@omnitron-dev/omnitron 0.3.1 → 0.3.3

package/data/operations/managed-kernel.mjs

@@ -0,0 +1,302 @@
+// Executed with the verified Node binary of the OS-managed guardian over the pinned SSH connection.
+/* global commandFailure, targetRuntime -- shared readers supplied by managedHostCommand */
+
+import fs from 'node:fs';
+import path from 'node:path';
+import { pathToFileURL } from 'node:url';
+import { createRequire } from 'node:module';
+import { execFileSync, spawnSync } from 'node:child_process';
+const [home, bootstrap, guardian, request] = process.argv.slice(1);
+const wanted = JSON.parse(request);
+const dir = path.join(home, 'runtime'),
+  releases = path.join(dir, 'releases'),
+  pkg = path.join(bootstrap, 'packages/0');
+const sdk = (name) => import(pathToFileURL(path.join(pkg, 'dist', name + '.js')).href);
+const { readManagedRuntime, managedJobPid, verifyManagedIsolation } = await sdk('daemon/managed-runtime');
+const { checkBackendCandidate } = await sdk('daemon/backend-candidate');
+const { createDaemonClient } = await sdk('daemon/daemon-client');
+const { privateControlClient } = await sdk('daemon/private-control-client');
+const config = await readManagedRuntime(home);
+if (
+  !config ||
+  path.join(releases, config.backend.artifact) !== bootstrap ||
+  (await managedJobPid(config, 'backend')) !== Number(guardian)
+)
+  throw Error('Managed supervisor identity changed');
+// Older guardian SDKs predate the read-only installation API. Their open() may
+// migrate the registry, so inspection must use a read-only SQLite connection.
+function openLegacyReader() {
+  const dbPath = path.join(dir, 'state.db');
+  for (const suffix of ['', '-wal', '-shm', '-journal']) {
+    const stat = fs.lstatSync(dbPath + suffix, { throwIfNoEntry: false });
+    if (stat && (!stat.isFile() || stat.uid !== process.getuid() || stat.mode & 0o077))
+      throw Error('Unsafe runtime registry');
+  }
+  const Sqlite = createRequire(path.join(pkg, 'package.json'))('better-sqlite3');
+  const db = new Sqlite(dbPath, { readonly: true, fileMustExist: true });
+  const read = db.prepare("SELECT value FROM state_kv WHERE key='runtime.selection'");
+  const pending = db.prepare("SELECT 1 FROM state_kv WHERE key IN ('runtime.lease','runtime.activation') LIMIT 1");
+  return {
+    settledSelection: db.transaction(() => {
+      const selection = JSON.parse(read.get()?.value ?? 'null');
+      if (selection?.protocol !== 1 || !Number.isSafeInteger(selection.revision) || selection.revision < 1 ||
+          !hash.test(selection.current) || (selection.previous !== null && !hash.test(selection.previous)) ||
+          (selection.bootstrap !== null && !hash.test(selection.bootstrap)) || !Number.isFinite(Date.parse(selection.selectedAt)) ||
+          pending.get()) throw Error('Runtime selection is invalid or a native operation is unfinished');
+      return selection;
+    }).deferred,
+    close: () => db.close(),
+  };
+}
+const hash = /^[0-9a-f]{64}$/;
+const checked = new Map();
+const checkout = async (id) => {
+  if (!hash.test(id)) throw Error('Invalid installed runtime digest');
+  const r = path.join(releases, id);
+  if (fs.realpathSync(r) !== r) throw Error('Non-canonical installed runtime');
+  if (!checked.has(id)) checked.set(id, checkBackendCandidate(path.join(r, 'packages/0/dist'), undefined, id));
+  return checked.get(id);
+};
+const { RuntimeInstallation } = await sdk('daemon/runtime-installation');
+const registry = typeof RuntimeInstallation.openReadOnly === 'function' ? await RuntimeInstallation.openReadOnly(home) : openLegacyReader();
+if (!registry) throw Error('Runtime installation is absent');
+const client = createDaemonClient();
+try {
+  const selection = registry.settledSelection();
+  const status = await client.status(),
+    live = status.execution;
+  if (
+    live?.mode !== 'resident' ||
+    !live.owner?.id ||
+    live.connection?.status !== 'connected' ||
+    live.phase !== 'active'
+  )
+    throw Error('Resident owner observation is unavailable or control transfer has not settled');
+  const current = await checkout(selection.current),
+    owner = await checkout(config.owner.artifact);
+  const ownerPid = await managedJobPid(config, 'owner'),
+    guardianPid = Number(guardian);
+  await verifyManagedIsolation(config, ownerPid, guardianPid, status.pid);
+  const executable = (pid) => fs.realpathSync('/proc/' + pid + '/exe');
+  const argv = (pid) => fs.readFileSync('/proc/' + pid + '/cmdline', 'utf8').split('\0');
+  const includesEntry = (pid, entry) => argv(pid).some((a) => a === entry);
+  const ownerEntry = path.join(owner.directory, 'daemon/managed-entry.js');
+  if (
+    live.owner.pid !== ownerPid ||
+    executable(ownerPid) !== owner.execPath ||
+    !includesEntry(ownerPid, ownerEntry) ||
+    !argv(ownerPid).includes('owner') ||
+    executable(status.pid) !== current.execPath ||
+    !includesEntry(status.pid, current.entry) ||
+    status.build?.dirty !== false ||
+    status.build.commit !== current.build.commit
+  )
+    throw Error('RPC, native process and sealed runtime identities do not agree');
+  const stat = fs.readFileSync('/proc/' + status.pid + '/stat', 'utf8');
+  if (Number(stat.slice(stat.lastIndexOf(')') + 2).split(' ')[1]) !== guardianPid)
+    throw Error('Serving backend is not a child of its native guardian');
+  const manifest = JSON.parse(fs.readFileSync(path.join(current.runtimeRoot, 'RUNTIME.json'), 'utf8'));
+  const nodeVersion = execFileSync(current.execPath, ['--version'], { encoding: 'utf8', timeout: 10000 }).trim();
+  if (manifest.sha256 !== selection.current || manifest.platform !== process.platform || manifest.arch !== process.arch || manifest.nodeVersion !== nodeVersion)
+    throw Error('Serving runtime metadata differs from its native executable');
+  const assertSelection = () => {
+    const now = registry.settledSelection();
+    if (now.current !== selection.current || now.revision !== selection.revision)
+      throw Error('Runtime selection changed during inspection');
+  };
+  const channel = await privateControlClient(path.join(config.directory, 'owner.sock'), 'OmnitronExecution');
+  let snap;
+  try {
+    snap = await channel.service.snapshot();
+  } finally {
+    await channel.close();
+  }
+  if (
+    snap.protocol !== 1 ||
+    snap.status.owner.id !== live.owner.id ||
+    snap.status.owner.pid !== ownerPid ||
+    snap.status.phase !== 'active' ||
+    snap.status.controller.epoch !== live.epoch ||
+    !hash.test(snap.inventoryDigest)
+  )
+    throw Error('Unsettled owner inventory');
+  // A guardian and its resident may use different Node images. Run the shared
+  // target reader with the actual owner executable, without inherited loaders.
+  const target = JSON.parse(execFileSync(owner.execPath, ['--input-type=module', '-e',
+    'const read=' + targetRuntime.toString() + ';console.log(JSON.stringify(await read()));'],
+  { cwd: owner.runtimeRoot, env: { ...process.env, NODE_OPTIONS: '', NODE_PATH: '' },
+    encoding: 'utf8', timeout: 30000, maxBuffer: 1048576 }));
+  const bundle = {
+    root: path.dirname(current.directory),
+    commit: current.build.commit,
+    version: status.version,
+    managed: {
+      platform: process.platform,
+      arch: process.arch,
+      nodeVersion,
+      backendArtifact: current.runtimeHash,
+      backendPid: status.pid,
+      ownerArtifact: owner.runtimeHash,
+      ownerId: live.owner.id,
+      ownerPid,
+    },
+    applicationRuntime: { root: path.dirname(owner.directory), executable: owner.execPath, commit: owner.build.commit, target,
+      execution: { mode: 'resident', protocol: snap.protocol, ownerId: snap.status.owner.id, pid: ownerPid, epoch: snap.status.controller.epoch } },
+  };
+  if (wanted.operation === 'inspect') {
+    const finalChannel = await privateControlClient(path.join(config.directory, 'owner.sock'), 'OmnitronExecution');
+    try {
+      const final = await finalChannel.service.snapshot();
+      if (final.protocol !== snap.protocol || final.status.phase !== 'active' ||
+          JSON.stringify(final.status.owner) !== JSON.stringify(snap.status.owner) ||
+          final.status.controller.epoch !== snap.status.controller.epoch ||
+          final.status.controller.controllerId !== snap.status.controller.controllerId ||
+          await managedJobPid(config, 'owner') !== ownerPid || executable(ownerPid) !== owner.execPath)
+        throw Error('Execution owner or controller grant changed during runtime inspection');
+    } finally { await finalChannel.close(); }
+    assertSelection();
+    console.log(JSON.stringify({ bundle }));
+  } else {
+    if (!live.blockers || !wanted.requiredCounters.every(key => Object.hasOwn(live.blockers, key)) ||
+        Object.values(live.blockers).some(count => count !== 0)) throw Error('Active or unknown backend operations block kernel qualification');
+    const health = await client.getHealth({});
+    const unhealthy = status.apps
+      .filter(
+        (app) => app.status !== 'stopped' && (app.status !== 'online' || health.apps?.[app.name]?.status !== 'healthy')
+      )
+      .map((app) => app.name);
+    // The existing snapshot supplies all identity input. Legacy bootstrap SDKs
+    // may omit diagnostics; the strict inventory digest below remains required.
+    let identity;
+    const identityFile = path.join(pkg, 'dist/shared/execution-identity.js');
+    const identityFileStat = fs.lstatSync(identityFile, { throwIfNoEntry: false });
+    if (identityFileStat) {
+      if (!identityFileStat.isFile() || identityFileStat.uid !== process.getuid() || (identityFileStat.mode & 0o022) || fs.realpathSync(identityFile) !== identityFile)
+        throw Error('Unsafe installed identity diagnostics SDK; verify the guardian runtime before retrying');
+      try {
+        const details = await sdk('shared/execution-identity');
+        if (typeof details.projectExecutionIdentity !== 'function' || typeof details.isExecutionIdentityEvidence !== 'function')
+          throw Error('Incompatible identity diagnostics exports');
+        const projected = details.projectExecutionIdentity(snap);
+        if (projected !== null && !details.isExecutionIdentityEvidence(projected)) throw Error('Malformed identity diagnostic projection');
+        if (projected) identity = projected;
+      } catch {
+        throw Error('Installed identity diagnostics SDK could not be verified; repair the guardian runtime before retrying');
+      }
+    }
+    const evidence = {
+      ...(identity ? { identity } : {}),
+      bundle,
+      current: selection.current,
+      ownerId: live.owner.id,
+      ownerPid,
+      backendPid: status.pid,
+      appsDigest: snap.inventoryDigest,
+      selectionRevision: selection.revision,
+      priorSelection: selection.previous,
+      unhealthy,
+    };
+    {
+      const supervisor = await privateControlClient(
+        path.join(config.directory, 'supervisor.sock'),
+        'OmnitronSupervisor',
+        360000
+      );
+      try {
+        const supervisorState = await supervisor.service.status();
+        if (supervisorState.kernelHandoff !== 1)
+          throw Error(
+            'Native guardian lacks kernelHandoff@1. Qualify and apply a backend guardian transition before the fleet rollout'
+          );
+        if (
+          supervisorState.operationPending !== false ||
+          supervisorState.state !== 'ready' ||
+          supervisorState.backendPid !== status.pid
+        )
+          throw Error('Native guardian has an unfinished kernel operation');
+      } finally {
+        await supervisor.close();
+      }
+    }
+    if (wanted.operation === 'plan') {
+      if (unhealthy.length) throw Error('Application readiness did not pass: ' + unhealthy.join(', '));
+      if (!/^[0-9a-f]{40}$/.test(wanted.commit)) throw Error('An exact Git commit is required');
+      const entries = fs.readdirSync(releases, { withFileTypes: true }).filter((e) => hash.test(e.name));
+      if (entries.length > 256) throw Error('Installed runtime catalog exceeds 256 releases');
+      const matches = entries.filter(
+        (e) =>
+          e.isDirectory() &&
+          JSON.parse(fs.readFileSync(path.join(releases, e.name, 'packages/0/dist/BUILD.json'))).commit ===
+            wanted.commit
+      );
+      if (matches.length !== 1)
+        throw Error('Expected exactly one installed sealed runtime for ' + wanted.commit + '; found ' + matches.length);
+      const candidate = matches[0].name === current.runtimeHash ? current : await checkout(matches[0].name);
+      if (candidate.build.commit !== wanted.commit) throw Error('Candidate changed during qualification');
+      if (candidate.runtimeHash !== current.runtimeHash) {
+        // The canonical preflight checks the live backend's migration scope,
+        // checksum metadata compatibility and the running guardian's capabilities.
+        // A second whole-tree digest policy here would disagree with that path.
+        const check = spawnSync(
+          candidate.execPath,
+          [
+            path.join(candidate.directory, 'cli/omnitron.js'),
+            '--json',
+            'backend',
+            'upgrade',
+            candidate.directory,
+            '--check',
+          ],
+          { encoding: 'utf8', timeout: 150000, env: { ...process.env, OMNITRON_HOME: home } }
+        );
+        if (check.error || check.status !== 0) {
+          const reason = commandFailure(check.stderr || '', check.error?.code || check.signal || 'exit ' + check.status);
+          throw Error('Native backend preflight failed: ' + reason);
+        }
+        const result = JSON.parse(check.stdout);
+        if (result.ok !== true || result.data?.checked !== true)
+          throw Error('Native backend preflight failed: ' + (typeof result.error === 'string' ? result.error : 'candidate was not confirmed'));
+      }
+      evidence.qualified = candidate.runtimeHash;
+    }
+    if (wanted.operation === 'switch') {
+      const { expected, from, to, revision, pid } = wanted;
+      if (from === expected.previous && unhealthy.length) throw Error('Application readiness changed before handoff');
+      if (
+        evidence.current !== from ||
+        status.pid !== pid ||
+        selection.revision !== revision ||
+        live.owner.id !== expected.ownerId ||
+        ownerPid !== expected.ownerPid ||
+        snap.inventoryDigest !== expected.appsDigest
+      )
+        throw Error('Planned kernel or application identity changed before handoff');
+      const destination = await checkout(to);
+      if (to === expected.candidate && destination.build.commit !== expected.commit)
+        throw Error('Planned source changed');
+      assertSelection();
+      const supervisor = await privateControlClient(
+        path.join(config.directory, 'supervisor.sock'),
+        'OmnitronSupervisor',
+        360000
+      );
+      try {
+        await supervisor.service.upgradeIfCurrent({
+          current: from,
+          candidate: to,
+          selectionRevision: revision,
+          backendPid: pid,
+          ownerId: expected.ownerId,
+          ownerPid: expected.ownerPid,
+          appsDigest: expected.appsDigest,
+        });
+      } finally {
+        await supervisor.close();
+      }
+    }
+    if (wanted.operation !== 'switch') assertSelection();
+    console.log(JSON.stringify(evidence));
+  }
+} finally {
+  try { await client.disconnect(); } finally { await registry.close(); }
+}

package/data/operations/stage-kernel.mjs

@@ -0,0 +1,125 @@
+// Runs under the pinned deployment lease using the serving managed runtime's Node.
+import fs from 'node:fs/promises';
+import { createReadStream } from 'node:fs';
+import { createHash } from 'node:crypto';
+import path from 'node:path';
+import { pathToFileURL } from 'node:url';
+
+const [phase, registry, current, receipt] = process.argv.slice(1);
+const build = JSON.parse(receipt);
+const sha256 = /^[a-f0-9]{64}$/;
+if (!['prepare', 'install'].includes(phase) || !sha256.test(current) || !sha256.test(build.artifact) ||
+    !sha256.test(build.archive) || !/^[a-f0-9]{40}$/.test(build.commit) || !Number.isSafeInteger(build.bytes) ||
+    build.bytes <= 0 || build.bytes > 2 * 1024 ** 3 || build.platform !== process.platform ||
+    build.arch !== process.arch || build.nodeVersion !== process.version) throw Error('Unexpected distribution target or artifact identity');
+const root = path.join(registry, 'releases', current);
+if (path.basename(registry) !== 'runtime' || await fs.realpath(registry) !== registry ||
+    await fs.realpath(process.execPath) !== path.join(root, 'node')) throw Error('Invalid receiver runtime');
+const home = path.dirname(registry);
+const pkg = path.join(root, 'packages/0');
+const sdk = relative => import(pathToFileURL(path.join(pkg, 'dist', relative + '.js')).href);
+const { RuntimeInstallation } = await sdk('daemon/runtime-installation');
+const { verifyRuntimeArtifact } = await sdk('shared/runtime-artifact');
+const { readBuildStamp } = await sdk('shared/build-stamp');
+const { readManagedRuntime } = await sdk('daemon/managed-runtime');
+const { privateControlClient } = await sdk('daemon/private-control-client');
+const config = await readManagedRuntime(home);
+if (!config) throw Error('No managed supervisor for this instance');
+const channel = await privateControlClient(path.join(config.directory, 'supervisor.sock'), 'OmnitronSupervisor');
+try {
+  const state = await channel.service.status();
+  if (state.kernelHandoff !== 1 || state.operationPending !== false || state.state !== 'ready') {
+    throw Error('The native guardian must be ready and support kernelHandoff@1 before distributing an update');
+  }
+} finally { await channel.close(); }
+const installation = await RuntimeInstallation.open(home, { existing: true });
+if (!installation) throw Error('Missing runtime installation');
+const inbox = path.join(registry, '.incoming-' + build.artifact);
+const archive = path.join(inbox, 'runtime.tgz');
+const confirmSelection = () => {
+  if (installation.selection()?.current !== current || installation.activation()) throw Error('Runtime selection changed during staging');
+};
+const present = async () => {
+  try { await fs.lstat(installation.releasePath(build.artifact)); }
+  catch (error) { if (error.code === 'ENOENT') return false; throw error; }
+  const found = await installation.artifact(build.artifact);
+  if (found.build.commit !== build.commit) throw Error('Installed source differs from catalog receipt');
+  return true;
+};
+const capacity = async bytes => {
+  const disk = await fs.statfs(registry);
+  if (disk.bavail * disk.bsize < bytes + 256 * 1024 ** 2) throw Error('Insufficient free space to stage and install the candidate');
+};
+const resetInbox = async () => {
+  // Only this digest's unpublished transfer directory is disposable. The remote
+  // command guard excludes concurrent stage/cleanup for an expired lease.
+  const prior = await fs.lstat(inbox).catch(err => { if (err.code !== 'ENOENT') throw err; });
+  if (prior) {
+    if (!prior.isDirectory() || prior.uid !== process.getuid() || prior.mode & 0o077 || await fs.realpath(inbox) !== inbox) throw Error('Unsafe kernel transfer directory');
+    await fs.rm(inbox, { recursive: true });
+  }
+};
+try {
+  confirmSelection();
+  let installed = await present();
+  if (installed || phase === 'prepare') await resetInbox();
+  if (!installed && phase === 'prepare') {
+    await capacity(build.bytes);
+    await fs.mkdir(inbox, { mode: 0o700 });
+  } else if (!installed) {
+    const dir = await fs.lstat(inbox), file = await fs.lstat(archive);
+    if (!dir.isDirectory() || dir.uid !== process.getuid() || dir.mode & 0o077 || await fs.realpath(inbox) !== inbox ||
+        !file.isFile() || file.nlink !== 1 || file.uid !== process.getuid() || file.mode & 0o022 || file.size !== build.bytes) throw Error('Unsafe or incomplete kernel transfer');
+    try {
+      const sum = createHash('sha256');
+      for await (const chunk of createReadStream(archive)) sum.update(chunk);
+      if (sum.digest('hex') !== build.archive) throw Error('Kernel transfer SHA-256 mismatch');
+      const tar = await loadRuntimeExtractor(pkg);
+      let expanded = 0, invalid = false;
+      const entries = new Map();
+      await tar.list({ file: archive, strict: true, onReadEntry(entry) {
+        const name = entry.path.replace(/\/$/, '');
+        if (!name || name.includes('\0') || name.startsWith('/') || name.split('/').some(s => !s || s === '.' || s === '..') ||
+            !['File','Directory','SymbolicLink'].includes(entry.type) || entries.has(name) || entries.size >= 200_000) { invalid = true; return; }
+        if (entry.type !== 'SymbolicLink' && (!Number.isInteger(entry.mode) || entry.mode & 0o7022)) invalid = true;
+        if (entry.type === 'SymbolicLink') {
+          const destination = path.join(path.dirname(name), entry.linkpath);
+          if (!entry.linkpath || path.isAbsolute(entry.linkpath) || destination === '..' || destination.startsWith('../')) invalid = true;
+        }
+        expanded += entry.size;
+        entries.set(name, { type: entry.type, mode: entry.mode });
+      } });
+      for (const name of entries.keys()) {
+        const parent = path.dirname(name);
+        if (parent !== '.' && entries.get(parent)?.type !== 'Directory') invalid = true;
+      }
+      if (invalid || expanded > 8 * 1024 ** 3) throw Error('Kernel archive exceeds limits or contains an unsafe entry');
+      await capacity(2 * expanded);
+      const payload = path.join(inbox, 'payload');
+      await fs.mkdir(payload, { mode: 0o700 });
+      await tar.extract({ file: archive, cwd: payload, strict: true, preserveOwner: false, preservePaths: false,
+        chmod: true, umask: 0o022, dmode: 0o700, fmode: 0o600 });
+      // tar's chmod option does not restore modes of newly created regular files.
+      // A receiver running with umask 077 must retain the sealed executable bits.
+      // Restore only validated regular entries inside the private transfer directory;
+      // never relax the receiver's process-wide umask or follow an archive link here.
+      for (const [name, entry] of entries) {
+        if (entry.type !== 'File') continue;
+        const file = path.join(payload, name), stat = await fs.lstat(file);
+        if (!stat.isFile() || stat.nlink !== 1 || stat.uid !== process.getuid() || await fs.realpath(file) !== file)
+          throw Error('Unsafe extracted kernel file: ' + name);
+        await fs.chmod(file, entry.mode & 0o777);
+      }
+      const manifest = await verifyRuntimeArtifact(payload, build.artifact);
+      const stamp = readBuildStamp(path.join(payload, 'packages/0/dist'));
+      if (manifest.nodeVersion !== build.nodeVersion || stamp?.commit !== build.commit || stamp.dirty !== false) throw Error('Received runtime identity differs from catalog receipt');
+      await installation.exclusive(async () => {
+        confirmSelection();
+        const result = await installation.install(payload);
+        if (result.runtimeHash !== build.artifact || result.build.commit !== build.commit) throw Error('Installed runtime differs from catalog receipt');
+      });
+      installed = true;
+    } finally { await resetInbox(); }
+  }
+  console.log(JSON.stringify({ installed, artifact: build.artifact }));
+} finally { await installation.close(); }

package/dist/BUILD.json

@@ -1,5 +1,6 @@
 {
-  "commit": "d6c62c21805c1da8b787a7b54f0ff87ed5f7e113",
-  "dirty": true,
-  "builtAt": "2026-10-26T08:05:48.890Z"
+  "commit": "a26d58fe130b02bab92cf7d568e977e9b4e85b54",
+  "dirty": false,
+  "builtAt": "2026-11-10T09:13:25.000Z",
+  "timeBasis": "source"
 }

package/dist/cli/exit-after-output.d.ts

@@ -0,0 +1,3 @@
+/** Drain piped output before closing transport handles left by a CLI command. */
+export declare function exitAfterOutput(code: number | string): Promise<never>;
+//# sourceMappingURL=exit-after-output.d.ts.map

package/dist/cli/exit-after-output.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"exit-after-output.d.ts","sourceRoot":"","sources":["../../src/cli/exit-after-output.ts"],"names":[],"mappings":"AAOA,iFAAiF;AACjF,wBAAsB,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC,CAG3E"}

package/dist/cli/exit-after-output.js

@@ -0,0 +1,11 @@
+function flush(stream) {
+    if (stream.destroyed || !stream.writable)
+        return Promise.resolve();
+    return new Promise((resolve) => stream.write('', () => resolve()));
+}
+/** Drain piped output before closing transport handles left by a CLI command. */
+export async function exitAfterOutput(code) {
+    await Promise.all([flush(process.stdout), flush(process.stderr)]);
+    process.exit(code);
+}
+//# sourceMappingURL=exit-after-output.js.map

package/dist/cli/exit-after-output.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"exit-after-output.js","sourceRoot":"","sources":["../../src/cli/exit-after-output.ts"],"names":[],"mappings":"AAEA,SAAS,KAAK,CAAC,MAAgB;IAC7B,IAAI,MAAM,CAAC,SAAS,IAAI,CAAC,MAAM,CAAC,QAAQ;QAAE,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC;IACnE,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,EAAE,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;AACrE,CAAC;AAED,iFAAiF;AACjF,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,IAAqB;IACzD,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IAClE,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACrB,CAAC"}

package/dist/cli/installed.d.ts

@@ -0,0 +1,3 @@
+#!/usr/bin/env node
+export {};
+//# sourceMappingURL=installed.d.ts.map

package/dist/cli/installed.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"installed.d.ts","sourceRoot":"","sources":["../../src/cli/installed.ts"],"names":[],"mappings":""}

package/dist/cli/installed.js

@@ -0,0 +1,17 @@
+#!/usr/bin/env node
+import { selectedBackend } from '../daemon/runtime-installation.js';
+import { runRuntimeEntry } from '../daemon/runtime-launcher.js';
+try {
+    // Recovery commands must remain available while ordinary cold starts are fenced.
+    const args = process.argv.slice(2);
+    const command = args.find(argument => !argument.startsWith('-'));
+    const artifact = await selectedBackend(undefined, command === 'backend' ? 'management' : 'control');
+    if (!artifact)
+        throw new Error('No runtime is selected. Install and select a sealed backend before using this launcher.');
+    await runRuntimeEntry(artifact, 'cli', args);
+}
+catch (error) {
+    process.stderr.write(`Omnitron runtime: ${error instanceof Error ? error.message : String(error)}\n`);
+    process.exitCode = 1;
+}
+//# sourceMappingURL=installed.js.map

package/dist/cli/installed.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"installed.js","sourceRoot":"","sources":["../../src/cli/installed.ts"],"names":[],"mappings":";AACA,OAAO,EAAE,eAAe,EAAE,MAAM,mCAAmC,CAAC;AACpE,OAAO,EAAE,eAAe,EAAE,MAAM,+BAA+B,CAAC;AAEhE,IAAI,CAAC;IACH,iFAAiF;IACjF,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACnC,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC;IACjE,MAAM,QAAQ,GAAG,MAAM,eAAe,CAAC,SAAS,EAAE,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IACpG,IAAI,CAAC,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,yFAAyF,CAAC,CAAC;IAC1H,MAAM,eAAe,CAAC,QAAQ,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;AAC/C,CAAC;AAAC,OAAO,KAAK,EAAE,CAAC;IACf,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,qBAAqB,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACtG,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;AACvB,CAAC"}