@uns-kit/core 3.0.31 → 3.0.32

package/MIGRATIONS.md

@@ -9,6 +9,33 @@ Agents must inspect the application's existing ownership and shutdown flow
 before editing it. The examples below describe the intended behavior, not a
 mechanical search-and-replace operation.
 
+## 3.0.32 - Reviewed process-group MQTT output enablement
+
+When crossing `<3.0.32` to `>=3.0.32`, ordinary services, input journals and
+existing outboxes remain unchanged. Output persistence is never enabled by a
+package update. Hosts may explicitly review nested paired transition protocol 3
+through `runtime/process-group-upgrade.js`; ordinary version/generation reviews
+retain their strict configuration comparison.
+
+Applications opting in declare
+`unsDatahub.processGroupMqttOutputRuntime = { protocolVersion: 1, instanceName }`,
+matching the actual SDK output proxy. Keep parsing, profiles, resources, paths and
+units in the application; do not add a service-name branch to a host.
+
+Use a separate reviewed permanent output mount and retain the exact input journal.
+On rollback, stop admission and drain already admitted input before stopping the
+publisher. Pending output, changed storage/owner/destination and unknown outcomes
+block restoration; preserve both journals and reconcile the same operation. Never
+rename an owner, choose another directory or remove data to bypass these checks.
+The managed outbox format remains schema2 and the stable identity serialization
+is byte compatible with3.0.31. A matching host implementation is required for the
+optional transition; applications without the capability require no migration.
+
+See the SDK developer guide
+[reviewed MQTT output enablement](https://github.com/uns-openhub/uns-kit/blob/master/docs/process-group-mqtt-output-transition.md)
+for declarations, proxy configuration, review examples and recovery limits.
+Source preparation and owner-operated npm publication are separate steps.
+
 ## 3.0.31 - Explicit Runtime-managed MQTT outbox storage
 
 For an optional Runtime-managed MQTT outbox set `output.publishQueue.storage` to

package/dist/runtime/mqtt-output-state-program.d.mts

@@ -26,3 +26,7 @@ export function validateOutputSnapshot(directory: string, limits: unknown): { qu
 export function outputStateRelative(root: string, directory: string): string;
 
 export function outputStateMain(args?: string[]): Promise<void>;
+
+export function inspectManagedOutputQueue(root: string, directory: string, identity: string, limits: unknown, requireStopped?: boolean): {
+  rootId: string; relative: string; identity: string; records: number; bytes: number; exists: boolean; ownerActive:boolean;
+};

package/dist/runtime/mqtt-output-state-program.mjs

@@ -187,6 +187,56 @@ export function openManagedOutputRoot(directory, root) {
     throw e;
   }
 }
+/** Read-only reviewed handoff evidence. Never initializes, deletes or rebinds a queue. */
+export function inspectManagedOutputQueue(root, directory, identity, limits, requireStopped = true) {
+  outputStateLimits(limits);
+  assertOutputStateRoot(root);
+  const relative = outputStateRelative(root, directory);
+  noLinks(directory);
+  const { DatabaseSync } = sqlite();
+  const file = path.join(root, guardName);
+  check(file);
+  check(file + "-journal", false, true);
+  const guard = new DatabaseSync(file, { readOnly: true });
+  let owner;
+  try {
+    guard.exec("PRAGMA busy_timeout=1000; BEGIN");
+    const meta = Object.fromEntries(guard.prepare("SELECT key,value FROM metadata").all().map(r => [r.key,r.value]));
+    if (!exactKeys(meta, ["schema", "id"]) || meta.schema !== "mqtt-output-root-1" || !uuid.test(meta.id)) fail();
+    const marker = path.join(root, markerName);
+    if (fs.existsSync(marker)) {
+      const m = privateJson(marker);
+      if (!exactKeys(m,["schemaVersion","state","sourceSha","rootId"]) || m.schemaVersion !== 1 ||
+          m.state !== "complete" || !hex.test(m.sourceSha) || m.rootId !== meta.id) fail();
+    }
+    if (fs.existsSync(path.join(root, stageName))) fail();
+    check(path.dirname(directory), true, true);
+    const base = {rootId: meta.id, relative, identity};
+    if (!check(directory, true, true)) return {...base, records:0, bytes:0, exists:false, ownerActive:false};
+    const entries = fs.opendirSync(directory);
+    const names = [];
+    try { let e; while ((e=entries.readSync())) { if (names.length >= 5) fail(); names.push(e.name); } }
+    finally { entries.closeSync(); }
+    if (names.length === 0) return {...base, records:0, bytes:0, exists:false, ownerActive:false};
+    if (names.some(n => !["mqtt-outbox.sqlite","mqtt-outbox.sqlite-wal","mqtt-outbox.sqlite-shm","mqtt-outbox-owner.sqlite","mqtt-outbox-owner.sqlite-journal"].includes(n))) fail();
+    let physicalBytes=0;
+    for (const name of names) { physicalBytes+=check(path.join(directory,name)).size; if(physicalBytes>limits.maximumSnapshotBytes) fail(); }
+    const ownerFile = path.join(directory,"mqtt-outbox-owner.sqlite");
+    check(ownerFile);
+    // Existing writer's exclusive lease must be released, even when usage is zero.
+    let ownerActive=false;
+    owner = new DatabaseSync(ownerFile);
+    try { owner.exec("PRAGMA busy_timeout=0; BEGIN EXCLUSIVE"); }
+    catch(e) { if(requireStopped || e.errcode!==5) throw e; ownerActive=true; }
+
+    const dbFile = path.join(directory,"mqtt-outbox.sqlite");
+    if (check(dbFile).size > limits.maximumSnapshotBytes) fail();
+    const status = inspectDatabase(dbFile,{rootId:meta.id,relative},limits);
+    if (status.identity !== identity) fail();
+    return {...base, records:status.records, bytes:status.bytes, exists:true, ownerActive};
+  } finally { owner?.close(); guard.close(); }
+}
+
 export function validateOutputRow(row) {
   if (typeof row.record !== "string" || sha(row.record) !== row.sha256) throw Error("MQTT outbox integrity check failed; pending work preserved");
   const r = JSON.parse(row.record);
@@ -219,6 +269,7 @@ function inspectDatabase(file, binding, limits) {
   const { DatabaseSync } = sqlite(),
     db = new DatabaseSync(file, { readOnly: true });
   try {
+    db.exec("PRAGMA busy_timeout=1000; BEGIN");
     if (db.prepare("PRAGMA quick_check").get().quick_check !== "ok") fail();
     const meta = Object.fromEntries(
       db

package/dist/runtime/process-group-configured-upgrade.d.ts

@@ -1,4 +1,5 @@
 import type { PreparedGroupUpgrade, UpgradeConfigurations } from "./process-group-upgrade.js";
 /** Same generation, different paired artifacts. Never initializes or rewrites the journal. */
 export declare function reviewInstalledConfigurationGroupUpgrade(configs: UpgradeConfigurations, controllerName: string, stateRoot: string, excludedUnsFields?: readonly string[]): PreparedGroupUpgrade;
+export declare function reviewInstalledConfigurationGroupMqttOutput(configs: UpgradeConfigurations, controllerName: string, stateRoot: string, excludedUnsFields?: readonly string[]): PreparedGroupUpgrade;
 //# sourceMappingURL=process-group-configured-upgrade.d.ts.map

package/dist/runtime/process-group-configured-upgrade.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"process-group-configured-upgrade.d.ts","sourceRoot":"","sources":["../../src/runtime/process-group-configured-upgrade.ts"],"names":[],"mappings":"AAcA,OAAO,KAAK,EAA6B,oBAAoB,EAAwB,qBAAqB,EAAE,MAAM,4BAA4B,CAAC;AAE/I,8FAA8F;AAC9F,wBAAgB,wCAAwC,CACtD,OAAO,EAAE,qBAAqB,EAC9B,cAAc,EAAE,MAAM,EACtB,SAAS,EAAE,MAAM,EACjB,iBAAiB,GAAE,SAAS,MAAM,EAAO,GACxC,oBAAoB,CAyGtB"}
+{"version":3,"file":"process-group-configured-upgrade.d.ts","sourceRoot":"","sources":["../../src/runtime/process-group-configured-upgrade.ts"],"names":[],"mappings":"AAeA,OAAO,KAAK,EAGV,oBAAoB,EAEpB,qBAAqB,EACtB,MAAM,4BAA4B,CAAC;AAEpC,8FAA8F;AAC9F,wBAAgB,wCAAwC,CACtD,OAAO,EAAE,qBAAqB,EAC9B,cAAc,EAAE,MAAM,EACtB,SAAS,EAAE,MAAM,EACjB,iBAAiB,GAAE,SAAS,MAAM,EAAO,GACxC,oBAAoB,CAEtB;AACD,wBAAgB,2CAA2C,CACzD,OAAO,EAAE,qBAAqB,EAC9B,cAAc,EAAE,MAAM,EACtB,SAAS,EAAE,MAAM,EACjB,iBAAiB,GAAE,SAAS,MAAM,EAAO,GACxC,oBAAoB,CAYtB"}

package/dist/runtime/process-group-configured-upgrade.js

@@ -4,9 +4,26 @@ import { configurationResourceHash } from "./configuration-group-contract.js";
 import { authorizeProcessGroupRuntime, processGroupAuthorizationFile, validateProcessGroupPolicyCandidate } from "./process-group-authorization.js";
 import { resolvedProcessGroupChannels } from "./process-group-contract.js";
 import { describeInstalledProcessGroupGeneration, inspectGenerationJournal } from "./process-group-generation.js";
+import { mqttOutputPortableConfiguration, reviewProcessGroupMqttOutput } from "./process-group-mqtt-output.js";
 import { groupArtifactHash, groupChannelsHash, configurationAuthorizationHash as hash, readProcessGroupResource as read, sha256, } from "./process-group-resources.js";
 /** Same generation, different paired artifacts. Never initializes or rewrites the journal. */
 export function reviewInstalledConfigurationGroupUpgrade(configs, controllerName, stateRoot, excludedUnsFields = []) {
+    return reviewConfigurationGroup(configs, controllerName, stateRoot, excludedUnsFields, false);
+}
+export function reviewInstalledConfigurationGroupMqttOutput(configs, controllerName, stateRoot, excludedUnsFields = []) {
+    const mqttOutput = reviewProcessGroupMqttOutput(configs, process.env["UNS_MQTT_OUTPUT_STATE_ROOT"], stateRoot);
+    const result = reviewConfigurationGroup(configs, controllerName, stateRoot, excludedUnsFields, true);
+    return {
+        ...result,
+        review: {
+            ...result.review,
+            protocolVersion: 3,
+            mqttOutput,
+            delivery: { inputPausePossible: true, exactlyOnceOutput: false, pendingOutputBlocksRollback: true },
+        },
+    };
+}
+function reviewConfigurationGroup(configs, controllerName, stateRoot, excludedUnsFields, mqttOutput) {
     const context = (c) => ({
         packageRoot: c.packageRoot,
         instanceDirectory: c.instanceDirectory,
@@ -19,12 +36,12 @@ export function reviewInstalledConfigurationGroupUpgrade(configs, controllerName
     if (a.d.protocolVersion !== 2 || b.d.protocolVersion !== 2 || a.d.namespace !== b.d.namespace || hash(a.reference) !== hash(b.reference))
         throw Error("Unchanged configuration generation required; review resource changes as a separate generation");
     const pkg = (c) => JSON.parse(read(path.join(c.packageRoot, "package.json")).toString()), sourcePackage = pkg(source), targetPackage = pkg(target);
-    if (!sourcePackage.version || !targetPackage.version || sourcePackage.version === targetPackage.version)
+    if (!sourcePackage.version || !targetPackage.version || (!mqttOutput && sourcePackage.version === targetPackage.version))
         throw Error("Two different installed paired versions required");
     const old = authorizeProcessGroupRuntime(context(source));
     const sourcePolicy = read(old.file, true), previous = configurationGroupAuthorizationSchema.parse(JSON.parse(sourcePolicy.toString()));
-    const portable = (raw) => {
-        const copy = structuredClone(raw), uns = { ...copy["uns"] };
+    const portable = (raw, role) => {
+        const copy = mqttOutput ? mqttOutputPortableConfiguration(raw, role) : structuredClone(raw), uns = { ...copy["uns"] };
         for (const key of excludedUnsFields)
             delete uns[key];
         copy["uns"] = uns;
@@ -46,7 +63,7 @@ export function reviewInstalledConfigurationGroupUpgrade(configs, controllerName
                 (role === "receiver"
                     ? g.normalized.runtimeRole !== "admission"
                     : g.normalized.runtimeRole !== undefined && g.normalized.runtimeRole !== "publisher") ||
-                portable(c.raw) !== portable(configs.source[role].raw) ||
+                portable(c.raw, role) !== portable(configs.source[role].raw, role) ||
                 groupChannelsHash(g.channels) !== groupChannelsHash(a.channels) ||
                 processGroupAuthorizationFile(context(c)) !== old.file)
                 throw Error("Exact paired configuration, resources, broker identity and retained journal required");

package/dist/runtime/process-group-configured-upgrade.js.map

@@ -1 +1 @@
-{"version":3,"file":"process-group-configured-upgrade.js","sourceRoot":"","sources":["../../src/runtime/process-group-configured-upgrade.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,qCAAqC,EAAE,MAAM,wCAAwC,CAAC;AAC/F,OAAO,EAAE,yBAAyB,EAAE,MAAM,mCAAmC,CAAC;AAC9E,OAAO,EAAE,4BAA4B,EAAE,6BAA6B,EAAE,mCAAmC,EAAE,MAAM,kCAAkC,CAAC;AACpJ,OAAO,EAAE,4BAA4B,EAAE,MAAM,6BAA6B,CAAC;AAC3E,OAAO,EAAE,uCAAuC,EAAE,wBAAwB,EAAE,MAAM,+BAA+B,CAAC;AAClH,OAAO,EACL,iBAAiB,EACjB,iBAAiB,EACjB,8BAA8B,IAAI,IAAI,EACtC,wBAAwB,IAAI,IAAI,EAChC,MAAM,GACP,MAAM,8BAA8B,CAAC;AAGtC,8FAA8F;AAC9F,MAAM,UAAU,wCAAwC,CACtD,OAA8B,EAC9B,cAAsB,EACtB,SAAiB,EACjB,oBAAuC,EAAE;IAEzC,MAAM,OAAO,GAAG,CAAC,CAAuB,EAAE,EAAE,CAAC,CAAC;QAC5C,WAAW,EAAE,CAAC,CAAC,WAAW;QAC1B,iBAAiB,EAAE,CAAC,CAAC,iBAAiB;QACtC,gBAAgB,EAAE,CAAC,CAAC,GAAG;QACvB,QAAQ,EAAE,4BAA4B,CAAC,CAAC,CAAC,QAAQ,CAAC;QAClD,cAAc;QACd,SAAS;KACV,CAAC,CAAC;IACH,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,SAAS,EACrC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,SAAS,EACjC,CAAC,GAAG,uCAAuC,CAAC,MAAM,CAAC,EACnD,CAAC,GAAG,uCAAuC,CAAC,MAAM,CAAC,CAAC;IACtD,IAAI,CAAC,CAAC,CAAC,CAAC,eAAe,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,eAAe,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,IAAI,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;QACtI,MAAM,KAAK,CAAC,+FAA+F,CAAC,CAAC;IAC/G,MAAM,GAAG,GAAG,CAAC,CAAuB,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,WAAW,EAAE,cAAc,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,EAC5G,aAAa,GAAG,GAAG,CAAC,MAAM,CAAC,EAC3B,aAAa,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC;IAC9B,IAAI,CAAC,aAAa,CAAC,OAAO,IAAI,CAAC,aAAa,CAAC,OAAO,IAAI,aAAa,CAAC,OAAO,KAAK,aAAa,CAAC,OAAO;QACrG,MAAM,KAAK,CAAC,kDAAkD,CAAC,CAAC;IAClE,MAAM,GAAG,GAAG,4BAA4B,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;IAC1D,MAAM,YAAY,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,EACvC,QAAQ,GAAG,qCAAqC,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC;IAC9F,MAAM,QAAQ,GAAG,CAAC,GAA4B,EAAE,EAAE;QAChD,MAAM,IAAI,GAAG,eAAe,CAAC,GAAG,CAAC,EAC/B,GAAG,GAAG,EAAE,GAAI,IAAI,CAAC,KAAK,CAA6B,EAAE,CAAC;QACxD,KAAK,MAAM,GAAG,IAAI,iBAAiB;YAAE,OAAO,GAAG,CAAC,GAAG,CAAC,CAAC;QACrD,IAAI,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC;QAClB,OAAO,IAAI,CAAC,IAAI,CAAC,CAAC;IACpB,CAAC,CAAC;IACF,MAAM,OAAO,GAAyC,EAAE,CAAC;IACzD,MAAM,WAAW,GAAG,IAAI,GAAG,EAAU,CAAC;IACtC,KAAK,MAAM,IAAI,IAAI,CAAC,QAAQ,EAAE,QAAQ,CAAU;QAC9C,KAAK,MAAM,IAAI,IAAI,CAAC,WAAW,EAAE,UAAU,CAAU,EAAE,CAAC;YACtD,MAAM,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,EAC3B,CAAC,GAAG,uCAAuC,CAAC,CAAC,CAAC,EAC9C,SAAS,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC;YACrB,IACE,CAAC,CAAC,CAAC,CAAC,eAAe,KAAK,CAAC;gBACzB,CAAC,CAAC,CAAC,CAAC,SAAS,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS;gBAC/B,SAAS,CAAC,IAAI,KAAK,aAAa,CAAC,IAAI;gBACrC,SAAS,CAAC,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC,CAAC,aAAa,CAAC,OAAO,CAAC;gBACzF,CAAC,CAAC,WAAW,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,WAAW;gBACrD,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,iBAAiB,CAAC;gBACpC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;gBACvC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,KAAK,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,mBAAmB,CAAC;gBAClG,CAAC,IAAI,KAAK,UAAU;oBAClB,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,WAAW,KAAK,WAAW;oBAC1C,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,WAAW,KAAK,SAAS,IAAI,CAAC,CAAC,UAAU,CAAC,WAAW,KAAK,WAAW,CAAC;gBACvF,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC;gBACtD,iBAAiB,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,iBAAiB,CAAC,CAAC,CAAC,QAAQ,CAAC;gBAC/D,6BAA6B,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,IAAI;gBAEtD,MAAM,KAAK,CAAC,sFAAsF,CAAC,CAAC;YACtG,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC;YACrC,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACtB,MAAM,KAAK,GAAG,4BAA4B,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;gBACvD,IAAI,KAAK,CAAC,IAAI,KAAK,CAAC,IAAI,KAAK,WAAW,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,KAAK,CAAC,MAAM,KAAK,MAAM,CAAC,YAAY,CAAC;oBACxG,MAAM,KAAK,CAAC,uCAAuC,CAAC,CAAC;YACzD,CAAC;YACD,OAAO,CAAC,IAAI,CAAC;gBACX,IAAI;gBACJ,IAAI;gBACJ,WAAW,EAAE,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;gBACpD,mBAAmB,EAAE,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC;gBAChC,cAAc,EAAE,iBAAiB,CAAC,CAAC,CAAC,WAAW,CAAC;aACjD,CAAC,CAAC;QACL,CAAC;IACH,MAAM,MAAM,GAAG,qCAAqC,CAAC,KAAK,CAAC;QACzD,GAAG,QAAQ;QACX,WAAW,EAAE,MAAM,CAAC,WAAW;QAC/B,gBAAgB,EAAE,yBAAyB,CAAC,aAAa,CAAC,UAAU,CAAC,gCAAgC,CAAC;QACtG,cAAc,EAAE,iBAAiB,CAAC,MAAM,CAAC,WAAW,CAAC;QACrD,UAAU,EAAE;YACV,GAAG,QAAQ,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC;YACzD,GAAI,CAAC,WAAW,EAAE,UAAU,CAAW,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;gBACrD,UAAU,EAAE,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,iBAAiB,CAAC;gBACjE,WAAW,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,CAAC,IAAI,KAAK,IAAI,CAAE,CAAC,WAAW;gBACrF,IAAI,EAAE,IAAI,KAAK,WAAW,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,UAAU;gBAClD,mBAAmB,EAAE,yBAAyB,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC;aACzE,CAAC,CAAC;SACJ;KACF,CAAC,CAAC;IACH,MAAM,YAAY,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;IACzD,KAAK,MAAM,IAAI,IAAI,CAAC,WAAW,EAAE,UAAU,CAAU;QAAE,mCAAmC,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,YAAY,CAAC,CAAC;IACxI,wBAAwB,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,qEAAqE;IAC5G,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,KAAK,MAAM,CAAC,YAAY,CAAC;QAAE,MAAM,KAAK,CAAC,qCAAqC,CAAC,CAAC;IAC9G,OAAO;QACL,MAAM,EAAE;YACN,eAAe,EAAE,CAAC;YAClB,SAAS,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS;YACxB,OAAO,EAAE,CAAC,CAAC,EAAE;YACb,UAAU,EAAE,GAAG,CAAC,IAAI;YACpB,kBAAkB,EAAE,MAAM,CAAC,YAAY,CAAC;YACxC,kBAAkB,EAAE,MAAM,CAAC,YAAY,CAAC;YACxC,SAAS,EAAE,CAAC,CAAC,SAAS,CAAC,SAAS;YAChC,SAAS,EAAE,CAAC,CAAC,SAAS,CAAC,SAAS;YAChC,qBAAqB,EAAE,CAAC,CAAC,SAAS,CAAC,qBAAqB;YACxD,QAAQ,EAAE,CAAC,CAAC,SAAS,CAAC,QAAQ;YAC9B,eAAe,EAAE,CAAC,CAAC,SAAS;YAC5B,OAAO;SACR;QACD,YAAY;QACZ,YAAY;KACb,CAAC;AACJ,CAAC","sourcesContent":["import path from \"node:path\";\n\nimport { configurationGroupAuthorizationSchema } from \"./configuration-group-authorization.js\";\nimport { configurationResourceHash } from \"./configuration-group-contract.js\";\nimport { authorizeProcessGroupRuntime, processGroupAuthorizationFile, validateProcessGroupPolicyCandidate } from \"./process-group-authorization.js\";\nimport { resolvedProcessGroupChannels } from \"./process-group-contract.js\";\nimport { describeInstalledProcessGroupGeneration, inspectGenerationJournal } from \"./process-group-generation.js\";\nimport {\n  groupArtifactHash,\n  groupChannelsHash,\n  configurationAuthorizationHash as hash,\n  readProcessGroupResource as read,\n  sha256,\n} from \"./process-group-resources.js\";\nimport type { GroupVersionUpgradeReview, PreparedGroupUpgrade, UpgradeConfiguration, UpgradeConfigurations } from \"./process-group-upgrade.js\";\n\n/** Same generation, different paired artifacts. Never initializes or rewrites the journal. */\nexport function reviewInstalledConfigurationGroupUpgrade(\n  configs: UpgradeConfigurations,\n  controllerName: string,\n  stateRoot: string,\n  excludedUnsFields: readonly string[] = [],\n): PreparedGroupUpgrade {\n  const context = (c: UpgradeConfiguration) => ({\n    packageRoot: c.packageRoot,\n    instanceDirectory: c.instanceDirectory,\n    rawConfiguration: c.raw,\n    channels: resolvedProcessGroupChannels(c.resolved),\n    controllerName,\n    stateRoot,\n  });\n  const source = configs.source.publisher,\n    target = configs.target.publisher,\n    a = describeInstalledProcessGroupGeneration(source),\n    b = describeInstalledProcessGroupGeneration(target);\n  if (a.d.protocolVersion !== 2 || b.d.protocolVersion !== 2 || a.d.namespace !== b.d.namespace || hash(a.reference) !== hash(b.reference))\n    throw Error(\"Unchanged configuration generation required; review resource changes as a separate generation\");\n  const pkg = (c: UpgradeConfiguration) => JSON.parse(read(path.join(c.packageRoot, \"package.json\")).toString()),\n    sourcePackage = pkg(source),\n    targetPackage = pkg(target);\n  if (!sourcePackage.version || !targetPackage.version || sourcePackage.version === targetPackage.version)\n    throw Error(\"Two different installed paired versions required\");\n  const old = authorizeProcessGroupRuntime(context(source));\n  const sourcePolicy = read(old.file, true),\n    previous = configurationGroupAuthorizationSchema.parse(JSON.parse(sourcePolicy.toString()));\n  const portable = (raw: Record<string, unknown>) => {\n    const copy = structuredClone(raw),\n      uns = { ...(copy[\"uns\"] as Record<string, unknown>) };\n    for (const key of excludedUnsFields) delete uns[key];\n    copy[\"uns\"] = uns;\n    return hash(copy);\n  };\n  const members: GroupVersionUpgradeReview[\"members\"] = [];\n  const directories = new Set<string>();\n  for (const side of [\"source\", \"target\"] as const)\n    for (const role of [\"publisher\", \"receiver\"] as const) {\n      const c = configs[side][role],\n        g = describeInstalledProcessGroupGeneration(c),\n        installed = pkg(c);\n      if (\n        g.d.protocolVersion !== 2 ||\n        g.d.namespace !== a.d.namespace ||\n        installed.name !== sourcePackage.name ||\n        installed.version !== (side === \"source\" ? sourcePackage.version : targetPackage.version) ||\n        c.packageRoot !== configs[side].publisher.packageRoot ||\n        directories.has(c.instanceDirectory) ||\n        hash(g.reference) !== hash(a.reference) ||\n        g.normalized.uns[\"processName\"] !== (role === \"publisher\" ? a.processName : a.receiverProcessName) ||\n        (role === \"receiver\"\n          ? g.normalized.runtimeRole !== \"admission\"\n          : g.normalized.runtimeRole !== undefined && g.normalized.runtimeRole !== \"publisher\") ||\n        portable(c.raw) !== portable(configs.source[role].raw) ||\n        groupChannelsHash(g.channels) !== groupChannelsHash(a.channels) ||\n        processGroupAuthorizationFile(context(c)) !== old.file\n      )\n        throw Error(\"Exact paired configuration, resources, broker identity and retained journal required\");\n      directories.add(c.instanceDirectory);\n      if (side === \"source\") {\n        const proof = authorizeProcessGroupRuntime(context(c));\n        if (proof.role !== (role === \"publisher\" ? \"target\" : \"receiver\") || proof.sha256 !== sha256(sourcePolicy))\n          throw Error(\"Exact authorized source pair required\");\n      }\n      members.push({\n        side,\n        role,\n        processName: String(g.normalized.uns[\"processName\"]),\n        configurationSha256: hash(c.raw),\n        artifactSha256: groupArtifactHash(c.packageRoot),\n      });\n    }\n  const policy = configurationGroupAuthorizationSchema.parse({\n    ...previous,\n    packageRoot: target.packageRoot,\n    descriptorSha256: configurationResourceHash(targetPackage.unsDatahub.processGroupConfigurationRuntime),\n    artifactSha256: groupArtifactHash(target.packageRoot),\n    placements: [\n      ...previous.placements.filter((p) => p.role === \"source\"),\n      ...([\"publisher\", \"receiver\"] as const).map((role) => ({\n        instanceId: path.basename(configs.target[role].instanceDirectory),\n        processName: members.find((m) => m.side === \"target\" && m.role === role)!.processName,\n        role: role === \"publisher\" ? \"target\" : \"receiver\",\n        configurationSha256: configurationResourceHash(configs.target[role].raw),\n      })),\n    ],\n  });\n  const targetPolicy = Buffer.from(JSON.stringify(policy));\n  for (const role of [\"publisher\", \"receiver\"] as const) validateProcessGroupPolicyCandidate(context(configs.target[role]), targetPolicy);\n  inspectGenerationJournal(a.reference); // Pending, previously completed work is valid and must remain bound.\n  if (sha256(read(old.file, true)) !== sha256(sourcePolicy)) throw Error(\"Source policy changed during review\");\n  return {\n    review: {\n      protocolVersion: 1,\n      namespace: a.d.namespace,\n      groupId: a.id,\n      policyFile: old.file,\n      sourcePolicySha256: sha256(sourcePolicy),\n      targetPolicySha256: sha256(targetPolicy),\n      journalId: a.reference.journalId,\n      directory: a.reference.directory,\n      journalContractSha256: a.reference.journalContractSha256,\n      profiles: a.reference.profiles,\n      retainedJournal: a.reference,\n      members,\n    },\n    sourcePolicy,\n    targetPolicy,\n  };\n}\n"]}
+{"version":3,"file":"process-group-configured-upgrade.js","sourceRoot":"","sources":["../../src/runtime/process-group-configured-upgrade.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,qCAAqC,EAAE,MAAM,wCAAwC,CAAC;AAC/F,OAAO,EAAE,yBAAyB,EAAE,MAAM,mCAAmC,CAAC;AAC9E,OAAO,EAAE,4BAA4B,EAAE,6BAA6B,EAAE,mCAAmC,EAAE,MAAM,kCAAkC,CAAC;AACpJ,OAAO,EAAE,4BAA4B,EAAE,MAAM,6BAA6B,CAAC;AAC3E,OAAO,EAAE,uCAAuC,EAAE,wBAAwB,EAAE,MAAM,+BAA+B,CAAC;AAClH,OAAO,EAAE,+BAA+B,EAAE,4BAA4B,EAAE,MAAM,gCAAgC,CAAC;AAC/G,OAAO,EACL,iBAAiB,EACjB,iBAAiB,EACjB,8BAA8B,IAAI,IAAI,EACtC,wBAAwB,IAAI,IAAI,EAChC,MAAM,GACP,MAAM,8BAA8B,CAAC;AAStC,8FAA8F;AAC9F,MAAM,UAAU,wCAAwC,CACtD,OAA8B,EAC9B,cAAsB,EACtB,SAAiB,EACjB,oBAAuC,EAAE;IAEzC,OAAO,wBAAwB,CAAC,OAAO,EAAE,cAAc,EAAE,SAAS,EAAE,iBAAiB,EAAE,KAAK,CAAC,CAAC;AAChG,CAAC;AACD,MAAM,UAAU,2CAA2C,CACzD,OAA8B,EAC9B,cAAsB,EACtB,SAAiB,EACjB,oBAAuC,EAAE;IAEzC,MAAM,UAAU,GAAG,4BAA4B,CAAC,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,4BAA4B,CAAC,EAAE,SAAS,CAAC,CAAC;IAC/G,MAAM,MAAM,GAAG,wBAAwB,CAAC,OAAO,EAAE,cAAc,EAAE,SAAS,EAAE,iBAAiB,EAAE,IAAI,CAAC,CAAC;IACrG,OAAO;QACL,GAAG,MAAM;QACT,MAAM,EAAE;YACN,GAAG,MAAM,CAAC,MAAM;YAChB,eAAe,EAAE,CAAC;YAClB,UAAU;YACV,QAAQ,EAAE,EAAE,kBAAkB,EAAE,IAAI,EAAE,iBAAiB,EAAE,KAAK,EAAE,2BAA2B,EAAE,IAAI,EAAE;SAC3E;KAC3B,CAAC;AACJ,CAAC;AACD,SAAS,wBAAwB,CAC/B,OAA8B,EAC9B,cAAsB,EACtB,SAAiB,EACjB,iBAAoC,EACpC,UAAmB;IAEnB,MAAM,OAAO,GAAG,CAAC,CAAuB,EAAE,EAAE,CAAC,CAAC;QAC5C,WAAW,EAAE,CAAC,CAAC,WAAW;QAC1B,iBAAiB,EAAE,CAAC,CAAC,iBAAiB;QACtC,gBAAgB,EAAE,CAAC,CAAC,GAAG;QACvB,QAAQ,EAAE,4BAA4B,CAAC,CAAC,CAAC,QAAQ,CAAC;QAClD,cAAc;QACd,SAAS;KACV,CAAC,CAAC;IACH,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,SAAS,EACrC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,SAAS,EACjC,CAAC,GAAG,uCAAuC,CAAC,MAAM,CAAC,EACnD,CAAC,GAAG,uCAAuC,CAAC,MAAM,CAAC,CAAC;IACtD,IAAI,CAAC,CAAC,CAAC,CAAC,eAAe,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,eAAe,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,IAAI,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;QACtI,MAAM,KAAK,CAAC,+FAA+F,CAAC,CAAC;IAC/G,MAAM,GAAG,GAAG,CAAC,CAAuB,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,WAAW,EAAE,cAAc,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,EAC5G,aAAa,GAAG,GAAG,CAAC,MAAM,CAAC,EAC3B,aAAa,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC;IAC9B,IAAI,CAAC,aAAa,CAAC,OAAO,IAAI,CAAC,aAAa,CAAC,OAAO,IAAI,CAAC,CAAC,UAAU,IAAI,aAAa,CAAC,OAAO,KAAK,aAAa,CAAC,OAAO,CAAC;QACtH,MAAM,KAAK,CAAC,kDAAkD,CAAC,CAAC;IAClE,MAAM,GAAG,GAAG,4BAA4B,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;IAC1D,MAAM,YAAY,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,EACvC,QAAQ,GAAG,qCAAqC,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC;IAC9F,MAAM,QAAQ,GAAG,CAAC,GAA4B,EAAE,IAA8B,EAAE,EAAE;QAChF,MAAM,IAAI,GAAG,UAAU,CAAC,CAAC,CAAC,+BAA+B,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,GAAG,CAAC,EACzF,GAAG,GAAG,EAAE,GAAI,IAAI,CAAC,KAAK,CAA6B,EAAE,CAAC;QACxD,KAAK,MAAM,GAAG,IAAI,iBAAiB;YAAE,OAAO,GAAG,CAAC,GAAG,CAAC,CAAC;QACrD,IAAI,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC;QAClB,OAAO,IAAI,CAAC,IAAI,CAAC,CAAC;IACpB,CAAC,CAAC;IACF,MAAM,OAAO,GAAyC,EAAE,CAAC;IACzD,MAAM,WAAW,GAAG,IAAI,GAAG,EAAU,CAAC;IACtC,KAAK,MAAM,IAAI,IAAI,CAAC,QAAQ,EAAE,QAAQ,CAAU;QAC9C,KAAK,MAAM,IAAI,IAAI,CAAC,WAAW,EAAE,UAAU,CAAU,EAAE,CAAC;YACtD,MAAM,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,EAC3B,CAAC,GAAG,uCAAuC,CAAC,CAAC,CAAC,EAC9C,SAAS,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC;YACrB,IACE,CAAC,CAAC,CAAC,CAAC,eAAe,KAAK,CAAC;gBACzB,CAAC,CAAC,CAAC,CAAC,SAAS,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS;gBAC/B,SAAS,CAAC,IAAI,KAAK,aAAa,CAAC,IAAI;gBACrC,SAAS,CAAC,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC,CAAC,aAAa,CAAC,OAAO,CAAC;gBACzF,CAAC,CAAC,WAAW,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,WAAW;gBACrD,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,iBAAiB,CAAC;gBACpC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;gBACvC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,KAAK,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,mBAAmB,CAAC;gBAClG,CAAC,IAAI,KAAK,UAAU;oBAClB,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,WAAW,KAAK,WAAW;oBAC1C,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,WAAW,KAAK,SAAS,IAAI,CAAC,CAAC,UAAU,CAAC,WAAW,KAAK,WAAW,CAAC;gBACvF,QAAQ,CAAC,CAAC,CAAC,GAAG,EAAE,IAAI,CAAC,KAAK,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,IAAI,CAAC;gBAClE,iBAAiB,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,iBAAiB,CAAC,CAAC,CAAC,QAAQ,CAAC;gBAC/D,6BAA6B,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,IAAI;gBAEtD,MAAM,KAAK,CAAC,sFAAsF,CAAC,CAAC;YACtG,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC;YACrC,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACtB,MAAM,KAAK,GAAG,4BAA4B,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;gBACvD,IAAI,KAAK,CAAC,IAAI,KAAK,CAAC,IAAI,KAAK,WAAW,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,KAAK,CAAC,MAAM,KAAK,MAAM,CAAC,YAAY,CAAC;oBACxG,MAAM,KAAK,CAAC,uCAAuC,CAAC,CAAC;YACzD,CAAC;YACD,OAAO,CAAC,IAAI,CAAC;gBACX,IAAI;gBACJ,IAAI;gBACJ,WAAW,EAAE,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;gBACpD,mBAAmB,EAAE,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC;gBAChC,cAAc,EAAE,iBAAiB,CAAC,CAAC,CAAC,WAAW,CAAC;aACjD,CAAC,CAAC;QACL,CAAC;IACH,MAAM,MAAM,GAAG,qCAAqC,CAAC,KAAK,CAAC;QACzD,GAAG,QAAQ;QACX,WAAW,EAAE,MAAM,CAAC,WAAW;QAC/B,gBAAgB,EAAE,yBAAyB,CAAC,aAAa,CAAC,UAAU,CAAC,gCAAgC,CAAC;QACtG,cAAc,EAAE,iBAAiB,CAAC,MAAM,CAAC,WAAW,CAAC;QACrD,UAAU,EAAE;YACV,GAAG,QAAQ,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC;YACzD,GAAI,CAAC,WAAW,EAAE,UAAU,CAAW,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;gBACrD,UAAU,EAAE,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,iBAAiB,CAAC;gBACjE,WAAW,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,CAAC,IAAI,KAAK,IAAI,CAAE,CAAC,WAAW;gBACrF,IAAI,EAAE,IAAI,KAAK,WAAW,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,UAAU;gBAClD,mBAAmB,EAAE,yBAAyB,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC;aACzE,CAAC,CAAC;SACJ;KACF,CAAC,CAAC;IACH,MAAM,YAAY,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;IACzD,KAAK,MAAM,IAAI,IAAI,CAAC,WAAW,EAAE,UAAU,CAAU;QAAE,mCAAmC,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,YAAY,CAAC,CAAC;IACxI,wBAAwB,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,qEAAqE;IAC5G,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,KAAK,MAAM,CAAC,YAAY,CAAC;QAAE,MAAM,KAAK,CAAC,qCAAqC,CAAC,CAAC;IAC9G,OAAO;QACL,MAAM,EAAE;YACN,eAAe,EAAE,CAAC;YAClB,SAAS,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS;YACxB,OAAO,EAAE,CAAC,CAAC,EAAE;YACb,UAAU,EAAE,GAAG,CAAC,IAAI;YACpB,kBAAkB,EAAE,MAAM,CAAC,YAAY,CAAC;YACxC,kBAAkB,EAAE,MAAM,CAAC,YAAY,CAAC;YACxC,SAAS,EAAE,CAAC,CAAC,SAAS,CAAC,SAAS;YAChC,SAAS,EAAE,CAAC,CAAC,SAAS,CAAC,SAAS;YAChC,qBAAqB,EAAE,CAAC,CAAC,SAAS,CAAC,qBAAqB;YACxD,QAAQ,EAAE,CAAC,CAAC,SAAS,CAAC,QAAQ;YAC9B,eAAe,EAAE,CAAC,CAAC,SAAS;YAC5B,OAAO;SACR;QACD,YAAY;QACZ,YAAY;KACb,CAAC;AACJ,CAAC","sourcesContent":["import path from \"node:path\";\n\nimport { configurationGroupAuthorizationSchema } from \"./configuration-group-authorization.js\";\nimport { configurationResourceHash } from \"./configuration-group-contract.js\";\nimport { authorizeProcessGroupRuntime, processGroupAuthorizationFile, validateProcessGroupPolicyCandidate } from \"./process-group-authorization.js\";\nimport { resolvedProcessGroupChannels } from \"./process-group-contract.js\";\nimport { describeInstalledProcessGroupGeneration, inspectGenerationJournal } from \"./process-group-generation.js\";\nimport { mqttOutputPortableConfiguration, reviewProcessGroupMqttOutput } from \"./process-group-mqtt-output.js\";\nimport {\n  groupArtifactHash,\n  groupChannelsHash,\n  configurationAuthorizationHash as hash,\n  readProcessGroupResource as read,\n  sha256,\n} from \"./process-group-resources.js\";\nimport type {\n  GroupMqttOutputReview,\n  GroupVersionUpgradeReview,\n  PreparedGroupUpgrade,\n  UpgradeConfiguration,\n  UpgradeConfigurations,\n} from \"./process-group-upgrade.js\";\n\n/** Same generation, different paired artifacts. Never initializes or rewrites the journal. */\nexport function reviewInstalledConfigurationGroupUpgrade(\n  configs: UpgradeConfigurations,\n  controllerName: string,\n  stateRoot: string,\n  excludedUnsFields: readonly string[] = [],\n): PreparedGroupUpgrade {\n  return reviewConfigurationGroup(configs, controllerName, stateRoot, excludedUnsFields, false);\n}\nexport function reviewInstalledConfigurationGroupMqttOutput(\n  configs: UpgradeConfigurations,\n  controllerName: string,\n  stateRoot: string,\n  excludedUnsFields: readonly string[] = [],\n): PreparedGroupUpgrade {\n  const mqttOutput = reviewProcessGroupMqttOutput(configs, process.env[\"UNS_MQTT_OUTPUT_STATE_ROOT\"], stateRoot);\n  const result = reviewConfigurationGroup(configs, controllerName, stateRoot, excludedUnsFields, true);\n  return {\n    ...result,\n    review: {\n      ...result.review,\n      protocolVersion: 3,\n      mqttOutput,\n      delivery: { inputPausePossible: true, exactlyOnceOutput: false, pendingOutputBlocksRollback: true },\n    } as GroupMqttOutputReview,\n  };\n}\nfunction reviewConfigurationGroup(\n  configs: UpgradeConfigurations,\n  controllerName: string,\n  stateRoot: string,\n  excludedUnsFields: readonly string[],\n  mqttOutput: boolean,\n): PreparedGroupUpgrade {\n  const context = (c: UpgradeConfiguration) => ({\n    packageRoot: c.packageRoot,\n    instanceDirectory: c.instanceDirectory,\n    rawConfiguration: c.raw,\n    channels: resolvedProcessGroupChannels(c.resolved),\n    controllerName,\n    stateRoot,\n  });\n  const source = configs.source.publisher,\n    target = configs.target.publisher,\n    a = describeInstalledProcessGroupGeneration(source),\n    b = describeInstalledProcessGroupGeneration(target);\n  if (a.d.protocolVersion !== 2 || b.d.protocolVersion !== 2 || a.d.namespace !== b.d.namespace || hash(a.reference) !== hash(b.reference))\n    throw Error(\"Unchanged configuration generation required; review resource changes as a separate generation\");\n  const pkg = (c: UpgradeConfiguration) => JSON.parse(read(path.join(c.packageRoot, \"package.json\")).toString()),\n    sourcePackage = pkg(source),\n    targetPackage = pkg(target);\n  if (!sourcePackage.version || !targetPackage.version || (!mqttOutput && sourcePackage.version === targetPackage.version))\n    throw Error(\"Two different installed paired versions required\");\n  const old = authorizeProcessGroupRuntime(context(source));\n  const sourcePolicy = read(old.file, true),\n    previous = configurationGroupAuthorizationSchema.parse(JSON.parse(sourcePolicy.toString()));\n  const portable = (raw: Record<string, unknown>, role: \"publisher\" | \"receiver\") => {\n    const copy = mqttOutput ? mqttOutputPortableConfiguration(raw, role) : structuredClone(raw),\n      uns = { ...(copy[\"uns\"] as Record<string, unknown>) };\n    for (const key of excludedUnsFields) delete uns[key];\n    copy[\"uns\"] = uns;\n    return hash(copy);\n  };\n  const members: GroupVersionUpgradeReview[\"members\"] = [];\n  const directories = new Set<string>();\n  for (const side of [\"source\", \"target\"] as const)\n    for (const role of [\"publisher\", \"receiver\"] as const) {\n      const c = configs[side][role],\n        g = describeInstalledProcessGroupGeneration(c),\n        installed = pkg(c);\n      if (\n        g.d.protocolVersion !== 2 ||\n        g.d.namespace !== a.d.namespace ||\n        installed.name !== sourcePackage.name ||\n        installed.version !== (side === \"source\" ? sourcePackage.version : targetPackage.version) ||\n        c.packageRoot !== configs[side].publisher.packageRoot ||\n        directories.has(c.instanceDirectory) ||\n        hash(g.reference) !== hash(a.reference) ||\n        g.normalized.uns[\"processName\"] !== (role === \"publisher\" ? a.processName : a.receiverProcessName) ||\n        (role === \"receiver\"\n          ? g.normalized.runtimeRole !== \"admission\"\n          : g.normalized.runtimeRole !== undefined && g.normalized.runtimeRole !== \"publisher\") ||\n        portable(c.raw, role) !== portable(configs.source[role].raw, role) ||\n        groupChannelsHash(g.channels) !== groupChannelsHash(a.channels) ||\n        processGroupAuthorizationFile(context(c)) !== old.file\n      )\n        throw Error(\"Exact paired configuration, resources, broker identity and retained journal required\");\n      directories.add(c.instanceDirectory);\n      if (side === \"source\") {\n        const proof = authorizeProcessGroupRuntime(context(c));\n        if (proof.role !== (role === \"publisher\" ? \"target\" : \"receiver\") || proof.sha256 !== sha256(sourcePolicy))\n          throw Error(\"Exact authorized source pair required\");\n      }\n      members.push({\n        side,\n        role,\n        processName: String(g.normalized.uns[\"processName\"]),\n        configurationSha256: hash(c.raw),\n        artifactSha256: groupArtifactHash(c.packageRoot),\n      });\n    }\n  const policy = configurationGroupAuthorizationSchema.parse({\n    ...previous,\n    packageRoot: target.packageRoot,\n    descriptorSha256: configurationResourceHash(targetPackage.unsDatahub.processGroupConfigurationRuntime),\n    artifactSha256: groupArtifactHash(target.packageRoot),\n    placements: [\n      ...previous.placements.filter((p) => p.role === \"source\"),\n      ...([\"publisher\", \"receiver\"] as const).map((role) => ({\n        instanceId: path.basename(configs.target[role].instanceDirectory),\n        processName: members.find((m) => m.side === \"target\" && m.role === role)!.processName,\n        role: role === \"publisher\" ? \"target\" : \"receiver\",\n        configurationSha256: configurationResourceHash(configs.target[role].raw),\n      })),\n    ],\n  });\n  const targetPolicy = Buffer.from(JSON.stringify(policy));\n  for (const role of [\"publisher\", \"receiver\"] as const) validateProcessGroupPolicyCandidate(context(configs.target[role]), targetPolicy);\n  inspectGenerationJournal(a.reference); // Pending, previously completed work is valid and must remain bound.\n  if (sha256(read(old.file, true)) !== sha256(sourcePolicy)) throw Error(\"Source policy changed during review\");\n  return {\n    review: {\n      protocolVersion: 1,\n      namespace: a.d.namespace,\n      groupId: a.id,\n      policyFile: old.file,\n      sourcePolicySha256: sha256(sourcePolicy),\n      targetPolicySha256: sha256(targetPolicy),\n      journalId: a.reference.journalId,\n      directory: a.reference.directory,\n      journalContractSha256: a.reference.journalContractSha256,\n      profiles: a.reference.profiles,\n      retainedJournal: a.reference,\n      members,\n    },\n    sourcePolicy,\n    targetPolicy,\n  };\n}\n"]}

package/dist/runtime/process-group-mqtt-output.d.ts

@@ -0,0 +1,63 @@
+import { z } from "zod";
+import type { UpgradeConfigurations } from "./process-group-upgrade.js";
+export declare const processGroupMqttOutputRuntimeSchema: z.ZodObject<{
+    protocolVersion: z.ZodLiteral<1>;
+    instanceName: z.ZodString;
+}, z.core.$strict>;
+/** An explicit output enablement, never an incidental version/configuration change. */
+export declare const processGroupMqttOutputInputSchema: z.ZodObject<{
+    protocolVersion: z.ZodLiteral<3>;
+    source: z.ZodObject<{
+        publisher: z.ZodObject<{
+            controller: z.ZodString;
+            rttNode: z.ZodString;
+            version: z.ZodString;
+            instanceId: z.ZodString;
+        }, z.core.$strict>;
+        receiver: z.ZodObject<{
+            controller: z.ZodString;
+            rttNode: z.ZodString;
+            version: z.ZodString;
+            instanceId: z.ZodString;
+        }, z.core.$strict>;
+    }, z.core.$strict>;
+    target: z.ZodObject<{
+        publisher: z.ZodObject<{
+            controller: z.ZodString;
+            rttNode: z.ZodString;
+            version: z.ZodString;
+            instanceId: z.ZodString;
+        }, z.core.$strict>;
+        receiver: z.ZodObject<{
+            controller: z.ZodString;
+            rttNode: z.ZodString;
+            version: z.ZodString;
+            instanceId: z.ZodString;
+        }, z.core.$strict>;
+    }, z.core.$strict>;
+    acknowledgeInputPause: z.ZodLiteral<true>;
+    acknowledgePossibleReplay: z.ZodLiteral<true>;
+    acknowledgePendingOutputBlocksRollback: z.ZodLiteral<true>;
+}, z.core.$strict>;
+export type GroupMqttOutputReference = {
+    root: string;
+    directory: string;
+    rootId: string;
+    relative: string;
+    identity: string;
+    optionsSha256: string;
+};
+/** Only these explicitly reviewed output fields can differ; all other portable data remains exact. */
+export declare function mqttOutputPortableConfiguration(raw: Record<string, unknown>, role: "publisher" | "receiver"): Record<string, unknown>;
+export declare function reviewProcessGroupMqttOutput(configs: UpgradeConfigurations, root: string | undefined, stateRoot: string): GroupMqttOutputReference;
+/** Recheck after proven exit and immediately before policy/start. Unknown state is never empty. */
+export declare function inspectReviewedProcessGroupMqttOutput(reference: GroupMqttOutputReference, requireStopped?: boolean): {
+    rootId: string;
+    relative: string;
+    identity: string;
+    records: number;
+    bytes: number;
+    exists: boolean;
+    ownerActive: boolean;
+};
+//# sourceMappingURL=process-group-mqtt-output.d.ts.map

package/dist/runtime/process-group-mqtt-output.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"process-group-mqtt-output.d.ts","sourceRoot":"","sources":["../../src/runtime/process-group-mqtt-output.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAQxB,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,4BAA4B,CAAC;AAExE,eAAO,MAAM,mCAAmC;;;kBAG9C,CAAC;AAEH,uFAAuF;AACvF,eAAO,MAAM,iCAAiC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBAkB1C,CAAC;AACL,MAAM,MAAM,wBAAwB,GAAG;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,aAAa,EAAE,MAAM,CAAA;CAAE,CAAC;AACtJ,sGAAsG;AACtG,wBAAgB,+BAA+B,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,IAAI,EAAE,WAAW,GAAG,UAAU,2BAe3G;AACD,wBAAgB,4BAA4B,CAAC,OAAO,EAAE,qBAAqB,EAAE,IAAI,EAAE,MAAM,GAAG,SAAS,EAAE,SAAS,EAAE,MAAM,GAAG,wBAAwB,CA6BlJ;AACD,mGAAmG;AACnG,wBAAgB,qCAAqC,CAAC,SAAS,EAAE,wBAAwB,EAAE,cAAc,UAAO;;;;;;;;EAI/G"}

package/dist/runtime/process-group-mqtt-output.js

@@ -0,0 +1,89 @@
+import path from "node:path";
+import { z } from "zod";
+import { mqttPublishQueueIdentity, mqttPublishQueueSchema } from "../uns-mqtt/publish-queue-contract.js";
+import { managedMqttOutputBinding, mqttOutputStateLimits } from "./mqtt-output-state-contract.js";
+import { inspectManagedOutputQueue } from "./mqtt-output-state-program.mjs";
+import { resolvedProcessGroupChannels } from "./process-group-contract.js";
+import { groupPlacementSchema, placementKey } from "./process-group-control-contract.js";
+import { configurationAuthorizationHash as hash, readProcessGroupResource as read, sha256 } from "./process-group-resources.js";
+export const processGroupMqttOutputRuntimeSchema = z.strictObject({
+    protocolVersion: z.literal(1),
+    instanceName: z.string().regex(/^[a-zA-Z0-9][a-zA-Z0-9._-]{0,99}$/),
+});
+const pair = z.strictObject({ publisher: groupPlacementSchema, receiver: groupPlacementSchema });
+/** An explicit output enablement, never an incidental version/configuration change. */
+export const processGroupMqttOutputInputSchema = z
+    .strictObject({
+    protocolVersion: z.literal(3),
+    source: pair,
+    target: pair,
+    acknowledgeInputPause: z.literal(true),
+    acknowledgePossibleReplay: z.literal(true),
+    acknowledgePendingOutputBlocksRollback: z.literal(true),
+})
+    .superRefine((v, c) => {
+    const all = [v.source.publisher, v.source.receiver, v.target.publisher, v.target.receiver];
+    if (new Set(all.map(placementKey)).size !== 4 ||
+        all.some((p) => p.controller !== all[0].controller || p.rttNode !== all[0].rttNode) ||
+        v.source.publisher.version !== v.source.receiver.version ||
+        v.target.publisher.version !== v.target.receiver.version)
+        c.addIssue({ code: "custom", message: "Four distinct same-host paired placements required" });
+});
+/** Only these explicitly reviewed output fields can differ; all other portable data remains exact. */
+export function mqttOutputPortableConfiguration(raw, role) {
+    const copy = structuredClone(raw);
+    if (role === "publisher") {
+        const output = copy["output"];
+        if (output) {
+            delete output["publishQueue"];
+            if (!Object.keys(output).length)
+                delete copy["output"];
+        }
+        const uns = copy["uns"];
+        if (uns) {
+            delete uns["handover"];
+            delete uns["instanceMode"];
+        }
+    }
+    return copy;
+}
+export function reviewProcessGroupMqttOutput(configs, root, stateRoot) {
+    const source = configs.source.publisher, target = configs.target.publisher;
+    for (const role of ["publisher", "receiver"]) {
+        const raw = configs.source[role].raw;
+        if (raw.output?.publishQueue !== undefined)
+            throw Error("Output enablement requires a source without an MQTT queue");
+    }
+    if (configs.target.receiver.raw["output"]?.publishQueue !== undefined)
+        throw Error("Admission receiver cannot own the publisher output queue");
+    const queue = mqttPublishQueueSchema.parse(target.raw["output"]?.publishQueue);
+    if (queue.mode !== "durable" || queue.storage !== "runtime")
+        throw Error("Reviewed output enablement requires durable Runtime storage");
+    const uns = target.raw["uns"];
+    if (uns["handover"] !== false || !["force", "wait"].includes(String(uns["instanceMode"])))
+        throw Error("MQTT output enablement requires explicit stop-before-start configuration");
+    if (!root || path.resolve(root) === path.resolve(stateRoot) || queue.directory.startsWith(path.resolve(stateRoot) + path.sep))
+        throw Error("A separate permanent MQTT output mount is required");
+    const binding = managedMqttOutputBinding(target.raw, root);
+    const pkg = JSON.parse(read(path.join(target.packageRoot, "package.json")).toString());
+    const sourcePackage = JSON.parse(read(path.join(source.packageRoot, "package.json")).toString());
+    if (pkg.name !== sourcePackage.name)
+        throw Error("Publisher package identity changed");
+    const declaration = processGroupMqttOutputRuntimeSchema.parse(pkg.unsDatahub?.processGroupMqttOutputRuntime);
+    const processName = String(target.raw["uns"]["processName"]);
+    if (processName !== String(source.raw["uns"]["processName"]))
+        throw Error("Publisher identity changed");
+    const identity = sha256(mqttPublishQueueIdentity(pkg.name, processName + "-" + declaration.instanceName, resolvedProcessGroupChannels(target.resolved)[2]));
+    const status = inspectManagedOutputQueue(root, binding.directory, identity, mqttOutputStateLimits);
+    if (status.records || status.bytes)
+        throw Error("Output enablement requires an empty original-destination queue; preserve pending work");
+    return { root, directory: binding.directory, rootId: status.rootId, relative: binding.relative, identity, optionsSha256: hash(queue) };
+}
+/** Recheck after proven exit and immediately before policy/start. Unknown state is never empty. */
+export function inspectReviewedProcessGroupMqttOutput(reference, requireStopped = true) {
+    const status = inspectManagedOutputQueue(reference.root, reference.directory, reference.identity, mqttOutputStateLimits, requireStopped);
+    if (status.rootId !== reference.rootId || status.relative !== reference.relative)
+        throw Error("Reviewed MQTT output storage identity changed");
+    return status;
+}
+//# sourceMappingURL=process-group-mqtt-output.js.map

package/dist/runtime/process-group-mqtt-output.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"process-group-mqtt-output.js","sourceRoot":"","sources":["../../src/runtime/process-group-mqtt-output.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,wBAAwB,EAAE,sBAAsB,EAAE,MAAM,uCAAuC,CAAC;AACzG,OAAO,EAAE,wBAAwB,EAAE,qBAAqB,EAAE,MAAM,iCAAiC,CAAC;AAClG,OAAO,EAAE,yBAAyB,EAAE,MAAM,iCAAiC,CAAC;AAC5E,OAAO,EAAE,4BAA4B,EAAE,MAAM,6BAA6B,CAAC;AAC3E,OAAO,EAAE,oBAAoB,EAAE,YAAY,EAAE,MAAM,qCAAqC,CAAC;AACzF,OAAO,EAAE,8BAA8B,IAAI,IAAI,EAAE,wBAAwB,IAAI,IAAI,EAAE,MAAM,EAAE,MAAM,8BAA8B,CAAC;AAGhI,MAAM,CAAC,MAAM,mCAAmC,GAAG,CAAC,CAAC,YAAY,CAAC;IAChE,eAAe,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IAC7B,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,mCAAmC,CAAC;CACpE,CAAC,CAAC;AACH,MAAM,IAAI,GAAG,CAAC,CAAC,YAAY,CAAC,EAAE,SAAS,EAAE,oBAAoB,EAAE,QAAQ,EAAE,oBAAoB,EAAE,CAAC,CAAC;AACjG,uFAAuF;AACvF,MAAM,CAAC,MAAM,iCAAiC,GAAG,CAAC;KAC/C,YAAY,CAAC;IACZ,eAAe,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IAC7B,MAAM,EAAE,IAAI;IACZ,MAAM,EAAE,IAAI;IACZ,qBAAqB,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC;IACtC,yBAAyB,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC;IAC1C,sCAAsC,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC;CACxD,CAAC;KACD,WAAW,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;IACpB,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IAC3F,IACE,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC;QACzC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,KAAK,GAAG,CAAC,CAAC,CAAE,CAAC,UAAU,IAAI,CAAC,CAAC,OAAO,KAAK,GAAG,CAAC,CAAC,CAAE,CAAC,OAAO,CAAC;QACrF,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO;QACxD,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO;QAExD,CAAC,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,oDAAoD,EAAE,CAAC,CAAC;AAClG,CAAC,CAAC,CAAC;AAEL,sGAAsG;AACtG,MAAM,UAAU,+BAA+B,CAAC,GAA4B,EAAE,IAA8B;IAC1G,MAAM,IAAI,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC;IAClC,IAAI,IAAI,KAAK,WAAW,EAAE,CAAC;QACzB,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAwC,CAAC;QACrE,IAAI,MAAM,EAAE,CAAC;YACX,OAAO,MAAM,CAAC,cAAc,CAAC,CAAC;YAC9B,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,MAAM;gBAAE,OAAO,IAAI,CAAC,QAAQ,CAAC,CAAC;QACzD,CAAC;QACD,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAwC,CAAC;QAC/D,IAAI,GAAG,EAAE,CAAC;YACR,OAAO,GAAG,CAAC,UAAU,CAAC,CAAC;YACvB,OAAO,GAAG,CAAC,cAAc,CAAC,CAAC;QAC7B,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AACD,MAAM,UAAU,4BAA4B,CAAC,OAA8B,EAAE,IAAwB,EAAE,SAAiB;IACtH,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,SAAS,EACrC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC;IACpC,KAAK,MAAM,IAAI,IAAI,CAAC,WAAW,EAAE,UAAU,CAAU,EAAE,CAAC;QACtD,MAAM,GAAG,GAAG,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,GAA8C,CAAC;QAChF,IAAI,GAAG,CAAC,MAAM,EAAE,YAAY,KAAK,SAAS;YAAE,MAAM,KAAK,CAAC,2DAA2D,CAAC,CAAC;IACvH,CAAC;IACD,IAAK,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAA4C,EAAE,YAAY,KAAK,SAAS;QAC/G,MAAM,KAAK,CAAC,0DAA0D,CAAC,CAAC;IAC1E,MAAM,KAAK,GAAG,sBAAsB,CAAC,KAAK,CAAE,MAAM,CAAC,GAAG,CAAC,QAAQ,CAA4C,EAAE,YAAY,CAAC,CAAC;IAC3H,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,IAAI,KAAK,CAAC,OAAO,KAAK,SAAS;QAAE,MAAM,KAAK,CAAC,6DAA6D,CAAC,CAAC;IACxI,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC,KAAK,CAA4B,CAAC;IACzD,IAAI,GAAG,CAAC,UAAU,CAAC,KAAK,KAAK,IAAI,CAAC,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC;QACvF,MAAM,KAAK,CAAC,0EAA0E,CAAC,CAAC;IAC1F,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,IAAI,KAAK,CAAC,SAAS,CAAC,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC;QAC3H,MAAM,KAAK,CAAC,oDAAoD,CAAC,CAAC;IACpE,MAAM,OAAO,GAAG,wBAAwB,CAAC,MAAM,CAAC,GAAG,EAAE,IAAI,CAAE,CAAC;IAC5D,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,cAAc,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC;IACvF,MAAM,aAAa,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,cAAc,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC;IACjG,IAAI,GAAG,CAAC,IAAI,KAAK,aAAa,CAAC,IAAI;QAAE,MAAM,KAAK,CAAC,oCAAoC,CAAC,CAAC;IACvF,MAAM,WAAW,GAAG,mCAAmC,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,EAAE,6BAA6B,CAAC,CAAC;IAC7G,MAAM,WAAW,GAAG,MAAM,CAAE,MAAM,CAAC,GAAG,CAAC,KAAK,CAA6B,CAAC,aAAa,CAAC,CAAC,CAAC;IAC1F,IAAI,WAAW,KAAK,MAAM,CAAE,MAAM,CAAC,GAAG,CAAC,KAAK,CAA6B,CAAC,aAAa,CAAC,CAAC;QAAE,MAAM,KAAK,CAAC,4BAA4B,CAAC,CAAC;IACrI,MAAM,QAAQ,GAAG,MAAM,CACrB,wBAAwB,CAAC,GAAG,CAAC,IAAI,EAAE,WAAW,GAAG,GAAG,GAAG,WAAW,CAAC,YAAY,EAAE,4BAA4B,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAE,CAAC,CACpI,CAAC;IACF,MAAM,MAAM,GAAG,yBAAyB,CAAC,IAAI,EAAE,OAAO,CAAC,SAAS,EAAE,QAAQ,EAAE,qBAAqB,CAAC,CAAC;IACnG,IAAI,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,KAAK;QAAE,MAAM,KAAK,CAAC,uFAAuF,CAAC,CAAC;IACzI,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,QAAQ,EAAE,aAAa,EAAE,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;AACzI,CAAC;AACD,mGAAmG;AACnG,MAAM,UAAU,qCAAqC,CAAC,SAAmC,EAAE,cAAc,GAAG,IAAI;IAC9G,MAAM,MAAM,GAAG,yBAAyB,CAAC,SAAS,CAAC,IAAI,EAAE,SAAS,CAAC,SAAS,EAAE,SAAS,CAAC,QAAQ,EAAE,qBAAqB,EAAE,cAAc,CAAC,CAAC;IACzI,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS,CAAC,MAAM,IAAI,MAAM,CAAC,QAAQ,KAAK,SAAS,CAAC,QAAQ;QAAE,MAAM,KAAK,CAAC,+CAA+C,CAAC,CAAC;IAC/I,OAAO,MAAM,CAAC;AAChB,CAAC","sourcesContent":["import path from \"node:path\";\nimport { z } from \"zod\";\n\nimport { mqttPublishQueueIdentity, mqttPublishQueueSchema } from \"../uns-mqtt/publish-queue-contract.js\";\nimport { managedMqttOutputBinding, mqttOutputStateLimits } from \"./mqtt-output-state-contract.js\";\nimport { inspectManagedOutputQueue } from \"./mqtt-output-state-program.mjs\";\nimport { resolvedProcessGroupChannels } from \"./process-group-contract.js\";\nimport { groupPlacementSchema, placementKey } from \"./process-group-control-contract.js\";\nimport { configurationAuthorizationHash as hash, readProcessGroupResource as read, sha256 } from \"./process-group-resources.js\";\nimport type { UpgradeConfigurations } from \"./process-group-upgrade.js\";\n\nexport const processGroupMqttOutputRuntimeSchema = z.strictObject({\n  protocolVersion: z.literal(1),\n  instanceName: z.string().regex(/^[a-zA-Z0-9][a-zA-Z0-9._-]{0,99}$/),\n});\nconst pair = z.strictObject({ publisher: groupPlacementSchema, receiver: groupPlacementSchema });\n/** An explicit output enablement, never an incidental version/configuration change. */\nexport const processGroupMqttOutputInputSchema = z\n  .strictObject({\n    protocolVersion: z.literal(3),\n    source: pair,\n    target: pair,\n    acknowledgeInputPause: z.literal(true),\n    acknowledgePossibleReplay: z.literal(true),\n    acknowledgePendingOutputBlocksRollback: z.literal(true),\n  })\n  .superRefine((v, c) => {\n    const all = [v.source.publisher, v.source.receiver, v.target.publisher, v.target.receiver];\n    if (\n      new Set(all.map(placementKey)).size !== 4 ||\n      all.some((p) => p.controller !== all[0]!.controller || p.rttNode !== all[0]!.rttNode) ||\n      v.source.publisher.version !== v.source.receiver.version ||\n      v.target.publisher.version !== v.target.receiver.version\n    )\n      c.addIssue({ code: \"custom\", message: \"Four distinct same-host paired placements required\" });\n  });\nexport type GroupMqttOutputReference = { root: string; directory: string; rootId: string; relative: string; identity: string; optionsSha256: string };\n/** Only these explicitly reviewed output fields can differ; all other portable data remains exact. */\nexport function mqttOutputPortableConfiguration(raw: Record<string, unknown>, role: \"publisher\" | \"receiver\") {\n  const copy = structuredClone(raw);\n  if (role === \"publisher\") {\n    const output = copy[\"output\"] as Record<string, unknown> | undefined;\n    if (output) {\n      delete output[\"publishQueue\"];\n      if (!Object.keys(output).length) delete copy[\"output\"];\n    }\n    const uns = copy[\"uns\"] as Record<string, unknown> | undefined;\n    if (uns) {\n      delete uns[\"handover\"];\n      delete uns[\"instanceMode\"];\n    }\n  }\n  return copy;\n}\nexport function reviewProcessGroupMqttOutput(configs: UpgradeConfigurations, root: string | undefined, stateRoot: string): GroupMqttOutputReference {\n  const source = configs.source.publisher,\n    target = configs.target.publisher;\n  for (const role of [\"publisher\", \"receiver\"] as const) {\n    const raw = configs.source[role].raw as { output?: { publishQueue?: unknown } };\n    if (raw.output?.publishQueue !== undefined) throw Error(\"Output enablement requires a source without an MQTT queue\");\n  }\n  if ((configs.target.receiver.raw[\"output\"] as { publishQueue?: unknown } | undefined)?.publishQueue !== undefined)\n    throw Error(\"Admission receiver cannot own the publisher output queue\");\n  const queue = mqttPublishQueueSchema.parse((target.raw[\"output\"] as { publishQueue?: unknown } | undefined)?.publishQueue);\n  if (queue.mode !== \"durable\" || queue.storage !== \"runtime\") throw Error(\"Reviewed output enablement requires durable Runtime storage\");\n  const uns = target.raw[\"uns\"] as Record<string, unknown>;\n  if (uns[\"handover\"] !== false || ![\"force\", \"wait\"].includes(String(uns[\"instanceMode\"])))\n    throw Error(\"MQTT output enablement requires explicit stop-before-start configuration\");\n  if (!root || path.resolve(root) === path.resolve(stateRoot) || queue.directory.startsWith(path.resolve(stateRoot) + path.sep))\n    throw Error(\"A separate permanent MQTT output mount is required\");\n  const binding = managedMqttOutputBinding(target.raw, root)!;\n  const pkg = JSON.parse(read(path.join(target.packageRoot, \"package.json\")).toString());\n  const sourcePackage = JSON.parse(read(path.join(source.packageRoot, \"package.json\")).toString());\n  if (pkg.name !== sourcePackage.name) throw Error(\"Publisher package identity changed\");\n  const declaration = processGroupMqttOutputRuntimeSchema.parse(pkg.unsDatahub?.processGroupMqttOutputRuntime);\n  const processName = String((target.raw[\"uns\"] as Record<string, unknown>)[\"processName\"]);\n  if (processName !== String((source.raw[\"uns\"] as Record<string, unknown>)[\"processName\"])) throw Error(\"Publisher identity changed\");\n  const identity = sha256(\n    mqttPublishQueueIdentity(pkg.name, processName + \"-\" + declaration.instanceName, resolvedProcessGroupChannels(target.resolved)[2]!),\n  );\n  const status = inspectManagedOutputQueue(root, binding.directory, identity, mqttOutputStateLimits);\n  if (status.records || status.bytes) throw Error(\"Output enablement requires an empty original-destination queue; preserve pending work\");\n  return { root, directory: binding.directory, rootId: status.rootId, relative: binding.relative, identity, optionsSha256: hash(queue) };\n}\n/** Recheck after proven exit and immediately before policy/start. Unknown state is never empty. */\nexport function inspectReviewedProcessGroupMqttOutput(reference: GroupMqttOutputReference, requireStopped = true) {\n  const status = inspectManagedOutputQueue(reference.root, reference.directory, reference.identity, mqttOutputStateLimits, requireStopped);\n  if (status.rootId !== reference.rootId || status.relative !== reference.relative) throw Error(\"Reviewed MQTT output storage identity changed\");\n  return status;\n}\n"]}

package/dist/runtime/process-group-upgrade.d.ts

@@ -1,5 +1,6 @@
-import { type GroupGenerationReview, type GenerationJournalReference } from "./process-group-generation.js";
 import { z } from "zod";
+import { type GenerationJournalReference, type GroupGenerationReview } from "./process-group-generation.js";
+import { type GroupMqttOutputReference } from "./process-group-mqtt-output.js";
 export declare const processGroupUpgradeInputSchema: z.ZodUnion<readonly [z.ZodObject<{
     protocolVersion: z.ZodLiteral<1>;
     source: z.ZodObject<{
@@ -63,6 +64,39 @@ export declare const processGroupUpgradeInputSchema: z.ZodUnion<readonly [z.ZodO
     acknowledgeInputPause: z.ZodLiteral<true>;
     acknowledgeResourceReview: z.ZodLiteral<true>;
     acknowledgePossibleReplay: z.ZodLiteral<true>;
+}, z.core.$strict>, z.ZodObject<{
+    protocolVersion: z.ZodLiteral<3>;
+    source: z.ZodObject<{
+        publisher: z.ZodObject<{
+            controller: z.ZodString;
+            rttNode: z.ZodString;
+            version: z.ZodString;
+            instanceId: z.ZodString;
+        }, z.core.$strict>;
+        receiver: z.ZodObject<{
+            controller: z.ZodString;
+            rttNode: z.ZodString;
+            version: z.ZodString;
+            instanceId: z.ZodString;
+        }, z.core.$strict>;
+    }, z.core.$strict>;
+    target: z.ZodObject<{
+        publisher: z.ZodObject<{
+            controller: z.ZodString;
+            rttNode: z.ZodString;
+            version: z.ZodString;
+            instanceId: z.ZodString;
+        }, z.core.$strict>;
+        receiver: z.ZodObject<{
+            controller: z.ZodString;
+            rttNode: z.ZodString;
+            version: z.ZodString;
+            instanceId: z.ZodString;
+        }, z.core.$strict>;
+    }, z.core.$strict>;
+    acknowledgeInputPause: z.ZodLiteral<true>;
+    acknowledgePossibleReplay: z.ZodLiteral<true>;
+    acknowledgePendingOutputBlocksRollback: z.ZodLiteral<true>;
 }, z.core.$strict>]>;
 export type ProcessGroupUpgradeInput = z.infer<typeof processGroupUpgradeInputSchema>;
 export type UpgradeRole = "publisher" | "receiver";
@@ -98,7 +132,16 @@ export type GroupVersionUpgradeReview = {
         artifactSha256: string;
     }>;
 };
-export type GroupUpgradeReview = GroupVersionUpgradeReview | GroupGenerationReview;
+export type GroupMqttOutputReview = Omit<GroupVersionUpgradeReview, "protocolVersion"> & {
+    protocolVersion: 3;
+    mqttOutput: GroupMqttOutputReference;
+    delivery: {
+        inputPausePossible: true;
+        exactlyOnceOutput: false;
+        pendingOutputBlocksRollback: true;
+    };
+};
+export type GroupUpgradeReview = GroupVersionUpgradeReview | GroupGenerationReview | GroupMqttOutputReview;
 export type PreparedGroupUpgrade = {
     review: GroupUpgradeReview;
     sourcePolicy: Buffer;
@@ -106,6 +149,8 @@ export type PreparedGroupUpgrade = {
 };
 /** Data-only same-host version review. No application JS, journal writes or launch authority. */
 export declare function reviewInstalledProcessGroupUpgrade(configs: UpgradeConfigurations, controllerName: string, stateRoot: string, excludedUnsFields?: readonly string[]): PreparedGroupUpgrade;
+/** Explicit shared output capability. Ordinary upgrades keep their strict comparison. */
+export declare function reviewInstalledProcessGroupMqttOutput(configs: UpgradeConfigurations, controllerName: string, stateRoot: string, excludedUnsFields?: readonly string[], outputRoot?: string): PreparedGroupUpgrade;
 /** Atomic compare-and-swap. The authenticated host must first prove both old owners exited. */
 export declare function replaceReviewedProcessGroupPolicy(file: string, expected: string, bytes: Buffer): void;
 export declare const processGroupUpgradeRequestSchema: z.ZodObject<{
@@ -181,6 +226,39 @@ export declare const processGroupUpgradeRequestSchema: z.ZodObject<{
         acknowledgeInputPause: z.ZodLiteral<true>;
         acknowledgeResourceReview: z.ZodLiteral<true>;
         acknowledgePossibleReplay: z.ZodLiteral<true>;
+    }, z.core.$strict>, z.ZodObject<{
+        protocolVersion: z.ZodLiteral<3>;
+        source: z.ZodObject<{
+            publisher: z.ZodObject<{
+                controller: z.ZodString;
+                rttNode: z.ZodString;
+                version: z.ZodString;
+                instanceId: z.ZodString;
+            }, z.core.$strict>;
+            receiver: z.ZodObject<{
+                controller: z.ZodString;
+                rttNode: z.ZodString;
+                version: z.ZodString;
+                instanceId: z.ZodString;
+            }, z.core.$strict>;
+        }, z.core.$strict>;
+        target: z.ZodObject<{
+            publisher: z.ZodObject<{
+                controller: z.ZodString;
+                rttNode: z.ZodString;
+                version: z.ZodString;
+                instanceId: z.ZodString;
+            }, z.core.$strict>;
+            receiver: z.ZodObject<{
+                controller: z.ZodString;
+                rttNode: z.ZodString;
+                version: z.ZodString;
+                instanceId: z.ZodString;
+            }, z.core.$strict>;
+        }, z.core.$strict>;
+        acknowledgeInputPause: z.ZodLiteral<true>;
+        acknowledgePossibleReplay: z.ZodLiteral<true>;
+        acknowledgePendingOutputBlocksRollback: z.ZodLiteral<true>;
     }, z.core.$strict>]>>;
     id: z.ZodOptional<z.ZodString>;
     expectedFingerprint: z.ZodOptional<z.ZodString>;
@@ -192,4 +270,9 @@ export declare function inspectProcessGroupUpgradeJournal(review: Pick<GroupVers
     receiverReady: boolean;
     publisherReady: boolean;
 };
+/** Bounded, read-only usage for a retained file/configuration input journal. */
+export declare function inspectProcessGroupUpgradeUsage(review: Pick<GroupVersionUpgradeReview, "directory" | "journalId" | "journalContractSha256">): {
+    records: number;
+    bytes: number;
+};
 //# sourceMappingURL=process-group-upgrade.d.ts.map

package/dist/runtime/process-group-upgrade.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"process-group-upgrade.d.ts","sourceRoot":"","sources":["../../src/runtime/process-group-upgrade.ts"],"names":[],"mappings":"AAEA,OAAO,EAAmC,KAAK,qBAAqB,EAAC,KAAK,0BAA0B,EAAC,MAAM,+BAA+B,CAAC;AAI3I,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAsCxB,eAAO,MAAM,8BAA8B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;oBAAmF,CAAC;AAC/H,MAAM,MAAM,wBAAwB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,8BAA8B,CAAC,CAAC;AACtF,MAAM,MAAM,WAAW,GAAG,WAAW,GAAG,UAAU,CAAC;AACnD,MAAM,MAAM,oBAAoB,GAAG;IACjC,WAAW,EAAE,MAAM,CAAC;IACpB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC7B,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACnC,CAAC;AACF,MAAM,MAAM,qBAAqB,GAAG,MAAM,CAAC,QAAQ,GAAG,QAAQ,EAAE,MAAM,CAAC,WAAW,EAAE,oBAAoB,CAAC,CAAC,CAAC;AAC3G,MAAM,MAAM,yBAAyB,GAAG;IACtC,eAAe,EAAE,CAAC,CAAC;IACnB,kGAAkG;IAClG,eAAe,CAAC,EAAE,0BAA0B,CAAC;IAC7C,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;IACnB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,kBAAkB,EAAE,MAAM,CAAC;IAC3B,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,qBAAqB,EAAE,MAAM,CAAC;IAC9B,QAAQ,EAAE,KAAK,CAAC;QAAE,WAAW,EAAE,MAAM,CAAC;QAAC,aAAa,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACnF,OAAO,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,QAAQ,GAAG,QAAQ,CAAC;QAAC,IAAI,EAAE,WAAW,CAAC;QAAC,WAAW,EAAE,MAAM,CAAC;QAAC,mBAAmB,EAAE,MAAM,CAAC;QAAC,cAAc,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CAC5I,CAAC;AACF,MAAM,MAAM,kBAAkB,GAAG,yBAAyB,GAAG,qBAAqB,CAAC;AACnF,MAAM,MAAM,oBAAoB,GAAG;IAAE,MAAM,EAAE,kBAAkB,CAAC;IAAC,YAAY,EAAE,MAAM,CAAC;IAAC,YAAY,EAAE,MAAM,CAAA;CAAE,CAAC;AAE9G,iGAAiG;AACjG,wBAAgB,kCAAkC,CAChD,OAAO,EAAE,qBAAqB,EAC9B,cAAc,EAAE,MAAM,EACtB,SAAS,EAAE,MAAM,EACjB,iBAAiB,GAAE,SAAS,MAAM,EAAO,GACxC,oBAAoB,CAwJtB;AAED,+FAA+F;AAC/F,wBAAgB,iCAAiC,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI,CAyBrG;AAED,eAAO,MAAM,gCAAgC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBAsBzC,CAAC;AACL,MAAM,MAAM,0BAA0B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gCAAgC,CAAC,CAAC;AAC1F,8FAA8F;AAC9F,wBAAgB,iCAAiC,CAAC,MAAM,EAAE,IAAI,CAAC,yBAAyB,EAAC,WAAW,GAAC,WAAW,GAAC,uBAAuB,GAAC,UAAU,CAAC,EAAE,YAAY,CAAC,EAAE,MAAM,EAAE,WAAW,CAAC,EAAE,MAAM;;;EA6ChM"}
+{"version":3,"file":"process-group-upgrade.d.ts","sourceRoot":"","sources":["../../src/runtime/process-group-upgrade.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAmBxB,OAAO,EAAE,KAAK,0BAA0B,EAAE,KAAK,qBAAqB,EAAqC,MAAM,+BAA+B,CAAC;AAC/I,OAAO,EACL,KAAK,wBAAwB,EAI9B,MAAM,gCAAgC,CAAC;AAsBxC,eAAO,MAAM,8BAA8B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;oBAIzC,CAAC;AACH,MAAM,MAAM,wBAAwB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,8BAA8B,CAAC,CAAC;AACtF,MAAM,MAAM,WAAW,GAAG,WAAW,GAAG,UAAU,CAAC;AACnD,MAAM,MAAM,oBAAoB,GAAG;IACjC,WAAW,EAAE,MAAM,CAAC;IACpB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC7B,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACnC,CAAC;AACF,MAAM,MAAM,qBAAqB,GAAG,MAAM,CAAC,QAAQ,GAAG,QAAQ,EAAE,MAAM,CAAC,WAAW,EAAE,oBAAoB,CAAC,CAAC,CAAC;AAC3G,MAAM,MAAM,yBAAyB,GAAG;IACtC,eAAe,EAAE,CAAC,CAAC;IACnB,kGAAkG;IAClG,eAAe,CAAC,EAAE,0BAA0B,CAAC;IAC7C,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;IACnB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,kBAAkB,EAAE,MAAM,CAAC;IAC3B,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,qBAAqB,EAAE,MAAM,CAAC;IAC9B,QAAQ,EAAE,KAAK,CAAC;QAAE,WAAW,EAAE,MAAM,CAAC;QAAC,aAAa,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACnF,OAAO,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,QAAQ,GAAG,QAAQ,CAAC;QAAC,IAAI,EAAE,WAAW,CAAC;QAAC,WAAW,EAAE,MAAM,CAAC;QAAC,mBAAmB,EAAE,MAAM,CAAC;QAAC,cAAc,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CAC5I,CAAC;AACF,MAAM,MAAM,qBAAqB,GAAG,IAAI,CAAC,yBAAyB,EAAE,iBAAiB,CAAC,GAAG;IACvF,eAAe,EAAE,CAAC,CAAC;IACnB,UAAU,EAAE,wBAAwB,CAAC;IACrC,QAAQ,EAAE;QAAE,kBAAkB,EAAE,IAAI,CAAC;QAAC,iBAAiB,EAAE,KAAK,CAAC;QAAC,2BAA2B,EAAE,IAAI,CAAA;KAAE,CAAC;CACrG,CAAC;AACF,MAAM,MAAM,kBAAkB,GAAG,yBAAyB,GAAG,qBAAqB,GAAG,qBAAqB,CAAC;AAC3G,MAAM,MAAM,oBAAoB,GAAG;IAAE,MAAM,EAAE,kBAAkB,CAAC;IAAC,YAAY,EAAE,MAAM,CAAC;IAAC,YAAY,EAAE,MAAM,CAAA;CAAE,CAAC;AAE9G,iGAAiG;AACjG,wBAAgB,kCAAkC,CAChD,OAAO,EAAE,qBAAqB,EAC9B,cAAc,EAAE,MAAM,EACtB,SAAS,EAAE,MAAM,EACjB,iBAAiB,GAAE,SAAS,MAAM,EAAO,GACxC,oBAAoB,CAEtB;AACD,yFAAyF;AACzF,wBAAgB,qCAAqC,CACnD,OAAO,EAAE,qBAAqB,EAC9B,cAAc,EAAE,MAAM,EACtB,SAAS,EAAE,MAAM,EACjB,iBAAiB,GAAE,SAAS,MAAM,EAAO,EACzC,UAAU,SAA4C,GACrD,oBAAoB,CAYtB;AA0KD,+FAA+F;AAC/F,wBAAgB,iCAAiC,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI,CAyBrG;AAED,eAAO,MAAM,gCAAgC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBAsBzC,CAAC;AACL,MAAM,MAAM,0BAA0B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gCAAgC,CAAC,CAAC;AAC1F,8FAA8F;AAC9F,wBAAgB,iCAAiC,CAC/C,MAAM,EAAE,IAAI,CAAC,yBAAyB,EAAE,WAAW,GAAG,WAAW,GAAG,uBAAuB,GAAG,UAAU,CAAC,EACzG,YAAY,CAAC,EAAE,MAAM,EACrB,WAAW,CAAC,EAAE,MAAM;;;EA8CrB;AAED,gFAAgF;AAChF,wBAAgB,+BAA+B,CAAC,MAAM,EAAE,IAAI,CAAC,yBAAyB,EAAE,WAAW,GAAG,WAAW,GAAG,uBAAuB,CAAC;;;EA6C3I"}