@wjarka/cezarion 0.14.8-pr498.749 → 0.14.8-pr501.753

package/README.md

@@ -38,6 +38,19 @@ That's the whole setup. If your `claude` CLI is logged in (Pro/Max) and `gh` is
 authenticated, there is nothing else to configure. State lives in `.ai/cezar/`
 inside your repo — plain JSON, NDJSON and Markdown you can `cat` and fix by hand.
 
+Local npm installations have a workspace update API. `POST
+/api/v1/workspace/application-update/apply` with `{}` prepares the release
+advertised by health while the current server keeps running; `POST
+/api/v1/workspace/application-update/restart` with `{}` then restarts it. A
+successful restart updates the original global installation or ordinary npx
+cache entry, so the same command uses the new version on its next launch.
+Update preparation and recovery state is generated under
+`~/.cezar/application-updates/` (or `CEZ_HOME`).
+Pinned npx invocations, source checkouts, npm links, and hosted deployments use
+their existing manual update paths. Cezar holds its own installation lock and
+npm's npx lock during promotion; a separate manual `npm install` does not honor
+those locks, so avoid one while an update is preparing or restarting.
+
 ## A look inside
 
 Click any thumbnail for the full-size screenshot.

package/dist/application-update/discovery.d.ts

@@ -0,0 +1,22 @@
+export type Installation = {
+    kind: 'unsupported';
+    reason: string;
+} | {
+    kind: 'global' | 'npx';
+    prefix: string;
+    cache: string;
+    installRoot: string;
+    packageRoot: string;
+    outerRoot: string;
+    launchEntry: string;
+    outerPackage: '@wjarka/cezarion' | 'cezarion';
+    request: string;
+};
+export interface DiscoveryInput {
+    prefix: string;
+    cache: string;
+    packageRoot: string;
+    launchEntry: string;
+}
+/** Match only npm-owned, canonical layouts. A matched but unsafe layout is explicit. */
+export declare function discoverInstallation(input: DiscoveryInput): Installation;

package/dist/application-update/discovery.js

@@ -0,0 +1,91 @@
+import { realpathSync, readFileSync } from 'node:fs';
+import { join, relative, resolve, sep } from 'node:path';
+function inside(path, root) {
+    const rel = relative(root, path);
+    return rel === '' || (rel !== '..' && !rel.startsWith(`..${sep}`) && !rel.startsWith(sep));
+}
+function json(path) {
+    return JSON.parse(readFileSync(path, 'utf8'));
+}
+/** Match only npm-owned, canonical layouts. A matched but unsafe layout is explicit. */
+export function discoverInstallation(input) {
+    const unsupported = (reason) => ({ kind: 'unsupported', reason });
+    try {
+        let prefix;
+        try {
+            prefix = realpathSync(input.prefix);
+        }
+        catch {
+            prefix = resolve(input.prefix);
+        }
+        // A fresh global npm install need not have created its cache yet.
+        let cache;
+        try {
+            cache = realpathSync(input.cache);
+        }
+        catch {
+            cache = resolve(input.cache);
+        }
+        const packageRoot = realpathSync(input.packageRoot);
+        const launchEntry = realpathSync(input.launchEntry);
+        const manifest = json(join(packageRoot, 'package.json'));
+        if (manifest.name !== '@wjarka/cezarion' || typeof manifest.version !== 'string') {
+            return unsupported('running package is not @wjarka/cezarion');
+        }
+        let kind;
+        let installRoot;
+        let modules;
+        if (inside(packageRoot, join(prefix, 'lib/node_modules')) || inside(packageRoot, join(prefix, 'node_modules'))) {
+            kind = 'global';
+            installRoot = prefix;
+            modules = inside(packageRoot, join(prefix, 'lib/node_modules')) ? join(prefix, 'lib/node_modules') : join(prefix, 'node_modules');
+        }
+        else {
+            const parts = relative(cache, packageRoot).split(sep);
+            if (parts[0] !== '_npx' || !/^[a-z0-9]+$/i.test(parts[1] ?? '') || parts[2] !== 'node_modules') {
+                return unsupported('not an npm global or npx cache installation');
+            }
+            kind = 'npx';
+            installRoot = join(cache, '_npx', parts[1]);
+            modules = join(installRoot, 'node_modules');
+        }
+        const direct = join(modules, '@wjarka/cezarion');
+        const alias = join(modules, 'cezarion');
+        let outerPackage;
+        if (packageRoot !== direct && packageRoot !== join(alias, 'node_modules/@wjarka/cezarion')) {
+            return unsupported('linked or mixed package layout');
+        }
+        outerPackage = inside(launchEntry, alias) ? 'cezarion' : '@wjarka/cezarion';
+        let request = outerPackage;
+        if (kind === 'npx') {
+            const root = json(join(installRoot, 'package.json'));
+            const requests = root._npx?.packages;
+            if (!Array.isArray(requests) || requests.length !== 1 ||
+                !['cezarion', '@wjarka/cezarion'].includes(requests[0])) {
+                return unsupported('pinned or mixed npx request');
+            }
+            request = requests[0];
+            // npm may link .bin/cezarion to the scoped dependency even when the _npx
+            // request and root dependency are the alias. Metadata owns this choice.
+            outerPackage = request;
+        }
+        if (outerPackage === '@wjarka/cezarion' && packageRoot !== direct)
+            return unsupported('mixed launch layout');
+        const outerPath = outerPackage === 'cezarion' ? alias : direct;
+        if (!inside(launchEntry, outerPath) && !(kind === 'npx' && inside(launchEntry, packageRoot))) {
+            return unsupported('launch entry does not belong to installation');
+        }
+        if (outerPackage === 'cezarion') {
+            const outer = json(join(alias, 'package.json'));
+            const deps = outer.dependencies;
+            if (outer.name !== 'cezarion' || typeof deps?.['@wjarka/cezarion'] !== 'string')
+                return unsupported('alias is not linked to scoped package');
+        }
+        return { kind, prefix, cache, installRoot, packageRoot, outerRoot: outerPath,
+            launchEntry: resolve(input.launchEntry), outerPackage, request };
+    }
+    catch {
+        return unsupported('installation metadata is unavailable');
+    }
+}
+//# sourceMappingURL=discovery.js.map

package/dist/application-update/discovery.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"discovery.js","sourceRoot":"","sources":["../../src/application-update/discovery.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACrD,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AAazD,SAAS,MAAM,CAAC,IAAY,EAAE,IAAY;IACxC,MAAM,GAAG,GAAG,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACjC,OAAO,GAAG,KAAK,EAAE,IAAI,CAAC,GAAG,KAAK,IAAI,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,KAAK,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC;AAC7F,CAAC;AAED,SAAS,IAAI,CAAC,IAAY;IACxB,OAAO,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAA4B,CAAC;AAC3E,CAAC;AAED,wFAAwF;AACxF,MAAM,UAAU,oBAAoB,CAAC,KAAqB;IACxD,MAAM,WAAW,GAAG,CAAC,MAAc,EAAgB,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,MAAM,EAAE,CAAC,CAAC;IACxF,IAAI,CAAC;QACH,IAAI,MAAc,CAAC;QACnB,IAAI,CAAC;YAAC,MAAM,GAAG,YAAY,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC;YAAC,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAAC,CAAC;QACtF,kEAAkE;QAClE,IAAI,KAAa,CAAC;QAClB,IAAI,CAAC;YAAC,KAAK,GAAG,YAAY,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC;YAAC,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAAC,CAAC;QAClF,MAAM,WAAW,GAAG,YAAY,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;QACpD,MAAM,WAAW,GAAG,YAAY,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;QACpD,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,cAAc,CAAC,CAAC,CAAC;QACzD,IAAI,QAAQ,CAAC,IAAI,KAAK,kBAAkB,IAAI,OAAO,QAAQ,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;YACjF,OAAO,WAAW,CAAC,yCAAyC,CAAC,CAAC;QAChE,CAAC;QACD,IAAI,IAAsB,CAAC;QAC3B,IAAI,WAAmB,CAAC;QACxB,IAAI,OAAe,CAAC;QACpB,IAAI,MAAM,CAAC,WAAW,EAAE,IAAI,CAAC,MAAM,EAAE,kBAAkB,CAAC,CAAC,IAAI,MAAM,CAAC,WAAW,EAAE,IAAI,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC,EAAE,CAAC;YAC/G,IAAI,GAAG,QAAQ,CAAC;YAAC,WAAW,GAAG,MAAM,CAAC;YACtC,OAAO,GAAG,MAAM,CAAC,WAAW,EAAE,IAAI,CAAC,MAAM,EAAE,kBAAkB,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,EAAE,kBAAkB,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;QACpI,CAAC;aAAM,CAAC;YACN,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YACtD,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,MAAM,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,cAAc,EAAE,CAAC;gBAC/F,OAAO,WAAW,CAAC,6CAA6C,CAAC,CAAC;YACpE,CAAC;YACD,IAAI,GAAG,KAAK,CAAC;YAAC,WAAW,GAAG,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC,CAAE,CAAC,CAAC;YAAC,OAAO,GAAG,IAAI,CAAC,WAAW,EAAE,cAAc,CAAC,CAAC;QAC1G,CAAC;QACD,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,EAAE,kBAAkB,CAAC,CAAC;QACjD,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;QACxC,IAAI,YAA6C,CAAC;QAClD,IAAI,WAAW,KAAK,MAAM,IAAI,WAAW,KAAK,IAAI,CAAC,KAAK,EAAE,+BAA+B,CAAC,EAAE,CAAC;YAC3F,OAAO,WAAW,CAAC,gCAAgC,CAAC,CAAC;QACvD,CAAC;QACD,YAAY,GAAG,MAAM,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,kBAAkB,CAAC;QAC5E,IAAI,OAAO,GAAW,YAAY,CAAC;QACnC,IAAI,IAAI,KAAK,KAAK,EAAE,CAAC;YACnB,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,cAAc,CAAC,CAAC,CAAC;YACrD,MAAM,QAAQ,GAAI,IAAI,CAAC,IAA2C,EAAE,QAAQ,CAAC;YAC7E,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;gBACnD,CAAC,CAAC,UAAU,EAAE,kBAAkB,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAW,CAAC,EAAE,CAAC;gBACpE,OAAO,WAAW,CAAC,6BAA6B,CAAC,CAAC;YACpD,CAAC;YACD,OAAO,GAAG,QAAQ,CAAC,CAAC,CAAW,CAAC;YAChC,yEAAyE;YACzE,wEAAwE;YACxE,YAAY,GAAG,OAA8B,CAAC;QAChD,CAAC;QACD,IAAI,YAAY,KAAK,kBAAkB,IAAI,WAAW,KAAK,MAAM;YAAE,OAAO,WAAW,CAAC,qBAAqB,CAAC,CAAC;QAC7G,MAAM,SAAS,GAAG,YAAY,KAAK,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC;QAC/D,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,SAAS,CAAC,IAAI,CAAC,CAAC,IAAI,KAAK,KAAK,IAAI,MAAM,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC,EAAE,CAAC;YAC7F,OAAO,WAAW,CAAC,8CAA8C,CAAC,CAAC;QACrE,CAAC;QACD,IAAI,YAAY,KAAK,UAAU,EAAE,CAAC;YAChC,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,cAAc,CAAC,CAAC,CAAC;YAChD,MAAM,IAAI,GAAG,KAAK,CAAC,YAAmD,CAAC;YACvE,IAAI,KAAK,CAAC,IAAI,KAAK,UAAU,IAAI,OAAO,IAAI,EAAE,CAAC,kBAAkB,CAAC,KAAK,QAAQ;gBAAE,OAAO,WAAW,CAAC,uCAAuC,CAAC,CAAC;QAC/I,CAAC;QACD,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,WAAW,EAAE,WAAW,EAAE,SAAS,EAAE,SAAS;YAC1E,WAAW,EAAE,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC,EAAE,YAAY,EAAE,OAAO,EAAE,CAAC;IACrE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,WAAW,CAAC,sCAAsC,CAAC,CAAC;IAC7D,CAAC;AACH,CAAC"}

package/dist/application-update/helper.d.ts

@@ -0,0 +1,56 @@
+import { type AddressInfo } from 'node:net';
+export interface HelperPlan {
+    installation: {
+        kind: 'global' | 'npx';
+        prefix: string;
+        cache: string;
+        installRoot: string;
+        packageRoot: string;
+        outerRoot: string;
+        launchEntry: string;
+        outerPackage: '@wjarka/cezarion' | 'cezarion';
+        request: string;
+    };
+    targetVersion: string;
+    oldVersion: string;
+    recovery: string;
+    binLinks?: string;
+    recordPath: string;
+    oldPid: number;
+    nodeExecutable: string;
+    nodeArgs: string[];
+    cliArgs: string[];
+    cwd: string;
+    repoRoot: string;
+    host: string;
+    port: number;
+    npmBin: string;
+    claimId: string;
+}
+/** Only a listening TCP server can supply the private restart destination. */
+export declare function restartEndpoint(address: AddressInfo | string | null): Pick<HelperPlan, 'host' | 'port'>;
+export declare function restartHealthUrl(endpoint: Pick<HelperPlan, 'host' | 'port'>): string;
+/** A private loopback probe must not use Node's environment-proxied global agent. */
+export declare function requestRestartHealth(endpoint: Pick<HelperPlan, 'host' | 'port'>, signal: AbortSignal): Promise<{
+    version?: string;
+    repoRoot?: string;
+} | undefined>;
+export interface RestartIO {
+    waitForOldExit(): Promise<void>;
+    promote(): Promise<void>;
+    validateOriginal(): Promise<void>;
+    launch(): Promise<void>;
+    verifyHealth(): Promise<void>;
+    reapReplacement(): Promise<void>;
+    restore(): Promise<void>;
+    launchPrevious(): Promise<void>;
+    reportSuccess(): Promise<void>;
+    reportFailure(rollbackFailed: boolean): Promise<void>;
+    assertOwned?(): Promise<void>;
+}
+/** Only the helper owns the promotion transaction. Rollback waits for its child to exit. */
+export declare function runRestartWorkflow(io: RestartIO): Promise<void>;
+export declare function manualRepairCommand(installation: Pick<HelperPlan['installation'], 'kind' | 'prefix' | 'installRoot' | 'outerPackage'>, version: string): string;
+export declare function promoteOriginal(plan: HelperPlan, npxLockAlreadyHeld?: boolean, signal?: AbortSignal): Promise<void>;
+export declare function restoreOriginal(plan: HelperPlan, assertOwned?: () => Promise<void>): Promise<void>;
+export declare function runHelper(plan: HelperPlan, onArmed?: () => void): Promise<void>;

package/dist/application-update/helper.js

@@ -0,0 +1,360 @@
+import { spawn } from 'node:child_process';
+import { cp, readFile, readdir, rename, rm, symlink, writeFile } from 'node:fs/promises';
+import { existsSync, readFileSync } from 'node:fs';
+import { dirname, join } from 'node:path';
+import { isIP } from 'node:net';
+import { Agent, get } from 'node:http';
+import { withDirectoryLock } from './lock.js';
+import { runOwnedNpm } from './npm-process.js';
+const delay = (ms) => new Promise((resolve) => setTimeout(resolve, ms));
+/** Only a listening TCP server can supply the private restart destination. */
+export function restartEndpoint(address) {
+    if (!address || typeof address === 'string' || !Number.isInteger(address.port) || address.port < 1 || address.port > 65535
+        || !(isIP(address.address) === 4 && address.address.split('.')[0] === '127' || address.address === '::1')) {
+        throw new Error('restart requires a bound loopback endpoint');
+    }
+    return { host: address.address, port: address.port };
+}
+export function restartHealthUrl(endpoint) {
+    const { host, port } = restartEndpoint({ address: endpoint.host, port: endpoint.port, family: '' });
+    return `http://${host.includes(':') ? `[${host}]` : host}:${port}/api/v1/health`;
+}
+/** A private loopback probe must not use Node's environment-proxied global agent. */
+export async function requestRestartHealth(endpoint, signal) {
+    const agent = new Agent();
+    try {
+        return await new Promise((resolve, reject) => {
+            const request = get(restartHealthUrl(endpoint), { agent, signal }, (response) => {
+                response.once('error', reject);
+                if (!response.statusCode || response.statusCode < 200 || response.statusCode >= 300) {
+                    response.resume();
+                    resolve(undefined);
+                    return;
+                }
+                let body = '';
+                response.setEncoding('utf8');
+                response.on('data', (chunk) => { body += chunk; });
+                response.once('end', () => {
+                    try {
+                        resolve(JSON.parse(body));
+                    }
+                    catch (error) {
+                        reject(error);
+                    }
+                });
+            });
+            request.once('error', reject);
+        });
+    }
+    finally {
+        agent.destroy();
+    }
+}
+/** Only the helper owns the promotion transaction. Rollback waits for its child to exit. */
+export async function runRestartWorkflow(io) {
+    await io.waitForOldExit();
+    await io.assertOwned?.();
+    let replacementLaunched = false;
+    try {
+        await io.assertOwned?.();
+        await io.promote();
+        await io.assertOwned?.();
+        await io.validateOriginal();
+        await io.assertOwned?.();
+        await io.launch();
+        replacementLaunched = true;
+        await io.assertOwned?.();
+        await io.verifyHealth();
+        await io.assertOwned?.();
+        await io.reportSuccess();
+    }
+    catch {
+        if (replacementLaunched) {
+            try {
+                await io.reapReplacement();
+            }
+            catch {
+                // Never mutate the installation or launch another process until the
+                // helper has confirmed its replacement is gone.
+                await io.assertOwned?.();
+                await io.reportFailure(true);
+                return;
+            }
+        }
+        // A foreign owner may now be installing into the same tree. Preserve the
+        // recovery copy and leave the stale claim for the next boot to salvage.
+        await io.assertOwned?.();
+        let rollbackFailed = false;
+        try {
+            await io.assertOwned?.();
+            await io.restore();
+            await io.assertOwned?.();
+            await io.launchPrevious();
+            await io.assertOwned?.();
+        }
+        catch {
+            await io.reapReplacement().catch(() => undefined);
+            await io.assertOwned?.();
+            rollbackFailed = true;
+        }
+        await io.assertOwned?.();
+        await io.reportFailure(rollbackFailed);
+    }
+}
+function scopedPath(plan) {
+    if (plan.installation.outerPackage === '@wjarka/cezarion')
+        return plan.installation.packageRoot;
+    const nested = join(plan.installation.outerRoot, 'node_modules/@wjarka/cezarion');
+    if (existsSync(nested))
+        return nested;
+    const modules = plan.installation.kind === 'npx' ? join(plan.installation.installRoot, 'node_modules')
+        : dirname(plan.installation.outerRoot);
+    return join(modules, '@wjarka/cezarion');
+}
+function validateOriginal(plan, expected) {
+    const pkg = JSON.parse(readFileSync(join(scopedPath(plan), 'package.json'), 'utf8'));
+    if (pkg.name !== '@wjarka/cezarion' || pkg.version !== expected || !existsSync(join(scopedPath(plan), 'dist/index.js')) || !existsSync(join(scopedPath(plan), 'web/dist/index.html'))) {
+        throw new Error('promoted installation did not validate');
+    }
+    if (!existsSync(plan.installation.launchEntry))
+        throw new Error('original launch entry missing');
+    if (plan.installation.kind === 'npx') {
+        const root = JSON.parse(readFileSync(join(plan.installation.installRoot, 'package.json'), 'utf8'));
+        if (root._npx?.packages?.[0] !== plan.installation.request || root._npx.packages.length !== 1)
+            throw new Error('npx request metadata changed');
+    }
+}
+export function manualRepairCommand(installation, version) {
+    if (!/^\d+\.\d+\.\d+(?:-[0-9A-Za-z.-]+)?$/.test(version))
+        throw new Error('invalid repair version');
+    const quote = (value) => `'${value.replaceAll("'", "'\\''")}'`;
+    const prefix = installation.kind === 'global' ? installation.prefix : installation.installRoot;
+    return `npm install ${installation.kind === 'global' ? '--global ' : ''}--prefix ${quote(prefix)} ${installation.outerPackage}@${version}`;
+}
+async function writeState(plan, state, repairCommand) {
+    const current = JSON.parse(await readFile(plan.recordPath, 'utf8'));
+    const temp = `${plan.recordPath}.${process.pid}.tmp`;
+    await writeFile(temp, JSON.stringify({ ...current, state, ownerPid: undefined, claimId: undefined,
+        startedAt: undefined, repairCommand }), { mode: 0o600 });
+    await rename(temp, plan.recordPath);
+}
+function alive(pid) {
+    try {
+        process.kill(pid, 0);
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+async function waitExit(pid, timeoutMs) {
+    const until = Date.now() + timeoutMs;
+    while (alive(pid) && Date.now() < until)
+        await delay(100);
+    if (alive(pid))
+        throw new Error('old server did not exit');
+}
+export async function promoteOriginal(plan, npxLockAlreadyHeld = false, signal) {
+    const { installation } = plan;
+    const args = installation.kind === 'global'
+        ? ['install', '--global', '--prefix', installation.prefix]
+        : ['install', '--prefix', installation.installRoot];
+    args.push('--engine-strict', '--no-audit', '--no-fund', '--ignore-scripts', '--prefer-online', '--fetch-retries=1', `${installation.outerPackage}@${plan.targetVersion}`);
+    const run = async () => {
+        await runOwnedNpm(plan.npmBin, args, { ...process.env, npm_config_cache: installation.cache }, signal);
+    };
+    if (installation.kind === 'npx' && !npxLockAlreadyHeld) {
+        await withDirectoryLock(join(installation.installRoot, 'concurrency.lock'), async (assertOwned, lockSignal) => { await promoteOriginal(plan, true, lockSignal); await assertOwned(); }, 30_000);
+    }
+    else
+        await run();
+}
+function launch(plan) {
+    const args = [...plan.nodeArgs, plan.installation.launchEntry, ...plan.cliArgs,
+        '--bind-host', plan.host, '--port', String(plan.port), '--repo', plan.repoRoot, '--no-open', '--restart-exact'];
+    return spawn(plan.nodeExecutable, args, { cwd: plan.cwd, env: process.env,
+        stdio: ['ignore', 'ignore', 'ignore', 'ipc'], detached: true });
+}
+async function verifyHealth(plan, expectedVersion, child, signal) {
+    // The private IPC channel belongs to this exact child. An unrelated healthy
+    // server on the port cannot send this acknowledgement.
+    await new Promise((resolve, reject) => {
+        let finished = false;
+        const timer = setTimeout(() => finish(new Error('replacement listener acknowledgement timed out')), 20_000);
+        const finish = (error) => {
+            if (finished)
+                return;
+            finished = true;
+            clearTimeout(timer);
+            child.off('message', onMessage);
+            child.off('exit', onExit);
+            child.off('error', onExit);
+            signal?.removeEventListener('abort', onAbort);
+            if (error)
+                reject(error);
+            else
+                resolve();
+        };
+        const onExit = () => finish(new Error('replacement exited before listener acknowledgement'));
+        const onAbort = () => finish(new Error('update lock ownership changed'));
+        const onMessage = (value) => {
+            const message = value;
+            if (message?.type !== 'application-update-listening')
+                return;
+            if (message.host !== plan.host || message.port !== plan.port || message.repoRoot !== plan.repoRoot || message.version !== expectedVersion) {
+                finish(new Error('replacement listener identity mismatch'));
+                return;
+            }
+            finish();
+        };
+        child.on('message', onMessage);
+        child.once('exit', onExit);
+        child.once('error', onExit);
+        signal?.addEventListener('abort', onAbort, { once: true });
+        if (signal?.aborted)
+            onAbort();
+        if (child.exitCode !== null)
+            onExit();
+    });
+    const until = Date.now() + 20_000;
+    while (Date.now() < until) {
+        if (signal?.aborted)
+            throw new Error('update lock ownership changed');
+        if (child.exitCode !== null)
+            throw new Error('replacement exited before health');
+        try {
+            const health = await requestRestartHealth(plan, signal ? AbortSignal.any([signal, AbortSignal.timeout(1000)]) : AbortSignal.timeout(1000));
+            if (health) {
+                if (health.version === expectedVersion && health.repoRoot === plan.repoRoot) {
+                    if (child.connected)
+                        child.disconnect();
+                    child.unref();
+                    return;
+                }
+                throw new Error('health identity mismatch');
+            }
+        }
+        catch (error) {
+            if (error instanceof Error && error.message === 'health identity mismatch')
+                throw error;
+        }
+        await delay(150);
+    }
+    throw new Error('replacement health timed out');
+}
+async function reap(child) {
+    if (!child?.pid || child.exitCode !== null)
+        return;
+    process.kill(child.pid, 'SIGTERM');
+    try {
+        await waitExit(child.pid, 3000);
+    }
+    catch {
+        process.kill(child.pid, 'SIGKILL');
+        await waitExit(child.pid, 3000);
+    }
+}
+export async function restoreOriginal(plan, assertOwned = async () => { }) {
+    const { installation } = plan;
+    const copy = async (from, to) => cp(from, to, { recursive: true, dereference: false,
+        filter: async () => { await assertOwned(); return true; } });
+    await assertOwned();
+    if (installation.kind === 'npx') {
+        // Preserve the live concurrency.lock directory while restoring the rest of
+        // the npx root. Removing the root would compromise our own npm lock.
+        for (const name of await readdir(installation.installRoot)) {
+            await assertOwned();
+            if (name !== 'concurrency.lock')
+                await rm(join(installation.installRoot, name), { recursive: true, force: true });
+        }
+        for (const name of await readdir(plan.recovery)) {
+            await assertOwned();
+            if (name !== 'concurrency.lock')
+                await copy(join(plan.recovery, name), join(installation.installRoot, name));
+        }
+    }
+    else {
+        const outer = installation.outerRoot;
+        await assertOwned();
+        await rm(outer, { recursive: true, force: true });
+        await assertOwned();
+        await copy(plan.recovery, outer);
+        if (plan.binLinks) {
+            const links = JSON.parse(await readFile(plan.binLinks, 'utf8'));
+            for (const link of links) {
+                await assertOwned();
+                if (!/^[a-zA-Z0-9-]+$/.test(link.name))
+                    throw new Error('invalid recovery bin name');
+                const path = join(installation.prefix, 'bin', link.name);
+                await rm(path, { force: true });
+                await symlink(link.target, path);
+            }
+        }
+    }
+    await assertOwned();
+    validateOriginal(plan, plan.oldVersion);
+}
+export async function runHelper(plan, onArmed) {
+    restartHealthUrl(plan); // Reject an invalid destination before claiming or mutating the installation.
+    let replacement;
+    let transactionSignal;
+    const assertClaim = async () => {
+        const record = JSON.parse(await readFile(plan.recordPath, 'utf8'));
+        if (record?.state?.status !== 'restarting' || record.state.targetVersion !== plan.targetVersion || record.claimId !== plan.claimId) {
+            throw new Error('stale application update claim');
+        }
+    };
+    const io = {
+        waitForOldExit: () => waitExit(plan.oldPid, 20_000),
+        promote: () => promoteOriginal(plan, plan.installation.kind === 'npx', transactionSignal),
+        validateOriginal: async () => validateOriginal(plan, plan.targetVersion),
+        launch: async () => { replacement = launch(plan); },
+        verifyHealth: () => verifyHealth(plan, plan.targetVersion, replacement, transactionSignal),
+        reapReplacement: () => reap(replacement),
+        restore: () => restoreOriginal(plan, io.assertOwned),
+        launchPrevious: async () => { replacement = launch(plan); await verifyHealth(plan, plan.oldVersion, replacement, transactionSignal); },
+        reportSuccess: async () => {
+            await writeState(plan, { status: 'idle', supported: true });
+            // Keep the recovery copy until a later preparation has the lock. This
+            // avoids a crash gap between committing success and deleting recovery.
+        },
+        reportFailure: (rollbackFailed) => writeState(plan, {
+            status: 'error', supported: true, targetVersion: plan.targetVersion,
+            message: rollbackFailed ? 'Update and recovery failed. Reinstall cezarion manually.' : 'Update failed; previous release was restored. Retry Update.',
+        }, rollbackFailed ? manualRepairCommand(plan.installation, plan.oldVersion) : undefined),
+    };
+    await withDirectoryLock(join(dirname(plan.recordPath), 'operation.lock'), async (assertInstallationOwned, installationSignal) => {
+        const run = async (assertNpxOwned, npxSignal) => {
+            transactionSignal = npxSignal ? AbortSignal.any([installationSignal, npxSignal]) : installationSignal;
+            io.assertOwned = async () => {
+                await assertInstallationOwned();
+                await assertNpxOwned?.();
+                if (transactionSignal?.aborted)
+                    throw new Error('update lock ownership changed');
+                await assertClaim();
+            };
+            await io.assertOwned();
+            const record = JSON.parse(await readFile(plan.recordPath, 'utf8'));
+            const ownerTemp = `${plan.recordPath}.${process.pid}.owner.tmp`;
+            await writeFile(ownerTemp, JSON.stringify({ ...record, ownerPid: process.pid }), { mode: 0o600 });
+            await io.assertOwned();
+            await rename(ownerTemp, plan.recordPath);
+            await io.assertOwned();
+            onArmed?.();
+            await runRestartWorkflow(io);
+        };
+        if (plan.installation.kind === 'npx') {
+            await withDirectoryLock(join(plan.installation.installRoot, 'concurrency.lock'), run, 30_000);
+        }
+        else
+            await run();
+    }, 30_000);
+}
+if (process.send && process.argv[2] === '--application-update-helper') {
+    process.once('message', (message) => {
+        const plan = message;
+        void runHelper(plan, () => process.send?.({ type: 'armed' }, () => process.disconnect?.()))
+            .catch(() => process.exit(1));
+    });
+}
+//# sourceMappingURL=helper.js.map

package/dist/application-update/helper.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"helper.js","sourceRoot":"","sources":["../../src/application-update/helper.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAC3C,OAAO,EAAE,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AACzF,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,IAAI,EAAoB,MAAM,UAAU,CAAC;AAClD,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AACvC,OAAO,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAC;AAC9C,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAE/C,MAAM,KAAK,GAAG,CAAC,EAAU,EAAE,EAAE,CAAC,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;AAwBtF,8EAA8E;AAC9E,MAAM,UAAU,eAAe,CAAC,OAAoC;IAClE,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,OAAO,CAAC,IAAI,GAAG,CAAC,IAAI,OAAO,CAAC,IAAI,GAAG,KAAK;WACrH,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,KAAK,IAAI,OAAO,CAAC,OAAO,KAAK,KAAK,CAAC,EAAE,CAAC;QAC5G,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;IAChE,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,OAAO,CAAC,OAAO,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC;AACvD,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,QAA2C;IAC1E,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,eAAe,CAAC,EAAE,OAAO,EAAE,QAAQ,CAAC,IAAI,EAAE,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC;IACpG,OAAO,UAAU,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,GAAG,CAAC,CAAC,CAAC,IAAI,IAAI,IAAI,gBAAgB,CAAC;AACnF,CAAC;AAED,qFAAqF;AACrF,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,QAA2C,EAAE,MAAmB;IACzG,MAAM,KAAK,GAAG,IAAI,KAAK,EAAE,CAAC;IAC1B,IAAI,CAAC;QACH,OAAO,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YAC3C,MAAM,OAAO,GAAG,GAAG,CAAC,gBAAgB,CAAC,QAAQ,CAAC,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,CAAC,QAAQ,EAAE,EAAE;gBAC9E,QAAQ,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;gBAC/B,IAAI,CAAC,QAAQ,CAAC,UAAU,IAAI,QAAQ,CAAC,UAAU,GAAG,GAAG,IAAI,QAAQ,CAAC,UAAU,IAAI,GAAG,EAAE,CAAC;oBACpF,QAAQ,CAAC,MAAM,EAAE,CAAC;oBAAC,OAAO,CAAC,SAAS,CAAC,CAAC;oBAAC,OAAO;gBAChD,CAAC;gBACD,IAAI,IAAI,GAAG,EAAE,CAAC;gBACd,QAAQ,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;gBAC7B,QAAQ,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE,GAAG,IAAI,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;gBAC3D,QAAQ,CAAC,IAAI,CAAC,KAAK,EAAE,GAAG,EAAE;oBACxB,IAAI,CAAC;wBAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAA4C,CAAC,CAAC;oBAAC,CAAC;oBAC7E,OAAO,KAAK,EAAE,CAAC;wBAAC,MAAM,CAAC,KAAK,CAAC,CAAC;oBAAC,CAAC;gBAClC,CAAC,CAAC,CAAC;YACL,CAAC,CAAC,CAAC;YACH,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAChC,CAAC,CAAC,CAAC;IACL,CAAC;YAAS,CAAC;QAAC,KAAK,CAAC,OAAO,EAAE,CAAC;IAAC,CAAC;AAChC,CAAC;AAgBD,4FAA4F;AAC5F,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,EAAa;IACpD,MAAM,EAAE,CAAC,cAAc,EAAE,CAAC;IAC1B,MAAM,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC;IACzB,IAAI,mBAAmB,GAAG,KAAK,CAAC;IAChC,IAAI,CAAC;QACH,MAAM,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC;QACzB,MAAM,EAAE,CAAC,OAAO,EAAE,CAAC;QACnB,MAAM,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC;QACzB,MAAM,EAAE,CAAC,gBAAgB,EAAE,CAAC;QAC5B,MAAM,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC;QACzB,MAAM,EAAE,CAAC,MAAM,EAAE,CAAC;QAClB,mBAAmB,GAAG,IAAI,CAAC;QAC3B,MAAM,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC;QACzB,MAAM,EAAE,CAAC,YAAY,EAAE,CAAC;QACxB,MAAM,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC;QACzB,MAAM,EAAE,CAAC,aAAa,EAAE,CAAC;IAC3B,CAAC;IAAC,MAAM,CAAC;QACP,IAAI,mBAAmB,EAAE,CAAC;YACxB,IAAI,CAAC;gBAAC,MAAM,EAAE,CAAC,eAAe,EAAE,CAAC;YAAC,CAAC;YACnC,MAAM,CAAC;gBACL,oEAAoE;gBACpE,gDAAgD;gBAChD,MAAM,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC;gBACzB,MAAM,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC;gBAC7B,OAAO;YACT,CAAC;QACH,CAAC;QACD,yEAAyE;QACzE,wEAAwE;QACxE,MAAM,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC;QACzB,IAAI,cAAc,GAAG,KAAK,CAAC;QAC3B,IAAI,CAAC;YACH,MAAM,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC;YACzB,MAAM,EAAE,CAAC,OAAO,EAAE,CAAC;YACnB,MAAM,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC;YACzB,MAAM,EAAE,CAAC,cAAc,EAAE,CAAC;YAC1B,MAAM,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC;QAC3B,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,EAAE,CAAC,eAAe,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;YAClD,MAAM,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC;YACzB,cAAc,GAAG,IAAI,CAAC;QACxB,CAAC;QACD,MAAM,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC;QACzB,MAAM,EAAE,CAAC,aAAa,CAAC,cAAc,CAAC,CAAC;IACzC,CAAC;AACH,CAAC;AAED,SAAS,UAAU,CAAC,IAAgB;IAClC,IAAI,IAAI,CAAC,YAAY,CAAC,YAAY,KAAK,kBAAkB;QAAE,OAAO,IAAI,CAAC,YAAY,CAAC,WAAW,CAAC;IAChG,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,SAAS,EAAE,+BAA+B,CAAC,CAAC;IAClF,IAAI,UAAU,CAAC,MAAM,CAAC;QAAE,OAAO,MAAM,CAAC;IACtC,MAAM,OAAO,GAAG,IAAI,CAAC,YAAY,CAAC,IAAI,KAAK,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,WAAW,EAAE,cAAc,CAAC;QACpG,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC;IACzC,OAAO,IAAI,CAAC,OAAO,EAAE,kBAAkB,CAAC,CAAC;AAC3C,CAAC;AAED,SAAS,gBAAgB,CAAC,IAAgB,EAAE,QAAgB;IAC1D,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,cAAc,CAAC,EAAE,MAAM,CAAC,CAAsE,CAAC;IAC1J,IAAI,GAAG,CAAC,IAAI,KAAK,kBAAkB,IAAI,GAAG,CAAC,OAAO,KAAK,QAAQ,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,eAAe,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,qBAAqB,CAAC,CAAC,EAAE,CAAC;QACtL,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;IAC5D,CAAC;IACD,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,YAAY,CAAC,WAAW,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;IACjG,IAAI,IAAI,CAAC,YAAY,CAAC,IAAI,KAAK,KAAK,EAAE,CAAC;QACrC,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,WAAW,EAAE,cAAc,CAAC,EAAE,MAAM,CAAC,CAAuC,CAAC;QACzI,IAAI,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,YAAY,CAAC,OAAO,IAAI,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;IACjJ,CAAC;AACH,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,YAAkG,EAAE,OAAe;IACrJ,IAAI,CAAC,qCAAqC,CAAC,IAAI,CAAC,OAAO,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;IACpG,MAAM,KAAK,GAAG,CAAC,KAAa,EAAE,EAAE,CAAC,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,EAAE,OAAO,CAAC,GAAG,CAAC;IACvE,MAAM,MAAM,GAAG,YAAY,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,YAAY,CAAC,WAAW,CAAC;IAC/F,OAAO,eAAe,YAAY,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,YAAY,KAAK,CAAC,MAAM,CAAC,IAAI,YAAY,CAAC,YAAY,IAAI,OAAO,EAAE,CAAC;AAC7I,CAAC;AAED,KAAK,UAAU,UAAU,CAAC,IAAgB,EAAE,KAAuF,EAAE,aAAsB;IACzJ,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,UAAU,EAAE,MAAM,CAAC,CAA4B,CAAC;IAC/F,MAAM,IAAI,GAAG,GAAG,IAAI,CAAC,UAAU,IAAI,OAAO,CAAC,GAAG,MAAM,CAAC;IACrD,MAAM,SAAS,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,OAAO,EAAE,SAAS;QAC/F,SAAS,EAAE,SAAS,EAAE,aAAa,EAAE,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC3D,MAAM,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;AACtC,CAAC;AAED,SAAS,KAAK,CAAC,GAAW;IACxB,IAAI,CAAC;QAAC,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QAAC,OAAO,IAAI,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,KAAK,CAAC;IAAC,CAAC;AACpE,CAAC;AAED,KAAK,UAAU,QAAQ,CAAC,GAAW,EAAE,SAAiB;IACpD,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;IACrC,OAAO,KAAK,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK;QAAE,MAAM,KAAK,CAAC,GAAG,CAAC,CAAC;IAC1D,IAAI,KAAK,CAAC,GAAG,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;AAC7D,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,IAAgB,EAAE,kBAAkB,GAAG,KAAK,EAAE,MAAoB;IACtG,MAAM,EAAE,YAAY,EAAE,GAAG,IAAI,CAAC;IAC9B,MAAM,IAAI,GAAG,YAAY,CAAC,IAAI,KAAK,QAAQ;QACzC,CAAC,CAAC,CAAC,SAAS,EAAE,UAAU,EAAE,UAAU,EAAE,YAAY,CAAC,MAAM,CAAC;QAC1D,CAAC,CAAC,CAAC,SAAS,EAAE,UAAU,EAAE,YAAY,CAAC,WAAW,CAAC,CAAC;IACtD,IAAI,CAAC,IAAI,CAAC,iBAAiB,EAAE,YAAY,EAAE,WAAW,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,mBAAmB,EAAE,GAAG,YAAY,CAAC,YAAY,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC,CAAC;IAC1K,MAAM,GAAG,GAAG,KAAK,IAAI,EAAE;QACrB,MAAM,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,gBAAgB,EAAE,YAAY,CAAC,KAAK,EAAE,EAAE,MAAM,CAAC,CAAC;IACzG,CAAC,CAAC;IACF,IAAI,YAAY,CAAC,IAAI,KAAK,KAAK,IAAI,CAAC,kBAAkB,EAAE,CAAC;QACvD,MAAM,iBAAiB,CAAC,IAAI,CAAC,YAAY,CAAC,WAAW,EAAE,kBAAkB,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,UAAU,EAAE,EAAE,GAAG,MAAM,eAAe,CAAC,IAAI,EAAE,IAAI,EAAE,UAAU,CAAC,CAAC,CAAC,MAAM,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;IAClM,CAAC;;QAAM,MAAM,GAAG,EAAE,CAAC;AACrB,CAAC;AAED,SAAS,MAAM,CAAC,IAAgB;IAC9B,MAAM,IAAI,GAAG,CAAC,GAAG,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,YAAY,CAAC,WAAW,EAAE,GAAG,IAAI,CAAC,OAAO;QAC5E,aAAa,EAAE,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,WAAW,EAAE,iBAAiB,CAAC,CAAC;IAClH,OAAO,KAAK,CAAC,IAAI,CAAC,cAAc,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG;QACvE,KAAK,EAAE,CAAC,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;AACpE,CAAC;AAED,KAAK,UAAU,YAAY,CAAC,IAAgB,EAAE,eAAuB,EAAE,KAA+B,EAAE,MAAoB;IAC1H,4EAA4E;IAC5E,uDAAuD;IACvD,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QAC1C,IAAI,QAAQ,GAAG,KAAK,CAAC;QACrB,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;QAC5G,MAAM,MAAM,GAAG,CAAC,KAAa,EAAE,EAAE;YAC/B,IAAI,QAAQ;gBAAE,OAAO;YACrB,QAAQ,GAAG,IAAI,CAAC;YAChB,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,KAAK,CAAC,GAAG,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;YAAC,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;YAAC,KAAK,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YACvF,MAAM,EAAE,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YAC9C,IAAI,KAAK;gBAAE,MAAM,CAAC,KAAK,CAAC,CAAC;;gBAAM,OAAO,EAAE,CAAC;QAC3C,CAAC,CAAC;QACF,MAAM,MAAM,GAAG,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC,CAAC;QAC7F,MAAM,OAAO,GAAG,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC,CAAC;QACzE,MAAM,SAAS,GAAG,CAAC,KAAc,EAAE,EAAE;YACnC,MAAM,OAAO,GAAG,KAA6F,CAAC;YAC9G,IAAI,OAAO,EAAE,IAAI,KAAK,8BAA8B;gBAAE,OAAO;YAC7D,IAAI,OAAO,CAAC,IAAI,KAAK,IAAI,CAAC,IAAI,IAAI,OAAO,CAAC,IAAI,KAAK,IAAI,CAAC,IAAI,IAAI,OAAO,CAAC,QAAQ,KAAK,IAAI,CAAC,QAAQ,IAAI,OAAO,CAAC,OAAO,KAAK,eAAe,EAAE,CAAC;gBAC1I,MAAM,CAAC,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC,CAAC;gBAAC,OAAO;YACtE,CAAC;YACD,MAAM,EAAE,CAAC;QACX,CAAC,CAAC;QACF,KAAK,CAAC,EAAE,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;QAAC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAAC,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QACxF,MAAM,EAAE,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QAC3D,IAAI,MAAM,EAAE,OAAO;YAAE,OAAO,EAAE,CAAC;QAC/B,IAAI,KAAK,CAAC,QAAQ,KAAK,IAAI;YAAE,MAAM,EAAE,CAAC;IACxC,CAAC,CAAC,CAAC;IACH,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC;IAClC,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,EAAE,CAAC;QAC1B,IAAI,MAAM,EAAE,OAAO;YAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;QACtE,IAAI,KAAK,CAAC,QAAQ,KAAK,IAAI;YAAE,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;QACjF,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,oBAAoB,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;YAC3I,IAAI,MAAM,EAAE,CAAC;gBACX,IAAI,MAAM,CAAC,OAAO,KAAK,eAAe,IAAI,MAAM,CAAC,QAAQ,KAAK,IAAI,CAAC,QAAQ,EAAE,CAAC;oBAC5E,IAAI,KAAK,CAAC,SAAS;wBAAE,KAAK,CAAC,UAAU,EAAE,CAAC;oBACxC,KAAK,CAAC,KAAK,EAAE,CAAC;oBAAC,OAAO;gBACxB,CAAC;gBACD,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;YAC9C,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,KAAK,IAAI,KAAK,CAAC,OAAO,KAAK,0BAA0B;gBAAE,MAAM,KAAK,CAAC;QAC1F,CAAC;QACD,MAAM,KAAK,CAAC,GAAG,CAAC,CAAC;IACnB,CAAC;IACD,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;AAClD,CAAC;AAED,KAAK,UAAU,IAAI,CAAC,KAA2C;IAC7D,IAAI,CAAC,KAAK,EAAE,GAAG,IAAI,KAAK,CAAC,QAAQ,KAAK,IAAI;QAAE,OAAO;IACnD,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;IACnC,IAAI,CAAC;QAAC,MAAM,QAAQ,CAAC,KAAK,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IAAC,CAAC;IACxC,MAAM,CAAC;QAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;QAAC,MAAM,QAAQ,CAAC,KAAK,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IAAC,CAAC;AAChF,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,IAAgB,EAAE,WAAW,GAAwB,KAAK,IAAI,EAAE,GAAE,CAAC;IACvG,MAAM,EAAE,YAAY,EAAE,GAAG,IAAI,CAAC;IAC9B,MAAM,IAAI,GAAG,KAAK,EAAE,IAAY,EAAE,EAAU,EAAE,EAAE,CAAC,EAAE,CAAC,IAAI,EAAE,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,WAAW,EAAE,KAAK;QACjG,MAAM,EAAE,KAAK,IAAI,EAAE,GAAG,MAAM,WAAW,EAAE,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IAC/D,MAAM,WAAW,EAAE,CAAC;IACpB,IAAI,YAAY,CAAC,IAAI,KAAK,KAAK,EAAE,CAAC;QAChC,2EAA2E;QAC3E,qEAAqE;QACrE,KAAK,MAAM,IAAI,IAAI,MAAM,OAAO,CAAC,YAAY,CAAC,WAAW,CAAC,EAAE,CAAC;YAC3D,MAAM,WAAW,EAAE,CAAC;YACpB,IAAI,IAAI,KAAK,kBAAkB;gBAAE,MAAM,EAAE,CAAC,IAAI,CAAC,YAAY,CAAC,WAAW,EAAE,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACpH,CAAC;QACD,KAAK,MAAM,IAAI,IAAI,MAAM,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;YAChD,MAAM,WAAW,EAAE,CAAC;YACpB,IAAI,IAAI,KAAK,kBAAkB;gBAAE,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,EAAE,IAAI,CAAC,YAAY,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC,CAAC;QAC/G,CAAC;IACH,CAAC;SAAM,CAAC;QACN,MAAM,KAAK,GAAG,YAAY,CAAC,SAAS,CAAC;QACrC,MAAM,WAAW,EAAE,CAAC;QACpB,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAClD,MAAM,WAAW,EAAE,CAAC;QACpB,MAAM,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;QACjC,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YAClB,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC,CAA4C,CAAC;YAC3G,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;gBACzB,MAAM,WAAW,EAAE,CAAC;gBACpB,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;oBAAE,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;gBACrF,MAAM,IAAI,GAAG,IAAI,CAAC,YAAY,CAAC,MAAM,EAAE,KAAK,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;gBACzD,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;gBAChC,MAAM,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;YACnC,CAAC;QACH,CAAC;IACH,CAAC;IACD,MAAM,WAAW,EAAE,CAAC;IACpB,gBAAgB,CAAC,IAAI,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;AAC1C,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,IAAgB,EAAE,OAAoB;IACpE,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,8EAA8E;IACtG,IAAI,WAAiD,CAAC;IACtD,IAAI,iBAA0C,CAAC;IAC/C,MAAM,WAAW,GAAG,KAAK,IAAmB,EAAE;QAC5C,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,UAAU,EAAE,MAAM,CAAC,CAA8E,CAAC;QAChJ,IAAI,MAAM,EAAE,KAAK,EAAE,MAAM,KAAK,YAAY,IAAI,MAAM,CAAC,KAAK,CAAC,aAAa,KAAK,IAAI,CAAC,aAAa,IAAI,MAAM,CAAC,OAAO,KAAK,IAAI,CAAC,OAAO,EAAE,CAAC;YACnI,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;QACpD,CAAC;IACH,CAAC,CAAC;IACF,MAAM,EAAE,GAAc;QACpB,cAAc,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC;QACnD,OAAO,EAAE,GAAG,EAAE,CAAC,eAAe,CAAC,IAAI,EAAE,IAAI,CAAC,YAAY,CAAC,IAAI,KAAK,KAAK,EAAE,iBAAiB,CAAC;QACzF,gBAAgB,EAAE,KAAK,IAAI,EAAE,CAAC,gBAAgB,CAAC,IAAI,EAAE,IAAI,CAAC,aAAa,CAAC;QACxE,MAAM,EAAE,KAAK,IAAI,EAAE,GAAG,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACnD,YAAY,EAAE,GAAG,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,IAAI,CAAC,aAAa,EAAE,WAAY,EAAE,iBAAiB,CAAC;QAC3F,eAAe,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,WAAW,CAAC;QACxC,OAAO,EAAE,GAAG,EAAE,CAAC,eAAe,CAAC,IAAI,EAAE,EAAE,CAAC,WAAW,CAAC;QACpD,cAAc,EAAE,KAAK,IAAI,EAAE,GAAG,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,YAAY,CAAC,IAAI,EAAE,IAAI,CAAC,UAAU,EAAE,WAAW,EAAE,iBAAiB,CAAC,CAAC,CAAC,CAAC;QACtI,aAAa,EAAE,KAAK,IAAI,EAAE;YACxB,MAAM,UAAU,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YAC5D,sEAAsE;YACtE,uEAAuE;QACzE,CAAC;QACD,aAAa,EAAE,CAAC,cAAc,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,EAAE;YAClD,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,CAAC,aAAa;YACnE,OAAO,EAAE,cAAc,CAAC,CAAC,CAAC,0DAA0D,CAAC,CAAC,CAAC,6DAA6D;SACrJ,EAAE,cAAc,CAAC,CAAC,CAAC,mBAAmB,CAAC,IAAI,CAAC,YAAY,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;KACzF,CAAC;IACF,MAAM,iBAAiB,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,gBAAgB,CAAC,EAAE,KAAK,EAAE,uBAAuB,EAAE,kBAAkB,EAAE,EAAE;QAC9H,MAAM,GAAG,GAAG,KAAK,EAAE,cAAoC,EAAE,SAAuB,EAAE,EAAE;YAClF,iBAAiB,GAAG,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,kBAAkB,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,kBAAkB,CAAC;YACtG,EAAE,CAAC,WAAW,GAAG,KAAK,IAAI,EAAE;gBAC1B,MAAM,uBAAuB,EAAE,CAAC;gBAChC,MAAM,cAAc,EAAE,EAAE,CAAC;gBACzB,IAAI,iBAAiB,EAAE,OAAO;oBAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;gBACjF,MAAM,WAAW,EAAE,CAAC;YACtB,CAAC,CAAC;YACF,MAAM,EAAE,CAAC,WAAW,EAAE,CAAC;YACvB,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,UAAU,EAAE,MAAM,CAAC,CAA4B,CAAC;YAC9F,MAAM,SAAS,GAAG,GAAG,IAAI,CAAC,UAAU,IAAI,OAAO,CAAC,GAAG,YAAY,CAAC;YAChE,MAAM,SAAS,CAAC,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,MAAM,EAAE,QAAQ,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;YAClG,MAAM,EAAE,CAAC,WAAW,EAAE,CAAC;YACvB,MAAM,MAAM,CAAC,SAAS,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;YACzC,MAAM,EAAE,CAAC,WAAW,EAAE,CAAC;YACvB,OAAO,EAAE,EAAE,CAAC;YACZ,MAAM,kBAAkB,CAAC,EAAE,CAAC,CAAC;QAC/B,CAAC,CAAC;QACF,IAAI,IAAI,CAAC,YAAY,CAAC,IAAI,KAAK,KAAK,EAAE,CAAC;YACrC,MAAM,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,WAAW,EAAE,kBAAkB,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC;QAChG,CAAC;;YAAM,MAAM,GAAG,EAAE,CAAC;IACrB,CAAC,EAAE,MAAM,CAAC,CAAC;AACb,CAAC;AAED,IAAI,OAAO,CAAC,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,6BAA6B,EAAE,CAAC;IACtE,OAAO,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC,OAAO,EAAE,EAAE;QAClC,MAAM,IAAI,GAAG,OAAqB,CAAC;QACnC,KAAK,SAAS,CAAC,IAAI,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;aACxF,KAAK,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IAClC,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/application-update/launcher.d.ts

@@ -0,0 +1,8 @@
+import type { RestartPlan } from './service.ts';
+/** Copy the helper out of the package npm will replace; pass credentials only via inherited env. */
+export declare function armRestartHelper(plan: RestartPlan, launch: {
+    repoRoot: string;
+    host: string;
+    port: number;
+    npmBin: string;
+}): Promise<number>;

package/dist/application-update/launcher.js

@@ -0,0 +1,52 @@
+import { spawn } from 'node:child_process';
+import { copyFile, mkdir, writeFile } from 'node:fs/promises';
+import { dirname, join } from 'node:path';
+import { fileURLToPath } from 'node:url';
+import { assertCezarHomeWriteIsSandboxed } from '../paths.js';
+/** Copy the helper out of the package npm will replace; pass credentials only via inherited env. */
+export async function armRestartHelper(plan, launch) {
+    const source = dirname(fileURLToPath(import.meta.url));
+    const target = join(dirname(plan.recordPath), 'helper');
+    assertCezarHomeWriteIsSandboxed(target);
+    await mkdir(target, { recursive: true, mode: 0o700 });
+    await copyFile(join(source, 'helper.js'), join(target, 'helper.js'));
+    await copyFile(join(source, 'lock.js'), join(target, 'lock.js'));
+    await copyFile(join(source, 'npm-process.js'), join(target, 'npm-process.js'));
+    await writeFile(join(target, 'package.json'), '{"type":"module"}', { mode: 0o600 });
+    const child = spawn(process.execPath, [join(target, 'helper.js'), '--application-update-helper'], {
+        cwd: process.cwd(), env: process.env, detached: true, stdio: ['ignore', 'ignore', 'ignore', 'ipc'],
+    });
+    if (!child.pid)
+        throw new Error('restart helper did not start');
+    const message = {
+        ...plan, oldPid: process.pid, nodeExecutable: process.execPath, nodeArgs: process.execArgv,
+        cliArgs: process.argv.slice(2), cwd: process.cwd(), repoRoot: launch.repoRoot,
+        host: launch.host, port: launch.port, npmBin: launch.npmBin,
+    };
+    await new Promise((resolve, reject) => {
+        let settled = false;
+        const fail = (error) => {
+            if (settled)
+                return;
+            settled = true;
+            clearTimeout(timer);
+            child.kill('SIGTERM');
+            reject(error);
+        };
+        const timer = setTimeout(() => fail(new Error('restart helper did not acknowledge')), 35_000);
+        child.once('error', (error) => fail(error));
+        child.once('exit', () => fail(new Error('restart helper exited before acknowledgement')));
+        child.on('message', (response) => {
+            if (response?.type !== 'armed' || settled)
+                return;
+            settled = true;
+            clearTimeout(timer);
+            child.unref();
+            resolve();
+        });
+        child.send(message, (error) => { if (error)
+            fail(error); });
+    });
+    return child.pid;
+}
+//# sourceMappingURL=launcher.js.map