@omnitron-dev/omnitron 0.3.0 → 0.3.2

package/dist/daemon/supervisor-transition.js

@@ -0,0 +1,503 @@
+import fs from 'node:fs/promises';
+import path from 'node:path';
+import { createHash, randomUUID } from 'node:crypto';
+import { execFile } from 'node:child_process';
+import { promisify } from 'node:util';
+import { createNullLogger } from '@omnitron-dev/titan/module/logger';
+import { renderLaunchdPlist, renderSystemdUnit } from '../commands/service-units.js';
+import { BACKEND_ACTIVITY_COUNTERS } from '../shared/dto/backend.js';
+import { RuntimeInstallation } from './runtime-installation.js';
+import { readManagedRuntime, managedRuntimeFile, managedSupervisorSocket, managedJobPid, managedGuardianStopFence, assertGuardianStopped, managedSystemdProperties, verifyManagedIsolation } from './managed-runtime.js';
+import { privateControlClient, withControlDeadline } from './private-control-client.js';
+import { createDaemonClient } from './daemon-client.js';
+import { checkBackendCandidate } from './backend-candidate.js';
+import { readBackendBootRecord } from './backend-handoff-types.js';
+import { readPrivateRecord, writePrivateRecord } from './execution-journal.js';
+import { ExecutionClient } from './execution-client.js';
+import { PidManager } from './pid-manager.js';
+import { checkSystemGuardian, guardianUnitProperties, replaceGuardianExec } from './system-guardian-unit.js';
+import { expandPath } from '../shared/paths.js';
+import { projectExecutionIdentity, compareExecutionIdentityEvidence, describeExecutionIdentityDrift } from '../shared/execution-identity.js';
+const hash = (value) => createHash('sha256').update(JSON.stringify(value)).digest('hex');
+const execute = promisify(execFile);
+async function native(command, args) {
+    return (await execute(command, args, { encoding: 'utf8', timeout: 40_000, maxBuffer: 1024 * 1024 })).stdout;
+}
+const domain = () => `gui/${process.getuid()}`;
+const systemctlScope = (config) => config.scope === 'user' ? ['--user'] : [];
+async function systemGuardianFile(config, requireLoaded) {
+    if (process.platform !== 'linux' || process.getuid?.() !== 0)
+        throw Error('System guardian replacement requires the root-owned Linux instance');
+    const facts = await managedSystemdProperties(config, config.backend.unit, guardianUnitProperties);
+    checkSystemGuardian(config.backend.unit, facts, requireLoaded);
+    const file = facts['FragmentPath'];
+    if (await fs.realpath(file) !== file)
+        throw Error('A system guardian requires a canonical unit file');
+    return file;
+}
+async function assertSystemGuardianProcess(config, pid) {
+    const root = path.join(config.instanceHome, 'runtime/releases', config.backend.artifact);
+    const args = (await fs.readFile(`/proc/${pid}/cmdline`, 'utf8')).split('\0').filter(Boolean);
+    if (await fs.realpath(`/proc/${pid}/exe`) !== path.join(root, 'node') ||
+        args.length !== 3 || args[1] !== path.join(root, 'packages/0/dist/daemon/managed-entry.js') || args[2] !== 'backend')
+        throw Error('Actual guardian process differs from the sealed system unit');
+}
+async function unitFile(config) {
+    let file;
+    if (process.platform === 'darwin') {
+        file = (await native('/bin/launchctl', ['print', `${domain()}/${config.backend.label}`])).match(/^\s*path = (.+)$/m)?.[1];
+    }
+    else if (process.platform === 'linux') {
+        file = config.scope === 'system' ? await systemGuardianFile(config, true) :
+            (await native('systemctl', ['--user', 'show', config.backend.unit, '--property=FragmentPath', '--value'])).trim();
+    }
+    if (!file || !path.isAbsolute(file))
+        throw new Error('The loaded guardian has no verifiable unit file');
+    await assertUnitFile(file);
+    return file;
+}
+async function assertUnitFile(file) {
+    const [stat, parent] = await Promise.all([fs.lstat(file), fs.lstat(path.dirname(file))]);
+    if (!stat.isFile() || stat.isSymbolicLink() || stat.size > 128 * 1024 || (stat.mode & 0o022) ||
+        !parent.isDirectory() || parent.isSymbolicLink() || (parent.mode & 0o022) ||
+        (process.getuid && (stat.uid !== process.getuid() || parent.uid !== process.getuid()))) {
+        throw new Error('The guardian unit and its directory must be owned by the instance user and not writable by other users');
+    }
+}
+/** Unit directories are commonly 0755; record writers intentionally require 0700. */
+async function replaceUnit(file, expected, contents) {
+    await assertUnitFile(file);
+    if (!expected.includes(await fs.readFile(file, 'utf8')))
+        throw new Error('The guardian unit changed since preparation');
+    const temporary = path.join(path.dirname(file), `.omnitron-${randomUUID()}`);
+    try {
+        const handle = await fs.open(temporary, 'wx', 0o600);
+        try {
+            await handle.writeFile(contents);
+            await handle.sync();
+        }
+        finally {
+            await handle.close();
+        }
+        await fs.rename(temporary, file);
+        const parent = await fs.open(path.dirname(file), 'r');
+        try {
+            await parent.sync();
+        }
+        finally {
+            await parent.close();
+        }
+    }
+    finally {
+        await fs.unlink(temporary).catch(error => { if (error.code !== 'ENOENT')
+            throw error; });
+    }
+}
+async function inventory(config) {
+    const client = new ExecutionClient(path.join(config.directory, 'owner.sock'), createNullLogger());
+    try {
+        return await client.connect();
+    }
+    finally {
+        await client.close();
+    }
+}
+function assertSameOwner(plan, current) {
+    if (current.status.owner.id !== plan.owner.id || current.status.owner.pid !== plan.owner.pid || current.inventoryDigest !== plan.owner.inventory) {
+        const expected = plan.owner.identity?.owner?.id === plan.owner.id && plan.owner.identity.owner.pid === plan.owner.pid ? plan.owner.identity : undefined;
+        const detail = describeExecutionIdentityDrift(compareExecutionIdentityEvidence(expected, projectExecutionIdentity(current)));
+        const action = plan.phase === 'prepared' && !plan.checkpoint
+            ? 'Review current status and prepare a new guardian transition plan.'
+            : 'Reconcile this transition checkpoint before preparing another plan.';
+        throw new Error('Execution owner or application inventory changed; automatic guardian transition is refused. ' + detail + '. ' + action);
+    }
+}
+async function readPlan(file) {
+    const stat = await fs.lstat(file);
+    if (stat.size > 1024 * 1024)
+        throw new Error('Supervisor transition record exceeds its size limit');
+    const plan = await readPrivateRecord(file);
+    if (!plan || plan.protocol !== 1 || !/^[0-9a-f-]{36}$/.test(plan.id) || !Number.isFinite(Date.parse(plan.createdAt)) ||
+        !['prepared', 'preparing', 'retired', 'stopped', 'configured', 'started', 'complete'].includes(plan.phase) ||
+        !path.isAbsolute(plan.before?.instanceHome ?? '') || plan.after?.instanceHome !== plan.before.instanceHome ||
+        !['user', 'system'].includes(plan.before.scope) || plan.after.scope !== plan.before.scope ||
+        !path.isAbsolute(plan.unit?.file ?? '') || typeof plan.unit.before !== 'string' || typeof plan.unit.after !== 'string' ||
+        !/^[a-f0-9]{64}$/.test(plan.backend?.runtime ?? '') || !Number.isSafeInteger(plan.backend.pid) || plan.backend.pid < 1 ||
+        !path.isAbsolute(plan.backend.control ?? '') || !path.isAbsolute(plan.backend.socket ?? '') ||
+        !plan.owner?.id || !Number.isSafeInteger(plan.owner.pid) || plan.owner.pid < 1 || !/^[a-f0-9]{64}$/.test(plan.owner.inventory ?? '') ||
+        !Number.isSafeInteger(plan.guardianPid) || plan.guardianPid < 1 ||
+        (plan.linuxStop !== undefined && (!plan.linuxStop || !path.isAbsolute(plan.linuxStop.group ?? '') ||
+            [plan.linuxStop.directoryId, plan.linuxStop.guardianProcess, plan.linuxStop.backendProcess].some(value => !/^[a-f0-9]{64}$/.test(value)))) ||
+        (plan.selectionRevision !== undefined && (!Number.isSafeInteger(plan.selectionRevision) || plan.selectionRevision < 1)) ||
+        (plan.checkpoint !== undefined && !path.isAbsolute(plan.checkpoint)) ||
+        hash({ ...plan.before, backend: plan.after.backend }) !== hash(plan.after) ||
+        plan.before.backend.label !== plan.after.backend.label || plan.before.backend.unit !== plan.after.backend.unit) {
+        throw new Error('Invalid supervisor transition record');
+    }
+    if (plan.before.scope === 'system' && (plan.unit.file !== '/etc/systemd/system/' + plan.before.backend.unit ||
+        replaceGuardianExec(plan.unit.before, plan.before, plan.after) !== plan.unit.after))
+        throw Error('Invalid system guardian unit transition');
+    if (path.resolve(file) !== path.join(plan.before.instanceHome, 'runtime', `supervisor-transition-${plan.id}.json`)) {
+        throw new Error('Supervisor transition record is outside its instance');
+    }
+    return plan;
+}
+/** Install a management artifact and save a reviewable plan; running services are untouched. */
+export async function prepareSupervisorTransition(directory, socket) {
+    const client = createDaemonClient(socket, 15_000);
+    let controlAddress;
+    let backendPid;
+    try {
+        backendPid = (await client.ping()).pid;
+        controlAddress = await (await client.service('OmnitronBackend')).controlAddress();
+    }
+    finally {
+        await client.disconnect();
+    }
+    const control = await privateControlClient(controlAddress.socket, 'OmnitronBackendControl');
+    let installation = null;
+    try {
+        const current = await control.service.status();
+        const config = await readManagedRuntime(current.instanceHome);
+        if (!config || config.scope === 'system' && (process.platform !== 'linux' || process.getuid?.() !== 0))
+            throw new Error('Automatic guardian replacement requires independent user services or a root-owned Linux system instance');
+        if (path.dirname(controlAddress.socket) !== config.directory || !current.runtime.owner || current.retired || current.ticketId) {
+            throw new Error('The backend is not ready for a guardian transition in this instance');
+        }
+        const guardianPid = await managedJobPid(config, 'backend');
+        await verifyManagedIsolation(config, current.runtime.owner.pid, guardianPid);
+        const file = await unitFile(config);
+        if (config.scope === 'system')
+            await assertSystemGuardianProcess(config, guardianPid);
+        installation = await RuntimeInstallation.open(config.instanceHome, { existing: true });
+        if (!installation)
+            throw new Error('No permanent installation exists');
+        return await installation.exclusive(async () => {
+            if (installation.activation())
+                throw new Error('Finish the pending backend activation first');
+            const selected = installation.selection();
+            const running = await checkBackendCandidate(path.dirname(path.dirname(current.entry)));
+            if (selected?.current !== running.runtimeHash)
+                throw new Error('Running backend does not match the startup selection');
+            const candidate = await installation.install(path.resolve(directory));
+            await fs.access(path.join(candidate.directory, 'daemon/managed-entry.js'));
+            await fs.access(path.join(candidate.directory, 'daemon/backend-supervisor-entry.js'));
+            const view = await inventory(config);
+            const identity = projectExecutionIdentity(view);
+            const after = { ...config, backend: { ...config.backend, artifact: candidate.runtimeHash } };
+            const inputs = { scope: 'user', execPath: candidate.execPath,
+                entryPath: path.join(candidate.directory, 'daemon/managed-entry.js'), nodeArgs: [], args: ['backend'],
+                workdir: path.dirname(candidate.directory), path: config.environment['PATH'] ?? process.env['PATH'] ?? '/usr/bin:/bin',
+                environment: { OMNITRON_HOME: config.instanceHome }, label: config.backend.label,
+                stderrLog: path.join(config.directory, 'supervisor.log') };
+            const beforeUnit = await fs.readFile(file, 'utf8');
+            const afterUnit = config.scope === 'system' ? replaceGuardianExec(beforeUnit, config, after) :
+                process.platform === 'darwin' ? renderLaunchdPlist(inputs) : renderSystemdUnit(inputs);
+            const plan = { protocol: 1, id: randomUUID(), phase: 'prepared', createdAt: new Date().toISOString(),
+                before: config, after, unit: { file, before: beforeUnit, after: afterUnit },
+                backend: { runtime: running.runtimeHash, pid: backendPid, control: controlAddress.socket, socket: (await readCertificateSocket(config, backendPid)) },
+                owner: { id: view.status.owner.id, pid: view.status.owner.pid, inventory: view.inventoryDigest, ...(identity ? { identity } : {}) }, guardianPid };
+            plan.selectionRevision = selected.revision;
+            if (process.platform === 'linux')
+                plan.linuxStop = await managedGuardianStopFence(config, guardianPid, backendPid);
+            const record = path.join(installation.directory, `supervisor-transition-${plan.id}.json`);
+            await writePrivateRecord(record, plan);
+            return { file: record, plan: summarize(plan) };
+        });
+    }
+    finally {
+        await installation?.close();
+        await control.close();
+    }
+}
+async function readCertificateSocket(config, pid) {
+    const { BackendRecoveryJournal } = await import('./backend-recovery-journal.js');
+    const journal = new BackendRecoveryJournal(config.directory);
+    try {
+        const state = journal.read();
+        if (state?.status !== 'ready' || state.record.previousPid !== pid)
+            throw new Error('Wait for a current recovery certificate before preparing the guardian');
+        return expandPath(state.record.daemonConfig.socketPath);
+    }
+    finally {
+        await journal.close();
+    }
+}
+async function verifyStopBoundary(plan, retired) {
+    if (!plan.linuxStop) {
+        if (plan.phase === 'prepared' && !plan.checkpoint)
+            throw Error('This Linux guardian plan predates the stop fence. Prepare a new plan before retirement.');
+        throw Error('This Linux checkpoint predates the stop fence. Reconcile the original backend and ticket; an unretired ticket can be aborted before preparing a new plan.');
+    }
+    await managedGuardianStopFence(plan.before, plan.guardianPid, plan.backend.pid, plan.linuxStop, retired);
+}
+function summarize(plan) {
+    return { id: plan.id, phase: plan.phase, instanceHome: plan.before.instanceHome,
+        from: plan.before.backend.artifact, to: plan.after.backend.artifact, backendRuntime: plan.backend.runtime,
+        ownerPid: plan.owner.pid, backendPid: plan.backend.pid, guardianPid: plan.guardianPid,
+        unit: plan.unit.file, checkpoint: plan.checkpoint ?? null, result: plan.result ?? null };
+}
+/** Resume a private plan. Only the backend OS job is stopped; its owner is never signalled. */
+export async function applySupervisorTransition(file, options = {}) {
+    file = path.resolve(file);
+    let plan = await readPlan(file);
+    if (plan.phase === 'complete')
+        return options.checkOnly ? { ...summarize(plan), checked: false } : summarize(plan);
+    if (options.checkOnly && plan.phase !== 'prepared')
+        throw Error('Guardian transition already started; reconcile its checkpoint before continuing');
+    const installation = options.checkOnly ? await RuntimeInstallation.openReadOnly(plan.before.instanceHome) :
+        await RuntimeInstallation.open(plan.before.instanceHome, { existing: true });
+    if (!installation)
+        throw new Error('No permanent installation exists');
+    try {
+        const inspectOrApply = async () => {
+            plan = await readPlan(file);
+            if (options.checkOnly && plan.phase !== 'prepared')
+                throw Error('Guardian transition changed during inspection; reconcile its checkpoint');
+            if (plan.phase === 'complete')
+                return;
+            const active = await readManagedRuntime(plan.before.instanceHome);
+            if (hash(active) !== hash(plan.before) && hash(active) !== hash(plan.after))
+                throw new Error('Supervision configuration changed since preparation');
+            // The selected backend, replacement guardian and its rollback may be three distinct runtimes.
+            for (const artifact of new Set([plan.backend.runtime, plan.before.backend.artifact, plan.after.backend.artifact])) {
+                await installation.artifact(artifact);
+            }
+            const selected = options.checkOnly ? installation.settledSelection() : installation.selection();
+            if (selected?.current !== plan.backend.runtime || (['prepared', 'preparing', 'retired'].includes(plan.phase) &&
+                plan.selectionRevision !== undefined && selected.revision !== plan.selectionRevision))
+                throw new Error('Backend selection changed since preparation');
+            assertSameOwner(plan, await inventory(plan.before));
+            if (plan.before.scope === 'system') {
+                await systemGuardianFile(plan.before, ['prepared', 'preparing', 'retired'].includes(plan.phase));
+                if (['prepared', 'preparing', 'retired'].includes(plan.phase) && PidManager.isProcessAlive(plan.guardianPid)) {
+                    await assertSystemGuardianProcess(plan.before, plan.guardianPid);
+                    await verifyManagedIsolation(plan.before, plan.owner.pid, plan.guardianPid, PidManager.isProcessAlive(plan.backend.pid) ? plan.backend.pid : undefined);
+                }
+            }
+            if (plan.phase === 'started') {
+                await assertUnitFile(plan.unit.file);
+                if (hash(active) !== hash(plan.after) || await fs.readFile(plan.unit.file, 'utf8') !== plan.unit.after) {
+                    throw new Error('Prepared guardian configuration changed before resume');
+                }
+                return;
+            }
+            if (plan.phase === 'prepared' || plan.phase === 'preparing') {
+                await assertUnitFile(plan.unit.file);
+                if (await fs.readFile(plan.unit.file, 'utf8') !== plan.unit.before)
+                    throw new Error('The guardian unit changed since preparation');
+                const intent = installation.activation();
+                if (intent && intent.checkpoint !== plan.checkpoint)
+                    throw new Error('Another runtime activation is in progress');
+                if (hash(active) !== hash(plan.before) || await managedJobPid(plan.before, 'backend') !== plan.guardianPid)
+                    throw new Error('The original guardian is no longer running');
+                const control = await privateControlClient(plan.backend.control, 'OmnitronBackendControl');
+                try {
+                    const state = await control.service.status();
+                    if (state.pid !== undefined && state.pid !== plan.backend.pid)
+                        throw new Error('The original backend changed');
+                    if (plan.phase === 'prepared') {
+                        if (intent || state.retired || state.ticketId)
+                            throw Error('Another backend transfer has started; reconcile its checkpoint');
+                        if (state.pid !== plan.backend.pid || state.instanceHome !== plan.before.instanceHome ||
+                            state.runtime.owner?.id !== plan.owner.id || state.runtime.owner.pid !== plan.owner.pid ||
+                            state.runtime.phase !== 'active' || state.runtime.connection?.status !== 'connected') {
+                            throw Error('The original backend is not connected to the reviewed resident owner');
+                        }
+                        const blockers = state.runtime.blockers;
+                        if (!blockers || !BACKEND_ACTIVITY_COUNTERS.every(key => Object.hasOwn(blockers, key)) ||
+                            Object.values(blockers).some(count => count !== 0)) {
+                            throw Error('Active or unknown backend operations block guardian transition');
+                        }
+                    }
+                    if (process.platform === 'linux')
+                        await verifyStopBoundary(plan, false);
+                    if (options.checkOnly) {
+                        if (hash(installation.settledSelection()) !== hash(selected) || hash(await readPlan(file)) !== hash(plan)) {
+                            throw Error('Guardian transition changed during inspection');
+                        }
+                        return;
+                    }
+                    plan.phase = 'preparing';
+                    await writePrivateRecord(file, plan);
+                    const prepared = state.ticketId ? { ticketId: state.ticketId, file: path.join(plan.before.directory, `handoff-${state.ticketId}.json`) }
+                        : await control.service.prepare({ candidateId: plan.id });
+                    try {
+                        if (!/^[0-9a-f-]{36}$/i.test(prepared.ticketId) ||
+                            prepared.file !== path.join(plan.before.directory, `handoff-${prepared.ticketId}.json`)) {
+                            throw Error('Unexpected private checkpoint path for this guardian transition');
+                        }
+                        const record = await readBackendBootRecord(prepared.file), ticket = record.state.ticket;
+                        if (ticket.id !== prepared.ticketId || ticket.to.controllerId !== plan.id || ticket.ownerId !== plan.owner.id ||
+                            ticket.from.ownerId !== plan.owner.id || ticket.to.ownerId !== plan.owner.id || record.previousPid !== plan.backend.pid ||
+                            record.state.executionInventory !== plan.owner.inventory)
+                            throw Error('Prepared checkpoint does not match the reviewed guardian transition');
+                        plan.checkpoint = prepared.file;
+                        await writePrivateRecord(file, plan);
+                        const activation = installation.activation();
+                        if (activation && (activation.checkpoint !== prepared.file || activation.candidate !== plan.backend.runtime || activation.previous !== plan.backend.runtime)) {
+                            throw Error('Another runtime activation is in progress');
+                        }
+                        // The drain can outlive a child process or a change in cgroup membership.
+                        assertSameOwner(plan, await inventory(plan.before));
+                        if (process.platform === 'linux')
+                            await verifyStopBoundary(plan, false);
+                        if (!activation)
+                            installation.beginActivation(plan.backend.runtime, plan.backend.runtime, prepared.file);
+                    }
+                    catch (refusal) {
+                        // Only this invocation's new ticket is known not to have been retired.
+                        // Preserve any existing or ambiguous activation for reconciliation.
+                        if (!state.ticketId && !intent) {
+                            try {
+                                if (installation.activation())
+                                    throw Error('Installation intent requires reconciliation', { cause: refusal });
+                                await control.service.abort({ ticketId: prepared.ticketId });
+                                plan.phase = 'prepared';
+                                delete plan.checkpoint;
+                                await writePrivateRecord(file, plan);
+                            }
+                            catch (recovery) {
+                                throw new AggregateError([refusal, recovery], 'Guardian preflight failed after drain; reconcile the checkpoint before continuing', { cause: recovery });
+                            }
+                        }
+                        throw refusal;
+                    }
+                    await control.service.retire({ ticketId: prepared.ticketId });
+                    plan.phase = 'retired';
+                    await writePrivateRecord(file, plan);
+                }
+                finally {
+                    await control.close();
+                }
+            }
+            if (plan.phase === 'retired') {
+                // After a crash during bootout, both recorded processes may already be gone.
+                if (PidManager.isProcessAlive(plan.guardianPid)) {
+                    if (await managedJobPid(plan.before, 'backend') !== plan.guardianPid)
+                        throw new Error('A different guardian now owns the OS job');
+                    if (process.platform === 'darwin')
+                        await native('/bin/launchctl', ['bootout', `${domain()}/${plan.before.backend.label}`]);
+                    else {
+                        if (plan.before.scope === 'system')
+                            await systemGuardianFile(plan.before, true);
+                        assertSameOwner(plan, await inventory(plan.before));
+                        await verifyStopBoundary(plan, true);
+                        await native('systemctl', [...systemctlScope(plan.before), 'stop', plan.before.backend.unit]);
+                    }
+                }
+                const stoppedBy = Date.now() + 35_000;
+                while ((PidManager.isProcessAlive(plan.guardianPid) || PidManager.isProcessAlive(plan.backend.pid)) && Date.now() < stoppedBy) {
+                    await new Promise(resolve => setTimeout(resolve, 100));
+                }
+                if (PidManager.isProcessAlive(plan.guardianPid) || PidManager.isProcessAlive(plan.backend.pid))
+                    throw new Error('Old guardian/backend still exists; no replacement will be started');
+                if (process.platform === 'linux')
+                    await assertGuardianStopped(plan.before, plan.linuxStop);
+                assertSameOwner(plan, await inventory(plan.before));
+                plan.phase = 'stopped';
+                await writePrivateRecord(file, plan);
+            }
+            if (plan.phase === 'stopped') {
+                if (process.platform === 'linux') {
+                    if (PidManager.isProcessAlive(plan.guardianPid) || PidManager.isProcessAlive(plan.backend.pid)) {
+                        throw Error('The recorded guardian/backend still exists. Reconcile before replacing its unit.');
+                    }
+                    await assertGuardianStopped(plan.before, plan.linuxStop);
+                }
+                await replaceUnit(plan.unit.file, [plan.unit.before, plan.unit.after], plan.unit.after);
+                await writePrivateRecord(managedRuntimeFile(plan.before.instanceHome), plan.after);
+                plan.phase = 'configured';
+                await writePrivateRecord(file, plan);
+            }
+            if (plan.phase === 'configured') {
+                // Publish intent before bootstrapping. If the CLI dies, resume observes
+                // the same job before deciding whether another start is necessary.
+                plan.phase = 'started';
+                await writePrivateRecord(file, plan);
+            }
+        };
+        if (options.checkOnly) {
+            await inspectOrApply();
+            return { ...summarize(plan), checked: true };
+        }
+        await installation.exclusive(inspectOrApply);
+    }
+    finally {
+        await installation.close();
+    }
+    plan = await readPlan(file);
+    if (plan.phase === 'complete')
+        return summarize(plan);
+    // The installation lease is released before the new guardian recovers the backend.
+    let guardianPid = await managedJobPid(plan.after, 'backend').catch(() => null);
+    if (!guardianPid) {
+        if (PidManager.isProcessAlive(plan.guardianPid) || PidManager.isProcessAlive(plan.backend.pid))
+            throw new Error('Recorded old processes still exist; refusing bootstrap');
+        if (process.platform === 'darwin')
+            await native('/bin/launchctl', ['bootstrap', domain(), plan.unit.file]);
+        else {
+            await assertGuardianStopped(plan.after, plan.linuxStop);
+            const scope = systemctlScope(plan.after);
+            await native('systemctl', [...scope, 'daemon-reload']);
+            if (plan.after.scope === 'system')
+                await systemGuardianFile(plan.after, true);
+            await native('systemctl', [...scope, 'start', plan.after.backend.unit]);
+        }
+    }
+    const client = createDaemonClient(plan.backend.socket, 4000);
+    try {
+        const until = Date.now() + 150_000;
+        let reason = 'Guardian has not reported readiness';
+        while (Date.now() < until) {
+            let state;
+            let supervisor;
+            try {
+                guardianPid = await managedJobPid(plan.after, 'backend');
+                supervisor = await privateControlClient(managedSupervisorSocket(plan.after), 'OmnitronSupervisor', 4000);
+                state = await withControlDeadline(supervisor.service.status(), 4000, 'Guardian status timed out');
+                reason = state.reason ?? state.state;
+            }
+            catch (error) {
+                reason = error instanceof Error ? error.message : String(error);
+            }
+            finally {
+                await supervisor?.close();
+            }
+            if (state) {
+                if (state.pid !== guardianPid || guardianPid === plan.guardianPid)
+                    throw new Error('Guardian identity disagrees with the replacement OS job');
+                if (state.state === 'ready' && state.backendPid && state.backendPid !== plan.backend.pid && guardianPid) {
+                    if (plan.after.scope === 'system')
+                        await assertSystemGuardianProcess(plan.after, guardianPid);
+                    const status = await client.status();
+                    if (status.pid !== state.backendPid)
+                        throw new Error('Public backend identity disagrees with the guardian');
+                    assertSameOwner(plan, await inventory(plan.after));
+                    await verifyManagedIsolation(plan.after, plan.owner.pid, guardianPid);
+                    const selected = await RuntimeInstallation.open(plan.after.instanceHome, { existing: true });
+                    try {
+                        if (!selected || selected.selection()?.current !== plan.backend.runtime || selected.activation()) {
+                            throw new Error('Guardian has not committed the expected backend selection');
+                        }
+                        if (hash(await readManagedRuntime(plan.after.instanceHome)) !== hash(plan.after))
+                            throw new Error('Guardian configuration changed during transition');
+                    }
+                    finally {
+                        await selected?.close();
+                    }
+                    plan.phase = 'complete';
+                    plan.result = { backendPid: status.pid, guardianPid, ownerPid: plan.owner.pid };
+                    await writePrivateRecord(file, plan);
+                    return summarize(plan);
+                }
+            }
+            await new Promise(resolve => setTimeout(resolve, 250));
+        }
+        throw new Error(`Guardian transition did not become ready: ${reason}. Applications remain with their owner. Inspect and resume ${file}`);
+    }
+    finally {
+        await client.disconnect();
+    }
+}
+//# sourceMappingURL=supervisor-transition.js.map

package/dist/daemon/supervisor-transition.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"supervisor-transition.js","sourceRoot":"","sources":["../../src/daemon/supervisor-transition.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAClC,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACrD,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AACtC,OAAO,EAAE,gBAAgB,EAAE,MAAM,mCAAmC,CAAC;AACrE,OAAO,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,MAAM,8BAA8B,CAAC;AACrF,OAAO,EAAE,yBAAyB,EAAE,MAAM,0BAA0B,CAAC;AACrE,OAAO,EAAE,mBAAmB,EAAE,MAAM,2BAA2B,CAAC;AAChE,OAAO,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,uBAAuB,EAAE,aAAa,EAAE,wBAAwB,EAAE,qBAAqB,EAAE,wBAAwB,EAAE,sBAAsB,EAAuB,MAAM,sBAAsB,CAAC;AAC9O,OAAO,EAAE,oBAAoB,EAAE,mBAAmB,EAAE,MAAM,6BAA6B,CAAC;AACxF,OAAO,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AAIxD,OAAO,EAAE,qBAAqB,EAAE,MAAM,wBAAwB,CAAC;AAC/D,OAAO,EAAE,qBAAqB,EAAE,MAAM,4BAA4B,CAAC;AACnE,OAAO,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,MAAM,wBAAwB,CAAC;AAC/E,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AACxD,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC9C,OAAO,EAAE,mBAAmB,EAAE,sBAAsB,EAAE,mBAAmB,EAAE,MAAM,2BAA2B,CAAC;AAE7G,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAChD,OAAO,EAAE,wBAAwB,EAAE,gCAAgC,EAAE,8BAA8B,EAAkC,MAAM,iCAAiC,CAAC;AAmB7K,MAAM,IAAI,GAAG,CAAC,KAAc,EAAE,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAClG,MAAM,OAAO,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;AACpC,KAAK,UAAU,MAAM,CAAC,OAAe,EAAE,IAAc;IACnD,OAAO,CAAC,MAAM,OAAO,CAAC,OAAO,EAAE,IAAI,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,GAAG,IAAI,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC;AAC9G,CAAC;AACD,MAAM,MAAM,GAAG,GAAG,EAAE,CAAC,OAAO,OAAO,CAAC,MAAO,EAAE,EAAE,CAAC;AAEhD,MAAM,cAAc,GAAG,CAAC,MAAsB,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,KAAK,MAAM,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;AAC7F,KAAK,UAAU,kBAAkB,CAAC,MAAsB,EAAE,aAAsB;IAC9E,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,IAAI,OAAO,CAAC,MAAM,EAAE,EAAE,KAAK,CAAC;QAAE,MAAM,KAAK,CAAC,oEAAoE,CAAC,CAAC;IAChJ,MAAM,KAAK,GAAG,MAAM,wBAAwB,CAAC,MAAM,EAAE,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,sBAAsB,CAAC,CAAC;IAClG,mBAAmB,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,EAAE,aAAa,CAAC,CAAC;IAC/D,MAAM,IAAI,GAAG,KAAK,CAAC,cAAc,CAAE,CAAC;IACpC,IAAI,MAAM,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,IAAI;QAAE,MAAM,KAAK,CAAC,kDAAkD,CAAC,CAAC;IACtG,OAAO,IAAI,CAAC;AACd,CAAC;AAED,KAAK,UAAU,2BAA2B,CAAC,MAAsB,EAAE,GAAW;IAC5E,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,YAAY,EAAE,kBAAkB,EAAE,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IACzF,MAAM,IAAI,GAAG,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,SAAS,GAAG,UAAU,EAAE,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAC7F,IAAI,MAAM,EAAE,CAAC,QAAQ,CAAC,SAAS,GAAG,MAAM,CAAC,KAAK,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC;QACjE,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,yCAAyC,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,SAAS;QACtH,MAAM,KAAK,CAAC,6DAA6D,CAAC,CAAC;AAC/E,CAAC;AAED,KAAK,UAAU,QAAQ,CAAC,MAAsB;IAC5C,IAAI,IAAwB,CAAC;IAC7B,IAAI,OAAO,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAClC,IAAI,GAAG,CAAC,MAAM,MAAM,CAAC,gBAAgB,EAAE,CAAC,OAAO,EAAE,GAAG,MAAM,EAAE,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,mBAAmB,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IAC5H,CAAC;SAAM,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;QACxC,IAAI,GAAG,MAAM,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,kBAAkB,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC;YACzE,CAAC,MAAM,MAAM,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,yBAAyB,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IACtH,CAAC;IACD,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;IACxG,MAAM,cAAc,CAAC,IAAI,CAAC,CAAC;IAC3B,OAAO,IAAI,CAAC;AACd,CAAC;AAED,KAAK,UAAU,cAAc,CAAC,IAAY;IACxC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IACzF,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,IAAI,CAAC,cAAc,EAAE,IAAI,IAAI,CAAC,IAAI,GAAG,GAAG,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC;QACxF,CAAC,MAAM,CAAC,WAAW,EAAE,IAAI,MAAM,CAAC,cAAc,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI,GAAG,KAAK,CAAC;QACzE,CAAC,OAAO,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,KAAK,OAAO,CAAC,MAAM,EAAE,IAAI,MAAM,CAAC,GAAG,KAAK,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,EAAE,CAAC;QAC3F,MAAM,IAAI,KAAK,CAAC,wGAAwG,CAAC,CAAC;IAC5H,CAAC;AACH,CAAC;AAED,qFAAqF;AACrF,KAAK,UAAU,WAAW,CAAC,IAAY,EAAE,QAAkB,EAAE,QAAgB;IAC3E,MAAM,cAAc,CAAC,IAAI,CAAC,CAAC;IAC3B,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;IACxH,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,aAAa,UAAU,EAAE,EAAE,CAAC,CAAC;IAC7E,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;QACrD,IAAI,CAAC;YAAC,MAAM,MAAM,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;YAAC,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;QAAC,CAAC;gBAAS,CAAC;YAAC,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;QAAC,CAAC;QAChG,MAAM,EAAE,CAAC,MAAM,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;QACjC,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,GAAG,CAAC,CAAC;QACtD,IAAI,CAAC;YAAC,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;QAAC,CAAC;gBAAS,CAAC;YAAC,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;QAAC,CAAC;IAChE,CAAC;YAAS,CAAC;QAAC,MAAM,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,GAAG,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAAC,CAAC;AACpI,CAAC;AAED,KAAK,UAAU,SAAS,CAAC,MAAsB;IAC7C,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,YAAY,CAAC,EAAE,gBAAgB,EAAE,CAAC,CAAC;IAClG,IAAI,CAAC;QAAC,OAAO,MAAM,MAAM,CAAC,OAAO,EAAE,CAAC;IAAC,CAAC;YAAS,CAAC;QAAC,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;IAAC,CAAC;AAC1E,CAAC;AAED,SAAS,eAAe,CAAC,IAA0B,EAAE,OAA8C;IACjG,IAAI,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,KAAK,IAAI,CAAC,KAAK,CAAC,EAAE,IAAI,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,KAAK,IAAI,CAAC,KAAK,CAAC,GAAG,IAAI,OAAO,CAAC,eAAe,KAAK,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,CAAC;QACjJ,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,EAAE,EAAE,KAAK,IAAI,CAAC,KAAK,CAAC,EAAE,IAAI,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,KAAK,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;QACxJ,MAAM,MAAM,GAAG,8BAA8B,CAAC,gCAAgC,CAAC,QAAQ,EAAE,wBAAwB,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;QAC7H,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,KAAK,UAAU,IAAI,CAAC,IAAI,CAAC,UAAU;YAC1D,CAAC,CAAC,mEAAmE;YACrE,CAAC,CAAC,qEAAqE,CAAC;QAC1E,MAAM,IAAI,KAAK,CAAC,8FAA8F,GAAG,MAAM,GAAG,IAAI,GAAG,MAAM,CAAC,CAAC;IAC3I,CAAC;AACH,CAAC;AAED,KAAK,UAAU,QAAQ,CAAC,IAAY;IAClC,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAClC,IAAI,IAAI,CAAC,IAAI,GAAG,IAAI,GAAG,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;IACpG,MAAM,IAAI,GAAG,MAAM,iBAAiB,CAAuB,IAAI,CAAC,CAAC;IACjE,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,QAAQ,KAAK,CAAC,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAChH,CAAC,CAAC,UAAU,EAAE,WAAW,EAAE,SAAS,EAAE,SAAS,EAAE,YAAY,EAAE,SAAS,EAAE,UAAU,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC;QAC1G,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,EAAE,YAAY,IAAI,EAAE,CAAC,IAAI,IAAI,CAAC,KAAK,EAAE,YAAY,KAAK,IAAI,CAAC,MAAM,CAAC,YAAY;QAC1G,CAAC,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,KAAK,KAAK,IAAI,CAAC,MAAM,CAAC,KAAK;QACzF,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,IAAI,EAAE,CAAC,IAAI,OAAO,IAAI,CAAC,IAAI,CAAC,MAAM,KAAK,QAAQ,IAAI,OAAO,IAAI,CAAC,IAAI,CAAC,KAAK,KAAK,QAAQ;QACtH,CAAC,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,IAAI,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,GAAG,GAAG,CAAC;QACtH,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,IAAI,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,IAAI,EAAE,CAAC;QAC3F,CAAC,IAAI,CAAC,KAAK,EAAE,EAAE,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,IAAI,EAAE,CAAC;QACpI,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,IAAI,CAAC,WAAW,GAAG,CAAC;QAC/D,CAAC,IAAI,CAAC,SAAS,KAAK,SAAS,IAAI,CAAC,CAAC,IAAI,CAAC,SAAS,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,IAAI,EAAE,CAAC;YAC/F,CAAC,IAAI,CAAC,SAAS,CAAC,WAAW,EAAE,IAAI,CAAC,SAAS,CAAC,eAAe,EAAE,IAAI,CAAC,SAAS,CAAC,cAAc,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAC5I,CAAC,IAAI,CAAC,iBAAiB,KAAK,SAAS,IAAI,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,iBAAiB,CAAC,IAAI,IAAI,CAAC,iBAAiB,GAAG,CAAC,CAAC,CAAC;QACvH,CAAC,IAAI,CAAC,UAAU,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACpE,IAAI,CAAC,EAAE,GAAG,IAAI,CAAC,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,KAAK,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC;QAC1E,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,KAAK,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,IAAI,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,KAAK,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;QACnH,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;IAC1D,CAAC;IACD,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK,KAAK,QAAQ,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,sBAAsB,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI;QACvG,mBAAmB,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,MAAM,KAAK,CAAC,yCAAyC,CAAC,CAAC;IAChJ,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,YAAY,EAAE,SAAS,EAAE,yBAAyB,IAAI,CAAC,EAAE,OAAO,CAAC,EAAE,CAAC;QACnH,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC;IAC1E,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,gGAAgG;AAChG,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAAC,SAAiB,EAAE,MAAe;IAClF,MAAM,MAAM,GAAG,kBAAkB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAClD,IAAI,cAAkC,CAAC;IACvC,IAAI,UAAkB,CAAC;IACvB,IAAI,CAAC;QACH,UAAU,GAAG,CAAC,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC;QACvC,cAAc,GAAG,MAAM,CAAC,MAAM,MAAM,CAAC,OAAO,CAAoB,iBAAiB,CAAC,CAAC,CAAC,cAAc,EAAE,CAAC;IACvG,CAAC;YACO,CAAC;QAAC,MAAM,MAAM,CAAC,UAAU,EAAE,CAAC;IAAC,CAAC;IACtC,MAAM,OAAO,GAAG,MAAM,oBAAoB,CAAwB,cAAc,CAAC,MAAM,EAAE,wBAAwB,CAAC,CAAC;IACnH,IAAI,YAAY,GAA+B,IAAI,CAAC;IACpD,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;QAC/C,MAAM,MAAM,GAAG,MAAM,kBAAkB,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;QAC9D,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,KAAK,KAAK,QAAQ,IAAI,CAAC,OAAO,CAAC,QAAQ,KAAK,OAAO,IAAI,OAAO,CAAC,MAAM,EAAE,EAAE,KAAK,CAAC,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,yGAAyG,CAAC,CAAC;QACnO,IAAI,IAAI,CAAC,OAAO,CAAC,cAAc,CAAC,MAAM,CAAC,KAAK,MAAM,CAAC,SAAS,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,IAAI,OAAO,CAAC,OAAO,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;YAC9H,MAAM,IAAI,KAAK,CAAC,qEAAqE,CAAC,CAAC;QACzF,CAAC;QACD,MAAM,WAAW,GAAG,MAAM,aAAa,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;QAC3D,MAAM,sBAAsB,CAAC,MAAM,EAAE,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;QAC7E,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,MAAM,CAAC,CAAC;QACpC,IAAI,MAAM,CAAC,KAAK,KAAK,QAAQ;YAAE,MAAM,2BAA2B,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;QACtF,YAAY,GAAG,MAAM,mBAAmB,CAAC,IAAI,CAAC,MAAM,CAAC,YAAY,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;QACvF,IAAI,CAAC,YAAY;YAAE,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;QACvE,OAAO,MAAM,YAAY,CAAC,SAAS,CAAC,KAAK,IAAI,EAAE;YAC7C,IAAI,YAAa,CAAC,UAAU,EAAE;gBAAE,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;YAC/F,MAAM,QAAQ,GAAG,YAAa,CAAC,SAAS,EAAE,CAAC;YAC3C,MAAM,OAAO,GAAG,MAAM,qBAAqB,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YACvF,IAAI,QAAQ,EAAE,OAAO,KAAK,OAAO,CAAC,WAAW;gBAAE,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC;YACvH,MAAM,SAAS,GAAG,MAAM,YAAa,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC;YACvE,MAAM,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE,yBAAyB,CAAC,CAAC,CAAC;YAC3E,MAAM,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE,oCAAoC,CAAC,CAAC,CAAC;YACtF,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,MAAM,CAAC,CAAC;YACrC,MAAM,QAAQ,GAAG,wBAAwB,CAAC,IAAI,CAAC,CAAC;YAChD,MAAM,KAAK,GAAmB,EAAE,GAAG,MAAM,EAAE,OAAO,EAAE,EAAE,GAAG,MAAM,CAAC,OAAO,EAAE,QAAQ,EAAE,SAAS,CAAC,WAAW,EAAE,EAAE,CAAC;YAC7G,MAAM,MAAM,GAAG,EAAE,KAAK,EAAE,MAAe,EAAE,QAAQ,EAAE,SAAS,CAAC,QAAQ;gBACnE,SAAS,EAAE,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE,yBAAyB,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,SAAS,CAAC;gBACrG,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,IAAI,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,eAAe;gBACtH,WAAW,EAAE,EAAE,aAAa,EAAE,MAAM,CAAC,YAAY,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,OAAO,CAAC,KAAK;gBAChF,SAAS,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,gBAAgB,CAAC,EAAE,CAAC;YAC7D,MAAM,UAAU,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;YACnD,MAAM,SAAS,GAAG,MAAM,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,mBAAmB,CAAC,UAAU,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC;gBAC5F,OAAO,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAC;YACzF,MAAM,IAAI,GAAyB,EAAE,QAAQ,EAAE,CAAC,EAAE,EAAE,EAAE,UAAU,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;gBACxH,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,KAAK,EAAE,SAAS,EAAE;gBAC3E,OAAO,EAAE,EAAE,OAAO,EAAE,OAAO,CAAC,WAAW,EAAE,GAAG,EAAE,UAAU,EAAE,OAAO,EAAE,cAAc,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,MAAM,qBAAqB,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC,EAAE;gBACrJ,KAAK,EAAE,EAAE,EAAE,EAAE,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,EAAE,GAAG,EAAE,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,SAAS,EAAE,IAAI,CAAC,eAAe,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,WAAW,EAAE,CAAC;YACrJ,IAAI,CAAC,iBAAiB,GAAG,QAAQ,CAAC,QAAQ,CAAC;YAC3C,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO;gBAAE,IAAI,CAAC,SAAS,GAAG,MAAM,wBAAwB,CAAC,MAAM,EAAE,WAAW,EAAE,UAAU,CAAC,CAAC;YACnH,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,YAAa,CAAC,SAAS,EAAE,yBAAyB,IAAI,CAAC,EAAE,OAAO,CAAC,CAAC;YAC3F,MAAM,kBAAkB,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;YACvC,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC;QACjD,CAAC,CAAC,CAAC;IACL,CAAC;YAAS,CAAC;QAAC,MAAM,YAAY,EAAE,KAAK,EAAE,CAAC;QAAC,MAAM,OAAO,CAAC,KAAK,EAAE,CAAC;IAAC,CAAC;AACnE,CAAC;AAED,KAAK,UAAU,qBAAqB,CAAC,MAAsB,EAAE,GAAW;IACtE,MAAM,EAAE,sBAAsB,EAAE,GAAG,MAAM,MAAM,CAAC,+BAA+B,CAAC,CAAC;IACjF,MAAM,OAAO,GAAG,IAAI,sBAAsB,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IAC7D,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;QAC7B,IAAI,KAAK,EAAE,MAAM,KAAK,OAAO,IAAI,KAAK,CAAC,MAAM,CAAC,WAAW,KAAK,GAAG;YAAE,MAAM,IAAI,KAAK,CAAC,uEAAuE,CAAC,CAAC;QAC5J,OAAO,UAAU,CAAC,KAAK,CAAC,MAAM,CAAC,YAAY,CAAC,UAAU,CAAC,CAAC;IAC1D,CAAC;YAAS,CAAC;QAAC,MAAM,OAAO,CAAC,KAAK,EAAE,CAAC;IAAC,CAAC;AACtC,CAAC;AAED,KAAK,UAAU,kBAAkB,CAAC,IAA0B,EAAE,OAAgB;IAC5E,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;QACpB,IAAI,IAAI,CAAC,KAAK,KAAK,UAAU,IAAI,CAAC,IAAI,CAAC,UAAU;YAAE,MAAM,KAAK,CAAC,yFAAyF,CAAC,CAAC;QAC1J,MAAM,KAAK,CAAC,2JAA2J,CAAC,CAAC;IAC3K,CAAC;IACD,MAAM,wBAAwB,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;AAC3G,CAAC;AAED,SAAS,SAAS,CAAC,IAA0B;IAC3C,OAAO,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,YAAY,EAAE,IAAI,CAAC,MAAM,CAAC,YAAY;QAC7E,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,EAAE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,EAAE,cAAc,EAAE,IAAI,CAAC,OAAO,CAAC,OAAO;QACzG,QAAQ,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,UAAU,EAAE,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW;QACrF,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,IAAI,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,IAAI,IAAI,EAAE,CAAC;AAC7F,CAAC;AAED,+FAA+F;AAC/F,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAAC,IAAY,EAAE,OAAO,GAA4B,EAAE;IACjG,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1B,IAAI,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,CAAC;IAChC,IAAI,IAAI,CAAC,KAAK,KAAK,UAAU;QAAE,OAAO,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,GAAG,SAAS,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;IACnH,IAAI,OAAO,CAAC,SAAS,IAAI,IAAI,CAAC,KAAK,KAAK,UAAU;QAAE,MAAM,KAAK,CAAC,iFAAiF,CAAC,CAAC;IACnJ,MAAM,YAAY,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,mBAAmB,CAAC,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC;QACzG,MAAM,mBAAmB,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,YAAY,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;IAC/E,IAAI,CAAC,YAAY;QAAE,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;IACvE,IAAI,CAAC;QACH,MAAM,cAAc,GAAG,KAAK,IAAI,EAAE;YAChC,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,CAAC;YAC5B,IAAI,OAAO,CAAC,SAAS,IAAI,IAAI,CAAC,KAAK,KAAK,UAAU;gBAAE,MAAM,KAAK,CAAC,yEAAyE,CAAC,CAAC;YAC3I,IAAI,IAAI,CAAC,KAAK,KAAK,UAAU;gBAAE,OAAO;YACtC,MAAM,MAAM,GAAG,MAAM,kBAAkB,CAAC,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;YAClE,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;YACpJ,8FAA8F;YAC9F,KAAK,MAAM,QAAQ,IAAI,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,QAAQ,EAAE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC;gBAClH,MAAM,YAAY,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;YACxC,CAAC;YACD,MAAM,QAAQ,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,YAAY,CAAC,gBAAgB,EAAE,CAAC,CAAC,CAAC,YAAY,CAAC,SAAS,EAAE,CAAC;YAChG,IAAI,QAAQ,EAAE,OAAO,KAAK,IAAI,CAAC,OAAO,CAAC,OAAO,IAAI,CAAC,CAAC,UAAU,EAAE,WAAW,EAAE,SAAS,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC;gBACxG,IAAI,CAAC,iBAAiB,KAAK,SAAS,IAAI,QAAQ,CAAC,QAAQ,KAAK,IAAI,CAAC,iBAAiB,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;YAC1J,eAAe,CAAC,IAAI,EAAE,MAAM,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;YACpD,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;gBACnC,MAAM,kBAAkB,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,UAAU,EAAE,WAAW,EAAE,SAAS,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;gBACjG,IAAI,CAAC,UAAU,EAAE,WAAW,EAAE,SAAS,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,UAAU,CAAC,cAAc,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC;oBAC7G,MAAM,2BAA2B,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC;oBACjE,MAAM,sBAAsB,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,IAAI,CAAC,WAAW,EAAE,UAAU,CAAC,cAAc,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;gBAC1J,CAAC;YACH,CAAC;YACD,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;gBAC7B,MAAM,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBACrC,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,MAAM,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,KAAK,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;oBACvG,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAC;gBAC3E,CAAC;gBACD,OAAO;YACT,CAAC;YACD,IAAI,IAAI,CAAC,KAAK,KAAK,UAAU,IAAI,IAAI,CAAC,KAAK,KAAK,WAAW,EAAE,CAAC;gBAC5D,MAAM,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBACrC,IAAI,MAAM,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,KAAK,IAAI,CAAC,IAAI,CAAC,MAAM;oBAAE,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;gBACnI,MAAM,MAAM,GAAG,YAAY,CAAC,UAAU,EAAE,CAAC;gBACzC,IAAI,MAAM,IAAI,MAAM,CAAC,UAAU,KAAK,IAAI,CAAC,UAAU;oBAAE,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;gBAClH,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,MAAM,aAAa,CAAC,IAAI,CAAC,MAAM,EAAE,SAAS,CAAC,KAAK,IAAI,CAAC,WAAW;oBAAE,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;gBAC1K,MAAM,OAAO,GAAG,MAAM,oBAAoB,CAAwB,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,wBAAwB,CAAC,CAAC;gBAClH,IAAI,CAAC;oBACH,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;oBAC7C,IAAI,KAAK,CAAC,GAAG,KAAK,SAAS,IAAI,KAAK,CAAC,GAAG,KAAK,IAAI,CAAC,OAAO,CAAC,GAAG;wBAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;oBAC/G,IAAI,IAAI,CAAC,KAAK,KAAK,UAAU,EAAE,CAAC;wBAC9B,IAAI,MAAM,IAAI,KAAK,CAAC,OAAO,IAAI,KAAK,CAAC,QAAQ;4BAAE,MAAM,KAAK,CAAC,gEAAgE,CAAC,CAAC;wBAC7H,IAAI,KAAK,CAAC,GAAG,KAAK,IAAI,CAAC,OAAO,CAAC,GAAG,IAAI,KAAK,CAAC,YAAY,KAAK,IAAI,CAAC,MAAM,CAAC,YAAY;4BACjF,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,KAAK,IAAI,CAAC,KAAK,CAAC,EAAE,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,KAAK,IAAI,CAAC,KAAK,CAAC,GAAG;4BACvF,KAAK,CAAC,OAAO,CAAC,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,UAAU,EAAE,MAAM,KAAK,WAAW,EAAE,CAAC;4BACzF,MAAM,KAAK,CAAC,sEAAsE,CAAC,CAAC;wBACtF,CAAC;wBACD,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC;wBACxC,IAAI,CAAC,QAAQ,IAAI,CAAC,yBAAyB,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;4BAClF,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,KAAK,CAAC,CAAC,EAAE,CAAC;4BACvD,MAAM,KAAK,CAAC,gEAAgE,CAAC,CAAC;wBAChF,CAAC;oBACH,CAAC;oBACD,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO;wBAAE,MAAM,kBAAkB,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;oBACxE,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC;wBACtB,IAAI,IAAI,CAAC,YAAY,CAAC,gBAAgB,EAAE,CAAC,KAAK,IAAI,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,CAAC,KAAK,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;4BAC1G,MAAM,KAAK,CAAC,+CAA+C,CAAC,CAAC;wBAC/D,CAAC;wBACD,OAAO;oBACT,CAAC;oBACD,IAAI,CAAC,KAAK,GAAG,WAAW,CAAC;oBAAC,MAAM,kBAAkB,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;oBAC/D,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,WAAW,KAAK,CAAC,QAAQ,OAAO,CAAC,EAAE;wBACtI,CAAC,CAAC,MAAM,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,WAAW,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC;oBAC5D,IAAI,CAAC;wBACH,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC;4BAC3C,QAAQ,CAAC,IAAI,KAAK,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,WAAW,QAAQ,CAAC,QAAQ,OAAO,CAAC,EAAE,CAAC;4BAC5F,MAAM,KAAK,CAAC,iEAAiE,CAAC,CAAC;wBACjF,CAAC;wBACD,MAAM,MAAM,GAAG,MAAM,qBAAqB,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC;wBACxF,IAAI,MAAM,CAAC,EAAE,KAAK,QAAQ,CAAC,QAAQ,IAAI,MAAM,CAAC,EAAE,CAAC,YAAY,KAAK,IAAI,CAAC,EAAE,IAAI,MAAM,CAAC,OAAO,KAAK,IAAI,CAAC,KAAK,CAAC,EAAE;4BACzG,MAAM,CAAC,IAAI,CAAC,OAAO,KAAK,IAAI,CAAC,KAAK,CAAC,EAAE,IAAI,MAAM,CAAC,EAAE,CAAC,OAAO,KAAK,IAAI,CAAC,KAAK,CAAC,EAAE,IAAI,MAAM,CAAC,WAAW,KAAK,IAAI,CAAC,OAAO,CAAC,GAAG;4BACvH,MAAM,CAAC,KAAK,CAAC,kBAAkB,KAAK,IAAI,CAAC,KAAK,CAAC,SAAS;4BAAE,MAAM,KAAK,CAAC,qEAAqE,CAAC,CAAC;wBACjJ,IAAI,CAAC,UAAU,GAAG,QAAQ,CAAC,IAAI,CAAC;wBAAC,MAAM,kBAAkB,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;wBACtE,MAAM,UAAU,GAAG,YAAY,CAAC,UAAU,EAAE,CAAC;wBAC7C,IAAI,UAAU,IAAI,CAAC,UAAU,CAAC,UAAU,KAAK,QAAQ,CAAC,IAAI,IAAI,UAAU,CAAC,SAAS,KAAK,IAAI,CAAC,OAAO,CAAC,OAAO,IAAI,UAAU,CAAC,QAAQ,KAAK,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;4BAC7J,MAAM,KAAK,CAAC,2CAA2C,CAAC,CAAC;wBAC3D,CAAC;wBACD,0EAA0E;wBAC1E,eAAe,CAAC,IAAI,EAAE,MAAM,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;wBACpD,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO;4BAAE,MAAM,kBAAkB,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;wBACxE,IAAI,CAAC,UAAU;4BAAE,YAAY,CAAC,eAAe,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC;oBAC3G,CAAC;oBAAC,OAAO,OAAO,EAAE,CAAC;wBACjB,uEAAuE;wBACvE,oEAAoE;wBACpE,IAAI,CAAC,KAAK,CAAC,QAAQ,IAAI,CAAC,MAAM,EAAE,CAAC;4BAC/B,IAAI,CAAC;gCACH,IAAI,YAAY,CAAC,UAAU,EAAE;oCAAE,MAAM,KAAK,CAAC,6CAA6C,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;gCAC9G,MAAM,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,QAAQ,EAAE,QAAQ,CAAC,QAAQ,EAAE,CAAC,CAAC;gCAC7D,IAAI,CAAC,KAAK,GAAG,UAAU,CAAC;gCAAC,OAAO,IAAI,CAAC,UAAU,CAAC;gCAChD,MAAM,kBAAkB,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;4BACvC,CAAC;4BAAC,OAAO,QAAQ,EAAE,CAAC;gCAClB,MAAM,IAAI,cAAc,CAAC,CAAC,OAAO,EAAE,QAAQ,CAAC,EAAE,mFAAmF,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;4BAC1J,CAAC;wBACH,CAAC;wBACD,MAAM,OAAO,CAAC;oBAChB,CAAC;oBACD,MAAM,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,QAAQ,CAAC,QAAQ,EAAE,CAAC,CAAC;oBAC9D,IAAI,CAAC,KAAK,GAAG,SAAS,CAAC;oBAAC,MAAM,kBAAkB,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;gBAC/D,CAAC;wBAAS,CAAC;oBAAC,MAAM,OAAO,CAAC,KAAK,EAAE,CAAC;gBAAC,CAAC;YACtC,CAAC;YACD,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;gBAC7B,6EAA6E;gBAC7E,IAAI,UAAU,CAAC,cAAc,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC;oBAChD,IAAI,MAAM,aAAa,CAAC,IAAI,CAAC,MAAM,EAAE,SAAS,CAAC,KAAK,IAAI,CAAC,WAAW;wBAAE,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;oBAClI,IAAI,OAAO,CAAC,QAAQ,KAAK,QAAQ;wBAAE,MAAM,MAAM,CAAC,gBAAgB,EAAE,CAAC,SAAS,EAAE,GAAG,MAAM,EAAE,IAAI,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;yBACtH,CAAC;wBACJ,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK,KAAK,QAAQ;4BAAE,MAAM,kBAAkB,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;wBAChF,eAAe,CAAC,IAAI,EAAE,MAAM,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;wBACpD,MAAM,kBAAkB,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;wBACrC,MAAM,MAAM,CAAC,WAAW,EAAE,CAAC,GAAG,cAAc,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;oBAChG,CAAC;gBACH,CAAC;gBACD,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC;gBACtC,OAAO,CAAC,UAAU,CAAC,cAAc,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,UAAU,CAAC,cAAc,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,EAAE,CAAC;oBAC9H,MAAM,IAAI,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC;gBACzD,CAAC;gBACD,IAAI,UAAU,CAAC,cAAc,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,UAAU,CAAC,cAAc,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC;oBAAE,MAAM,IAAI,KAAK,CAAC,mEAAmE,CAAC,CAAC;gBACrL,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO;oBAAE,MAAM,qBAAqB,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;gBAC3F,eAAe,CAAC,IAAI,EAAE,MAAM,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;gBACpD,IAAI,CAAC,KAAK,GAAG,SAAS,CAAC;gBAAC,MAAM,kBAAkB,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;YAC/D,CAAC;YACD,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;gBAC7B,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;oBACjC,IAAI,UAAU,CAAC,cAAc,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,UAAU,CAAC,cAAc,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;wBAC/F,MAAM,KAAK,CAAC,kFAAkF,CAAC,CAAC;oBAClG,CAAC;oBACD,MAAM,qBAAqB,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;gBAC3D,CAAC;gBACD,MAAM,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;gBACxF,MAAM,kBAAkB,CAAC,kBAAkB,CAAC,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;gBACnF,IAAI,CAAC,KAAK,GAAG,YAAY,CAAC;gBAAC,MAAM,kBAAkB,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;YAClE,CAAC;YACD,IAAI,IAAI,CAAC,KAAK,KAAK,YAAY,EAAE,CAAC;gBAChC,wEAAwE;gBACxE,mEAAmE;gBACnE,IAAI,CAAC,KAAK,GAAG,SAAS,CAAC;gBAAC,MAAM,kBAAkB,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;YAC/D,CAAC;QACH,CAAC,CAAC;QACF,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC;YACtB,MAAM,cAAc,EAAE,CAAC;YACvB,OAAO,EAAE,GAAG,SAAS,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QAC/C,CAAC;QACD,MAAM,YAAY,CAAC,SAAS,CAAC,cAAc,CAAC,CAAC;IAC/C,CAAC;YAAS,CAAC;QAAC,MAAM,YAAY,CAAC,KAAK,EAAE,CAAC;IAAC,CAAC;IACzC,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,CAAC;IAC5B,IAAI,IAAI,CAAC,KAAK,KAAK,UAAU;QAAE,OAAO,SAAS,CAAC,IAAI,CAAC,CAAC;IACtD,mFAAmF;IACnF,IAAI,WAAW,GAAG,MAAM,aAAa,CAAC,IAAI,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;IAC/E,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,IAAI,UAAU,CAAC,cAAc,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,UAAU,CAAC,cAAc,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAC;QAC1K,IAAI,OAAO,CAAC,QAAQ,KAAK,QAAQ;YAAE,MAAM,MAAM,CAAC,gBAAgB,EAAE,CAAC,WAAW,EAAE,MAAM,EAAE,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;aACtG,CAAC;YACJ,MAAM,qBAAqB,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;YACxD,MAAM,KAAK,GAAG,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACzC,MAAM,MAAM,CAAC,WAAW,EAAE,CAAC,GAAG,KAAK,EAAE,eAAe,CAAC,CAAC,CAAC;YACvD,IAAI,IAAI,CAAC,KAAK,CAAC,KAAK,KAAK,QAAQ;gBAAE,MAAM,kBAAkB,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;YAC9E,MAAM,MAAM,CAAC,WAAW,EAAE,CAAC,GAAG,KAAK,EAAE,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;QAC1E,CAAC;IACH,CAAC;IACD,MAAM,MAAM,GAAG,kBAAkB,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IAC7D,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC;QACnC,IAAI,MAAM,GAAG,qCAAqC,CAAC;QACnD,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,EAAE,CAAC;YAC1B,IAAI,KAA0E,CAAC;YAC/E,IAAI,UAAkG,CAAC;YACvG,IAAI,CAAC;gBACH,WAAW,GAAG,MAAM,aAAa,CAAC,IAAI,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;gBACzD,UAAU,GAAG,MAAM,oBAAoB,CAA2B,uBAAuB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,oBAAoB,EAAE,IAAI,CAAC,CAAC;gBACnI,KAAK,GAAG,MAAM,mBAAmB,CAAC,UAAU,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,2BAA2B,CAAC,CAAC;gBAClG,MAAM,GAAG,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,KAAK,CAAC;YACvC,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBAAC,MAAM,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAAC,CAAC;oBAC5E,CAAC;gBAAC,MAAM,UAAU,EAAE,KAAK,EAAE,CAAC;YAAC,CAAC;YACtC,IAAI,KAAK,EAAE,CAAC;gBACV,IAAI,KAAK,CAAC,GAAG,KAAK,WAAW,IAAI,WAAW,KAAK,IAAI,CAAC,WAAW;oBAAE,MAAM,IAAI,KAAK,CAAC,yDAAyD,CAAC,CAAC;gBAC9I,IAAI,KAAK,CAAC,KAAK,KAAK,OAAO,IAAI,KAAK,CAAC,UAAU,IAAI,KAAK,CAAC,UAAU,KAAK,IAAI,CAAC,OAAO,CAAC,GAAG,IAAI,WAAW,EAAE,CAAC;oBACxG,IAAI,IAAI,CAAC,KAAK,CAAC,KAAK,KAAK,QAAQ;wBAAE,MAAM,2BAA2B,CAAC,IAAI,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;oBAC9F,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,MAAM,EAAE,CAAC;oBACrC,IAAI,MAAM,CAAC,GAAG,KAAK,KAAK,CAAC,UAAU;wBAAE,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;oBAC5G,eAAe,CAAC,IAAI,EAAE,MAAM,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;oBACnD,MAAM,sBAAsB,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;oBACtE,MAAM,QAAQ,GAAG,MAAM,mBAAmB,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,YAAY,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;oBAC7F,IAAI,CAAC;wBACH,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC,SAAS,EAAE,EAAE,OAAO,KAAK,IAAI,CAAC,OAAO,CAAC,OAAO,IAAI,QAAQ,CAAC,UAAU,EAAE,EAAE,CAAC;4BACjG,MAAM,IAAI,KAAK,CAAC,2DAA2D,CAAC,CAAC;wBAC/E,CAAC;wBACD,IAAI,IAAI,CAAC,MAAM,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,KAAK,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC;4BAAE,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;oBACxJ,CAAC;4BAAS,CAAC;wBAAC,MAAM,QAAQ,EAAE,KAAK,EAAE,CAAC;oBAAC,CAAC;oBACtC,IAAI,CAAC,KAAK,GAAG,UAAU,CAAC;oBAAC,IAAI,CAAC,MAAM,GAAG,EAAE,UAAU,EAAE,MAAM,CAAC,GAAG,EAAE,WAAW,EAAE,QAAQ,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC;oBACzG,MAAM,kBAAkB,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;oBACrC,OAAO,SAAS,CAAC,IAAI,CAAC,CAAC;gBACzB,CAAC;YACH,CAAC;YACD,MAAM,IAAI,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC;QACzD,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,6CAA6C,MAAM,8DAA8D,IAAI,EAAE,CAAC,CAAC;IAC3I,CAAC;YAAS,CAAC;QAAC,MAAM,MAAM,CAAC,UAAU,EAAE,CAAC;IAAC,CAAC;AAC1C,CAAC"}

package/dist/daemon/system-guardian-cgroup.d.ts

@@ -0,0 +1,16 @@
+export interface GuardianStopFence {
+    group: string;
+    directoryId: string;
+    guardianProcess: string;
+    backendProcess: string;
+}
+export declare function guardianControlGroup(unit: string, guardianPid: number, facts: Record<string, string>): string;
+/** cgroup.procs lists direct processes only. An occupied descendant is also killed by systemd. */
+export declare function guardianGroupIdentity(directory: string, permitted: number[]): string;
+/** During preparation only, a concurrent native query may briefly add a child.
+ * Re-read the complete unit and fence. Never signal, adopt or allow that PID. */
+export declare function prepareGuardianFence(guardianPid: number, backendPid: number, inspect: () => Promise<GuardianStopFence>): Promise<GuardianStopFence>;
+export declare function checkGuardianStopFence(group: string, guardianPid: number, backendPid: number, expected?: GuardianStopFence, retired?: boolean): GuardianStopFence;
+/** systemd may remove the cgroup after stopping the unit. Never confuse another MainPID with an empty job. */
+export declare function verifyStoppedGuardian(unit: string, fence: GuardianStopFence | undefined, facts: Record<string, string>): void;
+//# sourceMappingURL=system-guardian-cgroup.d.ts.map

package/dist/daemon/system-guardian-cgroup.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"system-guardian-cgroup.d.ts","sourceRoot":"","sources":["../../src/daemon/system-guardian-cgroup.ts"],"names":[],"mappings":"AAKA,MAAM,WAAW,iBAAiB;IAChC,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;IACpB,eAAe,EAAE,MAAM,CAAC;IACxB,cAAc,EAAE,MAAM,CAAC;CACxB;AASD,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,MAAM,CAQ7G;AAED,kGAAkG;AAClG,wBAAgB,qBAAqB,CAAC,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,MAAM,CAiEpF;AAED;iFACiF;AACjF,wBAAsB,oBAAoB,CAAC,WAAW,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,OAAO,CAAC,iBAAiB,CAAC,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAuBzJ;AAED,wBAAgB,sBAAsB,CACpC,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,iBAAiB,EAAE,OAAO,UAAQ,GACpG,iBAAiB,CAuCnB;AAED,8GAA8G;AAC9G,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,iBAAiB,GAAG,SAAS,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,IAAI,CAgB7H"}