@trillboards/edge-sdk 0.2.4 → 0.2.6

package/deploy/macos/scripts/postinstall

@@ -0,0 +1,153 @@
+#!/bin/bash
+#
+# postinstall — runs after the home-domain payload is laid down under
+# ~/Library/Trillboards/edge. Home-domain installs run this AS THE USER (no
+# root), so $HOME is the operator's home.
+#
+# Responsibilities (idempotent, no customer terminal):
+#   - ensure the runtime dirs exist (Application Support config dir + Logs dir)
+#   - make the bundled binaries executable (pkg payloads can lose +x)
+#   - install and health-check the bundled local AI model
+#   - open camera pairing only after local AI is ready
+#   - DO NOT start the LaunchAgent: there is no paired config yet, and a
+#     config-less cloud-sense crash-loops. The agent is bootstrapped only after
+#     a successful setup (the installed pairing engine does that).
+#
+# Cosmetic permission repairs remain non-fatal. Local AI is a required customer
+# dependency, so a failed model install stops setup before pairing can begin.
+
+set -u
+
+# Resolve the OWNER of this install. A home-domain install runs us AS THE USER,
+# but an admin/system install (the operator clicked through with admin rights)
+# runs us AS ROOT. macOS still sets $USER to the invoking account even in the
+# system domain; fall back to the logged-in console user. Knowing the real owner
+# lets us hand the runtime dirs back so a root install can't leave them
+# ROOT-OWNED — which is exactly what made the operator's later setup attempt hit
+# `EACCES` writing the paired config (misreported as "check the code").
+OWNER="${USER:-}"
+if [ -z "$OWNER" ] || [ "$OWNER" = "root" ]; then
+  OWNER="$(stat -f %Su /dev/console 2>/dev/null || true)"
+fi
+
+# Resolve the install root. On a home-domain install $HOME is already the
+# operator's home. Under a root/admin install $HOME is /var/root — derive the
+# target user's home from $OWNER instead, so the runtime dirs land under
+# /Users/<owner> and NEVER /var/root.
+if [ "$(id -u)" = "0" ] && [ -n "$OWNER" ] && [ "$OWNER" != "root" ]; then
+  USER_HOME="$(eval echo "~$OWNER")"
+else
+  USER_HOME="${HOME:-$(eval echo "~$(id -un)")}"
+fi
+EDGE_ROOT="$USER_HOME/Library/Trillboards/edge"
+APP_SUPPORT="$USER_HOME/Library/Application Support/Trillboards"
+LOG_DIR="$USER_HOME/Library/Logs/Trillboards"
+
+log() { /usr/bin/logger -t com.trillboards.edge "postinstall: $*" 2>/dev/null || true; printf '[trillboards postinstall] %s\n' "$*"; }
+
+# Hand a path (dir or file) back to the installing user. Meaningful ONLY under a
+# root/admin install — a home-domain install already runs as the user, so this
+# is a no-op there. Pass "-R" first to recurse (runtime dirs we fully own); omit
+# it for a shallow chown (~/Applications, so we don't rewrite the operator's
+# OTHER apps). Fully non-fatal: a chown failure must never fail the install.
+reassert_owner() {
+  [ "$(id -u)" = "0" ] || return 0
+  [ -n "$OWNER" ] && [ "$OWNER" != "root" ] || return 0
+  if [ "${1:-}" = "-R" ]; then
+    shift
+    chown -R "$OWNER" "$@" 2>/dev/null || true
+  else
+    chown "$OWNER" "$@" 2>/dev/null || true
+  fi
+}
+
+log "install root: $EDGE_ROOT"
+
+# 1. Runtime dirs (config lives in Application Support, logs in Logs).
+mkdir -p "$APP_SUPPORT" 2>/dev/null || log "could not create $APP_SUPPORT"
+mkdir -p "$LOG_DIR" 2>/dev/null || log "could not create $LOG_DIR"
+chmod 700 "$APP_SUPPORT" 2>/dev/null || true
+
+# Under a root/admin install the dirs just created — and the bundled payload —
+# are ROOT-OWNED. Hand them to the operator NOW so the pairing helper (which
+# runs as the user) can write the paired config without hitting EACCES. No-op on
+# a home-domain install (we already run as the user).
+reassert_owner -R "$APP_SUPPORT" "$LOG_DIR" "$EDGE_ROOT"
+
+# 2. Re-assert +x on the bundled executables (idempotent).
+for b in node ffmpeg trillboards-edge trillboards-pair; do
+  if [ -f "$EDGE_ROOT/bin/$b" ]; then
+    chmod +x "$EDGE_ROOT/bin/$b" 2>/dev/null || true
+  fi
+done
+
+# 3. Install the bundled local AI model before pairing. Under an admin install,
+# run the per-user provisioner in the console user's launchd session so its
+# model store and LaunchAgent never land under /var/root.
+AI_SETUP="$EDGE_ROOT/share/setup-litertlm.sh"
+if [ ! -x "$AI_SETUP" ]; then
+  log "ERROR: required local AI installer is missing at $AI_SETUP"
+  exit 1
+fi
+
+log "installing and verifying bundled local AI before camera pairing"
+AI_RC=0
+if [ "$(id -u)" = "0" ] && [ -n "$OWNER" ] && [ "$OWNER" != "root" ]; then
+  LAUNCH_UID="$(id -u "$OWNER" 2>/dev/null || echo '')"
+  if [ -z "$LAUNCH_UID" ]; then
+    log "ERROR: could not resolve the installing user's launch session"
+    exit 1
+  fi
+  /bin/launchctl asuser "$LAUNCH_UID" /usr/bin/sudo -u "$OWNER" \
+    /usr/bin/env HOME="$USER_HOME" TRILLBOARDS_REQUIRE_BUNDLED_MODEL=1 \
+    /bin/bash "$AI_SETUP" || AI_RC=$?
+else
+  TRILLBOARDS_REQUIRE_BUNDLED_MODEL=1 /bin/bash "$AI_SETUP" || AI_RC=$?
+fi
+if [ "$AI_RC" -ne 0 ]; then
+  log "ERROR: local AI installation failed (exit $AI_RC); camera pairing was not opened"
+  exit "$AI_RC"
+fi
+log "bundled local AI is installed and healthy"
+
+# 4. Launch the real native setup application. It runs the canonical pairer as
+#    an invisible child process and renders its credential-free progress file,
+#    so customers never see Terminal or a command window. The app itself is
+#    part of the signed payload under ~/Applications.
+APPS_DIR="$USER_HOME/Applications"
+SETUP_APP="$APPS_DIR/Trillboards CCTV Setup.app"
+LEGACY_PAIR_LAUNCHER="$APPS_DIR/Trillboards Pair.command"
+rm -f "$LEGACY_PAIR_LAUNCHER" 2>/dev/null || true
+if [ -d "$SETUP_APP" ] && [ -x "$EDGE_ROOT/bin/trillboards-pair" ]; then
+  log "native setup app ready: \"$SETUP_APP\" (opening it)"
+  if [ "$(id -u)" = "0" ] && [ -n "$OWNER" ] && [ "$OWNER" != "root" ]; then
+    LAUNCH_UID="$(id -u "$OWNER" 2>/dev/null || echo '')"
+    if [ -n "$LAUNCH_UID" ]; then
+      /bin/launchctl asuser "$LAUNCH_UID" /usr/bin/sudo -u "$OWNER" \
+        /usr/bin/env -u TMPDIR HOME="$USER_HOME" /usr/bin/open "$SETUP_APP" 2>/dev/null \
+        || /bin/launchctl asuser "$LAUNCH_UID" /usr/bin/sudo -u "$OWNER" \
+          /usr/bin/env -u TMPDIR HOME="$USER_HOME" /usr/bin/open -R "$SETUP_APP" 2>/dev/null || true
+    fi
+  else
+    /usr/bin/env -u TMPDIR /usr/bin/open "$SETUP_APP" 2>/dev/null \
+      || /usr/bin/env -u TMPDIR /usr/bin/open -R "$SETUP_APP" 2>/dev/null || true
+  fi
+else
+  log "WARNING: native setup app or pairing engine is missing"
+fi
+
+# Under a root install the payload app is root-owned. Hand only this app bundle
+# back to the operator, never their other applications.
+reassert_owner "$APPS_DIR"
+reassert_owner -R "$SETUP_APP"
+
+# 5. Sanity check (logged only — never fail the install on this).
+if [ -x "$EDGE_ROOT/bin/trillboards-edge" ]; then
+  VER="$("$EDGE_ROOT/bin/trillboards-edge" version 2>/dev/null || echo '?')"
+  log "bundled connector: $VER"
+else
+  log "WARNING: launcher not executable at $EDGE_ROOT/bin/trillboards-edge"
+fi
+
+log "done. Connector and local AI installed; Trillboards CCTV Setup opened automatically."
+exit 0

package/deploy/macos/scripts/setup-litertlm.sh

@@ -0,0 +1,272 @@
+#!/bin/bash
+#
+# setup-litertlm.sh — provision the LiteRT-LM on-device VLM runtime for the
+# BYO-CCTV LOCAL-inference connector. Runs AS THE USER (home-domain, no sudo).
+#
+# Idempotent and safe to re-run; logs to the Trillboards log dir. Customer
+# installers set TRILLBOARDS_REQUIRE_BUNDLED_MODEL=1 so every provisioning
+# failure is fatal and network model fallback is disabled.
+# Steps:
+#   1. Ensure `uv` (the Python packaging tool) is available — install via the
+#      official standalone installer if missing (home-domain, no sudo).
+#   2. Install/repair `litert-lm` with uv-managed Python 3.12. Explicitly
+#      choosing Python avoids Apple's legacy system Python 3.9, which cannot
+#      import current LiteRT-LM releases.
+#   3. `litert-lm import` the bundled Gemma 4 E2B model
+#      (gemma-4-E2B-it.litertlm, ~2.4 GB) after verifying its checksum.
+#   4. Render + bootstrap the `litert-lm serve` LaunchAgent so the OpenAI-
+#      compatible endpoint (:9379) is up at login. The connector's
+#      LiteRtVlmProvider talks to it.
+#
+# The installer runs this before opening camera pairing. There is no model
+# download after cameras have been created.
+
+set -u
+USER_HOME="${HOME:-$(eval echo "~$(id -un)")}"
+LOG_DIR="$USER_HOME/Library/Logs/Trillboards"
+SHARE_DIR="$USER_HOME/Library/Trillboards/edge/share"
+LA_DIR="$USER_HOME/Library/LaunchAgents"
+LOCAL_BIN="$USER_HOME/.local/bin"
+MODEL_ID="gemma-4-E2B-it.litertlm"
+HF_REPO="litert-community/gemma-4-E2B-it-litert-lm"
+SERVE_LABEL="com.trillboards.litertlm"
+SERVE_PORT="9379"
+LITERT_PYTHON="${LITERT_LM_PYTHON:-3.12}"
+REQUIRE_BUNDLED_MODEL="${TRILLBOARDS_REQUIRE_BUNDLED_MODEL:-0}"
+ALLOW_MODEL_DOWNLOAD="${TRILLBOARDS_ALLOW_MODEL_DOWNLOAD:-0}"
+# Customer packages stage the model here. A network fallback remains available
+# only for legacy/engineering invocations that do not require the bundle.
+LITERT_DIR="${LITERT_LM_DIR:-$USER_HOME/.litert-lm}"
+STORE_DIR="$LITERT_DIR/models/$MODEL_ID"
+BUNDLED_MODEL="$SHARE_DIR/models/$MODEL_ID"
+BUNDLED_MODEL_SHA="$BUNDLED_MODEL.sha256"
+# Installed model version — must match the sensing_model_registry `gemma_4_e2b`
+# row. The connector's edge-core ModelManager seeds this (via the marker written
+# below) so its first OTA check does NOT re-download the already-installed model.
+# Bump GEMMA_VLM_VERSION alongside the registry row when a newer model ships.
+MODEL_VERSION="${GEMMA_VLM_VERSION:-1.0.0}"
+VERSION_MARKER="$STORE_DIR/trillboards-bundled-version.json"
+mkdir -p "$LOG_DIR" "$LA_DIR" 2>/dev/null || true
+LOG="$LOG_DIR/litertlm-setup.log"
+log() { printf '[trillboards setup-litertlm] %s %s\n' "$(date '+%H:%M:%S')" "$*" >>"$LOG" 2>&1; printf '[trillboards setup-litertlm] %s\n' "$*"; }
+fail() { log "ERROR: $*"; exit 1; }
+local_ai_healthy() {
+  curl -fsS --max-time 3 "http://127.0.0.1:$SERVE_PORT/v1/models" 2>/dev/null \
+    | grep -Fq "$MODEL_ID"
+}
+launch_agent_loaded() {
+  launchctl print "gui/$(id -u)/$SERVE_LABEL" >/dev/null 2>&1
+}
+wait_for_launch_agent_removal() {
+  local removal_attempt=1
+  while [ "$removal_attempt" -le 40 ]; do
+    launch_agent_loaded || return 0
+    sleep 0.25
+    removal_attempt=$((removal_attempt + 1))
+  done
+  return 1
+}
+restart_launch_agent() {
+  local service_domain service_target bootstrap_attempt
+  service_domain="gui/$(id -u)"
+  service_target="$service_domain/$SERVE_LABEL"
+
+  if launch_agent_loaded; then
+    log "stopping existing LiteRT-LM LaunchAgent"
+    launchctl bootout "$service_target" >>"$LOG" 2>&1 \
+      || log "WARN: launchctl bootout returned non-zero; waiting for service state"
+    if ! wait_for_launch_agent_removal; then
+      log "ERROR: existing LiteRT-LM LaunchAgent did not finish stopping"
+      return 1
+    fi
+  fi
+
+  bootstrap_attempt=1
+  while [ "$bootstrap_attempt" -le 10 ]; do
+    if launchctl bootstrap "$service_domain" "$TARGET" >>"$LOG" 2>&1; then
+      log "litert-lm serve LaunchAgent bootstrapped on :$SERVE_PORT"
+      return 0
+    fi
+
+    # launchd may accept the job even when bootstrap reports a transient error.
+    if launch_agent_loaded; then
+      log "litert-lm serve LaunchAgent is loaded after bootstrap retry"
+      return 0
+    fi
+
+    if [ "$bootstrap_attempt" -lt 10 ]; then
+      log "WARN: launchctl bootstrap attempt $bootstrap_attempt failed; retrying"
+      sleep 1
+    fi
+    bootstrap_attempt=$((bootstrap_attempt + 1))
+  done
+
+  log "ERROR: launchctl bootstrap failed after $((bootstrap_attempt - 1)) attempts"
+  return 1
+}
+verify_bundled_model() {
+  [ -f "$BUNDLED_MODEL_SHA" ] || fail "bundled model checksum is missing"
+  EXPECTED_SHA="$(awk 'NR == 1 { print $1 }' "$BUNDLED_MODEL_SHA" 2>/dev/null || echo '')"
+  ACTUAL_SHA="$(shasum -a 256 "$BUNDLED_MODEL" 2>/dev/null | awk '{print $1}')"
+  if [ -z "$EXPECTED_SHA" ] || [ "$ACTUAL_SHA" != "$EXPECTED_SHA" ]; then
+    fail "bundled model checksum mismatch"
+  fi
+  log "verified bundled model SHA-256"
+}
+
+# One provisioning process per user. Re-opening the pairing helper is a normal
+# recovery path, so duplicate launches must collapse without duplicate downloads.
+LOCK_DIR="$LOG_DIR/litertlm-setup.lock"
+if ! mkdir "$LOCK_DIR" 2>/dev/null; then
+  LOCK_PID="$(cat "$LOCK_DIR/pid" 2>/dev/null || echo '')"
+  if [ -n "$LOCK_PID" ] &&
+     kill -0 "$LOCK_PID" 2>/dev/null &&
+     ps -p "$LOCK_PID" -o command= 2>/dev/null | grep -q '[s]etup-litertlm.sh'; then
+    log "LiteRT-LM provisioning is already running (pid $LOCK_PID)"
+    if [ "$REQUIRE_BUNDLED_MODEL" = "1" ]; then
+      for _attempt in $(seq 1 120); do
+        local_ai_healthy && exit 0
+        sleep 2
+      done
+      fail "the existing local AI installation did not become healthy"
+    fi
+    exit 0
+  fi
+  rm -rf "$LOCK_DIR" 2>/dev/null || true
+  if ! mkdir "$LOCK_DIR" 2>/dev/null; then
+    log "LiteRT-LM provisioning is already starting in another process"
+    exit 0
+  fi
+fi
+printf '%s\n' "$$" > "$LOCK_DIR/pid" 2>/dev/null || true
+cleanup_lock() { rm -rf "$LOCK_DIR" 2>/dev/null || true; }
+trap cleanup_lock EXIT
+trap 'exit 130' INT
+trap 'exit 143' TERM
+
+log "starting LiteRT-LM provisioning"
+
+HOST_OS="$(uname -s 2>/dev/null || echo unknown)"
+HOST_ARCH="$(uname -m 2>/dev/null || echo unknown)"
+if [ "$HOST_OS" = "Darwin" ] && [ "$HOST_ARCH" != "arm64" ]; then
+  log "ERROR: local AI requires Apple silicon; cloud inference remains disabled unless explicitly opted in."
+  launchctl bootout "gui/$(id -u)/$SERVE_LABEL" 2>/dev/null || true
+  rm -f "$LA_DIR/$SERVE_LABEL.plist" 2>/dev/null || true
+  log "removed any stale LiteRT-LM LaunchAgent for unsupported local inference host"
+  [ "$REQUIRE_BUNDLED_MODEL" = "1" ] && fail "local AI requires Apple silicon"
+  exit 0
+fi
+
+# 1. uv (PATH first; else official standalone installer, home-domain).
+export PATH="$LOCAL_BIN:$USER_HOME/.cargo/bin:$PATH"
+if ! command -v uv >/dev/null 2>&1; then
+  log "uv not found — installing via astral.sh standalone installer (no sudo)"
+  curl -LsSf https://astral.sh/uv/install.sh | sh >>"$LOG" 2>&1 || log "WARN: uv install failed"
+  export PATH="$LOCAL_BIN:$USER_HOME/.local/share/uv/bin:$PATH"
+fi
+UV="$(command -v uv || echo "$LOCAL_BIN/uv")"
+if ! command -v "$UV" >/dev/null 2>&1 && [ ! -x "$UV" ]; then
+  [ "$REQUIRE_BUNDLED_MODEL" = "1" ] && fail "uv is unavailable; cannot install the local AI runtime"
+  log "ERROR: uv unavailable; cannot provision LiteRT-LM"; exit 0
+fi
+
+# 2. litert-lm CLI. Keep a healthy existing install, but actively repair a
+# broken one. Older connector versions could let uv bind the tool to Apple's
+# Python 3.9; current LiteRT-LM uses Python features introduced in 3.10 and then
+# crash-loops before serving. --force rebuilds that existing tool environment
+# with the explicit managed interpreter while --upgrade refreshes the package.
+LITERTLM="$LOCAL_BIN/litert-lm"
+[ -x "$LITERTLM" ] || LITERTLM="$(command -v litert-lm || echo "$LITERTLM")"
+if [ -x "$LITERTLM" ] && "$LITERTLM" list >/dev/null 2>&1; then
+  log "litert-lm CLI is healthy — keeping current install"
+else
+  log "installing/repairing litert-lm with uv-managed Python $LITERT_PYTHON"
+  if ! "$UV" tool install --python "$LITERT_PYTHON" --managed-python --upgrade --force litert-lm >>"$LOG" 2>&1; then
+    [ "$REQUIRE_BUNDLED_MODEL" = "1" ] && fail "litert-lm install/repair failed"
+    log "ERROR: litert-lm install/repair failed; local AI will retry later"
+    exit 0
+  fi
+  LITERTLM="$LOCAL_BIN/litert-lm"
+  [ -x "$LITERTLM" ] || LITERTLM="$(command -v litert-lm || echo "$LITERTLM")"
+  if [ ! -x "$LITERTLM" ] || ! "$LITERTLM" list >/dev/null 2>&1; then
+    [ "$REQUIRE_BUNDLED_MODEL" = "1" ] && fail "litert-lm remains unhealthy after repair"
+    log "ERROR: litert-lm remains unhealthy after repair; local AI will retry later"
+    exit 0
+  fi
+  log "litert-lm CLI repaired successfully"
+fi
+
+# 3. Model - import the verified bundled file. Idempotent: skip entirely if
+#    litert-lm already has the model. Engineering runs may use HF only with the
+#    explicit TRILLBOARDS_ALLOW_MODEL_DOWNLOAD=1 opt-in.
+HAVE_MODEL=0
+if "$LITERTLM" list 2>/dev/null | grep -q "$MODEL_ID"; then
+  log "model $MODEL_ID already present — skipping import"
+  HAVE_MODEL=1
+  if [ -f "$BUNDLED_MODEL" ]; then
+    verify_bundled_model
+    rm -f "$BUNDLED_MODEL" "$BUNDLED_MODEL_SHA" 2>/dev/null || true
+    log "removed redundant staged model from upgrade"
+  fi
+elif [ -f "$BUNDLED_MODEL" ]; then
+  verify_bundled_model
+  log "importing $MODEL_ID from BUNDLED file $BUNDLED_MODEL (no download) …"
+  if "$LITERTLM" import "$BUNDLED_MODEL" "$MODEL_ID" >>"$LOG" 2>&1; then
+    log "model imported from bundle"
+    HAVE_MODEL=1
+    # Reclaim the staged ~2.4 GB — the litert-lm store now holds the model.
+    rm -f "$BUNDLED_MODEL" "$BUNDLED_MODEL_SHA" 2>/dev/null || true
+  else
+    [ "$REQUIRE_BUNDLED_MODEL" = "1" ] && fail "bundled model import failed"
+    [ "$ALLOW_MODEL_DOWNLOAD" = "1" ] || fail "bundled model import failed and network fallback is disabled"
+    log "WARN: bundled import failed - falling back to HF"
+  fi
+fi
+if [ "$HAVE_MODEL" -eq 0 ]; then
+  [ "$REQUIRE_BUNDLED_MODEL" = "1" ] && fail "required bundled model is missing"
+  [ "$ALLOW_MODEL_DOWNLOAD" = "1" ] || fail "local AI model is missing and network fallback is disabled"
+  log "importing $MODEL_ID from $HF_REPO (~2.4 GB, public repo) …"
+  "$LITERTLM" import --from-huggingface-repo "$HF_REPO" "$MODEL_ID" >>"$LOG" 2>&1 \
+    && { log "model imported from HF"; HAVE_MODEL=1; } \
+    || log "WARN: model import failed (serve will retry on next run)"
+fi
+[ "$HAVE_MODEL" -eq 1 ] || { [ "$REQUIRE_BUNDLED_MODEL" = "1" ] && fail "local AI model is unavailable"; }
+
+# Record the installed version next to the store model so the connector's
+# edge-core ModelManager seeds it (readBundledModelVersion) and does not
+# download the same model again on its first gemma-vlm OTA check.
+if [ "$HAVE_MODEL" -eq 1 ]; then
+  mkdir -p "$STORE_DIR" 2>/dev/null || true
+  printf '{"version":"%s","modelType":"gemma-vlm"}\n' "$MODEL_VERSION" > "$VERSION_MARKER" 2>/dev/null \
+    && log "recorded installed version $MODEL_VERSION at $VERSION_MARKER" \
+    || log "WARN: could not write version marker $VERSION_MARKER"
+fi
+
+# 4. Render + bootstrap the serve LaunchAgent.
+TEMPLATE="$SHARE_DIR/$SERVE_LABEL.plist"
+TARGET="$LA_DIR/$SERVE_LABEL.plist"
+if [ -f "$TEMPLATE" ]; then
+  sed -e "s#__LITERTLM__#$LITERTLM#g" \
+      -e "s#__PORT__#$SERVE_PORT#g" \
+      -e "s#__LOG_DIR__#$LOG_DIR#g" \
+      "$TEMPLATE" > "$TARGET" 2>/dev/null || log "WARN: could not render serve plist"
+  restart_launch_agent \
+    || { [ "$REQUIRE_BUNDLED_MODEL" = "1" ] && fail "local AI service could not be started"; log "WARN: launchctl bootstrap failed for serve agent"; }
+else
+  [ "$REQUIRE_BUNDLED_MODEL" = "1" ] && fail "local AI service template is missing"
+  log "WARN: serve plist template missing at $TEMPLATE"
+fi
+
+if [ "$REQUIRE_BUNDLED_MODEL" = "1" ]; then
+  log "waiting for local AI health check"
+  HEALTHY=0
+  for _attempt in $(seq 1 60); do
+    if local_ai_healthy; then HEALTHY=1; break; fi
+    sleep 2
+  done
+  [ "$HEALTHY" -eq 1 ] || fail "Gemma is installed, but the local AI service did not respond"
+  log "local AI is installed and healthy"
+fi
+
+log "done"
+exit 0