create-principles-disciple 1.132.6 → 1.133.1

package/dist/installers/codex-host-installer.js

@@ -23,13 +23,20 @@
  * merge into it, never overwrite. The marker file is our own bookkeeping
  * for precise uninstall.
  */
-import { existsSync, readFileSync, writeFileSync, mkdirSync } from 'fs';
+import { existsSync, readFileSync, writeFileSync } from 'fs';
 import { execSync } from 'child_process';
 import * as path from 'path';
 import * as os from 'os';
 import { createRequire } from 'module';
 import { pathToFileURL } from 'url';
 import { isNpmDependencyResolutionEnabled } from '../installer.js';
+// NOTE (PRI-625 review round 3 / PRI-669 gate): this installer ships as the
+// self-contained npx package — @principles/core is NOT in its dependencies,
+// and type-only imports are erased at compile time, so the import above is
+// safe. The legacy-registration PARSER must therefore NOT be value-imported
+// here. Its single authority lives in @principles/core/host
+// (parseLegacyCodexHooksRegistration); the local classification below is the
+// npx-parity edge, and a CI parity test pins the two shapes together.
 const requireFromModule = createRequire(import.meta.url);
 // ─── Codex hook event names (SPEC v4.1 §5.7) ────────────────────────────────
 const CODEX_EVENTS = ['PreToolUse', 'PostToolUse', 'UserPromptSubmit', 'SessionStart'];
@@ -129,73 +136,11 @@ export function resolvePdHookPath(deps = {}) {
     return undefined;
 }
 /**
- * Build the hook command string for hooks.json.
- *
- * The wrapper script sets PD_HOST_CODEX_ENABLED=1 and PD_WORKSPACE_DIR before
- * invoking pd-hook.js. This is cross-platform (no shell-specific env var syntax).
+ * Hook entry / matcher-group shapes (rc-2 typing for detectLegacyCodexHookRegistration).
+ * The builder that CREATED these groups was retired with the legacy installer
+ * (SPEC rev 2 §17); the shapes remain because uninstall and the legacy
+ * detector must still recognize what old installers wrote.
  */
-function buildHookCommand(entryScriptPath, _workspaceDir) {
-    // Unix command: node <entry>
-    // workspaceDir is injected by the wrapper script (pd-hook-entry.cjs), not here.
-    void _workspaceDir;
-    return `node "${entryScriptPath}"`;
-}
-function buildHookCommandWindows(entryScriptPath, _workspaceDir) {
-    // Windows command — same node invocation; the entry script handles env internally
-    void _workspaceDir;
-    return `node "${entryScriptPath}"`;
-}
-function buildMatcherGroup(eventName, entryScriptPath, workspaceDir) {
-    const command = buildHookCommand(entryScriptPath, workspaceDir);
-    const commandWindows = buildHookCommandWindows(entryScriptPath, workspaceDir);
-    switch (eventName) {
-        case 'PreToolUse':
-            return {
-                matcher: 'Bash|apply_patch',
-                hooks: [{
-                        type: 'command',
-                        command,
-                        commandWindows,
-                        timeout: 5,
-                        statusMessage: 'PD: checking tool call',
-                    }],
-            };
-        case 'PostToolUse':
-            return {
-                matcher: '.*',
-                hooks: [{
-                        type: 'command',
-                        command,
-                        commandWindows,
-                        timeout: 5,
-                        async: true,
-                        statusMessage: 'PD: capturing pain signal',
-                    }],
-            };
-        case 'UserPromptSubmit':
-            return {
-                hooks: [{
-                        type: 'command',
-                        command,
-                        commandWindows,
-                        timeout: 5,
-                        additionalContextLimit: 10000,
-                        statusMessage: 'PD: injecting principles',
-                    }],
-            };
-        case 'SessionStart':
-            return {
-                hooks: [{
-                        type: 'command',
-                        command,
-                        commandWindows,
-                        timeout: 600,
-                        additionalContextLimit: 10000,
-                        statusMessage: 'PD: hydrating state',
-                    }],
-            };
-    }
-}
 // ─── Wrapper script content ─────────────────────────────────────────────────
 /**
  * Generate the wrapper script that sets env vars and imports pd-hook.js.
@@ -221,144 +166,83 @@ export function buildWrapperScriptContent(pdHookPath, workspaceDir) {
         '',
     ].join('\n');
 }
+// ─── Legacy registration detection (Slice D, SPEC rev 2 §17) ────────────────
+// The single PARSING authority lives in @principles/core/host
+// (parseLegacyCodexHooksRegistration — pure, no I/O). This installer is the
+// npx-parity FS edge: same classification semantics, mirrored here because
+// @principles/core is not a runtime dependency of this self-contained
+// package. CI pins the two shapes together (codex-host-installer.test.ts →
+// parseLegacyCodexHooksRegistration parity).
+export function detectLegacyCodexHookRegistration(hooksJsonPathOverride) {
+    const hooksJsonPath = hooksJsonPathOverride ?? getCodexHooksJsonPath();
+    let parsed;
+    try {
+        parsed = JSON.parse(readFileSync(hooksJsonPath, 'utf-8'));
+    }
+    catch {
+        return { detected: false, legacyAsyncPostToolUse: false };
+    }
+    // npx-parity mirror of @principles/core/host parseLegacyCodexHooksRegistration
+    // (kept here because @principles/core is not a runtime dep of this package;
+    // parity with the core parser is enforced by codex-host-installer.test.ts).
+    if (!isRecord(parsed))
+        return { detected: false, legacyAsyncPostToolUse: false };
+    let detected = false;
+    let legacyAsyncPostToolUse = false;
+    for (const eventName of CODEX_EVENTS) {
+        const groups = parsed[eventName];
+        if (!isUnknownArray(groups))
+            continue;
+        for (const group of groups) {
+            if (!(isRecord(group) && Object.hasOwn(group, '__pd_marker') && group.__pd_marker === 'pd-owned'))
+                continue;
+            detected = true;
+            const entries = group.hooks;
+            if (!isUnknownArray(entries))
+                continue;
+            for (const entry of entries) {
+                if (isRecord(entry) && eventName === 'PostToolUse' && Object.hasOwn(entry, 'async') && entry.async === true) {
+                    legacyAsyncPostToolUse = true;
+                }
+            }
+        }
+    }
+    return { detected, legacyAsyncPostToolUse };
+}
 // ─── CodexHostInstaller ─────────────────────────────────────────────────────
 export class CodexHostInstaller {
     hostId = 'codex';
-    async install(ctx) {
-        const pdCodexDir = getPdCodexDir();
+    /**
+     * RETIRED for new registrations (Codex Governance Closure Slice D; SPEC rev
+     * 2 §17 — the Marketplace plugin is the only supported new install path;
+     * this legacy global-hook installer is migration/uninstall-only).
+     *
+     * This method NEVER writes hook registrations anymore. It returns a
+     * structured refusal that points at the supported path, and when a legacy
+     * PD global registration is detected it offers the explicit migration
+     * route (precise uninstall → Marketplace plugin → $pd-setup consent).
+     */
+    async install(_ctx) {
         const hooksJsonPath = getCodexHooksJsonPath();
-        const markerPath = getPdHookMarkerPath();
-        // 1. Resolve codex-adapter pd-hook.js
-        const pdHookPath = resolvePdHookPath();
-        if (!pdHookPath) {
-            return {
-                success: false,
-                hostId: this.hostId,
-                configPath: hooksJsonPath,
-                configAction: 'skipped',
-                reason: '@principles/codex-adapter is not installed. The codex-adapter package provides the pd-hook.js entry Codex spawns.',
-                nextAction: 'Install it first: npm install -g @principles/codex-adapter, then re-run: npx create-principles-disciple install --host codex',
-            };
-        }
-        // 2. Write wrapper script to ~/.pd/codex/pd-hook-entry.cjs
-        //    (marker file is written AFTER mergeHooksJson succeeds — see step 3.
-        //    Writing the marker before the merge would make detect() report a
-        //    failed install as installed, violating rc-3-fail-loud-missing.)
-        try {
-            if (!existsSync(pdCodexDir)) {
-                mkdirSync(pdCodexDir, { recursive: true });
-            }
-            const wrapperPath = path.join(pdCodexDir, 'pd-hook-entry.cjs');
-            const wrapperContent = buildWrapperScriptContent(pdHookPath, ctx.workspaceDir);
-            writeFileSync(wrapperPath, wrapperContent, { encoding: 'utf-8' });
-            // 3. Merge PD hook entries into ~/.codex/hooks.json (append, never overwrite).
-            //    If hooks.json is malformed, mergeHooksJson returns 'preserved' without
-            //    writing any PD entries. This MUST surface as a failure (rc-3 / rc-9)
-            //    — otherwise the user would see "install succeeded" while Codex never
-            //    triggers PD hooks. The marker is NOT written in this branch, so
-            //    detect() correctly reports "not installed".
-            const configAction = this.mergeHooksJson(hooksJsonPath, wrapperPath, ctx.workspaceDir);
-            if (configAction === 'preserved') {
-                return {
-                    success: false,
-                    hostId: this.hostId,
-                    configPath: hooksJsonPath,
-                    configAction,
-                    reason: `${hooksJsonPath} is malformed (not a JSON object). PD did not write any hook entries to avoid overwriting the user's config.`,
-                    nextAction: `Manually fix ${hooksJsonPath} (must be a JSON object), then re-run: npx create-principles-disciple install --host codex`,
-                };
-            }
-            // 4. Merge succeeded — now safe to record the marker. detect() will
-            //    only report installed when hooks.json actually contains PD entries.
-            writeFileSync(markerPath, JSON.stringify({
-                installedAt: new Date().toISOString(),
-                workspaceDir: ctx.workspaceDir,
-                pdHookPath,
-                wrapperPath,
-                events: CODEX_EVENTS,
-            }, null, 2), { encoding: 'utf-8' });
-            return {
-                success: true,
-                hostId: this.hostId,
-                configPath: hooksJsonPath,
-                configAction,
-                nextAction: 'Open Codex and run /hooks to trust PD hooks before they execute. Verify with: codex doctor (hooks feature should be ON).',
-            };
-        }
-        catch (err) {
-            const reason = err instanceof Error ? err.message : String(err);
+        const legacy = detectLegacyCodexHookRegistration();
+        if (legacy.detected) {
             return {
                 success: false,
                 hostId: this.hostId,
                 configPath: hooksJsonPath,
                 configAction: 'skipped',
-                reason: `Failed to write Codex hook config: ${reason}`,
-                nextAction: `Check write permissions on ${pdCodexDir} and ${hooksJsonPath}, then re-run installer.`,
+                reason: 'A legacy PD global Codex hook registration was detected (async PostToolUse in ~/.codex/hooks.json). The legacy global installer is retired (SPEC rev 2 §17) and cannot update it.',
+                nextAction: 'Migrate to the Marketplace plugin: 1) npx create-principles-disciple uninstall --host codex  (removes ONLY PD-owned entries; evidence is preserved); 2) codex plugin add principles-disciple@principles; 3) run the plugin setup ($pd-setup) — it presents the ingestion disclosure and records consent.',
             };
         }
-    }
-    /**
-     * Merge PD hook entries into ~/.codex/hooks.json.
-     * - If file doesn't exist: create it with PD entries (configAction = 'created').
-     * - If file exists: merge PD entries into existing event arrays (configAction = 'updated').
-     * - Idempotent: re-running install replaces PD entries (matched by marker), not duplicates.
-     */
-    // eslint-disable-next-line @typescript-eslint/class-methods-use-this
-    mergeHooksJson(hooksJsonPath, wrapperPath, workspaceDir) {
-        const codexDir = getCodexDir();
-        if (!existsSync(codexDir)) {
-            mkdirSync(codexDir, { recursive: true });
-        }
-        let existing = {};
-        let action = 'created';
-        // CodeQL TOCTOU fix: try/catch read instead of existsSync+readFileSync.
-        // ENOENT → 'created' (file doesn't exist yet); other parse errors → 'preserved'.
-        try {
-            const raw = readFileSync(hooksJsonPath, 'utf-8');
-            const parsed = JSON.parse(raw);
-            if (isRecord(parsed)) {
-                existing = { ...parsed };
-                action = 'updated';
-            }
-            else {
-                // Malformed — back off, don't overwrite
-                action = 'preserved';
-            }
-        }
-        catch (err) {
-            const code = getErrorCode(err);
-            if (code === 'ENOENT') {
-                // File doesn't exist — 'created' (default action stays)
-            }
-            else {
-                // Malformed JSON — back off
-                action = 'preserved';
-            }
-        }
-        if (action === 'preserved') {
-            return action;
-        }
-        // For each Codex event, replace any existing PD-owned matcher groups
-        // with our fresh set (idempotent — re-install doesn't duplicate).
-        const PD_MARKER = 'pd-owned';
-        for (const eventName of CODEX_EVENTS) {
-            const group = buildMatcherGroup(eventName, wrapperPath, workspaceDir);
-            // Tag the group so uninstall can find PD-owned entries precisely.
-            group.__pd_marker = PD_MARKER;
-            const existingGroups = existing[eventName];
-            if (isUnknownArray(existingGroups)) {
-                // Filter out previously-PD-owned groups, then append the new one.
-                // rc-2: no `as` bypass — use Object.hasOwn to check marker presence.
-                const filtered = existingGroups.filter((g) => !(isRecord(g) && Object.hasOwn(g, '__pd_marker') && g.__pd_marker === PD_MARKER));
-                filtered.push(group);
-                existing[eventName] = filtered;
-            }
-            else {
-                existing[eventName] = [group];
-            }
-        }
-        writeFileSync(hooksJsonPath, JSON.stringify(existing, null, 2), { encoding: 'utf-8' });
-        return action;
+        return {
+            success: false,
+            hostId: this.hostId,
+            configPath: hooksJsonPath,
+            configAction: 'skipped',
+            reason: 'New Codex global hook registrations are retired (SPEC rev 2 §17). The Marketplace plugin is the only supported new install path for Codex.',
+            nextAction: 'Install the plugin: codex plugin add principles-disciple@principles — then run its setup ($pd-setup), which verifies Node/runtime/workspace/trust and records the conversation-ingestion consent.',
+        };
     }
     async uninstall(_ctx) {
         const hooksJsonPath = getCodexHooksJsonPath();

package/dist/installers/codex-host-installer.js.map

@@ -1 +1 @@
-{"version":3,"file":"codex-host-installer.js","sourceRoot":"","sources":["../../src/installers/codex-host-installer.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,IAAI,CAAC;AACxE,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AACzC,OAAO,KAAK,IAAI,MAAM,MAAM,CAAC;AAC7B,OAAO,KAAK,EAAE,MAAM,IAAI,CAAC;AACzB,OAAO,EAAE,aAAa,EAAE,MAAM,QAAQ,CAAC;AACvC,OAAO,EAAE,aAAa,EAAE,MAAM,KAAK,CAAC;AACpC,OAAO,EAAE,gCAAgC,EAAE,MAAM,iBAAiB,CAAC;AAUnE,MAAM,iBAAiB,GAAG,aAAa,CAAC,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC;AAEzD,+EAA+E;AAC/E,MAAM,YAAY,GAAG,CAAC,YAAY,EAAE,aAAa,EAAE,kBAAkB,EAAE,cAAc,CAAU,CAAC;AAGhG,MAAM,cAAc,GAAG,iBAAiB,CAAC;AAEzC,+EAA+E;AAC/E,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC;AAED,SAAS,cAAc,CAAC,KAAc;IACpC,OAAO,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9B,CAAC;AAED;;;GAGG;AACH,SAAS,YAAY,CAAC,GAAY;IAChC,IAAI,GAAG,KAAK,IAAI,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,EAAE,CAAC;QAC1E,MAAM,EAAE,IAAI,EAAE,GAAG,GAAyB,CAAC;QAC3C,OAAO,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;IACrD,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,+EAA+E;AAC/E,SAAS,WAAW;IAClB,OAAO,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,QAAQ,CAAC,CAAC;AAC3C,CAAC;AAED,SAAS,qBAAqB;IAC5B,OAAO,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,YAAY,CAAC,CAAC;AAChD,CAAC;AAED,SAAS,aAAa;IACpB,OAAO,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;AACjD,CAAC;AAED,SAAS,mBAAmB;IAC1B,OAAO,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,EAAE,cAAc,CAAC,CAAC;AACpD,CAAC;AAED;;;;;;;;;;;;;;;GAeG;AACH,SAAS,gBAAgB;IACvB,2EAA2E;IAC3E,uEAAuE;IACvE,4DAA4D;IAC5D,IAAI,CAAC,gCAAgC,EAAE;QAAE,OAAO,SAAS,CAAC;IAC1D,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,QAAQ,CAAC,aAAa,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QACrG,OAAO,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;IAC5C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,MAAM,UAAU,2BAA2B,CAAC,GAAW;IACrD,IAAI,CAAC;QACH,uEAAuE;QACvE,sDAAsD;QACtD,OAAO,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,sBAAsB,CAAC,CAAC,CAAC,OAAO,CAAC,mCAAmC,CAAC,CAAC;IAC5G,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAQD,MAAM,UAAU,iBAAiB,CAAC,IAAI,GAAmB,EAAE;IACzD,MAAM,YAAY,GAA8C,IAAI,CAAC,YAAY;WAC5E,CAAC,CAAC,SAAS,EAAE,EAAE;YAChB,IAAI,CAAC;gBAAC,OAAO,iBAAiB,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC;gBAAC,OAAO,SAAS,CAAC;YAAC,CAAC;QAClF,CAAC,CAAC,CAAC;IACL,MAAM,aAAa,GAAG,IAAI,CAAC,aAAa,IAAI,gBAAgB,CAAC;IAC7D,MAAM,cAAc,GAAG,IAAI,CAAC,cAAc,IAAI,2BAA2B,CAAC;IAE1E,MAAM,KAAK,GAAG,YAAY,CAAC,mCAAmC,CAAC,CAAC;IAChE,IAAI,KAAK;QAAE,OAAO,KAAK,CAAC;IAExB,MAAM,UAAU,GAAG,aAAa,EAAE,CAAC;IACnC,IAAI,UAAU,EAAE,CAAC;QACf,MAAM,UAAU,GAAG,cAAc,CAAC,UAAU,CAAC,CAAC;QAC9C,IAAI,UAAU;YAAE,OAAO,UAAU,CAAC;IACpC,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;;;GAKG;AACH,SAAS,gBAAgB,CAAC,eAAuB,EAAE,aAAqB;IACtE,6BAA6B;IAC7B,gFAAgF;IAChF,KAAK,aAAa,CAAC;IACnB,OAAO,SAAS,eAAe,GAAG,CAAC;AACrC,CAAC;AAED,SAAS,uBAAuB,CAAC,eAAuB,EAAE,aAAqB;IAC7E,kFAAkF;IAClF,KAAK,aAAa,CAAC;IACnB,OAAO,SAAS,eAAe,GAAG,CAAC;AACrC,CAAC;AAyBD,SAAS,iBAAiB,CACxB,SAAyB,EACzB,eAAuB,EACvB,YAAoB;IAEpB,MAAM,OAAO,GAAG,gBAAgB,CAAC,eAAe,EAAE,YAAY,CAAC,CAAC;IAChE,MAAM,cAAc,GAAG,uBAAuB,CAAC,eAAe,EAAE,YAAY,CAAC,CAAC;IAE9E,QAAQ,SAAS,EAAE,CAAC;QAClB,KAAK,YAAY;YACf,OAAO;gBACL,OAAO,EAAE,kBAAkB;gBAC3B,KAAK,EAAE,CAAC;wBACN,IAAI,EAAE,SAAS;wBACf,OAAO;wBACP,cAAc;wBACd,OAAO,EAAE,CAAC;wBACV,aAAa,EAAE,wBAAwB;qBACxC,CAAC;aACH,CAAC;QACJ,KAAK,aAAa;YAChB,OAAO;gBACL,OAAO,EAAE,IAAI;gBACb,KAAK,EAAE,CAAC;wBACN,IAAI,EAAE,SAAS;wBACf,OAAO;wBACP,cAAc;wBACd,OAAO,EAAE,CAAC;wBACV,KAAK,EAAE,IAAI;wBACX,aAAa,EAAE,2BAA2B;qBAC3C,CAAC;aACH,CAAC;QACJ,KAAK,kBAAkB;YACrB,OAAO;gBACL,KAAK,EAAE,CAAC;wBACN,IAAI,EAAE,SAAS;wBACf,OAAO;wBACP,cAAc;wBACd,OAAO,EAAE,CAAC;wBACV,sBAAsB,EAAE,KAAK;wBAC7B,aAAa,EAAE,0BAA0B;qBAC1C,CAAC;aACH,CAAC;QACJ,KAAK,cAAc;YACjB,OAAO;gBACL,KAAK,EAAE,CAAC;wBACN,IAAI,EAAE,SAAS;wBACf,OAAO;wBACP,cAAc;wBACd,OAAO,EAAE,GAAG;wBACZ,sBAAsB,EAAE,KAAK;wBAC7B,aAAa,EAAE,qBAAqB;qBACrC,CAAC;aACH,CAAC;IACN,CAAC;AACH,CAAC;AAED,+EAA+E;AAC/E;;;;;GAKG;AACH,MAAM,UAAU,yBAAyB,CAAC,UAAkB,EAAE,YAAoB;IAChF,OAAO;QACL,qBAAqB;QACrB,iFAAiF;QACjF,oEAAoE;QACpE,+DAA+D;QAC/D,EAAE;QACF,0CAA0C;QAC1C,kCAAkC,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,GAAG;QACjE,EAAE;QACF,kDAAkD;QAClD,sEAAsE;QACtE,uEAAuE;QACvE,sDAAsD;QACtD,UAAU,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,IAAI;QAC5D,EAAE;KACH,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC;AAED,+EAA+E;AAC/E,MAAM,OAAO,kBAAkB;IACpB,MAAM,GAAG,OAAO,CAAC;IAE1B,KAAK,CAAC,OAAO,CAAC,GAAuB;QACnC,MAAM,UAAU,GAAG,aAAa,EAAE,CAAC;QACnC,MAAM,aAAa,GAAG,qBAAqB,EAAE,CAAC;QAC9C,MAAM,UAAU,GAAG,mBAAmB,EAAE,CAAC;QAEzC,sCAAsC;QACtC,MAAM,UAAU,GAAG,iBAAiB,EAAE,CAAC;QACvC,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,MAAM,EAAE,IAAI,CAAC,MAAM;gBACnB,UAAU,EAAE,aAAa;gBACzB,YAAY,EAAE,SAAS;gBACvB,MAAM,EAAE,mHAAmH;gBAC3H,UAAU,EAAE,8HAA8H;aAC3I,CAAC;QACJ,CAAC;QAED,2DAA2D;QAC3D,yEAAyE;QACzE,sEAAsE;QACtE,qEAAqE;QACrE,IAAI,CAAC;YACH,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;gBAC5B,SAAS,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YAC7C,CAAC;YACD,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,mBAAmB,CAAC,CAAC;YAC/D,MAAM,cAAc,GAAG,yBAAyB,CAAC,UAAU,EAAE,GAAG,CAAC,YAAY,CAAC,CAAC;YAC/E,aAAa,CAAC,WAAW,EAAE,cAAc,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC;YAElE,+EAA+E;YAC/E,4EAA4E;YAC5E,0EAA0E;YAC1E,0EAA0E;YAC1E,qEAAqE;YACrE,iDAAiD;YACjD,MAAM,YAAY,GAAG,IAAI,CAAC,cAAc,CAAC,aAAa,EAAE,WAAW,EAAE,GAAG,CAAC,YAAY,CAAC,CAAC;YAEvF,IAAI,YAAY,KAAK,WAAW,EAAE,CAAC;gBACjC,OAAO;oBACL,OAAO,EAAE,KAAK;oBACd,MAAM,EAAE,IAAI,CAAC,MAAM;oBACnB,UAAU,EAAE,aAAa;oBACzB,YAAY;oBACZ,MAAM,EAAE,GAAG,aAAa,8GAA8G;oBACtI,UAAU,EAAE,gBAAgB,aAAa,4FAA4F;iBACtI,CAAC;YACJ,CAAC;YAED,oEAAoE;YACpE,yEAAyE;YACzE,aAAa,CAAC,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC;gBACvC,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;gBACrC,YAAY,EAAE,GAAG,CAAC,YAAY;gBAC9B,UAAU;gBACV,WAAW;gBACX,MAAM,EAAE,YAAY;aACrB,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC;YAEpC,OAAO;gBACL,OAAO,EAAE,IAAI;gBACb,MAAM,EAAE,IAAI,CAAC,MAAM;gBACnB,UAAU,EAAE,aAAa;gBACzB,YAAY;gBACZ,UAAU,EAAE,0HAA0H;aACvI,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,MAAM,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAChE,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,MAAM,EAAE,IAAI,CAAC,MAAM;gBACnB,UAAU,EAAE,aAAa;gBACzB,YAAY,EAAE,SAAS;gBACvB,MAAM,EAAE,sCAAsC,MAAM,EAAE;gBACtD,UAAU,EAAE,8BAA8B,UAAU,QAAQ,aAAa,0BAA0B;aACpG,CAAC;QACJ,CAAC;IACH,CAAC;IAED;;;;;OAKG;IACH,qEAAqE;IAC7D,cAAc,CACpB,aAAqB,EACrB,WAAmB,EACnB,YAAoB;QAEpB,MAAM,QAAQ,GAAG,WAAW,EAAE,CAAC;QAC/B,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC1B,SAAS,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC3C,CAAC;QAED,IAAI,QAAQ,GAA4B,EAAE,CAAC;QAC3C,IAAI,MAAM,GAAwC,SAAS,CAAC;QAE5D,wEAAwE;QACxE,iFAAiF;QACjF,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,YAAY,CAAC,aAAa,EAAE,OAAO,CAAC,CAAC;YACjD,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YACxC,IAAI,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;gBACrB,QAAQ,GAAG,EAAE,GAAG,MAAM,EAAE,CAAC;gBACzB,MAAM,GAAG,SAAS,CAAC;YACrB,CAAC;iBAAM,CAAC;gBACN,wCAAwC;gBACxC,MAAM,GAAG,WAAW,CAAC;YACvB,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,IAAI,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;YAC/B,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACtB,wDAAwD;YAC1D,CAAC;iBAAM,CAAC;gBACN,4BAA4B;gBAC5B,MAAM,GAAG,WAAW,CAAC;YACvB,CAAC;QACH,CAAC;QAED,IAAI,MAAM,KAAK,WAAW,EAAE,CAAC;YAC3B,OAAO,MAAM,CAAC;QAChB,CAAC;QAED,qEAAqE;QACrE,kEAAkE;QAClE,MAAM,SAAS,GAAG,UAAU,CAAC;QAC7B,KAAK,MAAM,SAAS,IAAI,YAAY,EAAE,CAAC;YACrC,MAAM,KAAK,GAAG,iBAAiB,CAAC,SAAS,EAAE,WAAW,EAAE,YAAY,CAAC,CAAC;YACtE,kEAAkE;YAClE,KAAK,CAAC,WAAW,GAAG,SAAS,CAAC;YAE9B,MAAM,cAAc,GAAG,QAAQ,CAAC,SAAS,CAAC,CAAC;YAC3C,IAAI,cAAc,CAAC,cAAc,CAAC,EAAE,CAAC;gBACnC,kEAAkE;gBAClE,qEAAqE;gBACrE,MAAM,QAAQ,GAAc,cAAc,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CACtD,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,aAAa,CAAC,IAAI,CAAC,CAAC,WAAW,KAAK,SAAS,CAAC,CACjF,CAAC;gBACF,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;gBACrB,QAAQ,CAAC,SAAS,CAAC,GAAG,QAAQ,CAAC;YACjC,CAAC;iBAAM,CAAC;gBACN,QAAQ,CAAC,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;YAChC,CAAC;QACH,CAAC;QAED,aAAa,CAAC,aAAa,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC;QACvF,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,IAA0B;QACxC,MAAM,aAAa,GAAG,qBAAqB,EAAE,CAAC;QAC9C,MAAM,UAAU,GAAG,mBAAmB,EAAE,CAAC;QACzC,MAAM,UAAU,GAAG,aAAa,EAAE,CAAC;QACnC,MAAM,YAAY,GAAa,EAAE,CAAC;QAClC,MAAM,cAAc,GAAa,EAAE,CAAC;QAEpC,8CAA8C;QAC9C,2EAA2E;QAC3E,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,YAAY,CAAC,aAAa,EAAE,OAAO,CAAC,CAAC;YACjD,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YACxC,IAAI,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;gBACrB,MAAM,MAAM,GAAG,EAAE,GAAG,MAAM,EAAE,CAAC;gBAC7B,IAAI,QAAQ,GAAG,KAAK,CAAC;gBACrB,MAAM,SAAS,GAAG,UAAU,CAAC;gBAE7B,KAAK,MAAM,SAAS,IAAI,YAAY,EAAE,CAAC;oBACrC,MAAM,MAAM,GAAG,MAAM,CAAC,SAAS,CAAC,CAAC;oBACjC,IAAI,cAAc,CAAC,MAAM,CAAC,EAAE,CAAC;wBAC3B,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;wBAC7B,iEAAiE;wBACjE,MAAM,QAAQ,GAAc,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAC9C,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,aAAa,CAAC,IAAI,CAAC,CAAC,WAAW,KAAK,SAAS,CAAC,CACjF,CAAC;wBACF,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;4BAC1B,OAAO,MAAM,CAAC,SAAS,CAAC,CAAC;wBAC3B,CAAC;6BAAM,CAAC;4BACN,MAAM,CAAC,SAAS,CAAC,GAAG,QAAQ,CAAC;wBAC/B,CAAC;wBACD,IAAI,QAAQ,CAAC,MAAM,KAAK,MAAM;4BAAE,QAAQ,GAAG,IAAI,CAAC;oBAClD,CAAC;gBACH,CAAC;gBAED,IAAI,QAAQ,EAAE,CAAC;oBACb,aAAa,CAAC,aAAa,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC;oBACrF,YAAY,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;gBACnC,CAAC;YACH,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,IAAI,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;YAC/B,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACtB,sEAAsE;YACxE,CAAC;iBAAM,CAAC;gBACN,6DAA6D;gBAC7D,cAAc,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;YACrC,CAAC;QACH,CAAC;QAED,yCAAyC;QACzC,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,mBAAmB,CAAC,CAAC;QAC/D,IAAI,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;YAC5B,IAAI,CAAC;gBACH,MAAM,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC;gBAC9B,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,WAAW,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;gBACnD,YAAY,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;YACjC,CAAC;YAAC,MAAM,CAAC;gBACP,cAAc,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;YACnC,CAAC;QACH,CAAC;QACD,IAAI,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;YAC3B,IAAI,CAAC;gBACH,MAAM,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC;gBAC9B,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,UAAU,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;gBAClD,YAAY,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YAChC,CAAC;YAAC,MAAM,CAAC;gBACP,cAAc,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YAClC,CAAC;QACH,CAAC;QAED,OAAO;YACL,OAAO,EAAE,cAAc,CAAC,MAAM,KAAK,CAAC;YACpC,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,YAAY;YACZ,cAAc;YACd,MAAM,EAAE,cAAc,CAAC,MAAM,GAAG,CAAC;gBAC/B,CAAC,CAAC,oCAAoC,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;gBACjE,CAAC,CAAC,SAAS;YACb,UAAU,EAAE,cAAc,CAAC,MAAM,GAAG,CAAC;gBACnC,CAAC,CAAC,qBAAqB,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;gBAClD,CAAC,CAAC,iGAAiG;SACtG,CAAC;IACJ,CAAC;IAED,qEAAqE;IACrE,MAAM;QACJ,MAAM,UAAU,GAAG,mBAAmB,EAAE,CAAC;QACzC,MAAM,aAAa,GAAG,qBAAqB,EAAE,CAAC;QAC9C,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,EAAE,mBAAmB,CAAC,CAAC;QAEpE,MAAM,KAAK,GAAG;YACZ;gBACE,MAAM,EAAE,UAAU,CAAC,UAAU,CAAC;gBAC9B,IAAI,EAAE,UAAU;gBAChB,IAAI,EAAE,yBAAyB;gBAC/B,IAAI,EAAE,MAAe;aACtB;YACD;gBACE,MAAM,EAAE,UAAU,CAAC,WAAW,CAAC;gBAC/B,IAAI,EAAE,WAAW;gBACjB,IAAI,EAAE,4BAA4B;gBAClC,IAAI,EAAE,MAAe;aACtB;YACD;gBACE,MAAM,EAAE,UAAU,CAAC,aAAa,CAAC;gBACjC,IAAI,EAAE,aAAa;gBACnB,IAAI,EAAE,kBAAkB;gBACxB,IAAI,EAAE,MAAe;aACtB;SACF,CAAC;QAEF,gFAAgF;QAChF,IAAI,SAAS,GAAG,UAAU,CAAC,UAAU,CAAC,CAAC;QACvC,IAAI,CAAC,SAAS,IAAI,UAAU,CAAC,aAAa,CAAC,EAAE,CAAC;YAC5C,IAAI,CAAC;gBACH,MAAM,GAAG,GAAG,YAAY,CAAC,aAAa,EAAE,OAAO,CAAC,CAAC;gBACjD,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;gBACxC,IAAI,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;oBACrB,KAAK,MAAM,SAAS,IAAI,YAAY,EAAE,CAAC;wBACrC,MAAM,MAAM,GAAG,MAAM,CAAC,SAAS,CAAC,CAAC;wBACjC,IAAI,cAAc,CAAC,MAAM,CAAC,EAAE,CAAC;4BAC3B,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAC9B,QAAQ,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,aAAa,CAAC,IAAI,CAAC,CAAC,WAAW,KAAK,UAAU,CAC/E,CAAC;4BACF,IAAI,KAAK,EAAE,CAAC;gCACV,SAAS,GAAG,IAAI,CAAC;gCACjB,MAAM;4BACR,CAAC;wBACH,CAAC;oBACH,CAAC;gBACH,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,+EAA+E;YACjF,CAAC;QACH,CAAC;QAED,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;IAC9B,CAAC;CACF"}
+{"version":3,"file":"codex-host-installer.js","sourceRoot":"","sources":["../../src/installers/codex-host-installer.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,IAAI,CAAC;AAC7D,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AACzC,OAAO,KAAK,IAAI,MAAM,MAAM,CAAC;AAC7B,OAAO,KAAK,EAAE,MAAM,IAAI,CAAC;AACzB,OAAO,EAAE,aAAa,EAAE,MAAM,QAAQ,CAAC;AACvC,OAAO,EAAE,aAAa,EAAE,MAAM,KAAK,CAAC;AACpC,OAAO,EAAE,gCAAgC,EAAE,MAAM,iBAAiB,CAAC;AAWnE,4EAA4E;AAC5E,4EAA4E;AAC5E,2EAA2E;AAC3E,4EAA4E;AAC5E,4DAA4D;AAC5D,6EAA6E;AAC7E,sEAAsE;AAEtE,MAAM,iBAAiB,GAAG,aAAa,CAAC,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC;AAEzD,+EAA+E;AAC/E,MAAM,YAAY,GAAG,CAAC,YAAY,EAAE,aAAa,EAAE,kBAAkB,EAAE,cAAc,CAAU,CAAC;AAEhG,MAAM,cAAc,GAAG,iBAAiB,CAAC;AAEzC,+EAA+E;AAC/E,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC;AAED,SAAS,cAAc,CAAC,KAAc;IACpC,OAAO,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9B,CAAC;AAED;;;GAGG;AACH,SAAS,YAAY,CAAC,GAAY;IAChC,IAAI,GAAG,KAAK,IAAI,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,EAAE,CAAC;QAC1E,MAAM,EAAE,IAAI,EAAE,GAAG,GAAyB,CAAC;QAC3C,OAAO,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;IACrD,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,+EAA+E;AAC/E,SAAS,WAAW;IAClB,OAAO,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,QAAQ,CAAC,CAAC;AAC3C,CAAC;AAED,SAAS,qBAAqB;IAC5B,OAAO,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,YAAY,CAAC,CAAC;AAChD,CAAC;AAED,SAAS,aAAa;IACpB,OAAO,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;AACjD,CAAC;AAED,SAAS,mBAAmB;IAC1B,OAAO,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,EAAE,cAAc,CAAC,CAAC;AACpD,CAAC;AAED;;;;;;;;;;;;;;;GAeG;AACH,SAAS,gBAAgB;IACvB,2EAA2E;IAC3E,uEAAuE;IACvE,4DAA4D;IAC5D,IAAI,CAAC,gCAAgC,EAAE;QAAE,OAAO,SAAS,CAAC;IAC1D,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,QAAQ,CAAC,aAAa,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QACrG,OAAO,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;IAC5C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,MAAM,UAAU,2BAA2B,CAAC,GAAW;IACrD,IAAI,CAAC;QACH,uEAAuE;QACvE,sDAAsD;QACtD,OAAO,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,sBAAsB,CAAC,CAAC,CAAC,OAAO,CAAC,mCAAmC,CAAC,CAAC;IAC5G,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAQD,MAAM,UAAU,iBAAiB,CAAC,IAAI,GAAmB,EAAE;IACzD,MAAM,YAAY,GAA8C,IAAI,CAAC,YAAY;WAC5E,CAAC,CAAC,SAAS,EAAE,EAAE;YAChB,IAAI,CAAC;gBAAC,OAAO,iBAAiB,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC;gBAAC,OAAO,SAAS,CAAC;YAAC,CAAC;QAClF,CAAC,CAAC,CAAC;IACL,MAAM,aAAa,GAAG,IAAI,CAAC,aAAa,IAAI,gBAAgB,CAAC;IAC7D,MAAM,cAAc,GAAG,IAAI,CAAC,cAAc,IAAI,2BAA2B,CAAC;IAE1E,MAAM,KAAK,GAAG,YAAY,CAAC,mCAAmC,CAAC,CAAC;IAChE,IAAI,KAAK;QAAE,OAAO,KAAK,CAAC;IAExB,MAAM,UAAU,GAAG,aAAa,EAAE,CAAC;IACnC,IAAI,UAAU,EAAE,CAAC;QACf,MAAM,UAAU,GAAG,cAAc,CAAC,UAAU,CAAC,CAAC;QAC9C,IAAI,UAAU;YAAE,OAAO,UAAU,CAAC;IACpC,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;;;GAKG;AAEH,+EAA+E;AAC/E;;;;;GAKG;AACH,MAAM,UAAU,yBAAyB,CAAC,UAAkB,EAAE,YAAoB;IAChF,OAAO;QACL,qBAAqB;QACrB,iFAAiF;QACjF,oEAAoE;QACpE,+DAA+D;QAC/D,EAAE;QACF,0CAA0C;QAC1C,kCAAkC,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,GAAG;QACjE,EAAE;QACF,kDAAkD;QAClD,sEAAsE;QACtE,uEAAuE;QACvE,sDAAsD;QACtD,UAAU,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,IAAI;QAC5D,EAAE;KACH,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC;AAED,+EAA+E;AAC/E,8DAA8D;AAC9D,4EAA4E;AAC5E,2EAA2E;AAC3E,sEAAsE;AACtE,2EAA2E;AAC3E,6CAA6C;AAE7C,MAAM,UAAU,iCAAiC,CAAC,qBAA8B;IAC9E,MAAM,aAAa,GAAG,qBAAqB,IAAI,qBAAqB,EAAE,CAAC;IACvE,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,aAAa,EAAE,OAAO,CAAC,CAAC,CAAC;IAC5D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,sBAAsB,EAAE,KAAK,EAAE,CAAC;IAC5D,CAAC;IACD,+EAA+E;IAC/E,4EAA4E;IAC5E,4EAA4E;IAC5E,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC;QAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,sBAAsB,EAAE,KAAK,EAAE,CAAC;IACjF,IAAI,QAAQ,GAAG,KAAK,CAAC;IACrB,IAAI,sBAAsB,GAAG,KAAK,CAAC;IACnC,KAAK,MAAM,SAAS,IAAI,YAAY,EAAE,CAAC;QACrC,MAAM,MAAM,GAAG,MAAM,CAAC,SAAS,CAAC,CAAC;QACjC,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC;YAAE,SAAS;QACtC,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;YAC3B,IAAI,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,aAAa,CAAC,IAAI,KAAK,CAAC,WAAW,KAAK,UAAU,CAAC;gBAAE,SAAS;YAC5G,QAAQ,GAAG,IAAI,CAAC;YAChB,MAAM,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC;YAC5B,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC;gBAAE,SAAS;YACvC,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;gBAC5B,IAAI,QAAQ,CAAC,KAAK,CAAC,IAAI,SAAS,KAAK,aAAa,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC,IAAI,KAAK,CAAC,KAAK,KAAK,IAAI,EAAE,CAAC;oBAC5G,sBAAsB,GAAG,IAAI,CAAC;gBAChC,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,EAAE,QAAQ,EAAE,sBAAsB,EAAE,CAAC;AAC9C,CAAC;AAED,+EAA+E;AAC/E,MAAM,OAAO,kBAAkB;IACpB,MAAM,GAAG,OAAO,CAAC;IAE1B;;;;;;;;;OASG;IACH,KAAK,CAAC,OAAO,CAAC,IAAwB;QACpC,MAAM,aAAa,GAAG,qBAAqB,EAAE,CAAC;QAC9C,MAAM,MAAM,GAAG,iCAAiC,EAAE,CAAC;QACnD,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;YACpB,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,MAAM,EAAE,IAAI,CAAC,MAAM;gBACnB,UAAU,EAAE,aAAa;gBACzB,YAAY,EAAE,SAAS;gBACvB,MAAM,EAAE,mLAAmL;gBAC3L,UAAU,EAAE,0SAA0S;aACvT,CAAC;QACJ,CAAC;QACD,OAAO;YACL,OAAO,EAAE,KAAK;YACd,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,UAAU,EAAE,aAAa;YACzB,YAAY,EAAE,SAAS;YACvB,MAAM,EAAE,4IAA4I;YACpJ,UAAU,EAAE,mMAAmM;SAChN,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,IAA0B;QACxC,MAAM,aAAa,GAAG,qBAAqB,EAAE,CAAC;QAC9C,MAAM,UAAU,GAAG,mBAAmB,EAAE,CAAC;QACzC,MAAM,UAAU,GAAG,aAAa,EAAE,CAAC;QACnC,MAAM,YAAY,GAAa,EAAE,CAAC;QAClC,MAAM,cAAc,GAAa,EAAE,CAAC;QAEpC,8CAA8C;QAC9C,2EAA2E;QAC3E,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,YAAY,CAAC,aAAa,EAAE,OAAO,CAAC,CAAC;YACjD,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YACxC,IAAI,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;gBACrB,MAAM,MAAM,GAAG,EAAE,GAAG,MAAM,EAAE,CAAC;gBAC7B,IAAI,QAAQ,GAAG,KAAK,CAAC;gBACrB,MAAM,SAAS,GAAG,UAAU,CAAC;gBAE7B,KAAK,MAAM,SAAS,IAAI,YAAY,EAAE,CAAC;oBACrC,MAAM,MAAM,GAAG,MAAM,CAAC,SAAS,CAAC,CAAC;oBACjC,IAAI,cAAc,CAAC,MAAM,CAAC,EAAE,CAAC;wBAC3B,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;wBAC7B,iEAAiE;wBACjE,MAAM,QAAQ,GAAc,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAC9C,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,aAAa,CAAC,IAAI,CAAC,CAAC,WAAW,KAAK,SAAS,CAAC,CACjF,CAAC;wBACF,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;4BAC1B,OAAO,MAAM,CAAC,SAAS,CAAC,CAAC;wBAC3B,CAAC;6BAAM,CAAC;4BACN,MAAM,CAAC,SAAS,CAAC,GAAG,QAAQ,CAAC;wBAC/B,CAAC;wBACD,IAAI,QAAQ,CAAC,MAAM,KAAK,MAAM;4BAAE,QAAQ,GAAG,IAAI,CAAC;oBAClD,CAAC;gBACH,CAAC;gBAED,IAAI,QAAQ,EAAE,CAAC;oBACb,aAAa,CAAC,aAAa,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC;oBACrF,YAAY,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;gBACnC,CAAC;YACH,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,IAAI,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;YAC/B,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACtB,sEAAsE;YACxE,CAAC;iBAAM,CAAC;gBACN,6DAA6D;gBAC7D,cAAc,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;YACrC,CAAC;QACH,CAAC;QAED,yCAAyC;QACzC,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,mBAAmB,CAAC,CAAC;QAC/D,IAAI,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;YAC5B,IAAI,CAAC;gBACH,MAAM,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC;gBAC9B,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,WAAW,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;gBACnD,YAAY,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;YACjC,CAAC;YAAC,MAAM,CAAC;gBACP,cAAc,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;YACnC,CAAC;QACH,CAAC;QACD,IAAI,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;YAC3B,IAAI,CAAC;gBACH,MAAM,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC;gBAC9B,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,UAAU,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;gBAClD,YAAY,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YAChC,CAAC;YAAC,MAAM,CAAC;gBACP,cAAc,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YAClC,CAAC;QACH,CAAC;QAED,OAAO;YACL,OAAO,EAAE,cAAc,CAAC,MAAM,KAAK,CAAC;YACpC,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,YAAY;YACZ,cAAc;YACd,MAAM,EAAE,cAAc,CAAC,MAAM,GAAG,CAAC;gBAC/B,CAAC,CAAC,oCAAoC,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;gBACjE,CAAC,CAAC,SAAS;YACb,UAAU,EAAE,cAAc,CAAC,MAAM,GAAG,CAAC;gBACnC,CAAC,CAAC,qBAAqB,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;gBAClD,CAAC,CAAC,iGAAiG;SACtG,CAAC;IACJ,CAAC;IAED,qEAAqE;IACrE,MAAM;QACJ,MAAM,UAAU,GAAG,mBAAmB,EAAE,CAAC;QACzC,MAAM,aAAa,GAAG,qBAAqB,EAAE,CAAC;QAC9C,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,EAAE,mBAAmB,CAAC,CAAC;QAEpE,MAAM,KAAK,GAAG;YACZ;gBACE,MAAM,EAAE,UAAU,CAAC,UAAU,CAAC;gBAC9B,IAAI,EAAE,UAAU;gBAChB,IAAI,EAAE,yBAAyB;gBAC/B,IAAI,EAAE,MAAe;aACtB;YACD;gBACE,MAAM,EAAE,UAAU,CAAC,WAAW,CAAC;gBAC/B,IAAI,EAAE,WAAW;gBACjB,IAAI,EAAE,4BAA4B;gBAClC,IAAI,EAAE,MAAe;aACtB;YACD;gBACE,MAAM,EAAE,UAAU,CAAC,aAAa,CAAC;gBACjC,IAAI,EAAE,aAAa;gBACnB,IAAI,EAAE,kBAAkB;gBACxB,IAAI,EAAE,MAAe;aACtB;SACF,CAAC;QAEF,gFAAgF;QAChF,IAAI,SAAS,GAAG,UAAU,CAAC,UAAU,CAAC,CAAC;QACvC,IAAI,CAAC,SAAS,IAAI,UAAU,CAAC,aAAa,CAAC,EAAE,CAAC;YAC5C,IAAI,CAAC;gBACH,MAAM,GAAG,GAAG,YAAY,CAAC,aAAa,EAAE,OAAO,CAAC,CAAC;gBACjD,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;gBACxC,IAAI,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;oBACrB,KAAK,MAAM,SAAS,IAAI,YAAY,EAAE,CAAC;wBACrC,MAAM,MAAM,GAAG,MAAM,CAAC,SAAS,CAAC,CAAC;wBACjC,IAAI,cAAc,CAAC,MAAM,CAAC,EAAE,CAAC;4BAC3B,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAC9B,QAAQ,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,aAAa,CAAC,IAAI,CAAC,CAAC,WAAW,KAAK,UAAU,CAC/E,CAAC;4BACF,IAAI,KAAK,EAAE,CAAC;gCACV,SAAS,GAAG,IAAI,CAAC;gCACjB,MAAM;4BACR,CAAC;wBACH,CAAC;oBACH,CAAC;gBACH,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,+EAA+E;YACjF,CAAC;QACH,CAAC;QAED,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;IAC9B,CAAC;CACF"}

package/dist/update/apply-payload.d.ts

@@ -0,0 +1,88 @@
+/**
+ * PRI-698 Phase 1 — apply payload acquisition for the ReleaseManager.
+ *
+ * Bridges the signed metadata world (TUF-verified release metadata + artifact
+ * target) and the installer's deployment contract (a local, extracted,
+ * self-contained release-asset directory). Owns ONLY acquisition-side writes,
+ * strictly bounded to the ReleaseManager staging area:
+ *
+ *   ~/.pd/staging/<transactionId>/release-asset.tar.gz   (verified download)
+ *   ~/.pd/staging/<transactionId>/payload/               (extracted payload)
+ *
+ * Deployment writes (~/.pd/runtime, host extension dirs) belong exclusively
+ * to the installer; this module never touches them (ADR-0023 Decision 1,
+ * ADR-0024 §2.1). release-manager.ts itself stays free of filesystem
+ * mutation: it orchestrates, this helper acquires.
+ *
+ * Import-graph constraint: this module is reachable from the console's
+ * dynamically-imported authority module, so `installer.js` (the heavy CLI
+ * graph) is loaded via dynamic import at acquisition time only — the
+ * governed check path never pays for it.
+ *
+ * Artifact target convention (Phase 1, see
+ * docs/architecture/PRI-698-phase4-preflight-analysis.md §4): the release
+ * pipeline publishes each release asset as TUF target
+ *
+ *   releases/<releaseId>/release-asset-<platform>-<arch>.tar.gz
+ *
+ * with TUF `custom` identity {releaseId, channel, platform} and tarball
+ * contents = the release-asset directory at its root (no wrapping component
+ * directory). The pipeline does not publish these targets yet; the flag
+ * stays off in production until it does.
+ */
+import { resolveTrustedReleaseTarget, type TrustedReleaseTarget } from './trust-metadata.js';
+import type { ReleaseMetadata } from './release-metadata.js';
+import type { ReleaseChannelName } from './product-identity.js';
+import type { PdHomePaths } from './install-layout.js';
+type TrustFetcher = NonNullable<Parameters<typeof resolveTrustedReleaseTarget>[0]['fetcher']>;
+/** Acquisition failure with a stable reason; release-manager.ts maps it onto the ReleaseManagerError contract. */
+export declare class ApplyPayloadError extends Error {
+    readonly reason: 'metadata_refresh_failed' | 'release_metadata_invalid';
+    readonly nextAction: string;
+    constructor(reason: 'metadata_refresh_failed' | 'release_metadata_invalid', message: string, nextAction: string);
+}
+/**
+ * Select the release asset matching THIS runtime (platform + arch + node ABI)
+ * from the signed release metadata. A payload built for a different node ABI
+ * can break native modules after the swap, so a mismatch is a refusal, never
+ * a warning (rc-3: fail loud before any mutation).
+ */
+export declare function selectReleaseAsset(releaseMetadata: ReleaseMetadata): ReleaseMetadata['assets'][number];
+/** TUF target path of the release asset for THIS platform (Phase 1 convention). */
+export declare function releaseAssetTargetPath(releaseId: string): string;
+export interface DownloadReleaseAssetOptions {
+    readonly paths: PdHomePaths;
+    readonly metadataBaseUrl: string;
+    readonly fetcher?: TrustFetcher;
+    readonly releaseMetadata: ReleaseMetadata;
+    readonly channel: ReleaseChannelName;
+    /** Transaction the acquisition is journaled under; scopes the staging dir. */
+    readonly transactionId: string;
+}
+export interface DownloadedReleaseAsset {
+    readonly transactionDir: string;
+    readonly archivePath: string;
+    readonly trustedTarget: TrustedReleaseTarget;
+}
+/**
+ * Resolve the signed artifact target, cross-check the TUF identity and digest
+ * against the signed release metadata (rc-6), and download it with in-flight
+ * sha256 verification into `~/.pd/staging/<transactionId>/`.
+ * Zero writes happen before every identity check has passed.
+ */
+export declare function downloadReleaseAsset(options: DownloadReleaseAssetOptions): Promise<DownloadedReleaseAsset>;
+export interface ExtractAndVerifyOptions {
+    readonly transactionDir: string;
+    readonly archivePath: string;
+}
+/**
+ * Extract the verified archive inside the staging transaction dir and run the
+ * installer's own self-contained asset preflight (the same verification gate
+ * a manual `npx create-principles-disciple` run of this payload would face).
+ * Every write stays inside the staging transaction dir.
+ */
+export declare function extractAndVerifyReleaseAsset(options: ExtractAndVerifyOptions): Promise<{
+    payloadDir: string;
+}>;
+export {};
+//# sourceMappingURL=apply-payload.d.ts.map

package/dist/update/apply-payload.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"apply-payload.d.ts","sourceRoot":"","sources":["../../src/update/apply-payload.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AAKH,OAAO,EACL,2BAA2B,EAE3B,KAAK,oBAAoB,EAC1B,MAAM,qBAAqB,CAAC;AAC7B,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAC7D,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAChE,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAEvD,KAAK,YAAY,GAAG,WAAW,CAAC,UAAU,CAAC,OAAO,2BAA2B,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC;AAE9F,kHAAkH;AAClH,qBAAa,iBAAkB,SAAQ,KAAK;IAC1C,QAAQ,CAAC,MAAM,EAAE,yBAAyB,GAAG,0BAA0B,CAAC;IACxE,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAE5B,YAAY,MAAM,EAAE,yBAAyB,GAAG,0BAA0B,EAAE,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAK9G;CACF;AAED;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAAC,eAAe,EAAE,eAAe,GAAG,eAAe,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,CAoBtG;AAED,mFAAmF;AACnF,wBAAgB,sBAAsB,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CAEhE;AAED,MAAM,WAAW,2BAA2B;IAC1C,QAAQ,CAAC,KAAK,EAAE,WAAW,CAAC;IAC5B,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,OAAO,CAAC,EAAE,YAAY,CAAC;IAChC,QAAQ,CAAC,eAAe,EAAE,eAAe,CAAC;IAC1C,QAAQ,CAAC,OAAO,EAAE,kBAAkB,CAAC;IACrC,8EAA8E;IAC9E,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;CAChC;AAED,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,aAAa,EAAE,oBAAoB,CAAC;CAC9C;AAED;;;;;GAKG;AACH,wBAAsB,oBAAoB,CAAC,OAAO,EAAE,2BAA2B,GAAG,OAAO,CAAC,sBAAsB,CAAC,CA2DhH;AAED,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;CAC9B;AAsBD;;;;;GAKG;AACH,wBAAsB,4BAA4B,CAAC,OAAO,EAAE,uBAAuB,GAAG,OAAO,CAAC;IAAE,UAAU,EAAE,MAAM,CAAA;CAAE,CAAC,CA2BpH"}

package/dist/update/apply-payload.js

@@ -0,0 +1,166 @@
+/**
+ * PRI-698 Phase 1 — apply payload acquisition for the ReleaseManager.
+ *
+ * Bridges the signed metadata world (TUF-verified release metadata + artifact
+ * target) and the installer's deployment contract (a local, extracted,
+ * self-contained release-asset directory). Owns ONLY acquisition-side writes,
+ * strictly bounded to the ReleaseManager staging area:
+ *
+ *   ~/.pd/staging/<transactionId>/release-asset.tar.gz   (verified download)
+ *   ~/.pd/staging/<transactionId>/payload/               (extracted payload)
+ *
+ * Deployment writes (~/.pd/runtime, host extension dirs) belong exclusively
+ * to the installer; this module never touches them (ADR-0023 Decision 1,
+ * ADR-0024 §2.1). release-manager.ts itself stays free of filesystem
+ * mutation: it orchestrates, this helper acquires.
+ *
+ * Import-graph constraint: this module is reachable from the console's
+ * dynamically-imported authority module, so `installer.js` (the heavy CLI
+ * graph) is loaded via dynamic import at acquisition time only — the
+ * governed check path never pays for it.
+ *
+ * Artifact target convention (Phase 1, see
+ * docs/architecture/PRI-698-phase4-preflight-analysis.md §4): the release
+ * pipeline publishes each release asset as TUF target
+ *
+ *   releases/<releaseId>/release-asset-<platform>-<arch>.tar.gz
+ *
+ * with TUF `custom` identity {releaseId, channel, platform} and tarball
+ * contents = the release-asset directory at its root (no wrapping component
+ * directory). The pipeline does not publish these targets yet; the flag
+ * stays off in production until it does.
+ */
+import { execFileSync } from 'node:child_process';
+import * as fs from 'node:fs';
+import * as path from 'node:path';
+import { resolveTrustedReleaseTarget, downloadTrustedReleasePayload, } from './trust-metadata.js';
+/** Acquisition failure with a stable reason; release-manager.ts maps it onto the ReleaseManagerError contract. */
+export class ApplyPayloadError extends Error {
+    reason;
+    nextAction;
+    constructor(reason, message, nextAction) {
+        super(message);
+        this.name = 'ApplyPayloadError';
+        this.reason = reason;
+        this.nextAction = nextAction;
+    }
+}
+/**
+ * Select the release asset matching THIS runtime (platform + arch + node ABI)
+ * from the signed release metadata. A payload built for a different node ABI
+ * can break native modules after the swap, so a mismatch is a refusal, never
+ * a warning (rc-3: fail loud before any mutation).
+ */
+export function selectReleaseAsset(releaseMetadata) {
+    const { platform } = process;
+    const { arch } = process;
+    const nodeAbi = process.versions.modules;
+    const asset = releaseMetadata.assets.find((a) => a.platform === platform && a.arch === arch);
+    if (asset === undefined) {
+        throw new ApplyPayloadError('release_metadata_invalid', `Release ${releaseMetadata.productVersion} declares no asset for this platform (${platform}/${arch}); declared: ${releaseMetadata.assets.map((a) => `${a.platform}/${a.arch}`).join(', ') || 'none'}.`, 'Wait for a release asset covering this platform, or update from a supported host.');
+    }
+    if (asset.nodeAbi !== nodeAbi) {
+        throw new ApplyPayloadError('release_metadata_invalid', `Release ${releaseMetadata.productVersion} asset for ${platform}/${arch} targets node ABI ${asset.nodeAbi}, but this runtime is ABI ${nodeAbi}.`, 'Upgrade the bootstrap runtime first, or publish a release asset built for this node ABI.');
+    }
+    return asset;
+}
+/** TUF target path of the release asset for THIS platform (Phase 1 convention). */
+export function releaseAssetTargetPath(releaseId) {
+    return `releases/${releaseId}/release-asset-${process.platform}-${process.arch}.tar.gz`;
+}
+/**
+ * Resolve the signed artifact target, cross-check the TUF identity and digest
+ * against the signed release metadata (rc-6), and download it with in-flight
+ * sha256 verification into `~/.pd/staging/<transactionId>/`.
+ * Zero writes happen before every identity check has passed.
+ */
+export async function downloadReleaseAsset(options) {
+    const { paths, metadataBaseUrl, fetcher, releaseMetadata, channel, transactionId } = options;
+    const asset = selectReleaseAsset(releaseMetadata);
+    const targetPath = releaseAssetTargetPath(releaseMetadata.releaseId);
+    let trustedTarget;
+    try {
+        trustedTarget = await resolveTrustedReleaseTarget({
+            metadataDir: paths.trustDir,
+            metadataBaseUrl,
+            targetPath,
+            expectedChannel: channel,
+            expectedPlatform: process.platform,
+            fetcher,
+        });
+    }
+    catch (error) {
+        throw new ApplyPayloadError('metadata_refresh_failed', `The signed artifact target for release ${releaseMetadata.releaseId} could not be resolved: ${error instanceof Error ? error.message : String(error)}`, 'Verify that the release pipeline published this release asset to the signed repository, then retry.');
+    }
+    // rc-6: the TUF-signed identity and the release metadata must name the same
+    // release and the same bytes — a mismatch means the channel points at
+    // metadata the artifact repo does not answer for. Refuse before any write.
+    if (trustedTarget.releaseId !== releaseMetadata.releaseId) {
+        throw new ApplyPayloadError('release_metadata_invalid', `Signed artifact target names release ${trustedTarget.releaseId}, but the channel metadata names ${releaseMetadata.releaseId}.`, 'The release repository is inconsistent; wait for refreshed signed metadata. Nothing was modified.');
+    }
+    if (trustedTarget.artifactSha256 !== asset.archiveSha256) {
+        throw new ApplyPayloadError('release_metadata_invalid', 'The signed artifact digest disagrees with the digest in the signed release metadata.', 'The release repository is inconsistent; wait for refreshed signed metadata. Nothing was modified.');
+    }
+    const transactionDir = path.join(paths.stagingDir, transactionId);
+    const archivePath = path.join(transactionDir, 'release-asset.tar.gz');
+    fs.mkdirSync(transactionDir, { recursive: true });
+    try {
+        await downloadTrustedReleasePayload({
+            metadataDir: paths.trustDir,
+            metadataBaseUrl,
+            targetPath,
+            destinationPath: archivePath,
+            fetcher,
+        });
+    }
+    catch (error) {
+        throw new ApplyPayloadError('metadata_refresh_failed', `The signed release asset could not be downloaded: ${error instanceof Error ? error.message : String(error)}`, 'Check network access to the release repository and retry; nothing was deployed.');
+    }
+    return { transactionDir, archivePath, trustedTarget };
+}
+/**
+ * Extract the release-asset tarball with the same discipline as the legacy
+ * console updater (EP-08): spawn tar via an argv array so paths stay data,
+ * and use cwd + RELATIVE archive/dir paths — Git Bash GNU tar on Windows
+ * misparses `D:\...` as a remote host (ERR: "Cannot connect to C:"), while
+ * Windows System32 bsdtar does not support GNU's --force-local. Relative is
+ * the universal form.
+ */
+function extractReleaseAssetArchive(transactionDir, payloadDir) {
+    execFileSync('tar', ['xzf', 'release-asset.tar.gz', '-C', 'payload'], {
+        cwd: transactionDir,
+        stdio: 'pipe',
+    });
+    if (!fs.existsSync(path.join(payloadDir, '_release', 'manifest.json'))) {
+        throw new Error('the artifact tarball does not contain a self-contained release asset at its root (missing _release/manifest.json)');
+    }
+}
+/**
+ * Extract the verified archive inside the staging transaction dir and run the
+ * installer's own self-contained asset preflight (the same verification gate
+ * a manual `npx create-principles-disciple` run of this payload would face).
+ * Every write stays inside the staging transaction dir.
+ */
+export async function extractAndVerifyReleaseAsset(options) {
+    const { transactionDir, archivePath } = options;
+    if (!fs.existsSync(archivePath)) {
+        throw new ApplyPayloadError('release_metadata_invalid', `The verified release archive is missing from staging: ${archivePath}`, 'Nothing was deployed; the runtime is unchanged. Retry the update.');
+    }
+    const payloadDir = path.join(transactionDir, 'payload');
+    try {
+        fs.mkdirSync(payloadDir, { recursive: true });
+        extractReleaseAssetArchive(transactionDir, payloadDir);
+        // Dynamic import: keeps installer.js (and its CLI dependency graph) out
+        // of the module graph until a real acquisition needs it — the governed
+        // check path never pays for it.
+        const { preflightSelfContainedReleaseAsset } = await import('../installer.js');
+        await preflightSelfContainedReleaseAsset(payloadDir);
+    }
+    catch (error) {
+        if (error instanceof ApplyPayloadError)
+            throw error;
+        throw new ApplyPayloadError('release_metadata_invalid', `The downloaded release payload failed verification: ${error instanceof Error ? error.message : String(error)}`, 'Nothing was deployed; the runtime is unchanged. Retry the update after the release repository issue is resolved.');
+    }
+    return { payloadDir };
+}
+//# sourceMappingURL=apply-payload.js.map

package/dist/update/apply-payload.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"apply-payload.js","sourceRoot":"","sources":["../../src/update/apply-payload.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,EACL,2BAA2B,EAC3B,6BAA6B,GAE9B,MAAM,qBAAqB,CAAC;AAO7B,kHAAkH;AAClH,MAAM,OAAO,iBAAkB,SAAQ,KAAK;IACjC,MAAM,CAAyD;IAC/D,UAAU,CAAS;IAE5B,YAAY,MAA8D,EAAE,OAAe,EAAE,UAAkB;QAC7G,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,mBAAmB,CAAC;QAChC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;IAC/B,CAAC;CACF;AAED;;;;;GAKG;AACH,MAAM,UAAU,kBAAkB,CAAC,eAAgC;IACjE,MAAM,EAAC,QAAQ,EAAC,GAAG,OAAO,CAAC;IAC3B,MAAM,EAAC,IAAI,EAAC,GAAG,OAAO,CAAC;IACvB,MAAM,OAAO,GAAG,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC;IACzC,MAAM,KAAK,GAAG,eAAe,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;IAC7F,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,MAAM,IAAI,iBAAiB,CACzB,0BAA0B,EAC1B,WAAW,eAAe,CAAC,cAAc,yCAAyC,QAAQ,IAAI,IAAI,gBAAgB,eAAe,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,MAAM,GAAG,EACtM,mFAAmF,CACpF,CAAC;IACJ,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,KAAK,OAAO,EAAE,CAAC;QAC9B,MAAM,IAAI,iBAAiB,CACzB,0BAA0B,EAC1B,WAAW,eAAe,CAAC,cAAc,cAAc,QAAQ,IAAI,IAAI,qBAAqB,KAAK,CAAC,OAAO,6BAA6B,OAAO,GAAG,EAChJ,0FAA0F,CAC3F,CAAC;IACJ,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,mFAAmF;AACnF,MAAM,UAAU,sBAAsB,CAAC,SAAiB;IACtD,OAAO,YAAY,SAAS,kBAAkB,OAAO,CAAC,QAAQ,IAAI,OAAO,CAAC,IAAI,SAAS,CAAC;AAC1F,CAAC;AAkBD;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,OAAoC;IAC7E,MAAM,EAAE,KAAK,EAAE,eAAe,EAAE,OAAO,EAAE,eAAe,EAAE,OAAO,EAAE,aAAa,EAAE,GAAG,OAAO,CAAC;IAC7F,MAAM,KAAK,GAAG,kBAAkB,CAAC,eAAe,CAAC,CAAC;IAClD,MAAM,UAAU,GAAG,sBAAsB,CAAC,eAAe,CAAC,SAAS,CAAC,CAAC;IAErE,IAAI,aAAmC,CAAC;IACxC,IAAI,CAAC;QACH,aAAa,GAAG,MAAM,2BAA2B,CAAC;YAChD,WAAW,EAAE,KAAK,CAAC,QAAQ;YAC3B,eAAe;YACf,UAAU;YACV,eAAe,EAAE,OAAO;YACxB,gBAAgB,EAAE,OAAO,CAAC,QAAQ;YAClC,OAAO;SACR,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,iBAAiB,CACzB,yBAAyB,EACzB,0CAA0C,eAAe,CAAC,SAAS,2BAA2B,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,EACtJ,qGAAqG,CACtG,CAAC;IACJ,CAAC;IACD,4EAA4E;IAC5E,sEAAsE;IACtE,2EAA2E;IAC3E,IAAI,aAAa,CAAC,SAAS,KAAK,eAAe,CAAC,SAAS,EAAE,CAAC;QAC1D,MAAM,IAAI,iBAAiB,CACzB,0BAA0B,EAC1B,wCAAwC,aAAa,CAAC,SAAS,oCAAoC,eAAe,CAAC,SAAS,GAAG,EAC/H,mGAAmG,CACpG,CAAC;IACJ,CAAC;IACD,IAAI,aAAa,CAAC,cAAc,KAAK,KAAK,CAAC,aAAa,EAAE,CAAC;QACzD,MAAM,IAAI,iBAAiB,CACzB,0BAA0B,EAC1B,sFAAsF,EACtF,mGAAmG,CACpG,CAAC;IACJ,CAAC;IAED,MAAM,cAAc,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,EAAE,aAAa,CAAC,CAAC;IAClE,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,sBAAsB,CAAC,CAAC;IACtE,EAAE,CAAC,SAAS,CAAC,cAAc,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAClD,IAAI,CAAC;QACH,MAAM,6BAA6B,CAAC;YAClC,WAAW,EAAE,KAAK,CAAC,QAAQ;YAC3B,eAAe;YACf,UAAU;YACV,eAAe,EAAE,WAAW;YAC5B,OAAO;SACR,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,iBAAiB,CACzB,yBAAyB,EACzB,qDAAqD,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,EAC7G,iFAAiF,CAClF,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,cAAc,EAAE,WAAW,EAAE,aAAa,EAAE,CAAC;AACxD,CAAC;AAOD;;;;;;;GAOG;AACH,SAAS,0BAA0B,CAAC,cAAsB,EAAE,UAAkB;IAC5E,YAAY,CAAC,KAAK,EAAE,CAAC,KAAK,EAAE,sBAAsB,EAAE,IAAI,EAAE,SAAS,CAAC,EAAE;QACpE,GAAG,EAAE,cAAc;QACnB,KAAK,EAAE,MAAM;KACd,CAAC,CAAC;IACH,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,UAAU,EAAE,eAAe,CAAC,CAAC,EAAE,CAAC;QACvE,MAAM,IAAI,KAAK,CACb,mHAAmH,CACpH,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,4BAA4B,CAAC,OAAgC;IACjF,MAAM,EAAE,cAAc,EAAE,WAAW,EAAE,GAAG,OAAO,CAAC;IAChD,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;QAChC,MAAM,IAAI,iBAAiB,CACzB,0BAA0B,EAC1B,yDAAyD,WAAW,EAAE,EACtE,mEAAmE,CACpE,CAAC;IACJ,CAAC;IACD,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,SAAS,CAAC,CAAC;IACxD,IAAI,CAAC;QACH,EAAE,CAAC,SAAS,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC9C,0BAA0B,CAAC,cAAc,EAAE,UAAU,CAAC,CAAC;QACvD,wEAAwE;QACxE,uEAAuE;QACvE,gCAAgC;QAChC,MAAM,EAAE,kCAAkC,EAAE,GAAG,MAAM,MAAM,CAAC,iBAAiB,CAAC,CAAC;QAC/E,MAAM,kCAAkC,CAAC,UAAU,CAAC,CAAC;IACvD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,iBAAiB;YAAE,MAAM,KAAK,CAAC;QACpD,MAAM,IAAI,iBAAiB,CACzB,0BAA0B,EAC1B,uDAAuD,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,EAC/G,kHAAkH,CACnH,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,UAAU,EAAE,CAAC;AACxB,CAAC"}

package/dist/update/bootstrap-protocol.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"bootstrap-protocol.d.ts","sourceRoot":"","sources":["../../src/update/bootstrap-protocol.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAEhE,OAAO,KAAK,EAAE,cAAc,EAAC,MAAM,sBAAsB,CAAC;AAG1D,MAAM,MAAM,kBAAkB,GAAG,SAAS,GAAG,OAAO,GAAG,OAAO,GAAG,UAAU,CAAC;AAE5E,MAAM,MAAM,gBAAgB,GACxB;IAAE,QAAQ,CAAC,EAAE,EAAE,SAAS,CAAA;CAAE,GAC1B;IAAE,QAAQ,CAAC,EAAE,EAAE,OAAO,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,kBAAkB,CAAA;CAAE,GAC9D;IAAE,QAAQ,CAAC,EAAE,EAAE,OAAO,CAAC;IAAC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;CAAE,GACpD;IAAE,QAAQ,CAAC,EAAE,EAAE,UAAU,CAAA;CAAE,CAAC;AAEhC,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAC;IAClB,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;CAC1B;AAED,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,EAAE,EAAE,KAAK,CAAC;IACnB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;CAC7B;AAED,MAAM,MAAM,iBAAiB,GAAG,mBAAmB,GAAG,wBAAwB,CAAC;AAE/E,qBAAa,sBAAuB,SAAQ,KAAK;IAC/C,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IAExB,YAAY,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAI1C;CACF;AAED;;;;;GAKG;AACH,wBAAgB,qBAAqB,CAAC,GAAG,EAAE,MAAM,GAAG,gBAAgB,CAsDnE;AAED,iFAAiF;AACjF,wBAAgB,0BAA0B,CAAC,QAAQ,EAAE,iBAAiB,GAAG,MAAM,CAE9E;AAED;;;;GAIG;AACH,wBAAsB,sBAAsB,CAC1C,OAAO,EAAE,gBAAgB,EACzB,OAAO,EAAE,cAAc,GACtB,OAAO,CAAC,iBAAiB,CAAC,CAsC5B"}
+{"version":3,"file":"bootstrap-protocol.d.ts","sourceRoot":"","sources":["../../src/update/bootstrap-protocol.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAEhE,OAAO,KAAK,EAAE,cAAc,EAAC,MAAM,sBAAsB,CAAC;AAG1D,MAAM,MAAM,kBAAkB,GAAG,SAAS,GAAG,OAAO,GAAG,OAAO,GAAG,UAAU,CAAC;AAE5E,MAAM,MAAM,gBAAgB,GACxB;IAAE,QAAQ,CAAC,EAAE,EAAE,SAAS,CAAA;CAAE,GAC1B;IAAE,QAAQ,CAAC,EAAE,EAAE,OAAO,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,kBAAkB,CAAA;CAAE,GAC9D;IAAE,QAAQ,CAAC,EAAE,EAAE,OAAO,CAAC;IAAC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;CAAE,GACpD;IAAE,QAAQ,CAAC,EAAE,EAAE,UAAU,CAAA;CAAE,CAAC;AAEhC,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAC;IAClB,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;CAC1B;AAED,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,EAAE,EAAE,KAAK,CAAC;IACnB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;CAC7B;AAED,MAAM,MAAM,iBAAiB,GAAG,mBAAmB,GAAG,wBAAwB,CAAC;AAE/E,qBAAa,sBAAuB,SAAQ,KAAK;IAC/C,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IAExB,YAAY,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAI1C;CACF;AAED;;;;;GAKG;AACH,wBAAgB,qBAAqB,CAAC,GAAG,EAAE,MAAM,GAAG,gBAAgB,CAsDnE;AAED,iFAAiF;AACjF,wBAAgB,0BAA0B,CAAC,QAAQ,EAAE,iBAAiB,GAAG,MAAM,CAE9E;AAED;;;;GAIG;AACH,wBAAsB,sBAAsB,CAC1C,OAAO,EAAE,gBAAgB,EACzB,OAAO,EAAE,cAAc,GACtB,OAAO,CAAC,iBAAiB,CAAC,CAkD5B"}