jishushell 0.4.2 → 0.4.17

package/dist/services/update-manager.js

@@ -0,0 +1,305 @@
+/**
+ * src/services/update-manager.ts
+ *
+ * Version checking and package upgrade — no console.log, returns data.
+ * Both the CLI and the HTTP API can safely call these functions.
+ */
+import { execFileSync, spawn } from "child_process";
+import { existsSync, readFileSync, writeFileSync } from "fs";
+import { join, dirname } from "path";
+import { fileURLToPath } from "url";
+import * as http from "http";
+import * as https from "https";
+import { getPanelConfig, JISHUSHELL_HOME } from "../config.js";
+import { checkAndReport, checkAndReportHeartbeat } from "./telemetry/index.js";
+const __filename = fileURLToPath(import.meta.url);
+// services/ is one level below root; cli.js lives at ../../cli.js from dist/services/
+const CLI_PATH = join(dirname(__filename), "../cli.js");
+const UPDATE_STATE_FILE = join(JISHUSHELL_HOME, "update-state.json");
+const UPDATE_RESTART_TIMEOUT_MS = 5 * 60_000;
+// ── Internal helpers ───────────────────────────────────────────────────────
+let _updateCache = null;
+const UPDATE_CACHE_TTL = 30_000;
+function getNpmBinPath() {
+    return join(dirname(process.execPath), "npm");
+}
+function getCurrentPackageVersion() {
+    try {
+        const pkgPath = join(dirname(fileURLToPath(import.meta.url)), "../../package.json");
+        return JSON.parse(readFileSync(pkgPath, "utf-8")).version ?? "0.0.0";
+    }
+    catch {
+        return "0.0.0";
+    }
+}
+function parseVersion(version) {
+    const [major = 0, minor = 0, patch = 0] = version
+        .replace(/^v/, "")
+        .split(".")
+        .map((part) => parseInt(part, 10) || 0);
+    return [major, minor, patch];
+}
+export function compareVersions(a, b) {
+    const [aMaj, aMin, aPat] = parseVersion(a);
+    const [bMaj, bMin, bPat] = parseVersion(b);
+    if (aMaj !== bMaj)
+        return aMaj - bMaj;
+    if (aMin !== bMin)
+        return aMin - bMin;
+    return aPat - bPat;
+}
+export function isVersionAtLeast(version, expected) {
+    return compareVersions(version, expected) >= 0;
+}
+function readPersistedUpdateState() {
+    if (!existsSync(UPDATE_STATE_FILE))
+        return null;
+    try {
+        return JSON.parse(readFileSync(UPDATE_STATE_FILE, "utf-8"));
+    }
+    catch {
+        return null;
+    }
+}
+function writePersistedUpdateState(state) {
+    writeFileSync(UPDATE_STATE_FILE, `${JSON.stringify(state, null, 2)}\n`, "utf-8");
+}
+export function getInstalledGlobalVersion() {
+    try {
+        const npmRoot = execFileSync(getNpmBinPath(), ["root", "-g"], {
+            encoding: "utf-8",
+            timeout: 5000,
+            stdio: ["ignore", "pipe", "ignore"],
+        }).trim();
+        if (!npmRoot)
+            return getCurrentPackageVersion();
+        const pkgPath = join(npmRoot, "jishushell", "package.json");
+        if (!existsSync(pkgPath))
+            return getCurrentPackageVersion();
+        return JSON.parse(readFileSync(pkgPath, "utf-8")).version ?? getCurrentPackageVersion();
+    }
+    catch {
+        return getCurrentPackageVersion();
+    }
+}
+export function markUpdateRestarting(targetVersion, currentVersion, installedVersion) {
+    const previous = readPersistedUpdateState();
+    writePersistedUpdateState({
+        status: "restarting",
+        currentVersion,
+        targetVersion,
+        installedVersion,
+        startedAt: previous?.startedAt ?? Date.now(),
+        updatedAt: Date.now(),
+        message: `Updated to ${installedVersion}; waiting for panel restart`,
+    });
+}
+export function markUpdateFailed(error, currentVersion = getCurrentPackageVersion()) {
+    const previous = readPersistedUpdateState();
+    writePersistedUpdateState({
+        status: "failed",
+        currentVersion,
+        targetVersion: previous?.targetVersion,
+        installedVersion: getInstalledGlobalVersion(),
+        startedAt: previous?.startedAt ?? Date.now(),
+        updatedAt: Date.now(),
+        message: "Update failed",
+        error,
+    });
+}
+export function startBackgroundUpgrade(info) {
+    const status = getUpdateStatus();
+    if (status.inProgress) {
+        throw new Error("Update already in progress");
+    }
+    writePersistedUpdateState({
+        status: "running",
+        currentVersion: info.currentVersion,
+        targetVersion: info.latestVersion,
+        installedVersion: getInstalledGlobalVersion(),
+        startedAt: Date.now(),
+        updatedAt: Date.now(),
+        message: `Updating JishuShell to ${info.latestVersion}`,
+    });
+    const nodeBinDir = dirname(process.execPath);
+    const childEnv = {
+        ...process.env,
+        PATH: `${nodeBinDir}${process.env.PATH ? `:${process.env.PATH}` : ""}`,
+        JISHUSHELL_WEB_UPDATE: "1",
+        JISHUSHELL_UPDATE_CURRENT_VERSION: info.currentVersion,
+        JISHUSHELL_UPDATE_TARGET_VERSION: info.latestVersion,
+    };
+    try {
+        const child = spawn(process.execPath, [CLI_PATH, "update"], {
+            detached: true,
+            stdio: "ignore",
+            env: childEnv,
+        });
+        child.unref();
+    }
+    catch (err) {
+        markUpdateFailed(err.message || "Failed to start update worker", info.currentVersion);
+        throw err;
+    }
+    return getUpdateStatus();
+}
+export function getUpdateStatus() {
+    const currentVersion = getCurrentPackageVersion();
+    const installedVersion = getInstalledGlobalVersion();
+    let state = readPersistedUpdateState();
+    if (state?.status === "running" && state.targetVersion && isVersionAtLeast(installedVersion, state.targetVersion)) {
+        state = {
+            ...state,
+            status: "restarting",
+            installedVersion,
+            updatedAt: Date.now(),
+            message: `Updated to ${installedVersion}; waiting for panel restart`,
+        };
+        writePersistedUpdateState(state);
+    }
+    if (state?.status === "restarting" && state.targetVersion) {
+        if (currentVersion === installedVersion && isVersionAtLeast(installedVersion, state.targetVersion)) {
+            state = {
+                ...state,
+                status: "completed",
+                currentVersion,
+                installedVersion,
+                updatedAt: Date.now(),
+                message: `Update applied: ${installedVersion}`,
+            };
+            writePersistedUpdateState(state);
+        }
+        else if (Date.now() - (state.updatedAt || state.startedAt) > UPDATE_RESTART_TIMEOUT_MS) {
+            state = {
+                ...state,
+                status: "failed",
+                currentVersion,
+                installedVersion,
+                updatedAt: Date.now(),
+                message: "Update failed",
+                error: `Panel did not restart into ${state.targetVersion}`,
+            };
+            writePersistedUpdateState(state);
+        }
+    }
+    if (!state) {
+        return {
+            status: "idle",
+            currentVersion,
+            installedVersion,
+            inProgress: false,
+        };
+    }
+    return {
+        status: state.status,
+        currentVersion,
+        installedVersion,
+        targetVersion: state.targetVersion,
+        startedAt: state.startedAt,
+        updatedAt: state.updatedAt,
+        message: state.message,
+        error: state.error,
+        inProgress: state.status === "running" || state.status === "restarting",
+    };
+}
+function getNpmRegistryUrl() {
+    const panelReg = getPanelConfig().npm_registry;
+    if (typeof panelReg === "string" && panelReg.trim())
+        return panelReg.trim().replace(/\/+$/, "");
+    try {
+        const reg = execFileSync(getNpmBinPath(), ["config", "get", "registry"], {
+            encoding: "utf-8", timeout: 5000,
+        }).trim();
+        if (reg && reg !== "undefined")
+            return reg.replace(/\/+$/, "");
+    }
+    catch { /* fall through */ }
+    return "https://registry.npmjs.org";
+}
+// ── Public API ─────────────────────────────────────────────────────────────
+/**
+ * Check for a newer jishushell version on npm.
+ * Caches for 30 s; safe to call from both CLI and HTTP routes.
+ */
+export async function checkUpdate() {
+    if (_updateCache && Date.now() - _updateCache.ts < UPDATE_CACHE_TTL) {
+        return _updateCache.info;
+    }
+    const currentVersion = getCurrentPackageVersion();
+    let latestVersion = currentVersion;
+    let hasUpdate = false;
+    try {
+        const registryUrl = getNpmRegistryUrl();
+        const metaUrl = new URL(`/jishushell/latest`, registryUrl);
+        const transport = metaUrl.protocol === "https:" ? https : http;
+        latestVersion = await new Promise((resolve, reject) => {
+            const req = transport.get(metaUrl, { headers: { accept: "application/json" }, timeout: 8000 }, (res) => {
+                let body = "";
+                res.on("data", (d) => (body += d));
+                res.on("end", () => {
+                    try {
+                        resolve(JSON.parse(body).version ?? currentVersion);
+                    }
+                    catch {
+                        reject(new Error("parse error"));
+                    }
+                });
+            });
+            req.on("error", reject);
+            req.on("timeout", () => { req.destroy(); reject(new Error("timeout")); });
+        });
+        hasUpdate = compareVersions(latestVersion, currentVersion) > 0;
+    }
+    catch { /* network unavailable — return no-update */ }
+    const info = { hasUpdate, currentVersion, latestVersion };
+    _updateCache = { ts: Date.now(), info };
+    // Piggyback telemetry on update checks (fire-and-forget)
+    checkAndReport();
+    checkAndReportHeartbeat();
+    return info;
+}
+/**
+ * Run `npm install -g jishushell`.
+ * Throws on failure; returns trimmed npm stdout on success.
+ */
+export async function upgradePackage() {
+    const nodeBinDir = dirname(process.execPath);
+    const npmBin = getNpmBinPath();
+    const childEnv = {
+        ...process.env,
+        PATH: `${nodeBinDir}${process.env.PATH ? `:${process.env.PATH}` : ""}`,
+    };
+    // JISHU_RUNNING_IN_INSTALLER=1 tells post-install.sh it is managed by a
+    // parent installer and should skip the interactive sudo / TTY checks,
+    // do only the minimal wrapper+service update, then exit 0.  This works
+    // with every published version of jishushell (the env-var guard predates
+    // the JISHUSHELL_WEB_UPDATE check added later).
+    const npmEnv = {
+        ...childEnv,
+        JISHU_RUNNING_IN_INSTALLER: "1",
+    };
+    try {
+        const out = execFileSync(npmBin, ["install", "-g", "jishushell", "--registry", getNpmRegistryUrl() + "/"], { encoding: "utf-8", timeout: 120_000, stdio: ["ignore", "pipe", "pipe"], env: npmEnv });
+        _updateCache = null; // invalidate
+        return { output: out?.trim() ?? "" };
+    }
+    catch (err) {
+        const detail = err.stderr ? err.stderr.trim() : err.message;
+        throw new Error(detail || err.message);
+    }
+}
+/**
+ * Spawn a detached `jishushell restart` after `delayMs` ms, then return.
+ * The spawned child outlives the current process (useful after upgrade).
+ */
+export function scheduleRestart(delayMs = 2000) {
+    const nodeBinDir = dirname(process.execPath);
+    const childEnv = {
+        ...process.env,
+        PATH: `${nodeBinDir}${process.env.PATH ? `:${process.env.PATH}` : ""}`,
+    };
+    const delaySecs = Math.max(1, Math.round(delayMs / 1000));
+    const child = spawn("sh", ["-c", `sleep ${delaySecs} && exec ${JSON.stringify(process.execPath)} ${JSON.stringify(CLI_PATH)} restart`], { detached: true, stdio: "ignore", env: childEnv });
+    child.unref();
+}
+//# sourceMappingURL=update-manager.js.map

package/dist/services/update-manager.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"update-manager.js","sourceRoot":"","sources":["../../src/services/update-manager.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,YAAY,EAAE,KAAK,EAAE,MAAM,eAAe,CAAC;AACpD,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,IAAI,CAAC;AAC7D,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC;AACrC,OAAO,EAAE,aAAa,EAAE,MAAM,KAAK,CAAC;AACpC,OAAO,KAAK,IAAI,MAAM,MAAM,CAAC;AAC7B,OAAO,KAAK,KAAK,MAAM,OAAO,CAAC;AAE/B,OAAO,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAC/D,OAAO,EAAE,cAAc,EAAE,uBAAuB,EAAE,MAAM,sBAAsB,CAAC;AAE/E,MAAM,UAAU,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAClD,sFAAsF;AACtF,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,WAAW,CAAC,CAAC;AACxD,MAAM,iBAAiB,GAAG,IAAI,CAAC,eAAe,EAAE,mBAAmB,CAAC,CAAC;AACrE,MAAM,yBAAyB,GAAG,CAAC,GAAG,MAAM,CAAC;AAmC7C,8EAA8E;AAE9E,IAAI,YAAY,GAA4C,IAAI,CAAC;AACjE,MAAM,gBAAgB,GAAG,MAAM,CAAC;AAEhC,SAAS,aAAa;IACpB,OAAO,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,KAAK,CAAC,CAAC;AAChD,CAAC;AAED,SAAS,wBAAwB;IAC/B,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,oBAAoB,CAAC,CAAC;QACpF,OAAO,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,OAAO,IAAI,OAAO,CAAC;IACvE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,OAAO,CAAC;IACjB,CAAC;AACH,CAAC;AAED,SAAS,YAAY,CAAC,OAAe;IACnC,MAAM,CAAC,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,CAAC,CAAC,GAAG,OAAO;SAC9C,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC;SACjB,KAAK,CAAC,GAAG,CAAC;SACV,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC;IAC1C,OAAO,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;AAC/B,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,CAAS,EAAE,CAAS;IAClD,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,GAAG,YAAY,CAAC,CAAC,CAAC,CAAC;IAC3C,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,GAAG,YAAY,CAAC,CAAC,CAAC,CAAC;IAC3C,IAAI,IAAI,KAAK,IAAI;QAAE,OAAO,IAAI,GAAG,IAAI,CAAC;IACtC,IAAI,IAAI,KAAK,IAAI;QAAE,OAAO,IAAI,GAAG,IAAI,CAAC;IACtC,OAAO,IAAI,GAAG,IAAI,CAAC;AACrB,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,OAAe,EAAE,QAAgB;IAChE,OAAO,eAAe,CAAC,OAAO,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC;AACjD,CAAC;AAED,SAAS,wBAAwB;IAC/B,IAAI,CAAC,UAAU,CAAC,iBAAiB,CAAC;QAAE,OAAO,IAAI,CAAC;IAChD,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,iBAAiB,EAAE,OAAO,CAAC,CAAyB,CAAC;IACtF,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,yBAAyB,CAAC,KAA2B;IAC5D,aAAa,CAAC,iBAAiB,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;AACnF,CAAC;AAED,MAAM,UAAU,yBAAyB;IACvC,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,YAAY,CAAC,aAAa,EAAE,EAAE,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE;YAC5D,QAAQ,EAAE,OAAO;YACjB,OAAO,EAAE,IAAI;YACb,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC;SACpC,CAAC,CAAC,IAAI,EAAE,CAAC;QACV,IAAI,CAAC,OAAO;YAAE,OAAO,wBAAwB,EAAE,CAAC;QAChD,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,EAAE,YAAY,EAAE,cAAc,CAAC,CAAC;QAC5D,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC;YAAE,OAAO,wBAAwB,EAAE,CAAC;QAC5D,OAAO,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,OAAO,IAAI,wBAAwB,EAAE,CAAC;IAC1F,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,wBAAwB,EAAE,CAAC;IACpC,CAAC;AACH,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,aAAqB,EAAE,cAAsB,EAAE,gBAAwB;IAC1G,MAAM,QAAQ,GAAG,wBAAwB,EAAE,CAAC;IAC5C,yBAAyB,CAAC;QACxB,MAAM,EAAE,YAAY;QACpB,cAAc;QACd,aAAa;QACb,gBAAgB;QAChB,SAAS,EAAE,QAAQ,EAAE,SAAS,IAAI,IAAI,CAAC,GAAG,EAAE;QAC5C,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;QACrB,OAAO,EAAE,cAAc,gBAAgB,6BAA6B;KACrE,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,KAAa,EAAE,cAAc,GAAG,wBAAwB,EAAE;IACzF,MAAM,QAAQ,GAAG,wBAAwB,EAAE,CAAC;IAC5C,yBAAyB,CAAC;QACxB,MAAM,EAAE,QAAQ;QAChB,cAAc;QACd,aAAa,EAAE,QAAQ,EAAE,aAAa;QACtC,gBAAgB,EAAE,yBAAyB,EAAE;QAC7C,SAAS,EAAE,QAAQ,EAAE,SAAS,IAAI,IAAI,CAAC,GAAG,EAAE;QAC5C,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;QACrB,OAAO,EAAE,eAAe;QACxB,KAAK;KACN,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,IAAgB;IACrD,MAAM,MAAM,GAAG,eAAe,EAAE,CAAC;IACjC,IAAI,MAAM,CAAC,UAAU,EAAE,CAAC;QACtB,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;IAChD,CAAC;IAED,yBAAyB,CAAC;QACxB,MAAM,EAAE,SAAS;QACjB,cAAc,EAAE,IAAI,CAAC,cAAc;QACnC,aAAa,EAAE,IAAI,CAAC,aAAa;QACjC,gBAAgB,EAAE,yBAAyB,EAAE;QAC7C,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;QACrB,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;QACrB,OAAO,EAAE,0BAA0B,IAAI,CAAC,aAAa,EAAE;KACxD,CAAC,CAAC;IAEH,MAAM,UAAU,GAAG,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC7C,MAAM,QAAQ,GAAG;QACf,GAAG,OAAO,CAAC,GAAG;QACd,IAAI,EAAE,GAAG,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE;QACtE,qBAAqB,EAAE,GAAG;QAC1B,iCAAiC,EAAE,IAAI,CAAC,cAAc;QACtD,gCAAgC,EAAE,IAAI,CAAC,aAAa;KACrD,CAAC;IAEF,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE,QAAQ,CAAC,EAAE;YAC1D,QAAQ,EAAE,IAAI;YACd,KAAK,EAAE,QAAQ;YACf,GAAG,EAAE,QAAQ;SACd,CAAC,CAAC;QACH,KAAK,CAAC,KAAK,EAAE,CAAC;IAChB,CAAC;IAAC,OAAO,GAAQ,EAAE,CAAC;QAClB,gBAAgB,CAAC,GAAG,CAAC,OAAO,IAAI,+BAA+B,EAAE,IAAI,CAAC,cAAc,CAAC,CAAC;QACtF,MAAM,GAAG,CAAC;IACZ,CAAC;IAED,OAAO,eAAe,EAAE,CAAC;AAC3B,CAAC;AAED,MAAM,UAAU,eAAe;IAC7B,MAAM,cAAc,GAAG,wBAAwB,EAAE,CAAC;IAClD,MAAM,gBAAgB,GAAG,yBAAyB,EAAE,CAAC;IACrD,IAAI,KAAK,GAAG,wBAAwB,EAAE,CAAC;IAEvC,IAAI,KAAK,EAAE,MAAM,KAAK,SAAS,IAAI,KAAK,CAAC,aAAa,IAAI,gBAAgB,CAAC,gBAAgB,EAAE,KAAK,CAAC,aAAa,CAAC,EAAE,CAAC;QAClH,KAAK,GAAG;YACN,GAAG,KAAK;YACR,MAAM,EAAE,YAAY;YACpB,gBAAgB;YAChB,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;YACrB,OAAO,EAAE,cAAc,gBAAgB,6BAA6B;SACrE,CAAC;QACF,yBAAyB,CAAC,KAAK,CAAC,CAAC;IACnC,CAAC;IAED,IAAI,KAAK,EAAE,MAAM,KAAK,YAAY,IAAI,KAAK,CAAC,aAAa,EAAE,CAAC;QAC1D,IAAI,cAAc,KAAK,gBAAgB,IAAI,gBAAgB,CAAC,gBAAgB,EAAE,KAAK,CAAC,aAAa,CAAC,EAAE,CAAC;YACnG,KAAK,GAAG;gBACN,GAAG,KAAK;gBACR,MAAM,EAAE,WAAW;gBACnB,cAAc;gBACd,gBAAgB;gBAChB,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;gBACrB,OAAO,EAAE,mBAAmB,gBAAgB,EAAE;aAC/C,CAAC;YACF,yBAAyB,CAAC,KAAK,CAAC,CAAC;QACnC,CAAC;aAAM,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,KAAK,CAAC,SAAS,IAAI,KAAK,CAAC,SAAS,CAAC,GAAG,yBAAyB,EAAE,CAAC;YACzF,KAAK,GAAG;gBACN,GAAG,KAAK;gBACR,MAAM,EAAE,QAAQ;gBAChB,cAAc;gBACd,gBAAgB;gBAChB,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;gBACrB,OAAO,EAAE,eAAe;gBACxB,KAAK,EAAE,8BAA8B,KAAK,CAAC,aAAa,EAAE;aAC3D,CAAC;YACF,yBAAyB,CAAC,KAAK,CAAC,CAAC;QACnC,CAAC;IACH,CAAC;IAED,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO;YACL,MAAM,EAAE,MAAM;YACd,cAAc;YACd,gBAAgB;YAChB,UAAU,EAAE,KAAK;SAClB,CAAC;IACJ,CAAC;IAED,OAAO;QACL,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,cAAc;QACd,gBAAgB;QAChB,aAAa,EAAE,KAAK,CAAC,aAAa;QAClC,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,UAAU,EAAE,KAAK,CAAC,MAAM,KAAK,SAAS,IAAI,KAAK,CAAC,MAAM,KAAK,YAAY;KACxE,CAAC;AACJ,CAAC;AAED,SAAS,iBAAiB;IACxB,MAAM,QAAQ,GAAG,cAAc,EAAE,CAAC,YAAY,CAAC;IAC/C,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,QAAQ,CAAC,IAAI,EAAE;QAAE,OAAO,QAAQ,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAChG,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,YAAY,CAAC,aAAa,EAAE,EAAE,CAAC,QAAQ,EAAE,KAAK,EAAE,UAAU,CAAC,EAAE;YACvE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI;SACjC,CAAC,CAAC,IAAI,EAAE,CAAC;QACV,IAAI,GAAG,IAAI,GAAG,KAAK,WAAW;YAAE,OAAO,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IACjE,CAAC;IAAC,MAAM,CAAC,CAAC,kBAAkB,CAAC,CAAC;IAC9B,OAAO,4BAA4B,CAAC;AACtC,CAAC;AAED,8EAA8E;AAE9E;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW;IAC/B,IAAI,YAAY,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,YAAY,CAAC,EAAE,GAAG,gBAAgB,EAAE,CAAC;QACpE,OAAO,YAAY,CAAC,IAAI,CAAC;IAC3B,CAAC;IAED,MAAM,cAAc,GAAG,wBAAwB,EAAE,CAAC;IAElD,IAAI,aAAa,GAAG,cAAc,CAAC;IACnC,IAAI,SAAS,GAAG,KAAK,CAAC;IAEtB,IAAI,CAAC;QACH,MAAM,WAAW,GAAG,iBAAiB,EAAE,CAAC;QACxC,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,oBAAoB,EAAE,WAAW,CAAC,CAAC;QAC3D,MAAM,SAAS,GAAG,OAAO,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;QAC/D,aAAa,GAAG,MAAM,IAAI,OAAO,CAAS,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YAC5D,MAAM,GAAG,GAAG,SAAS,CAAC,GAAG,CACvB,OAAO,EACP,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,kBAAkB,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,EAC1D,CAAC,GAAG,EAAE,EAAE;gBACN,IAAI,IAAI,GAAG,EAAE,CAAC;gBACd,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC;gBACnC,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE;oBACjB,IAAI,CAAC;wBAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,OAAO,IAAI,cAAc,CAAC,CAAC;oBAAC,CAAC;oBAC5D,MAAM,CAAC;wBAAC,MAAM,CAAC,IAAI,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC;oBAAC,CAAC;gBAC7C,CAAC,CAAC,CAAC;YACL,CAAC,CACF,CAAC;YACF,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YACxB,GAAG,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE,GAAG,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC5E,CAAC,CAAC,CAAC;QAEH,SAAS,GAAG,eAAe,CAAC,aAAa,EAAE,cAAc,CAAC,GAAG,CAAC,CAAC;IACjE,CAAC;IAAC,MAAM,CAAC,CAAC,4CAA4C,CAAC,CAAC;IAExD,MAAM,IAAI,GAAe,EAAE,SAAS,EAAE,cAAc,EAAE,aAAa,EAAE,CAAC;IACtE,YAAY,GAAG,EAAE,EAAE,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,IAAI,EAAE,CAAC;IAExC,yDAAyD;IACzD,cAAc,EAAE,CAAC;IACjB,uBAAuB,EAAE,CAAC;IAE1B,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc;IAClC,MAAM,UAAU,GAAG,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC7C,MAAM,MAAM,GAAG,aAAa,EAAE,CAAC;IAC/B,MAAM,QAAQ,GAAG;QACf,GAAG,OAAO,CAAC,GAAG;QACd,IAAI,EAAE,GAAG,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE;KACvE,CAAC;IAEF,wEAAwE;IACxE,sEAAsE;IACtE,uEAAuE;IACvE,yEAAyE;IACzE,gDAAgD;IAChD,MAAM,MAAM,GAAG;QACb,GAAG,QAAQ;QACX,0BAA0B,EAAE,GAAG;KAChC,CAAC;IAEF,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,YAAY,CACtB,MAAM,EACN,CAAC,SAAS,EAAE,IAAI,EAAE,YAAY,EAAE,YAAY,EAAE,iBAAiB,EAAE,GAAG,GAAG,CAAC,EACxE,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,CACxF,CAAC;QACF,YAAY,GAAG,IAAI,CAAC,CAAC,aAAa;QAClC,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC;IACvC,CAAC;IAAC,OAAO,GAAQ,EAAE,CAAC;QAClB,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC,CAAE,GAAG,CAAC,MAAiB,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC;QACxE,MAAM,IAAI,KAAK,CAAC,MAAM,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC;IACzC,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,eAAe,CAAC,OAAO,GAAG,IAAI;IAC5C,MAAM,UAAU,GAAG,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC7C,MAAM,QAAQ,GAAG;QACf,GAAG,OAAO,CAAC,GAAG;QACd,IAAI,EAAE,GAAG,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE;KACvE,CAAC;IACF,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,OAAO,GAAG,IAAI,CAAC,CAAC,CAAC;IAC1D,MAAM,KAAK,GAAG,KAAK,CACjB,IAAI,EACJ,CAAC,IAAI,EAAE,SAAS,SAAS,YAAY,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,UAAU,CAAC,EAC5G,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,GAAG,EAAE,QAAQ,EAAE,CACnD,CAAC;IACF,KAAK,CAAC,KAAK,EAAE,CAAC;AAChB,CAAC"}

package/dist/types.d.ts

@@ -49,3 +49,65 @@ export interface PanelConfig {
     activation_reported?: boolean;
     [key: string]: any;
 }
+export type AppTaskRuntime = "container" | "process" | "vm";
+export type AppTaskRole = "service" | "init" | "sidecar" | "cleanup";
+export interface AppTaskResources {
+    cpu?: string;
+    memory?: string;
+}
+export interface AppTaskPort {
+    name: string;
+    port: number;
+    visibility?: "public" | "internal";
+}
+export interface AppTaskHealth {
+    http?: {
+        path: string;
+        port: number;
+    };
+    interval?: string;
+    timeout?: string;
+    retries?: number;
+}
+export interface AppTask {
+    name: string;
+    role: AppTaskRole;
+    runtime: AppTaskRuntime;
+    image?: string;
+    command?: string;
+    args?: string[];
+    env?: Record<string, string>;
+    resources?: AppTaskResources;
+    ports?: AppTaskPort[];
+    health?: AppTaskHealth;
+    after?: string[];
+}
+export interface AppProvide {
+    capability: string;
+    port?: number;
+    path?: string;
+    visibility?: string;
+    description?: string;
+}
+export interface AppRequire {
+    capability: string;
+    inject_as: string;
+    required?: boolean;
+}
+export interface AppSpec {
+    id: string;
+    name?: string;
+    version?: string;
+    description?: string;
+    tasks: AppTask[];
+    provides?: AppProvide[];
+    requires?: AppRequire[];
+    openclaw?: Record<string, any>;
+    _engine?: Record<string, any>;
+}
+export interface AppManifest {
+    id: string;
+    installed_at: string;
+    source?: string;
+    spec_hash?: string;
+}

package/dist/utils/fs.d.ts

@@ -0,0 +1,85 @@
+/**
+ * Semantic file-system primitives for JishuShell.
+ *
+ * Every file write in the codebase should go through one of these functions.
+ * The function name describes the *kind* of file being written; the correct
+ * permissions follow from that classification — callers never touch raw mode
+ * numbers.
+ *
+ * Classification:
+ *
+ *   writeConfigFile        0o644  Config / state files (openclaw.json, instance.json, …)
+ *   writeSecretFile        0o600  Cryptographic keys, tokens, hashes (jwt-secret, …)
+ *   writeExecutableFile    0o755  Shell scripts and binary wrappers
+ *   writeSystemTmpFile     0o600  Temp files for privileged hand-off (sudo cp)
+ *
+ *   ensureDirHost          0o755  Host-only directories never bind-mounted into
+ *                   (Linux)       containers (JISHUSHELL_HOME, bin/, nomad/,
+ *                   0o755         packages/).  0o755 on both platforms: Linux
+ *                   (macOS)       Docker daemon (root) bypasses DAC so tighter
+ *                                 modes would only inconvenience the host user;
+ *                                 on macOS, VirtioFS requires the execute bit on
+ *                                 every ancestor of a bind-mount.  The write bit
+ *                                 is withheld from group/other on both platforms,
+ *                                 so containers cannot create files in host dirs.
+ *
+ *   ensureDirContainer     0o755  Directories bind-mounted into Docker containers.
+ *                   (Linux)       Docker Desktop's VirtioFS uses virtiofsd in
+ *                   0o755         passthrough mode: macOS host uid numbers are
+ *                   (macOS)       exposed verbatim inside the Linux VM and the
+ *                                 container, so a process running as --user 502
+ *                                 sees files owned by host uid 502 as "owner".
+ *                                 0o755 therefore suffices on macOS just as on
+ *                                 Linux — the container process hits owner bits,
+ *                                 not "other" bits.  (Confirmed by lima-vm/lima
+ *                                 #4053: Docker Desktop correctly shows uid=501
+ *                                 from host as uid=501 in the container, unlike
+ *                                 Lima's VirtioFS which squashes to root.)
+ */
+/**
+ * Create a host-only directory (never bind-mounted into containers).
+ * 0o755 on both Linux and macOS: on Linux the Docker daemon runs as root and
+ * bypasses DAC, so stricter modes only inconvenience the local user; on macOS,
+ * VirtioFS requires the execute bit on every ancestor of a bind-mounted path.
+ * Write is withheld from group/other on both platforms, so containers cannot
+ * create files inside host directories.
+ */
+export declare function ensureDirHost(path: string): void;
+/**
+ * Create a directory bind-mounted into Docker containers.
+ *
+ * Docker Desktop's VirtioFS runs virtiofsd in passthrough mode: the macOS host
+ * uid is exposed verbatim inside the Linux VM, so a container process running
+ * as --user 502 sees bind-mounted files owned by host uid 502 as "owner" and
+ * gets owner-class permission bits.  0o755 (rwxr-xr-x) is therefore sufficient
+ * on macOS, same as on Linux.
+ *
+ * chmodSync is called after mkdirSync so that the mode is applied
+ * unconditionally regardless of the process umask (mkdirSync mode is masked by
+ * umask; chmodSync / chmod(2) is not).  This is safe on already-existing
+ * directories — it only updates the mode bits, it does not fail.
+ */
+export declare function ensureDirContainer(path: string): void;
+/**
+ * Write a config/state file with 0o644.
+ * Creates parent directories if they do not yet exist, but does NOT chmod an
+ * already-existing parent — the caller owns the directory lifecycle.
+ */
+export declare function writeConfigFile(path: string, content: string | Buffer): void;
+/**
+ * Write a secret file with 0o600.
+ * Creates parent directories if they do not yet exist, but does NOT chmod an
+ * already-existing parent.
+ */
+export declare function writeSecretFile(path: string, content: string | Buffer): void;
+/**
+ * Write an executable file (script or binary wrapper) with 0o755.
+ * Creates parent directories if they do not yet exist, but does NOT chmod an
+ * already-existing parent.
+ */
+export declare function writeExecutableFile(path: string, content: string): void;
+/**
+ * Write a temporary file to /tmp with 0o600 for privileged hand-off (sudo cp).
+ * /tmp already exists; no directory creation needed.
+ */
+export declare function writeSystemTmpFile(path: string, content: string): void;

package/dist/utils/fs.js

@@ -0,0 +1,111 @@
+/**
+ * Semantic file-system primitives for JishuShell.
+ *
+ * Every file write in the codebase should go through one of these functions.
+ * The function name describes the *kind* of file being written; the correct
+ * permissions follow from that classification — callers never touch raw mode
+ * numbers.
+ *
+ * Classification:
+ *
+ *   writeConfigFile        0o644  Config / state files (openclaw.json, instance.json, …)
+ *   writeSecretFile        0o600  Cryptographic keys, tokens, hashes (jwt-secret, …)
+ *   writeExecutableFile    0o755  Shell scripts and binary wrappers
+ *   writeSystemTmpFile     0o600  Temp files for privileged hand-off (sudo cp)
+ *
+ *   ensureDirHost          0o755  Host-only directories never bind-mounted into
+ *                   (Linux)       containers (JISHUSHELL_HOME, bin/, nomad/,
+ *                   0o755         packages/).  0o755 on both platforms: Linux
+ *                   (macOS)       Docker daemon (root) bypasses DAC so tighter
+ *                                 modes would only inconvenience the host user;
+ *                                 on macOS, VirtioFS requires the execute bit on
+ *                                 every ancestor of a bind-mount.  The write bit
+ *                                 is withheld from group/other on both platforms,
+ *                                 so containers cannot create files in host dirs.
+ *
+ *   ensureDirContainer     0o755  Directories bind-mounted into Docker containers.
+ *                   (Linux)       Docker Desktop's VirtioFS uses virtiofsd in
+ *                   0o755         passthrough mode: macOS host uid numbers are
+ *                   (macOS)       exposed verbatim inside the Linux VM and the
+ *                                 container, so a process running as --user 502
+ *                                 sees files owned by host uid 502 as "owner".
+ *                                 0o755 therefore suffices on macOS just as on
+ *                                 Linux — the container process hits owner bits,
+ *                                 not "other" bits.  (Confirmed by lima-vm/lima
+ *                                 #4053: Docker Desktop correctly shows uid=501
+ *                                 from host as uid=501 in the container, unlike
+ *                                 Lima's VirtioFS which squashes to root.)
+ */
+import { chmodSync, mkdirSync, writeFileSync } from "fs";
+import { dirname } from "path";
+// ── Directories ────────────────────────────────────────────────────────────
+/**
+ * Create a host-only directory (never bind-mounted into containers).
+ * 0o755 on both Linux and macOS: on Linux the Docker daemon runs as root and
+ * bypasses DAC, so stricter modes only inconvenience the local user; on macOS,
+ * VirtioFS requires the execute bit on every ancestor of a bind-mounted path.
+ * Write is withheld from group/other on both platforms, so containers cannot
+ * create files inside host directories.
+ */
+export function ensureDirHost(path) {
+    mkdirSync(path, { recursive: true, mode: 0o755 });
+    chmodSync(path, 0o755);
+}
+/**
+ * Create a directory bind-mounted into Docker containers.
+ *
+ * Docker Desktop's VirtioFS runs virtiofsd in passthrough mode: the macOS host
+ * uid is exposed verbatim inside the Linux VM, so a container process running
+ * as --user 502 sees bind-mounted files owned by host uid 502 as "owner" and
+ * gets owner-class permission bits.  0o755 (rwxr-xr-x) is therefore sufficient
+ * on macOS, same as on Linux.
+ *
+ * chmodSync is called after mkdirSync so that the mode is applied
+ * unconditionally regardless of the process umask (mkdirSync mode is masked by
+ * umask; chmodSync / chmod(2) is not).  This is safe on already-existing
+ * directories — it only updates the mode bits, it does not fail.
+ */
+export function ensureDirContainer(path) {
+    mkdirSync(path, { recursive: true, mode: 0o755 });
+    chmodSync(path, 0o755);
+}
+// ── Files ──────────────────────────────────────────────────────────────────
+/**
+ * Write a config/state file with 0o644.
+ * Creates parent directories if they do not yet exist, but does NOT chmod an
+ * already-existing parent — the caller owns the directory lifecycle.
+ */
+export function writeConfigFile(path, content) {
+    mkdirSync(dirname(path), { recursive: true });
+    writeFileSync(path, content, { mode: 0o644 });
+    chmodSync(path, 0o644);
+}
+/**
+ * Write a secret file with 0o600.
+ * Creates parent directories if they do not yet exist, but does NOT chmod an
+ * already-existing parent.
+ */
+export function writeSecretFile(path, content) {
+    mkdirSync(dirname(path), { recursive: true });
+    writeFileSync(path, content, { mode: 0o600 });
+    chmodSync(path, 0o600);
+}
+/**
+ * Write an executable file (script or binary wrapper) with 0o755.
+ * Creates parent directories if they do not yet exist, but does NOT chmod an
+ * already-existing parent.
+ */
+export function writeExecutableFile(path, content) {
+    mkdirSync(dirname(path), { recursive: true });
+    writeFileSync(path, content, { mode: 0o755 });
+    chmodSync(path, 0o755);
+}
+/**
+ * Write a temporary file to /tmp with 0o600 for privileged hand-off (sudo cp).
+ * /tmp already exists; no directory creation needed.
+ */
+export function writeSystemTmpFile(path, content) {
+    writeFileSync(path, content, { mode: 0o600 });
+    chmodSync(path, 0o600);
+}
+//# sourceMappingURL=fs.js.map

package/dist/utils/fs.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fs.js","sourceRoot":"","sources":["../../src/utils/fs.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqCG;AAEH,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,IAAI,CAAC;AACzD,OAAO,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC;AAE/B,8EAA8E;AAE9E;;;;;;;GAOG;AACH,MAAM,UAAU,aAAa,CAAC,IAAY;IACxC,SAAS,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAClD,SAAS,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;AACzB,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,kBAAkB,CAAC,IAAY;IAC7C,SAAS,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAClD,SAAS,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;AACzB,CAAC;AAED,8EAA8E;AAE9E;;;;GAIG;AACH,MAAM,UAAU,eAAe,CAAC,IAAY,EAAE,OAAwB;IACpE,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC9C,aAAa,CAAC,IAAI,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC9C,SAAS,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;AACzB,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,eAAe,CAAC,IAAY,EAAE,OAAwB;IACpE,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC9C,aAAa,CAAC,IAAI,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC9C,SAAS,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;AACzB,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,mBAAmB,CAAC,IAAY,EAAE,OAAe;IAC/D,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC9C,aAAa,CAAC,IAAI,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC9C,SAAS,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;AACzB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,kBAAkB,CAAC,IAAY,EAAE,OAAe;IAC9D,aAAa,CAAC,IAAI,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC9C,SAAS,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;AACzB,CAAC"}

package/dist/utils/safe-json.d.ts

@@ -1,2 +1,4 @@
 export declare function safeReadJson<T = Record<string, any>>(path: string, label: string): T | null;
+export declare function safeReadSecretJson<T = Record<string, any>>(path: string, label: string): T | null;
 export declare function safeWriteJson(path: string, data: any, fsync?: boolean): void;
+export declare function safeWriteSecretJson(path: string, data: any, fsync?: boolean): void;