@omnitron-dev/omnitron 0.3.1 → 0.3.3

package/dist/shared/roles.js

@@ -1,3 +1,4 @@
+import { createRoleHierarchy } from '@omnitron-dev/access/roles';
 /**
  * Omnitron RBAC Roles
  *
@@ -7,8 +8,9 @@
  *   viewer   → read-only access (list, status, logs, metrics, health)
  *
  * The user's role is stored in omnitron_users.role and included in JWT claims.
- * The Netron auth middleware extracts roles from the JWT payload and sets
- * them in AuthContext.roles — service decorators then enforce access.
+ * The Netron token validator resolves human roles from the live account and
+ * session; JWT role claims cannot preserve revoked privileges. Service
+ * decorators then enforce AuthContext.roles.
  */
 /** All valid daemon roles, ordered by privilege level (highest first). */
 export const ROLES = {
@@ -16,33 +18,26 @@ export const ROLES = {
     OPERATOR: 'operator',
     VIEWER: 'viewer',
 };
-/** Role hierarchy: admin > operator > viewer */
-const ROLE_HIERARCHY = {
-    admin: 3,
-    operator: 2,
-    viewer: 1,
-};
-/**
- * Check if a user's roles satisfy the minimum required role.
- * Uses hierarchical comparison: admin satisfies operator, operator satisfies viewer, etc.
- */
+export function isOmnitronRole(value) {
+    return value === 'viewer' || value === 'operator' || value === 'admin';
+}
+export const ROLE_DESCRIPTIONS = [
+    { role: 'viewer', label: 'Viewer', description: 'Read operational status, logs, metrics and health.' },
+    { role: 'operator', label: 'Operator', description: 'Viewer access plus application and deployment operations.' },
+    { role: 'admin', label: 'Administrator', description: 'Control-plane configuration, accounts, secrets and SSH terminals.' },
+];
+/** Daemon vocabulary is independent of the optional application platform preset. */
+const rolePolicy = createRoleHierarchy({
+    viewer: { level: 1 },
+    operator: { level: 2, inherits: ['viewer'] },
+    admin: { level: 3, inherits: ['operator'] },
+});
 /**
- * Whether any of `userRoles` ranks at or above `minimumRole`.
- *
- * NOT on the request path, and deliberately kept: `@Public({ auth: { roles }})`
- * takes an explicit list, and the three lists below are what every method
- * declares. This function is the only place the rank order is written down,
- * which makes it useful for reading — and a trap for anyone who assumes the
- * wire enforces a minimum. It does not: it enforces membership of a list.
- *
- * The difference shows when a role is added. `service_role` — named on
- * `OmnitronSync`'s methods — has no entry in ROLE_HIERARCHY, so it ranks 0
- * here, and it is absent from all three lists, so it is permitted nowhere.
- * Both answers happen to be safe; neither is a decision anyone made.
+ * Minimum-rank helper for daemon human roles. Wire gates still use the explicit
+ * lists below. Service identity is never inferred from human rank.
  */
 export function hasMinimumRole(userRoles, minimumRole) {
-    const requiredLevel = ROLE_HIERARCHY[minimumRole] ?? 0;
-    return userRoles.some((role) => (ROLE_HIERARCHY[role] ?? 0) >= requiredLevel);
+    return rolePolicy.canSeeRole(userRoles, minimumRole);
 }
 /** Roles that can view (read-only) — admin + operator + viewer */
 export const VIEWER_ROLES = ['admin', 'operator', 'viewer'];

package/dist/shared/roles.js.map

@@ -1 +1 @@
-{"version":3,"file":"roles.js","sourceRoot":"","sources":["../../src/shared/roles.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,0EAA0E;AAC1E,MAAM,CAAC,MAAM,KAAK,GAAG;IACnB,KAAK,EAAE,OAAO;IACd,QAAQ,EAAE,UAAU;IACpB,MAAM,EAAE,QAAQ;CACR,CAAC;AAIX,gDAAgD;AAChD,MAAM,cAAc,GAA2B;IAC7C,KAAK,EAAE,CAAC;IACR,QAAQ,EAAE,CAAC;IACX,MAAM,EAAE,CAAC;CACV,CAAC;AAEF;;;GAGG;AACH;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,cAAc,CAAC,SAAmB,EAAE,WAAyB;IAC3E,MAAM,aAAa,GAAG,cAAc,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;IACvD,OAAO,SAAS,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,aAAa,CAAC,CAAC;AAChF,CAAC;AAED,kEAAkE;AAClE,MAAM,CAAC,MAAM,YAAY,GAAmB,CAAC,OAAO,EAAE,UAAU,EAAE,QAAQ,CAAC,CAAC;AAC5E,oEAAoE;AACpE,MAAM,CAAC,MAAM,cAAc,GAAmB,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;AAEpE;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAa,CAAC,OAAO,EAAE,UAAU,EAAE,cAAc,CAAC,CAAC;AAEnF;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAa,CAAC,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,cAAc,CAAC,CAAC;AAClG,yEAAyE;AACzE,MAAM,CAAC,MAAM,WAAW,GAAmB,CAAC,OAAO,CAAC,CAAC"}
+{"version":3,"file":"roles.js","sourceRoot":"","sources":["../../src/shared/roles.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,MAAM,4BAA4B,CAAC;AAEjE;;;;;;;;;;;;GAYG;AAEH,0EAA0E;AAC1E,MAAM,CAAC,MAAM,KAAK,GAAG;IACnB,KAAK,EAAE,OAAO;IACd,QAAQ,EAAE,UAAU;IACpB,MAAM,EAAE,QAAQ;CACR,CAAC;AAIX,MAAM,UAAU,cAAc,CAAC,KAAc;IAC3C,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,UAAU,IAAI,KAAK,KAAK,OAAO,CAAC;AACzE,CAAC;AAED,MAAM,CAAC,MAAM,iBAAiB,GAAG;IAC/B,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,QAAQ,EAAE,WAAW,EAAE,oDAAoD,EAAE;IACtG,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,UAAU,EAAE,WAAW,EAAE,2DAA2D,EAAE;IACjH,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,eAAe,EAAE,WAAW,EAAE,mEAAmE,EAAE;CACnH,CAAC;AAEX,oFAAoF;AACpF,MAAM,UAAU,GAAG,mBAAmB,CAAC;IACrC,MAAM,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE;IACpB,QAAQ,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,QAAQ,CAAC,EAAE;IAC5C,KAAK,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,UAAU,CAAC,EAAE;CAC5C,CAAC,CAAC;AAEH;;;GAGG;AACH,MAAM,UAAU,cAAc,CAAC,SAAmB,EAAE,WAAyB;IAC3E,OAAO,UAAU,CAAC,UAAU,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;AACvD,CAAC;AAED,kEAAkE;AAClE,MAAM,CAAC,MAAM,YAAY,GAAmB,CAAC,OAAO,EAAE,UAAU,EAAE,QAAQ,CAAC,CAAC;AAC5E,oEAAoE;AACpE,MAAM,CAAC,MAAM,cAAc,GAAmB,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;AAEpE;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAa,CAAC,OAAO,EAAE,UAAU,EAAE,cAAc,CAAC,CAAC;AAEnF;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAa,CAAC,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,cAAc,CAAC,CAAC;AAClG,yEAAyE;AACzE,MAAM,CAAC,MAAM,WAAW,GAAmB,CAAC,OAAO,CAAC,CAAC"}

package/dist/shared/runtime-artifact.d.ts

@@ -0,0 +1,20 @@
+export interface RuntimeArtifact {
+    protocol: 1;
+    sha256: string;
+    platform: string;
+    arch: string;
+    nodeVersion: string;
+    packages: number;
+}
+/** Protocol 1 uses this prefix for regular-file bytes and this complete record for a link. */
+export declare function runtimeDigestRecord(relative: string, entry: {
+    mode: number;
+} | {
+    link: string;
+}): string;
+/** Hash bytes and relative links; no dependency may escape the immutable release. */
+export declare function runtimeArtifactDigest(root: string, unchangedSince?: number): Promise<string>;
+/** Inspect a sealed build for distribution without executing its Node binary. */
+export declare function readRuntimeManifest(root: string): Promise<RuntimeArtifact>;
+export declare function verifyRuntimeArtifact(root: string, expectedHash?: string, unchangedSince?: number): Promise<RuntimeArtifact>;
+//# sourceMappingURL=runtime-artifact.d.ts.map

package/dist/shared/runtime-artifact.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime-artifact.d.ts","sourceRoot":"","sources":["../../src/shared/runtime-artifact.ts"],"names":[],"mappings":"AAKA,MAAM,WAAW,eAAe;IAC9B,QAAQ,EAAE,CAAC,CAAC;IACZ,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,8FAA8F;AAC9F,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE;IAAE,IAAI,EAAE,MAAM,CAAA;CAAE,GAAG;IAAE,IAAI,EAAE,MAAM,CAAA;CAAE,GAAG,MAAM,CAExG;AAED,qFAAqF;AACrF,wBAAsB,qBAAqB,CAAC,IAAI,EAAE,MAAM,EAAE,cAAc,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAqClG;AAED,iFAAiF;AACjF,wBAAsB,mBAAmB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,CAAC,CAQhF;AAED,wBAAsB,qBAAqB,CAAC,IAAI,EAAE,MAAM,EAAE,YAAY,CAAC,EAAE,MAAM,EAAE,cAAc,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,CAAC,CAMlI"}

package/dist/shared/runtime-artifact.js

@@ -0,0 +1,83 @@
+import fs from 'node:fs/promises';
+import { createReadStream } from 'node:fs';
+import path from 'node:path';
+import { createHash } from 'node:crypto';
+/** Protocol 1 uses this prefix for regular-file bytes and this complete record for a link. */
+export function runtimeDigestRecord(relative, entry) {
+    return 'link' in entry ? `link\0${relative}\0${entry.link}\0` : `file\0${relative}\0${entry.mode & 0o111}\0`;
+}
+/** Hash bytes and relative links; no dependency may escape the immutable release. */
+export async function runtimeArtifactDigest(root, unchangedSince) {
+    root = await fs.realpath(root);
+    const digest = createHash('sha256');
+    let files = 0;
+    const walk = async (relative) => {
+        const absolute = path.join(root, relative);
+        const stat = await fs.lstat(absolute);
+        if (unchangedSince !== undefined && stat.ctimeMs > unchangedSince)
+            throw new Error(`Runtime entry changed after process startup: ${relative || '.'}`);
+        if (process.getuid && stat.uid !== process.getuid())
+            throw new Error(`Runtime entry belongs to another user: ${relative || '.'}`);
+        if (stat.isSymbolicLink()) {
+            const target = await fs.readlink(absolute);
+            const real = await fs.realpath(absolute);
+            if (!real.startsWith(root + path.sep))
+                throw new Error(`Runtime dependency escapes its release: ${relative}`);
+            digest.update(runtimeDigestRecord(relative, { link: target }));
+        }
+        else if (stat.isDirectory()) {
+            if ((stat.mode & 0o022) !== 0)
+                throw new Error(`Runtime directory is writable by other users: ${relative || '.'}`);
+            for (const name of (await fs.readdir(absolute)).sort()) {
+                if (!relative && name === 'RUNTIME.json')
+                    continue;
+                await walk(path.join(relative, name));
+            }
+        }
+        else if (stat.isFile()) {
+            if (++files > 200_000)
+                throw new Error('Runtime exceeds file audit capacity');
+            if ((stat.mode & 0o022) !== 0)
+                throw new Error(`Runtime file is writable by other users: ${relative}`);
+            digest.update(runtimeDigestRecord(relative, stat));
+            if (stat.size <= 256 * 1024)
+                digest.update(await fs.readFile(absolute));
+            else
+                for await (const chunk of createReadStream(absolute))
+                    digest.update(chunk);
+            digest.update('\0');
+        }
+        else
+            throw new Error(`Unsupported runtime file: ${relative}`);
+        if (unchangedSince !== undefined) {
+            const after = await fs.lstat(absolute);
+            if (after.ctimeMs > unchangedSince || after.ino !== stat.ino || after.dev !== stat.dev || after.ctimeMs !== stat.ctimeMs) {
+                throw new Error(`Runtime entry changed during verification: ${relative || '.'}`);
+            }
+        }
+    };
+    await walk('');
+    return digest.digest('hex');
+}
+/** Inspect a sealed build for distribution without executing its Node binary. */
+export async function readRuntimeManifest(root) {
+    const manifestFile = path.join(root, 'RUNTIME.json');
+    const stat = await fs.lstat(manifestFile);
+    if (!stat.isFile() || stat.isSymbolicLink() || stat.size > 16_384 || (stat.mode & 0o022) !== 0 ||
+        (process.getuid && stat.uid !== process.getuid()))
+        throw new Error('Runtime manifest must be a bounded regular file owned by this user');
+    const manifest = JSON.parse(await fs.readFile(manifestFile, 'utf8'));
+    if (manifest.protocol !== 1 || !/^[a-f0-9]{64}$/.test(manifest.sha256))
+        throw new Error('Invalid runtime manifest');
+    return manifest;
+}
+export async function verifyRuntimeArtifact(root, expectedHash, unchangedSince) {
+    const manifest = await readRuntimeManifest(root);
+    if (manifest.platform !== process.platform || manifest.arch !== process.arch ||
+        (expectedHash && expectedHash !== manifest.sha256))
+        throw new Error('Runtime manifest does not match this release or host');
+    if (await runtimeArtifactDigest(root, unchangedSince) !== manifest.sha256)
+        throw new Error('Runtime files or dependencies changed after sealing; activation is refused');
+    return manifest;
+}
+//# sourceMappingURL=runtime-artifact.js.map

package/dist/shared/runtime-artifact.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime-artifact.js","sourceRoot":"","sources":["../../src/shared/runtime-artifact.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAClC,OAAO,EAAE,gBAAgB,EAAE,MAAM,SAAS,CAAC;AAC3C,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAWzC,8FAA8F;AAC9F,MAAM,UAAU,mBAAmB,CAAC,QAAgB,EAAE,KAA0C;IAC9F,OAAO,MAAM,IAAI,KAAK,CAAC,CAAC,CAAC,SAAS,QAAQ,KAAK,KAAK,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,SAAS,QAAQ,KAAK,KAAK,CAAC,IAAI,GAAG,KAAK,IAAI,CAAC;AAC/G,CAAC;AAED,qFAAqF;AACrF,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,IAAY,EAAE,cAAuB;IAC/E,IAAI,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IAC/B,MAAM,MAAM,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC;IACpC,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,MAAM,IAAI,GAAG,KAAK,EAAE,QAAgB,EAAiB,EAAE;QACrD,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;QAC3C,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QACtC,IAAI,cAAc,KAAK,SAAS,IAAI,IAAI,CAAC,OAAO,GAAG,cAAc;YAAE,MAAM,IAAI,KAAK,CAAC,gDAAgD,QAAQ,IAAI,GAAG,EAAE,CAAC,CAAC;QACtJ,IAAI,OAAO,CAAC,MAAM,IAAI,IAAI,CAAC,GAAG,KAAK,OAAO,CAAC,MAAM,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,0CAA0C,QAAQ,IAAI,GAAG,EAAE,CAAC,CAAC;QAClI,IAAI,IAAI,CAAC,cAAc,EAAE,EAAE,CAAC;YAC1B,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;YAC3C,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;YACzC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,2CAA2C,QAAQ,EAAE,CAAC,CAAC;YAC9G,MAAM,CAAC,MAAM,CAAC,mBAAmB,CAAC,QAAQ,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC;QACjE,CAAC;aAAM,IAAI,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC;YAC9B,IAAI,CAAC,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,iDAAiD,QAAQ,IAAI,GAAG,EAAE,CAAC,CAAC;YACnH,KAAK,MAAM,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;gBACvD,IAAI,CAAC,QAAQ,IAAI,IAAI,KAAK,cAAc;oBAAE,SAAS;gBACnD,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC;YACxC,CAAC;QACH,CAAC;aAAM,IAAI,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC;YACzB,IAAI,EAAE,KAAK,GAAG,OAAO;gBAAE,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;YAC9E,IAAI,CAAC,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,4CAA4C,QAAQ,EAAE,CAAC,CAAC;YACvG,MAAM,CAAC,MAAM,CAAC,mBAAmB,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC;YACnD,IAAI,IAAI,CAAC,IAAI,IAAI,GAAG,GAAG,IAAI;gBAAE,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC;;gBACnE,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,gBAAgB,CAAC,QAAQ,CAAC;oBAAE,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAChF,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACtB,CAAC;;YAAM,MAAM,IAAI,KAAK,CAAC,6BAA6B,QAAQ,EAAE,CAAC,CAAC;QAChE,IAAI,cAAc,KAAK,SAAS,EAAE,CAAC;YACjC,MAAM,KAAK,GAAG,MAAM,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;YACvC,IAAI,KAAK,CAAC,OAAO,GAAG,cAAc,IAAI,KAAK,CAAC,GAAG,KAAK,IAAI,CAAC,GAAG,IAAI,KAAK,CAAC,GAAG,KAAK,IAAI,CAAC,GAAG,IAAI,KAAK,CAAC,OAAO,KAAK,IAAI,CAAC,OAAO,EAAE,CAAC;gBACzH,MAAM,IAAI,KAAK,CAAC,8CAA8C,QAAQ,IAAI,GAAG,EAAE,CAAC,CAAC;YACnF,CAAC;QACH,CAAC;IACH,CAAC,CAAC;IACF,MAAM,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,OAAO,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC9B,CAAC;AAED,iFAAiF;AACjF,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,IAAY;IACpD,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC;IACrD,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;IAC1C,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,IAAI,CAAC,cAAc,EAAE,IAAI,IAAI,CAAC,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC;QAC1F,CAAC,OAAO,CAAC,MAAM,IAAI,IAAI,CAAC,GAAG,KAAK,OAAO,CAAC,MAAM,EAAE,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,oEAAoE,CAAC,CAAC;IAC7I,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC,CAAoB,CAAC;IACxF,IAAI,QAAQ,CAAC,QAAQ,KAAK,CAAC,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;IACpH,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,IAAY,EAAE,YAAqB,EAAE,cAAuB;IACtG,MAAM,QAAQ,GAAG,MAAM,mBAAmB,CAAC,IAAI,CAAC,CAAC;IACjD,IAAI,QAAQ,CAAC,QAAQ,KAAK,OAAO,CAAC,QAAQ,IAAI,QAAQ,CAAC,IAAI,KAAK,OAAO,CAAC,IAAI;QACxE,CAAC,YAAY,IAAI,YAAY,KAAK,QAAQ,CAAC,MAAM,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC;IAChI,IAAI,MAAM,qBAAqB,CAAC,IAAI,EAAE,cAAc,CAAC,KAAK,QAAQ,CAAC,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,4EAA4E,CAAC,CAAC;IACzK,OAAO,QAAQ,CAAC;AAClB,CAAC"}

package/dist/shared/stack-reading.d.ts

@@ -0,0 +1,18 @@
+import type { StackHealthObservation } from './dto/project.js';
+export declare function healthLabel(status?: StackHealthObservation['status']): "Health unknown" | "Health warning" | "Healthy" | "Not running" | "Unhealthy";
+export declare function stackHealthReading(health?: StackHealthObservation): {
+    status: "degraded" | "healthy" | "not-running" | "unhealthy" | "unknown";
+    label: string;
+    detail: string;
+    findings: {
+        name: string;
+        node: string;
+        status: StackHealthObservation['status'];
+        checks: Array<{
+            name: string;
+            status: string;
+            message?: string;
+        }>;
+    }[];
+};
+//# sourceMappingURL=stack-reading.d.ts.map

package/dist/shared/stack-reading.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"stack-reading.d.ts","sourceRoot":"","sources":["../../src/shared/stack-reading.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,kBAAkB,CAAC;AAE/D,wBAAgB,WAAW,CAAC,MAAM,GAAE,sBAAsB,CAAC,QAAQ,CAAa,iFAG/E;AAED,wBAAgB,kBAAkB,CAAC,MAAM,CAAC,EAAE,sBAAsB;;;;;;;;;;;;;;EAQjE"}

package/dist/shared/stack-reading.js

@@ -0,0 +1,15 @@
+export function healthLabel(status = 'unknown') {
+    return status === 'not-running' ? 'Not running' : status === 'unknown' ? 'Health unknown' :
+        status === 'healthy' ? 'Healthy' : status === 'degraded' ? 'Health warning' : 'Unhealthy';
+}
+export function stackHealthReading(health) {
+    const status = health?.status ?? 'unknown';
+    const counts = new Map();
+    for (const app of health?.apps ?? [])
+        counts.set(app.status, (counts.get(app.status) ?? 0) + 1);
+    const detail = [...counts].map(([state, count]) => `${count} ${state === 'degraded' ? 'warning' : state}`).join(' · ');
+    return { status, label: healthLabel(status),
+        detail: detail || 'Application health has not been observed',
+        findings: (health?.apps ?? []).filter(app => app.status !== 'healthy' && app.status !== 'not-running') };
+}
+//# sourceMappingURL=stack-reading.js.map

package/dist/shared/stack-reading.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"stack-reading.js","sourceRoot":"","sources":["../../src/shared/stack-reading.ts"],"names":[],"mappings":"AAEA,MAAM,UAAU,WAAW,CAAC,MAAM,GAAqC,SAAS;IAC9E,OAAO,MAAM,KAAK,aAAa,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC;QACzF,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,KAAK,UAAU,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,WAAW,CAAC;AAC9F,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,MAA+B;IAChE,MAAM,MAAM,GAAG,MAAM,EAAE,MAAM,IAAI,SAAS,CAAC;IAC3C,MAAM,MAAM,GAAG,IAAI,GAAG,EAAkB,CAAC;IACzC,KAAK,MAAM,GAAG,IAAI,MAAM,EAAE,IAAI,IAAI,EAAE;QAAE,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IAChG,MAAM,MAAM,GAAG,CAAC,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,GAAG,KAAK,IAAI,KAAK,KAAK,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACvH,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,WAAW,CAAC,MAAM,CAAC;QACzC,MAAM,EAAE,MAAM,IAAI,0CAA0C;QAC5D,QAAQ,EAAE,CAAC,MAAM,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,MAAM,KAAK,SAAS,IAAI,GAAG,CAAC,MAAM,KAAK,aAAa,CAAC,EAAE,CAAC;AAC7G,CAAC"}

package/dist/shared/sync-reading.d.ts

@@ -1,45 +1,37 @@
-/**
- * Whether a node's replication is keeping up — one reading for `omnitron
- * stack status` and the console's stack pages.
- *
- * The master PULLS: on each heartbeat sweep (15 s by default) it drains the
- * slave's `sync_buffer`, and `ackDrained` advances `lastSyncAt`. So entries
- * are always waiting between two pulls — 275 to 515 on the test node,
- * sampled every 10 s on 2026-09-23 while `lastSyncAt` moved every 15 s —
- * and a node is behind only when entries wait and no pull has come.
- *
- * `connected` is not read: it is the slave's PUSH channel, which no
- * production code opens (`ISyncStatus.connected`). The stack page read it
- * anyway, so every node there said «Buffering», in amber, for ever; the
- * stack list counted the nodes whose daemon answered and called them
- * «synced».
- *
- * Imported by the console through `@omnitron-dev/omnitron/sync-reading`, so
- * nothing here may need Node.
- */
-import type { ISyncStatus } from './dto/project.js';
-/** Entries waiting and no pull for this long is a node falling behind: four missed default sweeps. */
+/** Replication evidence shared by the CLI and Console; safe to import in a browser. */
+import type { ISyncStatus, ReplicationEvidence } from './dto/project.js';
+import type { IMeshNodeStatus } from './dto/nodes.js';
+/** Four missed default heartbeat sweeps. */
 export declare const PULL_OVERDUE_MS = 60000;
-export type SyncFinding = 
-/** Nothing waiting. */
-{
-    readonly state: 'synced';
-}
-/** Entries since the last pull, and that pull recent: keeping up. */
- | {
-    readonly state: 'pulling';
-    readonly pending: number;
-    readonly lastPullMs: number;
-}
-/** Entries waiting, and no pull for `PULL_OVERDUE_MS` — or none ever (`lastPullMs: null`). */
- | {
-    readonly state: 'behind';
+type PendingFinding = {
     readonly pending: number;
     readonly lastPullMs: number | null;
+    readonly oldestPendingMs: number | null;
 };
-export declare function syncFinding(status: Pick<ISyncStatus, 'pendingItems' | 'lastSyncAt'>, now?: number): SyncFinding;
-/** Keeping up: nothing waiting, or only what arrived since a recent pull. */
+type QueueFinding = {
+    readonly state: 'synced';
+} | (PendingFinding & {
+    readonly state: 'pulling' | 'catching-up' | 'behind' | 'unknown';
+});
+export type SyncFinding = QueueFinding & {
+    readonly evidence?: ReplicationEvidence;
+    readonly reconciliationError?: string;
+    readonly history?: ISyncStatus['history'];
+};
+type SyncEvidence = Pick<ISyncStatus, 'pendingItems' | 'lastSyncAt' | 'lastSyncAgeMs' | 'oldestPendingAgeMs' | 'evidence' | 'reconciliationError' | 'history'>;
+export declare function syncFinding(status: SyncEvidence, now?: number): SyncFinding;
+/** Only verified empty or young queues count as keeping up. */
 export declare const inSync: (finding: SyncFinding) => boolean;
-/** The finding in words, as `stack status` and the stack pages print it. */
+export declare const syncSeverity: (finding: SyncFinding) => 'success' | 'info' | 'warning';
 export declare function syncWords(finding: SyncFinding): string;
+export declare function historyWords(history: NonNullable<ISyncStatus['history']>[number]): string;
+export declare function syncProgressWords(evidence: ReplicationEvidence): string;
+/** Shared by Console and CLI: transport reachability is separate from delivery. */
+export declare function meshReading(mesh: IMeshNodeStatus, now?: number): {
+    state: 'not-joined' | 'connecting' | 'reconnecting' | 'stale' | 'unauthenticated' | 'connected';
+    connection: string;
+    error: string;
+    replication: string;
+};
+export {};
 //# sourceMappingURL=sync-reading.d.ts.map

package/dist/shared/sync-reading.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sync-reading.d.ts","sourceRoot":"","sources":["../../src/shared/sync-reading.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAEpD,sGAAsG;AACtG,eAAO,MAAM,eAAe,QAAS,CAAC;AAEtC,MAAM,MAAM,WAAW;AACrB,uBAAuB;AACrB;IAAE,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAA;CAAE;AAC9B,qEAAqE;GACnE;IAAE,QAAQ,CAAC,KAAK,EAAE,SAAS,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;CAAE;AACtF,8FAA8F;GAC5F;IAAE,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,CAAC;AAE/F,wBAAgB,WAAW,CACzB,MAAM,EAAE,IAAI,CAAC,WAAW,EAAE,cAAc,GAAG,YAAY,CAAC,EACxD,GAAG,GAAE,MAAmB,GACvB,WAAW,CAMb;AAED,6EAA6E;AAC7E,eAAO,MAAM,MAAM,YAAa,WAAW,KAAG,OAAqC,CAAC;AAEpF,4EAA4E;AAC5E,wBAAgB,SAAS,CAAC,OAAO,EAAE,WAAW,GAAG,MAAM,CAMtD"}
+{"version":3,"file":"sync-reading.d.ts","sourceRoot":"","sources":["../../src/shared/sync-reading.ts"],"names":[],"mappings":"AAAA,uFAAuF;AACvF,OAAO,KAAK,EAAE,WAAW,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAC;AACzE,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AAEtD,4CAA4C;AAC5C,eAAO,MAAM,eAAe,QAAS,CAAC;AAEtC,KAAK,cAAc,GAAG;IAAE,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,QAAQ,CAAC,eAAe,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,CAAC;AAChI,KAAK,YAAY,GACb;IAAE,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAA;CAAE,GAC5B,CAAC,cAAc,GAAG;IAAE,QAAQ,CAAC,KAAK,EAAE,SAAS,GAAG,aAAa,GAAG,QAAQ,GAAG,SAAS,CAAA;CAAE,CAAC,CAAC;AAC5F,MAAM,MAAM,WAAW,GAAG,YAAY,GAAG;IAAE,QAAQ,CAAC,QAAQ,CAAC,EAAE,mBAAmB,CAAC;IAAC,QAAQ,CAAC,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,WAAW,CAAC,SAAS,CAAC,CAAA;CAAE,CAAC;AAEvK,KAAK,YAAY,GAAG,IAAI,CAAC,WAAW,EAAE,cAAc,GAAG,YAAY,GAAG,eAAe,GAAG,oBAAoB,GAAG,UAAU,GAAG,qBAAqB,GAAG,SAAS,CAAC,CAAC;AAE/J,wBAAgB,WAAW,CAAC,MAAM,EAAE,YAAY,EAAE,GAAG,GAAE,MAAmB,GAAG,WAAW,CAGvF;AAeD,+DAA+D;AAC/D,eAAO,MAAM,MAAM,YAAa,WAAW,KAAG,OAAoE,CAAC;AACnH,eAAO,MAAM,YAAY,YAAa,WAAW,KAAG,SAAS,GAAG,MAAM,GAAG,SAEsD,CAAC;AAEhI,wBAAgB,SAAS,CAAC,OAAO,EAAE,WAAW,GAAG,MAAM,CAkBtD;AAED,wBAAgB,YAAY,CAAC,OAAO,EAAE,WAAW,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,MAAM,CASzF;AAED,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE,mBAAmB,GAAG,MAAM,CAGvE;AAcD,mFAAmF;AACnF,wBAAgB,WAAW,CAAC,IAAI,EAAE,eAAe,EAAE,GAAG,SAAa,GAAG;IACpE,KAAK,EAAE,YAAY,GAAG,YAAY,GAAG,cAAc,GAAG,OAAO,GAAG,iBAAiB,GAAG,WAAW,CAAC;IAChG,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;CACrB,CAsBA"}

package/dist/shared/sync-reading.js

@@ -1,42 +1,103 @@
-/**
- * Whether a node's replication is keeping up — one reading for `omnitron
- * stack status` and the console's stack pages.
- *
- * The master PULLS: on each heartbeat sweep (15 s by default) it drains the
- * slave's `sync_buffer`, and `ackDrained` advances `lastSyncAt`. So entries
- * are always waiting between two pulls — 275 to 515 on the test node,
- * sampled every 10 s on 2026-09-23 while `lastSyncAt` moved every 15 s —
- * and a node is behind only when entries wait and no pull has come.
- *
- * `connected` is not read: it is the slave's PUSH channel, which no
- * production code opens (`ISyncStatus.connected`). The stack page read it
- * anyway, so every node there said «Buffering», in amber, for ever; the
- * stack list counted the nodes whose daemon answered and called them
- * «synced».
- *
- * Imported by the console through `@omnitron-dev/omnitron/sync-reading`, so
- * nothing here may need Node.
- */
-/** Entries waiting and no pull for this long is a node falling behind: four missed default sweeps. */
+/** Four missed default heartbeat sweeps. */
 export const PULL_OVERDUE_MS = 60_000;
 export function syncFinding(status, now = Date.now()) {
+    return { ...queueFinding(status, now), ...(status.evidence && { evidence: status.evidence }),
+        ...(status.reconciliationError && { reconciliationError: status.reconciliationError }), ...(status.history && { history: status.history }) };
+}
+function queueFinding(status, now) {
     if (status.pendingItems === 0)
         return { state: 'synced' };
-    const lastPullMs = status.lastSyncAt === null ? null : Math.max(0, now - status.lastSyncAt);
-    return lastPullMs !== null && lastPullMs < PULL_OVERDUE_MS
-        ? { state: 'pulling', pending: status.pendingItems, lastPullMs }
-        : { state: 'behind', pending: status.pendingItems, lastPullMs };
+    // Prefer durations measured on the node, not subtraction across host clocks.
+    const lastPullMs = status.lastSyncAgeMs !== undefined ? status.lastSyncAgeMs
+        : status.lastSyncAt === null ? null : Math.max(0, now - status.lastSyncAt);
+    const oldestPendingMs = status.oldestPendingAgeMs ?? null;
+    const pending = { pending: status.pendingItems, lastPullMs, oldestPendingMs };
+    if (lastPullMs === null || lastPullMs >= PULL_OVERDUE_MS)
+        return { ...pending, state: 'behind' };
+    // An older peer's recent acknowledgement proves activity, not an up-to-date queue.
+    if (oldestPendingMs === null)
+        return { ...pending, state: 'unknown' };
+    return { ...pending, state: oldestPendingMs >= PULL_OVERDUE_MS ? 'catching-up' : 'pulling' };
 }
-/** Keeping up: nothing waiting, or only what arrived since a recent pull. */
-export const inSync = (finding) => finding.state !== 'behind';
-/** The finding in words, as `stack status` and the stack pages print it. */
+/** Only verified empty or young queues count as keeping up. */
+export const inSync = (finding) => finding.state === 'synced' || finding.state === 'pulling';
+export const syncSeverity = (finding) => finding.reconciliationError || (finding.evidence && finding.evidence.discardedRows + finding.evidence.evictedRows > 0) ? 'warning'
+    : finding.state === 'behind' ? 'warning' : finding.evidence?.unverifiedRows ? 'info' : inSync(finding) ? 'success' : 'info';
 export function syncWords(finding) {
+    const words = [queueWords(finding)];
+    if (finding.evidence) {
+        const { discardedRows, evictedRows, unverifiedRows } = finding.evidence;
+        if (discardedRows)
+            words.push(`${discardedRows} rejected permanently`);
+        if (evictedRows)
+            words.push(`${evictedRows} lost to buffer limits`);
+        if (unverifiedRows)
+            words.push(`${unverifiedRows} receipts without durable payload proof`);
+        const reconciled = finding.evidence.reconciliation;
+        if (reconciled?.verifiedRows)
+            words.push(`${reconciled.verifiedRows} historical payloads verified in database`);
+        if (reconciled?.restoredRows)
+            words.push(`${reconciled.restoredRows} historical payloads restored on master`);
+    }
+    if (finding.reconciliationError)
+        words.push(`Reconciliation history unavailable: ${finding.reconciliationError}`);
+    if (finding.history?.length) {
+        const checked = finding.history.reduce((sum, row) => sum + row.processedRows, 0);
+        words.push(`${checked} retained pre-receipt rows checked${finding.history.some(row => row.status === 'partial') ? ' (audit incomplete)' : ''}`);
+        if (finding.history.some(row => row.gaps.some(gap => !gap.resolution)))
+            words.push('earlier history has explicit coverage gaps');
+    }
+    return words.join(' · ');
+}
+export function historyWords(history) {
+    const coverage = `${history.category} before receipts: ${history.processedRows}/${history.expectedRows} retained rows checked` +
+        ` (${history.presentRows} present, ${history.restoredRows} restored, ${history.expiredRows} outside retention and kept in source archives), ${history.firstAt}–${history.lastAt}`;
+    const state = history.status === 'verified' ? `verified at ${history.verifiedAt}` : 'audit incomplete';
+    const precision = history.precision === 'millisecond' ? '; log comparison at retained millisecond precision' : '';
+    const gaps = history.gaps.filter(gap => !gap.resolution).map(gap => `${gap.reason}${gap.rows === null ? ' (unknown row count)' : ` (${gap.rows} rows)`}`).join('; ');
+    const resolved = history.gaps.flatMap(gap => gap.resolution
+        ? [`${gap.resolution.explanation} (verified at ${gap.resolution.verifiedAt}, source ${gap.resolution.sourceId})`] : []).join('; ');
+    return `${coverage}; ${state}${precision}${gaps ? `; gaps: ${gaps}` : ''}${resolved ? `; resolved: ${resolved}` : ''}`;
+}
+export function syncProgressWords(evidence) {
+    return `Evidence from #${evidence.firstTrackedId} · produced through #${evidence.producedThrough}` +
+        ` · released through #${evidence.releasedThrough} · durably committed through #${evidence.committedThrough}`;
+}
+function queueWords(finding) {
     if (finding.state === 'synced')
         return 'in sync';
-    if (finding.state === 'pulling')
-        return `in sync · ${finding.pending} since the last pull`;
+    if (finding.state === 'unknown')
+        return `delivery active · ${finding.pending} waiting, queue age unavailable`;
+    if (finding.state === 'pulling' || finding.state === 'catching-up') {
+        const label = finding.state === 'pulling' ? 'keeping up' : 'catching up';
+        return `${label} · ${finding.pending} waiting, oldest ${Math.round(finding.oldestPendingMs / 1000)} s`;
+    }
     return finding.lastPullMs === null
         ? `behind · ${finding.pending} waiting, never pulled`
         : `behind · ${finding.pending} waiting, last pull ${Math.round(finding.lastPullMs / 1000)} s ago`;
 }
+/** Shared by Console and CLI: transport reachability is separate from delivery. */
+export function meshReading(mesh, now = Date.now()) {
+    const fresh = mesh.lastHeartbeat !== null && now - mesh.lastHeartbeat < PULL_OVERDUE_MS;
+    const credentialCurrent = mesh.authenticated && (mesh.credentialExpiresAt == null || mesh.credentialExpiresAt > now);
+    const state = !mesh.inMesh ? 'not-joined'
+        : mesh.status === 'connecting' ? 'connecting'
+            : mesh.status !== 'connected' ? 'reconnecting'
+                : !fresh ? 'stale' : !credentialCurrent ? 'unauthenticated' : 'connected';
+    const retry = mesh.reconnectAt == null ? 'No retry time reported.'
+        : `Retry in ${Math.max(0, Math.ceil((mesh.reconnectAt - now) / 1000))} s (attempt ${mesh.reconnectAttempt ?? 1}).`;
+    const connection = state === 'connected' ? `RPC connected ${mesh.via === 'ssh-tunnel' ? 'through SSH' : 'directly'}.`
+        : state === 'connecting' ? 'Opening and authenticating RPC connection.'
+            : state === 'unauthenticated' ? 'RPC reachable without a verified service credential.'
+                : state === 'stale' ? 'RPC heartbeat is stale; current reachability is unknown.'
+                    : state === 'not-joined' ? 'This node is not joined to the mesh.' : `RPC disconnected. ${retry}`;
+    const error = [...new Set([mesh.lastError, mesh.lastCredentialError, mesh.cleanupError].filter(Boolean))].join(' ');
+    const measured = mesh.syncStatus && mesh.syncStatusAt != null && now - mesh.syncStatusAt < PULL_OVERDUE_MS;
+    const replicationError = mesh.lastPullError ?? mesh.lastSyncStatusError;
+    const replication = state !== 'connected' ? 'Unknown: no current authenticated RPC connection.'
+        : replicationError ? `Failing: ${replicationError}`
+            : !measured ? 'Unknown: no recent replication reading.'
+                : syncWords(syncFinding(mesh.syncStatus, now));
+    return { state, connection, error, replication };
+}
 //# sourceMappingURL=sync-reading.js.map

package/dist/shared/sync-reading.js.map

@@ -1 +1 @@
-{"version":3,"file":"sync-reading.js","sourceRoot":"","sources":["../../src/shared/sync-reading.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAIH,sGAAsG;AACtG,MAAM,CAAC,MAAM,eAAe,GAAG,MAAM,CAAC;AAUtC,MAAM,UAAU,WAAW,CACzB,MAAwD,EACxD,GAAG,GAAW,IAAI,CAAC,GAAG,EAAE;IAExB,IAAI,MAAM,CAAC,YAAY,KAAK,CAAC;QAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC;IAC1D,MAAM,UAAU,GAAG,MAAM,CAAC,UAAU,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,GAAG,MAAM,CAAC,UAAU,CAAC,CAAC;IAC5F,OAAO,UAAU,KAAK,IAAI,IAAI,UAAU,GAAG,eAAe;QACxD,CAAC,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,CAAC,YAAY,EAAE,UAAU,EAAE;QAChE,CAAC,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,CAAC,YAAY,EAAE,UAAU,EAAE,CAAC;AACpE,CAAC;AAED,6EAA6E;AAC7E,MAAM,CAAC,MAAM,MAAM,GAAG,CAAC,OAAoB,EAAW,EAAE,CAAC,OAAO,CAAC,KAAK,KAAK,QAAQ,CAAC;AAEpF,4EAA4E;AAC5E,MAAM,UAAU,SAAS,CAAC,OAAoB;IAC5C,IAAI,OAAO,CAAC,KAAK,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IACjD,IAAI,OAAO,CAAC,KAAK,KAAK,SAAS;QAAE,OAAO,aAAa,OAAO,CAAC,OAAO,sBAAsB,CAAC;IAC3F,OAAO,OAAO,CAAC,UAAU,KAAK,IAAI;QAChC,CAAC,CAAC,YAAY,OAAO,CAAC,OAAO,wBAAwB;QACrD,CAAC,CAAC,YAAY,OAAO,CAAC,OAAO,uBAAuB,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,QAAQ,CAAC;AACtG,CAAC"}
+{"version":3,"file":"sync-reading.js","sourceRoot":"","sources":["../../src/shared/sync-reading.ts"],"names":[],"mappings":"AAIA,4CAA4C;AAC5C,MAAM,CAAC,MAAM,eAAe,GAAG,MAAM,CAAC;AAUtC,MAAM,UAAU,WAAW,CAAC,MAAoB,EAAE,GAAG,GAAW,IAAI,CAAC,GAAG,EAAE;IACxE,OAAO,EAAE,GAAG,YAAY,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC,QAAQ,IAAI,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC;QAC1F,GAAG,CAAC,MAAM,CAAC,mBAAmB,IAAI,EAAE,mBAAmB,EAAE,MAAM,CAAC,mBAAmB,EAAE,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC,OAAO,IAAI,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC,EAAE,CAAC;AACjJ,CAAC;AAED,SAAS,YAAY,CAAC,MAAoB,EAAE,GAAW;IACrD,IAAI,MAAM,CAAC,YAAY,KAAK,CAAC;QAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC;IAC1D,6EAA6E;IAC7E,MAAM,UAAU,GAAG,MAAM,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,aAAa;QAC1E,CAAC,CAAC,MAAM,CAAC,UAAU,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,GAAG,MAAM,CAAC,UAAU,CAAC,CAAC;IAC7E,MAAM,eAAe,GAAG,MAAM,CAAC,kBAAkB,IAAI,IAAI,CAAC;IAC1D,MAAM,OAAO,GAAG,EAAE,OAAO,EAAE,MAAM,CAAC,YAAY,EAAE,UAAU,EAAE,eAAe,EAAE,CAAC;IAC9E,IAAI,UAAU,KAAK,IAAI,IAAI,UAAU,IAAI,eAAe;QAAE,OAAO,EAAE,GAAG,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC;IACjG,mFAAmF;IACnF,IAAI,eAAe,KAAK,IAAI;QAAE,OAAO,EAAE,GAAG,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;IACtE,OAAO,EAAE,GAAG,OAAO,EAAE,KAAK,EAAE,eAAe,IAAI,eAAe,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC;AAC/F,CAAC;AAED,+DAA+D;AAC/D,MAAM,CAAC,MAAM,MAAM,GAAG,CAAC,OAAoB,EAAW,EAAE,CAAC,OAAO,CAAC,KAAK,KAAK,QAAQ,IAAI,OAAO,CAAC,KAAK,KAAK,SAAS,CAAC;AACnH,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,OAAoB,EAAkC,EAAE,CACnF,OAAO,CAAC,mBAAmB,IAAI,CAAC,OAAO,CAAC,QAAQ,IAAI,OAAO,CAAC,QAAQ,CAAC,aAAa,GAAG,OAAO,CAAC,QAAQ,CAAC,WAAW,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS;IAChI,CAAC,CAAC,OAAO,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,EAAE,cAAc,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC;AAEhI,MAAM,UAAU,SAAS,CAAC,OAAoB;IAC5C,MAAM,KAAK,GAAG,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC;IACpC,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;QACrB,MAAM,EAAE,aAAa,EAAE,WAAW,EAAE,cAAc,EAAE,GAAG,OAAO,CAAC,QAAQ,CAAC;QACxE,IAAI,aAAa;YAAE,KAAK,CAAC,IAAI,CAAC,GAAG,aAAa,uBAAuB,CAAC,CAAC;QACvE,IAAI,WAAW;YAAE,KAAK,CAAC,IAAI,CAAC,GAAG,WAAW,wBAAwB,CAAC,CAAC;QACpE,IAAI,cAAc;YAAE,KAAK,CAAC,IAAI,CAAC,GAAG,cAAc,yCAAyC,CAAC,CAAC;QAC3F,MAAM,UAAU,GAAG,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAC;QACnD,IAAI,UAAU,EAAE,YAAY;YAAE,KAAK,CAAC,IAAI,CAAC,GAAG,UAAU,CAAC,YAAY,2CAA2C,CAAC,CAAC;QAChH,IAAI,UAAU,EAAE,YAAY;YAAE,KAAK,CAAC,IAAI,CAAC,GAAG,UAAU,CAAC,YAAY,yCAAyC,CAAC,CAAC;IAChH,CAAC;IACD,IAAI,OAAO,CAAC,mBAAmB;QAAE,KAAK,CAAC,IAAI,CAAC,uCAAuC,OAAO,CAAC,mBAAmB,EAAE,CAAC,CAAC;IAClH,IAAI,OAAO,CAAC,OAAO,EAAE,MAAM,EAAE,CAAC;QAC5B,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,GAAG,GAAG,GAAG,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC;QACjF,KAAK,CAAC,IAAI,CAAC,GAAG,OAAO,qCAAqC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAChJ,IAAI,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;YAAE,KAAK,CAAC,IAAI,CAAC,4CAA4C,CAAC,CAAC;IACnI,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AAC3B,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,OAAoD;IAC/E,MAAM,QAAQ,GAAG,GAAG,OAAO,CAAC,QAAQ,qBAAqB,OAAO,CAAC,aAAa,IAAI,OAAO,CAAC,YAAY,wBAAwB;QAC5H,KAAK,OAAO,CAAC,WAAW,aAAa,OAAO,CAAC,YAAY,cAAc,OAAO,CAAC,WAAW,oDAAoD,OAAO,CAAC,OAAO,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;IACpL,MAAM,KAAK,GAAG,OAAO,CAAC,MAAM,KAAK,UAAU,CAAC,CAAC,CAAC,eAAe,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,kBAAkB,CAAC;IACvG,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,KAAK,aAAa,CAAC,CAAC,CAAC,oDAAoD,CAAC,CAAC,CAAC,EAAE,CAAC;IAClH,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,MAAM,GAAG,GAAG,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,sBAAsB,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,IAAI,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACrK,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,UAAU;QACzD,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,UAAU,CAAC,WAAW,iBAAiB,GAAG,CAAC,UAAU,CAAC,UAAU,YAAY,GAAG,CAAC,UAAU,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACrI,OAAO,GAAG,QAAQ,KAAK,KAAK,GAAG,SAAS,GAAG,IAAI,CAAC,CAAC,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,QAAQ,CAAC,CAAC,CAAC,eAAe,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;AACzH,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,QAA6B;IAC7D,OAAO,kBAAkB,QAAQ,CAAC,cAAc,wBAAwB,QAAQ,CAAC,eAAe,EAAE;QAChG,wBAAwB,QAAQ,CAAC,eAAe,iCAAiC,QAAQ,CAAC,gBAAgB,EAAE,CAAC;AACjH,CAAC;AAED,SAAS,UAAU,CAAC,OAAqB;IACvC,IAAI,OAAO,CAAC,KAAK,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IACjD,IAAI,OAAO,CAAC,KAAK,KAAK,SAAS;QAAE,OAAO,qBAAqB,OAAO,CAAC,OAAO,iCAAiC,CAAC;IAC9G,IAAI,OAAO,CAAC,KAAK,KAAK,SAAS,IAAI,OAAO,CAAC,KAAK,KAAK,aAAa,EAAE,CAAC;QACnE,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,aAAa,CAAC;QACzE,OAAO,GAAG,KAAK,MAAM,OAAO,CAAC,OAAO,oBAAoB,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,eAAgB,GAAG,IAAI,CAAC,IAAI,CAAC;IAC1G,CAAC;IACD,OAAO,OAAO,CAAC,UAAU,KAAK,IAAI;QAChC,CAAC,CAAC,YAAY,OAAO,CAAC,OAAO,wBAAwB;QACrD,CAAC,CAAC,YAAY,OAAO,CAAC,OAAO,uBAAuB,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,QAAQ,CAAC;AACtG,CAAC;AAED,mFAAmF;AACnF,MAAM,UAAU,WAAW,CAAC,IAAqB,EAAE,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE;IAMjE,MAAM,KAAK,GAAG,IAAI,CAAC,aAAa,KAAK,IAAI,IAAI,GAAG,GAAG,IAAI,CAAC,aAAa,GAAG,eAAe,CAAC;IACxF,MAAM,iBAAiB,GAAG,IAAI,CAAC,aAAa,IAAI,CAAC,IAAI,CAAC,mBAAmB,IAAI,IAAI,IAAI,IAAI,CAAC,mBAAmB,GAAG,GAAG,CAAC,CAAC;IACrH,MAAM,KAAK,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,YAAY;QACvC,CAAC,CAAC,IAAI,CAAC,MAAM,KAAK,YAAY,CAAC,CAAC,CAAC,YAAY;YAC3C,CAAC,CAAC,IAAI,CAAC,MAAM,KAAK,WAAW,CAAC,CAAC,CAAC,cAAc;gBAC5C,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,WAAW,CAAC;IAChF,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,IAAI,IAAI,CAAC,CAAC,CAAC,yBAAyB;QAChE,CAAC,CAAC,YAAY,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,WAAW,GAAG,GAAG,CAAC,GAAG,IAAI,CAAC,CAAC,eAAe,IAAI,CAAC,gBAAgB,IAAI,CAAC,IAAI,CAAC;IACrH,MAAM,UAAU,GAAG,KAAK,KAAK,WAAW,CAAC,CAAC,CAAC,iBAAiB,IAAI,CAAC,GAAG,KAAK,YAAY,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,UAAU,GAAG;QACnH,CAAC,CAAC,KAAK,KAAK,YAAY,CAAC,CAAC,CAAC,4CAA4C;YACrE,CAAC,CAAC,KAAK,KAAK,iBAAiB,CAAC,CAAC,CAAC,sDAAsD;gBACpF,CAAC,CAAC,KAAK,KAAK,OAAO,CAAC,CAAC,CAAC,0DAA0D;oBAC9E,CAAC,CAAC,KAAK,KAAK,YAAY,CAAC,CAAC,CAAC,sCAAsC,CAAC,CAAC,CAAC,qBAAqB,KAAK,EAAE,CAAC;IACzG,MAAM,KAAK,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,mBAAmB,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACpH,MAAM,QAAQ,GAAG,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC,YAAY,IAAI,IAAI,IAAI,GAAG,GAAG,IAAI,CAAC,YAAY,GAAG,eAAe,CAAC;IAC3G,MAAM,gBAAgB,GAAG,IAAI,CAAC,aAAa,IAAI,IAAI,CAAC,mBAAmB,CAAC;IACxE,MAAM,WAAW,GAAG,KAAK,KAAK,WAAW,CAAC,CAAC,CAAC,mDAAmD;QAC7F,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,YAAY,gBAAgB,EAAE;YACjD,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,yCAAyC;gBACrD,CAAC,CAAC,SAAS,CAAC,WAAW,CAAC,IAAI,CAAC,UAAW,EAAE,GAAG,CAAC,CAAC,CAAC;IACtD,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC;AACnD,CAAC"}

package/dist/shared/tokens.d.ts

@@ -3,7 +3,7 @@
  */
 import { createToken } from '@omnitron-dev/titan/nexus';
 import type { Kysely } from 'kysely';
-import type { OrchestratorService } from '../orchestrator/orchestrator.service.js';
+import type { OrchestratorControl as OrchestratorService } from '../orchestrator/execution-contract.js';
 import type { LogManager } from '../monitoring/log-manager.js';
 import type { StateStore } from '../daemon/state-store.js';
 import type { DaemonStateStore } from '../daemon/daemon-state-store.service.js';
@@ -25,6 +25,7 @@ import type { TelemetryRelayService } from '@omnitron-dev/titan-telemetry-relay'
 import type { InfrastructureGate } from '../infrastructure/infrastructure-gate.js';
 import type { InfrastructureService } from '../infrastructure/infrastructure.service.js';
 import type { ProjectService } from '../services/project.service.js';
+import type { SyncService } from '../services/sync.service.js';
 type Token<T> = ReturnType<typeof createToken<T>>;
 export declare const ORCHESTRATOR_TOKEN: Token<OrchestratorService>;
 export declare const LOG_MANAGER_TOKEN: Token<LogManager>;
@@ -86,4 +87,5 @@ export declare const SECRETS_LEGACY_PATH_TOKEN: Token<string | undefined>;
 export { SlaveStorageService } from '../services/slave-storage.service.js';
 import type { SlaveStorageService } from '../services/slave-storage.service.js';
 export declare const SLAVE_STORAGE_TOKEN: Token<SlaveStorageService>;
+export declare const SYNC_SERVICE_TOKEN: Token<SyncService>;
 //# sourceMappingURL=tokens.d.ts.map

package/dist/shared/tokens.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"tokens.d.ts","sourceRoot":"","sources":["../../src/shared/tokens.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,WAAW,EAAE,MAAM,2BAA2B,CAAC;AACxD,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AACrC,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,yCAAyC,CAAC;AACnF,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,8BAA8B,CAAC;AAC/D,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,0BAA0B,CAAC;AAC3D,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,yCAAyC,CAAC;AAChF,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAC3D,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AAC9D,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,6BAA6B,CAAC;AAC/D,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,sCAAsC,CAAC;AAChF,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,8BAA8B,CAAC;AACjE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,8BAA8B,CAAC;AACjE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,+BAA+B,CAAC;AACnE,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,qCAAqC,CAAC;AAC9E,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,kCAAkC,CAAC;AACzE,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,mCAAmC,CAAC;AAC3E,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,iCAAiC,CAAC;AACvE,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,wCAAwC,CAAC;AACpF,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,+BAA+B,CAAC;AACnE,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,gCAAgC,CAAC;AACrE,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,qCAAqC,CAAC;AACjF,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,0CAA0C,CAAC;AACnF,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,6CAA6C,CAAC;AACzF,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,gCAAgC,CAAC;AAErE,KAAK,KAAK,CAAC,CAAC,IAAI,UAAU,CAAC,OAAO,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC;AAElD,eAAO,MAAM,kBAAkB,EAAE,KAAK,CAAC,mBAAmB,CAAoD,CAAC;AAC/G,eAAO,MAAM,iBAAiB,EAAE,KAAK,CAAC,UAAU,CAAyC,CAAC;AAC1F,eAAO,MAAM,iBAAiB,EAAE,KAAK,CAAC,UAAU,CAAyC,CAAC;AAC1F;;;;GAIG;AACH,eAAO,MAAM,wBAAwB,EAAE,KAAK,CAAC,gBAAgB,CAAqD,CAAC;AACnH,eAAO,MAAM,sBAAsB,EAAE,KAAK,CAAC,gBAAgB,CAAoD,CAAC;AAEhH,mDAAmD;AACnD,eAAO,MAAM,iBAAiB,EAAE,KAAK,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAuD,CAAC;AACtH,oCAAoC;AACpC,eAAO,MAAM,kBAAkB,EAAE,KAAK,CAAC,WAAW,CAA2C,CAAC;AAC9F,uDAAuD;AACvD,eAAO,MAAM,mBAAmB,EAAE,KAAK,CAAC,mBAAmB,CAAoD,CAAC;AAEhH,4CAA4C;AAC5C,eAAO,MAAM,mBAAmB,EAAE,KAAK,CAAC,YAAY,CAA6C,CAAC;AAClG,yCAAyC;AACzC,eAAO,MAAM,mBAAmB,EAAE,KAAK,CAAC,YAAY,CAAqD,CAAC;AAC1G,6CAA6C;AAC7C,eAAO,MAAM,oBAAoB,EAAE,KAAK,CAAC,aAAa,CAA+C,CAAC;AACtG,8CAA8C;AAC9C,eAAO,MAAM,0BAA0B,EAAE,KAAK,CAAC,kBAAkB,CAAyD,CAAC;AAC3H,oCAAoC;AACpC,eAAO,MAAM,uBAAuB,EAAE,KAAK,CAAC,gBAAgB,CAAqD,CAAC;AAClH,oCAAoC;AACpC,eAAO,MAAM,wBAAwB,EAAE,KAAK,CAAC,iBAAiB,CAAuD,CAAC;AACtH,+BAA+B;AAC/B,eAAO,MAAM,sBAAsB,EAAE,KAAK,CAAC,eAAe,CAAmD,CAAC;AAC9G,kCAAkC;AAClC,eAAO,MAAM,qBAAqB,EAAE,KAAK,CAAC,qBAAqB,CAA+D,CAAC;AAC/H,yCAAyC;AACzC,eAAO,MAAM,oBAAoB,EAAE,KAAK,CAAC,aAAa,CAA+C,CAAC;AACtG,gCAAgC;AAChC,eAAO,MAAM,qBAAqB,EAAE,KAAK,CAAC,cAAc,CAAiD,CAAC;AAE1G;;;GAGG;AACH,eAAO,MAAM,mBAAmB,EAAE,KAAK,CAAC,OAAO,8BAA8B,EAAE,YAAY,CACT,CAAC;AACnF,mDAAmD;AACnD,eAAO,MAAM,qBAAqB,EAAE,KAAK,CAAC,qBAAqB,CAA+D,CAAC;AAE/H,oCAAoC;AACpC,eAAO,MAAM,yBAAyB,EAAE,KAAK,CAAC,kBAAkB,CAAyD,CAAC;AAC1H,yDAAyD;AACzD,eAAO,MAAM,4BAA4B,EAAE,KAAK,CAAC,qBAAqB,CAA+D,CAAC;AAEtI,yCAAyC;AACzC,eAAO,MAAM,qBAAqB,EAAE,KAAK,CAAC,cAAc,CAAiD,CAAC;AAa1G,kEAAkE;AAClE,eAAO,MAAM,gBAAgB,EAAE,KAAK,CAAC,MAAM,CAAoC,CAAC;AAChF,iEAAiE;AACjE,eAAO,MAAM,wBAAwB,EAAE,KAAK,CAAC,MAAM,GAAG,SAAS,CACX,CAAC;AACrD,qEAAqE;AACrE,eAAO,MAAM,wBAAwB,EAAE,KAAK,CAAC,MAAM,CAA4C,CAAC;AAChG,eAAO,MAAM,yBAAyB,EAAE,KAAK,CAAC,MAAM,GAAG,SAAS,CACV,CAAC;AAEvD,8EAA8E;AAC9E,OAAO,EAAE,mBAAmB,EAAE,MAAM,sCAAsC,CAAC;AAC3E,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,sCAAsC,CAAC;AAChF,eAAO,MAAM,mBAAmB,EAAE,KAAK,CAAC,mBAAmB,CAAoD,CAAC"}
+{"version":3,"file":"tokens.d.ts","sourceRoot":"","sources":["../../src/shared/tokens.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,WAAW,EAAE,MAAM,2BAA2B,CAAC;AACxD,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AACrC,OAAO,KAAK,EAAE,mBAAmB,IAAI,mBAAmB,EAAE,MAAM,uCAAuC,CAAC;AACxG,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,8BAA8B,CAAC;AAC/D,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,0BAA0B,CAAC;AAC3D,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,yCAAyC,CAAC;AAChF,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAC3D,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AAC9D,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,6BAA6B,CAAC;AAC/D,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,sCAAsC,CAAC;AAChF,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,8BAA8B,CAAC;AACjE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,8BAA8B,CAAC;AACjE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,+BAA+B,CAAC;AACnE,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,qCAAqC,CAAC;AAC9E,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,kCAAkC,CAAC;AACzE,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,mCAAmC,CAAC;AAC3E,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,iCAAiC,CAAC;AACvE,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,wCAAwC,CAAC;AACpF,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,+BAA+B,CAAC;AACnE,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,gCAAgC,CAAC;AACrE,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,qCAAqC,CAAC;AACjF,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,0CAA0C,CAAC;AACnF,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,6CAA6C,CAAC;AACzF,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,gCAAgC,CAAC;AACrE,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,6BAA6B,CAAC;AAE/D,KAAK,KAAK,CAAC,CAAC,IAAI,UAAU,CAAC,OAAO,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC;AAElD,eAAO,MAAM,kBAAkB,EAAE,KAAK,CAAC,mBAAmB,CAAoD,CAAC;AAC/G,eAAO,MAAM,iBAAiB,EAAE,KAAK,CAAC,UAAU,CAAyC,CAAC;AAC1F,eAAO,MAAM,iBAAiB,EAAE,KAAK,CAAC,UAAU,CAAyC,CAAC;AAC1F;;;;GAIG;AACH,eAAO,MAAM,wBAAwB,EAAE,KAAK,CAAC,gBAAgB,CAAqD,CAAC;AACnH,eAAO,MAAM,sBAAsB,EAAE,KAAK,CAAC,gBAAgB,CAAoD,CAAC;AAEhH,mDAAmD;AACnD,eAAO,MAAM,iBAAiB,EAAE,KAAK,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAuD,CAAC;AACtH,oCAAoC;AACpC,eAAO,MAAM,kBAAkB,EAAE,KAAK,CAAC,WAAW,CAA2C,CAAC;AAC9F,uDAAuD;AACvD,eAAO,MAAM,mBAAmB,EAAE,KAAK,CAAC,mBAAmB,CAAoD,CAAC;AAEhH,4CAA4C;AAC5C,eAAO,MAAM,mBAAmB,EAAE,KAAK,CAAC,YAAY,CAA6C,CAAC;AAClG,yCAAyC;AACzC,eAAO,MAAM,mBAAmB,EAAE,KAAK,CAAC,YAAY,CAAqD,CAAC;AAC1G,6CAA6C;AAC7C,eAAO,MAAM,oBAAoB,EAAE,KAAK,CAAC,aAAa,CAA+C,CAAC;AACtG,8CAA8C;AAC9C,eAAO,MAAM,0BAA0B,EAAE,KAAK,CAAC,kBAAkB,CAAyD,CAAC;AAC3H,oCAAoC;AACpC,eAAO,MAAM,uBAAuB,EAAE,KAAK,CAAC,gBAAgB,CAAqD,CAAC;AAClH,oCAAoC;AACpC,eAAO,MAAM,wBAAwB,EAAE,KAAK,CAAC,iBAAiB,CAAuD,CAAC;AACtH,+BAA+B;AAC/B,eAAO,MAAM,sBAAsB,EAAE,KAAK,CAAC,eAAe,CAAmD,CAAC;AAC9G,kCAAkC;AAClC,eAAO,MAAM,qBAAqB,EAAE,KAAK,CAAC,qBAAqB,CAA+D,CAAC;AAC/H,yCAAyC;AACzC,eAAO,MAAM,oBAAoB,EAAE,KAAK,CAAC,aAAa,CAA+C,CAAC;AACtG,gCAAgC;AAChC,eAAO,MAAM,qBAAqB,EAAE,KAAK,CAAC,cAAc,CAAiD,CAAC;AAE1G;;;GAGG;AACH,eAAO,MAAM,mBAAmB,EAAE,KAAK,CAAC,OAAO,8BAA8B,EAAE,YAAY,CACT,CAAC;AACnF,mDAAmD;AACnD,eAAO,MAAM,qBAAqB,EAAE,KAAK,CAAC,qBAAqB,CAA+D,CAAC;AAE/H,oCAAoC;AACpC,eAAO,MAAM,yBAAyB,EAAE,KAAK,CAAC,kBAAkB,CAAyD,CAAC;AAC1H,yDAAyD;AACzD,eAAO,MAAM,4BAA4B,EAAE,KAAK,CAAC,qBAAqB,CAA+D,CAAC;AAEtI,yCAAyC;AACzC,eAAO,MAAM,qBAAqB,EAAE,KAAK,CAAC,cAAc,CAAiD,CAAC;AAa1G,kEAAkE;AAClE,eAAO,MAAM,gBAAgB,EAAE,KAAK,CAAC,MAAM,CAAoC,CAAC;AAChF,iEAAiE;AACjE,eAAO,MAAM,wBAAwB,EAAE,KAAK,CAAC,MAAM,GAAG,SAAS,CACX,CAAC;AACrD,qEAAqE;AACrE,eAAO,MAAM,wBAAwB,EAAE,KAAK,CAAC,MAAM,CAA4C,CAAC;AAChG,eAAO,MAAM,yBAAyB,EAAE,KAAK,CAAC,MAAM,GAAG,SAAS,CACV,CAAC;AAEvD,8EAA8E;AAC9E,OAAO,EAAE,mBAAmB,EAAE,MAAM,sCAAsC,CAAC;AAC3E,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,sCAAsC,CAAC;AAChF,eAAO,MAAM,mBAAmB,EAAE,KAAK,CAAC,mBAAmB,CAAoD,CAAC;AAChH,eAAO,MAAM,kBAAkB,EAAE,KAAK,CAAC,WAAW,CAA2C,CAAC"}

package/dist/shared/tokens.js

@@ -71,4 +71,5 @@ export const SECRETS_LEGACY_PATH_TOKEN = createToken('SecretsLegacyPath');
 /** SQLite storage for slave daemons (replaces OMNITRON_DB_TOKEN on slaves) */
 export { SlaveStorageService } from '../services/slave-storage.service.js';
 export const SLAVE_STORAGE_TOKEN = createToken('SlaveStorage');
+export const SYNC_SERVICE_TOKEN = createToken('SyncService');
 //# sourceMappingURL=tokens.js.map

package/dist/shared/tokens.js.map

@@ -1 +1 @@
-{"version":3,"file":"tokens.js","sourceRoot":"","sources":["../../src/shared/tokens.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,WAAW,EAAE,MAAM,2BAA2B,CAAC;AA2BxD,MAAM,CAAC,MAAM,kBAAkB,GAA+B,WAAW,CAAsB,cAAc,CAAC,CAAC;AAC/G,MAAM,CAAC,MAAM,iBAAiB,GAAsB,WAAW,CAAa,YAAY,CAAC,CAAC;AAC1F,MAAM,CAAC,MAAM,iBAAiB,GAAsB,WAAW,CAAa,YAAY,CAAC,CAAC;AAC1F;;;;GAIG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAA4B,WAAW,CAAmB,kBAAkB,CAAC,CAAC;AACnH,MAAM,CAAC,MAAM,sBAAsB,GAA4B,WAAW,CAAmB,iBAAiB,CAAC,CAAC;AAEhH,mDAAmD;AACnD,MAAM,CAAC,MAAM,iBAAiB,GAAoC,WAAW,CAA2B,YAAY,CAAC,CAAC;AACtH,oCAAoC;AACpC,MAAM,CAAC,MAAM,kBAAkB,GAAuB,WAAW,CAAc,aAAa,CAAC,CAAC;AAC9F,uDAAuD;AACvD,MAAM,CAAC,MAAM,mBAAmB,GAA+B,WAAW,CAAsB,cAAc,CAAC,CAAC;AAEhH,4CAA4C;AAC5C,MAAM,CAAC,MAAM,mBAAmB,GAAwB,WAAW,CAAe,cAAc,CAAC,CAAC;AAClG,yCAAyC;AACzC,MAAM,CAAC,MAAM,mBAAmB,GAAwB,WAAW,CAAe,sBAAsB,CAAC,CAAC;AAC1G,6CAA6C;AAC7C,MAAM,CAAC,MAAM,oBAAoB,GAAyB,WAAW,CAAgB,eAAe,CAAC,CAAC;AACtG,8CAA8C;AAC9C,MAAM,CAAC,MAAM,0BAA0B,GAA8B,WAAW,CAAqB,oBAAoB,CAAC,CAAC;AAC3H,oCAAoC;AACpC,MAAM,CAAC,MAAM,uBAAuB,GAA4B,WAAW,CAAmB,kBAAkB,CAAC,CAAC;AAClH,oCAAoC;AACpC,MAAM,CAAC,MAAM,wBAAwB,GAA6B,WAAW,CAAoB,mBAAmB,CAAC,CAAC;AACtH,+BAA+B;AAC/B,MAAM,CAAC,MAAM,sBAAsB,GAA2B,WAAW,CAAkB,iBAAiB,CAAC,CAAC;AAC9G,kCAAkC;AAClC,MAAM,CAAC,MAAM,qBAAqB,GAAiC,WAAW,CAAwB,uBAAuB,CAAC,CAAC;AAC/H,yCAAyC;AACzC,MAAM,CAAC,MAAM,oBAAoB,GAAyB,WAAW,CAAgB,eAAe,CAAC,CAAC;AACtG,gCAAgC;AAChC,MAAM,CAAC,MAAM,qBAAqB,GAA0B,WAAW,CAAiB,gBAAgB,CAAC,CAAC;AAE1G;;;GAGG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAC9B,WAAW,CAAsD,cAAc,CAAC,CAAC;AACnF,mDAAmD;AACnD,MAAM,CAAC,MAAM,qBAAqB,GAAiC,WAAW,CAAwB,uBAAuB,CAAC,CAAC;AAE/H,oCAAoC;AACpC,MAAM,CAAC,MAAM,yBAAyB,GAA8B,WAAW,CAAqB,oBAAoB,CAAC,CAAC;AAC1H,yDAAyD;AACzD,MAAM,CAAC,MAAM,4BAA4B,GAAiC,WAAW,CAAwB,uBAAuB,CAAC,CAAC;AAEtI,yCAAyC;AACzC,MAAM,CAAC,MAAM,qBAAqB,GAA0B,WAAW,CAAiB,gBAAgB,CAAC,CAAC;AAE1G,gFAAgF;AAChF,mCAAmC;AACnC,gFAAgF;AAChF,EAAE;AACF,+DAA+D;AAC/D,mEAAmE;AACnE,oEAAoE;AACpE,gEAAgE;AAChE,8DAA8D;AAC9D,0CAA0C;AAE1C,kEAAkE;AAClE,MAAM,CAAC,MAAM,gBAAgB,GAAkB,WAAW,CAAS,WAAW,CAAC,CAAC;AAChF,iEAAiE;AACjE,MAAM,CAAC,MAAM,wBAAwB,GACnC,WAAW,CAAqB,iBAAiB,CAAC,CAAC;AACrD,qEAAqE;AACrE,MAAM,CAAC,MAAM,wBAAwB,GAAkB,WAAW,CAAS,mBAAmB,CAAC,CAAC;AAChG,MAAM,CAAC,MAAM,yBAAyB,GACpC,WAAW,CAAqB,mBAAmB,CAAC,CAAC;AAEvD,8EAA8E;AAC9E,OAAO,EAAE,mBAAmB,EAAE,MAAM,sCAAsC,CAAC;AAE3E,MAAM,CAAC,MAAM,mBAAmB,GAA+B,WAAW,CAAsB,cAAc,CAAC,CAAC"}
+{"version":3,"file":"tokens.js","sourceRoot":"","sources":["../../src/shared/tokens.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,WAAW,EAAE,MAAM,2BAA2B,CAAC;AA4BxD,MAAM,CAAC,MAAM,kBAAkB,GAA+B,WAAW,CAAsB,cAAc,CAAC,CAAC;AAC/G,MAAM,CAAC,MAAM,iBAAiB,GAAsB,WAAW,CAAa,YAAY,CAAC,CAAC;AAC1F,MAAM,CAAC,MAAM,iBAAiB,GAAsB,WAAW,CAAa,YAAY,CAAC,CAAC;AAC1F;;;;GAIG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAA4B,WAAW,CAAmB,kBAAkB,CAAC,CAAC;AACnH,MAAM,CAAC,MAAM,sBAAsB,GAA4B,WAAW,CAAmB,iBAAiB,CAAC,CAAC;AAEhH,mDAAmD;AACnD,MAAM,CAAC,MAAM,iBAAiB,GAAoC,WAAW,CAA2B,YAAY,CAAC,CAAC;AACtH,oCAAoC;AACpC,MAAM,CAAC,MAAM,kBAAkB,GAAuB,WAAW,CAAc,aAAa,CAAC,CAAC;AAC9F,uDAAuD;AACvD,MAAM,CAAC,MAAM,mBAAmB,GAA+B,WAAW,CAAsB,cAAc,CAAC,CAAC;AAEhH,4CAA4C;AAC5C,MAAM,CAAC,MAAM,mBAAmB,GAAwB,WAAW,CAAe,cAAc,CAAC,CAAC;AAClG,yCAAyC;AACzC,MAAM,CAAC,MAAM,mBAAmB,GAAwB,WAAW,CAAe,sBAAsB,CAAC,CAAC;AAC1G,6CAA6C;AAC7C,MAAM,CAAC,MAAM,oBAAoB,GAAyB,WAAW,CAAgB,eAAe,CAAC,CAAC;AACtG,8CAA8C;AAC9C,MAAM,CAAC,MAAM,0BAA0B,GAA8B,WAAW,CAAqB,oBAAoB,CAAC,CAAC;AAC3H,oCAAoC;AACpC,MAAM,CAAC,MAAM,uBAAuB,GAA4B,WAAW,CAAmB,kBAAkB,CAAC,CAAC;AAClH,oCAAoC;AACpC,MAAM,CAAC,MAAM,wBAAwB,GAA6B,WAAW,CAAoB,mBAAmB,CAAC,CAAC;AACtH,+BAA+B;AAC/B,MAAM,CAAC,MAAM,sBAAsB,GAA2B,WAAW,CAAkB,iBAAiB,CAAC,CAAC;AAC9G,kCAAkC;AAClC,MAAM,CAAC,MAAM,qBAAqB,GAAiC,WAAW,CAAwB,uBAAuB,CAAC,CAAC;AAC/H,yCAAyC;AACzC,MAAM,CAAC,MAAM,oBAAoB,GAAyB,WAAW,CAAgB,eAAe,CAAC,CAAC;AACtG,gCAAgC;AAChC,MAAM,CAAC,MAAM,qBAAqB,GAA0B,WAAW,CAAiB,gBAAgB,CAAC,CAAC;AAE1G;;;GAGG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAC9B,WAAW,CAAsD,cAAc,CAAC,CAAC;AACnF,mDAAmD;AACnD,MAAM,CAAC,MAAM,qBAAqB,GAAiC,WAAW,CAAwB,uBAAuB,CAAC,CAAC;AAE/H,oCAAoC;AACpC,MAAM,CAAC,MAAM,yBAAyB,GAA8B,WAAW,CAAqB,oBAAoB,CAAC,CAAC;AAC1H,yDAAyD;AACzD,MAAM,CAAC,MAAM,4BAA4B,GAAiC,WAAW,CAAwB,uBAAuB,CAAC,CAAC;AAEtI,yCAAyC;AACzC,MAAM,CAAC,MAAM,qBAAqB,GAA0B,WAAW,CAAiB,gBAAgB,CAAC,CAAC;AAE1G,gFAAgF;AAChF,mCAAmC;AACnC,gFAAgF;AAChF,EAAE;AACF,+DAA+D;AAC/D,mEAAmE;AACnE,oEAAoE;AACpE,gEAAgE;AAChE,8DAA8D;AAC9D,0CAA0C;AAE1C,kEAAkE;AAClE,MAAM,CAAC,MAAM,gBAAgB,GAAkB,WAAW,CAAS,WAAW,CAAC,CAAC;AAChF,iEAAiE;AACjE,MAAM,CAAC,MAAM,wBAAwB,GACnC,WAAW,CAAqB,iBAAiB,CAAC,CAAC;AACrD,qEAAqE;AACrE,MAAM,CAAC,MAAM,wBAAwB,GAAkB,WAAW,CAAS,mBAAmB,CAAC,CAAC;AAChG,MAAM,CAAC,MAAM,yBAAyB,GACpC,WAAW,CAAqB,mBAAmB,CAAC,CAAC;AAEvD,8EAA8E;AAC9E,OAAO,EAAE,mBAAmB,EAAE,MAAM,sCAAsC,CAAC;AAE3E,MAAM,CAAC,MAAM,mBAAmB,GAA+B,WAAW,CAAsB,cAAc,CAAC,CAAC;AAChH,MAAM,CAAC,MAAM,kBAAkB,GAAuB,WAAW,CAAc,aAAa,CAAC,CAAC"}

package/dist/supervisor/restart-policy.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"restart-policy.d.ts","sourceRoot":"","sources":["../../src/supervisor/restart-policy.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAmB,MAAM,wBAAwB,CAAC;AAC9E,OAAO,KAAK,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AAE/E;;;GAGG;AACH,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,kBAAkB,EAAE,MAAM,EAAE,gBAAgB,GAAG,cAAc,CAsBtG"}
+{"version":3,"file":"restart-policy.d.ts","sourceRoot":"","sources":["../../src/supervisor/restart-policy.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAmB,MAAM,wBAAwB,CAAC;AAC9E,OAAO,KAAK,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AAE/E;;;GAGG;AACH,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,kBAAkB,EAAE,MAAM,EAAE,gBAAgB,GAAG,cAAc,CAyBtG"}

package/dist/supervisor/restart-policy.js

@@ -6,12 +6,16 @@
  * Per-app overrides take precedence over ecosystem defaults.
  */
 export function buildRestartPolicy(entry, config) {
+    // Consumers calculate delays from backoff.initial. Normalize the legacy
+    // per-app delay alias here so it reaches classic and supervisor launches.
+    const initial = entry.restartPolicy?.backoff?.initial ?? entry.restartPolicy?.delay ??
+        config.supervision.backoff.initial ?? 1000;
     const base = {
         enabled: true,
         maxRestarts: config.supervision.maxRestarts,
         window: config.supervision.window,
-        delay: config.supervision.backoff.initial ?? 1000,
-        backoff: config.supervision.backoff,
+        delay: initial,
+        backoff: { ...config.supervision.backoff, initial },
     };
     if (entry.restartPolicy) {
         const result = { ...base };
@@ -21,10 +25,8 @@ export function buildRestartPolicy(entry, config) {
             result.maxRestarts = entry.restartPolicy.maxRestarts;
         if (entry.restartPolicy.window != null)
             result.window = entry.restartPolicy.window;
-        if (entry.restartPolicy.delay != null)
-            result.delay = entry.restartPolicy.delay;
         if (entry.restartPolicy.backoff) {
-            result.backoff = { ...base.backoff, ...entry.restartPolicy.backoff };
+            result.backoff = { ...base.backoff, ...entry.restartPolicy.backoff, initial };
         }
         return result;
     }

package/dist/supervisor/restart-policy.js.map

@@ -1 +1 @@
-{"version":3,"file":"restart-policy.js","sourceRoot":"","sources":["../../src/supervisor/restart-policy.ts"],"names":[],"mappings":"AAAA;;GAEG;AAKH;;;GAGG;AACH,MAAM,UAAU,kBAAkB,CAAC,KAAyB,EAAE,MAAwB;IACpF,MAAM,IAAI,GAAmB;QAC3B,OAAO,EAAE,IAAI;QACb,WAAW,EAAE,MAAM,CAAC,WAAW,CAAC,WAAW;QAC3C,MAAM,EAAE,MAAM,CAAC,WAAW,CAAC,MAAM;QACjC,KAAK,EAAE,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,OAAO,IAAI,IAAI;QACjD,OAAO,EAAE,MAAM,CAAC,WAAW,CAAC,OAA0B;KACvD,CAAC;IAEF,IAAI,KAAK,CAAC,aAAa,EAAE,CAAC;QACxB,MAAM,MAAM,GAAmB,EAAE,GAAG,IAAI,EAAE,CAAC;QAC3C,IAAI,KAAK,CAAC,aAAa,CAAC,OAAO,IAAI,IAAI;YAAE,MAAM,CAAC,OAAO,GAAG,KAAK,CAAC,aAAa,CAAC,OAAO,CAAC;QACtF,IAAI,KAAK,CAAC,aAAa,CAAC,WAAW,IAAI,IAAI;YAAE,MAAM,CAAC,WAAW,GAAG,KAAK,CAAC,aAAa,CAAC,WAAW,CAAC;QAClG,IAAI,KAAK,CAAC,aAAa,CAAC,MAAM,IAAI,IAAI;YAAE,MAAM,CAAC,MAAM,GAAG,KAAK,CAAC,aAAa,CAAC,MAAM,CAAC;QACnF,IAAI,KAAK,CAAC,aAAa,CAAC,KAAK,IAAI,IAAI;YAAE,MAAM,CAAC,KAAK,GAAG,KAAK,CAAC,aAAa,CAAC,KAAK,CAAC;QAChF,IAAI,KAAK,CAAC,aAAa,CAAC,OAAO,EAAE,CAAC;YAChC,MAAM,CAAC,OAAO,GAAG,EAAE,GAAG,IAAI,CAAC,OAAO,EAAE,GAAG,KAAK,CAAC,aAAa,CAAC,OAAO,EAAE,CAAC;QACvE,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC"}
+{"version":3,"file":"restart-policy.js","sourceRoot":"","sources":["../../src/supervisor/restart-policy.ts"],"names":[],"mappings":"AAAA;;GAEG;AAKH;;;GAGG;AACH,MAAM,UAAU,kBAAkB,CAAC,KAAyB,EAAE,MAAwB;IACpF,wEAAwE;IACxE,0EAA0E;IAC1E,MAAM,OAAO,GAAG,KAAK,CAAC,aAAa,EAAE,OAAO,EAAE,OAAO,IAAI,KAAK,CAAC,aAAa,EAAE,KAAK;QACjF,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,OAAO,IAAI,IAAI,CAAC;IAC7C,MAAM,IAAI,GAAmB;QAC3B,OAAO,EAAE,IAAI;QACb,WAAW,EAAE,MAAM,CAAC,WAAW,CAAC,WAAW;QAC3C,MAAM,EAAE,MAAM,CAAC,WAAW,CAAC,MAAM;QACjC,KAAK,EAAE,OAAO;QACd,OAAO,EAAE,EAAE,GAAG,MAAM,CAAC,WAAW,CAAC,OAAO,EAAE,OAAO,EAAqB;KACvE,CAAC;IAEF,IAAI,KAAK,CAAC,aAAa,EAAE,CAAC;QACxB,MAAM,MAAM,GAAmB,EAAE,GAAG,IAAI,EAAE,CAAC;QAC3C,IAAI,KAAK,CAAC,aAAa,CAAC,OAAO,IAAI,IAAI;YAAE,MAAM,CAAC,OAAO,GAAG,KAAK,CAAC,aAAa,CAAC,OAAO,CAAC;QACtF,IAAI,KAAK,CAAC,aAAa,CAAC,WAAW,IAAI,IAAI;YAAE,MAAM,CAAC,WAAW,GAAG,KAAK,CAAC,aAAa,CAAC,WAAW,CAAC;QAClG,IAAI,KAAK,CAAC,aAAa,CAAC,MAAM,IAAI,IAAI;YAAE,MAAM,CAAC,MAAM,GAAG,KAAK,CAAC,aAAa,CAAC,MAAM,CAAC;QACnF,IAAI,KAAK,CAAC,aAAa,CAAC,OAAO,EAAE,CAAC;YAChC,MAAM,CAAC,OAAO,GAAG,EAAE,GAAG,IAAI,CAAC,OAAO,EAAE,GAAG,KAAK,CAAC,aAAa,CAAC,OAAO,EAAE,OAAO,EAAE,CAAC;QAChF,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/webapp/console-container.d.ts

@@ -0,0 +1,7 @@
+import type { ContainerState } from '../infrastructure/types.js';
+export declare const CONSOLE_INSTANCE_LABEL = "omnitron.instance-home";
+/** Console identity belongs to the daemon instance, never a stack's async scope. */
+export declare function consoleContainerName(home?: string): string;
+/** Old containers prove ownership through their instance-local configuration mount. */
+export declare function assertConsoleOwnership(state: ContainerState, home?: string): void;
+//# sourceMappingURL=console-container.d.ts.map