@the-librarian/cli 1.0.0-rc.27 → 1.0.0-rc.29

package/dist/runtime.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"runtime.d.ts","sourceRoot":"","sources":["../src/runtime.ts"],"names":[],"mappings":"AAgBA,OAAO,EAAe,KAAK,KAAK,EAAE,MAAM,UAAU,CAAC;AAGnD,OAAO,EAAqC,KAAK,QAAQ,EAAE,MAAM,aAAa,CAAC;AAY/E,MAAM,WAAW,SAAS;IACxB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,cAAc;IAC7B,0EAA0E;IAC1E,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,uDAAuD;IACvD,KAAK,CAAC,EAAE,KAAK,CAAC;IACd,2EAA2E;IAC3E,QAAQ,CAAC,EAAE,QAAQ,CAAC;IACpB;;;;OAIG;IACH,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;IACxB;;;;;OAKG;IACH,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB;;;;;OAKG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC,QAAQ,CAAC;CAC5B;AAID;;;;;;GAMG;AACH,wBAAsB,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,OAAO,GAAE,cAAmB,GAAG,OAAO,CAAC,SAAS,CAAC,CAY7F;AAgUD,wBAAgB,KAAK,IAAI,MAAM,CAyB9B"}
+{"version":3,"file":"runtime.d.ts","sourceRoot":"","sources":["../src/runtime.ts"],"names":[],"mappings":"AAgBA,OAAO,EAAe,KAAK,KAAK,EAAE,MAAM,UAAU,CAAC;AAGnD,OAAO,EAAqC,KAAK,QAAQ,EAAE,MAAM,aAAa,CAAC;AAmB/E,MAAM,WAAW,SAAS;IACxB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,cAAc;IAC7B,0EAA0E;IAC1E,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,uDAAuD;IACvD,KAAK,CAAC,EAAE,KAAK,CAAC;IACd,2EAA2E;IAC3E,QAAQ,CAAC,EAAE,QAAQ,CAAC;IACpB;;;;OAIG;IACH,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;IACxB;;;;;OAKG;IACH,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB;;;;;OAKG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC,QAAQ,CAAC;CAC5B;AAID;;;;;;GAMG;AACH,wBAAsB,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,OAAO,GAAE,cAAmB,GAAG,OAAO,CAAC,SAAS,CAAC,CAY7F;AAmXD,wBAAgB,KAAK,IAAI,MAAM,CAyB9B"}

package/dist/runtime.js

@@ -18,6 +18,7 @@ import { allHarnesses } from "./harnesses/index.js";
 import { flagBool, flagString, parseArgs } from "./parse-args.js";
 import { createPrompter, MissingValueError } from "./prompt.js";
 import { runAdmin } from "./server/admin.js";
+import { autoUpdateStatus, disableAutoUpdate, enableAutoUpdate, runAutoUpdate, uninstallAutoUpdate, } from "./server/autoupdate.js";
 import { disableBoot, enableBoot } from "./server/boot.js";
 import { runDown } from "./server/down.js";
 import { serverUsage } from "./server/index.js";
@@ -184,6 +185,9 @@ async function runServerCommand(rest, options) {
     if (subcommand === "disable-boot") {
         return runServerDisableBootCommand(options);
     }
+    if (subcommand === "autoupdate") {
+        return runServerAutoUpdateCommand(subRest, options);
+    }
     if (subcommand === "admin") {
         return runServerAdminCommand(subRest, options);
     }
@@ -242,6 +246,46 @@ async function runServerDisableBootCommand(options) {
     const result = await disableBoot(options.platform ? { platform: options.platform } : {});
     return ok(result.output);
 }
+/**
+ * `librarian server autoupdate <enable|disable|uninstall|status> [--cadence …]`
+ * and the internal `--run` (T3). `enable` installs a host scheduler (systemd timer
+ * / cron fallback) that fires hourly and runs `--run`, plus writes enabled+cadence
+ * into the running server (so the dashboard reflects it). `disable` flips the
+ * setting off (timer stays). `uninstall` removes the timer/cron. `status` reports
+ * timer-installed + the server's enabled/cadence/last-run + up-to-date. `--run` is
+ * the wrapper the timer calls: it reads the settings from the running server,
+ * applies the due-check, and conditionally runs `server update` — FULLY fail-soft
+ * (never throws out of the timer). A real failure on the operator-facing verbs
+ * surfaces as one clean stderr line via the top-level catch.
+ */
+async function runServerAutoUpdateCommand(subRest, options) {
+    const { positionals, flags } = parseArgs(subRest);
+    const platformOpt = options.platform ? { platform: options.platform } : {};
+    const base = { home: options.home, dir: flagString(flags.dir), ...platformOpt };
+    // `--run` is the timer's wrapper. It is fail-soft by construction (it never
+    // throws) and always exits 0 so the timer's unit never fails; its one-line
+    // outcome is its stdout.
+    if (flagBool(flags.run)) {
+        const result = await runAutoUpdate(base);
+        return ok(result.output);
+    }
+    const [verb] = positionals;
+    if (verb === "enable") {
+        const result = await enableAutoUpdate({ ...base, cadence: flagString(flags.cadence) });
+        return ok(result.output);
+    }
+    if (verb === "disable") {
+        return ok((await disableAutoUpdate(base)).output);
+    }
+    if (verb === "uninstall") {
+        return ok((await uninstallAutoUpdate(base)).output);
+    }
+    if (verb === "status" || verb === undefined) {
+        return ok((await autoUpdateStatus(base)).output);
+    }
+    return err(`Unknown autoupdate subcommand: ${verb}\n\n` +
+        "Usage: librarian server autoupdate <enable|disable|uninstall|status> [--cadence daily|weekly]");
+}
 /**
  * `librarian server admin <backup|restore|auth|rebuild> [args…]` (S7a). Runs a
  * curated admin verb inside the running container via

package/dist/runtime.js.map

@@ -1 +1 @@
-{"version":3,"file":"runtime.js","sourceRoot":"","sources":["../src/runtime.ts"],"names":[],"mappings":"AAAA,6DAA6D;AAC7D,EAAE;AACF,4EAA4E;AAC5E,wEAAwE;AACxE,6EAA6E;AAC7E,wEAAwE;AACxE,6EAA6E;AAC7E,8EAA8E;AAC9E,yEAAyE;AACzE,kBAAkB;AAElB,OAAO,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AACnD,OAAO,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAC;AACvD,OAAO,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AACjD,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,EAAE,SAAS,EAAwB,MAAM,aAAa,CAAC;AAChG,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AACrC,OAAO,EAAE,WAAW,EAAc,MAAM,UAAU,CAAC;AACnD,OAAO,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AACpD,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,SAAS,EAAgB,MAAM,iBAAiB,CAAC;AAChF,OAAO,EAAE,cAAc,EAAE,iBAAiB,EAAiB,MAAM,aAAa,CAAC;AAC/E,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAC7C,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC3D,OAAO,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAC3C,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAC3C,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,KAAK,EAAE,MAAM,gBAAgB,CAAC;AACvC,OAAO,EAAE,SAAS,IAAI,eAAe,EAAE,MAAM,oBAAoB,CAAC;AAClE,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AACrC,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAqC1C,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC,CAAC;AAEzD;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,MAAM,CAAC,IAAc,EAAE,UAA0B,EAAE;IACvE,IAAI,CAAC;QACH,OAAO,MAAM,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IACvC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,iBAAiB,EAAE,CAAC;YACvC,OAAO,GAAG,CACR,mFAAmF,CACpF,CAAC;QACJ,CAAC;QACD,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACvE,OAAO,GAAG,CAAC,cAAc,OAAO,EAAE,CAAC,CAAC;IACtC,CAAC;AACH,CAAC;AAED,KAAK,UAAU,QAAQ,CAAC,IAAc,EAAE,OAAuB;IAC7D,MAAM,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC;IAEhC,IAAI,CAAC,OAAO,IAAI,OAAO,KAAK,QAAQ,IAAI,OAAO,KAAK,IAAI,IAAI,OAAO,KAAK,MAAM,EAAE,CAAC;QAC/E,OAAO,EAAE,CAAC,KAAK,EAAE,CAAC,CAAC;IACrB,CAAC;IACD,IAAI,OAAO,KAAK,WAAW,IAAI,OAAO,KAAK,IAAI,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;QACzE,OAAO,EAAE,CAAC,UAAU,EAAE,CAAC,CAAC;IAC1B,CAAC;IAED,IAAI,OAAO,KAAK,QAAQ,EAAE,CAAC;QACzB,OAAO,SAAS,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IAClC,CAAC;IAED,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;QAC1B,OAAO,iBAAiB,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IAC1C,CAAC;IACD,IAAI,OAAO,KAAK,WAAW,EAAE,CAAC;QAC5B,OAAO,mBAAmB,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IAC5C,CAAC;IACD,IAAI,OAAO,KAAK,QAAQ,EAAE,CAAC;QACzB,OAAO,gBAAgB,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IACzC,CAAC;IACD,IAAI,OAAO,KAAK,QAAQ,EAAE,CAAC;QACzB,OAAO,EAAE,CAAC,MAAM,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;IACxC,CAAC;IACD,IAAI,OAAO,KAAK,QAAQ,EAAE,CAAC;QACzB,mDAAmD;QACnD,OAAO,EAAE,CAAC,MAAM,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;IACxC,CAAC;IAED,IAAI,OAAO,KAAK,QAAQ,EAAE,CAAC;QACzB,OAAO,gBAAgB,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IACzC,CAAC;IAED,IAAI,aAAa,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;QAC/B,OAAO,aAAa,CAAC,OAAO,CAAC,CAAC;IAChC,CAAC;IAED,OAAO,GAAG,CAAC,oBAAoB,OAAO,OAAO,KAAK,EAAE,EAAE,CAAC,CAAC;AAC1D,CAAC;AAED,4EAA4E;AAE5E,SAAS,SAAS,CAAC,IAAc,EAAE,OAAuB;IACxD,MAAM,EAAE,KAAK,EAAE,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;IAClC,MAAM,MAAM,GAAG,UAAU,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,IAAI,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACrE,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACtC,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,gBAAgB,CAAC,KAAK,CAAC,CAAC;IAEvD,MAAM,QAAQ,GAAG,MAAM,KAAK,SAAS,IAAI,KAAK,KAAK,SAAS,CAAC;IAC7D,IAAI,QAAQ,EAAE,CAAC;QACb,MAAM,OAAO,GAAG,SAAS,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAC5E,kDAAkD;QAClD,OAAO,EAAE,CAAC,CAAC,iBAAiB,EAAE,EAAE,EAAE,YAAY,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IAC/E,CAAC;IAED,MAAM,OAAO,GAA2B,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IACjE,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,EAAE,CACP;YACE,oBAAoB;YACpB,EAAE;YACF,cAAc;YACd,oDAAoD;SACrD,CAAC,IAAI,CAAC,IAAI,CAAC,CACb,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,CAAC,YAAY,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;AAC3C,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAc;IACtC,MAAM,GAAG,GAAG,UAAU,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACpC,IAAI,CAAC,GAAG;QAAE,OAAO,SAAS,CAAC;IAC3B,OAAO,WAAW,CAAC,GAAG,CAAC,CAAC;AAC1B,CAAC;AAED,4EAA4E;AAE5E,KAAK,UAAU,iBAAiB,CAAC,IAAc,EAAE,OAAuB;IACtE,MAAM,EAAE,WAAW,EAAE,KAAK,EAAE,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;IAC/C,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,gBAAgB,CAAC,KAAK,CAAC,CAAC;IACvD,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,cAAc,EAAE,CAAC;IACtD,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,UAAU,CAAC,WAAW,EAAE;YAC5C,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,KAAK;YACL,QAAQ;YACR,GAAG,EAAE,OAAO,CAAC,GAAG;SACjB,CAAC,CAAC;QACH,wEAAwE;QACxE,uCAAuC;QACvC,OAAO,OAAO,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IACjF,CAAC;YAAS,CAAC;QACT,0EAA0E;QAC1E,yEAAyE;QACzE,QAAQ,CAAC,KAAK,EAAE,CAAC;IACnB,CAAC;AACH,CAAC;AAED,KAAK,UAAU,mBAAmB,CAAC,IAAc,EAAE,OAAuB;IACxE,MAAM,EAAE,WAAW,EAAE,KAAK,EAAE,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;IAC/C,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,gBAAgB,CAAC,KAAK,CAAC,CAAC;IACvD,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,cAAc,EAAE,CAAC;IACtD,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,YAAY,CAAC,WAAW,EAAE,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;QACzF,OAAO,OAAO,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IACjF,CAAC;YAAS,CAAC;QACT,QAAQ,CAAC,KAAK,EAAE,CAAC;IACnB,CAAC;AACH,CAAC;AAED,KAAK,UAAU,gBAAgB,CAAC,IAAc,EAAE,OAAuB;IACrE,MAAM,EAAE,WAAW,EAAE,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;IACxC,MAAM,OAAO,GAAG,MAAM,SAAS,CAAC,WAAW,EAAE,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;IACrE,OAAO,OAAO,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;AACjF,CAAC;AAED,4EAA4E;AAE5E;;;;;;GAMG;AACH,KAAK,UAAU,gBAAgB,CAAC,IAAc,EAAE,OAAuB;IACrE,MAAM,CAAC,UAAU,EAAE,GAAG,OAAO,CAAC,GAAG,IAAI,CAAC;IAEtC,IAAI,CAAC,UAAU,IAAI,UAAU,KAAK,QAAQ,IAAI,UAAU,KAAK,IAAI,EAAE,CAAC;QAClE,OAAO,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC;IAC3B,CAAC;IACD,IAAI,UAAU,KAAK,IAAI,EAAE,CAAC;QACxB,OAAO,kBAAkB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAC9C,CAAC;IACD,IAAI,UAAU,KAAK,QAAQ,EAAE,CAAC;QAC5B,OAAO,sBAAsB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAClD,CAAC;IACD,IAAI,UAAU,KAAK,MAAM,EAAE,CAAC;QAC1B,OAAO,oBAAoB,EAAE,CAAC;IAChC,CAAC;IACD,IAAI,UAAU,KAAK,MAAM,EAAE,CAAC;QAC1B,OAAO,oBAAoB,CAAC,OAAO,CAAC,CAAC;IACvC,CAAC;IACD,IAAI,UAAU,KAAK,QAAQ,EAAE,CAAC;QAC5B,OAAO,sBAAsB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAClD,CAAC;IACD,IAAI,UAAU,KAAK,aAAa,EAAE,CAAC;QACjC,OAAO,0BAA0B,CAAC,OAAO,CAAC,CAAC;IAC7C,CAAC;IACD,IAAI,UAAU,KAAK,cAAc,EAAE,CAAC;QAClC,OAAO,2BAA2B,CAAC,OAAO,CAAC,CAAC;IAC9C,CAAC;IACD,IAAI,UAAU,KAAK,OAAO,EAAE,CAAC;QAC3B,OAAO,qBAAqB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IACjD,CAAC;IACD,OAAO,GAAG,CAAC,8BAA8B,UAAU,OAAO,WAAW,EAAE,EAAE,CAAC,CAAC;AAC7E,CAAC;AAED;;;;;;GAMG;AACH,KAAK,UAAU,kBAAkB,CAAC,IAAc,EAAE,OAAuB;IACvE,MAAM,EAAE,KAAK,EAAE,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;IAClC,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,cAAc,EAAE,CAAC;IACtD,uEAAuE;IACvE,yEAAyE;IACzE,0EAA0E;IAC1E,MAAM,WAAW,GAAG,OAAO,CAAC,WAAW,IAAI,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACxE,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,KAAK,CACxB;YACE,GAAG,EAAE,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC;YAC1B,GAAG,EAAE,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC;YAC1B,IAAI,EAAE,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC;YAC5B,UAAU,EAAE,UAAU,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;YAC5C,UAAU,EAAE,QAAQ,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;YAC1C,GAAG,EAAE,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC;SACzB,EACD;YACE,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,QAAQ;YACR,WAAW;YACX,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC5D,CACF,CAAC;QACF,OAAO,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC3B,CAAC;YAAS,CAAC;QACT,QAAQ,CAAC,KAAK,EAAE,CAAC;IACnB,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,KAAK,UAAU,0BAA0B,CAAC,OAAuB;IAC/D,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IACxF,OAAO,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;AAC3B,CAAC;AAED;;;;GAIG;AACH,KAAK,UAAU,2BAA2B,CAAC,OAAuB;IAChE,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IACzF,OAAO,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;AAC3B,CAAC;AAED;;;;;;;;;GASG;AACH,KAAK,UAAU,qBAAqB,CAClC,OAAiB,EACjB,OAAuB;IAEvB,MAAM,WAAW,GAAG,OAAO,CAAC,WAAW,IAAI,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACxE,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,OAAO,EAAE;QACrC,WAAW;QACX,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC5D,CAAC,CAAC;IACH,OAAO,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;AAC3B,CAAC;AAED;;;;;;;;GAQG;AACH,KAAK,UAAU,sBAAsB,CAAC,IAAc,EAAE,OAAuB;IAC3E,MAAM,EAAE,KAAK,EAAE,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;IAClC,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC;QACnC,GAAG,EAAE,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC;QAC1B,GAAG,EAAE,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC;QAC1B,GAAG,EAAE,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC;QACxB,IAAI,EAAE,OAAO,CAAC,IAAI;KACnB,CAAC,CAAC;IACH,OAAO,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;AAC3B,CAAC;AAED;;;;;GAKG;AACH,KAAK,UAAU,oBAAoB;IACjC,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,EAAE,CAAC,CAAC;IACjC,OAAO,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;AAC3B,CAAC;AAED;;;;;;;;;;;GAWG;AACH,KAAK,UAAU,oBAAoB,CAAC,IAAc;IAChD,MAAM,EAAE,WAAW,EAAE,KAAK,EAAE,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;IAC/C,MAAM,MAAM,GAAG,WAAW,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACzF,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,UAAU,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IAC7E,IAAI,MAAM,EAAE,CAAC;QACX,oEAAoE;QACpE,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,IAAI,CAAC,EAAE,CAAC;IACpE,CAAC;IACD,OAAO,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;AAC3B,CAAC;AAED;;;;;GAKG;AACH,KAAK,UAAU,sBAAsB,CAAC,IAAc,EAAE,OAAuB;IAC3E,MAAM,EAAE,KAAK,EAAE,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;IAClC,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,GAAG,EAAE,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACtF,OAAO,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;AAC3B,CAAC;AAED,4EAA4E;AAE5E,SAAS,aAAa,CAAC,OAAe;IACpC,MAAM,MAAM,GACV,OAAO,KAAK,QAAQ;QAClB,CAAC,CAAC,8EAA8E;QAChF,CAAC,CAAC,4FAA4F,CAAC;IACnG,OAAO,EAAE,CAAC,aAAa,OAAO,mCAAmC,MAAM,EAAE,CAAC,CAAC;AAC7E,CAAC;AAED,4EAA4E;AAE5E,MAAM,UAAU,KAAK;IACnB,MAAM,SAAS,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC3D,OAAO;QACL,+CAA+C;QAC/C,EAAE;QACF,WAAW;QACX,2EAA2E;QAC3E,0EAA0E;QAC1E,wEAAwE;QACxE,sEAAsE;QACtE,4EAA4E;QAC5E,iEAAiE;QACjE,yFAAyF;QACzF,0DAA0D;QAC1D,kEAAkE;QAClE,EAAE;QACF,QAAQ;QACR,2DAA2D;QAC3D,uEAAuE;QACvE,sEAAsE;QACtE,wCAAwC;QACxC,8CAA8C;QAC9C,EAAE;QACF,cAAc,SAAS,EAAE;KAC1B,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC;AAED,4EAA4E;AAE5E,SAAS,EAAE,CAAC,MAAc;IACxB,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;AAC7C,CAAC;AAED,SAAS,GAAG,CAAC,MAAc;IACzB,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;AAC7C,CAAC;AAED,qFAAqF;AACrF,SAAS,MAAM,CAAC,MAAc;IAC5B,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;AAC7C,CAAC"}
+{"version":3,"file":"runtime.js","sourceRoot":"","sources":["../src/runtime.ts"],"names":[],"mappings":"AAAA,6DAA6D;AAC7D,EAAE;AACF,4EAA4E;AAC5E,wEAAwE;AACxE,6EAA6E;AAC7E,wEAAwE;AACxE,6EAA6E;AAC7E,8EAA8E;AAC9E,yEAAyE;AACzE,kBAAkB;AAElB,OAAO,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AACnD,OAAO,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAC;AACvD,OAAO,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AACjD,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,EAAE,SAAS,EAAwB,MAAM,aAAa,CAAC;AAChG,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AACrC,OAAO,EAAE,WAAW,EAAc,MAAM,UAAU,CAAC;AACnD,OAAO,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AACpD,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,SAAS,EAAgB,MAAM,iBAAiB,CAAC;AAChF,OAAO,EAAE,cAAc,EAAE,iBAAiB,EAAiB,MAAM,aAAa,CAAC;AAC/E,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAC7C,OAAO,EACL,gBAAgB,EAChB,iBAAiB,EACjB,gBAAgB,EAChB,aAAa,EACb,mBAAmB,GACpB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC3D,OAAO,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAC3C,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAC3C,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,KAAK,EAAE,MAAM,gBAAgB,CAAC;AACvC,OAAO,EAAE,SAAS,IAAI,eAAe,EAAE,MAAM,oBAAoB,CAAC;AAClE,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AACrC,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAqC1C,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC,CAAC;AAEzD;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,MAAM,CAAC,IAAc,EAAE,UAA0B,EAAE;IACvE,IAAI,CAAC;QACH,OAAO,MAAM,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IACvC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,iBAAiB,EAAE,CAAC;YACvC,OAAO,GAAG,CACR,mFAAmF,CACpF,CAAC;QACJ,CAAC;QACD,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACvE,OAAO,GAAG,CAAC,cAAc,OAAO,EAAE,CAAC,CAAC;IACtC,CAAC;AACH,CAAC;AAED,KAAK,UAAU,QAAQ,CAAC,IAAc,EAAE,OAAuB;IAC7D,MAAM,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC;IAEhC,IAAI,CAAC,OAAO,IAAI,OAAO,KAAK,QAAQ,IAAI,OAAO,KAAK,IAAI,IAAI,OAAO,KAAK,MAAM,EAAE,CAAC;QAC/E,OAAO,EAAE,CAAC,KAAK,EAAE,CAAC,CAAC;IACrB,CAAC;IACD,IAAI,OAAO,KAAK,WAAW,IAAI,OAAO,KAAK,IAAI,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;QACzE,OAAO,EAAE,CAAC,UAAU,EAAE,CAAC,CAAC;IAC1B,CAAC;IAED,IAAI,OAAO,KAAK,QAAQ,EAAE,CAAC;QACzB,OAAO,SAAS,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IAClC,CAAC;IAED,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;QAC1B,OAAO,iBAAiB,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IAC1C,CAAC;IACD,IAAI,OAAO,KAAK,WAAW,EAAE,CAAC;QAC5B,OAAO,mBAAmB,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IAC5C,CAAC;IACD,IAAI,OAAO,KAAK,QAAQ,EAAE,CAAC;QACzB,OAAO,gBAAgB,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IACzC,CAAC;IACD,IAAI,OAAO,KAAK,QAAQ,EAAE,CAAC;QACzB,OAAO,EAAE,CAAC,MAAM,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;IACxC,CAAC;IACD,IAAI,OAAO,KAAK,QAAQ,EAAE,CAAC;QACzB,mDAAmD;QACnD,OAAO,EAAE,CAAC,MAAM,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;IACxC,CAAC;IAED,IAAI,OAAO,KAAK,QAAQ,EAAE,CAAC;QACzB,OAAO,gBAAgB,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IACzC,CAAC;IAED,IAAI,aAAa,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;QAC/B,OAAO,aAAa,CAAC,OAAO,CAAC,CAAC;IAChC,CAAC;IAED,OAAO,GAAG,CAAC,oBAAoB,OAAO,OAAO,KAAK,EAAE,EAAE,CAAC,CAAC;AAC1D,CAAC;AAED,4EAA4E;AAE5E,SAAS,SAAS,CAAC,IAAc,EAAE,OAAuB;IACxD,MAAM,EAAE,KAAK,EAAE,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;IAClC,MAAM,MAAM,GAAG,UAAU,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,IAAI,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACrE,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACtC,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,gBAAgB,CAAC,KAAK,CAAC,CAAC;IAEvD,MAAM,QAAQ,GAAG,MAAM,KAAK,SAAS,IAAI,KAAK,KAAK,SAAS,CAAC;IAC7D,IAAI,QAAQ,EAAE,CAAC;QACb,MAAM,OAAO,GAAG,SAAS,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAC5E,kDAAkD;QAClD,OAAO,EAAE,CAAC,CAAC,iBAAiB,EAAE,EAAE,EAAE,YAAY,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IAC/E,CAAC;IAED,MAAM,OAAO,GAA2B,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IACjE,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,EAAE,CACP;YACE,oBAAoB;YACpB,EAAE;YACF,cAAc;YACd,oDAAoD;SACrD,CAAC,IAAI,CAAC,IAAI,CAAC,CACb,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,CAAC,YAAY,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;AAC3C,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAc;IACtC,MAAM,GAAG,GAAG,UAAU,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACpC,IAAI,CAAC,GAAG;QAAE,OAAO,SAAS,CAAC;IAC3B,OAAO,WAAW,CAAC,GAAG,CAAC,CAAC;AAC1B,CAAC;AAED,4EAA4E;AAE5E,KAAK,UAAU,iBAAiB,CAAC,IAAc,EAAE,OAAuB;IACtE,MAAM,EAAE,WAAW,EAAE,KAAK,EAAE,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;IAC/C,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,gBAAgB,CAAC,KAAK,CAAC,CAAC;IACvD,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,cAAc,EAAE,CAAC;IACtD,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,UAAU,CAAC,WAAW,EAAE;YAC5C,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,KAAK;YACL,QAAQ;YACR,GAAG,EAAE,OAAO,CAAC,GAAG;SACjB,CAAC,CAAC;QACH,wEAAwE;QACxE,uCAAuC;QACvC,OAAO,OAAO,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IACjF,CAAC;YAAS,CAAC;QACT,0EAA0E;QAC1E,yEAAyE;QACzE,QAAQ,CAAC,KAAK,EAAE,CAAC;IACnB,CAAC;AACH,CAAC;AAED,KAAK,UAAU,mBAAmB,CAAC,IAAc,EAAE,OAAuB;IACxE,MAAM,EAAE,WAAW,EAAE,KAAK,EAAE,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;IAC/C,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,gBAAgB,CAAC,KAAK,CAAC,CAAC;IACvD,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,cAAc,EAAE,CAAC;IACtD,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,YAAY,CAAC,WAAW,EAAE,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;QACzF,OAAO,OAAO,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IACjF,CAAC;YAAS,CAAC;QACT,QAAQ,CAAC,KAAK,EAAE,CAAC;IACnB,CAAC;AACH,CAAC;AAED,KAAK,UAAU,gBAAgB,CAAC,IAAc,EAAE,OAAuB;IACrE,MAAM,EAAE,WAAW,EAAE,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;IACxC,MAAM,OAAO,GAAG,MAAM,SAAS,CAAC,WAAW,EAAE,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;IACrE,OAAO,OAAO,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;AACjF,CAAC;AAED,4EAA4E;AAE5E;;;;;;GAMG;AACH,KAAK,UAAU,gBAAgB,CAAC,IAAc,EAAE,OAAuB;IACrE,MAAM,CAAC,UAAU,EAAE,GAAG,OAAO,CAAC,GAAG,IAAI,CAAC;IAEtC,IAAI,CAAC,UAAU,IAAI,UAAU,KAAK,QAAQ,IAAI,UAAU,KAAK,IAAI,EAAE,CAAC;QAClE,OAAO,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC;IAC3B,CAAC;IACD,IAAI,UAAU,KAAK,IAAI,EAAE,CAAC;QACxB,OAAO,kBAAkB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAC9C,CAAC;IACD,IAAI,UAAU,KAAK,QAAQ,EAAE,CAAC;QAC5B,OAAO,sBAAsB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAClD,CAAC;IACD,IAAI,UAAU,KAAK,MAAM,EAAE,CAAC;QAC1B,OAAO,oBAAoB,EAAE,CAAC;IAChC,CAAC;IACD,IAAI,UAAU,KAAK,MAAM,EAAE,CAAC;QAC1B,OAAO,oBAAoB,CAAC,OAAO,CAAC,CAAC;IACvC,CAAC;IACD,IAAI,UAAU,KAAK,QAAQ,EAAE,CAAC;QAC5B,OAAO,sBAAsB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAClD,CAAC;IACD,IAAI,UAAU,KAAK,aAAa,EAAE,CAAC;QACjC,OAAO,0BAA0B,CAAC,OAAO,CAAC,CAAC;IAC7C,CAAC;IACD,IAAI,UAAU,KAAK,cAAc,EAAE,CAAC;QAClC,OAAO,2BAA2B,CAAC,OAAO,CAAC,CAAC;IAC9C,CAAC;IACD,IAAI,UAAU,KAAK,YAAY,EAAE,CAAC;QAChC,OAAO,0BAA0B,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IACtD,CAAC;IACD,IAAI,UAAU,KAAK,OAAO,EAAE,CAAC;QAC3B,OAAO,qBAAqB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IACjD,CAAC;IACD,OAAO,GAAG,CAAC,8BAA8B,UAAU,OAAO,WAAW,EAAE,EAAE,CAAC,CAAC;AAC7E,CAAC;AAED;;;;;;GAMG;AACH,KAAK,UAAU,kBAAkB,CAAC,IAAc,EAAE,OAAuB;IACvE,MAAM,EAAE,KAAK,EAAE,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;IAClC,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,cAAc,EAAE,CAAC;IACtD,uEAAuE;IACvE,yEAAyE;IACzE,0EAA0E;IAC1E,MAAM,WAAW,GAAG,OAAO,CAAC,WAAW,IAAI,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACxE,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,KAAK,CACxB;YACE,GAAG,EAAE,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC;YAC1B,GAAG,EAAE,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC;YAC1B,IAAI,EAAE,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC;YAC5B,UAAU,EAAE,UAAU,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;YAC5C,UAAU,EAAE,QAAQ,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;YAC1C,GAAG,EAAE,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC;SACzB,EACD;YACE,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,QAAQ;YACR,WAAW;YACX,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC5D,CACF,CAAC;QACF,OAAO,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC3B,CAAC;YAAS,CAAC;QACT,QAAQ,CAAC,KAAK,EAAE,CAAC;IACnB,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,KAAK,UAAU,0BAA0B,CAAC,OAAuB;IAC/D,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IACxF,OAAO,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;AAC3B,CAAC;AAED;;;;GAIG;AACH,KAAK,UAAU,2BAA2B,CAAC,OAAuB;IAChE,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IACzF,OAAO,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;AAC3B,CAAC;AAED;;;;;;;;;;;GAWG;AACH,KAAK,UAAU,0BAA0B,CACvC,OAAiB,EACjB,OAAuB;IAEvB,MAAM,EAAE,WAAW,EAAE,KAAK,EAAE,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC;IAClD,MAAM,WAAW,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IAC3E,MAAM,IAAI,GAAG,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,GAAG,EAAE,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,GAAG,WAAW,EAAE,CAAC;IAEhF,4EAA4E;IAC5E,2EAA2E;IAC3E,yBAAyB;IACzB,IAAI,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;QACxB,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,IAAI,CAAC,CAAC;QACzC,OAAO,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC3B,CAAC;IAED,MAAM,CAAC,IAAI,CAAC,GAAG,WAAW,CAAC;IAC3B,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;QACtB,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,UAAU,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QACvF,OAAO,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC3B,CAAC;IACD,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QACvB,OAAO,EAAE,CAAC,CAAC,MAAM,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;IACpD,CAAC;IACD,IAAI,IAAI,KAAK,WAAW,EAAE,CAAC;QACzB,OAAO,EAAE,CAAC,CAAC,MAAM,mBAAmB,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;IACtD,CAAC;IACD,IAAI,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QAC5C,OAAO,EAAE,CAAC,CAAC,MAAM,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;IACnD,CAAC;IACD,OAAO,GAAG,CACR,kCAAkC,IAAI,MAAM;QAC1C,+FAA+F,CAClG,CAAC;AACJ,CAAC;AAED;;;;;;;;;GASG;AACH,KAAK,UAAU,qBAAqB,CAClC,OAAiB,EACjB,OAAuB;IAEvB,MAAM,WAAW,GAAG,OAAO,CAAC,WAAW,IAAI,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACxE,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,OAAO,EAAE;QACrC,WAAW;QACX,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC5D,CAAC,CAAC;IACH,OAAO,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;AAC3B,CAAC;AAED;;;;;;;;GAQG;AACH,KAAK,UAAU,sBAAsB,CAAC,IAAc,EAAE,OAAuB;IAC3E,MAAM,EAAE,KAAK,EAAE,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;IAClC,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC;QACnC,GAAG,EAAE,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC;QAC1B,GAAG,EAAE,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC;QAC1B,GAAG,EAAE,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC;QACxB,IAAI,EAAE,OAAO,CAAC,IAAI;KACnB,CAAC,CAAC;IACH,OAAO,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;AAC3B,CAAC;AAED;;;;;GAKG;AACH,KAAK,UAAU,oBAAoB;IACjC,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,EAAE,CAAC,CAAC;IACjC,OAAO,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;AAC3B,CAAC;AAED;;;;;;;;;;;GAWG;AACH,KAAK,UAAU,oBAAoB,CAAC,IAAc;IAChD,MAAM,EAAE,WAAW,EAAE,KAAK,EAAE,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;IAC/C,MAAM,MAAM,GAAG,WAAW,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACzF,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,UAAU,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IAC7E,IAAI,MAAM,EAAE,CAAC;QACX,oEAAoE;QACpE,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,IAAI,CAAC,EAAE,CAAC;IACpE,CAAC;IACD,OAAO,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;AAC3B,CAAC;AAED;;;;;GAKG;AACH,KAAK,UAAU,sBAAsB,CAAC,IAAc,EAAE,OAAuB;IAC3E,MAAM,EAAE,KAAK,EAAE,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;IAClC,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,GAAG,EAAE,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACtF,OAAO,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;AAC3B,CAAC;AAED,4EAA4E;AAE5E,SAAS,aAAa,CAAC,OAAe;IACpC,MAAM,MAAM,GACV,OAAO,KAAK,QAAQ;QAClB,CAAC,CAAC,8EAA8E;QAChF,CAAC,CAAC,4FAA4F,CAAC;IACnG,OAAO,EAAE,CAAC,aAAa,OAAO,mCAAmC,MAAM,EAAE,CAAC,CAAC;AAC7E,CAAC;AAED,4EAA4E;AAE5E,MAAM,UAAU,KAAK;IACnB,MAAM,SAAS,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC3D,OAAO;QACL,+CAA+C;QAC/C,EAAE;QACF,WAAW;QACX,2EAA2E;QAC3E,0EAA0E;QAC1E,wEAAwE;QACxE,sEAAsE;QACtE,4EAA4E;QAC5E,iEAAiE;QACjE,yFAAyF;QACzF,0DAA0D;QAC1D,kEAAkE;QAClE,EAAE;QACF,QAAQ;QACR,2DAA2D;QAC3D,uEAAuE;QACvE,sEAAsE;QACtE,wCAAwC;QACxC,8CAA8C;QAC9C,EAAE;QACF,cAAc,SAAS,EAAE;KAC1B,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC;AAED,4EAA4E;AAE5E,SAAS,EAAE,CAAC,MAAc;IACxB,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;AAC7C,CAAC;AAED,SAAS,GAAG,CAAC,MAAc;IACzB,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;AAC7C,CAAC;AAED,qFAAqF;AACrF,SAAS,MAAM,CAAC,MAAc;IAC5B,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;AAC7C,CAAC"}

package/dist/server/autoupdate.d.ts

@@ -0,0 +1,184 @@
+declare const AUTOUPDATE_CADENCES: readonly ["daily", "weekly"];
+type AutoUpdateCadence = (typeof AUTOUPDATE_CADENCES)[number];
+/** The oneshot service unit that runs the `--run` wrapper (single instance per host). */
+export declare const AUTOUPDATE_SERVICE_NAME = "the-librarian-autoupdate.service";
+/** The timer unit that fires the oneshot service ~hourly. */
+export declare const AUTOUPDATE_TIMER_NAME = "the-librarian-autoupdate.timer";
+/** A stable marker that tags OUR crontab line, so we can find/replace/remove it idempotently. */
+export declare const CRON_MARKER = "# the-librarian-autoupdate";
+/**
+ * The substring every OUR systemd unit's `Description=` carries (both the service
+ * and the timer descriptions start with it). `uninstall` reads a unit file and
+ * confirms this marker BEFORE deleting it (FIX I2) — so a same-named unit a human
+ * authored is never `rm`'d out from under them.
+ */
+export declare const UNIT_DESCRIPTION_MARKER = "The Librarian \u2014 auto-update";
+/** The absolute path the oneshot service is installed at (system unit, via sudo). */
+export declare function servicePath(): string;
+/** The absolute path the timer is installed at (system unit, via sudo). */
+export declare function timerPath(): string;
+/** A teaching error from autoupdate ops; the runtime renders `.message` as one stderr line. */
+export declare class AutoUpdateError extends Error {
+    constructor(message: string);
+}
+export interface AutoUpdateResult {
+    /** Human-readable report for stdout. */
+    output: string;
+}
+export interface AutoUpdateOptions {
+    /** Platform — gates the macOS deferral + systemd-vs-cron choice. Default `process.platform`. */
+    platform?: NodeJS.Platform | undefined;
+    /** Override home (tests). Threads into `server update`/`status`. */
+    home?: string | undefined;
+    /** Deploy dir override. Default: `~/.librarian/server`. Threads into update/status. */
+    dir?: string | undefined;
+}
+export interface EnableOptions extends AutoUpdateOptions {
+    /** Cadence to write into the running server. Default daily. Validated daily|weekly. */
+    cadence?: string | undefined;
+}
+export interface RunOptions extends AutoUpdateOptions {
+    /**
+     * Sink for the wrapper's one-line log entries (the timer's journal). Defaults
+     * to a `process.stderr` writer; tests inject a recorder. Every wrapper outcome
+     * (skip / update / failure) emits exactly one line here — and the wrapper never
+     * throws, so the timer's unit always exits 0.
+     */
+    log?: ((line: string) => void) | undefined;
+    /** Health-wait bound for the inner `server update` (small in tests). */
+    healthAttempts?: number | undefined;
+    /** Milliseconds between health polls for the inner update (0 in tests). */
+    healthIntervalMs?: number | undefined;
+    /** Injected current time for the due-check (tests). Default `new Date()`. */
+    now?: Date | undefined;
+}
+/** Inputs to the pure service generator (only the librarian path — NEVER a secret). */
+export interface ServiceUnitInput {
+    /** Absolute path to the `librarian` binary the oneshot runs with `server autoupdate --run`. */
+    librarianPath: string;
+}
+/**
+ * Generate the oneshot service unit text. PURE + unit-tested. Contains NO secret —
+ * it runs `librarian server autoupdate --run`, which reads the settings from the
+ * running container itself (via `docker exec`), so nothing sensitive is written
+ * into this world-readable unit file. `Type=oneshot` because the wrapper runs to
+ * completion each fire (it is the timer's job to schedule, not the service's).
+ */
+export declare function generateServiceUnit(input: ServiceUnitInput): string;
+/**
+ * Generate the timer unit text. PURE + unit-tested. Fires the oneshot service
+ * roughly hourly (`OnCalendar=hourly`, with `Persistent=true` so a missed fire
+ * while the host was off runs at next boot). The FREQUENT fire is deliberate: the
+ * cadence (daily/weekly) is a due-check IN the wrapper, NOT the timer period — so
+ * the dashboard can change cadence (a setting) with no host action (spec §4). A
+ * randomized delay spreads load and avoids every host updating on the exact hour.
+ */
+export declare function generateTimerUnit(): string;
+/**
+ * The crontab line for the cron fallback (systemd absent). Fires the wrapper at
+ * minute 17 of every hour (off the top-of-hour to spread load), tagged with
+ * {@link CRON_MARKER} so it can be found/replaced/removed idempotently. NO secret
+ * — same reasoning as the systemd unit (the wrapper reads settings from the
+ * container at run time).
+ */
+export declare function cronLine(librarianPath: string): string;
+/** The one-line macOS-deferred notice (boot persistence + autoupdate are Linux-only for now). */
+export declare const MACOS_NOTICE: string;
+/** The configured auto-update state read from the running server. */
+export interface RunningConfig {
+    enabled: boolean;
+    cadence: AutoUpdateCadence;
+    lastRunAt: string | null;
+}
+/**
+ * Read the auto-update config from the RUNNING server via `docker exec node -e`
+ * (the internal tRPC listener, loopback inside the container). Returns null when
+ * the container is down / the exec fails / the response is unusable — the caller
+ * treats null as "unreachable" and SKIPS (never auto-updates an unknown server).
+ * Never throws.
+ */
+export declare function readRunningConfig(): Promise<RunningConfig | null>;
+/**
+ * Write the auto-update config into the RUNNING server (so the dashboard reflects
+ * the CLI's enable/cadence) via `docker exec node -e` → internal tRPC `set`.
+ * Returns true on success, false when the container is down / the write failed.
+ * Never throws — a write failure during `enable` is surfaced as a non-fatal hint
+ * (the timer is still installed; the operator can toggle from the dashboard).
+ */
+export declare function writeRunningConfig(input: {
+    enabled?: boolean;
+    cadence?: AutoUpdateCadence;
+}): Promise<boolean>;
+/**
+ * Stamp `last_run_at` to NOW in the running server (the internal tRPC `stampRun`)
+ * after a SUCCESSFUL auto-update, so the next due-check advances by one cadence
+ * window. Returns true on success, false when the (freshly recreated) container
+ * isn't reachable yet / the call failed — a failed stamp is non-fatal (the update
+ * itself succeeded; the worst case is one extra due-check next fire). Never throws.
+ */
+export declare function stampRunInServer(): Promise<boolean>;
+/**
+ * Install the host scheduler + write the enabled/cadence settings into the running
+ * server. On Linux with systemd: write the oneshot service + the .timer to
+ * `/etc/systemd/system`, `daemon-reload`, then `enable --now` the TIMER (the
+ * service is oneshot — only the timer is enabled). Idempotent: re-running rewrites
+ * the SAME unit paths and re-enables, never duplicating. Where systemd is absent:
+ * install an hourly cron line (idempotent via {@link CRON_MARKER}). On macOS: print
+ * the deferred notice and skip cleanly.
+ *
+ * The settings write (enabled=true + cadence) is best-effort: a down server is a
+ * non-fatal hint (the timer is installed; the operator toggles from the dashboard
+ * once the server is up). The timer is what makes auto-update actually happen.
+ */
+export declare function enableAutoUpdate(options?: EnableOptions): Promise<AutoUpdateResult>;
+/**
+ * Disable auto-update WITHOUT removing the timer (spec §3 SC2): flip
+ * `enabled=false` in the running server so the next `--run` no-ops, leaving the
+ * timer installed. Idempotent. A down server is a teaching error (we can't flip a
+ * setting on a server we can't reach) — the operator can also toggle it off from
+ * the dashboard.
+ */
+export declare function disableAutoUpdate(options?: AutoUpdateOptions): Promise<AutoUpdateResult>;
+/**
+ * Remove the host scheduler entirely (spec §3 SC2): on systemd, `disable --now`
+ * the timer (tolerating "not loaded"), remove BOTH unit files, then
+ * `daemon-reload`. Where systemd is absent, strip our tagged crontab line. Safe if
+ * already absent — idempotent, never a crash. Does NOT touch the server's
+ * `enabled` setting (the timer is gone, so it no longer matters; leaving the
+ * setting avoids a needless server round-trip on a down server). On macOS: notice.
+ */
+export declare function uninstallAutoUpdate(options?: AutoUpdateOptions): Promise<AutoUpdateResult>;
+/**
+ * Report the auto-update state (spec §3 SC3): is the timer/cron installed?, the
+ * server's enabled/cadence/last-run (read from the running server), and the
+ * up-to-date badge (reusing `server status`' deployed-vs-latest render). A down
+ * server degrades the server-side fields to "unknown (server unreachable)" but
+ * still reports the host-side timer state and exits 0.
+ */
+export declare function autoUpdateStatus(options?: AutoUpdateOptions): Promise<AutoUpdateResult>;
+/** The fixed lock path: `~/.librarian/server/.autoupdate.lock` (no root needed). */
+export declare function autoUpdateLockPath(options: {
+    home?: string | undefined;
+    dir?: string | undefined;
+}): string;
+/**
+ * The wrapper the timer/cron fires (spec §3 SC4/SC7). Reads the auto-update
+ * settings from the RUNNING server, applies the due-check, and conditionally runs
+ * `server update`. FULLY FAIL-SOFT — it NEVER throws (the timer's unit always
+ * exits 0); every outcome is one log line:
+ *
+ *   - Server UNREACHABLE → SKIP (never auto-update a server in an unknown state).
+ *   - NOT (enabled && due) → SKIP (the no-op the disabled/not-due case wants).
+ *   - enabled && due → run `server update`. On SUCCESS, stamp `last_run_at`
+ *     (so the next due-check advances). On FAILURE (the update's own health-check
+ *     rollback left the prior container running), log + do NOT stamp (so the next
+ *     fire retries).
+ *
+ * The due-check is computed HOST-SIDE from the config the server returned (so the
+ * single source of truth — the core helper's logic — is mirrored here without a
+ * second round-trip): enabled AND the cadence has elapsed since `lastRunAt`
+ * (never-run → due).
+ */
+export declare function runAutoUpdate(options?: RunOptions): Promise<AutoUpdateResult>;
+export {};
+//# sourceMappingURL=autoupdate.d.ts.map

package/dist/server/autoupdate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"autoupdate.d.ts","sourceRoot":"","sources":["../../src/server/autoupdate.ts"],"names":[],"mappings":"AAiEA,QAAA,MAAM,mBAAmB,8BAA+B,CAAC;AACzD,KAAK,iBAAiB,GAAG,CAAC,OAAO,mBAAmB,CAAC,CAAC,MAAM,CAAC,CAAC;AAM9D,yFAAyF;AACzF,eAAO,MAAM,uBAAuB,qCAAqC,CAAC;AAE1E,6DAA6D;AAC7D,eAAO,MAAM,qBAAqB,mCAAmC,CAAC;AAKtE,iGAAiG;AACjG,eAAO,MAAM,WAAW,+BAA+B,CAAC;AAExD;;;;;GAKG;AACH,eAAO,MAAM,uBAAuB,qCAAgC,CAAC;AAQrE,qFAAqF;AACrF,wBAAgB,WAAW,IAAI,MAAM,CAEpC;AAED,2EAA2E;AAC3E,wBAAgB,SAAS,IAAI,MAAM,CAElC;AAED,+FAA+F;AAC/F,qBAAa,eAAgB,SAAQ,KAAK;gBAC5B,OAAO,EAAE,MAAM;CAI5B;AAED,MAAM,WAAW,gBAAgB;IAC/B,wCAAwC;IACxC,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,iBAAiB;IAChC,gGAAgG;IAChG,QAAQ,CAAC,EAAE,MAAM,CAAC,QAAQ,GAAG,SAAS,CAAC;IACvC,oEAAoE;IACpE,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC1B,uFAAuF;IACvF,GAAG,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAC1B;AAED,MAAM,WAAW,aAAc,SAAQ,iBAAiB;IACtD,uFAAuF;IACvF,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAC9B;AAED,MAAM,WAAW,UAAW,SAAQ,iBAAiB;IACnD;;;;;OAKG;IACH,GAAG,CAAC,EAAE,CAAC,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC,GAAG,SAAS,CAAC;IAC3C,wEAAwE;IACxE,cAAc,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACpC,2EAA2E;IAC3E,gBAAgB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACtC,6EAA6E;IAC7E,GAAG,CAAC,EAAE,IAAI,GAAG,SAAS,CAAC;CACxB;AAID,uFAAuF;AACvF,MAAM,WAAW,gBAAgB;IAC/B,+FAA+F;IAC/F,aAAa,EAAE,MAAM,CAAC;CACvB;AAED;;;;;;GAMG;AACH,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,gBAAgB,GAAG,MAAM,CA4BnE;AAED;;;;;;;GAOG;AACH,wBAAgB,iBAAiB,IAAI,MAAM,CAkB1C;AAED;;;;;;GAMG;AACH,wBAAgB,QAAQ,CAAC,aAAa,EAAE,MAAM,GAAG,MAAM,CAEtD;AAwCD,iGAAiG;AACjG,eAAO,MAAM,YAAY,QAG6D,CAAC;AAgDvF,qEAAqE;AACrE,MAAM,WAAW,aAAa;IAC5B,OAAO,EAAE,OAAO,CAAC;IACjB,OAAO,EAAE,iBAAiB,CAAC;IAC3B,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;CAC1B;AAED;;;;;;GAMG;AACH,wBAAsB,iBAAiB,IAAI,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC,CAqBvE;AAED;;;;;;GAMG;AACH,wBAAsB,kBAAkB,CAAC,KAAK,EAAE;IAC9C,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,OAAO,CAAC,EAAE,iBAAiB,CAAC;CAC7B,GAAG,OAAO,CAAC,OAAO,CAAC,CASnB;AAED;;;;;;GAMG;AACH,wBAAsB,gBAAgB,IAAI,OAAO,CAAC,OAAO,CAAC,CASzD;AAiDD;;;;;;;;;;;;GAYG;AACH,wBAAsB,gBAAgB,CAAC,OAAO,GAAE,aAAkB,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAqD7F;AAgBD;;;;;;GAMG;AACH,wBAAsB,iBAAiB,CACrC,OAAO,GAAE,iBAAsB,GAC9B,OAAO,CAAC,gBAAgB,CAAC,CAmB3B;AAID;;;;;;;GAOG;AACH,wBAAsB,mBAAmB,CACvC,OAAO,GAAE,iBAAsB,GAC9B,OAAO,CAAC,gBAAgB,CAAC,CAmC3B;AAkFD;;;;;;GAMG;AACH,wBAAsB,gBAAgB,CAAC,OAAO,GAAE,iBAAsB,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAgDjG;AA+BD,oFAAoF;AACpF,wBAAgB,kBAAkB,CAAC,OAAO,EAAE;IAC1C,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC1B,GAAG,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAC1B,GAAG,MAAM,CAGT;AAuFD;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAsB,aAAa,CAAC,OAAO,GAAE,UAAe,GAAG,OAAO,CAAC,gBAAgB,CAAC,CA8EvF"}

package/dist/server/autoupdate.js

@@ -0,0 +1,794 @@
+// `librarian server autoupdate <enable|disable|uninstall|status|--run>` — the
+// HOST half of the server auto-update feature (spec 2026-06-16-server-autoupdate
+// T3). The server settings + admin tRPC are T1/T2; this is the scheduler that
+// actually performs the update on the host.
+//
+// THE ARCHITECTURAL CONSTRAINT (spec §2). `server update` is host-level: it
+// rebuilds the image and `docker rm`s + recreates the container. A process INSIDE
+// the container cannot recreate its own container (no docker-socket access, by
+// design). So the act of updating MUST run on the host. This module installs a
+// host scheduler (a systemd timer; a cron fallback where systemd is absent) that
+// fires frequently (~hourly) and runs `librarian server autoupdate --run`. The
+// wrapper reads the auto-update settings from the RUNNING server, applies the
+// due-check, and conditionally calls `server update`. The dashboard/CLI only
+// WRITE the settings (enabled, cadence) — never the host action.
+//
+// HOW `--run` READS THE SETTINGS (decision). The settings live in the server's
+// data volume, and the admin tRPC that reads them is served only on the INTERNAL
+// listener (127.0.0.1:3840 inside the container — ADR 0008 P1/P3, no bearer
+// gate), which is NOT published to the host. A named docker volume is not a clean
+// host path either. So the wrapper reaches the settings the SAME way `server
+// admin` reaches in-container state: `docker exec the-librarian node -e <script>`,
+// where the script does a localhost `fetch` of the internal tRPC `autoupdate.get`
+// / `autoupdate.set` from inside the container. This is the cleanest mechanism —
+// it reuses the existing exec seam, needs no published port, and honours ADR
+// 0008's "the socket is the gate" model (the internal listener trusts loopback).
+//
+// FAIL-SOFT (AGENTS.md + spec §3 SC4/SC7). The `--run` wrapper NEVER throws out of
+// the timer: any failure (server unreachable, a non-zero update) is logged on one
+// line and the wrapper exits 0. Server unreachable → SKIP (conservative: never
+// auto-update a server in an unknown state). A successful update stamps
+// `last_run_at`; a FAILED update does NOT stamp it (so the next fire retries) and
+// relies on `server update`'s own health-check rollback to leave the prior
+// container running.
+//
+// Everything privileged routes through the injectable `docker.ts` runner (the
+// same seam boot.ts uses), so tests assert the exact systemctl/crontab/docker
+// argv without a real systemd, cron, or docker.
+import { closeSync, mkdirSync, mkdtempSync, openSync, readFileSync, rmSync, statSync, unlinkSync, writeFileSync, writeSync, } from "node:fs";
+import { tmpdir } from "node:os";
+import path from "node:path";
+import { librarianDir } from "../paths.js";
+import { run, which } from "./docker.js";
+import { redactSecrets } from "./redact.js";
+import { serverStatus } from "./status.js";
+import { CONTAINER_NAME } from "./up.js";
+import { runUpdate, UpdateError } from "./update.js";
+// Cadence constants are defined LOCALLY here, NOT imported from `@librarian/core`, so
+// the public `@the-librarian/cli` stays lightweight — `core` pulls in node-llama-cpp /
+// the embeddings stack, which the CLI must never depend on. The server-side
+// `autoupdate.set` tRPC (which DOES use core) is the authoritative cadence validator;
+// this CLI-side copy is only a pre-touch UX check on `enable`. Keep in sync with
+// `packages/core/src/server-autoupdate-config.ts`.
+const AUTOUPDATE_CADENCES = ["daily", "weekly"];
+const DEFAULT_AUTOUPDATE_CADENCE = "daily";
+function isAutoUpdateCadence(value) {
+    return AUTOUPDATE_CADENCES.includes(value);
+}
+/** The oneshot service unit that runs the `--run` wrapper (single instance per host). */
+export const AUTOUPDATE_SERVICE_NAME = "the-librarian-autoupdate.service";
+/** The timer unit that fires the oneshot service ~hourly. */
+export const AUTOUPDATE_TIMER_NAME = "the-librarian-autoupdate.timer";
+/** The system-unit directory (a system timer fires without a login session). */
+const SYSTEMD_SYSTEM_DIR = "/etc/systemd/system";
+/** A stable marker that tags OUR crontab line, so we can find/replace/remove it idempotently. */
+export const CRON_MARKER = "# the-librarian-autoupdate";
+/**
+ * The substring every OUR systemd unit's `Description=` carries (both the service
+ * and the timer descriptions start with it). `uninstall` reads a unit file and
+ * confirms this marker BEFORE deleting it (FIX I2) — so a same-named unit a human
+ * authored is never `rm`'d out from under them.
+ */
+export const UNIT_DESCRIPTION_MARKER = "The Librarian — auto-update";
+/** Fallback `librarian` path if `which librarian` can't be resolved (npm global bin). */
+const DEFAULT_LIBRARIAN_PATH = "/usr/local/bin/librarian";
+/** The internal tRPC listener inside the container (ADR 0008 P1 default). */
+const INTERNAL_TRPC_URL = "http://127.0.0.1:3840/trpc";
+/** The absolute path the oneshot service is installed at (system unit, via sudo). */
+export function servicePath() {
+    return path.join(SYSTEMD_SYSTEM_DIR, AUTOUPDATE_SERVICE_NAME);
+}
+/** The absolute path the timer is installed at (system unit, via sudo). */
+export function timerPath() {
+    return path.join(SYSTEMD_SYSTEM_DIR, AUTOUPDATE_TIMER_NAME);
+}
+/** A teaching error from autoupdate ops; the runtime renders `.message` as one stderr line. */
+export class AutoUpdateError extends Error {
+    constructor(message) {
+        super(message);
+        this.name = "AutoUpdateError";
+    }
+}
+/**
+ * Generate the oneshot service unit text. PURE + unit-tested. Contains NO secret —
+ * it runs `librarian server autoupdate --run`, which reads the settings from the
+ * running container itself (via `docker exec`), so nothing sensitive is written
+ * into this world-readable unit file. `Type=oneshot` because the wrapper runs to
+ * completion each fire (it is the timer's job to schedule, not the service's).
+ */
+export function generateServiceUnit(input) {
+    const { librarianPath } = input;
+    // The path is validated whitespace/metacharacter-free before it reaches here
+    // (see `assertSafeLibrarianPath` in `enableAutoUpdate`), so a bare (unquoted)
+    // `ExecStart` token is safe — systemd splits ExecStart on whitespace.
+    return [
+        "[Unit]",
+        "Description=The Librarian — auto-update check (host-scheduled)",
+        "After=docker.service",
+        "Wants=network-online.target",
+        "",
+        "[Service]",
+        "Type=oneshot",
+        // ROOT is required (not a smell): `server update` drives the host docker
+        // daemon (build / stop / rm / run) and writes a 0600 deploy env-file under
+        // /etc — neither is reachable from an unprivileged unit. We do NOT downgrade
+        // the user; instead we add the defense-in-depth knob below.
+        // NoNewPrivileges: even running as root, forbid this oneshot from gaining
+        // ANY new privileges via setuid/setgid/capabilities on the binaries it execs
+        // (docker/git) — an auto-executing root unit should grant no more than it needs.
+        "NoNewPrivileges=true",
+        // The wrapper reads the auto-update settings from the running container and,
+        // if due, performs `server update`. It carries NO secret on this argv: the
+        // settings + the container's credentials live in the container, reached via
+        // `docker exec` at run time, not baked into this file.
+        `ExecStart=${librarianPath} server autoupdate --run`,
+        "",
+    ].join("\n");
+}
+/**
+ * Generate the timer unit text. PURE + unit-tested. Fires the oneshot service
+ * roughly hourly (`OnCalendar=hourly`, with `Persistent=true` so a missed fire
+ * while the host was off runs at next boot). The FREQUENT fire is deliberate: the
+ * cadence (daily/weekly) is a due-check IN the wrapper, NOT the timer period — so
+ * the dashboard can change cadence (a setting) with no host action (spec §4). A
+ * randomized delay spreads load and avoids every host updating on the exact hour.
+ */
+export function generateTimerUnit() {
+    return [
+        "[Unit]",
+        "Description=The Librarian — auto-update timer (fires the check hourly)",
+        "",
+        "[Timer]",
+        // Hourly poll; the cadence due-check inside the wrapper decides whether to act.
+        "OnCalendar=hourly",
+        // Run a missed fire (host was off) on next boot rather than skipping the window.
+        "Persistent=true",
+        // Spread load: fire up to 5 min after the hour rather than exactly on it.
+        "RandomizedDelaySec=300",
+        `Unit=${AUTOUPDATE_SERVICE_NAME}`,
+        "",
+        "[Install]",
+        "WantedBy=timers.target",
+        "",
+    ].join("\n");
+}
+/**
+ * The crontab line for the cron fallback (systemd absent). Fires the wrapper at
+ * minute 17 of every hour (off the top-of-hour to spread load), tagged with
+ * {@link CRON_MARKER} so it can be found/replaced/removed idempotently. NO secret
+ * — same reasoning as the systemd unit (the wrapper reads settings from the
+ * container at run time).
+ */
+export function cronLine(librarianPath) {
+    return `17 * * * * ${librarianPath} server autoupdate --run ${CRON_MARKER}`;
+}
+// --- librarian-path resolution -------------------------------------------
+/**
+ * Resolve the absolute `librarian` path the scheduler invokes. Goes through the
+ * injectable runner (`which librarian`); falls back to the npm-global bin so a
+ * non-standard `which` output never breaks unit/cron generation. The path is
+ * non-secret, so a fallback is safe.
+ */
+async function resolveLibrarianPath() {
+    const resolved = await which("librarian");
+    return resolved && resolved.trim().length > 0 ? resolved.trim() : DEFAULT_LIBRARIAN_PATH;
+}
+/**
+ * Reject a `librarian` path that isn't safe to interpolate UNQUOTED into a systemd
+ * `ExecStart` / a cron line (FIX I1). systemd splits `ExecStart` on whitespace and
+ * cron passes the line to `/bin/sh`, so a path containing a space (e.g. an npm
+ * prefix under `/home/jane doe/`) or a shell metacharacter would silently break
+ * the timer — or worse, inject. Rather than wrap quoting rules around two different
+ * grammars, we REJECT at `enable` with a teaching error (the cleanest fix): the
+ * resolved binary path must contain none of these characters. The operator then
+ * symlinks/installs `librarian` to a clean path and re-runs.
+ */
+function assertSafeLibrarianPath(librarianPath) {
+    // Whitespace OR any shell/systemd-significant metacharacter is rejected.
+    if (/\s/.test(librarianPath) || /["'`$\\;&|<>(){}*?!#~]/.test(librarianPath)) {
+        throw new AutoUpdateError(`The resolved \`librarian\` path is not safe to schedule unquoted:\n  ${librarianPath}\n\n` +
+            "It contains whitespace or a shell/systemd metacharacter, which would break the " +
+            "systemd timer's ExecStart (or the cron line). Install or symlink `librarian` to a " +
+            "path with no spaces or special characters (e.g. `/usr/local/bin/librarian`) and " +
+            "re-run `librarian server autoupdate enable`.");
+    }
+}
+// --- platform helpers ----------------------------------------------------
+/** The one-line macOS-deferred notice (boot persistence + autoupdate are Linux-only for now). */
+export const MACOS_NOTICE = "Host auto-update scheduling is Linux-only for now (systemd timer / cron). " +
+    "Skipping — on macOS, run `librarian server update` manually, or schedule it " +
+    "yourself (e.g. a launchd agent / cron) to run `librarian server autoupdate --run`.";
+/** True iff host scheduling is unsupported on this platform (macOS for now). */
+function isUnsupportedPlatform(platform) {
+    return platform === "darwin";
+}
+/** True iff `systemctl` is on PATH (→ prefer the systemd timer over cron). */
+async function hasSystemd() {
+    return (await which("systemctl")) !== null;
+}
+// --- the in-container settings bridge (docker exec node -e) ---------------
+/**
+ * A tiny Node script run INSIDE the container (`docker exec the-librarian node -e
+ * <script>`) that talks to the internal tRPC listener over loopback. `op` is
+ * `get` or `set`; for `set`, `input` is the JSON body. It prints the JSON result
+ * to stdout (for `get`) or "ok" (for `set`), and exits non-zero on any failure so
+ * the host wrapper can treat an unreachable/erroring server as a skip.
+ *
+ * Built as a single-line script with no string interpolation of untrusted data
+ * (the cadence is validated daily|weekly before it reaches here; enabled is a
+ * boolean), so there's no injection surface.
+ */
+function bridgeScript(op, input) {
+    const base = `${INTERNAL_TRPC_URL}/autoupdate.${op}`;
+    if (op === "get") {
+        return (`fetch(${JSON.stringify(base)})` +
+            `.then(r=>r.json())` +
+            `.then(j=>{if(j.error){process.exit(3)}process.stdout.write(JSON.stringify(j.result.data))})` +
+            `.catch(()=>process.exit(2))`);
+    }
+    // POST mutations (`set` carries a JSON body; `stampRun` takes no input).
+    const bodyArg = op === "set" ? `,body:${JSON.stringify(JSON.stringify(input ?? {}))}` : "";
+    return (`fetch(${JSON.stringify(base)},{method:"POST",headers:{"content-type":"application/json"}${bodyArg}})` +
+        `.then(r=>r.json())` +
+        `.then(j=>{if(j.error){process.exit(3)}process.stdout.write("ok")})` +
+        `.catch(()=>process.exit(2))`);
+}
+/**
+ * Read the auto-update config from the RUNNING server via `docker exec node -e`
+ * (the internal tRPC listener, loopback inside the container). Returns null when
+ * the container is down / the exec fails / the response is unusable — the caller
+ * treats null as "unreachable" and SKIPS (never auto-updates an unknown server).
+ * Never throws.
+ */
+export async function readRunningConfig() {
+    const result = await run("docker", ["exec", CONTAINER_NAME, "node", "-e", bridgeScript("get")]);
+    if (result.code !== 0)
+        return null;
+    try {
+        const parsed = JSON.parse(result.stdout.trim());
+        const cadence = typeof parsed.cadence === "string" && isAutoUpdateCadence(parsed.cadence)
+            ? parsed.cadence
+            : DEFAULT_AUTOUPDATE_CADENCE;
+        return {
+            enabled: parsed.enabled === true,
+            cadence,
+            lastRunAt: typeof parsed.lastRunAt === "string" ? parsed.lastRunAt : null,
+        };
+    }
+    catch {
+        return null;
+    }
+}
+/**
+ * Write the auto-update config into the RUNNING server (so the dashboard reflects
+ * the CLI's enable/cadence) via `docker exec node -e` → internal tRPC `set`.
+ * Returns true on success, false when the container is down / the write failed.
+ * Never throws — a write failure during `enable` is surfaced as a non-fatal hint
+ * (the timer is still installed; the operator can toggle from the dashboard).
+ */
+export async function writeRunningConfig(input) {
+    const result = await run("docker", [
+        "exec",
+        CONTAINER_NAME,
+        "node",
+        "-e",
+        bridgeScript("set", input),
+    ]);
+    return result.code === 0;
+}
+/**
+ * Stamp `last_run_at` to NOW in the running server (the internal tRPC `stampRun`)
+ * after a SUCCESSFUL auto-update, so the next due-check advances by one cadence
+ * window. Returns true on success, false when the (freshly recreated) container
+ * isn't reachable yet / the call failed — a failed stamp is non-fatal (the update
+ * itself succeeded; the worst case is one extra due-check next fire). Never throws.
+ */
+export async function stampRunInServer() {
+    const result = await run("docker", [
+        "exec",
+        CONTAINER_NAME,
+        "node",
+        "-e",
+        bridgeScript("stampRun"),
+    ]);
+    return result.code === 0;
+}
+// --- privileged systemd steps (every one through the injectable runner) ---
+/** Write a unit file to the system path via temp-file + `sudo cp` + `sudo chmod 644`. */
+async function installUnit(name, dest, unit) {
+    const dir = mkdtempSync(path.join(tmpdir(), "librarian-autoupdate-unit-"));
+    const tmp = path.join(dir, name);
+    writeFileSync(tmp, unit, "utf8");
+    try {
+        await sudoRun(["cp", tmp, dest]);
+        await sudoRun(["chmod", "644", dest]);
+    }
+    finally {
+        rmSync(dir, { recursive: true, force: true });
+    }
+}
+/** Run `sudo systemctl <args…>`; a non-zero exit is a teaching error. */
+async function sudoSystemctl(args) {
+    await sudoRun(["systemctl", ...args]);
+}
+/** Run `sudo <args…>`; a non-zero exit is a teaching error. */
+async function sudoRun(args) {
+    const result = await run("sudo", args);
+    failIfNonZero("sudo", args, result);
+}
+/** True when a `systemctl disable` failure means the unit simply isn't loaded. */
+function isUnitAbsent(stderr) {
+    return /does not exist|not loaded|no such file|not found/i.test(stderr);
+}
+function failIfNonZero(cmd, args, result) {
+    if (result.code === 0)
+        return;
+    const detail = result.stderr.trim() || result.stdout.trim();
+    throw new AutoUpdateError(`\`${cmd} ${args[0]}\` failed (exit ${result.code ?? "signal"})` +
+        (detail ? `:\n${detail}` : ".") +
+        "\n\nResolve the error above (you may need sudo privileges), then re-run the command.");
+}
+// --- enable --------------------------------------------------------------
+/**
+ * Install the host scheduler + write the enabled/cadence settings into the running
+ * server. On Linux with systemd: write the oneshot service + the .timer to
+ * `/etc/systemd/system`, `daemon-reload`, then `enable --now` the TIMER (the
+ * service is oneshot — only the timer is enabled). Idempotent: re-running rewrites
+ * the SAME unit paths and re-enables, never duplicating. Where systemd is absent:
+ * install an hourly cron line (idempotent via {@link CRON_MARKER}). On macOS: print
+ * the deferred notice and skip cleanly.
+ *
+ * The settings write (enabled=true + cadence) is best-effort: a down server is a
+ * non-fatal hint (the timer is installed; the operator toggles from the dashboard
+ * once the server is up). The timer is what makes auto-update actually happen.
+ */
+export async function enableAutoUpdate(options = {}) {
+    const platform = options.platform ?? process.platform;
+    if (isUnsupportedPlatform(platform)) {
+        return { output: MACOS_NOTICE };
+    }
+    // Validate the cadence BEFORE touching the host (a bad cadence is a teaching
+    // error, not a half-installed timer). Default daily.
+    const cadence = resolveCadence(options.cadence);
+    const librarianPath = await resolveLibrarianPath();
+    // Reject a path that isn't safe to interpolate UNQUOTED into the unit/cron line
+    // BEFORE touching the host (a bad path is a teaching error, not a broken timer).
+    assertSafeLibrarianPath(librarianPath);
+    const lines = [];
+    if (await hasSystemd()) {
+        await installUnit(AUTOUPDATE_SERVICE_NAME, servicePath(), generateServiceUnit({ librarianPath }));
+        await installUnit(AUTOUPDATE_TIMER_NAME, timerPath(), generateTimerUnit());
+        // daemon-reload BEFORE enable --now so systemd sees the (possibly rewritten)
+        // units. Only the TIMER is enabled (the service is oneshot, fired by the timer).
+        await sudoSystemctl(["daemon-reload"]);
+        await sudoSystemctl(["enable", "--now", AUTOUPDATE_TIMER_NAME]);
+        lines.push(`Auto-update timer installed — ${AUTOUPDATE_TIMER_NAME} fires hourly and runs the due-check.`, `  Units: ${servicePath()} + ${timerPath()} (no secret in either file).`);
+    }
+    else {
+        await installCron(librarianPath);
+        lines.push("Auto-update cron entry installed — runs the due-check hourly (systemd not found).", `  Tagged \`${CRON_MARKER}\` in your crontab (remove with \`librarian server autoupdate uninstall\`).`);
+    }
+    // Write the enabled + cadence settings into the running server so the dashboard
+    // reflects them. Best-effort — a down server is a hint, not a failure.
+    const wrote = await writeRunningConfig({ enabled: true, cadence });
+    if (wrote) {
+        lines.push(`Enabled auto-update in the running server (cadence: ${cadence}).`);
+    }
+    else {
+        lines.push(`Could not reach the running server to set enabled/cadence (is it up?). The timer is ` +
+            `installed; enable + set the ${cadence} cadence from the dashboard, or re-run this once ` +
+            `the server is up.`);
+    }
+    return { output: lines.join("\n") };
+}
+/** Validate + default the cadence; a bad value is a teaching error before any host change. */
+function resolveCadence(raw) {
+    if (raw === undefined || raw.trim().length === 0)
+        return DEFAULT_AUTOUPDATE_CADENCE;
+    const c = raw.trim();
+    if (!isAutoUpdateCadence(c)) {
+        throw new AutoUpdateError(`cadence must be one of ${AUTOUPDATE_CADENCES.join(" | ")}, got '${c}'.`);
+    }
+    return c;
+}
+// --- disable -------------------------------------------------------------
+/**
+ * Disable auto-update WITHOUT removing the timer (spec §3 SC2): flip
+ * `enabled=false` in the running server so the next `--run` no-ops, leaving the
+ * timer installed. Idempotent. A down server is a teaching error (we can't flip a
+ * setting on a server we can't reach) — the operator can also toggle it off from
+ * the dashboard.
+ */
+export async function disableAutoUpdate(options = {}) {
+    const platform = options.platform ?? process.platform;
+    if (isUnsupportedPlatform(platform)) {
+        return { output: MACOS_NOTICE };
+    }
+    const wrote = await writeRunningConfig({ enabled: false });
+    if (!wrote) {
+        throw new AutoUpdateError("Could not reach the running server to disable auto-update. Is it up " +
+            "(`librarian server status`)? You can also toggle auto-update off from the dashboard. " +
+            "The host timer is left installed; once disabled, the next fire will no-op.");
+    }
+    return {
+        output: [
+            "Auto-update disabled — the setting is off, so the next timer fire will no-op.",
+            "The host timer is left installed; remove it entirely with `librarian server autoupdate uninstall`.",
+        ].join("\n"),
+    };
+}
+// --- uninstall -----------------------------------------------------------
+/**
+ * Remove the host scheduler entirely (spec §3 SC2): on systemd, `disable --now`
+ * the timer (tolerating "not loaded"), remove BOTH unit files, then
+ * `daemon-reload`. Where systemd is absent, strip our tagged crontab line. Safe if
+ * already absent — idempotent, never a crash. Does NOT touch the server's
+ * `enabled` setting (the timer is gone, so it no longer matters; leaving the
+ * setting avoids a needless server round-trip on a down server). On macOS: notice.
+ */
+export async function uninstallAutoUpdate(options = {}) {
+    const platform = options.platform ?? process.platform;
+    if (isUnsupportedPlatform(platform)) {
+        return { output: MACOS_NOTICE };
+    }
+    if (await hasSystemd()) {
+        // disable --now the timer; tolerate "unit does not exist / not loaded".
+        const disable = await run("sudo", ["systemctl", "disable", "--now", AUTOUPDATE_TIMER_NAME]);
+        if (disable.code !== 0 && !isUnitAbsent(disable.stderr)) {
+            failIfNonZero("sudo", ["systemctl", "disable", "--now", AUTOUPDATE_TIMER_NAME], disable);
+        }
+        // Remove each unit file ONLY after confirming it's ours (FIX I2): a file with
+        // our name that a human authored (no Librarian marker) is left untouched with a
+        // warning — we never `rm` an unrelated unit out from under the operator.
+        const lines = [];
+        const removedTimer = await removeOwnedUnit(timerPath(), lines);
+        const removedService = await removeOwnedUnit(servicePath(), lines);
+        await sudoSystemctl(["daemon-reload"]);
+        lines.unshift(removedTimer || removedService
+            ? "Auto-update timer removed — our unit file(s) deleted and systemd reloaded."
+            : "No Librarian auto-update unit files were removed (none of ours were present).");
+        lines.push("The server's auto-update setting is untouched; the container itself is unaffected.");
+        return { output: lines.join("\n") };
+    }
+    await removeCron();
+    return {
+        output: "Auto-update cron entry removed (systemd not found). The container itself is unaffected.",
+    };
+}
+/**
+ * Remove a unit file at `unitPath` ONLY if it's ours (FIX I2). Reads it via
+ * `sudo cat` (the file is root-owned under /etc/systemd/system) and removes it
+ * iff the content carries {@link UNIT_DESCRIPTION_MARKER}. An ABSENT file is a
+ * clean no-op (idempotent). A PRESENT file that ISN'T ours is left in place and a
+ * one-line warning is appended to `notes` — we never delete an unrelated unit a
+ * human installed under the same name. Returns true iff we deleted it.
+ */
+async function removeOwnedUnit(unitPath, notes) {
+    const read = await run("sudo", ["cat", unitPath]);
+    if (read.code !== 0) {
+        // Non-zero `cat` → the file isn't there (already removed / never installed).
+        // Idempotent: nothing to remove, no warning.
+        return false;
+    }
+    if (!read.stdout.includes(UNIT_DESCRIPTION_MARKER)) {
+        notes.push(`Skipped ${unitPath} — a unit with this name exists but is NOT the Librarian ` +
+            "auto-update unit (no Librarian marker). Left it untouched; remove it yourself if intended.");
+        return false;
+    }
+    await sudoRun(["rm", "-f", unitPath]);
+    return true;
+}
+// --- cron fallback (idempotent via CRON_MARKER) --------------------------
+/**
+ * Read the current user's crontab. `crontab -l` exits non-zero with "no crontab"
+ * when the user has none — that's an empty crontab, not an error. Returns the
+ * existing lines (never our marker line duplicated).
+ */
+async function readCrontab() {
+    const result = await run("crontab", ["-l"]);
+    if (result.code !== 0)
+        return []; // "no crontab for <user>" → empty
+    return result.stdout.split("\n").filter((l) => l.length > 0);
+}
+/** Install (or refresh) our hourly cron line idempotently — strip any prior marker line first. */
+async function installCron(librarianPath) {
+    if ((await which("crontab")) === null) {
+        throw new AutoUpdateError("Neither systemd nor crontab was found, so there's no host scheduler to install the " +
+            "auto-update timer into. Install systemd or cron, or schedule " +
+            "`librarian server autoupdate --run` to run hourly yourself.");
+    }
+    const kept = (await readCrontab()).filter((l) => !l.includes(CRON_MARKER));
+    const next = [...kept, cronLine(librarianPath)].join("\n") + "\n";
+    await writeCrontab(next);
+}
+/** Remove our tagged cron line (idempotent — a crontab without it is left as-is). */
+async function removeCron() {
+    if ((await which("crontab")) === null)
+        return; // nothing could have installed it
+    const lines = await readCrontab();
+    const kept = lines.filter((l) => !l.includes(CRON_MARKER));
+    if (kept.length === lines.length)
+        return; // our line wasn't there — nothing to do
+    await writeCrontab(kept.length > 0 ? kept.join("\n") + "\n" : "");
+}
+/** Write a crontab via `crontab -` (reads the new content from a temp file on stdin-substitute). */
+async function writeCrontab(content) {
+    // `crontab <file>` installs the file as the new crontab. Write to a temp file
+    // and hand its path to crontab (the runner has no stdin pipe). NON-SECRET
+    // content (the marker line carries no token), so an ordinary temp file is fine.
+    const dir = mkdtempSync(path.join(tmpdir(), "librarian-autoupdate-cron-"));
+    const file = path.join(dir, "crontab");
+    writeFileSync(file, content, "utf8");
+    try {
+        const result = await run("crontab", [file]);
+        failIfNonZero("crontab", [file], result);
+    }
+    finally {
+        rmSync(dir, { recursive: true, force: true });
+    }
+}
+// --- status --------------------------------------------------------------
+/**
+ * Report the auto-update state (spec §3 SC3): is the timer/cron installed?, the
+ * server's enabled/cadence/last-run (read from the running server), and the
+ * up-to-date badge (reusing `server status`' deployed-vs-latest render). A down
+ * server degrades the server-side fields to "unknown (server unreachable)" but
+ * still reports the host-side timer state and exits 0.
+ */
+export async function autoUpdateStatus(options = {}) {
+    const platform = options.platform ?? process.platform;
+    if (isUnsupportedPlatform(platform)) {
+        return { output: MACOS_NOTICE };
+    }
+    const timerInstalled = await isTimerInstalled();
+    const config = await readRunningConfig();
+    const lines = ["The Librarian auto-update:", ""];
+    lines.push(`  Timer installed: ${timerInstalled ? "yes" : "no"}`);
+    if (config) {
+        lines.push(`  Enabled:         ${config.enabled ? "yes" : "no"}`, `  Cadence:         ${config.cadence}`, `  Last auto-update: ${config.lastRunAt ?? "never"}`);
+    }
+    else {
+        lines.push("  Enabled:         unknown (server unreachable)", "  Cadence:         unknown (server unreachable)", "  Last auto-update: unknown (server unreachable)");
+    }
+    // Reuse `server status` for the deployed-vs-latest badge (offline-tolerant).
+    try {
+        const status = await serverStatus({
+            ...(options.home !== undefined ? { home: options.home } : {}),
+            ...(options.dir !== undefined ? { dir: options.dir } : {}),
+            ...(options.platform !== undefined ? { platform: options.platform } : {}),
+        });
+        lines.push("", status.output);
+    }
+    catch {
+        // A preflight failure (no docker) shouldn't crash `autoupdate status` — the
+        // host-timer state above is still useful. Note it and exit 0.
+        lines.push("", "(could not read `server status` — is docker installed/running?)");
+    }
+    if (!timerInstalled) {
+        lines.push("", "The host timer is not installed — auto-update won't run even if enabled. " +
+            "Install it with `librarian server autoupdate enable`.");
+    }
+    return { output: lines.join("\n") };
+}
+/**
+ * Is the host timer installed? On systemd, `systemctl list-unit-files <timer>`
+ * lists it when the unit file exists; on a cron-only host, our tagged line is
+ * present. Both probes go through the injectable runner. Returns false on any
+ * failure (a missing scheduler → not installed).
+ */
+async function isTimerInstalled() {
+    if (await hasSystemd()) {
+        const result = await run("systemctl", ["list-unit-files", AUTOUPDATE_TIMER_NAME]);
+        // `list-unit-files <name>` prints the unit line when it exists; exit 0 + the
+        // name in stdout is the "installed" signal (exit code alone is unreliable
+        // across systemd versions for an absent unit).
+        return result.code === 0 && result.stdout.includes(AUTOUPDATE_TIMER_NAME);
+    }
+    if ((await which("crontab")) === null)
+        return false;
+    return (await readCrontab()).some((l) => l.includes(CRON_MARKER));
+}
+// --- the exclusive host lock (serialize concurrent updates, FIX C1) ------
+/**
+ * After this many milliseconds an unrefreshed lockfile is treated as STALE and
+ * reclaimed — a crashed/killed update (the holder never released its lock) must
+ * not wedge auto-update forever. `server update` rebuilds + recreates, so a wide
+ * margin (1h) is safe: a real in-flight update is far shorter, and a lock older
+ * than this is from a dead process, not a slow one.
+ */
+const LOCK_STALE_MS = 60 * 60 * 1000;
+/** The fixed lock path: `~/.librarian/server/.autoupdate.lock` (no root needed). */
+export function autoUpdateLockPath(options) {
+    const dir = options.dir ?? path.join(librarianDir(options.home), "server");
+    return path.join(dir, ".autoupdate.lock");
+}
+/**
+ * Acquire an EXCLUSIVE host lock so two timer fires (or a fire overlapping a
+ * manual `librarian server update`) can never both `docker stop`/`rm`/`run` the
+ * same container — a window with NO running container would take the server down
+ * (spec SC7). Implemented as an `O_CREAT|O_EXCL` lockfile (atomic on POSIX, no
+ * root, no external `flock`): the create succeeds for exactly one caller.
+ *
+ * Returns the held lock on success, or `null` when another update already holds
+ * it (the caller then SKIPS without stamping). A STALE lock (older than
+ * {@link LOCK_STALE_MS} — a crashed holder) is reclaimed once, then retried.
+ *
+ * FAIL-SOFT: any lock-subsystem error (a read-only FS, a permissions problem)
+ * throws here and is caught by `runAutoUpdate`'s outer guard, which logs + skips
+ * — a lock problem must never crash the timer or leave the server mid-recreate.
+ */
+function acquireUpdateLock(lockPath) {
+    // Best-effort: ensure the directory exists (the deploy dir normally does).
+    mkdirSync(path.dirname(lockPath), { recursive: true });
+    const tryCreate = () => {
+        let fd;
+        try {
+            // O_CREAT|O_EXCL|O_WRONLY → fails with EEXIST if the lockfile already exists.
+            fd = openSync(lockPath, "wx");
+        }
+        catch (error) {
+            if (error.code === "EEXIST")
+                return null;
+            throw error; // a real FS error → fail-soft up in runAutoUpdate
+        }
+        // Record our pid + acquisition time (debuggable; carries NO secret).
+        try {
+            writeSync(fd, `${process.pid} ${Date.now()}\n`);
+        }
+        finally {
+            closeSync(fd);
+        }
+        let released = false;
+        return {
+            release() {
+                if (released)
+                    return;
+                released = true;
+                try {
+                    unlinkSync(lockPath);
+                }
+                catch {
+                    // Already gone (e.g. reclaimed as stale elsewhere) — nothing to do.
+                }
+            },
+        };
+    };
+    const held = tryCreate();
+    if (held)
+        return held;
+    // The lock exists. If it's STALE (a crashed holder), reclaim it ONCE and retry.
+    if (isLockStale(lockPath)) {
+        try {
+            unlinkSync(lockPath);
+        }
+        catch {
+            // Someone else reclaimed it first — fall through to a single retry anyway.
+        }
+        return tryCreate(); // null again ⇒ a live holder won the race → skip
+    }
+    return null; // a live update is in progress → skip
+}
+/** True iff the lockfile is older than {@link LOCK_STALE_MS} (a crashed holder). */
+function isLockStale(lockPath) {
+    try {
+        // Prefer the timestamp written into the file; fall back to mtime.
+        const written = Number.parseInt(readFileSync(lockPath, "utf8").trim().split(/\s+/)[1] ?? "", 10);
+        const acquiredAt = Number.isFinite(written) ? written : statSync(lockPath).mtimeMs;
+        return Date.now() - acquiredAt >= LOCK_STALE_MS;
+    }
+    catch {
+        return false; // can't read it → don't reclaim (conservative: skip, don't steal)
+    }
+}
+// --- the `--run` wrapper (what the timer calls) --------------------------
+/**
+ * The wrapper the timer/cron fires (spec §3 SC4/SC7). Reads the auto-update
+ * settings from the RUNNING server, applies the due-check, and conditionally runs
+ * `server update`. FULLY FAIL-SOFT — it NEVER throws (the timer's unit always
+ * exits 0); every outcome is one log line:
+ *
+ *   - Server UNREACHABLE → SKIP (never auto-update a server in an unknown state).
+ *   - NOT (enabled && due) → SKIP (the no-op the disabled/not-due case wants).
+ *   - enabled && due → run `server update`. On SUCCESS, stamp `last_run_at`
+ *     (so the next due-check advances). On FAILURE (the update's own health-check
+ *     rollback left the prior container running), log + do NOT stamp (so the next
+ *     fire retries).
+ *
+ * The due-check is computed HOST-SIDE from the config the server returned (so the
+ * single source of truth — the core helper's logic — is mirrored here without a
+ * second round-trip): enabled AND the cadence has elapsed since `lastRunAt`
+ * (never-run → due).
+ */
+export async function runAutoUpdate(options = {}) {
+    const log = options.log ?? ((line) => void process.stderr.write(`${line}\n`));
+    const now = options.now ?? new Date();
+    try {
+        const config = await readRunningConfig();
+        if (!config) {
+            const line = "autoupdate: server unreachable — skipping (won't update a server in an unknown state).";
+            log(line);
+            return { output: line };
+        }
+        if (!config.enabled) {
+            const line = "autoupdate: disabled — skipping.";
+            log(line);
+            return { output: line };
+        }
+        if (!isDue(now, config)) {
+            const line = `autoupdate: not due yet (cadence: ${config.cadence}, last run: ${config.lastRunAt ?? "never"}) — skipping.`;
+            log(line);
+            return { output: line };
+        }
+        // Due + enabled: take the EXCLUSIVE host lock before the actual update so two
+        // timer fires (or a fire overlapping a manual `server update`) can never both
+        // stop/rm/run the same container — a window with NO running container would
+        // take the server down (spec SC7). If another update already holds the lock,
+        // SKIP cleanly (do NOT stamp last_run_at — the in-flight update will stamp).
+        const lock = acquireUpdateLock(autoUpdateLockPath(options));
+        if (!lock) {
+            const line = "autoupdate: another update in progress — skipping.";
+            log(line);
+            return { output: line };
+        }
+        try {
+            const result = await runUpdate({
+                ...(options.home !== undefined ? { home: options.home } : {}),
+                ...(options.dir !== undefined ? { dir: options.dir } : {}),
+                ...(options.healthAttempts !== undefined ? { healthAttempts: options.healthAttempts } : {}),
+                ...(options.healthIntervalMs !== undefined
+                    ? { healthIntervalMs: options.healthIntervalMs }
+                    : {}),
+            });
+            // Stamp last_run_at ONLY on success. The server was recreated, so write the
+            // stamp through the (now-fresh) container's internal tRPC. A failed stamp is
+            // logged but not fatal — the update itself succeeded.
+            const stamped = await stampRunInServer();
+            const stampNote = stamped
+                ? ""
+                : " (note: could not stamp last_run_at — will re-check next fire)";
+            const line = `autoupdate: updated successfully${stampNote}.`;
+            log(line);
+            // The inner update's own output (carries an at-most-once fresh token note).
+            return { output: `${line}\n${redactSecrets(result.output)}` };
+        }
+        catch (error) {
+            // The update failed — its own health-check rollback left the prior container
+            // running. Do NOT stamp last_run_at (so the next fire retries). Log + exit 0.
+            const detail = error instanceof UpdateError || error instanceof Error
+                ? redactSecrets(error.message)
+                : String(error);
+            const line = `autoupdate: update failed — left the previous server running, did NOT stamp last_run_at (will retry next fire). ${firstLine(detail)}`;
+            log(line);
+            return { output: line };
+        }
+        finally {
+            // Always release — a held lock that outlives the update would wedge the next
+            // fire until the stale-reclaim window elapses.
+            lock.release();
+        }
+    }
+    catch (error) {
+        // Belt-and-braces: ANY unexpected throw is swallowed so the timer never fails.
+        const detail = error instanceof Error ? redactSecrets(error.message) : String(error);
+        const line = `autoupdate: unexpected error — skipping (timer continues). ${firstLine(detail)}`;
+        log(line);
+        return { output: line };
+    }
+}
+/** The host-side due-check mirroring core's `isAutoUpdateDue` over the fetched config. */
+function isDue(now, config) {
+    if (!config.enabled)
+        return false;
+    if (config.lastRunAt === null)
+        return true;
+    const last = new Date(config.lastRunAt);
+    if (Number.isNaN(last.getTime()))
+        return true; // corrupt → treat as never-run
+    const days = config.cadence === "weekly" ? 7 : 1;
+    return now.getTime() - last.getTime() >= days * 24 * 60 * 60 * 1000;
+}
+/** The first line of a (possibly multi-line) message — keeps the journal entry one line. */
+function firstLine(text) {
+    return text.split("\n")[0] ?? "";
+}
+//# sourceMappingURL=autoupdate.js.map

package/dist/server/autoupdate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"autoupdate.js","sourceRoot":"","sources":["../../src/server/autoupdate.ts"],"names":[],"mappings":"AAAA,8EAA8E;AAC9E,iFAAiF;AACjF,8EAA8E;AAC9E,4CAA4C;AAC5C,EAAE;AACF,4EAA4E;AAC5E,kFAAkF;AAClF,+EAA+E;AAC/E,+EAA+E;AAC/E,iFAAiF;AACjF,+EAA+E;AAC/E,8EAA8E;AAC9E,6EAA6E;AAC7E,iEAAiE;AACjE,EAAE;AACF,+EAA+E;AAC/E,iFAAiF;AACjF,4EAA4E;AAC5E,kFAAkF;AAClF,6EAA6E;AAC7E,mFAAmF;AACnF,kFAAkF;AAClF,iFAAiF;AACjF,6EAA6E;AAC7E,iFAAiF;AACjF,EAAE;AACF,mFAAmF;AACnF,kFAAkF;AAClF,+EAA+E;AAC/E,wEAAwE;AACxE,kFAAkF;AAClF,2EAA2E;AAC3E,qBAAqB;AACrB,EAAE;AACF,8EAA8E;AAC9E,8EAA8E;AAC9E,gDAAgD;AAEhD,OAAO,EACL,SAAS,EACT,SAAS,EACT,WAAW,EACX,QAAQ,EACR,YAAY,EACZ,MAAM,EACN,QAAQ,EACR,UAAU,EACV,aAAa,EACb,SAAS,GACV,MAAM,SAAS,CAAC;AACjB,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC3C,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC3C,OAAO,EAAE,cAAc,EAAE,MAAM,SAAS,CAAC;AACzC,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAErD,sFAAsF;AACtF,uFAAuF;AACvF,4EAA4E;AAC5E,sFAAsF;AACtF,iFAAiF;AACjF,mDAAmD;AACnD,MAAM,mBAAmB,GAAG,CAAC,OAAO,EAAE,QAAQ,CAAU,CAAC;AAEzD,MAAM,0BAA0B,GAAsB,OAAO,CAAC;AAC9D,SAAS,mBAAmB,CAAC,KAAa;IACxC,OAAQ,mBAAyC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;AACpE,CAAC;AAED,yFAAyF;AACzF,MAAM,CAAC,MAAM,uBAAuB,GAAG,kCAAkC,CAAC;AAE1E,6DAA6D;AAC7D,MAAM,CAAC,MAAM,qBAAqB,GAAG,gCAAgC,CAAC;AAEtE,gFAAgF;AAChF,MAAM,kBAAkB,GAAG,qBAAqB,CAAC;AAEjD,iGAAiG;AACjG,MAAM,CAAC,MAAM,WAAW,GAAG,4BAA4B,CAAC;AAExD;;;;;GAKG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG,6BAA6B,CAAC;AAErE,yFAAyF;AACzF,MAAM,sBAAsB,GAAG,0BAA0B,CAAC;AAE1D,6EAA6E;AAC7E,MAAM,iBAAiB,GAAG,4BAA4B,CAAC;AAEvD,qFAAqF;AACrF,MAAM,UAAU,WAAW;IACzB,OAAO,IAAI,CAAC,IAAI,CAAC,kBAAkB,EAAE,uBAAuB,CAAC,CAAC;AAChE,CAAC;AAED,2EAA2E;AAC3E,MAAM,UAAU,SAAS;IACvB,OAAO,IAAI,CAAC,IAAI,CAAC,kBAAkB,EAAE,qBAAqB,CAAC,CAAC;AAC9D,CAAC;AAED,+FAA+F;AAC/F,MAAM,OAAO,eAAgB,SAAQ,KAAK;IACxC,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,iBAAiB,CAAC;IAChC,CAAC;CACF;AA6CD;;;;;;GAMG;AACH,MAAM,UAAU,mBAAmB,CAAC,KAAuB;IACzD,MAAM,EAAE,aAAa,EAAE,GAAG,KAAK,CAAC;IAChC,6EAA6E;IAC7E,8EAA8E;IAC9E,sEAAsE;IACtE,OAAO;QACL,QAAQ;QACR,gEAAgE;QAChE,sBAAsB;QACtB,6BAA6B;QAC7B,EAAE;QACF,WAAW;QACX,cAAc;QACd,yEAAyE;QACzE,2EAA2E;QAC3E,6EAA6E;QAC7E,4DAA4D;QAC5D,0EAA0E;QAC1E,6EAA6E;QAC7E,iFAAiF;QACjF,sBAAsB;QACtB,6EAA6E;QAC7E,2EAA2E;QAC3E,4EAA4E;QAC5E,uDAAuD;QACvD,aAAa,aAAa,0BAA0B;QACpD,EAAE;KACH,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,iBAAiB;IAC/B,OAAO;QACL,QAAQ;QACR,wEAAwE;QACxE,EAAE;QACF,SAAS;QACT,gFAAgF;QAChF,mBAAmB;QACnB,iFAAiF;QACjF,iBAAiB;QACjB,0EAA0E;QAC1E,wBAAwB;QACxB,QAAQ,uBAAuB,EAAE;QACjC,EAAE;QACF,WAAW;QACX,wBAAwB;QACxB,EAAE;KACH,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,QAAQ,CAAC,aAAqB;IAC5C,OAAO,cAAc,aAAa,4BAA4B,WAAW,EAAE,CAAC;AAC9E,CAAC;AAED,4EAA4E;AAE5E;;;;;GAKG;AACH,KAAK,UAAU,oBAAoB;IACjC,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,WAAW,CAAC,CAAC;IAC1C,OAAO,QAAQ,IAAI,QAAQ,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,sBAAsB,CAAC;AAC3F,CAAC;AAED;;;;;;;;;GASG;AACH,SAAS,uBAAuB,CAAC,aAAqB;IACpD,yEAAyE;IACzE,IAAI,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,IAAI,wBAAwB,CAAC,IAAI,CAAC,aAAa,CAAC,EAAE,CAAC;QAC7E,MAAM,IAAI,eAAe,CACvB,wEAAwE,aAAa,MAAM;YACzF,iFAAiF;YACjF,oFAAoF;YACpF,kFAAkF;YAClF,8CAA8C,CACjD,CAAC;IACJ,CAAC;AACH,CAAC;AAED,4EAA4E;AAE5E,iGAAiG;AACjG,MAAM,CAAC,MAAM,YAAY,GACvB,4EAA4E;IAC5E,8EAA8E;IAC9E,oFAAoF,CAAC;AAEvF,gFAAgF;AAChF,SAAS,qBAAqB,CAAC,QAAyB;IACtD,OAAO,QAAQ,KAAK,QAAQ,CAAC;AAC/B,CAAC;AAED,8EAA8E;AAC9E,KAAK,UAAU,UAAU;IACvB,OAAO,CAAC,MAAM,KAAK,CAAC,WAAW,CAAC,CAAC,KAAK,IAAI,CAAC;AAC7C,CAAC;AAED,6EAA6E;AAE7E;;;;;;;;;;GAUG;AACH,SAAS,YAAY,CACnB,EAA8B,EAC9B,KAA0D;IAE1D,MAAM,IAAI,GAAG,GAAG,iBAAiB,eAAe,EAAE,EAAE,CAAC;IACrD,IAAI,EAAE,KAAK,KAAK,EAAE,CAAC;QACjB,OAAO,CACL,SAAS,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG;YAChC,oBAAoB;YACpB,6FAA6F;YAC7F,6BAA6B,CAC9B,CAAC;IACJ,CAAC;IACD,yEAAyE;IACzE,MAAM,OAAO,GAAG,EAAE,KAAK,KAAK,CAAC,CAAC,CAAC,SAAS,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IAC3F,OAAO,CACL,SAAS,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,8DAA8D,OAAO,IAAI;QACtG,oBAAoB;QACpB,oEAAoE;QACpE,6BAA6B,CAC9B,CAAC;AACJ,CAAC;AASD;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB;IACrC,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,QAAQ,EAAE,CAAC,MAAM,EAAE,cAAc,EAAE,MAAM,EAAE,IAAI,EAAE,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAChG,IAAI,MAAM,CAAC,IAAI,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACnC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAI7C,CAAC;QACF,MAAM,OAAO,GACX,OAAO,MAAM,CAAC,OAAO,KAAK,QAAQ,IAAI,mBAAmB,CAAC,MAAM,CAAC,OAAO,CAAC;YACvE,CAAC,CAAC,MAAM,CAAC,OAAO;YAChB,CAAC,CAAC,0BAA0B,CAAC;QACjC,OAAO;YACL,OAAO,EAAE,MAAM,CAAC,OAAO,KAAK,IAAI;YAChC,OAAO;YACP,SAAS,EAAE,OAAO,MAAM,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI;SAC1E,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,KAGxC;IACC,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,QAAQ,EAAE;QACjC,MAAM;QACN,cAAc;QACd,MAAM;QACN,IAAI;QACJ,YAAY,CAAC,KAAK,EAAE,KAAK,CAAC;KAC3B,CAAC,CAAC;IACH,OAAO,MAAM,CAAC,IAAI,KAAK,CAAC,CAAC;AAC3B,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB;IACpC,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,QAAQ,EAAE;QACjC,MAAM;QACN,cAAc;QACd,MAAM;QACN,IAAI;QACJ,YAAY,CAAC,UAAU,CAAC;KACzB,CAAC,CAAC;IACH,OAAO,MAAM,CAAC,IAAI,KAAK,CAAC,CAAC;AAC3B,CAAC;AAED,6EAA6E;AAE7E,yFAAyF;AACzF,KAAK,UAAU,WAAW,CAAC,IAAY,EAAE,IAAY,EAAE,IAAY;IACjE,MAAM,GAAG,GAAG,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,4BAA4B,CAAC,CAAC,CAAC;IAC3E,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IACjC,aAAa,CAAC,GAAG,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;IACjC,IAAI,CAAC;QACH,MAAM,OAAO,CAAC,CAAC,IAAI,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC;QACjC,MAAM,OAAO,CAAC,CAAC,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC;IACxC,CAAC;YAAS,CAAC;QACT,MAAM,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAChD,CAAC;AACH,CAAC;AAED,yEAAyE;AACzE,KAAK,UAAU,aAAa,CAAC,IAAc;IACzC,MAAM,OAAO,CAAC,CAAC,WAAW,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC;AACxC,CAAC;AAED,+DAA+D;AAC/D,KAAK,UAAU,OAAO,CAAC,IAAc;IACnC,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IACvC,aAAa,CAAC,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;AACtC,CAAC;AAED,kFAAkF;AAClF,SAAS,YAAY,CAAC,MAAc;IAClC,OAAO,mDAAmD,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;AAC1E,CAAC;AAED,SAAS,aAAa,CACpB,GAAW,EACX,IAAc,EACd,MAA+D;IAE/D,IAAI,MAAM,CAAC,IAAI,KAAK,CAAC;QAAE,OAAO;IAC9B,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;IAC5D,MAAM,IAAI,eAAe,CACvB,KAAK,GAAG,IAAI,IAAI,CAAC,CAAC,CAAC,mBAAmB,MAAM,CAAC,IAAI,IAAI,QAAQ,GAAG;QAC9D,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,MAAM,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC;QAC/B,sFAAsF,CACzF,CAAC;AACJ,CAAC;AAED,4EAA4E;AAE5E;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,UAAyB,EAAE;IAChE,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,OAAO,CAAC,QAAQ,CAAC;IACtD,IAAI,qBAAqB,CAAC,QAAQ,CAAC,EAAE,CAAC;QACpC,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC;IAClC,CAAC;IAED,6EAA6E;IAC7E,qDAAqD;IACrD,MAAM,OAAO,GAAG,cAAc,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IAEhD,MAAM,aAAa,GAAG,MAAM,oBAAoB,EAAE,CAAC;IACnD,gFAAgF;IAChF,iFAAiF;IACjF,uBAAuB,CAAC,aAAa,CAAC,CAAC;IACvC,MAAM,KAAK,GAAa,EAAE,CAAC;IAE3B,IAAI,MAAM,UAAU,EAAE,EAAE,CAAC;QACvB,MAAM,WAAW,CACf,uBAAuB,EACvB,WAAW,EAAE,EACb,mBAAmB,CAAC,EAAE,aAAa,EAAE,CAAC,CACvC,CAAC;QACF,MAAM,WAAW,CAAC,qBAAqB,EAAE,SAAS,EAAE,EAAE,iBAAiB,EAAE,CAAC,CAAC;QAC3E,6EAA6E;QAC7E,iFAAiF;QACjF,MAAM,aAAa,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC;QACvC,MAAM,aAAa,CAAC,CAAC,QAAQ,EAAE,OAAO,EAAE,qBAAqB,CAAC,CAAC,CAAC;QAChE,KAAK,CAAC,IAAI,CACR,iCAAiC,qBAAqB,uCAAuC,EAC7F,YAAY,WAAW,EAAE,MAAM,SAAS,EAAE,8BAA8B,CACzE,CAAC;IACJ,CAAC;SAAM,CAAC;QACN,MAAM,WAAW,CAAC,aAAa,CAAC,CAAC;QACjC,KAAK,CAAC,IAAI,CACR,mFAAmF,EACnF,cAAc,WAAW,6EAA6E,CACvG,CAAC;IACJ,CAAC;IAED,gFAAgF;IAChF,uEAAuE;IACvE,MAAM,KAAK,GAAG,MAAM,kBAAkB,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;IACnE,IAAI,KAAK,EAAE,CAAC;QACV,KAAK,CAAC,IAAI,CAAC,uDAAuD,OAAO,IAAI,CAAC,CAAC;IACjF,CAAC;SAAM,CAAC;QACN,KAAK,CAAC,IAAI,CACR,sFAAsF;YACpF,+BAA+B,OAAO,mDAAmD;YACzF,mBAAmB,CACtB,CAAC;IACJ,CAAC;IAED,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;AACtC,CAAC;AAED,8FAA8F;AAC9F,SAAS,cAAc,CAAC,GAAuB;IAC7C,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,0BAA0B,CAAC;IACpF,MAAM,CAAC,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;IACrB,IAAI,CAAC,mBAAmB,CAAC,CAAC,CAAC,EAAE,CAAC;QAC5B,MAAM,IAAI,eAAe,CACvB,0BAA0B,mBAAmB,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,CACzE,CAAC;IACJ,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC;AAED,4EAA4E;AAE5E;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,UAA6B,EAAE;IAE/B,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,OAAO,CAAC,QAAQ,CAAC;IACtD,IAAI,qBAAqB,CAAC,QAAQ,CAAC,EAAE,CAAC;QACpC,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC;IAClC,CAAC;IACD,MAAM,KAAK,GAAG,MAAM,kBAAkB,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;IAC3D,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,IAAI,eAAe,CACvB,sEAAsE;YACpE,uFAAuF;YACvF,4EAA4E,CAC/E,CAAC;IACJ,CAAC;IACD,OAAO;QACL,MAAM,EAAE;YACN,+EAA+E;YAC/E,oGAAoG;SACrG,CAAC,IAAI,CAAC,IAAI,CAAC;KACb,CAAC;AACJ,CAAC;AAED,4EAA4E;AAE5E;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,UAA6B,EAAE;IAE/B,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,OAAO,CAAC,QAAQ,CAAC;IACtD,IAAI,qBAAqB,CAAC,QAAQ,CAAC,EAAE,CAAC;QACpC,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC;IAClC,CAAC;IAED,IAAI,MAAM,UAAU,EAAE,EAAE,CAAC;QACvB,wEAAwE;QACxE,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,MAAM,EAAE,CAAC,WAAW,EAAE,SAAS,EAAE,OAAO,EAAE,qBAAqB,CAAC,CAAC,CAAC;QAC5F,IAAI,OAAO,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;YACxD,aAAa,CAAC,MAAM,EAAE,CAAC,WAAW,EAAE,SAAS,EAAE,OAAO,EAAE,qBAAqB,CAAC,EAAE,OAAO,CAAC,CAAC;QAC3F,CAAC;QACD,8EAA8E;QAC9E,gFAAgF;QAChF,yEAAyE;QACzE,MAAM,KAAK,GAAa,EAAE,CAAC;QAC3B,MAAM,YAAY,GAAG,MAAM,eAAe,CAAC,SAAS,EAAE,EAAE,KAAK,CAAC,CAAC;QAC/D,MAAM,cAAc,GAAG,MAAM,eAAe,CAAC,WAAW,EAAE,EAAE,KAAK,CAAC,CAAC;QACnE,MAAM,aAAa,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC;QACvC,KAAK,CAAC,OAAO,CACX,YAAY,IAAI,cAAc;YAC5B,CAAC,CAAC,4EAA4E;YAC9E,CAAC,CAAC,+EAA+E,CACpF,CAAC;QACF,KAAK,CAAC,IAAI,CACR,oFAAoF,CACrF,CAAC;QACF,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;IACtC,CAAC;IAED,MAAM,UAAU,EAAE,CAAC;IACnB,OAAO;QACL,MAAM,EACJ,yFAAyF;KAC5F,CAAC;AACJ,CAAC;AAED;;;;;;;GAOG;AACH,KAAK,UAAU,eAAe,CAAC,QAAgB,EAAE,KAAe;IAC9D,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAC;IAClD,IAAI,IAAI,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;QACpB,6EAA6E;QAC7E,6CAA6C;QAC7C,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,uBAAuB,CAAC,EAAE,CAAC;QACnD,KAAK,CAAC,IAAI,CACR,WAAW,QAAQ,2DAA2D;YAC5E,4FAA4F,CAC/F,CAAC;QACF,OAAO,KAAK,CAAC;IACf,CAAC;IACD,MAAM,OAAO,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC;IACtC,OAAO,IAAI,CAAC;AACd,CAAC;AAED,4EAA4E;AAE5E;;;;GAIG;AACH,KAAK,UAAU,WAAW;IACxB,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,SAAS,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC;IAC5C,IAAI,MAAM,CAAC,IAAI,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC,CAAC,kCAAkC;IACpE,OAAO,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;AAC/D,CAAC;AAED,kGAAkG;AAClG,KAAK,UAAU,WAAW,CAAC,aAAqB;IAC9C,IAAI,CAAC,MAAM,KAAK,CAAC,SAAS,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;QACtC,MAAM,IAAI,eAAe,CACvB,qFAAqF;YACnF,+DAA+D;YAC/D,6DAA6D,CAChE,CAAC;IACJ,CAAC;IACD,MAAM,IAAI,GAAG,CAAC,MAAM,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC,CAAC;IAC3E,MAAM,IAAI,GAAG,CAAC,GAAG,IAAI,EAAE,QAAQ,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;IAClE,MAAM,YAAY,CAAC,IAAI,CAAC,CAAC;AAC3B,CAAC;AAED,qFAAqF;AACrF,KAAK,UAAU,UAAU;IACvB,IAAI,CAAC,MAAM,KAAK,CAAC,SAAS,CAAC,CAAC,KAAK,IAAI;QAAE,OAAO,CAAC,kCAAkC;IACjF,MAAM,KAAK,GAAG,MAAM,WAAW,EAAE,CAAC;IAClC,MAAM,IAAI,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC,CAAC;IAC3D,IAAI,IAAI,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM;QAAE,OAAO,CAAC,wCAAwC;IAClF,MAAM,YAAY,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;AACpE,CAAC;AAED,oGAAoG;AACpG,KAAK,UAAU,YAAY,CAAC,OAAe;IACzC,8EAA8E;IAC9E,0EAA0E;IAC1E,gFAAgF;IAChF,MAAM,GAAG,GAAG,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,4BAA4B,CAAC,CAAC,CAAC;IAC3E,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;IACvC,aAAa,CAAC,IAAI,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;IACrC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,SAAS,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC;QAC5C,aAAa,CAAC,SAAS,EAAE,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,CAAC;IAC3C,CAAC;YAAS,CAAC;QACT,MAAM,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAChD,CAAC;AACH,CAAC;AAED,4EAA4E;AAE5E;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,UAA6B,EAAE;IACpE,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,OAAO,CAAC,QAAQ,CAAC;IACtD,IAAI,qBAAqB,CAAC,QAAQ,CAAC,EAAE,CAAC;QACpC,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC;IAClC,CAAC;IAED,MAAM,cAAc,GAAG,MAAM,gBAAgB,EAAE,CAAC;IAChD,MAAM,MAAM,GAAG,MAAM,iBAAiB,EAAE,CAAC;IAEzC,MAAM,KAAK,GAAG,CAAC,4BAA4B,EAAE,EAAE,CAAC,CAAC;IACjD,KAAK,CAAC,IAAI,CAAC,sBAAsB,cAAc,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;IAClE,IAAI,MAAM,EAAE,CAAC;QACX,KAAK,CAAC,IAAI,CACR,sBAAsB,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,EACrD,sBAAsB,MAAM,CAAC,OAAO,EAAE,EACtC,uBAAuB,MAAM,CAAC,SAAS,IAAI,OAAO,EAAE,CACrD,CAAC;IACJ,CAAC;SAAM,CAAC;QACN,KAAK,CAAC,IAAI,CACR,iDAAiD,EACjD,iDAAiD,EACjD,kDAAkD,CACnD,CAAC;IACJ,CAAC;IAED,6EAA6E;IAC7E,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC;YAChC,GAAG,CAAC,OAAO,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC7D,GAAG,CAAC,OAAO,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC1D,GAAG,CAAC,OAAO,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC1E,CAAC,CAAC;QACH,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;IAChC,CAAC;IAAC,MAAM,CAAC;QACP,4EAA4E;QAC5E,8DAA8D;QAC9D,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,iEAAiE,CAAC,CAAC;IACpF,CAAC;IAED,IAAI,CAAC,cAAc,EAAE,CAAC;QACpB,KAAK,CAAC,IAAI,CACR,EAAE,EACF,2EAA2E;YACzE,uDAAuD,CAC1D,CAAC;IACJ,CAAC;IAED,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;AACtC,CAAC;AAED;;;;;GAKG;AACH,KAAK,UAAU,gBAAgB;IAC7B,IAAI,MAAM,UAAU,EAAE,EAAE,CAAC;QACvB,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,WAAW,EAAE,CAAC,iBAAiB,EAAE,qBAAqB,CAAC,CAAC,CAAC;QAClF,6EAA6E;QAC7E,0EAA0E;QAC1E,+CAA+C;QAC/C,OAAO,MAAM,CAAC,IAAI,KAAK,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,qBAAqB,CAAC,CAAC;IAC5E,CAAC;IACD,IAAI,CAAC,MAAM,KAAK,CAAC,SAAS,CAAC,CAAC,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IACpD,OAAO,CAAC,MAAM,WAAW,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC,CAAC;AACpE,CAAC;AAED,4EAA4E;AAE5E;;;;;;GAMG;AACH,MAAM,aAAa,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAErC,oFAAoF;AACpF,MAAM,UAAU,kBAAkB,CAAC,OAGlC;IACC,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,QAAQ,CAAC,CAAC;IAC3E,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,kBAAkB,CAAC,CAAC;AAC5C,CAAC;AAOD;;;;;;;;;;;;;;GAcG;AACH,SAAS,iBAAiB,CAAC,QAAgB;IACzC,2EAA2E;IAC3E,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAEvD,MAAM,SAAS,GAAG,GAAoB,EAAE;QACtC,IAAI,EAAU,CAAC;QACf,IAAI,CAAC;YACH,8EAA8E;YAC9E,EAAE,GAAG,QAAQ,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;QAChC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;gBAAE,OAAO,IAAI,CAAC;YACpE,MAAM,KAAK,CAAC,CAAC,kDAAkD;QACjE,CAAC;QACD,qEAAqE;QACrE,IAAI,CAAC;YACH,SAAS,CAAC,EAAE,EAAE,GAAG,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QAClD,CAAC;gBAAS,CAAC;YACT,SAAS,CAAC,EAAE,CAAC,CAAC;QAChB,CAAC;QACD,IAAI,QAAQ,GAAG,KAAK,CAAC;QACrB,OAAO;YACL,OAAO;gBACL,IAAI,QAAQ;oBAAE,OAAO;gBACrB,QAAQ,GAAG,IAAI,CAAC;gBAChB,IAAI,CAAC;oBACH,UAAU,CAAC,QAAQ,CAAC,CAAC;gBACvB,CAAC;gBAAC,MAAM,CAAC;oBACP,oEAAoE;gBACtE,CAAC;YACH,CAAC;SACF,CAAC;IACJ,CAAC,CAAC;IAEF,MAAM,IAAI,GAAG,SAAS,EAAE,CAAC;IACzB,IAAI,IAAI;QAAE,OAAO,IAAI,CAAC;IAEtB,gFAAgF;IAChF,IAAI,WAAW,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC1B,IAAI,CAAC;YACH,UAAU,CAAC,QAAQ,CAAC,CAAC;QACvB,CAAC;QAAC,MAAM,CAAC;YACP,2EAA2E;QAC7E,CAAC;QACD,OAAO,SAAS,EAAE,CAAC,CAAC,iDAAiD;IACvE,CAAC;IACD,OAAO,IAAI,CAAC,CAAC,sCAAsC;AACrD,CAAC;AAED,oFAAoF;AACpF,SAAS,WAAW,CAAC,QAAgB;IACnC,IAAI,CAAC;QACH,kEAAkE;QAClE,MAAM,OAAO,GAAG,MAAM,CAAC,QAAQ,CAC7B,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,EAC3D,EAAE,CACH,CAAC;QACF,MAAM,UAAU,GAAG,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC;QACnF,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,UAAU,IAAI,aAAa,CAAC;IAClD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC,CAAC,kEAAkE;IAClF,CAAC;AACH,CAAC;AAED,4EAA4E;AAE5E;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,UAAsB,EAAE;IAC1D,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,CAAC,CAAC,IAAY,EAAQ,EAAE,CAAC,KAAK,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,IAAI,IAAI,CAAC,CAAC,CAAC;IAC5F,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,IAAI,IAAI,EAAE,CAAC;IAEtC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,iBAAiB,EAAE,CAAC;QACzC,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,IAAI,GACR,wFAAwF,CAAC;YAC3F,GAAG,CAAC,IAAI,CAAC,CAAC;YACV,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;QAC1B,CAAC;QAED,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,MAAM,IAAI,GAAG,kCAAkC,CAAC;YAChD,GAAG,CAAC,IAAI,CAAC,CAAC;YACV,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;QAC1B,CAAC;QAED,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,MAAM,CAAC,EAAE,CAAC;YACxB,MAAM,IAAI,GAAG,qCAAqC,MAAM,CAAC,OAAO,eAAe,MAAM,CAAC,SAAS,IAAI,OAAO,eAAe,CAAC;YAC1H,GAAG,CAAC,IAAI,CAAC,CAAC;YACV,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;QAC1B,CAAC;QAED,8EAA8E;QAC9E,8EAA8E;QAC9E,4EAA4E;QAC5E,6EAA6E;QAC7E,6EAA6E;QAC7E,MAAM,IAAI,GAAG,iBAAiB,CAAC,kBAAkB,CAAC,OAAO,CAAC,CAAC,CAAC;QAC5D,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,MAAM,IAAI,GAAG,oDAAoD,CAAC;YAClE,GAAG,CAAC,IAAI,CAAC,CAAC;YACV,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;QAC1B,CAAC;QACD,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC;gBAC7B,GAAG,CAAC,OAAO,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC7D,GAAG,CAAC,OAAO,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC1D,GAAG,CAAC,OAAO,CAAC,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,OAAO,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC3F,GAAG,CAAC,OAAO,CAAC,gBAAgB,KAAK,SAAS;oBACxC,CAAC,CAAC,EAAE,gBAAgB,EAAE,OAAO,CAAC,gBAAgB,EAAE;oBAChD,CAAC,CAAC,EAAE,CAAC;aACR,CAAC,CAAC;YACH,4EAA4E;YAC5E,6EAA6E;YAC7E,sDAAsD;YACtD,MAAM,OAAO,GAAG,MAAM,gBAAgB,EAAE,CAAC;YACzC,MAAM,SAAS,GAAG,OAAO;gBACvB,CAAC,CAAC,EAAE;gBACJ,CAAC,CAAC,gEAAgE,CAAC;YACrE,MAAM,IAAI,GAAG,mCAAmC,SAAS,GAAG,CAAC;YAC7D,GAAG,CAAC,IAAI,CAAC,CAAC;YACV,4EAA4E;YAC5E,OAAO,EAAE,MAAM,EAAE,GAAG,IAAI,KAAK,aAAa,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;QAChE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,6EAA6E;YAC7E,8EAA8E;YAC9E,MAAM,MAAM,GACV,KAAK,YAAY,WAAW,IAAI,KAAK,YAAY,KAAK;gBACpD,CAAC,CAAC,aAAa,CAAC,KAAK,CAAC,OAAO,CAAC;gBAC9B,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACpB,MAAM,IAAI,GAAG,mHAAmH,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC;YACpJ,GAAG,CAAC,IAAI,CAAC,CAAC;YACV,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;QAC1B,CAAC;gBAAS,CAAC;YACT,6EAA6E;YAC7E,+CAA+C;YAC/C,IAAI,CAAC,OAAO,EAAE,CAAC;QACjB,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,+EAA+E;QAC/E,MAAM,MAAM,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,aAAa,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACrF,MAAM,IAAI,GAAG,8DAA8D,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC;QAC/F,GAAG,CAAC,IAAI,CAAC,CAAC;QACV,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;IAC1B,CAAC;AACH,CAAC;AAED,0FAA0F;AAC1F,SAAS,KAAK,CAAC,GAAS,EAAE,MAAqB;IAC7C,IAAI,CAAC,MAAM,CAAC,OAAO;QAAE,OAAO,KAAK,CAAC;IAClC,IAAI,MAAM,CAAC,SAAS,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAC3C,MAAM,IAAI,GAAG,IAAI,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IACxC,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;QAAE,OAAO,IAAI,CAAC,CAAC,+BAA+B;IAC9E,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACjD,OAAO,GAAG,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,OAAO,EAAE,IAAI,IAAI,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AACtE,CAAC;AAED,4FAA4F;AAC5F,SAAS,SAAS,CAAC,IAAY;IAC7B,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;AACnC,CAAC"}

package/dist/server/index.d.ts

@@ -1,5 +1,5 @@
 /** The `server` subcommands, in the order they appear in the surface (§4). */
-export declare const SERVER_SUBCOMMANDS: readonly ["up", "update", "down", "status", "logs", "enable-boot", "disable-boot", "admin"];
+export declare const SERVER_SUBCOMMANDS: readonly ["up", "update", "down", "status", "logs", "enable-boot", "disable-boot", "autoupdate", "admin"];
 export type ServerSubcommand = (typeof SERVER_SUBCOMMANDS)[number];
 /** The `librarian server` command surface (spec §4). */
 export declare function serverUsage(): string;

package/dist/server/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/server/index.ts"],"names":[],"mappings":"AAYA,8EAA8E;AAC9E,eAAO,MAAM,kBAAkB,6FASrB,CAAC;AAEX,MAAM,MAAM,gBAAgB,GAAG,CAAC,OAAO,kBAAkB,CAAC,CAAC,MAAM,CAAC,CAAC;AAEnE,wDAAwD;AACxD,wBAAgB,WAAW,IAAI,MAAM,CAmBpC;AAED,gEAAgE;AAChE,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,IAAI,gBAAgB,CAEzE"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/server/index.ts"],"names":[],"mappings":"AAYA,8EAA8E;AAC9E,eAAO,MAAM,kBAAkB,2GAUrB,CAAC;AAEX,MAAM,MAAM,gBAAgB,GAAG,CAAC,OAAO,kBAAkB,CAAC,CAAC,MAAM,CAAC,CAAC;AAEnE,wDAAwD;AACxD,wBAAgB,WAAW,IAAI,MAAM,CAoBpC;AAED,gEAAgE;AAChE,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,IAAI,gBAAgB,CAEzE"}

package/dist/server/index.js

@@ -18,6 +18,7 @@ export const SERVER_SUBCOMMANDS = [
     "logs",
     "enable-boot",
     "disable-boot",
+    "autoupdate",
     "admin",
 ];
 /** The `librarian server` command surface (spec §4). */
@@ -36,6 +37,7 @@ export function serverUsage() {
         "  logs          Tail the container logs ([-f] [--service mcp|dashboard|all])",
         "  enable-boot   Start the server on boot (Linux systemd; macOS deferred)",
         "  disable-boot  Reverse enable-boot",
+        "  autoupdate    Schedule auto-updates on the host (enable|disable|uninstall|status)",
         "  admin         Run an admin command in the container (backup|restore|auth|rebuild)",
         "",
         "Run `librarian server <subcommand> --help` for flags (per subcommand).",

package/dist/server/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/server/index.ts"],"names":[],"mappings":"AAAA,+EAA+E;AAC/E,EAAE;AACF,6EAA6E;AAC7E,yEAAyE;AACzE,6EAA6E;AAC7E,+EAA+E;AAC/E,8EAA8E;AAC9E,qBAAqB;AACrB,EAAE;AACF,6EAA6E;AAC7E,qEAAqE;AAErE,8EAA8E;AAC9E,MAAM,CAAC,MAAM,kBAAkB,GAAG;IAChC,IAAI;IACJ,QAAQ;IACR,MAAM;IACN,QAAQ;IACR,MAAM;IACN,aAAa;IACb,cAAc;IACd,OAAO;CACC,CAAC;AAIX,wDAAwD;AACxD,MAAM,UAAU,WAAW;IACzB,OAAO;QACL,8CAA8C;QAC9C,EAAE;QACF,wEAAwE;QACxE,wEAAwE;QACxE,EAAE;QACF,cAAc;QACd,yEAAyE;QACzE,2EAA2E;QAC3E,mEAAmE;QACnE,sEAAsE;QACtE,8EAA8E;QAC9E,0EAA0E;QAC1E,qCAAqC;QACrC,qFAAqF;QACrF,EAAE;QACF,wEAAwE;KACzE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC;AAED,gEAAgE;AAChE,MAAM,UAAU,kBAAkB,CAAC,IAAY;IAC7C,OAAQ,kBAAwC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;AAClE,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/server/index.ts"],"names":[],"mappings":"AAAA,+EAA+E;AAC/E,EAAE;AACF,6EAA6E;AAC7E,yEAAyE;AACzE,6EAA6E;AAC7E,+EAA+E;AAC/E,8EAA8E;AAC9E,qBAAqB;AACrB,EAAE;AACF,6EAA6E;AAC7E,qEAAqE;AAErE,8EAA8E;AAC9E,MAAM,CAAC,MAAM,kBAAkB,GAAG;IAChC,IAAI;IACJ,QAAQ;IACR,MAAM;IACN,QAAQ;IACR,MAAM;IACN,aAAa;IACb,cAAc;IACd,YAAY;IACZ,OAAO;CACC,CAAC;AAIX,wDAAwD;AACxD,MAAM,UAAU,WAAW;IACzB,OAAO;QACL,8CAA8C;QAC9C,EAAE;QACF,wEAAwE;QACxE,wEAAwE;QACxE,EAAE;QACF,cAAc;QACd,yEAAyE;QACzE,2EAA2E;QAC3E,mEAAmE;QACnE,sEAAsE;QACtE,8EAA8E;QAC9E,0EAA0E;QAC1E,qCAAqC;QACrC,qFAAqF;QACrF,qFAAqF;QACrF,EAAE;QACF,wEAAwE;KACzE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC;AAED,gEAAgE;AAChE,MAAM,UAAU,kBAAkB,CAAC,IAAY;IAC7C,OAAQ,kBAAwC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;AAClE,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@the-librarian/cli",
-  "version": "1.0.0-rc.27",
+  "version": "1.0.0-rc.29",
   "private": false,
   "publishConfig": {
     "access": "public"