@omnitron-dev/omnitron 0.3.1 → 0.3.2

package/dist/daemon/system-guardian-cgroup.js

@@ -0,0 +1,202 @@
+import fs from 'node:fs';
+import path from 'node:path';
+import { createHash } from 'node:crypto';
+import { readProcessLifetime } from '../monitoring/process-lifetime.js';
+const cgroupRoot = '/sys/fs/cgroup';
+class ExtraGuardianRootProcess extends Error {
+}
+function requireUnifiedHierarchy() {
+    if (fs.statfsSync(cgroupRoot).type !== 0x63677270)
+        throw Error('Guardian transition requires Linux cgroup v2');
+}
+export function guardianControlGroup(unit, guardianPid, facts) {
+    const group = facts['ControlGroup'];
+    if (facts['Id'] !== unit || facts['MainPID'] !== String(guardianPid) || facts['Delegate'] !== 'no' ||
+        facts['KillMode'] !== 'control-group' || facts['ActiveState'] !== 'active' || !group ||
+        !group.startsWith('/') || path.normalize(group) !== group || path.basename(group) !== unit) {
+        throw Error('Cannot prove the scope of the systemd guardian stop');
+    }
+    return group;
+}
+/** cgroup.procs lists direct processes only. An occupied descendant is also killed by systemd. */
+export function guardianGroupIdentity(directory, permitted) {
+    const expected = [...permitted].sort((a, b) => a - b).join(' ');
+    const entries = [];
+    const device = fs.lstatSync(directory, { bigint: true }).dev;
+    const walk = (dir, depth) => {
+        if (depth > 16 || entries.length >= 256)
+            throw Error('Guardian cgroup tree exceeds the inspection limit');
+        const stat = fs.lstatSync(dir, { bigint: true });
+        if (!stat.isDirectory() || stat.dev !== device || fs.realpathSync(dir) !== dir)
+            throw Error('Untrusted guardian cgroup directory');
+        const read = (file) => {
+            const fd = fs.openSync(path.join(dir, file), fs.constants.O_RDONLY | fs.constants.O_NOFOLLOW | fs.constants.O_NONBLOCK);
+            try {
+                const source = fs.fstatSync(fd, { bigint: true });
+                if (!source.isFile() || source.dev !== device)
+                    throw Error('Untrusted guardian cgroup record');
+                const data = Buffer.alloc(4096);
+                let offset = 0, count;
+                while ((count = fs.readSync(fd, data, offset, data.length - offset, null)) > 0) {
+                    offset += count;
+                    if (offset === data.length)
+                        throw Error('Guardian cgroup record exceeds the inspection limit');
+                }
+                return data.toString('utf8', 0, offset).trim();
+            }
+            finally {
+                fs.closeSync(fd);
+            }
+        };
+        if (read('cgroup.type') !== 'domain')
+            throw Error('Expected a domain cgroup for the guardian');
+        const pids = read('cgroup.procs').split(/\s+/).filter(Boolean);
+        if (pids.some(pid => !/^[1-9]\d*$/.test(pid) || !Number.isSafeInteger(Number(pid))))
+            throw Error('Malformed PID record in the guardian cgroup');
+        // cgroup.procs is an unordered process set; the kernel may repeat a PID
+        // while membership changes during a read. The enclosing fence separately
+        // verifies the process lifetimes and cgroup membership twice.
+        // https://docs.kernel.org/admin-guide/cgroup-v2.html#core-interface-files
+        const observed = [...new Set(pids.map(Number))].sort((a, b) => a - b);
+        const wanted = depth === 0 ? expected : '';
+        if (observed.join(' ') !== wanted) {
+            const scope = JSON.stringify(path.relative(directory, dir) || '.');
+            const shown = observed.slice(0, 16).join(' ') + (observed.length > 16 ? ` … (${observed.length} total)` : '');
+            const reason = `Unknown, missing or nested process in the guardian cgroup ${scope}: expected PIDs [${wanted}], observed [${shown}]. Inspect the processes and wait for unrelated work to settle before preparing again.`;
+            if (!depth && permitted.length && permitted.every(pid => observed.includes(pid)))
+                throw new ExtraGuardianRootProcess(reason);
+            throw Error(reason);
+        }
+        const events = read('cgroup.events').split('\n');
+        const populated = events.filter(event => event.startsWith('populated'));
+        const frozen = events.filter(event => event.startsWith('frozen'));
+        const expectedPopulation = depth === 0 && permitted.length ? 'populated 1' : 'populated 0';
+        if (frozen.length !== 1 || frozen[0] !== 'frozen 0' || populated.length !== 1 || populated[0] !== expectedPopulation) {
+            throw Error(`Unsafe guardian cgroup state ${JSON.stringify(path.relative(directory, dir) || '.')}: expected ${expectedPopulation}, frozen 0; observed populated=${populated.length === 1 ? populated[0].slice(-1) : 'unknown'}, frozen=${frozen.length === 1 ? frozen[0].slice(-1) : 'unknown'}. Guardian transition was refused.`);
+        }
+        const index = entries.length;
+        entries.push(JSON.stringify([dir, String(stat.dev), String(stat.ino)]));
+        const children = [];
+        const handle = fs.opendirSync(dir);
+        try {
+            for (let entry = handle.readSync(); entry; entry = handle.readSync()) {
+                if (entry.isDirectory())
+                    children.push(entry.name);
+                else if (!entry.isFile())
+                    throw Error('Unexpected entry in the guardian cgroup');
+                if (entries.length + children.length > 256)
+                    throw Error('Guardian cgroup tree exceeds the inspection limit');
+            }
+        }
+        finally {
+            handle.closeSync();
+        }
+        for (const child of children.sort())
+            walk(path.join(dir, child), depth + 1);
+        const counts = read('cgroup.stat').split('\n');
+        if (!counts.includes('nr_dying_descendants 0') || !counts.includes('nr_descendants ' + (entries.length - index - 1))) {
+            throw Error('Guardian cgroup descendants changed during inspection');
+        }
+    };
+    walk(directory, 0);
+    return createHash('sha256').update(JSON.stringify(entries)).digest('hex');
+}
+/** During preparation only, a concurrent native query may briefly add a child.
+ * Re-read the complete unit and fence. Never signal, adopt or allow that PID. */
+export async function prepareGuardianFence(guardianPid, backendPid, inspect) {
+    const pids = [guardianPid, backendPid];
+    const original = pids.map(readProcessLifetime);
+    const unchanged = () => original.every((initial, i) => {
+        const current = readProcessLifetime(pids[i]);
+        return initial.state === 'alive' && current.state === 'alive' && initial.identity === current.identity;
+    });
+    const deadline = performance.now() + 1500;
+    let waited = false;
+    for (;;) {
+        try {
+            const fence = await inspect();
+            if (waited && !unchanged())
+                throw Error('Guardian or backend process identity changed while waiting for its cgroup');
+            return fence;
+        }
+        catch (error) {
+            if (!(error instanceof ExtraGuardianRootProcess) || performance.now() >= deadline)
+                throw error;
+            if (!unchanged())
+                throw Error('Guardian or backend identity could not be confirmed while inspecting its cgroup', { cause: error });
+            await new Promise(resolve => setTimeout(resolve, Math.min(100, deadline - performance.now())));
+            if (!unchanged())
+                throw Error('Guardian or backend identity changed while waiting for its cgroup', { cause: error });
+            if (performance.now() >= deadline)
+                throw error;
+            waited = true;
+        }
+    }
+}
+export function checkGuardianStopFence(group, guardianPid, backendPid, expected, retired = false) {
+    requireUnifiedHierarchy();
+    const directory = path.join(cgroupRoot, group);
+    if (fs.statfsSync(directory).type !== 0x63677270)
+        throw Error('Guardian directory does not belong to a Linux cgroup v2 mount');
+    const observe = () => {
+        const guardian = readProcessLifetime(guardianPid);
+        const backend = readProcessLifetime(backendPid);
+        if (guardianPid === backendPid || guardian.state !== 'alive' ||
+            (backend.state !== 'alive' && !(backend.state === 'dead' && retired && expected))) {
+            throw Error('Cannot verify the native guardian and backend process lifetimes');
+        }
+        const pids = backend.state === 'alive' ? [guardianPid, backendPid] : [guardianPid];
+        const directoryId = guardianGroupIdentity(directory, pids);
+        const processStamp = (pid, lifetime) => {
+            const proc = '/proc/' + pid;
+            const exe = fs.realpathSync(proc + '/exe');
+            const stat = fs.statSync(proc + '/exe', { bigint: true });
+            const command = fs.readFileSync(proc + '/cmdline');
+            if (!path.isAbsolute(exe) || exe.endsWith(' (deleted)') || !stat.isFile() || command.length < 2 || command.at(-1) !== 0) {
+                throw Error('Cannot verify the running guardian or backend executable');
+            }
+            return createHash('sha256').update(JSON.stringify([lifetime, exe, String(stat.dev), String(stat.ino)])).update(command).digest('hex');
+        };
+        for (const pid of pids) {
+            if (fs.readFileSync('/proc/' + pid + '/cgroup', 'utf8').trim() !== '0::' + group) {
+                throw Error('Managed process does not belong to the verified guardian cgroup');
+            }
+        }
+        return { group, directoryId, guardianProcess: processStamp(guardianPid, guardian.identity),
+            backendProcess: backend.state === 'alive' ? processStamp(backendPid, backend.identity) : expected.backendProcess };
+    };
+    const first = observe();
+    const second = observe();
+    for (const key of ['group', 'directoryId', 'guardianProcess', 'backendProcess']) {
+        if (first[key] !== second[key] || (expected && expected[key] !== second[key])) {
+            throw Error('Guardian cgroup or native process identity changed since preparation');
+        }
+    }
+    return second;
+}
+/** systemd may remove the cgroup after stopping the unit. Never confuse another MainPID with an empty job. */
+export function verifyStoppedGuardian(unit, fence, facts) {
+    const group = fence?.group ?? facts['ControlGroup'];
+    if (facts['Id'] !== unit || facts['LoadState'] !== 'loaded' || facts['ActiveState'] !== 'inactive' ||
+        facts['MainPID'] !== '0' || group === undefined ||
+        (facts['ControlGroup'] !== '' && facts['ControlGroup'] !== group) ||
+        (group !== '' && (!path.isAbsolute(group) || path.normalize(group) !== group || path.basename(group) !== unit))) {
+        throw Error('The previous guardian unit is not verifiably stopped; reconcile the native job');
+    }
+    requireUnifiedHierarchy();
+    // A pre-fence journal can resume without signalling anything when systemd
+    // has already removed its cgroup and both recorded PIDs have exited.
+    if (!group)
+        return;
+    const directory = path.join(cgroupRoot, group);
+    try {
+        fs.lstatSync(directory);
+    }
+    catch (error) {
+        if (error.code === 'ENOENT')
+            return;
+        throw error;
+    }
+    guardianGroupIdentity(directory, []);
+}
+//# sourceMappingURL=system-guardian-cgroup.js.map

package/dist/daemon/system-guardian-cgroup.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"system-guardian-cgroup.js","sourceRoot":"","sources":["../../src/daemon/system-guardian-cgroup.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,mBAAmB,EAAE,MAAM,mCAAmC,CAAC;AASxE,MAAM,UAAU,GAAG,gBAAgB,CAAC;AACpC,MAAM,wBAAyB,SAAQ,KAAK;CAAG;AAE/C,SAAS,uBAAuB;IAC9B,IAAI,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,IAAI,KAAK,UAAU;QAAE,MAAM,KAAK,CAAC,8CAA8C,CAAC,CAAC;AACjH,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,IAAY,EAAE,WAAmB,EAAE,KAA6B;IACnG,MAAM,KAAK,GAAG,KAAK,CAAC,cAAc,CAAC,CAAC;IACpC,IAAI,KAAK,CAAC,IAAI,CAAC,KAAK,IAAI,IAAI,KAAK,CAAC,SAAS,CAAC,KAAK,MAAM,CAAC,WAAW,CAAC,IAAI,KAAK,CAAC,UAAU,CAAC,KAAK,IAAI;QAC9F,KAAK,CAAC,UAAU,CAAC,KAAK,eAAe,IAAI,KAAK,CAAC,aAAa,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK;QACpF,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,KAAK,KAAK,IAAI,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,IAAI,EAAE,CAAC;QAC/F,MAAM,KAAK,CAAC,qDAAqD,CAAC,CAAC;IACrE,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,kGAAkG;AAClG,MAAM,UAAU,qBAAqB,CAAC,SAAiB,EAAE,SAAmB;IAC1E,MAAM,QAAQ,GAAG,CAAC,GAAG,SAAS,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAChE,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,MAAM,MAAM,GAAG,EAAE,CAAC,SAAS,CAAC,SAAS,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC;IAC7D,MAAM,IAAI,GAAG,CAAC,GAAW,EAAE,KAAa,EAAQ,EAAE;QAChD,IAAI,KAAK,GAAG,EAAE,IAAI,OAAO,CAAC,MAAM,IAAI,GAAG;YAAE,MAAM,KAAK,CAAC,mDAAmD,CAAC,CAAC;QAC1G,MAAM,IAAI,GAAG,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;QACjD,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,IAAI,CAAC,GAAG,KAAK,MAAM,IAAI,EAAE,CAAC,YAAY,CAAC,GAAG,CAAC,KAAK,GAAG;YAAE,MAAM,KAAK,CAAC,qCAAqC,CAAC,CAAC;QACnI,MAAM,IAAI,GAAG,CAAC,IAAY,EAAE,EAAE;YAC5B,MAAM,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,SAAS,CAAC,QAAQ,GAAG,EAAE,CAAC,SAAS,CAAC,UAAU,GAAG,EAAE,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;YACxH,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,EAAE,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;gBAClD,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,MAAM,CAAC,GAAG,KAAK,MAAM;oBAAE,MAAM,KAAK,CAAC,kCAAkC,CAAC,CAAC;gBAC/F,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBAChC,IAAI,MAAM,GAAG,CAAC,EAAE,KAAa,CAAC;gBAC9B,OAAO,CAAC,KAAK,GAAG,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,GAAG,MAAM,EAAE,IAAI,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;oBAC/E,MAAM,IAAI,KAAK,CAAC;oBAChB,IAAI,MAAM,KAAK,IAAI,CAAC,MAAM;wBAAE,MAAM,KAAK,CAAC,qDAAqD,CAAC,CAAC;gBACjG,CAAC;gBACD,OAAO,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,EAAE,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;YACjD,CAAC;oBAAS,CAAC;gBAAC,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;YAAC,CAAC;QACjC,CAAC,CAAC;QACF,IAAI,IAAI,CAAC,aAAa,CAAC,KAAK,QAAQ;YAAE,MAAM,KAAK,CAAC,2CAA2C,CAAC,CAAC;QAC/F,MAAM,IAAI,GAAG,IAAI,CAAC,cAAc,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAC/D,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;YACjF,MAAM,KAAK,CAAC,6CAA6C,CAAC,CAAC;QAC7D,wEAAwE;QACxE,yEAAyE;QACzE,8DAA8D;QAC9D,0EAA0E;QAC1E,MAAM,QAAQ,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QACtE,MAAM,MAAM,GAAG,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3C,IAAI,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,MAAM,EAAE,CAAC;YAClC,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,EAAE,GAAG,CAAC,IAAI,GAAG,CAAC,CAAC;YACnE,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC,CAAC,OAAO,QAAQ,CAAC,MAAM,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YAC9G,MAAM,MAAM,GAAG,6DAA6D,KAAK,oBAAoB,MAAM,gBAAgB,KAAK,wFAAwF,CAAC;YACzN,IAAI,CAAC,KAAK,IAAI,SAAS,CAAC,MAAM,IAAI,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;gBAAE,MAAM,IAAI,wBAAwB,CAAC,MAAM,CAAC,CAAC;YAC7H,MAAM,KAAK,CAAC,MAAM,CAAC,CAAC;QACtB,CAAC;QACD,MAAM,MAAM,GAAG,IAAI,CAAC,eAAe,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACjD,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC,CAAC;QACxE,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC;QAClE,MAAM,kBAAkB,GAAG,KAAK,KAAK,CAAC,IAAI,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,aAAa,CAAC;QAC3F,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,MAAM,CAAC,CAAC,CAAC,KAAK,UAAU,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,IAAI,SAAS,CAAC,CAAC,CAAC,KAAK,kBAAkB,EAAE,CAAC;YACrH,MAAM,KAAK,CAAC,gCAAgC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,EAAE,GAAG,CAAC,IAAI,GAAG,CAAC,cAAc,kBAAkB,kCAAkC,SAAS,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAE,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,YAAY,MAAM,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAE,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,oCAAoC,CAAC,CAAC;QACxU,CAAC;QACD,MAAM,KAAK,GAAG,OAAO,CAAC,MAAM,CAAC;QAC7B,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,GAAG,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QACxE,MAAM,QAAQ,GAAa,EAAE,CAAC;QAC9B,MAAM,MAAM,GAAG,EAAE,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;QACnC,IAAI,CAAC;YACH,KAAK,IAAI,KAAK,GAAG,MAAM,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,KAAK,GAAG,MAAM,CAAC,QAAQ,EAAE,EAAE,CAAC;gBACrE,IAAI,KAAK,CAAC,WAAW,EAAE;oBAAE,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;qBAC9C,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE;oBAAE,MAAM,KAAK,CAAC,yCAAyC,CAAC,CAAC;gBACjF,IAAI,OAAO,CAAC,MAAM,GAAG,QAAQ,CAAC,MAAM,GAAG,GAAG;oBAAE,MAAM,KAAK,CAAC,mDAAmD,CAAC,CAAC;YAC/G,CAAC;QACH,CAAC;gBAAS,CAAC;YAAC,MAAM,CAAC,SAAS,EAAE,CAAC;QAAC,CAAC;QACjC,KAAK,MAAM,KAAK,IAAI,QAAQ,CAAC,IAAI,EAAE;YAAE,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;QAC5E,MAAM,MAAM,GAAG,IAAI,CAAC,aAAa,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC/C,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,wBAAwB,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,iBAAiB,GAAG,CAAC,OAAO,CAAC,MAAM,GAAG,KAAK,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;YACrH,MAAM,KAAK,CAAC,uDAAuD,CAAC,CAAC;QACvE,CAAC;IACH,CAAC,CAAC;IACF,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC;IACnB,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC5E,CAAC;AAED;iFACiF;AACjF,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,WAAmB,EAAE,UAAkB,EAAE,OAAyC;IAC3H,MAAM,IAAI,GAAG,CAAC,WAAW,EAAE,UAAU,CAAC,CAAC;IACvC,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC;IAC/C,MAAM,SAAS,GAAG,GAAG,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC,EAAE,EAAE;QACpD,MAAM,OAAO,GAAG,mBAAmB,CAAC,IAAI,CAAC,CAAC,CAAE,CAAC,CAAC;QAC9C,OAAO,OAAO,CAAC,KAAK,KAAK,OAAO,IAAI,OAAO,CAAC,KAAK,KAAK,OAAO,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,QAAQ,CAAC;IACzG,CAAC,CAAC,CAAC;IACH,MAAM,QAAQ,GAAG,WAAW,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;IAC1C,IAAI,MAAM,GAAG,KAAK,CAAC;IACnB,SAAS,CAAC;QACR,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,OAAO,EAAE,CAAC;YAC9B,IAAI,MAAM,IAAI,CAAC,SAAS,EAAE;gBAAE,MAAM,KAAK,CAAC,2EAA2E,CAAC,CAAC;YACrH,OAAO,KAAK,CAAC;QACf,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,CAAC,KAAK,YAAY,wBAAwB,CAAC,IAAI,WAAW,CAAC,GAAG,EAAE,IAAI,QAAQ;gBAAE,MAAM,KAAK,CAAC;YAC/F,IAAI,CAAC,SAAS,EAAE;gBAAE,MAAM,KAAK,CAAC,iFAAiF,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;YACnI,MAAM,IAAI,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,QAAQ,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC;YAC/F,IAAI,CAAC,SAAS,EAAE;gBAAE,MAAM,KAAK,CAAC,mEAAmE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;YACrH,IAAI,WAAW,CAAC,GAAG,EAAE,IAAI,QAAQ;gBAAE,MAAM,KAAK,CAAC;YAC/C,MAAM,GAAG,IAAI,CAAC;QAChB,CAAC;IACH,CAAC;AACH,CAAC;AAED,MAAM,UAAU,sBAAsB,CACpC,KAAa,EAAE,WAAmB,EAAE,UAAkB,EAAE,QAA4B,EAAE,OAAO,GAAG,KAAK;IAErG,uBAAuB,EAAE,CAAC;IAC1B,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;IAC/C,IAAI,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,IAAI,KAAK,UAAU;QAAE,MAAM,KAAK,CAAC,+DAA+D,CAAC,CAAC;IAC/H,MAAM,OAAO,GAAG,GAAsB,EAAE;QACtC,MAAM,QAAQ,GAAG,mBAAmB,CAAC,WAAW,CAAC,CAAC;QAClD,MAAM,OAAO,GAAG,mBAAmB,CAAC,UAAU,CAAC,CAAC;QAChD,IAAI,WAAW,KAAK,UAAU,IAAI,QAAQ,CAAC,KAAK,KAAK,OAAO;YACxD,CAAC,OAAO,CAAC,KAAK,KAAK,OAAO,IAAI,CAAC,CAAC,OAAO,CAAC,KAAK,KAAK,MAAM,IAAI,OAAO,IAAI,QAAQ,CAAC,CAAC,EAAE,CAAC;YACtF,MAAM,KAAK,CAAC,iEAAiE,CAAC,CAAC;QACjF,CAAC;QACD,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,KAAK,OAAO,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC;QACnF,MAAM,WAAW,GAAG,qBAAqB,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;QAC3D,MAAM,YAAY,GAAG,CAAC,GAAW,EAAE,QAAgB,EAAU,EAAE;YAC7D,MAAM,IAAI,GAAG,QAAQ,GAAG,GAAG,CAAC;YAC5B,MAAM,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,IAAI,GAAG,MAAM,CAAC,CAAC;YAC3C,MAAM,IAAI,GAAG,EAAE,CAAC,QAAQ,CAAC,IAAI,GAAG,MAAM,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;YAC1D,MAAM,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,IAAI,GAAG,UAAU,CAAC,CAAC;YACnD,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC;gBACxH,MAAM,KAAK,CAAC,0DAA0D,CAAC,CAAC;YAC1E,CAAC;YACD,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,QAAQ,EAAE,GAAG,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACxI,CAAC,CAAC;QACF,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;YACvB,IAAI,EAAE,CAAC,YAAY,CAAC,QAAQ,GAAG,GAAG,GAAG,SAAS,EAAE,MAAM,CAAC,CAAC,IAAI,EAAE,KAAK,KAAK,GAAG,KAAK,EAAE,CAAC;gBACjF,MAAM,KAAK,CAAC,iEAAiE,CAAC,CAAC;YACjF,CAAC;QACH,CAAC;QACD,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,eAAe,EAAE,YAAY,CAAC,WAAW,EAAE,QAAQ,CAAC,QAAQ,CAAC;YACxF,cAAc,EAAE,OAAO,CAAC,KAAK,KAAK,OAAO,CAAC,CAAC,CAAC,YAAY,CAAC,UAAU,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAS,CAAC,cAAc,EAAE,CAAC;IACxH,CAAC,CAAC;IACF,MAAM,KAAK,GAAG,OAAO,EAAE,CAAC;IACxB,MAAM,MAAM,GAAG,OAAO,EAAE,CAAC;IACzB,KAAK,MAAM,GAAG,IAAI,CAAC,OAAO,EAAE,aAAa,EAAE,iBAAiB,EAAE,gBAAgB,CAAU,EAAE,CAAC;QACzF,IAAI,KAAK,CAAC,GAAG,CAAC,KAAK,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC,GAAG,CAAC,KAAK,MAAM,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;YAC9E,MAAM,KAAK,CAAC,sEAAsE,CAAC,CAAC;QACtF,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,8GAA8G;AAC9G,MAAM,UAAU,qBAAqB,CAAC,IAAY,EAAE,KAAoC,EAAE,KAA6B;IACrH,MAAM,KAAK,GAAG,KAAK,EAAE,KAAK,IAAI,KAAK,CAAC,cAAc,CAAC,CAAC;IACpD,IAAI,KAAK,CAAC,IAAI,CAAC,KAAK,IAAI,IAAI,KAAK,CAAC,WAAW,CAAC,KAAK,QAAQ,IAAI,KAAK,CAAC,aAAa,CAAC,KAAK,UAAU;QAC9F,KAAK,CAAC,SAAS,CAAC,KAAK,GAAG,IAAI,KAAK,KAAK,SAAS;QAC/C,CAAC,KAAK,CAAC,cAAc,CAAC,KAAK,EAAE,IAAI,KAAK,CAAC,cAAc,CAAC,KAAK,KAAK,CAAC;QACjE,CAAC,KAAK,KAAK,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,KAAK,KAAK,IAAI,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,IAAI,CAAC,CAAC,EAAE,CAAC;QACpH,MAAM,KAAK,CAAC,gFAAgF,CAAC,CAAC;IAChG,CAAC;IACD,uBAAuB,EAAE,CAAC;IAC1B,0EAA0E;IAC1E,qEAAqE;IACrE,IAAI,CAAC,KAAK;QAAE,OAAO;IACnB,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;IAC/C,IAAI,CAAC;QAAC,EAAE,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;IAAC,CAAC;IAChC,OAAO,KAAK,EAAE,CAAC;QAAC,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO;QAAC,MAAM,KAAK,CAAC;IAAC,CAAC;IAC9F,qBAAqB,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;AACvC,CAAC"}

package/dist/daemon/system-guardian-unit.d.ts

@@ -0,0 +1,9 @@
+import type { ManagedRuntime } from './managed-runtime.js';
+export declare const guardianStopProperties: string[];
+export declare const guardianUnitProperties: string[];
+/** Stopping a unit may also stop its dependents or execute arbitrary site hooks. */
+export declare function checkGuardianStopEffects(facts: Record<string, string>, requireLoaded: boolean): void;
+export declare function checkSystemGuardian(unit: string, facts: Record<string, string>, requireLoaded: boolean): void;
+/** Preserve the site's account, environment, restart policy and working directory byte-for-byte. */
+export declare function replaceGuardianExec(text: string, before: ManagedRuntime, after: ManagedRuntime): string;
+//# sourceMappingURL=system-guardian-unit.d.ts.map

package/dist/daemon/system-guardian-unit.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"system-guardian-unit.d.ts","sourceRoot":"","sources":["../../src/daemon/system-guardian-unit.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAM3D,eAAO,MAAM,sBAAsB,UAA8E,CAAC;AAClH,eAAO,MAAM,sBAAsB,UAA+D,CAAC;AAEnG,oFAAoF;AACpF,wBAAgB,wBAAwB,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,aAAa,EAAE,OAAO,GAAG,IAAI,CAOpG;AAED,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,aAAa,EAAE,OAAO,GAAG,IAAI,CAK7G;AAED,oGAAoG;AACpG,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,cAAc,EAAE,KAAK,EAAE,cAAc,GAAG,MAAM,CAWvG"}

package/dist/daemon/system-guardian-unit.js

@@ -0,0 +1,41 @@
+import path from 'node:path';
+import { unitValue } from '../commands/service-units.js';
+const blockers = [
+    'DropInPaths', 'ConsistsOf', 'BoundBy', 'RequiredBy', 'RequisiteOf', 'PropagatesStopTo', 'OnFailure', 'OnSuccess', 'Triggers', 'TriggeredBy',
+];
+const serviceHooks = ['ExecCondition', 'ExecStartPre', 'ExecStartPost', 'ExecStop', 'ExecStopPost'];
+export const guardianStopProperties = [...blockers, ...serviceHooks, 'LoadState', 'NeedDaemonReload', 'KillMode'];
+export const guardianUnitProperties = [...guardianStopProperties, 'FragmentPath', 'User', 'Group'];
+/** Stopping a unit may also stop its dependents or execute arbitrary site hooks. */
+export function checkGuardianStopEffects(facts, requireLoaded) {
+    // systemctl omits empty command arrays even with --all. For these fields
+    // also validate the loaded, drop-in-free fragment in replaceGuardianExec.
+    const unsupported = [...blockers.filter(name => facts[name] !== ''), ...serviceHooks.filter(name => facts[name])];
+    if (unsupported.length)
+        throw Error('Independent guardian stop is not proven. Inspect systemd properties: ' + unsupported.join(', '));
+    if (facts['LoadState'] !== 'loaded' || facts['KillMode'] !== 'control-group' ||
+        requireLoaded && facts['NeedDaemonReload'] !== 'no')
+        throw Error('Unsupported or changed system guardian unit');
+}
+export function checkSystemGuardian(unit, facts, requireLoaded) {
+    checkGuardianStopEffects(facts, requireLoaded);
+    if (!/^omnitron-[a-z0-9-]+\.service$/.test(unit) ||
+        facts['FragmentPath'] !== '/etc/systemd/system/' + unit || !['', 'root'].includes(facts['User'] ?? '?') ||
+        !['', 'root'].includes(facts['Group'] ?? '?'))
+        throw Error('Unsupported or changed system guardian unit');
+}
+/** Preserve the site's account, environment, restart policy and working directory byte-for-byte. */
+export function replaceGuardianExec(text, before, after) {
+    const line = (config) => {
+        const root = path.join(config.instanceHome, 'runtime/releases', config.backend.artifact);
+        return 'ExecStart=' + [path.join(root, 'node'), path.join(root, 'packages/0/dist/daemon/managed-entry.js'), 'backend'].map(unitValue).join(' ');
+    };
+    if (text.split('\n').some(l => /^\s*(?:\.include|Exec(?:Condition|StartPre|StartPost|Stop|StopPost)\s*=)/.test(l) || /\\$/.test(l)))
+        throw Error('Guardian unit has unqualified external hooks, includes or continuation lines');
+    const current = line(before);
+    const execs = text.split('\n').filter(l => /^\s*ExecStart\s*=/.test(l));
+    if (execs.length !== 1 || execs[0] !== current)
+        throw Error('The existing guardian ExecStart does not exactly select its sealed artifact');
+    return text.split('\n').map(l => l === current ? line(after) : l).join('\n');
+}
+//# sourceMappingURL=system-guardian-unit.js.map

package/dist/daemon/system-guardian-unit.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"system-guardian-unit.js","sourceRoot":"","sources":["../../src/daemon/system-guardian-unit.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,SAAS,EAAE,MAAM,8BAA8B,CAAC;AAGzD,MAAM,QAAQ,GAAG;IACf,aAAa,EAAE,YAAY,EAAE,SAAS,EAAE,YAAY,EAAE,aAAa,EAAE,kBAAkB,EAAE,WAAW,EAAE,WAAW,EAAE,UAAU,EAAE,aAAa;CAC7I,CAAC;AACF,MAAM,YAAY,GAAG,CAAC,eAAe,EAAE,cAAc,EAAE,eAAe,EAAE,UAAU,EAAE,cAAc,CAAC,CAAC;AACpG,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,GAAG,QAAQ,EAAE,GAAG,YAAY,EAAE,WAAW,EAAE,kBAAkB,EAAE,UAAU,CAAC,CAAC;AAClH,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,GAAG,sBAAsB,EAAE,cAAc,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;AAEnG,oFAAoF;AACpF,MAAM,UAAU,wBAAwB,CAAC,KAA6B,EAAE,aAAsB;IAC5F,yEAAyE;IACzE,0EAA0E;IAC1E,MAAM,WAAW,GAAG,CAAC,GAAG,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,EAAE,GAAG,YAAY,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClH,IAAI,WAAW,CAAC,MAAM;QAAE,MAAM,KAAK,CAAC,uEAAuE,GAAG,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IACtI,IAAI,KAAK,CAAC,WAAW,CAAC,KAAK,QAAQ,IAAI,KAAK,CAAC,UAAU,CAAC,KAAK,eAAe;QACxE,aAAa,IAAI,KAAK,CAAC,kBAAkB,CAAC,KAAK,IAAI;QAAE,MAAM,KAAK,CAAC,6CAA6C,CAAC,CAAC;AACtH,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,IAAY,EAAE,KAA6B,EAAE,aAAsB;IACrG,wBAAwB,CAAC,KAAK,EAAE,aAAa,CAAC,CAAC;IAC/C,IAAI,CAAC,gCAAgC,CAAC,IAAI,CAAC,IAAI,CAAC;QAC5C,KAAK,CAAC,cAAc,CAAC,KAAK,sBAAsB,GAAG,IAAI,IAAI,CAAC,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,GAAG,CAAC;QACvG,CAAC,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,GAAG,CAAC;QAAE,MAAM,KAAK,CAAC,6CAA6C,CAAC,CAAC;AAChH,CAAC;AAED,oGAAoG;AACpG,MAAM,UAAU,mBAAmB,CAAC,IAAY,EAAE,MAAsB,EAAE,KAAqB;IAC7F,MAAM,IAAI,GAAG,CAAC,MAAsB,EAAE,EAAE;QACtC,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,YAAY,EAAE,kBAAkB,EAAE,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QACzF,OAAO,YAAY,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,yCAAyC,CAAC,EAAE,SAAS,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAClJ,CAAC,CAAC;IACF,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,0EAA0E,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACjI,MAAM,KAAK,CAAC,8EAA8E,CAAC,CAAC;IAC9F,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC;IAC7B,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,mBAAmB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IACxE,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,OAAO;QAAE,MAAM,KAAK,CAAC,6EAA6E,CAAC,CAAC;IAC3I,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC/E,CAAC"}

package/dist/database/connection.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"connection.d.ts","sourceRoot":"","sources":["../../src/database/connection.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH,OAAO,KAAK,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,IAAI,CAAC;AAC3C,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAGrC,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAMpD,qDAAqD;AACrD,eAAO,MAAM,gBAAgB,OAAO,CAAC;AACrC,eAAO,MAAM,gBAAgB,aAAa,CAAC;AAC3C,eAAO,MAAM,oBAAoB,aAAa,CAAC;AAC/C,eAAO,MAAM,oBAAoB,aAAa,CAAC;AAC/C,eAAO,MAAM,gBAAgB,cAAc,CAAC;AAE5C,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED;;;;;;GAMG;AACH,wBAAgB,uBAAuB,IAAI,gBAAgB,CAgB1D;AAYD,+GAA+G;AAC/G,wBAAgB,0BAA0B,CAAC,MAAM,GAAE,gBAA4C,GAAG,MAAM,CAKvG;AAMD;;;;;;;;;;GAUG;AACH,wBAAsB,kBAAkB,CACtC,SAAS,GAAE,OAAO,CAAC,UAAU,CAAM,EACnC,WAAW,CAAC,EAAE,CAAC,GAAG,EAAE,KAAK,KAAK,IAAI,GACjC,OAAO,CAAC,IAAI,CAAC,CA4Bf;AAED;;;;;;;;GAQG;AACH,wBAAsB,gBAAgB,CAAC,EAAE,GAAG,gBAAgB,EAC1D,SAAS,GAAE,OAAO,CAAC,UAAU,CAAM,EACnC,WAAW,CAAC,EAAE,CAAC,GAAG,EAAE,KAAK,KAAK,IAAI,GACjC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAIrB"}
+{"version":3,"file":"connection.d.ts","sourceRoot":"","sources":["../../src/database/connection.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH,OAAO,KAAK,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,IAAI,CAAC;AAC3C,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAGrC,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAMpD,qDAAqD;AACrD,eAAO,MAAM,gBAAgB,OAAO,CAAC;AACrC,eAAO,MAAM,gBAAgB,aAAa,CAAC;AAC3C,eAAO,MAAM,oBAAoB,aAAa,CAAC;AAC/C,eAAO,MAAM,oBAAoB,aAAa,CAAC;AAC/C,eAAO,MAAM,gBAAgB,cAAc,CAAC;AAE5C,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED;;;;;;GAMG;AACH,wBAAgB,uBAAuB,IAAI,gBAAgB,CAgB1D;AAYD,+GAA+G;AAC/G,wBAAgB,0BAA0B,CAAC,MAAM,GAAE,gBAA4C,GAAG,MAAM,CAKvG;AAMD;;;;;;;;;;GAUG;AACH,wBAAsB,kBAAkB,CACtC,SAAS,GAAE,OAAO,CAAC,UAAU,CAAM,EACnC,WAAW,CAAC,EAAE,CAAC,GAAG,EAAE,KAAK,KAAK,IAAI,GACjC,OAAO,CAAC,IAAI,CAAC,CAwBf;AAED;;;;;;;;GAQG;AACH,wBAAsB,gBAAgB,CAAC,EAAE,GAAG,gBAAgB,EAC1D,SAAS,GAAE,OAAO,CAAC,UAAU,CAAM,EACnC,WAAW,CAAC,EAAE,CAAC,GAAG,EAAE,KAAK,KAAK,IAAI,GACjC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAIrB"}

package/dist/database/connection.js

@@ -86,7 +86,7 @@ export function omnitronPgConnectionString(config = resolveOmnitronPgConfig()) {
  * `uncaughtException`. A pool-level listener catches the re-emitted rest.
  */
 export async function createOmnitronPool(overrides = {}, onPoolError) {
-    const config = resolveOmnitronPgConfig();
+    const config = overrides.connectionString === undefined ? resolveOmnitronPgConfig() : undefined;
     const pg = await import('pg');
     // A function now, not a class: `titan-database` declares pg, mysql2 and
     // better-sqlite3 as OPTIONAL peer dependencies and used to import all three
@@ -96,11 +96,7 @@ export async function createOmnitronPool(overrides = {}, onPoolError) {
     const { resilientPgClient } = await import('@omnitron-dev/titan-database');
     const ResilientPgClient = await resilientPgClient();
     const pool = new pg.default.Pool({
-        host: config.host,
-        port: config.port,
-        database: config.database,
-        user: config.user,
-        password: config.password,
+        ...config,
         Client: ResilientPgClient,
         ...overrides,
     });

package/dist/database/connection.js.map

@@ -1 +1 @@
-{"version":3,"file":"connection.js","sourceRoot":"","sources":["../../src/database/connection.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAKH,OAAO,EAAE,MAAM,EAAE,MAAM,yBAAyB,CAAC;AAGjD,8EAA8E;AAC9E,sEAAsE;AACtE,8EAA8E;AAE9E,qDAAqD;AACrD,MAAM,CAAC,MAAM,gBAAgB,GAAG,IAAI,CAAC;AACrC,MAAM,CAAC,MAAM,gBAAgB,GAAG,UAAU,CAAC;AAC3C,MAAM,CAAC,MAAM,oBAAoB,GAAG,UAAU,CAAC;AAC/C,MAAM,CAAC,MAAM,oBAAoB,GAAG,UAAU,CAAC;AAC/C,MAAM,CAAC,MAAM,gBAAgB,GAAG,WAAW,CAAC;AAU5C;;;;;;GAMG;AACH,MAAM,UAAU,uBAAuB;IACrC,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,qBAAqB,CAAC;IAC3C,IAAI,CAAC,GAAG;QAAE,OAAO,uBAAuB,EAAE,CAAC;IAE3C,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;QAC5B,OAAO;YACL,IAAI,EAAE,MAAM,CAAC,QAAQ,IAAI,gBAAgB;YACzC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,gBAAgB;YAC1D,QAAQ,EAAE,kBAAkB,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,IAAI,oBAAoB;YACxF,IAAI,EAAE,kBAAkB,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,gBAAgB;YAC7D,QAAQ,EAAE,kBAAkB,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,oBAAoB;SACtE,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,uBAAuB,EAAE,CAAC;IACnC,CAAC;AACH,CAAC;AAED,SAAS,uBAAuB;IAC9B,OAAO;QACL,IAAI,EAAE,gBAAgB;QACtB,IAAI,EAAE,gBAAgB;QACtB,QAAQ,EAAE,oBAAoB;QAC9B,IAAI,EAAE,gBAAgB;QACtB,QAAQ,EAAE,oBAAoB;KAC/B,CAAC;AACJ,CAAC;AAED,+GAA+G;AAC/G,MAAM,UAAU,0BAA0B,CAAC,MAAM,GAAqB,uBAAuB,EAAE;IAC7F,MAAM,IAAI,GAAG,kBAAkB,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAC7C,MAAM,QAAQ,GAAG,kBAAkB,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IACrD,MAAM,QAAQ,GAAG,kBAAkB,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IACrD,OAAO,gBAAgB,IAAI,IAAI,QAAQ,IAAI,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,IAAI,IAAI,QAAQ,EAAE,CAAC;AACtF,CAAC;AAED,8EAA8E;AAC9E,0BAA0B;AAC1B,8EAA8E;AAE9E;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,SAAS,GAAwB,EAAE,EACnC,WAAkC;IAElC,MAAM,MAAM,GAAG,uBAAuB,EAAE,CAAC;IACzC,MAAM,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC;IAC9B,wEAAwE;IACxE,4EAA4E;IAC5E,4EAA4E;IAC5E,2EAA2E;IAC3E,sEAAsE;IACtE,MAAM,EAAE,iBAAiB,EAAE,GAAG,MAAM,MAAM,CAAC,8BAA8B,CAAC,CAAC;IAC3E,MAAM,iBAAiB,GAAG,MAAM,iBAAiB,EAAE,CAAC;IAEpD,MAAM,IAAI,GAAG,IAAI,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;QAC/B,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,MAAM,EAAE,iBAAiB;QACzB,GAAG,SAAS;KACb,CAAC,CAAC;IAEH,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;QACvB,IAAI,WAAW;YAAE,WAAW,CAAC,GAAY,CAAC,CAAC;;YAEtC,OAAO,CAAC,KAAK,CAAC,0BAA0B,EAAG,GAAyB,CAAC,IAAI,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC;IAC/F,CAAC,CAAC,CAAC;IAEH,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,SAAS,GAAwB,EAAE,EACnC,WAAkC;IAElC,MAAM,EAAE,MAAM,EAAE,eAAe,EAAE,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC,CAAC;IAC3D,MAAM,IAAI,GAAG,MAAM,kBAAkB,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;IAC9D,OAAO,IAAI,MAAM,CAAK,EAAE,OAAO,EAAE,IAAI,eAAe,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC;AACpE,CAAC"}
+{"version":3,"file":"connection.js","sourceRoot":"","sources":["../../src/database/connection.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAKH,OAAO,EAAE,MAAM,EAAE,MAAM,yBAAyB,CAAC;AAGjD,8EAA8E;AAC9E,sEAAsE;AACtE,8EAA8E;AAE9E,qDAAqD;AACrD,MAAM,CAAC,MAAM,gBAAgB,GAAG,IAAI,CAAC;AACrC,MAAM,CAAC,MAAM,gBAAgB,GAAG,UAAU,CAAC;AAC3C,MAAM,CAAC,MAAM,oBAAoB,GAAG,UAAU,CAAC;AAC/C,MAAM,CAAC,MAAM,oBAAoB,GAAG,UAAU,CAAC;AAC/C,MAAM,CAAC,MAAM,gBAAgB,GAAG,WAAW,CAAC;AAU5C;;;;;;GAMG;AACH,MAAM,UAAU,uBAAuB;IACrC,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,qBAAqB,CAAC;IAC3C,IAAI,CAAC,GAAG;QAAE,OAAO,uBAAuB,EAAE,CAAC;IAE3C,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;QAC5B,OAAO;YACL,IAAI,EAAE,MAAM,CAAC,QAAQ,IAAI,gBAAgB;YACzC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,gBAAgB;YAC1D,QAAQ,EAAE,kBAAkB,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,IAAI,oBAAoB;YACxF,IAAI,EAAE,kBAAkB,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,gBAAgB;YAC7D,QAAQ,EAAE,kBAAkB,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,oBAAoB;SACtE,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,uBAAuB,EAAE,CAAC;IACnC,CAAC;AACH,CAAC;AAED,SAAS,uBAAuB;IAC9B,OAAO;QACL,IAAI,EAAE,gBAAgB;QACtB,IAAI,EAAE,gBAAgB;QACtB,QAAQ,EAAE,oBAAoB;QAC9B,IAAI,EAAE,gBAAgB;QACtB,QAAQ,EAAE,oBAAoB;KAC/B,CAAC;AACJ,CAAC;AAED,+GAA+G;AAC/G,MAAM,UAAU,0BAA0B,CAAC,MAAM,GAAqB,uBAAuB,EAAE;IAC7F,MAAM,IAAI,GAAG,kBAAkB,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAC7C,MAAM,QAAQ,GAAG,kBAAkB,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IACrD,MAAM,QAAQ,GAAG,kBAAkB,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IACrD,OAAO,gBAAgB,IAAI,IAAI,QAAQ,IAAI,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,IAAI,IAAI,QAAQ,EAAE,CAAC;AACtF,CAAC;AAED,8EAA8E;AAC9E,0BAA0B;AAC1B,8EAA8E;AAE9E;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,SAAS,GAAwB,EAAE,EACnC,WAAkC;IAElC,MAAM,MAAM,GAAG,SAAS,CAAC,gBAAgB,KAAK,SAAS,CAAC,CAAC,CAAC,uBAAuB,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;IAChG,MAAM,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC;IAC9B,wEAAwE;IACxE,4EAA4E;IAC5E,4EAA4E;IAC5E,2EAA2E;IAC3E,sEAAsE;IACtE,MAAM,EAAE,iBAAiB,EAAE,GAAG,MAAM,MAAM,CAAC,8BAA8B,CAAC,CAAC;IAC3E,MAAM,iBAAiB,GAAG,MAAM,iBAAiB,EAAE,CAAC;IAEpD,MAAM,IAAI,GAAG,IAAI,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;QAC/B,GAAG,MAAM;QACT,MAAM,EAAE,iBAAiB;QACzB,GAAG,SAAS;KACb,CAAC,CAAC;IAEH,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;QACvB,IAAI,WAAW;YAAE,WAAW,CAAC,GAAY,CAAC,CAAC;;YAEtC,OAAO,CAAC,KAAK,CAAC,0BAA0B,EAAG,GAAyB,CAAC,IAAI,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC;IAC/F,CAAC,CAAC,CAAC;IAEH,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,SAAS,GAAwB,EAAE,EACnC,WAAkC;IAElC,MAAM,EAAE,MAAM,EAAE,eAAe,EAAE,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC,CAAC;IAC3D,MAAM,IAAI,GAAG,MAAM,kBAAkB,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;IAC9D,OAAO,IAAI,MAAM,CAAK,EAAE,OAAO,EAAE,IAAI,eAAe,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC;AACpE,CAAC"}

package/dist/database/log-durability.d.ts

@@ -0,0 +1,5 @@
+import { type Transaction } from 'kysely';
+import type { OmnitronDatabase } from './schema.js';
+/** A successful SQL statement alone is not a durable log receipt. */
+export declare function assertLogDurability(trx: Transaction<OmnitronDatabase>): Promise<'persistent' | 'volatile'>;
+//# sourceMappingURL=log-durability.d.ts.map

package/dist/database/log-durability.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"log-durability.d.ts","sourceRoot":"","sources":["../../src/database/log-durability.ts"],"names":[],"mappings":"AAAA,OAAO,EAAO,KAAK,WAAW,EAAE,MAAM,QAAQ,CAAC;AAC/C,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAGpD,qEAAqE;AACrE,wBAAsB,mBAAmB,CAAC,GAAG,EAAE,WAAW,CAAC,gBAAgB,CAAC,GAAG,OAAO,CAAC,YAAY,GAAG,UAAU,CAAC,CAqBhH"}

package/dist/database/log-durability.js

@@ -0,0 +1,28 @@
+import { sql } from 'kysely';
+import { dialectOf } from './dialect.js';
+/** A successful SQL statement alone is not a durable log receipt. */
+export async function assertLogDurability(trx) {
+    if (dialectOf(trx) === 'postgres') {
+        const result = await sql `SELECT
+      set_config('synchronous_commit', 'on', true), set_config('statement_timeout', '10000', true),
+      current_setting('fsync') AS fsync, current_setting('full_page_writes') AS pages,
+      (SELECT relpersistence FROM pg_class WHERE oid = 'logs'::regclass) AS persistence`.execute(trx);
+        const state = result.rows[0];
+        if (state?.fsync !== 'on' || state.pages !== 'on' || state.persistence !== 'p') {
+            throw new Error('Durable logs require PostgreSQL fsync=on, full_page_writes=on and a logged logs table');
+        }
+        return 'persistent';
+    }
+    if (dialectOf(trx) !== 'sqlite')
+        throw new Error('Unknown log database durability');
+    const databases = await sql `PRAGMA database_list`.execute(trx);
+    if (!databases.rows.find(row => row.name === 'main')?.file)
+        return 'volatile';
+    const sync = Number((await sql `PRAGMA synchronous`.execute(trx)).rows[0]?.synchronous);
+    const mode = (await sql `PRAGMA journal_mode`.execute(trx)).rows[0]?.journal_mode;
+    if (!mode || !['wal', 'delete', 'truncate', 'persist'].includes(mode) || sync < (mode === 'wal' ? 2 : 3)) {
+        throw new Error('Durable logs require SQLite WAL with synchronous=FULL/EXTRA, or a disk rollback journal with EXTRA');
+    }
+    return 'persistent';
+}
+//# sourceMappingURL=log-durability.js.map

package/dist/database/log-durability.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"log-durability.js","sourceRoot":"","sources":["../../src/database/log-durability.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAoB,MAAM,QAAQ,CAAC;AAE/C,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAEzC,qEAAqE;AACrE,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,GAAkC;IAC1E,IAAI,SAAS,CAAC,GAAG,CAAC,KAAK,UAAU,EAAE,CAAC;QAClC,MAAM,MAAM,GAAG,MAAM,GAAG,CAAuD;;;wFAGK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAClG,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC7B,IAAI,KAAK,EAAE,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,WAAW,KAAK,GAAG,EAAE,CAAC;YAC/E,MAAM,IAAI,KAAK,CAAC,uFAAuF,CAAC,CAAC;QAC3G,CAAC;QACD,OAAO,YAAY,CAAC;IACtB,CAAC;IACD,IAAI,SAAS,CAAC,GAAG,CAAC,KAAK,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;IACpF,MAAM,SAAS,GAAG,MAAM,GAAG,CAAgC,sBAAsB,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAC/F,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,IAAI,KAAK,MAAM,CAAC,EAAE,IAAI;QAAE,OAAO,UAAU,CAAC;IAC9E,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,MAAM,GAAG,CAAyB,oBAAoB,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,WAAW,CAAC,CAAC;IAChH,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAA0B,qBAAqB,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,YAAY,CAAC;IAC3G,IAAI,CAAC,IAAI,IAAI,CAAC,CAAC,KAAK,EAAE,QAAQ,EAAE,UAAU,EAAE,SAAS,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,IAAI,GAAG,CAAC,IAAI,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACzG,MAAM,IAAI,KAAK,CAAC,oGAAoG,CAAC,CAAC;IACxH,CAAC;IACD,OAAO,YAAY,CAAC;AACtB,CAAC"}

package/dist/database/migrate.js

@@ -10,27 +10,14 @@
  *   tsx src/database/migrate.ts          (apply all pending)
  *   tsx src/database/migrate.ts --down   (rollback last)
  */
-import { createMigrationRunner } from '@kysera/migrations';
+import { createOmnitronMigrationRunner } from './migration-runner.js';
 import { createOmnitronDb, resolveOmnitronPgConfig } from './connection.js';
-import { OMNITRON_MIGRATIONS } from './migrations/index.js';
 const isDown = process.argv.includes('--down');
 async function run() {
     const { host, port, database } = resolveOmnitronPgConfig();
     console.log(`Target: ${host}:${port}/${database}`);
     const db = await createOmnitronDb({ max: 2 });
-    const runner = createMigrationRunner(db, OMNITRON_MIGRATIONS, {
-        verbose: true,
-        useTransactions: true,
-        advisoryLock: true,
-        logger: {
-            info: (msg) => console.log(msg),
-            warn: (msg) => console.warn(msg),
-            error: (msg) => console.error(msg),
-            debug: () => { },
-            trace: () => { },
-            fatal: (msg) => console.error(msg),
-        },
-    });
+    const runner = createOmnitronMigrationRunner(db);
     try {
         if (isDown) {
             const result = await runner.down(1);

package/dist/database/migrate.js.map

@@ -1 +1 @@
-{"version":3,"file":"migrate.js","sourceRoot":"","sources":["../../src/database/migrate.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,qBAAqB,EAAE,MAAM,oBAAoB,CAAC;AAE3D,OAAO,EAAE,gBAAgB,EAAE,uBAAuB,EAAE,MAAM,iBAAiB,CAAC;AAC5E,OAAO,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAE5D,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;AAE/C,KAAK,UAAU,GAAG;IAChB,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,uBAAuB,EAAE,CAAC;IAC3D,OAAO,CAAC,GAAG,CAAC,WAAW,IAAI,IAAI,IAAI,IAAI,QAAQ,EAAE,CAAC,CAAC;IAEnD,MAAM,EAAE,GAAG,MAAM,gBAAgB,CAAU,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;IAEvD,MAAM,MAAM,GAAG,qBAAqB,CAAC,EAAE,EAAE,mBAAmB,EAAE;QAC5D,OAAO,EAAE,IAAI;QACb,eAAe,EAAE,IAAI;QACrB,YAAY,EAAE,IAAI;QAClB,MAAM,EAAE;YACN,IAAI,EAAE,CAAC,GAAW,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC;YACvC,IAAI,EAAE,CAAC,GAAW,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC;YACxC,KAAK,EAAE,CAAC,GAAW,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC;YAC1C,KAAK,EAAE,GAAG,EAAE,GAAE,CAAC;YACf,KAAK,EAAE,GAAG,EAAE,GAAE,CAAC;YACf,KAAK,EAAE,CAAC,GAAW,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC;SAC3C;KACF,CAAC,CAAC;IAEH,IAAI,CAAC;QACH,IAAI,MAAM,EAAE,CAAC;YACX,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YACpC,OAAO,CAAC,GAAG,CAAC,eAAe,MAAM,CAAC,QAAQ,CAAC,MAAM,gBAAgB,CAAC,CAAC;QACrE,CAAC;aAAM,CAAC;YACN,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,EAAE,EAAE,CAAC;YACjC,OAAO,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,wBAAwB,CAAC,CAAC;QACjE,CAAC;IACH,CAAC;YAAS,CAAC;QACT,MAAM,EAAE,CAAC,OAAO,EAAE,CAAC;IACrB,CAAC;AACH,CAAC;AAED,GAAG,EAAE,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;IAClB,OAAO,CAAC,KAAK,CAAC,mBAAmB,EAAE,GAAG,CAAC,CAAC;IACxC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC"}
+{"version":3,"file":"migrate.js","sourceRoot":"","sources":["../../src/database/migrate.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,6BAA6B,EAAE,MAAM,uBAAuB,CAAC;AAEtE,OAAO,EAAE,gBAAgB,EAAE,uBAAuB,EAAE,MAAM,iBAAiB,CAAC;AAE5E,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;AAE/C,KAAK,UAAU,GAAG;IAChB,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,uBAAuB,EAAE,CAAC;IAC3D,OAAO,CAAC,GAAG,CAAC,WAAW,IAAI,IAAI,IAAI,IAAI,QAAQ,EAAE,CAAC,CAAC;IAEnD,MAAM,EAAE,GAAG,MAAM,gBAAgB,CAAU,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;IAEvD,MAAM,MAAM,GAAG,6BAA6B,CAAC,EAAE,CAAC,CAAC;IAEjD,IAAI,CAAC;QACH,IAAI,MAAM,EAAE,CAAC;YACX,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YACpC,OAAO,CAAC,GAAG,CAAC,eAAe,MAAM,CAAC,QAAQ,CAAC,MAAM,gBAAgB,CAAC,CAAC;QACrE,CAAC;aAAM,CAAC;YACN,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,EAAE,EAAE,CAAC;YACjC,OAAO,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,wBAAwB,CAAC,CAAC;QACjE,CAAC;IACH,CAAC;YAAS,CAAC;QACT,MAAM,EAAE,CAAC,OAAO,EAAE,CAAC;IACrB,CAAC;AACH,CAAC;AAED,GAAG,EAAE,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;IAClB,OAAO,CAAC,KAAK,CAAC,mBAAmB,EAAE,GAAG,CAAC,CAAC;IACxC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC"}

package/dist/database/migration-registry-compatibility.d.ts

@@ -0,0 +1,13 @@
+export interface MigrationChecksumChange {
+    name: string;
+    before: string | null;
+    after: string | null;
+}
+/**
+ * Compare declarations without importing either registry or executing migrations.
+ * Only a literal checksum on an imported procedural migration may differ. Names,
+ * order, bindings and every other executable AST node must remain identical.
+ * The caller separately requires byte-identical migration files and directories.
+ */
+export declare function compareMigrationChecksumMetadata(before: string, after: string, registry: string): MigrationChecksumChange[];
+//# sourceMappingURL=migration-registry-compatibility.d.ts.map

package/dist/database/migration-registry-compatibility.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"migration-registry-compatibility.d.ts","sourceRoot":"","sources":["../../src/database/migration-registry-compatibility.ts"],"names":[],"mappings":"AAEA,MAAM,WAAW,uBAAuB;IACtC,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;CACtB;AAKD;;;;;GAKG;AACH,wBAAgB,gCAAgC,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,uBAAuB,EAAE,CAe3H"}

package/dist/database/migration-registry-compatibility.js

@@ -0,0 +1,108 @@
+import { parse } from 'acorn';
+const MIGRATION = /^\d{3}_[a-z0-9_]+$/;
+const SHA256 = /^[a-f0-9]{64}$/;
+/**
+ * Compare declarations without importing either registry or executing migrations.
+ * Only a literal checksum on an imported procedural migration may differ. Names,
+ * order, bindings and every other executable AST node must remain identical.
+ * The caller separately requires byte-identical migration files and directories.
+ */
+export function compareMigrationChecksumMetadata(before, after, registry) {
+    const left = readRegistry(before, registry), right = readRegistry(after, registry);
+    if (left.program !== right.program)
+        throw new Error('Migration registry execution changed');
+    const changes = [];
+    for (const [name, checksum] of left.checksums) {
+        const next = right.checksums.get(name);
+        if (next === undefined)
+            throw new Error('Migration registry membership changed');
+        if (checksum === next)
+            continue;
+        // Introducing a checksum (or returning to an older registry without it) is
+        // reversible metadata. Replacing an already declared checksum is drift.
+        if (checksum !== null && next !== null)
+            throw new Error(`Migration checksum changed: ${name}`);
+        changes.push({ name, before: checksum, after: next });
+    }
+    if (!changes.length)
+        throw new Error('Registry change is not a checksum metadata transition');
+    return changes;
+}
+function propertyName(property) {
+    if (property.computed || property.method || property.kind !== 'init' || property.shorthand)
+        return null;
+    return property.key.type === 'Identifier' ? property.key.name :
+        property.key.type === 'Literal' && typeof property.key.value === 'string' ? property.key.value : null;
+}
+function importedMember(expression, member, imports) {
+    if (expression.type !== 'MemberExpression')
+        return null;
+    const value = expression;
+    if (value.computed || value.optional || value.object.type !== 'Identifier' ||
+        value.property.type !== 'Identifier' || value.property.name !== member)
+        return null;
+    return imports.get(value.object.name) ?? null;
+}
+function readRegistry(source, registry) {
+    if (Buffer.byteLength(source) > 1024 * 1024)
+        throw new Error('Migration registry exceeds its inspection budget');
+    const program = parse(source, { ecmaVersion: 'latest', sourceType: 'module' });
+    const imports = new Map();
+    for (const statement of program.body) {
+        if (statement.type !== 'ImportDeclaration' || typeof statement.source.value !== 'string')
+            continue;
+        const file = /^\.\/(\d{3}_[a-z0-9_]+)\.js$/.exec(statement.source.value)?.[1];
+        if (!file)
+            continue;
+        for (const specifier of statement.specifiers) {
+            if (specifier.type === 'ImportNamespaceSpecifier')
+                imports.set(specifier.local.name, file);
+        }
+    }
+    const declarations = program.body.flatMap(statement => statement.type === 'ExportNamedDeclaration' &&
+        statement.declaration?.type === 'VariableDeclaration' && statement.declaration.kind === 'const'
+        ? statement.declaration.declarations.filter(declaration => declaration.id.type === 'Identifier' && declaration.id.name === registry) : []);
+    const array = declarations.length === 1 ? declarations[0]?.init : null;
+    if (array?.type !== 'ArrayExpression')
+        throw new Error('An explicit ordered migration registry is required');
+    const names = new Set(), checksums = new Map();
+    for (const entry of array.elements) {
+        if (!entry || entry.type === 'SpreadElement')
+            throw new Error('Dynamic migration registry entries require a schema transition');
+        if (entry.type !== 'ObjectExpression') {
+            const name = importedMember(entry, 'migration', imports);
+            if (!name || names.has(name))
+                throw new Error('Migration registry entries must reference distinct immutable modules');
+            names.add(name);
+            continue;
+        }
+        const properties = new Map();
+        for (const property of entry.properties) {
+            const name = property.type === 'Property' ? propertyName(property) : null;
+            if (!name || !['name', 'up', 'down', 'checksum'].includes(name) || properties.has(name)) {
+                throw new Error('Procedural migrations require explicit, unique data properties');
+            }
+            properties.set(name, property);
+        }
+        const nameNode = properties.get('name')?.value;
+        const name = nameNode?.type === 'Literal' && typeof nameNode.value === 'string' ? nameNode.value : null;
+        const up = properties.get('up')?.value, down = properties.get('down')?.value;
+        if (!name || !MIGRATION.test(name) || names.has(name) || !up || importedMember(up, 'up', imports) !== name ||
+            (down && importedMember(down, 'down', imports) !== name)) {
+            throw new Error('Procedural migration bindings must match their immutable named module');
+        }
+        names.add(name);
+        const checksumProperty = properties.get('checksum');
+        const value = checksumProperty?.value;
+        if (value && (value.type !== 'Literal' || typeof value.value !== 'string' || !SHA256.test(value.value))) {
+            throw new Error('Migration checksum metadata must be a literal SHA-256');
+        }
+        checksums.set(name, value ? value.value : null);
+        if (checksumProperty)
+            entry.properties = entry.properties.filter(property => property !== checksumProperty);
+    }
+    // Source offsets and comments are not code. Literal values, import paths,
+    // statement/property order and all executable nodes remain in the comparison.
+    return { checksums, program: JSON.stringify(program, (key, value) => key === 'start' || key === 'end' ? undefined : value) };
+}
+//# sourceMappingURL=migration-registry-compatibility.js.map

package/dist/database/migration-registry-compatibility.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"migration-registry-compatibility.js","sourceRoot":"","sources":["../../src/database/migration-registry-compatibility.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAgF,MAAM,OAAO,CAAC;AAQ5G,MAAM,SAAS,GAAG,oBAAoB,CAAC;AACvC,MAAM,MAAM,GAAG,gBAAgB,CAAC;AAEhC;;;;;GAKG;AACH,MAAM,UAAU,gCAAgC,CAAC,MAAc,EAAE,KAAa,EAAE,QAAgB;IAC9F,MAAM,IAAI,GAAG,YAAY,CAAC,MAAM,EAAE,QAAQ,CAAC,EAAE,KAAK,GAAG,YAAY,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;IACnF,IAAI,IAAI,CAAC,OAAO,KAAK,KAAK,CAAC,OAAO;QAAE,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;IAC5F,MAAM,OAAO,GAA8B,EAAE,CAAC;IAC9C,KAAK,MAAM,CAAC,IAAI,EAAE,QAAQ,CAAC,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;QAC9C,MAAM,IAAI,GAAG,KAAK,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACvC,IAAI,IAAI,KAAK,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;QACjF,IAAI,QAAQ,KAAK,IAAI;YAAE,SAAS;QAChC,2EAA2E;QAC3E,wEAAwE;QACxE,IAAI,QAAQ,KAAK,IAAI,IAAI,IAAI,KAAK,IAAI;YAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,IAAI,EAAE,CAAC,CAAC;QAC/F,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACxD,CAAC;IACD,IAAI,CAAC,OAAO,CAAC,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAC;IAC9F,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,YAAY,CAAC,QAAkB;IACtC,IAAI,QAAQ,CAAC,QAAQ,IAAI,QAAQ,CAAC,MAAM,IAAI,QAAQ,CAAC,IAAI,KAAK,MAAM,IAAI,QAAQ,CAAC,SAAS;QAAE,OAAO,IAAI,CAAC;IACxG,OAAO,QAAQ,CAAC,GAAG,CAAC,IAAI,KAAK,YAAY,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC7D,QAAQ,CAAC,GAAG,CAAC,IAAI,KAAK,SAAS,IAAI,OAAO,QAAQ,CAAC,GAAG,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;AAC1G,CAAC;AAED,SAAS,cAAc,CAAC,UAAsB,EAAE,MAAc,EAAE,OAA4B;IAC1F,IAAI,UAAU,CAAC,IAAI,KAAK,kBAAkB;QAAE,OAAO,IAAI,CAAC;IACxD,MAAM,KAAK,GAAG,UAA8B,CAAC;IAC7C,IAAI,KAAK,CAAC,QAAQ,IAAI,KAAK,CAAC,QAAQ,IAAI,KAAK,CAAC,MAAM,CAAC,IAAI,KAAK,YAAY;QACtE,KAAK,CAAC,QAAQ,CAAC,IAAI,KAAK,YAAY,IAAI,KAAK,CAAC,QAAQ,CAAC,IAAI,KAAK,MAAM;QAAE,OAAO,IAAI,CAAC;IACxF,OAAO,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC;AAChD,CAAC;AAED,SAAS,YAAY,CAAC,MAAc,EAAE,QAAgB;IACpD,IAAI,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,GAAG,IAAI,GAAG,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;IACjH,MAAM,OAAO,GAAG,KAAK,CAAC,MAAM,EAAE,EAAE,WAAW,EAAE,QAAQ,EAAE,UAAU,EAAE,QAAQ,EAAE,CAAC,CAAC;IAC/E,MAAM,OAAO,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC1C,KAAK,MAAM,SAAS,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;QACrC,IAAI,SAAS,CAAC,IAAI,KAAK,mBAAmB,IAAI,OAAO,SAAS,CAAC,MAAM,CAAC,KAAK,KAAK,QAAQ;YAAE,SAAS;QACnG,MAAM,IAAI,GAAG,8BAA8B,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QAC9E,IAAI,CAAC,IAAI;YAAE,SAAS;QACpB,KAAK,MAAM,SAAS,IAAI,SAAS,CAAC,UAAU,EAAE,CAAC;YAC7C,IAAI,SAAS,CAAC,IAAI,KAAK,0BAA0B;gBAAE,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAC7F,CAAC;IACH,CAAC;IACD,MAAM,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC,SAAS,CAAC,IAAI,KAAK,wBAAwB;QAChG,SAAS,CAAC,WAAW,EAAE,IAAI,KAAK,qBAAqB,IAAI,SAAS,CAAC,WAAW,CAAC,IAAI,KAAK,OAAO;QAC/F,CAAC,CAAC,SAAS,CAAC,WAAW,CAAC,YAAY,CAAC,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,WAAW,CAAC,EAAE,CAAC,IAAI,KAAK,YAAY,IAAI,WAAW,CAAC,EAAE,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IAC7I,MAAM,KAAK,GAAG,YAAY,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;IACvE,IAAI,KAAK,EAAE,IAAI,KAAK,iBAAiB;QAAE,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;IAC7G,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,EAAE,SAAS,GAAG,IAAI,GAAG,EAAyB,CAAC;IAC9E,KAAK,MAAM,KAAK,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;QACnC,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,IAAI,KAAK,eAAe;YAAE,MAAM,IAAI,KAAK,CAAC,gEAAgE,CAAC,CAAC;QAChI,IAAI,KAAK,CAAC,IAAI,KAAK,kBAAkB,EAAE,CAAC;YACtC,MAAM,IAAI,GAAG,cAAc,CAAC,KAAK,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC;YACzD,IAAI,CAAC,IAAI,IAAI,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,sEAAsE,CAAC,CAAC;YACtH,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YAChB,SAAS;QACX,CAAC;QACD,MAAM,UAAU,GAAG,IAAI,GAAG,EAAoB,CAAC;QAC/C,KAAK,MAAM,QAAQ,IAAK,KAA0B,CAAC,UAAU,EAAE,CAAC;YAC9D,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,KAAK,UAAU,CAAC,CAAC,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;YAC1E,IAAI,CAAC,IAAI,IAAI,CAAC,CAAC,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;gBACxF,MAAM,IAAI,KAAK,CAAC,gEAAgE,CAAC,CAAC;YACpF,CAAC;YACD,UAAU,CAAC,GAAG,CAAC,IAAI,EAAE,QAAoB,CAAC,CAAC;QAC7C,CAAC;QACD,MAAM,QAAQ,GAAG,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,KAAK,CAAC;QAC/C,MAAM,IAAI,GAAG,QAAQ,EAAE,IAAI,KAAK,SAAS,IAAI,OAAO,QAAQ,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;QACxG,MAAM,EAAE,GAAG,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,IAAI,GAAG,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,KAAK,CAAC;QAC7E,IAAI,CAAC,IAAI,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,cAAc,CAAC,EAAgB,EAAE,IAAI,EAAE,OAAO,CAAC,KAAK,IAAI;YACpH,CAAC,IAAI,IAAI,cAAc,CAAC,IAAkB,EAAE,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAC,EAAE,CAAC;YAC3E,MAAM,IAAI,KAAK,CAAC,uEAAuE,CAAC,CAAC;QAC3F,CAAC;QACD,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAChB,MAAM,gBAAgB,GAAG,UAAU,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QACpD,MAAM,KAAK,GAAG,gBAAgB,EAAE,KAAK,CAAC;QACtC,IAAI,KAAK,IAAI,CAAC,KAAK,CAAC,IAAI,KAAK,SAAS,IAAI,OAAO,KAAK,CAAC,KAAK,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;YACxG,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAC;QAC3E,CAAC;QACD,SAAS,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAE,KAA2B,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QACvE,IAAI,gBAAgB;YAAE,KAAK,CAAC,UAAU,GAAG,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,QAAQ,KAAK,gBAAgB,CAAC,CAAC;IAC9G,CAAC;IACD,0EAA0E;IAC1E,8EAA8E;IAC9E,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,KAAc,EAAE,EAAE,CAC3E,GAAG,KAAK,OAAO,IAAI,GAAG,KAAK,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC;AAC5D,CAAC"}