@homeflare/alchemy 0.5.0 → 0.6.0

package/README.md

@@ -66,60 +66,29 @@ is the one operation this resource exists to make hard. It retains on destroy.
 
 ## OpenBao — `@homeflare/alchemy/openbao`
 
-Vault objects as resources — `BaoMount`, `BaoAuthMethod`, `BaoPolicy`, `BaoAuthRole`,
-`BaoPkiRole`, `BaoSshRole`, `BaoCloudflareRole`, `BaoProxmoxRole`, `BaoPlugin` — plus an AppRole
-login for scripts. Every call resolves `BAO_ADDR` / `BAO_AGENT_ADDR` / `BAO_NAMESPACE` /
-`BAO_TOKEN` (or the `VAULT_*` twins) the way the `bao` CLI does. A stack provides each
+Vault objects as resources — mounts (with `remountFrom` moves), auth methods, policies, AppRole,
+JWT/OIDC and Kubernetes roles, JWT auth config, login MFA (TOTP method + enforcement), PKI, SSH,
+Cloudflare and Proxmox roles, plugins — plus `assertBaoIdentity` (call it first), the pure
+`hostAppRoles` generator, and an AppRole login for scripts. A stack provides each
 `Bao*Provider()` it uses, plus `FetchHttpClient.layer`.
 
-⛔ **Metadata only.** Alchemy stores props and attributes unencrypted, so no secret, CA key or
-plugin `env` is declarable. Every family defaults to `retain` on destroy.
+⛔ **Metadata only.** Alchemy stores props and attributes unencrypted, so no secret, CA key,
+plugin `env` or OIDC client secret is declarable. Every family defaults to `retain` on destroy.
 
-### appRoleLogin / revokeSelf
+★ **Usage lives beside the code**, so it ships in the tarball with it:
+[src/openbao/README.md](./src/openbao/README.md). What each resource does on a rename is in
+[src/openbao/REPLACE.md](./src/openbao/REPLACE.md) — read it before changing a path or name.
 
-```ts
-import { BaoLoginError, appRoleLogin, revokeSelf } from '@homeflare/alchemy/openbao';
-
-const login = await appRoleLogin({ roleId, secretId }); // mount defaults to `approle`
-try {
-  use(login.clientToken, login.accessor, login.policies, login.leaseDurationSeconds);
-} finally {
-  await revokeSelf(login.clientToken);
-}
-```
+## launchd — `@homeflare/alchemy/launchd`
 
-- ⛔ The login never sends `BAO_TOKEN`, and a `BaoLoginError` never contains the credential.
-  OpenBao can echo a secret_id back in an error, so every error string is redacted.
-- ⚠️ `clientToken` is a getter over a private field: `console.log(login)` prints `[Getter]` at
-  most (Bun) or nothing (Node), and JSON, a spread and `structuredClone` carry no token.
-- ⚠️ A value with leading or trailing whitespace is refused, not trimmed. `Bun.file().text()`
-  keeps a file's trailing newline.
-- `reason` is `input`, `refused`, `unreachable` or `response`. Pass `env` to use something other
-  than `process.env`. `appRoleLoginEffect` / `revokeSelfEffect` are the same calls as Effects.
-
-### BaoPlugin
-
-```ts
-import { BaoPlugin } from '@homeflare/alchemy/openbao';
-import * as Effect from 'effect/Effect';
-
-export const plugins = Effect.gen(function* () {
-  yield* BaoPlugin('plugin-example', {
-    name: 'openbao-plugin-secrets-example',
-    type: 'secret', // 'secret' | 'auth' | 'database'
-    command: 'openbao-plugin-secrets-example', // a bare file name in plugin_directory
-    sha256: '<hex sha256 of that file>',
-    version: 'v0.1.2', // canonical semver
-  });
-});
-```
+`LaunchdJob` and `HostFile` declare a Mac host's daemons and their config files. launchd has no SDK,
+so the provider renders the plist and drives `launchctl`, all through one injectable `HostRunner`;
+`launchdProviders()` provides both. An update restarts the job; a `label`/`domain` change replaces it
+delete-first.
 
-- ⛔ It registers a binary that is already in `plugin_directory`. It does not copy the binary.
-- ⚠️ **If the binary reports its own version, declare exactly that one.** OpenBao refuses any
-  other ("plugin version mismatch"), and files an unversioned registration under the reported
-  one, so reconcile then refuses because the read-back finds nothing.
-- ⚠️ A new `sha256` does not restart running mounts. Reload with `sys/plugins/reload/backend`.
-- The deploying token needs `sudo` on `sys/plugins/catalog/*`.
+- ⛔ **No secrets in props** (state is unencrypted): declare the path a secret renderer writes.
+- ⛔ **No silent sudo:** the system domain needs a deploy started as root, or a `privileged` runner.
+- ⚠️ `org.nixos.*` jobs are never adopted. Guide and nix-darwin cutover: [docs/launchd.md](./docs/launchd.md).
 
 ## Credentials
 

package/dist/index.d.ts

@@ -9,6 +9,7 @@
  *     import { BaoMount } from '@homeflare/alchemy/openbao';
  *     import { TalosCluster } from '@homeflare/alchemy/talos';
  *     import { ProxmoxAcl } from '@homeflare/alchemy/proxmox';
+ *     import { LaunchdJob } from '@homeflare/alchemy/launchd';
  *
  * ★ WHY THESE EXIST AT ALL. When Alchemy has no resource for something, the alternative
  *   is a runbook step a human runs once — and a plan can never show a missing runbook

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,EAAE,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,EAAE,CAAC"}

package/dist/launchd/fake-runner.d.ts

@@ -0,0 +1,36 @@
+import type { ExecResult, FileStat, HostRunner, HostUser } from './runner.ts';
+type Entry = {
+    bytes: Uint8Array;
+    mode: number;
+    uid: number;
+    gid: number;
+    kind: FileStat['kind'];
+};
+export type FakeOptions = {
+    euid?: number;
+    privileged?: boolean;
+    /** Directories that exist, and their owner uid. */
+    dirs?: Record<string, number>;
+    users?: Record<string, HostUser>;
+    groups?: Record<string, number>;
+};
+export declare const fakeRunner: (options?: FakeOptions) => {
+    calls: string[][];
+    disabled: Set<string>;
+    dirs: Map<string, number>;
+    files: Map<string, Entry>;
+    loaded: Map<string, number | undefined>;
+    runner: HostRunner;
+    state: {
+        lingerPrints: number;
+        nextPid: number;
+        bootstrapFailure: ExecResult | undefined;
+        /** Returned by bootout in place of success. The job still goes, unless `bootoutKeepsJob`. */
+        bootoutFailure: ExecResult | undefined;
+        bootoutKeepsJob: boolean;
+        /** gui uids with no login session: every launchctl call into `gui/<uid>` exits 112. */
+        loggedOut: Set<number>;
+    };
+};
+export {};
+//# sourceMappingURL=fake-runner.d.ts.map

package/dist/launchd/fake-runner.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"fake-runner.d.ts","sourceRoot":"","sources":["../../src/launchd/fake-runner.ts"],"names":[],"mappings":"AAaA,OAAO,KAAK,EAAE,UAAU,EAAE,QAAQ,EAAE,UAAU,EAAE,QAAQ,EAAgB,MAAM,aAAa,CAAC;AAE5F,KAAK,KAAK,GAAG;IAAE,KAAK,EAAE,UAAU,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAA;CAAE,CAAC;AAEnG,MAAM,MAAM,WAAW,GAAG;IACxB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,mDAAmD;IACnD,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC9B,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;IACjC,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACjC,CAAC;AA0BF,eAAO,MAAM,UAAU,aAAa,WAAW;;;;;;;;;;0BAaZ,UAAU,GAAG,SAAS;QACrD,6FAA6F;wBAChE,UAAU,GAAG,SAAS;;QAEnD,uFAAuF;;;CA4G1F,CAAC"}

package/dist/launchd/host-effect.d.ts

@@ -0,0 +1,19 @@
+/**
+ * The one place a HostRunner's promises become Effects — plus the one probe of an unresolved
+ * `news` both providers' diffs share.
+ *
+ * ★ The lifecycle files are plain async functions over a HostRunner (see runner.ts for why the
+ *   runner is promise-based), so each provider handler is a single `lift(() => step(runner, …))`.
+ * ⚠️ A thrown Error stays that Error — its message is the refusal a deploy prints. Anything else
+ *   thrown is wrapped, so the failure channel is always an Error with a readable message.
+ */
+import * as Effect from 'effect/Effect';
+export declare const lift: <A>(step: () => Promise<A>) => Effect.Effect<A, Error>;
+/**
+ * A string prop of a diff's `news`, when that one prop is already resolved; `undefined` while it
+ * is still an Output (a function-typed proxy), an Effect or a Config.
+ * ★ For the identity props a diff must see even when the rest of `news` is unresolved — a plain
+ *   string is resolved by definition, so `typeof` is the whole test.
+ */
+export declare const resolvedString: (news: unknown, key: string) => string | undefined;
+//# sourceMappingURL=host-effect.d.ts.map

package/dist/launchd/host-effect.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"host-effect.d.ts","sourceRoot":"","sources":["../../src/launchd/host-effect.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AAExC,eAAO,MAAM,IAAI,GAAI,CAAC,QAAQ,MAAM,OAAO,CAAC,CAAC,CAAC,KAAG,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,KAAK,CAInE,CAAC;AAEL;;;;;GAKG;AACH,eAAO,MAAM,cAAc,SAAU,OAAO,OAAO,MAAM,KAAG,MAAM,GAAG,SAIpE,CAAC"}

package/dist/launchd/host-file-form.d.ts

@@ -0,0 +1,24 @@
+export interface HostFileProps {
+    /** Absolute path. The parent directory must already exist. */
+    path: string;
+    /** UTF-8 text. ⛔ Never a secret — see the file header. */
+    content: string;
+    /** Permission bits. @default 0o644 */
+    mode?: number;
+    /** User name or numeric uid. Omitted: whoever the runner writes as (a rewrite keeps no owner). */
+    owner?: string | number;
+    /** Group name or numeric gid. Omitted: the directory's default group. */
+    group?: string | number;
+}
+export interface HostFileAttributes {
+    path: string;
+    /** SHA-256 of the bytes on disk. */
+    sha256: string;
+    mode: number;
+    uid: number;
+    gid: number;
+    size: number;
+}
+export declare const DEFAULT_MODE = 420;
+export declare const fileProblems: (props: HostFileProps) => string[];
+//# sourceMappingURL=host-file-form.d.ts.map

package/dist/launchd/host-file-form.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"host-file-form.d.ts","sourceRoot":"","sources":["../../src/launchd/host-file-form.ts"],"names":[],"mappings":"AAWA,MAAM,WAAW,aAAa;IAC5B,8DAA8D;IAC9D,IAAI,EAAE,MAAM,CAAC;IACb,0DAA0D;IAC1D,OAAO,EAAE,MAAM,CAAC;IAChB,sCAAsC;IACtC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,kGAAkG;IAClG,KAAK,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IACxB,yEAAyE;IACzE,KAAK,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,MAAM,CAAC;IACb,oCAAoC;IACpC,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,MAAM,CAAC;CACd;AAED,eAAO,MAAM,YAAY,MAAQ,CAAC;AAclC,eAAO,MAAM,YAAY,UAAW,aAAa,KAAG,MAAM,EAsBzD,CAAC"}

package/dist/launchd/host-file-lifecycle.d.ts

@@ -0,0 +1,29 @@
+/**
+ * HostFile's read / diff / reconcile / delete as plain async functions over a HostRunner, so the
+ * lifecycle runs against fake-runner.ts in tests.
+ *
+ * ⛔ SYMLINKS AND DIRECTORIES ARE REFUSED, NOT REPLACED. rename(2) over a symlink replaces the LINK,
+ *   so a path that is a symlink (nix-darwin's /etc entries point into /nix/store) would be quietly
+ *   taken from the tool that owns it — which puts it back, or refuses its next activation. Remove
+ *   the path from its owner first, then declare it here.
+ */
+import type { Diff } from 'alchemy/Diff';
+import { type HostFileAttributes, type HostFileProps } from './host-file-form.ts';
+import { type HostRunner } from './runner.ts';
+type Desired = {
+    readonly bytes: Uint8Array;
+    readonly sha256: string;
+    readonly mode: number;
+    readonly uid?: number;
+    readonly gid?: number;
+};
+/** Validate, then resolve owner/group names to ids through the runner. */
+export declare const desiredFile: (runner: HostRunner, props: HostFileProps) => Promise<Desired>;
+/** The file as it is now, or `undefined` when nothing is at the path. Non-files read with no digest. */
+export declare const readFileAttributes: (runner: HostRunner, path: string) => Promise<HostFileAttributes | undefined>;
+export declare const diffFile: (runner: HostRunner, news: HostFileProps, output: HostFileAttributes) => Promise<Diff>;
+export declare const reconcileFile: (runner: HostRunner, props: HostFileProps, output?: HostFileAttributes) => Promise<HostFileAttributes>;
+/** Remove the file. Idempotent. ⛔ Refuses a path that has since become a symlink or directory. */
+export declare const deleteFile: (runner: HostRunner, output: HostFileAttributes) => Promise<void>;
+export {};
+//# sourceMappingURL=host-file-lifecycle.d.ts.map

package/dist/launchd/host-file-lifecycle.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"host-file-lifecycle.d.ts","sourceRoot":"","sources":["../../src/launchd/host-file-lifecycle.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,cAAc,CAAC;AACzC,OAAO,EAEL,KAAK,kBAAkB,EACvB,KAAK,aAAa,EAEnB,MAAM,qBAAqB,CAAC;AAE7B,OAAO,EAAE,KAAK,UAAU,EAAgB,MAAM,aAAa,CAAC;AAE5D,KAAK,OAAO,GAAG;IACb,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAC;IAC3B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;CACvB,CAAC;AAOF,0EAA0E;AAC1E,eAAO,MAAM,WAAW,WAAkB,UAAU,SAAS,aAAa,KAAG,OAAO,CAAC,OAAO,CAqB3F,CAAC;AAEF,wGAAwG;AACxG,eAAO,MAAM,kBAAkB,WACrB,UAAU,QACZ,MAAM,KACX,OAAO,CAAC,kBAAkB,GAAG,SAAS,CAYxC,CAAC;AAQF,eAAO,MAAM,QAAQ,WACX,UAAU,QACZ,aAAa,UACX,kBAAkB,KACzB,OAAO,CAAC,IAAI,CAOd,CAAC;AAEF,eAAO,MAAM,aAAa,WAChB,UAAU,SACX,aAAa,WACX,kBAAkB,KAC1B,OAAO,CAAC,kBAAkB,CA0D5B,CAAC;AAEF,kGAAkG;AAClG,eAAO,MAAM,UAAU,WAAkB,UAAU,UAAU,kBAAkB,KAAG,OAAO,CAAC,IAAI,CAK7F,CAAC"}

package/dist/launchd/host-file.d.ts

@@ -0,0 +1,25 @@
+/**
+ * `Host.File` — one text file on the host, declared: content, mode, owner, group.
+ *
+ * - create / update — atomic write (temp file in the same directory, mode and owner set, rename),
+ *   skipped when the file already matches; then read back and compared.
+ * - read — lstat plus the SHA-256 of the bytes.
+ * - diff — declared SHA-256 against the stored and on-disk digest, plus mode and owner.
+ * - replace — only when `path` changes; create-before-delete.
+ * - delete — removes the file.
+ *
+ * ⛔ NEVER A SECRET — see host-file-form.ts. Secret files stay rendered by openbao-agent.
+ * ⚠️ NOTHING IS ADOPTED WITHOUT `--adopt`: a file already at the path reads as `Unowned`.
+ * ★ IT LIVES IN THE launchd SUBPATH because the two travel together: a Mac host stack declares a
+ *   daemon's config file and the daemon that reads it, through the same HostRunner.
+ */
+import { Resource } from 'alchemy';
+import * as Provider from 'alchemy/Provider';
+import type { HostFileAttributes, HostFileProps } from './host-file-form.ts';
+import { HostRunnerService } from './runner.ts';
+export type { HostFileAttributes, HostFileProps } from './host-file-form.ts';
+export interface HostFile extends Resource<'Host.File', HostFileProps, HostFileAttributes> {
+}
+export declare const HostFile: import("alchemy").ResourceClass<HostFile>;
+export declare const HostFileProvider: () => import("effect/Layer").Layer<Provider.Provider<HostFile>, never, HostRunnerService>;
+//# sourceMappingURL=host-file.d.ts.map

package/dist/launchd/host-file.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"host-file.d.ts","sourceRoot":"","sources":["../../src/launchd/host-file.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AACH,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAGnC,OAAO,KAAK,QAAQ,MAAM,kBAAkB,CAAC;AAG7C,OAAO,KAAK,EAAE,kBAAkB,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAE7E,OAAO,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAEhD,YAAY,EAAE,kBAAkB,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAE7E,MAAM,WAAW,QAAS,SAAQ,QAAQ,CAAC,WAAW,EAAE,aAAa,EAAE,kBAAkB,CAAC;CAAG;AAE7F,eAAO,MAAM,QAAQ,2CAAkC,CAAC;AAExD,eAAO,MAAM,gBAAgB,2FAgC1B,CAAC"}

package/dist/launchd/host-lookup.d.ts

@@ -0,0 +1,27 @@
+/**
+ * User and group lookups, as argv plus a parser — split out so the parsing is tested against the
+ * real output shapes without running anything.
+ *
+ * ★ macOS FIRST, getent ELSEWHERE. macOS has no `getent`; its directory service answers through
+ *   `dscacheutil`. Shape MEASURED 2026-09-21 on macOS 27.2 (read-only query):
+ *
+ *     name: someone
+ *     password: ********
+ *     uid: 501
+ *     gid: 20
+ *     dir: /Users/someone
+ *     shell: /bin/zsh
+ *
+ *   An unknown uid printed NOTHING and exited 0 — so "no record" is an empty parse, never an
+ *   exit code. `getent` exits 2 for an unknown key; that also parses as no record.
+ * ⛔ NEVER PARSE OR KEEP THE `password:` LINE. It is a placeholder on macOS, but a parser that
+ *   copies every field would carry a hash from any host where it is not.
+ */
+import type { HostUser } from './runner.ts';
+/** argv for looking up a user, by name or numeric id. */
+export declare const userQuery: (platform: string, nameOrId: string) => readonly string[];
+/** argv for looking up a group, by name or numeric id. */
+export declare const groupQuery: (platform: string, nameOrId: string) => readonly string[];
+export declare const parseUser: (platform: string, stdout: string) => HostUser | undefined;
+export declare const parseGroup: (platform: string, stdout: string) => number | undefined;
+//# sourceMappingURL=host-lookup.d.ts.map

package/dist/launchd/host-lookup.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"host-lookup.d.ts","sourceRoot":"","sources":["../../src/launchd/host-lookup.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AACH,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAI5C,yDAAyD;AACzD,eAAO,MAAM,SAAS,aAAc,MAAM,YAAY,MAAM,KAAG,SAAS,MAAM,EAU1C,CAAC;AAErC,0DAA0D;AAC1D,eAAO,MAAM,UAAU,aAAc,MAAM,YAAY,MAAM,KAAG,SAAS,MAAM,EAU5C,CAAC;AAsBpC,eAAO,MAAM,SAAS,aAAc,MAAM,UAAU,MAAM,KAAG,QAAQ,GAAG,SAkBvE,CAAC;AAEF,eAAO,MAAM,UAAU,aAAc,MAAM,UAAU,MAAM,KAAG,MAAM,GAAG,SAItE,CAAC"}

package/dist/launchd/index.d.ts

@@ -0,0 +1,21 @@
+/**
+ * launchd providers for Alchemy — declare a Mac host's jobs and their config files.
+ *
+ * ⛔ THIS BARREL IS THE PUBLIC API, AND IT IS DELIBERATELY SMALLER THAN THE DIRECTORY. The
+ *   lifecycle files, the launchctl parsers and the fake runner are internals; an `export *` would
+ *   publish them as API and make the next refactor a breaking change.
+ * ⛔ macOS HOSTS ONLY for LaunchdJob. HostFile and the runner work on any POSIX host, but the
+ *   subpath exists for the Mac: see docs/launchd.md for the cutover from nix-darwin.
+ */
+export type { HostFileAttributes, HostFileProps } from './host-file.ts';
+export { HostFile, HostFileProvider } from './host-file.ts';
+export type { CalendarInterval, KeepAlive, LaunchdDomain, LaunchdJobAttributes, LaunchdJobProps, } from './job.ts';
+export { LaunchdJob, LaunchdJobProvider } from './job.ts';
+export type { LocalRunnerOptions } from './local-runner.ts';
+export { localRunner } from './local-runner.ts';
+export type { PlistDict, PlistValue } from './plist.ts';
+export { PlistError, renderPlist } from './plist.ts';
+export { launchdProviders } from './providers.ts';
+export type { ExecResult, FileStat, HostRunner, HostUser, WriteOptions } from './runner.ts';
+export { HostRunnerService, canActAsRoot, hostRunnerLayer } from './runner.ts';
+//# sourceMappingURL=index.d.ts.map

package/dist/launchd/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/launchd/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,YAAY,EAAE,kBAAkB,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AACxE,OAAO,EAAE,QAAQ,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAC5D,YAAY,EACV,gBAAgB,EAChB,SAAS,EACT,aAAa,EACb,oBAAoB,EACpB,eAAe,GAChB,MAAM,UAAU,CAAC;AAClB,OAAO,EAAE,UAAU,EAAE,kBAAkB,EAAE,MAAM,UAAU,CAAC;AAC1D,YAAY,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AAC5D,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAChD,YAAY,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AACxD,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AACrD,OAAO,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAClD,YAAY,EAAE,UAAU,EAAE,QAAQ,EAAE,UAAU,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC5F,OAAO,EAAE,iBAAiB,EAAE,YAAY,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC"}