@knowzai/cli 0.1.0 → 0.2.0

package/dist/lib/peer-support.d.ts

@@ -0,0 +1,67 @@
+import type { FederationPeer } from '@knowzai/api-client';
+/**
+ * CLI_InstanceTransfer `knowz peer` support: session-JWT acquisition (R8),
+ * `ukz_` key-kind preflight (R9), federation error-code mapping (R10) and
+ * honest run polling (R12). Everything injectable, everything unit-testable.
+ */
+/** Mirrors the server's `PeerUserApiKeyRequired` copy — the server remains the backstop. */
+export declare const PEER_KEY_GUIDANCE = "Federation peers require a personal API key (ukz_). Mint one on the remote instance with POST /api/v1/users/api-key.";
+/** The peer credential is the key the LOCAL server presents TO the remote — personal keys only. */
+export declare function assertPeerKeyKind(key: string): void;
+export interface ResolvePeerKeyInput {
+    keyFlag?: string;
+    interactive: boolean;
+    env: Record<string, string | undefined>;
+    warn: (message: string) => void;
+    promptSecret?: (message: string) => Promise<string>;
+}
+/**
+ * Source the peer credential: `--key` (warned — argv can land in shell history;
+ * the value itself is already output-masked by `collectArgvSecrets`),
+ * `KNOWZ_PEER_API_KEY`, or a hidden prompt. The `ukz_` preflight runs BEFORE
+ * any HTTP call (R9).
+ */
+export declare function resolvePeerKey(input: ResolvePeerKeyInput): Promise<string>;
+export interface AcquirePeerBearerInput {
+    profileEmail?: string;
+    emailFlag?: string;
+    interactive: boolean;
+    env: Record<string, string | undefined>;
+    login: (creds: {
+        usernameOrEmail: string;
+        password: string;
+    }) => Promise<{
+        token: string;
+    }>;
+    promptPassword?: (message: string) => Promise<string>;
+    promptEmail?: (message: string) => Promise<string>;
+}
+/**
+ * Federation management is JWT/password-gated by the server (by design: human
+ * admin action) — the CLI's stored `X-Api-Key` cannot call it. The password
+ * comes from `KNOWZ_PASSWORD` or a hidden prompt; both it and the token are
+ * `registerSecret`-ed and held in memory only. A non-TTY run without
+ * `KNOWZ_PASSWORD` fails fast, before any network call.
+ */
+export declare function acquirePeerBearer(input: AcquirePeerBearerInput): Promise<string>;
+/** Map a federation refusal to an actionable follow-up hint, or undefined for unrelated errors. */
+export declare function describeFederationError(e: unknown): string | undefined;
+export interface PeerLister {
+    list(includeDisabled?: boolean): Promise<FederationPeer[]>;
+    get(id: string): Promise<FederationPeer>;
+}
+export declare function resolvePeerByRef(fed: PeerLister, ref: string): Promise<FederationPeer>;
+export declare function runStatusName(status: number | string): string;
+export declare function isTerminalRunStatus(status: number | string): boolean;
+/** Exit 0 ONLY on Succeeded/NoOp — the CLI trusts the server status and never re-interprets it (R12). */
+export declare function runExitOk(status: number | string): boolean;
+export interface RunLike {
+    status: number | string;
+    [k: string]: unknown;
+}
+/** Poll every `intervalMs` until terminal or `timeoutMs` (R12 — default 2 s / 600 s at the command). */
+export declare function waitForRun<T extends RunLike>(fetchRun: () => Promise<T>, opts: {
+    intervalMs: number;
+    timeoutMs: number;
+}): Promise<T>;
+//# sourceMappingURL=peer-support.d.ts.map

package/dist/lib/peer-support.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"peer-support.d.ts","sourceRoot":"","sources":["../../src/lib/peer-support.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAG1D;;;;GAIG;AAIH,4FAA4F;AAC5F,eAAO,MAAM,iBAAiB,yHAC0F,CAAC;AAEzH,mGAAmG;AACnG,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAInD;AAED,MAAM,WAAW,mBAAmB;IAClC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,OAAO,CAAC;IACrB,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC;IACxC,IAAI,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;IAChC,YAAY,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;CACrD;AAED;;;;;GAKG;AACH,wBAAsB,cAAc,CAAC,KAAK,EAAE,mBAAmB,GAAG,OAAO,CAAC,MAAM,CAAC,CAqBhF;AAID,MAAM,WAAW,sBAAsB;IACrC,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,OAAO,CAAC;IACrB,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC;IACxC,KAAK,EAAE,CAAC,KAAK,EAAE;QAAE,eAAe,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,KAAK,OAAO,CAAC;QAAE,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC5F,cAAc,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IACtD,WAAW,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;CACpD;AAED;;;;;;GAMG;AACH,wBAAsB,iBAAiB,CAAC,KAAK,EAAE,sBAAsB,GAAG,OAAO,CAAC,MAAM,CAAC,CA+BtF;AAmBD,mGAAmG;AACnG,wBAAgB,uBAAuB,CAAC,CAAC,EAAE,OAAO,GAAG,MAAM,GAAG,SAAS,CAetE;AAID,MAAM,WAAW,UAAU;IACzB,IAAI,CAAC,eAAe,CAAC,EAAE,OAAO,GAAG,OAAO,CAAC,cAAc,EAAE,CAAC,CAAC;IAC3D,GAAG,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,CAAC,CAAC;CAC1C;AAED,wBAAsB,gBAAgB,CAAC,GAAG,EAAE,UAAU,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,CAAC,CAQ5F;AAeD,wBAAgB,aAAa,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,MAAM,CAG7D;AAED,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAGpE;AAED,yGAAyG;AACzG,wBAAgB,SAAS,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAG1D;AAED,MAAM,WAAW,OAAO;IACtB,MAAM,EAAE,MAAM,GAAG,MAAM,CAAC;IACxB,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;CACtB;AAED,wGAAwG;AACxG,wBAAsB,UAAU,CAAC,CAAC,SAAS,OAAO,EAChD,QAAQ,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,EAC1B,IAAI,EAAE;IAAE,UAAU,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,GAC9C,OAAO,CAAC,CAAC,CAAC,CAaZ"}

package/dist/lib/peer-support.js

@@ -0,0 +1,154 @@
+import { KnowzError, ExitCode, registerSecret } from '@knowzai/core';
+import { ApiError } from '@knowzai/types';
+import { isGuid } from './vault.js';
+/**
+ * CLI_InstanceTransfer `knowz peer` support: session-JWT acquisition (R8),
+ * `ukz_` key-kind preflight (R9), federation error-code mapping (R10) and
+ * honest run polling (R12). Everything injectable, everything unit-testable.
+ */
+// --- R9 — key-kind preflight ---------------------------------------------------
+/** Mirrors the server's `PeerUserApiKeyRequired` copy — the server remains the backstop. */
+export const PEER_KEY_GUIDANCE = 'Federation peers require a personal API key (ukz_). Mint one on the remote instance with POST /api/v1/users/api-key.';
+/** The peer credential is the key the LOCAL server presents TO the remote — personal keys only. */
+export function assertPeerKeyKind(key) {
+    if (!key.startsWith('ukz_')) {
+        throw new KnowzError(PEER_KEY_GUIDANCE, ExitCode.Usage);
+    }
+}
+/**
+ * Source the peer credential: `--key` (warned — argv can land in shell history;
+ * the value itself is already output-masked by `collectArgvSecrets`),
+ * `KNOWZ_PEER_API_KEY`, or a hidden prompt. The `ukz_` preflight runs BEFORE
+ * any HTTP call (R9).
+ */
+export async function resolvePeerKey(input) {
+    let key = input.keyFlag;
+    if (key) {
+        input.warn('Passing --key on the command line can leak into shell history — prefer KNOWZ_PEER_API_KEY or the prompt.');
+    }
+    key ??= input.env.KNOWZ_PEER_API_KEY;
+    if (!key) {
+        if (!input.interactive || !input.promptSecret) {
+            throw new KnowzError('Provide the peer API key via KNOWZ_PEER_API_KEY (or --key), or run from a terminal to be prompted.', ExitCode.Auth);
+        }
+        key = await input.promptSecret('Peer API key (ukz_…, input is hidden)');
+    }
+    if (!key)
+        throw new KnowzError('A peer API key is required.', ExitCode.Auth);
+    registerSecret(key);
+    assertPeerKeyKind(key); // R9 — before any HTTP call
+    return key;
+}
+/**
+ * Federation management is JWT/password-gated by the server (by design: human
+ * admin action) — the CLI's stored `X-Api-Key` cannot call it. The password
+ * comes from `KNOWZ_PASSWORD` or a hidden prompt; both it and the token are
+ * `registerSecret`-ed and held in memory only. A non-TTY run without
+ * `KNOWZ_PASSWORD` fails fast, before any network call.
+ */
+export async function acquirePeerBearer(input) {
+    let email = input.emailFlag ?? input.profileEmail;
+    if (!email) {
+        if (!input.interactive || !input.promptEmail) {
+            throw new KnowzError('Peer commands sign in with your account email + password (federation management is JWT-gated ' +
+                'server-side). No email found — pass --email or set one with `knowz config set email <you>`.', ExitCode.Auth);
+        }
+        email = await input.promptEmail('Account email');
+    }
+    let password = input.env.KNOWZ_PASSWORD;
+    if (!password) {
+        if (!input.interactive || !input.promptPassword) {
+            throw new KnowzError('Federation management is JWT/password-gated by the server (a deliberate human-admin gate) — the ' +
+                'stored API key cannot call it. Set KNOWZ_PASSWORD for non-interactive runs, or run from a terminal ' +
+                'to be prompted.', ExitCode.Auth);
+        }
+        password = await input.promptPassword(`Password for ${email} (input is hidden)`);
+    }
+    if (!password)
+        throw new KnowzError('A password is required for peer commands.', ExitCode.Auth);
+    registerSecret(password);
+    const { token } = await input.login({ usernameOrEmail: email, password });
+    registerSecret(token);
+    return token;
+}
+// --- R10 — error-code mapping --------------------------------------------------
+const CODE_HINTS = {
+    PeerSlugTaken: 'That slug is already used by another peer — pick a different one (see `knowz peer list --all`).',
+    PeerKeyInvalid: 'The remote instance rejected the API key — mint a fresh ukz_ key there and run `knowz peer rotate-key`.',
+    PeerUserApiKeyRequired: PEER_KEY_GUIDANCE,
+    PeerKeyMissingUserIdClaim: PEER_KEY_GUIDANCE,
+    PeerNetworkFailed: 'Could not reach the remote instance — check --url, DNS/firewall, and that it is running.',
+    PeerSchemaUnavailable: 'The remote reached, but its sync schema endpoint is unavailable — check the remote version.',
+    PeerSchemaProbeFailed: 'The remote schema probe failed — check --url and the remote version.',
+    VaultLinkDuplicate: 'An identical vault link already exists — see `knowz peer links`.',
+    VaultLinkInactive: 'That vault link is inactive — re-create it with `knowz peer link`.',
+    PeerDisabled: 'The peer is disabled — re-enable it before starting runs.',
+    PreviewRequired: 'The server requires a preview first for this operation.',
+    RowVersionMismatch: 'The peer changed since it was read — re-run the command (it re-reads the latest version).',
+};
+/** Map a federation refusal to an actionable follow-up hint, or undefined for unrelated errors. */
+export function describeFederationError(e) {
+    if (!(e instanceof ApiError))
+        return undefined;
+    const code = e.messages[0] ?? '';
+    if (code === 'RunAlreadyInFlight') {
+        const existing = e.data?.existingRunId;
+        return (`A run is already in flight${existing ? ` (run ${existing})` : ''} — ` +
+            `watch it with \`knowz peer run <peerRef> ${existing ?? '<runId>'}\`.`);
+    }
+    if (CODE_HINTS[code])
+        return CODE_HINTS[code];
+    if (e.status === 403 && e.messages.some((m) => m.includes('Federation is disabled'))) {
+        return 'Federation is off for this tenant — enable the integrations.enableFederation flag first.';
+    }
+    return undefined;
+}
+export async function resolvePeerByRef(fed, ref) {
+    if (isGuid(ref))
+        return fed.get(ref);
+    const peers = await fed.list(true); // slugs must resolve even for disabled peers
+    const match = peers.find((p) => p.slug.toLowerCase() === ref.toLowerCase());
+    if (!match) {
+        throw new KnowzError(`No federation peer with slug or id '${ref}'.`, ExitCode.NotFound);
+    }
+    return match;
+}
+// --- R12 — honest run status ---------------------------------------------------
+/** FederationSyncRunStatus (Knowz.Domain.Enums) — numeric wire values, name-tolerant. */
+const RUN_STATUS_NAMES = {
+    0: 'Pending',
+    1: 'Running',
+    2: 'Succeeded',
+    3: 'PartialFailure',
+    4: 'Failed',
+    5: 'Cancelled',
+    6: 'NoOp',
+};
+export function runStatusName(status) {
+    if (typeof status === 'number')
+        return RUN_STATUS_NAMES[status] ?? `Unknown(${status})`;
+    return status;
+}
+export function isTerminalRunStatus(status) {
+    const name = runStatusName(status);
+    return ['Succeeded', 'PartialFailure', 'Failed', 'Cancelled', 'NoOp'].includes(name);
+}
+/** Exit 0 ONLY on Succeeded/NoOp — the CLI trusts the server status and never re-interprets it (R12). */
+export function runExitOk(status) {
+    const name = runStatusName(status);
+    return name === 'Succeeded' || name === 'NoOp';
+}
+/** Poll every `intervalMs` until terminal or `timeoutMs` (R12 — default 2 s / 600 s at the command). */
+export async function waitForRun(fetchRun, opts) {
+    const deadline = Date.now() + opts.timeoutMs;
+    for (;;) {
+        const run = await fetchRun();
+        if (isTerminalRunStatus(run.status))
+            return run;
+        if (Date.now() >= deadline) {
+            throw new KnowzError(`Timed out waiting for the run to finish (last status: ${runStatusName(run.status)}).`, ExitCode.Api);
+        }
+        await new Promise((r) => setTimeout(r, opts.intervalMs));
+    }
+}
+//# sourceMappingURL=peer-support.js.map

package/dist/lib/peer-support.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"peer-support.js","sourceRoot":"","sources":["../../src/lib/peer-support.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AACrE,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAE1C,OAAO,EAAE,MAAM,EAAE,MAAM,YAAY,CAAC;AAEpC;;;;GAIG;AAEH,kFAAkF;AAElF,4FAA4F;AAC5F,MAAM,CAAC,MAAM,iBAAiB,GAC5B,sHAAsH,CAAC;AAEzH,mGAAmG;AACnG,MAAM,UAAU,iBAAiB,CAAC,GAAW;IAC3C,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;QAC5B,MAAM,IAAI,UAAU,CAAC,iBAAiB,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC1D,CAAC;AACH,CAAC;AAUD;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,KAA0B;IAC7D,IAAI,GAAG,GAAG,KAAK,CAAC,OAAO,CAAC;IACxB,IAAI,GAAG,EAAE,CAAC;QACR,KAAK,CAAC,IAAI,CACR,0GAA0G,CAC3G,CAAC;IACJ,CAAC;IACD,GAAG,KAAK,KAAK,CAAC,GAAG,CAAC,kBAAkB,CAAC;IACrC,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,IAAI,CAAC,KAAK,CAAC,WAAW,IAAI,CAAC,KAAK,CAAC,YAAY,EAAE,CAAC;YAC9C,MAAM,IAAI,UAAU,CAClB,oGAAoG,EACpG,QAAQ,CAAC,IAAI,CACd,CAAC;QACJ,CAAC;QACD,GAAG,GAAG,MAAM,KAAK,CAAC,YAAY,CAAC,uCAAuC,CAAC,CAAC;IAC1E,CAAC;IACD,IAAI,CAAC,GAAG;QAAE,MAAM,IAAI,UAAU,CAAC,6BAA6B,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC;IAC7E,cAAc,CAAC,GAAG,CAAC,CAAC;IACpB,iBAAiB,CAAC,GAAG,CAAC,CAAC,CAAC,4BAA4B;IACpD,OAAO,GAAG,CAAC;AACb,CAAC;AAcD;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,KAA6B;IACnE,IAAI,KAAK,GAAG,KAAK,CAAC,SAAS,IAAI,KAAK,CAAC,YAAY,CAAC;IAClD,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,IAAI,CAAC,KAAK,CAAC,WAAW,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC;YAC7C,MAAM,IAAI,UAAU,CAClB,+FAA+F;gBAC7F,6FAA6F,EAC/F,QAAQ,CAAC,IAAI,CACd,CAAC;QACJ,CAAC;QACD,KAAK,GAAG,MAAM,KAAK,CAAC,WAAW,CAAC,eAAe,CAAC,CAAC;IACnD,CAAC;IAED,IAAI,QAAQ,GAAG,KAAK,CAAC,GAAG,CAAC,cAAc,CAAC;IACxC,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,IAAI,CAAC,KAAK,CAAC,WAAW,IAAI,CAAC,KAAK,CAAC,cAAc,EAAE,CAAC;YAChD,MAAM,IAAI,UAAU,CAClB,kGAAkG;gBAChG,qGAAqG;gBACrG,iBAAiB,EACnB,QAAQ,CAAC,IAAI,CACd,CAAC;QACJ,CAAC;QACD,QAAQ,GAAG,MAAM,KAAK,CAAC,cAAc,CAAC,gBAAgB,KAAK,oBAAoB,CAAC,CAAC;IACnF,CAAC;IACD,IAAI,CAAC,QAAQ;QAAE,MAAM,IAAI,UAAU,CAAC,2CAA2C,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC;IAChG,cAAc,CAAC,QAAQ,CAAC,CAAC;IAEzB,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,KAAK,CAAC,KAAK,CAAC,EAAE,eAAe,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;IAC1E,cAAc,CAAC,KAAK,CAAC,CAAC;IACtB,OAAO,KAAK,CAAC;AACf,CAAC;AAED,kFAAkF;AAElF,MAAM,UAAU,GAA2B;IACzC,aAAa,EAAE,iGAAiG;IAChH,cAAc,EAAE,yGAAyG;IACzH,sBAAsB,EAAE,iBAAiB;IACzC,yBAAyB,EAAE,iBAAiB;IAC5C,iBAAiB,EAAE,0FAA0F;IAC7G,qBAAqB,EAAE,6FAA6F;IACpH,qBAAqB,EAAE,sEAAsE;IAC7F,kBAAkB,EAAE,kEAAkE;IACtF,iBAAiB,EAAE,oEAAoE;IACvF,YAAY,EAAE,2DAA2D;IACzE,eAAe,EAAE,yDAAyD;IAC1E,kBAAkB,EAAE,2FAA2F;CAChH,CAAC;AAEF,mGAAmG;AACnG,MAAM,UAAU,uBAAuB,CAAC,CAAU;IAChD,IAAI,CAAC,CAAC,CAAC,YAAY,QAAQ,CAAC;QAAE,OAAO,SAAS,CAAC;IAC/C,MAAM,IAAI,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IACjC,IAAI,IAAI,KAAK,oBAAoB,EAAE,CAAC;QAClC,MAAM,QAAQ,GAAI,CAAC,CAAC,IAA+C,EAAE,aAAa,CAAC;QACnF,OAAO,CACL,6BAA6B,QAAQ,CAAC,CAAC,CAAC,SAAS,QAAQ,GAAG,CAAC,CAAC,CAAC,EAAE,KAAK;YACtE,4CAA4C,QAAQ,IAAI,SAAS,KAAK,CACvE,CAAC;IACJ,CAAC;IACD,IAAI,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,UAAU,CAAC,IAAI,CAAC,CAAC;IAC9C,IAAI,CAAC,CAAC,MAAM,KAAK,GAAG,IAAI,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,wBAAwB,CAAC,CAAC,EAAE,CAAC;QACrF,OAAO,0FAA0F,CAAC;IACpG,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AASD,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,GAAe,EAAE,GAAW;IACjE,IAAI,MAAM,CAAC,GAAG,CAAC;QAAE,OAAO,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACrC,MAAM,KAAK,GAAG,MAAM,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,6CAA6C;IACjF,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,GAAG,CAAC,WAAW,EAAE,CAAC,CAAC;IAC5E,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,IAAI,UAAU,CAAC,uCAAuC,GAAG,IAAI,EAAE,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAC1F,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,kFAAkF;AAElF,yFAAyF;AACzF,MAAM,gBAAgB,GAA2B;IAC/C,CAAC,EAAE,SAAS;IACZ,CAAC,EAAE,SAAS;IACZ,CAAC,EAAE,WAAW;IACd,CAAC,EAAE,gBAAgB;IACnB,CAAC,EAAE,QAAQ;IACX,CAAC,EAAE,WAAW;IACd,CAAC,EAAE,MAAM;CACV,CAAC;AAEF,MAAM,UAAU,aAAa,CAAC,MAAuB;IACnD,IAAI,OAAO,MAAM,KAAK,QAAQ;QAAE,OAAO,gBAAgB,CAAC,MAAM,CAAC,IAAI,WAAW,MAAM,GAAG,CAAC;IACxF,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,MAAuB;IACzD,MAAM,IAAI,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC;IACnC,OAAO,CAAC,WAAW,EAAE,gBAAgB,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;AACvF,CAAC;AAED,yGAAyG;AACzG,MAAM,UAAU,SAAS,CAAC,MAAuB;IAC/C,MAAM,IAAI,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC;IACnC,OAAO,IAAI,KAAK,WAAW,IAAI,IAAI,KAAK,MAAM,CAAC;AACjD,CAAC;AAOD,wGAAwG;AACxG,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,QAA0B,EAC1B,IAA+C;IAE/C,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC;IAC7C,SAAS,CAAC;QACR,MAAM,GAAG,GAAG,MAAM,QAAQ,EAAE,CAAC;QAC7B,IAAI,mBAAmB,CAAC,GAAG,CAAC,MAAM,CAAC;YAAE,OAAO,GAAG,CAAC;QAChD,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,QAAQ,EAAE,CAAC;YAC3B,MAAM,IAAI,UAAU,CAClB,yDAAyD,aAAa,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EACtF,QAAQ,CAAC,GAAG,CACb,CAAC;QACJ,CAAC;QACD,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC;IAC3D,CAAC;AACH,CAAC"}

package/dist/lib/platform-frontdoor-runtime.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"platform-frontdoor-runtime.d.ts","sourceRoot":"","sources":["../../src/lib/platform-frontdoor-runtime.ts"],"names":[],"mappings":"AAAA,OAAO,EAIL,KAAK,eAAe,EACrB,MAAM,eAAe,CAAC;AAKvB,OAAO,EAA2B,KAAK,aAAa,EAAE,MAAM,yBAAyB,CAAC;AACtF,OAAO,EACL,KAAK,mBAAmB,EACxB,KAAK,oBAAoB,EAG1B,MAAM,0BAA0B,CAAC;AAOlC,OAAO,EAIL,KAAK,4BAA4B,EAClC,MAAM,eAAe,CAAC;AACvB,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AAE1D,OAAO,KAAK,EAAE,iCAAiC,EAAE,MAAM,yBAAyB,CAAC;AAEjF,MAAM,WAAW,+BAA+B;IAC9C,KAAK,EAAE,eAAe,CAAC;IACvB,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC,CAAC;IAClD,KAAK,EAAE,OAAO,CAAC;IACf,KAAK,EAAE,OAAO,CAAC;IACf,gBAAgB,EAAE,OAAO,CAAC;IAC1B,IAAI,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAC7B,oFAAoF;IACpF,qBAAqB,CAAC,EAAE,OAAO,CAAC;CACjC;AAmGD,wEAAwE;AACxE,wBAAsB,sBAAsB,CAC1C,MAAM,EAAE,MAAM,EACd,UAAU,EAAE,MAAM,EAClB,KAAK,EAAE,mBAAmB,EAC1B,OAAO,GAAE,OAAO,KAAa,GAC5B,OAAO,CAAC,oBAAoB,CAAC,CA6B/B;AAuBD,4FAA4F;AAC5F,wBAAsB,gCAAgC,CAAC,KAAK,EAAE;IAC5D,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,YAAY,CAAC;IACrB,GAAG,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC,CAAC;CACnD,GAAG,OAAO,CAAC,4BAA4B,GAAG,IAAI,CAAC,CA0C/C;AAED,wBAAsB,2BAA2B,CAAC,KAAK,EAAE;IACvD,aAAa,EAAE,MAAM,CAAC;IACtB,UAAU,EAAE,4BAA4B,CAAC;IACzC,OAAO,CAAC,EAAE,OAAO,KAAK,CAAC;CACxB,GAAG,OAAO,CAAC,iCAAiC,CAAC,CAwB7C;AAED,uFAAuF;AACvF,wBAAgB,2BAA2B,CAAC,OAAO,EAAE,+BAA+B,GAAG,aAAa,CAgGnG"}
+{"version":3,"file":"platform-frontdoor-runtime.d.ts","sourceRoot":"","sources":["../../src/lib/platform-frontdoor-runtime.ts"],"names":[],"mappings":"AAAA,OAAO,EAIL,KAAK,eAAe,EACrB,MAAM,eAAe,CAAC;AAKvB,OAAO,EAA2B,KAAK,aAAa,EAAE,MAAM,yBAAyB,CAAC;AACtF,OAAO,EACL,KAAK,mBAAmB,EACxB,KAAK,oBAAoB,EAG1B,MAAM,0BAA0B,CAAC;AAOlC,OAAO,EAIL,KAAK,4BAA4B,EAClC,MAAM,eAAe,CAAC;AACvB,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AAE1D,OAAO,KAAK,EAAE,iCAAiC,EAAE,MAAM,yBAAyB,CAAC;AAEjF,MAAM,WAAW,+BAA+B;IAC9C,KAAK,EAAE,eAAe,CAAC;IACvB,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC,CAAC;IAClD,KAAK,EAAE,OAAO,CAAC;IACf,KAAK,EAAE,OAAO,CAAC;IACf,gBAAgB,EAAE,OAAO,CAAC;IAC1B,IAAI,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAC7B,oFAAoF;IACpF,qBAAqB,CAAC,EAAE,OAAO,CAAC;CACjC;AAyGD,wEAAwE;AACxE,wBAAsB,sBAAsB,CAC1C,MAAM,EAAE,MAAM,EACd,UAAU,EAAE,MAAM,EAClB,KAAK,EAAE,mBAAmB,EAC1B,OAAO,GAAE,OAAO,KAAa,GAC5B,OAAO,CAAC,oBAAoB,CAAC,CA6B/B;AAuBD,4FAA4F;AAC5F,wBAAsB,gCAAgC,CAAC,KAAK,EAAE;IAC5D,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,YAAY,CAAC;IACrB,GAAG,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC,CAAC;CACnD,GAAG,OAAO,CAAC,4BAA4B,GAAG,IAAI,CAAC,CA0C/C;AAED,wBAAsB,2BAA2B,CAAC,KAAK,EAAE;IACvD,aAAa,EAAE,MAAM,CAAC;IACtB,UAAU,EAAE,4BAA4B,CAAC;IACzC,OAAO,CAAC,EAAE,OAAO,KAAK,CAAC;CACxB,GAAG,OAAO,CAAC,iCAAiC,CAAC,CAwB7C;AAED,uFAAuF;AACvF,wBAAgB,2BAA2B,CAAC,OAAO,EAAE,+BAA+B,GAAG,aAAa,CAgGnG"}

package/dist/lib/platform-frontdoor-runtime.js

@@ -26,6 +26,8 @@ async function reuseExistingProfile(store, profileName, apiUrl) {
             saveConfig,
             validateKey: (apiKey) => createApiClient({ baseUrl: apiUrl }).auth.validateKey({ apiKey }),
             register: (request) => createApiClient({ baseUrl: apiUrl }).auth.register(request),
+            signIn: (request) => createApiClient({ baseUrl: apiUrl }).auth.login(request),
+            createApiKey: (request, token) => createApiClient({ baseUrl: apiUrl }).apiKeys.create(request, { token }),
         });
         return { tenantId: result.tenantId };
     }
@@ -70,6 +72,8 @@ function onboardingDeps(store, apiUrl, superAdminPassphrase, quiet, allowCredent
             saveConfig,
             validateKey: (apiKey) => createApiClient({ baseUrl: apiUrl }).auth.validateKey({ apiKey }),
             register: (request) => createApiClient({ baseUrl: apiUrl }).auth.register(request),
+            signIn: (request) => createApiClient({ baseUrl: apiUrl }).auth.login(request),
+            createApiKey: (request, token) => createApiClient({ baseUrl: apiUrl }).apiKeys.create(request, { token }),
         }),
         apiClientFor: (profileName) => seedClient(store, apiUrl, profileName),
         openBrowser: (url) => openBrowser(url),

package/dist/lib/platform-frontdoor-runtime.js.map

@@ -1 +1 @@
-{"version":3,"file":"platform-frontdoor-runtime.js","sourceRoot":"","sources":["../../src/lib/platform-frontdoor-runtime.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,UAAU,EACV,UAAU,EACV,+BAA+B,GAEhC,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAC/C,OAAO,EAAE,eAAe,EAAuB,MAAM,qBAAqB,CAAC;AAC3E,OAAO,EAAE,iBAAiB,EAAE,oBAAoB,EAAE,MAAM,uBAAuB,CAAC;AAChF,OAAO,EAAE,sBAAsB,EAAE,MAAM,+BAA+B,CAAC;AACvE,OAAO,EAAE,uBAAuB,EAAsB,MAAM,yBAAyB,CAAC;AAOtF,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAC3C,OAAO,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAC1C,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC3C,OAAO,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAC;AACvD,OAAO,EAAE,aAAa,EAAE,MAAM,8BAA8B,CAAC;AAC7D,OAAO,EAAE,wBAAwB,EAAE,MAAM,8BAA8B,CAAC;AACxE,OAAO,EACL,iBAAiB,EACjB,yBAAyB,EACzB,iBAAiB,GAElB,MAAM,eAAe,CAAC;AAEvB,OAAO,EAAE,+BAA+B,EAAE,MAAM,gCAAgC,CAAC;AAejF,SAAS,IAAI,CAAC,KAAc,EAAE,IAA4B;IACxD,OAAO,KAAK,CAAC,CAAC,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AACjC,CAAC;AAED,KAAK,UAAU,oBAAoB,CACjC,KAAsB,EACtB,WAAmB,EACnB,MAAc;IAEd,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC;IAClD,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IACzB,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,YAAY,CAC/B,EAAE,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,IAAI,EAAE,aAAa,EAAE,GAAG,EAAE,MAAM,EAAE,EAClE;YACE,KAAK;YACL,MAAM,EAAE,UAAU,EAAE;YACpB,UAAU;YACV,WAAW,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,eAAe,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;YAC1F,QAAQ,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,eAAe,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC;SACnF,CACF,CAAC;QACF,OAAO,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC;IACvC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,UAAU,CAAC,KAAsB,EAAE,MAAc,EAAE,WAAmB;IAC7E,IAAI,MAA2C,CAAC;IAChD,MAAM,MAAM,GAAG,GAA4B,EAAE;QAC3C,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,GAAG,KAAK,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CACpD,eAAe,CAAC;gBACd,OAAO,EAAE,MAAM;gBACf,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,WAAW,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;aAC1E,CAAC,CACH,CAAC;QACJ,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC,CAAC;IACF,OAAO;QACL,MAAM,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC,MAAM,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE;QAC9E,SAAS,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC,MAAM,MAAM,EAAE,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE;QACpF,aAAa,EAAE,KAAK,IAAI,EAAE;YACxB,MAAM,CAAC,MAAM,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,uCAAuC,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC;QACjG,CAAC;KACF,CAAC;AACJ,CAAC;AAED,SAAS,cAAc,CACrB,KAAsB,EACtB,MAAc,EACd,oBAAwC,EACxC,KAAc,EACd,qBAA8B,EAC9B,gBAAyB,EACzB,IAA4B;IAE5B,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IACvC,OAAO;QACL,KAAK,EAAE,KAAK,IAAI,EAAE;YAChB,IAAI,CAAC;gBACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,eAAe,CAAC,CAAC;gBACrD,OAAO,QAAQ,CAAC,EAAE,CAAC;YACrB,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,KAAK,CAAC;YACf,CAAC;QACH,CAAC;QACD,YAAY,EAAE,CAAC,UAAU,EAAE,EAAE,CAC3B,YAAY,CAAC,UAAU,EAAE;YACvB,KAAK;YACL,MAAM,EAAE,UAAU,EAAE;YACpB,UAAU;YACV,WAAW,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,eAAe,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;YAC1F,QAAQ,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,eAAe,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC;SACnF,CAAC;QACJ,YAAY,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,MAAM,EAAE,WAAW,CAAC;QACrE,WAAW,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,WAAW,CAAC,GAAG,CAAC;QACtC,GAAG,EAAE,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC;QACtB,WAAW,EAAE,qBAAqB,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,EAAE,GAAE,CAAC;QACjE,cAAc,EAAE,oBAAoB;YAClC,CAAC,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,sBAAsB,CAAC,MAAM,EAAE,oBAAoB,EAAE,KAAK,CAAC;YACxE,CAAC,CAAC,SAAS;QACb,aAAa,EAAE,gBAAgB;YAC7B,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE;gBACf,IAAI,CAAC;oBACH,MAAM,MAAM,CAAC,aAAa,EAAE,EAAE,CAAC;oBAC/B,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;gBACtB,CAAC;gBAAC,MAAM,CAAC;oBACP,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC;gBACvB,CAAC;YACH,CAAC;YACH,CAAC,CAAC,SAAS;KACd,CAAC;AACJ,CAAC;AAED,wEAAwE;AACxE,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,MAAc,EACd,UAAkB,EAClB,KAA0B,EAC1B,UAAwB,KAAK;IAE7B,cAAc,CAAC,UAAU,CAAC,CAAC;IAC3B,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,GAAG,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,yBAAyB,EAAE;YACpF,MAAM,EAAE,MAAM;YACd,QAAQ,EAAE,QAAQ;YAClB,OAAO,EAAE;gBACP,cAAc,EAAE,kBAAkB;gBAClC,kBAAkB,EAAE,UAAU;aAC/B;YACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC;SAC5B,CAAC,CAAC;QACH,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG;YAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;QACzD,IAAI,CAAC,QAAQ,CAAC,EAAE;YAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;QAC7C,IAAI,MAAe,CAAC;QACpB,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAuD,CAAC;YACxF,MAAM,GAAG,IAAI,CAAC,IAAI,EAAE,MAAM,IAAI,IAAI,CAAC,MAAM,CAAC;QAC5C,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC;QACjC,CAAC;QACD,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;YAC5D,cAAc,CAAC,MAAM,CAAC,CAAC;YACvB,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC;QACvC,CAAC;QACD,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC;IACjC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;IAC7B,CAAC;AACH,CAAC;AAED,MAAM,kBAAkB,GACtB,iEAAiE,CAAC;AAEpE,SAAS,eAAe,CACtB,UAAmB,EACnB,cAAuB;IAEvB,IACE,OAAO,UAAU,KAAK,QAAQ;QAC9B,CAAC,+BAA+B,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC,CAAC,EAAE;QACtD,OAAO,cAAc,KAAK,QAAQ;QAClC,CAAC,kBAAkB,CAAC,IAAI,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC,EAC/C,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO;QACL,UAAU,EAAE,UAAU,CAAC,IAAI,EAAE;QAC7B,cAAc,EAAE,cAAc,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE;KACpD,CAAC;AACJ,CAAC;AAED,4FAA4F;AAC5F,MAAM,CAAC,KAAK,UAAU,gCAAgC,CAAC,KAItD;IACC,MAAM,eAAe,GAAG,eAAe,CACrC,KAAK,CAAC,GAAG,CAAC,kCAAkC,EAC5C,KAAK,CAAC,GAAG,CAAC,+BAA+B,CAC1C,CAAC;IACF,IAAI,eAAe;QAAE,OAAO,eAAe,CAAC;IAE5C,MAAM,OAAO,GAAG,KAAK,CAAC,MAAM,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC;IACvE,MAAM,MAAM,GAAG,GAAG,KAAK,CAAC,WAAW,0BAA0B,CAAC;IAC9D,MAAM,iBAAiB,GAAG,KAAK,CAAC,MAAM,CAAC,YAAY,EAAE,GAAG,CAAC;IACzD,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,iBAAiB,CACvD,OAAO,EACP,CAAC,QAAQ,EAAE,SAAS,EAAE,MAAM,CAAC,EAC7B;QACE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE;QAClB,KAAK,EAAE,KAAK;QACZ,GAAG,CAAC,iBAAiB,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,iBAAiB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACzD,CACF,CAAC,CAAC;IACH,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACxC,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,iBAAiB,CAAC,OAAO,EAAE;QAC9D,KAAK;QACL,MAAM;QACN,IAAI;QACJ,GAAG,MAAM,eAAe;QACxB,QAAQ;QACR,IAAI;QACJ,IAAI;QACJ,kFAAkF;KACnF,EAAE;QACD,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE;QAClB,KAAK,EAAE,KAAK;QACZ,GAAG,CAAC,iBAAiB,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,iBAAiB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACzD,CAAC,CAAC,CAAC;IACJ,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IACvD,MAAM,CAAC,cAAc,EAAE,GAAG,SAAS,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACxF,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAiC,CAAC;QAClF,OAAO,eAAe,CAAC,cAAc,EAAE,QAAQ,CAAC,cAAc,CAAC,CAAC;IAClE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAAC,KAIjD;IACC,MAAM,aAAa,GAAG,yBAAyB,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;IACrE,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CACvB,GAAG,KAAK,CAAC,UAAU,CAAC,cAAc,IAAI,KAAK,CAAC,UAAU,CAAC,UAAU,EAAE,EACnE,MAAM,CACP,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACrB,cAAc,CAAC,KAAK,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;IAC5C,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,CAAC,KAAK,CAAC,OAAO,IAAI,KAAK,CAAC,CAC7C,GAAG,aAAa,8CAA8C,EAC9D;YACE,MAAM,EAAE,KAAK;YACb,QAAQ,EAAE,QAAQ;YAClB,OAAO,EAAE;gBACP,MAAM,EAAE,kBAAkB;gBAC1B,aAAa,EAAE,SAAS,KAAK,EAAE;aAChC;YACD,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC;SACpC,CACF,CAAC;QACF,OAAO,EAAE,IAAI,EAAE,eAAe,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC;IAC5D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,IAAI,EAAE,mBAAmB,EAAE,CAAC;IACvC,CAAC;AACH,CAAC;AAED,uFAAuF;AACvF,MAAM,UAAU,2BAA2B,CAAC,OAAwC;IAClF,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,KAAK,EAAE,KAAK,EAAE,gBAAgB,EAAE,IAAI,EAAE,GAAG,OAAO,CAAC;IAC1E,OAAO;QACL,GAAG;QACH,GAAG;QACH,KAAK;QACL,MAAM,EAAE,sBAAsB,EAAE;QAChC,UAAU,EAAE,KAAK,CAAC,CAAC,CAAC,GAAoB,EAAE,CAAC,YAAY,CAAC,uCAAuC,CAAC,CAAC,CAAC,CAAC,SAAS;QAC5G,mBAAmB,EAAE,uBAAuB,EAAE;QAC9C,UAAU;QACV,UAAU;QACV,MAAM,EAAE,iBAAiB;QACzB,iBAAiB,EAAE,CAAC,MAAM,EAAE,iBAAiB,EAAE,EAAE,CAC/C,cAAc,CACZ,KAAK,EACL,MAAM,EACN,iBAAiB,EAAE,oBAAoB,EACvC,KAAK,EACL,OAAO,CAAC,qBAAqB,KAAK,KAAK,EACvC,gBAAgB,EAChB,IAAI,CACL;QACH,oBAAoB,EAAE,CAAC,WAAW,EAAE,MAAM,EAAE,EAAE,CAAC,oBAAoB,CAAC,KAAK,EAAE,WAAW,EAAE,MAAM,CAAC;QAC/F,oBAAoB,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;YAClC,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;gBAChC,OAAO,EAAE,EAAE,MAAM,EAAE,kBAAkB,EAAE;gBACvC,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC;aACpC,CAAC,CAAC;YACH,IAAI,CAAC,QAAQ,CAAC,EAAE;gBAAE,MAAM,IAAI,+BAA+B,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;YAC7E,OAAO,QAAQ,CAAC,IAAI,EAAE,CAAC;QACzB,CAAC;QACD,oBAAoB,EAAE,CAAC,EAAE,WAAW,EAAE,MAAM,EAAE,EAAE,EAAE,CAChD,gCAAgC,CAAC,EAAE,WAAW,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;QAChE,oBAAoB,EAAE,KAAK,EAAE,EAAE,WAAW,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,EAAE,EAAE,EAAE;YAChF,MAAM,MAAM,GAAG,MAAM,iBAAiB,CAAC,aAAa,EAAE;gBACpD,KAAK,EAAE,UAAU,CAAC,KAAK;gBACvB,MAAM,EAAE,iBAAiB;gBACzB,WAAW;gBACX,GAAG,EAAE,IAAI,CAAC,GAAG;gBACb,KAAK,EAAE,EAAE,CAAC,EAAE,CAAC,IAAI,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;gBAC5D,IAAI,EAAE,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC;aACxB,EAAE,EAAE,gBAAgB,EAAE,WAAW,EAAE,CAAC,CAAC;YACtC,cAAc,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;YAClC,MAAM,iBAAiB,CAAC;gBACtB,KAAK,EAAE,oBAAoB,CAAC,WAAW,EAAE,SAAS,CAAC;gBACnD,WAAW;gBACX,aAAa;gBACb,UAAU,EAAE,MAAM,CAAC,UAAU;gBAC7B,cAAc,EAAE,MAAM,CAAC,cAAc;gBACrC,KAAK,EAAE,UAAU;gBACjB,MAAM;gBACN,MAAM,EAAE,iBAAiB;aAC1B,CAAC,CAAC;YACH,OAAO,MAAM,CAAC;QAChB,CAAC;QACD,2BAA2B,EAAE,CAAC,EAAE,aAAa,EAAE,UAAU,EAAE,EAAE,EAAE,CAC7D,2BAA2B,CAAC,EAAE,aAAa,EAAE,UAAU,EAAE,CAAC;QAC5D,mBAAmB,EAAE,KAAK,EAAE,cAAc,EAAE,EAAE;YAC5C,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,MAAM,CAAC,mBAAmB,CAAC,CAAC;YACtD,OAAO,OAAO,CAAC;gBACb,OAAO,EAAE,IAAI;gBACb,OAAO,EAAE,uBAAuB,cAAc,sCAAsC;aACrF,CAAC,CAAC;QACL,CAAC;QACD,GAAG,EAAE,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC;QACtB,SAAS,EAAE,CAAC,cAAc,EAAE,EAAE,CAAC,YAAY,CAAC,cAAc,EAAE,EAAE,MAAM,EAAE,iBAAiB,EAAE,CAAC;QAC1F,aAAa,EAAE,CAAC,SAAS,EAAE,EAAE,CAAC,aAAa,CAAC,SAAS,CAAC;QACtD,eAAe,EAAE,KAAK,EAAE,gBAAgB,EAAE,EAAE;YAC1C,MAAM,MAAM,GAAG,MAAM,iBAAiB,CACpC,GAAG,CAAC,8BAA8B,IAAI,sBAAsB,EAC5D;gBACE,KAAK,EAAE,UAAU,CAAC,KAAK;gBACvB,MAAM,EAAE,iBAAiB;gBACzB,WAAW;gBACX,GAAG,EAAE,IAAI,CAAC,GAAG;gBACb,KAAK,EAAE,EAAE,CAAC,EAAE,CAAC,IAAI,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;gBAC5D,IAAI,EAAE,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC;aACxB,EACD,EAAE,KAAK,EAAE,UAAU,EAAE,gBAAgB,EAAE,CACxC,CAAC;YACF,cAAc,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;YAClC,OAAO,MAAM,CAAC,UAAU,CAAC;QAC3B,CAAC;QACD,qBAAqB,EAAE,CAAC,UAAU,EAAE,EAAE,CAAC,wBAAwB,CAAC,UAAU,CAAC;QAC3E,aAAa,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;YAC/B,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,MAAM,CAAC,mBAAmB,CAAC,CAAC;YACtD,MAAM,OAAO,GAAG,GAAG,OAAO,CAAC,QAAQ,CAAC,IAAI,KAAK,OAAO,CAAC,QAAQ,CAAC,KAAK,GAAG,CAAC;YACvE,OAAO,OAAO,CAAC;gBACb,OAAO,EAAE,IAAI;gBACb,OAAO,EACL,6BAA6B,OAAO,CAAC,QAAQ,WAAW,OAAO,CAAC,SAAS,aAAa,OAAO,CAAC,OAAO,IAAI;oBACzG,SAAS,OAAO,CAAC,KAAK,CAAC,GAAG,IAAI,OAAO,CAAC,KAAK,CAAC,GAAG,IAAI,OAAO,CAAC,KAAK,CAAC,GAAG,IAAI;oBACxE,WAAW,OAAO,CAAC,WAAW,aAAa,OAAO,GAAG;aACxD,CAAC,CAAC;QACL,CAAC;KACF,CAAC;AACJ,CAAC"}
+{"version":3,"file":"platform-frontdoor-runtime.js","sourceRoot":"","sources":["../../src/lib/platform-frontdoor-runtime.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,UAAU,EACV,UAAU,EACV,+BAA+B,GAEhC,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAC/C,OAAO,EAAE,eAAe,EAAuB,MAAM,qBAAqB,CAAC;AAC3E,OAAO,EAAE,iBAAiB,EAAE,oBAAoB,EAAE,MAAM,uBAAuB,CAAC;AAChF,OAAO,EAAE,sBAAsB,EAAE,MAAM,+BAA+B,CAAC;AACvE,OAAO,EAAE,uBAAuB,EAAsB,MAAM,yBAAyB,CAAC;AAOtF,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAC3C,OAAO,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAC1C,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC3C,OAAO,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAC;AACvD,OAAO,EAAE,aAAa,EAAE,MAAM,8BAA8B,CAAC;AAC7D,OAAO,EAAE,wBAAwB,EAAE,MAAM,8BAA8B,CAAC;AACxE,OAAO,EACL,iBAAiB,EACjB,yBAAyB,EACzB,iBAAiB,GAElB,MAAM,eAAe,CAAC;AAEvB,OAAO,EAAE,+BAA+B,EAAE,MAAM,gCAAgC,CAAC;AAejF,SAAS,IAAI,CAAC,KAAc,EAAE,IAA4B;IACxD,OAAO,KAAK,CAAC,CAAC,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AACjC,CAAC;AAED,KAAK,UAAU,oBAAoB,CACjC,KAAsB,EACtB,WAAmB,EACnB,MAAc;IAEd,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC;IAClD,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IACzB,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,YAAY,CAC/B,EAAE,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,IAAI,EAAE,aAAa,EAAE,GAAG,EAAE,MAAM,EAAE,EAClE;YACE,KAAK;YACL,MAAM,EAAE,UAAU,EAAE;YACpB,UAAU;YACV,WAAW,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,eAAe,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;YAC1F,QAAQ,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,eAAe,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC;YAClF,MAAM,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,eAAe,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC;YAC7E,YAAY,EAAE,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,CAC/B,eAAe,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,CAAC;SAC1E,CACF,CAAC;QACF,OAAO,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC;IACvC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,UAAU,CAAC,KAAsB,EAAE,MAAc,EAAE,WAAmB;IAC7E,IAAI,MAA2C,CAAC;IAChD,MAAM,MAAM,GAAG,GAA4B,EAAE;QAC3C,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,GAAG,KAAK,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CACpD,eAAe,CAAC;gBACd,OAAO,EAAE,MAAM;gBACf,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,WAAW,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;aAC1E,CAAC,CACH,CAAC;QACJ,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC,CAAC;IACF,OAAO;QACL,MAAM,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC,MAAM,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE;QAC9E,SAAS,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC,MAAM,MAAM,EAAE,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE;QACpF,aAAa,EAAE,KAAK,IAAI,EAAE;YACxB,MAAM,CAAC,MAAM,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,uCAAuC,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC;QACjG,CAAC;KACF,CAAC;AACJ,CAAC;AAED,SAAS,cAAc,CACrB,KAAsB,EACtB,MAAc,EACd,oBAAwC,EACxC,KAAc,EACd,qBAA8B,EAC9B,gBAAyB,EACzB,IAA4B;IAE5B,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IACvC,OAAO;QACL,KAAK,EAAE,KAAK,IAAI,EAAE;YAChB,IAAI,CAAC;gBACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,eAAe,CAAC,CAAC;gBACrD,OAAO,QAAQ,CAAC,EAAE,CAAC;YACrB,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,KAAK,CAAC;YACf,CAAC;QACH,CAAC;QACD,YAAY,EAAE,CAAC,UAAU,EAAE,EAAE,CAC3B,YAAY,CAAC,UAAU,EAAE;YACvB,KAAK;YACL,MAAM,EAAE,UAAU,EAAE;YACpB,UAAU;YACV,WAAW,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,eAAe,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;YAC1F,QAAQ,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,eAAe,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC;YAClF,MAAM,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,eAAe,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC;YAC7E,YAAY,EAAE,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,CAC/B,eAAe,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,CAAC;SAC1E,CAAC;QACJ,YAAY,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,MAAM,EAAE,WAAW,CAAC;QACrE,WAAW,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,WAAW,CAAC,GAAG,CAAC;QACtC,GAAG,EAAE,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC;QACtB,WAAW,EAAE,qBAAqB,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,EAAE,GAAE,CAAC;QACjE,cAAc,EAAE,oBAAoB;YAClC,CAAC,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,sBAAsB,CAAC,MAAM,EAAE,oBAAoB,EAAE,KAAK,CAAC;YACxE,CAAC,CAAC,SAAS;QACb,aAAa,EAAE,gBAAgB;YAC7B,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE;gBACf,IAAI,CAAC;oBACH,MAAM,MAAM,CAAC,aAAa,EAAE,EAAE,CAAC;oBAC/B,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;gBACtB,CAAC;gBAAC,MAAM,CAAC;oBACP,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC;gBACvB,CAAC;YACH,CAAC;YACH,CAAC,CAAC,SAAS;KACd,CAAC;AACJ,CAAC;AAED,wEAAwE;AACxE,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,MAAc,EACd,UAAkB,EAClB,KAA0B,EAC1B,UAAwB,KAAK;IAE7B,cAAc,CAAC,UAAU,CAAC,CAAC;IAC3B,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,GAAG,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,yBAAyB,EAAE;YACpF,MAAM,EAAE,MAAM;YACd,QAAQ,EAAE,QAAQ;YAClB,OAAO,EAAE;gBACP,cAAc,EAAE,kBAAkB;gBAClC,kBAAkB,EAAE,UAAU;aAC/B;YACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC;SAC5B,CAAC,CAAC;QACH,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG;YAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;QACzD,IAAI,CAAC,QAAQ,CAAC,EAAE;YAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;QAC7C,IAAI,MAAe,CAAC;QACpB,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAuD,CAAC;YACxF,MAAM,GAAG,IAAI,CAAC,IAAI,EAAE,MAAM,IAAI,IAAI,CAAC,MAAM,CAAC;QAC5C,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC;QACjC,CAAC;QACD,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;YAC5D,cAAc,CAAC,MAAM,CAAC,CAAC;YACvB,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC;QACvC,CAAC;QACD,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC;IACjC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;IAC7B,CAAC;AACH,CAAC;AAED,MAAM,kBAAkB,GACtB,iEAAiE,CAAC;AAEpE,SAAS,eAAe,CACtB,UAAmB,EACnB,cAAuB;IAEvB,IACE,OAAO,UAAU,KAAK,QAAQ;QAC9B,CAAC,+BAA+B,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC,CAAC,EAAE;QACtD,OAAO,cAAc,KAAK,QAAQ;QAClC,CAAC,kBAAkB,CAAC,IAAI,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC,EAC/C,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO;QACL,UAAU,EAAE,UAAU,CAAC,IAAI,EAAE;QAC7B,cAAc,EAAE,cAAc,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE;KACpD,CAAC;AACJ,CAAC;AAED,4FAA4F;AAC5F,MAAM,CAAC,KAAK,UAAU,gCAAgC,CAAC,KAItD;IACC,MAAM,eAAe,GAAG,eAAe,CACrC,KAAK,CAAC,GAAG,CAAC,kCAAkC,EAC5C,KAAK,CAAC,GAAG,CAAC,+BAA+B,CAC1C,CAAC;IACF,IAAI,eAAe;QAAE,OAAO,eAAe,CAAC;IAE5C,MAAM,OAAO,GAAG,KAAK,CAAC,MAAM,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC;IACvE,MAAM,MAAM,GAAG,GAAG,KAAK,CAAC,WAAW,0BAA0B,CAAC;IAC9D,MAAM,iBAAiB,GAAG,KAAK,CAAC,MAAM,CAAC,YAAY,EAAE,GAAG,CAAC;IACzD,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,iBAAiB,CACvD,OAAO,EACP,CAAC,QAAQ,EAAE,SAAS,EAAE,MAAM,CAAC,EAC7B;QACE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE;QAClB,KAAK,EAAE,KAAK;QACZ,GAAG,CAAC,iBAAiB,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,iBAAiB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACzD,CACF,CAAC,CAAC;IACH,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACxC,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,iBAAiB,CAAC,OAAO,EAAE;QAC9D,KAAK;QACL,MAAM;QACN,IAAI;QACJ,GAAG,MAAM,eAAe;QACxB,QAAQ;QACR,IAAI;QACJ,IAAI;QACJ,kFAAkF;KACnF,EAAE;QACD,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE;QAClB,KAAK,EAAE,KAAK;QACZ,GAAG,CAAC,iBAAiB,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,iBAAiB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACzD,CAAC,CAAC,CAAC;IACJ,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IACvD,MAAM,CAAC,cAAc,EAAE,GAAG,SAAS,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACxF,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAiC,CAAC;QAClF,OAAO,eAAe,CAAC,cAAc,EAAE,QAAQ,CAAC,cAAc,CAAC,CAAC;IAClE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAAC,KAIjD;IACC,MAAM,aAAa,GAAG,yBAAyB,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;IACrE,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CACvB,GAAG,KAAK,CAAC,UAAU,CAAC,cAAc,IAAI,KAAK,CAAC,UAAU,CAAC,UAAU,EAAE,EACnE,MAAM,CACP,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACrB,cAAc,CAAC,KAAK,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;IAC5C,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,CAAC,KAAK,CAAC,OAAO,IAAI,KAAK,CAAC,CAC7C,GAAG,aAAa,8CAA8C,EAC9D;YACE,MAAM,EAAE,KAAK;YACb,QAAQ,EAAE,QAAQ;YAClB,OAAO,EAAE;gBACP,MAAM,EAAE,kBAAkB;gBAC1B,aAAa,EAAE,SAAS,KAAK,EAAE;aAChC;YACD,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC;SACpC,CACF,CAAC;QACF,OAAO,EAAE,IAAI,EAAE,eAAe,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC;IAC5D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,IAAI,EAAE,mBAAmB,EAAE,CAAC;IACvC,CAAC;AACH,CAAC;AAED,uFAAuF;AACvF,MAAM,UAAU,2BAA2B,CAAC,OAAwC;IAClF,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,KAAK,EAAE,KAAK,EAAE,gBAAgB,EAAE,IAAI,EAAE,GAAG,OAAO,CAAC;IAC1E,OAAO;QACL,GAAG;QACH,GAAG;QACH,KAAK;QACL,MAAM,EAAE,sBAAsB,EAAE;QAChC,UAAU,EAAE,KAAK,CAAC,CAAC,CAAC,GAAoB,EAAE,CAAC,YAAY,CAAC,uCAAuC,CAAC,CAAC,CAAC,CAAC,SAAS;QAC5G,mBAAmB,EAAE,uBAAuB,EAAE;QAC9C,UAAU;QACV,UAAU;QACV,MAAM,EAAE,iBAAiB;QACzB,iBAAiB,EAAE,CAAC,MAAM,EAAE,iBAAiB,EAAE,EAAE,CAC/C,cAAc,CACZ,KAAK,EACL,MAAM,EACN,iBAAiB,EAAE,oBAAoB,EACvC,KAAK,EACL,OAAO,CAAC,qBAAqB,KAAK,KAAK,EACvC,gBAAgB,EAChB,IAAI,CACL;QACH,oBAAoB,EAAE,CAAC,WAAW,EAAE,MAAM,EAAE,EAAE,CAAC,oBAAoB,CAAC,KAAK,EAAE,WAAW,EAAE,MAAM,CAAC;QAC/F,oBAAoB,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;YAClC,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;gBAChC,OAAO,EAAE,EAAE,MAAM,EAAE,kBAAkB,EAAE;gBACvC,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC;aACpC,CAAC,CAAC;YACH,IAAI,CAAC,QAAQ,CAAC,EAAE;gBAAE,MAAM,IAAI,+BAA+B,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;YAC7E,OAAO,QAAQ,CAAC,IAAI,EAAE,CAAC;QACzB,CAAC;QACD,oBAAoB,EAAE,CAAC,EAAE,WAAW,EAAE,MAAM,EAAE,EAAE,EAAE,CAChD,gCAAgC,CAAC,EAAE,WAAW,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;QAChE,oBAAoB,EAAE,KAAK,EAAE,EAAE,WAAW,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,EAAE,EAAE,EAAE;YAChF,MAAM,MAAM,GAAG,MAAM,iBAAiB,CAAC,aAAa,EAAE;gBACpD,KAAK,EAAE,UAAU,CAAC,KAAK;gBACvB,MAAM,EAAE,iBAAiB;gBACzB,WAAW;gBACX,GAAG,EAAE,IAAI,CAAC,GAAG;gBACb,KAAK,EAAE,EAAE,CAAC,EAAE,CAAC,IAAI,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;gBAC5D,IAAI,EAAE,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC;aACxB,EAAE,EAAE,gBAAgB,EAAE,WAAW,EAAE,CAAC,CAAC;YACtC,cAAc,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;YAClC,MAAM,iBAAiB,CAAC;gBACtB,KAAK,EAAE,oBAAoB,CAAC,WAAW,EAAE,SAAS,CAAC;gBACnD,WAAW;gBACX,aAAa;gBACb,UAAU,EAAE,MAAM,CAAC,UAAU;gBAC7B,cAAc,EAAE,MAAM,CAAC,cAAc;gBACrC,KAAK,EAAE,UAAU;gBACjB,MAAM;gBACN,MAAM,EAAE,iBAAiB;aAC1B,CAAC,CAAC;YACH,OAAO,MAAM,CAAC;QAChB,CAAC;QACD,2BAA2B,EAAE,CAAC,EAAE,aAAa,EAAE,UAAU,EAAE,EAAE,EAAE,CAC7D,2BAA2B,CAAC,EAAE,aAAa,EAAE,UAAU,EAAE,CAAC;QAC5D,mBAAmB,EAAE,KAAK,EAAE,cAAc,EAAE,EAAE;YAC5C,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,MAAM,CAAC,mBAAmB,CAAC,CAAC;YACtD,OAAO,OAAO,CAAC;gBACb,OAAO,EAAE,IAAI;gBACb,OAAO,EAAE,uBAAuB,cAAc,sCAAsC;aACrF,CAAC,CAAC;QACL,CAAC;QACD,GAAG,EAAE,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC;QACtB,SAAS,EAAE,CAAC,cAAc,EAAE,EAAE,CAAC,YAAY,CAAC,cAAc,EAAE,EAAE,MAAM,EAAE,iBAAiB,EAAE,CAAC;QAC1F,aAAa,EAAE,CAAC,SAAS,EAAE,EAAE,CAAC,aAAa,CAAC,SAAS,CAAC;QACtD,eAAe,EAAE,KAAK,EAAE,gBAAgB,EAAE,EAAE;YAC1C,MAAM,MAAM,GAAG,MAAM,iBAAiB,CACpC,GAAG,CAAC,8BAA8B,IAAI,sBAAsB,EAC5D;gBACE,KAAK,EAAE,UAAU,CAAC,KAAK;gBACvB,MAAM,EAAE,iBAAiB;gBACzB,WAAW;gBACX,GAAG,EAAE,IAAI,CAAC,GAAG;gBACb,KAAK,EAAE,EAAE,CAAC,EAAE,CAAC,IAAI,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;gBAC5D,IAAI,EAAE,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC;aACxB,EACD,EAAE,KAAK,EAAE,UAAU,EAAE,gBAAgB,EAAE,CACxC,CAAC;YACF,cAAc,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;YAClC,OAAO,MAAM,CAAC,UAAU,CAAC;QAC3B,CAAC;QACD,qBAAqB,EAAE,CAAC,UAAU,EAAE,EAAE,CAAC,wBAAwB,CAAC,UAAU,CAAC;QAC3E,aAAa,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;YAC/B,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,MAAM,CAAC,mBAAmB,CAAC,CAAC;YACtD,MAAM,OAAO,GAAG,GAAG,OAAO,CAAC,QAAQ,CAAC,IAAI,KAAK,OAAO,CAAC,QAAQ,CAAC,KAAK,GAAG,CAAC;YACvE,OAAO,OAAO,CAAC;gBACb,OAAO,EAAE,IAAI;gBACb,OAAO,EACL,6BAA6B,OAAO,CAAC,QAAQ,WAAW,OAAO,CAAC,SAAS,aAAa,OAAO,CAAC,OAAO,IAAI;oBACzG,SAAS,OAAO,CAAC,KAAK,CAAC,GAAG,IAAI,OAAO,CAAC,KAAK,CAAC,GAAG,IAAI,OAAO,CAAC,KAAK,CAAC,GAAG,IAAI;oBACxE,WAAW,OAAO,CAAC,WAAW,aAAa,OAAO,GAAG;aACxD,CAAC,CAAC;QACL,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/lib/platform-frontdoor.d.ts

@@ -22,9 +22,22 @@ import { type InstallationActivationResult } from './activate.js';
  * `platform up` (which fails closed without `--version`), `knowz up` supplies a
  * concrete, deliberately-bumped version so a first-time user gets a working
  * stack — NEVER a floating tag like `latest`. Override with `--version`.
+ *
+ * §2026-08-31 R3: this pin MUST equal the newest entry in the packaged
+ * `assets/portable/releases.json` (exact semver equality — enforced by the
+ * up.test.ts anti-rot tripwire). The /release-platform skill bumps BOTH in the
+ * same release commit; bump one without the other and the tripwire goes red.
+ */
+export declare const STABLE_PORTABLE_RELEASE = "0.41.0";
+export declare const DEFAULT_PORTABLE_VERSION = "0.41.0";
+/**
+ * Per-instance CLI profile derivation (smoke gap 1, lead ruling): the default
+ * instance keeps the back-compat `local` profile; a named instance gets
+ * `local-<name>` so a second instance's `up` can never silently repoint the
+ * first instance's profile. Shared by terminal `up` and the setup console
+ * (`setupPlanToFrontDoorInput`) so both front-ends derive identically.
  */
-export declare const STABLE_PORTABLE_RELEASE = "0.35.2";
-export declare const DEFAULT_PORTABLE_VERSION = "0.35.2";
+export declare function localProfileNameFor(instanceName: string | undefined): string;
 export declare function resolveDefaultPortableVersion(env: Readonly<Record<string, string | undefined>>): string;
 /** Compose/registry failures that warrant a one-shot authenticated pull retry. */
 export declare function isRegistryAuthError(err: unknown): boolean;
@@ -46,6 +59,7 @@ export interface FrontDoorInput {
     identity?: {
         name: string;
         email: string;
+        ageAttested?: true;
     };
     yes?: boolean;
     /** Suppresses every interactive surface and preserves the one-object JSON envelope. */
@@ -131,6 +145,8 @@ export interface FrontDoorDeps {
         activation: InstallationActivationResult;
     }) => Promise<RegistryCredentialPreflightResult>;
     confirmReactivation?: (installationId: string) => Promise<boolean>;
+    /** §2026-08-31 R7: injectable host architecture for the emulation notice; defaults to process.arch. */
+    hostArch?: string;
 }
 export type RegistryCredentialPreflightResult = {
     kind: 'http-response';

package/dist/lib/platform-frontdoor.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"platform-frontdoor.d.ts","sourceRoot":"","sources":["../../src/lib/platform-frontdoor.ts"],"names":[],"mappings":"AAEA,OAAO,EAIL,KAAK,WAAW,EACjB,MAAM,eAAe,CAAC;AACvB,OAAO,EACL,aAAa,EAEb,KAAK,kBAAkB,EAIxB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAGL,KAAK,sBAAsB,EAC3B,KAAK,aAAa,EAClB,KAAK,aAAa,EACnB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,wBAAwB,EACxB,KAAK,aAAa,EAClB,KAAK,QAAQ,EACb,KAAK,6BAA6B,EACnC,MAAM,+BAA+B,CAAC;AAEvC,OAAO,EAKL,KAAK,cAAc,EACnB,KAAK,gBAAgB,EACtB,MAAM,0BAA0B,CAAC;AAClC,OAAO,KAAK,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAC/E,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,8BAA8B,CAAC;AACxE,OAAO,EACL,iBAAiB,IAAI,0BAA0B,EAC/C,KAAK,YAAY,EAClB,MAAM,uBAAuB,CAAC;AAW/B,OAAO,EAEL,KAAK,4BAA4B,EAClC,MAAM,eAAe,CAAC;AAEvB;;;;;;;;;GASG;AAEH;;;;;GAKG;AACH,eAAO,MAAM,uBAAuB,WAAW,CAAC;AAChD,eAAO,MAAM,wBAAwB,WAA0B,CAAC;AAEhE,wBAAgB,6BAA6B,CAC3C,GAAG,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC,GAChD,MAAM,CASR;AAED,kFAAkF;AAClF,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,OAAO,GAAG,OAAO,CAKzD;AAED,MAAM,WAAW,cAAc;IAC7B,mGAAmG;IACnG,IAAI,EAAE,kBAAkB,CAAC;IACzB,aAAa,EAAE,aAAa,CAAC;IAC7B,UAAU,EAAE;QAAE,KAAK,CAAC,EAAE,OAAO,CAAC;QAAC,IAAI,CAAC,EAAE,OAAO,CAAC;QAAC,SAAS,CAAC,EAAE,OAAO,CAAA;KAAE,CAAC;IACrE,QAAQ,EAAE,OAAO,CAAC;IAClB,IAAI,EAAE,OAAO,CAAC;IACd,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,oFAAoF;IACpF,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,QAAQ,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;IAC3C,GAAG,CAAC,EAAE,OAAO,CAAC;IACd,uFAAuF;IACvF,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,2FAA2F;IAC3F,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,oGAAoG;IACpG,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,mEAAmE;IACnE,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,qFAAqF;IACrF,eAAe,CAAC,EAAE,OAAO,CAAC;CAC3B;AAED,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,EAAE,sBAAsB,CAAC;IACjC,SAAS,EAAE,OAAO,GAAG,MAAM,GAAG,WAAW,CAAC;IAC1C,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAA;KAAE,CAAC;IACrE,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;CAC3C;AAED,MAAM,WAAW,aAAa;IAC5B,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC,CAAC;IAClD,KAAK,EAAE,OAAO,CAAC;IACf,kDAAkD;IAClD,MAAM,EAAE,QAAQ,CAAC;IACjB,oFAAoF;IACpF,UAAU,CAAC,EAAE,MAAM,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAC/C,mBAAmB,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;IAC9C,UAAU,EAAE,MAAM,WAAW,CAAC;IAC9B,UAAU,EAAE,CAAC,GAAG,EAAE,WAAW,KAAK,IAAI,CAAC;IACvC,MAAM,EAAE,aAAa,CAAC;IACtB,iFAAiF;IACjF,iBAAiB,EAAE,CACjB,MAAM,EAAE,MAAM,EACd,OAAO,CAAC,EAAE;QAAE,oBAAoB,CAAC,EAAE,MAAM,CAAA;KAAE,KACxC,cAAc,CAAC;IACpB;;;;;OAKG;IACH,oBAAoB,CAAC,EAAE,CAAC,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,KAAK,OAAO,CAAC;QAAE,QAAQ,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC,CAAC;IACtG,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,UAAU,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC;IACvC,WAAW,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,UAAU,CAAC;IAC3C,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC;IACjB,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAC7B,SAAS,CAAC,EAAE,CAAC,KAAK,EAAE,cAAc,KAAK,OAAO,CAAC,eAAe,CAAC,CAAC;IAChE,aAAa,CAAC,EAAE,CAAC,SAAS,EAAE,OAAO,CAAC,UAAU,CAAC,OAAO,wBAAwB,CAAC,CAAC,KAAK,OAAO,CAAC,mBAAmB,CAAC,CAAC;IAClH,eAAe,CAAC,EAAE,CAAC,gBAAgB,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IAChE,qBAAqB,CAAC,EAAE,6BAA6B,CAAC,uBAAuB,CAAC,CAAC;IAC/E,aAAa,CAAC,EAAE,CAAC,OAAO,EAAE,gBAAgB,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IAChE,iBAAiB,CAAC,EAAE,OAAO,0BAA0B,CAAC;IACtD,aAAa,CAAC,EAAE,OAAO,aAAa,CAAC;IACrC,oBAAoB,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IACzD,2BAA2B,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAC3E,oBAAoB,CAAC,EAAE,CAAC,KAAK,EAAE;QAC7B,WAAW,EAAE,MAAM,CAAC;QACpB,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,MAAM,EAAE,YAAY,CAAC;KACtB,KAAK,OAAO,CAAC,4BAA4B,GAAG,IAAI,CAAC,CAAC;IACnD,oBAAoB,CAAC,EAAE,CAAC,KAAK,EAAE;QAC7B,WAAW,EAAE,MAAM,CAAC;QACpB,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,aAAa,EAAE,MAAM,CAAC;QACtB,MAAM,EAAE,YAAY,CAAC;KACtB,KAAK,OAAO,CAAC,4BAA4B,CAAC,CAAC;IAC5C,2BAA2B,CAAC,EAAE,CAAC,KAAK,EAAE;QACpC,aAAa,EAAE,MAAM,CAAC;QACtB,UAAU,EAAE,4BAA4B,CAAC;KAC1C,KAAK,OAAO,CAAC,iCAAiC,CAAC,CAAC;IACjD,mBAAmB,CAAC,EAAE,CAAC,cAAc,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;CACpE;AAED,MAAM,MAAM,iCAAiC,GACzC;IAAE,IAAI,EAAE,eAAe,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GACzC;IAAE,IAAI,EAAE,mBAAmB,CAAA;CAAE,CAAC;AAelC,8FAA8F;AAC9F,MAAM,MAAM,kBAAkB,GAAG,gBAAgB,CAAC,WAAW,CAAC,GAAG,UAAU,CAAC;AAE5E,MAAM,WAAW,eAAe;IAC9B,KAAK,EAAE,aAAa,CAAC;IACrB,SAAS,EAAE,OAAO,GAAG,MAAM,GAAG,WAAW,CAAC;IAC1C,QAAQ,EAAE,sBAAsB,CAAC;IACjC,8EAA8E;IAC9E,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,SAAS,EAAE,kBAAkB,CAAC;IAC9B,MAAM,EAAE,OAAO,CAAC;CACjB;AAiDD,wBAAsB,YAAY,CAAC,KAAK,EAAE,cAAc,EAAE,IAAI,EAAE,aAAa,GAAG,OAAO,CAAC,eAAe,CAAC,CAwavG;AAED,qHAAqH;AACrH,wBAAgB,uBAAuB,CAAC,SAAS,GAAE,MAAmC,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAQhH"}
+{"version":3,"file":"platform-frontdoor.d.ts","sourceRoot":"","sources":["../../src/lib/platform-frontdoor.ts"],"names":[],"mappings":"AAEA,OAAO,EAIL,KAAK,WAAW,EACjB,MAAM,eAAe,CAAC;AACvB,OAAO,EACL,aAAa,EAEb,KAAK,kBAAkB,EAIxB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAGL,KAAK,sBAAsB,EAC3B,KAAK,aAAa,EAClB,KAAK,aAAa,EACnB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,wBAAwB,EACxB,KAAK,aAAa,EAClB,KAAK,QAAQ,EACb,KAAK,6BAA6B,EACnC,MAAM,+BAA+B,CAAC;AAEvC,OAAO,EAKL,KAAK,cAAc,EACnB,KAAK,gBAAgB,EACtB,MAAM,0BAA0B,CAAC;AAClC,OAAO,KAAK,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAC/E,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,8BAA8B,CAAC;AACxE,OAAO,EACL,iBAAiB,IAAI,0BAA0B,EAC/C,KAAK,YAAY,EAClB,MAAM,uBAAuB,CAAC;AAY/B,OAAO,EAEL,KAAK,4BAA4B,EAClC,MAAM,eAAe,CAAC;AAIvB;;;;;;;;;GASG;AAEH;;;;;;;;;;GAUG;AACH,eAAO,MAAM,uBAAuB,WAAW,CAAC;AAChD,eAAO,MAAM,wBAAwB,WAA0B,CAAC;AAIhE;;;;;;GAMG;AACH,wBAAgB,mBAAmB,CAAC,YAAY,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,CAK5E;AAED,wBAAgB,6BAA6B,CAC3C,GAAG,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC,GAChD,MAAM,CASR;AAED,kFAAkF;AAClF,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,OAAO,GAAG,OAAO,CAKzD;AAED,MAAM,WAAW,cAAc;IAC7B,mGAAmG;IACnG,IAAI,EAAE,kBAAkB,CAAC;IACzB,aAAa,EAAE,aAAa,CAAC;IAC7B,UAAU,EAAE;QAAE,KAAK,CAAC,EAAE,OAAO,CAAC;QAAC,IAAI,CAAC,EAAE,OAAO,CAAC;QAAC,SAAS,CAAC,EAAE,OAAO,CAAA;KAAE,CAAC;IACrE,QAAQ,EAAE,OAAO,CAAC;IAClB,IAAI,EAAE,OAAO,CAAC;IACd,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,oFAAoF;IACpF,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,QAAQ,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,WAAW,CAAC,EAAE,IAAI,CAAA;KAAE,CAAC;IAC/D,GAAG,CAAC,EAAE,OAAO,CAAC;IACd,uFAAuF;IACvF,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,2FAA2F;IAC3F,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,oGAAoG;IACpG,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,mEAAmE;IACnE,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,qFAAqF;IACrF,eAAe,CAAC,EAAE,OAAO,CAAC;CAC3B;AAED,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,EAAE,sBAAsB,CAAC;IACjC,SAAS,EAAE,OAAO,GAAG,MAAM,GAAG,WAAW,CAAC;IAC1C,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAA;KAAE,CAAC;IACrE,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;CAC3C;AAED,MAAM,WAAW,aAAa;IAC5B,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC,CAAC;IAClD,KAAK,EAAE,OAAO,CAAC;IACf,kDAAkD;IAClD,MAAM,EAAE,QAAQ,CAAC;IACjB,oFAAoF;IACpF,UAAU,CAAC,EAAE,MAAM,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAC/C,mBAAmB,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;IAC9C,UAAU,EAAE,MAAM,WAAW,CAAC;IAC9B,UAAU,EAAE,CAAC,GAAG,EAAE,WAAW,KAAK,IAAI,CAAC;IACvC,MAAM,EAAE,aAAa,CAAC;IACtB,iFAAiF;IACjF,iBAAiB,EAAE,CACjB,MAAM,EAAE,MAAM,EACd,OAAO,CAAC,EAAE;QAAE,oBAAoB,CAAC,EAAE,MAAM,CAAA;KAAE,KACxC,cAAc,CAAC;IACpB;;;;;OAKG;IACH,oBAAoB,CAAC,EAAE,CAAC,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,KAAK,OAAO,CAAC;QAAE,QAAQ,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC,CAAC;IACtG,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,UAAU,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC;IACvC,WAAW,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,UAAU,CAAC;IAC3C,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC;IACjB,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAC7B,SAAS,CAAC,EAAE,CAAC,KAAK,EAAE,cAAc,KAAK,OAAO,CAAC,eAAe,CAAC,CAAC;IAChE,aAAa,CAAC,EAAE,CAAC,SAAS,EAAE,OAAO,CAAC,UAAU,CAAC,OAAO,wBAAwB,CAAC,CAAC,KAAK,OAAO,CAAC,mBAAmB,CAAC,CAAC;IAClH,eAAe,CAAC,EAAE,CAAC,gBAAgB,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IAChE,qBAAqB,CAAC,EAAE,6BAA6B,CAAC,uBAAuB,CAAC,CAAC;IAC/E,aAAa,CAAC,EAAE,CAAC,OAAO,EAAE,gBAAgB,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IAChE,iBAAiB,CAAC,EAAE,OAAO,0BAA0B,CAAC;IACtD,aAAa,CAAC,EAAE,OAAO,aAAa,CAAC;IACrC,oBAAoB,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IACzD,2BAA2B,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAC3E,oBAAoB,CAAC,EAAE,CAAC,KAAK,EAAE;QAC7B,WAAW,EAAE,MAAM,CAAC;QACpB,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,MAAM,EAAE,YAAY,CAAC;KACtB,KAAK,OAAO,CAAC,4BAA4B,GAAG,IAAI,CAAC,CAAC;IACnD,oBAAoB,CAAC,EAAE,CAAC,KAAK,EAAE;QAC7B,WAAW,EAAE,MAAM,CAAC;QACpB,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,aAAa,EAAE,MAAM,CAAC;QACtB,MAAM,EAAE,YAAY,CAAC;KACtB,KAAK,OAAO,CAAC,4BAA4B,CAAC,CAAC;IAC5C,2BAA2B,CAAC,EAAE,CAAC,KAAK,EAAE;QACpC,aAAa,EAAE,MAAM,CAAC;QACtB,UAAU,EAAE,4BAA4B,CAAC;KAC1C,KAAK,OAAO,CAAC,iCAAiC,CAAC,CAAC;IACjD,mBAAmB,CAAC,EAAE,CAAC,cAAc,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IACnE,uGAAuG;IACvG,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,MAAM,iCAAiC,GACzC;IAAE,IAAI,EAAE,eAAe,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GACzC;IAAE,IAAI,EAAE,mBAAmB,CAAA;CAAE,CAAC;AAelC,8FAA8F;AAC9F,MAAM,MAAM,kBAAkB,GAAG,gBAAgB,CAAC,WAAW,CAAC,GAAG,UAAU,CAAC;AAE5E,MAAM,WAAW,eAAe;IAC9B,KAAK,EAAE,aAAa,CAAC;IACrB,SAAS,EAAE,OAAO,GAAG,MAAM,GAAG,WAAW,CAAC;IAC1C,QAAQ,EAAE,sBAAsB,CAAC;IACjC,8EAA8E;IAC9E,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,SAAS,EAAE,kBAAkB,CAAC;IAC9B,MAAM,EAAE,OAAO,CAAC;CACjB;AAkHD,wBAAsB,YAAY,CAAC,KAAK,EAAE,cAAc,EAAE,IAAI,EAAE,aAAa,GAAG,OAAO,CAAC,eAAe,CAAC,CAwevG;AAED,qHAAqH;AACrH,wBAAgB,uBAAuB,CAAC,SAAS,GAAE,MAAmC,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAQhH"}

package/dist/lib/platform-frontdoor.js

@@ -9,8 +9,10 @@ import { runOnboarding, runOnboardingProviderProbe, waitForOnboardingReady, DEFA
 import { ensureEngineReady as ensureContainerEngineReady, } from './container-engine.js';
 import { withSpinner } from './ui.js';
 import { buildRegistryLoginInvocation } from './platform-image-source.js';
-import { parsePlatformReleaseManifest, PlatformReleaseCatalogHttpError, resolvePlatformRelease, SelfServeResolutionError, } from './platform-release-manifest.js';
+import { parsePlatformReleaseManifest, PlatformReleaseCatalogHttpError, releaseFreshnessNotice, resolvePlatformRelease, SelfServeResolutionError, } from './platform-release-manifest.js';
 import { normalizeMothershipOrigin, } from './activate.js';
+import { AGE_ELIGIBILITY_TEXT, AGE_ELIGIBILITY_UNDER_13_MESSAGE } from './login.js';
+import { KnowzError, ExitCode } from '@knowzai/core';
 /**
  * `knowz up` front-door orchestration — the opinionated one-command onboarding
  * that composes the AI-provider picker (N1) → image-source resolution (N2) →
@@ -26,9 +28,28 @@ import { normalizeMothershipOrigin, } from './activate.js';
  * `platform up` (which fails closed without `--version`), `knowz up` supplies a
  * concrete, deliberately-bumped version so a first-time user gets a working
  * stack — NEVER a floating tag like `latest`. Override with `--version`.
+ *
+ * §2026-08-31 R3: this pin MUST equal the newest entry in the packaged
+ * `assets/portable/releases.json` (exact semver equality — enforced by the
+ * up.test.ts anti-rot tripwire). The /release-platform skill bumps BOTH in the
+ * same release commit; bump one without the other and the tripwire goes red.
  */
-export const STABLE_PORTABLE_RELEASE = '0.35.2';
+export const STABLE_PORTABLE_RELEASE = '0.41.0';
 export const DEFAULT_PORTABLE_VERSION = STABLE_PORTABLE_RELEASE;
+const DEFAULT_INSTANCE_NAME = 'knowz';
+/**
+ * Per-instance CLI profile derivation (smoke gap 1, lead ruling): the default
+ * instance keeps the back-compat `local` profile; a named instance gets
+ * `local-<name>` so a second instance's `up` can never silently repoint the
+ * first instance's profile. Shared by terminal `up` and the setup console
+ * (`setupPlanToFrontDoorInput`) so both front-ends derive identically.
+ */
+export function localProfileNameFor(instanceName) {
+    const name = instanceName?.trim();
+    return !name || name === DEFAULT_INSTANCE_NAME
+        ? DEFAULT_LOCAL_PROFILE
+        : `${DEFAULT_LOCAL_PROFILE}-${name}`;
+}
 export function resolveDefaultPortableVersion(env) {
     const value = env.KNOWZ_PLATFORM_VERSION?.trim();
     if (!value)
@@ -81,6 +102,63 @@ async function defaultFetchReleaseManifest(url) {
         throw new PlatformReleaseCatalogHttpError(response.status);
     return response.json();
 }
+/** §2026-08-31 R4 (lead ruling): the advisory fetch is bounded to 2s — never slower. */
+const ADVISORY_MANIFEST_TIMEOUT_MS = 2_000;
+async function withAdvisoryTimeout(work) {
+    let timer;
+    try {
+        return await Promise.race([
+            work,
+            new Promise((_, reject) => {
+                timer = setTimeout(() => reject(new Error('Advisory release-manifest fetch timed out.')), ADVISORY_MANIFEST_TIMEOUT_MS);
+            }),
+        ]);
+    }
+    finally {
+        if (timer !== undefined)
+            clearTimeout(timer);
+    }
+}
+/**
+ * §2026-08-31 R4: ADVISORY manifest load for the ghcr-token / preloaded paths —
+ * bounded fetch, packaged-copy fallback, and ANY failure returns undefined.
+ * Freshness must never block, slow (beyond the bound), or error an air-gapped
+ * boot. Requires the injected `fetchReleaseManifest` (the real runtime always
+ * binds it); when absent the advisory silently does not run, keeping legacy
+ * injected embedders/tests byte-identical and network-free.
+ */
+async function loadAdvisoryReleaseManifest(input) {
+    try {
+        const raw = await withAdvisoryTimeout(input.fetchReleaseManifest(input.manifestUrl));
+        return parsePlatformReleaseManifest(raw);
+    }
+    catch {
+        // Fall through to the packaged copy — advisory failures are silent by contract.
+    }
+    try {
+        const fallback = input.loadPackagedReleaseManifest
+            ? await input.loadPackagedReleaseManifest(input.packagedManifestPath)
+            : JSON.parse(readFileSync(input.packagedManifestPath, 'utf8'));
+        return parsePlatformReleaseManifest(fallback);
+    }
+    catch {
+        return undefined;
+    }
+}
+/**
+ * §2026-08-31 R-N2: static reference-only next-steps epilogue after a fresh
+ * successful `knowz up`. Copy mirrors the setup-console success panel (R-N1);
+ * the commands are defined by CLI_PortabilityTransfer / CLI_InstanceTransfer.
+ * Routed through the injectable sink — `--json` runs and the setup console
+ * (which forces `input.json`) never see these lines, and `loginMode:'existing'`
+ * re-ups skip the call entirely.
+ */
+function emitNextSteps(log) {
+    log('Next steps:');
+    log('  Connect this instance to Knowz Cloud:  knowz login --profile cloud');
+    log('  Move data between instances:           knowz transfer --from <profile> --to <profile>');
+    log('  Snapshot / restore:                    knowz export / knowz import');
+}
 export async function runFrontDoor(input, deps) {
     const log = input.json
         ? (_line) => { }
@@ -142,14 +220,29 @@ export async function runFrontDoor(input, deps) {
     if (requestedSuperAdminPassphrase)
         registerSecret(requestedSuperAdminPassphrase);
     let identity = input.identity;
-    if (!identity && interactivePromptOccurred) {
-        const name = (await deps.prompt.text({ message: 'First account name:', default: 'Local' })).trim();
-        const email = (await deps.prompt.text({ message: 'First account email:', default: 'local@knowz.local' })).trim();
-        identity = {
+    const collectRegistrationIdentity = async () => {
+        if (identity?.ageAttested === true)
+            return identity;
+        if (!canPrompt) {
+            if (identity) {
+                throw new KnowzError('Age eligibility is never assumed. Pass --age-13-plus to confirm eligibility before registration.', ExitCode.Usage);
+            }
+            return identity;
+        }
+        const ageAttested = await deps.prompt.confirm?.({ message: AGE_ELIGIBILITY_TEXT, default: false }) ?? false;
+        if (!ageAttested)
+            throw new KnowzError(AGE_ELIGIBILITY_UNDER_13_MESSAGE, ExitCode.Usage);
+        const name = identity?.name ?? (await deps.prompt.text({ message: 'First account name:', default: 'Local' })).trim();
+        const email = identity?.email ?? (await deps.prompt.text({ message: 'First account email:', default: 'local@knowz.local' })).trim();
+        return {
             name: name || 'Local',
             email: email || 'local@knowz.local',
+            // `as const` so the literal is not widened to `boolean`: `identity` is
+            // typed `ageAttested?: true`, and attestation is deliberately a one-way
+            // flag — there is no "attested: false" state, only an absent one.
+            ageAttested: true,
         };
-    }
+    };
     // Discoverability: when a saved default was silently reused (no --offline/--ai/--provider,
     // where --provider folds into providerFlags.ai), explain why no prompt appeared.
     if (cfgDefault && !interactivePromptOccurred && !input.providerFlags.offline && !input.providerFlags.ai) {
@@ -181,6 +274,13 @@ export async function runFrontDoor(input, deps) {
         : source.mode === 'pull'
             ? { composePlan: source.composePlan, registry: source.registry ?? null }
             : { composePlan: source.composePlan };
+    // §2026-08-31 R7: every published knowz portable image is linux/amd64-only, so
+    // the compose kit pins those five services and arm64 hosts run them under
+    // emulation. Honest one-line notice; build mode produces native images.
+    const hostArch = deps.hostArch ?? process.arch;
+    if (hostArch === 'arm64' && (source.mode === 'pull' || source.mode === 'preloaded')) {
+        log('Note: knowz images run under amd64 emulation on this Mac; native arm64 images are not yet published.');
+    }
     const selfServePlan = source.loginPlan?.kind === 'self-serve' ? source.loginPlan : undefined;
     if (selfServePlan) {
         const mothershipUrl = normalizeMothershipOrigin(deps.env.KNOWZ_LICENSING_MOTHERSHIP_URL?.trim() || DEFAULT_MOTHERSHIP_URL);
@@ -235,6 +335,41 @@ export async function runFrontDoor(input, deps) {
         if (resolved.note)
             log(resolved.note);
         log(`✓ Knowz Platform ${resolved.release.version} (${flavor}) — released ${resolved.release.releasedAt.slice(0, 10)}`);
+        // §2026-08-31 R4 (self-serve): zero new network — reuse the fetched manifest.
+        // Fires only for an explicit older pin; a minCliVersion skip already emitted
+        // its own note above, and the freshness notice must never duplicate it.
+        if (!resolved.note) {
+            const freshness = releaseFreshnessNotice({
+                currentVersion: resolved.release.version,
+                manifest,
+                flavor,
+            });
+            if (freshness)
+                log(freshness);
+        }
+    }
+    else if (selection.provider !== 'offline' &&
+        (source.mode === 'preloaded' || source.loginPlan?.kind === 'ghcr') &&
+        deps.fetchReleaseManifest) {
+        // §2026-08-31 R4 (ghcr-token / preloaded): no manifest resolution runs on these
+        // paths, so the version about to boot is the pin/explicit choice. Advisory-only
+        // freshness check — bounded, fail-silent, and skipped entirely for the offline
+        // provider (declared no-network intent, lead ruling on OQ-2).
+        const advisoryManifest = await loadAdvisoryReleaseManifest({
+            manifestUrl: `${normalizeMothershipOrigin(deps.env.KNOWZ_LICENSING_MOTHERSHIP_URL?.trim() || DEFAULT_MOTHERSHIP_URL)}${RELEASE_MANIFEST_PATH}`,
+            packagedManifestPath: join(source.projectDir, 'releases.json'),
+            fetchReleaseManifest: deps.fetchReleaseManifest,
+            loadPackagedReleaseManifest: deps.loadPackagedReleaseManifest,
+        });
+        if (advisoryManifest) {
+            const freshness = releaseFreshnessNotice({
+                currentVersion: applyInput.version ?? DEFAULT_PORTABLE_VERSION,
+                manifest: advisoryManifest,
+                flavor: selection.provider === 'gcp' ? 'portable-gcp' : 'portable',
+            });
+            if (freshness)
+                log(freshness);
+        }
     }
     // Advisory credential reachability check. Failure is intentionally warn-only.
     if (input.validate === true && deps.probeProvider) {
@@ -421,7 +556,9 @@ export async function runFrontDoor(input, deps) {
     //     profile reuse. Passing the result into onboarding avoids a second poll.
     const apiReady = await waitForOnboardingReady({}, onboardingDeps);
     if (!apiReady) {
-        const onboarding = await runOnboarding({ ...onboardingInput, apiReady }, onboardingDeps);
+        identity = await collectRegistrationIdentity();
+        const onboarding = await runOnboarding({ ...onboardingInput, register: identity, apiReady }, onboardingDeps);
+        emitNextSteps(log);
         return {
             state: applied.state,
             imageMode: source.mode,
@@ -445,7 +582,9 @@ export async function runFrontDoor(input, deps) {
         return { state: applied.state, imageMode: source.mode, provider: selection.provider, profile: profileName, loginMode: 'existing', seeded: false };
     }
     // 4c) Onboarding: bootstrap → register fallback → manual degrade.
-    const onboarding = await runOnboarding({ ...onboardingInput, apiReady }, onboardingDeps);
+    identity = await collectRegistrationIdentity();
+    const onboarding = await runOnboarding({ ...onboardingInput, register: identity, apiReady }, onboardingDeps);
+    emitNextSteps(log);
     return {
         state: applied.state,
         imageMode: source.mode,