@omnitron-dev/omnitron 0.3.1 → 0.3.3

package/dist/project/installed-stack-resume.js

@@ -0,0 +1,261 @@
+import { INSTALLED_RESUME_TTL_MS } from '../cluster/stop-authority.js';
+import { describeFailure } from '../services/audit.service.js';
+import { stackExecutionKey } from '../shared/dto/stack-execution.js';
+import { stackDefinitionFingerprint } from './node-stack-stop.js';
+const operationId = /^[a-f\d]{8}(?:-[a-f\d]{4}){3}-[a-f\d]{12}$/;
+export function sameAppSet(left, right) {
+    const names = new Set(right);
+    return left.length === right.length && names.size === right.length && left.every((app) => names.delete(app));
+}
+/** A signed stop and retained release closures are prerequisites. Preparation only observes the node. */
+export class InstalledStackResume {
+    recipient;
+    stops;
+    store;
+    execution;
+    definition;
+    onObserved;
+    applying = false;
+    get busy() {
+        return this.applying;
+    }
+    constructor(recipient, stops, store, execution, definition, onObserved) {
+        this.recipient = recipient;
+        this.stops = stops;
+        this.store = store;
+        this.execution = execution;
+        this.definition = definition;
+        this.onObserved = onObserved;
+    }
+    checkTarget(request) {
+        stackExecutionKey(request);
+        if (!request.audience ||
+            request.audience.clusterId !== this.recipient.audience.clusterId ||
+            request.audience.nodeId !== this.recipient.audience.nodeId ||
+            !operationId.test(request.operationId) ||
+            !operationId.test(request.stopOperationId) ||
+            !Number.isFinite(Date.parse(request.stopObservedAt)) ||
+            !Array.isArray(request.apps) ||
+            !request.apps.length)
+            throw new Error('Invalid cluster resume target');
+    }
+    async inspect(request) {
+        this.checkTarget(request);
+        const { plan: stop, receipt } = this.stops.completedStop(request);
+        const source = stackExecutionKey(request);
+        if (receipt.removedContainers.length)
+            throw new Error('The confirmed stop removed infrastructure; restore its services before deployment');
+        if (stackExecutionKey(stop) !== source ||
+            stackExecutionKey(receipt) !== source ||
+            !stop.execution ||
+            stop.operationId !== request.stopOperationId ||
+            receipt.operationId !== stop.operationId ||
+            receipt.applications?.operationId !== stop.operationId ||
+            receipt.observedAt !== request.stopObservedAt ||
+            receipt.authority?.clusterId !== request.audience.clusterId ||
+            receipt.authority.nodeId !== request.audience.nodeId ||
+            !receipt.applications) {
+            throw new Error('The recorded stop does not match the signed stop on this node; review a fresh stop');
+        }
+        const binding = await this.definition(request);
+        if (binding.fingerprint !== stop.definition || !sameAppSet(binding.order, request.apps)) {
+            throw new Error('Allocation or application placement changed after the confirmed stop');
+        }
+        const execution = await this.execution.inspectInstalledStack(binding.runtime);
+        const prefix = stackExecutionKey(binding.runtime) + '/';
+        const names = binding.order.map((name) => prefix + name);
+        const generations = new Map(stop.execution.apps.map((app) => [app.name, app.generation]));
+        if (stackExecutionKey(execution) !== stackExecutionKey(binding.runtime) ||
+            stackExecutionKey(execution) !== stackExecutionKey(stop.execution) ||
+            stackExecutionKey(execution) !== stackExecutionKey(receipt.applications) ||
+            execution.phase !== 'stopped' ||
+            generations.size !== execution.apps.length ||
+            execution.apps.some((app) => generations.get(app.name) !== app.generation) ||
+            execution.revision !== receipt.applications.revision ||
+            !sameAppSet(names, execution.apps.map((a) => a.name)) ||
+            !sameAppSet(names, receipt.applications.stopped))
+            throw new Error('Owner no longer retains the exact stopped allocation');
+        const definition = stackDefinitionFingerprint([receipt.operationId, binding.fingerprint, names, execution]);
+        return { execution, names, definition, stop: receipt.operationId };
+    }
+    async prepare(request) {
+        const { definition } = await this.inspect(request);
+        return {
+            operation: 'stack.resume-installed',
+            project: request.project,
+            stack: request.stack,
+            audience: this.recipient.audience,
+            operationId: request.operationId,
+            definition,
+            expiresAt: Date.now() + INSTALLED_RESUME_TTL_MS,
+        };
+    }
+    journal(scope) {
+        return 'lifecycle:installed-resume:' + stackExecutionKey(scope);
+    }
+    receipt(request) {
+        this.checkTarget(request);
+        const saved = this.store.kvGetSync(this.journal(request), { strict: true });
+        return saved?.stop === request.stopOperationId && saved.receipt.operationId === request.operationId ? saved.receipt : null;
+    }
+    async execute(request) {
+        this.checkTarget(request);
+        const { plan, permit } = request;
+        if (plan.operation !== 'stack.resume-installed' ||
+            stackExecutionKey(plan) !== stackExecutionKey(request) ||
+            plan.operationId !== request.operationId)
+            throw new Error('Resume permit refers to another operation');
+        if (this.applying)
+            throw new Error('Another installed allocation is resuming');
+        this.applying = true;
+        try {
+            const admit = () => this.recipient.admitEffect(plan, permit);
+            await admit();
+            const prior = this.receipt(request);
+            if (prior) {
+                if (prior.definition !== plan.definition || prior.epoch !== permit.epoch)
+                    throw new Error('Resume identity was reused');
+                return prior;
+            }
+            const observed = await this.inspect(request);
+            if (plan.definition !== observed.definition)
+                throw new Error('Installed allocation changed after preparation');
+            const receipt = {
+                project: plan.project,
+                stack: plan.stack,
+                operationId: plan.operationId,
+                audience: this.recipient.audience,
+                epoch: permit.epoch,
+                definition: plan.definition,
+                outcome: 'unconfirmed',
+                apps: [],
+                observedAt: new Date().toISOString(),
+                reason: 'Execution has not been confirmed',
+            };
+            const write = (first = false) => this.store.kvUpdateSync(this.journal(request), (current) => {
+                if (first && current?.stop === observed.stop)
+                    throw new Error('This stop already has a resume attempt; inspect or obtain a fresh stop');
+                if (!first && current?.receipt.operationId !== plan.operationId)
+                    throw new Error('Resume journal was superseded');
+                return { stop: observed.stop, receipt };
+            });
+            await admit();
+            write(true);
+            const operation = { operationId: plan.operationId, plan: observed.execution };
+            try {
+                await admit();
+                await this.execution.openInstalledStack(operation);
+                for (const name of observed.names) {
+                    await admit();
+                    await this.execution.resumeInstalledApp({ ...operation, name });
+                    receipt.apps.push(name);
+                    receipt.observedAt = new Date().toISOString();
+                    write();
+                }
+                await this.execution.refreshObservation?.();
+                if (!observed.names.every((name) => this.execution.getHandle(name)?.status === 'online')) {
+                    throw new Error('The owner could not confirm every resumed application online');
+                }
+                delete receipt.reason;
+                receipt.outcome = 'running';
+            }
+            catch (error) {
+                receipt.reason = describeFailure(error);
+            }
+            receipt.observedAt = new Date().toISOString();
+            write();
+            this.onObserved?.(observed.execution, receipt);
+            return receipt;
+        }
+        finally {
+            this.applying = false;
+        }
+    }
+}
+/** The node reports canonical runtime names, which may belong to an imported allocation. */
+function receiptAppsMatch(names, expected, complete) {
+    const apps = new Set(expected);
+    let scope;
+    for (const name of names) {
+        if (typeof name !== 'string')
+            return false;
+        const parts = name.split('/');
+        if (parts.length !== 3 || !apps.delete(parts[2]))
+            return false;
+        const key = stackExecutionKey({ project: parts[0], stack: parts[1] });
+        if (scope && key !== scope)
+            return false;
+        scope = key;
+    }
+    return !complete || !apps.size;
+}
+/** Prepare the entire placement before dispatch. A lost reply permits only a receipt lookup. */
+export async function resumeDestinations(report, targets, authorize, persist) {
+    const plans = [];
+    for (const target of targets) {
+        const prepared = await target.prepare();
+        const expected = target.request;
+        const plan = { ...prepared, expiresAt: Math.min(prepared.expiresAt, Date.now() + INSTALLED_RESUME_TTL_MS) };
+        if (plan.operation !== 'stack.resume-installed' ||
+            plan.project !== expected.project ||
+            plan.stack !== expected.stack ||
+            plan.operationId !== expected.operationId ||
+            plan.audience?.nodeId !== expected.audience.nodeId ||
+            plan.audience.clusterId !== expected.audience.clusterId)
+            throw new Error('Recipient returned a plan for another allocation');
+        authorize(plan);
+        plans.push(plan);
+    }
+    report.nodes = targets.map((target) => ({ node: target.node, outcome: 'skipped' }));
+    for (const [index, target] of targets.entries()) {
+        const item = report.nodes[index], plan = plans[index];
+        let dispatched = false;
+        try {
+            const permit = authorize(plan);
+            item.outcome = 'unconfirmed';
+            persist(report);
+            dispatched = true;
+            let reply;
+            try {
+                reply = await target.execute(plan, permit);
+            }
+            catch (error) {
+                reply = await target.receipt();
+                if (!reply)
+                    throw error;
+            }
+            if (reply?.operationId !== plan.operationId ||
+                reply.project !== plan.project ||
+                reply.stack !== plan.stack ||
+                reply.definition !== plan.definition ||
+                reply.epoch !== permit.epoch ||
+                reply.audience?.nodeId !== plan.audience.nodeId ||
+                reply.audience.clusterId !== plan.audience.clusterId ||
+                !['running', 'unconfirmed'].includes(reply.outcome) ||
+                !Array.isArray(reply.apps) ||
+                !Number.isFinite(Date.parse(reply.observedAt)) ||
+                !receiptAppsMatch(reply.apps, target.request.apps, reply.outcome === 'running')) {
+                throw new Error('Missing or invalid installed application receipt');
+            }
+            item.outcome = reply.outcome;
+            item.apps = reply.apps;
+            item.observedAt = reply.observedAt;
+            if (reply.reason)
+                item.reason = describeFailure(reply.reason);
+        }
+        catch (error) {
+            item.outcome = dispatched ? 'unconfirmed' : 'failed';
+            item.reason = describeFailure(error);
+        }
+        report.outcome = report.nodes.every((node) => node.outcome === 'running')
+            ? 'running'
+            : report.nodes.some((node) => node.outcome === 'running' || node.apps?.length)
+                ? 'partial'
+                : 'unconfirmed';
+        persist(report);
+        if (item.outcome !== 'running')
+            break;
+    }
+    return report;
+}
+//# sourceMappingURL=installed-stack-resume.js.map

package/dist/project/installed-stack-resume.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"installed-stack-resume.js","sourceRoot":"","sources":["../../src/project/installed-stack-resume.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,uBAAuB,EAAsF,MAAM,8BAA8B,CAAC;AAG3J,OAAO,EAAE,eAAe,EAAE,MAAM,8BAA8B,CAAC;AAE/D,OAAO,EAAE,iBAAiB,EAA4B,MAAM,kCAAkC,CAAC;AAC/F,OAAO,EAAE,0BAA0B,EAAsB,MAAM,sBAAsB,CAAC;AA+BtF,MAAM,WAAW,GAAG,4CAA4C,CAAC;AAEjE,MAAM,UAAU,UAAU,CAAC,IAAc,EAAE,KAAe;IACxD,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;IAC7B,OAAO,IAAI,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,IAAI,KAAK,KAAK,CAAC,MAAM,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;AAC/G,CAAC;AAED,yGAAyG;AACzG,MAAM,OAAO,oBAAoB;IAOZ,SAAS;IACT,KAAK;IACL,KAAK;IACL,SAAS;IACT,UAAU;IAKV,UAAU;IAfrB,QAAQ,GAAG,KAAK,CAAC;IACzB,IAAI,IAAI;QACN,OAAO,IAAI,CAAC,QAAQ,CAAC;IACvB,CAAC;IAED,YACmB,SAA2B,EAC3B,KAA2C,EAC3C,KAA2D,EAC3D,SAAoB,EACpB,UAIf,EACe,UAAoF;yBATpF,SAAS;qBACT,KAAK;qBACL,KAAK;yBACL,SAAS;0BACT,UAAU;0BAKV,UAAU;IAC1B,CAAC;IAEI,WAAW,CAAC,OAA+B;QACjD,iBAAiB,CAAC,OAAO,CAAC,CAAC;QAC3B,IACE,CAAC,OAAO,CAAC,QAAQ;YACjB,OAAO,CAAC,QAAQ,CAAC,SAAS,KAAK,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,SAAS;YAChE,OAAO,CAAC,QAAQ,CAAC,MAAM,KAAK,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,MAAM;YAC1D,CAAC,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC;YACtC,CAAC,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,eAAe,CAAC;YAC1C,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;YACpD,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC;YAC5B,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM;YAEpB,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;IACrD,CAAC;IAEO,KAAK,CAAC,OAAO,CAAC,OAA+B;QACnD,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;QAC1B,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC;QAClE,MAAM,MAAM,GAAG,iBAAiB,CAAC,OAAO,CAAC,CAAC;QAC1C,IAAI,OAAO,CAAC,iBAAiB,CAAC,MAAM;YAClC,MAAM,IAAI,KAAK,CAAC,mFAAmF,CAAC,CAAC;QACvG,IACE,iBAAiB,CAAC,IAAI,CAAC,KAAK,MAAM;YAClC,iBAAiB,CAAC,OAAO,CAAC,KAAK,MAAM;YACrC,CAAC,IAAI,CAAC,SAAS;YACf,IAAI,CAAC,WAAW,KAAK,OAAO,CAAC,eAAe;YAC5C,OAAO,CAAC,WAAW,KAAK,IAAI,CAAC,WAAW;YACxC,OAAO,CAAC,YAAY,EAAE,WAAW,KAAK,IAAI,CAAC,WAAW;YACtD,OAAO,CAAC,UAAU,KAAK,OAAO,CAAC,cAAc;YAC7C,OAAO,CAAC,SAAS,EAAE,SAAS,KAAK,OAAO,CAAC,QAAQ,CAAC,SAAS;YAC3D,OAAO,CAAC,SAAS,CAAC,MAAM,KAAK,OAAO,CAAC,QAAQ,CAAC,MAAM;YACpD,CAAC,OAAO,CAAC,YAAY,EACrB,CAAC;YACD,MAAM,IAAI,KAAK,CAAC,oFAAoF,CAAC,CAAC;QACxG,CAAC;QACD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;QAC/C,IAAI,OAAO,CAAC,WAAW,KAAK,IAAI,CAAC,UAAU,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;YACxF,MAAM,IAAI,KAAK,CAAC,sEAAsE,CAAC,CAAC;QAC1F,CAAC;QACD,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,qBAAqB,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QAC9E,MAAM,MAAM,GAAG,iBAAiB,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,GAAG,CAAC;QACxD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;QACzD,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;QAC1F,IACE,iBAAiB,CAAC,SAAS,CAAC,KAAK,iBAAiB,CAAC,OAAO,CAAC,OAAO,CAAC;YACnE,iBAAiB,CAAC,SAAS,CAAC,KAAK,iBAAiB,CAAC,IAAI,CAAC,SAAS,CAAC;YAClE,iBAAiB,CAAC,SAAS,CAAC,KAAK,iBAAiB,CAAC,OAAO,CAAC,YAAY,CAAC;YACxE,SAAS,CAAC,KAAK,KAAK,SAAS;YAC7B,WAAW,CAAC,IAAI,KAAK,SAAS,CAAC,IAAI,CAAC,MAAM;YAC1C,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,GAAG,CAAC,UAAU,CAAC;YAC1E,SAAS,CAAC,QAAQ,KAAK,OAAO,CAAC,YAAY,CAAC,QAAQ;YACpD,CAAC,UAAU,CACT,KAAK,EACL,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAClC;YACD,CAAC,UAAU,CAAC,KAAK,EAAE,OAAO,CAAC,YAAY,CAAC,OAAO,CAAC;YAEhD,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC;QAC1E,MAAM,UAAU,GAAG,0BAA0B,CAAC,CAAC,OAAO,CAAC,WAAW,EAAE,OAAO,CAAC,WAAW,EAAE,KAAK,EAAE,SAAS,CAAC,CAAC,CAAC;QAC5G,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,UAAU,EAAE,IAAI,EAAE,OAAO,CAAC,WAAW,EAAE,CAAC;IACrE,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,OAA+B;QAC3C,MAAM,EAAE,UAAU,EAAE,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QACnD,OAAO;YACL,SAAS,EAAE,wBAAwB;YACnC,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ;YACjC,WAAW,EAAE,OAAO,CAAC,WAAW;YAChC,UAAU;YACV,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,uBAAuB;SAChD,CAAC;IACJ,CAAC;IAEO,OAAO,CAAC,KAA0B;QACxC,OAAO,6BAA6B,GAAG,iBAAiB,CAAC,KAAK,CAAC,CAAC;IAClE,CAAC;IAED,OAAO,CAAC,OAA+B;QACrC,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;QAC1B,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAAU,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;QACrF,OAAO,KAAK,EAAE,IAAI,KAAK,OAAO,CAAC,eAAe,IAAI,KAAK,CAAC,OAAO,CAAC,WAAW,KAAK,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC;IAC7H,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,OAAiC;QAC7C,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;QAC1B,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC;QACjC,IACE,IAAI,CAAC,SAAS,KAAK,wBAAwB;YAC3C,iBAAiB,CAAC,IAAI,CAAC,KAAK,iBAAiB,CAAC,OAAO,CAAC;YACtD,IAAI,CAAC,WAAW,KAAK,OAAO,CAAC,WAAW;YAExC,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;QAC/D,IAAI,IAAI,CAAC,QAAQ;YAAE,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;QAC/E,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC;QACrB,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,GAAG,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;YAC7D,MAAM,KAAK,EAAE,CAAC;YACd,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;YACpC,IAAI,KAAK,EAAE,CAAC;gBACV,IAAI,KAAK,CAAC,UAAU,KAAK,IAAI,CAAC,UAAU,IAAI,KAAK,CAAC,KAAK,KAAK,MAAM,CAAC,KAAK;oBACtE,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;gBAChD,OAAO,KAAK,CAAC;YACf,CAAC;YACD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;YAC7C,IAAI,IAAI,CAAC,UAAU,KAAK,QAAQ,CAAC,UAAU;gBAAE,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;YAC/G,MAAM,OAAO,GAA2B;gBACtC,OAAO,EAAE,IAAI,CAAC,OAAO;gBACrB,KAAK,EAAE,IAAI,CAAC,KAAK;gBACjB,WAAW,EAAE,IAAI,CAAC,WAAW;gBAC7B,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ;gBACjC,KAAK,EAAE,MAAM,CAAC,KAAK;gBACnB,UAAU,EAAE,IAAI,CAAC,UAAU;gBAC3B,OAAO,EAAE,aAAa;gBACtB,IAAI,EAAE,EAAE;gBACR,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;gBACpC,MAAM,EAAE,kCAAkC;aAC3C,CAAC;YACF,MAAM,KAAK,GAAG,CAAC,KAAK,GAAG,KAAK,EAAE,EAAE,CAC9B,IAAI,CAAC,KAAK,CAAC,YAAY,CAAU,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE;gBAClE,IAAI,KAAK,IAAI,OAAO,EAAE,IAAI,KAAK,QAAQ,CAAC,IAAI;oBAC1C,MAAM,IAAI,KAAK,CAAC,wEAAwE,CAAC,CAAC;gBAC5F,IAAI,CAAC,KAAK,IAAI,OAAO,EAAE,OAAO,CAAC,WAAW,KAAK,IAAI,CAAC,WAAW;oBAC7D,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;gBACnD,OAAO,EAAE,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAE,OAAO,EAAE,CAAC;YAC1C,CAAC,CAAC,CAAC;YACL,MAAM,KAAK,EAAE,CAAC;YACd,KAAK,CAAC,IAAI,CAAC,CAAC;YACZ,MAAM,SAAS,GAAG,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,IAAI,EAAE,QAAQ,CAAC,SAAS,EAAE,CAAC;YAC9E,IAAI,CAAC;gBACH,MAAM,KAAK,EAAE,CAAC;gBACd,MAAM,IAAI,CAAC,SAAS,CAAC,kBAAkB,CAAC,SAAS,CAAC,CAAC;gBACnD,KAAK,MAAM,IAAI,IAAI,QAAQ,CAAC,KAAK,EAAE,CAAC;oBAClC,MAAM,KAAK,EAAE,CAAC;oBACd,MAAM,IAAI,CAAC,SAAS,CAAC,kBAAkB,CAAC,EAAE,GAAG,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;oBAChE,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;oBACxB,OAAO,CAAC,UAAU,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;oBAC9C,KAAK,EAAE,CAAC;gBACV,CAAC;gBACD,MAAM,IAAI,CAAC,SAAS,CAAC,kBAAkB,EAAE,EAAE,CAAC;gBAC5C,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,MAAM,KAAK,QAAQ,CAAC,EAAE,CAAC;oBACzF,MAAM,IAAI,KAAK,CAAC,8DAA8D,CAAC,CAAC;gBAClF,CAAC;gBACD,OAAO,OAAO,CAAC,MAAM,CAAC;gBACtB,OAAO,CAAC,OAAO,GAAG,SAAS,CAAC;YAC9B,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,OAAO,CAAC,MAAM,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC;YAC1C,CAAC;YACD,OAAO,CAAC,UAAU,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;YAC9C,KAAK,EAAE,CAAC;YACR,IAAI,CAAC,UAAU,EAAE,CAAC,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;YAC/C,OAAO,OAAO,CAAC;QACjB,CAAC;gBAAS,CAAC;YACT,IAAI,CAAC,QAAQ,GAAG,KAAK,CAAC;QACxB,CAAC;IACH,CAAC;CACF;AAUD,4FAA4F;AAC5F,SAAS,gBAAgB,CAAC,KAAe,EAAE,QAAkB,EAAE,QAAiB;IAC9E,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAC;IAC/B,IAAI,KAAyB,CAAC;IAC9B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,OAAO,IAAI,KAAK,QAAQ;YAAE,OAAO,KAAK,CAAC;QAC3C,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC9B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC;YAAE,OAAO,KAAK,CAAC;QAChE,MAAM,GAAG,GAAG,iBAAiB,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC,CAAE,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC,CAAE,EAAE,CAAC,CAAC;QACxE,IAAI,KAAK,IAAI,GAAG,KAAK,KAAK;YAAE,OAAO,KAAK,CAAC;QACzC,KAAK,GAAG,GAAG,CAAC;IACd,CAAC;IACD,OAAO,CAAC,QAAQ,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;AACjC,CAAC;AAED,gGAAgG;AAChG,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,MAAkC,EAClC,OAA4B,EAC5B,SAAmD,EACnD,OAAqD;IAErD,MAAM,KAAK,GAAsB,EAAE,CAAC;IACpC,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,OAAO,EAAE,CAAC;QACxC,MAAM,QAAQ,GAAG,MAAM,CAAC,OAAO,CAAC;QAChC,MAAM,IAAI,GAAG,EAAE,GAAG,QAAQ,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,uBAAuB,CAAC,EAAE,CAAC;QAC5G,IACE,IAAI,CAAC,SAAS,KAAK,wBAAwB;YAC3C,IAAI,CAAC,OAAO,KAAK,QAAQ,CAAC,OAAO;YACjC,IAAI,CAAC,KAAK,KAAK,QAAQ,CAAC,KAAK;YAC7B,IAAI,CAAC,WAAW,KAAK,QAAQ,CAAC,WAAW;YACzC,IAAI,CAAC,QAAQ,EAAE,MAAM,KAAK,QAAQ,CAAC,QAAQ,CAAC,MAAM;YAClD,IAAI,CAAC,QAAQ,CAAC,SAAS,KAAK,QAAQ,CAAC,QAAQ,CAAC,SAAS;YAEvD,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;QACtE,SAAS,CAAC,IAAI,CAAC,CAAC;QAChB,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACnB,CAAC;IACD,MAAM,CAAC,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC;IACpF,KAAK,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,IAAI,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC;QAChD,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,KAAK,CAAE,EAC/B,IAAI,GAAG,KAAK,CAAC,KAAK,CAAE,CAAC;QACvB,IAAI,UAAU,GAAG,KAAK,CAAC;QACvB,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;YAC/B,IAAI,CAAC,OAAO,GAAG,aAAa,CAAC;YAC7B,OAAO,CAAC,MAAM,CAAC,CAAC;YAChB,UAAU,GAAG,IAAI,CAAC;YAClB,IAAI,KAAoC,CAAC;YACzC,IAAI,CAAC;gBACH,KAAK,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;YAC7C,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,KAAK,GAAG,MAAM,MAAM,CAAC,OAAO,EAAE,CAAC;gBAC/B,IAAI,CAAC,KAAK;oBAAE,MAAM,KAAK,CAAC;YAC1B,CAAC;YACD,IACE,KAAK,EAAE,WAAW,KAAK,IAAI,CAAC,WAAW;gBACvC,KAAK,CAAC,OAAO,KAAK,IAAI,CAAC,OAAO;gBAC9B,KAAK,CAAC,KAAK,KAAK,IAAI,CAAC,KAAK;gBAC1B,KAAK,CAAC,UAAU,KAAK,IAAI,CAAC,UAAU;gBACpC,KAAK,CAAC,KAAK,KAAK,MAAM,CAAC,KAAK;gBAC5B,KAAK,CAAC,QAAQ,EAAE,MAAM,KAAK,IAAI,CAAC,QAAQ,CAAC,MAAM;gBAC/C,KAAK,CAAC,QAAQ,CAAC,SAAS,KAAK,IAAI,CAAC,QAAQ,CAAC,SAAS;gBACpD,CAAC,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC;gBACnD,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC;gBAC1B,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;gBAC9C,CAAC,gBAAgB,CAAC,KAAK,CAAC,IAAI,EAAE,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,OAAO,KAAK,SAAS,CAAC,EAC/E,CAAC;gBACD,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;YACtE,CAAC;YACD,IAAI,CAAC,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC;YAC7B,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC;YACvB,IAAI,CAAC,UAAU,GAAG,KAAK,CAAC,UAAU,CAAC;YACnC,IAAI,KAAK,CAAC,MAAM;gBAAE,IAAI,CAAC,MAAM,GAAG,eAAe,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAChE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,OAAO,GAAG,UAAU,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,QAAQ,CAAC;YACrD,IAAI,CAAC,MAAM,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC;QACvC,CAAC;QACD,MAAM,CAAC,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,KAAK,SAAS,CAAC;YACvE,CAAC,CAAC,SAAS;YACX,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,KAAK,SAAS,IAAI,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC;gBAC5E,CAAC,CAAC,SAAS;gBACX,CAAC,CAAC,aAAa,CAAC;QACpB,OAAO,CAAC,MAAM,CAAC,CAAC;QAChB,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS;YAAE,MAAM;IACxC,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/project/launch-failure.d.ts

@@ -0,0 +1,3 @@
+/** Reader-safe evidence from current and legacy owner errors. Never expose arbitrary stderr. */
+export declare function publicLaunchFailure(error: unknown): string;
+//# sourceMappingURL=launch-failure.d.ts.map

package/dist/project/launch-failure.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"launch-failure.d.ts","sourceRoot":"","sources":["../../src/project/launch-failure.ts"],"names":[],"mappings":"AAAA,gGAAgG;AAChG,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CA4B1D"}

package/dist/project/launch-failure.js

@@ -0,0 +1,32 @@
+/** Reader-safe evidence from current and legacy owner errors. Never expose arbitrary stderr. */
+export function publicLaunchFailure(error) {
+    const seen = new Set();
+    for (let depth = 0; depth < 4 && error && typeof error === 'object' && !seen.has(error); depth++) {
+        seen.add(error);
+        const candidate = error;
+        const message = typeof candidate.message === 'string' ? candidate.message.slice(0, 16_384) : '';
+        const process = message.match(/\bexited during startup (?:with code -?\d{1,10}|: killed by SIG[A-Z0-9]{1,16})\b|\bdid not confirm readiness within \d{1,10}ms\b/);
+        if (process)
+            return process[0];
+        const missing = message.match(/\bCannot find (module|package) ['"]([^'"\r\n]{1,1024})['"]/);
+        if (missing) {
+            const target = missing[2];
+            // Only a package identifier or a source filename, never its directory,
+            // URL parameters, control characters, or arbitrary exception context.
+            const packageName = /^(?:@[a-z0-9][a-z0-9._-]{0,63}\/)?[a-z0-9][a-z0-9._-]{0,95}$/;
+            const basename = target.split(/[/\\]/).at(-1) ?? '';
+            const filename = /^[a-zA-Z0-9][a-zA-Z0-9._-]{0,95}\.(?:[cm]?[jt]sx?|json|node|wasm)$/;
+            const hasControls = Array.from(target).some(char => char.charCodeAt(0) < 32 || char.charCodeAt(0) === 127);
+            const safePath = !hasControls && !/[?#]/.test(target) && (!target.includes('://') || target.startsWith('file:///'));
+            if (missing[1] === 'module' && safePath && filename.test(basename)) {
+                return `module "${basename}" is unavailable; verify dependency installation and the active runtime compiler`;
+            }
+            if (packageName.test(target))
+                return `package "${target}" is unavailable; install the declared dependencies`;
+            return 'a required module is unavailable; verify dependency installation and the active runtime compiler';
+        }
+        error = candidate.cause;
+    }
+    return 'launch failed (see daemon log)';
+}
+//# sourceMappingURL=launch-failure.js.map

package/dist/project/launch-failure.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"launch-failure.js","sourceRoot":"","sources":["../../src/project/launch-failure.ts"],"names":[],"mappings":"AAAA,gGAAgG;AAChG,MAAM,UAAU,mBAAmB,CAAC,KAAc;IAChD,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,CAAC,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,EAAE,CAAC;QACjG,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAChB,MAAM,SAAS,GAAG,KAA+C,CAAC;QAClE,MAAM,OAAO,GAAG,OAAO,SAAS,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAChG,MAAM,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,kIAAkI,CAAC,CAAC;QAClK,IAAI,OAAO;YAAE,OAAO,OAAO,CAAC,CAAC,CAAC,CAAC;QAE/B,MAAM,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,4DAA4D,CAAC,CAAC;QAC5F,IAAI,OAAO,EAAE,CAAC;YACZ,MAAM,MAAM,GAAG,OAAO,CAAC,CAAC,CAAE,CAAC;YAC3B,uEAAuE;YACvE,sEAAsE;YACtE,MAAM,WAAW,GAAG,8DAA8D,CAAC;YACnF,MAAM,QAAQ,GAAG,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;YACpD,MAAM,QAAQ,GAAG,oEAAoE,CAAC;YACtF,MAAM,WAAW,GAAG,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,EAAE,IAAI,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC;YAC3G,MAAM,QAAQ,GAAG,CAAC,WAAW,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,CAAC;YACpH,IAAI,OAAO,CAAC,CAAC,CAAC,KAAK,QAAQ,IAAI,QAAQ,IAAI,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;gBACnE,OAAO,WAAW,QAAQ,kFAAkF,CAAC;YAC/G,CAAC;YACD,IAAI,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC;gBAAE,OAAO,YAAY,MAAM,qDAAqD,CAAC;YAC7G,OAAO,kGAAkG,CAAC;QAC5G,CAAC;QACD,KAAK,GAAG,SAAS,CAAC,KAAK,CAAC;IAC1B,CAAC;IACD,OAAO,gCAAgC,CAAC;AAC1C,CAAC"}

package/dist/project/local-release-selection.d.ts

@@ -0,0 +1,18 @@
+import type { DaemonStateStore } from '../daemon/daemon-state-store.service.js';
+import type { SelectedRelease } from '../shared/dto/project.js';
+import { type StackExecutionScope } from '../shared/dto/stack-execution.js';
+interface Selection {
+    revision: number;
+    release: SelectedRelease | null;
+}
+type SelectionStore = Pick<DaemonStateStore, 'kvGetSync' | 'kvUpdateSync'>;
+/** Desired launch code belongs to a registration lifetime; a reused project name must never inherit it. */
+export declare class LocalReleaseSelection {
+    private readonly store;
+    private readonly key;
+    constructor(store: SelectionStore, scope: StackExecutionScope, registration: string);
+    read(): Selection;
+    select(expected: number, release: SelectedRelease | null): Selection;
+}
+export {};
+//# sourceMappingURL=local-release-selection.d.ts.map

package/dist/project/local-release-selection.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"local-release-selection.d.ts","sourceRoot":"","sources":["../../src/project/local-release-selection.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,yCAAyC,CAAC;AAChF,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,0BAA0B,CAAC;AAEhE,OAAO,EAAqB,KAAK,mBAAmB,EAAE,MAAM,kCAAkC,CAAC;AAE/F,UAAU,SAAS;IAAG,QAAQ,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,eAAe,GAAG,IAAI,CAAA;CAAE;AACzE,KAAK,cAAc,GAAG,IAAI,CAAC,gBAAgB,EAAE,WAAW,GAAG,cAAc,CAAC,CAAC;AAW3E,2GAA2G;AAC3G,qBAAa,qBAAqB;IAEpB,OAAO,CAAC,QAAQ,CAAC,KAAK;IADlC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAS;IAC7B,YAA6B,KAAK,EAAE,cAAc,EAAE,KAAK,EAAE,mBAAmB,EAAE,YAAY,EAAE,MAAM,EAGnG;IAED,IAAI,IAAI,SAAS,CAEhB;IAED,MAAM,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,eAAe,GAAG,IAAI,GAAG,SAAS,CAMnE;CACF"}

package/dist/project/local-release-selection.js

@@ -0,0 +1,36 @@
+import { assertReleaseId } from '../release/load.js';
+import { stackExecutionKey } from '../shared/dto/stack-execution.js';
+function validate(stored) {
+    if (stored === null)
+        return { revision: 0, release: null };
+    if (!Number.isSafeInteger(stored.revision) || stored.revision < 1 ||
+        (stored.release !== null && (!stored.release || typeof stored.release.id !== 'string' ||
+            !/^[a-f0-9]{64}$/.test(stored.release.manifestSha256))))
+        throw new Error('Invalid local release selection');
+    if (stored.release)
+        assertReleaseId(stored.release.id);
+    return stored;
+}
+/** Desired launch code belongs to a registration lifetime; a reused project name must never inherit it. */
+export class LocalReleaseSelection {
+    store;
+    key;
+    constructor(store, scope, registration) {
+        this.store = store;
+        if (!registration)
+            throw new Error('Local release selection requires a project registration');
+        this.key = 'lifecycle:local-release:' + stackExecutionKey(scope) + ':' + registration;
+    }
+    read() {
+        return validate(this.store.kvGetSync(this.key, { strict: true }));
+    }
+    select(expected, release) {
+        return this.store.kvUpdateSync(this.key, stored => {
+            const current = validate(stored);
+            if (current.revision !== expected)
+                throw new Error('Local release selection changed; inspect the stack and retry');
+            return validate({ revision: expected + 1, release });
+        });
+    }
+}
+//# sourceMappingURL=local-release-selection.js.map

package/dist/project/local-release-selection.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"local-release-selection.js","sourceRoot":"","sources":["../../src/project/local-release-selection.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AACrD,OAAO,EAAE,iBAAiB,EAA4B,MAAM,kCAAkC,CAAC;AAK/F,SAAS,QAAQ,CAAC,MAAwB;IACxC,IAAI,MAAM,KAAK,IAAI;QAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC3D,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,MAAM,CAAC,QAAQ,GAAG,CAAC;QAC7D,CAAC,MAAM,CAAC,OAAO,KAAK,IAAI,IAAI,CAAC,CAAC,MAAM,CAAC,OAAO,IAAI,OAAO,MAAM,CAAC,OAAO,CAAC,EAAE,KAAK,QAAQ;YACnF,CAAC,gBAAgB,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;IAClH,IAAI,MAAM,CAAC,OAAO;QAAE,eAAe,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IACvD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,2GAA2G;AAC3G,MAAM,OAAO,qBAAqB;IAEH,KAAK;IADjB,GAAG,CAAS;IAC7B,YAA6B,KAAqB,EAAE,KAA0B,EAAE,YAAoB;qBAAvE,KAAK;QAChC,IAAI,CAAC,YAAY;YAAE,MAAM,IAAI,KAAK,CAAC,yDAAyD,CAAC,CAAC;QAC9F,IAAI,CAAC,GAAG,GAAG,0BAA0B,GAAG,iBAAiB,CAAC,KAAK,CAAC,GAAG,GAAG,GAAG,YAAY,CAAC;IACxF,CAAC;IAED,IAAI;QACF,OAAO,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAY,IAAI,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IAC/E,CAAC;IAED,MAAM,CAAC,QAAgB,EAAE,OAA+B;QACtD,OAAO,IAAI,CAAC,KAAK,CAAC,YAAY,CAAY,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,EAAE;YAC3D,MAAM,OAAO,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC;YACjC,IAAI,OAAO,CAAC,QAAQ,KAAK,QAAQ;gBAAE,MAAM,IAAI,KAAK,CAAC,8DAA8D,CAAC,CAAC;YACnH,OAAO,QAAQ,CAAC,EAAE,QAAQ,EAAE,QAAQ,GAAG,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC;QACvD,CAAC,CAAC,CAAC;IACL,CAAC;CACF"}

package/dist/project/node-app-config.d.ts

@@ -31,9 +31,14 @@ export declare const NODE_STACK = "deployed";
 export interface NodeArtifact {
     app: string;
     version: string;
+    /** Installation identity selected by the deployer, independent of package version. */
+    directory?: string;
+    launch?: import('../release/manifest.js').ReleaseLaunch;
 }
 export interface NodeConfigInput {
     project: string;
+    /** Source stack that owns this node allocation. */
+    sourceStack: string;
     /** Artifact root on the node — `/opt/omnitron/artifacts`. */
     artifactRoot: string;
     apps: readonly IEcosystemAppEntry[];
@@ -89,7 +94,9 @@ export interface NodeConfigInput {
  * out, and the node already knows how to say "this app is not deployed here"
  * by not listing it.
  */
-export declare function selectNodeApps(input: NodeConfigInput): Array<Record<string, unknown>>;
+export declare function selectNodeApps(input: Omit<NodeConfigInput, 'sourceStack'> & {
+    sourceStack?: string;
+}): Array<Record<string, unknown>>;
 /**
  * Render the config file itself.
  *

package/dist/project/node-app-config.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"node-app-config.d.ts","sourceRoot":"","sources":["../../src/project/node-app-config.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,KAAK,EAAE,UAAU,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AAEzE;;;;;;;GAOG;AACH,eAAO,MAAM,UAAU,aAAa,CAAC;AAErC,yDAAyD;AACzD,MAAM,WAAW,YAAY;IAC3B,GAAG,EAAE,MAAM,CAAC;IACZ,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAE,MAAM,CAAC;IAChB,6DAA6D;IAC7D,YAAY,EAAE,MAAM,CAAC;IACrB,IAAI,EAAE,SAAS,kBAAkB,EAAE,CAAC;IACpC,wEAAwE;IACxE,SAAS,EAAE,SAAS,YAAY,EAAE,CAAC;IACnC;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA4BG;IACH,MAAM,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,GAAG,SAAS,CAAC;IACtE;;;;;;;;OAQG;IACH,SAAS,CAAC,EAAE,UAAU,GAAG,SAAS,CAAC;CACpC;AAYD;;;;;;;;GAQG;AACH,wBAAgB,cAAc,CAAC,KAAK,EAAE,eAAe,GAAG,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CA6CrF;AAED;;;;;;GAMG;AACH,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,eAAe,GAAG,MAAM,CAyClE"}
+{"version":3,"file":"node-app-config.d.ts","sourceRoot":"","sources":["../../src/project/node-app-config.ts"],"names":[],"mappings":"AACA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,KAAK,EAAE,UAAU,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AAEzE;;;;;;;GAOG;AACH,eAAO,MAAM,UAAU,aAAa,CAAC;AAErC,yDAAyD;AACzD,MAAM,WAAW,YAAY;IAC3B,GAAG,EAAE,MAAM,CAAC;IACZ,OAAO,EAAE,MAAM,CAAC;IAChB,sFAAsF;IACtF,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,OAAO,wBAAwB,EAAE,aAAa,CAAC;CACzD;AAED,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAE,MAAM,CAAC;IAChB,mDAAmD;IACnD,WAAW,EAAE,MAAM,CAAC;IACpB,6DAA6D;IAC7D,YAAY,EAAE,MAAM,CAAC;IACrB,IAAI,EAAE,SAAS,kBAAkB,EAAE,CAAC;IACpC,wEAAwE;IACxE,SAAS,EAAE,SAAS,YAAY,EAAE,CAAC;IACnC;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA4BG;IACH,MAAM,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,GAAG,SAAS,CAAC;IACtE;;;;;;;;OAQG;IACH,SAAS,CAAC,EAAE,UAAU,GAAG,SAAS,CAAC;CACpC;AAYD;;;;;;;;GAQG;AACH,wBAAgB,cAAc,CAAC,KAAK,EAAE,IAAI,CAAC,eAAe,EAAE,aAAa,CAAC,GAAG;IAAE,WAAW,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAgDrI;AAED;;;;;;GAMG;AACH,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,eAAe,GAAG,MAAM,CA4ClE"}

package/dist/project/node-app-config.js

@@ -1,22 +1,4 @@
-/**
- * What a node runs, written for the node.
- *
- * A node's daemon starts apps it knows about, and it learns them the way any
- * omnitron does: from a project directory with an `omnitron.config` in it.
- * Remote deployment never gave it one. Artifacts landed at
- * `/opt/omnitron/artifacts/<project>/<app>/<version>/` and the daemon's own
- * log said `No projects registered`, so `omnitron restart main` answered
- * `Failed: Unknown app: main` and the fleet showed six apps deployed and none
- * running.
- *
- * This renders the master's app definitions into a config the node can read,
- * with every path rewritten to where that app actually is on THAT machine.
- *
- * `.mjs` rather than `.ts`: the loader accepts `.ts`, `.js` and `.mjs`, and a
- * node should not need a TypeScript loader to know what to start. It is
- * generated, not edited, so the format costs nothing in readability that a
- * header cannot repay.
- */
+import { stackExecutionKey } from '../shared/dto/stack-execution.js';
 /**
  * The stack a node runs its deployed apps under.
  *
@@ -34,7 +16,7 @@ export const NODE_STACK = 'deployed';
  * follow a path that does not exist — or, worse, one that does and belongs to
  * something else.
  */
-const DROPPED = new Set(['watch', 'cwd', 'script']);
+const DROPPED = new Set(['watch', 'cwd', 'script', 'bootstrap', 'releaseRoot', 'releaseFrom', 'releaseEntry']);
 /**
  * The app definitions a node should be given.
  *
@@ -45,24 +27,27 @@ const DROPPED = new Set(['watch', 'cwd', 'script']);
  * by not listing it.
  */
 export function selectNodeApps(input) {
-    const versions = new Map(input.artifacts.map((a) => [a.app, a.version]));
+    const versions = new Map(input.artifacts.map((a) => [a.app, a]));
     const present = new Set(versions.keys());
     const out = [];
     for (const app of input.apps) {
-        const version = versions.get(app.name);
-        if (!version)
+        const artifact = versions.get(app.name);
+        if (!artifact)
             continue;
+        const version = artifact.directory ?? artifact.version;
         const entry = {};
         for (const [key, value] of Object.entries(app)) {
             if (DROPPED.has(key) || value === undefined)
                 continue;
             entry[key] = value;
         }
-        // The artifact's compiled entry point. `bootstrap.js`, because the
-        // artifact is `pnpm deploy` output: `dist/` beside a real `node_modules`,
-        // both under the version directory the deployer created.
-        entry['bootstrap'] = `${input.artifactRoot}/${input.project}/${app.name}/${version}/dist/bootstrap.js`;
+        // Checked artifacts carry their admitted compiled entry and mode. The
+        // bootstrap convention remains only for the explicit legacy development
+        // path, which has no release manifest.
+        const launch = artifact.launch ?? { mode: 'bootstrap', file: 'dist/bootstrap.js' };
+        entry[launch.mode] = `${input.artifactRoot}/${input.project}/${app.name}/${version}/${launch.file}`;
         entry['cwd'] = `${input.artifactRoot}/${input.project}/${app.name}/${version}`;
+        entry['releaseRoot'] = entry['cwd'];
         // The addresses and credentials this app connects with, merged OVER its
         // declared env: the master resolved them against what it actually
         // provisioned on this node, and a value the app's own definition carries
@@ -95,6 +80,12 @@ export function selectNodeApps(input) {
  * and "who generates this" is the first thing they need.
  */
 export function renderNodeAppConfig(input) {
+    try {
+        stackExecutionKey({ project: input.project, stack: input.sourceStack });
+    }
+    catch (error) {
+        throw new Error('Node allocation requires its explicit source stack', { cause: error });
+    }
     const apps = selectNodeApps(input);
     return [
         '// Generated by omnitron. Do not edit — the master rewrites this file on',
@@ -124,7 +115,8 @@ export function renderNodeAppConfig(input) {
             // are: it supervises them itself. The stack that sent them is remote
             // from the master's side and this machine's own from here.
             stacks: {
-                [NODE_STACK]: { type: 'local', apps: apps.map((a) => a['name']) },
+                [NODE_STACK]: { type: 'local', apps: apps.map((a) => a['name']),
+                    infrastructureOwnership: 'controller', managedOrigin: { project: input.project, stack: input.sourceStack } },
             },
             ...(input.alertSink && { monitoring: { alertSink: input.alertSink } }),
         }, null, 2)};`,

package/dist/project/node-app-config.js.map

@@ -1 +1 @@
-{"version":3,"file":"node-app-config.js","sourceRoot":"","sources":["../../src/project/node-app-config.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAIH;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,UAAU,GAAG,UAAU,CAAC;AAyDrC;;;;;;;GAOG;AACH,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,CAAC,OAAO,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAC;AAEpD;;;;;;;;GAQG;AACH,MAAM,UAAU,cAAc,CAAC,KAAsB;IACnD,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;IACzE,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC;IACzC,MAAM,GAAG,GAAmC,EAAE,CAAC;IAE/C,KAAK,MAAM,GAAG,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC;QAC7B,MAAM,OAAO,GAAG,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACvC,IAAI,CAAC,OAAO;YAAE,SAAS;QAEvB,MAAM,KAAK,GAA4B,EAAE,CAAC;QAC1C,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;YAC/C,IAAI,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,KAAK,KAAK,SAAS;gBAAE,SAAS;YACtD,KAAK,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;QACrB,CAAC;QAED,mEAAmE;QACnE,0EAA0E;QAC1E,yDAAyD;QACzD,KAAK,CAAC,WAAW,CAAC,GAAG,GAAG,KAAK,CAAC,YAAY,IAAI,KAAK,CAAC,OAAO,IAAI,GAAG,CAAC,IAAI,IAAI,OAAO,oBAAoB,CAAC;QACvG,KAAK,CAAC,KAAK,CAAC,GAAG,GAAG,KAAK,CAAC,YAAY,IAAI,KAAK,CAAC,OAAO,IAAI,GAAG,CAAC,IAAI,IAAI,OAAO,EAAE,CAAC;QAE/E,wEAAwE;QACxE,kEAAkE;QAClE,yEAAyE;QACzE,8DAA8D;QAC9D,MAAM,QAAQ,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC1C,IAAI,QAAQ,IAAI,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACjD,KAAK,CAAC,KAAK,CAAC,GAAG,EAAE,GAAG,CAAE,GAAG,CAAC,GAA0C,IAAI,EAAE,CAAC,EAAE,GAAG,QAAQ,EAAE,CAAC;QAC7F,CAAC;QAED,wEAAwE;QACxE,uEAAuE;QACvE,mEAAmE;QACnE,mEAAmE;QACnE,WAAW;QACX,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;YACjC,MAAM,IAAI,GAAG,GAAG,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;YACzD,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC;gBAAE,KAAK,CAAC,WAAW,CAAC,GAAG,IAAI,CAAC;;gBAC1C,OAAO,KAAK,CAAC,WAAW,CAAC,CAAC;QACjC,CAAC;QAED,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAClB,CAAC;IAED,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,mBAAmB,CAAC,KAAsB;IACxD,MAAM,IAAI,GAAG,cAAc,CAAC,KAAK,CAAC,CAAC;IACnC,OAAO;QACL,0EAA0E;QAC1E,sEAAsE;QACtE,IAAI;QACJ,eAAe,KAAK,CAAC,OAAO,EAAE;QAC9B,eAAe,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,iBAAiB,EAAE;QAC3E,IAAI;QACJ,wEAAwE;QACxE,2DAA2D;QAC3D,IAAI;QACJ,sEAAsE;QACtE,wEAAwE;QACxE,UAAU;QACV,EAAE;QACF,kBAAkB,IAAI,CAAC,SAAS,CAC9B;YACE,IAAI,EAAE,KAAK,CAAC,OAAO;YACnB,IAAI;YAEJ,oEAAoE;YACpE,gEAAgE;YAChE,sEAAsE;YACtE,sEAAsE;YACtE,kDAAkD;YAClD,sEAAsE;YACtE,EAAE;YACF,oEAAoE;YACpE,qEAAqE;YACrE,2DAA2D;YAC3D,MAAM,EAAE;gBACN,CAAC,UAAU,CAAC,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAW,CAAC,EAAE;aAC5E;YACD,GAAG,CAAC,KAAK,CAAC,SAAS,IAAI,EAAE,UAAU,EAAE,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,EAAE,CAAC;SACvE,EACD,IAAI,EACJ,CAAC,CACF,GAAG;QACJ,EAAE;KACH,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC"}
+{"version":3,"file":"node-app-config.js","sourceRoot":"","sources":["../../src/project/node-app-config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,kCAAkC,CAAC;AAuBrE;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,UAAU,GAAG,UAAU,CAAC;AA8DrC;;;;;;;GAOG;AACH,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,CAAC,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,WAAW,EAAE,aAAa,EAAE,aAAa,EAAE,cAAc,CAAC,CAAC,CAAC;AAE/G;;;;;;;;GAQG;AACH,MAAM,UAAU,cAAc,CAAC,KAAsE;IACnG,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IACjE,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC;IACzC,MAAM,GAAG,GAAmC,EAAE,CAAC;IAE/C,KAAK,MAAM,GAAG,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC;QAC7B,MAAM,QAAQ,GAAG,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACxC,IAAI,CAAC,QAAQ;YAAE,SAAS;QACxB,MAAM,OAAO,GAAG,QAAQ,CAAC,SAAS,IAAI,QAAQ,CAAC,OAAO,CAAC;QAEvD,MAAM,KAAK,GAA4B,EAAE,CAAC;QAC1C,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;YAC/C,IAAI,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,KAAK,KAAK,SAAS;gBAAE,SAAS;YACtD,KAAK,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;QACrB,CAAC;QAED,sEAAsE;QACtE,wEAAwE;QACxE,uCAAuC;QACvC,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,IAAI,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,mBAAmB,EAAE,CAAC;QACnF,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,GAAG,KAAK,CAAC,YAAY,IAAI,KAAK,CAAC,OAAO,IAAI,GAAG,CAAC,IAAI,IAAI,OAAO,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC;QACpG,KAAK,CAAC,KAAK,CAAC,GAAG,GAAG,KAAK,CAAC,YAAY,IAAI,KAAK,CAAC,OAAO,IAAI,GAAG,CAAC,IAAI,IAAI,OAAO,EAAE,CAAC;QAC/E,KAAK,CAAC,aAAa,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC;QAEpC,wEAAwE;QACxE,kEAAkE;QAClE,yEAAyE;QACzE,8DAA8D;QAC9D,MAAM,QAAQ,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC1C,IAAI,QAAQ,IAAI,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACjD,KAAK,CAAC,KAAK,CAAC,GAAG,EAAE,GAAG,CAAE,GAAG,CAAC,GAA0C,IAAI,EAAE,CAAC,EAAE,GAAG,QAAQ,EAAE,CAAC;QAC7F,CAAC;QAED,wEAAwE;QACxE,uEAAuE;QACvE,mEAAmE;QACnE,mEAAmE;QACnE,WAAW;QACX,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;YACjC,MAAM,IAAI,GAAG,GAAG,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;YACzD,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC;gBAAE,KAAK,CAAC,WAAW,CAAC,GAAG,IAAI,CAAC;;gBAC1C,OAAO,KAAK,CAAC,WAAW,CAAC,CAAC;QACjC,CAAC;QAED,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAClB,CAAC;IAED,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,mBAAmB,CAAC,KAAsB;IACxD,IAAI,CAAC;QAAC,iBAAiB,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,KAAK,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC;IAAC,CAAC;IAChF,OAAO,KAAK,EAAE,CAAC;QAAC,MAAM,IAAI,KAAK,CAAC,oDAAoD,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;IAAC,CAAC;IAC1G,MAAM,IAAI,GAAG,cAAc,CAAC,KAAK,CAAC,CAAC;IACnC,OAAO;QACL,0EAA0E;QAC1E,sEAAsE;QACtE,IAAI;QACJ,eAAe,KAAK,CAAC,OAAO,EAAE;QAC9B,eAAe,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,iBAAiB,EAAE;QAC3E,IAAI;QACJ,wEAAwE;QACxE,2DAA2D;QAC3D,IAAI;QACJ,sEAAsE;QACtE,wEAAwE;QACxE,UAAU;QACV,EAAE;QACF,kBAAkB,IAAI,CAAC,SAAS,CAC9B;YACE,IAAI,EAAE,KAAK,CAAC,OAAO;YACnB,IAAI;YAEJ,oEAAoE;YACpE,gEAAgE;YAChE,sEAAsE;YACtE,sEAAsE;YACtE,kDAAkD;YAClD,sEAAsE;YACtE,EAAE;YACF,oEAAoE;YACpE,qEAAqE;YACrE,2DAA2D;YAC3D,MAAM,EAAE;gBACN,CAAC,UAAU,CAAC,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAW,CAAC;oBACvE,uBAAuB,EAAE,YAAY,EAAE,aAAa,EAAE,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,KAAK,EAAE,KAAK,CAAC,WAAW,EAAE,EAAE;aAC/G;YACD,GAAG,CAAC,KAAK,CAAC,SAAS,IAAI,EAAE,UAAU,EAAE,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,EAAE,CAAC;SACvE,EACD,IAAI,EACJ,CAAC,CACF,GAAG;QACJ,EAAE;KACH,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC"}

package/dist/project/node-stack-stop.d.ts

@@ -0,0 +1,83 @@
+import type { DaemonStateStore } from '../daemon/daemon-state-store.service.js';
+import type { OrchestratorControl } from '../orchestrator/execution-contract.js';
+import type { StackExecutionPlan, StackExecutionReceipt, StackExecutionScope } from '../shared/dto/stack-execution.js';
+import type { StopAudience, StopPermit, StopRecipient } from '../cluster/stop-authority.js';
+export interface NodeStackStopRequest extends StackExecutionScope {
+    applications: boolean;
+    audience?: StopAudience;
+    keepInfrastructure?: boolean;
+}
+export interface NodeStackStopExecution extends StackExecutionScope {
+    operationId: string;
+    permit?: StopPermit;
+    keepInfrastructure?: boolean;
+}
+export interface NodeStackStopReceipt extends StackExecutionScope {
+    protocol: 1;
+    operationId: string;
+    outcome: 'stopped';
+    observedAt: string;
+    applications: StackExecutionReceipt | null;
+    removedContainers: string[];
+    keepInfrastructure?: true;
+    keptContainers?: string[];
+    authority?: {
+        clusterId: string;
+        nodeId: string;
+        epoch: string;
+    };
+}
+export interface NodeStackStopPlan extends NodeStackStopRequest {
+    protocol: 1;
+    operationId: string;
+    expiresAt: number;
+    execution: StackExecutionPlan | null;
+    definition: string;
+    containers: Array<{
+        id: string;
+        name: string;
+    }>;
+}
+export type NodeStackStopInventory = Omit<NodeStackStopPlan, 'expiresAt' | 'operationId'>;
+interface StackStopPorts {
+    execution: Pick<OrchestratorControl, 'inspectStackExecution' | 'stopStackExecution'>;
+    /** Fails closed for unbound legacy app allocations. Never guesses ownership. */
+    definition(scope: NodeStackStopRequest, cached?: boolean): Promise<{
+        runtime: StackExecutionScope | null;
+        fingerprint: string;
+    }>;
+    containers(scope: StackExecutionScope): Promise<Array<{
+        id: string;
+        name: string;
+    }>>;
+    disableResume(scope: StackExecutionScope): void;
+    retireInfrastructure(scope: StackExecutionScope): Promise<void>;
+    removeContainer(id: string): Promise<void>;
+}
+/** Durable node-side receipt. The controller never infers a stop from a lost connection. */
+export declare class NodeStackStop {
+    private readonly store;
+    private readonly ports;
+    private readonly active;
+    private recipient?;
+    private preparing;
+    constructor(store: Pick<DaemonStateStore, 'kvGetSync' | 'kvUpdateSync'>, ports: StackStopPorts);
+    setRecipient(recipient: StopRecipient): void;
+    get busy(): boolean;
+    private records;
+    private write;
+    assertMutable(scope?: StackExecutionScope): void;
+    completedStop(scope: StackExecutionScope): {
+        plan: NodeStackStopPlan;
+        receipt: NodeStackStopReceipt;
+    };
+    prepare(scope: NodeStackStopRequest): Promise<NodeStackStopPlan>;
+    inspect(scope: NodeStackStopRequest, cached?: boolean): Promise<NodeStackStopInventory>;
+    private preparePlan;
+    execute(scope: NodeStackStopExecution): Promise<NodeStackStopReceipt>;
+    private executeNow;
+    private verifyStopped;
+}
+export declare function stackDefinitionFingerprint(value: unknown): string;
+export {};
+//# sourceMappingURL=node-stack-stop.d.ts.map

package/dist/project/node-stack-stop.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"node-stack-stop.d.ts","sourceRoot":"","sources":["../../src/project/node-stack-stop.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,yCAAyC,CAAC;AAChF,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,uCAAuC,CAAC;AACjF,OAAO,KAAK,EAAE,kBAAkB,EAAE,qBAAqB,EAAE,mBAAmB,EAAE,MAAM,kCAAkC,CAAC;AAEvH,OAAO,KAAK,EAAE,YAAY,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,8BAA8B,CAAC;AAE5F,MAAM,WAAW,oBAAqB,SAAQ,mBAAmB;IAAG,YAAY,EAAE,OAAO,CAAC;IAAC,QAAQ,CAAC,EAAE,YAAY,CAAC;IAAC,kBAAkB,CAAC,EAAE,OAAO,CAAA;CAAE;AAClJ,MAAM,WAAW,sBAAuB,SAAQ,mBAAmB;IAAG,WAAW,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,UAAU,CAAC;IAAC,kBAAkB,CAAC,EAAE,OAAO,CAAA;CAAE;AAC9I,MAAM,WAAW,oBAAqB,SAAQ,mBAAmB;IAC/D,QAAQ,EAAE,CAAC,CAAC;IACZ,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,SAAS,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,qBAAqB,GAAG,IAAI,CAAC;IAC3C,iBAAiB,EAAE,MAAM,EAAE,CAAC;IAC5B,kBAAkB,CAAC,EAAE,IAAI,CAAC;IAC1B,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;IAC1B,SAAS,CAAC,EAAE;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;CAClE;AACD,MAAM,WAAW,iBAAkB,SAAQ,oBAAoB;IAC7D,QAAQ,EAAE,CAAC,CAAC;IACZ,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,kBAAkB,GAAG,IAAI,CAAC;IACrC,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,KAAK,CAAC;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CACjD;AACD,MAAM,MAAM,sBAAsB,GAAG,IAAI,CAAC,iBAAiB,EAAE,WAAW,GAAG,aAAa,CAAC,CAAC;AAQ1F,UAAU,cAAc;IACtB,SAAS,EAAE,IAAI,CAAC,mBAAmB,EAAE,uBAAuB,GAAG,oBAAoB,CAAC,CAAC;IACrF,gFAAgF;IAChF,UAAU,CAAC,KAAK,EAAE,oBAAoB,EAAE,MAAM,CAAC,EAAE,OAAO,GAAG,OAAO,CAAC;QAAE,OAAO,EAAE,mBAAmB,GAAG,IAAI,CAAC;QAAC,WAAW,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACjI,UAAU,CAAC,KAAK,EAAE,mBAAmB,GAAG,OAAO,CAAC,KAAK,CAAC;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC,CAAC;IACrF,aAAa,CAAC,KAAK,EAAE,mBAAmB,GAAG,IAAI,CAAC;IAChD,oBAAoB,CAAC,KAAK,EAAE,mBAAmB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAChE,eAAe,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC5C;AAID,4FAA4F;AAC5F,qBAAa,aAAa;IAIZ,OAAO,CAAC,QAAQ,CAAC,KAAK;IAAwD,OAAO,CAAC,QAAQ,CAAC,KAAK;IAHhH,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAyI;IAChK,OAAO,CAAC,SAAS,CAAC,CAAgB;IAClC,OAAO,CAAC,SAAS,CAAK;IACtB,YAA6B,KAAK,EAAE,IAAI,CAAC,gBAAgB,EAAE,WAAW,GAAG,cAAc,CAAC,EAAmB,KAAK,EAAE,cAAc,EAAI;IACpI,YAAY,CAAC,SAAS,EAAE,aAAa,GAAG,IAAI,CAAgC;IAC5E,IAAI,IAAI,IAAI,OAAO,CAAuD;IAE1E,OAAO,CAAC,OAAO;IASf,OAAO,CAAC,KAAK;IAQb,aAAa,CAAC,KAAK,CAAC,EAAE,mBAAmB,GAAG,IAAI,CAS/C;IACD,aAAa,CAAC,KAAK,EAAE,mBAAmB,GAAG;QAAE,IAAI,EAAE,iBAAiB,CAAC;QAAC,OAAO,EAAE,oBAAoB,CAAA;KAAE,CAOpG;IACK,OAAO,CAAC,KAAK,EAAE,oBAAoB,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAIrE;IACK,OAAO,CAAC,KAAK,EAAE,oBAAoB,EAAE,MAAM,UAAO,GAAG,OAAO,CAAC,sBAAsB,CAAC,CAiBzF;YACa,WAAW;IAczB,OAAO,CAAC,KAAK,EAAE,sBAAsB,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAYpE;YACa,UAAU;YAsEV,aAAa;CAgB5B;AAED,wBAAgB,0BAA0B,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAEjE"}