@knowzai/cli 0.4.0 → 0.5.0

package/dist/lib/portable-release-digests.d.ts

@@ -0,0 +1,5 @@
+export declare function validatePortableDigests(value: unknown, flavor: '' | '-gcp'): Record<string, string>;
+export declare function packagedPortableDigests(assetsDir: string, version: string, flavor: '' | '-gcp'): unknown;
+/** Pin only application references; upstream Postgres/Redis/object-store images are outside the IP catalog. */
+export declare function pinPortableCompose(compose: string, digests: Record<string, string>): string;
+//# sourceMappingURL=portable-release-digests.d.ts.map

package/dist/lib/portable-release-digests.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"portable-release-digests.d.ts","sourceRoot":"","sources":["../../src/lib/portable-release-digests.ts"],"names":[],"mappings":"AAUA,wBAAgB,uBAAuB,CACrC,KAAK,EAAE,OAAO,EACd,MAAM,EAAE,EAAE,GAAG,MAAM,GAClB,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAaxB;AACD,wBAAgB,uBAAuB,CACrC,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,MAAM,EACf,MAAM,EAAE,EAAE,GAAG,MAAM,GAClB,OAAO,CAwCT;AACD,+GAA+G;AAC/G,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,MAAM,CAU3F"}

package/dist/lib/portable-release-digests.js

@@ -0,0 +1,53 @@
+import { readFileSync } from 'node:fs';
+import { join } from 'node:path';
+const required = ['api', 'worker', 'web', 'mcp', 'public-site'];
+const unavailable = (detail) => Object.assign(new Error(`Portable release digest catalog is incomplete (${detail}). Ask the licensing administrator to publish the complete verified image digest set. Existing admitted local images can still restart without acquisition; no registry token bypasses this requirement.`), { code: 'RELEASE_DIGESTS_UNAVAILABLE', exitCode: 4 });
+export function validatePortableDigests(value, flavor) {
+    if (!value || typeof value !== 'object' || Array.isArray(value))
+        throw unavailable('missing digest set');
+    const map = value;
+    return Object.fromEntries(required.map((service) => {
+        const key = service === 'api' || service === 'worker' ? `${service}${flavor}` : service;
+        const digest = map[key];
+        if (typeof digest !== 'string' || !/^sha256:[a-f0-9]{64}$/.test(digest))
+            throw unavailable(key);
+        return [service, digest];
+    }));
+}
+export function packagedPortableDigests(assetsDir, version, flavor) {
+    let catalog;
+    try {
+        catalog = JSON.parse(readFileSync(join(assetsDir, 'releases.json'), 'utf8'));
+    }
+    catch {
+        throw unavailable('catalog unavailable');
+    }
+    const release = catalog.releases?.find((row) => row.version === version &&
+        row.flavors?.includes(flavor === '-gcp' ? 'portable-gcp' : 'portable'));
+    if (!release || (release.status !== undefined && release.status !== 'complete'))
+        throw unavailable('requested release is not complete');
+    const cliVersion = JSON.parse(readFileSync(new URL('../../package.json', import.meta.url), 'utf8')).version;
+    const numeric = (value) => value.split('.').map(Number);
+    if (release.minCliVersion) {
+        const current = numeric(cliVersion), minimum = numeric(release.minCliVersion);
+        if (minimum.length !== 3 || minimum.some((x) => !Number.isSafeInteger(x) || x < 0))
+            throw unavailable('invalid CLI compatibility');
+        for (let i = 0; i < 3; i++) {
+            if (current[i] > minimum[i])
+                break;
+            if (current[i] < minimum[i])
+                throw unavailable(`CLI ${release.minCliVersion} or later required`);
+        }
+    }
+    return release.digests;
+}
+/** Pin only application references; upstream Postgres/Redis/object-store images are outside the IP catalog. */
+export function pinPortableCompose(compose, digests) {
+    return compose.replace(/^(\s*image:\s*)(["']?)([^\n]*\/knowz-(api|worker|web|mcp|public-site):[^\n]*?)\2\s*$/gm, (_line, prefix, quote, reference, service) => {
+        const existing = reference.match(/@(sha256:[a-f0-9]{64})$/)?.[1];
+        if (reference.includes('@') && existing !== digests[service])
+            throw unavailable(`${service} digest mismatch`);
+        return `${prefix}${quote}${reference.replace(/@sha256:[a-f0-9]{64}$/, '')}@${digests[service]}${quote}`;
+    });
+}
+//# sourceMappingURL=portable-release-digests.js.map

package/dist/lib/portable-release-digests.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"portable-release-digests.js","sourceRoot":"","sources":["../../src/lib/portable-release-digests.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,MAAM,QAAQ,GAAG,CAAC,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,KAAK,EAAE,aAAa,CAAU,CAAC;AACzE,MAAM,WAAW,GAAG,CAAC,MAAc,EAAE,EAAE,CACrC,MAAM,CAAC,MAAM,CACX,IAAI,KAAK,CACP,kDAAkD,MAAM,0MAA0M,CACnQ,EACD,EAAE,IAAI,EAAE,6BAA6B,EAAE,QAAQ,EAAE,CAAC,EAAE,CACrD,CAAC;AACJ,MAAM,UAAU,uBAAuB,CACrC,KAAc,EACd,MAAmB;IAEnB,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAC7D,MAAM,WAAW,CAAC,oBAAoB,CAAC,CAAC;IAC1C,MAAM,GAAG,GAAG,KAAgC,CAAC;IAC7C,OAAO,MAAM,CAAC,WAAW,CACvB,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE;QACvB,MAAM,GAAG,GAAG,OAAO,KAAK,KAAK,IAAI,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,OAAO,GAAG,MAAM,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC;QACxF,MAAM,MAAM,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC;QACxB,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC,MAAM,CAAC;YACrE,MAAM,WAAW,CAAC,GAAG,CAAC,CAAC;QACzB,OAAO,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAC3B,CAAC,CAAC,CACH,CAAC;AACJ,CAAC;AACD,MAAM,UAAU,uBAAuB,CACrC,SAAiB,EACjB,OAAe,EACf,MAAmB;IAEnB,IAAI,OAQH,CAAC;IACF,IAAI,CAAC;QACH,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,SAAS,EAAE,eAAe,CAAC,EAAE,MAAM,CAAC,CAAmB,CAAC;IACjG,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,WAAW,CAAC,qBAAqB,CAAC,CAAC;IAC3C,CAAC;IACD,MAAM,OAAO,GAAG,OAAO,CAAC,QAAQ,EAAE,IAAI,CACpC,CAAC,GAAG,EAAE,EAAE,CACN,GAAG,CAAC,OAAO,KAAK,OAAO;QACvB,GAAG,CAAC,OAAO,EAAE,QAAQ,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,UAAU,CAAC,CACzE,CAAC;IACF,IAAI,CAAC,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,KAAK,SAAS,IAAI,OAAO,CAAC,MAAM,KAAK,UAAU,CAAC;QAC7E,MAAM,WAAW,CAAC,mCAAmC,CAAC,CAAC;IACzD,MAAM,UAAU,GACd,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,GAAG,CAAC,oBAAoB,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,CAGhF,CAAC,OAAO,CAAC;IACV,MAAM,OAAO,GAAG,CAAC,KAAa,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IAChE,IAAI,OAAO,CAAC,aAAa,EAAE,CAAC;QAC1B,MAAM,OAAO,GAAG,OAAO,CAAC,UAAU,CAAC,EACjC,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;QAC3C,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAChF,MAAM,WAAW,CAAC,2BAA2B,CAAC,CAAC;QACjD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;YAC3B,IAAI,OAAO,CAAC,CAAC,CAAE,GAAG,OAAO,CAAC,CAAC,CAAE;gBAAE,MAAM;YACrC,IAAI,OAAO,CAAC,CAAC,CAAE,GAAG,OAAO,CAAC,CAAC,CAAE;gBAC3B,MAAM,WAAW,CAAC,OAAO,OAAO,CAAC,aAAa,oBAAoB,CAAC,CAAC;QACxE,CAAC;IACH,CAAC;IACD,OAAO,OAAO,CAAC,OAAO,CAAC;AACzB,CAAC;AACD,+GAA+G;AAC/G,MAAM,UAAU,kBAAkB,CAAC,OAAe,EAAE,OAA+B;IACjF,OAAO,OAAO,CAAC,OAAO,CACpB,wFAAwF,EACxF,CAAC,KAAK,EAAE,MAAc,EAAE,KAAa,EAAE,SAAiB,EAAE,OAAe,EAAE,EAAE;QAC3E,MAAM,QAAQ,GAAG,SAAS,CAAC,KAAK,CAAC,yBAAyB,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QACjE,IAAI,SAAS,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,QAAQ,KAAK,OAAO,CAAC,OAAO,CAAC;YAC1D,MAAM,WAAW,CAAC,GAAG,OAAO,kBAAkB,CAAC,CAAC;QAClD,OAAO,GAAG,MAAM,GAAG,KAAK,GAAG,SAAS,CAAC,OAAO,CAAC,uBAAuB,EAAE,EAAE,CAAC,IAAI,OAAO,CAAC,OAAO,CAAC,GAAG,KAAK,EAAE,CAAC;IAC1G,CAAC,CACF,CAAC;AACJ,CAAC"}

package/dist/lib/release-pin-matrix.d.ts

@@ -0,0 +1,29 @@
+/**
+ * In-repo pin matrix — the advertised versions that must stay aligned.
+ * Live mothership catalog blessing is an operator act (see docs/RELEASE_PIN_MATRIX.md);
+ * this module only asserts sources that live in git.
+ */
+export interface ReleasePinMatrix {
+    cliPackageVersion: string;
+    stablePortableRelease: string;
+    packagedPortableNewest: string;
+    deployPortableNewest: string;
+    stableSelfhostedRelease: string;
+    packagedSelfhostedNewest: string;
+    deploySelfhostedNewest: string;
+}
+export declare function readReleasePinMatrix(repoRoot: string, pins: {
+    stablePortableRelease: string;
+    stableSelfhostedRelease: string;
+}): ReleasePinMatrix;
+/** Empty = aligned. Each string is a human-readable mismatch. */
+export declare function pinMatrixMismatches(matrix: ReleasePinMatrix): string[];
+export declare function catalogLagsPackagedPin(input: {
+    catalogNewest: string | undefined;
+    packagedNewest: string | undefined;
+}): {
+    stale: boolean;
+    catalogNewest?: string;
+    packagedNewest?: string;
+};
+//# sourceMappingURL=release-pin-matrix.d.ts.map

package/dist/lib/release-pin-matrix.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"release-pin-matrix.d.ts","sourceRoot":"","sources":["../../src/lib/release-pin-matrix.ts"],"names":[],"mappings":"AAKA;;;;GAIG;AACH,MAAM,WAAW,gBAAgB;IAC/B,iBAAiB,EAAE,MAAM,CAAC;IAC1B,qBAAqB,EAAE,MAAM,CAAC;IAC9B,sBAAsB,EAAE,MAAM,CAAC;IAC/B,oBAAoB,EAAE,MAAM,CAAC;IAC7B,uBAAuB,EAAE,MAAM,CAAC;IAChC,wBAAwB,EAAE,MAAM,CAAC;IACjC,sBAAsB,EAAE,MAAM,CAAC;CAChC;AASD,wBAAgB,oBAAoB,CAClC,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE;IAAE,qBAAqB,EAAE,MAAM,CAAC;IAAC,uBAAuB,EAAE,MAAM,CAAA;CAAE,GACvE,gBAAgB,CAmBlB;AAED,iEAAiE;AACjE,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,gBAAgB,GAAG,MAAM,EAAE,CA+BtE;AAED,wBAAgB,sBAAsB,CAAC,KAAK,EAAE;IAC5C,aAAa,EAAE,MAAM,GAAG,SAAS,CAAC;IAClC,cAAc,EAAE,MAAM,GAAG,SAAS,CAAC;CACpC,GAAG;IAAE,KAAK,EAAE,OAAO,CAAC;IAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAAC,cAAc,CAAC,EAAE,MAAM,CAAA;CAAE,CAStE"}

package/dist/lib/release-pin-matrix.js

@@ -0,0 +1,67 @@
+import { readFileSync } from 'node:fs';
+import { join } from 'node:path';
+import { newestManifestVersion, parsePlatformReleaseManifest } from './platform-release-manifest.js';
+import { newestSelfHostedRelease } from './selfhosted-lifecycle.js';
+function newestPortableFromFile(path) {
+    const manifest = parsePlatformReleaseManifest(JSON.parse(readFileSync(path, 'utf8')));
+    const newest = newestManifestVersion(manifest, 'portable');
+    if (!newest)
+        throw new Error(`${path} has no portable release`);
+    return newest;
+}
+export function readReleasePinMatrix(repoRoot, pins) {
+    const cliPackage = JSON.parse(readFileSync(join(repoRoot, 'cli/packages/cli/package.json'), 'utf8'));
+    return {
+        cliPackageVersion: cliPackage.version,
+        stablePortableRelease: pins.stablePortableRelease,
+        packagedPortableNewest: newestPortableFromFile(join(repoRoot, 'cli/packages/cli/assets/portable/releases.json')),
+        deployPortableNewest: newestPortableFromFile(join(repoRoot, 'deploy/portable/releases.json')),
+        stableSelfhostedRelease: pins.stableSelfhostedRelease,
+        packagedSelfhostedNewest: newestSelfHostedRelease(readFileSync(join(repoRoot, 'cli/packages/cli/assets/selfhosted/releases.json'), 'utf8')),
+        deploySelfhostedNewest: newestSelfHostedRelease(readFileSync(join(repoRoot, 'deploy/selfhosted/releases.json'), 'utf8')),
+    };
+}
+/** Empty = aligned. Each string is a human-readable mismatch. */
+export function pinMatrixMismatches(matrix) {
+    const errors = [];
+    if (matrix.stablePortableRelease !== matrix.packagedPortableNewest) {
+        errors.push(`STABLE_PORTABLE_RELEASE=${matrix.stablePortableRelease} != packaged portable ${matrix.packagedPortableNewest}`);
+    }
+    if (matrix.stablePortableRelease !== matrix.deployPortableNewest) {
+        errors.push(`STABLE_PORTABLE_RELEASE=${matrix.stablePortableRelease} != deploy/portable ${matrix.deployPortableNewest}`);
+    }
+    if (matrix.packagedPortableNewest !== matrix.deployPortableNewest) {
+        errors.push(`packaged portable ${matrix.packagedPortableNewest} != deploy/portable ${matrix.deployPortableNewest}`);
+    }
+    if (matrix.stableSelfhostedRelease !== matrix.packagedSelfhostedNewest) {
+        errors.push(`STABLE_SELFHOSTED_RELEASE=${matrix.stableSelfhostedRelease} != packaged selfhosted ${matrix.packagedSelfhostedNewest}`);
+    }
+    if (matrix.stableSelfhostedRelease !== matrix.deploySelfhostedNewest) {
+        errors.push(`STABLE_SELFHOSTED_RELEASE=${matrix.stableSelfhostedRelease} != deploy/selfhosted ${matrix.deploySelfhostedNewest}`);
+    }
+    if (!/^\d+\.\d+\.\d+$/.test(matrix.cliPackageVersion)) {
+        errors.push(`@knowzai/cli version '${matrix.cliPackageVersion}' is not bare X.Y.Z`);
+    }
+    return errors;
+}
+export function catalogLagsPackagedPin(input) {
+    if (!input.packagedNewest) {
+        return { stale: false, catalogNewest: input.catalogNewest, packagedNewest: input.packagedNewest };
+    }
+    if (!input.catalogNewest) {
+        return { stale: true, catalogNewest: undefined, packagedNewest: input.packagedNewest };
+    }
+    const stale = compareSemver(input.packagedNewest, input.catalogNewest) > 0;
+    return { stale, catalogNewest: input.catalogNewest, packagedNewest: input.packagedNewest };
+}
+function compareSemver(left, right) {
+    const a = left.split('.').map(Number);
+    const b = right.split('.').map(Number);
+    for (let index = 0; index < 3; index += 1) {
+        const delta = (a[index] ?? 0) - (b[index] ?? 0);
+        if (delta !== 0)
+            return delta;
+    }
+    return 0;
+}
+//# sourceMappingURL=release-pin-matrix.js.map

package/dist/lib/release-pin-matrix.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"release-pin-matrix.js","sourceRoot":"","sources":["../../src/lib/release-pin-matrix.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,qBAAqB,EAAE,4BAA4B,EAAE,MAAM,gCAAgC,CAAC;AACrG,OAAO,EAAE,uBAAuB,EAAE,MAAM,2BAA2B,CAAC;AAiBpE,SAAS,sBAAsB,CAAC,IAAY;IAC1C,MAAM,QAAQ,GAAG,4BAA4B,CAAC,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;IACtF,MAAM,MAAM,GAAG,qBAAqB,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;IAC3D,IAAI,CAAC,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,0BAA0B,CAAC,CAAC;IAChE,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,oBAAoB,CAClC,QAAgB,EAChB,IAAwE;IAExE,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAC3B,YAAY,CAAC,IAAI,CAAC,QAAQ,EAAE,+BAA+B,CAAC,EAAE,MAAM,CAAC,CAC/C,CAAC;IACzB,OAAO;QACL,iBAAiB,EAAE,UAAU,CAAC,OAAO;QACrC,qBAAqB,EAAE,IAAI,CAAC,qBAAqB;QACjD,sBAAsB,EAAE,sBAAsB,CAC5C,IAAI,CAAC,QAAQ,EAAE,gDAAgD,CAAC,CACjE;QACD,oBAAoB,EAAE,sBAAsB,CAAC,IAAI,CAAC,QAAQ,EAAE,+BAA+B,CAAC,CAAC;QAC7F,uBAAuB,EAAE,IAAI,CAAC,uBAAuB;QACrD,wBAAwB,EAAE,uBAAuB,CAC/C,YAAY,CAAC,IAAI,CAAC,QAAQ,EAAE,kDAAkD,CAAC,EAAE,MAAM,CAAC,CACzF;QACD,sBAAsB,EAAE,uBAAuB,CAC7C,YAAY,CAAC,IAAI,CAAC,QAAQ,EAAE,iCAAiC,CAAC,EAAE,MAAM,CAAC,CACxE;KACF,CAAC;AACJ,CAAC;AAED,iEAAiE;AACjE,MAAM,UAAU,mBAAmB,CAAC,MAAwB;IAC1D,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,IAAI,MAAM,CAAC,qBAAqB,KAAK,MAAM,CAAC,sBAAsB,EAAE,CAAC;QACnE,MAAM,CAAC,IAAI,CACT,2BAA2B,MAAM,CAAC,qBAAqB,yBAAyB,MAAM,CAAC,sBAAsB,EAAE,CAChH,CAAC;IACJ,CAAC;IACD,IAAI,MAAM,CAAC,qBAAqB,KAAK,MAAM,CAAC,oBAAoB,EAAE,CAAC;QACjE,MAAM,CAAC,IAAI,CACT,2BAA2B,MAAM,CAAC,qBAAqB,uBAAuB,MAAM,CAAC,oBAAoB,EAAE,CAC5G,CAAC;IACJ,CAAC;IACD,IAAI,MAAM,CAAC,sBAAsB,KAAK,MAAM,CAAC,oBAAoB,EAAE,CAAC;QAClE,MAAM,CAAC,IAAI,CACT,qBAAqB,MAAM,CAAC,sBAAsB,uBAAuB,MAAM,CAAC,oBAAoB,EAAE,CACvG,CAAC;IACJ,CAAC;IACD,IAAI,MAAM,CAAC,uBAAuB,KAAK,MAAM,CAAC,wBAAwB,EAAE,CAAC;QACvE,MAAM,CAAC,IAAI,CACT,6BAA6B,MAAM,CAAC,uBAAuB,2BAA2B,MAAM,CAAC,wBAAwB,EAAE,CACxH,CAAC;IACJ,CAAC;IACD,IAAI,MAAM,CAAC,uBAAuB,KAAK,MAAM,CAAC,sBAAsB,EAAE,CAAC;QACrE,MAAM,CAAC,IAAI,CACT,6BAA6B,MAAM,CAAC,uBAAuB,yBAAyB,MAAM,CAAC,sBAAsB,EAAE,CACpH,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,MAAM,CAAC,iBAAiB,CAAC,EAAE,CAAC;QACtD,MAAM,CAAC,IAAI,CAAC,yBAAyB,MAAM,CAAC,iBAAiB,qBAAqB,CAAC,CAAC;IACtF,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,KAGtC;IACC,IAAI,CAAC,KAAK,CAAC,cAAc,EAAE,CAAC;QAC1B,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,aAAa,EAAE,KAAK,CAAC,aAAa,EAAE,cAAc,EAAE,KAAK,CAAC,cAAc,EAAE,CAAC;IACpG,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,aAAa,EAAE,CAAC;QACzB,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,aAAa,EAAE,SAAS,EAAE,cAAc,EAAE,KAAK,CAAC,cAAc,EAAE,CAAC;IACzF,CAAC;IACD,MAAM,KAAK,GAAG,aAAa,CAAC,KAAK,CAAC,cAAc,EAAE,KAAK,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC;IAC3E,OAAO,EAAE,KAAK,EAAE,aAAa,EAAE,KAAK,CAAC,aAAa,EAAE,cAAc,EAAE,KAAK,CAAC,cAAc,EAAE,CAAC;AAC7F,CAAC;AAED,SAAS,aAAa,CAAC,IAAY,EAAE,KAAa;IAChD,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACtC,MAAM,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACvC,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,CAAC,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QAC1C,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;QAChD,IAAI,KAAK,KAAK,CAAC;YAAE,OAAO,KAAK,CAAC;IAChC,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC"}

package/dist/lib/runtime-backup-archive.d.ts

@@ -0,0 +1,20 @@
+import type { AsyncProcessRunner, ProcessRunner } from './platform-runtime.js';
+export declare const SELFHOSTED_BACKUP_ARTIFACTS: readonly ["pg/knowz_selfhosted.dump", "volumes/knowz-file-storage.tar.gz", "volumes/knowz-protected-keys.tar.gz", "runtime/.env", "runtime/state.json"];
+export declare const MAX_BACKUP_BYTES: number;
+export interface InspectedBackup {
+    edition: 'portable' | 'selfhosted';
+    manifest: Record<string, unknown>;
+    entries: Record<string, {
+        bytes: number;
+        sha256: string;
+    }>;
+}
+interface Input {
+    archive: string;
+    passphrase?: string;
+    runner: ProcessRunner | AsyncProcessRunner;
+}
+export declare function withRuntimeBackup<T>(input: Input, consume: (backup: InspectedBackup, extracted: string) => Promise<T>): Promise<T>;
+export declare function inspectRuntimeBackup(input: Input): Promise<InspectedBackup>;
+export {};
+//# sourceMappingURL=runtime-backup-archive.d.ts.map

package/dist/lib/runtime-backup-archive.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime-backup-archive.d.ts","sourceRoot":"","sources":["../../src/lib/runtime-backup-archive.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAE,kBAAkB,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAC/E,eAAO,MAAM,2BAA2B,yJAM9B,CAAC;AACX,eAAO,MAAM,gBAAgB,QAAkB,CAAC;AAShD,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAE,UAAU,GAAG,YAAY,CAAC;IACnC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAClC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CAC5D;AACD,UAAU,KAAK;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,aAAa,GAAG,kBAAkB,CAAC;CAC5C;AA2MD,wBAAsB,iBAAiB,CAAC,CAAC,EACvC,KAAK,EAAE,KAAK,EACZ,OAAO,EAAE,CAAC,MAAM,EAAE,eAAe,EAAE,SAAS,EAAE,MAAM,KAAK,OAAO,CAAC,CAAC,CAAC,GAClE,OAAO,CAAC,CAAC,CAAC,CAwCZ;AACD,wBAAsB,oBAAoB,CAAC,KAAK,EAAE,KAAK,GAAG,OAAO,CAAC,eAAe,CAAC,CAEjF"}

package/dist/lib/runtime-backup-archive.js

@@ -0,0 +1,269 @@
+import { createReadStream, rmSync, statSync } from 'node:fs';
+import { createPrivateTempDirectory, ensurePrivateDirectory } from '@knowzai/core';
+import { createHash } from 'node:crypto';
+import { createGunzip } from 'node:zlib';
+import { join, resolve } from 'node:path';
+import { tmpdir } from 'node:os';
+import { KnowzError, ExitCode } from '@knowzai/core';
+import { BACKUP_ARTIFACTS, decryptStream, parseAndValidateManifest } from './platform-backup.js';
+export const SELFHOSTED_BACKUP_ARTIFACTS = [
+    'pg/knowz_selfhosted.dump',
+    'volumes/knowz-file-storage.tar.gz',
+    'volumes/knowz-protected-keys.tar.gz',
+    'runtime/.env',
+    'runtime/state.json',
+];
+export const MAX_BACKUP_BYTES = 100 * 1024 ** 3;
+const allowed = new Set([
+    'manifest.json',
+    ...BACKUP_ARTIFACTS,
+    ...SELFHOSTED_BACKUP_ARTIFACTS,
+]);
+const invalid = (message) => {
+    throw new KnowzError(message, ExitCode.Usage);
+};
+/** Bounded streaming ustar intake. No paths are extracted until names, types, declared sizes and all hashes pass. */
+async function scanArchive(path, volume = false) {
+    const entries = {};
+    let buffer = Buffer.alloc(0);
+    let left = 0;
+    let padding = 0;
+    let total = 0;
+    let decompressedBytes = 0;
+    let headers = 0;
+    let entryCount = 0;
+    let name = '';
+    let hash = createHash('sha256');
+    let manifestBytes = [];
+    let manifestText = '';
+    let end = false;
+    let pax = false;
+    let paxChunks = [];
+    let paxPath;
+    const stream = createReadStream(path).pipe(createGunzip());
+    for await (const raw of stream) {
+        decompressedBytes += raw.length;
+        if (decompressedBytes > MAX_BACKUP_BYTES)
+            invalid('Backup decompression exceeds the 100 GiB limit.');
+        buffer = Buffer.concat([buffer, raw]);
+        while (buffer.length) {
+            if (left) {
+                const n = Math.min(left, buffer.length);
+                const chunk = buffer.subarray(0, n);
+                hash.update(chunk);
+                if (pax)
+                    paxChunks.push(chunk);
+                else if (!volume && name === 'manifest.json')
+                    manifestBytes.push(chunk);
+                buffer = buffer.subarray(n);
+                left -= n;
+                if (left)
+                    continue;
+                if (pax) {
+                    const data = Buffer.concat(paxChunks);
+                    let cursor = 0;
+                    while (cursor < data.length) {
+                        const space = data.indexOf(32, cursor);
+                        if (space < 0)
+                            invalid('Invalid PAX metadata.');
+                        const length = Number(data.subarray(cursor, space).toString());
+                        if (!Number.isSafeInteger(length) ||
+                            length <= space - cursor + 1 ||
+                            cursor + length > data.length)
+                            invalid('Invalid PAX record size.');
+                        const record = data.subarray(space + 1, cursor + length - 1).toString('utf8');
+                        const eq = record.indexOf('=');
+                        const key = record.slice(0, eq);
+                        const value = record.slice(eq + 1);
+                        if (key === 'path')
+                            paxPath = value;
+                        else if (![
+                            'mtime',
+                            'atime',
+                            'ctime',
+                            'creationtime',
+                            'LIBARCHIVE.creationtime',
+                            'LIBARCHIVE.xattr.com.apple.provenance',
+                            'SCHILY.xattr.com.apple.provenance',
+                        ].includes(key))
+                            invalid(`Unsupported PAX metadata field: ${key}`);
+                        cursor += length;
+                    }
+                    pax = false;
+                }
+                else {
+                    entries[name].sha256 = 'sha256:' + hash.digest('hex');
+                    if (!volume && name === 'manifest.json')
+                        manifestText = Buffer.concat(manifestBytes).toString('utf8');
+                }
+            }
+            if (padding) {
+                const n = Math.min(padding, buffer.length);
+                buffer = buffer.subarray(n);
+                padding -= n;
+                if (padding || !buffer.length)
+                    continue;
+            }
+            if (buffer.length < 512)
+                break;
+            if (++headers > 100000)
+                invalid('Backup exceeds the 100000 archive header limit.');
+            const header = buffer.subarray(0, 512);
+            buffer = buffer.subarray(512);
+            if (header.every((byte) => byte === 0)) {
+                end = true;
+                continue;
+            }
+            if (end)
+                invalid('Archive contains data after its end marker.');
+            const string = (start, length) => header
+                .subarray(start, start + length)
+                .toString('utf8')
+                .replace(/\0.*$/s, '');
+            const octal = (start, length) => {
+                const text = string(start, length).trim();
+                if (!/^[0-7]+$/.test(text))
+                    invalid('Invalid archive size/checksum field.');
+                return Number.parseInt(text, 8);
+            };
+            const sum = [...header].reduce((acc, byte, index) => acc + (index >= 148 && index < 156 ? 32 : byte), 0);
+            if (sum !== octal(148, 8))
+                invalid('Invalid tar header checksum.');
+            const prefix = string(345, 155);
+            name = (prefix ? prefix + '/' : '') + string(0, 100);
+            name = name.replace(/^\.\//, '').replace(/\/$/, '');
+            const type = string(156, 1);
+            const size = octal(124, 12);
+            total += size;
+            if (total > MAX_BACKUP_BYTES || size > MAX_BACKUP_BYTES)
+                invalid('Backup exceeds the supported 100 GiB uncompressed size limit.');
+            if (type === 'x') {
+                if (size > 65536 || size === 0)
+                    invalid('Invalid or oversized PAX metadata.');
+                pax = true;
+                paxChunks = [];
+                left = size;
+                padding = (512 - (size % 512)) % 512;
+                hash = createHash('sha256');
+                continue;
+            }
+            if (paxPath !== undefined) {
+                name = paxPath.replace(/^\.\//, '').replace(/\/$/, '');
+                paxPath = undefined;
+            }
+            const safePath = !name.startsWith('/') &&
+                !name.includes('\\') &&
+                !name.split('/').includes('..') &&
+                !/^[A-Za-z]:/.test(name);
+            if (!safePath)
+                invalid('Unsafe archive path.');
+            if (type === '5' &&
+                (volume || name === '' || name === '.' || ['pg', 'volumes', 'runtime'].includes(name)) &&
+                size === 0)
+                continue;
+            if (type !== '' && type !== '0')
+                invalid('Backup contains a link or unsupported archive entry type.');
+            const metadataName = name.replace(/(^|\/)\._/g, '$1');
+            const appleMetadata = !volume &&
+                metadataName !== name &&
+                (allowed.has(metadataName) || ['pg', 'volumes', 'runtime'].includes(metadataName));
+            if (appleMetadata && size > 1024 * 1024)
+                invalid('Archive metadata exceeds size limit.');
+            if ((!volume && !allowed.has(name) && !appleMetadata) ||
+                name in entries ||
+                entryCount >= 100000)
+                invalid(`Unsafe, duplicate or unexpected archive entry: ${name}`);
+            if (!volume && name === 'manifest.json' && size > 1024 * 1024)
+                invalid('Backup manifest is too large.');
+            entryCount++;
+            entries[name] = { bytes: size, sha256: '' };
+            hash = createHash('sha256');
+            manifestBytes = [];
+            left = size;
+            padding = (512 - (size % 512)) % 512;
+            if (!size) {
+                entries[name].sha256 = 'sha256:' + hash.digest('hex');
+            }
+        }
+    }
+    if (left || padding || !end || (!volume && !manifestText))
+        invalid('Truncated archive or missing manifest.');
+    if (volume)
+        return { edition: 'selfhosted', manifest: {}, entries };
+    for (const entry of Object.keys(entries))
+        if (entry.split('/').some((part) => part.startsWith('._')))
+            delete entries[entry];
+    const manifest = (() => {
+        try {
+            return JSON.parse(manifestText);
+        }
+        catch {
+            return invalid('Backup manifest is not valid JSON.');
+        }
+    })();
+    if (!manifest || typeof manifest !== 'object' || Array.isArray(manifest))
+        invalid('Invalid backup manifest.');
+    const edition = manifest.edition === 'selfhosted' && manifest.formatVersion === 2
+        ? 'selfhosted'
+        : manifest.schemaVersion === 1 && (!manifest.edition || manifest.edition === 'portable')
+            ? 'portable'
+            : invalid('Unsupported backup edition/database/format. Legacy SQL archives require the matching legacy recovery tools.');
+    if (edition === 'portable')
+        parseAndValidateManifest(manifestText);
+    const sizes = manifest.sizes;
+    const checksums = manifest.checksums;
+    const payloads = edition === 'selfhosted' ? SELFHOSTED_BACKUP_ARTIFACTS : BACKUP_ARTIFACTS;
+    for (const payload of payloads) {
+        if (edition === 'selfhosted' &&
+            (!Number.isSafeInteger(sizes?.[payload]) || sizes?.[payload] !== entries[payload]?.bytes))
+            invalid(`Backup payload size does not match ${payload}.`);
+        if (!entries[payload] || checksums?.[payload] !== entries[payload]?.sha256)
+            invalid(`Backup checksum validation failed for ${payload}.`);
+    }
+    if (Object.keys(entries).length !== payloads.length + 1)
+        invalid('Archive contains payloads from a different edition.');
+    return { edition, manifest, entries };
+}
+export async function withRuntimeBackup(input, consume) {
+    const source = statSync(resolve(input.archive));
+    if (!source.isFile() || source.size > MAX_BACKUP_BYTES)
+        invalid('Backup input exceeds the supported file size limit.');
+    const temp = createPrivateTempDirectory(tmpdir(), 'knowz-backup-intake-');
+    try {
+        let archive = resolve(input.archive);
+        if (archive.endsWith('.enc')) {
+            if (!input.passphrase)
+                throw new KnowzError('A passphrase is required for this encrypted archive.', ExitCode.Auth);
+            const plain = join(temp, 'archive.tar.gz');
+            await decryptStream(archive, plain, input.passphrase);
+            archive = plain;
+        }
+        const backup = await scanArchive(archive);
+        const extracted = join(temp, 'payload');
+        ensurePrivateDirectory(extracted);
+        const result = await input.runner('tar', [
+            '-xzf',
+            archive,
+            '--exclude=._*',
+            '--exclude=*/._*',
+            '--no-xattrs',
+            '--no-same-owner',
+            '--no-same-permissions',
+            '-C',
+            extracted,
+        ], { cwd: temp, shell: false });
+        if (result.status !== 0)
+            invalid('Could not extract validated backup archive.');
+        if (backup.edition === 'selfhosted')
+            for (const volume of ['knowz-file-storage', 'knowz-protected-keys'])
+                await scanArchive(join(extracted, `volumes/${volume}.tar.gz`), true);
+        return await consume(backup, extracted);
+    }
+    finally {
+        rmSync(temp, { recursive: true, force: true });
+    }
+}
+export async function inspectRuntimeBackup(input) {
+    return withRuntimeBackup(input, async (backup) => backup);
+}
+//# sourceMappingURL=runtime-backup-archive.js.map

package/dist/lib/runtime-backup-archive.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime-backup-archive.js","sourceRoot":"","sources":["../../src/lib/runtime-backup-archive.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAC7D,OAAO,EAAE,0BAA0B,EAAE,sBAAsB,EAAE,MAAM,eAAe,CAAC;AACnF,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,YAAY,EAAE,MAAM,WAAW,CAAC;AACzC,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AACrD,OAAO,EAAE,gBAAgB,EAAE,aAAa,EAAE,wBAAwB,EAAE,MAAM,sBAAsB,CAAC;AAEjG,MAAM,CAAC,MAAM,2BAA2B,GAAG;IACzC,0BAA0B;IAC1B,mCAAmC;IACnC,qCAAqC;IACrC,cAAc;IACd,oBAAoB;CACZ,CAAC;AACX,MAAM,CAAC,MAAM,gBAAgB,GAAG,GAAG,GAAG,IAAI,IAAI,CAAC,CAAC;AAChD,MAAM,OAAO,GAAG,IAAI,GAAG,CAAS;IAC9B,eAAe;IACf,GAAG,gBAAgB;IACnB,GAAG,2BAA2B;CAC/B,CAAC,CAAC;AACH,MAAM,OAAO,GAAG,CAAC,OAAe,EAAS,EAAE;IACzC,MAAM,IAAI,UAAU,CAAC,OAAO,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC;AAChD,CAAC,CAAC;AAWF,qHAAqH;AACrH,KAAK,UAAU,WAAW,CAAC,IAAY,EAAE,MAAM,GAAG,KAAK;IACrD,MAAM,OAAO,GAA+B,EAAE,CAAC;IAC/C,IAAI,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAC7B,IAAI,IAAI,GAAG,CAAC,CAAC;IACb,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,IAAI,iBAAiB,GAAG,CAAC,CAAC;IAC1B,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,IAAI,UAAU,GAAG,CAAC,CAAC;IACnB,IAAI,IAAI,GAAG,EAAE,CAAC;IACd,IAAI,IAAI,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC;IAChC,IAAI,aAAa,GAAa,EAAE,CAAC;IACjC,IAAI,YAAY,GAAG,EAAE,CAAC;IACtB,IAAI,GAAG,GAAG,KAAK,CAAC;IAChB,IAAI,GAAG,GAAG,KAAK,CAAC;IAChB,IAAI,SAAS,GAAa,EAAE,CAAC;IAC7B,IAAI,OAA2B,CAAC;IAChC,MAAM,MAAM,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC,CAAC;IAC3D,IAAI,KAAK,EAAE,MAAM,GAAG,IAAI,MAAM,EAAE,CAAC;QAC/B,iBAAiB,IAAK,GAAc,CAAC,MAAM,CAAC;QAC5C,IAAI,iBAAiB,GAAG,gBAAgB;YACtC,OAAO,CAAC,iDAAiD,CAAC,CAAC;QAC7D,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,GAAa,CAAC,CAAC,CAAC;QAChD,OAAO,MAAM,CAAC,MAAM,EAAE,CAAC;YACrB,IAAI,IAAI,EAAE,CAAC;gBACT,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;gBACxC,MAAM,KAAK,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;gBACpC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;gBACnB,IAAI,GAAG;oBAAE,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;qBAC1B,IAAI,CAAC,MAAM,IAAI,IAAI,KAAK,eAAe;oBAAE,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;gBACxE,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;gBAC5B,IAAI,IAAI,CAAC,CAAC;gBACV,IAAI,IAAI;oBAAE,SAAS;gBACnB,IAAI,GAAG,EAAE,CAAC;oBACR,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;oBACtC,IAAI,MAAM,GAAG,CAAC,CAAC;oBACf,OAAO,MAAM,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;wBAC5B,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;wBACvC,IAAI,KAAK,GAAG,CAAC;4BAAE,OAAO,CAAC,uBAAuB,CAAC,CAAC;wBAChD,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC;wBAC/D,IACE,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC;4BAC7B,MAAM,IAAI,KAAK,GAAG,MAAM,GAAG,CAAC;4BAC5B,MAAM,GAAG,MAAM,GAAG,IAAI,CAAC,MAAM;4BAE7B,OAAO,CAAC,0BAA0B,CAAC,CAAC;wBACtC,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,KAAK,GAAG,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;wBAC9E,MAAM,EAAE,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;wBAC/B,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;wBAChC,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;wBACnC,IAAI,GAAG,KAAK,MAAM;4BAAE,OAAO,GAAG,KAAK,CAAC;6BAC/B,IACH,CAAC;4BACC,OAAO;4BACP,OAAO;4BACP,OAAO;4BACP,cAAc;4BACd,yBAAyB;4BACzB,uCAAuC;4BACvC,mCAAmC;yBACpC,CAAC,QAAQ,CAAC,GAAG,CAAC;4BAEf,OAAO,CAAC,mCAAmC,GAAG,EAAE,CAAC,CAAC;wBACpD,MAAM,IAAI,MAAM,CAAC;oBACnB,CAAC;oBACD,GAAG,GAAG,KAAK,CAAC;gBACd,CAAC;qBAAM,CAAC;oBACN,OAAO,CAAC,IAAI,CAAE,CAAC,MAAM,GAAG,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;oBACvD,IAAI,CAAC,MAAM,IAAI,IAAI,KAAK,eAAe;wBACrC,YAAY,GAAG,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;gBACjE,CAAC;YACH,CAAC;YACD,IAAI,OAAO,EAAE,CAAC;gBACZ,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;gBAC3C,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;gBAC5B,OAAO,IAAI,CAAC,CAAC;gBACb,IAAI,OAAO,IAAI,CAAC,MAAM,CAAC,MAAM;oBAAE,SAAS;YAC1C,CAAC;YACD,IAAI,MAAM,CAAC,MAAM,GAAG,GAAG;gBAAE,MAAM;YAC/B,IAAI,EAAE,OAAO,GAAG,MAAM;gBAAE,OAAO,CAAC,iDAAiD,CAAC,CAAC;YACnF,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;YACvC,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;YAC9B,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,KAAK,CAAC,CAAC,EAAE,CAAC;gBACvC,GAAG,GAAG,IAAI,CAAC;gBACX,SAAS;YACX,CAAC;YACD,IAAI,GAAG;gBAAE,OAAO,CAAC,6CAA6C,CAAC,CAAC;YAChE,MAAM,MAAM,GAAG,CAAC,KAAa,EAAE,MAAc,EAAE,EAAE,CAC/C,MAAM;iBACH,QAAQ,CAAC,KAAK,EAAE,KAAK,GAAG,MAAM,CAAC;iBAC/B,QAAQ,CAAC,MAAM,CAAC;iBAChB,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;YAC3B,MAAM,KAAK,GAAG,CAAC,KAAa,EAAE,MAAc,EAAE,EAAE;gBAC9C,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;gBAC1C,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC;oBAAE,OAAO,CAAC,sCAAsC,CAAC,CAAC;gBAC5E,OAAO,MAAM,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;YAClC,CAAC,CAAC;YACF,MAAM,GAAG,GAAG,CAAC,GAAG,MAAM,CAAC,CAAC,MAAM,CAC5B,CAAC,GAAG,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,KAAK,IAAI,GAAG,IAAI,KAAK,GAAG,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,EACrE,CAAC,CACF,CAAC;YACF,IAAI,GAAG,KAAK,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC;gBAAE,OAAO,CAAC,8BAA8B,CAAC,CAAC;YACnE,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;YAChC,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;YACrD,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;YACpD,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;YAC5B,MAAM,IAAI,GAAG,KAAK,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;YAC5B,KAAK,IAAI,IAAI,CAAC;YACd,IAAI,KAAK,GAAG,gBAAgB,IAAI,IAAI,GAAG,gBAAgB;gBACrD,OAAO,CAAC,+DAA+D,CAAC,CAAC;YAC3E,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;gBACjB,IAAI,IAAI,GAAG,KAAK,IAAI,IAAI,KAAK,CAAC;oBAAE,OAAO,CAAC,oCAAoC,CAAC,CAAC;gBAC9E,GAAG,GAAG,IAAI,CAAC;gBACX,SAAS,GAAG,EAAE,CAAC;gBACf,IAAI,GAAG,IAAI,CAAC;gBACZ,OAAO,GAAG,CAAC,GAAG,GAAG,CAAC,IAAI,GAAG,GAAG,CAAC,CAAC,GAAG,GAAG,CAAC;gBACrC,IAAI,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC;gBAC5B,SAAS;YACX,CAAC;YACD,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;gBAC1B,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;gBACvD,OAAO,GAAG,SAAS,CAAC;YACtB,CAAC;YACD,MAAM,QAAQ,GACZ,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;gBACrB,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;gBACpB,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC;gBAC/B,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC3B,IAAI,CAAC,QAAQ;gBAAE,OAAO,CAAC,sBAAsB,CAAC,CAAC;YAC/C,IACE,IAAI,KAAK,GAAG;gBACZ,CAAC,MAAM,IAAI,IAAI,KAAK,EAAE,IAAI,IAAI,KAAK,GAAG,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;gBACtF,IAAI,KAAK,CAAC;gBAEV,SAAS;YACX,IAAI,IAAI,KAAK,EAAE,IAAI,IAAI,KAAK,GAAG;gBAC7B,OAAO,CAAC,2DAA2D,CAAC,CAAC;YACvE,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,IAAI,CAAC,CAAC;YACtD,MAAM,aAAa,GACjB,CAAC,MAAM;gBACP,YAAY,KAAK,IAAI;gBACrB,CAAC,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC,CAAC;YACrF,IAAI,aAAa,IAAI,IAAI,GAAG,IAAI,GAAG,IAAI;gBAAE,OAAO,CAAC,sCAAsC,CAAC,CAAC;YACzF,IACE,CAAC,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC;gBACjD,IAAI,IAAI,OAAO;gBACf,UAAU,IAAI,MAAM;gBAEpB,OAAO,CAAC,kDAAkD,IAAI,EAAE,CAAC,CAAC;YACpE,IAAI,CAAC,MAAM,IAAI,IAAI,KAAK,eAAe,IAAI,IAAI,GAAG,IAAI,GAAG,IAAI;gBAC3D,OAAO,CAAC,+BAA+B,CAAC,CAAC;YAC3C,UAAU,EAAE,CAAC;YACb,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;YAC5C,IAAI,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC;YAC5B,aAAa,GAAG,EAAE,CAAC;YACnB,IAAI,GAAG,IAAI,CAAC;YACZ,OAAO,GAAG,CAAC,GAAG,GAAG,CAAC,IAAI,GAAG,GAAG,CAAC,CAAC,GAAG,GAAG,CAAC;YACrC,IAAI,CAAC,IAAI,EAAE,CAAC;gBACV,OAAO,CAAC,IAAI,CAAE,CAAC,MAAM,GAAG,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACzD,CAAC;QACH,CAAC;IACH,CAAC;IACD,IAAI,IAAI,IAAI,OAAO,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,YAAY,CAAC;QACvD,OAAO,CAAC,wCAAwC,CAAC,CAAC;IACpD,IAAI,MAAM;QAAE,OAAO,EAAE,OAAO,EAAE,YAAY,EAAE,QAAQ,EAAE,EAAE,EAAE,OAAO,EAAE,CAAC;IACpE,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC;QACtC,IAAI,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;YAAE,OAAO,OAAO,CAAC,KAAK,CAAC,CAAC;IACpF,MAAM,QAAQ,GAAG,CAAC,GAAG,EAAE;QACrB,IAAI,CAAC;YACH,OAAO,IAAI,CAAC,KAAK,CAAC,YAAY,CAA4B,CAAC;QAC7D,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,OAAO,CAAC,oCAAoC,CAAC,CAAC;QACvD,CAAC;IACH,CAAC,CAAC,EAAE,CAAC;IACL,IAAI,CAAC,QAAS,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC;QACvE,OAAO,CAAC,0BAA0B,CAAC,CAAC;IACtC,MAAM,OAAO,GACX,QAAQ,CAAC,OAAO,KAAK,YAAY,IAAI,QAAQ,CAAC,aAAa,KAAK,CAAC;QAC/D,CAAC,CAAC,YAAY;QACd,CAAC,CAAC,QAAQ,CAAC,aAAa,KAAK,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,OAAO,IAAI,QAAQ,CAAC,OAAO,KAAK,UAAU,CAAC;YACtF,CAAC,CAAC,UAAU;YACZ,CAAC,CAAC,OAAO,CACL,6GAA6G,CAC9G,CAAC;IACV,IAAI,OAAO,KAAK,UAAU;QAAE,wBAAwB,CAAC,YAAY,CAAC,CAAC;IACnE,MAAM,KAAK,GAAG,QAAQ,CAAC,KAA2C,CAAC;IACnE,MAAM,SAAS,GAAG,QAAQ,CAAC,SAA+C,CAAC;IAC3E,MAAM,QAAQ,GAAG,OAAO,KAAK,YAAY,CAAC,CAAC,CAAC,2BAA2B,CAAC,CAAC,CAAC,gBAAgB,CAAC;IAC3F,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,IACE,OAAO,KAAK,YAAY;YACxB,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,EAAE,CAAC,OAAO,CAAC,CAAC,IAAI,KAAK,EAAE,CAAC,OAAO,CAAC,KAAK,OAAO,CAAC,OAAO,CAAC,EAAE,KAAK,CAAC;YAEzF,OAAO,CAAC,sCAAsC,OAAO,GAAG,CAAC,CAAC;QAC5D,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,SAAS,EAAE,CAAC,OAAO,CAAC,KAAK,OAAO,CAAC,OAAO,CAAC,EAAE,MAAM;YACxE,OAAO,CAAC,yCAAyC,OAAO,GAAG,CAAC,CAAC;IACjE,CAAC;IACD,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM,GAAG,CAAC;QACrD,OAAO,CAAC,qDAAqD,CAAC,CAAC;IACjE,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC;AACxC,CAAC;AACD,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,KAAY,EACZ,OAAmE;IAEnE,MAAM,MAAM,GAAG,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;IAChD,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,MAAM,CAAC,IAAI,GAAG,gBAAgB;QACpD,OAAO,CAAC,qDAAqD,CAAC,CAAC;IACjE,MAAM,IAAI,GAAG,0BAA0B,CAAC,MAAM,EAAE,EAAE,sBAAsB,CAAC,CAAC;IAC1E,IAAI,CAAC;QACH,IAAI,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACrC,IAAI,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;YAC7B,IAAI,CAAC,KAAK,CAAC,UAAU;gBACnB,MAAM,IAAI,UAAU,CAAC,sDAAsD,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC;YAC9F,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,EAAE,gBAAgB,CAAC,CAAC;YAC3C,MAAM,aAAa,CAAC,OAAO,EAAE,KAAK,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC;YACtD,OAAO,GAAG,KAAK,CAAC;QAClB,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,OAAO,CAAC,CAAC;QAC1C,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;QACxC,sBAAsB,CAAC,SAAS,CAAC,CAAC;QAClC,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,MAAM,CAC/B,KAAK,EACL;YACE,MAAM;YACN,OAAO;YACP,eAAe;YACf,iBAAiB;YACjB,aAAa;YACb,iBAAiB;YACjB,uBAAuB;YACvB,IAAI;YACJ,SAAS;SACV,EACD,EAAE,GAAG,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,CAC5B,CAAC;QACF,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,CAAC,6CAA6C,CAAC,CAAC;QAChF,IAAI,MAAM,CAAC,OAAO,KAAK,YAAY;YACjC,KAAK,MAAM,MAAM,IAAI,CAAC,oBAAoB,EAAE,sBAAsB,CAAC;gBACjE,MAAM,WAAW,CAAC,IAAI,CAAC,SAAS,EAAE,WAAW,MAAM,SAAS,CAAC,EAAE,IAAI,CAAC,CAAC;QACzE,OAAO,MAAM,OAAO,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;IAC1C,CAAC;YAAS,CAAC;QACT,MAAM,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACjD,CAAC;AACH,CAAC;AACD,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,KAAY;IACrD,OAAO,iBAAiB,CAAC,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC;AAC5D,CAAC"}

package/dist/lib/runtime-command.d.ts

@@ -0,0 +1,37 @@
+import { BaseCommand } from '../base-command.js';
+import { type RuntimeAction } from './runtime-operations.js';
+import type { PlatformEdition } from './platform-edition.js';
+export declare const runtimeIdentityFlags: {
+    edition: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+    name: import("@oclif/core/interfaces").OptionFlag<string, import("@oclif/core/interfaces").CustomOptions>;
+    'config-dir': import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+};
+export interface RuntimeFlags {
+    name: string;
+    'config-dir'?: string;
+    edition?: string;
+    version?: string;
+    yes?: boolean;
+    'purge-profile'?: boolean;
+    tail?: number;
+}
+/** Human/JSON rendering shared by edition-aware commands and explicit portable aliases. */
+export declare abstract class RuntimeCommand extends BaseCommand {
+    protected runOperation(action: RuntimeAction, flags: RuntimeFlags, explicitEdition?: PlatformEdition): Promise<{
+        output: string;
+        action: RuntimeAction;
+        name: string;
+        edition: "selfhosted" | "portable";
+        installedVersion: string;
+        runtimeDir: string;
+        engine: import("./container-engine.js").ContainerEngineId;
+    } | {
+        action: RuntimeAction;
+        name: string;
+        error: {
+            code: string;
+            message: string;
+        };
+    }>;
+}
+//# sourceMappingURL=runtime-command.d.ts.map

package/dist/lib/runtime-command.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime-command.d.ts","sourceRoot":"","sources":["../../src/lib/runtime-command.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,EAAuB,KAAK,aAAa,EAAE,MAAM,yBAAyB,CAAC;AAElF,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAE7D,eAAO,MAAM,oBAAoB;;;;CAMhC,CAAC;AACF,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,GAAG,CAAC,EAAE,OAAO,CAAC;IACd,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AACD,2FAA2F;AAC3F,8BAAsB,cAAe,SAAQ,WAAW;cACtC,YAAY,CAC1B,MAAM,EAAE,aAAa,EACrB,KAAK,EAAE,YAAY,EACnB,eAAe,CAAC,EAAE,eAAe;;;;;;;;;;;;;;;;CAiCpC"}

package/dist/lib/runtime-command.js

@@ -0,0 +1,50 @@
+import { exitCodeForError, logger } from '@knowzai/core';
+import { Flags } from '@oclif/core';
+import { BaseCommand } from '../base-command.js';
+import { runRuntimeOperation } from './runtime-operations.js';
+import { platformIdentityFlags } from './platform-command-shared.js';
+export const runtimeIdentityFlags = {
+    ...platformIdentityFlags,
+    edition: Flags.string({
+        description: 'Runtime edition (required when both editions have this name)',
+        options: ['selfhosted', 'portable'],
+    }),
+};
+/** Human/JSON rendering shared by edition-aware commands and explicit portable aliases. */
+export class RuntimeCommand extends BaseCommand {
+    async runOperation(action, flags, explicitEdition) {
+        try {
+            const result = await runRuntimeOperation(action, {
+                name: flags.name,
+                configDir: flags['config-dir'],
+                edition: explicitEdition ?? flags.edition,
+                version: flags.version,
+                confirmed: flags.yes,
+                purgeProfile: flags['purge-profile'],
+                tail: flags.tail,
+            });
+            if (!this.jsonEnabled() && result.output)
+                this.log(result.output);
+            if (action === 'doctor' && 'checks' in result && result.checks.some((check) => !check.ok))
+                process.exitCode = 1;
+            return result;
+        }
+        catch (error) {
+            if (!this.jsonEnabled())
+                throw error;
+            process.exitCode = exitCodeForError(error);
+            const code = error && typeof error === 'object' && 'code' in error && typeof error.code === 'string'
+                ? error.code
+                : 'RUNTIME_ERROR';
+            return {
+                action,
+                name: flags.name,
+                error: {
+                    code,
+                    message: logger.redact(error instanceof Error ? error.message : String(error)),
+                },
+            };
+        }
+    }
+}
+//# sourceMappingURL=runtime-command.js.map

package/dist/lib/runtime-command.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime-command.js","sourceRoot":"","sources":["../../src/lib/runtime-command.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,MAAM,EAAE,MAAM,eAAe,CAAC;AACzD,OAAO,EAAE,KAAK,EAAE,MAAM,aAAa,CAAC;AACpC,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,EAAE,mBAAmB,EAAsB,MAAM,yBAAyB,CAAC;AAClF,OAAO,EAAE,qBAAqB,EAAE,MAAM,8BAA8B,CAAC;AAGrE,MAAM,CAAC,MAAM,oBAAoB,GAAG;IAClC,GAAG,qBAAqB;IACxB,OAAO,EAAE,KAAK,CAAC,MAAM,CAAC;QACpB,WAAW,EAAE,8DAA8D;QAC3E,OAAO,EAAE,CAAC,YAAY,EAAE,UAAU,CAAC;KACpC,CAAC;CACH,CAAC;AAUF,2FAA2F;AAC3F,MAAM,OAAgB,cAAe,SAAQ,WAAW;IAC5C,KAAK,CAAC,YAAY,CAC1B,MAAqB,EACrB,KAAmB,EACnB,eAAiC;QAEjC,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,mBAAmB,CAAC,MAAM,EAAE;gBAC/C,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,SAAS,EAAE,KAAK,CAAC,YAAY,CAAC;gBAC9B,OAAO,EAAE,eAAe,IAAK,KAAK,CAAC,OAAuC;gBAC1E,OAAO,EAAE,KAAK,CAAC,OAAO;gBACtB,SAAS,EAAE,KAAK,CAAC,GAAG;gBACpB,YAAY,EAAE,KAAK,CAAC,eAAe,CAAC;gBACpC,IAAI,EAAE,KAAK,CAAC,IAAI;aACjB,CAAC,CAAC;YACH,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,MAAM,CAAC,MAAM;gBAAE,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;YAClE,IAAI,MAAM,KAAK,QAAQ,IAAI,QAAQ,IAAI,MAAM,IAAI,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC;gBACvF,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;YACvB,OAAO,MAAM,CAAC;QAChB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE;gBAAE,MAAM,KAAK,CAAC;YACrC,OAAO,CAAC,QAAQ,GAAG,gBAAgB,CAAC,KAAK,CAAC,CAAC;YAC3C,MAAM,IAAI,GACR,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,IAAI,KAAK,IAAI,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ;gBACrF,CAAC,CAAC,KAAK,CAAC,IAAI;gBACZ,CAAC,CAAC,eAAe,CAAC;YACtB,OAAO;gBACL,MAAM;gBACN,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,KAAK,EAAE;oBACL,IAAI;oBACJ,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;iBAC/E;aACF,CAAC;QACJ,CAAC;IACH,CAAC;CACF"}

package/dist/lib/runtime-discovery.d.ts

@@ -0,0 +1,18 @@
+import type { EngineStatus } from './container-engine.js';
+import { type PlatformPaths, type PlatformState } from './platform-runtime.js';
+import type { PlatformEdition } from './platform-edition.js';
+export interface InstalledRuntime {
+    edition: PlatformEdition;
+    paths: PlatformPaths;
+    state: PlatformState;
+    engine?: EngineStatus;
+    hasHealthyState?: boolean;
+    attemptStatus?: string;
+}
+/** One selector for setup, terminal and lifecycle commands. Unknown/corrupt state is never a fresh install. */
+export declare function discoverRuntime(input: {
+    name: string;
+    configDir?: string;
+    edition?: PlatformEdition;
+}): InstalledRuntime | undefined;
+//# sourceMappingURL=runtime-discovery.d.ts.map

package/dist/lib/runtime-discovery.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime-discovery.d.ts","sourceRoot":"","sources":["../../src/lib/runtime-discovery.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AAG1D,OAAO,EAAmF,KAAK,aAAa,EAAE,KAAK,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAEhK,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAE7D,MAAM,WAAW,gBAAgB;IAAG,OAAO,EAAE,eAAe,CAAC;IAAC,KAAK,EAAE,aAAa,CAAC;IAAC,KAAK,EAAE,aAAa,CAAC;IAAC,MAAM,CAAC,EAAE,YAAY,CAAC;IAAC,eAAe,CAAC,EAAE,OAAO,CAAC;IAAC,aAAa,CAAC,EAAE,MAAM,CAAA;CAAE;AAEpL,+GAA+G;AAC/G,wBAAgB,eAAe,CAAC,KAAK,EAAE;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,eAAe,CAAA;CAAE,GAAG,gBAAgB,GAAG,SAAS,CAuCpI"}