAAE,eAAe,CAAC,KAAK,CAAC,uBAAuB,IAAI,SAAS;oBACnF,OAAO,EAAE,QAAQ,CAAC,aAAa;oBAC/B,uBAAuB,EAAE,IAAI;oBAC7B,yBAAyB,EACxB,CAAC,eAAe,CAAC,OAAO,IAAI,GAAG,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,mBAAmB,CAAC;oBAC/F,qBAAqB,EAAE,GAAG,EAAE,CAC3B,KAAK,KAAK,IAAI,CAAC,KAAK;wBACpB,CAAC,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC;wBAC/B,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,KAAK;wBAClC,KAAK,CAAC,SAAS,EAAE;iBAClB,CAAC,CAAC;gBACH,KAAK,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;YAC7C,CAAC;QACF,CAAC,CAAC,CAAC;IACJ,CAAC;CACD,CAAA;AAtSY,kFAAmC;8CAAnC,mCAAmC;IAD/C,IAAA,mBAAU,GAAE;IAkCV,WAAA,IAAA,iBAAQ,GAAE,CAAA;qCARkB,oBAAU;QACZ,gFAAqC;QAChC,+DAA6B;QACpC,kEAA8B;QAC3B,mDAAuB;QAC5B,0DAA0B;QACvB,oEAA+B;QAChC,6BAAa;QACM,sBAAa;GAjC9C,mCAAmC,CAsS/C"}

package/dist/plugins/devices-virtual/services/thermostat-installation.service.d.ts

@@ -0,0 +1,40 @@
+import { DataSource } from 'typeorm';
+import { DeviceStructureLockService } from '../../../modules/devices/services/device-structure-lock.service';
+import { ThermostatInstallationAuditEntity } from '../entities/thermostat-installation.entity';
+import { ThermostatInstallationBindingsService } from './thermostat-installation-bindings.service';
+import { ThermostatGuardSetup, ThermostatMemberGuardSetup, ThermostatOperatorAttestation } from './thermostat-installation.types';
+import { VirtualThermostatClaimsService } from './virtual-thermostat-claims.service';
+import { VirtualThermostatRuntimeService } from './virtual-thermostat-runtime.service';
+export declare class ThermostatInstallationService {
+    private readonly dataSource;
+    private readonly lock;
+    private readonly bindings;
+    private readonly claims;
+    private readonly runtime;
+    onChanging?: (claimId: string) => void;
+    isActivationPaused?: (claimId: string) => boolean;
+    constructor(dataSource: DataSource, lock: DeviceStructureLockService, bindings: ThermostatInstallationBindingsService, claims: VirtualThermostatClaimsService, runtime: VirtualThermostatRuntimeService);
+    stage(claimId: string, expectedRevision: number, setup: ThermostatGuardSetup | ThermostatMemberGuardSetup, attestations: ThermostatOperatorAttestation[], actorId: string, authoringFence?: {
+        configurationRevision?: number;
+        claimRevision?: number;
+        qualificationGeneration?: string | null;
+    }): Promise<void>;
+    revoke(claimId: string, expectedRevision: number, actorId: string): Promise<void>;
+    private beginMutation;
+    private invalidate;
+    inspect(claimId: string): Promise<{
+        claim: string;
+        revision: number;
+        activation_requested: boolean;
+        setup: ThermostatGuardSetup;
+        operator_attestations: ThermostatOperatorAttestation[];
+        machine_observation: import("./thermostat-installation.types").ThermostatMachineObservation;
+        physical_safety_certified: false;
+        readiness: "blocked" | "metadata_verified_runtime_fence_required";
+        reasons: string[];
+        artifact: string;
+        source_hash: string;
+        audit: ThermostatInstallationAuditEntity[];
+    }>;
+}
+export declare function resolveInstallationSetup(setup: ThermostatGuardSetup | ThermostatMemberGuardSetup, binding: Awaited<ReturnType<ThermostatInstallationBindingsService['resolve']>>): ThermostatGuardSetup;