@hearsay-tools/squawk 0.0.0-stage → 0.17.0-dev.5685

package/dist/application-update/helper.js

@@ -0,0 +1,363 @@
+import { canonicalRecoverySlot, RECOVERY_FAILURE_MESSAGE, scopedRecoveryTarget, validateScopedRecovery, restorePackageTrees, validateRecoveryLayout, PackageRecoveryError } from './scoped-recovery.js';
+import { installedRuntime, installationModules, originalRuntimeName, hoistedRuntime, assertCanonicalPath } from './runtime-layout.js';
+import { readFile, readdir, rename, writeFile } from 'node:fs/promises';
+import { existsSync, readFileSync, realpathSync } from 'node:fs';
+import { dirname, join } from 'node:path';
+import { isIP } from 'node:net';
+import { Agent, get } from 'node:http';
+import { withDirectoryLock } from './lock.js';
+import { runOwnedNpm } from './npm-process.js';
+import { restoreGlobalBins, windowsGlobalLayout } from './bin-recovery.js';
+import { spawnDetached, stopGroup } from '../detached-process.js';
+const delay = (ms) => new Promise((resolve) => setTimeout(resolve, ms));
+/** Only a listening TCP server can supply the private restart destination. */
+export function restartEndpoint(address) {
+    if (!address || typeof address === 'string' || !Number.isInteger(address.port) || address.port < 1 || address.port > 65535
+        || !(isIP(address.address) === 4 && address.address.split('.')[0] === '127' || address.address === '::1')) {
+        throw new Error('restart requires a bound loopback endpoint');
+    }
+    return { host: address.address, port: address.port };
+}
+export function restartHealthUrl(endpoint) {
+    const { host, port } = restartEndpoint({ address: endpoint.host, port: endpoint.port, family: '' });
+    return `http://${host.includes(':') ? `[${host}]` : host}:${port}/api/v1/health`;
+}
+/** A private loopback probe must not use Node's environment-proxied global agent. */
+export async function requestRestartHealth(endpoint, signal) {
+    const agent = new Agent();
+    try {
+        return await new Promise((resolve, reject) => {
+            const request = get(restartHealthUrl(endpoint), { agent, signal }, (response) => {
+                response.once('error', reject);
+                if (!response.statusCode || response.statusCode < 200 || response.statusCode >= 300) {
+                    response.resume();
+                    resolve(undefined);
+                    return;
+                }
+                let body = '';
+                response.setEncoding('utf8');
+                response.on('data', (chunk) => { body += chunk; });
+                response.once('end', () => {
+                    try {
+                        resolve(JSON.parse(body));
+                    }
+                    catch (error) {
+                        reject(error);
+                    }
+                });
+            });
+            request.once('error', reject);
+        });
+    }
+    finally {
+        agent.destroy();
+    }
+}
+/** Only the helper owns the promotion transaction. Rollback waits for its child to exit. */
+export async function runRestartWorkflow(io) {
+    await io.waitForOldExit();
+    await io.assertOwned?.();
+    let replacementLaunched = false;
+    try {
+        await io.assertOwned?.();
+        await io.promote();
+        await io.assertOwned?.();
+        await io.validateOriginal();
+        await io.assertOwned?.();
+        await io.launch();
+        replacementLaunched = true;
+        await io.assertOwned?.();
+        await io.verifyHealth();
+        await io.assertOwned?.();
+        await io.reportSuccess();
+    }
+    catch {
+        if (replacementLaunched) {
+            try {
+                await io.reapReplacement();
+            }
+            catch {
+                // Never mutate the installation or launch another process until the
+                // helper has confirmed its replacement is gone.
+                await io.assertOwned?.();
+                await io.reportFailure(true);
+                return;
+            }
+        }
+        // A foreign owner may now be installing into the same tree. Preserve the
+        // recovery copy and leave the stale claim for the next boot to salvage.
+        await io.assertOwned?.();
+        let rollbackFailed = false;
+        let recoveryDetail;
+        try {
+            await io.assertOwned?.();
+            await io.restore();
+            await io.assertOwned?.();
+            await io.launchPrevious();
+            await io.assertOwned?.();
+        }
+        catch (error) {
+            if (error instanceof PackageRecoveryError)
+                recoveryDetail = error.message;
+            await io.reapReplacement().catch(() => undefined);
+            await io.assertOwned?.();
+            rollbackFailed = true;
+        }
+        await io.assertOwned?.();
+        await io.reportFailure(rollbackFailed, recoveryDetail);
+    }
+}
+function validateOriginal(plan, expected) {
+    const runtime = installedRuntime(installationModules(plan.installation), plan.installation.outerPackage);
+    const pkg = JSON.parse(readFileSync(join(runtime.path, 'package.json'), 'utf8'));
+    if (pkg.name !== runtime.name || pkg.version !== expected || !existsSync(join(runtime.path, 'dist/index.js')) || !existsSync(join(runtime.path, 'web/dist/index.html'))) {
+        throw new Error('promoted installation did not validate');
+    }
+    if (!existsSync(plan.installation.launchEntry))
+        throw new Error('original launch entry missing');
+    if (plan.installation.kind === 'npx') {
+        const root = JSON.parse(readFileSync(join(plan.installation.installRoot, 'package.json'), 'utf8'));
+        if (root._npx?.packages?.[0] !== plan.installation.request || root._npx.packages.length !== 1)
+            throw new Error('npx request metadata changed');
+    }
+}
+export function manualRepairCommand(installation, version) {
+    if (!/^\d+\.\d+\.\d+(?:-[0-9A-Za-z.-]+)?$/.test(version))
+        throw new Error('invalid repair version');
+    const quote = (value) => `'${value.replaceAll("'", "'\\''")}'`;
+    const prefix = installation.kind === 'global' ? installation.prefix : installation.installRoot;
+    return `npm install ${installation.kind === 'global' ? '--global ' : ''}--prefix ${quote(prefix)} ${installation.outerPackage}@${version}`;
+}
+async function writeState(plan, state, repairCommand) {
+    const current = JSON.parse(await readFile(plan.recordPath, 'utf8'));
+    const temp = `${plan.recordPath}.${process.pid}.tmp`;
+    await writeFile(temp, JSON.stringify({ ...current, state, ownerPid: undefined, claimId: undefined,
+        startedAt: undefined, repairCommand }), { mode: 0o600 });
+    await rename(temp, plan.recordPath);
+}
+function alive(pid) {
+    try {
+        process.kill(pid, 0);
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+async function waitExit(pid, timeoutMs) {
+    const until = Date.now() + timeoutMs;
+    while (alive(pid) && Date.now() < until)
+        await delay(100);
+    if (alive(pid))
+        throw new Error('old server did not exit');
+}
+export async function promoteOriginal(plan, npxLockAlreadyHeld = false, signal) {
+    const { installation } = plan;
+    const args = installation.kind === 'global'
+        ? ['install', '--global', '--prefix', installation.prefix]
+        : ['install', '--prefix', installation.installRoot];
+    args.push('--engine-strict', '--no-audit', '--no-fund', '--ignore-scripts', '--prefer-online', '--fetch-retries=1', `${installation.outerPackage}@${plan.targetVersion}`);
+    const run = async () => {
+        await runOwnedNpm(plan.npmBin, args, { ...process.env, npm_config_cache: installation.cache }, signal);
+    };
+    if (installation.kind === 'npx' && !npxLockAlreadyHeld) {
+        await withDirectoryLock(join(installation.installRoot, 'concurrency.lock'), async (assertOwned, lockSignal) => { await promoteOriginal(plan, true, lockSignal); await assertOwned(); }, 30_000);
+    }
+    else
+        await run();
+}
+function launch(plan) {
+    const args = [...plan.nodeArgs, plan.installation.launchEntry, ...plan.cliArgs,
+        '--bind-host', plan.host, '--port', String(plan.port), '--repo', plan.repoRoot, '--no-open', '--restart-exact'];
+    return spawnDetached(plan.nodeExecutable, args, { cwd: plan.cwd, env: process.env,
+        stdio: ['ignore', 'ignore', 'ignore', 'ipc'] });
+}
+async function verifyHealth(plan, expectedVersion, child, signal) {
+    // The private IPC channel belongs to this exact child. An unrelated healthy
+    // server on the port cannot send this acknowledgement.
+    await new Promise((resolve, reject) => {
+        let finished = false;
+        const timer = setTimeout(() => finish(new Error('replacement listener acknowledgement timed out')), 20_000);
+        const finish = (error) => {
+            if (finished)
+                return;
+            finished = true;
+            clearTimeout(timer);
+            child.off('message', onMessage);
+            child.off('exit', onExit);
+            child.off('error', onExit);
+            signal?.removeEventListener('abort', onAbort);
+            if (error)
+                reject(error);
+            else
+                resolve();
+        };
+        const onExit = () => finish(new Error('replacement exited before listener acknowledgement'));
+        const onAbort = () => finish(new Error('update lock ownership changed'));
+        const onMessage = (value) => {
+            const message = value;
+            if (message?.type !== 'application-update-listening')
+                return;
+            if (message.host !== plan.host || message.port !== plan.port || message.repoRoot !== plan.repoRoot || message.version !== expectedVersion) {
+                finish(new Error('replacement listener identity mismatch'));
+                return;
+            }
+            finish();
+        };
+        child.on('message', onMessage);
+        child.once('exit', onExit);
+        child.once('error', onExit);
+        signal?.addEventListener('abort', onAbort, { once: true });
+        if (signal?.aborted)
+            onAbort();
+        if (child.exitCode !== null)
+            onExit();
+    });
+    const until = Date.now() + 20_000;
+    while (Date.now() < until) {
+        if (signal?.aborted)
+            throw new Error('update lock ownership changed');
+        if (child.exitCode !== null)
+            throw new Error('replacement exited before health');
+        try {
+            const health = await requestRestartHealth(plan, signal ? AbortSignal.any([signal, AbortSignal.timeout(1000)]) : AbortSignal.timeout(1000));
+            if (health) {
+                if (health.version === expectedVersion && health.repoRoot === plan.repoRoot) {
+                    if (child.connected)
+                        child.disconnect();
+                    child.unref();
+                    return;
+                }
+                throw new Error('health identity mismatch');
+            }
+        }
+        catch (error) {
+            if (error instanceof Error && error.message === 'health identity mismatch')
+                throw error;
+        }
+        await delay(150);
+    }
+    throw new Error('replacement health timed out');
+}
+/** Stops the replacement's whole group, and what is left of it after the replacement exited. */
+async function reap(child) {
+    if (!child?.pid)
+        return;
+    if (!await stopGroup({ pid: child.pid, child }, { graceMs: 3000, killWaitMs: 3000 }))
+        throw new Error('old server did not exit');
+}
+export async function restoreOriginal(plan, assertOwned = async () => { }) {
+    const { installation } = plan;
+    await assertOwned();
+    const name = originalRuntimeName(installation);
+    const hoisted = hoistedRuntime(installation);
+    assertCanonicalPath(installation.outerRoot);
+    assertCanonicalPath(installation.packageRoot);
+    if (hoisted || plan.recoveryPackage !== undefined) {
+        // No destination list from disk: only the discovery-owned scoped sibling
+        // and one fixed private backup are allowed. Validate before removing roots.
+        if (!hoisted || plan.recoveryPackage !== join(dirname(plan.recordPath), 'recovery-package')) {
+            throw new Error('invalid hoisted package recovery');
+        }
+        assertCanonicalPath(join(realpathSync(dirname(plan.recoveryPackage)), 'recovery-package'));
+        const pkg = JSON.parse(await readFile(join(plan.recoveryPackage, 'package.json'), 'utf8'));
+        if (pkg.name !== name || pkg.version !== plan.oldVersion
+            || !existsSync(join(plan.recoveryPackage, 'dist/index.js')) || !existsSync(join(plan.recoveryPackage, 'web/dist/index.html'))) {
+            throw new Error('invalid hoisted package recovery');
+        }
+    }
+    const recovery = canonicalRecoverySlot(plan.recovery);
+    const runtimeBackup = plan.recoveryPackage ? canonicalRecoverySlot(plan.recoveryPackage) : undefined;
+    validateRecoveryLayout(installation, recovery, runtimeBackup, plan.oldVersion);
+    const scoped = scopedRecoveryTarget(installation, recovery);
+    if (scoped)
+        validateScopedRecovery(scoped.source, plan.oldVersion);
+    if (installation.kind === 'npx') {
+        // Keep the held lock in place; commit all other root entries as one recoverable batch.
+        const saved = await readdir(recovery);
+        const entries = new Set([...saved, ...await readdir(installation.installRoot)]);
+        const trees = [...entries].filter(name => name !== 'concurrency.lock').map(name => ({
+            source: saved.includes(name) ? join(recovery, name) : undefined,
+            destination: join(installation.installRoot, name),
+        }));
+        await restorePackageTrees(trees, assertOwned);
+    }
+    else {
+        const trees = [{ source: recovery, destination: installation.outerRoot }];
+        if (hoisted)
+            trees.push({ source: runtimeBackup, destination: installation.packageRoot });
+        if (scoped)
+            trees.push(scoped);
+        await restorePackageTrees(trees, assertOwned);
+        if (plan.binLinks) {
+            const outerManifest = JSON.parse(await readFile(join(recovery, 'package.json'), 'utf8'));
+            await restoreGlobalBins(installation.prefix, Object.keys(outerManifest.bin ?? {}), windowsGlobalLayout(installation.prefix, installation.outerRoot, installation.outerPackage), plan.binLinks, assertOwned);
+        }
+    }
+    await assertOwned();
+    validateOriginal(plan, plan.oldVersion);
+}
+export async function runHelper(plan, onArmed) {
+    restartHealthUrl(plan); // Reject an invalid destination before claiming or mutating the installation.
+    let replacement;
+    let transactionSignal;
+    const assertClaim = async () => {
+        const record = JSON.parse(await readFile(plan.recordPath, 'utf8'));
+        if (record?.state?.status !== 'restarting' || record.state.targetVersion !== plan.targetVersion || record.claimId !== plan.claimId) {
+            throw new Error('stale application update claim');
+        }
+    };
+    const io = {
+        waitForOldExit: () => waitExit(plan.oldPid, 20_000),
+        promote: () => promoteOriginal(plan, plan.installation.kind === 'npx', transactionSignal),
+        validateOriginal: async () => validateOriginal(plan, plan.targetVersion),
+        launch: async () => { replacement = launch(plan); },
+        verifyHealth: () => verifyHealth(plan, plan.targetVersion, replacement, transactionSignal),
+        reapReplacement: () => reap(replacement),
+        restore: () => restoreOriginal(plan, io.assertOwned),
+        launchPrevious: async () => { replacement = launch(plan); await verifyHealth(plan, plan.oldVersion, replacement, transactionSignal); },
+        reportSuccess: async () => {
+            await writeState(plan, { status: 'idle', supported: true });
+            // Keep the recovery copy until a later preparation has the lock. This
+            // avoids a crash gap between committing success and deleting recovery.
+        },
+        reportFailure: (rollbackFailed, recoveryDetail) => writeState(plan, {
+            status: 'error', supported: true, targetVersion: plan.targetVersion,
+            message: rollbackFailed ? `${RECOVERY_FAILURE_MESSAGE}${recoveryDetail ? ` ${recoveryDetail}` : ''}` : 'Update failed; previous release was restored. Retry Update.',
+        }, rollbackFailed ? manualRepairCommand(plan.installation, plan.oldVersion) : undefined),
+    };
+    await withDirectoryLock(join(dirname(plan.recordPath), 'operation.lock'), async (assertInstallationOwned, installationSignal) => {
+        const run = async (assertNpxOwned, npxSignal) => {
+            transactionSignal = npxSignal ? AbortSignal.any([installationSignal, npxSignal]) : installationSignal;
+            io.assertOwned = async () => {
+                await assertInstallationOwned();
+                await assertNpxOwned?.();
+                if (transactionSignal?.aborted)
+                    throw new Error('update lock ownership changed');
+                await assertClaim();
+            };
+            await io.assertOwned();
+            const record = JSON.parse(await readFile(plan.recordPath, 'utf8'));
+            const ownerTemp = `${plan.recordPath}.${process.pid}.owner.tmp`;
+            await writeFile(ownerTemp, JSON.stringify({ ...record, ownerPid: process.pid }), { mode: 0o600 });
+            await io.assertOwned();
+            await rename(ownerTemp, plan.recordPath);
+            await io.assertOwned();
+            onArmed?.();
+            await runRestartWorkflow(io);
+        };
+        if (plan.installation.kind === 'npx') {
+            await withDirectoryLock(join(plan.installation.installRoot, 'concurrency.lock'), run, 30_000);
+        }
+        else
+            await run();
+    }, 30_000);
+}
+if (process.send && process.argv[2] === '--application-update-helper') {
+    process.once('message', (message) => {
+        const plan = message;
+        void runHelper(plan, () => process.send?.({ type: 'armed' }, () => process.disconnect?.()))
+            .catch(() => process.exit(1));
+    });
+}
+//# sourceMappingURL=helper.js.map

package/dist/application-update/helper.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"helper.js","sourceRoot":"","sources":["../../src/application-update/helper.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,qBAAqB,EAAE,wBAAwB,EAAE,oBAAoB,EAAE,sBAAsB,EAAE,mBAAmB,EAAE,sBAAsB,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAC;AACxM,OAAO,EAAE,gBAAgB,EAAE,mBAAmB,EAAE,mBAAmB,EAAE,cAAc,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAGtI,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AACxE,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACjE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,IAAI,EAAoB,MAAM,UAAU,CAAC;AAClD,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AACvC,OAAO,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAC;AAC9C,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAC/C,OAAO,EAAE,iBAAiB,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AAC3E,OAAO,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,wBAAwB,CAAC;AAElE,MAAM,KAAK,GAAG,CAAC,EAAU,EAAE,EAAE,CAAC,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;AAyBtF,8EAA8E;AAC9E,MAAM,UAAU,eAAe,CAAC,OAAoC;IAClE,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,OAAO,CAAC,IAAI,GAAG,CAAC,IAAI,OAAO,CAAC,IAAI,GAAG,KAAK;WACrH,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,KAAK,IAAI,OAAO,CAAC,OAAO,KAAK,KAAK,CAAC,EAAE,CAAC;QAC5G,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;IAChE,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,OAAO,CAAC,OAAO,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC;AACvD,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,QAA2C;IAC1E,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,eAAe,CAAC,EAAE,OAAO,EAAE,QAAQ,CAAC,IAAI,EAAE,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC;IACpG,OAAO,UAAU,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,GAAG,CAAC,CAAC,CAAC,IAAI,IAAI,IAAI,gBAAgB,CAAC;AACnF,CAAC;AAED,qFAAqF;AACrF,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,QAA2C,EAAE,MAAmB;IACzG,MAAM,KAAK,GAAG,IAAI,KAAK,EAAE,CAAC;IAC1B,IAAI,CAAC;QACH,OAAO,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YAC3C,MAAM,OAAO,GAAG,GAAG,CAAC,gBAAgB,CAAC,QAAQ,CAAC,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,CAAC,QAAQ,EAAE,EAAE;gBAC9E,QAAQ,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;gBAC/B,IAAI,CAAC,QAAQ,CAAC,UAAU,IAAI,QAAQ,CAAC,UAAU,GAAG,GAAG,IAAI,QAAQ,CAAC,UAAU,IAAI,GAAG,EAAE,CAAC;oBACpF,QAAQ,CAAC,MAAM,EAAE,CAAC;oBAAC,OAAO,CAAC,SAAS,CAAC,CAAC;oBAAC,OAAO;gBAChD,CAAC;gBACD,IAAI,IAAI,GAAG,EAAE,CAAC;gBACd,QAAQ,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;gBAC7B,QAAQ,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE,GAAG,IAAI,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;gBAC3D,QAAQ,CAAC,IAAI,CAAC,KAAK,EAAE,GAAG,EAAE;oBACxB,IAAI,CAAC;wBAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAA4C,CAAC,CAAC;oBAAC,CAAC;oBAC7E,OAAO,KAAK,EAAE,CAAC;wBAAC,MAAM,CAAC,KAAK,CAAC,CAAC;oBAAC,CAAC;gBAClC,CAAC,CAAC,CAAC;YACL,CAAC,CAAC,CAAC;YACH,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAChC,CAAC,CAAC,CAAC;IACL,CAAC;YAAS,CAAC;QAAC,KAAK,CAAC,OAAO,EAAE,CAAC;IAAC,CAAC;AAChC,CAAC;AAgBD,4FAA4F;AAC5F,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,EAAa;IACpD,MAAM,EAAE,CAAC,cAAc,EAAE,CAAC;IAC1B,MAAM,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC;IACzB,IAAI,mBAAmB,GAAG,KAAK,CAAC;IAChC,IAAI,CAAC;QACH,MAAM,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC;QACzB,MAAM,EAAE,CAAC,OAAO,EAAE,CAAC;QACnB,MAAM,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC;QACzB,MAAM,EAAE,CAAC,gBAAgB,EAAE,CAAC;QAC5B,MAAM,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC;QACzB,MAAM,EAAE,CAAC,MAAM,EAAE,CAAC;QAClB,mBAAmB,GAAG,IAAI,CAAC;QAC3B,MAAM,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC;QACzB,MAAM,EAAE,CAAC,YAAY,EAAE,CAAC;QACxB,MAAM,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC;QACzB,MAAM,EAAE,CAAC,aAAa,EAAE,CAAC;IAC3B,CAAC;IAAC,MAAM,CAAC;QACP,IAAI,mBAAmB,EAAE,CAAC;YACxB,IAAI,CAAC;gBAAC,MAAM,EAAE,CAAC,eAAe,EAAE,CAAC;YAAC,CAAC;YACnC,MAAM,CAAC;gBACL,oEAAoE;gBACpE,gDAAgD;gBAChD,MAAM,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC;gBACzB,MAAM,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC;gBAC7B,OAAO;YACT,CAAC;QACH,CAAC;QACD,yEAAyE;QACzE,wEAAwE;QACxE,MAAM,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC;QACzB,IAAI,cAAc,GAAG,KAAK,CAAC;QAC3B,IAAI,cAAkC,CAAC;QACvC,IAAI,CAAC;YACH,MAAM,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC;YACzB,MAAM,EAAE,CAAC,OAAO,EAAE,CAAC;YACnB,MAAM,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC;YACzB,MAAM,EAAE,CAAC,cAAc,EAAE,CAAC;YAC1B,MAAM,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC;QAC3B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,oBAAoB;gBAAE,cAAc,GAAG,KAAK,CAAC,OAAO,CAAC;YAC1E,MAAM,EAAE,CAAC,eAAe,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;YAClD,MAAM,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC;YACzB,cAAc,GAAG,IAAI,CAAC;QACxB,CAAC;QACD,MAAM,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC;QACzB,MAAM,EAAE,CAAC,aAAa,CAAC,cAAc,EAAE,cAAc,CAAC,CAAC;IACzD,CAAC;AACH,CAAC;AAED,SAAS,gBAAgB,CAAC,IAAgB,EAAE,QAAgB;IAC1D,MAAM,OAAO,GAAG,gBAAgB,CAAC,mBAAmB,CAAC,IAAI,CAAC,YAAY,CAAC,EAAE,IAAI,CAAC,YAAY,CAAC,YAAY,CAAC,CAAC;IACzG,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,cAAc,CAAC,EAAE,MAAM,CAAC,CAAsE,CAAC;IACtJ,IAAI,GAAG,CAAC,IAAI,KAAK,OAAO,CAAC,IAAI,IAAI,GAAG,CAAC,OAAO,KAAK,QAAQ,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,eAAe,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,qBAAqB,CAAC,CAAC,EAAE,CAAC;QACxK,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;IAC5D,CAAC;IACD,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,YAAY,CAAC,WAAW,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;IACjG,IAAI,IAAI,CAAC,YAAY,CAAC,IAAI,KAAK,KAAK,EAAE,CAAC;QACrC,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,WAAW,EAAE,cAAc,CAAC,EAAE,MAAM,CAAC,CAAuC,CAAC;QACzI,IAAI,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,YAAY,CAAC,OAAO,IAAI,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;IACjJ,CAAC;AACH,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,YAAkG,EAAE,OAAe;IACrJ,IAAI,CAAC,qCAAqC,CAAC,IAAI,CAAC,OAAO,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;IACpG,MAAM,KAAK,GAAG,CAAC,KAAa,EAAE,EAAE,CAAC,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,EAAE,OAAO,CAAC,GAAG,CAAC;IACvE,MAAM,MAAM,GAAG,YAAY,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,YAAY,CAAC,WAAW,CAAC;IAC/F,OAAO,eAAe,YAAY,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,YAAY,KAAK,CAAC,MAAM,CAAC,IAAI,YAAY,CAAC,YAAY,IAAI,OAAO,EAAE,CAAC;AAC7I,CAAC;AAED,KAAK,UAAU,UAAU,CAAC,IAAgB,EAAE,KAAuF,EAAE,aAAsB;IACzJ,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,UAAU,EAAE,MAAM,CAAC,CAA4B,CAAC;IAC/F,MAAM,IAAI,GAAG,GAAG,IAAI,CAAC,UAAU,IAAI,OAAO,CAAC,GAAG,MAAM,CAAC;IACrD,MAAM,SAAS,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,OAAO,EAAE,SAAS;QAC/F,SAAS,EAAE,SAAS,EAAE,aAAa,EAAE,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC3D,MAAM,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;AACtC,CAAC;AAED,SAAS,KAAK,CAAC,GAAW;IACxB,IAAI,CAAC;QAAC,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QAAC,OAAO,IAAI,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,KAAK,CAAC;IAAC,CAAC;AACpE,CAAC;AAED,KAAK,UAAU,QAAQ,CAAC,GAAW,EAAE,SAAiB;IACpD,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;IACrC,OAAO,KAAK,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK;QAAE,MAAM,KAAK,CAAC,GAAG,CAAC,CAAC;IAC1D,IAAI,KAAK,CAAC,GAAG,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;AAC7D,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,IAAgB,EAAE,kBAAkB,GAAG,KAAK,EAAE,MAAoB;IACtG,MAAM,EAAE,YAAY,EAAE,GAAG,IAAI,CAAC;IAC9B,MAAM,IAAI,GAAG,YAAY,CAAC,IAAI,KAAK,QAAQ;QACzC,CAAC,CAAC,CAAC,SAAS,EAAE,UAAU,EAAE,UAAU,EAAE,YAAY,CAAC,MAAM,CAAC;QAC1D,CAAC,CAAC,CAAC,SAAS,EAAE,UAAU,EAAE,YAAY,CAAC,WAAW,CAAC,CAAC;IACtD,IAAI,CAAC,IAAI,CAAC,iBAAiB,EAAE,YAAY,EAAE,WAAW,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,mBAAmB,EAAE,GAAG,YAAY,CAAC,YAAY,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC,CAAC;IAC1K,MAAM,GAAG,GAAG,KAAK,IAAI,EAAE;QACrB,MAAM,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,gBAAgB,EAAE,YAAY,CAAC,KAAK,EAAE,EAAE,MAAM,CAAC,CAAC;IACzG,CAAC,CAAC;IACF,IAAI,YAAY,CAAC,IAAI,KAAK,KAAK,IAAI,CAAC,kBAAkB,EAAE,CAAC;QACvD,MAAM,iBAAiB,CAAC,IAAI,CAAC,YAAY,CAAC,WAAW,EAAE,kBAAkB,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,UAAU,EAAE,EAAE,GAAG,MAAM,eAAe,CAAC,IAAI,EAAE,IAAI,EAAE,UAAU,CAAC,CAAC,CAAC,MAAM,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;IAClM,CAAC;;QAAM,MAAM,GAAG,EAAE,CAAC;AACrB,CAAC;AAED,SAAS,MAAM,CAAC,IAAgB;IAC9B,MAAM,IAAI,GAAG,CAAC,GAAG,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,YAAY,CAAC,WAAW,EAAE,GAAG,IAAI,CAAC,OAAO;QAC5E,aAAa,EAAE,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,WAAW,EAAE,iBAAiB,CAAC,CAAC;IAClH,OAAO,aAAa,CAAC,IAAI,CAAC,cAAc,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG;QAC/E,KAAK,EAAE,CAAC,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,CAAC,EAAE,CAAC,CAAC;AACpD,CAAC;AAED,KAAK,UAAU,YAAY,CAAC,IAAgB,EAAE,eAAuB,EAAE,KAA+B,EAAE,MAAoB;IAC1H,4EAA4E;IAC5E,uDAAuD;IACvD,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QAC1C,IAAI,QAAQ,GAAG,KAAK,CAAC;QACrB,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;QAC5G,MAAM,MAAM,GAAG,CAAC,KAAa,EAAE,EAAE;YAC/B,IAAI,QAAQ;gBAAE,OAAO;YACrB,QAAQ,GAAG,IAAI,CAAC;YAChB,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,KAAK,CAAC,GAAG,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;YAAC,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;YAAC,KAAK,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YACvF,MAAM,EAAE,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YAC9C,IAAI,KAAK;gBAAE,MAAM,CAAC,KAAK,CAAC,CAAC;;gBAAM,OAAO,EAAE,CAAC;QAC3C,CAAC,CAAC;QACF,MAAM,MAAM,GAAG,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC,CAAC;QAC7F,MAAM,OAAO,GAAG,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC,CAAC;QACzE,MAAM,SAAS,GAAG,CAAC,KAAc,EAAE,EAAE;YACnC,MAAM,OAAO,GAAG,KAA6F,CAAC;YAC9G,IAAI,OAAO,EAAE,IAAI,KAAK,8BAA8B;gBAAE,OAAO;YAC7D,IAAI,OAAO,CAAC,IAAI,KAAK,IAAI,CAAC,IAAI,IAAI,OAAO,CAAC,IAAI,KAAK,IAAI,CAAC,IAAI,IAAI,OAAO,CAAC,QAAQ,KAAK,IAAI,CAAC,QAAQ,IAAI,OAAO,CAAC,OAAO,KAAK,eAAe,EAAE,CAAC;gBAC1I,MAAM,CAAC,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC,CAAC;gBAAC,OAAO;YACtE,CAAC;YACD,MAAM,EAAE,CAAC;QACX,CAAC,CAAC;QACF,KAAK,CAAC,EAAE,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;QAAC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAAC,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QACxF,MAAM,EAAE,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QAC3D,IAAI,MAAM,EAAE,OAAO;YAAE,OAAO,EAAE,CAAC;QAC/B,IAAI,KAAK,CAAC,QAAQ,KAAK,IAAI;YAAE,MAAM,EAAE,CAAC;IACxC,CAAC,CAAC,CAAC;IACH,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC;IAClC,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,EAAE,CAAC;QAC1B,IAAI,MAAM,EAAE,OAAO;YAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;QACtE,IAAI,KAAK,CAAC,QAAQ,KAAK,IAAI;YAAE,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;QACjF,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,oBAAoB,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;YAC3I,IAAI,MAAM,EAAE,CAAC;gBACX,IAAI,MAAM,CAAC,OAAO,KAAK,eAAe,IAAI,MAAM,CAAC,QAAQ,KAAK,IAAI,CAAC,QAAQ,EAAE,CAAC;oBAC5E,IAAI,KAAK,CAAC,SAAS;wBAAE,KAAK,CAAC,UAAU,EAAE,CAAC;oBACxC,KAAK,CAAC,KAAK,EAAE,CAAC;oBAAC,OAAO;gBACxB,CAAC;gBACD,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;YAC9C,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,KAAK,IAAI,KAAK,CAAC,OAAO,KAAK,0BAA0B;gBAAE,MAAM,KAAK,CAAC;QAC1F,CAAC;QACD,MAAM,KAAK,CAAC,GAAG,CAAC,CAAC;IACnB,CAAC;IACD,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;AAClD,CAAC;AAED,gGAAgG;AAChG,KAAK,UAAU,IAAI,CAAC,KAA2C;IAC7D,IAAI,CAAC,KAAK,EAAE,GAAG;QAAE,OAAO;IACxB,IAAI,CAAC,MAAM,SAAS,CAAC,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;AACnI,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,IAAgB,EAAE,WAAW,GAAwB,KAAK,IAAI,EAAE,GAAE,CAAC;IACvG,MAAM,EAAE,YAAY,EAAE,GAAG,IAAI,CAAC;IAC9B,MAAM,WAAW,EAAE,CAAC;IACpB,MAAM,IAAI,GAAG,mBAAmB,CAAC,YAAY,CAAC,CAAC;IAC/C,MAAM,OAAO,GAAG,cAAc,CAAC,YAAY,CAAC,CAAC;IAC7C,mBAAmB,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC;IAC5C,mBAAmB,CAAC,YAAY,CAAC,WAAW,CAAC,CAAC;IAC9C,IAAI,OAAO,IAAI,IAAI,CAAC,eAAe,KAAK,SAAS,EAAE,CAAC;QAClD,yEAAyE;QACzE,4EAA4E;QAC5E,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,eAAe,KAAK,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,kBAAkB,CAAC,EAAE,CAAC;YAC5F,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;QACtD,CAAC;QACD,mBAAmB,CAAC,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,EAAE,kBAAkB,CAAC,CAAC,CAAC;QAC3F,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,cAAc,CAAC,EAAE,MAAM,CAAC,CAAwC,CAAC;QAClI,IAAI,GAAG,CAAC,IAAI,KAAK,IAAI,IAAI,GAAG,CAAC,OAAO,KAAK,IAAI,CAAC,UAAU;eACnD,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,eAAe,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,qBAAqB,CAAC,CAAC,EAAE,CAAC;YAChI,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;QACtD,CAAC;IACH,CAAC;IACD,MAAM,QAAQ,GAAG,qBAAqB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACtD,MAAM,aAAa,GAAG,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC,qBAAqB,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACrG,sBAAsB,CAAC,YAAY,EAAE,QAAQ,EAAE,aAAa,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;IAC/E,MAAM,MAAM,GAAG,oBAAoB,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC;IAC5D,IAAI,MAAM;QAAE,sBAAsB,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;IACnE,IAAI,YAAY,CAAC,IAAI,KAAK,KAAK,EAAE,CAAC;QAChC,uFAAuF;QACvF,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,QAAQ,CAAC,CAAC;QACtC,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,KAAK,EAAE,GAAG,MAAM,OAAO,CAAC,YAAY,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC;QAChF,MAAM,KAAK,GAAG,CAAC,GAAG,OAAO,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,KAAK,kBAAkB,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YAClF,MAAM,EAAE,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS;YAC/D,WAAW,EAAE,IAAI,CAAC,YAAY,CAAC,WAAW,EAAE,IAAI,CAAC;SAClD,CAAC,CAAC,CAAC;QACJ,MAAM,mBAAmB,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;IAChD,CAAC;SAAM,CAAC;QACN,MAAM,KAAK,GAAG,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,WAAW,EAAE,YAAY,CAAC,SAAS,EAAE,CAAC,CAAC;QAC1E,IAAI,OAAO;YAAE,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,aAAc,EAAE,WAAW,EAAE,YAAY,CAAC,WAAW,EAAE,CAAC,CAAC;QAC3F,IAAI,MAAM;YAAE,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC/B,MAAM,mBAAmB,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;QAC9C,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YAClB,MAAM,aAAa,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,QAAQ,EAAE,cAAc,CAAC,EAAE,MAAM,CAAC,CAAqC,CAAC;YAC7H,MAAM,iBAAiB,CAAC,YAAY,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,GAAG,IAAI,EAAE,CAAC,EAC/E,mBAAmB,CAAC,YAAY,CAAC,MAAM,EAAE,YAAY,CAAC,SAAS,EAAE,YAAY,CAAC,YAAY,CAAC,EAAE,IAAI,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;QAC7H,CAAC;IACH,CAAC;IACD,MAAM,WAAW,EAAE,CAAC;IACpB,gBAAgB,CAAC,IAAI,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;AAC1C,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,IAAgB,EAAE,OAAoB;IACpE,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,8EAA8E;IACtG,IAAI,WAAiD,CAAC;IACtD,IAAI,iBAA0C,CAAC;IAC/C,MAAM,WAAW,GAAG,KAAK,IAAmB,EAAE;QAC5C,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,UAAU,EAAE,MAAM,CAAC,CAA8E,CAAC;QAChJ,IAAI,MAAM,EAAE,KAAK,EAAE,MAAM,KAAK,YAAY,IAAI,MAAM,CAAC,KAAK,CAAC,aAAa,KAAK,IAAI,CAAC,aAAa,IAAI,MAAM,CAAC,OAAO,KAAK,IAAI,CAAC,OAAO,EAAE,CAAC;YACnI,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;QACpD,CAAC;IACH,CAAC,CAAC;IACF,MAAM,EAAE,GAAc;QACpB,cAAc,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC;QACnD,OAAO,EAAE,GAAG,EAAE,CAAC,eAAe,CAAC,IAAI,EAAE,IAAI,CAAC,YAAY,CAAC,IAAI,KAAK,KAAK,EAAE,iBAAiB,CAAC;QACzF,gBAAgB,EAAE,KAAK,IAAI,EAAE,CAAC,gBAAgB,CAAC,IAAI,EAAE,IAAI,CAAC,aAAa,CAAC;QACxE,MAAM,EAAE,KAAK,IAAI,EAAE,GAAG,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACnD,YAAY,EAAE,GAAG,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,IAAI,CAAC,aAAa,EAAE,WAAY,EAAE,iBAAiB,CAAC;QAC3F,eAAe,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,WAAW,CAAC;QACxC,OAAO,EAAE,GAAG,EAAE,CAAC,eAAe,CAAC,IAAI,EAAE,EAAE,CAAC,WAAW,CAAC;QACpD,cAAc,EAAE,KAAK,IAAI,EAAE,GAAG,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,YAAY,CAAC,IAAI,EAAE,IAAI,CAAC,UAAU,EAAE,WAAW,EAAE,iBAAiB,CAAC,CAAC,CAAC,CAAC;QACtI,aAAa,EAAE,KAAK,IAAI,EAAE;YACxB,MAAM,UAAU,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YAC5D,sEAAsE;YACtE,uEAAuE;QACzE,CAAC;QACD,aAAa,EAAE,CAAC,cAAc,EAAE,cAAc,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,EAAE;YAClE,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,CAAC,aAAa;YACnE,OAAO,EAAE,cAAc,CAAC,CAAC,CAAC,GAAG,wBAAwB,GAAG,cAAc,CAAC,CAAC,CAAC,IAAI,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,6DAA6D;SACrK,EAAE,cAAc,CAAC,CAAC,CAAC,mBAAmB,CAAC,IAAI,CAAC,YAAY,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;KACzF,CAAC;IACF,MAAM,iBAAiB,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,gBAAgB,CAAC,EAAE,KAAK,EAAE,uBAAuB,EAAE,kBAAkB,EAAE,EAAE;QAC9H,MAAM,GAAG,GAAG,KAAK,EAAE,cAAoC,EAAE,SAAuB,EAAE,EAAE;YAClF,iBAAiB,GAAG,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,kBAAkB,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,kBAAkB,CAAC;YACtG,EAAE,CAAC,WAAW,GAAG,KAAK,IAAI,EAAE;gBAC1B,MAAM,uBAAuB,EAAE,CAAC;gBAChC,MAAM,cAAc,EAAE,EAAE,CAAC;gBACzB,IAAI,iBAAiB,EAAE,OAAO;oBAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;gBACjF,MAAM,WAAW,EAAE,CAAC;YACtB,CAAC,CAAC;YACF,MAAM,EAAE,CAAC,WAAW,EAAE,CAAC;YACvB,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,UAAU,EAAE,MAAM,CAAC,CAA4B,CAAC;YAC9F,MAAM,SAAS,GAAG,GAAG,IAAI,CAAC,UAAU,IAAI,OAAO,CAAC,GAAG,YAAY,CAAC;YAChE,MAAM,SAAS,CAAC,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,MAAM,EAAE,QAAQ,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;YAClG,MAAM,EAAE,CAAC,WAAW,EAAE,CAAC;YACvB,MAAM,MAAM,CAAC,SAAS,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;YACzC,MAAM,EAAE,CAAC,WAAW,EAAE,CAAC;YACvB,OAAO,EAAE,EAAE,CAAC;YACZ,MAAM,kBAAkB,CAAC,EAAE,CAAC,CAAC;QAC/B,CAAC,CAAC;QACF,IAAI,IAAI,CAAC,YAAY,CAAC,IAAI,KAAK,KAAK,EAAE,CAAC;YACrC,MAAM,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,WAAW,EAAE,kBAAkB,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC;QAChG,CAAC;;YAAM,MAAM,GAAG,EAAE,CAAC;IACrB,CAAC,EAAE,MAAM,CAAC,CAAC;AACb,CAAC;AAED,IAAI,OAAO,CAAC,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,6BAA6B,EAAE,CAAC;IACtE,OAAO,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC,OAAO,EAAE,EAAE;QAClC,MAAM,IAAI,GAAG,OAAqB,CAAC;QACnC,KAAK,SAAS,CAAC,IAAI,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;aACxF,KAAK,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IAClC,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/application-update/launcher.d.ts

@@ -0,0 +1,12 @@
+import type { RestartPlan } from './service.ts';
+/** Every module the copied helper loads, by its path from this directory in `dist`. Each copy
+ *  keeps that path from `helper/`, so `../detached-process.js` lands in the state directory.
+ *  `launcher.test.ts` checks the list against the helper's import closure. */
+export declare const HELPER_MODULES: readonly ['helper.js', 'runtime-layout.js', 'scoped-recovery.js', 'lock.js', 'npm-process.js', 'bin-recovery.js', '../detached-process.js', '../home/identity.js', '../home/switch.js'];
+/** Copy the helper out of the package npm will replace; pass credentials only via inherited env. */
+export declare function armRestartHelper(plan: RestartPlan, launch: {
+    repoRoot: string;
+    host: string;
+    port: number;
+    npmBin: string;
+}): Promise<number>;

package/dist/application-update/launcher.js

@@ -0,0 +1,61 @@
+import { copyFile, mkdir, writeFile } from 'node:fs/promises';
+import { dirname, join } from 'node:path';
+import { fileURLToPath } from 'node:url';
+import { spawnDetached, stopGroup } from '../detached-process.js';
+import { assertCezarHomeWriteIsSandboxed } from '../paths.js';
+/** Every module the copied helper loads, by its path from this directory in `dist`. Each copy
+ *  keeps that path from `helper/`, so `../detached-process.js` lands in the state directory.
+ *  `launcher.test.ts` checks the list against the helper's import closure. */
+export const HELPER_MODULES = ['helper.js', 'runtime-layout.js', 'scoped-recovery.js', 'lock.js', 'npm-process.js', 'bin-recovery.js', '../detached-process.js', '../home/identity.js', '../home/switch.js'];
+/** Copy the helper out of the package npm will replace; pass credentials only via inherited env. */
+export async function armRestartHelper(plan, launch) {
+    const source = dirname(fileURLToPath(import.meta.url));
+    const target = join(dirname(plan.recordPath), 'helper');
+    assertCezarHomeWriteIsSandboxed(target);
+    await mkdir(target, { recursive: true, mode: 0o700 });
+    for (const module of HELPER_MODULES) {
+        await mkdir(dirname(join(target, module)), { recursive: true, mode: 0o700 });
+        await copyFile(join(source, module), join(target, module));
+    }
+    // Every directory a copy lands in gets the marker that makes its modules ES modules.
+    for (const dir of new Set(HELPER_MODULES.map((module) => dirname(join(target, module))))) {
+        await writeFile(join(dir, 'package.json'), '{"type":"module"}', { mode: 0o600 });
+    }
+    const child = spawnDetached(process.execPath, [join(target, 'helper.js'), '--application-update-helper'], {
+        cwd: process.cwd(), env: process.env, stdio: ['ignore', 'ignore', 'ignore', 'ipc'],
+    });
+    const pid = child.pid;
+    if (!pid)
+        throw new Error('restart helper did not start');
+    const message = {
+        ...plan, oldPid: process.pid, nodeExecutable: process.execPath, nodeArgs: process.execArgv,
+        cliArgs: process.argv.slice(2), cwd: process.cwd(), repoRoot: launch.repoRoot,
+        host: launch.host, port: launch.port, npmBin: launch.npmBin,
+    };
+    await new Promise((resolve, reject) => {
+        let settled = false;
+        const fail = (error) => {
+            if (settled)
+                return;
+            settled = true;
+            clearTimeout(timer);
+            // The helper and whatever it forked go before the reject, so a retry never meets them.
+            void stopGroup({ pid, child }, { graceMs: 3_000, killWaitMs: 3_000 }).catch(() => false).then(() => reject(error));
+        };
+        const timer = setTimeout(() => fail(new Error('restart helper did not acknowledge')), 35_000);
+        child.once('error', (error) => fail(error));
+        child.once('exit', () => fail(new Error('restart helper exited before acknowledgement')));
+        child.on('message', (response) => {
+            if (response?.type !== 'armed' || settled)
+                return;
+            settled = true;
+            clearTimeout(timer);
+            child.unref();
+            resolve();
+        });
+        child.send(message, (error) => { if (error)
+            fail(error); });
+    });
+    return pid;
+}
+//# sourceMappingURL=launcher.js.map

package/dist/application-update/launcher.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"launcher.js","sourceRoot":"","sources":["../../src/application-update/launcher.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC9D,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,wBAAwB,CAAC;AAClE,OAAO,EAAE,+BAA+B,EAAE,MAAM,aAAa,CAAC;AAI9D;;8EAE8E;AAC9E,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,WAAW,EAAE,mBAAmB,EAAE,oBAAoB,EAAE,SAAS,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,wBAAwB,EAAE,qBAAqB,EAAE,mBAAmB,CAAU,CAAC;AAEtN,oGAAoG;AACpG,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,IAAiB,EAAE,MAEzD;IACC,MAAM,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IACvD,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,QAAQ,CAAC,CAAC;IACxD,+BAA+B,CAAC,MAAM,CAAC,CAAC;IACxC,MAAM,KAAK,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACtD,KAAK,MAAM,MAAM,IAAI,cAAc,EAAE,CAAC;QACpC,MAAM,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAC7E,MAAM,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IAC7D,CAAC;IACD,qFAAqF;IACrF,KAAK,MAAM,GAAG,IAAI,IAAI,GAAG,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACzF,MAAM,SAAS,CAAC,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC,EAAE,mBAAmB,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACnF,CAAC;IACD,MAAM,KAAK,GAAG,aAAa,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,IAAI,CAAC,MAAM,EAAE,WAAW,CAAC,EAAE,6BAA6B,CAAC,EAAE;QACxG,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,KAAK,EAAE,CAAC,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,CAAC;KACnF,CAAC,CAAC;IACH,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,CAAC;IACtB,IAAI,CAAC,GAAG;QAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;IAC1D,MAAM,OAAO,GAAe;QAC1B,GAAG,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,GAAG,EAAE,cAAc,EAAE,OAAO,CAAC,QAAQ,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1F,OAAO,EAAE,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ;QAC7E,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM;KAC5D,CAAC;IACF,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QAC1C,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,MAAM,IAAI,GAAG,CAAC,KAAY,EAAE,EAAE;YAC5B,IAAI,OAAO;gBAAE,OAAO;YACpB,OAAO,GAAG,IAAI,CAAC;YAAC,YAAY,CAAC,KAAK,CAAC,CAAC;YACpC,uFAAuF;YACvF,KAAK,SAAS,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QACrH,CAAC,CAAC;QACF,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;QAC9F,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;QAC5C,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC,CAAC,CAAC;QAC1F,KAAK,CAAC,EAAE,CAAC,SAAS,EAAE,CAAC,QAAQ,EAAE,EAAE;YAC/B,IAAK,QAA8B,EAAE,IAAI,KAAK,OAAO,IAAI,OAAO;gBAAE,OAAO;YACzE,OAAO,GAAG,IAAI,CAAC;YAAC,YAAY,CAAC,KAAK,CAAC,CAAC;YAAC,KAAK,CAAC,KAAK,EAAE,CAAC;YAAC,OAAO,EAAE,CAAC;QAChE,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE,GAAG,IAAI,KAAK;YAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC9D,CAAC,CAAC,CAAC;IACH,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/application-update/lock.d.ts

@@ -0,0 +1,4 @@
+export declare class LockBusyError extends Error {
+}
+/** npm libnpmexec's concurrency.lock protocol: mkdir, 1s heartbeat, 60s stale mtime. */
+export declare function withDirectoryLock<T>(path: string, operation: (assertOwned: () => Promise<void>, signal: AbortSignal) => Promise<T>, waitMs?: number): Promise<T>;

package/dist/application-update/lock.js

@@ -0,0 +1,70 @@
+import { mkdir, rmdir, stat, utimes } from 'node:fs/promises';
+const sleep = (ms) => new Promise((resolve) => setTimeout(resolve, ms));
+export class LockBusyError extends Error {
+}
+/** npm libnpmexec's concurrency.lock protocol: mkdir, 1s heartbeat, 60s stale mtime. */
+export async function withDirectoryLock(path, operation, waitMs = 15_000) {
+    const started = Date.now();
+    while (true) {
+        if (Date.now() - started > waitMs)
+            throw new LockBusyError('update lock is busy; retry shortly');
+        try {
+            await mkdir(path);
+            break;
+        }
+        catch (error) {
+            if (error.code !== 'EEXIST')
+                throw error;
+            const current = await stat(path).catch(() => undefined);
+            if (current && Date.now() - current.mtimeMs > 60_000) {
+                await rmdir(path).catch(() => undefined);
+            }
+            if (Date.now() - started > waitMs)
+                throw new LockBusyError('update lock is busy; retry shortly');
+            await sleep(Math.min(100, Math.max(1, waitMs - (Date.now() - started))));
+        }
+    }
+    const acquired = await stat(path);
+    const controller = new AbortController();
+    let expectedMtime = Math.round(acquired.mtimeMs / 1000);
+    let compromised = false;
+    const rawCheck = async () => {
+        if (compromised)
+            throw new Error('update lock ownership changed');
+        const current = await stat(path).catch(() => undefined);
+        if (!current || current.ino !== acquired.ino || Math.round(current.mtimeMs / 1000) !== expectedMtime) {
+            compromised = true;
+            controller.abort();
+            throw new Error('update lock ownership changed');
+        }
+    };
+    let heartbeat = Promise.resolve();
+    const assertOwned = async () => { await heartbeat; await rawCheck(); };
+    const timer = setInterval(() => {
+        heartbeat = heartbeat.then(async () => {
+            try {
+                await rawCheck();
+                const next = Math.round(Date.now() / 1000);
+                await utimes(path, next, next);
+                expectedMtime = next;
+            }
+            catch {
+                compromised = true;
+                controller.abort();
+            }
+        });
+    }, 1000);
+    timer.unref?.();
+    try {
+        const result = await operation(assertOwned, controller.signal);
+        await assertOwned();
+        return result;
+    }
+    finally {
+        clearInterval(timer);
+        await heartbeat;
+        if (!compromised)
+            await rmdir(path).catch(() => undefined);
+    }
+}
+//# sourceMappingURL=lock.js.map

package/dist/application-update/lock.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"lock.js","sourceRoot":"","sources":["../../src/application-update/lock.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAE9D,MAAM,KAAK,GAAG,CAAC,EAAU,EAAE,EAAE,CAAC,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;AACtF,MAAM,OAAO,aAAc,SAAQ,KAAK;CAAG;AAE3C,wFAAwF;AACxF,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAI,IAAY,EAAE,SAAgF,EAAE,MAAM,GAAG,MAAM;IACxJ,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC3B,OAAO,IAAI,EAAE,CAAC;QACZ,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,GAAG,MAAM;YAAE,MAAM,IAAI,aAAa,CAAC,oCAAoC,CAAC,CAAC;QACjG,IAAI,CAAC;YAAC,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC;YAAC,MAAM;QAAC,CAAC;QACjC,OAAO,KAAK,EAAE,CAAC;YACb,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;gBAAE,MAAM,KAAK,CAAC;YACpE,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;YACxD,IAAI,OAAO,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC,OAAO,GAAG,MAAM,EAAE,CAAC;gBACrD,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;YAC3C,CAAC;YACD,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,GAAG,MAAM;gBAAE,MAAM,IAAI,aAAa,CAAC,oCAAoC,CAAC,CAAC;YACjG,MAAM,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;QAC3E,CAAC;IACH,CAAC;IACD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,CAAC;IAClC,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;IACzC,IAAI,aAAa,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,OAAO,GAAG,IAAI,CAAC,CAAC;IACxD,IAAI,WAAW,GAAG,KAAK,CAAC;IACxB,MAAM,QAAQ,GAAG,KAAK,IAAI,EAAE;QAC1B,IAAI,WAAW;YAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;QAClE,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QACxD,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,GAAG,KAAK,QAAQ,CAAC,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC,KAAK,aAAa,EAAE,CAAC;YACrG,WAAW,GAAG,IAAI,CAAC;YACnB,UAAU,CAAC,KAAK,EAAE,CAAC;YACnB,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;QACnD,CAAC;IACH,CAAC,CAAC;IACF,IAAI,SAAS,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC;IAClC,MAAM,WAAW,GAAG,KAAK,IAAI,EAAE,GAAG,MAAM,SAAS,CAAC,CAAC,MAAM,QAAQ,EAAE,CAAC,CAAC,CAAC,CAAC;IACvE,MAAM,KAAK,GAAG,WAAW,CAAC,GAAG,EAAE;QAC7B,SAAS,GAAG,SAAS,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE;YACpC,IAAI,CAAC;gBACH,MAAM,QAAQ,EAAE,CAAC;gBACjB,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;gBAC3C,MAAM,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;gBAC/B,aAAa,GAAG,IAAI,CAAC;YACvB,CAAC;YAAC,MAAM,CAAC;gBAAC,WAAW,GAAG,IAAI,CAAC;gBAAC,UAAU,CAAC,KAAK,EAAE,CAAC;YAAC,CAAC;QACrD,CAAC,CAAC,CAAC;IACL,CAAC,EAAE,IAAI,CAAC,CAAC;IACT,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC;IAChB,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,WAAW,EAAE,UAAU,CAAC,MAAM,CAAC,CAAC;QAC/D,MAAM,WAAW,EAAE,CAAC;QACpB,OAAO,MAAM,CAAC;IAChB,CAAC;YAAS,CAAC;QACT,aAAa,CAAC,KAAK,CAAC,CAAC;QACrB,MAAM,SAAS,CAAC;QAChB,IAAI,CAAC,WAAW;YAAE,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IAC7D,CAAC;AACH,CAAC"}

package/dist/application-update/npm-process.d.ts

@@ -0,0 +1,17 @@
+export interface NpmInvocation {
+    command: string;
+    args: string[];
+}
+export declare function resolveNpmInvocation(command?: string, options?: {
+    nodeExecutable?: string;
+    platform?: NodeJS.Platform;
+    searchPath?: string;
+}): NpmInvocation;
+/** Discovery and both mutating phases use the exact same shell-free invocation. */
+export declare function readNpmConfiguration(command?: string): {
+    npmBin: string;
+    prefix: string;
+    cache: string;
+} | undefined;
+/** A lock abort is complete only after the npm process has actually exited. */
+export declare function runOwnedNpm(command: string, args: string[], env: NodeJS.ProcessEnv, signal?: AbortSignal): Promise<void>;