@mean-weasel/lineage 0.1.16 → 0.1.18

package/dist/cli/managed-service.js

@@ -88,9 +88,26 @@ function serviceRoot() {
 }
 function defaultLauncher(channel) {
   if (channel === "dev") return [process.execPath, "--import", "tsx", join(root, "src", "cli", "lineage-dev.ts")];
-  const runtimeRoot = process.env.LINEAGE_RUNTIME_ROOT || (platform() === "darwin" ? join(homedir(), "Library", "Application Support", "Lineage", "runtimes") : join(homedir(), ".local", "share", "lineage", "runtimes"));
   const envName = channel === "stable" ? "LINEAGE_STABLE_BIN" : "LINEAGE_PREVIEW_BIN";
-  return [process.env[envName] || join(runtimeRoot, "bin", channel === "stable" ? "lineage-stable" : "lineage-preview")];
+  const explicit = process.env[envName] || process.env.LINEAGE_CHANNEL_LAUNCHER;
+  if (explicit) return [explicit];
+  const receiptPath = process.env.LINEAGE_RUNTIME_RECEIPT;
+  if (receiptPath) {
+    if (!existsSync(receiptPath)) throw new Error(`${channel} service manager runtime receipt does not exist: ${receiptPath}`);
+    const resolvedReceipt = realpathSync(receiptPath);
+    const runtimeRoot2 = dirname(dirname(dirname(dirname(resolvedReceipt))));
+    const pointerPath = join(runtimeRoot2, "channels", `${channel}.json`);
+    if (!existsSync(pointerPath)) throw new Error(`${channel} service manager could not find its receipt-bound channel pointer: ${pointerPath}`);
+    const pointer = JSON.parse(readFileSync(pointerPath, "utf8"));
+    if (pointer.channel !== channel) throw new Error(`${channel} service manager channel pointer reports ${pointer.channel || "(missing)"}`);
+    if (!pointer.receipt_path || !existsSync(pointer.receipt_path) || realpathSync(pointer.receipt_path) !== resolvedReceipt) {
+      throw new Error(`${channel} service manager channel pointer is not bound to its runtime receipt`);
+    }
+    if (!pointer.shim || !existsSync(pointer.shim)) throw new Error(`${channel} service manager channel pointer launcher is missing: ${pointer.shim || "(missing)"}`);
+    return [realpathSync(pointer.shim)];
+  }
+  const runtimeRoot = process.env.LINEAGE_RUNTIME_ROOT || (platform() === "darwin" ? join(homedir(), "Library", "Application Support", "Lineage", "runtimes") : join(homedir(), ".local", "share", "lineage", "runtimes"));
+  return [join(runtimeRoot, "bin", channel === "stable" ? "lineage-stable" : "lineage-preview")];
 }
 function launcherFor(channel, args) {
   const explicit = readOption(args, "--launcher");
@@ -103,15 +120,29 @@ function invoke(launcher, args, options = {}) {
     ...options
   });
 }
+function invocationFailure(result) {
+  const stderr = typeof result.stderr === "string" ? result.stderr.trim() : "";
+  const stdout = typeof result.stdout === "string" ? result.stdout.trim() : "";
+  const spawnError = result.error instanceof Error ? result.error.message : result.error ? String(result.error) : "";
+  return stderr || stdout || spawnError || `process exited with status ${result.status ?? "unknown"}`;
+}
+function shellDisplay(parts) {
+  return parts.map((part) => /^[A-Za-z0-9_./:@=-]+$/.test(part) ? part : JSON.stringify(part)).join(" ");
+}
 function profileDoctor(launcher, selector) {
   const result = invoke(launcher, ["profile", "doctor", "--profile", selector, "--json"]);
   let doctor;
   try {
     doctor = JSON.parse(result.stdout || "{}");
   } catch {
-    throw new Error(`Profile doctor did not return JSON: ${(result.stderr || result.stdout).trim()}`);
+    throw new Error(`Profile doctor did not return JSON: ${invocationFailure(result)}`);
+  }
+  if (!doctor.profile) {
+    const detail = doctor.error || (doctor.checks || []).filter((check) => check.status === "fail").map((check) => check.message).join("; ") || invocationFailure(result) || "profile manifest was not found or could not be read";
+    const doctorCommand = shellDisplay([...launcher, "profile", "doctor", "--profile", selector, "--json"]);
+    const initCommand = shellDisplay([...launcher, "profile", "init", "--profile", selector, "--confirm-write", "--json"]);
+    throw new Error(`Profile ${selector} could not be resolved: ${detail}. Next: run \`${doctorCommand}\`. If this is a new profile, run \`${initCommand}\` instead.`);
   }
-  if (!doctor.profile) throw new Error(`Profile doctor could not resolve ${selector}: ${(result.stderr || JSON.stringify(doctor)).trim()}`);
   return { doctor, status: result.status ?? 1 };
 }
 function runtimeDoctor(launcher) {
@@ -120,9 +151,9 @@ function runtimeDoctor(launcher) {
   try {
     runtime = JSON.parse(result.stdout || "{}");
   } catch {
-    throw new Error(`Runtime doctor did not return JSON: ${(result.stderr || result.stdout).trim()}`);
+    throw new Error(`Runtime doctor did not return JSON: ${invocationFailure(result)}`);
   }
-  if (result.status !== 0 || !runtime.verified) throw new Error(`Runtime doctor failed: ${(result.stderr || JSON.stringify(runtime)).trim()}`);
+  if (result.status !== 0 || !runtime.verified) throw new Error(`Runtime doctor failed: ${invocationFailure(result) || JSON.stringify(runtime)}`);
   return runtime;
 }
 function statePaths(channel, profile) {
@@ -203,6 +234,7 @@ function managedServiceIdentityErrors(runtime, receipt) {
   if (resolve(runtime.database?.path || "") !== resolve(receipt.database_path)) errors.push(`database ${runtime.database?.path || "missing"} != ${receipt.database_path}`);
   if (runtime.service?.instance_id !== receipt.instance_id) errors.push(`instance ${runtime.service?.instance_id || "missing"} != ${receipt.instance_id}`);
   if (runtime.service?.launcher_pid !== receipt.pid) errors.push(`launcher pid ${runtime.service?.launcher_pid || "missing"} != ${receipt.pid}`);
+  if (runtime.service?.mode !== "managed") errors.push(`service mode ${runtime.service?.mode || "missing"} != managed`);
   return errors;
 }
 function desiredReceiptErrors(channel, doctor, receipt) {
@@ -286,7 +318,10 @@ async function startManaged(channel, selector, launcher, args) {
     if (existing) {
       const health = await inspectHealth(existing);
       const desiredErrors = desiredReceiptErrors(channel, doctor, existing);
-      if (health.healthy && desiredErrors.length === 0) throw new Error(`Managed service is already healthy at ${existing.service_origin}`);
+      if (health.healthy && desiredErrors.length === 0) {
+        if (args.includes("--open")) openBrowser(existing.service_origin);
+        return { already_running: true, healthy: true, receipt: existing, runtime: health.runtime, state_path: paths.receipt };
+      }
       if (processAlive(existing.pid)) throw new Error(`Managed service pid ${existing.pid} exists but is stale or unhealthy: ${[...desiredErrors, ...health.errors].join("; ")}`);
       rmSync(paths.receipt, { force: true });
     }
@@ -297,7 +332,7 @@ async function startManaged(channel, selector, launcher, args) {
     const child = spawn(launcher[0], [...launcher.slice(1), ...startArgs], {
       cwd: root,
       detached: true,
-      env: { ...process.env, LINEAGE_SERVICE_INSTANCE_ID: instanceId },
+      env: { ...process.env, LINEAGE_SERVICE_INSTANCE_ID: instanceId, LINEAGE_SERVICE_MODE: "managed" },
       stdio: ["ignore", logFd, logFd]
     });
     closeSync(logFd);
@@ -420,7 +455,9 @@ async function main() {
 var invokedAs = process.argv[1] ? basename(process.argv[1]) : "";
 if (process.argv[1] && (resolve(process.argv[1]) === fileURLToPath(import.meta.url) || ["lineage-service", "lineage-stable-service", "lineage-preview-service", "managed-service.js", "managed-service.mjs"].includes(invokedAs))) {
   main().catch((error) => {
-    console.error(`managed-service: ${error instanceof Error ? error.message : String(error)}`);
+    const message = error instanceof Error ? error.message : String(error);
+    if (process.argv.includes("--json")) console.error(JSON.stringify({ error: message, ok: false }, null, 2));
+    else console.error(`managed-service: ${message}`);
     process.exitCode = 1;
   });
 }

package/dist/cli/managed-service.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../scripts/managed-service.mjs"],
-  "sourcesContent": ["#!/usr/bin/env node\n\nimport { randomUUID, createHash } from 'node:crypto';\nimport { spawn, spawnSync } from 'node:child_process';\nimport {\n  closeSync,\n  existsSync,\n  mkdirSync,\n  openSync,\n  readFileSync,\n  readdirSync,\n  readlinkSync,\n  realpathSync,\n  renameSync,\n  rmSync,\n  writeFileSync,\n} from 'node:fs';\nimport { homedir, platform } from 'node:os';\nimport { basename, dirname, join, resolve } from 'node:path';\nimport { fileURLToPath } from 'node:url';\n\nconst scriptDirectory = dirname(fileURLToPath(import.meta.url));\nconst root = [resolve(scriptDirectory, '../..'), resolve(scriptDirectory, '..')].find(candidate => {\n  try {\n    const packageInfo = JSON.parse(readFileSync(join(candidate, 'package.json'), 'utf8'));\n    return packageInfo.name === '@mean-weasel/lineage';\n  } catch {\n    return false;\n  }\n});\nif (!root) throw new Error('Unable to locate the Lineage package root for managed service control');\nconst receiptSchema = 'lineage.managed_service.v1';\n\nfunction packageTreeSha256(packageRoot) {\n  const hash = createHash('sha256');\n  const visit = (directory, relativeDirectory = '') => {\n    for (const entry of readdirSync(directory, { withFileTypes: true }).sort((left, right) => left.name.localeCompare(right.name))) {\n      const relativePath = relativeDirectory ? join(relativeDirectory, entry.name) : entry.name;\n      const path = join(directory, entry.name);\n      hash.update(relativePath.replaceAll('\\\\', '/'));\n      hash.update('\\0');\n      if (entry.isDirectory()) {\n        hash.update('directory\\0');\n        visit(path, relativePath);\n      } else if (entry.isSymbolicLink()) {\n        hash.update('symlink\\0');\n        hash.update(readlinkSync(path));\n      } else if (entry.isFile()) {\n        hash.update('file\\0');\n        hash.update(readFileSync(path));\n      } else {\n        hash.update('other\\0');\n      }\n      hash.update('\\0');\n    }\n  };\n  visit(packageRoot);\n  return hash.digest('hex');\n}\n\nfunction assertServiceManagerOrigin(channel) {\n  const checkoutController = resolve(scriptDirectory) === resolve(root, 'scripts');\n  if (channel === 'dev') {\n    if (!checkoutController) throw new Error('Dev service control is checkout-only; run node scripts/managed-service.mjs from the intended worktree');\n    return;\n  }\n  if (checkoutController) throw new Error(`${channel} service control requires the matching attested packaged manager`);\n  const receiptPath = process.env.LINEAGE_RUNTIME_RECEIPT;\n  if (!receiptPath || !existsSync(receiptPath)) throw new Error(`${channel} service manager is missing its runtime install receipt`);\n  const receipt = JSON.parse(readFileSync(receiptPath, 'utf8'));\n  if (receipt.channel !== channel || process.env.LINEAGE_RELEASE_CHANNEL !== channel) {\n    throw new Error(`${channel} service manager receipt channel does not match the requested channel`);\n  }\n  if (!receipt.package_root || realpathSync(receipt.package_root) !== realpathSync(root)) {\n    throw new Error(`${channel} service manager receipt package root ${receipt.package_root || '(missing)'} does not match controller root ${root}`);\n  }\n  if (packageTreeSha256(root) !== receipt.package_tree_sha256) throw new Error(`${channel} service manager package tree does not match its install receipt`);\n}\n\nfunction readOption(args, name) {\n  const inline = args.find(arg => arg.startsWith(`${name}=`));\n  if (inline) return inline.slice(name.length + 1);\n  const index = args.indexOf(name);\n  return index >= 0 ? args[index + 1] : undefined;\n}\n\nfunction serviceRoot() {\n  if (process.env.LINEAGE_SERVICE_ROOT) return resolve(process.env.LINEAGE_SERVICE_ROOT);\n  if (platform() === 'darwin') return join(homedir(), 'Library', 'Application Support', 'Lineage', 'services');\n  if (platform() === 'win32') return join(process.env.LOCALAPPDATA || join(homedir(), 'AppData', 'Local'), 'Lineage', 'services');\n  return join(process.env.XDG_STATE_HOME || join(homedir(), '.local', 'state'), 'lineage', 'services');\n}\n\nfunction defaultLauncher(channel) {\n  if (channel === 'dev') return [process.execPath, '--import', 'tsx', join(root, 'src', 'cli', 'lineage-dev.ts')];\n  const runtimeRoot = process.env.LINEAGE_RUNTIME_ROOT\n    || (platform() === 'darwin'\n      ? join(homedir(), 'Library', 'Application Support', 'Lineage', 'runtimes')\n      : join(homedir(), '.local', 'share', 'lineage', 'runtimes'));\n  const envName = channel === 'stable' ? 'LINEAGE_STABLE_BIN' : 'LINEAGE_PREVIEW_BIN';\n  return [process.env[envName] || join(runtimeRoot, 'bin', channel === 'stable' ? 'lineage-stable' : 'lineage-preview')];\n}\n\nfunction launcherFor(channel, args) {\n  const explicit = readOption(args, '--launcher');\n  return explicit ? [resolve(explicit)] : defaultLauncher(channel);\n}\n\nfunction invoke(launcher, args, options = {}) {\n  return spawnSync(launcher[0], [...launcher.slice(1), ...args], {\n    cwd: root,\n    encoding: 'utf8',\n    ...options,\n  });\n}\n\nfunction profileDoctor(launcher, selector) {\n  const result = invoke(launcher, ['profile', 'doctor', '--profile', selector, '--json']);\n  let doctor;\n  try {\n    doctor = JSON.parse(result.stdout || '{}');\n  } catch {\n    throw new Error(`Profile doctor did not return JSON: ${(result.stderr || result.stdout).trim()}`);\n  }\n  if (!doctor.profile) throw new Error(`Profile doctor could not resolve ${selector}: ${(result.stderr || JSON.stringify(doctor)).trim()}`);\n  return { doctor, status: result.status ?? 1 };\n}\n\nfunction runtimeDoctor(launcher) {\n  const result = invoke(launcher, ['runtime', 'doctor', '--json']);\n  let runtime;\n  try {\n    runtime = JSON.parse(result.stdout || '{}');\n  } catch {\n    throw new Error(`Runtime doctor did not return JSON: ${(result.stderr || result.stdout).trim()}`);\n  }\n  if (result.status !== 0 || !runtime.verified) throw new Error(`Runtime doctor failed: ${(result.stderr || JSON.stringify(runtime)).trim()}`);\n  return runtime;\n}\n\nfunction statePaths(channel, profile) {\n  const digest = createHash('sha256').update(profile.manifest_path).digest('hex').slice(0, 12);\n  const key = `${channel}--${profile.profile_id}--${digest}`;\n  const directory = join(serviceRoot(), key);\n  return {\n    directory,\n    lock: `${directory}.manager.lock`,\n    log: join(directory, 'service.log'),\n    receipt: join(directory, 'service.json'),\n  };\n}\n\nfunction processAlive(pid) {\n  try {\n    process.kill(pid, 0);\n    return true;\n  } catch (error) {\n    return error?.code !== 'ESRCH';\n  }\n}\n\nfunction processStartToken(pid) {\n  if (platform() === 'win32') return undefined;\n  const result = spawnSync('ps', ['-p', String(pid), '-o', 'lstart='], { encoding: 'utf8' });\n  return result.status === 0 ? result.stdout.trim() || undefined : undefined;\n}\n\nfunction processCommand(pid) {\n  if (platform() === 'win32') return undefined;\n  const result = spawnSync('ps', ['-p', String(pid), '-o', 'command='], { encoding: 'utf8' });\n  return result.status === 0 ? result.stdout.trim() || undefined : undefined;\n}\n\nfunction acquireManagerLock(path) {\n  mkdirSync(dirname(path), { recursive: true, mode: 0o700 });\n  for (let attempt = 0; attempt < 3; attempt += 1) {\n    try {\n      mkdirSync(path, { mode: 0o700 });\n      writeFileSync(join(path, 'owner.json'), `${JSON.stringify({ acquired_at: new Date().toISOString(), pid: process.pid })}\\n`, { mode: 0o600 });\n      return () => rmSync(path, { force: true, recursive: true });\n    } catch (error) {\n      if (error?.code !== 'EEXIST') throw error;\n      try {\n        const owner = JSON.parse(readFileSync(join(path, 'owner.json'), 'utf8'));\n        if (Number.isSafeInteger(owner.pid) && processAlive(owner.pid)) {\n          throw new Error(`Another service manager operation is active (pid ${owner.pid})`, { cause: error });\n        }\n      } catch (ownerError) {\n        if (ownerError instanceof Error && ownerError.message.startsWith('Another service manager')) throw ownerError;\n      }\n      rmSync(path, { force: true, recursive: true });\n    }\n  }\n  throw new Error(`Could not acquire service manager lock ${path}`);\n}\n\nfunction readReceipt(path) {\n  if (!existsSync(path)) return undefined;\n  const receipt = JSON.parse(readFileSync(path, 'utf8'));\n  if (\n    receipt.schema_version !== receiptSchema\n    || !Number.isSafeInteger(receipt.pid)\n    || typeof receipt.instance_id !== 'string'\n    || typeof receipt.profile_fingerprint !== 'string'\n    || !Array.isArray(receipt.launcher)\n  ) throw new Error(`Managed service receipt is invalid: ${path}`);\n  return receipt;\n}\n\nfunction writeReceipt(path, receipt) {\n  mkdirSync(dirname(path), { recursive: true, mode: 0o700 });\n  const temporary = `${path}.tmp-${process.pid}-${randomUUID()}`;\n  writeFileSync(temporary, `${JSON.stringify(receipt, null, 2)}\\n`, { encoding: 'utf8', flag: 'wx', mode: 0o600 });\n  renameSync(temporary, path);\n}\n\nexport function managedServiceIdentityErrors(runtime, receipt) {\n  const errors = [];\n  if (runtime.channel !== receipt.channel) errors.push(`channel ${runtime.channel} != ${receipt.channel}`);\n  if (!runtime.code?.verified) errors.push('code identity is not verified');\n  if (runtime.code?.fingerprint !== receipt.code_fingerprint) errors.push(`code fingerprint ${runtime.code?.fingerprint || 'missing'} != ${receipt.code_fingerprint}`);\n  if (runtime.profile?.id !== receipt.profile_id) errors.push(`profile ${runtime.profile?.id || 'missing'} != ${receipt.profile_id}`);\n  if (runtime.profile?.environment !== receipt.environment) errors.push(`environment ${runtime.profile?.environment || 'missing'} != ${receipt.environment}`);\n  if (runtime.profile?.fingerprint !== receipt.profile_fingerprint) errors.push(`profile fingerprint ${runtime.profile?.fingerprint || 'missing'} != ${receipt.profile_fingerprint}`);\n  if (runtime.schema?.profile_id !== receipt.profile_id) errors.push(`database profile ${runtime.schema?.profile_id || 'missing'} != ${receipt.profile_id}`);\n  if (runtime.schema?.profile_fingerprint !== receipt.profile_fingerprint) errors.push(`database fingerprint ${runtime.schema?.profile_fingerprint || 'missing'} != ${receipt.profile_fingerprint}`);\n  if (resolve(runtime.database?.path || '') !== resolve(receipt.database_path)) errors.push(`database ${runtime.database?.path || 'missing'} != ${receipt.database_path}`);\n  if (runtime.service?.instance_id !== receipt.instance_id) errors.push(`instance ${runtime.service?.instance_id || 'missing'} != ${receipt.instance_id}`);\n  if (runtime.service?.launcher_pid !== receipt.pid) errors.push(`launcher pid ${runtime.service?.launcher_pid || 'missing'} != ${receipt.pid}`);\n  return errors;\n}\n\nfunction desiredReceiptErrors(channel, doctor, receipt) {\n  const errors = [];\n  if (receipt.channel !== channel) errors.push(`receipt channel ${receipt.channel} != ${channel}`);\n  if (receipt.code_fingerprint !== doctor.runtime?.code_fingerprint) errors.push(`receipt code fingerprint ${receipt.code_fingerprint} != current ${doctor.runtime?.code_fingerprint || 'missing'}`);\n  if (receipt.code_origin !== doctor.runtime?.code_origin) errors.push(`receipt code origin ${receipt.code_origin} != current ${doctor.runtime?.code_origin || 'missing'}`);\n  if (receipt.profile_id !== doctor.profile.profile_id) errors.push(`receipt profile ${receipt.profile_id} != ${doctor.profile.profile_id}`);\n  if (receipt.environment !== doctor.profile.environment) errors.push(`receipt environment ${receipt.environment} != ${doctor.profile.environment}`);\n  if (receipt.profile_fingerprint !== doctor.profile.profile_fingerprint) errors.push(`receipt profile fingerprint ${receipt.profile_fingerprint} != current ${doctor.profile.profile_fingerprint}`);\n  if (resolve(receipt.database_path) !== resolve(doctor.profile.database_path)) errors.push('receipt database path does not match current profile');\n  if (receipt.service_origin !== doctor.profile.service_origin) errors.push('receipt service origin does not match current profile');\n  if (receipt.manifest_path !== doctor.profile.manifest_path) errors.push('receipt manifest path does not match current profile');\n  return errors;\n}\n\nasync function fetchRuntime(origin) {\n  const response = await fetch(`${origin}/api/runtime`, { signal: AbortSignal.timeout(1_000) });\n  if (!response.ok) throw new Error(`HTTP ${response.status}`);\n  const body = await response.json();\n  if (!body?.runtime) throw new Error('Runtime response is missing runtime identity');\n  return body.runtime;\n}\n\nasync function inspectHealth(receipt) {\n  const errors = [];\n  if (!processAlive(receipt.pid)) errors.push(`launcher pid ${receipt.pid} is not alive`);\n  if (receipt.process_start && processStartToken(receipt.pid) !== receipt.process_start) errors.push(`launcher pid ${receipt.pid} was reused`);\n  let runtime;\n  try {\n    runtime = await fetchRuntime(receipt.service_origin);\n    errors.push(...managedServiceIdentityErrors(runtime, receipt));\n  } catch (error) {\n    errors.push(`runtime health failed: ${error instanceof Error ? error.message : String(error)}`);\n  }\n  return { errors, healthy: errors.length === 0, runtime };\n}\n\nasync function waitForHealthy(receipt, timeoutMs = 20_000) {\n  const deadline = Date.now() + timeoutMs;\n  let health = { errors: ['service did not respond'], healthy: false };\n  while (Date.now() < deadline && processAlive(receipt.pid)) {\n    health = await inspectHealth(receipt);\n    if (health.healthy) return health;\n    await new Promise(resolveDelay => setTimeout(resolveDelay, 250));\n  }\n  throw new Error(`Service failed readiness: ${health.errors.join('; ')}`);\n}\n\nfunction openBrowser(origin) {\n  const command = platform() === 'darwin' ? 'open' : platform() === 'win32' ? 'cmd' : 'xdg-open';\n  const args = platform() === 'win32' ? ['/c', 'start', '', origin] : [origin];\n  const child = spawn(command, args, { detached: true, stdio: 'ignore' });\n  child.unref();\n}\n\nfunction terminate(receipt, force = false) {\n  if (!processAlive(receipt.pid)) return;\n  const currentStart = processStartToken(receipt.pid);\n  const command = processCommand(receipt.pid);\n  const processMatches = receipt.process_start\n    ? currentStart === receipt.process_start\n    : Boolean(command?.includes('start') && command.includes(receipt.manifest_path));\n  if (!processMatches && !force) {\n    throw new Error(`Refusing to signal pid ${receipt.pid}: process identity no longer matches the service receipt; inspect manually or pass --force`);\n  }\n  const signalTarget = platform() === 'win32' ? receipt.pid : -receipt.pid;\n  try { process.kill(signalTarget, 'SIGTERM'); } catch (error) { if (error?.code !== 'ESRCH') throw error; }\n}\n\nasync function startManaged(channel, selector, launcher, args) {\n  const { doctor, status } = profileDoctor(launcher, selector);\n  const runtimeIdentity = runtimeDoctor(launcher);\n  if (status !== 0 || !doctor.ok || !doctor.runtime?.code_verified) {\n    const failures = (doctor.checks || []).filter(check => check.status === 'fail').map(check => `${check.id}: ${check.message}`);\n    throw new Error(`Profile doctor must pass before service start: ${failures.join('; ') || 'unverified runtime'}`);\n  }\n  if (runtimeIdentity.fingerprint !== doctor.runtime.code_fingerprint || runtimeIdentity.channel !== channel) {\n    throw new Error('Runtime doctor identity changed while resolving the service profile');\n  }\n  const paths = statePaths(channel, doctor.profile);\n  const release = acquireManagerLock(paths.lock);\n  try {\n    const existing = readReceipt(paths.receipt);\n    if (existing) {\n      const health = await inspectHealth(existing);\n      const desiredErrors = desiredReceiptErrors(channel, doctor, existing);\n      if (health.healthy && desiredErrors.length === 0) throw new Error(`Managed service is already healthy at ${existing.service_origin}`);\n      if (processAlive(existing.pid)) throw new Error(`Managed service pid ${existing.pid} exists but is stale or unhealthy: ${[...desiredErrors, ...health.errors].join('; ')}`);\n      rmSync(paths.receipt, { force: true });\n    }\n    mkdirSync(paths.directory, { recursive: true, mode: 0o700 });\n    const logFd = openSync(paths.log, 'a', 0o600);\n    const instanceId = randomUUID();\n    const startArgs = ['start', '--profile', doctor.profile.manifest_path, '--json'];\n    const child = spawn(launcher[0], [...launcher.slice(1), ...startArgs], {\n      cwd: root,\n      detached: true,\n      env: { ...process.env, LINEAGE_SERVICE_INSTANCE_ID: instanceId },\n      stdio: ['ignore', logFd, logFd],\n    });\n    closeSync(logFd);\n    child.unref();\n    const receipt = {\n      channel,\n      code_fingerprint: doctor.runtime.code_fingerprint,\n      code_origin: doctor.runtime.code_origin,\n      code_root: runtimeIdentity.root,\n      database_path: doctor.profile.database_path,\n      environment: doctor.profile.environment,\n      instance_id: instanceId,\n      launcher,\n      log_path: paths.log,\n      manifest_path: doctor.profile.manifest_path,\n      pid: child.pid,\n      process_start: processStartToken(child.pid),\n      profile_fingerprint: doctor.profile.profile_fingerprint,\n      profile_id: doctor.profile.profile_id,\n      schema_version: receiptSchema,\n      service_origin: doctor.profile.service_origin,\n      started_at: new Date().toISOString(),\n    };\n    writeReceipt(paths.receipt, receipt);\n    try {\n      const health = await waitForHealthy(receipt, Number(readOption(args, '--timeout-ms') || 20_000));\n      if (args.includes('--open')) openBrowser(receipt.service_origin);\n      return { healthy: true, receipt, runtime: health.runtime, state_path: paths.receipt };\n    } catch (error) {\n      terminate(receipt, true);\n      throw error;\n    }\n  } finally {\n    release();\n  }\n}\n\nasync function statusManaged(channel, selector, launcher) {\n  const { doctor, status } = profileDoctor(launcher, selector);\n  const paths = statePaths(channel, doctor.profile);\n  const receipt = readReceipt(paths.receipt);\n  if (!receipt) throw new Error(`No managed service receipt exists for ${channel}/${doctor.profile.profile_id}`);\n  const health = await inspectHealth(receipt);\n  const doctorFailures = status === 0 && doctor.ok\n    ? []\n    : (doctor.checks || []).filter(check => check.status === 'fail').map(check => `current doctor ${check.id}: ${check.message}`);\n  const errors = [...doctorFailures, ...desiredReceiptErrors(channel, doctor, receipt), ...health.errors];\n  if (errors.length > 0) throw new Error(`Managed service is not healthy: ${errors.join('; ')}`);\n  return { healthy: true, receipt, runtime: health.runtime, state_path: paths.receipt };\n}\n\nasync function stopManaged(channel, selector, launcher, force) {\n  const { doctor } = profileDoctor(launcher, selector);\n  const paths = statePaths(channel, doctor.profile);\n  const release = acquireManagerLock(paths.lock);\n  try {\n    const receipt = readReceipt(paths.receipt);\n    if (!receipt) return { already_stopped: true, profile_id: doctor.profile.profile_id };\n    if (receipt.manifest_path !== doctor.profile.manifest_path || receipt.profile_id !== doctor.profile.profile_id) {\n      throw new Error('Service receipt identity does not match the requested profile');\n    }\n    terminate(receipt, force);\n    const deadline = Date.now() + 5_000;\n    while (processAlive(receipt.pid) && Date.now() < deadline) await new Promise(resolveDelay => setTimeout(resolveDelay, 100));\n    if (processAlive(receipt.pid) && force) {\n      const signalTarget = platform() === 'win32' ? receipt.pid : -receipt.pid;\n      try { process.kill(signalTarget, 'SIGKILL'); } catch { /* already exited */ }\n    }\n    if (processAlive(receipt.pid)) throw new Error(`Service pid ${receipt.pid} did not stop`);\n    rmSync(paths.receipt, { force: true });\n    return { profile_id: receipt.profile_id, stopped: true };\n  } finally {\n    release();\n  }\n}\n\nfunction logsManaged(channel, selector, launcher, lines) {\n  const { doctor } = profileDoctor(launcher, selector);\n  const paths = statePaths(channel, doctor.profile);\n  const receipt = readReceipt(paths.receipt);\n  const logPath = receipt?.log_path || paths.log;\n  if (!existsSync(logPath)) throw new Error(`No managed service log exists: ${logPath}`);\n  return readFileSync(logPath, 'utf8').split('\\n').slice(-lines).join('\\n');\n}\n\nfunction usage() {\n  return `Usage:\n  lineage-service start --channel stable|preview|dev --profile <id-or-manifest> [--open] [--json]\n  lineage-service status --channel stable|preview|dev --profile <id-or-manifest> [--json]\n  lineage-service stop --channel stable|preview|dev --profile <id-or-manifest> [--force] [--json]\n  lineage-service logs --channel stable|preview|dev --profile <id-or-manifest> [--lines 100]\n\nStart writes a profile-scoped receipt, waits for /api/runtime to match the exact\ncode/profile/database/service instance, and only then opens a browser. Status is\nnonzero for a stale PID, failed health request, or any identity mismatch.`;\n}\n\nasync function main() {\n  const args = process.argv.slice(2);\n  if (args.length === 0 || args.includes('--help') || args.includes('-h')) {\n    console.log(usage());\n    return;\n  }\n  const command = args[0];\n  const channel = readOption(args, '--channel');\n  const selector = readOption(args, '--profile');\n  if (!['stable', 'preview', 'dev'].includes(channel)) throw new Error('--channel must be stable, preview, or dev');\n  if (!selector) throw new Error('--profile is required; managed services never use legacy-unbound data');\n  assertServiceManagerOrigin(channel);\n  const launcher = launcherFor(channel, args);\n  let result;\n  if (command === 'start') result = await startManaged(channel, selector, launcher, args);\n  else if (command === 'status') result = await statusManaged(channel, selector, launcher);\n  else if (command === 'stop') result = await stopManaged(channel, selector, launcher, args.includes('--force'));\n  else if (command === 'logs') {\n    const output = logsManaged(channel, selector, launcher, Number(readOption(args, '--lines') || 100));\n    console.log(output);\n    return;\n  } else throw new Error(`Unknown managed-service command: ${command}`);\n  if (args.includes('--json')) console.log(JSON.stringify(result, null, 2));\n  else if (command === 'status' || command === 'start') console.log(`Lineage ${channel}/${result.receipt.profile_id} healthy at ${result.receipt.service_origin}`);\n  else console.log(`Lineage ${channel}/${result.profile_id} stopped`);\n}\n\nconst invokedAs = process.argv[1] ? basename(process.argv[1]) : '';\nif (process.argv[1] && (\n  resolve(process.argv[1]) === fileURLToPath(import.meta.url)\n  || ['lineage-service', 'lineage-stable-service', 'lineage-preview-service', 'managed-service.js', 'managed-service.mjs'].includes(invokedAs)\n)) {\n  main().catch(error => {\n    console.error(`managed-service: ${error instanceof Error ? error.message : String(error)}`);\n    process.exitCode = 1;\n  });\n}\n"],
-  "mappings": ";;;AAEA,SAAS,YAAY,kBAAkB;AACvC,SAAS,OAAO,iBAAiB;AACjC;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,SAAS,gBAAgB;AAClC,SAAS,UAAU,SAAS,MAAM,eAAe;AACjD,SAAS,qBAAqB;AAE9B,IAAM,kBAAkB,QAAQ,cAAc,YAAY,GAAG,CAAC;AAC9D,IAAM,OAAO,CAAC,QAAQ,iBAAiB,OAAO,GAAG,QAAQ,iBAAiB,IAAI,CAAC,EAAE,KAAK,eAAa;AACjG,MAAI;AACF,UAAM,cAAc,KAAK,MAAM,aAAa,KAAK,WAAW,cAAc,GAAG,MAAM,CAAC;AACpF,WAAO,YAAY,SAAS;AAAA,EAC9B,QAAQ;AACN,WAAO;AAAA,EACT;AACF,CAAC;AACD,IAAI,CAAC,KAAM,OAAM,IAAI,MAAM,uEAAuE;AAClG,IAAM,gBAAgB;AAEtB,SAAS,kBAAkB,aAAa;AACtC,QAAM,OAAO,WAAW,QAAQ;AAChC,QAAM,QAAQ,CAAC,WAAW,oBAAoB,OAAO;AACnD,eAAW,SAAS,YAAY,WAAW,EAAE,eAAe,KAAK,CAAC,EAAE,KAAK,CAAC,MAAM,UAAU,KAAK,KAAK,cAAc,MAAM,IAAI,CAAC,GAAG;AAC9H,YAAM,eAAe,oBAAoB,KAAK,mBAAmB,MAAM,IAAI,IAAI,MAAM;AACrF,YAAM,OAAO,KAAK,WAAW,MAAM,IAAI;AACvC,WAAK,OAAO,aAAa,WAAW,MAAM,GAAG,CAAC;AAC9C,WAAK,OAAO,IAAI;AAChB,UAAI,MAAM,YAAY,GAAG;AACvB,aAAK,OAAO,aAAa;AACzB,cAAM,MAAM,YAAY;AAAA,MAC1B,WAAW,MAAM,eAAe,GAAG;AACjC,aAAK,OAAO,WAAW;AACvB,aAAK,OAAO,aAAa,IAAI,CAAC;AAAA,MAChC,WAAW,MAAM,OAAO,GAAG;AACzB,aAAK,OAAO,QAAQ;AACpB,aAAK,OAAO,aAAa,IAAI,CAAC;AAAA,MAChC,OAAO;AACL,aAAK,OAAO,SAAS;AAAA,MACvB;AACA,WAAK,OAAO,IAAI;AAAA,IAClB;AAAA,EACF;AACA,QAAM,WAAW;AACjB,SAAO,KAAK,OAAO,KAAK;AAC1B;AAEA,SAAS,2BAA2B,SAAS;AAC3C,QAAM,qBAAqB,QAAQ,eAAe,MAAM,QAAQ,MAAM,SAAS;AAC/E,MAAI,YAAY,OAAO;AACrB,QAAI,CAAC,mBAAoB,OAAM,IAAI,MAAM,uGAAuG;AAChJ;AAAA,EACF;AACA,MAAI,mBAAoB,OAAM,IAAI,MAAM,GAAG,OAAO,kEAAkE;AACpH,QAAM,cAAc,QAAQ,IAAI;AAChC,MAAI,CAAC,eAAe,CAAC,WAAW,WAAW,EAAG,OAAM,IAAI,MAAM,GAAG,OAAO,yDAAyD;AACjI,QAAM,UAAU,KAAK,MAAM,aAAa,aAAa,MAAM,CAAC;AAC5D,MAAI,QAAQ,YAAY,WAAW,QAAQ,IAAI,4BAA4B,SAAS;AAClF,UAAM,IAAI,MAAM,GAAG,OAAO,uEAAuE;AAAA,EACnG;AACA,MAAI,CAAC,QAAQ,gBAAgB,aAAa,QAAQ,YAAY,MAAM,aAAa,IAAI,GAAG;AACtF,UAAM,IAAI,MAAM,GAAG,OAAO,yCAAyC,QAAQ,gBAAgB,WAAW,mCAAmC,IAAI,EAAE;AAAA,EACjJ;AACA,MAAI,kBAAkB,IAAI,MAAM,QAAQ,oBAAqB,OAAM,IAAI,MAAM,GAAG,OAAO,kEAAkE;AAC3J;AAEA,SAAS,WAAW,MAAM,MAAM;AAC9B,QAAM,SAAS,KAAK,KAAK,SAAO,IAAI,WAAW,GAAG,IAAI,GAAG,CAAC;AAC1D,MAAI,OAAQ,QAAO,OAAO,MAAM,KAAK,SAAS,CAAC;AAC/C,QAAM,QAAQ,KAAK,QAAQ,IAAI;AAC/B,SAAO,SAAS,IAAI,KAAK,QAAQ,CAAC,IAAI;AACxC;AAEA,SAAS,cAAc;AACrB,MAAI,QAAQ,IAAI,qBAAsB,QAAO,QAAQ,QAAQ,IAAI,oBAAoB;AACrF,MAAI,SAAS,MAAM,SAAU,QAAO,KAAK,QAAQ,GAAG,WAAW,uBAAuB,WAAW,UAAU;AAC3G,MAAI,SAAS,MAAM,QAAS,QAAO,KAAK,QAAQ,IAAI,gBAAgB,KAAK,QAAQ,GAAG,WAAW,OAAO,GAAG,WAAW,UAAU;AAC9H,SAAO,KAAK,QAAQ,IAAI,kBAAkB,KAAK,QAAQ,GAAG,UAAU,OAAO,GAAG,WAAW,UAAU;AACrG;AAEA,SAAS,gBAAgB,SAAS;AAChC,MAAI,YAAY,MAAO,QAAO,CAAC,QAAQ,UAAU,YAAY,OAAO,KAAK,MAAM,OAAO,OAAO,gBAAgB,CAAC;AAC9G,QAAM,cAAc,QAAQ,IAAI,yBAC1B,SAAS,MAAM,WACf,KAAK,QAAQ,GAAG,WAAW,uBAAuB,WAAW,UAAU,IACvE,KAAK,QAAQ,GAAG,UAAU,SAAS,WAAW,UAAU;AAC9D,QAAM,UAAU,YAAY,WAAW,uBAAuB;AAC9D,SAAO,CAAC,QAAQ,IAAI,OAAO,KAAK,KAAK,aAAa,OAAO,YAAY,WAAW,mBAAmB,iBAAiB,CAAC;AACvH;AAEA,SAAS,YAAY,SAAS,MAAM;AAClC,QAAM,WAAW,WAAW,MAAM,YAAY;AAC9C,SAAO,WAAW,CAAC,QAAQ,QAAQ,CAAC,IAAI,gBAAgB,OAAO;AACjE;AAEA,SAAS,OAAO,UAAU,MAAM,UAAU,CAAC,GAAG;AAC5C,SAAO,UAAU,SAAS,CAAC,GAAG,CAAC,GAAG,SAAS,MAAM,CAAC,GAAG,GAAG,IAAI,GAAG;AAAA,IAC7D,KAAK;AAAA,IACL,UAAU;AAAA,IACV,GAAG;AAAA,EACL,CAAC;AACH;AAEA,SAAS,cAAc,UAAU,UAAU;AACzC,QAAM,SAAS,OAAO,UAAU,CAAC,WAAW,UAAU,aAAa,UAAU,QAAQ,CAAC;AACtF,MAAI;AACJ,MAAI;AACF,aAAS,KAAK,MAAM,OAAO,UAAU,IAAI;AAAA,EAC3C,QAAQ;AACN,UAAM,IAAI,MAAM,wCAAwC,OAAO,UAAU,OAAO,QAAQ,KAAK,CAAC,EAAE;AAAA,EAClG;AACA,MAAI,CAAC,OAAO,QAAS,OAAM,IAAI,MAAM,oCAAoC,QAAQ,MAAM,OAAO,UAAU,KAAK,UAAU,MAAM,GAAG,KAAK,CAAC,EAAE;AACxI,SAAO,EAAE,QAAQ,QAAQ,OAAO,UAAU,EAAE;AAC9C;AAEA,SAAS,cAAc,UAAU;AAC/B,QAAM,SAAS,OAAO,UAAU,CAAC,WAAW,UAAU,QAAQ,CAAC;AAC/D,MAAI;AACJ,MAAI;AACF,cAAU,KAAK,MAAM,OAAO,UAAU,IAAI;AAAA,EAC5C,QAAQ;AACN,UAAM,IAAI,MAAM,wCAAwC,OAAO,UAAU,OAAO,QAAQ,KAAK,CAAC,EAAE;AAAA,EAClG;AACA,MAAI,OAAO,WAAW,KAAK,CAAC,QAAQ,SAAU,OAAM,IAAI,MAAM,2BAA2B,OAAO,UAAU,KAAK,UAAU,OAAO,GAAG,KAAK,CAAC,EAAE;AAC3I,SAAO;AACT;AAEA,SAAS,WAAW,SAAS,SAAS;AACpC,QAAM,SAAS,WAAW,QAAQ,EAAE,OAAO,QAAQ,aAAa,EAAE,OAAO,KAAK,EAAE,MAAM,GAAG,EAAE;AAC3F,QAAM,MAAM,GAAG,OAAO,KAAK,QAAQ,UAAU,KAAK,MAAM;AACxD,QAAM,YAAY,KAAK,YAAY,GAAG,GAAG;AACzC,SAAO;AAAA,IACL;AAAA,IACA,MAAM,GAAG,SAAS;AAAA,IAClB,KAAK,KAAK,WAAW,aAAa;AAAA,IAClC,SAAS,KAAK,WAAW,cAAc;AAAA,EACzC;AACF;AAEA,SAAS,aAAa,KAAK;AACzB,MAAI;AACF,YAAQ,KAAK,KAAK,CAAC;AACnB,WAAO;AAAA,EACT,SAAS,OAAO;AACd,WAAO,OAAO,SAAS;AAAA,EACzB;AACF;AAEA,SAAS,kBAAkB,KAAK;AAC9B,MAAI,SAAS,MAAM,QAAS,QAAO;AACnC,QAAM,SAAS,UAAU,MAAM,CAAC,MAAM,OAAO,GAAG,GAAG,MAAM,SAAS,GAAG,EAAE,UAAU,OAAO,CAAC;AACzF,SAAO,OAAO,WAAW,IAAI,OAAO,OAAO,KAAK,KAAK,SAAY;AACnE;AAEA,SAAS,eAAe,KAAK;AAC3B,MAAI,SAAS,MAAM,QAAS,QAAO;AACnC,QAAM,SAAS,UAAU,MAAM,CAAC,MAAM,OAAO,GAAG,GAAG,MAAM,UAAU,GAAG,EAAE,UAAU,OAAO,CAAC;AAC1F,SAAO,OAAO,WAAW,IAAI,OAAO,OAAO,KAAK,KAAK,SAAY;AACnE;AAEA,SAAS,mBAAmB,MAAM;AAChC,YAAU,QAAQ,IAAI,GAAG,EAAE,WAAW,MAAM,MAAM,IAAM,CAAC;AACzD,WAAS,UAAU,GAAG,UAAU,GAAG,WAAW,GAAG;AAC/C,QAAI;AACF,gBAAU,MAAM,EAAE,MAAM,IAAM,CAAC;AAC/B,oBAAc,KAAK,MAAM,YAAY,GAAG,GAAG,KAAK,UAAU,EAAE,cAAa,oBAAI,KAAK,GAAE,YAAY,GAAG,KAAK,QAAQ,IAAI,CAAC,CAAC;AAAA,GAAM,EAAE,MAAM,IAAM,CAAC;AAC3I,aAAO,MAAM,OAAO,MAAM,EAAE,OAAO,MAAM,WAAW,KAAK,CAAC;AAAA,IAC5D,SAAS,OAAO;AACd,UAAI,OAAO,SAAS,SAAU,OAAM;AACpC,UAAI;AACF,cAAM,QAAQ,KAAK,MAAM,aAAa,KAAK,MAAM,YAAY,GAAG,MAAM,CAAC;AACvE,YAAI,OAAO,cAAc,MAAM,GAAG,KAAK,aAAa,MAAM,GAAG,GAAG;AAC9D,gBAAM,IAAI,MAAM,oDAAoD,MAAM,GAAG,KAAK,EAAE,OAAO,MAAM,CAAC;AAAA,QACpG;AAAA,MACF,SAAS,YAAY;AACnB,YAAI,sBAAsB,SAAS,WAAW,QAAQ,WAAW,yBAAyB,EAAG,OAAM;AAAA,MACrG;AACA,aAAO,MAAM,EAAE,OAAO,MAAM,WAAW,KAAK,CAAC;AAAA,IAC/C;AAAA,EACF;AACA,QAAM,IAAI,MAAM,0CAA0C,IAAI,EAAE;AAClE;AAEA,SAAS,YAAY,MAAM;AACzB,MAAI,CAAC,WAAW,IAAI,EAAG,QAAO;AAC9B,QAAM,UAAU,KAAK,MAAM,aAAa,MAAM,MAAM,CAAC;AACrD,MACE,QAAQ,mBAAmB,iBACxB,CAAC,OAAO,cAAc,QAAQ,GAAG,KACjC,OAAO,QAAQ,gBAAgB,YAC/B,OAAO,QAAQ,wBAAwB,YACvC,CAAC,MAAM,QAAQ,QAAQ,QAAQ,EAClC,OAAM,IAAI,MAAM,uCAAuC,IAAI,EAAE;AAC/D,SAAO;AACT;AAEA,SAAS,aAAa,MAAM,SAAS;AACnC,YAAU,QAAQ,IAAI,GAAG,EAAE,WAAW,MAAM,MAAM,IAAM,CAAC;AACzD,QAAM,YAAY,GAAG,IAAI,QAAQ,QAAQ,GAAG,IAAI,WAAW,CAAC;AAC5D,gBAAc,WAAW,GAAG,KAAK,UAAU,SAAS,MAAM,CAAC,CAAC;AAAA,GAAM,EAAE,UAAU,QAAQ,MAAM,MAAM,MAAM,IAAM,CAAC;AAC/G,aAAW,WAAW,IAAI;AAC5B;AAEO,SAAS,6BAA6B,SAAS,SAAS;AAC7D,QAAM,SAAS,CAAC;AAChB,MAAI,QAAQ,YAAY,QAAQ,QAAS,QAAO,KAAK,WAAW,QAAQ,OAAO,OAAO,QAAQ,OAAO,EAAE;AACvG,MAAI,CAAC,QAAQ,MAAM,SAAU,QAAO,KAAK,+BAA+B;AACxE,MAAI,QAAQ,MAAM,gBAAgB,QAAQ,iBAAkB,QAAO,KAAK,oBAAoB,QAAQ,MAAM,eAAe,SAAS,OAAO,QAAQ,gBAAgB,EAAE;AACnK,MAAI,QAAQ,SAAS,OAAO,QAAQ,WAAY,QAAO,KAAK,WAAW,QAAQ,SAAS,MAAM,SAAS,OAAO,QAAQ,UAAU,EAAE;AAClI,MAAI,QAAQ,SAAS,gBAAgB,QAAQ,YAAa,QAAO,KAAK,eAAe,QAAQ,SAAS,eAAe,SAAS,OAAO,QAAQ,WAAW,EAAE;AAC1J,MAAI,QAAQ,SAAS,gBAAgB,QAAQ,oBAAqB,QAAO,KAAK,uBAAuB,QAAQ,SAAS,eAAe,SAAS,OAAO,QAAQ,mBAAmB,EAAE;AAClL,MAAI,QAAQ,QAAQ,eAAe,QAAQ,WAAY,QAAO,KAAK,oBAAoB,QAAQ,QAAQ,cAAc,SAAS,OAAO,QAAQ,UAAU,EAAE;AACzJ,MAAI,QAAQ,QAAQ,wBAAwB,QAAQ,oBAAqB,QAAO,KAAK,wBAAwB,QAAQ,QAAQ,uBAAuB,SAAS,OAAO,QAAQ,mBAAmB,EAAE;AACjM,MAAI,QAAQ,QAAQ,UAAU,QAAQ,EAAE,MAAM,QAAQ,QAAQ,aAAa,EAAG,QAAO,KAAK,YAAY,QAAQ,UAAU,QAAQ,SAAS,OAAO,QAAQ,aAAa,EAAE;AACvK,MAAI,QAAQ,SAAS,gBAAgB,QAAQ,YAAa,QAAO,KAAK,YAAY,QAAQ,SAAS,eAAe,SAAS,OAAO,QAAQ,WAAW,EAAE;AACvJ,MAAI,QAAQ,SAAS,iBAAiB,QAAQ,IAAK,QAAO,KAAK,gBAAgB,QAAQ,SAAS,gBAAgB,SAAS,OAAO,QAAQ,GAAG,EAAE;AAC7I,SAAO;AACT;AAEA,SAAS,qBAAqB,SAAS,QAAQ,SAAS;AACtD,QAAM,SAAS,CAAC;AAChB,MAAI,QAAQ,YAAY,QAAS,QAAO,KAAK,mBAAmB,QAAQ,OAAO,OAAO,OAAO,EAAE;AAC/F,MAAI,QAAQ,qBAAqB,OAAO,SAAS,iBAAkB,QAAO,KAAK,4BAA4B,QAAQ,gBAAgB,eAAe,OAAO,SAAS,oBAAoB,SAAS,EAAE;AACjM,MAAI,QAAQ,gBAAgB,OAAO,SAAS,YAAa,QAAO,KAAK,uBAAuB,QAAQ,WAAW,eAAe,OAAO,SAAS,eAAe,SAAS,EAAE;AACxK,MAAI,QAAQ,eAAe,OAAO,QAAQ,WAAY,QAAO,KAAK,mBAAmB,QAAQ,UAAU,OAAO,OAAO,QAAQ,UAAU,EAAE;AACzI,MAAI,QAAQ,gBAAgB,OAAO,QAAQ,YAAa,QAAO,KAAK,uBAAuB,QAAQ,WAAW,OAAO,OAAO,QAAQ,WAAW,EAAE;AACjJ,MAAI,QAAQ,wBAAwB,OAAO,QAAQ,oBAAqB,QAAO,KAAK,+BAA+B,QAAQ,mBAAmB,eAAe,OAAO,QAAQ,mBAAmB,EAAE;AACjM,MAAI,QAAQ,QAAQ,aAAa,MAAM,QAAQ,OAAO,QAAQ,aAAa,EAAG,QAAO,KAAK,sDAAsD;AAChJ,MAAI,QAAQ,mBAAmB,OAAO,QAAQ,eAAgB,QAAO,KAAK,uDAAuD;AACjI,MAAI,QAAQ,kBAAkB,OAAO,QAAQ,cAAe,QAAO,KAAK,sDAAsD;AAC9H,SAAO;AACT;AAEA,eAAe,aAAa,QAAQ;AAClC,QAAM,WAAW,MAAM,MAAM,GAAG,MAAM,gBAAgB,EAAE,QAAQ,YAAY,QAAQ,GAAK,EAAE,CAAC;AAC5F,MAAI,CAAC,SAAS,GAAI,OAAM,IAAI,MAAM,QAAQ,SAAS,MAAM,EAAE;AAC3D,QAAM,OAAO,MAAM,SAAS,KAAK;AACjC,MAAI,CAAC,MAAM,QAAS,OAAM,IAAI,MAAM,8CAA8C;AAClF,SAAO,KAAK;AACd;AAEA,eAAe,cAAc,SAAS;AACpC,QAAM,SAAS,CAAC;AAChB,MAAI,CAAC,aAAa,QAAQ,GAAG,EAAG,QAAO,KAAK,gBAAgB,QAAQ,GAAG,eAAe;AACtF,MAAI,QAAQ,iBAAiB,kBAAkB,QAAQ,GAAG,MAAM,QAAQ,cAAe,QAAO,KAAK,gBAAgB,QAAQ,GAAG,aAAa;AAC3I,MAAI;AACJ,MAAI;AACF,cAAU,MAAM,aAAa,QAAQ,cAAc;AACnD,WAAO,KAAK,GAAG,6BAA6B,SAAS,OAAO,CAAC;AAAA,EAC/D,SAAS,OAAO;AACd,WAAO,KAAK,0BAA0B,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,CAAC,EAAE;AAAA,EAChG;AACA,SAAO,EAAE,QAAQ,SAAS,OAAO,WAAW,GAAG,QAAQ;AACzD;AAEA,eAAe,eAAe,SAAS,YAAY,KAAQ;AACzD,QAAM,WAAW,KAAK,IAAI,IAAI;AAC9B,MAAI,SAAS,EAAE,QAAQ,CAAC,yBAAyB,GAAG,SAAS,MAAM;AACnE,SAAO,KAAK,IAAI,IAAI,YAAY,aAAa,QAAQ,GAAG,GAAG;AACzD,aAAS,MAAM,cAAc,OAAO;AACpC,QAAI,OAAO,QAAS,QAAO;AAC3B,UAAM,IAAI,QAAQ,kBAAgB,WAAW,cAAc,GAAG,CAAC;AAAA,EACjE;AACA,QAAM,IAAI,MAAM,6BAA6B,OAAO,OAAO,KAAK,IAAI,CAAC,EAAE;AACzE;AAEA,SAAS,YAAY,QAAQ;AAC3B,QAAM,UAAU,SAAS,MAAM,WAAW,SAAS,SAAS,MAAM,UAAU,QAAQ;AACpF,QAAM,OAAO,SAAS,MAAM,UAAU,CAAC,MAAM,SAAS,IAAI,MAAM,IAAI,CAAC,MAAM;AAC3E,QAAM,QAAQ,MAAM,SAAS,MAAM,EAAE,UAAU,MAAM,OAAO,SAAS,CAAC;AACtE,QAAM,MAAM;AACd;AAEA,SAAS,UAAU,SAAS,QAAQ,OAAO;AACzC,MAAI,CAAC,aAAa,QAAQ,GAAG,EAAG;AAChC,QAAM,eAAe,kBAAkB,QAAQ,GAAG;AAClD,QAAM,UAAU,eAAe,QAAQ,GAAG;AAC1C,QAAM,iBAAiB,QAAQ,gBAC3B,iBAAiB,QAAQ,gBACzB,QAAQ,SAAS,SAAS,OAAO,KAAK,QAAQ,SAAS,QAAQ,aAAa,CAAC;AACjF,MAAI,CAAC,kBAAkB,CAAC,OAAO;AAC7B,UAAM,IAAI,MAAM,0BAA0B,QAAQ,GAAG,4FAA4F;AAAA,EACnJ;AACA,QAAM,eAAe,SAAS,MAAM,UAAU,QAAQ,MAAM,CAAC,QAAQ;AACrE,MAAI;AAAE,YAAQ,KAAK,cAAc,SAAS;AAAA,EAAG,SAAS,OAAO;AAAE,QAAI,OAAO,SAAS,QAAS,OAAM;AAAA,EAAO;AAC3G;AAEA,eAAe,aAAa,SAAS,UAAU,UAAU,MAAM;AAC7D,QAAM,EAAE,QAAQ,OAAO,IAAI,cAAc,UAAU,QAAQ;AAC3D,QAAM,kBAAkB,cAAc,QAAQ;AAC9C,MAAI,WAAW,KAAK,CAAC,OAAO,MAAM,CAAC,OAAO,SAAS,eAAe;AAChE,UAAM,YAAY,OAAO,UAAU,CAAC,GAAG,OAAO,WAAS,MAAM,WAAW,MAAM,EAAE,IAAI,WAAS,GAAG,MAAM,EAAE,KAAK,MAAM,OAAO,EAAE;AAC5H,UAAM,IAAI,MAAM,kDAAkD,SAAS,KAAK,IAAI,KAAK,oBAAoB,EAAE;AAAA,EACjH;AACA,MAAI,gBAAgB,gBAAgB,OAAO,QAAQ,oBAAoB,gBAAgB,YAAY,SAAS;AAC1G,UAAM,IAAI,MAAM,qEAAqE;AAAA,EACvF;AACA,QAAM,QAAQ,WAAW,SAAS,OAAO,OAAO;AAChD,QAAM,UAAU,mBAAmB,MAAM,IAAI;AAC7C,MAAI;AACF,UAAM,WAAW,YAAY,MAAM,OAAO;AAC1C,QAAI,UAAU;AACZ,YAAM,SAAS,MAAM,cAAc,QAAQ;AAC3C,YAAM,gBAAgB,qBAAqB,SAAS,QAAQ,QAAQ;AACpE,UAAI,OAAO,WAAW,cAAc,WAAW,EAAG,OAAM,IAAI,MAAM,yCAAyC,SAAS,cAAc,EAAE;AACpI,UAAI,aAAa,SAAS,GAAG,EAAG,OAAM,IAAI,MAAM,uBAAuB,SAAS,GAAG,sCAAsC,CAAC,GAAG,eAAe,GAAG,OAAO,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE;AAC1K,aAAO,MAAM,SAAS,EAAE,OAAO,KAAK,CAAC;AAAA,IACvC;AACA,cAAU,MAAM,WAAW,EAAE,WAAW,MAAM,MAAM,IAAM,CAAC;AAC3D,UAAM,QAAQ,SAAS,MAAM,KAAK,KAAK,GAAK;AAC5C,UAAM,aAAa,WAAW;AAC9B,UAAM,YAAY,CAAC,SAAS,aAAa,OAAO,QAAQ,eAAe,QAAQ;AAC/E,UAAM,QAAQ,MAAM,SAAS,CAAC,GAAG,CAAC,GAAG,SAAS,MAAM,CAAC,GAAG,GAAG,SAAS,GAAG;AAAA,MACrE,KAAK;AAAA,MACL,UAAU;AAAA,MACV,KAAK,EAAE,GAAG,QAAQ,KAAK,6BAA6B,WAAW;AAAA,MAC/D,OAAO,CAAC,UAAU,OAAO,KAAK;AAAA,IAChC,CAAC;AACD,cAAU,KAAK;AACf,UAAM,MAAM;AACZ,UAAM,UAAU;AAAA,MACd;AAAA,MACA,kBAAkB,OAAO,QAAQ;AAAA,MACjC,aAAa,OAAO,QAAQ;AAAA,MAC5B,WAAW,gBAAgB;AAAA,MAC3B,eAAe,OAAO,QAAQ;AAAA,MAC9B,aAAa,OAAO,QAAQ;AAAA,MAC5B,aAAa;AAAA,MACb;AAAA,MACA,UAAU,MAAM;AAAA,MAChB,eAAe,OAAO,QAAQ;AAAA,MAC9B,KAAK,MAAM;AAAA,MACX,eAAe,kBAAkB,MAAM,GAAG;AAAA,MAC1C,qBAAqB,OAAO,QAAQ;AAAA,MACpC,YAAY,OAAO,QAAQ;AAAA,MAC3B,gBAAgB;AAAA,MAChB,gBAAgB,OAAO,QAAQ;AAAA,MAC/B,aAAY,oBAAI,KAAK,GAAE,YAAY;AAAA,IACrC;AACA,iBAAa,MAAM,SAAS,OAAO;AACnC,QAAI;AACF,YAAM,SAAS,MAAM,eAAe,SAAS,OAAO,WAAW,MAAM,cAAc,KAAK,GAAM,CAAC;AAC/F,UAAI,KAAK,SAAS,QAAQ,EAAG,aAAY,QAAQ,cAAc;AAC/D,aAAO,EAAE,SAAS,MAAM,SAAS,SAAS,OAAO,SAAS,YAAY,MAAM,QAAQ;AAAA,IACtF,SAAS,OAAO;AACd,gBAAU,SAAS,IAAI;AACvB,YAAM;AAAA,IACR;AAAA,EACF,UAAE;AACA,YAAQ;AAAA,EACV;AACF;AAEA,eAAe,cAAc,SAAS,UAAU,UAAU;AACxD,QAAM,EAAE,QAAQ,OAAO,IAAI,cAAc,UAAU,QAAQ;AAC3D,QAAM,QAAQ,WAAW,SAAS,OAAO,OAAO;AAChD,QAAM,UAAU,YAAY,MAAM,OAAO;AACzC,MAAI,CAAC,QAAS,OAAM,IAAI,MAAM,yCAAyC,OAAO,IAAI,OAAO,QAAQ,UAAU,EAAE;AAC7G,QAAM,SAAS,MAAM,cAAc,OAAO;AAC1C,QAAM,iBAAiB,WAAW,KAAK,OAAO,KAC1C,CAAC,KACA,OAAO,UAAU,CAAC,GAAG,OAAO,WAAS,MAAM,WAAW,MAAM,EAAE,IAAI,WAAS,kBAAkB,MAAM,EAAE,KAAK,MAAM,OAAO,EAAE;AAC9H,QAAM,SAAS,CAAC,GAAG,gBAAgB,GAAG,qBAAqB,SAAS,QAAQ,OAAO,GAAG,GAAG,OAAO,MAAM;AACtG,MAAI,OAAO,SAAS,EAAG,OAAM,IAAI,MAAM,mCAAmC,OAAO,KAAK,IAAI,CAAC,EAAE;AAC7F,SAAO,EAAE,SAAS,MAAM,SAAS,SAAS,OAAO,SAAS,YAAY,MAAM,QAAQ;AACtF;AAEA,eAAe,YAAY,SAAS,UAAU,UAAU,OAAO;AAC7D,QAAM,EAAE,OAAO,IAAI,cAAc,UAAU,QAAQ;AACnD,QAAM,QAAQ,WAAW,SAAS,OAAO,OAAO;AAChD,QAAM,UAAU,mBAAmB,MAAM,IAAI;AAC7C,MAAI;AACF,UAAM,UAAU,YAAY,MAAM,OAAO;AACzC,QAAI,CAAC,QAAS,QAAO,EAAE,iBAAiB,MAAM,YAAY,OAAO,QAAQ,WAAW;AACpF,QAAI,QAAQ,kBAAkB,OAAO,QAAQ,iBAAiB,QAAQ,eAAe,OAAO,QAAQ,YAAY;AAC9G,YAAM,IAAI,MAAM,+DAA+D;AAAA,IACjF;AACA,cAAU,SAAS,KAAK;AACxB,UAAM,WAAW,KAAK,IAAI,IAAI;AAC9B,WAAO,aAAa,QAAQ,GAAG,KAAK,KAAK,IAAI,IAAI,SAAU,OAAM,IAAI,QAAQ,kBAAgB,WAAW,cAAc,GAAG,CAAC;AAC1H,QAAI,aAAa,QAAQ,GAAG,KAAK,OAAO;AACtC,YAAM,eAAe,SAAS,MAAM,UAAU,QAAQ,MAAM,CAAC,QAAQ;AACrE,UAAI;AAAE,gBAAQ,KAAK,cAAc,SAAS;AAAA,MAAG,QAAQ;AAAA,MAAuB;AAAA,IAC9E;AACA,QAAI,aAAa,QAAQ,GAAG,EAAG,OAAM,IAAI,MAAM,eAAe,QAAQ,GAAG,eAAe;AACxF,WAAO,MAAM,SAAS,EAAE,OAAO,KAAK,CAAC;AACrC,WAAO,EAAE,YAAY,QAAQ,YAAY,SAAS,KAAK;AAAA,EACzD,UAAE;AACA,YAAQ;AAAA,EACV;AACF;AAEA,SAAS,YAAY,SAAS,UAAU,UAAU,OAAO;AACvD,QAAM,EAAE,OAAO,IAAI,cAAc,UAAU,QAAQ;AACnD,QAAM,QAAQ,WAAW,SAAS,OAAO,OAAO;AAChD,QAAM,UAAU,YAAY,MAAM,OAAO;AACzC,QAAM,UAAU,SAAS,YAAY,MAAM;AAC3C,MAAI,CAAC,WAAW,OAAO,EAAG,OAAM,IAAI,MAAM,kCAAkC,OAAO,EAAE;AACrF,SAAO,aAAa,SAAS,MAAM,EAAE,MAAM,IAAI,EAAE,MAAM,CAAC,KAAK,EAAE,KAAK,IAAI;AAC1E;AAEA,SAAS,QAAQ;AACf,SAAO;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAST;AAEA,eAAe,OAAO;AACpB,QAAM,OAAO,QAAQ,KAAK,MAAM,CAAC;AACjC,MAAI,KAAK,WAAW,KAAK,KAAK,SAAS,QAAQ,KAAK,KAAK,SAAS,IAAI,GAAG;AACvE,YAAQ,IAAI,MAAM,CAAC;AACnB;AAAA,EACF;AACA,QAAM,UAAU,KAAK,CAAC;AACtB,QAAM,UAAU,WAAW,MAAM,WAAW;AAC5C,QAAM,WAAW,WAAW,MAAM,WAAW;AAC7C,MAAI,CAAC,CAAC,UAAU,WAAW,KAAK,EAAE,SAAS,OAAO,EAAG,OAAM,IAAI,MAAM,2CAA2C;AAChH,MAAI,CAAC,SAAU,OAAM,IAAI,MAAM,uEAAuE;AACtG,6BAA2B,OAAO;AAClC,QAAM,WAAW,YAAY,SAAS,IAAI;AAC1C,MAAI;AACJ,MAAI,YAAY,QAAS,UAAS,MAAM,aAAa,SAAS,UAAU,UAAU,IAAI;AAAA,WAC7E,YAAY,SAAU,UAAS,MAAM,cAAc,SAAS,UAAU,QAAQ;AAAA,WAC9E,YAAY,OAAQ,UAAS,MAAM,YAAY,SAAS,UAAU,UAAU,KAAK,SAAS,SAAS,CAAC;AAAA,WACpG,YAAY,QAAQ;AAC3B,UAAM,SAAS,YAAY,SAAS,UAAU,UAAU,OAAO,WAAW,MAAM,SAAS,KAAK,GAAG,CAAC;AAClG,YAAQ,IAAI,MAAM;AAClB;AAAA,EACF,MAAO,OAAM,IAAI,MAAM,oCAAoC,OAAO,EAAE;AACpE,MAAI,KAAK,SAAS,QAAQ,EAAG,SAAQ,IAAI,KAAK,UAAU,QAAQ,MAAM,CAAC,CAAC;AAAA,WAC/D,YAAY,YAAY,YAAY,QAAS,SAAQ,IAAI,WAAW,OAAO,IAAI,OAAO,QAAQ,UAAU,eAAe,OAAO,QAAQ,cAAc,EAAE;AAAA,MAC1J,SAAQ,IAAI,WAAW,OAAO,IAAI,OAAO,UAAU,UAAU;AACpE;AAEA,IAAM,YAAY,QAAQ,KAAK,CAAC,IAAI,SAAS,QAAQ,KAAK,CAAC,CAAC,IAAI;AAChE,IAAI,QAAQ,KAAK,CAAC,MAChB,QAAQ,QAAQ,KAAK,CAAC,CAAC,MAAM,cAAc,YAAY,GAAG,KACvD,CAAC,mBAAmB,0BAA0B,2BAA2B,sBAAsB,qBAAqB,EAAE,SAAS,SAAS,IAC1I;AACD,OAAK,EAAE,MAAM,WAAS;AACpB,YAAQ,MAAM,oBAAoB,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,CAAC,EAAE;AAC1F,YAAQ,WAAW;AAAA,EACrB,CAAC;AACH;",
-  "names": []
+  "sourcesContent": ["#!/usr/bin/env node\n\nimport { randomUUID, createHash } from 'node:crypto';\nimport { spawn, spawnSync } from 'node:child_process';\nimport {\n  closeSync,\n  existsSync,\n  mkdirSync,\n  openSync,\n  readFileSync,\n  readdirSync,\n  readlinkSync,\n  realpathSync,\n  renameSync,\n  rmSync,\n  writeFileSync,\n} from 'node:fs';\nimport { homedir, platform } from 'node:os';\nimport { basename, dirname, join, resolve } from 'node:path';\nimport { fileURLToPath } from 'node:url';\n\nconst scriptDirectory = dirname(fileURLToPath(import.meta.url));\nconst root = [resolve(scriptDirectory, '../..'), resolve(scriptDirectory, '..')].find(candidate => {\n  try {\n    const packageInfo = JSON.parse(readFileSync(join(candidate, 'package.json'), 'utf8'));\n    return packageInfo.name === '@mean-weasel/lineage';\n  } catch {\n    return false;\n  }\n});\nif (!root) throw new Error('Unable to locate the Lineage package root for managed service control');\nconst receiptSchema = 'lineage.managed_service.v1';\n\nfunction packageTreeSha256(packageRoot) {\n  const hash = createHash('sha256');\n  const visit = (directory, relativeDirectory = '') => {\n    for (const entry of readdirSync(directory, { withFileTypes: true }).sort((left, right) => left.name.localeCompare(right.name))) {\n      const relativePath = relativeDirectory ? join(relativeDirectory, entry.name) : entry.name;\n      const path = join(directory, entry.name);\n      hash.update(relativePath.replaceAll('\\\\', '/'));\n      hash.update('\\0');\n      if (entry.isDirectory()) {\n        hash.update('directory\\0');\n        visit(path, relativePath);\n      } else if (entry.isSymbolicLink()) {\n        hash.update('symlink\\0');\n        hash.update(readlinkSync(path));\n      } else if (entry.isFile()) {\n        hash.update('file\\0');\n        hash.update(readFileSync(path));\n      } else {\n        hash.update('other\\0');\n      }\n      hash.update('\\0');\n    }\n  };\n  visit(packageRoot);\n  return hash.digest('hex');\n}\n\nfunction assertServiceManagerOrigin(channel) {\n  const checkoutController = resolve(scriptDirectory) === resolve(root, 'scripts');\n  if (channel === 'dev') {\n    if (!checkoutController) throw new Error('Dev service control is checkout-only; run node scripts/managed-service.mjs from the intended worktree');\n    return;\n  }\n  if (checkoutController) throw new Error(`${channel} service control requires the matching attested packaged manager`);\n  const receiptPath = process.env.LINEAGE_RUNTIME_RECEIPT;\n  if (!receiptPath || !existsSync(receiptPath)) throw new Error(`${channel} service manager is missing its runtime install receipt`);\n  const receipt = JSON.parse(readFileSync(receiptPath, 'utf8'));\n  if (receipt.channel !== channel || process.env.LINEAGE_RELEASE_CHANNEL !== channel) {\n    throw new Error(`${channel} service manager receipt channel does not match the requested channel`);\n  }\n  if (!receipt.package_root || realpathSync(receipt.package_root) !== realpathSync(root)) {\n    throw new Error(`${channel} service manager receipt package root ${receipt.package_root || '(missing)'} does not match controller root ${root}`);\n  }\n  if (packageTreeSha256(root) !== receipt.package_tree_sha256) throw new Error(`${channel} service manager package tree does not match its install receipt`);\n}\n\nfunction readOption(args, name) {\n  const inline = args.find(arg => arg.startsWith(`${name}=`));\n  if (inline) return inline.slice(name.length + 1);\n  const index = args.indexOf(name);\n  return index >= 0 ? args[index + 1] : undefined;\n}\n\nfunction serviceRoot() {\n  if (process.env.LINEAGE_SERVICE_ROOT) return resolve(process.env.LINEAGE_SERVICE_ROOT);\n  if (platform() === 'darwin') return join(homedir(), 'Library', 'Application Support', 'Lineage', 'services');\n  if (platform() === 'win32') return join(process.env.LOCALAPPDATA || join(homedir(), 'AppData', 'Local'), 'Lineage', 'services');\n  return join(process.env.XDG_STATE_HOME || join(homedir(), '.local', 'state'), 'lineage', 'services');\n}\n\nfunction defaultLauncher(channel) {\n  if (channel === 'dev') return [process.execPath, '--import', 'tsx', join(root, 'src', 'cli', 'lineage-dev.ts')];\n  const envName = channel === 'stable' ? 'LINEAGE_STABLE_BIN' : 'LINEAGE_PREVIEW_BIN';\n  const explicit = process.env[envName] || process.env.LINEAGE_CHANNEL_LAUNCHER;\n  if (explicit) return [explicit];\n  const receiptPath = process.env.LINEAGE_RUNTIME_RECEIPT;\n  if (receiptPath) {\n    if (!existsSync(receiptPath)) throw new Error(`${channel} service manager runtime receipt does not exist: ${receiptPath}`);\n    const resolvedReceipt = realpathSync(receiptPath);\n    const runtimeRoot = dirname(dirname(dirname(dirname(resolvedReceipt))));\n    const pointerPath = join(runtimeRoot, 'channels', `${channel}.json`);\n    if (!existsSync(pointerPath)) throw new Error(`${channel} service manager could not find its receipt-bound channel pointer: ${pointerPath}`);\n    const pointer = JSON.parse(readFileSync(pointerPath, 'utf8'));\n    if (pointer.channel !== channel) throw new Error(`${channel} service manager channel pointer reports ${pointer.channel || '(missing)'}`);\n    if (!pointer.receipt_path || !existsSync(pointer.receipt_path) || realpathSync(pointer.receipt_path) !== resolvedReceipt) {\n      throw new Error(`${channel} service manager channel pointer is not bound to its runtime receipt`);\n    }\n    if (!pointer.shim || !existsSync(pointer.shim)) throw new Error(`${channel} service manager channel pointer launcher is missing: ${pointer.shim || '(missing)'}`);\n    return [realpathSync(pointer.shim)];\n  }\n  const runtimeRoot = process.env.LINEAGE_RUNTIME_ROOT\n    || (platform() === 'darwin'\n      ? join(homedir(), 'Library', 'Application Support', 'Lineage', 'runtimes')\n      : join(homedir(), '.local', 'share', 'lineage', 'runtimes'));\n  return [join(runtimeRoot, 'bin', channel === 'stable' ? 'lineage-stable' : 'lineage-preview')];\n}\n\nfunction launcherFor(channel, args) {\n  const explicit = readOption(args, '--launcher');\n  return explicit ? [resolve(explicit)] : defaultLauncher(channel);\n}\n\nfunction invoke(launcher, args, options = {}) {\n  return spawnSync(launcher[0], [...launcher.slice(1), ...args], {\n    cwd: root,\n    encoding: 'utf8',\n    ...options,\n  });\n}\n\nfunction invocationFailure(result) {\n  const stderr = typeof result.stderr === 'string' ? result.stderr.trim() : '';\n  const stdout = typeof result.stdout === 'string' ? result.stdout.trim() : '';\n  const spawnError = result.error instanceof Error ? result.error.message : result.error ? String(result.error) : '';\n  return stderr || stdout || spawnError || `process exited with status ${result.status ?? 'unknown'}`;\n}\n\nfunction shellDisplay(parts) {\n  return parts.map(part => /^[A-Za-z0-9_./:@=-]+$/.test(part) ? part : JSON.stringify(part)).join(' ');\n}\n\nfunction profileDoctor(launcher, selector) {\n  const result = invoke(launcher, ['profile', 'doctor', '--profile', selector, '--json']);\n  let doctor;\n  try {\n    doctor = JSON.parse(result.stdout || '{}');\n  } catch {\n    throw new Error(`Profile doctor did not return JSON: ${invocationFailure(result)}`);\n  }\n  if (!doctor.profile) {\n    const detail = doctor.error\n      || (doctor.checks || []).filter(check => check.status === 'fail').map(check => check.message).join('; ')\n      || invocationFailure(result)\n      || 'profile manifest was not found or could not be read';\n    const doctorCommand = shellDisplay([...launcher, 'profile', 'doctor', '--profile', selector, '--json']);\n    const initCommand = shellDisplay([...launcher, 'profile', 'init', '--profile', selector, '--confirm-write', '--json']);\n    throw new Error(`Profile ${selector} could not be resolved: ${detail}. Next: run \\`${doctorCommand}\\`. If this is a new profile, run \\`${initCommand}\\` instead.`);\n  }\n  return { doctor, status: result.status ?? 1 };\n}\n\nfunction runtimeDoctor(launcher) {\n  const result = invoke(launcher, ['runtime', 'doctor', '--json']);\n  let runtime;\n  try {\n    runtime = JSON.parse(result.stdout || '{}');\n  } catch {\n    throw new Error(`Runtime doctor did not return JSON: ${invocationFailure(result)}`);\n  }\n  if (result.status !== 0 || !runtime.verified) throw new Error(`Runtime doctor failed: ${invocationFailure(result) || JSON.stringify(runtime)}`);\n  return runtime;\n}\n\nfunction statePaths(channel, profile) {\n  const digest = createHash('sha256').update(profile.manifest_path).digest('hex').slice(0, 12);\n  const key = `${channel}--${profile.profile_id}--${digest}`;\n  const directory = join(serviceRoot(), key);\n  return {\n    directory,\n    lock: `${directory}.manager.lock`,\n    log: join(directory, 'service.log'),\n    receipt: join(directory, 'service.json'),\n  };\n}\n\nfunction processAlive(pid) {\n  try {\n    process.kill(pid, 0);\n    return true;\n  } catch (error) {\n    return error?.code !== 'ESRCH';\n  }\n}\n\nfunction processStartToken(pid) {\n  if (platform() === 'win32') return undefined;\n  const result = spawnSync('ps', ['-p', String(pid), '-o', 'lstart='], { encoding: 'utf8' });\n  return result.status === 0 ? result.stdout.trim() || undefined : undefined;\n}\n\nfunction processCommand(pid) {\n  if (platform() === 'win32') return undefined;\n  const result = spawnSync('ps', ['-p', String(pid), '-o', 'command='], { encoding: 'utf8' });\n  return result.status === 0 ? result.stdout.trim() || undefined : undefined;\n}\n\nfunction acquireManagerLock(path) {\n  mkdirSync(dirname(path), { recursive: true, mode: 0o700 });\n  for (let attempt = 0; attempt < 3; attempt += 1) {\n    try {\n      mkdirSync(path, { mode: 0o700 });\n      writeFileSync(join(path, 'owner.json'), `${JSON.stringify({ acquired_at: new Date().toISOString(), pid: process.pid })}\\n`, { mode: 0o600 });\n      return () => rmSync(path, { force: true, recursive: true });\n    } catch (error) {\n      if (error?.code !== 'EEXIST') throw error;\n      try {\n        const owner = JSON.parse(readFileSync(join(path, 'owner.json'), 'utf8'));\n        if (Number.isSafeInteger(owner.pid) && processAlive(owner.pid)) {\n          throw new Error(`Another service manager operation is active (pid ${owner.pid})`, { cause: error });\n        }\n      } catch (ownerError) {\n        if (ownerError instanceof Error && ownerError.message.startsWith('Another service manager')) throw ownerError;\n      }\n      rmSync(path, { force: true, recursive: true });\n    }\n  }\n  throw new Error(`Could not acquire service manager lock ${path}`);\n}\n\nfunction readReceipt(path) {\n  if (!existsSync(path)) return undefined;\n  const receipt = JSON.parse(readFileSync(path, 'utf8'));\n  if (\n    receipt.schema_version !== receiptSchema\n    || !Number.isSafeInteger(receipt.pid)\n    || typeof receipt.instance_id !== 'string'\n    || typeof receipt.profile_fingerprint !== 'string'\n    || !Array.isArray(receipt.launcher)\n  ) throw new Error(`Managed service receipt is invalid: ${path}`);\n  return receipt;\n}\n\nfunction writeReceipt(path, receipt) {\n  mkdirSync(dirname(path), { recursive: true, mode: 0o700 });\n  const temporary = `${path}.tmp-${process.pid}-${randomUUID()}`;\n  writeFileSync(temporary, `${JSON.stringify(receipt, null, 2)}\\n`, { encoding: 'utf8', flag: 'wx', mode: 0o600 });\n  renameSync(temporary, path);\n}\n\nexport function managedServiceIdentityErrors(runtime, receipt) {\n  const errors = [];\n  if (runtime.channel !== receipt.channel) errors.push(`channel ${runtime.channel} != ${receipt.channel}`);\n  if (!runtime.code?.verified) errors.push('code identity is not verified');\n  if (runtime.code?.fingerprint !== receipt.code_fingerprint) errors.push(`code fingerprint ${runtime.code?.fingerprint || 'missing'} != ${receipt.code_fingerprint}`);\n  if (runtime.profile?.id !== receipt.profile_id) errors.push(`profile ${runtime.profile?.id || 'missing'} != ${receipt.profile_id}`);\n  if (runtime.profile?.environment !== receipt.environment) errors.push(`environment ${runtime.profile?.environment || 'missing'} != ${receipt.environment}`);\n  if (runtime.profile?.fingerprint !== receipt.profile_fingerprint) errors.push(`profile fingerprint ${runtime.profile?.fingerprint || 'missing'} != ${receipt.profile_fingerprint}`);\n  if (runtime.schema?.profile_id !== receipt.profile_id) errors.push(`database profile ${runtime.schema?.profile_id || 'missing'} != ${receipt.profile_id}`);\n  if (runtime.schema?.profile_fingerprint !== receipt.profile_fingerprint) errors.push(`database fingerprint ${runtime.schema?.profile_fingerprint || 'missing'} != ${receipt.profile_fingerprint}`);\n  if (resolve(runtime.database?.path || '') !== resolve(receipt.database_path)) errors.push(`database ${runtime.database?.path || 'missing'} != ${receipt.database_path}`);\n  if (runtime.service?.instance_id !== receipt.instance_id) errors.push(`instance ${runtime.service?.instance_id || 'missing'} != ${receipt.instance_id}`);\n  if (runtime.service?.launcher_pid !== receipt.pid) errors.push(`launcher pid ${runtime.service?.launcher_pid || 'missing'} != ${receipt.pid}`);\n  if (runtime.service?.mode !== 'managed') errors.push(`service mode ${runtime.service?.mode || 'missing'} != managed`);\n  return errors;\n}\n\nfunction desiredReceiptErrors(channel, doctor, receipt) {\n  const errors = [];\n  if (receipt.channel !== channel) errors.push(`receipt channel ${receipt.channel} != ${channel}`);\n  if (receipt.code_fingerprint !== doctor.runtime?.code_fingerprint) errors.push(`receipt code fingerprint ${receipt.code_fingerprint} != current ${doctor.runtime?.code_fingerprint || 'missing'}`);\n  if (receipt.code_origin !== doctor.runtime?.code_origin) errors.push(`receipt code origin ${receipt.code_origin} != current ${doctor.runtime?.code_origin || 'missing'}`);\n  if (receipt.profile_id !== doctor.profile.profile_id) errors.push(`receipt profile ${receipt.profile_id} != ${doctor.profile.profile_id}`);\n  if (receipt.environment !== doctor.profile.environment) errors.push(`receipt environment ${receipt.environment} != ${doctor.profile.environment}`);\n  if (receipt.profile_fingerprint !== doctor.profile.profile_fingerprint) errors.push(`receipt profile fingerprint ${receipt.profile_fingerprint} != current ${doctor.profile.profile_fingerprint}`);\n  if (resolve(receipt.database_path) !== resolve(doctor.profile.database_path)) errors.push('receipt database path does not match current profile');\n  if (receipt.service_origin !== doctor.profile.service_origin) errors.push('receipt service origin does not match current profile');\n  if (receipt.manifest_path !== doctor.profile.manifest_path) errors.push('receipt manifest path does not match current profile');\n  return errors;\n}\n\nasync function fetchRuntime(origin) {\n  const response = await fetch(`${origin}/api/runtime`, { signal: AbortSignal.timeout(1_000) });\n  if (!response.ok) throw new Error(`HTTP ${response.status}`);\n  const body = await response.json();\n  if (!body?.runtime) throw new Error('Runtime response is missing runtime identity');\n  return body.runtime;\n}\n\nasync function inspectHealth(receipt) {\n  const errors = [];\n  if (!processAlive(receipt.pid)) errors.push(`launcher pid ${receipt.pid} is not alive`);\n  if (receipt.process_start && processStartToken(receipt.pid) !== receipt.process_start) errors.push(`launcher pid ${receipt.pid} was reused`);\n  let runtime;\n  try {\n    runtime = await fetchRuntime(receipt.service_origin);\n    errors.push(...managedServiceIdentityErrors(runtime, receipt));\n  } catch (error) {\n    errors.push(`runtime health failed: ${error instanceof Error ? error.message : String(error)}`);\n  }\n  return { errors, healthy: errors.length === 0, runtime };\n}\n\nasync function waitForHealthy(receipt, timeoutMs = 20_000) {\n  const deadline = Date.now() + timeoutMs;\n  let health = { errors: ['service did not respond'], healthy: false };\n  while (Date.now() < deadline && processAlive(receipt.pid)) {\n    health = await inspectHealth(receipt);\n    if (health.healthy) return health;\n    await new Promise(resolveDelay => setTimeout(resolveDelay, 250));\n  }\n  throw new Error(`Service failed readiness: ${health.errors.join('; ')}`);\n}\n\nfunction openBrowser(origin) {\n  const command = platform() === 'darwin' ? 'open' : platform() === 'win32' ? 'cmd' : 'xdg-open';\n  const args = platform() === 'win32' ? ['/c', 'start', '', origin] : [origin];\n  const child = spawn(command, args, { detached: true, stdio: 'ignore' });\n  child.unref();\n}\n\nfunction terminate(receipt, force = false) {\n  if (!processAlive(receipt.pid)) return;\n  const currentStart = processStartToken(receipt.pid);\n  const command = processCommand(receipt.pid);\n  const processMatches = receipt.process_start\n    ? currentStart === receipt.process_start\n    : Boolean(command?.includes('start') && command.includes(receipt.manifest_path));\n  if (!processMatches && !force) {\n    throw new Error(`Refusing to signal pid ${receipt.pid}: process identity no longer matches the service receipt; inspect manually or pass --force`);\n  }\n  const signalTarget = platform() === 'win32' ? receipt.pid : -receipt.pid;\n  try { process.kill(signalTarget, 'SIGTERM'); } catch (error) { if (error?.code !== 'ESRCH') throw error; }\n}\n\nasync function startManaged(channel, selector, launcher, args) {\n  const { doctor, status } = profileDoctor(launcher, selector);\n  const runtimeIdentity = runtimeDoctor(launcher);\n  if (status !== 0 || !doctor.ok || !doctor.runtime?.code_verified) {\n    const failures = (doctor.checks || []).filter(check => check.status === 'fail').map(check => `${check.id}: ${check.message}`);\n    throw new Error(`Profile doctor must pass before service start: ${failures.join('; ') || 'unverified runtime'}`);\n  }\n  if (runtimeIdentity.fingerprint !== doctor.runtime.code_fingerprint || runtimeIdentity.channel !== channel) {\n    throw new Error('Runtime doctor identity changed while resolving the service profile');\n  }\n  const paths = statePaths(channel, doctor.profile);\n  const release = acquireManagerLock(paths.lock);\n  try {\n    const existing = readReceipt(paths.receipt);\n    if (existing) {\n      const health = await inspectHealth(existing);\n      const desiredErrors = desiredReceiptErrors(channel, doctor, existing);\n      if (health.healthy && desiredErrors.length === 0) {\n        if (args.includes('--open')) openBrowser(existing.service_origin);\n        return { already_running: true, healthy: true, receipt: existing, runtime: health.runtime, state_path: paths.receipt };\n      }\n      if (processAlive(existing.pid)) throw new Error(`Managed service pid ${existing.pid} exists but is stale or unhealthy: ${[...desiredErrors, ...health.errors].join('; ')}`);\n      rmSync(paths.receipt, { force: true });\n    }\n    mkdirSync(paths.directory, { recursive: true, mode: 0o700 });\n    const logFd = openSync(paths.log, 'a', 0o600);\n    const instanceId = randomUUID();\n    const startArgs = ['start', '--profile', doctor.profile.manifest_path, '--json'];\n    const child = spawn(launcher[0], [...launcher.slice(1), ...startArgs], {\n      cwd: root,\n      detached: true,\n      env: { ...process.env, LINEAGE_SERVICE_INSTANCE_ID: instanceId, LINEAGE_SERVICE_MODE: 'managed' },\n      stdio: ['ignore', logFd, logFd],\n    });\n    closeSync(logFd);\n    child.unref();\n    const receipt = {\n      channel,\n      code_fingerprint: doctor.runtime.code_fingerprint,\n      code_origin: doctor.runtime.code_origin,\n      code_root: runtimeIdentity.root,\n      database_path: doctor.profile.database_path,\n      environment: doctor.profile.environment,\n      instance_id: instanceId,\n      launcher,\n      log_path: paths.log,\n      manifest_path: doctor.profile.manifest_path,\n      pid: child.pid,\n      process_start: processStartToken(child.pid),\n      profile_fingerprint: doctor.profile.profile_fingerprint,\n      profile_id: doctor.profile.profile_id,\n      schema_version: receiptSchema,\n      service_origin: doctor.profile.service_origin,\n      started_at: new Date().toISOString(),\n    };\n    writeReceipt(paths.receipt, receipt);\n    try {\n      const health = await waitForHealthy(receipt, Number(readOption(args, '--timeout-ms') || 20_000));\n      if (args.includes('--open')) openBrowser(receipt.service_origin);\n      return { healthy: true, receipt, runtime: health.runtime, state_path: paths.receipt };\n    } catch (error) {\n      terminate(receipt, true);\n      throw error;\n    }\n  } finally {\n    release();\n  }\n}\n\nasync function statusManaged(channel, selector, launcher) {\n  const { doctor, status } = profileDoctor(launcher, selector);\n  const paths = statePaths(channel, doctor.profile);\n  const receipt = readReceipt(paths.receipt);\n  if (!receipt) throw new Error(`No managed service receipt exists for ${channel}/${doctor.profile.profile_id}`);\n  const health = await inspectHealth(receipt);\n  const doctorFailures = status === 0 && doctor.ok\n    ? []\n    : (doctor.checks || []).filter(check => check.status === 'fail').map(check => `current doctor ${check.id}: ${check.message}`);\n  const errors = [...doctorFailures, ...desiredReceiptErrors(channel, doctor, receipt), ...health.errors];\n  if (errors.length > 0) throw new Error(`Managed service is not healthy: ${errors.join('; ')}`);\n  return { healthy: true, receipt, runtime: health.runtime, state_path: paths.receipt };\n}\n\nasync function stopManaged(channel, selector, launcher, force) {\n  const { doctor } = profileDoctor(launcher, selector);\n  const paths = statePaths(channel, doctor.profile);\n  const release = acquireManagerLock(paths.lock);\n  try {\n    const receipt = readReceipt(paths.receipt);\n    if (!receipt) return { already_stopped: true, profile_id: doctor.profile.profile_id };\n    if (receipt.manifest_path !== doctor.profile.manifest_path || receipt.profile_id !== doctor.profile.profile_id) {\n      throw new Error('Service receipt identity does not match the requested profile');\n    }\n    terminate(receipt, force);\n    const deadline = Date.now() + 5_000;\n    while (processAlive(receipt.pid) && Date.now() < deadline) await new Promise(resolveDelay => setTimeout(resolveDelay, 100));\n    if (processAlive(receipt.pid) && force) {\n      const signalTarget = platform() === 'win32' ? receipt.pid : -receipt.pid;\n      try { process.kill(signalTarget, 'SIGKILL'); } catch { /* already exited */ }\n    }\n    if (processAlive(receipt.pid)) throw new Error(`Service pid ${receipt.pid} did not stop`);\n    rmSync(paths.receipt, { force: true });\n    return { profile_id: receipt.profile_id, stopped: true };\n  } finally {\n    release();\n  }\n}\n\nfunction logsManaged(channel, selector, launcher, lines) {\n  const { doctor } = profileDoctor(launcher, selector);\n  const paths = statePaths(channel, doctor.profile);\n  const receipt = readReceipt(paths.receipt);\n  const logPath = receipt?.log_path || paths.log;\n  if (!existsSync(logPath)) throw new Error(`No managed service log exists: ${logPath}`);\n  return readFileSync(logPath, 'utf8').split('\\n').slice(-lines).join('\\n');\n}\n\nfunction usage() {\n  return `Usage:\n  lineage-service start --channel stable|preview|dev --profile <id-or-manifest> [--open] [--json]\n  lineage-service status --channel stable|preview|dev --profile <id-or-manifest> [--json]\n  lineage-service stop --channel stable|preview|dev --profile <id-or-manifest> [--force] [--json]\n  lineage-service logs --channel stable|preview|dev --profile <id-or-manifest> [--lines 100]\n\nStart writes a profile-scoped receipt, waits for /api/runtime to match the exact\ncode/profile/database/service instance, and only then opens a browser. Status is\nnonzero for a stale PID, failed health request, or any identity mismatch.`;\n}\n\nasync function main() {\n  const args = process.argv.slice(2);\n  if (args.length === 0 || args.includes('--help') || args.includes('-h')) {\n    console.log(usage());\n    return;\n  }\n  const command = args[0];\n  const channel = readOption(args, '--channel');\n  const selector = readOption(args, '--profile');\n  if (!['stable', 'preview', 'dev'].includes(channel)) throw new Error('--channel must be stable, preview, or dev');\n  if (!selector) throw new Error('--profile is required; managed services never use legacy-unbound data');\n  assertServiceManagerOrigin(channel);\n  const launcher = launcherFor(channel, args);\n  let result;\n  if (command === 'start') result = await startManaged(channel, selector, launcher, args);\n  else if (command === 'status') result = await statusManaged(channel, selector, launcher);\n  else if (command === 'stop') result = await stopManaged(channel, selector, launcher, args.includes('--force'));\n  else if (command === 'logs') {\n    const output = logsManaged(channel, selector, launcher, Number(readOption(args, '--lines') || 100));\n    console.log(output);\n    return;\n  } else throw new Error(`Unknown managed-service command: ${command}`);\n  if (args.includes('--json')) console.log(JSON.stringify(result, null, 2));\n  else if (command === 'status' || command === 'start') console.log(`Lineage ${channel}/${result.receipt.profile_id} healthy at ${result.receipt.service_origin}`);\n  else console.log(`Lineage ${channel}/${result.profile_id} stopped`);\n}\n\nconst invokedAs = process.argv[1] ? basename(process.argv[1]) : '';\nif (process.argv[1] && (\n  resolve(process.argv[1]) === fileURLToPath(import.meta.url)\n  || ['lineage-service', 'lineage-stable-service', 'lineage-preview-service', 'managed-service.js', 'managed-service.mjs'].includes(invokedAs)\n)) {\n  main().catch(error => {\n    const message = error instanceof Error ? error.message : String(error);\n    if (process.argv.includes('--json')) console.error(JSON.stringify({ error: message, ok: false }, null, 2));\n    else console.error(`managed-service: ${message}`);\n    process.exitCode = 1;\n  });\n}\n"],
+  "mappings": ";;;AAEA,SAAS,YAAY,kBAAkB;AACvC,SAAS,OAAO,iBAAiB;AACjC;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,SAAS,gBAAgB;AAClC,SAAS,UAAU,SAAS,MAAM,eAAe;AACjD,SAAS,qBAAqB;AAE9B,IAAM,kBAAkB,QAAQ,cAAc,YAAY,GAAG,CAAC;AAC9D,IAAM,OAAO,CAAC,QAAQ,iBAAiB,OAAO,GAAG,QAAQ,iBAAiB,IAAI,CAAC,EAAE,KAAK,eAAa;AACjG,MAAI;AACF,UAAM,cAAc,KAAK,MAAM,aAAa,KAAK,WAAW,cAAc,GAAG,MAAM,CAAC;AACpF,WAAO,YAAY,SAAS;AAAA,EAC9B,QAAQ;AACN,WAAO;AAAA,EACT;AACF,CAAC;AACD,IAAI,CAAC,KAAM,OAAM,IAAI,MAAM,uEAAuE;AAClG,IAAM,gBAAgB;AAEtB,SAAS,kBAAkB,aAAa;AACtC,QAAM,OAAO,WAAW,QAAQ;AAChC,QAAM,QAAQ,CAAC,WAAW,oBAAoB,OAAO;AACnD,eAAW,SAAS,YAAY,WAAW,EAAE,eAAe,KAAK,CAAC,EAAE,KAAK,CAAC,MAAM,UAAU,KAAK,KAAK,cAAc,MAAM,IAAI,CAAC,GAAG;AAC9H,YAAM,eAAe,oBAAoB,KAAK,mBAAmB,MAAM,IAAI,IAAI,MAAM;AACrF,YAAM,OAAO,KAAK,WAAW,MAAM,IAAI;AACvC,WAAK,OAAO,aAAa,WAAW,MAAM,GAAG,CAAC;AAC9C,WAAK,OAAO,IAAI;AAChB,UAAI,MAAM,YAAY,GAAG;AACvB,aAAK,OAAO,aAAa;AACzB,cAAM,MAAM,YAAY;AAAA,MAC1B,WAAW,MAAM,eAAe,GAAG;AACjC,aAAK,OAAO,WAAW;AACvB,aAAK,OAAO,aAAa,IAAI,CAAC;AAAA,MAChC,WAAW,MAAM,OAAO,GAAG;AACzB,aAAK,OAAO,QAAQ;AACpB,aAAK,OAAO,aAAa,IAAI,CAAC;AAAA,MAChC,OAAO;AACL,aAAK,OAAO,SAAS;AAAA,MACvB;AACA,WAAK,OAAO,IAAI;AAAA,IAClB;AAAA,EACF;AACA,QAAM,WAAW;AACjB,SAAO,KAAK,OAAO,KAAK;AAC1B;AAEA,SAAS,2BAA2B,SAAS;AAC3C,QAAM,qBAAqB,QAAQ,eAAe,MAAM,QAAQ,MAAM,SAAS;AAC/E,MAAI,YAAY,OAAO;AACrB,QAAI,CAAC,mBAAoB,OAAM,IAAI,MAAM,uGAAuG;AAChJ;AAAA,EACF;AACA,MAAI,mBAAoB,OAAM,IAAI,MAAM,GAAG,OAAO,kEAAkE;AACpH,QAAM,cAAc,QAAQ,IAAI;AAChC,MAAI,CAAC,eAAe,CAAC,WAAW,WAAW,EAAG,OAAM,IAAI,MAAM,GAAG,OAAO,yDAAyD;AACjI,QAAM,UAAU,KAAK,MAAM,aAAa,aAAa,MAAM,CAAC;AAC5D,MAAI,QAAQ,YAAY,WAAW,QAAQ,IAAI,4BAA4B,SAAS;AAClF,UAAM,IAAI,MAAM,GAAG,OAAO,uEAAuE;AAAA,EACnG;AACA,MAAI,CAAC,QAAQ,gBAAgB,aAAa,QAAQ,YAAY,MAAM,aAAa,IAAI,GAAG;AACtF,UAAM,IAAI,MAAM,GAAG,OAAO,yCAAyC,QAAQ,gBAAgB,WAAW,mCAAmC,IAAI,EAAE;AAAA,EACjJ;AACA,MAAI,kBAAkB,IAAI,MAAM,QAAQ,oBAAqB,OAAM,IAAI,MAAM,GAAG,OAAO,kEAAkE;AAC3J;AAEA,SAAS,WAAW,MAAM,MAAM;AAC9B,QAAM,SAAS,KAAK,KAAK,SAAO,IAAI,WAAW,GAAG,IAAI,GAAG,CAAC;AAC1D,MAAI,OAAQ,QAAO,OAAO,MAAM,KAAK,SAAS,CAAC;AAC/C,QAAM,QAAQ,KAAK,QAAQ,IAAI;AAC/B,SAAO,SAAS,IAAI,KAAK,QAAQ,CAAC,IAAI;AACxC;AAEA,SAAS,cAAc;AACrB,MAAI,QAAQ,IAAI,qBAAsB,QAAO,QAAQ,QAAQ,IAAI,oBAAoB;AACrF,MAAI,SAAS,MAAM,SAAU,QAAO,KAAK,QAAQ,GAAG,WAAW,uBAAuB,WAAW,UAAU;AAC3G,MAAI,SAAS,MAAM,QAAS,QAAO,KAAK,QAAQ,IAAI,gBAAgB,KAAK,QAAQ,GAAG,WAAW,OAAO,GAAG,WAAW,UAAU;AAC9H,SAAO,KAAK,QAAQ,IAAI,kBAAkB,KAAK,QAAQ,GAAG,UAAU,OAAO,GAAG,WAAW,UAAU;AACrG;AAEA,SAAS,gBAAgB,SAAS;AAChC,MAAI,YAAY,MAAO,QAAO,CAAC,QAAQ,UAAU,YAAY,OAAO,KAAK,MAAM,OAAO,OAAO,gBAAgB,CAAC;AAC9G,QAAM,UAAU,YAAY,WAAW,uBAAuB;AAC9D,QAAM,WAAW,QAAQ,IAAI,OAAO,KAAK,QAAQ,IAAI;AACrD,MAAI,SAAU,QAAO,CAAC,QAAQ;AAC9B,QAAM,cAAc,QAAQ,IAAI;AAChC,MAAI,aAAa;AACf,QAAI,CAAC,WAAW,WAAW,EAAG,OAAM,IAAI,MAAM,GAAG,OAAO,oDAAoD,WAAW,EAAE;AACzH,UAAM,kBAAkB,aAAa,WAAW;AAChD,UAAMA,eAAc,QAAQ,QAAQ,QAAQ,QAAQ,eAAe,CAAC,CAAC,CAAC;AACtE,UAAM,cAAc,KAAKA,cAAa,YAAY,GAAG,OAAO,OAAO;AACnE,QAAI,CAAC,WAAW,WAAW,EAAG,OAAM,IAAI,MAAM,GAAG,OAAO,sEAAsE,WAAW,EAAE;AAC3I,UAAM,UAAU,KAAK,MAAM,aAAa,aAAa,MAAM,CAAC;AAC5D,QAAI,QAAQ,YAAY,QAAS,OAAM,IAAI,MAAM,GAAG,OAAO,4CAA4C,QAAQ,WAAW,WAAW,EAAE;AACvI,QAAI,CAAC,QAAQ,gBAAgB,CAAC,WAAW,QAAQ,YAAY,KAAK,aAAa,QAAQ,YAAY,MAAM,iBAAiB;AACxH,YAAM,IAAI,MAAM,GAAG,OAAO,sEAAsE;AAAA,IAClG;AACA,QAAI,CAAC,QAAQ,QAAQ,CAAC,WAAW,QAAQ,IAAI,EAAG,OAAM,IAAI,MAAM,GAAG,OAAO,yDAAyD,QAAQ,QAAQ,WAAW,EAAE;AAChK,WAAO,CAAC,aAAa,QAAQ,IAAI,CAAC;AAAA,EACpC;AACA,QAAM,cAAc,QAAQ,IAAI,yBAC1B,SAAS,MAAM,WACf,KAAK,QAAQ,GAAG,WAAW,uBAAuB,WAAW,UAAU,IACvE,KAAK,QAAQ,GAAG,UAAU,SAAS,WAAW,UAAU;AAC9D,SAAO,CAAC,KAAK,aAAa,OAAO,YAAY,WAAW,mBAAmB,iBAAiB,CAAC;AAC/F;AAEA,SAAS,YAAY,SAAS,MAAM;AAClC,QAAM,WAAW,WAAW,MAAM,YAAY;AAC9C,SAAO,WAAW,CAAC,QAAQ,QAAQ,CAAC,IAAI,gBAAgB,OAAO;AACjE;AAEA,SAAS,OAAO,UAAU,MAAM,UAAU,CAAC,GAAG;AAC5C,SAAO,UAAU,SAAS,CAAC,GAAG,CAAC,GAAG,SAAS,MAAM,CAAC,GAAG,GAAG,IAAI,GAAG;AAAA,IAC7D,KAAK;AAAA,IACL,UAAU;AAAA,IACV,GAAG;AAAA,EACL,CAAC;AACH;AAEA,SAAS,kBAAkB,QAAQ;AACjC,QAAM,SAAS,OAAO,OAAO,WAAW,WAAW,OAAO,OAAO,KAAK,IAAI;AAC1E,QAAM,SAAS,OAAO,OAAO,WAAW,WAAW,OAAO,OAAO,KAAK,IAAI;AAC1E,QAAM,aAAa,OAAO,iBAAiB,QAAQ,OAAO,MAAM,UAAU,OAAO,QAAQ,OAAO,OAAO,KAAK,IAAI;AAChH,SAAO,UAAU,UAAU,cAAc,8BAA8B,OAAO,UAAU,SAAS;AACnG;AAEA,SAAS,aAAa,OAAO;AAC3B,SAAO,MAAM,IAAI,UAAQ,wBAAwB,KAAK,IAAI,IAAI,OAAO,KAAK,UAAU,IAAI,CAAC,EAAE,KAAK,GAAG;AACrG;AAEA,SAAS,cAAc,UAAU,UAAU;AACzC,QAAM,SAAS,OAAO,UAAU,CAAC,WAAW,UAAU,aAAa,UAAU,QAAQ,CAAC;AACtF,MAAI;AACJ,MAAI;AACF,aAAS,KAAK,MAAM,OAAO,UAAU,IAAI;AAAA,EAC3C,QAAQ;AACN,UAAM,IAAI,MAAM,uCAAuC,kBAAkB,MAAM,CAAC,EAAE;AAAA,EACpF;AACA,MAAI,CAAC,OAAO,SAAS;AACnB,UAAM,SAAS,OAAO,UAChB,OAAO,UAAU,CAAC,GAAG,OAAO,WAAS,MAAM,WAAW,MAAM,EAAE,IAAI,WAAS,MAAM,OAAO,EAAE,KAAK,IAAI,KACpG,kBAAkB,MAAM,KACxB;AACL,UAAM,gBAAgB,aAAa,CAAC,GAAG,UAAU,WAAW,UAAU,aAAa,UAAU,QAAQ,CAAC;AACtG,UAAM,cAAc,aAAa,CAAC,GAAG,UAAU,WAAW,QAAQ,aAAa,UAAU,mBAAmB,QAAQ,CAAC;AACrH,UAAM,IAAI,MAAM,WAAW,QAAQ,2BAA2B,MAAM,iBAAiB,aAAa,uCAAuC,WAAW,aAAa;AAAA,EACnK;AACA,SAAO,EAAE,QAAQ,QAAQ,OAAO,UAAU,EAAE;AAC9C;AAEA,SAAS,cAAc,UAAU;AAC/B,QAAM,SAAS,OAAO,UAAU,CAAC,WAAW,UAAU,QAAQ,CAAC;AAC/D,MAAI;AACJ,MAAI;AACF,cAAU,KAAK,MAAM,OAAO,UAAU,IAAI;AAAA,EAC5C,QAAQ;AACN,UAAM,IAAI,MAAM,uCAAuC,kBAAkB,MAAM,CAAC,EAAE;AAAA,EACpF;AACA,MAAI,OAAO,WAAW,KAAK,CAAC,QAAQ,SAAU,OAAM,IAAI,MAAM,0BAA0B,kBAAkB,MAAM,KAAK,KAAK,UAAU,OAAO,CAAC,EAAE;AAC9I,SAAO;AACT;AAEA,SAAS,WAAW,SAAS,SAAS;AACpC,QAAM,SAAS,WAAW,QAAQ,EAAE,OAAO,QAAQ,aAAa,EAAE,OAAO,KAAK,EAAE,MAAM,GAAG,EAAE;AAC3F,QAAM,MAAM,GAAG,OAAO,KAAK,QAAQ,UAAU,KAAK,MAAM;AACxD,QAAM,YAAY,KAAK,YAAY,GAAG,GAAG;AACzC,SAAO;AAAA,IACL;AAAA,IACA,MAAM,GAAG,SAAS;AAAA,IAClB,KAAK,KAAK,WAAW,aAAa;AAAA,IAClC,SAAS,KAAK,WAAW,cAAc;AAAA,EACzC;AACF;AAEA,SAAS,aAAa,KAAK;AACzB,MAAI;AACF,YAAQ,KAAK,KAAK,CAAC;AACnB,WAAO;AAAA,EACT,SAAS,OAAO;AACd,WAAO,OAAO,SAAS;AAAA,EACzB;AACF;AAEA,SAAS,kBAAkB,KAAK;AAC9B,MAAI,SAAS,MAAM,QAAS,QAAO;AACnC,QAAM,SAAS,UAAU,MAAM,CAAC,MAAM,OAAO,GAAG,GAAG,MAAM,SAAS,GAAG,EAAE,UAAU,OAAO,CAAC;AACzF,SAAO,OAAO,WAAW,IAAI,OAAO,OAAO,KAAK,KAAK,SAAY;AACnE;AAEA,SAAS,eAAe,KAAK;AAC3B,MAAI,SAAS,MAAM,QAAS,QAAO;AACnC,QAAM,SAAS,UAAU,MAAM,CAAC,MAAM,OAAO,GAAG,GAAG,MAAM,UAAU,GAAG,EAAE,UAAU,OAAO,CAAC;AAC1F,SAAO,OAAO,WAAW,IAAI,OAAO,OAAO,KAAK,KAAK,SAAY;AACnE;AAEA,SAAS,mBAAmB,MAAM;AAChC,YAAU,QAAQ,IAAI,GAAG,EAAE,WAAW,MAAM,MAAM,IAAM,CAAC;AACzD,WAAS,UAAU,GAAG,UAAU,GAAG,WAAW,GAAG;AAC/C,QAAI;AACF,gBAAU,MAAM,EAAE,MAAM,IAAM,CAAC;AAC/B,oBAAc,KAAK,MAAM,YAAY,GAAG,GAAG,KAAK,UAAU,EAAE,cAAa,oBAAI,KAAK,GAAE,YAAY,GAAG,KAAK,QAAQ,IAAI,CAAC,CAAC;AAAA,GAAM,EAAE,MAAM,IAAM,CAAC;AAC3I,aAAO,MAAM,OAAO,MAAM,EAAE,OAAO,MAAM,WAAW,KAAK,CAAC;AAAA,IAC5D,SAAS,OAAO;AACd,UAAI,OAAO,SAAS,SAAU,OAAM;AACpC,UAAI;AACF,cAAM,QAAQ,KAAK,MAAM,aAAa,KAAK,MAAM,YAAY,GAAG,MAAM,CAAC;AACvE,YAAI,OAAO,cAAc,MAAM,GAAG,KAAK,aAAa,MAAM,GAAG,GAAG;AAC9D,gBAAM,IAAI,MAAM,oDAAoD,MAAM,GAAG,KAAK,EAAE,OAAO,MAAM,CAAC;AAAA,QACpG;AAAA,MACF,SAAS,YAAY;AACnB,YAAI,sBAAsB,SAAS,WAAW,QAAQ,WAAW,yBAAyB,EAAG,OAAM;AAAA,MACrG;AACA,aAAO,MAAM,EAAE,OAAO,MAAM,WAAW,KAAK,CAAC;AAAA,IAC/C;AAAA,EACF;AACA,QAAM,IAAI,MAAM,0CAA0C,IAAI,EAAE;AAClE;AAEA,SAAS,YAAY,MAAM;AACzB,MAAI,CAAC,WAAW,IAAI,EAAG,QAAO;AAC9B,QAAM,UAAU,KAAK,MAAM,aAAa,MAAM,MAAM,CAAC;AACrD,MACE,QAAQ,mBAAmB,iBACxB,CAAC,OAAO,cAAc,QAAQ,GAAG,KACjC,OAAO,QAAQ,gBAAgB,YAC/B,OAAO,QAAQ,wBAAwB,YACvC,CAAC,MAAM,QAAQ,QAAQ,QAAQ,EAClC,OAAM,IAAI,MAAM,uCAAuC,IAAI,EAAE;AAC/D,SAAO;AACT;AAEA,SAAS,aAAa,MAAM,SAAS;AACnC,YAAU,QAAQ,IAAI,GAAG,EAAE,WAAW,MAAM,MAAM,IAAM,CAAC;AACzD,QAAM,YAAY,GAAG,IAAI,QAAQ,QAAQ,GAAG,IAAI,WAAW,CAAC;AAC5D,gBAAc,WAAW,GAAG,KAAK,UAAU,SAAS,MAAM,CAAC,CAAC;AAAA,GAAM,EAAE,UAAU,QAAQ,MAAM,MAAM,MAAM,IAAM,CAAC;AAC/G,aAAW,WAAW,IAAI;AAC5B;AAEO,SAAS,6BAA6B,SAAS,SAAS;AAC7D,QAAM,SAAS,CAAC;AAChB,MAAI,QAAQ,YAAY,QAAQ,QAAS,QAAO,KAAK,WAAW,QAAQ,OAAO,OAAO,QAAQ,OAAO,EAAE;AACvG,MAAI,CAAC,QAAQ,MAAM,SAAU,QAAO,KAAK,+BAA+B;AACxE,MAAI,QAAQ,MAAM,gBAAgB,QAAQ,iBAAkB,QAAO,KAAK,oBAAoB,QAAQ,MAAM,eAAe,SAAS,OAAO,QAAQ,gBAAgB,EAAE;AACnK,MAAI,QAAQ,SAAS,OAAO,QAAQ,WAAY,QAAO,KAAK,WAAW,QAAQ,SAAS,MAAM,SAAS,OAAO,QAAQ,UAAU,EAAE;AAClI,MAAI,QAAQ,SAAS,gBAAgB,QAAQ,YAAa,QAAO,KAAK,eAAe,QAAQ,SAAS,eAAe,SAAS,OAAO,QAAQ,WAAW,EAAE;AAC1J,MAAI,QAAQ,SAAS,gBAAgB,QAAQ,oBAAqB,QAAO,KAAK,uBAAuB,QAAQ,SAAS,eAAe,SAAS,OAAO,QAAQ,mBAAmB,EAAE;AAClL,MAAI,QAAQ,QAAQ,eAAe,QAAQ,WAAY,QAAO,KAAK,oBAAoB,QAAQ,QAAQ,cAAc,SAAS,OAAO,QAAQ,UAAU,EAAE;AACzJ,MAAI,QAAQ,QAAQ,wBAAwB,QAAQ,oBAAqB,QAAO,KAAK,wBAAwB,QAAQ,QAAQ,uBAAuB,SAAS,OAAO,QAAQ,mBAAmB,EAAE;AACjM,MAAI,QAAQ,QAAQ,UAAU,QAAQ,EAAE,MAAM,QAAQ,QAAQ,aAAa,EAAG,QAAO,KAAK,YAAY,QAAQ,UAAU,QAAQ,SAAS,OAAO,QAAQ,aAAa,EAAE;AACvK,MAAI,QAAQ,SAAS,gBAAgB,QAAQ,YAAa,QAAO,KAAK,YAAY,QAAQ,SAAS,eAAe,SAAS,OAAO,QAAQ,WAAW,EAAE;AACvJ,MAAI,QAAQ,SAAS,iBAAiB,QAAQ,IAAK,QAAO,KAAK,gBAAgB,QAAQ,SAAS,gBAAgB,SAAS,OAAO,QAAQ,GAAG,EAAE;AAC7I,MAAI,QAAQ,SAAS,SAAS,UAAW,QAAO,KAAK,gBAAgB,QAAQ,SAAS,QAAQ,SAAS,aAAa;AACpH,SAAO;AACT;AAEA,SAAS,qBAAqB,SAAS,QAAQ,SAAS;AACtD,QAAM,SAAS,CAAC;AAChB,MAAI,QAAQ,YAAY,QAAS,QAAO,KAAK,mBAAmB,QAAQ,OAAO,OAAO,OAAO,EAAE;AAC/F,MAAI,QAAQ,qBAAqB,OAAO,SAAS,iBAAkB,QAAO,KAAK,4BAA4B,QAAQ,gBAAgB,eAAe,OAAO,SAAS,oBAAoB,SAAS,EAAE;AACjM,MAAI,QAAQ,gBAAgB,OAAO,SAAS,YAAa,QAAO,KAAK,uBAAuB,QAAQ,WAAW,eAAe,OAAO,SAAS,eAAe,SAAS,EAAE;AACxK,MAAI,QAAQ,eAAe,OAAO,QAAQ,WAAY,QAAO,KAAK,mBAAmB,QAAQ,UAAU,OAAO,OAAO,QAAQ,UAAU,EAAE;AACzI,MAAI,QAAQ,gBAAgB,OAAO,QAAQ,YAAa,QAAO,KAAK,uBAAuB,QAAQ,WAAW,OAAO,OAAO,QAAQ,WAAW,EAAE;AACjJ,MAAI,QAAQ,wBAAwB,OAAO,QAAQ,oBAAqB,QAAO,KAAK,+BAA+B,QAAQ,mBAAmB,eAAe,OAAO,QAAQ,mBAAmB,EAAE;AACjM,MAAI,QAAQ,QAAQ,aAAa,MAAM,QAAQ,OAAO,QAAQ,aAAa,EAAG,QAAO,KAAK,sDAAsD;AAChJ,MAAI,QAAQ,mBAAmB,OAAO,QAAQ,eAAgB,QAAO,KAAK,uDAAuD;AACjI,MAAI,QAAQ,kBAAkB,OAAO,QAAQ,cAAe,QAAO,KAAK,sDAAsD;AAC9H,SAAO;AACT;AAEA,eAAe,aAAa,QAAQ;AAClC,QAAM,WAAW,MAAM,MAAM,GAAG,MAAM,gBAAgB,EAAE,QAAQ,YAAY,QAAQ,GAAK,EAAE,CAAC;AAC5F,MAAI,CAAC,SAAS,GAAI,OAAM,IAAI,MAAM,QAAQ,SAAS,MAAM,EAAE;AAC3D,QAAM,OAAO,MAAM,SAAS,KAAK;AACjC,MAAI,CAAC,MAAM,QAAS,OAAM,IAAI,MAAM,8CAA8C;AAClF,SAAO,KAAK;AACd;AAEA,eAAe,cAAc,SAAS;AACpC,QAAM,SAAS,CAAC;AAChB,MAAI,CAAC,aAAa,QAAQ,GAAG,EAAG,QAAO,KAAK,gBAAgB,QAAQ,GAAG,eAAe;AACtF,MAAI,QAAQ,iBAAiB,kBAAkB,QAAQ,GAAG,MAAM,QAAQ,cAAe,QAAO,KAAK,gBAAgB,QAAQ,GAAG,aAAa;AAC3I,MAAI;AACJ,MAAI;AACF,cAAU,MAAM,aAAa,QAAQ,cAAc;AACnD,WAAO,KAAK,GAAG,6BAA6B,SAAS,OAAO,CAAC;AAAA,EAC/D,SAAS,OAAO;AACd,WAAO,KAAK,0BAA0B,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,CAAC,EAAE;AAAA,EAChG;AACA,SAAO,EAAE,QAAQ,SAAS,OAAO,WAAW,GAAG,QAAQ;AACzD;AAEA,eAAe,eAAe,SAAS,YAAY,KAAQ;AACzD,QAAM,WAAW,KAAK,IAAI,IAAI;AAC9B,MAAI,SAAS,EAAE,QAAQ,CAAC,yBAAyB,GAAG,SAAS,MAAM;AACnE,SAAO,KAAK,IAAI,IAAI,YAAY,aAAa,QAAQ,GAAG,GAAG;AACzD,aAAS,MAAM,cAAc,OAAO;AACpC,QAAI,OAAO,QAAS,QAAO;AAC3B,UAAM,IAAI,QAAQ,kBAAgB,WAAW,cAAc,GAAG,CAAC;AAAA,EACjE;AACA,QAAM,IAAI,MAAM,6BAA6B,OAAO,OAAO,KAAK,IAAI,CAAC,EAAE;AACzE;AAEA,SAAS,YAAY,QAAQ;AAC3B,QAAM,UAAU,SAAS,MAAM,WAAW,SAAS,SAAS,MAAM,UAAU,QAAQ;AACpF,QAAM,OAAO,SAAS,MAAM,UAAU,CAAC,MAAM,SAAS,IAAI,MAAM,IAAI,CAAC,MAAM;AAC3E,QAAM,QAAQ,MAAM,SAAS,MAAM,EAAE,UAAU,MAAM,OAAO,SAAS,CAAC;AACtE,QAAM,MAAM;AACd;AAEA,SAAS,UAAU,SAAS,QAAQ,OAAO;AACzC,MAAI,CAAC,aAAa,QAAQ,GAAG,EAAG;AAChC,QAAM,eAAe,kBAAkB,QAAQ,GAAG;AAClD,QAAM,UAAU,eAAe,QAAQ,GAAG;AAC1C,QAAM,iBAAiB,QAAQ,gBAC3B,iBAAiB,QAAQ,gBACzB,QAAQ,SAAS,SAAS,OAAO,KAAK,QAAQ,SAAS,QAAQ,aAAa,CAAC;AACjF,MAAI,CAAC,kBAAkB,CAAC,OAAO;AAC7B,UAAM,IAAI,MAAM,0BAA0B,QAAQ,GAAG,4FAA4F;AAAA,EACnJ;AACA,QAAM,eAAe,SAAS,MAAM,UAAU,QAAQ,MAAM,CAAC,QAAQ;AACrE,MAAI;AAAE,YAAQ,KAAK,cAAc,SAAS;AAAA,EAAG,SAAS,OAAO;AAAE,QAAI,OAAO,SAAS,QAAS,OAAM;AAAA,EAAO;AAC3G;AAEA,eAAe,aAAa,SAAS,UAAU,UAAU,MAAM;AAC7D,QAAM,EAAE,QAAQ,OAAO,IAAI,cAAc,UAAU,QAAQ;AAC3D,QAAM,kBAAkB,cAAc,QAAQ;AAC9C,MAAI,WAAW,KAAK,CAAC,OAAO,MAAM,CAAC,OAAO,SAAS,eAAe;AAChE,UAAM,YAAY,OAAO,UAAU,CAAC,GAAG,OAAO,WAAS,MAAM,WAAW,MAAM,EAAE,IAAI,WAAS,GAAG,MAAM,EAAE,KAAK,MAAM,OAAO,EAAE;AAC5H,UAAM,IAAI,MAAM,kDAAkD,SAAS,KAAK,IAAI,KAAK,oBAAoB,EAAE;AAAA,EACjH;AACA,MAAI,gBAAgB,gBAAgB,OAAO,QAAQ,oBAAoB,gBAAgB,YAAY,SAAS;AAC1G,UAAM,IAAI,MAAM,qEAAqE;AAAA,EACvF;AACA,QAAM,QAAQ,WAAW,SAAS,OAAO,OAAO;AAChD,QAAM,UAAU,mBAAmB,MAAM,IAAI;AAC7C,MAAI;AACF,UAAM,WAAW,YAAY,MAAM,OAAO;AAC1C,QAAI,UAAU;AACZ,YAAM,SAAS,MAAM,cAAc,QAAQ;AAC3C,YAAM,gBAAgB,qBAAqB,SAAS,QAAQ,QAAQ;AACpE,UAAI,OAAO,WAAW,cAAc,WAAW,GAAG;AAChD,YAAI,KAAK,SAAS,QAAQ,EAAG,aAAY,SAAS,cAAc;AAChE,eAAO,EAAE,iBAAiB,MAAM,SAAS,MAAM,SAAS,UAAU,SAAS,OAAO,SAAS,YAAY,MAAM,QAAQ;AAAA,MACvH;AACA,UAAI,aAAa,SAAS,GAAG,EAAG,OAAM,IAAI,MAAM,uBAAuB,SAAS,GAAG,sCAAsC,CAAC,GAAG,eAAe,GAAG,OAAO,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE;AAC1K,aAAO,MAAM,SAAS,EAAE,OAAO,KAAK,CAAC;AAAA,IACvC;AACA,cAAU,MAAM,WAAW,EAAE,WAAW,MAAM,MAAM,IAAM,CAAC;AAC3D,UAAM,QAAQ,SAAS,MAAM,KAAK,KAAK,GAAK;AAC5C,UAAM,aAAa,WAAW;AAC9B,UAAM,YAAY,CAAC,SAAS,aAAa,OAAO,QAAQ,eAAe,QAAQ;AAC/E,UAAM,QAAQ,MAAM,SAAS,CAAC,GAAG,CAAC,GAAG,SAAS,MAAM,CAAC,GAAG,GAAG,SAAS,GAAG;AAAA,MACrE,KAAK;AAAA,MACL,UAAU;AAAA,MACV,KAAK,EAAE,GAAG,QAAQ,KAAK,6BAA6B,YAAY,sBAAsB,UAAU;AAAA,MAChG,OAAO,CAAC,UAAU,OAAO,KAAK;AAAA,IAChC,CAAC;AACD,cAAU,KAAK;AACf,UAAM,MAAM;AACZ,UAAM,UAAU;AAAA,MACd;AAAA,MACA,kBAAkB,OAAO,QAAQ;AAAA,MACjC,aAAa,OAAO,QAAQ;AAAA,MAC5B,WAAW,gBAAgB;AAAA,MAC3B,eAAe,OAAO,QAAQ;AAAA,MAC9B,aAAa,OAAO,QAAQ;AAAA,MAC5B,aAAa;AAAA,MACb;AAAA,MACA,UAAU,MAAM;AAAA,MAChB,eAAe,OAAO,QAAQ;AAAA,MAC9B,KAAK,MAAM;AAAA,MACX,eAAe,kBAAkB,MAAM,GAAG;AAAA,MAC1C,qBAAqB,OAAO,QAAQ;AAAA,MACpC,YAAY,OAAO,QAAQ;AAAA,MAC3B,gBAAgB;AAAA,MAChB,gBAAgB,OAAO,QAAQ;AAAA,MAC/B,aAAY,oBAAI,KAAK,GAAE,YAAY;AAAA,IACrC;AACA,iBAAa,MAAM,SAAS,OAAO;AACnC,QAAI;AACF,YAAM,SAAS,MAAM,eAAe,SAAS,OAAO,WAAW,MAAM,cAAc,KAAK,GAAM,CAAC;AAC/F,UAAI,KAAK,SAAS,QAAQ,EAAG,aAAY,QAAQ,cAAc;AAC/D,aAAO,EAAE,SAAS,MAAM,SAAS,SAAS,OAAO,SAAS,YAAY,MAAM,QAAQ;AAAA,IACtF,SAAS,OAAO;AACd,gBAAU,SAAS,IAAI;AACvB,YAAM;AAAA,IACR;AAAA,EACF,UAAE;AACA,YAAQ;AAAA,EACV;AACF;AAEA,eAAe,cAAc,SAAS,UAAU,UAAU;AACxD,QAAM,EAAE,QAAQ,OAAO,IAAI,cAAc,UAAU,QAAQ;AAC3D,QAAM,QAAQ,WAAW,SAAS,OAAO,OAAO;AAChD,QAAM,UAAU,YAAY,MAAM,OAAO;AACzC,MAAI,CAAC,QAAS,OAAM,IAAI,MAAM,yCAAyC,OAAO,IAAI,OAAO,QAAQ,UAAU,EAAE;AAC7G,QAAM,SAAS,MAAM,cAAc,OAAO;AAC1C,QAAM,iBAAiB,WAAW,KAAK,OAAO,KAC1C,CAAC,KACA,OAAO,UAAU,CAAC,GAAG,OAAO,WAAS,MAAM,WAAW,MAAM,EAAE,IAAI,WAAS,kBAAkB,MAAM,EAAE,KAAK,MAAM,OAAO,EAAE;AAC9H,QAAM,SAAS,CAAC,GAAG,gBAAgB,GAAG,qBAAqB,SAAS,QAAQ,OAAO,GAAG,GAAG,OAAO,MAAM;AACtG,MAAI,OAAO,SAAS,EAAG,OAAM,IAAI,MAAM,mCAAmC,OAAO,KAAK,IAAI,CAAC,EAAE;AAC7F,SAAO,EAAE,SAAS,MAAM,SAAS,SAAS,OAAO,SAAS,YAAY,MAAM,QAAQ;AACtF;AAEA,eAAe,YAAY,SAAS,UAAU,UAAU,OAAO;AAC7D,QAAM,EAAE,OAAO,IAAI,cAAc,UAAU,QAAQ;AACnD,QAAM,QAAQ,WAAW,SAAS,OAAO,OAAO;AAChD,QAAM,UAAU,mBAAmB,MAAM,IAAI;AAC7C,MAAI;AACF,UAAM,UAAU,YAAY,MAAM,OAAO;AACzC,QAAI,CAAC,QAAS,QAAO,EAAE,iBAAiB,MAAM,YAAY,OAAO,QAAQ,WAAW;AACpF,QAAI,QAAQ,kBAAkB,OAAO,QAAQ,iBAAiB,QAAQ,eAAe,OAAO,QAAQ,YAAY;AAC9G,YAAM,IAAI,MAAM,+DAA+D;AAAA,IACjF;AACA,cAAU,SAAS,KAAK;AACxB,UAAM,WAAW,KAAK,IAAI,IAAI;AAC9B,WAAO,aAAa,QAAQ,GAAG,KAAK,KAAK,IAAI,IAAI,SAAU,OAAM,IAAI,QAAQ,kBAAgB,WAAW,cAAc,GAAG,CAAC;AAC1H,QAAI,aAAa,QAAQ,GAAG,KAAK,OAAO;AACtC,YAAM,eAAe,SAAS,MAAM,UAAU,QAAQ,MAAM,CAAC,QAAQ;AACrE,UAAI;AAAE,gBAAQ,KAAK,cAAc,SAAS;AAAA,MAAG,QAAQ;AAAA,MAAuB;AAAA,IAC9E;AACA,QAAI,aAAa,QAAQ,GAAG,EAAG,OAAM,IAAI,MAAM,eAAe,QAAQ,GAAG,eAAe;AACxF,WAAO,MAAM,SAAS,EAAE,OAAO,KAAK,CAAC;AACrC,WAAO,EAAE,YAAY,QAAQ,YAAY,SAAS,KAAK;AAAA,EACzD,UAAE;AACA,YAAQ;AAAA,EACV;AACF;AAEA,SAAS,YAAY,SAAS,UAAU,UAAU,OAAO;AACvD,QAAM,EAAE,OAAO,IAAI,cAAc,UAAU,QAAQ;AACnD,QAAM,QAAQ,WAAW,SAAS,OAAO,OAAO;AAChD,QAAM,UAAU,YAAY,MAAM,OAAO;AACzC,QAAM,UAAU,SAAS,YAAY,MAAM;AAC3C,MAAI,CAAC,WAAW,OAAO,EAAG,OAAM,IAAI,MAAM,kCAAkC,OAAO,EAAE;AACrF,SAAO,aAAa,SAAS,MAAM,EAAE,MAAM,IAAI,EAAE,MAAM,CAAC,KAAK,EAAE,KAAK,IAAI;AAC1E;AAEA,SAAS,QAAQ;AACf,SAAO;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAST;AAEA,eAAe,OAAO;AACpB,QAAM,OAAO,QAAQ,KAAK,MAAM,CAAC;AACjC,MAAI,KAAK,WAAW,KAAK,KAAK,SAAS,QAAQ,KAAK,KAAK,SAAS,IAAI,GAAG;AACvE,YAAQ,IAAI,MAAM,CAAC;AACnB;AAAA,EACF;AACA,QAAM,UAAU,KAAK,CAAC;AACtB,QAAM,UAAU,WAAW,MAAM,WAAW;AAC5C,QAAM,WAAW,WAAW,MAAM,WAAW;AAC7C,MAAI,CAAC,CAAC,UAAU,WAAW,KAAK,EAAE,SAAS,OAAO,EAAG,OAAM,IAAI,MAAM,2CAA2C;AAChH,MAAI,CAAC,SAAU,OAAM,IAAI,MAAM,uEAAuE;AACtG,6BAA2B,OAAO;AAClC,QAAM,WAAW,YAAY,SAAS,IAAI;AAC1C,MAAI;AACJ,MAAI,YAAY,QAAS,UAAS,MAAM,aAAa,SAAS,UAAU,UAAU,IAAI;AAAA,WAC7E,YAAY,SAAU,UAAS,MAAM,cAAc,SAAS,UAAU,QAAQ;AAAA,WAC9E,YAAY,OAAQ,UAAS,MAAM,YAAY,SAAS,UAAU,UAAU,KAAK,SAAS,SAAS,CAAC;AAAA,WACpG,YAAY,QAAQ;AAC3B,UAAM,SAAS,YAAY,SAAS,UAAU,UAAU,OAAO,WAAW,MAAM,SAAS,KAAK,GAAG,CAAC;AAClG,YAAQ,IAAI,MAAM;AAClB;AAAA,EACF,MAAO,OAAM,IAAI,MAAM,oCAAoC,OAAO,EAAE;AACpE,MAAI,KAAK,SAAS,QAAQ,EAAG,SAAQ,IAAI,KAAK,UAAU,QAAQ,MAAM,CAAC,CAAC;AAAA,WAC/D,YAAY,YAAY,YAAY,QAAS,SAAQ,IAAI,WAAW,OAAO,IAAI,OAAO,QAAQ,UAAU,eAAe,OAAO,QAAQ,cAAc,EAAE;AAAA,MAC1J,SAAQ,IAAI,WAAW,OAAO,IAAI,OAAO,UAAU,UAAU;AACpE;AAEA,IAAM,YAAY,QAAQ,KAAK,CAAC,IAAI,SAAS,QAAQ,KAAK,CAAC,CAAC,IAAI;AAChE,IAAI,QAAQ,KAAK,CAAC,MAChB,QAAQ,QAAQ,KAAK,CAAC,CAAC,MAAM,cAAc,YAAY,GAAG,KACvD,CAAC,mBAAmB,0BAA0B,2BAA2B,sBAAsB,qBAAqB,EAAE,SAAS,SAAS,IAC1I;AACD,OAAK,EAAE,MAAM,WAAS;AACpB,UAAM,UAAU,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;AACrE,QAAI,QAAQ,KAAK,SAAS,QAAQ,EAAG,SAAQ,MAAM,KAAK,UAAU,EAAE,OAAO,SAAS,IAAI,MAAM,GAAG,MAAM,CAAC,CAAC;AAAA,QACpG,SAAQ,MAAM,oBAAoB,OAAO,EAAE;AAChD,YAAQ,WAAW;AAAA,EACrB,CAAC;AACH;",
+  "names": ["runtimeRoot"]
 }

package/dist/runtime-build.json

@@ -1,9 +1,9 @@
 {
-  "build_fingerprint": "715a4871ffee90f8a337a9f43bd5727f4fde2872ddc6857952523f1edbae3d2d",
+  "build_fingerprint": "06b247a5facc91f5229fcc17b7ae8bb22a2d3e663f4fd1520bb50152254669fe",
   "package_name": "@mean-weasel/lineage",
-  "package_version": "0.1.16",
+  "package_version": "0.1.18",
   "schema_version": "lineage.runtime_build.v1",
   "source_dirty": false,
-  "source_fingerprint": "f9525d393bac371b973bbe38e40586a551cf559610507bb2dce647f9eb6f4cf7",
-  "source_git_sha": "6f5d7c7ef3acb2039a85535d263aebe8e0e866f3"
+  "source_fingerprint": "f57dfbc56b806bf349bab7a5a4431c014e76cdb04321e610178a8b85707679b0",
+  "source_git_sha": "7b7a0ba3166359522a78bf918bf3e88e471bf933"
 }

package/dist/server.js

@@ -815,7 +815,7 @@ function acquireProfileWriterLease(profile, channel, role = "service") {
 }
 function assertProfileWriterLeaseHeld() {
   if (!process.env.LINEAGE_PROFILE) {
-    throw new Error("Persistent writes require a selected named Lineage profile and its writer lease; legacy-unbound access is read-only");
+    throw new Error("Persistent writes require a selected named Lineage profile and its writer lease; legacy-unbound access is read-only. Create a fresh profile with `profile init --profile <id> --confirm-write`, then pass that profile to the command");
   }
   const profileId = process.env.LINEAGE_PROFILE_ID;
   const profileFingerprint = process.env.LINEAGE_PROFILE_FINGERPRINT;
@@ -8645,6 +8645,23 @@ function upsertSwissifierRerollAttempts(project, manifest) {
   }
   return { total: attempts.length };
 }
+function backfillSwissifierEdgeSummaries(project, manifest) {
+  const database = lineageDb();
+  const timestamp = nowIso();
+  try {
+    const statement = database.prepare(`
+      update asset_edges
+      set summary = ?, summary_created_by = 'system', summary_updated_by = 'system', summary_updated_at = ?
+      where project_id = ? and parent_asset_id = ? and child_asset_id = ? and relation_type = 'derived_from'
+        and summary is null and summary_created_by is null and summary_updated_by is null and summary_updated_at is null
+    `);
+    for (const edge of manifest.edges) {
+      statement.run(requireEdgeSummary(edge.summary), timestamp, project, edge.parent, edge.child);
+    }
+  } finally {
+    database.close();
+  }
+}
 function seedDemoLineageWorkspace(project, fields) {
   const ids = fields.confirmWrite ? writeDemoFiles(project) : demoAssetIds();
   const rootAssetId = ids.root;
@@ -8707,6 +8724,7 @@ function seedSwissifierRichDemoWorkspace(project, fields) {
   for (const edge of manifest.edges) {
     linkLineageAssets(project, { parentAssetId: edge.parent, childAssetId: edge.child, confirmWrite: true });
   }
+  backfillSwissifierEdgeSummaries(project, manifest);
   const reroll_attempts = upsertSwissifierRerollAttempts(project, manifest);
   updateSelectedAsset(project, {
     assetIds: manifest.selected_asset_ids,
@@ -9112,6 +9130,9 @@ function getLineageRuntimeInfo(options = {}) {
   const code = options.code || getLineageCodeIdentity(channel);
   const databaseInfo = { exists: existsSync11(dbPath), path: dbPath };
   const schema = { migration_keys: [] };
+  const serviceInstanceId = process.env.LINEAGE_SERVICE_INSTANCE_ID;
+  const launcherPid = process.env.LINEAGE_LAUNCHER_PID ? Number(process.env.LINEAGE_LAUNCHER_PID) : void 0;
+  const isServiceProcess = Boolean(serviceInstanceId && Number.isInteger(launcherPid) && launcherPid > 0);
   if (databaseInfo.exists) {
     try {
       const stat = statSync5(dbPath);
@@ -9149,14 +9170,22 @@ function getLineageRuntimeInfo(options = {}) {
     git_sha: code.git_sha,
     node_env: process.env.NODE_ENV,
     package_name: info.name,
-    profile: runtimeProfileIdentity(channel),
-    schema,
-    service: {
-      instance_id: process.env.LINEAGE_SERVICE_INSTANCE_ID,
-      launcher_pid: process.env.LINEAGE_LAUNCHER_PID ? Number(process.env.LINEAGE_LAUNCHER_PID) : void 0,
+    process: {
       pid: process.pid,
+      role: isServiceProcess ? "service" : "command",
       started_at: processStartedAt
     },
+    profile: runtimeProfileIdentity(channel),
+    schema,
+    ...isServiceProcess ? {
+      service: {
+        instance_id: serviceInstanceId,
+        launcher_pid: launcherPid,
+        mode: process.env.LINEAGE_SERVICE_MODE === "managed" ? "managed" : "foreground",
+        pid: process.pid,
+        started_at: processStartedAt
+      }
+    } : {},
     version: info.version
   };
 }
@@ -10122,7 +10151,12 @@ var runtimeChannel = normalizeRuntimeChannel(process.env.LINEAGE_CHANNEL || proc
 var startupCode = assertLineageCodeOrigin(runtimeChannel);
 assertRuntimeProfileSafety(runtimeChannel);
 var startupRuntime = getLineageRuntimeInfo({ channel: runtimeChannel, code: startupCode });
-if (!process.env.LINEAGE_PROFILE) assertUnselectedDatabaseIsUnbound(startupRuntime);
+if (!process.env.LINEAGE_PROFILE) {
+  if (process.env.LINEAGE_ALLOW_UNBOUND_DIAGNOSTIC !== "1") {
+    throw new Error("Lineage server startup requires a named profile. Use a channel launcher with start --profile <id>, or use `npm run dev -- --profile <id>` for hot reload. Set LINEAGE_ALLOW_UNBOUND_DIAGNOSTIC=1 only for an explicit read-only diagnostic server.");
+  }
+  assertUnselectedDatabaseIsUnbound(startupRuntime);
+}
 var startupProfile;
 if (process.env.LINEAGE_PROFILE) {
   if (!process.env.LINEAGE_PROFILE_ID || !process.env.LINEAGE_PROFILE_ENVIRONMENT || !process.env.LINEAGE_PROFILE_MANIFEST) {
@@ -10174,7 +10208,7 @@ app.use((req, res, next) => {
   if (startupProfile || req.method === "GET" || req.method === "HEAD" || req.method === "OPTIONS") return next();
   res.status(409).json({
     error: "profile_required",
-    message: "Persistent writes require a selected named Lineage profile; legacy-unbound service access is read-only."
+    message: "Persistent writes require a selected named Lineage profile; legacy-unbound service access is read-only. Create a fresh profile with `profile init --profile <id> --confirm-write`, then start with that profile."
   });
 });
 function projectFrom(input) {