@hearsay-tools/squawk 0.0.0-stage → 0.17.0-pr3058.5683

package/dist/application-update/npm-process.js

@@ -0,0 +1,156 @@
+import { execFileSync, spawn } from 'node:child_process';
+import { readFileSync, realpathSync, statSync } from 'node:fs';
+import { basename, dirname, isAbsolute, join, delimiter } from 'node:path';
+/** Only npm's declared CLI, reached through the Node toolchain or a canonical npm shim. */
+function verifiedCli(candidate) {
+    try {
+        const cli = realpathSync(candidate);
+        if (basename(cli) !== 'npm-cli.js' || basename(dirname(cli)) !== 'bin' || !statSync(cli).isFile())
+            return;
+        const root = dirname(dirname(cli));
+        const manifest = JSON.parse(readFileSync(join(root, 'package.json'), 'utf8'));
+        if (manifest.name === 'npm' && manifest.bin?.npm === 'bin/npm-cli.js')
+            return cli;
+    }
+    catch { /* Missing or unreadable npm means manual updates, never a boot failure. */ }
+    return undefined;
+}
+function invokeNpmCli(node, cli) {
+    return { command: node, args: [cli] };
+}
+function requireVerifiedCli(command, node) {
+    const cli = verifiedCli(command);
+    if (!cli)
+        throw new Error('npm CLI could not be verified');
+    return invokeNpmCli(node, cli);
+}
+function explicitNpmCommand(command) {
+    // Explicit executables are used by embedders and isolated lifecycle fixtures.
+    // A Windows command script is never sent to spawn/execFile as an executable.
+    if (['npm', 'npm.cmd'].includes(basename(command).toLowerCase()))
+        return undefined;
+    if (/\.(cmd|bat)$/i.test(command))
+        throw new Error('npm command script is unsupported');
+    return { command, args: [] };
+}
+function nodeToolchainCli(node, platform, command) {
+    if (isAbsolute(command))
+        return undefined;
+    const nodeDir = dirname(realpathSync(node));
+    return verifiedCli(platform === 'win32'
+        ? join(nodeDir, 'node_modules/npm/bin/npm-cli.js')
+        : join(nodeDir, '../lib/node_modules/npm/bin/npm-cli.js'));
+}
+function npmShimCandidates(command, platform, searchPath) {
+    return isAbsolute(command) ? [command] : searchPath.split(platform === 'win32' ? ';' : delimiter)
+        .map(part => part.replace(/^"(.*)"$/, '$1')).filter(isAbsolute)
+        .map(part => join(part, platform === 'win32' ? 'npm.cmd' : 'npm'));
+}
+function verifiedWindowsShimCli(shim, platform) {
+    if (platform !== 'win32' && !/\.cmd$/i.test(shim))
+        return undefined;
+    const cli = verifiedCli(join(dirname(shim), 'node_modules/npm/bin/npm-cli.js'));
+    if (!cli)
+        return undefined;
+    try {
+        const content = readFileSync(shim, 'utf8');
+        // npm ships its installer shim; npm install -g npm emits cmd-shim's
+        // equivalent. Only their fixed adjacent CLI target is recognized.
+        const vendor = readFileSync(join(dirname(cli), 'npm.cmd'), 'utf8');
+        if (content === vendor)
+            return cli;
+    }
+    catch { /* Fall through to the generated shim's fixed target. */ }
+    try {
+        const content = readFileSync(shim, 'utf8');
+        if (content.includes('SET dp0=%~dp0') && content.includes('"%dp0%\\node_modules\\npm\\bin\\npm-cli.js"'))
+            return cli;
+    }
+    catch { /* Keep looking; never execute an unrecognized wrapper. */ }
+    return undefined;
+}
+function resolveNpmFromPath(command, node, platform, searchPath) {
+    for (const shim of npmShimCandidates(command, platform, searchPath)) {
+        const linked = verifiedCli(shim);
+        if (linked)
+            return invokeNpmCli(node, linked);
+        const cli = verifiedWindowsShimCli(shim, platform);
+        if (cli)
+            return invokeNpmCli(node, cli);
+    }
+    throw new Error('npm CLI could not be verified');
+}
+export function resolveNpmInvocation(command = 'npm', options = {}) {
+    const node = options.nodeExecutable ?? process.execPath;
+    const platform = options.platform ?? process.platform;
+    if (basename(command) === 'npm-cli.js')
+        return requireVerifiedCli(command, node);
+    const explicit = explicitNpmCommand(command);
+    if (explicit)
+        return explicit;
+    const toolchain = nodeToolchainCli(node, platform, command);
+    if (toolchain)
+        return invokeNpmCli(node, toolchain);
+    const searchPath = options.searchPath ?? process.env[Object.keys(process.env).find(key => key.toLowerCase() === 'path') ?? 'PATH'] ?? '';
+    return resolveNpmFromPath(command, node, platform, searchPath);
+}
+/** Discovery and both mutating phases use the exact same shell-free invocation. */
+export function readNpmConfiguration(command = 'npm') {
+    try {
+        const invocation = resolveNpmInvocation(command);
+        const value = (args) => execFileSync(invocation.command, [...invocation.args, ...args], {
+            encoding: 'utf8', timeout: 5000, stdio: ['ignore', 'pipe', 'ignore'], shell: false,
+        }).trim();
+        const prefix = value(['prefix', '-g']);
+        const cache = value(['config', 'get', 'cache']);
+        return prefix && cache ? { npmBin: invocation.args[0] ?? invocation.command, prefix, cache } : undefined;
+    }
+    catch {
+        return undefined;
+    }
+}
+/** A lock abort is complete only after the npm process has actually exited. */
+export async function runOwnedNpm(command, args, env, signal) {
+    if (signal?.aborted)
+        throw new Error('update lock ownership changed');
+    const invocation = resolveNpmInvocation(command);
+    const child = spawn(invocation.command, [...invocation.args, ...args], { env, stdio: 'ignore', shell: false });
+    await new Promise((resolve, reject) => {
+        let cancelled = false;
+        let timedOut = false;
+        let spawnError;
+        let escalation;
+        const cancel = () => {
+            if (cancelled)
+                return;
+            cancelled = true;
+            child.kill('SIGTERM');
+            escalation = setTimeout(() => child.kill('SIGKILL'), 2_000);
+        };
+        const deadline = setTimeout(() => { timedOut = true; cancel(); }, 120_000);
+        const onAbort = () => cancel();
+        signal?.addEventListener('abort', onAbort, { once: true });
+        if (signal?.aborted)
+            cancel();
+        child.once('error', (error) => { spawnError = error; });
+        child.once('close', (code) => {
+            clearTimeout(deadline);
+            if (escalation)
+                clearTimeout(escalation);
+            signal?.removeEventListener('abort', onAbort);
+            if (signal?.aborted)
+                reject(new Error('update lock ownership changed'));
+            else if (spawnError)
+                reject(new Error('npm could not start'));
+            else if (timedOut)
+                reject(new Error('npm operation timed out'));
+            else if (cancelled)
+                reject(new Error('npm operation cancelled'));
+            else if (code !== 0)
+                reject(new Error('npm operation failed'));
+            else
+                resolve();
+        });
+    });
+}
+//# sourceMappingURL=npm-process.js.map

package/dist/application-update/npm-process.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"npm-process.js","sourceRoot":"","sources":["../../src/application-update/npm-process.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AACzD,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAC/D,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAE3E,2FAA2F;AAC3F,SAAS,WAAW,CAAC,SAAiB;IACpC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,YAAY,CAAC,SAAS,CAAC,CAAC;QACpC,IAAI,QAAQ,CAAC,GAAG,CAAC,KAAK,YAAY,IAAI,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,KAAK,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE;YAAE,OAAO;QAC1G,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC;QACnC,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE,cAAc,CAAC,EAAE,MAAM,CAAC,CAA8C,CAAC;QAC3H,IAAI,QAAQ,CAAC,IAAI,KAAK,KAAK,IAAI,QAAQ,CAAC,GAAG,EAAE,GAAG,KAAK,gBAAgB;YAAE,OAAO,GAAG,CAAC;IACpF,CAAC;IAAC,MAAM,CAAC,CAAC,2EAA2E,CAAC,CAAC;IACvF,OAAO,SAAS,CAAC;AACnB,CAAC;AAID,SAAS,YAAY,CAAC,IAAY,EAAE,GAAW;IAC7C,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC;AACxC,CAAC;AAED,SAAS,kBAAkB,CAAC,OAAe,EAAE,IAAY;IACvD,MAAM,GAAG,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC;IACjC,IAAI,CAAC,GAAG;QAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;IAC3D,OAAO,YAAY,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;AACjC,CAAC;AAED,SAAS,kBAAkB,CAAC,OAAe;IACzC,8EAA8E;IAC9E,6EAA6E;IAC7E,IAAI,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,WAAW,EAAE,CAAC;QAAE,OAAO,SAAS,CAAC;IACnF,IAAI,eAAe,CAAC,IAAI,CAAC,OAAO,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;IACxF,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;AAC/B,CAAC;AAED,SAAS,gBAAgB,CAAC,IAAY,EAAE,QAAyB,EAAE,OAAe;IAChF,IAAI,UAAU,CAAC,OAAO,CAAC;QAAE,OAAO,SAAS,CAAC;IAC1C,MAAM,OAAO,GAAG,OAAO,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC;IAC5C,OAAO,WAAW,CAAC,QAAQ,KAAK,OAAO;QACrC,CAAC,CAAC,IAAI,CAAC,OAAO,EAAE,iCAAiC,CAAC;QAClD,CAAC,CAAC,IAAI,CAAC,OAAO,EAAE,wCAAwC,CAAC,CAAC,CAAC;AAC/D,CAAC;AAED,SAAS,iBAAiB,CAAC,OAAe,EAAE,QAAyB,EAAE,UAAkB;IACvF,OAAO,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;SAC9F,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC;SAC9D,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;AACvE,CAAC;AAED,SAAS,sBAAsB,CAAC,IAAY,EAAE,QAAyB;IACrE,IAAI,QAAQ,KAAK,OAAO,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,SAAS,CAAC;IACpE,MAAM,GAAG,GAAG,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,iCAAiC,CAAC,CAAC,CAAC;IAChF,IAAI,CAAC,GAAG;QAAE,OAAO,SAAS,CAAC;IAC3B,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QAC3C,oEAAoE;QACpE,kEAAkE;QAClE,MAAM,MAAM,GAAG,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,SAAS,CAAC,EAAE,MAAM,CAAC,CAAC;QACnE,IAAI,OAAO,KAAK,MAAM;YAAE,OAAO,GAAG,CAAC;IACrC,CAAC;IAAC,MAAM,CAAC,CAAC,wDAAwD,CAAC,CAAC;IACpE,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QAC3C,IAAI,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,6CAA6C,CAAC;YAAE,OAAO,GAAG,CAAC;IACvH,CAAC;IAAC,MAAM,CAAC,CAAC,0DAA0D,CAAC,CAAC;IACtE,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,kBAAkB,CAAC,OAAe,EAAE,IAAY,EAAE,QAAyB,EAAE,UAAkB;IACtG,KAAK,MAAM,IAAI,IAAI,iBAAiB,CAAC,OAAO,EAAE,QAAQ,EAAE,UAAU,CAAC,EAAE,CAAC;QACpE,MAAM,MAAM,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;QACjC,IAAI,MAAM;YAAE,OAAO,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QAC9C,MAAM,GAAG,GAAG,sBAAsB,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;QACnD,IAAI,GAAG;YAAE,OAAO,YAAY,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IAC1C,CAAC;IACD,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;AACnD,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,OAAO,GAAG,KAAK,EAAE,OAAO,GAEzD,EAAE;IACJ,MAAM,IAAI,GAAG,OAAO,CAAC,cAAc,IAAI,OAAO,CAAC,QAAQ,CAAC;IACxD,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,OAAO,CAAC,QAAQ,CAAC;IACtD,IAAI,QAAQ,CAAC,OAAO,CAAC,KAAK,YAAY;QAAE,OAAO,kBAAkB,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IACjF,MAAM,QAAQ,GAAG,kBAAkB,CAAC,OAAO,CAAC,CAAC;IAC7C,IAAI,QAAQ;QAAE,OAAO,QAAQ,CAAC;IAC9B,MAAM,SAAS,GAAG,gBAAgB,CAAC,IAAI,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;IAC5D,IAAI,SAAS;QAAE,OAAO,YAAY,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;IACpD,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,WAAW,EAAE,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC;IACzI,OAAO,kBAAkB,CAAC,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,CAAC,CAAC;AACjE,CAAC;AAED,mFAAmF;AACnF,MAAM,UAAU,oBAAoB,CAAC,OAAO,GAAG,KAAK;IAClD,IAAI,CAAC;QACH,MAAM,UAAU,GAAG,oBAAoB,CAAC,OAAO,CAAC,CAAC;QACjD,MAAM,KAAK,GAAG,CAAC,IAAc,EAAE,EAAE,CAAC,YAAY,CAAC,UAAU,CAAC,OAAO,EAAE,CAAC,GAAG,UAAU,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,EAAE;YAChG,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,KAAK,EAAE,KAAK;SACnF,CAAC,CAAC,IAAI,EAAE,CAAC;QACV,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC;QACvC,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,QAAQ,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC;QAChD,OAAO,MAAM,IAAI,KAAK,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,UAAU,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;IAC3G,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,SAAS,CAAC;IAAC,CAAC;AAC/B,CAAC;AAED,+EAA+E;AAC/E,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,OAAe,EAAE,IAAc,EAAE,GAAsB,EAAE,MAAoB;IAC7G,IAAI,MAAM,EAAE,OAAO;QAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;IACtE,MAAM,UAAU,GAAG,oBAAoB,CAAC,OAAO,CAAC,CAAC;IACjD,MAAM,KAAK,GAAG,KAAK,CAAC,UAAU,CAAC,OAAO,EAAE,CAAC,GAAG,UAAU,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;IAC/G,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QAC1C,IAAI,SAAS,GAAG,KAAK,CAAC;QACtB,IAAI,QAAQ,GAAG,KAAK,CAAC;QACrB,IAAI,UAA6B,CAAC;QAClC,IAAI,UAAqD,CAAC;QAC1D,MAAM,MAAM,GAAG,GAAG,EAAE;YAClB,IAAI,SAAS;gBAAE,OAAO;YACtB,SAAS,GAAG,IAAI,CAAC;YACjB,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YACtB,UAAU,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,CAAC,CAAC;QAC9D,CAAC,CAAC;QACF,MAAM,QAAQ,GAAG,UAAU,CAAC,GAAG,EAAE,GAAG,QAAQ,GAAG,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;QAC3E,MAAM,OAAO,GAAG,GAAG,EAAE,CAAC,MAAM,EAAE,CAAC;QAC/B,MAAM,EAAE,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QAC3D,IAAI,MAAM,EAAE,OAAO;YAAE,MAAM,EAAE,CAAC;QAC9B,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE,GAAG,UAAU,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QACxD,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE;YAC3B,YAAY,CAAC,QAAQ,CAAC,CAAC;YACvB,IAAI,UAAU;gBAAE,YAAY,CAAC,UAAU,CAAC,CAAC;YACzC,MAAM,EAAE,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YAC9C,IAAI,MAAM,EAAE,OAAO;gBAAE,MAAM,CAAC,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC,CAAC;iBACnE,IAAI,UAAU;gBAAE,MAAM,CAAC,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAC,CAAC;iBACzD,IAAI,QAAQ;gBAAE,MAAM,CAAC,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC,CAAC;iBAC3D,IAAI,SAAS;gBAAE,MAAM,CAAC,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC,CAAC;iBAC5D,IAAI,IAAI,KAAK,CAAC;gBAAE,MAAM,CAAC,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC,CAAC;;gBAC1D,OAAO,EAAE,CAAC;QACjB,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/application-update/runtime-layout.d.ts

@@ -0,0 +1,20 @@
+import { type NpmLaunchPackage } from '../home/identity.js';
+type OuterInstallation = {
+    kind: 'global' | 'npx';
+    installRoot: string;
+    outerRoot: string;
+    outerPackage: NpmLaunchPackage;
+    packageRoot: string;
+};
+export declare function installationModules(installation: Pick<OuterInstallation, 'outerRoot' | 'outerPackage'>): string;
+/** Reject symlink escapes even when npm has removed the destination during a failed install. */
+export declare function assertCanonicalPath(path: string): void;
+/** Validate target shape independently of the running build's switch. Current-install discovery owns name gating. */
+export declare function installedRuntime(modules: string, outerPackage: NpmLaunchPackage): {
+    path: string;
+    name: string;
+};
+/** Original runtime identity comes from discovery-owned paths, not mutable promotion metadata. */
+export declare function originalRuntimeName(installation: OuterInstallation): string;
+export declare function hoistedRuntime(installation: OuterInstallation): boolean;
+export {};

package/dist/application-update/runtime-layout.js

@@ -0,0 +1,91 @@
+import { existsSync, lstatSync, readFileSync, realpathSync } from 'node:fs';
+import { dirname, join, resolve } from 'node:path';
+import { npmPackageIdentity, productIdentity } from '../home/identity.js';
+const manifest = (path) => JSON.parse(readFileSync(join(path, 'package.json'), 'utf8'));
+export function installationModules(installation) {
+    return resolve(installation.outerRoot, ...installation.outerPackage.split('/').map(() => '..'));
+}
+/** Reject symlink escapes even when npm has removed the destination during a failed install. */
+export function assertCanonicalPath(path) {
+    let cursor = path;
+    while (!existsSync(cursor)) {
+        try {
+            if (lstatSync(cursor).isSymbolicLink())
+                throw new Error('unowned package path');
+        }
+        catch (error) {
+            if (error.code !== 'ENOENT')
+                throw error;
+        }
+        const parent = dirname(cursor);
+        if (parent === cursor)
+            throw new Error('unowned package path');
+        cursor = parent;
+    }
+    if (realpathSync(cursor) !== cursor)
+        throw new Error('unowned package path');
+}
+function dependencyPath(modules, outer, name) {
+    const nested = join(outer, 'node_modules', name);
+    const path = existsSync(nested) ? nested : join(modules, name);
+    assertCanonicalPath(path);
+    return path;
+}
+/** Shipped alias updaters still locate and validate this scoped forwarding wrapper. */
+function validateLegacyScoped(modules, outer, pkg) {
+    const old = productIdentity(false), active = productIdentity(true);
+    if (pkg.dependencies?.[old.npmPackage] !== pkg.version)
+        throw new Error('invalid legacy scoped pin');
+    const scopedPath = dependencyPath(modules, outer, old.npmPackage);
+    const scoped = manifest(scopedPath);
+    if (scoped.name !== old.npmPackage || scoped.version !== pkg.version
+        || scoped.dependencies?.[active.npmPackage] !== pkg.version)
+        throw new Error('legacy scoped identity mismatch');
+    const candidates = [join(scopedPath, 'node_modules', active.npmPackage), join(outer, 'node_modules', active.npmPackage), join(modules, active.npmPackage)];
+    const runtimePath = candidates.find(path => existsSync(path)) ?? candidates[2];
+    assertCanonicalPath(runtimePath);
+    const runtime = manifest(runtimePath);
+    if (runtime.name !== active.npmPackage || runtime.version !== pkg.version)
+        throw new Error('legacy scoped runtime mismatch');
+}
+/** Validate target shape independently of the running build's switch. Current-install discovery owns name gating. */
+export function installedRuntime(modules, outerPackage) {
+    const identity = npmPackageIdentity(outerPackage);
+    const outer = join(modules, outerPackage);
+    assertCanonicalPath(outer);
+    const pkg = manifest(outer);
+    if (pkg.name !== outerPackage)
+        throw new Error('outer package identity mismatch');
+    const active = productIdentity(true);
+    const forwarding = !identity.rebrand && pkg.dependencies?.[active.npmPackage] !== undefined;
+    if (forwarding && pkg.dependencies[active.npmPackage] !== pkg.version)
+        throw new Error('invalid forwarding pin');
+    if (forwarding && outerPackage === productIdentity(false).npmAlias)
+        validateLegacyScoped(modules, outer, pkg);
+    const name = forwarding ? active.npmPackage : identity.npmPackage;
+    if (outerPackage === name)
+        return { path: outer, name };
+    if (typeof pkg.dependencies?.[name] !== 'string')
+        throw new Error('outer package has no runtime dependency');
+    const path = dependencyPath(modules, outer, name);
+    const runtime = manifest(path);
+    if (runtime.name !== name || (forwarding && runtime.version !== pkg.version))
+        throw new Error('runtime identity mismatch');
+    return { path, name };
+}
+/** Original runtime identity comes from discovery-owned paths, not mutable promotion metadata. */
+export function originalRuntimeName(installation) {
+    const identity = npmPackageIdentity(installation.outerPackage);
+    const names = [identity.npmPackage, productIdentity(true).npmPackage];
+    const modules = installationModules(installation);
+    const name = names.find(name => installation.packageRoot === join(modules, name)
+        || installation.packageRoot === join(installation.outerRoot, 'node_modules', name));
+    if (!name)
+        throw new Error('unowned runtime path');
+    return name;
+}
+export function hoistedRuntime(installation) {
+    return installation.kind === 'global' && installation.packageRoot !== installation.outerRoot
+        && installation.packageRoot === join(installationModules(installation), originalRuntimeName(installation));
+}
+//# sourceMappingURL=runtime-layout.js.map

package/dist/application-update/runtime-layout.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime-layout.js","sourceRoot":"","sources":["../../src/application-update/runtime-layout.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAC5E,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACnD,OAAO,EAAE,kBAAkB,EAAE,eAAe,EAAyB,MAAM,qBAAqB,CAAC;AAIjG,MAAM,QAAQ,GAAG,CAAC,IAAY,EAAmB,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE,cAAc,CAAC,EAAE,MAAM,CAAC,CAAoB,CAAC;AAEpI,MAAM,UAAU,mBAAmB,CAAC,YAAmE;IACrG,OAAO,OAAO,CAAC,YAAY,CAAC,SAAS,EAAE,GAAG,YAAY,CAAC,YAAY,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC;AAClG,CAAC;AAED,gGAAgG;AAChG,MAAM,UAAU,mBAAmB,CAAC,IAAY;IAC9C,IAAI,MAAM,GAAG,IAAI,CAAC;IAClB,OAAO,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;QAC3B,IAAI,CAAC;YAAC,IAAI,SAAS,CAAC,MAAM,CAAC,CAAC,cAAc,EAAE;gBAAE,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;QAAC,CAAC;QACxF,OAAO,KAAK,EAAE,CAAC;YAAC,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;gBAAE,MAAM,KAAK,CAAC;QAAC,CAAC;QACtF,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;QAC/B,IAAI,MAAM,KAAK,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;QAC/D,MAAM,GAAG,MAAM,CAAC;IAClB,CAAC;IACD,IAAI,YAAY,CAAC,MAAM,CAAC,KAAK,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;AAC/E,CAAC;AAED,SAAS,cAAc,CAAC,OAAe,EAAE,KAAa,EAAE,IAAY;IAClE,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC;IACjD,MAAM,IAAI,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IAC/D,mBAAmB,CAAC,IAAI,CAAC,CAAC;IAC1B,OAAO,IAAI,CAAC;AACd,CAAC;AAED,uFAAuF;AACvF,SAAS,oBAAoB,CAAC,OAAe,EAAE,KAAa,EAAE,GAAoB;IAChF,MAAM,GAAG,GAAG,eAAe,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC;IACnE,IAAI,GAAG,CAAC,YAAY,EAAE,CAAC,GAAG,CAAC,UAAU,CAAC,KAAK,GAAG,CAAC,OAAO;QAAE,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;IACrG,MAAM,UAAU,GAAG,cAAc,CAAC,OAAO,EAAE,KAAK,EAAE,GAAG,CAAC,UAAU,CAAC,CAAC;IAClE,MAAM,MAAM,GAAG,QAAQ,CAAC,UAAU,CAAC,CAAC;IACpC,IAAI,MAAM,CAAC,IAAI,KAAK,GAAG,CAAC,UAAU,IAAI,MAAM,CAAC,OAAO,KAAK,GAAG,CAAC,OAAO;WAC/D,MAAM,CAAC,YAAY,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,KAAK,GAAG,CAAC,OAAO;QAAE,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;IAClH,MAAM,UAAU,GAAG,CAAC,IAAI,CAAC,UAAU,EAAE,cAAc,EAAE,MAAM,CAAC,UAAU,CAAC,EAAE,IAAI,CAAC,KAAK,EAAE,cAAc,EAAE,MAAM,CAAC,UAAU,CAAC,EAAE,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC;IAC3J,MAAM,WAAW,GAAG,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,IAAI,UAAU,CAAC,CAAC,CAAE,CAAC;IAChF,mBAAmB,CAAC,WAAW,CAAC,CAAC;IACjC,MAAM,OAAO,GAAG,QAAQ,CAAC,WAAW,CAAC,CAAC;IACtC,IAAI,OAAO,CAAC,IAAI,KAAK,MAAM,CAAC,UAAU,IAAI,OAAO,CAAC,OAAO,KAAK,GAAG,CAAC,OAAO;QAAE,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;AAC/H,CAAC;AAED,qHAAqH;AACrH,MAAM,UAAU,gBAAgB,CAAC,OAAe,EAAE,YAA8B;IAC9E,MAAM,QAAQ,GAAG,kBAAkB,CAAC,YAAY,CAAE,CAAC;IACnD,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;IAC1C,mBAAmB,CAAC,KAAK,CAAC,CAAC;IAC3B,MAAM,GAAG,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC5B,IAAI,GAAG,CAAC,IAAI,KAAK,YAAY;QAAE,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;IAClF,MAAM,MAAM,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC;IACrC,MAAM,UAAU,GAAG,CAAC,QAAQ,CAAC,OAAO,IAAI,GAAG,CAAC,YAAY,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,KAAK,SAAS,CAAC;IAC5F,IAAI,UAAU,IAAI,GAAG,CAAC,YAAa,CAAC,MAAM,CAAC,UAAU,CAAC,KAAK,GAAG,CAAC,OAAO;QAAE,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;IAClH,IAAI,UAAU,IAAI,YAAY,KAAK,eAAe,CAAC,KAAK,CAAC,CAAC,QAAQ;QAAE,oBAAoB,CAAC,OAAO,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC;IAC9G,MAAM,IAAI,GAAG,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC;IAClE,IAAI,YAAY,KAAK,IAAI;QAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;IACxD,IAAI,OAAO,GAAG,CAAC,YAAY,EAAE,CAAC,IAAI,CAAC,KAAK,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;IAC7G,MAAM,IAAI,GAAG,cAAc,CAAC,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;IAClD,MAAM,OAAO,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;IAC/B,IAAI,OAAO,CAAC,IAAI,KAAK,IAAI,IAAI,CAAC,UAAU,IAAI,OAAO,CAAC,OAAO,KAAK,GAAG,CAAC,OAAO,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;IAC3H,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;AACxB,CAAC;AAED,kGAAkG;AAClG,MAAM,UAAU,mBAAmB,CAAC,YAA+B;IACjE,MAAM,QAAQ,GAAG,kBAAkB,CAAC,YAAY,CAAC,YAAY,CAAE,CAAC;IAChE,MAAM,KAAK,GAAG,CAAC,QAAQ,CAAC,UAAU,EAAE,eAAe,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC,CAAC;IACtE,MAAM,OAAO,GAAG,mBAAmB,CAAC,YAAY,CAAC,CAAC;IAClD,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,YAAY,CAAC,WAAW,KAAK,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC;WAC3E,YAAY,CAAC,WAAW,KAAK,IAAI,CAAC,YAAY,CAAC,SAAS,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC,CAAC;IACtF,IAAI,CAAC,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;IACnD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,YAA+B;IAC5D,OAAO,YAAY,CAAC,IAAI,KAAK,QAAQ,IAAI,YAAY,CAAC,WAAW,KAAK,YAAY,CAAC,SAAS;WACvF,YAAY,CAAC,WAAW,KAAK,IAAI,CAAC,mBAAmB,CAAC,YAAY,CAAC,EAAE,mBAAmB,CAAC,YAAY,CAAC,CAAC,CAAC;AAC/G,CAAC"}

package/dist/application-update/scoped-recovery.d.ts

@@ -0,0 +1,32 @@
+import { type NpmLaunchPackage } from '../home/identity.js';
+type AliasInstallation = {
+    kind: 'global' | 'npx';
+    installRoot: string;
+    packageRoot: string;
+    outerRoot: string;
+    outerPackage: NpmLaunchPackage;
+};
+export type RecoveryTree = {
+    source: string | undefined;
+    destination: string;
+};
+/** Resolve the private directory through a symlinked home, but never a link in a backup tree. */
+export declare function canonicalRecoverySlot(path: string): string;
+export declare function validateScopedRecovery(path: string, version: string): void;
+/** The saved alias layout owns this fixed slot; records cannot choose its source or destination. */
+export declare function scopedRecoveryTarget(installation: AliasInstallation, recovery: string): (RecoveryTree & {
+    source: string;
+    version: string;
+}) | undefined;
+/** Validate every saved package before any installed root is removed or replaced. */
+export declare function validateRecoveryLayout(installation: AliasInstallation, recovery: string, runtimeBackup: string | undefined, version: string): void;
+export declare const RECOVERY_FAILURE_MESSAGE = "Update and recovery failed. Reinstall cezarion manually.";
+/** Disk messages can name only the helper's private previous roots and canonical destinations. */
+export declare function validRecoveryMessage(message: string, installation: AliasInstallation, recovery: string): boolean;
+/** Kept roots are reported through the existing application-update status message. */
+export declare class PackageRecoveryError extends Error {
+    constructor(copies: RecoveryTree[]);
+}
+/** Finish every copy before replacing roots. A failed commit restores all pre-rollback roots. */
+export declare function restorePackageTrees(trees: RecoveryTree[], assertOwned: () => Promise<void>): Promise<void>;
+export {};

package/dist/application-update/scoped-recovery.js

@@ -0,0 +1,210 @@
+import { existsSync, readFileSync, readdirSync, realpathSync } from 'node:fs';
+import { cp, mkdtemp, rename, rm } from 'node:fs/promises';
+import { basename, dirname, join, relative } from 'node:path';
+import { productIdentity } from '../home/identity.js';
+import { assertCanonicalPath, installationModules, originalRuntimeName, hoistedRuntime, installedRuntime } from './runtime-layout.js';
+/** Resolve the private directory through a symlinked home, but never a link in a backup tree. */
+export function canonicalRecoverySlot(path) {
+    if (!['recovery', 'recovery-package', 'recovery-scoped-package'].includes(basename(path)))
+        throw new Error('invalid recovery slot');
+    const canonical = join(realpathSync(dirname(path)), basename(path));
+    assertCanonicalPath(canonical);
+    return canonical;
+}
+export function validateScopedRecovery(path, version) {
+    assertCanonicalPath(path);
+    const pkg = JSON.parse(readFileSync(join(path, 'package.json'), 'utf8'));
+    if (pkg.name !== productIdentity(false).npmPackage || pkg.version !== version
+        || pkg.dependencies?.[productIdentity(true).npmPackage] !== version
+        || !existsSync(join(path, 'dist/index.js')) || !existsSync(join(path, 'web/dist/index.html'))) {
+        throw new Error('invalid legacy scoped recovery');
+    }
+    const nested = join(path, 'node_modules', productIdentity(true).npmPackage);
+    if (existsSync(nested))
+        validateBackupRuntime(nested, productIdentity(true).npmPackage, version);
+}
+/** The saved alias layout owns this fixed slot; records cannot choose its source or destination. */
+export function scopedRecoveryTarget(installation, recovery) {
+    if (installation.kind !== 'global' || installation.outerPackage !== productIdentity(false).npmAlias)
+        return;
+    recovery = canonicalRecoverySlot(recovery);
+    const pkg = JSON.parse(readFileSync(join(recovery, 'package.json'), 'utf8'));
+    if (pkg.dependencies?.[productIdentity(true).npmPackage] === undefined)
+        return;
+    if (pkg.name !== installation.outerPackage || typeof pkg.version !== 'string'
+        || pkg.dependencies[productIdentity(true).npmPackage] !== pkg.version
+        || pkg.dependencies[productIdentity(false).npmPackage] !== pkg.version)
+        throw new Error('invalid alias recovery');
+    const nested = join(recovery, 'node_modules', productIdentity(false).npmPackage);
+    if (existsSync(nested)) {
+        validateScopedRecovery(nested, pkg.version);
+        return;
+    }
+    return { source: join(dirname(recovery), 'recovery-scoped-package'),
+        destination: join(installationModules(installation), productIdentity(false).npmPackage), version: pkg.version };
+}
+function validateBackupRuntime(path, name, version) {
+    assertCanonicalPath(path);
+    const pkg = JSON.parse(readFileSync(join(path, 'package.json'), 'utf8'));
+    if (pkg.name !== name || pkg.version !== version || !existsSync(join(path, 'dist/index.js'))
+        || !existsSync(join(path, 'web/dist/index.html')))
+        throw new Error('invalid runtime recovery');
+}
+/** Validate every saved package before any installed root is removed or replaced. */
+export function validateRecoveryLayout(installation, recovery, runtimeBackup, version) {
+    recovery = canonicalRecoverySlot(recovery);
+    if (runtimeBackup)
+        runtimeBackup = canonicalRecoverySlot(runtimeBackup);
+    const sourceRoot = installation.kind === 'npx' ? installation.installRoot : installation.outerRoot;
+    const runtime = installation.kind === 'global' && hoistedRuntime(installation) ? runtimeBackup
+        : join(recovery, relative(sourceRoot, installation.packageRoot));
+    validateBackupRuntime(runtime, originalRuntimeName(installation), version);
+    if (installation.kind === 'npx') {
+        const resolved = installedRuntime(join(recovery, 'node_modules'), installation.outerPackage);
+        if (resolved.path !== runtime)
+            throw new Error('invalid npx recovery layout');
+    }
+    if (installation.outerPackage !== productIdentity(false).npmAlias)
+        return;
+    const outer = join(recovery, relative(sourceRoot, installation.outerRoot));
+    const pkg = JSON.parse(readFileSync(join(outer, 'package.json'), 'utf8'));
+    if (pkg.name !== installation.outerPackage || typeof pkg.version !== 'string'
+        || (pkg.dependencies?.[productIdentity(true).npmPackage] !== undefined && pkg.version !== version))
+        throw new Error('invalid alias recovery');
+    const scoped = scopedRecoveryTarget(installation, recovery);
+    if (scoped)
+        validateScopedRecovery(scoped.source, version);
+}
+export const RECOVERY_FAILURE_MESSAGE = 'Update and recovery failed. Reinstall cezarion manually.';
+const KEPT_ROOTS_PREFIX = 'Package recovery could not be reverted. Kept previous roots: ';
+function recoveryDestinations(installation, recovery) {
+    if (installation.kind === 'npx') {
+        // Promotion may add an entry absent from the saved root. Its retained private
+        // slot still identifies the direct canonical child that rollback replaced.
+        const entries = readdirSync(recovery);
+        for (const name of readdirSync(installation.installRoot)) {
+            const kept = /^\.(.+)-recovery-[A-Za-z0-9]{6}$/.exec(name);
+            if (kept && kept[1] !== '.' && kept[1] !== '..')
+                entries.push(kept[1]);
+        }
+        return entries.filter(name => name !== 'concurrency.lock').map(name => join(installation.installRoot, name));
+    }
+    const destinations = [installation.outerRoot];
+    if (hoistedRuntime(installation))
+        destinations.push(installation.packageRoot);
+    const scoped = scopedRecoveryTarget(installation, recovery);
+    if (scoped)
+        destinations.push(scoped.destination);
+    return destinations;
+}
+function validKeptRoot(entry, destinations) {
+    const parts = entry.split(' -> ');
+    if (parts.length !== 2)
+        return false;
+    const [source, destination] = parts;
+    if (!destinations.delete(destination))
+        return false;
+    const work = dirname(source), prefix = `.${basename(destination)}-recovery-`;
+    if (dirname(work) !== dirname(destination) || basename(source) !== 'previous'
+        || !basename(work).startsWith(prefix) || !/^[A-Za-z0-9]{6}$/.test(basename(work).slice(prefix.length)))
+        return false;
+    if (source !== join(work, 'previous'))
+        return false;
+    assertCanonicalPath(source);
+    assertCanonicalPath(destination);
+    return existsSync(source);
+}
+/** Disk messages can name only the helper's private previous roots and canonical destinations. */
+export function validRecoveryMessage(message, installation, recovery) {
+    const prefix = `${RECOVERY_FAILURE_MESSAGE} ${KEPT_ROOTS_PREFIX}`;
+    if (!message.startsWith(prefix))
+        return false;
+    try {
+        recovery = canonicalRecoverySlot(recovery);
+        const destinations = new Set(recoveryDestinations(installation, recovery));
+        return message.slice(prefix.length).split('; ').every(entry => validKeptRoot(entry, destinations));
+    }
+    catch {
+        return false;
+    }
+}
+/** Kept roots are reported through the existing application-update status message. */
+export class PackageRecoveryError extends Error {
+    constructor(copies) {
+        super(`${KEPT_ROOTS_PREFIX}${copies.map(copy => `${copy.source} -> ${copy.destination}`).join('; ')}`);
+    }
+}
+async function undoTrees(trees, assertOwned) {
+    for (const tree of [...trees].reverse()) {
+        if (tree.installed) {
+            await assertOwned();
+            await rm(tree.destination, { recursive: true, force: true });
+        }
+        if (tree.moved) {
+            await assertOwned();
+            await rename(join(tree.work, 'previous'), tree.destination);
+        }
+    }
+}
+/** Finish every copy before replacing roots. A failed commit restores all pre-rollback roots. */
+export async function restorePackageTrees(trees, assertOwned) {
+    const prepared = [];
+    let cleanup = true;
+    let ownershipLost = false;
+    const checkOwned = async () => {
+        try {
+            await assertOwned();
+        }
+        catch (error) {
+            ownershipLost = true;
+            throw error;
+        }
+    };
+    try {
+        for (const tree of trees) {
+            await checkOwned();
+            assertCanonicalPath(tree.destination);
+            if (tree.source)
+                assertCanonicalPath(tree.source);
+            const work = await mkdtemp(join(dirname(tree.destination), `.${basename(tree.destination)}-recovery-`));
+            prepared.push({ ...tree, work, moved: false, installed: false });
+            if (tree.source)
+                await cp(tree.source, join(work, 'next'), { recursive: true, dereference: false,
+                    filter: async () => { await checkOwned(); return true; } });
+        }
+        for (const tree of prepared) {
+            await checkOwned();
+            assertCanonicalPath(tree.destination);
+            if (existsSync(tree.destination)) {
+                await rename(tree.destination, join(tree.work, 'previous'));
+                tree.moved = true;
+            }
+            if (tree.source) {
+                await checkOwned();
+                await rename(join(tree.work, 'next'), tree.destination);
+                tree.installed = true;
+            }
+        }
+    }
+    catch (error) {
+        try {
+            if (ownershipLost)
+                throw error;
+            await undoTrees(prepared, checkOwned);
+        }
+        catch {
+            cleanup = false;
+            const copies = prepared.map(tree => ({ source: join(tree.work, 'previous'), destination: tree.destination }))
+                .filter(tree => existsSync(tree.source));
+            throw new PackageRecoveryError(copies);
+        }
+        throw error;
+    }
+    finally {
+        // Retain previous roots when ownership is lost or the filesystem refuses undo.
+        if (cleanup)
+            for (const tree of prepared)
+                await rm(tree.work, { recursive: true, force: true });
+    }
+}
+//# sourceMappingURL=scoped-recovery.js.map

package/dist/application-update/scoped-recovery.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"scoped-recovery.js","sourceRoot":"","sources":["../../src/application-update/scoped-recovery.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAC9E,OAAO,EAAE,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,kBAAkB,CAAC;AAC3D,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AAC9D,OAAO,EAAE,eAAe,EAAyB,MAAM,qBAAqB,CAAC;AAC7E,OAAO,EAAE,mBAAmB,EAAE,mBAAmB,EAAE,mBAAmB,EAAE,cAAc,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AAKtI,iGAAiG;AACjG,MAAM,UAAU,qBAAqB,CAAC,IAAY;IAChD,IAAI,CAAC,CAAC,UAAU,EAAE,kBAAkB,EAAE,yBAAyB,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;IACpI,MAAM,SAAS,GAAG,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;IACpE,mBAAmB,CAAC,SAAS,CAAC,CAAC;IAC/B,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,IAAY,EAAE,OAAe;IAClE,mBAAmB,CAAC,IAAI,CAAC,CAAC;IAC1B,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE,cAAc,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC;IACzE,IAAI,GAAG,CAAC,IAAI,KAAK,eAAe,CAAC,KAAK,CAAC,CAAC,UAAU,IAAI,GAAG,CAAC,OAAO,KAAK,OAAO;WACxE,GAAG,CAAC,YAAY,EAAE,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC,KAAK,OAAO;WAChE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,EAAE,eAAe,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,EAAE,qBAAqB,CAAC,CAAC,EAAE,CAAC;QAChG,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;IACpD,CAAC;IACD,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,EAAE,cAAc,EAAE,eAAe,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC,CAAC;IAC5E,IAAI,UAAU,CAAC,MAAM,CAAC;QAAE,qBAAqB,CAAC,MAAM,EAAE,eAAe,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;AACnG,CAAC;AAED,oGAAoG;AACpG,MAAM,UAAU,oBAAoB,CAAC,YAA+B,EAAE,QAAgB;IACpF,IAAI,YAAY,CAAC,IAAI,KAAK,QAAQ,IAAI,YAAY,CAAC,YAAY,KAAK,eAAe,CAAC,KAAK,CAAC,CAAC,QAAQ;QAAE,OAAO;IAC5G,QAAQ,GAAG,qBAAqB,CAAC,QAAQ,CAAC,CAAC;IAC3C,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,QAAQ,EAAE,cAAc,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC;IAC7E,IAAI,GAAG,CAAC,YAAY,EAAE,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC,KAAK,SAAS;QAAE,OAAO;IAC/E,IAAI,GAAG,CAAC,IAAI,KAAK,YAAY,CAAC,YAAY,IAAI,OAAO,GAAG,CAAC,OAAO,KAAK,QAAQ;WACxE,GAAG,CAAC,YAAY,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC,KAAK,GAAG,CAAC,OAAO;WAClE,GAAG,CAAC,YAAY,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC,UAAU,CAAC,KAAK,GAAG,CAAC,OAAO;QAAE,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;IACpH,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,EAAE,cAAc,EAAE,eAAe,CAAC,KAAK,CAAC,CAAC,UAAU,CAAC,CAAC;IACjF,IAAI,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;QAAC,sBAAsB,CAAC,MAAM,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC;QAAC,OAAO;IAAC,CAAC;IAChF,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,yBAAyB,CAAC;QACjE,WAAW,EAAE,IAAI,CAAC,mBAAmB,CAAC,YAAY,CAAC,EAAE,eAAe,CAAC,KAAK,CAAC,CAAC,UAAU,CAAC,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC;AACpH,CAAC;AAED,SAAS,qBAAqB,CAAC,IAAY,EAAE,IAAY,EAAE,OAAe;IACxE,mBAAmB,CAAC,IAAI,CAAC,CAAC;IAC1B,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE,cAAc,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC;IACzE,IAAI,GAAG,CAAC,IAAI,KAAK,IAAI,IAAI,GAAG,CAAC,OAAO,KAAK,OAAO,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,EAAE,eAAe,CAAC,CAAC;WACvF,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,EAAE,qBAAqB,CAAC,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;AACnG,CAAC;AAED,qFAAqF;AACrF,MAAM,UAAU,sBAAsB,CAAC,YAA+B,EAAE,QAAgB,EAAE,aAAiC,EAAE,OAAe;IAC1I,QAAQ,GAAG,qBAAqB,CAAC,QAAQ,CAAC,CAAC;IAC3C,IAAI,aAAa;QAAE,aAAa,GAAG,qBAAqB,CAAC,aAAa,CAAC,CAAC;IACxE,MAAM,UAAU,GAAG,YAAY,CAAC,IAAI,KAAK,KAAK,CAAC,CAAC,CAAC,YAAY,CAAC,WAAW,CAAC,CAAC,CAAC,YAAY,CAAC,SAAS,CAAC;IACnG,MAAM,OAAO,GAAG,YAAY,CAAC,IAAI,KAAK,QAAQ,IAAI,cAAc,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,aAAc;QAC7F,CAAC,CAAC,IAAI,CAAC,QAAQ,EAAE,QAAQ,CAAC,UAAU,EAAE,YAAY,CAAC,WAAW,CAAC,CAAC,CAAC;IACnE,qBAAqB,CAAC,OAAO,EAAE,mBAAmB,CAAC,YAAY,CAAC,EAAE,OAAO,CAAC,CAAC;IAC3E,IAAI,YAAY,CAAC,IAAI,KAAK,KAAK,EAAE,CAAC;QAChC,MAAM,QAAQ,GAAG,gBAAgB,CAAC,IAAI,CAAC,QAAQ,EAAE,cAAc,CAAC,EAAE,YAAY,CAAC,YAAY,CAAC,CAAC;QAC7F,IAAI,QAAQ,CAAC,IAAI,KAAK,OAAO;YAAE,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;IAChF,CAAC;IACD,IAAI,YAAY,CAAC,YAAY,KAAK,eAAe,CAAC,KAAK,CAAC,CAAC,QAAQ;QAAE,OAAO;IAC1E,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,EAAE,QAAQ,CAAC,UAAU,EAAE,YAAY,CAAC,SAAS,CAAC,CAAC,CAAC;IAC3E,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,KAAK,EAAE,cAAc,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC;IAC1E,IAAI,GAAG,CAAC,IAAI,KAAK,YAAY,CAAC,YAAY,IAAI,OAAO,GAAG,CAAC,OAAO,KAAK,QAAQ;WACxE,CAAC,GAAG,CAAC,YAAY,EAAE,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC,KAAK,SAAS,IAAI,GAAG,CAAC,OAAO,KAAK,OAAO,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;IAChJ,MAAM,MAAM,GAAG,oBAAoB,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC;IAC5D,IAAI,MAAM;QAAE,sBAAsB,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AAC7D,CAAC;AAED,MAAM,CAAC,MAAM,wBAAwB,GAAG,0DAA0D,CAAC;AACnG,MAAM,iBAAiB,GAAG,+DAA+D,CAAC;AAE1F,SAAS,oBAAoB,CAAC,YAA+B,EAAE,QAAgB;IAC7E,IAAI,YAAY,CAAC,IAAI,KAAK,KAAK,EAAE,CAAC;QAChC,8EAA8E;QAC9E,2EAA2E;QAC3E,MAAM,OAAO,GAAG,WAAW,CAAC,QAAQ,CAAC,CAAC;QACtC,KAAK,MAAM,IAAI,IAAI,WAAW,CAAC,YAAY,CAAC,WAAW,CAAC,EAAE,CAAC;YACzD,MAAM,IAAI,GAAG,kCAAkC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC3D,IAAI,IAAI,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,GAAG,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI;gBAAE,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAE,CAAC,CAAC;QAC1E,CAAC;QACD,OAAO,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,KAAK,kBAAkB,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,YAAY,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC,CAAC;IAC/G,CAAC;IACD,MAAM,YAAY,GAAG,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC;IAC9C,IAAI,cAAc,CAAC,YAAY,CAAC;QAAE,YAAY,CAAC,IAAI,CAAC,YAAY,CAAC,WAAW,CAAC,CAAC;IAC9E,MAAM,MAAM,GAAG,oBAAoB,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC;IAC5D,IAAI,MAAM;QAAE,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;IAClD,OAAO,YAAY,CAAC;AACtB,CAAC;AAED,SAAS,aAAa,CAAC,KAAa,EAAE,YAAyB;IAC7D,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAClC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACrC,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,GAAG,KAAyB,CAAC;IACxD,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,WAAW,CAAC;QAAE,OAAO,KAAK,CAAC;IACpD,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,QAAQ,CAAC,WAAW,CAAC,YAAY,CAAC;IAC7E,IAAI,OAAO,CAAC,IAAI,CAAC,KAAK,OAAO,CAAC,WAAW,CAAC,IAAI,QAAQ,CAAC,MAAM,CAAC,KAAK,UAAU;WACxE,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IACvH,IAAI,MAAM,KAAK,IAAI,CAAC,IAAI,EAAE,UAAU,CAAC;QAAE,OAAO,KAAK,CAAC;IACpD,mBAAmB,CAAC,MAAM,CAAC,CAAC;IAC5B,mBAAmB,CAAC,WAAW,CAAC,CAAC;IACjC,OAAO,UAAU,CAAC,MAAM,CAAC,CAAC;AAC5B,CAAC;AAED,kGAAkG;AAClG,MAAM,UAAU,oBAAoB,CAAC,OAAe,EAAE,YAA+B,EAAE,QAAgB;IACrG,MAAM,MAAM,GAAG,GAAG,wBAAwB,IAAI,iBAAiB,EAAE,CAAC;IAClE,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,MAAM,CAAC;QAAE,OAAO,KAAK,CAAC;IAC9C,IAAI,CAAC;QACH,QAAQ,GAAG,qBAAqB,CAAC,QAAQ,CAAC,CAAC;QAC3C,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,oBAAoB,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC,CAAC;QAC3E,OAAO,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,aAAa,CAAC,KAAK,EAAE,YAAY,CAAC,CAAC,CAAC;IACrG,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,KAAK,CAAC;IAAC,CAAC;AAC3B,CAAC;AAED,sFAAsF;AACtF,MAAM,OAAO,oBAAqB,SAAQ,KAAK;IAC7C,YAAY,MAAsB;QAChC,KAAK,CAAC,GAAG,iBAAiB,GAAG,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,OAAO,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACzG,CAAC;CACF;AAGD,KAAK,UAAU,SAAS,CAAC,KAAqB,EAAE,WAAgC;IAC9E,KAAK,MAAM,IAAI,IAAI,CAAC,GAAG,KAAK,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC;QACxC,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YAAC,MAAM,WAAW,EAAE,CAAC;YAAC,MAAM,EAAE,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAAC,CAAC;QAC1G,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YAAC,MAAM,WAAW,EAAE,CAAC;YAAC,MAAM,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,UAAU,CAAC,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC;QAAC,CAAC;IACvG,CAAC;AACH,CAAC;AAED,iGAAiG;AACjG,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,KAAqB,EAAE,WAAgC;IAC/F,MAAM,QAAQ,GAAmB,EAAE,CAAC;IACpC,IAAI,OAAO,GAAG,IAAI,CAAC;IACnB,IAAI,aAAa,GAAG,KAAK,CAAC;IAC1B,MAAM,UAAU,GAAG,KAAK,IAAI,EAAE;QAC5B,IAAI,CAAC;YAAC,MAAM,WAAW,EAAE,CAAC;QAAC,CAAC;QAC5B,OAAO,KAAK,EAAE,CAAC;YAAC,aAAa,GAAG,IAAI,CAAC;YAAC,MAAM,KAAK,CAAC;QAAC,CAAC;IACtD,CAAC,CAAC;IACF,IAAI,CAAC;QACH,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,MAAM,UAAU,EAAE,CAAC;YACnB,mBAAmB,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;YACtC,IAAI,IAAI,CAAC,MAAM;gBAAE,mBAAmB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YAClD,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,IAAI,QAAQ,CAAC,IAAI,CAAC,WAAW,CAAC,YAAY,CAAC,CAAC,CAAC;YACxG,QAAQ,CAAC,IAAI,CAAC,EAAE,GAAG,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC;YACjE,IAAI,IAAI,CAAC,MAAM;gBAAE,MAAM,EAAE,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,WAAW,EAAE,KAAK;oBAC9F,MAAM,EAAE,KAAK,IAAI,EAAE,GAAG,MAAM,UAAU,EAAE,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAChE,CAAC;QACD,KAAK,MAAM,IAAI,IAAI,QAAQ,EAAE,CAAC;YAC5B,MAAM,UAAU,EAAE,CAAC;YACnB,mBAAmB,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;YACtC,IAAI,UAAU,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC;gBAAC,MAAM,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC,CAAC;gBAAC,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;YAAC,CAAC;YACrH,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;gBAAC,MAAM,UAAU,EAAE,CAAC;gBAAC,MAAM,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC;gBAAC,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC;YAAC,CAAC;QAC1H,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,CAAC;YACH,IAAI,aAAa;gBAAE,MAAM,KAAK,CAAC;YAC/B,MAAM,SAAS,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;QACxC,CAAC;QACD,MAAM,CAAC;YACL,OAAO,GAAG,KAAK,CAAC;YAChB,MAAM,MAAM,GAAG,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,UAAU,CAAC,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC;iBAC1G,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;YAC3C,MAAM,IAAI,oBAAoB,CAAC,MAAM,CAAC,CAAC;QACzC,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC;YAAS,CAAC;QACT,+EAA+E;QAC/E,IAAI,OAAO;YAAE,KAAK,MAAM,IAAI,IAAI,QAAQ;gBAAE,MAAM,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAClG,CAAC;AACH,CAAC"}

package/dist/application-update/service.d.ts

@@ -0,0 +1,86 @@
+import { type ApplicationUpdateState } from '../contract/index.js';
+import { type Installation } from './discovery.ts';
+export declare class ApplicationUpdateConflictError extends Error {
+}
+export declare class ApplicationUpdateFailureError extends Error {
+    readonly status: 409 | 503;
+    constructor(message: string, status?: 409 | 503);
+}
+export interface ApplicationUpdateServiceLike {
+    snapshot(): ApplicationUpdateState;
+    apply(): Promise<ApplicationUpdateState>;
+    restart(): Promise<ApplicationUpdateState>;
+    afterResponse?(): void;
+    onStateChange?(listener: () => void): void;
+}
+export interface ApplicationUpdateOptions {
+    rebrand?: boolean | undefined;
+    packageRoot: string;
+    launchEntry: string;
+    npmPrefix: string;
+    npmCache: string;
+    npmBin?: string | undefined;
+    home: string;
+    targetVersion: () => string | undefined;
+    runNpm?: (args: string[], signal?: AbortSignal) => Promise<void>;
+    armRestart?: (plan: RestartPlan) => Promise<number | void>;
+    handoff?: () => void;
+    onChange?: () => void;
+    dryRun?: boolean;
+    /** Test-only bounded contention override; normal operation waits 15 seconds. */
+    lockWaitMs?: number;
+}
+export interface RestartPlan {
+    installation: Exclude<Installation, {
+        kind: 'unsupported';
+    }>;
+    targetVersion: string;
+    oldVersion: string;
+    stage: string;
+    recovery: string;
+    recoveryPackage?: string | undefined;
+    binLinks?: string | undefined;
+    recordPath: string;
+    claimId: string;
+}
+/** Validate the npm result, not merely its exit code. */
+export declare function validateInstalledPackage(path: string, expectedVersion: string, installRoot?: string, expectedPackage?: string): void;
+export declare class ApplicationUpdateService implements ApplicationUpdateServiceLike {
+    private readonly options;
+    private readonly installation;
+    private readonly recordPath;
+    private readonly dir;
+    private readonly recoveryPackage;
+    private record;
+    private applying?;
+    private handoffArmed;
+    private armingRestart;
+    private listener?;
+    private lockLost;
+    constructor(options: ApplicationUpdateOptions);
+    private refreshUnreadableRecord;
+    private recordStateInvalid;
+    private recordPathMismatch;
+    private recordStaleOrUnclaimed;
+    private recordNeedsRetry;
+    private refreshOwnedInFlightRecord;
+    private refreshReadyRecord;
+    private refreshRecord;
+    snapshot(): ApplicationUpdateState;
+    private persist;
+    onStateChange(listener: () => void): void;
+    apply(): Promise<ApplicationUpdateState>;
+    private prepareDryRun;
+    private assertWritableOriginal;
+    private clearPrepareDirs;
+    private installStagedRelease;
+    private snapshotPrepareRecovery;
+    private prepareUnderLock;
+    private persistLockedPrepareFailure;
+    private persistUnlockedPrepareFailure;
+    private rethrowPrepareFailure;
+    private prepare;
+    restart(): Promise<ApplicationUpdateState>;
+    afterResponse(): void;
+    private runNpm;
+}