@omnitron-dev/omnitron 0.2.0 → 0.3.1

package/dist/execution/execution.service.js

@@ -9,9 +9,126 @@
  *   const result = await executionService.ssh('prod-1')`systemctl status app`;
  *   const result = await executionService.docker('container-name')`cat /etc/config`;
  */
+import { createHash, randomUUID } from 'node:crypto';
+import { createReadStream } from 'node:fs';
+import { shellEscape } from '../shared/shell-escape.js';
+/**
+ * Render the `command:error` reason.
+ *
+ * The contract says `string`, and the fallbacks are for the version that
+ * does not: an engine that starts passing the Error itself must not silently
+ * turn this log line back into `[object Object]`.
+ */
+export function describeXecError(error) {
+    if (typeof error === 'string')
+        return error || 'unknown error';
+    if (error instanceof Error)
+        return error.message || error.name;
+    if (error && typeof error === 'object') {
+        const m = error.message;
+        if (typeof m === 'string' && m)
+            return m;
+    }
+    return error == null ? 'unknown error' : String(error);
+}
 // =============================================================================
 // Service
 // =============================================================================
+/**
+ * One SSH connection config, with a budget a control plane can meet.
+ *
+ * ssh2's `readyTimeout` defaults to 20 seconds, and a handshake is
+ * arithmetic performed in JavaScript — on the same event loop the daemon
+ * uses to supervise processes and reconcile containers. Twenty seconds is a
+ * generous budget for an idle process and a tight one for a busy daemon.
+ *
+ * Measured: `omnitron fleet upgrade` from a daemon that was starting six
+ * applications failed with `Timed out while waiting for handshake`, against
+ * a node whose load average was 0.02, which accepted a connection from the
+ * CLI seconds later, and whose sshd logged no refusal. The node was idle;
+ * the handshake never got the CPU.
+ *
+ * The keepalives are for the other end of the same problem: a tunnel the
+ * mesh holds open for hours across a link that drops idle connections. Four
+ * missed probes at fifteen seconds is a minute of silence before the socket
+ * is called dead, which is longer than any pause the event loop has been
+ * measured to take.
+ *
+ * Written once because it was written three times: `ssh`, `tunnel` and
+ * `uploadFile` each built this object, and a change to any of them would
+ * have reached one of the three.
+ */
+/**
+ * How long a pooled SSH connection may sit without a command run on it.
+ *
+ * The mesh reaches a node whose daemon port is closed through an in-process
+ * SSH tunnel (`tunnel()` below, `mesh-link.ts`). That connection is never
+ * idle — netron heartbeats cross it every 15 s — but `@xec-sh/core` counts
+ * USE as command execution, and a forwarded channel is not a command. Its
+ * pool sweeps every 60 s and closes anything whose `lastUsed` is older than
+ * `idleTimeout`, which defaults to 300 s. Sweeps land at 60, 120 … 300
+ * (300 is not greater than 300, so it survives) and 360, where it closes.
+ *
+ * Measured on `sample/test`, 2026-09-22: 51 mesh drops in a day, «Socket
+ * closed during RPC», median interval between them 360 s with 32 of 45
+ * inside 360 ± 5, each followed by a rejoin about nine seconds later. An
+ * interval that precise is a timer, and this is the timer.
+ *
+ * So idleness is switched off as a reason to close: not because these
+ * connections are precious, but because the pool cannot measure it for the
+ * one that matters. What it CAN measure it still does — its own
+ * `isConnected()` pass reaps a connection that actually died, and this does
+ * not touch that.
+ *
+ * The two numbers do not mean the same thing, which is the trap here.
+ * `maxLifetime` is guarded by `maxLifetime > 0`, so zero disables it.
+ * `idleTimeout` has no such guard — `now - lastUsed > idleTimeout` — so zero
+ * would close every connection on the very next sweep, the exact opposite.
+ * The way to say «never» with this API is a number nothing can exceed.
+ *
+ * A first attempt used a day, and the test for it said so: the sweep at
+ * 24 h + 60 s still closes the link. That would have moved the drop from
+ * every six minutes to once a day and called it fixed.
+ */
+export const SSH_CONNECTION_POOL = {
+    idleTimeout: Number.MAX_SAFE_INTEGER,
+    maxLifetime: 0,
+};
+/**
+ * How long one file transfer may take: a minute to open it, and the bytes at
+ * no less than 32 KiB/s.
+ *
+ * A transfer had no bound at all, and on 2026-09-24 three of them never
+ * ended: `sample/test` stood «delivering 6 artifact(s)» for 19 minutes, holding
+ * the node's deploy lease, until the master was restarted. The chain is in
+ * `@xec-sh/core`: every channel to a node rides ONE pooled SSH connection, a
+ * command that timed out behind the transfers made the pool close that
+ * connection with a graceful `end()` — which stops ssh2's keepalive — and a
+ * transfer still running on it got neither an error nor an end. New commands
+ * opened a new connection and worked; the transfers on the old one waited
+ * forever. Only a deadline of our own ends them.
+ *
+ * The floor is generous on purpose — measured the day after, 26 MB of
+ * artifacts crossed in ~70 s, about 0.4 MB/s — so a slow link still delivers,
+ * and a dead one fails in minutes, with its words, instead of never.
+ */
+export const UPLOAD_STALL_MS = 120_000;
+export function uploadDeadlineMs(bytes) {
+    return 60_000 + Math.ceil(bytes / (32 * 1024)) * 1000;
+}
+function sshConfig(target) {
+    return {
+        host: target.host,
+        port: target.port ?? 22,
+        username: target.username ?? 'root',
+        ...(target.privateKey && { privateKey: target.privateKey }),
+        ...(target.passphrase && { passphrase: target.passphrase }),
+        ...(target.password && { password: target.password }),
+        readyTimeout: 60_000,
+        keepaliveInterval: 15_000,
+        keepaliveCountMax: 4,
+    };
+}
 export class ExecutionService {
     logger;
     engine = null;
@@ -31,8 +148,22 @@ export class ExecutionService {
             this.engine = new xec.ExecutionEngine({
                 defaultTimeout: 30_000,
                 defaultShell: '/bin/sh',
+                // The pool is configured HERE and nowhere else: the SSH adapter is
+                // built once from the engine's own config, so a `connectionPool`
+                // passed to `engine.ssh(target)` per call is read by nothing. See
+                // `SSH_CONNECTION_POOL`.
+                adapters: { ssh: { connectionPool: SSH_CONNECTION_POOL } },
             });
-            // Wire adapter events to logger
+            // Wire adapter events to logger.
+            //
+            // The payloads are typed locally rather than inferred from `any`: the
+            // engine handle has to stay `any` (the import is dynamic and optional),
+            // and without these shapes nothing checks what the handlers read. That
+            // is not hypothetical — `command:error` carries `error` as a *string*,
+            // already flattened by the engine, and this handler used to log
+            // `event.error?.message`, which is `undefined` on a string. Every
+            // failed remote command logged `Exec error {"error":undefined}`: a
+            // warning that names the problem and then withholds it.
             this.engine.on('command:start', (event) => {
                 this.logger.debug({ command: event.command?.slice(0, 100) }, 'Exec start');
             });
@@ -40,7 +171,7 @@ export class ExecutionService {
                 this.logger.debug({ command: event.command?.slice(0, 100), exitCode: event.exitCode, duration: event.duration }, 'Exec complete');
             });
             this.engine.on('command:error', (event) => {
-                this.logger.warn({ command: event.command?.slice(0, 100), error: event.error?.message }, 'Exec error');
+                this.logger.warn({ command: event.command?.slice(0, 100), error: describeXecError(event.error), duration: event.duration }, 'Exec error');
             });
             this.initialized = true;
             this.logger.info('ExecutionEngine initialized (xec/core)');
@@ -90,19 +221,63 @@ export class ExecutionService {
     /**
      * Execute command on a remote host via SSH.
      */
+    /**
+     * A local port that speaks to `remotePort` on the target, over SSH.
+     *
+     * The master reaches a node's daemon on its TCP port. A node whose firewall
+     * allows only SSH — which is the normal posture for a machine on the public
+     * internet, and what the first provisioned node turned out to have — is
+     * then unreachable, and the mesh it is supposed to join cannot form. The
+     * symptom is silence: the node answers SSH, deploys fine, reports healthy,
+     * and replicates nothing.
+     *
+     * Measured on that node: `ss -ltn` shows the daemon on `0.0.0.0:9700`, and
+     * `ufw status` allows 22/tcp and three ports from one private address. A
+     * direct connection times out; through this, the same daemon answers.
+     *
+     * Opening the port on the node would be the other fix, and it is worse: it
+     * asks every operator to widen a firewall for a control plane that already
+     * holds SSH credentials for the machine. Whoever can open this tunnel can
+     * already run commands there.
+     *
+     * The caller owns the returned handle and must `close()` it — each one
+     * holds an SSH connection.
+     */
+    async tunnel(target, remotePort, options) {
+        const engine = await this.getEngine();
+        if (!engine)
+            throw new Error('SSH tunnelling needs the xec engine, which is not available');
+        const ssh = engine.ssh(sshConfig(target));
+        if (typeof ssh.tunnel !== 'function') {
+            throw new Error('The installed @xec-sh/core has no SSH tunnel support');
+        }
+        // `remoteHost` is resolved ON the node, so loopback is the node's own
+        // daemon rather than ours.
+        const handle = await ssh.tunnel({
+            localHost: options?.localHost ?? '127.0.0.1',
+            remoteHost: options?.remoteHost ?? '127.0.0.1',
+            remotePort,
+        });
+        this.logger.debug({ host: target.host, localPort: handle.localPort, remotePort }, 'SSH tunnel open');
+        return {
+            host: handle.localHost ?? '127.0.0.1',
+            port: handle.localPort,
+            close: async () => {
+                try {
+                    await handle.close();
+                }
+                catch (err) {
+                    this.logger.debug({ host: target.host, error: err.message }, 'SSH tunnel close failed');
+                }
+            },
+        };
+    }
     async ssh(target, command, options) {
         const engine = await this.getEngine();
         const start = Date.now();
         if (engine) {
             try {
-                const ssh = engine.ssh({
-                    host: target.host,
-                    port: target.port ?? 22,
-                    username: target.username ?? 'root',
-                    ...(target.privateKey && { privateKey: target.privateKey }),
-                    ...(target.passphrase && { passphrase: target.passphrase }),
-                    ...(target.password && { password: target.password }),
-                });
+                const ssh = engine.ssh(sshConfig(target));
                 // Use raw template literal to avoid options interpolation into command
                 let proc = ssh.raw([command]);
                 if (options?.timeout)
@@ -130,6 +305,151 @@ export class ExecutionService {
         const sshCmd = `ssh -o StrictHostKeyChecking=no -p ${target.port ?? 22} ${target.username ?? 'root'}@${target.host} "${command.replace(/"/g, '\\"')}"`;
         return this.execFallback(sshCmd, options);
     }
+    /**
+     * Copy a local file to a remote host over the SSH connection.
+     *
+     * Here rather than in the caller because this class owns the engine, and
+     * because the alternative already existed and could not work: deployment
+     * shelled out to `scp`, which — like the `ssh -o BatchMode=yes` beside it —
+     * can offer a key file and nothing else. The console collects passwords and
+     * key passphrases and keeps them in the daemon's vault, so every node
+     * registered that way was untransferable-to by construction.
+     *
+     * The engine speaks SFTP over the same authenticated connection as
+     * `ssh()`, so one credential path serves both.
+     */
+    async uploadFile(target, localPath, remotePath, options) {
+        // Serialize bulk transfers per node. Each owns a dedicated connection;
+        // lease and control commands use the independent main engine.
+        const node = `${target.host}:${target.port ?? 22}`;
+        const queue = (this.transfersByNode ??= new Map());
+        const before = queue.get(node) ?? Promise.resolve();
+        const mine = before.then(() => this.transferOnce(target, localPath, remotePath, options));
+        const settled = mine.catch(() => undefined);
+        queue.set(node, settled);
+        try {
+            await mine;
+        }
+        finally {
+            if (queue.get(node) === settled)
+                queue.delete(node);
+        }
+    }
+    /** Transfers still to finish, per node — see `uploadFile`. */
+    transfersByNode;
+    /** Bulk channels must never share a pool with deployment lease/control commands. */
+    async createTransferEngine() {
+        const xec = await import('@xec-sh/core');
+        return new xec.ExecutionEngine({
+            defaultTimeout: 30_000,
+            defaultShell: '/bin/sh',
+            adapters: { ssh: { connectionPool: SSH_CONNECTION_POOL } },
+        });
+    }
+    async transferOnce(target, localPath, remotePath, options) {
+        const fsp = await import('node:fs/promises');
+        const stat = await fsp.stat(localPath);
+        if (!stat.isFile())
+            throw new Error('Upload source must be a regular file');
+        const expected = stat.size;
+        const hash = createHash('sha256');
+        for await (const chunk of createReadStream(localPath))
+            hash.update(chunk);
+        const digest = hash.digest('hex');
+        const control = async (command) => {
+            const out = await this.ssh(target, command, { timeout: 30_000 });
+            if (out.exitCode !== 0)
+                throw new Error(`Upload verification command failed (${out.exitCode}): ${out.stderr}`);
+            return out.stdout.trim();
+        };
+        for (let attempt = 1; attempt <= 2; attempt++) {
+            const temporary = remotePath + '.upload-' + randomUUID() + '.part';
+            const engine = await this.createTransferEngine();
+            let stop = false;
+            let poll;
+            let wake;
+            let watch;
+            try {
+                await control(`umask 077 && (set -C; : > ${shellEscape(temporary)})`);
+                let lastSize = 0;
+                let lastProgress = Date.now();
+                watch = (async () => {
+                    while (!stop) {
+                        await new Promise((resolve) => {
+                            wake = resolve;
+                            poll = setTimeout(resolve, 15_000);
+                        });
+                        if (stop)
+                            break;
+                        const size = Number(await control(`wc -c < ${shellEscape(temporary)}`));
+                        if (!Number.isSafeInteger(size) || size < lastSize || size > expected)
+                            throw new Error('Invalid upload progress');
+                        if (size > lastSize) {
+                            lastSize = size;
+                            lastProgress = Date.now();
+                        }
+                        if (Date.now() - lastProgress >= UPLOAD_STALL_MS)
+                            throw new Error(`Upload to ${target.host}:${remotePath} made no progress for ${UPLOAD_STALL_MS / 1000} s; temporary file was not promoted`);
+                    }
+                    return await new Promise(() => { });
+                })();
+                await this.withinDeadline(Promise.race([engine.ssh(sshConfig(target)).uploadFile(localPath, temporary), watch]), uploadDeadlineMs(expected), (ms) => new Error(`Upload of ${localPath} (${expected} bytes) to ${target.host}:${remotePath} did not finish in ${Math.round(ms / 1000)} s; temporary file was not promoted`));
+                stop = true;
+                clearTimeout(poll);
+                wake?.();
+                const landed = Number(await control(`wc -c < ${shellEscape(temporary)}`));
+                if (!Number.isSafeInteger(landed) || landed !== expected)
+                    throw new Error(`Upload landed ${Number.isFinite(landed) ? landed : 'an unreadable size'} of ${expected} bytes`);
+                const actual = (await control(`if command -v sha256sum >/dev/null 2>&1; then sha256sum ${shellEscape(temporary)}; else shasum -a 256 ${shellEscape(temporary)}; fi`)).split(/\s+/)[0];
+                if (actual !== digest)
+                    throw new Error('Uploaded file SHA256 does not match the source');
+                // The guarded command repeats byte/hash checks inside the same execution
+                // fence as rename. A lost lease may finish SFTP into its unique temporary
+                // file, but must never replace a newer owner's canonical destination.
+                const promote = `test "$(wc -c < ${shellEscape(temporary)})" -eq ${expected} && ` +
+                    `actual=$(if command -v sha256sum >/dev/null 2>&1; then sha256sum ${shellEscape(temporary)}; else shasum -a 256 ${shellEscape(temporary)}; fi) && ` +
+                    `test "\${actual%% *}" = ${shellEscape(digest)} && ` +
+                    `chmod ${(stat.mode & 0o777).toString(8)} ${shellEscape(temporary)} && test ! -d ${shellEscape(remotePath)} && mv -f -- ${shellEscape(temporary)} ${shellEscape(remotePath)}`;
+                if (options?.runControl) {
+                    const out = await options.runControl(promote, 30_000);
+                    if (out.exitCode !== 0)
+                        throw new Error(`Upload promotion rejected (${out.exitCode}): ${out.stderr}`);
+                }
+                else
+                    await control(promote);
+                return;
+            }
+            catch (error) {
+                if (attempt === 2)
+                    throw error;
+                this.logger.warn({ remotePath, attempt, error: describeXecError(error) }, 'Upload failed before promotion; retrying with a fresh isolated connection');
+            }
+            finally {
+                stop = true;
+                clearTimeout(poll);
+                wake?.();
+                // Disposing only this engine cannot close the lease/control connection.
+                await this.withinDeadline(engine.dispose(), 10_000, () => new Error('Isolated transfer connection did not close')).catch(() => undefined);
+                await control(`rm -f -- ${shellEscape(temporary)}`).catch(() => undefined);
+            }
+        }
+    }
+    /**
+     * `work`, or a rejection once `ms` have passed. The work itself is not
+     * stopped — nothing in the engine can stop it — only no longer waited for.
+     */
+    async withinDeadline(work, ms, error) {
+        let timer;
+        const late = new Promise((_, reject) => {
+            timer = setTimeout(() => reject(error(ms)), ms);
+        });
+        try {
+            return await Promise.race([work, late]);
+        }
+        finally {
+            clearTimeout(timer);
+        }
+    }
     /**
      * Execute command inside a Docker container.
      */

package/dist/execution/execution.service.js.map

@@ -1 +1 @@
-{"version":3,"file":"execution.service.js","sourceRoot":"","sources":["../../src/execution/execution.service.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAuCH,gFAAgF;AAChF,UAAU;AACV,gFAAgF;AAEhF,MAAM,OAAO,gBAAgB;IAIE;IAHrB,MAAM,GAAQ,IAAI,CAAC;IACnB,WAAW,GAAG,KAAK,CAAC;IAE5B,YAA6B,MAAe;QAAf,WAAM,GAAN,MAAM,CAAS;IAAG,CAAC;IAEhD;;;OAGG;IACK,KAAK,CAAC,SAAS;QACrB,IAAI,IAAI,CAAC,MAAM;YAAE,OAAO,IAAI,CAAC,MAAM,CAAC;QAEpC,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,cAAc,CAAC,CAAC;YACzC,IAAI,CAAC,MAAM,GAAG,IAAI,GAAG,CAAC,eAAe,CAAC;gBACpC,cAAc,EAAE,MAAM;gBACtB,YAAY,EAAE,SAAS;aACxB,CAAC,CAAC;YAEH,gCAAgC;YAChC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,eAAe,EAAE,CAAC,KAAU,EAAE,EAAE;gBAC7C,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,EAAE,YAAY,CAAC,CAAC;YAC7E,CAAC,CAAC,CAAC;YACH,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,kBAAkB,EAAE,CAAC,KAAU,EAAE,EAAE;gBAChD,IAAI,CAAC,MAAM,CAAC,KAAK,CACf,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,EAC7F,eAAe,CAChB,CAAC;YACJ,CAAC,CAAC,CAAC;YACH,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,eAAe,EAAE,CAAC,KAAU,EAAE,EAAE;gBAC7C,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,OAAO,EAAE,EACtE,YAAY,CACb,CAAC;YACJ,CAAC,CAAC,CAAC;YAEH,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC;YACxB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,wCAAwC,CAAC,CAAC;QAC7D,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,EAAE,KAAK,EAAG,GAAa,CAAC,OAAO,EAAE,EACjC,0EAA0E,CAC3E,CAAC;QACJ,CAAC;QAED,OAAO,IAAI,CAAC,MAAM,CAAC;IACrB,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,IAAI,CAAC,OAAe,EAAE,OAAqB;QAC/C,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,SAAS,EAAE,CAAC;QACtC,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAEzB,IAAI,MAAM,EAAE,CAAC;YACX,IAAI,CAAC;gBACH,4EAA4E;gBAC5E,uEAAuE;gBACvE,IAAI,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,OAAO,CAAQ,CAAC,CAAC;gBACxC,IAAI,OAAO,EAAE,OAAO;oBAAE,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;gBAC3D,IAAI,OAAO,EAAE,GAAG;oBAAE,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;gBAC/C,IAAI,OAAO,EAAE,GAAG;oBAAE,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;gBAE/C,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC;gBACpC,OAAO;oBACL,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE;oBACnC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE;oBACnC,QAAQ,EAAE,MAAM,CAAC,QAAQ,IAAI,CAAC;oBAC9B,QAAQ,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK;iBAC7B,CAAC;YACJ,CAAC;YAAC,OAAO,GAAQ,EAAE,CAAC;gBAClB,OAAO;oBACL,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE;oBAChC,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,GAAG,CAAC,OAAO;oBACzC,QAAQ,EAAE,GAAG,CAAC,QAAQ,IAAI,CAAC;oBAC3B,QAAQ,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK;iBAC7B,CAAC;YACJ,CAAC;QACH,CAAC;QAED,0BAA0B;QAC1B,OAAO,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAC7C,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,GAAG,CAAC,MAAiB,EAAE,OAAe,EAAE,OAAqB;QACjE,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,SAAS,EAAE,CAAC;QACtC,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAEzB,IAAI,MAAM,EAAE,CAAC;YACX,IAAI,CAAC;gBACH,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC;oBACrB,IAAI,EAAE,MAAM,CAAC,IAAI;oBACjB,IAAI,EAAE,MAAM,CAAC,IAAI,IAAI,EAAE;oBACvB,QAAQ,EAAE,MAAM,CAAC,QAAQ,IAAI,MAAM;oBACnC,GAAG,CAAC,MAAM,CAAC,UAAU,IAAI,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,CAAC;oBAC3D,GAAG,CAAC,MAAM,CAAC,UAAU,IAAI,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,CAAC;oBAC3D,GAAG,CAAC,MAAM,CAAC,QAAQ,IAAI,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC;iBACtD,CAAC,CAAC;gBACH,uEAAuE;gBACvE,IAAI,IAAI,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC,OAAO,CAAQ,CAAC,CAAC;gBACrC,IAAI,OAAO,EAAE,OAAO;oBAAE,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;gBAC3D,IAAI,OAAO,EAAE,GAAG;oBAAE,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;gBAC/C,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC;gBACpC,OAAO;oBACL,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE;oBACnC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE;oBACnC,QAAQ,EAAE,MAAM,CAAC,QAAQ,IAAI,CAAC;oBAC9B,QAAQ,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK;iBAC7B,CAAC;YACJ,CAAC;YAAC,OAAO,GAAQ,EAAE,CAAC;gBAClB,OAAO;oBACL,MAAM,EAAE,EAAE;oBACV,MAAM,EAAE,GAAG,CAAC,OAAO;oBACnB,QAAQ,EAAE,CAAC;oBACX,QAAQ,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK;iBAC7B,CAAC;YACJ,CAAC;QACH,CAAC;QAED,0CAA0C;QAC1C,MAAM,MAAM,GAAG,sCAAsC,MAAM,CAAC,IAAI,IAAI,EAAE,IAAI,MAAM,CAAC,QAAQ,IAAI,MAAM,IAAI,MAAM,CAAC,IAAI,KAAK,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,GAAG,CAAC;QACvJ,OAAO,IAAI,CAAC,YAAY,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC5C,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,MAAM,CAAC,MAAoB,EAAE,OAAe,EAAE,OAAqB;QACvE,0CAA0C;QAC1C,IAAI,MAAM,CAAC,SAAS,EAAE,CAAC;YACrB,OAAO,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,EAAE,eAAe,MAAM,CAAC,SAAS,IAAI,OAAO,EAAE,EAAE,OAAO,CAAC,CAAC;QAC3F,CAAC;QACD,OAAO,IAAI,CAAC,IAAI,CAAC,eAAe,MAAM,CAAC,SAAS,IAAI,OAAO,EAAE,EAAE,OAAO,CAAC,CAAC;IAC1E,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,OAAO;QACX,IAAI,IAAI,CAAC,MAAM,IAAI,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,KAAK,UAAU,EAAE,CAAC;YAC7D,MAAM,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QAC9B,CAAC;QACD,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;QACnB,IAAI,CAAC,WAAW,GAAG,KAAK,CAAC;IAC3B,CAAC;IAED;;OAEG;IACH,WAAW;QACT,OAAO,IAAI,CAAC,WAAW,CAAC;IAC1B,CAAC;IAED,8EAA8E;IAC9E,iDAAiD;IACjD,8EAA8E;IAEtE,KAAK,CAAC,YAAY,CAAC,OAAe,EAAE,OAAqB;QAC/D,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,MAAM,CAAC,oBAAoB,CAAC,CAAC;QACxD,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,MAAM,CAAC,WAAW,CAAC,CAAC;QAChD,MAAM,SAAS,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;QACtC,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAEzB,IAAI,CAAC;YACH,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,SAAS,CAAC,SAAS,EAAE,CAAC,IAAI,EAAE,OAAO,CAAC,EAAE;gBACrE,GAAG,EAAE,OAAO,EAAE,GAAG;gBACjB,GAAG,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,SAAS;gBAClE,OAAO,EAAE,OAAO,EAAE,OAAO,IAAI,MAAM;gBACnC,SAAS,EAAE,EAAE,GAAG,IAAI,GAAG,IAAI;aAC5B,CAAC,CAAC;YACH,OAAO;gBACL,MAAM,EAAE,MAAM,CAAC,IAAI,EAAE;gBACrB,MAAM,EAAE,MAAM,CAAC,IAAI,EAAE;gBACrB,QAAQ,EAAE,CAAC;gBACX,QAAQ,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK;aAC7B,CAAC;QACJ,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAClB,OAAO;gBACL,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE;gBAChC,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,GAAG,CAAC,OAAO;gBACzC,QAAQ,EAAE,GAAG,CAAC,IAAI,IAAI,CAAC;gBACvB,QAAQ,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK;aAC7B,CAAC;QACJ,CAAC;IACH,CAAC;CACF"}
+{"version":3,"file":"execution.service.js","sourceRoot":"","sources":["../../src/execution/execution.service.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACrD,OAAO,EAAE,gBAAgB,EAAE,MAAM,SAAS,CAAC;AAC3C,OAAO,EAAE,WAAW,EAAE,MAAM,2BAA2B,CAAC;AA4ExD;;;;;;GAMG;AACH,MAAM,UAAU,gBAAgB,CAAC,KAAc;IAC7C,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,IAAI,eAAe,CAAC;IAC/D,IAAI,KAAK,YAAY,KAAK;QAAE,OAAO,KAAK,CAAC,OAAO,IAAI,KAAK,CAAC,IAAI,CAAC;IAC/D,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACvC,MAAM,CAAC,GAAI,KAA+B,CAAC,OAAO,CAAC;QACnD,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC;YAAE,OAAO,CAAC,CAAC;IAC3C,CAAC;IACD,OAAO,KAAK,IAAI,IAAI,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACzD,CAAC;AAED,gFAAgF;AAChF,UAAU;AACV,gFAAgF;AAEhF;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG;IACjC,WAAW,EAAE,MAAM,CAAC,gBAAgB;IACpC,WAAW,EAAE,CAAC;CACN,CAAC;AAEX;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG,OAAO,CAAC;AAEvC,MAAM,UAAU,gBAAgB,CAAC,KAAa;IAC5C,OAAO,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,GAAG,CAAC,EAAE,GAAG,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC;AACxD,CAAC;AAED,SAAS,SAAS,CAAC,MAAiB;IAClC,OAAO;QACL,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,IAAI,EAAE,MAAM,CAAC,IAAI,IAAI,EAAE;QACvB,QAAQ,EAAE,MAAM,CAAC,QAAQ,IAAI,MAAM;QACnC,GAAG,CAAC,MAAM,CAAC,UAAU,IAAI,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,CAAC;QAC3D,GAAG,CAAC,MAAM,CAAC,UAAU,IAAI,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,CAAC;QAC3D,GAAG,CAAC,MAAM,CAAC,QAAQ,IAAI,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC;QACrD,YAAY,EAAE,MAAM;QACpB,iBAAiB,EAAE,MAAM;QACzB,iBAAiB,EAAE,CAAC;KACrB,CAAC;AACJ,CAAC;AAED,MAAM,OAAO,gBAAgB;IAIE,MAAM;IAH3B,MAAM,GAAQ,IAAI,CAAC;IACnB,WAAW,GAAG,KAAK,CAAC;IAE5B,YAA6B,MAAe;sBAAf,MAAM;IAAY,CAAC;IAEhD;;;OAGG;IACK,KAAK,CAAC,SAAS;QACrB,IAAI,IAAI,CAAC,MAAM;YAAE,OAAO,IAAI,CAAC,MAAM,CAAC;QAEpC,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,cAAc,CAAC,CAAC;YACzC,IAAI,CAAC,MAAM,GAAG,IAAI,GAAG,CAAC,eAAe,CAAC;gBACpC,cAAc,EAAE,MAAM;gBACtB,YAAY,EAAE,SAAS;gBACvB,mEAAmE;gBACnE,iEAAiE;gBACjE,kEAAkE;gBAClE,yBAAyB;gBACzB,QAAQ,EAAE,EAAE,GAAG,EAAE,EAAE,cAAc,EAAE,mBAAmB,EAAE,EAAE;aAC3D,CAAC,CAAC;YAEH,iCAAiC;YACjC,EAAE;YACF,sEAAsE;YACtE,wEAAwE;YACxE,uEAAuE;YACvE,uEAAuE;YACvE,gEAAgE;YAChE,kEAAkE;YAClE,mEAAmE;YACnE,wDAAwD;YACxD,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,eAAe,EAAE,CAAC,KAAsB,EAAE,EAAE;gBACzD,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,EAAE,YAAY,CAAC,CAAC;YAC7E,CAAC,CAAC,CAAC;YACH,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,kBAAkB,EAAE,CAAC,KAAyB,EAAE,EAAE;gBAC/D,IAAI,CAAC,MAAM,CAAC,KAAK,CACf,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,EAC7F,eAAe,CAChB,CAAC;YACJ,CAAC,CAAC,CAAC;YACH,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,eAAe,EAAE,CAAC,KAAsB,EAAE,EAAE;gBACzD,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,KAAK,EAAE,gBAAgB,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,EACzG,YAAY,CACb,CAAC;YACJ,CAAC,CAAC,CAAC;YAEH,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC;YACxB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,wCAAwC,CAAC,CAAC;QAC7D,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,EAAE,KAAK,EAAG,GAAa,CAAC,OAAO,EAAE,EACjC,0EAA0E,CAC3E,CAAC;QACJ,CAAC;QAED,OAAO,IAAI,CAAC,MAAM,CAAC;IACrB,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,IAAI,CAAC,OAAe,EAAE,OAAqB;QAC/C,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,SAAS,EAAE,CAAC;QACtC,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAEzB,IAAI,MAAM,EAAE,CAAC;YACX,IAAI,CAAC;gBACH,4EAA4E;gBAC5E,uEAAuE;gBACvE,IAAI,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,OAAO,CAAQ,CAAC,CAAC;gBACxC,IAAI,OAAO,EAAE,OAAO;oBAAE,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;gBAC3D,IAAI,OAAO,EAAE,GAAG;oBAAE,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;gBAC/C,IAAI,OAAO,EAAE,GAAG;oBAAE,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;gBAE/C,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC;gBACpC,OAAO;oBACL,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE;oBACnC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE;oBACnC,QAAQ,EAAE,MAAM,CAAC,QAAQ,IAAI,CAAC;oBAC9B,QAAQ,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK;iBAC7B,CAAC;YACJ,CAAC;YAAC,OAAO,GAAQ,EAAE,CAAC;gBAClB,OAAO;oBACL,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE;oBAChC,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,GAAG,CAAC,OAAO;oBACzC,QAAQ,EAAE,GAAG,CAAC,QAAQ,IAAI,CAAC;oBAC3B,QAAQ,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK;iBAC7B,CAAC;YACJ,CAAC;QACH,CAAC;QAED,0BAA0B;QAC1B,OAAO,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAC7C,CAAC;IAED;;OAEG;IACH;;;;;;;;;;;;;;;;;;;;;OAqBG;IACH,KAAK,CAAC,MAAM,CACV,MAAiB,EACjB,UAAkB,EAClB,OAAqD;QAErD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,SAAS,EAAE,CAAC;QACtC,IAAI,CAAC,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,6DAA6D,CAAC,CAAC;QAE5F,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;QAE1C,IAAI,OAAO,GAAG,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;YACrC,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC;QAC1E,CAAC;QAED,sEAAsE;QACtE,2BAA2B;QAC3B,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC;YAC9B,SAAS,EAAE,OAAO,EAAE,SAAS,IAAI,WAAW;YAC5C,UAAU,EAAE,OAAO,EAAE,UAAU,IAAI,WAAW;YAC9C,UAAU;SACX,CAAC,CAAC;QAEH,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,UAAU,EAAE,EAAE,iBAAiB,CAAC,CAAC;QAErG,OAAO;YACL,IAAI,EAAE,MAAM,CAAC,SAAS,IAAI,WAAW;YACrC,IAAI,EAAE,MAAM,CAAC,SAAS;YACtB,KAAK,EAAE,KAAK,IAAI,EAAE;gBAChB,IAAI,CAAC;oBACH,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;gBACvB,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,KAAK,EAAG,GAAa,CAAC,OAAO,EAAE,EAAE,yBAAyB,CAAC,CAAC;gBACrG,CAAC;YACH,CAAC;SACF,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,MAAiB,EAAE,OAAe,EAAE,OAAqB;QACjE,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,SAAS,EAAE,CAAC;QACtC,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAEzB,IAAI,MAAM,EAAE,CAAC;YACX,IAAI,CAAC;gBACH,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;gBAC1C,uEAAuE;gBACvE,IAAI,IAAI,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC,OAAO,CAAQ,CAAC,CAAC;gBACrC,IAAI,OAAO,EAAE,OAAO;oBAAE,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;gBAC3D,IAAI,OAAO,EAAE,GAAG;oBAAE,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;gBAC/C,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC;gBACpC,OAAO;oBACL,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE;oBACnC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE;oBACnC,QAAQ,EAAE,MAAM,CAAC,QAAQ,IAAI,CAAC;oBAC9B,QAAQ,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK;iBAC7B,CAAC;YACJ,CAAC;YAAC,OAAO,GAAQ,EAAE,CAAC;gBAClB,OAAO;oBACL,MAAM,EAAE,EAAE;oBACV,MAAM,EAAE,GAAG,CAAC,OAAO;oBACnB,QAAQ,EAAE,CAAC;oBACX,QAAQ,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK;iBAC7B,CAAC;YACJ,CAAC;QACH,CAAC;QAED,0CAA0C;QAC1C,MAAM,MAAM,GAAG,sCAAsC,MAAM,CAAC,IAAI,IAAI,EAAE,IAAI,MAAM,CAAC,QAAQ,IAAI,MAAM,IAAI,MAAM,CAAC,IAAI,KAAK,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,GAAG,CAAC;QACvJ,OAAO,IAAI,CAAC,YAAY,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC5C,CAAC;IAED;;;;;;;;;;;;OAYG;IACH,KAAK,CAAC,UAAU,CAAC,MAAiB,EAAE,SAAiB,EAAE,UAAkB,EAAE,OAAuB;QAChG,uEAAuE;QACvE,8DAA8D;QAC9D,MAAM,IAAI,GAAG,GAAG,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,IAAI,IAAI,EAAE,EAAE,CAAC;QACnD,MAAM,KAAK,GAAG,CAAC,IAAI,CAAC,eAAe,KAAK,IAAI,GAAG,EAAyB,CAAC,CAAC;QAC1E,MAAM,MAAM,GAAG,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;QACpD,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,YAAY,CAAC,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,OAAO,CAAC,CAAC,CAAC;QAC1F,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAC5C,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QACzB,IAAI,CAAC;YACH,MAAM,IAAI,CAAC;QACb,CAAC;gBAAS,CAAC;YACT,IAAI,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,OAAO;gBAAE,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACtD,CAAC;IACH,CAAC;IAED,8DAA8D;IACtD,eAAe,CAA8B;IAErD,oFAAoF;IAC5E,KAAK,CAAC,oBAAoB;QAChC,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,cAAc,CAAC,CAAC;QACzC,OAAO,IAAI,GAAG,CAAC,eAAe,CAAC;YAC7B,cAAc,EAAE,MAAM;YACtB,YAAY,EAAE,SAAS;YACvB,QAAQ,EAAE,EAAE,GAAG,EAAE,EAAE,cAAc,EAAE,mBAAmB,EAAE,EAAE;SAC3D,CAAC,CAAC;IACL,CAAC;IAEO,KAAK,CAAC,YAAY,CAAC,MAAiB,EAAE,SAAiB,EAAE,UAAkB,EAAE,OAAuB;QAC1G,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,kBAAkB,CAAC,CAAC;QAC7C,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACvC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;QAC5E,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC;QAC3B,MAAM,IAAI,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC;QAClC,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,gBAAgB,CAAC,SAAS,CAAC;YAAE,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAC1E,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAClC,MAAM,OAAO,GAAG,KAAK,EAAE,OAAe,EAAmB,EAAE;YACzD,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,OAAO,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC;YACjE,IAAI,GAAG,CAAC,QAAQ,KAAK,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,uCAAuC,GAAG,CAAC,QAAQ,MAAM,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;YAC/G,OAAO,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;QAC3B,CAAC,CAAC;QACF,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,IAAI,CAAC,EAAE,OAAO,EAAE,EAAE,CAAC;YAC9C,MAAM,SAAS,GAAG,UAAU,GAAG,UAAU,GAAG,UAAU,EAAE,GAAG,OAAO,CAAC;YACnE,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,oBAAoB,EAAE,CAAC;YACjD,IAAI,IAAI,GAAG,KAAK,CAAC;YACjB,IAAI,IAA+C,CAAC;YACpD,IAAI,IAA8B,CAAC;YACnC,IAAI,KAAiC,CAAC;YACtC,IAAI,CAAC;gBACH,MAAM,OAAO,CAAC,6BAA6B,WAAW,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;gBACtE,IAAI,QAAQ,GAAG,CAAC,CAAC;gBACjB,IAAI,YAAY,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;gBAC9B,KAAK,GAAG,CAAC,KAAK,IAAI,EAAE;oBAClB,OAAO,CAAC,IAAI,EAAE,CAAC;wBACb,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;4BAClC,IAAI,GAAG,OAAO,CAAC;4BACf,IAAI,GAAG,UAAU,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;wBACrC,CAAC,CAAC,CAAC;wBACH,IAAI,IAAI;4BAAE,MAAM;wBAChB,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,OAAO,CAAC,WAAW,WAAW,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC;wBACxE,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,IAAI,GAAG,QAAQ,IAAI,IAAI,GAAG,QAAQ;4BACnE,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;wBAC7C,IAAI,IAAI,GAAG,QAAQ,EAAE,CAAC;4BACpB,QAAQ,GAAG,IAAI,CAAC;4BAChB,YAAY,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;wBAC5B,CAAC;wBACD,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,YAAY,IAAI,eAAe;4BAC9C,MAAM,IAAI,KAAK,CACb,aAAa,MAAM,CAAC,IAAI,IAAI,UAAU,yBAAyB,eAAe,GAAG,IAAI,qCAAqC,CAC3H,CAAC;oBACN,CAAC;oBACD,OAAO,MAAM,IAAI,OAAO,CAAQ,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;gBAC5C,CAAC,CAAC,EAAE,CAAC;gBACL,MAAM,IAAI,CAAC,cAAc,CACvB,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC,SAAS,EAAE,SAAS,CAAC,EAAE,KAAK,CAAC,CAAC,EACrF,gBAAgB,CAAC,QAAQ,CAAC,EAC1B,CAAC,EAAE,EAAE,EAAE,CACL,IAAI,KAAK,CACP,aAAa,SAAS,KAAK,QAAQ,cAAc,MAAM,CAAC,IAAI,IAAI,UAAU,sBAAsB,IAAI,CAAC,KAAK,CAAC,EAAE,GAAG,IAAI,CAAC,qCAAqC,CAC3J,CACJ,CAAC;gBACF,IAAI,GAAG,IAAI,CAAC;gBACZ,YAAY,CAAC,IAAI,CAAC,CAAC;gBACnB,IAAI,EAAE,EAAE,CAAC;gBACT,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,OAAO,CAAC,WAAW,WAAW,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC;gBAC1E,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,MAAM,KAAK,QAAQ;oBACtD,MAAM,IAAI,KAAK,CACb,iBAAiB,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,oBAAoB,OAAO,QAAQ,QAAQ,CAChG,CAAC;gBACJ,MAAM,MAAM,GAAG,CACb,MAAM,OAAO,CACX,2DAA2D,WAAW,CAAC,SAAS,CAAC,wBAAwB,WAAW,CAAC,SAAS,CAAC,MAAM,CACtI,CACF,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;gBAClB,IAAI,MAAM,KAAK,MAAM;oBAAE,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;gBACzF,yEAAyE;gBACzE,0EAA0E;gBAC1E,sEAAsE;gBACtE,MAAM,OAAO,GACX,mBAAmB,WAAW,CAAC,SAAS,CAAC,UAAU,QAAQ,MAAM;oBACjE,oEAAoE,WAAW,CAAC,SAAS,CAAC,wBAAwB,WAAW,CAAC,SAAS,CAAC,WAAW;oBACnJ,2BAA2B,WAAW,CAAC,MAAM,CAAC,MAAM;oBACpD,SAAS,CAAC,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,WAAW,CAAC,SAAS,CAAC,iBAAiB,WAAW,CAAC,UAAU,CAAC,gBAAgB,WAAW,CAAC,SAAS,CAAC,IAAI,WAAW,CAAC,UAAU,CAAC,EAAE,CAAC;gBAChL,IAAI,OAAO,EAAE,UAAU,EAAE,CAAC;oBACxB,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,UAAU,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;oBACtD,IAAI,GAAG,CAAC,QAAQ,KAAK,CAAC;wBACpB,MAAM,IAAI,KAAK,CAAC,8BAA8B,GAAG,CAAC,QAAQ,MAAM,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;gBAClF,CAAC;;oBAAM,MAAM,OAAO,CAAC,OAAO,CAAC,CAAC;gBAC9B,OAAO;YACT,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,OAAO,KAAK,CAAC;oBAAE,MAAM,KAAK,CAAC;gBAC/B,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,EAAE,UAAU,EAAE,OAAO,EAAE,KAAK,EAAE,gBAAgB,CAAC,KAAK,CAAC,EAAE,EACvD,2EAA2E,CAC5E,CAAC;YACJ,CAAC;oBAAS,CAAC;gBACT,IAAI,GAAG,IAAI,CAAC;gBACZ,YAAY,CAAC,IAAI,CAAC,CAAC;gBACnB,IAAI,EAAE,EAAE,CAAC;gBACT,wEAAwE;gBACxE,MAAM,IAAI,CAAC,cAAc,CACvB,MAAM,CAAC,OAAO,EAAE,EAChB,MAAM,EACN,GAAG,EAAE,CAAC,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAC9D,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;gBACzB,MAAM,OAAO,CAAC,YAAY,WAAW,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;YAC7E,CAAC;QACH,CAAC;IACH,CAAC;IAED;;;OAGG;IACK,KAAK,CAAC,cAAc,CAAI,IAAgB,EAAE,EAAU,EAAE,KAA4B;QACxF,IAAI,KAAgD,CAAC;QACrD,MAAM,IAAI,GAAG,IAAI,OAAO,CAAQ,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE;YAC5C,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAClD,CAAC,CAAC,CAAC;QACH,IAAI,CAAC;YACH,OAAO,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;QAC1C,CAAC;gBAAS,CAAC;YACT,YAAY,CAAC,KAAK,CAAC,CAAC;QACtB,CAAC;IACH,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,MAAM,CAAC,MAAoB,EAAE,OAAe,EAAE,OAAqB;QACvE,0CAA0C;QAC1C,IAAI,MAAM,CAAC,SAAS,EAAE,CAAC;YACrB,OAAO,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,EAAE,eAAe,MAAM,CAAC,SAAS,IAAI,OAAO,EAAE,EAAE,OAAO,CAAC,CAAC;QAC3F,CAAC;QACD,OAAO,IAAI,CAAC,IAAI,CAAC,eAAe,MAAM,CAAC,SAAS,IAAI,OAAO,EAAE,EAAE,OAAO,CAAC,CAAC;IAC1E,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,OAAO;QACX,IAAI,IAAI,CAAC,MAAM,IAAI,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,KAAK,UAAU,EAAE,CAAC;YAC7D,MAAM,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QAC9B,CAAC;QACD,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;QACnB,IAAI,CAAC,WAAW,GAAG,KAAK,CAAC;IAC3B,CAAC;IAED;;OAEG;IACH,WAAW;QACT,OAAO,IAAI,CAAC,WAAW,CAAC;IAC1B,CAAC;IAED,8EAA8E;IAC9E,iDAAiD;IACjD,8EAA8E;IAEtE,KAAK,CAAC,YAAY,CAAC,OAAe,EAAE,OAAqB;QAC/D,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,MAAM,CAAC,oBAAoB,CAAC,CAAC;QACxD,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,MAAM,CAAC,WAAW,CAAC,CAAC;QAChD,MAAM,SAAS,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;QACtC,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAEzB,IAAI,CAAC;YACH,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,SAAS,CAAC,SAAS,EAAE,CAAC,IAAI,EAAE,OAAO,CAAC,EAAE;gBACrE,GAAG,EAAE,OAAO,EAAE,GAAG;gBACjB,GAAG,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,SAAS;gBAClE,OAAO,EAAE,OAAO,EAAE,OAAO,IAAI,MAAM;gBACnC,SAAS,EAAE,EAAE,GAAG,IAAI,GAAG,IAAI;aAC5B,CAAC,CAAC;YACH,OAAO;gBACL,MAAM,EAAE,MAAM,CAAC,IAAI,EAAE;gBACrB,MAAM,EAAE,MAAM,CAAC,IAAI,EAAE;gBACrB,QAAQ,EAAE,CAAC;gBACX,QAAQ,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK;aAC7B,CAAC;QACJ,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAClB,OAAO;gBACL,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE;gBAChC,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,GAAG,CAAC,OAAO;gBACzC,QAAQ,EAAE,GAAG,CAAC,IAAI,IAAI,CAAC;gBACvB,QAAQ,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK;aAC7B,CAAC;QACJ,CAAC;IACH,CAAC;CACF"}

package/dist/index.d.ts

@@ -6,7 +6,7 @@
  */
 export { defineSystem } from './config/define-system.js';
 export { defineEcosystem } from './config/define-ecosystem.js';
-export type { IAppDefinition, IProcessEntry, 
+export type { IAppDefinition, AppHealthAnswer, AppHealthHook, IProcessEntry, 
 /** @deprecated Use IProcessEntry instead */
 IProcessTopologyEntry, IEcosystemConfig, IEcosystemAppEntry, IWatchConfig, IHttpTransportConfig, IWebSocketTransportConfig, ProcessInfoDto, SubProcessInfoDto, DaemonStatusDto, AggregatedMetricsDto, AggregatedHealthDto, LogEntryDto, AppDiagnosticsDto, AppStatus, } from './config/types.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAC;AACzD,OAAO,EAAE,eAAe,EAAE,MAAM,8BAA8B,CAAC;AAE/D,YAAY,EACV,cAAc,EACd,aAAa;AACb,4CAA4C;AAC5C,qBAAqB,EACrB,gBAAgB,EAChB,kBAAkB,EAClB,YAAY,EACZ,oBAAoB,EACpB,yBAAyB,EACzB,cAAc,EACd,iBAAiB,EACjB,eAAe,EACf,oBAAoB,EACpB,mBAAmB,EACnB,WAAW,EACX,iBAAiB,EACjB,SAAS,GACV,MAAM,mBAAmB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAC;AACzD,OAAO,EAAE,eAAe,EAAE,MAAM,8BAA8B,CAAC;AAE/D,YAAY,EACV,cAAc,EACd,eAAe,EACf,aAAa,EACb,aAAa;AACb,4CAA4C;AAC5C,qBAAqB,EACrB,gBAAgB,EAChB,kBAAkB,EAClB,YAAY,EACZ,oBAAoB,EACpB,yBAAyB,EACzB,cAAc,EACd,iBAAiB,EACjB,eAAe,EACf,oBAAoB,EACpB,mBAAmB,EACnB,WAAW,EACX,iBAAiB,EACjB,SAAS,GACV,MAAM,mBAAmB,CAAC"}

package/dist/infrastructure/bare-metal-plan.d.ts

@@ -0,0 +1,208 @@
+/**
+ * What has to happen on a host for a declared bare-metal service to be as
+ * declared.
+ *
+ * `IBareMetalServiceConfig` has described this since it was written —
+ * `installCommand`, `systemdUnit`, `configFile` + `configTemplate`,
+ * `dataDir`, `user`, `validateCommand`, and variants keyed by `networkMode`.
+ * Every field of it was read by nothing: the type existed, the preset
+ * registry copied it, and no code path ever acted on one. An operator could
+ * declare that a service runs from systemd and get a service that did not
+ * run at all.
+ *
+ * It matters because some things should not be containers. A Bitcoin or
+ * Monero node on a server is a system service with a chain directory
+ * measured in hundreds of gigabytes, a package the distribution knows how to
+ * update, and a lifetime longer than any deployment. Wrapping one in a
+ * container to satisfy a provisioning tool is the tool making its own
+ * convenience the architecture.
+ *
+ * This is the planning half, and it is pure: given what is declared and what
+ * the host currently looks like, it says what to do and what it cannot do.
+ * Executing lives next door, so the decisions can be tested without a host
+ * and the same plan can run locally or over SSH.
+ */
+import type { IServiceHealthCheck, IServiceOverride, SecretRef } from './types.js';
+/** A declared bare-metal service, with its `networkMode` variant applied. */
+export interface BareMetalSpec {
+    /** Service name, for messages. */
+    name: string;
+    installCommand?: string | undefined;
+    systemdUnit?: string | undefined;
+    configFile?: string | undefined;
+    /** Rendered content — interpolation happens before planning. */
+    configContent?: string | undefined;
+    dataDir?: string | undefined;
+    user?: string | undefined;
+    validateCommand?: string | undefined;
+    /** Where the unit file goes, when this provides one. */
+    unitFile?: string | undefined;
+    /** Rendered unit content, when the host has no unit to adopt. */
+    unitContent?: string | undefined;
+    /**
+     * Placeholders the template could not fill.
+     *
+     * Carried on the spec so the planner refuses rather than writes. A config
+     * with `rpcpassword=` in it starts a mainnet daemon with no password;
+     * one with `rpcpassword=${secret:rpc_password}` fails to start and says
+     * why. Neither belongs on a host, and this is the check that keeps both
+     * off it.
+     */
+    unresolved?: string[] | undefined;
+    /** How to ask the service on the node how it is (`IBareMetalServiceConfig.healthCheck`). */
+    healthCheck?: IServiceHealthCheck | undefined;
+    /** A chain on the host to take over as `dataDir` — the stack's word, never the application's. */
+    adopt?: {
+        from: string;
+        replaces?: string | undefined;
+    } | undefined;
+}
+/** What the host looks like right now. */
+export interface BareMetalObservation {
+    /** `validateCommand` succeeded, or there was none to run. */
+    installed: boolean;
+    userExists: boolean;
+    dataDirExists: boolean;
+    unitKnown: boolean;
+    unitActive: boolean;
+    unitEnabled: boolean;
+    /** Current contents of `configFile`, or null when it is not there. */
+    configContent: string | null;
+    /** Current contents of `unitFile`, or null when it is not there. */
+    unitContent?: string | null | undefined;
+    /** Both ends of a takeover — observed only when the stack declares one. */
+    adoption?: AdoptionObservation | undefined;
+}
+export interface AdoptionObservation {
+    /** `adopt.from` holds something: it is neither absent nor an empty directory. */
+    sourceHeld: boolean;
+    /** `dataDir` holds something — a second chain, or a sync already begun there. */
+    targetHeld: boolean;
+    /** `adopt.from` is on the filesystem the chain would land on, so moving it is a rename. */
+    sameFilesystem: boolean;
+    /** `adopt.from` holds a file named as the declared config file is: a second configuration. */
+    configBeside: boolean;
+    /** The unit `adopt.replaces` names, or null when it names none. */
+    replaced: {
+        known: boolean;
+        active: boolean;
+        enabled: boolean;
+    } | null;
+}
+export type BareMetalAction = {
+    type: 'install';
+    command: string;
+} | {
+    type: 'create-user';
+    user: string;
+} | {
+    type: 'disable-unit';
+    unit: string;
+    because: string;
+} | {
+    type: 'adopt-data-dir';
+    from: string;
+    to: string;
+    owner: string | undefined;
+    /** The old daemon's configuration, renamed in place: kept for a person, out of the new daemon's way. */
+    setAside: {
+        file: string;
+        as: string;
+    } | undefined;
+} | {
+    type: 'create-data-dir';
+    path: string;
+    owner: string | undefined;
+} | {
+    type: 'write-config';
+    path: string;
+    content: string;
+    owner: string | undefined;
+    mode: string;
+} | {
+    type: 'write-unit';
+    path: string;
+    content: string;
+} | {
+    type: 'daemon-reload';
+} | {
+    type: 'enable-unit';
+    unit: string;
+} | {
+    type: 'start-unit';
+    unit: string;
+} | {
+    type: 'restart-unit';
+    unit: string;
+    because: string;
+};
+export interface BareMetalPlan {
+    actions: BareMetalAction[];
+    /** Things this cannot bring about, each said as what is missing. */
+    refusals: string[];
+}
+/**
+ * The marker that says omnitron wrote a config file.
+ *
+ * A host's existing config was written by a person, and it holds decisions
+ * this does not know about — which interfaces to bind, how much bandwidth to
+ * use, whether to relay over Tor. Overwriting one because a template
+ * disagrees is how a provisioning tool destroys a working service, and the
+ * chain directory beside it makes that expensive to undo.
+ *
+ * So: a file that is absent is written, a file carrying this marker is
+ * updated, and a file without it is left exactly alone and reported. The
+ * operator adopts it by pasting one line, which is a decision they can see.
+ */
+export declare const OMNITRON_CONFIG_MARKER = "# managed-by: omnitron";
+/** Config files hold RPC credentials. 0640, owned by the service's user. */
+export declare const CONFIG_MODE = "0640";
+export declare function planBareMetal(spec: BareMetalSpec, observed: BareMetalObservation): BareMetalPlan;
+/** True when the host already matches the declaration. */
+export declare function isSettled(plan: BareMetalPlan): boolean;
+/** What the old daemon's configuration is renamed to when its directory is taken over. */
+export declare const SET_ASIDE_SUFFIX = ".before-omnitron";
+/**
+ * Fill a `configTemplate` with what the declaration resolved to.
+ *
+ * The same vocabulary the `env` templates use, because an operator writing
+ * both should not have to learn two:
+ *
+ *   ${port:rpc}      a named port
+ *   ${secret:name}   a resolved secret
+ *   ${dataDir}       the declared data directory
+ *   ${user}          the account it runs as
+ *   ${bindAddress}   where it should listen
+ *
+ * A placeholder with nothing behind it is left in the output verbatim rather
+ * than replaced with an empty string. `rpcpassword=` is a config file that
+ * starts a daemon with no password on a mainnet node; `rpcpassword=${secret:
+ * rpc_password}` is one that fails to start and says why.
+ */
+export declare function renderConfigTemplate(template: string, values: {
+    ports?: Record<string, number> | undefined;
+    secrets?: Record<string, string> | undefined;
+    dataDir?: string | undefined;
+    user?: string | undefined;
+    bindAddress?: string | undefined;
+}): {
+    content: string;
+    unresolved: string[];
+};
+/**
+ * The bare-metal half of a stack's declared services.
+ *
+ * A requirement describes one service two ways — as a container and as a
+ * host service — and `networkMode` picks the variant of each. Which one is
+ * used is the operator's choice, expressed by which block they filled in:
+ * a requirement with a `bareMetal` block is a host service, and its
+ * container config, if any, is what the same thing looks like on a laptop.
+ */
+export declare function selectBareMetal(name: string, requirement: {
+    bareMetal?: object | undefined;
+    docker?: unknown;
+    networkMode?: string | undefined;
+    ports?: Record<string, number> | undefined;
+    secrets?: Record<string, string | SecretRef> | undefined;
+}, override?: IServiceOverride | undefined): BareMetalSpec | null;
+//# sourceMappingURL=bare-metal-plan.d.ts.map

package/dist/infrastructure/bare-metal-plan.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"bare-metal-plan.d.ts","sourceRoot":"","sources":["../../src/infrastructure/bare-metal-plan.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAGH,OAAO,KAAK,EAAE,mBAAmB,EAAE,gBAAgB,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AAEnF,6EAA6E;AAC7E,MAAM,WAAW,aAAa;IAC5B,kCAAkC;IAClC,IAAI,EAAE,MAAM,CAAC;IACb,cAAc,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACpC,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACjC,UAAU,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAChC,gEAAgE;IAChE,aAAa,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACnC,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC7B,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC1B,eAAe,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACrC,wDAAwD;IACxD,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC9B,iEAAiE;IACjE,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACjC;;;;;;;;OAQG;IACH,UAAU,CAAC,EAAE,MAAM,EAAE,GAAG,SAAS,CAAC;IAClC,4FAA4F;IAC5F,WAAW,CAAC,EAAE,mBAAmB,GAAG,SAAS,CAAC;IAC9C,iGAAiG;IACjG,KAAK,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;KAAE,GAAG,SAAS,CAAC;CACrE;AAED,0CAA0C;AAC1C,MAAM,WAAW,oBAAoB;IACnC,6DAA6D;IAC7D,SAAS,EAAE,OAAO,CAAC;IACnB,UAAU,EAAE,OAAO,CAAC;IACpB,aAAa,EAAE,OAAO,CAAC;IACvB,SAAS,EAAE,OAAO,CAAC;IACnB,UAAU,EAAE,OAAO,CAAC;IACpB,WAAW,EAAE,OAAO,CAAC;IACrB,sEAAsE;IACtE,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,oEAAoE;IACpE,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,CAAC;IACxC,2EAA2E;IAC3E,QAAQ,CAAC,EAAE,mBAAmB,GAAG,SAAS,CAAC;CAC5C;AAED,MAAM,WAAW,mBAAmB;IAClC,iFAAiF;IACjF,UAAU,EAAE,OAAO,CAAC;IACpB,iFAAiF;IACjF,UAAU,EAAE,OAAO,CAAC;IACpB,2FAA2F;IAC3F,cAAc,EAAE,OAAO,CAAC;IACxB,8FAA8F;IAC9F,YAAY,EAAE,OAAO,CAAC;IACtB,mEAAmE;IACnE,QAAQ,EAAE;QAAE,KAAK,EAAE,OAAO,CAAC;QAAC,MAAM,EAAE,OAAO,CAAC;QAAC,OAAO,EAAE,OAAO,CAAA;KAAE,GAAG,IAAI,CAAC;CACxE;AAED,MAAM,MAAM,eAAe,GACvB;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GACpC;IAAE,IAAI,EAAE,aAAa,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GACrC;IAAE,IAAI,EAAE,cAAc,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GACvD;IACE,IAAI,EAAE,gBAAgB,CAAC;IACvB,IAAI,EAAE,MAAM,CAAC;IACb,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,GAAG,SAAS,CAAC;IAC1B,wGAAwG;IACxG,QAAQ,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,EAAE,EAAE,MAAM,CAAA;KAAE,GAAG,SAAS,CAAC;CACpD,GACD;IAAE,IAAI,EAAE,iBAAiB,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,GAAG,SAAS,CAAA;CAAE,GACpE;IAAE,IAAI,EAAE,cAAc,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,GAAG,SAAS,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAChG;IAAE,IAAI,EAAE,YAAY,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GACrD;IAAE,IAAI,EAAE,eAAe,CAAA;CAAE,GACzB;IAAE,IAAI,EAAE,aAAa,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GACrC;IAAE,IAAI,EAAE,YAAY,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GACpC;IAAE,IAAI,EAAE,cAAc,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC;AAE5D,MAAM,WAAW,aAAa;IAC5B,OAAO,EAAE,eAAe,EAAE,CAAC;IAC3B,oEAAoE;IACpE,QAAQ,EAAE,MAAM,EAAE,CAAC;CACpB;AAED;;;;;;;;;;;;GAYG;AACH,eAAO,MAAM,sBAAsB,2BAA2B,CAAC;AAE/D,4EAA4E;AAC5E,eAAO,MAAM,WAAW,SAAS,CAAC;AAElC,wBAAgB,aAAa,CAAC,IAAI,EAAE,aAAa,EAAE,QAAQ,EAAE,oBAAoB,GAAG,aAAa,CAgHhG;AAED,0DAA0D;AAC1D,wBAAgB,SAAS,CAAC,IAAI,EAAE,aAAa,GAAG,OAAO,CAEtD;AAED,0FAA0F;AAC1F,eAAO,MAAM,gBAAgB,qBAAqB,CAAC;AA8FnD;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,oBAAoB,CAClC,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE;IACN,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,SAAS,CAAC;IAC3C,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,SAAS,CAAC;IAC7C,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC7B,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC1B,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAClC,GACA;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,EAAE,CAAA;CAAE,CAqB3C;AAED;;;;;;;;GAQG;AACH,wBAAgB,eAAe,CAC7B,IAAI,EAAE,MAAM,EACZ,WAAW,EAAE;IACX,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC/B,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACjC,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,SAAS,CAAC;IAC3C,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,GAAG,SAAS,CAAC;CAC1D,EACD,QAAQ,CAAC,EAAE,gBAAgB,GAAG,SAAS,GACtC,aAAa,GAAG,IAAI,CAoFtB"}