@osva-ai/cli 1.1.0 → 1.1.2

package/dist/setup/run-onboarding.js

@@ -0,0 +1,273 @@
+import { redactSecrets } from "../doctor/redact.js";
+import { parseIdentityBootstrapSetupToken, parseWorkspaceBootstrapOutput, redactBootstrapSubprocessOutput, } from "./bootstrap-capture.js";
+import { assertComposeSuccess, buildComposeSpawnEnv, ComposeExecError, runComposeCommand, } from "./compose-exec.js";
+import { classifyAdministratorBootstrapPhase, parseInstallationStatusJson, } from "./installation-status.js";
+import { writeAcceptanceBootstrapKeyFile, writeAcceptanceSetupTokenFile, } from "./acceptance-install.js";
+export const COMPOSE_ONBOARDING_TIMEOUT_MS = 300_000;
+export async function runSetupOnboarding(input) {
+    const processEnv = input.processEnv ?? process.env;
+    const checks = [];
+    const consoleUrl = `http://127.0.0.1:${String(input.options.consolePort)}`;
+    let setupTokenForOperator;
+    let administratorPhase;
+    if (!(await probeConsoleDistribution(input.execCtx, input.spawn))) {
+        checks.push(failCheck("console_distribution", "The pinned OSVA image does not include Console assets (apps/console).", "Re-run `osva setup --yes` after upgrading OSVA_IMAGE to a release that packages Console, or install a matching CLI bundle."));
+        checks.push(skipCheck("console_ready", "Skipped Console readiness because Console is unavailable in the OSVA image."));
+        checks.push(skipCheck("administrator_bootstrapped", "Skipped administrator bootstrap because Console distribution is unavailable."));
+        return { checks, consoleUrl, setupTokenForOperator, administratorPhase };
+    }
+    checks.push(passCheck("console_distribution", "Console server assets are present in the pinned OSVA image."));
+    if (input.mutateInstallation) {
+        startConsoleService(input.execCtx, input.spawn);
+    }
+    try {
+        await waitForConsoleReady(input.fetch, consoleUrl);
+        checks.push(passCheck("console_ready", `Console is ready at ${consoleUrl}.`));
+    }
+    catch (error) {
+        checks.push(failCheck("console_ready", redactSecrets(error instanceof Error
+            ? error.message
+            : "Console did not become ready."), "Inspect `docker compose --project-directory <install-dir> logs console` and retry `osva setup`."));
+        return { checks, consoleUrl, setupTokenForOperator, administratorPhase };
+    }
+    let status;
+    try {
+        status = await readInstallationStatus(input.execCtx, input.spawn);
+    }
+    catch (error) {
+        checks.push(failCheck("administrator_bootstrapped", redactSecrets(error instanceof Error
+            ? error.message
+            : "Could not read installation status."), "Ensure PostgreSQL is healthy, then retry `osva setup`."));
+        return { checks, consoleUrl, setupTokenForOperator, administratorPhase };
+    }
+    administratorPhase = classifyAdministratorBootstrapPhase(status);
+    if (!input.mutateInstallation) {
+        checks.push(...reportReadOnlyAdministratorState(administratorPhase, consoleUrl));
+        return { checks, consoleUrl, setupTokenForOperator, administratorPhase };
+    }
+    if (administratorPhase === "administrator_ready") {
+        checks.push(passCheck("administrator_bootstrapped", "A human administrator is already linked to this installation."));
+        checks.push(passCheck("administrator_setup_complete", "Initial administrator password setup appears complete."));
+        checks.push(passCheck("installation_complete", `Installation complete. Open ${consoleUrl}, sign in, and continue Console onboarding.`));
+        checks.push(skipCheck("first_agent_run_succeeded", "First agent execution is not verified by the installer; complete Agent Studio onboarding in the Console."));
+        return { checks, consoleUrl, setupTokenForOperator, administratorPhase };
+    }
+    if (administratorPhase === "administrator_pending_password_setup") {
+        checks.push(passCheck("administrator_bootstrapped", "Human administrator exists but password setup is still pending."));
+        checks.push(skipCheck("administrator_setup_complete", `Complete password setup at ${consoleUrl}/setup before signing in.`));
+        checks.push(skipCheck("installation_complete", "Installation is not complete until administrator password setup and sign-in succeed."));
+        return { checks, consoleUrl, setupTokenForOperator, administratorPhase };
+    }
+    if (administratorPhase === "multiple_unlinked_workspaces") {
+        checks.push(warnCheck("administrator_bootstrapped", "Multiple workspaces exist without linked human administrators.", "Run identity bootstrap manually with explicit --workspace-id values for each workspace, or consolidate workspaces before retrying `osva setup`."));
+        checks.push(skipCheck("installation_complete", "Installation is not complete until each workspace has a linked human administrator."));
+        return { checks, consoleUrl, setupTokenForOperator, administratorPhase };
+    }
+    if (status.apiKeyCount === 0) {
+        try {
+            await runWorkspaceBootstrapJob(input.execCtx, input.spawn, input.options, processEnv);
+            status = await readInstallationStatus(input.execCtx, input.spawn);
+            administratorPhase = classifyAdministratorBootstrapPhase(status);
+        }
+        catch (error) {
+            checks.push(failCheck("administrator_bootstrapped", redactSecrets(error instanceof Error
+                ? error.message
+                : "Workspace bootstrap failed."), "Inspect bootstrap job logs and retry `osva setup`."));
+            return { checks, consoleUrl, setupTokenForOperator, administratorPhase };
+        }
+    }
+    if (administratorPhase === "fresh_installation" ||
+        administratorPhase === "workspace_without_human_administrator" ||
+        administratorPhase === "ambiguous_workspace_state") {
+        if (input.options.adminEmail.trim().length === 0) {
+            checks.push(failCheck("administrator_bootstrapped", "Administrator email is required for initial human identity bootstrap.", "Re-run with --admin-email owner@example.com (and optional --admin-name / --organization-name)."));
+            checks.push(skipCheck("installation_complete", "Installation is not complete until administrator bootstrap succeeds."));
+            return { checks, consoleUrl, setupTokenForOperator, administratorPhase };
+        }
+        try {
+            const token = await runIdentityBootstrapJob(input.execCtx, input.spawn, input.options, status);
+            setupTokenForOperator = token;
+            if (token !== undefined) {
+                await writeAcceptanceSetupTokenFile({ processEnv, token });
+            }
+            checks.push(passCheck("administrator_bootstrapped", `Initial human administrator ${input.options.adminEmail} was linked to the workspace.`));
+            if (token !== undefined) {
+                checks.push(skipCheck("administrator_setup_complete", `Open ${consoleUrl}/setup and enter the one-time setup token printed below (not stored in installation files or JSON output).`));
+            }
+            checks.push(skipCheck("installation_complete", "Installation is not complete until password setup and sign-in succeed in the Console."));
+            checks.push(skipCheck("first_agent_run_succeeded", "First agent execution is not verified by the installer."));
+        }
+        catch (error) {
+            checks.push(failCheck("administrator_bootstrapped", redactSecrets(error instanceof Error
+                ? error.message
+                : "Human identity bootstrap failed."), "Resolve the reported issue and retry `osva setup` (existing organizations are not reset)."));
+        }
+    }
+    return { checks, consoleUrl, setupTokenForOperator, administratorPhase };
+}
+function reportReadOnlyAdministratorState(phase, consoleUrl) {
+    if (phase === "administrator_ready") {
+        return [
+            passCheck("administrator_bootstrapped", "Human administrator is configured."),
+            passCheck("administrator_setup_complete", "Initial administrator password setup appears complete."),
+            skipCheck("installation_complete", `Platform is operational. Open ${consoleUrl} to sign in (re-run with --yes to reconcile services).`),
+        ];
+    }
+    if (phase === "administrator_pending_password_setup") {
+        return [
+            passCheck("administrator_bootstrapped", "Human administrator exists; password setup is pending."),
+            skipCheck("administrator_setup_complete", `Complete setup at ${consoleUrl}/setup (re-run with --yes to reconcile services).`),
+        ];
+    }
+    return [
+        skipCheck("administrator_bootstrapped", "Human administrator bootstrap is incomplete. Re-run `osva setup --yes` with --admin-email to continue."),
+    ];
+}
+async function probeConsoleDistribution(ctx, spawn) {
+    const script = "try{require('fs').accessSync('/app/apps/console/dist/server/main.js');process.exit(0)}catch{process.exit(2)}";
+    const result = runComposeCommand(ctx, [
+        "run",
+        "--rm",
+        "--no-deps",
+        "-T",
+        "--entrypoint",
+        "node",
+        "web",
+        "-e",
+        script,
+    ], {
+        spawn,
+        timeoutMs: COMPOSE_ONBOARDING_TIMEOUT_MS,
+        processEnv: buildComposeSpawnEnv(ctx),
+    });
+    return result.status === 0;
+}
+function startConsoleService(ctx, spawn) {
+    const result = runComposeCommand(ctx, ["up", "-d", "--no-build", "--wait", "console"], {
+        spawn,
+        timeoutMs: COMPOSE_ONBOARDING_TIMEOUT_MS,
+        processEnv: buildComposeSpawnEnv(ctx),
+    });
+    assertComposeSuccess(result, "Starting Console");
+}
+async function waitForConsoleReady(fetchImpl, consoleUrl) {
+    let lastStatus;
+    for (let attempt = 0; attempt < 45; attempt += 1) {
+        try {
+            const response = await fetchImpl(`${consoleUrl}/`);
+            lastStatus = response.status;
+            if (response.ok) {
+                return;
+            }
+        }
+        catch {
+            // retry
+        }
+        await delay(2_000);
+    }
+    throw new ComposeExecError("command_failed", `Timed out waiting for Console at ${consoleUrl}${lastStatus === undefined ? "" : ` (last status ${String(lastStatus)})`}.`);
+}
+async function readInstallationStatus(ctx, spawn) {
+    const result = runComposeCommand(ctx, ["--profile", "bootstrap", "run", "--rm", "-T", "installation-status"], {
+        spawn,
+        timeoutMs: COMPOSE_ONBOARDING_TIMEOUT_MS,
+        processEnv: buildComposeSpawnEnv(ctx),
+    });
+    assertComposeSuccess(result, "Installation status probe");
+    return parseInstallationStatusJson(result.stdout);
+}
+async function runWorkspaceBootstrapJob(ctx, spawn, options, processEnv) {
+    const args = [
+        "--profile",
+        "bootstrap",
+        "run",
+        "--rm",
+        "-T",
+        "-e",
+        `OSVA_BOOTSTRAP_WORKSPACE_NAME=${options.workspaceName}`,
+        "bootstrap",
+    ];
+    const result = runComposeCommand(ctx, args, {
+        spawn,
+        timeoutMs: COMPOSE_ONBOARDING_TIMEOUT_MS,
+        processEnv: buildComposeSpawnEnv(ctx),
+    });
+    if (result.status !== 0) {
+        const detail = redactBootstrapSubprocessOutput(result.stderr || result.stdout);
+        throw new ComposeExecError("command_failed", detail.length > 0 ? detail : "Workspace bootstrap failed.");
+    }
+    const parsed = parseWorkspaceBootstrapOutput(result.stdout);
+    if (!parsed.alreadyCompleted && parsed.workspaceId === undefined) {
+        throw new ComposeExecError("command_failed", "Workspace bootstrap completed without a workspace id.");
+    }
+    if (parsed.apiKey !== undefined) {
+        await writeAcceptanceBootstrapKeyFile({
+            processEnv,
+            apiKey: parsed.apiKey,
+        });
+    }
+}
+async function runIdentityBootstrapJob(ctx, spawn, options, status) {
+    const identityArgs = [
+        "--profile",
+        "bootstrap",
+        "run",
+        "--rm",
+        "-T",
+        "identity-bootstrap",
+        "--",
+        "--email",
+        options.adminEmail,
+        "--name",
+        options.adminName,
+        "--organization-name",
+        options.organizationName,
+    ];
+    if (status.unlinkedWorkspaceIds.length === 1) {
+        identityArgs.push("--workspace-id", status.unlinkedWorkspaceIds[0]);
+    }
+    else if (status.unlinkedWorkspaceIds.length > 1) {
+        identityArgs.push("--all-unlinked-workspaces");
+    }
+    else if (status.workspaceCount === 1) {
+        const workspaceBootstrap = await readLatestWorkspaceId(ctx, spawn);
+        if (workspaceBootstrap !== undefined) {
+            identityArgs.push("--workspace-id", workspaceBootstrap);
+        }
+    }
+    const result = runComposeCommand(ctx, identityArgs, {
+        spawn,
+        timeoutMs: COMPOSE_ONBOARDING_TIMEOUT_MS,
+        processEnv: buildComposeSpawnEnv(ctx),
+    });
+    if (result.status !== 0) {
+        const detail = redactBootstrapSubprocessOutput(result.stderr || result.stdout);
+        throw new ComposeExecError("command_failed", detail.length > 0 ? detail : "Human identity bootstrap failed.");
+    }
+    return parseIdentityBootstrapSetupToken(result.stdout);
+}
+async function readLatestWorkspaceId(ctx, spawn) {
+    const status = await readInstallationStatus(ctx, spawn);
+    if (status.unlinkedWorkspaceIds.length === 1) {
+        return status.unlinkedWorkspaceIds[0];
+    }
+    return status.unlinkedWorkspaceIds[0];
+}
+function delay(ms) {
+    return new Promise((resolve) => {
+        setTimeout(resolve, ms);
+    });
+}
+function passCheck(id, message) {
+    return { id, status: "PASS", message };
+}
+function warnCheck(id, message, remediation) {
+    return { id, status: "WARN", message, remediation };
+}
+function failCheck(id, message, remediation) {
+    return { id, status: "FAIL", message, remediation };
+}
+function skipCheck(id, message) {
+    return { id, status: "SKIP", message };
+}
+//# sourceMappingURL=run-onboarding.js.map

package/dist/setup/run-onboarding.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"run-onboarding.js","sourceRoot":"","sources":["../../src/setup/run-onboarding.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,EACL,gCAAgC,EAChC,6BAA6B,EAC7B,+BAA+B,GAChC,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACL,oBAAoB,EACpB,oBAAoB,EACpB,gBAAgB,EAChB,iBAAiB,GAElB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,mCAAmC,EACnC,2BAA2B,GAG5B,MAAM,0BAA0B,CAAC;AAElC,OAAO,EACL,+BAA+B,EAC/B,6BAA6B,GAC9B,MAAM,yBAAyB,CAAC;AAGjC,MAAM,CAAC,MAAM,6BAA6B,GAAG,OAAO,CAAC;AAUrD,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,KAOxC;IACC,MAAM,UAAU,GAAG,KAAK,CAAC,UAAU,IAAI,OAAO,CAAC,GAAG,CAAC;IACnD,MAAM,MAAM,GAAkB,EAAE,CAAC;IACjC,MAAM,UAAU,GAAG,oBAAoB,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,CAAC;IAC3E,IAAI,qBAAyC,CAAC;IAC9C,IAAI,kBAA2D,CAAC;IAEhE,IAAI,CAAC,CAAC,MAAM,wBAAwB,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;QAClE,MAAM,CAAC,IAAI,CACT,SAAS,CACP,sBAAsB,EACtB,uEAAuE,EACvE,4HAA4H,CAC7H,CACF,CAAC;QACF,MAAM,CAAC,IAAI,CACT,SAAS,CACP,eAAe,EACf,6EAA6E,CAC9E,CACF,CAAC;QACF,MAAM,CAAC,IAAI,CACT,SAAS,CACP,4BAA4B,EAC5B,8EAA8E,CAC/E,CACF,CAAC;QACF,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,qBAAqB,EAAE,kBAAkB,EAAE,CAAC;IAC3E,CAAC;IAED,MAAM,CAAC,IAAI,CACT,SAAS,CACP,sBAAsB,EACtB,6DAA6D,CAC9D,CACF,CAAC;IAEF,IAAI,KAAK,CAAC,kBAAkB,EAAE,CAAC;QAC7B,mBAAmB,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;IAClD,CAAC;IAED,IAAI,CAAC;QACH,MAAM,mBAAmB,CAAC,KAAK,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC;QACnD,MAAM,CAAC,IAAI,CACT,SAAS,CAAC,eAAe,EAAE,uBAAuB,UAAU,GAAG,CAAC,CACjE,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,CAAC,IAAI,CACT,SAAS,CACP,eAAe,EACf,aAAa,CACX,KAAK,YAAY,KAAK;YACpB,CAAC,CAAC,KAAK,CAAC,OAAO;YACf,CAAC,CAAC,+BAA+B,CACpC,EACD,iGAAiG,CAClG,CACF,CAAC;QACF,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,qBAAqB,EAAE,kBAAkB,EAAE,CAAC;IAC3E,CAAC;IAED,IAAI,MAAkC,CAAC;IACvC,IAAI,CAAC;QACH,MAAM,GAAG,MAAM,sBAAsB,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;IACpE,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,CAAC,IAAI,CACT,SAAS,CACP,4BAA4B,EAC5B,aAAa,CACX,KAAK,YAAY,KAAK;YACpB,CAAC,CAAC,KAAK,CAAC,OAAO;YACf,CAAC,CAAC,qCAAqC,CAC1C,EACD,wDAAwD,CACzD,CACF,CAAC;QACF,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,qBAAqB,EAAE,kBAAkB,EAAE,CAAC;IAC3E,CAAC;IAED,kBAAkB,GAAG,mCAAmC,CAAC,MAAM,CAAC,CAAC;IAEjE,IAAI,CAAC,KAAK,CAAC,kBAAkB,EAAE,CAAC;QAC9B,MAAM,CAAC,IAAI,CACT,GAAG,gCAAgC,CAAC,kBAAkB,EAAE,UAAU,CAAC,CACpE,CAAC;QACF,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,qBAAqB,EAAE,kBAAkB,EAAE,CAAC;IAC3E,CAAC;IAED,IAAI,kBAAkB,KAAK,qBAAqB,EAAE,CAAC;QACjD,MAAM,CAAC,IAAI,CACT,SAAS,CACP,4BAA4B,EAC5B,+DAA+D,CAChE,CACF,CAAC;QACF,MAAM,CAAC,IAAI,CACT,SAAS,CACP,8BAA8B,EAC9B,wDAAwD,CACzD,CACF,CAAC;QACF,MAAM,CAAC,IAAI,CACT,SAAS,CACP,uBAAuB,EACvB,+BAA+B,UAAU,6CAA6C,CACvF,CACF,CAAC;QACF,MAAM,CAAC,IAAI,CACT,SAAS,CACP,2BAA2B,EAC3B,0GAA0G,CAC3G,CACF,CAAC;QACF,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,qBAAqB,EAAE,kBAAkB,EAAE,CAAC;IAC3E,CAAC;IAED,IAAI,kBAAkB,KAAK,sCAAsC,EAAE,CAAC;QAClE,MAAM,CAAC,IAAI,CACT,SAAS,CACP,4BAA4B,EAC5B,iEAAiE,CAClE,CACF,CAAC;QACF,MAAM,CAAC,IAAI,CACT,SAAS,CACP,8BAA8B,EAC9B,8BAA8B,UAAU,2BAA2B,CACpE,CACF,CAAC;QACF,MAAM,CAAC,IAAI,CACT,SAAS,CACP,uBAAuB,EACvB,sFAAsF,CACvF,CACF,CAAC;QACF,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,qBAAqB,EAAE,kBAAkB,EAAE,CAAC;IAC3E,CAAC;IAED,IAAI,kBAAkB,KAAK,8BAA8B,EAAE,CAAC;QAC1D,MAAM,CAAC,IAAI,CACT,SAAS,CACP,4BAA4B,EAC5B,gEAAgE,EAChE,iJAAiJ,CAClJ,CACF,CAAC;QACF,MAAM,CAAC,IAAI,CACT,SAAS,CACP,uBAAuB,EACvB,qFAAqF,CACtF,CACF,CAAC;QACF,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,qBAAqB,EAAE,kBAAkB,EAAE,CAAC;IAC3E,CAAC;IAED,IAAI,MAAM,CAAC,WAAW,KAAK,CAAC,EAAE,CAAC;QAC7B,IAAI,CAAC;YACH,MAAM,wBAAwB,CAC5B,KAAK,CAAC,OAAO,EACb,KAAK,CAAC,KAAK,EACX,KAAK,CAAC,OAAO,EACb,UAAU,CACX,CAAC;YACF,MAAM,GAAG,MAAM,sBAAsB,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;YAClE,kBAAkB,GAAG,mCAAmC,CAAC,MAAM,CAAC,CAAC;QACnE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,IAAI,CACT,SAAS,CACP,4BAA4B,EAC5B,aAAa,CACX,KAAK,YAAY,KAAK;gBACpB,CAAC,CAAC,KAAK,CAAC,OAAO;gBACf,CAAC,CAAC,6BAA6B,CAClC,EACD,oDAAoD,CACrD,CACF,CAAC;YACF,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,qBAAqB,EAAE,kBAAkB,EAAE,CAAC;QAC3E,CAAC;IACH,CAAC;IAED,IACE,kBAAkB,KAAK,oBAAoB;QAC3C,kBAAkB,KAAK,uCAAuC;QAC9D,kBAAkB,KAAK,2BAA2B,EAClD,CAAC;QACD,IAAI,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACjD,MAAM,CAAC,IAAI,CACT,SAAS,CACP,4BAA4B,EAC5B,uEAAuE,EACvE,gGAAgG,CACjG,CACF,CAAC;YACF,MAAM,CAAC,IAAI,CACT,SAAS,CACP,uBAAuB,EACvB,sEAAsE,CACvE,CACF,CAAC;YACF,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,qBAAqB,EAAE,kBAAkB,EAAE,CAAC;QAC3E,CAAC;QAED,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,uBAAuB,CACzC,KAAK,CAAC,OAAO,EACb,KAAK,CAAC,KAAK,EACX,KAAK,CAAC,OAAO,EACb,MAAM,CACP,CAAC;YACF,qBAAqB,GAAG,KAAK,CAAC;YAC9B,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;gBACxB,MAAM,6BAA6B,CAAC,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,CAAC;YAC7D,CAAC;YACD,MAAM,CAAC,IAAI,CACT,SAAS,CACP,4BAA4B,EAC5B,+BAA+B,KAAK,CAAC,OAAO,CAAC,UAAU,+BAA+B,CACvF,CACF,CAAC;YACF,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;gBACxB,MAAM,CAAC,IAAI,CACT,SAAS,CACP,8BAA8B,EAC9B,QAAQ,UAAU,4GAA4G,CAC/H,CACF,CAAC;YACJ,CAAC;YACD,MAAM,CAAC,IAAI,CACT,SAAS,CACP,uBAAuB,EACvB,uFAAuF,CACxF,CACF,CAAC;YACF,MAAM,CAAC,IAAI,CACT,SAAS,CACP,2BAA2B,EAC3B,yDAAyD,CAC1D,CACF,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,IAAI,CACT,SAAS,CACP,4BAA4B,EAC5B,aAAa,CACX,KAAK,YAAY,KAAK;gBACpB,CAAC,CAAC,KAAK,CAAC,OAAO;gBACf,CAAC,CAAC,kCAAkC,CACvC,EACD,2FAA2F,CAC5F,CACF,CAAC;QACJ,CAAC;IACH,CAAC;IAED,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,qBAAqB,EAAE,kBAAkB,EAAE,CAAC;AAC3E,CAAC;AAED,SAAS,gCAAgC,CACvC,KAAkC,EAClC,UAAkB;IAElB,IAAI,KAAK,KAAK,qBAAqB,EAAE,CAAC;QACpC,OAAO;YACL,SAAS,CACP,4BAA4B,EAC5B,oCAAoC,CACrC;YACD,SAAS,CACP,8BAA8B,EAC9B,wDAAwD,CACzD;YACD,SAAS,CACP,uBAAuB,EACvB,iCAAiC,UAAU,wDAAwD,CACpG;SACF,CAAC;IACJ,CAAC;IACD,IAAI,KAAK,KAAK,sCAAsC,EAAE,CAAC;QACrD,OAAO;YACL,SAAS,CACP,4BAA4B,EAC5B,wDAAwD,CACzD;YACD,SAAS,CACP,8BAA8B,EAC9B,qBAAqB,UAAU,mDAAmD,CACnF;SACF,CAAC;IACJ,CAAC;IACD,OAAO;QACL,SAAS,CACP,4BAA4B,EAC5B,wGAAwG,CACzG;KACF,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,wBAAwB,CACrC,GAAuB,EACvB,KAA+B;IAE/B,MAAM,MAAM,GACV,8GAA8G,CAAC;IACjH,MAAM,MAAM,GAAG,iBAAiB,CAC9B,GAAG,EACH;QACE,KAAK;QACL,MAAM;QACN,WAAW;QACX,IAAI;QACJ,cAAc;QACd,MAAM;QACN,KAAK;QACL,IAAI;QACJ,MAAM;KACP,EACD;QACE,KAAK;QACL,SAAS,EAAE,6BAA6B;QACxC,UAAU,EAAE,oBAAoB,CAAC,GAAG,CAAC;KACtC,CACF,CAAC;IACF,OAAO,MAAM,CAAC,MAAM,KAAK,CAAC,CAAC;AAC7B,CAAC;AAED,SAAS,mBAAmB,CAC1B,GAAuB,EACvB,KAA+B;IAE/B,MAAM,MAAM,GAAG,iBAAiB,CAC9B,GAAG,EACH,CAAC,IAAI,EAAE,IAAI,EAAE,YAAY,EAAE,QAAQ,EAAE,SAAS,CAAC,EAC/C;QACE,KAAK;QACL,SAAS,EAAE,6BAA6B;QACxC,UAAU,EAAE,oBAAoB,CAAC,GAAG,CAAC;KACtC,CACF,CAAC;IACF,oBAAoB,CAAC,MAAM,EAAE,kBAAkB,CAAC,CAAC;AACnD,CAAC;AAED,KAAK,UAAU,mBAAmB,CAChC,SAAuB,EACvB,UAAkB;IAElB,IAAI,UAA8B,CAAC;IACnC,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,EAAE,EAAE,OAAO,IAAI,CAAC,EAAE,CAAC;QACjD,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,GAAG,UAAU,GAAG,CAAC,CAAC;YACnD,UAAU,GAAG,QAAQ,CAAC,MAAM,CAAC;YAC7B,IAAI,QAAQ,CAAC,EAAE,EAAE,CAAC;gBAChB,OAAO;YACT,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,QAAQ;QACV,CAAC;QACD,MAAM,KAAK,CAAC,KAAK,CAAC,CAAC;IACrB,CAAC;IACD,MAAM,IAAI,gBAAgB,CACxB,gBAAgB,EAChB,oCAAoC,UAAU,GAAG,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,iBAAiB,MAAM,CAAC,UAAU,CAAC,GAAG,GAAG,CAC3H,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,sBAAsB,CACnC,GAAuB,EACvB,KAA+B;IAE/B,MAAM,MAAM,GAAG,iBAAiB,CAC9B,GAAG,EACH,CAAC,WAAW,EAAE,WAAW,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,qBAAqB,CAAC,EACtE;QACE,KAAK;QACL,SAAS,EAAE,6BAA6B;QACxC,UAAU,EAAE,oBAAoB,CAAC,GAAG,CAAC;KACtC,CACF,CAAC;IACF,oBAAoB,CAAC,MAAM,EAAE,2BAA2B,CAAC,CAAC;IAC1D,OAAO,2BAA2B,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;AACpD,CAAC;AAED,KAAK,UAAU,wBAAwB,CACrC,GAAuB,EACvB,KAA+B,EAC/B,OAAqB,EACrB,UAA6B;IAE7B,MAAM,IAAI,GAAG;QACX,WAAW;QACX,WAAW;QACX,KAAK;QACL,MAAM;QACN,IAAI;QACJ,IAAI;QACJ,iCAAiC,OAAO,CAAC,aAAa,EAAE;QACxD,WAAW;KACZ,CAAC;IACF,MAAM,MAAM,GAAG,iBAAiB,CAAC,GAAG,EAAE,IAAI,EAAE;QAC1C,KAAK;QACL,SAAS,EAAE,6BAA6B;QACxC,UAAU,EAAE,oBAAoB,CAAC,GAAG,CAAC;KACtC,CAAC,CAAC;IACH,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxB,MAAM,MAAM,GAAG,+BAA+B,CAC5C,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,CAC/B,CAAC;QACF,MAAM,IAAI,gBAAgB,CACxB,gBAAgB,EAChB,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,6BAA6B,CAC3D,CAAC;IACJ,CAAC;IACD,MAAM,MAAM,GAAG,6BAA6B,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC5D,IAAI,CAAC,MAAM,CAAC,gBAAgB,IAAI,MAAM,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;QACjE,MAAM,IAAI,gBAAgB,CACxB,gBAAgB,EAChB,uDAAuD,CACxD,CAAC;IACJ,CAAC;IACD,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QAChC,MAAM,+BAA+B,CAAC;YACpC,UAAU;YACV,MAAM,EAAE,MAAM,CAAC,MAAM;SACtB,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED,KAAK,UAAU,uBAAuB,CACpC,GAAuB,EACvB,KAA+B,EAC/B,OAAqB,EACrB,MAAkC;IAElC,MAAM,YAAY,GAAG;QACnB,WAAW;QACX,WAAW;QACX,KAAK;QACL,MAAM;QACN,IAAI;QACJ,oBAAoB;QACpB,IAAI;QACJ,SAAS;QACT,OAAO,CAAC,UAAU;QAClB,QAAQ;QACR,OAAO,CAAC,SAAS;QACjB,qBAAqB;QACrB,OAAO,CAAC,gBAAgB;KACzB,CAAC;IAEF,IAAI,MAAM,CAAC,oBAAoB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC7C,YAAY,CAAC,IAAI,CACf,gBAAgB,EAChB,MAAM,CAAC,oBAAoB,CAAC,CAAC,CAAW,CACzC,CAAC;IACJ,CAAC;SAAM,IAAI,MAAM,CAAC,oBAAoB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAClD,YAAY,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC;IACjD,CAAC;SAAM,IAAI,MAAM,CAAC,cAAc,KAAK,CAAC,EAAE,CAAC;QACvC,MAAM,kBAAkB,GAAG,MAAM,qBAAqB,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QACnE,IAAI,kBAAkB,KAAK,SAAS,EAAE,CAAC;YACrC,YAAY,CAAC,IAAI,CAAC,gBAAgB,EAAE,kBAAkB,CAAC,CAAC;QAC1D,CAAC;IACH,CAAC;IAED,MAAM,MAAM,GAAG,iBAAiB,CAAC,GAAG,EAAE,YAAY,EAAE;QAClD,KAAK;QACL,SAAS,EAAE,6BAA6B;QACxC,UAAU,EAAE,oBAAoB,CAAC,GAAG,CAAC;KACtC,CAAC,CAAC;IACH,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxB,MAAM,MAAM,GAAG,+BAA+B,CAC5C,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,CAC/B,CAAC;QACF,MAAM,IAAI,gBAAgB,CACxB,gBAAgB,EAChB,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,kCAAkC,CAChE,CAAC;IACJ,CAAC;IACD,OAAO,gCAAgC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;AACzD,CAAC;AAED,KAAK,UAAU,qBAAqB,CAClC,GAAuB,EACvB,KAA+B;IAE/B,MAAM,MAAM,GAAG,MAAM,sBAAsB,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IACxD,IAAI,MAAM,CAAC,oBAAoB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC7C,OAAO,MAAM,CAAC,oBAAoB,CAAC,CAAC,CAAC,CAAC;IACxC,CAAC;IACD,OAAO,MAAM,CAAC,oBAAoB,CAAC,CAAC,CAAC,CAAC;AACxC,CAAC;AAED,SAAS,KAAK,CAAC,EAAU;IACvB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;IAC1B,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,SAAS,CAAC,EAAU,EAAE,OAAe;IAC5C,OAAO,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;AACzC,CAAC;AAED,SAAS,SAAS,CAChB,EAAU,EACV,OAAe,EACf,WAAmB;IAEnB,OAAO,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC;AACtD,CAAC;AAED,SAAS,SAAS,CAChB,EAAU,EACV,OAAe,EACf,WAAmB;IAEnB,OAAO,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC;AACtD,CAAC;AAED,SAAS,SAAS,CAAC,EAAU,EAAE,OAAe;IAC5C,OAAO,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;AACzC,CAAC"}

package/dist/setup/run-provision.d.ts

@@ -0,0 +1,17 @@
+import type { DoctorCheck } from "../doctor/types.js";
+import type { ProbeSpawnFn } from "./probe-spawn.js";
+import type { SetupOptions } from "./read-options.js";
+export declare const COMPOSE_CONFIG_TIMEOUT_MS = 120000;
+export declare const COMPOSE_PULL_TIMEOUT_MS = 900000;
+export declare const COMPOSE_UP_TIMEOUT_MS = 900000;
+export interface ProvisionDependencies {
+    readonly spawn?: ProbeSpawnFn;
+    readonly processEnv?: NodeJS.ProcessEnv;
+    readonly fetch?: typeof fetch;
+}
+export interface ProvisionResult {
+    readonly checks: readonly DoctorCheck[];
+    readonly setupTokenForOperator?: string;
+}
+export declare function runSetupProvision(options: SetupOptions, deps?: ProvisionDependencies): Promise<ProvisionResult>;
+//# sourceMappingURL=run-provision.d.ts.map

package/dist/setup/run-provision.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"run-provision.d.ts","sourceRoot":"","sources":["../../src/setup/run-provision.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAetD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAErD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAEtD,eAAO,MAAM,yBAAyB,SAAU,CAAC;AACjD,eAAO,MAAM,uBAAuB,SAAU,CAAC;AAC/C,eAAO,MAAM,qBAAqB,SAAU,CAAC;AAW7C,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,KAAK,CAAC,EAAE,YAAY,CAAC;IAC9B,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;IACxC,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,KAAK,CAAC;CAC/B;AAED,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,MAAM,EAAE,SAAS,WAAW,EAAE,CAAC;IACxC,QAAQ,CAAC,qBAAqB,CAAC,EAAE,MAAM,CAAC;CACzC;AAED,wBAAsB,iBAAiB,CACrC,OAAO,EAAE,YAAY,EACrB,IAAI,GAAE,qBAA0B,GAC/B,OAAO,CAAC,eAAe,CAAC,CAsK1B"}

package/dist/setup/run-provision.js

@@ -0,0 +1,224 @@
+import { redactSecrets } from "../doctor/redact.js";
+import { assertComposeSuccess, buildComposeSpawnEnv, ComposeExecError, composeCommandIncludesDestructiveVolumeRemoval, runComposeCommand, } from "./compose-exec.js";
+import { loadComposeDistribution } from "./distribution.js";
+import { MaterializeInstallError, materializeInstallation, } from "./materialize-install.js";
+import { runSetupOnboarding } from "./run-onboarding.js";
+export const COMPOSE_CONFIG_TIMEOUT_MS = 120_000;
+export const COMPOSE_PULL_TIMEOUT_MS = 900_000;
+export const COMPOSE_UP_TIMEOUT_MS = 900_000;
+const PLATFORM_SERVICES = [
+    "web",
+    "worker",
+    "scheduler",
+    "workflow-orchestrator",
+    "knowledge-worker",
+    "mcp-server",
+];
+export async function runSetupProvision(options, deps = {}) {
+    const checks = [];
+    let setupTokenForOperator;
+    const processEnv = deps.processEnv ?? process.env;
+    const spawn = deps.spawn;
+    const fetchImpl = deps.fetch ?? fetch;
+    try {
+        const distribution = await loadComposeDistribution();
+        checks.push(passCheck("install_distribution", `Using bundled Compose distribution for platform ${distribution.manifest.platformVersion} (${distribution.manifest.imageRef}).`));
+        const materialized = await materializeInstallation({
+            options,
+            distribution,
+            processEnv,
+        });
+        checks.push(passCheck("install_directory", `Installation directory ${materialized.assessment.kind === "missing" ? "created at" : "ready at"} ${options.installDir}.`));
+        if (materialized.preservedSecrets) {
+            checks.push(passCheck("install_secrets", "Preserved existing installation secrets from .env (no credential rotation)."));
+        }
+        else {
+            checks.push(passCheck("install_secrets", "Generated new local secrets in .env (restricted permissions where supported)."));
+        }
+        const execCtx = {
+            installDir: options.installDir,
+            envFilePath: materialized.envPath,
+            projectName: materialized.envValues.COMPOSE_PROJECT_NAME,
+        };
+        const platformRunning = await detectFunctioningPlatform(execCtx, spawn);
+        if (platformRunning && !options.authorizeExisting) {
+            checks.push(warnCheck("install_existing_deployment", "An existing OSVA Compose deployment appears operational.", "Re-run with --yes to reconcile images and services, or use a different --install-dir."));
+            checks.push(skipCheck("compose_provision", "Skipped provisioning because an operational deployment was detected without --yes."));
+            checks.push(passCheck("platform_services_ready", "Platform services appear ready (existing deployment)."));
+            const onboarding = await runSetupOnboarding({
+                options,
+                execCtx,
+                spawn,
+                fetch: fetchImpl,
+                mutateInstallation: false,
+                processEnv,
+            });
+            checks.push(...onboarding.checks);
+            setupTokenForOperator = onboarding.setupTokenForOperator;
+            return { checks, setupTokenForOperator };
+        }
+        const reconcileRunning = platformRunning && options.authorizeExisting;
+        validateComposeConfig(execCtx, spawn);
+        checks.push(passCheck("compose_config", "Validated Compose configuration (`docker compose config`)."));
+        if (processEnv.OSVA_SETUP_SKIP_IMAGE_PULL?.trim() === "1") {
+            checks.push(skipCheck("compose_pull", "Skipped image pull (OSVA_SETUP_SKIP_IMAGE_PULL=1)."));
+        }
+        else {
+            pullPinnedImages(execCtx, spawn);
+            checks.push(passCheck("compose_pull", "Pulled pinned OSVA and dependency images."));
+        }
+        if (!reconcileRunning) {
+            startDataServices(execCtx, spawn);
+            checks.push(passCheck("compose_data_plane", "PostgreSQL and Valkey are healthy."));
+            runMigrationJob(execCtx, spawn);
+            checks.push(passCheck("compose_migrate", "Database migration job completed successfully."));
+        }
+        else {
+            checks.push(skipCheck("compose_data_plane", "Skipped data-plane restart during operational reconciliation."));
+            checks.push(skipCheck("compose_migrate", "Skipped migration during operational reconciliation (--yes does not authorize online re-migration)."));
+        }
+        startPlatformServices(execCtx, spawn);
+        checks.push(passCheck("compose_platform_up", `Started platform services: ${PLATFORM_SERVICES.join(", ")}.`));
+        await verifyPlatformHealth(options.webPort, options.mcpPort, fetchImpl);
+        checks.push(passCheck("platform_services_ready", `Platform services are ready at http://127.0.0.1:${String(options.webPort)} and MCP http://127.0.0.1:${String(options.mcpPort)}.`));
+        const onboarding = await runSetupOnboarding({
+            options,
+            execCtx,
+            spawn,
+            fetch: fetchImpl,
+            mutateInstallation: true,
+            processEnv,
+        });
+        checks.push(...onboarding.checks);
+        setupTokenForOperator = onboarding.setupTokenForOperator;
+    }
+    catch (error) {
+        checks.push(mapProvisionError(error));
+    }
+    return { checks, setupTokenForOperator };
+}
+function validateComposeConfig(ctx, spawn) {
+    const args = ["config"];
+    assertNotDestructive(args);
+    const result = runComposeCommand(ctx, args, {
+        spawn,
+        timeoutMs: COMPOSE_CONFIG_TIMEOUT_MS,
+        processEnv: buildComposeSpawnEnv(ctx),
+    });
+    assertComposeSuccess(result, "Compose configuration validation");
+}
+function pullPinnedImages(ctx, spawn) {
+    const args = ["pull"];
+    assertNotDestructive(args);
+    const result = runComposeCommand(ctx, args, {
+        spawn,
+        timeoutMs: COMPOSE_PULL_TIMEOUT_MS,
+        processEnv: buildComposeSpawnEnv(ctx),
+    });
+    assertComposeSuccess(result, "Image pull");
+}
+function startDataServices(ctx, spawn) {
+    const args = ["up", "-d", "--no-build", "--wait", "postgres", "valkey"];
+    assertNotDestructive(args);
+    const result = runComposeCommand(ctx, args, {
+        spawn,
+        timeoutMs: COMPOSE_UP_TIMEOUT_MS,
+        processEnv: buildComposeSpawnEnv(ctx),
+    });
+    assertComposeSuccess(result, "Starting PostgreSQL and Valkey");
+}
+function runMigrationJob(ctx, spawn) {
+    const args = ["up", "--no-build", "--wait", "migrate"];
+    assertNotDestructive(args);
+    const result = runComposeCommand(ctx, args, {
+        spawn,
+        timeoutMs: COMPOSE_UP_TIMEOUT_MS,
+        processEnv: buildComposeSpawnEnv(ctx),
+    });
+    assertComposeSuccess(result, "Migration job");
+}
+function startPlatformServices(ctx, spawn) {
+    const args = ["up", "-d", "--no-build", "--wait", ...PLATFORM_SERVICES];
+    assertNotDestructive(args);
+    const result = runComposeCommand(ctx, args, {
+        spawn,
+        timeoutMs: COMPOSE_UP_TIMEOUT_MS,
+        processEnv: buildComposeSpawnEnv(ctx),
+    });
+    assertComposeSuccess(result, "Starting platform services");
+}
+async function verifyPlatformHealth(webPort, mcpPort, fetchImpl) {
+    await waitForHttpOk(fetchImpl, `http://127.0.0.1:${String(webPort)}/health`);
+    await waitForHttpOk(fetchImpl, `http://127.0.0.1:${String(webPort)}/ready`);
+    await waitForHttpOk(fetchImpl, `http://127.0.0.1:${String(mcpPort)}/health`);
+}
+async function waitForHttpOk(fetchImpl, url, attempts = 45) {
+    let lastStatus;
+    for (let attempt = 0; attempt < attempts; attempt += 1) {
+        try {
+            const response = await fetchImpl(url);
+            lastStatus = response.status;
+            if (response.ok) {
+                return;
+            }
+        }
+        catch {
+            // retry
+        }
+        await delay(2_000);
+    }
+    throw new ComposeExecError("command_failed", `Timed out waiting for ${url}${lastStatus === undefined ? "" : ` (last status ${String(lastStatus)})`}.`);
+}
+async function detectFunctioningPlatform(ctx, spawn) {
+    const result = runComposeCommand(ctx, ["ps", "--status", "running", "--services"], {
+        spawn,
+        timeoutMs: COMPOSE_CONFIG_TIMEOUT_MS,
+        processEnv: buildComposeSpawnEnv(ctx),
+    });
+    if (result.status !== 0) {
+        return false;
+    }
+    const running = new Set(result.stdout
+        .split(/\r?\n/)
+        .map((line) => line.trim())
+        .filter((line) => line.length > 0));
+    return running.has("web") && running.has("worker");
+}
+function mapProvisionError(error) {
+    if (error instanceof MaterializeInstallError) {
+        if (error.code === "foreign_directory") {
+            return failCheck("install_directory", error.message, "Choose an empty directory or a prior OSVA installation path via --install-dir.");
+        }
+        return failCheck("install_env", error.message, "Unset conflicting host environment variables or align them with the installation .env file.");
+    }
+    if (error instanceof ComposeExecError) {
+        return failCheck("compose_provision", redactSecrets(error.message), "Inspect Docker logs with `docker compose --project-directory <install-dir> logs` and retry `osva setup`.");
+    }
+    if (error instanceof Error) {
+        return failCheck("compose_provision", redactSecrets(error.message), "Retry `osva setup` after resolving the reported issue.");
+    }
+    return failCheck("compose_provision", "Unexpected provisioning failure.", "Retry `osva setup` and inspect Docker state.");
+}
+function assertNotDestructive(args) {
+    if (composeCommandIncludesDestructiveVolumeRemoval(args)) {
+        throw new Error("Refusing destructive docker compose down -v during setup.");
+    }
+}
+function delay(ms) {
+    return new Promise((resolve) => {
+        setTimeout(resolve, ms);
+    });
+}
+function passCheck(id, message) {
+    return { id, status: "PASS", message };
+}
+function warnCheck(id, message, remediation) {
+    return { id, status: "WARN", message, remediation };
+}
+function failCheck(id, message, remediation) {
+    return { id, status: "FAIL", message, remediation };
+}
+function skipCheck(id, message) {
+    return { id, status: "SKIP", message };
+}
+//# sourceMappingURL=run-provision.js.map

package/dist/setup/run-provision.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"run-provision.js","sourceRoot":"","sources":["../../src/setup/run-provision.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,EACL,oBAAoB,EACpB,oBAAoB,EACpB,gBAAgB,EAChB,8CAA8C,EAC9C,iBAAiB,GAElB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,uBAAuB,EAAE,MAAM,mBAAmB,CAAC;AAC5D,OAAO,EACL,uBAAuB,EACvB,uBAAuB,GACxB,MAAM,0BAA0B,CAAC;AAElC,OAAO,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AAGzD,MAAM,CAAC,MAAM,yBAAyB,GAAG,OAAO,CAAC;AACjD,MAAM,CAAC,MAAM,uBAAuB,GAAG,OAAO,CAAC;AAC/C,MAAM,CAAC,MAAM,qBAAqB,GAAG,OAAO,CAAC;AAE7C,MAAM,iBAAiB,GAAG;IACxB,KAAK;IACL,QAAQ;IACR,WAAW;IACX,uBAAuB;IACvB,kBAAkB;IAClB,YAAY;CACJ,CAAC;AAaX,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,OAAqB,EACrB,OAA8B,EAAE;IAEhC,MAAM,MAAM,GAAkB,EAAE,CAAC;IACjC,IAAI,qBAAyC,CAAC;IAC9C,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,IAAI,OAAO,CAAC,GAAG,CAAC;IAClD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;IACzB,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC;IAEtC,IAAI,CAAC;QACH,MAAM,YAAY,GAAG,MAAM,uBAAuB,EAAE,CAAC;QACrD,MAAM,CAAC,IAAI,CACT,SAAS,CACP,sBAAsB,EACtB,mDAAmD,YAAY,CAAC,QAAQ,CAAC,eAAe,KAAK,YAAY,CAAC,QAAQ,CAAC,QAAQ,IAAI,CAChI,CACF,CAAC;QAEF,MAAM,YAAY,GAAG,MAAM,uBAAuB,CAAC;YACjD,OAAO;YACP,YAAY;YACZ,UAAU;SACX,CAAC,CAAC;QACH,MAAM,CAAC,IAAI,CACT,SAAS,CACP,mBAAmB,EACnB,0BAA0B,YAAY,CAAC,UAAU,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,UAAU,IAAI,OAAO,CAAC,UAAU,GAAG,CAC1H,CACF,CAAC;QACF,IAAI,YAAY,CAAC,gBAAgB,EAAE,CAAC;YAClC,MAAM,CAAC,IAAI,CACT,SAAS,CACP,iBAAiB,EACjB,6EAA6E,CAC9E,CACF,CAAC;QACJ,CAAC;aAAM,CAAC;YACN,MAAM,CAAC,IAAI,CACT,SAAS,CACP,iBAAiB,EACjB,+EAA+E,CAChF,CACF,CAAC;QACJ,CAAC;QAED,MAAM,OAAO,GAAuB;YAClC,UAAU,EAAE,OAAO,CAAC,UAAU;YAC9B,WAAW,EAAE,YAAY,CAAC,OAAO;YACjC,WAAW,EAAE,YAAY,CAAC,SAAS,CAAC,oBAAoB;SACzD,CAAC;QAEF,MAAM,eAAe,GAAG,MAAM,yBAAyB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QAExE,IAAI,eAAe,IAAI,CAAC,OAAO,CAAC,iBAAiB,EAAE,CAAC;YAClD,MAAM,CAAC,IAAI,CACT,SAAS,CACP,6BAA6B,EAC7B,0DAA0D,EAC1D,uFAAuF,CACxF,CACF,CAAC;YACF,MAAM,CAAC,IAAI,CACT,SAAS,CACP,mBAAmB,EACnB,oFAAoF,CACrF,CACF,CAAC;YACF,MAAM,CAAC,IAAI,CACT,SAAS,CACP,yBAAyB,EACzB,uDAAuD,CACxD,CACF,CAAC;YACF,MAAM,UAAU,GAAG,MAAM,kBAAkB,CAAC;gBAC1C,OAAO;gBACP,OAAO;gBACP,KAAK;gBACL,KAAK,EAAE,SAAS;gBAChB,kBAAkB,EAAE,KAAK;gBACzB,UAAU;aACX,CAAC,CAAC;YACH,MAAM,CAAC,IAAI,CAAC,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC;YAClC,qBAAqB,GAAG,UAAU,CAAC,qBAAqB,CAAC;YACzD,OAAO,EAAE,MAAM,EAAE,qBAAqB,EAAE,CAAC;QAC3C,CAAC;QAED,MAAM,gBAAgB,GAAG,eAAe,IAAI,OAAO,CAAC,iBAAiB,CAAC;QAEtE,qBAAqB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QACtC,MAAM,CAAC,IAAI,CACT,SAAS,CACP,gBAAgB,EAChB,4DAA4D,CAC7D,CACF,CAAC;QAEF,IAAI,UAAU,CAAC,0BAA0B,EAAE,IAAI,EAAE,KAAK,GAAG,EAAE,CAAC;YAC1D,MAAM,CAAC,IAAI,CACT,SAAS,CACP,cAAc,EACd,oDAAoD,CACrD,CACF,CAAC;QACJ,CAAC;aAAM,CAAC;YACN,gBAAgB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;YACjC,MAAM,CAAC,IAAI,CACT,SAAS,CAAC,cAAc,EAAE,2CAA2C,CAAC,CACvE,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,gBAAgB,EAAE,CAAC;YACtB,iBAAiB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;YAClC,MAAM,CAAC,IAAI,CACT,SAAS,CAAC,oBAAoB,EAAE,oCAAoC,CAAC,CACtE,CAAC;YAEF,eAAe,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;YAChC,MAAM,CAAC,IAAI,CACT,SAAS,CACP,iBAAiB,EACjB,gDAAgD,CACjD,CACF,CAAC;QACJ,CAAC;aAAM,CAAC;YACN,MAAM,CAAC,IAAI,CACT,SAAS,CACP,oBAAoB,EACpB,+DAA+D,CAChE,CACF,CAAC;YACF,MAAM,CAAC,IAAI,CACT,SAAS,CACP,iBAAiB,EACjB,qGAAqG,CACtG,CACF,CAAC;QACJ,CAAC;QAED,qBAAqB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QACtC,MAAM,CAAC,IAAI,CACT,SAAS,CACP,qBAAqB,EACrB,8BAA8B,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAC9D,CACF,CAAC;QAEF,MAAM,oBAAoB,CAAC,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;QACxE,MAAM,CAAC,IAAI,CACT,SAAS,CACP,yBAAyB,EACzB,mDAAmD,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,6BAA6B,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAClI,CACF,CAAC;QACF,MAAM,UAAU,GAAG,MAAM,kBAAkB,CAAC;YAC1C,OAAO;YACP,OAAO;YACP,KAAK;YACL,KAAK,EAAE,SAAS;YAChB,kBAAkB,EAAE,IAAI;YACxB,UAAU;SACX,CAAC,CAAC;QACH,MAAM,CAAC,IAAI,CAAC,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC;QAClC,qBAAqB,GAAG,UAAU,CAAC,qBAAqB,CAAC;IAC3D,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,CAAC,IAAI,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAC,CAAC;IACxC,CAAC;IAED,OAAO,EAAE,MAAM,EAAE,qBAAqB,EAAE,CAAC;AAC3C,CAAC;AAED,SAAS,qBAAqB,CAC5B,GAAuB,EACvB,KAA+B;IAE/B,MAAM,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAC;IACxB,oBAAoB,CAAC,IAAI,CAAC,CAAC;IAC3B,MAAM,MAAM,GAAG,iBAAiB,CAAC,GAAG,EAAE,IAAI,EAAE;QAC1C,KAAK;QACL,SAAS,EAAE,yBAAyB;QACpC,UAAU,EAAE,oBAAoB,CAAC,GAAG,CAAC;KACtC,CAAC,CAAC;IACH,oBAAoB,CAAC,MAAM,EAAE,kCAAkC,CAAC,CAAC;AACnE,CAAC;AAED,SAAS,gBAAgB,CACvB,GAAuB,EACvB,KAA+B;IAE/B,MAAM,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC;IACtB,oBAAoB,CAAC,IAAI,CAAC,CAAC;IAC3B,MAAM,MAAM,GAAG,iBAAiB,CAAC,GAAG,EAAE,IAAI,EAAE;QAC1C,KAAK;QACL,SAAS,EAAE,uBAAuB;QAClC,UAAU,EAAE,oBAAoB,CAAC,GAAG,CAAC;KACtC,CAAC,CAAC;IACH,oBAAoB,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;AAC7C,CAAC;AAED,SAAS,iBAAiB,CACxB,GAAuB,EACvB,KAA+B;IAE/B,MAAM,IAAI,GAAG,CAAC,IAAI,EAAE,IAAI,EAAE,YAAY,EAAE,QAAQ,EAAE,UAAU,EAAE,QAAQ,CAAC,CAAC;IACxE,oBAAoB,CAAC,IAAI,CAAC,CAAC;IAC3B,MAAM,MAAM,GAAG,iBAAiB,CAAC,GAAG,EAAE,IAAI,EAAE;QAC1C,KAAK;QACL,SAAS,EAAE,qBAAqB;QAChC,UAAU,EAAE,oBAAoB,CAAC,GAAG,CAAC;KACtC,CAAC,CAAC;IACH,oBAAoB,CAAC,MAAM,EAAE,gCAAgC,CAAC,CAAC;AACjE,CAAC;AAED,SAAS,eAAe,CACtB,GAAuB,EACvB,KAA+B;IAE/B,MAAM,IAAI,GAAG,CAAC,IAAI,EAAE,YAAY,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC;IACvD,oBAAoB,CAAC,IAAI,CAAC,CAAC;IAC3B,MAAM,MAAM,GAAG,iBAAiB,CAAC,GAAG,EAAE,IAAI,EAAE;QAC1C,KAAK;QACL,SAAS,EAAE,qBAAqB;QAChC,UAAU,EAAE,oBAAoB,CAAC,GAAG,CAAC;KACtC,CAAC,CAAC;IACH,oBAAoB,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC;AAChD,CAAC;AAED,SAAS,qBAAqB,CAC5B,GAAuB,EACvB,KAA+B;IAE/B,MAAM,IAAI,GAAG,CAAC,IAAI,EAAE,IAAI,EAAE,YAAY,EAAE,QAAQ,EAAE,GAAG,iBAAiB,CAAC,CAAC;IACxE,oBAAoB,CAAC,IAAI,CAAC,CAAC;IAC3B,MAAM,MAAM,GAAG,iBAAiB,CAAC,GAAG,EAAE,IAAI,EAAE;QAC1C,KAAK;QACL,SAAS,EAAE,qBAAqB;QAChC,UAAU,EAAE,oBAAoB,CAAC,GAAG,CAAC;KACtC,CAAC,CAAC;IACH,oBAAoB,CAAC,MAAM,EAAE,4BAA4B,CAAC,CAAC;AAC7D,CAAC;AAED,KAAK,UAAU,oBAAoB,CACjC,OAAe,EACf,OAAe,EACf,SAAuB;IAEvB,MAAM,aAAa,CAAC,SAAS,EAAE,oBAAoB,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAC7E,MAAM,aAAa,CAAC,SAAS,EAAE,oBAAoB,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC5E,MAAM,aAAa,CAAC,SAAS,EAAE,oBAAoB,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;AAC/E,CAAC;AAED,KAAK,UAAU,aAAa,CAC1B,SAAuB,EACvB,GAAW,EACX,QAAQ,GAAG,EAAE;IAEb,IAAI,UAA8B,CAAC;IACnC,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,QAAQ,EAAE,OAAO,IAAI,CAAC,EAAE,CAAC;QACvD,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,GAAG,CAAC,CAAC;YACtC,UAAU,GAAG,QAAQ,CAAC,MAAM,CAAC;YAC7B,IAAI,QAAQ,CAAC,EAAE,EAAE,CAAC;gBAChB,OAAO;YACT,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,QAAQ;QACV,CAAC;QACD,MAAM,KAAK,CAAC,KAAK,CAAC,CAAC;IACrB,CAAC;IACD,MAAM,IAAI,gBAAgB,CACxB,gBAAgB,EAChB,yBAAyB,GAAG,GAAG,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,iBAAiB,MAAM,CAAC,UAAU,CAAC,GAAG,GAAG,CACzG,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,yBAAyB,CACtC,GAAuB,EACvB,KAA+B;IAE/B,MAAM,MAAM,GAAG,iBAAiB,CAC9B,GAAG,EACH,CAAC,IAAI,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,CAAC,EAC3C;QACE,KAAK;QACL,SAAS,EAAE,yBAAyB;QACpC,UAAU,EAAE,oBAAoB,CAAC,GAAG,CAAC;KACtC,CACF,CAAC;IACF,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxB,OAAO,KAAK,CAAC;IACf,CAAC;IACD,MAAM,OAAO,GAAG,IAAI,GAAG,CACrB,MAAM,CAAC,MAAM;SACV,KAAK,CAAC,OAAO,CAAC;SACd,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;SAC1B,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CACrC,CAAC;IACF,OAAO,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;AACrD,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAc;IACvC,IAAI,KAAK,YAAY,uBAAuB,EAAE,CAAC;QAC7C,IAAI,KAAK,CAAC,IAAI,KAAK,mBAAmB,EAAE,CAAC;YACvC,OAAO,SAAS,CACd,mBAAmB,EACnB,KAAK,CAAC,OAAO,EACb,gFAAgF,CACjF,CAAC;QACJ,CAAC;QACD,OAAO,SAAS,CACd,aAAa,EACb,KAAK,CAAC,OAAO,EACb,6FAA6F,CAC9F,CAAC;IACJ,CAAC;IACD,IAAI,KAAK,YAAY,gBAAgB,EAAE,CAAC;QACtC,OAAO,SAAS,CACd,mBAAmB,EACnB,aAAa,CAAC,KAAK,CAAC,OAAO,CAAC,EAC5B,0GAA0G,CAC3G,CAAC;IACJ,CAAC;IACD,IAAI,KAAK,YAAY,KAAK,EAAE,CAAC;QAC3B,OAAO,SAAS,CACd,mBAAmB,EACnB,aAAa,CAAC,KAAK,CAAC,OAAO,CAAC,EAC5B,wDAAwD,CACzD,CAAC;IACJ,CAAC;IACD,OAAO,SAAS,CACd,mBAAmB,EACnB,kCAAkC,EAClC,8CAA8C,CAC/C,CAAC;AACJ,CAAC;AAED,SAAS,oBAAoB,CAAC,IAAuB;IACnD,IAAI,8CAA8C,CAAC,IAAI,CAAC,EAAE,CAAC;QACzD,MAAM,IAAI,KAAK,CACb,2DAA2D,CAC5D,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,KAAK,CAAC,EAAU;IACvB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;IAC1B,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,SAAS,CAAC,EAAU,EAAE,OAAe;IAC5C,OAAO,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;AACzC,CAAC;AAED,SAAS,SAAS,CAChB,EAAU,EACV,OAAe,EACf,WAAmB;IAEnB,OAAO,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC;AACtD,CAAC;AAED,SAAS,SAAS,CAChB,EAAU,EACV,OAAe,EACf,WAAmB;IAEnB,OAAO,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC;AACtD,CAAC;AAED,SAAS,SAAS,CAAC,EAAU,EAAE,OAAe;IAC5C,OAAO,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;AACzC,CAAC"}

package/dist/setup/run-setup.d.ts

@@ -0,0 +1,26 @@
+import type { DoctorReport } from "../doctor/types.js";
+import { type ProbeSpawnFn } from "./probe-spawn.js";
+import type { SetupOptions } from "./read-options.js";
+export declare const DEFAULT_SETUP_SUBPROCESS_TIMEOUT_MS = 5000;
+export type LoopbackPortProbeResult = {
+    readonly kind: "available";
+} | {
+    readonly kind: "in_use";
+} | {
+    readonly kind: "permission_denied";
+} | {
+    readonly kind: "probe_error";
+    readonly code?: string;
+};
+export type LoopbackPortProbeFn = (port: number) => Promise<LoopbackPortProbeResult>;
+export interface SetupProbeDependencies {
+    readonly spawn?: ProbeSpawnFn;
+    readonly probeLoopbackPort?: LoopbackPortProbeFn;
+    readonly subprocessTimeoutMs?: number;
+    readonly platform?: NodeJS.Platform;
+    readonly arch?: string;
+    readonly cwdForDisk?: string;
+}
+export declare function runSetupPipeline(options: SetupOptions, deps?: SetupProbeDependencies): Promise<DoctorReport>;
+export declare function setupExitCode(report: DoctorReport): number;
+//# sourceMappingURL=run-setup.d.ts.map

package/dist/setup/run-setup.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"run-setup.d.ts","sourceRoot":"","sources":["../../src/setup/run-setup.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAe,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAEpE,OAAO,EAEL,KAAK,YAAY,EAElB,MAAM,kBAAkB,CAAC;AAE1B,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAEtD,eAAO,MAAM,mCAAmC,OAAQ,CAAC;AAQzD,MAAM,MAAM,uBAAuB,GAC/B;IAAE,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAA;CAAE,GAC9B;IAAE,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAA;CAAE,GAC3B;IAAE,QAAQ,CAAC,IAAI,EAAE,mBAAmB,CAAA;CAAE,GACtC;IAAE,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAC;IAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC;AAE7D,MAAM,MAAM,mBAAmB,GAAG,CAChC,IAAI,EAAE,MAAM,KACT,OAAO,CAAC,uBAAuB,CAAC,CAAC;AAEtC,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,KAAK,CAAC,EAAE,YAAY,CAAC;IAC9B,QAAQ,CAAC,iBAAiB,CAAC,EAAE,mBAAmB,CAAC;IACjD,QAAQ,CAAC,mBAAmB,CAAC,EAAE,MAAM,CAAC;IACtC,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,QAAQ,CAAC;IACpC,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;CAC9B;AAED,wBAAsB,gBAAgB,CACpC,OAAO,EAAE,YAAY,EACrB,IAAI,GAAE,sBAA2B,GAChC,OAAO,CAAC,YAAY,CAAC,CA2EvB;AA2UD,wBAAgB,aAAa,CAAC,MAAM,EAAE,YAAY,GAAG,MAAM,CAE1D"}