npm - openmeld - Versions diffs - 0.3.222 → 0.3.224 - Mend

openmeld 0.3.222 → 0.3.224

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (177) hide show

package/dist/upgrade-DfJwCD5H.js.map ADDED Viewed

@@ -0,0 +1 @@

+ {"version":3,"file":"upgrade-DfJwCD5H.js","names":[],"sources":["../src/runtime/current-npm-global-install.ts","../src/runtime/manual-upgrade.ts","../src/runtime/npm-package-acquisition-diagnostics.ts","../src/commands/top-level-agent-overview.ts","../src/commands/upgrade.ts"],"sourcesContent":["import { realpath, stat } from \"node:fs/promises\";\nimport { basename, dirname, join } from \"node:path\";\n\nexport type NpmCommandSpec = {\n command: string;\n argsPrefix: string[];\n};\n\nexport type CurrentNpmGlobalPackageInstall = {\n cliScriptPath: string;\n globalPrefixPath: string;\n packageRootPath: string;\n};\n\nexport async function resolveCurrentNpmCommandSpec(\n input: { nodeExecutablePath?: string; platform?: NodeJS.Platform } = {}\n): Promise<NpmCommandSpec> {\n const nodeExecutablePath = input.nodeExecutablePath ?? process.execPath;\n const platform = input.platform ?? process.platform;\n const nodeExecutableDir = dirname(nodeExecutablePath);\n const npmWrapperPath = join(\n nodeExecutableDir,\n platform === \"win32\" ? \"npm.cmd\" : \"npm\"\n );\n // Windows .cmd files cannot be spawned directly without a command shell.\n // Run npm's JavaScript with the selected Node instead of adding shell parsing.\n if (platform !== \"win32\" && (await pathExists(npmWrapperPath))) {\n return {\n command: npmWrapperPath,\n argsPrefix: [],\n };\n }\n\n for (const candidate of resolveNpmCliScriptCandidates({\n nodeExecutableDir,\n platform,\n })) {\n if (await pathExists(candidate)) {\n return {\n command: nodeExecutablePath,\n argsPrefix: [candidate],\n };\n }\n }\n\n throw new Error(\n `OpenMeld could not locate npm for the current CLI runtime at ${nodeExecutablePath}.`\n );\n}\n\nexport async function resolveCurrentNpmGlobalPackageInstall(input: {\n packageName: string;\n cliScriptPath?: string;\n}): Promise<CurrentNpmGlobalPackageInstall | null> {\n const cliScriptPath = await resolveCurrentCliScriptPath(input.cliScriptPath);\n if (!cliScriptPath) {\n return null;\n }\n\n const packageRootPath = dirname(dirname(cliScriptPath));\n if (basename(packageRootPath) !== input.packageName) {\n return null;\n }\n\n const globalNodeModulesRootPath = dirname(packageRootPath);\n if (basename(globalNodeModulesRootPath) !== \"node_modules\") {\n return null;\n }\n\n const nodeModulesParentPath = dirname(globalNodeModulesRootPath);\n const globalPrefixPath =\n basename(nodeModulesParentPath) === \"lib\"\n ? dirname(nodeModulesParentPath)\n : nodeModulesParentPath;\n\n return {\n cliScriptPath,\n globalPrefixPath,\n packageRootPath,\n };\n}\n\nasync function resolveCurrentCliScriptPath(\n cliScriptPath?: string\n): Promise<string | null> {\n const rawCliScriptPath = cliScriptPath ?? process.argv[1];\n if (!rawCliScriptPath) {\n return null;\n }\n\n const resolvedCliScriptPath = await realpath(rawCliScriptPath).catch(() => {\n return rawCliScriptPath;\n });\n\n return normalizePathForComparison(resolvedCliScriptPath).endsWith(\n \"/dist/openmeld.js\"\n )\n ? resolvedCliScriptPath\n : null;\n}\n\nfunction resolveNpmCliScriptCandidates(input: {\n nodeExecutableDir: string;\n platform: NodeJS.Platform;\n}): string[] {\n if (input.platform === \"win32\") {\n return [\n join(input.nodeExecutableDir, \"node_modules\", \"npm\", \"bin\", \"npm-cli.js\"),\n ];\n }\n\n return [\n join(\n input.nodeExecutableDir,\n \"..\",\n \"lib\",\n \"node_modules\",\n \"npm\",\n \"bin\",\n \"npm-cli.js\"\n ),\n ];\n}\n\nasync function pathExists(path: string): Promise<boolean> {\n try {\n await stat(path);\n return true;\n } catch {\n return false;\n }\n}\n\nfunction normalizePathForComparison(path: string): string {\n return path.replaceAll(\"\\\\\", \"/\").toLowerCase();\n}\n","export const MANUAL_OPENMELD_UPGRADE_COMMAND = \"npm install -g openmeld@latest\";\nconst SAFE_SHELL_ARGUMENT_PATTERN = /^[A-Za-z0-9_./:@%+=,-]+$/;\n\nexport function buildManualOpenMeldUpgradeCommand(\n input: { globalPrefixPath?: string | null } = {}\n): string {\n const globalPrefixPath = input.globalPrefixPath?.trim();\n if (!globalPrefixPath) {\n return MANUAL_OPENMELD_UPGRADE_COMMAND;\n }\n return `npm install -g --prefix ${formatShellArgument(globalPrefixPath)} openmeld@latest`;\n}\n\nexport const OPENMELD_UPGRADE_METADATA_RECOVERY_HINTS = [\n MANUAL_OPENMELD_UPGRADE_COMMAND,\n \"openmeld reset --yes\",\n \"openmeld start\",\n \"openmeld upgrade --check\",\n] as const;\n\nexport const OPENMELD_UPGRADE_FAILURE_HINTS = [\n MANUAL_OPENMELD_UPGRADE_COMMAND,\n \"openmeld upgrade --check\",\n \"openmeld upgrade --yes\",\n] as const;\n\nfunction formatShellArgument(value: string): string {\n if (SAFE_SHELL_ARGUMENT_PATTERN.test(value)) {\n return value;\n }\n return JSON.stringify(value);\n}\n","const DEFAULT_PACKAGE_NAME = \"openmeld\";\n\nconst UNRESOLVED_PACKAGE_DEPENDENCY_PATTERN =\n /Unsupported URL Type [\"'](?:catalog|workspace):[\"']/iu;\n\nconst LOCAL_PROXY_FAILURE_PATTERN =\n /\\b(?:connect\\s+(?:EPERM|ECONNREFUSED|ECONNRESET|ETIMEDOUT)\\s+(?:127\\.0\\.0\\.1|localhost)(?::\\d+)?|reason:\\s*connect\\s+(?:EPERM|ECONNREFUSED|ECONNRESET|ETIMEDOUT)\\s+(?:127\\.0\\.0\\.1|localhost)(?::\\d+)?)/iu;\nconst NPM_CACHE_OR_LOG_PERMISSION_PATTERN =\n /(?:log files were not written|(?:EACCES|EPERM)[\\s\\S]{0,160}\\.npm|\\.npm[\\s\\S]{0,160}(?:EACCES|EPERM))/iu;\nconst NPM_REGISTRY_FAILURE_PATTERN = /registry\\.npmjs\\.org/iu;\n\nexport type NpmPackageAcquisitionFailureDiagnosis = {\n code:\n | \"npm_package_dependency_invalid\"\n | \"npm_local_proxy_unreachable\"\n | \"npm_cache_or_log_unwritable\"\n | \"npm_registry_fetch_failed\";\n message: string;\n nextSteps: string[];\n};\n\nexport function diagnoseNpmPackageAcquisitionFailure(input: {\n packageName?: string;\n text: string;\n}): NpmPackageAcquisitionFailureDiagnosis | null {\n const text = input.text.trim();\n if (!text) {\n return null;\n }\n const packageName = input.packageName ?? DEFAULT_PACKAGE_NAME;\n\n if (UNRESOLVED_PACKAGE_DEPENDENCY_PATTERN.test(text)) {\n return {\n code: \"npm_package_dependency_invalid\",\n message:\n \"npm found a dependency reference that cannot be installed outside its development workspace.\",\n nextSteps: [\n \"Share the package version and the npm error above with OpenMeld support. Remove device codes and other credentials from the log first.\",\n \"Retry with a fresh setup command after the corrected CLI release is available. Reinstalling Node.js or resetting OpenMeld does not fix this dependency error.\",\n ],\n };\n }\n\n if (LOCAL_PROXY_FAILURE_PATTERN.test(text)) {\n return {\n code: \"npm_local_proxy_unreachable\",\n message:\n \"npm is trying to download the OpenMeld CLI through a local proxy, but that proxy is not reachable.\",\n nextSteps: [\n \"Start the local proxy app or turn off the npm proxy setting.\",\n \"Check npm proxy settings with `npm config get proxy` and `npm config get https-proxy`.\",\n `Retry the OpenMeld setup or upgrade command after npm can reach ${packageName}.`,\n ],\n };\n }\n\n if (NPM_CACHE_OR_LOG_PERMISSION_PATTERN.test(text)) {\n return {\n code: \"npm_cache_or_log_unwritable\",\n message:\n \"npm cannot write to its local cache or log directory, so it cannot install the OpenMeld CLI.\",\n nextSteps: [\n \"Check ownership and permissions for `~/.npm` and `~/.npm/_logs`.\",\n \"Create the missing npm log directory if needed with `mkdir -p ~/.npm/_logs`.\",\n `Retry the OpenMeld setup or upgrade command after npm can install ${packageName}.`,\n ],\n };\n }\n\n if (NPM_REGISTRY_FAILURE_PATTERN.test(text) || text.includes(packageName)) {\n return {\n code: \"npm_registry_fetch_failed\",\n message:\n \"npm could not download the latest OpenMeld CLI from the npm registry.\",\n nextSteps: [\n \"Check that this computer can reach `https://registry.npmjs.org`.\",\n \"Fix the npm/network error shown above, then retry the OpenMeld setup or upgrade command.\",\n ],\n };\n }\n\n return null;\n}\n\nexport function formatNpmPackageAcquisitionFailureDiagnosis(\n diagnosis: NpmPackageAcquisitionFailureDiagnosis\n): string {\n return [\n `Detected cause: ${diagnosis.message}`,\n \"Next steps:\",\n ...diagnosis.nextSteps.map((step) => `- ${step}`),\n ].join(\"\\n\");\n}\n","import { buildAgentOverviewFromContract } from \"../command-contracts/helpers\";\nimport { getCommandEntryContract } from \"../command-contracts/registry\";\nimport type { Presenter } from \"../runtime/presenter\";\nimport { outJsonLine } from \"../ui/io\";\n\nexport type TopLevelAgentOverviewCommand =\n | \"root\"\n | \"view\"\n | \"doctor\"\n | \"whoami\"\n | \"upgrade\"\n | \"repair.local_state\"\n | \"uninstall\"\n | \"reset\";\n\nexport function emitTopLevelAgentOverview(input: {\n presenter: Presenter;\n command: TopLevelAgentOverviewCommand;\n}): void {\n input.presenter.data({\n code: `${input.command}.agent_overview`,\n payload: buildTopLevelAgentOverviewPayload(input.command),\n });\n}\n\nexport function emitTopLevelCliAgentOverview(\n command: TopLevelAgentOverviewCommand\n): void {\n outJsonLine({\n type: \"result\",\n code: `${command}.agent_overview`,\n payload: buildTopLevelAgentOverviewPayload(command),\n });\n}\n\nfunction buildTopLevelAgentOverviewPayload(\n command: TopLevelAgentOverviewCommand\n): Record<string, unknown> {\n const contract = getCommandEntryContract(resolveTopLevelEntryName(command));\n if (!contract?.agentOverview) {\n throw new Error(`missing ${command} command contract`);\n }\n return buildAgentOverviewFromContract({\n context: {},\n overview: contract.agentOverview,\n });\n}\n\nfunction resolveTopLevelEntryName(command: TopLevelAgentOverviewCommand) {\n switch (command) {\n case \"repair.local_state\":\n return \"repair.local-state\" as const;\n default:\n return command;\n }\n}\n","import { spawn } from \"node:child_process\";\nimport { chmod, mkdtemp, rm, stat, writeFile } from \"node:fs/promises\";\nimport { tmpdir } from \"node:os\";\nimport { basename, join } from \"node:path\";\nimport { cancel, confirm, isCancel } from \"@clack/prompts\";\nimport {\n allowUnsignedWindowsInternalPreview,\n type CliBinaryUpdatePlan,\n DEFAULT_CLI_BINARY_DOWNLOAD_POLICY,\n downloadCliBinaryUpdateArtifact,\n prepareCliBinaryProcessHelper,\n resolveCliBinaryUpdatePlan,\n verifyCliBinaryCodeSignature,\n} from \"@openmeld/local-service/cli-binary-update-artifact\";\nimport type {\n OpenMeldToolsUpdateFailureCode,\n OpenMeldToolsUpdateOperation,\n} from \"@openmeld/schemas/types\";\nimport { resolveServiceUpdateUrgency } from \"../command-entry-checks/service-update-urgency\";\nimport { hasIndependentMaintenanceRegistration } from \"../config/daemon-service-update-worker-registration\";\nimport { resolveOpenMeldEnvPreset } from \"../config/paths\";\nimport {\n buildNextVersionState,\n type CliBinaryReleaseInfo,\n fetchLatestCliBinaryRelease,\n fetchLatestPackageInfo,\n type OpenMeldVersionStateV1,\n readVersionState,\n writeVersionState,\n} from \"../config/version-state\";\nimport { resolveCurrentDaemonExpectedVersion } from \"../local-service/lifecycle/current-daemon-version\";\nimport {\n buildDaemonServiceTargetSpec,\n resolveDaemonServiceAlignmentDecision,\n} from \"../local-service/lifecycle/daemon-service-alignment-target\";\nimport {\n type DaemonServiceFailureStage,\n formatDaemonFailureContextText,\n} from \"../local-service/lifecycle/daemon-service-evidence\";\nimport { inspectDaemonServiceInventory } from \"../local-service/lifecycle/daemon-service-inventory\";\nimport { scheduleDaemonServiceUpdate } from \"../local-service/lifecycle/daemon-service-update-coordinator\";\nimport { resolveVersionChangeDirection } from \"../local-service/lifecycle/version-change-direction\";\nimport { readOpenMeldToolsUpdateContextFromEnv } from \"../local-service/maintenance/openmeld-tools-update-context\";\nimport { createOpenMeldToolsUpdateCoordinator } from \"../local-service/maintenance/openmeld-tools-update-coordinator\";\nimport {\n OpenMeldToolsUpdateFailureError,\n withOpenMeldToolsUpdateFailure,\n} from \"../local-service/maintenance/openmeld-tools-update-failure\";\nimport { resolveExternalOpenMeldToolsUpdate } from \"../local-service/maintenance/openmeld-tools-update-join\";\nimport { parseOpenMeldToolsUpdateFailureFrame } from \"../local-service/maintenance/openmeld-tools-update-process-frame\";\nimport {\n formatInlineOpenMeldCliCommands,\n formatOpenMeldCliTextBlock,\n} from \"../runtime/cli-entry-command\";\nimport { type RuntimeContext, resolveRuntimeContext } from \"../runtime/context\";\nimport {\n type NpmCommandSpec,\n resolveCurrentNpmCommandSpec,\n resolveCurrentNpmGlobalPackageInstall,\n} from \"../runtime/current-npm-global-install\";\nimport { isBinaryDistribution } from \"../runtime/distribution\";\nimport { createUpgradeConfirmationGuideError } from \"../runtime/dual-view-guide-catalog\";\nimport { canUseInteractivePrompts } from \"../runtime/interaction\";\nimport { buildManualOpenMeldUpgradeCommand } from \"../runtime/manual-upgrade\";\nimport {\n diagnoseNpmPackageAcquisitionFailure,\n formatNpmPackageAcquisitionFailureDiagnosis,\n} from \"../runtime/npm-package-acquisition-diagnostics\";\nimport { createPresenter } from \"../runtime/presenter/index\";\nimport { OPENMELD_VERSION } from \"../runtime/version\";\nimport {\n formatDaemonServiceDowngradeBlockedRecommendation,\n formatDaemonServiceMissingRecommendation,\n} from \"../system/local-service-install-attention\";\nimport { formatElapsedTime, resolveElapsedTimeMs } from \"../ui/elapsed-time\";\nimport { emitTopLevelAgentOverview } from \"./top-level-agent-overview\";\n\nconst OPENMELD_PACKAGE_NAME = \"openmeld\";\nconst BINARY_UPGRADE_RECOVERY_URL = \"https://openmeld.ai\";\nconst STAGING_BINARY_MANIFEST_URL =\n \"https://staging.openmeld.ai/cli/manifest.json\";\nconst STAGING_BINARY_UPGRADE_RECOVERY_URL = \"https://staging.openmeld.ai\";\nconst INSTALL_SELF_JSON_LINE_SPLIT_RE = /\\r?\\n/u;\nconst SERVICE_CHECK_STARTED_TEXT = \"Checking OpenMeld Service\";\nconst SERVICE_CHECK_COMPLETED_TEXT = \"OpenMeld Service check finished.\";\nexport const UPGRADE_INTERNAL_ALIGN_SERVICE_FLAG = \"--internal-align-service\";\n\nclass UpgradeOutputHandledError extends Error {\n readonly code = \"openmeld.upgrade.output_handled\";\n\n constructor(message: string) {\n super(message);\n this.name = \"UpgradeOutputHandledError\";\n }\n}\n\nexport function isUpgradeOutputHandledError(\n error: unknown\n): error is UpgradeOutputHandledError {\n const seen = new Set<unknown>();\n let current: unknown = error;\n while (current && typeof current === \"object\" && !seen.has(current)) {\n seen.add(current);\n if (\n current instanceof UpgradeOutputHandledError ||\n (current as { code?: unknown }).code === \"openmeld.upgrade.output_handled\"\n ) {\n return true;\n }\n current = (current as { cause?: unknown }).cause;\n }\n return false;\n}\n\ntype UpgradeDistribution = \"npm\" | \"binary\";\ntype ManualUpgradeRecovery =\n | { kind: \"command\"; value: string }\n | { kind: \"web\"; value: string };\n\ntype ResolvedUpgradeStatusBase = {\n distribution: UpgradeDistribution;\n currentVersion: string;\n latestVersion: string;\n requiredFloor: string | null;\n checkedAt: string;\n binaryRelease?: CliBinaryReleaseInfo;\n};\n\ntype InstallableUpgradeStatus = ResolvedUpgradeStatusBase & {\n status: \"outdated\";\n};\n\ntype TerminalUpgradeStatus = ResolvedUpgradeStatusBase & {\n status: \"up_to_date\" | \"downgrade_blocked\";\n};\n\ntype UpgradeStatus =\n | InstallableUpgradeStatus\n | TerminalUpgradeStatus\n | {\n status: \"check_failed\";\n distribution: UpgradeDistribution;\n currentVersion: string;\n checkedAt: string;\n error: string;\n };\n\ntype CurrentGlobalInstall = Awaited<\n ReturnType<typeof resolveCurrentNpmGlobalPackageInstall>\n>;\n\nexport async function runUpgrade(input: {\n view?: string;\n yes?: boolean;\n check?: boolean;\n internalAlignService?: boolean;\n}): Promise<void> {\n const runtime = await resolveRuntimeContext({\n view: input.view,\n });\n await runUpgradeWithRuntime(input, runtime);\n}\n\nexport async function runMaintenanceUpgrade(\n internalAlignService = false\n): Promise<void> {\n if (!readOpenMeldToolsUpdateContextFromEnv()) {\n throw new Error(\"OpenMeld maintenance requires a saved update operation.\");\n }\n await runUpgradeWithRuntime(\n { yes: true, internalAlignService },\n {\n viewMode: \"agent\",\n resolvedView: \"agent\",\n interactive: false,\n }\n );\n}\n\nasync function runUpgradeWithRuntime(\n input: {\n yes?: boolean;\n check?: boolean;\n internalAlignService?: boolean;\n },\n runtime: RuntimeContext\n): Promise<void> {\n const presenter = createPresenter(runtime);\n if (runtime.resolvedView === \"agent\") {\n emitTopLevelAgentOverview({\n presenter,\n command: \"upgrade\",\n });\n }\n\n const currentUpdate = readOpenMeldToolsUpdateContextFromEnv();\n if (!input.check) {\n const existingUpdate = await resolveExternalOpenMeldToolsUpdate({\n currentOperationId: currentUpdate?.operationId,\n });\n if (existingUpdate) {\n emitUpgradeAlreadyRunning({\n operation: existingUpdate,\n presenter,\n resolvedView: runtime.resolvedView,\n });\n return;\n }\n }\n\n if (input.internalAlignService) {\n await alignServiceWithCurrentCli({\n presenter,\n resolvedView: runtime.resolvedView,\n });\n return;\n }\n\n const allowPrompt = canUseInteractivePrompts(runtime);\n const currentVersion = OPENMELD_VERSION;\n const { currentGlobalInstall, manualUpgradeRecovery } =\n await resolveUpgradeInstallContext();\n const previousVersionState = await readVersionState();\n if (!previousVersionState) {\n handleMissingVersionMetadata({\n presenter,\n resolvedView: runtime.resolvedView,\n manualUpgradeRecovery,\n });\n }\n\n const checkedAt = new Date().toISOString();\n const checkingStage = startUpgradeStage({\n presenter,\n resolvedView: runtime.resolvedView,\n code: \"upgrade.checking\",\n startedText: \"Checking for OpenMeld updates\",\n });\n const upgradeStatus = await resolveUpgradeStatus({\n currentVersion,\n checkedAt,\n });\n if (upgradeStatus.status === \"check_failed\") {\n checkingStage.fail(\"Could not check for OpenMeld updates.\");\n } else {\n checkingStage.complete(\"Update check finished.\");\n }\n if (upgradeStatus.status !== \"check_failed\") {\n await writeVersionState(\n buildNextVersionState({\n previous: previousVersionState,\n currentVersion,\n latestVersion: upgradeStatus.latestVersion,\n requiredFloor: upgradeStatus.requiredFloor,\n checkedAt,\n })\n );\n }\n\n if (input.check) {\n emitUpgradeCheckStatus({\n presenter,\n resolvedView: runtime.resolvedView,\n upgradeStatus,\n });\n return;\n }\n\n if (\n emitTerminalUpgradeStatus({\n presenter,\n resolvedView: runtime.resolvedView,\n upgradeStatus,\n })\n ) {\n await alignServiceWithCurrentCli({\n presenter,\n resolvedView: runtime.resolvedView,\n });\n return;\n }\n\n if (\n upgradeStatus.status === \"outdated\" &&\n !(await resolveUpgradeConfirmation({\n allowPrompt,\n yes: Boolean(input.yes),\n message: `Upgrade OpenMeld CLI from ${upgradeStatus.currentVersion} to ${upgradeStatus.latestVersion}?`,\n nonInteractiveError:\n \"openmeld upgrade requires --yes in non-interactive mode when upgrade is available\",\n resolvedView: runtime.resolvedView,\n scenario: \"outdated\",\n }))\n ) {\n return;\n }\n\n if (upgradeStatus.status === \"check_failed\") {\n handleUpgradeCheckFailure({\n presenter,\n resolvedView: runtime.resolvedView,\n upgradeStatus,\n manualUpgradeRecovery,\n });\n }\n\n const installableUpgradeStatus =\n requireInstallableUpgradeStatus(upgradeStatus);\n if (!currentUpdate && (await hasIndependentMaintenanceRegistration())) {\n await requestMaintainedUpgrade({\n presenter,\n resolvedView: runtime.resolvedView,\n });\n return;\n }\n if (installableUpgradeStatus.distribution === \"binary\") {\n await installAndReconcileBinaryUpgrade({\n upgradeStatus: installableUpgradeStatus,\n previousVersionState,\n manualUpgradeRecovery,\n resolvedView: runtime.resolvedView,\n currentVersion,\n presenter,\n });\n return;\n }\n\n await installAndReconcileNpmUpgrade({\n upgradeStatus: installableUpgradeStatus,\n previousVersionState,\n currentGlobalInstall,\n manualUpgradeRecovery,\n resolvedView: runtime.resolvedView,\n currentVersion,\n presenter,\n });\n}\n\nasync function alignServiceWithCurrentCli(input: {\n presenter: ReturnType<typeof createPresenter>;\n resolvedView: \"human\" | \"agent\";\n}): Promise<void> {\n try {\n await runInternalUpgradeServiceAlignment({\n ...input,\n daemonVersion: await resolveCurrentDaemonExpectedVersion(),\n ...(process.argv[1] && !isBinaryDistribution()\n ? { cliScriptPath: process.argv[1] }\n : {}),\n });\n } catch (error) {\n throw withOpenMeldToolsUpdateFailure(\n error,\n \"cli.update.service_alignment_failed\"\n );\n }\n}\n\nasync function requestMaintainedUpgrade(input: {\n presenter: ReturnType<typeof createPresenter>;\n resolvedView: \"human\" | \"agent\";\n}): Promise<void> {\n const coordinator = createOpenMeldToolsUpdateCoordinator(\n {},\n { executeUpdates: false }\n );\n const result = await coordinator.requestUpdate({ requestSource: \"cli\" });\n if (result.status === \"already_running\") {\n emitUpgradeAlreadyRunning({ ...input, operation: result.operation });\n return;\n }\n if (result.status !== \"started\" && result.status !== \"current\") {\n throw new Error(\n \"OpenMeld could not start the update. Try again when the update channel is available.\"\n );\n }\n if (input.resolvedView === \"agent\") {\n input.presenter.data({ code: \"upgrade.maintenance\", payload: result });\n return;\n }\n input.presenter.line({\n code: \"upgrade.maintenance\",\n text:\n result.status === \"current\"\n ? \"OpenMeld is up to date.\"\n : \"OpenMeld is updating in the background. You can close this Terminal.\",\n });\n}\n\nfunction emitUpgradeAlreadyRunning(input: {\n operation: OpenMeldToolsUpdateOperation;\n presenter: ReturnType<typeof createPresenter>;\n resolvedView: \"human\" | \"agent\";\n}): void {\n if (input.resolvedView === \"agent\") {\n input.presenter.data({\n code: \"upgrade.already_running\",\n payload: {\n status: \"already_running\",\n operation: input.operation,\n },\n });\n return;\n }\n input.presenter.line({\n code: \"upgrade.already_running\",\n text: \"An OpenMeld update is already in progress. OpenMeld will keep working in the background, so this command did not start another update. You can close this Terminal.\",\n data: {\n operationId: input.operation.operationId,\n phase: input.operation.phase,\n targetVersion: input.operation.targetVersion,\n },\n });\n}\n\nfunction emitUpgradeCheckStatus(input: {\n presenter: ReturnType<typeof createPresenter>;\n resolvedView: \"human\" | \"agent\";\n upgradeStatus: UpgradeStatus;\n}): void {\n if (input.resolvedView === \"agent\") {\n input.presenter.data({\n code: \"upgrade.check\",\n payload: input.upgradeStatus,\n });\n return;\n }\n\n switch (input.upgradeStatus.status) {\n case \"up_to_date\":\n case \"downgrade_blocked\":\n emitTerminalUpgradeStatus(input);\n return;\n case \"outdated\":\n input.presenter.line({\n code: \"upgrade.update_available\",\n text: formatInlineOpenMeldCliCommands(\n `OpenMeld CLI ${input.upgradeStatus.latestVersion} is available (current ${input.upgradeStatus.currentVersion}). Run \\`openmeld upgrade\\` to install it.`\n ),\n });\n return;\n case \"check_failed\":\n input.presenter.line({\n code: \"upgrade.check_failed\",\n text: formatInlineOpenMeldCliCommands(\n \"OpenMeld couldn't check for CLI updates. Check your internet connection, then run `openmeld upgrade --check` again.\"\n ),\n });\n return;\n default: {\n const exhaustiveStatus: never = input.upgradeStatus;\n throw new Error(\n `unsupported upgrade status: ${String(exhaustiveStatus)}`\n );\n }\n }\n}\n\nfunction emitTerminalUpgradeStatus(input: {\n presenter: ReturnType<typeof createPresenter>;\n resolvedView: \"human\" | \"agent\";\n upgradeStatus: UpgradeStatus;\n}): boolean {\n if (input.upgradeStatus.status === \"up_to_date\") {\n if (input.resolvedView === \"agent\") {\n input.presenter.data({\n code: \"upgrade.up_to_date\",\n payload: input.upgradeStatus,\n });\n } else {\n input.presenter.line({\n code: \"upgrade.up_to_date\",\n text: `OpenMeld CLI is already up to date (${input.upgradeStatus.currentVersion}).`,\n });\n }\n return true;\n }\n\n if (input.upgradeStatus.status === \"downgrade_blocked\") {\n if (input.resolvedView === \"agent\") {\n input.presenter.data({\n code: \"upgrade.downgrade_blocked\",\n payload: input.upgradeStatus,\n });\n } else {\n input.presenter.line({\n code: \"upgrade.downgrade_blocked\",\n text: `OpenMeld CLI is already newer than ${formatUpgradeLatestSource(\n input.upgradeStatus.distribution\n )} (current v${input.upgradeStatus.currentVersion}, latest v${input.upgradeStatus.latestVersion}). Downgrade is blocked.`,\n });\n }\n return true;\n }\n\n return false;\n}\n\nfunction requireInstallableUpgradeStatus(\n upgradeStatus: UpgradeStatus\n): InstallableUpgradeStatus {\n if (upgradeStatus.status !== \"outdated\") {\n throw new Error(\n `internal upgrade error: ${upgradeStatus.status} status reached install`\n );\n }\n return upgradeStatus;\n}\n\nasync function installAndReconcileBinaryUpgrade(input: {\n upgradeStatus: InstallableUpgradeStatus;\n previousVersionState: OpenMeldVersionStateV1 | null;\n manualUpgradeRecovery: ManualUpgradeRecovery;\n resolvedView: \"human\" | \"agent\";\n currentVersion: string;\n presenter: ReturnType<typeof createPresenter>;\n}): Promise<void> {\n if (!input.upgradeStatus.binaryRelease) {\n throw new Error(\n \"Binary upgrade failed before install: missing binary release metadata.\"\n );\n }\n const binaryRelease = input.upgradeStatus.binaryRelease;\n const updatePlan = await resolveCliBinaryUpdatePlan({\n baseBinaryPath: resolveBinaryUpgradeBasePath(),\n currentVersion: input.currentVersion,\n onDeltaFallback: (error) => {\n process.stderr.write(\n `Small update could not inspect the current CLI; downloading the full update instead. (${error.message})\\n`\n );\n },\n release: binaryRelease,\n });\n const binaryInstall = await runUpgradeStage({\n presenter: input.presenter,\n resolvedView: input.resolvedView,\n code: \"upgrade.installing\",\n startedCode: \"upgrade.installing\",\n startedText: `Downloading and installing OpenMeld CLI (about ${bytesToRoundedMb(updatePlan.downloadSizeBytes)} MB)`,\n completedText: `OpenMeld CLI ${input.upgradeStatus.latestVersion} installed.`,\n data: {\n recoveryUrl: input.manualUpgradeRecovery.value,\n downloadSizeBytes: updatePlan.downloadSizeBytes,\n distribution: input.upgradeStatus.distribution,\n preferredTransport: updatePlan.transport,\n },\n failureCode: \"cli.update.install_failed\",\n run: async () =>\n await installLatestCliBinary({\n release: binaryRelease,\n manualUpgradeRecovery: input.manualUpgradeRecovery,\n updatePlan,\n }),\n });\n const latestVersion = binaryInstall.version;\n await writeVersionState(\n buildNextVersionState({\n previous: input.previousVersionState,\n currentVersion: latestVersion,\n latestVersion,\n requiredFloor: input.upgradeStatus.requiredFloor,\n checkedAt: new Date().toISOString(),\n })\n );\n\n await runUpgradeStage({\n presenter: input.presenter,\n resolvedView: input.resolvedView,\n code: \"upgrade.service_alignment\",\n startedText: SERVICE_CHECK_STARTED_TEXT,\n completedText: SERVICE_CHECK_COMPLETED_TEXT,\n failureCode: \"cli.update.service_alignment_failed\",\n run: async () =>\n await handoffUpgradeServiceAlignmentToLatestBinary({\n resolvedView: input.resolvedView,\n command: binaryInstall.managedBinaryPath,\n argsPrefix: [],\n }),\n });\n\n emitUpgradeCompleted({\n presenter: input.presenter,\n resolvedView: input.resolvedView,\n previousVersion: input.currentVersion,\n currentVersion: latestVersion,\n });\n}\n\nfunction bytesToRoundedMb(sizeBytes: number): number {\n return Math.max(1, Math.round(sizeBytes / (1024 * 1024)));\n}\n\nasync function installAndReconcileNpmUpgrade(input: {\n upgradeStatus: InstallableUpgradeStatus;\n previousVersionState: OpenMeldVersionStateV1 | null;\n currentGlobalInstall: CurrentGlobalInstall | null;\n manualUpgradeRecovery: ManualUpgradeRecovery;\n resolvedView: \"human\" | \"agent\";\n currentVersion: string;\n presenter: ReturnType<typeof createPresenter>;\n}): Promise<void> {\n const npmCommandSpec = await resolveCurrentNpmCommandSpec();\n await runUpgradeStage({\n presenter: input.presenter,\n resolvedView: input.resolvedView,\n code: \"upgrade.installing\",\n startedCode: \"upgrade.installing\",\n startedText: \"Downloading and installing OpenMeld CLI with npm\",\n completedText: `OpenMeld CLI ${input.upgradeStatus.latestVersion} installed.`,\n data: {\n command: input.manualUpgradeRecovery.value,\n distribution: input.upgradeStatus.distribution,\n },\n failureCode: \"cli.update.install_failed\",\n run: async () =>\n await installLatestPackage({\n npmCommandSpec,\n currentGlobalInstall: input.currentGlobalInstall,\n manualUpgradeCommand: input.manualUpgradeRecovery.value,\n }),\n });\n\n const latestVersion = input.upgradeStatus.latestVersion;\n await writeVersionState(\n buildNextVersionState({\n previous: input.previousVersionState,\n currentVersion: latestVersion,\n latestVersion,\n requiredFloor: input.upgradeStatus.requiredFloor,\n checkedAt: new Date().toISOString(),\n })\n );\n\n await runUpgradeStage({\n presenter: input.presenter,\n resolvedView: input.resolvedView,\n code: \"upgrade.service_alignment\",\n startedText: SERVICE_CHECK_STARTED_TEXT,\n completedText: SERVICE_CHECK_COMPLETED_TEXT,\n failureCode: \"cli.update.service_alignment_failed\",\n run: async () =>\n await handoffUpgradeServiceAlignmentToLatestBinary({\n resolvedView: input.resolvedView,\n command: process.execPath,\n argsPrefix: [\n input.currentGlobalInstall?.cliScriptPath ??\n (await resolveLatestInstalledCliScriptPath({\n npmCommandSpec,\n })),\n ],\n }),\n });\n\n emitUpgradeCompleted({\n presenter: input.presenter,\n resolvedView: input.resolvedView,\n previousVersion: input.currentVersion,\n currentVersion: latestVersion,\n });\n}\n\nasync function resolveUpgradeInstallContext(): Promise<{\n currentGlobalInstall: Awaited<\n ReturnType<typeof resolveCurrentNpmGlobalPackageInstall>\n > | null;\n manualUpgradeRecovery: ManualUpgradeRecovery;\n}> {\n if (isBinaryDistribution()) {\n return {\n currentGlobalInstall: null,\n manualUpgradeRecovery: {\n kind: \"web\",\n value: resolveBinaryUpgradeRecoveryUrl(),\n },\n };\n }\n const currentGlobalInstall = await resolveCurrentNpmGlobalPackageInstall({\n packageName: OPENMELD_PACKAGE_NAME,\n ...(readOpenMeldToolsUpdateContextFromEnv() &&\n process.env.OPENMELD_INTERNAL_NPM_INSTALL_ENTRY\n ? { cliScriptPath: process.env.OPENMELD_INTERNAL_NPM_INSTALL_ENTRY }\n : {}),\n });\n if (\n process.env.OPENMELD_INTERNAL_MAINTENANCE_WORKER === \"1\" &&\n !currentGlobalInstall\n ) {\n throw new Error(\n \"OpenMeld could not identify the original npm installation. Automatic update stopped to preserve the current installation.\"\n );\n }\n return {\n currentGlobalInstall,\n manualUpgradeRecovery: {\n kind: \"command\",\n value: buildManualOpenMeldUpgradeCommand({\n globalPrefixPath: currentGlobalInstall?.globalPrefixPath ?? null,\n }),\n },\n };\n}\n\nexport function resolveBinaryUpgradeRecoveryUrl(\n env: NodeJS.ProcessEnv = process.env\n): string {\n return env.OPENMELD_ENV_PRESET === \"canary\" &&\n env.OPENMELD_CLI_BINARY_MANIFEST_URL === STAGING_BINARY_MANIFEST_URL\n ? STAGING_BINARY_UPGRADE_RECOVERY_URL\n : BINARY_UPGRADE_RECOVERY_URL;\n}\n\nfunction formatManualUpgradeRecovery(recovery: ManualUpgradeRecovery): string {\n return recovery.kind === \"web\"\n ? `Open ${recovery.value}, go to Computers, and use Update manually or Connect Computer to get a fresh setup command. Run that command on this Mac.`\n : `Run \\`${recovery.value}\\`.`;\n}\n\nfunction handleMissingVersionMetadata(input: {\n presenter: ReturnType<typeof createPresenter>;\n resolvedView: \"human\" | \"agent\";\n manualUpgradeRecovery: ManualUpgradeRecovery;\n}): never {\n const errorMessage = formatOpenMeldCliTextBlock(\n `OpenMeld version metadata is missing, so automatic upgrade cannot continue.\\nManual fallback: ${formatManualUpgradeRecovery(input.manualUpgradeRecovery)}\\nIf you want to repair local OpenMeld state first, run \\`openmeld reset --yes\\` before \\`openmeld upgrade\\`.`\n );\n if (input.resolvedView === \"agent\") {\n input.presenter.data({\n code: \"upgrade.metadata.missing\",\n payload: {\n summary:\n \"Local OpenMeld version metadata is missing, so automatic upgrade cannot verify downgrade safety.\",\n nextSteps: [\n formatManualUpgradeRecovery(input.manualUpgradeRecovery),\n \"openmeld-dev reset --yes --view agent\",\n \"openmeld-dev start\",\n \"openmeld-dev upgrade --check --view agent\",\n ],\n humanActionRequired: input.manualUpgradeRecovery.kind === \"web\",\n },\n });\n throw new UpgradeOutputHandledError(errorMessage);\n }\n throw new Error(errorMessage);\n}\n\nfunction handleUpgradeCheckFailure(input: {\n presenter: ReturnType<typeof createPresenter>;\n resolvedView: \"human\" | \"agent\";\n upgradeStatus: Extract<UpgradeStatus, { status: \"check_failed\" }>;\n manualUpgradeRecovery: ManualUpgradeRecovery;\n}): never {\n const errorMessage = formatOpenMeldCliTextBlock(\n `Version check failed (${input.upgradeStatus.error}). Upgrade stopped because downgrade protection requires confirming that ${formatUpgradeLatestSource(\n input.upgradeStatus.distribution\n )} is newer than the current CLI.\\nManual fallback: ${formatManualUpgradeRecovery(input.manualUpgradeRecovery)}`\n );\n if (input.resolvedView === \"agent\") {\n input.presenter.data({\n code: \"upgrade.check_failed\",\n payload: {\n ...input.upgradeStatus,\n nextSteps: [\n formatManualUpgradeRecovery(input.manualUpgradeRecovery),\n \"openmeld-dev upgrade --check --view agent\",\n \"openmeld-dev upgrade --yes --view agent\",\n ],\n humanActionRequired: input.manualUpgradeRecovery.kind === \"web\",\n },\n });\n throw new UpgradeOutputHandledError(errorMessage);\n }\n throw new Error(errorMessage);\n}\n\nasync function resolveUpgradeStatus(input: {\n currentVersion: string;\n checkedAt: string;\n}): Promise<UpgradeStatus> {\n const distribution = resolveCurrentUpgradeDistribution();\n try {\n if (distribution === \"binary\") {\n const latestInfo = await fetchLatestCliBinaryRelease();\n const latestVersion = latestInfo.version;\n return {\n status: resolveUpgradeStatusKind(\n resolveVersionChangeDirection({\n fromVersion: input.currentVersion,\n toVersion: latestVersion,\n })\n ),\n distribution,\n currentVersion: input.currentVersion,\n latestVersion,\n requiredFloor: latestInfo.minRequiredCliVersion,\n checkedAt: input.checkedAt,\n binaryRelease: latestInfo,\n };\n }\n\n const latestInfo = await fetchLatestPackageInfo(OPENMELD_PACKAGE_NAME);\n const latestVersion = latestInfo.version;\n return {\n status: resolveUpgradeStatusKind(\n resolveVersionChangeDirection({\n fromVersion: input.currentVersion,\n toVersion: latestVersion,\n })\n ),\n distribution,\n currentVersion: input.currentVersion,\n latestVersion,\n requiredFloor: latestInfo.minRequiredCliVersion,\n checkedAt: input.checkedAt,\n };\n } catch (error) {\n return {\n status: \"check_failed\",\n distribution,\n currentVersion: input.currentVersion,\n checkedAt: input.checkedAt,\n error: toErrorMessage(error),\n };\n }\n}\n\nfunction resolveUpgradeStatusKind(\n direction: ReturnType<typeof resolveVersionChangeDirection>\n): \"up_to_date\" | \"outdated\" | \"downgrade_blocked\" {\n if (direction === \"upgrade\") {\n return \"outdated\";\n }\n if (direction === \"downgrade\") {\n return \"downgrade_blocked\";\n }\n return \"up_to_date\";\n}\n\nfunction resolveCurrentUpgradeDistribution(): UpgradeDistribution {\n return isBinaryDistribution() ? \"binary\" : \"npm\";\n}\n\nfunction formatUpgradeLatestSource(distribution: UpgradeDistribution): string {\n return distribution === \"binary\" ? \"published binary latest\" : \"npm latest\";\n}\n\nasync function resolveUpgradeConfirmation(input: {\n allowPrompt: boolean;\n yes: boolean;\n message: string;\n nonInteractiveError: string;\n resolvedView: \"human\" | \"agent\";\n scenario: \"outdated\" | \"check_failed\";\n}): Promise<boolean> {\n if (input.yes) {\n return true;\n }\n if (!input.allowPrompt) {\n if (input.resolvedView === \"agent\") {\n throw createUpgradeConfirmationGuideError(input.scenario);\n }\n throw new Error(\n formatOpenMeldCliTextBlock(\n `${input.nonInteractiveError}\\nexample: \\`openmeld upgrade --yes\\``\n )\n );\n }\n\n const choice = await confirm({\n message: input.message,\n initialValue: true,\n });\n if (isCancel(choice) || !choice) {\n cancel(\"Cancelled.\");\n return false;\n }\n return true;\n}\n\nasync function installLatestCliBinary(input: {\n release: CliBinaryReleaseInfo;\n manualUpgradeRecovery: ManualUpgradeRecovery;\n updatePlan: CliBinaryUpdatePlan;\n}): Promise<{\n version: string;\n managedBinaryPath: string;\n}> {\n const tmpDir = await mkdtemp(join(tmpdir(), \"openmeld-cli-upgrade-\"));\n try {\n const artifactBytes = await downloadCliBinaryUpdateArtifact({\n downloadPolicy: DEFAULT_CLI_BINARY_DOWNLOAD_POLICY,\n fetchImpl: fetch,\n onDeltaFallback: (error) => {\n process.stderr.write(\n `Small update could not be used; downloading the full update instead. (${error.message})\\n`\n );\n },\n plan: input.updatePlan,\n release: input.release,\n });\n const artifactPath = join(\n tmpDir,\n resolveCliBinaryArtifactName(input.release)\n );\n await writeFile(artifactPath, artifactBytes);\n await chmod(artifactPath, 0o755);\n await verifyCliBinaryCodeSignature({\n allowUnsignedPreview: allowUnsignedWindowsInternalPreview(),\n artifactPath,\n allowUnsignedForDevelopment: resolveOpenMeldEnvPreset() === \"dev-local\",\n release: input.release,\n runCommand,\n });\n await prepareCliBinaryProcessHelper({\n allowUnsignedPreview: allowUnsignedWindowsInternalPreview(),\n artifactPath,\n release: input.release,\n downloadPolicy: DEFAULT_CLI_BINARY_DOWNLOAD_POLICY,\n fetchImpl: fetch,\n });\n\n const installResult = await runCommand(artifactPath, [\n \"install-self\",\n \"--force\",\n \"--json\",\n ]);\n if (installResult.code !== 0) {\n const details =\n installResult.stderr.trim() || installResult.stdout.trim();\n throw new Error(\n formatOpenMeldCliTextBlock(\n `binary install-self failed (exit ${installResult.code})${\n details ? `: ${details}` : \"\"\n }\\nManual fallback: ${formatManualUpgradeRecovery(input.manualUpgradeRecovery)}`\n )\n );\n }\n\n const installed = parseInstallSelfJsonOutput(installResult.stdout);\n if (installed.version !== input.release.version) {\n throw new Error(\n `binary install-self returned version ${installed.version}, expected ${input.release.version}`\n );\n }\n return installed;\n } finally {\n await rm(tmpDir, { recursive: true, force: true }).catch(() => undefined);\n }\n}\n\nfunction resolveBinaryUpgradeBasePath(): string {\n return (\n process.env.OPENMELD_INTERNAL_UPGRADE_BASE_BINARY_PATH?.trim() ||\n process.execPath\n );\n}\n\nfunction resolveCliBinaryArtifactName(release: CliBinaryReleaseInfo): string {\n const pathName = new URL(release.url).pathname;\n return (\n basename(pathName) || `openmeld-cli-${release.platform}-${release.version}`\n );\n}\n\nfunction parseInstallSelfJsonOutput(output: string): {\n version: string;\n managedBinaryPath: string;\n} {\n const jsonLine = output\n .split(INSTALL_SELF_JSON_LINE_SPLIT_RE)\n .map((line) => line.trim())\n .find((line) => line.startsWith(\"{\"));\n if (!jsonLine) {\n throw new Error(\"binary install-self did not emit JSON output\");\n }\n let parsed: unknown;\n try {\n parsed = JSON.parse(jsonLine);\n } catch (error) {\n throw new Error(\n `binary install-self emitted invalid JSON: ${toErrorMessage(error)}`\n );\n }\n if (!parsed || typeof parsed !== \"object\") {\n throw new Error(\"binary install-self emitted an invalid JSON payload\");\n }\n const record = parsed as Record<string, unknown>;\n if (record.type !== \"cli.install_self\") {\n throw new Error(\"binary install-self emitted an unexpected payload type\");\n }\n const version =\n typeof record.version === \"string\" ? record.version.trim() : \"\";\n const managedBinaryPath =\n typeof record.managedBinaryPath === \"string\"\n ? record.managedBinaryPath.trim()\n : \"\";\n if (!(version && managedBinaryPath)) {\n throw new Error(\"binary install-self emitted an incomplete JSON payload\");\n }\n return { version, managedBinaryPath };\n}\n\nasync function installLatestPackage(input: {\n npmCommandSpec: NpmCommandSpec;\n currentGlobalInstall: Awaited<\n ReturnType<typeof resolveCurrentNpmGlobalPackageInstall>\n >;\n manualUpgradeCommand: string;\n}): Promise<void> {\n const args = input.currentGlobalInstall\n ? [\n \"install\",\n \"-g\",\n \"--prefix\",\n input.currentGlobalInstall.globalPrefixPath,\n `${OPENMELD_PACKAGE_NAME}@latest`,\n ]\n : [\"install\", \"-g\", `${OPENMELD_PACKAGE_NAME}@latest`];\n const result = await runCommandSpec(input.npmCommandSpec, args);\n\n if (result.code !== 0) {\n const stderr = result.stderr.trim();\n const stdout = result.stdout.trim();\n const details = stderr || stdout;\n const diagnosis = diagnoseNpmPackageAcquisitionFailure({\n packageName: OPENMELD_PACKAGE_NAME,\n text: [stderr, stdout].filter(Boolean).join(\"\\n\"),\n });\n const diagnosisText = diagnosis\n ? `\\n${formatNpmPackageAcquisitionFailureDiagnosis(diagnosis)}`\n : \"\";\n throw new Error(\n formatOpenMeldCliTextBlock(\n `upgrade failed (exit ${result.code})${details ? `: ${details}` : \"\"}${diagnosisText}\\nManual fallback: \\`${input.manualUpgradeCommand}\\``\n )\n );\n }\n}\n\nasync function runInternalUpgradeServiceAlignment(input: {\n presenter: ReturnType<typeof createPresenter>;\n resolvedView: \"human\" | \"agent\";\n daemonVersion: string;\n cliScriptPath?: string;\n}): Promise<void> {\n const publishedRelease = isBinaryDistribution()\n ? await fetchLatestCliBinaryRelease()\n : null;\n const binaryRelease = publishedRelease?.service\n ? { ...publishedRelease.service, minRequiredCliVersion: null }\n : undefined;\n const daemonVersion = await resolveCurrentDaemonExpectedVersion(\n binaryRelease?.version ?? input.daemonVersion\n );\n const inventory = await inspectDaemonServiceInventory({\n expectedVersion: daemonVersion,\n intendedMode: \"background\",\n intent: \"upgrade_reconcile\",\n });\n const target = buildDaemonServiceTargetSpec({\n daemonVersion,\n });\n const decision = resolveDaemonServiceAlignmentDecision({\n inventory,\n target,\n });\n\n if (decision.status === \"already_aligned\") {\n emitUpgradeReconcileAlreadyCurrent({\n presenter: input.presenter,\n resolvedView: input.resolvedView,\n expectedVersion: daemonVersion,\n });\n return;\n }\n\n if (decision.status === \"not_installed\") {\n emitUpgradeReconcileSkipped({\n presenter: input.presenter,\n resolvedView: input.resolvedView,\n reason: \"not_installed\",\n });\n return;\n }\n\n if (decision.status === \"blocked\") {\n const errorMessage = buildUpgradeAlignmentBlockedMessage(\n decision.reasonCodes\n );\n emitUpgradeReconcileFailure({\n presenter: input.presenter,\n resolvedView: input.resolvedView,\n message: errorMessage,\n errorMessage,\n backupDataPath: null,\n failureStage: null,\n evidencePath: null,\n });\n throw new UpgradeOutputHandledError(errorMessage);\n }\n\n const updateContext = readOpenMeldToolsUpdateContextFromEnv();\n const scheduled = await scheduleDaemonServiceUpdate({\n targetVersion: daemonVersion,\n ...(binaryRelease?.version === daemonVersion ? { binaryRelease } : {}),\n urgency: await resolveServiceUpdateUrgency(),\n ...(updateContext ?? {}),\n targetCliVersion: OPENMELD_VERSION,\n targetServiceVersion: daemonVersion,\n ...(input.cliScriptPath ? { cliScriptPath: input.cliScriptPath } : {}),\n });\n if (input.resolvedView === \"human\") {\n input.presenter.line({\n code: \"upgrade.reconcile.scheduled\",\n text: \"OpenMeld will finish updating the Service in the background. You can close this Terminal.\",\n });\n return;\n }\n input.presenter.data({\n code: \"upgrade.reconcile.scheduled\",\n payload: {\n status: scheduled.status,\n jobId: scheduled.job.jobId,\n targetVersion: scheduled.job.targetVersion,\n },\n });\n}\n\nasync function handoffUpgradeServiceAlignmentToLatestBinary(input: {\n resolvedView: \"human\" | \"agent\";\n command: string;\n argsPrefix: string[];\n}): Promise<void> {\n const useInheritedOutput =\n input.resolvedView === \"human\" &&\n process.stdout.isTTY === true &&\n process.stderr.isTTY === true;\n const handoffResult = await runStreamingCommand(\n input.command,\n process.env.OPENMELD_INTERNAL_MAINTENANCE_WORKER === \"1\"\n ? [...input.argsPrefix, \"maintenance-align-service\"]\n : [\n ...input.argsPrefix,\n \"--view\",\n input.resolvedView,\n \"upgrade\",\n UPGRADE_INTERNAL_ALIGN_SERVICE_FLAG,\n ],\n {\n OPENMELD_INTERNAL_SKIP_STARTUP_UPGRADE: \"1\",\n },\n useInheritedOutput\n );\n if (handoffResult.code !== 0) {\n const processFailure = parseOpenMeldToolsUpdateFailureFrame(\n handoffResult.stdout\n );\n if (processFailure) {\n throw new OpenMeldToolsUpdateFailureError({\n failureCode: processFailure.failureCode,\n message: processFailure.detail,\n });\n }\n if (useInheritedOutput) {\n throw new Error(\n formatUpgradeReconcileFailureMessage({\n errorMessage: `latest CLI handoff exited with status ${String(\n handoffResult.code\n )}`,\n backupDataPath: null,\n failureStage: null,\n evidencePath: null,\n })\n );\n }\n const hasForwardedOutput =\n handoffResult.stderr.trim().length > 0 ||\n handoffResult.stdout.trim().length > 0;\n if (hasForwardedOutput) {\n throw new UpgradeOutputHandledError(\n \"Latest OpenMeld CLI handoff reported a service alignment failure.\"\n );\n }\n throw new Error(\n formatUpgradeReconcileFailureMessage({\n errorMessage: `latest CLI handoff exited with status ${String(handoffResult.code)}`,\n backupDataPath: null,\n failureStage: null,\n evidencePath: null,\n })\n );\n }\n}\n\nasync function resolveLatestInstalledCliScriptPath(input: {\n npmCommandSpec: NpmCommandSpec;\n}): Promise<string> {\n const npmRootResult = await runCommandSpec(input.npmCommandSpec, [\n \"root\",\n \"-g\",\n ]);\n if (npmRootResult.code !== 0) {\n throw new Error(\n npmRootResult.stderr.trim() ||\n npmRootResult.stdout.trim() ||\n \"npm root -g failed\"\n );\n }\n const cliScriptPath = join(\n npmRootResult.stdout.trim(),\n OPENMELD_PACKAGE_NAME,\n \"dist\",\n \"openmeld.js\"\n );\n await stat(cliScriptPath);\n return cliScriptPath;\n}\n\nasync function runCommand(\n command: string,\n args: string[]\n): Promise<{\n code: number;\n stdout: string;\n stderr: string;\n}> {\n return await runSpawnedCommand({\n command,\n args,\n forwardOutput: false,\n });\n}\n\nasync function runCommandSpec(\n commandSpec: NpmCommandSpec,\n args: string[]\n): Promise<{\n code: number;\n stdout: string;\n stderr: string;\n}> {\n return await runCommand(commandSpec.command, [\n ...commandSpec.argsPrefix,\n ...args,\n ]);\n}\n\nasync function runStreamingCommand(\n command: string,\n args: string[],\n envOverrides: NodeJS.ProcessEnv = {},\n useInheritedOutput = false\n): Promise<{\n code: number;\n stdout: string;\n stderr: string;\n}> {\n return await runSpawnedCommand({\n command,\n args,\n forwardOutput: true,\n envOverrides,\n useInheritedOutput,\n });\n}\n\nasync function runSpawnedCommand(input: {\n command: string;\n args: string[];\n forwardOutput: boolean;\n envOverrides?: NodeJS.ProcessEnv;\n useInheritedOutput?: boolean;\n}): Promise<{\n code: number;\n stdout: string;\n stderr: string;\n}> {\n return await new Promise((resolve, reject) => {\n const child = spawn(input.command, input.args, {\n // Preserve inherited terminal output, but never allocate a new console\n // when the same upgrade path runs under the background maintenance task.\n windowsHide: true,\n stdio:\n input.forwardOutput && input.useInheritedOutput\n ? [\"ignore\", \"inherit\", \"inherit\"]\n : [\"ignore\", \"pipe\", \"pipe\"],\n env: {\n ...process.env,\n ...(input.envOverrides ?? {}),\n },\n });\n let stdout = \"\";\n let stderr = \"\";\n\n if (child.stdout) {\n child.stdout.on(\"data\", (chunk: Buffer) => {\n const text = chunk.toString();\n stdout += text;\n if (input.forwardOutput) {\n process.stdout.write(text);\n }\n });\n }\n if (child.stderr) {\n child.stderr.on(\"data\", (chunk: Buffer) => {\n const text = chunk.toString();\n stderr += text;\n if (input.forwardOutput) {\n process.stderr.write(text);\n }\n });\n }\n child.on(\"error\", (error) => {\n reject(error);\n });\n child.on(\"close\", (code) => {\n resolve({\n code: Number(code ?? 1),\n stdout,\n stderr,\n });\n });\n });\n}\n\nfunction formatUpgradeReconcileFailureMessage(input: {\n errorMessage: string;\n backupDataPath: string | null;\n failureStage?: DaemonServiceFailureStage | null;\n evidencePath: string | null;\n}): string {\n const failureContext = formatDaemonFailureContextText({\n backupDataPath: input.backupDataPath,\n evidencePath: input.evidencePath,\n failureStage: input.failureStage ?? null,\n });\n return formatInlineOpenMeldCliCommands(\n `Service reconcile failed: ${input.errorMessage}. Please run \\`openmeld service repair\\` manually.${\n failureContext.length > 0 ? ` ${failureContext}` : \"\"\n }`\n );\n}\n\nfunction buildUpgradeAlignmentBlockedMessage(\n reasonCodes: readonly string[]\n): string {\n if (reasonCodes.includes(\"downgrade_blocked\")) {\n return formatDaemonServiceDowngradeBlockedRecommendation({\n expectedVersion: OPENMELD_VERSION,\n });\n }\n const reasonText =\n reasonCodes.length > 0 ? reasonCodes.join(\", \") : \"unknown\";\n return formatInlineOpenMeldCliCommands(\n `Service alignment is blocked (${reasonText}). Please run \\`openmeld service status\\` or \\`openmeld service repair\\` manually.`\n );\n}\n\nfunction emitUpgradeReconcileAlreadyCurrent(input: {\n presenter: ReturnType<typeof createPresenter>;\n resolvedView: \"human\" | \"agent\";\n expectedVersion: string;\n}): void {\n if (input.resolvedView === \"human\") {\n input.presenter.line({\n code: \"upgrade.reconcile.already_current\",\n text: `OpenMeld Service is already current (v${input.expectedVersion}).`,\n });\n return;\n }\n\n input.presenter.data({\n code: \"upgrade.reconcile.already_current\",\n payload: {\n status: \"already_current\",\n expectedVersion: input.expectedVersion,\n },\n });\n}\n\nfunction emitUpgradeReconcileFailure(input: {\n presenter: ReturnType<typeof createPresenter>;\n resolvedView: \"human\" | \"agent\";\n message: string;\n errorMessage: string;\n backupDataPath: string | null;\n failureStage?: string | null;\n evidencePath: string | null;\n}): void {\n if (input.resolvedView === \"human\") {\n input.presenter.line({\n code: \"upgrade.reconcile.failed\",\n text: input.message,\n });\n return;\n }\n\n input.presenter.data({\n code: \"upgrade.reconcile.failed\",\n payload: {\n ok: false,\n message: input.message,\n errorMessage: input.errorMessage,\n ...(input.backupDataPath ? { backupDataPath: input.backupDataPath } : {}),\n ...(input.failureStage ? { failureStage: input.failureStage } : {}),\n ...(input.evidencePath ? { evidencePath: input.evidencePath } : {}),\n command: \"openmeld service repair\",\n },\n });\n}\n\nfunction resolveUpgradeReconcileSkipMessage(reason: string): {\n text: string;\n command: string;\n} {\n if (reason === \"not_installed\") {\n return {\n text: formatDaemonServiceMissingRecommendation(),\n command: \"openmeld service install\",\n };\n }\n if (reason === \"downgrade_blocked\") {\n return {\n text: formatDaemonServiceDowngradeBlockedRecommendation({\n expectedVersion: OPENMELD_VERSION,\n }),\n command: \"openmeld upgrade\",\n };\n }\n return {\n text: formatInlineOpenMeldCliCommands(\n \"Skipped service reconcile. You can run `openmeld service update` later.\"\n ),\n command: \"openmeld service update\",\n };\n}\n\nfunction emitUpgradeReconcileSkipped(input: {\n presenter: ReturnType<typeof createPresenter>;\n resolvedView: \"human\" | \"agent\";\n reason: string;\n}): void {\n const { text, command } = resolveUpgradeReconcileSkipMessage(input.reason);\n if (input.resolvedView === \"human\") {\n input.presenter.line({\n code: \"upgrade.reconcile.skipped\",\n text,\n });\n return;\n }\n\n input.presenter.data({\n code: \"upgrade.reconcile.skipped\",\n payload: {\n skipped: true,\n reason: input.reason,\n command,\n },\n });\n}\n\ntype UpgradeStageHandle = {\n complete: (text: string) => void;\n fail: (text: string) => void;\n};\n\nfunction startUpgradeStage(input: {\n presenter: ReturnType<typeof createPresenter>;\n resolvedView: \"human\" | \"agent\";\n code: string;\n startedCode?: string;\n startedText: string;\n data?: Record<string, unknown>;\n}): UpgradeStageHandle {\n const startedAtMs = Date.now();\n const startedCode = input.startedCode ?? `${input.code}.started`;\n if (input.resolvedView === \"agent\") {\n input.presenter.data({\n code: startedCode,\n payload: {\n ...(input.data ?? {}),\n message: `${input.startedText}...`,\n state: \"started\",\n },\n });\n } else {\n input.presenter.line({\n code: startedCode,\n text: `• ${input.startedText}...`,\n });\n }\n\n const finish = (state: \"completed\" | \"failed\", text: string): void => {\n const durationMs = resolveElapsedTimeMs(startedAtMs);\n if (input.resolvedView === \"agent\") {\n input.presenter.data({\n code: `${input.code}.${state}`,\n payload: {\n ...(input.data ?? {}),\n durationMs,\n message: text,\n state,\n },\n });\n return;\n }\n input.presenter.line({\n code: `${input.code}.${state}`,\n text: `${state === \"completed\" ? \"✓\" : \"!\"} ${text} · ${formatElapsedTime(durationMs)}`,\n });\n };\n\n return {\n complete: (text) => finish(\"completed\", text),\n fail: (text) => finish(\"failed\", text),\n };\n}\n\nasync function runUpgradeStage<T>(input: {\n presenter: ReturnType<typeof createPresenter>;\n resolvedView: \"human\" | \"agent\";\n code: string;\n startedCode?: string;\n startedText: string;\n completedText: string;\n failedText?: string;\n failureCode?: OpenMeldToolsUpdateFailureCode;\n data?: Record<string, unknown>;\n run: () => Promise<T>;\n}): Promise<T> {\n const stage = startUpgradeStage(input);\n try {\n const result = await input.run();\n stage.complete(input.completedText);\n return result;\n } catch (error) {\n stage.fail(input.failedText ?? `${input.startedText} failed.`);\n throw input.failureCode\n ? withOpenMeldToolsUpdateFailure(error, input.failureCode)\n : error;\n }\n}\n\nfunction emitUpgradeCompleted(input: {\n presenter: ReturnType<typeof createPresenter>;\n resolvedView: \"human\" | \"agent\";\n previousVersion: string;\n currentVersion: string;\n}): void {\n if (input.resolvedView === \"agent\") {\n input.presenter.data({\n code: \"upgrade.completed\",\n payload: {\n previousVersion: input.previousVersion,\n currentVersion: input.currentVersion,\n },\n });\n return;\n }\n input.presenter.line({\n code: \"upgrade.completed\",\n text: \"OpenMeld CLI upgrade completed.\",\n });\n}\n\nfunction toErrorMessage(error: unknown): string {\n if (error instanceof Error) {\n return error.message;\n }\n return String(error);\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAcA,eAAsB,6BACpB,QAAqE,CAAC,GAC7C;CACzB,MAAM,qBAAqB,MAAM,sBAAsB,QAAQ;CAC/D,MAAM,WAAW,MAAM,YAAY,QAAQ;CAC3C,MAAM,oBAAoB,QAAQ,kBAAkB;CACpD,MAAM,iBAAiB,KACrB,mBACA,aAAa,UAAU,YAAY,KACrC;CAGA,IAAI,aAAa,WAAY,MAAM,WAAW,cAAc,GAC1D,OAAO;EACL,SAAS;EACT,YAAY,CAAC;CACf;CAGF,KAAK,MAAM,aAAa,8BAA8B;EACpD;EACA;CACF,CAAC,GACC,IAAI,MAAM,WAAW,SAAS,GAC5B,OAAO;EACL,SAAS;EACT,YAAY,CAAC,SAAS;CACxB;CAIJ,MAAM,IAAI,MACR,gEAAgE,mBAAmB,EACrF;AACF;AAEA,eAAsB,sCAAsC,OAGT;CACjD,MAAM,gBAAgB,MAAM,4BAA4B,MAAM,aAAa;CAC3E,IAAI,CAAC,eACH,OAAO;CAGT,MAAM,kBAAkB,QAAQ,QAAQ,aAAa,CAAC;CACtD,IAAI,SAAS,eAAe,MAAM,MAAM,aACtC,OAAO;CAGT,MAAM,4BAA4B,QAAQ,eAAe;CACzD,IAAI,SAAS,yBAAyB,MAAM,gBAC1C,OAAO;CAGT,MAAM,wBAAwB,QAAQ,yBAAyB;CAM/D,OAAO;EACL;EACA,kBANA,SAAS,qBAAqB,MAAM,QAChC,QAAQ,qBAAqB,IAC7B;EAKJ;CACF;AACF;AAEA,eAAe,4BACb,eACwB;CACxB,MAAM,mBAAmB,iBAAiB,QAAQ,KAAK;CACvD,IAAI,CAAC,kBACH,OAAO;CAGT,MAAM,wBAAwB,MAAM,SAAS,gBAAgB,CAAC,CAAC,YAAY;EACzE,OAAO;CACT,CAAC;CAED,OAAO,2BAA2B,qBAAqB,CAAC,CAAC,SACvD,mBACF,IACI,wBACA;AACN;AAEA,SAAS,8BAA8B,OAG1B;CACX,IAAI,MAAM,aAAa,SACrB,OAAO,CACL,KAAK,MAAM,mBAAmB,gBAAgB,OAAO,OAAO,YAAY,CAC1E;CAGF,OAAO,CACL,KACE,MAAM,mBACN,MACA,OACA,gBACA,OACA,OACA,YACF,CACF;AACF;AAEA,eAAe,WAAW,MAAgC;CACxD,IAAI;EACF,MAAM,KAAK,IAAI;EACf,OAAO;CACT,QAAQ;EACN,OAAO;CACT;AACF;AAEA,SAAS,2BAA2B,MAAsB;CACxD,OAAO,KAAK,WAAW,MAAM,GAAG,CAAC,CAAC,YAAY;AAChD;;;ACvIA,MAAa,kCAAkC;AAC/C,MAAM,8BAA8B;AAEpC,SAAgB,kCACd,QAA8C,CAAC,GACvC;CACR,MAAM,mBAAmB,MAAM,kBAAkB,KAAK;CACtD,IAAI,CAAC,kBACH,OAAO;CAET,OAAO,2BAA2B,oBAAoB,gBAAgB,EAAE;AAC1E;AAEA,MAAa,2CAA2C;CACtD;CACA;CACA;CACA;AACF;AAEA,MAAa,iCAAiC;CAC5C;CACA;CACA;AACF;AAEA,SAAS,oBAAoB,OAAuB;CAClD,IAAI,4BAA4B,KAAK,KAAK,GACxC,OAAO;CAET,OAAO,KAAK,UAAU,KAAK;AAC7B;;;AC/BA,MAAM,uBAAuB;AAE7B,MAAM,wCACJ;AAEF,MAAM,8BACJ;AACF,MAAM,sCACJ;AACF,MAAM,+BAA+B;AAYrC,SAAgB,qCAAqC,OAGJ;CAC/C,MAAM,OAAO,MAAM,KAAK,KAAK;CAC7B,IAAI,CAAC,MACH,OAAO;CAET,MAAM,cAAc,MAAM,eAAe;CAEzC,IAAI,sCAAsC,KAAK,IAAI,GACjD,OAAO;EACL,MAAM;EACN,SACE;EACF,WAAW,CACT,0IACA,+JACF;CACF;CAGF,IAAI,4BAA4B,KAAK,IAAI,GACvC,OAAO;EACL,MAAM;EACN,SACE;EACF,WAAW;GACT;GACA;GACA,mEAAmE,YAAY;EACjF;CACF;CAGF,IAAI,oCAAoC,KAAK,IAAI,GAC/C,OAAO;EACL,MAAM;EACN,SACE;EACF,WAAW;GACT;GACA;GACA,qEAAqE,YAAY;EACnF;CACF;CAGF,IAAI,6BAA6B,KAAK,IAAI,KAAK,KAAK,SAAS,WAAW,GACtE,OAAO;EACL,MAAM;EACN,SACE;EACF,WAAW,CACT,oEACA,0FACF;CACF;CAGF,OAAO;AACT;AAEA,SAAgB,4CACd,WACQ;CACR,OAAO;EACL,mBAAmB,UAAU;EAC7B;EACA,GAAG,UAAU,UAAU,KAAK,SAAS,KAAK,MAAM;CAClD,CAAC,CAAC,KAAK,IAAI;AACb;;;AC7EA,SAAgB,0BAA0B,OAGjC;CACP,MAAM,UAAU,KAAK;EACnB,MAAM,GAAG,MAAM,QAAQ;EACvB,SAAS,kCAAkC,MAAM,OAAO;CAC1D,CAAC;AACH;AAEA,SAAgB,6BACd,SACM;CACN,YAAY;EACV,MAAM;EACN,MAAM,GAAG,QAAQ;EACjB,SAAS,kCAAkC,OAAO;CACpD,CAAC;AACH;AAEA,SAAS,kCACP,SACyB;CACzB,MAAM,WAAW,wBAAwB,yBAAyB,OAAO,CAAC;CAC1E,IAAI,CAAC,UAAU,eACb,MAAM,IAAI,MAAM,WAAW,QAAQ,kBAAkB;CAEvD,OAAO,+BAA+B;EACpC,SAAS,CAAC;EACV,UAAU,SAAS;CACrB,CAAC;AACH;AAEA,SAAS,yBAAyB,SAAuC;CACvE,QAAQ,SAAR;EACE,KAAK,sBACH,OAAO;EACT,SACE,OAAO;CACX;AACF;;;ACsBA,MAAM,wBAAwB;AAC9B,MAAM,8BAA8B;AACpC,MAAM,8BACJ;AACF,MAAM,sCAAsC;AAC5C,MAAM,kCAAkC;AACxC,MAAM,6BAA6B;AACnC,MAAM,+BAA+B;AACrC,MAAa,sCAAsC;AAEnD,IAAM,4BAAN,cAAwC,MAAM;CAC5C,OAAgB;CAEhB,YAAY,SAAiB;EAC3B,MAAM,OAAO;EACb,KAAK,OAAO;CACd;AACF;AAEA,SAAgB,4BACd,OACoC;CACpC,MAAM,uBAAO,IAAI,IAAa;CAC9B,IAAI,UAAmB;CACvB,OAAO,WAAW,OAAO,YAAY,YAAY,CAAC,KAAK,IAAI,OAAO,GAAG;EACnE,KAAK,IAAI,OAAO;EAChB,IACE,mBAAmB,6BAClB,QAA+B,SAAS,mCAEzC,OAAO;EAET,UAAW,QAAgC;CAC7C;CACA,OAAO;AACT;AAuCA,eAAsB,WAAW,OAKf;CAIhB,MAAM,sBAAsB,OAAO,MAHb,sBAAsB,EAC1C,MAAM,MAAM,KACd,CAAC,CACyC;AAC5C;AAEA,eAAsB,sBACpB,uBAAuB,OACR;CACf,IAAI,CAAC,sCAAsC,GACzC,MAAM,IAAI,MAAM,yDAAyD;CAE3E,MAAM,sBACJ;EAAE,KAAK;EAAM;CAAqB,GAClC;EACE,UAAU;EACV,cAAc;EACd,aAAa;CACf,CACF;AACF;AAEA,eAAe,sBACb,OAKA,SACe;CACf,MAAM,YAAY,gBAAgB,OAAO;CACzC,IAAI,QAAQ,iBAAiB,SAC3B,0BAA0B;EACxB;EACA,SAAS;CACX,CAAC;CAGH,MAAM,gBAAgB,sCAAsC;CAC5D,IAAI,CAAC,MAAM,OAAO;EAChB,MAAM,iBAAiB,MAAM,mCAAmC,EAC9D,oBAAoB,eAAe,YACrC,CAAC;EACD,IAAI,gBAAgB;GAClB,0BAA0B;IACxB,WAAW;IACX;IACA,cAAc,QAAQ;GACxB,CAAC;GACD;EACF;CACF;CAEA,IAAI,MAAM,sBAAsB;EAC9B,MAAM,2BAA2B;GAC/B;GACA,cAAc,QAAQ;EACxB,CAAC;EACD;CACF;CAEA,MAAM,cAAc,yBAAyB,OAAO;CACpD,MAAM,iBAAiB;CACvB,MAAM,EAAE,sBAAsB,0BAC5B,MAAM,6BAA6B;CACrC,MAAM,uBAAuB,MAAM,iBAAiB;CACpD,IAAI,CAAC,sBACH,6BAA6B;EAC3B;EACA,cAAc,QAAQ;EACtB;CACF,CAAC;CAGH,MAAM,6BAAY,IAAI,KAAK,EAAA,CAAE,YAAY;CACzC,MAAM,gBAAgB,kBAAkB;EACtC;EACA,cAAc,QAAQ;EACtB,MAAM;EACN,aAAa;CACf,CAAC;CACD,MAAM,gBAAgB,MAAM,qBAAqB;EAC/C;EACA;CACF,CAAC;CACD,IAAI,cAAc,WAAW,gBAC3B,cAAc,KAAK,uCAAuC;MAE1D,cAAc,SAAS,wBAAwB;CAEjD,IAAI,cAAc,WAAW,gBAC3B,MAAM,kBACJ,sBAAsB;EACpB,UAAU;EACV;EACA,eAAe,cAAc;EAC7B,eAAe,cAAc;EAC7B;CACF,CAAC,CACH;CAGF,IAAI,MAAM,OAAO;EACf,uBAAuB;GACrB;GACA,cAAc,QAAQ;GACtB;EACF,CAAC;EACD;CACF;CAEA,IACE,0BAA0B;EACxB;EACA,cAAc,QAAQ;EACtB;CACF,CAAC,GACD;EACA,MAAM,2BAA2B;GAC/B;GACA,cAAc,QAAQ;EACxB,CAAC;EACD;CACF;CAEA,IACE,cAAc,WAAW,cACzB,CAAE,MAAM,2BAA2B;EACjC;EACA,KAAK,QAAQ,MAAM,GAAG;EACtB,SAAS,6BAA6B,cAAc,eAAe,MAAM,cAAc,cAAc;EACrG,qBACE;EACF,cAAc,QAAQ;EACtB,UAAU;CACZ,CAAC,GAED;CAGF,IAAI,cAAc,WAAW,gBAC3B,0BAA0B;EACxB;EACA,cAAc,QAAQ;EACtB;EACA;CACF,CAAC;CAGH,MAAM,2BACJ,gCAAgC,aAAa;CAC/C,IAAI,CAAC,iBAAkB,MAAM,sCAAsC,GAAI;EACrE,MAAM,yBAAyB;GAC7B;GACA,cAAc,QAAQ;EACxB,CAAC;EACD;CACF;CACA,IAAI,yBAAyB,iBAAiB,UAAU;EACtD,MAAM,iCAAiC;GACrC,eAAe;GACf;GACA;GACA,cAAc,QAAQ;GACtB;GACA;EACF,CAAC;EACD;CACF;CAEA,MAAM,8BAA8B;EAClC,eAAe;EACf;EACA;EACA;EACA,cAAc,QAAQ;EACtB;EACA;CACF,CAAC;AACH;AAEA,eAAe,2BAA2B,OAGxB;CAChB,IAAI;EACF,MAAM,mCAAmC;GACvC,GAAG;GACH,eAAe,MAAM,oCAAoC;GACzD,GAAI,QAAQ,KAAK,MAAM,CAAC,qBAAqB,IACzC,EAAE,eAAe,QAAQ,KAAK,GAAG,IACjC,CAAC;EACP,CAAC;CACH,SAAS,OAAO;EACd,MAAM,+BACJ,OACA,qCACF;CACF;AACF;AAEA,eAAe,yBAAyB,OAGtB;CAKhB,MAAM,SAAS,MAJK,qCAClB,CAAC,GACD,EAAE,gBAAgB,MAAM,CAEK,CAAC,CAAC,cAAc,EAAE,eAAe,MAAM,CAAC;CACvE,IAAI,OAAO,WAAW,mBAAmB;EACvC,0BAA0B;GAAE,GAAG;GAAO,WAAW,OAAO;EAAU,CAAC;EACnE;CACF;CACA,IAAI,OAAO,WAAW,aAAa,OAAO,WAAW,WACnD,MAAM,IAAI,MACR,sFACF;CAEF,IAAI,MAAM,iBAAiB,SAAS;EAClC,MAAM,UAAU,KAAK;GAAE,MAAM;GAAuB,SAAS;EAAO,CAAC;EACrE;CACF;CACA,MAAM,UAAU,KAAK;EACnB,MAAM;EACN,MACE,OAAO,WAAW,YACd,4BACA;CACR,CAAC;AACH;AAEA,SAAS,0BAA0B,OAI1B;CACP,IAAI,MAAM,iBAAiB,SAAS;EAClC,MAAM,UAAU,KAAK;GACnB,MAAM;GACN,SAAS;IACP,QAAQ;IACR,WAAW,MAAM;GACnB;EACF,CAAC;EACD;CACF;CACA,MAAM,UAAU,KAAK;EACnB,MAAM;EACN,MAAM;EACN,MAAM;GACJ,aAAa,MAAM,UAAU;GAC7B,OAAO,MAAM,UAAU;GACvB,eAAe,MAAM,UAAU;EACjC;CACF,CAAC;AACH;AAEA,SAAS,uBAAuB,OAIvB;CACP,IAAI,MAAM,iBAAiB,SAAS;EAClC,MAAM,UAAU,KAAK;GACnB,MAAM;GACN,SAAS,MAAM;EACjB,CAAC;EACD;CACF;CAEA,QAAQ,MAAM,cAAc,QAA5B;EACE,KAAK;EACL,KAAK;GACH,0BAA0B,KAAK;GAC/B;EACF,KAAK;GACH,MAAM,UAAU,KAAK;IACnB,MAAM;IACN,MAAM,gCACJ,gBAAgB,MAAM,cAAc,cAAc,yBAAyB,MAAM,cAAc,eAAe,2CAChH;GACF,CAAC;GACD;EACF,KAAK;GACH,MAAM,UAAU,KAAK;IACnB,MAAM;IACN,MAAM,gCACJ,qHACF;GACF,CAAC;GACD;EACF,SAAS;GACP,MAAM,mBAA0B,MAAM;GACtC,MAAM,IAAI,MACR,+BAA+B,OAAO,gBAAgB,GACxD;EACF;CACF;AACF;AAEA,SAAS,0BAA0B,OAIvB;CACV,IAAI,MAAM,cAAc,WAAW,cAAc;EAC/C,IAAI,MAAM,iBAAiB,SACzB,MAAM,UAAU,KAAK;GACnB,MAAM;GACN,SAAS,MAAM;EACjB,CAAC;OAED,MAAM,UAAU,KAAK;GACnB,MAAM;GACN,MAAM,uCAAuC,MAAM,cAAc,eAAe;EAClF,CAAC;EAEH,OAAO;CACT;CAEA,IAAI,MAAM,cAAc,WAAW,qBAAqB;EACtD,IAAI,MAAM,iBAAiB,SACzB,MAAM,UAAU,KAAK;GACnB,MAAM;GACN,SAAS,MAAM;EACjB,CAAC;OAED,MAAM,UAAU,KAAK;GACnB,MAAM;GACN,MAAM,sCAAsC,0BAC1C,MAAM,cAAc,YACtB,EAAE,aAAa,MAAM,cAAc,eAAe,YAAY,MAAM,cAAc,cAAc;EAClG,CAAC;EAEH,OAAO;CACT;CAEA,OAAO;AACT;AAEA,SAAS,gCACP,eAC0B;CAC1B,IAAI,cAAc,WAAW,YAC3B,MAAM,IAAI,MACR,2BAA2B,cAAc,OAAO,wBAClD;CAEF,OAAO;AACT;AAEA,eAAe,iCAAiC,OAO9B;CAChB,IAAI,CAAC,MAAM,cAAc,eACvB,MAAM,IAAI,MACR,wEACF;CAEF,MAAM,gBAAgB,MAAM,cAAc;CAC1C,MAAM,aAAa,MAAM,2BAA2B;EAClD,gBAAgB,6BAA6B;EAC7C,gBAAgB,MAAM;EACtB,kBAAkB,UAAU;GAC1B,QAAQ,OAAO,MACb,yFAAyF,MAAM,QAAQ,IACzG;EACF;EACA,SAAS;CACX,CAAC;CACD,MAAM,gBAAgB,MAAM,gBAAgB;EAC1C,WAAW,MAAM;EACjB,cAAc,MAAM;EACpB,MAAM;EACN,aAAa;EACb,aAAa,kDAAkD,iBAAiB,WAAW,iBAAiB,EAAE;EAC9G,eAAe,gBAAgB,MAAM,cAAc,cAAc;EACjE,MAAM;GACJ,aAAa,MAAM,sBAAsB;GACzC,mBAAmB,WAAW;GAC9B,cAAc,MAAM,cAAc;GAClC,oBAAoB,WAAW;EACjC;EACA,aAAa;EACb,KAAK,YACH,MAAM,uBAAuB;GAC3B,SAAS;GACT,uBAAuB,MAAM;GAC7B;EACF,CAAC;CACL,CAAC;CACD,MAAM,gBAAgB,cAAc;CACpC,MAAM,kBACJ,sBAAsB;EACpB,UAAU,MAAM;EAChB,gBAAgB;EAChB;EACA,eAAe,MAAM,cAAc;EACnC,4BAAW,IAAI,KAAK,EAAA,CAAE,YAAY;CACpC,CAAC,CACH;CAEA,MAAM,gBAAgB;EACpB,WAAW,MAAM;EACjB,cAAc,MAAM;EACpB,MAAM;EACN,aAAa;EACb,eAAe;EACf,aAAa;EACb,KAAK,YACH,MAAM,6CAA6C;GACjD,cAAc,MAAM;GACpB,SAAS,cAAc;GACvB,YAAY,CAAC;EACf,CAAC;CACL,CAAC;CAED,qBAAqB;EACnB,WAAW,MAAM;EACjB,cAAc,MAAM;EACpB,iBAAiB,MAAM;EACvB,gBAAgB;CAClB,CAAC;AACH;AAEA,SAAS,iBAAiB,WAA2B;CACnD,OAAO,KAAK,IAAI,GAAG,KAAK,MAAM,aAAa,OAAO,KAAK,CAAC;AAC1D;AAEA,eAAe,8BAA8B,OAQ3B;CAChB,MAAM,iBAAiB,MAAM,6BAA6B;CAC1D,MAAM,gBAAgB;EACpB,WAAW,MAAM;EACjB,cAAc,MAAM;EACpB,MAAM;EACN,aAAa;EACb,aAAa;EACb,eAAe,gBAAgB,MAAM,cAAc,cAAc;EACjE,MAAM;GACJ,SAAS,MAAM,sBAAsB;GACrC,cAAc,MAAM,cAAc;EACpC;EACA,aAAa;EACb,KAAK,YACH,MAAM,qBAAqB;GACzB;GACA,sBAAsB,MAAM;GAC5B,sBAAsB,MAAM,sBAAsB;EACpD,CAAC;CACL,CAAC;CAED,MAAM,gBAAgB,MAAM,cAAc;CAC1C,MAAM,kBACJ,sBAAsB;EACpB,UAAU,MAAM;EAChB,gBAAgB;EAChB;EACA,eAAe,MAAM,cAAc;EACnC,4BAAW,IAAI,KAAK,EAAA,CAAE,YAAY;CACpC,CAAC,CACH;CAEA,MAAM,gBAAgB;EACpB,WAAW,MAAM;EACjB,cAAc,MAAM;EACpB,MAAM;EACN,aAAa;EACb,eAAe;EACf,aAAa;EACb,KAAK,YACH,MAAM,6CAA6C;GACjD,cAAc,MAAM;GACpB,SAAS,QAAQ;GACjB,YAAY,CACV,MAAM,sBAAsB,iBACzB,MAAM,oCAAoC,EACzC,eACF,CAAC,CACL;EACF,CAAC;CACL,CAAC;CAED,qBAAqB;EACnB,WAAW,MAAM;EACjB,cAAc,MAAM;EACpB,iBAAiB,MAAM;EACvB,gBAAgB;CAClB,CAAC;AACH;AAEA,eAAe,+BAKZ;CACD,IAAI,qBAAqB,GACvB,OAAO;EACL,sBAAsB;EACtB,uBAAuB;GACrB,MAAM;GACN,OAAO,gCAAgC;EACzC;CACF;CAEF,MAAM,uBAAuB,MAAM,sCAAsC;EACvE,aAAa;EACb,GAAI,sCAAsC,KAC1C,QAAQ,IAAI,sCACR,EAAE,eAAe,QAAQ,IAAI,oCAAoC,IACjE,CAAC;CACP,CAAC;CACD,IACE,QAAQ,IAAI,yCAAyC,OACrD,CAAC,sBAED,MAAM,IAAI,MACR,2HACF;CAEF,OAAO;EACL;EACA,uBAAuB;GACrB,MAAM;GACN,OAAO,kCAAkC,EACvC,kBAAkB,sBAAsB,oBAAoB,KAC9D,CAAC;EACH;CACF;AACF;AAEA,SAAgB,gCACd,MAAyB,QAAQ,KACzB;CACR,OAAO,IAAI,wBAAwB,YACjC,IAAI,qCAAqC,8BACvC,sCACA;AACN;AAEA,SAAS,4BAA4B,UAAyC;CAC5E,OAAO,SAAS,SAAS,QACrB,QAAQ,SAAS,MAAM,8HACvB,SAAS,SAAS,MAAM;AAC9B;AAEA,SAAS,6BAA6B,OAI5B;CACR,MAAM,eAAe,2BACnB,iGAAiG,4BAA4B,MAAM,qBAAqB,EAAE,8GAC5J;CACA,IAAI,MAAM,iBAAiB,SAAS;EAClC,MAAM,UAAU,KAAK;GACnB,MAAM;GACN,SAAS;IACP,SACE;IACF,WAAW;KACT,4BAA4B,MAAM,qBAAqB;KACvD;KACA;KACA;IACF;IACA,qBAAqB,MAAM,sBAAsB,SAAS;GAC5D;EACF,CAAC;EACD,MAAM,IAAI,0BAA0B,YAAY;CAClD;CACA,MAAM,IAAI,MAAM,YAAY;AAC9B;AAEA,SAAS,0BAA0B,OAKzB;CACR,MAAM,eAAe,2BACnB,yBAAyB,MAAM,cAAc,MAAM,2EAA2E,0BAC5H,MAAM,cAAc,YACtB,EAAE,oDAAoD,4BAA4B,MAAM,qBAAqB,GAC/G;CACA,IAAI,MAAM,iBAAiB,SAAS;EAClC,MAAM,UAAU,KAAK;GACnB,MAAM;GACN,SAAS;IACP,GAAG,MAAM;IACT,WAAW;KACT,4BAA4B,MAAM,qBAAqB;KACvD;KACA;IACF;IACA,qBAAqB,MAAM,sBAAsB,SAAS;GAC5D;EACF,CAAC;EACD,MAAM,IAAI,0BAA0B,YAAY;CAClD;CACA,MAAM,IAAI,MAAM,YAAY;AAC9B;AAEA,eAAe,qBAAqB,OAGT;CACzB,MAAM,eAAe,kCAAkC;CACvD,IAAI;EACF,IAAI,iBAAiB,UAAU;GAC7B,MAAM,aAAa,MAAM,4BAA4B;GACrD,MAAM,gBAAgB,WAAW;GACjC,OAAO;IACL,QAAQ,yBACN,8BAA8B;KAC5B,aAAa,MAAM;KACnB,WAAW;IACb,CAAC,CACH;IACA;IACA,gBAAgB,MAAM;IACtB;IACA,eAAe,WAAW;IAC1B,WAAW,MAAM;IACjB,eAAe;GACjB;EACF;EAEA,MAAM,aAAa,MAAM,uBAAuB,qBAAqB;EACrE,MAAM,gBAAgB,WAAW;EACjC,OAAO;GACL,QAAQ,yBACN,8BAA8B;IAC5B,aAAa,MAAM;IACnB,WAAW;GACb,CAAC,CACH;GACA;GACA,gBAAgB,MAAM;GACtB;GACA,eAAe,WAAW;GAC1B,WAAW,MAAM;EACnB;CACF,SAAS,OAAO;EACd,OAAO;GACL,QAAQ;GACR;GACA,gBAAgB,MAAM;GACtB,WAAW,MAAM;GACjB,OAAO,eAAe,KAAK;EAC7B;CACF;AACF;AAEA,SAAS,yBACP,WACiD;CACjD,IAAI,cAAc,WAChB,OAAO;CAET,IAAI,cAAc,aAChB,OAAO;CAET,OAAO;AACT;AAEA,SAAS,oCAAyD;CAChE,OAAO,qBAAqB,IAAI,WAAW;AAC7C;AAEA,SAAS,0BAA0B,cAA2C;CAC5E,OAAO,iBAAiB,WAAW,4BAA4B;AACjE;AAEA,eAAe,2BAA2B,OAOrB;CACnB,IAAI,MAAM,KACR,OAAO;CAET,IAAI,CAAC,MAAM,aAAa;EACtB,IAAI,MAAM,iBAAiB,SACzB,MAAM,oCAAoC,MAAM,QAAQ;EAE1D,MAAM,IAAI,MACR,2BACE,GAAG,MAAM,oBAAoB,sCAC/B,CACF;CACF;CAEA,MAAM,SAAS,MAAM,QAAQ;EAC3B,SAAS,MAAM;EACf,cAAc;CAChB,CAAC;CACD,IAAI,SAAS,MAAM,KAAK,CAAC,QAAQ;EAC/B,OAAO,YAAY;EACnB,OAAO;CACT;CACA,OAAO;AACT;AAEA,eAAe,uBAAuB,OAOnC;CACD,MAAM,SAAS,MAAM,QAAQ,KAAK,OAAO,GAAG,uBAAuB,CAAC;CACpE,IAAI;EACF,MAAM,gBAAgB,MAAM,gCAAgC;GAC1D,gBAAgB;GAChB,WAAW;GACX,kBAAkB,UAAU;IAC1B,QAAQ,OAAO,MACb,yEAAyE,MAAM,QAAQ,IACzF;GACF;GACA,MAAM,MAAM;GACZ,SAAS,MAAM;EACjB,CAAC;EACD,MAAM,eAAe,KACnB,QACA,6BAA6B,MAAM,OAAO,CAC5C;EACA,MAAM,UAAU,cAAc,aAAa;EAC3C,MAAM,MAAM,cAAc,GAAK;EAC/B,MAAM,6BAA6B;GACjC,sBAAsB,oCAAoC;GAC1D;GACA,6BAA6B,yBAAyB,MAAM;GAC5D,SAAS,MAAM;GACf;EACF,CAAC;EACD,MAAM,8BAA8B;GAClC,sBAAsB,oCAAoC;GAC1D;GACA,SAAS,MAAM;GACf,gBAAgB;GAChB,WAAW;EACb,CAAC;EAED,MAAM,gBAAgB,MAAM,WAAW,cAAc;GACnD;GACA;GACA;EACF,CAAC;EACD,IAAI,cAAc,SAAS,GAAG;GAC5B,MAAM,UACJ,cAAc,OAAO,KAAK,KAAK,cAAc,OAAO,KAAK;GAC3D,MAAM,IAAI,MACR,2BACE,oCAAoC,cAAc,KAAK,GACrD,UAAU,KAAK,YAAY,GAC5B,qBAAqB,4BAA4B,MAAM,qBAAqB,GAC/E,CACF;EACF;EAEA,MAAM,YAAY,2BAA2B,cAAc,MAAM;EACjE,IAAI,UAAU,YAAY,MAAM,QAAQ,SACtC,MAAM,IAAI,MACR,wCAAwC,UAAU,QAAQ,aAAa,MAAM,QAAQ,SACvF;EAEF,OAAO;CACT,UAAU;EACR,MAAM,GAAG,QAAQ;GAAE,WAAW;GAAM,OAAO;EAAK,CAAC,CAAC,CAAC,YAAY,KAAA,CAAS;CAC1E;AACF;AAEA,SAAS,+BAAuC;CAC9C,OACE,QAAQ,IAAI,4CAA4C,KAAK,KAC7D,QAAQ;AAEZ;AAEA,SAAS,6BAA6B,SAAuC;CAC3E,MAAM,WAAW,IAAI,IAAI,QAAQ,GAAG,CAAC,CAAC;CACtC,OACE,SAAS,QAAQ,KAAK,gBAAgB,QAAQ,SAAS,GAAG,QAAQ;AAEtE;AAEA,SAAS,2BAA2B,QAGlC;CACA,MAAM,WAAW,OACd,MAAM,+BAA+B,CAAC,CACtC,KAAK,SAAS,KAAK,KAAK,CAAC,CAAC,CAC1B,MAAM,SAAS,KAAK,WAAW,GAAG,CAAC;CACtC,IAAI,CAAC,UACH,MAAM,IAAI,MAAM,8CAA8C;CAEhE,IAAI;CACJ,IAAI;EACF,SAAS,KAAK,MAAM,QAAQ;CAC9B,SAAS,OAAO;EACd,MAAM,IAAI,MACR,6CAA6C,eAAe,KAAK,GACnE;CACF;CACA,IAAI,CAAC,UAAU,OAAO,WAAW,UAC/B,MAAM,IAAI,MAAM,qDAAqD;CAEvE,MAAM,SAAS;CACf,IAAI,OAAO,SAAS,oBAClB,MAAM,IAAI,MAAM,wDAAwD;CAE1E,MAAM,UACJ,OAAO,OAAO,YAAY,WAAW,OAAO,QAAQ,KAAK,IAAI;CAC/D,MAAM,oBACJ,OAAO,OAAO,sBAAsB,WAChC,OAAO,kBAAkB,KAAK,IAC9B;CACN,IAAI,EAAE,WAAW,oBACf,MAAM,IAAI,MAAM,wDAAwD;CAE1E,OAAO;EAAE;EAAS;CAAkB;AACtC;AAEA,eAAe,qBAAqB,OAMlB;CAChB,MAAM,OAAO,MAAM,uBACf;EACE;EACA;EACA;EACA,MAAM,qBAAqB;EAC3B,GAAG,sBAAsB;CAC3B,IACA;EAAC;EAAW;EAAM,GAAG,sBAAsB;CAAQ;CACvD,MAAM,SAAS,MAAM,eAAe,MAAM,gBAAgB,IAAI;CAE9D,IAAI,OAAO,SAAS,GAAG;EACrB,MAAM,SAAS,OAAO,OAAO,KAAK;EAClC,MAAM,SAAS,OAAO,OAAO,KAAK;EAClC,MAAM,UAAU,UAAU;EAC1B,MAAM,YAAY,qCAAqC;GACrD,aAAa;GACb,MAAM,CAAC,QAAQ,MAAM,CAAC,CAAC,OAAO,OAAO,CAAC,CAAC,KAAK,IAAI;EAClD,CAAC;EACD,MAAM,gBAAgB,YAClB,KAAK,4CAA4C,SAAS,MAC1D;EACJ,MAAM,IAAI,MACR,2BACE,wBAAwB,OAAO,KAAK,GAAG,UAAU,KAAK,YAAY,KAAK,cAAc,uBAAuB,MAAM,qBAAqB,GACzI,CACF;CACF;AACF;AAEA,eAAe,mCAAmC,OAKhC;CAChB,MAAM,mBAAmB,qBAAqB,IAC1C,MAAM,4BAA4B,IAClC;CACJ,MAAM,gBAAgB,kBAAkB,UACpC;EAAE,GAAG,iBAAiB;EAAS,uBAAuB;CAAK,IAC3D,KAAA;CACJ,MAAM,gBAAgB,MAAM,oCAC1B,eAAe,WAAW,MAAM,aAClC;CASA,MAAM,WAAW,sCAAsC;EACrD,WAAA,MATsB,8BAA8B;GACpD,iBAAiB;GACjB,cAAc;GACd,QAAQ;EACV,CAAC;EAMC,QALa,6BAA6B,EAC1C,cACF,CAGO;CACP,CAAC;CAED,IAAI,SAAS,WAAW,mBAAmB;EACzC,mCAAmC;GACjC,WAAW,MAAM;GACjB,cAAc,MAAM;GACpB,iBAAiB;EACnB,CAAC;EACD;CACF;CAEA,IAAI,SAAS,WAAW,iBAAiB;EACvC,4BAA4B;GAC1B,WAAW,MAAM;GACjB,cAAc,MAAM;GACpB,QAAQ;EACV,CAAC;EACD;CACF;CAEA,IAAI,SAAS,WAAW,WAAW;EACjC,MAAM,eAAe,oCACnB,SAAS,WACX;EACA,4BAA4B;GAC1B,WAAW,MAAM;GACjB,cAAc,MAAM;GACpB,SAAS;GACT;GACA,gBAAgB;GAChB,cAAc;GACd,cAAc;EAChB,CAAC;EACD,MAAM,IAAI,0BAA0B,YAAY;CAClD;CAEA,MAAM,gBAAgB,sCAAsC;CAC5D,MAAM,YAAY,MAAM,4BAA4B;EAClD,eAAe;EACf,GAAI,eAAe,YAAY,gBAAgB,EAAE,cAAc,IAAI,CAAC;EACpE,SAAS,MAAM,4BAA4B;EAC3C,GAAI,iBAAiB,CAAC;EACtB,kBAAkB;EAClB,sBAAsB;EACtB,GAAI,MAAM,gBAAgB,EAAE,eAAe,MAAM,cAAc,IAAI,CAAC;CACtE,CAAC;CACD,IAAI,MAAM,iBAAiB,SAAS;EAClC,MAAM,UAAU,KAAK;GACnB,MAAM;GACN,MAAM;EACR,CAAC;EACD;CACF;CACA,MAAM,UAAU,KAAK;EACnB,MAAM;EACN,SAAS;GACP,QAAQ,UAAU;GAClB,OAAO,UAAU,IAAI;GACrB,eAAe,UAAU,IAAI;EAC/B;CACF,CAAC;AACH;AAEA,eAAe,6CAA6C,OAI1C;CAChB,MAAM,qBACJ,MAAM,iBAAiB,WACvB,QAAQ,OAAO,UAAU,QACzB,QAAQ,OAAO,UAAU;CAC3B,MAAM,gBAAgB,MAAM,oBAC1B,MAAM,SACN,QAAQ,IAAI,yCAAyC,MACjD,CAAC,GAAG,MAAM,YAAY,2BAA2B,IACjD;EACE,GAAG,MAAM;EACT;EACA,MAAM;EACN;EACA;CACF,GACJ,EACE,wCAAwC,IAC1C,GACA,kBACF;CACA,IAAI,cAAc,SAAS,GAAG;EAC5B,MAAM,iBAAiB,qCACrB,cAAc,MAChB;EACA,IAAI,gBACF,MAAM,IAAI,gCAAgC;GACxC,aAAa,eAAe;GAC5B,SAAS,eAAe;EAC1B,CAAC;EAEH,IAAI,oBACF,MAAM,IAAI,MACR,qCAAqC;GACnC,cAAc,yCAAyC,OACrD,cAAc,IAChB;GACA,gBAAgB;GAChB,cAAc;GACd,cAAc;EAChB,CAAC,CACH;EAKF,IAFE,cAAc,OAAO,KAAK,CAAC,CAAC,SAAS,KACrC,cAAc,OAAO,KAAK,CAAC,CAAC,SAAS,GAErC,MAAM,IAAI,0BACR,mEACF;EAEF,MAAM,IAAI,MACR,qCAAqC;GACnC,cAAc,yCAAyC,OAAO,cAAc,IAAI;GAChF,gBAAgB;GAChB,cAAc;GACd,cAAc;EAChB,CAAC,CACH;CACF;AACF;AAEA,eAAe,oCAAoC,OAE/B;CAClB,MAAM,gBAAgB,MAAM,eAAe,MAAM,gBAAgB,CAC/D,QACA,IACF,CAAC;CACD,IAAI,cAAc,SAAS,GACzB,MAAM,IAAI,MACR,cAAc,OAAO,KAAK,KACxB,cAAc,OAAO,KAAK,KAC1B,oBACJ;CAEF,MAAM,gBAAgB,KACpB,cAAc,OAAO,KAAK,GAC1B,uBACA,QACA,aACF;CACA,MAAM,KAAK,aAAa;CACxB,OAAO;AACT;AAEA,eAAe,WACb,SACA,MAKC;CACD,OAAO,MAAM,kBAAkB;EAC7B;EACA;EACA,eAAe;CACjB,CAAC;AACH;AAEA,eAAe,eACb,aACA,MAKC;CACD,OAAO,MAAM,WAAW,YAAY,SAAS,CAC3C,GAAG,YAAY,YACf,GAAG,IACL,CAAC;AACH;AAEA,eAAe,oBACb,SACA,MACA,eAAkC,CAAC,GACnC,qBAAqB,OAKpB;CACD,OAAO,MAAM,kBAAkB;EAC7B;EACA;EACA,eAAe;EACf;EACA;CACF,CAAC;AACH;AAEA,eAAe,kBAAkB,OAU9B;CACD,OAAO,MAAM,IAAI,SAAS,SAAS,WAAW;EAC5C,MAAM,QAAQ,MAAM,MAAM,SAAS,MAAM,MAAM;GAG7C,aAAa;GACb,OACE,MAAM,iBAAiB,MAAM,qBACzB;IAAC;IAAU;IAAW;GAAS,IAC/B;IAAC;IAAU;IAAQ;GAAM;GAC/B,KAAK;IACH,GAAG,QAAQ;IACX,GAAI,MAAM,gBAAgB,CAAC;GAC7B;EACF,CAAC;EACD,IAAI,SAAS;EACb,IAAI,SAAS;EAEb,IAAI,MAAM,QACR,MAAM,OAAO,GAAG,SAAS,UAAkB;GACzC,MAAM,OAAO,MAAM,SAAS;GAC5B,UAAU;GACV,IAAI,MAAM,eACR,QAAQ,OAAO,MAAM,IAAI;EAE7B,CAAC;EAEH,IAAI,MAAM,QACR,MAAM,OAAO,GAAG,SAAS,UAAkB;GACzC,MAAM,OAAO,MAAM,SAAS;GAC5B,UAAU;GACV,IAAI,MAAM,eACR,QAAQ,OAAO,MAAM,IAAI;EAE7B,CAAC;EAEH,MAAM,GAAG,UAAU,UAAU;GAC3B,OAAO,KAAK;EACd,CAAC;EACD,MAAM,GAAG,UAAU,SAAS;GAC1B,QAAQ;IACN,MAAM,OAAO,QAAQ,CAAC;IACtB;IACA;GACF,CAAC;EACH,CAAC;CACH,CAAC;AACH;AAEA,SAAS,qCAAqC,OAKnC;CACT,MAAM,iBAAiB,+BAA+B;EACpD,gBAAgB,MAAM;EACtB,cAAc,MAAM;EACpB,cAAc,MAAM,gBAAgB;CACtC,CAAC;CACD,OAAO,gCACL,6BAA6B,MAAM,aAAa,oDAC9C,eAAe,SAAS,IAAI,IAAI,mBAAmB,IAEvD;AACF;AAEA,SAAS,oCACP,aACQ;CACR,IAAI,YAAY,SAAS,mBAAmB,GAC1C,OAAO,kDAAkD,EACvD,iBAAiB,iBACnB,CAAC;CAIH,OAAO,gCACL,iCAFA,YAAY,SAAS,IAAI,YAAY,KAAK,IAAI,IAAI,UAEN,mFAC9C;AACF;AAEA,SAAS,mCAAmC,OAInC;CACP,IAAI,MAAM,iBAAiB,SAAS;EAClC,MAAM,UAAU,KAAK;GACnB,MAAM;GACN,MAAM,yCAAyC,MAAM,gBAAgB;EACvE,CAAC;EACD;CACF;CAEA,MAAM,UAAU,KAAK;EACnB,MAAM;EACN,SAAS;GACP,QAAQ;GACR,iBAAiB,MAAM;EACzB;CACF,CAAC;AACH;AAEA,SAAS,4BAA4B,OAQ5B;CACP,IAAI,MAAM,iBAAiB,SAAS;EAClC,MAAM,UAAU,KAAK;GACnB,MAAM;GACN,MAAM,MAAM;EACd,CAAC;EACD;CACF;CAEA,MAAM,UAAU,KAAK;EACnB,MAAM;EACN,SAAS;GACP,IAAI;GACJ,SAAS,MAAM;GACf,cAAc,MAAM;GACpB,GAAI,MAAM,iBAAiB,EAAE,gBAAgB,MAAM,eAAe,IAAI,CAAC;GACvE,GAAI,MAAM,eAAe,EAAE,cAAc,MAAM,aAAa,IAAI,CAAC;GACjE,GAAI,MAAM,eAAe,EAAE,cAAc,MAAM,aAAa,IAAI,CAAC;GACjE,SAAS;EACX;CACF,CAAC;AACH;AAEA,SAAS,mCAAmC,QAG1C;CACA,IAAI,WAAW,iBACb,OAAO;EACL,MAAM,yCAAyC;EAC/C,SAAS;CACX;CAEF,IAAI,WAAW,qBACb,OAAO;EACL,MAAM,kDAAkD,EACtD,iBAAiB,iBACnB,CAAC;EACD,SAAS;CACX;CAEF,OAAO;EACL,MAAM,gCACJ,yEACF;EACA,SAAS;CACX;AACF;AAEA,SAAS,4BAA4B,OAI5B;CACP,MAAM,EAAE,MAAM,YAAY,mCAAmC,MAAM,MAAM;CACzE,IAAI,MAAM,iBAAiB,SAAS;EAClC,MAAM,UAAU,KAAK;GACnB,MAAM;GACN;EACF,CAAC;EACD;CACF;CAEA,MAAM,UAAU,KAAK;EACnB,MAAM;EACN,SAAS;GACP,SAAS;GACT,QAAQ,MAAM;GACd;EACF;CACF,CAAC;AACH;AAOA,SAAS,kBAAkB,OAOJ;CACrB,MAAM,cAAc,KAAK,IAAI;CAC7B,MAAM,cAAc,MAAM,eAAe,GAAG,MAAM,KAAK;CACvD,IAAI,MAAM,iBAAiB,SACzB,MAAM,UAAU,KAAK;EACnB,MAAM;EACN,SAAS;GACP,GAAI,MAAM,QAAQ,CAAC;GACnB,SAAS,GAAG,MAAM,YAAY;GAC9B,OAAO;EACT;CACF,CAAC;MAED,MAAM,UAAU,KAAK;EACnB,MAAM;EACN,MAAM,KAAK,MAAM,YAAY;CAC/B,CAAC;CAGH,MAAM,UAAU,OAA+B,SAAuB;EACpE,MAAM,aAAa,qBAAqB,WAAW;EACnD,IAAI,MAAM,iBAAiB,SAAS;GAClC,MAAM,UAAU,KAAK;IACnB,MAAM,GAAG,MAAM,KAAK,GAAG;IACvB,SAAS;KACP,GAAI,MAAM,QAAQ,CAAC;KACnB;KACA,SAAS;KACT;IACF;GACF,CAAC;GACD;EACF;EACA,MAAM,UAAU,KAAK;GACnB,MAAM,GAAG,MAAM,KAAK,GAAG;GACvB,MAAM,GAAG,UAAU,cAAc,MAAM,IAAI,GAAG,KAAK,KAAK,kBAAkB,UAAU;EACtF,CAAC;CACH;CAEA,OAAO;EACL,WAAW,SAAS,OAAO,aAAa,IAAI;EAC5C,OAAO,SAAS,OAAO,UAAU,IAAI;CACvC;AACF;AAEA,eAAe,gBAAmB,OAWnB;CACb,MAAM,QAAQ,kBAAkB,KAAK;CACrC,IAAI;EACF,MAAM,SAAS,MAAM,MAAM,IAAI;EAC/B,MAAM,SAAS,MAAM,aAAa;EAClC,OAAO;CACT,SAAS,OAAO;EACd,MAAM,KAAK,MAAM,cAAc,GAAG,MAAM,YAAY,SAAS;EAC7D,MAAM,MAAM,cACR,+BAA+B,OAAO,MAAM,WAAW,IACvD;CACN;AACF;AAEA,SAAS,qBAAqB,OAKrB;CACP,IAAI,MAAM,iBAAiB,SAAS;EAClC,MAAM,UAAU,KAAK;GACnB,MAAM;GACN,SAAS;IACP,iBAAiB,MAAM;IACvB,gBAAgB,MAAM;GACxB;EACF,CAAC;EACD;CACF;CACA,MAAM,UAAU,KAAK;EACnB,MAAM;EACN,MAAM;CACR,CAAC;AACH;AAEA,SAAS,eAAe,OAAwB;CAC9C,IAAI,iBAAiB,OACnB,OAAO,MAAM;CAEf,OAAO,OAAO,KAAK;AACrB"}

package/dist/upgrade-DgmYWeNu.js ADDED Viewed

@@ -0,0 +1,4 @@
+#!/usr/bin/env node
+import { i as runMaintenanceUpgrade } from "./upgrade-DfJwCD5H.js";
+export { runMaintenanceUpgrade };

package/dist/windows/openmeld-windows-process.exe ADDED Viewed

Binary file

package/dist/windows-artifact-DJ9DKjfc.js ADDED Viewed

@@ -0,0 +1,16 @@
+#!/usr/bin/env node
+import * as z$1 from "zod/v4";
+//#region ../../packages/schemas/dist/windows-artifact.js
+const WINDOWS_INTERNAL_PREVIEW_MANIFEST_URL = "https://openmeld.ai/cli/manifest.json?channel=windows-preview";
+const WINDOWS_PROCESS_HELPER_FILENAME = "openmeld-windows-process.exe";
+const windowsManagedCliInstallationSchema = z$1.strictObject({
+	schemaVersion: z$1.literal(1),
+	version: z$1.string().max(128).regex(/^[0-9][0-9A-Za-z.+-]*$/u)
+});
+/** Exact Authenticode publisher identity shared by CLI and Desktop artifacts. */
+const windowsPublisherNameSchema = z$1.string().trim().min(1).max(512).regex(/^[^\p{Cc}]+$/u);
+//#endregion
+export { windowsPublisherNameSchema as i, WINDOWS_PROCESS_HELPER_FILENAME as n, windowsManagedCliInstallationSchema as r, WINDOWS_INTERNAL_PREVIEW_MANIFEST_URL as t };
+//# sourceMappingURL=windows-artifact-DJ9DKjfc.js.map

package/dist/windows-artifact-DJ9DKjfc.js.map ADDED Viewed

@@ -0,0 +1 @@

+ {"version":3,"file":"windows-artifact-DJ9DKjfc.js","names":[],"sources":["../../../packages/schemas/dist/windows-artifact.js"],"sourcesContent":["import * as z$1 from \"zod/v4\";\n//#region src/windows-artifact.ts\nconst WINDOWS_INTERNAL_PREVIEW_MANIFEST_URL = \"https://openmeld.ai/cli/manifest.json?channel=windows-preview\";\nconst WINDOWS_PROCESS_HELPER_FILENAME = \"openmeld-windows-process.exe\";\nconst windowsManagedCliInstallationSchema = z$1.strictObject({\n\tschemaVersion: z$1.literal(1),\n\tversion: z$1.string().max(128).regex(/^[0-9][0-9A-Za-z.+-]*$/u)\n});\n/** Exact Authenticode publisher identity shared by CLI and Desktop artifacts. */\nconst windowsPublisherNameSchema = z$1.string().trim().min(1).max(512).regex(/^[^\\p{Cc}]+$/u);\n//#endregion\nexport { WINDOWS_INTERNAL_PREVIEW_MANIFEST_URL, WINDOWS_PROCESS_HELPER_FILENAME, windowsManagedCliInstallationSchema, windowsPublisherNameSchema };\n\n//# sourceMappingURL=windows-artifact.js.map"],"mappings":";;;;AAEA,MAAM,wCAAwC;AAC9C,MAAM,kCAAkC;AACxC,MAAM,sCAAsC,IAAI,aAAa;CAC5D,eAAe,IAAI,QAAQ,CAAC;CAC5B,SAAS,IAAI,OAAO,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,MAAM,yBAAyB;AAC/D,CAAC;;AAED,MAAM,6BAA6B,IAAI,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,MAAM,eAAe"}

package/dist/windows-task-command-COu_6Ke3.js ADDED Viewed

@@ -0,0 +1,74 @@
+#!/usr/bin/env node
+import { n as quoteWindowsProcessArgument } from "./process-launch-B0pHlkV_.js";
+import * as z$1 from "zod/v4";
+//#region ../../packages/schemas/dist/schemas/daemon/windows-user-task.js
+const windowsUserTaskRequestSchema = z$1.strictObject({
+	name: z$1.string().min(1),
+	legacyScript: z$1.string().min(1),
+	operation: z$1.enum([
+		"install",
+		"status",
+		"start",
+		"stop",
+		"enable",
+		"disable",
+		"uninstall"
+	]),
+	executable: z$1.string().optional(),
+	arguments: z$1.string().optional(),
+	workingDirectory: z$1.string().optional(),
+	periodic: z$1.boolean().optional()
+});
+const windowsUserTaskStatusSchema = z$1.strictObject({
+	installed: z$1.boolean(),
+	running: z$1.boolean(),
+	enabled: z$1.boolean(),
+	legacy: z$1.boolean(),
+	actionArguments: z$1.string().nullable()
+});
+const windowsUserTaskActionSchema = z$1.strictObject({
+	executable: z$1.string().min(1),
+	args: z$1.array(z$1.string()),
+	env: z$1.record(z$1.string(), z$1.string()),
+	logPath: z$1.string().min(1)
+});
+const windowsUserTaskStoredActionSchema = windowsUserTaskActionSchema.extend({
+	workingDirectory: z$1.string().optional(),
+	pendingJobPath: z$1.string().optional()
+}).transform(({ executable, args, env, logPath }) => ({
+	executable,
+	args,
+	env,
+	logPath
+}));
+//#endregion
+//#region src/local-service/lifecycle/windows-task-command.ts
+const WINDOWS_TASK_ARGUMENT = "--openmeld-windows-task";
+const DIRECT_TASK_PATTERN = /(?:^| )--openmeld-windows-task ([A-Za-z0-9+/=]+)$/u;
+function windowsDirectTaskArguments(input) {
+	const action = windowsUserTaskActionSchema.parse({
+		executable: input.executable,
+		args: input.args,
+		env: input.env,
+		logPath: input.logPath
+	});
+	if (action.args.includes("--openmeld-windows-task")) throw new Error("A Windows task cannot contain another task envelope.");
+	const encoded = Buffer.from(JSON.stringify(action)).toString("base64");
+	return [
+		...action.args.map(quoteWindowsProcessArgument),
+		WINDOWS_TASK_ARGUMENT,
+		encoded
+	].join(" ");
+}
+function readWindowsDirectTaskAction(argumentsText) {
+	const encoded = argumentsText.match(DIRECT_TASK_PATTERN)?.[1];
+	if (!encoded) return null;
+	const action = windowsUserTaskActionSchema.parse(JSON.parse(Buffer.from(encoded, "base64").toString("utf8")));
+	if (windowsDirectTaskArguments(action) !== argumentsText) throw new Error("Windows task arguments do not match its launch envelope.");
+	return action;
+}
+//#endregion
+export { windowsUserTaskRequestSchema as a, windowsUserTaskActionSchema as i, readWindowsDirectTaskAction as n, windowsUserTaskStatusSchema as o, windowsDirectTaskArguments as r, windowsUserTaskStoredActionSchema as s, WINDOWS_TASK_ARGUMENT as t };
+//# sourceMappingURL=windows-task-command-COu_6Ke3.js.map

package/dist/windows-task-command-COu_6Ke3.js.map ADDED Viewed

@@ -0,0 +1 @@

+ {"version":3,"file":"windows-task-command-COu_6Ke3.js","names":[],"sources":["../../../packages/schemas/dist/schemas/daemon/windows-user-task.js","../src/local-service/lifecycle/windows-task-command.ts"],"sourcesContent":["import * as z$1 from \"zod/v4\";\n//#region src/schemas/daemon/windows-user-task.ts\nconst windowsUserTaskRequestSchema = z$1.strictObject({\n\tname: z$1.string().min(1),\n\tlegacyScript: z$1.string().min(1),\n\toperation: z$1.enum([\n\t\t\"install\",\n\t\t\"status\",\n\t\t\"start\",\n\t\t\"stop\",\n\t\t\"enable\",\n\t\t\"disable\",\n\t\t\"uninstall\"\n\t]),\n\texecutable: z$1.string().optional(),\n\targuments: z$1.string().optional(),\n\tworkingDirectory: z$1.string().optional(),\n\tperiodic: z$1.boolean().optional()\n});\nconst windowsUserTaskStatusSchema = z$1.strictObject({\n\tinstalled: z$1.boolean(),\n\trunning: z$1.boolean(),\n\tenabled: z$1.boolean(),\n\tlegacy: z$1.boolean(),\n\tactionArguments: z$1.string().nullable()\n});\nconst windowsUserTaskActionSchema = z$1.strictObject({\n\texecutable: z$1.string().min(1),\n\targs: z$1.array(z$1.string()),\n\tenv: z$1.record(z$1.string(), z$1.string()),\n\tlogPath: z$1.string().min(1)\n});\nconst windowsUserTaskStoredActionSchema = windowsUserTaskActionSchema.extend({\n\tworkingDirectory: z$1.string().optional(),\n\tpendingJobPath: z$1.string().optional()\n}).transform(({ executable, args, env, logPath }) => ({\n\texecutable,\n\targs,\n\tenv,\n\tlogPath\n}));\n//#endregion\nexport { windowsUserTaskActionSchema, windowsUserTaskRequestSchema, windowsUserTaskStatusSchema, windowsUserTaskStoredActionSchema };\n\n//# sourceMappingURL=windows-user-task.js.map","import { quoteWindowsProcessArgument } from \"@openmeld/adapter-core/process-launch\";\nimport {\n type WindowsUserTaskAction,\n windowsUserTaskActionSchema,\n} from \"@openmeld/schemas\";\n\nexport const WINDOWS_TASK_ARGUMENT = \"--openmeld-windows-task\";\nconst DIRECT_TASK_PATTERN =\n /(?:^| )--openmeld-windows-task ([A-Za-z0-9+/=]+)$/u;\n\nexport function windowsDirectTaskArguments(\n input: WindowsUserTaskAction\n): string {\n const action = windowsUserTaskActionSchema.parse({\n executable: input.executable,\n args: input.args,\n env: input.env,\n logPath: input.logPath,\n });\n if (action.args.includes(WINDOWS_TASK_ARGUMENT)) {\n throw new Error(\"A Windows task cannot contain another task envelope.\");\n }\n const encoded = Buffer.from(JSON.stringify(action)).toString(\"base64\");\n return [\n ...action.args.map(quoteWindowsProcessArgument),\n WINDOWS_TASK_ARGUMENT,\n encoded,\n ].join(\" \");\n}\n\n// This is the Task Scheduler action itself, not a second configuration file.\n// Visible role arguments keep process inventory meaningful. Verify them against\n// the envelope so registration inspection and execution cannot disagree.\nexport function readWindowsDirectTaskAction(\n argumentsText: string\n): WindowsUserTaskAction | null {\n const encoded = argumentsText.match(DIRECT_TASK_PATTERN)?.[1];\n if (!encoded) {\n return null;\n }\n const action = windowsUserTaskActionSchema.parse(\n JSON.parse(Buffer.from(encoded, \"base64\").toString(\"utf8\"))\n );\n if (windowsDirectTaskArguments(action) !== argumentsText) {\n throw new Error(\"Windows task arguments do not match its launch envelope.\");\n }\n return action;\n}\n"],"mappings":";;;;;AAEA,MAAM,+BAA+B,IAAI,aAAa;CACrD,MAAM,IAAI,OAAO,CAAC,CAAC,IAAI,CAAC;CACxB,cAAc,IAAI,OAAO,CAAC,CAAC,IAAI,CAAC;CAChC,WAAW,IAAI,KAAK;EACnB;EACA;EACA;EACA;EACA;EACA;EACA;CACD,CAAC;CACD,YAAY,IAAI,OAAO,CAAC,CAAC,SAAS;CAClC,WAAW,IAAI,OAAO,CAAC,CAAC,SAAS;CACjC,kBAAkB,IAAI,OAAO,CAAC,CAAC,SAAS;CACxC,UAAU,IAAI,QAAQ,CAAC,CAAC,SAAS;AAClC,CAAC;AACD,MAAM,8BAA8B,IAAI,aAAa;CACpD,WAAW,IAAI,QAAQ;CACvB,SAAS,IAAI,QAAQ;CACrB,SAAS,IAAI,QAAQ;CACrB,QAAQ,IAAI,QAAQ;CACpB,iBAAiB,IAAI,OAAO,CAAC,CAAC,SAAS;AACxC,CAAC;AACD,MAAM,8BAA8B,IAAI,aAAa;CACpD,YAAY,IAAI,OAAO,CAAC,CAAC,IAAI,CAAC;CAC9B,MAAM,IAAI,MAAM,IAAI,OAAO,CAAC;CAC5B,KAAK,IAAI,OAAO,IAAI,OAAO,GAAG,IAAI,OAAO,CAAC;CAC1C,SAAS,IAAI,OAAO,CAAC,CAAC,IAAI,CAAC;AAC5B,CAAC;AACD,MAAM,oCAAoC,4BAA4B,OAAO;CAC5E,kBAAkB,IAAI,OAAO,CAAC,CAAC,SAAS;CACxC,gBAAgB,IAAI,OAAO,CAAC,CAAC,SAAS;AACvC,CAAC,CAAC,CAAC,WAAW,EAAE,YAAY,MAAM,KAAK,eAAe;CACrD;CACA;CACA;CACA;AACD,EAAE;;;AClCF,MAAa,wBAAwB;AACrC,MAAM,sBACJ;AAEF,SAAgB,2BACd,OACQ;CACR,MAAM,SAAS,4BAA4B,MAAM;EAC/C,YAAY,MAAM;EAClB,MAAM,MAAM;EACZ,KAAK,MAAM;EACX,SAAS,MAAM;CACjB,CAAC;CACD,IAAI,OAAO,KAAK,SAAA,yBAA8B,GAC5C,MAAM,IAAI,MAAM,sDAAsD;CAExE,MAAM,UAAU,OAAO,KAAK,KAAK,UAAU,MAAM,CAAC,CAAC,CAAC,SAAS,QAAQ;CACrE,OAAO;EACL,GAAG,OAAO,KAAK,IAAI,2BAA2B;EAC9C;EACA;CACF,CAAC,CAAC,KAAK,GAAG;AACZ;AAKA,SAAgB,4BACd,eAC8B;CAC9B,MAAM,UAAU,cAAc,MAAM,mBAAmB,CAAC,GAAG;CAC3D,IAAI,CAAC,SACH,OAAO;CAET,MAAM,SAAS,4BAA4B,MACzC,KAAK,MAAM,OAAO,KAAK,SAAS,QAAQ,CAAC,CAAC,SAAS,MAAM,CAAC,CAC5D;CACA,IAAI,2BAA2B,MAAM,MAAM,eACzC,MAAM,IAAI,MAAM,0DAA0D;CAE5E,OAAO;AACT"}

package/dist/windows-task-entry-CtRpUbiK.js ADDED Viewed

@@ -0,0 +1,50 @@
+#!/usr/bin/env node
+import { i as windowsUserTaskActionSchema, t as WINDOWS_TASK_ARGUMENT } from "./windows-task-command-COu_6Ke3.js";
+import { openSync, realpathSync, writeSync } from "node:fs";
+import { Console } from "node:console";
+import { Writable } from "node:stream";
+//#region src/local-service/lifecycle/windows-task-entry.ts
+function initializeWindowsTaskEntry() {
+	const args = process.argv.slice(2);
+	const index = args.indexOf(WINDOWS_TASK_ARGUMENT);
+	if (index === -1) return;
+	if (process.platform !== "win32" || index !== args.length - 2) throw new Error("Invalid Windows task invocation.");
+	const action = windowsUserTaskActionSchema.parse(JSON.parse(Buffer.from(args[index + 1] ?? "", "base64").toString("utf8")));
+	if (realpathSync.native(action.executable).toLowerCase() !== realpathSync.native(process.execPath).toLowerCase() || JSON.stringify(args.slice(0, index)) !== JSON.stringify(action.args)) throw new Error("The Windows task envelope does not match this process.");
+	for (const [key, value] of Object.entries(action.env)) process.env[key] = value;
+	const fd = openSync(action.logPath, "a");
+	const output = new Writable({ write(chunk, _encoding, callback) {
+		try {
+			let offset = 0;
+			while (offset < chunk.length) {
+				const written = writeSync(fd, chunk, offset, chunk.length - offset);
+				if (written === 0) throw new Error("Windows task log write made no progress.");
+				offset += written;
+			}
+			callback();
+		} catch (error) {
+			callback(error instanceof Error ? error : new Error(String(error)));
+		}
+	} });
+	Object.defineProperty(output, "fd", { value: fd });
+	Object.defineProperty(output, "isTTY", { value: false });
+	Object.defineProperty(process, "stdout", {
+		value: output,
+		configurable: true
+	});
+	Object.defineProperty(process, "stderr", {
+		value: output,
+		configurable: true
+	});
+	globalThis.console = new Console({
+		stdout: output,
+		stderr: output,
+		ignoreErrors: false
+	});
+	process.argv.splice(index + 2, 2);
+}
+//#endregion
+export { initializeWindowsTaskEntry };
+//# sourceMappingURL=windows-task-entry-CtRpUbiK.js.map

package/dist/windows-task-entry-CtRpUbiK.js.map ADDED Viewed

@@ -0,0 +1 @@

+ {"version":3,"file":"windows-task-entry-CtRpUbiK.js","names":[],"sources":["../src/local-service/lifecycle/windows-task-entry.ts"],"sourcesContent":["import { Console } from \"node:console\";\nimport { openSync, realpathSync, writeSync } from \"node:fs\";\nimport { Writable } from \"node:stream\";\nimport { windowsUserTaskActionSchema } from \"@openmeld/schemas\";\nimport { WINDOWS_TASK_ARGUMENT } from \"./windows-task-command\";\n\n// Run before importing business modules: they must see the registered lane and\n// log descriptors. Task Scheduler supervises this process directly; there is no\n// child process or stream-copy thread between it and the Service exit status.\nexport function initializeWindowsTaskEntry(): void {\n const args = process.argv.slice(2);\n const index = args.indexOf(WINDOWS_TASK_ARGUMENT);\n if (index === -1) {\n return;\n }\n if (process.platform !== \"win32\" || index !== args.length - 2) {\n throw new Error(\"Invalid Windows task invocation.\");\n }\n const action = windowsUserTaskActionSchema.parse(\n JSON.parse(Buffer.from(args[index + 1] ?? \"\", \"base64\").toString(\"utf8\"))\n );\n if (\n realpathSync.native(action.executable).toLowerCase() !==\n realpathSync.native(process.execPath).toLowerCase() ||\n JSON.stringify(args.slice(0, index)) !== JSON.stringify(action.args)\n ) {\n throw new Error(\"The Windows task envelope does not match this process.\");\n }\n for (const [key, value] of Object.entries(action.env)) {\n process.env[key] = value;\n }\n const fd = openSync(action.logPath, \"a\");\n const output = new Writable({\n write(chunk: Buffer, _encoding, callback) {\n try {\n let offset = 0;\n while (offset < chunk.length) {\n const written = writeSync(fd, chunk, offset, chunk.length - offset);\n if (written === 0) {\n throw new Error(\"Windows task log write made no progress.\");\n }\n offset += written;\n }\n callback();\n } catch (error) {\n callback(error instanceof Error ? error : new Error(String(error)));\n }\n },\n });\n // Explicit descriptors are also inherited by the private Execution Host and\n // maintenance subprocesses. Keep them open until the OS closes this process.\n Object.defineProperty(output, \"fd\", { value: fd });\n Object.defineProperty(output, \"isTTY\", { value: false });\n Object.defineProperty(process, \"stdout\", {\n value: output,\n configurable: true,\n });\n Object.defineProperty(process, \"stderr\", {\n value: output,\n configurable: true,\n });\n globalThis.console = new Console({\n stdout: output,\n stderr: output,\n ignoreErrors: false,\n });\n process.argv.splice(index + 2, 2);\n}\n"],"mappings":";;;;;;;AASA,SAAgB,6BAAmC;CACjD,MAAM,OAAO,QAAQ,KAAK,MAAM,CAAC;CACjC,MAAM,QAAQ,KAAK,QAAQ,qBAAqB;CAChD,IAAI,UAAU,IACZ;CAEF,IAAI,QAAQ,aAAa,WAAW,UAAU,KAAK,SAAS,GAC1D,MAAM,IAAI,MAAM,kCAAkC;CAEpD,MAAM,SAAS,4BAA4B,MACzC,KAAK,MAAM,OAAO,KAAK,KAAK,QAAQ,MAAM,IAAI,QAAQ,CAAC,CAAC,SAAS,MAAM,CAAC,CAC1E;CACA,IACE,aAAa,OAAO,OAAO,UAAU,CAAC,CAAC,YAAY,MACjD,aAAa,OAAO,QAAQ,QAAQ,CAAC,CAAC,YAAY,KACpD,KAAK,UAAU,KAAK,MAAM,GAAG,KAAK,CAAC,MAAM,KAAK,UAAU,OAAO,IAAI,GAEnE,MAAM,IAAI,MAAM,wDAAwD;CAE1E,KAAK,MAAM,CAAC,KAAK,UAAU,OAAO,QAAQ,OAAO,GAAG,GAClD,QAAQ,IAAI,OAAO;CAErB,MAAM,KAAK,SAAS,OAAO,SAAS,GAAG;CACvC,MAAM,SAAS,IAAI,SAAS,EAC1B,MAAM,OAAe,WAAW,UAAU;EACxC,IAAI;GACF,IAAI,SAAS;GACb,OAAO,SAAS,MAAM,QAAQ;IAC5B,MAAM,UAAU,UAAU,IAAI,OAAO,QAAQ,MAAM,SAAS,MAAM;IAClE,IAAI,YAAY,GACd,MAAM,IAAI,MAAM,0CAA0C;IAE5D,UAAU;GACZ;GACA,SAAS;EACX,SAAS,OAAO;GACd,SAAS,iBAAiB,QAAQ,QAAQ,IAAI,MAAM,OAAO,KAAK,CAAC,CAAC;EACpE;CACF,EACF,CAAC;CAGD,OAAO,eAAe,QAAQ,MAAM,EAAE,OAAO,GAAG,CAAC;CACjD,OAAO,eAAe,QAAQ,SAAS,EAAE,OAAO,MAAM,CAAC;CACvD,OAAO,eAAe,SAAS,UAAU;EACvC,OAAO;EACP,cAAc;CAChB,CAAC;CACD,OAAO,eAAe,SAAS,UAAU;EACvC,OAAO;EACP,cAAc;CAChB,CAAC;CACD,WAAW,UAAU,IAAI,QAAQ;EAC/B,QAAQ;EACR,QAAQ;EACR,cAAc;CAChB,CAAC;CACD,QAAQ,KAAK,OAAO,QAAQ,GAAG,CAAC;AAClC"}

package/dist/{windows-user-task-Bx2yYnOM.js → windows-user-task-B8NcRg_u.js} RENAMED Viewed

@@ -1,4 +1,4 @@
 #!/usr/bin/env node
-import { n as runWindowsUserTask, t as readWindowsTaskAction } from "./windows-user-task-CRGbKggi.js";
+import { n as runWindowsUserTask, t as readWindowsTaskAction } from "./windows-user-task-Io5QuEVR.js";
 export { readWindowsTaskAction, runWindowsUserTask };

package/dist/{windows-user-task-CRGbKggi.js → windows-user-task-Io5QuEVR.js} RENAMED Viewed

@@ -1,50 +1,78 @@
 #!/usr/bin/env node
-import { n as attachLockProcess, s as releaseLock } from "./lock-Bsl_ElWy.js";
-import { a as powerShellEncodedArguments, l as normalizeCommandEnvironment, s as resolveWindowsPowerShellPath } from "./process-identity-CNus0e6E.js";
-import { u as currentDaemonServiceLifecycleLock } from "./daemon-state-B44aq2nm.js";
-import * as z$1 from "zod/v4";
+import { n as attachLockProcess, s as releaseLock } from "./lock-iue1J2xy.js";
+import { n as WINDOWS_PROCESS_HELPER_FILENAME } from "./windows-artifact-DJ9DKjfc.js";
+import { l as resolveWindowsPowerShellPath, o as powerShellEncodedArguments, s as pruneWindowsBinaryBundle } from "./process-identity-BQLdaZdB.js";
+import { a as windowsUserTaskRequestSchema, i as windowsUserTaskActionSchema, n as readWindowsDirectTaskAction, o as windowsUserTaskStatusSchema, s as windowsUserTaskStoredActionSchema } from "./windows-task-command-COu_6Ke3.js";
+import { n as normalizeCommandEnvironment } from "./process-environment-BWSFeUu6.js";
+import { p as daemonRuntimeBundlesPath, u as currentDaemonServiceLifecycleLock } from "./daemon-state-Ca0WK5x0.js";
+import { createHash } from "node:crypto";
+import { dirname, join } from "node:path";
+import { copyFile, mkdir, mkdtemp, open, rename, rm, stat } from "node:fs/promises";
+import { createReadStream } from "node:fs";
 import { execFile } from "node:child_process";
-//#region ../../packages/schemas/dist/schemas/daemon/windows-user-task.js
-const windowsUserTaskRequestSchema = z$1.strictObject({
-	name: z$1.string().min(1),
-	legacyScript: z$1.string().min(1),
-	operation: z$1.enum([
-		"install",
-		"status",
-		"start",
-		"stop",
-		"enable",
-		"disable",
-		"uninstall"
-	]),
-	executable: z$1.string().optional(),
-	arguments: z$1.string().optional(),
-	workingDirectory: z$1.string().optional(),
-	periodic: z$1.boolean().optional()
-});
-const windowsUserTaskStatusSchema = z$1.strictObject({
-	installed: z$1.boolean(),
-	running: z$1.boolean(),
-	enabled: z$1.boolean(),
-	legacy: z$1.boolean(),
-	actionArguments: z$1.string().nullable()
-});
-const windowsUserTaskActionSchema = z$1.strictObject({
-	executable: z$1.string().min(1),
-	args: z$1.array(z$1.string()),
-	env: z$1.record(z$1.string(), z$1.string()),
-	logPath: z$1.string().min(1)
-});
-const windowsUserTaskStoredActionSchema = windowsUserTaskActionSchema.extend({
-	workingDirectory: z$1.string().optional(),
-	pendingJobPath: z$1.string().optional()
-}).transform(({ executable, args, env, logPath }) => ({
-	executable,
-	args,
-	env,
-	logPath
-}));
+//#region src/local-service/lifecycle/windows-service-binary.ts
+const FINGERPRINT_PATTERN = /^[0-9a-f]{64}$/u;
+function windowsMaintenanceBinaryPath(bundle, pathInput = {}) {
+	if (!(bundle.sourceDistFingerprint && FINGERPRINT_PATTERN.test(bundle.sourceDistFingerprint))) throw new Error("OpenMeld maintenance needs a verified Windows Service bundle.");
+	return join(daemonRuntimeBundlesPath(pathInput), `maintenance-${bundle.sourceDistFingerprint}`, "openmeld.exe");
+}
+async function prepareWindowsMaintenanceBinary(bundle, pathInput = {}) {
+	const target = windowsMaintenanceBinaryPath(bundle, pathInput);
+	const expected = bundle.sourceDistFingerprint;
+	if (await hashBinaryServiceBundle(target, true).catch(() => null) === expected) return target;
+	if (await hashBinaryServiceBundle(bundle.sourceEntryScriptPath, true) !== expected) throw new Error("The Windows maintenance source no longer matches its verified bundle.");
+	const directory = dirname(target);
+	if (await stat(directory).catch((error) => {
+		if (error.code === "ENOENT") return null;
+		throw error;
+	})) {
+		const result = await pruneWindowsBinaryBundle(directory);
+		if (result !== "removed" && result !== "absent") throw new Error("The existing Windows maintenance copy is still in use or contains unrecognized files.");
+	}
+	await mkdir(daemonRuntimeBundlesPath(pathInput), { recursive: true });
+	const temporary = await mkdtemp(join(daemonRuntimeBundlesPath(pathInput), ".maintenance-"));
+	try {
+		for (const name of ["openmeld.exe", WINDOWS_PROCESS_HELPER_FILENAME]) await copyFile(name === "openmeld.exe" ? bundle.sourceEntryScriptPath : join(dirname(bundle.sourceEntryScriptPath), name), join(temporary, name));
+		if (await hashBinaryServiceBundle(join(temporary, "openmeld.exe"), true) !== expected) throw new Error("The prepared Windows maintenance copy failed verification.");
+		await rename(temporary, directory);
+	} finally {
+		await rm(temporary, {
+			recursive: true,
+			force: true
+		});
+	}
+	return target;
+}
+function expectedBinaryServiceFingerprint(release) {
+	if (!release.platform.startsWith("windows-")) return release.sha256.toLowerCase();
+	if (!release.windows) throw new Error("The selected Windows Service has no native helper metadata.");
+	return fingerprint(release.sha256, release.windows.processHelper.sha256);
+}
+async function hashBinaryServiceBundle(executablePath, windows = process.platform === "win32") {
+	const executableHash = await hashFile(executablePath);
+	return windows ? fingerprint(executableHash, await hashFile(join(dirname(executablePath), WINDOWS_PROCESS_HELPER_FILENAME))) : executableHash;
+}
+function fingerprint(executableHash, helperHash) {
+	return createHash("sha256").update(JSON.stringify([executableHash.toLowerCase(), helperHash.toLowerCase()])).digest("hex");
+}
+async function hashFile(file) {
+	const hash = createHash("sha256");
+	for await (const chunk of createReadStream(file)) hash.update(chunk);
+	return hash.digest("hex");
+}
+/** A valid signature does not establish the required console-free PE subsystem. */
+async function verifyWindowsServiceSubsystem(file) {
+	const handle = await open(file, "r");
+	try {
+		const dos = Buffer.alloc(64);
+		if ((await handle.read(dos, 0, dos.length, 0)).bytesRead !== dos.length || dos.toString("ascii", 0, 2) !== "MZ") throw new Error("The Windows Service artifact is not a PE executable.");
+		const header = Buffer.alloc(94);
+		if ((await handle.read(header, 0, header.length, dos.readUInt32LE(60))).bytesRead !== header.length || header.toString("ascii", 0, 4) !== "PE\0\0" || header.readUInt16LE(4) !== 34404 || header.readUInt16LE(92) !== 2) throw new Error("The selected Windows Service must be a console-free x64 executable.");
+	} finally {
+		await handle.close();
+	}
+}
 //#endregion
 //#region src/local-service/lifecycle/windows-task-host.ts
 const WINDOWS_TASK_HOST_SOURCE = String.raw`
@@ -138,6 +166,18 @@ $scheduler.Connect()
 $folder = $scheduler.GetFolder('\')
 $name = $r.name + '-' + $sid
 $hostPath = $r.legacyScript + '${WINDOWS_TASK_HOST_SUFFIX}'
+$runtimeRoot = [IO.Path]::GetDirectoryName($r.legacyScript)
+function Read-OwnedDirectAction($path, $arguments) {
+  if ($arguments -notmatch '(?:^| )--openmeld-windows-task ([A-Za-z0-9+/=]+)$') { return $null }
+  $c = ConvertFrom-Json ([Text.Encoding]::UTF8.GetString([Convert]::FromBase64String($Matches[1])))
+  $bundles = [IO.Path]::GetFullPath((Join-Path $runtimeRoot 'bundles')) + '\'
+  $fullPath = [IO.Path]::GetFullPath($path)
+  if ($c.executable -ne $path -or !$fullPath.StartsWith($bundles, [StringComparison]::OrdinalIgnoreCase) -or [IO.Path]::GetFileName($path) -ne 'openmeld.exe' -or !$c.env.OPENMELD_HOME -or [IO.Path]::GetFullPath((Join-Path $c.env.OPENMELD_HOME 'runtime\daemon')) -ne [IO.Path]::GetFullPath($runtimeRoot)) {
+    throw 'The Windows task does not belong to this OpenMeld installation.'
+  }
+  return $c
+}
+$existingDirect = $null
 $task = $null
 try { $task = $folder.GetTask($name) } catch {
   if ($_.Exception.GetBaseException().HResult -ne -2147024894) { throw }
@@ -147,7 +187,8 @@ if ($task) {
   $taskSid = $principal.UserId
   if ($taskSid -notmatch '^S-\d-') { $taskSid = ([Security.Principal.NTAccount]$taskSid).Translate([Security.Principal.SecurityIdentifier]).Value }
   $actionPath = $task.Definition.Actions.Item(1).Path
-  if ($taskSid -ne $sid -or $principal.LogonType -ne 3 -or $principal.RunLevel -ne 0 -or $task.Definition.Actions.Count -ne 1 -or ($actionPath -ne (Join-Path $PSHOME 'powershell.exe') -and $actionPath -ne $hostPath)) {
+  $existingDirect = Read-OwnedDirectAction $actionPath $task.Definition.Actions.Item(1).Arguments
+  if ($taskSid -ne $sid -or $principal.LogonType -ne 3 -or $principal.RunLevel -ne 0 -or $task.Definition.Actions.Count -ne 1 -or (!$existingDirect -and $actionPath -ne (Join-Path $PSHOME 'powershell.exe') -and $actionPath -ne $hostPath)) {
     throw 'An existing OpenMeld task uses a different user or launch configuration. Resolve that installation before continuing.'
   }
 }
@@ -160,9 +201,16 @@ if ($legacy -and $legacy.PathName.Trim('"') -ne $r.legacyScript) {
 switch ($r.operation) {
   'install' {
     if ($legacy -and $legacy.State -ne 'Stopped') { throw 'The previous OpenMeld Service must finish stopping before migration.' }
-    if ($task -and $task.State -eq 4) { throw 'OpenMeld cannot replace a background task while it is running.' }
-    if ($r.executable -ne (Join-Path $PSHOME 'powershell.exe')) { throw 'OpenMeld tasks must launch the system PowerShell action.' }
-    ${WINDOWS_TASK_HOST_INSTALL_SCRIPT}
+    $nextDirect = Read-OwnedDirectAction $r.executable $r.arguments
+    # A running maintenance invocation keeps its immutable copy and lease. Only
+    # subsequent invocations select the new copy. Main Service replacement still
+    # requires the existing drain and stopped-state proof.
+    $maintenanceUpdate = $r.periodic -and $existingDirect -and $nextDirect -and $existingDirect.args.Count -eq 2 -and $nextDirect.args.Count -eq 2 -and $existingDirect.args[0] -eq 'service' -and $existingDirect.args[1] -eq 'update-worker' -and $nextDirect.args[0] -eq 'service' -and $nextDirect.args[1] -eq 'update-worker'
+    if ($task -and $task.State -eq 4 -and !$maintenanceUpdate) { throw 'OpenMeld cannot replace a background task while it is running.' }
+    if (!$nextDirect) {
+      if ($r.executable -ne (Join-Path $PSHOME 'powershell.exe')) { throw 'OpenMeld tasks require a verified background executable.' }
+      ${WINDOWS_TASK_HOST_INSTALL_SCRIPT}
+    }
     $definition = $scheduler.NewTask(0)
     $definition.RegistrationInfo.Description = 'OpenMeld background process for the signed-in user.'
     $definition.Principal.UserId = $sid
@@ -187,7 +235,7 @@ switch ($r.operation) {
       $timer.Repetition.Interval = 'PT1H'
     }
     $action = $definition.Actions.Create(0)
-    $action.Path = $hostPath
+    $action.Path = $(if ($nextDirect) { $r.executable } else { $hostPath })
     $action.Arguments = $r.arguments
     $action.WorkingDirectory = $r.workingDirectory
     $task = $folder.RegisterTaskDefinition($name, $definition, 6, $sid, $null, 3, $null)
@@ -274,6 +322,8 @@ exit $exitCode
 const ENCODED_ACTION_PATTERN = /-EncodedCommand ([A-Za-z0-9+/=]+)$/u;
 const ACTION_DATA_PATTERN = /FromBase64String\('([A-Za-z0-9+/=]+)'\)/u;
 function readWindowsTaskAction(argumentsText) {
+	const direct = readWindowsDirectTaskAction(argumentsText);
+	if (direct) return direct;
 	const encoded = argumentsText.match(ENCODED_ACTION_PATTERN)?.[1];
 	const data = encoded && Buffer.from(encoded, "base64").toString("utf16le").match(ACTION_DATA_PATTERN)?.[1];
 	if (!data) throw new Error("Windows task does not contain an OpenMeld launch command.");
@@ -283,6 +333,13 @@ function readWindowsTaskAction(argumentsText) {
 }
 async function runWindowsUserTask(request) {
 	const lock = currentDaemonServiceLifecycleLock();
+	if (request.operation === "install" && request.arguments) {
+		const direct = readWindowsDirectTaskAction(request.arguments);
+		if (direct) {
+			if (request.executable !== direct.executable) throw new Error("The Windows task executable does not match its launch envelope.");
+			await verifyWindowsServiceSubsystem(direct.executable);
+		}
+	}
 	const payload = Buffer.from(JSON.stringify(windowsUserTaskRequestSchema.parse(request))).toString("base64");
 	let finish;
 	const completed = new Promise((resolve) => {
@@ -323,6 +380,6 @@ async function runWindowsUserTask(request) {
 	}
 }
 //#endregion
-export { windowsTaskActionArguments as i, runWindowsUserTask as n, windowsPowerShellPath as r, readWindowsTaskAction as t };
+export { expectedBinaryServiceFingerprint as a, verifyWindowsServiceSubsystem as c, windowsTaskActionArguments as i, windowsMaintenanceBinaryPath as l, runWindowsUserTask as n, hashBinaryServiceBundle as o, windowsPowerShellPath as r, prepareWindowsMaintenanceBinary as s, readWindowsTaskAction as t };
-//# sourceMappingURL=windows-user-task-CRGbKggi.js.map
+//# sourceMappingURL=windows-user-task-Io5QuEVR.js.map