botmux 3.18.3 → 3.18.5

package/dist/core/loopback-fetch.d.ts

@@ -0,0 +1,59 @@
+/**
+ * `fetch`-shaped client for **loopback-only** HTTP, built on `node:http`.
+ *
+ * ⚠️ WHY THIS EXISTS — DO NOT "SIMPLIFY" ANY CALLER BACK TO THE GLOBAL `fetch`.
+ *
+ * Bun's `fetch` automatically routes through `$http_proxy`, and its `no_proxy`
+ * handling is **literal-match only**: it does not parse CIDR notation and does
+ * not treat `localhost` as covering `127.0.0.1`. Corporate dev machines commonly
+ * export exactly that shape (`http_proxy=…` plus `no_proxy=…,127.0.0.0/8,…`), so
+ * a request to our OWN loopback port gets handed to the corporate proxy, which
+ * refuses to forward an internal address and answers with an nginx HTML
+ * `403 Forbidden`. The user sees a failure naming a service that is running
+ * perfectly well two ports away.
+ *
+ * Measured on Bun 1.4.0 (source AND `bun build --compile`), one fresh process per
+ * row because Bun snapshots proxy configuration at startup:
+ *
+ *   no_proxy unset / ""        → proxied
+ *   no_proxy=127.0.0.0/8       → proxied      ← the common corporate shape
+ *   no_proxy=localhost         → proxied      ← does NOT cover 127.0.0.1
+ *   no_proxy=127.0.0.1         → direct
+ *   no_proxy=*                 → direct
+ *
+ * And the obvious escapes do not work:
+ *
+ *   fetch(…, {proxy: ''|undefined|null})  → still proxied (option exists ≠ works)
+ *   delete process.env.http_proxy at run  → still proxied (startup snapshot)
+ *   setting  process.env.http_proxy later → still direct  (same reason)
+ *
+ * `node:http` ignores proxy environment variables entirely, in both Node and Bun,
+ * which is the only reliable way to guarantee a loopback dial stays loopback.
+ * Related precedent: `platform/platform-http.ts` (deliberately avoids undici) and
+ * `dashboard/hd2d-assets.ts` (the reverse case — it WANTS the proxy).
+ */
+/** The subset of RequestInit our loopback callers use. */
+export interface LoopbackFetchInit {
+    method?: string;
+    headers?: HeadersInit;
+    /** Accepts what `fetch` accepts; streams are the one thing we cannot forward. */
+    body?: BodyInit | null;
+    signal?: AbortSignal | null;
+}
+/** Install (or clear, with `undefined`) the test transport. Returns the previous one. */
+export declare function __setLoopbackTransportForTests(next: ((url: string, init: LoopbackFetchInit) => Promise<Response>) | undefined): ((url: string, init: LoopbackFetchInit) => Promise<Response>) | undefined;
+export declare function loopbackFetch(url: string, init?: LoopbackFetchInit): Promise<Response>;
+/** `typeof fetch`-compatible view, for defaulting an injectable `fetchImpl`. */
+export declare const loopbackFetchImpl: typeof fetch;
+/**
+ * Is this URL a literal loopback target, i.e. safe (and necessary) to send through
+ * {@link loopbackFetch}? For call sites whose base URL is configurable and may
+ * legitimately point at a remote host — those must keep using the global fetch,
+ * which handles TLS, redirects and real proxying.
+ *
+ * Literal only, deliberately: a DNS name that currently resolves to 127.0.0.1
+ * is not a loopback guarantee (it can be re-pointed), and `loopbackFetch`'s own
+ * guard would reject it anyway.
+ */
+export declare function isLoopbackUrl(url: string): boolean;
+//# sourceMappingURL=loopback-fetch.d.ts.map

package/dist/core/loopback-fetch.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"loopback-fetch.d.ts","sourceRoot":"","sources":["../../src/core/loopback-fetch.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AAKH,0DAA0D;AAC1D,MAAM,WAAW,iBAAiB;IAChC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,WAAW,CAAC;IACtB,iFAAiF;IACjF,IAAI,CAAC,EAAE,QAAQ,GAAG,IAAI,CAAC;IACvB,MAAM,CAAC,EAAE,WAAW,GAAG,IAAI,CAAC;CAC7B;AA4FD,yFAAyF;AACzF,wBAAgB,8BAA8B,CAC5C,IAAI,EAAE,CAAC,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,iBAAiB,KAAK,OAAO,CAAC,QAAQ,CAAC,CAAC,GAAG,SAAS,GAC9E,CAAC,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,iBAAiB,KAAK,OAAO,CAAC,QAAQ,CAAC,CAAC,GAAG,SAAS,CAI3E;AAED,wBAAgB,aAAa,CAC3B,GAAG,EAAE,MAAM,EACX,IAAI,GAAE,iBAAsB,GAC3B,OAAO,CAAC,QAAQ,CAAC,CAyJnB;AAED,gFAAgF;AAChF,eAAO,MAAM,iBAAiB,EAA+B,OAAO,KAAK,CAAC;AAE1E;;;;;;;;;GASG;AACH,wBAAgB,aAAa,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAWlD"}

package/dist/core/loopback-fetch.js

@@ -0,0 +1,347 @@
+/**
+ * `fetch`-shaped client for **loopback-only** HTTP, built on `node:http`.
+ *
+ * ⚠️ WHY THIS EXISTS — DO NOT "SIMPLIFY" ANY CALLER BACK TO THE GLOBAL `fetch`.
+ *
+ * Bun's `fetch` automatically routes through `$http_proxy`, and its `no_proxy`
+ * handling is **literal-match only**: it does not parse CIDR notation and does
+ * not treat `localhost` as covering `127.0.0.1`. Corporate dev machines commonly
+ * export exactly that shape (`http_proxy=…` plus `no_proxy=…,127.0.0.0/8,…`), so
+ * a request to our OWN loopback port gets handed to the corporate proxy, which
+ * refuses to forward an internal address and answers with an nginx HTML
+ * `403 Forbidden`. The user sees a failure naming a service that is running
+ * perfectly well two ports away.
+ *
+ * Measured on Bun 1.4.0 (source AND `bun build --compile`), one fresh process per
+ * row because Bun snapshots proxy configuration at startup:
+ *
+ *   no_proxy unset / ""        → proxied
+ *   no_proxy=127.0.0.0/8       → proxied      ← the common corporate shape
+ *   no_proxy=localhost         → proxied      ← does NOT cover 127.0.0.1
+ *   no_proxy=127.0.0.1         → direct
+ *   no_proxy=*                 → direct
+ *
+ * And the obvious escapes do not work:
+ *
+ *   fetch(…, {proxy: ''|undefined|null})  → still proxied (option exists ≠ works)
+ *   delete process.env.http_proxy at run  → still proxied (startup snapshot)
+ *   setting  process.env.http_proxy later → still direct  (same reason)
+ *
+ * `node:http` ignores proxy environment variables entirely, in both Node and Bun,
+ * which is the only reliable way to guarantee a loopback dial stays loopback.
+ * Related precedent: `platform/platform-http.ts` (deliberately avoids undici) and
+ * `dashboard/hd2d-assets.ts` (the reverse case — it WANTS the proxy).
+ */
+import { Buffer } from 'node:buffer';
+import { requestLiteralLoopback } from './loopback-target.js';
+/** Normalise a fetch-style body to bytes. Streams are rejected loudly rather
+ *  than silently sent as "[object ReadableStream]". */
+function bodyToBuffer(body) {
+    if (body == null)
+        return undefined;
+    if (typeof body === 'string')
+        return Buffer.from(body);
+    if (Buffer.isBuffer(body))
+        return body;
+    if (body instanceof URLSearchParams)
+        return Buffer.from(body.toString());
+    if (body instanceof ArrayBuffer)
+        return Buffer.from(new Uint8Array(body));
+    if (ArrayBuffer.isView(body)) {
+        return Buffer.from(body.buffer, body.byteOffset, body.byteLength);
+    }
+    throw new TypeError('loopbackFetch: unsupported body type (streams/FormData are not forwarded)');
+}
+function headerEntries(headers) {
+    if (!headers)
+        return {};
+    // `Headers` (and anything iterable of pairs) normalises casing for us; a plain
+    // object is passed through as written.
+    const out = {};
+    if (headers instanceof Headers) {
+        headers.forEach((value, key) => { out[key] = value; });
+        return out;
+    }
+    if (Array.isArray(headers)) {
+        for (const [k, v] of headers)
+            out[k] = String(v);
+        return out;
+    }
+    for (const [k, v] of Object.entries(headers))
+        out[k] = String(v);
+    return out;
+}
+/**
+ * The error an aborted request must fail with.
+ *
+ * ⚠️ Callers branch on `err.name === 'AbortError'` to tell "timed out" from
+ * "nothing listening" — e.g. daemon.ts returns 504 `wait_timeout` vs 503
+ * `daemon_offline`, and command-handler.ts reports `busy` vs `failed`. A plain
+ * `new Error('aborted')` (or node:http's own ECONNRESET) silently sends every
+ * timeout down the wrong branch. Measured against the global fetch these replace:
+ * it rejects with `name=AbortError`, while the first version of this module gave
+ * `name=Error, code=ECONNRESET`.
+ *
+ * `signal.reason` is what the platform puts there (a DOMException named
+ * AbortError, or whatever the caller passed to `abort(reason)`); we only
+ * synthesise an equivalent when it is somehow absent.
+ */
+function abortError(signal) {
+    const reason = signal?.reason;
+    if (reason !== undefined && reason !== null)
+        return reason;
+    // Node and browsers both expose DOMException; fall back to a shaped Error.
+    if (typeof DOMException === 'function') {
+        return new DOMException('The operation was aborted.', 'AbortError');
+    }
+    const err = new Error('The operation was aborted.');
+    err.name = 'AbortError';
+    return err;
+}
+/**
+ * Issue one request to a literal loopback host and resolve a real `Response`, so
+ * call sites keep using `.ok` / `.status` / `.json()` / `.text()` unchanged.
+ *
+ * ⚠️ Resolves as soon as the response HEADERS arrive, with the body exposed as a
+ * `ReadableStream` — it must NOT buffer to completion first. `dashboard/aggregator.ts`
+ * subscribes to a never-ending SSE stream (`/api/events`) and reads frames off
+ * `res.body`; a buffer-all implementation never resolves for those callers and the
+ * whole session/event aggregation silently stops. Measured: a server that writes
+ * one frame and holds the connection open produced no Response at all until this
+ * was made streaming. `.text()`/`.json()` still work, because `Response` drains
+ * the stream for them.
+ *
+ * Rejects the way `fetch` does (a transport failure) rather than resolving a
+ * synthetic error status, because callers distinguish "no server there" from
+ * "server said no".
+ */
+/**
+ * Test-only transport override.
+ *
+ * ⚠️ Why this seam exists: several suites drive loopback code paths by replacing
+ * `globalThis.fetch`. Moving those call sites onto node:http silently bypassed
+ * that stub, so the tests began making REAL connections to ports like 4310/39003
+ * — `fetchMock` recorded 0 calls and the assertions failed for a reason unrelated
+ * to what they test. Rather than push every caller back onto the global fetch (the
+ * whole defect), the transport itself is injectable: production keeps node:http,
+ * tests install a mock here.
+ *
+ * Not for production use — `__setLoopbackTransportForTests(undefined)` restores the default.
+ */
+let transportOverride;
+/** Install (or clear, with `undefined`) the test transport. Returns the previous one. */
+export function __setLoopbackTransportForTests(next) {
+    const previous = transportOverride;
+    transportOverride = next;
+    return previous;
+}
+export function loopbackFetch(url, init = {}) {
+    if (transportOverride)
+        return transportOverride(url, init);
+    const target = new URL(url);
+    // ⚠️ FAIL CLOSED on the scheme. This transport IS node:http, so an `https:` URL
+    // would be dialled as PLAINTEXT — measured: `loopbackFetch('https://127.0.0.1:P')`
+    // against a plain HTTP server returned `200 PLAIN`, i.e. a caller that believed it
+    // was using TLS would have sent its credentials in the clear. `isLoopbackUrl`
+    // already refuses https, but a public helper must not depend on callers routing
+    // through a predicate first.
+    if (target.protocol !== 'http:') {
+        return Promise.reject(new TypeError(`loopbackFetch: only http: is supported (got ${target.protocol})`));
+    }
+    // `URL.hostname` keeps IPv6 in brackets (`[::1]`), but node:http — and
+    // requestLiteralLoopback's allow-list — want the bare address. Passing the
+    // bracketed form through was rejected as `remote_host_forbidden`, i.e. a legal
+    // IPv6 loopback URL could never be dialled (measured against a `::1` server).
+    const host = normaliseLoopbackHost(target.hostname);
+    // `URL` normalises away a scheme's DEFAULT port, so both `http://127.0.0.1/x` and
+    // an explicit `http://127.0.0.1:80/x` yield `port === ''` — `Number('')` is 0 and
+    // was rejected as `invalid_port` (measured against a local server on :80, which the
+    // native fetch reaches fine). Fill in the scheme default.
+    const port = target.port ? Number(target.port) : 80;
+    const method = (init.method ?? 'GET').toUpperCase();
+    const headers = headerEntries(init.headers);
+    const body = bodyToBuffer(init.body);
+    // A body without a length makes some servers wait for more; be explicit.
+    if (body && headers['content-length'] === undefined && headers['Content-Length'] === undefined) {
+        headers['content-length'] = String(body.byteLength);
+    }
+    return new Promise((resolve, reject) => {
+        let settled = false;
+        const finish = (fn) => { if (!settled) {
+            settled = true;
+            fn();
+        } };
+        // Set once the signal fires, so the body stream can fail with the SAME
+        // AbortError instead of the socket's ECONNRESET.
+        let aborted;
+        // ⚠️ The abort listener MUST be removed once this request can no longer be
+        // aborted. `{ once: true }` only fires-and-forgets on a real abort; a request
+        // that simply COMPLETED left its listener attached, and `dashboard/aggregator.ts`
+        // reuses one AbortController across an unbounded SSE reconnect loop — measured,
+        // 12 completed requests left 12 listeners, each pinning a finished req/res and
+        // its closure, and a later abort would destroy every stale request in turn.
+        let detachAbort = () => { };
+        let req;
+        try {
+            req = requestLiteralLoopback(
+            // Dial the parsed host/port explicitly (and validated as loopback) rather
+            // than handing over the URL, so nothing can re-target the request.
+            { host, port }, {
+                path: `${target.pathname}${target.search}`,
+                method,
+                headers,
+            }, res => {
+                const status = res.statusCode ?? 0;
+                // Fetch's null-body statuses that can actually ARRIVE HERE are 204/205/304,
+                // plus any HEAD response. 101 is deliberately absent: node:http never calls
+                // this callback for it (it emits `upgrade` instead — handled below), so a
+                // `status === 101` branch here would be dead code that reads as covered. `new Response(stream, {status:205})` THROWS,
+                // and it throws inside this async callback — on Node that escaped as an
+                // uncaught exception and killed the process, while Bun happens to tolerate
+                // 205, which is exactly why it went unnoticed.
+                const bodyless = status === 204 || status === 205
+                    || status === 304 || method === 'HEAD';
+                const stream = bodyless ? null : new ReadableStream({
+                    start(controller) {
+                        res.on('data', (chunk) => {
+                            try {
+                                controller.enqueue(new Uint8Array(Buffer.from(chunk)));
+                            }
+                            catch { /* already closed by a cancel() */ }
+                        });
+                        res.on('end', () => {
+                            detachAbort();
+                            try {
+                                controller.close();
+                            }
+                            catch { /* already closed */ }
+                        });
+                        res.on('error', err => {
+                            detachAbort();
+                            // An abort must surface as AbortError, not the ECONNRESET that
+                            // destroying the socket produces.
+                            try {
+                                controller.error(aborted ?? err);
+                            }
+                            catch { /* already errored */ }
+                        });
+                    },
+                    // A consumer that stops reading (or aborts) must tear the socket down,
+                    // otherwise a never-ending SSE keeps the connection and the process alive.
+                    cancel() { detachAbort(); res.destroy(); req.destroy(); },
+                });
+                if (bodyless)
+                    detachAbort();
+                // Wrapped: any status the Response constructor refuses (an upstream
+                // sending something illegal) must reject this promise, never escape as an
+                // uncaught exception out of an HTTP event callback.
+                let response;
+                try {
+                    response = new Response(stream, {
+                        status,
+                        statusText: res.statusMessage ?? '',
+                        headers: Object.fromEntries(Object.entries(res.headers)
+                            .filter((entry) => typeof entry[1] === 'string')),
+                    });
+                }
+                catch (err) {
+                    detachAbort();
+                    res.destroy();
+                    finish(() => reject(err));
+                    return;
+                }
+                finish(() => resolve(response));
+            });
+        }
+        catch (err) {
+            // Invalid host/port (the loopback guard) — surface it, do not hang.
+            detachAbort();
+            finish(() => reject(err));
+            return;
+        }
+        // ⚠️ A 101 arrives as `upgrade`, NOT as a response. Without this listener the
+        // promise never settles: measured against a server answering 101, the call only
+        // ended when an external AbortSignal fired at 800ms (and `requestDashboardAt`
+        // passes no signal at all, so it would hang forever if the recorded port happened
+        // to be a WebSocket service). The native fetch rejects such a response in ~1ms;
+        // do the same, since a fetch-shaped client cannot express a protocol switch.
+        req.on('upgrade', (_res, socket) => {
+            socket.destroy();
+            req.destroy();
+            detachAbort();
+            finish(() => reject(new TypeError('loopbackFetch: server switched protocols (101); this client does not support upgrades')));
+        });
+        // Only a failure BEFORE the response headers can reject the promise; once the
+        // Response exists, later socket errors surface through the stream instead.
+        req.on('error', err => { detachAbort(); finish(() => reject(aborted ?? err)); });
+        if (init.signal) {
+            const signal = init.signal;
+            const onAbort = () => {
+                aborted = abortError(signal);
+                req.destroy();
+                finish(() => reject(aborted));
+            };
+            if (signal.aborted) {
+                onAbort();
+                return;
+            }
+            signal.addEventListener('abort', onAbort, { once: true });
+            detachAbort = () => {
+                signal.removeEventListener('abort', onAbort);
+                detachAbort = () => { };
+            };
+        }
+        if (body)
+            req.end(body);
+        else
+            req.end();
+    });
+}
+/** `typeof fetch`-compatible view, for defaulting an injectable `fetchImpl`. */
+export const loopbackFetchImpl = loopbackFetch;
+/**
+ * Is this URL a literal loopback target, i.e. safe (and necessary) to send through
+ * {@link loopbackFetch}? For call sites whose base URL is configurable and may
+ * legitimately point at a remote host — those must keep using the global fetch,
+ * which handles TLS, redirects and real proxying.
+ *
+ * Literal only, deliberately: a DNS name that currently resolves to 127.0.0.1
+ * is not a loopback guarantee (it can be re-pointed), and `loopbackFetch`'s own
+ * guard would reject it anyway.
+ */
+export function isLoopbackUrl(url) {
+    try {
+        const parsed = new URL(url);
+        // `http:` only — this transport IS node:http, so reporting an `https:` URL as
+        // loopback-safe would steer a caller onto a transport that cannot serve it.
+        if (parsed.protocol !== 'http:')
+            return false;
+        const host = normaliseLoopbackHost(parsed.hostname);
+        return host === '127.0.0.1' || host === '::1';
+    }
+    catch {
+        return false;
+    }
+}
+/**
+ * Canonicalise a hostname for the loopback allow-list.
+ *
+ *  · Strips the brackets `URL.hostname` keeps around IPv6 literals.
+ *  · Maps `localhost` to `127.0.0.1`.
+ *
+ * ⚠️ `localhost` USED to be rejected here, on the reasoning that "a DNS name is
+ * not a loopback guarantee". That was backwards: refusing it did not avoid a
+ * lookup, it pushed the request onto the GLOBAL fetch, which then proxied it —
+ * measured with a self-hosted TTS endpoint, the `Authorization: Bearer …` header
+ * arrived at the stand-in proxy. `localhost` is reserved for loopback by RFC 6761,
+ * and mapping it here means we dial the literal address and never resolve DNS at
+ * all, which is strictly safer than the alternative. Every OTHER hostname stays
+ * rejected — that is where the rebinding concern actually applies.
+ */
+function normaliseLoopbackHost(hostname) {
+    const bare = hostname.startsWith('[') && hostname.endsWith(']')
+        ? hostname.slice(1, -1)
+        : hostname;
+    return bare === 'localhost' ? '127.0.0.1' : bare;
+}
+//# sourceMappingURL=loopback-fetch.js.map

package/dist/core/loopback-fetch.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"loopback-fetch.js","sourceRoot":"","sources":["../../src/core/loopback-fetch.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AAEH,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AACrC,OAAO,EAAE,sBAAsB,EAA4B,MAAM,sBAAsB,CAAC;AAWxF;uDACuD;AACvD,SAAS,YAAY,CAAC,IAAiC;IACrD,IAAI,IAAI,IAAI,IAAI;QAAE,OAAO,SAAS,CAAC;IACnC,IAAI,OAAO,IAAI,KAAK,QAAQ;QAAE,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACvD,IAAI,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACvC,IAAI,IAAI,YAAY,eAAe;QAAE,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC;IACzE,IAAI,IAAI,YAAY,WAAW;QAAE,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC;IAC1E,IAAI,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;QAC7B,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;IACpE,CAAC;IACD,MAAM,IAAI,SAAS,CAAC,2EAA2E,CAAC,CAAC;AACnG,CAAC;AAED,SAAS,aAAa,CAAC,OAAgC;IACrD,IAAI,CAAC,OAAO;QAAE,OAAO,EAAE,CAAC;IACxB,+EAA+E;IAC/E,uCAAuC;IACvC,MAAM,GAAG,GAA2B,EAAE,CAAC;IACvC,IAAI,OAAO,YAAY,OAAO,EAAE,CAAC;QAC/B,OAAO,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE,GAAG,GAAG,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QACvD,OAAO,GAAG,CAAC;IACb,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QAC3B,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,OAAO;YAAE,GAAG,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;QACjD,OAAO,GAAG,CAAC;IACb,CAAC;IACD,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC;QAAE,GAAG,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;IACjE,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,SAAS,UAAU,CAAC,MAAsC;IACxD,MAAM,MAAM,GAAG,MAAM,EAAE,MAAM,CAAC;IAC9B,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,KAAK,IAAI;QAAE,OAAO,MAAM,CAAC;IAC3D,2EAA2E;IAC3E,IAAI,OAAO,YAAY,KAAK,UAAU,EAAE,CAAC;QACvC,OAAO,IAAI,YAAY,CAAC,4BAA4B,EAAE,YAAY,CAAC,CAAC;IACtE,CAAC;IACD,MAAM,GAAG,GAAG,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;IACpD,GAAG,CAAC,IAAI,GAAG,YAAY,CAAC;IACxB,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH;;;;;;;;;;;;GAYG;AACH,IAAI,iBAA4F,CAAC;AAEjG,yFAAyF;AACzF,MAAM,UAAU,8BAA8B,CAC5C,IAA+E;IAE/E,MAAM,QAAQ,GAAG,iBAAiB,CAAC;IACnC,iBAAiB,GAAG,IAAI,CAAC;IACzB,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,MAAM,UAAU,aAAa,CAC3B,GAAW,EACX,OAA0B,EAAE;IAE5B,IAAI,iBAAiB;QAAE,OAAO,iBAAiB,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IAC3D,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;IAC5B,gFAAgF;IAChF,mFAAmF;IACnF,mFAAmF;IACnF,8EAA8E;IAC9E,gFAAgF;IAChF,6BAA6B;IAC7B,IAAI,MAAM,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;QAChC,OAAO,OAAO,CAAC,MAAM,CAAC,IAAI,SAAS,CACjC,+CAA+C,MAAM,CAAC,QAAQ,GAAG,CAClE,CAAC,CAAC;IACL,CAAC;IACD,uEAAuE;IACvE,2EAA2E;IAC3E,+EAA+E;IAC/E,8EAA8E;IAC9E,MAAM,IAAI,GAAG,qBAAqB,CAAC,MAAM,CAAC,QAAQ,CAAwB,CAAC;IAC3E,kFAAkF;IAClF,kFAAkF;IAClF,oFAAoF;IACpF,0DAA0D;IAC1D,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACpD,MAAM,MAAM,GAAG,CAAC,IAAI,CAAC,MAAM,IAAI,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC;IACpD,MAAM,OAAO,GAAG,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC5C,MAAM,IAAI,GAAG,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACrC,yEAAyE;IACzE,IAAI,IAAI,IAAI,OAAO,CAAC,gBAAgB,CAAC,KAAK,SAAS,IAAI,OAAO,CAAC,gBAAgB,CAAC,KAAK,SAAS,EAAE,CAAC;QAC/F,OAAO,CAAC,gBAAgB,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IACtD,CAAC;IAED,OAAO,IAAI,OAAO,CAAW,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QAC/C,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,MAAM,MAAM,GAAG,CAAC,EAAc,EAAE,EAAE,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC;YAAC,OAAO,GAAG,IAAI,CAAC;YAAC,EAAE,EAAE,CAAC;QAAC,CAAC,CAAC,CAAC,CAAC;QAC/E,uEAAuE;QACvE,iDAAiD;QACjD,IAAI,OAAgB,CAAC;QACrB,2EAA2E;QAC3E,8EAA8E;QAC9E,kFAAkF;QAClF,gFAAgF;QAChF,+EAA+E;QAC/E,4EAA4E;QAC5E,IAAI,WAAW,GAAG,GAAG,EAAE,GAAE,CAAC,CAAC;QAE3B,IAAI,GAA8C,CAAC;QACnD,IAAI,CAAC;YACH,GAAG,GAAG,sBAAsB;YAC1B,0EAA0E;YAC1E,mEAAmE;YACnE,EAAE,IAAI,EAAE,IAAI,EAAE,EACd;gBACE,IAAI,EAAE,GAAG,MAAM,CAAC,QAAQ,GAAG,MAAM,CAAC,MAAM,EAAE;gBAC1C,MAAM;gBACN,OAAO;aACR,EACD,GAAG,CAAC,EAAE;gBACJ,MAAM,MAAM,GAAG,GAAG,CAAC,UAAU,IAAI,CAAC,CAAC;gBACnC,4EAA4E;gBAC5E,4EAA4E;gBAC5E,0EAA0E;gBAC1E,sHAAsH;gBACtH,wEAAwE;gBACxE,2EAA2E;gBAC3E,+CAA+C;gBAC/C,MAAM,QAAQ,GAAG,MAAM,KAAK,GAAG,IAAI,MAAM,KAAK,GAAG;uBAC5C,MAAM,KAAK,GAAG,IAAI,MAAM,KAAK,MAAM,CAAC;gBACzC,MAAM,MAAM,GAAG,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,cAAc,CAAa;oBAC9D,KAAK,CAAC,UAAU;wBACd,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAsB,EAAE,EAAE;4BACxC,IAAI,CAAC;gCAAC,UAAU,CAAC,OAAO,CAAC,IAAI,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;4BAAC,CAAC;4BAC/D,MAAM,CAAC,CAAC,kCAAkC,CAAC,CAAC;wBAC9C,CAAC,CAAC,CAAC;wBACH,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE;4BACjB,WAAW,EAAE,CAAC;4BACd,IAAI,CAAC;gCAAC,UAAU,CAAC,KAAK,EAAE,CAAC;4BAAC,CAAC;4BAAC,MAAM,CAAC,CAAC,oBAAoB,CAAC,CAAC;wBAC5D,CAAC,CAAC,CAAC;wBACH,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,CAAC,EAAE;4BACpB,WAAW,EAAE,CAAC;4BACd,+DAA+D;4BAC/D,kCAAkC;4BAClC,IAAI,CAAC;gCAAC,UAAU,CAAC,KAAK,CAAC,OAAO,IAAI,GAAG,CAAC,CAAC;4BAAC,CAAC;4BAAC,MAAM,CAAC,CAAC,qBAAqB,CAAC,CAAC;wBAC3E,CAAC,CAAC,CAAC;oBACL,CAAC;oBACD,uEAAuE;oBACvE,2EAA2E;oBAC3E,MAAM,KAAK,WAAW,EAAE,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;iBAC1D,CAAC,CAAC;gBACH,IAAI,QAAQ;oBAAE,WAAW,EAAE,CAAC;gBAC5B,oEAAoE;gBACpE,0EAA0E;gBAC1E,oDAAoD;gBACpD,IAAI,QAAkB,CAAC;gBACvB,IAAI,CAAC;oBACH,QAAQ,GAAG,IAAI,QAAQ,CAAC,MAAM,EAAE;wBAC9B,MAAM;wBACN,UAAU,EAAE,GAAG,CAAC,aAAa,IAAI,EAAE;wBACnC,OAAO,EAAE,MAAM,CAAC,WAAW,CACzB,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC;6BACxB,MAAM,CAAC,CAAC,KAAK,EAA6B,EAAE,CAAC,OAAO,KAAK,CAAC,CAAC,CAAC,KAAK,QAAQ,CAAC,CAC9E;qBACF,CAAC,CAAC;gBACL,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,WAAW,EAAE,CAAC;oBACd,GAAG,CAAC,OAAO,EAAE,CAAC;oBACd,MAAM,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;oBAC1B,OAAO;gBACT,CAAC;gBACD,MAAM,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC;YAClC,CAAC,CACF,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,oEAAoE;YACpE,WAAW,EAAE,CAAC;YACd,MAAM,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;YAC1B,OAAO;QACT,CAAC;QAED,8EAA8E;QAC9E,gFAAgF;QAChF,8EAA8E;QAC9E,kFAAkF;QAClF,gFAAgF;QAChF,6EAA6E;QAC7E,GAAG,CAAC,EAAE,CAAC,SAAS,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE;YACjC,MAAM,CAAC,OAAO,EAAE,CAAC;YACjB,GAAG,CAAC,OAAO,EAAE,CAAC;YACd,WAAW,EAAE,CAAC;YACd,MAAM,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,SAAS,CAC/B,uFAAuF,CACxF,CAAC,CAAC,CAAC;QACN,CAAC,CAAC,CAAC;QAEH,8EAA8E;QAC9E,2EAA2E;QAC3E,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,CAAC,EAAE,GAAG,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,OAAO,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACjF,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YAChB,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;YAC3B,MAAM,OAAO,GAAG,GAAG,EAAE;gBACnB,OAAO,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC;gBAC7B,GAAG,CAAC,OAAO,EAAE,CAAC;gBACd,MAAM,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC;YAChC,CAAC,CAAC;YACF,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;gBAAC,OAAO,EAAE,CAAC;gBAAC,OAAO;YAAC,CAAC;YAC1C,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;YAC1D,WAAW,GAAG,GAAG,EAAE;gBACjB,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;gBAC7C,WAAW,GAAG,GAAG,EAAE,GAAE,CAAC,CAAC;YACzB,CAAC,CAAC;QACJ,CAAC;QACD,IAAI,IAAI;YAAE,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;;YAAM,GAAG,CAAC,GAAG,EAAE,CAAC;IAC1C,CAAC,CAAC,CAAC;AACL,CAAC;AAED,gFAAgF;AAChF,MAAM,CAAC,MAAM,iBAAiB,GAAG,aAAwC,CAAC;AAE1E;;;;;;;;;GASG;AACH,MAAM,UAAU,aAAa,CAAC,GAAW;IACvC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;QAC5B,8EAA8E;QAC9E,4EAA4E;QAC5E,IAAI,MAAM,CAAC,QAAQ,KAAK,OAAO;YAAE,OAAO,KAAK,CAAC;QAC9C,MAAM,IAAI,GAAG,qBAAqB,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QACpD,OAAO,IAAI,KAAK,WAAW,IAAI,IAAI,KAAK,KAAK,CAAC;IAChD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,SAAS,qBAAqB,CAAC,QAAgB;IAC7C,MAAM,IAAI,GAAG,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC;QAC7D,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QACvB,CAAC,CAAC,QAAQ,CAAC;IACb,OAAO,IAAI,KAAK,WAAW,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC;AACnD,CAAC"}

package/dist/core/maintenance.d.ts

@@ -20,6 +20,7 @@ import { spawn } from 'node:child_process';
 import { type MaintenanceConfig } from '../global-config.js';
 import { type RestartIntent } from '../services/restart-intent-store.js';
 import { type GlobalInstallPlan } from '../utils/global-install.js';
+import { type BinaryInstallShape, type UpdateStrategy } from './binary-self-update.js';
 export interface MaintenanceState {
     /** Local date the auto-update run was last handled (fired or skipped). */
     autoUpdate?: {
@@ -39,6 +40,30 @@ export interface MaintenanceDeps {
     currentVersion: () => string;
     /** Updates the owning npm/pnpm/Bun global install (download/install only). */
     runUpdate: () => void;
+    /**
+     * What `runUpdate` actually installed, or '' when it could not be determined.
+     *
+     * ⚠️ WHY THIS EXISTS — THE BAKED VERSION SHADOWS A COMPLETED UPDATE, ON BOTH
+     * STRATEGIES. A compiled binary's version is baked in at compile time, and
+     * `botmuxVersionAt` returns that value for ANY directory you ask about. So
+     * `currentVersion()` after an update still reports this process's OLD version:
+     *
+     *   · self-replace     — the file on disk was swapped; nothing on disk is read.
+     *   · package-manager  — npm rewrote the install's package.json, but the baked
+     *                        value takes priority over reading it (measured:
+     *                        package.json says 3.19.0, the call returns 3.18.4).
+     *
+     * Either way `after === before`, so the tick logs "already on the latest
+     * version" and NEVER restarts onto what it just installed. Both branches
+     * therefore report the installed version explicitly — the self-replace path from
+     * what it downloaded, the package-manager path via `diskVersionAt` (which
+     * deliberately ignores the baked value).
+     *
+     * Returns '' when undeterminable, and the tick falls back to the re-read
+     * comparison. Under Node the baked value is absent, so all of this is a no-op
+     * and behaviour is byte-identical to before.
+     */
+    installedVersion?: () => string;
     writeIntent: (intent: RestartIntent) => void;
     /** Spawn a detached `botmux restart` (this process is then killed by pm2). */
     triggerRestart: () => void;
@@ -73,6 +98,23 @@ export declare function maintenanceRestartLogPath(): string;
 export declare function globalInstallUpdateCwd(): string;
 /** Run the ownership-aware update synchronously. */
 export declare function installLatestBotmuxSync(plan?: GlobalInstallPlan): void;
+/**
+ * Apply an update for whatever install shape this process is, resolving the
+ * strategy first so a compiled binary is handled instead of being rejected as an
+ * "unsupported install".
+ *
+ * Shared by the CLI (`botmux update`), the dashboard's `/api/update/run` and the
+ * scheduled auto-update so the three cannot drift — they previously all funnelled
+ * into `resolveGlobalInstallPlan`, which is exactly the call that fails in
+ * compiled mode.
+ *
+ * @param spec  the version spec for the package-manager path, and the version to
+ *              download for the self-replace path ('latest' resolves upstream).
+ */
+export declare function applyBotmuxUpdate(installRoot: string, version: string): Promise<{
+    strategy: UpdateStrategy['kind'];
+    detail: string;
+}>;
 /**
  * Cross-process lock target that serializes global botmux updates
  * between the scheduled auto-update (this daemon process) and a
@@ -92,12 +134,43 @@ export declare function globalInstallUpdateLockTarget(): string;
  * restarts the rest (the 2026-06-11 incident). `setsid` starts it in a brand
  * new session, reparented to init, immune to botmux-0's teardown. Without
  * setsid we fall back to a plain spawn (still detached by the caller).
+ *
+ * ⚠️ COMPILED BINARY: there is no `cli.js` to pass. Under Node the shape is
+ * `node <dist/cli.js> restart`, where argv[2] is `restart`. A single-file
+ * executable IS the CLI, so the same shape becomes `<binary> <cli.js path>
+ * restart` — and argv[2] is then the PATH, not `restart`. MEASURED on the real
+ * v3.18.4 binary: it printed the help banner and **exited 0**, i.e. a restart
+ * that silently never happened while reporting success. So in standalone mode the
+ * entry argument is dropped entirely and the binary is invoked as
+ * `<binary> restart`.
  */
-export declare function buildRestartLauncher(node: string, cliEntry: string, hasSetsid: boolean): {
+export declare function buildRestartLauncher(node: string, cliEntry: string, hasSetsid: boolean, standalone?: boolean): {
     cmd: string;
     args: string[];
 };
 export declare function detachedRestartEnv(inheritedEnv?: NodeJS.ProcessEnv): NodeJS.ProcessEnv;
+/**
+ * Resolve the executable a detached restart should launch.
+ *
+ * ⚠️ WHY `process.execPath` IS NOT ALWAYS RIGHT FOR A COMPILED BINARY. For the
+ * self-replacing (install.sh) shape it is exactly right: the path is stable and we
+ * just swapped the bytes underneath it. But for a PACKAGE-MANAGER-owned binary the
+ * running path can be VERSIONED — pnpm's virtual store yields
+ * `…/.pnpm/botmux-linux-x64@<old version>/node_modules/botmux-linux-x64/botmux`.
+ * After the update, npm/pnpm's postinstall has re-pointed the stable launcher at
+ * the NEW subpackage, while this process's `execPath` still names the OLD one. So
+ * restarting from `execPath` either fails with ENOENT (the old store entry was
+ * pruned) or silently starts the OLD binary — an update that reports success and
+ * does not take effect.
+ *
+ * The stable launcher (`~/.botmux/bin/botmux`) is what both installers maintain and
+ * re-point, so it is the correct target after a package-manager update. Fall back
+ * to `execPath` when it is missing (nothing else to go on) — that is the
+ * pre-existing behaviour.
+ *
+ * Pure over its inputs so every branch is testable without a compiled binary.
+ */
+export declare function resolveStandaloneRestartExecutable(standalone: boolean, execPath: string, shape: BinaryInstallShape, launcherPath: string, launcherExists: boolean): string;
 /**
  * Spawn a detached `botmux restart`, immune to this process's own teardown
  * (setsid → a new session reparented to init, so PM2 killing the current
@@ -108,6 +181,20 @@ export declare function detachedRestartEnv(inheritedEnv?: NodeJS.ProcessEnv): No
  * @param reason short tag written to the log (e.g. 'auto-update', 'dashboard').
  */
 export declare function spawnDetachedRestart(reason: string, activePackageRoot?: string, restartLeaseId?: string): ReturnType<typeof spawn>;
+/**
+ * Perform a binary self-replace in a CHILD process and block until it finishes.
+ *
+ * WHY A CHILD AND NOT AN `await` HERE: `runMaintenanceTick` is synchronous and
+ * runs inside `withFileLockSync`, so it cannot await the download. Re-execing this
+ * same binary with a hidden `__self-update` subcommand keeps the lock semantics
+ * byte-identical to the package-manager branch (spawn one child, wait, throw on a
+ * non-zero exit) without turning the whole tick async — which would change the
+ * locking shape for the npm path too, the one that is currently working.
+ *
+ * Returns the version that was installed (printed by the child on its last line),
+ * or '' when the child reported success without a parseable version.
+ */
+export declare function runSelfReplaceBlocking(version?: string): string;
 /** Start the maintenance loop. Call only on the primary daemon (bot-0). */
 export declare function startMaintenance(): void;
 export declare function stopMaintenance(): void;

package/dist/core/maintenance.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"maintenance.d.ts","sourceRoot":"","sources":["../../src/core/maintenance.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AACH,OAAO,EAAY,KAAK,EAAa,MAAM,oBAAoB,CAAC;AAMhE,OAAO,EAAoB,KAAK,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AAG/E,OAAO,EAKL,KAAK,aAAa,EACnB,MAAM,qCAAqC,CAAC;AAQ7C,OAAO,EAEL,KAAK,iBAAiB,EACvB,MAAM,4BAA4B,CAAC;AAIpC,MAAM,WAAW,gBAAgB;IAC/B,0EAA0E;IAC1E,UAAU,CAAC,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAA;KAAE,CAAC;CACnC;AAED,MAAM,WAAW,eAAe;IAC9B,GAAG,EAAE,MAAM,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,iBAAiB,GAAG,SAAS,CAAC;IAChD,SAAS,EAAE,MAAM,gBAAgB,CAAC;IAClC,UAAU,EAAE,CAAC,CAAC,EAAE,gBAAgB,KAAK,IAAI,CAAC;IAC1C,OAAO,EAAE,MAAM,OAAO,CAAC;IACvB,UAAU,EAAE,MAAM,OAAO,CAAC;IAC1B,iEAAiE;IACjE,cAAc,EAAE,CAAC,EAAE,EAAE,MAAM,IAAI,KAAK,IAAI,CAAC;IACzC,6EAA6E;IAC7E,cAAc,EAAE,MAAM,MAAM,CAAC;IAC7B,8EAA8E;IAC9E,SAAS,EAAE,MAAM,IAAI,CAAC;IACtB,WAAW,EAAE,CAAC,MAAM,EAAE,aAAa,KAAK,IAAI,CAAC;IAC7C,8EAA8E;IAC9E,cAAc,EAAE,MAAM,IAAI,CAAC;IAC3B,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,CAAC;CAC7B;AAED;;;;;;;GAOG;AACH,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,eAAe,GAAG,IAAI,CA8D9D;AAMD,wBAAgB,sBAAsB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAE1D;AAED,wBAAgB,sBAAsB,CAAC,GAAG,EAAE,MAAM,GAAG,gBAAgB,CASpE;AAED,wBAAgB,uBAAuB,CAAC,GAAG,EAAE,MAAM,EAAE,CAAC,EAAE,gBAAgB,GAAG,IAAI,CAM9E;AAID;2CAC2C;AAC3C,eAAO,MAAM,mBAAmB,QAAS,CAAC;AAE1C;uEACuE;AACvE,wBAAgB,yBAAyB,IAAI,MAAM,CAElD;AAED;;;;;;;GAOG;AACH,wBAAgB,sBAAsB,IAAI,MAAM,CAE/C;AAED,oDAAoD;AACpD,wBAAgB,uBAAuB,CAAC,IAAI,GAAE,iBAA8C,GAAG,IAAI,CAWlG;AAED;;;;;;GAMG;AACH,wBAAgB,+BAA+B,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAIvE;AAED,wBAAgB,6BAA6B,IAAI,MAAM,CAEtD;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,oBAAoB,CAClC,IAAI,EAAE,MAAM,EACZ,QAAQ,EAAE,MAAM,EAChB,SAAS,EAAE,OAAO,GACjB;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,EAAE,CAAA;CAAE,CAGjC;AAED,wBAAgB,kBAAkB,CAAC,YAAY,GAAE,MAAM,CAAC,UAAwB,GAAG,MAAM,CAAC,UAAU,CAuCnG;AAWD;;;;;;;;GAQG;AACH,wBAAgB,oBAAoB,CAClC,MAAM,EAAE,MAAM,EACd,iBAAiB,CAAC,EAAE,MAAM,EAC1B,cAAc,CAAC,EAAE,MAAM,GACtB,UAAU,CAAC,OAAO,KAAK,CAAC,CAmC1B;AA2CD,2EAA2E;AAC3E,wBAAgB,gBAAgB,IAAI,IAAI,CAavC;AAED,wBAAgB,eAAe,IAAI,IAAI,CAEtC"}
+{"version":3,"file":"maintenance.d.ts","sourceRoot":"","sources":["../../src/core/maintenance.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AACH,OAAO,EAAY,KAAK,EAAa,MAAM,oBAAoB,CAAC;AAMhE,OAAO,EAAoB,KAAK,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AAG/E,OAAO,EAKL,KAAK,aAAa,EACnB,MAAM,qCAAqC,CAAC;AAU7C,OAAO,EAIL,KAAK,iBAAiB,EACvB,MAAM,4BAA4B,CAAC;AAIpC,OAAO,EAIL,KAAK,kBAAkB,EACvB,KAAK,cAAc,EACpB,MAAM,yBAAyB,CAAC;AAGjC,MAAM,WAAW,gBAAgB;IAC/B,0EAA0E;IAC1E,UAAU,CAAC,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAA;KAAE,CAAC;CACnC;AAED,MAAM,WAAW,eAAe;IAC9B,GAAG,EAAE,MAAM,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,iBAAiB,GAAG,SAAS,CAAC;IAChD,SAAS,EAAE,MAAM,gBAAgB,CAAC;IAClC,UAAU,EAAE,CAAC,CAAC,EAAE,gBAAgB,KAAK,IAAI,CAAC;IAC1C,OAAO,EAAE,MAAM,OAAO,CAAC;IACvB,UAAU,EAAE,MAAM,OAAO,CAAC;IAC1B,iEAAiE;IACjE,cAAc,EAAE,CAAC,EAAE,EAAE,MAAM,IAAI,KAAK,IAAI,CAAC;IACzC,6EAA6E;IAC7E,cAAc,EAAE,MAAM,MAAM,CAAC;IAC7B,8EAA8E;IAC9E,SAAS,EAAE,MAAM,IAAI,CAAC;IACtB;;;;;;;;;;;;;;;;;;;;;;OAsBG;IACH,gBAAgB,CAAC,EAAE,MAAM,MAAM,CAAC;IAChC,WAAW,EAAE,CAAC,MAAM,EAAE,aAAa,KAAK,IAAI,CAAC;IAC7C,8EAA8E;IAC9E,cAAc,EAAE,MAAM,IAAI,CAAC;IAC3B,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,CAAC;CAC7B;AAED;;;;;;;GAOG;AACH,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,eAAe,GAAG,IAAI,CAiE9D;AAMD,wBAAgB,sBAAsB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAE1D;AAED,wBAAgB,sBAAsB,CAAC,GAAG,EAAE,MAAM,GAAG,gBAAgB,CASpE;AAED,wBAAgB,uBAAuB,CAAC,GAAG,EAAE,MAAM,EAAE,CAAC,EAAE,gBAAgB,GAAG,IAAI,CAM9E;AAID;2CAC2C;AAC3C,eAAO,MAAM,mBAAmB,QAAS,CAAC;AAE1C;uEACuE;AACvE,wBAAgB,yBAAyB,IAAI,MAAM,CAElD;AAED;;;;;;;GAOG;AACH,wBAAgB,sBAAsB,IAAI,MAAM,CAE/C;AAED,oDAAoD;AACpD,wBAAgB,uBAAuB,CAAC,IAAI,GAAE,iBAA8C,GAAG,IAAI,CAWlG;AAED;;;;;;;;;;;;GAYG;AACH,wBAAsB,iBAAiB,CACrC,WAAW,EAAE,MAAM,EACnB,OAAO,EAAE,MAAM,GACd,OAAO,CAAC;IAAE,QAAQ,EAAE,cAAc,CAAC,MAAM,CAAC,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC,CAY/D;AAED;;;;;;GAMG;AACH,wBAAgB,+BAA+B,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAIvE;AAED,wBAAgB,6BAA6B,IAAI,MAAM,CAEtD;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAgB,oBAAoB,CAClC,IAAI,EAAE,MAAM,EACZ,QAAQ,EAAE,MAAM,EAChB,SAAS,EAAE,OAAO,EAClB,UAAU,UAAQ,GACjB;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,EAAE,CAAA;CAAE,CAMjC;AAED,wBAAgB,kBAAkB,CAAC,YAAY,GAAE,MAAM,CAAC,UAAwB,GAAG,MAAM,CAAC,UAAU,CAuCnG;AAWD;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,wBAAgB,kCAAkC,CAChD,UAAU,EAAE,OAAO,EACnB,QAAQ,EAAE,MAAM,EAChB,KAAK,EAAE,kBAAkB,EACzB,YAAY,EAAE,MAAM,EACpB,cAAc,EAAE,OAAO,GACtB,MAAM,CAMR;AAED;;;;;;;;GAQG;AACH,wBAAgB,oBAAoB,CAClC,MAAM,EAAE,MAAM,EACd,iBAAiB,CAAC,EAAE,MAAM,EAC1B,cAAc,CAAC,EAAE,MAAM,GACtB,UAAU,CAAC,OAAO,KAAK,CAAC,CAkD1B;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,sBAAsB,CAAC,OAAO,SAAW,GAAG,MAAM,CAiBjE;AAoED,2EAA2E;AAC3E,wBAAgB,gBAAgB,IAAI,IAAI,CAavC;AAED,wBAAgB,eAAe,IAAI,IAAI,CAEtC"}