@omnitron-dev/omnitron 0.3.1 → 0.3.3

package/dist/daemon/managed-owner-build.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"managed-owner-build.js","sourceRoot":"","sources":["../../src/daemon/managed-owner-build.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAClC,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AACtC,OAAO,EAAE,qBAAqB,EAAE,MAAM,+BAA+B,CAAC;AACtE,OAAO,EAAE,cAAc,EAAmB,MAAM,0BAA0B,CAAC;AAC3E,OAAO,EAAE,oBAAoB,EAAE,MAAM,iCAAiC,CAAC;AACvE,OAAO,EAAE,kBAAkB,EAAuB,MAAM,sBAAsB,CAAC;AAC/E,OAAO,EAAE,cAAc,EAAE,oBAAoB,EAAE,MAAM,4BAA4B,CAAC;AAClF,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAE1D,MAAM,IAAI,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;AACjC,KAAK,UAAU,MAAM,CAAC,IAAY,EAAE,IAAc;IAChD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,GAAG,IAAI;QAC7F,GAAG,EAAE,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC;IACrD,OAAO,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;AACjC,CAAC;AACD,SAAS,YAAY,CAAC,SAAkB,EAAE,MAAc;IACtD,IAAI,CAAC,SAAS;QAAE,MAAM,KAAK,CAAC,8CAA8C,GAAG,MAAM,CAAC,CAAC;AACvF,CAAC;AACD,KAAK,UAAU,WAAW,CAAC,IAAY;IACrC,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAClC,YAAY,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,GAAG,KAAK,OAAO,CAAC,MAAO,EAAE,IAAI,MAAM,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,IAAI,EAC3H,qCAAqC,CAAC,CAAC;IACzC,OAAO,IAAI,CAAC;AACd,CAAC;AAED,uGAAuG;AACvG,KAAK,UAAU,MAAM,CAAC,MAAsB,EAAE,GAAW,EAAE,IAAc,EAAE,IAAY;IACrF,MAAM,MAAM,GAAG,CAAC,MAAM,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,GAAG,OAAO,CAAC,MAAO,EAAE,CAAC,GAAG,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC;IAC9G,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,gBAAgB,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC;IAC9D,MAAM,KAAK,GAAG,cAAc,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IAC1C,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,mBAAmB,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IACjD,MAAM,MAAM,GAAG,GAAG,CAAC,KAAK,CAAC,8CAA8C,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;IAC9G,YAAY,CAAC,KAAK,CAAC,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,KAAK,GAAG,IAAI,IAAI,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAC7F,GAAG,CAAC,KAAK,CAAC,sBAAsB,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,yBAAyB,CAAC,CAAC;IACpI,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC,IAAI,CAAC,CAAC;IACrC,YAAY,CAAC,IAAI,CAAC,IAAI,IAAI,GAAG,GAAG,IAAI,EAAE,uBAAuB,CAAC,CAAC;IAC/D,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,MAAM,CAAC,iBAAiB,EAAE,CAAC,UAAU,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;IACvG,YAAY,CAAC,KAAK,CAAC,KAAK,KAAK,MAAM,CAAC,KAAK,CAAC,KAAK,IAAI,CAAC,CAAC,KAAK,CAAC,OAAO,IAAI,KAAK,CAAC,OAAO,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC;QAC9F,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,gBAAgB,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,qBAAqB,CAAC,CAAC;IAC1F,MAAM,CAAC,QAAQ,EAAE,IAAI,EAAE,MAAM,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QACjD,MAAM,CAAC,SAAS,EAAE,CAAC,KAAK,EAAE,IAAI,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,qCAAqC,CAAC,CAAC;QAC1F,MAAM,CAAC,SAAS,EAAE,CAAC,KAAK,EAAE,IAAI,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;QAC5D,MAAM,CAAC,gBAAgB,EAAE,CAAC,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC;KAClF,CAAC,CAAC;IACH,MAAM,GAAG,GAAG,oBAAoB,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IACpD,YAAY,CAAC,GAAG,IAAI,GAAG,CAAC,GAAG,KAAK,GAAG,IAAI,GAAG,CAAC,IAAI,KAAK,CAAC,IAAI,GAAG,CAAC,GAAG,KAAK,OAAO,CAAC,MAAO,EAAE,IAAI,GAAG,CAAC,UAAU,KAAK,IAAI,CAAC,CAAC,CAAC;QAClH,IAAI,CAAC,IAAI,EAAE,KAAK,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,8BAA8B,CAAC,CAAC;IAClE,MAAM,KAAK,GAAG,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC;IAC9D,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;IAC/D,YAAY,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,GAAG,GAAG,KAAK,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAC1H,mEAAmE,CAAC,CAAC;IACvE,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,IAAI,GAAG,OAAO,CAAC,CAAC,MAAM,CAAC,GAAG,MAAM,CAAC,CAAC;IAC9E,YAAY,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,6BAA6B,CAAC,CAAC;IACnE,OAAO,EAAE,KAAK,EAAE,GAAG,CAAC,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,SAAS,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC;AAC3F,CAAC;AAED,KAAK,UAAU,KAAK,CAAC,MAAsB,EAAE,GAAW,EAAE,IAAc,EAAE,IAAY;IACpF,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,CAAC,KAAK,CAAC;IAC9B,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,WAAW,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,KAAK,MAAM,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO;QAC9G,8GAA8G,CAAC,CAAC,CAAC;IACnH,MAAM,MAAM,GAAG,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,GAAG,MAAM,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACnJ,MAAM,KAAK,GAAG,MAAM,CAAC,cAAc,CAAC,EAAE,IAAI,GAAG,MAAM,CAAC,cAAc,CAAC,CAAC;IACpE,YAAY,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,IAAI,IAAI,MAAM,CAAC,SAAS,CAAC,KAAK,MAAM,CAAC,GAAG,CAAC,IAAI,MAAM,CAAC,WAAW,CAAC,KAAK,QAAQ;QACzG,MAAM,CAAC,aAAa,CAAC,KAAK,QAAQ,IAAI,MAAM,CAAC,kBAAkB,CAAC,KAAK,IAAI,IAAI,MAAM,CAAC,aAAa,CAAC,KAAK,EAAE,IAAI,KAAK;QAClH,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,IAAI,IAAI,IAAI,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,yBAAyB,CAAC,CAAC;IAC7H,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC,IAAI,CAAC,CAAC;IACrC,YAAY,CAAC,IAAI,CAAC,IAAI,IAAI,GAAG,GAAG,IAAI,IAAI,MAAM,CAAC,WAAW,CAAC,EAAE,QAAQ,CAAC,OAAO,GAAG,IAAI,CAAC,CAAC,CAAC,GAAG,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,EAAE,+BAA+B,CAAC,CAAC;IAClK,MAAM,IAAI,GAAG,QAAQ,GAAG,GAAG,CAAC;IAC5B,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QACxF,EAAE,CAAC,QAAQ,CAAC,IAAI,GAAG,MAAM,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,GAAG,MAAM,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC;QACxH,EAAE,CAAC,QAAQ,CAAC,IAAI,GAAG,UAAU,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,GAAG,SAAS,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,GAAG,OAAO,EAAE,MAAM,CAAC;QAClH,MAAM,CAAC,SAAS,EAAE,CAAC,SAAS,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;KAClE,CAAC,CAAC;IACH,YAAY,CAAC,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC,GAAG,KAAK,KAAK,CAAC,GAAG,IAAI,MAAM,CAAC,GAAG,KAAK,KAAK,CAAC,GAAG,IAAI,KAAK,CAAC,GAAG,KAAK,OAAO,CAAC,MAAO,EAAE;QACxH,GAAG,KAAK,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,KAAK,CAAC,EAAE,8BAA8B,CAAC,CAAC;IACzK,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC;IACvE,MAAM,WAAW,GAAG,KAAK,CAAC,KAAK,CAAC,gBAAgB,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IACvD,YAAY,CAAC,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,WAAW,EAAE,6BAA6B,CAAC,CAAC;IACjI,OAAO,EAAE,KAAK,EAAE,IAAI,GAAG,GAAG,GAAG,KAAK,EAAE,IAAI,EAAE,MAAM,CAAC,WAAW,CAAC,GAAG,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC;QACvG,IAAI,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,SAAS,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC;AACzD,CAAC;AAED,6FAA6F;AAC7F,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAAC,YAAoB,EAAE,QAAyD;IAC7H,YAAY,CAAC,QAAQ,CAAC,EAAE,IAAI,MAAM,CAAC,aAAa,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,QAAQ,CAAC,GAAG,GAAG,CAAC,EAAE,wBAAwB,CAAC,CAAC;IAC9G,MAAM,OAAO,GAAG,KAAK,IAAI,EAAE;QACzB,MAAM,MAAM,GAAG,MAAM,kBAAkB,CAAC,YAAY,CAAC,CAAC;QACtD,YAAY,CAAC,MAAM,IAAI,MAAM,EAAE,CAAC,QAAQ,CAAC,YAAY,CAAC,KAAK,YAAY,EAAE,+BAA+B,CAAC,CAAC;QAC1G,MAAM,MAAM,GAAG,MAAM,IAAI,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,iBAAiB,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QACjG,YAAY,CAAC,MAAM,EAAE,KAAK,CAAC,EAAE,KAAK,QAAQ,CAAC,EAAE,IAAI,MAAM,CAAC,KAAK,CAAC,GAAG,KAAK,QAAQ,CAAC,GAAG;YAChF,CAAC,CAAC,QAAQ,CAAC,SAAS,IAAI,MAAM,CAAC,KAAK,CAAC,SAAS,KAAK,QAAQ,CAAC,SAAS,CAAC,EAAE,mCAAmC,CAAC,CAAC;QAC/G,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,kBAAkB,EAAE,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QAChF,MAAM,IAAI,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,yCAAyC,CAAC,EAAE,OAAO,CAAC,CAAC;QAC5G,YAAY,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,IAAI,IAAI,MAAM,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAE,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,4BAA4B,CAAC,CAAC;QACxH,MAAM,IAAI,GAAG,oBAAoB,EAAE,CAAC;QACpC,YAAY,CAAC,OAAO,CAAC,QAAQ,KAAK,QAAQ,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,oCAAoC,CAAC,CAAC;QAClH,MAAM,eAAe,GAAG,MAAM,CAAC,OAAO,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,MAAM,EAAE,QAAQ,CAAC,GAAG,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;QACjH,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,QAAQ,EAAE,SAAS,EAAE,MAAM,CAAC,KAAK,CAAC,SAAS,EAAE,GAAG,eAAe,EAAE,CAAC;IACxG,CAAC,CAAC;IACF,MAAM,MAAM,GAAG,MAAM,OAAO,EAAE,CAAC;IAC/B,MAAM,qBAAqB,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;IACrE,MAAM,KAAK,GAAG,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,iBAAiB,CAAC,CAAC,CAAC;IACxE,YAAY,CAAC,KAAK,IAAI,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,KAAK,KAAK,KAAK,EAAE,iCAAiC,CAAC,CAAC;IACvH,YAAY,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,OAAO,EAAE,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,sDAAsD,CAAC,CAAC;IACjI,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,WAAW,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,YAAY,CAAC,EAAE,CAAC;AAC7E,CAAC;AAED,wEAAwE;AACxE,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAAC,YAAoB,EAAE,QAAyD;IAC3H,OAAO,CAAC,MAAM,yBAAyB,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC;AACzE,CAAC"}

package/dist/daemon/managed-owner-entry.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=managed-owner-entry.d.ts.map

package/dist/daemon/managed-owner-entry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"managed-owner-entry.d.ts","sourceRoot":"","sources":["../../src/daemon/managed-owner-entry.ts"],"names":[],"mappings":""}

package/dist/daemon/managed-owner-entry.js

@@ -0,0 +1,3 @@
+import { guardEntry } from './entry-guard.js';
+await guardEntry('execution-owner', () => import('./managed-owner-main.js'));
+//# sourceMappingURL=managed-owner-entry.js.map

package/dist/daemon/managed-owner-entry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"managed-owner-entry.js","sourceRoot":"","sources":["../../src/daemon/managed-owner-entry.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAE9C,MAAM,UAAU,CAAC,iBAAiB,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,yBAAyB,CAAC,CAAC,CAAC"}

package/dist/daemon/managed-owner-main.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=managed-owner-main.d.ts.map

package/dist/daemon/managed-owner-main.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"managed-owner-main.d.ts","sourceRoot":"","sources":["../../src/daemon/managed-owner-main.ts"],"names":[],"mappings":""}

package/dist/daemon/managed-owner-main.js

@@ -0,0 +1,53 @@
+import path from 'node:path';
+import { LoggerService } from '@omnitron-dev/titan/module/logger';
+import { readManagedRuntime, managedJobPid, hostBootIdentity, assertCleanOwnerBoot, OwnerReconciliationRequiredError } from './managed-runtime.js';
+import { readPrivateRecord, writePrivateRecord } from './execution-journal.js';
+import { loadStartupConfig } from './startup-config.js';
+import { startExecutionOwner } from './execution-owner.js';
+import { withOwnerBootFence, consumeOwnerReconciliation } from './owner-reconciliation.js';
+const config = await readManagedRuntime();
+if (!config || await managedJobPid(config, 'owner') !== process.pid)
+    throw new Error('The resident owner must be launched by its configured OS service');
+Object.assign(process.env, config.environment);
+process.chdir(config.cwd);
+const bootId = await hostBootIdentity();
+const receipt = path.join(config.directory, 'managed-owner.json');
+let startup;
+await withOwnerBootFence(config, async () => {
+    const previous = await readPrivateRecord(receipt);
+    try {
+        assertCleanOwnerBoot(previous, bootId);
+    }
+    catch (error) {
+        if (!(error instanceof OwnerReconciliationRequiredError))
+            throw error;
+        await consumeOwnerReconciliation(config, previous, bootId);
+    }
+    startup = await loadStartupConfig(config.cwd);
+    if (!startup.daemonConfig.executionHost?.enabled)
+        throw new Error('Independent supervision requires executionHost.enabled');
+    await writePrivateRecord(receipt, { bootId, clean: false, pid: process.pid });
+});
+const logging = new LoggerService({ level: 'info' });
+const logger = logging.child({ component: 'execution-owner' });
+let stopping = false;
+const owner = await startExecutionOwner({ directory: config.directory, ...startup, logger, loggerHealth: () => logging.getSinkHealth(),
+    onShutdownRequested: () => { setTimeout(() => { void stop(); }, 100); },
+});
+async function stop() {
+    if (stopping)
+        return;
+    stopping = true;
+    try {
+        await owner.stop();
+        await writePrivateRecord(receipt, { bootId, clean: true, pid: process.pid });
+        process.exit(0);
+    }
+    catch (error) {
+        logger.error({ error }, 'Owner shutdown is incomplete; automatic cold restart is refused');
+        process.exit(1);
+    }
+}
+process.on('SIGTERM', () => { void stop(); });
+process.on('SIGINT', () => { void stop(); });
+//# sourceMappingURL=managed-owner-main.js.map

package/dist/daemon/managed-owner-main.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"managed-owner-main.js","sourceRoot":"","sources":["../../src/daemon/managed-owner-main.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,aAAa,EAAE,MAAM,mCAAmC,CAAC;AAClE,OAAO,EAAE,kBAAkB,EAAE,aAAa,EAAE,gBAAgB,EAAE,oBAAoB,EAAE,gCAAgC,EAAE,MAAM,sBAAsB,CAAC;AACnJ,OAAO,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,MAAM,wBAAwB,CAAC;AAC/E,OAAO,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AACxD,OAAO,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAC3D,OAAO,EAAE,kBAAkB,EAAE,0BAA0B,EAAE,MAAM,2BAA2B,CAAC;AAE3F,MAAM,MAAM,GAAG,MAAM,kBAAkB,EAAE,CAAC;AAC1C,IAAI,CAAC,MAAM,IAAI,MAAM,aAAa,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,OAAO,CAAC,GAAG;IAAE,MAAM,IAAI,KAAK,CAAC,kEAAkE,CAAC,CAAC;AACzJ,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE,MAAM,CAAC,WAAW,CAAC,CAAC;AAC/C,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;AAC1B,MAAM,MAAM,GAAG,MAAM,gBAAgB,EAAE,CAAC;AACxC,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,oBAAoB,CAAC,CAAC;AAClE,IAAI,OAAuD,CAAC;AAC5D,MAAM,kBAAkB,CAAC,MAAM,EAAE,KAAK,IAAI,EAAE;IAC1C,MAAM,QAAQ,GAAG,MAAM,iBAAiB,CAAkD,OAAO,CAAC,CAAC;IACnG,IAAI,CAAC;QAAC,oBAAoB,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAAC,CAAC;IAC/C,OAAO,KAAK,EAAE,CAAC;QACb,IAAI,CAAC,CAAC,KAAK,YAAY,gCAAgC,CAAC;YAAE,MAAM,KAAK,CAAC;QACtE,MAAM,0BAA0B,CAAC,MAAM,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;IAC7D,CAAC;IACD,OAAO,GAAG,MAAM,iBAAiB,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IAC9C,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,aAAa,EAAE,OAAO;QAAE,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAC;IAC5H,MAAM,kBAAkB,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;AAChF,CAAC,CAAC,CAAC;AACH,MAAM,OAAO,GAAG,IAAI,aAAa,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;AACrD,MAAM,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC,EAAE,SAAS,EAAE,iBAAiB,EAAE,CAAC,CAAC;AAC/D,IAAI,QAAQ,GAAG,KAAK,CAAC;AACrB,MAAM,KAAK,GAAG,MAAM,mBAAmB,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,GAAG,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,aAAa,EAAE;IACpI,mBAAmB,EAAE,GAAG,EAAE,GAAG,UAAU,CAAC,GAAG,EAAE,GAAG,KAAK,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC;CACxE,CAAC,CAAC;AACH,KAAK,UAAU,IAAI;IACjB,IAAI,QAAQ;QAAE,OAAO;IACrB,QAAQ,GAAG,IAAI,CAAC;IAChB,IAAI,CAAC;QACH,MAAM,KAAK,CAAC,IAAI,EAAE,CAAC;QACnB,MAAM,kBAAkB,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;QAC7E,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAAC,MAAM,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,EAAE,iEAAiE,CAAC,CAAC;QAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAAC,CAAC;AAClI,CAAC;AACD,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE,GAAG,KAAK,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;AAC9C,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,GAAG,EAAE,GAAG,KAAK,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC"}

package/dist/daemon/managed-runtime.d.ts

@@ -0,0 +1,39 @@
+import type { ServiceScope } from '../commands/service-units.js';
+import { type GuardianStopFence } from './system-guardian-cgroup.js';
+export interface ManagedRuntime {
+    protocol: 1;
+    instanceHome: string;
+    directory: string;
+    scope: ServiceScope;
+    cwd: string;
+    environment: Record<string, string>;
+    owner: {
+        label: string;
+        unit: string;
+        artifact: string;
+    };
+    backend: {
+        label: string;
+        unit: string;
+        artifact: string;
+    };
+}
+export declare const managedRuntimeFile: (instanceHome?: string) => string;
+export declare const managedSupervisorSocket: (config: ManagedRuntime) => string;
+/** The same record schema is used by inactive service plans and active supervision. */
+export declare function assertManagedRuntime(value: unknown, instanceHome?: string): asserts value is ManagedRuntime;
+/** Only a missing file denotes absence; a malformed existing record never does. */
+export declare function readManagedRuntimeRecord(file: string, instanceHome?: string): Promise<ManagedRuntime | null>;
+export declare function readManagedRuntime(instanceHome?: string): Promise<ManagedRuntime | null>;
+export declare function managedJobPid(config: ManagedRuntime, job: 'owner' | 'backend'): Promise<number>;
+/** Native supervisor evidence, not a trusted environment flag. */
+export declare function verifyManagedIsolation(config: ManagedRuntime, ownerPid: number, guardianPid: number, backendPid?: number): Promise<void>;
+export declare function managedSystemdProperties(config: ManagedRuntime, unit: string, properties: readonly string[]): Promise<Record<string, string>>;
+/** Inspect the OS kill scope only for an operation that will stop the Linux guardian. */
+export declare function managedGuardianStopFence(config: ManagedRuntime, guardianPid: number, backendPid: number, expected?: GuardianStopFence, retired?: boolean): Promise<GuardianStopFence>;
+export declare function assertGuardianStopped(config: ManagedRuntime, fence?: GuardianStopFence): Promise<void>;
+export declare function hostBootIdentity(): Promise<string>;
+export declare class OwnerReconciliationRequiredError extends Error {
+}
+export declare function assertCleanOwnerBoot(previous: unknown, bootId: string): void;
+//# sourceMappingURL=managed-runtime.d.ts.map

package/dist/daemon/managed-runtime.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"managed-runtime.d.ts","sourceRoot":"","sources":["../../src/daemon/managed-runtime.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,8BAA8B,CAAC;AAEjE,OAAO,EAA6F,KAAK,iBAAiB,EAAE,MAAM,6BAA6B,CAAC;AAGhK,MAAM,WAAW,cAAc;IAC7B,QAAQ,EAAE,CAAC,CAAC;IACZ,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,YAAY,CAAC;IACpB,GAAG,EAAE,MAAM,CAAC;IACZ,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACpC,KAAK,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,CAAC;IACzD,OAAO,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,CAAC;CAC5D;AAED,eAAO,MAAM,kBAAkB,mCAA2F,CAAC;AAC3H,eAAO,MAAM,uBAAuB,WAAY,cAAc,WAAmD,CAAC;AAElH,uFAAuF;AACvF,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,OAAO,EAAE,YAAY,SAAgB,GAAG,OAAO,CAAC,KAAK,IAAI,cAAc,CAkBlH;AAED,mFAAmF;AACnF,wBAAsB,wBAAwB,CAAC,IAAI,EAAE,MAAM,EAAE,YAAY,SAAgB,GAAG,OAAO,CAAC,cAAc,GAAG,IAAI,CAAC,CAUzH;AAED,wBAAsB,kBAAkB,CAAC,YAAY,SAAgB,GAAG,OAAO,CAAC,cAAc,GAAG,IAAI,CAAC,CAOrG;AAMD,wBAAsB,aAAa,CAAC,MAAM,EAAE,cAAc,EAAE,GAAG,EAAE,OAAO,GAAG,SAAS,GAAG,OAAO,CAAC,MAAM,CAAC,CAYrG;AAED,kEAAkE;AAClE,wBAAsB,sBAAsB,CAAC,MAAM,EAAE,cAAc,EAAE,QAAQ,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAU9I;AAED,wBAAsB,wBAAwB,CAAC,MAAM,EAAE,cAAc,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,SAAS,MAAM,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAQnJ;AAED,yFAAyF;AACzF,wBAAsB,wBAAwB,CAC5C,MAAM,EAAE,cAAc,EAAE,WAAW,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,iBAAiB,EAAE,OAAO,UAAQ,GAC7G,OAAO,CAAC,iBAAiB,CAAC,CAS5B;AAED,wBAAsB,qBAAqB,CAAC,MAAM,EAAE,cAAc,EAAE,KAAK,CAAC,EAAE,iBAAiB,GAAG,OAAO,CAAC,IAAI,CAAC,CAG5G;AAED,wBAAsB,gBAAgB,IAAI,OAAO,CAAC,MAAM,CAAC,CAExD;AAED,qBAAa,gCAAiC,SAAQ,KAAK;CAAG;AAE9D,wBAAgB,oBAAoB,CAAC,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,GAAG,IAAI,CAW5E"}

package/dist/daemon/managed-runtime.js

@@ -0,0 +1,137 @@
+import path from 'node:path';
+import fs from 'node:fs/promises';
+import { execFile } from 'node:child_process';
+import { promisify } from 'node:util';
+import { OMNITRON_HOME } from '../config/defaults.js';
+import { readPrivateRecord } from './execution-journal.js';
+import { checkGuardianStopEffects, guardianStopProperties } from './system-guardian-unit.js';
+import { checkGuardianStopFence, guardianControlGroup, prepareGuardianFence, verifyStoppedGuardian } from './system-guardian-cgroup.js';
+import { readHostBootIdentity, isStableHostBootIdentity, provesDifferentHostBoot } from '../shared/host-boot-identity.js';
+export const managedRuntimeFile = (instanceHome = OMNITRON_HOME) => path.join(instanceHome, 'runtime', 'supervision.json');
+export const managedSupervisorSocket = (config) => path.join(config.directory, 'supervisor.sock');
+/** The same record schema is used by inactive service plans and active supervision. */
+export function assertManagedRuntime(value, instanceHome = OMNITRON_HOME) {
+    if (typeof instanceHome !== 'string' || !path.isAbsolute(instanceHome))
+        throw new Error('An absolute instance home is required');
+    const config = value;
+    if (!config || typeof config !== 'object' || Array.isArray(config) ||
+        config.protocol !== 1 || typeof config.instanceHome !== 'string' || config.instanceHome.includes('\0') || path.resolve(config.instanceHome) !== path.resolve(instanceHome) ||
+        typeof config.directory !== 'string' || config.directory.includes('\0') || !path.isAbsolute(config.directory) ||
+        typeof config.cwd !== 'string' || config.cwd.includes('\0') || !path.isAbsolute(config.cwd) ||
+        !['user', 'system'].includes(config.scope) || !config.environment || typeof config.environment !== 'object' || Array.isArray(config.environment) ||
+        config.environment['OMNITRON_HOME'] !== config.instanceHome ||
+        Object.entries(config.environment).some(([key, entry]) => !key || key.includes('\0') || key.includes('=') || typeof entry !== 'string' || entry.includes('\0')) ||
+        [config.owner, config.backend].some(job => !job || typeof job !== 'object' || Array.isArray(job) ||
+            typeof job.artifact !== 'string' || !/^[a-f0-9]{64}$/.test(job.artifact) ||
+            typeof job.label !== 'string' || !/^dev\.omnitron\.[a-z0-9.-]+$/.test(job.label) ||
+            typeof job.unit !== 'string' || !/^omnitron-[a-z0-9-]+\.service$/.test(job.unit)) ||
+        config.owner.label === config.backend.label || config.owner.unit === config.backend.unit ||
+        Buffer.byteLength(managedSupervisorSocket(config)) > 100) {
+        throw new Error('Invalid independent supervision configuration');
+    }
+}
+/** Only a missing file denotes absence; a malformed existing record never does. */
+export async function readManagedRuntimeRecord(file, instanceHome = OMNITRON_HOME) {
+    if (typeof instanceHome !== 'string' || !path.isAbsolute(instanceHome))
+        throw new Error('An absolute instance home is required');
+    const saved = await fs.lstat(file).catch(error => {
+        if (error.code === 'ENOENT')
+            return null;
+        throw error;
+    });
+    if (!saved)
+        return null;
+    const config = await readPrivateRecord(file);
+    assertManagedRuntime(config, instanceHome);
+    return config;
+}
+export async function readManagedRuntime(instanceHome = OMNITRON_HOME) {
+    const config = await readManagedRuntimeRecord(managedRuntimeFile(instanceHome), instanceHome);
+    if (!config)
+        return null;
+    const directory = await fs.lstat(config.directory);
+    if (!directory.isDirectory() || directory.isSymbolicLink() || (directory.mode & 0o077) !== 0 ||
+        (process.getuid && directory.uid !== process.getuid()))
+        throw new Error('Supervision sockets require a private directory owned by the instance user');
+    return config;
+}
+async function native(command, args) {
+    return (await promisify(execFile)(command, args, { encoding: 'utf8', timeout: 5000, maxBuffer: 1024 * 1024 })).stdout;
+}
+export async function managedJobPid(config, job) {
+    const target = config[job];
+    let value;
+    if (process.platform === 'darwin') {
+        const domain = config.scope === 'system' ? 'system' : `gui/${process.getuid()}`;
+        value = (await native('/bin/launchctl', ['print', `${domain}/${target.label}`])).match(/^\s*pid = (\d+)\s*$/m)?.[1];
+    }
+    else if (process.platform === 'linux') {
+        value = (await native('systemctl', [...(config.scope === 'user' ? ['--user'] : []), 'show', target.unit, '--property=MainPID', '--value'])).trim();
+    }
+    else
+        throw new Error('Independent supervision requires launchd or systemd');
+    const pid = Number(value);
+    if (!Number.isSafeInteger(pid) || pid < 1)
+        throw new Error(`The ${job} OS service has no live main process`);
+    return pid;
+}
+/** Native supervisor evidence, not a trusted environment flag. */
+export async function verifyManagedIsolation(config, ownerPid, guardianPid, backendPid) {
+    const [owner, backend] = await Promise.all([managedJobPid(config, 'owner'), managedJobPid(config, 'backend')]);
+    if (owner !== ownerPid || backend !== guardianPid || owner === backend)
+        throw new Error('OS service ownership disagrees with the resident process identities');
+    if (process.platform === 'linux') {
+        const group = (pid) => fs.readFile(`/proc/${pid}/cgroup`, 'utf8');
+        const [ownerGroup, guardianGroup, childGroup] = await Promise.all([group(owner), group(backend), backendPid ? group(backendPid) : Promise.resolve(null)]);
+        if (ownerGroup === guardianGroup || !ownerGroup.includes(`/${config.owner.unit}`) || !guardianGroup.includes(`/${config.backend.unit}`) ||
+            (childGroup !== null && childGroup !== guardianGroup))
+            throw new Error('Owner and backend must occupy their separate configured systemd cgroups');
+    }
+    if (backendPid === process.pid && process.ppid !== guardianPid)
+        throw new Error('The backend was not launched by its OS-supervised guardian');
+}
+export async function managedSystemdProperties(config, unit, properties) {
+    const output = await native('systemctl', [...(config.scope === 'user' ? ['--user'] : []), 'show', '--all', unit,
+        '--property=' + properties.join(',')]);
+    return Object.fromEntries(output.trim().split('\n').map(line => {
+        const delimiter = line.indexOf('=');
+        if (delimiter < 1)
+            throw Error('Systemd returned a malformed unit property');
+        return [line.slice(0, delimiter), line.slice(delimiter + 1)];
+    }));
+}
+/** Inspect the OS kill scope only for an operation that will stop the Linux guardian. */
+export async function managedGuardianStopFence(config, guardianPid, backendPid, expected, retired = false) {
+    const properties = [...guardianStopProperties, 'Id', 'MainPID', 'ControlGroup', 'Delegate', 'ActiveState'];
+    const inspect = async () => {
+        const facts = await managedSystemdProperties(config, config.backend.unit, properties);
+        checkGuardianStopEffects(facts, true);
+        return checkGuardianStopFence(guardianControlGroup(config.backend.unit, guardianPid, facts), guardianPid, backendPid, expected, retired);
+    };
+    // A saved plan (including --check), drain, retirement and stop must use the current scope immediately.
+    return expected || retired ? inspect() : prepareGuardianFence(guardianPid, backendPid, inspect);
+}
+export async function assertGuardianStopped(config, fence) {
+    const facts = await managedSystemdProperties(config, config.backend.unit, ['Id', 'LoadState', 'ActiveState', 'MainPID', 'ControlGroup']);
+    verifyStoppedGuardian(config.backend.unit, fence, facts);
+}
+export async function hostBootIdentity() {
+    return readHostBootIdentity();
+}
+export class OwnerReconciliationRequiredError extends Error {
+}
+export function assertCleanOwnerBoot(previous, bootId) {
+    if (!isStableHostBootIdentity(bootId))
+        throw new Error('Cannot verify the current host boot identity');
+    if (previous === null)
+        return;
+    const receipt = previous;
+    if (typeof receipt !== 'object' || !receipt || typeof receipt.bootId !== 'string' || !receipt.bootId ||
+        typeof receipt.clean !== 'boolean' || !Number.isSafeInteger(receipt.pid) || Number(receipt.pid) < 1) {
+        throw new Error('Invalid owner shutdown receipt; reconcile ownership before starting another owner');
+    }
+    if (!receipt.clean && !provesDifferentHostBoot(receipt.bootId, bootId)) {
+        throw new OwnerReconciliationRequiredError('The previous owner did not shut down cleanly and a different host boot is not proven. Reconcile its application processes before starting another owner; no processes were adopted or killed.');
+    }
+}
+//# sourceMappingURL=managed-runtime.js.map

package/dist/daemon/managed-runtime.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"managed-runtime.js","sourceRoot":"","sources":["../../src/daemon/managed-runtime.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAClC,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AACtC,OAAO,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AACtD,OAAO,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAE3D,OAAO,EAAE,wBAAwB,EAAE,sBAAsB,EAAE,MAAM,2BAA2B,CAAC;AAC7F,OAAO,EAAE,sBAAsB,EAAE,oBAAoB,EAAE,oBAAoB,EAAE,qBAAqB,EAA0B,MAAM,6BAA6B,CAAC;AAChK,OAAO,EAAE,oBAAoB,EAAE,wBAAwB,EAAE,uBAAuB,EAAE,MAAM,iCAAiC,CAAC;AAa1H,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,YAAY,GAAG,aAAa,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,SAAS,EAAE,kBAAkB,CAAC,CAAC;AAC3H,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,MAAsB,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,iBAAiB,CAAC,CAAC;AAElH,uFAAuF;AACvF,MAAM,UAAU,oBAAoB,CAAC,KAAc,EAAE,YAAY,GAAG,aAAa;IAC/E,IAAI,OAAO,YAAY,KAAK,QAAQ,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;IACjI,MAAM,MAAM,GAAG,KAAuB,CAAC;IACvC,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;QAC9D,MAAM,CAAC,QAAQ,KAAK,CAAC,IAAI,OAAO,MAAM,CAAC,YAAY,KAAK,QAAQ,IAAI,MAAM,CAAC,YAAY,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,YAAY,CAAC,KAAK,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC;QAC1K,OAAO,MAAM,CAAC,SAAS,KAAK,QAAQ,IAAI,MAAM,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,SAAS,CAAC;QAC7G,OAAO,MAAM,CAAC,GAAG,KAAK,QAAQ,IAAI,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,GAAG,CAAC;QAC3F,CAAC,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,IAAI,OAAO,MAAM,CAAC,WAAW,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,WAAW,CAAC;QAChJ,MAAM,CAAC,WAAW,CAAC,eAAe,CAAC,KAAK,MAAM,CAAC,YAAY;QAC3D,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QAC/J,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC;YAC9F,OAAO,GAAG,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC;YACxE,OAAO,GAAG,CAAC,KAAK,KAAK,QAAQ,IAAI,CAAC,8BAA8B,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC;YAChF,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,gCAAgC,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACnF,MAAM,CAAC,KAAK,CAAC,KAAK,KAAK,MAAM,CAAC,OAAO,CAAC,KAAK,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,KAAK,MAAM,CAAC,OAAO,CAAC,IAAI;QACxF,MAAM,CAAC,UAAU,CAAC,uBAAuB,CAAC,MAAM,CAAC,CAAC,GAAG,GAAG,EAAE,CAAC;QAC7D,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;IACnE,CAAC;AACH,CAAC;AAED,mFAAmF;AACnF,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAAC,IAAY,EAAE,YAAY,GAAG,aAAa;IACvF,IAAI,OAAO,YAAY,KAAK,QAAQ,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;IACjI,MAAM,KAAK,GAAG,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE;QAC/C,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC;QACpE,MAAM,KAAK,CAAC;IACd,CAAC,CAAC,CAAC;IACH,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC;IACxB,MAAM,MAAM,GAAG,MAAM,iBAAiB,CAAU,IAAI,CAAC,CAAC;IACtD,oBAAoB,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;IAC3C,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,YAAY,GAAG,aAAa;IACnE,MAAM,MAAM,GAAG,MAAM,wBAAwB,CAAC,kBAAkB,CAAC,YAAY,CAAC,EAAE,YAAY,CAAC,CAAC;IAC9F,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IACzB,MAAM,SAAS,GAAG,MAAM,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IACnD,IAAI,CAAC,SAAS,CAAC,WAAW,EAAE,IAAI,SAAS,CAAC,cAAc,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC;QACxF,CAAC,OAAO,CAAC,MAAM,IAAI,SAAS,CAAC,GAAG,KAAK,OAAO,CAAC,MAAM,EAAE,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,4EAA4E,CAAC,CAAC;IAC1J,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,KAAK,UAAU,MAAM,CAAC,OAAe,EAAE,IAAc;IACnD,OAAO,CAAC,MAAM,SAAS,CAAC,QAAQ,CAAC,CAAC,OAAO,EAAE,IAAI,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,GAAG,IAAI,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC;AACxH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,MAAsB,EAAE,GAAwB;IAClF,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;IAC3B,IAAI,KAAyB,CAAC;IAC9B,IAAI,OAAO,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAClC,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,OAAO,CAAC,MAAO,EAAE,EAAE,CAAC;QACjF,KAAK,GAAG,CAAC,MAAM,MAAM,CAAC,gBAAgB,EAAE,CAAC,OAAO,EAAE,GAAG,MAAM,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,sBAAsB,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IACtH,CAAC;SAAM,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;QACxC,KAAK,GAAG,CAAC,MAAM,MAAM,CAAC,WAAW,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,KAAK,MAAM,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,IAAI,EAAE,oBAAoB,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IACrJ,CAAC;;QAAM,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;IAC9E,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IAC1B,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI,GAAG,GAAG,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,OAAO,GAAG,sCAAsC,CAAC,CAAC;IAC7G,OAAO,GAAG,CAAC;AACb,CAAC;AAED,kEAAkE;AAClE,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAAC,MAAsB,EAAE,QAAgB,EAAE,WAAmB,EAAE,UAAmB;IAC7H,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,aAAa,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,aAAa,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC;IAC/G,IAAI,KAAK,KAAK,QAAQ,IAAI,OAAO,KAAK,WAAW,IAAI,KAAK,KAAK,OAAO;QAAE,MAAM,IAAI,KAAK,CAAC,qEAAqE,CAAC,CAAC;IAC/J,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;QACjC,MAAM,KAAK,GAAG,CAAC,GAAW,EAAE,EAAE,CAAC,EAAE,CAAC,QAAQ,CAAC,SAAS,GAAG,SAAS,EAAE,MAAM,CAAC,CAAC;QAC1E,MAAM,CAAC,UAAU,EAAE,aAAa,EAAE,UAAU,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,KAAK,CAAC,OAAO,CAAC,EAAE,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC1J,IAAI,UAAU,KAAK,aAAa,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;YACnI,CAAC,UAAU,KAAK,IAAI,IAAI,UAAU,KAAK,aAAa,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,yEAAyE,CAAC,CAAC;IACxJ,CAAC;IACD,IAAI,UAAU,KAAK,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,IAAI,KAAK,WAAW;QAAE,MAAM,IAAI,KAAK,CAAC,4DAA4D,CAAC,CAAC;AAChJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAAC,MAAsB,EAAE,IAAY,EAAE,UAA6B;IAChH,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,WAAW,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,KAAK,MAAM,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI;QAC7G,aAAa,GAAG,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IACzC,OAAO,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE;QAC7D,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACpC,IAAI,SAAS,GAAG,CAAC;YAAE,MAAM,KAAK,CAAC,4CAA4C,CAAC,CAAC;QAC7E,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC;IAC/D,CAAC,CAAC,CAAC,CAAC;AACN,CAAC;AAED,yFAAyF;AACzF,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAC5C,MAAsB,EAAE,WAAmB,EAAE,UAAkB,EAAE,QAA4B,EAAE,OAAO,GAAG,KAAK;IAE9G,MAAM,UAAU,GAAG,CAAC,GAAG,sBAAsB,EAAE,IAAI,EAAE,SAAS,EAAE,cAAc,EAAE,UAAU,EAAE,aAAa,CAAC,CAAC;IAC3G,MAAM,OAAO,GAAG,KAAK,IAAI,EAAE;QACzB,MAAM,KAAK,GAAG,MAAM,wBAAwB,CAAC,MAAM,EAAE,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;QACtF,wBAAwB,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QACtC,OAAO,sBAAsB,CAAC,oBAAoB,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,WAAW,EAAE,KAAK,CAAC,EAAE,WAAW,EAAE,UAAU,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;IAC3I,CAAC,CAAC;IACF,uGAAuG;IACvG,OAAO,QAAQ,IAAI,OAAO,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,oBAAoB,CAAC,WAAW,EAAE,UAAU,EAAE,OAAO,CAAC,CAAC;AAClG,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,MAAsB,EAAE,KAAyB;IAC3F,MAAM,KAAK,GAAG,MAAM,wBAAwB,CAAC,MAAM,EAAE,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,WAAW,EAAE,aAAa,EAAE,SAAS,EAAE,cAAc,CAAC,CAAC,CAAC;IACzI,qBAAqB,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;AAC3D,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB;IACpC,OAAO,oBAAoB,EAAE,CAAC;AAChC,CAAC;AAED,MAAM,OAAO,gCAAiC,SAAQ,KAAK;CAAG;AAE9D,MAAM,UAAU,oBAAoB,CAAC,QAAiB,EAAE,MAAc;IACpE,IAAI,CAAC,wBAAwB,CAAC,MAAM,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;IACvG,IAAI,QAAQ,KAAK,IAAI;QAAE,OAAO;IAC9B,MAAM,OAAO,GAAG,QAAgE,CAAC;IACjF,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,CAAC,MAAM,KAAK,QAAQ,IAAI,CAAC,OAAO,CAAC,MAAM;QAChG,OAAO,OAAO,CAAC,KAAK,KAAK,SAAS,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;QACxG,MAAM,IAAI,KAAK,CAAC,mFAAmF,CAAC,CAAC;IACvG,CAAC;IACD,IAAI,CAAC,OAAO,CAAC,KAAK,IAAI,CAAC,uBAAuB,CAAC,OAAO,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC;QACvE,MAAM,IAAI,gCAAgC,CAAC,+LAA+L,CAAC,CAAC;IAC9O,CAAC;AACH,CAAC"}

package/dist/daemon/network-publication.d.ts

@@ -0,0 +1,5 @@
+/** Hostnames beginning with 127. are not proof of a loopback address. */
+export declare function isLoopbackHost(host: string | undefined): boolean;
+/** Await this before registering public ingress; uncertainty refuses publication. */
+export declare function assertSafeNetworkPublication(hosts: readonly (string | undefined)[], hasSeededCredential: () => Promise<boolean>): Promise<void>;
+//# sourceMappingURL=network-publication.d.ts.map

package/dist/daemon/network-publication.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"network-publication.d.ts","sourceRoot":"","sources":["../../src/daemon/network-publication.ts"],"names":[],"mappings":"AAEA,yEAAyE;AACzE,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,SAAS,GAAG,OAAO,CAKhE;AAED,qFAAqF;AACrF,wBAAsB,4BAA4B,CAChD,KAAK,EAAE,SAAS,CAAC,MAAM,GAAG,SAAS,CAAC,EAAE,EACtC,mBAAmB,EAAE,MAAM,OAAO,CAAC,OAAO,CAAC,GAC1C,OAAO,CAAC,IAAI,CAAC,CAUf"}

package/dist/daemon/network-publication.js

@@ -0,0 +1,25 @@
+import { isIP } from 'node:net';
+/** Hostnames beginning with 127. are not proof of a loopback address. */
+export function isLoopbackHost(host) {
+    if (host === undefined)
+        return true;
+    const normalized = host.trim().toLowerCase();
+    return normalized === 'localhost' || normalized === '::1' || normalized === '[::1]' ||
+        (isIP(normalized) === 4 && normalized.split('.')[0] === '127');
+}
+/** Await this before registering public ingress; uncertainty refuses publication. */
+export async function assertSafeNetworkPublication(hosts, hasSeededCredential) {
+    if (hosts.every(isLoopbackHost))
+        return;
+    let seeded;
+    try {
+        seeded = await hasSeededCredential();
+    }
+    catch (cause) {
+        throw new Error('Network publication refused: administrator credential policy could not be verified', { cause });
+    }
+    if (seeded) {
+        throw new Error('Network publication refused: change the seeded administrator password through a loopback Console before publishing this daemon');
+    }
+}
+//# sourceMappingURL=network-publication.js.map

package/dist/daemon/network-publication.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"network-publication.js","sourceRoot":"","sources":["../../src/daemon/network-publication.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,UAAU,CAAC;AAEhC,yEAAyE;AACzE,MAAM,UAAU,cAAc,CAAC,IAAwB;IACrD,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IACpC,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC7C,OAAO,UAAU,KAAK,WAAW,IAAI,UAAU,KAAK,KAAK,IAAI,UAAU,KAAK,OAAO;QACjF,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,KAAK,CAAC,CAAC;AACnE,CAAC;AAED,qFAAqF;AACrF,MAAM,CAAC,KAAK,UAAU,4BAA4B,CAChD,KAAsC,EACtC,mBAA2C;IAE3C,IAAI,KAAK,CAAC,KAAK,CAAC,cAAc,CAAC;QAAE,OAAO;IACxC,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QAAC,MAAM,GAAG,MAAM,mBAAmB,EAAE,CAAC;IAAC,CAAC;IAC7C,OAAO,KAAK,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CAAC,oFAAoF,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;IACnH,CAAC;IACD,IAAI,MAAM,EAAE,CAAC;QACX,MAAM,IAAI,KAAK,CAAC,gIAAgI,CAAC,CAAC;IACpJ,CAAC;AACH,CAAC"}

package/dist/daemon/owner-reconciliation.d.ts

@@ -0,0 +1,58 @@
+import { type ManagedRuntime } from './managed-runtime.js';
+import { type DarwinReconciliationScope } from './darwin-owner-evidence.js';
+interface ProcessIdentity {
+    pid: number;
+    lifetime: string | null;
+}
+interface CrashReceipt {
+    bootId: string;
+    clean: false;
+    pid: number;
+}
+export interface OwnerReconciliationPlan {
+    protocol: 1 | 2;
+    id: string;
+    createdAt: string;
+    bootId: string;
+    instanceHome: string;
+    directory: string;
+    binding: string;
+    ownerId: string;
+    ownerPid: number;
+    journalOwnerPid: number;
+    crashReceipt: CrashReceipt;
+    receiptDigest: string;
+    journalDigest: string;
+    processes: ProcessIdentity[];
+    native?: DarwinReconciliationScope;
+}
+interface NativeEvidence {
+    bootId: string;
+    units: Array<{
+        mainPid: number;
+        state: string;
+    }>;
+    groups: number[][];
+    processes: Array<{
+        pid: number;
+        lifetime: string | null;
+        unknown?: boolean;
+    }>;
+    sockets: string[];
+    native?: DarwinReconciliationScope;
+}
+/** Shared with owner startup: the kernel releases this fence even if the CLI dies. */
+export declare function withOwnerBootFence<T>(config: ManagedRuntime, body: () => Promise<T>): Promise<T>;
+/** Planning may observe a living guardian; only previous owners must already be gone. */
+export declare function assertPreviousOwnersGone(pids: readonly number[], observed: Pick<NativeEvidence, 'processes' | 'sockets'>, ownerSocket: string): void;
+/** Pure safety decision; unknown observations always refuse reconciliation. */
+export declare function assertOwnerReconciliationEvidence(plan: OwnerReconciliationPlan, observed: NativeEvidence, startingOwner?: number): void;
+/** Seal native identities in private records; no SQLite or service/application mutation. */
+export declare function prepareOwnerReconciliation(config: ManagedRuntime, recordedWorkerPids: readonly number[]): Promise<OwnerReconciliationPlan>;
+/** Offline acknowledgment only. It never sends signals or marks the crashed owner clean. */
+export declare function acknowledgeOwnerReconciliation(config: ManagedRuntime, plan: OwnerReconciliationPlan): Promise<string>;
+/** Called under withOwnerBootFence, before the new owner creates a socket or applications. */
+export declare function consumeOwnerReconciliation(config: ManagedRuntime, previous: unknown, bootId: string): Promise<void>;
+export declare function ownerReconciliationCommand(action: 'prepare' | 'acknowledge', input?: string): Promise<void>;
+export {};
+//# sourceMappingURL=owner-reconciliation.d.ts.map

package/dist/daemon/owner-reconciliation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"owner-reconciliation.d.ts","sourceRoot":"","sources":["../../src/daemon/owner-reconciliation.ts"],"names":[],"mappings":"AAKA,OAAO,EAAwC,KAAK,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAIjG,OAAO,EAA2B,KAAK,yBAAyB,EAAE,MAAM,4BAA4B,CAAC;AAGrG,UAAU,eAAe;IAAG,GAAG,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE;AAClE,UAAU,YAAY;IAAG,MAAM,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,KAAK,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE;AACpE,MAAM,WAAW,uBAAuB;IACtC,QAAQ,EAAE,CAAC,GAAG,CAAC,CAAC;IAAC,EAAE,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAC/D,YAAY,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IACzD,OAAO,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,eAAe,EAAE,MAAM,CAAC;IAAC,YAAY,EAAE,YAAY,CAAC;IAAC,aAAa,EAAE,MAAM,CAAC;IAAC,aAAa,EAAE,MAAM,CAAC;IACrI,SAAS,EAAE,eAAe,EAAE,CAAC;IAC7B,MAAM,CAAC,EAAE,yBAAyB,CAAC;CACpC;AAED,UAAU,cAAc;IACtB,MAAM,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,KAAK,CAAC;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACjE,MAAM,EAAE,MAAM,EAAE,EAAE,CAAC;IAAC,SAAS,EAAE,KAAK,CAAC;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,OAAO,CAAC,EAAE,OAAO,CAAA;KAAE,CAAC,CAAC;IAClG,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,MAAM,CAAC,EAAE,yBAAyB,CAAC;CACpC;AAcD,sFAAsF;AACtF,wBAAsB,kBAAkB,CAAC,CAAC,EAAE,MAAM,EAAE,cAAc,EAAE,IAAI,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAEtG;AA2CD,yFAAyF;AACzF,wBAAgB,wBAAwB,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,EAAE,QAAQ,EAAE,IAAI,CAAC,cAAc,EAAE,WAAW,GAAG,SAAS,CAAC,EAAE,WAAW,EAAE,MAAM,GAAG,IAAI,CAMpJ;AAED,+EAA+E;AAC/E,wBAAgB,iCAAiC,CAAC,IAAI,EAAE,uBAAuB,EAAE,QAAQ,EAAE,cAAc,EAAE,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAkBvI;AAWD,4FAA4F;AAC5F,wBAAsB,0BAA0B,CAAC,MAAM,EAAE,cAAc,EAAE,kBAAkB,EAAE,SAAS,MAAM,EAAE,GAAG,OAAO,CAAC,uBAAuB,CAAC,CA0BhJ;AAsCD,4FAA4F;AAC5F,wBAAsB,8BAA8B,CAAC,MAAM,EAAE,cAAc,EAAE,IAAI,EAAE,uBAAuB,GAAG,OAAO,CAAC,MAAM,CAAC,CA0B3H;AAED,8FAA8F;AAC9F,wBAAsB,0BAA0B,CAAC,MAAM,EAAE,cAAc,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAuBzH;AAED,wBAAsB,0BAA0B,CAAC,MAAM,EAAE,SAAS,GAAG,aAAa,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAkBjH"}