devchain-cli 0.24.2 → 0.26.0

package/dist/server/modules/remotes/operations/git-owner.dto.js

@@ -1,15 +1,7 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.RemoteSessionSchema = exports.GitOwnerStatusQuerySchema = exports.GitOwnerProjectSchema = void 0;
-exports.gitOwnerCommand = gitOwnerCommand;
+exports.RemoteSessionSchema = exports.GitOwnerStatusQuerySchema = void 0;
 const zod_1 = require("zod");
-exports.GitOwnerProjectSchema = zod_1.z
-    .object({
-    projectId: zod_1.z.string().min(1),
-    owner: zod_1.z.enum(['home', 'vm']),
-    force: zod_1.z.boolean().default(false),
-})
-    .strict();
 exports.GitOwnerStatusQuerySchema = zod_1.z.object({ projectId: zod_1.z.string().min(1) }).strict();
 exports.RemoteSessionSchema = zod_1.z.object({
     id: zod_1.z.string(),
@@ -19,7 +11,4 @@ exports.RemoteSessionSchema = zod_1.z.object({
     activityState: zod_1.z.enum(['busy', 'idle']).nullable().optional().default(null),
     busySince: zod_1.z.string().nullable().optional().default(null),
 });
-function gitOwnerCommand(owner, force) {
-    return owner === 'home' ? `devchain git take${force ? ' --force' : ''}` : 'devchain git return';
-}
 //# sourceMappingURL=git-owner.dto.js.map

package/dist/server/modules/remotes/operations/git-owner.dto.js.map

@@ -1 +1 @@
-{"version":3,"file":"git-owner.dto.js","sourceRoot":"","sources":["../../../../src/modules/remotes/operations/git-owner.dto.ts"],"names":[],"mappings":";;;AAkEA,0CAEC;AApED,6BAAwB;AAKX,QAAA,qBAAqB,GAAG,OAAC;KACnC,MAAM,CAAC;IACN,SAAS,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC5B,KAAK,EAAE,OAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IAC7B,KAAK,EAAE,OAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;CAClC,CAAC;KACD,MAAM,EAAE,CAAC;AACC,QAAA,yBAAyB,GAAG,OAAC,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;AAEhF,QAAA,mBAAmB,GAAG,OAAC,CAAC,MAAM,CAAC;IAC1C,EAAE,EAAE,OAAC,CAAC,MAAM,EAAE;IACd,OAAO,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC9B,MAAM,EAAE,OAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC;IAChD,SAAS,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAChC,aAAa,EAAE,OAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;IAC3E,SAAS,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;CAC1D,CAAC,CAAC;AA6CH,SAAgB,eAAe,CAAC,KAAe,EAAE,KAAc;IAC7D,OAAO,KAAK,KAAK,MAAM,CAAC,CAAC,CAAC,oBAAoB,KAAK,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,qBAAqB,CAAC;AAClG,CAAC"}
+{"version":3,"file":"git-owner.dto.js","sourceRoot":"","sources":["../../../../src/modules/remotes/operations/git-owner.dto.ts"],"names":[],"mappings":";;;AAAA,6BAAwB;AAIX,QAAA,yBAAyB,GAAG,OAAC,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;AAEhF,QAAA,mBAAmB,GAAG,OAAC,CAAC,MAAM,CAAC;IAC1C,EAAE,EAAE,OAAC,CAAC,MAAM,EAAE;IACd,OAAO,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC9B,MAAM,EAAE,OAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC;IAChD,SAAS,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAChC,aAAa,EAAE,OAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;IAC3E,SAAS,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;CAC1D,CAAC,CAAC"}

package/dist/server/modules/remotes/operations/guarded-vm-destroy.d.ts

@@ -1,6 +1,8 @@
 import type { RemoteStorage } from '../../storage/interfaces/storage.interface';
 import type { RemoteOperation } from '../../storage/models/domain.models';
 import type { VmProvidersService } from '../../vm-providers/vm-providers.service';
+export declare function confirmedVmGone(providers: VmProvidersService, connectionId: string, vmIdentity: string): Promise<boolean>;
+export declare function confirmedVmIdle(providers: VmProvidersService, connectionId: string, vmid: unknown): Promise<boolean>;
 export declare function destroyGuardedVm(input: {
     storage: RemoteStorage;
     providers: VmProvidersService;

package/dist/server/modules/remotes/operations/guarded-vm-destroy.js

@@ -1,8 +1,22 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
+exports.confirmedVmGone = confirmedVmGone;
+exports.confirmedVmIdle = confirmedVmIdle;
 exports.destroyGuardedVm = destroyGuardedVm;
 exports.destroyGuardedVmid = destroyGuardedVmid;
 const error_types_1 = require("../../../common/errors/error-types");
+async function confirmedVmGone(providers, connectionId, vmIdentity) {
+    try {
+        await (await providers.forConnection(connectionId)).assertOwnedVmIdentity(vmIdentity);
+    }
+    catch (error) {
+        return error instanceof error_types_1.NotFoundError;
+    }
+    return false;
+}
+async function confirmedVmIdle(providers, connectionId, vmid) {
+    return (typeof vmid === 'number' && (await providers.forConnection(connectionId)).confirmsVmIdle(vmid));
+}
 async function destroyGuardedVm(input) {
     const { storage, providers, operation, details, connectionId, vmIdentity, vmidKey, attemptKey } = input;
     const provider = await providers.forConnection(connectionId);

package/dist/server/modules/remotes/operations/guarded-vm-destroy.js.map

@@ -1 +1 @@
-{"version":3,"file":"guarded-vm-destroy.js","sourceRoot":"","sources":["../../../../src/modules/remotes/operations/guarded-vm-destroy.ts"],"names":[],"mappings":";;AAMA,4CA2BC;AAED,gDAoBC;AAvDD,oEAAmE;AAM5D,KAAK,UAAU,gBAAgB,CAAC,KAStC;IACC,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,OAAO,EAAE,UAAU,EAAE,GAC7F,KAAK,CAAC;IACR,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,aAAa,CAAC,YAAY,CAAC,CAAC;IAC7D,IAAI,OAAO,OAAO,CAAC,OAAO,CAAC,KAAK,QAAQ,EAAE,CAAC;QACzC,OAAO,CAAC,OAAO,CAAC,GAAG,MAAM,QAAQ,CAAC,qBAAqB,CAAC,UAAU,CAAC,CAAC;QACpE,MAAM,OAAO,CAAC,qBAAqB,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,GAAG,OAAO,EAAE,EAAE,CAAC,CAAC;IACjF,CAAC;IACD,MAAM,mBAAmB,GAAG,OAAO,CAAC,UAAU,CAAC,KAAK,IAAI,CAAC;IACzD,IAAI,CAAC,mBAAmB,EAAE,CAAC;QACzB,OAAO,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC;QAC3B,MAAM,OAAO,CAAC,qBAAqB,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,GAAG,OAAO,EAAE,EAAE,CAAC,CAAC;IACjF,CAAC;IACD,IAAI,CAAC;QACH,MAAM,QAAQ,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;IACvC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,CAAC,mBAAmB,IAAI,CAAC,CAAC,KAAK,YAAY,2BAAa,CAAC;YAAE,MAAM,KAAK,CAAC;IAC7E,CAAC;AACH,CAAC;AAEM,KAAK,UAAU,kBAAkB,CAAC,KAQxC;IACC,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,OAAO,EAAE,YAAY,EAAE,IAAI,EAAE,UAAU,EAAE,GAAG,KAAK,CAAC;IACzF,MAAM,mBAAmB,GAAG,OAAO,CAAC,UAAU,CAAC,KAAK,IAAI,CAAC;IACzD,IAAI,CAAC,mBAAmB,EAAE,CAAC;QACzB,OAAO,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC;QAC3B,MAAM,OAAO,CAAC,qBAAqB,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,GAAG,OAAO,EAAE,EAAE,CAAC,CAAC;IACjF,CAAC;IACD,IAAI,CAAC;QACH,MAAM,CAAC,MAAM,SAAS,CAAC,aAAa,CAAC,YAAY,CAAC,CAAC,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC;IAC7E,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,CAAC,mBAAmB,IAAI,CAAC,CAAC,KAAK,YAAY,2BAAa,CAAC;YAAE,MAAM,KAAK,CAAC;IAC7E,CAAC;AACH,CAAC"}
+{"version":3,"file":"guarded-vm-destroy.js","sourceRoot":"","sources":["../../../../src/modules/remotes/operations/guarded-vm-destroy.ts"],"names":[],"mappings":";;AAMA,0CAWC;AAGD,0CAQC;AAGD,4CA2BC;AAED,gDAoBC;AAhFD,oEAAmE;AAM5D,KAAK,UAAU,eAAe,CACnC,SAA6B,EAC7B,YAAoB,EACpB,UAAkB;IAElB,IAAI,CAAC;QACH,MAAM,CAAC,MAAM,SAAS,CAAC,aAAa,CAAC,YAAY,CAAC,CAAC,CAAC,qBAAqB,CAAC,UAAU,CAAC,CAAC;IACxF,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,KAAK,YAAY,2BAAa,CAAC;IACxC,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAGM,KAAK,UAAU,eAAe,CACnC,SAA6B,EAC7B,YAAoB,EACpB,IAAa;IAEb,OAAO,CACL,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAC,MAAM,SAAS,CAAC,aAAa,CAAC,YAAY,CAAC,CAAC,CAAC,cAAc,CAAC,IAAI,CAAC,CAC/F,CAAC;AACJ,CAAC;AAGM,KAAK,UAAU,gBAAgB,CAAC,KAStC;IACC,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,OAAO,EAAE,UAAU,EAAE,GAC7F,KAAK,CAAC;IACR,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,aAAa,CAAC,YAAY,CAAC,CAAC;IAC7D,IAAI,OAAO,OAAO,CAAC,OAAO,CAAC,KAAK,QAAQ,EAAE,CAAC;QACzC,OAAO,CAAC,OAAO,CAAC,GAAG,MAAM,QAAQ,CAAC,qBAAqB,CAAC,UAAU,CAAC,CAAC;QACpE,MAAM,OAAO,CAAC,qBAAqB,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,GAAG,OAAO,EAAE,EAAE,CAAC,CAAC;IACjF,CAAC;IACD,MAAM,mBAAmB,GAAG,OAAO,CAAC,UAAU,CAAC,KAAK,IAAI,CAAC;IACzD,IAAI,CAAC,mBAAmB,EAAE,CAAC;QACzB,OAAO,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC;QAC3B,MAAM,OAAO,CAAC,qBAAqB,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,GAAG,OAAO,EAAE,EAAE,CAAC,CAAC;IACjF,CAAC;IACD,IAAI,CAAC;QACH,MAAM,QAAQ,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;IACvC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,CAAC,mBAAmB,IAAI,CAAC,CAAC,KAAK,YAAY,2BAAa,CAAC;YAAE,MAAM,KAAK,CAAC;IAC7E,CAAC;AACH,CAAC;AAEM,KAAK,UAAU,kBAAkB,CAAC,KAQxC;IACC,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,OAAO,EAAE,YAAY,EAAE,IAAI,EAAE,UAAU,EAAE,GAAG,KAAK,CAAC;IACzF,MAAM,mBAAmB,GAAG,OAAO,CAAC,UAAU,CAAC,KAAK,IAAI,CAAC;IACzD,IAAI,CAAC,mBAAmB,EAAE,CAAC;QACzB,OAAO,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC;QAC3B,MAAM,OAAO,CAAC,qBAAqB,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,GAAG,OAAO,EAAE,EAAE,CAAC,CAAC;IACjF,CAAC;IACD,IAAI,CAAC;QACH,MAAM,CAAC,MAAM,SAAS,CAAC,aAAa,CAAC,YAAY,CAAC,CAAC,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC;IAC7E,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,CAAC,mBAAmB,IAAI,CAAC,CAAC,KAAK,YAAY,2BAAa,CAAC;YAAE,MAAM,KAAK,CAAC;IAC7E,CAAC;AACH,CAAC"}

package/dist/server/modules/remotes/operations/install-host.operation.d.ts

@@ -13,6 +13,10 @@ export interface InstallHostTiming {
 }
 export declare const INSTALL_HOST_TIMING: unique symbol;
 export interface InstallHostDetails extends ClaimDetails {
+    mode?: 'install' | 'join';
+    joinExpiresAt?: string;
+    joinInstallStarted?: boolean;
+    requestedPort?: number;
     address: string;
     sshUser: string;
     sshAuthKind: 'password' | 'key';
@@ -41,12 +45,16 @@ export declare class InstallHostOperation implements RemoteOperationDefinition {
     interrupt(operationId: string): Promise<void>;
     forget(operationId: string): void;
     completed(operation: RemoteOperation): Promise<void>;
-    retryFrom(operation: RemoteOperation): string | null;
+    retryFrom(operation: RemoteOperation): Promise<string | null>;
+    resumeFrom(operation: RemoteOperation): string | null;
     rollback(operation: RemoteOperation): Promise<void>;
     private connect;
     private check;
     private probeSudo;
     private install;
+    private installJoin;
+    private saveJoinedAddress;
+    private joinCommand;
     private readCertificate;
     private installStatus;
     private waitForInstall;
@@ -57,3 +65,15 @@ export declare class InstallHostOperation implements RemoteOperationDefinition {
     private renderBlock;
 }
 export declare function accountHomeCheckCommand(userName: string, homePath: string): string;
+export declare function joinedInstancePaths(userName: string): {
+    claim: string;
+    join: string;
+    prefix: string;
+    bootstrap: string;
+    unit: string;
+};
+export declare function installJobPaths(operationId: string): {
+    unit: string;
+    log: string;
+    exit: string;
+};

package/dist/server/modules/remotes/operations/install-host.operation.js

@@ -14,6 +14,8 @@ var __param = (this && this.__param) || function (paramIndex, decorator) {
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.InstallHostOperation = exports.INSTALL_HOST_TIMING = exports.HOST_INSTALL_PREFLIGHT_TIMEOUT_MS = void 0;
 exports.accountHomeCheckCommand = accountHomeCheckCommand;
+exports.joinedInstancePaths = joinedInstancePaths;
+exports.installJobPaths = installJobPaths;
 const common_1 = require("@nestjs/common");
 const promises_1 = require("node:timers/promises");
 const logger_1 = require("../../../common/logging/logger");
@@ -28,9 +30,6 @@ const remote_host_client_1 = require("./remote-host.client");
 const remote_operation_errors_1 = require("./remote-operation.errors");
 const remote_operation_types_1 = require("./remote-operation.types");
 const logger = (0, logger_1.createLogger)('InstallHostOperation');
-const INSTALL_LOG = '/var/log/devchain-host-install.log';
-const INSTALL_EXIT = '/run/devchain-host-install.exit';
-const INSTALL_UNIT = 'devchain-host-install';
 const PEM_CERTIFICATE = /^-----BEGIN CERTIFICATE-----\r?\n[A-Za-z0-9+/=\r\n]+-----END CERTIFICATE-----$/;
 const SUDO_PASSWORD_FAILURE = /password is required|no password was provided|incorrect password|sorry, try again|authentication fail/i;
 exports.HOST_INSTALL_PREFLIGHT_TIMEOUT_MS = 12 * 60_000;
@@ -93,16 +92,41 @@ let InstallHostOperation = class InstallHostOperation {
     async completed(operation) {
         this.forget(operation.id);
     }
-    retryFrom(operation) {
+    async retryFrom(operation) {
         this.cancellations.delete(operation.id);
+        const details = operation.details;
+        if (details.mode === 'join' && !details.claimed) {
+            if ((0, remote_operation_types_1.stepStarted)(operation, 'claim_claim') || !this.claim.hasJoinNonce(operation.id))
+                return 'install';
+            const runtime = details.tlsCertificate
+                ? await this.host.runtimeAt(details.bootstrapUrl, details.tlsCertificate).catch(() => null)
+                : null;
+            if (!runtime)
+                return 'install';
+        }
         const retry = this.claim.retryFrom(claimOperation(operation));
         return retry ? `claim_${retry}` : null;
     }
+    resumeFrom(operation) {
+        const details = operation.details;
+        return details.mode === 'join' && !details.claimed ? 'install' : null;
+    }
     async rollback(operation) {
         const details = operation.details;
         if (details.installStopRequired) {
             const credentials = this.requireCredentials(operation.id);
-            await this.ssh.withSession({ host: details.address, credentials, expectedFingerprint: requireFingerprint(details) }, (session) => this.stopInstall(session, credentials, details));
+            await this.ssh.withSession({ host: details.address, credentials, expectedFingerprint: requireFingerprint(details) }, (session) => this.stopInstall(session, credentials, details, operation.id));
+        }
+        if (details.mode === 'join' && details.joinRequestId && details.joinInstallStarted) {
+            const credentials = this.requireCredentials(operation.id);
+            await this.ssh.withSession({ host: details.address, credentials, expectedFingerprint: requireFingerprint(details) }, async (session) => {
+                const ownClaim = await session.exec(privilegedCommand(credentials, `test ! -f ${(0, ssh_runner_1.shellQuote)(joinedInstancePaths(details.userName).claim)}`), sudoInput(credentials));
+                if (ownClaim.code !== 0)
+                    throw new remote_operation_errors_1.RemoteOperationStepRefusedError('CLAIM_STARTED', 'The joined instance is already claimed; cancelling it is refused.');
+                const result = await this.joinCommand(session, credentials, details, '--cancel-join');
+                if (result.code !== 0)
+                    throw joinRefusal(result, 'HOST_JOIN_CANCEL_FAILED', 'Could not cancel the VM join; restore SSH access and cancel again.');
+            });
         }
         await this.claim.rollback(claimOperation(operation));
         this.forget(operation.id);
@@ -122,20 +146,45 @@ let InstallHostOperation = class InstallHostOperation {
         signal.throwIfAborted();
         install.checkWarnings = [];
         const credentials = this.requireCredentials(operation.id);
-        const block = await this.renderBlock(install, true);
         const collidingHome = await this.ssh.withSession({
             host: install.address,
             credentials,
             expectedFingerprint: requireFingerprint(install),
         }, async (session) => {
             await this.probeSudo(session, credentials, signal);
+            const state = await session.exec(privilegedCommand(credentials, "sh -c 'if test -f /etc/devchain-host/claim.json; then printf __DEVCHAIN_HOST_STATE__claimed; else printf __DEVCHAIN_HOST_STATE__unclaimed; fi'"), sudoInput(credentials), { signal, capture: 'private' });
+            if (state.code !== 0 ||
+                !['__DEVCHAIN_HOST_STATE__claimed', '__DEVCHAIN_HOST_STATE__unclaimed'].includes(state.stdout.trim()))
+                throw new remote_operation_errors_1.RemoteOperationStepRefusedError('HOST_INSTALL_CHECK_FAILED', 'Could not inspect the VM claim state.');
+            install.mode =
+                state.stdout.trim() === '__DEVCHAIN_HOST_STATE__claimed' ? 'join' : 'install';
+            if (install.mode === 'join') {
+                install.joinRequestId = operation.id;
+                install.requestedPort ??= install.port;
+            }
+            const block = await this.renderBlock(install, true);
             const path = await session.uploadTemp(block, { signal });
-            const result = await session.exec(privilegedCommand(credentials, `bash ${(0, ssh_runner_1.shellQuote)(path)} --check`), sudoInput(credentials), { timeoutMs: exports.HOST_INSTALL_PREFLIGHT_TIMEOUT_MS, signal });
+            const result = await session.exec(privilegedCommand(credentials, `bash ${(0, ssh_runner_1.shellQuote)(path)} --check`), sudoInput(credentials), {
+                timeoutMs: exports.HOST_INSTALL_PREFLIGHT_TIMEOUT_MS,
+                signal,
+                ...(install.mode === 'join' ? { capture: 'private' } : {}),
+            });
             install.checkWarnings = `${result.stdout}\n${result.stderr}`
                 .split(/\r?\n/)
                 .filter((line) => line.startsWith('WARNING: '))
                 .map((line) => line.slice('WARNING: '.length));
             if (result.code !== 0) {
+                if (install.mode === 'join') {
+                    const refusal = parseJoinError(result);
+                    if (refusal?.code === 'HOST_INSTALL_ACCOUNT_COLLISION')
+                        return refusal.accountHome ?? 'another folder';
+                    return {
+                        joinError: refusal ?? {
+                            code: 'HOST_JOIN_CHECK_FAILED',
+                            message: 'The VM refused the join check.',
+                        },
+                    };
+                }
                 const refusal = tail(`${result.stdout}\n${result.stderr}`.trim(), 2_000);
                 throw new remote_operation_errors_1.RemoteOperationStepRefusedError('HOST_INSTALL_CHECK_FAILED', refusal || 'The VM refused the host installation check.');
             }
@@ -151,6 +200,8 @@ let InstallHostOperation = class InstallHostOperation {
             }
             return undefined;
         });
+        if (collidingHome && typeof collidingHome === 'object')
+            throw new remote_operation_errors_1.RemoteOperationStepRefusedError(collidingHome.joinError.code, collidingHome.joinError.message);
         if (collidingHome !== undefined) {
             throw new remote_operation_errors_1.RemoteOperationStepRefusedError('HOST_INSTALL_ACCOUNT_COLLISION', `The VM account ${install.userName} already uses the home folder ${collidingHome}. ` +
                 `Correct that account's home folder to ${install.homePath}, or use a new VM.`);
@@ -176,6 +227,10 @@ let InstallHostOperation = class InstallHostOperation {
     async install({ operation, details, progress }) {
         const install = details;
         const credentials = this.requireCredentials(operation.id);
+        if (install.mode === 'join') {
+            await this.installJoin({ operation, details, progress }, credentials);
+            return;
+        }
         const block = await this.renderBlock(install, false);
         const { signal } = this.cancellation(operation.id);
         signal.throwIfAborted();
@@ -186,24 +241,24 @@ let InstallHostOperation = class InstallHostOperation {
             expectedFingerprint: requireFingerprint(install),
         }, async (session) => {
             try {
-                const status = await this.installStatus(session, credentials, deadline, signal);
+                const status = await this.installStatus(session, credentials, deadline, signal, operation.id);
                 if (status === 'absent') {
                     const path = await session.uploadTemp(block, { deadlineAt: deadline, signal });
                     signal.throwIfAborted();
-                    const start = await session.exec(privilegedCommand(credentials, detachedInstallCommand(path)), sudoInput(credentials), { deadlineAt: deadline, timeoutMs: 5_000 });
+                    const start = await session.exec(privilegedCommand(credentials, detachedInstallCommand(path, operation.id)), sudoInput(credentials), { deadlineAt: deadline, timeoutMs: 5_000 });
                     if (start.code !== 0) {
                         throw new remote_operation_errors_1.RemoteOperationStepRefusedError('HOST_INSTALL_START_FAILED', tail(start.stderr || start.stdout, 2_000) ||
                             'Could not start the host installation.');
                     }
                 }
-                await this.waitForInstall(session, credentials, progress, deadline, signal);
+                await this.waitForInstall(session, credentials, progress, deadline, signal, operation.id);
                 signal.throwIfAborted();
                 return await this.readCertificate(session, credentials, signal);
             }
             catch (error) {
                 if (signal.aborted) {
                     install.installStopRequired = true;
-                    await this.stopInstall(session, credentials, install);
+                    await this.stopInstall(session, credentials, install, operation.id);
                 }
                 throw error;
             }
@@ -211,16 +266,137 @@ let InstallHostOperation = class InstallHostOperation {
         await this.storage.updateRemoteTlsCertificate(operation.remoteId, certificate);
         install.tlsCertificate = certificate;
     }
+    async installJoin(run, credentials, deadline = Date.now() + this.timing.installTimeoutMs) {
+        const { operation, progress } = run;
+        const details = run.details;
+        const { signal } = this.cancellation(operation.id);
+        signal.throwIfAborted();
+        await this.ssh.withSession({ host: details.address, credentials, expectedFingerprint: requireFingerprint(details) }, async (session) => {
+            try {
+                if ((0, remote_operation_types_1.stepStarted)(operation, 'claim_claim')) {
+                    const claimFile = joinedInstancePaths(details.userName).claim;
+                    for (;;) {
+                        signal.throwIfAborted();
+                        const recorded = await session.exec(privilegedCommand(credentials, `sh -c ${(0, ssh_runner_1.shellQuote)(`if test -f ${(0, ssh_runner_1.shellQuote)(claimFile)}; then cat ${(0, ssh_runner_1.shellQuote)(claimFile)}; fi`)}`), sudoInput(credentials), { signal, deadlineAt: deadline, capture: 'private' });
+                        if (recorded.code !== 0)
+                            throw new remote_operation_errors_1.RemoteOperationStepRefusedError('HOST_JOIN_STATE_FAILED', 'Could not inspect this instance after the earlier claim.');
+                        if (recorded.stdout.trim()) {
+                            const record = JSON.parse(recorded.stdout);
+                            if (!isJoinRecord(record, details) ||
+                                record.port !== details.port ||
+                                record.version !== details.version)
+                                throw new remote_operation_errors_1.RemoteOperationStepRefusedError('INSTANCE_EXISTS', 'The existing instance does not match this join attempt.');
+                            const started = await session.exec(privilegedCommand(credentials, `systemctl start --no-block ${(0, ssh_runner_1.shellQuote)(joinedInstancePaths(details.userName).unit)}`), sudoInput(credentials), { signal });
+                            if (started.code !== 0)
+                                throw new remote_operation_errors_1.RemoteOperationStepRefusedError('HOST_JOIN_START_FAILED', 'Could not start the recorded instance service.');
+                            await this.saveJoinedAddress(operation.remoteId, details, session, credentials, signal);
+                            details.claimed = true;
+                            return;
+                        }
+                        const certificate = details.tlsCertificate ?? (await this.host.certificateOf(operation.remoteId));
+                        const runtime = await this.host
+                            .runtimeAt(details.bootstrapUrl, certificate)
+                            .catch(() => null);
+                        if (!claimInFlight(runtime))
+                            break;
+                        if (Date.now() >= deadline)
+                            throw new remote_operation_errors_1.RemoteOperationStepRefusedError('HOST_JOIN_CLAIM_TIMEOUT', 'The earlier claim did not record this instance within the installation timeout.');
+                        await (0, promises_1.setTimeout)(Math.min(this.timing.pollIntervalMs, deadline - Date.now()), undefined, { signal });
+                    }
+                }
+                details.joinInstallStarted = true;
+                await progress({ joinInstallStarted: true }, { durable: true });
+                const status = await this.installStatus(session, credentials, deadline, signal, operation.id);
+                if (status === 'absent') {
+                    const file = await session.uploadTemp(await this.renderBlock(details, false), {
+                        signal,
+                        deadlineAt: deadline,
+                    });
+                    const result = await session.exec(privilegedCommand(credentials, detachedInstallCommand(file, operation.id)), sudoInput(credentials), { deadlineAt: deadline, timeoutMs: 5_000 });
+                    if (result.code !== 0)
+                        throw new remote_operation_errors_1.RemoteOperationStepRefusedError('HOST_JOIN_START_FAILED', 'Could not start the detached VM join.');
+                }
+                await this.waitForInstall(session, credentials, progress, deadline, signal, operation.id, true);
+                signal.throwIfAborted();
+                const result = await this.joinCommand(session, credentials, details, '--reserve-join', signal);
+                if (result.code !== 0)
+                    throw joinRefusal(result, 'HOST_JOIN_RESERVE_FAILED', 'Could not resume the join reservation.');
+                let reservation;
+                try {
+                    reservation = JSON.parse(result.stdout);
+                }
+                catch {
+                    throw new remote_operation_errors_1.RemoteOperationStepRefusedError('HOST_JOIN_RESERVATION_INVALID', 'The VM returned an invalid join reservation.');
+                }
+                if (!isJoinRecord(reservation, details) ||
+                    typeof reservation.nonce !== 'string' ||
+                    !/^[a-f0-9]{64}$/.test(reservation.nonce) ||
+                    reservation.requestId !== details.joinRequestId ||
+                    typeof reservation.expiresAt !== 'string' ||
+                    !Number.isFinite(Date.parse(reservation.expiresAt)))
+                    throw new remote_operation_errors_1.RemoteOperationStepRefusedError('HOST_JOIN_RESERVATION_INVALID', 'The VM returned a mismatched join reservation.');
+                this.claim.seedJoinNonce(operation.id, reservation.nonce);
+                details.port = reservation.port;
+                details.joinExpiresAt = reservation.expiresAt;
+                const url = new URL(details.bootstrapUrl);
+                url.port = String(reservation.port);
+                url.protocol = 'https:';
+                details.bootstrapUrl = url.origin;
+                await progress({
+                    port: details.port,
+                    bootstrapUrl: details.bootstrapUrl,
+                    joinExpiresAt: details.joinExpiresAt,
+                }, { durable: true });
+                await this.saveJoinedAddress(operation.remoteId, details, session, credentials, signal);
+            }
+            catch (error) {
+                if (signal.aborted) {
+                    details.installStopRequired = true;
+                    await this.stopInstall(session, credentials, details, operation.id);
+                }
+                throw error;
+            }
+        });
+    }
+    async saveJoinedAddress(remoteId, details, session, credentials, signal) {
+        const certificate = await this.readCertificate(session, credentials, signal);
+        await this.storage.updateRemoteBaseUrl(remoteId, details.bootstrapUrl);
+        await this.storage.updateRemoteTlsCertificate(remoteId, certificate);
+        details.tlsCertificate = certificate;
+    }
+    async joinCommand(session, credentials, details, mode, signal) {
+        const input = {
+            userName: details.userName,
+            homePath: details.homePath,
+            port: details.requestedPort ?? details.port,
+            requestId: details.joinRequestId,
+            uid: details.uid,
+            gid: details.gid,
+        };
+        const file = await session.uploadTemp(JSON.stringify(input), { signal });
+        const own = joinedInstancePaths(details.userName);
+        const helper = own.bootstrap;
+        const cleanup = `test ! -f ${(0, ssh_runner_1.shellQuote)(own.claim)} && test ! -f ${(0, ssh_runner_1.shellQuote)(own.join)} || exit 3; rm -rf ${(0, ssh_runner_1.shellQuote)(own.prefix)}`;
+        const command = mode === '--cancel-join'
+            ? `if test -x ${(0, ssh_runner_1.shellQuote)(helper)}; then ${(0, ssh_runner_1.shellQuote)(helper)} ${mode} <${(0, ssh_runner_1.shellQuote)(file)} || exit $?; else printf '{"cancelled":true}\\n'; fi; flock --exclusive /etc/devchain-host/registry.lock sh -c ${(0, ssh_runner_1.shellQuote)(cleanup)}`
+            : `${(0, ssh_runner_1.shellQuote)(helper)} ${mode} <${(0, ssh_runner_1.shellQuote)(file)}`;
+        try {
+            return await session.exec(privilegedCommand(credentials, `sh -c ${(0, ssh_runner_1.shellQuote)(command)}`), sudoInput(credentials), { signal, timeoutMs: ssh_runner_1.SSH_COMMAND_TIMEOUT_MS, capture: 'private' });
+        }
+        finally {
+            await session.exec(`rm -f ${(0, ssh_runner_1.shellQuote)(file)}`).catch(() => undefined);
+        }
+    }
     async readCertificate(session, credentials, signal) {
-        const result = await session.exec(privilegedCommand(credentials, `cat ${(0, ssh_runner_1.shellQuote)(host_install_block_1.HOST_CERTIFICATE_PATH)}`), sudoInput(credentials), { timeoutMs: ssh_runner_1.SSH_COMMAND_TIMEOUT_MS, signal });
+        const result = await session.exec(privilegedCommand(credentials, `cat ${(0, ssh_runner_1.shellQuote)(host_install_block_1.HOST_CERTIFICATE_PATH)}`), sudoInput(credentials), { timeoutMs: ssh_runner_1.SSH_COMMAND_TIMEOUT_MS, signal, capture: 'private' });
         if (result.code !== 0) {
-            throw new remote_operation_errors_1.RemoteOperationStepRefusedError('HOST_TLS_CERTIFICATE_UNREADABLE', `Could not read the VM certificate ${host_install_block_1.HOST_CERTIFICATE_PATH} over SSH` +
-                (result.stderr.trim() ? `: ${tail(result.stderr.trim(), 300)}` : '.'));
+            throw new remote_operation_errors_1.RemoteOperationStepRefusedError('HOST_TLS_CERTIFICATE_UNREADABLE', `Could not read the VM certificate ${host_install_block_1.HOST_CERTIFICATE_PATH} over SSH.`);
         }
         return parseVmCertificate(result.stdout);
     }
-    async installStatus(session, credentials, deadline, signal) {
-        const command = `if test -f ${(0, ssh_runner_1.shellQuote)(INSTALL_EXIT)}; then printf finished; elif systemctl is-active --quiet ${(0, ssh_runner_1.shellQuote)(INSTALL_UNIT)}; then printf active; else printf absent; fi`;
+    async installStatus(session, credentials, deadline, signal, operationId) {
+        const job = installJobPaths(operationId);
+        const command = `if test -f ${(0, ssh_runner_1.shellQuote)(job.exit)}; then printf finished; elif systemctl is-active --quiet ${(0, ssh_runner_1.shellQuote)(job.unit)}; then printf active; else printf absent; fi`;
         const result = await session.exec(privilegedCommand(credentials, `sh -c ${(0, ssh_runner_1.shellQuote)(command)}`), sudoInput(credentials), { deadlineAt: deadline, signal });
         if (result.code !== 0) {
             throw new remote_operation_errors_1.RemoteOperationStepRefusedError('HOST_INSTALL_STATUS_FAILED', 'Could not read the detached installer status.');
@@ -228,10 +404,11 @@ let InstallHostOperation = class InstallHostOperation {
         const status = result.stdout.trim();
         return status === 'active' || status === 'finished' ? status : 'absent';
     }
-    async waitForInstall(session, credentials, progress, deadline, signal) {
+    async waitForInstall(session, credentials, progress, deadline, signal, operationId, join = false) {
         for (;;) {
             signal.throwIfAborted();
-            const command = `tail -n 80 ${(0, ssh_runner_1.shellQuote)(INSTALL_LOG)} 2>/dev/null || true; printf '\\n__DEVCHAIN_EXIT__'; test ! -f ${(0, ssh_runner_1.shellQuote)(INSTALL_EXIT)} || cat ${(0, ssh_runner_1.shellQuote)(INSTALL_EXIT)}`;
+            const job = installJobPaths(operationId);
+            const command = `tail -n 80 ${(0, ssh_runner_1.shellQuote)(job.log)} 2>/dev/null || true; printf '\\n__DEVCHAIN_EXIT__'; test ! -f ${(0, ssh_runner_1.shellQuote)(job.exit)} || cat ${(0, ssh_runner_1.shellQuote)(job.exit)}`;
             const result = await session.exec(privilegedCommand(credentials, `sh -c ${(0, ssh_runner_1.shellQuote)(command)}`), sudoInput(credentials), { deadlineAt: deadline, signal });
             if (result.code !== 0) {
                 throw new remote_operation_errors_1.RemoteOperationStepRefusedError('HOST_INSTALL_STATUS_FAILED', 'Could not read the detached installer log and exit status.');
@@ -243,7 +420,9 @@ let InstallHostOperation = class InstallHostOperation {
             const exitCode = /^\d+$/.test(exitText.trim()) ? Number(exitText.trim()) : null;
             if (exitCode !== null) {
                 if (exitCode !== 0) {
-                    await session.exec(privilegedCommand(credentials, `rm -f ${(0, ssh_runner_1.shellQuote)(INSTALL_EXIT)}`), sudoInput(credentials));
+                    await session.exec(privilegedCommand(credentials, `rm -f ${(0, ssh_runner_1.shellQuote)(job.exit)}`), sudoInput(credentials));
+                    if (join)
+                        throw joinRefusal({ code: exitCode, stdout: logTail, stderr: '' }, 'HOST_JOIN_FAILED', 'The detached VM join failed.');
                     throw new remote_operation_errors_1.RemoteOperationStepRefusedError('HOST_INSTALL_FAILED', logTail || `The detached installer failed with code ${exitCode}.`);
                 }
                 return;
@@ -256,11 +435,14 @@ let InstallHostOperation = class InstallHostOperation {
             });
         }
     }
-    async waitBootstrap({ operation, details }) {
+    async waitBootstrap(run) {
+        const { operation, details } = run;
         const install = details;
         const { signal } = this.cancellation(operation.id);
         const certificate = install.tlsCertificate ?? (await this.host.certificateOf(operation.remoteId));
-        const deadline = Date.now() + this.timing.bootstrapTimeoutMs;
+        const recoveringClaim = install.mode === 'join' && !install.claimed && (0, remote_operation_types_1.stepStarted)(operation, 'claim_claim');
+        let deadline = Date.now() +
+            (recoveringClaim ? this.timing.installTimeoutMs : this.timing.bootstrapTimeoutMs);
         for (;;) {
             signal.throwIfAborted();
             const runtime = await this.host
@@ -269,6 +451,16 @@ let InstallHostOperation = class InstallHostOperation {
             if (runtime?.state === 'unclaimed' && (0, host_image_1.isSupportedHostImage)(runtime.imageVersion)) {
                 return;
             }
+            if (recoveringClaim && !install.claimed && Date.now() >= deadline)
+                throw new remote_operation_errors_1.RemoteOperationStepRefusedError('HOST_JOIN_CLAIM_TIMEOUT', 'The earlier claim did not record this instance within the installation timeout.');
+            if (recoveringClaim && !install.claimed && claimInFlight(runtime)) {
+                await this.installJoin(run, this.requireCredentials(operation.id), deadline);
+                if (install.claimed)
+                    deadline = Date.now() + this.timing.bootstrapTimeoutMs;
+                continue;
+            }
+            if (install.mode === 'join' && install.claimed && runtime?.version === install.version)
+                return;
             if (Date.now() >= deadline) {
                 throw new remote_operation_errors_1.RemoteOperationStepRefusedError('HOST_BOOTSTRAP_TIMEOUT', 'The installed host bootstrap did not become ready within 60 seconds.');
             }
@@ -285,9 +477,10 @@ let InstallHostOperation = class InstallHostOperation {
         }
         return controller;
     }
-    async stopInstall(session, credentials, details) {
-        const unit = (0, ssh_runner_1.shellQuote)(INSTALL_UNIT);
-        const command = `systemctl kill --signal=SIGKILL ${unit}; systemctl stop ${unit} || { test "$(systemctl show ${unit} --property=LoadState --value)" = not-found || exit 1; }; rm -f ${(0, ssh_runner_1.shellQuote)(INSTALL_EXIT)}`;
+    async stopInstall(session, credentials, details, operationId) {
+        const job = installJobPaths(operationId);
+        const unit = (0, ssh_runner_1.shellQuote)(job.unit);
+        const command = `systemctl kill --signal=SIGKILL ${unit}; systemctl stop ${unit} || { test "$(systemctl show ${unit} --property=LoadState --value)" = not-found || exit 1; }; rm -f ${(0, ssh_runner_1.shellQuote)(job.exit)}`;
         const stopped = await session.exec(privilegedCommand(credentials, `sh -c ${(0, ssh_runner_1.shellQuote)(command)}`), sudoInput(credentials), { timeoutMs: 5_000 });
         if (stopped.code !== 0) {
             throw new remote_operation_errors_1.RemoteOperationStepRefusedError('HOST_INSTALL_STOP_FAILED', 'Could not stop the detached installer and clear its status on the VM. Check SSH access and cancel again.');
@@ -302,6 +495,17 @@ let InstallHostOperation = class InstallHostOperation {
         return credentials;
     }
     renderBlock(details, checkOnly) {
+        if (details.mode === 'join')
+            return this.hostInstall.renderJoin({
+                minDiskGib: details.minDiskGib,
+                homePort: details.requestedPort ?? details.port,
+                homeUser: details.userName,
+                homePath: details.homePath,
+                uid: details.uid,
+                gid: details.gid,
+                requestId: details.joinRequestId ?? '',
+                checkOnly,
+            });
         return this.hostInstall.render({
             minDiskGib: details.minDiskGib,
             homePort: details.port,
@@ -329,9 +533,30 @@ function accountHomeCheckCommand(userName, homePath) {
     const script = `home=$(getent passwd ${(0, ssh_runner_1.shellQuote)(userName)}) || exit $?; home=$(printf '%s' "$home" | cut -d: -f6); [ "$home" = ${(0, ssh_runner_1.shellQuote)(homePath)} ] && exit 0; printf '%s' "$home"; exit ${ACCOUNT_HOME_MISMATCH_EXIT}`;
     return `sh -c ${(0, ssh_runner_1.shellQuote)(script)}`;
 }
-function detachedInstallCommand(path) {
-    const run = `bash "$1"; code=$?; printf '%s\\n' "$code" > ${(0, ssh_runner_1.shellQuote)(INSTALL_EXIT)}; exit "$code"`;
-    return `systemd-run --unit=${(0, ssh_runner_1.shellQuote)(INSTALL_UNIT)} --collect --no-block --property=${(0, ssh_runner_1.shellQuote)(`StandardOutput=append:${INSTALL_LOG}`)} --property=${(0, ssh_runner_1.shellQuote)(`StandardError=append:${INSTALL_LOG}`)} bash -c ${(0, ssh_runner_1.shellQuote)(run)} _ ${(0, ssh_runner_1.shellQuote)(path)}`;
+function detachedInstallCommand(path, operationId) {
+    const job = installJobPaths(operationId);
+    const run = `bash "$1"; code=$?; printf '%s\\n' "$code" > ${(0, ssh_runner_1.shellQuote)(job.exit)}; exit "$code"`;
+    return `systemd-run --unit=${(0, ssh_runner_1.shellQuote)(job.unit)} --collect --no-block --property=${(0, ssh_runner_1.shellQuote)(`StandardOutput=append:${job.log}`)} --property=${(0, ssh_runner_1.shellQuote)(`StandardError=append:${job.log}`)} bash -c ${(0, ssh_runner_1.shellQuote)(run)} _ ${(0, ssh_runner_1.shellQuote)(path)}`;
+}
+function claimInFlight(runtime) {
+    return (runtime?.state === 'claiming' || runtime?.state === 'handover' || Boolean(runtime?.version));
+}
+function joinedInstancePaths(userName) {
+    const etc = `/etc/devchain-host/instances/${userName}`;
+    const prefix = `/opt/devchain-host/instances/${userName}`;
+    return {
+        claim: `${etc}/claim.json`,
+        join: `${etc}/join.json`,
+        prefix,
+        bootstrap: `${prefix}/helper/bin/devchain-bootstrap`,
+        unit: `devchain-user-${userName}.service`,
+    };
+}
+function installJobPaths(operationId) {
+    if (!/^[A-Za-z0-9_-]+$/.test(operationId))
+        throw new Error('Invalid SSH operation id.');
+    const unit = `devchain-host-install-${operationId}`;
+    return { unit, log: `/var/log/${unit}.log`, exit: `/run/${unit}.exit` };
 }
 function privilegedCommand(credentials, command) {
     return credentials.user === 'root' ? command : `sudo -S -p '' ${command}`;
@@ -364,4 +589,37 @@ function tail(value, max) {
 function claimOperation(operation) {
     return (0, remote_operation_types_1.withStepPrefix)(operation, 'claim_');
 }
+function isJoinRecord(value, details) {
+    if (!value || typeof value !== 'object')
+        return false;
+    const record = value;
+    return (record.userName === details.userName &&
+        record.homePath === details.homePath &&
+        typeof record.port === 'number' &&
+        Number.isInteger(record.port) &&
+        record.port >= 1024 &&
+        record.port <= 65535);
+}
+function parseJoinError(result) {
+    for (const line of `${result.stdout}\n${result.stderr}`.split(/\r?\n/).reverse()) {
+        try {
+            const parsed = JSON.parse(line);
+            if (!parsed || typeof parsed !== 'object')
+                continue;
+            const error = parsed;
+            if (typeof error.code === 'string' && typeof error.message === 'string')
+                return {
+                    code: error.code,
+                    message: error.message.replace(/\b[a-f0-9]{64}\b/gi, '[REDACTED]'),
+                    ...(typeof error.accountHome === 'string' ? { accountHome: error.accountHome } : {}),
+                };
+        }
+        catch { }
+    }
+    return null;
+}
+function joinRefusal(result, code, message) {
+    const error = parseJoinError(result);
+    return new remote_operation_errors_1.RemoteOperationStepRefusedError(error?.code ?? code, error?.message ?? message);
+}
 //# sourceMappingURL=install-host.operation.js.map