@omnitron-dev/omnitron 0.3.1 → 0.3.2

package/dist/daemon/backend-candidate.js

@@ -0,0 +1,129 @@
+import fs from 'node:fs/promises';
+import path from 'node:path';
+import { createHash } from 'node:crypto';
+import { execFile } from 'node:child_process';
+import { promisify } from 'node:util';
+import { readBuildStamp } from '../shared/build-stamp.js';
+import { verifyRuntimeArtifact } from '../shared/runtime-artifact.js';
+import { readExecutionCapabilities } from './execution-capabilities.js';
+import { compareMigrationChecksumMetadata } from '../database/migration-registry-compatibility.js';
+const execute = promisify(execFile);
+/** An enrolled worker also reads the controller's PostgreSQL authority ledger. */
+export function backendSchemaScope(config) {
+    return config.role === 'slave' && (config.cluster === undefined || config.cluster?.enabled === false) ? 'node' : 'all';
+}
+async function readBackendMigrations(directory, scope) {
+    const hash = createHash('sha256');
+    const files = new Map(), directories = [];
+    const walk = async (root, prefix) => {
+        if (!(await fs.lstat(root)).isDirectory())
+            throw new Error('Database migration directories must not be symlinks');
+        directories.push(prefix);
+        hash.update(JSON.stringify(['directory', prefix]));
+        for (const item of (await fs.readdir(root, { withFileTypes: true })).sort((a, b) => a.name.localeCompare(b.name))) {
+            const relative = path.join(prefix, item.name);
+            if (item.isDirectory())
+                await walk(path.join(root, item.name), relative);
+            else if (item.isFile() && item.name.endsWith('.js')) {
+                const content = await fs.readFile(path.join(root, item.name));
+                const digest = createHash('sha256').update(content).digest('hex');
+                files.set(relative, { hash: digest, content: content.toString('utf8') });
+                hash.update(JSON.stringify([relative, digest]));
+            }
+            else if (item.isSymbolicLink())
+                throw new Error('Database migration files must not be symlinks');
+        }
+    };
+    if (scope === 'all')
+        await walk(path.join(directory, 'database', 'migrations'), 'master');
+    const local = path.join(directory, 'database', 'slave-migrations');
+    if (scope === 'node') {
+        if (!(await fs.lstat(path.join(local, 'index.js'))).isFile())
+            throw new Error('A regular worker migration registry is required');
+    }
+    else {
+        try {
+            await fs.lstat(local);
+        }
+        catch (error) {
+            if (error.code === 'ENOENT')
+                return { digest: hash.digest('hex'), files, directories };
+            throw error;
+        }
+    }
+    await walk(local, 'node');
+    return { digest: hash.digest('hex'), files, directories };
+}
+export async function backendMigrationDigest(directory, scope = 'all') {
+    return (await readBackendMigrations(directory, scope)).digest;
+}
+export async function assertBackendMigrationsCompatible(current, next, scope) {
+    const [before, after] = await Promise.all([readBackendMigrations(current, scope), readBackendMigrations(next, scope)]);
+    if (before.digest === after.digest)
+        return { kind: 'identical' };
+    try {
+        if (JSON.stringify(before.directories) !== JSON.stringify(after.directories) || before.files.size !== after.files.size) {
+            throw new Error('Migration files or directories changed');
+        }
+        const changes = [];
+        for (const [file, source] of before.files) {
+            const target = after.files.get(file);
+            if (!target)
+                throw new Error(`Migration file was removed: ${file}`);
+            if (source.hash === target.hash)
+                continue;
+            const registry = file === 'master/index.js' ? 'OMNITRON_MIGRATIONS' : file === 'node/index.js' ? 'SLAVE_MIGRATIONS' : null;
+            if (!registry)
+                throw new Error(`Migration body changed: ${file}`);
+            const metadata = compareMigrationChecksumMetadata(source.content, target.content, registry);
+            for (const change of metadata) {
+                if (!before.files.has(path.join(path.dirname(file), `${change.name}.js`)))
+                    throw new Error('Migration body is missing');
+                changes.push({ ...change, registry });
+            }
+        }
+        if (!changes.length)
+            throw new Error('No compatible checksum metadata change found');
+        return { kind: 'checksum-metadata', changes };
+    }
+    catch (cause) {
+        throw new Error(`This update changes database migrations (${scope}). Prepare a separate compatible database transition before replacing the backend.`, { cause });
+    }
+}
+/** Validate an already-built local artifact; never build, install dependencies or migrate here. */
+export async function checkBackendCandidate(directory, currentEntry, expectedRuntimeHash) {
+    directory = await fs.realpath(directory);
+    const runtimeRoot = path.resolve(directory, '../../..');
+    if (directory !== path.join(runtimeRoot, 'packages/0/dist')) {
+        throw new Error('Backend replacement requires an isolated runtime from scripts/freeze-backend.mjs; pass its packages/0/dist directory');
+    }
+    const runtime = await verifyRuntimeArtifact(runtimeRoot, expectedRuntimeHash);
+    const execPath = path.join(runtimeRoot, 'node');
+    const entry = path.join(directory, 'daemon', 'daemon-entry.js');
+    const stat = await fs.lstat(entry);
+    if (!stat.isFile() || stat.isSymbolicLink() || (stat.mode & 0o022) !== 0 ||
+        (process.getuid && stat.uid !== process.getuid()))
+        throw new Error('Backend entry must be a regular file owned by this user and not writable by other users');
+    const build = readBuildStamp(directory);
+    if (!build || build.dirty)
+        throw new Error('Backend activation requires a stamped build from a clean commit');
+    const entryHash = createHash('sha256').update(await fs.readFile(entry)).digest('hex');
+    const checked = await execute(execPath, [entry, '--check-backend'], { timeout: 30_000, maxBuffer: 1024 * 1024 });
+    const answer = JSON.parse(checked.stdout.trim());
+    const executionRequirements = readExecutionCapabilities(answer.executionRequirements);
+    if (answer.protocol !== 1 || answer.build?.commit !== build.commit || answer.build.dirty)
+        throw new Error('Candidate execution protocol or build identity does not match');
+    if (currentEntry) {
+        const currentDist = path.dirname(path.dirname(await fs.realpath(currentEntry)));
+        await assertBackendMigrationsCompatible(currentDist, directory, 'all');
+    }
+    return { directory, entry, entryHash, build, runtimeRoot, runtimeHash: runtime.sha256, execPath, executionRequirements,
+        ...(answer.schemaExpansionProtocol === 1 ? { schemaExpansionProtocol: 1 } : {}) };
+}
+export async function verifyBackendEntry(artifact) {
+    await verifyRuntimeArtifact(artifact.runtimeRoot, artifact.runtimeHash);
+    const hash = createHash('sha256').update(await fs.readFile(artifact.entry)).digest('hex');
+    if (hash !== artifact.entryHash)
+        throw new Error('Backend entry changed after validation; activation is refused');
+}
+//# sourceMappingURL=backend-candidate.js.map

package/dist/daemon/backend-candidate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"backend-candidate.js","sourceRoot":"","sources":["../../src/daemon/backend-candidate.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAClC,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AACtC,OAAO,EAAE,cAAc,EAAmB,MAAM,0BAA0B,CAAC;AAC3E,OAAO,EAAE,qBAAqB,EAAE,MAAM,+BAA+B,CAAC;AACtE,OAAO,EAAE,yBAAyB,EAA8B,MAAM,6BAA6B,CAAC;AAEpG,OAAO,EAAE,gCAAgC,EAAgC,MAAM,iDAAiD,CAAC;AAEjI,MAAM,OAAO,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;AAUpC,kFAAkF;AAClF,MAAM,UAAU,kBAAkB,CAAC,MAA+C;IAChF,OAAO,MAAM,CAAC,IAAI,KAAK,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,KAAK,SAAS,IAAI,MAAM,CAAC,OAAO,EAAE,OAAO,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC;AACzH,CAAC;AAED,KAAK,UAAU,qBAAqB,CAAC,SAAiB,EAAE,KAAyB;IAC/E,MAAM,IAAI,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC;IAClC,MAAM,KAAK,GAAG,IAAI,GAAG,EAA6C,EAAE,WAAW,GAAa,EAAE,CAAC;IAC/F,MAAM,IAAI,GAAG,KAAK,EAAE,IAAY,EAAE,MAAc,EAAiB,EAAE;QACjE,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,WAAW,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;QAClH,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACzB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;QACnD,KAAK,MAAM,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;YAClH,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;YAC9C,IAAI,IAAI,CAAC,WAAW,EAAE;gBAAE,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,EAAE,QAAQ,CAAC,CAAC;iBACpE,IAAI,IAAI,CAAC,MAAM,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;gBACpD,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;gBAC9D,MAAM,MAAM,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;gBAClE,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;gBACzE,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;YAClD,CAAC;iBAAM,IAAI,IAAI,CAAC,cAAc,EAAE;gBAAE,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;QACrG,CAAC;IACH,CAAC,CAAC;IACF,IAAI,KAAK,KAAK,KAAK;QAAE,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,UAAU,EAAE,YAAY,CAAC,EAAE,QAAQ,CAAC,CAAC;IAC1F,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,UAAU,EAAE,kBAAkB,CAAC,CAAC;IACnE,IAAI,KAAK,KAAK,MAAM,EAAE,CAAC;QACrB,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;IACnI,CAAC;SAAM,CAAC;QACN,IAAI,CAAC;YAAC,MAAM,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAAC,CAAC;QAC9B,OAAO,KAAK,EAAE,CAAC;YAAC,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;gBAAE,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC;YAAC,MAAM,KAAK,CAAC;QAAC,CAAC;IACnJ,CAAC;IACD,MAAM,IAAI,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;IAC1B,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC;AAC5D,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAAC,SAAiB,EAAE,KAAK,GAAuB,KAAK;IAC/F,OAAO,CAAC,MAAM,qBAAqB,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC;AAChE,CAAC;AAMD,MAAM,CAAC,KAAK,UAAU,iCAAiC,CAAC,OAAe,EAAE,IAAY,EAAE,KAAyB;IAC9G,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,qBAAqB,CAAC,OAAO,EAAE,KAAK,CAAC,EAAE,qBAAqB,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC;IACvH,IAAI,MAAM,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM;QAAE,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC;IACjE,IAAI,CAAC;QACH,IAAI,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,WAAW,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,WAAW,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,KAAK,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;YACvH,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;QAC5D,CAAC;QACD,MAAM,OAAO,GAA0D,EAAE,CAAC;QAC1E,KAAK,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;YAC1C,MAAM,MAAM,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YACrC,IAAI,CAAC,MAAM;gBAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,IAAI,EAAE,CAAC,CAAC;YACpE,IAAI,MAAM,CAAC,IAAI,KAAK,MAAM,CAAC,IAAI;gBAAE,SAAS;YAC1C,MAAM,QAAQ,GAAG,IAAI,KAAK,iBAAiB,CAAC,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,IAAI,KAAK,eAAe,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,IAAI,CAAC;YAC3H,IAAI,CAAC,QAAQ;gBAAE,MAAM,IAAI,KAAK,CAAC,2BAA2B,IAAI,EAAE,CAAC,CAAC;YAClE,MAAM,QAAQ,GAAG,gCAAgC,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;YAC5F,KAAK,MAAM,MAAM,IAAI,QAAQ,EAAE,CAAC;gBAC9B,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,GAAG,MAAM,CAAC,IAAI,KAAK,CAAC,CAAC;oBAAE,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;gBACxH,OAAO,CAAC,IAAI,CAAC,EAAE,GAAG,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC;YACxC,CAAC;QACH,CAAC;QACD,IAAI,CAAC,OAAO,CAAC,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;QACrF,OAAO,EAAE,IAAI,EAAE,mBAAmB,EAAE,OAAO,EAAE,CAAC;IAChD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,KAAK,CAAC,4CAA4C,KAAK,oFAAoF,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;IACpK,CAAC;AACH,CAAC;AAED,mGAAmG;AACnG,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,SAAiB,EAAE,YAAqB,EAAE,mBAA4B;IAChH,SAAS,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;IACzC,MAAM,WAAW,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC;IACxD,IAAI,SAAS,KAAK,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,iBAAiB,CAAC,EAAE,CAAC;QAC5D,MAAM,IAAI,KAAK,CAAC,sHAAsH,CAAC,CAAC;IAC1I,CAAC;IACD,MAAM,OAAO,GAAG,MAAM,qBAAqB,CAAC,WAAW,EAAE,mBAAmB,CAAC,CAAC;IAC9E,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;IAChD,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,QAAQ,EAAE,iBAAiB,CAAC,CAAC;IAChE,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACnC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,IAAI,CAAC,cAAc,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC;QACpE,CAAC,OAAO,CAAC,MAAM,IAAI,IAAI,CAAC,GAAG,KAAK,OAAO,CAAC,MAAM,EAAE,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,yFAAyF,CAAC,CAAC;IAClK,MAAM,KAAK,GAAG,cAAc,CAAC,SAAS,CAAC,CAAC;IACxC,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,iEAAiE,CAAC,CAAC;IAC9G,MAAM,SAAS,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACtF,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,QAAQ,EAAE,CAAC,KAAK,EAAE,iBAAiB,CAAC,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,GAAG,IAAI,EAAE,CAAC,CAAC;IACjH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,CAAiH,CAAC;IACjK,MAAM,qBAAqB,GAAG,yBAAyB,CAAC,MAAM,CAAC,qBAAqB,CAAC,CAAC;IACtF,IAAI,MAAM,CAAC,QAAQ,KAAK,CAAC,IAAI,MAAM,CAAC,KAAK,EAAE,MAAM,KAAK,KAAK,CAAC,MAAM,IAAI,MAAM,CAAC,KAAK,CAAC,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,+DAA+D,CAAC,CAAC;IAC3K,IAAI,YAAY,EAAE,CAAC;QACjB,MAAM,WAAW,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QAChF,MAAM,iCAAiC,CAAC,WAAW,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC;IACzE,CAAC;IACD,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,WAAW,EAAE,WAAW,EAAE,OAAO,CAAC,MAAM,EAAE,QAAQ,EAAE,qBAAqB;QACpH,GAAG,CAAC,MAAM,CAAC,uBAAuB,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,uBAAuB,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;AACtF,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,QAAyB;IAChE,MAAM,qBAAqB,CAAC,QAAQ,CAAC,WAAW,EAAE,QAAQ,CAAC,WAAW,CAAC,CAAC;IACxE,MAAM,IAAI,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC1F,IAAI,IAAI,KAAK,QAAQ,CAAC,SAAS;QAAE,MAAM,IAAI,KAAK,CAAC,+DAA+D,CAAC,CAAC;AACpH,CAAC"}

package/dist/daemon/backend-child.d.ts

@@ -0,0 +1,5 @@
+import type { ChildProcess } from 'node:child_process';
+export declare function ownBackendChildren(onChild: (child: ChildProcess) => void): () => void;
+export declare function supervisesBackendChildren(): boolean;
+export declare function observeBackendChild(child: ChildProcess): void;
+//# sourceMappingURL=backend-child.d.ts.map

package/dist/daemon/backend-child.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"backend-child.d.ts","sourceRoot":"","sources":["../../src/daemon/backend-child.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAKvD,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,YAAY,KAAK,IAAI,GAAG,MAAM,IAAI,CAIrF;AACD,wBAAgB,yBAAyB,IAAI,OAAO,CAA8B;AAClF,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,YAAY,GAAG,IAAI,CAAuB"}

package/dist/daemon/backend-child.js

@@ -0,0 +1,13 @@
+// Installed only inside the guardian process. A shell environment cannot turn
+// an independently launched CLI into the OS-owned parent of a backend.
+let observer = null;
+export function ownBackendChildren(onChild) {
+    if (observer)
+        throw new Error('Backend child ownership is already configured');
+    observer = onChild;
+    return () => { if (observer === onChild)
+        observer = null; };
+}
+export function supervisesBackendChildren() { return observer !== null; }
+export function observeBackendChild(child) { observer?.(child); }
+//# sourceMappingURL=backend-child.js.map

package/dist/daemon/backend-child.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"backend-child.js","sourceRoot":"","sources":["../../src/daemon/backend-child.ts"],"names":[],"mappings":"AAEA,8EAA8E;AAC9E,uEAAuE;AACvE,IAAI,QAAQ,GAA2C,IAAI,CAAC;AAC5D,MAAM,UAAU,kBAAkB,CAAC,OAAsC;IACvE,IAAI,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;IAC/E,QAAQ,GAAG,OAAO,CAAC;IACnB,OAAO,GAAG,EAAE,GAAG,IAAI,QAAQ,KAAK,OAAO;QAAE,QAAQ,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;AAC9D,CAAC;AACD,MAAM,UAAU,yBAAyB,KAAc,OAAO,QAAQ,KAAK,IAAI,CAAC,CAAC,CAAC;AAClF,MAAM,UAAU,mBAAmB,CAAC,KAAmB,IAAU,QAAQ,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC"}

package/dist/daemon/backend-control.d.ts

@@ -0,0 +1,43 @@
+import type { ILogger } from '@omnitron-dev/titan/module/logger';
+import type { OmnitronDaemon } from './daemon.js';
+/** Kept separate from public ingress: it must answer while that ingress is drained. */
+export declare class BackendControlService {
+    private readonly daemon;
+    private readonly finish;
+    private prepared;
+    private preparing;
+    private retired;
+    private retirement;
+    constructor(daemon: OmnitronDaemon, finish: () => void);
+    status(): Promise<{
+        pid: number;
+        runtime: import("../shared/dto/backend.js").BackendRuntimeStatus;
+        retired: boolean;
+        instanceHome: string;
+        schemaScope: import("./backend-candidate.js").BackendSchemaScope;
+        ticketId: string | null;
+        build: import("../shared/build-stamp.js").BuildStamp | null;
+        entry: string;
+    }>;
+    prepare(data: {
+        candidateId: string;
+    }): Promise<{
+        file: string;
+        ticketId: string;
+    }>;
+    abort(data: {
+        ticketId: string;
+    }): Promise<void>;
+    retire(data: {
+        ticketId: string;
+    }): Promise<void>;
+    complete(data: {
+        ticketId: string;
+    }): Promise<void>;
+    private match;
+}
+export declare function startBackendControl(daemon: OmnitronDaemon, controllerId: string, logger: ILogger): Promise<{
+    socket: string;
+    stop(): Promise<void>;
+}>;
+//# sourceMappingURL=backend-control.d.ts.map

package/dist/daemon/backend-control.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"backend-control.d.ts","sourceRoot":"","sources":["../../src/daemon/backend-control.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,mCAAmC,CAAC;AAEjE,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AASlD,uFAAuF;AACvF,qBACa,qBAAqB;IAMpB,OAAO,CAAC,QAAQ,CAAC,MAAM;IAAkB,OAAO,CAAC,QAAQ,CAAC,MAAM;IAL5E,OAAO,CAAC,QAAQ,CAAkC;IAClD,OAAO,CAAC,SAAS,CAAS;IAC1B,OAAO,CAAC,OAAO,CAAS;IACxB,OAAO,CAAC,UAAU,CAA8B;IAEhD,YAA6B,MAAM,EAAE,cAAc,EAAmB,MAAM,EAAE,MAAM,IAAI,EAAI;IAGtF,MAAM;;;;;;;;;OAKX;IAGK,OAAO,CAAC,IAAI,EAAE;QAAE,WAAW,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,CAAC,CAgBxF;IAGK,KAAK,CAAC,IAAI,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAKrD;IAGK,MAAM,CAAC,IAAI,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAItD;IAGK,QAAQ,CAAC,IAAI,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAcxD;IAED,OAAO,CAAC,KAAK;CAGd;AAED,wBAAsB,mBAAmB,CAAC,MAAM,EAAE,cAAc,EAAE,YAAY,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,GAAG,OAAO,CAAC;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,CAAA;CAAE,CAAC,CAgB3J"}

package/dist/daemon/backend-control.js

@@ -0,0 +1,155 @@
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+import path from 'node:path';
+import { fileURLToPath } from 'node:url';
+import { Netron } from '@omnitron-dev/titan/netron';
+import { UnixSocketTransport } from '@omnitron-dev/titan/netron/transport/unix';
+import { AuthenticationManager, AuthorizationManager } from '@omnitron-dev/titan/netron/auth';
+import { Service, Public } from '@omnitron-dev/titan/decorators';
+import { ADMIN_ROLES } from '../shared/roles.js';
+import { executionDirectory } from './execution-launcher.js';
+import { ExecutionJournal, writePrivateRecord } from './execution-journal.js';
+import { PidManager } from './pid-manager.js';
+import { OWN_BUILD } from '../shared/build-stamp.js';
+import { OMNITRON_HOME } from '../config/defaults.js';
+import { backendSchemaScope } from './backend-candidate.js';
+/** Kept separate from public ingress: it must answer while that ingress is drained. */
+let BackendControlService = class BackendControlService {
+    daemon;
+    finish;
+    prepared = null;
+    preparing = false;
+    retired = false;
+    retirement = null;
+    constructor(daemon, finish) {
+        this.daemon = daemon;
+        this.finish = finish;
+    }
+    async status() {
+        return { pid: process.pid, runtime: this.daemon.backendRuntimeStatus(), retired: this.retired,
+            instanceHome: OMNITRON_HOME, schemaScope: backendSchemaScope(this.daemon.daemonConfig),
+            ticketId: this.prepared?.state.ticket.id ?? null, build: OWN_BUILD,
+            entry: fileURLToPath(new URL('./daemon-entry.js', import.meta.url)) };
+    }
+    async prepare(data) {
+        if (!/^[0-9a-f-]{36}$/i.test(data.candidateId))
+            throw new Error('A candidate UUID is required');
+        if (this.preparing || this.prepared || this.retired)
+            throw new Error('A backend transfer already exists');
+        this.preparing = true;
+        try {
+            const state = await this.daemon.prepareBackendHandoff(data.candidateId);
+            this.prepared = { protocol: 1, state, daemonConfig: this.daemon.daemonConfig,
+                previousEntry: fileURLToPath(new URL('./daemon-entry.js', import.meta.url)), previousPid: process.pid,
+                createdAt: new Date().toISOString(), cwd: process.cwd(),
+                environment: { ...Object.fromEntries(Object.entries(process.env).filter((entry) => entry[1] !== undefined)), OMNITRON_HOME },
+            };
+            const file = path.join(executionDirectory(this.daemon.daemonConfig), `handoff-${state.ticket.id}.json`);
+            try {
+                await writePrivateRecord(file, this.prepared);
+            }
+            catch (error) {
+                await this.daemon.abortBackendHandoff(state);
+                this.prepared = null;
+                throw error;
+            }
+            return { file, ticketId: state.ticket.id };
+        }
+        finally {
+            this.preparing = false;
+        }
+    }
+    async abort(data) {
+        this.match(data.ticketId);
+        if (this.retirement)
+            throw new Error('Retirement has begun; restore a fresh backend from the checkpoint');
+        await this.daemon.abortBackendHandoff(this.prepared.state);
+        this.prepared = null;
+    }
+    async retire(data) {
+        this.match(data.ticketId);
+        this.retirement ??= this.daemon.retireBackend().then(() => { this.retired = true; });
+        await this.retirement;
+    }
+    async complete(data) {
+        this.match(data.ticketId);
+        if (!this.retired)
+            throw new Error('Backend has not retired');
+        const record = this.prepared;
+        const durable = await new ExecutionJournal(path.join(executionDirectory(record.daemonConfig), 'controller.json')).read();
+        const successor = new PidManager(record.daemonConfig.pidFile).getPid();
+        if (!successor || successor === process.pid || durable?.owner.id !== record.state.ticket.ownerId ||
+            durable.grant.epoch <= record.state.ticket.from.epoch) {
+            throw new Error('A live successor and a newer durable controller grant are required before retirement can complete');
+        }
+        // The command waits for the replacement's own readiness before asking
+        // the old controller to exit. Only this isolated owner-user channel can
+        // call it; the public web/API listeners never expose this service.
+        setTimeout(this.finish, 100);
+    }
+    match(ticketId) {
+        if (!this.prepared || this.prepared.state.ticket.id !== ticketId)
+            throw new Error('Unknown backend transfer');
+    }
+};
+__decorate([
+    Public({ auth: { roles: ADMIN_ROLES } }),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", []),
+    __metadata("design:returntype", Promise)
+], BackendControlService.prototype, "status", null);
+__decorate([
+    Public({ auth: { roles: ADMIN_ROLES } }),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object]),
+    __metadata("design:returntype", Promise)
+], BackendControlService.prototype, "prepare", null);
+__decorate([
+    Public({ auth: { roles: ADMIN_ROLES } }),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object]),
+    __metadata("design:returntype", Promise)
+], BackendControlService.prototype, "abort", null);
+__decorate([
+    Public({ auth: { roles: ADMIN_ROLES } }),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object]),
+    __metadata("design:returntype", Promise)
+], BackendControlService.prototype, "retire", null);
+__decorate([
+    Public({ auth: { roles: ADMIN_ROLES } }),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object]),
+    __metadata("design:returntype", Promise)
+], BackendControlService.prototype, "complete", null);
+BackendControlService = __decorate([
+    Service({ name: 'OmnitronBackendControl' }),
+    __metadata("design:paramtypes", [Function, Function])
+], BackendControlService);
+export { BackendControlService };
+export async function startBackendControl(daemon, controllerId, logger) {
+    const socket = path.join(executionDirectory(daemon.daemonConfig), `c-${controllerId}.sock`);
+    if (Buffer.byteLength(socket) > 100)
+        throw new Error('Execution directory is too long for a private control socket; configure a shorter executionHost.directory');
+    const netron = new Netron(logger, { id: `backend-control-${controllerId}` });
+    netron.registerTransport('unix', () => new UnixSocketTransport());
+    netron.registerTransportServer('unix', { name: 'backend-control', options: { path: socket, mode: 0o600, force: false, requestTimeout: 120_000 } });
+    netron.configureAuth(new AuthenticationManager(logger, {
+        authenticate: async () => { throw new Error('Backend replacement requires the private Unix socket'); },
+        validateToken: async () => { throw new Error('Backend replacement does not accept bearer tokens'); },
+        tokenCache: { enabled: false },
+    }), new AuthorizationManager(logger));
+    netron.setTransportAuthContext('unix', { userId: 'backend-local', roles: [...ADMIN_ROLES], permissions: [] });
+    const service = new BackendControlService(daemon, () => { void netron.stop().finally(() => process.exit(0)); });
+    await netron.peer.exposeService(service);
+    await netron.start();
+    return { socket, stop: () => netron.stop() };
+}
+//# sourceMappingURL=backend-control.js.map

package/dist/daemon/backend-control.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"backend-control.js","sourceRoot":"","sources":["../../src/daemon/backend-control.ts"],"names":[],"mappings":";;;;;;;;;AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,MAAM,EAAE,MAAM,4BAA4B,CAAC;AACpD,OAAO,EAAE,mBAAmB,EAAE,MAAM,2CAA2C,CAAC;AAChF,OAAO,EAAE,qBAAqB,EAAE,oBAAoB,EAAE,MAAM,iCAAiC,CAAC;AAC9F,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,gCAAgC,CAAC;AAEjE,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAGjD,OAAO,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAC7D,OAAO,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,MAAM,wBAAwB,CAAC;AAC9E,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC9C,OAAO,EAAE,SAAS,EAAE,MAAM,0BAA0B,CAAC;AACrD,OAAO,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AACtD,OAAO,EAAE,kBAAkB,EAAE,MAAM,wBAAwB,CAAC;AAE5D,uFAAuF;AAEhF,IAAM,qBAAqB,GAA3B,MAAM,qBAAqB;IAMH,MAAM;IAAmC,MAAM;IALpE,QAAQ,GAA6B,IAAI,CAAC;IAC1C,SAAS,GAAG,KAAK,CAAC;IAClB,OAAO,GAAG,KAAK,CAAC;IAChB,UAAU,GAAyB,IAAI,CAAC;IAEhD,YAA6B,MAAsB,EAAmB,MAAkB;sBAA3D,MAAM;sBAAmC,MAAM;IAAe,CAAC;IAGtF,AAAN,KAAK,CAAC,MAAM;QACV,OAAO,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,oBAAoB,EAAE,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO;YAC3F,YAAY,EAAE,aAAa,EAAE,WAAW,EAAE,kBAAkB,CAAC,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC;YACtF,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,IAAI,IAAI,EAAE,KAAK,EAAE,SAAS;YAClE,KAAK,EAAE,aAAa,CAAC,IAAI,GAAG,CAAC,mBAAmB,EAAE,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;IAC1E,CAAC;IAGK,AAAN,KAAK,CAAC,OAAO,CAAC,IAA6B;QACzC,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;QAChG,IAAI,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,OAAO;YAAE,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;QAC1G,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC;QACtB,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,qBAAqB,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;YACxE,IAAI,CAAC,QAAQ,GAAG,EAAE,QAAQ,EAAE,CAAC,EAAE,KAAK,EAAE,YAAY,EAAE,IAAI,CAAC,MAAM,CAAC,YAAY;gBAC1E,aAAa,EAAE,aAAa,CAAC,IAAI,GAAG,CAAC,mBAAmB,EAAE,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,WAAW,EAAE,OAAO,CAAC,GAAG;gBACrG,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE;gBACvD,WAAW,EAAE,EAAE,GAAG,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,KAAK,EAA6B,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC,EAAE,aAAa,EAAE;aACxJ,CAAC;YACF,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,EAAE,WAAW,KAAK,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC,CAAC;YACxG,IAAI,CAAC;gBAAC,MAAM,kBAAkB,CAAC,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;YAAC,CAAC;YACtD,OAAO,KAAK,EAAE,CAAC;gBAAC,MAAM,IAAI,CAAC,MAAM,CAAC,mBAAmB,CAAC,KAAK,CAAC,CAAC;gBAAC,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC;gBAAC,MAAM,KAAK,CAAC;YAAC,CAAC;YAClG,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;QAC7C,CAAC;gBAAS,CAAC;YAAC,IAAI,CAAC,SAAS,GAAG,KAAK,CAAC;QAAC,CAAC;IACvC,CAAC;IAGK,AAAN,KAAK,CAAC,KAAK,CAAC,IAA0B;QACpC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC1B,IAAI,IAAI,CAAC,UAAU;YAAE,MAAM,IAAI,KAAK,CAAC,mEAAmE,CAAC,CAAC;QAC1G,MAAM,IAAI,CAAC,MAAM,CAAC,mBAAmB,CAAC,IAAI,CAAC,QAAS,CAAC,KAAK,CAAC,CAAC;QAC5D,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC;IACvB,CAAC;IAGK,AAAN,KAAK,CAAC,MAAM,CAAC,IAA0B;QACrC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC1B,IAAI,CAAC,UAAU,KAAK,IAAI,CAAC,MAAM,CAAC,aAAa,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;QACrF,MAAM,IAAI,CAAC,UAAU,CAAC;IACxB,CAAC;IAGK,AAAN,KAAK,CAAC,QAAQ,CAAC,IAA0B;QACvC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC1B,IAAI,CAAC,IAAI,CAAC,OAAO;YAAE,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;QAC9D,MAAM,MAAM,GAAG,IAAI,CAAC,QAAS,CAAC;QAC9B,MAAM,OAAO,GAAG,MAAM,IAAI,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,kBAAkB,CAAC,MAAM,CAAC,YAAY,CAAC,EAAE,iBAAiB,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QACzH,MAAM,SAAS,GAAG,IAAI,UAAU,CAAC,MAAM,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,CAAC;QACvE,IAAI,CAAC,SAAS,IAAI,SAAS,KAAK,OAAO,CAAC,GAAG,IAAI,OAAO,EAAE,KAAK,CAAC,EAAE,KAAK,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO;YAC5F,OAAO,CAAC,KAAK,CAAC,KAAK,IAAI,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;YAC1D,MAAM,IAAI,KAAK,CAAC,mGAAmG,CAAC,CAAC;QACvH,CAAC;QACD,sEAAsE;QACtE,wEAAwE;QACxE,mEAAmE;QACnE,UAAU,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAC/B,CAAC;IAEO,KAAK,CAAC,QAAgB;QAC5B,IAAI,CAAC,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,KAAK,QAAQ;YAAE,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;IAChH,CAAC;CACF,CAAA;AA7DO;IADL,MAAM,CAAC,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,EAAE,CAAC;;;;mDAMxC;AAGK;IADL,MAAM,CAAC,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,EAAE,CAAC;;;;oDAiBxC;AAGK;IADL,MAAM,CAAC,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,EAAE,CAAC;;;;kDAMxC;AAGK;IADL,MAAM,CAAC,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,EAAE,CAAC;;;;mDAKxC;AAGK;IADL,MAAM,CAAC,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,EAAE,CAAC;;;;qDAexC;AAjEU,qBAAqB;IADjC,OAAO,CAAC,EAAE,IAAI,EAAE,wBAAwB,EAAE,CAAC;;GAC/B,qBAAqB,CAsEjC;;AAED,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,MAAsB,EAAE,YAAoB,EAAE,MAAe;IACrG,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,kBAAkB,CAAC,MAAM,CAAC,YAAY,CAAC,EAAE,KAAK,YAAY,OAAO,CAAC,CAAC;IAC5F,IAAI,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,GAAG,GAAG;QAAE,MAAM,IAAI,KAAK,CAAC,2GAA2G,CAAC,CAAC;IAClK,MAAM,MAAM,GAAG,IAAI,MAAM,CAAC,MAAM,EAAE,EAAE,EAAE,EAAE,mBAAmB,YAAY,EAAE,EAAE,CAAC,CAAC;IAC7E,MAAM,CAAC,iBAAiB,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,IAAI,mBAAmB,EAAE,CAAC,CAAC;IAClE,MAAM,CAAC,uBAAuB,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,iBAAiB,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,cAAc,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC;IACnJ,MAAM,CAAC,aAAa,CAAC,IAAI,qBAAqB,CAAC,MAAM,EAAE;QACrD,YAAY,EAAE,KAAK,IAAI,EAAE,GAAG,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC,CAAC,CAAC;QACtG,aAAa,EAAE,KAAK,IAAI,EAAE,GAAG,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC,CAAC,CAAC;QACpG,UAAU,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE;KAC/B,CAAC,EAAE,IAAI,oBAAoB,CAAC,MAAM,CAAC,CAAC,CAAC;IACtC,MAAM,CAAC,uBAAuB,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,eAAe,EAAE,KAAK,EAAE,CAAC,GAAG,WAAW,CAAC,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC,CAAC;IAC9G,MAAM,OAAO,GAAG,IAAI,qBAAqB,CAAC,MAAM,EAAE,GAAG,EAAE,GAAG,KAAK,MAAM,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAChH,MAAM,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC;IACzC,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;IACrB,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC;AAC/C,CAAC"}

package/dist/daemon/backend-crash-recovery.d.ts

@@ -0,0 +1,4 @@
+import { type BackendReplacementResult } from './backend-upgrade.js';
+/** Recover only a dead controller with a certified, unchanged resident owner. */
+export declare function recoverBackendAfterCrash(directory: string): Promise<BackendReplacementResult>;
+//# sourceMappingURL=backend-crash-recovery.d.ts.map

package/dist/daemon/backend-crash-recovery.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"backend-crash-recovery.d.ts","sourceRoot":"","sources":["../../src/daemon/backend-crash-recovery.ts"],"names":[],"mappings":"AAaA,OAAO,EAAyC,KAAK,wBAAwB,EAAE,MAAM,sBAAsB,CAAC;AAS5G,iFAAiF;AACjF,wBAAsB,wBAAwB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,wBAAwB,CAAC,CA+EnG"}

package/dist/daemon/backend-crash-recovery.js

@@ -0,0 +1,136 @@
+import path from 'node:path';
+import fs from 'node:fs/promises';
+import { randomUUID } from 'node:crypto';
+import { createNullLogger } from '@omnitron-dev/titan/module/logger';
+import { OMNITRON_HOME } from '../config/defaults.js';
+import { ProjectRegistry } from '../project/registry.js';
+import { DaemonStateStore } from './daemon-state-store.service.js';
+import { BackendRecoveryJournal } from './backend-recovery-journal.js';
+import { RuntimeInstallation } from './runtime-installation.js';
+import { ExecutionClient } from './execution-client.js';
+import { ExecutionJournal, writePrivateRecord } from './execution-journal.js';
+import { PidManager } from './pid-manager.js';
+import { spawnReplacement, stopFailedCandidate } from './backend-upgrade.js';
+import { checkpointInstanceHome } from './backend-handoff-types.js';
+import { executionDirectory } from './execution-launcher.js';
+import { expandPath } from '../shared/paths.js';
+import { readManagedRuntime, managedSupervisorSocket } from './managed-runtime.js';
+import { supervisesBackendChildren } from './backend-child.js';
+import { privateControlClient } from './private-control-client.js';
+/** Recover only a dead controller with a certified, unchanged resident owner. */
+export async function recoverBackendAfterCrash(directory) {
+    // Read only the requested instance before looking up any supervisor. In
+    // particular, a missing checkpoint must not create a default installation.
+    await fs.access(path.join(directory, 'recovery.db'));
+    const journal = new BackendRecoveryJournal(directory);
+    let saved;
+    try {
+        saved = journal.read();
+    }
+    finally {
+        await journal.close();
+    }
+    if (!saved || saved.status !== 'ready')
+        throw new Error(`No certified backend recovery checkpoint: ${saved?.status === 'invalid' ? saved.reason : 'none recorded'}`);
+    const record = saved.record;
+    const instanceHome = checkpointInstanceHome(record);
+    if (path.resolve(executionDirectory(record.daemonConfig)) !== path.resolve(directory))
+        throw new Error('Recovery checkpoint belongs to a different execution directory');
+    if (supervisesBackendChildren() && instanceHome !== path.resolve(OMNITRON_HOME))
+        throw new Error('A guardian cannot recover another instance');
+    const managed = await readManagedRuntime(instanceHome);
+    if (managed && path.resolve(managed.directory) !== path.resolve(directory))
+        throw new Error('Recovery checkpoint belongs to a different supervised execution directory');
+    if (managed && !supervisesBackendChildren()) {
+        const supervisor = await privateControlClient(managedSupervisorSocket(managed), 'OmnitronSupervisor', 600_000);
+        try {
+            return await supervisor.service.recover({});
+        }
+        finally {
+            await supervisor.close();
+        }
+    }
+    const installation = await RuntimeInstallation.open(instanceHome, { existing: true });
+    if (!installation)
+        throw new Error('No permanent runtime is installed for automatic recovery');
+    try {
+        return await installation.exclusive(async () => {
+            const activation = installation.activation();
+            if (activation)
+                throw new Error(`An activation is unfinished; recover its checkpoint first: ${activation.checkpoint}`);
+            const current = new BackendRecoveryJournal(directory);
+            try {
+                if (JSON.stringify(current.read()) !== JSON.stringify(saved))
+                    throw new Error('Recovery checkpoint changed while acquiring the installation lease; retry after inspecting its current state');
+            }
+            finally {
+                await current.close();
+            }
+            if (new PidManager(expandPath(record.daemonConfig.pidFile)).isRunning() || PidManager.isProcessAlive(record.previousPid)) {
+                throw new Error('The checkpoint controller or another backend is still alive; automatic recovery is refused');
+            }
+            const selection = installation.selection();
+            if (!selection || selection.current !== record.runtimeHash)
+                throw new Error('Recovery checkpoint does not match the selected runtime');
+            const artifact = await installation.artifact(record.runtimeHash);
+            const store = new DaemonStateStore(createNullLogger(), path.join(instanceHome, 'data/daemon-state.db'));
+            try {
+                if (new ProjectRegistry(store).recoveryDigest() !== record.registryDigest)
+                    throw new Error('Project registry changed since the recovery checkpoint');
+            }
+            finally {
+                await store.dispose();
+            }
+            const observer = new ExecutionClient(path.join(directory, 'owner.sock'), createNullLogger());
+            let boot;
+            let file;
+            try {
+                const snapshot = await observer.connect();
+                const durable = await new ExecutionJournal(path.join(directory, 'controller.json')).read();
+                const ownerPid = new PidManager(path.join(directory, 'owner.pid')).getPid();
+                if (!durable || snapshot.status.owner.id !== record.controller.ownerId ||
+                    durable.owner.id !== snapshot.status.owner.id || durable.owner.pid !== ownerPid || ownerPid !== snapshot.status.owner.pid ||
+                    snapshot.status.controller.controllerId !== record.controller.controllerId ||
+                    snapshot.status.controller.epoch !== record.controller.epoch ||
+                    snapshot.status.phase !== 'active' || snapshot.status.inFlight !== 0 ||
+                    snapshot.inventoryDigest !== record.state.executionInventory) {
+                    throw new Error('Owner, controller grant or execution inventory changed; automatic recovery would adopt uncertain state and is refused');
+                }
+                const ticket = await observer.prepareReplacement(snapshot.status.owner.id, randomUUID());
+                boot = { protocol: 1, state: { ...record.state, ticket }, daemonConfig: record.daemonConfig,
+                    previousEntry: artifact.entry, previousPid: record.previousPid, createdAt: new Date().toISOString(),
+                    cwd: record.cwd, environment: record.environment };
+                file = path.join(directory, `handoff-${ticket.id}.json`);
+                try {
+                    await writePrivateRecord(file, boot);
+                    // An interrupted recovery now has the same durable restart/rollback
+                    // path as a planned replacement. No second recovery can race it.
+                    installation.beginActivation(record.runtimeHash, record.runtimeHash, file);
+                }
+                catch (error) {
+                    await observer.cancelReplacement(ticket);
+                    if (installation.activation()?.checkpoint === file)
+                        installation.abortActivation();
+                    throw error;
+                }
+            }
+            finally {
+                await observer.close();
+            }
+            let candidate = null;
+            try {
+                const result = await spawnReplacement(artifact, file, boot, child => { candidate = child; });
+                await installation.select(record.runtimeHash, selection.revision);
+                return result;
+            }
+            catch (error) {
+                await stopFailedCandidate(candidate);
+                throw error;
+            }
+        });
+    }
+    finally {
+        await installation.close();
+    }
+}
+//# sourceMappingURL=backend-crash-recovery.js.map

package/dist/daemon/backend-crash-recovery.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"backend-crash-recovery.js","sourceRoot":"","sources":["../../src/daemon/backend-crash-recovery.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAClC,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,OAAO,EAAE,gBAAgB,EAAE,MAAM,mCAAmC,CAAC;AACrE,OAAO,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AACtD,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,EAAE,gBAAgB,EAAE,MAAM,iCAAiC,CAAC;AACnE,OAAO,EAAE,sBAAsB,EAAE,MAAM,+BAA+B,CAAC;AACvE,OAAO,EAAE,mBAAmB,EAAE,MAAM,2BAA2B,CAAC;AAChE,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AACxD,OAAO,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,MAAM,wBAAwB,CAAC;AAC9E,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC9C,OAAO,EAAE,gBAAgB,EAAE,mBAAmB,EAAiC,MAAM,sBAAsB,CAAC;AAC5G,OAAO,EAAE,sBAAsB,EAA0B,MAAM,4BAA4B,CAAC;AAC5F,OAAO,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAC7D,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAChD,OAAO,EAAE,kBAAkB,EAAE,uBAAuB,EAAE,MAAM,sBAAsB,CAAC;AACnF,OAAO,EAAE,yBAAyB,EAAE,MAAM,oBAAoB,CAAC;AAC/D,OAAO,EAAE,oBAAoB,EAAE,MAAM,6BAA6B,CAAC;AAGnE,iFAAiF;AACjF,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAAC,SAAiB;IAC9D,wEAAwE;IACxE,2EAA2E;IAC3E,MAAM,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC,CAAC;IACrD,MAAM,OAAO,GAAG,IAAI,sBAAsB,CAAC,SAAS,CAAC,CAAC;IACtD,IAAI,KAAK,CAAC;IACV,IAAI,CAAC;QAAC,KAAK,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;IAAC,CAAC;YAAS,CAAC;QAAC,MAAM,OAAO,CAAC,KAAK,EAAE,CAAC;IAAC,CAAC;IAClE,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,MAAM,KAAK,OAAO;QAAE,MAAM,IAAI,KAAK,CAAC,6CAA6C,KAAK,EAAE,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,eAAe,EAAE,CAAC,CAAC;IACrK,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC;IAC5B,MAAM,YAAY,GAAG,sBAAsB,CAAC,MAAM,CAAC,CAAC;IACpD,IAAI,IAAI,CAAC,OAAO,CAAC,kBAAkB,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,KAAK,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,gEAAgE,CAAC,CAAC;IACzK,IAAI,yBAAyB,EAAE,IAAI,YAAY,KAAK,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;IAC/I,MAAM,OAAO,GAAG,MAAM,kBAAkB,CAAC,YAAY,CAAC,CAAC;IACvD,IAAI,OAAO,IAAI,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,KAAK,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,2EAA2E,CAAC,CAAC;IACzK,IAAI,OAAO,IAAI,CAAC,yBAAyB,EAAE,EAAE,CAAC;QAC5C,MAAM,UAAU,GAAG,MAAM,oBAAoB,CAA2B,uBAAuB,CAAC,OAAO,CAAC,EAAE,oBAAoB,EAAE,OAAO,CAAC,CAAC;QACzI,IAAI,CAAC;YAAC,OAAO,MAAM,UAAU,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QAAC,CAAC;gBAAS,CAAC;YAAC,MAAM,UAAU,CAAC,KAAK,EAAE,CAAC;QAAC,CAAC;IAC5F,CAAC;IACD,MAAM,YAAY,GAAG,MAAM,mBAAmB,CAAC,IAAI,CAAC,YAAY,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;IACtF,IAAI,CAAC,YAAY;QAAE,MAAM,IAAI,KAAK,CAAC,0DAA0D,CAAC,CAAC;IAC/F,IAAI,CAAC;QAAC,OAAO,MAAM,YAAY,CAAC,SAAS,CAAC,KAAK,IAAI,EAAE;YACnD,MAAM,UAAU,GAAG,YAAY,CAAC,UAAU,EAAE,CAAC;YAC7C,IAAI,UAAU;gBAAE,MAAM,IAAI,KAAK,CAAC,8DAA8D,UAAU,CAAC,UAAU,EAAE,CAAC,CAAC;YACvH,MAAM,OAAO,GAAG,IAAI,sBAAsB,CAAC,SAAS,CAAC,CAAC;YACtD,IAAI,CAAC;gBACH,IAAI,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC;oBAAE,MAAM,IAAI,KAAK,CAAC,8GAA8G,CAAC,CAAC;YAChM,CAAC;oBAAS,CAAC;gBAAC,MAAM,OAAO,CAAC,KAAK,EAAE,CAAC;YAAC,CAAC;YACpC,IAAI,IAAI,UAAU,CAAC,UAAU,CAAC,MAAM,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,EAAE,IAAI,UAAU,CAAC,cAAc,CAAC,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC;gBACzH,MAAM,IAAI,KAAK,CAAC,4FAA4F,CAAC,CAAC;YAChH,CAAC;YACD,MAAM,SAAS,GAAG,YAAY,CAAC,SAAS,EAAE,CAAC;YAC3C,IAAI,CAAC,SAAS,IAAI,SAAS,CAAC,OAAO,KAAK,MAAM,CAAC,WAAW;gBAAE,MAAM,IAAI,KAAK,CAAC,yDAAyD,CAAC,CAAC;YACvI,MAAM,QAAQ,GAAG,MAAM,YAAY,CAAC,QAAQ,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;YACjE,MAAM,KAAK,GAAG,IAAI,gBAAgB,CAAC,gBAAgB,EAAE,EAAE,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,sBAAsB,CAAC,CAAC,CAAC;YACxG,IAAI,CAAC;gBACH,IAAI,IAAI,eAAe,CAAC,KAAK,CAAC,CAAC,cAAc,EAAE,KAAK,MAAM,CAAC,cAAc;oBAAE,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAC;YACvJ,CAAC;oBAAS,CAAC;gBAAC,MAAM,KAAK,CAAC,OAAO,EAAE,CAAC;YAAC,CAAC;YAEpC,MAAM,QAAQ,GAAG,IAAI,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,YAAY,CAAC,EAAE,gBAAgB,EAAE,CAAC,CAAC;YAC7F,IAAI,IAAuB,CAAC;YAC5B,IAAI,IAAY,CAAC;YACjB,IAAI,CAAC;gBACH,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,OAAO,EAAE,CAAC;gBAC1C,MAAM,OAAO,GAAG,MAAM,IAAI,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,iBAAiB,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;gBAC3F,MAAM,QAAQ,GAAG,IAAI,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;gBAC5E,IAAI,CAAC,OAAO,IAAI,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,KAAK,MAAM,CAAC,UAAU,CAAC,OAAO;oBAClE,OAAO,CAAC,KAAK,CAAC,EAAE,KAAK,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,IAAI,OAAO,CAAC,KAAK,CAAC,GAAG,KAAK,QAAQ,IAAI,QAAQ,KAAK,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG;oBACzH,QAAQ,CAAC,MAAM,CAAC,UAAU,CAAC,YAAY,KAAK,MAAM,CAAC,UAAU,CAAC,YAAY;oBAC1E,QAAQ,CAAC,MAAM,CAAC,UAAU,CAAC,KAAK,KAAK,MAAM,CAAC,UAAU,CAAC,KAAK;oBAC5D,QAAQ,CAAC,MAAM,CAAC,KAAK,KAAK,QAAQ,IAAI,QAAQ,CAAC,MAAM,CAAC,QAAQ,KAAK,CAAC;oBACpE,QAAQ,CAAC,eAAe,KAAK,MAAM,CAAC,KAAK,CAAC,kBAAkB,EAAE,CAAC;oBACjE,MAAM,IAAI,KAAK,CAAC,uHAAuH,CAAC,CAAC;gBAC3I,CAAC;gBACD,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,kBAAkB,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,EAAE,UAAU,EAAE,CAAC,CAAC;gBACzF,IAAI,GAAG,EAAE,QAAQ,EAAE,CAAC,EAAE,KAAK,EAAE,EAAE,GAAG,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE,YAAY,EAAE,MAAM,CAAC,YAAY;oBACzF,aAAa,EAAE,QAAQ,CAAC,KAAK,EAAE,WAAW,EAAE,MAAM,CAAC,WAAW,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;oBACnG,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,WAAW,EAAE,MAAM,CAAC,WAAW,EAAE,CAAC;gBACrD,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,WAAW,MAAM,CAAC,EAAE,OAAO,CAAC,CAAC;gBACzD,IAAI,CAAC;oBACH,MAAM,kBAAkB,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;oBACrC,oEAAoE;oBACpE,iEAAiE;oBACjE,YAAY,CAAC,eAAe,CAAC,MAAM,CAAC,WAAW,EAAE,MAAM,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;gBAC7E,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,MAAM,QAAQ,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAC;oBACzC,IAAI,YAAY,CAAC,UAAU,EAAE,EAAE,UAAU,KAAK,IAAI;wBAAE,YAAY,CAAC,eAAe,EAAE,CAAC;oBACnF,MAAM,KAAK,CAAC;gBACd,CAAC;YACH,CAAC;oBAAS,CAAC;gBAAC,MAAM,QAAQ,CAAC,KAAK,EAAE,CAAC;YAAC,CAAC;YACrC,IAAI,SAAS,GAAwB,IAAI,CAAC;YAC1C,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,EAAE,GAAG,SAAS,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;gBAC7F,MAAM,YAAY,CAAC,MAAM,CAAC,MAAM,CAAC,WAAW,EAAE,SAAS,CAAC,QAAQ,CAAC,CAAC;gBAClE,OAAO,MAAM,CAAC;YAChB,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,mBAAmB,CAAC,SAAS,CAAC,CAAC;gBACrC,MAAM,KAAK,CAAC;YACd,CAAC;QACH,CAAC,CAAC,CAAC;IAAC,CAAC;YAAS,CAAC;QAAC,MAAM,YAAY,CAAC,KAAK,EAAE,CAAC;IAAC,CAAC;AAC/C,CAAC"}

package/dist/daemon/backend-handoff-types.d.ts

@@ -0,0 +1,27 @@
+import type { HandoffTicket } from '@omnitron-dev/titan-pm';
+import type { IEcosystemConfig, IDaemonConfig } from '../config/types.js';
+import type { ProjectService } from '../services/project.service.js';
+import type { InfrastructureHandoffState } from '../infrastructure/infrastructure.service.js';
+/** Private controller checkpoint; contains resolved configuration and must never enter public diagnostics. */
+export interface BackendHandoffState {
+    protocol: 1;
+    ticket: HandoffTicket;
+    watchConfig: IEcosystemConfig;
+    projects: Awaited<ReturnType<ProjectService['prepareHandoff']>>;
+    infrastructure: InfrastructureHandoffState | null;
+    executionInventory: string;
+}
+export interface BackendBootRecord {
+    protocol: 1;
+    state: BackendHandoffState;
+    daemonConfig: IDaemonConfig;
+    previousEntry: string;
+    previousPid: number;
+    createdAt: string;
+    cwd: string;
+    environment: Record<string, string>;
+}
+/** Resolve the selected checkpoint, never the invoking shell's default instance. */
+export declare function checkpointInstanceHome(record: Pick<BackendBootRecord, 'environment' | 'daemonConfig'>): string;
+export declare function readBackendBootRecord(file: string | undefined): Promise<BackendBootRecord>;
+//# sourceMappingURL=backend-handoff-types.d.ts.map

package/dist/daemon/backend-handoff-types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"backend-handoff-types.d.ts","sourceRoot":"","sources":["../../src/daemon/backend-handoff-types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AAC5D,OAAO,KAAK,EAAE,gBAAgB,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAC1E,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,gCAAgC,CAAC;AACrE,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,6CAA6C,CAAC;AAK9F,8GAA8G;AAC9G,MAAM,WAAW,mBAAmB;IAClC,QAAQ,EAAE,CAAC,CAAC;IACZ,MAAM,EAAE,aAAa,CAAC;IACtB,WAAW,EAAE,gBAAgB,CAAC;IAC9B,QAAQ,EAAE,OAAO,CAAC,UAAU,CAAC,cAAc,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC;IAChE,cAAc,EAAE,0BAA0B,GAAG,IAAI,CAAC;IAClD,kBAAkB,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,WAAW,iBAAiB;IAChC,QAAQ,EAAE,CAAC,CAAC;IACZ,KAAK,EAAE,mBAAmB,CAAC;IAC3B,YAAY,EAAE,aAAa,CAAC;IAC5B,aAAa,EAAE,MAAM,CAAC;IACtB,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,GAAG,EAAE,MAAM,CAAC;IACZ,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACrC;AAED,oFAAoF;AACpF,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,IAAI,CAAC,iBAAiB,EAAE,aAAa,GAAG,cAAc,CAAC,GAAG,MAAM,CAU9G;AAED,wBAAsB,qBAAqB,CAAC,IAAI,EAAE,MAAM,GAAG,SAAS,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAahG"}

package/dist/daemon/backend-handoff-types.js

@@ -0,0 +1,33 @@
+import path from 'node:path';
+import { readPrivateRecord } from './execution-journal.js';
+import { expandPath } from '../shared/paths.js';
+/** Resolve the selected checkpoint, never the invoking shell's default instance. */
+export function checkpointInstanceHome(record) {
+    const home = record.environment['OMNITRON_HOME'];
+    if (home !== undefined) {
+        if (!path.isAbsolute(home))
+            throw new Error('Checkpoint instance home must be absolute');
+        return path.resolve(home);
+    }
+    // Older checkpoints did not explicitly capture the default instance home.
+    const marker = record.daemonConfig.pidFile;
+    if (typeof marker !== 'string' || !path.isAbsolute(expandPath(marker)))
+        throw new Error('Checkpoint has no absolute instance identity');
+    return path.dirname(expandPath(marker));
+}
+export async function readBackendBootRecord(file) {
+    if (!file || !path.isAbsolute(file))
+        throw new Error('An absolute private backend checkpoint is required');
+    const record = await readPrivateRecord(file);
+    if (!record || record.protocol !== 1 || record.state?.protocol !== 1 || !record.state.ticket?.id ||
+        !record.daemonConfig?.executionHost?.enabled || typeof record.previousEntry !== 'string' || !path.isAbsolute(record.previousEntry) ||
+        !Number.isSafeInteger(record.previousPid) || record.previousPid < 1 ||
+        typeof record.cwd !== 'string' || !path.isAbsolute(record.cwd) || !record.environment ||
+        !/^[a-f0-9]{64}$/.test(record.state.executionInventory) ||
+        typeof record.environment !== 'object' || Array.isArray(record.environment) ||
+        Object.values(record.environment).some(value => typeof value !== 'string')) {
+        throw new Error('Invalid backend checkpoint; automatic adoption is refused');
+    }
+    return record;
+}
+//# sourceMappingURL=backend-handoff-types.js.map

package/dist/daemon/backend-handoff-types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"backend-handoff-types.js","sourceRoot":"","sources":["../../src/daemon/backend-handoff-types.ts"],"names":[],"mappings":"AAIA,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAC3D,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAuBhD,oFAAoF;AACpF,MAAM,UAAU,sBAAsB,CAAC,MAA+D;IACpG,MAAM,IAAI,GAAG,MAAM,CAAC,WAAW,CAAC,eAAe,CAAC,CAAC;IACjD,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QACvB,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;QACzF,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAC5B,CAAC;IACD,0EAA0E;IAC1E,MAAM,MAAM,GAAG,MAAM,CAAC,YAAY,CAAC,OAAO,CAAC;IAC3C,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;IACxI,OAAO,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC;AAC1C,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,IAAwB;IAClE,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;IAC3G,MAAM,MAAM,GAAG,MAAM,iBAAiB,CAAoB,IAAI,CAAC,CAAC;IAChE,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,QAAQ,KAAK,CAAC,IAAI,MAAM,CAAC,KAAK,EAAE,QAAQ,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,EAAE;QAC5F,CAAC,MAAM,CAAC,YAAY,EAAE,aAAa,EAAE,OAAO,IAAI,OAAO,MAAM,CAAC,aAAa,KAAK,QAAQ,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,aAAa,CAAC;QAClI,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,WAAW,CAAC,IAAI,MAAM,CAAC,WAAW,GAAG,CAAC;QACnE,OAAO,MAAM,CAAC,GAAG,KAAK,QAAQ,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW;QACrF,CAAC,gBAAgB,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,kBAAkB,CAAC;QACvD,OAAO,MAAM,CAAC,WAAW,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,WAAW,CAAC;QAC3E,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC,EAAE,CAAC;QAC/E,MAAM,IAAI,KAAK,CAAC,2DAA2D,CAAC,CAAC;IAC/E,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC"}