@nocobase/app-installer 0.0.0-stage → 0.1.0-beta.10

package/dist/lib/app-cli.js

@@ -0,0 +1,89 @@
+import path from 'node:path';
+import { InstallerError } from "./errors.js";
+import { formatCommandLine } from '@nocobase/cli-envelope';
+import { CommandFailedError, runCommand, tail, } from "./run-command.js";
+/**
+ * Carries a suggestion of the release's CLI over into the installer's error, with its command folded into the message.
+ * None of them runs as-is from an installation root: they name the release's own `dist/cli/index.js`, which a failed
+ * install or upgrade has already removed and which reads the wrong configuration without `app.env`, or `pnpm add`,
+ * which would turn the installation root into a project.
+ */
+export function toSuggestion(entry) {
+    const run = typeof entry.run === 'string'
+        ? entry.run
+        : entry.run
+            ? formatCommandLine(entry.run)
+            : undefined;
+    const message = entry.message ?? '';
+    return {
+        message: run
+            ? [message, `(the application CLI's command: ${run})`]
+                .filter(Boolean)
+                .join(' ')
+            : message,
+    };
+}
+/**
+ * The command as it may appear in a message: `config set` values are masked, since a `--set` may carry a secret that
+ * would otherwise end up in the JSON result and the terminal. `--from-env` pairs name a variable, not a value, and stay.
+ */
+export function describeAppCommand(args) {
+    const setting = args[0] === 'config' && args[1] === 'set';
+    let fromEnv = false;
+    const shown = args.map((arg) => {
+        if (arg === '--from-env')
+            fromEnv = true;
+        if (!setting || fromEnv || arg.startsWith('-'))
+            return arg;
+        const index = arg.indexOf('=');
+        return index > 0 ? `${arg.slice(0, index + 1)}***` : arg;
+    });
+    return `nocobase ${shown.join(' ')}`;
+}
+/**
+ * Runs the release's own CLI, `node <release>/dist/cli/index.js <args> --json`, and returns its envelope. It is the code
+ * that runs in production, so configuration and migrations are checked by the same version that will serve them.
+ */
+export async function runAppCli(args, options) {
+    const entry = path.join(options.releaseDir, 'dist/cli/index.js');
+    const label = describeAppCommand(args);
+    const run = options.run ?? runCommand;
+    let stdout;
+    let stderr;
+    try {
+        ({ stdout, stderr } = await run(process.execPath, [entry, ...args, '--json'], {
+            cwd: options.cwd,
+            env: { ...process.env, ...options.env },
+            timeoutMs: 30 * 60_000,
+        }));
+    }
+    catch (error) {
+        if (!(error instanceof CommandFailedError))
+            throw error;
+        stdout = error.stdout;
+        stderr = error.stderr;
+    }
+    let envelope;
+    try {
+        envelope = JSON.parse(stdout);
+    }
+    catch {
+        throw new InstallerError('APP_CLI_FAILED', `${label} did not print a JSON result.`, { details: { stderr: tail(stderr), stdout: tail(stdout) } });
+    }
+    if (!envelope.ok) {
+        throw new InstallerError(envelope.error?.code ?? 'APP_CLI_FAILED', `${label} failed: ${envelope.error?.message ?? 'no message'}`, {
+            suggestions: (envelope.error?.suggestions ?? []).map(toSuggestion),
+            details: { command: label },
+        });
+    }
+    return envelope;
+}
+/**
+ * Counts the migration and seed tasks a `db apply --dry-run` would run. `status` is not a reliable signal: a dry run
+ * reports `success-noop` even when tasks are pending, so the plan itself is read.
+ */
+export function pendingTaskCount(envelope) {
+    const plan = envelope.result?.plan;
+    return (plan ?? []).reduce((count, entry) => count + (entry.tasks?.length ?? 0), 0);
+}
+//# sourceMappingURL=app-cli.js.map

package/dist/lib/app-cli.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"app-cli.js","sourceRoot":"","sources":["../../src/lib/app-cli.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,cAAc,EAAmB,MAAM,aAAa,CAAC;AAC9D,OAAO,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAC3D,OAAO,EACL,kBAAkB,EAClB,UAAU,EACV,IAAI,GAEL,MAAM,kBAAkB,CAAC;AAkB1B;;;;;GAKG;AACH,MAAM,UAAU,YAAY,CAC1B,KAES;IAET,MAAM,GAAG,GACP,OAAO,KAAK,CAAC,GAAG,KAAK,QAAQ;QAC3B,CAAC,CAAC,KAAK,CAAC,GAAG;QACX,CAAC,CAAC,KAAK,CAAC,GAAG;YACT,CAAC,CAAC,iBAAiB,CAAC,KAAK,CAAC,GAAG,CAAC;YAC9B,CAAC,CAAC,SAAS,CAAC;IAClB,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,IAAI,EAAE,CAAC;IACpC,OAAO;QACL,OAAO,EAAE,GAAG;YACV,CAAC,CAAC,CAAC,OAAO,EAAE,mCAAmC,GAAG,GAAG,CAAC;iBACjD,MAAM,CAAC,OAAO,CAAC;iBACf,IAAI,CAAC,GAAG,CAAC;YACd,CAAC,CAAC,OAAO;KACZ,CAAC;AACJ,CAAC;AAYD;;;GAGG;AACH,MAAM,UAAU,kBAAkB,CAAC,IAAuB;IACxD,MAAM,OAAO,GAAG,IAAI,CAAC,CAAC,CAAC,KAAK,QAAQ,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,KAAK,CAAC;IAC1D,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE;QAC7B,IAAI,GAAG,KAAK,YAAY;YAAE,OAAO,GAAG,IAAI,CAAC;QACzC,IAAI,CAAC,OAAO,IAAI,OAAO,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,OAAO,GAAG,CAAC;QAC3D,MAAM,KAAK,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAC/B,OAAO,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC;IAC3D,CAAC,CAAC,CAAC;IACH,OAAO,YAAY,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;AACvC,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,SAAS,CAC7B,IAAuB,EACvB,OAAsB;IAEtB,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,mBAAmB,CAAC,CAAC;IACjE,MAAM,KAAK,GAAG,kBAAkB,CAAC,IAAI,CAAC,CAAC;IACvC,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,UAAU,CAAC;IACtC,IAAI,MAAc,CAAC;IACnB,IAAI,MAAc,CAAC;IACnB,IAAI,CAAC;QACH,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,GAAG,CAC7B,OAAO,CAAC,QAAQ,EAChB,CAAC,KAAK,EAAE,GAAG,IAAI,EAAE,QAAQ,CAAC,EAC1B;YACE,GAAG,EAAE,OAAO,CAAC,GAAG;YAChB,GAAG,EAAE,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE;YACvC,SAAS,EAAE,EAAE,GAAG,MAAM;SACvB,CACF,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,CAAC,CAAC,KAAK,YAAY,kBAAkB,CAAC;YAAE,MAAM,KAAK,CAAC;QACxD,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC;QACtB,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC;IACxB,CAAC;IAED,IAAI,QAAwB,CAAC;IAC7B,IAAI,CAAC;QACH,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAmB,CAAC;IAClD,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,cAAc,CACtB,gBAAgB,EAChB,GAAG,KAAK,+BAA+B,EACvC,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAC5D,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,IAAI,cAAc,CACtB,QAAQ,CAAC,KAAK,EAAE,IAAI,IAAI,gBAAgB,EACxC,GAAG,KAAK,YAAY,QAAQ,CAAC,KAAK,EAAE,OAAO,IAAI,YAAY,EAAE,EAC7D;YACE,WAAW,EAAE,CAAC,QAAQ,CAAC,KAAK,EAAE,WAAW,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,YAAY,CAAC;YAClE,OAAO,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE;SAC5B,CACF,CAAC;IACJ,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,gBAAgB,CAAC,QAAwB;IACvD,MAAM,IAAI,GACR,QAAQ,CAAC,MACV,EAAE,IAAI,CAAC;IACR,OAAO,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,MAAM,CACxB,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,GAAG,CAAC,KAAK,CAAC,KAAK,EAAE,MAAM,IAAI,CAAC,CAAC,EACpD,CAAC,CACF,CAAC;AACJ,CAAC"}

package/dist/lib/app-source.js

@@ -0,0 +1,163 @@
+import { mkdtemp, readFile, rm, writeFile } from 'node:fs/promises';
+import os from 'node:os';
+import path from 'node:path';
+import { extract } from 'tar';
+import { parse, stringify } from 'yaml';
+import { EXIT_INVALID, InstallerError, isInstallerError } from "./errors.js";
+import { unpackRelease } from "./release.js";
+import { CommandFailedError, tail } from "./run-command.js";
+/** Bare names are official applications; other publishers use their full scoped package name. */
+export function parseAppSpec(value) {
+    const match = /^(?:(@[a-z0-9][a-z0-9._-]*\/[a-z0-9][a-z0-9._-]*)|([a-z0-9][a-z0-9._-]*))(?:@([a-zA-Z0-9][a-zA-Z0-9.+_-]*))?$/u.exec(value);
+    if (!match) {
+        throw new InstallerError('INVALID_USAGE', '--app expects an application name, optionally followed by @<version or tag>, e.g. @acme/crm or @acme/crm@beta.', { exitCode: EXIT_INVALID });
+    }
+    return {
+        package: match[1] ?? `@nocobase/${match[2]}`,
+        selector: match[3] ?? 'latest',
+    };
+}
+/** Explicit application scope prevents a user's scoped registry from overriding --registry. */
+function registryArgs(packageName, registry) {
+    return [
+        `--registry=${registry}`,
+        `--${packageName.split('/')[0]}:registry=${registry}`,
+    ];
+}
+/** npm handles the user's registry authentication; resolve once, then pack that exact version. */
+export async function resolveApp(spec, registry, run) {
+    // Validate selectors read from state or --to as well as those supplied to install.
+    parseAppSpec(`${spec.package}@${spec.selector}`);
+    try {
+        const result = await run('npm', [
+            'view',
+            `${spec.package}@${spec.selector}`,
+            'name',
+            'version',
+            '--json',
+            ...registryArgs(spec.package, registry),
+        ], { timeoutMs: 120_000 });
+        const metadata = JSON.parse(result.stdout);
+        if (metadata.name !== spec.package ||
+            !metadata.version ||
+            !/^\d+\.\d+\.\d+(?:-[0-9A-Za-z.-]+)?(?:\+[0-9A-Za-z.-]+)?$/u.test(metadata.version)) {
+            throw new InstallerError('APP_INVALID', `The registry did not resolve ${spec.package}@${spec.selector} to one application version.`);
+        }
+        return { package: spec.package, selector: metadata.version };
+    }
+    catch (error) {
+        if (isInstallerError(error))
+            throw error;
+        throw new InstallerError('APP_RESOLVE_FAILED', `Could not resolve ${spec.package}@${spec.selector} from ${registry}.`, {
+            cause: error,
+            ...(error instanceof CommandFailedError
+                ? { details: { output: tail(`${error.stdout}\n${error.stderr}`) } }
+                : {}),
+        });
+    }
+}
+/** Build the published application itself, without scaffolding or rewriting its identity. */
+export async function buildApp(options) {
+    const { app, registry, layout, run, reporter } = options;
+    const temporary = await mkdtemp(path.join(os.tmpdir(), 'nocobase-app-build-'));
+    const env = {
+        ...process.env,
+        npm_config_registry: registry,
+        NPM_CONFIG_REGISTRY: registry,
+        PNPM_CONFIG_REGISTRY: registry,
+        PNPM_CONFIG_MINIMUM_RELEASE_AGE: '0',
+        CI: 'true',
+    };
+    try {
+        const pnpm = await run('pnpm', ['--version'], { cwd: temporary, env });
+        if (Number.parseInt(pnpm.stdout, 10) < 11 ||
+            !/^\d+\./u.test(pnpm.stdout.trim())) {
+            throw new InstallerError('PNPM_REQUIRED', 'Installing an npm application requires pnpm 11 or later.', { exitCode: EXIT_INVALID });
+        }
+        reporter.progress(`Downloading ${app.package}@${app.selector}`);
+        const packed = await run('npm', [
+            'pack',
+            `${app.package}@${app.selector}`,
+            '--ignore-scripts',
+            '--json',
+            ...registryArgs(app.package, registry),
+        ], { cwd: temporary, env, timeoutMs: 120_000 });
+        const entries = JSON.parse(packed.stdout);
+        const filename = entries[0]?.filename;
+        if (!filename || filename !== path.basename(filename))
+            throw new InstallerError('APP_INVALID', 'npm pack returned no application tarball.');
+        extract({
+            file: path.join(temporary, filename),
+            cwd: temporary,
+            strip: 1,
+            strict: true,
+            sync: true,
+        });
+        const manifest = JSON.parse(await readFile(path.join(temporary, 'package.json'), 'utf8'));
+        if (manifest.name !== app.package ||
+            manifest.version !== app.selector ||
+            manifest.nocobase?.templateKind !== 'app' ||
+            !manifest.scripts?.build) {
+            throw new InstallerError('APP_INVALID', `${app.package}@${app.selector} is not a buildable NocoBase application package.`, { exitCode: EXIT_INVALID });
+        }
+        const workspaceFile = path.join(temporary, 'pnpm-workspace.yaml');
+        const existing = await readFile(workspaceFile, 'utf8').catch((error) => {
+            if (error.code === 'ENOENT')
+                return '';
+            throw error;
+        });
+        const workspace = (parse(existing) ?? {});
+        await writeFile(workspaceFile, stringify({
+            verifyDepsBeforeRun: false,
+            strictDepBuilds: false,
+            ...workspace,
+            allowBuilds: {
+                esbuild: true,
+                oracledb: true,
+                'better-sqlite3': false,
+                'tesseract.js': false,
+                ...workspace.allowBuilds,
+            },
+        }));
+        const npmrc = path.join(temporary, '.npmrc');
+        await writeFile(npmrc, `\nregistry=${registry}\n@nocobase:registry=${registry}\n${app.package.split('/')[0]}:registry=${registry}\n`, { flag: 'a' });
+        reporter.progress(`Installing build dependencies for ${app.package}@${app.selector}`);
+        await run('pnpm', [
+            'install',
+            '--no-frozen-lockfile',
+            '--prod=false',
+            '--config.strict-peer-dependencies=false',
+            `--registry=${registry}`,
+        ], { cwd: temporary, env, timeoutMs: 20 * 60_000 });
+        reporter.progress(`Building ${app.package}@${app.selector} for this server`);
+        await run('pnpm', ['build', '--tar'], {
+            cwd: temporary,
+            env,
+            timeoutMs: 30 * 60_000,
+        });
+        const prepared = await unpackRelease({
+            layout,
+            archive: path.join(temporary, 'storage/exports/dist.tar.gz'),
+        });
+        if (prepared.appName !== app.package || prepared.version !== app.selector) {
+            if (!prepared.reused)
+                await rm(path.dirname(prepared.dir), { recursive: true, force: true });
+            throw new InstallerError('APP_INVALID', 'The build changed the published application name or version.');
+        }
+        return prepared;
+    }
+    catch (error) {
+        if (isInstallerError(error))
+            throw error;
+        throw new InstallerError('APP_BUILD_FAILED', `Building ${app.package}@${app.selector} failed: ${error instanceof Error ? error.message : String(error)}`, {
+            cause: error,
+            ...(error instanceof CommandFailedError
+                ? { details: { output: tail(`${error.stdout}\n${error.stderr}`) } }
+                : {}),
+        });
+    }
+    finally {
+        await rm(temporary, { recursive: true, force: true });
+    }
+}
+//# sourceMappingURL=app-source.js.map

package/dist/lib/app-source.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"app-source.js","sourceRoot":"","sources":["../../src/lib/app-source.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AACpE,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,OAAO,EAAE,MAAM,KAAK,CAAC;AAC9B,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,MAAM,CAAC;AACxC,OAAO,EAAE,YAAY,EAAE,cAAc,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAG7E,OAAO,EAAE,aAAa,EAAwB,MAAM,cAAc,CAAC;AACnE,OAAO,EAAE,kBAAkB,EAAE,IAAI,EAAmB,MAAM,kBAAkB,CAAC;AAO7E,iGAAiG;AACjG,MAAM,UAAU,YAAY,CAAC,KAAa;IACxC,MAAM,KAAK,GACT,gHAAgH,CAAC,IAAI,CACnH,KAAK,CACN,CAAC;IACJ,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,IAAI,cAAc,CACtB,eAAe,EACf,gHAAgH,EAChH,EAAE,QAAQ,EAAE,YAAY,EAAE,CAC3B,CAAC;IACJ,CAAC;IACD,OAAO;QACL,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC,IAAI,aAAa,KAAK,CAAC,CAAC,CAAC,EAAE;QAC5C,QAAQ,EAAE,KAAK,CAAC,CAAC,CAAC,IAAI,QAAQ;KAC/B,CAAC;AACJ,CAAC;AAED,+FAA+F;AAC/F,SAAS,YAAY,CAAC,WAAmB,EAAE,QAAgB;IACzD,OAAO;QACL,cAAc,QAAQ,EAAE;QACxB,KAAK,WAAW,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,aAAa,QAAQ,EAAE;KACtD,CAAC;AACJ,CAAC;AAED,kGAAkG;AAClG,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,IAAa,EACb,QAAgB,EAChB,GAAe;IAEf,mFAAmF;IACnF,YAAY,CAAC,GAAG,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC;IACjD,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,GAAG,CACtB,KAAK,EACL;YACE,MAAM;YACN,GAAG,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,QAAQ,EAAE;YAClC,MAAM;YACN,SAAS;YACT,QAAQ;YACR,GAAG,YAAY,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,CAAC;SACxC,EACD,EAAE,SAAS,EAAE,OAAO,EAAE,CACvB,CAAC;QACF,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAGxC,CAAC;QACF,IACE,QAAQ,CAAC,IAAI,KAAK,IAAI,CAAC,OAAO;YAC9B,CAAC,QAAQ,CAAC,OAAO;YACjB,CAAC,2DAA2D,CAAC,IAAI,CAC/D,QAAQ,CAAC,OAAO,CACjB,EACD,CAAC;YACD,MAAM,IAAI,cAAc,CACtB,aAAa,EACb,gCAAgC,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,QAAQ,8BAA8B,CAC5F,CAAC;QACJ,CAAC;QACD,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,QAAQ,EAAE,QAAQ,CAAC,OAAO,EAAE,CAAC;IAC/D,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,gBAAgB,CAAC,KAAK,CAAC;YAAE,MAAM,KAAK,CAAC;QACzC,MAAM,IAAI,cAAc,CACtB,oBAAoB,EACpB,qBAAqB,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,QAAQ,SAAS,QAAQ,GAAG,EACtE;YACE,KAAK,EAAE,KAAK;YACZ,GAAG,CAAC,KAAK,YAAY,kBAAkB;gBACrC,CAAC,CAAC,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,GAAG,KAAK,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE;gBACnE,CAAC,CAAC,EAAE,CAAC;SACR,CACF,CAAC;IACJ,CAAC;AACH,CAAC;AAED,6FAA6F;AAC7F,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,OAM9B;IACC,MAAM,EAAE,GAAG,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,EAAE,QAAQ,EAAE,GAAG,OAAO,CAAC;IACzD,MAAM,SAAS,GAAG,MAAM,OAAO,CAC7B,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,qBAAqB,CAAC,CAC9C,CAAC;IACF,MAAM,GAAG,GAAG;QACV,GAAG,OAAO,CAAC,GAAG;QACd,mBAAmB,EAAE,QAAQ;QAC7B,mBAAmB,EAAE,QAAQ;QAC7B,oBAAoB,EAAE,QAAQ;QAC9B,+BAA+B,EAAE,GAAG;QACpC,EAAE,EAAE,MAAM;KACX,CAAC;IACF,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,MAAM,EAAE,CAAC,WAAW,CAAC,EAAE,EAAE,GAAG,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,CAAC;QACvE,IACE,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC,GAAG,EAAE;YACrC,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,EACnC,CAAC;YACD,MAAM,IAAI,cAAc,CACtB,eAAe,EACf,0DAA0D,EAC1D,EAAE,QAAQ,EAAE,YAAY,EAAE,CAC3B,CAAC;QACJ,CAAC;QACD,QAAQ,CAAC,QAAQ,CAAC,eAAe,GAAG,CAAC,OAAO,IAAI,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC;QAChE,MAAM,MAAM,GAAG,MAAM,GAAG,CACtB,KAAK,EACL;YACE,MAAM;YACN,GAAG,GAAG,CAAC,OAAO,IAAI,GAAG,CAAC,QAAQ,EAAE;YAChC,kBAAkB;YAClB,QAAQ;YACR,GAAG,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,QAAQ,CAAC;SACvC,EACD,EAAE,GAAG,EAAE,SAAS,EAAE,GAAG,EAAE,SAAS,EAAE,OAAO,EAAE,CAC5C,CAAC;QACF,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAA2B,CAAC;QACpE,MAAM,QAAQ,GAAG,OAAO,CAAC,CAAC,CAAC,EAAE,QAAQ,CAAC;QACtC,IAAI,CAAC,QAAQ,IAAI,QAAQ,KAAK,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC;YACnD,MAAM,IAAI,cAAc,CACtB,aAAa,EACb,2CAA2C,CAC5C,CAAC;QACJ,OAAO,CAAC;YACN,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,QAAQ,CAAC;YACpC,GAAG,EAAE,SAAS;YACd,KAAK,EAAE,CAAC;YACR,MAAM,EAAE,IAAI;YACZ,IAAI,EAAE,IAAI;SACX,CAAC,CAAC;QACH,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CACzB,MAAM,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,cAAc,CAAC,EAAE,MAAM,CAAC,CAM7D,CAAC;QACF,IACE,QAAQ,CAAC,IAAI,KAAK,GAAG,CAAC,OAAO;YAC7B,QAAQ,CAAC,OAAO,KAAK,GAAG,CAAC,QAAQ;YACjC,QAAQ,CAAC,QAAQ,EAAE,YAAY,KAAK,KAAK;YACzC,CAAC,QAAQ,CAAC,OAAO,EAAE,KAAK,EACxB,CAAC;YACD,MAAM,IAAI,cAAc,CACtB,aAAa,EACb,GAAG,GAAG,CAAC,OAAO,IAAI,GAAG,CAAC,QAAQ,mDAAmD,EACjF,EAAE,QAAQ,EAAE,YAAY,EAAE,CAC3B,CAAC;QACJ,CAAC;QACD,MAAM,aAAa,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,qBAAqB,CAAC,CAAC;QAClE,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC,CAAC,KAAK,CAC1D,CAAC,KAAc,EAAE,EAAE;YACjB,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;gBAAE,OAAO,EAAE,CAAC;YAClE,MAAM,KAAK,CAAC;QACd,CAAC,CACF,CAAC;QACF,MAAM,SAAS,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,EAAE,CAA4B,CAAC;QACrE,MAAM,SAAS,CACb,aAAa,EACb,SAAS,CAAC;YACR,mBAAmB,EAAE,KAAK;YAC1B,eAAe,EAAE,KAAK;YACtB,GAAG,SAAS;YACZ,WAAW,EAAE;gBACX,OAAO,EAAE,IAAI;gBACb,QAAQ,EAAE,IAAI;gBACd,gBAAgB,EAAE,KAAK;gBACvB,cAAc,EAAE,KAAK;gBACrB,GAAI,SAAS,CAAC,WAAmD;aAClE;SACF,CAAC,CACH,CAAC;QACF,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;QAC7C,MAAM,SAAS,CACb,KAAK,EACL,cAAc,QAAQ,wBAAwB,QAAQ,KAAK,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,aAAa,QAAQ,IAAI,EAC7G,EAAE,IAAI,EAAE,GAAG,EAAE,CACd,CAAC;QACF,QAAQ,CAAC,QAAQ,CACf,qCAAqC,GAAG,CAAC,OAAO,IAAI,GAAG,CAAC,QAAQ,EAAE,CACnE,CAAC;QACF,MAAM,GAAG,CACP,MAAM,EACN;YACE,SAAS;YACT,sBAAsB;YACtB,cAAc;YACd,yCAAyC;YACzC,cAAc,QAAQ,EAAE;SACzB,EACD,EAAE,GAAG,EAAE,SAAS,EAAE,GAAG,EAAE,SAAS,EAAE,EAAE,GAAG,MAAM,EAAE,CAChD,CAAC;QACF,QAAQ,CAAC,QAAQ,CACf,YAAY,GAAG,CAAC,OAAO,IAAI,GAAG,CAAC,QAAQ,kBAAkB,CAC1D,CAAC;QACF,MAAM,GAAG,CAAC,MAAM,EAAE,CAAC,OAAO,EAAE,OAAO,CAAC,EAAE;YACpC,GAAG,EAAE,SAAS;YACd,GAAG;YACH,SAAS,EAAE,EAAE,GAAG,MAAM;SACvB,CAAC,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,aAAa,CAAC;YACnC,MAAM;YACN,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,6BAA6B,CAAC;SAC7D,CAAC,CAAC;QACH,IAAI,QAAQ,CAAC,OAAO,KAAK,GAAG,CAAC,OAAO,IAAI,QAAQ,CAAC,OAAO,KAAK,GAAG,CAAC,QAAQ,EAAE,CAAC;YAC1E,IAAI,CAAC,QAAQ,CAAC,MAAM;gBAClB,MAAM,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YACzE,MAAM,IAAI,cAAc,CACtB,aAAa,EACb,8DAA8D,CAC/D,CAAC;QACJ,CAAC;QACD,OAAO,QAAQ,CAAC;IAClB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,gBAAgB,CAAC,KAAK,CAAC;YAAE,MAAM,KAAK,CAAC;QACzC,MAAM,IAAI,cAAc,CACtB,kBAAkB,EAClB,YAAY,GAAG,CAAC,OAAO,IAAI,GAAG,CAAC,QAAQ,YAAY,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,EAC3G;YACE,KAAK,EAAE,KAAK;YACZ,GAAG,CAAC,KAAK,YAAY,kBAAkB;gBACrC,CAAC,CAAC,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,GAAG,KAAK,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE;gBACnE,CAAC,CAAC,EAAE,CAAC;SACR,CACF,CAAC;IACJ,CAAC;YAAS,CAAC;QACT,MAAM,EAAE,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACxD,CAAC;AACH,CAAC"}

package/dist/lib/backup.js

@@ -0,0 +1,167 @@
+import { existsSync, readFileSync } from 'node:fs';
+import { copyFile, mkdir, readFile, readdir, rm, writeFile, } from 'node:fs/promises';
+import path from 'node:path';
+import { parse } from 'yaml';
+import { EXIT_INVALID, InstallerError } from "./errors.js";
+/** A SQLite database is the main file plus whichever journal files exist beside it. */
+const SQLITE_SUFFIXES = ['', '-wal', '-shm', '-journal'];
+/** Written into every backup, so a restore knows where each database goes even after `config.yml` changes. */
+const MANIFEST = 'backup.json';
+/** `${NAME}` references, resolved the way the runtime resolves them from its environment; `undefined` if one is unset. */
+function interpolate(value, env) {
+    let missing = false;
+    const resolved = value.replace(/\$\{([A-Za-z_][A-Za-z0-9_]*)\}/gu, (_, name) => {
+        const found = env[name];
+        if (found === undefined)
+            missing = true;
+        return found ?? '';
+    });
+    return missing ? undefined : resolved;
+}
+/**
+ * The application's databases as `config.yml` declares them. A SQLite path is resolved against the storage directory,
+ * as the runtime resolves it; `:memory:` holds nothing to back up. A connection `config.yml` does not declare is not
+ * seen, which is why an upgrade stops when the default connection is SQLite and its file is missing.
+ */
+export function readDatabaseInventory(layout, env) {
+    let document = {};
+    try {
+        document = (parse(readFileSync(layout.configFile, 'utf8')) ??
+            {});
+    }
+    catch (error) {
+        // Treating this as "no databases" would let an upgrade proceed without a backup and without --backup-done.
+        throw new InstallerError('CONFIG_UNREADABLE', `${layout.configFile} could not be read as YAML, so the databases to back up are unknown: ${error instanceof Error ? error.message : String(error)}`, { exitCode: EXIT_INVALID, cause: error });
+    }
+    const inventory = {
+        defaultConnection: typeof document.database?.default === 'string'
+            ? document.database.default
+            : 'main',
+        sqlite: [],
+        external: [],
+        unresolved: [],
+    };
+    const lookup = { ...process.env, ...env };
+    for (const [connection, raw] of Object.entries(document.database?.connections ?? {})) {
+        const config = (raw ?? {});
+        if (config.dialect !== 'sqlite') {
+            inventory.external.push(connection);
+            continue;
+        }
+        const declared = config.database ?? config.filename;
+        if (typeof declared !== 'string' || declared === '') {
+            inventory.unresolved.push(connection);
+            continue;
+        }
+        const file = interpolate(declared, lookup);
+        if (file === undefined) {
+            inventory.unresolved.push(connection);
+            continue;
+        }
+        if (file === ':memory:')
+            continue;
+        inventory.sqlite.push({
+            connection,
+            file: path.resolve(layout.storageDir, file),
+        });
+    }
+    return inventory;
+}
+/** UTC, so backups taken on machines in different time zones sort the same way. */
+function stamp(date) {
+    const pad = (value) => String(value).padStart(2, '0');
+    return `${date.getUTCFullYear()}${pad(date.getUTCMonth() + 1)}${pad(date.getUTCDate())}-${pad(date.getUTCHours())}${pad(date.getUTCMinutes())}${pad(date.getUTCSeconds())}Z`;
+}
+export function backupName(from, to, date) {
+    return `${stamp(date)}_${from}_to_${to}`;
+}
+async function existingFiles(file) {
+    const base = path.basename(file);
+    const present = new Set(await readdir(path.dirname(file)).catch(() => []));
+    return SQLITE_SUFFIXES.map((suffix) => `${base}${suffix}`).filter((name) => present.has(name));
+}
+async function readManifest(layout, backupRelative) {
+    try {
+        return JSON.parse(await readFile(path.join(layout.root, backupRelative, MANIFEST), 'utf8'));
+    }
+    catch {
+        return undefined;
+    }
+}
+/**
+ * Whether a backup holds a database that can be restored. An upgrade of an application on an external database backs
+ * up only `config.yml` and `app.env`, and a backup interrupted before its copy finished has no manifest at all.
+ */
+export function backupHasDatabase(layout, backupRelative) {
+    const file = path.join(layout.root, backupRelative, MANIFEST);
+    if (!existsSync(file))
+        return false;
+    try {
+        const manifest = JSON.parse(readFileSync(file, 'utf8'));
+        return manifest.databases.some((database) => database.files.length > 0);
+    }
+    catch {
+        return false;
+    }
+}
+export async function removeBackup(layout, backupRelative) {
+    await rm(path.join(layout.root, backupRelative), {
+        recursive: true,
+        force: true,
+    });
+}
+/** Where a connection's files go inside a backup: one directory per connection, so equal file names never collide. */
+function backupDatabaseDir(target, connection) {
+    return path.join(target, 'sqlite', connection);
+}
+/**
+ * Copies the application's SQLite databases, `config.yml` and `app.env` while the application is stopped, so the files
+ * are consistent. The manifest is written last: a backup cut short has none and is never restored from. This is what
+ * a failed upgrade restores, not a replacement for regular backups of `storage/`, whose uploaded files it leaves out.
+ */
+export async function backupForUpgrade(layout, name, databases) {
+    const target = path.join(layout.backupsDir, name);
+    await mkdir(target, { recursive: true });
+    await copyFile(layout.configFile, path.join(target, 'config.yml'));
+    await copyFile(layout.appEnv, path.join(target, 'app.env'));
+    const copied = [];
+    for (const database of databases) {
+        const files = await existingFiles(database.file);
+        const directory = backupDatabaseDir(target, database.connection);
+        await mkdir(directory, { recursive: true });
+        for (const file of files) {
+            await copyFile(path.join(path.dirname(database.file), file), path.join(directory, file));
+        }
+        copied.push({ ...database, files });
+    }
+    const manifest = { databases: copied };
+    await writeFile(path.join(target, MANIFEST), `${JSON.stringify(manifest, null, 2)}\n`);
+    return { relative: path.relative(layout.root, target), databases: copied };
+}
+/**
+ * Puts backed-up databases back where the manifest says they were. Journal files that exist now but were not in the
+ * backup are removed, since SQLite would otherwise replay a newer write-ahead log onto the older database; a database
+ * that did not exist when the backup was taken is removed, since it was created by the release being undone.
+ */
+export async function restoreDatabase(layout, backupRelative) {
+    const source = path.join(layout.root, backupRelative);
+    const manifest = await readManifest(layout, backupRelative);
+    if (!manifest ||
+        !manifest.databases.some((database) => database.files.length > 0)) {
+        throw new Error(`${source} holds no SQLite database to restore.`);
+    }
+    for (const database of manifest.databases) {
+        const directory = path.dirname(database.file);
+        await mkdir(directory, { recursive: true });
+        for (const leftover of await existingFiles(database.file)) {
+            if (!database.files.includes(leftover)) {
+                await rm(path.join(directory, leftover), { force: true });
+            }
+        }
+        for (const file of database.files) {
+            await copyFile(path.join(backupDatabaseDir(source, database.connection), file), path.join(directory, file));
+        }
+    }
+    return manifest.databases;
+}
+//# sourceMappingURL=backup.js.map

package/dist/lib/backup.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"backup.js","sourceRoot":"","sources":["../../src/lib/backup.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EACL,QAAQ,EACR,KAAK,EACL,QAAQ,EACR,OAAO,EACP,EAAE,EACF,SAAS,GACV,MAAM,kBAAkB,CAAC;AAC1B,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,KAAK,EAAE,MAAM,MAAM,CAAC;AAC7B,OAAO,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAG3D,uFAAuF;AACvF,MAAM,eAAe,GAAG,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,CAAC,CAAC;AAEzD,8GAA8G;AAC9G,MAAM,QAAQ,GAAG,aAAa,CAAC;AAyB/B,0HAA0H;AAC1H,SAAS,WAAW,CAClB,KAAa,EACb,GAAuC;IAEvC,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,CAC5B,kCAAkC,EAClC,CAAC,CAAC,EAAE,IAAY,EAAE,EAAE;QAClB,MAAM,KAAK,GAAG,GAAG,CAAC,IAAI,CAAC,CAAC;QACxB,IAAI,KAAK,KAAK,SAAS;YAAE,OAAO,GAAG,IAAI,CAAC;QACxC,OAAO,KAAK,IAAI,EAAE,CAAC;IACrB,CAAC,CACF,CAAC;IACF,OAAO,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC;AACxC,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,qBAAqB,CACnC,MAAc,EACd,GAAuC;IAEvC,IAAI,QAAQ,GAER,EAAE,CAAC;IACP,IAAI,CAAC;QACH,QAAQ,GAAG,CAAC,KAAK,CAAC,YAAY,CAAC,MAAM,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;YACxD,EAAE,CAAoB,CAAC;IAC3B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,2GAA2G;QAC3G,MAAM,IAAI,cAAc,CACtB,mBAAmB,EACnB,GAAG,MAAM,CAAC,UAAU,wEAAwE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,EACpJ,EAAE,QAAQ,EAAE,YAAY,EAAE,KAAK,EAAE,KAAK,EAAE,CACzC,CAAC;IACJ,CAAC;IACD,MAAM,SAAS,GAAsB;QACnC,iBAAiB,EACf,OAAO,QAAQ,CAAC,QAAQ,EAAE,OAAO,KAAK,QAAQ;YAC5C,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,OAAO;YAC3B,CAAC,CAAC,MAAM;QACZ,MAAM,EAAE,EAAE;QACV,QAAQ,EAAE,EAAE;QACZ,UAAU,EAAE,EAAE;KACf,CAAC;IACF,MAAM,MAAM,GAAG,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,GAAG,GAAG,EAAE,CAAC;IAC1C,KAAK,MAAM,CAAC,UAAU,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAC5C,QAAQ,CAAC,QAAQ,EAAE,WAAW,IAAI,EAAE,CACrC,EAAE,CAAC;QACF,MAAM,MAAM,GAAG,CAAC,GAAG,IAAI,EAAE,CAAqB,CAAC;QAC/C,IAAI,MAAM,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;YAChC,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YACpC,SAAS;QACX,CAAC;QACD,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC;QACpD,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,QAAQ,KAAK,EAAE,EAAE,CAAC;YACpD,SAAS,CAAC,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YACtC,SAAS;QACX,CAAC;QACD,MAAM,IAAI,GAAG,WAAW,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QAC3C,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;YACvB,SAAS,CAAC,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YACtC,SAAS;QACX,CAAC;QACD,IAAI,IAAI,KAAK,UAAU;YAAE,SAAS;QAClC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC;YACpB,UAAU;YACV,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,UAAU,EAAE,IAAI,CAAC;SAC5C,CAAC,CAAC;IACL,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,mFAAmF;AACnF,SAAS,KAAK,CAAC,IAAU;IACvB,MAAM,GAAG,GAAG,CAAC,KAAa,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IAC9D,OAAO,GAAG,IAAI,CAAC,cAAc,EAAE,GAAG,GAAG,CAAC,IAAI,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC,GAAG,GAAG,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC,IAAI,GAAG,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,GAAG,GAAG,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC,GAAG,GAAG,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC,GAAG,CAAC;AAC/K,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,IAAY,EAAE,EAAU,EAAE,IAAU;IAC7D,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,IAAI,OAAO,EAAE,EAAE,CAAC;AAC3C,CAAC;AAED,KAAK,UAAU,aAAa,CAAC,IAAY;IACvC,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IACjC,MAAM,OAAO,GAAG,IAAI,GAAG,CACrB,MAAM,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAc,CAAC,CAC9D,CAAC;IACF,OAAO,eAAe,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,GAAG,IAAI,GAAG,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CACzE,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAClB,CAAC;AACJ,CAAC;AAWD,KAAK,UAAU,YAAY,CACzB,MAAc,EACd,cAAsB;IAEtB,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CACf,MAAM,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,cAAc,EAAE,QAAQ,CAAC,EAAE,MAAM,CAAC,CACvD,CAAC;IACtB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,iBAAiB,CAC/B,MAAc,EACd,cAAsB;IAEtB,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,cAAc,EAAE,QAAQ,CAAC,CAAC;IAC9D,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IACpC,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAmB,CAAC;QAC1E,OAAO,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAC1E,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,MAAc,EACd,cAAsB;IAEtB,MAAM,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,cAAc,CAAC,EAAE;QAC/C,SAAS,EAAE,IAAI;QACf,KAAK,EAAE,IAAI;KACZ,CAAC,CAAC;AACL,CAAC;AAQD,sHAAsH;AACtH,SAAS,iBAAiB,CAAC,MAAc,EAAE,UAAkB;IAC3D,OAAO,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,QAAQ,EAAE,UAAU,CAAC,CAAC;AACjD,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,MAAc,EACd,IAAY,EACZ,SAAoC;IAEpC,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;IAClD,MAAM,KAAK,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACzC,MAAM,QAAQ,CAAC,MAAM,CAAC,UAAU,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC,CAAC;IACnE,MAAM,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC,CAAC;IAC5D,MAAM,MAAM,GAAuB,EAAE,CAAC;IACtC,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;QACjC,MAAM,KAAK,GAAG,MAAM,aAAa,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QACjD,MAAM,SAAS,GAAG,iBAAiB,CAAC,MAAM,EAAE,QAAQ,CAAC,UAAU,CAAC,CAAC;QACjE,MAAM,KAAK,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC5C,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,MAAM,QAAQ,CACZ,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,EAC5C,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,CAC3B,CAAC;QACJ,CAAC;QACD,MAAM,CAAC,IAAI,CAAC,EAAE,GAAG,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC;IACtC,CAAC;IACD,MAAM,QAAQ,GAAmB,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC;IACvD,MAAM,SAAS,CACb,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC,EAC3B,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CACzC,CAAC;IACF,OAAO,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC;AAC7E,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,MAAc,EACd,cAAsB;IAEtB,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC;IACtD,MAAM,QAAQ,GAAG,MAAM,YAAY,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;IAC5D,IACE,CAAC,QAAQ;QACT,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,EACjE,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,GAAG,MAAM,uCAAuC,CAAC,CAAC;IACpE,CAAC;IACD,KAAK,MAAM,QAAQ,IAAI,QAAQ,CAAC,SAAS,EAAE,CAAC;QAC1C,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QAC9C,MAAM,KAAK,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC5C,KAAK,MAAM,QAAQ,IAAI,MAAM,aAAa,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YAC1D,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;gBACvC,MAAM,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,QAAQ,CAAC,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YAC5D,CAAC;QACH,CAAC;QACD,KAAK,MAAM,IAAI,IAAI,QAAQ,CAAC,KAAK,EAAE,CAAC;YAClC,MAAM,QAAQ,CACZ,IAAI,CAAC,IAAI,CAAC,iBAAiB,CAAC,MAAM,EAAE,QAAQ,CAAC,UAAU,CAAC,EAAE,IAAI,CAAC,EAC/D,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,CAC3B,CAAC;QACJ,CAAC;IACH,CAAC;IACD,OAAO,QAAQ,CAAC,SAAS,CAAC;AAC5B,CAAC"}

package/dist/lib/checksum-repair.js

@@ -0,0 +1,76 @@
+import { createHash } from 'node:crypto';
+import { runAppCli } from "./app-cli.js";
+import { EXIT_INVALID, InstallerError } from "./errors.js";
+const object = (value) => typeof value === 'object' && value !== null;
+const nonempty = (value) => typeof value === 'string' && value.length > 0;
+/** Reject an unsupported or incomplete CLI response instead of treating it as an empty repair plan. */
+export function checksumRepairs(result) {
+    const invalid = () => {
+        throw new InstallerError('CHECKSUM_CHECK_INVALID', 'The target application must support db repair --dry-run --json with complete checksum results. No upgrade was applied.', { exitCode: EXIT_INVALID });
+    };
+    if (!object(result) ||
+        result.dryRun !== true ||
+        !Array.isArray(result.results))
+        return invalid();
+    const changes = [];
+    for (const entry of result.results) {
+        if (!object(entry) ||
+            !nonempty(entry.connection) ||
+            (entry.kind !== 'migrations' && entry.kind !== 'seeds'))
+            return invalid();
+        if (entry.status === 'skipped')
+            continue;
+        if (entry.status !== 'completed' || !Array.isArray(entry.repaired))
+            return invalid();
+        for (const record of entry.repaired) {
+            if (!object(record) ||
+                !nonempty(record.packageName) ||
+                !nonempty(record.name) ||
+                !nonempty(record.recordedChecksum) ||
+                !nonempty(record.sourceChecksum))
+                return invalid();
+            changes.push({
+                connection: entry.connection,
+                kind: entry.kind,
+                packageName: record.packageName,
+                name: record.name,
+                recordedChecksum: record.recordedChecksum,
+                sourceChecksum: record.sourceChecksum,
+            });
+        }
+    }
+    return changes.sort((a, b) => {
+        const left = JSON.stringify(a);
+        const right = JSON.stringify(b);
+        return left < right ? -1 : left > right ? 1 : 0;
+    });
+}
+export async function previewChecksumRepair(cli, identity) {
+    const envelope = await runAppCli(['db', 'repair', '--dry-run'], cli);
+    const changes = checksumRepairs(envelope.result);
+    // Build timestamps can change when an npm application is rebuilt for the confirmation run.
+    // Bind approval to the installation, current release, target version and exact checksum changes instead.
+    const token = createHash('sha256')
+        .update(JSON.stringify({ directory: cli.cwd, ...identity, changes }))
+        .digest('hex');
+    return { token, changes };
+}
+export function requireChecksumApproval(plan, approved) {
+    if (!plan.changes.length && approved === undefined)
+        return;
+    if (approved === plan.token)
+        return;
+    throw new InstallerError('CHECKSUM_REPAIR_REQUIRED', 'Review every migration and seed checksum change before authorizing repair. --yes alone does not authorize checksum repair.', {
+        exitCode: EXIT_INVALID,
+        details: { checksumRepair: plan },
+        suggestions: [
+            ...plan.changes.map((change) => ({
+                message: `${change.connection}/${change.kind}: ${change.packageName}:${change.name} ${change.recordedChecksum} -> ${change.sourceChecksum}`,
+            })),
+            {
+                message: `After reviewing this plan, repeat the same upgrade with --repair-checksums ${plan.token}. The installer backs up before repairing.`,
+            },
+        ],
+    });
+}
+//# sourceMappingURL=checksum-repair.js.map

package/dist/lib/checksum-repair.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"checksum-repair.js","sourceRoot":"","sources":["../../src/lib/checksum-repair.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,SAAS,EAAsB,MAAM,cAAc,CAAC;AAC7D,OAAO,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAgB3D,MAAM,MAAM,GAAG,CAAC,KAAc,EAAoC,EAAE,CAClE,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,CAAC;AAC9C,MAAM,QAAQ,GAAG,CAAC,KAAc,EAAmB,EAAE,CACnD,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC;AAEhD,uGAAuG;AACvG,MAAM,UAAU,eAAe,CAAC,MAAe;IAC7C,MAAM,OAAO,GAAG,GAAU,EAAE;QAC1B,MAAM,IAAI,cAAc,CACtB,wBAAwB,EACxB,wHAAwH,EACxH,EAAE,QAAQ,EAAE,YAAY,EAAE,CAC3B,CAAC;IACJ,CAAC,CAAC;IACF,IACE,CAAC,MAAM,CAAC,MAAM,CAAC;QACf,MAAM,CAAC,MAAM,KAAK,IAAI;QACtB,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC;QAE9B,OAAO,OAAO,EAAE,CAAC;IACnB,MAAM,OAAO,GAAqB,EAAE,CAAC;IACrC,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;QACnC,IACE,CAAC,MAAM,CAAC,KAAK,CAAC;YACd,CAAC,QAAQ,CAAC,KAAK,CAAC,UAAU,CAAC;YAC3B,CAAC,KAAK,CAAC,IAAI,KAAK,YAAY,IAAI,KAAK,CAAC,IAAI,KAAK,OAAO,CAAC;YAEvD,OAAO,OAAO,EAAE,CAAC;QACnB,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS;YAAE,SAAS;QACzC,IAAI,KAAK,CAAC,MAAM,KAAK,WAAW,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC;YAChE,OAAO,OAAO,EAAE,CAAC;QACnB,KAAK,MAAM,MAAM,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;YACpC,IACE,CAAC,MAAM,CAAC,MAAM,CAAC;gBACf,CAAC,QAAQ,CAAC,MAAM,CAAC,WAAW,CAAC;gBAC7B,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC;gBACtB,CAAC,QAAQ,CAAC,MAAM,CAAC,gBAAgB,CAAC;gBAClC,CAAC,QAAQ,CAAC,MAAM,CAAC,cAAc,CAAC;gBAEhC,OAAO,OAAO,EAAE,CAAC;YACnB,OAAO,CAAC,IAAI,CAAC;gBACX,UAAU,EAAE,KAAK,CAAC,UAAU;gBAC5B,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,WAAW,EAAE,MAAM,CAAC,WAAW;gBAC/B,IAAI,EAAE,MAAM,CAAC,IAAI;gBACjB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;gBACzC,cAAc,EAAE,MAAM,CAAC,cAAc;aACtC,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;QAC3B,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;QAC/B,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;QAChC,OAAO,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAClD,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,GAAkB,EAClB,QAA4D;IAE5D,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,CAAC,IAAI,EAAE,QAAQ,EAAE,WAAW,CAAC,EAAE,GAAG,CAAC,CAAC;IACrE,MAAM,OAAO,GAAG,eAAe,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IACjD,2FAA2F;IAC3F,yGAAyG;IACzG,MAAM,KAAK,GAAG,UAAU,CAAC,QAAQ,CAAC;SAC/B,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,SAAS,EAAE,GAAG,CAAC,GAAG,EAAE,GAAG,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC;SACpE,MAAM,CAAC,KAAK,CAAC,CAAC;IACjB,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;AAC5B,CAAC;AAED,MAAM,UAAU,uBAAuB,CACrC,IAAwB,EACxB,QAAiB;IAEjB,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,IAAI,QAAQ,KAAK,SAAS;QAAE,OAAO;IAC3D,IAAI,QAAQ,KAAK,IAAI,CAAC,KAAK;QAAE,OAAO;IACpC,MAAM,IAAI,cAAc,CACtB,0BAA0B,EAC1B,4HAA4H,EAC5H;QACE,QAAQ,EAAE,YAAY;QACtB,OAAO,EAAE,EAAE,cAAc,EAAE,IAAI,EAAE;QACjC,WAAW,EAAE;YACX,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;gBAC/B,OAAO,EAAE,GAAG,MAAM,CAAC,UAAU,IAAI,MAAM,CAAC,IAAI,KAAK,MAAM,CAAC,WAAW,IAAI,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,gBAAgB,OAAO,MAAM,CAAC,cAAc,EAAE;aAC5I,CAAC,CAAC;YACH;gBACE,OAAO,EAAE,8EAA8E,IAAI,CAAC,KAAK,4CAA4C;aAC9I;SACF;KACF,CACF,CAAC;AACJ,CAAC"}

package/dist/lib/confirm.js

@@ -0,0 +1,36 @@
+import { createInterface } from 'node:readline/promises';
+import { EXIT_INVALID, InstallerError } from "./errors.js";
+/**
+ * Asks before an operation that takes the application down or discards data. `--yes` answers for scripts; without it, a run that
+ * cannot ask — `--json`, or no terminal — stops instead of guessing.
+ */
+export async function confirm(lines, options) {
+    if (options.yes)
+        return;
+    const input = options.input ?? process.stdin;
+    const output = options.output ?? process.stderr;
+    if (options.json || !input.isTTY) {
+        throw new InstallerError('CONFIRMATION_REQUIRED', `${lines[0]} Pass --yes to proceed without a prompt.`, {
+            exitCode: EXIT_INVALID,
+            details: { notes: lines.slice(1) },
+            suggestions: [
+                { message: 'Run it again with --yes once you have read:' },
+                ...lines.slice(1).map((message) => ({ message })),
+            ],
+        });
+    }
+    output.write(`${lines.map((line) => `  ${line}`).join('\n')}\n`);
+    const readline = createInterface({ input, output });
+    try {
+        const answer = await readline.question('Continue? [y/N] ');
+        if (!/^y(es)?$/iu.test(answer.trim())) {
+            throw new InstallerError('CANCELLED', 'Cancelled; nothing was changed.', {
+                exitCode: EXIT_INVALID,
+            });
+        }
+    }
+    finally {
+        readline.close();
+    }
+}
+//# sourceMappingURL=confirm.js.map

package/dist/lib/confirm.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"confirm.js","sourceRoot":"","sources":["../../src/lib/confirm.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAS3D;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,OAAO,CAC3B,KAAwB,EACxB,OAAuB;IAEvB,IAAI,OAAO,CAAC,GAAG;QAAE,OAAO;IACxB,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,OAAO,CAAC,KAAK,CAAC;IAC7C,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,MAAM,CAAC;IAChD,IAAI,OAAO,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;QACjC,MAAM,IAAI,cAAc,CACtB,uBAAuB,EACvB,GAAG,KAAK,CAAC,CAAC,CAAC,0CAA0C,EACrD;YACE,QAAQ,EAAE,YAAY;YACtB,OAAO,EAAE,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE;YAClC,WAAW,EAAE;gBACX,EAAE,OAAO,EAAE,6CAA6C,EAAE;gBAC1D,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC;aAClD;SACF,CACF,CAAC;IACJ,CAAC;IACD,MAAM,CAAC,KAAK,CAAC,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACjE,MAAM,QAAQ,GAAG,eAAe,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;IACpD,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,QAAQ,CAAC,kBAAkB,CAAC,CAAC;QAC3D,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC;YACtC,MAAM,IAAI,cAAc,CAAC,WAAW,EAAE,iCAAiC,EAAE;gBACvE,QAAQ,EAAE,YAAY;aACvB,CAAC,CAAC;QACL,CAAC;IACH,CAAC;YAAS,CAAC;QACT,QAAQ,CAAC,KAAK,EAAE,CAAC;IACnB,CAAC;AACH,CAAC"}

package/dist/lib/current-link.js

@@ -0,0 +1,22 @@
+import { readlink, rename, rm, symlink } from 'node:fs/promises';
+/**
+ * Points `current` at a release in one step: the new link is created beside it and renamed over it, so `current`
+ * always names a complete release and never goes missing in between.
+ */
+export async function switchCurrent(layout, linkTarget) {
+    const temporary = `${layout.current}.${process.pid}.tmp`;
+    await rm(temporary, { force: true });
+    await symlink(linkTarget, temporary, 'dir');
+    await rename(temporary, layout.current);
+}
+export async function readCurrent(layout) {
+    try {
+        return await readlink(layout.current);
+    }
+    catch (error) {
+        if (error.code === 'ENOENT')
+            return undefined;
+        throw error;
+    }
+}
+//# sourceMappingURL=current-link.js.map

package/dist/lib/current-link.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"current-link.js","sourceRoot":"","sources":["../../src/lib/current-link.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAGjE;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,MAAc,EACd,UAAkB;IAElB,MAAM,SAAS,GAAG,GAAG,MAAM,CAAC,OAAO,IAAI,OAAO,CAAC,GAAG,MAAM,CAAC;IACzD,MAAM,EAAE,CAAC,SAAS,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACrC,MAAM,OAAO,CAAC,UAAU,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC;IAC5C,MAAM,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;AAC1C,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,MAAc;IAC9C,IAAI,CAAC;QACH,OAAO,MAAM,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACxC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,SAAS,CAAC;QACzE,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC"}